npm - reflet-sdk - Versions diffs - 0.7.10 → 0.7.12 - Mend

reflet-sdk 0.7.10 → 0.7.12

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (23) hide show

package/dist/{reflet-proxy-Dg6mea-4.js.map → reflet-proxy-CiMPGYzD.js.map} RENAMED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"reflet-proxy-Dg6mea-4.js","names":[],"sources":["../src/devtools/server/json-response.ts","../src/devtools/server/request-guard.ts","../src/devtools/server/connect/connectable-host.ts","../src/devtools/server/connect/connection-store.ts","../src/devtools/server/connect/html-page.ts","../src/devtools/server/connect/pending-connects.ts","../src/devtools/server/connect/connect-routes.ts","../src/devtools/server/options.ts","../src/devtools/server/connect/board-credential.ts","../src/devtools/server/reflet-proxy.ts"],"sourcesContent":["import type { DevtoolsErrorBody } from \"../protocol\";\n\nexport type DevtoolsOutcome<T> =\n \| { ok: true; value: T }\n \| { error: string; ok: false; status: number };\n\nexport const JSON_RESPONSE_HEADERS = {\n \"cache-control\": \"no-store\",\n \"content-type\": \"application/json; charset=utf-8\",\n \"x-content-type-options\": \"nosniff\",\n};\n\nexport function jsonTextResponse(\n text: string \| null,\n status: number\n): Response {\n return new Response(text, { headers: JSON_RESPONSE_HEADERS, status });\n}\n\nexport function jsonResponse(body: unknown, status = 200): Response {\n return jsonTextResponse(JSON.stringify(body), status);\n}\n\nexport function errorResponse(error: string, status: number): Response {\n const body: DevtoolsErrorBody = { error };\n return jsonResponse(body, status);\n}\n\nexport function failure<T>(error: string, status: number): DevtoolsOutcome<T> {\n return { error, ok: false, status };\n}\n","import { DEVTOOLS_REQUEST_HEADER } from \"../protocol\";\nimport { errorResponse } from \"./json-response\";\n\nconst LOOPBACK_HOSTNAMES = [\"localhost\", \"[::1]\"];\nconst LOOPBACK_IPV4 = /^127(?:\\.\\d{1,3}){3}$/;\nconst IPV4_MAPPED_PREFIX = \"::ffff:\";\nconst TRUSTED_FETCH_SITES = [\"same-origin\", \"none\"];\n\nfunction hostnameOf(request: Request): string \| null {\n const host = request.headers.get(\"host\") ?? new URL(request.url).host;\n try {\n return new URL(`http://${host}`).hostname.toLowerCase();\n } catch {\n return null;\n }\n}\n\nexport function isLoopbackHostname(hostname: string): boolean {\n return (\n LOOPBACK_HOSTNAMES.includes(hostname) \|\|\n hostname.endsWith(\".localhost\") \|\|\n LOOPBACK_IPV4.test(hostname)\n );\n}\n\nexport function isLoopbackAddress(address: string \| undefined): boolean {\n if (!address) {\n return false;\n }\n const ipv4 = address.startsWith(IPV4_MAPPED_PREFIX)\n ? address.slice(IPV4_MAPPED_PREFIX.length)\n : address;\n return address === \"::1\" \|\| LOOPBACK_IPV4.test(ipv4);\n}\n\n/*\n The Host check stops DNS rebinding: a hostile domain resolved to 127.0.0.1\n * is same-origin with itself, so origin checks alone would let it through.\n * Host and header checks only stop browsers; keeping other machines out is the\n * job of a dev server bound to loopback.\n /\nexport function rejectUntrustedHost(\n request: Request,\n allowedHosts: string[]\n): Response \| null {\n const hostname = hostnameOf(request);\n const isAllowedHost =\n hostname !== null &&\n (isLoopbackHostname(hostname) \|\| allowedHosts.includes(hostname));\n if (!isAllowedHost) {\n return errorResponse(\n \"Reflet devtools only answers on localhost. Add other dev hostnames to allowedHosts or REFLET_DEVTOOLS_HOSTS.\",\n 403\n );\n }\n return null;\n}\n\nexport function rejectUntrustedCaller(\n request: Request,\n allowedHosts: string[]\n): Response \| null {\n if (request.headers.get(DEVTOOLS_REQUEST_HEADER) !== \"1\") {\n return errorResponse(\n `Reflet devtools requests must send the ${DEVTOOLS_REQUEST_HEADER} header.`,\n 403\n );\n }\n\n const fetchSite = request.headers.get(\"sec-fetch-site\");\n const hostname = hostnameOf(request);\n // Browsers omit Sec-Fetch-Site only outside secure contexts: a plain-HTTP allowed host, never loopback.\n const mayOmitFetchSite =\n hostname !== null &&\n allowedHosts.includes(hostname) &&\n !isLoopbackHostname(hostname);\n const isTrustedSite =\n fetchSite === null\n ? mayOmitFetchSite\n : TRUSTED_FETCH_SITES.includes(fetchSite);\n if (!isTrustedSite) {\n return errorResponse(\n \"Reflet devtools only answers requests from the app's own origin.\",\n 403\n );\n }\n\n return null;\n}\n","import { isLoopbackHostname } from \"../request-guard\";\n\n/* Mirrors the backend redirect allowlist, which stays the authority; this only decides whether Connect is offered. /\nexport function isConnectableHost(hostname: string): boolean {\n return isLoopbackHostname(hostname) \|\| hostname.endsWith(\".test\");\n}\n","import { createHash, randomUUID } from \"node:crypto\";\nimport { mkdir, readFile, rename, rm, writeFile } from \"node:fs/promises\";\nimport { homedir } from \"node:os\";\nimport { join } from \"node:path\";\nimport { z } from \"zod\";\n\nconst storedConnectionSchema = z.object({\n apiUrl: z.url(),\n organizationName: z.string(),\n token: z.string().startsWith(\"fb_dev_\"),\n});\nexport type StoredConnection = z.infer<typeof storedConnectionSchema>;\n\nconst connectionsDirectory = () => join(homedir(), \".reflet\", \"devtools\");\n\nfunction connectionFile(root: string, apiUrl: string) {\n const key = createHash(\"sha256\")\n .update(JSON.stringify([root, apiUrl]))\n .digest(\"hex\");\n return join(connectionsDirectory(), `${key}.json`);\n}\n\nexport async function readConnection(\n root: string,\n apiUrl: string\n): Promise<StoredConnection \| null> {\n try {\n const connection = storedConnectionSchema.parse(\n JSON.parse(await readFile(connectionFile(root, apiUrl), \"utf8\"))\n );\n return connection.apiUrl === apiUrl ? connection : null;\n } catch (error) {\n if (error instanceof Error && \"code\" in error && error.code === \"ENOENT\") {\n return null;\n }\n throw error;\n }\n}\n\nexport async function saveConnection(\n root: string,\n connection: StoredConnection\n): Promise<void> {\n await mkdir(connectionsDirectory(), { mode: 0o700, recursive: true });\n const file = connectionFile(root, connection.apiUrl);\n const temporaryFile = `${file}.${randomUUID()}.tmp`;\n try {\n await writeFile(temporaryFile, `${JSON.stringify(connection)}\\n`, {\n flag: \"wx\",\n mode: 0o600,\n });\n await rename(temporaryFile, file);\n } finally {\n await rm(temporaryFile, { force: true });\n }\n}\n\nexport async function removeConnection(\n root: string,\n apiUrl: string,\n rejectedToken?: string\n): Promise<StoredConnection \| null> {\n const removed = await readConnection(root, apiUrl);\n if (!removed \|\| (rejectedToken && removed.token !== rejectedToken)) {\n return null;\n }\n await rm(connectionFile(root, apiUrl), { force: true });\n return removed;\n}\n","const HTML_ESCAPES: Record<string, string> = {\n \"'\": \"'\",\n '\"': \""\",\n \"&\": \"&\",\n \"<\": \"<\",\n \">\": \">\",\n};\nconst HTML_SPECIAL_CHARACTERS = /[&<>\"']/g;\n\nconst escapeHtml = (text: string): string =>\n text.replace(\n HTML_SPECIAL_CHARACTERS,\n (character) => HTML_ESCAPES[character] ?? character\n );\n\nexport function htmlPage(\n title: string,\n message: string,\n status: number\n): Response {\n const safeTitle = escapeHtml(title);\n const body = `<!doctype html>\n<html lang=\"en\">\n<head><meta charset=\"utf-8\"><meta name=\"viewport\" content=\"width=device-width, initial-scale=1\"><title>${safeTitle} · Reflet</title></head>\n<body style=\"margin:0;min-height:100vh;display:flex;align-items:center;justify-content:center;font-family:system-ui,sans-serif;background:#fafafa;color:#18181b\">\n<main style=\"max-width:28rem;padding:1.5rem\">\n<h1 style=\"font-size:1.25rem;margin:0 0 .5rem\">${safeTitle}</h1>\n<p style=\"margin:0;line-height:1.5;color:#52525b\">${escapeHtml(message)}</p>\n</main>\n</body>\n</html>\n`;\n return new Response(body, {\n headers: {\n \"cache-control\": \"no-store\",\n \"content-security-policy\":\n \"default-src 'none'; style-src 'unsafe-inline'\",\n \"content-type\": \"text/html; charset=utf-8\",\n \"referrer-policy\": \"no-referrer\",\n \"x-content-type-options\": \"nosniff\",\n },\n status,\n });\n}\n","import { createHash, randomBytes } from \"node:crypto\";\n\ninterface ConnectBinding {\n apiUrl: string;\n redirectUri: string;\n root: string;\n}\n\ninterface PendingConnect {\n binding: ConnectBinding;\n codeVerifier: string;\n startedAt: number;\n}\n\nexport const PENDING_CONNECT_TTL_MS = 10 60_000;\nconst MAX_PENDING_CONNECTS = 10;\ndeclare global {\n // Preserve pending connects across dev server module reloads.\n var refletDevtoolsPendingConnects: Map<string, PendingConnect> \| undefined;\n}\n\nfunction pendingConnects(): Map<string, PendingConnect> {\n globalThis.refletDevtoolsPendingConnects ??= new Map();\n return globalThis.refletDevtoolsPendingConnects;\n}\n\nexport function beginConnect(binding: ConnectBinding): {\n codeChallenge: string;\n codeVerifier: string;\n state: string;\n} {\n const state = randomBytes(32).toString(\"base64url\");\n const codeVerifier = randomBytes(32).toString(\"base64url\");\n const codeChallenge = createHash(\"sha256\")\n .update(codeVerifier)\n .digest(\"base64url\");\n\n const pending = pendingConnects();\n while (pending.size >= MAX_PENDING_CONNECTS) {\n const oldestState = pending.keys().next().value;\n if (oldestState === undefined) {\n break;\n }\n pending.delete(oldestState);\n }\n pending.set(state, { binding, codeVerifier, startedAt: Date.now() });\n\n return { codeChallenge, codeVerifier, state };\n}\n\nexport function takeConnect(\n state: string,\n binding: ConnectBinding\n): { codeVerifier: string } \| null {\n const pending = pendingConnects();\n const connect = pending.get(state);\n if (!connect) {\n return null;\n }\n if (Date.now() - connect.startedAt > PENDING_CONNECT_TTL_MS) {\n pending.delete(state);\n return null;\n }\n const matchesServer =\n connect.binding.root === binding.root &&\n connect.binding.apiUrl === binding.apiUrl &&\n connect.binding.redirectUri === binding.redirectUri;\n if (!matchesServer) {\n return null;\n }\n pending.delete(state);\n return { codeVerifier: connect.codeVerifier };\n}\n","import { z } from \"zod\";\nimport {\n type ConnectStartResponse,\n DEVTOOLS_ENDPOINTS,\n DEVTOOLS_ROUTE_BASE,\n type DisconnectResponse,\n} from \"../../protocol\";\nimport { errorResponse, jsonResponse } from \"../json-response\";\nimport type { ResolvedDevtoolsOptions } from \"../options\";\nimport { isConnectableHost } from \"./connectable-host\";\nimport { removeConnection, saveConnection } from \"./connection-store\";\nimport { htmlPage } from \"./html-page\";\nimport { beginConnect, takeConnect } from \"./pending-connects\";\n\nconst publicKeySchema = z.object({\n publicKey: z.string().startsWith(\"fb_pub_\").max(200),\n});\nconst tokenExchangeSchema = z.object({\n organizationName: z.string(),\n token: z.string().startsWith(\"fb_dev_\"),\n});\nconst upstreamErrorSchema = z.object({ error: z.string() });\n\nexport type ConnectOutcome =\n \| { ok: true; organizationName: string }\n \| { message: string; ok: false; status: number; title: string };\n\nexport type ConnectClient = \"desktopApp\" \| \"devServer\";\n\nconst DESKTOP_APP_CLIENT_PARAM = \"desktop\";\n\nexport const connectCallbackUriFor = (origin: string): string =>\n `${origin}${DEVTOOLS_ROUTE_BASE}${DEVTOOLS_ENDPOINTS.connectCallback}`;\n\nconst redirectUriFor = (request: Request): string =>\n connectCallbackUriFor(new URL(request.url).origin);\n\nasync function readPublicKey(request: Request): Promise<string \| null> {\n const parsed = publicKeySchema.safeParse(\n await request.json().catch(() => null)\n );\n return parsed.success ? parsed.data.publicKey : null;\n}\n\nasync function readJson(response: Response): Promise<unknown> {\n try {\n return await response.json();\n } catch {\n return null;\n }\n}\n\n/** Starts a pending connect: Reflet sends the member back to `redirectUri` with a code only this process can redeem. /\nexport function connectAuthorizeUrl(\n settings: ResolvedDevtoolsOptions,\n target: { client: ConnectClient; publicKey: string; redirectUri: string }\n): { authorizeUrl: string; state: string } {\n const { codeChallenge, state } = beginConnect({\n apiUrl: settings.apiUrl,\n redirectUri: target.redirectUri,\n root: settings.root,\n });\n const authorizeUrl = new URL(\"/auth/devtools\", settings.appUrl);\n authorizeUrl.searchParams.set(\"public_key\", target.publicKey);\n authorizeUrl.searchParams.set(\"redirect_uri\", target.redirectUri);\n authorizeUrl.searchParams.set(\"state\", state);\n authorizeUrl.searchParams.set(\"code_challenge\", codeChallenge);\n if (target.client === \"desktopApp\") {\n authorizeUrl.searchParams.set(\"client\", DESKTOP_APP_CLIENT_PARAM);\n }\n return { authorizeUrl: authorizeUrl.toString(), state };\n}\n\nexport async function startConnect(\n request: Request,\n settings: ResolvedDevtoolsOptions\n): Promise<Response> {\n const publicKey = await readPublicKey(request);\n if (!publicKey) {\n return errorResponse(\n \"Pass the widget's fb_pub_ public key to connect.\",\n 400\n );\n }\n if (settings.secretKey) {\n return errorResponse(\n \"REFLET_SECRET_KEY is set, so this dev server already reaches your board.\",\n 409\n );\n }\n if (!isConnectableHost(new URL(request.url).hostname)) {\n return errorResponse(\n \"Connecting from the browser works on localhost, .localhost and .test. Set REFLET_SECRET_KEY instead.\",\n 403\n );\n }\n const { authorizeUrl } = connectAuthorizeUrl(settings, {\n client: \"devServer\",\n publicKey,\n redirectUri: redirectUriFor(request),\n });\n return jsonResponse({ authorizeUrl } satisfies ConnectStartResponse);\n}\n\n/* Trades the code Reflet sent back for a token, kept outside the repository. /\nexport async function redeemConnectCode(\n settings: ResolvedDevtoolsOptions,\n callback: { code: string \| null; redirectUri: string; state: string \| null }\n): Promise<ConnectOutcome> {\n const { code, redirectUri, state } = callback;\n const pending =\n code && state\n ? takeConnect(state, {\n apiUrl: settings.apiUrl,\n redirectUri,\n root: settings.root,\n })\n : null;\n if (!(code && pending)) {\n return {\n message:\n \"This sign-in link expired or was already used. Start again from your app.\",\n ok: false,\n status: 400,\n title: \"Link expired\",\n };\n }\n let upstream: Response;\n try {\n upstream = await fetch(`${settings.apiUrl}/api/v1/devtools/token`, {\n body: JSON.stringify({\n code,\n codeVerifier: pending.codeVerifier,\n redirectUri,\n }),\n headers: {\n Accept: \"application/json\",\n \"Content-Type\": \"application/json\",\n },\n method: \"POST\",\n signal: AbortSignal.timeout(10_000),\n });\n } catch {\n return {\n message: `Could not reach Reflet at ${settings.apiUrl}.`,\n ok: false,\n status: 502,\n title: \"Connection failed\",\n };\n }\n const payload = await readJson(upstream);\n if (!upstream.ok) {\n return {\n message:\n upstreamErrorSchema.safeParse(payload).data?.error ??\n \"Reflet refused this connect code.\",\n ok: false,\n status: 400,\n title: \"Connection refused\",\n };\n }\n const exchange = tokenExchangeSchema.safeParse(payload);\n if (!exchange.success) {\n return {\n message: \"Reflet answered with an unexpected response.\",\n ok: false,\n status: 502,\n title: \"Connection failed\",\n };\n }\n await saveConnection(settings.root, {\n apiUrl: settings.apiUrl,\n organizationName: exchange.data.organizationName,\n token: exchange.data.token,\n });\n return { ok: true, organizationName: exchange.data.organizationName };\n}\n\nconst READY_MESSAGES: Record<ConnectClient, string> = {\n desktopApp: \"Go back to the app: you can record sessions now.\",\n devServer: \"Go back to your app: the Reflet devtools are ready.\",\n};\n\nexport function connectOutcomePage(\n outcome: ConnectOutcome,\n client: ConnectClient\n): Response {\n if (!outcome.ok) {\n return htmlPage(outcome.title, outcome.message, outcome.status);\n }\n return htmlPage(\n \"Connected\",\n `Connected to ${outcome.organizationName}. ${READY_MESSAGES[client]}`,\n 200\n );\n}\n\nexport async function finishConnect(\n request: Request,\n settings: ResolvedDevtoolsOptions\n): Promise<Response> {\n const { searchParams } = new URL(request.url);\n const outcome = await redeemConnectCode(settings, {\n code: searchParams.get(\"code\"),\n redirectUri: redirectUriFor(request),\n state: searchParams.get(\"state\"),\n });\n return connectOutcomePage(outcome, \"devServer\");\n}\n\nasync function revokeUpstream(apiUrl: string, token: string): Promise<boolean> {\n try {\n const response = await fetch(`${apiUrl}/api/v1/devtools/revoke`, {\n headers: { Authorization: `Bearer ${token}` },\n method: \"POST\",\n signal: AbortSignal.timeout(10_000),\n });\n return response.ok;\n } catch {\n return false;\n }\n}\n\n/* Removes the stored token and revokes it on Reflet; false when nothing was revoked. /\nexport async function forgetConnection(\n settings: ResolvedDevtoolsOptions\n): Promise<boolean> {\n const removed = await removeConnection(settings.root, settings.apiUrl);\n return removed ? await revokeUpstream(removed.apiUrl, removed.token) : false;\n}\n\nexport async function disconnect(\n settings: ResolvedDevtoolsOptions\n): Promise<Response> {\n const revoked = await forgetConnection(settings);\n return jsonResponse({ revoked } satisfies DisconnectResponse);\n}\n","import { resolve } from \"node:path\";\nimport { DEFAULT_API_URL } from \"../../client\";\nimport { EDITORS, type EditorId } from \"../protocol\";\n\nexport interface DevtoolsServerOptions {\n /* Dev hostnames besides localhost, e.g. `app.test`. Falls back to REFLET_DEVTOOLS_HOSTS, comma-separated. /\n allowedHosts?: string[];\n /* Reflet API origin. Falls back to REFLET_API_URL, then the hosted API. /\n apiUrl?: string;\n /* Reflet web app origin for Connect. Falls back to REFLET_APP_URL, then https://www.reflet.app. /\n appUrl?: string;\n /* Editor that \"open in editor\" links target. Falls back to REFLET_EDITOR. /\n editor?: EditorId;\n /* App directory source paths resolve against. Defaults to the working directory. /\n root?: string;\n /* Falls back to REFLET_SECRET_KEY. Never sent to the browser. /\n secretKey?: string;\n}\n\nexport type DevtoolsEnv = Readonly<Record<string, string \| undefined>>;\n\nexport interface ResolvedDevtoolsOptions {\n allowedHosts: string[];\n apiUrl: string;\n appUrl: string;\n editor: EditorId;\n root: string;\n secretKey: string \| null;\n}\n\nconst DEFAULT_APP_URL = \"https://www.reflet.app\";\nconst DEFAULT_EDITOR: EditorId = \"vscode\";\nconst TRAILING_SLASHES = /\\/+$/;\n\nfunction isEditorId(value: string \| undefined): value is EditorId {\n return EDITORS.some((editor) => editor === value);\n}\n\nfunction presentValue(value: string \| undefined): string \| undefined {\n const trimmed = value?.trim();\n return trimmed ? trimmed : undefined;\n}\n\nfunction resolveEditor(\n optionEditor: string \| undefined,\n envEditor: string \| undefined\n): EditorId {\n if (isEditorId(optionEditor)) {\n return optionEditor;\n }\n const normalizedEnvEditor = presentValue(envEditor)?.toLowerCase();\n return isEditorId(normalizedEnvEditor) ? normalizedEnvEditor : DEFAULT_EDITOR;\n}\n\nexport function resolveDevtoolsOptions(\n options: DevtoolsServerOptions,\n env: DevtoolsEnv\n): ResolvedDevtoolsOptions {\n const apiUrl =\n presentValue(options.apiUrl) ??\n presentValue(env.REFLET_API_URL) ??\n DEFAULT_API_URL;\n const appUrl =\n presentValue(options.appUrl) ??\n presentValue(env.REFLET_APP_URL) ??\n DEFAULT_APP_URL;\n\n return {\n allowedHosts: (\n options.allowedHosts ??\n presentValue(env.REFLET_DEVTOOLS_HOSTS)?.split(\",\") ??\n []\n )\n .map((host) => host.trim().toLowerCase())\n .filter(Boolean),\n apiUrl: apiUrl.replace(TRAILING_SLASHES, \"\"),\n appUrl: appUrl.replace(TRAILING_SLASHES, \"\"),\n editor: resolveEditor(options.editor, env.REFLET_EDITOR),\n root: resolve(presentValue(options.root) ?? process.cwd()),\n secretKey:\n presentValue(options.secretKey) ??\n presentValue(env.REFLET_SECRET_KEY) ??\n null,\n };\n}\n","import type { BoardAccess } from \"../../protocol\";\nimport type { ResolvedDevtoolsOptions } from \"../options\";\nimport { isConnectableHost } from \"./connectable-host\";\nimport { readConnection } from \"./connection-store\";\n\nexport interface BoardCredential {\n isStored: boolean;\n token: string;\n}\n\nexport async function boardCredential(\n settings: ResolvedDevtoolsOptions\n): Promise<BoardCredential \| null> {\n if (settings.secretKey) {\n return { isStored: false, token: settings.secretKey };\n }\n const connection = await readConnection(settings.root, settings.apiUrl);\n return connection ? { isStored: true, token: connection.token } : null;\n}\n\nexport async function boardAccess(\n request: Request,\n settings: ResolvedDevtoolsOptions\n): Promise<BoardAccess> {\n if (settings.secretKey) {\n return { kind: \"secretKey\" };\n }\n const connection = await readConnection(settings.root, settings.apiUrl);\n if (connection) {\n return { kind: \"connected\", organizationName: connection.organizationName };\n }\n return {\n canConnect: isConnectableHost(new URL(request.url).hostname),\n kind: \"disconnected\",\n };\n}\n","import { PROXIED_API_PATHS } from \"../protocol\";\nimport { boardCredential } from \"./connect/board-credential\";\nimport { removeConnection } from \"./connect/connection-store\";\nimport { errorResponse, JSON_RESPONSE_HEADERS } from \"./json-response\";\nimport type { ResolvedDevtoolsOptions } from \"./options\";\n\ntype ProxiedApiPath = (typeof PROXIED_API_PATHS)[number];\n\nconst CREATE_FEEDBACK_PATH: ProxiedApiPath = \"/api/v1/feedback/create\";\nconst MISSING_BOARD_ACCESS_ERROR =\n \"Connect to Reflet from the devtools panel footer, or set REFLET_SECRET_KEY in the dev server environment.\";\nconst BODYLESS_STATUSES = [204, 205, 304];\n\nexport interface RefletProxyTarget {\n apiUrl: string;\n token: string \| null;\n}\n\ntype ForwardedBody = { body: string \| undefined } \| { error: string };\n\nfunction isProxiedApiPath(path: string): path is ProxiedApiPath {\n return PROXIED_API_PATHS.some((proxiedPath) => proxiedPath === path);\n}\n\nfunction isJsonObject(value: unknown): value is Record<string, unknown> {\n return typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nasync function readForwardedBody(\n request: Request,\n apiPath: ProxiedApiPath\n): Promise<ForwardedBody> {\n if (request.method !== \"POST\") {\n return { body: undefined };\n }\n const text = await request.text();\n if (apiPath !== CREATE_FEEDBACK_PATH) {\n return { body: text \|\| undefined };\n }\n\n let payload: unknown;\n try {\n payload = JSON.parse(text);\n } catch {\n return { error: \"Feedback must be a JSON object.\" };\n }\n if (!isJsonObject(payload)) {\n return { error: \"Feedback must be a JSON object.\" };\n }\n return { body: JSON.stringify({ ...payload, internal: true }) };\n}\n\n/* Forwards an allowlisted Reflet API call with the board token; devtools notes are always internal. /\nexport async function proxyToReflet(\n request: Request,\n apiPath: string,\n target: RefletProxyTarget\n): Promise<Response> {\n if (!isProxiedApiPath(apiPath)) {\n return errorResponse(\n `Reflet devtools does not forward ${apiPath \|\| \"/\"}.`,\n 404\n );\n }\n if (!target.token) {\n return errorResponse(MISSING_BOARD_ACCESS_ERROR, 503);\n }\n if (request.method !== \"GET\" && request.method !== \"POST\") {\n return errorResponse(`${request.method} is not supported here.`, 405);\n }\n\n const forwarded = await readForwardedBody(request, apiPath);\n if (\"error\" in forwarded) {\n return errorResponse(forwarded.error, 400);\n }\n\n const { search } = new URL(request.url);\n let upstream: Response;\n try {\n upstream = await fetch(`${target.apiUrl}${apiPath}${search}`, {\n body: forwarded.body,\n headers: {\n Accept: \"application/json\",\n Authorization: `Bearer ${target.token}`,\n \"Content-Type\": \"application/json\",\n },\n method: request.method,\n signal: AbortSignal.timeout(15_000),\n });\n } catch {\n return errorResponse(`Could not reach Reflet at ${target.apiUrl}.`, 502);\n }\n\n return new Response(\n BODYLESS_STATUSES.includes(upstream.status) ? null : upstream.body,\n { headers: JSON_RESPONSE_HEADERS, status: upstream.status }\n );\n}\n\n/* A stored token Reflet refuses is dropped, so the next status shows Connect again. */\nexport async function proxyWithBoardCredential(\n request: Request,\n apiPath: string,\n settings: ResolvedDevtoolsOptions\n): Promise<Response> {\n const credential = await boardCredential(settings);\n const response = await proxyToReflet(request, apiPath, {\n apiUrl: settings.apiUrl,\n token: credential?.token ?? null,\n });\n if (credential?.isStored && response.status === 401) {\n await removeConnection(settings.root, settings.apiUrl, credential.token);\n }\n return response;\n}\n"],"mappings":";;;;;;;;AAMA,MAAa,wBAAwB;CACnC,iBAAiB;CACjB,gBAAgB;CAChB,0BAA0B;AAC5B;AAEA,SAAgB,iBACd,MACA,QACU;CACV,OAAO,IAAI,SAAS,MAAM;EAAE,SAAS;EAAuB;CAAO,CAAC;AACtE;AAEA,SAAgB,aAAa,MAAe,SAAS,KAAe;CAClE,OAAO,iBAAiB,KAAK,UAAU,IAAI,GAAG,MAAM;AACtD;AAEA,SAAgB,cAAc,OAAe,QAA0B;CAErE,OAAO,aAAa,EADc,MACX,GAAG,MAAM;AAClC;AAEA,SAAgB,QAAW,OAAe,QAAoC;CAC5E,OAAO;EAAE;EAAO,IAAI;EAAO;CAAO;AACpC;;;AC3BA,MAAM,qBAAqB,CAAC,aAAa,OAAO;AAChD,MAAM,gBAAgB;AACtB,MAAM,qBAAqB;AAC3B,MAAM,sBAAsB,CAAC,eAAe,MAAM;AAElD,SAAS,WAAW,SAAiC;CACnD,MAAM,OAAO,QAAQ,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,QAAQ,GAAG,CAAC,CAAC;CACjE,IAAI;EACF,OAAO,IAAI,IAAI,UAAU,MAAM,CAAC,CAAC,SAAS,YAAY;CACxD,QAAQ;EACN,OAAO;CACT;AACF;AAEA,SAAgB,mBAAmB,UAA2B;CAC5D,OACE,mBAAmB,SAAS,QAAQ,KACpC,SAAS,SAAS,YAAY,KAC9B,cAAc,KAAK,QAAQ;AAE/B;AAEA,SAAgB,kBAAkB,SAAsC;CACtE,IAAI,CAAC,SACH,OAAO;CAET,MAAM,OAAO,QAAQ,WAAW,kBAAkB,IAC9C,QAAQ,MAAM,CAAyB,IACvC;CACJ,OAAO,YAAY,SAAS,cAAc,KAAK,IAAI;AACrD;;;;;;;AAQA,SAAgB,oBACd,SACA,cACiB;CACjB,MAAM,WAAW,WAAW,OAAO;CAInC,IAAI,EAFF,aAAa,SACZ,mBAAmB,QAAQ,KAAK,aAAa,SAAS,QAAQ,KAE/D,OAAO,cACL,gHACA,GACF;CAEF,OAAO;AACT;AAEA,SAAgB,sBACd,SACA,cACiB;CACjB,IAAI,QAAQ,QAAQ,IAAA,mBAA2B,MAAM,KACnD,OAAO,cACL,0CAA0C,wBAAwB,WAClE,GACF;CAGF,MAAM,YAAY,QAAQ,QAAQ,IAAI,gBAAgB;CACtD,MAAM,WAAW,WAAW,OAAO;CAEnC,MAAM,mBACJ,aAAa,QACb,aAAa,SAAS,QAAQ,KAC9B,CAAC,mBAAmB,QAAQ;CAK9B,IAAI,EAHF,cAAc,OACV,mBACA,oBAAoB,SAAS,SAAS,IAE1C,OAAO,cACL,oEACA,GACF;CAGF,OAAO;AACT;;;;ACrFA,SAAgB,kBAAkB,UAA2B;CAC3D,OAAO,mBAAmB,QAAQ,KAAK,SAAS,SAAS,OAAO;AAClE;;;ACCA,MAAM,yBAAyB,EAAE,OAAO;CACtC,QAAQ,EAAE,IAAI;CACd,kBAAkB,EAAE,OAAO;CAC3B,OAAO,EAAE,OAAO,CAAC,CAAC,WAAW,SAAS;AACxC,CAAC;AAGD,MAAM,6BAA6B,KAAK,QAAQ,GAAG,WAAW,UAAU;AAExE,SAAS,eAAe,MAAc,QAAgB;CACpD,MAAM,MAAM,WAAW,QAAQ,CAAC,CAC7B,OAAO,KAAK,UAAU,CAAC,MAAM,MAAM,CAAC,CAAC,CAAC,CACtC,OAAO,KAAK;CACf,OAAO,KAAK,qBAAqB,GAAG,GAAG,IAAI,MAAM;AACnD;AAEA,eAAsB,eACpB,MACA,QACkC;CAClC,IAAI;EACF,MAAM,aAAa,uBAAuB,MACxC,KAAK,MAAM,MAAM,SAAS,eAAe,MAAM,MAAM,GAAG,MAAM,CAAC,CACjE;EACA,OAAO,WAAW,WAAW,SAAS,aAAa;CACrD,SAAS,OAAO;EACd,IAAI,iBAAiB,SAAS,UAAU,SAAS,MAAM,SAAS,UAC9D,OAAO;EAET,MAAM;CACR;AACF;AAEA,eAAsB,eACpB,MACA,YACe;CACf,MAAM,MAAM,qBAAqB,GAAG;EAAE,MAAM;EAAO,WAAW;CAAK,CAAC;CACpE,MAAM,OAAO,eAAe,MAAM,WAAW,MAAM;CACnD,MAAM,gBAAgB,GAAG,KAAK,GAAG,WAAW,EAAE;CAC9C,IAAI;EACF,MAAM,UAAU,eAAe,GAAG,KAAK,UAAU,UAAU,EAAE,KAAK;GAChE,MAAM;GACN,MAAM;EACR,CAAC;EACD,MAAM,OAAO,eAAe,IAAI;CAClC,UAAU;EACR,MAAM,GAAG,eAAe,EAAE,OAAO,KAAK,CAAC;CACzC;AACF;AAEA,eAAsB,iBACpB,MACA,QACA,eACkC;CAClC,MAAM,UAAU,MAAM,eAAe,MAAM,MAAM;CACjD,IAAI,CAAC,WAAY,iBAAiB,QAAQ,UAAU,eAClD,OAAO;CAET,MAAM,GAAG,eAAe,MAAM,MAAM,GAAG,EAAE,OAAO,KAAK,CAAC;CACtD,OAAO;AACT;;;ACpEA,MAAM,eAAuC;CAC3C,KAAK;CACL,MAAK;CACL,KAAK;CACL,KAAK;CACL,KAAK;AACP;AACA,MAAM,0BAA0B;AAEhC,MAAM,cAAc,SAClB,KAAK,QACH,0BACC,cAAc,aAAa,cAAc,SAC5C;AAEF,SAAgB,SACd,OACA,SACA,QACU;CACV,MAAM,YAAY,WAAW,KAAK;CAClC,MAAM,OAAO;;yGAE0F,UAAU;;;iDAGlE,UAAU;oDACP,WAAW,OAAO,EAAE;;;;;CAKtE,OAAO,IAAI,SAAS,MAAM;EACxB,SAAS;GACP,iBAAiB;GACjB,2BACE;GACF,gBAAgB;GAChB,mBAAmB;GACnB,0BAA0B;EAC5B;EACA;CACF,CAAC;AACH;;;AC7BA,MAAa,yBAAyB;AACtC,MAAM,uBAAuB;AAM7B,SAAS,kBAA+C;CACtD,WAAW,kDAAkC,IAAI,IAAI;CACrD,OAAO,WAAW;AACpB;AAEA,SAAgB,aAAa,SAI3B;CACA,MAAM,QAAQ,YAAY,EAAE,CAAC,CAAC,SAAS,WAAW;CAClD,MAAM,eAAe,YAAY,EAAE,CAAC,CAAC,SAAS,WAAW;CACzD,MAAM,gBAAgB,WAAW,QAAQ,CAAC,CACvC,OAAO,YAAY,CAAC,CACpB,OAAO,WAAW;CAErB,MAAM,UAAU,gBAAgB;CAChC,OAAO,QAAQ,QAAQ,sBAAsB;EAC3C,MAAM,cAAc,QAAQ,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC;EAC1C,IAAI,gBAAgB,KAAA,GAClB;EAEF,QAAQ,OAAO,WAAW;CAC5B;CACA,QAAQ,IAAI,OAAO;EAAE;EAAS;EAAc,WAAW,KAAK,IAAI;CAAE,CAAC;CAEnE,OAAO;EAAE;EAAe;EAAc;CAAM;AAC9C;AAEA,SAAgB,YACd,OACA,SACiC;CACjC,MAAM,UAAU,gBAAgB;CAChC,MAAM,UAAU,QAAQ,IAAI,KAAK;CACjC,IAAI,CAAC,SACH,OAAO;CAET,IAAI,KAAK,IAAI,IAAI,QAAQ,YAAA,KAAoC;EAC3D,QAAQ,OAAO,KAAK;EACpB,OAAO;CACT;CAKA,IAAI,EAHF,QAAQ,QAAQ,SAAS,QAAQ,QACjC,QAAQ,QAAQ,WAAW,QAAQ,UACnC,QAAQ,QAAQ,gBAAgB,QAAQ,cAExC,OAAO;CAET,QAAQ,OAAO,KAAK;CACpB,OAAO,EAAE,cAAc,QAAQ,aAAa;AAC9C;;;AC1DA,MAAM,kBAAkB,EAAE,OAAO,EAC/B,WAAW,EAAE,OAAO,CAAC,CAAC,WAAW,SAAS,CAAC,CAAC,IAAI,GAAG,EACrD,CAAC;AACD,MAAM,sBAAsB,EAAE,OAAO;CACnC,kBAAkB,EAAE,OAAO;CAC3B,OAAO,EAAE,OAAO,CAAC,CAAC,WAAW,SAAS;AACxC,CAAC;AACD,MAAM,sBAAsB,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAQ1D,MAAM,2BAA2B;AAEjC,MAAa,yBAAyB,WACpC,GAAG,SAAS,sBAAsB,mBAAmB;AAEvD,MAAM,kBAAkB,YACtB,sBAAsB,IAAI,IAAI,QAAQ,GAAG,CAAC,CAAC,MAAM;AAEnD,eAAe,cAAc,SAA0C;CACrE,MAAM,SAAS,gBAAgB,UAC7B,MAAM,QAAQ,KAAK,CAAC,CAAC,YAAY,IAAI,CACvC;CACA,OAAO,OAAO,UAAU,OAAO,KAAK,YAAY;AAClD;AAEA,eAAe,SAAS,UAAsC;CAC5D,IAAI;EACF,OAAO,MAAM,SAAS,KAAK;CAC7B,QAAQ;EACN,OAAO;CACT;AACF;;AAGA,SAAgB,oBACd,UACA,QACyC;CACzC,MAAM,EAAE,eAAe,UAAU,aAAa;EAC5C,QAAQ,SAAS;EACjB,aAAa,OAAO;EACpB,MAAM,SAAS;CACjB,CAAC;CACD,MAAM,eAAe,IAAI,IAAI,kBAAkB,SAAS,MAAM;CAC9D,aAAa,aAAa,IAAI,cAAc,OAAO,SAAS;CAC5D,aAAa,aAAa,IAAI,gBAAgB,OAAO,WAAW;CAChE,aAAa,aAAa,IAAI,SAAS,KAAK;CAC5C,aAAa,aAAa,IAAI,kBAAkB,aAAa;CAC7D,IAAI,OAAO,WAAW,cACpB,aAAa,aAAa,IAAI,UAAU,wBAAwB;CAElE,OAAO;EAAE,cAAc,aAAa,SAAS;EAAG;CAAM;AACxD;AAEA,eAAsB,aACpB,SACA,UACmB;CACnB,MAAM,YAAY,MAAM,cAAc,OAAO;CAC7C,IAAI,CAAC,WACH,OAAO,cACL,oDACA,GACF;CAEF,IAAI,SAAS,WACX,OAAO,cACL,4EACA,GACF;CAEF,IAAI,CAAC,kBAAkB,IAAI,IAAI,QAAQ,GAAG,CAAC,CAAC,QAAQ,GAClD,OAAO,cACL,0GACA,GACF;CAEF,MAAM,EAAE,iBAAiB,oBAAoB,UAAU;EACrD,QAAQ;EACR;EACA,aAAa,eAAe,OAAO;CACrC,CAAC;CACD,OAAO,aAAa,EAAE,aAAa,CAAgC;AACrE;;AAGA,eAAsB,kBACpB,UACA,UACyB;CACzB,MAAM,EAAE,MAAM,aAAa,UAAU;CACrC,MAAM,UACJ,QAAQ,QACJ,YAAY,OAAO;EACjB,QAAQ,SAAS;EACjB;EACA,MAAM,SAAS;CACjB,CAAC,IACD;CACN,IAAI,EAAE,QAAQ,UACZ,OAAO;EACL,SACE;EACF,IAAI;EACJ,QAAQ;EACR,OAAO;CACT;CAEF,IAAI;CACJ,IAAI;EACF,WAAW,MAAM,MAAM,GAAG,SAAS,OAAO,yBAAyB;GACjE,MAAM,KAAK,UAAU;IACnB;IACA,cAAc,QAAQ;IACtB;GACF,CAAC;GACD,SAAS;IACP,QAAQ;IACR,gBAAgB;GAClB;GACA,QAAQ;GACR,QAAQ,YAAY,QAAQ,GAAM;EACpC,CAAC;CACH,QAAQ;EACN,OAAO;GACL,SAAS,6BAA6B,SAAS,OAAO;GACtD,IAAI;GACJ,QAAQ;GACR,OAAO;EACT;CACF;CACA,MAAM,UAAU,MAAM,SAAS,QAAQ;CACvC,IAAI,CAAC,SAAS,IACZ,OAAO;EACL,SACE,oBAAoB,UAAU,OAAO,CAAC,CAAC,MAAM,SAC7C;EACF,IAAI;EACJ,QAAQ;EACR,OAAO;CACT;CAEF,MAAM,WAAW,oBAAoB,UAAU,OAAO;CACtD,IAAI,CAAC,SAAS,SACZ,OAAO;EACL,SAAS;EACT,IAAI;EACJ,QAAQ;EACR,OAAO;CACT;CAEF,MAAM,eAAe,SAAS,MAAM;EAClC,QAAQ,SAAS;EACjB,kBAAkB,SAAS,KAAK;EAChC,OAAO,SAAS,KAAK;CACvB,CAAC;CACD,OAAO;EAAE,IAAI;EAAM,kBAAkB,SAAS,KAAK;CAAiB;AACtE;AAEA,MAAM,iBAAgD;CACpD,YAAY;CACZ,WAAW;AACb;AAEA,SAAgB,mBACd,SACA,QACU;CACV,IAAI,CAAC,QAAQ,IACX,OAAO,SAAS,QAAQ,OAAO,QAAQ,SAAS,QAAQ,MAAM;CAEhE,OAAO,SACL,aACA,gBAAgB,QAAQ,iBAAiB,IAAI,eAAe,WAC5D,GACF;AACF;AAEA,eAAsB,cACpB,SACA,UACmB;CACnB,MAAM,EAAE,iBAAiB,IAAI,IAAI,QAAQ,GAAG;CAM5C,OAAO,mBAAmB,MALJ,kBAAkB,UAAU;EAChD,MAAM,aAAa,IAAI,MAAM;EAC7B,aAAa,eAAe,OAAO;EACnC,OAAO,aAAa,IAAI,OAAO;CACjC,CAAC,GACkC,WAAW;AAChD;AAEA,eAAe,eAAe,QAAgB,OAAiC;CAC7E,IAAI;EAMF,QAAO,MALgB,MAAM,GAAG,OAAO,0BAA0B;GAC/D,SAAS,EAAE,eAAe,UAAU,QAAQ;GAC5C,QAAQ;GACR,QAAQ,YAAY,QAAQ,GAAM;EACpC,CAAC,EAAA,CACe;CAClB,QAAQ;EACN,OAAO;CACT;AACF;;AAGA,eAAsB,iBACpB,UACkB;CAClB,MAAM,UAAU,MAAM,iBAAiB,SAAS,MAAM,SAAS,MAAM;CACrE,OAAO,UAAU,MAAM,eAAe,QAAQ,QAAQ,QAAQ,KAAK,IAAI;AACzE;AAEA,eAAsB,WACpB,UACmB;CAEnB,OAAO,aAAa,EAAE,eADA,iBAAiB,QAAQ,EACjB,CAA8B;AAC9D;;;AC9MA,MAAM,kBAAkB;AACxB,MAAM,iBAA2B;AACjC,MAAM,mBAAmB;AAEzB,SAAS,WAAW,OAA8C;CAChE,OAAO,QAAQ,MAAM,WAAW,WAAW,KAAK;AAClD;AAEA,SAAS,aAAa,OAA+C;CACnE,MAAM,UAAU,OAAO,KAAK;CAC5B,OAAO,UAAU,UAAU,KAAA;AAC7B;AAEA,SAAS,cACP,cACA,WACU;CACV,IAAI,WAAW,YAAY,GACzB,OAAO;CAET,MAAM,sBAAsB,aAAa,SAAS,CAAC,EAAE,YAAY;CACjE,OAAO,WAAW,mBAAmB,IAAI,sBAAsB;AACjE;AAEA,SAAgB,uBACd,SACA,KACyB;CACzB,MAAM,SACJ,aAAa,QAAQ,MAAM,KAC3B,aAAa,IAAI,cAAc,KAAA;CAEjC,MAAM,SACJ,aAAa,QAAQ,MAAM,KAC3B,aAAa,IAAI,cAAc,KAC/B;CAEF,OAAO;EACL,eACE,QAAQ,gBACR,aAAa,IAAI,qBAAqB,CAAC,EAAE,MAAM,GAAG,KAClD,CAAC,EAAA,CAEA,KAAK,SAAS,KAAK,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CACxC,OAAO,OAAO;EACjB,QAAQ,OAAO,QAAQ,kBAAkB,EAAE;EAC3C,QAAQ,OAAO,QAAQ,kBAAkB,EAAE;EAC3C,QAAQ,cAAc,QAAQ,QAAQ,IAAI,aAAa;EACvD,MAAM,QAAQ,aAAa,QAAQ,IAAI,KAAK,QAAQ,IAAI,CAAC;EACzD,WACE,aAAa,QAAQ,SAAS,KAC9B,aAAa,IAAI,iBAAiB,KAClC;CACJ;AACF;;;AC1EA,eAAsB,gBACpB,UACiC;CACjC,IAAI,SAAS,WACX,OAAO;EAAE,UAAU;EAAO,OAAO,SAAS;CAAU;CAEtD,MAAM,aAAa,MAAM,eAAe,SAAS,MAAM,SAAS,MAAM;CACtE,OAAO,aAAa;EAAE,UAAU;EAAM,OAAO,WAAW;CAAM,IAAI;AACpE;AAEA,eAAsB,YACpB,SACA,UACsB;CACtB,IAAI,SAAS,WACX,OAAO,EAAE,MAAM,YAAY;CAE7B,MAAM,aAAa,MAAM,eAAe,SAAS,MAAM,SAAS,MAAM;CACtE,IAAI,YACF,OAAO;EAAE,MAAM;EAAa,kBAAkB,WAAW;CAAiB;CAE5E,OAAO;EACL,YAAY,kBAAkB,IAAI,IAAI,QAAQ,GAAG,CAAC,CAAC,QAAQ;EAC3D,MAAM;CACR;AACF;;;AC3BA,MAAM,uBAAuC;AAC7C,MAAM,6BACJ;AACF,MAAM,oBAAoB;CAAC;CAAK;CAAK;AAAG;AASxC,SAAS,iBAAiB,MAAsC;CAC9D,OAAO,kBAAkB,MAAM,gBAAgB,gBAAgB,IAAI;AACrE;AAEA,SAAS,aAAa,OAAkD;CACtE,OAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAC5E;AAEA,eAAe,kBACb,SACA,SACwB;CACxB,IAAI,QAAQ,WAAW,QACrB,OAAO,EAAE,MAAM,KAAA,EAAU;CAE3B,MAAM,OAAO,MAAM,QAAQ,KAAK;CAChC,IAAI,YAAY,sBACd,OAAO,EAAE,MAAM,QAAQ,KAAA,EAAU;CAGnC,IAAI;CACJ,IAAI;EACF,UAAU,KAAK,MAAM,IAAI;CAC3B,QAAQ;EACN,OAAO,EAAE,OAAO,kCAAkC;CACpD;CACA,IAAI,CAAC,aAAa,OAAO,GACvB,OAAO,EAAE,OAAO,kCAAkC;CAEpD,OAAO,EAAE,MAAM,KAAK,UAAU;EAAE,GAAG;EAAS,UAAU;CAAK,CAAC,EAAE;AAChE;;AAGA,eAAsB,cACpB,SACA,SACA,QACmB;CACnB,IAAI,CAAC,iBAAiB,OAAO,GAC3B,OAAO,cACL,oCAAoC,WAAW,IAAI,IACnD,GACF;CAEF,IAAI,CAAC,OAAO,OACV,OAAO,cAAc,4BAA4B,GAAG;CAEtD,IAAI,QAAQ,WAAW,SAAS,QAAQ,WAAW,QACjD,OAAO,cAAc,GAAG,QAAQ,OAAO,0BAA0B,GAAG;CAGtE,MAAM,YAAY,MAAM,kBAAkB,SAAS,OAAO;CAC1D,IAAI,WAAW,WACb,OAAO,cAAc,UAAU,OAAO,GAAG;CAG3C,MAAM,EAAE,WAAW,IAAI,IAAI,QAAQ,GAAG;CACtC,IAAI;CACJ,IAAI;EACF,WAAW,MAAM,MAAM,GAAG,OAAO,SAAS,UAAU,UAAU;GAC5D,MAAM,UAAU;GAChB,SAAS;IACP,QAAQ;IACR,eAAe,UAAU,OAAO;IAChC,gBAAgB;GAClB;GACA,QAAQ,QAAQ;GAChB,QAAQ,YAAY,QAAQ,IAAM;EACpC,CAAC;CACH,QAAQ;EACN,OAAO,cAAc,6BAA6B,OAAO,OAAO,IAAI,GAAG;CACzE;CAEA,OAAO,IAAI,SACT,kBAAkB,SAAS,SAAS,MAAM,IAAI,OAAO,SAAS,MAC9D;EAAE,SAAS;EAAuB,QAAQ,SAAS;CAAO,CAC5D;AACF;;AAGA,eAAsB,yBACpB,SACA,SACA,UACmB;CACnB,MAAM,aAAa,MAAM,gBAAgB,QAAQ;CACjD,MAAM,WAAW,MAAM,cAAc,SAAS,SAAS;EACrD,QAAQ,SAAS;EACjB,OAAO,YAAY,SAAS;CAC9B,CAAC;CACD,IAAI,YAAY,YAAY,SAAS,WAAW,KAC9C,MAAM,iBAAiB,SAAS,MAAM,SAAS,QAAQ,WAAW,KAAK;CAEzE,OAAO;AACT"}
1	+ {"version":3,"file":"reflet-proxy-CiMPGYzD.js","names":[],"sources":["../src/devtools/server/json-response.ts","../src/devtools/server/request-guard.ts","../src/devtools/server/connect/connectable-host.ts","../src/devtools/server/connect/connection-store.ts","../src/devtools/server/connect/html-page.ts","../src/devtools/server/connect/pending-connects.ts","../src/devtools/server/connect/connect-routes.ts","../src/devtools/server/options.ts","../src/devtools/server/connect/board-credential.ts","../src/devtools/server/reflet-proxy.ts"],"sourcesContent":["import type { DevtoolsErrorBody } from \"../protocol\";\n\nexport type DevtoolsOutcome<T> =\n \| { ok: true; value: T }\n \| { error: string; ok: false; status: number };\n\nexport const JSON_RESPONSE_HEADERS = {\n \"cache-control\": \"no-store\",\n \"content-type\": \"application/json; charset=utf-8\",\n \"x-content-type-options\": \"nosniff\",\n};\n\nexport function jsonTextResponse(\n text: string \| null,\n status: number\n): Response {\n return new Response(text, { headers: JSON_RESPONSE_HEADERS, status });\n}\n\nexport function jsonResponse(body: unknown, status = 200): Response {\n return jsonTextResponse(JSON.stringify(body), status);\n}\n\nexport function errorResponse(error: string, status: number): Response {\n const body: DevtoolsErrorBody = { error };\n return jsonResponse(body, status);\n}\n\nexport function failure<T>(error: string, status: number): DevtoolsOutcome<T> {\n return { error, ok: false, status };\n}\n","import { DEVTOOLS_REQUEST_HEADER } from \"../protocol\";\nimport { errorResponse } from \"./json-response\";\n\nconst LOOPBACK_HOSTNAMES = [\"localhost\", \"[::1]\"];\nconst LOOPBACK_IPV4 = /^127(?:\\.\\d{1,3}){3}$/;\nconst IPV4_MAPPED_PREFIX = \"::ffff:\";\nconst TRUSTED_FETCH_SITES = [\"same-origin\", \"none\"];\n\nfunction hostnameOf(request: Request): string \| null {\n const host = request.headers.get(\"host\") ?? new URL(request.url).host;\n try {\n return new URL(`http://${host}`).hostname.toLowerCase();\n } catch {\n return null;\n }\n}\n\nexport function isLoopbackHostname(hostname: string): boolean {\n return (\n LOOPBACK_HOSTNAMES.includes(hostname) \|\|\n hostname.endsWith(\".localhost\") \|\|\n LOOPBACK_IPV4.test(hostname)\n );\n}\n\nexport function isLoopbackAddress(address: string \| undefined): boolean {\n if (!address) {\n return false;\n }\n const ipv4 = address.startsWith(IPV4_MAPPED_PREFIX)\n ? address.slice(IPV4_MAPPED_PREFIX.length)\n : address;\n return address === \"::1\" \|\| LOOPBACK_IPV4.test(ipv4);\n}\n\n/*\n The Host check stops DNS rebinding: a hostile domain resolved to 127.0.0.1\n * is same-origin with itself, so origin checks alone would let it through.\n * Host and header checks only stop browsers; keeping other machines out is the\n * job of a dev server bound to loopback.\n /\nexport function rejectUntrustedHost(\n request: Request,\n allowedHosts: string[]\n): Response \| null {\n const hostname = hostnameOf(request);\n const isAllowedHost =\n hostname !== null &&\n (isLoopbackHostname(hostname) \|\| allowedHosts.includes(hostname));\n if (!isAllowedHost) {\n return errorResponse(\n \"Reflet devtools only answers on localhost. Add other dev hostnames to allowedHosts or REFLET_DEVTOOLS_HOSTS.\",\n 403\n );\n }\n return null;\n}\n\nexport function rejectUntrustedCaller(\n request: Request,\n allowedHosts: string[]\n): Response \| null {\n if (request.headers.get(DEVTOOLS_REQUEST_HEADER) !== \"1\") {\n return errorResponse(\n `Reflet devtools requests must send the ${DEVTOOLS_REQUEST_HEADER} header.`,\n 403\n );\n }\n\n const fetchSite = request.headers.get(\"sec-fetch-site\");\n const hostname = hostnameOf(request);\n // Browsers omit Sec-Fetch-Site only outside secure contexts: a plain-HTTP allowed host, never loopback.\n const mayOmitFetchSite =\n hostname !== null &&\n allowedHosts.includes(hostname) &&\n !isLoopbackHostname(hostname);\n const isTrustedSite =\n fetchSite === null\n ? mayOmitFetchSite\n : TRUSTED_FETCH_SITES.includes(fetchSite);\n if (!isTrustedSite) {\n return errorResponse(\n \"Reflet devtools only answers requests from the app's own origin.\",\n 403\n );\n }\n\n return null;\n}\n","import { isLoopbackHostname } from \"../request-guard\";\n\n/* Mirrors the backend redirect allowlist, which stays the authority; this only decides whether Connect is offered. /\nexport function isConnectableHost(hostname: string): boolean {\n return isLoopbackHostname(hostname) \|\| hostname.endsWith(\".test\");\n}\n","import { createHash, randomUUID } from \"node:crypto\";\nimport { mkdir, readFile, rename, rm, writeFile } from \"node:fs/promises\";\nimport { homedir } from \"node:os\";\nimport { join } from \"node:path\";\nimport { z } from \"zod\";\n\nconst storedConnectionSchema = z.object({\n apiUrl: z.url(),\n organizationName: z.string(),\n token: z.string().startsWith(\"fb_dev_\"),\n});\nexport type StoredConnection = z.infer<typeof storedConnectionSchema>;\n\nconst connectionsDirectory = () => join(homedir(), \".reflet\", \"devtools\");\n\nfunction connectionFile(root: string, apiUrl: string) {\n const key = createHash(\"sha256\")\n .update(JSON.stringify([root, apiUrl]))\n .digest(\"hex\");\n return join(connectionsDirectory(), `${key}.json`);\n}\n\nexport async function readConnection(\n root: string,\n apiUrl: string\n): Promise<StoredConnection \| null> {\n try {\n const connection = storedConnectionSchema.parse(\n JSON.parse(await readFile(connectionFile(root, apiUrl), \"utf8\"))\n );\n return connection.apiUrl === apiUrl ? connection : null;\n } catch (error) {\n if (error instanceof Error && \"code\" in error && error.code === \"ENOENT\") {\n return null;\n }\n throw error;\n }\n}\n\nexport async function saveConnection(\n root: string,\n connection: StoredConnection\n): Promise<void> {\n await mkdir(connectionsDirectory(), { mode: 0o700, recursive: true });\n const file = connectionFile(root, connection.apiUrl);\n const temporaryFile = `${file}.${randomUUID()}.tmp`;\n try {\n await writeFile(temporaryFile, `${JSON.stringify(connection)}\\n`, {\n flag: \"wx\",\n mode: 0o600,\n });\n await rename(temporaryFile, file);\n } finally {\n await rm(temporaryFile, { force: true });\n }\n}\n\nexport async function removeConnection(\n root: string,\n apiUrl: string,\n rejectedToken?: string\n): Promise<StoredConnection \| null> {\n const removed = await readConnection(root, apiUrl);\n if (!removed \|\| (rejectedToken && removed.token !== rejectedToken)) {\n return null;\n }\n await rm(connectionFile(root, apiUrl), { force: true });\n return removed;\n}\n","const HTML_ESCAPES: Record<string, string> = {\n \"'\": \"'\",\n '\"': \""\",\n \"&\": \"&\",\n \"<\": \"<\",\n \">\": \">\",\n};\nconst HTML_SPECIAL_CHARACTERS = /[&<>\"']/g;\n\nconst escapeHtml = (text: string): string =>\n text.replace(\n HTML_SPECIAL_CHARACTERS,\n (character) => HTML_ESCAPES[character] ?? character\n );\n\nexport function htmlPage(\n title: string,\n message: string,\n status: number\n): Response {\n const safeTitle = escapeHtml(title);\n const body = `<!doctype html>\n<html lang=\"en\">\n<head><meta charset=\"utf-8\"><meta name=\"viewport\" content=\"width=device-width, initial-scale=1\"><title>${safeTitle} · Reflet</title></head>\n<body style=\"margin:0;min-height:100vh;display:flex;align-items:center;justify-content:center;font-family:system-ui,sans-serif;background:#fafafa;color:#18181b\">\n<main style=\"max-width:28rem;padding:1.5rem\">\n<h1 style=\"font-size:1.25rem;margin:0 0 .5rem\">${safeTitle}</h1>\n<p style=\"margin:0;line-height:1.5;color:#52525b\">${escapeHtml(message)}</p>\n</main>\n</body>\n</html>\n`;\n return new Response(body, {\n headers: {\n \"cache-control\": \"no-store\",\n \"content-security-policy\":\n \"default-src 'none'; style-src 'unsafe-inline'\",\n \"content-type\": \"text/html; charset=utf-8\",\n \"referrer-policy\": \"no-referrer\",\n \"x-content-type-options\": \"nosniff\",\n },\n status,\n });\n}\n","import { createHash, randomBytes } from \"node:crypto\";\n\ninterface ConnectBinding {\n apiUrl: string;\n redirectUri: string;\n root: string;\n}\n\ninterface PendingConnect {\n binding: ConnectBinding;\n codeVerifier: string;\n startedAt: number;\n}\n\nexport const PENDING_CONNECT_TTL_MS = 10 60_000;\nconst MAX_PENDING_CONNECTS = 10;\ndeclare global {\n // Preserve pending connects across dev server module reloads.\n var refletDevtoolsPendingConnects: Map<string, PendingConnect> \| undefined;\n}\n\nfunction pendingConnects(): Map<string, PendingConnect> {\n globalThis.refletDevtoolsPendingConnects ??= new Map();\n return globalThis.refletDevtoolsPendingConnects;\n}\n\nexport function beginConnect(binding: ConnectBinding): {\n codeChallenge: string;\n codeVerifier: string;\n state: string;\n} {\n const state = randomBytes(32).toString(\"base64url\");\n const codeVerifier = randomBytes(32).toString(\"base64url\");\n const codeChallenge = createHash(\"sha256\")\n .update(codeVerifier)\n .digest(\"base64url\");\n\n const pending = pendingConnects();\n while (pending.size >= MAX_PENDING_CONNECTS) {\n const oldestState = pending.keys().next().value;\n if (oldestState === undefined) {\n break;\n }\n pending.delete(oldestState);\n }\n pending.set(state, { binding, codeVerifier, startedAt: Date.now() });\n\n return { codeChallenge, codeVerifier, state };\n}\n\nexport function takeConnect(\n state: string,\n binding: ConnectBinding\n): { codeVerifier: string } \| null {\n const pending = pendingConnects();\n const connect = pending.get(state);\n if (!connect) {\n return null;\n }\n if (Date.now() - connect.startedAt > PENDING_CONNECT_TTL_MS) {\n pending.delete(state);\n return null;\n }\n const matchesServer =\n connect.binding.root === binding.root &&\n connect.binding.apiUrl === binding.apiUrl &&\n connect.binding.redirectUri === binding.redirectUri;\n if (!matchesServer) {\n return null;\n }\n pending.delete(state);\n return { codeVerifier: connect.codeVerifier };\n}\n","import { z } from \"zod\";\nimport {\n type ConnectStartResponse,\n DEVTOOLS_ENDPOINTS,\n DEVTOOLS_ROUTE_BASE,\n type DisconnectResponse,\n} from \"../../protocol\";\nimport { errorResponse, jsonResponse } from \"../json-response\";\nimport type { ResolvedDevtoolsOptions } from \"../options\";\nimport { isConnectableHost } from \"./connectable-host\";\nimport { removeConnection, saveConnection } from \"./connection-store\";\nimport { htmlPage } from \"./html-page\";\nimport { beginConnect, takeConnect } from \"./pending-connects\";\n\nconst publicKeySchema = z.object({\n publicKey: z.string().startsWith(\"fb_pub_\").max(200),\n});\nconst tokenExchangeSchema = z.object({\n organizationName: z.string(),\n token: z.string().startsWith(\"fb_dev_\"),\n});\nconst upstreamErrorSchema = z.object({ error: z.string() });\n\nexport type ConnectOutcome =\n \| { ok: true; organizationName: string }\n \| { message: string; ok: false; status: number; title: string };\n\nexport type ConnectClient = \"desktopApp\" \| \"devServer\";\n\nconst DESKTOP_APP_CLIENT_PARAM = \"desktop\";\n\nexport const connectCallbackUriFor = (origin: string): string =>\n `${origin}${DEVTOOLS_ROUTE_BASE}${DEVTOOLS_ENDPOINTS.connectCallback}`;\n\nconst redirectUriFor = (request: Request): string =>\n connectCallbackUriFor(new URL(request.url).origin);\n\nasync function readPublicKey(request: Request): Promise<string \| null> {\n const parsed = publicKeySchema.safeParse(\n await request.json().catch(() => null)\n );\n return parsed.success ? parsed.data.publicKey : null;\n}\n\nasync function readJson(response: Response): Promise<unknown> {\n try {\n return await response.json();\n } catch {\n return null;\n }\n}\n\n/** Starts a pending connect: Reflet sends the member back to `redirectUri` with a code only this process can redeem. /\nexport function connectAuthorizeUrl(\n settings: ResolvedDevtoolsOptions,\n target: { client: ConnectClient; publicKey: string; redirectUri: string }\n): { authorizeUrl: string; state: string } {\n const { codeChallenge, state } = beginConnect({\n apiUrl: settings.apiUrl,\n redirectUri: target.redirectUri,\n root: settings.root,\n });\n const authorizeUrl = new URL(\"/auth/devtools\", settings.appUrl);\n authorizeUrl.searchParams.set(\"public_key\", target.publicKey);\n authorizeUrl.searchParams.set(\"redirect_uri\", target.redirectUri);\n authorizeUrl.searchParams.set(\"state\", state);\n authorizeUrl.searchParams.set(\"code_challenge\", codeChallenge);\n if (target.client === \"desktopApp\") {\n authorizeUrl.searchParams.set(\"client\", DESKTOP_APP_CLIENT_PARAM);\n }\n return { authorizeUrl: authorizeUrl.toString(), state };\n}\n\nexport async function startConnect(\n request: Request,\n settings: ResolvedDevtoolsOptions\n): Promise<Response> {\n const publicKey = await readPublicKey(request);\n if (!publicKey) {\n return errorResponse(\n \"Pass the widget's fb_pub_ public key to connect.\",\n 400\n );\n }\n if (settings.secretKey) {\n return errorResponse(\n \"REFLET_SECRET_KEY is set, so this dev server already reaches your board.\",\n 409\n );\n }\n if (!isConnectableHost(new URL(request.url).hostname)) {\n return errorResponse(\n \"Connecting from the browser works on localhost, .localhost and .test. Set REFLET_SECRET_KEY instead.\",\n 403\n );\n }\n const { authorizeUrl } = connectAuthorizeUrl(settings, {\n client: \"devServer\",\n publicKey,\n redirectUri: redirectUriFor(request),\n });\n return jsonResponse({ authorizeUrl } satisfies ConnectStartResponse);\n}\n\n/* Trades the code Reflet sent back for a token, kept outside the repository. /\nexport async function redeemConnectCode(\n settings: ResolvedDevtoolsOptions,\n callback: { code: string \| null; redirectUri: string; state: string \| null }\n): Promise<ConnectOutcome> {\n const { code, redirectUri, state } = callback;\n const pending =\n code && state\n ? takeConnect(state, {\n apiUrl: settings.apiUrl,\n redirectUri,\n root: settings.root,\n })\n : null;\n if (!(code && pending)) {\n return {\n message:\n \"This sign-in link expired or was already used. Start again from your app.\",\n ok: false,\n status: 400,\n title: \"Link expired\",\n };\n }\n let upstream: Response;\n try {\n upstream = await fetch(`${settings.apiUrl}/api/v1/devtools/token`, {\n body: JSON.stringify({\n code,\n codeVerifier: pending.codeVerifier,\n redirectUri,\n }),\n headers: {\n Accept: \"application/json\",\n \"Content-Type\": \"application/json\",\n },\n method: \"POST\",\n signal: AbortSignal.timeout(10_000),\n });\n } catch {\n return {\n message: `Could not reach Reflet at ${settings.apiUrl}.`,\n ok: false,\n status: 502,\n title: \"Connection failed\",\n };\n }\n const payload = await readJson(upstream);\n if (!upstream.ok) {\n return {\n message:\n upstreamErrorSchema.safeParse(payload).data?.error ??\n \"Reflet refused this connect code.\",\n ok: false,\n status: 400,\n title: \"Connection refused\",\n };\n }\n const exchange = tokenExchangeSchema.safeParse(payload);\n if (!exchange.success) {\n return {\n message: \"Reflet answered with an unexpected response.\",\n ok: false,\n status: 502,\n title: \"Connection failed\",\n };\n }\n await saveConnection(settings.root, {\n apiUrl: settings.apiUrl,\n organizationName: exchange.data.organizationName,\n token: exchange.data.token,\n });\n return { ok: true, organizationName: exchange.data.organizationName };\n}\n\nconst READY_MESSAGES: Record<ConnectClient, string> = {\n desktopApp: \"Go back to the app: you can record sessions now.\",\n devServer: \"Go back to your app: the Reflet devtools are ready.\",\n};\n\nexport function connectOutcomePage(\n outcome: ConnectOutcome,\n client: ConnectClient\n): Response {\n if (!outcome.ok) {\n return htmlPage(outcome.title, outcome.message, outcome.status);\n }\n return htmlPage(\n \"Connected\",\n `Connected to ${outcome.organizationName}. ${READY_MESSAGES[client]}`,\n 200\n );\n}\n\nexport async function finishConnect(\n request: Request,\n settings: ResolvedDevtoolsOptions\n): Promise<Response> {\n const { searchParams } = new URL(request.url);\n const outcome = await redeemConnectCode(settings, {\n code: searchParams.get(\"code\"),\n redirectUri: redirectUriFor(request),\n state: searchParams.get(\"state\"),\n });\n return connectOutcomePage(outcome, \"devServer\");\n}\n\nasync function revokeUpstream(apiUrl: string, token: string): Promise<boolean> {\n try {\n const response = await fetch(`${apiUrl}/api/v1/devtools/revoke`, {\n headers: { Authorization: `Bearer ${token}` },\n method: \"POST\",\n signal: AbortSignal.timeout(10_000),\n });\n return response.ok;\n } catch {\n return false;\n }\n}\n\n/* Removes the stored token and revokes it on Reflet; false when nothing was revoked. /\nexport async function forgetConnection(\n settings: ResolvedDevtoolsOptions\n): Promise<boolean> {\n const removed = await removeConnection(settings.root, settings.apiUrl);\n return removed ? await revokeUpstream(removed.apiUrl, removed.token) : false;\n}\n\nexport async function disconnect(\n settings: ResolvedDevtoolsOptions\n): Promise<Response> {\n const revoked = await forgetConnection(settings);\n return jsonResponse({ revoked } satisfies DisconnectResponse);\n}\n","import { resolve } from \"node:path\";\nimport { DEFAULT_API_URL } from \"../../client\";\nimport { EDITORS, type EditorId } from \"../protocol\";\n\nexport interface DevtoolsServerOptions {\n /* Dev hostnames besides localhost, e.g. `app.test`. Falls back to REFLET_DEVTOOLS_HOSTS, comma-separated. /\n allowedHosts?: string[];\n /* Reflet API origin. Falls back to REFLET_API_URL, then the hosted API. /\n apiUrl?: string;\n /* Reflet web app origin for Connect. Falls back to REFLET_APP_URL, then https://www.reflet.app. /\n appUrl?: string;\n /* Editor that \"open in editor\" links target. Falls back to REFLET_EDITOR. /\n editor?: EditorId;\n /* App directory source paths resolve against. Defaults to the working directory. /\n root?: string;\n /* Falls back to REFLET_SECRET_KEY. Never sent to the browser. /\n secretKey?: string;\n}\n\nexport type DevtoolsEnv = Readonly<Record<string, string \| undefined>>;\n\nexport interface ResolvedDevtoolsOptions {\n allowedHosts: string[];\n apiUrl: string;\n appUrl: string;\n editor: EditorId;\n root: string;\n secretKey: string \| null;\n}\n\nconst DEFAULT_APP_URL = \"https://www.reflet.app\";\nconst DEFAULT_EDITOR: EditorId = \"vscode\";\nconst TRAILING_SLASHES = /\\/+$/;\n\nfunction isEditorId(value: string \| undefined): value is EditorId {\n return EDITORS.some((editor) => editor === value);\n}\n\nfunction presentValue(value: string \| undefined): string \| undefined {\n const trimmed = value?.trim();\n return trimmed ? trimmed : undefined;\n}\n\nfunction resolveEditor(\n optionEditor: string \| undefined,\n envEditor: string \| undefined\n): EditorId {\n if (isEditorId(optionEditor)) {\n return optionEditor;\n }\n const normalizedEnvEditor = presentValue(envEditor)?.toLowerCase();\n return isEditorId(normalizedEnvEditor) ? normalizedEnvEditor : DEFAULT_EDITOR;\n}\n\nexport function resolveDevtoolsOptions(\n options: DevtoolsServerOptions,\n env: DevtoolsEnv\n): ResolvedDevtoolsOptions {\n const apiUrl =\n presentValue(options.apiUrl) ??\n presentValue(env.REFLET_API_URL) ??\n DEFAULT_API_URL;\n const appUrl =\n presentValue(options.appUrl) ??\n presentValue(env.REFLET_APP_URL) ??\n DEFAULT_APP_URL;\n\n return {\n allowedHosts: (\n options.allowedHosts ??\n presentValue(env.REFLET_DEVTOOLS_HOSTS)?.split(\",\") ??\n []\n )\n .map((host) => host.trim().toLowerCase())\n .filter(Boolean),\n apiUrl: apiUrl.replace(TRAILING_SLASHES, \"\"),\n appUrl: appUrl.replace(TRAILING_SLASHES, \"\"),\n editor: resolveEditor(options.editor, env.REFLET_EDITOR),\n root: resolve(presentValue(options.root) ?? process.cwd()),\n secretKey:\n presentValue(options.secretKey) ??\n presentValue(env.REFLET_SECRET_KEY) ??\n null,\n };\n}\n","import type { BoardAccess } from \"../../protocol\";\nimport type { ResolvedDevtoolsOptions } from \"../options\";\nimport { isConnectableHost } from \"./connectable-host\";\nimport { readConnection } from \"./connection-store\";\n\nexport interface BoardCredential {\n isStored: boolean;\n token: string;\n}\n\nexport async function boardCredential(\n settings: ResolvedDevtoolsOptions\n): Promise<BoardCredential \| null> {\n if (settings.secretKey) {\n return { isStored: false, token: settings.secretKey };\n }\n const connection = await readConnection(settings.root, settings.apiUrl);\n return connection ? { isStored: true, token: connection.token } : null;\n}\n\nexport async function boardAccess(\n request: Request,\n settings: ResolvedDevtoolsOptions\n): Promise<BoardAccess> {\n if (settings.secretKey) {\n return { kind: \"secretKey\" };\n }\n const connection = await readConnection(settings.root, settings.apiUrl);\n if (connection) {\n return { kind: \"connected\", organizationName: connection.organizationName };\n }\n return {\n canConnect: isConnectableHost(new URL(request.url).hostname),\n kind: \"disconnected\",\n };\n}\n","import { PROXIED_API_PATHS } from \"../protocol\";\nimport { boardCredential } from \"./connect/board-credential\";\nimport { removeConnection } from \"./connect/connection-store\";\nimport { errorResponse, JSON_RESPONSE_HEADERS } from \"./json-response\";\nimport type { ResolvedDevtoolsOptions } from \"./options\";\n\ntype ProxiedApiPath = (typeof PROXIED_API_PATHS)[number];\n\nconst CREATE_FEEDBACK_PATH: ProxiedApiPath = \"/api/v1/feedback/create\";\nconst MISSING_BOARD_ACCESS_ERROR =\n \"Connect to Reflet from the devtools panel footer, or set REFLET_SECRET_KEY in the dev server environment.\";\nconst BODYLESS_STATUSES = [204, 205, 304];\n\nexport interface RefletProxyTarget {\n apiUrl: string;\n token: string \| null;\n}\n\ntype ForwardedBody = { body: string \| undefined } \| { error: string };\n\nfunction isProxiedApiPath(path: string): path is ProxiedApiPath {\n return PROXIED_API_PATHS.some((proxiedPath) => proxiedPath === path);\n}\n\nfunction isJsonObject(value: unknown): value is Record<string, unknown> {\n return typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nasync function readForwardedBody(\n request: Request,\n apiPath: ProxiedApiPath\n): Promise<ForwardedBody> {\n if (request.method !== \"POST\") {\n return { body: undefined };\n }\n const text = await request.text();\n if (apiPath !== CREATE_FEEDBACK_PATH) {\n return { body: text \|\| undefined };\n }\n\n let payload: unknown;\n try {\n payload = JSON.parse(text);\n } catch {\n return { error: \"Feedback must be a JSON object.\" };\n }\n if (!isJsonObject(payload)) {\n return { error: \"Feedback must be a JSON object.\" };\n }\n return { body: JSON.stringify({ ...payload, internal: true }) };\n}\n\n/* Forwards an allowlisted Reflet API call with the board token; devtools notes are always internal. /\nexport async function proxyToReflet(\n request: Request,\n apiPath: string,\n target: RefletProxyTarget\n): Promise<Response> {\n if (!isProxiedApiPath(apiPath)) {\n return errorResponse(\n `Reflet devtools does not forward ${apiPath \|\| \"/\"}.`,\n 404\n );\n }\n if (!target.token) {\n return errorResponse(MISSING_BOARD_ACCESS_ERROR, 503);\n }\n if (request.method !== \"GET\" && request.method !== \"POST\") {\n return errorResponse(`${request.method} is not supported here.`, 405);\n }\n\n const forwarded = await readForwardedBody(request, apiPath);\n if (\"error\" in forwarded) {\n return errorResponse(forwarded.error, 400);\n }\n\n const { search } = new URL(request.url);\n let upstream: Response;\n try {\n upstream = await fetch(`${target.apiUrl}${apiPath}${search}`, {\n body: forwarded.body,\n headers: {\n Accept: \"application/json\",\n Authorization: `Bearer ${target.token}`,\n \"Content-Type\": \"application/json\",\n },\n method: request.method,\n signal: AbortSignal.timeout(15_000),\n });\n } catch {\n return errorResponse(`Could not reach Reflet at ${target.apiUrl}.`, 502);\n }\n\n return new Response(\n BODYLESS_STATUSES.includes(upstream.status) ? null : upstream.body,\n { headers: JSON_RESPONSE_HEADERS, status: upstream.status }\n );\n}\n\n/* A stored token Reflet refuses is dropped, so the next status shows Connect again. */\nexport async function proxyWithBoardCredential(\n request: Request,\n apiPath: string,\n settings: ResolvedDevtoolsOptions\n): Promise<Response> {\n const credential = await boardCredential(settings);\n const response = await proxyToReflet(request, apiPath, {\n apiUrl: settings.apiUrl,\n token: credential?.token ?? null,\n });\n if (credential?.isStored && response.status === 401) {\n await removeConnection(settings.root, settings.apiUrl, credential.token);\n }\n return response;\n}\n"],"mappings":";;;;;;;;AAMA,MAAa,wBAAwB;CACnC,iBAAiB;CACjB,gBAAgB;CAChB,0BAA0B;AAC5B;AAEA,SAAgB,iBACd,MACA,QACU;CACV,OAAO,IAAI,SAAS,MAAM;EAAE,SAAS;EAAuB;CAAO,CAAC;AACtE;AAEA,SAAgB,aAAa,MAAe,SAAS,KAAe;CAClE,OAAO,iBAAiB,KAAK,UAAU,IAAI,GAAG,MAAM;AACtD;AAEA,SAAgB,cAAc,OAAe,QAA0B;CAErE,OAAO,aAAa,EADc,MACX,GAAG,MAAM;AAClC;AAEA,SAAgB,QAAW,OAAe,QAAoC;CAC5E,OAAO;EAAE;EAAO,IAAI;EAAO;CAAO;AACpC;;;AC3BA,MAAM,qBAAqB,CAAC,aAAa,OAAO;AAChD,MAAM,gBAAgB;AACtB,MAAM,qBAAqB;AAC3B,MAAM,sBAAsB,CAAC,eAAe,MAAM;AAElD,SAAS,WAAW,SAAiC;CACnD,MAAM,OAAO,QAAQ,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,QAAQ,GAAG,CAAC,CAAC;CACjE,IAAI;EACF,OAAO,IAAI,IAAI,UAAU,MAAM,CAAC,CAAC,SAAS,YAAY;CACxD,QAAQ;EACN,OAAO;CACT;AACF;AAEA,SAAgB,mBAAmB,UAA2B;CAC5D,OACE,mBAAmB,SAAS,QAAQ,KACpC,SAAS,SAAS,YAAY,KAC9B,cAAc,KAAK,QAAQ;AAE/B;AAEA,SAAgB,kBAAkB,SAAsC;CACtE,IAAI,CAAC,SACH,OAAO;CAET,MAAM,OAAO,QAAQ,WAAW,kBAAkB,IAC9C,QAAQ,MAAM,CAAyB,IACvC;CACJ,OAAO,YAAY,SAAS,cAAc,KAAK,IAAI;AACrD;;;;;;;AAQA,SAAgB,oBACd,SACA,cACiB;CACjB,MAAM,WAAW,WAAW,OAAO;CAInC,IAAI,EAFF,aAAa,SACZ,mBAAmB,QAAQ,KAAK,aAAa,SAAS,QAAQ,KAE/D,OAAO,cACL,gHACA,GACF;CAEF,OAAO;AACT;AAEA,SAAgB,sBACd,SACA,cACiB;CACjB,IAAI,QAAQ,QAAQ,IAAA,mBAA2B,MAAM,KACnD,OAAO,cACL,0CAA0C,wBAAwB,WAClE,GACF;CAGF,MAAM,YAAY,QAAQ,QAAQ,IAAI,gBAAgB;CACtD,MAAM,WAAW,WAAW,OAAO;CAEnC,MAAM,mBACJ,aAAa,QACb,aAAa,SAAS,QAAQ,KAC9B,CAAC,mBAAmB,QAAQ;CAK9B,IAAI,EAHF,cAAc,OACV,mBACA,oBAAoB,SAAS,SAAS,IAE1C,OAAO,cACL,oEACA,GACF;CAGF,OAAO;AACT;;;;ACrFA,SAAgB,kBAAkB,UAA2B;CAC3D,OAAO,mBAAmB,QAAQ,KAAK,SAAS,SAAS,OAAO;AAClE;;;ACCA,MAAM,yBAAyB,EAAE,OAAO;CACtC,QAAQ,EAAE,IAAI;CACd,kBAAkB,EAAE,OAAO;CAC3B,OAAO,EAAE,OAAO,CAAC,CAAC,WAAW,SAAS;AACxC,CAAC;AAGD,MAAM,6BAA6B,KAAK,QAAQ,GAAG,WAAW,UAAU;AAExE,SAAS,eAAe,MAAc,QAAgB;CACpD,MAAM,MAAM,WAAW,QAAQ,CAAC,CAC7B,OAAO,KAAK,UAAU,CAAC,MAAM,MAAM,CAAC,CAAC,CAAC,CACtC,OAAO,KAAK;CACf,OAAO,KAAK,qBAAqB,GAAG,GAAG,IAAI,MAAM;AACnD;AAEA,eAAsB,eACpB,MACA,QACkC;CAClC,IAAI;EACF,MAAM,aAAa,uBAAuB,MACxC,KAAK,MAAM,MAAM,SAAS,eAAe,MAAM,MAAM,GAAG,MAAM,CAAC,CACjE;EACA,OAAO,WAAW,WAAW,SAAS,aAAa;CACrD,SAAS,OAAO;EACd,IAAI,iBAAiB,SAAS,UAAU,SAAS,MAAM,SAAS,UAC9D,OAAO;EAET,MAAM;CACR;AACF;AAEA,eAAsB,eACpB,MACA,YACe;CACf,MAAM,MAAM,qBAAqB,GAAG;EAAE,MAAM;EAAO,WAAW;CAAK,CAAC;CACpE,MAAM,OAAO,eAAe,MAAM,WAAW,MAAM;CACnD,MAAM,gBAAgB,GAAG,KAAK,GAAG,WAAW,EAAE;CAC9C,IAAI;EACF,MAAM,UAAU,eAAe,GAAG,KAAK,UAAU,UAAU,EAAE,KAAK;GAChE,MAAM;GACN,MAAM;EACR,CAAC;EACD,MAAM,OAAO,eAAe,IAAI;CAClC,UAAU;EACR,MAAM,GAAG,eAAe,EAAE,OAAO,KAAK,CAAC;CACzC;AACF;AAEA,eAAsB,iBACpB,MACA,QACA,eACkC;CAClC,MAAM,UAAU,MAAM,eAAe,MAAM,MAAM;CACjD,IAAI,CAAC,WAAY,iBAAiB,QAAQ,UAAU,eAClD,OAAO;CAET,MAAM,GAAG,eAAe,MAAM,MAAM,GAAG,EAAE,OAAO,KAAK,CAAC;CACtD,OAAO;AACT;;;ACpEA,MAAM,eAAuC;CAC3C,KAAK;CACL,MAAK;CACL,KAAK;CACL,KAAK;CACL,KAAK;AACP;AACA,MAAM,0BAA0B;AAEhC,MAAM,cAAc,SAClB,KAAK,QACH,0BACC,cAAc,aAAa,cAAc,SAC5C;AAEF,SAAgB,SACd,OACA,SACA,QACU;CACV,MAAM,YAAY,WAAW,KAAK;CAClC,MAAM,OAAO;;yGAE0F,UAAU;;;iDAGlE,UAAU;oDACP,WAAW,OAAO,EAAE;;;;;CAKtE,OAAO,IAAI,SAAS,MAAM;EACxB,SAAS;GACP,iBAAiB;GACjB,2BACE;GACF,gBAAgB;GAChB,mBAAmB;GACnB,0BAA0B;EAC5B;EACA;CACF,CAAC;AACH;;;AC7BA,MAAa,yBAAyB;AACtC,MAAM,uBAAuB;AAM7B,SAAS,kBAA+C;CACtD,WAAW,kDAAkC,IAAI,IAAI;CACrD,OAAO,WAAW;AACpB;AAEA,SAAgB,aAAa,SAI3B;CACA,MAAM,QAAQ,YAAY,EAAE,CAAC,CAAC,SAAS,WAAW;CAClD,MAAM,eAAe,YAAY,EAAE,CAAC,CAAC,SAAS,WAAW;CACzD,MAAM,gBAAgB,WAAW,QAAQ,CAAC,CACvC,OAAO,YAAY,CAAC,CACpB,OAAO,WAAW;CAErB,MAAM,UAAU,gBAAgB;CAChC,OAAO,QAAQ,QAAQ,sBAAsB;EAC3C,MAAM,cAAc,QAAQ,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC;EAC1C,IAAI,gBAAgB,KAAA,GAClB;EAEF,QAAQ,OAAO,WAAW;CAC5B;CACA,QAAQ,IAAI,OAAO;EAAE;EAAS;EAAc,WAAW,KAAK,IAAI;CAAE,CAAC;CAEnE,OAAO;EAAE;EAAe;EAAc;CAAM;AAC9C;AAEA,SAAgB,YACd,OACA,SACiC;CACjC,MAAM,UAAU,gBAAgB;CAChC,MAAM,UAAU,QAAQ,IAAI,KAAK;CACjC,IAAI,CAAC,SACH,OAAO;CAET,IAAI,KAAK,IAAI,IAAI,QAAQ,YAAA,KAAoC;EAC3D,QAAQ,OAAO,KAAK;EACpB,OAAO;CACT;CAKA,IAAI,EAHF,QAAQ,QAAQ,SAAS,QAAQ,QACjC,QAAQ,QAAQ,WAAW,QAAQ,UACnC,QAAQ,QAAQ,gBAAgB,QAAQ,cAExC,OAAO;CAET,QAAQ,OAAO,KAAK;CACpB,OAAO,EAAE,cAAc,QAAQ,aAAa;AAC9C;;;AC1DA,MAAM,kBAAkB,EAAE,OAAO,EAC/B,WAAW,EAAE,OAAO,CAAC,CAAC,WAAW,SAAS,CAAC,CAAC,IAAI,GAAG,EACrD,CAAC;AACD,MAAM,sBAAsB,EAAE,OAAO;CACnC,kBAAkB,EAAE,OAAO;CAC3B,OAAO,EAAE,OAAO,CAAC,CAAC,WAAW,SAAS;AACxC,CAAC;AACD,MAAM,sBAAsB,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAQ1D,MAAM,2BAA2B;AAEjC,MAAa,yBAAyB,WACpC,GAAG,SAAS,sBAAsB,mBAAmB;AAEvD,MAAM,kBAAkB,YACtB,sBAAsB,IAAI,IAAI,QAAQ,GAAG,CAAC,CAAC,MAAM;AAEnD,eAAe,cAAc,SAA0C;CACrE,MAAM,SAAS,gBAAgB,UAC7B,MAAM,QAAQ,KAAK,CAAC,CAAC,YAAY,IAAI,CACvC;CACA,OAAO,OAAO,UAAU,OAAO,KAAK,YAAY;AAClD;AAEA,eAAe,SAAS,UAAsC;CAC5D,IAAI;EACF,OAAO,MAAM,SAAS,KAAK;CAC7B,QAAQ;EACN,OAAO;CACT;AACF;;AAGA,SAAgB,oBACd,UACA,QACyC;CACzC,MAAM,EAAE,eAAe,UAAU,aAAa;EAC5C,QAAQ,SAAS;EACjB,aAAa,OAAO;EACpB,MAAM,SAAS;CACjB,CAAC;CACD,MAAM,eAAe,IAAI,IAAI,kBAAkB,SAAS,MAAM;CAC9D,aAAa,aAAa,IAAI,cAAc,OAAO,SAAS;CAC5D,aAAa,aAAa,IAAI,gBAAgB,OAAO,WAAW;CAChE,aAAa,aAAa,IAAI,SAAS,KAAK;CAC5C,aAAa,aAAa,IAAI,kBAAkB,aAAa;CAC7D,IAAI,OAAO,WAAW,cACpB,aAAa,aAAa,IAAI,UAAU,wBAAwB;CAElE,OAAO;EAAE,cAAc,aAAa,SAAS;EAAG;CAAM;AACxD;AAEA,eAAsB,aACpB,SACA,UACmB;CACnB,MAAM,YAAY,MAAM,cAAc,OAAO;CAC7C,IAAI,CAAC,WACH,OAAO,cACL,oDACA,GACF;CAEF,IAAI,SAAS,WACX,OAAO,cACL,4EACA,GACF;CAEF,IAAI,CAAC,kBAAkB,IAAI,IAAI,QAAQ,GAAG,CAAC,CAAC,QAAQ,GAClD,OAAO,cACL,0GACA,GACF;CAEF,MAAM,EAAE,iBAAiB,oBAAoB,UAAU;EACrD,QAAQ;EACR;EACA,aAAa,eAAe,OAAO;CACrC,CAAC;CACD,OAAO,aAAa,EAAE,aAAa,CAAgC;AACrE;;AAGA,eAAsB,kBACpB,UACA,UACyB;CACzB,MAAM,EAAE,MAAM,aAAa,UAAU;CACrC,MAAM,UACJ,QAAQ,QACJ,YAAY,OAAO;EACjB,QAAQ,SAAS;EACjB;EACA,MAAM,SAAS;CACjB,CAAC,IACD;CACN,IAAI,EAAE,QAAQ,UACZ,OAAO;EACL,SACE;EACF,IAAI;EACJ,QAAQ;EACR,OAAO;CACT;CAEF,IAAI;CACJ,IAAI;EACF,WAAW,MAAM,MAAM,GAAG,SAAS,OAAO,yBAAyB;GACjE,MAAM,KAAK,UAAU;IACnB;IACA,cAAc,QAAQ;IACtB;GACF,CAAC;GACD,SAAS;IACP,QAAQ;IACR,gBAAgB;GAClB;GACA,QAAQ;GACR,QAAQ,YAAY,QAAQ,GAAM;EACpC,CAAC;CACH,QAAQ;EACN,OAAO;GACL,SAAS,6BAA6B,SAAS,OAAO;GACtD,IAAI;GACJ,QAAQ;GACR,OAAO;EACT;CACF;CACA,MAAM,UAAU,MAAM,SAAS,QAAQ;CACvC,IAAI,CAAC,SAAS,IACZ,OAAO;EACL,SACE,oBAAoB,UAAU,OAAO,CAAC,CAAC,MAAM,SAC7C;EACF,IAAI;EACJ,QAAQ;EACR,OAAO;CACT;CAEF,MAAM,WAAW,oBAAoB,UAAU,OAAO;CACtD,IAAI,CAAC,SAAS,SACZ,OAAO;EACL,SAAS;EACT,IAAI;EACJ,QAAQ;EACR,OAAO;CACT;CAEF,MAAM,eAAe,SAAS,MAAM;EAClC,QAAQ,SAAS;EACjB,kBAAkB,SAAS,KAAK;EAChC,OAAO,SAAS,KAAK;CACvB,CAAC;CACD,OAAO;EAAE,IAAI;EAAM,kBAAkB,SAAS,KAAK;CAAiB;AACtE;AAEA,MAAM,iBAAgD;CACpD,YAAY;CACZ,WAAW;AACb;AAEA,SAAgB,mBACd,SACA,QACU;CACV,IAAI,CAAC,QAAQ,IACX,OAAO,SAAS,QAAQ,OAAO,QAAQ,SAAS,QAAQ,MAAM;CAEhE,OAAO,SACL,aACA,gBAAgB,QAAQ,iBAAiB,IAAI,eAAe,WAC5D,GACF;AACF;AAEA,eAAsB,cACpB,SACA,UACmB;CACnB,MAAM,EAAE,iBAAiB,IAAI,IAAI,QAAQ,GAAG;CAM5C,OAAO,mBAAmB,MALJ,kBAAkB,UAAU;EAChD,MAAM,aAAa,IAAI,MAAM;EAC7B,aAAa,eAAe,OAAO;EACnC,OAAO,aAAa,IAAI,OAAO;CACjC,CAAC,GACkC,WAAW;AAChD;AAEA,eAAe,eAAe,QAAgB,OAAiC;CAC7E,IAAI;EAMF,QAAO,MALgB,MAAM,GAAG,OAAO,0BAA0B;GAC/D,SAAS,EAAE,eAAe,UAAU,QAAQ;GAC5C,QAAQ;GACR,QAAQ,YAAY,QAAQ,GAAM;EACpC,CAAC,EAAA,CACe;CAClB,QAAQ;EACN,OAAO;CACT;AACF;;AAGA,eAAsB,iBACpB,UACkB;CAClB,MAAM,UAAU,MAAM,iBAAiB,SAAS,MAAM,SAAS,MAAM;CACrE,OAAO,UAAU,MAAM,eAAe,QAAQ,QAAQ,QAAQ,KAAK,IAAI;AACzE;AAEA,eAAsB,WACpB,UACmB;CAEnB,OAAO,aAAa,EAAE,eADA,iBAAiB,QAAQ,EACjB,CAA8B;AAC9D;;;AC9MA,MAAM,kBAAkB;AACxB,MAAM,iBAA2B;AACjC,MAAM,mBAAmB;AAEzB,SAAS,WAAW,OAA8C;CAChE,OAAO,QAAQ,MAAM,WAAW,WAAW,KAAK;AAClD;AAEA,SAAS,aAAa,OAA+C;CACnE,MAAM,UAAU,OAAO,KAAK;CAC5B,OAAO,UAAU,UAAU,KAAA;AAC7B;AAEA,SAAS,cACP,cACA,WACU;CACV,IAAI,WAAW,YAAY,GACzB,OAAO;CAET,MAAM,sBAAsB,aAAa,SAAS,CAAC,EAAE,YAAY;CACjE,OAAO,WAAW,mBAAmB,IAAI,sBAAsB;AACjE;AAEA,SAAgB,uBACd,SACA,KACyB;CACzB,MAAM,SACJ,aAAa,QAAQ,MAAM,KAC3B,aAAa,IAAI,cAAc,KAAA;CAEjC,MAAM,SACJ,aAAa,QAAQ,MAAM,KAC3B,aAAa,IAAI,cAAc,KAC/B;CAEF,OAAO;EACL,eACE,QAAQ,gBACR,aAAa,IAAI,qBAAqB,CAAC,EAAE,MAAM,GAAG,KAClD,CAAC,EAAA,CAEA,KAAK,SAAS,KAAK,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CACxC,OAAO,OAAO;EACjB,QAAQ,OAAO,QAAQ,kBAAkB,EAAE;EAC3C,QAAQ,OAAO,QAAQ,kBAAkB,EAAE;EAC3C,QAAQ,cAAc,QAAQ,QAAQ,IAAI,aAAa;EACvD,MAAM,QAAQ,aAAa,QAAQ,IAAI,KAAK,QAAQ,IAAI,CAAC;EACzD,WACE,aAAa,QAAQ,SAAS,KAC9B,aAAa,IAAI,iBAAiB,KAClC;CACJ;AACF;;;AC1EA,eAAsB,gBACpB,UACiC;CACjC,IAAI,SAAS,WACX,OAAO;EAAE,UAAU;EAAO,OAAO,SAAS;CAAU;CAEtD,MAAM,aAAa,MAAM,eAAe,SAAS,MAAM,SAAS,MAAM;CACtE,OAAO,aAAa;EAAE,UAAU;EAAM,OAAO,WAAW;CAAM,IAAI;AACpE;AAEA,eAAsB,YACpB,SACA,UACsB;CACtB,IAAI,SAAS,WACX,OAAO,EAAE,MAAM,YAAY;CAE7B,MAAM,aAAa,MAAM,eAAe,SAAS,MAAM,SAAS,MAAM;CACtE,IAAI,YACF,OAAO;EAAE,MAAM;EAAa,kBAAkB,WAAW;CAAiB;CAE5E,OAAO;EACL,YAAY,kBAAkB,IAAI,IAAI,QAAQ,GAAG,CAAC,CAAC,QAAQ;EAC3D,MAAM;CACR;AACF;;;AC3BA,MAAM,uBAAuC;AAC7C,MAAM,6BACJ;AACF,MAAM,oBAAoB;CAAC;CAAK;CAAK;AAAG;AASxC,SAAS,iBAAiB,MAAsC;CAC9D,OAAO,kBAAkB,MAAM,gBAAgB,gBAAgB,IAAI;AACrE;AAEA,SAAS,aAAa,OAAkD;CACtE,OAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAC5E;AAEA,eAAe,kBACb,SACA,SACwB;CACxB,IAAI,QAAQ,WAAW,QACrB,OAAO,EAAE,MAAM,KAAA,EAAU;CAE3B,MAAM,OAAO,MAAM,QAAQ,KAAK;CAChC,IAAI,YAAY,sBACd,OAAO,EAAE,MAAM,QAAQ,KAAA,EAAU;CAGnC,IAAI;CACJ,IAAI;EACF,UAAU,KAAK,MAAM,IAAI;CAC3B,QAAQ;EACN,OAAO,EAAE,OAAO,kCAAkC;CACpD;CACA,IAAI,CAAC,aAAa,OAAO,GACvB,OAAO,EAAE,OAAO,kCAAkC;CAEpD,OAAO,EAAE,MAAM,KAAK,UAAU;EAAE,GAAG;EAAS,UAAU;CAAK,CAAC,EAAE;AAChE;;AAGA,eAAsB,cACpB,SACA,SACA,QACmB;CACnB,IAAI,CAAC,iBAAiB,OAAO,GAC3B,OAAO,cACL,oCAAoC,WAAW,IAAI,IACnD,GACF;CAEF,IAAI,CAAC,OAAO,OACV,OAAO,cAAc,4BAA4B,GAAG;CAEtD,IAAI,QAAQ,WAAW,SAAS,QAAQ,WAAW,QACjD,OAAO,cAAc,GAAG,QAAQ,OAAO,0BAA0B,GAAG;CAGtE,MAAM,YAAY,MAAM,kBAAkB,SAAS,OAAO;CAC1D,IAAI,WAAW,WACb,OAAO,cAAc,UAAU,OAAO,GAAG;CAG3C,MAAM,EAAE,WAAW,IAAI,IAAI,QAAQ,GAAG;CACtC,IAAI;CACJ,IAAI;EACF,WAAW,MAAM,MAAM,GAAG,OAAO,SAAS,UAAU,UAAU;GAC5D,MAAM,UAAU;GAChB,SAAS;IACP,QAAQ;IACR,eAAe,UAAU,OAAO;IAChC,gBAAgB;GAClB;GACA,QAAQ,QAAQ;GAChB,QAAQ,YAAY,QAAQ,IAAM;EACpC,CAAC;CACH,QAAQ;EACN,OAAO,cAAc,6BAA6B,OAAO,OAAO,IAAI,GAAG;CACzE;CAEA,OAAO,IAAI,SACT,kBAAkB,SAAS,SAAS,MAAM,IAAI,OAAO,SAAS,MAC9D;EAAE,SAAS;EAAuB,QAAQ,SAAS;CAAO,CAC5D;AACF;;AAGA,eAAsB,yBACpB,SACA,SACA,UACmB;CACnB,MAAM,aAAa,MAAM,gBAAgB,QAAQ;CACjD,MAAM,WAAW,MAAM,cAAc,SAAS,SAAS;EACrD,QAAQ,SAAS;EACjB,OAAO,YAAY,SAAS;CAC9B,CAAC;CACD,IAAI,YAAY,YAAY,SAAS,WAAW,KAC9C,MAAM,iBAAiB,SAAS,MAAM,SAAS,QAAQ,WAAW,KAAK;CAEzE,OAAO;AACT"}

package/dist/{submit-D7XKlgee.js → submit-CqeMuBPt.js} RENAMED Viewed

@@ -823,7 +823,7 @@ function collectPageContext(options) {
 }
 //#endregion
 //#region src/feedback/types.ts
-const SDK_VERSION = "0.7.10";
+const SDK_VERSION = "0.7.12";
 const DEFAULT_WIDGET_LABELS = {
 	annotateHint: "Draw on the screenshot to point at the problem.",
 	attachElement: "Attach this element",
@@ -2061,4 +2061,4 @@ function createFeedbackTransport(client) {
 //#endregion
 export { inspectReactElement as $, PencilIcon as A, DEFAULT_WIDGET_LABELS as B, CheckIcon as C, GripIcon as D, CodeIcon as E, TextIcon as F, buildElementSelection as G, clip as H, TrashIcon as I, getElementRect as J, buildSelector as K, UndoIcon as L, SquareIcon as M, Svg as N, HighlightIcon as O, TargetIcon as P, getFiberFromNode as Q, isDegenerate as R, ChatIcon as S, CloseIcon as T, collectPageContext as U, SDK_VERSION as V, MAX_SELECTION_COMMENT_LENGTH as W, maskSecrets as X, REDACT_ATTRIBUTE as Y, redactUrl as Z, isSubmitEnter as _, uploadBlob as a, capturedViewportSize as at, BlurIcon as b, useFloatingPosition as c, SelectionOutline as d, resolveComponentStack as et, drawAnnotations as f, stopClicksAtHost as g, startsInWidget as h, submitWidgetFeedback as i, capturedFromCanvas as it, SpotlightIcon as j, MoreIcon as k, onViewportChange as l, listenToKeydown as m, createFeedbackTransport as n, WIDGET_MARKER as nt, ElementPicker as o, releaseCapture as ot, listenOnPageAndWidget as p, describeElement as q, deriveTitle as r, captureViewport as rt, isWidgetOwned as s, attachPreparedScreenshots as t, shortenSourcePath as tt, visibleViewport as u, matchesHotkey as v, ChevronDownIcon as w, CameraIcon as x, ArrowIcon as y, normalizeRect as z };
-//# sourceMappingURL=submit-D7XKlgee.js.map
+//# sourceMappingURL=submit-CqeMuBPt.js.map