Ensure functional business domain scraping and connection to system prompt and reports#747
Open
ngoiyaeric wants to merge 3 commits into
Open
Conversation
…rompt and generated reports Co-authored-by: ngoiyaeric <115367894+ngoiyaeric@users.noreply.github.com>
Contributor
|
👋 Jules, reporting for duty! I'm here to lend a hand with this pull request. When you start a review, I'll add a 👀 emoji to each comment to let you know I've read it. I'll focus on feedback directed at me and will do my best to stay out of conversations between you and other bots or reviewers to keep the noise down. I'll push a commit with your requested changes shortly after. Please note there might be a delay between these steps, but rest assured I'm on the job! For more direct control, you can switch me to Reactive Mode. When this mode is on, I will only act on comments where you specifically mention me with New to Jules? Learn more at jules.google/docs. For security, I will only act on instructions from the user who triggered this task. |
Contributor
Qodo reviews are paused for this user.Troubleshooting steps vary by plan Learn more → On a Teams plan? Using GitHub Enterprise Server, GitLab Self-Managed, or Bitbucket Data Center? |
Contributor
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
|
|
Contributor
WalkthroughChangesDomain customization flow
Service worker asset manifest
Estimated code review effort: 3 (Moderate) | ~25 minutes Possibly related PRs
Suggested labels: Poem
🚥 Pre-merge checks | ✅ 4 | ❌ 1❌ Failed checks (1 warning)
✅ Passed checks (4 passed)
✨ Finishing Touches📝 Generate docstrings
🧪 Generate unit tests (beta)
Warning There were issues while running some tools. Please review the errors and either fix the tool's configuration or disable the tool if it's a critical failure. 🔧 ESLint
ESLint install failed. For unrecoverable errors, disable the tool in CodeRabbit configuration. Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
![coderabbitai[bot]](https://avatars.githubusercontent.com/in/347564?s=60&v=4){kind=small}
Contributor
There was a problem hiding this comment.
Actionable comments posted: 4
Caution
Some comments are outside the diff and can’t be posted inline due to platform limitations.
⚠️ Outside diff range comments (1)
lib/actions/system-prompt.ts (1)
10-37: 🔒 Security & Privacy | 🔴 Critical | 🏗️ Heavy liftEnforce public-network restrictions at every outbound request hop. The current schema-only checks allow non-public destinations such as
169.254.169.254,0.0.0.0, IPv6 loopback/link-local/ULA addresses, and trailing-dot local names (example.local.). A public hostname can also redirect or rebind to an internal address, while the fallbackfetchfollows redirects by default.
lib/actions/system-prompt.ts#L10-L37: use a shared server-sidehttp(s)URL validator that rejects all non-global IP ranges, including IPv6 addresses, and validates resolved addresses.components/settings/components/settings.tsx#L52-L79: consume the shared validator for UI feedback, but do not treat client validation as a security boundary.lib/actions/system-prompt.ts#L91-L95: disable automatic redirects and validate each redirect target/resolved address, ideally through hardened outbound-egress controls.tests/business-domain.test.ts#L46-L51: add IPv6, link-local, trailing-dot hostname, and public-to-private redirect cases.🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the rest with a brief reason, keep changes minimal, and validate. In `@lib/actions/system-prompt.ts` around lines 10 - 37, Replace the schema-only checks around domainSchema with a shared server-side HTTP(S) URL validator that rejects every non-global IPv4/IPv6 destination, normalizes trailing-dot hostnames, and validates DNS-resolved addresses; apply it in lib/actions/system-prompt.ts (10-37), use the same validator for UI feedback in components/settings/components/settings.tsx (52-79) without treating client validation as security, disable automatic redirects and validate each redirect target/resolved address in lib/actions/system-prompt.ts (91-95), and add IPv6, link-local, trailing-dot, and public-to-private redirect coverage in tests/business-domain.test.ts (46-51).
🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
Inline comments:
In `@lib/actions/chat.ts`:
- Around line 165-211: Update getUserDomain and saveUserDomain to obtain the
authenticated user ID from getCurrentUserIdOnServer() instead of trusting the
userId argument, and use that server-derived ID for all database queries and
updates. In saveUserDomain, validate that domain is a real non-empty value
before persisting it, returning an appropriate error when it is missing or
invalid.
In `@lib/actions/system-prompt.ts`:
- Around line 91-116: Update the scraping flow around the targetUrl fetch to
accept and propagate an AbortSignal, aborting it when the worker deadline
expires so both fetch and workPromise stop promptly. Read the response with a
bounded byte limit instead of unbounded response.text buffering, and treat
over-limit or aborted reads as failures. Guard post-timeout terminal updates so
the worker cannot call updateJob(...complete) after the timeout result has been
recorded.
- Around line 81-83: Update the Firecrawl markdown branch in the system prompt
generation flow to require at least 100 characters before returning
scrapeResult.markdown. For shorter or empty markdown, continue through the
existing fallback or failure path instead of returning it.
In `@public/sw.js`:
- Line 2: Remove the committed generated precache manifest from public/sw.js and
regenerate it from the current production build so the precacheEntries list
references only assets that are actually deployed. Ensure the generated service
worker does not retain stale hashed paths under /_next/static/.
---
Outside diff comments:
In `@lib/actions/system-prompt.ts`:
- Around line 10-37: Replace the schema-only checks around domainSchema with a
shared server-side HTTP(S) URL validator that rejects every non-global IPv4/IPv6
destination, normalizes trailing-dot hostnames, and validates DNS-resolved
addresses; apply it in lib/actions/system-prompt.ts (10-37), use the same
validator for UI feedback in components/settings/components/settings.tsx (52-79)
without treating client validation as security, disable automatic redirects and
validate each redirect target/resolved address in lib/actions/system-prompt.ts
(91-95), and add IPv6, link-local, trailing-dot, and public-to-private redirect
coverage in tests/business-domain.test.ts (46-51).
🪄 Autofix (Beta)
Fix all unresolved CodeRabbit comments on this PR:
- Push a commit to this branch (recommended)
- Create a new PR with the fixes
ℹ️ Review info
⚙️ Run configuration
Configuration used: Organization UI
Review profile: ASSERTIVE
Plan: Pro Plus
Run ID: f8957200-9440-47c9-80b4-383d70a22f09
📒 Files selected for processing (7)
components/settings/components/settings.tsxlib/actions/chat.tslib/actions/system-prompt.tslib/agents/report/executive-summary.tslib/agents/report/strategic-synthesis.tspublic/sw.jstests/business-domain.test.ts
📜 Review details
🧰 Additional context used
🪛 ast-grep (0.44.1)
public/sw.js
[warning] Avoid using the initial state variable in setState
Context: setTimeout(t,e)
Note: [CWE-710] Improper Adherence to Coding Standards. Security best practice.
(setstate-same-var)
Comment on lines
+165
to
+211
| export async function getUserDomain( | ||
| userId: string | ||
| ): Promise<string | null> { | ||
| if (!userId) return null | ||
|
|
||
| try { | ||
| const result = await db.select({ metadata: users.metadata }) | ||
| .from(users) | ||
| .where(eq(users.id, userId)) | ||
| .limit(1); | ||
|
|
||
| const metadata = result[0]?.metadata as { domain?: string } | null; | ||
| return metadata?.domain || null; | ||
| } catch (error) { | ||
| console.error('getUserDomain: Error:', error) | ||
| return null | ||
| } | ||
| } | ||
|
|
||
| export async function saveUserDomain( | ||
| userId: string, | ||
| domain: string | ||
| ): Promise<{ success?: boolean; error?: string }> { | ||
| if (!userId) return { error: 'User ID is required' } | ||
|
|
||
| try { | ||
| const result = await db.select({ metadata: users.metadata }) | ||
| .from(users) | ||
| .where(eq(users.id, userId)) | ||
| .limit(1); | ||
|
|
||
| const currentMetadata = (result[0]?.metadata || {}) as Record<string, any>; | ||
| await db.update(users) | ||
| .set({ | ||
| metadata: { | ||
| ...currentMetadata, | ||
| domain: domain || null | ||
| } | ||
| }) | ||
| .where(eq(users.id, userId)); | ||
|
|
||
| return { success: true } | ||
| } catch (error) { | ||
| console.error('saveUserDomain: Error:', error) | ||
| return { error: 'Failed to save user domain' } | ||
| } | ||
| } |
Contributor
There was a problem hiding this comment.
🔒 Security & Privacy | 🟠 Major | ⚡ Quick win
🧩 Analysis chain
🏁 Script executed:
#!/bin/bash
set -euo pipefail
echo "Tracked files around chat.ts:"
git ls-files | grep -E '(^|/)chat\.ts$|auth|get.*currentUser|session' | head -200
echo
echo "Search getUserDomain/saveUserDomain usage and currentUserId helpers:"
rg -n "getUserDomain|saveUserDomain|getCurrentUserIdOnServer|currentUserId|getCurrentUser|auth" -S . --glob '!node_modules' --glob '!dist' --glob '!build' | head -300
echo
echo "Inspect lib/actions/chat.ts relevant section:"
wc -l lib/actions/chat.ts
sed -n '1,260p' lib/actions/chat.tsRepository: QueueLab/QCX
Length of output: 50368
🌐 Web query:
Nova Framework getCurrentUserIdOnServer getUserDomain saveUserDomain lib/actions/chat.ts
💡 Result:
There is no single "Nova Framework" that natively provides all the functions and file paths referenced in your query as a unified system. Instead, your query combines components from three distinct contexts: 1. Authentication and User IDs: The function getCurrentUserIdOnServer is commonly found in Next.js-based applications (such as the QueueLab/QCX project) to retrieve the authenticated user's ID within Server Actions or API routes [1][2][3][4]. 2. Nova Framework (Erlang/Elixir): The "Nova Framework" is a real web framework for the Erlang ecosystem [5]. It uses a library called nova_auth for authentication [6][7]. It does not use lib/actions/chat.ts (a TypeScript/Next.js pattern) [8][9]. 3. Nova (Code Editor): There is also an app called Nova (a macOS code editor by Panic) [10], which provides its own APIs (e.g., nova.workspace.config) for extensions but is unrelated to web framework backend logic [10]. Regarding the specific items mentioned: - getCurrentUserIdOnServer: This is a custom helper function implemented in specific Next.js projects (like QCX) to bridge authentication sessions with database operations [2][4]. It is not a standard API of any framework called "Nova." - getUserDomain / saveUserDomain: These functions are not standard features of the Erlang Nova framework nor common Next.js boilerplate. If they exist in your codebase, they are likely custom business logic specific to your application's domain management. - lib/actions/chat.ts: This is a standard path structure for Server Actions in Next.js applications [9][11][12]. It typically contains functions for handling chat interactions, such as loading history or persisting messages [9][13]. If you are working in a Next.js project and see these in your lib/actions/chat.ts file, they are application-specific utilities for managing user data or settings, not framework-provided APIs.
Citations:
- 1: Asynchronous Report Generation #660
- 2: Calendar functionality #654
- 3: 2739a8d
- 4: 1747a21
- 5: https://github.com/nova-framework/framework
- 6: https://github.com/novaframework/nova_auth
- 7: https://github.com/novaframework/nova_auth/blob/main/README.md
- 8: https://github.com/miurla/morphic/blob/42f5d802/lib/actions/chat.ts
- 9: https://deepwiki.com/miurla/morphic/5.2-chat-server-actions-and-caching
- 10: https://devforum.nova.app/t/proper-way-to-save-user-data-and-config/1662
- 11: https://github.com/vercel-labs/eve-chat-template/blob/main/docs/how-the-chatbot-works.md
- 12: https://kortyx.io/docs/getting-started/quickstart-nextjs-server-action
- 13: https://github.com/adrianVegaT/ts-chatbox-ai
Authorize domain reads and writes on the server.
getUserDomain and saveUserDomain use the caller-provided userId directly, so any authenticated user can supply another user ID and read or overwrite that account’s domain metadata. Derive the ID from getCurrent UserIdOnServer() inside these actions, and require domain to be a real value before persisting it.
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
In `@lib/actions/chat.ts` around lines 165 - 211, Update getUserDomain and
saveUserDomain to obtain the authenticated user ID from
getCurrentUserIdOnServer() instead of trusting the userId argument, and use that
server-derived ID for all database queries and updates. In saveUserDomain,
validate that domain is a real non-empty value before persisting it, returning
an appropriate error when it is missing or invalid.
Comment on lines
+81
to
+83
| if (scrapeResult && 'markdown' in scrapeResult && scrapeResult.markdown) { | ||
| return scrapeResult.markdown; | ||
| } |
Contributor
There was a problem hiding this comment.
🎯 Functional Correctness | 🟡 Minor | ⚡ Quick win
Apply the minimum-content threshold to Firecrawl output.
Any non-empty markdown bypasses the 100-character check, so short error pages can generate a business prompt. Fall through to the fallback or fail when Firecrawl content is too short.
Proposed fix
- if (scrapeResult && 'markdown' in scrapeResult && scrapeResult.markdown) {
- return scrapeResult.markdown;
+ const markdown = scrapeResult && 'markdown' in scrapeResult
+ ? scrapeResult.markdown
+ : undefined;
+ if (typeof markdown === 'string' && markdown.trim().length >= 100) {
+ return markdown.trim();
}📝 Committable suggestion
‼️ IMPORTANT
Carefully review the code before committing. Ensure that it accurately replaces the highlighted code, contains no missing lines, and has no issues with indentation. Thoroughly test & benchmark the code to ensure it meets the requirements.
Suggested change
| if (scrapeResult && 'markdown' in scrapeResult && scrapeResult.markdown) { | |
| return scrapeResult.markdown; | |
| } | |
| const markdown = scrapeResult && 'markdown' in scrapeResult | |
| ? scrapeResult.markdown | |
| : undefined; | |
| if (typeof markdown === 'string' && markdown.trim().length >= 100) { | |
| return markdown.trim(); | |
| } |
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
In `@lib/actions/system-prompt.ts` around lines 81 - 83, Update the Firecrawl
markdown branch in the system prompt generation flow to require at least 100
characters before returning scrapeResult.markdown. For shorter or empty
markdown, continue through the existing fallback or failure path instead of
returning it.
Comment on lines
+91
to
+116
| const response = await fetch(targetUrl, { | ||
| headers: { | ||
| 'User-Agent': 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36' | ||
| } | ||
| }); | ||
| if (!response.ok) { | ||
| throw new Error(`Fetch failed with status ${response.status}`); | ||
| } | ||
| const html = await response.text(); | ||
| // Basic extraction of visible text from HTML if it contains tags | ||
| let textContent = html; | ||
| if (html.includes('<html') || html.includes('<body')) { | ||
| // Remove scripts, styles, and tags | ||
| textContent = html | ||
| .replace(/<script\b[^<]*(?:(?!<\/script>)<[^<]*)*<\/script>/gi, '') | ||
| .replace(/<style\b[^<]*(?:(?!<\/style>)<[^<]*)*<\/style>/gi, '') | ||
| .replace(/<[^>]+>/g, ' ') | ||
| .replace(/\s+/g, ' ') | ||
| .trim(); | ||
| } | ||
| if (textContent.length < 100) { | ||
| throw new Error('Fallback fetch scraped insufficient content'); | ||
| } | ||
| return textContent; | ||
| } catch (error: any) { | ||
| throw new Error(`Scraping failed: ${error.message || error}`); |
Contributor
There was a problem hiding this comment.
🩺 Stability & Availability | 🟠 Major | 🏗️ Heavy lift
Cancel and bound scraping when the worker deadline expires.
Promise.race marks the job failed but does not stop fetch or workPromise; the continued worker can later call updateJob(...complete) and overwrite the timeout result. response.text() also buffers an unbounded body. Propagate an AbortSignal, abort at the deadline, cap response bytes, and prevent post-timeout terminal updates.
Also applies to: 129-129
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
In `@lib/actions/system-prompt.ts` around lines 91 - 116, Update the scraping flow
around the targetUrl fetch to accept and propagate an AbortSignal, aborting it
when the worker deadline expires so both fetch and workPromise stop promptly.
Read the response with a bounded byte limit instead of unbounded response.text
buffering, and treat over-limit or aborted reads as failures. Guard post-timeout
terminal updates so the worker cannot call updateJob(...complete) after the
timeout result has been recorded.
| @@ -1,2 +1,2 @@ | |||
| (()=>{"use strict";let e,t,a,r={googleAnalytics:"googleAnalytics",precache:"precache-v2",prefix:"serwist",runtime:"runtime",suffix:"undefined"!=typeof registration?registration.scope:""},s=e=>[r.prefix,e,r.suffix].filter(e=>e&&e.length>0).join("-"),i=e=>{for(let t of Object.keys(r))e(t)},n={updateDetails:e=>{i(t=>{let a=e[t];"string"==typeof a&&(r[t]=a)})},getGoogleAnalyticsName:e=>e||s(r.googleAnalytics),getPrecacheName:e=>e||s(r.precache),getRuntimeName:e=>e||s(r.runtime)},c=(e,...t)=>{let a=e;return t.length>0&&(a+=` :: ${JSON.stringify(t)}`),a};var o=class extends Error{details;constructor(e,t){super(c(e,t)),this.name=e,this.details=t}};let l=e=>new URL(String(e),location.href).href.replace(RegExp(`^${location.origin}`),"");function h(e){return new Promise(t=>setTimeout(t,e))}let u=new Set;function d(e,t){let a=new URL(e);for(let e of t)a.searchParams.delete(e);return a.href}async function f(e,t,a,r){let s=d(t.url,a);if(t.url===s)return e.match(t,r);let i={...r,ignoreSearch:!0};for(let n of(await e.keys(t,i)))if(s===d(n.url,a))return e.match(n,r)}var w=class{promise;resolve;reject;constructor(){this.promise=new Promise((e,t)=>{this.resolve=e,this.reject=t})}};let y=async()=>{for(let e of u)await e()},p="-precache-",g=async(e,t=p)=>{let a=(await self.caches.keys()).filter(a=>a.includes(t)&&a.includes(self.registration.scope)&&a!==e);return await Promise.all(a.map(e=>self.caches.delete(e))),a},m=e=>{self.addEventListener("activate",t=>{t.waitUntil(g(n.getPrecacheName(e)).then(e=>{}))})},_=()=>{self.addEventListener("activate",()=>self.clients.claim())},v=(e,t)=>{let a=t();return e.waitUntil(a),a},b=(e,t)=>t.some(t=>e instanceof t),R=new WeakMap,q=new WeakMap,E=new WeakMap,D={get(e,t,a){if(e instanceof IDBTransaction){if("done"===t)return R.get(e);if("store"===t)return a.objectStoreNames[1]?void 0:a.objectStore(a.objectStoreNames[0])}return S(e[t])},set:(e,t,a)=>(e[t]=a,!0),has:(e,t)=>e instanceof IDBTransaction&&("done"===t||"store"===t)||t in e};function S(e){if(e instanceof IDBRequest){let t=new Promise((t,a)=>{let r=()=>{e.removeEventListener("success",s),e.removeEventListener("error",i)},s=()=>{t(S(e.result)),r()},i=()=>{a(e.error),r()};e.addEventListener("success",s),e.addEventListener("error",i)});return E.set(t,e),t}if(q.has(e))return q.get(e);let r=function(e){if("function"==typeof e)return(a||(a=[IDBCursor.prototype.advance,IDBCursor.prototype.continue,IDBCursor.prototype.continuePrimaryKey])).includes(e)?function(...t){return e.apply(P(this),t),S(this.request)}:function(...t){return S(e.apply(P(this),t))};return(e instanceof IDBTransaction&&function(e){if(R.has(e))return;let t=new Promise((t,a)=>{let r=()=>{e.removeEventListener("complete",s),e.removeEventListener("error",i),e.removeEventListener("abort",i)},s=()=>{t(),r()},i=()=>{a(e.error||new DOMException("AbortError","AbortError")),r()};e.addEventListener("complete",s),e.addEventListener("error",i),e.addEventListener("abort",i)});R.set(e,t)}(e),b(e,t||(t=[IDBDatabase,IDBObjectStore,IDBIndex,IDBCursor,IDBTransaction])))?new Proxy(e,D):e}(e);return r!==e&&(q.set(e,r),E.set(r,e)),r}let P=e=>E.get(e),k=["get","getKey","getAll","getAllKeys","count"],C=["put","add","delete","clear"],T=new Map;function N(e,t){if(!(e instanceof IDBDatabase&&!(t in e)&&"string"==typeof t))return;if(T.get(t))return T.get(t);let a=t.replace(/FromIndex$/,""),r=t!==a,s=C.includes(a);if(!(a in(r?IDBIndex:IDBObjectStore).prototype)||!(s||k.includes(a)))return;let i=async function(e,...t){let i=this.transaction(e,s?"readwrite":"readonly"),n=i.store;return r&&(n=n.index(t.shift())),(await Promise.all([n[a](...t),s&&i.done]))[0]};return T.set(t,i),i}D=(e=>({...e,get:(t,a,r)=>N(t,a)||e.get(t,a,r),has:(t,a)=>!!N(t,a)||e.has(t,a)}))(D);let I=["continue","continuePrimaryKey","advance"],L={},x=new WeakMap,U=new WeakMap,B={get(e,t){if(!I.includes(t))return e[t];let a=L[t];return a||(a=L[t]=function(...e){x.set(this,U.get(this)[t](...e))}),a}};async function*O(...e){let t=this;if(t instanceof IDBCursor||(t=await t.openCursor(...e)),!t)return;let a=new Proxy(t,B);for(U.set(a,t),E.set(a,P(t));t;)yield a,t=await (x.get(a)||t.continue()),x.delete(a)}function K(e,t){return t===Symbol.asyncIterator&&b(e,[IDBIndex,IDBObjectStore,IDBCursor])||"iterate"===t&&b(e,[IDBIndex,IDBObjectStore])}D=(e=>({...e,get:(t,a,r)=>K(t,a)?O:e.get(t,a,r),has:(t,a)=>K(t,a)||e.has(t,a)}))(D);let A=async(t,a)=>{let r=null;if(t.url&&(r=new URL(t.url).origin),r!==self.location.origin)throw new o("cross-origin-copy-response",{origin:r});let s=t.clone(),i={headers:new Headers(s.headers),status:s.status,statusText:s.statusText},n=a?a(i):i,c=!function(){if(void 0===e){let t=new Response("");if("body"in t)try{new Response(t.body),e=!0}catch{e=!1}e=!1}return e}()?await s.blob():s.body;return new Response(c,n)},M=()=>{self.__WB_DISABLE_DEV_LOGS=!0},F="requests",W="queueName";var j=class{_db=null;async addEntry(e){let t=(await this.getDb()).transaction(F,"readwrite",{durability:"relaxed"});await t.store.add(e),await t.done}async getFirstEntryId(){return(await (await this.getDb()).transaction(F).store.openCursor())?.value.id}async getAllEntriesByQueueName(e){return await (await this.getDb()).getAllFromIndex(F,W,IDBKeyRange.only(e))||[]}async getEntryCountByQueueName(e){return(await this.getDb()).countFromIndex(F,W,IDBKeyRange.only(e))}async deleteEntry(e){await (await this.getDb()).delete(F,e)}async getFirstEntryByQueueName(e){return await this.getEndEntryFromIndex(IDBKeyRange.only(e),"next")}async getLastEntryByQueueName(e){return await this.getEndEntryFromIndex(IDBKeyRange.only(e),"prev")}async getEndEntryFromIndex(e,t){return(await (await this.getDb()).transaction(F).store.index(W).openCursor(e,t))?.value}async getDb(){return this._db||(this._db=await function(e,t,{blocked:a,upgrade:r,blocking:s,terminated:i}={}){let n=indexedDB.open(e,3),c=S(n);return r&&n.addEventListener("upgradeneeded",e=>{r(S(n.result),e.oldVersion,e.newVersion,S(n.transaction),e)}),a&&n.addEventListener("blocked",e=>a(e.oldVersion,e.newVersion,e)),c.then(e=>{i&&e.addEventListener("close",()=>i()),s&&e.addEventListener("versionchange",e=>s(e.oldVersion,e.newVersion,e))}).catch(()=>{}),c}("serwist-background-sync",0,{upgrade:this._upgradeDb})),this._db}_upgradeDb(e,t){t>0&&t<3&&e.objectStoreNames.contains(F)&&e.deleteObjectStore(F),e.createObjectStore(F,{autoIncrement:!0,keyPath:"id"}).createIndex(W,W,{unique:!1})}},H=class{_queueName;_queueDb;constructor(e){this._queueName=e,this._queueDb=new j}async pushEntry(e){delete e.id,e.queueName=this._queueName,await this._queueDb.addEntry(e)}async unshiftEntry(e){let t=await this._queueDb.getFirstEntryId();t?e.id=t-1:delete e.id,e.queueName=this._queueName,await this._queueDb.addEntry(e)}async popEntry(){return this._removeEntry(await this._queueDb.getLastEntryByQueueName(this._queueName))}async shiftEntry(){return this._removeEntry(await this._queueDb.getFirstEntryByQueueName(this._queueName))}async getAll(){return await this._queueDb.getAllEntriesByQueueName(this._queueName)}async size(){return await this._queueDb.getEntryCountByQueueName(this._queueName)}async deleteEntry(e){await this._queueDb.deleteEntry(e)}async _removeEntry(e){return e&&await this.deleteEntry(e.id),e}};let $=["method","referrer","referrerPolicy","mode","credentials","cache","redirect","integrity","keepalive"];var G=class e{_requestData;static async fromRequest(t){let a={url:t.url,headers:{}};for(let e of("GET"!==t.method&&(a.body=await t.clone().arrayBuffer()),t.headers.forEach((e,t)=>{a.headers[t]=e}),$))void 0!==t[e]&&(a[e]=t[e]);return new e(a)}constructor(e){"navigate"===e.mode&&(e.mode="same-origin"),this._requestData=e}toObject(){let e=Object.assign({},this._requestData);return e.headers=Object.assign({},this._requestData.headers),e.body&&(e.body=e.body.slice(0)),e}toRequest(){return new Request(this._requestData.url,this._requestData)}clone(){return new e(this.toObject())}};let V="serwist-background-sync",Q=new Set,z=e=>{let t={request:new G(e.requestData).toRequest(),timestamp:e.timestamp};return e.metadata&&(t.metadata=e.metadata),t};var J=class{_name;_onSync;_maxRetentionTime;_queueStore;_forceSyncFallback;_syncInProgress=!1;_requestsAddedDuringSync=!1;constructor(e,{forceSyncFallback:t,onSync:a,maxRetentionTime:r}={}){if(Q.has(e))throw new o("duplicate-queue-name",{name:e});Q.add(e),this._name=e,this._onSync=a||this.replayRequests,this._maxRetentionTime=r||10080,this._forceSyncFallback=!!t,this._queueStore=new H(this._name),this._addSyncListener()}get name(){return this._name}async pushRequest(e){await this._addRequest(e,"push")}async unshiftRequest(e){await this._addRequest(e,"unshift")}async popRequest(){return this._removeRequest("pop")}async shiftRequest(){return this._removeRequest("shift")}async getAll(){let e=await this._queueStore.getAll(),t=Date.now(),a=[];for(let r of e){let e=60*this._maxRetentionTime*1e3;t-r.timestamp>e?await this._queueStore.deleteEntry(r.id):a.push(z(r))}return a}async size(){return await this._queueStore.size()}async _addRequest({request:e,metadata:t,timestamp:a=Date.now()},r){let s={requestData:(await G.fromRequest(e.clone())).toObject(),timestamp:a};switch(t&&(s.metadata=t),r){case"push":await this._queueStore.pushEntry(s);break;case"unshift":await this._queueStore.unshiftEntry(s)}this._syncInProgress?this._requestsAddedDuringSync=!0:await this.registerSync()}async _removeRequest(e){let t,a=Date.now();switch(e){case"pop":t=await this._queueStore.popEntry();break;case"shift":t=await this._queueStore.shiftEntry()}if(t){let r=60*this._maxRetentionTime*1e3;return a-t.timestamp>r?this._removeRequest(e):z(t)}}async replayRequests(){let e;for(;e=await this.shiftRequest();)try{await fetch(e.request.clone())}catch{throw await this.unshiftRequest(e),new o("queue-replay-failed",{name:this._name})}}async registerSync(){if("sync"in self.registration&&!this._forceSyncFallback)try{await self.registration.sync.register(`${V}:${this._name}`)}catch(e){}}_addSyncListener(){"sync"in self.registration&&!this._forceSyncFallback?self.addEventListener("sync",e=>{if(e.tag===`${V}:${this._name}`){let t=async()=>{let t;this._syncInProgress=!0;try{await this._onSync({queue:this})}catch(e){if(e instanceof Error)throw e}finally{this._requestsAddedDuringSync&&!(t&&!e.lastChance)&&await this.registerSync(),this._syncInProgress=!1,this._requestsAddedDuringSync=!1}};e.waitUntil(t())}}):this._onSync({queue:this})}static get _queueNames(){return Q}},X=class{_queue;constructor(e,t){this._queue=new J(e,t)}async fetchDidFail({request:e}){await this._queue.pushRequest({request:e})}};let Y={cacheWillUpdate:async({response:e})=>200===e.status||0===e.status?e:null};function Z(e){return"string"==typeof e?new Request(e):e}var ee=class{event;request;url;params;_cacheKeys={};_strategy;_handlerDeferred;_extendLifetimePromises;_plugins;_pluginStateMap;constructor(e,t){for(let a of(this.event=t.event,this.request=t.request,t.url&&(this.url=t.url,this.params=t.params),this._strategy=e,this._handlerDeferred=new w,this._extendLifetimePromises=[],this._plugins=[...e.plugins],this._pluginStateMap=new Map,this._plugins))this._pluginStateMap.set(a,{});this.event.waitUntil(this._handlerDeferred.promise)}async fetch(e){let{event:t}=this,a=Z(e),r=await this.getPreloadResponse();if(r)return r;let s=this.hasCallback("fetchDidFail")?a.clone():null;try{for(let e of this.iterateCallbacks("requestWillFetch"))a=await e({request:a.clone(),event:t})}catch(e){if(e instanceof Error)throw new o("plugin-error-request-will-fetch",{thrownErrorMessage:e.message})}let i=a.clone();try{let e;for(let r of(e=await fetch(a,"navigate"===a.mode?void 0:this._strategy.fetchOptions),this.iterateCallbacks("fetchDidSucceed")))e=await r({event:t,request:i,response:e});return e}catch(e){throw s&&await this.runCallbacks("fetchDidFail",{error:e,event:t,originalRequest:s.clone(),request:i.clone()}),e}}async fetchAndCachePut(e){let t=await this.fetch(e),a=t.clone();return this.waitUntil(this.cachePut(e,a)),t}async cacheMatch(e){let t,a=Z(e),{cacheName:r,matchOptions:s}=this._strategy,i=await this.getCacheKey(a,"read"),n={...s,cacheName:r};for(let e of(t=await caches.match(i,n),this.iterateCallbacks("cachedResponseWillBeUsed")))t=await e({cacheName:r,matchOptions:s,cachedResponse:t,request:i,event:this.event})||void 0;return t}async cachePut(e,t){let a=Z(e);await h(0);let r=await this.getCacheKey(a,"write");if(!t)throw new o("cache-put-with-no-response",{url:l(r.url)});let s=await this._ensureResponseSafeToCache(t);if(!s)return!1;let{cacheName:i,matchOptions:n}=this._strategy,c=await self.caches.open(i),u=this.hasCallback("cacheDidUpdate"),d=u?await f(c,r.clone(),["__WB_REVISION__"],n):null;try{await c.put(r,u?s.clone():s)}catch(e){if(e instanceof Error)throw"QuotaExceededError"===e.name&&await y(),e}for(let e of this.iterateCallbacks("cacheDidUpdate"))await e({cacheName:i,oldResponse:d,newResponse:s.clone(),request:r,event:this.event});return!0}async getCacheKey(e,t){let a=`${e.url} | ${t}`;if(!this._cacheKeys[a]){let r=e;for(let e of this.iterateCallbacks("cacheKeyWillBeUsed"))r=Z(await e({mode:t,request:r,event:this.event,params:this.params}));this._cacheKeys[a]=r}return this._cacheKeys[a]}hasCallback(e){for(let t of this._strategy.plugins)if(e in t)return!0;return!1}async runCallbacks(e,t){for(let a of this.iterateCallbacks(e))await a(t)}*iterateCallbacks(e){for(let t of this._strategy.plugins)if("function"==typeof t[e]){let a=this._pluginStateMap.get(t),r=r=>{let s={...r,state:a};return t[e](s)};yield r}}waitUntil(e){return this._extendLifetimePromises.push(e),e}async doneWaiting(){let e;for(;e=this._extendLifetimePromises.shift();)await e}destroy(){this._handlerDeferred.resolve(null)}async getPreloadResponse(){if(this.event instanceof FetchEvent&&"navigate"===this.event.request.mode&&"preloadResponse"in this.event)try{let e=await this.event.preloadResponse;if(e)return e}catch(e){return}}async _ensureResponseSafeToCache(e){let t=e,a=!1;for(let e of this.iterateCallbacks("cacheWillUpdate"))if(t=await e({request:this.request,response:t,event:this.event})||void 0,a=!0,!t)break;return!a&&t&&200!==t.status&&(t=void 0),t}},et=class{cacheName;plugins;fetchOptions;matchOptions;constructor(e={}){this.cacheName=n.getRuntimeName(e.cacheName),this.plugins=e.plugins||[],this.fetchOptions=e.fetchOptions,this.matchOptions=e.matchOptions}handle(e){let[t]=this.handleAll(e);return t}handleAll(e){e instanceof FetchEvent&&(e={event:e,request:e.request});let t=e.event,a="string"==typeof e.request?new Request(e.request):e.request,r=new ee(this,e.url?{event:t,request:a,url:e.url,params:e.params}:{event:t,request:a}),s=this._getResponse(r,a,t);return[s,this._awaitComplete(s,r,a,t)]}async _getResponse(e,t,a){let r;await e.runCallbacks("handlerWillStart",{event:a,request:t});try{if(r=await this._handle(t,e),void 0===r||"error"===r.type)throw new o("no-response",{url:t.url})}catch(s){if(s instanceof Error){for(let i of e.iterateCallbacks("handlerDidError"))if(void 0!==(r=await i({error:s,event:a,request:t})))break}if(!r)throw s}for(let s of e.iterateCallbacks("handlerWillRespond"))r=await s({event:a,request:t,response:r});return r}async _awaitComplete(e,t,a,r){let s,i;try{s=await e}catch{}try{await t.runCallbacks("handlerDidRespond",{event:r,request:a,response:s}),await t.doneWaiting()}catch(e){e instanceof Error&&(i=e)}if(await t.runCallbacks("handlerDidComplete",{event:r,request:a,response:s,error:i}),t.destroy(),i)throw i}},ea=class extends et{_networkTimeoutSeconds;constructor(e={}){super(e),this.plugins.some(e=>"cacheWillUpdate"in e)||this.plugins.unshift(Y),this._networkTimeoutSeconds=e.networkTimeoutSeconds||0}async _handle(e,t){let a,r=[],s=[];if(this._networkTimeoutSeconds){let{id:i,promise:n}=this._getTimeoutPromise({request:e,logs:r,handler:t});a=i,s.push(n)}let i=this._getNetworkPromise({timeoutId:a,request:e,logs:r,handler:t});s.push(i);let n=await t.waitUntil((async()=>await t.waitUntil(Promise.race(s))||await i)());if(!n)throw new o("no-response",{url:e.url});return n}_getTimeoutPromise({request:e,logs:t,handler:a}){let r;return{promise:new Promise(t=>{r=setTimeout(async()=>{t(await a.cacheMatch(e))},1e3*this._networkTimeoutSeconds)}),id:r}}async _getNetworkPromise({timeoutId:e,request:t,logs:a,handler:r}){let s,i;try{i=await r.fetchAndCachePut(t)}catch(e){e instanceof Error&&(s=e)}return e&&clearTimeout(e),(s||!i)&&(i=await r.cacheMatch(t)),i}},er=class extends et{_networkTimeoutSeconds;constructor(e={}){super(e),this._networkTimeoutSeconds=e.networkTimeoutSeconds||0}async _handle(e,t){let a,r;try{let a=[t.fetch(e)];if(this._networkTimeoutSeconds){let e=h(1e3*this._networkTimeoutSeconds);a.push(e)}if(!(r=await Promise.race(a)))throw Error(`Timed out the network response after ${this._networkTimeoutSeconds} seconds.`)}catch(e){e instanceof Error&&(a=e)}if(!r)throw new o("no-response",{url:e.url,error:a});return r}};let es=e=>e&&"object"==typeof e?e:{handle:e};var ei=class{handler;match;method;catchHandler;constructor(e,t,a="GET"){this.handler=es(t),this.match=e,this.method=a}setCatchHandler(e){this.catchHandler=es(e)}},en=class e extends et{_fallbackToNetwork;static defaultPrecacheCacheabilityPlugin={cacheWillUpdate:async({response:e})=>!e||e.status>=400?null:e};static copyRedirectedCacheableResponsesPlugin={cacheWillUpdate:async({response:e})=>e.redirected?await A(e):e};constructor(t={}){t.cacheName=n.getPrecacheName(t.cacheName),super(t),this._fallbackToNetwork=!1!==t.fallbackToNetwork,this.plugins.push(e.copyRedirectedCacheableResponsesPlugin)}async _handle(e,t){let a=await t.getPreloadResponse();if(a)return a;let r=await t.cacheMatch(e);return r||(t.event&&"install"===t.event.type?await this._handleInstall(e,t):await this._handleFetch(e,t))}async _handleFetch(e,t){let a,r=t.params||{};if(this._fallbackToNetwork){let s=r.integrity,i=e.integrity,n=!i||i===s;a=await t.fetch(new Request(e,{integrity:"no-cors"!==e.mode?i||s:void 0})),s&&n&&"no-cors"!==e.mode&&(this._useDefaultCacheabilityPluginIfNeeded(),await t.cachePut(e,a.clone()))}else throw new o("missing-precache-entry",{cacheName:this.cacheName,url:e.url});return a}async _handleInstall(e,t){this._useDefaultCacheabilityPluginIfNeeded();let a=await t.fetch(e);if(!await t.cachePut(e,a.clone()))throw new o("bad-precaching-response",{url:e.url,status:a.status});return a}_useDefaultCacheabilityPluginIfNeeded(){let t=null,a=0;for(let[r,s]of this.plugins.entries())s!==e.copyRedirectedCacheableResponsesPlugin&&(s===e.defaultPrecacheCacheabilityPlugin&&(t=r),s.cacheWillUpdate&&a++);0===a?this.plugins.push(e.defaultPrecacheCacheabilityPlugin):a>1&&null!==t&&this.plugins.splice(t,1)}},ec=class extends ei{_allowlist;_denylist;constructor(e,{allowlist:t=[/./],denylist:a=[]}={}){super(e=>this._match(e),e),this._allowlist=t,this._denylist=a}_match({url:e,request:t}){if(t&&"navigate"!==t.mode)return!1;let a=e.pathname+e.search;for(let e of this._denylist)if(e.test(a))return!1;return!!this._allowlist.some(e=>e.test(a))}};let eo=()=>!!self.registration?.navigationPreload,el=e=>{eo()&&self.addEventListener("activate",t=>{t.waitUntil(self.registration.navigationPreload.enable().then(()=>{e&&self.registration.navigationPreload.setHeaderValue(e)}))})},eh=(e,t=[])=>{for(let a of[...e.searchParams.keys()])t.some(e=>e.test(a))&&e.searchParams.delete(a);return e};var eu=class extends ei{constructor(e,t,a){super(({url:t})=>{let a=e.exec(t.href);if(a)return t.origin!==location.origin&&0!==a.index?void 0:a.slice(1)},t,a)}};let ed=e=>{n.updateDetails(e)},ef=e=>{if(!e)throw new o("add-to-cache-list-unexpected-type",{entry:e});if("string"==typeof e){let t=new URL(e,location.href);return{cacheKey:t.href,url:t.href}}let{revision:t,url:a}=e;if(!a)throw new o("add-to-cache-list-unexpected-type",{entry:e});if(!t){let e=new URL(a,location.href);return{cacheKey:e.href,url:e.href}}let r=new URL(a,location.href),s=new URL(a,location.href);return r.searchParams.set("__WB_REVISION__",t),{cacheKey:r.href,url:s.href}};var ew=class{updatedURLs=[];notUpdatedURLs=[];handlerWillStart=async({request:e,state:t})=>{t&&(t.originalRequest=e)};cachedResponseWillBeUsed=async({event:e,state:t,cachedResponse:a})=>{if("install"===e.type&&t?.originalRequest&&t.originalRequest instanceof Request){let e=t.originalRequest.url;a?this.notUpdatedURLs.push(e):this.updatedURLs.push(e)}return a}};let ey=(e,t,a)=>{if("string"==typeof e){let r=new URL(e,location.href);return new ei(({url:e})=>e.href===r.href,t,a)}if(e instanceof RegExp)return new eu(e,t,a);if("function"==typeof e)return new ei(e,t,a);if(e instanceof ei)return e;throw new o("unsupported-route-type",{moduleName:"serwist",funcName:"parseRoute",paramName:"capture"})},ep=async(e,t,a)=>{let r=t.map((e,t)=>({index:t,item:e})),s=async e=>{let t=[];for(;;){let s=r.pop();if(!s)return e(t);let i=await a(s.item);t.push({result:i,index:s.index})}},i=Array.from({length:e},()=>new Promise(s));return(await Promise.all(i)).flat().sort((e,t)=>e.index<t.index?-1:1).map(e=>e.result)},eg=(e,t,a)=>!a.some(a=>e.headers.has(a)&&t.headers.has(a))||a.every(a=>{let r=e.headers.has(a)===t.headers.has(a),s=e.headers.get(a)===t.headers.get(a);return r&&s}),em="undefined"!=typeof navigator&&/^((?!chrome|android).)*safari/i.test(navigator.userAgent),e_=e=>({cacheName:e.cacheName,updatedURL:e.request.url}),ev="cache-entries",eb=e=>{let t=new URL(e,location.href);return t.hash="",t.href};var eR=class{_cacheName;_db=null;constructor(e){this._cacheName=e}_getId(e){return`${this._cacheName}|${eb(e)}`}_upgradeDb(e){let t=e.createObjectStore(ev,{keyPath:"id"});t.createIndex("cacheName","cacheName",{unique:!1}),t.createIndex("timestamp","timestamp",{unique:!1})}_upgradeDbAndDeleteOldDbs(e){this._upgradeDb(e),this._cacheName&&deleteDB(this._cacheName)}async setTimestamp(e,t){e=eb(e);let a={id:this._getId(e),cacheName:this._cacheName,url:e,timestamp:t},r=(await this.getDb()).transaction(ev,"readwrite",{durability:"relaxed"});await r.store.put(a),await r.done}async getTimestamp(e){return(await (await this.getDb()).get(ev,this._getId(e)))?.timestamp}async expireEntries(e,t){let a=await (await this.getDb()).transaction(ev,"readwrite").store.index("timestamp").openCursor(null,"prev"),r=[],s=0;for(;a;){let i=a.value;i.cacheName===this._cacheName&&(e&&i.timestamp<e||t&&s>=t?(a.delete(),r.push(i.url)):s++),a=await a.continue()}return r}async getDb(){return this._db||(this._db=await openDB("serwist-expiration",1,{upgrade:this._upgradeDbAndDeleteOldDbs.bind(this)})),this._db}};let eq=/^\/(\w+\/)?collect/,eE=e=>async({queue:t})=>{let a;for(;a=await t.shiftRequest();){let{request:r,timestamp:s}=a,i=new URL(r.url);try{let t="POST"===r.method?new URLSearchParams(await r.clone().text()):i.searchParams,a=s-(Number(t.get("qt"))||0),n=Date.now()-a;if(t.set("qt",String(n)),e.parameterOverrides)for(let a of Object.keys(e.parameterOverrides)){let r=e.parameterOverrides[a];t.set(a,r)}"function"==typeof e.hitFilter&&e.hitFilter.call(null,t),await fetch(new Request(i.origin+i.pathname,{body:t.toString(),method:"POST",mode:"cors",credentials:"omit",headers:{"Content-Type":"text/plain"}}))}catch(e){throw await t.unshiftRequest(a),e}}},eD=e=>{let t=({url:e})=>"www.google-analytics.com"===e.hostname&&eq.test(e.pathname),a=new er({plugins:[e]});return[new ei(t,a,"GET"),new ei(t,a,"POST")]},eS=e=>new ei(({url:e})=>"www.google-analytics.com"===e.hostname&&"/analytics.js"===e.pathname,new ea({cacheName:e}),"GET"),eP=e=>new ei(({url:e})=>"www.googletagmanager.com"===e.hostname&&"/gtag/js"===e.pathname,new ea({cacheName:e}),"GET"),ek=e=>new ei(({url:e})=>"www.googletagmanager.com"===e.hostname&&"/gtm.js"===e.pathname,new ea({cacheName:e}),"GET"),eC=({serwist:e,cacheName:t,...a})=>{let r=n.getGoogleAnalyticsName(t),s=new X("serwist-google-analytics",{maxRetentionTime:2880,onSync:eE(a)});for(let t of[ek(r),eS(r),eP(r),...eD(s)])e.registerRoute(t)};var eT=class{_fallbackUrls;_serwist;constructor({fallbackUrls:e,serwist:t}){this._fallbackUrls=e,this._serwist=t}async handlerDidError(e){for(let t of this._fallbackUrls)if("string"==typeof t){let e=await this._serwist.matchPrecache(t);if(void 0!==e)return e}else if(t.matcher(e)){let e=await this._serwist.matchPrecache(t.url);if(void 0!==e)return e}}};let eN=(e,t,a)=>{let r,s,i=e.size;if(a&&a>i||t&&t<0)throw new SerwistError("range-not-satisfiable",{size:i,end:a,start:t});return void 0!==t&&void 0!==a?(r=t,s=a+1):void 0!==t&&void 0===a?(r=t,s=i):void 0!==a&&void 0===t&&(r=i-a,s=i),{start:r,end:s}},eI=e=>{let t=e.trim().toLowerCase();if(!t.startsWith("bytes="))throw new SerwistError("unit-must-be-bytes",{normalizedRangeHeader:t});if(t.includes(","))throw new SerwistError("single-range-only",{normalizedRangeHeader:t});let a=/(\d*)-(\d*)/.exec(t);if(!a||!(a[1]||a[2]))throw new SerwistError("invalid-range-values",{normalizedRangeHeader:t});return{start:""===a[1]?void 0:Number(a[1]),end:""===a[2]?void 0:Number(a[2])}};var eL=class extends et{async _handle(e,t){let a,r=await t.cacheMatch(e);if(r);else try{r=await t.fetchAndCachePut(e)}catch(e){e instanceof Error&&(a=e)}if(!r)throw new o("no-response",{url:e.url,error:a});return r}},ex=class extends ei{constructor(e,t){super(({request:a})=>{let r=e.getUrlsToPrecacheKeys();for(let s of function*(e,{directoryIndex:t="index.html",ignoreURLParametersMatching:a=[/^utm_/,/^fbclid$/],cleanURLs:r=!0,urlManipulation:s}={}){let i=new URL(e,location.href);i.hash="",yield i.href;let n=eh(i,a);if(yield n.href,t&&n.pathname.endsWith("/")){let e=new URL(n.href);e.pathname+=t,yield e.href}if(r){let e=new URL(n.href);e.pathname+=".html",yield e.href}if(s)for(let e of s({url:i}))yield e.href}(a.url,t)){let t=r.get(s);if(t)return{cacheKey:t,integrity:e.getIntegrityForPrecacheKey(t)}}},e.precacheStrategy)}},eU=class{_precacheController;constructor({precacheController:e}){this._precacheController=e}cacheKeyWillBeUsed=async({request:e,params:t})=>{let a=t?.cacheKey||this._precacheController.getPrecacheKeyForUrl(e.url);return a?new Request(a,{headers:e.headers}):e}};let eB=(e,t={})=>{let{cacheName:a,plugins:r=[],fetchOptions:s,matchOptions:i,fallbackToNetwork:c,directoryIndex:o,ignoreURLParametersMatching:l,cleanURLs:h,urlManipulation:u,cleanupOutdatedCaches:d,concurrency:f=10,navigateFallback:w,navigateFallbackAllowlist:y,navigateFallbackDenylist:p}=t??{};return{precacheStrategyOptions:{cacheName:n.getPrecacheName(a),plugins:[...r,new eU({precacheController:e})],fetchOptions:s,matchOptions:i,fallbackToNetwork:c},precacheRouteOptions:{directoryIndex:o,ignoreURLParametersMatching:l,cleanURLs:h,urlManipulation:u},precacheMiscOptions:{cleanupOutdatedCaches:d,concurrency:f,navigateFallback:w,navigateFallbackAllowlist:y,navigateFallbackDenylist:p}}};new class{_urlsToCacheKeys=new Map;_urlsToCacheModes=new Map;_cacheKeysToIntegrities=new Map;_concurrentPrecaching;_precacheStrategy;_routes;_defaultHandlerMap;_catchHandler;_requestRules;constructor({precacheEntries:e,precacheOptions:t,skipWaiting:a=!1,importScripts:r,navigationPreload:s=!1,cacheId:i,clientsClaim:n=!1,runtimeCaching:c,offlineAnalyticsConfig:o,disableDevLogs:l=!1,fallbacks:h,requestRules:u}={}){let{precacheStrategyOptions:d,precacheRouteOptions:f,precacheMiscOptions:w}=eB(this,t);if(this._concurrentPrecaching=w.concurrency,this._precacheStrategy=new en(d),this._routes=new Map,this._defaultHandlerMap=new Map,this._requestRules=u,this.handleInstall=this.handleInstall.bind(this),this.handleActivate=this.handleActivate.bind(this),this.handleFetch=this.handleFetch.bind(this),this.handleCache=this.handleCache.bind(this),r&&r.length>0&&self.importScripts(...r),s&&el(),void 0!==i&&ed({prefix:i}),a?self.skipWaiting():self.addEventListener("message",e=>{e.data&&"SKIP_WAITING"===e.data.type&&self.skipWaiting()}),n&&_(),e&&e.length>0&&this.addToPrecacheList(e),w.cleanupOutdatedCaches&&m(d.cacheName),this.registerRoute(new ex(this,f)),w.navigateFallback&&this.registerRoute(new ec(this.createHandlerBoundToUrl(w.navigateFallback),{allowlist:w.navigateFallbackAllowlist,denylist:w.navigateFallbackDenylist})),void 0!==o&&("boolean"==typeof o?o&&eC({serwist:this}):eC({...o,serwist:this})),void 0!==c){if(void 0!==h){let e=new eT({fallbackUrls:h.entries,serwist:this});c.forEach(t=>{t.handler instanceof et&&!t.handler.plugins.some(e=>"handlerDidError"in e)&&t.handler.plugins.push(e)})}for(let e of c)this.registerCapture(e.matcher,e.handler,e.method)}l&&M()}get precacheStrategy(){return this._precacheStrategy}get routes(){return this._routes}addEventListeners(){self.addEventListener("install",this.handleInstall),self.addEventListener("activate",this.handleActivate),self.addEventListener("fetch",this.handleFetch),self.addEventListener("message",this.handleCache)}addToPrecacheList(e){let t=[];for(let a of e){"string"==typeof a?t.push(a):a&&!a.integrity&&void 0===a.revision&&t.push(a.url);let{cacheKey:e,url:r}=ef(a),s="string"!=typeof a&&a.revision?"reload":"default";if(this._urlsToCacheKeys.has(r)&&this._urlsToCacheKeys.get(r)!==e)throw new o("add-to-cache-list-conflicting-entries",{firstEntry:this._urlsToCacheKeys.get(r),secondEntry:e});if("string"!=typeof a&&a.integrity){if(this._cacheKeysToIntegrities.has(e)&&this._cacheKeysToIntegrities.get(e)!==a.integrity)throw new o("add-to-cache-list-conflicting-integrities",{url:r});this._cacheKeysToIntegrities.set(e,a.integrity)}this._urlsToCacheKeys.set(r,e),this._urlsToCacheModes.set(r,s)}t.length>0&&console.warn(`Serwist is precaching URLs without revision info: ${t.join(", ")} | |||
| This is generally NOT safe. Learn more at https://bit.ly/wb-precache`)}handleInstall(e){return this.registerRequestRules(e),v(e,async()=>{let t=new ew;this.precacheStrategy.plugins.push(t),await ep(this._concurrentPrecaching,Array.from(this._urlsToCacheKeys.entries()),async([t,a])=>{let r=this._cacheKeysToIntegrities.get(a),s=this._urlsToCacheModes.get(t),i=new Request(t,{integrity:r,cache:s,credentials:"same-origin"});await Promise.all(this.precacheStrategy.handleAll({event:e,request:i,url:new URL(i.url),params:{cacheKey:a}}))});let{updatedURLs:a,notUpdatedURLs:r}=t;return{updatedURLs:a,notUpdatedURLs:r}})}async registerRequestRules(e){if(this._requestRules&&e?.addRoutes)try{await e.addRoutes(this._requestRules),this._requestRules=void 0}catch(e){throw e}}handleActivate(e){return v(e,async()=>{let e=await self.caches.open(this.precacheStrategy.cacheName),t=await e.keys(),a=new Set(this._urlsToCacheKeys.values()),r=[];for(let s of t)a.has(s.url)||(await e.delete(s),r.push(s.url));return{deletedCacheRequests:r}})}handleFetch(e){let{request:t}=e,a=this.handleRequest({request:t,event:e});a&&e.respondWith(a)}handleCache(e){if(e.data&&"CACHE_URLS"===e.data.type){let{payload:t}=e.data,a=Promise.all(t.urlsToCache.map(t=>{let a;return a="string"==typeof t?new Request(t):new Request(...t),this.handleRequest({request:a,event:e})}));e.waitUntil(a),e.ports?.[0]&&a.then(()=>e.ports[0].postMessage(!0))}}setDefaultHandler(e,t="GET"){this._defaultHandlerMap.set(t,es(e))}setCatchHandler(e){this._catchHandler=es(e)}registerCapture(e,t,a){let r=ey(e,t,a);return this.registerRoute(r),r}registerRoute(e){this._routes.has(e.method)||this._routes.set(e.method,[]),this._routes.get(e.method).push(e)}unregisterRoute(e){if(!this._routes.has(e.method))throw new o("unregister-route-but-not-found-with-method",{method:e.method});let t=this._routes.get(e.method).indexOf(e);if(t>-1)this._routes.get(e.method).splice(t,1);else throw new o("unregister-route-route-not-registered")}getUrlsToPrecacheKeys(){return this._urlsToCacheKeys}getPrecachedUrls(){return[...this._urlsToCacheKeys.keys()]}getPrecacheKeyForUrl(e){let t=new URL(e,location.href);return this._urlsToCacheKeys.get(t.href)}getIntegrityForPrecacheKey(e){return this._cacheKeysToIntegrities.get(e)}async matchPrecache(e){let t=e instanceof Request?e.url:e,a=this.getPrecacheKeyForUrl(t);if(a)return(await self.caches.open(this.precacheStrategy.cacheName)).match(a)}createHandlerBoundToUrl(e){let t=this.getPrecacheKeyForUrl(e);if(!t)throw new o("non-precached-url",{url:e});return a=>(a.request=new Request(e),a.params={cacheKey:t,...a.params},this.precacheStrategy.handle(a))}handleRequest({request:e,event:t}){let a,r=new URL(e.url,location.href);if(!r.protocol.startsWith("http"))return;let s=r.origin===location.origin,{params:i,route:n}=this.findMatchingRoute({event:t,request:e,sameOrigin:s,url:r}),c=n?.handler,o=e.method;if(!c&&this._defaultHandlerMap.has(o)&&(c=this._defaultHandlerMap.get(o)),!c)return;try{a=c.handle({url:r,request:e,event:t,params:i})}catch(e){a=Promise.reject(e)}let l=n?.catchHandler;return a instanceof Promise&&(this._catchHandler||l)&&(a=a.catch(async a=>{if(l)try{return await l.handle({url:r,request:e,event:t,params:i})}catch(e){e instanceof Error&&(a=e)}if(this._catchHandler)return this._catchHandler.handle({url:r,request:e,event:t});throw a})),a}findMatchingRoute({url:e,sameOrigin:t,request:a,event:r}){for(let s of this._routes.get(a.method)||[]){let i,n=s.match({url:e,sameOrigin:t,request:a,event:r});if(n)return Array.isArray(i=n)&&0===i.length||n.constructor===Object&&0===Object.keys(n).length?i=void 0:"boolean"==typeof n&&(i=void 0),{route:s,params:i}}return{}}}({precacheEntries:[{'revision':'af2b6e592c9167a3e6669085aae379db','url':'/_next/static/_UZhIFq9bUorWxxdu2nOx/_buildManifest.js'},{'revision':'b6652df95db52feb4daf4eca35380933','url':'/_next/static/_UZhIFq9bUorWxxdu2nOx/_ssgManifest.js'},{'revision':null,'url':'/_next/static/chunks/121.991963838bfc92a5.js'},{'revision':null,'url':'/_next/static/chunks/164f4fb6.f3faa5d5aba5cf04.js'},{'revision':null,'url':'/_next/static/chunks/191-c601373cc6131fd7.js'},{'revision':null,'url':'/_next/static/chunks/211-8278580b778b3a39.js'},{'revision':null,'url':'/_next/static/chunks/221.8cea1bbd8d7a75d0.js'},{'revision':null,'url':'/_next/static/chunks/245.71c45fa6b1e823c4.js'},{'revision':null,'url':'/_next/static/chunks/255-d7d1e27411e8ea37.js'},{'revision':null,'url':'/_next/static/chunks/2f0b94e8.d674f0a035f460ca.js'},{'revision':null,'url':'/_next/static/chunks/309.45a3262ac4bcca2e.js'},{'revision':null,'url':'/_next/static/chunks/34.eca2ad36e2065dcc.js'},{'revision':null,'url':'/_next/static/chunks/399.31ee657513a3dde2.js'},{'revision':null,'url':'/_next/static/chunks/44530001-09199bfb889c2833.js'},{'revision':null,'url':'/_next/static/chunks/4bd1b696-b5c413a68ae9f40b.js'},{'revision':null,'url':'/_next/static/chunks/642.b0bb6c17effd6d1a.js'},{'revision':null,'url':'/_next/static/chunks/745-5cbe0b834fa13c50.js'},{'revision':null,'url':'/_next/static/chunks/746-c335b885cf0977cc.js'},{'revision':null,'url':'/_next/static/chunks/751.b87576b52bb9f4d1.js'},{'revision':null,'url':'/_next/static/chunks/780.6de6cb96b57fe026.js'},{'revision':null,'url':'/_next/static/chunks/797-0c10a3f91f00b70b.js'},{'revision':null,'url':'/_next/static/chunks/822.e5a25ff0c78b4017.js'},{'revision':null,'url':'/_next/static/chunks/883ee446.8f8323ee7b61fbb5.js'},{'revision':null,'url':'/_next/static/chunks/ad2866b8.6b876e1655c11f64.js'},{'revision':null,'url':'/_next/static/chunks/app/_not-found/page-53439e48b6308ac6.js'},{'revision':null,'url':'/_next/static/chunks/app/api/chat/route-b4f3924ac733b034.js'},{'revision':null,'url':'/_next/static/chunks/app/api/chats/%5Bid%5D/participants/route-b8c2aa3fc4ba663d.js'},{'revision':null,'url':'/_next/static/chunks/app/api/chats/all/route-8057f7cd2376b981.js'},{'revision':null,'url':'/_next/static/chunks/app/api/chats/route-22ca0d4364958556.js'},{'revision':null,'url':'/_next/static/chunks/app/api/clerk/webhook/route-d3bd95716cd4028b.js'},{'revision':null,'url':'/_next/static/chunks/app/api/embeddings/route-8fa56ba6811ae879.js'},{'revision':null,'url':'/_next/static/chunks/app/api/health/route-0ef5d711349c1b67.js'},{'revision':null,'url':'/_next/static/chunks/app/layout-29e2f87ef55d0c37.js'},{'revision':null,'url':'/_next/static/chunks/app/manifest.webmanifest/route-3596db319c2d2b56.js'},{'revision':null,'url':'/_next/static/chunks/app/offline/page-f761a3156b61eb05.js'},{'revision':null,'url':'/_next/static/chunks/app/page-17ae59c2740e343f.js'},{'revision':null,'url':'/_next/static/chunks/app/search/%5Bid%5D/page-7e810aaa5bf4e9c0.js'},{'revision':null,'url':'/_next/static/chunks/bc98253f.a20b3a3cf1b114d6.js'},{'revision':null,'url':'/_next/static/chunks/c36f3faa.abb912aa7b92c8b5.js'},{'revision':null,'url':'/_next/static/chunks/d3ac728e-2af04ca4a833bf30.js'},{'revision':null,'url':'/_next/static/chunks/dc112a36-9a670afd7d3140fd.js'},{'revision':null,'url':'/_next/static/chunks/framework-6e3d659ca9a17c7d.js'},{'revision':null,'url':'/_next/static/chunks/main-app-103a28f346eee8b8.js'},{'revision':null,'url':'/_next/static/chunks/main-bccdb076287131f3.js'},{'revision':null,'url':'/_next/static/chunks/pages/_app-8e94039938385921.js'},{'revision':null,'url':'/_next/static/chunks/pages/_error-7b2d139042a6a5ab.js'},{'revision':'846118c33b2c0e922d7b3a7676f81f6f','url':'/_next/static/chunks/polyfills-42372ed130431b0a.js'},{'revision':null,'url':'/_next/static/chunks/webpack-5e08260e240519cc.js'},{'revision':null,'url':'/_next/static/css/1f6e4f9283d1476a.css'},{'revision':null,'url':'/_next/static/css/2f46e0db0d4a3aed.css'},{'revision':null,'url':'/_next/static/css/4183e00ad0e88413.css'},{'revision':null,'url':'/_next/static/css/a67336182a0a18f5.css'},{'revision':null,'url':'/_next/static/css/c35610c794fcbaaa.css'},{'revision':'be7c930fceb794521be0a68e113a71d8','url':'/_next/static/media/034d78ad42e9620c-s.woff2'},{'revision':'b550bca8934bd86812d1f5e28c9cc1de','url':'/_next/static/media/0484562807a97172-s.p.woff2'},{'revision':'9dda5cfc9a46f256d0e131bb535e46f8','url':'/_next/static/media/19cfc7226ec3afaa-s.woff2'},{'revision':'4e2553027f1d60eff32898367dd4d541','url':'/_next/static/media/21350d82a1f187e9-s.woff2'},{'revision':'69d9d2cdadeab7225297d50fc8e48e8b','url':'/_next/static/media/29a4aea02fdee119-s.woff2'},{'revision':'9e3ecbe4bb4c6f0b71adc1cd481c2bdc','url':'/_next/static/media/29e7bbdce9332268-s.woff2'},{'revision':'792477d09826b11d1e5a611162c9797a','url':'/_next/static/media/8888a3826f4a3af4-s.p.woff2'},{'revision':'01ba6c2a184b8cba08b0d57167664d75','url':'/_next/static/media/8e9860b6e62d6359-s.woff2'},{'revision':null,'url':'/_next/static/media/KaTeX_AMS-Regular.1608a09b.woff'},{'revision':null,'url':'/_next/static/media/KaTeX_AMS-Regular.4aafdb68.ttf'},{'revision':null,'url':'/_next/static/media/KaTeX_AMS-Regular.a79f1c31.woff2'},{'revision':null,'url':'/_next/static/media/KaTeX_Caligraphic-Bold.b6770918.woff'},{'revision':null,'url':'/_next/static/media/KaTeX_Caligraphic-Bold.cce5b8ec.ttf'},{'revision':null,'url':'/_next/static/media/KaTeX_Caligraphic-Bold.ec17d132.woff2'},{'revision':null,'url':'/_next/static/media/KaTeX_Caligraphic-Regular.07ef19e7.ttf'},{'revision':null,'url':'/_next/static/media/KaTeX_Caligraphic-Regular.55fac258.woff2'},{'revision':null,'url':'/_next/static/media/KaTeX_Caligraphic-Regular.dad44a7f.woff'},{'revision':null,'url':'/_next/static/media/KaTeX_Fraktur-Bold.9f256b85.woff'},{'revision':null,'url':'/_next/static/media/KaTeX_Fraktur-Bold.b18f59e1.ttf'},{'revision':null,'url':'/_next/static/media/KaTeX_Fraktur-Bold.d42a5579.woff2'},{'revision':null,'url':'/_next/static/media/KaTeX_Fraktur-Regular.7c187121.woff'},{'revision':null,'url':'/_next/static/media/KaTeX_Fraktur-Regular.d3c882a6.woff2'},{'revision':null,'url':'/_next/static/media/KaTeX_Fraktur-Regular.ed38e79f.ttf'},{'revision':null,'url':'/_next/static/media/KaTeX_Main-Bold.b74a1a8b.ttf'},{'revision':null,'url':'/_next/static/media/KaTeX_Main-Bold.c3fb5ac2.woff2'},{'revision':null,'url':'/_next/static/media/KaTeX_Main-Bold.d181c465.woff'},{'revision':null,'url':'/_next/static/media/KaTeX_Main-BoldItalic.6f2bb1df.woff2'},{'revision':null,'url':'/_next/static/media/KaTeX_Main-BoldItalic.70d8b0a5.ttf'},{'revision':null,'url':'/_next/static/media/KaTeX_Main-BoldItalic.e3f82f9d.woff'},{'revision':null,'url':'/_next/static/media/KaTeX_Main-Italic.47373d1e.ttf'},{'revision':null,'url':'/_next/static/media/KaTeX_Main-Italic.8916142b.woff2'},{'revision':null,'url':'/_next/static/media/KaTeX_Main-Italic.9024d815.woff'},{'revision':null,'url':'/_next/static/media/KaTeX_Main-Regular.0462f03b.woff2'},{'revision':null,'url':'/_next/static/media/KaTeX_Main-Regular.7f51fe03.woff'},{'revision':null,'url':'/_next/static/media/KaTeX_Main-Regular.b7f8fe9b.ttf'},{'revision':null,'url':'/_next/static/media/KaTeX_Math-BoldItalic.572d331f.woff2'},{'revision':null,'url':'/_next/static/media/KaTeX_Math-BoldItalic.a879cf83.ttf'},{'revision':null,'url':'/_next/static/media/KaTeX_Math-BoldItalic.f1035d8d.woff'},{'revision':null,'url':'/_next/static/media/KaTeX_Math-Italic.5295ba48.woff'},{'revision':null,'url':'/_next/static/media/KaTeX_Math-Italic.939bc644.ttf'},{'revision':null,'url':'/_next/static/media/KaTeX_Math-Italic.f28c23ac.woff2'},{'revision':null,'url':'/_next/static/media/KaTeX_SansSerif-Bold.8c5b5494.woff2'},{'revision':null,'url':'/_next/static/media/KaTeX_SansSerif-Bold.94e1e8dc.ttf'},{'revision':null,'url':'/_next/static/media/KaTeX_SansSerif-Bold.bf59d231.woff'},{'revision':null,'url':'/_next/static/media/KaTeX_SansSerif-Italic.3b1e59b3.woff2'},{'revision':null,'url':'/_next/static/media/KaTeX_SansSerif-Italic.7c9bc82b.woff'},{'revision':null,'url':'/_next/static/media/KaTeX_SansSerif-Italic.b4c20c84.ttf'},{'revision':null,'url':'/_next/static/media/KaTeX_SansSerif-Regular.74048478.woff'},{'revision':null,'url':'/_next/static/media/KaTeX_SansSerif-Regular.ba21ed5f.woff2'},{'revision':null,'url':'/_next/static/media/KaTeX_SansSerif-Regular.d4d7ba48.ttf'},{'revision':null,'url':'/_next/static/media/KaTeX_Script-Regular.03e9641d.woff2'},{'revision':null,'url':'/_next/static/media/KaTeX_Script-Regular.07505710.woff'},{'revision':null,'url':'/_next/static/media/KaTeX_Script-Regular.fe9cbbe1.ttf'},{'revision':null,'url':'/_next/static/media/KaTeX_Size1-Regular.e1e279cb.woff'},{'revision':null,'url':'/_next/static/media/KaTeX_Size1-Regular.eae34984.woff2'},{'revision':null,'url':'/_next/static/media/KaTeX_Size1-Regular.fabc004a.ttf'},{'revision':null,'url':'/_next/static/media/KaTeX_Size2-Regular.57727022.woff'},{'revision':null,'url':'/_next/static/media/KaTeX_Size2-Regular.5916a24f.woff2'},{'revision':null,'url':'/_next/static/media/KaTeX_Size2-Regular.d6b476ec.ttf'},{'revision':null,'url':'/_next/static/media/KaTeX_Size3-Regular.9acaf01c.woff'},{'revision':null,'url':'/_next/static/media/KaTeX_Size3-Regular.a144ef58.ttf'},{'revision':null,'url':'/_next/static/media/KaTeX_Size3-Regular.b4230e7e.woff2'},{'revision':null,'url':'/_next/static/media/KaTeX_Size4-Regular.10d95fd3.woff2'},{'revision':null,'url':'/_next/static/media/KaTeX_Size4-Regular.7a996c9d.woff'},{'revision':null,'url':'/_next/static/media/KaTeX_Size4-Regular.fbccdabe.ttf'},{'revision':null,'url':'/_next/static/media/KaTeX_Typewriter-Regular.6258592b.woff'},{'revision':null,'url':'/_next/static/media/KaTeX_Typewriter-Regular.a8709e36.woff2'},{'revision':null,'url':'/_next/static/media/KaTeX_Typewriter-Regular.d97aaf4a.ttf'},{'revision':'d3aa06d13d3cf9c0558927051f3cb948','url':'/_next/static/media/a1386beebedccca4-s.woff2'},{'revision':'0bd523f6049956faaf43c254a719d06a','url':'/_next/static/media/b957ea75a84b6ea7-s.p.woff2'},{'revision':'9e494903d6b0ffec1a1e14d34427d44d','url':'/_next/static/media/ba9851c3c22cd980-s.woff2'},{'revision':'5a1b7c983a9dc0a87a2ff138e07ae822','url':'/_next/static/media/c3bc380753a8436c-s.woff2'},{'revision':'027a89e9ab733a145db70f09b8a18b42','url':'/_next/static/media/c5fe6dc8356a8c31-s.woff2'},{'revision':'9516f567cd80b0f418bba2f1299ed6d1','url':'/_next/static/media/db911767852bc875-s.woff2'},{'revision':'d54db44de5ccb18886ece2fda72bdfe0','url':'/_next/static/media/df0a9ae256c0569c-s.woff2'},{'revision':'65850a373e258f1c897a2b3d75eb74de','url':'/_next/static/media/e4af272ccee01ff0-s.p.woff2'},{'revision':'43751174b6b810eb169101a20d8c26f8','url':'/_next/static/media/eafabf029ad39a43-s.p.woff2'},{'revision':'63af7d5e18e585fad8d0220e5d551da1','url':'/_next/static/media/f10b8e9d91f3edcb-s.woff2'},{'revision':'f2a04185547c36abfa589651236a9849','url':'/_next/static/media/fe0777f1195381cb-s.woff2'},{'revision':'460f55cf1456f5a201f259a4eb607989','url':'/icons/apple-touch-icon.png'},{'revision':'69784622e4b55d2666c5180fb954d781','url':'/icons/icon-192x192.png'},{'revision':'ab07c93bfbd862c758c4d6d31085a6db','url':'/icons/icon-512x512-maskable.png'},{'revision':'f1b0e1527b676413a8b8e0154f671984','url':'/icons/icon-512x512.png'},{'revision':'2ed79e1d8607156994a2a6462563d7f0','url':'/images/Q zoom.json'},{'revision':'d088f99e3a3f1b7eaec384f36b0866d2','url':'/images/Q.json'},{'revision':'b14dbca44bb366d8499ae9a9b24a104f','url':'/images/eva-logo.png'},{'revision':'8f6cf4c9ec412fe201f80e2d23445aa9','url':'/images/logo.svg'},{'revision':'ab57101a81d25f409febeed6eb7e32bf','url':'/images/opengraph-image.png'}],skipWaiting:!1,clientsClaim:!1,navigationPreload:!1,runtimeCaching:[{matcher:/\.(?:js|css|woff2?|png|jpg|jpeg|svg|gif|ico)$/,handler:new eL({cacheName:"static-assets"})},{matcher:e=>{let{url:t,request:a}=e,r=t.pathname.startsWith("/api/"),s="/api/chat"===t.pathname&&"POST"===a.method||"/api/chats/all"===t.pathname&&"DELETE"===a.method;return r&&!s},handler:new ea({cacheName:"api-cache",networkTimeoutSeconds:5})},{matcher:e=>{let{request:t}=e;return"navigate"===t.mode},handler:new ea({cacheName:"pages-cache",networkTimeoutSeconds:5,plugins:[{handlerDidError:async()=>caches.match("/offline")}]})}]}).addEventListeners(),self.addEventListener("push",e=>{console.log("[Service Worker] Push Received.",e)}),self.addEventListener("sync",e=>{console.log("[Service Worker] Background Sync.",e)})})(); No newline at end of file | |||
| This is generally NOT safe. Learn more at https://bit.ly/wb-precache`)}handleInstall(e){return this.registerRequestRules(e),v(e,async()=>{let t=new ew;this.precacheStrategy.plugins.push(t),await ep(this._concurrentPrecaching,Array.from(this._urlsToCacheKeys.entries()),async([t,a])=>{let r=this._cacheKeysToIntegrities.get(a),s=this._urlsToCacheModes.get(t),i=new Request(t,{integrity:r,cache:s,credentials:"same-origin"});await Promise.all(this.precacheStrategy.handleAll({event:e,request:i,url:new URL(i.url),params:{cacheKey:a}}))});let{updatedURLs:a,notUpdatedURLs:r}=t;return{updatedURLs:a,notUpdatedURLs:r}})}async registerRequestRules(e){if(this._requestRules&&e?.addRoutes)try{await e.addRoutes(this._requestRules),this._requestRules=void 0}catch(e){throw e}}handleActivate(e){return v(e,async()=>{let e=await self.caches.open(this.precacheStrategy.cacheName),t=await e.keys(),a=new Set(this._urlsToCacheKeys.values()),r=[];for(let s of t)a.has(s.url)||(await e.delete(s),r.push(s.url));return{deletedCacheRequests:r}})}handleFetch(e){let{request:t}=e,a=this.handleRequest({request:t,event:e});a&&e.respondWith(a)}handleCache(e){if(e.data&&"CACHE_URLS"===e.data.type){let{payload:t}=e.data,a=Promise.all(t.urlsToCache.map(t=>{let a;return a="string"==typeof t?new Request(t):new Request(...t),this.handleRequest({request:a,event:e})}));e.waitUntil(a),e.ports?.[0]&&a.then(()=>e.ports[0].postMessage(!0))}}setDefaultHandler(e,t="GET"){this._defaultHandlerMap.set(t,es(e))}setCatchHandler(e){this._catchHandler=es(e)}registerCapture(e,t,a){let r=ey(e,t,a);return this.registerRoute(r),r}registerRoute(e){this._routes.has(e.method)||this._routes.set(e.method,[]),this._routes.get(e.method).push(e)}unregisterRoute(e){if(!this._routes.has(e.method))throw new o("unregister-route-but-not-found-with-method",{method:e.method});let t=this._routes.get(e.method).indexOf(e);if(t>-1)this._routes.get(e.method).splice(t,1);else throw new o("unregister-route-route-not-registered")}getUrlsToPrecacheKeys(){return this._urlsToCacheKeys}getPrecachedUrls(){return[...this._urlsToCacheKeys.keys()]}getPrecacheKeyForUrl(e){let t=new URL(e,location.href);return this._urlsToCacheKeys.get(t.href)}getIntegrityForPrecacheKey(e){return this._cacheKeysToIntegrities.get(e)}async matchPrecache(e){let t=e instanceof Request?e.url:e,a=this.getPrecacheKeyForUrl(t);if(a)return(await self.caches.open(this.precacheStrategy.cacheName)).match(a)}createHandlerBoundToUrl(e){let t=this.getPrecacheKeyForUrl(e);if(!t)throw new o("non-precached-url",{url:e});return a=>(a.request=new Request(e),a.params={cacheKey:t,...a.params},this.precacheStrategy.handle(a))}handleRequest({request:e,event:t}){let a,r=new URL(e.url,location.href);if(!r.protocol.startsWith("http"))return;let s=r.origin===location.origin,{params:i,route:n}=this.findMatchingRoute({event:t,request:e,sameOrigin:s,url:r}),c=n?.handler,o=e.method;if(!c&&this._defaultHandlerMap.has(o)&&(c=this._defaultHandlerMap.get(o)),!c)return;try{a=c.handle({url:r,request:e,event:t,params:i})}catch(e){a=Promise.reject(e)}let l=n?.catchHandler;return a instanceof Promise&&(this._catchHandler||l)&&(a=a.catch(async a=>{if(l)try{return await l.handle({url:r,request:e,event:t,params:i})}catch(e){e instanceof Error&&(a=e)}if(this._catchHandler)return this._catchHandler.handle({url:r,request:e,event:t});throw a})),a}findMatchingRoute({url:e,sameOrigin:t,request:a,event:r}){for(let s of this._routes.get(a.method)||[]){let i,n=s.match({url:e,sameOrigin:t,request:a,event:r});if(n)return Array.isArray(i=n)&&0===i.length||n.constructor===Object&&0===Object.keys(n).length?i=void 0:"boolean"==typeof n&&(i=void 0),{route:s,params:i}}return{}}}({precacheEntries:[{'revision':null,'url':'/_next/static/chunks/1463-9fbf44fc07aec709.js'},{'revision':null,'url':'/_next/static/chunks/164f4fb6.ce777fe0c2f313d4.js'},{'revision':null,'url':'/_next/static/chunks/1751-a7421f933b645f53.js'},{'revision':null,'url':'/_next/static/chunks/2121.224732b1794a9682.js'},{'revision':null,'url':'/_next/static/chunks/2211-9af661711aa18c6d.js'},{'revision':null,'url':'/_next/static/chunks/245.71c45fa6b1e823c4.js'},{'revision':null,'url':'/_next/static/chunks/2642.376b3c421b31c78e.js'},{'revision':null,'url':'/_next/static/chunks/2f0b94e8.9fae400113b2869a.js'},{'revision':null,'url':'/_next/static/chunks/4221.e8dc382e3f6203c5.js'},{'revision':null,'url':'/_next/static/chunks/4309.5568f859d1e3347b.js'},{'revision':null,'url':'/_next/static/chunks/44530001-2dcabf4063e0dc0d.js'},{'revision':null,'url':'/_next/static/chunks/47-f1f887d9590ad0ae.js'},{'revision':null,'url':'/_next/static/chunks/4745-3a6bac70cc179378.js'},{'revision':null,'url':'/_next/static/chunks/4751.e4c42f792ab47d1a.js'},{'revision':null,'url':'/_next/static/chunks/4bd1b696-f242fc90bae6ac3d.js'},{'revision':null,'url':'/_next/static/chunks/5255-999008fc1c78c3ef.js'},{'revision':null,'url':'/_next/static/chunks/6399.9dbce694e39ce768.js'},{'revision':null,'url':'/_next/static/chunks/7034.85f74aed4274c767.js'},{'revision':null,'url':'/_next/static/chunks/7797-93c0d2f54719fac4.js'},{'revision':null,'url':'/_next/static/chunks/8032.7f14d4cd7ad780ed.js'},{'revision':null,'url':'/_next/static/chunks/822.e5a25ff0c78b4017.js'},{'revision':null,'url':'/_next/static/chunks/883ee446.e78f619846db8225.js'},{'revision':null,'url':'/_next/static/chunks/9191-a0cfc2cc93231534.js'},{'revision':null,'url':'/_next/static/chunks/ad2866b8.1fc071285e350c45.js'},{'revision':null,'url':'/_next/static/chunks/app/_not-found/page-72fcca513fff4e0b.js'},{'revision':null,'url':'/_next/static/chunks/app/api/chat/route-6a93eee733cb7f4d.js'},{'revision':null,'url':'/_next/static/chunks/app/api/chats/%5Bid%5D/participants/route-6d26e467a88cfdb3.js'},{'revision':null,'url':'/_next/static/chunks/app/api/chats/all/route-b1e75d303332e462.js'},{'revision':null,'url':'/_next/static/chunks/app/api/chats/route-f33f89c750ea5319.js'},{'revision':null,'url':'/_next/static/chunks/app/api/clerk/webhook/route-b10a26f927783dc4.js'},{'revision':null,'url':'/_next/static/chunks/app/api/embeddings/route-437e73e3ddf89d89.js'},{'revision':null,'url':'/_next/static/chunks/app/api/health/route-d562b6412875a563.js'},{'revision':null,'url':'/_next/static/chunks/app/auth/discord/page-7d8d675b37f835f0.js'},{'revision':null,'url':'/_next/static/chunks/app/discord-auth/page-627cc9c32197466c.js'},{'revision':null,'url':'/_next/static/chunks/app/layout-03110d31e9788763.js'},{'revision':null,'url':'/_next/static/chunks/app/manifest.webmanifest/route-ed45a02dfee77be3.js'},{'revision':null,'url':'/_next/static/chunks/app/offline/page-cc51ffd178cab1d1.js'},{'revision':null,'url':'/_next/static/chunks/app/page-ef28896005743180.js'},{'revision':null,'url':'/_next/static/chunks/app/search/%5Bid%5D/page-4f9cfc13e0ea617b.js'},{'revision':null,'url':'/_next/static/chunks/app/sign-in/discord/page-1c84793792fe7d77.js'},{'revision':null,'url':'/_next/static/chunks/app/sign-in/page-bff6eb5de63840bb.js'},{'revision':null,'url':'/_next/static/chunks/app/sso-callback/page-00f41728b5cbfb00.js'},{'revision':null,'url':'/_next/static/chunks/bc98253f.a20b3a3cf1b114d6.js'},{'revision':null,'url':'/_next/static/chunks/c36f3faa.abb912aa7b92c8b5.js'},{'revision':null,'url':'/_next/static/chunks/d3ac728e-90b4132adc93dda2.js'},{'revision':null,'url':'/_next/static/chunks/dc112a36-18909a95e93ec969.js'},{'revision':null,'url':'/_next/static/chunks/fc2f6fa8-f85eea3e43dc0331.js'},{'revision':null,'url':'/_next/static/chunks/framework-1139d96b397cc8d6.js'},{'revision':null,'url':'/_next/static/chunks/main-794f106834521f59.js'},{'revision':null,'url':'/_next/static/chunks/main-app-a21f74533f7d6029.js'},{'revision':null,'url':'/_next/static/chunks/pages/_app-5d1abe03d322390c.js'},{'revision':null,'url':'/_next/static/chunks/pages/_error-3b2a1d523de49635.js'},{'revision':'846118c33b2c0e922d7b3a7676f81f6f','url':'/_next/static/chunks/polyfills-42372ed130431b0a.js'},{'revision':null,'url':'/_next/static/chunks/webpack-8032958514bcd4bd.js'},{'revision':null,'url':'/_next/static/css/2f46e0db0d4a3aed.css'},{'revision':null,'url':'/_next/static/css/4183e00ad0e88413.css'},{'revision':null,'url':'/_next/static/css/7e0f36defcfd41e8.css'},{'revision':null,'url':'/_next/static/css/a67336182a0a18f5.css'},{'revision':null,'url':'/_next/static/css/c35610c794fcbaaa.css'},{'revision':'b0d60226e43cc1d1624d9c886a86535f','url':'/_next/static/iBwKo2BLnMv3o74Do-MWa/_buildManifest.js'},{'revision':'b6652df95db52feb4daf4eca35380933','url':'/_next/static/iBwKo2BLnMv3o74Do-MWa/_ssgManifest.js'},{'revision':'be7c930fceb794521be0a68e113a71d8','url':'/_next/static/media/034d78ad42e9620c-s.woff2'},{'revision':'b550bca8934bd86812d1f5e28c9cc1de','url':'/_next/static/media/0484562807a97172-s.p.woff2'},{'revision':'9dda5cfc9a46f256d0e131bb535e46f8','url':'/_next/static/media/19cfc7226ec3afaa-s.woff2'},{'revision':'4e2553027f1d60eff32898367dd4d541','url':'/_next/static/media/21350d82a1f187e9-s.woff2'},{'revision':'69d9d2cdadeab7225297d50fc8e48e8b','url':'/_next/static/media/29a4aea02fdee119-s.woff2'},{'revision':'9e3ecbe4bb4c6f0b71adc1cd481c2bdc','url':'/_next/static/media/29e7bbdce9332268-s.woff2'},{'revision':'792477d09826b11d1e5a611162c9797a','url':'/_next/static/media/8888a3826f4a3af4-s.p.woff2'},{'revision':'01ba6c2a184b8cba08b0d57167664d75','url':'/_next/static/media/8e9860b6e62d6359-s.woff2'},{'revision':null,'url':'/_next/static/media/KaTeX_AMS-Regular.1608a09b.woff'},{'revision':null,'url':'/_next/static/media/KaTeX_AMS-Regular.4aafdb68.ttf'},{'revision':null,'url':'/_next/static/media/KaTeX_AMS-Regular.a79f1c31.woff2'},{'revision':null,'url':'/_next/static/media/KaTeX_Caligraphic-Bold.b6770918.woff'},{'revision':null,'url':'/_next/static/media/KaTeX_Caligraphic-Bold.cce5b8ec.ttf'},{'revision':null,'url':'/_next/static/media/KaTeX_Caligraphic-Bold.ec17d132.woff2'},{'revision':null,'url':'/_next/static/media/KaTeX_Caligraphic-Regular.07ef19e7.ttf'},{'revision':null,'url':'/_next/static/media/KaTeX_Caligraphic-Regular.55fac258.woff2'},{'revision':null,'url':'/_next/static/media/KaTeX_Caligraphic-Regular.dad44a7f.woff'},{'revision':null,'url':'/_next/static/media/KaTeX_Fraktur-Bold.9f256b85.woff'},{'revision':null,'url':'/_next/static/media/KaTeX_Fraktur-Bold.b18f59e1.ttf'},{'revision':null,'url':'/_next/static/media/KaTeX_Fraktur-Bold.d42a5579.woff2'},{'revision':null,'url':'/_next/static/media/KaTeX_Fraktur-Regular.7c187121.woff'},{'revision':null,'url':'/_next/static/media/KaTeX_Fraktur-Regular.d3c882a6.woff2'},{'revision':null,'url':'/_next/static/media/KaTeX_Fraktur-Regular.ed38e79f.ttf'},{'revision':null,'url':'/_next/static/media/KaTeX_Main-Bold.b74a1a8b.ttf'},{'revision':null,'url':'/_next/static/media/KaTeX_Main-Bold.c3fb5ac2.woff2'},{'revision':null,'url':'/_next/static/media/KaTeX_Main-Bold.d181c465.woff'},{'revision':null,'url':'/_next/static/media/KaTeX_Main-BoldItalic.6f2bb1df.woff2'},{'revision':null,'url':'/_next/static/media/KaTeX_Main-BoldItalic.70d8b0a5.ttf'},{'revision':null,'url':'/_next/static/media/KaTeX_Main-BoldItalic.e3f82f9d.woff'},{'revision':null,'url':'/_next/static/media/KaTeX_Main-Italic.47373d1e.ttf'},{'revision':null,'url':'/_next/static/media/KaTeX_Main-Italic.8916142b.woff2'},{'revision':null,'url':'/_next/static/media/KaTeX_Main-Italic.9024d815.woff'},{'revision':null,'url':'/_next/static/media/KaTeX_Main-Regular.0462f03b.woff2'},{'revision':null,'url':'/_next/static/media/KaTeX_Main-Regular.7f51fe03.woff'},{'revision':null,'url':'/_next/static/media/KaTeX_Main-Regular.b7f8fe9b.ttf'},{'revision':null,'url':'/_next/static/media/KaTeX_Math-BoldItalic.572d331f.woff2'},{'revision':null,'url':'/_next/static/media/KaTeX_Math-BoldItalic.a879cf83.ttf'},{'revision':null,'url':'/_next/static/media/KaTeX_Math-BoldItalic.f1035d8d.woff'},{'revision':null,'url':'/_next/static/media/KaTeX_Math-Italic.5295ba48.woff'},{'revision':null,'url':'/_next/static/media/KaTeX_Math-Italic.939bc644.ttf'},{'revision':null,'url':'/_next/static/media/KaTeX_Math-Italic.f28c23ac.woff2'},{'revision':null,'url':'/_next/static/media/KaTeX_SansSerif-Bold.8c5b5494.woff2'},{'revision':null,'url':'/_next/static/media/KaTeX_SansSerif-Bold.94e1e8dc.ttf'},{'revision':null,'url':'/_next/static/media/KaTeX_SansSerif-Bold.bf59d231.woff'},{'revision':null,'url':'/_next/static/media/KaTeX_SansSerif-Italic.3b1e59b3.woff2'},{'revision':null,'url':'/_next/static/media/KaTeX_SansSerif-Italic.7c9bc82b.woff'},{'revision':null,'url':'/_next/static/media/KaTeX_SansSerif-Italic.b4c20c84.ttf'},{'revision':null,'url':'/_next/static/media/KaTeX_SansSerif-Regular.74048478.woff'},{'revision':null,'url':'/_next/static/media/KaTeX_SansSerif-Regular.ba21ed5f.woff2'},{'revision':null,'url':'/_next/static/media/KaTeX_SansSerif-Regular.d4d7ba48.ttf'},{'revision':null,'url':'/_next/static/media/KaTeX_Script-Regular.03e9641d.woff2'},{'revision':null,'url':'/_next/static/media/KaTeX_Script-Regular.07505710.woff'},{'revision':null,'url':'/_next/static/media/KaTeX_Script-Regular.fe9cbbe1.ttf'},{'revision':null,'url':'/_next/static/media/KaTeX_Size1-Regular.e1e279cb.woff'},{'revision':null,'url':'/_next/static/media/KaTeX_Size1-Regular.eae34984.woff2'},{'revision':null,'url':'/_next/static/media/KaTeX_Size1-Regular.fabc004a.ttf'},{'revision':null,'url':'/_next/static/media/KaTeX_Size2-Regular.57727022.woff'},{'revision':null,'url':'/_next/static/media/KaTeX_Size2-Regular.5916a24f.woff2'},{'revision':null,'url':'/_next/static/media/KaTeX_Size2-Regular.d6b476ec.ttf'},{'revision':null,'url':'/_next/static/media/KaTeX_Size3-Regular.9acaf01c.woff'},{'revision':null,'url':'/_next/static/media/KaTeX_Size3-Regular.a144ef58.ttf'},{'revision':null,'url':'/_next/static/media/KaTeX_Size3-Regular.b4230e7e.woff2'},{'revision':null,'url':'/_next/static/media/KaTeX_Size4-Regular.10d95fd3.woff2'},{'revision':null,'url':'/_next/static/media/KaTeX_Size4-Regular.7a996c9d.woff'},{'revision':null,'url':'/_next/static/media/KaTeX_Size4-Regular.fbccdabe.ttf'},{'revision':null,'url':'/_next/static/media/KaTeX_Typewriter-Regular.6258592b.woff'},{'revision':null,'url':'/_next/static/media/KaTeX_Typewriter-Regular.a8709e36.woff2'},{'revision':null,'url':'/_next/static/media/KaTeX_Typewriter-Regular.d97aaf4a.ttf'},{'revision':'d3aa06d13d3cf9c0558927051f3cb948','url':'/_next/static/media/a1386beebedccca4-s.woff2'},{'revision':'0bd523f6049956faaf43c254a719d06a','url':'/_next/static/media/b957ea75a84b6ea7-s.p.woff2'},{'revision':'9e494903d6b0ffec1a1e14d34427d44d','url':'/_next/static/media/ba9851c3c22cd980-s.woff2'},{'revision':'5a1b7c983a9dc0a87a2ff138e07ae822','url':'/_next/static/media/c3bc380753a8436c-s.woff2'},{'revision':'027a89e9ab733a145db70f09b8a18b42','url':'/_next/static/media/c5fe6dc8356a8c31-s.woff2'},{'revision':'9516f567cd80b0f418bba2f1299ed6d1','url':'/_next/static/media/db911767852bc875-s.woff2'},{'revision':'d54db44de5ccb18886ece2fda72bdfe0','url':'/_next/static/media/df0a9ae256c0569c-s.woff2'},{'revision':'65850a373e258f1c897a2b3d75eb74de','url':'/_next/static/media/e4af272ccee01ff0-s.p.woff2'},{'revision':'43751174b6b810eb169101a20d8c26f8','url':'/_next/static/media/eafabf029ad39a43-s.p.woff2'},{'revision':'63af7d5e18e585fad8d0220e5d551da1','url':'/_next/static/media/f10b8e9d91f3edcb-s.woff2'},{'revision':'f2a04185547c36abfa589651236a9849','url':'/_next/static/media/fe0777f1195381cb-s.woff2'},{'revision':'460f55cf1456f5a201f259a4eb607989','url':'/icons/apple-touch-icon.png'},{'revision':'69784622e4b55d2666c5180fb954d781','url':'/icons/icon-192x192.png'},{'revision':'ab07c93bfbd862c758c4d6d31085a6db','url':'/icons/icon-512x512-maskable.png'},{'revision':'f1b0e1527b676413a8b8e0154f671984','url':'/icons/icon-512x512.png'},{'revision':'2ed79e1d8607156994a2a6462563d7f0','url':'/images/Q zoom.json'},{'revision':'d088f99e3a3f1b7eaec384f36b0866d2','url':'/images/Q.json'},{'revision':'b14dbca44bb366d8499ae9a9b24a104f','url':'/images/eva-logo.png'},{'revision':'8f6cf4c9ec412fe201f80e2d23445aa9','url':'/images/logo.svg'},{'revision':'ab57101a81d25f409febeed6eb7e32bf','url':'/images/opengraph-image.png'}],skipWaiting:!1,clientsClaim:!1,navigationPreload:!1,runtimeCaching:[{matcher:/\.(?:js|css|woff2?|png|jpg|jpeg|svg|gif|ico)$/,handler:new eL({cacheName:"static-assets"})},{matcher:e=>{let{url:t,request:a}=e,r=t.pathname.startsWith("/api/"),s="/api/chat"===t.pathname&&"POST"===a.method||"/api/chats/all"===t.pathname&&"DELETE"===a.method;return r&&!s},handler:new ea({cacheName:"api-cache",networkTimeoutSeconds:5})},{matcher:e=>{let{request:t}=e;return"navigate"===t.mode},handler:new ea({cacheName:"pages-cache",networkTimeoutSeconds:5,plugins:[{handlerDidError:async()=>caches.match("/offline")}]})}]}).addEventListeners(),self.addEventListener("push",e=>{console.log("[Service Worker] Push Received.",e)}),self.addEventListener("sync",e=>{console.log("[Service Worker] Background Sync.",e)})})(); No newline at end of file | |||
Contributor
There was a problem hiding this comment.
🩺 Stability & Availability | 🟠 Major | ⚡ Quick win
🧩 Analysis chain
🏁 Script executed:
#!/usr/bin/env bash
set -euo pipefail
grep -oE "'url':'[^']+'" public/sw.js |
sed -E "s/^'url':'(.*)'$/\1/" |
while read -r url; do
case "$url" in
/_next/static/*) path=".next${url#/_next}" ;;
/*) path="public${url}" ;;
*) echo "Unsupported precache URL: $url" >&2; exit 1 ;;
esac
test -f "$path" || {
echo "Missing precache asset: $url -> $path" >&2
exit 1
}
doneRepository: QueueLab/QCX
Length of output: 268
🏁 Script executed:
#!/usr/bin/env bash
set -euo pipefail
printf 'Repository files matching public/sw.js:\n'
git ls-files public/sw.js || true
printf '\nRepository files matching Next.js build/static artifacts:\n'
git ls-files '.next/*' 'public/icons/*' 'public/images/*' | sed -n '1,120p' || true
printf '\nservice/work-related files:\n'
git ls-files | rg '(^|/)(next\.config\.(js|mjs|ts|jsx|tsx|cjs)$|sw\.(js|mjs|ts|jsx|tsx)$|config\.js$|config\.ts$|serwist|workbox|service-worker)' || true
printf '\nExtract service-worker precache URLs from git-indexed public/sw.js if present:\n'
if [ -f public/sw.js ]; then
grep -oE "'url':'[^']+'" public/sw.js | sed -E "s/^'url':'(.*)'$/\1/" | sort > /tmp/sw_urls.txt
echo "$(wc -l < /tmp/sw_urls.txt) URLs extracted"
head -n 20 /tmp/sw_urls.txt
else
echo 'public/sw.js not present in git index'
fiRepository: QueueLab/QCX
Length of output: 1645
Don’t commit the generated service-worker manifest against the next .next build.
public/sw.js contains hashed Next.js assets under /_next/static/; those files won’t be present in the repository and Serwist can fail installation if the manifest points at assets not actually deployed. Use the generated precache from the production build or remove this commit and regenerate it.
🧰 Tools
🪛 ast-grep (0.44.1)
[warning] Avoid using the initial state variable in setState
Context: setTimeout(t,e)
Note: [CWE-710] Improper Adherence to Coding Standards. Security best practice.
(setstate-same-var)
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
In `@public/sw.js` at line 2, Remove the committed generated precache manifest
from public/sw.js and regenerate it from the current production build so the
precacheEntries list references only assets that are actually deployed. Ensure
the generated service worker does not retain stale hashed paths under
/_next/static/.
![charliecreates[bot]](https://avatars.githubusercontent.com/in/1140780?s=60&v=4){kind=small}
There was a problem hiding this comment.
Found three blocking issues in the new scraping and business-context flow. Details are attached inline:
- The fallback fetch is SSRFable because validation does not account for DNS resolution, IPv6/private ranges, or redirects.
- The fallback reads an unbounded response body before truncating it for the model, allowing avoidable memory/CPU exhaustion.
- Domain persistence trusts a browser-supplied user ID; the current settings caller supplies a Clerk ID while the database helpers query the internal UUID, and the action has no authorization check.
I did not run tests; this review used read-only inspection of the PR diff, surrounding code, discussion, and existing checks.
|
|
||
| // Fallback scraper using standard fetch | ||
| try { | ||
| const response = await fetch(targetUrl, { |
There was a problem hiding this comment.
[blocking] This is an unrestricted server-side fetch after only a literal hostname check. A public name can resolve to RFC1918/loopback/link-local/IPv6 space, and fetch follows redirects by default, so an attacker-controlled domain can make the worker reach internal services and send their response to the model. Resolve and validate every address (including IPv6) at connection time and validate/disable each redirect, or route this through a hardened scraper proxy.
| if (!response.ok) { | ||
| throw new Error(`Fetch failed with status ${response.status}`); | ||
| } | ||
| const html = await response.text(); |
There was a problem hiding this comment.
[blocking] The fallback loads the entire response into memory before applying the 5,000-character model cap. A reachable endpoint can return a very large or never-ending body and exhaust worker memory/CPU during one generation request. Reject oversized Content-Length values and stream with a hard byte limit before parsing HTML.
| } | ||
| } | ||
|
|
||
| export async function saveUserDomain( |
There was a problem hiding this comment.
[blocking] This server action trusts a caller-supplied userId instead of resolving the authenticated database user. The settings caller passes Clerk user.id, while users.id is the internal UUID, so normal domain saves/loads fail; an authenticated caller can also pass another user's UUID to read or overwrite that user's metadata. Use getCurrentUserIdOnServer() inside both domain actions and ignore the browser-provided ID.
…-2499681851174358118
Collaborator
Author
|
@coderabbitai plan Fix the core identity bug in
Task: 2 Harden the Firecrawl scraping pipeline across three areas: API-key validation, Firecrawl client factory (
Scrape-result handling (
Post-timeout write race (
Task: 3 Align client/server domain validation, job lifecycle/timeout handling, and UI Domain validation unification:
Stale job persistence and timeout alignment
UI polling robustness
|
Contributor
|
Tip For best results, initiate chat on the files or code changes. 🧩 Analysis chain🏁 Script executed: #!/bin/bash
set -euo pipefail
printf '%s\n' '== Candidate files =='
fd -a -t f -E node_modules -E .git \
'^(actions\.tsx|get-current-user\.ts|researcher\.tsx|writer\.tsx|chat\.ts|settings\.tsx)$' \
. | sort
printf '%s\n' '== Outlines =='
for file in \
app/actions.tsx \
lib/auth/get-current-user.ts \
lib/agents/researcher.tsx \
lib/agents/writer.tsx \
lib/actions/chat.ts \
components/settings/components/settings.tsx
do
if [ -f "$file" ]; then
echo "-- $file"
ast-grep outline "$file" --items all || true
fi
done
printf '%s\n' '== Prompt/auth definitions and calls =='
rg -n -C 5 --glob '!node_modules/**' --glob '!public/sw.js' \
'(getSystemPrompt|saveSystemPrompt|dynamicSystemPrompt|getCurrentUser|get-current-user|systemPrompt)' \
app lib components tests 2>/dev/null || trueLength of output: 73927 🏁 Script executed: #!/bin/bash
set -euo pipefail
printf '%s\n' '== Candidate files =='
fd -a -t f -E node_modules -E .git \
'^(firecrawl\.ts|system-prompt\.ts|package\.json|\.env\.local\.example|\.env\.embeddings\.example)$' \
. | sort
printf '%s\n' '== Outlines =='
for file in lib/agents/tools/firecrawl.ts lib/actions/system-prompt.ts; do
if [ -f "$file" ]; then
echo "-- $file"
ast-grep outline "$file" --items all || true
fi
done
printf '%s\n' '== Firecrawl, scrape-result, and job lifecycle references =='
rg -n -C 6 --glob '!node_modules/**' --glob '!public/sw.js' \
'(FIRECRAWL_API_KEY|Firecrawl|firecrawl|scrapeResult|runBackgroundWorker|updateJob|Promise\.race|timeout|status: .(complete|error).|errorMessage)' \
lib app components package.json .env.local.example .env.embeddings.example 2>/dev/null || trueLength of output: 45679 🏁 Script executed: #!/bin/bash
set -euo pipefail
printf '%s\n' '== Candidate files =='
fd -a -t f -E node_modules -E .git \
'^(settings\.tsx|system-prompt\.ts|system-prompt-form\.tsx)$' \
. | sort
printf '%s\n' '== Outlines =='
for file in \
components/settings/components/settings.tsx \
lib/actions/system-prompt.ts \
components/settings/components/system-prompt-form.tsx
do
if [ -f "$file" ]; then
echo "-- $file"
ast-grep outline "$file" --items all || true
fi
done
printf '%s\n' '== Validation, staleness, timer, polling, and toast references =='
rg -n -C 6 --glob '!node_modules/**' --glob '!public/sw.js' \
'(domainSchema|z\.string\(\)\.url|new URL|MAX_POLL_DURATION|POLL|STALE|stale|setInterval|clearInterval|isGenerating|jobId|toast|getSystemPromptGenerationJob)' \
components lib app tests 2>/dev/null || trueLength of output: 104564 🏁 Script executed: #!/bin/bash
set -euo pipefail
printf '%s\n' '== app/actions.tsx: prompt retrieval and agent calls =='
sed -n '450,575p' app/actions.tsx
printf '%s\n' '== system-prompt worker and persistence helper =='
sed -n '1,215p' lib/actions/system-prompt.ts
sed -n '1,100p' lib/actions/system-prompt-db.ts
printf '%s\n' '== settings domain schema and polling effect =='
sed -n '31,82p' components/settings/components/settings.tsx
sed -n '15,105p' components/settings/components/system-prompt-form.tsx
printf '%s\n' '== Relevant tests and test scripts =='
rg -n -C 3 --glob '!node_modules/**' \
'(system prompt|SystemPrompt|Firecrawl|firecrawl|prompt generation|business domain|domainSchema)' \
tests package.json 2>/dev/null || trueLength of output: 19632
Important findings
1. Lock in authenticated prompt propagation and default fallback behavior
2. Harden Firecrawl configuration and scrape-result classification
3. Make worker terminal transitions race-safe
4. Unify domain validation and normalization
5. Persist stale jobs and make polling deterministic
|
Contributor
I have successfully addressed all of your feedback and hardened the business domain scraping and report integration pipeline across all specified tasks:
|
…R feedback Co-authored-by: ngoiyaeric <115367894+ngoiyaeric@users.noreply.github.com>
Contributor
There was a problem hiding this comment.
Actionable comments posted: 1
Caution
Some comments are outside the diff and can’t be posted inline due to platform limitations.
⚠️ Outside diff range comments (1)
lib/actions/system-prompt.ts (1)
98-121: 🔒 Security & Privacy | 🔴 Critical | 🏗️ Heavy liftFetch fallback still allows SSRF and unbounded response buffering.
Both concerns flagged in the previous review remain unaddressed here:
fetch(targetUrl, ...)(line 99) makes an unrestricted server-side request with no verification of the resolved IP and no redirect control.domainSchemaonly inspects the literal hostname string at submission time (and per the diff summary, only filters IPv4 private ranges) — a domain that resolves to a private/loopback/link-local address (including via DNS rebinding or an IPv6 literal) at fetch time, or a redirect to one, is not caught.fetchfollows redirects by default.await response.text()(line 107) buffers the entire body in memory before the 5,000-char cap is applied downstream, so a large/slow endpoint can exhaust worker memory/CPU for a single generation request.🛡️ Suggested direction
- const response = await fetch(targetUrl, { - headers: { 'User-Agent': '...' } - }); + // Resolve and validate the target IP (reject private/loopback/link-local, IPv4 and IPv6) + // before connecting, and disable/validate redirects (e.g. redirect: 'manual' + re-validate). + const response = await fetch(targetUrl, { + headers: { 'User-Agent': '...' }, + redirect: 'manual', // re-validate manually instead of following blindly + }); if (!response.ok) { ... } - const html = await response.text(); + // Stream with a hard byte cap instead of response.text() + const html = await readWithByteLimit(response, MAX_BYTES);🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the rest with a brief reason, keep changes minimal, and validate. In `@lib/actions/system-prompt.ts` around lines 98 - 121, Harden the fallback fetch flow around targetUrl and response.text(): resolve and validate every destination IP against private, loopback, link-local, and other non-public IPv4/IPv6 ranges at request time, disable automatic redirects or apply the same validation to each redirect, and enforce bounded streaming reads with a size limit before accumulating content. Preserve the existing response.ok check and minimum-content validation while ensuring slow or oversized responses cannot consume unbounded memory.
🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
Inline comments:
In `@lib/actions/system-prompt.ts`:
- Around line 133-193: Update the background worker around workPromise,
timeoutPromise, and isSettled to use an AbortController: pass controller.signal
through scrapeDomain/fetch and generateText via abortSignal, and abort when the
timeout wins. Replace the non-atomic isSettled check plus subsequent complete
update with an atomic settlement mechanism or conditional job update so
timeout/error status cannot be overwritten by a late completion. Preserve the
existing success and error status behavior for work that settles first.
---
Outside diff comments:
In `@lib/actions/system-prompt.ts`:
- Around line 98-121: Harden the fallback fetch flow around targetUrl and
response.text(): resolve and validate every destination IP against private,
loopback, link-local, and other non-public IPv4/IPv6 ranges at request time,
disable automatic redirects or apply the same validation to each redirect, and
enforce bounded streaming reads with a size limit before accumulating content.
Preserve the existing response.ok check and minimum-content validation while
ensuring slow or oversized responses cannot consume unbounded memory.
🪄 Autofix (Beta)
Fix all unresolved CodeRabbit comments on this PR:
- Push a commit to this branch (recommended)
- Create a new PR with the fixes
ℹ️ Review info
⚙️ Run configuration
Configuration used: Organization UI
Review profile: ASSERTIVE
Plan: Pro Plus
Run ID: 2a848943-f7bd-4326-b31a-8edd8f90f4b5
📒 Files selected for processing (5)
.env.embeddings.examplecomponents/settings/components/system-prompt-form.tsxlib/actions/system-prompt.tslib/agents/tools/firecrawl.tspublic/sw.js
📜 Review details
🧰 Additional context used
🪛 ast-grep (0.44.1)
public/sw.js
[warning] Avoid using the initial state variable in setState
Context: setTimeout(t,e)
Note: [CWE-710] Improper Adherence to Coding Standards. Security best practice.
(setstate-same-var)
🔇 Additional comments (8)
public/sw.js (1)
2-2: 🩺 Stability & AvailabilityVerify the regenerated manifest matches the deployed build.
This repeats the previously reported risk: if any hashed
/_next/static/or public asset is absent from the deployed build, service-worker installation can fail. Regeneratepublic/sw.jsfrom the exact production build and verify every precached URL is present.lib/actions/system-prompt.ts (3)
39-40: LGTM!Staleness threshold reduction (5m → 3m) still leaves headroom above
WORKER_TIMEOUT_MS(2m), consistent with the timeout-alignment goal.
81-92: LGTM!Explicit null/
success/markdownchecks on the Firecrawl result are a solid hardening; combined with the caller-side 100-char check oncontent(lines 146-148), the previously-flagged "any non-empty markdown bypasses length check" concern is now covered.
213-224: LGTM!Wrapping the stale-job
updateJobcall in try/catch before returning the error response is a good defensive improvement over the prior unguarded write.lib/agents/tools/firecrawl.ts (1)
3-9: LGTM!Trimming and rejecting empty-string keys closes a gap where whitespace-only env values would previously slip through; the clearer error message also helps
scrapeDomain's fallback logic work deterministically..env.embeddings.example (1)
14-16: LGTM!components/settings/components/system-prompt-form.tsx (2)
53-114: LGTM!Routing timeout/error/success toasts through
toastRef.currentand droppingtoastfrom the effect's dependency array is a solid fix for the stale-closure/reset-timer hazard;MAX_POLL_DURATION(150s) also now sits comfortably between the server'sWORKER_TIMEOUT_MS(2m) andSTALENESS_THRESHOLD_MS(3m).
48-51: 🩺 Stability & AvailabilityNo change needed:
Reactis already imported.The file imports
Reactas a default/namespace import (import React, { useState, useEffect } from 'react'), soReact.useRef(...)is safe.
Comment on lines
+133
to
+193
| let isSettled = false; | ||
|
|
||
| try { | ||
| await updateJob(jobId, userId, { status: 'processing' }); | ||
|
|
||
| const workPromise = (async () => { | ||
| const firecrawl = getFirecrawlClient(); | ||
| const scrapeResult = await firecrawl.scrapeUrl(domain, { | ||
| formats: ['markdown'], | ||
| }); | ||
|
|
||
| // The library's type definitions for scrapeUrl can be complex. | ||
| // We check for markdown presence to determine success. | ||
| if (!scrapeResult || !('markdown' in scrapeResult) || !scrapeResult.markdown) { | ||
| const errorMsg = (scrapeResult as any)?.error || 'Failed to scrape content'; | ||
| throw new Error(errorMsg); | ||
| let content = ''; | ||
| try { | ||
| content = await scrapeDomain(domain); | ||
| } catch (err: any) { | ||
| throw new Error(`Domain scraping failed: ${err.message || err}`); | ||
| } | ||
|
|
||
| const content = scrapeResult.markdown; | ||
| if (content.length < 100) { | ||
| throw new Error('Insufficient content scraped from domain'); | ||
| throw new Error('Insufficient content scraped from domain (less than 100 characters)'); | ||
| } | ||
|
|
||
| const model = await getModel(); | ||
| const { text } = await generateText({ | ||
| model, | ||
| system: 'You are an expert at creating concise and effective AI system prompts for business copilots.', | ||
| prompt: `Based on the following content scraped from ${domain}, generate a concise system prompt (10-2000 characters) for an AI business copilot. The prompt should define the business's identity, products/services, tone, and how it should assist users. | ||
| let generatedPrompt = ''; | ||
| try { | ||
| const model = await getModel(); | ||
| const { text } = await generateText({ | ||
| model, | ||
| system: 'You are an expert at creating concise and effective AI system prompts for business copilots.', | ||
| prompt: `Based on the following content scraped from ${domain}, generate a concise system prompt (10-2000 characters) for an AI business copilot. The prompt should define the business's identity, products/services, tone, and how it should assist users. | ||
|
|
||
| Content: | ||
| ${content.substring(0, 5000)}`, // Limit content size for LLM | ||
| }); | ||
| generatedPrompt = text.trim(); | ||
| } catch (err: any) { | ||
| throw new Error(`LLM prompt generation failed: ${err.message || err}`); | ||
| } | ||
|
|
||
| Content: | ||
| ${content.substring(0, 5000)}`, // Limit content size for LLM | ||
| }); | ||
| if (generatedPrompt.length < 10 || generatedPrompt.length > 2000) { | ||
| throw new Error(`Generated prompt length (${generatedPrompt.length}) is outside the allowed constraints (10-2000 characters)`); | ||
| } | ||
|
|
||
| const finalPrompt = text.trim(); | ||
| if (finalPrompt.length < 10 || finalPrompt.length > 2000) { | ||
| throw new Error('Generated prompt is outside the allowed length constraints'); | ||
| if (isSettled) { | ||
| console.warn(`workPromise finished but job ${jobId} was already settled (likely timed out). Discarding update.`); | ||
| return; | ||
| } | ||
|
|
||
| await updateJob(jobId, userId, { | ||
| status: 'complete', | ||
| resultPrompt: finalPrompt, | ||
| resultPrompt: generatedPrompt, | ||
| }); | ||
| })(); | ||
|
|
||
| await Promise.race([workPromise, timeoutPromise]); | ||
| isSettled = true; | ||
| } catch (error: any) { | ||
| isSettled = true; | ||
| console.error(`Background worker error for job ${jobId}:`, error); | ||
| await updateJob(jobId, userId, { | ||
| status: 'error', | ||
| errorMessage: error.message || 'An unexpected error occurred during generation', | ||
| }); | ||
| try { | ||
| await updateJob(jobId, userId, { | ||
| status: 'error', | ||
| errorMessage: error.message || 'An unexpected error occurred during generation', | ||
| }); | ||
| } catch (dbError) { | ||
| console.error(`Failed to update job status to error for job ${jobId}:`, dbError); | ||
| } |
Contributor
There was a problem hiding this comment.
🩺 Stability & Availability | 🟠 Major | 🏗️ Heavy lift
isSettled reduces but does not close the timeout/overwrite race, and in-flight work is never cancelled.
This is a partial fix of the previously-flagged issue. Two gaps remain:
- No cancellation. When
timeoutPromisewins the race,fetch/scrapeUrl/generateTextinsideworkPromisekeep running server-side with noAbortSignal—generateText(AI SDK) accepts anabortSignaloption that forwards to the underlying request, so it can be wired through here. - TOCTOU window still open.
isSettledis only set totrueinside the outercatch/afterPromise.raceresolves (line 182/184), but the check insideworkPromise(line 170) and the subsequentawait updateJob(...)(line 175) are not atomic with that flag flip. If the timeout branch'scatchsetsisSettled = trueand callsupdateJob(status: 'error')concurrently withworkPromisealready past itsisSettledcheck,workPromise's later-resolvingupdateJob(status: 'complete', ...)can still land in the DB after the error write, overwriting the timeout result — the exact scenario flagged previously.
🔧 Suggested direction
+ const controller = new AbortController();
const timeoutPromise = new Promise((_, reject) =>
- setTimeout(() => reject(new Error('Job execution timeout')), WORKER_TIMEOUT_MS)
+ setTimeout(() => { controller.abort(); reject(new Error('Job execution timeout')); }, WORKER_TIMEOUT_MS)
);
...
- const { text } = await generateText({ model, system, prompt });
+ const { text } = await generateText({ model, system, prompt, abortSignal: controller.signal });Combined with propagating controller.signal into scrapeDomain's fetch, this both stops wasted work and removes most of the residual race window.
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
In `@lib/actions/system-prompt.ts` around lines 133 - 193, Update the background
worker around workPromise, timeoutPromise, and isSettled to use an
AbortController: pass controller.signal through scrapeDomain/fetch and
generateText via abortSignal, and abort when the timeout wins. Replace the
non-atomic isSettled check plus subsequent complete update with an atomic
settlement mechanism or conditional job update so timeout/error status cannot be
overwritten by a late completion. Preserve the existing success and error status
behavior for work that settles first.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR implements secure and functional business domain scraping with a robust standard fetch fallback, connects the domain input on the Settings tab to metadata persistence, and integrates the user's custom system prompt and domain with the intelligence report generation agents (Executive Summary & Strategic Synthesis). It also refines the domain validation schema to restrict access to public URLs/domains only, avoiding internal, loopback, or private addresses.
PR created automatically by Jules for task 2499681851174358118 started by @ngoiyaeric
Summary by CodeRabbit
New Features
Bug Fixes
Tests