mates-fullstack 1.0.0-beta.1

package/dist/rpc-runner.js

@@ -0,0 +1,564 @@
+/**
+ * mates-fullstack — rpc-runner.ts
+ *
+ * Executes a registered RPC function for an incoming HTTP request.
+ *
+ * Execution pipeline per request:
+ *   1. Read + size-check request body
+ *   2. Parse payload (JSON or multipart/form-data)
+ *   3. Create Context from request headers
+ *   4. Run onRequest hooks (registered in server/main.ts)
+ *      - throws          → error response sent, onResponse SKIPPED
+ *      - returns Response → that response sent, onResponse RUNS
+ *      - returns nothing  → continue
+ *   5. Run entry.fn(payload, ctx)
+ *      - throws          → error response sent, onResponse SKIPPED
+ *      - returns data    → onResponse hooks run, then response sent
+ *   6. Detect return type → route to correct response writer:
+ *      - StreamResponse → SSE
+ *      - Download       → binary attachment
+ *      - void/null/undefined → {} 200
+ *      - anything else  → JSON 200
+ *   7. Run onResponse hooks (with data + ctx)
+ *   8. Apply ctx.resHeaders to the response
+ *
+ * Error handling:
+ *   - Redirect throw     → 302 JSON { __type: "Redirect", url, status }
+ *   - ServerError throw  → 4xx/5xx JSON { __type, message, status, code, ...}
+ *   - Plain Error throw  → 500, message hidden in production
+ *   - Unknown throw      → 500, "Internal Server Error"
+ *
+ * Body limits:
+ *   - JSON:      1MB default (MAX_JSON_BYTES)
+ *   - Multipart: 10MB default (MAX_UPLOAD_BYTES)
+ */
+import { createContext, applyResHeaders } from "./ctx.js";
+import { serializeError } from "./errors.js";
+import { isRedirect, serializeRedirect } from "./redirect.js";
+import { isStreamResponse } from "./stream.js";
+import { isDownload, writeDownload } from "./download.js";
+import { runResponseHooks, runBeforeRPCHooks, runAfterRPCHooks, } from "./middleware.js";
+const _config = {
+    maxJsonBytes: 1 * 1024 * 1024,
+    maxJsonDepth: 50,
+    maxArrayLength: 10000,
+    maxStringLength: 100000,
+    maxUploadBytes: 10 * 1024 * 1024,
+    maxMultipartParts: 200,
+};
+/**
+ * Configure RPC runner limits. Call once at startup.
+ * All values are optional — only provided values override the defaults.
+ */
+export function configureRpcRunner(config) {
+    if (config.maxJsonBytes !== undefined)
+        _config.maxJsonBytes = config.maxJsonBytes;
+    if (config.maxJsonDepth !== undefined)
+        _config.maxJsonDepth = config.maxJsonDepth;
+    if (config.maxArrayLength !== undefined)
+        _config.maxArrayLength = config.maxArrayLength;
+    if (config.maxStringLength !== undefined)
+        _config.maxStringLength = config.maxStringLength;
+    if (config.maxUploadBytes !== undefined)
+        _config.maxUploadBytes = config.maxUploadBytes;
+    if (config.maxMultipartParts !== undefined)
+        _config.maxMultipartParts = config.maxMultipartParts;
+}
+/**
+ * Recursively validate a parsed JSON payload for safety limits.
+ * Checks depth, array size, and string lengths.
+ */
+function _validateJsonPayload(value, depth) {
+    if (depth > _config.maxJsonDepth) {
+        const err = new Error(`JSON payload exceeds maximum depth of ${_config.maxJsonDepth}.`);
+        err.status = 400;
+        throw err;
+    }
+    if (typeof value === "string" && value.length > _config.maxStringLength) {
+        const err = new Error(`JSON string exceeds maximum length of ${_config.maxStringLength}.`);
+        err.status = 413;
+        throw err;
+    }
+    if (Array.isArray(value)) {
+        if (value.length > _config.maxArrayLength) {
+            const err = new Error(`JSON array exceeds maximum length of ${_config.maxArrayLength}.`);
+            err.status = 413;
+            throw err;
+        }
+        for (const item of value) {
+            _validateJsonPayload(item, depth + 1);
+        }
+    }
+    else if (typeof value === "object" && value !== null) {
+        for (const key of Object.keys(value)) {
+            _validateJsonPayload(key, depth + 1);
+            _validateJsonPayload(value[key], depth + 1);
+        }
+    }
+}
+/** Request timeout in milliseconds: 30 seconds */
+export const DEFAULT_TIMEOUT_MS = 30000;
+// ─── Runner ───────────────────────────────────────────────────────────────────
+/**
+ * Handle a single RPC request end-to-end.
+ * Never throws under any circumstances.
+ * All errors — including unexpected framework bugs — produce a JSON error response.
+ */
+export async function runRpcRequest(req, res, entry, dev, timeoutMs = DEFAULT_TIMEOUT_MS, 
+/** Pre-populated ctx from the outer request handler. When supplied, auth
+ * and other middleware state already applied via onRequest are shared. */
+sharedCtx) {
+    // Create an AbortController to cancel streams if the client disconnects
+    // or if the request times out
+    const controller = new AbortController();
+    const { signal } = controller;
+    // Use the pre-populated Context from the outer request handler if provided
+    // (preserves auth, state, and headers set by onRequest middleware),
+    // otherwise create a fresh ctx from the raw Node.js request.
+    const ctx = sharedCtx ?? createContext(req);
+    req.on("close", () => {
+        if (!res.writableEnded)
+            controller.abort();
+    });
+    req.on("error", () => controller.abort());
+    const timeoutId = setTimeout(() => {
+        if (!res.writableEnded) {
+            controller.abort();
+            const serialized = {
+                __type: "AppError",
+                message: "Request timeout",
+                status: 504,
+                code: "TIMEOUT",
+            };
+            ctx.resStatus = 504;
+            void runResponseHooks(ctx);
+            _writeErrorResponse(res, serialized, 504);
+        }
+    }, timeoutMs);
+    try {
+        await _execute(req, res, entry, dev, signal, ctx);
+    }
+    catch (err) {
+        // Absolute last resort — _execute itself has bugs or threw unexpectedly
+        if (!res.headersSent) {
+            const serialized = serializeError(err, dev);
+            ctx.resStatus = serialized.status;
+            await runResponseHooks(ctx);
+            _writeErrorResponse(res, serialized, serialized.status);
+        }
+    }
+    finally {
+        clearTimeout(timeoutId);
+    }
+}
+// ─── Execution ────────────────────────────────────────────────────────────────
+async function _execute(req, res, entry, dev, signal, ctx) {
+    // ── 1. Parse payload ───────────────────────────────────────────────────────
+    let payload;
+    try {
+        payload = await _parseBody(req);
+    }
+    catch (err) {
+        if (res.headersSent)
+            return;
+        const status = err.status ?? 400;
+        const serialized = {
+            __type: "AppError",
+            message: err.message ?? "Bad request",
+            status,
+            code: "BAD_REQUEST",
+        };
+        ctx.resStatus = status;
+        await runResponseHooks(ctx);
+        _writeErrorResponse(res, serialized, status);
+        return;
+    }
+    // ── 2. Run the server function ─────────────────────────────────────────────
+    // RPC functions receive the request payload as the first argument and
+    // the framework Context (with auth, cookies, etc.) as the second argument.
+    try {
+        const mergedPayload = payload && typeof payload === "object" && !Array.isArray(payload)
+            ? payload
+            : {};
+        // Run onBeforeRPC hooks as a data pipeline — each hook can mutate the
+        // payload before it reaches the RPC function.
+        const moduleId = entry.url.replace(/^\/api\//, "").replace(/\/[^/]+$/, "");
+        const rpcPayload = await runBeforeRPCHooks(mergedPayload, ctx);
+        const startTime = performance.now();
+        const raw = await entry.fn(rpcPayload, ctx);
+        const duration = performance.now() - startTime;
+        // Run onAfterRPC hooks as a result pipeline — each hook can mutate the
+        // return value before it is sent to the client.
+        const result = await runAfterRPCHooks(raw, ctx, {
+            moduleId,
+            fnName: entry.fnName,
+            duration,
+        });
+        if (res.headersSent)
+            return;
+        // Detect special response types — before the generic JSON path
+        if (isRedirect(result)) {
+            ctx.resStatus = result.status;
+            await runResponseHooks(ctx);
+            applyResHeaders(ctx.resHeaders, res);
+            _writeJsonResponse(res, serializeRedirect(result), result.status, ctx.resHeaders);
+            return;
+        }
+        if (isStreamResponse(result)) {
+            ctx.resStatus = 200;
+            await runResponseHooks(ctx);
+            applyResHeaders(ctx.resHeaders, res);
+            const { writeStream } = await import("./stream.js");
+            writeStream(result, res, signal);
+            return;
+        }
+        if (isDownload(result)) {
+            ctx.resStatus = 200;
+            await runResponseHooks(ctx);
+            applyResHeaders(ctx.resHeaders, res);
+            writeDownload(result, res);
+            return;
+        }
+        // Default: JSON response
+        const body = result === undefined || result === null ? {} : result;
+        ctx.resStatus = 200;
+        await runResponseHooks(ctx);
+        applyResHeaders(ctx.resHeaders, res);
+        _writeJsonResponse(res, body, 200, ctx.resHeaders);
+    }
+    catch (err) {
+        if (res.headersSent)
+            return;
+        // Check for Redirect thrown via redirect() helper
+        if (isRedirect(err)) {
+            ctx.resStatus = err.status;
+            await runResponseHooks(ctx);
+            applyResHeaders(ctx.resHeaders, res);
+            _writeJsonResponse(res, serializeRedirect(err), err.status, ctx.resHeaders);
+            return;
+        }
+        const serialized = serializeError(err, dev);
+        _applyRateLimitHeader(serialized, ctx);
+        ctx.resStatus = serialized.status;
+        await runResponseHooks(ctx);
+        applyResHeaders(ctx.resHeaders, res);
+        _writeErrorResponse(res, serialized, serialized.status);
+    }
+}
+// ─── Internal helpers ──────────────────────────────────────────────────────────────────────
+/** Set Retry-After header for rate-limit errors. */
+function _applyRateLimitHeader(serialized, ctx) {
+    if (serialized.code === "RATE_LIMIT" && serialized.retryAfter !== undefined) {
+        ctx.resHeaders["retry-after"] = String(serialized.retryAfter);
+    }
+}
+// ─── Body parsing ────────────────────────────────────────────────────────────────────
+/**
+ * Read and parse the request body.
+ *
+ * Handles:
+ *   - application/json        → JSON.parse
+ *   - multipart/form-data     → FormData-like object with File entries
+ *   - no content-type         → attempt JSON parse, fallback to {}
+ *   - empty body              → {}
+ *
+ * Throws with .status set for:
+ *   - Body too large (413)
+ *   - Malformed JSON (400)
+ */
+export async function parseRpcBody(req) {
+    return _parseBody(req);
+}
+async function _parseBody(req) {
+    const contentType = (req.headers["content-type"] ?? "").toLowerCase();
+    const contentLength = parseInt(req.headers["content-length"] ?? "0", 10);
+    // ── Multipart/form-data ────────────────────────────────────────────────
+    if (contentType.includes("multipart/form-data")) {
+        if (contentLength > _config.maxUploadBytes) {
+            const err = new Error(`Upload too large. Maximum size is ${_config.maxUploadBytes / 1024 / 1024}MB.`);
+            err.status = 413;
+            throw err;
+        }
+        return _parseMultipart(req, contentType);
+    }
+    // ── JSON (default) ─────────────────────────────────────────────────────
+    if (contentLength > _config.maxJsonBytes) {
+        const err = new Error(`Request body too large. Maximum size is ${_config.maxJsonBytes / 1024}KB.`);
+        err.status = 413;
+        throw err;
+    }
+    const raw = await _readBody(req, _config.maxJsonBytes);
+    // Empty body → {}
+    if (!raw || raw.length === 0)
+        return {};
+    try {
+        // Parse JSON first, then validate depth and array sizes recursively.
+        // This prevents stack exhaustion from deeply nested objects
+        // and CPU/memory exhaustion from massive arrays.
+        const parsed = JSON.parse(raw);
+        _validateJsonPayload(parsed, 0);
+        // Must be an object at the top level
+        if (typeof parsed !== "object" ||
+            parsed === null ||
+            Array.isArray(parsed)) {
+            // Allow it but wrap so payload is always an object shape
+            // The actual function signature handles this
+            return parsed;
+        }
+        return parsed;
+    }
+    catch {
+        const err = new Error("Invalid JSON in request body.");
+        err.status = 400;
+        throw err;
+    }
+}
+/**
+ * Read the raw request body as a string.
+ * Enforces a maximum byte limit to prevent memory exhaustion.
+ */
+async function _readBody(req, maxBytes) {
+    return new Promise((resolve, reject) => {
+        const chunks = [];
+        let totalBytes = 0;
+        req.on("data", (chunk) => {
+            totalBytes += chunk.length;
+            if (totalBytes > maxBytes) {
+                req.destroy(); // stop reading
+                const err = new Error(`Request body too large. Maximum size is ${maxBytes / 1024}KB.`);
+                err.status = 413;
+                reject(err);
+                return;
+            }
+            chunks.push(chunk);
+        });
+        req.on("end", () => {
+            resolve(Buffer.concat(chunks).toString("utf-8"));
+        });
+        req.on("error", (err) => {
+            reject(err);
+        });
+    });
+}
+/**
+ * Parse a multipart/form-data body.
+ *
+ * Returns a plain object where:
+ * - Text fields → string values
+ * - File fields → { name, type, size, buffer } objects
+ *
+ * This is a minimal parser that covers the common cases.
+ * For production use, a more robust parser (e.g. busboy) is recommended
+ * but we avoid adding dependencies.
+ */
+async function _parseMultipart(req, contentType) {
+    // Extract boundary from Content-Type header
+    // e.g. multipart/form-data; boundary=----WebKitFormBoundary...
+    const boundaryMatch = contentType.match(/boundary=([^\s;]+)/i);
+    if (!boundaryMatch) {
+        const err = new Error("Missing boundary in multipart/form-data Content-Type.");
+        err.status = 400;
+        throw err;
+    }
+    const boundary = boundaryMatch[1].replace(/^"(.*)"$/, "$1"); // strip quotes
+    const rawBody = await _readBodyBuffer(req, _config.maxUploadBytes);
+    return _parseMultipartBuffer(rawBody, boundary);
+}
+async function _readBodyBuffer(req, maxBytes) {
+    return new Promise((resolve, reject) => {
+        const chunks = [];
+        let totalBytes = 0;
+        req.on("data", (chunk) => {
+            totalBytes += chunk.length;
+            if (totalBytes > maxBytes) {
+                req.destroy();
+                const err = new Error(`Upload too large. Maximum size is ${maxBytes / 1024 / 1024}MB.`);
+                err.status = 413;
+                reject(err);
+                return;
+            }
+            chunks.push(chunk);
+        });
+        req.on("end", () => resolve(Buffer.concat(chunks)));
+        req.on("error", reject);
+    });
+}
+/**
+ * Sanitize a filename from Content-Disposition to prevent path traversal.
+ * Strips directory separators, null bytes, and other dangerous characters.
+ */
+function _sanitizeFilename(filename) {
+    // Strip null bytes
+    let clean = filename.replace(/\0/g, "");
+    // Strip directory traversal patterns
+    clean = clean.replace(/\.\./g, "");
+    // Strip path separators (forward and backslash)
+    clean = clean.replace(/[/\\]/g, "");
+    // Strip any remaining dangerous characters
+    clean = clean.replace(/[<>:"|?*]/g, "_");
+    // Trim whitespace
+    clean = clean.trim();
+    // Default name for empty results
+    return clean || "unnamed";
+}
+function _parseMultipartBuffer(body, boundary) {
+    const result = {};
+    const delimiter = Buffer.from(`--${boundary}`);
+    const parts = _splitBuffer(body, delimiter);
+    // Enforce maximum part count to prevent CPU/memory exhaustion
+    if (parts.length > _config.maxMultipartParts) {
+        const err = new Error(`Too many multipart parts. Maximum is ${_config.maxMultipartParts}.`);
+        err.status = 413;
+        throw err;
+    }
+    for (const part of parts) {
+        // Skip preamble, epilogue, and empty parts
+        if (part.length < 4)
+            continue;
+        // Find the blank line separating headers from body (\r\n\r\n)
+        const headerEnd = _indexOfBuffer(part, Buffer.from("\r\n\r\n"));
+        if (headerEnd === -1)
+            continue;
+        const headerSection = part.slice(0, headerEnd).toString("utf-8");
+        const bodySection = part.slice(headerEnd + 4);
+        // Remove trailing \r\n from body
+        const partBody = bodySection.length >= 2 &&
+            bodySection[bodySection.length - 2] === 13 &&
+            bodySection[bodySection.length - 1] === 10
+            ? bodySection.slice(0, -2)
+            : bodySection;
+        // Parse headers
+        const headers = {};
+        for (const line of headerSection.split("\r\n")) {
+            const colonIdx = line.indexOf(":");
+            if (colonIdx === -1)
+                continue;
+            headers[line.slice(0, colonIdx).trim().toLowerCase()] = line
+                .slice(colonIdx + 1)
+                .trim();
+        }
+        // Extract name and filename from Content-Disposition
+        const disposition = headers["content-disposition"] ?? "";
+        const nameMatch = disposition.match(/name="([^"]+)"/);
+        const filenameMatch = disposition.match(/filename="([^"]*)"/);
+        if (!nameMatch)
+            continue;
+        const fieldName = nameMatch[1];
+        if (filenameMatch) {
+            // File field
+            const rawFilename = filenameMatch[1];
+            const filename = _sanitizeFilename(rawFilename);
+            const mimeType = headers["content-type"] ?? "application/octet-stream";
+            // Store as a plain object with buffer — avoids File/Blob browser APIs
+            const fileEntry = {
+                name: filename,
+                type: mimeType,
+                size: partBody.length,
+                buffer: partBody,
+                // Helper to get as Buffer (server-side usage)
+                arrayBuffer: () => Promise.resolve(partBody.buffer.slice(partBody.byteOffset, partBody.byteOffset + partBody.byteLength)),
+            };
+            // Multiple files with same name → convert to array
+            if (fieldName in result) {
+                const existing = result[fieldName];
+                result[fieldName] = Array.isArray(existing)
+                    ? [...existing, fileEntry]
+                    : [existing, fileEntry];
+            }
+            else {
+                result[fieldName] = fileEntry;
+            }
+        }
+        else {
+            // Text field
+            const value = partBody.toString("utf-8");
+            if (fieldName in result) {
+                const existing = result[fieldName];
+                result[fieldName] = Array.isArray(existing)
+                    ? [...existing, value]
+                    : [existing, value];
+            }
+            else {
+                result[fieldName] = value;
+            }
+        }
+    }
+    return result;
+}
+/** Split a Buffer by a delimiter Buffer, returning the parts between delimiters. */
+function _splitBuffer(buf, delimiter) {
+    const parts = [];
+    let start = 0;
+    while (true) {
+        const idx = _indexOfBuffer(buf, delimiter, start);
+        if (idx === -1) {
+            parts.push(buf.slice(start));
+            break;
+        }
+        parts.push(buf.slice(start, idx));
+        start = idx + delimiter.length;
+        // Skip \r\n after delimiter
+        if (buf[start] === 13 && buf[start + 1] === 10)
+            start += 2;
+        // Final boundary ends with --
+        if (buf[start] === 45 && buf[start + 1] === 45)
+            break;
+    }
+    return parts;
+}
+/** Find the index of `needle` in `haystack` starting at `offset`. */
+function _indexOfBuffer(haystack, needle, offset = 0) {
+    outer: for (let i = offset; i <= haystack.length - needle.length; i++) {
+        for (let j = 0; j < needle.length; j++) {
+            if (haystack[i + j] !== needle[j])
+                continue outer;
+        }
+        return i;
+    }
+    return -1;
+}
+// ─── Response writers ─────────────────────────────────────────────────────────
+/**
+ * Write a JSON response with the given status code.
+ * Applies ctx.resHeaders before writing.
+ */
+function _writeJsonResponse(res, body, status, resHeaders = {}) {
+    if (res.headersSent)
+        return;
+    let json;
+    let finalStatus = status;
+    try {
+        json = JSON.stringify(body);
+    }
+    catch {
+        finalStatus = 500;
+        json = JSON.stringify({
+            __type: "AppError",
+            message: "RPC response is not JSON-serializable",
+            status: 500,
+            code: "SERIALIZATION_ERROR",
+        });
+    }
+    const headers = {
+        "Content-Type": "application/json; charset=utf-8",
+        "Content-Length": Buffer.byteLength(json).toString(),
+        ...resHeaders,
+    };
+    try {
+        res.writeHead(finalStatus, headers);
+        res.end(json);
+    }
+    catch {
+        // Connection was closed before we could write — ignore
+    }
+}
+/**
+ * Write a JSON error response.
+ * Does NOT apply ctx.resHeaders (caller should do that separately if needed).
+ */
+function _writeErrorResponse(res, error, status) {
+    if (res.headersSent)
+        return;
+    _writeJsonResponse(res, error, status);
+}
+//# sourceMappingURL=rpc-runner.js.map

package/dist/rpc-runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rpc-runner.js","sourceRoot":"","sources":["../src/rpc-runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAGH,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAE1D,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAC9D,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC1D,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,gBAAgB,GACjB,MAAM,iBAAiB,CAAC;AAiCzB,MAAM,OAAO,GAA8B;IACzC,YAAY,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI;IAC7B,YAAY,EAAE,EAAE;IAChB,cAAc,EAAE,KAAM;IACtB,eAAe,EAAE,MAAO;IACxB,cAAc,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;IAChC,iBAAiB,EAAE,GAAG;CACvB,CAAC;AAEF;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAuB;IACxD,IAAI,MAAM,CAAC,YAAY,KAAK,SAAS;QACnC,OAAO,CAAC,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;IAC7C,IAAI,MAAM,CAAC,YAAY,KAAK,SAAS;QACnC,OAAO,CAAC,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;IAC7C,IAAI,MAAM,CAAC,cAAc,KAAK,SAAS;QACrC,OAAO,CAAC,cAAc,GAAG,MAAM,CAAC,cAAc,CAAC;IACjD,IAAI,MAAM,CAAC,eAAe,KAAK,SAAS;QACtC,OAAO,CAAC,eAAe,GAAG,MAAM,CAAC,eAAe,CAAC;IACnD,IAAI,MAAM,CAAC,cAAc,KAAK,SAAS;QACrC,OAAO,CAAC,cAAc,GAAG,MAAM,CAAC,cAAc,CAAC;IACjD,IAAI,MAAM,CAAC,iBAAiB,KAAK,SAAS;QACxC,OAAO,CAAC,iBAAiB,GAAG,MAAM,CAAC,iBAAiB,CAAC;AACzD,CAAC;AAED;;;GAGG;AACH,SAAS,oBAAoB,CAAC,KAAc,EAAE,KAAa;IACzD,IAAI,KAAK,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;QACjC,MAAM,GAAG,GAAQ,IAAI,KAAK,CACxB,yCAAyC,OAAO,CAAC,YAAY,GAAG,CACjE,CAAC;QACF,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC;QACjB,MAAM,GAAG,CAAC;IACZ,CAAC;IAED,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC;QACxE,MAAM,GAAG,GAAQ,IAAI,KAAK,CACxB,yCAAyC,OAAO,CAAC,eAAe,GAAG,CACpE,CAAC;QACF,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC;QACjB,MAAM,GAAG,CAAC;IACZ,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,IAAI,KAAK,CAAC,MAAM,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;YAC1C,MAAM,GAAG,GAAQ,IAAI,KAAK,CACxB,wCAAwC,OAAO,CAAC,cAAc,GAAG,CAClE,CAAC;YACF,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC;YACjB,MAAM,GAAG,CAAC;QACZ,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,oBAAoB,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;SAAM,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACvD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACrC,oBAAoB,CAAC,GAAG,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;YACrC,oBAAoB,CAAE,KAAiC,CAAC,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;QAC3E,CAAC;IACH,CAAC;AACH,CAAC;AAED,kDAAkD;AAClD,MAAM,CAAC,MAAM,kBAAkB,GAAG,KAAM,CAAC;AAEzC,iFAAiF;AAEjF;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,GAAoB,EACpB,GAAmB,EACnB,KAAe,EACf,GAAY,EACZ,SAAS,GAAG,kBAAkB;AAC9B;0EAC0E;AAC1E,SAAsC;IAEtC,wEAAwE;IACxE,8BAA8B;IAC9B,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,EAAE,MAAM,EAAE,GAAG,UAAU,CAAC;IAE9B,2EAA2E;IAC3E,oEAAoE;IACpE,6DAA6D;IAC7D,MAAM,GAAG,GAAG,SAAS,IAAI,aAAa,CAAC,GAAG,CAAC,CAAC;IAE5C,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;QACnB,IAAI,CAAC,GAAG,CAAC,aAAa;YAAE,UAAU,CAAC,KAAK,EAAE,CAAC;IAC7C,CAAC,CAAC,CAAC;IACH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC;IAE1C,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE;QAChC,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC;YACvB,UAAU,CAAC,KAAK,EAAE,CAAC;YACnB,MAAM,UAAU,GAAG;gBACjB,MAAM,EAAE,UAAU;gBAClB,OAAO,EAAE,iBAAiB;gBAC1B,MAAM,EAAE,GAAG;gBACX,IAAI,EAAE,SAAS;aACP,CAAC;YACX,GAAG,CAAC,SAAS,GAAG,GAAG,CAAC;YACpB,KAAK,gBAAgB,CAAC,GAAU,CAAC,CAAC;YAClC,mBAAmB,CAAC,GAAG,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC,EAAE,SAAS,CAAC,CAAC;IAEd,IAAI,CAAC;QACH,MAAM,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;IACpD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,wEAAwE;QACxE,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;YACrB,MAAM,UAAU,GAAG,cAAc,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YAC5C,GAAG,CAAC,SAAS,GAAG,UAAU,CAAC,MAAM,CAAC;YAClC,MAAM,gBAAgB,CAAC,GAAU,CAAC,CAAC;YACnC,mBAAmB,CAAC,GAAG,EAAE,UAAU,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,SAAS,CAAC,CAAC;IAC1B,CAAC;AACH,CAAC;AAED,iFAAiF;AAEjF,KAAK,UAAU,QAAQ,CACrB,GAAoB,EACpB,GAAmB,EACnB,KAAe,EACf,GAAY,EACZ,MAAmB,EACnB,GAA+B;IAE/B,8EAA8E;IAC9E,IAAI,OAAgB,CAAC;IAErB,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,UAAU,CAAC,GAAG,CAAC,CAAC;IAClC,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,IAAI,GAAG,CAAC,WAAW;YAAE,OAAO;QAC5B,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC;QACjC,MAAM,UAAU,GAAG;YACjB,MAAM,EAAE,UAAmB;YAC3B,OAAO,EAAE,GAAG,CAAC,OAAO,IAAI,aAAa;YACrC,MAAM;YACN,IAAI,EAAE,aAAsB;SAC7B,CAAC;QACF,GAAG,CAAC,SAAS,GAAG,MAAM,CAAC;QACvB,MAAM,gBAAgB,CAAC,GAAU,CAAC,CAAC;QACnC,mBAAmB,CAAC,GAAG,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;QAC7C,OAAO;IACT,CAAC;IAED,8EAA8E;IAC9E,sEAAsE;IACtE,2EAA2E;IAC3E,IAAI,CAAC;QACH,MAAM,aAAa,GACjB,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;YAC/D,CAAC,CAAE,OAAmC;YACtC,CAAC,CAAC,EAAE,CAAC;QAET,sEAAsE;QACtE,8CAA8C;QAC9C,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QAC3E,MAAM,UAAU,GAAG,MAAM,iBAAiB,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC;QAE/D,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QACpC,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,EAAE,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;QAC5C,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QAE/C,uEAAuE;QACvE,gDAAgD;QAChD,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,GAAG,EAAE;YAC9C,QAAQ;YACR,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,QAAQ;SACT,CAAC,CAAC;QAEH,IAAI,GAAG,CAAC,WAAW;YAAE,OAAO;QAE5B,+DAA+D;QAC/D,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YACvB,GAAG,CAAC,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC;YAC9B,MAAM,gBAAgB,CAAC,GAAU,CAAC,CAAC;YACnC,eAAe,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;YACrC,kBAAkB,CAChB,GAAG,EACH,iBAAiB,CAAC,MAAM,CAAC,EACzB,MAAM,CAAC,MAAM,EACb,GAAG,CAAC,UAAU,CACf,CAAC;YACF,OAAO;QACT,CAAC;QAED,IAAI,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC;YAC7B,GAAG,CAAC,SAAS,GAAG,GAAG,CAAC;YACpB,MAAM,gBAAgB,CAAC,GAAU,CAAC,CAAC;YACnC,eAAe,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;YACrC,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;YACpD,WAAW,CAAC,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;YACjC,OAAO;QACT,CAAC;QAED,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YACvB,GAAG,CAAC,SAAS,GAAG,GAAG,CAAC;YACpB,MAAM,gBAAgB,CAAC,GAAU,CAAC,CAAC;YACnC,eAAe,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;YACrC,aAAa,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAC3B,OAAO;QACT,CAAC;QAED,yBAAyB;QACzB,MAAM,IAAI,GAAG,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;QAEnE,GAAG,CAAC,SAAS,GAAG,GAAG,CAAC;QACpB,MAAM,gBAAgB,CAAC,GAAU,CAAC,CAAC;QACnC,eAAe,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;QACrC,kBAAkB,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC;IACrD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,CAAC,WAAW;YAAE,OAAO;QAE5B,kDAAkD;QAClD,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACpB,GAAG,CAAC,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC;YAC3B,MAAM,gBAAgB,CAAC,GAAU,CAAC,CAAC;YACnC,eAAe,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;YACrC,kBAAkB,CAChB,GAAG,EACH,iBAAiB,CAAC,GAAG,CAAC,EACtB,GAAG,CAAC,MAAM,EACV,GAAG,CAAC,UAAU,CACf,CAAC;YACF,OAAO;QACT,CAAC;QAED,MAAM,UAAU,GAAG,cAAc,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC5C,qBAAqB,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;QACvC,GAAG,CAAC,SAAS,GAAG,UAAU,CAAC,MAAM,CAAC;QAClC,MAAM,gBAAgB,CAAC,GAAU,CAAC,CAAC;QACnC,eAAe,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;QACrC,mBAAmB,CAAC,GAAG,EAAE,UAAU,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;IAC1D,CAAC;AACH,CAAC;AAED,8FAA8F;AAE9F,oDAAoD;AACpD,SAAS,qBAAqB,CAC5B,UAA6C,EAC7C,GAA+B;IAE/B,IAAI,UAAU,CAAC,IAAI,KAAK,YAAY,IAAI,UAAU,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QAC5E,GAAG,CAAC,UAAU,CAAC,aAAa,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;IAChE,CAAC;AACH,CAAC;AAED,wFAAwF;AAExF;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,GAAoB;IACrD,OAAO,UAAU,CAAC,GAAG,CAAC,CAAC;AACzB,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,GAAoB;IAC5C,MAAM,WAAW,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IACtE,MAAM,aAAa,GAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC;IAEzE,0EAA0E;IAC1E,IAAI,WAAW,CAAC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,CAAC;QAChD,IAAI,aAAa,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;YAC3C,MAAM,GAAG,GAAQ,IAAI,KAAK,CACxB,qCAAqC,OAAO,CAAC,cAAc,GAAG,IAAI,GAAG,IAAI,KAAK,CAC/E,CAAC;YACF,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC;YACjB,MAAM,GAAG,CAAC;QACZ,CAAC;QACD,OAAO,eAAe,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAC3C,CAAC;IAED,0EAA0E;IAC1E,IAAI,aAAa,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;QACzC,MAAM,GAAG,GAAQ,IAAI,KAAK,CACxB,2CAA2C,OAAO,CAAC,YAAY,GAAG,IAAI,KAAK,CAC5E,CAAC;QACF,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC;QACjB,MAAM,GAAG,CAAC;IACZ,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;IAEvD,kBAAkB;IAClB,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAExC,IAAI,CAAC;QACH,qEAAqE;QACrE,4DAA4D;QAC5D,iDAAiD;QACjD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,oBAAoB,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAEhC,qCAAqC;QACrC,IACE,OAAO,MAAM,KAAK,QAAQ;YAC1B,MAAM,KAAK,IAAI;YACf,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EACrB,CAAC;YACD,yDAAyD;YACzD,6CAA6C;YAC7C,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,GAAG,GAAQ,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QAC5D,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC;QACjB,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,SAAS,CACtB,GAAoB,EACpB,QAAgB;IAEhB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,UAAU,GAAG,CAAC,CAAC;QAEnB,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YAC/B,UAAU,IAAI,KAAK,CAAC,MAAM,CAAC;YAE3B,IAAI,UAAU,GAAG,QAAQ,EAAE,CAAC;gBAC1B,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,eAAe;gBAC9B,MAAM,GAAG,GAAQ,IAAI,KAAK,CACxB,2CAA2C,QAAQ,GAAG,IAAI,KAAK,CAChE,CAAC;gBACF,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC;gBACjB,MAAM,CAAC,GAAG,CAAC,CAAC;gBACZ,OAAO;YACT,CAAC;YAED,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC,CAAC,CAAC;QAEH,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;YACjB,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;QACnD,CAAC,CAAC,CAAC;QAEH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACtB,MAAM,CAAC,GAAG,CAAC,CAAC;QACd,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;GAUG;AACH,KAAK,UAAU,eAAe,CAC5B,GAAoB,EACpB,WAAmB;IAEnB,4CAA4C;IAC5C,+DAA+D;IAC/D,MAAM,aAAa,GAAG,WAAW,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;IAC/D,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,MAAM,GAAG,GAAQ,IAAI,KAAK,CACxB,uDAAuD,CACxD,CAAC;QACF,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC;QACjB,MAAM,GAAG,CAAC;IACZ,CAAC;IAED,MAAM,QAAQ,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,eAAe;IAC5E,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,GAAG,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;IAEnE,OAAO,qBAAqB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;AAClD,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,GAAoB,EACpB,QAAgB;IAEhB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,UAAU,GAAG,CAAC,CAAC;QAEnB,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YAC/B,UAAU,IAAI,KAAK,CAAC,MAAM,CAAC;YAC3B,IAAI,UAAU,GAAG,QAAQ,EAAE,CAAC;gBAC1B,GAAG,CAAC,OAAO,EAAE,CAAC;gBACd,MAAM,GAAG,GAAQ,IAAI,KAAK,CACxB,qCAAqC,QAAQ,GAAG,IAAI,GAAG,IAAI,KAAK,CACjE,CAAC;gBACF,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC;gBACjB,MAAM,CAAC,GAAG,CAAC,CAAC;gBACZ,OAAO;YACT,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC,CAAC,CAAC;QAEH,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACpD,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,SAAS,iBAAiB,CAAC,QAAgB;IACzC,mBAAmB;IACnB,IAAI,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACxC,qCAAqC;IACrC,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IACnC,gDAAgD;IAChD,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IACpC,2CAA2C;IAC3C,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;IACzC,kBAAkB;IAClB,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IACrB,iCAAiC;IACjC,OAAO,KAAK,IAAI,SAAS,CAAC;AAC5B,CAAC;AAED,SAAS,qBAAqB,CAC5B,IAAY,EACZ,QAAgB;IAEhB,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,QAAQ,EAAE,CAAC,CAAC;IAC/C,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAE5C,8DAA8D;IAC9D,IAAI,KAAK,CAAC,MAAM,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC;QAC7C,MAAM,GAAG,GAAQ,IAAI,KAAK,CACxB,wCAAwC,OAAO,CAAC,iBAAiB,GAAG,CACrE,CAAC;QACF,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC;QACjB,MAAM,GAAG,CAAC;IACZ,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,2CAA2C;QAC3C,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;YAAE,SAAS;QAE9B,8DAA8D;QAC9D,MAAM,SAAS,GAAG,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAChE,IAAI,SAAS,KAAK,CAAC,CAAC;YAAE,SAAS;QAE/B,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACjE,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;QAE9C,iCAAiC;QACjC,MAAM,QAAQ,GACZ,WAAW,CAAC,MAAM,IAAI,CAAC;YACvB,WAAW,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,EAAE;YAC1C,WAAW,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,EAAE;YACxC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAC1B,CAAC,CAAC,WAAW,CAAC;QAElB,gBAAgB;QAChB,MAAM,OAAO,GAA2B,EAAE,CAAC;QAC3C,KAAK,MAAM,IAAI,IAAI,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;YAC/C,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACnC,IAAI,QAAQ,KAAK,CAAC,CAAC;gBAAE,SAAS;YAC9B,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,GAAG,IAAI;iBACzD,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC;iBACnB,IAAI,EAAE,CAAC;QACZ,CAAC;QAED,qDAAqD;QACrD,MAAM,WAAW,GAAG,OAAO,CAAC,qBAAqB,CAAC,IAAI,EAAE,CAAC;QACzD,MAAM,SAAS,GAAG,WAAW,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;QACtD,MAAM,aAAa,GAAG,WAAW,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;QAE9D,IAAI,CAAC,SAAS;YAAE,SAAS;QACzB,MAAM,SAAS,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;QAE/B,IAAI,aAAa,EAAE,CAAC;YAClB,aAAa;YACb,MAAM,WAAW,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC;YACrC,MAAM,QAAQ,GAAG,iBAAiB,CAAC,WAAW,CAAC,CAAC;YAChD,MAAM,QAAQ,GAAG,OAAO,CAAC,cAAc,CAAC,IAAI,0BAA0B,CAAC;YAEvE,sEAAsE;YACtE,MAAM,SAAS,GAAG;gBAChB,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,QAAQ,CAAC,MAAM;gBACrB,MAAM,EAAE,QAAQ;gBAChB,8CAA8C;gBAC9C,WAAW,EAAE,GAAG,EAAE,CAChB,OAAO,CAAC,OAAO,CACb,QAAQ,CAAC,MAAM,CAAC,KAAK,CACnB,QAAQ,CAAC,UAAU,EACnB,QAAQ,CAAC,UAAU,GAAG,QAAQ,CAAC,UAAU,CAC1C,CACF;aACJ,CAAC;YAEF,mDAAmD;YACnD,IAAI,SAAS,IAAI,MAAM,EAAE,CAAC;gBACxB,MAAM,QAAQ,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;gBACnC,MAAM,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;oBACzC,CAAC,CAAC,CAAC,GAAG,QAAQ,EAAE,SAAS,CAAC;oBAC1B,CAAC,CAAC,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;YAC5B,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,SAAS,CAAC,GAAG,SAAS,CAAC;YAChC,CAAC;QACH,CAAC;aAAM,CAAC;YACN,aAAa;YACb,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YACzC,IAAI,SAAS,IAAI,MAAM,EAAE,CAAC;gBACxB,MAAM,QAAQ,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;gBACnC,MAAM,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;oBACzC,CAAC,CAAC,CAAC,GAAG,QAAQ,EAAE,KAAK,CAAC;oBACtB,CAAC,CAAC,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;YACxB,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC;YAC5B,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,oFAAoF;AACpF,SAAS,YAAY,CAAC,GAAW,EAAE,SAAiB;IAClD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,KAAK,GAAG,CAAC,CAAC;IAEd,OAAO,IAAI,EAAE,CAAC;QACZ,MAAM,GAAG,GAAG,cAAc,CAAC,GAAG,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;QAClD,IAAI,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC;YACf,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;YAC7B,MAAM;QACR,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;QAClC,KAAK,GAAG,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC;QAC/B,4BAA4B;QAC5B,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,GAAG,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,EAAE;YAAE,KAAK,IAAI,CAAC,CAAC;QAC3D,8BAA8B;QAC9B,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,GAAG,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,EAAE;YAAE,MAAM;IACxD,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,qEAAqE;AACrE,SAAS,cAAc,CAAC,QAAgB,EAAE,MAAc,EAAE,MAAM,GAAG,CAAC;IAClE,KAAK,EAAE,KAAK,IAAI,CAAC,GAAG,MAAM,EAAE,CAAC,IAAI,QAAQ,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACvC,IAAI,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC;gBAAE,SAAS,KAAK,CAAC;QACpD,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;IACD,OAAO,CAAC,CAAC,CAAC;AACZ,CAAC;AAED,iFAAiF;AAEjF;;;GAGG;AACH,SAAS,kBAAkB,CACzB,GAAmB,EACnB,IAAa,EACb,MAAc,EACd,aAAgD,EAAE;IAElD,IAAI,GAAG,CAAC,WAAW;QAAE,OAAO;IAE5B,IAAI,IAAY,CAAC;IACjB,IAAI,WAAW,GAAG,MAAM,CAAC;IACzB,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,WAAW,GAAG,GAAG,CAAC;QAClB,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC;YACpB,MAAM,EAAE,UAAU;YAClB,OAAO,EAAE,uCAAuC;YAChD,MAAM,EAAE,GAAG;YACX,IAAI,EAAE,qBAAqB;SAC5B,CAAC,CAAC;IACL,CAAC;IAED,MAAM,OAAO,GAAsC;QACjD,cAAc,EAAE,iCAAiC;QACjD,gBAAgB,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;QACpD,GAAG,UAAU;KACd,CAAC;IAEF,IAAI,CAAC;QACH,GAAG,CAAC,SAAS,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QACpC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,uDAAuD;IACzD,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,mBAAmB,CAC1B,GAAmB,EACnB,KAAa,EACb,MAAc;IAEd,IAAI,GAAG,CAAC,WAAW;QAAE,OAAO;IAC5B,kBAAkB,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;AACzC,CAAC"}

package/dist/sanitize.d.ts

@@ -0,0 +1,61 @@
+/**
+ * mates-ssr — sanitize.ts
+ *
+ * Automatic XSS sanitization of parsed JSON request bodies.
+ *
+ * Runs after JSON.parse on every API route body and serverFn arg list.
+ * Walks the object tree and cleans every string value.
+ *
+ * No external dependencies — pure string operations.
+ *
+ * Rules:
+ *   - Only string values are touched
+ *   - Numbers, booleans, null, undefined pass through unchanged
+ *   - Objects and arrays are recursed into
+ *   - Fields in the skip list are never touched
+ *   - Circular references are safely handled
+ */
+/// <reference types="node" />
+export type SanitizeMode = "strip" | "escape" | "reject";
+export interface SanitizeConfig {
+    enabled: boolean;
+    mode: SanitizeMode;
+    skip: string[];
+}
+export declare class SanitizeError extends Error {
+    readonly status = 400;
+    readonly code = "XSS_DETECTED";
+    readonly field: string;
+    constructor(field: string);
+}
+/**
+ * Sanitize a single string value.
+ * Returns the cleaned string or throws SanitizeError in "reject" mode.
+ */
+export declare function sanitizeString(value: string, fieldName: string, mode: SanitizeMode): string;
+/**
+ * Recursively sanitize all string values in an object or array.
+ *
+ * @param input     The parsed JSON value (object, array, primitive)
+ * @param config    Sanitize configuration
+ * @param fieldName Current field path (for error messages)
+ * @param seen      WeakSet to detect circular references
+ * @returns         The sanitized value (mutates strings in place for objects)
+ */
+export declare function sanitizeBody(input: unknown, config: SanitizeConfig, fieldName?: string, seen?: WeakSet<object>): unknown;
+/**
+ * Sanitize a WebSocket message.
+ * Parses JSON if the message is a string, sanitizes all string fields,
+ * and returns the cleaned object (or the original string if not JSON).
+ *
+ * @param msg     Raw WebSocket message (string or Buffer)
+ * @param config  Sanitize config
+ * @returns       { parsed: any, raw: string } — parsed is the sanitized object,
+ *                raw is the original string for pass-through if needed
+ */
+export declare function sanitizeWsMessage(msg: string | Buffer, config: SanitizeConfig): {
+    parsed: unknown;
+    raw: string;
+    isJson: boolean;
+};
+//# sourceMappingURL=sanitize.d.ts.map

package/dist/sanitize.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitize.d.ts","sourceRoot":"","sources":["../src/sanitize.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;;AAkCH,MAAM,MAAM,YAAY,GAAG,OAAO,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAEzD,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,YAAY,CAAC;IACnB,IAAI,EAAE,MAAM,EAAE,CAAC;CAChB;AA4CD,qBAAa,aAAc,SAAQ,KAAK;IACtC,QAAQ,CAAC,MAAM,OAAO;IACtB,QAAQ,CAAC,IAAI,kBAAkB;IAC/B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;gBAEX,KAAK,EAAE,MAAM;CAK1B;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAC5B,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,YAAY,GACjB,MAAM,CAUR;AAED;;;;;;;;GAQG;AACH,wBAAgB,YAAY,CAC1B,KAAK,EAAE,OAAO,EACd,MAAM,EAAE,cAAc,EACtB,SAAS,SAAS,EAClB,IAAI,kBAAwB,GAC3B,OAAO,CAmDT;AAED;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,CAC/B,GAAG,EAAE,MAAM,GAAG,MAAM,EACpB,MAAM,EAAE,cAAc,GACrB;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,OAAO,CAAA;CAAE,CAuBnD"}