jishushell 0.6.18 → 0.7.3

package/dist/services/capability-proxy/http.js

@@ -0,0 +1,555 @@
+import { createHash } from "node:crypto";
+import { Readable } from "node:stream";
+import * as appService from "../app-common/service.js";
+import { HOP_BY_HOP, joinUpstreamPath, stripPanelSessionCookie } from "../http/proxy-utils.js";
+import { validateId } from "../instances/admin.js";
+import { getCapabilityHtmlRewriter } from "./html-rewriters/index.js";
+function capabilityProxyPath(instanceId, capability) {
+    return `/api/instances/${encodeURIComponent(instanceId)}/provides/${encodeURIComponent(capability)}`;
+}
+function joinProxyPath(basePath, suffix) {
+    const normalizedBase = basePath.replace(/\/+$/, "");
+    const normalizedSuffix = suffix.replace(/^\/+/, "");
+    if (!normalizedSuffix)
+        return normalizedBase;
+    return `${normalizedBase}/${normalizedSuffix}`;
+}
+function canonicalCapabilityProxyBase(basePath, capabilityPath) {
+    const normalizedCapabilityPath = typeof capabilityPath === "string" ? capabilityPath.trim() : "";
+    const needsTrailingSlash = !normalizedCapabilityPath || normalizedCapabilityPath.endsWith("/");
+    return needsTrailingSlash ? `${basePath}/` : basePath;
+}
+function rewriteCapabilityLocation(basePath, canonicalBasePath, pathname, search = "", hash = "") {
+    const rewrittenPath = pathname === "/"
+        ? canonicalBasePath
+        : joinProxyPath(basePath, pathname);
+    return `${rewrittenPath}${search}${hash}`;
+}
+function shouldRewriteProxyResponse(contentType) {
+    const value = (contentType ?? "").toLowerCase();
+    return value.includes("text/html") || value.includes("text/css");
+}
+function capabilityProxyCleanupToken(parts) {
+    const hash = createHash("sha256");
+    for (const part of parts) {
+        hash.update(part ?? "");
+        hash.update("\0");
+    }
+    return hash.digest("hex").slice(0, 32);
+}
+function hasCookieValue(cookieHeader, name, expectedValue) {
+    return cookieHeader
+        .split(";")
+        .map((part) => part.trim())
+        .some((part) => {
+        const eq = part.indexOf("=");
+        if (eq < 0)
+            return false;
+        return part.slice(0, eq) === name && part.slice(eq + 1) === expectedValue;
+    });
+}
+/**
+ * Inject a tiny <script> that monkey-patches `fetch`, `XMLHttpRequest.open`,
+ * and `Element.prototype.{setAttribute,src,href}` so that same-origin absolute
+ * paths (e.g. `/api/v1/...`, `/static/...`) are transparently rewritten to go
+ * through the capability proxy prefix.
+ *
+ * The alternative — rewriting every JS bundle byte-for-byte — is fragile and
+ * expensive; a runtime shim at document load is the standard approach used by
+ * reverse-proxy front-ends (cf. Cloudflare Access, oauth2-proxy, etc.).
+ */
+function capabilityProxyBootstrap(proxyBasePath) {
+    const prefix = JSON.stringify(proxyBasePath.replace(/\/+$/, ""));
+    const workerPrelude = JSON.stringify([
+        "(function(){",
+        `var P=${prefix};`,
+        "function px(path){",
+        "if(!path||path.charAt(0)!=='/'||path.charAt(1)==='/'||path.indexOf(P)===0||path.indexOf('/api/instances/')===0)return path;",
+        "return P+path;",
+        "}",
+        "function str(u){return typeof u==='string'?u:(u&&typeof u.href==='string'?u.href:null);}",
+        "function rwWs(u){",
+        "var s0=str(u);if(!s0)return u;",
+        "var H=typeof __capProxyHost==='string'?__capProxyHost:self.location.host;",
+        "var L=typeof __capProxyProtocol==='string'?__capProxyProtocol:self.location.protocol;",
+        "var B=(L==='https:'?'https:':'http:')+'//'+H+'/';",
+        "try{var p=new URL(s0,B);",
+        "if(p.host===H&&(p.protocol==='ws:'||p.protocol==='wss:'||p.protocol===L)){",
+        "var pp=px(p.pathname);",
+        "if(pp!==p.pathname){var s=L==='https:'?'wss:':'ws:';return s+'//'+H+pp+p.search+p.hash;}",
+        "}}catch(_e){}",
+        "return u;",
+        "}",
+        "var _WS=self.WebSocket;",
+        "if(typeof _WS==='function')self.WebSocket=function(url,protocols){url=rwWs(url);return protocols!==undefined?new _WS(url,protocols):new _WS(url);};",
+        "if(typeof _WS==='function'){self.WebSocket.prototype=_WS.prototype;self.WebSocket.CONNECTING=_WS.CONNECTING;self.WebSocket.OPEN=_WS.OPEN;self.WebSocket.CLOSING=_WS.CLOSING;self.WebSocket.CLOSED=_WS.CLOSED;}",
+        "})();",
+    ].join(""));
+    return [
+        "<script>(function(){",
+        `var P=${prefix};`,
+        "var O=window.location.origin;",
+        "try{if(navigator.serviceWorker){",
+        "if(navigator.serviceWorker.getRegistrations){",
+        "navigator.serviceWorker.getRegistrations().then(function(rs){rs.forEach(function(r){try{r.unregister()}catch(_e){}})}).catch(function(){});",
+        "}",
+        "navigator.serviceWorker.register=function(){return Promise.reject(new Error('service worker disabled in capability proxy'))};",
+        "}}catch(_e){}",
+        "try{if(window.caches&&caches.keys){caches.keys().then(function(ks){ks.forEach(function(k){try{caches.delete(k)}catch(_e){}})}).catch(function(){});}}catch(_e){}",
+        "function px(path){",
+        "if(!path||path.charAt(0)!=='/'||path.charAt(1)==='/'||path.indexOf(P)===0||path.indexOf('/api/instances/')===0)return path;",
+        "return P+path;",
+        "}",
+        "function str(u){return typeof u==='string'?u:(u&&typeof u.href==='string'?u.href:null);}",
+        "function rw(u){",
+        "var s0=str(u);if(!s0)return u;",
+        "var direct=px(s0);",
+        "if(direct!==s0)return direct;",
+        "try{var p=new URL(s0,window.location.href);",
+        "if(p.origin===O){var pp=px(p.pathname);if(pp!==p.pathname)return pp+p.search+p.hash;}",
+        "}catch(_e){}",
+        "return u;",
+        "}",
+        "function rwWs(u){",
+        "var s0=str(u);if(!s0)return u;",
+        "try{var p=new URL(s0,window.location.href);",
+        "if(p.host===window.location.host&&(p.protocol==='ws:'||p.protocol==='wss:'||p.protocol===window.location.protocol)){",
+        "var pp=px(p.pathname);",
+        "if(pp!==p.pathname){var s=window.location.protocol==='https:'?'wss:':'ws:';return s+'//'+window.location.host+pp+p.search+p.hash;}",
+        "}}catch(_e){}",
+        "return u;",
+        "}",
+        "var _f=window.fetch;",
+        "window.fetch=function(r,o){",
+        "if(typeof r==='string'||(r&&typeof r.href==='string'))r=rw(r);",
+        "else if(r instanceof Request){",
+        "var nr=rw(r.url);if(nr!==r.url)r=new Request(nr,r);}",
+        "return _f.call(this,r,o);};",
+        "var _xo=XMLHttpRequest.prototype.open;",
+        "XMLHttpRequest.prototype.open=function(m,u){",
+        "arguments[1]=rw(u);",
+        "return _xo.apply(this,arguments);};",
+        "var _ps=history.pushState;",
+        "var _rs=history.replaceState;",
+        "history.pushState=function(s,t,u){",
+        "if(typeof u==='string')u=rw(u);",
+        "return _ps.call(this,s,t,u);};",
+        "history.replaceState=function(s,t,u){",
+        "if(typeof u==='string')u=rw(u);",
+        "return _rs.call(this,s,t,u);};",
+        "var _la=location.assign.bind(location);",
+        "var _lr=location.replace.bind(location);",
+        "location.assign=function(u){return _la(rw(u));};",
+        "location.replace=function(u){return _lr(rw(u));};",
+        "try{",
+        "Object.defineProperty(window,'top',{configurable:true,get:function(){return window;}});",
+        "Object.defineProperty(window,'parent',{configurable:true,get:function(){return window;}});",
+        "}catch(_e){}",
+        "function patchProp(tag,prop){",
+        "var d=Object.getOwnPropertyDescriptor(tag.prototype,prop);",
+        "if(!d||!d.set)return;",
+        "var orig=d.set;",
+        "Object.defineProperty(tag.prototype,prop,{",
+        "set:function(v){return orig.call(this,rw(v));},",
+        "get:d.get,configurable:true,enumerable:true});",
+        "}",
+        "patchProp(HTMLImageElement,'src');",
+        "patchProp(HTMLScriptElement,'src');",
+        "patchProp(HTMLLinkElement,'href');",
+        "patchProp(HTMLSourceElement,'src');",
+        "var _Worker=window.Worker;",
+        `var _workerPrelude=${workerPrelude};`,
+        "function shouldWrapWorker(url){",
+        "try{var p=new URL(String(url),window.location.href);return p.protocol==='blob:'||p.protocol==='data:'||p.origin===O;}catch(_e){return false;}",
+        "}",
+        "function wrapWorker(url,options){",
+        "if(typeof _Worker!=='function'||!shouldWrapWorker(url))return url;",
+        "try{var resolved=new URL(String(url),window.location.href).href;",
+        "var isModule=!!(options&&options.type==='module');",
+        "var workerEnv='var __capProxyHost='+JSON.stringify(window.location.host)+';var __capProxyProtocol='+JSON.stringify(window.location.protocol)+';';",
+        "var source=isModule?workerEnv+_workerPrelude+'\\nimport '+JSON.stringify(resolved)+';':workerEnv+_workerPrelude+'\\nimportScripts('+JSON.stringify(resolved)+');';",
+        "return URL.createObjectURL(new Blob([source],{type:'text/javascript'}));",
+        "}catch(_e){return url;}",
+        "}",
+        "if(typeof _Worker==='function'){",
+        "window.Worker=function(url,options){var wrapped=wrapWorker(url,options);return options!==undefined?new _Worker(wrapped,options):new _Worker(wrapped);};",
+        "window.Worker.prototype=_Worker.prototype;",
+        "}",
+        "var _WS=window.WebSocket;",
+        "if(typeof _WS==='function'){",
+        "window.WebSocket=function(url,protocols){",
+        "url=rwWs(url);",
+        "return protocols!==undefined?new _WS(url,protocols):new _WS(url);",
+        "};",
+        "window.WebSocket.prototype=_WS.prototype;",
+        "window.WebSocket.CONNECTING=_WS.CONNECTING;",
+        "window.WebSocket.OPEN=_WS.OPEN;",
+        "window.WebSocket.CLOSING=_WS.CLOSING;",
+        "window.WebSocket.CLOSED=_WS.CLOSED;",
+        "}",
+        "var _ES=window.EventSource;",
+        "if(typeof _ES==='function'){",
+        "window.EventSource=function(url,opts){",
+        "if(typeof url==='string')url=rw(url);",
+        "return new _ES(url,opts);",
+        "};",
+        "window.EventSource.prototype=_ES.prototype;",
+        "window.EventSource.CONNECTING=_ES.CONNECTING;",
+        "window.EventSource.OPEN=_ES.OPEN;",
+        "window.EventSource.CLOSED=_ES.CLOSED;",
+        "}",
+        "})();</script>",
+    ].join("");
+}
+function rewriteProxyTextBody(body, contentType, proxyBasePath, extraHeadHtml = "") {
+    const value = (contentType ?? "").toLowerCase();
+    const proxyBaseWithSlash = `${proxyBasePath.replace(/\/+$/, "")}/`;
+    let rewritten = body;
+    if (value.includes("text/html")) {
+        rewritten = rewritten.replace(/((?:href|src|action|poster)=['"])\/(?!\/)/gi, `$1${proxyBaseWithSlash}`);
+        rewritten = rewritten.replace(/\bimport\(\s*(['"])\/(?!\/)/g, `import($1${proxyBaseWithSlash}`);
+        rewritten = rewritten.replace(/(__sveltekit_\w+\s*=\s*\{\s*base\s*:\s*)(["'])["']/, `$1$2${proxyBasePath.replace(/\/+$/, "")}$2`);
+        rewritten = rewritten.replace(/(paths\s*:\s*\{\s*base\s*:\s*)(["'])["'](\s*,\s*assets\s*:)/, `$1$2${proxyBasePath.replace(/\/+$/, "")}$2$3`);
+        if (!/<base\b/i.test(rewritten)) {
+            if (/<head[^>]*>/i.test(rewritten)) {
+                rewritten = rewritten.replace(/<head([^>]*)>/i, `<head$1><base href="${proxyBaseWithSlash}">`);
+            }
+            else {
+                rewritten = `<base href="${proxyBaseWithSlash}">${rewritten}`;
+            }
+        }
+        if (extraHeadHtml) {
+            if (/<base\b/i.test(rewritten)) {
+                rewritten = rewritten.replace(/<base\b[^>]*>/i, (match) => `${match}${extraHeadHtml}`);
+            }
+            else if (/<head[^>]*>/i.test(rewritten)) {
+                rewritten = rewritten.replace(/<head([^>]*)>/i, `<head$1>${extraHeadHtml}`);
+            }
+            else {
+                rewritten = `${extraHeadHtml}${rewritten}`;
+            }
+        }
+    }
+    if (value.includes("text/css")) {
+        rewritten = rewritten.replace(/url\((['"]?)\/(?!\/)/gi, `url($1${proxyBaseWithSlash}`);
+    }
+    else if (value.includes("text/html")) {
+        rewritten = rewritten.replace(/url\((['"]?)\/(?!\/)/g, `url($1${proxyBaseWithSlash}`);
+    }
+    return rewritten;
+}
+function isReadableBody(value) {
+    if (value instanceof Readable)
+        return true;
+    if (!value || typeof value !== "object")
+        return false;
+    const candidate = value;
+    return (typeof candidate.pipe === "function" &&
+        typeof candidate.on === "function" &&
+        typeof candidate[Symbol.asyncIterator] === "function");
+}
+async function readProxyBodyStream(stream) {
+    const chunks = [];
+    for await (const chunk of stream) {
+        if (typeof chunk === "string") {
+            chunks.push(Buffer.from(chunk));
+        }
+        else if (chunk instanceof Uint8Array) {
+            chunks.push(Buffer.from(chunk));
+        }
+        else {
+            chunks.push(Buffer.from(String(chunk)));
+        }
+    }
+    return Buffer.concat(chunks);
+}
+function bytesToArrayBuffer(bytes) {
+    const out = new ArrayBuffer(bytes.byteLength);
+    new Uint8Array(out).set(bytes);
+    return out;
+}
+function isPlainRecord(value) {
+    if (!value || typeof value !== "object")
+        return false;
+    const proto = Object.getPrototypeOf(value);
+    return proto === Object.prototype || proto === null;
+}
+function encodeFormRecord(body) {
+    const params = new URLSearchParams();
+    for (const [key, value] of Object.entries(body)) {
+        if (Array.isArray(value)) {
+            for (const item of value)
+                params.append(key, String(item));
+        }
+        else {
+            params.append(key, String(value));
+        }
+    }
+    return params.toString();
+}
+async function buildProxyRequestBody(req) {
+    if (req.method === "GET" || req.method === "HEAD")
+        return undefined;
+    const body = req.body;
+    if (body == null)
+        return undefined;
+    if (typeof body === "string") {
+        return body;
+    }
+    if (body instanceof Uint8Array || Buffer.isBuffer(body))
+        return bytesToArrayBuffer(body);
+    if (isReadableBody(body)) {
+        return bytesToArrayBuffer(await readProxyBodyStream(body));
+    }
+    const contentType = String(req.headers["content-type"] ?? "").toLowerCase();
+    if (contentType.includes("application/x-www-form-urlencoded") && isPlainRecord(body)) {
+        return encodeFormRecord(body);
+    }
+    if (contentType.includes("application/json") && isPlainRecord(body)) {
+        return JSON.stringify(body);
+    }
+    if (isPlainRecord(body)) {
+        return JSON.stringify(body);
+    }
+    return undefined;
+}
+export async function resolveHttpCapability(instanceId, capabilityName) {
+    const capability = appService
+        .getProvidedCapabilitiesForApp(instanceId)
+        .find((entry) => entry.capability === capabilityName);
+    if (!capability)
+        throw new Error(`Capability '${capabilityName}' not found`);
+    if (capability.visibility === "internal") {
+        throw new Error(`Capability '${capabilityName}' is not externally accessible`);
+    }
+    if (capability.protocol !== "http" && capability.protocol !== "https") {
+        throw new Error(`Capability '${capabilityName}' does not use HTTP(S)`);
+    }
+    const runtimePort = appService.resolveRuntimeCapabilityPort(instanceId, capabilityName);
+    if (typeof runtimePort !== "number" || runtimePort < 1) {
+        throw new Error(`Capability '${capabilityName}' has no resolved port`);
+    }
+    const upstreamHost = await appService.getHostForAppPort(instanceId, runtimePort);
+    const proxyBase = capabilityProxyPath(instanceId, capabilityName);
+    const normalizedCapabilityPath = typeof capability.path === "string" ? capability.path.trim() : "";
+    const proxyUrl = !normalizedCapabilityPath || normalizedCapabilityPath.endsWith("/") ? `${proxyBase}/` : proxyBase;
+    return {
+        capability,
+        targetBaseUrl: `${capability.protocol}://${appService.urlHost(upstreamHost)}:${runtimePort}`,
+        proxyUrl,
+    };
+}
+export async function proxyProvidedCapability(req, reply) {
+    const idErr = validateId(req.params.id);
+    if (idErr)
+        return reply.status(400).send({ detail: idErr });
+    const rawInst = appService.getInstance(req.params.id);
+    if (!rawInst)
+        return reply.status(404).send({ detail: "Instance not found" });
+    if (!appService.getInstanceInstallRecord(req.params.id))
+        return reply.status(404).send({ detail: "App not found" });
+    const capabilities = appService.getProvidedCapabilitiesForApp(req.params.id);
+    const capability = capabilities.find((entry) => entry.capability === req.params.capability);
+    if (!capability) {
+        return reply.status(404).send({ detail: `Capability '${req.params.capability}' not found` });
+    }
+    if (capability.visibility === "internal") {
+        return reply.status(403).send({ detail: `Capability '${req.params.capability}' is not externally accessible` });
+    }
+    if (capability.protocol !== "http" && capability.protocol !== "https") {
+        return reply.status(400).send({ detail: `Capability '${req.params.capability}' does not use HTTP(S)` });
+    }
+    let runtimePort;
+    try {
+        runtimePort = appService.resolveRuntimeCapabilityPort(req.params.id, req.params.capability) ?? undefined;
+    }
+    catch (error) {
+        if (appService.isCanonicalRuntimePortRequiredError(error)) {
+            return reply.status(error.statusCode || 409).send({ detail: error.message, code: error.code });
+        }
+        throw error;
+    }
+    if (typeof runtimePort !== "number" || runtimePort < 1) {
+        return reply.status(500).send({ detail: `Capability '${req.params.capability}' has no resolved port` });
+    }
+    const upstreamHost = await appService.getHostForAppPort(req.params.id, runtimePort);
+    const upstreamOrigin = `${capability.protocol}://${appService.urlHost(upstreamHost)}:${runtimePort}`;
+    const wildcardSuffix = typeof req.params["*"] === "string" ? req.params["*"] : "";
+    const proxyBasePath = capabilityProxyPath(req.params.id, req.params.capability);
+    const querySuffix = req.raw.url?.includes("?") ? req.raw.url.slice(req.raw.url.indexOf("?")) : "";
+    const requestPath = req.raw.url?.split("?")[0] ?? "";
+    const canonicalProxyBase = canonicalCapabilityProxyBase(proxyBasePath, capability.path);
+    if (!wildcardSuffix && canonicalProxyBase !== proxyBasePath && !requestPath.endsWith("/")) {
+        reply.code(308).header("location", `${canonicalProxyBase}${querySuffix}`);
+        return reply.send();
+    }
+    const upstreamPath = joinUpstreamPath(capability.path, wildcardSuffix);
+    const targetUrl = `${upstreamOrigin}${upstreamPath}${querySuffix}`;
+    const headers = new Headers();
+    for (const [key, value] of Object.entries(req.headers)) {
+        if (value == null)
+            continue;
+        const normalizedKey = key.toLowerCase();
+        if (HOP_BY_HOP.has(normalizedKey) || normalizedKey === "host" || normalizedKey === "content-length" || normalizedKey === "accept-encoding") {
+            continue;
+        }
+        if (normalizedKey === "authorization")
+            continue;
+        if (normalizedKey === "cookie") {
+            const stripped = stripPanelSessionCookie(value);
+            if (stripped)
+                headers.set(key, stripped);
+            continue;
+        }
+        if (Array.isArray(value)) {
+            for (const item of value)
+                headers.append(key, item);
+        }
+        else {
+            headers.set(key, String(value));
+        }
+    }
+    headers.set("accept-encoding", "identity");
+    if (headers.has("origin"))
+        headers.set("origin", upstreamOrigin);
+    if (req.headers.host)
+        headers.set("x-forwarded-host", String(req.headers.host));
+    headers.set("x-forwarded-proto", req.protocol);
+    const clientIp = typeof req.ip === "string" && req.ip
+        ? req.ip
+        : typeof req.raw?.socket?.remoteAddress === "string"
+            ? req.raw.socket.remoteAddress
+            : "";
+    if (clientIp) {
+        const forwardedFor = headers.get("x-forwarded-for");
+        headers.set("x-forwarded-for", forwardedFor ? `${forwardedFor}, ${clientIp}` : clientIp);
+        headers.set("x-real-ip", clientIp);
+    }
+    if (/(?:^|\/)(?:service-worker|sw)\.js$/i.test(requestPath)) {
+        reply
+            .code(200)
+            .header("content-type", "application/javascript; charset=utf-8")
+            .header("cache-control", "no-store, no-cache, must-revalidate, max-age=0")
+            .header("pragma", "no-cache")
+            .header("service-worker-allowed", "/");
+        return reply.send("// Capability proxy: service worker intentionally disabled.\n" +
+            "self.addEventListener('install',function(e){self.skipWaiting()});\n" +
+            "self.addEventListener('activate',function(e){\n" +
+            "  e.waitUntil((async function(){\n" +
+            "    try{var cs=await caches.keys();for(var i=0;i<cs.length;i++){try{await caches.delete(cs[i])}catch(_e){}}}catch(_e){}\n" +
+            "    try{var clients=await self.clients.matchAll({includeUncontrolled:true});clients.forEach(function(c){try{c.navigate(c.url)}catch(_e){}})}catch(_e){}\n" +
+            "    try{await self.registration.unregister()}catch(_e){}\n" +
+            "  })());\n" +
+            "});\n");
+    }
+    const upstreamAbort = new AbortController();
+    const connectTimer = setTimeout(() => upstreamAbort.abort(new Error("upstream connect timeout")), 30_000);
+    const onClientClose = () => {
+        if (!reply.raw.writableEnded)
+            upstreamAbort.abort(new Error("client disconnected"));
+    };
+    reply.raw.once("close", onClientClose);
+    try {
+        const requestBody = await buildProxyRequestBody(req);
+        const upstream = await fetch(targetUrl, {
+            method: req.method,
+            headers,
+            body: requestBody,
+            redirect: "manual",
+            signal: upstreamAbort.signal,
+        }).finally(() => clearTimeout(connectTimer));
+        const upstreamContentType = upstream.headers.get("content-type");
+        const willRewriteBody = shouldRewriteProxyResponse(upstreamContentType);
+        const willInjectHtml = (upstreamContentType ?? "").toLowerCase().includes("text/html");
+        reply.code(upstream.status);
+        upstream.headers.forEach((value, key) => {
+            const normalizedKey = key.toLowerCase();
+            if (HOP_BY_HOP.has(normalizedKey) || normalizedKey === "content-length" || normalizedKey === "content-encoding") {
+                return;
+            }
+            if (willRewriteBody && (normalizedKey === "cache-control" ||
+                normalizedKey === "etag" ||
+                normalizedKey === "last-modified" ||
+                normalizedKey === "expires" ||
+                normalizedKey === "pragma")) {
+                return;
+            }
+            if (willInjectHtml && (normalizedKey === "content-security-policy" ||
+                normalizedKey === "content-security-policy-report-only" ||
+                normalizedKey === "x-frame-options")) {
+                return;
+            }
+            if (normalizedKey === "location") {
+                if (value.startsWith("/")) {
+                    reply.header(key, rewriteCapabilityLocation(proxyBasePath, canonicalProxyBase, value));
+                    return;
+                }
+                try {
+                    const parsed = new URL(value);
+                    const upstreamBase = new URL(upstreamOrigin);
+                    if (parsed.origin === upstreamBase.origin) {
+                        reply.header(key, rewriteCapabilityLocation(proxyBasePath, canonicalProxyBase, parsed.pathname, parsed.search, parsed.hash));
+                        return;
+                    }
+                }
+                catch {
+                    // fall through to raw location header
+                }
+            }
+            reply.header(key, value);
+        });
+        if (req.method === "HEAD") {
+            reply.raw.off("close", onClientClose);
+            return reply.send();
+        }
+        if (willRewriteBody) {
+            reply.header("cache-control", "no-cache, no-store, must-revalidate");
+            reply.header("pragma", "no-cache");
+            reply.header("expires", "0");
+            let extraHeadHtml = "";
+            const htmlRewriter = getCapabilityHtmlRewriter(capability);
+            extraHeadHtml += (await htmlRewriter?.buildHeadHtml({
+                instanceId: req.params.id,
+                capability,
+                upstreamOrigin,
+                signal: upstreamAbort.signal,
+                willInjectHtml,
+            })) ?? "";
+            extraHeadHtml += capabilityProxyBootstrap(proxyBasePath);
+            const rawBody = await upstream.text();
+            if (willInjectHtml) {
+                const cleanupToken = capabilityProxyCleanupToken([
+                    req.params.id,
+                    req.params.capability,
+                    upstreamOrigin,
+                    upstreamContentType,
+                    upstream.headers.get("etag"),
+                    upstream.headers.get("last-modified"),
+                    upstream.headers.get("content-length"),
+                    rawBody,
+                ]);
+                const cookieHeader = (req.headers.cookie || "").toString();
+                const swCleaned = hasCookieValue(cookieHeader, "cap_proxy_sw_clean", cleanupToken);
+                if (!swCleaned) {
+                    reply.header("Clear-Site-Data", '"cache", "storage"');
+                    reply.header("Set-Cookie", `cap_proxy_sw_clean=${cleanupToken}; Path=${proxyBasePath}; Max-Age=2592000; SameSite=Lax`);
+                }
+            }
+            reply.raw.off("close", onClientClose);
+            const rewritten = rewriteProxyTextBody(rawBody, upstreamContentType, proxyBasePath, extraHeadHtml);
+            return reply.send(rewritten);
+        }
+        if (!upstream.body) {
+            reply.raw.off("close", onClientClose);
+            return reply.send();
+        }
+        const readable = Readable.fromWeb(upstream.body);
+        readable.once("close", () => reply.raw.off("close", onClientClose));
+        return reply.send(readable);
+    }
+    catch (error) {
+        reply.raw.off("close", onClientClose);
+        return reply.status(502).send({ detail: error?.message || `Failed to proxy capability '${req.params.capability}'` });
+    }
+}
+//# sourceMappingURL=http.js.map

package/dist/services/capability-proxy/http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../../../src/services/capability-proxy/http.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,KAAK,UAAU,MAAM,0BAA0B,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AAC/F,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AAEtE,SAAS,mBAAmB,CAAC,UAAkB,EAAE,UAAkB;IACjE,OAAO,kBAAkB,kBAAkB,CAAC,UAAU,CAAC,aAAa,kBAAkB,CAAC,UAAU,CAAC,EAAE,CAAC;AACvG,CAAC;AAED,SAAS,aAAa,CAAC,QAAgB,EAAE,MAAc;IACrD,MAAM,cAAc,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACpD,MAAM,gBAAgB,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACpD,IAAI,CAAC,gBAAgB;QAAE,OAAO,cAAc,CAAC;IAC7C,OAAO,GAAG,cAAc,IAAI,gBAAgB,EAAE,CAAC;AACjD,CAAC;AAED,SAAS,4BAA4B,CAAC,QAAgB,EAAE,cAAkC;IACxF,MAAM,wBAAwB,GAAG,OAAO,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACjG,MAAM,kBAAkB,GAAG,CAAC,wBAAwB,IAAI,wBAAwB,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC/F,OAAO,kBAAkB,CAAC,CAAC,CAAC,GAAG,QAAQ,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC;AACxD,CAAC;AAED,SAAS,yBAAyB,CAChC,QAAgB,EAChB,iBAAyB,EACzB,QAAgB,EAChB,MAAM,GAAG,EAAE,EACX,IAAI,GAAG,EAAE;IAET,MAAM,aAAa,GAAG,QAAQ,KAAK,GAAG;QACpC,CAAC,CAAC,iBAAiB;QACnB,CAAC,CAAC,aAAa,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACtC,OAAO,GAAG,aAAa,GAAG,MAAM,GAAG,IAAI,EAAE,CAAC;AAC5C,CAAC;AAED,SAAS,0BAA0B,CAAC,WAA0B;IAC5D,MAAM,KAAK,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAChD,OAAO,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;AACnE,CAAC;AAED,SAAS,2BAA2B,CAAC,KAAuC;IAC1E,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAClC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QACxB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACpB,CAAC;IACD,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,cAAc,CAAC,YAAoB,EAAE,IAAY,EAAE,aAAqB;IAC/E,OAAO,YAAY;SAChB,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SAC1B,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;QACb,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,EAAE,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QACzB,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,aAAa,CAAC;IAC5E,CAAC,CAAC,CAAC;AACP,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,wBAAwB,CAAC,aAAqB;IACrD,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;IACjE,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,CAAC;QACnC,cAAc;QACd,SAAS,MAAM,GAAG;QAClB,oBAAoB;QACpB,6HAA6H;QAC7H,gBAAgB;QAChB,GAAG;QACH,0FAA0F;QAC1F,mBAAmB;QACnB,gCAAgC;QAChC,2EAA2E;QAC3E,uFAAuF;QACvF,mDAAmD;QACnD,0BAA0B;QAC1B,4EAA4E;QAC5E,wBAAwB;QACxB,0FAA0F;QAC1F,eAAe;QACf,WAAW;QACX,GAAG;QACH,yBAAyB;QACzB,qJAAqJ;QACrJ,gNAAgN;QAChN,OAAO;KACR,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;IAEZ,OAAO;QACL,sBAAsB;QACtB,SAAS,MAAM,GAAG;QAClB,+BAA+B;QAC/B,kCAAkC;QAClC,+CAA+C;QAC/C,6IAA6I;QAC7I,GAAG;QACH,+HAA+H;QAC/H,eAAe;QACf,kKAAkK;QAClK,oBAAoB;QACpB,6HAA6H;QAC7H,gBAAgB;QAChB,GAAG;QACH,0FAA0F;QAC1F,iBAAiB;QACjB,gCAAgC;QAChC,oBAAoB;QACpB,+BAA+B;QAC/B,6CAA6C;QAC7C,uFAAuF;QACvF,cAAc;QACd,WAAW;QACX,GAAG;QACH,mBAAmB;QACnB,gCAAgC;QAChC,6CAA6C;QAC7C,sHAAsH;QACtH,wBAAwB;QACxB,oIAAoI;QACpI,eAAe;QACf,WAAW;QACX,GAAG;QACH,sBAAsB;QACtB,6BAA6B;QAC7B,gEAAgE;QAChE,gCAAgC;QAChC,sDAAsD;QACtD,6BAA6B;QAC7B,wCAAwC;QACxC,8CAA8C;QAC9C,qBAAqB;QACrB,qCAAqC;QACrC,4BAA4B;QAC5B,+BAA+B;QAC/B,oCAAoC;QACpC,iCAAiC;QACjC,gCAAgC;QAChC,uCAAuC;QACvC,iCAAiC;QACjC,gCAAgC;QAChC,yCAAyC;QACzC,0CAA0C;QAC1C,kDAAkD;QAClD,mDAAmD;QACnD,MAAM;QACN,yFAAyF;QACzF,4FAA4F;QAC5F,cAAc;QACd,+BAA+B;QAC/B,4DAA4D;QAC5D,uBAAuB;QACvB,iBAAiB;QACjB,4CAA4C;QAC5C,iDAAiD;QACjD,gDAAgD;QAChD,GAAG;QACH,oCAAoC;QACpC,qCAAqC;QACrC,oCAAoC;QACpC,qCAAqC;QACrC,4BAA4B;QAC5B,sBAAsB,aAAa,GAAG;QACtC,iCAAiC;QACjC,+IAA+I;QAC/I,GAAG;QACH,mCAAmC;QACnC,oEAAoE;QACpE,kEAAkE;QAClE,oDAAoD;QACpD,mJAAmJ;QACnJ,oKAAoK;QACpK,0EAA0E;QAC1E,yBAAyB;QACzB,GAAG;QACH,kCAAkC;QAClC,yJAAyJ;QACzJ,4CAA4C;QAC5C,GAAG;QACH,2BAA2B;QAC3B,8BAA8B;QAC9B,2CAA2C;QAC3C,gBAAgB;QAChB,mEAAmE;QACnE,IAAI;QACJ,2CAA2C;QAC3C,6CAA6C;QAC7C,iCAAiC;QACjC,uCAAuC;QACvC,qCAAqC;QACrC,GAAG;QACH,6BAA6B;QAC7B,8BAA8B;QAC9B,wCAAwC;QACxC,uCAAuC;QACvC,2BAA2B;QAC3B,IAAI;QACJ,6CAA6C;QAC7C,+CAA+C;QAC/C,mCAAmC;QACnC,uCAAuC;QACvC,GAAG;QACH,gBAAgB;KACjB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACb,CAAC;AAED,SAAS,oBAAoB,CAC3B,IAAY,EACZ,WAA0B,EAC1B,aAAqB,EACrB,aAAa,GAAG,EAAE;IAElB,MAAM,KAAK,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAChD,MAAM,kBAAkB,GAAG,GAAG,aAAa,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,CAAC;IACnE,IAAI,SAAS,GAAG,IAAI,CAAC;IAErB,IAAI,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QAChC,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,6CAA6C,EAAE,KAAK,kBAAkB,EAAE,CAAC,CAAC;QACxG,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,8BAA8B,EAAE,YAAY,kBAAkB,EAAE,CAAC,CAAC;QAChG,SAAS,GAAG,SAAS,CAAC,OAAO,CAC3B,oDAAoD,EACpD,OAAO,aAAa,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAC7C,CAAC;QACF,SAAS,GAAG,SAAS,CAAC,OAAO,CAC3B,6DAA6D,EAC7D,OAAO,aAAa,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAC/C,CAAC;QACF,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YAChC,IAAI,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;gBACnC,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,gBAAgB,EAAE,uBAAuB,kBAAkB,IAAI,CAAC,CAAC;YACjG,CAAC;iBAAM,CAAC;gBACN,SAAS,GAAG,eAAe,kBAAkB,KAAK,SAAS,EAAE,CAAC;YAChE,CAAC;QACH,CAAC;QAED,IAAI,aAAa,EAAE,CAAC;YAClB,IAAI,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC/B,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,GAAG,aAAa,EAAE,CAAC,CAAC;YACzF,CAAC;iBAAM,IAAI,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC1C,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,gBAAgB,EAAE,WAAW,aAAa,EAAE,CAAC,CAAC;YAC9E,CAAC;iBAAM,CAAC;gBACN,SAAS,GAAG,GAAG,aAAa,GAAG,SAAS,EAAE,CAAC;YAC7C,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/B,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,wBAAwB,EAAE,SAAS,kBAAkB,EAAE,CAAC,CAAC;IACzF,CAAC;SAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QACvC,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,uBAAuB,EAAE,SAAS,kBAAkB,EAAE,CAAC,CAAC;IACxF,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAID,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,KAAK,YAAY,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,SAAS,GAAG,KAA8E,CAAC;IACjG,OAAO,CACL,OAAO,SAAS,CAAC,IAAI,KAAK,UAAU;QACpC,OAAO,SAAS,CAAC,EAAE,KAAK,UAAU;QAClC,OAAO,SAAS,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,UAAU,CACtD,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,MAAyB;IAC1D,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QACjC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAClC,CAAC;aAAM,IAAI,KAAK,YAAY,UAAU,EAAE,CAAC;YACvC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAClC,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAiB;IAC3C,MAAM,GAAG,GAAG,IAAI,WAAW,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC9C,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC/B,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,KAAK,GAAG,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IAC3C,OAAO,KAAK,KAAK,MAAM,CAAC,SAAS,IAAI,KAAK,KAAK,IAAI,CAAC;AACtD,CAAC;AAED,SAAS,gBAAgB,CAAC,IAA6B;IACrD,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;IACrC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAChD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,KAAK,MAAM,IAAI,IAAI,KAAK;gBAAE,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAC7D,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC,QAAQ,EAAE,CAAC;AAC3B,CAAC;AAED,KAAK,UAAU,qBAAqB,CAAC,GAAQ;IAC3C,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM;QAAE,OAAO,SAAS,CAAC;IACpE,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;IACtB,IAAI,IAAI,IAAI,IAAI;QAAE,OAAO,SAAS,CAAC;IACnC,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,IAAI,YAAY,UAAU,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC;IACzF,IAAI,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;QACzB,OAAO,kBAAkB,CAAC,MAAM,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC;IAC7D,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAC5E,IAAI,WAAW,CAAC,QAAQ,CAAC,mCAAmC,CAAC,IAAI,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;QACrF,OAAO,gBAAgB,CAAC,IAAI,CAAC,CAAC;IAChC,CAAC;IACD,IAAI,WAAW,CAAC,QAAQ,CAAC,kBAAkB,CAAC,IAAI,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;QACpE,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC;IACD,IAAI,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,UAAkB,EAAE,cAAsB;IAKpF,MAAM,UAAU,GAAG,UAAU;SAC1B,6BAA6B,CAAC,UAAU,CAAC;SACzC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,KAAK,cAAc,CAAC,CAAC;IACxD,IAAI,CAAC,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,eAAe,cAAc,aAAa,CAAC,CAAC;IAC7E,IAAI,UAAU,CAAC,UAAU,KAAK,UAAU,EAAE,CAAC;QACzC,MAAM,IAAI,KAAK,CAAC,eAAe,cAAc,gCAAgC,CAAC,CAAC;IACjF,CAAC;IACD,IAAI,UAAU,CAAC,QAAQ,KAAK,MAAM,IAAI,UAAU,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACtE,MAAM,IAAI,KAAK,CAAC,eAAe,cAAc,wBAAwB,CAAC,CAAC;IACzE,CAAC;IAED,MAAM,WAAW,GAAG,UAAU,CAAC,4BAA4B,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;IACxF,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,GAAG,CAAC,EAAE,CAAC;QACvD,MAAM,IAAI,KAAK,CAAC,eAAe,cAAc,wBAAwB,CAAC,CAAC;IACzE,CAAC;IAED,MAAM,YAAY,GAAG,MAAM,UAAU,CAAC,iBAAiB,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;IACjF,MAAM,SAAS,GAAG,mBAAmB,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;IAClE,MAAM,wBAAwB,GAAG,OAAO,UAAU,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACnG,MAAM,QAAQ,GAAG,CAAC,wBAAwB,IAAI,wBAAwB,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,SAAS,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;IACnH,OAAO;QACL,UAAU;QACV,aAAa,EAAE,GAAG,UAAU,CAAC,QAAQ,MAAM,UAAU,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,WAAW,EAAE;QAC5F,QAAQ;KACT,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,GAAQ,EAAE,KAAU;IAChE,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACxC,IAAI,KAAK;QAAE,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IAE5D,MAAM,OAAO,GAAG,UAAU,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACtD,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC,CAAC;IAE9E,IAAI,CAAC,UAAU,CAAC,wBAAwB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QAAE,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,CAAC;IAEpH,MAAM,YAAY,GAAG,UAAU,CAAC,6BAA6B,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC7E,MAAM,UAAU,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,KAAK,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAC5F,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,eAAe,GAAG,CAAC,MAAM,CAAC,UAAU,aAAa,EAAE,CAAC,CAAC;IAC/F,CAAC;IACD,IAAI,UAAU,CAAC,UAAU,KAAK,UAAU,EAAE,CAAC;QACzC,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,eAAe,GAAG,CAAC,MAAM,CAAC,UAAU,gCAAgC,EAAE,CAAC,CAAC;IAClH,CAAC;IACD,IAAI,UAAU,CAAC,QAAQ,KAAK,MAAM,IAAI,UAAU,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACtE,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,eAAe,GAAG,CAAC,MAAM,CAAC,UAAU,wBAAwB,EAAE,CAAC,CAAC;IAC1G,CAAC;IAED,IAAI,WAA+B,CAAC;IACpC,IAAI,CAAC;QACH,WAAW,GAAG,UAAU,CAAC,4BAA4B,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,SAAS,CAAC;IAC3G,CAAC;IAAC,OAAO,KAAU,EAAE,CAAC;QACpB,IAAI,UAAU,CAAC,mCAAmC,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1D,OAAO,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QACjG,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IACD,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,GAAG,CAAC,EAAE,CAAC;QACvD,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,eAAe,GAAG,CAAC,MAAM,CAAC,UAAU,wBAAwB,EAAE,CAAC,CAAC;IAC1G,CAAC;IAED,MAAM,YAAY,GAAG,MAAM,UAAU,CAAC,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;IACpF,MAAM,cAAc,GAAG,GAAG,UAAU,CAAC,QAAQ,MAAM,UAAU,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,WAAW,EAAE,CAAC;IACrG,MAAM,cAAc,GAAG,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAClF,MAAM,aAAa,GAAG,mBAAmB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAChF,MAAM,WAAW,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAClG,MAAM,WAAW,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACrD,MAAM,kBAAkB,GAAG,4BAA4B,CAAC,aAAa,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC;IAExF,IAAI,CAAC,cAAc,IAAI,kBAAkB,KAAK,aAAa,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1F,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,UAAU,EAAE,GAAG,kBAAkB,GAAG,WAAW,EAAE,CAAC,CAAC;QAC1E,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;IACtB,CAAC;IAED,MAAM,YAAY,GAAG,gBAAgB,CAAC,UAAU,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;IACvE,MAAM,SAAS,GAAG,GAAG,cAAc,GAAG,YAAY,GAAG,WAAW,EAAE,CAAC;IAEnE,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;IAC9B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QACvD,IAAI,KAAK,IAAI,IAAI;YAAE,SAAS;QAC5B,MAAM,aAAa,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;QACxC,IAAI,UAAU,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,aAAa,KAAK,MAAM,IAAI,aAAa,KAAK,gBAAgB,IAAI,aAAa,KAAK,iBAAiB,EAAE,CAAC;YAC3I,SAAS;QACX,CAAC;QACD,IAAI,aAAa,KAAK,eAAe;YAAE,SAAS;QAChD,IAAI,aAAa,KAAK,QAAQ,EAAE,CAAC;YAC/B,MAAM,QAAQ,GAAG,uBAAuB,CAAC,KAAsC,CAAC,CAAC;YACjF,IAAI,QAAQ;gBAAE,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YACzC,SAAS;QACX,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,KAAK,MAAM,IAAI,IAAI,KAAK;gBAAE,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACtD,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,UAAU,CAAC,CAAC;IAC3C,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;QAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;IACjE,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI;QAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IAChF,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC/C,MAAM,QAAQ,GAAG,OAAO,GAAG,CAAC,EAAE,KAAK,QAAQ,IAAI,GAAG,CAAC,EAAE;QACnD,CAAC,CAAC,GAAG,CAAC,EAAE;QACR,CAAC,CAAC,OAAO,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,aAAa,KAAK,QAAQ;YAClD,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa;YAC9B,CAAC,CAAC,EAAE,CAAC;IACT,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;QACpD,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,YAAY,CAAC,CAAC,CAAC,GAAG,YAAY,KAAK,QAAQ,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QACzF,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IACrC,CAAC;IAED,IAAI,qCAAqC,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QAC5D,KAAK;aACF,IAAI,CAAC,GAAG,CAAC;aACT,MAAM,CAAC,cAAc,EAAE,uCAAuC,CAAC;aAC/D,MAAM,CAAC,eAAe,EAAE,gDAAgD,CAAC;aACzE,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC;aAC5B,MAAM,CAAC,wBAAwB,EAAE,GAAG,CAAC,CAAC;QACzC,OAAO,KAAK,CAAC,IAAI,CACf,+DAA+D;YAC/D,qEAAqE;YACrE,iDAAiD;YACjD,oCAAoC;YACpC,2HAA2H;YAC3H,2JAA2J;YAC3J,4DAA4D;YAC5D,YAAY;YACZ,OAAO,CACR,CAAC;IACJ,CAAC;IAED,MAAM,aAAa,GAAG,IAAI,eAAe,EAAE,CAAC;IAC5C,MAAM,YAAY,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IAC1G,MAAM,aAAa,GAAG,GAAG,EAAE;QACzB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa;YAAE,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC;IACtF,CAAC,CAAC;IACF,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;IACvC,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,MAAM,qBAAqB,CAAC,GAAG,CAAC,CAAC;QACrD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,SAAS,EAAE;YACtC,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,OAAO;YACP,IAAI,EAAE,WAAW;YACjB,QAAQ,EAAE,QAAQ;YAClB,MAAM,EAAE,aAAa,CAAC,MAAM;SAC7B,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC,CAAC;QAC7C,MAAM,mBAAmB,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QACjE,MAAM,eAAe,GAAG,0BAA0B,CAAC,mBAAmB,CAAC,CAAC;QACxE,MAAM,cAAc,GAAG,CAAC,mBAAmB,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAEvF,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC5B,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YACtC,MAAM,aAAa,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;YACxC,IAAI,UAAU,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,aAAa,KAAK,gBAAgB,IAAI,aAAa,KAAK,kBAAkB,EAAE,CAAC;gBAChH,OAAO;YACT,CAAC;YACD,IAAI,eAAe,IAAI,CACrB,aAAa,KAAK,eAAe;gBACjC,aAAa,KAAK,MAAM;gBACxB,aAAa,KAAK,eAAe;gBACjC,aAAa,KAAK,SAAS;gBAC3B,aAAa,KAAK,QAAQ,CAC3B,EAAE,CAAC;gBACF,OAAO;YACT,CAAC;YACD,IAAI,cAAc,IAAI,CACpB,aAAa,KAAK,yBAAyB;gBAC3C,aAAa,KAAK,qCAAqC;gBACvD,aAAa,KAAK,iBAAiB,CACpC,EAAE,CAAC;gBACF,OAAO;YACT,CAAC;YACD,IAAI,aAAa,KAAK,UAAU,EAAE,CAAC;gBACjC,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC1B,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,yBAAyB,CAAC,aAAa,EAAE,kBAAkB,EAAE,KAAK,CAAC,CAAC,CAAC;oBACvF,OAAO;gBACT,CAAC;gBACD,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;oBAC9B,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,CAAC;oBAC7C,IAAI,MAAM,CAAC,MAAM,KAAK,YAAY,CAAC,MAAM,EAAE,CAAC;wBAC1C,KAAK,CAAC,MAAM,CACV,GAAG,EACH,yBAAyB,CAAC,aAAa,EAAE,kBAAkB,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAC1G,CAAC;wBACF,OAAO;oBACT,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,sCAAsC;gBACxC,CAAC;YACH,CAAC;YACD,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC3B,CAAC,CAAC,CAAC;QAEH,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC1B,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;YACtC,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;QACtB,CAAC;QAED,IAAI,eAAe,EAAE,CAAC;YACpB,KAAK,CAAC,MAAM,CAAC,eAAe,EAAE,qCAAqC,CAAC,CAAC;YACrE,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;YACnC,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;YAC7B,IAAI,aAAa,GAAG,EAAE,CAAC;YACvB,MAAM,YAAY,GAAG,yBAAyB,CAAC,UAAU,CAAC,CAAC;YAC3D,aAAa,IAAI,CAAC,MAAM,YAAY,EAAE,aAAa,CAAC;gBAClD,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE;gBACzB,UAAU;gBACV,cAAc;gBACd,MAAM,EAAE,aAAa,CAAC,MAAM;gBAC5B,cAAc;aACf,CAAC,CAAC,IAAI,EAAE,CAAC;YACV,aAAa,IAAI,wBAAwB,CAAC,aAAa,CAAC,CAAC;YAEzD,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YAEtC,IAAI,cAAc,EAAE,CAAC;gBACnB,MAAM,YAAY,GAAG,2BAA2B,CAAC;oBAC/C,GAAG,CAAC,MAAM,CAAC,EAAE;oBACb,GAAG,CAAC,MAAM,CAAC,UAAU;oBACrB,cAAc;oBACd,mBAAmB;oBACnB,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC;oBAC5B,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;oBACrC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;oBACtC,OAAO;iBACR,CAAC,CAAC;gBACH,MAAM,YAAY,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;gBAC3D,MAAM,SAAS,GAAG,cAAc,CAAC,YAAY,EAAE,oBAAoB,EAAE,YAAY,CAAC,CAAC;gBACnF,IAAI,CAAC,SAAS,EAAE,CAAC;oBACf,KAAK,CAAC,MAAM,CAAC,iBAAiB,EAAE,oBAAoB,CAAC,CAAC;oBACtD,KAAK,CAAC,MAAM,CACV,YAAY,EACZ,sBAAsB,YAAY,UAAU,aAAa,iCAAiC,CAC3F,CAAC;gBACJ,CAAC;YACH,CAAC;YAED,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;YACtC,MAAM,SAAS,GAAG,oBAAoB,CACpC,OAAO,EACP,mBAAmB,EACnB,aAAa,EACb,aAAa,CACd,CAAC;YACF,OAAO,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC/B,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;YACnB,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;YACtC,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;QACtB,CAAC;QACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAW,CAAC,CAAC;QACxD,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC;QACpE,OAAO,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC9B,CAAC;IAAC,OAAO,KAAU,EAAE,CAAC;QACpB,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;QACtC,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,IAAI,+BAA+B,GAAG,CAAC,MAAM,CAAC,UAAU,GAAG,EAAE,CAAC,CAAC;IACvH,CAAC;AACH,CAAC"}

package/dist/services/capability-proxy/terminal.d.ts

@@ -0,0 +1,4 @@
+export declare function startTerminalCapabilitySession(req: any, reply: any): Promise<any>;
+export declare function streamTerminalCapabilitySession(req: any, reply: any): Promise<any>;
+export declare function sendTerminalCapabilityInput(req: any, reply: any): Promise<any>;
+export declare function stopTerminalCapabilitySession(req: any, reply: any): Promise<any>;