agent-tower 0.7.4 → 0.7.5-beta.5

package/dist/routes/__tests__/previews.test.js

@@ -1,128 +1,243 @@
 import { describe, expect, it } from 'vitest';
-import { PREVIEW_SANDBOX_CSP, previewCorsHeaders, proxyRequestHeaders, proxyResponseHeaders, rewriteLocationHeader, rewritePreviewBody, rewriteSetCookieHeader, } from '../previews.js';
+import { buildPreviewBootstrapPage, buildPreviewBridgeScript, buildPreviewServiceWorkerScript, injectPreviewBridge, PREVIEW_BASE_PATH_HEADER, PREVIEW_BOOT_PARAM, PREVIEW_DESTINATION_HEADER, PREVIEW_MODE_PARAM, PREVIEW_SERVICE_WORKER_HEADER, PREVIEW_TARGET_HEADER, } from '../../services/preview-bridge.js';
+import { PREVIEW_CONTEXT_COOKIE_NAME } from '../../services/preview-cookies.js';
+import { classifyPreviewRequest, PREVIEW_SANDBOX_CSP, proxyRequestHeaders, proxyResponseHeaders, rewriteLocationHeader, rewritePlainModeBody, shouldServeBootstrap, stripInternalQueryParams, } from '../../services/preview-proxy.js';
+import { forceSameOriginPreview, sameOriginPreviewSession } from '../previews.js';
 import { buildPreviewPathPrefix, parsePreviewPath } from '../../utils/preview-path.js';
-describe('rewritePreviewBody', () => {
-    const workspaceId = 'workspace-1';
-    const prefix = `/view/${workspaceId}`;
-    const previewToken = 'pv1.d29ya3NwYWNlLTE.123.nonce.signature';
-    const tokenPrefix = `/view/${workspaceId}/__agent_tower_preview/${previewToken}`;
-    it('rewrites SPA router basename defaults without touching internal root path comparisons', () => {
-        const body = [
-            'function stripBasename(pathname, basename) {',
-            '  if (basename === "/") return pathname;',
-            '  return pathname;',
-            '}',
-            'function BrowserRouter({ basename = "/" }) {',
-            '  return basename;',
-            '}',
-            'function Router({ basename: baseName = "/" }) {',
-            '  return baseName;',
-            '}',
-            'function MinifiedRouter({basename:a="/"}){',
-            '  return a;',
-            '}',
-            'let p=a.basename||"/";',
-            'let ye=a.basename || "/";',
-            'let fallback=a.basename??"/";',
-            'let spaced=a.basename ?? "/";',
-            'let root="/";',
-        ].join('\n');
-        const rewritten = rewritePreviewBody(body, workspaceId, 'application/javascript');
-        expect(rewritten).toContain('basename === "/"');
-        expect(rewritten).toContain(`basename = "${prefix}"`);
-        expect(rewritten).toContain(`basename: baseName = "${prefix}"`);
-        expect(rewritten).toContain(`basename:a="${prefix}"`);
-        expect(rewritten).toContain(`p=a.basename||"${prefix}"`);
-        expect(rewritten).toContain(`ye=a.basename || "${prefix}"`);
-        expect(rewritten).toContain(`fallback=a.basename??"${prefix}"`);
-        expect(rewritten).toContain(`spaced=a.basename ?? "${prefix}"`);
-        expect(rewritten).toContain('root="/"');
-        expect(rewritten).not.toContain(`${prefix}${prefix}`);
-    });
-    it('does not rewrite JavaScript endpoint fragments that are joined to an API base URL', () => {
-        const body = 'const API_BASE_URL = "/api"; fetch(`${API_BASE_URL}${"/app-settings"}`);';
-        const rewritten = rewritePreviewBody(body, workspaceId, 'application/javascript');
-        expect(rewritten).toContain(`"${prefix}/api"`);
-        expect(rewritten).toContain('"/app-settings"');
-        expect(rewritten).not.toContain(`/api${prefix}/app-settings`);
-    });
-    it('rewrites JavaScript API and Socket.IO paths once without duplicating preview prefixes', () => {
-        const body = [
-            'fetch("/api/projects");',
-            'const socketPath = "/socket.io/";',
-            `const alreadyProxiedApi = "${prefix}/api/projects";`,
-            `const alreadyProxiedSocket = "${prefix}/socket.io/";`,
-        ].join('\n');
-        const rewritten = rewritePreviewBody(body, workspaceId, 'application/javascript');
-        expect(rewritten).toContain(`fetch("${prefix}/api/projects")`);
-        expect(rewritten).toContain(`const socketPath = "${prefix}/socket.io/"`);
-        expect(rewritten).toContain(`const alreadyProxiedApi = "${prefix}/api/projects"`);
-        expect(rewritten).toContain(`const alreadyProxiedSocket = "${prefix}/socket.io/"`);
-        expect(rewritten).not.toContain(`${prefix}${prefix}`);
-        expect(rewritten).not.toContain(`${prefix}/socket.io${prefix}`);
-    });
-    it('rewrites preview API and WebSocket paths through the tokenized preview prefix', () => {
-        const body = [
-            'fetch("/api/echo");',
-            'new WebSocket("/ws");',
-            'const socketPath = "/socket.io/";',
-        ].join('\n');
-        const rewritten = rewritePreviewBody(body, workspaceId, 'application/javascript', previewToken);
-        expect(rewritten).toContain(`fetch("${tokenPrefix}/api/echo")`);
-        expect(rewritten).toContain(`new WebSocket("${tokenPrefix}/ws")`);
-        expect(rewritten).toContain(`const socketPath = "${tokenPrefix}/socket.io/"`);
-        expect(rewritten).not.toContain(`${tokenPrefix}${tokenPrefix}`);
-    });
-    it('still rewrites HTML and CSS absolute asset paths', () => {
-        const html = '<script src="/assets/app.js"></script><link href="/styles/app.css" rel="stylesheet">';
-        const css = 'body { background: url("/images/bg.png"); }';
-        expect(rewritePreviewBody(html, workspaceId, 'text/html')).toContain(`${prefix}/assets/app.js`);
-        expect(rewritePreviewBody(html, workspaceId, 'text/html')).toContain(`${prefix}/styles/app.css`);
-        expect(rewritePreviewBody(css, workspaceId, 'text/css')).toContain(`url("${prefix}/images/bg.png")`);
-    });
-    it('injects the runtime bridge before target scripts for dynamic browser APIs', () => {
-        const target = {
-            target: 'http://127.0.0.1:5173/app',
-            origin: 'http://127.0.0.1:5173',
-            basePath: '/app',
-        };
-        const html = '<html><head><script id="target-script">history.pushState({}, "", "/settings")</script></head></html>';
-        const rewritten = rewritePreviewBody(html, workspaceId, 'text/html', null, target);
-        expect(rewritten).toContain('data-agent-tower-preview-bridge');
-        expect(rewritten).toContain('History.prototype.pushState');
-        expect(rewritten).toContain('window.fetch =');
-        expect(rewritten).toContain('window.WebSocket = PreviewWebSocket');
-        expect(rewritten.indexOf('data-agent-tower-preview-bridge'))
-            .toBeLessThan(rewritten.indexOf('id="target-script"'));
+const target = {
+    target: 'http://127.0.0.1:3000',
+    origin: 'http://127.0.0.1:3000',
+    basePath: '',
+};
+const scope = { workspaceId: 'workspace-1', target, previewToken: null };
+const prefix = '/view/workspace-1';
+describe('classifyPreviewRequest', () => {
+    it('serves the bootstrap page to browser navigations that are not yet worker-controlled', () => {
+        const context = classifyPreviewRequest('GET', { 'sec-fetch-dest': 'iframe', accept: 'text/html' }, '');
+        expect(context).toMatchObject({ serviceWorker: false, document: true, embedded: true, plainMode: false, bootstrapped: false });
+        expect(shouldServeBootstrap(context, 'GET')).toBe(true);
+    });
+    it('proxies the real document once the worker re-navigated or plain mode was chosen', () => {
+        const booted = classifyPreviewRequest('GET', { accept: 'text/html,*/*' }, `?${PREVIEW_BOOT_PARAM}=1`);
+        expect(booted.document).toBe(true);
+        expect(shouldServeBootstrap(booted, 'GET')).toBe(false);
+        const plain = classifyPreviewRequest('GET', { 'sec-fetch-dest': 'document' }, `?${PREVIEW_MODE_PARAM}=plain`);
+        expect(plain).toMatchObject({ document: true, embedded: false, plainMode: true });
+        expect(shouldServeBootstrap(plain, 'GET')).toBe(false);
+    });
+    it('trusts the service worker marker for navigation and destination', () => {
+        const navigation = classifyPreviewRequest('GET', {
+            [PREVIEW_SERVICE_WORKER_HEADER]: 'navigate',
+            [PREVIEW_DESTINATION_HEADER]: 'iframe',
+            'sec-fetch-dest': 'empty',
+        }, '');
+        expect(navigation).toMatchObject({ serviceWorker: true, document: true, embedded: true });
+        expect(shouldServeBootstrap(navigation, 'GET')).toBe(false);
+        const asset = classifyPreviewRequest('GET', {
+            [PREVIEW_SERVICE_WORKER_HEADER]: 'subresource',
+            [PREVIEW_DESTINATION_HEADER]: 'script',
+            accept: 'text/html',
+        }, '');
+        expect(asset.document).toBe(false);
+    });
+    it('never treats fetch() calls or form posts as bootstrap candidates', () => {
+        const json = classifyPreviewRequest('GET', { accept: '*/*' }, '');
+        expect(json.document).toBe(false);
+        const post = classifyPreviewRequest('POST', { 'sec-fetch-dest': 'document' }, '');
+        expect(post.document).toBe(true);
+        expect(shouldServeBootstrap(post, 'POST')).toBe(false);
+    });
+});
+describe('proxyRequestHeaders', () => {
+    it('maps browser origin and referer to the target without forwarding Agent Tower cookies', () => {
+        const headers = proxyRequestHeaders({
+            host: 'tower.example.com',
+            origin: 'https://tower.example.com',
+            referer: 'https://tower.example.com/view/workspace-1/settings?tab=team',
+            cookie: [
+                'agent-tower-access=legacy-secret',
+                'agent-tower-access-0123456789abcdef=scoped-secret',
+                '__Host-agent-tower-tunnel=tunnel',
+                `${PREVIEW_CONTEXT_COOKIE_NAME}=workspace-1`,
+                'preview-session=abc',
+            ].join('; '),
+            'cf-ray': 'ray',
+            'cf-connecting-ip': '203.0.113.10',
+            'x-forwarded-for': '203.0.113.10',
+            'x-forwarded-proto': 'https',
+            [PREVIEW_SERVICE_WORKER_HEADER]: 'navigate',
+            [PREVIEW_DESTINATION_HEADER]: 'iframe',
+            'sec-fetch-dest': 'iframe',
+        }, { ...scope, target: { target: 'http://127.0.0.1:5173/app', origin: 'http://127.0.0.1:5173', basePath: '/app' } }, '/app/settings?tab=team');
+        expect(headers.host).toBe('127.0.0.1:5173');
+        expect(headers.origin).toBe('http://127.0.0.1:5173');
+        expect(headers.referer).toBe('http://127.0.0.1:5173/app/settings?tab=team');
+        expect(headers.cookie).toBe('preview-session=abc');
+        expect(headers['x-forwarded-host']).toBe('tower.example.com');
+        expect(headers['x-forwarded-proto']).toBe('https');
+        expect(headers['cf-ray']).toBeUndefined();
+        expect(headers['x-forwarded-for']).toBeUndefined();
+        expect(headers[PREVIEW_SERVICE_WORKER_HEADER]).toBeUndefined();
+        expect(headers[PREVIEW_DESTINATION_HEADER]).toBeUndefined();
+        expect(headers['sec-fetch-dest']).toBeUndefined();
+    });
+    it('maps virtualized referers (service worker mode) back to the target root', () => {
+        const headers = proxyRequestHeaders({
+            host: 'tower.example.com',
+            referer: 'https://tower.example.com/dashboard?x=1',
+        }, scope, '/api/data');
+        expect(headers.referer).toBe('http://127.0.0.1:3000/dashboard?x=1');
+    });
+});
+describe('proxyResponseHeaders', () => {
+    it('removes frame restrictions and tags embedded documents for the worker and the fallback hook', () => {
+        const headers = proxyResponseHeaders({
+            'content-type': 'text/html',
+            'content-security-policy': "default-src 'self'",
+            'x-frame-options': 'DENY',
+            'content-length': '12',
+            'cache-control': 'max-age=60',
+        }, scope, { 'x-forwarded-proto': 'https' }, { document: true, embedded: true });
+        expect(headers['x-frame-options']).toBeUndefined();
+        expect(headers['content-length']).toBeUndefined();
+        expect(headers['content-security-policy']).toBe(PREVIEW_SANDBOX_CSP);
+        expect(headers[PREVIEW_TARGET_HEADER]).toBe('http://127.0.0.1:3000');
+        expect(headers[PREVIEW_BASE_PATH_HEADER]).toBe('');
+        expect(headers['cache-control']).toBe('no-store');
+        const cookies = headers['set-cookie'];
+        expect(cookies.some((cookie) => cookie.startsWith(`${PREVIEW_CONTEXT_COOKIE_NAME}=workspace-1`) && cookie.includes('Secure'))).toBe(true);
+    });
+    it('keeps top-level previews unsandboxed and passes other responses through', () => {
+        const topLevel = proxyResponseHeaders({ 'content-type': 'text/html' }, scope, {}, { document: true, embedded: false });
+        expect(topLevel['content-security-policy']).toBeUndefined();
+        expect(topLevel[PREVIEW_TARGET_HEADER]).toBe('http://127.0.0.1:3000');
+        const asset = proxyResponseHeaders({
+            'content-type': 'application/javascript',
+            'content-length': '42',
+            'access-control-allow-origin': 'http://127.0.0.1:3000',
+            etag: '"abc"',
+        }, scope, {}, { document: false, embedded: false });
+        expect(asset['content-length']).toBe('42');
+        expect(asset['content-security-policy']).toBeUndefined();
+        expect(asset[PREVIEW_TARGET_HEADER]).toBeUndefined();
+        expect(asset['set-cookie']).toBeUndefined();
+        expect(asset['access-control-allow-origin']).toBe('http://127.0.0.1:3000');
+        expect(asset.etag).toBe('"abc"');
+    });
+    it('rewrites redirects into the prefix and keeps target cookies usable across the whole proxy', () => {
+        const headers = proxyResponseHeaders({
+            location: 'http://127.0.0.1:3000/login?next=%2F',
+            'set-cookie': [
+                'session=abc; Domain=127.0.0.1; Path=/account; HttpOnly; SameSite=Lax',
+                'agent-tower-access=target-session; Path=/; HttpOnly',
+            ],
+        }, scope, {}, { document: false, embedded: false });
+        expect(headers.location).toBe('/view/workspace-1/login?next=%2F');
+        const cookies = headers['set-cookie'];
+        expect(cookies[0]).toBe('session=abc; Path=/; HttpOnly; SameSite=Lax');
+        expect(cookies[1]).toMatch(/^agent-tower-preview-[0-9a-f]{16}-target-/);
+        expect(cookies[1]).not.toMatch(/^agent-tower-access=/);
     });
 });
 describe('rewriteLocationHeader', () => {
-    const workspaceId = 'workspace-1';
-    const target = {
-        target: 'http://127.0.0.1:3000',
-        origin: 'http://127.0.0.1:3000',
-        basePath: '',
-    };
     it('rewrites same-origin absolute paths into the preview prefix', () => {
-        expect(rewriteLocationHeader('/foo?bar=1#section', workspaceId, target))
-            .toBe('/view/workspace-1/foo?bar=1#section');
+        expect(rewriteLocationHeader('/foo?bar=1#section', scope)).toBe('/view/workspace-1/foo?bar=1#section');
     });
     it('does not add the preview prefix twice', () => {
-        expect(rewriteLocationHeader('/view/workspace-1/foo?bar=1#section', workspaceId, target))
+        expect(rewriteLocationHeader('/view/workspace-1/foo?bar=1#section', scope))
             .toBe('/view/workspace-1/foo?bar=1#section');
     });
     it('does not rewrite external absolute locations even when their path starts with the preview prefix', () => {
         const external = 'https://example.com/view/workspace-1/foo?bar=1#section';
-        expect(rewriteLocationHeader(external, workspaceId, target)).toBe(external);
+        expect(rewriteLocationHeader(external, scope)).toBe(external);
     });
-    it('rewrites same-origin locations into the tokenized preview prefix', () => {
+    it('strips the target base path and keeps tokenized prefixes', () => {
         const token = 'pv1.d29ya3NwYWNlLTE.123.nonce.signature';
-        expect(rewriteLocationHeader('/foo?bar=1#section', workspaceId, target, token))
-            .toBe(`/view/workspace-1/__agent_tower_preview/${token}/foo?bar=1#section`);
+        const tokenScope = {
+            workspaceId: 'workspace-1',
+            previewToken: token,
+            target: { target: 'http://127.0.0.1:3000/app', origin: 'http://127.0.0.1:3000', basePath: '/app' },
+        };
+        expect(rewriteLocationHeader('http://127.0.0.1:3000/app/login', tokenScope))
+            .toBe(`/view/workspace-1/__agent_tower_preview/${token}/login`);
+    });
+});
+describe('plain mode body rewriting', () => {
+    it('rewrites static root-relative references in HTML and CSS', () => {
+        const html = '<script src="/assets/app.js"></script><link href="/styles/app.css" rel="stylesheet"><img srcset="/a.png 1x, /b.png 2x"><a href="//cdn.example.com/x">cdn</a>';
+        const rewritten = rewritePlainModeBody(html, prefix, 'html');
+        expect(rewritten).toContain(`src="${prefix}/assets/app.js"`);
+        expect(rewritten).toContain(`href="${prefix}/styles/app.css"`);
+        expect(rewritten).toContain(`srcset="${prefix}/a.png 1x, ${prefix}/b.png 2x"`);
+        expect(rewritten).toContain('href="//cdn.example.com/x"');
+        expect(rewritePlainModeBody('body { background: url("/images/bg.png"); }', prefix, 'css'))
+            .toContain(`url("${prefix}/images/bg.png")`);
+    });
+});
+describe('bridge injection', () => {
+    it('injects the bridge before any application script and preserves multi-byte content', () => {
+        const html = Buffer.from('<html><head><meta charset="utf-8"><script id="app">1</script></head><body>你好 ☃</body></html>', 'utf8');
+        const tag = buildPreviewBridgeScript({
+            mode: 'prefix',
+            prefix,
+            workspaceId: 'workspace-1',
+            targetOrigin: target.origin,
+            targetBasePath: '',
+            serviceWorker: true,
+        });
+        const output = injectPreviewBridge(html, tag).toString('utf8');
+        expect(output.indexOf('data-agent-tower-preview-bridge')).toBeLessThan(output.indexOf('id="app"'));
+        expect(output).toContain('你好 ☃');
+        expect(output).toContain('"serviceWorker":true');
+        expect(output).toContain('history.replaceState');
+        expect(output).toContain('window.WebSocket = PreviewWebSocket');
+        expect(injectPreviewBridge(Buffer.from(output, 'utf8'), tag).toString('utf8')).toBe(output);
+    });
+    it('generates a gateway bridge with heartbeat and a worker script bound to its scope', () => {
+        const gatewayTag = buildPreviewBridgeScript({
+            mode: 'gateway',
+            prefix: '',
+            workspaceId: 'workspace-1',
+            targetOrigin: target.origin,
+            targetBasePath: '',
+            serviceWorker: false,
+            heartbeatPath: '/__agent_tower_preview_heartbeat',
+        });
+        expect(gatewayTag).toContain('"heartbeatPath":"/__agent_tower_preview_heartbeat"');
+        expect(gatewayTag).toContain('window.fetch =');
+        const worker = buildPreviewServiceWorkerScript();
+        expect(worker).toContain("self.addEventListener('fetch'");
+        expect(worker).toContain('self.registration.scope');
+        expect(worker).toContain(PREVIEW_SERVICE_WORKER_HEADER);
+        const bootstrap = buildPreviewBootstrapPage({ scope: `${prefix}/` });
+        expect(bootstrap).toContain('navigator.serviceWorker.register');
+        expect(bootstrap).toContain(`${prefix}/__agent_tower_preview_sw.js`);
+        expect(bootstrap).toContain(PREVIEW_MODE_PARAM);
+    });
+});
+describe('same-origin sessions', () => {
+    it('describes the same-origin proxy entry', () => {
+        expect(sameOriginPreviewSession('workspace-1', target, 0)).toEqual({
+            id: 'same-origin',
+            target: 'http://127.0.0.1:3000',
+            mode: 'remote',
+            kind: 'same-origin',
+            viewUrl: '/view/workspace-1/',
+            expiresAt: new Date(24 * 60 * 60 * 1000).toISOString(),
+        });
+    });
+    it('honours the current and the legacy Docker environment switch', () => {
+        expect(forceSameOriginPreview({})).toBe(false);
+        expect(forceSameOriginPreview({ AGENT_TOWER_PREVIEW_FORCE_SAME_ORIGIN: 'true' })).toBe(true);
+        expect(forceSameOriginPreview({ AGENT_TOWER_PREVIEW_FORCE_TUNNEL: 'true' })).toBe(true);
+    });
+    it('strips internal bootstrap parameters before reaching the target', () => {
+        expect(stripInternalQueryParams(`?a=1&${PREVIEW_BOOT_PARAM}=1&${PREVIEW_MODE_PARAM}=plain`)).toBe('?a=1');
+        expect(stripInternalQueryParams(`?${PREVIEW_BOOT_PARAM}=1`)).toBe('');
     });
 });
 describe('parsePreviewPath', () => {
-    it('parses legacy preview paths', () => {
+    it('parses preview paths', () => {
         expect(parsePreviewPath('/view/workspace-1/api/echo?x=1')).toEqual({
             workspaceId: 'workspace-1',
             previewToken: null,
@@ -138,94 +253,8 @@ describe('parsePreviewPath', () => {
             suffix: '/api/echo',
             search: '?x=1',
         });
-    });
-    it('builds a tokenized prefix without treating normal app paths as tokens', () => {
-        const token = 'pv1.d29ya3NwYWNlLTE.123.nonce.signature';
         expect(buildPreviewPathPrefix('workspace-1', token))
             .toBe(`/view/workspace-1/__agent_tower_preview/${token}`);
-        expect(parsePreviewPath('/view/workspace-1/__agent_tower_preview/not-a-token/api')).toEqual({
-            workspaceId: 'workspace-1',
-            previewToken: null,
-            suffix: '/__agent_tower_preview/not-a-token/api',
-            search: '',
-        });
-    });
-});
-describe('proxyResponseHeaders', () => {
-    const workspaceId = 'workspace-1';
-    const target = {
-        target: 'http://127.0.0.1:3000',
-        origin: 'http://127.0.0.1:3000',
-        basePath: '',
-    };
-    it('adds a trusted sandbox CSP with same-origin browser storage enabled', () => {
-        const headers = proxyResponseHeaders({
-            'content-type': 'text/html',
-            'content-security-policy': "default-src 'self'",
-        }, workspaceId, target);
-        expect(headers['content-security-policy']).toBe(PREVIEW_SANDBOX_CSP);
-        expect(String(headers['content-security-policy'])).toContain('sandbox');
-        expect(String(headers['content-security-policy'])).toContain('allow-same-origin');
-        expect(headers['referrer-policy']).toBeUndefined();
-    });
-    it('does not forward preview target CORS policy and allows sandboxed preview resources to load', () => {
-        const headers = proxyResponseHeaders({
-            'access-control-allow-origin': 'http://127.0.0.1:3000',
-            'access-control-allow-credentials': 'true',
-            'cross-origin-resource-policy': 'same-origin',
-        }, workspaceId, target, {
-            'access-control-request-headers': 'content-type, x-preview-token',
-        });
-        expect(headers['access-control-allow-origin']).toBe('*');
-        expect(headers['access-control-allow-methods']).toContain('POST');
-        expect(headers['access-control-allow-headers']).toBe('content-type, x-preview-token');
-        expect(headers['access-control-allow-credentials']).toBeUndefined();
-        expect(headers['cross-origin-resource-policy']).toBe('cross-origin');
-    });
-    it('uses default CORS allow headers when a preview request has no preflight header list', () => {
-        const headers = proxyResponseHeaders({}, workspaceId, target);
-        expect(headers['access-control-allow-origin']).toBe('*');
-        expect(headers['access-control-allow-methods']).toContain('OPTIONS');
-        expect(String(headers['access-control-allow-headers'])).toContain('Content-Type');
-        expect(headers.vary).toContain('Access-Control-Request-Headers');
-    });
-});
-describe('trusted preview request headers', () => {
-    it('maps browser origin and referer to the local target without forwarding Agent Tower cookies', () => {
-        const targetUrl = new URL('http://127.0.0.1:5173');
-        const headers = proxyRequestHeaders({
-            host: 'tower.example.com',
-            origin: 'https://tower.example.com',
-            referer: 'https://tower.example.com/view/workspace-1/settings',
-            cookie: [
-                'agent-tower-access=legacy-secret',
-                'agent-tower-access-0123456789abcdef=scoped-secret',
-                '__Host-agent-tower-tunnel=tunnel',
-                'preview-session=abc',
-            ].join('; '),
-        }, targetUrl, '/app/settings?tab=team');
-        expect(headers.host).toBe('127.0.0.1:5173');
-        expect(headers.origin).toBe('http://127.0.0.1:5173');
-        expect(headers.referer).toBe('http://127.0.0.1:5173/app/settings?tab=team');
-        expect(headers.cookie).toBe('preview-session=abc');
-        expect(headers['x-forwarded-host']).toBe('127.0.0.1:5173');
-        expect(headers['x-forwarded-proto']).toBe('http');
-    });
-    it('scopes target cookies to the workspace preview path and removes the target domain', () => {
-        expect(rewriteSetCookieHeader('preview-session=abc; Domain=127.0.0.1; Path=/; HttpOnly; SameSite=Lax', 'workspace-1')).toBe('preview-session=abc; Path=/view/workspace-1/; HttpOnly; SameSite=Lax');
-    });
-});
-describe('previewCorsHeaders', () => {
-    it('echoes requested preflight headers without enabling credentialed CORS', () => {
-        const headers = previewCorsHeaders({
-            origin: 'null',
-            'access-control-request-method': 'POST',
-            'access-control-request-headers': 'content-type, x-custom-header',
-        });
-        expect(headers['access-control-allow-origin']).toBe('*');
-        expect(headers['access-control-allow-methods']).toContain('POST');
-        expect(headers['access-control-allow-headers']).toBe('content-type, x-custom-header');
-        expect(headers['access-control-allow-credentials']).toBeUndefined();
     });
 });
 //# sourceMappingURL=previews.test.js.map

package/dist/routes/__tests__/previews.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"previews.test.js","sourceRoot":"","sources":["../../../src/routes/__tests__/previews.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE9C,OAAO,EACL,mBAAmB,EACnB,kBAAkB,EAClB,mBAAmB,EACnB,oBAAoB,EACpB,qBAAqB,EACrB,kBAAkB,EAClB,sBAAsB,GACvB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAEvF,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,MAAM,WAAW,GAAG,aAAa,CAAC;IAClC,MAAM,MAAM,GAAG,SAAS,WAAW,EAAE,CAAC;IACtC,MAAM,YAAY,GAAG,yCAAyC,CAAC;IAC/D,MAAM,WAAW,GAAG,SAAS,WAAW,0BAA0B,YAAY,EAAE,CAAC;IAEjF,EAAE,CAAC,uFAAuF,EAAE,GAAG,EAAE;QAC/F,MAAM,IAAI,GAAG;YACX,8CAA8C;YAC9C,0CAA0C;YAC1C,oBAAoB;YACpB,GAAG;YACH,8CAA8C;YAC9C,oBAAoB;YACpB,GAAG;YACH,iDAAiD;YACjD,oBAAoB;YACpB,GAAG;YACH,4CAA4C;YAC5C,aAAa;YACb,GAAG;YACH,wBAAwB;YACxB,2BAA2B;YAC3B,+BAA+B;YAC/B,+BAA+B;YAC/B,eAAe;SAChB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEb,MAAM,SAAS,GAAG,kBAAkB,CAAC,IAAI,EAAE,WAAW,EAAE,wBAAwB,CAAC,CAAC;QAElF,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;QAChD,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,eAAe,MAAM,GAAG,CAAC,CAAC;QACtD,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,yBAAyB,MAAM,GAAG,CAAC,CAAC;QAChE,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,eAAe,MAAM,GAAG,CAAC,CAAC;QACtD,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,kBAAkB,MAAM,GAAG,CAAC,CAAC;QACzD,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,qBAAqB,MAAM,GAAG,CAAC,CAAC;QAC5D,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,yBAAyB,MAAM,GAAG,CAAC,CAAC;QAChE,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,yBAAyB,MAAM,GAAG,CAAC,CAAC;QAChE,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QACxC,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,MAAM,GAAG,MAAM,EAAE,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mFAAmF,EAAE,GAAG,EAAE;QAC3F,MAAM,IAAI,GAAG,0EAA0E,CAAC;QAExF,MAAM,SAAS,GAAG,kBAAkB,CAAC,IAAI,EAAE,WAAW,EAAE,wBAAwB,CAAC,CAAC;QAElF,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,IAAI,MAAM,OAAO,CAAC,CAAC;QAC/C,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;QAC/C,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,OAAO,MAAM,eAAe,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uFAAuF,EAAE,GAAG,EAAE;QAC/F,MAAM,IAAI,GAAG;YACX,yBAAyB;YACzB,mCAAmC;YACnC,8BAA8B,MAAM,iBAAiB;YACrD,iCAAiC,MAAM,eAAe;SACvD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEb,MAAM,SAAS,GAAG,kBAAkB,CAAC,IAAI,EAAE,WAAW,EAAE,wBAAwB,CAAC,CAAC;QAElF,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,UAAU,MAAM,iBAAiB,CAAC,CAAC;QAC/D,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,uBAAuB,MAAM,cAAc,CAAC,CAAC;QACzE,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,8BAA8B,MAAM,gBAAgB,CAAC,CAAC;QAClF,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,iCAAiC,MAAM,cAAc,CAAC,CAAC;QACnF,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,MAAM,GAAG,MAAM,EAAE,CAAC,CAAC;QACtD,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,MAAM,aAAa,MAAM,EAAE,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+EAA+E,EAAE,GAAG,EAAE;QACvF,MAAM,IAAI,GAAG;YACX,qBAAqB;YACrB,uBAAuB;YACvB,mCAAmC;SACpC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEb,MAAM,SAAS,GAAG,kBAAkB,CAAC,IAAI,EAAE,WAAW,EAAE,wBAAwB,EAAE,YAAY,CAAC,CAAC;QAEhG,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,UAAU,WAAW,aAAa,CAAC,CAAC;QAChE,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,kBAAkB,WAAW,OAAO,CAAC,CAAC;QAClE,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,uBAAuB,WAAW,cAAc,CAAC,CAAC;QAC9E,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,WAAW,GAAG,WAAW,EAAE,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,IAAI,GAAG,sFAAsF,CAAC;QACpG,MAAM,GAAG,GAAG,6CAA6C,CAAC;QAE1D,MAAM,CAAC,kBAAkB,CAAC,IAAI,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,MAAM,gBAAgB,CAAC,CAAC;QAChG,MAAM,CAAC,kBAAkB,CAAC,IAAI,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,MAAM,iBAAiB,CAAC,CAAC;QACjG,MAAM,CAAC,kBAAkB,CAAC,GAAG,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,MAAM,kBAAkB,CAAC,CAAC;IACvG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2EAA2E,EAAE,GAAG,EAAE;QACnF,MAAM,MAAM,GAA4B;YACtC,MAAM,EAAE,2BAA2B;YACnC,MAAM,EAAE,uBAAuB;YAC/B,QAAQ,EAAE,MAAM;SACjB,CAAC;QACF,MAAM,IAAI,GAAG,sGAAsG,CAAC;QAEpH,MAAM,SAAS,GAAG,kBAAkB,CAAC,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QAEnF,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,iCAAiC,CAAC,CAAC;QAC/D,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,6BAA6B,CAAC,CAAC;QAC3D,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;QAC9C,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,qCAAqC,CAAC,CAAC;QACnE,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,iCAAiC,CAAC,CAAC;aACzD,YAAY,CAAC,SAAS,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;IACrC,MAAM,WAAW,GAAG,aAAa,CAAC;IAClC,MAAM,MAAM,GAA4B;QACtC,MAAM,EAAE,uBAAuB;QAC/B,MAAM,EAAE,uBAAuB;QAC/B,QAAQ,EAAE,EAAE;KACb,CAAC;IAEF,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACrE,MAAM,CAAC,qBAAqB,CAAC,oBAAoB,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;aACrE,IAAI,CAAC,qCAAqC,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,MAAM,CAAC,qBAAqB,CAAC,qCAAqC,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;aACtF,IAAI,CAAC,qCAAqC,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kGAAkG,EAAE,GAAG,EAAE;QAC1G,MAAM,QAAQ,GAAG,wDAAwD,CAAC;QAE1E,MAAM,CAAC,qBAAqB,CAAC,QAAQ,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC9E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kEAAkE,EAAE,GAAG,EAAE;QAC1E,MAAM,KAAK,GAAG,yCAAyC,CAAC;QAExD,MAAM,CAAC,qBAAqB,CAAC,oBAAoB,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;aAC5E,IAAI,CAAC,2CAA2C,KAAK,oBAAoB,CAAC,CAAC;IAChF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,EAAE,CAAC,6BAA6B,EAAE,GAAG,EAAE;QACrC,MAAM,CAAC,gBAAgB,CAAC,gCAAgC,CAAC,CAAC,CAAC,OAAO,CAAC;YACjE,WAAW,EAAE,aAAa;YAC1B,YAAY,EAAE,IAAI;YAClB,MAAM,EAAE,WAAW;YACnB,MAAM,EAAE,MAAM;SACf,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mFAAmF,EAAE,GAAG,EAAE;QAC3F,MAAM,KAAK,GAAG,yCAAyC,CAAC;QAExD,MAAM,CAAC,gBAAgB,CAAC,2CAA2C,KAAK,eAAe,CAAC,CAAC,CAAC,OAAO,CAAC;YAChG,WAAW,EAAE,aAAa;YAC1B,YAAY,EAAE,KAAK;YACnB,MAAM,EAAE,WAAW;YACnB,MAAM,EAAE,MAAM;SACf,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uEAAuE,EAAE,GAAG,EAAE;QAC/E,MAAM,KAAK,GAAG,yCAAyC,CAAC;QAExD,MAAM,CAAC,sBAAsB,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;aACjD,IAAI,CAAC,2CAA2C,KAAK,EAAE,CAAC,CAAC;QAC5D,MAAM,CAAC,gBAAgB,CAAC,yDAAyD,CAAC,CAAC,CAAC,OAAO,CAAC;YAC1F,WAAW,EAAE,aAAa;YAC1B,YAAY,EAAE,IAAI;YAClB,MAAM,EAAE,wCAAwC;YAChD,MAAM,EAAE,EAAE;SACX,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,MAAM,WAAW,GAAG,aAAa,CAAC;IAClC,MAAM,MAAM,GAA4B;QACtC,MAAM,EAAE,uBAAuB;QAC/B,MAAM,EAAE,uBAAuB;QAC/B,QAAQ,EAAE,EAAE;KACb,CAAC;IAEF,EAAE,CAAC,qEAAqE,EAAE,GAAG,EAAE;QAC7E,MAAM,OAAO,GAAG,oBAAoB,CAAC;YACnC,cAAc,EAAE,WAAW;YAC3B,yBAAyB,EAAE,oBAAoB;SAChD,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;QAExB,MAAM,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QACrE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACxE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;QAClF,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4FAA4F,EAAE,GAAG,EAAE;QACpG,MAAM,OAAO,GAAG,oBAAoB,CAAC;YACnC,6BAA6B,EAAE,uBAAuB;YACtD,kCAAkC,EAAE,MAAM;YAC1C,8BAA8B,EAAE,aAAa;SAC9C,EAAE,WAAW,EAAE,MAAM,EAAE;YACtB,gCAAgC,EAAE,+BAA+B;SAClE,CAAC,CAAC;QAEH,MAAM,CAAC,OAAO,CAAC,6BAA6B,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACzD,MAAM,CAAC,OAAO,CAAC,8BAA8B,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAClE,MAAM,CAAC,OAAO,CAAC,8BAA8B,CAAC,CAAC,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;QACtF,MAAM,CAAC,OAAO,CAAC,kCAAkC,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QACpE,MAAM,CAAC,OAAO,CAAC,8BAA8B,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qFAAqF,EAAE,GAAG,EAAE;QAC7F,MAAM,OAAO,GAAG,oBAAoB,CAAC,EAAE,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;QAE9D,MAAM,CAAC,OAAO,CAAC,6BAA6B,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACzD,MAAM,CAAC,OAAO,CAAC,8BAA8B,CAAC,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACrE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,8BAA8B,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;QAClF,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,gCAAgC,CAAC,CAAC;IACnE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,iCAAiC,EAAE,GAAG,EAAE;IAC/C,EAAE,CAAC,4FAA4F,EAAE,GAAG,EAAE;QACpG,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,uBAAuB,CAAC,CAAC;QACnD,MAAM,OAAO,GAAG,mBAAmB,CAAC;YAClC,IAAI,EAAE,mBAAmB;YACzB,MAAM,EAAE,2BAA2B;YACnC,OAAO,EAAE,qDAAqD;YAC9D,MAAM,EAAE;gBACN,kCAAkC;gBAClC,mDAAmD;gBACnD,kCAAkC;gBAClC,qBAAqB;aACtB,CAAC,IAAI,CAAC,IAAI,CAAC;SACb,EAAE,SAAS,EAAE,wBAAwB,CAAC,CAAC;QAExC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC5C,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;QACrD,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;QAC5E,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;QACnD,MAAM,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC3D,MAAM,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mFAAmF,EAAE,GAAG,EAAE;QAC3F,MAAM,CAAC,sBAAsB,CAC3B,uEAAuE,EACvE,aAAa,CACd,CAAC,CAAC,IAAI,CAAC,sEAAsE,CAAC,CAAC;IAClF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,EAAE,CAAC,uEAAuE,EAAE,GAAG,EAAE;QAC/E,MAAM,OAAO,GAAG,kBAAkB,CAAC;YACjC,MAAM,EAAE,MAAM;YACd,+BAA+B,EAAE,MAAM;YACvC,gCAAgC,EAAE,+BAA+B;SAClE,CAAC,CAAC;QAEH,MAAM,CAAC,OAAO,CAAC,6BAA6B,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACzD,MAAM,CAAC,OAAO,CAAC,8BAA8B,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAClE,MAAM,CAAC,OAAO,CAAC,8BAA8B,CAAC,CAAC,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;QACtF,MAAM,CAAC,OAAO,CAAC,kCAAkC,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;IACtE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
+{"version":3,"file":"previews.test.js","sourceRoot":"","sources":["../../../src/routes/__tests__/previews.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE9C,OAAO,EACL,yBAAyB,EACzB,wBAAwB,EACxB,+BAA+B,EAC/B,mBAAmB,EACnB,wBAAwB,EACxB,kBAAkB,EAClB,0BAA0B,EAC1B,kBAAkB,EAClB,6BAA6B,EAC7B,qBAAqB,GACtB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,2BAA2B,EAAE,MAAM,mCAAmC,CAAC;AAChF,OAAO,EACL,sBAAsB,EACtB,mBAAmB,EACnB,mBAAmB,EACnB,oBAAoB,EACpB,qBAAqB,EACrB,oBAAoB,EACpB,oBAAoB,EACpB,wBAAwB,GAEzB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AAClF,OAAO,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAEvF,MAAM,MAAM,GAA4B;IACtC,MAAM,EAAE,uBAAuB;IAC/B,MAAM,EAAE,uBAAuB;IAC/B,QAAQ,EAAE,EAAE;CACb,CAAC;AACF,MAAM,KAAK,GAAsB,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;AAC5F,MAAM,MAAM,GAAG,mBAAmB,CAAC;AAEnC,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;IACtC,EAAE,CAAC,qFAAqF,EAAE,GAAG,EAAE;QAC7F,MAAM,OAAO,GAAG,sBAAsB,CAAC,KAAK,EAAE,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC;QACvG,MAAM,CAAC,OAAO,CAAC,CAAC,aAAa,CAAC,EAAE,aAAa,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/H,MAAM,CAAC,oBAAoB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iFAAiF,EAAE,GAAG,EAAE;QACzF,MAAM,MAAM,GAAG,sBAAsB,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,eAAe,EAAE,EAAE,IAAI,kBAAkB,IAAI,CAAC,CAAC;QACtG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,CAAC,oBAAoB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAExD,MAAM,KAAK,GAAG,sBAAsB,CAAC,KAAK,EAAE,EAAE,gBAAgB,EAAE,UAAU,EAAE,EAAE,IAAI,kBAAkB,QAAQ,CAAC,CAAC;QAC9G,MAAM,CAAC,KAAK,CAAC,CAAC,aAAa,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAClF,MAAM,CAAC,oBAAoB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iEAAiE,EAAE,GAAG,EAAE;QACzE,MAAM,UAAU,GAAG,sBAAsB,CAAC,KAAK,EAAE;YAC/C,CAAC,6BAA6B,CAAC,EAAE,UAAU;YAC3C,CAAC,0BAA0B,CAAC,EAAE,QAAQ;YACtC,gBAAgB,EAAE,OAAO;SAC1B,EAAE,EAAE,CAAC,CAAC;QACP,MAAM,CAAC,UAAU,CAAC,CAAC,aAAa,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1F,MAAM,CAAC,oBAAoB,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAE5D,MAAM,KAAK,GAAG,sBAAsB,CAAC,KAAK,EAAE;YAC1C,CAAC,6BAA6B,CAAC,EAAE,aAAa;YAC9C,CAAC,0BAA0B,CAAC,EAAE,QAAQ;YACtC,MAAM,EAAE,WAAW;SACpB,EAAE,EAAE,CAAC,CAAC;QACP,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kEAAkE,EAAE,GAAG,EAAE;QAC1E,MAAM,IAAI,GAAG,sBAAsB,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;QAClE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClC,MAAM,IAAI,GAAG,sBAAsB,CAAC,MAAM,EAAE,EAAE,gBAAgB,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC;QAClF,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjC,MAAM,CAAC,oBAAoB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACnC,EAAE,CAAC,sFAAsF,EAAE,GAAG,EAAE;QAC9F,MAAM,OAAO,GAAG,mBAAmB,CAAC;YAClC,IAAI,EAAE,mBAAmB;YACzB,MAAM,EAAE,2BAA2B;YACnC,OAAO,EAAE,8DAA8D;YACvE,MAAM,EAAE;gBACN,kCAAkC;gBAClC,mDAAmD;gBACnD,kCAAkC;gBAClC,GAAG,2BAA2B,cAAc;gBAC5C,qBAAqB;aACtB,CAAC,IAAI,CAAC,IAAI,CAAC;YACZ,QAAQ,EAAE,KAAK;YACf,kBAAkB,EAAE,cAAc;YAClC,iBAAiB,EAAE,cAAc;YACjC,mBAAmB,EAAE,OAAO;YAC5B,CAAC,6BAA6B,CAAC,EAAE,UAAU;YAC3C,CAAC,0BAA0B,CAAC,EAAE,QAAQ;YACtC,gBAAgB,EAAE,QAAQ;SAC3B,EAAE,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,2BAA2B,EAAE,MAAM,EAAE,uBAAuB,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,wBAAwB,CAAC,CAAC;QAE/I,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC5C,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;QACrD,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;QAC5E,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;QACnD,MAAM,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAC9D,MAAM,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACnD,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QAC1C,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QACnD,MAAM,CAAC,OAAO,CAAC,6BAA6B,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QAC/D,MAAM,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QAC5D,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yEAAyE,EAAE,GAAG,EAAE;QACjF,MAAM,OAAO,GAAG,mBAAmB,CAAC;YAClC,IAAI,EAAE,mBAAmB;YACzB,OAAO,EAAE,yCAAyC;SACnD,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC;QAEvB,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,EAAE,CAAC,6FAA6F,EAAE,GAAG,EAAE;QACrG,MAAM,OAAO,GAAG,oBAAoB,CAAC;YACnC,cAAc,EAAE,WAAW;YAC3B,yBAAyB,EAAE,oBAAoB;YAC/C,iBAAiB,EAAE,MAAM;YACzB,gBAAgB,EAAE,IAAI;YACtB,eAAe,EAAE,YAAY;SAC9B,EAAE,KAAK,EAAE,EAAE,mBAAmB,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAEhF,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QACnD,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QAClD,MAAM,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QACrE,MAAM,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;QACrE,MAAM,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACnD,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAClD,MAAM,OAAO,GAAG,OAAO,CAAC,YAAY,CAAa,CAAC;QAClD,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,2BAA2B,cAAc,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5I,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yEAAyE,EAAE,GAAG,EAAE;QACjF,MAAM,QAAQ,GAAG,oBAAoB,CAAC,EAAE,cAAc,EAAE,WAAW,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;QACvH,MAAM,CAAC,QAAQ,CAAC,yBAAyB,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QAC5D,MAAM,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;QAEtE,MAAM,KAAK,GAAG,oBAAoB,CAAC;YACjC,cAAc,EAAE,wBAAwB;YACxC,gBAAgB,EAAE,IAAI;YACtB,6BAA6B,EAAE,uBAAuB;YACtD,IAAI,EAAE,OAAO;SACd,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;QACpD,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3C,MAAM,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QACzD,MAAM,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QACrD,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QAC5C,MAAM,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;QAC3E,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2FAA2F,EAAE,GAAG,EAAE;QACnG,MAAM,OAAO,GAAG,oBAAoB,CAAC;YACnC,QAAQ,EAAE,sCAAsC;YAChD,YAAY,EAAE;gBACZ,sEAAsE;gBACtE,qDAAqD;aACtD;SACF,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;QAEpD,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;QAClE,MAAM,OAAO,GAAG,OAAO,CAAC,YAAY,CAAa,CAAC;QAClD,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;QACvE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,2CAA2C,CAAC,CAAC;QACxE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;IACrC,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACrE,MAAM,CAAC,qBAAqB,CAAC,oBAAoB,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;IACzG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,MAAM,CAAC,qBAAqB,CAAC,qCAAqC,EAAE,KAAK,CAAC,CAAC;aACxE,IAAI,CAAC,qCAAqC,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kGAAkG,EAAE,GAAG,EAAE;QAC1G,MAAM,QAAQ,GAAG,wDAAwD,CAAC;QAC1E,MAAM,CAAC,qBAAqB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,MAAM,KAAK,GAAG,yCAAyC,CAAC;QACxD,MAAM,UAAU,GAAsB;YACpC,WAAW,EAAE,aAAa;YAC1B,YAAY,EAAE,KAAK;YACnB,MAAM,EAAE,EAAE,MAAM,EAAE,2BAA2B,EAAE,MAAM,EAAE,uBAAuB,EAAE,QAAQ,EAAE,MAAM,EAAE;SACnG,CAAC;QACF,MAAM,CAAC,qBAAqB,CAAC,iCAAiC,EAAE,UAAU,CAAC,CAAC;aACzE,IAAI,CAAC,2CAA2C,KAAK,QAAQ,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,2BAA2B,EAAE,GAAG,EAAE;IACzC,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,MAAM,IAAI,GAAG,8JAA8J,CAAC;QAC5K,MAAM,SAAS,GAAG,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QAC7D,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,QAAQ,MAAM,iBAAiB,CAAC,CAAC;QAC7D,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,SAAS,MAAM,kBAAkB,CAAC,CAAC;QAC/D,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,WAAW,MAAM,cAAc,MAAM,YAAY,CAAC,CAAC;QAC/E,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,4BAA4B,CAAC,CAAC;QAE1D,MAAM,CAAC,oBAAoB,CAAC,6CAA6C,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;aACvF,SAAS,CAAC,QAAQ,MAAM,kBAAkB,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,EAAE,CAAC,mFAAmF,EAAE,GAAG,EAAE;QAC3F,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,8FAA8F,EAAE,MAAM,CAAC,CAAC;QACjI,MAAM,GAAG,GAAG,wBAAwB,CAAC;YACnC,IAAI,EAAE,QAAQ;YACd,MAAM;YACN,WAAW,EAAE,aAAa;YAC1B,YAAY,EAAE,MAAM,CAAC,MAAM;YAC3B,cAAc,EAAE,EAAE;YAClB,aAAa,EAAE,IAAI;SACpB,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,mBAAmB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAE/D,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,iCAAiC,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC;QACnG,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACjC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAC;QACjD,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAC;QACjD,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,qCAAqC,CAAC,CAAC;QAChE,MAAM,CAAC,mBAAmB,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC9F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kFAAkF,EAAE,GAAG,EAAE;QAC1F,MAAM,UAAU,GAAG,wBAAwB,CAAC;YAC1C,IAAI,EAAE,SAAS;YACf,MAAM,EAAE,EAAE;YACV,WAAW,EAAE,aAAa;YAC1B,YAAY,EAAE,MAAM,CAAC,MAAM;YAC3B,cAAc,EAAE,EAAE;YAClB,aAAa,EAAE,KAAK;YACpB,aAAa,EAAE,kCAAkC;SAClD,CAAC,CAAC;QACH,MAAM,CAAC,UAAU,CAAC,CAAC,SAAS,CAAC,oDAAoD,CAAC,CAAC;QACnF,MAAM,CAAC,UAAU,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;QAE/C,MAAM,MAAM,GAAG,+BAA+B,EAAE,CAAC;QACjD,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,+BAA+B,CAAC,CAAC;QAC1D,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,yBAAyB,CAAC,CAAC;QACpD,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,6BAA6B,CAAC,CAAC;QAExD,MAAM,SAAS,GAAG,yBAAyB,CAAC,EAAE,KAAK,EAAE,GAAG,MAAM,GAAG,EAAE,CAAC,CAAC;QACrE,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,kCAAkC,CAAC,CAAC;QAChE,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,GAAG,MAAM,8BAA8B,CAAC,CAAC;QACrE,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,MAAM,CAAC,wBAAwB,CAAC,aAAa,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;YACjE,EAAE,EAAE,aAAa;YACjB,MAAM,EAAE,uBAAuB;YAC/B,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,aAAa;YACnB,OAAO,EAAE,oBAAoB;YAC7B,SAAS,EAAE,IAAI,IAAI,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE;SACvD,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8DAA8D,EAAE,GAAG,EAAE;QACtE,MAAM,CAAC,sBAAsB,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC/C,MAAM,CAAC,sBAAsB,CAAC,EAAE,qCAAqC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7F,MAAM,CAAC,sBAAsB,CAAC,EAAE,gCAAgC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iEAAiE,EAAE,GAAG,EAAE;QACzE,MAAM,CAAC,wBAAwB,CAAC,QAAQ,kBAAkB,MAAM,kBAAkB,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC1G,MAAM,CAAC,wBAAwB,CAAC,IAAI,kBAAkB,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,EAAE,CAAC,sBAAsB,EAAE,GAAG,EAAE;QAC9B,MAAM,CAAC,gBAAgB,CAAC,gCAAgC,CAAC,CAAC,CAAC,OAAO,CAAC;YACjE,WAAW,EAAE,aAAa;YAC1B,YAAY,EAAE,IAAI;YAClB,MAAM,EAAE,WAAW;YACnB,MAAM,EAAE,MAAM;SACf,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mFAAmF,EAAE,GAAG,EAAE;QAC3F,MAAM,KAAK,GAAG,yCAAyC,CAAC;QAExD,MAAM,CAAC,gBAAgB,CAAC,2CAA2C,KAAK,eAAe,CAAC,CAAC,CAAC,OAAO,CAAC;YAChG,WAAW,EAAE,aAAa;YAC1B,YAAY,EAAE,KAAK;YACnB,MAAM,EAAE,WAAW;YACnB,MAAM,EAAE,MAAM;SACf,CAAC,CAAC;QACH,MAAM,CAAC,sBAAsB,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;aACjD,IAAI,CAAC,2CAA2C,KAAK,EAAE,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/routes/__tests__/task-handoff.test.js

@@ -107,24 +107,30 @@ describe('task handoff HTTP and persistence', () => {
             await app.close();
         }
     });
-    it('binds managed Agents to their task even when workspaces use the same directory', async () => {
-        const other = await prisma.task.create({ data: { title: 'Other', projectId } });
+    it('lets managed Agents read any task note but edit only their own, even when workspaces share a directory', async () => {
+        const parent = await prisma.task.create({ data: { title: 'Parent', projectId, handoff: 'Parent progress' } });
+        const other = await prisma.task.create({ data: { title: 'Other', projectId, handoff: 'Other progress' } });
+        await prisma.task.update({ where: { id: taskId }, data: { parentTaskId: parent.id } });
         const workspace = await prisma.workspace.create({ data: { taskId, branchName: 'at/test', worktreePath: testDir, workspaceKind: 'MAIN_DIRECTORY' } });
         const session = await prisma.session.create({ data: { workspaceId: workspace.id, agentType: 'CODEX', prompt: 'work' } });
         const credential = createAgentApiCredential({ sessionId: session.id, invocationId: null });
         const headers = { 'x-agent-tower-agent-credential': credential };
         const app = await appForTest();
+        const write = (id, newString) => app.inject({ method: 'PATCH', url: `/api/tasks/${id}/handoff`, headers, payload: { oldString: '', newString } });
         try {
             expect((await app.inject({ url: `/api/tasks/${taskId}/handoff`, headers })).statusCode).toBe(200);
-            const write = await app.inject({ method: 'PATCH', url: `/api/tasks/${taskId}/handoff`, headers, payload: { oldString: '', newString: 'Agent note' } });
-            expect(write.statusCode).toBe(200);
-            for (const method of ['GET', 'PATCH']) {
-                const response = await app.inject({ method, url: `/api/tasks/${other.id}/handoff`, headers, ...(method === 'PATCH' ? { payload: { oldString: '', newString: 'Forbidden' } } : {}) });
-                expect(response.statusCode).toBe(403);
-                expect(response.json().code).toBe('HANDOFF_ACCESS_DENIED');
+            expect((await write(taskId, 'Agent note')).statusCode).toBe(200);
+            for (const [id, content] of [[parent.id, 'Parent progress'], [other.id, 'Other progress']]) {
+                expect((await app.inject({ url: `/api/tasks/${id}/handoff`, headers })).json()).toEqual({ taskId: id, content });
+                await prisma.task.update({ where: { id }, data: { handoff: null } });
+                const denied = await write(id, 'Forbidden');
+                expect(denied.statusCode).toBe(403);
+                expect(denied.json().code).toBe('HANDOFF_ACCESS_DENIED');
+                expect((await prisma.task.findUniqueOrThrow({ where: { id } })).handoff).toBeNull();
             }
             await prisma.session.update({ where: { id: session.id }, data: { purpose: 'COMMIT_MSG' } });
-            expect((await app.inject({ url: `/api/tasks/${taskId}/handoff`, headers })).statusCode).toBe(403);
+            expect((await app.inject({ url: `/api/tasks/${taskId}/handoff`, headers })).json().content).toBe('Agent note');
+            expect((await app.inject({ method: 'PATCH', url: `/api/tasks/${taskId}/handoff`, headers, payload: { oldString: 'Agent note', newString: '' } })).statusCode).toBe(403);
         }
         finally {
             await app.close();
@@ -158,24 +164,27 @@ describe('task handoff HTTP and persistence', () => {
             await app.close();
         }
     });
-    it('requires the bound TeamRun invocation and an active member', async () => {
+    it('requires the bound TeamRun invocation and an active member to edit', async () => {
         const team = await prisma.teamRun.create({ data: { taskId, mode: 'SHARED' } });
         const member = await prisma.teamMember.create({ data: { teamRunId: team.id, name: 'Worker', aliases: '[]', providerId: 'test', rolePrompt: '', capabilities: '{}', workspacePolicy: 'shared', triggerPolicy: 'mention' } });
         const workspace = await prisma.workspace.create({ data: { taskId, branchName: 'at/team', worktreePath: testDir } });
         const session = await prisma.session.create({ data: { workspaceId: workspace.id, agentType: 'CODEX', prompt: 'work' } });
         const invocation = await prisma.agentInvocation.create({ data: { teamRunId: team.id, memberId: member.id, workRequestId: 'test-request', workspaceId: workspace.id, sessionId: session.id, status: 'RUNNING' } });
         const app = await appForTest();
-        const read = (invocationId) => app.inject({ url: `/api/tasks/${taskId}/handoff`, headers: {
+        let note = '';
+        const write = (invocationId) => app.inject({ method: 'PATCH', url: `/api/tasks/${taskId}/handoff`, headers: {
                 'x-agent-tower-agent-credential': createAgentApiCredential({ sessionId: session.id, invocationId }),
-            } });
+            }, payload: { oldString: note, newString: `${note}+` } });
         try {
-            expect((await read(null)).statusCode).toBe(403);
-            expect((await read(invocation.id)).statusCode).toBe(200);
+            expect((await write(null)).statusCode).toBe(403);
+            expect((await write(invocation.id)).statusCode).toBe(200);
+            note = '+';
             await prisma.teamMember.update({ where: { id: member.id }, data: { membershipStatus: 'REMOVED' } });
-            expect((await read(invocation.id)).statusCode).toBe(403);
+            expect((await write(invocation.id)).statusCode).toBe(403);
             await prisma.teamMember.update({ where: { id: member.id }, data: { membershipStatus: 'ACTIVE' } });
             await prisma.agentInvocation.update({ where: { id: invocation.id }, data: { dispatchRevokedAt: new Date() } });
-            expect((await read(invocation.id)).statusCode).toBe(403);
+            expect((await write(invocation.id)).statusCode).toBe(403);
+            expect((await prisma.task.findUniqueOrThrow({ where: { id: taskId } })).handoff).toBe('+');
         }
         finally {
             await app.close();