roughbook 0.0.0-stage → 0.1.0

package/dist/server/app.js

@@ -0,0 +1,321 @@
+// The local server: the built UI, its JSON API, the asset files iterations load through the
+// repo's dev server, and the built-in terminal's socket. 127.0.0.1 only; see security.ts for who
+// may ask what.
+import fs from 'node:fs';
+import http from 'node:http';
+import path from 'node:path';
+import { WebSocketServer } from 'ws';
+import { ApiError, OfflineError, describeError } from '../api/errors.js';
+import { bearerToken, hostAllowed, localOrigins, offeredToken, originAllowed, sameToken } from './security.js';
+import { BadRequest, assetType, parseDecision } from './studio.js';
+const BODY_LIMIT = 256 * 1024;
+const STATIC_TYPES = {
+    '.css': 'text/css; charset=utf-8',
+    '.html': 'text/html; charset=utf-8',
+    '.ico': 'image/x-icon',
+    '.js': 'text/javascript; charset=utf-8',
+    '.json': 'application/json',
+    '.png': 'image/png',
+    '.svg': 'image/svg+xml',
+    '.woff': 'font/woff',
+    '.woff2': 'font/woff2'
+};
+function route(method, template, handler) {
+    const keys = [];
+    const source = template.replace(/:(\w+)/g, (_match, key) => {
+        keys.push(key);
+        return '([^/]+)';
+    });
+    return { method, pattern: new RegExp(`^${source}$`), keys, handler };
+}
+function sendJson(response, status, body) {
+    response.writeHead(status, {
+        'content-type': 'application/json; charset=utf-8',
+        'cache-control': 'no-store',
+        'x-content-type-options': 'nosniff'
+    });
+    response.end(JSON.stringify(body));
+}
+async function readBody(request) {
+    const chunks = [];
+    let size = 0;
+    for await (const chunk of request) {
+        size += chunk.length;
+        if (size > BODY_LIMIT)
+            throw new BadRequest('That request is too large.');
+        chunks.push(chunk);
+    }
+    if (!size)
+        return {};
+    try {
+        const body = JSON.parse(Buffer.concat(chunks).toString('utf8'));
+        if (body && typeof body === 'object' && !Array.isArray(body)) {
+            return body;
+        }
+    }
+    catch {
+        // Answered below.
+    }
+    throw new BadRequest('The request was not a JSON object.');
+}
+function failure(error) {
+    if (error instanceof BadRequest) {
+        return { status: 400, body: { error: 'BAD_REQUEST', message: error.message } };
+    }
+    if (error instanceof OfflineError) {
+        return { status: 503, body: { error: 'OFFLINE', message: describeError(error) } };
+    }
+    if (error instanceof ApiError) {
+        return {
+            status: error.status >= 400 && error.status < 500 ? error.status : 502,
+            body: { error: error.code, message: describeError(error) }
+        };
+    }
+    // The studio's own refusals (an iteration that exists, no agent found) are sentences to show.
+    if (error instanceof Error)
+        return { status: 400, body: { error: 'REFUSED', message: error.message } };
+    return { status: 500, body: { error: 'FAILED', message: String(error) } };
+}
+function target(params) {
+    return { page: params.page, component: params.component, iteration: params.iteration };
+}
+function contentSecurityPolicy(port, devUrl) {
+    const sockets = localOrigins(port).map(origin => origin.replace('http:', 'ws:'));
+    return [
+        "default-src 'self'",
+        "script-src 'self'",
+        "style-src 'self' 'unsafe-inline'",
+        "img-src 'self' blob: data:",
+        "font-src 'self'",
+        `connect-src 'self' ${sockets.join(' ')}`,
+        `frame-src ${new URL(devUrl).origin}`,
+        "frame-ancestors 'none'",
+        "base-uri 'none'",
+        "form-action 'self'",
+        "object-src 'none'"
+    ].join('; ');
+}
+export function createLocalServer(options) {
+    const { studio, port, token } = options;
+    const devOrigin = new URL(options.devUrl).origin;
+    const routes = [
+        route('GET', '/api/state', () => studio.state()),
+        route('POST', '/api/agents/default', async (request) => {
+            await studio.setDefaultAgent((await readBody(request)).agent ?? null);
+            return studio.state();
+        }),
+        route('POST', '/api/agents/refresh', async () => {
+            await studio.agents(true);
+            return studio.state();
+        }),
+        route('GET', '/api/project', () => studio.project()),
+        route('GET', '/api/runs', () => studio.runs()),
+        route('POST', '/api/runs', async (request) => studio.startRuns((await readBody(request)))),
+        route('GET', '/api/runs/:runId/prompt', (_request, params) => studio.prompt(params.runId)),
+        route('POST', '/api/runs/:runId/done', async (request, params) => studio.done(params.runId, (await readBody(request)).outcome)),
+        route('POST', '/api/runs/:runId/stop', async (_request, params) => ({
+            stopped: studio.stopRun(params.runId)
+        })),
+        route('POST', '/api/runs/:runId/revert', async (request, params) => studio.revert(params.runId, (await readBody(request)).file)),
+        route('GET', '/api/iterations/:page/:component/:iteration/reviews', (_request, params) => studio.reviews(target(params))),
+        route('POST', '/api/iterations/:page/:component/:iteration/decisions', async (request, params) => studio.decide(target(params), parseDecision(await readBody(request)))),
+        route('GET', '/api/sketches/:page/:component', (_request, params) => studio.sketches(params.page, params.component)),
+        route('POST', '/api/sketches/:page/:component/:iteration/pull', (_request, params) => studio.pull(target(params))),
+        route('POST', '/api/promote', async (request) => {
+            const body = await readBody(request);
+            return studio.promote({
+                page: String(body.page ?? ''),
+                component: String(body.component ?? ''),
+                iteration: String(body.iteration ?? ''),
+                targetFile: typeof body.targetFile === 'string' ? body.targetFile : undefined,
+                agent: typeof body.agent === 'string' ? body.agent : undefined,
+                terminal: body.terminal === 'external' ? 'external' : 'builtin',
+                cols: Number(body.cols) || undefined,
+                rows: Number(body.rows) || undefined
+            });
+        }),
+        route('GET', '/api/terminals', async () => studio.terminals?.list() ?? []),
+        route('POST', '/api/terminals/:id/stop', async (_request, params) => ({
+            stopped: studio.terminals?.stop(params.id) ?? false
+        })),
+        route('POST', '/api/terminals/:id/remove', async (_request, params) => ({
+            removed: studio.terminals?.remove(params.id) ?? false
+        }))
+    ];
+    async function api(request, response, pathname) {
+        if (!sameToken(bearerToken(request), token)) {
+            return sendJson(response, 401, {
+                error: 'UNAUTHORIZED',
+                message: 'Open the link roughbook start printed.'
+            });
+        }
+        if (!originAllowed(request, port)) {
+            return sendJson(response, 403, { error: 'FORBIDDEN', message: 'Not this page.' });
+        }
+        for (const item of routes) {
+            const match = item.pattern.exec(pathname);
+            if (!match || item.method !== request.method)
+                continue;
+            const params = {};
+            item.keys.forEach((key, index) => (params[key] = decodeURIComponent(match[index + 1])));
+            try {
+                return sendJson(response, 200, { ok: true, data: await item.handler(request, params) });
+            }
+            catch (error) {
+                const { status, body } = failure(error);
+                return sendJson(response, status, { ok: false, ...body });
+            }
+        }
+        return sendJson(response, 404, { ok: false, error: 'NOT_FOUND', message: 'No such route.' });
+    }
+    /** The project's and library's files, for <img> and CSS in iterations served by the dev server. */
+    async function assetFile(request, response, pathname) {
+        const match = /^\/api\/files\/(project)\/([^/]+)\/([^/]+)$/.exec(pathname) ??
+            /^\/api\/files\/(library)\/([^/]+)$/.exec(pathname);
+        const scope = match?.[1];
+        const slug = scope === 'project' ? decodeURIComponent(match[2]) : options.project;
+        const file = decodeURIComponent((scope === 'project' ? match?.[3] : match?.[2]) ?? '');
+        if (!scope || slug !== options.project) {
+            response.writeHead(404).end();
+            return;
+        }
+        try {
+            const bytes = await studio.asset(scope, file);
+            const type = assetType(file);
+            const headers = {
+                'content-type': type,
+                'cache-control': 'private, max-age=300',
+                'x-content-type-options': 'nosniff',
+                'cross-origin-resource-policy': 'cross-origin'
+            };
+            // An SVG opened on its own runs no script.
+            if (type === 'image/svg+xml') {
+                headers['content-security-policy'] =
+                    "default-src 'none'; style-src 'unsafe-inline'; sandbox";
+            }
+            // 3D models are fetched by script, which needs the dev server named.
+            if (request.headers.origin === devOrigin)
+                headers['access-control-allow-origin'] = devOrigin;
+            response.writeHead(200, headers).end(bytes);
+        }
+        catch (error) {
+            const { status } = failure(error);
+            response.writeHead(status === 400 ? 404 : status).end();
+        }
+    }
+    function screenshot(request, response, pathname) {
+        const match = /^\/api\/iterations\/([^/]+)\/([^/]+)\/([^/]+)\/screenshots\/([a-z]+)$/.exec(pathname);
+        if (!match || request.method !== 'GET')
+            return false;
+        if (!sameToken(bearerToken(request), token)) {
+            sendJson(response, 401, { error: 'UNAUTHORIZED' });
+            return true;
+        }
+        let file = null;
+        try {
+            file = studio.screenshotFile({ page: match[1], component: match[2], iteration: match[3] }, match[4]);
+        }
+        catch {
+            file = null;
+        }
+        if (!file) {
+            response.writeHead(404).end();
+            return true;
+        }
+        response.writeHead(200, { 'content-type': 'image/png', 'cache-control': 'no-store' });
+        fs.createReadStream(file).pipe(response);
+        return true;
+    }
+    function page(request, response, pathname) {
+        if (request.method !== 'GET' && request.method !== 'HEAD') {
+            response.writeHead(405).end();
+            return;
+        }
+        const security = {
+            'x-content-type-options': 'nosniff',
+            'referrer-policy': 'no-referrer',
+            'x-frame-options': 'DENY'
+        };
+        if (!options.uiDir) {
+            response.writeHead(503, { 'content-type': 'text/plain; charset=utf-8', ...security });
+            response.end('The local UI is not built. Run npm run build in roughbook-studio.');
+            return;
+        }
+        const root = path.resolve(options.uiDir);
+        const wanted = path.resolve(root, `.${decodeURIComponent(pathname)}`);
+        const inside = wanted.startsWith(root + path.sep);
+        const isFile = inside && fs.existsSync(wanted) && fs.statSync(wanted).isFile();
+        const file = isFile ? wanted : path.join(root, 'index.html');
+        const extension = path.extname(file);
+        const headers = {
+            'content-type': STATIC_TYPES[extension] ?? 'application/octet-stream',
+            ...security
+        };
+        if (extension === '.html') {
+            headers['cache-control'] = 'no-store';
+            headers['content-security-policy'] = contentSecurityPolicy(port, options.devUrl);
+        }
+        else if (pathname.startsWith('/assets/')) {
+            // Vite names these by their content.
+            headers['cache-control'] = 'public, max-age=31536000, immutable';
+        }
+        response.writeHead(200, headers);
+        if (request.method === 'HEAD') {
+            response.end();
+            return;
+        }
+        fs.createReadStream(file).pipe(response);
+    }
+    const server = http.createServer((request, response) => {
+        // A page whose own domain resolves to 127.0.0.1 still names that domain as the Host.
+        if (!hostAllowed(request, port)) {
+            response.writeHead(403, { 'content-type': 'text/plain' }).end('Not this host.');
+            return;
+        }
+        const pathname = new URL(request.url ?? '/', `http://127.0.0.1:${port}`).pathname;
+        if (pathname.startsWith('/api/files/') && request.method === 'GET') {
+            void assetFile(request, response, pathname);
+            return;
+        }
+        if (screenshot(request, response, pathname))
+            return;
+        if (pathname.startsWith('/api/')) {
+            void api(request, response, pathname);
+            return;
+        }
+        page(request, response, pathname);
+    });
+    // The built-in terminal: only this page, only with the token, offered as the subprotocol.
+    const sockets = new WebSocketServer({
+        noServer: true,
+        maxPayload: 1024 * 1024,
+        handleProtocols: protocols => [...protocols][0] ?? false
+    });
+    server.on('upgrade', (request, socket, head) => {
+        const pathname = new URL(request.url ?? '/', `http://127.0.0.1:${port}`).pathname;
+        const id = /^\/api\/terminals\/([0-9a-f-]{36})$/.exec(pathname)?.[1];
+        const allowed = hostAllowed(request, port) &&
+            request.headers.origin !== undefined &&
+            originAllowed(request, port) &&
+            sameToken(offeredToken(request), token) &&
+            id !== undefined &&
+            studio.terminals?.get(id) !== null &&
+            studio.terminals !== null;
+        if (!allowed) {
+            socket.end('HTTP/1.1 403 Forbidden\r\n\r\n');
+            return;
+        }
+        sockets.handleUpgrade(request, socket, head, ws => {
+            const detach = studio.terminals.attach(id, {
+                send: text => {
+                    if (ws.readyState === ws.OPEN)
+                        ws.send(text);
+                }
+            });
+            ws.on('message', raw => studio.terminals.receive(id, String(raw)));
+            ws.on('close', () => detach?.());
+        });
+    });
+    return server;
+}
+//# sourceMappingURL=app.js.map

package/dist/server/app.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app.js","sourceRoot":"","sources":["../../src/server/app.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,iGAAiG;AACjG,gBAAgB;AAChB,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAmD,MAAM,WAAW,CAAC;AAC5E,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,eAAe,EAAE,MAAM,IAAI,CAAC;AACrC,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEzE,OAAO,EACL,WAAW,EACX,WAAW,EACX,YAAY,EACZ,YAAY,EACZ,aAAa,EACb,SAAS,EACV,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,aAAa,EAAkC,MAAM,aAAa,CAAC;AAcnG,MAAM,UAAU,GAAG,GAAG,GAAG,IAAI,CAAC;AAE9B,MAAM,YAAY,GAA2B;IAC3C,MAAM,EAAE,yBAAyB;IACjC,OAAO,EAAE,0BAA0B;IACnC,MAAM,EAAE,cAAc;IACtB,KAAK,EAAE,gCAAgC;IACvC,OAAO,EAAE,kBAAkB;IAC3B,MAAM,EAAE,WAAW;IACnB,MAAM,EAAE,eAAe;IACvB,OAAO,EAAE,WAAW;IACpB,QAAQ,EAAE,YAAY;CACvB,CAAC;AAMF,SAAS,KAAK,CAAC,MAAuB,EAAE,QAAgB,EAAE,OAAgB;IACxE,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,MAAM,EAAE,GAAW,EAAE,EAAE;QACjE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACf,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC,CAAC;IACH,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AACvE,CAAC;AAED,SAAS,QAAQ,CAAC,QAAwB,EAAE,MAAc,EAAE,IAAa;IACvE,QAAQ,CAAC,SAAS,CAAC,MAAM,EAAE;QACzB,cAAc,EAAE,iCAAiC;QACjD,eAAe,EAAE,UAAU;QAC3B,wBAAwB,EAAE,SAAS;KACpC,CAAC,CAAC;IACH,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;AACrC,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,OAAwB;IAC9C,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAClC,IAAI,IAAK,KAAgB,CAAC,MAAM,CAAC;QACjC,IAAI,IAAI,GAAG,UAAU;YAAE,MAAM,IAAI,UAAU,CAAC,4BAA4B,CAAC,CAAC;QAC1E,MAAM,CAAC,IAAI,CAAC,KAAe,CAAC,CAAC;IAC/B,CAAC;IACD,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IACrB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAY,CAAC;QAC3E,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7D,OAAO,IAA+B,CAAC;QACzC,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,kBAAkB;IACpB,CAAC;IACD,MAAM,IAAI,UAAU,CAAC,oCAAoC,CAAC,CAAC;AAC7D,CAAC;AAED,SAAS,OAAO,CAAC,KAAc;IAC7B,IAAI,KAAK,YAAY,UAAU,EAAE,CAAC;QAChC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;IACjF,CAAC;IACD,IAAI,KAAK,YAAY,YAAY,EAAE,CAAC;QAClC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,aAAa,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;IACpF,CAAC;IACD,IAAI,KAAK,YAAY,QAAQ,EAAE,CAAC;QAC9B,OAAO;YACL,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,GAAG,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG;YACtE,IAAI,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,aAAa,CAAC,KAAK,CAAC,EAAE;SAC3D,CAAC;IACJ,CAAC;IACD,8FAA8F;IAC9F,IAAI,KAAK,YAAY,KAAK;QACxB,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;IAC7E,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;AAC5E,CAAC;AAED,SAAS,MAAM,CAAC,MAAc;IAC5B,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAK,EAAE,SAAS,EAAE,MAAM,CAAC,SAAU,EAAE,SAAS,EAAE,MAAM,CAAC,SAAU,EAAE,CAAC;AAC5F,CAAC;AAED,SAAS,qBAAqB,CAAC,IAAY,EAAE,MAAc;IACzD,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;IACjF,OAAO;QACL,oBAAoB;QACpB,mBAAmB;QACnB,kCAAkC;QAClC,4BAA4B;QAC5B,iBAAiB;QACjB,sBAAsB,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;QACzC,aAAa,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE;QACrC,wBAAwB;QACxB,iBAAiB;QACjB,oBAAoB;QACpB,mBAAmB;KACpB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,OAA2B;IAC3D,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;IACxC,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC;IAEjD,MAAM,MAAM,GAAY;QACtB,KAAK,CAAC,KAAK,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QAChD,KAAK,CAAC,MAAM,EAAE,qBAAqB,EAAE,KAAK,EAAC,OAAO,EAAC,EAAE;YACnD,MAAM,MAAM,CAAC,eAAe,CAAC,CAAC,MAAM,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC;YACtE,OAAO,MAAM,CAAC,KAAK,EAAE,CAAC;QACxB,CAAC,CAAC;QACF,KAAK,CAAC,MAAM,EAAE,qBAAqB,EAAE,KAAK,IAAI,EAAE;YAC9C,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC1B,OAAO,MAAM,CAAC,KAAK,EAAE,CAAC;QACxB,CAAC,CAAC;QACF,KAAK,CAAC,KAAK,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpD,KAAK,CAAC,KAAK,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAC9C,KAAK,CAAC,MAAM,EAAE,WAAW,EAAE,KAAK,EAAC,OAAO,EAAC,EAAE,CACzC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,QAAQ,CAAC,OAAO,CAAC,CAAuB,CAAC,CAClE;QACD,KAAK,CAAC,KAAK,EAAE,yBAAyB,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,KAAM,CAAC,CAAC;QAC3F,KAAK,CAAC,MAAM,EAAE,uBAAuB,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,CAC/D,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAM,EAAE,CAAC,MAAM,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAC9D;QACD,KAAK,CAAC,MAAM,EAAE,uBAAuB,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;YAClE,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,KAAM,CAAC;SACvC,CAAC,CAAC;QACH,KAAK,CAAC,MAAM,EAAE,yBAAyB,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,CACjE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,KAAM,EAAE,CAAC,MAAM,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAC7D;QACD,KAAK,CAAC,KAAK,EAAE,qDAAqD,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,CACvF,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAC/B;QACD,KAAK,CACH,MAAM,EACN,uDAAuD,EACvD,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,CACxB,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,aAAa,CAAC,MAAM,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CACxE;QACD,KAAK,CAAC,KAAK,EAAE,gCAAgC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,CAClE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAK,EAAE,MAAM,CAAC,SAAU,CAAC,CACjD;QACD,KAAK,CAAC,MAAM,EAAE,gDAAgD,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,CACnF,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAC5B;QACD,KAAK,CAAC,MAAM,EAAE,cAAc,EAAE,KAAK,EAAC,OAAO,EAAC,EAAE;YAC5C,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,CAAC;YACrC,OAAO,MAAM,CAAC,OAAO,CAAC;gBACpB,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC;gBAC7B,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC;gBACvC,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC;gBACvC,UAAU,EAAE,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;gBAC7E,KAAK,EAAE,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;gBAC9D,QAAQ,EAAE,IAAI,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;gBAC/D,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,SAAS;gBACpC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,SAAS;aACrC,CAAC,CAAC;QACL,CAAC,CAAC;QACF,KAAK,CAAC,KAAK,EAAE,gBAAgB,EAAE,KAAK,IAAI,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QAC1E,KAAK,CAAC,MAAM,EAAE,yBAAyB,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;YACpE,OAAO,EAAE,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,EAAG,CAAC,IAAI,KAAK;SACrD,CAAC,CAAC;QACH,KAAK,CAAC,MAAM,EAAE,2BAA2B,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;YACtE,OAAO,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,EAAG,CAAC,IAAI,KAAK;SACvD,CAAC,CAAC;KACJ,CAAC;IAEF,KAAK,UAAU,GAAG,CAAC,OAAwB,EAAE,QAAwB,EAAE,QAAgB;QACrF,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,EAAE,CAAC;YAC5C,OAAO,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE;gBAC7B,KAAK,EAAE,cAAc;gBACrB,OAAO,EAAE,wCAAwC;aAClD,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC;YAClC,OAAO,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC,CAAC;QACpF,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;YAC1B,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC1C,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM;gBAAE,SAAS;YACvD,MAAM,MAAM,GAAW,EAAE,CAAC;YAC1B,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,kBAAkB,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC;YACzF,IAAI,CAAC;gBACH,OAAO,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;YAC1F,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;gBACxC,OAAO,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC;YAC5D,CAAC;QACH,CAAC;QACD,OAAO,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC,CAAC;IAC/F,CAAC;IAED,mGAAmG;IACnG,KAAK,UAAU,SAAS,CAAC,OAAwB,EAAE,QAAwB,EAAE,QAAgB;QAC3F,MAAM,KAAK,GACT,6CAA6C,CAAC,IAAI,CAAC,QAAQ,CAAC;YAC5D,oCAAoC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACtD,MAAM,KAAK,GAAG,KAAK,EAAE,CAAC,CAAC,CAA2B,CAAC;QACnD,MAAM,IAAI,GAAG,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,kBAAkB,CAAC,KAAM,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;QACpF,MAAM,IAAI,GAAG,kBAAkB,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACvF,IAAI,CAAC,KAAK,IAAI,IAAI,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC;YACvC,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;YAC9B,OAAO;QACT,CAAC;QACD,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YAC9C,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;YAC7B,MAAM,OAAO,GAA2B;gBACtC,cAAc,EAAE,IAAI;gBACpB,eAAe,EAAE,sBAAsB;gBACvC,wBAAwB,EAAE,SAAS;gBACnC,8BAA8B,EAAE,cAAc;aAC/C,CAAC;YACF,2CAA2C;YAC3C,IAAI,IAAI,KAAK,eAAe,EAAE,CAAC;gBAC7B,OAAO,CAAC,yBAAyB,CAAC;oBAChC,wDAAwD,CAAC;YAC7D,CAAC;YACD,qEAAqE;YACrE,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS;gBAAE,OAAO,CAAC,6BAA6B,CAAC,GAAG,SAAS,CAAC;YAC7F,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC9C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;YAClC,QAAQ,CAAC,SAAS,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC;QAC1D,CAAC;IACH,CAAC;IAED,SAAS,UAAU,CACjB,OAAwB,EACxB,QAAwB,EACxB,QAAgB;QAEhB,MAAM,KAAK,GAAG,uEAAuE,CAAC,IAAI,CACxF,QAAQ,CACT,CAAC;QACF,IAAI,CAAC,KAAK,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK;YAAE,OAAO,KAAK,CAAC;QACrD,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,EAAE,CAAC;YAC5C,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;YACnD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,IAAI,GAAkB,IAAI,CAAC;QAC/B,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,CAAC,cAAc,CAC1B,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAE,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC,CAAE,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC,CAAE,EAAE,EAC/D,KAAK,CAAC,CAAC,CAAE,CACV,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,GAAG,IAAI,CAAC;QACd,CAAC;QACD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;YAC9B,OAAO,IAAI,CAAC;QACd,CAAC;QACD,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,eAAe,EAAE,UAAU,EAAE,CAAC,CAAC;QACtF,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACzC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,SAAS,IAAI,CAAC,OAAwB,EAAE,QAAwB,EAAE,QAAgB;QAChF,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC1D,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;YAC9B,OAAO;QACT,CAAC;QACD,MAAM,QAAQ,GAAG;YACf,wBAAwB,EAAE,SAAS;YACnC,iBAAiB,EAAE,aAAa;YAChC,iBAAiB,EAAE,MAAM;SAC1B,CAAC;QACF,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YACnB,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,2BAA2B,EAAE,GAAG,QAAQ,EAAE,CAAC,CAAC;YACtF,QAAQ,CAAC,GAAG,CAAC,mEAAmE,CAAC,CAAC;YAClF,OAAO;QACT,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACzC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACtE,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;QAClD,MAAM,MAAM,GAAG,MAAM,IAAI,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC;QAC/E,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;QAC7D,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACrC,MAAM,OAAO,GAA2B;YACtC,cAAc,EAAE,YAAY,CAAC,SAAS,CAAC,IAAI,0BAA0B;YACrE,GAAG,QAAQ;SACZ,CAAC;QACF,IAAI,SAAS,KAAK,OAAO,EAAE,CAAC;YAC1B,OAAO,CAAC,eAAe,CAAC,GAAG,UAAU,CAAC;YACtC,OAAO,CAAC,yBAAyB,CAAC,GAAG,qBAAqB,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QACnF,CAAC;aAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC3C,qCAAqC;YACrC,OAAO,CAAC,eAAe,CAAC,GAAG,qCAAqC,CAAC;QACnE,CAAC;QACD,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACjC,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC9B,QAAQ,CAAC,GAAG,EAAE,CAAC;YACf,OAAO;QACT,CAAC;QACD,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC3C,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE;QACrD,qFAAqF;QACrF,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC;YAChC,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;YAChF,OAAO;QACT,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,GAAG,EAAE,oBAAoB,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC;QAClF,IAAI,QAAQ,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YACnE,KAAK,SAAS,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;YAC5C,OAAO;QACT,CAAC;QACD,IAAI,UAAU,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC;YAAE,OAAO;QACpD,IAAI,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YACjC,KAAK,GAAG,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;YACtC,OAAO;QACT,CAAC;QACD,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,0FAA0F;IAC1F,MAAM,OAAO,GAAG,IAAI,eAAe,CAAC;QAClC,QAAQ,EAAE,IAAI;QACd,UAAU,EAAE,IAAI,GAAG,IAAI;QACvB,eAAe,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK;KACzD,CAAC,CAAC;IACH,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;QAC7C,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,GAAG,EAAE,oBAAoB,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC;QAClF,MAAM,EAAE,GAAG,qCAAqC,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACrE,MAAM,OAAO,GACX,WAAW,CAAC,OAAO,EAAE,IAAI,CAAC;YAC1B,OAAO,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS;YACpC,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC;YAC5B,SAAS,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC;YACvC,EAAE,KAAK,SAAS;YAChB,MAAM,CAAC,SAAS,EAAE,GAAG,CAAC,EAAE,CAAC,KAAK,IAAI;YAClC,MAAM,CAAC,SAAS,KAAK,IAAI,CAAC;QAC5B,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC;YAC7C,OAAO;QACT,CAAC;QACD,OAAO,CAAC,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,EAAE;YAChD,MAAM,MAAM,GAAG,MAAM,CAAC,SAAU,CAAC,MAAM,CAAC,EAAG,EAAE;gBAC3C,IAAI,EAAE,IAAI,CAAC,EAAE;oBACX,IAAI,EAAE,CAAC,UAAU,KAAK,EAAE,CAAC,IAAI;wBAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC/C,CAAC;aACF,CAAC,CAAC;YACH,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,SAAU,CAAC,OAAO,CAAC,EAAG,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACrE,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACnC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/server/security.js

@@ -0,0 +1,44 @@
+// The local server answers only this machine, and only the page it opened. It listens on
+// 127.0.0.1; a request must name this server as its Host (a web page that points its own domain
+// at 127.0.0.1 cannot reach it), and every API call carries the token made at each start, which
+// reaches the page in the URL's fragment and never leaves the machine.
+import { randomBytes, timingSafeEqual } from 'node:crypto';
+/** The WebSocket subprotocol that carries the token, since a socket cannot send a header. */
+export const SUBPROTOCOL_PREFIX = 'roughbook.';
+export function newToken() {
+    return randomBytes(24).toString('base64url');
+}
+export function sameToken(given, expected) {
+    if (!given)
+        return false;
+    const a = Buffer.from(given);
+    const b = Buffer.from(expected);
+    return a.length === b.length && timingSafeEqual(a, b);
+}
+/** The origins this server is reached at. */
+export function localOrigins(port) {
+    return [`http://127.0.0.1:${port}`, `http://localhost:${port}`];
+}
+export function hostAllowed(request, port) {
+    const host = request.headers.host;
+    return host === `127.0.0.1:${port}` || host === `localhost:${port}`;
+}
+/** An Origin header, when sent, must be this server's own page. */
+export function originAllowed(request, port) {
+    const origin = request.headers.origin;
+    return origin === undefined || localOrigins(port).includes(origin);
+}
+export function bearerToken(request) {
+    const header = request.headers.authorization;
+    return header?.startsWith('Bearer ') ? header.slice(7) : undefined;
+}
+/** The token a WebSocket offered as its first subprotocol. */
+export function offeredToken(request) {
+    const offered = String(request.headers['sec-websocket-protocol'] ?? '')
+        .split(',')[0]
+        ?.trim();
+    return offered?.startsWith(SUBPROTOCOL_PREFIX)
+        ? offered.slice(SUBPROTOCOL_PREFIX.length)
+        : undefined;
+}
+//# sourceMappingURL=security.js.map

package/dist/server/security.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.js","sourceRoot":"","sources":["../../src/server/security.ts"],"names":[],"mappings":"AAAA,yFAAyF;AACzF,gGAAgG;AAChG,gGAAgG;AAChG,uEAAuE;AACvE,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAG3D,6FAA6F;AAC7F,MAAM,CAAC,MAAM,kBAAkB,GAAG,YAAY,CAAC;AAE/C,MAAM,UAAU,QAAQ;IACtB,OAAO,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,KAAyB,EAAE,QAAgB;IACnE,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC7B,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAChC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,IAAI,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACxD,CAAC;AAED,6CAA6C;AAC7C,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,OAAO,CAAC,oBAAoB,IAAI,EAAE,EAAE,oBAAoB,IAAI,EAAE,CAAC,CAAC;AAClE,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,OAAwB,EAAE,IAAY;IAChE,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;IAClC,OAAO,IAAI,KAAK,aAAa,IAAI,EAAE,IAAI,IAAI,KAAK,aAAa,IAAI,EAAE,CAAC;AACtE,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,aAAa,CAAC,OAAwB,EAAE,IAAY;IAClE,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC;IACtC,OAAO,MAAM,KAAK,SAAS,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AACrE,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,OAAwB;IAClD,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC;IAC7C,OAAO,MAAM,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACrE,CAAC;AAED,8DAA8D;AAC9D,MAAM,UAAU,YAAY,CAAC,OAAwB;IACnD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,wBAAwB,CAAC,IAAI,EAAE,CAAC;SACpE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACd,EAAE,IAAI,EAAE,CAAC;IACX,OAAO,OAAO,EAAE,UAAU,CAAC,kBAAkB,CAAC;QAC5C,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC,MAAM,CAAC;QAC1C,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC"}