visus-mcp 0.6.2 → 0.9.0

package/STATUS.md

@@ -1,9 +1,312 @@
 # Visus MCP - Project Status
 
-**Generated:** 2026-03-24
-**Version:** 0.7.0
+**Generated:** 2026-03-26
+**Version:** 0.9.0
 **Phase:** 3 (Anthropic Directory Prep)
-**Status:** ✅ **v0.7.0 COMPLETE** - Human-in-the-Loop Elicitation Bridge
+**Status:** ✅ **v0.9.0 COMPLETE** - NIST AI RMF & CSF 2.0 Framework Mappings
+
+---
+
+## v0.9.0 Release - NIST AI RMF & CSF 2.0 Framework Mappings
+
+**Status:** ✅ COMPLETE (Ready for release)
+**Type:** Feature enhancement - Expanded compliance framework support
+**Implemented:** 2026-03-26
+**Tests:** 294/294 passing (100%)
+
+### Features Added
+
+**NIST AI Risk Management Framework (AI RMF / AI 100-1) Mappings**
+- Added comprehensive mappings for all 43 injection patterns to NIST AI RMF controls
+- Maps threats to four core functions: GOVERN, MAP, MEASURE, and MANAGE
+- Examples:
+  - GOVERN-1.1: Legal and Regulatory Requirements
+  - MAP-4.1: Risk Mapping for AI Components
+  - MEASURE-2.7: AI System Security and Resilience
+  - MANAGE-2.3: Respond to Unknown Risks
+- Provides federal/government compliance alignment for procurement
+
+**NIST Cybersecurity Framework 2.0 (CSF 2.0) Mappings**
+- Added comprehensive mappings for all 43 injection patterns to CSF 2.0 controls
+- Maps threats to six core functions: IDENTIFY, PROTECT, DETECT, RESPOND, RECOVER, and GOVERN
+- Examples:
+  - DE.CM-01: Network Monitoring
+  - PR.DS-01: Data at Rest Protection
+  - PR.AC-04: Access Control Enforcement
+  - DE.AE-02: Anomaly Detection
+- Widely adopted enterprise cybersecurity framework for audit requirements
+
+**Enhanced Threat Reporting**
+- Expanded framework coverage from 4 to 6 compliance frameworks
+- Updated TOON format from 10 fields to 12 fields (added nist_ai_rmf, nist_csf_2_0)
+- Enhanced Markdown threat report table with new AI-RMF and CSF 2.0 columns
+- All threat reports now include comprehensive 6-framework alignment
+
+### Documentation Updates
+- Updated security badge to highlight NIST AI RMF and CSF 2.0
+- Updated all 4 MCP tool descriptions to reference 6 frameworks
+- Expanded "Framework Alignments" section with NIST AI RMF and CSF 2.0 descriptions
+- Updated example threat reports to show 9-column table format
+
+### Files Modified
+- `src/sanitizer/framework-mapper.ts` - Added nist_ai_rmf and nist_csf_2_0 fields, mappings for all 43 patterns
+- `src/sanitizer/threat-reporter.ts` - Updated ThreatFinding interface, TOON format, Markdown report
+- `README.md` - Updated badges, tool descriptions, framework alignments section, examples
+- `tests/threat-reporter.test.ts` - Updated to verify 6 frameworks and 12 TOON fields
+- `CHANGELOG.md` - Added v0.9.0 release notes
+
+### Why This Matters
+- **Federal/Government Procurement**: NIST AI RMF is widely adopted by U.S. federal agencies
+- **Enterprise Compliance**: CSF 2.0 is the de facto standard for cybersecurity audit requirements
+- **Natural Extension**: Builds on existing NIST AI 600-1 mapping infrastructure
+- **High Value, Easy Implementation**: Leveraged existing framework mapping system
+
+---
+
+## v0.8.1 Release - PDF Extraction Bug Fix
+
+**Status:** ✅ COMPLETE (Ready for release)
+**Type:** Critical bug fix
+**Implemented:** 2026-03-25
+**Tests:** 294/294 passing (100%)
+
+### Bug Fixed
+
+**PDF Text Extraction Returning Binary Data Instead of Text**
+
+**Root Cause:** `response.text()` in `src/browser/playwright-renderer.ts` was converting ALL response bodies to UTF-8 strings, including binary PDFs. This corrupted the binary data before it reached the pdf-parse library, causing the PDF handler to receive mangled strings instead of proper binary content.
+
+**Impact:** All PDF extractions failed, returning raw binary garbage like "%PDF-1.7..." instead of extracted text.
+
+**Fix:** Implemented content-type detection in the renderer to use `response.arrayBuffer()` for binary types and `response.text()` for text types.
+
+### Technical Details
+
+**Files Modified:**
+1. **src/types.ts** - Updated `BrowserRenderResult.html` from `string` to `string | Buffer`
+   - Added JSDoc explaining when Buffer is used (PDFs, images, binary content)
+
+2. **src/browser/playwright-renderer.ts** - Added binary content detection
+   - Checks Content-Type: `application/pdf`, `image/*`, `application/octet-stream`
+   - Binary types: `response.arrayBuffer()` → `Buffer.from(arrayBuffer)`
+   - Text types: `response.text()` → string (existing behavior)
+
+3. **src/tools/fetch.ts** - Added Buffer type guard
+   - Ensures Buffer content doesn't reach HTML/XML/RSS path (would cause errors)
+
+4. **src/tools/fetch-structured.ts** - Added Buffer rejection
+   - Structured extraction doesn't support binary types - returns clear error message
+
+5. **src/tools/read.ts** - Added Buffer rejection
+   - Reader mode (Readability) doesn't support binary types - returns clear error message
+
+**Verification:**
+- ✅ All 294 tests passing - zero regressions
+- ✅ Manual test with WAI dummy PDF: Text extraction working correctly
+- ✅ Metadata extraction working (Author, Creator, Producer fields)
+- ✅ Content is readable English, not binary garbage
+
+**Known Limitations:**
+- Some complex PDFs may fail with "Invalid Root reference" error
+- This is a limitation of the pdf-parse library (v2.4.5), not Visus
+- Simple to moderately complex PDFs work correctly
+
+**Documentation:**
+- Updated CHANGELOG.md with bug fix entry
+- Created TROUBLESHOOT-PDF-EXTRACTION-20260325-2040.md with full investigation log
+- Added inline comments explaining Buffer handling in all modified files
+
+---
+
+## v0.8.0 Release - PDF, JSON, and SVG Content Handlers
+
+**Status:** ✅ COMPLETE (Ready for release)
+**Type:** Feature enhancement + Security expansion
+**Implemented:** 2026-03-25
+
+### New Features
+
+**🎯 Specialized Content Type Handlers with Full Sanitization**
+
+Adds content-type routing for three specialized formats (PDF, JSON, SVG), applying the full 43-pattern injection sanitization pipeline to each format before returning content to the LLM.
+
+**Key Features:**
+- ✅ PDF text extraction with metadata (Title, Author, Subject, Keywords, Creator, Producer)
+- ✅ Recursive JSON sanitization preserving structure while neutralizing injections
+- ✅ SVG element stripping (script, foreignObject, event handlers, external use)
+- ✅ Content-type routing dispatcher with MIME type normalization
+- ✅ Full sanitization metadata flow (patterns_detected, pii_types_redacted, pii_allowlisted)
+- ✅ 48 new tests (294 total, all passing)
+- ✅ Zero regressions - all existing tests continue to pass
+
+**Supported Content Types:**
+1. **PDF** (`application/pdf`)
+   - Extracts text content from all pages using pdf-parse v2 API
+   - Extracts metadata fields (Title, Author, Subject, Keywords, Creator, Producer)
+   - Combines text + metadata into single string for sanitization
+   - Returns structured error for corrupt PDFs (PDF_PARSE_FAILED)
+   - Processing time tracked for performance monitoring
+
+2. **JSON** (`application/json`, `text/json`)
+   - Recursive sanitization preserving JSON structure
+   - Field-by-field injection detection with metadata aggregation
+   - Uses Sets to deduplicate patterns/PII types across nested objects
+   - Falls back to plain text sanitization if JSON.parse fails
+   - Returns pure sanitized JSON (no "JSON Response:" prefix)
+
+3. **SVG** (`image/svg+xml`)
+   - Strips dangerous elements: `<script>`, `<foreignObject>`
+   - Removes event handlers: `onload`, `onclick`, etc.
+   - Blocks external `<use>` references (e.g., `href="http://evil.com/icon.svg"`)
+   - Removes `data:` URIs to prevent base64-encoded payloads
+   - Extracts and sanitizes text content from title/desc elements
+   - Returns cleaned SVG with text injection detection
+
+**Handler Interface Design:**
+
+All handlers return `HandlerResult` with full sanitization metadata:
+```typescript
+interface HandlerSuccessResult {
+  status: 'sanitized';
+  content_type: string;
+  sanitized_content: string;
+  sanitization: {
+    patterns_detected: string[];
+    pii_types_redacted: string[];
+    pii_allowlisted: Array<{ type: string; value: string; reason: string }>;
+    sanitized_fields: number;
+  };
+  processing_time_ms: number;
+}
+```
+
+**Processing Pipeline:**
+```
+URL Fetch → Content-Type Detection → Handler Routing →
+  PDF: Extract text + metadata → Sanitize → Return
+  JSON: Recursive sanitize → Deduplicate metadata → Return
+  SVG: Strip dangerous elements → Extract text → Sanitize → Return
+→ Token Ceiling → Output
+```
+
+**Security Guarantees:**
+- ✅ All 43 injection patterns applied to PDF text
+- ✅ All 43 patterns applied recursively to every JSON string field
+- ✅ SVG text content scanned with all 43 patterns
+- ✅ PII redaction works on all three formats
+- ✅ No content bypasses sanitization (fail-safe design)
+- ✅ Corrupt/malformed input returns structured error (never throws)
+
+**Technical Implementation:**
+
+**New Components:**
+1. **src/content-handlers/types.ts** (60 lines)
+   - Shared interfaces for all content handlers
+   - `HandlerResult` union type: `HandlerSuccessResult | HandlerErrorResult | HandlerRejectedResult`
+   - Full sanitization metadata preservation
+
+2. **src/content-handlers/pdf-handler.ts** (95 lines)
+   - Uses pdf-parse v2 API (`new PDFParse({ data: buffer })`)
+   - Calls `parser.getText()` and `parser.getInfo()` separately
+   - Combines text + metadata for comprehensive sanitization
+   - Returns error with reason code on PDF parse failure
+
+3. **src/content-handlers/json-handler.ts** (140 lines)
+   - Recursive sanitization with `recursiveSanitize()` helper
+   - Aggregates metadata using Sets for deduplication
+   - Preserves JSON structure (objects, arrays, primitives)
+   - Graceful fallback to plain text on parse error
+
+4. **src/content-handlers/svg-handler.ts** (185 lines)
+   - XML parsing with fast-xml-parser
+   - `stripDangerousContent()` removes unsafe elements/attributes
+   - `extractTextContent()` pulls title/desc text for injection scanning
+   - Returns cleaned SVG + sanitization metadata
+
+5. **src/content-handlers/index.ts** (55 lines)
+   - Central routing dispatcher based on normalized MIME type
+   - `normalizeMimeType()` handles charset and case normalization
+   - `routeContentHandler()` maps MIME to appropriate handler
+   - Returns rejection for unsupported content types
+
+**Modified Files:**
+- `src/tools/fetch.ts` - Integrated content handler routing before HTML pipeline
+  - Added MIME type detection (lines 46-53)
+  - Early routing for PDF/JSON/SVG (lines 50-108)
+  - Uses handler-provided sanitization metadata (lines 88-90)
+  - Removed placeholder pattern array
+- `package.json` - Added pdf-parse@2.4.5 dependency
+
+**Test Coverage:**
+
+New test file:
+- `tests/content-handlers.test.ts` - 20 tests covering:
+  - PDF: corrupt file error handling
+  - JSON: clean flat/nested pass-through, injection sanitization, invalid fallback
+  - SVG: clean pass-through, script stripping, event handler removal, foreignObject removal, external use blocking, title injection detection
+  - Routing: MIME normalization, unsupported type rejection
+
+Updated test files:
+- `tests/fetch-tool.test.ts` - Updated JSON test expectations (2 tests modified):
+  - Removed "JSON Response:" prefix expectation
+  - Changed to expect pure JSON content with specific fields
+
+**Test Results:** ✅ 294/294 tests passing (48 new content handler tests added)
+
+**Dependencies Added:**
+- `pdf-parse@2.4.5` - PDF text extraction library
+
+**Troubleshooting:**
+- Documented handler interface metadata loss issue in `TROUBLESHOOT-CONTENT-HANDLERS-20260325-1047.md`
+- Root cause: Initial interface only had `sanitized_fields: number`, lost pattern names and PII types
+- Resolution: Expanded interface to include full `sanitization` object
+- Time to resolution: ~10 minutes
+
+**Example Usage:**
+
+PDF document:
+```json
+{
+  "url": "https://example.com/whitepaper.pdf"
+}
+```
+
+Returns extracted text + metadata with `format_detected: "html"` and sanitization metadata.
+
+JSON API:
+```json
+{
+  "url": "https://api.github.com/repos/anthropics/anthropic-sdk-typescript"
+}
+```
+
+Returns pure sanitized JSON with `format_detected: "json"` and injection detection metadata.
+
+SVG image:
+```json
+{
+  "url": "https://example.com/diagram.svg"
+}
+```
+
+Returns cleaned SVG with dangerous elements removed and `format_detected: "xml"`.
+
+**README Documentation:**
+- Updated test count badge from 246 to 294 passing tests
+- Updated "How Visus Works" pipeline diagram to show Content-Type Detection
+- Added detailed content-type routing section explaining PDF, JSON, SVG handling
+- Documented fail-safe error handling and structured response design
+
+**Changelog:**
+- Created `CHANGELOG.md` with v0.8.0 (Unreleased) section
+- Detailed entries for PDF, JSON, SVG handlers with specifications
+- Notes on content-type routing and test coverage
+
+**Lessons Learned:**
+1. **Interface Design**: Preserve all metadata when wrapping existing functionality
+2. **Type Safety**: TypeScript strict mode caught interface mismatches early
+3. **Test Coverage**: Existing tests immediately caught metadata loss
+4. **Aggregation Pattern**: Use Sets to deduplicate findings in recursive sanitization
 
 ---
 
@@ -266,7 +569,7 @@ When prompt injection or PII is detected, Visus now automatically generates stru
 **Key Features:**
 - ✅ TOON-formatted findings array (token-efficient, machine-readable)
 - ✅ Markdown compliance report (human-readable, renders in Claude Desktop)
-- ✅ Four framework alignments: OWASP LLM Top 10, NIST AI 600-1, MITRE ATLAS, ISO/IEC 42001
+- ✅ Six framework alignments: OWASP LLM Top 10, NIST AI 600-1, NIST AI RMF, NIST CSF 2.0, MITRE ATLAS, ISO/IEC 42001
 - ✅ Severity classification (CRITICAL, HIGH, MEDIUM, LOW, CLEAN)
 - ✅ Zero overhead for clean pages (report omitted when no findings)
 - ✅ Aggregated reporting across multiple results (search, structured extraction)
@@ -292,6 +595,8 @@ When prompt injection or PII is detected, Visus now automatically generates stru
 **Framework Alignments:**
 - **OWASP LLM Top 10 (2025)**: Industry-standard LLM security risks
 - **NIST AI 600-1**: Generative AI Profile for risk management
+- **NIST AI RMF**: AI Risk Management Framework (AI 100-1) with GOVERN, MAP, MEASURE, MANAGE functions
+- **NIST CSF 2.0**: Cybersecurity Framework 2.0 with IDENTIFY, PROTECT, DETECT, RESPOND, RECOVER, GOVERN functions
 - **MITRE ATLAS**: Adversarial Threat Landscape for AI Systems
 - **ISO/IEC 42001:2023**: International AI Management System standard (Annex A controls)
 
@@ -746,9 +1051,9 @@ Visus is a security-first MCP tool that provides Claude with sanitized web page
 
 ### ✅ Test Execution
 - **Status:** SUCCESS - All tests passing
-- **Test Results:** 246/246 tests passing (100%)
-- **Test Suites:** 7/7 passing
-- **Execution Time:** ~7.2 seconds
+- **Test Results:** 294/294 tests passing (100%)
+- **Test Suites:** 8/8 passing
+- **Execution Time:** ~7.5 seconds
 - **Test Files:**
   - `tests/sanitizer.test.ts` - PASS (43 pattern categories + 5 threat report integration tests)
   - `tests/fetch-tool.test.ts` - PASS (all MCP tool functions + annotations + 2 threat report tests + 14 format detection tests) - **v0.6.0**
@@ -757,8 +1062,9 @@ Visus is a security-first MCP tool that provides Claude with sanitized web page
   - `tests/auth-smoke.test.ts` - PASS (24 auth enforcement tests) - **v0.3.1**
   - `tests/reader.test.ts` - PASS (14 reader mode tests) - **v0.3.2**
   - `tests/search.test.ts` - PASS (18 search tests) - **v0.4.0**
+  - `tests/content-handlers.test.ts` - PASS (20 content handler tests) - **v0.8.0**
   - `tests/injection-corpus.ts` - Test data library
-- **Coverage:** All 43 injection pattern categories + PII allowlist + authentication enforcement + reader mode + safe web search + security fixes + threat reporting with framework mappings + Content-Type format detection (JSON, XML, RSS/Atom) validated
+- **Coverage:** All 43 injection pattern categories + PII allowlist + authentication enforcement + reader mode + safe web search + security fixes + threat reporting with framework mappings + Content-Type format detection (JSON, XML, RSS/Atom) + Content handlers (PDF, JSON, SVG) validated
 
 ---
 
@@ -1580,13 +1886,13 @@ npm URL:        https://www.npmjs.com/package/visus-mcp
 **Contact:** security@lateos.ai
 **Repository:** https://github.com/visus-mcp/visus-mcp
 **npm Package:** https://www.npmjs.com/package/visus-mcp
-**Installation:** `npm install -g visus-mcp@0.6.0` or `npx visus-mcp@0.6.0`
+**Installation:** `npm install -g visus-mcp@0.8.1` or `npx visus-mcp@0.8.1`
 
 ---
 
-**Last Updated:** 2026-03-24
+**Last Updated:** 2026-03-25
 **Build:** SUCCESS ✅
-**Tests:** 276/276 PASSING ✅
+**Tests:** 294/294 PASSING ✅
 **CDK Deploy:** SUCCESS ✅
 **Phase 1:** ✅ PUBLISHED TO NPM (v0.1.0)
 **Phase 2:** ✅ DEPLOYED TO AWS LAMBDA (us-east-1)
@@ -1597,6 +1903,8 @@ npm URL:        https://www.npmjs.com/package/visus-mcp
 **v0.5.0:** ✅ PUBLISHED TO NPM (Threat Reporting + ISO/IEC 42001 - 31 tests added)
 **v0.6.0:** ✅ PUBLISHED TO NPM (Content-Type Format Detection - 14 tests added)
 **v0.7.0:** ✅ COMPLETE (HITL Elicitation Bridge for CRITICAL threats - 30 tests added)
+**v0.8.0:** ✅ PUBLISHED TO NPM (PDF/JSON/SVG Content Handlers - 48 tests added)
+**v0.8.1:** ✅ COMPLETE (PDF Extraction Bug Fix - binary content handling)
 **Security Audit:** ✅ COMPLETE + REMEDIATED (24 auth tests, 100% compliance)
 **Lambda Endpoint:** [API_ENDPOINT]
-**Latest Release:** v0.6.0 (2026-03-23)
+**Latest Release:** v0.8.0 (2026-03-25)

package/dist/browser/playwright-renderer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"playwright-renderer.d.ts","sourceRoot":"","sources":["../../src/browser/playwright-renderer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAkN/D;;;;;;;;;;GAUG;AACH,wBAAsB,UAAU,CAC9B,GAAG,EAAE,MAAM,EACX,OAAO,GAAE;IACP,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,UAAU,CAAC;CAClC,GACL,OAAO,CAAC,MAAM,CAAC,mBAAmB,EAAE,KAAK,CAAC,CAAC,CAuB7C;AAED;;;;;;GAMG;AACH,wBAAsB,QAAQ,CAC5B,GAAG,EAAE,MAAM,EACX,UAAU,SAAO,GAChB,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAwBjC;AAED;;;GAGG;AACH,wBAAsB,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC,CAGlD"}
+{"version":3,"file":"playwright-renderer.d.ts","sourceRoot":"","sources":["../../src/browser/playwright-renderer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAyO/D;;;;;;;;;;GAUG;AACH,wBAAsB,UAAU,CAC9B,GAAG,EAAE,MAAM,EACX,OAAO,GAAE;IACP,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,UAAU,CAAC;CAClC,GACL,OAAO,CAAC,MAAM,CAAC,mBAAmB,EAAE,KAAK,CAAC,CAAC,CAuB7C;AAED;;;;;;GAMG;AACH,wBAAsB,QAAQ,CAC5B,GAAG,EAAE,MAAM,EACX,UAAU,SAAO,GAChB,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAwBjC;AAED;;;GAGG;AACH,wBAAsB,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC,CAGlD"}

package/dist/browser/playwright-renderer.js

@@ -88,6 +88,8 @@ async function renderWithLambda(url, timeout_ms) {
             return Err(new Error(`Lambda renderer error: ${body.error}`));
         }
         // Success response
+        // TODO: Lambda renderer needs PDF support - should return binary content as base64
+        // for application/pdf responses instead of always converting to HTML string
         return Ok({
             html: body.html,
             title: body.title,
@@ -127,15 +129,35 @@ async function renderWithFetch(url, timeout_ms) {
             if (!response.ok) {
                 return Err(new Error(`HTTP ${response.status}: ${response.statusText}`));
             }
-            const html = await response.text();
-            // Capture Content-Type header
+            // Capture Content-Type header before reading body
             const contentTypeHeader = response.headers.get('content-type');
             const contentType = contentTypeHeader
                 ? contentTypeHeader.split(';')[0].trim() // Remove charset and other params
                 : 'text/html'; // Default to HTML if missing
-            // Extract title using regex (simple fallback)
-            const titleMatch = html.match(/<title[^>]*>(.*?)<\/title>/i);
-            const title = titleMatch ? titleMatch[1].trim() : '';
+            // Read response body - use arrayBuffer() for binary types, text() for text types
+            // CRITICAL: pdf-parse requires original binary bytes, not UTF-8 string conversion
+            const isBinary = contentType === 'application/pdf' ||
+                contentType.startsWith('image/') ||
+                contentType.startsWith('application/octet-stream');
+            let html;
+            let title = '';
+            if (isBinary) {
+                // Binary content (PDF, images, etc.) - preserve byte integrity
+                const arrayBuffer = await response.arrayBuffer();
+                html = Buffer.from(arrayBuffer);
+                // Title extraction not meaningful for binary content
+                title = '';
+            }
+            else {
+                // Text content (HTML, JSON, etc.) - read as UTF-8 string
+                const textContent = await response.text();
+                html = textContent;
+                // Extract title using regex (HTML only)
+                if (contentType.includes('html')) {
+                    const titleMatch = textContent.match(/<title[^>]*>(.*?)<\/title>/i);
+                    title = titleMatch ? titleMatch[1].trim() : '';
+                }
+            }
             return Ok({
                 html,
                 title,

package/dist/browser/playwright-renderer.js.map

@@ -1 +1 @@
-{"version":3,"file":"playwright-renderer.js","sourceRoot":"","sources":["../../src/browser/playwright-renderer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAEtC;;GAEG;AACH,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;AAoBpD;;GAEG;AACH,SAAS,WAAW,CAAC,QAA4B,EAAE,GAAW;IAC5D,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC;QAC3B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,KAAK,EAAE,mBAAmB;QAC1B,QAAQ;QACR,GAAG;KACJ,CAAC,CAAC,CAAC;AACN,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,gBAAgB,CAC7B,EAAoB,EACpB,UAAkB,EAClB,cAAsB;IAEtB,IAAI,SAAgB,CAAC;IAErB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,UAAU,EAAE,OAAO,EAAE,EAAE,CAAC;QACtD,IAAI,CAAC;YACH,OAAO,MAAM,EAAE,EAAE,CAAC;QACpB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,SAAS,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YAEtE,IAAI,OAAO,GAAG,UAAU,GAAG,CAAC,EAAE,CAAC;gBAC7B,MAAM,OAAO,GAAG,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;gBACtD,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC;oBAC3B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;oBACnC,KAAK,EAAE,eAAe;oBACtB,OAAO,EAAE,OAAO,GAAG,CAAC;oBACpB,WAAW,EAAE,UAAU;oBACvB,QAAQ,EAAE,OAAO;oBACjB,KAAK,EAAE,SAAS,CAAC,OAAO;iBACzB,CAAC,CAAC,CAAC;gBAEJ,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;YAC7D,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,SAAU,CAAC;AACnB,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,gBAAgB,CAC7B,GAAW,EACX,UAAkB;IAElB,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,OAAO,GAAG,CAAC,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC,CAAC;IAC7D,CAAC;IAED,WAAW,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IAE3B,IAAI,CAAC;QACH,2DAA2D;QAC3D,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,KAAK,IAAI,EAAE;YACjD,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;YACzC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,UAAU,GAAG,IAAI,CAAC,CAAC;YAE1E,IAAI,CAAC;gBACH,OAAO,MAAM,KAAK,CAAC,GAAG,YAAY,SAAS,EAAE;oBAC3C,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE;wBACP,cAAc,EAAE,kBAAkB;qBACnC;oBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;wBACnB,GAAG;wBACH,UAAU;wBACV,mBAAmB,EAAE,MAAM,EAAE,gBAAgB;qBAC9C,CAAC;oBACF,MAAM,EAAE,UAAU,CAAC,MAAM;iBAC1B,CAAC,CAAC;YACL,CAAC;oBAAS,CAAC;gBACT,YAAY,CAAC,SAAS,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,oCAAoC;QAEjD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAA6C,CAAC;QAE9E,gCAAgC;QAChC,IAAI,OAAO,IAAI,IAAI,EAAE,CAAC;YACpB,OAAO,GAAG,CAAC,IAAI,KAAK,CAAC,0BAA0B,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAChE,CAAC;QAED,mBAAmB;QACnB,OAAO,EAAE,CAAC;YACR,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,GAAG;YACH,WAAW,EAAE,WAAW,EAAE,mCAAmC;YAC7D,IAAI,EAAE,SAAS,EAAE,uCAAuC;SACzD,CAAC,CAAC;IAEL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAE5E,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC;YAC3B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,KAAK,EAAE,wBAAwB;YAC/B,GAAG;YACH,KAAK,EAAE,YAAY;SACpB,CAAC,CAAC,CAAC;QAEJ,OAAO,GAAG,CAAC,IAAI,KAAK,CAAC,2BAA2B,YAAY,EAAE,CAAC,CAAC,CAAC;IACnE,CAAC;AACH,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,eAAe,CAC5B,GAAW,EACX,UAAkB;IAElB,WAAW,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAE1B,IAAI,CAAC;QACH,kCAAkC;QAClC,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,UAAU,CAAC,CAAC;QAEnE,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBAChC,MAAM,EAAE,KAAK;gBACb,OAAO,EAAE;oBACP,YAAY,EAAE,8FAA8F;iBAC7G;gBACD,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,OAAO,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;YAC3E,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YAEnC,8BAA8B;YAC9B,MAAM,iBAAiB,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;YAC/D,MAAM,WAAW,GAAG,iBAAiB;gBACnC,CAAC,CAAC,iBAAiB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAE,kCAAkC;gBAC5E,CAAC,CAAC,WAAW,CAAC,CAAC,6BAA6B;YAE9C,8CAA8C;YAC9C,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;YAC7D,MAAM,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAErD,OAAO,EAAE,CAAC;gBACR,IAAI;gBACJ,KAAK;gBACL,GAAG;gBACH,WAAW;gBACX,IAAI,EAAE,SAAS;aAChB,CAAC,CAAC;QAEL,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,SAAS,CAAC,CAAC;QAC1B,CAAC;IAEH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;YAC3B,8BAA8B;YAC9B,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBAChC,OAAO,GAAG,CAAC,IAAI,KAAK,CAAC,4BAA4B,UAAU,IAAI,CAAC,CAAC,CAAC;YACpE,CAAC;YAED,wBAAwB;YACxB,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;gBAClF,OAAO,GAAG,CAAC,IAAI,KAAK,CAAC,kBAAkB,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YAC3D,CAAC;YAED,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC;QACpB,CAAC;QAED,OAAO,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACvC,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,GAAW,EACX,UAGI,EAAE;IAEN,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU,IAAI,KAAK,CAAC,CAAC,qBAAqB;IAElE,gDAAgD;IAChD,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,YAAY,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAE1D,oCAAoC;QACpC,IAAI,YAAY,CAAC,EAAE,EAAE,CAAC;YACpB,OAAO,YAAY,CAAC;QACtB,CAAC;QAED,oDAAoD;QACpD,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC;YAC3B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,KAAK,EAAE,0BAA0B;YACjC,GAAG;YACH,YAAY,EAAE,YAAY,CAAC,KAAK,CAAC,OAAO;SACzC,CAAC,CAAC,CAAC;IACN,CAAC;IAED,uCAAuC;IACvC,OAAO,MAAM,eAAe,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;AAC7C,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,GAAW,EACX,UAAU,GAAG,IAAI;IAEjB,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,UAAU,CAAC,CAAC;QAEnE,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBAChC,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;YAEH,kDAAkD;YAClD,MAAM,YAAY,GAAG,CAAC,QAAQ,CAAC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC;YAEvE,OAAO,EAAE,CAAC,YAAY,CAAC,CAAC;QAE1B,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,SAAS,CAAC,CAAC;QAC1B,CAAC;IAEH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,wBAAwB;QACxB,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY;IAChC,iEAAiE;IACjE,6DAA6D;AAC/D,CAAC"}
+{"version":3,"file":"playwright-renderer.js","sourceRoot":"","sources":["../../src/browser/playwright-renderer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAEtC;;GAEG;AACH,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;AAoBpD;;GAEG;AACH,SAAS,WAAW,CAAC,QAA4B,EAAE,GAAW;IAC5D,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC;QAC3B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,KAAK,EAAE,mBAAmB;QAC1B,QAAQ;QACR,GAAG;KACJ,CAAC,CAAC,CAAC;AACN,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,gBAAgB,CAC7B,EAAoB,EACpB,UAAkB,EAClB,cAAsB;IAEtB,IAAI,SAAgB,CAAC;IAErB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,UAAU,EAAE,OAAO,EAAE,EAAE,CAAC;QACtD,IAAI,CAAC;YACH,OAAO,MAAM,EAAE,EAAE,CAAC;QACpB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,SAAS,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YAEtE,IAAI,OAAO,GAAG,UAAU,GAAG,CAAC,EAAE,CAAC;gBAC7B,MAAM,OAAO,GAAG,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;gBACtD,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC;oBAC3B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;oBACnC,KAAK,EAAE,eAAe;oBACtB,OAAO,EAAE,OAAO,GAAG,CAAC;oBACpB,WAAW,EAAE,UAAU;oBACvB,QAAQ,EAAE,OAAO;oBACjB,KAAK,EAAE,SAAS,CAAC,OAAO;iBACzB,CAAC,CAAC,CAAC;gBAEJ,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;YAC7D,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,SAAU,CAAC;AACnB,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,gBAAgB,CAC7B,GAAW,EACX,UAAkB;IAElB,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,OAAO,GAAG,CAAC,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC,CAAC;IAC7D,CAAC;IAED,WAAW,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IAE3B,IAAI,CAAC;QACH,2DAA2D;QAC3D,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,KAAK,IAAI,EAAE;YACjD,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;YACzC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,UAAU,GAAG,IAAI,CAAC,CAAC;YAE1E,IAAI,CAAC;gBACH,OAAO,MAAM,KAAK,CAAC,GAAG,YAAY,SAAS,EAAE;oBAC3C,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE;wBACP,cAAc,EAAE,kBAAkB;qBACnC;oBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;wBACnB,GAAG;wBACH,UAAU;wBACV,mBAAmB,EAAE,MAAM,EAAE,gBAAgB;qBAC9C,CAAC;oBACF,MAAM,EAAE,UAAU,CAAC,MAAM;iBAC1B,CAAC,CAAC;YACL,CAAC;oBAAS,CAAC;gBACT,YAAY,CAAC,SAAS,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,oCAAoC;QAEjD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAA6C,CAAC;QAE9E,gCAAgC;QAChC,IAAI,OAAO,IAAI,IAAI,EAAE,CAAC;YACpB,OAAO,GAAG,CAAC,IAAI,KAAK,CAAC,0BAA0B,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAChE,CAAC;QAED,mBAAmB;QACnB,mFAAmF;QACnF,4EAA4E;QAC5E,OAAO,EAAE,CAAC;YACR,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,GAAG;YACH,WAAW,EAAE,WAAW,EAAE,mCAAmC;YAC7D,IAAI,EAAE,SAAS,EAAE,uCAAuC;SACzD,CAAC,CAAC;IAEL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAE5E,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC;YAC3B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,KAAK,EAAE,wBAAwB;YAC/B,GAAG;YACH,KAAK,EAAE,YAAY;SACpB,CAAC,CAAC,CAAC;QAEJ,OAAO,GAAG,CAAC,IAAI,KAAK,CAAC,2BAA2B,YAAY,EAAE,CAAC,CAAC,CAAC;IACnE,CAAC;AACH,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,eAAe,CAC5B,GAAW,EACX,UAAkB;IAElB,WAAW,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAE1B,IAAI,CAAC;QACH,kCAAkC;QAClC,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,UAAU,CAAC,CAAC;QAEnE,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBAChC,MAAM,EAAE,KAAK;gBACb,OAAO,EAAE;oBACP,YAAY,EAAE,8FAA8F;iBAC7G;gBACD,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,OAAO,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;YAC3E,CAAC;YAED,kDAAkD;YAClD,MAAM,iBAAiB,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;YAC/D,MAAM,WAAW,GAAG,iBAAiB;gBACnC,CAAC,CAAC,iBAAiB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAE,kCAAkC;gBAC5E,CAAC,CAAC,WAAW,CAAC,CAAC,6BAA6B;YAE9C,iFAAiF;YACjF,kFAAkF;YAClF,MAAM,QAAQ,GAAG,WAAW,KAAK,iBAAiB;gBAClC,WAAW,CAAC,UAAU,CAAC,QAAQ,CAAC;gBAChC,WAAW,CAAC,UAAU,CAAC,0BAA0B,CAAC,CAAC;YAEnE,IAAI,IAAqB,CAAC;YAC1B,IAAI,KAAK,GAAG,EAAE,CAAC;YAEf,IAAI,QAAQ,EAAE,CAAC;gBACb,+DAA+D;gBAC/D,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC;gBACjD,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;gBAChC,qDAAqD;gBACrD,KAAK,GAAG,EAAE,CAAC;YACb,CAAC;iBAAM,CAAC;gBACN,yDAAyD;gBACzD,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBAC1C,IAAI,GAAG,WAAW,CAAC;gBAEnB,wCAAwC;gBACxC,IAAI,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;oBACjC,MAAM,UAAU,GAAG,WAAW,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;oBACpE,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjD,CAAC;YACH,CAAC;YAED,OAAO,EAAE,CAAC;gBACR,IAAI;gBACJ,KAAK;gBACL,GAAG;gBACH,WAAW;gBACX,IAAI,EAAE,SAAS;aAChB,CAAC,CAAC;QAEL,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,SAAS,CAAC,CAAC;QAC1B,CAAC;IAEH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;YAC3B,8BAA8B;YAC9B,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBAChC,OAAO,GAAG,CAAC,IAAI,KAAK,CAAC,4BAA4B,UAAU,IAAI,CAAC,CAAC,CAAC;YACpE,CAAC;YAED,wBAAwB;YACxB,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;gBAClF,OAAO,GAAG,CAAC,IAAI,KAAK,CAAC,kBAAkB,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YAC3D,CAAC;YAED,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC;QACpB,CAAC;QAED,OAAO,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACvC,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,GAAW,EACX,UAGI,EAAE;IAEN,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU,IAAI,KAAK,CAAC,CAAC,qBAAqB;IAElE,gDAAgD;IAChD,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,YAAY,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAE1D,oCAAoC;QACpC,IAAI,YAAY,CAAC,EAAE,EAAE,CAAC;YACpB,OAAO,YAAY,CAAC;QACtB,CAAC;QAED,oDAAoD;QACpD,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC;YAC3B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,KAAK,EAAE,0BAA0B;YACjC,GAAG;YACH,YAAY,EAAE,YAAY,CAAC,KAAK,CAAC,OAAO;SACzC,CAAC,CAAC,CAAC;IACN,CAAC;IAED,uCAAuC;IACvC,OAAO,MAAM,eAAe,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;AAC7C,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,GAAW,EACX,UAAU,GAAG,IAAI;IAEjB,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,UAAU,CAAC,CAAC;QAEnE,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBAChC,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;YAEH,kDAAkD;YAClD,MAAM,YAAY,GAAG,CAAC,QAAQ,CAAC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC;YAEvE,OAAO,EAAE,CAAC,YAAY,CAAC,CAAC;QAE1B,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,SAAS,CAAC,CAAC;QAC1B,CAAC;IAEH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,wBAAwB;QACxB,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY;IAChC,iEAAiE;IACjE,6DAA6D;AAC/D,CAAC"}

package/dist/content-handlers/index.d.ts

@@ -0,0 +1,36 @@
+/**
+ * Content Handlers Module
+ *
+ * Central routing for content-type specific sanitization handlers.
+ * Detects MIME type from Content-Type header and routes to appropriate handler.
+ *
+ * Supported content types:
+ * - application/pdf -> PDF handler
+ * - application/json -> JSON handler
+ * - image/svg+xml -> SVG handler
+ *
+ * Unsupported types return structured rejection (no throw).
+ */
+import type { HandlerResult } from './types.js';
+/**
+ * Normalize Content-Type header to base MIME type
+ *
+ * Examples:
+ * - "application/pdf; charset=utf-8" -> "application/pdf"
+ * - "application/json" -> "application/json"
+ * - "IMAGE/SVG+XML" -> "image/svg+xml"
+ *
+ * @param contentType - Raw Content-Type header value
+ * @returns Normalized MIME type (lowercase, parameters stripped)
+ */
+export declare function normalizeMimeType(contentType: string): string;
+/**
+ * Route content to appropriate handler based on MIME type
+ *
+ * @param content - Raw content (string or Buffer)
+ * @param contentType - Content-Type header value
+ * @returns Handler result (success or error/rejected)
+ */
+export declare function routeContentHandler(content: string | Buffer, contentType: string): Promise<HandlerResult>;
+export type { HandlerResult, HandlerSuccessResult, HandlerErrorResult } from './types.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/content-handlers/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/content-handlers/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAKH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAEhD;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAE7D;AAED;;;;;;GAMG;AACH,wBAAsB,mBAAmB,CACvC,OAAO,EAAE,MAAM,GAAG,MAAM,EACxB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,aAAa,CAAC,CAwBxB;AAGD,YAAY,EAAE,aAAa,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC"}

package/dist/content-handlers/index.js

@@ -0,0 +1,59 @@
+/**
+ * Content Handlers Module
+ *
+ * Central routing for content-type specific sanitization handlers.
+ * Detects MIME type from Content-Type header and routes to appropriate handler.
+ *
+ * Supported content types:
+ * - application/pdf -> PDF handler
+ * - application/json -> JSON handler
+ * - image/svg+xml -> SVG handler
+ *
+ * Unsupported types return structured rejection (no throw).
+ */
+import { handlePdf } from './pdf-handler.js';
+import { handleJson } from './json-handler.js';
+import { handleSvg } from './svg-handler.js';
+/**
+ * Normalize Content-Type header to base MIME type
+ *
+ * Examples:
+ * - "application/pdf; charset=utf-8" -> "application/pdf"
+ * - "application/json" -> "application/json"
+ * - "IMAGE/SVG+XML" -> "image/svg+xml"
+ *
+ * @param contentType - Raw Content-Type header value
+ * @returns Normalized MIME type (lowercase, parameters stripped)
+ */
+export function normalizeMimeType(contentType) {
+    return contentType.toLowerCase().split(';')[0].trim();
+}
+/**
+ * Route content to appropriate handler based on MIME type
+ *
+ * @param content - Raw content (string or Buffer)
+ * @param contentType - Content-Type header value
+ * @returns Handler result (success or error/rejected)
+ */
+export async function routeContentHandler(content, contentType) {
+    const mimeType = normalizeMimeType(contentType);
+    // Route to appropriate handler
+    switch (mimeType) {
+        case 'application/pdf':
+            return handlePdf(content, mimeType);
+        case 'application/json':
+        case 'text/json':
+            return handleJson(content, mimeType);
+        case 'image/svg+xml':
+            return handleSvg(content, mimeType);
+        default:
+            // Unsupported content type - return structured rejection
+            return {
+                status: 'rejected',
+                reason: 'UNSUPPORTED_CONTENT_TYPE',
+                mime: mimeType,
+                message: `Content type ${mimeType} is not supported by Visus-MCP.`
+            };
+    }
+}
+//# sourceMappingURL=index.js.map

package/dist/content-handlers/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/content-handlers/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAG7C;;;;;;;;;;GAUG;AACH,MAAM,UAAU,iBAAiB,CAAC,WAAmB;IACnD,OAAO,WAAW,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AACxD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,OAAwB,EACxB,WAAmB;IAEnB,MAAM,QAAQ,GAAG,iBAAiB,CAAC,WAAW,CAAC,CAAC;IAEhD,+BAA+B;IAC/B,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,iBAAiB;YACpB,OAAO,SAAS,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAEtC,KAAK,kBAAkB,CAAC;QACxB,KAAK,WAAW;YACd,OAAO,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAEvC,KAAK,eAAe;YAClB,OAAO,SAAS,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAEtC;YACE,yDAAyD;YACzD,OAAO;gBACL,MAAM,EAAE,UAAU;gBAClB,MAAM,EAAE,0BAA0B;gBAClC,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,gBAAgB,QAAQ,iCAAiC;aACnE,CAAC;IACN,CAAC;AACH,CAAC"}

package/dist/content-handlers/json-handler.d.ts

@@ -0,0 +1,28 @@
+/**
+ * JSON Content Handler
+ *
+ * Handles application/json content type. Recursively traverses all nodes in the JSON
+ * object tree and applies the full injection pattern registry to every string value.
+ *
+ * What it handles:
+ * - All string values in the JSON tree (any depth)
+ * - Arrays, nested objects, and mixed-type arrays
+ * - Falls back to plain text pipeline if JSON.parse fails
+ *
+ * What it strips:
+ * - Nothing (preserves original structure)
+ *
+ * What it passes through:
+ * - Sanitized JSON with original structure preserved
+ * - All non-string values pass through unchanged
+ */
+import type { HandlerResult } from './types.js';
+/**
+ * Handle JSON content
+ *
+ * @param content - Raw JSON string
+ * @param mimeType - Original MIME type
+ * @returns Sanitized handler result
+ */
+export declare function handleJson(content: string | Buffer, mimeType: string): HandlerResult;
+//# sourceMappingURL=json-handler.d.ts.map

package/dist/content-handlers/json-handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"json-handler.d.ts","sourceRoot":"","sources":["../../src/content-handlers/json-handler.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAGH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAEhD;;;;;;GAMG;AACH,wBAAgB,UAAU,CACxB,OAAO,EAAE,MAAM,GAAG,MAAM,EACxB,QAAQ,EAAE,MAAM,GACf,aAAa,CAoEf"}