@w3kits-com/plugin-opendesign 0.1.8 → 0.1.10

package/dist/__w3kits/webcontainer-runtime/apps/daemon/dist/import-export-routes.js

@@ -0,0 +1,482 @@
+import { InlineAssetsLimitError, MAX_INLINE_OWNER_BYTES, inlineRelativeAssets, } from './inline-assets.js';
+export function registerImportRoutes(app, ctx) {
+    const { db } = ctx;
+    const { sendApiError } = ctx.http;
+    const { importUpload } = ctx.uploads;
+    const { fs, path } = ctx.node;
+    const { randomId } = ctx.ids;
+    const { PROJECTS_DIR, RUNTIME_DATA_DIR_CANONICAL } = ctx.paths;
+    const { importClaudeDesignZip, projectDir, detectEntryFile } = ctx.imports;
+    const { consumedImportNonces, desktopAuthSecret, isDesktopAuthGateActive, pruneExpiredImportNonces, verifyDesktopImportToken, } = ctx.auth;
+    const { insertProject } = ctx.projectStore;
+    const { insertConversation } = ctx.conversations;
+    const { setTabs } = ctx.projectFiles;
+    app.post('/api/import/claude-design', importUpload.single('file'), async (req, res) => {
+        try {
+            if (!req.file)
+                return res.status(400).json({ error: 'zip file required' });
+            const originalName = req.file.originalname || 'Claude Design export.zip';
+            if (!/\.zip$/i.test(originalName)) {
+                fs.promises.unlink(req.file.path).catch(() => { });
+                return res.status(400).json({ error: 'expected a .zip file' });
+            }
+            const id = randomId();
+            const now = Date.now();
+            const baseName = originalName.replace(/\.zip$/i, '').trim() || 'Claude Design import';
+            const imported = await importClaudeDesignZip(req.file.path, projectDir(PROJECTS_DIR, id));
+            fs.promises.unlink(req.file.path).catch(() => { });
+            const project = insertProject(db, {
+                id,
+                name: baseName,
+                skillId: null,
+                designSystemId: null,
+                pendingPrompt: `Imported from Claude Design ZIP: ${originalName}. Continue editing ${imported.entryFile}.`,
+                metadata: {
+                    kind: 'prototype',
+                    importedFrom: 'claude-design',
+                    entryFile: imported.entryFile,
+                    sourceFileName: originalName,
+                },
+                createdAt: now,
+                updatedAt: now,
+            });
+            const cid = randomId();
+            insertConversation(db, {
+                id: cid,
+                projectId: id,
+                title: 'Imported Claude Design project',
+                createdAt: now,
+                updatedAt: now,
+            });
+            setTabs(db, id, [imported.entryFile], imported.entryFile);
+            res.json({
+                project,
+                conversationId: cid,
+                entryFile: imported.entryFile,
+                files: imported.files,
+            });
+        }
+        catch (err) {
+            if (req.file?.path)
+                fs.promises.unlink(req.file.path).catch(() => { });
+            res.status(400).json({ error: String(err) });
+        }
+    });
+    // Import an existing local folder as a project. The user picks a folder
+    // and OD works inside it directly: every write goes to metadata.baseDir.
+    // No copy, no shadow tree — the user owns the workspace and is
+    // responsible for their own version control (git, time machine, etc.),
+    // mirroring how Cursor / Claude Code / Aider behave.
+    app.post('/api/import/folder', async (req, res) => {
+        try {
+            const { baseDir, name, skillId, designSystemId } = req.body || {};
+            if (typeof baseDir !== 'string' || !baseDir.trim()) {
+                return sendApiError(res, 400, 'BAD_REQUEST', 'baseDir required');
+            }
+            let trustedPickerImport = false;
+            if (isDesktopAuthGateActive()) {
+                const secret = desktopAuthSecret();
+                if (secret == null) {
+                    return sendApiError(res, 503, 'DESKTOP_AUTH_PENDING', 'desktop auth required but secret not yet registered', {
+                        details: { hint: 'restart desktop or wait for sidecar registration' },
+                        retryable: true,
+                    });
+                }
+                const headerValue = req.get('x-od-desktop-import-token');
+                const token = typeof headerValue === 'string' ? headerValue : '';
+                const now = Date.now();
+                pruneExpiredImportNonces(now);
+                const verification = verifyDesktopImportToken(secret, baseDir, token, now, consumedImportNonces);
+                if (!verification.ok) {
+                    return sendApiError(res, 403, 'FORBIDDEN', 'desktop import token rejected', { details: { reason: verification.reason } });
+                }
+                consumedImportNonces.set(verification.nonce, verification.exp);
+                trustedPickerImport = true;
+            }
+            const trimmedInput = baseDir.trim();
+            if (!path.isAbsolute(path.normalize(trimmedInput))) {
+                return sendApiError(res, 400, 'BAD_REQUEST', 'baseDir must be absolute');
+            }
+            // Resolve symlinks once at import and persist the canonical path.
+            // Without this, a user-controlled symlink (e.g. ~/sneaky → /etc) at
+            // baseDir would let writeProjectFile escape the project sandbox at
+            // every later call: resolveSafe checks the *literal* baseDir, but
+            // the OS follows the symlink at write time. realpath() collapses
+            // the chain so the stored baseDir == what the kernel will write to.
+            let normalizedPath;
+            try {
+                normalizedPath = await fs.promises.realpath(trimmedInput);
+            }
+            catch {
+                return sendApiError(res, 400, 'BAD_REQUEST', 'folder not found');
+            }
+            // realpath resolved → lstat the canonical path to ensure it's a
+            // real directory, not another symlink (defense-in-depth).
+            let dirStat;
+            try {
+                dirStat = await fs.promises.lstat(normalizedPath);
+            }
+            catch {
+                return sendApiError(res, 400, 'BAD_REQUEST', 'folder not found');
+            }
+            if (!dirStat.isDirectory()) {
+                return sendApiError(res, 400, 'BAD_REQUEST', 'path must be a directory');
+            }
+            if (path.parse(normalizedPath).root === normalizedPath) {
+                return sendApiError(res, 400, 'BAD_REQUEST', 'cannot import the filesystem root');
+            }
+            // Prevent importing the data directory into itself (post-realpath so
+            // a symlink pointing into RUNTIME_DATA_DIR is also caught). Compare
+            // against the canonical alias because `normalizedPath` is the import
+            // folder's realpath; on macOS the data dir at /var/... resolves to
+            // /private/var/... and would never start-with the user-shaped path.
+            if (normalizedPath === RUNTIME_DATA_DIR_CANONICAL ||
+                normalizedPath.startsWith(RUNTIME_DATA_DIR_CANONICAL + path.sep)) {
+                return sendApiError(res, 400, 'BAD_REQUEST', 'cannot import the data directory');
+            }
+            const id = randomId();
+            const now = Date.now();
+            const projectName = typeof name === 'string' && name.trim()
+                ? name.trim()
+                : path.basename(normalizedPath);
+            const entryFile = await detectEntryFile(normalizedPath);
+            const project = insertProject(db, {
+                id,
+                name: projectName,
+                skillId: skillId ?? null,
+                designSystemId: designSystemId ?? null,
+                pendingPrompt: null,
+                metadata: {
+                    kind: 'prototype',
+                    baseDir: normalizedPath,
+                    importedFrom: 'folder',
+                    entryFile,
+                    ...(trustedPickerImport ? { fromTrustedPicker: true } : {}),
+                },
+                createdAt: now,
+                updatedAt: now,
+            });
+            const cid = randomId();
+            insertConversation(db, {
+                id: cid,
+                projectId: id,
+                title: `Imported from ${projectName}`,
+                createdAt: now,
+                updatedAt: now,
+            });
+            if (entryFile)
+                setTabs(db, id, [entryFile], entryFile);
+            /** @type {import('@open-design/contracts').ImportFolderResponse} */
+            const body = { project, conversationId: cid, entryFile };
+            res.json(body);
+        }
+        catch (err) {
+            sendApiError(res, 400, 'BAD_REQUEST', String(err));
+        }
+    });
+}
+export function registerProjectExportRoutes(app, ctx) {
+    const { db } = ctx;
+    const { sendApiError } = ctx.http;
+    const { PROJECTS_DIR } = ctx.paths;
+    const { getProject } = ctx.projectStore;
+    const { readProjectFile, resolveProjectFilePath } = ctx.projectFiles;
+    const { isSafeId } = ctx.validation;
+    const { buildProjectArchive, buildBatchArchive, buildDesktopPdfExportInput, desktopPdfExporter, daemonUrlRef, sanitizeArchiveFilename, } = ctx.exports;
+    // Streams a ZIP of the project's on-disk tree so the "Download as .zip"
+    // share menu can hand the user the actual files they uploaded — e.g. the
+    // imported `ui-design/` folder — instead of a one-file snapshot of the
+    // rendered HTML. `root` scopes the archive to a subdirectory; without
+    // it, the whole project is packed.
+    app.get('/api/projects/:id/archive', async (req, res) => {
+        try {
+            const root = typeof req.query?.root === 'string' ? req.query.root : '';
+            const project = getProject(db, req.params.id);
+            const { buffer, baseName } = await buildProjectArchive(PROJECTS_DIR, req.params.id, root, project?.metadata);
+            const fallbackName = project?.name || req.params.id;
+            const fileSlug = sanitizeArchiveFilename(baseName || fallbackName) || 'project';
+            const filename = `${fileSlug}.zip`;
+            // RFC 5987 dance: legacy `filename=` carries an ASCII fallback, while
+            // `filename*=UTF-8''…` lets modern browsers pick up project names
+            // with non-ASCII characters (accents, CJK, etc.) without mojibake.
+            const asciiFallback = filename.replace(/[^\x20-\x7e]/g, '_').replace(/"/g, '_') || 'project.zip';
+            res.setHeader('Content-Type', 'application/zip');
+            res.setHeader('Content-Disposition', `attachment; filename="${asciiFallback}"; filename*=UTF-8''${encodeURIComponent(filename)}`);
+            res.send(buffer);
+        }
+        catch (err) {
+            const code = err && err.code;
+            const status = code === 'ENOENT' || code === 'ENOTDIR' ? 404 : 400;
+            sendApiError(res, status, status === 404 ? 'FILE_NOT_FOUND' : 'BAD_REQUEST', String(err?.message || err));
+        }
+    });
+    // Batch archive: accepts a list of file names and returns a ZIP of just
+    // those files. Used by the Design Files panel multi-select download.
+    app.post('/api/projects/:id/archive/batch', async (req, res) => {
+        try {
+            const { files } = req.body || {};
+            if (!Array.isArray(files) || files.length === 0) {
+                sendApiError(res, 400, 'BAD_REQUEST', 'files must be a non-empty array');
+                return;
+            }
+            const project = getProject(db, req.params.id);
+            const { buffer } = await buildBatchArchive(PROJECTS_DIR, req.params.id, files, project?.metadata);
+            const fileSlug = sanitizeArchiveFilename(project?.name || req.params.id) || 'project';
+            const filename = `${fileSlug}.zip`;
+            const asciiFallback = filename.replace(/[^\x20-\x7e]/g, '_').replace(/"/g, '_') || 'project.zip';
+            res.setHeader('Content-Type', 'application/zip');
+            res.setHeader('Content-Disposition', `attachment; filename="${asciiFallback}"; filename*=UTF-8''${encodeURIComponent(filename)}`);
+            res.send(buffer);
+        }
+        catch (err) {
+            const code = err && err.code;
+            const status = code === 'ENOENT' ? 404 : 400;
+            sendApiError(res, status, status === 404 ? 'FILE_NOT_FOUND' : 'BAD_REQUEST', String(err?.message || err));
+        }
+    });
+    app.post('/api/projects/:id/export/pdf', async (req, res) => {
+        if (typeof desktopPdfExporter !== 'function') {
+            return sendApiError(res, 501, 'UPSTREAM_UNAVAILABLE', 'desktop PDF export is only available in the desktop runtime');
+        }
+        try {
+            const { fileName, title, deck } = req.body || {};
+            if (typeof fileName !== 'string' || fileName.length === 0) {
+                return sendApiError(res, 400, 'BAD_REQUEST', 'fileName required');
+            }
+            const input = await buildDesktopPdfExportInput({
+                daemonUrl: daemonUrlRef.current,
+                deck: deck === true,
+                fileName,
+                projectId: req.params.id,
+                projectsRoot: PROJECTS_DIR,
+                title: typeof title === 'string' ? title : undefined,
+            });
+            const result = await desktopPdfExporter(input);
+            res.json(result);
+        }
+        catch (err) {
+            const status = err && err.code === 'ENOENT' ? 404 : 400;
+            sendApiError(res, status, status === 404 ? 'FILE_NOT_FOUND' : 'BAD_REQUEST', String(err?.message || err));
+        }
+    });
+    // Export endpoint: serves an HTML body with every same-project
+    // top-level `<link rel=stylesheet>` / `<script src>` inlined.
+    // Counterpart to GET /api/projects/:id/raw/* — that route stays
+    // URL-load (one request per asset; FileViewer's default since
+    // PR #384). This route exists for explicit "Inline top-level
+    // CSS/JS" exports + the screenshot path where the headless browser
+    // fetches the response and renders it.
+    //
+    // Scope is intentionally narrow: only `<link rel=stylesheet>` and
+    // `<script src>` are rewritten. `<img src>`, CSS `url(...)` refs,
+    // `@import`, ES module imports, font sources, and similar remain
+    // external in the response — see the docstring on
+    // `apps/daemon/src/inline-assets.ts` for the full not-rewritten list
+    // and rationale. A fully offline "self-contained" export with image
+    // and font bundling would be a follow-up issue.
+    //
+    // Null-origin (sandboxed iframe srcdoc) callers are intentionally
+    // NOT supported — the only consumers are the daemon UI (same-origin)
+    // and server-side screenshot tooling (no Origin header). The
+    // response also carries `Content-Security-Policy: sandbox
+    // allow-scripts` so top-level browser navigation (no Origin header,
+    // would otherwise pass the daemon middleware) cannot escalate to
+    // daemon-origin privileges through script execution.
+    //
+    // See nexu-io/open-design#368 and the architecture lock at
+    // https://github.com/nexu-io/open-design/issues/368#issuecomment-4366243218.
+    app.get('/api/projects/:id/export/*', async (req, res) => {
+        try {
+            if (!isSafeId(req.params.id)) {
+                return sendApiError(res, 400, 'BAD_REQUEST', 'invalid project id');
+            }
+            const inlineRaw = typeof req.query.inline === 'string' ? req.query.inline.trim().toLowerCase() : '';
+            if (!['1', 'true', 'yes', 'on'].includes(inlineRaw)) {
+                return sendApiError(res, 400, 'BAD_REQUEST', "query parameter 'inline=1' is required");
+            }
+            const project = getProject(db, req.params.id);
+            const relPath = req.params[0];
+            // PR #1312 round-5 (lefarcen P2): stat the owner file BEFORE
+            // readProjectFile so a 100 MiB owner HTML is rejected after a
+            // cheap stat() call, not after a 100 MiB readFile() into memory.
+            // The size check + mime check both run pre-buffer here, mirroring
+            // the sibling-asset stat-then-read contract round 4 already
+            // applied via AssetHandle. Size fires before mime so an oversize
+            // non-HTML file returns 413 (not 415) — that ordering is the
+            // observable Red→Green for this round.
+            //
+            // The helper's ownerBytes check (inline-assets.ts:127-133) stays
+            // as defense-in-depth: it still catches direct in-process callers
+            // that skip the route and any future drift in the size reported
+            // by stat vs the bytes actually returned by readFile.
+            let ownerMeta;
+            try {
+                ownerMeta = await resolveProjectFilePath(PROJECTS_DIR, req.params.id, relPath, project?.metadata);
+            }
+            catch (err) {
+                const status = err && err.code === 'ENOENT' ? 404 : 400;
+                return sendApiError(res, status, status === 404 ? 'FILE_NOT_FOUND' : 'BAD_REQUEST', String(err));
+            }
+            if (ownerMeta.size > MAX_INLINE_OWNER_BYTES) {
+                return sendApiError(res, 413, 'PAYLOAD_TOO_LARGE', `owner html ${ownerMeta.size} bytes exceeds MAX_INLINE_OWNER_BYTES ${MAX_INLINE_OWNER_BYTES}`);
+            }
+            if (!ownerMeta.mime.startsWith('text/html')) {
+                return sendApiError(res, 415, 'UNSUPPORTED_MEDIA_TYPE', 'export endpoint only supports HTML files');
+            }
+            let file;
+            try {
+                file = await readProjectFile(PROJECTS_DIR, req.params.id, relPath, project?.metadata);
+            }
+            catch (err) {
+                const status = err && err.code === 'ENOENT' ? 404 : 400;
+                return sendApiError(res, status, status === 404 ? 'FILE_NOT_FOUND' : 'BAD_REQUEST', String(err));
+            }
+            // PR #1312 round-4 (lefarcen P2): stat first, then read. This
+            // lets the helper short-circuit on maxAssetBytes / maxTotalBytes
+            // BEFORE the buffer is materialized into memory. A 100 MiB
+            // sibling file is rejected after the cheap stat call, not after
+            // a 100 MiB readFile.
+            const fileReader = async (sibling) => {
+                let meta;
+                try {
+                    meta = await resolveProjectFilePath(PROJECTS_DIR, req.params.id, sibling, project?.metadata);
+                }
+                catch {
+                    return null;
+                }
+                return {
+                    size: meta.size,
+                    read: async () => {
+                        try {
+                            const siblingFile = await readProjectFile(PROJECTS_DIR, req.params.id, sibling, project?.metadata);
+                            return siblingFile.buffer.toString('utf8');
+                        }
+                        catch {
+                            return null;
+                        }
+                    },
+                };
+            };
+            const rendered = await inlineRelativeAssets(file.buffer.toString('utf8'), relPath, fileReader);
+            // PR #1312 round-2 (lefarcen P2): top-level browser navigation to
+            // this URL sends no Origin header, so the /api middleware lets it
+            // through. Without a CSP, any JS in the exported document would
+            // run at daemon origin with access to /api/, cookies, localStorage,
+            // etc. `sandbox allow-scripts` treats the response like a sandboxed
+            // iframe with an opaque origin — scripts execute (that's the point
+            // of inlining JS for screenshot tooling), but cannot read cookies,
+            // hit /api/, or escalate to daemon-origin privileges.
+            res.setHeader('Content-Security-Policy', 'sandbox allow-scripts');
+            res.type('text/html').send(rendered);
+        }
+        catch (err) {
+            // PR #1312 round-3 (lefarcen P2): the inliner's cap-enforcement
+            // throws InlineAssetsLimitError when the owner HTML, candidate
+            // count, or assembled output exceeds the module-level limits.
+            // Map every such throw to a 413 PAYLOAD_TOO_LARGE envelope so
+            // callers see a structured error rather than a generic 400.
+            if (err instanceof InlineAssetsLimitError || err?.name === 'InlineAssetsLimitError') {
+                return sendApiError(res, 413, 'PAYLOAD_TOO_LARGE', String(err));
+            }
+            sendApiError(res, 400, 'BAD_REQUEST', String(err));
+        }
+    });
+}
+export function registerFinalizeRoutes(app, ctx) {
+    const { db } = ctx;
+    const { sendApiError } = ctx.http;
+    const { PROJECTS_DIR, DESIGN_SYSTEMS_DIR } = ctx.paths;
+    const { getProject } = ctx.projectStore;
+    const { isSafeId, validateExternalApiBaseUrl } = ctx.validation;
+    const { finalizeDesignPackage, FinalizePackageLockedError, FinalizeUpstreamError, redactSecrets } = ctx.finalize;
+    app.post('/api/projects/:id/finalize/anthropic', async (req, res) => {
+        const { apiKey, baseUrl, model, maxTokens } = req.body || {};
+        try {
+            // Centralized path-traversal guard. `isSafeId` (apps/daemon/src/projects.ts)
+            // rejects pure-dot ids (`.`, `..`, etc.) which would otherwise pass
+            // the char-class regex and resolve to the parent directory under
+            // path.join. Express decodes percent-encoded `%2e%2e` to `..` before
+            // we see it, so this check covers both URL-supplied and stored-row
+            // attack vectors.
+            if (!isSafeId(req.params.id)) {
+                return sendApiError(res, 400, 'BAD_REQUEST', 'invalid project id');
+            }
+            if (typeof apiKey !== 'string' || !apiKey.trim()) {
+                return sendApiError(res, 400, 'BAD_REQUEST', 'apiKey is required');
+            }
+            if (typeof model !== 'string' || !model.trim()) {
+                return sendApiError(res, 400, 'BAD_REQUEST', 'model is required');
+            }
+            if (baseUrl !== undefined) {
+                if (typeof baseUrl !== 'string' || !baseUrl.trim()) {
+                    return sendApiError(res, 400, 'BAD_REQUEST', 'baseUrl must be a non-empty string when provided');
+                }
+                const validated = validateExternalApiBaseUrl(baseUrl);
+                if (validated.error) {
+                    return sendApiError(res, validated.forbidden ? 403 : 400, validated.forbidden ? 'FORBIDDEN' : 'BAD_REQUEST', validated.error);
+                }
+            }
+            if (maxTokens !== undefined && (typeof maxTokens !== 'number' || maxTokens <= 0)) {
+                return sendApiError(res, 400, 'BAD_REQUEST', 'maxTokens must be a positive number when provided');
+            }
+            const project = getProject(db, req.params.id);
+            if (!project) {
+                return sendApiError(res, 404, 'PROJECT_NOT_FOUND', 'project not found');
+            }
+            const finalizeAbort = new AbortController();
+            const abortFromRequest = () => {
+                if (!finalizeAbort.signal.aborted)
+                    finalizeAbort.abort();
+            };
+            res.on('close', abortFromRequest);
+            let result;
+            try {
+                result = await finalizeDesignPackage(db, PROJECTS_DIR, DESIGN_SYSTEMS_DIR, req.params.id, { apiKey, baseUrl, model, maxTokens, signal: finalizeAbort.signal });
+            }
+            finally {
+                res.off('close', abortFromRequest);
+            }
+            res.json(result);
+        }
+        catch (err) {
+            // Concurrent finalize - the lockfile was already held by another
+            // call. Caller can retry after a short wait; not a client error.
+            // Maps to the shared CONFLICT code per @lefarcen P2 on PR #832.
+            if (err instanceof FinalizePackageLockedError) {
+                return sendApiError(res, 409, 'CONFLICT', err.message);
+            }
+            // Upstream Anthropic error - status-aware mapping using shared
+            // ApiErrorCode values. Run the raw upstream body through
+            // redactSecrets so the API key cannot leak even if Anthropic
+            // echoes the inbound headers. Codes per @lefarcen P2 on PR #832:
+            // 401 -> UNAUTHORIZED, 429 -> RATE_LIMITED, others -> UPSTREAM_UNAVAILABLE.
+            if (err instanceof FinalizeUpstreamError) {
+                const safeDetails = redactSecrets(err.rawText || '', [apiKey]);
+                const init = safeDetails ? { details: safeDetails } : {};
+                if (err.status === 401) {
+                    return sendApiError(res, 401, 'UNAUTHORIZED', err.message, init);
+                }
+                if (err.status === 429) {
+                    return sendApiError(res, 429, 'RATE_LIMITED', err.message, init);
+                }
+                return sendApiError(res, 502, 'UPSTREAM_UNAVAILABLE', err.message, init);
+            }
+            // The blocking call hit our 120s AbortController timeout - or the
+            // caller passed an already-aborted signal. Either way, surface as
+            // 503 with the shared UPSTREAM_UNAVAILABLE code (no dedicated
+            // TIMEOUT code in the contracts ApiErrorCode union).
+            const errName = err && typeof err === 'object' && 'name' in err ? err.name : '';
+            if (errName === 'AbortError') {
+                return sendApiError(res, 503, 'UPSTREAM_UNAVAILABLE', 'finalize timed out');
+            }
+            // Unexpected runtime failure (file IO, db access, prompt build).
+            // Log via console.error per the daemon convention; client sees a
+            // generic 500 with the shared INTERNAL_ERROR code. Run the message
+            // through redactSecrets defensively.
+            console.error('[finalize/anthropic]', err);
+            const safeMsg = redactSecrets(String(err?.message || err), [apiKey]);
+            return sendApiError(res, 500, 'INTERNAL_ERROR', safeMsg);
+        }
+    });
+}
+//# sourceMappingURL=import-export-routes.js.map

package/dist/__w3kits/webcontainer-runtime/apps/daemon/dist/import-export-routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"import-export-routes.js","sourceRoot":"","sources":["../src/import-export-routes.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,sBAAsB,EACtB,sBAAsB,EACtB,oBAAoB,GAErB,MAAM,oBAAoB,CAAC;AAI5B,MAAM,UAAU,oBAAoB,CAAC,GAAY,EAAE,GAA6B;IAC9E,MAAM,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC;IACnB,MAAM,EAAE,YAAY,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;IAClC,MAAM,EAAE,YAAY,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC;IACrC,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;IAC9B,MAAM,EAAE,QAAQ,EAAE,GAAG,GAAG,CAAC,GAAG,CAAC;IAC7B,MAAM,EAAE,YAAY,EAAE,0BAA0B,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC;IAC/D,MAAM,EAAE,qBAAqB,EAAE,UAAU,EAAE,eAAe,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC;IAC3E,MAAM,EACJ,oBAAoB,EACpB,iBAAiB,EACjB,uBAAuB,EACvB,wBAAwB,EACxB,wBAAwB,GACzB,GAAG,GAAG,CAAC,IAAI,CAAC;IACb,MAAM,EAAE,aAAa,EAAE,GAAG,GAAG,CAAC,YAAY,CAAC;IAC3C,MAAM,EAAE,kBAAkB,EAAE,GAAG,GAAG,CAAC,aAAa,CAAC;IACjD,MAAM,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC,YAAY,CAAC;IACrC,GAAG,CAAC,IAAI,CACN,2BAA2B,EAC3B,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,EAC3B,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACjB,IAAI,CAAC;YACH,IAAI,CAAC,GAAG,CAAC,IAAI;gBACX,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;YAC9D,MAAM,YAAY,GAChB,GAAG,CAAC,IAAI,CAAC,YAAY,IAAI,0BAA0B,CAAC;YACtD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;gBAClC,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;gBAClD,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC,CAAC;YACjE,CAAC;YACD,MAAM,EAAE,GAAG,QAAQ,EAAE,CAAC;YACtB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACvB,MAAM,QAAQ,GACZ,YAAY,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,sBAAsB,CAAC;YACvE,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAC1C,GAAG,CAAC,IAAI,CAAC,IAAI,EACb,UAAU,CAAC,YAAY,EAAE,EAAE,CAAC,CAC7B,CAAC;YACF,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YAElD,MAAM,OAAO,GAAG,aAAa,CAAC,EAAE,EAAE;gBAChC,EAAE;gBACF,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,IAAI;gBACb,cAAc,EAAE,IAAI;gBACpB,aAAa,EAAE,oCAAoC,YAAY,sBAAsB,QAAQ,CAAC,SAAS,GAAG;gBAC1G,QAAQ,EAAE;oBACR,IAAI,EAAE,WAAW;oBACjB,YAAY,EAAE,eAAe;oBAC7B,SAAS,EAAE,QAAQ,CAAC,SAAS;oBAC7B,cAAc,EAAE,YAAY;iBAC7B;gBACD,SAAS,EAAE,GAAG;gBACd,SAAS,EAAE,GAAG;aACf,CAAC,CAAC;YACH,MAAM,GAAG,GAAG,QAAQ,EAAE,CAAC;YACvB,kBAAkB,CAAC,EAAE,EAAE;gBACrB,EAAE,EAAE,GAAG;gBACP,SAAS,EAAE,EAAE;gBACb,KAAK,EAAE,gCAAgC;gBACvC,SAAS,EAAE,GAAG;gBACd,SAAS,EAAE,GAAG;aACf,CAAC,CAAC;YACH,OAAO,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC;YAC1D,GAAG,CAAC,IAAI,CAAC;gBACP,OAAO;gBACP,cAAc,EAAE,GAAG;gBACnB,SAAS,EAAE,QAAQ,CAAC,SAAS;gBAC7B,KAAK,EAAE,QAAQ,CAAC,KAAK;aACtB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,IAAI,GAAG,CAAC,IAAI,EAAE,IAAI;gBAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACtE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC,CACF,CAAC;IAEF,wEAAwE;IACxE,yEAAyE;IACzE,+DAA+D;IAC/D,uEAAuE;IACvE,qDAAqD;IACrD,GAAG,CAAC,IAAI,CAAC,oBAAoB,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAChD,IAAI,CAAC;YACH,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,cAAc,EAAE,GAAG,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;YAClE,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;gBACnD,OAAO,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,aAAa,EAAE,kBAAkB,CAAC,CAAC;YACnE,CAAC;YACD,IAAI,mBAAmB,GAAG,KAAK,CAAC;YAChC,IAAI,uBAAuB,EAAE,EAAE,CAAC;gBAC9B,MAAM,MAAM,GAAG,iBAAiB,EAAE,CAAC;gBACnC,IAAI,MAAM,IAAI,IAAI,EAAE,CAAC;oBACnB,OAAO,YAAY,CACjB,GAAG,EACH,GAAG,EACH,sBAAsB,EACtB,qDAAqD,EACrD;wBACE,OAAO,EAAE,EAAE,IAAI,EAAE,kDAAkD,EAAE;wBACrE,SAAS,EAAE,IAAI;qBAChB,CACF,CAAC;gBACJ,CAAC;gBACD,MAAM,WAAW,GAAG,GAAG,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;gBACzD,MAAM,KAAK,GAAG,OAAO,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBACvB,wBAAwB,CAAC,GAAG,CAAC,CAAC;gBAC9B,MAAM,YAAY,GAAG,wBAAwB,CAC3C,MAAM,EACN,OAAO,EACP,KAAK,EACL,GAAG,EACH,oBAAoB,CACrB,CAAC;gBACF,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC;oBACrB,OAAO,YAAY,CACjB,GAAG,EACH,GAAG,EACH,WAAW,EACX,+BAA+B,EAC/B,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,YAAY,CAAC,MAAM,EAAE,EAAE,CAC7C,CAAC;gBACJ,CAAC;gBACD,oBAAoB,CAAC,GAAG,CAAC,YAAY,CAAC,KAAK,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC;gBAC/D,mBAAmB,GAAG,IAAI,CAAC;YAC7B,CAAC;YACD,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;YACpC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC;gBACnD,OAAO,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,aAAa,EAAE,0BAA0B,CAAC,CAAC;YAC3E,CAAC;YACD,kEAAkE;YAClE,oEAAoE;YACpE,mEAAmE;YACnE,kEAAkE;YAClE,iEAAiE;YACjE,oEAAoE;YACpE,IAAI,cAAsB,CAAC;YAC3B,IAAI,CAAC;gBACH,cAAc,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;YAC5D,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,aAAa,EAAE,kBAAkB,CAAC,CAAC;YACnE,CAAC;YACD,gEAAgE;YAChE,0DAA0D;YAC1D,IAAI,OAAO,CAAC;YACZ,IAAI,CAAC;gBACH,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;YACpD,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,aAAa,EAAE,kBAAkB,CAAC,CAAC;YACnE,CAAC;YACD,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC;gBAC3B,OAAO,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,aAAa,EAAE,0BAA0B,CAAC,CAAC;YAC3E,CAAC;YACD,IAAI,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;gBACvD,OAAO,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,aAAa,EAAE,mCAAmC,CAAC,CAAC;YACpF,CAAC;YACD,qEAAqE;YACrE,oEAAoE;YACpE,qEAAqE;YACrE,mEAAmE;YACnE,oEAAoE;YACpE,IACE,cAAc,KAAK,0BAA0B;gBAC7C,cAAc,CAAC,UAAU,CAAC,0BAA0B,GAAG,IAAI,CAAC,GAAG,CAAC,EAChE,CAAC;gBACD,OAAO,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,aAAa,EAAE,kCAAkC,CAAC,CAAC;YACnF,CAAC;YAED,MAAM,EAAE,GAAG,QAAQ,EAAE,CAAC;YACtB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACvB,MAAM,WAAW,GACf,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE;gBACrC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE;gBACb,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;YACpC,MAAM,SAAS,GAAG,MAAM,eAAe,CAAC,cAAc,CAAC,CAAC;YAExD,MAAM,OAAO,GAAG,aAAa,CAAC,EAAE,EAAE;gBAChC,EAAE;gBACF,IAAI,EAAE,WAAW;gBACjB,OAAO,EAAE,OAAO,IAAI,IAAI;gBACxB,cAAc,EAAE,cAAc,IAAI,IAAI;gBACtC,aAAa,EAAE,IAAI;gBACnB,QAAQ,EAAE;oBACR,IAAI,EAAE,WAAW;oBACjB,OAAO,EAAE,cAAc;oBACvB,YAAY,EAAE,QAAQ;oBACtB,SAAS;oBACT,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,IAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACrE;gBACD,SAAS,EAAE,GAAG;gBACd,SAAS,EAAE,GAAG;aACf,CAAC,CAAC;YAEH,MAAM,GAAG,GAAG,QAAQ,EAAE,CAAC;YACvB,kBAAkB,CAAC,EAAE,EAAE;gBACrB,EAAE,EAAE,GAAG;gBACP,SAAS,EAAE,EAAE;gBACb,KAAK,EAAE,iBAAiB,WAAW,EAAE;gBACrC,SAAS,EAAE,GAAG;gBACd,SAAS,EAAE,GAAG;aACf,CAAC,CAAC;YACH,IAAI,SAAS;gBAAE,OAAO,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC,CAAC;YACvD,oEAAoE;YACpE,MAAM,IAAI,GAAG,EAAE,OAAO,EAAE,cAAc,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC;YACzD,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjB,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,aAAa,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QACrD,CAAC;IACH,CAAC,CAAC,CAAC;AAEL,CAAC;AAID,MAAM,UAAU,2BAA2B,CAAC,GAAY,EAAE,GAAoC;IAC5F,MAAM,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC;IACnB,MAAM,EAAE,YAAY,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;IAClC,MAAM,EAAE,YAAY,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC;IACnC,MAAM,EAAE,UAAU,EAAE,GAAG,GAAG,CAAC,YAAY,CAAC;IACxC,MAAM,EAAE,eAAe,EAAE,sBAAsB,EAAE,GAAG,GAAG,CAAC,YAAY,CAAC;IACrE,MAAM,EAAE,QAAQ,EAAE,GAAG,GAAG,CAAC,UAAU,CAAC;IACpC,MAAM,EACJ,mBAAmB,EACnB,iBAAiB,EACjB,0BAA0B,EAC1B,kBAAkB,EAClB,YAAY,EACZ,uBAAuB,GACxB,GAAG,GAAG,CAAC,OAAO,CAAC;IAChB,wEAAwE;IACxE,yEAAyE;IACzE,uEAAuE;IACvE,sEAAsE;IACtE,mCAAmC;IACnC,GAAG,CAAC,GAAG,CAAC,2BAA2B,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACtD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,OAAO,GAAG,CAAC,KAAK,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YACvE,MAAM,OAAO,GAAG,UAAU,CAAC,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC9C,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,mBAAmB,CACpD,YAAY,EACZ,GAAG,CAAC,MAAM,CAAC,EAAE,EACb,IAAI,EACJ,OAAO,EAAE,QAAQ,CAClB,CAAC;YACF,MAAM,YAAY,GAAG,OAAO,EAAE,IAAI,IAAI,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YACpD,MAAM,QAAQ,GAAG,uBAAuB,CAAC,QAAQ,IAAI,YAAY,CAAC,IAAI,SAAS,CAAC;YAChF,MAAM,QAAQ,GAAG,GAAG,QAAQ,MAAM,CAAC;YACnC,sEAAsE;YACtE,kEAAkE;YAClE,mEAAmE;YACnE,MAAM,aAAa,GACjB,QAAQ,CAAC,OAAO,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,aAAa,CAAC;YAC7E,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,iBAAiB,CAAC,CAAC;YACjD,GAAG,CAAC,SAAS,CACX,qBAAqB,EACrB,yBAAyB,aAAa,uBAAuB,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAC5F,CAAC;YACF,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACnB,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,MAAM,IAAI,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC;YAC7B,MAAM,MAAM,GAAG,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;YACnE,YAAY,CACV,GAAG,EACH,MAAM,EACN,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,aAAa,EACjD,MAAM,CAAC,GAAG,EAAE,OAAO,IAAI,GAAG,CAAC,CAC5B,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,wEAAwE;IACxE,qEAAqE;IACrE,GAAG,CAAC,IAAI,CAAC,iCAAiC,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAC7D,IAAI,CAAC;YACH,MAAM,EAAE,KAAK,EAAE,GAAG,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;YACjC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAChD,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,aAAa,EAAE,iCAAiC,CAAC,CAAC;gBACzE,OAAO;YACT,CAAC;YACD,MAAM,OAAO,GAAG,UAAU,CAAC,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC9C,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,iBAAiB,CACxC,YAAY,EACZ,GAAG,CAAC,MAAM,CAAC,EAAE,EACb,KAAK,EACL,OAAO,EAAE,QAAQ,CAClB,CAAC;YACF,MAAM,QAAQ,GAAG,uBAAuB,CAAC,OAAO,EAAE,IAAI,IAAI,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,SAAS,CAAC;YACtF,MAAM,QAAQ,GAAG,GAAG,QAAQ,MAAM,CAAC;YACnC,MAAM,aAAa,GACjB,QAAQ,CAAC,OAAO,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,aAAa,CAAC;YAC7E,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,iBAAiB,CAAC,CAAC;YACjD,GAAG,CAAC,SAAS,CACX,qBAAqB,EACrB,yBAAyB,aAAa,uBAAuB,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAC5F,CAAC;YACF,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACnB,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,MAAM,IAAI,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC;YAC7B,MAAM,MAAM,GAAG,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;YAC7C,YAAY,CACV,GAAG,EACH,MAAM,EACN,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,aAAa,EACjD,MAAM,CAAC,GAAG,EAAE,OAAO,IAAI,GAAG,CAAC,CAC5B,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,8BAA8B,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAC1D,IAAI,OAAO,kBAAkB,KAAK,UAAU,EAAE,CAAC;YAC7C,OAAO,YAAY,CACjB,GAAG,EACH,GAAG,EACH,sBAAsB,EACtB,6DAA6D,CAC9D,CAAC;QACJ,CAAC;QACD,IAAI,CAAC;YACH,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;YACjD,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC1D,OAAO,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,aAAa,EAAE,mBAAmB,CAAC,CAAC;YACpE,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,0BAA0B,CAAC;gBAC7C,SAAS,EAAE,YAAY,CAAC,OAAO;gBAC/B,IAAI,EAAE,IAAI,KAAK,IAAI;gBACnB,QAAQ;gBACR,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE;gBACxB,YAAY,EAAE,YAAY;gBAC1B,KAAK,EAAE,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;aACrD,CAAC,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,KAAK,CAAC,CAAC;YAC/C,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACnB,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,MAAM,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;YACxD,YAAY,CACV,GAAG,EACH,MAAM,EACN,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,aAAa,EACjD,MAAM,CAAC,GAAG,EAAE,OAAO,IAAI,GAAG,CAAC,CAC5B,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,+DAA+D;IAC/D,8DAA8D;IAC9D,gEAAgE;IAChE,8DAA8D;IAC9D,6DAA6D;IAC7D,mEAAmE;IACnE,uCAAuC;IACvC,EAAE;IACF,kEAAkE;IAClE,kEAAkE;IAClE,iEAAiE;IACjE,kDAAkD;IAClD,qEAAqE;IACrE,oEAAoE;IACpE,gDAAgD;IAChD,EAAE;IACF,kEAAkE;IAClE,qEAAqE;IACrE,6DAA6D;IAC7D,0DAA0D;IAC1D,oEAAoE;IACpE,iEAAiE;IACjE,qDAAqD;IACrD,EAAE;IACF,2DAA2D;IAC3D,6EAA6E;IAC7E,GAAG,CAAC,GAAG,CAAC,4BAA4B,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACvD,IAAI,CAAC;YACH,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;gBAC7B,OAAO,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,aAAa,EAAE,oBAAoB,CAAC,CAAC;YACrE,CAAC;YAED,MAAM,SAAS,GACb,OAAO,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpF,IAAI,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;gBACpD,OAAO,YAAY,CACjB,GAAG,EACH,GAAG,EACH,aAAa,EACb,wCAAwC,CACzC,CAAC;YACJ,CAAC;YAED,MAAM,OAAO,GAAG,UAAU,CAAC,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC9C,MAAM,OAAO,GAAI,GAAG,CAAC,MAAc,CAAC,CAAC,CAAC,CAAC;YAEvC,6DAA6D;YAC7D,8DAA8D;YAC9D,iEAAiE;YACjE,kEAAkE;YAClE,4DAA4D;YAC5D,iEAAiE;YACjE,6DAA6D;YAC7D,uCAAuC;YACvC,EAAE;YACF,iEAAiE;YACjE,kEAAkE;YAClE,gEAAgE;YAChE,sDAAsD;YACtD,IAAI,SAAS,CAAC;YACd,IAAI,CAAC;gBACH,SAAS,GAAG,MAAM,sBAAsB,CACtC,YAAY,EACZ,GAAG,CAAC,MAAM,CAAC,EAAE,EACb,OAAO,EACP,OAAO,EAAE,QAAQ,CAClB,CAAC;YACJ,CAAC;YAAC,OAAO,GAAQ,EAAE,CAAC;gBAClB,MAAM,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;gBACxD,OAAO,YAAY,CACjB,GAAG,EACH,MAAM,EACN,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,aAAa,EACjD,MAAM,CAAC,GAAG,CAAC,CACZ,CAAC;YACJ,CAAC;YAED,IAAI,SAAS,CAAC,IAAI,GAAG,sBAAsB,EAAE,CAAC;gBAC5C,OAAO,YAAY,CACjB,GAAG,EACH,GAAG,EACH,mBAAmB,EACnB,cAAc,SAAS,CAAC,IAAI,yCAAyC,sBAAsB,EAAE,CAC9F,CAAC;YACJ,CAAC;YAED,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC5C,OAAO,YAAY,CACjB,GAAG,EACH,GAAG,EACH,wBAAwB,EACxB,0CAA0C,CAC3C,CAAC;YACJ,CAAC;YAED,IAAI,IAAI,CAAC;YACT,IAAI,CAAC;gBACH,IAAI,GAAG,MAAM,eAAe,CAAC,YAAY,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;YACxF,CAAC;YAAC,OAAO,GAAQ,EAAE,CAAC;gBAClB,MAAM,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;gBACxD,OAAO,YAAY,CACjB,GAAG,EACH,MAAM,EACN,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,aAAa,EACjD,MAAM,CAAC,GAAG,CAAC,CACZ,CAAC;YACJ,CAAC;YAED,8DAA8D;YAC9D,iEAAiE;YACjE,2DAA2D;YAC3D,gEAAgE;YAChE,sBAAsB;YACtB,MAAM,UAAU,GAAsB,KAAK,EAAE,OAAO,EAAE,EAAE;gBACtD,IAAI,IAAI,CAAC;gBACT,IAAI,CAAC;oBACH,IAAI,GAAG,MAAM,sBAAsB,CACjC,YAAY,EACZ,GAAG,CAAC,MAAM,CAAC,EAAE,EACb,OAAO,EACP,OAAO,EAAE,QAAQ,CAClB,CAAC;gBACJ,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,OAAO;oBACL,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,IAAI,EAAE,KAAK,IAAI,EAAE;wBACf,IAAI,CAAC;4BACH,MAAM,WAAW,GAAG,MAAM,eAAe,CACvC,YAAY,EACZ,GAAG,CAAC,MAAM,CAAC,EAAE,EACb,OAAO,EACP,OAAO,EAAE,QAAQ,CAClB,CAAC;4BACF,OAAO,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;wBAC7C,CAAC;wBAAC,MAAM,CAAC;4BACP,OAAO,IAAI,CAAC;wBACd,CAAC;oBACH,CAAC;iBACF,CAAC;YACJ,CAAC,CAAC;YAEF,MAAM,QAAQ,GAAG,MAAM,oBAAoB,CACzC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAC5B,OAAO,EACP,UAAU,CACX,CAAC;YACF,kEAAkE;YAClE,kEAAkE;YAClE,gEAAgE;YAChE,oEAAoE;YACpE,oEAAoE;YACpE,mEAAmE;YACnE,mEAAmE;YACnE,sDAAsD;YACtD,GAAG,CAAC,SAAS,CAAC,yBAAyB,EAAE,uBAAuB,CAAC,CAAC;YAClE,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACvC,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,gEAAgE;YAChE,+DAA+D;YAC/D,8DAA8D;YAC9D,8DAA8D;YAC9D,4DAA4D;YAC5D,IAAI,GAAG,YAAY,sBAAsB,IAAI,GAAG,EAAE,IAAI,KAAK,wBAAwB,EAAE,CAAC;gBACpF,OAAO,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,mBAAmB,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YAClE,CAAC;YACD,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,aAAa,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QACrD,CAAC;IACH,CAAC,CAAC,CAAC;AAEL,CAAC;AAID,MAAM,UAAU,sBAAsB,CAAC,GAAY,EAAE,GAA+B;IAClF,MAAM,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC;IACnB,MAAM,EAAE,YAAY,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;IAClC,MAAM,EAAE,YAAY,EAAE,kBAAkB,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC;IACvD,MAAM,EAAE,UAAU,EAAE,GAAG,GAAG,CAAC,YAAY,CAAC;IACxC,MAAM,EAAE,QAAQ,EAAE,0BAA0B,EAAE,GAAG,GAAG,CAAC,UAAU,CAAC;IAChE,MAAM,EAAE,qBAAqB,EAAE,0BAA0B,EAAE,qBAAqB,EAAE,aAAa,EAAE,GAAG,GAAG,CAAC,QAAQ,CAAC;IACjH,GAAG,CAAC,IAAI,CAAC,sCAAsC,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAClE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;QAC7D,IAAI,CAAC;YACH,6EAA6E;YAC7E,oEAAoE;YACpE,iEAAiE;YACjE,qEAAqE;YACrE,mEAAmE;YACnE,kBAAkB;YAClB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;gBAC7B,OAAO,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,aAAa,EAAE,oBAAoB,CAAC,CAAC;YACrE,CAAC;YAED,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;gBACjD,OAAO,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,aAAa,EAAE,oBAAoB,CAAC,CAAC;YACrE,CAAC;YACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;gBAC/C,OAAO,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,aAAa,EAAE,mBAAmB,CAAC,CAAC;YACpE,CAAC;YACD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;oBACnD,OAAO,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,aAAa,EAAE,kDAAkD,CAAC,CAAC;gBACnG,CAAC;gBACD,MAAM,SAAS,GAAG,0BAA0B,CAAC,OAAO,CAAC,CAAC;gBACtD,IAAI,SAAS,CAAC,KAAK,EAAE,CAAC;oBACpB,OAAO,YAAY,CACjB,GAAG,EACH,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAC/B,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,aAAa,EACjD,SAAS,CAAC,KAAK,CAChB,CAAC;gBACJ,CAAC;YACH,CAAC;YACD,IAAI,SAAS,KAAK,SAAS,IAAI,CAAC,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,IAAI,CAAC,CAAC,EAAE,CAAC;gBACjF,OAAO,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,aAAa,EAAE,mDAAmD,CAAC,CAAC;YACpG,CAAC;YAED,MAAM,OAAO,GAAG,UAAU,CAAC,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC9C,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,mBAAmB,EAAE,mBAAmB,CAAC,CAAC;YAC1E,CAAC;YAED,MAAM,aAAa,GAAG,IAAI,eAAe,EAAE,CAAC;YAC5C,MAAM,gBAAgB,GAAG,GAAS,EAAE;gBAClC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,OAAO;oBAAE,aAAa,CAAC,KAAK,EAAE,CAAC;YAC3D,CAAC,CAAC;YACF,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;YAElC,IAAI,MAAM,CAAC;YACX,IAAI,CAAC;gBACH,MAAM,GAAG,MAAM,qBAAqB,CAClC,EAAE,EACF,YAAY,EACZ,kBAAkB,EAClB,GAAG,CAAC,MAAM,CAAC,EAAE,EACb,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,aAAa,CAAC,MAAM,EAAE,CACpE,CAAC;YACJ,CAAC;oBAAS,CAAC;gBACT,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;YACrC,CAAC;YACD,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACnB,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,iEAAiE;YACjE,iEAAiE;YACjE,gEAAgE;YAChE,IAAI,GAAG,YAAY,0BAA0B,EAAE,CAAC;gBAC9C,OAAO,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;YACzD,CAAC;YAED,+DAA+D;YAC/D,yDAAyD;YACzD,6DAA6D;YAC7D,iEAAiE;YACjE,4EAA4E;YAC5E,IAAI,GAAG,YAAY,qBAAqB,EAAE,CAAC;gBACzC,MAAM,WAAW,GAAG,aAAa,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;gBAC/D,MAAM,IAAI,GAAG,WAAW,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;oBACvB,OAAO,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,cAAc,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;gBACnE,CAAC;gBACD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;oBACvB,OAAO,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,cAAc,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;gBACnE,CAAC;gBACD,OAAO,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,sBAAsB,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YAC3E,CAAC;YAED,kEAAkE;YAClE,kEAAkE;YAClE,8DAA8D;YAC9D,qDAAqD;YACrD,MAAM,OAAO,GACX,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,MAAM,IAAI,GAAG,CAAC,CAAC,CAAE,GAA0B,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1F,IAAI,OAAO,KAAK,YAAY,EAAE,CAAC;gBAC7B,OAAO,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,sBAAsB,EAAE,oBAAoB,CAAC,CAAC;YAC9E,CAAC;YAED,iEAAiE;YACjE,iEAAiE;YACjE,mEAAmE;YACnE,qCAAqC;YACrC,OAAO,CAAC,KAAK,CAAC,sBAAsB,EAAE,GAAG,CAAC,CAAC;YAC3C,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,GAAG,EAAE,OAAO,IAAI,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;YACrE,OAAO,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,gBAAgB,EAAE,OAAO,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC,CAAC,CAAC;AAEL,CAAC"}

package/dist/__w3kits/webcontainer-runtime/apps/daemon/dist/inline-assets.d.ts

@@ -0,0 +1,50 @@
+/**
+ * A handle to a project-relative asset. Decoupled into `size` (cheap;
+ * sourced from `stat` or equivalent) and `read()` (full materialization)
+ * so the helper can short-circuit on `maxAssetBytes` / `maxTotalBytes`
+ * BEFORE the asset is buffered into memory. PR #1312 round-4 (lefarcen
+ * P2): the round-3 caps fired only after every candidate had already
+ * been fully read + decoded, so 500 assets at 5 MiB each could
+ * materialize 2.5 GiB before the 413. The size-then-read contract
+ * lets us cap pre-buffer.
+ */
+export interface AssetHandle {
+    readonly size: number;
+    read(): Promise<string | null>;
+}
+export interface InlineAssetReader {
+    (relPath: string): Promise<AssetHandle | null>;
+}
+export interface InlineOptions {
+    /** Max byte length of the owner HTML; exceeds → throw InlineAssetsLimitError("owner"). */
+    maxOwnerBytes?: number;
+    /** Max byte length of a single inlined asset body; exceeds → tag stays as URL ref. */
+    maxAssetBytes?: number;
+    /** Max number of `<link>`/`<script>` matches in the owner HTML; exceeds → throw "candidates". */
+    maxCandidates?: number;
+    /** Max byte length of the assembled output; exceeds → throw InlineAssetsLimitError("total"). */
+    maxTotalBytes?: number;
+    /** Max concurrent fileReader invocations; defaults to MAX_INLINE_READ_CONCURRENCY. */
+    maxReadConcurrency?: number;
+}
+export declare const MAX_INLINE_OWNER_BYTES: number;
+export declare const MAX_INLINE_ASSET_BYTES: number;
+export declare const MAX_INLINE_CANDIDATES = 500;
+export declare const MAX_INLINE_TOTAL_BYTES: number;
+export declare const MAX_INLINE_READ_CONCURRENCY = 8;
+/**
+ * Thrown by `inlineRelativeAssets` when a configured cap is exceeded.
+ * The route handler maps every `InlineAssetsLimitError` to a 413
+ * `PAYLOAD_TOO_LARGE` envelope; the `limit` field identifies which
+ * cap fired so logs/clients can disambiguate.
+ */
+export declare class InlineAssetsLimitError extends Error {
+    readonly limit: 'owner' | 'asset' | 'candidates' | 'total';
+    constructor(message: string, limit: 'owner' | 'asset' | 'candidates' | 'total');
+}
+export declare function inlineRelativeAssets(html: string, ownerFileName: string, fileReader: InlineAssetReader, opts?: InlineOptions): Promise<string>;
+export declare function baseDirFor(fileName: string): string;
+export declare function resolveProjectRelativePath(ownerFileName: string, assetRef: string): string | null;
+export declare function readHtmlAttr(tag: string, name: string): string | null;
+export declare function hasBooleanHtmlAttr(tag: string, name: string): boolean;
+export declare function escapeHtmlAttr(value: string): string;