mcp4openapi 0.2.6 → 0.2.8

package/dist/src/proxy-executor.d.ts

@@ -7,6 +7,10 @@
  */
 import type { ProxyDownloadOperation } from './types/profile.js';
 import type { ResponseContext, AuthCredentials } from './interceptors.js';
+export interface DebugLogger {
+    debug(message: string, context?: Record<string, unknown>): void;
+    warn?(message: string, context?: Record<string, unknown>): void;
+}
 export interface HttpClient {
     request(method: string, url: string, options?: {
         headers?: Record<string, string>;
@@ -28,7 +32,8 @@ export interface ProxyDownloadResult {
 }
 export declare class ProxyDownloadExecutor {
     private httpClient;
-    constructor(httpClient: HttpClient);
+    private logger;
+    constructor(httpClient: HttpClient, logger?: DebugLogger);
     /**
      * Execute proxy download operation
      *
@@ -51,7 +56,9 @@ export declare class ProxyDownloadExecutor {
     private extractNestedString;
     private extractNestedNumber;
     private extractNestedValue;
-    private buildAbsoluteUrl;
+    private getBaseOrigin;
+    private resolveHttpUrl;
+    private enforceDownloadPolicy;
     /**
      * Check if MIME type matches whitelist (supports wildcards like 'image/*')
      */
@@ -63,6 +70,14 @@ export declare class ProxyDownloadExecutor {
      *                 Metadata endpoint still requires auth, only the final download is unauthenticated
      */
     private downloadWithAuth;
+    private buildDownloadUrlWithOptionalQueryAuth;
+    private isRedirectStatus;
+    private resolveRedirectTarget;
+    private enforceAllowedDownloadTarget;
+    private lookupAllIpAddresses;
+    private isAllowedHost;
+    private isDisallowedIPv4;
+    private isDisallowedIPv6;
     /**
      * Handle inline data URLs (data:mime;base64,...)
      */

package/dist/src/proxy-executor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"proxy-executor.d.ts","sourceRoot":"","sources":["../../src/proxy-executor.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AACjE,OAAO,KAAK,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAG1E,MAAM,WAAW,UAAU;IACzB,OAAO,CACL,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,MAAM,EACX,OAAO,CAAC,EAAE;QACR,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACjC,IAAI,CAAC,EAAE,OAAO,CAAC;KAChB,GACA,OAAO,CAAC,eAAe,CAAC,CAAC;IAC5B,UAAU,IAAI,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,mBAAmB;IAClC,iCAAiC;IACjC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAElC,kCAAkC;IAClC,OAAO,EAAE,MAAM,CAAC;IAEhB,4BAA4B;IAC5B,QAAQ,EAAE,MAAM,CAAC;IAEjB,yBAAyB;IACzB,IAAI,EAAE,MAAM,CAAC;IAEb,qCAAqC;IACrC,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAKD,qBAAa,qBAAqB;IACpB,OAAO,CAAC,UAAU;gBAAV,UAAU,EAAE,UAAU;IAE1C;;;;;;OAMG;IACG,OAAO,CACX,SAAS,EAAE,sBAAsB,EACjC,eAAe,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,EACjD,eAAe,EAAE,eAAe,EAChC,qBAAqB,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,GACvD,OAAO,CAAC,mBAAmB,CAAC;IAsH/B,OAAO,CAAC,cAAc;IAyBtB;;OAEG;IACH,OAAO,CAAC,UAAU;IAclB,OAAO,CAAC,mBAAmB;IAK3B,OAAO,CAAC,mBAAmB;IAK3B,OAAO,CAAC,kBAAkB;IAY1B,OAAO,CAAC,gBAAgB;IAQxB;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAUzB;;;;;OAKG;YACW,gBAAgB;IA0E9B;;OAEG;IACH,OAAO,CAAC,mBAAmB;CAa5B"}
+{"version":3,"file":"proxy-executor.d.ts","sourceRoot":"","sources":["../../src/proxy-executor.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AACjE,OAAO,KAAK,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAK1E,MAAM,WAAW,WAAW;IAC1B,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAChE,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;CACjE;AAED,MAAM,WAAW,UAAU;IACzB,OAAO,CACL,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,MAAM,EACX,OAAO,CAAC,EAAE;QACR,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACjC,IAAI,CAAC,EAAE,OAAO,CAAC;KAChB,GACA,OAAO,CAAC,eAAe,CAAC,CAAC;IAC5B,UAAU,IAAI,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,mBAAmB;IAClC,iCAAiC;IACjC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAElC,kCAAkC;IAClC,OAAO,EAAE,MAAM,CAAC;IAEhB,4BAA4B;IAC5B,QAAQ,EAAE,MAAM,CAAC;IAEjB,yBAAyB;IACzB,IAAI,EAAE,MAAM,CAAC;IAEb,qCAAqC;IACrC,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAMD,qBAAa,qBAAqB;IAE9B,OAAO,CAAC,UAAU;IAClB,OAAO,CAAC,MAAM;gBADN,UAAU,EAAE,UAAU,EACtB,MAAM,GAAE,WAAiC;IAGnD;;;;;;OAMG;IACG,OAAO,CACX,SAAS,EAAE,sBAAsB,EACjC,eAAe,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,EACjD,eAAe,EAAE,eAAe,EAChC,qBAAqB,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,GACvD,OAAO,CAAC,mBAAmB,CAAC;IA6H/B,OAAO,CAAC,cAAc;IAyBtB;;OAEG;IACH,OAAO,CAAC,UAAU;IAclB,OAAO,CAAC,mBAAmB;IAK3B,OAAO,CAAC,mBAAmB;IAK3B,OAAO,CAAC,kBAAkB;IAY1B,OAAO,CAAC,aAAa;IAQrB,OAAO,CAAC,cAAc;YA6CR,qBAAqB;IAuBnC;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAUzB;;;;;OAKG;YACW,gBAAgB;IAqG9B,OAAO,CAAC,qCAAqC;IAiB7C,OAAO,CAAC,gBAAgB;IAIxB,OAAO,CAAC,qBAAqB;YAef,4BAA4B;YAsE5B,oBAAoB;IAkClC,OAAO,CAAC,aAAa;IAgBrB,OAAO,CAAC,gBAAgB;IAaxB,OAAO,CAAC,gBAAgB;IAWxB;;OAEG;IACH,OAAO,CAAC,mBAAmB;CAa5B"}

package/dist/src/proxy-executor.js

@@ -6,11 +6,15 @@
  * and returns base64-encoded result.
  */
 import { NetworkError, ValidationError } from './errors.js';
+import { isIP } from 'node:net';
+import { lookup } from 'node:dns/promises';
 const DEFAULT_MAX_SIZE = 10 * 1024 * 1024; // 10MB
 const DEFAULT_TIMEOUT = 30000; // 30s
+const MAX_REDIRECTS = 5;
 export class ProxyDownloadExecutor {
-    constructor(httpClient) {
+    constructor(httpClient, logger = { debug: () => { } }) {
         this.httpClient = httpClient;
+        this.logger = logger;
     }
     /**
      * Execute proxy download operation
@@ -23,6 +27,7 @@ export class ProxyDownloadExecutor {
         const maxSize = this.resolveMaxSize(operation);
         const timeout = operation.timeout_ms ?? DEFAULT_TIMEOUT;
         const urlField = operation.url_field ?? 'url';
+        const baseOrigin = this.getBaseOrigin();
         // Step 1: Fetch metadata
         const metadataResponse = await this.httpClient.request(metadataRequest.method, metadataRequest.path);
         const metadata = metadataResponse.body;
@@ -38,9 +43,9 @@ export class ProxyDownloadExecutor {
             'application/octet-stream';
         // Step 2A: Direct download endpoint path (preferred when configured)
         if (directDownloadRequest) {
-            const downloadUrl = this.buildAbsoluteUrl(directDownloadRequest.path);
             const skipAuth = operation.skip_auth ?? false;
-            const { content, size, mimeType } = await this.downloadWithAuth(downloadUrl, authCredentials, maxSize, timeout, skipAuth, directDownloadRequest.method);
+            const downloadUrl = this.resolveHttpUrl(directDownloadRequest.path);
+            const { content, size, mimeType } = await this.downloadWithAuth(downloadUrl, authCredentials, maxSize, timeout, baseOrigin, skipAuth, directDownloadRequest.method, operation);
             if (reportedSize && reportedSize > maxSize) {
                 throw new ValidationError(`File size ${reportedSize} exceeds maximum ${maxSize} bytes`);
             }
@@ -86,7 +91,8 @@ export class ProxyDownloadExecutor {
             };
         }
         const skipAuth = operation.skip_auth ?? false;
-        const { content, size, mimeType: responseMime } = await this.downloadWithAuth(url, authCredentials, maxSize, timeout, skipAuth);
+        const downloadUrl = this.resolveHttpUrl(url);
+        const { content, size, mimeType: responseMime } = await this.downloadWithAuth(downloadUrl, authCredentials, maxSize, timeout, baseOrigin, skipAuth, 'GET', operation);
         return {
             metadata,
             content,
@@ -145,12 +151,68 @@ export class ProxyDownloadExecutor {
         }
         return current;
     }
-    buildAbsoluteUrl(path) {
-        if (/^https?:\/\//i.test(path)) {
-            return path;
+    getBaseOrigin() {
+        try {
+            return new URL(this.httpClient.getBaseUrl()).origin;
+        }
+        catch {
+            throw new ValidationError('Invalid API base URL - expected absolute http(s) URL');
+        }
+    }
+    resolveHttpUrl(input) {
+        // Absolute URL
+        let absoluteUrl;
+        try {
+            absoluteUrl = new URL(input);
+        }
+        catch (error) {
+            this.logger.debug('resolveHttpUrl: input is not an absolute URL, resolving relative', {
+                error: error instanceof Error ? error.message : String(error),
+            });
+        }
+        if (absoluteUrl) {
+            if (absoluteUrl.protocol === 'http:' || absoluteUrl.protocol === 'https:') {
+                return absoluteUrl.toString();
+            }
+            throw new ValidationError(`Unsupported download URL scheme: '${absoluteUrl.protocol}'`);
         }
         const baseUrl = this.httpClient.getBaseUrl();
-        return `${baseUrl}${path}`;
+        let base;
+        try {
+            base = new URL(baseUrl);
+        }
+        catch {
+            throw new ValidationError('Invalid API base URL - expected absolute http(s) URL');
+        }
+        if (base.protocol !== 'http:' && base.protocol !== 'https:') {
+            throw new ValidationError(`Unsupported API base URL scheme: '${base.protocol}'`);
+        }
+        try {
+            if (input.startsWith('/')) {
+                // Preserve base URL path segments (e.g., https://host/api/v4 + /projects -> https://host/api/v4/projects)
+                const combined = `${baseUrl.replace(/\/$/, '')}${input}`;
+                return new URL(combined).toString();
+            }
+            // Relative (no leading slash) uses URL resolution semantics
+            const baseForRelative = baseUrl.endsWith('/') ? baseUrl : `${baseUrl}/`;
+            return new URL(input, baseForRelative).toString();
+        }
+        catch {
+            throw new ValidationError(`Invalid download URL: '${input}'`);
+        }
+    }
+    async enforceDownloadPolicy(downloadUrl, baseOrigin, operation, skipAuth) {
+        const downloadOrigin = new URL(downloadUrl).origin;
+        if (!skipAuth) {
+            if (downloadOrigin !== baseOrigin) {
+                throw new ValidationError(`Cross-origin download URL not allowed with authentication (base origin '${baseOrigin}', download origin '${downloadOrigin}'). Set skip_auth=true or use a same-origin download endpoint.`);
+            }
+            return;
+        }
+        // With skip_auth, allow same-origin without additional restrictions
+        if (downloadOrigin === baseOrigin)
+            return;
+        await this.enforceAllowedDownloadTarget(downloadUrl, operation);
     }
     /**
      * Check if MIME type matches whitelist (supports wildcards like 'image/*')
@@ -170,56 +232,244 @@ export class ProxyDownloadExecutor {
      * @param skipAuth If true, download URL is fetched without authentication headers/params
      *                 Metadata endpoint still requires auth, only the final download is unauthenticated
      */
-    async downloadWithAuth(url, authCredentials, maxSize, timeout, skipAuth = false, method = 'GET') {
+    async downloadWithAuth(url, authCredentials, maxSize, timeout, baseOrigin, skipAuth = false, method = 'GET', operation) {
         const controller = new AbortController();
         const timeoutId = setTimeout(() => controller.abort(), timeout);
         try {
-            // Build download URL, adding query auth param if needed (and not skipping auth)
-            let downloadUrl = url;
-            if (!skipAuth && authCredentials.queryParams) {
-                const urlObj = new URL(url);
-                const { key, value } = authCredentials.queryParams;
-                // Only add if not already present (URL may have pre-signed token)
-                if (!urlObj.searchParams.has(key)) {
-                    urlObj.searchParams.set(key, value);
-                    downloadUrl = urlObj.toString();
+            const initialUrl = this.buildDownloadUrlWithOptionalQueryAuth(url, authCredentials, skipAuth);
+            let currentUrl = initialUrl;
+            let currentMethod = method;
+            let currentHeaders = skipAuth ? {} : authCredentials.headers;
+            if (operation) {
+                await this.enforceDownloadPolicy(currentUrl, baseOrigin, operation, skipAuth);
+            }
+            for (let redirects = 0; redirects <= MAX_REDIRECTS; redirects++) {
+                const response = await fetch(currentUrl, {
+                    method: currentMethod,
+                    headers: currentHeaders,
+                    signal: controller.signal,
+                    redirect: 'manual',
+                });
+                if (this.isRedirectStatus(response.status)) {
+                    if (redirects === MAX_REDIRECTS) {
+                        throw new NetworkError(`Too many redirects (max ${MAX_REDIRECTS})`);
+                    }
+                    const location = response.headers.get('location');
+                    if (!location) {
+                        throw new NetworkError(`Redirect without Location header: HTTP ${response.status}`);
+                    }
+                    const nextUrl = this.resolveRedirectTarget(currentUrl, location);
+                    if (operation) {
+                        // Enforce the same policy on every redirect hop
+                        await this.enforceDownloadPolicy(nextUrl, baseOrigin, operation, skipAuth);
+                    }
+                    const isCrossOrigin = new URL(nextUrl).origin !== new URL(currentUrl).origin;
+                    if (isCrossOrigin) {
+                        currentHeaders = {};
+                    }
+                    if (response.status === 303 ||
+                        ((response.status === 301 || response.status === 302) &&
+                            currentMethod !== 'GET' &&
+                            currentMethod !== 'HEAD')) {
+                        currentMethod = 'GET';
+                    }
+                    currentUrl = nextUrl;
+                    continue;
+                }
+                if (!response.ok) {
+                    throw new NetworkError(`Download failed: HTTP ${response.status}`, response.status);
+                }
+                // Check content-length header
+                const contentLength = response.headers.get('content-length');
+                if (contentLength && parseInt(contentLength, 10) > maxSize) {
+                    throw new ValidationError(`File size ${contentLength} exceeds maximum ${maxSize} bytes`);
+                }
+                const arrayBuffer = await response.arrayBuffer();
+                // Final size check
+                if (arrayBuffer.byteLength > maxSize) {
+                    throw new ValidationError(`Downloaded file size ${arrayBuffer.byteLength} exceeds maximum ${maxSize} bytes`);
                 }
+                // Convert to base64
+                const content = Buffer.from(arrayBuffer).toString('base64');
+                return {
+                    content,
+                    size: arrayBuffer.byteLength,
+                    mimeType: response.headers.get('content-type') || undefined,
+                };
             }
-            const response = await fetch(downloadUrl, {
-                method,
-                headers: skipAuth ? {} : authCredentials.headers,
-                signal: controller.signal,
-            });
-            if (!response.ok) {
-                throw new NetworkError(`Download failed: HTTP ${response.status}`, response.status);
-            }
-            // Check content-length header
-            const contentLength = response.headers.get('content-length');
-            if (contentLength && parseInt(contentLength, 10) > maxSize) {
-                throw new ValidationError(`File size ${contentLength} exceeds maximum ${maxSize} bytes`);
-            }
-            const arrayBuffer = await response.arrayBuffer();
-            // Final size check
-            if (arrayBuffer.byteLength > maxSize) {
-                throw new ValidationError(`Downloaded file size ${arrayBuffer.byteLength} exceeds maximum ${maxSize} bytes`);
-            }
-            // Convert to base64
-            const bytes = new Uint8Array(arrayBuffer);
-            let binary = '';
-            for (let i = 0; i < bytes.byteLength; i++) {
-                binary += String.fromCharCode(bytes[i]);
-            }
-            const content = btoa(binary);
-            return {
-                content,
-                size: arrayBuffer.byteLength,
-                mimeType: response.headers.get('content-type') || undefined,
-            };
+            throw new NetworkError('Download failed: unexpected redirect handling state');
         }
         finally {
             clearTimeout(timeoutId);
         }
     }
+    buildDownloadUrlWithOptionalQueryAuth(url, authCredentials, skipAuth) {
+        if (skipAuth || !authCredentials.queryParams)
+            return url;
+        const urlObj = new URL(url);
+        const { key, value } = authCredentials.queryParams;
+        // Only add if not already present (URL may have pre-signed token)
+        if (!urlObj.searchParams.has(key)) {
+            urlObj.searchParams.set(key, value);
+        }
+        return urlObj.toString();
+    }
+    isRedirectStatus(status) {
+        return status === 301 || status === 302 || status === 303 || status === 307 || status === 308;
+    }
+    resolveRedirectTarget(currentUrl, location) {
+        let resolved;
+        try {
+            resolved = new URL(location, currentUrl);
+        }
+        catch {
+            throw new NetworkError(`Invalid redirect URL: '${location}'`);
+        }
+        if (resolved.protocol !== 'http:' && resolved.protocol !== 'https:') {
+            throw new ValidationError(`Unsupported redirect URL scheme: '${resolved.protocol}'`);
+        }
+        return resolved.toString();
+    }
+    async enforceAllowedDownloadTarget(targetUrl, operation) {
+        const url = new URL(targetUrl);
+        const hostnameRaw = url.hostname.toLowerCase();
+        const hostname = hostnameRaw.startsWith('[') && hostnameRaw.endsWith(']')
+            ? hostnameRaw.slice(1, -1)
+            : hostnameRaw;
+        const allowPrivateNetwork = operation.allow_private_network ?? false;
+        if (operation.allowed_hosts && operation.allowed_hosts.length > 0) {
+            if (!this.isAllowedHost(hostname, operation.allowed_hosts)) {
+                this.logger.warn?.('proxy_download blocked: host not in allowlist', {
+                    hostname,
+                    allowed_hosts: operation.allowed_hosts,
+                    how_to_fix: "Add hostname to allowed_hosts, or use same-origin download endpoint.",
+                });
+                throw new ValidationError(`Download host not in allowlist: '${hostname}' (allowed_hosts: ${operation.allowed_hosts.join(', ')})`);
+            }
+        }
+        if (allowPrivateNetwork)
+            return;
+        if (hostname === 'localhost') {
+            this.logger.warn?.('proxy_download blocked: localhost target', {
+                hostname,
+                how_to_fix: "If you really need localhost, set allow_private_network=true (and consider allowed_hosts).",
+            });
+            throw new ValidationError('Download hostname not allowed');
+        }
+        const ipVersion = isIP(hostname);
+        if (ipVersion === 4) {
+            if (this.isDisallowedIPv4(hostname)) {
+                this.logger.warn?.('proxy_download blocked: private/loopback/link-local IPv4 target', {
+                    hostname,
+                    how_to_fix: "If you really need private IPs, set allow_private_network=true (and consider allowed_hosts).",
+                });
+                throw new ValidationError('Download IP not allowed');
+            }
+        }
+        else if (ipVersion === 6) {
+            if (this.isDisallowedIPv6(hostname)) {
+                this.logger.warn?.('proxy_download blocked: private/loopback/link-local IPv6 target', {
+                    hostname,
+                    how_to_fix: "If you really need private IPs, set allow_private_network=true (and consider allowed_hosts).",
+                });
+                throw new ValidationError('Download IP not allowed');
+            }
+        }
+        else {
+            // Hostname: resolve to all IPs and block if any are private/loopback/link-local (SSRF defense)
+            const addresses = await this.lookupAllIpAddresses(hostname);
+            const disallowed = addresses.find(address => {
+                const family = isIP(address);
+                if (family === 4)
+                    return this.isDisallowedIPv4(address);
+                if (family === 6)
+                    return this.isDisallowedIPv6(address);
+                return false;
+            });
+            if (disallowed) {
+                this.logger.warn?.('proxy_download blocked: hostname resolves to private/loopback/link-local IP', {
+                    hostname,
+                    resolved_addresses: addresses,
+                    how_to_fix: "If this hostname must be allowed, set allow_private_network=true and restrict with allowed_hosts.",
+                });
+                throw new ValidationError('Download hostname resolves to disallowed IP');
+            }
+        }
+    }
+    async lookupAllIpAddresses(hostname) {
+        const timeoutMs = 1000;
+        let results = [];
+        try {
+            results = (await Promise.race([
+                lookup(hostname, { all: true, verbatim: true }),
+                new Promise((_, reject) => setTimeout(() => reject(new Error(`DNS lookup timeout after ${timeoutMs}ms`)), timeoutMs)),
+            ]));
+        }
+        catch (error) {
+            this.logger.warn?.('proxy_download blocked: DNS lookup failed', {
+                hostname,
+                error: error instanceof Error ? error.message : String(error),
+                how_to_fix: "If you need to allow internal hostnames, set allow_private_network=true and restrict with allowed_hosts.",
+            });
+            throw new ValidationError(`DNS lookup failed for hostname '${hostname}'`);
+        }
+        const addresses = results.map(r => r.address).filter(Boolean);
+        if (addresses.length === 0) {
+            this.logger.warn?.('proxy_download blocked: DNS lookup returned no addresses', {
+                hostname,
+                how_to_fix: "If you need to allow internal hostnames, set allow_private_network=true and restrict with allowed_hosts.",
+            });
+            throw new ValidationError(`DNS lookup returned no addresses for hostname '${hostname}'`);
+        }
+        return addresses;
+    }
+    isAllowedHost(hostname, allowedHosts) {
+        const lower = hostname.toLowerCase();
+        return allowedHosts.some(patternRaw => {
+            const pattern = patternRaw.toLowerCase().trim();
+            if (!pattern)
+                return false;
+            if (pattern.startsWith('*.')) {
+                const suffix = pattern.slice(2);
+                if (!suffix)
+                    return false;
+                return lower.endsWith(`.${suffix}`);
+            }
+            return lower === pattern;
+        });
+    }
+    isDisallowedIPv4(ip) {
+        const parts = ip.split('.').map(p => Number(p));
+        if (parts.length !== 4 || parts.some(p => !Number.isInteger(p) || p < 0 || p > 255))
+            return true;
+        const [a, b] = parts;
+        if (a === 127)
+            return true; // loopback
+        if (a === 10)
+            return true; // private
+        if (a === 172 && b >= 16 && b <= 31)
+            return true; // private
+        if (a === 192 && b === 168)
+            return true; // private
+        if (a === 169 && b === 254)
+            return true; // link-local
+        if (a === 0)
+            return true; // "this network"
+        return false;
+    }
+    isDisallowedIPv6(ip) {
+        const normalized = ip.toLowerCase();
+        if (normalized === '::1' || normalized === '0:0:0:0:0:0:0:1')
+            return true; // loopback
+        if (normalized === '::' || normalized === '0:0:0:0:0:0:0:0')
+            return true; // unspecified
+        if (normalized.startsWith('fe8') || normalized.startsWith('fe9') || normalized.startsWith('fea') || normalized.startsWith('feb')) {
+            return true; // link-local fe80::/10 (approx by prefix)
+        }
+        if (normalized.startsWith('fc') || normalized.startsWith('fd'))
+            return true; // unique local fc00::/7 (approx by prefix)
+        return false;
+    }
     /**
      * Handle inline data URLs (data:mime;base64,...)
      */

package/dist/src/proxy-executor.js.map

@@ -1 +1 @@
-{"version":3,"file":"proxy-executor.js","sourceRoot":"","sources":["../../src/proxy-executor.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AA+B5D,MAAM,gBAAgB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,OAAO;AAClD,MAAM,eAAe,GAAG,KAAK,CAAC,CAAC,MAAM;AAErC,MAAM,OAAO,qBAAqB;IAChC,YAAoB,UAAsB;QAAtB,eAAU,GAAV,UAAU,CAAY;IAAG,CAAC;IAE9C;;;;;;OAMG;IACH,KAAK,CAAC,OAAO,CACX,SAAiC,EACjC,eAAiD,EACjD,eAAgC,EAChC,qBAAwD;QAExD,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;QAC/C,MAAM,OAAO,GAAG,SAAS,CAAC,UAAU,IAAI,eAAe,CAAC;QACxD,MAAM,QAAQ,GAAG,SAAS,CAAC,SAAS,IAAI,KAAK,CAAC;QAE9C,yBAAyB;QACzB,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CACpD,eAAe,CAAC,MAAM,EACtB,eAAe,CAAC,IAAI,CACrB,CAAC;QACF,MAAM,QAAQ,GAAG,gBAAgB,CAAC,IAA+B,CAAC;QAElE,wBAAwB;QACxB,MAAM,QAAQ,GACZ,IAAI,CAAC,mBAAmB,CAAC,QAAQ,EAAE,yBAAyB,CAAC;YAC5D,QAAQ,CAAC,WAAW,CAAY;YAChC,QAAQ,CAAC,UAAU,CAAY;YAC/B,QAAQ,CAAC,MAAM,CAAY,CAAC;QAC/B,MAAM,YAAY,GAChB,IAAI,CAAC,mBAAmB,CAAC,QAAQ,EAAE,qBAAqB,CAAC;YACxD,QAAQ,CAAC,MAAM,CAAwB,CAAC;QAC3C,MAAM,YAAY,GACf,QAAQ,CAAC,UAAU,CAAwB;YAC3C,QAAQ,CAAC,cAAc,CAAwB;YAChD,0BAA0B,CAAC;QAE7B,qEAAqE;QACrE,IAAI,qBAAqB,EAAE,CAAC;YAC1B,MAAM,WAAW,GAAG,IAAI,CAAC,gBAAgB,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC;YACtE,MAAM,QAAQ,GAAG,SAAS,CAAC,SAAS,IAAI,KAAK,CAAC;YAC9C,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAC7D,WAAW,EACX,eAAe,EACf,OAAO,EACP,OAAO,EACP,QAAQ,EACR,qBAAqB,CAAC,MAAM,CAC7B,CAAC;YAEF,IAAI,YAAY,IAAI,YAAY,GAAG,OAAO,EAAE,CAAC;gBAC3C,MAAM,IAAI,eAAe,CACvB,aAAa,YAAY,oBAAoB,OAAO,QAAQ,CAC7D,CAAC;YACJ,CAAC;YAED,MAAM,aAAa,GAAG,QAAQ,IAAI,YAAY,CAAC;YAC/C,IAAI,SAAS,CAAC,kBAAkB,EAAE,CAAC;gBACjC,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,aAAa,EAAE,SAAS,CAAC,kBAAkB,CAAC,EAAE,CAAC;oBACzE,MAAM,IAAI,eAAe,CACvB,cAAc,aAAa,uBAAuB,SAAS,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC5F,CAAC;gBACJ,CAAC;YACH,CAAC;YAED,OAAO;gBACL,QAAQ;gBACR,OAAO;gBACP,QAAQ,EAAE,aAAa;gBACvB,IAAI;gBACJ,QAAQ;aACT,CAAC;QACJ,CAAC;QAED,oCAAoC;QACpC,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAChD,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,eAAe,CACvB,cAAc,QAAQ,kCAAkC,CACzD,CAAC;QACJ,CAAC;QAED,iEAAiE;QACjE,MAAM,QAAQ,GAAG,YAAY,CAAC;QAC9B,IAAI,SAAS,CAAC,kBAAkB,EAAE,CAAC;YACjC,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,QAAQ,EAAE,SAAS,CAAC,kBAAkB,CAAC,EAAE,CAAC;gBACpE,MAAM,IAAI,eAAe,CACvB,cAAc,QAAQ,uBAAuB,SAAS,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACvF,CAAC;YACJ,CAAC;QACH,CAAC;QAED,uDAAuD;QACvD,IAAI,YAAY,IAAI,YAAY,GAAG,OAAO,EAAE,CAAC;YAC3C,MAAM,IAAI,eAAe,CACvB,aAAa,YAAY,oBAAoB,OAAO,QAAQ,CAC7D,CAAC;QACJ,CAAC;QAED,mEAAmE;QACnE,IAAI,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YAC5B,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,GAAG,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YACzF,OAAO;gBACL,QAAQ;gBACR,OAAO;gBACP,QAAQ,EAAE,YAAY,IAAI,QAAQ;gBAClC,IAAI;gBACJ,QAAQ;aACT,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAG,SAAS,CAAC,SAAS,IAAI,KAAK,CAAC;QAC9C,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAC3E,GAAG,EACH,eAAe,EACf,OAAO,EACP,OAAO,EACP,QAAQ,CACT,CAAC;QAEF,OAAO;YACL,QAAQ;YACR,OAAO;YACP,QAAQ,EAAE,YAAY,IAAI,QAAQ;YAClC,IAAI;YACJ,QAAQ;SACT,CAAC;IACJ,CAAC;IAEO,cAAc,CAAC,SAAiC;QACtD,MAAM,OAAO,GAAG,CAAC,SAAS,CAAC,uBAAuB,EAAE,sBAAsB,CAAC,CAAC,MAAM,CAChF,OAAO,CACI,CAAC;QAEd,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;YAC1B,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAClC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC3B,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;gBAChC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,EAAE,CAAC;oBAC7C,MAAM,IAAI,eAAe,CACvB,6BAA6B,GAAG,qCAAqC,QAAQ,GAAG,CACjF,CAAC;gBACJ,CAAC;gBACD,OAAO,MAAM,CAAC;YAChB,CAAC;QACH,CAAC;QAED,IAAI,SAAS,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;YAC3C,OAAO,SAAS,CAAC,cAAc,CAAC;QAClC,CAAC;QAED,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IAED;;OAEG;IACK,UAAU,CAAC,QAAiC,EAAE,QAAgB;QACpE,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,OAAO,GAAY,QAAQ,CAAC;QAEhC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;gBACpD,OAAO,IAAI,CAAC;YACd,CAAC;YACD,OAAO,GAAI,OAAmC,CAAC,IAAI,CAAC,CAAC;QACvD,CAAC;QAED,OAAO,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;IACtD,CAAC;IAEO,mBAAmB,CAAC,QAAiC,EAAE,IAAY;QACzE,MAAM,KAAK,GAAG,IAAI,CAAC,kBAAkB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACtD,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IACvD,CAAC;IAEO,mBAAmB,CAAC,QAAiC,EAAE,IAAY;QACzE,MAAM,KAAK,GAAG,IAAI,CAAC,kBAAkB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACtD,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IACvD,CAAC;IAEO,kBAAkB,CAAC,QAAiC,EAAE,IAAY;QACxE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,OAAO,GAAY,QAAQ,CAAC;QAChC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;gBACpD,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,OAAO,GAAI,OAAmC,CAAC,IAAI,CAAC,CAAC;QACvD,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,gBAAgB,CAAC,IAAY;QACnC,IAAI,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/B,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC;QAC7C,OAAO,GAAG,OAAO,GAAG,IAAI,EAAE,CAAC;IAC7B,CAAC;IAED;;OAEG;IACK,iBAAiB,CAAC,QAAgB,EAAE,SAAmB;QAC7D,OAAO,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE;YAC9B,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC3B,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,wBAAwB;gBAC7D,OAAO,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YACrC,CAAC;YACD,OAAO,QAAQ,KAAK,OAAO,CAAC;QAC9B,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACK,KAAK,CAAC,gBAAgB,CAC5B,GAAW,EACX,eAAgC,EAChC,OAAe,EACf,OAAe,EACf,WAAoB,KAAK,EACzB,SAAiB,KAAK;QAEtB,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,OAAO,CAAC,CAAC;QAEhE,IAAI,CAAC;YACH,gFAAgF;YAChF,IAAI,WAAW,GAAG,GAAG,CAAC;YACtB,IAAI,CAAC,QAAQ,IAAI,eAAe,CAAC,WAAW,EAAE,CAAC;gBAC7C,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;gBAC5B,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,eAAe,CAAC,WAAW,CAAC;gBAEnD,kEAAkE;gBAClE,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;oBAClC,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;oBACpC,WAAW,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;gBAClC,CAAC;YACH,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,WAAW,EAAE;gBACxC,MAAM;gBACN,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,OAAO;gBAChD,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,IAAI,YAAY,CACpB,yBAAyB,QAAQ,CAAC,MAAM,EAAE,EAC1C,QAAQ,CAAC,MAAM,CAChB,CAAC;YACJ,CAAC;YAED,8BAA8B;YAC9B,MAAM,aAAa,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;YAC7D,IAAI,aAAa,IAAI,QAAQ,CAAC,aAAa,EAAE,EAAE,CAAC,GAAG,OAAO,EAAE,CAAC;gBAC3D,MAAM,IAAI,eAAe,CACvB,aAAa,aAAa,oBAAoB,OAAO,QAAQ,CAC9D,CAAC;YACJ,CAAC;YAED,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC;YAEjD,mBAAmB;YACnB,IAAI,WAAW,CAAC,UAAU,GAAG,OAAO,EAAE,CAAC;gBACrC,MAAM,IAAI,eAAe,CACvB,wBAAwB,WAAW,CAAC,UAAU,oBAAoB,OAAO,QAAQ,CAClF,CAAC;YACJ,CAAC;YAED,oBAAoB;YACpB,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,WAAW,CAAC,CAAC;YAC1C,IAAI,MAAM,GAAG,EAAE,CAAC;YAChB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,UAAU,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC1C,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YAC1C,CAAC;YACD,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;YAE7B,OAAO;gBACL,OAAO;gBACP,IAAI,EAAE,WAAW,CAAC,UAAU;gBAC5B,QAAQ,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,SAAS;aAC5D,CAAC;QAEJ,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,SAAS,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IAED;;OAEG;IACK,mBAAmB,CAAC,GAAW,EAAE,OAAe;QACtD,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;QACpD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,eAAe,CAAC,6BAA6B,CAAC,CAAC;QAC3D,CAAC;QACD,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,0BAA0B,CAAC;QACxD,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QAC5B,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,MAAM,CAAC;QACtD,IAAI,IAAI,GAAG,OAAO,EAAE,CAAC;YACnB,MAAM,IAAI,eAAe,CAAC,wBAAwB,IAAI,oBAAoB,OAAO,QAAQ,CAAC,CAAC;QAC7F,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IACjD,CAAC;CACF"}
+{"version":3,"file":"proxy-executor.js","sourceRoot":"","sources":["../../src/proxy-executor.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC5D,OAAO,EAAE,IAAI,EAAE,MAAM,UAAU,CAAC;AAChC,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAoC3C,MAAM,gBAAgB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,OAAO;AAClD,MAAM,eAAe,GAAG,KAAK,CAAC,CAAC,MAAM;AACrC,MAAM,aAAa,GAAG,CAAC,CAAC;AAExB,MAAM,OAAO,qBAAqB;IAChC,YACU,UAAsB,EACtB,SAAsB,EAAE,KAAK,EAAE,GAAG,EAAE,GAAE,CAAC,EAAE;QADzC,eAAU,GAAV,UAAU,CAAY;QACtB,WAAM,GAAN,MAAM,CAAmC;IAChD,CAAC;IAEJ;;;;;;OAMG;IACH,KAAK,CAAC,OAAO,CACX,SAAiC,EACjC,eAAiD,EACjD,eAAgC,EAChC,qBAAwD;QAExD,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;QAC/C,MAAM,OAAO,GAAG,SAAS,CAAC,UAAU,IAAI,eAAe,CAAC;QACxD,MAAM,QAAQ,GAAG,SAAS,CAAC,SAAS,IAAI,KAAK,CAAC;QAC9C,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QAExC,yBAAyB;QACzB,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CACpD,eAAe,CAAC,MAAM,EACtB,eAAe,CAAC,IAAI,CACrB,CAAC;QACF,MAAM,QAAQ,GAAG,gBAAgB,CAAC,IAA+B,CAAC;QAElE,wBAAwB;QACxB,MAAM,QAAQ,GACZ,IAAI,CAAC,mBAAmB,CAAC,QAAQ,EAAE,yBAAyB,CAAC;YAC5D,QAAQ,CAAC,WAAW,CAAY;YAChC,QAAQ,CAAC,UAAU,CAAY;YAC/B,QAAQ,CAAC,MAAM,CAAY,CAAC;QAC/B,MAAM,YAAY,GAChB,IAAI,CAAC,mBAAmB,CAAC,QAAQ,EAAE,qBAAqB,CAAC;YACxD,QAAQ,CAAC,MAAM,CAAwB,CAAC;QAC3C,MAAM,YAAY,GACf,QAAQ,CAAC,UAAU,CAAwB;YAC3C,QAAQ,CAAC,cAAc,CAAwB;YAChD,0BAA0B,CAAC;QAE7B,qEAAqE;QACrE,IAAI,qBAAqB,EAAE,CAAC;YAC1B,MAAM,QAAQ,GAAG,SAAS,CAAC,SAAS,IAAI,KAAK,CAAC;YAC9C,MAAM,WAAW,GAAG,IAAI,CAAC,cAAc,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC;YACpE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAC7D,WAAW,EACX,eAAe,EACf,OAAO,EACP,OAAO,EACP,UAAU,EACV,QAAQ,EACR,qBAAqB,CAAC,MAAM,EAC5B,SAAS,CACV,CAAC;YAEF,IAAI,YAAY,IAAI,YAAY,GAAG,OAAO,EAAE,CAAC;gBAC3C,MAAM,IAAI,eAAe,CACvB,aAAa,YAAY,oBAAoB,OAAO,QAAQ,CAC7D,CAAC;YACJ,CAAC;YAED,MAAM,aAAa,GAAG,QAAQ,IAAI,YAAY,CAAC;YAC/C,IAAI,SAAS,CAAC,kBAAkB,EAAE,CAAC;gBACjC,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,aAAa,EAAE,SAAS,CAAC,kBAAkB,CAAC,EAAE,CAAC;oBACzE,MAAM,IAAI,eAAe,CACvB,cAAc,aAAa,uBAAuB,SAAS,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC5F,CAAC;gBACJ,CAAC;YACH,CAAC;YAED,OAAO;gBACL,QAAQ;gBACR,OAAO;gBACP,QAAQ,EAAE,aAAa;gBACvB,IAAI;gBACJ,QAAQ;aACT,CAAC;QACJ,CAAC;QAED,oCAAoC;QACpC,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAChD,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,eAAe,CACvB,cAAc,QAAQ,kCAAkC,CACzD,CAAC;QACJ,CAAC;QAED,iEAAiE;QACjE,MAAM,QAAQ,GAAG,YAAY,CAAC;QAC9B,IAAI,SAAS,CAAC,kBAAkB,EAAE,CAAC;YACjC,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,QAAQ,EAAE,SAAS,CAAC,kBAAkB,CAAC,EAAE,CAAC;gBACpE,MAAM,IAAI,eAAe,CACvB,cAAc,QAAQ,uBAAuB,SAAS,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACvF,CAAC;YACJ,CAAC;QACH,CAAC;QAED,uDAAuD;QACvD,IAAI,YAAY,IAAI,YAAY,GAAG,OAAO,EAAE,CAAC;YAC3C,MAAM,IAAI,eAAe,CACvB,aAAa,YAAY,oBAAoB,OAAO,QAAQ,CAC7D,CAAC;QACJ,CAAC;QAED,mEAAmE;QACnE,IAAI,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YAC5B,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,GAAG,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YACzF,OAAO;gBACL,QAAQ;gBACR,OAAO;gBACP,QAAQ,EAAE,YAAY,IAAI,QAAQ;gBAClC,IAAI;gBACJ,QAAQ;aACT,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAG,SAAS,CAAC,SAAS,IAAI,KAAK,CAAC;QAC9C,MAAM,WAAW,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;QAC7C,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAC3E,WAAW,EACX,eAAe,EACf,OAAO,EACP,OAAO,EACP,UAAU,EACV,QAAQ,EACR,KAAK,EACL,SAAS,CACV,CAAC;QAEF,OAAO;YACL,QAAQ;YACR,OAAO;YACP,QAAQ,EAAE,YAAY,IAAI,QAAQ;YAClC,IAAI;YACJ,QAAQ;SACT,CAAC;IACJ,CAAC;IAEO,cAAc,CAAC,SAAiC;QACtD,MAAM,OAAO,GAAG,CAAC,SAAS,CAAC,uBAAuB,EAAE,sBAAsB,CAAC,CAAC,MAAM,CAChF,OAAO,CACI,CAAC;QAEd,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;YAC1B,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAClC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC3B,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;gBAChC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,EAAE,CAAC;oBAC7C,MAAM,IAAI,eAAe,CACvB,6BAA6B,GAAG,qCAAqC,QAAQ,GAAG,CACjF,CAAC;gBACJ,CAAC;gBACD,OAAO,MAAM,CAAC;YAChB,CAAC;QACH,CAAC;QAED,IAAI,SAAS,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;YAC3C,OAAO,SAAS,CAAC,cAAc,CAAC;QAClC,CAAC;QAED,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IAED;;OAEG;IACK,UAAU,CAAC,QAAiC,EAAE,QAAgB;QACpE,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,OAAO,GAAY,QAAQ,CAAC;QAEhC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;gBACpD,OAAO,IAAI,CAAC;YACd,CAAC;YACD,OAAO,GAAI,OAAmC,CAAC,IAAI,CAAC,CAAC;QACvD,CAAC;QAED,OAAO,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;IACtD,CAAC;IAEO,mBAAmB,CAAC,QAAiC,EAAE,IAAY;QACzE,MAAM,KAAK,GAAG,IAAI,CAAC,kBAAkB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACtD,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IACvD,CAAC;IAEO,mBAAmB,CAAC,QAAiC,EAAE,IAAY;QACzE,MAAM,KAAK,GAAG,IAAI,CAAC,kBAAkB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACtD,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IACvD,CAAC;IAEO,kBAAkB,CAAC,QAAiC,EAAE,IAAY;QACxE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,OAAO,GAAY,QAAQ,CAAC;QAChC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;gBACpD,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,OAAO,GAAI,OAAmC,CAAC,IAAI,CAAC,CAAC;QACvD,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,aAAa;QACnB,IAAI,CAAC;YACH,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC;QACtD,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,eAAe,CAAC,sDAAsD,CAAC,CAAC;QACpF,CAAC;IACH,CAAC;IAEO,cAAc,CAAC,KAAa;QAClC,eAAe;QACf,IAAI,WAA4B,CAAC;QACjC,IAAI,CAAC;YACH,WAAW,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QAC/B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,kEAAkE,EAAE;gBACpF,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAC;QACL,CAAC;QAED,IAAI,WAAW,EAAE,CAAC;YAChB,IAAI,WAAW,CAAC,QAAQ,KAAK,OAAO,IAAI,WAAW,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBAC1E,OAAO,WAAW,CAAC,QAAQ,EAAE,CAAC;YAChC,CAAC;YACD,MAAM,IAAI,eAAe,CAAC,qCAAqC,WAAW,CAAC,QAAQ,GAAG,CAAC,CAAC;QAC1F,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC;QAC7C,IAAI,IAAS,CAAC;QACd,IAAI,CAAC;YACH,IAAI,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;QAC1B,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,eAAe,CAAC,sDAAsD,CAAC,CAAC;QACpF,CAAC;QAED,IAAI,IAAI,CAAC,QAAQ,KAAK,OAAO,IAAI,IAAI,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC5D,MAAM,IAAI,eAAe,CAAC,qCAAqC,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC;QACnF,CAAC;QAED,IAAI,CAAC;YACH,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC1B,0GAA0G;gBAC1G,MAAM,QAAQ,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC;gBACzD,OAAO,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC;YACtC,CAAC;YAED,4DAA4D;YAC5D,MAAM,eAAe,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,GAAG,CAAC;YACxE,OAAO,IAAI,GAAG,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC,QAAQ,EAAE,CAAC;QACpD,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,eAAe,CAAC,0BAA0B,KAAK,GAAG,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,qBAAqB,CACjC,WAAmB,EACnB,UAAkB,EAClB,SAAiC,EACjC,QAAiB;QAEjB,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC;QAEnD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,IAAI,cAAc,KAAK,UAAU,EAAE,CAAC;gBAClC,MAAM,IAAI,eAAe,CACvB,2EAA2E,UAAU,uBAAuB,cAAc,gEAAgE,CAC3L,CAAC;YACJ,CAAC;YACD,OAAO;QACT,CAAC;QAED,oEAAoE;QACpE,IAAI,cAAc,KAAK,UAAU;YAAE,OAAO;QAE1C,MAAM,IAAI,CAAC,4BAA4B,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;IAClE,CAAC;IAED;;OAEG;IACK,iBAAiB,CAAC,QAAgB,EAAE,SAAmB;QAC7D,OAAO,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE;YAC9B,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC3B,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,wBAAwB;gBAC7D,OAAO,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YACrC,CAAC;YACD,OAAO,QAAQ,KAAK,OAAO,CAAC;QAC9B,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACK,KAAK,CAAC,gBAAgB,CAC5B,GAAW,EACX,eAAgC,EAChC,OAAe,EACf,OAAe,EACf,UAAkB,EAClB,WAAoB,KAAK,EACzB,SAAiB,KAAK,EACtB,SAAkC;QAElC,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,OAAO,CAAC,CAAC;QAEhE,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,IAAI,CAAC,qCAAqC,CAAC,GAAG,EAAE,eAAe,EAAE,QAAQ,CAAC,CAAC;YAC9F,IAAI,UAAU,GAAG,UAAU,CAAC;YAC5B,IAAI,aAAa,GAAG,MAAM,CAAC;YAC3B,IAAI,cAAc,GAAG,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,OAAO,CAAC;YAE7D,IAAI,SAAS,EAAE,CAAC;gBACd,MAAM,IAAI,CAAC,qBAAqB,CAAC,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;YAChF,CAAC;YAED,KAAK,IAAI,SAAS,GAAG,CAAC,EAAE,SAAS,IAAI,aAAa,EAAE,SAAS,EAAE,EAAE,CAAC;gBAChE,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,UAAU,EAAE;oBACvC,MAAM,EAAE,aAAa;oBACrB,OAAO,EAAE,cAAc;oBACvB,MAAM,EAAE,UAAU,CAAC,MAAM;oBACzB,QAAQ,EAAE,QAAQ;iBACnB,CAAC,CAAC;gBAEH,IAAI,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;oBAC3C,IAAI,SAAS,KAAK,aAAa,EAAE,CAAC;wBAChC,MAAM,IAAI,YAAY,CAAC,2BAA2B,aAAa,GAAG,CAAC,CAAC;oBACtE,CAAC;oBAED,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;oBAClD,IAAI,CAAC,QAAQ,EAAE,CAAC;wBACd,MAAM,IAAI,YAAY,CAAC,0CAA0C,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;oBACtF,CAAC;oBAED,MAAM,OAAO,GAAG,IAAI,CAAC,qBAAqB,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;oBACjE,IAAI,SAAS,EAAE,CAAC;wBACd,gDAAgD;wBAChD,MAAM,IAAI,CAAC,qBAAqB,CAAC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;oBAC7E,CAAC;oBAED,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC;oBAC7E,IAAI,aAAa,EAAE,CAAC;wBAClB,cAAc,GAAG,EAAE,CAAC;oBACtB,CAAC;oBAED,IACE,QAAQ,CAAC,MAAM,KAAK,GAAG;wBACvB,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,CAAC;4BACnD,aAAa,KAAK,KAAK;4BACvB,aAAa,KAAK,MAAM,CAAC,EAC3B,CAAC;wBACD,aAAa,GAAG,KAAK,CAAC;oBACxB,CAAC;oBAED,UAAU,GAAG,OAAO,CAAC;oBACrB,SAAS;gBACX,CAAC;gBAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;oBACjB,MAAM,IAAI,YAAY,CAAC,yBAAyB,QAAQ,CAAC,MAAM,EAAE,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;gBACtF,CAAC;gBAED,8BAA8B;gBAC9B,MAAM,aAAa,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;gBAC7D,IAAI,aAAa,IAAI,QAAQ,CAAC,aAAa,EAAE,EAAE,CAAC,GAAG,OAAO,EAAE,CAAC;oBAC3D,MAAM,IAAI,eAAe,CAAC,aAAa,aAAa,oBAAoB,OAAO,QAAQ,CAAC,CAAC;gBAC3F,CAAC;gBAED,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC;gBAEjD,mBAAmB;gBACnB,IAAI,WAAW,CAAC,UAAU,GAAG,OAAO,EAAE,CAAC;oBACrC,MAAM,IAAI,eAAe,CACvB,wBAAwB,WAAW,CAAC,UAAU,oBAAoB,OAAO,QAAQ,CAClF,CAAC;gBACJ,CAAC;gBAED,oBAAoB;gBACpB,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;gBAE5D,OAAO;oBACL,OAAO;oBACP,IAAI,EAAE,WAAW,CAAC,UAAU;oBAC5B,QAAQ,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,SAAS;iBAC5D,CAAC;YACJ,CAAC;YAED,MAAM,IAAI,YAAY,CAAC,qDAAqD,CAAC,CAAC;QAEhF,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,SAAS,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IAEO,qCAAqC,CAC3C,GAAW,EACX,eAAgC,EAChC,QAAiB;QAEjB,IAAI,QAAQ,IAAI,CAAC,eAAe,CAAC,WAAW;YAAE,OAAO,GAAG,CAAC;QAEzD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QAC5B,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,eAAe,CAAC,WAAW,CAAC;QAEnD,kEAAkE;QAClE,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAClC,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACtC,CAAC;QACD,OAAO,MAAM,CAAC,QAAQ,EAAE,CAAC;IAC3B,CAAC;IAEO,gBAAgB,CAAC,MAAc;QACrC,OAAO,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,CAAC;IAChG,CAAC;IAEO,qBAAqB,CAAC,UAAkB,EAAE,QAAgB;QAChE,IAAI,QAAa,CAAC;QAClB,IAAI,CAAC;YACH,QAAQ,GAAG,IAAI,GAAG,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAC3C,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,YAAY,CAAC,0BAA0B,QAAQ,GAAG,CAAC,CAAC;QAChE,CAAC;QAED,IAAI,QAAQ,CAAC,QAAQ,KAAK,OAAO,IAAI,QAAQ,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACpE,MAAM,IAAI,eAAe,CAAC,qCAAqC,QAAQ,CAAC,QAAQ,GAAG,CAAC,CAAC;QACvF,CAAC;QAED,OAAO,QAAQ,CAAC,QAAQ,EAAE,CAAC;IAC7B,CAAC;IAEO,KAAK,CAAC,4BAA4B,CAAC,SAAiB,EAAE,SAAiC;QAC7F,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;QAC/B,MAAM,WAAW,GAAG,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;QAC/C,MAAM,QAAQ,GAAG,WAAW,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC;YACvE,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAC1B,CAAC,CAAC,WAAW,CAAC;QAChB,MAAM,mBAAmB,GAAG,SAAS,CAAC,qBAAqB,IAAI,KAAK,CAAC;QAErE,IAAI,SAAS,CAAC,aAAa,IAAI,SAAS,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAClE,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,SAAS,CAAC,aAAa,CAAC,EAAE,CAAC;gBAC3D,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,+CAA+C,EAAE;oBAClE,QAAQ;oBACR,aAAa,EAAE,SAAS,CAAC,aAAa;oBACtC,UAAU,EAAE,sEAAsE;iBACnF,CAAC,CAAC;gBACH,MAAM,IAAI,eAAe,CACvB,oCAAoC,QAAQ,qBAAqB,SAAS,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACvG,CAAC;YACJ,CAAC;QACH,CAAC;QAED,IAAI,mBAAmB;YAAE,OAAO;QAEhC,IAAI,QAAQ,KAAK,WAAW,EAAE,CAAC;YAC7B,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,0CAA0C,EAAE;gBAC7D,QAAQ;gBACR,UAAU,EAAE,4FAA4F;aACzG,CAAC,CAAC;YACH,MAAM,IAAI,eAAe,CAAC,+BAA+B,CAAC,CAAC;QAC7D,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC;QACjC,IAAI,SAAS,KAAK,CAAC,EAAE,CAAC;YACpB,IAAI,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACpC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,iEAAiE,EAAE;oBACpF,QAAQ;oBACR,UAAU,EAAE,8FAA8F;iBAC3G,CAAC,CAAC;gBACH,MAAM,IAAI,eAAe,CAAC,yBAAyB,CAAC,CAAC;YACvD,CAAC;QACH,CAAC;aAAM,IAAI,SAAS,KAAK,CAAC,EAAE,CAAC;YAC3B,IAAI,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACpC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,iEAAiE,EAAE;oBACpF,QAAQ;oBACR,UAAU,EAAE,8FAA8F;iBAC3G,CAAC,CAAC;gBACH,MAAM,IAAI,eAAe,CAAC,yBAAyB,CAAC,CAAC;YACvD,CAAC;QACH,CAAC;aAAM,CAAC;YACN,+FAA+F;YAC/F,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,QAAQ,CAAC,CAAC;YAC5D,MAAM,UAAU,GAAG,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE;gBAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;gBAC7B,IAAI,MAAM,KAAK,CAAC;oBAAE,OAAO,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;gBACxD,IAAI,MAAM,KAAK,CAAC;oBAAE,OAAO,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;gBACxD,OAAO,KAAK,CAAC;YACf,CAAC,CAAC,CAAC;YAEH,IAAI,UAAU,EAAE,CAAC;gBACf,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,6EAA6E,EAAE;oBAChG,QAAQ;oBACR,kBAAkB,EAAE,SAAS;oBAC7B,UAAU,EACR,mGAAmG;iBACtG,CAAC,CAAC;gBACH,MAAM,IAAI,eAAe,CAAC,6CAA6C,CAAC,CAAC;YAC3E,CAAC;QACH,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,oBAAoB,CAAC,QAAgB;QACjD,MAAM,SAAS,GAAG,IAAI,CAAC;QAEvB,IAAI,OAAO,GAA+B,EAAE,CAAC;QAC7C,IAAI,CAAC;YACH,OAAO,GAAG,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC;gBAC5B,MAAM,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAwC;gBACtF,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,CAC/B,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,4BAA4B,SAAS,IAAI,CAAC,CAAC,EAAE,SAAS,CAAC,CAC1F;aACF,CAAC,CAA+B,CAAC;QACpC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,2CAA2C,EAAE;gBAC9D,QAAQ;gBACR,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;gBAC7D,UAAU,EACR,0GAA0G;aAC7G,CAAC,CAAC;YACH,MAAM,IAAI,eAAe,CAAC,mCAAmC,QAAQ,GAAG,CAAC,CAAC;QAC5E,CAAC;QAED,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC9D,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3B,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,0DAA0D,EAAE;gBAC7E,QAAQ;gBACR,UAAU,EACR,0GAA0G;aAC7G,CAAC,CAAC;YACH,MAAM,IAAI,eAAe,CAAC,kDAAkD,QAAQ,GAAG,CAAC,CAAC;QAC3F,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAEO,aAAa,CAAC,QAAgB,EAAE,YAAsB;QAC5D,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;QACrC,OAAO,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE;YACpC,MAAM,OAAO,GAAG,UAAU,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;YAChD,IAAI,CAAC,OAAO;gBAAE,OAAO,KAAK,CAAC;YAE3B,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC7B,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBAChC,IAAI,CAAC,MAAM;oBAAE,OAAO,KAAK,CAAC;gBAC1B,OAAO,KAAK,CAAC,QAAQ,CAAC,IAAI,MAAM,EAAE,CAAC,CAAC;YACtC,CAAC;YAED,OAAO,KAAK,KAAK,OAAO,CAAC;QAC3B,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,gBAAgB,CAAC,EAAU;QACjC,MAAM,KAAK,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAChD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QACjG,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,KAAK,CAAC;QACrB,IAAI,CAAC,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC,CAAC,WAAW;QACvC,IAAI,CAAC,KAAK,EAAE;YAAE,OAAO,IAAI,CAAC,CAAC,UAAU;QACrC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;YAAE,OAAO,IAAI,CAAC,CAAC,UAAU;QAC5D,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC,CAAC,UAAU;QACnD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC,CAAC,aAAa;QACtD,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC,CAAC,iBAAiB;QAC3C,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,gBAAgB,CAAC,EAAU;QACjC,MAAM,UAAU,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;QACpC,IAAI,UAAU,KAAK,KAAK,IAAI,UAAU,KAAK,iBAAiB;YAAE,OAAO,IAAI,CAAC,CAAC,WAAW;QACtF,IAAI,UAAU,KAAK,IAAI,IAAI,UAAU,KAAK,iBAAiB;YAAE,OAAO,IAAI,CAAC,CAAC,cAAc;QACxF,IAAI,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;YACjI,OAAO,IAAI,CAAC,CAAC,0CAA0C;QACzD,CAAC;QACD,IAAI,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC,CAAC,2CAA2C;QACxH,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACK,mBAAmB,CAAC,GAAW,EAAE,OAAe;QACtD,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;QACpD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,eAAe,CAAC,6BAA6B,CAAC,CAAC;QAC3D,CAAC;QACD,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,0BAA0B,CAAC;QACxD,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QAC5B,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,MAAM,CAAC;QACtD,IAAI,IAAI,GAAG,OAAO,EAAE,CAAC;YACnB,MAAM,IAAI,eAAe,CAAC,wBAAwB,IAAI,oBAAoB,OAAO,QAAQ,CAAC,CAAC;QAC7F,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IACjD,CAAC;CACF"}

package/dist/src/testing/listen-support.d.ts

@@ -0,0 +1,3 @@
+export declare const CAN_LISTEN: boolean;
+export declare const describeIfListen: any;
+//# sourceMappingURL=listen-support.d.ts.map

package/dist/src/testing/listen-support.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"listen-support.d.ts","sourceRoot":"","sources":["../../../src/testing/listen-support.ts"],"names":[],"mappings":"AAsDA,eAAO,MAAM,UAAU,SAA8B,CAAC;AACtD,eAAO,MAAM,gBAAgB,EAAE,GAA2C,CAAC"}

package/dist/src/testing/listen-support.js

@@ -0,0 +1,50 @@
+import http from 'node:http';
+import { describe } from 'vitest';
+async function detectListenSupport() {
+    return await new Promise(resolve => {
+        let finished = false;
+        const server = http.createServer((_, res) => {
+            res.statusCode = 200;
+            res.end('ok');
+        });
+        const done = (result) => {
+            if (finished)
+                return;
+            finished = true;
+            clearTimeout(timeoutId);
+            try {
+                server.close(() => resolve(result));
+            }
+            catch {
+                resolve(result);
+            }
+        };
+        const timeoutId = setTimeout(() => done(false), 500);
+        server.once('error', () => done(false));
+        server.listen(0, '127.0.0.1', () => {
+            const address = server.address();
+            if (!address || typeof address !== 'object' || typeof address.port !== 'number') {
+                done(false);
+                return;
+            }
+            const port = address.port;
+            const req = http.get({
+                hostname: '127.0.0.1',
+                port,
+                path: '/',
+                timeout: 500,
+            }, res => {
+                res.resume();
+                res.once('end', () => done(res.statusCode === 200));
+            });
+            req.once('error', () => done(false));
+            req.once('timeout', () => {
+                req.destroy();
+                done(false);
+            });
+        });
+    });
+}
+export const CAN_LISTEN = await detectListenSupport();
+export const describeIfListen = CAN_LISTEN ? describe : describe.skip;
+//# sourceMappingURL=listen-support.js.map

package/dist/src/testing/listen-support.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"listen-support.js","sourceRoot":"","sources":["../../../src/testing/listen-support.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAElC,KAAK,UAAU,mBAAmB;IAChC,OAAO,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE;QACjC,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE;YAC1C,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;YACrB,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAChB,CAAC,CAAC,CAAC;QAEH,MAAM,IAAI,GAAG,CAAC,MAAe,EAAE,EAAE;YAC/B,IAAI,QAAQ;gBAAE,OAAO;YACrB,QAAQ,GAAG,IAAI,CAAC;YAChB,YAAY,CAAC,SAAS,CAAC,CAAC;YACxB,IAAI,CAAC;gBACH,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;YACtC,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,CAAC,MAAM,CAAC,CAAC;YAClB,CAAC;QACH,CAAC,CAAC;QAEF,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC;QAErD,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QACxC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE;YACjC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;YACjC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAQ,OAAe,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACzF,IAAI,CAAC,KAAK,CAAC,CAAC;gBACZ,OAAO;YACT,CAAC;YAED,MAAM,IAAI,GAAI,OAAe,CAAC,IAAc,CAAC;YAC7C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAClB;gBACE,QAAQ,EAAE,WAAW;gBACrB,IAAI;gBACJ,IAAI,EAAE,GAAG;gBACT,OAAO,EAAE,GAAG;aACb,EACD,GAAG,CAAC,EAAE;gBACJ,GAAG,CAAC,MAAM,EAAE,CAAC;gBACb,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,KAAK,GAAG,CAAC,CAAC,CAAC;YACtD,CAAC,CACF,CAAC;YACF,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;YACrC,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE;gBACvB,GAAG,CAAC,OAAO,EAAE,CAAC;gBACd,IAAI,CAAC,KAAK,CAAC,CAAC;YACd,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,MAAM,UAAU,GAAG,MAAM,mBAAmB,EAAE,CAAC;AACtD,MAAM,CAAC,MAAM,gBAAgB,GAAQ,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC"}

package/dist/src/testing/mock-youtrack-server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mock-youtrack-server.d.ts","sourceRoot":"","sources":["../../../src/testing/mock-youtrack-server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAsB,cAAc,EAAE,MAAM,KAAK,CAAC;AAGzD,QAAA,MAAM,gBAAgB,yBAAyB,CAAC;AAEhD,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC,CAAC;CAC1C;AAuDD,wBAAgB,sBAAsB,CACpC,OAAO,GAAE,MAAyB,EAClC,UAAU,CAAC,EAAE,eAAe,EAAE,GAC7B,cAAc,EAAE,CAwIlB;AAED,wBAAgB,wBAAwB,CAAC,OAAO,GAAE,MAAyB,EAAE,UAAU,CAAC,EAAE,eAAe,EAAE,qCAG1G;AAED,OAAO,EAAE,gBAAgB,IAAI,0BAA0B,EAAE,CAAC"}
+{"version":3,"file":"mock-youtrack-server.d.ts","sourceRoot":"","sources":["../../../src/testing/mock-youtrack-server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAsB,cAAc,EAAE,MAAM,KAAK,CAAC;AAGzD,QAAA,MAAM,gBAAgB,yBAAyB,CAAC;AAEhD,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC,CAAC;CAC1C;AAiED,wBAAgB,sBAAsB,CACpC,OAAO,GAAE,MAAyB,EAClC,UAAU,CAAC,EAAE,eAAe,EAAE,GAC7B,cAAc,EAAE,CAoJlB;AAED,wBAAgB,wBAAwB,CAAC,OAAO,GAAE,MAAyB,EAAE,UAAU,CAAC,EAAE,eAAe,EAAE,qCAG1G;AAED,OAAO,EAAE,gBAAgB,IAAI,0BAA0B,EAAE,CAAC"}

package/dist/src/testing/mock-youtrack-server.js

@@ -16,6 +16,16 @@ const baseArticle = {
 };
 const baseTag = { id: 'tag-1', name: 'Bug', color: '#ff0000' };
 const baseUser = { id: 'user-1', login: 'mock-user', fullName: 'Mock User', email: 'user@example.com' };
+const baseProject = { id: 'PROJ', shortName: 'PROJ', name: 'Mock Project', description: 'Mock project description' };
+const baseProjectCustomField = {
+    id: 'pcf-1',
+    $type: 'ProjectCustomField',
+    canBeEmpty: true,
+    emptyFieldText: '',
+    ordinal: 1,
+    isPublic: true,
+    field: { id: 'cf-1', name: 'Priority', fieldType: { id: 'ft-1', $type: 'FieldType' } },
+};
 function queryToRecord(searchParams) {
     const entries = {};
     for (const [key, value] of searchParams.entries()) {
@@ -86,6 +96,10 @@ export function createYoutrackHandlers(baseUrl = DEFAULT_BASE_URL, requestLog) {
         })),
         http.get(withBase('/tags'), ({ request }) => HttpResponse.json([createEchoResponse(request, baseTag, requestLog)])),
         http.get(withBase('/tags/:id'), ({ request, params }) => HttpResponse.json(createEchoResponse(request, { ...baseTag, id: params.id }, requestLog))),
+        http.get(withBase('/admin/projects'), ({ request }) => HttpResponse.json([createEchoResponse(request, baseProject, requestLog)])),
+        http.get(withBase('/admin/projects/:id'), ({ request, params }) => HttpResponse.json({ ...createEchoResponse(request, { ...baseProject, id: params.id }, requestLog), customFields: [baseProjectCustomField] })),
+        http.get(withBase('/admin/projects/:id/customFields'), ({ request }) => HttpResponse.json([createEchoResponse(request, baseProjectCustomField, requestLog)])),
+        http.get(withBase('/admin/projects/:id/customFields/:projectCustomFieldId'), ({ request, params }) => HttpResponse.json(createEchoResponse(request, { ...baseProjectCustomField, id: params.projectCustomFieldId }, requestLog))),
         http.get(withBase('/savedQueries'), ({ request }) => HttpResponse.json([createEchoResponse(request, { id: 'q-1' }, requestLog)])),
         http.get(withBase('/agiles'), ({ request }) => HttpResponse.json([createEchoResponse(request, { id: 'agile-1' }, requestLog)])),
         http.get(withBase('/agiles/:id'), ({ request, params }) => HttpResponse.json(createEchoResponse(request, { id: params.id, name: 'Agile Board' }, requestLog))),