@chatcops/server 0.5.0 → 0.6.0

package/dist/http.d.ts

@@ -0,0 +1,66 @@
+import { type ChatHandler } from './handler.js';
+import type { OriginPolicy } from './security/origin-policy.js';
+/**
+ * The HTTP side of a chat request, shared by every adapter: which stream
+ * format to answer in, real statuses for refusals in protocol v1, SSE
+ * framing, keep-alive pings and the one `[DONE]` at the end. Adapters only
+ * move the bytes.
+ */
+export declare const PROTOCOL_HEADER = "x-chatcops-protocol";
+/** Requests over this size get 413. Every field has a ceiling, so a real request is far smaller. */
+export declare const MAX_BODY_BYTES: number;
+/** A comment line after this long with nothing sent, so the widget's inactivity timer doesn't fire during a slow tool. */
+export declare const PING_INTERVAL_MS = 10000;
+/**
+ * Protocol v1 when the body has `protocol: 1` (what the widget sends) or the
+ * `x-chatcops-protocol` header asks for it. Anything else gets the 0.5 format.
+ */
+export declare function wantsProtocolV1(body: unknown, header: string | null | undefined): boolean;
+export interface ChatReplyOptions {
+    signal: AbortSignal;
+    /** The `x-chatcops-protocol` request header. */
+    protocolHeader?: string | null;
+    pingIntervalMs?: number;
+    /** Answer in the AI SDK's UI message stream instead of choosing by the request. */
+    aiSdk?: boolean;
+    /** The `Authorization` request header, for session tokens. */
+    authorization?: string | null;
+    /** The `Origin` request header. */
+    origin?: string | null;
+}
+export type ChatReply = {
+    kind: 'json';
+    status: number;
+    headers: Record<string, string>;
+    body: unknown;
+} | {
+    kind: 'stream';
+    headers: Record<string, string>;
+    frames: AsyncGenerator<string, void>;
+};
+/** What to send back for a parsed request body. */
+export declare function chatReply(handler: Pick<ChatHandler, 'startChat'>, body: unknown, clientIp: string | undefined, options: ChatReplyOptions): Promise<ChatReply>;
+type ReadBody = {
+    ok: true;
+    body: unknown;
+} | {
+    ok: false;
+    reason: 'too_large' | 'invalid_json';
+};
+/** Reads and parses a JSON body, stopping at `maxBytes`. */
+export declare function readJsonBody(request: Request, maxBytes?: number): Promise<ReadBody>;
+export interface FetchChatOptions {
+    /** Called only for chat requests, after the method and origin checks. */
+    clientIp(request: Request): string | undefined;
+    /** Workers' `ctx.waitUntil`, so lead webhooks finish after the visitor leaves. */
+    waitUntil?(promise: Promise<unknown>): void;
+    pingIntervalMs?: number;
+    /** Read `useChat` requests and answer in the AI SDK's UI message stream. */
+    aiSdk?: boolean;
+}
+/** Whether a request is for the session endpoint: the chat URL plus `/session`. */
+export declare function isSessionPath(pathname: string): boolean;
+/** The whole request for Fetch API runtimes (Vercel, Cloudflare, Next.js, Bun, Deno). */
+export declare function fetchChatResponse(handler: Pick<ChatHandler, 'startChat' | 'startSession'>, origins: OriginPolicy, request: Request, options: FetchChatOptions): Promise<Response>;
+export {};
+//# sourceMappingURL=http.d.ts.map

package/dist/http.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../src/http.ts"],"names":[],"mappings":"AAWA,OAAO,EAAmC,KAAK,WAAW,EAAkB,MAAM,cAAc,CAAC;AACjG,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAEhE;;;;;GAKG;AAEH,eAAO,MAAM,eAAe,wBAAwB,CAAC;AACrD,oGAAoG;AACpG,eAAO,MAAM,cAAc,QAAa,CAAC;AACzC,0HAA0H;AAC1H,eAAO,MAAM,gBAAgB,QAAS,CAAC;AAKvC;;;GAGG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO,CAIzF;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,WAAW,CAAC;IACpB,gDAAgD;IAChD,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,mFAAmF;IACnF,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,8DAA8D;IAC9D,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,mCAAmC;IACnC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB;AAED,MAAM,MAAM,SAAS,GACjB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,IAAI,EAAE,OAAO,CAAA;CAAE,GAChF;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,MAAM,EAAE,cAAc,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;CAAE,CAAC;AAE9F,mDAAmD;AACnD,wBAAsB,SAAS,CAC7B,OAAO,EAAE,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,EACvC,IAAI,EAAE,OAAO,EACb,QAAQ,EAAE,MAAM,GAAG,SAAS,EAC5B,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC,SAAS,CAAC,CA8BpB;AAiGD,KAAK,QAAQ,GAAG;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,OAAO,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,WAAW,GAAG,cAAc,CAAA;CAAE,CAAC;AAElG,4DAA4D;AAC5D,wBAAsB,YAAY,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,SAAiB,GAAG,OAAO,CAAC,QAAQ,CAAC,CA8BjG;AAED,MAAM,WAAW,gBAAgB;IAC/B,yEAAyE;IACzE,QAAQ,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAAC;IAC/C,kFAAkF;IAClF,SAAS,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC;IAC5C,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,4EAA4E;IAC5E,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,mFAAmF;AACnF,wBAAgB,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAEvD;AAED,yFAAyF;AACzF,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,IAAI,CAAC,WAAW,EAAE,WAAW,GAAG,cAAc,CAAC,EACxD,OAAO,EAAE,YAAY,EACrB,OAAO,EAAE,OAAO,EAChB,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC,QAAQ,CAAC,CA4CnB"}

package/dist/http.js

@@ -0,0 +1,262 @@
+import { AI_SDK_STREAM_HEADER, SSE_DONE, SSE_HEADERS, SSE_PING, aiSdkEncoder, encodeSSE, errorBody, fromAiSdkRequest, } from '@chatcops/core';
+import { toLegacyStream } from './handler.js';
+/**
+ * The HTTP side of a chat request, shared by every adapter: which stream
+ * format to answer in, real statuses for refusals in protocol v1, SSE
+ * framing, keep-alive pings and the one `[DONE]` at the end. Adapters only
+ * move the bytes.
+ */
+export const PROTOCOL_HEADER = 'x-chatcops-protocol';
+/** Requests over this size get 413. Every field has a ceiling, so a real request is far smaller. */
+export const MAX_BODY_BYTES = 256 * 1024;
+/** A comment line after this long with nothing sent, so the widget's inactivity timer doesn't fire during a slow tool. */
+export const PING_INTERVAL_MS = 10_000;
+/** Lets browsers read these on cross-origin replies. */
+const EXPOSE_HEADERS = { 'Access-Control-Expose-Headers': 'Retry-After, X-ChatCops-Protocol' };
+/**
+ * Protocol v1 when the body has `protocol: 1` (what the widget sends) or the
+ * `x-chatcops-protocol` header asks for it. Anything else gets the 0.5 format.
+ */
+export function wantsProtocolV1(body, header) {
+    if (header != null && Number(header) >= 1)
+        return true;
+    const protocol = body !== null && typeof body === 'object' ? body.protocol : undefined;
+    return typeof protocol === 'number' && protocol >= 1;
+}
+/** What to send back for a parsed request body. */
+export async function chatReply(handler, body, clientIp, options) {
+    const format = options.aiSdk ? 'ai-sdk' : wantsProtocolV1(body, options.protocolHeader) ? 'v1' : 'legacy';
+    // Both typed formats refuse with a status; only 0.5 clients need a 200 stream.
+    const typed = format !== 'legacy';
+    const { signal } = options;
+    const pingIntervalMs = options.pingIntervalMs ?? PING_INTERVAL_MS;
+    let start;
+    try {
+        start = await handler.startChat(body, clientIp, { signal, format, authorization: options.authorization, origin: options.origin });
+    }
+    catch (err) {
+        if (!signal.aborted)
+            console.error('[chatcops] Unhandled error while handling chat:', err);
+        if (typed)
+            return { kind: 'json', status: 500, headers: EXPOSE_HEADERS, body: errorBody('internal_error') };
+        // What 0.5 servers send, with no [DONE] after it.
+        return stream(format, only(LEGACY_INTERNAL_ERROR));
+    }
+    if (!start.ok) {
+        if (typed) {
+            const headers = { ...EXPOSE_HEADERS };
+            if (start.error.retryAfterMs !== undefined)
+                headers['Retry-After'] = String(Math.ceil(start.error.retryAfterMs / 1000));
+            return { kind: 'json', status: start.status, headers, body: { error: start.error } };
+        }
+        // 0.5 widgets read refusals from a 200 stream.
+        return stream(format, only(`data: ${JSON.stringify(start.legacy)}\n\n`, SSE_DONE));
+    }
+    const source = format === 'v1' ? encodeParts(start.parts) : format === 'ai-sdk' ? encodeAiSdk(start.parts) : encodeLegacy(start.parts);
+    return stream(format, frames(source, format, signal, pingIntervalMs));
+}
+const FORMAT_HEADERS = {
+    v1: { [PROTOCOL_HEADER]: '1' },
+    'ai-sdk': { [AI_SDK_STREAM_HEADER]: 'v1' },
+    legacy: {},
+};
+function stream(format, frames) {
+    return { kind: 'stream', headers: { ...SSE_HEADERS, ...EXPOSE_HEADERS, ...FORMAT_HEADERS[format] }, frames };
+}
+async function* encodeParts(parts) {
+    for await (const part of parts)
+        yield encodeSSE(part);
+}
+async function* encodeAiSdk(parts) {
+    const encode = aiSdkEncoder();
+    for await (const part of parts) {
+        for (const chunk of encode(part))
+            yield encodeSSE(chunk);
+    }
+}
+async function* encodeLegacy(parts) {
+    for await (const chunk of toLegacyStream(parts))
+        yield `data: ${chunk}\n\n`;
+}
+const LEGACY_INTERNAL_ERROR = `data: ${JSON.stringify({ error: 'internal_error' })}\n\n`;
+async function* only(...frames) {
+    yield* frames;
+}
+/**
+ * The frames to write, with pings while nothing else is sent, `[DONE]` once
+ * at the end, and nothing at all once the visitor has gone.
+ */
+async function* frames(source, format, signal, pingIntervalMs) {
+    try {
+        for await (const frame of withPings(source, pingIntervalMs)) {
+            if (signal.aborted)
+                return;
+            yield frame;
+        }
+        if (!signal.aborted)
+            yield SSE_DONE;
+    }
+    catch (err) {
+        if (signal.aborted)
+            return;
+        console.error('[chatcops] Unhandled error while handling chat:', err);
+        if (format !== 'legacy') {
+            const tail = [
+                { type: 'error', code: 'internal_error', retryable: true },
+                { type: 'finish', reason: 'error' },
+            ];
+            const encode = format === 'ai-sdk' ? aiSdkEncoder() : (part) => [part];
+            for (const part of tail)
+                for (const chunk of encode(part))
+                    yield encodeSSE(chunk);
+            yield SSE_DONE;
+        }
+        else {
+            yield LEGACY_INTERNAL_ERROR;
+        }
+    }
+}
+const PING = Symbol('ping');
+async function* withPings(source, intervalMs) {
+    if (!(intervalMs > 0 && Number.isFinite(intervalMs))) {
+        yield* source;
+        return;
+    }
+    // The next frame stays pending across pings, so none is lost.
+    let pending = source.next();
+    try {
+        while (true) {
+            let timer;
+            const tick = new Promise((resolve) => {
+                timer = setTimeout(resolve, intervalMs, PING);
+            });
+            const result = await Promise.race([pending, tick]).finally(() => clearTimeout(timer));
+            if (result === PING) {
+                yield SSE_PING;
+                continue;
+            }
+            if (result.done)
+                return;
+            yield result.value;
+            pending = source.next();
+        }
+    }
+    finally {
+        // When the reader stops early, end the reply too; it takes effect once
+        // the step in progress finishes.
+        source.return(undefined).catch(() => { });
+    }
+}
+/** Reads and parses a JSON body, stopping at `maxBytes`. */
+export async function readJsonBody(request, maxBytes = MAX_BODY_BYTES) {
+    const declared = Number(request.headers.get('content-length'));
+    if (declared > maxBytes)
+        return { ok: false, reason: 'too_large' };
+    const chunks = [];
+    let size = 0;
+    if (request.body) {
+        const reader = request.body.getReader();
+        while (true) {
+            const { done, value } = await reader.read();
+            if (done)
+                break;
+            size += value.byteLength;
+            if (size > maxBytes) {
+                await reader.cancel().catch(() => { });
+                return { ok: false, reason: 'too_large' };
+            }
+            chunks.push(value);
+        }
+    }
+    const bytes = new Uint8Array(size);
+    let offset = 0;
+    for (const chunk of chunks) {
+        bytes.set(chunk, offset);
+        offset += chunk.byteLength;
+    }
+    try {
+        return { ok: true, body: JSON.parse(new TextDecoder().decode(bytes)) };
+    }
+    catch {
+        return { ok: false, reason: 'invalid_json' };
+    }
+}
+/** Whether a request is for the session endpoint: the chat URL plus `/session`. */
+export function isSessionPath(pathname) {
+    return /\/session\/?$/.test(pathname);
+}
+/** The whole request for Fetch API runtimes (Vercel, Cloudflare, Next.js, Bun, Deno). */
+export async function fetchChatResponse(handler, origins, request, options) {
+    const origin = request.headers.get('origin');
+    const cors = origins.headers(origin);
+    const protocolHeader = request.headers.get(PROTOCOL_HEADER);
+    const json = (status, body, headers = {}) => new Response(JSON.stringify(body), { status, headers: { 'Content-Type': 'application/json', ...cors, ...headers } });
+    if (request.method === 'OPTIONS') {
+        return new Response(null, { status: 204, headers: origins.preflightHeaders(origin) });
+    }
+    if (request.method !== 'POST')
+        return json(405, { error: 'Method not allowed' });
+    if (!origins.allows(origin))
+        return json(403, { error: 'origin_not_allowed' });
+    if (isSessionPath(new URL(request.url).pathname)) {
+        if (!handler.startSession)
+            return json(404, errorBody('invalid_request', { message: 'Session tokens are off. Set `sessionSecrets` to turn them on.' }));
+        const read = await readJsonBody(request, 16 * 1024);
+        if (!read.ok)
+            return json(400, errorBody('invalid_request', { message: 'Invalid session request' }));
+        const reply = await handler.startSession(read.body, origin, options.clientIp(request));
+        return json(reply.status, reply.body);
+    }
+    const clientIp = options.clientIp(request);
+    const read = await readJsonBody(request);
+    if (!read.ok) {
+        if (read.reason === 'too_large') {
+            return json(413, errorBody('payload_too_large', { message: `The request body is over ${MAX_BODY_BYTES} bytes.` }), EXPOSE_HEADERS);
+        }
+        return json(400, options.aiSdk || wantsProtocolV1(undefined, protocolHeader) ? errorBody('invalid_request', { message: 'Invalid JSON body' }) : { error: 'Invalid JSON body' });
+    }
+    const abort = new AbortController();
+    const reply = await chatReply(handler, options.aiSdk ? fromAiSdkRequest(read.body) : read.body, clientIp, {
+        signal: abort.signal,
+        protocolHeader,
+        pingIntervalMs: options.pingIntervalMs,
+        aiSdk: options.aiSdk,
+        authorization: request.headers.get('authorization'),
+        origin,
+    });
+    if (reply.kind === 'json')
+        return json(reply.status, reply.body, reply.headers);
+    return sseResponse(reply.frames, { ...reply.headers, ...cors }, abort, options.waitUntil);
+}
+function sseResponse(frames, headers, abort, waitUntil) {
+    const { readable, writable } = new TransformStream();
+    const writer = writable.getWriter();
+    const encoder = new TextEncoder();
+    // When the visitor disconnects the runtime cancels the response, which
+    // errors the writer right away; abort then, without waiting for the next write.
+    writer.closed.catch(() => abort.abort());
+    const pump = (async () => {
+        try {
+            for await (const frame of frames) {
+                if (abort.signal.aborted)
+                    break;
+                try {
+                    await writer.write(encoder.encode(frame));
+                }
+                catch {
+                    abort.abort();
+                    break;
+                }
+            }
+        }
+        finally {
+            if (abort.signal.aborted)
+                await writer.abort().catch(() => { });
+            else
+                await writer.close().catch(() => { });
+        }
+    })();
+    waitUntil?.(pump);
+    return new Response(readable, { headers });
+}
+//# sourceMappingURL=http.js.map

package/dist/http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../src/http.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,oBAAoB,EACpB,QAAQ,EACR,WAAW,EACX,QAAQ,EACR,YAAY,EACZ,SAAS,EACT,SAAS,EACT,gBAAgB,GAEjB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,cAAc,EAAqD,MAAM,cAAc,CAAC;AAGjG;;;;;GAKG;AAEH,MAAM,CAAC,MAAM,eAAe,GAAG,qBAAqB,CAAC;AACrD,oGAAoG;AACpG,MAAM,CAAC,MAAM,cAAc,GAAG,GAAG,GAAG,IAAI,CAAC;AACzC,0HAA0H;AAC1H,MAAM,CAAC,MAAM,gBAAgB,GAAG,MAAM,CAAC;AAEvC,wDAAwD;AACxD,MAAM,cAAc,GAAG,EAAE,+BAA+B,EAAE,kCAAkC,EAAE,CAAC;AAE/F;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,IAAa,EAAE,MAAiC;IAC9E,IAAI,MAAM,IAAI,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACvD,MAAM,QAAQ,GAAG,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAE,IAA+B,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;IACnH,OAAO,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,IAAI,CAAC,CAAC;AACvD,CAAC;AAmBD,mDAAmD;AACnD,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,OAAuC,EACvC,IAAa,EACb,QAA4B,EAC5B,OAAyB;IAEzB,MAAM,MAAM,GAAe,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC;IACtH,+EAA+E;IAC/E,MAAM,KAAK,GAAG,MAAM,KAAK,QAAQ,CAAC;IAClC,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;IAC3B,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,gBAAgB,CAAC;IAElE,IAAI,KAAgB,CAAC;IACrB,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,IAAI,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACpI,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO,CAAC,KAAK,CAAC,iDAAiD,EAAE,GAAG,CAAC,CAAC;QAC3F,IAAI,KAAK;YAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,SAAS,CAAC,gBAAgB,CAAC,EAAE,CAAC;QAC5G,kDAAkD;QAClD,OAAO,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC;IACrD,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;QACd,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,OAAO,GAA2B,EAAE,GAAG,cAAc,EAAE,CAAC;YAC9D,IAAI,KAAK,CAAC,KAAK,CAAC,YAAY,KAAK,SAAS;gBAAE,OAAO,CAAC,aAAa,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC,CAAC;YACxH,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;QACvF,CAAC;QACD,+CAA+C;QAC/C,OAAO,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;IACrF,CAAC;IAED,MAAM,MAAM,GACV,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC1H,OAAO,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC;AACxE,CAAC;AAED,MAAM,cAAc,GAA+C;IACjE,EAAE,EAAE,EAAE,CAAC,eAAe,CAAC,EAAE,GAAG,EAAE;IAC9B,QAAQ,EAAE,EAAE,CAAC,oBAAoB,CAAC,EAAE,IAAI,EAAE;IAC1C,MAAM,EAAE,EAAE;CACX,CAAC;AAEF,SAAS,MAAM,CAAC,MAAkB,EAAE,MAAoC;IACtE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,GAAG,WAAW,EAAE,GAAG,cAAc,EAAE,GAAG,cAAc,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC;AAC/G,CAAC;AAED,KAAK,SAAS,CAAC,CAAC,WAAW,CAAC,KAA8B;IACxD,IAAI,KAAK,EAAE,MAAM,IAAI,IAAI,KAAK;QAAE,MAAM,SAAS,CAAC,IAAI,CAAC,CAAC;AACxD,CAAC;AAED,KAAK,SAAS,CAAC,CAAC,WAAW,CAAC,KAA8B;IACxD,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;IAC9B,IAAI,KAAK,EAAE,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QAC/B,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC;YAAE,MAAM,SAAS,CAAC,KAAK,CAAC,CAAC;IAC3D,CAAC;AACH,CAAC;AAED,KAAK,SAAS,CAAC,CAAC,YAAY,CAAC,KAA8B;IACzD,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,cAAc,CAAC,KAAK,CAAC;QAAE,MAAM,SAAS,KAAK,MAAM,CAAC;AAC9E,CAAC;AAED,MAAM,qBAAqB,GAAG,SAAS,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,MAAM,CAAC;AAEzF,KAAK,SAAS,CAAC,CAAC,IAAI,CAAC,GAAG,MAAgB;IACtC,KAAK,CAAC,CAAC,MAAM,CAAC;AAChB,CAAC;AAED;;;GAGG;AACH,KAAK,SAAS,CAAC,CAAC,MAAM,CACpB,MAA8B,EAC9B,MAAkB,EAClB,MAAmB,EACnB,cAAsB;IAEtB,IAAI,CAAC;QACH,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,SAAS,CAAC,MAAM,EAAE,cAAc,CAAC,EAAE,CAAC;YAC5D,IAAI,MAAM,CAAC,OAAO;gBAAE,OAAO;YAC3B,MAAM,KAAK,CAAC;QACd,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,MAAM,QAAQ,CAAC;IACtC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,MAAM,CAAC,OAAO;YAAE,OAAO;QAC3B,OAAO,CAAC,KAAK,CAAC,iDAAiD,EAAE,GAAG,CAAC,CAAC;QACtE,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;YACxB,MAAM,IAAI,GAAe;gBACvB,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,SAAS,EAAE,IAAI,EAAE;gBAC1D,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE;aACpC,CAAC;YACF,MAAM,MAAM,GAAG,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,CAAC,IAAc,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;YACjF,KAAK,MAAM,IAAI,IAAI,IAAI;gBAAE,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC;oBAAE,MAAM,SAAS,CAAC,KAAK,CAAC,CAAC;YAClF,MAAM,QAAQ,CAAC;QACjB,CAAC;aAAM,CAAC;YACN,MAAM,qBAAqB,CAAC;QAC9B,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;AAE5B,KAAK,SAAS,CAAC,CAAC,SAAS,CAAC,MAA8B,EAAE,UAAkB;IAC1E,IAAI,CAAC,CAAC,UAAU,GAAG,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;QACrD,KAAK,CAAC,CAAC,MAAM,CAAC;QACd,OAAO;IACT,CAAC;IACD,8DAA8D;IAC9D,IAAI,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;IAC5B,IAAI,CAAC;QACH,OAAO,IAAI,EAAE,CAAC;YACZ,IAAI,KAAgD,CAAC;YACrD,MAAM,IAAI,GAAG,IAAI,OAAO,CAAc,CAAC,OAAO,EAAE,EAAE;gBAChD,KAAK,GAAG,UAAU,CAAC,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;YAChD,CAAC,CAAC,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;YACtF,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;gBACpB,MAAM,QAAQ,CAAC;gBACf,SAAS;YACX,CAAC;YACD,IAAI,MAAM,CAAC,IAAI;gBAAE,OAAO;YACxB,MAAM,MAAM,CAAC,KAAK,CAAC;YACnB,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;QAC1B,CAAC;IACH,CAAC;YAAS,CAAC;QACT,uEAAuE;QACvE,iCAAiC;QACjC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAC3C,CAAC;AACH,CAAC;AAID,4DAA4D;AAC5D,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,OAAgB,EAAE,QAAQ,GAAG,cAAc;IAC5E,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC;IAC/D,IAAI,QAAQ,GAAG,QAAQ;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IAEnE,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;QACxC,OAAO,IAAI,EAAE,CAAC;YACZ,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YAC5C,IAAI,IAAI;gBAAE,MAAM;YAChB,IAAI,IAAI,KAAK,CAAC,UAAU,CAAC;YACzB,IAAI,IAAI,GAAG,QAAQ,EAAE,CAAC;gBACpB,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;gBACtC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;YAC5C,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC;IAC7B,CAAC;IACD,IAAI,CAAC;QACH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;IACzE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;IAC/C,CAAC;AACH,CAAC;AAYD,mFAAmF;AACnF,MAAM,UAAU,aAAa,CAAC,QAAgB;IAC5C,OAAO,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AACxC,CAAC;AAED,yFAAyF;AACzF,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,OAAwD,EACxD,OAAqB,EACrB,OAAgB,EAChB,OAAyB;IAEzB,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC7C,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACrC,MAAM,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAC5D,MAAM,IAAI,GAAG,CAAC,MAAc,EAAE,IAAa,EAAE,UAAkC,EAAE,EAAE,EAAE,CACnF,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,GAAG,IAAI,EAAE,GAAG,OAAO,EAAE,EAAE,CAAC,CAAC;IAEvH,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACjC,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACxF,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,CAAC;IACjF,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,CAAC;IAE/E,IAAI,aAAa,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC;QACjD,IAAI,CAAC,OAAO,CAAC,YAAY;YAAE,OAAO,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,iBAAiB,EAAE,EAAE,OAAO,EAAE,+DAA+D,EAAE,CAAC,CAAC,CAAC;QACxJ,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,OAAO,EAAE,EAAE,GAAG,IAAI,CAAC,CAAC;QACpD,IAAI,CAAC,IAAI,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,iBAAiB,EAAE,EAAE,OAAO,EAAE,yBAAyB,EAAE,CAAC,CAAC,CAAC;QACrG,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;QACvF,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IACxC,CAAC;IAED,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC;IACzC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QACb,IAAI,IAAI,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YAChC,OAAO,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,mBAAmB,EAAE,EAAE,OAAO,EAAE,4BAA4B,cAAc,SAAS,EAAE,CAAC,EAAE,cAAc,CAAC,CAAC;QACrI,CAAC;QACD,OAAO,IAAI,CACT,GAAG,EACH,OAAO,CAAC,KAAK,IAAI,eAAe,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,iBAAiB,EAAE,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAC9J,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,eAAe,EAAE,CAAC;IACpC,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE;QACxG,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,cAAc;QACd,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,aAAa,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;QACnD,MAAM;KACP,CAAC,CAAC;IACH,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IAChF,OAAO,WAAW,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,GAAG,KAAK,CAAC,OAAO,EAAE,GAAG,IAAI,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;AAC5F,CAAC;AAED,SAAS,WAAW,CAClB,MAAoC,EACpC,OAA+B,EAC/B,KAAsB,EACtB,SAAwC;IAExC,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,IAAI,eAAe,EAA0B,CAAC;IAC7E,MAAM,MAAM,GAAG,QAAQ,CAAC,SAAS,EAAE,CAAC;IACpC,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAElC,uEAAuE;IACvE,gFAAgF;IAChF,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;IAEzC,MAAM,IAAI,GAAG,CAAC,KAAK,IAAI,EAAE;QACvB,IAAI,CAAC;YACH,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBACjC,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO;oBAAE,MAAM;gBAChC,IAAI,CAAC;oBACH,MAAM,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;gBAC5C,CAAC;gBAAC,MAAM,CAAC;oBACP,KAAK,CAAC,KAAK,EAAE,CAAC;oBACd,MAAM;gBACR,CAAC;YACH,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO;gBAAE,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;;gBAC1D,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC,CAAC,EAAE,CAAC;IACL,SAAS,EAAE,CAAC,IAAI,CAAC,CAAC;IAElB,OAAO,IAAI,QAAQ,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;AAC7C,CAAC"}

package/dist/index.d.ts

@@ -1,5 +1,7 @@
 export { createChatHandler } from './handler.js';
+export type { ChatFormat, ChatHandler, ChatStart, StartChatOptions } from './handler.js';
 export type { ChatCopsServerConfig, ValidatedChatRequest } from './config.js';
+export type { ClientIpResolver } from './client-ip.js';
 export { chatRequestSchema } from './config.js';
 export { RateLimiter } from './rate-limit.js';
 export type { RateLimitConfig } from './rate-limit.js';
@@ -7,5 +9,6 @@ export { WebhookDispatcher, verifyWebhook, signWebhook, assertSafeWebhookUrl, SI
 export { chatcopsMiddleware, chatcopsAnalyticsHandler } from './adapters/express.js';
 export { chatcopsVercelHandler } from './adapters/vercel.js';
 export { chatcopsCloudflareHandler } from './adapters/cloudflare.js';
+export { chatcopsAiSdkHandler } from './adapters/ai-sdk.js';
 export { ServerAnalytics } from './analytics/server.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACjD,YAAY,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAC9E,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC9C,YAAY,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AACvD,OAAO,EACL,iBAAiB,EACjB,aAAa,EACb,WAAW,EACX,oBAAoB,EACpB,gBAAgB,EAChB,KAAK,YAAY,GAClB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,kBAAkB,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AACrF,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAC;AACrE,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACjD,YAAY,EAAE,UAAU,EAAE,WAAW,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AACzF,YAAY,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAC9E,YAAY,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC9C,YAAY,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AACvD,OAAO,EACL,iBAAiB,EACjB,aAAa,EACb,WAAW,EACX,oBAAoB,EACpB,gBAAgB,EAChB,KAAK,YAAY,GAClB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,kBAAkB,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AACrF,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAC;AACrE,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC"}

package/dist/index.js

@@ -5,5 +5,6 @@ export { WebhookDispatcher, verifyWebhook, signWebhook, assertSafeWebhookUrl, SI
 export { chatcopsMiddleware, chatcopsAnalyticsHandler } from './adapters/express.js';
 export { chatcopsVercelHandler } from './adapters/vercel.js';
 export { chatcopsCloudflareHandler } from './adapters/cloudflare.js';
+export { chatcopsAiSdkHandler } from './adapters/ai-sdk.js';
 export { ServerAnalytics } from './analytics/server.js';
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAEjD,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAE9C,OAAO,EACL,iBAAiB,EACjB,aAAa,EACb,WAAW,EACX,oBAAoB,EACpB,gBAAgB,GAEjB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,kBAAkB,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AACrF,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAC;AACrE,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAIjD,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAE9C,OAAO,EACL,iBAAiB,EACjB,aAAa,EACb,WAAW,EACX,oBAAoB,EACpB,gBAAgB,GAEjB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,kBAAkB,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AACrF,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAC;AACrE,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC"}

package/dist/rate-limit.d.ts

@@ -2,6 +2,11 @@ export interface RateLimitConfig {
     maxRequests: number;
     windowMs: number;
 }
+/**
+ * @deprecated The server now limits with `createRateLimiter` from
+ * `@chatcops/core`, on the storage's counters, so limits hold across
+ * instances. This in-process limiter is kept for code that uses it directly.
+ */
 export declare class RateLimiter {
     private store;
     private config;

package/dist/rate-limit.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"rate-limit.d.ts","sourceRoot":"","sources":["../src/rate-limit.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,eAAe;IAC9B,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAOD,qBAAa,WAAW;IACtB,OAAO,CAAC,KAAK,CAAqC;IAClD,OAAO,CAAC,MAAM,CAAkB;gBAEpB,MAAM,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC;IAU7C,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE;IAkB7D,OAAO,IAAI,IAAI;CAQhB"}
+{"version":3,"file":"rate-limit.d.ts","sourceRoot":"","sources":["../src/rate-limit.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,eAAe;IAC9B,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAOD;;;;GAIG;AACH,qBAAa,WAAW;IACtB,OAAO,CAAC,KAAK,CAAqC;IAClD,OAAO,CAAC,MAAM,CAAkB;gBAEpB,MAAM,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC;IAU7C,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE;IAkB7D,OAAO,IAAI,IAAI;CAQhB"}

package/dist/rate-limit.js

@@ -2,6 +2,11 @@ const DEFAULT_CONFIG = {
     maxRequests: 30,
     windowMs: 60_000,
 };
+/**
+ * @deprecated The server now limits with `createRateLimiter` from
+ * `@chatcops/core`, on the storage's counters, so limits hold across
+ * instances. This in-process limiter is kept for code that uses it directly.
+ */
 export class RateLimiter {
     store = new Map();
     config;

package/dist/rate-limit.js.map

@@ -1 +1 @@
-{"version":3,"file":"rate-limit.js","sourceRoot":"","sources":["../src/rate-limit.ts"],"names":[],"mappings":"AAUA,MAAM,cAAc,GAAoB;IACtC,WAAW,EAAE,EAAE;IACf,QAAQ,EAAE,MAAM;CACjB,CAAC;AAEF,MAAM,OAAO,WAAW;IACd,KAAK,GAAG,IAAI,GAAG,EAA0B,CAAC;IAC1C,MAAM,CAAkB;IAEhC,YAAY,MAAiC;QAC3C,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,cAAc,EAAE,GAAG,MAAM,EAAE,CAAC;QAC/C,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,CAAC,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACxD,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACrD,CAAC;IACH,CAAC;IAED,KAAK,CAAC,GAAW;QACf,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAElC,IAAI,CAAC,KAAK,IAAI,GAAG,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YACnC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;YACvE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3B,CAAC;QAED,IAAI,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YAC3C,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;YAC3D,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;QACxC,CAAC;QAED,KAAK,CAAC,KAAK,EAAE,CAAC;QACd,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED,OAAO;QACL,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACtC,IAAI,GAAG,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;gBACzB,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"rate-limit.js","sourceRoot":"","sources":["../src/rate-limit.ts"],"names":[],"mappings":"AAUA,MAAM,cAAc,GAAoB;IACtC,WAAW,EAAE,EAAE;IACf,QAAQ,EAAE,MAAM;CACjB,CAAC;AAEF;;;;GAIG;AACH,MAAM,OAAO,WAAW;IACd,KAAK,GAAG,IAAI,GAAG,EAA0B,CAAC;IAC1C,MAAM,CAAkB;IAEhC,YAAY,MAAiC;QAC3C,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,cAAc,EAAE,GAAG,MAAM,EAAE,CAAC;QAC/C,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,CAAC,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACxD,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACrD,CAAC;IACH,CAAC;IAED,KAAK,CAAC,GAAW;QACf,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAElC,IAAI,CAAC,KAAK,IAAI,GAAG,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YACnC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;YACvE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3B,CAAC;QAED,IAAI,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YAC3C,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;YAC3D,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;QACxC,CAAC;QAED,KAAK,CAAC,KAAK,EAAE,CAAC;QACd,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED,OAAO;QACL,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACtC,IAAI,GAAG,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;gBACzB,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;IACH,CAAC;CACF"}

package/dist/security/origin-policy.d.ts

@@ -0,0 +1,19 @@
+import type { ChatCopsServerConfig } from '../config.js';
+/** `allowedOrigins`, or the older `cors` as a one-item list, or any origin. */
+export declare function allowedOriginsOf(config: Pick<ChatCopsServerConfig, 'allowedOrigins' | 'cors'>): string[];
+export interface OriginPolicy {
+    /** False for a browser request from a page whose origin isn't allowed. Requests without `Origin` pass. */
+    allows(origin: string | null): boolean;
+    /** CORS headers for any response to this origin, including errors. */
+    headers(origin: string | null): Record<string, string>;
+    /** Headers for the preflight answer. */
+    preflightHeaders(origin: string | null): Record<string, string>;
+}
+/**
+ * Which sites can use the chat. This stops other sites embedding your bot in
+ * their pages; it doesn't stop scripts, which can send any `Origin`.
+ */
+export declare function originPolicy(config: Pick<ChatCopsServerConfig, 'allowedOrigins' | 'cors'>): OriginPolicy;
+/** For tests. */
+export declare function resetCorsWarning(): void;
+//# sourceMappingURL=origin-policy.d.ts.map

package/dist/security/origin-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"origin-policy.d.ts","sourceRoot":"","sources":["../../src/security/origin-policy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAMzD,+EAA+E;AAC/E,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,IAAI,CAAC,oBAAoB,EAAE,gBAAgB,GAAG,MAAM,CAAC,GAAG,MAAM,EAAE,CAkBxG;AAED,MAAM,WAAW,YAAY;IAC3B,0GAA0G;IAC1G,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC;IACvC,sEAAsE;IACtE,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACvD,wCAAwC;IACxC,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACjE;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,oBAAoB,EAAE,gBAAgB,GAAG,MAAM,CAAC,GAAG,YAAY,CA2BxG;AAED,iBAAiB;AACjB,wBAAgB,gBAAgB,IAAI,IAAI,CAEvC"}

package/dist/security/origin-policy.js

@@ -0,0 +1,58 @@
+import { corsHeaders, matchOrigin } from './origin.js';
+let warnedCors = false;
+const MAX_REFUSAL_LOGS = 20;
+/** `allowedOrigins`, or the older `cors` as a one-item list, or any origin. */
+export function allowedOriginsOf(config) {
+    if (config.allowedOrigins !== undefined && config.cors !== undefined) {
+        throw new Error('Set `allowedOrigins` or `cors`, not both. `allowedOrigins` replaces `cors`.');
+    }
+    if (config.allowedOrigins !== undefined) {
+        if (config.allowedOrigins.length === 0) {
+            throw new Error("`allowedOrigins` is empty, so no site could use the chat. List your sites, or use ['*'] for any site.");
+        }
+        return config.allowedOrigins;
+    }
+    if (config.cors !== undefined) {
+        if (!warnedCors) {
+            warnedCors = true;
+            console.warn(`[chatcops] \`cors\` is deprecated. Use \`allowedOrigins: ['${config.cors}']\`, which also takes several sites and wildcards like 'https://*.acme.com'.`);
+        }
+        return [config.cors];
+    }
+    return ['*'];
+}
+/**
+ * Which sites can use the chat. This stops other sites embedding your bot in
+ * their pages; it doesn't stop scripts, which can send any `Origin`.
+ */
+export function originPolicy(config) {
+    const allowed = allowedOriginsOf(config);
+    const logged = new Set();
+    const allows = (origin) => !origin || matchOrigin(origin, allowed) !== null;
+    const headers = (origin) => {
+        if (allows(origin))
+            return corsHeaders(origin, allowed);
+        // A refused page still gets its own origin back, so the widget can read
+        // the 403 and say why in the console.
+        if (logged.size < MAX_REFUSAL_LOGS && origin && !logged.has(origin)) {
+            logged.add(origin);
+            console.warn(`[chatcops] Refused a request from ${origin}, which isn't in allowedOrigins.`);
+        }
+        return { 'Access-Control-Allow-Origin': origin ?? '', Vary: 'Origin' };
+    };
+    return {
+        allows,
+        headers,
+        preflightHeaders: (origin) => ({
+            ...headers(origin),
+            'Access-Control-Allow-Methods': 'POST, OPTIONS',
+            'Access-Control-Allow-Headers': 'Content-Type, Authorization, X-ChatCops-Protocol',
+            'Access-Control-Max-Age': '86400',
+        }),
+    };
+}
+/** For tests. */
+export function resetCorsWarning() {
+    warnedCors = false;
+}
+//# sourceMappingURL=origin-policy.js.map

package/dist/security/origin-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"origin-policy.js","sourceRoot":"","sources":["../../src/security/origin-policy.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAEvD,IAAI,UAAU,GAAG,KAAK,CAAC;AACvB,MAAM,gBAAgB,GAAG,EAAE,CAAC;AAE5B,+EAA+E;AAC/E,MAAM,UAAU,gBAAgB,CAAC,MAA6D;IAC5F,IAAI,MAAM,CAAC,cAAc,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QACrE,MAAM,IAAI,KAAK,CAAC,6EAA6E,CAAC,CAAC;IACjG,CAAC;IACD,IAAI,MAAM,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;QACxC,IAAI,MAAM,CAAC,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CAAC,uGAAuG,CAAC,CAAC;QAC3H,CAAC;QACD,OAAO,MAAM,CAAC,cAAc,CAAC;IAC/B,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC9B,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,UAAU,GAAG,IAAI,CAAC;YAClB,OAAO,CAAC,IAAI,CAAC,8DAA8D,MAAM,CAAC,IAAI,+EAA+E,CAAC,CAAC;QACzK,CAAC;QACD,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,CAAC;AACf,CAAC;AAWD;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,MAA6D;IACxF,MAAM,OAAO,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;IACzC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IAEjC,MAAM,MAAM,GAAG,CAAC,MAAqB,EAAE,EAAE,CAAC,CAAC,MAAM,IAAI,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IAE3F,MAAM,OAAO,GAAG,CAAC,MAAqB,EAA0B,EAAE;QAChE,IAAI,MAAM,CAAC,MAAM,CAAC;YAAE,OAAO,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACxD,wEAAwE;QACxE,sCAAsC;QACtC,IAAI,MAAM,CAAC,IAAI,GAAG,gBAAgB,IAAI,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YACpE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACnB,OAAO,CAAC,IAAI,CAAC,qCAAqC,MAAM,kCAAkC,CAAC,CAAC;QAC9F,CAAC;QACD,OAAO,EAAE,6BAA6B,EAAE,MAAM,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IACzE,CAAC,CAAC;IAEF,OAAO;QACL,MAAM;QACN,OAAO;QACP,gBAAgB,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YAC7B,GAAG,OAAO,CAAC,MAAM,CAAC;YAClB,8BAA8B,EAAE,eAAe;YAC/C,8BAA8B,EAAE,kDAAkD;YAClF,wBAAwB,EAAE,OAAO;SAClC,CAAC;KACH,CAAC;AACJ,CAAC;AAED,iBAAiB;AACjB,MAAM,UAAU,gBAAgB;IAC9B,UAAU,GAAG,KAAK,CAAC;AACrB,CAAC"}

package/dist/security/origin.d.ts

@@ -0,0 +1,5 @@
+/** Returns the allowed entry that matches, or null. */
+export declare function matchOrigin(origin: string | null, allowed: string[]): string | null;
+/** Returns CORS headers for a response to `origin`. */
+export declare function corsHeaders(origin: string | null, allowed: string[]): Record<string, string>;
+//# sourceMappingURL=origin.d.ts.map

package/dist/security/origin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"origin.d.ts","sourceRoot":"","sources":["../../src/security/origin.ts"],"names":[],"mappings":"AAAA,uDAAuD;AACvD,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,MAAM,GAAG,IAAI,CAInF;AAED,uDAAuD;AACvD,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAe5F"}

package/dist/security/origin.js

@@ -0,0 +1,47 @@
+/** Returns the allowed entry that matches, or null. */
+export function matchOrigin(origin, allowed) {
+    if (allowed.includes('*'))
+        return '*';
+    if (origin === null || origin === '' || origin === 'null')
+        return null;
+    return allowed.find((entry) => matchesEntry(origin, entry)) ?? null;
+}
+/** Returns CORS headers for a response to `origin`. */
+export function corsHeaders(origin, allowed) {
+    const match = matchOrigin(origin, allowed);
+    const headers = {};
+    if (match === '*') {
+        headers['Access-Control-Allow-Origin'] = '*';
+    }
+    else if (match !== null && origin !== null) {
+        headers['Access-Control-Allow-Origin'] = origin;
+    }
+    if (!(allowed.length === 1 && allowed[0] === '*')) {
+        headers.Vary = 'Origin';
+    }
+    return headers;
+}
+function matchesEntry(origin, configured) {
+    const normalized = configured.toLowerCase().replace(/\/+$/, '');
+    const separator = normalized.indexOf('://');
+    if (separator === -1)
+        return false;
+    const scheme = normalized.slice(0, separator);
+    const authority = normalized.slice(separator + 3);
+    const wildcardHost = authority.startsWith('*.');
+    try {
+        const requestUrl = new URL(origin);
+        if (requestUrl.protocol !== `${scheme}:` || requestUrl.username || requestUrl.password)
+            return false;
+        if (!wildcardHost)
+            return new URL(normalized).origin === requestUrl.origin;
+        const baseUrl = new URL(`${scheme}://${authority.slice(2)}`);
+        return (requestUrl.port === baseUrl.port &&
+            requestUrl.hostname.endsWith(`.${baseUrl.hostname}`) &&
+            requestUrl.hostname !== baseUrl.hostname);
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=origin.js.map

package/dist/security/origin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"origin.js","sourceRoot":"","sources":["../../src/security/origin.ts"],"names":[],"mappings":"AAAA,uDAAuD;AACvD,MAAM,UAAU,WAAW,CAAC,MAAqB,EAAE,OAAiB;IAClE,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC;IACtC,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,KAAK,EAAE,IAAI,MAAM,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IACvE,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC;AACtE,CAAC;AAED,uDAAuD;AACvD,MAAM,UAAU,WAAW,CAAC,MAAqB,EAAE,OAAiB;IAClE,MAAM,KAAK,GAAG,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC3C,MAAM,OAAO,GAA2B,EAAE,CAAC;IAE3C,IAAI,KAAK,KAAK,GAAG,EAAE,CAAC;QAClB,OAAO,CAAC,6BAA6B,CAAC,GAAG,GAAG,CAAC;IAC/C,CAAC;SAAM,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QAC7C,OAAO,CAAC,6BAA6B,CAAC,GAAG,MAAM,CAAC;IAClD,CAAC;IAED,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC;QAClD,OAAO,CAAC,IAAI,GAAG,QAAQ,CAAC;IAC1B,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,YAAY,CAAC,MAAc,EAAE,UAAkB;IACtD,MAAM,UAAU,GAAG,UAAU,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAChE,MAAM,SAAS,GAAG,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC5C,IAAI,SAAS,KAAK,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAEnC,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IAC9C,MAAM,SAAS,GAAG,UAAU,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;IAClD,MAAM,YAAY,GAAG,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IAEhD,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;QACnC,IAAI,UAAU,CAAC,QAAQ,KAAK,GAAG,MAAM,GAAG,IAAI,UAAU,CAAC,QAAQ,IAAI,UAAU,CAAC,QAAQ;YAAE,OAAO,KAAK,CAAC;QAErG,IAAI,CAAC,YAAY;YAAE,OAAO,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,MAAM,KAAK,UAAU,CAAC,MAAM,CAAC;QAE3E,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,GAAG,MAAM,MAAM,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC7D,OAAO,CACL,UAAU,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI;YAChC,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YACpD,UAAU,CAAC,QAAQ,KAAK,OAAO,CAAC,QAAQ,CACzC,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}