@pristine-ts/http 4.0.2 → 4.0.3

package/dist/lib/esm/cors/cors-request.handler.js

@@ -0,0 +1,204 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+import { injectable } from "tsyringe";
+import { injectConfig, moduleScoped } from "@pristine-ts/common";
+import { HttpModuleKeyname } from "../http.module.keyname";
+import { HttpConfigurationKeys } from "../http.configuration-keys";
+/**
+ * The config-driven CORS policy engine that `KernelHttpServer` consults inside its request path,
+ * BEFORE `kernel.handle()` — the one place that sees the raw request/response and can answer a
+ * preflight or reject an origin without the networking `Router` ever running.
+ *
+ * All decision methods are pure functions of the injected configuration plus a normalized
+ * {@link CorsRequestContextInterface}, so the full behavior matrix is unit-testable by
+ * constructing this class directly (no live socket, no Node request object required).
+ *
+ * ## Activation
+ * CORS is **inactive unless configured**. Two independent switches:
+ *   - `cors.allowed-origins` non-empty  → origin/preflight/header-echo logic activates.
+ *   - `cors.allowed-hosts`   non-empty  → the Host-header allowlist (DNS-rebinding defense) activates.
+ * With neither set, every method is a no-op and the server behaves exactly as it did before CORS
+ * existed.
+ *
+ * ## Guarantees
+ *   - Never emits `Access-Control-Allow-Origin: *` — only an exact echo of an allow-listed Origin.
+ *   - Never reflects an arbitrary Origin — an Origin absent from the allowlist gets no ACAO headers.
+ */
+let CorsRequestHandler = class CorsRequestHandler {
+    constructor(allowedOrigins, allowedMethods, allowedHeaders, exposedHeaders, maxAge, allowCredentials, allowPrivateNetwork, allowedHosts) {
+        this.allowedOrigins = this.normalizeList(allowedOrigins);
+        this.allowedMethods = this.normalizeList(allowedMethods);
+        this.allowedHeaders = this.normalizeList(allowedHeaders);
+        this.exposedHeaders = this.normalizeList(exposedHeaders);
+        this.maxAge = maxAge;
+        this.allowCredentials = allowCredentials === true;
+        this.allowPrivateNetwork = allowPrivateNetwork === true;
+        this.allowedHosts = this.normalizeList(allowedHosts);
+    }
+    /**
+     * `true` when an origin allowlist is configured — gates the preflight short-circuit and the
+     * `Access-Control-Allow-Origin` echo on actual responses.
+     */
+    get isOriginCheckEnabled() {
+        return this.allowedOrigins.length > 0;
+    }
+    /**
+     * `true` when a Host allowlist is configured — gates the DNS-rebinding 403.
+     */
+    get isHostCheckEnabled() {
+        return this.allowedHosts.length > 0;
+    }
+    /**
+     * Whether any CORS feature is active. `KernelHttpServer` can skip all CORS work when this is
+     * `false`, keeping the un-configured request path byte-for-byte identical to before.
+     */
+    get isEnabled() {
+        return this.isOriginCheckEnabled || this.isHostCheckEnabled;
+    }
+    /**
+     * Normalizes a raw Node request into the transport-agnostic {@link CorsRequestContextInterface}.
+     * Node lower-cases header names on `IncomingMessage`, and multi-valued headers arrive as arrays;
+     * we take the method + the CORS-relevant headers and coerce them to the single-string shape the
+     * decision methods expect.
+     */
+    buildContext(method, headers) {
+        var _a;
+        const readHeader = (name) => {
+            const value = headers[name];
+            if (Array.isArray(value)) {
+                return value[0];
+            }
+            return value !== null && value !== void 0 ? value : undefined;
+        };
+        return {
+            method: (method !== null && method !== void 0 ? method : "GET").toUpperCase(),
+            origin: readHeader("origin"),
+            host: readHeader("host"),
+            accessControlRequestMethod: readHeader("access-control-request-method"),
+            accessControlRequestHeaders: readHeader("access-control-request-headers"),
+            accessControlRequestPrivateNetwork: ((_a = readHeader("access-control-request-private-network")) !== null && _a !== void 0 ? _a : "").toLowerCase() === "true",
+        };
+    }
+    /**
+     * Host-header allowlist check (loopback DNS-rebinding defense). Returns `true` (allow) when no
+     * allowlist is configured; otherwise the request's `Host` must exactly match a configured entry
+     * (case-insensitive, since host names are). A missing `Host` against a configured allowlist is
+     * rejected. `KernelHttpServer` turns a `false` here into a `403` before any routing.
+     */
+    isHostAllowed(host) {
+        if (this.isHostCheckEnabled === false) {
+            return true;
+        }
+        if (host === undefined) {
+            return false;
+        }
+        const normalizedHost = host.trim().toLowerCase();
+        return this.allowedHosts.some(allowedHost => allowedHost.toLowerCase() === normalizedHost);
+    }
+    /**
+     * Exact-match origin allowlist check. An absent Origin is never "allowed" (there is nothing to
+     * echo). We never wildcard and never reflect an arbitrary Origin.
+     */
+    isOriginAllowed(origin) {
+        if (origin === undefined) {
+            return false;
+        }
+        const normalizedOrigin = origin.trim();
+        return this.allowedOrigins.some(allowedOrigin => allowedOrigin === normalizedOrigin);
+    }
+    /**
+     * Decides whether `context` is a CORS preflight that must be answered before routing, and if so
+     * returns the `204` response (status + headers) to write. Returns `undefined` when the request is
+     * not a preflight we own — the caller then lets it route normally.
+     *
+     * A CORS preflight is an `OPTIONS` carrying `Access-Control-Request-Method`. We only take over
+     * preflight handling when an origin allowlist is configured (same-origin requests never send
+     * `Access-Control-Request-Method`, so app-owned `OPTIONS` routes are never stolen). An allow-listed
+     * Origin gets the full `Access-Control-*` set; a disallowed Origin still gets a bare `204` with no
+     * ACAO — the browser blocks it, and we never leak an arbitrary Origin.
+     */
+    buildPreflightResponse(context) {
+        if (this.isOriginCheckEnabled === false) {
+            return undefined;
+        }
+        if (context.method !== "OPTIONS" || context.accessControlRequestMethod === undefined) {
+            return undefined;
+        }
+        const headers = {};
+        if (this.isOriginAllowed(context.origin)) {
+            headers["Access-Control-Allow-Origin"] = context.origin;
+            headers["Vary"] = "Origin";
+            headers["Access-Control-Allow-Methods"] = this.allowedMethods.join(", ");
+            headers["Access-Control-Allow-Headers"] = this.allowedHeaders.join(", ");
+            headers["Access-Control-Max-Age"] = String(this.maxAge);
+            if (this.allowCredentials) {
+                headers["Access-Control-Allow-Credentials"] = "true";
+            }
+            // Chrome Private Network Access: only answer the grant when the preflight actually asked for
+            // it AND the operator opted in. Silence otherwise so we never advertise a capability we
+            // weren't configured to allow.
+            if (this.allowPrivateNetwork && context.accessControlRequestPrivateNetwork) {
+                headers["Access-Control-Allow-Private-Network"] = "true";
+            }
+        }
+        return { statusCode: 204, headers };
+    }
+    /**
+     * The CORS headers to add to an ACTUAL (non-preflight) response — success OR error. Returns an
+     * empty object when origin-checking is off or the Origin is not allow-listed. Applied to 4xx/5xx
+     * responses too: without `Access-Control-Allow-Origin` the browser cannot read an error body.
+     */
+    buildResponseHeaders(origin) {
+        if (this.isOriginCheckEnabled === false || this.isOriginAllowed(origin) === false) {
+            return {};
+        }
+        const headers = {
+            "Access-Control-Allow-Origin": origin,
+            "Vary": "Origin",
+        };
+        if (this.allowCredentials) {
+            headers["Access-Control-Allow-Credentials"] = "true";
+        }
+        if (this.exposedHeaders.length > 0) {
+            headers["Access-Control-Expose-Headers"] = this.exposedHeaders.join(", ");
+        }
+        return headers;
+    }
+    /**
+     * Coerces a list-shaped config value into a trimmed, empty-stripped `string[]`. Accepts both the
+     * comma-separated string form (env vars / defaults) and the `string[]` form (programmatic
+     * `kernel.start()` config).
+     */
+    normalizeList(value) {
+        if (value === undefined || value === null) {
+            return [];
+        }
+        const parts = Array.isArray(value) ? value : String(value).split(",");
+        return parts.map(part => part.trim()).filter(part => part.length > 0);
+    }
+};
+CorsRequestHandler = __decorate([
+    moduleScoped(HttpModuleKeyname),
+    injectable(),
+    __param(0, injectConfig(HttpConfigurationKeys.CorsAllowedOrigins)),
+    __param(1, injectConfig(HttpConfigurationKeys.CorsAllowedMethods)),
+    __param(2, injectConfig(HttpConfigurationKeys.CorsAllowedHeaders)),
+    __param(3, injectConfig(HttpConfigurationKeys.CorsExposedHeaders)),
+    __param(4, injectConfig(HttpConfigurationKeys.CorsMaxAge)),
+    __param(5, injectConfig(HttpConfigurationKeys.CorsAllowCredentials)),
+    __param(6, injectConfig(HttpConfigurationKeys.CorsAllowPrivateNetwork)),
+    __param(7, injectConfig(HttpConfigurationKeys.CorsAllowedHosts)),
+    __metadata("design:paramtypes", [Object, Object, Object, Object, Number, Boolean, Boolean, Object])
+], CorsRequestHandler);
+export { CorsRequestHandler };
+//# sourceMappingURL=cors-request.handler.js.map

package/dist/lib/esm/cors/cors-request.handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cors-request.handler.js","sourceRoot":"","sources":["../../../../src/cors/cors-request.handler.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,OAAO,EAAC,UAAU,EAAC,MAAM,UAAU,CAAC;AACpC,OAAO,EAAC,YAAY,EAAE,YAAY,EAAC,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAC,iBAAiB,EAAC,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAC,qBAAqB,EAAC,MAAM,4BAA4B,CAAC;AAIjE;;;;;;;;;;;;;;;;;;;GAmBG;AAGI,IAAM,kBAAkB,GAAxB,MAAM,kBAAkB;IAU7B,YAC0D,cAAiC,EACjC,cAAiC,EACjC,cAAiC,EACjC,cAAiC,EACzC,MAAc,EACJ,gBAAyB,EACtB,mBAA4B,EACnC,YAA+B;QAErF,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,aAAa,CAAC,cAAc,CAAC,CAAC;QACzD,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,aAAa,CAAC,cAAc,CAAC,CAAC;QACzD,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,aAAa,CAAC,cAAc,CAAC,CAAC;QACzD,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,aAAa,CAAC,cAAc,CAAC,CAAC;QACzD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,gBAAgB,GAAG,gBAAgB,KAAK,IAAI,CAAC;QAClD,IAAI,CAAC,mBAAmB,GAAG,mBAAmB,KAAK,IAAI,CAAC;QACxD,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;IACvD,CAAC;IAED;;;OAGG;IACH,IAAW,oBAAoB;QAC7B,OAAO,IAAI,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,CAAC;IACxC,CAAC;IAED;;OAEG;IACH,IAAW,kBAAkB;QAC3B,OAAO,IAAI,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC;IACtC,CAAC;IAED;;;OAGG;IACH,IAAW,SAAS;QAClB,OAAO,IAAI,CAAC,oBAAoB,IAAI,IAAI,CAAC,kBAAkB,CAAC;IAC9D,CAAC;IAED;;;;;OAKG;IACI,YAAY,CAAC,MAAc,EAAE,OAAyD;;QAC3F,MAAM,UAAU,GAAG,CAAC,IAAY,EAAsB,EAAE;YACtD,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;YAC5B,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBACzB,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YACD,OAAO,KAAK,aAAL,KAAK,cAAL,KAAK,GAAI,SAAS,CAAC;QAC5B,CAAC,CAAC;QAEF,OAAO;YACL,MAAM,EAAE,CAAC,MAAM,aAAN,MAAM,cAAN,MAAM,GAAI,KAAK,CAAC,CAAC,WAAW,EAAE;YACvC,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC;YAC5B,IAAI,EAAE,UAAU,CAAC,MAAM,CAAC;YACxB,0BAA0B,EAAE,UAAU,CAAC,+BAA+B,CAAC;YACvE,2BAA2B,EAAE,UAAU,CAAC,gCAAgC,CAAC;YACzE,kCAAkC,EAAE,CAAC,MAAA,UAAU,CAAC,wCAAwC,CAAC,mCAAI,EAAE,CAAC,CAAC,WAAW,EAAE,KAAK,MAAM;SAC1H,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACI,aAAa,CAAC,IAAwB;QAC3C,IAAI,IAAI,CAAC,kBAAkB,KAAK,KAAK,EAAE,CAAC;YACtC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACjD,OAAO,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,WAAW,CAAC,WAAW,EAAE,KAAK,cAAc,CAAC,CAAC;IAC7F,CAAC;IAED;;;OAGG;IACI,eAAe,CAAC,MAA0B;QAC/C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,gBAAgB,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;QACvC,OAAO,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC,aAAa,KAAK,gBAAgB,CAAC,CAAC;IACvF,CAAC;IAED;;;;;;;;;;OAUG;IACI,sBAAsB,CAAC,OAAoC;QAChE,IAAI,IAAI,CAAC,oBAAoB,KAAK,KAAK,EAAE,CAAC;YACxC,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,OAAO,CAAC,0BAA0B,KAAK,SAAS,EAAE,CAAC;YACrF,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,OAAO,GAA+B,EAAE,CAAC;QAE/C,IAAI,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACzC,OAAO,CAAC,6BAA6B,CAAC,GAAG,OAAO,CAAC,MAAgB,CAAC;YAClE,OAAO,CAAC,MAAM,CAAC,GAAG,QAAQ,CAAC;YAC3B,OAAO,CAAC,8BAA8B,CAAC,GAAG,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACzE,OAAO,CAAC,8BAA8B,CAAC,GAAG,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACzE,OAAO,CAAC,wBAAwB,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAExD,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBAC1B,OAAO,CAAC,kCAAkC,CAAC,GAAG,MAAM,CAAC;YACvD,CAAC;YAED,6FAA6F;YAC7F,wFAAwF;YACxF,+BAA+B;YAC/B,IAAI,IAAI,CAAC,mBAAmB,IAAI,OAAO,CAAC,kCAAkC,EAAE,CAAC;gBAC3E,OAAO,CAAC,sCAAsC,CAAC,GAAG,MAAM,CAAC;YAC3D,CAAC;QACH,CAAC;QAED,OAAO,EAAC,UAAU,EAAE,GAAG,EAAE,OAAO,EAAC,CAAC;IACpC,CAAC;IAED;;;;OAIG;IACI,oBAAoB,CAAC,MAA0B;QACpD,IAAI,IAAI,CAAC,oBAAoB,KAAK,KAAK,IAAI,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,KAAK,KAAK,EAAE,CAAC;YAClF,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,OAAO,GAA+B;YAC1C,6BAA6B,EAAE,MAAgB;YAC/C,MAAM,EAAE,QAAQ;SACjB,CAAC;QAEF,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC1B,OAAO,CAAC,kCAAkC,CAAC,GAAG,MAAM,CAAC;QACvD,CAAC;QAED,IAAI,IAAI,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACnC,OAAO,CAAC,+BAA+B,CAAC,GAAG,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5E,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;;;OAIG;IACK,aAAa,CAAC,KAA2C;QAC/D,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YAC1C,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACtE,OAAO,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACxE,CAAC;CACF,CAAA;AA5LY,kBAAkB;IAF9B,YAAY,CAAC,iBAAiB,CAAC;IAC/B,UAAU,EAAE;IAYR,WAAA,YAAY,CAAC,qBAAqB,CAAC,kBAAkB,CAAC,CAAA;IACtD,WAAA,YAAY,CAAC,qBAAqB,CAAC,kBAAkB,CAAC,CAAA;IACtD,WAAA,YAAY,CAAC,qBAAqB,CAAC,kBAAkB,CAAC,CAAA;IACtD,WAAA,YAAY,CAAC,qBAAqB,CAAC,kBAAkB,CAAC,CAAA;IACtD,WAAA,YAAY,CAAC,qBAAqB,CAAC,UAAU,CAAC,CAAA;IAC9C,WAAA,YAAY,CAAC,qBAAqB,CAAC,oBAAoB,CAAC,CAAA;IACxD,WAAA,YAAY,CAAC,qBAAqB,CAAC,uBAAuB,CAAC,CAAA;IAC3D,WAAA,YAAY,CAAC,qBAAqB,CAAC,gBAAgB,CAAC,CAAA;;GAlB5C,kBAAkB,CA4L9B"}

package/dist/lib/esm/cors/cors.js

@@ -0,0 +1,4 @@
+export * from "./cors-preflight-response.interface";
+export * from "./cors-request-context.interface";
+export * from "./cors-request.handler";
+//# sourceMappingURL=cors.js.map

package/dist/lib/esm/cors/cors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cors.js","sourceRoot":"","sources":["../../../../src/cors/cors.ts"],"names":[],"mappings":"AAAA,cAAc,qCAAqC,CAAC;AACpD,cAAc,kCAAkC,CAAC;AACjD,cAAc,wBAAwB,CAAC"}

package/dist/lib/esm/http.configuration-keys.js

@@ -17,5 +17,19 @@ export const HttpConfigurationKeys = {
     KernelServerPort: "pristine.http.kernel-server.port",
     KernelServerTlsKeyPath: "pristine.http.kernel-server.tls.key-path",
     KernelServerTlsCertPath: "pristine.http.kernel-server.tls.cert-path",
+    /**
+     * CORS keys consumed by `CorsRequestHandler` inside `KernelHttpServer`'s request path.
+     * CORS is inactive unless `cors.allowed-origins` (and/or `cors.allowed-hosts`) is set —
+     * a server with none of these configured behaves exactly as it did before CORS existed.
+     * Each list key accepts a comma-separated string or a `string[]`.
+     */
+    CorsAllowedOrigins: "pristine.http.cors.allowed-origins",
+    CorsAllowedMethods: "pristine.http.cors.allowed-methods",
+    CorsAllowedHeaders: "pristine.http.cors.allowed-headers",
+    CorsExposedHeaders: "pristine.http.cors.exposed-headers",
+    CorsMaxAge: "pristine.http.cors.max-age",
+    CorsAllowCredentials: "pristine.http.cors.allow-credentials",
+    CorsAllowPrivateNetwork: "pristine.http.cors.allow-private-network",
+    CorsAllowedHosts: "pristine.http.cors.allowed-hosts",
 };
 //# sourceMappingURL=http.configuration-keys.js.map

package/dist/lib/esm/http.configuration-keys.js.map

@@ -1 +1 @@
-{"version":3,"file":"http.configuration-keys.js","sourceRoot":"","sources":["../../../src/http.configuration-keys.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,cAAc,EAAE,+BAA+B;IAC/C,qBAAqB,EAAE,wCAAwC;IAC/D,kBAAkB,EAAE,qCAAqC;IACzD,mBAAmB,EAAE,qCAAqC;IAC1D,gBAAgB,EAAE,kCAAkC;IACpD,sBAAsB,EAAE,0CAA0C;IAClE,uBAAuB,EAAE,2CAA2C;CAC5D,CAAC"}
+{"version":3,"file":"http.configuration-keys.js","sourceRoot":"","sources":["../../../src/http.configuration-keys.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,cAAc,EAAE,+BAA+B;IAC/C,qBAAqB,EAAE,wCAAwC;IAC/D,kBAAkB,EAAE,qCAAqC;IACzD,mBAAmB,EAAE,qCAAqC;IAC1D,gBAAgB,EAAE,kCAAkC;IACpD,sBAAsB,EAAE,0CAA0C;IAClE,uBAAuB,EAAE,2CAA2C;IAEpE;;;;;OAKG;IACH,kBAAkB,EAAE,oCAAoC;IACxD,kBAAkB,EAAE,oCAAoC;IACxD,kBAAkB,EAAE,oCAAoC;IACxD,kBAAkB,EAAE,oCAAoC;IACxD,UAAU,EAAE,4BAA4B;IACxC,oBAAoB,EAAE,sCAAsC;IAC5D,uBAAuB,EAAE,0CAA0C;IACnE,gBAAgB,EAAE,kCAAkC;CAC5C,CAAC"}

package/dist/lib/esm/http.module.js

@@ -18,6 +18,7 @@ import { KernelHttpServer } from "./servers/kernel.http-server";
 export * from "./http.module.keyname";
 export * from "./commands/commands";
 export * from "./clients/clients";
+export * from "./cors/cors";
 export * from "./enums/enums";
 export * from "./errors/errors";
 export * from "./interceptors/interceptors";
@@ -110,6 +111,106 @@ export const HttpModule = {
                 new EnvironmentVariableResolver("PRISTINE_HTTP_KERNEL_SERVER_TLS_CERT_PATH"),
             ]
         },
+        /**
+         * CORS — handled by `CorsRequestHandler` inside `KernelHttpServer`'s request path. All keys
+         * carry defaults so `@injectConfig` always resolves; CORS stays INACTIVE until
+         * `cors.allowed-origins` (and/or `cors.allowed-hosts`) is set. List keys accept a
+         * comma-separated string (env/default) or a `string[]` (programmatic config).
+         *
+         * Exact-match origin allowlist. Empty (the default) = CORS disabled: no preflight
+         * short-circuit and no `Access-Control-Allow-Origin` echo. Never wildcarded.
+         */
+        {
+            parameterName: `${HttpModuleKeyname}.cors.allowed-origins`,
+            defaultValue: "",
+            isRequired: false,
+            defaultResolvers: [
+                new EnvironmentVariableResolver("PRISTINE_HTTP_CORS_ALLOWED_ORIGINS"),
+            ]
+        },
+        /**
+         * Methods advertised in the preflight `Access-Control-Allow-Methods` response.
+         */
+        {
+            parameterName: `${HttpModuleKeyname}.cors.allowed-methods`,
+            defaultValue: "GET,POST,PUT,DELETE,PATCH,OPTIONS",
+            isRequired: false,
+            defaultResolvers: [
+                new EnvironmentVariableResolver("PRISTINE_HTTP_CORS_ALLOWED_METHODS"),
+            ]
+        },
+        /**
+         * Request headers advertised in the preflight `Access-Control-Allow-Headers` response.
+         */
+        {
+            parameterName: `${HttpModuleKeyname}.cors.allowed-headers`,
+            defaultValue: "Content-Type",
+            isRequired: false,
+            defaultResolvers: [
+                new EnvironmentVariableResolver("PRISTINE_HTTP_CORS_ALLOWED_HEADERS"),
+            ]
+        },
+        /**
+         * Response headers exposed to the browser via `Access-Control-Expose-Headers` on actual
+         * responses. Empty (the default) omits the header entirely.
+         */
+        {
+            parameterName: `${HttpModuleKeyname}.cors.exposed-headers`,
+            defaultValue: "",
+            isRequired: false,
+            defaultResolvers: [
+                new EnvironmentVariableResolver("PRISTINE_HTTP_CORS_EXPOSED_HEADERS"),
+            ]
+        },
+        /**
+         * Seconds a browser may cache the preflight result (`Access-Control-Max-Age`).
+         */
+        {
+            parameterName: `${HttpModuleKeyname}.cors.max-age`,
+            defaultValue: 600,
+            isRequired: false,
+            defaultResolvers: [
+                new NumberResolver(new EnvironmentVariableResolver("PRISTINE_HTTP_CORS_MAX_AGE")),
+            ]
+        },
+        /**
+         * When true, emit `Access-Control-Allow-Credentials: true` on preflight and actual responses
+         * for allow-listed origins (lets the browser send cookies / `Authorization`).
+         */
+        {
+            parameterName: `${HttpModuleKeyname}.cors.allow-credentials`,
+            defaultValue: false,
+            isRequired: false,
+            defaultResolvers: [
+                new BooleanResolver(new EnvironmentVariableResolver("PRISTINE_HTTP_CORS_ALLOW_CREDENTIALS")),
+            ]
+        },
+        /**
+         * Chrome Private Network Access. When true, answer `Access-Control-Allow-Private-Network: true`
+         * to a preflight that carries `Access-Control-Request-Private-Network: true` — required for a
+         * public/secure site to call a loopback/private-network daemon.
+         */
+        {
+            parameterName: `${HttpModuleKeyname}.cors.allow-private-network`,
+            defaultValue: false,
+            isRequired: false,
+            defaultResolvers: [
+                new BooleanResolver(new EnvironmentVariableResolver("PRISTINE_HTTP_CORS_ALLOW_PRIVATE_NETWORK")),
+            ]
+        },
+        /**
+         * Optional `Host`-header allowlist (loopback DNS-rebinding defense). When set, a request whose
+         * `Host` is not listed is rejected with `403` before routing. Empty (the default) disables the
+         * check. Independent of `allowed-origins`.
+         */
+        {
+            parameterName: `${HttpModuleKeyname}.cors.allowed-hosts`,
+            defaultValue: "",
+            isRequired: false,
+            defaultResolvers: [
+                new EnvironmentVariableResolver("PRISTINE_HTTP_CORS_ALLOWED_HOSTS"),
+            ]
+        },
     ],
     onShutdown: (container) => __awaiter(void 0, void 0, void 0, function* () {
         // The KernelHttpServer self-tracks whether `start()` was actually called: if pristine start

package/dist/lib/esm/http.module.js.map

@@ -1 +1 @@
-{"version":3,"file":"http.module.js","sourceRoot":"","sources":["../../../src/http.module.ts"],"names":[],"mappings":";;;;;;;;;AACA,OAAO,EAAC,iBAAiB,EAAC,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAC,aAAa,EAAC,MAAM,sBAAsB,CAAC;AACnD,OAAO,EAAC,UAAU,EAAC,MAAM,mBAAmB,CAAC;AAC7C,OAAO,EAAC,iBAAiB,EAAC,MAAM,2BAA2B,CAAC;AAC5D,OAAO,EAAC,mBAAmB,EAAC,MAAM,4BAA4B,CAAC;AAC/D,OAAO,EAAC,gBAAgB,EAAC,MAAM,yBAAyB,CAAC;AACzD,OAAO,EAAC,eAAe,EAAE,2BAA2B,EAAE,cAAc,EAAC,MAAM,4BAA4B,CAAC;AACxG,OAAO,EAAC,gBAAgB,EAAC,MAAM,8BAA8B,CAAC;AAE9D,cAAc,uBAAuB,CAAC;AACtC,cAAc,qBAAqB,CAAC;AACpC,cAAc,mBAAmB,CAAC;AAClC,cAAc,eAAe,CAAC;AAC9B,cAAc,iBAAiB,CAAC;AAChC,cAAc,6BAA6B,CAAA;AAC3C,cAAc,yBAAyB,CAAA;AACvC,cAAc,mBAAmB,CAAC;AAClC,cAAc,mBAAmB,CAAC;AAClC,cAAc,eAAe,CAAC;AAC9B,cAAc,qBAAqB,CAAC;AAEpC,cAAc,2BAA2B,CAAC;AAC1C,MAAM,CAAC,MAAM,UAAU,GAAoB;IACzC,OAAO,EAAE,iBAAiB;IAC1B,iGAAiG;IACjG,4FAA4F;IAC5F,iGAAiG;IACjG,6FAA6F;IAC7F,kGAAkG;IAClG,oFAAoF;IACpF,yFAAyF;IACzF,aAAa,EAAE,CAAC,UAAU,EAAE,iBAAiB,EAAE,aAAa,EAAE,mBAAmB,EAAE,gBAAgB,CAAC;IACpG,wBAAwB,EAAE;QACxB;YACE,aAAa,EAAE,GAAG,iBAAiB,kBAAkB;YACrD,YAAY,EAAE,IAAI;YAClB,UAAU,EAAE,KAAK;YACjB,gBAAgB,EAAE;gBAChB,IAAI,eAAe,CAAC,IAAI,2BAA2B,CAAC,uBAAuB,CAAC,CAAC;aAC9E;SACF;QACD;YACE,aAAa,EAAE,GAAG,iBAAiB,2BAA2B;YAC9D,YAAY,EAAE,WAAW;YACzB,UAAU,EAAE,KAAK;YACjB,gBAAgB,EAAE;gBAChB,IAAI,2BAA2B,CAAC,mCAAmC,CAAC;aACrE;SACF;QACD;YACE,aAAa,EAAE,GAAG,iBAAiB,wBAAwB;YAC3D,YAAY,EAAE,IAAI;YAClB,UAAU,EAAE,KAAK;YACjB,gBAAgB,EAAE;gBAChB,IAAI,cAAc,CAAC,IAAI,2BAA2B,CAAC,gCAAgC,CAAC,CAAC;aACtF;SACF;QACD;;;;WAIG;QACH;YACE,aAAa,EAAE,GAAG,iBAAiB,wBAAwB;YAC3D,YAAY,EAAE,SAAS;YACvB,UAAU,EAAE,KAAK;YACjB,gBAAgB,EAAE;gBAChB,IAAI,2BAA2B,CAAC,qCAAqC,CAAC;aACvE;SACF;QACD;;;WAGG;QACH;YACE,aAAa,EAAE,GAAG,iBAAiB,qBAAqB;YACxD,YAAY,EAAE,IAAI;YAClB,UAAU,EAAE,KAAK;YACjB,gBAAgB,EAAE;gBAChB,IAAI,cAAc,CAAC,IAAI,2BAA2B,CAAC,kCAAkC,CAAC,CAAC;aACxF;SACF;QACD;;;WAGG;QACH;YACE,aAAa,EAAE,GAAG,iBAAiB,6BAA6B;YAChE,YAAY,EAAE,EAAE;YAChB,UAAU,EAAE,KAAK;YACjB,gBAAgB,EAAE;gBAChB,IAAI,2BAA2B,CAAC,0CAA0C,CAAC;aAC5E;SACF;QACD;;WAEG;QACH;YACE,aAAa,EAAE,GAAG,iBAAiB,8BAA8B;YACjE,YAAY,EAAE,EAAE;YAChB,UAAU,EAAE,KAAK;YACjB,gBAAgB,EAAE;gBAChB,IAAI,2BAA2B,CAAC,2CAA2C,CAAC;aAC7E;SACF;KACF;IACD,UAAU,EAAE,CAAO,SAAS,EAAE,EAAE;QAC9B,4FAA4F;QAC5F,wFAAwF;QACxF,2FAA2F;QAC3F,IAAI,CAAC;YACH,2EAA2E;YAC3E,4EAA4E;YAC5E,sEAAsE;YACtE,uEAAuE;YACvE,uDAAuD;YACvD,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;YACnD,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACtB,CAAC;QAAC,WAAM,CAAC;YACP,sFAAsF;YACtF,yFAAyF;YACzF,6DAA6D;QAC/D,CAAC;IACH,CAAC,CAAA;CACF,CAAA"}
+{"version":3,"file":"http.module.js","sourceRoot":"","sources":["../../../src/http.module.ts"],"names":[],"mappings":";;;;;;;;;AACA,OAAO,EAAC,iBAAiB,EAAC,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAC,aAAa,EAAC,MAAM,sBAAsB,CAAC;AACnD,OAAO,EAAC,UAAU,EAAC,MAAM,mBAAmB,CAAC;AAC7C,OAAO,EAAC,iBAAiB,EAAC,MAAM,2BAA2B,CAAC;AAC5D,OAAO,EAAC,mBAAmB,EAAC,MAAM,4BAA4B,CAAC;AAC/D,OAAO,EAAC,gBAAgB,EAAC,MAAM,yBAAyB,CAAC;AACzD,OAAO,EAAC,eAAe,EAAE,2BAA2B,EAAE,cAAc,EAAC,MAAM,4BAA4B,CAAC;AACxG,OAAO,EAAC,gBAAgB,EAAC,MAAM,8BAA8B,CAAC;AAE9D,cAAc,uBAAuB,CAAC;AACtC,cAAc,qBAAqB,CAAC;AACpC,cAAc,mBAAmB,CAAC;AAClC,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,iBAAiB,CAAC;AAChC,cAAc,6BAA6B,CAAA;AAC3C,cAAc,yBAAyB,CAAA;AACvC,cAAc,mBAAmB,CAAC;AAClC,cAAc,mBAAmB,CAAC;AAClC,cAAc,eAAe,CAAC;AAC9B,cAAc,qBAAqB,CAAC;AAEpC,cAAc,2BAA2B,CAAC;AAC1C,MAAM,CAAC,MAAM,UAAU,GAAoB;IACzC,OAAO,EAAE,iBAAiB;IAC1B,iGAAiG;IACjG,4FAA4F;IAC5F,iGAAiG;IACjG,6FAA6F;IAC7F,kGAAkG;IAClG,oFAAoF;IACpF,yFAAyF;IACzF,aAAa,EAAE,CAAC,UAAU,EAAE,iBAAiB,EAAE,aAAa,EAAE,mBAAmB,EAAE,gBAAgB,CAAC;IACpG,wBAAwB,EAAE;QACxB;YACE,aAAa,EAAE,GAAG,iBAAiB,kBAAkB;YACrD,YAAY,EAAE,IAAI;YAClB,UAAU,EAAE,KAAK;YACjB,gBAAgB,EAAE;gBAChB,IAAI,eAAe,CAAC,IAAI,2BAA2B,CAAC,uBAAuB,CAAC,CAAC;aAC9E;SACF;QACD;YACE,aAAa,EAAE,GAAG,iBAAiB,2BAA2B;YAC9D,YAAY,EAAE,WAAW;YACzB,UAAU,EAAE,KAAK;YACjB,gBAAgB,EAAE;gBAChB,IAAI,2BAA2B,CAAC,mCAAmC,CAAC;aACrE;SACF;QACD;YACE,aAAa,EAAE,GAAG,iBAAiB,wBAAwB;YAC3D,YAAY,EAAE,IAAI;YAClB,UAAU,EAAE,KAAK;YACjB,gBAAgB,EAAE;gBAChB,IAAI,cAAc,CAAC,IAAI,2BAA2B,CAAC,gCAAgC,CAAC,CAAC;aACtF;SACF;QACD;;;;WAIG;QACH;YACE,aAAa,EAAE,GAAG,iBAAiB,wBAAwB;YAC3D,YAAY,EAAE,SAAS;YACvB,UAAU,EAAE,KAAK;YACjB,gBAAgB,EAAE;gBAChB,IAAI,2BAA2B,CAAC,qCAAqC,CAAC;aACvE;SACF;QACD;;;WAGG;QACH;YACE,aAAa,EAAE,GAAG,iBAAiB,qBAAqB;YACxD,YAAY,EAAE,IAAI;YAClB,UAAU,EAAE,KAAK;YACjB,gBAAgB,EAAE;gBAChB,IAAI,cAAc,CAAC,IAAI,2BAA2B,CAAC,kCAAkC,CAAC,CAAC;aACxF;SACF;QACD;;;WAGG;QACH;YACE,aAAa,EAAE,GAAG,iBAAiB,6BAA6B;YAChE,YAAY,EAAE,EAAE;YAChB,UAAU,EAAE,KAAK;YACjB,gBAAgB,EAAE;gBAChB,IAAI,2BAA2B,CAAC,0CAA0C,CAAC;aAC5E;SACF;QACD;;WAEG;QACH;YACE,aAAa,EAAE,GAAG,iBAAiB,8BAA8B;YACjE,YAAY,EAAE,EAAE;YAChB,UAAU,EAAE,KAAK;YACjB,gBAAgB,EAAE;gBAChB,IAAI,2BAA2B,CAAC,2CAA2C,CAAC;aAC7E;SACF;QACD;;;;;;;;WAQG;QACH;YACE,aAAa,EAAE,GAAG,iBAAiB,uBAAuB;YAC1D,YAAY,EAAE,EAAE;YAChB,UAAU,EAAE,KAAK;YACjB,gBAAgB,EAAE;gBAChB,IAAI,2BAA2B,CAAC,oCAAoC,CAAC;aACtE;SACF;QACD;;WAEG;QACH;YACE,aAAa,EAAE,GAAG,iBAAiB,uBAAuB;YAC1D,YAAY,EAAE,mCAAmC;YACjD,UAAU,EAAE,KAAK;YACjB,gBAAgB,EAAE;gBAChB,IAAI,2BAA2B,CAAC,oCAAoC,CAAC;aACtE;SACF;QACD;;WAEG;QACH;YACE,aAAa,EAAE,GAAG,iBAAiB,uBAAuB;YAC1D,YAAY,EAAE,cAAc;YAC5B,UAAU,EAAE,KAAK;YACjB,gBAAgB,EAAE;gBAChB,IAAI,2BAA2B,CAAC,oCAAoC,CAAC;aACtE;SACF;QACD;;;WAGG;QACH;YACE,aAAa,EAAE,GAAG,iBAAiB,uBAAuB;YAC1D,YAAY,EAAE,EAAE;YAChB,UAAU,EAAE,KAAK;YACjB,gBAAgB,EAAE;gBAChB,IAAI,2BAA2B,CAAC,oCAAoC,CAAC;aACtE;SACF;QACD;;WAEG;QACH;YACE,aAAa,EAAE,GAAG,iBAAiB,eAAe;YAClD,YAAY,EAAE,GAAG;YACjB,UAAU,EAAE,KAAK;YACjB,gBAAgB,EAAE;gBAChB,IAAI,cAAc,CAAC,IAAI,2BAA2B,CAAC,4BAA4B,CAAC,CAAC;aAClF;SACF;QACD;;;WAGG;QACH;YACE,aAAa,EAAE,GAAG,iBAAiB,yBAAyB;YAC5D,YAAY,EAAE,KAAK;YACnB,UAAU,EAAE,KAAK;YACjB,gBAAgB,EAAE;gBAChB,IAAI,eAAe,CAAC,IAAI,2BAA2B,CAAC,sCAAsC,CAAC,CAAC;aAC7F;SACF;QACD;;;;WAIG;QACH;YACE,aAAa,EAAE,GAAG,iBAAiB,6BAA6B;YAChE,YAAY,EAAE,KAAK;YACnB,UAAU,EAAE,KAAK;YACjB,gBAAgB,EAAE;gBAChB,IAAI,eAAe,CAAC,IAAI,2BAA2B,CAAC,0CAA0C,CAAC,CAAC;aACjG;SACF;QACD;;;;WAIG;QACH;YACE,aAAa,EAAE,GAAG,iBAAiB,qBAAqB;YACxD,YAAY,EAAE,EAAE;YAChB,UAAU,EAAE,KAAK;YACjB,gBAAgB,EAAE;gBAChB,IAAI,2BAA2B,CAAC,kCAAkC,CAAC;aACpE;SACF;KACF;IACD,UAAU,EAAE,CAAO,SAAS,EAAE,EAAE;QAC9B,4FAA4F;QAC5F,wFAAwF;QACxF,2FAA2F;QAC3F,IAAI,CAAC;YACH,2EAA2E;YAC3E,4EAA4E;YAC5E,sEAAsE;YACtE,uEAAuE;YACvE,uDAAuD;YACvD,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;YACnD,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACtB,CAAC;QAAC,WAAM,CAAC;YACP,sFAAsF;YACtF,yFAAyF;YACzF,6DAA6D;QAC/D,CAAC;IACH,CAAC,CAAA;CACF,CAAA"}

package/dist/lib/esm/servers/kernel.http-server.js

@@ -26,6 +26,7 @@ import fs from "fs";
 import { EventIdManager, ExecutionContextKeynameEnum, Kernel } from "@pristine-ts/core";
 import { moduleScoped, Request, Response, ServiceDefinitionTagEnum, tag } from "@pristine-ts/common";
 import { HttpModuleKeyname } from "../http.module.keyname";
+import { CorsRequestHandler } from "../cors/cors-request.handler";
 /**
  * Wraps Node's `http.Server` (or `https.Server` when TLS config is present) and routes every
  * incoming request through `kernel.handle()`. The kernel dispatches to the existing
@@ -43,7 +44,7 @@ import { HttpModuleKeyname } from "../http.module.keyname";
  * rather than silently leaking the previous server.
  */
 let KernelHttpServer = class KernelHttpServer {
-    constructor(defaultAddress, defaultPort, defaultTlsKeyPath, defaultTlsCertPath, logHandler, kernel, eventIdManager) {
+    constructor(defaultAddress, defaultPort, defaultTlsKeyPath, defaultTlsCertPath, logHandler, kernel, eventIdManager, corsRequestHandler) {
         this.defaultAddress = defaultAddress;
         this.defaultPort = defaultPort;
         this.defaultTlsKeyPath = defaultTlsKeyPath;
@@ -51,6 +52,7 @@ let KernelHttpServer = class KernelHttpServer {
         this.logHandler = logHandler;
         this.kernel = kernel;
         this.eventIdManager = eventIdManager;
+        this.corsRequestHandler = corsRequestHandler;
         /**
          * Identifier reported back via `RuntimeServerInterface.name`. Switches to `"https"` when
          * TLS config is present, mainly so log lines and `pristine info`-style introspection make
@@ -155,6 +157,15 @@ let KernelHttpServer = class KernelHttpServer {
             });
         });
     }
+    /**
+     * The address the underlying server is bound to, or `null` when not listening. For a TCP socket
+     * this is `{address, family, port}` — useful when binding to port `0` (ephemeral port) and the
+     * caller needs to discover the assigned port afterwards.
+     */
+    getAddress() {
+        var _a, _b;
+        return (_b = (_a = this.server) === null || _a === void 0 ? void 0 : _a.address()) !== null && _b !== void 0 ? _b : null;
+    }
     /**
      * Reads the body, builds a Pristine `Request`, dispatches via the kernel, writes the
      * resulting `Response`. All errors are caught and turned into a 500 response so the
@@ -163,15 +174,43 @@ let KernelHttpServer = class KernelHttpServer {
      */
     handleRequest(req, res) {
         return __awaiter(this, void 0, void 0, function* () {
-            var _a;
+            var _a, _b;
             const requestId = (_a = req.headers["x-pristine-request-id"]) !== null && _a !== void 0 ? _a : this.eventIdManager.generateEventId();
+            // Normalize the raw request into the CORS decision context up-front. When no CORS config is
+            // present every method below is a no-op, so this whole block is transparent to un-configured
+            // servers. `corsResponseHeaders` (ACAO + Vary + ...) is computed once here and applied to
+            // BOTH the success and the error/500 responses below — a browser can only read an error body
+            // if the error response also carries Access-Control-Allow-Origin.
+            const corsContext = this.corsRequestHandler.buildContext((_b = req.method) !== null && _b !== void 0 ? _b : "GET", req.headers);
+            const corsResponseHeaders = this.corsRequestHandler.buildResponseHeaders(corsContext.origin);
             try {
+                // 1. Host-header allowlist (loopback DNS-rebinding defense) — reject before routing and
+                // before reading the body, so a rejected caller can't stream a payload at us.
+                if (this.corsRequestHandler.isHostAllowed(corsContext.host) === false) {
+                    this.logHandler.warning("KernelHttpServer: rejecting request with disallowed Host header", {
+                        extra: { host: corsContext.host, url: req.url, method: req.method, requestId },
+                    });
+                    res.statusCode = 403;
+                    this.applyHeaders(res, corsResponseHeaders);
+                    res.setHeader("content-type", "application/json");
+                    res.end(JSON.stringify({ error: "Forbidden", requestId }));
+                    return;
+                }
+                // 2. CORS preflight — answered with a 204 and short-circuited BEFORE kernel.handle, since a
+                // preflight never matches a real route in the networking Router.
+                const preflight = this.corsRequestHandler.buildPreflightResponse(corsContext);
+                if (preflight !== undefined) {
+                    res.statusCode = preflight.statusCode;
+                    this.applyHeaders(res, preflight.headers);
+                    res.end();
+                    return;
+                }
                 const request = yield this.mapToPristineRequest(req, requestId);
                 const result = yield this.kernel.handle(request, {
                     keyname: ExecutionContextKeynameEnum.Http,
                     context: null,
                 });
-                this.writeResponse(res, result);
+                this.writeResponse(res, result, corsResponseHeaders);
             }
             catch (error) {
                 this.logHandler.error("KernelHttpServer: unhandled error while processing request", {
@@ -181,6 +220,9 @@ let KernelHttpServer = class KernelHttpServer {
                 // can only destroy the socket — but most kernel.handle errors propagate before any write.
                 if (res.headersSent === false) {
                     res.statusCode = 500;
+                    // Echo CORS headers on the error path too — otherwise the browser blocks the response and
+                    // the caller never sees the 500 body.
+                    this.applyHeaders(res, corsResponseHeaders);
                     res.setHeader("content-type", "application/json");
                     res.end(JSON.stringify({ error: "Internal Server Error", requestId }));
                 }
@@ -261,9 +303,13 @@ let KernelHttpServer = class KernelHttpServer {
      * Writes a Pristine `Response` (or any object — handlers that return raw JSON serialize as-is)
      * back to the underlying `ServerResponse`. Default status is 200, default content-type is
      * `application/json` when the body is non-string.
+     *
+     * `corsHeaders` (empty when CORS is off or the Origin isn't allow-listed) is applied AFTER the
+     * response's own headers so the `Access-Control-*` set is authoritative and a handler can't
+     * accidentally clobber it.
      * @private
      */
-    writeResponse(res, result) {
+    writeResponse(res, result, corsHeaders = {}) {
         var _a, _b;
         const isPristineResponse = result instanceof Response || (result !== null && typeof result === "object" && typeof result.status === "number" && "body" in result);
         const status = isPristineResponse ? ((_a = result.status) !== null && _a !== void 0 ? _a : 200) : 200;
@@ -281,6 +327,7 @@ let KernelHttpServer = class KernelHttpServer {
             // Buffer body: write directly without re-encoding. Don't auto-set content-type — the
             // handler that produced a Buffer is presumed to know what it's sending.
             this.applyHeaders(res, headers);
+            this.applyHeaders(res, corsHeaders);
             res.end(body);
             return;
         }
@@ -291,6 +338,7 @@ let KernelHttpServer = class KernelHttpServer {
             }
         }
         this.applyHeaders(res, headers);
+        this.applyHeaders(res, corsHeaders);
         res.end(serializedBody);
     }
     applyHeaders(res, headers) {
@@ -318,7 +366,8 @@ KernelHttpServer = __decorate([
     __param(3, inject(`%${HttpModuleKeyname}.kernel-server.tls.cert-path%`)),
     __param(4, inject("LogHandlerInterface")),
     __metadata("design:paramtypes", [String, Number, String, String, Object, Kernel,
-        EventIdManager])
+        EventIdManager,
+        CorsRequestHandler])
 ], KernelHttpServer);
 export { KernelHttpServer };
 //# sourceMappingURL=kernel.http-server.js.map

package/dist/lib/esm/servers/kernel.http-server.js.map

@@ -1 +1 @@
-{"version":3,"file":"kernel.http-server.js","sourceRoot":"","sources":["../../../../src/servers/kernel.http-server.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;AAAA,OAAO,EAAC,MAAM,EAAE,UAAU,EAAC,MAAM,UAAU,CAAC;AAC5C,OAAO,IAA+C,MAAM,MAAM,CAAC;AACnE,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,MAAM,IAAI,CAAC;AAEpB,OAAO,EAAC,cAAc,EAAE,2BAA2B,EAAE,MAAM,EAAyB,MAAM,mBAAmB,CAAC;AAC9G,OAAO,EAAC,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,wBAAwB,EAAE,GAAG,EAAC,MAAM,qBAAqB,CAAC;AAEnG,OAAO,EAAC,iBAAiB,EAAC,MAAM,wBAAwB,CAAC;AAgBzD;;;;;;;;;;;;;;;GAeG;AAII,IAAM,gBAAgB,GAAtB,MAAM,gBAAgB;IAqB3B,YAC0D,cAAuC,EAC1C,WAAoC,EAC5B,iBAA0C,EACzC,kBAA2C,EAC1E,UAAgD,EAC9D,MAAc,EACd,cAA8B;QAN0B,mBAAc,GAAd,cAAc,CAAQ;QACzB,gBAAW,GAAX,WAAW,CAAQ;QACX,sBAAiB,GAAjB,iBAAiB,CAAQ;QACxB,uBAAkB,GAAlB,kBAAkB,CAAQ;QACzD,eAAU,GAAV,UAAU,CAAqB;QAC9D,WAAM,GAAN,MAAM,CAAQ;QACd,mBAAc,GAAd,cAAc,CAAgB;QA3BjD;;;;WAIG;QACI,SAAI,GAAW,MAAM,CAAC;QAQ7B;;;;WAIG;QACc,gBAAW,GAA8B,IAAI,GAAG,EAAE,CAAC;IAWpE,CAAC;IAED;;;;;;;OAOG;IACG,KAAK,CAAC,OAAsC;;;YAChD,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBAC9B,MAAM,IAAI,KAAK,CAAC,yFAAyF,CAAC,CAAC;YAC7G,CAAC;YAED,MAAM,IAAI,GAAG,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,IAAI,mCAAI,IAAI,CAAC,WAAW,CAAC;YAC/C,MAAM,OAAO,GAAG,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,OAAO,mCAAI,IAAI,CAAC,cAAc,CAAC;YAExD,MAAM,UAAU,GAAG,MAAA,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,GAAG,0CAAE,OAAO,mCAAI,IAAI,CAAC,iBAAiB,CAAC;YACnE,MAAM,WAAW,GAAG,MAAA,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,GAAG,0CAAE,QAAQ,mCAAI,IAAI,CAAC,kBAAkB,CAAC;YACtE,MAAM,UAAU,GAAG,UAAU,KAAK,EAAE,IAAI,WAAW,KAAK,EAAE,CAAC;YAE3D,MAAM,OAAO,GAAG,CAAC,GAAoB,EAAE,GAAmB,EAAE,EAAE;gBAC5D,wFAAwF;gBACxF,4FAA4F;gBAC5F,KAAK,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACpC,CAAC,CAAC;YAEF,IAAI,UAAU,EAAE,CAAC;gBACf,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;gBACxC,MAAM,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC;gBAC1C,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,YAAY,CAAC,EAAC,GAAG,EAAE,IAAI,EAAC,EAAE,OAAO,CAAC,CAAC;gBACvD,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC;YACtB,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;gBACzC,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC;YACrB,CAAC;YAED,wFAAwF;YACxF,iFAAiF;YACjF,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,YAAY,EAAE,CAAC,MAAM,EAAE,EAAE;gBACtC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;gBAC7B,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;YAC5D,CAAC,CAAC,CAAC;YAEH,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBAC3C,MAAM,OAAO,GAAG,CAAC,GAAU,EAAE,EAAE;;oBAC7B,MAAA,IAAI,CAAC,MAAM,0CAAE,cAAc,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;oBACtD,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;oBACxB,MAAM,CAAC,GAAG,CAAC,CAAC;gBACd,CAAC,CAAC;gBACF,MAAM,WAAW,GAAG,GAAG,EAAE;;oBACvB,MAAA,IAAI,CAAC,MAAM,0CAAE,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;oBAC9C,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;oBAC7C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,kCAAkC,MAAM,MAAM,OAAO,IAAI,IAAI,EAAE,CAAC,CAAC;oBACtF,OAAO,EAAE,CAAC;gBACZ,CAAC,CAAC;gBACF,IAAI,CAAC,MAAO,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBACpC,IAAI,CAAC,MAAO,CAAC,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;gBAC5C,IAAI,CAAC,MAAO,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YACrC,CAAC,CAAC,CAAC;QACL,CAAC;KAAA;IAED;;;OAGG;IACG,IAAI,CAAC,OAAmC;;;YAC5C,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBAC9B,OAAO;YACT,CAAC;YACD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;YAC3B,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;YAExB,MAAM,cAAc,GAAG,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,cAAc,mCAAI,KAAM,CAAC;YAEzD,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;gBACnC,MAAM,UAAU,GAAG,UAAU,CAAC,GAAG,EAAE;oBACjC,+EAA+E;oBAC/E,IAAI,CAAC,UAAU,CAAC,OAAO,CACrB,oCAAoC,cAAc,wBAAwB,IAAI,CAAC,WAAW,CAAC,IAAI,6BAA6B,CAC7H,CAAC;oBACF,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;wBACtC,MAAM,CAAC,OAAO,EAAE,CAAC;oBACnB,CAAC;gBACH,CAAC,EAAE,cAAc,CAAC,CAAC;gBACnB,UAAU,CAAC,KAAK,EAAE,CAAC;gBAEnB,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE;oBAChB,YAAY,CAAC,UAAU,CAAC,CAAC;oBACzB,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;oBACzB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;oBACnD,OAAO,EAAE,CAAC;gBACZ,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;QACL,CAAC;KAAA;IAED;;;;;OAKG;IACW,aAAa,CAAC,GAAoB,EAAE,GAAmB;;;YACnE,MAAM,SAAS,GAAG,MAAC,GAAG,CAAC,OAAO,CAAC,uBAAuB,CAAwB,mCAAI,IAAI,CAAC,cAAc,CAAC,eAAe,EAAE,CAAC;YAExH,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;gBAChE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE;oBAC/C,OAAO,EAAE,2BAA2B,CAAC,IAAI;oBACzC,OAAO,EAAE,IAAI;iBACd,CAAsB,CAAC;gBAExB,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YAClC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,4DAA4D,EAAE;oBAClF,KAAK,EAAE,EAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,SAAS,EAAC;iBAC5D,CAAC,CAAC;gBACH,wFAAwF;gBACxF,0FAA0F;gBAC1F,IAAI,GAAG,CAAC,WAAW,KAAK,KAAK,EAAE,CAAC;oBAC9B,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;oBACrB,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;oBAClD,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAC,KAAK,EAAE,uBAAuB,EAAE,SAAS,EAAC,CAAC,CAAC,CAAC;gBACvE,CAAC;qBAAM,CAAC;oBACN,GAAG,CAAC,OAAO,EAAE,CAAC;gBAChB,CAAC;YACH,CAAC;QACH,CAAC;KAAA;IAED;;;;;;OAMG;IACW,oBAAoB,CAAC,GAAoB,EAAE,SAAiB;;;YACxE,MAAM,GAAG,GAAG,MAAA,GAAG,CAAC,GAAG,mCAAI,GAAG,CAAC;YAC3B,MAAM,MAAM,GAAG,CAAC,MAAA,GAAG,CAAC,MAAM,mCAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;YACnD,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,2BAA2B,CAAuB,CAAC;YAE/E,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,MAAM,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC;YACpD,OAAO,CAAC,OAAO,GAAG,OAAO,CAAC;YAE1B,8FAA8F;YAC9F,2FAA2F;YAC3F,4FAA4F;YAC5F,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC;YACpC,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;gBAC7B,MAAM,MAAM,GAAI,GAAG,CAAC,MAAc,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;gBACzE,OAAO,CAAC,IAAI,GAAG,GAAG,MAAM,MAAM,UAAU,EAAE,CAAC;YAC7C,CAAC;YAED,MAAM,OAAO,GAA4B,EAAE,CAAC;YAC5C,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;gBACjD,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;oBACrB,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC5B,CAAC;qBAAM,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;oBAC3B,OAAO,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;gBACzB,CAAC;YACH,CAAC;YACD,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YAE5B,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC1C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;gBACzC,OAAO,CAAC,OAAO,GAAG,OAAO,CAAC;gBAE1B,MAAM,WAAW,GAAG,CAAC,MAAA,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,mCAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;gBACtE,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,WAAW,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;oBACnE,IAAI,CAAC;wBACH,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;oBACrC,CAAC;oBAAC,WAAM,CAAC;wBACP,sFAAsF;wBACtF,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC;oBACzB,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC;gBACzB,CAAC;YACH,CAAC;YAED,OAAO,OAAO,CAAC;QACjB,CAAC;KAAA;IAED;;;;;OAKG;IACK,QAAQ,CAAC,GAAoB;QACnC,OAAO,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC7C,MAAM,MAAM,GAAa,EAAE,CAAC;YAC5B,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;YACtD,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACrE,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC1B,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACK,aAAa,CAAC,GAAmB,EAAE,MAAsB;;QAC/D,MAAM,kBAAkB,GAAG,MAAM,YAAY,QAAQ,IAAI,CACvD,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,OAAQ,MAAc,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,IAAI,MAAM,CAChH,CAAC;QAEF,MAAM,MAAM,GAAG,kBAAkB,CAAC,CAAC,CAAC,CAAC,MAAA,MAAM,CAAC,MAAM,mCAAI,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QACjE,MAAM,OAAO,GAAG,kBAAkB,CAAC,CAAC,CAAC,CAAC,MAAA,MAAM,CAAC,OAAO,mCAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,MAAM,IAAI,GAAG,kBAAkB,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;QAEvD,GAAG,CAAC,UAAU,GAAG,MAAM,CAAC;QAExB,IAAI,cAAsB,CAAC;QAC3B,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YACxC,cAAc,GAAG,EAAE,CAAC;QACtB,CAAC;aAAM,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YACpC,cAAc,GAAG,IAAI,CAAC;QACxB,CAAC;aAAM,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACjC,qFAAqF;YACrF,wEAAwE;YACxE,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YAChC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACd,OAAO;QACT,CAAC;aAAM,CAAC;YACN,cAAc,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YACtC,IAAI,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,cAAc,CAAC,KAAK,SAAS,EAAE,CAAC;gBAC1D,OAAO,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;YAC/C,CAAC;QACH,CAAC;QAED,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAChC,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IAC1B,CAAC;IAEO,YAAY,CAAC,GAAmB,EAAE,OAAgC;QACxE,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YACpD,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;IAEO,SAAS,CAAC,OAAgC,EAAE,IAAY;QAC9D,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QACjC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7C,IAAI,CAAC,CAAC,WAAW,EAAE,KAAK,KAAK,EAAE,CAAC;gBAC9B,OAAO,CAAC,CAAC;YACX,CAAC;QACH,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;CACF,CAAA;AA3RY,gBAAgB;IAH5B,GAAG,CAAC,wBAAwB,CAAC,aAAa,CAAC;IAC3C,YAAY,CAAC,iBAAiB,CAAC;IAC/B,UAAU,EAAE;IAuBR,WAAA,MAAM,CAAC,IAAI,iBAAiB,yBAAyB,CAAC,CAAA;IACtD,WAAA,MAAM,CAAC,IAAI,iBAAiB,sBAAsB,CAAC,CAAA;IACnD,WAAA,MAAM,CAAC,IAAI,iBAAiB,8BAA8B,CAAC,CAAA;IAC3D,WAAA,MAAM,CAAC,IAAI,iBAAiB,+BAA+B,CAAC,CAAA;IAC5D,WAAA,MAAM,CAAC,qBAAqB,CAAC,CAAA;6EACL,MAAM;QACE,cAAc;GA5BtC,gBAAgB,CA2R5B"}
+{"version":3,"file":"kernel.http-server.js","sourceRoot":"","sources":["../../../../src/servers/kernel.http-server.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;AAAA,OAAO,EAAC,MAAM,EAAE,UAAU,EAAC,MAAM,UAAU,CAAC;AAC5C,OAAO,IAA+C,MAAM,MAAM,CAAC;AACnE,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,MAAM,IAAI,CAAC;AAEpB,OAAO,EAAC,cAAc,EAAE,2BAA2B,EAAE,MAAM,EAAyB,MAAM,mBAAmB,CAAC;AAC9G,OAAO,EAAC,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,wBAAwB,EAAE,GAAG,EAAC,MAAM,qBAAqB,CAAC;AAEnG,OAAO,EAAC,iBAAiB,EAAC,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAC,kBAAkB,EAAC,MAAM,8BAA8B,CAAC;AAgBhE;;;;;;;;;;;;;;;GAeG;AAII,IAAM,gBAAgB,GAAtB,MAAM,gBAAgB;IAqB3B,YAC0D,cAAuC,EAC1C,WAAoC,EAC5B,iBAA0C,EACzC,kBAA2C,EAC1E,UAAgD,EAC9D,MAAc,EACd,cAA8B,EAC9B,kBAAsC;QAPkB,mBAAc,GAAd,cAAc,CAAQ;QACzB,gBAAW,GAAX,WAAW,CAAQ;QACX,sBAAiB,GAAjB,iBAAiB,CAAQ;QACxB,uBAAkB,GAAlB,kBAAkB,CAAQ;QACzD,eAAU,GAAV,UAAU,CAAqB;QAC9D,WAAM,GAAN,MAAM,CAAQ;QACd,mBAAc,GAAd,cAAc,CAAgB;QAC9B,uBAAkB,GAAlB,kBAAkB,CAAoB;QA5BzD;;;;WAIG;QACI,SAAI,GAAW,MAAM,CAAC;QAQ7B;;;;WAIG;QACc,gBAAW,GAA8B,IAAI,GAAG,EAAE,CAAC;IAYpE,CAAC;IAED;;;;;;;OAOG;IACG,KAAK,CAAC,OAAsC;;;YAChD,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBAC9B,MAAM,IAAI,KAAK,CAAC,yFAAyF,CAAC,CAAC;YAC7G,CAAC;YAED,MAAM,IAAI,GAAG,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,IAAI,mCAAI,IAAI,CAAC,WAAW,CAAC;YAC/C,MAAM,OAAO,GAAG,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,OAAO,mCAAI,IAAI,CAAC,cAAc,CAAC;YAExD,MAAM,UAAU,GAAG,MAAA,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,GAAG,0CAAE,OAAO,mCAAI,IAAI,CAAC,iBAAiB,CAAC;YACnE,MAAM,WAAW,GAAG,MAAA,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,GAAG,0CAAE,QAAQ,mCAAI,IAAI,CAAC,kBAAkB,CAAC;YACtE,MAAM,UAAU,GAAG,UAAU,KAAK,EAAE,IAAI,WAAW,KAAK,EAAE,CAAC;YAE3D,MAAM,OAAO,GAAG,CAAC,GAAoB,EAAE,GAAmB,EAAE,EAAE;gBAC5D,wFAAwF;gBACxF,4FAA4F;gBAC5F,KAAK,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACpC,CAAC,CAAC;YAEF,IAAI,UAAU,EAAE,CAAC;gBACf,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;gBACxC,MAAM,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC;gBAC1C,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,YAAY,CAAC,EAAC,GAAG,EAAE,IAAI,EAAC,EAAE,OAAO,CAAC,CAAC;gBACvD,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC;YACtB,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;gBACzC,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC;YACrB,CAAC;YAED,wFAAwF;YACxF,iFAAiF;YACjF,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,YAAY,EAAE,CAAC,MAAM,EAAE,EAAE;gBACtC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;gBAC7B,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;YAC5D,CAAC,CAAC,CAAC;YAEH,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBAC3C,MAAM,OAAO,GAAG,CAAC,GAAU,EAAE,EAAE;;oBAC7B,MAAA,IAAI,CAAC,MAAM,0CAAE,cAAc,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;oBACtD,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;oBACxB,MAAM,CAAC,GAAG,CAAC,CAAC;gBACd,CAAC,CAAC;gBACF,MAAM,WAAW,GAAG,GAAG,EAAE;;oBACvB,MAAA,IAAI,CAAC,MAAM,0CAAE,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;oBAC9C,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;oBAC7C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,kCAAkC,MAAM,MAAM,OAAO,IAAI,IAAI,EAAE,CAAC,CAAC;oBACtF,OAAO,EAAE,CAAC;gBACZ,CAAC,CAAC;gBACF,IAAI,CAAC,MAAO,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBACpC,IAAI,CAAC,MAAO,CAAC,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;gBAC5C,IAAI,CAAC,MAAO,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YACrC,CAAC,CAAC,CAAC;QACL,CAAC;KAAA;IAED;;;OAGG;IACG,IAAI,CAAC,OAAmC;;;YAC5C,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBAC9B,OAAO;YACT,CAAC;YACD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;YAC3B,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;YAExB,MAAM,cAAc,GAAG,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,cAAc,mCAAI,KAAM,CAAC;YAEzD,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;gBACnC,MAAM,UAAU,GAAG,UAAU,CAAC,GAAG,EAAE;oBACjC,+EAA+E;oBAC/E,IAAI,CAAC,UAAU,CAAC,OAAO,CACrB,oCAAoC,cAAc,wBAAwB,IAAI,CAAC,WAAW,CAAC,IAAI,6BAA6B,CAC7H,CAAC;oBACF,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;wBACtC,MAAM,CAAC,OAAO,EAAE,CAAC;oBACnB,CAAC;gBACH,CAAC,EAAE,cAAc,CAAC,CAAC;gBACnB,UAAU,CAAC,KAAK,EAAE,CAAC;gBAEnB,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE;oBAChB,YAAY,CAAC,UAAU,CAAC,CAAC;oBACzB,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;oBACzB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;oBACnD,OAAO,EAAE,CAAC;gBACZ,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;QACL,CAAC;KAAA;IAED;;;;OAIG;IACI,UAAU;;QACf,OAAO,MAAA,MAAA,IAAI,CAAC,MAAM,0CAAE,OAAO,EAAE,mCAAI,IAAI,CAAC;IACxC,CAAC;IAED;;;;;OAKG;IACW,aAAa,CAAC,GAAoB,EAAE,GAAmB;;;YACnE,MAAM,SAAS,GAAG,MAAC,GAAG,CAAC,OAAO,CAAC,uBAAuB,CAAwB,mCAAI,IAAI,CAAC,cAAc,CAAC,eAAe,EAAE,CAAC;YAExH,4FAA4F;YAC5F,6FAA6F;YAC7F,0FAA0F;YAC1F,6FAA6F;YAC7F,kEAAkE;YAClE,MAAM,WAAW,GAAG,IAAI,CAAC,kBAAkB,CAAC,YAAY,CAAC,MAAA,GAAG,CAAC,MAAM,mCAAI,KAAK,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;YAC3F,MAAM,mBAAmB,GAAG,IAAI,CAAC,kBAAkB,CAAC,oBAAoB,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;YAE7F,IAAI,CAAC;gBACH,wFAAwF;gBACxF,8EAA8E;gBAC9E,IAAI,IAAI,CAAC,kBAAkB,CAAC,aAAa,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,KAAK,EAAE,CAAC;oBACtE,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,iEAAiE,EAAE;wBACzF,KAAK,EAAE,EAAC,IAAI,EAAE,WAAW,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,SAAS,EAAC;qBAC7E,CAAC,CAAC;oBACH,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;oBACrB,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;oBAC5C,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;oBAClD,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAC,KAAK,EAAE,WAAW,EAAE,SAAS,EAAC,CAAC,CAAC,CAAC;oBACzD,OAAO;gBACT,CAAC;gBAED,4FAA4F;gBAC5F,iEAAiE;gBACjE,MAAM,SAAS,GAAG,IAAI,CAAC,kBAAkB,CAAC,sBAAsB,CAAC,WAAW,CAAC,CAAC;gBAC9E,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;oBAC5B,GAAG,CAAC,UAAU,GAAG,SAAS,CAAC,UAAU,CAAC;oBACtC,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,SAAS,CAAC,OAAO,CAAC,CAAC;oBAC1C,GAAG,CAAC,GAAG,EAAE,CAAC;oBACV,OAAO;gBACT,CAAC;gBAED,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;gBAChE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE;oBAC/C,OAAO,EAAE,2BAA2B,CAAC,IAAI;oBACzC,OAAO,EAAE,IAAI;iBACd,CAAsB,CAAC;gBAExB,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,mBAAmB,CAAC,CAAC;YACvD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,4DAA4D,EAAE;oBAClF,KAAK,EAAE,EAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,SAAS,EAAC;iBAC5D,CAAC,CAAC;gBACH,wFAAwF;gBACxF,0FAA0F;gBAC1F,IAAI,GAAG,CAAC,WAAW,KAAK,KAAK,EAAE,CAAC;oBAC9B,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;oBACrB,0FAA0F;oBAC1F,sCAAsC;oBACtC,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;oBAC5C,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;oBAClD,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAC,KAAK,EAAE,uBAAuB,EAAE,SAAS,EAAC,CAAC,CAAC,CAAC;gBACvE,CAAC;qBAAM,CAAC;oBACN,GAAG,CAAC,OAAO,EAAE,CAAC;gBAChB,CAAC;YACH,CAAC;QACH,CAAC;KAAA;IAED;;;;;;OAMG;IACW,oBAAoB,CAAC,GAAoB,EAAE,SAAiB;;;YACxE,MAAM,GAAG,GAAG,MAAA,GAAG,CAAC,GAAG,mCAAI,GAAG,CAAC;YAC3B,MAAM,MAAM,GAAG,CAAC,MAAA,GAAG,CAAC,MAAM,mCAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;YACnD,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,2BAA2B,CAAuB,CAAC;YAE/E,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,MAAM,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC;YACpD,OAAO,CAAC,OAAO,GAAG,OAAO,CAAC;YAE1B,8FAA8F;YAC9F,2FAA2F;YAC3F,4FAA4F;YAC5F,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC;YACpC,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;gBAC7B,MAAM,MAAM,GAAI,GAAG,CAAC,MAAc,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;gBACzE,OAAO,CAAC,IAAI,GAAG,GAAG,MAAM,MAAM,UAAU,EAAE,CAAC;YAC7C,CAAC;YAED,MAAM,OAAO,GAA4B,EAAE,CAAC;YAC5C,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;gBACjD,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;oBACrB,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC5B,CAAC;qBAAM,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;oBAC3B,OAAO,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;gBACzB,CAAC;YACH,CAAC;YACD,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YAE5B,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC1C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;gBACzC,OAAO,CAAC,OAAO,GAAG,OAAO,CAAC;gBAE1B,MAAM,WAAW,GAAG,CAAC,MAAA,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,mCAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;gBACtE,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,WAAW,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;oBACnE,IAAI,CAAC;wBACH,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;oBACrC,CAAC;oBAAC,WAAM,CAAC;wBACP,sFAAsF;wBACtF,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC;oBACzB,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC;gBACzB,CAAC;YACH,CAAC;YAED,OAAO,OAAO,CAAC;QACjB,CAAC;KAAA;IAED;;;;;OAKG;IACK,QAAQ,CAAC,GAAoB;QACnC,OAAO,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC7C,MAAM,MAAM,GAAa,EAAE,CAAC;YAC5B,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;YACtD,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACrE,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC1B,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;OASG;IACK,aAAa,CAAC,GAAmB,EAAE,MAAsB,EAAE,cAAuC,EAAE;;QAC1G,MAAM,kBAAkB,GAAG,MAAM,YAAY,QAAQ,IAAI,CACvD,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,OAAQ,MAAc,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,IAAI,MAAM,CAChH,CAAC;QAEF,MAAM,MAAM,GAAG,kBAAkB,CAAC,CAAC,CAAC,CAAC,MAAA,MAAM,CAAC,MAAM,mCAAI,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QACjE,MAAM,OAAO,GAAG,kBAAkB,CAAC,CAAC,CAAC,CAAC,MAAA,MAAM,CAAC,OAAO,mCAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,MAAM,IAAI,GAAG,kBAAkB,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;QAEvD,GAAG,CAAC,UAAU,GAAG,MAAM,CAAC;QAExB,IAAI,cAAsB,CAAC;QAC3B,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YACxC,cAAc,GAAG,EAAE,CAAC;QACtB,CAAC;aAAM,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YACpC,cAAc,GAAG,IAAI,CAAC;QACxB,CAAC;aAAM,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACjC,qFAAqF;YACrF,wEAAwE;YACxE,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YAChC,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;YACpC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACd,OAAO;QACT,CAAC;aAAM,CAAC;YACN,cAAc,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YACtC,IAAI,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,cAAc,CAAC,KAAK,SAAS,EAAE,CAAC;gBAC1D,OAAO,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;YAC/C,CAAC;QACH,CAAC;QAED,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAChC,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QACpC,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IAC1B,CAAC;IAEO,YAAY,CAAC,GAAmB,EAAE,OAAgC;QACxE,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YACpD,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;IAEO,SAAS,CAAC,OAAgC,EAAE,IAAY;QAC9D,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QACjC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7C,IAAI,CAAC,CAAC,WAAW,EAAE,KAAK,KAAK,EAAE,CAAC;gBAC9B,OAAO,CAAC,CAAC;YACX,CAAC;QACH,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;CACF,CAAA;AA7UY,gBAAgB;IAH5B,GAAG,CAAC,wBAAwB,CAAC,aAAa,CAAC;IAC3C,YAAY,CAAC,iBAAiB,CAAC;IAC/B,UAAU,EAAE;IAuBR,WAAA,MAAM,CAAC,IAAI,iBAAiB,yBAAyB,CAAC,CAAA;IACtD,WAAA,MAAM,CAAC,IAAI,iBAAiB,sBAAsB,CAAC,CAAA;IACnD,WAAA,MAAM,CAAC,IAAI,iBAAiB,8BAA8B,CAAC,CAAA;IAC3D,WAAA,MAAM,CAAC,IAAI,iBAAiB,+BAA+B,CAAC,CAAA;IAC5D,WAAA,MAAM,CAAC,qBAAqB,CAAC,CAAA;6EACL,MAAM;QACE,cAAc;QACV,kBAAkB;GA7B9C,gBAAgB,CA6U5B"}