@paperclipai_dld/server 2026.319.0-canary.3

package/dist/routes/plugin-ui-static.js

@@ -0,0 +1,411 @@
+/**
+ * @fileoverview Plugin UI static file serving route
+ *
+ * Serves plugin UI bundles from the plugin's dist/ui/ directory under the
+ * `/_plugins/:pluginId/ui/*` namespace. This is specified in PLUGIN_SPEC.md
+ * §19.0.3 (Bundle Serving).
+ *
+ * Plugin UI bundles are pre-built ESM that the host serves as static assets.
+ * The host dynamically imports the plugin's UI entry module from this path,
+ * resolves the named export declared in `ui.slots[].exportName`, and mounts
+ * it into the extension slot.
+ *
+ * Security:
+ * - Path traversal is prevented by resolving the requested path and verifying
+ *   it stays within the plugin's UI directory.
+ * - Only plugins in 'ready' status have their UI served.
+ * - Only plugins that declare `entrypoints.ui` serve UI bundles.
+ *
+ * Cache Headers:
+ * - Files with content-hash patterns in their name (e.g., `index-a1b2c3d4.js`)
+ *   receive `Cache-Control: public, max-age=31536000, immutable`.
+ * - Other files receive `Cache-Control: public, max-age=0, must-revalidate`
+ *   with ETag-based conditional request support.
+ *
+ * @module server/routes/plugin-ui-static
+ * @see doc/plugins/PLUGIN_SPEC.md §19.0.3 — Bundle Serving
+ * @see doc/plugins/PLUGIN_SPEC.md §25.4.5 — Frontend Cache Invalidation
+ */
+import { Router } from "express";
+import path from "node:path";
+import fs from "node:fs";
+import crypto from "node:crypto";
+import { pluginRegistryService } from "../services/plugin-registry.js";
+import { logger } from "../middleware/logger.js";
+// ---------------------------------------------------------------------------
+// Constants
+// ---------------------------------------------------------------------------
+/**
+ * Regex to detect content-hashed filenames.
+ *
+ * Matches patterns like:
+ * - `index-a1b2c3d4.js`
+ * - `styles.abc123def.css`
+ * - `chunk-ABCDEF01.mjs`
+ *
+ * The hash portion must be at least 8 hex characters to avoid false positives.
+ */
+const CONTENT_HASH_PATTERN = /[.-][a-fA-F0-9]{8,}\.\w+$/;
+/**
+ * Cache-Control header for content-hashed files.
+ * These files are immutable by definition (the hash changes when content changes).
+ */
+/** 1 year in seconds — standard for content-hashed immutable resources. */
+const ONE_YEAR_SECONDS = 365 * 24 * 60 * 60; // 31_536_000
+const CACHE_CONTROL_IMMUTABLE = `public, max-age=${ONE_YEAR_SECONDS}, immutable`;
+/**
+ * Cache-Control header for non-hashed files.
+ * These files must be revalidated on each request (ETag-based).
+ */
+const CACHE_CONTROL_REVALIDATE = "public, max-age=0, must-revalidate";
+/**
+ * MIME types for common plugin UI bundle file extensions.
+ */
+const MIME_TYPES = {
+    ".js": "application/javascript; charset=utf-8",
+    ".mjs": "application/javascript; charset=utf-8",
+    ".css": "text/css; charset=utf-8",
+    ".json": "application/json; charset=utf-8",
+    ".map": "application/json; charset=utf-8",
+    ".html": "text/html; charset=utf-8",
+    ".svg": "image/svg+xml",
+    ".png": "image/png",
+    ".jpg": "image/jpeg",
+    ".jpeg": "image/jpeg",
+    ".gif": "image/gif",
+    ".webp": "image/webp",
+    ".woff": "font/woff",
+    ".woff2": "font/woff2",
+    ".ttf": "font/ttf",
+    ".eot": "application/vnd.ms-fontobject",
+    ".ico": "image/x-icon",
+    ".txt": "text/plain; charset=utf-8",
+};
+// ---------------------------------------------------------------------------
+// Helper
+// ---------------------------------------------------------------------------
+/**
+ * Resolve a plugin's UI directory from its package location.
+ *
+ * The plugin's `packageName` is stored in the DB. We resolve the package path
+ * from the local plugin directory (DEFAULT_LOCAL_PLUGIN_DIR) by looking in
+ * `node_modules`. If the plugin was installed from a local path, the manifest
+ * `entrypoints.ui` path is resolved relative to the package directory.
+ *
+ * @param localPluginDir - The plugin installation directory
+ * @param packageName - The npm package name
+ * @param entrypointsUi - The UI entrypoint path from the manifest (e.g., "./dist/ui/")
+ * @returns Absolute path to the UI directory, or null if not found
+ */
+export function resolvePluginUiDir(localPluginDir, packageName, entrypointsUi, packagePath) {
+    // For local-path installs, prefer the persisted package path.
+    if (packagePath) {
+        const resolvedPackagePath = path.resolve(packagePath);
+        if (fs.existsSync(resolvedPackagePath)) {
+            const uiDirFromPackagePath = path.resolve(resolvedPackagePath, entrypointsUi);
+            if (uiDirFromPackagePath.startsWith(resolvedPackagePath)
+                && fs.existsSync(uiDirFromPackagePath)) {
+                return uiDirFromPackagePath;
+            }
+        }
+    }
+    // Resolve the package root within the local plugin directory's node_modules.
+    // npm installs go to <localPluginDir>/node_modules/<packageName>/
+    let packageRoot;
+    if (packageName.startsWith("@")) {
+        // Scoped package: @scope/name -> node_modules/@scope/name
+        packageRoot = path.join(localPluginDir, "node_modules", ...packageName.split("/"));
+    }
+    else {
+        packageRoot = path.join(localPluginDir, "node_modules", packageName);
+    }
+    // If the standard location doesn't exist, the plugin may have been installed
+    // from a local path. Try to check if the package.json is accessible at the
+    // computed path or if the package is found elsewhere.
+    if (!fs.existsSync(packageRoot)) {
+        // For local-path installs, the packageName may be a directory that doesn't
+        // live inside node_modules. Check if the package exists directly at the
+        // localPluginDir level.
+        const directPath = path.join(localPluginDir, packageName);
+        if (fs.existsSync(directPath)) {
+            packageRoot = directPath;
+        }
+        else {
+            return null;
+        }
+    }
+    // Resolve the UI directory relative to the package root
+    const uiDir = path.resolve(packageRoot, entrypointsUi);
+    // Verify the resolved UI directory exists and is actually inside the package
+    if (!fs.existsSync(uiDir)) {
+        return null;
+    }
+    return uiDir;
+}
+/**
+ * Compute an ETag from file stat (size + mtime).
+ * This is a lightweight approach that avoids reading the file content.
+ */
+function computeETag(size, mtimeMs) {
+    const ETAG_VERSION = "v2";
+    const hash = crypto
+        .createHash("md5")
+        .update(`${ETAG_VERSION}:${size}-${mtimeMs}`)
+        .digest("hex")
+        .slice(0, 16);
+    return `"${hash}"`;
+}
+/**
+ * Create an Express router that serves plugin UI static files.
+ *
+ * This route handles `GET /_plugins/:pluginId/ui/*` requests by:
+ * 1. Looking up the plugin in the registry by ID or key
+ * 2. Verifying the plugin is in 'ready' status with UI declared
+ * 3. Resolving the file path within the plugin's dist/ui/ directory
+ * 4. Serving the file with appropriate cache headers
+ *
+ * @param db - Database connection for plugin registry lookups
+ * @param options - Configuration options
+ * @returns Express router
+ */
+export function pluginUiStaticRoutes(db, options) {
+    const router = Router();
+    const registry = pluginRegistryService(db);
+    const log = logger.child({ service: "plugin-ui-static" });
+    /**
+     * GET /_plugins/:pluginId/ui/*
+     *
+     * Serve a static file from a plugin's UI bundle directory.
+     *
+     * The :pluginId parameter accepts either:
+     * - Database UUID
+     * - Plugin key (e.g., "acme.linear")
+     *
+     * The wildcard captures the relative file path within the UI directory.
+     *
+     * Cache strategy:
+     * - Content-hashed filenames → immutable, 1-year max-age
+     * - Other files → must-revalidate with ETag
+     */
+    router.get("/_plugins/:pluginId/ui/*filePath", async (req, res) => {
+        const { pluginId } = req.params;
+        // Extract the relative file path from the named wildcard.
+        // In Express 5 with path-to-regexp v8, named wildcards may return
+        // an array of path segments or a single string.
+        const rawParam = req.params.filePath;
+        const rawFilePath = Array.isArray(rawParam)
+            ? rawParam.join("/")
+            : rawParam;
+        if (!rawFilePath || rawFilePath.length === 0) {
+            res.status(400).json({ error: "File path is required" });
+            return;
+        }
+        // Step 1: Look up the plugin
+        let plugin = null;
+        try {
+            plugin = await registry.getById(pluginId);
+        }
+        catch (error) {
+            const maybeCode = typeof error === "object" && error !== null && "code" in error
+                ? error.code
+                : undefined;
+            if (maybeCode !== "22P02") {
+                throw error;
+            }
+        }
+        if (!plugin) {
+            plugin = await registry.getByKey(pluginId);
+        }
+        if (!plugin) {
+            res.status(404).json({ error: "Plugin not found" });
+            return;
+        }
+        // Step 2: Verify the plugin is ready and has UI declared
+        if (plugin.status !== "ready") {
+            res.status(403).json({
+                error: `Plugin UI is not available (status: ${plugin.status})`,
+            });
+            return;
+        }
+        const manifest = plugin.manifestJson;
+        if (!manifest?.entrypoints?.ui) {
+            res.status(404).json({ error: "Plugin does not declare a UI bundle" });
+            return;
+        }
+        // Step 2b: Check for devUiUrl in plugin config — proxy to local dev server
+        // when a plugin author has configured a dev server URL for hot-reload.
+        // See PLUGIN_SPEC.md §27.2 — Local Development Workflow
+        try {
+            const configRow = await registry.getConfig(plugin.id);
+            const devUiUrl = configRow &&
+                typeof configRow === "object" &&
+                "configJson" in configRow &&
+                configRow.configJson?.devUiUrl;
+            if (typeof devUiUrl === "string" && devUiUrl.length > 0) {
+                // Dev proxy is only available in development mode
+                if (process.env.NODE_ENV === "production") {
+                    log.warn({ pluginId: plugin.id }, "plugin-ui-static: devUiUrl ignored in production");
+                    // Fall through to static file serving below
+                }
+                else {
+                    // Guard against rawFilePath overriding the base URL via protocol
+                    // scheme (e.g. "https://evil.com/x") or protocol-relative paths
+                    // (e.g. "//evil.com/x") which cause `new URL(path, base)` to
+                    // ignore the base entirely.
+                    // Normalize percent-encoding so encoded slashes (%2F) can't bypass
+                    // the protocol/path checks below.
+                    let decodedPath;
+                    try {
+                        decodedPath = decodeURIComponent(rawFilePath);
+                    }
+                    catch {
+                        res.status(400).json({ error: "Invalid file path" });
+                        return;
+                    }
+                    if (decodedPath.includes("://") ||
+                        decodedPath.startsWith("//") ||
+                        decodedPath.startsWith("\\\\")) {
+                        res.status(400).json({ error: "Invalid file path" });
+                        return;
+                    }
+                    // Proxy the request to the dev server
+                    const targetUrl = new URL(rawFilePath, devUiUrl.endsWith("/") ? devUiUrl : devUiUrl + "/");
+                    // SSRF protection: only allow http/https and localhost targets for dev proxy
+                    if (targetUrl.protocol !== "http:" && targetUrl.protocol !== "https:") {
+                        res.status(400).json({ error: "devUiUrl must use http or https protocol" });
+                        return;
+                    }
+                    // Dev proxy is restricted to loopback addresses only.
+                    // Validate the *constructed* targetUrl hostname (not the base) to
+                    // catch any path-based override that slipped past the checks above.
+                    const devHost = targetUrl.hostname;
+                    const isLoopback = devHost === "localhost" ||
+                        devHost === "127.0.0.1" ||
+                        devHost === "::1" ||
+                        devHost === "[::1]";
+                    if (!isLoopback) {
+                        log.warn({ pluginId: plugin.id, devUiUrl, host: devHost }, "plugin-ui-static: devUiUrl must target localhost, rejecting proxy");
+                        res.status(400).json({ error: "devUiUrl must target localhost" });
+                        return;
+                    }
+                    log.debug({ pluginId: plugin.id, devUiUrl, targetUrl: targetUrl.href }, "plugin-ui-static: proxying to devUiUrl");
+                    try {
+                        const controller = new AbortController();
+                        const timeout = setTimeout(() => controller.abort(), 10_000);
+                        try {
+                            const upstream = await fetch(targetUrl.href, { signal: controller.signal });
+                            if (!upstream.ok) {
+                                res.status(upstream.status).json({
+                                    error: `Dev server returned ${upstream.status}`,
+                                });
+                                return;
+                            }
+                            const contentType = upstream.headers.get("content-type");
+                            if (contentType)
+                                res.set("Content-Type", contentType);
+                            res.set("Cache-Control", "no-cache, no-store, must-revalidate");
+                            const body = await upstream.arrayBuffer();
+                            res.send(Buffer.from(body));
+                            return;
+                        }
+                        finally {
+                            clearTimeout(timeout);
+                        }
+                    }
+                    catch (proxyErr) {
+                        log.warn({
+                            pluginId: plugin.id,
+                            devUiUrl,
+                            err: proxyErr instanceof Error ? proxyErr.message : String(proxyErr),
+                        }, "plugin-ui-static: failed to proxy to devUiUrl, falling back to static");
+                        // Fall through to static serving below
+                    }
+                }
+            }
+        }
+        catch {
+            // Config lookup failure is non-fatal — fall through to static serving
+        }
+        // Step 3: Resolve the plugin's UI directory
+        const uiDir = resolvePluginUiDir(options.localPluginDir, plugin.packageName, manifest.entrypoints.ui, plugin.packagePath);
+        if (!uiDir) {
+            log.warn({ pluginId: plugin.id, pluginKey: plugin.pluginKey, packageName: plugin.packageName }, "plugin-ui-static: UI directory not found on disk");
+            res.status(404).json({ error: "Plugin UI directory not found" });
+            return;
+        }
+        // Step 4: Resolve the requested file path and prevent traversal (including symlinks)
+        const resolvedFilePath = path.resolve(uiDir, rawFilePath);
+        // Step 5: Check that the file exists and is a regular file
+        let fileStat;
+        try {
+            fileStat = fs.statSync(resolvedFilePath);
+        }
+        catch {
+            res.status(404).json({ error: "File not found" });
+            return;
+        }
+        // Security: resolve symlinks via realpathSync and verify containment.
+        // This prevents symlink-based traversal that string-based startsWith misses.
+        let realFilePath;
+        let realUiDir;
+        try {
+            realFilePath = fs.realpathSync(resolvedFilePath);
+            realUiDir = fs.realpathSync(uiDir);
+        }
+        catch {
+            res.status(404).json({ error: "File not found" });
+            return;
+        }
+        const relative = path.relative(realUiDir, realFilePath);
+        if (relative.startsWith("..") || path.isAbsolute(relative)) {
+            res.status(403).json({ error: "Access denied" });
+            return;
+        }
+        if (!fileStat.isFile()) {
+            res.status(404).json({ error: "File not found" });
+            return;
+        }
+        // Step 6: Determine cache strategy based on filename
+        const basename = path.basename(resolvedFilePath);
+        const isContentHashed = CONTENT_HASH_PATTERN.test(basename);
+        // Step 7: Set cache headers
+        if (isContentHashed) {
+            res.set("Cache-Control", CACHE_CONTROL_IMMUTABLE);
+        }
+        else {
+            res.set("Cache-Control", CACHE_CONTROL_REVALIDATE);
+            // Compute and set ETag for conditional request support
+            const etag = computeETag(fileStat.size, fileStat.mtimeMs);
+            res.set("ETag", etag);
+            // Check If-None-Match for 304 Not Modified
+            const ifNoneMatch = req.headers["if-none-match"];
+            if (ifNoneMatch === etag) {
+                res.status(304).end();
+                return;
+            }
+        }
+        // Step 8: Set Content-Type
+        const ext = path.extname(resolvedFilePath).toLowerCase();
+        const contentType = MIME_TYPES[ext];
+        if (contentType) {
+            res.set("Content-Type", contentType);
+        }
+        // Step 9: Set CORS headers (plugin UI may be loaded from different origin in dev)
+        res.set("Access-Control-Allow-Origin", "*");
+        // Step 10: Send the file
+        // The plugin source can live in Git worktrees (e.g. ".worktrees/...").
+        // `send` defaults to dotfiles:"ignore", which treats dot-directories as
+        // not found. We already enforce traversal safety above, so allow dot paths.
+        res.sendFile(resolvedFilePath, { dotfiles: "allow" }, (err) => {
+            if (err) {
+                log.error({ err, pluginId: plugin.id, filePath: resolvedFilePath }, "plugin-ui-static: error sending file");
+                // Only send error if headers haven't been sent yet
+                if (!res.headersSent) {
+                    res.status(500).json({ error: "Failed to serve file" });
+                }
+            }
+        });
+    });
+    return router;
+}
+//# sourceMappingURL=plugin-ui-static.js.map

package/dist/routes/plugin-ui-static.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-ui-static.js","sourceRoot":"","sources":["../../src/routes/plugin-ui-static.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,MAAM,MAAM,aAAa,CAAC;AAEjC,OAAO,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AACvE,OAAO,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AAEjD,8EAA8E;AAC9E,YAAY;AACZ,8EAA8E;AAE9E;;;;;;;;;GASG;AACH,MAAM,oBAAoB,GAAG,2BAA2B,CAAC;AAEzD;;;GAGG;AACH,2EAA2E;AAC3E,MAAM,gBAAgB,GAAG,GAAG,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,aAAa;AAC1D,MAAM,uBAAuB,GAAG,mBAAmB,gBAAgB,aAAa,CAAC;AAEjF;;;GAGG;AACH,MAAM,wBAAwB,GAAG,oCAAoC,CAAC;AAEtE;;GAEG;AACH,MAAM,UAAU,GAA2B;IACzC,KAAK,EAAE,uCAAuC;IAC9C,MAAM,EAAE,uCAAuC;IAC/C,MAAM,EAAE,yBAAyB;IACjC,OAAO,EAAE,iCAAiC;IAC1C,MAAM,EAAE,iCAAiC;IACzC,OAAO,EAAE,0BAA0B;IACnC,MAAM,EAAE,eAAe;IACvB,MAAM,EAAE,WAAW;IACnB,MAAM,EAAE,YAAY;IACpB,OAAO,EAAE,YAAY;IACrB,MAAM,EAAE,WAAW;IACnB,OAAO,EAAE,YAAY;IACrB,OAAO,EAAE,WAAW;IACpB,QAAQ,EAAE,YAAY;IACtB,MAAM,EAAE,UAAU;IAClB,MAAM,EAAE,+BAA+B;IACvC,MAAM,EAAE,cAAc;IACtB,MAAM,EAAE,2BAA2B;CACpC,CAAC;AAEF,8EAA8E;AAC9E,SAAS;AACT,8EAA8E;AAE9E;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,kBAAkB,CAChC,cAAsB,EACtB,WAAmB,EACnB,aAAqB,EACrB,WAA2B;IAE3B,8DAA8D;IAC9D,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,mBAAmB,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QACtD,IAAI,EAAE,CAAC,UAAU,CAAC,mBAAmB,CAAC,EAAE,CAAC;YACvC,MAAM,oBAAoB,GAAG,IAAI,CAAC,OAAO,CAAC,mBAAmB,EAAE,aAAa,CAAC,CAAC;YAC9E,IACE,oBAAoB,CAAC,UAAU,CAAC,mBAAmB,CAAC;mBACjD,EAAE,CAAC,UAAU,CAAC,oBAAoB,CAAC,EACtC,CAAC;gBACD,OAAO,oBAAoB,CAAC;YAC9B,CAAC;QACH,CAAC;IACH,CAAC;IAED,6EAA6E;IAC7E,kEAAkE;IAClE,IAAI,WAAmB,CAAC;IACxB,IAAI,WAAW,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAChC,0DAA0D;QAC1D,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,cAAc,EAAE,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IACrF,CAAC;SAAM,CAAC;QACN,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,cAAc,EAAE,WAAW,CAAC,CAAC;IACvE,CAAC;IAED,6EAA6E;IAC7E,2EAA2E;IAC3E,sDAAsD;IACtD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAChC,2EAA2E;QAC3E,wEAAwE;QACxE,wBAAwB;QACxB,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;QAC1D,IAAI,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC9B,WAAW,GAAG,UAAU,CAAC;QAC3B,CAAC;aAAM,CAAC;YACN,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,wDAAwD;IACxD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IAEvD,6EAA6E;IAC7E,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,SAAS,WAAW,CAAC,IAAY,EAAE,OAAe;IAChD,MAAM,YAAY,GAAG,IAAI,CAAC;IAC1B,MAAM,IAAI,GAAG,MAAM;SAChB,UAAU,CAAC,KAAK,CAAC;SACjB,MAAM,CAAC,GAAG,YAAY,IAAI,IAAI,IAAI,OAAO,EAAE,CAAC;SAC5C,MAAM,CAAC,KAAK,CAAC;SACb,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAChB,OAAO,IAAI,IAAI,GAAG,CAAC;AACrB,CAAC;AAkBD;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,oBAAoB,CAAC,EAAM,EAAE,OAAmC;IAC9E,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;IACxB,MAAM,QAAQ,GAAG,qBAAqB,CAAC,EAAE,CAAC,CAAC;IAC3C,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC,CAAC;IAE1D;;;;;;;;;;;;;;OAcG;IACH,MAAM,CAAC,GAAG,CAAC,kCAAkC,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAChE,MAAM,EAAE,QAAQ,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;QAEhC,0DAA0D;QAC1D,kEAAkE;QAClE,gDAAgD;QAChD,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC;QACrC,MAAM,WAAW,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;YACzC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC;YACpB,CAAC,CAAC,QAA8B,CAAC;QAEnC,IAAI,CAAC,WAAW,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;YACzD,OAAO;QACT,CAAC;QAED,6BAA6B;QAC7B,IAAI,MAAM,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC5C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,SAAS,GACb,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,IAAI,KAAK;gBAC5D,CAAC,CAAE,KAA4B,CAAC,IAAI;gBACpC,CAAC,CAAC,SAAS,CAAC;YAChB,IAAI,SAAS,KAAK,OAAO,EAAE,CAAC;gBAC1B,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;QACD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC7C,CAAC;QAED,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC,CAAC;YACpD,OAAO;QACT,CAAC;QAED,yDAAyD;QACzD,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;YAC9B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,KAAK,EAAE,uCAAuC,MAAM,CAAC,MAAM,GAAG;aAC/D,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,CAAC,YAAY,CAAC;QACrC,IAAI,CAAC,QAAQ,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;YAC/B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,qCAAqC,EAAE,CAAC,CAAC;YACvE,OAAO;QACT,CAAC;QAED,2EAA2E;QAC3E,uEAAuE;QACvE,wDAAwD;QACxD,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACtD,MAAM,QAAQ,GACZ,SAAS;gBACT,OAAO,SAAS,KAAK,QAAQ;gBAC7B,YAAY,IAAI,SAAS;gBACxB,SAAqD,CAAC,UAAU,EAAE,QAAQ,CAAC;YAE9E,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxD,kDAAkD;gBAClD,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,EAAE,CAAC;oBAC1C,GAAG,CAAC,IAAI,CACN,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,EACvB,kDAAkD,CACnD,CAAC;oBACF,4CAA4C;gBAC9C,CAAC;qBAAM,CAAC;oBACN,iEAAiE;oBACjE,gEAAgE;oBAChE,6DAA6D;oBAC7D,4BAA4B;oBAC5B,mEAAmE;oBACnE,kCAAkC;oBAClC,IAAI,WAAmB,CAAC;oBACxB,IAAI,CAAC;wBACH,WAAW,GAAG,kBAAkB,CAAC,WAAW,CAAC,CAAC;oBAChD,CAAC;oBAAC,MAAM,CAAC;wBACP,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;wBACrD,OAAO;oBACT,CAAC;oBACD,IACE,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC;wBAC3B,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC;wBAC5B,WAAW,CAAC,UAAU,CAAC,MAAM,CAAC,EAC9B,CAAC;wBACD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;wBACrD,OAAO;oBACT,CAAC;oBAED,sCAAsC;oBACtC,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,GAAG,GAAG,CAAC,CAAC;oBAE3F,6EAA6E;oBAC7E,IAAI,SAAS,CAAC,QAAQ,KAAK,OAAO,IAAI,SAAS,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;wBACtE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,0CAA0C,EAAE,CAAC,CAAC;wBAC5E,OAAO;oBACT,CAAC;oBAED,sDAAsD;oBACtD,kEAAkE;oBAClE,oEAAoE;oBACpE,MAAM,OAAO,GAAG,SAAS,CAAC,QAAQ,CAAC;oBACnC,MAAM,UAAU,GACd,OAAO,KAAK,WAAW;wBACvB,OAAO,KAAK,WAAW;wBACvB,OAAO,KAAK,KAAK;wBACjB,OAAO,KAAK,OAAO,CAAC;oBACtB,IAAI,CAAC,UAAU,EAAE,CAAC;wBAChB,GAAG,CAAC,IAAI,CACN,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,EAChD,mEAAmE,CACpE,CAAC;wBACF,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gCAAgC,EAAE,CAAC,CAAC;wBAClE,OAAO;oBACT,CAAC;oBAED,GAAG,CAAC,KAAK,CACP,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,CAAC,IAAI,EAAE,EAC5D,wCAAwC,CACzC,CAAC;oBAEF,IAAI,CAAC;wBACH,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;wBACzC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,MAAM,CAAC,CAAC;wBAC7D,IAAI,CAAC;4BACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;4BAC5E,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gCACjB,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC;oCAC/B,KAAK,EAAE,uBAAuB,QAAQ,CAAC,MAAM,EAAE;iCAChD,CAAC,CAAC;gCACH,OAAO;4BACT,CAAC;4BAED,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;4BACzD,IAAI,WAAW;gCAAE,GAAG,CAAC,GAAG,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;4BACtD,GAAG,CAAC,GAAG,CAAC,eAAe,EAAE,qCAAqC,CAAC,CAAC;4BAEhE,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC;4BAC1C,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;4BAC5B,OAAO;wBACT,CAAC;gCAAS,CAAC;4BACT,YAAY,CAAC,OAAO,CAAC,CAAC;wBACxB,CAAC;oBACH,CAAC;oBAAC,OAAO,QAAQ,EAAE,CAAC;wBAClB,GAAG,CAAC,IAAI,CACN;4BACE,QAAQ,EAAE,MAAM,CAAC,EAAE;4BACnB,QAAQ;4BACR,GAAG,EAAE,QAAQ,YAAY,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC;yBACrE,EACD,uEAAuE,CACxE,CAAC;wBACF,uCAAuC;oBACzC,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,sEAAsE;QACxE,CAAC;QAED,4CAA4C;QAC5C,MAAM,KAAK,GAAG,kBAAkB,CAC9B,OAAO,CAAC,cAAc,EACtB,MAAM,CAAC,WAAW,EAClB,QAAQ,CAAC,WAAW,CAAC,EAAE,EACvB,MAAM,CAAC,WAAW,CACnB,CAAC;QAEF,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,GAAG,CAAC,IAAI,CACN,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,EACrF,kDAAkD,CACnD,CAAC;YACF,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,+BAA+B,EAAE,CAAC,CAAC;YACjE,OAAO;QACT,CAAC;QAED,qFAAqF;QACrF,MAAM,gBAAgB,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;QAE1D,2DAA2D;QAC3D,IAAI,QAAkB,CAAC;QACvB,IAAI,CAAC;YACH,QAAQ,GAAG,EAAE,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC;QAC3C,CAAC;QAAC,MAAM,CAAC;YACP,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;YAClD,OAAO;QACT,CAAC;QAED,sEAAsE;QACtE,6EAA6E;QAC7E,IAAI,YAAoB,CAAC;QACzB,IAAI,SAAiB,CAAC;QACtB,IAAI,CAAC;YACH,YAAY,GAAG,EAAE,CAAC,YAAY,CAAC,gBAAgB,CAAC,CAAC;YACjD,SAAS,GAAG,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QACrC,CAAC;QAAC,MAAM,CAAC;YACP,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;YAClD,OAAO;QACT,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;QACxD,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC3D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,CAAC;YACjD,OAAO;QACT,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;YACvB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;YAClD,OAAO;QACT,CAAC;QAED,qDAAqD;QACrD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC;QACjD,MAAM,eAAe,GAAG,oBAAoB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAE5D,4BAA4B;QAC5B,IAAI,eAAe,EAAE,CAAC;YACpB,GAAG,CAAC,GAAG,CAAC,eAAe,EAAE,uBAAuB,CAAC,CAAC;QACpD,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,GAAG,CAAC,eAAe,EAAE,wBAAwB,CAAC,CAAC;YAEnD,uDAAuD;YACvD,MAAM,IAAI,GAAG,WAAW,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;YAC1D,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YAEtB,2CAA2C;YAC3C,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;YACjD,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;gBACzB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;gBACtB,OAAO;YACT,CAAC;QACH,CAAC;QAED,2BAA2B;QAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,WAAW,EAAE,CAAC;QACzD,MAAM,WAAW,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,WAAW,EAAE,CAAC;YAChB,GAAG,CAAC,GAAG,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;QACvC,CAAC;QAED,kFAAkF;QAClF,GAAG,CAAC,GAAG,CAAC,6BAA6B,EAAE,GAAG,CAAC,CAAC;QAE5C,yBAAyB;QACzB,uEAAuE;QACvE,wEAAwE;QACxE,4EAA4E;QAC5E,GAAG,CAAC,QAAQ,CAAC,gBAAgB,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE;YAC5D,IAAI,GAAG,EAAE,CAAC;gBACR,GAAG,CAAC,KAAK,CACP,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,gBAAgB,EAAE,EACxD,sCAAsC,CACvC,CAAC;gBACF,mDAAmD;gBACnD,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;oBACrB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC,CAAC;gBAC1D,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/routes/plugins.d.ts

@@ -0,0 +1,120 @@
+/**
+ * @fileoverview Plugin management REST API routes
+ *
+ * This module provides Express routes for managing the complete plugin lifecycle:
+ * - Listing and filtering plugins by status
+ * - Installing plugins from npm or local paths
+ * - Uninstalling plugins (soft delete or hard purge)
+ * - Enabling/disabling plugins
+ * - Running health diagnostics
+ * - Upgrading plugins
+ * - Retrieving UI slot contributions for frontend rendering
+ * - Discovering and executing plugin-contributed agent tools
+ *
+ * All routes require board-level authentication (assertBoard middleware).
+ *
+ * @module server/routes/plugins
+ * @see doc/plugins/PLUGIN_SPEC.md for the full plugin specification
+ */
+import type { Db } from "@paperclipai_dld/db";
+import { pluginLoader } from "../services/plugin-loader.js";
+import type { PluginJobScheduler } from "../services/plugin-job-scheduler.js";
+import type { PluginJobStore } from "../services/plugin-job-store.js";
+import type { PluginWorkerManager } from "../services/plugin-worker-manager.js";
+import type { PluginStreamBus } from "../services/plugin-stream-bus.js";
+import type { PluginToolDispatcher } from "../services/plugin-tool-dispatcher.js";
+/**
+ * Optional dependencies for plugin job scheduling routes.
+ *
+ * When provided, job-related routes (list jobs, list runs, trigger job) are
+ * mounted. When omitted, the routes return 501 Not Implemented.
+ */
+export interface PluginRouteJobDeps {
+    /** The job scheduler instance. */
+    scheduler: PluginJobScheduler;
+    /** The job persistence store. */
+    jobStore: PluginJobStore;
+}
+/**
+ * Optional dependencies for plugin webhook routes.
+ *
+ * When provided, the webhook ingestion route is enabled. When omitted,
+ * webhook POST requests return 501 Not Implemented.
+ */
+export interface PluginRouteWebhookDeps {
+    /** The worker manager for dispatching handleWebhook RPC calls. */
+    workerManager: PluginWorkerManager;
+}
+/**
+ * Optional dependencies for plugin tool routes.
+ *
+ * When provided, tool discovery and execution routes are enabled.
+ * When omitted, the tool routes return 501 Not Implemented.
+ */
+export interface PluginRouteToolDeps {
+    /** The tool dispatcher for listing and executing plugin tools. */
+    toolDispatcher: PluginToolDispatcher;
+}
+/**
+ * Optional dependencies for plugin UI bridge routes.
+ *
+ * When provided, the getData and performAction bridge proxy routes are enabled,
+ * allowing plugin UI components to communicate with their worker backend via
+ * `usePluginData()` and `usePluginAction()` hooks.
+ *
+ * @see PLUGIN_SPEC.md §13.8 — `getData`
+ * @see PLUGIN_SPEC.md §13.9 — `performAction`
+ * @see PLUGIN_SPEC.md §19.7 — Error Propagation Through The Bridge
+ */
+export interface PluginRouteBridgeDeps {
+    /** The worker manager for dispatching getData/performAction RPC calls. */
+    workerManager: PluginWorkerManager;
+    /** Optional stream bus for SSE push from worker to UI. */
+    streamBus?: PluginStreamBus;
+}
+/**
+ * Create Express router for plugin management API.
+ *
+ * Routes provided:
+ *
+ * | Method | Path | Description |
+ * |--------|------|-------------|
+ * | GET | /plugins | List all plugins (optional ?status= filter) |
+ * | GET | /plugins/ui-contributions | Get UI slots from ready plugins |
+ * | GET | /plugins/:pluginId | Get single plugin by ID or key |
+ * | POST | /plugins/install | Install from npm or local path |
+ * | DELETE | /plugins/:pluginId | Uninstall (optional ?purge=true) |
+ * | POST | /plugins/:pluginId/enable | Enable a plugin |
+ * | POST | /plugins/:pluginId/disable | Disable a plugin |
+ * | GET | /plugins/:pluginId/health | Run health diagnostics |
+ * | POST | /plugins/:pluginId/upgrade | Upgrade to newer version |
+ * | GET | /plugins/:pluginId/jobs | List jobs for a plugin |
+ * | GET | /plugins/:pluginId/jobs/:jobId/runs | List runs for a job |
+ * | POST | /plugins/:pluginId/jobs/:jobId/trigger | Manually trigger a job |
+ * | POST | /plugins/:pluginId/webhooks/:endpointKey | Receive inbound webhook |
+ * | GET | /plugins/tools | List all available plugin tools |
+ * | GET | /plugins/tools?pluginId=... | List tools for a specific plugin |
+ * | POST | /plugins/tools/execute | Execute a plugin tool |
+ * | GET | /plugins/:pluginId/config | Get current plugin config |
+ * | POST | /plugins/:pluginId/config | Save (upsert) plugin config |
+ * | POST | /plugins/:pluginId/config/test | Test config via validateConfig RPC |
+ * | POST | /plugins/:pluginId/bridge/data | Proxy getData to plugin worker |
+ * | POST | /plugins/:pluginId/bridge/action | Proxy performAction to plugin worker |
+ * | POST | /plugins/:pluginId/data/:key | Proxy getData to plugin worker (key in URL) |
+ * | POST | /plugins/:pluginId/actions/:key | Proxy performAction to plugin worker (key in URL) |
+ * | GET | /plugins/:pluginId/bridge/stream/:channel | SSE stream from worker to UI |
+ * | GET | /plugins/:pluginId/dashboard | Aggregated health dashboard data |
+ *
+ * **Route Ordering Note:** Static routes (like /ui-contributions, /tools) must be
+ * registered before parameterized routes (like /:pluginId) to prevent Express from
+ * matching them as a plugin ID.
+ *
+ * @param db - Database connection instance
+ * @param jobDeps - Optional job scheduling dependencies
+ * @param webhookDeps - Optional webhook ingestion dependencies
+ * @param toolDeps - Optional tool dispatcher dependencies
+ * @param bridgeDeps - Optional bridge proxy dependencies for getData/performAction
+ * @returns Express router with plugin routes mounted
+ */
+export declare function pluginRoutes(db: Db, loader: ReturnType<typeof pluginLoader>, jobDeps?: PluginRouteJobDeps, webhookDeps?: PluginRouteWebhookDeps, toolDeps?: PluginRouteToolDeps, bridgeDeps?: PluginRouteBridgeDeps): import("express-serve-static-core").Router;
+//# sourceMappingURL=plugins.d.ts.map

package/dist/routes/plugins.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugins.d.ts","sourceRoot":"","sources":["../../src/routes/plugins.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AASH,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,qBAAqB,CAAC;AAa9C,OAAO,EAAmC,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAG7F,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AAC9E,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AACtE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,sCAAsC,CAAC;AAChF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AACxE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAoJlF;;;;;GAKG;AACH,MAAM,WAAW,kBAAkB;IACjC,kCAAkC;IAClC,SAAS,EAAE,kBAAkB,CAAC;IAC9B,iCAAiC;IACjC,QAAQ,EAAE,cAAc,CAAC;CAC1B;AAED;;;;;GAKG;AACH,MAAM,WAAW,sBAAsB;IACrC,kEAAkE;IAClE,aAAa,EAAE,mBAAmB,CAAC;CACpC;AAED;;;;;GAKG;AACH,MAAM,WAAW,mBAAmB;IAClC,kEAAkE;IAClE,cAAc,EAAE,oBAAoB,CAAC;CACtC;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,qBAAqB;IACpC,0EAA0E;IAC1E,aAAa,EAAE,mBAAmB,CAAC;IACnC,0DAA0D;IAC1D,SAAS,CAAC,EAAE,eAAe,CAAC;CAC7B;AAYD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AACH,wBAAgB,YAAY,CAC1B,EAAE,EAAE,EAAE,EACN,MAAM,EAAE,UAAU,CAAC,OAAO,YAAY,CAAC,EACvC,OAAO,CAAC,EAAE,kBAAkB,EAC5B,WAAW,CAAC,EAAE,sBAAsB,EACpC,QAAQ,CAAC,EAAE,mBAAmB,EAC9B,UAAU,CAAC,EAAE,qBAAqB,8CAu3DnC"}