@cogitator-ai/channels 0.16.0 → 0.18.0

package/dist/channels/email/address.js

@@ -0,0 +1,211 @@
+const ADDRESS = /^[^\s@<>()",;:]+@[^\s@<>()",;:.]+(?:\.[^\s@<>()",;:.]+)+$/;
+/** An address in the form the channel keys senders by: trimmed and in lower case. */
+export function normalizeAddress(address) {
+    return address.trim().replace(/^<|>$/g, '').toLowerCase();
+}
+/** Whether `text` is a plain address, `local@domain.tld`. */
+export function isAddress(text) {
+    return ADDRESS.test(text);
+}
+/** The domain of an address, in lower case. */
+export function domainOf(address) {
+    const at = address.lastIndexOf('@');
+    return at === -1 ? '' : address.slice(at + 1).toLowerCase();
+}
+function decodeBytes(bytes, charset) {
+    try {
+        return new TextDecoder(charset.toLowerCase()).decode(bytes);
+    }
+    catch {
+        return new TextDecoder('utf-8').decode(bytes);
+    }
+}
+/** Header text with its RFC 2047 encoded words (`=?utf-8?B?...?=`, `=?utf-8?Q?...?=`) decoded. */
+export function decodeMimeWords(text) {
+    return text
+        .replace(/(=\?[^?\s]+\?[bq]\?[^?\s]*\?=)\s+(?==\?[^?\s]+\?[bq]\?)/gi, '$1')
+        .replace(/=\?([^?\s*]+)(?:\*[^?\s]*)?\?([bq])\?([^?\s]*)\?=/gi, (word, charset, encoding, data) => {
+        if (encoding.toLowerCase() === 'b') {
+            return decodeBytes(Buffer.from(data, 'base64'), charset);
+        }
+        const bytes = [];
+        const text = data.replace(/_/g, ' ');
+        for (let i = 0; i < text.length; i++) {
+            if (text[i] === '=' && /^[0-9a-f]{2}$/i.test(text.slice(i + 1, i + 3))) {
+                bytes.push(parseInt(text.slice(i + 1, i + 3), 16));
+                i += 2;
+            }
+            else
+                bytes.push(text.charCodeAt(i) & 0xff);
+        }
+        return bytes.length ? decodeBytes(Uint8Array.from(bytes), charset) : word;
+    });
+}
+/**
+ * Splits the first mailbox of an address header (RFC 5322) in one pass: quoted strings and
+ * comments are taken as text, so an address written inside them (`"x <ceo@victim.com>"`) is
+ * part of the name and never the address. The mailbox ends at the first comma outside them.
+ */
+function mailboxParts(text) {
+    let phrase = '';
+    let bare = '';
+    let comment;
+    let angle;
+    let quoted = false;
+    let depth = 0;
+    let currentComment = '';
+    let inAngle = false;
+    let angleText = '';
+    for (let i = 0; i < text.length; i++) {
+        const char = text[i];
+        if (quoted) {
+            if (char === '\\' && i + 1 < text.length)
+                phrase += text[++i];
+            else if (char === '"')
+                quoted = false;
+            else
+                phrase += char;
+            continue;
+        }
+        if (depth > 0) {
+            if (char === '\\' && i + 1 < text.length)
+                currentComment += text[++i];
+            else if (char === '(') {
+                depth++;
+                currentComment += char;
+            }
+            else if (char === ')') {
+                depth--;
+                if (depth === 0)
+                    comment ??= currentComment.trim();
+                else
+                    currentComment += char;
+            }
+            else
+                currentComment += char;
+            continue;
+        }
+        if (inAngle) {
+            if (char === '>') {
+                inAngle = false;
+                angle = angleText.trim();
+            }
+            else
+                angleText += char;
+            continue;
+        }
+        if (char === '"')
+            quoted = true;
+        else if (char === '(') {
+            depth = 1;
+            currentComment = '';
+        }
+        else if (char === '<') {
+            inAngle = true;
+            angleText = '';
+        }
+        else if (char === ',')
+            break;
+        else {
+            if (angle === undefined)
+                phrase += char;
+            bare += char;
+        }
+    }
+    return { ...(angle !== undefined && { angle }), phrase, bare, ...(comment && { comment }) };
+}
+/**
+ * The first mailbox of an address header such as `From`: `"Ann Lee" <ann@example.com>`,
+ * `Ann <ann@example.com>` or `ann@example.com (Ann)`, with encoded words in the name decoded.
+ * The address is the angle address outside quoted strings and comments, so a display name that
+ * holds another address cannot pass for it.
+ */
+export function parseMailbox(value) {
+    if (!value)
+        return undefined;
+    const parts = mailboxParts(value.replace(/\r?\n[ \t]+/g, ' ').trim());
+    if (parts.angle !== undefined) {
+        const address = normalizeAddress(parts.angle);
+        if (!isAddress(address))
+            return undefined;
+        const name = decodeMimeWords(parts.phrase.replace(/\s+/g, ' ').trim()).trim();
+        return name ? { address, name } : { address };
+    }
+    const address = normalizeAddress(parts.bare.trim());
+    if (!isAddress(address))
+        return undefined;
+    return parts.comment ? { address, name: decodeMimeWords(parts.comment) } : { address };
+}
+/** The message ids (`<id@host>`) of a `Message-ID`, `In-Reply-To` or `References` header. */
+export function messageIdsOf(value) {
+    if (!value)
+        return [];
+    const ids = value.match(/<[^<>\s]+>/g);
+    if (ids)
+        return ids;
+    const bare = value.trim();
+    return bare && !/\s/.test(bare) ? [`<${bare.replace(/^<|>$/g, '')}>`] : [];
+}
+/** The first message id of a header, if it has one. */
+export function messageIdOf(value) {
+    return messageIdsOf(value)[0];
+}
+/** A header block (`Name: value` lines, folded lines continuing with whitespace) as headers. */
+export function parseHeaderBlock(block) {
+    const headers = [];
+    for (const line of block.replace(/\r\n?/g, '\n').split('\n')) {
+        if (!line)
+            break;
+        if (/^[ \t]/.test(line) && headers.length > 0) {
+            const last = headers[headers.length - 1];
+            last[1] = `${last[1]} ${line.trim()}`;
+            continue;
+        }
+        const colon = line.indexOf(':');
+        if (colon <= 0)
+            continue;
+        headers.push([line.slice(0, colon).trim().toLowerCase(), line.slice(colon + 1).trim()]);
+    }
+    return headers;
+}
+/** The first value of a header, by its name in any letter case. */
+export function headerOf(headers, name) {
+    const wanted = name.toLowerCase();
+    return headers.find(([key]) => key === wanted)?.[1];
+}
+/** Every value of a header, top to bottom, by its name in any letter case. */
+export function headersOf(headers, name) {
+    const wanted = name.toLowerCase();
+    return headers.filter(([key]) => key === wanted).map(([, value]) => value);
+}
+/**
+ * Whether `domain` is aligned with the author's domain `fromDomain` in the relaxed DMARC sense:
+ * the same domain, or one a subdomain of the other.
+ */
+export function alignedDomains(domain, fromDomain) {
+    const a = domain.toLowerCase().replace(/\.$/, '');
+    const b = fromDomain.toLowerCase().replace(/\.$/, '');
+    if (!a || !b)
+        return false;
+    return a === b || a.endsWith(`.${b}`) || b.endsWith(`.${a}`);
+}
+/**
+ * Whether an allow list lets `address` in. Entries are addresses (`ann@example.com`), domains
+ * (`example.com` or `@example.com`, without subdomains), subdomain wildcards (`*.example.com`)
+ * or `*` for everyone, in any letter case.
+ */
+export function allowsSender(list, address) {
+    const sender = normalizeAddress(address);
+    const domain = domainOf(sender);
+    return list.some((raw) => {
+        const entry = raw.trim().toLowerCase();
+        if (entry === '*')
+            return true;
+        if (entry.startsWith('*.'))
+            return domain.endsWith(entry.slice(1));
+        if (entry.includes('@') && !entry.startsWith('@'))
+            return entry === sender;
+        return entry.replace(/^@/, '') === domain;
+    });
+}
+//# sourceMappingURL=address.js.map

package/dist/channels/email/address.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"address.js","sourceRoot":"","sources":["../../../src/channels/email/address.ts"],"names":[],"mappings":"AASA,MAAM,OAAO,GAAG,2DAA2D,CAAC;AAE5E,qFAAqF;AACrF,MAAM,UAAU,gBAAgB,CAAC,OAAe;IAC9C,OAAO,OAAO,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;AAC5D,CAAC;AAED,6DAA6D;AAC7D,MAAM,UAAU,SAAS,CAAC,IAAY;IACpC,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC5B,CAAC;AAED,+CAA+C;AAC/C,MAAM,UAAU,QAAQ,CAAC,OAAe;IACtC,MAAM,EAAE,GAAG,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACpC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;AAC9D,CAAC;AAED,SAAS,WAAW,CAAC,KAAiB,EAAE,OAAe;IACrD,IAAI,CAAC;QACH,OAAO,IAAI,WAAW,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC9D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,WAAW,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAChD,CAAC;AACH,CAAC;AAED,kGAAkG;AAClG,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,OAAO,IAAI;SACR,OAAO,CAAC,2DAA2D,EAAE,IAAI,CAAC;SAC1E,OAAO,CACN,qDAAqD,EACrD,CAAC,IAAI,EAAE,OAAe,EAAE,QAAgB,EAAE,IAAY,EAAE,EAAE;QACxD,IAAI,QAAQ,CAAC,WAAW,EAAE,KAAK,GAAG,EAAE,CAAC;YACnC,OAAO,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,OAAO,CAAC,CAAC;QAC3D,CAAC;QACD,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACrC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACrC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvE,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;gBACnD,CAAC,IAAI,CAAC,CAAC;YACT,CAAC;;gBAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;QAC/C,CAAC;QACD,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5E,CAAC,CACF,CAAC;AACN,CAAC;AAcD;;;;GAIG;AACH,SAAS,YAAY,CAAC,IAAY;IAChC,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,IAAI,OAA2B,CAAC;IAChC,IAAI,KAAyB,CAAC;IAC9B,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,cAAc,GAAG,EAAE,CAAC;IACxB,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,SAAS,GAAG,EAAE,CAAC;IACnB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACrB,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM;gBAAE,MAAM,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;iBACzD,IAAI,IAAI,KAAK,GAAG;gBAAE,MAAM,GAAG,KAAK,CAAC;;gBACjC,MAAM,IAAI,IAAI,CAAC;YACpB,SAAS;QACX,CAAC;QACD,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YACd,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM;gBAAE,cAAc,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;iBACjE,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;gBACtB,KAAK,EAAE,CAAC;gBACR,cAAc,IAAI,IAAI,CAAC;YACzB,CAAC;iBAAM,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;gBACxB,KAAK,EAAE,CAAC;gBACR,IAAI,KAAK,KAAK,CAAC;oBAAE,OAAO,KAAK,cAAc,CAAC,IAAI,EAAE,CAAC;;oBAC9C,cAAc,IAAI,IAAI,CAAC;YAC9B,CAAC;;gBAAM,cAAc,IAAI,IAAI,CAAC;YAC9B,SAAS;QACX,CAAC;QACD,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;gBACjB,OAAO,GAAG,KAAK,CAAC;gBAChB,KAAK,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC;YAC3B,CAAC;;gBAAM,SAAS,IAAI,IAAI,CAAC;YACzB,SAAS;QACX,CAAC;QACD,IAAI,IAAI,KAAK,GAAG;YAAE,MAAM,GAAG,IAAI,CAAC;aAC3B,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACtB,KAAK,GAAG,CAAC,CAAC;YACV,cAAc,GAAG,EAAE,CAAC;QACtB,CAAC;aAAM,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACxB,OAAO,GAAG,IAAI,CAAC;YACf,SAAS,GAAG,EAAE,CAAC;QACjB,CAAC;aAAM,IAAI,IAAI,KAAK,GAAG;YAAE,MAAM;aAC1B,CAAC;YACJ,IAAI,KAAK,KAAK,SAAS;gBAAE,MAAM,IAAI,IAAI,CAAC;YACxC,IAAI,IAAI,IAAI,CAAC;QACf,CAAC;IACH,CAAC;IACD,OAAO,EAAE,GAAG,CAAC,KAAK,KAAK,SAAS,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,OAAO,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;AAC9F,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,KAAyB;IACpD,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACtE,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC9B,MAAM,OAAO,GAAG,gBAAgB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC9C,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;YAAE,OAAO,SAAS,CAAC;QAC1C,MAAM,IAAI,GAAG,eAAe,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC9E,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC;IAChD,CAAC;IACD,MAAM,OAAO,GAAG,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IACpD,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;QAAE,OAAO,SAAS,CAAC;IAC1C,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC;AACzF,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,YAAY,CAAC,KAAyB;IACpD,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC;IACtB,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IACvC,IAAI,GAAG;QAAE,OAAO,GAAG,CAAC;IACpB,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC1B,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAC7E,CAAC;AAED,uDAAuD;AACvD,MAAM,UAAU,WAAW,CAAC,KAAyB;IACnD,OAAO,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AAChC,CAAC;AAED,gGAAgG;AAChG,MAAM,UAAU,gBAAgB,CAAC,KAAa;IAC5C,MAAM,OAAO,GAAuB,EAAE,CAAC;IACvC,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7D,IAAI,CAAC,IAAI;YAAE,MAAM;QACjB,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9C,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YACzC,IAAI,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;YACtC,SAAS;QACX,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,KAAK,IAAI,CAAC;YAAE,SAAS;QACzB,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAC1F,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,QAAQ,CAAC,OAAqB,EAAE,IAAY;IAC1D,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IAClC,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;AACtD,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,SAAS,CAAC,OAAqB,EAAE,IAAY;IAC3D,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IAClC,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC;AAC7E,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,MAAc,EAAE,UAAkB;IAC/D,MAAM,CAAC,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAClD,MAAM,CAAC,GAAG,UAAU,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACtD,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3B,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAC/D,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,IAAuB,EAAE,OAAe;IACnE,MAAM,MAAM,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACzC,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;IAChC,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE;QACvB,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACvC,IAAI,KAAK,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QAC/B,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACnE,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,KAAK,KAAK,MAAM,CAAC;QAC3E,OAAO,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,MAAM,CAAC;IAC5C,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/channels/email/auth.d.ts

@@ -0,0 +1,59 @@
+import { type EmailHeaders } from './address.js';
+/**
+ * What the receiving side found about the sender: `pass` when DKIM, SPF or DMARC passed for a
+ * domain aligned with the `From` address, `fail` when results were reported and none of them
+ * did, `none` when nothing was reported.
+ */
+export type SenderAuthentication = 'pass' | 'fail' | 'none';
+/**
+ * Combines the results of one source, such as the methods of one `Authentication-Results`:
+ * any pass passes (mail forwarded on breaks SPF but keeps DKIM), else any fail fails.
+ */
+export declare function combineAuthentication(...verdicts: readonly SenderAuthentication[]): SenderAuthentication;
+/**
+ * The verdict of one `Authentication-Results` header (RFC 8601) for the author domain
+ * `fromDomain`, and its authserv-id. A DMARC result for the `From` domain decides when there is
+ * one: DMARC already weighs DKIM and SPF alignment. Otherwise a DKIM or SPF pass for an aligned
+ * domain passes, and any definite result (a fail, or a pass for another domain, as a spoofer
+ * signing with a domain of its own gets) fails, while `none` or `neutral` say nothing. Parts
+ * are split outside quoted strings, so an address like `"a;dkim=pass"@evil.example` stays one
+ * value.
+ */
+export declare function parseAuthenticationResults(value: string, fromDomain: string): {
+    authservId: string;
+    verdict: SenderAuthentication;
+};
+/** Where the sender authentication of a message's headers comes from, and whom to trust. */
+export interface HeaderAuthenticationOptions {
+    /**
+     * `imap`: the `Authentication-Results` of `trustedAuthservIds`. `postmark`: the SpamAssassin
+     * `X-Spam-Tests` Postmark adds, whose earlier copies SpamAssassin removes, and the
+     * `Authentication-Results` of `trustedAuthservIds`.
+     */
+    source: 'imap' | 'postmark';
+    /** The authserv-ids (the receiving servers) whose `Authentication-Results` count */
+    trustedAuthservIds?: readonly string[];
+}
+/**
+ * Combines the verdicts of independent sources: a fail of any of them fails, since one source
+ * passing does not undo what another found, then any pass passes.
+ */
+export declare function combineSources(...verdicts: readonly SenderAuthentication[]): SenderAuthentication;
+/**
+ * The sender verdict a message's headers carry, for the author domain `fromDomain`. A sender can
+ * add any header, so only those the receiving side wrote count: the topmost
+ * `Authentication-Results` of one of `trustedAuthservIds` (without them none is trusted), and
+ * Postmark's `X-Spam-Tests`. A fail of either source fails.
+ */
+export declare function headerAuthentication(headers: EmailHeaders, fromDomain: string, options: HeaderAuthenticationOptions): SenderAuthentication;
+/**
+ * Compares two secrets in constant time for their contents: unequal lengths still run one full
+ * comparison (of the expected secret with itself), so only the length of the secret can show.
+ */
+export declare function secretsEqual(given: string, expected: string): boolean;
+/**
+ * Whether `signature` is the hex HMAC SHA-256 of `timestamp` and `token` with Mailgun's webhook
+ * signing key, as Mailgun signs the requests of its routes (in JSON mode `token` is the body).
+ */
+export declare function verifyMailgunSignature(timestamp: string, token: string | Uint8Array, signature: string | undefined, signingKey: string): boolean;
+//# sourceMappingURL=auth.d.ts.map

package/dist/channels/email/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../../src/channels/email/auth.ts"],"names":[],"mappings":"AACA,OAAO,EAA6B,KAAK,YAAY,EAAE,MAAM,WAAW,CAAC;AAEzE;;;;GAIG;AACH,MAAM,MAAM,oBAAoB,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;AAE5D;;;GAGG;AACH,wBAAgB,qBAAqB,CACnC,GAAG,QAAQ,EAAE,SAAS,oBAAoB,EAAE,GAC3C,oBAAoB,CAItB;AAyFD;;;;;;;;GAQG;AACH,wBAAgB,0BAA0B,CACxC,KAAK,EAAE,MAAM,EACb,UAAU,EAAE,MAAM,GACjB;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,oBAAoB,CAAA;CAAE,CAqBvD;AAED,4FAA4F;AAC5F,MAAM,WAAW,2BAA2B;IAC1C;;;;OAIG;IACH,MAAM,EAAE,MAAM,GAAG,UAAU,CAAC;IAC5B,oFAAoF;IACpF,kBAAkB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACxC;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,GAAG,QAAQ,EAAE,SAAS,oBAAoB,EAAE,GAAG,oBAAoB,CAIjG;AAgBD;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,YAAY,EACrB,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,2BAA2B,GACnC,oBAAoB,CAatB;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAKrE;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CACpC,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,GAAG,UAAU,EAC1B,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,UAAU,EAAE,MAAM,GACjB,OAAO,CAOT"}

package/dist/channels/email/auth.js

@@ -0,0 +1,212 @@
+import { createHmac, timingSafeEqual } from 'node:crypto';
+import { alignedDomains, headersOf } from './address.js';
+/**
+ * Combines the results of one source, such as the methods of one `Authentication-Results`:
+ * any pass passes (mail forwarded on breaks SPF but keeps DKIM), else any fail fails.
+ */
+export function combineAuthentication(...verdicts) {
+    if (verdicts.includes('pass'))
+        return 'pass';
+    if (verdicts.includes('fail'))
+        return 'fail';
+    return 'none';
+}
+/** Results that say something about the sender, unlike `none`, `neutral` or `temperror`. */
+const DEFINITE = new Set(['pass', 'fail', 'softfail', 'permerror', 'hardfail']);
+/**
+ * The text of a header without its comments, in one pass that knows quoted strings and `\`
+ * escapes: a `(` inside quotes is text, and an escaped quote does not end them.
+ */
+function withoutComments(text) {
+    let out = '';
+    let depth = 0;
+    let quoted = false;
+    for (let i = 0; i < text.length; i++) {
+        const char = text[i];
+        if (char === '\\' && i + 1 < text.length) {
+            if (depth === 0)
+                out += char + text[i + 1];
+            i++;
+            continue;
+        }
+        if (depth === 0 && char === '"')
+            quoted = !quoted;
+        if (!quoted && char === '(')
+            depth++;
+        else if (!quoted && char === ')' && depth > 0)
+            depth--;
+        else if (depth === 0)
+            out += char;
+    }
+    return out;
+}
+/** `text` split at `separator` and at whitespace too when `alsoSpace`, never inside quotes. */
+function splitOutsideQuotes(text, separator, alsoSpace = false) {
+    const parts = [];
+    let current = '';
+    let quoted = false;
+    for (let i = 0; i < text.length; i++) {
+        const char = text[i];
+        if (char === '\\' && i + 1 < text.length) {
+            current += char + text[++i];
+            continue;
+        }
+        if (char === '"')
+            quoted = !quoted;
+        if (!quoted && (char === separator || (alsoSpace && /\s/.test(char)))) {
+            if (current)
+                parts.push(current);
+            current = '';
+        }
+        else
+            current += char;
+    }
+    if (current)
+        parts.push(current);
+    return parts;
+}
+/** The results of a header, its `;`-separated parts read outside quoted strings. */
+function authResultsOf(value) {
+    const [id = '', ...segments] = splitOutsideQuotes(withoutComments(value), ';');
+    const results = [];
+    for (const segment of segments) {
+        const [first = '', ...rest] = splitOutsideQuotes(segment.trim(), ' ', true);
+        const method = /^(dkim|spf|dmarc)=([a-z]+)$/i.exec(first);
+        if (!method)
+            continue;
+        const properties = new Map();
+        for (const token of rest) {
+            const equals = token.indexOf('=');
+            if (equals <= 0)
+                continue;
+            const name = token.slice(0, equals).toLowerCase();
+            if (!properties.has(name))
+                properties.set(name, token.slice(equals + 1));
+        }
+        results.push({ method: method[1].toLowerCase(), result: method[2].toLowerCase(), properties });
+    }
+    return { authservId: id.trim().split(/\s+/)[0]?.toLowerCase() ?? '', results };
+}
+/** The domain a property names: of an address (after its last `@`) or the value itself. */
+function propertyDomain(result, ...names) {
+    for (const name of names) {
+        const value = result.properties.get(name);
+        if (!value)
+            continue;
+        const bare = value.replace(/^"|"$/g, '');
+        const at = bare.lastIndexOf('@');
+        const domain = (at === -1 ? bare : bare.slice(at + 1)).replace(/^"|"$/g, '').toLowerCase();
+        if (domain && !/[\s";]/.test(domain))
+            return domain;
+    }
+    return undefined;
+}
+/**
+ * The verdict of one `Authentication-Results` header (RFC 8601) for the author domain
+ * `fromDomain`, and its authserv-id. A DMARC result for the `From` domain decides when there is
+ * one: DMARC already weighs DKIM and SPF alignment. Otherwise a DKIM or SPF pass for an aligned
+ * domain passes, and any definite result (a fail, or a pass for another domain, as a spoofer
+ * signing with a domain of its own gets) fails, while `none` or `neutral` say nothing. Parts
+ * are split outside quoted strings, so an address like `"a;dkim=pass"@evil.example` stays one
+ * value.
+ */
+export function parseAuthenticationResults(value, fromDomain) {
+    const { authservId, results } = authResultsOf(value);
+    const dmarc = results.find((result) => {
+        if (result.method !== 'dmarc')
+            return false;
+        const from = propertyDomain(result, 'header.from');
+        return !from || alignedDomains(from, fromDomain);
+    });
+    if (dmarc?.result === 'pass')
+        return { authservId, verdict: 'pass' };
+    if (dmarc && DEFINITE.has(dmarc.result))
+        return { authservId, verdict: 'fail' };
+    let reported = false;
+    for (const result of results) {
+        if (result.method === 'dmarc')
+            continue;
+        if (DEFINITE.has(result.result))
+            reported = true;
+        if (result.result !== 'pass')
+            continue;
+        const domain = result.method === 'dkim'
+            ? propertyDomain(result, 'header.d', 'header.i')
+            : propertyDomain(result, 'smtp.mailfrom', 'smtp.helo');
+        if (domain && alignedDomains(domain, fromDomain))
+            return { authservId, verdict: 'pass' };
+    }
+    return { authservId, verdict: reported ? 'fail' : 'none' };
+}
+/**
+ * Combines the verdicts of independent sources: a fail of any of them fails, since one source
+ * passing does not undo what another found, then any pass passes.
+ */
+export function combineSources(...verdicts) {
+    if (verdicts.includes('fail'))
+        return 'fail';
+    if (verdicts.includes('pass'))
+        return 'pass';
+    return 'none';
+}
+/**
+ * The verdict of Postmark's SpamAssassin tests: `DKIM_VALID_AU` is a valid signature of the
+ * author's domain, an SPF fail or an invalid signature fails. More than one `X-Spam-Tests`
+ * header fails, since one of them came from the sender.
+ */
+function spamTestsAuthentication(headers) {
+    const tests = headersOf(headers, 'x-spam-tests');
+    if (tests.length > 1)
+        return 'fail';
+    if (tests.length === 0)
+        return 'none';
+    if (/\bDKIM_VALID_AU\b/.test(tests[0]))
+        return 'pass';
+    if (/\b(SPF_FAIL|SPF_SOFTFAIL|DKIM_INVALID)\b/.test(tests[0]))
+        return 'fail';
+    return 'none';
+}
+/**
+ * The sender verdict a message's headers carry, for the author domain `fromDomain`. A sender can
+ * add any header, so only those the receiving side wrote count: the topmost
+ * `Authentication-Results` of one of `trustedAuthservIds` (without them none is trusted), and
+ * Postmark's `X-Spam-Tests`. A fail of either source fails.
+ */
+export function headerAuthentication(headers, fromDomain, options) {
+    const verdicts = [];
+    const trusted = options.trustedAuthservIds?.map((id) => id.toLowerCase()) ?? [];
+    if (trusted.length > 0) {
+        for (const value of headersOf(headers, 'authentication-results')) {
+            const parsed = parseAuthenticationResults(value, fromDomain);
+            if (!trusted.includes(parsed.authservId))
+                continue;
+            verdicts.push(parsed.verdict);
+            break;
+        }
+    }
+    if (options.source === 'postmark')
+        verdicts.push(spamTestsAuthentication(headers));
+    return combineSources(...verdicts);
+}
+/**
+ * Compares two secrets in constant time for their contents: unequal lengths still run one full
+ * comparison (of the expected secret with itself), so only the length of the secret can show.
+ */
+export function secretsEqual(given, expected) {
+    const givenBytes = Buffer.from(given);
+    const expectedBytes = Buffer.from(expected);
+    const sameLength = givenBytes.length === expectedBytes.length;
+    return timingSafeEqual(sameLength ? givenBytes : expectedBytes, expectedBytes) && sameLength;
+}
+/**
+ * Whether `signature` is the hex HMAC SHA-256 of `timestamp` and `token` with Mailgun's webhook
+ * signing key, as Mailgun signs the requests of its routes (in JSON mode `token` is the body).
+ */
+export function verifyMailgunSignature(timestamp, token, signature, signingKey) {
+    if (!signature || !/^[0-9a-f]+$/i.test(signature))
+        return false;
+    const expected = Buffer.from(createHmac('sha256', signingKey).update(timestamp).update(token).digest('hex'));
+    const given = Buffer.from(signature.toLowerCase());
+    return given.length === expected.length && timingSafeEqual(given, expected);
+}
+//# sourceMappingURL=auth.js.map

package/dist/channels/email/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../../src/channels/email/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,SAAS,EAAqB,MAAM,WAAW,CAAC;AASzE;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CACnC,GAAG,QAAyC;IAE5C,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC;IAC7C,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC;IAC7C,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,4FAA4F;AAC5F,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC,CAAC;AAEhF;;;GAGG;AACH,SAAS,eAAe,CAAC,IAAY;IACnC,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACrB,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;YACzC,IAAI,KAAK,KAAK,CAAC;gBAAE,GAAG,IAAI,IAAI,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAC3C,CAAC,EAAE,CAAC;YACJ,SAAS;QACX,CAAC;QACD,IAAI,KAAK,KAAK,CAAC,IAAI,IAAI,KAAK,GAAG;YAAE,MAAM,GAAG,CAAC,MAAM,CAAC;QAClD,IAAI,CAAC,MAAM,IAAI,IAAI,KAAK,GAAG;YAAE,KAAK,EAAE,CAAC;aAChC,IAAI,CAAC,MAAM,IAAI,IAAI,KAAK,GAAG,IAAI,KAAK,GAAG,CAAC;YAAE,KAAK,EAAE,CAAC;aAClD,IAAI,KAAK,KAAK,CAAC;YAAE,GAAG,IAAI,IAAI,CAAC;IACpC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,+FAA+F;AAC/F,SAAS,kBAAkB,CAAC,IAAY,EAAE,SAAiB,EAAE,SAAS,GAAG,KAAK;IAC5E,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACrB,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;YACzC,OAAO,IAAI,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;YAC5B,SAAS;QACX,CAAC;QACD,IAAI,IAAI,KAAK,GAAG;YAAE,MAAM,GAAG,CAAC,MAAM,CAAC;QACnC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YACtE,IAAI,OAAO;gBAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACjC,OAAO,GAAG,EAAE,CAAC;QACf,CAAC;;YAAM,OAAO,IAAI,IAAI,CAAC;IACzB,CAAC;IACD,IAAI,OAAO;QAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACjC,OAAO,KAAK,CAAC;AACf,CAAC;AASD,oFAAoF;AACpF,SAAS,aAAa,CAAC,KAAa;IAClC,MAAM,CAAC,EAAE,GAAG,EAAE,EAAE,GAAG,QAAQ,CAAC,GAAG,kBAAkB,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC;IAC/E,MAAM,OAAO,GAAiB,EAAE,CAAC;IACjC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,CAAC,KAAK,GAAG,EAAE,EAAE,GAAG,IAAI,CAAC,GAAG,kBAAkB,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;QAC5E,MAAM,MAAM,GAAG,8BAA8B,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1D,IAAI,CAAC,MAAM;YAAE,SAAS;QACtB,MAAM,UAAU,GAAG,IAAI,GAAG,EAAkB,CAAC;QAC7C,KAAK,MAAM,KAAK,IAAI,IAAI,EAAE,CAAC;YACzB,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAClC,IAAI,MAAM,IAAI,CAAC;gBAAE,SAAS;YAC1B,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC;YAClD,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;QAC3E,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;IACjG,CAAC;IACD,OAAO,EAAE,UAAU,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,CAAC;AACjF,CAAC;AAED,2FAA2F;AAC3F,SAAS,cAAc,CAAC,MAAkB,EAAE,GAAG,KAAe;IAC5D,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC1C,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QACzC,MAAM,EAAE,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,MAAM,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QAC3F,IAAI,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,OAAO,MAAM,CAAC;IACtD,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,0BAA0B,CACxC,KAAa,EACb,UAAkB;IAElB,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IACrD,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;QACpC,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO;YAAE,OAAO,KAAK,CAAC;QAC5C,MAAM,IAAI,GAAG,cAAc,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;QACnD,OAAO,CAAC,IAAI,IAAI,cAAc,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IACH,IAAI,KAAK,EAAE,MAAM,KAAK,MAAM;QAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IACrE,IAAI,KAAK,IAAI,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAChF,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO;YAAE,SAAS;QACxC,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC;YAAE,QAAQ,GAAG,IAAI,CAAC;QACjD,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM;YAAE,SAAS;QACvC,MAAM,MAAM,GACV,MAAM,CAAC,MAAM,KAAK,MAAM;YACtB,CAAC,CAAC,cAAc,CAAC,MAAM,EAAE,UAAU,EAAE,UAAU,CAAC;YAChD,CAAC,CAAC,cAAc,CAAC,MAAM,EAAE,eAAe,EAAE,WAAW,CAAC,CAAC;QAC3D,IAAI,MAAM,IAAI,cAAc,CAAC,MAAM,EAAE,UAAU,CAAC;YAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAC3F,CAAC;IACD,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;AAC7D,CAAC;AAcD;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,GAAG,QAAyC;IACzE,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC;IAC7C,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC;IAC7C,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,SAAS,uBAAuB,CAAC,OAAqB;IACpD,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;IACjD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,MAAM,CAAC;IACpC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC;IACtC,IAAI,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO,MAAM,CAAC;IACtD,IAAI,0CAA0C,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO,MAAM,CAAC;IAC7E,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAClC,OAAqB,EACrB,UAAkB,EAClB,OAAoC;IAEpC,MAAM,QAAQ,GAA2B,EAAE,CAAC;IAC5C,MAAM,OAAO,GAAG,OAAO,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;IAChF,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,KAAK,MAAM,KAAK,IAAI,SAAS,CAAC,OAAO,EAAE,wBAAwB,CAAC,EAAE,CAAC;YACjE,MAAM,MAAM,GAAG,0BAA0B,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;YAC7D,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC;gBAAE,SAAS;YACnD,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAC9B,MAAM;QACR,CAAC;IACH,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,UAAU;QAAE,QAAQ,CAAC,IAAI,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAC,CAAC;IACnF,OAAO,cAAc,CAAC,GAAG,QAAQ,CAAC,CAAC;AACrC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,KAAa,EAAE,QAAgB;IAC1D,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACtC,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC5C,MAAM,UAAU,GAAG,UAAU,CAAC,MAAM,KAAK,aAAa,CAAC,MAAM,CAAC;IAC9D,OAAO,eAAe,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,aAAa,EAAE,aAAa,CAAC,IAAI,UAAU,CAAC;AAC/F,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CACpC,SAAiB,EACjB,KAA0B,EAC1B,SAA6B,EAC7B,UAAkB;IAElB,IAAI,CAAC,SAAS,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC;QAAE,OAAO,KAAK,CAAC;IAChE,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAC1B,UAAU,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAC/E,CAAC;IACF,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC,CAAC;IACnD,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,IAAI,eAAe,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;AAC9E,CAAC"}