@qredence/fleet 0.5.1 → 0.5.7

package/dist/web/server/chunk-ZEVZFLIY.js

@@ -1,334 +0,0 @@
-import {
-  cn
-} from "./chunk-DJMHPJBP.js";
-
-// web/app/dist/server/assets/src-URINr_dJ.js
-import "react";
-import { jsx } from "react/jsx-runtime";
-function Card({ className, size = "default", ...props }) {
-  return /* @__PURE__ */ jsx("div", {
-    "data-slot": "card",
-    "data-size": size,
-    className: cn("group/card flex flex-col gap-4 overflow-hidden rounded-xl bg-card py-4 text-sm text-card-foreground ring-1 ring-foreground/10 has-data-[slot=card-footer]:pb-0 has-[>img:first-child]:pt-0 data-[size=sm]:gap-3 data-[size=sm]:py-3 data-[size=sm]:has-data-[slot=card-footer]:pb-0 *:[img:first-child]:rounded-t-xl *:[img:last-child]:rounded-b-xl", className),
-    ...props
-  });
-}
-function CardHeader({ className, ...props }) {
-  return /* @__PURE__ */ jsx("div", {
-    "data-slot": "card-header",
-    className: cn("group/card-header @container/card-header grid auto-rows-min items-start gap-1 rounded-t-xl px-4 group-data-[size=sm]/card:px-3 has-data-[slot=card-action]:grid-cols-[1fr_auto] has-data-[slot=card-description]:grid-rows-[auto_auto] [.border-b]:pb-4 group-data-[size=sm]/card:[.border-b]:pb-3", className),
-    ...props
-  });
-}
-function CardTitle({ className, ...props }) {
-  return /* @__PURE__ */ jsx("div", {
-    "data-slot": "card-title",
-    className: cn("font-heading text-base leading-snug font-medium group-data-[size=sm]/card:text-sm", className),
-    ...props
-  });
-}
-function CardDescription({ className, ...props }) {
-  return /* @__PURE__ */ jsx("div", {
-    "data-slot": "card-description",
-    className: cn("text-sm text-muted-foreground", className),
-    ...props
-  });
-}
-function CardContent({ className, ...props }) {
-  return /* @__PURE__ */ jsx("div", {
-    "data-slot": "card-content",
-    className: cn("px-4 group-data-[size=sm]/card:px-3", className),
-    ...props
-  });
-}
-var CSP_META = `<meta http-equiv="Content-Security-Policy" content="default-src 'none'; script-src 'unsafe-inline'; style-src 'unsafe-inline'; img-src data:; font-src 'none'; connect-src 'none'; frame-src 'none'; object-src 'none'; base-uri 'none'; form-action 'none'; media-src data:; navigate-to 'none';">`;
-var MAX_TITLE_BYTES = 240;
-var FORBIDDEN_ELEMENTS = /<(?:link|iframe|object|embed|base|form|portal|frameset)\b/i;
-var META_TAG = /<meta\b[^>]*>/gi;
-var REFRESH_META = /\bhttp-equiv\s*=[\s"']*refresh\b/i;
-var CSP_META_REFERENCE = /\bcontent-security-policy\b/i;
-var EVENT_HANDLER_ATTRIBUTE = /\son[a-z][\w:-]*\s*=\s*(?:"[^"]*"|'[^']*'|[^\s>]+)/i;
-var SCRIPT_SOURCE_ATTRIBUTE = /<script\b[^>]*\bsrc\s*=/i;
-var CSS_IMPORT = /@import\b/i;
-var NETWORK_API = /\b(?:fetch|XMLHttpRequest|WebSocket|EventSource|sendBeacon|showModalDialog)\s*\(|\bwindow\s*\.\s*open\s*\(|\b(?:window|globalThis|document|location)\s*\.\s*(?:location|assign|replace|reload|href|pathname|host|hostname|port|protocol|search|hash)\s*=|\b(?:window|globalThis|document|location)\s*\.\s*(?:location\s*\.\s*)?(?:assign|replace|reload)\s*\(/i;
-var RESOURCE_ATTRIBUTE = /\b(?:src|href|action|formaction|poster|cite|background|xlink:href)\s*=\s*(?:"([^"]*)"|'([^']*)'|([^\s>]+))/gi;
-var UNSAFE_SCHEME = /^(?:javascript|vbscript|file|blob|filesystem|about|data:text\/html|data:application\/javascript):/i;
-function byteLength(value) {
-  return new TextEncoder().encode(value).byteLength;
-}
-function safeResourceUrl(value) {
-  const normalized = value.trim();
-  if (!normalized || UNSAFE_SCHEME.test(normalized)) return false;
-  if (normalized.startsWith("#")) return true;
-  return /^(?:data:image\/(?:gif|jpeg|jpg|png|webp|svg\+xml);|data:(?:audio|video)\/)/i.test(normalized);
-}
-function scanHtmlTags(document) {
-  const tags = [];
-  let index = 0;
-  let rawTextElement;
-  while (index < document.length) {
-    if (rawTextElement) {
-      const closingTag = new RegExp(`<\\/\\s*${rawTextElement}\\b[^>]*>`, "ig");
-      closingTag.lastIndex = index;
-      const closingMatch = closingTag.exec(document);
-      if (!closingMatch) break;
-      index = closingMatch.index;
-      rawTextElement = void 0;
-    }
-    const start = document.indexOf("<", index);
-    if (start < 0) break;
-    if (document.startsWith("<!--", start)) {
-      const commentEnd = document.indexOf("-->", start + 4);
-      index = commentEnd < 0 ? document.length : commentEnd + 3;
-      continue;
-    }
-    let end = start + 1;
-    let quote;
-    for (; end < document.length; end += 1) {
-      const character = document[end];
-      if (quote) {
-        if (character === quote) quote = void 0;
-        continue;
-      }
-      if (character === '"' || character === "'") {
-        quote = character;
-        continue;
-      }
-      if (character === ">") break;
-    }
-    if (end >= document.length) break;
-    const raw = document.slice(start, end + 1);
-    const tagMatch = /^<\s*(\/?)\s*([A-Za-z][\w:-]*)\b/i.exec(raw);
-    if (!tagMatch) {
-      index = end + 1;
-      continue;
-    }
-    const closing = Boolean(tagMatch[1]);
-    const name = tagMatch[2].toLowerCase();
-    tags.push({
-      raw,
-      name,
-      closing,
-      start,
-      end: end + 1
-    });
-    if (!closing && (name === "script" || name === "style") && !/\/\s*>$/.test(raw)) rawTextElement = name;
-    index = end + 1;
-  }
-  return tags;
-}
-function hasHtmlAttribute(document, expectedAttribute) {
-  let inTag = false;
-  let quote;
-  let tagStart = -1;
-  for (let index = 0; index < document.length; index += 1) {
-    const character = document[index];
-    if (!inTag) {
-      if (character === "<") {
-        inTag = true;
-        tagStart = index;
-      }
-      continue;
-    }
-    if (quote) {
-      if (character === quote) quote = void 0;
-      continue;
-    }
-    if (character === '"' || character === "'") {
-      quote = character;
-      continue;
-    }
-    if (character !== ">") continue;
-    const tag = document.slice(tagStart, index + 1);
-    inTag = false;
-    if (/^<\s*\//.test(tag) || /^<\s*[!/?]/.test(tag)) continue;
-    const tagName = /^<\s*[A-Za-z][\w:-]*/.exec(tag);
-    if (!tagName) continue;
-    const attributes = tag.slice(tagName[0].length, -1);
-    let attributeIndex = 0;
-    while (attributeIndex < attributes.length) {
-      while (/\s/.test(attributes[attributeIndex] ?? "")) attributeIndex += 1;
-      if (attributeIndex >= attributes.length || attributes[attributeIndex] === "/") break;
-      const nameStart = attributeIndex;
-      while (!/[\s=/>]/.test(attributes[attributeIndex] ?? "")) attributeIndex += 1;
-      if (attributes.slice(nameStart, attributeIndex).toLowerCase() === expectedAttribute.toLowerCase()) return true;
-      while (/\s/.test(attributes[attributeIndex] ?? "")) attributeIndex += 1;
-      if (attributes[attributeIndex] !== "=") continue;
-      attributeIndex += 1;
-      while (/\s/.test(attributes[attributeIndex] ?? "")) attributeIndex += 1;
-      const valueQuote = attributes[attributeIndex];
-      if (valueQuote === '"' || valueQuote === "'") {
-        attributeIndex += 1;
-        while (attributeIndex < attributes.length && attributes[attributeIndex] !== valueQuote) attributeIndex += 1;
-        attributeIndex += 1;
-        continue;
-      }
-      while (attributeIndex < attributes.length && !/[\s>]/.test(attributes[attributeIndex] ?? "")) attributeIndex += 1;
-    }
-  }
-  return false;
-}
-function hasUnsafeResourceAttribute(document) {
-  RESOURCE_ATTRIBUTE.lastIndex = 0;
-  for (const match of document.matchAll(RESOURCE_ATTRIBUTE)) if (!safeResourceUrl(match[1] ?? match[2] ?? match[3] ?? "")) return true;
-  return false;
-}
-function isCssWhitespace(character) {
-  return character !== void 0 && /\s/.test(character);
-}
-function extractCssUrlValues(document) {
-  const values = [];
-  const lower = document.toLowerCase();
-  let searchFrom = 0;
-  while (searchFrom < document.length) {
-    const keywordStart = lower.indexOf("url", searchFrom);
-    if (keywordStart === -1) break;
-    let cursor = keywordStart + 3;
-    while (isCssWhitespace(document[cursor])) cursor += 1;
-    if (document[cursor] !== "(") {
-      searchFrom = keywordStart + 3;
-      continue;
-    }
-    cursor += 1;
-    while (isCssWhitespace(document[cursor])) cursor += 1;
-    const contentStart = cursor;
-    const quote = document[contentStart];
-    if (quote === '"' || quote === "'") {
-      const closingQuote = document.indexOf(quote, contentStart + 1);
-      if (closingQuote !== -1) {
-        let afterQuote = closingQuote + 1;
-        while (isCssWhitespace(document[afterQuote])) afterQuote += 1;
-        if (document[afterQuote] === ")") {
-          values.push(document.slice(contentStart, closingQuote + 1));
-          searchFrom = afterQuote + 1;
-          continue;
-        }
-      }
-    }
-    const closingParen = document.indexOf(")", contentStart);
-    if (closingParen === -1) break;
-    values.push(document.slice(contentStart, closingParen));
-    searchFrom = closingParen + 1;
-  }
-  return values;
-}
-function hasUnsafeCssUrl(document) {
-  for (const rawValue of extractCssUrlValues(document)) {
-    let value = rawValue;
-    if (value.length >= 2 && (value.startsWith('"') && value.endsWith('"') || value.startsWith("'") && value.endsWith("'"))) value = value.slice(1, -1);
-    else value = value.trim();
-    if (!safeResourceUrl(value)) return true;
-  }
-  return false;
-}
-function hasForbiddenMeta(document) {
-  META_TAG.lastIndex = 0;
-  for (const match of document.matchAll(META_TAG)) {
-    const tag = match[0] ?? "";
-    if (REFRESH_META.test(tag)) return true;
-    if (CSP_META_REFERENCE.test(tag) && tag !== CSP_META) return true;
-  }
-  return false;
-}
-function hasCanonicalCspMetaInHead(document) {
-  let headDepth = 0;
-  for (const tag of scanHtmlTags(document)) {
-    if (tag.name === "head") {
-      if (tag.closing) headDepth = Math.max(0, headDepth - 1);
-      else headDepth += 1;
-      continue;
-    }
-    if (headDepth > 0 && tag.name === "meta" && !tag.closing && tag.raw === CSP_META) return true;
-  }
-  return false;
-}
-function normalizeDocument(document) {
-  const trimmed = document.trim();
-  if (hasCanonicalCspMetaInHead(trimmed)) return trimmed;
-  const tags = scanHtmlTags(trimmed);
-  const htmlTag = tags.find((tag) => tag.name === "html" && !tag.closing);
-  if (!htmlTag) return `<!doctype html><html><head>${CSP_META}</head><body>${trimmed}</body></html>`;
-  const headTag = tags.find((tag) => tag.name === "head" && !tag.closing);
-  if (headTag) return `${trimmed.slice(0, headTag.end)}${CSP_META}${trimmed.slice(headTag.end)}`;
-  return `${trimmed.slice(0, htmlTag.end)}<head>${CSP_META}</head>${trimmed.slice(htmlTag.end)}`;
-}
-function validateAndNormalizeOpenUIHtmlArtifact(input) {
-  if (typeof input !== "object" || input === null) return {
-    ok: false,
-    reason: "OpenUI artifact must be an object."
-  };
-  const source = input;
-  if (typeof source.title !== "string" || !source.title.trim()) return {
-    ok: false,
-    reason: "OpenUI artifact title is required."
-  };
-  if (typeof source.document !== "string" || !source.document.trim()) return {
-    ok: false,
-    reason: "OpenUI artifact document is required."
-  };
-  const title = source.title.trim();
-  const document = source.document.trim();
-  if (byteLength(title) > MAX_TITLE_BYTES) return {
-    ok: false,
-    reason: "OpenUI artifact title is too large."
-  };
-  if (byteLength(document) > 1048576) return {
-    ok: false,
-    reason: "OpenUI artifact exceeds the 1 MiB limit.",
-    status: 413
-  };
-  if (FORBIDDEN_ELEMENTS.test(document)) return {
-    ok: false,
-    reason: "External HTML resources and embedded frames are not allowed."
-  };
-  if (hasForbiddenMeta(document)) return {
-    ok: false,
-    reason: "Custom refresh and CSP metadata are not allowed."
-  };
-  if (EVENT_HANDLER_ATTRIBUTE.test(document)) return {
-    ok: false,
-    reason: "Inline event-handler attributes are not allowed."
-  };
-  if (SCRIPT_SOURCE_ATTRIBUTE.test(document)) return {
-    ok: false,
-    reason: "External scripts are not allowed."
-  };
-  if (CSS_IMPORT.test(document) || hasUnsafeCssUrl(document)) return {
-    ok: false,
-    reason: "External styles and CSS resources are not allowed."
-  };
-  if (hasUnsafeResourceAttribute(document)) return {
-    ok: false,
-    reason: "External or unsafe resource URLs are not allowed."
-  };
-  if (NETWORK_API.test(document)) return {
-    ok: false,
-    reason: "Network access and pop-up APIs are not allowed."
-  };
-  if (hasHtmlAttribute(document, "download") || hasHtmlAttribute(document, "target")) return {
-    ok: false,
-    reason: "Downloads and new-window navigation are not allowed."
-  };
-  const normalizedDocument = normalizeDocument(document);
-  if (byteLength(normalizedDocument) > 1048576) return {
-    ok: false,
-    reason: "Normalized OpenUI artifact exceeds the 1 MiB limit.",
-    status: 413
-  };
-  return {
-    ok: true,
-    value: {
-      title,
-      document: normalizedDocument
-    }
-  };
-}
-
-export {
-  Card,
-  CardHeader,
-  CardTitle,
-  CardDescription,
-  CardContent,
-  validateAndNormalizeOpenUIHtmlArtifact
-};

package/dist/web/server/fleet-pi-tool-renderer-lJvZWmBJ-4M5YI6VS.js

@@ -1,35 +0,0 @@
-import {
-  FleetPiToolRenderer
-} from "./chunk-PCJ5EKFE.js";
-import "./chunk-44IVTHDV.js";
-import "./chunk-P66QQWUM.js";
-import "./chunk-DBXYBYBP.js";
-import "./chunk-5WZFFNFY.js";
-import "./chunk-2H6A6Z7F.js";
-import "./chunk-YRWVQ7BW.js";
-import "./chunk-3IKSPTYI.js";
-import "./chunk-PWK2HJIV.js";
-import "./chunk-QJBEWT4E.js";
-import "./chunk-FAGDMGLK.js";
-import "./chunk-6RJYXDSD.js";
-import "./chunk-PKCTG7EW.js";
-import "./chunk-7QCDOBZ3.js";
-import "./chunk-LESNF5O4.js";
-import "./chunk-QLY3L4A2.js";
-import "./chunk-NLIUTTKL.js";
-import "./chunk-XYYNYFFD.js";
-import "./chunk-X2TUFLTP.js";
-import "./chunk-ST5I2PLN.js";
-import "./chunk-7APYEQIO.js";
-import "./chunk-M2FGGPNA.js";
-import "./chunk-G5BCQQ5N.js";
-import "./chunk-BYXBJQAS.js";
-import "./chunk-E26EAQIM.js";
-import "./chunk-DJMHPJBP.js";
-import "./chunk-UQVZJSZZ.js";
-import "./chunk-JDCCC7A7.js";
-import "./chunk-L547YHC4.js";
-import "./chunk-MLKGABMK.js";
-export {
-  FleetPiToolRenderer
-};