@things-factory/ai-assistant 10.1.6

package/dist-client/components/markdown.js

@@ -0,0 +1,422 @@
+/**
+ * Board AI 채팅 메시지의 Markdown 렌더링.
+ *
+ * 보안 (defense-in-depth):
+ *   1. raw HTML 차단 — marked 의 renderer.html → '' 로 block-level HTML 무력화.
+ *   2. 위험 link 스킴 차단 — javascript: / data: / vbscript: 등 거부.
+ *   3. DOMPurify 후처리 — marked 출력 전체를 sanitize. 우회되는 inline HTML
+ *      (이미지 onerror, span style="javascript:..." 등) 까지 차단.
+ *
+ * 1·2 만으로도 표면이 좁지만, 다음의 *알려진 우회 경로* 가 존재하므로 3 이 필수:
+ *   - marked 가 토큰화 실패한 일부 입력 (특히 코드블록 안 백틱 escape 미스) 에서
+ *     생 HTML 이 escape 안 된 채 흘러나갈 수 있음
+ *   - mention span (`<span class="mention" ...>`) 이 우리 손으로 만드는 element 라
+ *     allowlist 기반 정화 필요
+ *   - 멀티유저 환경 (다른 사용자 메시지 echo) 시 표면 ↑
+ *
+ * CJK 보강:
+ *   - CommonMark의 left/right-flanking 규칙 때문에 한국어/일본어/중국어 텍스트와
+ *     ** 강조 마커 사이에 구두점이 끼면 마커가 닫히지 않는 케이스가 발생한다.
+ *     예) "**'rect'**의" → 닫는 ** 가 [구두점] + [CJK] 사이에 위치하므로 right-flanking 실패
+ *   - 이런 케이스는 marked 에 넘기기 전에 자체적으로 추출 → 자리표시자로 치환 → marked
+ *     수행 → 후처리에서 <strong>...</strong> 로 복원하는 방식으로 처리한다.
+ *   - 이 우회는 사용자가 의도적으로 넣은 ** 만 대상으로 하므로 보안적으로 안전하다 (내용은
+ *     escapeHtml 로 항상 escape).
+ */
+import DOMPurify from 'dompurify';
+import { marked } from 'marked';
+/**
+ * DOMPurify 정화 정책.
+ *
+ * 우리가 markdown 출력에서 의도적으로 사용하는 element / attribute 만 명시 허용:
+ *   - 표준 markdown elements (p, h1~6, ul/ol/li, strong/em, a, img, code, pre, blockquote, hr, br, table 계열)
+ *   - mention span (class + data-refid + data-userid)
+ *
+ * 그 외는 모두 strip — 이벤트 핸들러 (onerror/onclick), inline style, javascript:
+ * URL 등 자동 차단. 우리 구조에 없는 element (script/iframe/object/embed 등) 도 모두 제거.
+ */
+const PURIFY_CONFIG = {
+    ALLOWED_TAGS: [
+        'p', 'br', 'hr',
+        'h1', 'h2', 'h3', 'h4', 'h5', 'h6',
+        'strong', 'em', 'del', 's', 'u',
+        'ul', 'ol', 'li',
+        'a', 'img',
+        'code', 'pre',
+        'blockquote',
+        'table', 'thead', 'tbody', 'tr', 'th', 'td',
+        'span'
+    ],
+    ALLOWED_ATTR: [
+        'href', 'title', 'alt', 'src', 'class',
+        'data-refid', 'data-userid'
+    ],
+    // javascript: / data: / vbscript: 등 위험 스킴 자동 차단
+    ALLOWED_URI_REGEXP: /^(?:(?:https?|mailto|tel|ftp):|[^a-z]|[a-z+.\-]+(?:[^a-z+.\-:]|$))/i,
+    // target="_blank" 같이 우리가 명시하는 link 외엔 추가 attr 안 붙이도록
+    ADD_ATTR: ['target', 'rel'],
+    // raw HTML 입력은 marked.renderer.html → '' 로 이미 막혀있지만,
+    // dompurify 가 전체 input 을 한 번 더 정화 — 우회 차단
+    KEEP_CONTENT: true
+};
+const markdownRenderer = new marked.Renderer();
+markdownRenderer.html = () => '';
+const DANGEROUS_SCHEME_RE = /^(javascript|data|vbscript|file):/i;
+const origLink = markdownRenderer.link.bind(markdownRenderer);
+markdownRenderer.link = (token) => {
+    const href = typeof token?.href === 'string' ? token.href.trim() : '';
+    if (DANGEROUS_SCHEME_RE.test(href)) {
+        return token?.text ?? '';
+    }
+    return origLink(token);
+};
+// 이미지 renderer — src scheme 검사 + alt 의 inline HTML escape
+const origImage = markdownRenderer.image.bind(markdownRenderer);
+markdownRenderer.image = (token) => {
+    const src = typeof token?.href === 'string' ? token.href.trim() : '';
+    if (DANGEROUS_SCHEME_RE.test(src)) {
+        // 위험 src — 이미지 자체 제거. alt 텍스트는 escape 해서 평문 노출
+        return escapeHtml(token?.text ?? '');
+    }
+    return origImage(token);
+};
+marked.setOptions({
+    gfm: true,
+    breaks: true,
+    pedantic: false,
+    renderer: markdownRenderer,
+    async: false
+});
+export function escapeHtml(text) {
+    return text
+        .replace(/&/g, '&amp;')
+        .replace(/</g, '&lt;')
+        .replace(/>/g, '&gt;')
+        .replace(/"/g, '&quot;')
+        .replace(/'/g, '&#039;');
+}
+// CJK 문자 범위: Hiragana, Katakana, CJK Unified Ideographs (Ext A 포함), Hangul, 전각/반각
+const CJK_RE = /[぀-ヿ㐀-䶿一-鿿가-힯＀-￯]/;
+const PUNCT_RE = /\p{P}/u;
+// marked 가 절대 변형하지 않는 토큰 (영숫자만 사용)
+const PLACEHOLDER_PREFIX = 'BAICJKSTRONG';
+const PLACEHOLDER_SUFFIX = 'ENDMARK';
+const MENTION_PLACEHOLDER_PREFIX = 'BAIMENTION';
+const MENTION_PLACEHOLDER_SUFFIX = 'ENDMENTION';
+// mention 토큰에 허용되는 문자 — alphanumeric + 한글/일본/중국어. 공백/구두점에서 끊김.
+const MENTION_WORD_RE = /[\w\p{Script=Hangul}\p{Script=Hiragana}\p{Script=Katakana}\p{Script=Han}]/u;
+/**
+ * `**X**` 패턴 중 CJK + 구두점 인접 때문에 marked 의 flanking 규칙에서 누락되는
+ * 케이스를 추출. 코드 펜스(```)와 인라인 코드(`...`) 안쪽은 건드리지 않는다.
+ *
+ * 검출 기준 (CommonMark right-flanking 실패 ↔ left-flanking 실패):
+ *   - 닫는 ** 직전 문자가 구두점 AND 직후 문자가 CJK letter
+ *   - 여는 ** 직전 문자가 CJK letter AND 직후 문자가 구두점
+ */
+export function extractCjkStrongs(text) {
+    const stored = [];
+    const lines = text.split('\n');
+    const outLines = [];
+    let inFence = false;
+    for (const line of lines) {
+        if (/^\s{0,3}```/.test(line)) {
+            inFence = !inFence;
+            outLines.push(line);
+            continue;
+        }
+        if (inFence) {
+            outLines.push(line);
+            continue;
+        }
+        outLines.push(processLine(line, stored, () => outLines[outLines.length - 1] ?? ''));
+    }
+    return { processed: outLines.join('\n'), stored };
+}
+function processLine(line, stored, prevLine) {
+    let i = 0;
+    let result = '';
+    while (i < line.length) {
+        const ch = line[i];
+        if (ch === '`') {
+            const end = line.indexOf('`', i + 1);
+            if (end === -1) {
+                result += line.slice(i);
+                break;
+            }
+            result += line.slice(i, end + 1);
+            i = end + 1;
+            continue;
+        }
+        if (ch === '*' && line[i + 1] === '*') {
+            const close = findCloseStrong(line, i + 2);
+            if (close === -1) {
+                result += '**';
+                i += 2;
+                continue;
+            }
+            const inner = line.slice(i + 2, close);
+            if (inner.length === 0) {
+                result += '**';
+                i += 2;
+                continue;
+            }
+            const before = result.length > 0 ? result.slice(-1) : prevLine().slice(-1);
+            const after = close + 2 < line.length ? line[close + 2] : '';
+            if (needsCjkFix(before, after, inner)) {
+                stored.push(inner);
+                result += `${PLACEHOLDER_PREFIX}${stored.length - 1}${PLACEHOLDER_SUFFIX}`;
+            }
+            else {
+                result += line.slice(i, close + 2);
+            }
+            i = close + 2;
+            continue;
+        }
+        result += ch;
+        i++;
+    }
+    return result;
+}
+function findCloseStrong(line, start) {
+    let i = start;
+    while (i < line.length - 1) {
+        if (line[i] === '`') {
+            const end = line.indexOf('`', i + 1);
+            if (end === -1)
+                return -1;
+            i = end + 1;
+            continue;
+        }
+        if (line[i] === '*' && line[i + 1] === '*')
+            return i;
+        i++;
+    }
+    return -1;
+}
+function needsCjkFix(before, after, inner) {
+    const innerStart = inner[0];
+    const innerEnd = inner[inner.length - 1];
+    return ((before !== '' && CJK_RE.test(before) && PUNCT_RE.test(innerStart)) ||
+        (after !== '' && CJK_RE.test(after) && PUNCT_RE.test(innerEnd)));
+}
+function restoreCjkStrongs(html, stored) {
+    let out = html;
+    for (let n = 0; n < stored.length; n++) {
+        const token = `${PLACEHOLDER_PREFIX}${n}${PLACEHOLDER_SUFFIX}`;
+        const replacement = `<strong>${escapeHtml(stored[n])}</strong>`;
+        out = out.split(token).join(replacement);
+    }
+    return out;
+}
+/**
+ * `#token` mention 패턴을 추출 → placeholder 로 치환.
+ *
+ * 활성 조건 (chat textarea 의 extractMentionContext 와 일관):
+ *   - `#` 직전이 문자열 시작 또는 word char 가 아님 (공백/구두점/줄 시작)
+ *   - `#` 직후가 word char (영숫자/한글/일본/중국어)
+ *   - 코드 펜스(```)와 인라인 코드(`...`) 안쪽은 건드리지 않음
+ *
+ * Markdown ATX 헤딩 (`# Title`) 과 충돌하지 않음 — 헤딩은 `#` 다음에 공백이 오므로
+ * 본 정규식 (직후가 word char) 매칭 안 됨.
+ */
+export function extractMentions(text) {
+    const stored = [];
+    const lines = text.split('\n');
+    const outLines = [];
+    let inFence = false;
+    for (const line of lines) {
+        if (/^\s{0,3}```/.test(line)) {
+            inFence = !inFence;
+            outLines.push(line);
+            continue;
+        }
+        if (inFence) {
+            outLines.push(line);
+            continue;
+        }
+        outLines.push(processMentionLine(line, stored));
+    }
+    return { processed: outLines.join('\n'), stored };
+}
+function processMentionLine(line, stored) {
+    let result = '';
+    let i = 0;
+    while (i < line.length) {
+        const ch = line[i];
+        if (ch === '`') {
+            // 인라인 코드 — 닫는 backtick 까지 그대로 통과
+            const end = line.indexOf('`', i + 1);
+            if (end === -1) {
+                result += line.slice(i);
+                break;
+            }
+            result += line.slice(i, end + 1);
+            i = end + 1;
+            continue;
+        }
+        if (ch === '#' || ch === '@') {
+            const prev = i > 0 ? line[i - 1] : '';
+            const next = line[i + 1] ?? '';
+            if ((prev === '' || !MENTION_WORD_RE.test(prev)) &&
+                next !== '' &&
+                MENTION_WORD_RE.test(next)) {
+                // 토큰 끝 위치 찾기
+                let j = i + 1;
+                while (j < line.length && MENTION_WORD_RE.test(line[j]))
+                    j++;
+                const token = line.slice(i + 1, j);
+                stored.push({ trigger: ch, token });
+                result += `${MENTION_PLACEHOLDER_PREFIX}${stored.length - 1}${MENTION_PLACEHOLDER_SUFFIX}`;
+                i = j;
+                continue;
+            }
+        }
+        result += ch;
+        i++;
+    }
+    return result;
+}
+/**
+ * placeholder 를 mention span 으로 복원. trigger 별로 다른 span:
+ *   - `#component` → `<span class="mention" data-refid="N">#token</span>`
+ *   - `@user`      → `<span class="user-mention" data-userid="UUID">@token</span>`
+ * 매핑 없으면 data-* 속성 없이 단순 span.
+ */
+function restoreMentions(html, stored, maps) {
+    let out = html;
+    for (let n = 0; n < stored.length; n++) {
+        const placeholder = `${MENTION_PLACEHOLDER_PREFIX}${n}${MENTION_PLACEHOLDER_SUFFIX}`;
+        const { trigger, token } = stored[n];
+        let replacement;
+        if (trigger === '#') {
+            const refid = maps.refidByToken.get(token);
+            const attr = typeof refid === 'number' && Number.isFinite(refid)
+                ? ` data-refid="${refid}"`
+                : '';
+            replacement = `<span class="mention"${attr}>#${escapeHtml(token)}</span>`;
+        }
+        else {
+            const userId = maps.userIdByToken.get(token);
+            const attr = userId ? ` data-userid="${escapeHtml(userId)}"` : '';
+            replacement = `<span class="user-mention"${attr}>@${escapeHtml(token)}</span>`;
+        }
+        out = out.split(placeholder).join(replacement);
+    }
+    return out;
+}
+/**
+ * 인라인 마커 정규식 — `{key:value}` 형태. 현재 사용:
+ *   - `{refid:N}`     — `#component` 멘션
+ *   - `{userId:UUID}` — `@user` 멘션
+ * 향후 추가 종류 (agentId / threadId / 외부 시스템 id 등) 도 동일 형식.
+ */
+const MENTION_MARKER_RE = /\{[a-zA-Z][a-zA-Z0-9]*:[^}\s]+\}/g;
+const WORD_CLASS = '\\w\\p{Script=Hangul}\\p{Script=Hiragana}\\p{Script=Katakana}\\p{Script=Han}';
+/**
+ * 본문에서 모든 `{key:value}` 마커 제거 — textarea 편집 / LLM 입력 / 평문 표출 등.
+ * 토큰 (#component / @user) 자체는 보존.
+ */
+export function stripMentionRefids(text) {
+    if (!text)
+        return '';
+    return text.replace(MENTION_MARKER_RE, '');
+}
+/**
+ * `#token{refid:N}` / `@user{userId:UUID}` 마커를 추출해 매핑 + 마커 제거된 본문 반환.
+ * 렌더링 직전에 호출 — 마킹 정보 분리 후 markdown 처리에 깨끗한 텍스트만.
+ */
+function extractInlineMentions(text) {
+    const refidByToken = new Map();
+    const userIdByToken = new Map();
+    const componentRe = new RegExp(`(^|[^${WORD_CLASS}])#([${WORD_CLASS}-]+)\\{refid:(\\d+)\\}`, 'gu');
+    const userRe = new RegExp(`(^|[^${WORD_CLASS}])@([${WORD_CLASS}-]+)\\{userId:([^}\\s]+)\\}`, 'gu');
+    let cleaned = text.replace(componentRe, (_m, leading, token, refidStr) => {
+        const refid = Number(refidStr);
+        if (Number.isFinite(refid) && !refidByToken.has(token))
+            refidByToken.set(token, refid);
+        return `${leading}#${token}`;
+    });
+    cleaned = cleaned.replace(userRe, (_m, leading, token, userId) => {
+        if (!userIdByToken.has(token))
+            userIdByToken.set(token, userId);
+        return `${leading}@${token}`;
+    });
+    return { cleaned, maps: { refidByToken, userIdByToken } };
+}
+/**
+ * 일반화된 inline marker 주입.
+ *   injectInlineMarkers(text, '#', 'refid', [{token, value: 35}])
+ *   injectInlineMarkers(text, '@', 'userId', [{token, value: 'uuid'}])
+ */
+function injectInlineMarkers(text, trigger, markerKey, picks) {
+    if (!text || !picks || picks.length === 0)
+        return text ?? '';
+    const map = new Map();
+    for (const p of picks)
+        map.set(p.token, p.value);
+    const escapedTrig = trigger.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
+    const re = new RegExp(`(^|[^${WORD_CLASS}])(${escapedTrig})([${WORD_CLASS}-]+)(\\{${markerKey}:[^}\\s]+\\})?`, 'gu');
+    return text.replace(re, (match, leading, trig, token, existingMarker) => {
+        if (existingMarker)
+            return match;
+        const value = map.get(token);
+        if (value === undefined)
+            return match;
+        return `${leading}${trig}${token}{${markerKey}:${value}}`;
+    });
+}
+/** `#component` 멘션 picks → `{refid:N}` 마커 주입 (호환 유지). */
+export function injectMentionRefids(text, picks) {
+    return injectInlineMarkers(text, '#', 'refid', picks?.map(p => ({ token: p.token, value: p.refid })));
+}
+/** `@user` 멘션 picks → `{userId:UUID}` 마커 주입. */
+export function injectMentionUserIds(text, picks) {
+    return injectInlineMarkers(text, '@', 'userId', picks?.map(p => ({ token: p.token, value: p.userId })));
+}
+export function renderMarkdown(text) {
+    if (!text)
+        return '';
+    try {
+        // 0) inline 마커 추출 (`{refid:N}` / `{userId:UUID}`) → 매핑 분리 + 본문 정화
+        const { cleaned, maps } = extractInlineMentions(text);
+        // 1) mention placeholder — `#abc` / `@abc` 가 marked 의 ATX 헤딩 / 이메일 등에
+        //    휩쓸리지 않도록 영숫자 placeholder 로 치환.
+        const m = extractMentions(cleaned);
+        // 2) CJK strong placeholder
+        const c = extractCjkStrongs(m.processed);
+        const out = marked.parse(c.processed);
+        if (typeof out !== 'string') {
+            // marked 가 Promise 를 반환했다면 (async lexer 등) 안전한 fallback
+            return escapeHtml(stripMentionRefids(text)).replace(/\n/g, '<br>');
+        }
+        // 3) 역순 복원 — CJK strong → mention span. maps 로 data-refid / data-userid embed.
+        const restored = restoreMentions(restoreCjkStrongs(out, c.stored), m.stored, maps);
+        // 4) DOMPurify 후처리 — defense-in-depth. marked / 우리 mention span 둘 다 한 번 더 정화.
+        return sanitizeHtml(restored);
+    }
+    catch {
+        return escapeHtml(stripMentionRefids(text)).replace(/\n/g, '<br>');
+    }
+}
+/**
+ * DOMPurify wrapper. Node 환경 (테스트) 에서도 안전하게 동작하도록 fallback.
+ *
+ * 브라우저: window.DOMParser 가 있으므로 DOMPurify 가 직접 정화.
+ * Node (테스트): jsdom 없이 DOMPurify 호출은 실패 — 실패 시 escapeHtml fallback
+ * (테스트에서 sanitize 동작은 별도 검증, 본 fallback 은 회귀 안전).
+ */
+export function sanitizeHtml(html) {
+    try {
+        if (typeof window === 'undefined' || !DOMPurify.sanitize) {
+            return html;
+        }
+        const result = DOMPurify.sanitize(html, PURIFY_CONFIG);
+        return typeof result === 'string' ? result : String(result);
+    }
+    catch {
+        // DOM 환경 부재 또는 dompurify 초기화 실패 — 입력 그대로 통과
+        // (브라우저에선 정상 동작 — Node 테스트에선 sanitize 의 효과를 직접 검증)
+        return html;
+    }
+}
+//# sourceMappingURL=markdown.js.map

package/dist-client/components/markdown.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"markdown.js","sourceRoot":"","sources":["../../client/components/markdown.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,OAAO,SAAS,MAAM,WAAW,CAAA;AACjC,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAE/B;;;;;;;;;GASG;AACH,MAAM,aAAa,GAAQ;IACzB,YAAY,EAAE;QACZ,GAAG,EAAE,IAAI,EAAE,IAAI;QACf,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI;QAClC,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG;QAC/B,IAAI,EAAE,IAAI,EAAE,IAAI;QAChB,GAAG,EAAE,KAAK;QACV,MAAM,EAAE,KAAK;QACb,YAAY;QACZ,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI;QAC3C,MAAM;KACP;IACD,YAAY,EAAE;QACZ,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO;QACtC,YAAY,EAAE,aAAa;KAC5B;IACD,gDAAgD;IAChD,kBAAkB,EAAE,qEAAqE;IACzF,qDAAqD;IACrD,QAAQ,EAAE,CAAC,QAAQ,EAAE,KAAK,CAAC;IAC3B,qDAAqD;IACrD,0CAA0C;IAC1C,YAAY,EAAE,IAAI;CACnB,CAAA;AAED,MAAM,gBAAgB,GAAG,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAA;AAC9C,gBAAgB,CAAC,IAAI,GAAG,GAAG,EAAE,CAAC,EAAE,CAAA;AAEhC,MAAM,mBAAmB,GAAG,oCAAoC,CAAA;AAEhE,MAAM,QAAQ,GAAG,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAA;AAC7D,gBAAgB,CAAC,IAAI,GAAG,CAAC,KAAU,EAAE,EAAE;IACrC,MAAM,IAAI,GAAG,OAAO,KAAK,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;IACrE,IAAI,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,OAAO,KAAK,EAAE,IAAI,IAAI,EAAE,CAAA;IAC1B,CAAC;IACD,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAA;AACxB,CAAC,CAAA;AAED,0DAA0D;AAC1D,MAAM,SAAS,GAAG,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAA;AAC/D,gBAAgB,CAAC,KAAK,GAAG,CAAC,KAAU,EAAE,EAAE;IACtC,MAAM,GAAG,GAAG,OAAO,KAAK,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;IACpE,IAAI,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAClC,+CAA+C;QAC/C,OAAO,UAAU,CAAC,KAAK,EAAE,IAAI,IAAI,EAAE,CAAC,CAAA;IACtC,CAAC;IACD,OAAO,SAAS,CAAC,KAAK,CAAC,CAAA;AACzB,CAAC,CAAA;AAED,MAAM,CAAC,UAAU,CAAC;IAChB,GAAG,EAAE,IAAI;IACT,MAAM,EAAE,IAAI;IACZ,QAAQ,EAAE,KAAK;IACf,QAAQ,EAAE,gBAAgB;IAC1B,KAAK,EAAE,KAAK;CACN,CAAC,CAAA;AAET,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,OAAO,IAAI;SACR,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;SACvB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;AAC5B,CAAC;AAED,kFAAkF;AAClF,MAAM,MAAM,GAAG,mBAAmB,CAAA;AAClC,MAAM,QAAQ,GAAG,QAAQ,CAAA;AAEzB,mCAAmC;AACnC,MAAM,kBAAkB,GAAG,cAAc,CAAA;AACzC,MAAM,kBAAkB,GAAG,SAAS,CAAA;AACpC,MAAM,0BAA0B,GAAG,YAAY,CAAA;AAC/C,MAAM,0BAA0B,GAAG,YAAY,CAAA;AAE/C,+DAA+D;AAC/D,MAAM,eAAe,GAAG,4EAA4E,CAAA;AAYpG;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,MAAM,MAAM,GAAa,EAAE,CAAA;IAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IAC9B,MAAM,QAAQ,GAAa,EAAE,CAAA;IAC7B,IAAI,OAAO,GAAG,KAAK,CAAA;IAEnB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7B,OAAO,GAAG,CAAC,OAAO,CAAA;YAClB,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YACnB,SAAQ;QACV,CAAC;QACD,IAAI,OAAO,EAAE,CAAC;YACZ,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YACnB,SAAQ;QACV,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;IACrF,CAAC;IAED,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAA;AACnD,CAAC;AAED,SAAS,WAAW,CAAC,IAAY,EAAE,MAAgB,EAAE,QAAsB;IACzE,IAAI,CAAC,GAAG,CAAC,CAAA;IACT,IAAI,MAAM,GAAG,EAAE,CAAA;IACf,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QACvB,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAA;QAElB,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACf,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAA;YACpC,IAAI,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC;gBACf,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;gBACvB,MAAK;YACP,CAAC;YACD,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,CAAA;YAChC,CAAC,GAAG,GAAG,GAAG,CAAC,CAAA;YACX,SAAQ;QACV,CAAC;QAED,IAAI,EAAE,KAAK,GAAG,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YACtC,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAA;YAC1C,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;gBACjB,MAAM,IAAI,IAAI,CAAA;gBACd,CAAC,IAAI,CAAC,CAAA;gBACN,SAAQ;YACV,CAAC;YACD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,CAAA;YACtC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACvB,MAAM,IAAI,IAAI,CAAA;gBACd,CAAC,IAAI,CAAC,CAAA;gBACN,SAAQ;YACV,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;YAC1E,MAAM,KAAK,GAAG,KAAK,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;YAC5D,IAAI,WAAW,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC;gBACtC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;gBAClB,MAAM,IAAI,GAAG,kBAAkB,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,GAAG,kBAAkB,EAAE,CAAA;YAC5E,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAA;YACpC,CAAC;YACD,CAAC,GAAG,KAAK,GAAG,CAAC,CAAA;YACb,SAAQ;QACV,CAAC;QAED,MAAM,IAAI,EAAE,CAAA;QACZ,CAAC,EAAE,CAAA;IACL,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAED,SAAS,eAAe,CAAC,IAAY,EAAE,KAAa;IAClD,IAAI,CAAC,GAAG,KAAK,CAAA;IACb,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YACpB,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAA;YACpC,IAAI,GAAG,KAAK,CAAC,CAAC;gBAAE,OAAO,CAAC,CAAC,CAAA;YACzB,CAAC,GAAG,GAAG,GAAG,CAAC,CAAA;YACX,SAAQ;QACV,CAAC;QACD,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG;YAAE,OAAO,CAAC,CAAA;QACpD,CAAC,EAAE,CAAA;IACL,CAAC;IACD,OAAO,CAAC,CAAC,CAAA;AACX,CAAC;AAED,SAAS,WAAW,CAAC,MAAc,EAAE,KAAa,EAAE,KAAa;IAC/D,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,CAAC,CAAA;IAC3B,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;IACxC,OAAO,CACL,CAAC,MAAM,KAAK,EAAE,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACnE,CAAC,KAAK,KAAK,EAAE,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAChE,CAAA;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY,EAAE,MAAgB;IACvD,IAAI,GAAG,GAAG,IAAI,CAAA;IACd,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,GAAG,kBAAkB,GAAG,CAAC,GAAG,kBAAkB,EAAE,CAAA;QAC9D,MAAM,WAAW,GAAG,WAAW,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,CAAA;QAC/D,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;IAC1C,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,MAAM,MAAM,GAAoB,EAAE,CAAA;IAClC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IAC9B,MAAM,QAAQ,GAAa,EAAE,CAAA;IAC7B,IAAI,OAAO,GAAG,KAAK,CAAA;IAEnB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7B,OAAO,GAAG,CAAC,OAAO,CAAA;YAClB,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YACnB,SAAQ;QACV,CAAC;QACD,IAAI,OAAO,EAAE,CAAC;YACZ,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YACnB,SAAQ;QACV,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAA;IACjD,CAAC;IAED,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAA;AACnD,CAAC;AAQD,SAAS,kBAAkB,CAAC,IAAY,EAAE,MAAuB;IAC/D,IAAI,MAAM,GAAG,EAAE,CAAA;IACf,IAAI,CAAC,GAAG,CAAC,CAAA;IACT,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QACvB,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAA;QAClB,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACf,iCAAiC;YACjC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAA;YACpC,IAAI,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC;gBACf,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;gBACvB,MAAK;YACP,CAAC;YACD,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,CAAA;YAChC,CAAC,GAAG,GAAG,GAAG,CAAC,CAAA;YACX,SAAQ;QACV,CAAC;QACD,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YAC7B,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;YACrC,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAA;YAC9B,IACE,CAAC,IAAI,KAAK,EAAE,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC5C,IAAI,KAAK,EAAE;gBACX,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAC1B,CAAC;gBACD,aAAa;gBACb,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;gBACb,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,IAAI,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;oBAAE,CAAC,EAAE,CAAA;gBAC5D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAA;gBAClC,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,EAAe,EAAE,KAAK,EAAE,CAAC,CAAA;gBAChD,MAAM,IAAI,GAAG,0BAA0B,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,GAAG,0BAA0B,EAAE,CAAA;gBAC1F,CAAC,GAAG,CAAC,CAAA;gBACL,SAAQ;YACV,CAAC;QACH,CAAC;QACD,MAAM,IAAI,EAAE,CAAA;QACZ,CAAC,EAAE,CAAA;IACL,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAED;;;;;GAKG;AACH,SAAS,eAAe,CACtB,IAAY,EACZ,MAAuB,EACvB,IAAuB;IAEvB,IAAI,GAAG,GAAG,IAAI,CAAA;IACd,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,MAAM,WAAW,GAAG,GAAG,0BAA0B,GAAG,CAAC,GAAG,0BAA0B,EAAE,CAAA;QACpF,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,CAAA;QACpC,IAAI,WAAmB,CAAA;QACvB,IAAI,OAAO,KAAK,GAAG,EAAE,CAAC;YACpB,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;YAC1C,MAAM,IAAI,GACR,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;gBACjD,CAAC,CAAC,gBAAgB,KAAK,GAAG;gBAC1B,CAAC,CAAC,EAAE,CAAA;YACR,WAAW,GAAG,wBAAwB,IAAI,KAAK,UAAU,CAAC,KAAK,CAAC,SAAS,CAAA;QAC3E,CAAC;aAAM,CAAC;YACN,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;YAC5C,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,iBAAiB,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAA;YACjE,WAAW,GAAG,6BAA6B,IAAI,KAAK,UAAU,CAAC,KAAK,CAAC,SAAS,CAAA;QAChF,CAAC;QACD,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;IAChD,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED;;;;;GAKG;AACH,MAAM,iBAAiB,GAAG,mCAAmC,CAAA;AAE7D,MAAM,UAAU,GACd,8EAA8E,CAAA;AAEhF;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAA+B;IAChE,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAA;IACpB,OAAO,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAA;AAC5C,CAAC;AASD;;;GAGG;AACH,SAAS,qBAAqB,CAAC,IAAY;IAIzC,MAAM,YAAY,GAAG,IAAI,GAAG,EAAkB,CAAA;IAC9C,MAAM,aAAa,GAAG,IAAI,GAAG,EAAkB,CAAA;IAE/C,MAAM,WAAW,GAAG,IAAI,MAAM,CAC5B,QAAQ,UAAU,QAAQ,UAAU,wBAAwB,EAC5D,IAAI,CACL,CAAA;IACD,MAAM,MAAM,GAAG,IAAI,MAAM,CACvB,QAAQ,UAAU,QAAQ,UAAU,6BAA6B,EACjE,IAAI,CACL,CAAA;IAED,IAAI,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE;QACvE,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAA;QAC9B,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,YAAY,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;QACtF,OAAO,GAAG,OAAO,IAAI,KAAK,EAAE,CAAA;IAC9B,CAAC,CAAC,CAAA;IACF,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;QAC/D,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,aAAa,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;QAC/D,OAAO,GAAG,OAAO,IAAI,KAAK,EAAE,CAAA;IAC9B,CAAC,CAAC,CAAA;IACF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,YAAY,EAAE,aAAa,EAAE,EAAE,CAAA;AAC3D,CAAC;AAED;;;;GAIG;AACH,SAAS,mBAAmB,CAC1B,IAAY,EACZ,OAAe,EACf,SAAiB,EACjB,KAAkF;IAElF,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,IAAI,EAAE,CAAA;IAC5D,MAAM,GAAG,GAAG,IAAI,GAAG,EAA2B,CAAA;IAC9C,KAAK,MAAM,CAAC,IAAI,KAAK;QAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAA;IAChD,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAA;IAClE,MAAM,EAAE,GAAG,IAAI,MAAM,CACnB,QAAQ,UAAU,MAAM,WAAW,MAAM,UAAU,WAAW,SAAS,gBAAgB,EACvF,IAAI,CACL,CAAA;IACD,OAAO,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE;QACtE,IAAI,cAAc;YAAE,OAAO,KAAK,CAAA;QAChC,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;QAC5B,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,KAAK,CAAA;QACrC,OAAO,GAAG,OAAO,GAAG,IAAI,GAAG,KAAK,IAAI,SAAS,IAAI,KAAK,GAAG,CAAA;IAC3D,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,yDAAyD;AACzD,MAAM,UAAU,mBAAmB,CACjC,IAAY,EACZ,KAAyE;IAEzE,OAAO,mBAAmB,CACxB,IAAI,EACJ,GAAG,EACH,OAAO,EACP,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CACtD,CAAA;AACH,CAAC;AAED,gDAAgD;AAChD,MAAM,UAAU,oBAAoB,CAClC,IAAY,EACZ,KAA0E;IAE1E,OAAO,mBAAmB,CACxB,IAAI,EACJ,GAAG,EACH,QAAQ,EACR,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CACvD,CAAA;AACH,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAA;IACpB,IAAI,CAAC;QACH,kEAAkE;QAClE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAA;QACrD,sEAAsE;QACtE,oCAAoC;QACpC,MAAM,CAAC,GAAG,eAAe,CAAC,OAAO,CAAC,CAAA;QAClC,4BAA4B;QAC5B,MAAM,CAAC,GAAG,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;QACxC,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;QACrC,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YAC5B,wDAAwD;YACxD,OAAO,UAAU,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;QACpE,CAAC;QACD,+EAA+E;QAC/E,MAAM,QAAQ,GAAG,eAAe,CAAC,iBAAiB,CAAC,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;QAClF,8EAA8E;QAC9E,OAAO,YAAY,CAAC,QAAQ,CAAC,CAAA;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,UAAU,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;IACpE,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,IAAI,CAAC;QACH,IAAI,OAAO,MAAM,KAAK,WAAW,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC;YACzD,OAAO,IAAI,CAAA;QACb,CAAC;QACD,MAAM,MAAM,GAAG,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC,CAAA;QACtD,OAAO,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IAC7D,CAAC;IAAC,MAAM,CAAC;QACP,4CAA4C;QAC5C,mDAAmD;QACnD,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC","sourcesContent":["/**\n * Board AI 채팅 메시지의 Markdown 렌더링.\n *\n * 보안 (defense-in-depth):\n *   1. raw HTML 차단 — marked 의 renderer.html → '' 로 block-level HTML 무력화.\n *   2. 위험 link 스킴 차단 — javascript: / data: / vbscript: 등 거부.\n *   3. DOMPurify 후처리 — marked 출력 전체를 sanitize. 우회되는 inline HTML\n *      (이미지 onerror, span style=\"javascript:...\" 등) 까지 차단.\n *\n * 1·2 만으로도 표면이 좁지만, 다음의 *알려진 우회 경로* 가 존재하므로 3 이 필수:\n *   - marked 가 토큰화 실패한 일부 입력 (특히 코드블록 안 백틱 escape 미스) 에서\n *     생 HTML 이 escape 안 된 채 흘러나갈 수 있음\n *   - mention span (`<span class=\"mention\" ...>`) 이 우리 손으로 만드는 element 라\n *     allowlist 기반 정화 필요\n *   - 멀티유저 환경 (다른 사용자 메시지 echo) 시 표면 ↑\n *\n * CJK 보강:\n *   - CommonMark의 left/right-flanking 규칙 때문에 한국어/일본어/중국어 텍스트와\n *     ** 강조 마커 사이에 구두점이 끼면 마커가 닫히지 않는 케이스가 발생한다.\n *     예) \"**'rect'**의\" → 닫는 ** 가 [구두점] + [CJK] 사이에 위치하므로 right-flanking 실패\n *   - 이런 케이스는 marked 에 넘기기 전에 자체적으로 추출 → 자리표시자로 치환 → marked\n *     수행 → 후처리에서 <strong>...</strong> 로 복원하는 방식으로 처리한다.\n *   - 이 우회는 사용자가 의도적으로 넣은 ** 만 대상으로 하므로 보안적으로 안전하다 (내용은\n *     escapeHtml 로 항상 escape).\n */\nimport DOMPurify from 'dompurify'\nimport { marked } from 'marked'\n\n/**\n * DOMPurify 정화 정책.\n *\n * 우리가 markdown 출력에서 의도적으로 사용하는 element / attribute 만 명시 허용:\n *   - 표준 markdown elements (p, h1~6, ul/ol/li, strong/em, a, img, code, pre, blockquote, hr, br, table 계열)\n *   - mention span (class + data-refid + data-userid)\n *\n * 그 외는 모두 strip — 이벤트 핸들러 (onerror/onclick), inline style, javascript:\n * URL 등 자동 차단. 우리 구조에 없는 element (script/iframe/object/embed 등) 도 모두 제거.\n */\nconst PURIFY_CONFIG: any = {\n  ALLOWED_TAGS: [\n    'p', 'br', 'hr',\n    'h1', 'h2', 'h3', 'h4', 'h5', 'h6',\n    'strong', 'em', 'del', 's', 'u',\n    'ul', 'ol', 'li',\n    'a', 'img',\n    'code', 'pre',\n    'blockquote',\n    'table', 'thead', 'tbody', 'tr', 'th', 'td',\n    'span'\n  ],\n  ALLOWED_ATTR: [\n    'href', 'title', 'alt', 'src', 'class',\n    'data-refid', 'data-userid'\n  ],\n  // javascript: / data: / vbscript: 등 위험 스킴 자동 차단\n  ALLOWED_URI_REGEXP: /^(?:(?:https?|mailto|tel|ftp):|[^a-z]|[a-z+.\\-]+(?:[^a-z+.\\-:]|$))/i,\n  // target=\"_blank\" 같이 우리가 명시하는 link 외엔 추가 attr 안 붙이도록\n  ADD_ATTR: ['target', 'rel'],\n  // raw HTML 입력은 marked.renderer.html → '' 로 이미 막혀있지만,\n  // dompurify 가 전체 input 을 한 번 더 정화 — 우회 차단\n  KEEP_CONTENT: true\n}\n\nconst markdownRenderer = new marked.Renderer()\nmarkdownRenderer.html = () => ''\n\nconst DANGEROUS_SCHEME_RE = /^(javascript|data|vbscript|file):/i\n\nconst origLink = markdownRenderer.link.bind(markdownRenderer)\nmarkdownRenderer.link = (token: any) => {\n  const href = typeof token?.href === 'string' ? token.href.trim() : ''\n  if (DANGEROUS_SCHEME_RE.test(href)) {\n    return token?.text ?? ''\n  }\n  return origLink(token)\n}\n\n// 이미지 renderer — src scheme 검사 + alt 의 inline HTML escape\nconst origImage = markdownRenderer.image.bind(markdownRenderer)\nmarkdownRenderer.image = (token: any) => {\n  const src = typeof token?.href === 'string' ? token.href.trim() : ''\n  if (DANGEROUS_SCHEME_RE.test(src)) {\n    // 위험 src — 이미지 자체 제거. alt 텍스트는 escape 해서 평문 노출\n    return escapeHtml(token?.text ?? '')\n  }\n  return origImage(token)\n}\n\nmarked.setOptions({\n  gfm: true,\n  breaks: true,\n  pedantic: false,\n  renderer: markdownRenderer,\n  async: false\n} as any)\n\nexport function escapeHtml(text: string): string {\n  return text\n    .replace(/&/g, '&amp;')\n    .replace(/</g, '&lt;')\n    .replace(/>/g, '&gt;')\n    .replace(/\"/g, '&quot;')\n    .replace(/'/g, '&#039;')\n}\n\n// CJK 문자 범위: Hiragana, Katakana, CJK Unified Ideographs (Ext A 포함), Hangul, 전각/반각\nconst CJK_RE = /[぀-ヿ㐀-䶿一-鿿가-힯＀-￯]/\nconst PUNCT_RE = /\\p{P}/u\n\n// marked 가 절대 변형하지 않는 토큰 (영숫자만 사용)\nconst PLACEHOLDER_PREFIX = 'BAICJKSTRONG'\nconst PLACEHOLDER_SUFFIX = 'ENDMARK'\nconst MENTION_PLACEHOLDER_PREFIX = 'BAIMENTION'\nconst MENTION_PLACEHOLDER_SUFFIX = 'ENDMENTION'\n\n// mention 토큰에 허용되는 문자 — alphanumeric + 한글/일본/중국어. 공백/구두점에서 끊김.\nconst MENTION_WORD_RE = /[\\w\\p{Script=Hangul}\\p{Script=Hiragana}\\p{Script=Katakana}\\p{Script=Han}]/u\n\ninterface ExtractResult {\n  processed: string\n  stored: string[]\n}\n\ninterface MentionExtractResult {\n  processed: string\n  stored: StoredMention[]\n}\n\n/**\n * `**X**` 패턴 중 CJK + 구두점 인접 때문에 marked 의 flanking 규칙에서 누락되는\n * 케이스를 추출. 코드 펜스(```)와 인라인 코드(`...`) 안쪽은 건드리지 않는다.\n *\n * 검출 기준 (CommonMark right-flanking 실패 ↔ left-flanking 실패):\n *   - 닫는 ** 직전 문자가 구두점 AND 직후 문자가 CJK letter\n *   - 여는 ** 직전 문자가 CJK letter AND 직후 문자가 구두점\n */\nexport function extractCjkStrongs(text: string): ExtractResult {\n  const stored: string[] = []\n  const lines = text.split('\\n')\n  const outLines: string[] = []\n  let inFence = false\n\n  for (const line of lines) {\n    if (/^\\s{0,3}```/.test(line)) {\n      inFence = !inFence\n      outLines.push(line)\n      continue\n    }\n    if (inFence) {\n      outLines.push(line)\n      continue\n    }\n    outLines.push(processLine(line, stored, () => outLines[outLines.length - 1] ?? ''))\n  }\n\n  return { processed: outLines.join('\\n'), stored }\n}\n\nfunction processLine(line: string, stored: string[], prevLine: () => string): string {\n  let i = 0\n  let result = ''\n  while (i < line.length) {\n    const ch = line[i]\n\n    if (ch === '`') {\n      const end = line.indexOf('`', i + 1)\n      if (end === -1) {\n        result += line.slice(i)\n        break\n      }\n      result += line.slice(i, end + 1)\n      i = end + 1\n      continue\n    }\n\n    if (ch === '*' && line[i + 1] === '*') {\n      const close = findCloseStrong(line, i + 2)\n      if (close === -1) {\n        result += '**'\n        i += 2\n        continue\n      }\n      const inner = line.slice(i + 2, close)\n      if (inner.length === 0) {\n        result += '**'\n        i += 2\n        continue\n      }\n      const before = result.length > 0 ? result.slice(-1) : prevLine().slice(-1)\n      const after = close + 2 < line.length ? line[close + 2] : ''\n      if (needsCjkFix(before, after, inner)) {\n        stored.push(inner)\n        result += `${PLACEHOLDER_PREFIX}${stored.length - 1}${PLACEHOLDER_SUFFIX}`\n      } else {\n        result += line.slice(i, close + 2)\n      }\n      i = close + 2\n      continue\n    }\n\n    result += ch\n    i++\n  }\n  return result\n}\n\nfunction findCloseStrong(line: string, start: number): number {\n  let i = start\n  while (i < line.length - 1) {\n    if (line[i] === '`') {\n      const end = line.indexOf('`', i + 1)\n      if (end === -1) return -1\n      i = end + 1\n      continue\n    }\n    if (line[i] === '*' && line[i + 1] === '*') return i\n    i++\n  }\n  return -1\n}\n\nfunction needsCjkFix(before: string, after: string, inner: string): boolean {\n  const innerStart = inner[0]\n  const innerEnd = inner[inner.length - 1]\n  return (\n    (before !== '' && CJK_RE.test(before) && PUNCT_RE.test(innerStart)) ||\n    (after !== '' && CJK_RE.test(after) && PUNCT_RE.test(innerEnd))\n  )\n}\n\nfunction restoreCjkStrongs(html: string, stored: string[]): string {\n  let out = html\n  for (let n = 0; n < stored.length; n++) {\n    const token = `${PLACEHOLDER_PREFIX}${n}${PLACEHOLDER_SUFFIX}`\n    const replacement = `<strong>${escapeHtml(stored[n])}</strong>`\n    out = out.split(token).join(replacement)\n  }\n  return out\n}\n\n/**\n * `#token` mention 패턴을 추출 → placeholder 로 치환.\n *\n * 활성 조건 (chat textarea 의 extractMentionContext 와 일관):\n *   - `#` 직전이 문자열 시작 또는 word char 가 아님 (공백/구두점/줄 시작)\n *   - `#` 직후가 word char (영숫자/한글/일본/중국어)\n *   - 코드 펜스(```)와 인라인 코드(`...`) 안쪽은 건드리지 않음\n *\n * Markdown ATX 헤딩 (`# Title`) 과 충돌하지 않음 — 헤딩은 `#` 다음에 공백이 오므로\n * 본 정규식 (직후가 word char) 매칭 안 됨.\n */\nexport function extractMentions(text: string): MentionExtractResult {\n  const stored: StoredMention[] = []\n  const lines = text.split('\\n')\n  const outLines: string[] = []\n  let inFence = false\n\n  for (const line of lines) {\n    if (/^\\s{0,3}```/.test(line)) {\n      inFence = !inFence\n      outLines.push(line)\n      continue\n    }\n    if (inFence) {\n      outLines.push(line)\n      continue\n    }\n    outLines.push(processMentionLine(line, stored))\n  }\n\n  return { processed: outLines.join('\\n'), stored }\n}\n\n/** 추출된 mention — trigger 와 함께 보존해 restore 시 trigger 별 다른 span 생성. */\ninterface StoredMention {\n  trigger: '#' | '@'\n  token: string\n}\n\nfunction processMentionLine(line: string, stored: StoredMention[]): string {\n  let result = ''\n  let i = 0\n  while (i < line.length) {\n    const ch = line[i]\n    if (ch === '`') {\n      // 인라인 코드 — 닫는 backtick 까지 그대로 통과\n      const end = line.indexOf('`', i + 1)\n      if (end === -1) {\n        result += line.slice(i)\n        break\n      }\n      result += line.slice(i, end + 1)\n      i = end + 1\n      continue\n    }\n    if (ch === '#' || ch === '@') {\n      const prev = i > 0 ? line[i - 1] : ''\n      const next = line[i + 1] ?? ''\n      if (\n        (prev === '' || !MENTION_WORD_RE.test(prev)) &&\n        next !== '' &&\n        MENTION_WORD_RE.test(next)\n      ) {\n        // 토큰 끝 위치 찾기\n        let j = i + 1\n        while (j < line.length && MENTION_WORD_RE.test(line[j])) j++\n        const token = line.slice(i + 1, j)\n        stored.push({ trigger: ch as '#' | '@', token })\n        result += `${MENTION_PLACEHOLDER_PREFIX}${stored.length - 1}${MENTION_PLACEHOLDER_SUFFIX}`\n        i = j\n        continue\n      }\n    }\n    result += ch\n    i++\n  }\n  return result\n}\n\n/**\n * placeholder 를 mention span 으로 복원. trigger 별로 다른 span:\n *   - `#component` → `<span class=\"mention\" data-refid=\"N\">#token</span>`\n *   - `@user`      → `<span class=\"user-mention\" data-userid=\"UUID\">@token</span>`\n * 매핑 없으면 data-* 속성 없이 단순 span.\n */\nfunction restoreMentions(\n  html: string,\n  stored: StoredMention[],\n  maps: InlineMentionMaps\n): string {\n  let out = html\n  for (let n = 0; n < stored.length; n++) {\n    const placeholder = `${MENTION_PLACEHOLDER_PREFIX}${n}${MENTION_PLACEHOLDER_SUFFIX}`\n    const { trigger, token } = stored[n]\n    let replacement: string\n    if (trigger === '#') {\n      const refid = maps.refidByToken.get(token)\n      const attr =\n        typeof refid === 'number' && Number.isFinite(refid)\n          ? ` data-refid=\"${refid}\"`\n          : ''\n      replacement = `<span class=\"mention\"${attr}>#${escapeHtml(token)}</span>`\n    } else {\n      const userId = maps.userIdByToken.get(token)\n      const attr = userId ? ` data-userid=\"${escapeHtml(userId)}\"` : ''\n      replacement = `<span class=\"user-mention\"${attr}>@${escapeHtml(token)}</span>`\n    }\n    out = out.split(placeholder).join(replacement)\n  }\n  return out\n}\n\n/**\n * 인라인 마커 정규식 — `{key:value}` 형태. 현재 사용:\n *   - `{refid:N}`     — `#component` 멘션\n *   - `{userId:UUID}` — `@user` 멘션\n * 향후 추가 종류 (agentId / threadId / 외부 시스템 id 등) 도 동일 형식.\n */\nconst MENTION_MARKER_RE = /\\{[a-zA-Z][a-zA-Z0-9]*:[^}\\s]+\\}/g\n\nconst WORD_CLASS =\n  '\\\\w\\\\p{Script=Hangul}\\\\p{Script=Hiragana}\\\\p{Script=Katakana}\\\\p{Script=Han}'\n\n/**\n * 본문에서 모든 `{key:value}` 마커 제거 — textarea 편집 / LLM 입력 / 평문 표출 등.\n * 토큰 (#component / @user) 자체는 보존.\n */\nexport function stripMentionRefids(text: string | null | undefined): string {\n  if (!text) return ''\n  return text.replace(MENTION_MARKER_RE, '')\n}\n\ninterface InlineMentionMaps {\n  /** trigger='#' 의 token → refid (component) */\n  refidByToken: Map<string, number>\n  /** trigger='@' 의 token → userId (user) */\n  userIdByToken: Map<string, string>\n}\n\n/**\n * `#token{refid:N}` / `@user{userId:UUID}` 마커를 추출해 매핑 + 마커 제거된 본문 반환.\n * 렌더링 직전에 호출 — 마킹 정보 분리 후 markdown 처리에 깨끗한 텍스트만.\n */\nfunction extractInlineMentions(text: string): {\n  cleaned: string\n  maps: InlineMentionMaps\n} {\n  const refidByToken = new Map<string, number>()\n  const userIdByToken = new Map<string, string>()\n\n  const componentRe = new RegExp(\n    `(^|[^${WORD_CLASS}])#([${WORD_CLASS}-]+)\\\\{refid:(\\\\d+)\\\\}`,\n    'gu'\n  )\n  const userRe = new RegExp(\n    `(^|[^${WORD_CLASS}])@([${WORD_CLASS}-]+)\\\\{userId:([^}\\\\s]+)\\\\}`,\n    'gu'\n  )\n\n  let cleaned = text.replace(componentRe, (_m, leading, token, refidStr) => {\n    const refid = Number(refidStr)\n    if (Number.isFinite(refid) && !refidByToken.has(token)) refidByToken.set(token, refid)\n    return `${leading}#${token}`\n  })\n  cleaned = cleaned.replace(userRe, (_m, leading, token, userId) => {\n    if (!userIdByToken.has(token)) userIdByToken.set(token, userId)\n    return `${leading}@${token}`\n  })\n  return { cleaned, maps: { refidByToken, userIdByToken } }\n}\n\n/**\n * 일반화된 inline marker 주입.\n *   injectInlineMarkers(text, '#', 'refid', [{token, value: 35}])\n *   injectInlineMarkers(text, '@', 'userId', [{token, value: 'uuid'}])\n */\nfunction injectInlineMarkers(\n  text: string,\n  trigger: string,\n  markerKey: string,\n  picks: ReadonlyArray<{ token: string; value: string | number }> | null | undefined\n): string {\n  if (!text || !picks || picks.length === 0) return text ?? ''\n  const map = new Map<string, string | number>()\n  for (const p of picks) map.set(p.token, p.value)\n  const escapedTrig = trigger.replace(/[.*+?^${}()|[\\]\\\\]/g, '\\\\$&')\n  const re = new RegExp(\n    `(^|[^${WORD_CLASS}])(${escapedTrig})([${WORD_CLASS}-]+)(\\\\{${markerKey}:[^}\\\\s]+\\\\})?`,\n    'gu'\n  )\n  return text.replace(re, (match, leading, trig, token, existingMarker) => {\n    if (existingMarker) return match\n    const value = map.get(token)\n    if (value === undefined) return match\n    return `${leading}${trig}${token}{${markerKey}:${value}}`\n  })\n}\n\n/** `#component` 멘션 picks → `{refid:N}` 마커 주입 (호환 유지). */\nexport function injectMentionRefids(\n  text: string,\n  picks: ReadonlyArray<{ token: string; refid: number }> | null | undefined\n): string {\n  return injectInlineMarkers(\n    text,\n    '#',\n    'refid',\n    picks?.map(p => ({ token: p.token, value: p.refid }))\n  )\n}\n\n/** `@user` 멘션 picks → `{userId:UUID}` 마커 주입. */\nexport function injectMentionUserIds(\n  text: string,\n  picks: ReadonlyArray<{ token: string; userId: string }> | null | undefined\n): string {\n  return injectInlineMarkers(\n    text,\n    '@',\n    'userId',\n    picks?.map(p => ({ token: p.token, value: p.userId }))\n  )\n}\n\nexport function renderMarkdown(text: string): string {\n  if (!text) return ''\n  try {\n    // 0) inline 마커 추출 (`{refid:N}` / `{userId:UUID}`) → 매핑 분리 + 본문 정화\n    const { cleaned, maps } = extractInlineMentions(text)\n    // 1) mention placeholder — `#abc` / `@abc` 가 marked 의 ATX 헤딩 / 이메일 등에\n    //    휩쓸리지 않도록 영숫자 placeholder 로 치환.\n    const m = extractMentions(cleaned)\n    // 2) CJK strong placeholder\n    const c = extractCjkStrongs(m.processed)\n    const out = marked.parse(c.processed)\n    if (typeof out !== 'string') {\n      // marked 가 Promise 를 반환했다면 (async lexer 등) 안전한 fallback\n      return escapeHtml(stripMentionRefids(text)).replace(/\\n/g, '<br>')\n    }\n    // 3) 역순 복원 — CJK strong → mention span. maps 로 data-refid / data-userid embed.\n    const restored = restoreMentions(restoreCjkStrongs(out, c.stored), m.stored, maps)\n    // 4) DOMPurify 후처리 — defense-in-depth. marked / 우리 mention span 둘 다 한 번 더 정화.\n    return sanitizeHtml(restored)\n  } catch {\n    return escapeHtml(stripMentionRefids(text)).replace(/\\n/g, '<br>')\n  }\n}\n\n/**\n * DOMPurify wrapper. Node 환경 (테스트) 에서도 안전하게 동작하도록 fallback.\n *\n * 브라우저: window.DOMParser 가 있으므로 DOMPurify 가 직접 정화.\n * Node (테스트): jsdom 없이 DOMPurify 호출은 실패 — 실패 시 escapeHtml fallback\n * (테스트에서 sanitize 동작은 별도 검증, 본 fallback 은 회귀 안전).\n */\nexport function sanitizeHtml(html: string): string {\n  try {\n    if (typeof window === 'undefined' || !DOMPurify.sanitize) {\n      return html\n    }\n    const result = DOMPurify.sanitize(html, PURIFY_CONFIG)\n    return typeof result === 'string' ? result : String(result)\n  } catch {\n    // DOM 환경 부재 또는 dompurify 초기화 실패 — 입력 그대로 통과\n    // (브라우저에선 정상 동작 — Node 테스트에선 sanitize 의 효과를 직접 검증)\n    return html\n  }\n}\n"]}

package/dist-client/components/markdown.test.d.ts

@@ -0,0 +1 @@
+export {};