@genesis-tech/genesispay-seller 0.12.0 → 0.13.1

package/CHANGELOG.md

@@ -1,5 +1,50 @@
 # Changelog
 
+## 0.13.0 — checkout return parameters and fulfilment DX
+
+Additive. Exports the return-parameter constants and a hint parser, and adds
+local redirect-URL validation to `checkout.create`. No removed or changed
+behaviour; the server stays the authoritative backstop for raw HTTP clients.
+
+### Added
+
+- **`CHECKOUT_RETURN_LINK_ID_PARAM` / `CHECKOUT_RETURN_STATUS_PARAM`** — the exact
+  query-parameter names (`genesispay_link_id` / `genesispay_status`) the hosted
+  checkout appends to a merchant's `returnUrl`. Exported so a merchant can build
+  or match the return URL without hardcoding the names.
+- **`parseCheckoutReturnHint(url: string | URL): CheckoutReturnHint | null`** and the
+  **`CheckoutReturnHint`** type (`{ linkId, status: "paid" }`). Returns a hint only
+  when the URL carries a non-empty `genesispay_link_id` and an exact
+  `genesispay_status=paid`; a missing id, an unknown status, or an unparseable URL
+  returns `null`. It performs **no verification** — the parameters are unsigned,
+  so gate fulfilment on `checkout.retrieve(hint.linkId)` or a webhook, never on
+  the hint itself.
+
+### Behaviour changes
+
+- `checkout.create` now validates `returnUrl` and `cancelUrl` **locally** before
+  the request is sent: each field is trimmed (a blank field is dropped), capped at
+  2,048 characters, and must be `https` (`http` is accepted only for the exact
+  loopback hosts `localhost` and `127.0.0.1`). A `javascript:`/`data:` value, a
+  remote `http` host, or a deceptive `localhost.example` name throws
+  `GenesisPayValidationError` with one `issues` entry per offending field, and no
+  network request is made. The fields stay typed `string`; the server's own
+  validation is unchanged and remains authoritative for non-SDK callers.
+
+### Documentation
+
+- The unsigned-return-parameter warning moved beside the SDK quick start, with a
+  parse-hint → authenticated `checkout.retrieve()` → idempotent-action example.
+- New fulfilment guide (per product: what to fulfil on and how to dedupe), a note
+  that the `cs` query parameter is internal payer session identity rather than
+  merchant correlation, and the exact correlation echo contract for `metadata`
+  and `clientReferenceId`.
+
+### Requirements
+
+- None. Works against any backend; a server predating this release simply sees
+  the same validated values it would have received anyway.
+
 ## 0.12.0 — permanent product checkout permalinks
 
 ### Added

package/README.md

@@ -56,6 +56,52 @@ export const GET = genesispay.gate({ amountUsdc: "0.02" }).wrap(
 );
 ```
 
+### Return URL — parse the hint, then verify
+
+When you pass `returnUrl` to `checkout.create`, the hosted checkout shows a
+"Return to …" button and appends
+`?genesispay_link_id=<publicId>&genesispay_status=paid` only when the payer
+selects it — there is no timed auto-redirect. Those parameters are a **UI hint
+only**: they are unsigned, and a payer can navigate to that URL directly without
+paying. **Never fulfil on the query string**; use webhooks as the reliable
+delivery path.
+
+Use `parseCheckoutReturnHint` to read the hint, then confirm with an
+**authenticated** `checkout.retrieve()` before fulfilling:
+
+```ts
+import { parseCheckoutReturnHint } from "@genesis-tech/genesispay-seller";
+
+export async function GET(request: Request) {
+  const hint = parseCheckoutReturnHint(new URL(request.url));
+  if (!hint) return Response.json({ ok: true }); // no return params — nothing to do
+
+  // hint.linkId is the link's publicId. Verify with your seller key, not the URL.
+  const session = await genesispay.checkout.retrieve(hint.linkId);
+
+  // Only single-use links are fulfilled here. A reusable link's "paid" means
+  // "ever paid"; fulfil those on a payment.confirmed webhook keyed by attempt.id.
+  if (session.linkType !== "single") return Response.json({ ok: true });
+
+  // Single-use link: fulfil once, keyed by the link itself.
+  if (session.paid) await fulfilOnce(hint.linkId);
+
+  return Response.json({ ok: true });
+}
+```
+
+`parseCheckoutReturnHint(url)` returns `{ linkId, status: "paid" }` only when the
+URL carries a non-empty `genesispay_link_id` and an exact `genesispay_status=paid`.
+Anything else — a missing id, an unknown status like `refunded`, a hand-built URL
+— returns `null`. It performs **no verification**: treat it as a prompt to look
+the link up with your key, never as a receipt.
+
+This pattern fulfils a **single-use** link, keyed by `hint.linkId` (the link's
+`publicId`) and refuses any other `linkType`. For a **reusable** link, `paid`
+means "ever paid" and the return URL cannot say which payment triggered it —
+fulfil those on verified `payment.confirmed` webhooks keyed by `attempt.id` (see
+the fulfilment guide below).
+
 ### Amounts and settlement
 
 During the beta, every new hosted checkout link settles in **USDC on Base**. An
@@ -292,8 +338,9 @@ migration) the new link gets a new `inv_…`, and every hardcoded copy of the ol
 `link.payUrl` — a button in your shop, a page in your docs, an email template —
 silently breaks.
 
-Store the **product's** `publicId` (`prod_…`) instead; it never changes. Then
-either:
+Store the **product's** `publicId` (`prod_…`) instead; it never changes. Because
+the permanent URL is deterministic (`{baseUrl}/pay/p/{publicId}`), derive it at
+render time — don't store the URL itself in a config file or env var. Then either:
 
 - build the permanent URL — `genesispay.products.permalink(product.publicId)`
   returns `{baseUrl}/pay/p/{publicId}`: pure string builder, no network call,
@@ -395,13 +442,42 @@ endpoint does not exist at all. The resulting attempt has `txHash: null` (no
 transaction happened) and `simulated: true`; branch on that flag rather than on
 the missing hash, because a *pending real* attempt has no hash either.
 
-### Redirect parameters are not proof of payment
+### Fulfilment guide
+
+GenesisPay reports payment truth as **confirmed attempts**; it cannot know whether
+*your* action — shipping, unlocking, granting access — actually succeeded, so
+there is deliberately no `fulfilled` field on the SDK or the API. Fulfilment is
+merchant-owned. Key each fulfilment idempotently so a webhook retry or a repeated
+handler run never double-delivers.
+
+| Product | Fulfil on | Deduplicate by |
+|---|---|---|
+| Standalone single-use checkout | a verified `payment.confirmed` webhook, or an authenticated `checkout.retrieve()` | the link `publicId` (fulfil once per link) |
+| Standalone reusable checkout | each verified `payment.confirmed` attempt | `attempt.id` — never the link-level `paid`, which means "ever paid" |
+| Redirect product | a verified, non-simulated entitlement (see Products) | the entitlement `publicId` |
+| Product-backed gate | the confirmed purchase inside `protect` | `purchase.payment.attemptId` |
+
+Webhook deliveries are retried (up to three attempts, stable `event.id`), and a
+single-use link emits both `payment.confirmed` and `link.paid` for one settlement —
+dedupe on `event.id`, and branch on `event.type` so you fulfil once (see
+Webhooks above).
+
+### Correlation, and the `cs` query parameter
+
+The hosted checkout may carry a `cs` query parameter. That is GenesisPay's
+**internal payer checkout-session identity**, not a merchant correlation field —
+do not read it or rely on it. To correlate a payment back to your own records,
+send `clientReferenceId` and `metadata` on `checkout.create`; both are echoed back
+to you.
+
+The echo contract is exact:
 
-The hosted checkout appends `?genesispay_link_id=…&genesispay_status=paid` to your
-`returnUrl`. Those parameters are a **UI hint only** — they are not signed, and a
-payer can navigate to that URL directly without paying. Fulfil on the
-`payment.confirmed` webhook or on `checkout.retrieve(publicId).paid`, never on the
-query string.
+- Non-empty `metadata` keys and values round-trip **unchanged** on `create`,
+  `retrieve`, and the payment-link webhook payloads.
+- An empty `metadata` object is normalised to `null`.
+- `clientReferenceId` is **trimmed**; a blank value is normalised to `null`.
+- Both appear on `create`/`retrieve` responses and on the `payment.confirmed` /
+  `link.paid` webhook payloads.
 
 ### Limits
 
@@ -409,9 +485,12 @@ query string.
 |---|---|
 | `metadata` | 20 keys; keys ≤ 40 chars; values must be strings, ≤ 500 chars; ≤ 4096 bytes serialized |
 | `clientReferenceId` | ≤ 200 chars |
-| `returnUrl` / `cancelUrl` | ≤ 2048 chars, `https` only (`http` allowed for localhost) |
+| `returnUrl` / `cancelUrl` | ≤ 2048 chars, `https` only (`http` allowed for `localhost` / `127.0.0.1`) |
 
-Exceeding any of these fails the `checkout.create` call server-side with a 422.
+The `returnUrl`/`cancelUrl` limits and the amount-conflict check are validated
+**locally** and throw `GenesisPayValidationError` before any request is sent. The
+remaining limits (`metadata`, `clientReferenceId`) are enforced server-side and
+fail the `checkout.create` call with a 422.
 
 ### Note on `paid` for reusable links
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@genesis-tech/genesispay-seller",
-  "version": "0.12.0",
+  "version": "0.13.1",
   "description": "Framework-agnostic x402 payment gate for sellers, powered by GenesisPay.",
   "license": "MIT",
   "author": "GenesisTech",

package/dist/client.d.ts

@@ -1,283 +0,0 @@
-import type { MandatesResource } from "./mandates.js";
-import type { CustomersResource } from "./customers.js";
-import type { InvoicesResource } from "./invoices.js";
-import type { VerifySettlement } from "./payment-gate.js";
-import type { PlansResource } from "./plans.js";
-import type { ProductsResource } from "./products.js";
-import type { EntitlementsResource } from "./entitlements.js";
-import type { PaymentGateNetwork } from "./networks.js";
-import type { ConstructEventOptions, GenesisPayEvent } from "./webhooks.js";
-/**
- * The legacy `GenesisPay` client — a Stripe-like entry point that owns the seller key and
- * resolves everything else (payout wallet, network, base URL) from it. The key
- * prefix decides the mode: `gp_sk_test_…` / legacy `gp_sk_…` → test,
- * `gp_sk_live_…` → live. See docs/archive/SELLER_SDK_DX_SPEC.md.
- */
-export type GenesisPayKeyMode = "test" | "live";
-export type GenesisPayClientOptions = {
-    /** gp_sk_test_… | gp_sk_live_… | legacy gp_sk_… — the only required field. */
-    apiKey: string;
-    /** Overrides the mode→URL default (self-host / staging). Must be https (http only for localhost). */
-    baseUrl?: string;
-    /** Injectable fetch for tests. Defaults to the global fetch. */
-    fetchFn?: typeof fetch;
-    /** Seller-config cache TTL. Default 5 min. */
-    configTtlMs?: number;
-    /** Optional local pin on the resolved payout wallet; recommended for live keys. */
-    expectedPayTo?: string;
-};
-export type SellerConfig = {
-    id: string;
-    mode: GenesisPayKeyMode;
-    payTo: string | null;
-    hasPayTo: boolean;
-    network: {
-        networkName: PaymentGateNetwork;
-        chainId: number;
-        usdcAddress: string;
-        asset: "USDC";
-    };
-};
-/**
- * The amount half of {@link CheckoutCreateInput}, as a union so that **one of
- * the two names is always required at compile time** — `amountUsdc` was a
- * required property before 0.6.0, and losing that to two optional fields would
- * have turned a type error into a runtime one.
- */
-export type CheckoutAmountInput = {
-    /**
-     * Decimal amount **in `asset`** — `"5.00"`, at most 6 decimals, always a
-     * string (a float would lose minor units). Hosted checkout links settle
-     * in USDC during the beta, so the amount is in dollars.
-     *
-     * Passing the deprecated `amountUsdc` alongside it is allowed only when
-     * both are the same amount; two different values throw
-     * `GenesisPayValidationError` before the request.
-     */
-    amount: string;
-    /** @deprecated Use `amount` alone. */
-    amountUsdc?: string;
-} | {
-    amount?: string;
-    /**
-     * @deprecated Renamed to `amount` in 0.6.0. The name claimed a currency
-     * the value did not always have. Still accepted, and still sent on the wire for backends older than
-     * 0.6.0 — but new code should set `amount`.
-     */
-    amountUsdc: string;
-};
-export type CheckoutCreateInput = CheckoutAmountInput & {
-    title: string;
-    description?: string;
-    linkType?: "single" | "reusable";
-    destinationWallet?: string;
-    /**
-     * Hosted checkout links settle in USDC during the beta. Omit this field in
-     * new integrations; it is kept only to make the invariant explicit in the
-     * request type.
-     */
-    asset?: "USDC";
-    /** Free-form correlation data; echoed back in webhooks and `checkout.retrieve()`. */
-    metadata?: Record<string, string>;
-    /** The merchant's own reference (Stripe: client_reference_id). */
-    clientReferenceId?: string;
-    /** Where the payer returns after a successful payment (https). */
-    returnUrl?: string;
-    /** Where the payer returns when they cancel (https). */
-    cancelUrl?: string;
-};
-export type CheckoutLink = {
-    publicId: string;
-    payUrl: string;
-    /** Decimal amount in `asset`, as the server normalized it (e.g. `"5.00"`). */
-    amount: string;
-    /** @deprecated Same value as {@link CheckoutLink.amount}; see the input field. */
-    amountUsdc: string;
-    /**
-     * The currency `amount` is denominated in. Echoed back on create so a EURC
-     * link can be confirmed as one without a second round-trip.
-     */
-    asset: "USDC" | "EURC";
-    title: string;
-    metadata: Record<string, string> | null;
-    clientReferenceId: string | null;
-    returnUrl: string | null;
-    cancelUrl: string | null;
-};
-/** Lifecycle of a single payment attempt on a link, as the server reports it. */
-export type CheckoutAttemptStatus = "pending" | "submitted" | "confirmed" | "failed" | "expired";
-/**
- * One payment attempt against a checkout link — the receipt data (`txHash`,
- * `payerWallet`) that `paid === true` alone cannot give you.
- *
- * A `reusable` link accumulates attempts; the newest comes first. `txHash` is
- * null while an attempt is still pending, and stays null for attempts created
- * by the test-mode `simulate-payment` endpoint (no transaction exists).
- */
-export type CheckoutAttempt = {
-    id: string;
-    status: CheckoutAttemptStatus;
-    txHash: string | null;
-    payerWallet: string | null;
-    createdAt: string;
-    confirmedAt: string | null;
-    failureReason: string | null;
-    /**
-     * True when no funds moved — an attempt created by
-     * `checkout.simulatePayment`. Note that such an attempt also has
-     * `txHash: null` — but so does a pending real one, which is why this flag
-     * exists rather than inferring it.
-     *
-     * `false` for a real settlement, including on testnet and in provider
-     * sandboxes: this is the fabricated-payment axis, not the environment axis.
-     *
-     * Defaults to `false` against a backend that does not report it.
-     */
-    simulated: boolean;
-};
-export type CheckoutSession = CheckoutLink & {
-    description: string | null;
-    linkType: "single" | "reusable";
-    status: "active" | "paid" | "archived";
-    destinationWallet: string;
-    chainId: number;
-    /**
-     * true as soon as at least one payment is confirmed — the value to poll on.
-     *
-     * For a `reusable` link this answers "has this link ever been paid", not "has
-     * this buyer paid": `confirmedPaymentCount` only grows, so `paid` stays true
-     * from the first payment onward. Per-buyer fulfilment on a reusable link needs
-     * a webhook, or `confirmedPaymentCount` tracked as a delta.
-     */
-    paid: boolean;
-    confirmedPaymentCount: number;
-    createdAt: string;
-    /**
-     * Payment attempts for this link, newest first — empty when the server does
-     * not report them (older backend) or when nobody has tried to pay yet.
-     */
-    attempts: CheckoutAttempt[];
-};
-export type SimulatePaymentOptions = {
-    /**
-     * Payer address recorded on the simulated attempt. Defaults to a deliberately
-     * synthetic server-side placeholder, so nobody mistakes a simulated payment
-     * for a real payer in a dashboard or an export.
-     */
-    payerWallet?: string;
-};
-export type GateConfig = {
-    amountUsdc: string;
-    description?: string;
-    resource?: string;
-    mimeType?: string;
-    maxTimeoutSeconds?: number;
-};
-type GateHandler<Args extends unknown[]> = (request: Request, ...args: Args) => Response | Promise<Response>;
-export interface ResolvingGate {
-    wrap<Args extends unknown[]>(handler: GateHandler<Args>, opts?: {
-        verifySettlement?: VerifySettlement;
-    }): (request: Request, ...args: Args) => Promise<Response>;
-    /** Warm the seller-config cache (and surface auth/wallet errors) before traffic. */
-    prime(): Promise<void>;
-}
-export { GenesisPayConfigError, GenesisPayNetworkSafetyError, GenesisPayNotFoundError, GenesisPayRateLimitError, GenesisPayValidationError, type GenesisPayValidationIssue, } from "./errors.js";
-export declare class GenesisPay {
-    readonly mode: GenesisPayKeyMode;
-    readonly baseUrl: string;
-    readonly checkout: {
-        create(input: CheckoutCreateInput): Promise<CheckoutLink>;
-        retrieve(publicId: string): Promise<CheckoutSession>;
-        /**
-         * Test mode only: records a confirmed payment on one of your links without
-         * any money moving, and fires the real `payment.confirmed` (plus
-         * `link.paid` for a single-use link) webhooks — the point being that you can
-         * exercise your webhook handler end to end.
-         *
-         * The resulting attempt carries `simulated: true` and `txHash: null`; there
-         * is no transaction, and a made-up hash would be a lie in a field other
-         * systems point a block explorer at.
-         */
-        simulatePayment(publicId: string, opts?: SimulatePaymentOptions): Promise<CheckoutSession>;
-    };
-    /** Subscription plans and their hosted `checkoutUrl` — see ./plans.ts. */
-    readonly plans: PlansResource;
-    /** The merchant's catalogue and its canonical payment links — see ./products.ts. */
-    readonly products: ProductsResource;
-    /** Seller-scoped redirect-entitlement verification. */
-    readonly entitlements: EntitlementsResource;
-    /** Reusable billing contacts for one-off invoices. */
-    readonly customers: CustomersResource;
-    /** Draft, finalize, deliver, and collect one-off invoices. */
-    readonly invoices: InvoicesResource;
-    /**
-     * Payment mandates: bounded, revocable spending approvals a payer signs once.
-     *
-     * There is no `mandates.activate` on purpose — activation carries the
-     * *payer's* signature, is authorized by their wallet rather than by this API
-     * key, and therefore belongs in the payer-facing frontend. See the module
-     * comment in ./mandates.ts.
-     */
-    readonly mandates: MandatesResource;
-    /**
-     * Webhook signature verification. Also exported as the free function
-     * `constructEvent` — a webhook route rarely has a client instance in scope,
-     * and verification needs the endpoint secret rather than the API key.
-     */
-    readonly webhooks: {
-        constructEvent(rawBody: string | Uint8Array, signatureHeader: string, secret: string, opts?: ConstructEventOptions): Promise<GenesisPayEvent>;
-    };
-    private readonly apiKey;
-    private readonly fetchFn;
-    private readonly configTtlMs;
-    private readonly expectedPayTo?;
-    private cache?;
-    private inflight?;
-    /**
-     * The single authenticated-JSON seam every resource goes through. Bound as a
-     * field so it can be handed to `./plans.ts` / `./mandates.ts` without leaking
-     * the key, the base URL or `fetch` into them.
-     */
-    private readonly request;
-    constructor(options: GenesisPayClientOptions);
-    /** Raw on purpose: product-gate negotiation must preserve 402 protocol headers. */
-    private performProductGateRequest;
-    /**
-     * Resolve (and cache) the seller config from the key. Single-flight so a
-     * cold-start burst shares one request; failures are never cached (the memo is
-     * cleared on rejection so the next call retries).
-     */
-    retrieveSeller(opts?: {
-        forceRefresh?: boolean;
-    }): Promise<SellerConfig>;
-    gate(config: GateConfig): ResolvingGate;
-    private fetchSeller;
-    private assertSafe;
-    /**
-     * Applies the `expectedPayTo` pin to a destination the server just froze onto
-     * a newly created object.
-     *
-     * Checking it in `assertSafe` alone was not enough: that only covers the
-     * `/api/v1/seller` config lookup, while a checkout link and a subscription
-     * plan each record their own `destinationWallet` at creation. Those are the
-     * addresses money actually moves to — a pin that does not cover them is not
-     * the guarantee the option advertises.
-     */
-    private assertPinnedDestination;
-    /**
-     * One authenticated JSON round-trip, with the error mapping every method
-     * shares. A transport failure (no response at all) is the only case handled
-     * here rather than in `throwForErrorResponse`, because there is no status to
-     * map — it is always a config/connectivity problem.
-     */
-    private performRequest;
-    private createCheckout;
-    /**
-     * Fetch the current state of a checkout link. `paid` is the field to poll on;
-     * an unknown publicId raises `GenesisPayNotFoundError`, never a config error.
-     */
-    private retrieveCheckout;
-    /** Test-mode only — see the doc on `checkout.simulatePayment`. */
-    private simulateCheckoutPayment;
-}
-//# sourceMappingURL=client.d.ts.map

package/dist/client.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAEtD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAExD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAEtD,OAAO,KAAK,EAAe,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAGvE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAEhD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAEtD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAE9D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAaxD,OAAO,KAAK,EAAE,qBAAqB,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAE5E;;;;;GAKG;AACH,MAAM,MAAM,iBAAiB,GAAG,MAAM,GAAG,MAAM,CAAC;AAEhD,MAAM,MAAM,uBAAuB,GAAG;IACpC,8EAA8E;IAC9E,MAAM,EAAE,MAAM,CAAC;IACf,qGAAqG;IACrG,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,gEAAgE;IAChE,OAAO,CAAC,EAAE,OAAO,KAAK,CAAC;IACvB,8CAA8C;IAC9C,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,mFAAmF;IACnF,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,iBAAiB,CAAC;IACxB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,QAAQ,EAAE,OAAO,CAAC;IAClB,OAAO,EAAE;QACP,WAAW,EAAE,kBAAkB,CAAC;QAChC,OAAO,EAAE,MAAM,CAAC;QAChB,WAAW,EAAE,MAAM,CAAC;QACpB,KAAK,EAAE,MAAM,CAAC;KACf,CAAC;CACH,CAAC;AAEF;;;;;GAKG;AACH,MAAM,MAAM,mBAAmB,GAC3B;IACE;;;;;;;;OAQG;IACH,MAAM,EAAE,MAAM,CAAC;IACf,sCAAsC;IACtC,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,GACD;IACE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAEN,MAAM,MAAM,mBAAmB,GAAG,mBAAmB,GAAG;IACtD,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,QAAQ,GAAG,UAAU,CAAC;IACjC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B;;;;OAIG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,qFAAqF;IACrF,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAClC,kEAAkE;IAClE,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,kEAAkE;IAClE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,wDAAwD;IACxD,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,8EAA8E;IAC9E,MAAM,EAAE,MAAM,CAAC;IACf,kFAAkF;IAClF,UAAU,EAAE,MAAM,CAAC;IACnB;;;OAGG;IACH,KAAK,EAAE,MAAM,GAAG,MAAM,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC;IACxC,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B,CAAC;AAEF,iFAAiF;AACjF,MAAM,MAAM,qBAAqB,GAC7B,SAAS,GACT,WAAW,GACX,WAAW,GACX,QAAQ,GACR,SAAS,CAAC;AAEd;;;;;;;GAOG;AACH,MAAM,MAAM,eAAe,GAAG;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,qBAAqB,CAAC;IAC9B,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B;;;;;;;;;;OAUG;IACH,SAAS,EAAE,OAAO,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG,YAAY,GAAG;IAC3C,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,QAAQ,EAAE,QAAQ,GAAG,UAAU,CAAC;IAChC,MAAM,EAAE,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;IACvC,iBAAiB,EAAE,MAAM,CAAC;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB;;;;;;;OAOG;IACH,IAAI,EAAE,OAAO,CAAC;IACd,qBAAqB,EAAE,MAAM,CAAC;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB;;;OAGG;IACH,QAAQ,EAAE,eAAe,EAAE,CAAC;CAC7B,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B,CAAC;AAEF,KAAK,WAAW,CAAC,IAAI,SAAS,OAAO,EAAE,IAAI,CACzC,OAAO,EAAE,OAAO,EAChB,GAAG,IAAI,EAAE,IAAI,KACV,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;AAElC,MAAM,WAAW,aAAa;IAC5B,IAAI,CAAC,IAAI,SAAS,OAAO,EAAE,EACzB,OAAO,EAAE,WAAW,CAAC,IAAI,CAAC,EAC1B,IAAI,CAAC,EAAE;QAAE,gBAAgB,CAAC,EAAE,gBAAgB,CAAA;KAAE,GAC7C,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,IAAI,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC1D,oFAAoF;IACpF,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAKD,OAAO,EACL,qBAAqB,EACrB,4BAA4B,EAC5B,uBAAuB,EACvB,wBAAwB,EACxB,yBAAyB,EACzB,KAAK,yBAAyB,GAC/B,MAAM,aAAa,CAAC;AA0QrB,qBAAa,UAAU;IACrB,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;IACjC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE;QACjB,MAAM,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;QAC1D,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;QACrD;;;;;;;;;WASG;QACH,eAAe,CACb,QAAQ,EAAE,MAAM,EAChB,IAAI,CAAC,EAAE,sBAAsB,GAC5B,OAAO,CAAC,eAAe,CAAC,CAAC;KAC7B,CAAC;IACF,0EAA0E;IAC1E,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;IAC9B,oFAAoF;IACpF,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC;IACpC,uDAAuD;IACvD,QAAQ,CAAC,YAAY,EAAE,oBAAoB,CAAC;IAC5C,sDAAsD;IACtD,QAAQ,CAAC,SAAS,EAAE,iBAAiB,CAAC;IACtC,8DAA8D;IAC9D,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC;IACpC;;;;;;;OAOG;IACH,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC;IACpC;;;;OAIG;IACH,QAAQ,CAAC,QAAQ,EAAE;QACjB,cAAc,CACZ,OAAO,EAAE,MAAM,GAAG,UAAU,EAC5B,eAAe,EAAE,MAAM,EACvB,MAAM,EAAE,MAAM,EACd,IAAI,CAAC,EAAE,qBAAqB,GAC3B,OAAO,CAAC,eAAe,CAAC,CAAC;KAC7B,CAAC;IAEF,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAe;IACvC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAS;IAExC,OAAO,CAAC,KAAK,CAAC,CAA8C;IAC5D,OAAO,CAAC,QAAQ,CAAC,CAAwB;IAEzC;;;;OAIG;IACH,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAgE;gBAE5E,OAAO,EAAE,uBAAuB;IAoD5C,mFAAmF;YACrE,yBAAyB;IAgBvC;;;;OAIG;IACG,cAAc,CAAC,IAAI,CAAC,EAAE;QAAE,YAAY,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,YAAY,CAAC;IAkB9E,IAAI,CAAC,MAAM,EAAE,UAAU,GAAG,aAAa;YAwDzB,WAAW;IAwBzB,OAAO,CAAC,UAAU;IA0ClB;;;;;;;;;OASG;IACH,OAAO,CAAC,uBAAuB;IAkB/B;;;;;OAKG;YACW,cAAc;YAmCd,cAAc;IAuC5B;;;OAGG;YACW,gBAAgB;IAwB9B,kEAAkE;YACpD,uBAAuB;CAkDtC"}