@prauga/flexdoc-backend 2.9.0 → 2.9.5

package/dist/host-execution-route.test.js

@@ -0,0 +1,290 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+const http = __importStar(require("http"));
+const host_execution_1 = require("./host-execution");
+const host_execution_route_1 = require("./host-execution-route");
+function headers(contentType = 'application/json') {
+    return { 'content-type': contentType, 'x-flexdoc-execute': '1' };
+}
+function sessionCookie(result) {
+    return (result.headers['Set-Cookie'] || '').split(';', 1)[0];
+}
+describe('host execution HTTP protocol', () => {
+    it('parses multipart descriptor and indexed browser file parts', () => {
+        const boundary = 'flexdoc-test-boundary';
+        const descriptor = JSON.stringify({ request: { method: 'POST', url: 'https://api.example.test/upload', bodyMode: 'formdata', formData: [{ key: 'photo', type: 'file', enabled: true }] } });
+        const body = Buffer.concat([
+            Buffer.from(`--${boundary}\r\nContent-Disposition: form-data; name="descriptor"\r\n\r\n${descriptor}\r\n`),
+            Buffer.from(`--${boundary}\r\nContent-Disposition: form-data; name="formData[0]"; filename="photo.txt"\r\nContent-Type: text/plain\r\n\r\n`),
+            Buffer.from('hello-file'),
+            Buffer.from(`\r\n--${boundary}--\r\n`),
+        ]);
+        const parsed = (0, host_execution_route_1.parseHostExecutionRequestBody)(`multipart/form-data; boundary=${boundary}`, body);
+        expect(parsed.request.bodyMode).toBe('formdata');
+        expect(parsed.formDataFiles?.get(0)).toMatchObject({ name: 'photo.txt', contentType: 'text/plain' });
+        expect(parsed.formDataFiles?.get(0)?.data.toString()).toBe('hello-file');
+    });
+    it('requires the renderer custom header', async () => {
+        const state = (0, host_execution_1.createHostExecutionState)({ allowedOrigins: ['https://api.example.test'] });
+        const result = await (0, host_execution_route_1.runHostExecutionRoute)({ state, spec: {}, headers: { 'content-type': 'application/json' }, body: { request: { method: 'GET', url: 'https://api.example.test' } } });
+        expect(result.status).toBe(403);
+    });
+    it('resolves relative OpenAPI servers against the documentation request origin', async () => {
+        const server = http.createServer((_request, response) => response.end('same-origin'));
+        await new Promise((resolve) => server.listen(0, '127.0.0.1', resolve));
+        const address = server.address();
+        if (!address || typeof address === 'string')
+            throw new Error('test server address unavailable');
+        const origin = `http://127.0.0.1:${address.port}`;
+        try {
+            const state = (0, host_execution_1.createHostExecutionState)(true);
+            const result = await (0, host_execution_route_1.runHostExecutionRoute)({
+                state,
+                spec: { servers: [{ url: '/' }] },
+                headers: headers(),
+                body: { request: { method: 'GET', url: `${origin}/ping` } },
+                docsOrigin: origin,
+            });
+            expect(result.status).toBe(200);
+            expect(JSON.parse(result.body).body).toBe('same-origin');
+            expect([...(0, host_execution_1.allowedHostExecutionOrigins)(state, { servers: [{ url: 'https://api.example.test' }] }, origin)]).toEqual(['https://api.example.test']);
+        }
+        finally {
+            await new Promise((resolve, reject) => server.close((error) => error ? reject(error) : resolve()));
+        }
+    });
+    it('derives the docs origin without trusting an arbitrary renderer draft header', () => {
+        expect((0, host_execution_route_1.hostExecutionRequestOrigin)({ headers: { host: 'docs.example.test:8443' }, protocol: 'https' })).toBe('https://docs.example.test:8443');
+        expect((0, host_execution_route_1.hostExecutionRequestOrigin)({ headers: {}, url: 'https://docs.example.test/docs/__flexdoc/execute' })).toBe('https://docs.example.test');
+        expect((0, host_execution_route_1.hostExecutionRequestOrigin)({ headers: { host: 'docs.example.test' }, protocol: 'ftp' })).toBeUndefined();
+    });
+    it('rejects DNS answers that resolve to metadata or link-local addresses', () => {
+        expect(() => (0, host_execution_1.assertHostExecutionResolvedAddressAllowed)('169.254.169.254')).toThrow('DNS resolutions');
+        expect(() => (0, host_execution_1.assertHostExecutionResolvedAddressAllowed)('fe80::a9fe:a9fe')).toThrow('DNS resolutions');
+        expect(() => (0, host_execution_1.assertHostExecutionResolvedAddressAllowed)('::ffff:169.254.169.254')).toThrow('DNS resolutions');
+        expect(() => (0, host_execution_1.assertHostExecutionResolvedAddressAllowed)('10.0.0.10')).not.toThrow();
+    });
+    it('rejects public-suffix cookie domains while allowing registrable parent domains', () => {
+        expect((0, host_execution_1.isCookieDomainAllowed)('api.example.com', 'example.com')).toBe(true);
+        expect((0, host_execution_1.isCookieDomainAllowed)('foo.com', 'com')).toBe(false);
+        expect((0, host_execution_1.isCookieDomainAllowed)('foo.example.co.uk', 'co.uk')).toBe(false);
+        expect((0, host_execution_1.isCookieDomainAllowed)('bucket.s3.amazonaws.com', 's3.amazonaws.com')).toBe(false);
+        expect((0, host_execution_1.isCookieDomainAllowed)('api.example.com', 'other.com')).toBe(false);
+        expect((0, host_execution_1.isCookieDomainAllowed)('127.0.0.1', '127.0.0.1')).toBe(false);
+    });
+    it('rejects response cookies whose Domain does not match the response host', async () => {
+        const server = http.createServer((_request, response) => {
+            response.setHeader('Set-Cookie', 'sid=abc; Domain=example.com; Path=/');
+            response.end('ok');
+        });
+        await new Promise((resolve) => server.listen(0, '127.0.0.1', resolve));
+        const address = server.address();
+        if (!address || typeof address === 'string')
+            throw new Error('test server address unavailable');
+        const origin = `http://127.0.0.1:${address.port}`;
+        try {
+            const result = await (0, host_execution_route_1.runHostExecutionRoute)({
+                state: (0, host_execution_1.createHostExecutionState)({ allowedOrigins: [origin] }),
+                spec: {},
+                headers: headers(),
+                body: { request: { method: 'GET', url: origin }, cookieJar: 'session' },
+            });
+            expect(result.status).toBe(200);
+            expect(JSON.parse(result.body).cookies).toEqual([]);
+        }
+        finally {
+            await new Promise((resolve, reject) => server.close((error) => error ? reject(error) : resolve()));
+        }
+    });
+    it('rejects metadata and unlisted origins before network execution', async () => {
+        const metadataState = (0, host_execution_1.createHostExecutionState)({ allowedOrigins: ['http://169.254.169.254'] });
+        const metadata = await (0, host_execution_route_1.runHostExecutionRoute)({ state: metadataState, spec: {}, headers: headers(), body: { request: { method: 'GET', url: 'http://169.254.169.254/latest/meta-data' } } });
+        expect(metadata.status).toBe(403);
+        expect(metadata.body).toContain('metadata');
+        const state = (0, host_execution_1.createHostExecutionState)({ allowedOrigins: ['https://api.example.test'] });
+        const random = await (0, host_execution_route_1.runHostExecutionRoute)({ state, spec: {}, headers: headers(), body: { request: { method: 'GET', url: 'https://other.example.test' } } });
+        expect(random.status).toBe(403);
+        expect(random.body).toContain('not allowed');
+    });
+    it('executes an explicitly allowed origin and keeps a cookie jar isolated by signed docs session', async () => {
+        const server = http.createServer((request, response) => {
+            if (request.url === '/set') {
+                response.setHeader('Set-Cookie', 'sid=abc; Path=/; HttpOnly');
+                response.end('set');
+                return;
+            }
+            response.setHeader('Content-Type', 'application/json');
+            response.end(JSON.stringify({ cookie: request.headers.cookie || '' }));
+        });
+        await new Promise((resolve) => server.listen(0, '127.0.0.1', resolve));
+        const address = server.address();
+        if (!address || typeof address === 'string')
+            throw new Error('test server address unavailable');
+        const origin = `http://127.0.0.1:${address.port}`;
+        const state = (0, host_execution_1.createHostExecutionState)({ allowedOrigins: [origin] });
+        try {
+            const first = await (0, host_execution_route_1.runHostExecutionRoute)({
+                state,
+                spec: {},
+                headers: headers(),
+                body: { request: { method: 'GET', url: `${origin}/set` }, cookieJar: 'session' },
+            });
+            expect(first.status).toBe(200);
+            const firstSnapshot = JSON.parse(first.body);
+            expect(firstSnapshot.status).toBe(200);
+            expect(firstSnapshot.cookies).toEqual(expect.arrayContaining([expect.objectContaining({ name: 'sid', value: 'abc', httpOnly: true })]));
+            const cookie = sessionCookie(first);
+            expect(cookie).toContain('__flexdoc_session=');
+            const second = await (0, host_execution_route_1.runHostExecutionRoute)({
+                state,
+                spec: {},
+                headers: { ...headers(), cookie },
+                body: { request: { method: 'GET', url: `${origin}/echo` }, cookieJar: 'session' },
+            });
+            expect(second.status).toBe(200);
+            expect(JSON.parse(JSON.parse(second.body).body)).toEqual({ cookie: 'sid=abc' });
+            const isolated = await (0, host_execution_route_1.runHostExecutionRoute)({
+                state,
+                spec: {},
+                headers: headers(),
+                body: { request: { method: 'GET', url: `${origin}/echo` }, cookieJar: 'session' },
+            });
+            expect(JSON.parse(JSON.parse(isolated.body).body)).toEqual({ cookie: '' });
+        }
+        finally {
+            await new Promise((resolve, reject) => server.close((error) => error ? reject(error) : resolve()));
+        }
+    });
+    it('decodes binary bodyBase64 on the host path', async () => {
+        const server = http.createServer((request, response) => {
+            const chunks = [];
+            request.on('data', (chunk) => chunks.push(Buffer.from(chunk)));
+            request.on('end', () => response.end(Buffer.concat(chunks).toString('hex')));
+        });
+        await new Promise((resolve) => server.listen(0, '127.0.0.1', resolve));
+        const address = server.address();
+        if (!address || typeof address === 'string')
+            throw new Error('test server address unavailable');
+        const origin = `http://127.0.0.1:${address.port}`;
+        try {
+            const result = await (0, host_execution_route_1.runHostExecutionRoute)({
+                state: (0, host_execution_1.createHostExecutionState)({ allowedOrigins: [origin] }),
+                spec: {},
+                headers: headers(),
+                body: { request: { method: 'POST', url: origin, bodyMode: 'binary', binary: { fileName: 'blob.bin', contentType: 'application/octet-stream' } }, bodyBase64: Buffer.from([0, 1, 2, 255]).toString('base64') },
+            });
+            expect(result.status).toBe(200);
+            expect(JSON.parse(result.body).body).toBe('000102ff');
+        }
+        finally {
+            await new Promise((resolve, reject) => server.close((error) => error ? reject(error) : resolve()));
+        }
+    });
+    it('keeps host execution off unless the docs host explicitly opts in', () => {
+        expect((0, host_execution_1.createHostExecutionState)(undefined).enabled).toBe(false);
+        expect((0, host_execution_1.createHostExecutionState)(false).enabled).toBe(false);
+        expect((0, host_execution_1.createHostExecutionState)(true).enabled).toBe(true);
+        expect((0, host_execution_1.createHostExecutionState)({}).enabled).toBe(true);
+        expect((0, host_execution_1.createHostExecutionState)({ enabled: false }).enabled).toBe(false);
+    });
+    it('does not allocate a cookie session for ordinary host execution', async () => {
+        const server = http.createServer((_request, response) => response.end('ok'));
+        await new Promise((resolve) => server.listen(0, '127.0.0.1', resolve));
+        const address = server.address();
+        if (!address || typeof address === 'string')
+            throw new Error('test server address unavailable');
+        const origin = `http://127.0.0.1:${address.port}`;
+        const state = (0, host_execution_1.createHostExecutionState)({ allowedOrigins: [origin] });
+        try {
+            const result = await (0, host_execution_route_1.runHostExecutionRoute)({
+                state,
+                spec: {},
+                headers: headers(),
+                body: { request: { method: 'GET', url: origin } },
+            });
+            expect(result.status).toBe(200);
+            expect(result.headers['Set-Cookie']).toBeUndefined();
+            expect(state.jars.size).toBe(0);
+        }
+        finally {
+            await new Promise((resolve, reject) => server.close((error) => error ? reject(error) : resolve()));
+        }
+    });
+    it('bounds signed cookie-jar sessions', () => {
+        const state = (0, host_execution_1.createHostExecutionState)(true);
+        for (let index = 0; index < 1050; index += 1)
+            (0, host_execution_1.ensureHostExecutionSession)(state);
+        expect(state.jars.size).toBeLessThanOrEqual(1000);
+    });
+    it('rejects cross-origin redirects even when both origins are allowlisted', async () => {
+        let redirectedAuthorization;
+        const target = http.createServer((request, response) => {
+            redirectedAuthorization = request.headers.authorization;
+            response.end('unexpected');
+        });
+        await new Promise((resolve) => target.listen(0, '127.0.0.1', resolve));
+        const targetAddress = target.address();
+        if (!targetAddress || typeof targetAddress === 'string')
+            throw new Error('target server address unavailable');
+        const targetOrigin = `http://127.0.0.1:${targetAddress.port}`;
+        const source = http.createServer((_request, response) => {
+            response.statusCode = 302;
+            response.setHeader('Location', `${targetOrigin}/redirected`);
+            response.end();
+        });
+        await new Promise((resolve) => source.listen(0, '127.0.0.1', resolve));
+        const sourceAddress = source.address();
+        if (!sourceAddress || typeof sourceAddress === 'string')
+            throw new Error('source server address unavailable');
+        const sourceOrigin = `http://127.0.0.1:${sourceAddress.port}`;
+        try {
+            const result = await (0, host_execution_route_1.runHostExecutionRoute)({
+                state: (0, host_execution_1.createHostExecutionState)({ allowedOrigins: [sourceOrigin, targetOrigin] }),
+                spec: {},
+                headers: headers(),
+                body: { request: { method: 'GET', url: `${sourceOrigin}/start`, auth: { type: 'bearer', token: 'secret-token' } } },
+            });
+            expect(result.status).toBe(403);
+            expect(result.body).toContain('cross-origin redirects');
+            expect(redirectedAuthorization).toBeUndefined();
+        }
+        finally {
+            await new Promise((resolve, reject) => source.close((error) => error ? reject(error) : resolve()));
+            await new Promise((resolve, reject) => target.close((error) => error ? reject(error) : resolve()));
+        }
+    });
+});
+//# sourceMappingURL=host-execution-route.test.js.map

package/dist/host-execution-route.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-execution-route.test.js","sourceRoot":"","sources":["../src/host-execution-route.test.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,2CAA6B;AAC7B,qDAAuL;AACvL,iEAA0H;AAE1H,SAAS,OAAO,CAAC,WAAW,GAAG,kBAAkB;IAC/C,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,mBAAmB,EAAE,GAAG,EAAE,CAAC;AACnE,CAAC;AAED,SAAS,aAAa,CAAC,MAA2C;IAChE,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC/D,CAAC;AAED,QAAQ,CAAC,8BAA8B,EAAE,GAAG,EAAE;IAC5C,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,MAAM,QAAQ,GAAG,uBAAuB,CAAC;QACzC,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,iCAAiC,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QAC5L,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC;YACzB,MAAM,CAAC,IAAI,CAAC,KAAK,QAAQ,gEAAgE,UAAU,MAAM,CAAC;YAC1G,MAAM,CAAC,IAAI,CAAC,KAAK,QAAQ,kHAAkH,CAAC;YAC5I,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC;YACzB,MAAM,CAAC,IAAI,CAAC,SAAS,QAAQ,QAAQ,CAAC;SACvC,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,IAAA,oDAA6B,EAAC,iCAAiC,QAAQ,EAAE,EAAE,IAAI,CAAC,CAAC;QAChG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACjD,MAAM,CAAC,MAAM,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC,CAAC;QACrG,MAAM,CAAC,MAAM,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;QACnD,MAAM,KAAK,GAAG,IAAA,yCAAwB,EAAC,EAAE,cAAc,EAAE,CAAC,0BAA0B,CAAC,EAAE,CAAC,CAAC;QACzF,MAAM,MAAM,GAAG,MAAM,IAAA,4CAAqB,EAAC,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,0BAA0B,EAAE,EAAE,EAAE,CAAC,CAAC;QACxL,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4EAA4E,EAAE,KAAK,IAAI,EAAE;QAC1F,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC;QACtF,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;QAC7E,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;QACjC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QAChG,MAAM,MAAM,GAAG,oBAAoB,OAAO,CAAC,IAAI,EAAE,CAAC;QAClD,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,IAAA,yCAAwB,EAAC,IAAI,CAAC,CAAC;YAC7C,MAAM,MAAM,GAAG,MAAM,IAAA,4CAAqB,EAAC;gBACzC,KAAK;gBACL,IAAI,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,EAAE;gBACjC,OAAO,EAAE,OAAO,EAAE;gBAClB,IAAI,EAAE,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,MAAM,OAAO,EAAE,EAAE;gBAC3D,UAAU,EAAE,MAAM;aACnB,CAAC,CAAC;YACH,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAChC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YACzD,MAAM,CAAC,CAAC,GAAG,IAAA,4CAA2B,EAAC,KAAK,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,0BAA0B,EAAE,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC;QACpJ,CAAC;gBAAS,CAAC;YACT,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QAC3G,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6EAA6E,EAAE,GAAG,EAAE;QACrF,MAAM,CAAC,IAAA,iDAA0B,EAAC,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,wBAAwB,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;QAC9I,MAAM,CAAC,IAAA,iDAA0B,EAAC,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,kDAAkD,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;QAC/I,MAAM,CAAC,IAAA,iDAA0B,EAAC,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;IAClH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sEAAsE,EAAE,GAAG,EAAE;QAC9E,MAAM,CAAC,GAAG,EAAE,CAAC,IAAA,0DAAyC,EAAC,iBAAiB,CAAC,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;QACtG,MAAM,CAAC,GAAG,EAAE,CAAC,IAAA,0DAAyC,EAAC,iBAAiB,CAAC,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;QACtG,MAAM,CAAC,GAAG,EAAE,CAAC,IAAA,0DAAyC,EAAC,wBAAwB,CAAC,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;QAC7G,MAAM,CAAC,GAAG,EAAE,CAAC,IAAA,0DAAyC,EAAC,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IACrF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gFAAgF,EAAE,GAAG,EAAE;QACxF,MAAM,CAAC,IAAA,sCAAqB,EAAC,iBAAiB,EAAE,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3E,MAAM,CAAC,IAAA,sCAAqB,EAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC5D,MAAM,CAAC,IAAA,sCAAqB,EAAC,mBAAmB,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxE,MAAM,CAAC,IAAA,sCAAqB,EAAC,yBAAyB,EAAE,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzF,MAAM,CAAC,IAAA,sCAAqB,EAAC,iBAAiB,EAAE,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1E,MAAM,CAAC,IAAA,sCAAqB,EAAC,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wEAAwE,EAAE,KAAK,IAAI,EAAE;QACtF,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,EAAE;YACtD,QAAQ,CAAC,SAAS,CAAC,YAAY,EAAE,qCAAqC,CAAC,CAAC;YACxE,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACrB,CAAC,CAAC,CAAC;QACH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;QAC7E,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;QACjC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QAChG,MAAM,MAAM,GAAG,oBAAoB,OAAO,CAAC,IAAI,EAAE,CAAC;QAClD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAA,4CAAqB,EAAC;gBACzC,KAAK,EAAE,IAAA,yCAAwB,EAAC,EAAE,cAAc,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC7D,IAAI,EAAE,EAAE;gBACR,OAAO,EAAE,OAAO,EAAE;gBAClB,IAAI,EAAE,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE;aACxE,CAAC,CAAC;YACH,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAChC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACtD,CAAC;gBAAS,CAAC;YACT,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QAC3G,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gEAAgE,EAAE,KAAK,IAAI,EAAE;QAC9E,MAAM,aAAa,GAAG,IAAA,yCAAwB,EAAC,EAAE,cAAc,EAAE,CAAC,wBAAwB,CAAC,EAAE,CAAC,CAAC;QAC/F,MAAM,QAAQ,GAAG,MAAM,IAAA,4CAAqB,EAAC,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,yCAAyC,EAAE,EAAE,EAAE,CAAC,CAAC;QAC3L,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QAE5C,MAAM,KAAK,GAAG,IAAA,yCAAwB,EAAC,EAAE,cAAc,EAAE,CAAC,0BAA0B,CAAC,EAAE,CAAC,CAAC;QACzF,MAAM,MAAM,GAAG,MAAM,IAAA,4CAAqB,EAAC,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,4BAA4B,EAAE,EAAE,EAAE,CAAC,CAAC;QAC7J,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8FAA8F,EAAE,KAAK,IAAI,EAAE;QAC5G,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE;YACrD,IAAI,OAAO,CAAC,GAAG,KAAK,MAAM,EAAE,CAAC;gBAC3B,QAAQ,CAAC,SAAS,CAAC,YAAY,EAAE,2BAA2B,CAAC,CAAC;gBAC9D,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;gBACpB,OAAO;YACT,CAAC;YACD,QAAQ,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;YACvD,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;QACzE,CAAC,CAAC,CAAC;QACH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;QAC7E,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;QACjC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QAChG,MAAM,MAAM,GAAG,oBAAoB,OAAO,CAAC,IAAI,EAAE,CAAC;QAClD,MAAM,KAAK,GAAG,IAAA,yCAAwB,EAAC,EAAE,cAAc,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACrE,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,IAAA,4CAAqB,EAAC;gBACxC,KAAK;gBACL,IAAI,EAAE,EAAE;gBACR,OAAO,EAAE,OAAO,EAAE;gBAClB,IAAI,EAAE,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,MAAM,MAAM,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE;aACjF,CAAC,CAAC;YACH,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC/B,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC7C,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACvC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YACxI,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;YACpC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC;YAE/C,MAAM,MAAM,GAAG,MAAM,IAAA,4CAAqB,EAAC;gBACzC,KAAK;gBACL,IAAI,EAAE,EAAE;gBACR,OAAO,EAAE,EAAE,GAAG,OAAO,EAAE,EAAE,MAAM,EAAE;gBACjC,IAAI,EAAE,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,MAAM,OAAO,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE;aAClF,CAAC,CAAC;YACH,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAChC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;YAEhF,MAAM,QAAQ,GAAG,MAAM,IAAA,4CAAqB,EAAC;gBAC3C,KAAK;gBACL,IAAI,EAAE,EAAE;gBACR,OAAO,EAAE,OAAO,EAAE;gBAClB,IAAI,EAAE,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,MAAM,OAAO,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE;aAClF,CAAC,CAAC;YACH,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;QAC7E,CAAC;gBAAS,CAAC;YACT,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QAC3G,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4CAA4C,EAAE,KAAK,IAAI,EAAE;QAC1D,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE;YACrD,MAAM,MAAM,GAAa,EAAE,CAAC;YAC5B,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAC/D,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC/E,CAAC,CAAC,CAAC;QACH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;QAC7E,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;QACjC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QAChG,MAAM,MAAM,GAAG,oBAAoB,OAAO,CAAC,IAAI,EAAE,CAAC;QAClD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAA,4CAAqB,EAAC;gBACzC,KAAK,EAAE,IAAA,yCAAwB,EAAC,EAAE,cAAc,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC7D,IAAI,EAAE,EAAE;gBACR,OAAO,EAAE,OAAO,EAAE;gBAClB,IAAI,EAAE,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,WAAW,EAAE,0BAA0B,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE;aAC9M,CAAC,CAAC;YACH,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAChC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACxD,CAAC;gBAAS,CAAC;YACT,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QAC3G,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kEAAkE,EAAE,GAAG,EAAE;QAC1E,MAAM,CAAC,IAAA,yCAAwB,EAAC,SAAS,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChE,MAAM,CAAC,IAAA,yCAAwB,EAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC5D,MAAM,CAAC,IAAA,yCAAwB,EAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1D,MAAM,CAAC,IAAA,yCAAwB,EAAC,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxD,MAAM,CAAC,IAAA,yCAAwB,EAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gEAAgE,EAAE,KAAK,IAAI,EAAE;QAC9E,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QAC7E,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;QAC7E,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;QACjC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QAChG,MAAM,MAAM,GAAG,oBAAoB,OAAO,CAAC,IAAI,EAAE,CAAC;QAClD,MAAM,KAAK,GAAG,IAAA,yCAAwB,EAAC,EAAE,cAAc,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACrE,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAA,4CAAqB,EAAC;gBACzC,KAAK;gBACL,IAAI,EAAE,EAAE;gBACR,OAAO,EAAE,OAAO,EAAE;gBAClB,IAAI,EAAE,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE;aAClD,CAAC,CAAC;YACH,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAChC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;YACrD,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClC,CAAC;gBAAS,CAAC;YACT,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QAC3G,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC3C,MAAM,KAAK,GAAG,IAAA,yCAAwB,EAAC,IAAI,CAAC,CAAC;QAC7C,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,IAAI,CAAC;YAAE,IAAA,2CAA0B,EAAC,KAAK,CAAC,CAAC;QAChF,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uEAAuE,EAAE,KAAK,IAAI,EAAE;QACrF,IAAI,uBAA2C,CAAC;QAChD,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE;YACrD,uBAAuB,GAAG,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC;YACxD,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAC7B,CAAC,CAAC,CAAC;QACH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;QAC7E,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;QACvC,IAAI,CAAC,aAAa,IAAI,OAAO,aAAa,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QAC9G,MAAM,YAAY,GAAG,oBAAoB,aAAa,CAAC,IAAI,EAAE,CAAC;QAE9D,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,EAAE;YACtD,QAAQ,CAAC,UAAU,GAAG,GAAG,CAAC;YAC1B,QAAQ,CAAC,SAAS,CAAC,UAAU,EAAE,GAAG,YAAY,aAAa,CAAC,CAAC;YAC7D,QAAQ,CAAC,GAAG,EAAE,CAAC;QACjB,CAAC,CAAC,CAAC;QACH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;QAC7E,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;QACvC,IAAI,CAAC,aAAa,IAAI,OAAO,aAAa,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QAC9G,MAAM,YAAY,GAAG,oBAAoB,aAAa,CAAC,IAAI,EAAE,CAAC;QAE9D,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAA,4CAAqB,EAAC;gBACzC,KAAK,EAAE,IAAA,yCAAwB,EAAC,EAAE,cAAc,EAAE,CAAC,YAAY,EAAE,YAAY,CAAC,EAAE,CAAC;gBACjF,IAAI,EAAE,EAAE;gBACR,OAAO,EAAE,OAAO,EAAE;gBAClB,IAAI,EAAE,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,YAAY,QAAQ,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,EAAE;aACpH,CAAC,CAAC;YACH,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAChC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,wBAAwB,CAAC,CAAC;YACxD,MAAM,CAAC,uBAAuB,CAAC,CAAC,aAAa,EAAE,CAAC;QAClD,CAAC;gBAAS,CAAC;YACT,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YACzG,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QAC3G,CAAC;IACH,CAAC,CAAC,CAAC;AAEL,CAAC,CAAC,CAAC"}

package/dist/host-execution.d.ts

@@ -0,0 +1,168 @@
+import type { FlexDocHostExecutionCapability, FlexDocHostExecutionOptions, FlexDocHostExecutionPublicOptions } from './interfaces';
+type HeaderEntry = [string, string];
+type HostAuth = {
+    type?: 'none' | 'inherit';
+} | {
+    type: 'bearer';
+    token?: string;
+} | {
+    type: 'oauth2';
+    accessToken?: string;
+} | {
+    type: 'basic';
+    username?: string;
+    password?: string;
+} | {
+    type: 'apiKey';
+    key?: string;
+    value?: string;
+    in?: 'header' | 'query' | 'cookie';
+} | {
+    type: 'digest';
+    username?: string;
+    password?: string;
+} | {
+    type: 'hawk';
+    id?: string;
+    key?: string;
+    algorithm?: 'sha1' | 'sha256';
+    ext?: string;
+} | {
+    type: 'ntlm';
+    username?: string;
+    password?: string;
+    domain?: string;
+    workstation?: string;
+} | {
+    type: 'oauth1';
+    consumerKey?: string;
+    consumerSecret?: string;
+    token?: string;
+    tokenSecret?: string;
+    signatureMethod?: 'HMAC-SHA1' | 'HMAC-SHA256' | 'PLAINTEXT';
+    realm?: string;
+} | {
+    type: 'awsv4';
+    accessKey?: string;
+    secretKey?: string;
+    sessionToken?: string;
+    region?: string;
+    service?: string;
+};
+export interface HostExecutionRequestDraft {
+    method?: string;
+    url?: string;
+    query?: Array<{
+        key?: string;
+        value?: string;
+        enabled?: boolean;
+    }>;
+    headers?: Array<{
+        key?: string;
+        value?: string;
+        enabled?: boolean;
+    }>;
+    body?: string;
+    contentType?: string;
+    bodyMode?: 'none' | 'raw' | 'json' | 'urlencoded' | 'formdata' | 'binary' | 'graphql';
+    urlencoded?: Array<{
+        key?: string;
+        value?: string;
+        enabled?: boolean;
+    }>;
+    formData?: Array<{
+        key?: string;
+        value?: string;
+        enabled?: boolean;
+        type?: 'text' | 'file';
+        fileName?: string;
+        contentType?: string;
+    }>;
+    binary?: {
+        fileName?: string;
+        contentType?: string;
+    };
+    graphql?: {
+        query?: string;
+        variables?: string;
+    };
+    auth?: HostAuth;
+}
+export interface HostExecutionEnvelope {
+    request: HostExecutionRequestDraft;
+    certificateId?: string;
+    cookieJar?: 'session';
+    timeoutMs?: number;
+    bodyBase64?: string;
+}
+export interface HostExecutionUploadedFile {
+    name: string;
+    contentType?: string;
+    data: Buffer;
+}
+export interface ParsedHostExecutionEnvelope extends HostExecutionEnvelope {
+    formDataFiles?: Map<number, HostExecutionUploadedFile>;
+}
+export interface HostExecutionResponse {
+    status: number;
+    statusText: string;
+    headers: HeaderEntry[];
+    body: string;
+    responseTime: number;
+    cookies?: Array<{
+        name: string;
+        value: string;
+        domain?: string;
+        path?: string;
+        httpOnly?: boolean;
+    }>;
+    error?: string;
+}
+interface CookieRecord {
+    name: string;
+    value: string;
+    domain: string;
+    path: string;
+    hostOnly: boolean;
+    secure: boolean;
+    httpOnly: boolean;
+    expiresAt?: number;
+}
+export declare class HostExecutionForbiddenError extends Error {
+}
+export declare class HostExecutionUnsupportedError extends Error {
+}
+export declare class HostExecutionBadRequestError extends Error {
+}
+export interface HostExecutionState {
+    enabled: boolean;
+    options: FlexDocHostExecutionOptions;
+    capabilities: FlexDocHostExecutionCapability[];
+    certificates: Map<string, {
+        id: string;
+        name: string;
+        cert: string;
+        key: string;
+        passphrase?: string;
+    }>;
+    sessionSecret: Buffer;
+    jars: Map<string, CookieRecord[]>;
+}
+export declare function createHostExecutionState(value: boolean | FlexDocHostExecutionOptions | undefined): HostExecutionState;
+export declare function publicHostExecutionOptions(state: HostExecutionState, rendererBasePath: string): FlexDocHostExecutionPublicOptions | undefined;
+export declare function ensureHostExecutionSession(state: HostExecutionState, cookieHeader?: string): {
+    sessionId: string;
+    setCookie?: string;
+};
+export declare function isCookieDomainAllowed(responseHostname: string, candidateDomain: string): boolean;
+export declare function publicCookiesForSession(state: HostExecutionState, sessionId: string): HostExecutionResponse['cookies'];
+export declare function clearCookiesForSession(state: HostExecutionState, sessionId: string): void;
+export declare function allowedHostExecutionOrigins(state: HostExecutionState, spec: any, docsOrigin?: string): Set<string>;
+export declare function assertHostExecutionUrlAllowed(url: URL, allowedOrigins: Set<string>): void;
+export declare function assertHostExecutionResolvedAddressAllowed(address: string): void;
+export declare function executeHostRequest(state: HostExecutionState, envelope: ParsedHostExecutionEnvelope, context: {
+    spec: any;
+    sessionId: string;
+    docsOrigin?: string;
+}): Promise<HostExecutionResponse>;
+export {};