clinkx 0.3.0 → 1.0.0

package/dist/dashboard-companion/protocol.js

@@ -0,0 +1,455 @@
+import { validateHeaderValue } from "node:http";
+export const MAX_GATEWAY_REQUEST_BYTES = 64 * 1_024;
+export const MAX_GATEWAY_REQUEST_PATH_CHARS = 2_048;
+export const MAX_DASHBOARD_RESPONSE_BYTES = 16 * 1_024 * 1_024;
+export const DASHBOARD_GATEWAY_V2_SUBPROTOCOL = "clinkx-dashboard-gateway-v2";
+export const MAX_GATEWAY_V2_REQUEST_BYTES = 512 * 1_024;
+export const MAX_GATEWAY_V2_REQUEST_BODY_BYTES = 256 * 1_024;
+export const MAX_GATEWAY_V2_REQUEST_PATH_BYTES = 2_048;
+export const MAX_GATEWAY_V2_HEADER_BYTES = 64 * 1_024;
+export const MAX_GATEWAY_V2_RESPONSE_BYTES = 24 * 1_024 * 1_024;
+export const MAX_GATEWAY_V2_COOKIE_BYTES = 16 * 1_024;
+const REQUEST_KEYS = new Set(["v", "type", "id", "method", "path", "headers"]);
+const HEADER_KEYS = new Set([
+    "host",
+    "origin",
+    "authorization",
+    "accessControlRequestMethod",
+    "accessControlRequestHeaders",
+    "agentInstanceId",
+]);
+const METHODS = new Set(["GET", "HEAD", "OPTIONS"]);
+const ID_PATTERN = /^[A-Za-z0-9._:-]{1,128}$/;
+const CONTROL_PATTERN = /[\0-\x1f\x7f]/;
+const V2_REQUEST_KEYS = new Set([
+    "v",
+    "type",
+    "id",
+    "method",
+    "path",
+    "headers",
+    "bodyBase64",
+]);
+const V2_REQUEST_HEADER_KEYS = new Set([
+    "host",
+    "origin",
+    "cookie",
+    "contentType",
+    "enrollmentCode",
+]);
+const V2_METHODS = new Set(["GET", "HEAD", "POST"]);
+const V2_AUTH_POST_PATHS = new Set([
+    "/api/auth/register/options",
+    "/api/auth/register/verify",
+    "/api/auth/login/options",
+    "/api/auth/login/verify",
+    "/api/auth/logout",
+]);
+const V2_PROGRESS_REPORT_STATUS_OVERRIDE_PATH = /^\/api\/progress-reports\/[A-Za-z0-9][A-Za-z0-9_-]{0,63}\/status-override$/;
+export function isForwardableV2PostPath(path) {
+    return V2_AUTH_POST_PATHS.has(path) || V2_PROGRESS_REPORT_STATUS_OVERRIDE_PATH.test(path);
+}
+const V2_RESPONSE_KEYS = new Set([
+    "v",
+    "type",
+    "id",
+    "status",
+    "headers",
+    "bodyBase64",
+]);
+const V2_RESPONSE_HEADER_KEYS = new Set([
+    "allow",
+    "cacheControl",
+    "contentLength",
+    "contentType",
+    "etag",
+    "retryAfter",
+    "setCookies",
+    "validatorSchemaId",
+    "vary",
+]);
+const REQUEST_HEADER_NAMES = {
+    host: "host",
+    origin: "origin",
+    authorization: "authorization",
+    accessControlRequestMethod: "access-control-request-method",
+    accessControlRequestHeaders: "access-control-request-headers",
+    agentInstanceId: "x-clinkx-agent-instance-id",
+};
+const V2_REQUEST_HEADER_NAMES = {
+    host: "host",
+    origin: "origin",
+    cookie: "cookie",
+    contentType: "content-type",
+    enrollmentCode: "x-enrollment-code",
+};
+const V2_RESPONSE_HEADER_NAMES = {
+    allow: "allow",
+    cacheControl: "cache-control",
+    contentLength: "content-length",
+    contentType: "content-type",
+    etag: "etag",
+    retryAfter: "retry-after",
+    validatorSchemaId: "x-clinkx-validator-schema-id",
+    vary: "vary",
+};
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function hasExactKeys(record, keys) {
+    return Object.keys(record).every((key) => keys.has(key));
+}
+function admittedHeader(headers, key, maximum, required = false) {
+    const value = headers[key];
+    if (value === undefined && !required)
+        return undefined;
+    if (typeof value !== "string"
+        || value.length === 0
+        || value.length > maximum
+        || CONTROL_PATTERN.test(value)) {
+        throw new Error(`gateway request header ${key} is invalid`);
+    }
+    try {
+        validateHeaderValue(REQUEST_HEADER_NAMES[key], value);
+    }
+    catch {
+        throw new Error(`gateway request header ${key} is invalid`);
+    }
+    return value;
+}
+function admittedPath(path) {
+    if (typeof path !== "string"
+        || path.length === 0
+        || path.length > MAX_GATEWAY_REQUEST_PATH_CHARS
+        || CONTROL_PATTERN.test(path)
+        || path.includes("\\")
+        || path.includes("#")) {
+        throw new Error("gateway request path is invalid");
+    }
+    const parsed = new URL(path, "http://dashboard.invalid");
+    if (parsed.origin !== "http://dashboard.invalid"
+        || `${parsed.pathname}${parsed.search}` !== path
+        || !(parsed.pathname === "/api" || parsed.pathname.startsWith("/api/"))) {
+        throw new Error("gateway request path is outside /api");
+    }
+    return path;
+}
+function admittedV2Path(path, method) {
+    if (typeof path !== "string"
+        || path.length === 0
+        || Buffer.byteLength(path) > MAX_GATEWAY_V2_REQUEST_PATH_BYTES
+        || CONTROL_PATTERN.test(path)
+        || path.includes("\\")
+        || path.includes("#")) {
+        throw new Error("gateway v2 request path is invalid");
+    }
+    const parsed = new URL(path, "http://dashboard.invalid");
+    if (parsed.origin !== "http://dashboard.invalid"
+        || `${parsed.pathname}${parsed.search}` !== path
+        || !(parsed.pathname === "/api" || parsed.pathname.startsWith("/api/"))) {
+        throw new Error("gateway v2 request path is outside /api");
+    }
+    if (method === "POST" && !isForwardableV2PostPath(path)) {
+        throw new Error("gateway v2 POST path is unsupported");
+    }
+    return path;
+}
+function admittedV2Header(headers, key, maximumBytes, required = false) {
+    const value = headers[key];
+    if (value === undefined && !required)
+        return undefined;
+    if (typeof value !== "string"
+        || value.length === 0
+        || Buffer.byteLength(value) > maximumBytes
+        || CONTROL_PATTERN.test(value)) {
+        throw new Error(`gateway v2 request header ${key} is invalid`);
+    }
+    try {
+        validateHeaderValue(V2_REQUEST_HEADER_NAMES[key], value);
+    }
+    catch {
+        throw new Error(`gateway v2 request header ${key} is invalid`);
+    }
+    return value;
+}
+function admittedCanonicalBase64(value, maximumDecodedBytes, label) {
+    if (typeof value !== "string" || value.length % 4 !== 0) {
+        throw new Error(`${label} is not canonical base64`);
+    }
+    const padding = value.endsWith("==") ? 2 : value.endsWith("=") ? 1 : 0;
+    const decodedLength = (value.length / 4) * 3 - padding;
+    if (decodedLength > maximumDecodedBytes) {
+        throw new Error(`${label} is too large`);
+    }
+    const decoded = Buffer.from(value, "base64");
+    if (decoded.byteLength !== decodedLength
+        || decoded.toString("base64") !== value) {
+        throw new Error(`${label} is not canonical base64`);
+    }
+    return value;
+}
+/** Strictly admit one bounded gateway v1 request frame. */
+export function parseGatewayRequest(raw) {
+    const bytes = typeof raw === "string" ? Buffer.byteLength(raw) : raw.byteLength;
+    if (bytes > MAX_GATEWAY_REQUEST_BYTES) {
+        throw new Error("gateway request frame is too large");
+    }
+    let value;
+    try {
+        value = JSON.parse(typeof raw === "string" ? raw : raw.toString("utf8"));
+    }
+    catch {
+        throw new Error("gateway request frame is not valid JSON");
+    }
+    if (!isRecord(value) || !hasExactKeys(value, REQUEST_KEYS)) {
+        throw new Error("gateway request frame has an invalid shape");
+    }
+    if (value.v !== 1 || value.type !== "request") {
+        throw new Error("gateway request version or type is unsupported");
+    }
+    if (typeof value.id !== "string" || !ID_PATTERN.test(value.id)) {
+        throw new Error("gateway request id is invalid");
+    }
+    if (typeof value.method !== "string" || !METHODS.has(value.method)) {
+        throw new Error("gateway request method is unsupported");
+    }
+    if (!isRecord(value.headers) || !hasExactKeys(value.headers, HEADER_KEYS)) {
+        throw new Error("gateway request headers have an invalid shape");
+    }
+    const host = admittedHeader(value.headers, "host", 255, true);
+    const origin = admittedHeader(value.headers, "origin", 2_048);
+    const authorization = admittedHeader(value.headers, "authorization", 4_096);
+    const accessControlRequestMethod = admittedHeader(value.headers, "accessControlRequestMethod", 32);
+    const accessControlRequestHeaders = admittedHeader(value.headers, "accessControlRequestHeaders", 1_024);
+    const agentInstanceId = admittedHeader(value.headers, "agentInstanceId", 128);
+    return {
+        v: 1,
+        type: "request",
+        id: value.id,
+        method: value.method,
+        path: admittedPath(value.path),
+        headers: {
+            host,
+            ...(origin === undefined ? {} : { origin }),
+            ...(authorization === undefined ? {} : { authorization }),
+            ...(accessControlRequestMethod === undefined
+                ? {}
+                : { accessControlRequestMethod }),
+            ...(accessControlRequestHeaders === undefined
+                ? {}
+                : { accessControlRequestHeaders }),
+            ...(agentInstanceId === undefined ? {} : { agentInstanceId }),
+        },
+    };
+}
+/** Strictly admit one negotiated gateway v2 request frame. */
+export function parseGatewayV2Request(raw) {
+    const bytes = typeof raw === "string" ? Buffer.byteLength(raw) : raw.byteLength;
+    if (bytes > MAX_GATEWAY_V2_REQUEST_BYTES) {
+        throw new Error("gateway v2 request frame is too large");
+    }
+    let value;
+    try {
+        value = JSON.parse(typeof raw === "string" ? raw : raw.toString("utf8"));
+    }
+    catch {
+        throw new Error("gateway v2 request frame is not valid JSON");
+    }
+    if (!isRecord(value) || !hasExactKeys(value, V2_REQUEST_KEYS)) {
+        throw new Error("gateway v2 request frame has an invalid shape");
+    }
+    if (value.v !== 2 || value.type !== "request") {
+        throw new Error("gateway v2 request version or type is unsupported");
+    }
+    if (typeof value.id !== "string" || !ID_PATTERN.test(value.id)) {
+        throw new Error("gateway v2 request id is invalid");
+    }
+    if (typeof value.method !== "string"
+        || !V2_METHODS.has(value.method)) {
+        throw new Error("gateway v2 request method is unsupported");
+    }
+    if (!isRecord(value.headers)
+        || !hasExactKeys(value.headers, V2_REQUEST_HEADER_KEYS)) {
+        throw new Error("gateway v2 request frame has an invalid shape");
+    }
+    if (Buffer.byteLength(JSON.stringify(value.headers)) > MAX_GATEWAY_V2_HEADER_BYTES) {
+        throw new Error("gateway v2 request headers are too large");
+    }
+    const method = value.method;
+    const path = admittedV2Path(value.path, method);
+    const bodyBase64 = admittedCanonicalBase64(value.bodyBase64, MAX_GATEWAY_V2_REQUEST_BODY_BYTES, "gateway v2 request body");
+    if (method !== "POST" && bodyBase64 !== "") {
+        throw new Error("gateway v2 read requests must not contain a body");
+    }
+    const host = admittedV2Header(value.headers, "host", 255, true);
+    const origin = admittedV2Header(value.headers, "origin", 2_048);
+    const cookie = admittedV2Header(value.headers, "cookie", MAX_GATEWAY_V2_COOKIE_BYTES);
+    const contentType = admittedV2Header(value.headers, "contentType", 256);
+    const enrollmentCode = admittedV2Header(value.headers, "enrollmentCode", 128);
+    if (method === "POST" && contentType === undefined) {
+        throw new Error("gateway v2 POST requests require contentType");
+    }
+    if (method !== "POST" && (contentType !== undefined || enrollmentCode !== undefined)) {
+        throw new Error("gateway v2 read request headers are invalid");
+    }
+    if (enrollmentCode !== undefined
+        && path !== "/api/auth/register/options"
+        && path !== "/api/auth/register/verify") {
+        throw new Error("gateway v2 enrollmentCode is invalid for this path");
+    }
+    return {
+        v: 2,
+        type: "request",
+        id: value.id,
+        method,
+        path,
+        headers: {
+            host,
+            ...(origin === undefined ? {} : { origin }),
+            ...(cookie === undefined ? {} : { cookie }),
+            ...(contentType === undefined ? {} : { contentType }),
+            ...(enrollmentCode === undefined ? {} : { enrollmentCode }),
+        },
+        bodyBase64,
+    };
+}
+function admittedV2ResponseHeader(headers, key, maximumBytes) {
+    const value = headers[key];
+    if (value === undefined)
+        return undefined;
+    if (typeof value !== "string"
+        || value.length === 0
+        || Buffer.byteLength(value) > maximumBytes
+        || CONTROL_PATTERN.test(value)) {
+        throw new Error(`gateway v2 response header ${key} is invalid`);
+    }
+    try {
+        validateHeaderValue(V2_RESPONSE_HEADER_NAMES[key], value);
+    }
+    catch {
+        throw new Error(`gateway v2 response header ${key} is invalid`);
+    }
+    return value;
+}
+function admittedV2SetCookies(value) {
+    if (value === undefined)
+        return undefined;
+    if (!Array.isArray(value) || value.length === 0 || value.length > 8) {
+        throw new Error("gateway v2 response setCookies is invalid");
+    }
+    const cookies = [];
+    for (const cookie of value) {
+        if (typeof cookie !== "string"
+            || cookie.length === 0
+            || Buffer.byteLength(cookie) > 4 * 1_024
+            || CONTROL_PATTERN.test(cookie)) {
+            throw new Error("gateway v2 response setCookies is invalid");
+        }
+        try {
+            validateHeaderValue("set-cookie", cookie);
+        }
+        catch {
+            throw new Error("gateway v2 response setCookies is invalid");
+        }
+        cookies.push(cookie);
+    }
+    return cookies;
+}
+/** Strictly admit one negotiated gateway v2 response frame. */
+export function parseGatewayV2Response(raw) {
+    const bytes = typeof raw === "string" ? Buffer.byteLength(raw) : raw.byteLength;
+    if (bytes > MAX_GATEWAY_V2_RESPONSE_BYTES) {
+        throw new Error("gateway v2 response frame is too large");
+    }
+    let value;
+    try {
+        value = JSON.parse(typeof raw === "string" ? raw : raw.toString("utf8"));
+    }
+    catch {
+        throw new Error("gateway v2 response frame is not valid JSON");
+    }
+    if (!isRecord(value) || !hasExactKeys(value, V2_RESPONSE_KEYS)) {
+        throw new Error("gateway v2 response frame has an invalid shape");
+    }
+    if (value.v !== 2 || value.type !== "response") {
+        throw new Error("gateway v2 response version or type is unsupported");
+    }
+    if (typeof value.id !== "string" || !ID_PATTERN.test(value.id)) {
+        throw new Error("gateway v2 response id is invalid");
+    }
+    if (!Number.isInteger(value.status)
+        || value.status < 100
+        || value.status > 599
+        || !isRecord(value.headers)
+        || !hasExactKeys(value.headers, V2_RESPONSE_HEADER_KEYS)) {
+        throw new Error("gateway v2 response frame has an invalid shape");
+    }
+    if (Buffer.byteLength(JSON.stringify(value.headers)) > MAX_GATEWAY_V2_HEADER_BYTES) {
+        throw new Error("gateway v2 response headers are too large");
+    }
+    const allow = admittedV2ResponseHeader(value.headers, "allow", 1_024);
+    const cacheControl = admittedV2ResponseHeader(value.headers, "cacheControl", 1_024);
+    const contentLength = admittedV2ResponseHeader(value.headers, "contentLength", 32);
+    if (contentLength !== undefined) {
+        if (!/^(0|[1-9]\d*)$/.test(contentLength)) {
+            throw new Error("gateway v2 response header contentLength is invalid");
+        }
+        const parsedContentLength = Number(contentLength);
+        if (!Number.isSafeInteger(parsedContentLength)
+            || parsedContentLength > MAX_DASHBOARD_RESPONSE_BYTES) {
+            throw new Error("gateway v2 response header contentLength is invalid");
+        }
+    }
+    const contentType = admittedV2ResponseHeader(value.headers, "contentType", 256);
+    const etag = admittedV2ResponseHeader(value.headers, "etag", 4_096);
+    const retryAfter = admittedV2ResponseHeader(value.headers, "retryAfter", 256);
+    const setCookies = admittedV2SetCookies(value.headers.setCookies);
+    const validatorSchemaId = admittedV2ResponseHeader(value.headers, "validatorSchemaId", 256);
+    const vary = admittedV2ResponseHeader(value.headers, "vary", 1_024);
+    const bodyBase64 = admittedCanonicalBase64(value.bodyBase64, MAX_DASHBOARD_RESPONSE_BYTES, "gateway v2 response body");
+    return {
+        v: 2,
+        type: "response",
+        id: value.id,
+        status: value.status,
+        headers: {
+            ...(allow === undefined ? {} : { allow }),
+            ...(cacheControl === undefined ? {} : { cacheControl }),
+            ...(contentLength === undefined ? {} : { contentLength }),
+            ...(contentType === undefined ? {} : { contentType }),
+            ...(etag === undefined ? {} : { etag }),
+            ...(retryAfter === undefined ? {} : { retryAfter }),
+            ...(setCookies === undefined ? {} : { setCookies }),
+            ...(validatorSchemaId === undefined ? {} : { validatorSchemaId }),
+            ...(vary === undefined ? {} : { vary }),
+        },
+        bodyBase64,
+    };
+}
+export function companionProxyFailureV2(id) {
+    return {
+        v: 2,
+        type: "response",
+        id,
+        status: 502,
+        headers: {
+            cacheControl: "no-store",
+            contentType: "application/json; charset=utf-8",
+        },
+        bodyBase64: Buffer.from('{"error":{"code":"companion_proxy_failed"}}\n', "utf8").toString("base64"),
+    };
+}
+export function companionProxyFailure(id) {
+    return {
+        v: 1,
+        type: "response",
+        id,
+        status: 502,
+        headers: {
+            "cache-control": "no-store",
+            "content-type": "application/json; charset=utf-8",
+        },
+        bodyBase64: Buffer.from('{"error":{"code":"companion_proxy_failed"}}\n', "utf8").toString("base64"),
+    };
+}
+//# sourceMappingURL=protocol.js.map

package/dist/dashboard-companion/protocol.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol.js","sourceRoot":"","sources":["../../src/dashboard-companion/protocol.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAEhD,MAAM,CAAC,MAAM,yBAAyB,GAAG,EAAE,GAAG,KAAK,CAAC;AACpD,MAAM,CAAC,MAAM,8BAA8B,GAAG,KAAK,CAAC;AACpD,MAAM,CAAC,MAAM,4BAA4B,GAAG,EAAE,GAAG,KAAK,GAAG,KAAK,CAAC;AAC/D,MAAM,CAAC,MAAM,gCAAgC,GAAG,6BAA6B,CAAC;AAC9E,MAAM,CAAC,MAAM,4BAA4B,GAAG,GAAG,GAAG,KAAK,CAAC;AACxD,MAAM,CAAC,MAAM,iCAAiC,GAAG,GAAG,GAAG,KAAK,CAAC;AAC7D,MAAM,CAAC,MAAM,iCAAiC,GAAG,KAAK,CAAC;AACvD,MAAM,CAAC,MAAM,2BAA2B,GAAG,EAAE,GAAG,KAAK,CAAC;AACtD,MAAM,CAAC,MAAM,6BAA6B,GAAG,EAAE,GAAG,KAAK,GAAG,KAAK,CAAC;AAChE,MAAM,CAAC,MAAM,2BAA2B,GAAG,EAAE,GAAG,KAAK,CAAC;AAwEtD,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;AAC/E,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC;IAC1B,MAAM;IACN,QAAQ;IACR,eAAe;IACf,4BAA4B;IAC5B,6BAA6B;IAC7B,iBAAiB;CAClB,CAAC,CAAC;AACH,MAAM,OAAO,GAAG,IAAI,GAAG,CAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;AACnE,MAAM,UAAU,GAAG,0BAA0B,CAAC;AAC9C,MAAM,eAAe,GAAG,eAAe,CAAC;AACxC,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC;IAC9B,GAAG;IACH,MAAM;IACN,IAAI;IACJ,QAAQ;IACR,MAAM;IACN,SAAS;IACT,YAAY;CACb,CAAC,CAAC;AACH,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAC;IACrC,MAAM;IACN,QAAQ;IACR,QAAQ;IACR,aAAa;IACb,gBAAgB;CACjB,CAAC,CAAC;AACH,MAAM,UAAU,GAAG,IAAI,GAAG,CAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AACrE,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC;IACjC,4BAA4B;IAC5B,2BAA2B;IAC3B,yBAAyB;IACzB,wBAAwB;IACxB,kBAAkB;CACnB,CAAC,CAAC;AACH,MAAM,uCAAuC,GAC3C,4EAA4E,CAAC;AAE/E,MAAM,UAAU,uBAAuB,CAAC,IAAY;IAClD,OAAO,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,uCAAuC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC5F,CAAC;AAED,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC;IAC/B,GAAG;IACH,MAAM;IACN,IAAI;IACJ,QAAQ;IACR,SAAS;IACT,YAAY;CACb,CAAC,CAAC;AACH,MAAM,uBAAuB,GAAG,IAAI,GAAG,CAAC;IACtC,OAAO;IACP,cAAc;IACd,eAAe;IACf,aAAa;IACb,MAAM;IACN,YAAY;IACZ,YAAY;IACZ,mBAAmB;IACnB,MAAM;CACP,CAAC,CAAC;AACH,MAAM,oBAAoB,GAA0D;IAClF,IAAI,EAAE,MAAM;IACZ,MAAM,EAAE,QAAQ;IAChB,aAAa,EAAE,eAAe;IAC9B,0BAA0B,EAAE,+BAA+B;IAC3D,2BAA2B,EAAE,gCAAgC;IAC7D,eAAe,EAAE,4BAA4B;CAC9C,CAAC;AACF,MAAM,uBAAuB,GAA4D;IACvF,IAAI,EAAE,MAAM;IACZ,MAAM,EAAE,QAAQ;IAChB,MAAM,EAAE,QAAQ;IAChB,WAAW,EAAE,cAAc;IAC3B,cAAc,EAAE,mBAAmB;CACpC,CAAC;AACF,MAAM,wBAAwB,GAGzB;IACH,KAAK,EAAE,OAAO;IACd,YAAY,EAAE,eAAe;IAC7B,aAAa,EAAE,gBAAgB;IAC/B,WAAW,EAAE,cAAc;IAC3B,IAAI,EAAE,MAAM;IACZ,UAAU,EAAE,aAAa;IACzB,iBAAiB,EAAE,8BAA8B;IACjD,IAAI,EAAE,MAAM;CACb,CAAC;AAEF,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,YAAY,CAAC,MAA+B,EAAE,IAAyB;IAC9E,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,cAAc,CACrB,OAAgC,EAChC,GAAgC,EAChC,OAAe,EACf,QAAQ,GAAG,KAAK;IAEhB,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IAC3B,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,QAAQ;QAAE,OAAO,SAAS,CAAC;IACvD,IACE,OAAO,KAAK,KAAK,QAAQ;WACtB,KAAK,CAAC,MAAM,KAAK,CAAC;WAClB,KAAK,CAAC,MAAM,GAAG,OAAO;WACtB,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,EAC9B,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,0BAA0B,GAAG,aAAa,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,CAAC;QACH,mBAAmB,CAAC,oBAAoB,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,0BAA0B,GAAG,aAAa,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,YAAY,CAAC,IAAa;IACjC,IACE,OAAO,IAAI,KAAK,QAAQ;WACrB,IAAI,CAAC,MAAM,KAAK,CAAC;WACjB,IAAI,CAAC,MAAM,GAAG,8BAA8B;WAC5C,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC;WAC1B,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;WACnB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EACrB,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,0BAA0B,CAAC,CAAC;IACzD,IACE,MAAM,CAAC,MAAM,KAAK,0BAA0B;WACzC,GAAG,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,IAAI;WAC7C,CAAC,CAAC,MAAM,CAAC,QAAQ,KAAK,MAAM,IAAI,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,EACvE,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,cAAc,CAAC,IAAa,EAAE,MAAuB;IAC5D,IACE,OAAO,IAAI,KAAK,QAAQ;WACrB,IAAI,CAAC,MAAM,KAAK,CAAC;WACjB,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,iCAAiC;WAC3D,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC;WAC1B,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;WACnB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EACrB,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACxD,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,0BAA0B,CAAC,CAAC;IACzD,IACE,MAAM,CAAC,MAAM,KAAK,0BAA0B;WACzC,GAAG,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,IAAI;WAC7C,CAAC,CAAC,MAAM,CAAC,QAAQ,KAAK,MAAM,IAAI,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,EACvE,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7D,CAAC;IACD,IAAI,MAAM,KAAK,MAAM,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,gBAAgB,CACvB,OAAgC,EAChC,GAAkC,EAClC,YAAoB,EACpB,QAAQ,GAAG,KAAK;IAEhB,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IAC3B,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,QAAQ;QAAE,OAAO,SAAS,CAAC;IACvD,IACE,OAAO,KAAK,KAAK,QAAQ;WACtB,KAAK,CAAC,MAAM,KAAK,CAAC;WAClB,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,YAAY;WACvC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,EAC9B,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,6BAA6B,GAAG,aAAa,CAAC,CAAC;IACjE,CAAC;IACD,IAAI,CAAC;QACH,mBAAmB,CAAC,uBAAuB,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;IAC3D,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,6BAA6B,GAAG,aAAa,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,uBAAuB,CAC9B,KAAc,EACd,mBAA2B,EAC3B,KAAa;IAEb,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,0BAA0B,CAAC,CAAC;IACtD,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACvE,MAAM,aAAa,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC;IACvD,IAAI,aAAa,GAAG,mBAAmB,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,eAAe,CAAC,CAAC;IAC3C,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IAC7C,IACE,OAAO,CAAC,UAAU,KAAK,aAAa;WACjC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,KAAK,EACvC,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,0BAA0B,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,2DAA2D;AAC3D,MAAM,UAAU,mBAAmB,CAAC,GAAoB;IACtD,MAAM,KAAK,GAAG,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC;IAChF,IAAI,KAAK,GAAG,yBAAyB,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACxD,CAAC;IACD,IAAI,KAAc,CAAC;IACnB,IAAI,CAAC;QACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAC3E,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7D,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,YAAY,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,CAAC;IACD,IAAI,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;QAC/D,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACnD,CAAC;IACD,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAuB,CAAC,EAAE,CAAC;QACpF,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,OAAO,EAAE,WAAW,CAAC,EAAE,CAAC;QAC1E,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;IAED,MAAM,IAAI,GAAG,cAAc,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,CAAE,CAAC;IAC/D,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC9D,MAAM,aAAa,GAAG,cAAc,CAAC,KAAK,CAAC,OAAO,EAAE,eAAe,EAAE,KAAK,CAAC,CAAC;IAC5E,MAAM,0BAA0B,GAAG,cAAc,CAC/C,KAAK,CAAC,OAAO,EACb,4BAA4B,EAC5B,EAAE,CACH,CAAC;IACF,MAAM,2BAA2B,GAAG,cAAc,CAChD,KAAK,CAAC,OAAO,EACb,6BAA6B,EAC7B,KAAK,CACN,CAAC;IACF,MAAM,eAAe,GAAG,cAAc,CAAC,KAAK,CAAC,OAAO,EAAE,iBAAiB,EAAE,GAAG,CAAC,CAAC;IAE9E,OAAO;QACL,CAAC,EAAE,CAAC;QACJ,IAAI,EAAE,SAAS;QACf,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,MAAM,EAAE,KAAK,CAAC,MAAuB;QACrC,IAAI,EAAE,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC;QAC9B,OAAO,EAAE;YACP,IAAI;YACJ,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;YAC3C,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC;YACzD,GAAG,CAAC,0BAA0B,KAAK,SAAS;gBAC1C,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,0BAA0B,EAAE,CAAC;YACnC,GAAG,CAAC,2BAA2B,KAAK,SAAS;gBAC3C,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,2BAA2B,EAAE,CAAC;YACpC,GAAG,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC;SAC9D;KACF,CAAC;AACJ,CAAC;AAED,8DAA8D;AAC9D,MAAM,UAAU,qBAAqB,CAAC,GAAoB;IACxD,MAAM,KAAK,GAAG,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC;IAChF,IAAI,KAAK,GAAG,4BAA4B,EAAE,CAAC;QACzC,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,KAAc,CAAC;IACnB,IAAI,CAAC;QACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAC3E,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,eAAe,CAAC,EAAE,CAAC;QAC9D,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;IACD,IAAI,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,CAAC;IACD,IAAI,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;QAC/D,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtD,CAAC;IACD,IACE,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ;WAC7B,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,MAAyB,CAAC,EACnD,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IACD,IACE,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC;WACrB,CAAC,YAAY,CAAC,KAAK,CAAC,OAAO,EAAE,sBAAsB,CAAC,EACvD,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;IACD,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,2BAA2B,EAAE,CAAC;QACnF,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAyB,CAAC;IAC/C,MAAM,IAAI,GAAG,cAAc,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAChD,MAAM,UAAU,GAAG,uBAAuB,CACxC,KAAK,CAAC,UAAU,EAChB,iCAAiC,EACjC,yBAAyB,CAC1B,CAAC;IACF,IAAI,MAAM,KAAK,MAAM,IAAI,UAAU,KAAK,EAAE,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtE,CAAC;IACD,MAAM,IAAI,GAAG,gBAAgB,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,CAAE,CAAC;IACjE,MAAM,MAAM,GAAG,gBAAgB,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;IAChE,MAAM,MAAM,GAAG,gBAAgB,CAC7B,KAAK,CAAC,OAAO,EACb,QAAQ,EACR,2BAA2B,CAC5B,CAAC;IACF,MAAM,WAAW,GAAG,gBAAgB,CAAC,KAAK,CAAC,OAAO,EAAE,aAAa,EAAE,GAAG,CAAC,CAAC;IACxE,MAAM,cAAc,GAAG,gBAAgB,CAAC,KAAK,CAAC,OAAO,EAAE,gBAAgB,EAAE,GAAG,CAAC,CAAC;IAC9E,IAAI,MAAM,KAAK,MAAM,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QACnD,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;IACD,IAAI,MAAM,KAAK,MAAM,IAAI,CAAC,WAAW,KAAK,SAAS,IAAI,cAAc,KAAK,SAAS,CAAC,EAAE,CAAC;QACrF,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjE,CAAC;IACD,IACE,cAAc,KAAK,SAAS;WACzB,IAAI,KAAK,4BAA4B;WACrC,IAAI,KAAK,2BAA2B,EACvC,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IACD,OAAO;QACL,CAAC,EAAE,CAAC;QACJ,IAAI,EAAE,SAAS;QACf,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,MAAM;QACN,IAAI;QACJ,OAAO,EAAE;YACP,IAAI;YACJ,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;YAC3C,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;YAC3C,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;YACrD,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC;SAC5D;QACD,UAAU;KACX,CAAC;AACJ,CAAC;AAED,SAAS,wBAAwB,CAC/B,OAAgC,EAChC,GAA0D,EAC1D,YAAoB;IAEpB,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IAC3B,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,IACE,OAAO,KAAK,KAAK,QAAQ;WACtB,KAAK,CAAC,MAAM,KAAK,CAAC;WAClB,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,YAAY;WACvC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,EAC9B,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,8BAA8B,GAAG,aAAa,CAAC,CAAC;IAClE,CAAC;IACD,IAAI,CAAC;QACH,mBAAmB,CAAC,wBAAwB,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,8BAA8B,GAAG,aAAa,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAc;IAC1C,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,CAAC;IACD,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,MAAM,IAAI,KAAK,EAAE,CAAC;QAC3B,IACE,OAAO,MAAM,KAAK,QAAQ;eACvB,MAAM,CAAC,MAAM,KAAK,CAAC;eACnB,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK;eACrC,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,EAC/B,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC/D,CAAC;QACD,IAAI,CAAC;YACH,mBAAmB,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QAC5C,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC/D,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,+DAA+D;AAC/D,MAAM,UAAU,sBAAsB,CAAC,GAAoB;IACzD,MAAM,KAAK,GAAG,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC;IAChF,IAAI,KAAK,GAAG,6BAA6B,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,CAAC;IACD,IAAI,KAAc,CAAC;IACnB,IAAI,CAAC;QACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAC3E,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjE,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,gBAAgB,CAAC,EAAE,CAAC;QAC/D,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAC/C,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;QAC/D,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACvD,CAAC;IACD,IACE,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC;WAC3B,KAAK,CAAC,MAAiB,GAAG,GAAG;WAC7B,KAAK,CAAC,MAAiB,GAAG,GAAG;WAC9B,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC;WACxB,CAAC,YAAY,CAAC,KAAK,CAAC,OAAO,EAAE,uBAAuB,CAAC,EACxD,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,2BAA2B,EAAE,CAAC;QACnF,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,CAAC;IACD,MAAM,KAAK,GAAG,wBAAwB,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;IACtE,MAAM,YAAY,GAAG,wBAAwB,CAAC,KAAK,CAAC,OAAO,EAAE,cAAc,EAAE,KAAK,CAAC,CAAC;IACpF,MAAM,aAAa,GAAG,wBAAwB,CAAC,KAAK,CAAC,OAAO,EAAE,eAAe,EAAE,EAAE,CAAC,CAAC;IACnF,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;QAChC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;YAC1C,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;QACzE,CAAC;QACD,MAAM,mBAAmB,GAAG,MAAM,CAAC,aAAa,CAAC,CAAC;QAClD,IACE,CAAC,MAAM,CAAC,aAAa,CAAC,mBAAmB,CAAC;eACvC,mBAAmB,GAAG,4BAA4B,EACrD,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;QACzE,CAAC;IACH,CAAC;IACD,MAAM,WAAW,GAAG,wBAAwB,CAAC,KAAK,CAAC,OAAO,EAAE,aAAa,EAAE,GAAG,CAAC,CAAC;IAChF,MAAM,IAAI,GAAG,wBAAwB,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;IACpE,MAAM,UAAU,GAAG,wBAAwB,CAAC,KAAK,CAAC,OAAO,EAAE,YAAY,EAAE,GAAG,CAAC,CAAC;IAC9E,MAAM,UAAU,GAAG,oBAAoB,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAClE,MAAM,iBAAiB,GAAG,wBAAwB,CAChD,KAAK,CAAC,OAAO,EACb,mBAAmB,EACnB,GAAG,CACJ,CAAC;IACF,MAAM,IAAI,GAAG,wBAAwB,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;IACpE,MAAM,UAAU,GAAG,uBAAuB,CACxC,KAAK,CAAC,UAAU,EAChB,4BAA4B,EAC5B,0BAA0B,CAC3B,CAAC;IACF,OAAO;QACL,CAAC,EAAE,CAAC;QACJ,IAAI,EAAE,UAAU;QAChB,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,MAAM,EAAE,KAAK,CAAC,MAAgB;QAC9B,OAAO,EAAE;YACP,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;YACzC,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC;YACvD,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC;YACzD,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;YACrD,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;YACvC,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC;YACnD,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC;YACnD,GAAG,CAAC,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,CAAC;YACjE,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;SACxC;QACD,UAAU;KACX,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,EAAU;IAChD,OAAO;QACL,CAAC,EAAE,CAAC;QACJ,IAAI,EAAE,UAAU;QAChB,EAAE;QACF,MAAM,EAAE,GAAG;QACX,OAAO,EAAE;YACP,YAAY,EAAE,UAAU;YACxB,WAAW,EAAE,iCAAiC;SAC/C;QACD,UAAU,EAAE,MAAM,CAAC,IAAI,CACrB,+CAA+C,EAC/C,MAAM,CACP,CAAC,QAAQ,CAAC,QAAQ,CAAC;KACrB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,EAAU;IAC9C,OAAO;QACL,CAAC,EAAE,CAAC;QACJ,IAAI,EAAE,UAAU;QAChB,EAAE;QACF,MAAM,EAAE,GAAG;QACX,OAAO,EAAE;YACP,eAAe,EAAE,UAAU;YAC3B,cAAc,EAAE,iCAAiC;SAClD;QACD,UAAU,EAAE,MAAM,CAAC,IAAI,CACrB,+CAA+C,EAC/C,MAAM,CACP,CAAC,QAAQ,CAAC,QAAQ,CAAC;KACrB,CAAC;AACJ,CAAC"}

package/dist/dashboard-companion/standalone-assets.d.ts

@@ -0,0 +1,12 @@
+export interface StandaloneAssetSource {
+    readonly keys: () => readonly string[];
+    readonly read: (key: string) => ArrayBuffer;
+}
+export interface MaterializedStandaloneRuntime {
+    readonly root: string;
+    readonly dashboardStaticRoot: string;
+    readonly cleanup: () => void;
+}
+/** Materialize immutable SEA assets into a private, process-owned runtime tree. */
+export declare function materializeStandaloneRuntime(source?: StandaloneAssetSource): MaterializedStandaloneRuntime;
+export declare function prepareStandaloneEnvironment(env: NodeJS.ProcessEnv): MaterializedStandaloneRuntime;

package/dist/dashboard-companion/standalone-assets.js

@@ -0,0 +1,72 @@
+import { mkdirSync, mkdtempSync, rmSync, writeFileSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { dirname, join, normalize, relative, resolve, sep } from "node:path";
+import { getAsset, getAssetKeys, isSea } from "node:sea";
+const ASSET_PREFIX = "clinkx-runtime/";
+const MAX_EMBEDDED_ASSET_BYTES = 16 * 1_024 * 1_024;
+const MAX_EMBEDDED_TOTAL_BYTES = 48 * 1_024 * 1_024;
+function safeRelativeAssetPath(key) {
+    if (!key.startsWith(ASSET_PREFIX)) {
+        throw new Error(`standalone asset key is outside ${ASSET_PREFIX}`);
+    }
+    const raw = key.slice(ASSET_PREFIX.length);
+    if (raw === "" || raw.includes("\\") || raw.includes("\0")) {
+        throw new Error("standalone asset key is invalid");
+    }
+    const normalized = normalize(raw);
+    if (normalized === "."
+        || normalized.startsWith(`..${sep}`)
+        || normalized === ".."
+        || normalized.startsWith(sep)) {
+        throw new Error("standalone asset key escapes the runtime root");
+    }
+    return normalized;
+}
+/** Materialize immutable SEA assets into a private, process-owned runtime tree. */
+export function materializeStandaloneRuntime(source = {
+    keys: getAssetKeys,
+    read: (key) => getAsset(key),
+}) {
+    const root = mkdtempSync(join(tmpdir(), "clinkx-dashboard-"));
+    let totalBytes = 0;
+    try {
+        for (const key of [...source.keys()].sort()) {
+            const assetPath = safeRelativeAssetPath(key);
+            const outputPath = resolve(root, assetPath);
+            const relation = relative(root, outputPath);
+            if (relation.startsWith("..") || relation === "" || relation.startsWith(sep)) {
+                throw new Error("standalone asset path escaped the runtime root");
+            }
+            const bytes = Buffer.from(source.read(key));
+            if (bytes.byteLength > MAX_EMBEDDED_ASSET_BYTES) {
+                throw new Error(`standalone asset exceeds 16 MiB: ${key}`);
+            }
+            totalBytes += bytes.byteLength;
+            if (totalBytes > MAX_EMBEDDED_TOTAL_BYTES) {
+                throw new Error("standalone assets exceed the 48 MiB total limit");
+            }
+            mkdirSync(dirname(outputPath), { recursive: true, mode: 0o700 });
+            writeFileSync(outputPath, bytes, { flag: "wx", mode: 0o600 });
+        }
+        const dashboardStaticRoot = join(root, "dashboard-ui");
+        return {
+            root,
+            dashboardStaticRoot,
+            cleanup: () => rmSync(root, { force: true, recursive: true }),
+        };
+    }
+    catch (error) {
+        rmSync(root, { force: true, recursive: true });
+        throw error;
+    }
+}
+export function prepareStandaloneEnvironment(env) {
+    if (!isSea())
+        throw new Error("standalone entry must run inside a Node SEA executable");
+    const runtime = materializeStandaloneRuntime();
+    env["CLINKX_CONFIG_PATH"] ??= join(runtime.root, "conf", "adapters");
+    env["CLINKX_WORKFLOWS_PATH"] ??= join(runtime.root, "workflows");
+    env["CLINKX_WORKFLOWS_TEMPLATES_PATH"] ??= join(runtime.root, "templates");
+    return runtime;
+}
+//# sourceMappingURL=standalone-assets.js.map

package/dist/dashboard-companion/standalone-assets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"standalone-assets.js","sourceRoot":"","sources":["../../src/dashboard-companion/standalone-assets.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACxE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAC7E,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,UAAU,CAAC;AAEzD,MAAM,YAAY,GAAG,iBAAiB,CAAC;AACvC,MAAM,wBAAwB,GAAG,EAAE,GAAG,KAAK,GAAG,KAAK,CAAC;AACpD,MAAM,wBAAwB,GAAG,EAAE,GAAG,KAAK,GAAG,KAAK,CAAC;AAapD,SAAS,qBAAqB,CAAC,GAAW;IACxC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,mCAAmC,YAAY,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;IAC3C,IAAI,GAAG,KAAK,EAAE,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,CAAC;IACD,MAAM,UAAU,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;IAClC,IACE,UAAU,KAAK,GAAG;WACf,UAAU,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC;WACjC,UAAU,KAAK,IAAI;WACnB,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,EAC7B,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,4BAA4B,CAC1C,SAAgC;IAC9B,IAAI,EAAE,YAAY;IAClB,IAAI,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAgB;CAC5C;IAED,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,mBAAmB,CAAC,CAAC,CAAC;IAC9D,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,IAAI,CAAC;QACH,KAAK,MAAM,GAAG,IAAI,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YAC5C,MAAM,SAAS,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;YAC7C,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;YAC5C,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;YAC5C,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,QAAQ,KAAK,EAAE,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC7E,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;YACpE,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YAC5C,IAAI,KAAK,CAAC,UAAU,GAAG,wBAAwB,EAAE,CAAC;gBAChD,MAAM,IAAI,KAAK,CAAC,oCAAoC,GAAG,EAAE,CAAC,CAAC;YAC7D,CAAC;YACD,UAAU,IAAI,KAAK,CAAC,UAAU,CAAC;YAC/B,IAAI,UAAU,GAAG,wBAAwB,EAAE,CAAC;gBAC1C,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;YACrE,CAAC;YACD,SAAS,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACjE,aAAa,CAAC,UAAU,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAChE,CAAC;QACD,MAAM,mBAAmB,GAAG,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;QACvD,OAAO;YACL,IAAI;YACJ,mBAAmB;YACnB,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;SAC9D,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/C,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,GAAsB;IACjE,IAAI,CAAC,KAAK,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IACxF,MAAM,OAAO,GAAG,4BAA4B,EAAE,CAAC;IAC/C,GAAG,CAAC,oBAAoB,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;IACrE,GAAG,CAAC,uBAAuB,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IACjE,GAAG,CAAC,iCAAiC,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IAC3E,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/dashboard-companion/standalone-entry.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/dashboard-companion/standalone-entry.js

@@ -0,0 +1,17 @@
+import { prepareStandaloneEnvironment } from "./standalone-assets.js";
+process.env["CLINKX_DASHBOARD_STANDALONE_ENTRY"] = "1";
+const runtime = prepareStandaloneEnvironment(process.env);
+process.once("exit", runtime.cleanup);
+const { runDashboardCli } = await import("../dashboard-cli.js");
+delete process.env["CLINKX_DASHBOARD_STANDALONE_ENTRY"];
+try {
+    await runDashboardCli(process.argv.slice(2), process.env, {
+        staticRoot: runtime.dashboardStaticRoot,
+    });
+}
+catch (error) {
+    const message = error instanceof Error ? error.message : String(error);
+    process.stderr.write(`clinkx-dashboard: ${message}\n`);
+    process.exitCode = 1;
+}
+//# sourceMappingURL=standalone-entry.js.map

package/dist/dashboard-companion/standalone-entry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"standalone-entry.js","sourceRoot":"","sources":["../../src/dashboard-companion/standalone-entry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,4BAA4B,EAAE,MAAM,wBAAwB,CAAC;AAEtE,OAAO,CAAC,GAAG,CAAC,mCAAmC,CAAC,GAAG,GAAG,CAAC;AACvD,MAAM,OAAO,GAAG,4BAA4B,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;AAC1D,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;AAEtC,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAC;AAChE,OAAO,OAAO,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;AAExD,IAAI,CAAC;IACH,MAAM,eAAe,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,GAAG,EAAE;QACxD,UAAU,EAAE,OAAO,CAAC,mBAAmB;KACxC,CAAC,CAAC;AACL,CAAC;AAAC,OAAO,KAAK,EAAE,CAAC;IACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,OAAO,IAAI,CAAC,CAAC;IACvD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AACvB,CAAC"}

package/dist/dashboard-gateway/config.d.ts

@@ -0,0 +1,9 @@
+export interface DashboardGatewayConfig {
+    token: string;
+    host: string;
+    port: number;
+}
+type Environment = Readonly<Record<string, string | undefined>>;
+export declare function parseDashboardGatewayEndpoint(value: string): string;
+export declare function loadDashboardGatewayConfig(env?: Environment): DashboardGatewayConfig;
+export {};

package/dist/dashboard-gateway/config.js

@@ -0,0 +1,44 @@
+import { isDashboardPairingToken } from "../dashboard-pairing-token.js";
+const LOOPBACK_HOSTS = new Set(["localhost", "127.0.0.1", "[::1]"]);
+export function parseDashboardGatewayEndpoint(value) {
+    const message = "Dashboard gateway endpoint must be a canonical HTTPS/WSS origin (HTTP/WS is loopback-only)";
+    let parsed;
+    try {
+        parsed = new URL(value);
+    }
+    catch {
+        throw new Error(message);
+    }
+    const secure = parsed.protocol === "https:" || parsed.protocol === "wss:";
+    const loopback = (parsed.protocol === "http:" || parsed.protocol === "ws:") &&
+        LOOPBACK_HOSTS.has(parsed.hostname);
+    if ((!secure && !loopback) || parsed.origin !== value)
+        throw new Error(message);
+    return parsed.origin;
+}
+function parsePort(value) {
+    if (value === undefined || value === "")
+        return 3000;
+    if (!/^[0-9]+$/.test(value))
+        throw new Error("PORT must be an integer from 1 through 65535");
+    const port = Number(value);
+    if (!Number.isSafeInteger(port) || port < 1 || port > 65_535) {
+        throw new Error("PORT must be an integer from 1 through 65535");
+    }
+    return port;
+}
+export function loadDashboardGatewayConfig(env = process.env) {
+    const token = env.CLINKX_DASHBOARD_GATEWAY_TOKEN;
+    if (token === undefined || token === "") {
+        throw new Error("CLINKX_DASHBOARD_GATEWAY_TOKEN is required");
+    }
+    if (!isDashboardPairingToken(token)) {
+        throw new Error("CLINKX_DASHBOARD_GATEWAY_TOKEN is invalid");
+    }
+    const host = env.CLINKX_DASHBOARD_GATEWAY_HOST ?? env.HOST ?? "0.0.0.0";
+    if (host.length === 0 || /\s/.test(host)) {
+        throw new Error("CLINKX_DASHBOARD_GATEWAY_HOST must be a non-empty host");
+    }
+    return { token, host, port: parsePort(env.PORT) };
+}
+//# sourceMappingURL=config.js.map