dsh-locator 0.8.2 → 0.10.0

package/lib/http.js

@@ -2,91 +2,114 @@
  * Optional HTTP surface for the Web GUI panel.
  *
  * The panel is a browser overlay (client.js) and cannot call the stdio engine
- * directly, so the host exposes two exact routes on the Web server:
+ * directly, so the host exposes exact routes on the Web server:
  *
  *   POST /dsh-locator/search   { query, limit, offset, sort, desc, ... }
  *   POST /dsh-locator/status   {}
  *
+ * Security is fail-closed. The routes only exist when the host's `connection`
+ * service — the browser authentication + Host/Origin trust fence — is
+ * available, so a profile without it mounts no locator HTTP surface at all.
+ * Every request then asks that service for a rejection first; if the service
+ * disappeared or its check fails, the route answers 503 instead of allowing
+ * the call. On top of that fence each request must be a `POST` with an
+ * `application/json` content type (415 otherwise), the body is capped at
+ * 64 KiB, and a cross-site `Origin`/`Sec-Fetch-Site` marker is refused locally
+ * as defense in depth.
+ *
  * Registration is optional: headless and TUI profiles have no `webServer`
  * service, and the plugin still works there through its tools.
  * @module dsh-locator/http
  */
 import { readCombinedRequest, runCombinedSearch } from "./combined.js";
-import { openWithDefaultApp, revealInFileManager, withinRoots } from "./reveal.js";
+import { executableFileRejection, openWithDefaultApp, resolveWithinRoots, revealInFileManager, } from "./reveal.js";
 import { statSync } from 'node:fs';
 const BODY_LIMIT = 64 * 1024;
-/** Mount the panel's routes when this profile runs a Web server. */
+/** A wire-format failure that must answer with a real HTTP status. */
+class HttpError extends Error {
+    status;
+    constructor(status, message) {
+        super(message);
+        this.status = status;
+        this.name = 'HttpError';
+    }
+}
+/**
+ * Mount the panel's routes when this profile runs a Web server **and** the
+ * host connection trust fence. Without `connection` no route is registered:
+ * an unauthenticated locator HTTP surface is never exposed.
+ * @param ctx - plugin context.
+ * @param rt - locator runtime backing the name search.
+ * @param content - content index, when enabled.
+ * @param ensure - lazy content boot hook.
+ */
 export function registerHttp(ctx, rt, content, ensure) {
     const inject = ctx.inject;
     if (typeof inject !== 'function')
         return;
-    inject.call(ctx, ['webServer'], (scoped) => {
-        const server = scoped.webServer;
+    inject.call(ctx, ['webServer', 'connection'], (scoped) => {
+        const server = webServerOf(scoped);
         if (server === undefined)
             return;
-        scoped.effect(() => server.register({
-            kind: 'exact',
-            path: '/dsh-locator/search',
-            handler: handler(scoped, async (body) => await search(rt, body)),
-        }));
-        scoped.effect(() => server.register({
-            kind: 'exact',
-            path: '/dsh-locator/status',
-            handler: handler(scoped, async () => await status(rt, content)),
-        }));
-        scoped.effect(() => server.register({
-            kind: 'exact',
-            path: '/dsh-locator/reveal',
-            handler: handler(scoped, async (body) => await reveal(rt, body)),
-        }));
-        scoped.effect(() => server.register({
-            kind: 'exact',
-            path: '/dsh-locator/combined',
-            handler: handler(scoped, async (body) => await combined(rt, content, ensure, body)),
-        }));
+        // Hard dependency: no trust fence, no routes (fail closed, never "allow").
+        if (activeConnection(scoped) === undefined)
+            return;
+        const route = (path, run) => {
+            scoped.effect(() => server.register({ kind: 'exact', path, handler: handler(scoped, run) }));
+        };
+        route('/dsh-locator/search', async (body) => await search(rt, body));
+        route('/dsh-locator/status', async () => await status(rt, content));
+        route('/dsh-locator/reveal', async (body) => await reveal(rt, body));
+        route('/dsh-locator/combined', async (body) => await combined(rt, content, ensure, body));
         if (content !== undefined) {
-            scoped.effect(() => server.register({
-                kind: 'exact',
-                path: '/dsh-locator/content/rebuild',
-                handler: handler(scoped, async (body) => {
-                    ensure?.();
-                    const full = body.full === true;
-                    const started = full ? content.rebuild() : content.refreshNow();
-                    return started ? { ok: true, started: true, full } : { ok: false, error: 'a content build is already running' };
-                }),
-            }));
-            scoped.effect(() => server.register({
-                kind: 'exact',
-                path: '/dsh-locator/content',
-                handler: handler(scoped, async (body) => {
-                    ensure?.();
-                    const query = typeof body.query === 'string' ? body.query : '';
-                    const limit = typeof body.limit === 'number' ? body.limit : 30;
-                    return { ok: true, query, hits: await content.search(query, limit), state: content.status() };
-                }),
-            }));
+            route('/dsh-locator/content/rebuild', async (body) => {
+                ensure?.();
+                const full = body.full === true;
+                const started = full ? content.rebuild() : content.refreshNow();
+                return started ? { ok: true, started: true, full } : { ok: false, error: 'a content build is already running' };
+            });
+            route('/dsh-locator/content', async (body) => {
+                ensure?.();
+                const query = typeof body.query === 'string' ? body.query : '';
+                const limit = typeof body.limit === 'number' ? body.limit : 30;
+                return { ok: true, query, hits: await content.search(query, limit), state: content.status() };
+            });
         }
-        scoped.effect(() => server.register({
-            kind: 'exact',
-            path: '/dsh-locator/open',
-            handler: handler(scoped, async (body) => await openPath(rt, body)),
-        }));
+        route('/dsh-locator/open', async (body) => await openPath(rt, body));
     });
 }
+/**
+ * Wrap one route body. The order is the security order: trust fence first,
+ * then method, then media type, then the bounded JSON body.
+ */
 function handler(scoped, run) {
     return async (req, res) => {
-        const rejection = rejectionStatus(scoped, req);
+        const rejection = trustRejection(scoped, req);
         if (rejection !== undefined) {
             res.statusCode = rejection;
             res.end();
             return;
         }
         if (req.method !== 'POST') {
-            sendJson(res, 405, { ok: false, error: 'POST only' });
+            res.statusCode = 405;
+            res.setHeader('allow', 'POST');
+            res.end();
+            return;
+        }
+        if (!isJsonContentType(req.headers['content-type'])) {
+            sendJson(res, 415, { ok: false, error: 'content-type must be application/json' });
+            return;
+        }
+        let body;
+        try {
+            body = await readJson(req, BODY_LIMIT);
+        }
+        catch (error) {
+            const status = error instanceof HttpError ? error.status : 400;
+            sendJson(res, status, { ok: false, error: messageOf(error) });
             return;
         }
         try {
-            const body = await readJson(req, BODY_LIMIT);
             const value = await run(body);
             sendJson(res, 200, { ok: true, ...asRecord(value) });
         }
@@ -95,6 +118,127 @@ function handler(scoped, run) {
         }
     };
 }
+/**
+ * The connection trust fence, fail-closed.
+ *
+ * A missing/inactive `connection` service, a throwing check, or a numeric
+ * rejection all refuse the request. When the service accepts the request the
+ * local same-origin markers are checked again, so a future trust-policy
+ * regression here cannot silently expose a route to another site.
+ * @returns an HTTP status to reject with, or undefined to proceed.
+ */
+function trustRejection(scoped, req) {
+    const connection = activeConnection(scoped);
+    if (connection === undefined)
+        return 503;
+    let rejection;
+    try {
+        rejection = connection.requestRejection(req);
+    }
+    catch {
+        return 503;
+    }
+    if (typeof rejection === 'number')
+        return rejection;
+    return originRejection(req.headers);
+}
+/** Read the active connection implementation; inactive/missing/throwing all mean "unavailable". */
+function activeConnection(scoped) {
+    let value;
+    try {
+        const get = scoped.get;
+        value = typeof get === 'function'
+            ? get.call(scoped, 'connection', true)
+            : Reflect.get(scoped, 'connection');
+    }
+    catch {
+        return undefined;
+    }
+    if (typeof value !== 'object' || value === null)
+        return undefined;
+    const requestRejection = value.requestRejection;
+    if (typeof requestRejection !== 'function')
+        return undefined;
+    return value;
+}
+function webServerOf(scoped) {
+    let value;
+    try {
+        const get = scoped.get;
+        value = typeof get === 'function'
+            ? get.call(scoped, 'webServer', true)
+            : Reflect.get(scoped, 'webServer');
+    }
+    catch {
+        return undefined;
+    }
+    if (typeof value !== 'object' || value === null)
+        return undefined;
+    const register = value.register;
+    return typeof register === 'function' ? value : undefined;
+}
+/** First value of a Node header that may arrive repeated. */
+function headerValue(headers, name) {
+    const raw = headers[name];
+    if (typeof raw === 'string')
+        return raw;
+    if (Array.isArray(raw)) {
+        const first = raw[0];
+        return typeof first === 'string' ? first : undefined;
+    }
+    return undefined;
+}
+/**
+ * The exact JSON media type required by every locator route. A charset or any
+ * other parameter is tolerated (`application/json; charset=utf-8`), any other
+ * essence (including `text/plain` and a missing header) is not.
+ * @param value - the raw `content-type` header value.
+ */
+export function isJsonContentType(value) {
+    const raw = Array.isArray(value) ? value[0] : value;
+    if (typeof raw !== 'string')
+        return false;
+    const essence = raw.split(';', 1)[0]?.trim().toLowerCase();
+    return essence === 'application/json';
+}
+/**
+ * The local same-origin fence, defense in depth behind the host connection
+ * check. A `Sec-Fetch-Site: cross-site` marker is refused; when a browser
+ * attaches an `Origin`, it must name this listener's own authority. Requests
+ * without browser markers (CLI clients) pass: they are already gated by
+ * authentication.
+ * @param headers - request headers.
+ * @returns 403 when the request is provably cross-site, else undefined.
+ */
+export function originRejection(headers) {
+    const site = headerValue(headers, 'sec-fetch-site');
+    if (site !== undefined && site.toLowerCase() === 'cross-site')
+        return 403;
+    const origin = headerValue(headers, 'origin');
+    if (origin === undefined || origin === '')
+        return undefined;
+    const host = headerValue(headers, 'host');
+    // An Origin without a Host cannot be compared; a local request always has one.
+    if (host === undefined || host === '')
+        return 403;
+    try {
+        const originUrl = new URL(origin);
+        const scheme = originUrl.protocol === 'https:'
+            ? 'https:'
+            : originUrl.protocol === 'http:'
+                ? 'http:'
+                : undefined;
+        // Opaque origins (`Origin: null`, sandboxed frames, file: pages) and every
+        // non-HTTP scheme have no authority this listener can be serving.
+        if (scheme === undefined)
+            return 403;
+        const hostUrl = new URL(`${scheme}//${host}`);
+        return originUrl.host === hostUrl.host ? undefined : 403;
+    }
+    catch {
+        return 403;
+    }
+}
 async function search(rt, raw) {
     const body = raw;
     const limit = clampNumber(body.limit, 1, rt.config.maxResults, 100);
@@ -134,51 +278,95 @@ async function combined(rt, content, ensure, raw) {
         search: async (args) => await rt.search(args),
         maxResults: rt.config.maxResults,
         ...(content === undefined ? {} : {
-            contentSearch: async (query, limit) => await content.search(query, limit),
+            contentSearch: async (query, limit, options) => await content.search(query, limit, options),
             contentStatus: () => content.status(),
             ...(ensure === undefined ? {} : { ensure }),
         }),
     };
     const request = readCombinedRequest(raw, rt.config.maxResults);
     const result = await runCombinedSearch(deps, request);
-    return { query: request.query, ...result };
+    return {
+        query: request.query,
+        matchMode: request.matchMode,
+        caseSensitive: request.caseSensitive,
+        wholeWord: request.wholeWord,
+        sessionId: request.sessionId,
+        ...result,
+    };
 }
+/**
+ * Reveal one path in the platform file manager. The path is authorized and
+ * canonicalized first, so the file manager is pointed at the real file inside
+ * a root, never at a symlink that leaves it.
+ */
 async function reveal(rt, raw) {
-    const path = typeof raw.path === 'string' ? raw.path : '';
-    if (path === '' || !withinRoots(path, rt.roots)) {
+    const requested = typeof raw.path === 'string' ? raw.path : '';
+    const resolved = requested === '' ? undefined : resolveWithinRoots(requested, rt.roots);
+    if (resolved === undefined)
         return { ok: false, error: 'path is outside the indexed roots' };
-    }
+    let info;
     try {
-        const info = statSync(path);
-        if (!info.isFile() && !info.isDirectory())
-            return { ok: false, error: 'not a file or directory' };
+        info = statSync(resolved.path);
     }
     catch {
         return { ok: false, error: 'path does not exist' };
     }
+    if (!info.isFile() && !info.isDirectory())
+        return { ok: false, error: 'not a file or directory' };
+    // TOCTOU best effort: re-canonicalize immediately before handing the path to
+    // another process. This closes the window between authorization and spawn,
+    // though the platform opener still resolves the path itself.
+    const final = resolveWithinRoots(resolved.path, rt.roots);
+    if (final === undefined)
+        return { ok: false, error: 'path is outside the indexed roots' };
     try {
-        await revealInFileManager(path);
+        await revealInFileManager(final.path);
         return { ok: true };
     }
     catch (error) {
         return { ok: false, error: messageOf(error) };
     }
 }
+/**
+ * Open one path with the platform's default application: canonicalized inside
+ * the roots, still a regular file, and never an executable or script type.
+ */
 async function openPath(rt, raw) {
-    const path = typeof raw.path === 'string' ? raw.path : '';
-    if (path === '' || !withinRoots(path, rt.roots)) {
+    const requested = typeof raw.path === 'string' ? raw.path : '';
+    const resolved = requested === '' ? undefined : resolveWithinRoots(requested, rt.roots);
+    if (resolved === undefined)
         return { ok: false, error: 'path is outside the indexed roots' };
+    let info;
+    try {
+        info = statSync(resolved.path);
     }
+    catch {
+        return { ok: false, error: 'path does not exist' };
+    }
+    if (!info.isFile())
+        return { ok: false, error: 'not a file' };
+    const refusal = executableFileRejection(resolved.path, info.mode);
+    if (refusal !== undefined)
+        return { ok: false, error: refusal };
+    // TOCTOU best effort: re-canonicalize and re-check the executable guard on
+    // the path that is actually handed to the opener.
+    const final = resolveWithinRoots(resolved.path, rt.roots);
+    if (final === undefined)
+        return { ok: false, error: 'path is outside the indexed roots' };
+    let finalInfo;
     try {
-        const info = statSync(path);
-        if (!info.isFile())
-            return { ok: false, error: 'not a file' };
+        finalInfo = statSync(final.path);
     }
     catch {
         return { ok: false, error: 'path does not exist' };
     }
+    if (!finalInfo.isFile())
+        return { ok: false, error: 'not a file' };
+    const finalRefusal = executableFileRejection(final.path, finalInfo.mode);
+    if (finalRefusal !== undefined)
+        return { ok: false, error: finalRefusal };
     try {
-        await openWithDefaultApp(path);
+        await openWithDefaultApp(final.path);
         return { ok: true };
     }
     catch (error) {
@@ -205,35 +393,44 @@ async function status(rt, content) {
         ...(rt.status.warning === undefined ? {} : { warning: rt.status.warning }),
     };
 }
-function rejectionStatus(scoped, req) {
-    const connection = scoped.get?.('connection');
-    if (connection === undefined || typeof connection.requestRejection !== 'function')
-        return undefined;
-    const rejection = connection.requestRejection(req);
-    return typeof rejection === 'number' ? rejection : undefined;
-}
+/**
+ * Collect a bounded JSON object body. Oversize bodies answer 413, malformed
+ * JSON or a non-object value answers 400.
+ */
 async function readJson(req, limit) {
     const chunks = [];
     let size = 0;
+    let tooLarge = false;
     for await (const chunk of req) {
         const buffer = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
         size += buffer.length;
-        if (size > limit)
-            throw new Error(`request body exceeds ${String(limit)} bytes`);
+        if (size > limit) {
+            tooLarge = true;
+            continue;
+        }
         chunks.push(buffer);
     }
+    if (tooLarge)
+        throw new HttpError(413, `request body exceeds ${String(limit)} bytes`);
     if (size === 0)
         return {};
-    const value = JSON.parse(Buffer.concat(chunks).toString('utf8'));
-    if (typeof value !== 'object' || value === null || Array.isArray(value))
-        throw new Error('request body must be an object');
+    let value;
+    try {
+        value = JSON.parse(Buffer.concat(chunks).toString('utf8'));
+    }
+    catch {
+        throw new HttpError(400, 'request body must be valid JSON');
+    }
+    if (typeof value !== 'object' || value === null || Array.isArray(value)) {
+        throw new HttpError(400, 'request body must be an object');
+    }
     return value;
 }
-function sendJson(res, status, body) {
+function sendJson(res, statusCode, body) {
     if (res.writableEnded)
         return;
     const text = JSON.stringify(body);
-    res.statusCode = status;
+    res.statusCode = statusCode;
     res.setHeader('content-type', 'application/json; charset=utf-8');
     res.setHeader('cache-control', 'no-store');
     res.end(text);

package/lib/http.js.map

@@ -1 +1 @@
-{"version":3,"file":"http.js","sourceRoot":"","sources":["../src/http.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAMH,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAqB,MAAM,eAAe,CAAA;AACzF,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAClF,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAA;AA2BlC,MAAM,UAAU,GAAG,EAAE,GAAG,IAAI,CAAA;AAE5B,oEAAoE;AACpE,MAAM,UAAU,YAAY,CAAC,GAAY,EAAE,EAAkB,EAAE,OAAsB,EAAE,MAAmB;IACxG,MAAM,MAAM,GAAI,GAEd,CAAC,MAAM,CAAA;IACT,IAAI,OAAO,MAAM,KAAK,UAAU;QAAE,OAAM;IACxC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC,MAAe,EAAE,EAAE;QAClD,MAAM,MAAM,GAAI,MAAmD,CAAC,SAAS,CAAA;QAC7E,IAAI,MAAM,KAAK,SAAS;YAAE,OAAM;QAChC,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC;YAClC,IAAI,EAAE,OAAO;YACb,IAAI,EAAE,qBAAqB;YAC3B,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,KAAK,EAAC,IAAI,EAAC,EAAE,CAAC,MAAM,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;SAC/D,CAAC,CAAC,CAAA;QACH,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC;YAClC,IAAI,EAAE,OAAO;YACb,IAAI,EAAE,qBAAqB;YAC3B,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,MAAM,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;SAChE,CAAC,CAAC,CAAA;QACH,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC;YAClC,IAAI,EAAE,OAAO;YACb,IAAI,EAAE,qBAAqB;YAC3B,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,KAAK,EAAC,IAAI,EAAC,EAAE,CAAC,MAAM,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;SAC/D,CAAC,CAAC,CAAA;QACH,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC;YAClC,IAAI,EAAE,OAAO;YACb,IAAI,EAAE,uBAAuB;YAC7B,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,KAAK,EAAC,IAAI,EAAC,EAAE,CAAC,MAAM,QAAQ,CAAC,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;SAClF,CAAC,CAAC,CAAA;QACH,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC;gBAClC,IAAI,EAAE,OAAO;gBACb,IAAI,EAAE,8BAA8B;gBACpC,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,KAAK,EAAC,IAAI,EAAC,EAAE;oBACpC,MAAM,EAAE,EAAE,CAAA;oBACV,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,KAAK,IAAI,CAAA;oBAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,CAAA;oBAC/D,OAAO,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,oCAAoC,EAAE,CAAA;gBACjH,CAAC,CAAC;aACH,CAAC,CAAC,CAAA;YACH,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC;gBAClC,IAAI,EAAE,OAAO;gBACb,IAAI,EAAE,sBAAsB;gBAC5B,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,KAAK,EAAC,IAAI,EAAC,EAAE;oBACpC,MAAM,EAAE,EAAE,CAAA;oBACV,MAAM,KAAK,GAAG,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAA;oBAC9D,MAAM,KAAK,GAAG,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAA;oBAC9D,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,CAAA;gBAC/F,CAAC,CAAC;aACH,CAAC,CAAC,CAAA;QACL,CAAC;QACD,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC;YAClC,IAAI,EAAE,OAAO;YACb,IAAI,EAAE,mBAAmB;YACzB,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,KAAK,EAAC,IAAI,EAAC,EAAE,CAAC,MAAM,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;SACjE,CAAC,CAAC,CAAA;IACL,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,OAAO,CACd,MAAe,EACf,GAAwD;IAExD,OAAO,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACxB,MAAM,SAAS,GAAG,eAAe,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;QAC9C,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,GAAG,CAAC,UAAU,GAAG,SAAS,CAAA;YAC1B,GAAG,CAAC,GAAG,EAAE,CAAA;YACT,OAAM;QACR,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC1B,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAA;YACrD,OAAM;QACR,CAAC;QACD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,UAAU,CAAC,CAAA;YAC5C,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,CAAA;YAC7B,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;QACtD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;QAC5D,CAAC;IACH,CAAC,CAAA;AACH,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,EAAkB,EAAE,GAA4B;IACpE,MAAM,IAAI,GAAG,GAAiB,CAAA;IAC9B,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,EAAE,GAAG,CAAC,CAAA;IACnE,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAA;IACtD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC/B,MAAM,IAAI,GAAe;QACvB,KAAK,EAAE,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;QACvD,KAAK;QACL,MAAM;QACN,IAAI;QACJ,IAAI,EAAE,IAAI,CAAC,IAAI,KAAK,IAAI;QACxB,KAAK,EAAE,IAAI,CAAC,KAAK,KAAK,IAAI;QAC1B,aAAa,EAAE,IAAI,CAAC,aAAa,KAAK,IAAI;QAC1C,SAAS,EAAE,IAAI,CAAC,SAAS,KAAK,IAAI;QAClC,SAAS,EAAE,IAAI,CAAC,SAAS,KAAK,IAAI;QAClC,QAAQ,EAAE,IAAI,CAAC,QAAQ,KAAK,IAAI;KACjC,CAAA;IACD,EAAE,CAAC,KAAK,EAAE,CAAA;IACV,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IACpC,OAAO;QACL,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,MAAM,EAAE,MAAM,CAAC,MAAM,GAAG,GAAG;QAC3B,IAAI,EAAE,MAAM,CAAC,IAAI;KAClB,CAAA;AACH,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,QAAQ,CACrB,EAAkB,EAClB,OAAiC,EACjC,MAAgC,EAChC,GAA4B;IAE5B,EAAE,CAAC,KAAK,EAAE,CAAA;IACV,MAAM,IAAI,GAAiB;QACzB,MAAM,EAAE,KAAK,EAAC,IAAI,EAAC,EAAE,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC;QAC3C,UAAU,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU;QAChC,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAC/B,aAAa,EAAE,KAAK,EAAE,KAAa,EAAE,KAAa,EAAE,EAAE,CAAC,MAAM,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC;YACzF,aAAa,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE;YACrC,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;SAC5C,CAAC;KACH,CAAA;IACD,MAAM,OAAO,GAAG,mBAAmB,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;IAC9D,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;IACrD,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,GAAG,MAAM,EAAE,CAAA;AAC5C,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,EAAkB,EAAE,GAA4B;IACpE,MAAM,IAAI,GAAG,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAA;IACzD,IAAI,IAAI,KAAK,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;QAChD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,mCAAmC,EAAE,CAAA;IAClE,CAAC;IACD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAA;QAC3B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAA;IACnG,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAA;IACpD,CAAC;IACD,IAAI,CAAC;QACH,MAAM,mBAAmB,CAAC,IAAI,CAAC,CAAA;QAC/B,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAA;IACrB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,CAAC,EAAE,CAAA;IAC/C,CAAC;AACH,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,EAAkB,EAAE,GAA4B;IACtE,MAAM,IAAI,GAAG,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAA;IACzD,IAAI,IAAI,KAAK,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;QAChD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,mCAAmC,EAAE,CAAA;IAClE,CAAC;IACD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAA;QAC3B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,CAAA;IAC/D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAA;IACpD,CAAC;IACD,IAAI,CAAC;QACH,MAAM,kBAAkB,CAAC,IAAI,CAAC,CAAA;QAC9B,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAA;IACrB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,CAAC,EAAE,CAAA;IAC/C,CAAC;AACH,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,EAAkB,EAAE,OAAsB;IAC9D,EAAE,CAAC,KAAK,EAAE,CAAA;IACV,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,YAAY,EAAE,CAAA;IACtC,MAAM,YAAY,GAAG,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,EAAE,CAAA;IACxG,OAAO;QACL,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO;QAC1B,OAAO,EAAE,MAAM,EAAE,OAAO,IAAI,CAAC;QAC7B,KAAK,EAAE,MAAM,EAAE,KAAK,IAAI,CAAC;QACzB,IAAI,EAAE,MAAM,EAAE,IAAI,IAAI,CAAC;QACvB,KAAK,EAAE,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,KAAK;QAChC,QAAQ,EAAE,MAAM,EAAE,QAAQ,IAAI,KAAK;QACnC,GAAG,EAAE,MAAM,EAAE,GAAG,IAAI,KAAK;QACzB,QAAQ,EAAE,MAAM,EAAE,QAAQ,KAAK,IAAI,IAAI,EAAE,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS;QACvE,QAAQ,EAAE,MAAM,EAAE,QAAQ,IAAI,EAAE,CAAC,QAAQ;QACzC,OAAO,EAAE,MAAM,EAAE,OAAO,IAAI,EAAE;QAC9B,OAAO,EAAE,YAAY;QACrB,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QACpE,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;KAC3E,CAAA;AACH,CAAC;AAED,SAAS,eAAe,CAAC,MAAe,EAAE,GAAoB;IAC5D,MAAM,UAAU,GAAI,MAAyD,CAAC,GAAG,EAAE,CAAC,YAAY,CAA+B,CAAA;IAC/H,IAAI,UAAU,KAAK,SAAS,IAAI,OAAO,UAAU,CAAC,gBAAgB,KAAK,UAAU;QAAE,OAAO,SAAS,CAAA;IACnG,MAAM,SAAS,GAAG,UAAU,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAA;IAClD,OAAO,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAA;AAC9D,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,GAAoB,EAAE,KAAa;IACzD,MAAM,MAAM,GAAa,EAAE,CAAA;IAC3B,IAAI,IAAI,GAAG,CAAC,CAAA;IACZ,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,GAAG,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAmB,CAAC,CAAA;QAChF,IAAI,IAAI,MAAM,CAAC,MAAM,CAAA;QACrB,IAAI,IAAI,GAAG,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;QAChF,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IACrB,CAAC;IACD,IAAI,IAAI,KAAK,CAAC;QAAE,OAAO,EAAE,CAAA;IACzB,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA;IACzE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAA;IAC1H,OAAO,KAAgC,CAAA;AACzC,CAAC;AAED,SAAS,QAAQ,CAAC,GAAmB,EAAE,MAAc,EAAE,IAAa;IAClE,IAAI,GAAG,CAAC,aAAa;QAAE,OAAM;IAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;IACjC,GAAG,CAAC,UAAU,GAAG,MAAM,CAAA;IACvB,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,iCAAiC,CAAC,CAAA;IAChE,GAAG,CAAC,SAAS,CAAC,eAAe,EAAE,UAAU,CAAC,CAAA;IAC1C,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;AACf,CAAC;AAED,SAAS,OAAO,CAAC,KAAc;IAC7B,OAAO,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,OAAO,IAAI,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAA;AAC3H,CAAC;AAED,SAAS,WAAW,CAAC,KAAc,EAAE,GAAW,EAAE,GAAW,EAAE,QAAgB;IAC7E,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAA;IACzE,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;AACxD,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,KAAgC,CAAC,CAAC,CAAC,EAAE,CAAA;AAC5F,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AAC/D,CAAC"}
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../src/http.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAOH,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAqB,MAAM,eAAe,CAAA;AACzF,OAAO,EACL,uBAAuB,EACvB,kBAAkB,EAClB,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,aAAa,CAAA;AACpB,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAA;AA4BlC,MAAM,UAAU,GAAG,EAAE,GAAG,IAAI,CAAA;AAE5B,sEAAsE;AACtE,MAAM,SAAU,SAAQ,KAAK;IACN;IAArB,YAAqB,MAAc,EAAE,OAAe;QAClD,KAAK,CAAC,OAAO,CAAC,CAAA;QADK,WAAM,GAAN,MAAM,CAAQ;QAEjC,IAAI,CAAC,IAAI,GAAG,WAAW,CAAA;IACzB,CAAC;CACF;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,YAAY,CAAC,GAAY,EAAE,EAAkB,EAAE,OAAsB,EAAE,MAAmB;IACxG,MAAM,MAAM,GAAI,GAEd,CAAC,MAAM,CAAA;IACT,IAAI,OAAO,MAAM,KAAK,UAAU;QAAE,OAAM;IACxC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,YAAY,CAAC,EAAE,CAAC,MAAe,EAAE,EAAE;QAChE,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,CAAA;QAClC,IAAI,MAAM,KAAK,SAAS;YAAE,OAAM;QAChC,2EAA2E;QAC3E,IAAI,gBAAgB,CAAC,MAAM,CAAC,KAAK,SAAS;YAAE,OAAM;QAClD,MAAM,KAAK,GAAG,CACZ,IAAY,EACZ,GAAwD,EAClD,EAAE;YACR,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAA;QAC9F,CAAC,CAAA;QACD,KAAK,CAAC,qBAAqB,EAAE,KAAK,EAAC,IAAI,EAAC,EAAE,CAAC,MAAM,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAA;QAClE,KAAK,CAAC,qBAAqB,EAAE,KAAK,IAAI,EAAE,CAAC,MAAM,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAA;QACnE,KAAK,CAAC,qBAAqB,EAAE,KAAK,EAAC,IAAI,EAAC,EAAE,CAAC,MAAM,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAA;QAClE,KAAK,CAAC,uBAAuB,EAAE,KAAK,EAAC,IAAI,EAAC,EAAE,CAAC,MAAM,QAAQ,CAAC,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,CAAA;QACvF,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,KAAK,CAAC,8BAA8B,EAAE,KAAK,EAAC,IAAI,EAAC,EAAE;gBACjD,MAAM,EAAE,EAAE,CAAA;gBACV,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,KAAK,IAAI,CAAA;gBAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,CAAA;gBAC/D,OAAO,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,oCAAoC,EAAE,CAAA;YACjH,CAAC,CAAC,CAAA;YACF,KAAK,CAAC,sBAAsB,EAAE,KAAK,EAAC,IAAI,EAAC,EAAE;gBACzC,MAAM,EAAE,EAAE,CAAA;gBACV,MAAM,KAAK,GAAG,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAA;gBAC9D,MAAM,KAAK,GAAG,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAA;gBAC9D,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,CAAA;YAC/F,CAAC,CAAC,CAAA;QACJ,CAAC;QACD,KAAK,CAAC,mBAAmB,EAAE,KAAK,EAAC,IAAI,EAAC,EAAE,CAAC,MAAM,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAA;IACpE,CAAC,CAAC,CAAA;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,OAAO,CACd,MAAe,EACf,GAAwD;IAExD,OAAO,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACxB,MAAM,SAAS,GAAG,cAAc,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;QAC7C,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,GAAG,CAAC,UAAU,GAAG,SAAS,CAAA;YAC1B,GAAG,CAAC,GAAG,EAAE,CAAA;YACT,OAAM;QACR,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC1B,GAAG,CAAC,UAAU,GAAG,GAAG,CAAA;YACpB,GAAG,CAAC,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;YAC9B,GAAG,CAAC,GAAG,EAAE,CAAA;YACT,OAAM;QACR,CAAC;QACD,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC;YACpD,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,uCAAuC,EAAE,CAAC,CAAA;YACjF,OAAM;QACR,CAAC;QACD,IAAI,IAA6B,CAAA;QACjC,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,UAAU,CAAC,CAAA;QACxC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,MAAM,GAAG,KAAK,YAAY,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAA;YAC9D,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;YAC7D,OAAM;QACR,CAAC;QACD,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,CAAA;YAC7B,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;QACtD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;QAC5D,CAAC;IACH,CAAC,CAAA;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,cAAc,CAAC,MAAe,EAAE,GAAoB;IAC3D,MAAM,UAAU,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAA;IAC3C,IAAI,UAAU,KAAK,SAAS;QAAE,OAAO,GAAG,CAAA;IACxC,IAAI,SAA6B,CAAA;IACjC,IAAI,CAAC;QACH,SAAS,GAAG,UAAU,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAA;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,CAAA;IACZ,CAAC;IACD,IAAI,OAAO,SAAS,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAA;IACnD,OAAO,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;AACrC,CAAC;AAED,mGAAmG;AACnG,SAAS,gBAAgB,CAAC,MAAe;IACvC,IAAI,KAAc,CAAA;IAClB,IAAI,CAAC;QACH,MAAM,GAAG,GAAI,MAA2E,CAAC,GAAG,CAAA;QAC5F,KAAK,GAAG,OAAO,GAAG,KAAK,UAAU;YAC/B,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,YAAY,EAAE,IAAI,CAAC;YACtC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,MAAgB,EAAE,YAAY,CAAC,CAAA;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,SAAS,CAAA;IACjE,MAAM,gBAAgB,GAAI,KAAwC,CAAC,gBAAgB,CAAA;IACnF,IAAI,OAAO,gBAAgB,KAAK,UAAU;QAAE,OAAO,SAAS,CAAA;IAC5D,OAAO,KAAuB,CAAA;AAChC,CAAC;AAED,SAAS,WAAW,CAAC,MAAe;IAClC,IAAI,KAAc,CAAA;IAClB,IAAI,CAAC;QACH,MAAM,GAAG,GAAI,MAA2E,CAAC,GAAG,CAAA;QAC5F,KAAK,GAAG,OAAO,GAAG,KAAK,UAAU;YAC/B,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,CAAC;YACrC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,MAAgB,EAAE,WAAW,CAAC,CAAA;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,SAAS,CAAA;IACjE,MAAM,QAAQ,GAAI,KAAgC,CAAC,QAAQ,CAAA;IAC3D,OAAO,OAAO,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,KAAsB,CAAC,CAAC,CAAC,SAAS,CAAA;AAC5E,CAAC;AAED,6DAA6D;AAC7D,SAAS,WAAW,CAAC,OAA4B,EAAE,IAAY;IAC7D,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACzB,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAA;IACvC,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,GAAG,CAAC,CAAC,CAAC,CAAA;QACpB,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAA;IACtD,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAoC;IACpE,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAA;IACnD,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAA;IACzC,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IAC1D,OAAO,OAAO,KAAK,kBAAkB,CAAA;AACvC,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,eAAe,CAAC,OAA4B;IAC1D,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAA;IACnD,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,WAAW,EAAE,KAAK,YAAY;QAAE,OAAO,GAAG,CAAA;IACzE,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAA;IAC7C,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,EAAE;QAAE,OAAO,SAAS,CAAA;IAC3D,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;IACzC,+EAA+E;IAC/E,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,EAAE;QAAE,OAAO,GAAG,CAAA;IACjD,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAA;QACjC,MAAM,MAAM,GAAG,SAAS,CAAC,QAAQ,KAAK,QAAQ;YAC5C,CAAC,CAAC,QAAQ;YACV,CAAC,CAAC,SAAS,CAAC,QAAQ,KAAK,OAAO;gBAC9B,CAAC,CAAC,OAAO;gBACT,CAAC,CAAC,SAAS,CAAA;QACf,2EAA2E;QAC3E,kEAAkE;QAClE,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,GAAG,CAAA;QACpC,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,GAAG,MAAM,KAAK,IAAI,EAAE,CAAC,CAAA;QAC7C,OAAO,SAAS,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAA;IAC1D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,CAAA;IACZ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,EAAkB,EAAE,GAA4B;IACpE,MAAM,IAAI,GAAG,GAAiB,CAAA;IAC9B,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,EAAE,GAAG,CAAC,CAAA;IACnE,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAA;IACtD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC/B,MAAM,IAAI,GAAe;QACvB,KAAK,EAAE,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;QACvD,KAAK;QACL,MAAM;QACN,IAAI;QACJ,IAAI,EAAE,IAAI,CAAC,IAAI,KAAK,IAAI;QACxB,KAAK,EAAE,IAAI,CAAC,KAAK,KAAK,IAAI;QAC1B,aAAa,EAAE,IAAI,CAAC,aAAa,KAAK,IAAI;QAC1C,SAAS,EAAE,IAAI,CAAC,SAAS,KAAK,IAAI;QAClC,SAAS,EAAE,IAAI,CAAC,SAAS,KAAK,IAAI;QAClC,QAAQ,EAAE,IAAI,CAAC,QAAQ,KAAK,IAAI;KACjC,CAAA;IACD,EAAE,CAAC,KAAK,EAAE,CAAA;IACV,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IACpC,OAAO;QACL,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,MAAM,EAAE,MAAM,CAAC,MAAM,GAAG,GAAG;QAC3B,IAAI,EAAE,MAAM,CAAC,IAAI;KAClB,CAAA;AACH,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,QAAQ,CACrB,EAAkB,EAClB,OAAiC,EACjC,MAAgC,EAChC,GAA4B;IAE5B,EAAE,CAAC,KAAK,EAAE,CAAA;IACV,MAAM,IAAI,GAAiB;QACzB,MAAM,EAAE,KAAK,EAAC,IAAI,EAAC,EAAE,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC;QAC3C,UAAU,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU;QAChC,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAC/B,aAAa,EAAE,KAAK,EAAE,KAAa,EAAE,KAAa,EAAE,OAA6B,EAAE,EAAE,CACnF,MAAM,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC;YAC7C,aAAa,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE;YACrC,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;SAC5C,CAAC;KACH,CAAA;IACD,MAAM,OAAO,GAAG,mBAAmB,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;IAC9D,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;IACrD,OAAO;QACL,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,GAAG,MAAM;KACV,CAAA;AACH,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,MAAM,CAAC,EAAkB,EAAE,GAA4B;IACpE,MAAM,SAAS,GAAG,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAA;IAC9D,MAAM,QAAQ,GAAG,SAAS,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,kBAAkB,CAAC,SAAS,EAAE,EAAE,CAAC,KAAK,CAAC,CAAA;IACvF,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,mCAAmC,EAAE,CAAA;IAC5F,IAAI,IAAI,CAAA;IACR,IAAI,CAAC;QACH,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAA;IACpD,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAA;IACjG,6EAA6E;IAC7E,2EAA2E;IAC3E,6DAA6D;IAC7D,MAAM,KAAK,GAAG,kBAAkB,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,CAAA;IACzD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,mCAAmC,EAAE,CAAA;IACzF,IAAI,CAAC;QACH,MAAM,mBAAmB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QACrC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAA;IACrB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,CAAC,EAAE,CAAA;IAC/C,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,QAAQ,CAAC,EAAkB,EAAE,GAA4B;IACtE,MAAM,SAAS,GAAG,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAA;IAC9D,MAAM,QAAQ,GAAG,SAAS,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,kBAAkB,CAAC,SAAS,EAAE,EAAE,CAAC,KAAK,CAAC,CAAA;IACvF,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,mCAAmC,EAAE,CAAA;IAC5F,IAAI,IAAI,CAAA;IACR,IAAI,CAAC;QACH,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAA;IACpD,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,CAAA;IAC7D,MAAM,OAAO,GAAG,uBAAuB,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAA;IACjE,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,CAAA;IAC/D,2EAA2E;IAC3E,kDAAkD;IAClD,MAAM,KAAK,GAAG,kBAAkB,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,CAAA;IACzD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,mCAAmC,EAAE,CAAA;IACzF,IAAI,SAAS,CAAA;IACb,IAAI,CAAC;QACH,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAA;IACpD,CAAC;IACD,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,CAAA;IAClE,MAAM,YAAY,GAAG,uBAAuB,CAAC,KAAK,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,CAAA;IACxE,IAAI,YAAY,KAAK,SAAS;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,CAAA;IACzE,IAAI,CAAC;QACH,MAAM,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QACpC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAA;IACrB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,CAAC,EAAE,CAAA;IAC/C,CAAC;AACH,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,EAAkB,EAAE,OAAsB;IAC9D,EAAE,CAAC,KAAK,EAAE,CAAA;IACV,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,YAAY,EAAE,CAAA;IACtC,MAAM,YAAY,GAAG,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,EAAE,CAAA;IACxG,OAAO;QACL,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO;QAC1B,OAAO,EAAE,MAAM,EAAE,OAAO,IAAI,CAAC;QAC7B,KAAK,EAAE,MAAM,EAAE,KAAK,IAAI,CAAC;QACzB,IAAI,EAAE,MAAM,EAAE,IAAI,IAAI,CAAC;QACvB,KAAK,EAAE,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,KAAK;QAChC,QAAQ,EAAE,MAAM,EAAE,QAAQ,IAAI,KAAK;QACnC,GAAG,EAAE,MAAM,EAAE,GAAG,IAAI,KAAK;QACzB,QAAQ,EAAE,MAAM,EAAE,QAAQ,KAAK,IAAI,IAAI,EAAE,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS;QACvE,QAAQ,EAAE,MAAM,EAAE,QAAQ,IAAI,EAAE,CAAC,QAAQ;QACzC,OAAO,EAAE,MAAM,EAAE,OAAO,IAAI,EAAE;QAC9B,OAAO,EAAE,YAAY;QACrB,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QACpE,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;KAC3E,CAAA;AACH,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,QAAQ,CAAC,GAAoB,EAAE,KAAa;IACzD,MAAM,MAAM,GAAa,EAAE,CAAA;IAC3B,IAAI,IAAI,GAAG,CAAC,CAAA;IACZ,IAAI,QAAQ,GAAG,KAAK,CAAA;IACpB,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,GAAG,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAmB,CAAC,CAAA;QAChF,IAAI,IAAI,MAAM,CAAC,MAAM,CAAA;QACrB,IAAI,IAAI,GAAG,KAAK,EAAE,CAAC;YACjB,QAAQ,GAAG,IAAI,CAAA;YACf,SAAQ;QACV,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IACrB,CAAC;IACD,IAAI,QAAQ;QAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,wBAAwB,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;IACrF,IAAI,IAAI,KAAK,CAAC;QAAE,OAAO,EAAE,CAAA;IACzB,IAAI,KAAc,CAAA;IAClB,IAAI,CAAC;QACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA;IAC5D,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,iCAAiC,CAAC,CAAA;IAC7D,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,gCAAgC,CAAC,CAAA;IAC5D,CAAC;IACD,OAAO,KAAgC,CAAA;AACzC,CAAC;AAED,SAAS,QAAQ,CAAC,GAAmB,EAAE,UAAkB,EAAE,IAAa;IACtE,IAAI,GAAG,CAAC,aAAa;QAAE,OAAM;IAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;IACjC,GAAG,CAAC,UAAU,GAAG,UAAU,CAAA;IAC3B,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,iCAAiC,CAAC,CAAA;IAChE,GAAG,CAAC,SAAS,CAAC,eAAe,EAAE,UAAU,CAAC,CAAA;IAC1C,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;AACf,CAAC;AAED,SAAS,OAAO,CAAC,KAAc;IAC7B,OAAO,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,OAAO,IAAI,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAA;AAC3H,CAAC;AAED,SAAS,WAAW,CAAC,KAAc,EAAE,GAAW,EAAE,GAAW,EAAE,QAAgB;IAC7E,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAA;IACzE,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;AACxD,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,KAAgC,CAAC,CAAC,CAAC,EAAE,CAAA;AAC5F,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AAC/D,CAAC"}

package/lib/reveal.d.ts

@@ -1,15 +1,81 @@
 /**
- * Reveal one indexed path in the platform file manager.
+ * Reveal/open one indexed path safely.
+ *
+ * Both operations are authorized against the indexed roots on the **real**
+ * path: the target and every root are canonicalized with `realpath`, so a
+ * symlink cannot be used to point the file manager or the platform opener at
+ * something outside the configured roots. A target that does not exist is
+ * authorized through its nearest existing ancestor, whose real path must still
+ * live inside a root. Opening with the default application is additionally
+ * refused for executable and script file types (extension or Unix executable
+ * bit), because a document viewer route must never launch a program.
  * @module dsh-locator/reveal
  */
-/** Whether target is one of the roots or lives below one of them. */
+/** A canonical path and whether the target itself (not just an ancestor) exists. */
+export interface ResolvedTarget {
+    /** Canonical real path; for a missing target, its nearest real ancestor plus the missing suffix. */
+    readonly path: string;
+    /** True when the target itself exists. */
+    readonly exists: boolean;
+}
+/**
+ * Canonical real path of `target`, or of its nearest existing ancestor with the
+ * missing suffix appended when `target` itself is absent.
+ *
+ * `realpath` resolves every symlink in an existing component, so the result is
+ * the only value that may be compared against canonical roots. Returns
+ * undefined for a relative path, a filesystem error other than ENOENT/ENOTDIR
+ * (for example EACCES), or a path whose root has no existing ancestor.
+ * @param target - absolute path to canonicalize.
+ * @returns the canonical target and whether it exists.
+ */
+export declare function realPathOf(target: string): ResolvedTarget | undefined;
+/**
+ * Authorize `target` against the indexed roots on canonical paths.
+ *
+ * The target and the roots are both resolved with `realpath`; a symlink that
+ * points outside a root is denied even though its lexical path looked inside.
+ * A missing target is still authorized when its nearest existing ancestor is
+ * inside a root, which keeps the containment check meaningful for paths that
+ * appear between the search and the reveal.
+ * @param target - requested absolute path.
+ * @param roots - configured indexed roots (any form: they are canonicalized).
+ * @returns the canonical path plus whether it exists, or undefined when the
+ * request must be refused.
+ */
+export declare function resolveWithinRoots(target: string, roots: readonly string[]): ResolvedTarget | undefined;
+/** Whether target is one of the roots or lives below one of them (canonical paths). */
 export declare function withinRoots(target: string, roots: readonly string[]): boolean;
+/**
+ * Extensions that name a program or a script, not a document. Opening one with
+ * the platform's default handler can execute code (Windows ShellExecute,
+ * `.desktop` launchers, shell script interpreters), so the open route refuses
+ * them outright instead of relying on the handler's own judgement.
+ */
+export declare const EXECUTABLE_EXTENSIONS: ReadonlySet<string>;
+/**
+ * Why opening `target` with the default application is unsafe, if it is.
+ *
+ * Extension matching is case-insensitive and uses the **real** path, so a
+ * harmless-looking symlink name cannot disguise a script. On Unix an
+ * executable permission bit is refused too, which covers extensionless
+ * binaries and scripts.
+ * @param target - canonical path about to be opened.
+ * @param mode - the target's `stat.mode`, when known.
+ * @returns a human-readable refusal, or undefined when the open may proceed.
+ */
+export declare function executableFileRejection(target: string, mode?: number): string | undefined;
 /**
  * Ask the platform to reveal a path in its file manager. Uses an argument
  * vector, not a shell, so a path can never be interpreted as a command. The
  * child is detached: the opener outlives the plugin call.
+ * @param target - canonical path inside the indexed roots.
  */
 export declare function revealInFileManager(target: string): Promise<void>;
-/** Open a path with its default application. */
+/**
+ * Open a path with its default application.
+ * @param target - canonical path inside the indexed roots; callers must have
+ * rejected {@link executableFileRejection} first.
+ */
 export declare function openWithDefaultApp(target: string): Promise<void>;
 //# sourceMappingURL=reveal.d.ts.map

package/lib/reveal.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"reveal.d.ts","sourceRoot":"","sources":["../src/reveal.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAKH,qEAAqE;AACrE,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAS7E;AAED;;;;GAIG;AACH,wBAAsB,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAKvE;AAED,gDAAgD;AAChD,wBAAsB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAKtE"}
+{"version":3,"file":"reveal.d.ts","sourceRoot":"","sources":["../src/reveal.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAMH,oFAAoF;AACpF,MAAM,WAAW,cAAc;IAC7B,oGAAoG;IACpG,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,0CAA0C;IAC1C,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAA;CACzB;AAgBD;;;;;;;;;;GAUG;AACH,wBAAgB,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS,CAiBrE;AAoBD;;;;;;;;;;;;GAYG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,cAAc,GAAG,SAAS,CAOvG;AAED,uFAAuF;AACvF,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAE7E;AAED;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB,EAAE,WAAW,CAAC,MAAM,CAQpD,CAAA;AAEF;;;;;;;;;;GAUG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CASzF;AAED;;;;;GAKG;AACH,wBAAsB,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAKvE;AAED;;;;GAIG;AACH,wBAAsB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAKtE"}