@render-policy/core 0.1.0

package/dist/sanitize.js

@@ -0,0 +1,321 @@
+import createDOMPurify, {} from 'dompurify';
+import { messageOf } from './errors.js';
+import { matchSink } from './sinks.js';
+import { checkUrl, checkUrlHeuristics, hostMatches, usableBase } from './url.js';
+/**
+ * Attributes whose value is fetched or navigated to. Some are also on the always-forbidden
+ * list below and are dropped before the URL check runs; they stay here on purpose, so that
+ * the URL check does not depend on the forbid list staying as it is.
+ */
+const URL_ATTRIBUTES = new Set([
+    'href', 'src', 'xlink:href', 'action', 'formaction', 'poster', 'background', 'cite',
+    'longdesc', 'usemap', 'data', 'ping', 'codebase', 'archive', 'profile', 'manifest', 'icon',
+]);
+const FORM_TAGS = ['form', 'input', 'button', 'select', 'textarea', 'option', 'optgroup', 'fieldset', 'legend', 'label', 'datalist', 'output'];
+const MEDIA_TAGS = ['audio', 'video', 'source', 'track', 'picture'];
+/** Forbidden regardless of policy. Most are already outside DOMPurify's HTML profile; listing them is belt and braces. */
+const ALWAYS_FORBIDDEN_TAGS = [
+    'script', 'style', 'template', 'iframe', 'frame', 'frameset', 'object', 'embed', 'applet',
+    'base', 'meta', 'link', 'noscript', 'dialog', 'marquee', 'blink', 'math',
+];
+/** Attributes that fetch, submit, or hook into host behaviour without a click. */
+const ALWAYS_FORBIDDEN_ATTRIBUTES = [
+    'srcset', 'sizes', 'ping', 'background', 'formaction', 'action', 'usemap', 'ismap',
+    'is', 'slot', 'part', 'exportparts', 'popover', 'popovertarget', 'inert', 'contenteditable', 'autofocus',
+];
+function buildConfig(policy) {
+    const { content } = policy;
+    const forbidTags = new Set([...ALWAYS_FORBIDDEN_TAGS, ...content.forbidTags]);
+    if (!content.allowForms)
+        for (const tag of FORM_TAGS)
+            forbidTags.add(tag);
+    if (!content.allowMedia)
+        for (const tag of MEDIA_TAGS)
+            forbidTags.add(tag);
+    if (!content.allowImages)
+        forbidTags.add('img');
+    if (!content.allowSvg)
+        forbidTags.add('svg');
+    const forbidAttributes = new Set([...ALWAYS_FORBIDDEN_ATTRIBUTES, ...content.forbidAttributes]);
+    if (!content.allowInlineStyles)
+        forbidAttributes.add('style');
+    if (!content.allowTargetBlank)
+        forbidAttributes.add('target');
+    // DOMPurify's own URI check is kept as a second layer, aligned with the policy's scheme allowlist
+    // (same shape as DOMPurify's default: listed schemes, or a relative URL).
+    const schemes = policy.urls.allowedSchemes.map((s) => s.replace(/[.*+?^${}()|[\]\\]/g, '\\$&')).join('|');
+    const allowedUri = new RegExp(`^(?:(?:${schemes}):|[^a-z]|[a-z+.\\-]+(?:[^a-z+.\\-:]|$))`, 'i');
+    return {
+        USE_PROFILES: content.allowSvg ? { html: true, svg: true, svgFilters: true } : { html: true },
+        ALLOWED_URI_REGEXP: allowedUri,
+        FORBID_TAGS: [...forbidTags],
+        FORBID_ATTR: [...forbidAttributes],
+        ADD_ATTR: content.allowTargetBlank ? ['target'] : [],
+        ALLOW_DATA_ATTR: content.allowDataAttributes,
+        ALLOW_ARIA_ATTR: true,
+        ALLOW_UNKNOWN_PROTOCOLS: false,
+        SANITIZE_DOM: true,
+        SANITIZE_NAMED_PROPS: true,
+        KEEP_CONTENT: true,
+        WHOLE_DOCUMENT: false,
+        FORCE_BODY: false,
+    };
+}
+export function createSanitizer(win, policy, denylist) {
+    const purify = createDOMPurify(win);
+    const config = buildConfig(policy);
+    let state = null;
+    const pageOrigin = () => {
+        const origin = win.document.location?.origin;
+        return origin && origin !== 'null' ? origin : null;
+    };
+    const pageBase = () => usableBase(win.document.location?.href);
+    const record = (s, decision) => {
+        s.decisions.push(decision);
+        if (decision.attribute !== undefined) {
+            s.recorded.add(`${decision.tag ?? ''}|${decision.attribute}|${decision.value ?? ''}`);
+        }
+    };
+    const applyImagePolicy = (parsed) => {
+        if (parsed.relative) {
+            // Resolves within the host page's own origin.
+            return { ok: true, value: parsed.normalized, rewritten: null };
+        }
+        const origin = pageOrigin();
+        const url = new URL(parsed.url.href);
+        if (origin !== null && url.origin === origin) {
+            return { ok: true, value: parsed.normalized, rewritten: null };
+        }
+        const images = policy.images;
+        if (images.hosts === 'none') {
+            return { ok: false, code: 'remote-images-disabled', reason: 'remote images are disabled by the policy' };
+        }
+        if (images.hosts !== 'any' && !hostMatches(url.host, images.hosts, images.allowWildcardHosts)) {
+            return { ok: false, code: 'image-host-not-allowed', reason: `image host "${url.host}" is not in the allowlist` };
+        }
+        let rewritten = null;
+        const hasQuery = url.search !== '' || url.hash !== '';
+        if (hasQuery && images.query === 'deny') {
+            return { ok: false, code: 'image-query-denied', reason: 'image URL carries a query string or fragment' };
+        }
+        if (hasQuery && images.query === 'strip') {
+            url.search = '';
+            url.hash = '';
+            rewritten = { code: 'image-query-stripped', reason: 'query string removed' };
+        }
+        if (policy.urls.heuristics) {
+            const problem = checkUrlHeuristics(url, policy.urls.heuristics);
+            if (problem)
+                return { ok: false, ...problem };
+        }
+        let value = rewritten ? url.href : parsed.normalized;
+        if (images.rewriteUrl) {
+            let out;
+            try {
+                out = images.rewriteUrl(url);
+            }
+            catch (error) {
+                // Application code failed: the image is blocked and the render goes on.
+                return { ok: false, code: 'image-rewrite-failed', reason: `images.rewriteUrl threw: ${messageOf(error)}` };
+            }
+            if (out === null)
+                return { ok: false, code: 'image-rewrite-rejected', reason: 'rejected by images.rewriteUrl' };
+            const check = checkUrl(out, policy.urls, pageBase());
+            if (!check.ok)
+                return { ok: false, code: 'image-rewrite-invalid', reason: `images.rewriteUrl returned an invalid URL: ${check.reason}` };
+            value = out;
+            rewritten = { code: 'image-rewritten', reason: 'rewritten by images.rewriteUrl' };
+        }
+        return { ok: true, value, rewritten };
+    };
+    purify.addHook('uponSanitizeAttribute', (node, data) => {
+        const s = state;
+        if (!s)
+            return;
+        const name = data.attrName.toLowerCase();
+        const tag = node.nodeName.toLowerCase();
+        const original = data.attrValue;
+        const drop = (subject, code, reason) => {
+            data.keepAttr = false;
+            record(s, { kind: 'blocked', subject, code, reason, tag, attribute: name, value: original });
+        };
+        if (name.startsWith('on')) {
+            drop('attribute', 'event-handler', 'event handler attribute');
+            return;
+        }
+        if (name === 'class') {
+            const tokens = original.split(/\s+/).filter(Boolean);
+            const kept = tokens.filter((token) => policy.content.allowedClassPatterns.some((pattern) => {
+                pattern.lastIndex = 0;
+                return pattern.test(token);
+            }));
+            if (kept.length === 0) {
+                if (tokens.length > 0)
+                    drop('class', 'class-not-allowed', 'class names are not in the allowlist');
+                else
+                    data.keepAttr = false;
+                return;
+            }
+            if (kept.length !== tokens.length) {
+                data.attrValue = kept.join(' ');
+                record(s, { kind: 'rewritten', subject: 'class', code: 'class-filtered', reason: 'class names outside the allowlist removed', tag, attribute: name, value: original });
+            }
+            return;
+        }
+        if (name === 'target') {
+            if (!policy.content.allowTargetBlank || original.trim().toLowerCase() !== '_blank') {
+                drop('attribute', 'target-not-allowed', 'only target="_blank" is allowed');
+            }
+            return;
+        }
+        if (!URL_ATTRIBUTES.has(name))
+            return;
+        const isImage = tag === 'img' && name === 'src';
+        const subject = isImage ? 'image' : name === 'href' ? 'link' : 'url';
+        const verdict = checkUrl(original, policy.urls, pageBase());
+        if (!verdict.ok) {
+            drop(subject, verdict.code, verdict.reason);
+            return;
+        }
+        let parsed = verdict.parsed;
+        const blockImage = (reason) => {
+            if (isImage && policy.images.blocked === 'placeholder')
+                s.blockedImages.set(node, { src: parsed.url.href, reason });
+        };
+        if (!parsed.relative && policy.urls.sinkDenylist !== 'off') {
+            const explicitlyAllowed = isImage && Array.isArray(policy.images.hosts) && hostMatches(parsed.url.host, policy.images.hosts, policy.images.allowWildcardHosts);
+            const hit = explicitlyAllowed ? null : matchSink(parsed.url, denylist);
+            if (hit) {
+                const reason = `host matches the sink denylist (${hit.category}: ${hit.pattern}, list ${denylist.version})`;
+                if (policy.urls.sinkDenylist === 'block') {
+                    drop(subject, 'sink-host', reason);
+                    blockImage(reason);
+                    return;
+                }
+                record(s, { kind: 'flagged', subject, code: 'sink-host', reason, tag, attribute: name, value: parsed.normalized });
+            }
+        }
+        // Application URL hook: the place a link policy lives (deny or redirect off-site links); it runs
+        // for images too, before the image-specific policy. If it throws, that one URL is dropped.
+        if (policy.urls.decide) {
+            let decision;
+            try {
+                decision = policy.urls.decide(new URL(parsed.url.href), { subject: subject, tag, attribute: name, relative: parsed.relative });
+            }
+            catch (error) {
+                drop(subject, 'url-decider-failed', `urls.decide threw: ${messageOf(error)}`);
+                blockImage(`urls.decide threw: ${messageOf(error)}`);
+                return;
+            }
+            if (decision) {
+                if (decision.allow === false) {
+                    const reason = decision.reason ?? 'denied by urls.decide';
+                    drop(subject, 'url-denied', reason);
+                    blockImage(reason);
+                    return;
+                }
+                if (typeof decision.rewrite === 'string' && decision.rewrite !== parsed.normalized) {
+                    const check = checkUrl(decision.rewrite, policy.urls, pageBase());
+                    if (!check.ok) {
+                        drop(subject, 'url-rewrite-invalid', `urls.decide returned an invalid URL: ${check.reason}`);
+                        blockImage(`urls.decide returned an invalid URL: ${check.reason}`);
+                        return;
+                    }
+                    parsed = check.parsed;
+                    data.attrValue = decision.rewrite;
+                    record(s, { kind: 'rewritten', subject, code: 'url-rewritten', reason: decision.reason ?? 'rewritten by urls.decide', tag, attribute: name, value: original });
+                }
+            }
+        }
+        if (!isImage)
+            return;
+        const outcome = applyImagePolicy(parsed);
+        if (!outcome.ok) {
+            drop('image', outcome.code, outcome.reason);
+            blockImage(outcome.reason);
+            return;
+        }
+        if (outcome.value !== original) {
+            data.attrValue = outcome.value;
+            if (outcome.rewritten) {
+                record(s, { kind: 'rewritten', subject: 'image', code: outcome.rewritten.code, reason: outcome.rewritten.reason, tag, attribute: name, value: original });
+            }
+        }
+    });
+    purify.addHook('afterSanitizeAttributes', (node) => {
+        const s = state;
+        if (!s)
+            return;
+        // Tripwire: DOMPurify never lets an event handler through; if one ever did, remove it and say so.
+        for (const attr of Array.from(node.attributes)) {
+            if (/^on/i.test(attr.name)) {
+                node.removeAttribute(attr.name);
+                record(s, { kind: 'blocked', subject: 'attribute', code: 'event-handler-survived', reason: 'event handler attribute survived sanitization', tag: node.nodeName.toLowerCase(), attribute: attr.name, value: attr.value });
+            }
+        }
+        if (node.hasAttribute('target')) {
+            node.setAttribute('rel', 'noopener noreferrer');
+        }
+        if (node.nodeName.toLowerCase() === 'img') {
+            const blocked = s.blockedImages.get(node);
+            if (blocked) {
+                s.blockedImages.delete(node);
+                // The placeholder goes back through the same sanitizer pass: its href and class obey the policy too.
+                node.replaceWith(makePlaceholder(node, blocked));
+                return;
+            }
+            if (!node.hasAttribute('src')) {
+                node.remove();
+                record(s, { kind: 'blocked', subject: 'element', code: 'image-without-src', reason: 'image without an allowed src removed', tag: 'img' });
+            }
+        }
+    });
+    const collectRemoved = (s) => {
+        for (const removed of purify.removed) {
+            if ('element' in removed && removed.element) {
+                const el = removed.element;
+                record(s, { kind: 'blocked', subject: 'element', code: 'element-not-allowed', reason: 'element is not allowed', tag: (el.nodeName ?? '').toLowerCase() });
+            }
+            else if ('attribute' in removed && removed.attribute) {
+                const attr = removed.attribute;
+                const tag = (removed.from?.nodeName ?? '').toLowerCase();
+                if (s.recorded.has(`${tag}|${attr.name}|${attr.value}`))
+                    continue;
+                record(s, { kind: 'blocked', subject: 'attribute', code: 'attribute-not-allowed', reason: 'attribute is not allowed', tag, attribute: attr.name, value: attr.value });
+            }
+        }
+    };
+    /** One sanitize call: fresh state for the hooks, the journal collected, the state cleared whatever happens. */
+    const run = (sanitize) => {
+        if (state !== null) {
+            throw new Error('@render-policy/core: the sanitizer was re-entered while a sanitize call was in progress');
+        }
+        const s = { decisions: [], blockedImages: new WeakMap(), recorded: new Set() };
+        state = s;
+        try {
+            const output = sanitize();
+            collectRemoved(s);
+            return { output, decisions: s.decisions };
+        }
+        finally {
+            state = null;
+        }
+    };
+    return {
+        toFragment: (html) => run(() => purify.sanitize(html, { ...config, RETURN_DOM_FRAGMENT: true })),
+        toTrustedHTML: (html) => run(() => purify.sanitize(html, { ...config, RETURN_TRUSTED_TYPE: true })),
+    };
+}
+function makePlaceholder(img, blocked) {
+    const doc = img.ownerDocument;
+    const link = doc.createElement('a');
+    link.setAttribute('class', 'rp-blocked-image');
+    link.setAttribute('href', blocked.src);
+    link.setAttribute('target', '_blank');
+    link.setAttribute('rel', 'noopener noreferrer');
+    link.setAttribute('title', blocked.reason);
+    const alt = img.getAttribute('alt')?.trim();
+    link.textContent = alt ? `[image blocked: ${alt}]` : '[image blocked]';
+    return link;
+}
+//# sourceMappingURL=sanitize.js.map

package/dist/sanitize.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitize.js","sourceRoot":"","sources":["../src/sanitize.ts"],"names":[],"mappings":"AAAA,OAAO,eAAe,EAAE,EAAe,MAAM,WAAW,CAAC;AAGzD,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAExC,OAAO,EAAE,SAAS,EAAqB,MAAM,YAAY,CAAC;AAC1D,OAAO,EAAE,QAAQ,EAAE,kBAAkB,EAAE,WAAW,EAAE,UAAU,EAAkB,MAAM,UAAU,CAAC;AAejG;;;;GAIG;AACH,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC;IAC7B,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM;IACnF,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM;CAC3F,CAAC,CAAC;AAEH,MAAM,SAAS,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;AAC/I,MAAM,UAAU,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;AACpE,0HAA0H;AAC1H,MAAM,qBAAqB,GAAG;IAC5B,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ;IACzF,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM;CACzE,CAAC;AACF,kFAAkF;AAClF,MAAM,2BAA2B,GAAG;IAClC,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,YAAY,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO;IAClF,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,eAAe,EAAE,OAAO,EAAE,iBAAiB,EAAE,WAAW;CACzG,CAAC;AAEF,SAAS,WAAW,CAAC,MAAoB;IACvC,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC;IAC3B,MAAM,UAAU,GAAG,IAAI,GAAG,CAAS,CAAC,GAAG,qBAAqB,EAAE,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC;IACtF,IAAI,CAAC,OAAO,CAAC,UAAU;QAAE,KAAK,MAAM,GAAG,IAAI,SAAS;YAAE,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC1E,IAAI,CAAC,OAAO,CAAC,UAAU;QAAE,KAAK,MAAM,GAAG,IAAI,UAAU;YAAE,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC3E,IAAI,CAAC,OAAO,CAAC,WAAW;QAAE,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAChD,IAAI,CAAC,OAAO,CAAC,QAAQ;QAAE,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAE7C,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAS,CAAC,GAAG,2BAA2B,EAAE,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC;IACxG,IAAI,CAAC,OAAO,CAAC,iBAAiB;QAAE,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC9D,IAAI,CAAC,OAAO,CAAC,gBAAgB;QAAE,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAE9D,kGAAkG;IAClG,0EAA0E;IAC1E,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC1G,MAAM,UAAU,GAAG,IAAI,MAAM,CAAC,UAAU,OAAO,0CAA0C,EAAE,GAAG,CAAC,CAAC;IAEhG,OAAO;QACL,YAAY,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE;QAC7F,kBAAkB,EAAE,UAAU;QAC9B,WAAW,EAAE,CAAC,GAAG,UAAU,CAAC;QAC5B,WAAW,EAAE,CAAC,GAAG,gBAAgB,CAAC;QAClC,QAAQ,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE;QACpD,eAAe,EAAE,OAAO,CAAC,mBAAmB;QAC5C,eAAe,EAAE,IAAI;QACrB,uBAAuB,EAAE,KAAK;QAC9B,YAAY,EAAE,IAAI;QAClB,oBAAoB,EAAE,IAAI;QAC1B,YAAY,EAAE,IAAI;QAClB,cAAc,EAAE,KAAK;QACrB,UAAU,EAAE,KAAK;KAClB,CAAC;AACJ,CAAC;AAuBD,MAAM,UAAU,eAAe,CAAC,GAAiB,EAAE,MAAoB,EAAE,QAAsB;IAC7F,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IACpC,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IACnC,IAAI,KAAK,GAAqB,IAAI,CAAC;IAEnC,MAAM,UAAU,GAAG,GAAkB,EAAE;QACrC,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC7C,OAAO,MAAM,IAAI,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;IACrD,CAAC,CAAC;IACF,MAAM,QAAQ,GAAG,GAAuB,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAEnF,MAAM,MAAM,GAAG,CAAC,CAAY,EAAE,QAAwB,EAAQ,EAAE;QAC9D,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC3B,IAAI,QAAQ,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACrC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC,GAAG,IAAI,EAAE,IAAI,QAAQ,CAAC,SAAS,IAAI,QAAQ,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC,CAAC;QACxF,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,gBAAgB,GAAG,CAAC,MAAiB,EAAgB,EAAE;QAC3D,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACpB,8CAA8C;YAC9C,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,UAAU,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QACjE,CAAC;QACD,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACrC,IAAI,MAAM,KAAK,IAAI,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC7C,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,UAAU,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QACjE,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;QAC7B,IAAI,MAAM,CAAC,KAAK,KAAK,MAAM,EAAE,CAAC;YAC5B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,wBAAwB,EAAE,MAAM,EAAE,0CAA0C,EAAE,CAAC;QAC3G,CAAC;QACD,IAAI,MAAM,CAAC,KAAK,KAAK,KAAK,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,kBAAkB,CAAC,EAAE,CAAC;YAC9F,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,wBAAwB,EAAE,MAAM,EAAE,eAAe,GAAG,CAAC,IAAI,2BAA2B,EAAE,CAAC;QACnH,CAAC;QACD,IAAI,SAAS,GAAmB,IAAI,CAAC;QACrC,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,KAAK,EAAE,IAAI,GAAG,CAAC,IAAI,KAAK,EAAE,CAAC;QACtD,IAAI,QAAQ,IAAI,MAAM,CAAC,KAAK,KAAK,MAAM,EAAE,CAAC;YACxC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,oBAAoB,EAAE,MAAM,EAAE,8CAA8C,EAAE,CAAC;QAC3G,CAAC;QACD,IAAI,QAAQ,IAAI,MAAM,CAAC,KAAK,KAAK,OAAO,EAAE,CAAC;YACzC,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC;YAChB,GAAG,CAAC,IAAI,GAAG,EAAE,CAAC;YACd,SAAS,GAAG,EAAE,IAAI,EAAE,sBAAsB,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC;QAC/E,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YAC3B,MAAM,OAAO,GAAG,kBAAkB,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAChE,IAAI,OAAO;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,OAAO,EAAE,CAAC;QAChD,CAAC;QACD,IAAI,KAAK,GAAG,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC;QACrD,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;YACtB,IAAI,GAAkB,CAAC;YACvB,IAAI,CAAC;gBACH,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;YAC/B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,wEAAwE;gBACxE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,sBAAsB,EAAE,MAAM,EAAE,4BAA4B,SAAS,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;YAC7G,CAAC;YACD,IAAI,GAAG,KAAK,IAAI;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,wBAAwB,EAAE,MAAM,EAAE,+BAA+B,EAAE,CAAC;YAChH,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;YACrD,IAAI,CAAC,KAAK,CAAC,EAAE;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,uBAAuB,EAAE,MAAM,EAAE,8CAA8C,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;YACzI,KAAK,GAAG,GAAG,CAAC;YACZ,SAAS,GAAG,EAAE,IAAI,EAAE,iBAAiB,EAAE,MAAM,EAAE,gCAAgC,EAAE,CAAC;QACpF,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IACxC,CAAC,CAAC;IAEF,MAAM,CAAC,OAAO,CAAC,uBAAuB,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE;QACrD,MAAM,CAAC,GAAG,KAAK,CAAC;QAChB,IAAI,CAAC,CAAC;YAAE,OAAO;QACf,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;QACzC,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;QACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC;QAChC,MAAM,IAAI,GAAG,CAAC,OAAwB,EAAE,IAAsB,EAAE,MAAc,EAAQ,EAAE;YACtF,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC;YACtB,MAAM,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC/F,CAAC,CAAC;QAEF,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1B,IAAI,CAAC,WAAW,EAAE,eAAe,EAAE,yBAAyB,CAAC,CAAC;YAC9D,OAAO;QACT,CAAC;QAED,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;YACrB,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACrD,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CACnC,MAAM,CAAC,OAAO,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE;gBACnD,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC;gBACtB,OAAO,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC7B,CAAC,CAAC,CACH,CAAC;YACF,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACtB,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;oBAAE,IAAI,CAAC,OAAO,EAAE,mBAAmB,EAAE,sCAAsC,CAAC,CAAC;;oBAC7F,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC;gBAC3B,OAAO;YACT,CAAC;YACD,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC;gBAClC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAChC,MAAM,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,2CAA2C,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;YACzK,CAAC;YACD,OAAO;QACT,CAAC;QAED,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtB,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,gBAAgB,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,QAAQ,EAAE,CAAC;gBACnF,IAAI,CAAC,WAAW,EAAE,oBAAoB,EAAE,iCAAiC,CAAC,CAAC;YAC7E,CAAC;YACD,OAAO;QACT,CAAC;QAED,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO;QAEtC,MAAM,OAAO,GAAG,GAAG,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,CAAC;QAChD,MAAM,OAAO,GAAoB,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;QACtF,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC5D,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;YAChB,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;YAC5C,OAAO;QACT,CAAC;QACD,IAAI,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC5B,MAAM,UAAU,GAAG,CAAC,MAAc,EAAQ,EAAE;YAC1C,IAAI,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,KAAK,aAAa;gBAAE,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QACtH,CAAC,CAAC;QAEF,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,YAAY,KAAK,KAAK,EAAE,CAAC;YAC3D,MAAM,iBAAiB,GACrB,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;YACvI,MAAM,GAAG,GAAG,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YACvE,IAAI,GAAG,EAAE,CAAC;gBACR,MAAM,MAAM,GAAG,mCAAmC,GAAG,CAAC,QAAQ,KAAK,GAAG,CAAC,OAAO,UAAU,QAAQ,CAAC,OAAO,GAAG,CAAC;gBAC5G,IAAI,MAAM,CAAC,IAAI,CAAC,YAAY,KAAK,OAAO,EAAE,CAAC;oBACzC,IAAI,CAAC,OAAO,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;oBACnC,UAAU,CAAC,MAAM,CAAC,CAAC;oBACnB,OAAO;gBACT,CAAC;gBACD,MAAM,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;YACrH,CAAC;QACH,CAAC;QAED,iGAAiG;QACjG,2FAA2F;QAC3F,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACvB,IAAI,QAAQ,CAAC;YACb,IAAI,CAAC;gBACH,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,OAAmC,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC7J,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,OAAO,EAAE,oBAAoB,EAAE,sBAAsB,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBAC9E,UAAU,CAAC,sBAAsB,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBACrD,OAAO;YACT,CAAC;YACD,IAAI,QAAQ,EAAE,CAAC;gBACb,IAAI,QAAQ,CAAC,KAAK,KAAK,KAAK,EAAE,CAAC;oBAC7B,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,IAAI,uBAAuB,CAAC;oBAC1D,IAAI,CAAC,OAAO,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;oBACpC,UAAU,CAAC,MAAM,CAAC,CAAC;oBACnB,OAAO;gBACT,CAAC;gBACD,IAAI,OAAO,QAAQ,CAAC,OAAO,KAAK,QAAQ,IAAI,QAAQ,CAAC,OAAO,KAAK,MAAM,CAAC,UAAU,EAAE,CAAC;oBACnF,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;oBAClE,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;wBACd,IAAI,CAAC,OAAO,EAAE,qBAAqB,EAAE,wCAAwC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;wBAC7F,UAAU,CAAC,wCAAwC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;wBACnE,OAAO;oBACT,CAAC;oBACD,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;oBACtB,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC,OAAO,CAAC;oBAClC,MAAM,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,IAAI,0BAA0B,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;gBACjK,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,CAAC,OAAO;YAAE,OAAO;QAErB,MAAM,OAAO,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;QACzC,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;YAChB,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;YAC5C,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAC3B,OAAO;QACT,CAAC;QACD,IAAI,OAAO,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC/B,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC;YAC/B,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;gBACtB,MAAM,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,SAAS,CAAC,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC5J,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,OAAO,CAAC,yBAAyB,EAAE,CAAC,IAAI,EAAE,EAAE;QACjD,MAAM,CAAC,GAAG,KAAK,CAAC;QAChB,IAAI,CAAC,CAAC;YAAE,OAAO;QAEf,kGAAkG;QAClG,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YAC/C,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC3B,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAChC,MAAM,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,wBAAwB,EAAE,MAAM,EAAE,+CAA+C,EAAE,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;YAC3N,CAAC;QACH,CAAC;QAED,IAAI,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC;YAChC,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,qBAAqB,CAAC,CAAC;QAClD,CAAC;QAED,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,KAAK,EAAE,CAAC;YAC1C,MAAM,OAAO,GAAG,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAC1C,IAAI,OAAO,EAAE,CAAC;gBACZ,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;gBAC7B,qGAAqG;gBACrG,IAAI,CAAC,WAAW,CAAC,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;gBACjD,OAAO;YACT,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC9B,IAAI,CAAC,MAAM,EAAE,CAAC;gBACd,MAAM,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,mBAAmB,EAAE,MAAM,EAAE,sCAAsC,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;YAC5I,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,cAAc,GAAG,CAAC,CAAY,EAAQ,EAAE;QAC5C,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACrC,IAAI,SAAS,IAAI,OAAO,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;gBAC5C,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC;gBAC3B,MAAM,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,qBAAqB,EAAE,MAAM,EAAE,wBAAwB,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;YAC5J,CAAC;iBAAM,IAAI,WAAW,IAAI,OAAO,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;gBACvD,MAAM,IAAI,GAAG,OAAO,CAAC,SAAS,CAAC;gBAC/B,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;gBACzD,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,GAAG,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;oBAAE,SAAS;gBAClE,MAAM,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,uBAAuB,EAAE,MAAM,EAAE,0BAA0B,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;YACxK,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IAEF,+GAA+G;IAC/G,MAAM,GAAG,GAAG,CAAI,QAAiB,EAAsB,EAAE;QACvD,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,yFAAyF,CAAC,CAAC;QAC7G,CAAC;QACD,MAAM,CAAC,GAAc,EAAE,SAAS,EAAE,EAAE,EAAE,aAAa,EAAE,IAAI,OAAO,EAAE,EAAE,QAAQ,EAAE,IAAI,GAAG,EAAE,EAAE,CAAC;QAC1F,KAAK,GAAG,CAAC,CAAC;QACV,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,QAAQ,EAAE,CAAC;YAC1B,cAAc,CAAC,CAAC,CAAC,CAAC;YAClB,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC;QAC5C,CAAC;gBAAS,CAAC;YACT,KAAK,GAAG,IAAI,CAAC;QACf,CAAC;IACH,CAAC,CAAC;IAEF,OAAO;QACL,UAAU,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,GAAG,MAAM,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAAC,CAAC;QAChG,aAAa,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,GAAG,MAAM,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAAC,CAAC;KACpG,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,GAAY,EAAE,OAAqB;IAC1D,MAAM,GAAG,GAAG,GAAG,CAAC,aAAa,CAAC;IAC9B,MAAM,IAAI,GAAG,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC;IAC/C,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IACvC,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACtC,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,qBAAqB,CAAC,CAAC;IAChD,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAC3C,MAAM,GAAG,GAAG,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC;IAC5C,IAAI,CAAC,WAAW,GAAG,GAAG,CAAC,CAAC,CAAC,mBAAmB,GAAG,GAAG,CAAC,CAAC,CAAC,iBAAiB,CAAC;IACvE,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/sinks.d.ts

@@ -0,0 +1,16 @@
+export type SinkCategory = 'oast' | 'webhook' | 'tunnel' | 'serverless' | 'forms' | 'blob-storage';
+export interface SinkEntry {
+    /** `host` matches the host and its subdomains; `host/path` additionally requires the path prefix. */
+    readonly pattern: string;
+    readonly category: SinkCategory;
+}
+export interface SinkDenylist {
+    /** Date of the list, so a stale list is visible in the journal and in bug reports. */
+    readonly version: string;
+    readonly entries: readonly SinkEntry[];
+}
+/** Match a URL against the denylist. Hosts match exactly or as a subdomain; an optional path prefix narrows the match. */
+export declare function matchSink(url: URL, list: SinkDenylist): SinkEntry | null;
+/** Merge lists; later entries win nothing, they are simply appended. */
+export declare function mergeSinkDenylists(...lists: readonly SinkDenylist[]): SinkDenylist;
+//# sourceMappingURL=sinks.d.ts.map

package/dist/sinks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sinks.d.ts","sourceRoot":"","sources":["../src/sinks.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,SAAS,GAAG,QAAQ,GAAG,YAAY,GAAG,OAAO,GAAG,cAAc,CAAC;AAEnG,MAAM,WAAW,SAAS;IACxB,qGAAqG;IACrG,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC;CACjC;AAED,MAAM,WAAW,YAAY;IAC3B,sFAAsF;IACtF,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,SAAS,SAAS,EAAE,CAAC;CACxC;AAED,0HAA0H;AAC1H,wBAAgB,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,YAAY,GAAG,SAAS,GAAG,IAAI,CAYxE;AAED,wEAAwE;AACxE,wBAAgB,kBAAkB,CAAC,GAAG,KAAK,EAAE,SAAS,YAAY,EAAE,GAAG,YAAY,CAKlF"}

package/dist/sinks.js

@@ -0,0 +1,24 @@
+/** Match a URL against the denylist. Hosts match exactly or as a subdomain; an optional path prefix narrows the match. */
+export function matchSink(url, list) {
+    const host = url.hostname.toLowerCase();
+    const path = url.pathname;
+    for (const entry of list.entries) {
+        const slash = entry.pattern.indexOf('/');
+        const hostPattern = (slash === -1 ? entry.pattern : entry.pattern.slice(0, slash)).toLowerCase();
+        const pathPattern = slash === -1 ? null : entry.pattern.slice(slash);
+        if (host !== hostPattern && !host.endsWith(`.${hostPattern}`))
+            continue;
+        if (pathPattern !== null && !path.startsWith(pathPattern))
+            continue;
+        return entry;
+    }
+    return null;
+}
+/** Merge lists; later entries win nothing, they are simply appended. */
+export function mergeSinkDenylists(...lists) {
+    return {
+        version: lists.map((l) => l.version).sort().at(-1) ?? '0',
+        entries: lists.flatMap((l) => l.entries),
+    };
+}
+//# sourceMappingURL=sinks.js.map

package/dist/sinks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sinks.js","sourceRoot":"","sources":["../src/sinks.ts"],"names":[],"mappings":"AAcA,0HAA0H;AAC1H,MAAM,UAAU,SAAS,CAAC,GAAQ,EAAE,IAAkB;IACpD,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;IACxC,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC;IAC1B,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACzC,MAAM,WAAW,GAAG,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;QACjG,MAAM,WAAW,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACrE,IAAI,IAAI,KAAK,WAAW,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,WAAW,EAAE,CAAC;YAAE,SAAS;QACxE,IAAI,WAAW,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC;YAAE,SAAS;QACpE,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,kBAAkB,CAAC,GAAG,KAA8B;IAClE,OAAO;QACL,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG;QACzD,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;KACzC,CAAC;AACJ,CAAC"}

package/dist/stream.d.ts

@@ -0,0 +1,57 @@
+import type { RenderOptions, RenderResult } from './render.js';
+export type Scheduler = (render: () => void) => void;
+export interface StreamOptions {
+    /** Treat pushed chunks as Markdown (default) or HTML. */
+    readonly mode?: 'markdown' | 'html';
+    /** Coalesce renders, for example one per animation frame. Default: render synchronously on every push. */
+    readonly schedule?: Scheduler;
+    /** Withhold a link, image or tag whose URL has not been closed yet. Default true. */
+    readonly holdIncompleteUrls?: boolean;
+    /** Close an unfinished ``` fence so a streaming code block renders as code, not as Markdown. Default true. */
+    readonly closeFences?: boolean;
+    /** Keep unchanged leading blocks in place and replace only from the first change. Default true. */
+    readonly patch?: boolean;
+}
+export interface RenderStream {
+    /** Append a chunk and (re)render. */
+    push(chunk: string): void;
+    /** Replace the whole text and (re)render; for frameworks that hold the growing string. */
+    set(text: string): void;
+    /** Final render: nothing is withheld any more because nothing more is coming. Returns its decisions. */
+    end(): RenderResult;
+    /** Clear the buffer and the target. */
+    reset(): void;
+    readonly text: string;
+    readonly ended: boolean;
+}
+export interface StreamRenderOps {
+    markdown(target: ParentNode, markdown: string, options: RenderOptions): RenderResult;
+    html(target: ParentNode, html: string, options: RenderOptions): RenderResult;
+}
+export declare function createRenderStream(target: ParentNode, options: StreamOptions, ops: StreamRenderOps): RenderStream;
+/**
+ * The scheduler an adapter should use unless told otherwise: one render per animation
+ * frame where the window has requestAnimationFrame, synchronous rendering elsewhere.
+ */
+export declare function defaultScheduler(win?: {
+    requestAnimationFrame?: (callback: () => void) => number;
+} | null | undefined): Scheduler;
+/** Coalesce renders to one per animation frame. */
+export declare function frameScheduler(win: {
+    requestAnimationFrame(callback: () => void): number;
+}): Scheduler;
+/** Append the closing fence of an unfinished ``` or ~~~ block, and say whether one had to be closed. */
+export declare function completeFences(markdown: string): {
+    readonly text: string;
+    readonly closed: boolean;
+};
+/**
+ * Cut the buffer before any link, image, autolink, reference definition or
+ * raw tag whose URL has not been closed yet. A half-received URL is never
+ * turned into a request; the construct appears once it is complete and
+ * has passed the policy.
+ */
+export declare function holdIncompleteMarkdown(markdown: string): string;
+/** Cut the buffer before a raw tag that has not been closed with `>`. */
+export declare function holdIncompleteHtml(html: string): string;
+//# sourceMappingURL=stream.d.ts.map

package/dist/stream.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stream.d.ts","sourceRoot":"","sources":["../src/stream.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE/D,MAAM,MAAM,SAAS,GAAG,CAAC,MAAM,EAAE,MAAM,IAAI,KAAK,IAAI,CAAC;AAErD,MAAM,WAAW,aAAa;IAC5B,yDAAyD;IACzD,QAAQ,CAAC,IAAI,CAAC,EAAE,UAAU,GAAG,MAAM,CAAC;IACpC,0GAA0G;IAC1G,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,CAAC;IAC9B,qFAAqF;IACrF,QAAQ,CAAC,kBAAkB,CAAC,EAAE,OAAO,CAAC;IACtC,8GAA8G;IAC9G,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC;IAC/B,mGAAmG;IACnG,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,YAAY;IAC3B,qCAAqC;IACrC,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,0FAA0F;IAC1F,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,wGAAwG;IACxG,GAAG,IAAI,YAAY,CAAC;IACpB,uCAAuC;IACvC,KAAK,IAAI,IAAI,CAAC;IACd,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;CACzB;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,GAAG,YAAY,CAAC;IACrF,IAAI,CAAC,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,GAAG,YAAY,CAAC;CAC9E;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,aAAa,EAAE,GAAG,EAAE,eAAe,GAAG,YAAY,CAyDjH;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,GAAE;IAAE,qBAAqB,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,IAAI,KAAK,MAAM,CAAA;CAAE,GAAG,IAAI,GAAG,SAA0B,GAAG,SAAS,CAGjJ;AAMD,mDAAmD;AACnD,wBAAgB,cAAc,CAAC,GAAG,EAAE;IAAE,qBAAqB,CAAC,QAAQ,EAAE,MAAM,IAAI,GAAG,MAAM,CAAA;CAAE,GAAG,SAAS,CActG;AAID,wGAAwG;AACxG,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAA;CAAE,CAmBpG;AAMD;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAwB/D;AAED,yEAAyE;AACzE,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEvD"}

package/dist/stream.js

@@ -0,0 +1,180 @@
+export function createRenderStream(target, options, ops) {
+    const mode = options.mode ?? 'markdown';
+    const schedule = options.schedule ?? ((render) => render());
+    const hold = options.holdIncompleteUrls ?? true;
+    const closeFences = options.closeFences ?? true;
+    const patch = options.patch ?? true;
+    let text = '';
+    let ended = false;
+    const render = (final) => {
+        let source = text;
+        if (mode === 'markdown') {
+            if (!final && hold)
+                source = holdIncompleteMarkdown(source);
+            let openFenceAtEnd = false;
+            if (closeFences) {
+                const completed = completeFences(source);
+                source = completed.text;
+                openFenceAtEnd = completed.closed;
+            }
+            return ops.markdown(target, source, { patch, streaming: true, final, openFenceAtEnd });
+        }
+        if (!final && hold)
+            source = holdIncompleteHtml(source);
+        return ops.html(target, source, { patch, streaming: true, final, openFenceAtEnd: false });
+    };
+    return {
+        push(chunk) {
+            if (ended)
+                throw new Error('@render-policy/core: push() after end()');
+            text += chunk;
+            schedule(() => {
+                if (!ended)
+                    render(false);
+            });
+        },
+        set(next) {
+            if (ended)
+                throw new Error('@render-policy/core: set() after end()');
+            text = next;
+            schedule(() => {
+                if (!ended)
+                    render(false);
+            });
+        },
+        end() {
+            if (ended)
+                return { decisions: [] };
+            ended = true;
+            return render(true);
+        },
+        reset() {
+            text = '';
+            ended = false;
+            target.replaceChildren();
+        },
+        get text() {
+            return text;
+        },
+        get ended() {
+            return ended;
+        },
+    };
+}
+/**
+ * The scheduler an adapter should use unless told otherwise: one render per animation
+ * frame where the window has requestAnimationFrame, synchronous rendering elsewhere.
+ */
+export function defaultScheduler(win = globalWindow()) {
+    if (win && typeof win.requestAnimationFrame === 'function')
+        return frameScheduler(win);
+    return (render) => render();
+}
+function globalWindow() {
+    return typeof window === 'undefined' ? undefined : window;
+}
+/** Coalesce renders to one per animation frame. */
+export function frameScheduler(win) {
+    let pending = false;
+    let latest = null;
+    return (render) => {
+        latest = render;
+        if (pending)
+            return;
+        pending = true;
+        win.requestAnimationFrame(() => {
+            pending = false;
+            const run = latest;
+            latest = null;
+            run?.();
+        });
+    };
+}
+const FENCE_RE = /^ {0,3}(`{3,}|~{3,})(.*)$/;
+/** Append the closing fence of an unfinished ``` or ~~~ block, and say whether one had to be closed. */
+export function completeFences(markdown) {
+    let open = null;
+    for (const line of markdown.split('\n')) {
+        const match = FENCE_RE.exec(line);
+        if (!match)
+            continue;
+        const fence = match[1] ?? '';
+        const rest = match[2] ?? '';
+        const char = fence[0] ?? '`';
+        if (open === null) {
+            // A backtick fence's info string may not contain backticks.
+            if (char === '`' && rest.includes('`'))
+                continue;
+            open = { char, length: fence.length };
+        }
+        else if (char === open.char && fence.length >= open.length && rest.trim() === '') {
+            open = null;
+        }
+    }
+    if (open === null)
+        return { text: markdown, closed: false };
+    const newline = markdown.endsWith('\n') ? '' : '\n';
+    return { text: `${markdown}${newline}${open.char.repeat(open.length)}`, closed: true };
+}
+// A bare URL still being received. A URL preceded by `(` or `<` belongs to a link or autolink handled above.
+const BARE_URL_TAIL_RE = /(?:^|\s)((?:https?:\/\/|www\.)\S*)$/i;
+const REFERENCE_DEFINITION_TAIL_RE = /^ {0,3}\[[^\]]*\]:\s*\S*$/;
+/**
+ * Cut the buffer before any link, image, autolink, reference definition or
+ * raw tag whose URL has not been closed yet. A half-received URL is never
+ * turned into a request; the construct appears once it is complete and
+ * has passed the policy.
+ */
+export function holdIncompleteMarkdown(markdown) {
+    let cut = markdown.length;
+    const lastDestination = markdown.lastIndexOf('](');
+    if (lastDestination !== -1 && !hasClosingParen(markdown, lastDestination + 2)) {
+        const bracket = markdown.lastIndexOf('[', lastDestination);
+        let start = bracket === -1 ? lastDestination : bracket;
+        if (start > 0 && markdown[start - 1] === '!')
+            start -= 1;
+        cut = Math.min(cut, start);
+    }
+    cut = Math.min(cut, incompleteTagStart(markdown));
+    const bare = BARE_URL_TAIL_RE.exec(markdown);
+    if (bare) {
+        cut = Math.min(cut, bare.index + bare[0].length - (bare[1] ?? '').length);
+    }
+    const lastLineStart = markdown.lastIndexOf('\n') + 1;
+    if (REFERENCE_DEFINITION_TAIL_RE.test(markdown.slice(lastLineStart))) {
+        cut = Math.min(cut, lastLineStart);
+    }
+    return markdown.slice(0, cut);
+}
+/** Cut the buffer before a raw tag that has not been closed with `>`. */
+export function holdIncompleteHtml(html) {
+    return html.slice(0, incompleteTagStart(html));
+}
+function incompleteTagStart(text) {
+    const lastLt = text.lastIndexOf('<');
+    if (lastLt === -1)
+        return text.length;
+    const lastGt = text.lastIndexOf('>');
+    if (lastGt > lastLt)
+        return text.length;
+    return /^<[a-zA-Z!/?]/.test(text.slice(lastLt, lastLt + 2)) || lastLt === text.length - 1 ? lastLt : text.length;
+}
+function hasClosingParen(text, from) {
+    let depth = 0;
+    for (let i = from; i < text.length; i += 1) {
+        const ch = text[i];
+        if (ch === '\\') {
+            i += 1;
+        }
+        else if (ch === '(') {
+            depth += 1;
+        }
+        else if (ch === ')') {
+            if (depth === 0)
+                return true;
+            depth -= 1;
+        }
+    }
+    return false;
+}
+//# sourceMappingURL=stream.js.map