@kya-os/agentshield-nextjs 0.1.41 → 0.1.43

package/dist/middleware.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/signature-verifier.ts","../src/edge-detector-wrapper.ts","../src/wasm-loader.ts","../src/edge-detector-with-wasm.ts","../src/session-tracker.ts","../src/middleware.ts"],"names":["now","response","AI_AGENT_PATTERNS","CLOUD_PROVIDERS","NextResponse","context"],"mappings":";;;;;;;AAWA,IAAM,UAAA,GAAa;AAAA,EACjB,OAAA,EAAS;AAAA,IACP;AAAA,MACE,GAAA,EAAK,6CAAA;AAAA;AAAA,MAEL,SAAA,EAAW,6CAAA;AAAA,MACX,4BAAW,IAAI,IAAA,CAAK,YAAY,CAAA,EAAE,SAAQ,GAAI,GAAA;AAAA,MAC9C,6BAAY,IAAI,IAAA,CAAK,YAAY,CAAA,EAAE,SAAQ,GAAI;AAAA;AACjD;AAEJ,CAAA;AAKA,SAAS,oBAAoB,cAAA,EAKpB;AACP,EAAA,IAAI;AAEF,IAAA,MAAM,KAAA,GAAQ,cAAA,CAAe,KAAA,CAAM,qBAAqB,CAAA;AACxD,IAAA,IAAI,CAAC,OAAO,OAAO,IAAA;AAEnB,IAAA,MAAM,GAAG,WAAA,EAAa,MAAM,CAAA,GAAI,KAAA;AAGhC,IAAA,MAAM,aAAA,GAAgB,cAClB,WAAA,CACG,KAAA,CAAM,GAAG,CAAA,CACT,GAAA,CAAI,CAAA,CAAA,KAAK,CAAA,CAAE,OAAA,CAAQ,IAAA,EAAM,EAAE,CAAA,CAAE,IAAA,EAAM,CAAA,CACnC,MAAA,CAAO,OAAK,CAAA,CAAE,MAAA,GAAS,CAAC,CAAA,GAC3B,EAAC;AAGL,IAAA,MAAM,UAAA,GAAa,MAAA,GAAS,MAAA,CAAO,KAAA,CAAM,iBAAiB,CAAA,GAAI,IAAA;AAC9D,IAAA,MAAM,YAAA,GAAe,MAAA,GAAS,MAAA,CAAO,KAAA,CAAM,eAAe,CAAA,GAAI,IAAA;AAC9D,IAAA,MAAM,YAAA,GAAe,MAAA,GAAS,MAAA,CAAO,KAAA,CAAM,eAAe,CAAA,GAAI,IAAA;AAE9D,IAAA,IAAI,CAAC,UAAA,IAAc,CAAC,UAAA,CAAW,CAAC,GAAG,OAAO,IAAA;AAE1C,IAAA,OAAO;AAAA,MACL,KAAA,EAAO,WAAW,CAAC,CAAA;AAAA,MACnB,OAAA,EAAS,gBAAgB,YAAA,CAAa,CAAC,IAAI,QAAA,CAAS,YAAA,CAAa,CAAC,CAAC,CAAA,GAAI,KAAA,CAAA;AAAA,MACvE,OAAA,EAAS,gBAAgB,YAAA,CAAa,CAAC,IAAI,QAAA,CAAS,YAAA,CAAa,CAAC,CAAC,CAAA,GAAI,KAAA,CAAA;AAAA,MACvE;AAAA,KACF;AAAA,EACF,SAAS,KAAA,EAAO;AACd,IAAA,OAAA,CAAQ,KAAA,CAAM,gDAAgD,KAAK,CAAA;AACnE,IAAA,OAAO,IAAA;AAAA,EACT;AACF;AAMA,SAAS,kBAAA,CACP,MAAA,EACA,IAAA,EACA,OAAA,EACA,aAAA,EACQ;AACR,EAAA,MAAM,aAAuB,EAAC;AAE9B,EAAA,KAAA,MAAW,cAAc,aAAA,EAAe;AACtC,IAAA,IAAI,KAAA;AAEJ,IAAA,QAAQ,UAAA;AAAY,MAClB,KAAK,SAAA;AACH,QAAA,KAAA,GAAQ,OAAO,WAAA,EAAY;AAC3B,QAAA;AAAA,MACF,KAAK,OAAA;AACH,QAAA,KAAA,GAAQ,IAAA;AACR,QAAA;AAAA,MACF,KAAK,YAAA;AAEH,QAAA,KAAA,GAAQ,OAAA,CAAQ,MAAM,CAAA,IAAK,OAAA,CAAQ,MAAM,CAAA,IAAK,EAAA;AAC9C,QAAA;AAAA,MACF;AAEE,QAAA,MAAM,GAAA,GAAM,MAAA,CAAO,IAAA,CAAK,OAAO,CAAA,CAAE,IAAA;AAAA,UAC/B,CAAA,CAAA,KAAK,CAAA,CAAE,WAAA,EAAY,KAAM,WAAW,WAAA;AAAY,SAClD;AACA,QAAA,KAAA,GAAQ,GAAA,GAAM,OAAA,CAAQ,GAAG,CAAA,IAAK,EAAA,GAAK,EAAA;AACnC,QAAA;AAAA;AAIJ,IAAA,UAAA,CAAW,IAAA,CAAK,CAAA,CAAA,EAAI,UAAU,CAAA,GAAA,EAAM,KAAK,CAAA,CAAE,CAAA;AAAA,EAC7C;AAEA,EAAA,OAAO,UAAA,CAAW,KAAK,IAAI,CAAA;AAC7B;AAKA,eAAe,sBAAA,CACb,eAAA,EACA,eAAA,EACA,OAAA,EACkB;AAClB,EAAA,IAAI;AAEF,IAAA,MAAM,cAAA,GAAiB,UAAA,CAAW,IAAA,CAAK,IAAA,CAAK,eAAe,GAAG,CAAA,CAAA,KAAK,CAAA,CAAE,UAAA,CAAW,CAAC,CAAC,CAAA;AAClF,IAAA,MAAM,cAAA,GAAiB,UAAA,CAAW,IAAA,CAAK,IAAA,CAAK,eAAe,GAAG,CAAA,CAAA,KAAK,CAAA,CAAE,UAAA,CAAW,CAAC,CAAC,CAAA;AAClF,IAAA,MAAM,YAAA,GAAe,IAAI,WAAA,EAAY,CAAE,OAAO,OAAO,CAAA;AAGrD,IAAA,IAAI,cAAA,CAAe,WAAW,EAAA,EAAI;AAChC,MAAA,OAAA,CAAQ,KAAA,CAAM,wCAAA,EAA0C,cAAA,CAAe,MAAM,CAAA;AAC7E,MAAA,OAAO,KAAA;AAAA,IACT;AACA,IAAA,IAAI,cAAA,CAAe,WAAW,EAAA,EAAI;AAChC,MAAA,OAAA,CAAQ,KAAA,CAAM,uCAAA,EAAyC,cAAA,CAAe,MAAM,CAAA;AAC5E,MAAA,OAAO,KAAA;AAAA,IACT;AAGA,IAAA,MAAM,SAAA,GAAY,MAAM,MAAA,CAAO,MAAA,CAAO,SAAA;AAAA,MACpC,KAAA;AAAA,MACA,cAAA;AAAA,MACA;AAAA,QACE,IAAA,EAAM,SAAA;AAAA,QACN,UAAA,EAAY;AAAA,OACd;AAAA,MACA,KAAA;AAAA,MACA,CAAC,QAAQ;AAAA,KACX;AAGA,IAAA,MAAM,OAAA,GAAU,MAAM,MAAA,CAAO,MAAA,CAAO,MAAA;AAAA,MAClC,SAAA;AAAA,MACA,SAAA;AAAA,MACA,cAAA;AAAA,MACA;AAAA,KACF;AAEA,IAAA,OAAO,OAAA;AAAA,EACT,SAAS,KAAA,EAAO;AACd,IAAA,OAAA,CAAQ,KAAA,CAAM,4CAA4C,KAAK,CAAA;AAG/D,IAAA,IAAI,OAAO,WAAW,WAAA,EAAa;AACjC,MAAA,IAAI;AAGF,QAAA,OAAA,CAAQ,KAAK,uDAAuD,CAAA;AACpE,QAAA,OAAO,KAAA;AAAA,MACT,CAAA,CAAA,MAAQ;AACN,QAAA,OAAO,KAAA;AAAA,MACT;AAAA,IACF;AAEA,IAAA,OAAO,KAAA;AAAA,EACT;AACF;AAiBA,eAAsB,oBAAA,CACpB,MAAA,EACA,IAAA,EACA,OAAA,EACsC;AAEtC,EAAA,MAAM,SAAA,GAAY,OAAA,CAAQ,WAAW,CAAA,IAAK,QAAQ,WAAW,CAAA;AAC7D,EAAA,MAAM,cAAA,GAAiB,OAAA,CAAQ,iBAAiB,CAAA,IAAK,QAAQ,iBAAiB,CAAA;AAC9E,EAAA,MAAM,cAAA,GAAiB,OAAA,CAAQ,iBAAiB,CAAA,IAAK,QAAQ,iBAAiB,CAAA;AAG9E,EAAA,IAAI,CAAC,SAAA,IAAa,CAAC,cAAA,EAAgB;AACjC,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,KAAA;AAAA,MACT,UAAA,EAAY,CAAA;AAAA,MACZ,MAAA,EAAQ,8BAAA;AAAA,MACR,kBAAA,EAAoB;AAAA,KACtB;AAAA,EACF;AAGA,EAAA,MAAM,MAAA,GAAS,oBAAoB,cAAc,CAAA;AACjD,EAAA,IAAI,CAAC,MAAA,EAAQ;AACX,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,KAAA;AAAA,MACT,UAAA,EAAY,CAAA;AAAA,MACZ,MAAA,EAAQ,gCAAA;AAAA,MACR,kBAAA,EAAoB;AAAA,KACtB;AAAA,EACF;AAGA,EAAA,IAAI,OAAO,OAAA,EAAS;AAClB,IAAA,MAAMA,OAAM,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,GAAA,KAAQ,GAAI,CAAA;AACxC,IAAA,MAAM,GAAA,GAAMA,OAAM,MAAA,CAAO,OAAA;AAGzB,IAAA,IAAI,MAAM,GAAA,EAAK;AACb,MAAA,OAAO;AAAA,QACL,OAAA,EAAS,KAAA;AAAA,QACT,UAAA,EAAY,CAAA;AAAA,QACZ,MAAA,EAAQ,0CAAA;AAAA,QACR,kBAAA,EAAoB;AAAA,OACtB;AAAA,IACF;AAGA,IAAA,IAAI,MAAM,GAAA,EAAK;AACb,MAAA,OAAO;AAAA,QACL,OAAA,EAAS,KAAA;AAAA,QACT,UAAA,EAAY,CAAA;AAAA,QACZ,MAAA,EAAQ,sCAAA;AAAA,QACR,kBAAA,EAAoB;AAAA,OACtB;AAAA,IACF;AAAA,EACF;AAGA,EAAA,IAAI,KAAA;AACJ,EAAA,IAAI,SAAA;AAEJ,EAAA,IAAI,cAAA,KAAmB,uBAAA,IAA2B,cAAA,EAAgB,QAAA,CAAS,aAAa,CAAA,EAAG;AACzF,IAAA,KAAA,GAAQ,SAAA;AACR,IAAA,SAAA,GAAY,UAAA,CAAW,OAAA;AAAA,EACzB;AAGA,EAAA,IAAI,CAAC,KAAA,IAAS,CAAC,SAAA,EAAW;AACxB,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,KAAA;AAAA,MACT,UAAA,EAAY,CAAA;AAAA,MACZ,MAAA,EAAQ,yBAAA;AAAA,MACR,kBAAA,EAAoB;AAAA,KACtB;AAAA,EACF;AAGA,EAAA,MAAM,MAAM,SAAA,CAAU,IAAA,CAAK,OAAK,CAAA,CAAE,GAAA,KAAQ,OAAO,KAAK,CAAA;AACtD,EAAA,IAAI,CAAC,GAAA,EAAK;AACR,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,KAAA;AAAA,MACT,UAAA,EAAY,CAAA;AAAA,MACZ,MAAA,EAAQ,CAAA,gBAAA,EAAmB,MAAA,CAAO,KAAK,CAAA,CAAA;AAAA,MACvC,kBAAA,EAAoB;AAAA,KACtB;AAAA,EACF;AAGA,EAAA,MAAM,MAAM,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,GAAA,KAAQ,GAAI,CAAA;AACxC,EAAA,IAAI,GAAA,GAAM,GAAA,CAAI,SAAA,IAAa,GAAA,GAAM,IAAI,UAAA,EAAY;AAC/C,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,KAAA;AAAA,MACT,UAAA,EAAY,CAAA;AAAA,MACZ,MAAA,EAAQ,kCAAA;AAAA,MACR,kBAAA,EAAoB;AAAA,KACtB;AAAA,EACF;AAGA,EAAA,MAAM,gBAAgB,kBAAA,CAAmB,MAAA,EAAQ,IAAA,EAAM,OAAA,EAAS,OAAO,aAAa,CAAA;AAGpF,EAAA,IAAI,cAAA,GAAiB,SAAA;AACrB,EAAA,IAAI,cAAA,CAAe,UAAA,CAAW,QAAQ,CAAA,EAAG;AACvC,IAAA,cAAA,GAAiB,cAAA,CAAe,UAAU,CAAC,CAAA;AAAA,EAC7C;AACA,EAAA,IAAI,cAAA,CAAe,QAAA,CAAS,GAAG,CAAA,EAAG;AAChC,IAAA,cAAA,GAAiB,cAAA,CAAe,KAAA,CAAM,CAAA,EAAG,EAAE,CAAA;AAAA,EAC7C;AAGA,EAAA,MAAM,UAAU,MAAM,sBAAA;AAAA,IACpB,GAAA,CAAI,SAAA;AAAA,IACJ,cAAA;AAAA,IACA;AAAA,GACF;AAEA,EAAA,IAAI,OAAA,EAAS;AACX,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,IAAA;AAAA,MACT,KAAA;AAAA,MACA,OAAO,MAAA,CAAO,KAAA;AAAA,MACd,UAAA,EAAY,CAAA;AAAA;AAAA,MACZ,kBAAA,EAAoB;AAAA,KACtB;AAAA,EACF,CAAA,MAAO;AACL,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,KAAA;AAAA,MACT,UAAA,EAAY,CAAA;AAAA,MACZ,MAAA,EAAQ,+BAAA;AAAA,MACR,kBAAA,EAAoB;AAAA,KACtB;AAAA,EACF;AACF;AAKO,SAAS,oBAAoB,OAAA,EAA0C;AAC5E,EAAA,OAAO,CAAC,EAAA,CACL,OAAA,CAAQ,WAAW,CAAA,IAAK,OAAA,CAAQ,WAAW,CAAA,MAC3C,OAAA,CAAQ,iBAAiB,CAAA,IAAK,OAAA,CAAQ,iBAAiB,CAAA,CAAA,CAAA;AAE5D;AAKO,SAAS,mBAAmB,OAAA,EAA0C;AAC3E,EAAA,MAAM,cAAA,GAAiB,OAAA,CAAQ,iBAAiB,CAAA,IAAK,QAAQ,iBAAiB,CAAA;AAC9E,EAAA,OAAO,cAAA,KAAmB,uBAAA,KAA4B,cAAA,EAAgB,QAAA,CAAS,aAAa,CAAA,IAAK,KAAA,CAAA;AACnG;;;AC7SA,IAAM,iBAAA,GAAoB;AAAA,EACxB,EAAE,OAAA,EAAS,eAAA,EAAiB,IAAA,EAAM,SAAA,EAAW,MAAM,SAAA,EAAU;AAAA,EAC7D,EAAE,OAAA,EAAS,aAAA,EAAe,IAAA,EAAM,QAAA,EAAU,MAAM,QAAA,EAAS;AAAA,EACzD,EAAE,OAAA,EAAS,gBAAA,EAAkB,IAAA,EAAM,YAAA,EAAc,MAAM,YAAA,EAAa;AAAA,EACpE,EAAE,OAAA,EAAS,kBAAA,EAAoB,IAAA,EAAM,YAAA,EAAc,MAAM,YAAA,EAAa;AAAA,EACtE,EAAE,OAAA,EAAS,gBAAA,EAAkB,IAAA,EAAM,YAAA,EAAc,MAAM,YAAA,EAAa;AAAA,EACpE,EAAE,OAAA,EAAS,aAAA,EAAe,IAAA,EAAM,YAAA,EAAc,MAAM,YAAA,EAAa;AAAA;AAAA,EACjE,EAAE,OAAA,EAAS,UAAA,EAAY,IAAA,EAAM,MAAA,EAAQ,MAAM,SAAA,EAAU;AAAA,EACrD,EAAE,OAAA,EAAS,eAAA,EAAiB,IAAA,EAAM,WAAA,EAAa,MAAM,WAAA;AACvD,CAAA;AAGA,IAAM,eAAA,GAAkB;AAAA,EACtB,KAAK,CAAC,KAAA,EAAO,KAAA,EAAO,KAAA,EAAO,OAAO,IAAI,CAAA;AAAA,EACtC,KAAK,CAAC,KAAA,EAAO,KAAA,EAAO,MAAA,EAAQ,QAAQ,MAAM,CAAA;AAAA,EAC1C,OAAO,CAAC,KAAA,EAAO,KAAA,EAAO,KAAA,EAAO,OAAO,MAAM;AAC5C,CAAA;AAKA,IAAM,oBAAN,MAAwB;AAAA,EACtB,MAAM,QAAQ,KAAA,EAAiD;AAC7D,IAAA,MAAM,UAAoB,EAAC;AAC3B,IAAA,IAAI,aAAA;AACJ,IAAA,IAAI,kBAAA;AACJ,IAAA,IAAI,UAAA,GAAa,CAAA;AAEjB,IAAA,MAAM,OAAA,GAAU,KAAA,CAAM,OAAA,IAAW,EAAC;AAClC,IAAA,MAAM,oBAA4C,EAAC;AAGnD,IAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,KAAK,MAAA,CAAO,OAAA,CAAQ,OAAO,CAAA,EAAG;AAClD,MAAA,iBAAA,CAAkB,GAAA,CAAI,WAAA,EAAa,CAAA,GAAI,KAAA;AAAA,IACzC;AAGA,IAAA,IAAI,mBAAA,CAAoB,OAAO,CAAA,EAAG;AAChC,MAAA,IAAI;AAEF,QAAA,MAAM,kBAAkB,MAAM,oBAAA;AAAA,UAC5B,MAAM,MAAA,IAAU,KAAA;AAAA,UAChB,MAAM,GAAA,IAAO,GAAA;AAAA,UACb;AAAA,SACF;AAEA,QAAA,IAAI,gBAAgB,OAAA,EAAS;AAE3B,UAAA,UAAA,GAAa,eAAA,CAAgB,UAAA;AAC7B,UAAA,OAAA,CAAQ,KAAK,CAAA,mBAAA,EAAsB,eAAA,CAAgB,OAAO,WAAA,EAAY,IAAK,SAAS,CAAA,CAAE,CAAA;AACtF,UAAA,IAAI,gBAAgB,KAAA,EAAO;AACzB,YAAA,aAAA,GAAgB;AAAA,cACd,IAAA,EAAM,eAAA,CAAgB,KAAA,CAAM,WAAA,EAAY;AAAA,cACxC,MAAM,eAAA,CAAgB;AAAA,aACxB;AAAA,UACF;AACA,UAAA,kBAAA,GAAqB,eAAA,CAAgB,kBAAA;AAGrC,UAAA,IAAI,gBAAgB,KAAA,EAAO;AACzB,YAAA,OAAA,CAAQ,IAAA,CAAK,CAAA,MAAA,EAAS,eAAA,CAAgB,KAAK,CAAA,CAAE,CAAA;AAAA,UAC/C;AAAA,QACF,CAAA,MAAO;AAEL,UAAA,UAAA,GAAa,IAAA,CAAK,GAAA,CAAI,UAAA,EAAY,GAAG,CAAA;AACrC,UAAA,OAAA,CAAQ,KAAK,mBAAmB,CAAA;AAChC,UAAA,IAAI,gBAAgB,MAAA,EAAQ;AAC1B,YAAA,OAAA,CAAQ,IAAA,CAAK,CAAA,gBAAA,EAAmB,eAAA,CAAgB,MAAM,CAAA,CAAE,CAAA;AAAA,UAC1D;AAGA,UAAA,IAAI,kBAAA,CAAmB,OAAO,CAAA,EAAG;AAC/B,YAAA,OAAA,CAAQ,KAAK,gBAAgB,CAAA;AAC7B,YAAA,aAAA,GAAgB,EAAE,IAAA,EAAM,SAAA,EAAW,IAAA,EAAM,sBAAA,EAAuB;AAAA,UAClE;AAAA,QACF;AAAA,MACF,SAAS,KAAA,EAAO;AAEd,QAAA,OAAA,CAAQ,KAAA,CAAM,qDAAqD,KAAK,CAAA;AACxE,QAAA,UAAA,GAAa,IAAA,CAAK,GAAA,CAAI,UAAA,EAAY,GAAG,CAAA;AACrC,QAAA,OAAA,CAAQ,KAAK,8BAA8B,CAAA;AAAA,MAC7C;AAAA,IACF;AAGA,IAAA,MAAM,YAAY,KAAA,CAAM,SAAA,IAAa,KAAA,CAAM,OAAA,GAAU,YAAY,CAAA,IAAK,EAAA;AACtE,IAAA,IAAI,SAAA,EAAW;AACb,MAAA,KAAA,MAAW,EAAE,OAAA,EAAS,IAAA,EAAM,IAAA,MAAU,iBAAA,EAAmB;AACvD,QAAA,IAAI,OAAA,CAAQ,IAAA,CAAK,SAAS,CAAA,EAAG;AAE3B,UAAA,MAAM,oBAAA,GAAuB;AAAA,YAC3B,SAAA;AAAA,YACA,QAAA;AAAA,YACA,YAAA;AAAA,YACA;AAAA,WACF;AACA,UAAA,MAAM,iBAAA,GAAoB,oBAAA,CAAqB,QAAA,CAAS,IAAI,IACxD,IAAA,GACA,GAAA;AAEJ,UAAA,UAAA,GAAa,IAAA,CAAK,GAAA,CAAI,UAAA,EAAY,iBAAiB,CAAA;AACnD,UAAA,OAAA,CAAQ,IAAA,CAAK,CAAA,cAAA,EAAiB,IAAI,CAAA,CAAE,CAAA;AACpC,UAAA,IAAI,CAAC,aAAA,EAAe;AAClB,YAAA,aAAA,GAAgB,EAAE,MAAM,IAAA,EAAK;AAC7B,YAAA,kBAAA,GAAqB,SAAA;AAAA,UACvB;AACA,UAAA;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAGA,IAAA,MAAM,SAAA,GAAY;AAAA,MAChB,wBAAA;AAAA,MACA,0BAAA;AAAA,MACA,qBAAA;AAAA,MACA,mBAAA;AAAA,MACA;AAAA,KACF;AAEA,IAAA,MAAM,iBAAiB,SAAA,CAAU,MAAA;AAAA,MAC/B,CAAA,MAAA,KAAU,kBAAkB,MAAM;AAAA,KACpC;AACA,IAAA,IAAI,cAAA,CAAe,SAAS,CAAA,EAAG;AAC7B,MAAA,UAAA,GAAa,IAAA,CAAK,GAAA,CAAI,UAAA,EAAY,GAAG,CAAA;AACrC,MAAA,OAAA,CAAQ,IAAA,CAAK,CAAA,WAAA,EAAc,cAAA,CAAe,MAAM,CAAA,CAAE,CAAA;AAAA,IACpD;AAGA,IAAA,MAAM,EAAA,GAAK,KAAA,CAAM,EAAA,IAAM,KAAA,CAAM,SAAA;AAC7B,IAAA,IACE,EAAA,IACA,CAAC,iBAAA,CAAkB,iBAAiB,KACpC,CAAC,iBAAA,CAAkB,WAAW,CAAA,EAC9B;AACA,MAAA,KAAA,MAAW,CAAC,QAAA,EAAU,QAAQ,KAAK,MAAA,CAAO,OAAA,CAAQ,eAAe,CAAA,EAAG;AAClE,QAAA,IAAI,SAAS,IAAA,CAAK,CAAA,MAAA,KAAU,GAAG,UAAA,CAAW,MAAM,CAAC,CAAA,EAAG;AAClD,UAAA,UAAA,GAAa,IAAA,CAAK,GAAA,CAAI,UAAA,EAAY,GAAG,CAAA;AACrC,UAAA,OAAA,CAAQ,IAAA,CAAK,CAAA,eAAA,EAAkB,QAAQ,CAAA,CAAE,CAAA;AACzC,UAAA;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAGA,IAAA,IAAI,OAAA,CAAQ,MAAA,GAAS,CAAA,IAAK,UAAA,GAAa,CAAA,EAAK;AAC1C,MAAA,UAAA,GAAa,IAAA,CAAK,GAAA,CAAI,UAAA,GAAa,GAAA,EAAK,IAAI,CAAA;AAAA,IAC9C;AAEA,IAAA,OAAO;AAAA,MACL,SAAS,UAAA,GAAa,GAAA;AAAA,MACtB,UAAA;AAAA,MACA,GAAI,aAAA,IAAiB,EAAE,aAAA,EAAc;AAAA,MACrC,OAAA;AAAA,MACA,GAAI,kBAAA,IAAsB,EAAE,kBAAA,EAAmB;AAAA,MAC/C,kBAAkB,kBAAA,KAAuB,WAAA,GAAc,KAAA,GAAS,UAAA,GAAa,MAAM,QAAA,GAAW,MAAA;AAAA,MAC9F,SAAA,sBAAe,IAAA;AAAK,KACtB;AAAA,EACF;AACF,CAAA;AAKO,IAAM,2BAAN,MAA+B;AAAA,EAC5B,QAAA;AAAA,EACA,MAAA,uBAA0C,GAAA,EAAI;AAAA,EAEtD,YAAY,OAAA,EAAe;AAEzB,IAAA,IAAA,CAAK,QAAA,GAAW,IAAI,iBAAA,EAAkB;AAAA,EACxC;AAAA,EAEA,MAAM,QAAQ,KAAA,EAAiD;AAC7D,IAAA,MAAM,MAAA,GAAS,MAAM,IAAA,CAAK,QAAA,CAAS,QAAQ,KAAK,CAAA;AAGhD,IAAA,IAAI,OAAO,OAAA,IAAW,IAAA,CAAK,MAAA,CAAO,GAAA,CAAI,gBAAgB,CAAA,EAAG;AACvD,MAAA,MAAM,WAAW,IAAA,CAAK,MAAA,CAAO,GAAA,CAAI,gBAAgB,KAAK,EAAC;AACvD,MAAA,QAAA,CAAS,OAAA,CAAQ,CAAA,OAAA,KAAW,OAAA,CAAQ,MAAA,EAAQ,KAAK,CAAC,CAAA;AAAA,IACpD;AAEA,IAAA,OAAO,MAAA;AAAA,EACT;AAAA,EAEA,EAAA,CAAG,OAAe,OAAA,EAA6B;AAC7C,IAAA,IAAI,CAAC,IAAA,CAAK,MAAA,CAAO,GAAA,CAAI,KAAK,CAAA,EAAG;AAC3B,MAAA,IAAA,CAAK,MAAA,CAAO,GAAA,CAAI,KAAA,EAAO,EAAE,CAAA;AAAA,IAC3B;AACA,IAAA,IAAA,CAAK,MAAA,CAAO,GAAA,CAAI,KAAK,CAAA,CAAG,KAAK,OAAO,CAAA;AAAA,EACtC;AAAA,EAEA,IAAA,CAAK,UAAkB,IAAA,EAAmB;AACxC,IAAA,MAAM,WAAW,IAAA,CAAK,MAAA,CAAO,GAAA,CAAI,KAAK,KAAK,EAAC;AAC5C,IAAA,QAAA,CAAS,OAAA,CAAQ,CAAA,OAAA,KAAW,OAAA,CAAQ,GAAG,IAAI,CAAC,CAAA;AAAA,EAC9C;AAAA,EAEA,MAAM,IAAA,GAAsB;AAE1B,IAAA;AAAA,EACF;AACF,CAAA;;;ACxOA,IAAI,YAAA,GAA4C,IAAA;AAChD,IAAI,WAAA,GAAmB,IAAA;AACvB,IAAI,WAAA,GAAoC,IAAA;AAGxC,IAAM,SAAA,GAAY,gCAAA;AAGlB,IAAI,OAAA,GAAyB,IAAA;AAKtB,SAAS,eAAe,GAAA,EAAa;AAC1C,EAAA,OAAA,GAAU,GAAA;AACZ;AAKA,SAAS,UAAA,GAAqB;AAE5B,EAAA,IAAI,OAAA,EAAS;AACX,IAAA,IAAI;AACF,MAAA,MAAM,GAAA,GAAM,IAAI,GAAA,CAAI,OAAO,CAAA;AAE3B,MAAA,OAAO,CAAA,EAAG,GAAA,CAAI,MAAM,CAAA,EAAG,SAAS,CAAA,CAAA;AAAA,IAClC,CAAA,CAAA,MAAQ;AAEN,MAAA,OAAO,SAAA;AAAA,IACT;AAAA,EACF;AAEA,EAAA,OAAO,SAAA;AACT;AAMA,eAAsB,QAAA,GAA6B;AACjD,EAAA,IAAI,aAAa,OAAO,IAAA;AACxB,EAAA,IAAI,WAAA,EAAa;AACf,IAAA,MAAM,WAAA;AACN,IAAA,OAAO,CAAC,CAAC,WAAA;AAAA,EACX;AAEA,EAAA,WAAA,GAAA,CAAe,YAAY;AACzB,IAAA,IAAI;AAEF,MAAA,MAAM,UAAA,GAAa,IAAI,eAAA,EAAgB;AACvC,MAAA,MAAM,UAAU,UAAA,CAAW,MAAM,UAAA,CAAW,KAAA,IAAS,GAAI,CAAA;AAEzD,MAAA,IAAI;AACF,QAAA,MAAM,UAAU,UAAA,EAAW;AAG3B,QAAA,IAAI,OAAO,WAAA,CAAY,oBAAA,KAAyB,UAAA,EAAY;AAC1D,UAAA,IAAI;AACF,YAAA,MAAMC,SAAAA,GAAW,MAAM,KAAA,CAAM,OAAA,EAAS,EAAE,MAAA,EAAQ,UAAA,CAAW,QAAQ,CAAA;AACnE,YAAA,YAAA,CAAa,OAAO,CAAA;AAEpB,YAAA,IAAI,CAACA,UAAS,EAAA,EAAI;AAChB,cAAA,MAAM,IAAI,KAAA,CAAM,CAAA,sBAAA,EAAyBA,SAAAA,CAAS,MAAM,CAAA,CAAE,CAAA;AAAA,YAC5D;AAGA,YAAA,MAAM,cAAA,GAAiBA,UAAS,KAAA,EAAM;AAGtC,YAAA,MAAM,EAAE,QAAA,EAAS,GAAI,MAAM,WAAA,CAAY,oBAAA;AAAA,cACrC,cAAA;AAAA,cACA;AAAA,gBACE,GAAA,EAAK;AAAA,kBACH,0BAAA,EAA4B,CAAC,GAAA,EAAa,GAAA,KAAgB;AACxD,oBAAA,OAAA,CAAQ,GAAA,CAAI,OAAA,EAAS,GAAA,EAAK,GAAG,CAAA;AAAA,kBAC/B,CAAA;AAAA,kBACA,gBAAA,EAAkB,CAAC,GAAA,EAAa,GAAA,KAAgB;AAC9C,oBAAA,MAAM,IAAI,KAAA,CAAM,CAAA,cAAA,EAAiB,GAAG,CAAA,SAAA,EAAY,GAAG,CAAA,CAAE,CAAA;AAAA,kBACvD;AAAA;AACF;AACF,aACF;AAEA,YAAA,YAAA,GAAe,QAAA;AACf,YAAA,WAAA,GAAc,QAAA,CAAS,OAAA;AAEvB,YAAA,OAAA,CAAQ,IAAI,6DAAwD,CAAA;AACpE,YAAA;AAAA,UACF,SAAS,WAAA,EAAa;AAEpB,YAAA,IAAI,CAAC,UAAA,CAAW,MAAA,CAAO,OAAA,EAAS;AAC9B,cAAA,OAAA,CAAQ,IAAI,kFAAkF,CAAA;AAAA,YAChG,CAAA,MAAO;AACL,cAAA,MAAM,WAAA;AAAA,YACR;AAAA,UACF;AAAA,QACF;AAGA,QAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,OAAA,EAAS,EAAE,MAAA,EAAQ,UAAA,CAAW,QAAQ,CAAA;AACnE,QAAA,YAAA,CAAa,OAAO,CAAA;AAEpB,QAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,UAAA,MAAM,IAAI,KAAA,CAAM,CAAA,sBAAA,EAAyB,QAAA,CAAS,MAAM,CAAA,CAAE,CAAA;AAAA,QAC5D;AAEA,QAAA,MAAM,eAAA,GAAkB,MAAM,QAAA,CAAS,WAAA,EAAY;AACnD,QAAA,MAAM,cAAA,GAAiB,MAAM,WAAA,CAAY,OAAA,CAAQ,eAAe,CAAA;AAEhE,QAAA,MAAM,OAAA,GAAU;AAAA,UACd,GAAA,EAAK;AAAA,YACH,0BAAA,EAA4B,CAAC,GAAA,EAAa,GAAA,KAAgB;AACxD,cAAA,OAAA,CAAQ,GAAA,CAAI,OAAA,EAAS,GAAA,EAAK,GAAG,CAAA;AAAA,YAC/B,CAAA;AAAA,YACA,gBAAA,EAAkB,CAAC,GAAA,EAAa,GAAA,KAAgB;AAC9C,cAAA,MAAM,IAAI,KAAA,CAAM,CAAA,cAAA,EAAiB,GAAG,CAAA,SAAA,EAAY,GAAG,CAAA,CAAE,CAAA;AAAA,YACvD;AAAA;AACF,SACF;AAEA,QAAA,YAAA,GAAe,MAAM,WAAA,CAAY,WAAA,CAAY,cAAA,EAAgB,OAAO,CAAA;AACpE,QAAA,WAAA,GAAc,YAAA,CAAa,OAAA;AAE3B,QAAA,OAAA,CAAQ,IAAI,2DAAsD,CAAA;AAAA,MACpE,SAAS,UAAA,EAAiB;AACxB,QAAA,IAAI,UAAA,CAAW,SAAS,YAAA,EAAc;AACpC,UAAA,OAAA,CAAQ,KAAK,8EAA8E,CAAA;AAAA,QAC7F,CAAA,MAAO;AACL,UAAA,OAAA,CAAQ,IAAA,CAAK,0CAAA,EAA4C,UAAA,CAAW,OAAO,CAAA;AAAA,QAC7E;AACA,QAAA,WAAA,GAAc,IAAA;AAAA,MAChB;AAAA,IACF,SAAS,KAAA,EAAO;AACd,MAAA,OAAA,CAAQ,KAAA,CAAM,4CAA4C,KAAK,CAAA;AAC/D,MAAA,WAAA,GAAc,IAAA;AAAA,IAChB;AAAA,EACF,CAAA,GAAG;AAEH,EAAA,MAAM,WAAA;AACN,EAAA,OAAO,CAAC,CAAC,WAAA;AACX;AAMA,eAAsB,mBAAA,CACpB,SAAA,EACA,OAAA,EACA,SAAA,EAOQ;AAER,EAAA,MAAM,WAAA,GAAc,MAAM,QAAA,EAAS;AACnC,EAAA,IAAI,CAAC,WAAA,IAAe,CAAC,WAAA,EAAa;AAChC,IAAA,OAAO,IAAA;AAAA,EACT;AAEA,EAAA,IAAI;AAKF,IAAA,MAAM,WAAA,GAAc,IAAA,CAAK,SAAA,CAAU,OAAO,CAAA;AAG1C,IAAA,IAAI,OAAO,WAAA,CAAY,YAAA,KAAiB,UAAA,EAAY;AAClD,MAAA,MAAM,SAAS,WAAA,CAAY,YAAA;AAAA,QACzB,SAAA,IAAa,EAAA;AAAA,QACb,WAAA;AAAA,QACA,SAAA,IAAa,EAAA;AAAA,QAAA,iBACb,IAAI,IAAA,EAAK,EAAE,WAAA;AAAY,OACzB;AAGA,MAAA,OAAO;AAAA,QACL,OAAA,EAAS,OAAO,QAAA,IAAY,KAAA;AAAA,QAC5B,UAAA,EAAY,OAAO,UAAA,IAAc,CAAA;AAAA,QACjC,OAAO,MAAA,CAAO,KAAA;AAAA,QACd,kBAAA,EAAoB,OAAO,mBAAA,IAAuB,MAAA;AAAA,QAClD,SAAA,EAAW,OAAO,UAAA,IAAc;AAAA,OAClC;AAAA,IACF;AAEA,IAAA,OAAA,CAAQ,KAAK,iEAAiE,CAAA;AAC9E,IAAA,OAAO,IAAA;AAAA,EACT,SAAS,KAAA,EAAO;AACd,IAAA,OAAA,CAAQ,KAAA,CAAM,wCAAwC,KAAK,CAAA;AAC3D,IAAA,OAAO,IAAA;AAAA,EACT;AACF;AAKA,eAAsB,cAAA,GAAyC;AAC7D,EAAA,MAAM,WAAA,GAAc,MAAM,QAAA,EAAS;AACnC,EAAA,IAAI,CAAC,WAAA,IAAe,CAAC,WAAA,EAAa;AAChC,IAAA,OAAO,IAAA;AAAA,EACT;AAEA,EAAA,IAAI,OAAO,WAAA,CAAY,OAAA,KAAY,UAAA,EAAY;AAC7C,IAAA,OAAO,YAAY,OAAA,EAAQ;AAAA,EAC7B;AAEA,EAAA,OAAO,SAAA;AACT;AAKA,eAAsB,eAAA,GAAoC;AACxD,EAAA,IAAI;AACF,IAAA,MAAM,WAAA,GAAc,MAAM,QAAA,EAAS;AACnC,IAAA,IAAI,CAAC,aAAa,OAAO,KAAA;AAGzB,IAAA,MAAM,OAAA,GAAU,MAAM,cAAA,EAAe;AACrC,IAAA,OAAO,OAAA,KAAY,IAAA;AAAA,EACrB,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,KAAA;AAAA,EACT;AACF;;;ACzMA,IAAMC,kBAAAA,GAAoB;AAAA,EACxB,EAAE,OAAA,EAAS,eAAA,EAAiB,IAAA,EAAM,SAAA,EAAW,MAAM,SAAA,EAAU;AAAA,EAC7D,EAAE,OAAA,EAAS,aAAA,EAAe,IAAA,EAAM,QAAA,EAAU,MAAM,QAAA,EAAS;AAAA,EACzD,EAAE,OAAA,EAAS,gBAAA,EAAkB,IAAA,EAAM,YAAA,EAAc,MAAM,YAAA,EAAa;AAAA,EACpE,EAAE,OAAA,EAAS,kBAAA,EAAoB,IAAA,EAAM,YAAA,EAAc,MAAM,YAAA,EAAa;AAAA,EACtE,EAAE,OAAA,EAAS,gBAAA,EAAkB,IAAA,EAAM,YAAA,EAAc,MAAM,YAAA,EAAa;AAAA,EACpE,EAAE,OAAA,EAAS,aAAA,EAAe,IAAA,EAAM,YAAA,EAAc,MAAM,YAAA,EAAa;AAAA,EACjE,EAAE,OAAA,EAAS,UAAA,EAAY,IAAA,EAAM,MAAA,EAAQ,MAAM,SAAA,EAAU;AAAA,EACrD,EAAE,OAAA,EAAS,eAAA,EAAiB,IAAA,EAAM,WAAA,EAAa,MAAM,WAAA;AACvD,CAAA;AAGA,IAAMC,gBAAAA,GAAkB;AAAA,EACtB,KAAK,CAAC,KAAA,EAAO,KAAA,EAAO,KAAA,EAAO,OAAO,IAAI,CAAA;AAAA,EACtC,KAAK,CAAC,KAAA,EAAO,KAAA,EAAO,MAAA,EAAQ,QAAQ,MAAM,CAAA;AAAA,EAC1C,OAAO,CAAC,KAAA,EAAO,KAAA,EAAO,KAAA,EAAO,OAAO,MAAM;AAC5C,CAAA;AAKO,IAAM,4BAAN,MAAgC;AAAA,EAKrC,WAAA,CAAoB,aAAsB,IAAA,EAAM;AAA5B,IAAA,IAAA,CAAA,UAAA,GAAA,UAAA;AAAA,EAA6B;AAAA,EAJzC,WAAA,GAAuB,KAAA;AAAA,EACvB,WAAA,GAAoC,IAAA;AAAA,EACpC,OAAA,GAAyB,IAAA;AAAA;AAAA;AAAA;AAAA,EAOjC,WAAW,GAAA,EAAa;AACtB,IAAA,IAAA,CAAK,OAAA,GAAU,GAAA;AACf,IAAA,cAAA,CAAe,GAAG,CAAA;AAAA,EACpB;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,IAAA,GAAsB;AAC1B,IAAA,IAAI,CAAC,KAAK,UAAA,EAAY;AACpB,MAAA,IAAA,CAAK,WAAA,GAAc,KAAA;AACnB,MAAA;AAAA,IACF;AAEA,IAAA,IAAI,KAAK,WAAA,EAAa;AACpB,MAAA,MAAM,IAAA,CAAK,WAAA;AACX,MAAA;AAAA,IACF;AAEA,IAAA,IAAA,CAAK,eAAe,YAAY;AAC9B,MAAA,IAAI;AAEF,QAAA,MAAM,aAAA,GAAgB,MAAM,eAAA,EAAgB;AAC5C,QAAA,IAAA,CAAK,WAAA,GAAc,aAAA;AAEnB,QAAA,IAAI,KAAK,WAAA,EAAa;AACpB,UAAA,OAAA,CAAQ,IAAI,sCAAsC,CAAA;AAAA,QACpD,CAAA,MAAO;AACL,UAAA,OAAA,CAAQ,IAAI,2DAA2D,CAAA;AAAA,QACzE;AAAA,MACF,SAAS,KAAA,EAAO;AACd,QAAA,OAAA,CAAQ,KAAA,CAAM,4CAA4C,KAAK,CAAA;AAC/D,QAAA,IAAA,CAAK,WAAA,GAAc,KAAA;AAAA,MACrB;AAAA,IACF,CAAA,GAAG;AAEH,IAAA,MAAM,IAAA,CAAK,WAAA;AAAA,EACb;AAAA;AAAA;AAAA;AAAA,EAKA,MAAc,iBAAiB,KAAA,EAAiD;AAC9E,IAAA,MAAM,UAAoB,EAAC;AAC3B,IAAA,IAAI,aAAA;AACJ,IAAA,IAAI,kBAAA;AACJ,IAAA,IAAI,UAAA,GAAa,CAAA;AAEjB,IAAA,MAAM,OAAA,GAAU,KAAA,CAAM,OAAA,IAAW,EAAC;AAClC,IAAA,MAAM,oBAA4C,EAAC;AAGnD,IAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,KAAK,MAAA,CAAO,OAAA,CAAQ,OAAO,CAAA,EAAG;AAClD,MAAA,iBAAA,CAAkB,GAAA,CAAI,WAAA,EAAa,CAAA,GAAI,KAAA;AAAA,IACzC;AAGA,IAAA,MAAM,mBAAmB,CAAC,EACxB,kBAAkB,WAAW,CAAA,IAAK,kBAAkB,iBAAiB,CAAA,CAAA;AAEvE,IAAA,MAAM,cAAA,GAAiB,kBAAkB,iBAAiB,CAAA;AAE1D,IAAA,IAAI,cAAA,EAAgB,QAAA,CAAS,aAAa,CAAA,EAAG;AAC3C,MAAA,UAAA,GAAa,IAAA;AACb,MAAA,OAAA,CAAQ,KAAK,yBAAyB,CAAA;AACtC,MAAA,aAAA,GAAgB,EAAE,IAAA,EAAM,SAAA,EAAW,IAAA,EAAM,SAAA,EAAU;AACnD,MAAA,kBAAA,GAAqB,WAAA;AAAA,IACvB,WAAW,gBAAA,EAAkB;AAC3B,MAAA,UAAA,GAAa,IAAA,CAAK,GAAA,CAAI,UAAA,EAAY,GAAG,CAAA;AACrC,MAAA,OAAA,CAAQ,KAAK,mBAAmB,CAAA;AAAA,IAClC;AAGA,IAAA,MAAM,YAAY,KAAA,CAAM,SAAA,IAAa,KAAA,CAAM,OAAA,GAAU,YAAY,CAAA,IAAK,EAAA;AACtE,IAAA,IAAI,SAAA,EAAW;AACb,MAAA,KAAA,MAAW,EAAE,OAAA,EAAS,IAAA,EAAM,IAAA,MAAUD,kBAAAA,EAAmB;AACvD,QAAA,IAAI,OAAA,CAAQ,IAAA,CAAK,SAAS,CAAA,EAAG;AAC3B,UAAA,MAAM,oBAAA,GAAuB;AAAA,YAC3B,SAAA;AAAA,YACA,QAAA;AAAA,YACA,YAAA;AAAA,YACA;AAAA,WACF;AACA,UAAA,MAAM,iBAAA,GAAoB,oBAAA,CAAqB,QAAA,CAAS,IAAI,IACxD,IAAA,GACA,GAAA;AAEJ,UAAA,UAAA,GAAa,IAAA,CAAK,GAAA,CAAI,UAAA,EAAY,iBAAiB,CAAA;AACnD,UAAA,OAAA,CAAQ,IAAA,CAAK,CAAA,cAAA,EAAiB,IAAI,CAAA,CAAE,CAAA;AACpC,UAAA,IAAI,CAAC,aAAA,EAAe;AAClB,YAAA,aAAA,GAAgB,EAAE,MAAM,IAAA,EAAK;AAC7B,YAAA,kBAAA,GAAqB,SAAA;AAAA,UACvB;AACA,UAAA;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAGA,IAAA,MAAM,SAAA,GAAY;AAAA,MAChB,wBAAA;AAAA,MACA,0BAAA;AAAA,MACA,qBAAA;AAAA,MACA,mBAAA;AAAA,MACA;AAAA,KACF;AAEA,IAAA,MAAM,iBAAiB,SAAA,CAAU,MAAA;AAAA,MAC/B,CAAA,MAAA,KAAU,kBAAkB,MAAM;AAAA,KACpC;AACA,IAAA,IAAI,cAAA,CAAe,SAAS,CAAA,EAAG;AAC7B,MAAA,UAAA,GAAa,IAAA,CAAK,GAAA,CAAI,UAAA,EAAY,GAAG,CAAA;AACrC,MAAA,OAAA,CAAQ,IAAA,CAAK,CAAA,WAAA,EAAc,cAAA,CAAe,MAAM,CAAA,CAAE,CAAA;AAAA,IACpD;AAGA,IAAA,MAAM,EAAA,GAAK,KAAA,CAAM,EAAA,IAAM,KAAA,CAAM,SAAA;AAC7B,IAAA,IACE,EAAA,IACA,CAAC,iBAAA,CAAkB,iBAAiB,KACpC,CAAC,iBAAA,CAAkB,WAAW,CAAA,EAC9B;AACA,MAAA,KAAA,MAAW,CAAC,QAAA,EAAU,QAAQ,KAAK,MAAA,CAAO,OAAA,CAAQC,gBAAe,CAAA,EAAG;AAClE,QAAA,IAAI,SAAS,IAAA,CAAK,CAAA,MAAA,KAAU,GAAG,UAAA,CAAW,MAAM,CAAC,CAAA,EAAG;AAClD,UAAA,UAAA,GAAa,IAAA,CAAK,GAAA,CAAI,UAAA,EAAY,GAAG,CAAA;AACrC,UAAA,OAAA,CAAQ,IAAA,CAAK,CAAA,eAAA,EAAkB,QAAQ,CAAA,CAAE,CAAA;AACzC,UAAA;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAGA,IAAA,IAAI,OAAA,CAAQ,SAAS,CAAA,EAAG;AACtB,MAAA,UAAA,GAAa,IAAA,CAAK,GAAA,CAAI,UAAA,GAAa,GAAA,EAAK,IAAI,CAAA;AAAA,IAC9C;AAEA,IAAA,OAAO;AAAA,MACL,SAAS,UAAA,GAAa,GAAA;AAAA,MACtB,UAAA;AAAA,MACA,GAAI,aAAA,IAAiB,EAAE,aAAA,EAAc;AAAA,MACrC,OAAA;AAAA,MACA,GAAI,kBAAA,IAAsB,EAAE,kBAAA,EAAmB;AAAA,MAC/C,gBAAA,EAAkB,UAAA,GAAa,GAAA,GAAM,QAAA,GAAW,MAAA;AAAA,MAChD,SAAA,sBAAe,IAAA;AAAK,KACtB;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,QAAQ,KAAA,EAAiD;AAE7D,IAAA,MAAM,KAAK,IAAA,EAAK;AAGhB,IAAA,IAAI,KAAK,WAAA,EAAa;AACpB,MAAA,IAAI;AACF,QAAA,MAAM,aAAa,MAAM,mBAAA;AAAA,UACvB,KAAA,CAAM,SAAA,IAAa,KAAA,CAAM,OAAA,GAAU,YAAY,CAAA;AAAA,UAC/C,KAAA,CAAM,WAAW,EAAC;AAAA,UAClB,KAAA,CAAM,MAAM,KAAA,CAAM;AAAA,SACpB;AAEA,QAAA,IAAI,UAAA,EAAY;AAEd,UAAA,OAAA,CAAQ,IAAI,2CAA2C,CAAA;AAGvD,UAAA,MAAM,gBAAgB,UAAA,CAAW,KAAA,GAC7B,KAAK,YAAA,CAAa,UAAA,CAAW,KAAK,CAAA,GAClC,KAAA,CAAA;AAEJ,UAAA,OAAO;AAAA,YACL,SAAS,UAAA,CAAW,OAAA;AAAA,YACpB,YAAY,UAAA,CAAW,UAAA;AAAA,YACvB,GAAI,aAAA,IAAiB,EAAE,aAAA,EAAc;AAAA,YACrC,OAAA,EAAS,CAAC,CAAA,KAAA,EAAQ,UAAA,CAAW,kBAAkB,CAAA,CAAE,CAAA;AAAA,YACjD,oBAAoB,UAAA,CAAW,kBAAA;AAAA,YAC/B,gBAAA,EACE,WAAW,kBAAA,KAAuB,WAAA,GAAc,QAChD,UAAA,CAAW,UAAA,GAAa,MAAM,QAAA,GAAW,MAAA;AAAA,YAC3C,SAAA,sBAAe,IAAA;AAAK,WACtB;AAAA,QACF;AAAA,MACF,SAAS,KAAA,EAAO;AACd,QAAA,OAAA,CAAQ,KAAA,CAAM,uCAAuC,KAAK,CAAA;AAAA,MAC5D;AAAA,IACF;AAGA,IAAA,MAAM,aAAA,GAAgB,MAAM,IAAA,CAAK,gBAAA,CAAiB,KAAK,CAAA;AAIvD,IAAA,IAAI,IAAA,CAAK,WAAA,IAAe,aAAA,CAAc,UAAA,IAAc,IAAA,EAAM;AACxD,MAAA,aAAA,CAAc,aAAa,IAAA,CAAK,GAAA,CAAI,IAAA,EAAM,aAAA,CAAc,aAAa,GAAG,CAAA;AACxE,MAAA,aAAA,CAAc,OAAA,CAAQ,KAAK,eAAe,CAAA;AAC1C,MAAA,IAAI,CAAC,cAAc,kBAAA,EAAoB;AACrC,QAAA,aAAA,CAAc,kBAAA,GAAqB,eAAA;AAAA,MACrC;AAAA,IACF;AAEA,IAAA,OAAO,aAAA;AAAA,EACT;AAAA;AAAA;AAAA;AAAA,EAKQ,aAAa,KAAA,EAA2D;AAC9E,IAAA,MAAM,UAAA,GAAa,MAAM,WAAA,EAAY;AAErC,IAAA,IAAI,UAAA,CAAW,QAAA,CAAS,SAAS,CAAA,EAAG;AAClC,MAAA,OAAO,EAAE,IAAA,EAAM,SAAA,EAAW,IAAA,EAAM,SAAA,EAAU;AAAA,IAC5C,CAAA,MAAA,IAAW,UAAA,CAAW,QAAA,CAAS,QAAQ,CAAA,EAAG;AACxC,MAAA,OAAO,EAAE,IAAA,EAAM,QAAA,EAAU,IAAA,EAAM,QAAA,EAAS;AAAA,IAC1C,CAAA,MAAA,IAAW,UAAA,CAAW,QAAA,CAAS,YAAY,CAAA,EAAG;AAC5C,MAAA,OAAO,EAAE,IAAA,EAAM,YAAA,EAAc,IAAA,EAAM,YAAA,EAAa;AAAA,IAClD,CAAA,MAAA,IAAW,UAAA,CAAW,QAAA,CAAS,MAAM,CAAA,EAAG;AACtC,MAAA,OAAO,EAAE,IAAA,EAAM,MAAA,EAAQ,IAAA,EAAM,SAAA,EAAU;AAAA,IACzC,CAAA,MAAA,IAAW,UAAA,CAAW,QAAA,CAAS,WAAW,CAAA,EAAG;AAC3C,MAAA,OAAO,EAAE,IAAA,EAAM,WAAA,EAAa,IAAA,EAAM,WAAA,EAAY;AAAA,IAChD;AAEA,IAAA,OAAO,EAAE,IAAA,EAAM,SAAA,EAAW,IAAA,EAAM,KAAA,EAAM;AAAA,EACxC;AACF,CAAA;AAKO,IAAM,mCAAN,MAAuC;AAAA,EACpC,QAAA;AAAA,EACA,MAAA,uBAA0C,GAAA,EAAI;AAAA,EAEtD,YAAY,MAAA,EAAqD;AAC/D,IAAA,IAAA,CAAK,QAAA,GAAW,IAAI,yBAAA,CAA0B,MAAA,EAAQ,cAAc,IAAI,CAAA;AACxE,IAAA,IAAI,QAAQ,OAAA,EAAS;AACnB,MAAA,IAAA,CAAK,QAAA,CAAS,UAAA,CAAW,MAAA,CAAO,OAAO,CAAA;AAAA,IACzC;AAAA,EACF;AAAA,EAEA,WAAW,GAAA,EAAa;AACtB,IAAA,IAAA,CAAK,QAAA,CAAS,WAAW,GAAG,CAAA;AAAA,EAC9B;AAAA,EAEA,MAAM,QAAQ,KAAA,EAAiD;AAC7D,IAAA,MAAM,MAAA,GAAS,MAAM,IAAA,CAAK,QAAA,CAAS,QAAQ,KAAK,CAAA;AAGhD,IAAA,IAAI,OAAO,OAAA,IAAW,IAAA,CAAK,MAAA,CAAO,GAAA,CAAI,gBAAgB,CAAA,EAAG;AACvD,MAAA,MAAM,WAAW,IAAA,CAAK,MAAA,CAAO,GAAA,CAAI,gBAAgB,KAAK,EAAC;AACvD,MAAA,QAAA,CAAS,OAAA,CAAQ,CAAA,OAAA,KAAW,OAAA,CAAQ,MAAA,EAAQ,KAAK,CAAC,CAAA;AAAA,IACpD;AAEA,IAAA,OAAO,MAAA;AAAA,EACT;AAAA,EAEA,EAAA,CAAG,OAAe,OAAA,EAA6B;AAC7C,IAAA,IAAI,CAAC,IAAA,CAAK,MAAA,CAAO,GAAA,CAAI,KAAK,CAAA,EAAG;AAC3B,MAAA,IAAA,CAAK,MAAA,CAAO,GAAA,CAAI,KAAA,EAAO,EAAE,CAAA;AAAA,IAC3B;AACA,IAAA,IAAA,CAAK,MAAA,CAAO,GAAA,CAAI,KAAK,CAAA,CAAG,KAAK,OAAO,CAAA;AAAA,EACtC;AAAA,EAEA,IAAA,CAAK,UAAkB,IAAA,EAAmB;AACxC,IAAA,MAAM,WAAW,IAAA,CAAK,MAAA,CAAO,GAAA,CAAI,KAAK,KAAK,EAAC;AAC5C,IAAA,QAAA,CAAS,OAAA,CAAQ,CAAA,OAAA,KAAW,OAAA,CAAQ,GAAG,IAAI,CAAC,CAAA;AAAA,EAC9C;AAAA,EAEA,MAAM,IAAA,GAAsB;AAC1B,IAAA,MAAM,IAAA,CAAK,SAAS,IAAA,EAAK;AAAA,EAC3B;AACF,CAAA;;;ACzTO,IAAM,qBAAN,MAAyB;AAAA,EACb,MAAA;AAAA,EAEjB,YAAY,MAAA,EAA+B;AACzC,IAAA,IAAA,CAAK,MAAA,GAAS;AAAA,MACZ,SAAS,MAAA,CAAO,OAAA;AAAA,MAChB,UAAA,EAAY,OAAO,UAAA,IAAc,uBAAA;AAAA,MACjC,YAAA,EAAc,OAAO,YAAA,IAAgB,IAAA;AAAA;AAAA,MACrC,aAAA,EACE,MAAA,CAAO,aAAA,IACP,OAAA,CAAQ,IAAI,kBAAA,IACZ;AAAA,KACJ;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,KAAA,CACJ,QAAA,EACA,QAAA,EACA,MAAA,EACuB;AACvB,IAAA,IAAI;AACF,MAAA,IAAI,CAAC,IAAA,CAAK,MAAA,CAAO,OAAA,IAAW,CAAC,OAAO,OAAA,EAAS;AAC3C,QAAA,OAAO,QAAA;AAAA,MACT;AAEA,MAAA,MAAM,WAAA,GAA2B;AAAA,QAC/B,EAAA,EAAI,OAAO,UAAA,EAAW;AAAA,QACtB,KAAA,EAAO,MAAA,CAAO,aAAA,EAAe,IAAA,IAAQ,SAAA;AAAA,QACrC,YAAY,MAAA,CAAO,UAAA;AAAA,QACnB,UAAA,EAAY,KAAK,GAAA,EAAI;AAAA,QACrB,SAAS,IAAA,CAAK,GAAA,EAAI,GAAI,IAAA,CAAK,OAAO,YAAA,GAAe;AAAA,OACnD;AAGA,MAAA,MAAM,YAAY,MAAM,IAAA,CAAK,QAAQ,IAAA,CAAK,SAAA,CAAU,WAAW,CAAC,CAAA;AAGhE,MAAA,QAAA,CAAS,OAAA,CAAQ,GAAA,CAAI,IAAA,CAAK,MAAA,CAAO,YAAY,SAAA,EAAW;AAAA,QACtD,QAAA,EAAU,IAAA;AAAA,QACV,MAAA,EAAQ,OAAA,CAAQ,GAAA,CAAI,QAAA,KAAa,YAAA;AAAA,QACjC,QAAA,EAAU,KAAA;AAAA,QACV,MAAA,EAAQ,KAAK,MAAA,CAAO,YAAA;AAAA,QACpB,IAAA,EAAM;AAAA,OACP,CAAA;AAED,MAAA,OAAO,QAAA;AAAA,IACT,SAAS,KAAA,EAAO;AAEd,MAAA,IAAI,OAAA,CAAQ,IAAI,iBAAA,EAAmB;AACjC,QAAA,OAAA,CAAQ,IAAA,CAAK,yCAAyC,KAAK,CAAA;AAAA,MAC7D;AACA,MAAA,OAAO,QAAA;AAAA,IACT;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,MAAM,OAAA,EAAmD;AAC7D,IAAA,IAAI;AACF,MAAA,IAAI,CAAC,IAAA,CAAK,MAAA,CAAO,OAAA,EAAS;AACxB,QAAA,OAAO,IAAA;AAAA,MACT;AAEA,MAAA,MAAM,SAAS,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,IAAA,CAAK,OAAO,UAAU,CAAA;AACzD,MAAA,IAAI,CAAC,QAAQ,KAAA,EAAO;AAClB,QAAA,OAAO,IAAA;AAAA,MACT;AAGA,MAAA,MAAM,SAAA,GAAY,MAAM,IAAA,CAAK,OAAA,CAAQ,OAAO,KAAK,CAAA;AACjD,MAAA,MAAM,OAAA,GAAuB,IAAA,CAAK,KAAA,CAAM,SAAS,CAAA;AAGjD,MAAA,IAAI,OAAA,CAAQ,OAAA,GAAU,IAAA,CAAK,GAAA,EAAI,EAAG;AAChC,QAAA,OAAO,IAAA;AAAA,MACT;AAEA,MAAA,OAAO,OAAA;AAAA,IACT,SAAS,KAAA,EAAO;AAEd,MAAA,IAAI,OAAA,CAAQ,IAAI,iBAAA,EAAmB;AACjC,QAAA,OAAA,CAAQ,IAAA,CAAK,yCAAyC,KAAK,CAAA;AAAA,MAC7D;AACA,MAAA,OAAO,IAAA;AAAA,IACT;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,QAAA,EAAsC;AAC1C,IAAA,IAAI;AACF,MAAA,QAAA,CAAS,OAAA,CAAQ,MAAA,CAAO,IAAA,CAAK,MAAA,CAAO,UAAU,CAAA;AAAA,IAChD,SAAS,KAAA,EAAO;AAEd,MAAA,IAAI,OAAA,CAAQ,IAAI,iBAAA,EAAmB;AACjC,QAAA,OAAA,CAAQ,IAAA,CAAK,yCAAyC,KAAK,CAAA;AAAA,MAC7D;AAAA,IACF;AACA,IAAA,OAAO,QAAA;AAAA,EACT;AAAA;AAAA;AAAA;AAAA,EAKA,MAAc,QAAQ,IAAA,EAA+B;AACnD,IAAA,IAAI;AAGF,MAAA,MAAM,GAAA,GAAM,KAAK,MAAA,CAAO,aAAA;AACxB,MAAA,MAAM,OAAA,GAAU,IAAI,WAAA,EAAY,CAAE,OAAO,IAAI,CAAA;AAG7C,MAAA,MAAM,UAAA,GAAa,IAAI,UAAA,CAAW,OAAA,CAAQ,MAAM,CAAA;AAChD,MAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,OAAA,CAAQ,QAAQ,CAAA,EAAA,EAAK;AACvC,QAAA,UAAA,CAAW,CAAC,CAAA,GAAA,CAAK,OAAA,CAAQ,CAAC,CAAA,IAAK,KAAK,GAAA,CAAI,UAAA,CAAW,CAAA,GAAI,GAAA,CAAI,MAAM,CAAA;AAAA,MACnE;AAGA,MAAA,OAAO,IAAA;AAAA,QACL,KAAA,CAAM,IAAA,CAAK,UAAA,EAAY,CAAA,IAAA,KAAQ,MAAA,CAAO,aAAa,IAAI,CAAC,CAAA,CAAE,IAAA,CAAK,EAAE;AAAA,OACnE;AAAA,IACF,SAAS,KAAA,EAAO;AAEd,MAAA,OAAO,KAAK,IAAI,CAAA;AAAA,IAClB;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAc,QAAQ,IAAA,EAA+B;AACnD,IAAA,IAAI;AACF,MAAA,MAAM,GAAA,GAAM,KAAK,MAAA,CAAO,aAAA;AACxB,MAAA,MAAM,OAAA,GAAU,UAAA,CAAW,IAAA,CAAK,IAAA,CAAK,IAAI,GAAG,CAAA,CAAA,KAAK,CAAA,CAAE,UAAA,CAAW,CAAC,CAAC,CAAA;AAGhE,MAAA,MAAM,YAAA,GAAe,IAAI,UAAA,CAAW,OAAA,CAAQ,MAAM,CAAA;AAClD,MAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,OAAA,CAAQ,QAAQ,CAAA,EAAA,EAAK;AACvC,QAAA,YAAA,CAAa,CAAC,CAAA,GAAA,CAAK,OAAA,CAAQ,CAAC,CAAA,IAAK,KAAK,GAAA,CAAI,UAAA,CAAW,CAAA,GAAI,GAAA,CAAI,MAAM,CAAA;AAAA,MACrE;AAEA,MAAA,OAAO,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,YAAY,CAAA;AAAA,IAC9C,SAAS,KAAA,EAAO;AAEd,MAAA,OAAO,KAAK,IAAI,CAAA;AAAA,IAClB;AAAA,EACF;AACF,CAAA;;;AC9JO,SAAS,2BAAA,CACd,MAAA,GAA0C,EAAC,EAC3C;AAEA,EAAA,MAAM,QAAA,GAAW,MAAA,CAAO,UAAA,GACpB,IAAI,gCAAA,CAAkB,EAAE,UAAA,EAAY,IAAA,EAAM,CAAA,GAC1C,IAAI,wBAAA,CAAc,MAAM,CAAA;AAG5B,EAAA,MAAM,iBACJ,MAAA,CAAO,eAAA,EAAiB,WAAW,MAAA,CAAO,UAAA,GACtC,IAAI,kBAAA,CAAmB;AAAA,IACrB,OAAA,EAAS,IAAA;AAAA,IACT,GAAG,MAAA,CAAO;AAAA,GACX,CAAA,GACD,IAAA;AAGN,EAAA,IAAI,OAAO,MAAA,EAAQ;AACjB,IAAA,MAAA,CAAO,OAAA,CAAQ,OAAO,MAAM,CAAA,CAAE,QAAQ,CAAC,CAAC,KAAA,EAAO,OAAO,CAAA,KAAM;AAC1D,MAAA,QAAA,CAAS,EAAA,CAAG,OAAc,OAAc,CAAA;AAAA,IAC1C,CAAC,CAAA;AAAA,EACH;AAEA,EAAA,MAAM;AAAA,IACJ,eAAA,GAAkB,KAAA;AAAA,IAClB,WAAA;AAAA,IACA,YAAY,EAAC;AAAA,IACb,eAAA,GAAkB;AAAA,MAChB,MAAA,EAAQ,GAAA;AAAA,MACR,OAAA,EAAS,yCAAA;AAAA,MACT,OAAA,EAAS,EAAE,cAAA,EAAgB,kBAAA;AAAmB,KAChD;AAAA,IACA,WAAA,GAAc,UAAA;AAAA,IACd,UAAA,GAAa;AAAA,GACf,GAAI,MAAA;AAEJ,EAAA,OAAO,OAAO,OAAA,KAAgD;AAC5D,IAAA,IAAI;AAEF,MAAA,MAAM,UAAA,GAAa,SAAA,CAAU,IAAA,CAAK,CAAA,OAAA,KAAW;AAC3C,QAAA,IAAI,OAAO,YAAY,QAAA,EAAU;AAC/B,UAAA,OAAO,OAAA,CAAQ,OAAA,CAAQ,QAAA,CAAS,UAAA,CAAW,OAAO,CAAA;AAAA,QACpD;AACA,QAAA,OAAO,OAAA,CAAQ,IAAA,CAAK,OAAA,CAAQ,OAAA,CAAQ,QAAQ,CAAA;AAAA,MAC9C,CAAC,CAAA;AAED,MAAA,IAAI,UAAA,EAAY;AAEd,QAAC,OAAA,CAAgB,WAAA,GAAc,EAAE,OAAA,EAAS,IAAA,EAAK;AAC/C,QAAA,OAAOC,oBAAa,IAAA,EAAK;AAAA,MAC3B;AAGA,MAAA,MAAM,kBAAkB,cAAA,GACpB,MAAM,cAAA,CAAe,KAAA,CAAM,OAAO,CAAA,GAClC,IAAA;AAEJ,MAAA,IAAI,eAAA,EAAiB;AAEnB,QAAA,MAAMH,SAAAA,GAAWG,oBAAa,IAAA,EAAK;AAGnC,QAAAH,SAAAA,CAAS,OAAA,CAAQ,GAAA,CAAI,wBAAA,EAA0B,MAAM,CAAA;AACrD,QAAAA,SAAAA,CAAS,OAAA,CAAQ,GAAA,CAAI,qBAAA,EAAuB,gBAAgB,KAAK,CAAA;AACjE,QAAAA,UAAS,OAAA,CAAQ,GAAA;AAAA,UACf,0BAAA;AAAA,UACA,eAAA,CAAgB,WAAW,QAAA;AAAS,SACtC;AACA,QAAAA,SAAAA,CAAS,OAAA,CAAQ,GAAA,CAAI,uBAAA,EAAyB,WAAW,CAAA;AACzD,QAAAA,SAAAA,CAAS,OAAA,CAAQ,GAAA,CAAI,0BAAA,EAA4B,gBAAgB,EAAE,CAAA;AAGnE,QAAC,QAAgB,WAAA,GAAc;AAAA,UAC7B,MAAA,EAAQ;AAAA,YACN,OAAA,EAAS,IAAA;AAAA,YACT,YAAY,eAAA,CAAgB,UAAA;AAAA,YAC5B,aAAA,EAAe,EAAE,IAAA,EAAM,eAAA,CAAgB,KAAA,EAAM;AAAA,YAC7C,SAAA,sBAAe,IAAA,EAAK;AAAA,YACpB,kBAAA,EAAoB;AAAA,WACtB;AAAA,UACA,OAAA,EAAS,eAAA;AAAA,UACT,OAAA,EAAS;AAAA,SACX;AAGA,QAAA,MAAMI,QAAAA,GAAU;AAAA,UACd,SAAA,EAAW,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,YAAY,CAAA,IAAK,EAAA;AAAA,UAChD,YACG,OAAA,CAAQ,EAAA,IAAM,QAAQ,OAAA,CAAQ,GAAA,CAAI,iBAAiB,CAAA,KAAM,EAAA;AAAA,UAC5D,SAAS,MAAA,CAAO,WAAA,CAAY,OAAA,CAAQ,OAAA,CAAQ,SAAS,CAAA;AAAA,UACrD,KAAK,OAAA,CAAQ,GAAA;AAAA,UACb,QAAQ,OAAA,CAAQ,MAAA;AAAA,UAChB,SAAA,sBAAe,IAAA;AAAK,SACtB;AAEA,QAAA,QAAA,CAAS,IAAA,CAAK,yBAAA,EAA2B,eAAA,EAAiBA,QAAO,CAAA;AAEjE,QAAA,OAAOJ,SAAAA;AAAA,MACT;AAGA,MAAA,MAAM,SAAA,GAAY,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,YAAY,CAAA;AAClD,MAAA,MAAM,YAAY,OAAA,CAAQ,EAAA,IAAM,OAAA,CAAQ,OAAA,CAAQ,IAAI,iBAAiB,CAAA;AAGrE,MAAA,MAAM,GAAA,GAAM,IAAI,GAAA,CAAI,OAAA,CAAQ,GAAG,CAAA;AAC/B,MAAA,MAAM,aAAA,GAAgB,GAAA,CAAI,QAAA,GAAW,GAAA,CAAI,MAAA;AAEzC,MAAA,MAAM,OAAA,GAAU;AAAA,QACd,GAAI,SAAA,IAAa,EAAE,SAAA,EAAU;AAAA,QAC7B,GAAI,SAAA,IAAa,EAAE,SAAA,EAAU;AAAA,QAC7B,SAAS,MAAA,CAAO,WAAA,CAAY,OAAA,CAAQ,OAAA,CAAQ,SAAS,CAAA;AAAA,QACrD,GAAA,EAAK,aAAA;AAAA;AAAA,QACL,QAAQ,OAAA,CAAQ,MAAA;AAAA,QAChB,SAAA,sBAAe,IAAA;AAAK,OACtB;AAGA,MAAA,MAAM,MAAA,GAAS,MAAM,QAAA,CAAS,OAAA,CAAQ,OAAO,CAAA;AAG7C,MAAA,IACE,OAAO,OAAA,IACP,MAAA,CAAO,UAAA,KAAe,MAAA,CAAO,uBAAuB,GAAA,CAAA,EACpD;AAEA,QAAA,IAAI,WAAA,EAAa;AACf,UAAA,MAAM,cAAA,GAAiB,MAAM,WAAA,CAAY,OAAA,EAAS,MAAM,CAAA;AACxD,UAAA,IAAI,cAAA,EAAgB;AAClB,YAAA,OAAO,cAAA;AAAA,UACT;AAAA,QACF;AAGA,QAAA,QAAQ,eAAA;AAAiB,UACvB,KAAK,OAAA,EAAS;AACZ,YAAA,MAAMA,YAAWG,mBAAA,CAAa,IAAA;AAAA,cAC5B;AAAA,gBACE,OAAO,eAAA,CAAgB,OAAA;AAAA,gBACvB,QAAA,EAAU,IAAA;AAAA,gBACV,YAAY,MAAA,CAAO,UAAA;AAAA,gBACnB,WAAW,MAAA,CAAO;AAAA,eACpB;AAAA,cACA,EAAE,MAAA,EAAQ,eAAA,CAAgB,MAAA;AAAO,aACnC;AAEA,YAAA,IAAI,gBAAgB,OAAA,EAAS;AAC3B,cAAA,MAAA,CAAO,OAAA,CAAQ,eAAA,CAAgB,OAAO,CAAA,CAAE,OAAA;AAAA,gBACtC,CAAC,CAAC,GAAA,EAAK,KAAK,CAAA,KAAM;AAChB,kBAAAH,SAAAA,CAAS,OAAA,CAAQ,GAAA,CAAI,GAAA,EAAK,KAAK,CAAA;AAAA,gBACjC;AAAA,eACF;AAAA,YACF;AAGA,YAAA,QAAA,CAAS,IAAA,CAAK,eAAA,EAAiB,MAAA,EAAQ,OAAO,CAAA;AAE9C,YAAA,OAAOA,SAAAA;AAAA,UACT;AAAA,UAEA,KAAK,UAAA;AACH,YAAA,OAAOG,oBAAa,QAAA,CAAS,IAAI,IAAI,WAAA,EAAa,OAAA,CAAQ,GAAG,CAAC,CAAA;AAAA,UAEhE,KAAK,SAAA;AACH,YAAA,OAAOA,oBAAa,OAAA,CAAQ,IAAI,IAAI,UAAA,EAAY,OAAA,CAAQ,GAAG,CAAC,CAAA;AAAA,UAE9D,KAAK,KAAA;AACH,YAAA,OAAA,CAAQ,KAAK,6BAAA,EAA+B;AAAA,cAC1C,WAAW,OAAA,CAAQ,SAAA;AAAA,cACnB,WAAW,OAAA,CAAQ,SAAA;AAAA,cACnB,YAAY,MAAA,CAAO,UAAA;AAAA,cACnB,SAAS,MAAA,CAAO,OAAA;AAAA,cAChB,QAAA,EAAU,QAAQ,OAAA,CAAQ;AAAA,aAC3B,CAAA;AACD,YAAA;AAAA,UAEF,KAAK,OAAA;AAAA,UACL;AAEE,YAAA,IACE,OAAO,OAAA,IACP,MAAA,CAAO,UAAA,KAAe,MAAA,CAAO,uBAAuB,GAAA,CAAA,EACpD;AACA,cAAA,QAAA,CAAS,IAAA,CAAK,eAAA,EAAiB,MAAA,EAAQ,OAAO,CAAA;AAAA,YAChD;AAEA,YAAA;AAAA;AACJ,MACF;AAGA,MAAC,QAAgB,WAAA,GAAc;AAAA,QAC7B,MAAA;AAAA,QACA,OAAA,EAAS;AAAA,OACX;AAGA,MAAA,IAAI,QAAA,GAAWA,oBAAa,IAAA,EAAK;AACjC,MAAA,QAAA,CAAS,QAAQ,GAAA,CAAI,wBAAA,EAA0B,MAAA,CAAO,OAAA,CAAQ,UAAU,CAAA;AACxE,MAAA,QAAA,CAAS,OAAA,CAAQ,GAAA;AAAA,QACf,0BAAA;AAAA,QACA,MAAA,CAAO,WAAW,QAAA;AAAS,OAC7B;AAGA,MAAA,IAAI,MAAA,CAAO,eAAe,IAAA,EAAM;AAC9B,QAAA,QAAA,CAAS,OAAA,CAAQ,GAAA,CAAI,qBAAA,EAAuB,MAAA,CAAO,cAAc,IAAI,CAAA;AAAA,MACvE;AAGA,MAAA,IACE,kBACA,MAAA,CAAO,OAAA,IACP,OAAO,UAAA,KAAe,MAAA,CAAO,uBAAuB,GAAA,CAAA,EACpD;AACA,QAAA,QAAA,GAAW,MAAM,cAAA,CAAe,KAAA,CAAM,OAAA,EAAS,UAAU,MAAM,CAAA;AAC/D,QAAA,QAAA,CAAS,OAAA,CAAQ,GAAA,CAAI,uBAAA,EAAyB,KAAK,CAAA;AAGnD,QAAA,QAAA,CAAS,IAAA,CAAK,uBAAA,EAAyB,MAAA,EAAQ,OAAO,CAAA;AAAA,MACxD;AAEA,MAAA,OAAO,QAAA;AAAA,IACT,SAAS,KAAA,EAAO;AACd,MAAA,OAAA,CAAQ,KAAA,CAAM,iCAAiC,KAAK,CAAA;AACpD,MAAA,OAAOA,oBAAa,IAAA,EAAK;AAAA,IAC3B;AAAA,EACF,CAAA;AACF;AAKO,SAAS,WAAA,CAAY,MAAA,GAA0C,EAAC,EAAG;AACxE,EAAA,OAAO,4BAA4B,MAAM,CAAA;AAC3C","file":"middleware.js","sourcesContent":["/**\n * Ed25519 Signature Verification for HTTP Message Signatures\n * Implements proper cryptographic verification for ChatGPT and other agents\n * \n * Based on RFC 9421 (HTTP Message Signatures) and ChatGPT's implementation\n * Reference: https://help.openai.com/en/articles/9785974-chatgpt-user-allowlisting\n */\n\n/**\n * Known public keys for AI agents\n */\nconst KNOWN_KEYS = {\n  chatgpt: [\n    {\n      kid: 'otMqcjr17mGyruktGvJU8oojQTSMHlVm7uO-lrcqbdg',\n      // ChatGPT's current Ed25519 public key (base64)\n      publicKey: '7F_3jDlxaquwh291MiACkcS3Opq88NksyHiakzS-Y1g',\n      validFrom: new Date('2025-01-01').getTime() / 1000,\n      validUntil: new Date('2025-04-11').getTime() / 1000,\n    },\n  ],\n};\n\n/**\n * Parse the Signature-Input header according to RFC 9421\n */\nfunction parseSignatureInput(signatureInput: string): {\n  keyid: string;\n  created?: number | undefined;\n  expires?: number | undefined;\n  signedHeaders: string[];\n} | null {\n  try {\n    // Example: sig1=(\"@method\" \"@path\" \"@authority\" \"date\");keyid=\"...\";created=1234567890\n    const match = signatureInput.match(/sig1=\\((.*?)\\);(.+)/);\n    if (!match) return null;\n\n    const [, headersList, params] = match;\n    \n    // Parse signed headers\n    const signedHeaders = headersList\n      ? headersList\n          .split(' ')\n          .map(h => h.replace(/\"/g, '').trim())\n          .filter(h => h.length > 0)\n      : [];\n\n    // Parse parameters\n    const keyidMatch = params ? params.match(/keyid=\"([^\"]+)\"/) : null;\n    const createdMatch = params ? params.match(/created=(\\d+)/) : null;\n    const expiresMatch = params ? params.match(/expires=(\\d+)/) : null;\n\n    if (!keyidMatch || !keyidMatch[1]) return null;\n\n    return {\n      keyid: keyidMatch[1],\n      created: createdMatch && createdMatch[1] ? parseInt(createdMatch[1]) : undefined,\n      expires: expiresMatch && expiresMatch[1] ? parseInt(expiresMatch[1]) : undefined,\n      signedHeaders,\n    };\n  } catch (error) {\n    console.error('[Signature] Failed to parse Signature-Input:', error);\n    return null;\n  }\n}\n\n/**\n * Build the signature base string according to RFC 9421\n * This is what gets signed\n */\nfunction buildSignatureBase(\n  method: string,\n  path: string,\n  headers: Record<string, string>,\n  signedHeaders: string[]\n): string {\n  const components: string[] = [];\n  \n  for (const headerName of signedHeaders) {\n    let value: string;\n    \n    switch (headerName) {\n      case '@method':\n        value = method.toUpperCase();\n        break;\n      case '@path':\n        value = path;\n        break;\n      case '@authority':\n        // Get from Host header or URL\n        value = headers['host'] || headers['Host'] || '';\n        break;\n      default:\n        // Regular headers (case-insensitive lookup)\n        const key = Object.keys(headers).find(\n          k => k.toLowerCase() === headerName.toLowerCase()\n        );\n        value = key ? headers[key] || '' : '';\n        break;\n    }\n    \n    // Format according to RFC 9421\n    components.push(`\"${headerName}\": ${value}`);\n  }\n  \n  return components.join('\\n');\n}\n\n/**\n * Verify Ed25519 signature using Web Crypto API\n */\nasync function verifyEd25519Signature(\n  publicKeyBase64: string,\n  signatureBase64: string,\n  message: string\n): Promise<boolean> {\n  try {\n    // Decode base64 to Uint8Array\n    const publicKeyBytes = Uint8Array.from(atob(publicKeyBase64), c => c.charCodeAt(0));\n    const signatureBytes = Uint8Array.from(atob(signatureBase64), c => c.charCodeAt(0));\n    const messageBytes = new TextEncoder().encode(message);\n    \n    // Check key and signature lengths\n    if (publicKeyBytes.length !== 32) {\n      console.error('[Signature] Invalid public key length:', publicKeyBytes.length);\n      return false;\n    }\n    if (signatureBytes.length !== 64) {\n      console.error('[Signature] Invalid signature length:', signatureBytes.length);\n      return false;\n    }\n    \n    // Import the public key\n    const publicKey = await crypto.subtle.importKey(\n      'raw',\n      publicKeyBytes,\n      {\n        name: 'Ed25519',\n        namedCurve: 'Ed25519',\n      },\n      false,\n      ['verify']\n    );\n    \n    // Verify the signature\n    const isValid = await crypto.subtle.verify(\n      'Ed25519',\n      publicKey,\n      signatureBytes,\n      messageBytes\n    );\n    \n    return isValid;\n  } catch (error) {\n    console.error('[Signature] Ed25519 verification failed:', error);\n    \n    // Fallback: Try with @noble/ed25519 if available (for environments without Ed25519 support)\n    if (typeof window === 'undefined') {\n      try {\n        // In Node.js/Edge Runtime, we might need to use a polyfill\n        // For now, we'll return false if Web Crypto doesn't support Ed25519\n        console.warn('[Signature] Ed25519 not supported in this environment');\n        return false;\n      } catch {\n        return false;\n      }\n    }\n    \n    return false;\n  }\n}\n\n/**\n * Signature verification result\n */\nexport interface SignatureVerificationResult {\n  isValid: boolean;\n  agent?: string;\n  keyid?: string;\n  confidence: number;\n  reason?: string;\n  verificationMethod: 'signature' | 'none';\n}\n\n/**\n * Verify HTTP Message Signature for AI agents\n */\nexport async function verifyAgentSignature(\n  method: string,\n  path: string,\n  headers: Record<string, string>\n): Promise<SignatureVerificationResult> {\n  // Check for signature headers\n  const signature = headers['signature'] || headers['Signature'];\n  const signatureInput = headers['signature-input'] || headers['Signature-Input'];\n  const signatureAgent = headers['signature-agent'] || headers['Signature-Agent'];\n  \n  // No signature present\n  if (!signature || !signatureInput) {\n    return {\n      isValid: false,\n      confidence: 0,\n      reason: 'No signature headers present',\n      verificationMethod: 'none',\n    };\n  }\n  \n  // Parse Signature-Input header\n  const parsed = parseSignatureInput(signatureInput);\n  if (!parsed) {\n    return {\n      isValid: false,\n      confidence: 0,\n      reason: 'Invalid Signature-Input header',\n      verificationMethod: 'none',\n    };\n  }\n  \n  // Check timestamp if present\n  if (parsed.created) {\n    const now = Math.floor(Date.now() / 1000);\n    const age = now - parsed.created;\n    \n    // Reject signatures older than 5 minutes\n    if (age > 300) {\n      return {\n        isValid: false,\n        confidence: 0,\n        reason: 'Signature expired (older than 5 minutes)',\n        verificationMethod: 'none',\n      };\n    }\n    \n    // Reject signatures from the future (clock skew tolerance: 30 seconds)\n    if (age < -30) {\n      return {\n        isValid: false,\n        confidence: 0,\n        reason: 'Signature timestamp is in the future',\n        verificationMethod: 'none',\n      };\n    }\n  }\n  \n  // Determine which agent based on signature-agent header\n  let agent: string | undefined;\n  let knownKeys: typeof KNOWN_KEYS.chatgpt | undefined;\n  \n  if (signatureAgent === '\"https://chatgpt.com\"' || signatureAgent?.includes('chatgpt.com')) {\n    agent = 'ChatGPT';\n    knownKeys = KNOWN_KEYS.chatgpt;\n  }\n  // Add other agents here as needed\n  \n  if (!agent || !knownKeys) {\n    return {\n      isValid: false,\n      confidence: 0,\n      reason: 'Unknown signature agent',\n      verificationMethod: 'none',\n    };\n  }\n  \n  // Find the key by ID\n  const key = knownKeys.find(k => k.kid === parsed.keyid);\n  if (!key) {\n    return {\n      isValid: false,\n      confidence: 0,\n      reason: `Unknown key ID: ${parsed.keyid}`,\n      verificationMethod: 'none',\n    };\n  }\n  \n  // Check key validity period\n  const now = Math.floor(Date.now() / 1000);\n  if (now < key.validFrom || now > key.validUntil) {\n    return {\n      isValid: false,\n      confidence: 0,\n      reason: 'Key is not valid at current time',\n      verificationMethod: 'none',\n    };\n  }\n  \n  // Build the signature base string\n  const signatureBase = buildSignatureBase(method, path, headers, parsed.signedHeaders);\n  \n  // Extract the actual signature value (remove \"sig1=:\" prefix and \"::\" suffix if present)\n  let signatureValue = signature;\n  if (signatureValue.startsWith('sig1=:')) {\n    signatureValue = signatureValue.substring(6);\n  }\n  if (signatureValue.endsWith(':')) {\n    signatureValue = signatureValue.slice(0, -1);\n  }\n  \n  // Verify the signature\n  const isValid = await verifyEd25519Signature(\n    key.publicKey,\n    signatureValue,\n    signatureBase\n  );\n  \n  if (isValid) {\n    return {\n      isValid: true,\n      agent,\n      keyid: parsed.keyid,\n      confidence: 1.0, // 100% confidence for valid signature\n      verificationMethod: 'signature',\n    };\n  } else {\n    return {\n      isValid: false,\n      confidence: 0,\n      reason: 'Signature verification failed',\n      verificationMethod: 'none',\n    };\n  }\n}\n\n/**\n * Quick check if signature headers are present (for performance)\n */\nexport function hasSignatureHeaders(headers: Record<string, string>): boolean {\n  return !!(\n    (headers['signature'] || headers['Signature']) &&\n    (headers['signature-input'] || headers['Signature-Input'])\n  );\n}\n\n/**\n * Check if this is a ChatGPT signature based on headers\n */\nexport function isChatGPTSignature(headers: Record<string, string>): boolean {\n  const signatureAgent = headers['signature-agent'] || headers['Signature-Agent'];\n  return signatureAgent === '\"https://chatgpt.com\"' || (signatureAgent?.includes('chatgpt.com') || false);\n}","/**\n * Wrapper for EdgeAgentDetector to match AgentDetector interface\n * This allows the middleware to work with EdgeAgentDetector in Edge Runtime\n *\n * This is a self-contained implementation to avoid import resolution issues\n * Includes proper Ed25519 signature verification for ChatGPT and other agents\n */\n\ntype DetectionInput = {\n  userAgent?: string;\n  ip?: string;\n  ipAddress?: string;\n  headers?: Record<string, string>;\n  url?: string;\n  method?: string;\n  timestamp?: Date;\n};\n\ntype DetectionResult = {\n  isAgent: boolean;\n  confidence: number;\n  detectedAgent?: {\n    type: string;\n    name: string;\n  };\n  reasons: string[];\n  verificationMethod?: string;\n  forgeabilityRisk?: 'low' | 'medium' | 'high';\n  timestamp: Date;\n};\n\ntype EventHandler = (...args: any[]) => void;\n\n// Import signature verifier\nimport { verifyAgentSignature, hasSignatureHeaders, isChatGPTSignature } from './signature-verifier';\n\n// Known AI agent patterns\nconst AI_AGENT_PATTERNS = [\n  { pattern: /chatgpt-user/i, type: 'chatgpt', name: 'ChatGPT' },\n  { pattern: /claude-web/i, type: 'claude', name: 'Claude' },\n  { pattern: /perplexitybot/i, type: 'perplexity', name: 'Perplexity' },\n  { pattern: /perplexity-user/i, type: 'perplexity', name: 'Perplexity' },\n  { pattern: /perplexity-ai/i, type: 'perplexity', name: 'Perplexity' },\n  { pattern: /perplexity/i, type: 'perplexity', name: 'Perplexity' }, // Fallback\n  { pattern: /bingbot/i, type: 'bing', name: 'Bing AI' },\n  { pattern: /anthropic-ai/i, type: 'anthropic', name: 'Anthropic' },\n];\n\n// Known cloud provider IP ranges (simplified)\nconst CLOUD_PROVIDERS = {\n  aws: ['54.', '52.', '35.', '18.', '3.'],\n  gcp: ['35.', '34.', '104.', '107.', '108.'],\n  azure: ['13.', '20.', '40.', '52.', '104.'],\n};\n\n/**\n * Self-contained EdgeAgentDetector implementation with proper signature verification\n */\nclass EdgeAgentDetector {\n  async analyze(input: DetectionInput): Promise<DetectionResult> {\n    const reasons: string[] = [];\n    let detectedAgent: { type: string; name: string } | undefined;\n    let verificationMethod: string | undefined;\n    let confidence = 0;\n\n    const headers = input.headers || {};\n    const normalizedHeaders: Record<string, string> = {};\n\n    // Normalize header names to lowercase\n    for (const [key, value] of Object.entries(headers)) {\n      normalizedHeaders[key.toLowerCase()] = value;\n    }\n\n    // Check for HTTP Message Signatures with proper cryptographic verification\n    if (hasSignatureHeaders(headers)) {\n      try {\n        // Verify the signature cryptographically\n        const signatureResult = await verifyAgentSignature(\n          input.method || 'GET',\n          input.url || '/',\n          headers\n        );\n\n        if (signatureResult.isValid) {\n          // Valid cryptographic signature - highest confidence\n          confidence = signatureResult.confidence;\n          reasons.push(`verified_signature:${signatureResult.agent?.toLowerCase() || 'unknown'}`);\n          if (signatureResult.agent) {\n            detectedAgent = { \n              type: signatureResult.agent.toLowerCase(), \n              name: signatureResult.agent \n            };\n          }\n          verificationMethod = signatureResult.verificationMethod;\n          \n          // Add keyid to reasons for debugging\n          if (signatureResult.keyid) {\n            reasons.push(`keyid:${signatureResult.keyid}`);\n          }\n        } else {\n          // Invalid signature - suspicious\n          confidence = Math.max(confidence, 0.3);\n          reasons.push('invalid_signature');\n          if (signatureResult.reason) {\n            reasons.push(`signature_error:${signatureResult.reason}`);\n          }\n          \n          // Still check if it claims to be ChatGPT\n          if (isChatGPTSignature(headers)) {\n            reasons.push('claims_chatgpt');\n            detectedAgent = { type: 'chatgpt', name: 'ChatGPT (unverified)' };\n          }\n        }\n      } catch (error) {\n        // Error during verification\n        console.error('[EdgeAgentDetector] Signature verification error:', error);\n        confidence = Math.max(confidence, 0.2);\n        reasons.push('signature_verification_error');\n      }\n    }\n\n    // Check User-Agent patterns\n    const userAgent = input.userAgent || input.headers?.['user-agent'] || '';\n    if (userAgent) {\n      for (const { pattern, type, name } of AI_AGENT_PATTERNS) {\n        if (pattern.test(userAgent)) {\n          // Give higher confidence to well-known AI agents that properly identify themselves\n          const highConfidenceAgents = [\n            'chatgpt',\n            'claude',\n            'perplexity',\n            'anthropic',\n          ];\n          const patternConfidence = highConfidenceAgents.includes(type)\n            ? 0.85\n            : 0.5;\n\n          confidence = Math.max(confidence, patternConfidence);\n          reasons.push(`known_pattern:${type}`);\n          if (!detectedAgent) {\n            detectedAgent = { type, name };\n            verificationMethod = 'pattern';\n          }\n          break;\n        }\n      }\n    }\n\n    // Check AI-specific headers\n    const aiHeaders = [\n      'openai-conversation-id',\n      'openai-ephemeral-user-id',\n      'anthropic-client-id',\n      'x-goog-api-client',\n      'x-ms-copilot-id',\n    ];\n\n    const foundAiHeaders = aiHeaders.filter(\n      header => normalizedHeaders[header]\n    );\n    if (foundAiHeaders.length > 0) {\n      confidence = Math.max(confidence, 0.6);\n      reasons.push(`ai_headers:${foundAiHeaders.length}`);\n    }\n\n    // Check cloud provider IPs\n    const ip = input.ip || input.ipAddress;\n    if (\n      ip &&\n      !normalizedHeaders['x-forwarded-for'] &&\n      !normalizedHeaders['x-real-ip']\n    ) {\n      for (const [provider, prefixes] of Object.entries(CLOUD_PROVIDERS)) {\n        if (prefixes.some(prefix => ip.startsWith(prefix))) {\n          confidence = Math.max(confidence, 0.4);\n          reasons.push(`cloud_provider:${provider}`);\n          break;\n        }\n      }\n    }\n\n    // Boost confidence for combinations (but not if already at 1.0 from signature)\n    if (reasons.length > 2 && confidence < 1.0) {\n      confidence = Math.min(confidence * 1.2, 0.95);\n    }\n\n    return {\n      isAgent: confidence > 0.3,\n      confidence,\n      ...(detectedAgent && { detectedAgent }),\n      reasons,\n      ...(verificationMethod && { verificationMethod }),\n      forgeabilityRisk: verificationMethod === 'signature' ? 'low' : (confidence > 0.8 ? 'medium' : 'high'),\n      timestamp: new Date(),\n    };\n  }\n}\n\n/**\n * Wrapper that provides event emitter functionality\n */\nexport class EdgeAgentDetectorWrapper {\n  private detector: EdgeAgentDetector;\n  private events: Map<string, EventHandler[]> = new Map();\n\n  constructor(_config?: any) {\n    // Config is accepted but not used by EdgeAgentDetector\n    this.detector = new EdgeAgentDetector();\n  }\n\n  async analyze(input: DetectionInput): Promise<DetectionResult> {\n    const result = await this.detector.analyze(input);\n\n    // Emit events if there are listeners\n    if (result.isAgent && this.events.has('agent.detected')) {\n      const handlers = this.events.get('agent.detected') || [];\n      handlers.forEach(handler => handler(result, input));\n    }\n\n    return result;\n  }\n\n  on(event: string, handler: EventHandler): void {\n    if (!this.events.has(event)) {\n      this.events.set(event, []);\n    }\n    this.events.get(event)!.push(handler);\n  }\n\n  emit(event: string, ...args: any[]): void {\n    const handlers = this.events.get(event) || [];\n    handlers.forEach(handler => handler(...args));\n  }\n\n  async init(): Promise<void> {\n    // EdgeAgentDetector doesn't need initialization\n    return;\n  }\n}\n","/**\n * WASM Loader for AgentShield in Edge Runtime\n * Handles loading and initialization of WebAssembly module\n */\n\n// Dynamic WASM loading - no direct imports to avoid build issues\nlet wasmInstance: WebAssembly.Instance | null = null;\nlet wasmExports: any = null;\nlet initPromise: Promise<void> | null = null;\n\n// Store the WASM module URL for runtime loading\nconst WASM_PATH = '/wasm/agentshield_wasm_bg.wasm';\n\n// Store base URL for constructing absolute URLs in Edge Runtime\nlet baseUrl: string | null = null;\n\n/**\n * Set the base URL for WASM loading (needed in Edge Runtime)\n */\nexport function setWasmBaseUrl(url: string) {\n  baseUrl = url;\n}\n\n/**\n * Construct the full WASM URL based on context\n */\nfunction getWasmUrl(): string {\n  // If we have a base URL (Edge Runtime), construct absolute URL\n  if (baseUrl) {\n    try {\n      const url = new URL(baseUrl);\n      // Use the origin to construct the full URL\n      return `${url.origin}${WASM_PATH}`;\n    } catch {\n      // Fallback to relative path if URL construction fails\n      return WASM_PATH;\n    }\n  }\n  // Default to relative path\n  return WASM_PATH;\n}\n\n/**\n * Initialize the WASM module\n * This is safe to call multiple times - it will only initialize once\n */\nexport async function initWasm(): Promise<boolean> {\n  if (wasmExports) return true;\n  if (initPromise) {\n    await initPromise;\n    return !!wasmExports;\n  }\n\n  initPromise = (async () => {\n    try {\n      // Create AbortController for timeout\n      const controller = new AbortController();\n      const timeout = setTimeout(() => controller.abort(), 3000); // 3 second timeout\n      \n      try {\n        const wasmUrl = getWasmUrl();\n        \n        // Try streaming compilation first (most efficient)\n        if (typeof WebAssembly.instantiateStreaming === 'function') {\n          try {\n            const response = await fetch(wasmUrl, { signal: controller.signal });\n            clearTimeout(timeout);\n            \n            if (!response.ok) {\n              throw new Error(`Failed to fetch WASM: ${response.status}`);\n            }\n            \n            // Clone response for streaming (in case we need to retry)\n            const streamResponse = response.clone();\n            \n            // Use streaming compilation for best performance\n            const { instance } = await WebAssembly.instantiateStreaming(\n              streamResponse,\n              {\n                wbg: {\n                  __wbg_log_1d3ae13c3d5e6b8e: (ptr: number, len: number) => {\n                    console.log('WASM:', ptr, len);\n                  },\n                  __wbindgen_throw: (ptr: number, len: number) => {\n                    throw new Error(`WASM Error at ${ptr}, length ${len}`);\n                  }\n                }\n              }\n            );\n            \n            wasmInstance = instance;\n            wasmExports = instance.exports;\n            \n            console.log('[AgentShield] ✅ WASM module initialized with streaming');\n            return;\n          } catch (streamError) {\n            // If not aborted, try fallback\n            if (!controller.signal.aborted) {\n              console.log('[AgentShield] Streaming compilation failed, falling back to standard compilation');\n            } else {\n              throw streamError;\n            }\n          }\n        }\n        \n        // Fallback to standard compilation if streaming not available\n        const response = await fetch(wasmUrl, { signal: controller.signal });\n        clearTimeout(timeout);\n        \n        if (!response.ok) {\n          throw new Error(`Failed to fetch WASM: ${response.status}`);\n        }\n        \n        const wasmArrayBuffer = await response.arrayBuffer();\n        const compiledModule = await WebAssembly.compile(wasmArrayBuffer);\n        \n        const imports = {\n          wbg: {\n            __wbg_log_1d3ae13c3d5e6b8e: (ptr: number, len: number) => {\n              console.log('WASM:', ptr, len);\n            },\n            __wbindgen_throw: (ptr: number, len: number) => {\n              throw new Error(`WASM Error at ${ptr}, length ${len}`);\n            }\n          }\n        };\n        \n        wasmInstance = await WebAssembly.instantiate(compiledModule, imports);\n        wasmExports = wasmInstance.exports;\n        \n        console.log('[AgentShield] ✅ WASM module initialized via fallback');\n      } catch (fetchError: any) {\n        if (fetchError.name === 'AbortError') {\n          console.warn('[AgentShield] WASM fetch timed out after 3 seconds - using pattern detection');\n        } else {\n          console.warn('[AgentShield] Failed to fetch WASM file:', fetchError.message);\n        }\n        wasmExports = null;\n      }\n    } catch (error) {\n      console.error('[AgentShield] Failed to initialize WASM:', error);\n      wasmExports = null;\n    }\n  })();\n\n  await initPromise;\n  return !!wasmExports;\n}\n\n/**\n * Detect agent using WASM\n * Returns null if WASM is not available\n */\nexport async function detectAgentWithWasm(\n  userAgent: string | undefined,\n  headers: Record<string, string>,\n  ipAddress?: string\n): Promise<{\n  isAgent: boolean;\n  confidence: number;\n  agent?: string;\n  verificationMethod: string;\n  riskLevel: string;\n} | null> {\n  // Ensure WASM is initialized\n  const initialized = await initWasm();\n  if (!initialized || !wasmExports) {\n    return null;\n  }\n\n  try {\n    // Note: The actual WASM exports will depend on how wasm-bindgen generates them\n    // This is a simplified version - you may need to adjust based on actual exports\n    \n    // Prepare input for WASM\n    const headersJson = JSON.stringify(headers);\n    \n    // Call WASM detection function (adjust function name based on actual exports)\n    if (typeof wasmExports.detect_agent === 'function') {\n      const result = wasmExports.detect_agent(\n        userAgent || '',\n        headersJson,\n        ipAddress || '',\n        new Date().toISOString()\n      );\n      \n      // Parse result (format depends on WASM implementation)\n      return {\n        isAgent: result.is_agent || false,\n        confidence: result.confidence || 0,\n        agent: result.agent,\n        verificationMethod: result.verification_method || 'wasm',\n        riskLevel: result.risk_level || 'low',\n      };\n    }\n    \n    console.warn('[AgentShield] WASM exports do not include detect_agent function');\n    return null;\n  } catch (error) {\n    console.error('[AgentShield] WASM detection failed:', error);\n    return null;\n  }\n}\n\n/**\n * Get WASM version\n */\nexport async function getWasmVersion(): Promise<string | null> {\n  const initialized = await initWasm();\n  if (!initialized || !wasmExports) {\n    return null;\n  }\n  \n  if (typeof wasmExports.version === 'function') {\n    return wasmExports.version();\n  }\n  \n  return 'unknown';\n}\n\n/**\n * Check if WASM is available and working\n */\nexport async function isWasmAvailable(): Promise<boolean> {\n  try {\n    const initialized = await initWasm();\n    if (!initialized) return false;\n    \n    // Try to get version as a simple test\n    const version = await getWasmVersion();\n    return version !== null;\n  } catch {\n    return false;\n  }\n}","/**\n * Enhanced EdgeAgentDetector with WASM support\n * Provides both pattern-based and WASM-based detection\n */\n\nimport { detectAgentWithWasm, initWasm, isWasmAvailable, setWasmBaseUrl } from './wasm-loader';\n\ntype DetectionInput = {\n  userAgent?: string;\n  ip?: string;\n  ipAddress?: string;\n  headers?: Record<string, string>;\n  url?: string;\n  method?: string;\n  timestamp?: Date;\n};\n\ntype DetectionResult = {\n  isAgent: boolean;\n  confidence: number;\n  detectedAgent?: {\n    type: string;\n    name: string;\n  };\n  reasons: string[];\n  verificationMethod?: string;\n  forgeabilityRisk?: 'low' | 'medium' | 'high';\n  timestamp: Date;\n};\n\ntype EventHandler = (...args: any[]) => void;\n\n// Known AI agent patterns\nconst AI_AGENT_PATTERNS = [\n  { pattern: /chatgpt-user/i, type: 'chatgpt', name: 'ChatGPT' },\n  { pattern: /claude-web/i, type: 'claude', name: 'Claude' },\n  { pattern: /perplexitybot/i, type: 'perplexity', name: 'Perplexity' },\n  { pattern: /perplexity-user/i, type: 'perplexity', name: 'Perplexity' },\n  { pattern: /perplexity-ai/i, type: 'perplexity', name: 'Perplexity' },\n  { pattern: /perplexity/i, type: 'perplexity', name: 'Perplexity' },\n  { pattern: /bingbot/i, type: 'bing', name: 'Bing AI' },\n  { pattern: /anthropic-ai/i, type: 'anthropic', name: 'Anthropic' },\n];\n\n// Known cloud provider IP ranges (simplified)\nconst CLOUD_PROVIDERS = {\n  aws: ['54.', '52.', '35.', '18.', '3.'],\n  gcp: ['35.', '34.', '104.', '107.', '108.'],\n  azure: ['13.', '20.', '40.', '52.', '104.'],\n};\n\n/**\n * EdgeAgentDetector with WASM enhancement\n */\nexport class EdgeAgentDetectorWithWasm {\n  private wasmEnabled: boolean = false;\n  private initPromise: Promise<void> | null = null;\n  private baseUrl: string | null = null;\n\n  constructor(private enableWasm: boolean = true) {}\n\n  /**\n   * Set the base URL for WASM loading in Edge Runtime\n   */\n  setBaseUrl(url: string) {\n    this.baseUrl = url;\n    setWasmBaseUrl(url);\n  }\n\n  /**\n   * Initialize the detector (including WASM if enabled)\n   */\n  async init(): Promise<void> {\n    if (!this.enableWasm) {\n      this.wasmEnabled = false;\n      return;\n    }\n\n    if (this.initPromise) {\n      await this.initPromise;\n      return;\n    }\n\n    this.initPromise = (async () => {\n      try {\n        // Try to initialize WASM\n        const wasmAvailable = await isWasmAvailable();\n        this.wasmEnabled = wasmAvailable;\n        \n        if (this.wasmEnabled) {\n          console.log('[AgentShield] WASM detection enabled');\n        } else {\n          console.log('[AgentShield] WASM not available, using pattern detection');\n        }\n      } catch (error) {\n        console.error('[AgentShield] Failed to initialize WASM:', error);\n        this.wasmEnabled = false;\n      }\n    })();\n\n    await this.initPromise;\n  }\n\n  /**\n   * Pattern-based detection (fallback)\n   */\n  private async patternDetection(input: DetectionInput): Promise<DetectionResult> {\n    const reasons: string[] = [];\n    let detectedAgent: { type: string; name: string } | undefined;\n    let verificationMethod: string | undefined;\n    let confidence = 0;\n\n    const headers = input.headers || {};\n    const normalizedHeaders: Record<string, string> = {};\n\n    // Normalize header names to lowercase\n    for (const [key, value] of Object.entries(headers)) {\n      normalizedHeaders[key.toLowerCase()] = value;\n    }\n\n    // Check for HTTP Message Signatures (highest confidence)\n    const signaturePresent = !!(\n      normalizedHeaders['signature'] || normalizedHeaders['signature-input']\n    );\n    const signatureAgent = normalizedHeaders['signature-agent'];\n\n    if (signatureAgent?.includes('chatgpt.com')) {\n      confidence = 0.85;\n      reasons.push('signature_agent:chatgpt');\n      detectedAgent = { type: 'chatgpt', name: 'ChatGPT' };\n      verificationMethod = 'signature';\n    } else if (signaturePresent) {\n      confidence = Math.max(confidence, 0.4);\n      reasons.push('signature_present');\n    }\n\n    // Check User-Agent patterns\n    const userAgent = input.userAgent || input.headers?.['user-agent'] || '';\n    if (userAgent) {\n      for (const { pattern, type, name } of AI_AGENT_PATTERNS) {\n        if (pattern.test(userAgent)) {\n          const highConfidenceAgents = [\n            'chatgpt',\n            'claude',\n            'perplexity',\n            'anthropic',\n          ];\n          const patternConfidence = highConfidenceAgents.includes(type)\n            ? 0.85\n            : 0.5;\n\n          confidence = Math.max(confidence, patternConfidence);\n          reasons.push(`known_pattern:${type}`);\n          if (!detectedAgent) {\n            detectedAgent = { type, name };\n            verificationMethod = 'pattern';\n          }\n          break;\n        }\n      }\n    }\n\n    // Check AI-specific headers\n    const aiHeaders = [\n      'openai-conversation-id',\n      'openai-ephemeral-user-id',\n      'anthropic-client-id',\n      'x-goog-api-client',\n      'x-ms-copilot-id',\n    ];\n\n    const foundAiHeaders = aiHeaders.filter(\n      header => normalizedHeaders[header]\n    );\n    if (foundAiHeaders.length > 0) {\n      confidence = Math.max(confidence, 0.6);\n      reasons.push(`ai_headers:${foundAiHeaders.length}`);\n    }\n\n    // Check cloud provider IPs\n    const ip = input.ip || input.ipAddress;\n    if (\n      ip &&\n      !normalizedHeaders['x-forwarded-for'] &&\n      !normalizedHeaders['x-real-ip']\n    ) {\n      for (const [provider, prefixes] of Object.entries(CLOUD_PROVIDERS)) {\n        if (prefixes.some(prefix => ip.startsWith(prefix))) {\n          confidence = Math.max(confidence, 0.4);\n          reasons.push(`cloud_provider:${provider}`);\n          break;\n        }\n      }\n    }\n\n    // Boost confidence for combinations\n    if (reasons.length > 2) {\n      confidence = Math.min(confidence * 1.2, 0.95);\n    }\n\n    return {\n      isAgent: confidence > 0.3,\n      confidence,\n      ...(detectedAgent && { detectedAgent }),\n      reasons,\n      ...(verificationMethod && { verificationMethod }),\n      forgeabilityRisk: confidence > 0.8 ? 'medium' : 'high',\n      timestamp: new Date(),\n    };\n  }\n\n  /**\n   * Analyze request with WASM enhancement when available\n   */\n  async analyze(input: DetectionInput): Promise<DetectionResult> {\n    // Ensure initialization\n    await this.init();\n\n    // Try WASM detection first if enabled\n    if (this.wasmEnabled) {\n      try {\n        const wasmResult = await detectAgentWithWasm(\n          input.userAgent || input.headers?.['user-agent'],\n          input.headers || {},\n          input.ip || input.ipAddress\n        );\n\n        if (wasmResult) {\n          // WASM detection succeeded\n          console.log('[AgentShield] Using WASM detection result');\n          \n          // Map WASM result to DetectionResult\n          const detectedAgent = wasmResult.agent \n            ? this.mapAgentName(wasmResult.agent)\n            : undefined;\n\n          return {\n            isAgent: wasmResult.isAgent,\n            confidence: wasmResult.confidence,\n            ...(detectedAgent && { detectedAgent }),\n            reasons: [`wasm:${wasmResult.verificationMethod}`],\n            verificationMethod: wasmResult.verificationMethod,\n            forgeabilityRisk: \n              wasmResult.verificationMethod === 'signature' ? 'low' :\n              wasmResult.confidence > 0.9 ? 'medium' : 'high',\n            timestamp: new Date(),\n          };\n        }\n      } catch (error) {\n        console.error('[AgentShield] WASM detection error:', error);\n      }\n    }\n\n    // Fall back to pattern detection\n    const patternResult = await this.patternDetection(input);\n\n    // If WASM is available but didn't detect anything, boost confidence slightly\n    // to indicate WASM verification was performed\n    if (this.wasmEnabled && patternResult.confidence >= 0.85) {\n      patternResult.confidence = Math.min(0.95, patternResult.confidence + 0.1);\n      patternResult.reasons.push('wasm_enhanced');\n      if (!patternResult.verificationMethod) {\n        patternResult.verificationMethod = 'wasm-enhanced';\n      }\n    }\n\n    return patternResult;\n  }\n\n  /**\n   * Map agent names from WASM to consistent format\n   */\n  private mapAgentName(agent: string): { type: string; name: string } | undefined {\n    const lowerAgent = agent.toLowerCase();\n    \n    if (lowerAgent.includes('chatgpt')) {\n      return { type: 'chatgpt', name: 'ChatGPT' };\n    } else if (lowerAgent.includes('claude')) {\n      return { type: 'claude', name: 'Claude' };\n    } else if (lowerAgent.includes('perplexity')) {\n      return { type: 'perplexity', name: 'Perplexity' };\n    } else if (lowerAgent.includes('bing')) {\n      return { type: 'bing', name: 'Bing AI' };\n    } else if (lowerAgent.includes('anthropic')) {\n      return { type: 'anthropic', name: 'Anthropic' };\n    }\n    \n    return { type: 'unknown', name: agent };\n  }\n}\n\n/**\n * Wrapper that provides event emitter functionality\n */\nexport class EdgeAgentDetectorWrapperWithWasm {\n  private detector: EdgeAgentDetectorWithWasm;\n  private events: Map<string, EventHandler[]> = new Map();\n\n  constructor(config?: { enableWasm?: boolean; baseUrl?: string }) {\n    this.detector = new EdgeAgentDetectorWithWasm(config?.enableWasm ?? true);\n    if (config?.baseUrl) {\n      this.detector.setBaseUrl(config.baseUrl);\n    }\n  }\n\n  setBaseUrl(url: string) {\n    this.detector.setBaseUrl(url);\n  }\n\n  async analyze(input: DetectionInput): Promise<DetectionResult> {\n    const result = await this.detector.analyze(input);\n\n    // Emit events if there are listeners\n    if (result.isAgent && this.events.has('agent.detected')) {\n      const handlers = this.events.get('agent.detected') || [];\n      handlers.forEach(handler => handler(result, input));\n    }\n\n    return result;\n  }\n\n  on(event: string, handler: EventHandler): void {\n    if (!this.events.has(event)) {\n      this.events.set(event, []);\n    }\n    this.events.get(event)!.push(handler);\n  }\n\n  emit(event: string, ...args: any[]): void {\n    const handlers = this.events.get(event) || [];\n    handlers.forEach(handler => handler(...args));\n  }\n\n  async init(): Promise<void> {\n    await this.detector.init();\n  }\n}","/**\n * Edge-compatible session tracking for AI agents\n * Uses cookie-based storage to work in Edge Runtime\n */\n\nimport type { NextRequest, NextResponse } from 'next/server';\nimport type { DetectionResult } from '@kya-os/agentshield';\n\nexport interface SessionData {\n  id: string;\n  agent: string;\n  confidence: number;\n  detectedAt: number;\n  expires: number;\n}\n\nexport interface SessionTrackingConfig {\n  enabled: boolean;\n  cookieName?: string;\n  cookieMaxAge?: number; // in seconds\n  encryptionKey?: string;\n}\n\nexport class EdgeSessionTracker {\n  private readonly config: Required<SessionTrackingConfig>;\n\n  constructor(config: SessionTrackingConfig) {\n    this.config = {\n      enabled: config.enabled,\n      cookieName: config.cookieName || '__agentshield_session',\n      cookieMaxAge: config.cookieMaxAge || 3600, // 1 hour default\n      encryptionKey:\n        config.encryptionKey ||\n        process.env.AGENTSHIELD_SECRET ||\n        'agentshield-default-key',\n    };\n  }\n\n  /**\n   * Track a new AI agent session\n   */\n  async track(\n    _request: NextRequest,\n    response: NextResponse,\n    result: DetectionResult\n  ): Promise<NextResponse> {\n    try {\n      if (!this.config.enabled || !result.isAgent) {\n        return response;\n      }\n\n      const sessionData: SessionData = {\n        id: crypto.randomUUID(),\n        agent: result.detectedAgent?.name || 'unknown',\n        confidence: result.confidence,\n        detectedAt: Date.now(),\n        expires: Date.now() + this.config.cookieMaxAge * 1000,\n      };\n\n      // Encrypt session data for security\n      const encrypted = await this.encrypt(JSON.stringify(sessionData));\n\n      // Set secure httpOnly cookie\n      response.cookies.set(this.config.cookieName, encrypted, {\n        httpOnly: true,\n        secure: process.env.NODE_ENV === 'production',\n        sameSite: 'lax',\n        maxAge: this.config.cookieMaxAge,\n        path: '/',\n      });\n\n      return response;\n    } catch (error) {\n      // Fail gracefully - log error but don't break request\n      if (process.env.DEBUG_AGENTSHIELD) {\n        console.warn('AgentShield: Failed to track session:', error);\n      }\n      return response;\n    }\n  }\n\n  /**\n   * Check for existing AI agent session\n   */\n  async check(request: NextRequest): Promise<SessionData | null> {\n    try {\n      if (!this.config.enabled) {\n        return null;\n      }\n\n      const cookie = request.cookies.get(this.config.cookieName);\n      if (!cookie?.value) {\n        return null;\n      }\n\n      // Decrypt and parse session data\n      const decrypted = await this.decrypt(cookie.value);\n      const session: SessionData = JSON.parse(decrypted);\n\n      // Check if session is expired\n      if (session.expires < Date.now()) {\n        return null;\n      }\n\n      return session;\n    } catch (error) {\n      // Fail gracefully - invalid or corrupted session\n      if (process.env.DEBUG_AGENTSHIELD) {\n        console.warn('AgentShield: Failed to check session:', error);\n      }\n      return null;\n    }\n  }\n\n  /**\n   * Clear an existing session\n   */\n  clear(response: NextResponse): NextResponse {\n    try {\n      response.cookies.delete(this.config.cookieName);\n    } catch (error) {\n      // Fail gracefully\n      if (process.env.DEBUG_AGENTSHIELD) {\n        console.warn('AgentShield: Failed to clear session:', error);\n      }\n    }\n    return response;\n  }\n\n  /**\n   * Simple encryption using Web Crypto API (Edge-compatible)\n   */\n  private async encrypt(data: string): Promise<string> {\n    try {\n      // For Edge Runtime, use simple base64 encoding with obfuscation\n      // In production, consider using Web Crypto API subtle.encrypt()\n      const key = this.config.encryptionKey;\n      const encoded = new TextEncoder().encode(data);\n\n      // Simple XOR obfuscation\n      const obfuscated = new Uint8Array(encoded.length);\n      for (let i = 0; i < encoded.length; i++) {\n        obfuscated[i] = (encoded[i] || 0) ^ key.charCodeAt(i % key.length);\n      }\n\n      // Convert to base64\n      return btoa(\n        Array.from(obfuscated, byte => String.fromCharCode(byte)).join('')\n      );\n    } catch (error) {\n      // Fallback to simple base64 if encryption fails\n      return btoa(data);\n    }\n  }\n\n  /**\n   * Simple decryption (Edge-compatible)\n   */\n  private async decrypt(data: string): Promise<string> {\n    try {\n      const key = this.config.encryptionKey;\n      const decoded = Uint8Array.from(atob(data), c => c.charCodeAt(0));\n\n      // Reverse XOR obfuscation\n      const deobfuscated = new Uint8Array(decoded.length);\n      for (let i = 0; i < decoded.length; i++) {\n        deobfuscated[i] = (decoded[i] || 0) ^ key.charCodeAt(i % key.length);\n      }\n\n      return new TextDecoder().decode(deobfuscated);\n    } catch (error) {\n      // Fallback to simple base64 if decryption fails\n      return atob(data);\n    }\n  }\n}\n\n/**\n * Stateless session checker for non-Next.js environments (Express, etc.)\n * Uses a combination of headers to identify continued sessions\n */\nexport class StatelessSessionChecker {\n  static check(headers: Record<string, string>): SessionData | null {\n    try {\n      // Check for session headers (set by previous response)\n      const agent = headers['x-agentshield-session-agent'];\n      const confidence = headers['x-agentshield-session-confidence'];\n      const sessionId = headers['x-agentshield-session-id'];\n\n      if (agent && confidence && sessionId) {\n        return {\n          id: sessionId,\n          agent,\n          confidence: parseFloat(confidence),\n          detectedAt: Date.now(),\n          expires: Date.now() + 3600000, // 1 hour\n        };\n      }\n\n      // Check for cookie-based session (if cookies are parsed)\n      const cookieHeader = headers['cookie'];\n      if (cookieHeader && cookieHeader.includes('__agentshield_session=')) {\n        // Simple cookie parsing\n        const match = cookieHeader.match(/__agentshield_session=([^;]+)/);\n        if (match && match[1]) {\n          try {\n            const decoded = atob(match[1]);\n            return JSON.parse(decoded);\n          } catch {\n            // Invalid session data\n          }\n        }\n      }\n\n      return null;\n    } catch {\n      return null;\n    }\n  }\n\n  static setHeaders(response: any, session: SessionData): void {\n    try {\n      // Set session headers for stateless tracking\n      if (response.setHeader) {\n        response.setHeader('X-AgentShield-Session-Agent', session.agent);\n        response.setHeader(\n          'X-AgentShield-Session-Confidence',\n          session.confidence.toString()\n        );\n        response.setHeader('X-AgentShield-Session-Id', session.id);\n      } else if (response.headers && response.headers.set) {\n        response.headers.set('x-agentshield-session-agent', session.agent);\n        response.headers.set(\n          'x-agentshield-session-confidence',\n          session.confidence.toString()\n        );\n        response.headers.set('x-agentshield-session-id', session.id);\n      }\n    } catch {\n      // Fail gracefully\n    }\n  }\n}\n","/**\n * Next.js middleware for AgentShield\n *\n * Uses edge-safe imports to avoid WASM in Edge Runtime\n */\n\nimport { NextRequest, NextResponse } from 'next/server';\n// Use wrapper for EdgeAgentDetector to match expected interface\nimport { EdgeAgentDetectorWrapper as AgentDetector } from './edge-detector-wrapper';\n// Import WASM-enhanced detector as an alternative\nimport { EdgeAgentDetectorWrapperWithWasm as WasmAgentDetector } from './edge-detector-with-wasm';\nimport { EdgeSessionTracker } from './session-tracker';\nimport type { NextJSMiddlewareConfig } from './types';\n\n/**\n * Create AgentShield middleware for Next.js\n */\nexport function createAgentShieldMiddleware(\n  config: Partial<NextJSMiddlewareConfig> = {}\n) {\n  // Use WASM-enhanced detector if enableWasm is true, otherwise use pattern-only detector\n  const detector = config.enableWasm \n    ? new WasmAgentDetector({ enableWasm: true })\n    : new AgentDetector(config);\n\n  // Initialize session tracker if enabled (or if WASM is enabled)\n  const sessionTracker =\n    config.sessionTracking?.enabled || config.enableWasm\n      ? new EdgeSessionTracker({\n          enabled: true,\n          ...config.sessionTracking,\n        })\n      : null;\n\n  // Wire up event handlers if provided\n  if (config.events) {\n    Object.entries(config.events).forEach(([event, handler]) => {\n      detector.on(event as any, handler as any);\n    });\n  }\n\n  const {\n    onAgentDetected = 'log',\n    onDetection,\n    skipPaths = [],\n    blockedResponse = {\n      status: 403,\n      message: 'Access denied: Automated agent detected',\n      headers: { 'Content-Type': 'application/json' },\n    },\n    redirectUrl = '/blocked',\n    rewriteUrl = '/blocked',\n  } = config;\n\n  return async (request: NextRequest): Promise<NextResponse> => {\n    try {\n      // Check if path should be skipped\n      const shouldSkip = skipPaths.some(pattern => {\n        if (typeof pattern === 'string') {\n          return request.nextUrl.pathname.startsWith(pattern);\n        }\n        return pattern.test(request.nextUrl.pathname);\n      });\n\n      if (shouldSkip) {\n        // Mark as skipped in request\n        (request as any).agentShield = { skipped: true };\n        return NextResponse.next();\n      }\n\n      // Check for existing session first\n      const existingSession = sessionTracker\n        ? await sessionTracker.check(request)\n        : null;\n\n      if (existingSession) {\n        // This is a continued AI agent session\n        const response = NextResponse.next();\n\n        // Set headers to indicate continued session\n        response.headers.set('x-agentshield-detected', 'true');\n        response.headers.set('x-agentshield-agent', existingSession.agent);\n        response.headers.set(\n          'x-agentshield-confidence',\n          existingSession.confidence.toString()\n        );\n        response.headers.set('x-agentshield-session', 'continued');\n        response.headers.set('x-agentshield-session-id', existingSession.id);\n\n        // Mark request with session info\n        (request as any).agentShield = {\n          result: {\n            isAgent: true,\n            confidence: existingSession.confidence,\n            detectedAgent: { name: existingSession.agent },\n            timestamp: new Date(),\n            verificationMethod: 'session',\n          },\n          session: existingSession,\n          skipped: false,\n        };\n\n        // Emit session continued event\n        const context = {\n          userAgent: request.headers.get('user-agent') || '',\n          ipAddress:\n            (request.ip ?? request.headers.get('x-forwarded-for')) || '',\n          headers: Object.fromEntries(request.headers.entries()),\n          url: request.url,\n          method: request.method,\n          timestamp: new Date(),\n        };\n\n        detector.emit('agent.session.continued', existingSession, context);\n\n        return response;\n      }\n\n      // Prepare request context for new detection\n      const userAgent = request.headers.get('user-agent');\n      const ipAddress = request.ip ?? request.headers.get('x-forwarded-for');\n\n      // Extract path from URL for signature verification\n      const url = new URL(request.url);\n      const pathWithQuery = url.pathname + url.search;\n\n      const context = {\n        ...(userAgent && { userAgent }),\n        ...(ipAddress && { ipAddress }),\n        headers: Object.fromEntries(request.headers.entries()),\n        url: pathWithQuery, // Use path instead of full URL for signature verification\n        method: request.method,\n        timestamp: new Date(),\n      };\n\n      // Analyze request\n      const result = await detector.analyze(context);\n\n      // Handle detection result\n      if (\n        result.isAgent &&\n        result.confidence >= (config.confidenceThreshold ?? 0.7)\n      ) {\n        // Call custom detection handler if provided\n        if (onDetection) {\n          const customResponse = await onDetection(request, result);\n          if (customResponse) {\n            return customResponse;\n          }\n        }\n\n        // Handle based on configuration\n        switch (onAgentDetected) {\n          case 'block': {\n            const response = NextResponse.json(\n              {\n                error: blockedResponse.message,\n                detected: true,\n                confidence: result.confidence,\n                timestamp: result.timestamp,\n              },\n              { status: blockedResponse.status }\n            );\n\n            if (blockedResponse.headers) {\n              Object.entries(blockedResponse.headers).forEach(\n                ([key, value]) => {\n                  response.headers.set(key, value);\n                }\n              );\n            }\n\n            // Emit blocked event\n            detector.emit('agent.blocked', result, context);\n\n            return response;\n          }\n\n          case 'redirect':\n            return NextResponse.redirect(new URL(redirectUrl, request.url));\n\n          case 'rewrite':\n            return NextResponse.rewrite(new URL(rewriteUrl, request.url));\n\n          case 'log':\n            console.warn('AgentShield: Agent detected', {\n              ipAddress: context.ipAddress,\n              userAgent: context.userAgent,\n              confidence: result.confidence,\n              reasons: result.reasons,\n              pathname: request.nextUrl.pathname,\n            });\n            break;\n\n          case 'allow':\n          default:\n            // Emit allowed event for high-confidence agents\n            if (\n              result.isAgent &&\n              result.confidence >= (config.confidenceThreshold ?? 0.7)\n            ) {\n              detector.emit('agent.allowed', result, context);\n            }\n            // Continue processing\n            break;\n        }\n      }\n\n      // Add detection result to request for API routes\n      (request as any).agentShield = {\n        result,\n        skipped: false,\n      };\n\n      // Add detection result to response headers for debugging\n      let response = NextResponse.next();\n      response.headers.set('x-agentshield-detected', result.isAgent.toString());\n      response.headers.set(\n        'x-agentshield-confidence',\n        result.confidence.toString()\n      );\n\n      // Add agent name if detected\n      if (result.detectedAgent?.name) {\n        response.headers.set('x-agentshield-agent', result.detectedAgent.name);\n      }\n\n      // Track new AI agent sessions\n      if (\n        sessionTracker &&\n        result.isAgent &&\n        result.confidence >= (config.confidenceThreshold ?? 0.7)\n      ) {\n        response = await sessionTracker.track(request, response, result);\n        response.headers.set('x-agentshield-session', 'new');\n\n        // Emit new session event\n        detector.emit('agent.session.started', result, context);\n      }\n\n      return response;\n    } catch (error) {\n      console.error('AgentShield middleware error:', error);\n      return NextResponse.next(); // Continue on error\n    }\n  };\n}\n\n/**\n * Convenience function for basic setup\n */\nexport function agentShield(config: Partial<NextJSMiddlewareConfig> = {}) {\n  return createAgentShieldMiddleware(config);\n}\n"]}
+{"version":3,"sources":["../src/signature-verifier.ts","../src/edge-detector-wrapper.ts","../src/wasm-loader.ts","../src/edge-detector-with-wasm.ts","../src/session-tracker.ts","../src/middleware.ts"],"names":["ed25519","sha512","baseUrl","now","loadRulesSync","response","rules","mapVerificationMethod","NextResponse","context"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAaQA,kBAAA,CAAA,GAAA,CAAI,UAAA,GAAa,IAAI,CAAA,KAAMC,cAAA,CAAeD,uBAAI,WAAA,CAAY,GAAG,CAAC,CAAC,CAAA;AAcvE,IAAM,UAAA,GAAa;AAAA,EACjB,OAAA,EAAS;AAAA,IACP;AAAA,MACE,GAAA,EAAK,6CAAA;AAAA;AAAA;AAAA,MAGL,SAAA,EAAW,6CAAA;AAAA,MACX,SAAA,EAAW,UAAA;AAAA;AAAA;AAAA;AAAA,MAGX,UAAA,EAAY;AAAA;AAAA;AACd;AAEJ,CAAA;AAeA,IAAM,QAAA,uBAAe,GAAA,EAAwB;AAC7C,IAAM,YAAA,GAAe,IAAI,EAAA,GAAK,GAAA;AAC9B,IAAM,cAAA,GAAiB,GAAA;AAMvB,SAAS,aAAA,GAAwB;AAC/B,EAAA,IAAI,OAAO,WAAW,WAAA,EAAa;AAEjC,IAAA,OAAO,eAAA;AAAA,EACT;AAIA,EAAA,MAAME,WACJ,OAAA,CAAQ,GAAA,CAAI,mBAAA,IACZ,OAAA,CAAQ,IAAI,mBAAA,IACZ,OAAA,CAAQ,GAAA,CAAI,OAAA,KACX,QAAQ,GAAA,CAAI,UAAA,GAAa,WAAW,OAAA,CAAQ,GAAA,CAAI,UAAU,CAAA,CAAA,GAAK,IAAA,CAAA;AAElE,EAAA,IAAIA,QAAAA,EAAS;AACX,IAAA,OAAOA,QAAAA,CAAQ,OAAA,CAAQ,KAAA,EAAO,EAAE,CAAA,GAAI,eAAA;AAAA,EACtC;AAKA,EAAA,IAAI,OAAA,CAAQ,GAAA,CAAI,QAAA,KAAa,YAAA,EAAc;AACzC,IAAA,OAAA,CAAQ,IAAA;AAAA,MACN;AAAA,KACF;AACA,IAAA,OAAO,oCAAA;AAAA,EACT;AAGA,EAAA,OAAA,CAAQ,KAAA;AAAA,IACN;AAAA,GACF;AACA,EAAA,OAAO,eAAA;AACT;AAOA,SAAS,mBAAA,GAA4B;AACnC,EAAA,MAAM,GAAA,GAAM,KAAK,GAAA,EAAI;AACrB,EAAA,MAAM,kBAA4B,EAAC;AAGnC,EAAA,KAAA,MAAW,CAAC,KAAA,EAAO,MAAM,CAAA,IAAK,QAAA,CAAS,SAAQ,EAAG;AAChD,IAAA,IAAI,GAAA,GAAM,MAAA,CAAO,QAAA,GAAW,YAAA,EAAc;AACxC,MAAA,eAAA,CAAgB,KAAK,KAAK,CAAA;AAAA,IAC5B;AAAA,EACF;AAEA,EAAA,KAAA,MAAW,SAAS,eAAA,EAAiB;AACnC,IAAA,QAAA,CAAS,OAAO,KAAK,CAAA;AAAA,EACvB;AAGA,EAAA,IAAI,QAAA,CAAS,OAAO,cAAA,EAAgB;AAElC,IAAA,MAAM,OAAA,GAAU,KAAA,CAAM,IAAA,CAAK,QAAA,CAAS,OAAA,EAAS,CAAA,CAAE,GAAA,CAAI,CAAC,CAAC,KAAA,EAAO,MAAM,CAAA,MAAO;AAAA,MACvE,KAAA;AAAA,MACA,UAAU,MAAA,CAAO;AAAA,KACnB,CAAE,CAAA;AAGF,IAAA,OAAA,CAAQ,KAAK,CAAC,CAAA,EAAG,MAAM,CAAA,CAAE,QAAA,GAAW,EAAE,QAAQ,CAAA;AAG9C,IAAA,MAAM,WAAW,OAAA,CAAQ,KAAA,CAAM,CAAA,EAAG,QAAA,CAAS,OAAO,cAAc,CAAA;AAChE,IAAA,KAAA,MAAW,SAAS,QAAA,EAAU;AAC5B,MAAA,QAAA,CAAS,MAAA,CAAO,MAAM,KAAK,CAAA;AAAA,IAC7B;AAAA,EACF;AACF;AAKA,eAAe,iBAAiB,KAAA,EAKrB;AAET,EAAA,IAAI,QAAA,CAAS,OAAO,cAAA,EAAgB;AAClC,IAAA,mBAAA,EAAoB;AAAA,EACtB;AAGA,EAAA,MAAM,MAAA,GAAS,QAAA,CAAS,GAAA,CAAI,KAAK,CAAA;AACjC,EAAA,IAAI,UAAU,IAAA,CAAK,GAAA,EAAI,GAAI,MAAA,CAAO,WAAW,YAAA,EAAc;AACzD,IAAA,OAAO,MAAA,CAAO,IAAA;AAAA,EAChB;AAGA,EAAA,IAAI,OAAO,UAAU,WAAA,EAAa;AAChC,IAAA,OAAA,CAAQ,KAAK,uDAAuD,CAAA;AACpE,IAAA,OAAO,IAAA;AAAA,EACT;AAEA,EAAA,IAAI;AACF,IAAA,MAAM,aAAa,aAAA,EAAc;AACjC,IAAA,MAAM,MAAM,CAAA,EAAG,UAAU,CAAA,sBAAA,EAAyB,kBAAA,CAAmB,KAAK,CAAC,CAAA,CAAA;AAE3E,IAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,GAAA,EAAK;AAAA,MAChC,MAAA,EAAQ,KAAA;AAAA,MACR,OAAA,EAAS;AAAA,QACP,cAAA,EAAgB;AAAA,OAClB;AAAA;AAAA,MAEA,MAAA,EAAQ,WAAA,CAAY,OAAA,CAAQ,GAAI;AAAA,KACjC,CAAA;AAED,IAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,MAAA,OAAA,CAAQ,IAAA,CAAK,CAAA,2CAAA,EAA8C,QAAA,CAAS,MAAM,CAAA,CAAE,CAAA;AAC5E,MAAA,OAAO,IAAA;AAAA,IACT;AAEA,IAAA,MAAM,IAAA,GAAO,MAAM,QAAA,CAAS,IAAA,EAAK;AAEjC,IAAA,IAAI,CAAC,IAAA,CAAK,IAAA,IAAQ,CAAC,KAAA,CAAM,OAAA,CAAQ,IAAA,CAAK,IAAI,CAAA,IAAK,IAAA,CAAK,IAAA,CAAK,MAAA,KAAW,CAAA,EAAG;AACrE,MAAA,OAAA,CAAQ,IAAA,CAAK,CAAA,iDAAA,EAAoD,KAAK,CAAA,CAAE,CAAA;AACxE,MAAA,OAAO,IAAA;AAAA,IACT;AAGA,IAAA,QAAA,CAAS,IAAI,KAAA,EAAO;AAAA,MAClB,MAAM,IAAA,CAAK,IAAA;AAAA,MACX,QAAA,EAAU,KAAK,GAAA;AAAI,KACpB,CAAA;AAED,IAAA,OAAO,IAAA,CAAK,IAAA;AAAA,EACd,SAAS,KAAA,EAAO;AACd,IAAA,OAAA,CAAQ,KAAK,0DAAA,EAA4D;AAAA,MACvE,KAAA,EAAO,KAAA,YAAiB,KAAA,GAAQ,KAAA,CAAM,OAAA,GAAU,eAAA;AAAA,MAChD;AAAA,KACD,CAAA;AACD,IAAA,OAAO,IAAA;AAAA,EACT;AACF;AAKA,SAAS,aAAa,KAAA,EAAiD;AACrE,EAAA,OAAO,KAAA,IAAS,UAAA;AAClB;AAKA,eAAe,gBAAgB,KAAA,EAO7B;AAEA,EAAA,MAAM,OAAA,GAAU,MAAM,gBAAA,CAAiB,KAAK,CAAA;AAC5C,EAAA,IAAI,OAAA,IAAW,OAAA,CAAQ,MAAA,GAAS,CAAA,EAAG;AACjC,IAAA,OAAO,OAAA;AAAA,EACT;AAGA,EAAA,IAAI,YAAA,CAAa,KAAK,CAAA,EAAG;AACvB,IAAA,OAAO,WAAW,KAAK,CAAA;AAAA,EACzB;AAEA,EAAA,OAAO,EAAC;AACV;AAKA,SAAS,oBAAoB,cAAA,EAKpB;AACP,EAAA,IAAI;AAEF,IAAA,MAAM,KAAA,GAAQ,cAAA,CAAe,KAAA,CAAM,qBAAqB,CAAA;AACxD,IAAA,IAAI,CAAC,OAAO,OAAO,IAAA;AAEnB,IAAA,MAAM,GAAG,WAAA,EAAa,MAAM,CAAA,GAAI,KAAA;AAGhC,IAAA,MAAM,aAAA,GAAgB,WAAA,GAClB,WAAA,CACG,KAAA,CAAM,GAAG,EACT,GAAA,CAAI,CAAC,CAAA,KAAM,CAAA,CAAE,OAAA,CAAQ,IAAA,EAAM,EAAE,CAAA,CAAE,IAAA,EAAM,CAAA,CACrC,MAAA,CAAO,CAAC,MAAM,CAAA,CAAE,MAAA,GAAS,CAAC,CAAA,GAC7B,EAAC;AAGL,IAAA,MAAM,UAAA,GAAa,MAAA,GAAS,MAAA,CAAO,KAAA,CAAM,iBAAiB,CAAA,GAAI,IAAA;AAC9D,IAAA,MAAM,YAAA,GAAe,MAAA,GAAS,MAAA,CAAO,KAAA,CAAM,eAAe,CAAA,GAAI,IAAA;AAC9D,IAAA,MAAM,YAAA,GAAe,MAAA,GAAS,MAAA,CAAO,KAAA,CAAM,eAAe,CAAA,GAAI,IAAA;AAE9D,IAAA,IAAI,CAAC,UAAA,IAAc,CAAC,UAAA,CAAW,CAAC,GAAG,OAAO,IAAA;AAE1C,IAAA,OAAO;AAAA,MACL,KAAA,EAAO,WAAW,CAAC,CAAA;AAAA,MACnB,OAAA,EAAS,gBAAgB,YAAA,CAAa,CAAC,IAAI,QAAA,CAAS,YAAA,CAAa,CAAC,CAAC,CAAA,GAAI,KAAA,CAAA;AAAA,MACvE,OAAA,EAAS,gBAAgB,YAAA,CAAa,CAAC,IAAI,QAAA,CAAS,YAAA,CAAa,CAAC,CAAC,CAAA,GAAI,KAAA,CAAA;AAAA,MACvE;AAAA,KACF;AAAA,EACF,SAAS,KAAA,EAAO;AACd,IAAA,OAAA,CAAQ,KAAA,CAAM,gDAAgD,KAAK,CAAA;AACnE,IAAA,OAAO,IAAA;AAAA,EACT;AACF;AAMA,SAAS,kBAAA,CACP,MAAA,EACA,IAAA,EACA,OAAA,EACA,aAAA,EACQ;AACR,EAAA,MAAM,aAAuB,EAAC;AAE9B,EAAA,KAAA,MAAW,cAAc,aAAA,EAAe;AACtC,IAAA,IAAI,KAAA;AAEJ,IAAA,QAAQ,UAAA;AAAY,MAClB,KAAK,SAAA;AACH,QAAA,KAAA,GAAQ,OAAO,WAAA,EAAY;AAC3B,QAAA;AAAA,MACF,KAAK,OAAA;AACH,QAAA,KAAA,GAAQ,IAAA;AACR,QAAA;AAAA,MACF,KAAK,YAAA;AAEH,QAAA,KAAA,GAAQ,OAAA,CAAQ,MAAM,CAAA,IAAK,OAAA,CAAQ,MAAM,CAAA,IAAK,EAAA;AAC9C,QAAA;AAAA,MACF,SAAS;AAEP,QAAA,MAAM,GAAA,GAAM,MAAA,CAAO,IAAA,CAAK,OAAO,CAAA,CAAE,IAAA,CAAK,CAAC,CAAA,KAAM,CAAA,CAAE,WAAA,EAAY,KAAM,UAAA,CAAW,aAAa,CAAA;AACzF,QAAA,KAAA,GAAQ,GAAA,GAAM,OAAA,CAAQ,GAAG,CAAA,IAAK,EAAA,GAAK,EAAA;AACnC,QAAA;AAAA,MACF;AAAA;AAIF,IAAA,UAAA,CAAW,IAAA,CAAK,CAAA,CAAA,EAAI,UAAU,CAAA,GAAA,EAAM,KAAK,CAAA,CAAE,CAAA;AAAA,EAC7C;AAEA,EAAA,OAAO,UAAA,CAAW,KAAK,IAAI,CAAA;AAC7B;AAMA,SAAS,cAAc,MAAA,EAA4B;AAEjD,EAAA,IAAI,cAAA,GAAiB,OAAO,OAAA,CAAQ,IAAA,EAAM,GAAG,CAAA,CAAE,OAAA,CAAQ,MAAM,GAAG,CAAA;AAGhE,EAAA,MAAM,OAAA,GAAU,eAAe,MAAA,GAAS,CAAA;AACxC,EAAA,IAAI,OAAA,EAAS;AACX,IAAA,cAAA,IAAkB,GAAA,CAAI,MAAA,CAAO,CAAA,GAAI,OAAO,CAAA;AAAA,EAC1C;AAEA,EAAA,MAAM,YAAA,GAAe,KAAK,cAAc,CAAA;AACxC,EAAA,OAAO,UAAA,CAAW,KAAK,YAAA,EAAc,CAAC,MAAM,CAAA,CAAE,UAAA,CAAW,CAAC,CAAC,CAAA;AAC7D;AAMA,eAAe,sBAAA,CACb,eAAA,EACA,eAAA,EACA,OAAA,EACkB;AAClB,EAAA,IAAI;AAEF,IAAA,MAAM,cAAA,GAAiB,cAAc,eAAe,CAAA;AACpD,IAAA,MAAM,cAAA,GAAiB,cAAc,eAAe,CAAA;AACpD,IAAA,MAAM,YAAA,GAAe,IAAI,WAAA,EAAY,CAAE,OAAO,OAAO,CAAA;AAGrD,IAAA,IAAI,cAAA,CAAe,WAAW,EAAA,EAAI;AAChC,MAAA,OAAA,CAAQ,KAAA,CAAM,wCAAA,EAA0C,cAAA,CAAe,MAAM,CAAA;AAC7E,MAAA,OAAO,KAAA;AAAA,IACT;AACA,IAAA,IAAI,cAAA,CAAe,WAAW,EAAA,EAAI;AAChC,MAAA,OAAA,CAAQ,KAAA,CAAM,uCAAA,EAAyC,cAAA,CAAe,MAAM,CAAA;AAC5E,MAAA,OAAO,KAAA;AAAA,IACT;AAGA,IAAA,OAAeF,kBAAA,CAAA,MAAA,CAAO,cAAA,EAAgB,YAAA,EAAc,cAAc,CAAA;AAAA,EACpE,SAAS,UAAA,EAAY;AACnB,IAAA,OAAA,CAAQ,IAAA,CAAK,kEAAkE,UAAU,CAAA;AAGzF,IAAA,IAAI;AACF,MAAA,MAAM,cAAA,GAAiB,cAAc,eAAe,CAAA;AACpD,MAAA,MAAM,cAAA,GAAiB,cAAc,eAAe,CAAA;AACpD,MAAA,MAAM,YAAA,GAAe,IAAI,WAAA,EAAY,CAAE,OAAO,OAAO,CAAA;AAErD,MAAA,MAAM,SAAA,GAAY,MAAM,MAAA,CAAO,MAAA,CAAO,SAAA;AAAA,QACpC,KAAA;AAAA,QACA,cAAA,CAAe,MAAA;AAAA,QACf;AAAA,UACE,IAAA,EAAM,SAAA;AAAA,UACN,UAAA,EAAY;AAAA,SACd;AAAA,QACA,KAAA;AAAA,QACA,CAAC,QAAQ;AAAA,OACX;AAEA,MAAA,OAAO,MAAM,OAAO,MAAA,CAAO,MAAA;AAAA,QACzB,SAAA;AAAA,QACA,SAAA;AAAA,QACA,cAAA,CAAe,MAAA;AAAA,QACf;AAAA,OACF;AAAA,IACF,SAAS,WAAA,EAAa;AACpB,MAAA,OAAA,CAAQ,MAAM,wDAAA,EAA0D;AAAA,QACtE,UAAA,EAAY,UAAA,YAAsB,KAAA,GAAQ,UAAA,CAAW,OAAA,GAAU,SAAA;AAAA,QAC/D,WAAA,EAAa,WAAA,YAAuB,KAAA,GAAQ,WAAA,CAAY,OAAA,GAAU;AAAA,OACnE,CAAA;AACD,MAAA,OAAO,KAAA;AAAA,IACT;AAAA,EACF;AACF;AAiBA,eAAsB,oBAAA,CACpB,MAAA,EACA,IAAA,EACA,OAAA,EACsC;AAEtC,EAAA,MAAM,SAAA,GAAY,OAAA,CAAQ,WAAW,CAAA,IAAK,QAAQ,WAAW,CAAA;AAC7D,EAAA,MAAM,cAAA,GAAiB,OAAA,CAAQ,iBAAiB,CAAA,IAAK,QAAQ,iBAAiB,CAAA;AAC9E,EAAA,MAAM,cAAA,GAAiB,OAAA,CAAQ,iBAAiB,CAAA,IAAK,QAAQ,iBAAiB,CAAA;AAG9E,EAAA,IAAI,CAAC,SAAA,IAAa,CAAC,cAAA,EAAgB;AACjC,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,KAAA;AAAA,MACT,UAAA,EAAY,CAAA;AAAA,MACZ,MAAA,EAAQ,8BAAA;AAAA,MACR,kBAAA,EAAoB;AAAA,KACtB;AAAA,EACF;AAGA,EAAA,MAAM,MAAA,GAAS,oBAAoB,cAAc,CAAA;AACjD,EAAA,IAAI,CAAC,MAAA,EAAQ;AACX,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,KAAA;AAAA,MACT,UAAA,EAAY,CAAA;AAAA,MACZ,MAAA,EAAQ,gCAAA;AAAA,MACR,kBAAA,EAAoB;AAAA,KACtB;AAAA,EACF;AAGA,EAAA,IAAI,OAAO,OAAA,EAAS;AAClB,IAAA,MAAMG,OAAM,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,GAAA,KAAQ,GAAI,CAAA;AACxC,IAAA,MAAM,GAAA,GAAMA,OAAM,MAAA,CAAO,OAAA;AAGzB,IAAA,IAAI,MAAM,GAAA,EAAK;AACb,MAAA,OAAO;AAAA,QACL,OAAA,EAAS,KAAA;AAAA,QACT,UAAA,EAAY,CAAA;AAAA,QACZ,MAAA,EAAQ,0CAAA;AAAA,QACR,kBAAA,EAAoB;AAAA,OACtB;AAAA,IACF;AAGA,IAAA,IAAI,MAAM,GAAA,EAAK;AACb,MAAA,OAAO;AAAA,QACL,OAAA,EAAS,KAAA;AAAA,QACT,UAAA,EAAY,CAAA;AAAA,QACZ,MAAA,EAAQ,sCAAA;AAAA,QACR,kBAAA,EAAoB;AAAA,OACtB;AAAA,IACF;AAAA,EACF;AAGA,EAAA,IAAI,KAAA;AACJ,EAAA,IAAI,QAAA;AAEJ,EAAA,IAAI,cAAA,KAAmB,uBAAA,IAA2B,cAAA,EAAgB,QAAA,CAAS,aAAa,CAAA,EAAG;AACzF,IAAA,KAAA,GAAQ,SAAA;AACR,IAAA,QAAA,GAAW,SAAA;AAAA,EACb;AAGA,EAAA,IAAI,CAAC,KAAA,IAAS,CAAC,QAAA,EAAU;AACvB,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,KAAA;AAAA,MACT,UAAA,EAAY,CAAA;AAAA,MACZ,MAAA,EAAQ,yBAAA;AAAA,MACR,kBAAA,EAAoB;AAAA,KACtB;AAAA,EACF;AAGA,EAAA,MAAM,SAAA,GAAY,MAAM,eAAA,CAAgB,QAAQ,CAAA;AAEhD,EAAA,IAAI,SAAA,CAAU,WAAW,CAAA,EAAG;AAC1B,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,KAAA;AAAA,MACT,UAAA,EAAY,CAAA;AAAA,MACZ,MAAA,EAAQ,6BAAA;AAAA,MACR,kBAAA,EAAoB;AAAA,KACtB;AAAA,EACF;AAGA,EAAA,MAAM,GAAA,GAAM,UAAU,IAAA,CAAK,CAAC,MAAM,CAAA,CAAE,GAAA,KAAQ,OAAO,KAAK,CAAA;AACxD,EAAA,IAAI,CAAC,GAAA,EAAK;AACR,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,KAAA;AAAA,MACT,UAAA,EAAY,CAAA;AAAA,MACZ,MAAA,EAAQ,CAAA,gBAAA,EAAmB,MAAA,CAAO,KAAK,CAAA,CAAA;AAAA,MACvC,kBAAA,EAAoB;AAAA,KACtB;AAAA,EACF;AAGA,EAAA,MAAM,MAAM,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,GAAA,KAAQ,GAAI,CAAA;AACxC,EAAA,IAAI,GAAA,GAAM,GAAA,CAAI,SAAA,IAAa,GAAA,GAAM,IAAI,UAAA,EAAY;AAC/C,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,KAAA;AAAA,MACT,UAAA,EAAY,CAAA;AAAA,MACZ,MAAA,EAAQ,kCAAA;AAAA,MACR,kBAAA,EAAoB;AAAA,KACtB;AAAA,EACF;AAGA,EAAA,MAAM,gBAAgB,kBAAA,CAAmB,MAAA,EAAQ,IAAA,EAAM,OAAA,EAAS,OAAO,aAAa,CAAA;AAGpF,EAAA,IAAI,cAAA,GAAiB,SAAA;AACrB,EAAA,IAAI,cAAA,CAAe,UAAA,CAAW,QAAQ,CAAA,EAAG;AACvC,IAAA,cAAA,GAAiB,cAAA,CAAe,UAAU,CAAC,CAAA;AAAA,EAC7C;AACA,EAAA,IAAI,cAAA,CAAe,QAAA,CAAS,GAAG,CAAA,EAAG;AAChC,IAAA,cAAA,GAAiB,cAAA,CAAe,KAAA,CAAM,CAAA,EAAG,EAAE,CAAA;AAAA,EAC7C;AAGA,EAAA,MAAM,UAAU,MAAM,sBAAA,CAAuB,GAAA,CAAI,SAAA,EAAW,gBAAgB,aAAa,CAAA;AAEzF,EAAA,IAAI,OAAA,EAAS;AACX,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,IAAA;AAAA,MACT,KAAA;AAAA,MACA,OAAO,MAAA,CAAO,KAAA;AAAA,MACd,UAAA,EAAY,CAAA;AAAA;AAAA,MACZ,kBAAA,EAAoB;AAAA,KACtB;AAAA,EACF,CAAA,MAAO;AACL,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,KAAA;AAAA,MACT,UAAA,EAAY,CAAA;AAAA,MACZ,MAAA,EAAQ,+BAAA;AAAA,MACR,kBAAA,EAAoB;AAAA,KACtB;AAAA,EACF;AACF;AAKO,SAAS,oBAAoB,OAAA,EAA0C;AAC5E,EAAA,OAAO,CAAC,EAAA,CACL,OAAA,CAAQ,WAAW,CAAA,IAAK,OAAA,CAAQ,WAAW,CAAA,MAC3C,OAAA,CAAQ,iBAAiB,CAAA,IAAK,OAAA,CAAQ,iBAAiB,CAAA,CAAA,CAAA;AAE5D;AAMO,SAAS,mBAAmB,OAAA,EAA0C;AAC3E,EAAA,MAAM,cAAA,GAAiB,OAAA,CAAQ,iBAAiB,CAAA,IAAK,QAAQ,iBAAiB,CAAA;AAE9E,EAAA,IAAI,CAAC,cAAA,EAAgB;AACnB,IAAA,OAAO,KAAA;AAAA,EACT;AAGA,EAAA,MAAM,WAAA,GAAc,cAAA,CAAe,OAAA,CAAQ,UAAA,EAAY,EAAE,CAAA;AAGzD,EAAA,IAAI,gBAAgB,qBAAA,EAAuB;AACzC,IAAA,OAAO,IAAA;AAAA,EACT;AAGA,EAAA,IAAI;AACF,IAAA,MAAM,QAAA,GAAW,IAAI,GAAA,CAAI,WAAW,CAAA;AACpC,IAAA,MAAM,YAAA,GAAe,CAAC,aAAA,EAAe,iBAAiB,CAAA;AACtD,IAAA,OAAO,YAAA,CAAa,QAAA,CAAS,QAAA,CAAS,IAAI,CAAA;AAAA,EAC5C,CAAA,CAAA,MAAQ;AAEN,IAAA,OAAO,KAAA;AAAA,EACT;AACF;AC/iBA,IAAM,QAAwBC,+BAAA,EAAc;AAK5C,IAAM,oBAAN,MAAwB;AAAA,EACd,KAAA;AAAA,EAER,WAAA,GAAc;AACZ,IAAA,IAAA,CAAK,KAAA,GAAQ,KAAA;AAAA,EACf;AAAA,EAEA,MAAM,QAAQ,KAAA,EAAiD;AAC7D,IAAA,MAAM,UAAoB,EAAC;AAC3B,IAAA,IAAI,aAAA;AACJ,IAAA,IAAI,kBAAA;AACJ,IAAA,IAAI,UAAA,GAAa,CAAA;AAEjB,IAAA,MAAM,OAAA,GAAU,KAAA,CAAM,OAAA,IAAW,EAAC;AAClC,IAAA,MAAM,oBAA4C,EAAC;AAGnD,IAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,KAAK,MAAA,CAAO,OAAA,CAAQ,OAAO,CAAA,EAAG;AAClD,MAAA,iBAAA,CAAkB,GAAA,CAAI,WAAA,EAAa,CAAA,GAAI,KAAA;AAAA,IACzC;AAGA,IAAA,IAAI,mBAAA,CAAoB,OAAO,CAAA,EAAG;AAChC,MAAA,IAAI;AAEF,QAAA,MAAM,kBAAkB,MAAM,oBAAA;AAAA,UAC5B,MAAM,MAAA,IAAU,KAAA;AAAA,UAChB,MAAM,GAAA,IAAO,GAAA;AAAA,UACb;AAAA,SACF;AAEA,QAAA,IAAI,gBAAgB,OAAA,EAAS;AAE3B,UAAA,UAAA,GAAa,gBAAgB,UAAA,GAAa,GAAA;AAC1C,UAAA,OAAA,CAAQ,KAAK,CAAA,mBAAA,EAAsB,eAAA,CAAgB,OAAO,WAAA,EAAY,IAAK,SAAS,CAAA,CAAE,CAAA;AACtF,UAAA,IAAI,gBAAgB,KAAA,EAAO;AACzB,YAAA,aAAA,GAAgB;AAAA,cACd,IAAA,EAAM,eAAA,CAAgB,KAAA,CAAM,WAAA,EAAY;AAAA,cACxC,MAAM,eAAA,CAAgB;AAAA,aACxB;AAAA,UACF;AACA,UAAA,kBAAA,GAAqB,eAAA,CAAgB,kBAAA;AAGrC,UAAA,IAAI,gBAAgB,KAAA,EAAO;AACzB,YAAA,OAAA,CAAQ,IAAA,CAAK,CAAA,MAAA,EAAS,eAAA,CAAgB,KAAK,CAAA,CAAE,CAAA;AAAA,UAC/C;AAAA,QACF,CAAA,MAAO;AAEL,UAAA,OAAA,CAAQ,KAAK,oDAAA,EAAsD;AAAA,YACjE,QAAQ,eAAA,CAAgB,MAAA;AAAA,YACxB,OAAO,eAAA,CAAgB,KAAA;AAAA,YACvB,iBAAA,EAAmB,CAAC,CAAC,OAAA,CAAQ,iBAAiB,CAAA,IAAK,CAAC,CAAC,OAAA,CAAQ,iBAAiB,CAAA;AAAA,YAC9E,mBAAA,EAAqB,OAAA,CAAQ,iBAAiB,CAAA,IAAK,QAAQ,iBAAiB;AAAA,WAC7E,CAAA;AACD,UAAA,UAAA,GAAa,IAAA,CAAK,GAAA,CAAI,UAAA,EAAY,EAAE,CAAA;AACpC,UAAA,OAAA,CAAQ,KAAK,mBAAmB,CAAA;AAChC,UAAA,IAAI,gBAAgB,MAAA,EAAQ;AAC1B,YAAA,OAAA,CAAQ,IAAA,CAAK,CAAA,gBAAA,EAAmB,eAAA,CAAgB,MAAM,CAAA,CAAE,CAAA;AAAA,UAC1D;AAGA,UAAA,IAAI,kBAAA,CAAmB,OAAO,CAAA,EAAG;AAC/B,YAAA,OAAA,CAAQ,KAAK,gBAAgB,CAAA;AAC7B,YAAA,aAAA,GAAgB,EAAE,IAAA,EAAM,SAAA,EAAW,IAAA,EAAM,sBAAA,EAAuB;AAAA,UAClE;AAAA,QACF;AAAA,MACF,SAAS,KAAA,EAAO;AAEd,QAAA,OAAA,CAAQ,KAAA,CAAM,qDAAqD,KAAK,CAAA;AACxE,QAAA,UAAA,GAAa,IAAA,CAAK,GAAA,CAAI,UAAA,EAAY,EAAE,CAAA;AACpC,QAAA,OAAA,CAAQ,KAAK,8BAA8B,CAAA;AAAA,MAC7C;AAAA,IACF;AAIA,IAAA,MAAM,YAAY,KAAA,CAAM,SAAA,IAAa,KAAA,CAAM,OAAA,GAAU,YAAY,CAAA,IAAK,EAAA;AACtE,IAAA,IAAI,SAAA,EAAW;AACb,MAAA,MAAM,mBAAmB,MAAA,CAAO,OAAA,CAAQ,IAAA,CAAK,KAAA,CAAM,MAAM,UAAU,CAAA;AAEnE,MAAA,MAAM,WAAA,GAAc,CAAC,aAAA,EAAe,WAAA,EAAa,kBAAkB,CAAA;AACnE,MAAA,MAAM,aAAA,GAAgB,gBAAA,CAAiB,IAAA,CAAK,CAAC,GAAG,CAAA,KAAM;AACpD,QAAA,MAAM,UAAA,GAAa,WAAA,CAAY,QAAA,CAAS,CAAA,CAAE,CAAC,CAAC,CAAA;AAC5C,QAAA,MAAM,UAAA,GAAa,WAAA,CAAY,QAAA,CAAS,CAAA,CAAE,CAAC,CAAC,CAAA;AAC5C,QAAA,IAAI,UAAA,IAAc,CAAC,UAAA,EAAY,OAAO,CAAA;AACtC,QAAA,IAAI,CAAC,UAAA,IAAc,UAAA,EAAY,OAAO,EAAA;AACtC,QAAA,OAAO,CAAA;AAAA,MACT,CAAC,CAAA;AAED,MAAA,KAAA,MAAW,CAAC,QAAA,EAAU,SAAS,CAAA,IAAK,aAAA,EAAe;AACjD,QAAA,MAAM,IAAA,GAAO,SAAA;AACb,QAAA,MAAM,OAAA,GAAU,IAAA,CAAK,QAAA,CAAS,IAAA,CAAK,CAAC,OAAA,KAAoB;AACtD,UAAA,MAAM,KAAA,GAAQ,IAAI,MAAA,CAAO,OAAA,EAAS,GAAG,CAAA;AACrC,UAAA,OAAO,KAAA,CAAM,KAAK,SAAS,CAAA;AAAA,QAC7B,CAAC,CAAA;AAED,QAAA,IAAI,OAAA,EAAS;AACX,UAAA,MAAM,SAAA,GAAY,IAAA,CAAK,YAAA,CAAa,QAAQ,CAAA;AAC5C,UAAA,MAAM,SAAA,GAAY,IAAA,CAAK,YAAA,CAAa,QAAQ,CAAA;AAE5C,UAAA,UAAA,GAAa,IAAA,CAAK,GAAA,CAAI,UAAA,EAAY,IAAA,CAAK,aAAa,GAAG,CAAA;AACvD,UAAA,OAAA,CAAQ,IAAA,CAAK,CAAA,cAAA,EAAiB,SAAS,CAAA,CAAE,CAAA;AACzC,UAAA,IAAI,CAAC,aAAA,EAAe;AAClB,YAAA,aAAA,GAAgB,EAAE,IAAA,EAAM,SAAA,EAAW,IAAA,EAAM,SAAA,EAAU;AACnD,YAAA,kBAAA,GAAqB,SAAA;AAAA,UACvB;AACA,UAAA;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAGA,IAAA,MAAM,iBAAA,GAAoB,IAAA,CAAK,KAAA,CAAM,KAAA,CAAM,OAAA,CAAQ,UAAA;AACnD,IAAA,MAAM,iBAAiB,iBAAA,CAAkB,MAAA;AAAA,MACvC,CAAC,UAAA,KAA2B,iBAAA,CAAkB,UAAA,CAAW,IAAA,CAAK,aAAa;AAAA,KAC7E;AAEA,IAAA,IAAI,cAAA,CAAe,SAAS,CAAA,EAAG;AAC7B,MAAA,MAAM,aAAA,GAAgB,IAAA,CAAK,GAAA,CAAI,GAAG,cAAA,CAAe,GAAA,CAAI,CAAC,CAAA,KAAkB,CAAA,CAAE,UAAA,GAAa,GAAG,CAAC,CAAA;AAC3F,MAAA,UAAA,GAAa,IAAA,CAAK,GAAA,CAAI,UAAA,EAAY,aAAa,CAAA;AAC/C,MAAA,OAAA,CAAQ,IAAA,CAAK,CAAA,WAAA,EAAc,cAAA,CAAe,MAAM,CAAA,CAAE,CAAA;AAAA,IACpD;AAGA,IAAA,MAAM,EAAA,GAAK,KAAA,CAAM,EAAA,IAAM,KAAA,CAAM,SAAA;AAC7B,IAAA,IAAI,EAAA,IAAM,CAAC,iBAAA,CAAkB,iBAAiB,KAAK,CAAC,iBAAA,CAAkB,WAAW,CAAA,EAAG;AAElF,MAAA,MAAM,QAAA,GACJ,WAAA,IAAe,IAAA,CAAK,KAAA,CAAM,KAAA,CAAM,QAAA,GAC5B,IAAA,CAAK,KAAA,CAAM,KAAA,CAAM,QAAA,CAAS,SAAA,GAC1B,IAAA,CAAK,MAAM,KAAA,CAAM,QAAA;AAEvB,MAAA,KAAA,MAAW,CAAC,QAAA,EAAU,MAAM,KAAK,MAAA,CAAO,OAAA,CAAQ,QAAQ,CAAA,EAAG;AAEzD,QAAA,IACE,CAAC,MAAA,IACD,OAAO,MAAA,KAAW,QAAA,IAClB,EAAE,QAAA,IAAY,MAAA,CAAA,IACd,CAAC,KAAA,CAAM,OAAA,CAAQ,MAAA,CAAO,MAAM,CAAA;AAE5B,UAAA;AAEF,QAAA,MAAM,OAAA,GAAU,MAAA,CAAO,MAAA,CAAO,IAAA,CAAK,CAAC,KAAA,KAAkB;AACpD,UAAA,MAAM,MAAA,GAAS,KAAA,CAAM,KAAA,CAAM,GAAG,EAAE,CAAC,CAAA;AACjC,UAAA,MAAM,WAAA,GAAc,MAAA,CAAO,KAAA,CAAM,GAAG,CAAA;AACpC,UAAA,MAAM,OAAA,GAAU,EAAA,CAAG,KAAA,CAAM,GAAG,CAAA;AAG5B,UAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,IAAA,CAAK,GAAA,CAAI,YAAY,MAAA,GAAS,CAAA,EAAG,CAAC,CAAA,EAAG,CAAA,EAAA,EAAK;AAC5D,YAAA,IAAI,WAAA,CAAY,CAAC,CAAA,KAAM,OAAA,CAAQ,CAAC,CAAA,IAAK,WAAA,CAAY,CAAC,CAAA,KAAM,GAAA,EAAK;AAC3D,cAAA,OAAO,KAAA;AAAA,YACT;AAAA,UACF;AACA,UAAA,OAAO,IAAA;AAAA,QACT,CAAC,CAAA;AAED,QAAA,IAAI,OAAA,EAAS;AACX,UAAA,MAAM,IAAA,GAAO,MAAA;AACb,UAAA,UAAA,GAAa,IAAA,CAAK,GAAA,CAAI,UAAA,EAAY,IAAA,CAAK,aAAa,EAAE,CAAA;AACtD,UAAA,OAAA,CAAQ,IAAA,CAAK,CAAA,eAAA,EAAkB,QAAQ,CAAA,CAAE,CAAA;AACzC,UAAA;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAGA,IAAA,IAAI,OAAA,CAAQ,MAAA,GAAS,CAAA,IAAK,UAAA,GAAa,GAAA,EAAK;AAC1C,MAAA,UAAA,GAAa,IAAA,CAAK,GAAA,CAAI,UAAA,GAAa,GAAA,EAAK,EAAE,CAAA;AAAA,IAC5C;AAGA,IAAA,UAAA,GAAa,KAAK,GAAA,CAAI,IAAA,CAAK,IAAI,UAAA,EAAY,CAAC,GAAG,GAAG,CAAA;AAElD,IAAA,OAAO;AAAA,MACL,SAAS,UAAA,GAAa,EAAA;AAAA;AAAA,MACtB,UAAA;AAAA,MACA,gBACE,UAAA,GAAa,EAAA,IAAM,gBACf,EAAE,IAAA,EAAM,WAAoB,SAAA,EAAW,aAAA,CAAc,MAAK,GAC1D,UAAA,GAAa,KACX,EAAE,IAAA,EAAM,WAAmB,GAC3B,EAAE,MAAM,OAAA,EAAiB;AAAA,MACjC,SAAS,EAAC;AAAA;AAAA,MACV,GAAI,aAAA,IAAiB,EAAE,aAAA,EAAc;AAAA,MACrC,OAAA;AAAA,MACA,GAAI,kBAAA,IAAsB;AAAA,QACxB;AAAA,OAOF;AAAA,MACA,kBACE,kBAAA,KAAuB,WAAA,GAAc,KAAA,GAAQ,UAAA,GAAa,KAAK,QAAA,GAAW,MAAA;AAAA;AAAA,MAC5E,SAAA,sBAAe,IAAA;AAAK,KACtB;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKQ,aAAa,QAAA,EAA0B;AAC7C,IAAA,MAAM,OAAA,GAAkC;AAAA,MACtC,aAAA,EAAe,QAAA;AAAA,MACf,gBAAA,EAAkB,WAAA;AAAA,MAClB,cAAA,EAAgB,YAAA;AAAA,MAChB,SAAA,EAAW,QAAA;AAAA,MACX,YAAA,EAAc,WAAA;AAAA,MACd,OAAA,EAAS,MAAA;AAAA,MACT,UAAA,EAAY,QAAA;AAAA,MACZ,eAAA,EAAiB,aAAA;AAAA,MACjB,WAAA,EAAa,SAAA;AAAA,MACb,SAAA,EAAW,KAAA;AAAA,MACX,gBAAA,EAAkB;AAAA,KACpB;AACA,IAAA,OAAO,OAAA,CAAQ,QAAQ,CAAA,IAAK,QAAA;AAAA,EAC9B;AAAA;AAAA;AAAA;AAAA,EAKQ,aAAa,QAAA,EAA0B;AAC7C,IAAA,MAAM,OAAA,GAAkC;AAAA,MACtC,aAAA,EAAe,gBAAA;AAAA,MACf,gBAAA,EAAkB,QAAA;AAAA,MAClB,cAAA,EAAgB,YAAA;AAAA,MAChB,SAAA,EAAW,WAAA;AAAA,MACX,YAAA,EAAc,mBAAA;AAAA,MACd,OAAA,EAAS,SAAA;AAAA,MACT,UAAA,EAAY,QAAA;AAAA,MACZ,eAAA,EAAiB,aAAA;AAAA,MACjB,WAAA,EAAa,aAAA;AAAA,MACb,SAAA,EAAW,kBAAA;AAAA,MACX,gBAAA,EAAkB;AAAA,KACpB;AACA,IAAA,OAAO,OAAA,CAAQ,QAAQ,CAAA,IAAK,QAAA;AAAA,EAC9B;AACF,CAAA;AAKO,IAAM,2BAAN,MAA+B;AAAA,EAC5B,QAAA;AAAA,EACA,MAAA,uBAA0C,GAAA,EAAI;AAAA,EAEtD,YAAY,OAAA,EAAmB;AAE7B,IAAA,IAAA,CAAK,QAAA,GAAW,IAAI,iBAAA,EAAkB;AAAA,EACxC;AAAA,EAEA,MAAM,QAAQ,KAAA,EAAiD;AAC7D,IAAA,MAAM,MAAA,GAAS,MAAM,IAAA,CAAK,QAAA,CAAS,QAAQ,KAAK,CAAA;AAGhD,IAAA,IAAI,OAAO,OAAA,IAAW,IAAA,CAAK,MAAA,CAAO,GAAA,CAAI,gBAAgB,CAAA,EAAG;AACvD,MAAA,MAAM,WAAW,IAAA,CAAK,MAAA,CAAO,GAAA,CAAI,gBAAgB,KAAK,EAAC;AACvD,MAAA,QAAA,CAAS,QAAQ,CAAC,OAAA,KAAY,OAAA,CAAQ,MAAA,EAAQ,KAAK,CAAC,CAAA;AAAA,IACtD;AAEA,IAAA,OAAO,MAAA;AAAA,EACT;AAAA,EAEA,EAAA,CAAG,OAAe,OAAA,EAA6B;AAC7C,IAAA,IAAI,CAAC,IAAA,CAAK,MAAA,CAAO,GAAA,CAAI,KAAK,CAAA,EAAG;AAC3B,MAAA,IAAA,CAAK,MAAA,CAAO,GAAA,CAAI,KAAA,EAAO,EAAE,CAAA;AAAA,IAC3B;AACA,IAAA,IAAA,CAAK,MAAA,CAAO,GAAA,CAAI,KAAK,CAAA,CAAG,KAAK,OAAO,CAAA;AAAA,EACtC;AAAA,EAEA,IAAA,CAAK,UAAkB,IAAA,EAAuB;AAC5C,IAAA,MAAM,WAAW,IAAA,CAAK,MAAA,CAAO,GAAA,CAAI,KAAK,KAAK,EAAC;AAC5C,IAAA,QAAA,CAAS,QAAQ,CAAC,OAAA,KAAY,OAAA,CAAQ,GAAG,IAAI,CAAC,CAAA;AAAA,EAChD;AAAA,EAEA,MAAM,IAAA,GAAsB;AAE1B,IAAA;AAAA,EACF;AACF,CAAA;;;AChTA,IAAI,YAAA,GAA4C,IAAA;AAUhD,IAAI,WAAA,GAAkC,IAAA;AACtC,IAAI,WAAA,GAAoC,IAAA;AAGxC,IAAM,SAAA,GAAY,gCAAA;AAGlB,IAAI,OAAA,GAAyB,IAAA;AAKtB,SAAS,eAAe,GAAA,EAAa;AAC1C,EAAA,OAAA,GAAU,GAAA;AACZ;AAKA,SAAS,UAAA,GAAqB;AAE5B,EAAA,IAAI,OAAA,EAAS;AACX,IAAA,IAAI;AACF,MAAA,MAAM,GAAA,GAAM,IAAI,GAAA,CAAI,OAAO,CAAA;AAE3B,MAAA,OAAO,CAAA,EAAG,GAAA,CAAI,MAAM,CAAA,EAAG,SAAS,CAAA,CAAA;AAAA,IAClC,CAAA,CAAA,MAAQ;AAEN,MAAA,OAAO,SAAA;AAAA,IACT;AAAA,EACF;AAEA,EAAA,OAAO,SAAA;AACT;AAMA,eAAsB,QAAA,GAA6B;AACjD,EAAA,IAAI,aAAa,OAAO,IAAA;AACxB,EAAA,IAAI,WAAA,EAAa;AACf,IAAA,MAAM,WAAA;AACN,IAAA,OAAO,CAAC,CAAC,WAAA;AAAA,EACX;AAEA,EAAA,WAAA,GAAA,CAAe,YAAY;AACzB,IAAA,IAAI;AAEF,MAAA,MAAM,UAAA,GAAa,IAAI,eAAA,EAAgB;AACvC,MAAA,MAAM,UAAU,UAAA,CAAW,MAAM,UAAA,CAAW,KAAA,IAAS,GAAI,CAAA;AAEzD,MAAA,IAAI;AACF,QAAA,MAAM,UAAU,UAAA,EAAW;AAG3B,QAAA,IAAI,OAAO,WAAA,CAAY,oBAAA,KAAyB,UAAA,EAAY;AAC1D,UAAA,IAAI;AACF,YAAA,MAAMC,SAAAA,GAAW,MAAM,KAAA,CAAM,OAAA,EAAS,EAAE,MAAA,EAAQ,UAAA,CAAW,QAAQ,CAAA;AACnE,YAAA,YAAA,CAAa,OAAO,CAAA;AAEpB,YAAA,IAAI,CAACA,UAAS,EAAA,EAAI;AAChB,cAAA,MAAM,IAAI,KAAA,CAAM,CAAA,sBAAA,EAAyBA,SAAAA,CAAS,MAAM,CAAA,CAAE,CAAA;AAAA,YAC5D;AAGA,YAAA,MAAM,cAAA,GAAiBA,UAAS,KAAA,EAAM;AAGtC,YAAA,MAAM,EAAE,QAAA,EAAS,GAAI,MAAM,WAAA,CAAY,qBAAqB,cAAA,EAAgB;AAAA,cAC1E,GAAA,EAAK;AAAA,gBACH,0BAAA,EAA4B,CAAC,GAAA,EAAa,GAAA,KAAgB;AACxD,kBAAA,IAAI,OAAA,CAAQ,GAAA,CAAI,QAAA,KAAa,YAAA,EAAc;AACzC,oBAAA,OAAA,CAAQ,KAAA,CAAM,OAAA,EAAS,GAAA,EAAK,GAAG,CAAA;AAAA,kBACjC;AAAA,gBACF,CAAA;AAAA,gBACA,gBAAA,EAAkB,CAAC,GAAA,EAAa,GAAA,KAAgB;AAC9C,kBAAA,MAAM,IAAI,KAAA,CAAM,CAAA,cAAA,EAAiB,GAAG,CAAA,SAAA,EAAY,GAAG,CAAA,CAAE,CAAA;AAAA,gBACvD;AAAA;AACF,aACD,CAAA;AAED,YAAA,YAAA,GAAe,QAAA;AACf,YAAA,WAAA,GAAc,QAAA,CAAS,OAAA;AAEvB,YAAA,IAAI,OAAA,CAAQ,GAAA,CAAI,QAAA,KAAa,YAAA,EAAc;AACzC,cAAA,OAAA,CAAQ,MAAM,6DAAwD,CAAA;AAAA,YACxE;AACA,YAAA;AAAA,UACF,SAAS,WAAA,EAAa;AAEpB,YAAA,IAAI,CAAC,UAAA,CAAW,MAAA,CAAO,OAAA,EAAS;AAC9B,cAAA,IAAI,OAAA,CAAQ,GAAA,CAAI,QAAA,KAAa,YAAA,EAAc;AACzC,gBAAA,OAAA,CAAQ,KAAA;AAAA,kBACN;AAAA,iBACF;AAAA,cACF;AAAA,YACF,CAAA,MAAO;AACL,cAAA,MAAM,WAAA;AAAA,YACR;AAAA,UACF;AAAA,QACF;AAGA,QAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,OAAA,EAAS,EAAE,MAAA,EAAQ,UAAA,CAAW,QAAQ,CAAA;AACnE,QAAA,YAAA,CAAa,OAAO,CAAA;AAEpB,QAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,UAAA,MAAM,IAAI,KAAA,CAAM,CAAA,sBAAA,EAAyB,QAAA,CAAS,MAAM,CAAA,CAAE,CAAA;AAAA,QAC5D;AAEA,QAAA,MAAM,eAAA,GAAkB,MAAM,QAAA,CAAS,WAAA,EAAY;AACnD,QAAA,MAAM,cAAA,GAAiB,MAAM,WAAA,CAAY,OAAA,CAAQ,eAAe,CAAA;AAEhE,QAAA,MAAM,OAAA,GAAU;AAAA,UACd,GAAA,EAAK;AAAA,YACH,0BAAA,EAA4B,CAAC,GAAA,EAAa,GAAA,KAAgB;AACxD,cAAA,IAAI,OAAA,CAAQ,GAAA,CAAI,QAAA,KAAa,YAAA,EAAc;AACzC,gBAAA,OAAA,CAAQ,KAAA,CAAM,OAAA,EAAS,GAAA,EAAK,GAAG,CAAA;AAAA,cACjC;AAAA,YACF,CAAA;AAAA,YACA,gBAAA,EAAkB,CAAC,GAAA,EAAa,GAAA,KAAgB;AAC9C,cAAA,MAAM,IAAI,KAAA,CAAM,CAAA,cAAA,EAAiB,GAAG,CAAA,SAAA,EAAY,GAAG,CAAA,CAAE,CAAA;AAAA,YACvD;AAAA;AACF,SACF;AAEA,QAAA,YAAA,GAAe,MAAM,WAAA,CAAY,WAAA,CAAY,cAAA,EAAgB,OAAO,CAAA;AACpE,QAAA,WAAA,GAAc,YAAA,CAAa,OAAA;AAE3B,QAAA,IAAI,OAAA,CAAQ,GAAA,CAAI,QAAA,KAAa,YAAA,EAAc;AACzC,UAAA,OAAA,CAAQ,MAAM,2DAAsD,CAAA;AAAA,QACtE;AAAA,MACF,SAAS,UAAA,EAAqB;AAC5B,QAAA,MAAM,KAAA,GAAQ,UAAA;AACd,QAAA,IAAI,KAAA,CAAM,SAAS,YAAA,EAAc;AAC/B,UAAA,OAAA,CAAQ,IAAA;AAAA,YACN;AAAA,WACF;AAAA,QACF,CAAA,MAAO;AACL,UAAA,OAAA,CAAQ,IAAA;AAAA,YACN,0CAAA;AAAA,YACA,MAAM,OAAA,IAAW;AAAA,WACnB;AAAA,QACF;AACA,QAAA,WAAA,GAAc,IAAA;AAAA,MAChB;AAAA,IACF,SAAS,KAAA,EAAO;AACd,MAAA,OAAA,CAAQ,KAAA,CAAM,4CAA4C,KAAK,CAAA;AAC/D,MAAA,WAAA,GAAc,IAAA;AAAA,IAChB;AAAA,EACF,CAAA,GAAG;AAEH,EAAA,MAAM,WAAA;AACN,EAAA,OAAO,CAAC,CAAC,WAAA;AACX;AAMA,eAAsB,mBAAA,CACpB,SAAA,EACA,OAAA,EACA,SAAA,EAOQ;AAER,EAAA,MAAM,WAAA,GAAc,MAAM,QAAA,EAAS;AACnC,EAAA,IAAI,CAAC,WAAA,IAAe,CAAC,WAAA,EAAa;AAChC,IAAA,OAAO,IAAA;AAAA,EACT;AAEA,EAAA,IAAI;AAKF,IAAA,MAAM,WAAA,GAAc,IAAA,CAAK,SAAA,CAAU,OAAO,CAAA;AAG1C,IAAA,IAAI,OAAO,WAAA,CAAY,YAAA,KAAiB,UAAA,EAAY;AAClD,MAAA,MAAM,SAAS,WAAA,CAAY,YAAA;AAAA,QACzB,SAAA,IAAa,EAAA;AAAA,QACb,WAAA;AAAA,QACA,SAAA,IAAa,EAAA;AAAA,QAAA,iBACb,IAAI,IAAA,EAAK,EAAE,WAAA;AAAY,OACzB;AAGA,MAAA,OAAO;AAAA,QACL,OAAA,EAAS,OAAO,QAAA,IAAY,KAAA;AAAA,QAC5B,UAAA,EAAY,OAAO,UAAA,IAAc,CAAA;AAAA,QACjC,OAAO,MAAA,CAAO,KAAA;AAAA,QACd,kBAAA,EAAoB,OAAO,mBAAA,IAAuB,MAAA;AAAA,QAClD,SAAA,EAAW,OAAO,UAAA,IAAc;AAAA,OAClC;AAAA,IACF;AAEA,IAAA,OAAA,CAAQ,KAAK,iEAAiE,CAAA;AAC9E,IAAA,OAAO,IAAA;AAAA,EACT,SAAS,KAAA,EAAO;AACd,IAAA,OAAA,CAAQ,KAAA,CAAM,wCAAwC,KAAK,CAAA;AAC3D,IAAA,OAAO,IAAA;AAAA,EACT;AACF;AAKA,eAAsB,cAAA,GAAyC;AAC7D,EAAA,MAAM,WAAA,GAAc,MAAM,QAAA,EAAS;AACnC,EAAA,IAAI,CAAC,WAAA,IAAe,CAAC,WAAA,EAAa;AAChC,IAAA,OAAO,IAAA;AAAA,EACT;AAEA,EAAA,IAAI,OAAO,WAAA,CAAY,OAAA,KAAY,UAAA,EAAY;AAC7C,IAAA,OAAO,YAAY,OAAA,EAAQ;AAAA,EAC7B;AAEA,EAAA,OAAO,SAAA;AACT;AAKA,eAAsB,eAAA,GAAoC;AACxD,EAAA,IAAI;AACF,IAAA,MAAM,WAAA,GAAc,MAAM,QAAA,EAAS;AACnC,IAAA,IAAI,CAAC,aAAa,OAAO,KAAA;AAGzB,IAAA,MAAM,OAAA,GAAU,MAAM,cAAA,EAAe;AACrC,IAAA,OAAO,OAAA,KAAY,IAAA;AAAA,EACrB,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,KAAA;AAAA,EACT;AACF;AChQA,IAAMC,SAAwBF,+BAAAA,EAAc;AAKrC,IAAM,4BAAN,MAAgC;AAAA,EAMrC,WAAA,CAAoB,aAAsB,IAAA,EAAM;AAA5B,IAAA,IAAA,CAAA,UAAA,GAAA,UAAA;AAClB,IAAA,IAAA,CAAK,KAAA,GAAQE,MAAAA;AAAA,EACf;AAAA,EAPQ,WAAA,GAAuB,KAAA;AAAA,EACvB,WAAA,GAAoC,IAAA;AAAA,EACpC,OAAA,GAAyB,IAAA;AAAA,EACzB,KAAA;AAAA;AAAA;AAAA;AAAA,EASR,WAAW,GAAA,EAAa;AACtB,IAAA,IAAA,CAAK,OAAA,GAAU,GAAA;AACf,IAAA,cAAA,CAAe,GAAG,CAAA;AAAA,EACpB;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,IAAA,GAAsB;AAC1B,IAAA,IAAI,CAAC,KAAK,UAAA,EAAY;AACpB,MAAA,IAAA,CAAK,WAAA,GAAc,KAAA;AACnB,MAAA;AAAA,IACF;AAEA,IAAA,IAAI,KAAK,WAAA,EAAa;AACpB,MAAA,MAAM,IAAA,CAAK,WAAA;AACX,MAAA;AAAA,IACF;AAEA,IAAA,IAAA,CAAK,eAAe,YAAY;AAC9B,MAAA,IAAI;AAEF,QAAA,MAAM,aAAA,GAAgB,MAAM,eAAA,EAAgB;AAE5C,QAAA,IAAI,aAAA,EAAe;AAEjB,UAAA,IAAI,KAAK,OAAA,EAAS;AAChB,YAAA,cAAA,CAAe,KAAK,OAAO,CAAA;AAAA,UAC7B;AACA,UAAA,MAAM,QAAA,EAAS;AACf,UAAA,IAAA,CAAK,WAAA,GAAc,IAAA;AAAA,QAErB,CAAA,MAAO;AACL,UAAA,IAAA,CAAK,WAAA,GAAc,KAAA;AAAA,QAErB;AAAA,MACF,SAAS,KAAA,EAAO;AACd,QAAA,OAAA,CAAQ,KAAA,CAAM,4CAA4C,KAAK,CAAA;AAC/D,QAAA,IAAA,CAAK,WAAA,GAAc,KAAA;AAAA,MACrB;AAAA,IACF,CAAA,GAAG;AAEH,IAAA,MAAM,IAAA,CAAK,WAAA;AAAA,EACb;AAAA;AAAA;AAAA;AAAA,EAKA,MAAc,iBAAiB,KAAA,EAAiD;AAC9E,IAAA,MAAM,UAAoB,EAAC;AAC3B,IAAA,IAAI,aAAA;AACJ,IAAA,IAAI,kBAAA;AACJ,IAAA,IAAI,UAAA,GAAa,CAAA;AAEjB,IAAA,MAAM,OAAA,GAAU,KAAA,CAAM,OAAA,IAAW,EAAC;AAClC,IAAA,MAAM,oBAA4C,EAAC;AAGnD,IAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,KAAK,MAAA,CAAO,OAAA,CAAQ,OAAO,CAAA,EAAG;AAClD,MAAA,iBAAA,CAAkB,GAAA,CAAI,WAAA,EAAa,CAAA,GAAI,KAAA;AAAA,IACzC;AAGA,IAAA,MAAM,mBAAmB,CAAC,EACxB,kBAAkB,WAAW,CAAA,IAAK,kBAAkB,iBAAiB,CAAA,CAAA;AAEvE,IAAA,MAAM,cAAA,GAAiB,kBAAkB,iBAAiB,CAAA;AAE1D,IAAA,IAAI,cAAA,EAAgB,QAAA,CAAS,aAAa,CAAA,EAAG;AAC3C,MAAA,UAAA,GAAa,EAAA;AACb,MAAA,OAAA,CAAQ,KAAK,yBAAyB,CAAA;AACtC,MAAA,aAAA,GAAgB,EAAE,IAAA,EAAM,SAAA,EAAW,IAAA,EAAM,SAAA,EAAU;AACnD,MAAA,kBAAA,GAAqB,WAAA;AAAA,IACvB,WAAW,gBAAA,EAAkB;AAC3B,MAAA,UAAA,GAAa,IAAA,CAAK,GAAA,CAAI,UAAA,EAAY,EAAE,CAAA;AACpC,MAAA,OAAA,CAAQ,KAAK,mBAAmB,CAAA;AAAA,IAClC;AAGA,IAAA,MAAM,YAAY,KAAA,CAAM,SAAA,IAAa,KAAA,CAAM,OAAA,GAAU,YAAY,CAAA,IAAK,EAAA;AACtE,IAAA,IAAI,SAAA,EAAW;AACb,MAAA,KAAA,MAAW,CAAC,QAAA,EAAU,SAAS,CAAA,IAAK,MAAA,CAAO,QAAQ,IAAA,CAAK,KAAA,CAAM,KAAA,CAAM,UAAU,CAAA,EAAG;AAC/E,QAAA,MAAM,OAAA,GAAU,SAAA,CAAU,QAAA,CAAS,IAAA,CAAK,CAAC,OAAA,KAAY;AACnD,UAAA,MAAM,KAAA,GAAQ,IAAI,MAAA,CAAO,OAAA,EAAS,GAAG,CAAA;AACrC,UAAA,OAAO,KAAA,CAAM,KAAK,SAAS,CAAA;AAAA,QAC7B,CAAC,CAAA;AAED,QAAA,IAAI,OAAA,EAAS;AACX,UAAA,MAAM,SAAA,GAAY,IAAA,CAAK,YAAA,CAAa,QAAQ,CAAA;AAC5C,UAAA,MAAM,SAAA,GAAY,IAAA,CAAK,YAAA,CAAa,QAAQ,CAAA;AAE5C,UAAA,UAAA,GAAa,IAAA,CAAK,IAAI,UAAA,EAAY,IAAA,CAAK,MAAM,SAAA,CAAU,UAAA,GAAa,IAAA,GAAO,GAAG,CAAC,CAAA;AAC/E,UAAA,OAAA,CAAQ,IAAA,CAAK,CAAA,cAAA,EAAiB,SAAS,CAAA,CAAE,CAAA;AACzC,UAAA,IAAI,CAAC,aAAA,EAAe;AAClB,YAAA,aAAA,GAAgB,EAAE,IAAA,EAAM,SAAA,EAAW,IAAA,EAAM,SAAA,EAAU;AACnD,YAAA,kBAAA,GAAqB,SAAA;AAAA,UACvB;AACA,UAAA;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAGA,IAAA,MAAM,iBAAA,GAAoB,IAAA,CAAK,KAAA,CAAM,KAAA,CAAM,OAAA,CAAQ,UAAA;AACnD,IAAA,MAAM,iBAAiB,iBAAA,CAAkB,MAAA;AAAA,MACvC,CAAC,UAAA,KAAe,iBAAA,CAAkB,UAAA,CAAW,IAAA,CAAK,aAAa;AAAA,KACjE;AAEA,IAAA,IAAI,cAAA,CAAe,SAAS,CAAA,EAAG;AAC7B,MAAA,MAAM,aAAA,GAAgB,IAAA,CAAK,GAAA,CAAI,GAAG,cAAA,CAAe,IAAI,CAAC,CAAA,KAAM,CAAA,CAAE,UAAU,CAAC,CAAA;AACzE,MAAA,UAAA,GAAa,IAAA,CAAK,GAAA,CAAI,UAAA,EAAY,aAAa,CAAA;AAC/C,MAAA,OAAA,CAAQ,IAAA,CAAK,CAAA,WAAA,EAAc,cAAA,CAAe,MAAM,CAAA,CAAE,CAAA;AAAA,IACpD;AAGA,IAAA,MAAM,EAAA,GAAK,KAAA,CAAM,EAAA,IAAM,KAAA,CAAM,SAAA;AAC7B,IAAA,IAAI,EAAA,IAAM,CAAC,iBAAA,CAAkB,iBAAiB,KAAK,CAAC,iBAAA,CAAkB,WAAW,CAAA,EAAG;AAElF,MAAA,MAAM,QAAA,GACJ,WAAA,IAAe,IAAA,CAAK,KAAA,CAAM,KAAA,CAAM,QAAA,GAC5B,IAAA,CAAK,KAAA,CAAM,KAAA,CAAM,QAAA,CAAS,SAAA,GAC1B,IAAA,CAAK,MAAM,KAAA,CAAM,QAAA;AAEvB,MAAA,KAAA,MAAW,CAAC,QAAA,EAAU,MAAM,KAAK,MAAA,CAAO,OAAA,CAAQ,QAAQ,CAAA,EAAG;AAEzD,QAAA,IACE,CAAC,MAAA,IACD,OAAO,MAAA,KAAW,QAAA,IAClB,EAAE,QAAA,IAAY,MAAA,CAAA,IACd,CAAC,KAAA,CAAM,OAAA,CAAQ,MAAA,CAAO,MAAM,CAAA;AAE5B,UAAA;AAEF,QAAA,MAAM,OAAA,GAAU,MAAA,CAAO,MAAA,CAAO,IAAA,CAAK,CAAC,KAAA,KAAkB;AACpD,UAAA,MAAM,MAAA,GAAS,KAAA,CAAM,KAAA,CAAM,GAAG,EAAE,CAAC,CAAA;AACjC,UAAA,MAAM,WAAA,GAAc,MAAA,CAAO,KAAA,CAAM,GAAG,CAAA;AACpC,UAAA,MAAM,OAAA,GAAU,EAAA,CAAG,KAAA,CAAM,GAAG,CAAA;AAG5B,UAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,IAAA,CAAK,GAAA,CAAI,YAAY,MAAA,GAAS,CAAA,EAAG,CAAC,CAAA,EAAG,CAAA,EAAA,EAAK;AAC5D,YAAA,IAAI,WAAA,CAAY,CAAC,CAAA,KAAM,OAAA,CAAQ,CAAC,CAAA,IAAK,WAAA,CAAY,CAAC,CAAA,KAAM,GAAA,EAAK;AAC3D,cAAA,OAAO,KAAA;AAAA,YACT;AAAA,UACF;AACA,UAAA,OAAO,IAAA;AAAA,QACT,CAAC,CAAA;AAED,QAAA,IAAI,OAAA,EAAS;AACX,UAAA,UAAA,GAAa,IAAA,CAAK,IAAI,UAAA,EAAY,IAAA,CAAK,MAAM,MAAA,CAAO,UAAA,GAAa,GAAA,GAAM,GAAG,CAAC,CAAA;AAC3E,UAAA,OAAA,CAAQ,IAAA,CAAK,CAAA,eAAA,EAAkB,QAAQ,CAAA,CAAE,CAAA;AACzC,UAAA;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAGA,IAAA,IAAI,OAAA,CAAQ,SAAS,CAAA,EAAG;AACtB,MAAA,UAAA,GAAa,KAAK,GAAA,CAAI,IAAA,CAAK,MAAM,UAAA,GAAa,GAAG,GAAG,EAAE,CAAA;AAAA,IACxD;AAGA,IAAA,UAAA,GAAa,KAAK,GAAA,CAAI,IAAA,CAAK,IAAI,UAAA,EAAY,CAAC,GAAG,GAAG,CAAA;AAElD,IAAA,OAAO;AAAA,MACL,SAAS,UAAA,GAAa,EAAA;AAAA;AAAA,MACtB,UAAA;AAAA,MACA,gBACE,UAAA,GAAa,EAAA,IAAM,gBACf,EAAE,IAAA,EAAM,WAAoB,SAAA,EAAW,aAAA,CAAc,MAAK,GAC1D,UAAA,GAAa,KACX,EAAE,IAAA,EAAM,WAAmB,GAC3B,EAAE,MAAM,OAAA,EAAiB;AAAA,MACjC,SAAS,EAAC;AAAA;AAAA,MACV,GAAI,aAAA,IAAiB,EAAE,aAAA,EAAc;AAAA,MACrC,OAAA;AAAA,MACA,GAAI,kBAAA,IAAsB;AAAA,QACxB,kBAAA,EAAoBC,wCAAsB,kBAAkB;AAAA,OAC9D;AAAA,MACA,gBAAA,EAAkB,UAAA,GAAa,EAAA,GAAK,QAAA,GAAW,MAAA;AAAA,MAC/C,SAAA,sBAAe,IAAA;AAAK,KACtB;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,QAAQ,KAAA,EAAiD;AAE7D,IAAA,MAAM,KAAK,IAAA,EAAK;AAGhB,IAAA,IAAI,KAAK,WAAA,EAAa;AACpB,MAAA,IAAI;AACF,QAAA,MAAM,aAAa,MAAM,mBAAA;AAAA,UACvB,KAAA,CAAM,SAAA,IAAa,KAAA,CAAM,OAAA,GAAU,YAAY,CAAA;AAAA,UAC/C,KAAA,CAAM,WAAW,EAAC;AAAA,UAClB,KAAA,CAAM,MAAM,KAAA,CAAM;AAAA,SACpB;AAEA,QAAA,IAAI,UAAA,EAAY;AAId,UAAA,MAAM,gBAAgB,UAAA,CAAW,KAAA,GAAQ,KAAK,YAAA,CAAa,UAAA,CAAW,KAAK,CAAA,GAAI,KAAA,CAAA;AAE/E,UAAA,OAAO;AAAA,YACL,SAAS,UAAA,CAAW,OAAA;AAAA,YACpB,YAAY,UAAA,CAAW,UAAA;AAAA,YACvB,gBACE,UAAA,CAAW,OAAA,IAAW,gBAClB,EAAE,IAAA,EAAM,WAAoB,SAAA,EAAW,aAAA,CAAc,MAAK,GAC1D,UAAA,CAAW,UACT,EAAE,IAAA,EAAM,WAAmB,GAC3B,EAAE,MAAM,OAAA,EAAiB;AAAA,YACjC,SAAS,EAAC;AAAA;AAAA,YACV,GAAI,aAAA,IAAiB,EAAE,aAAA,EAAc;AAAA,YACrC,OAAA,EAAS,CAAC,CAAA,KAAA,EAAQ,UAAA,CAAW,kBAAkB,CAAA,CAAE,CAAA;AAAA,YACjD,kBAAA,EAAoBA,uCAAA,CAAsB,UAAA,CAAW,kBAAkB,CAAA;AAAA,YACvE,gBAAA,EACE,WAAW,kBAAA,KAAuB,WAAA,GAC9B,QACA,UAAA,CAAW,UAAA,GAAa,KACtB,QAAA,GACA,MAAA;AAAA,YACR,SAAA,sBAAe,IAAA;AAAK,WACtB;AAAA,QACF;AAAA,MACF,SAAS,KAAA,EAAO;AACd,QAAA,OAAA,CAAQ,KAAA,CAAM,uCAAuC,KAAK,CAAA;AAAA,MAC5D;AAAA,IACF;AAGA,IAAA,MAAM,aAAA,GAAgB,MAAM,IAAA,CAAK,gBAAA,CAAiB,KAAK,CAAA;AAIvD,IAAA,IAAI,IAAA,CAAK,WAAA,IAAe,aAAA,CAAc,UAAA,IAAc,EAAA,EAAI;AACtD,MAAA,aAAA,CAAc,aAAa,IAAA,CAAK,GAAA,CAAI,EAAA,EAAI,aAAA,CAAc,aAAa,EAAE,CAAA;AACrE,MAAA,aAAA,CAAc,OAAA,CAAQ,KAAK,eAAe,CAAA;AAAA,IAE5C;AAEA,IAAA,OAAO,aAAA;AAAA,EACT;AAAA;AAAA;AAAA;AAAA,EAKQ,aAAa,QAAA,EAA0B;AAC7C,IAAA,MAAM,OAAA,GAAkC;AAAA,MACtC,aAAA,EAAe,QAAA;AAAA,MACf,gBAAA,EAAkB,WAAA;AAAA,MAClB,cAAA,EAAgB,YAAA;AAAA,MAChB,SAAA,EAAW,QAAA;AAAA,MACX,YAAA,EAAc,WAAA;AAAA,MACd,OAAA,EAAS,MAAA;AAAA,MACT,UAAA,EAAY,QAAA;AAAA,MACZ,eAAA,EAAiB,aAAA;AAAA,MACjB,WAAA,EAAa,SAAA;AAAA,MACb,SAAA,EAAW,KAAA;AAAA,MACX,gBAAA,EAAkB;AAAA,KACpB;AACA,IAAA,OAAO,OAAA,CAAQ,QAAQ,CAAA,IAAK,QAAA;AAAA,EAC9B;AAAA;AAAA;AAAA;AAAA,EAKQ,aAAa,QAAA,EAA0B;AAC7C,IAAA,MAAM,OAAA,GAAkC;AAAA,MACtC,aAAA,EAAe,gBAAA;AAAA,MACf,gBAAA,EAAkB,QAAA;AAAA,MAClB,cAAA,EAAgB,YAAA;AAAA,MAChB,SAAA,EAAW,WAAA;AAAA,MACX,YAAA,EAAc,mBAAA;AAAA,MACd,OAAA,EAAS,SAAA;AAAA,MACT,UAAA,EAAY,QAAA;AAAA,MACZ,eAAA,EAAiB,aAAA;AAAA,MACjB,WAAA,EAAa,aAAA;AAAA,MACb,SAAA,EAAW,kBAAA;AAAA,MACX,gBAAA,EAAkB;AAAA,KACpB;AACA,IAAA,OAAO,OAAA,CAAQ,QAAQ,CAAA,IAAK,QAAA;AAAA,EAC9B;AAAA;AAAA;AAAA;AAAA,EAKQ,aAAa,KAAA,EAA2D;AAC9E,IAAA,MAAM,UAAA,GAAa,MAAM,WAAA,EAAY;AAErC,IAAA,IAAI,UAAA,CAAW,QAAA,CAAS,SAAS,CAAA,EAAG;AAClC,MAAA,OAAO,EAAE,IAAA,EAAM,SAAA,EAAW,IAAA,EAAM,SAAA,EAAU;AAAA,IAC5C,CAAA,MAAA,IAAW,UAAA,CAAW,QAAA,CAAS,QAAQ,CAAA,EAAG;AACxC,MAAA,OAAO,EAAE,IAAA,EAAM,QAAA,EAAU,IAAA,EAAM,QAAA,EAAS;AAAA,IAC1C,CAAA,MAAA,IAAW,UAAA,CAAW,QAAA,CAAS,YAAY,CAAA,EAAG;AAC5C,MAAA,OAAO,EAAE,IAAA,EAAM,YAAA,EAAc,IAAA,EAAM,YAAA,EAAa;AAAA,IAClD,CAAA,MAAA,IAAW,UAAA,CAAW,QAAA,CAAS,MAAM,CAAA,EAAG;AACtC,MAAA,OAAO,EAAE,IAAA,EAAM,MAAA,EAAQ,IAAA,EAAM,SAAA,EAAU;AAAA,IACzC,CAAA,MAAA,IAAW,UAAA,CAAW,QAAA,CAAS,WAAW,CAAA,EAAG;AAC3C,MAAA,OAAO,EAAE,IAAA,EAAM,WAAA,EAAa,IAAA,EAAM,WAAA,EAAY;AAAA,IAChD;AAEA,IAAA,OAAO,EAAE,IAAA,EAAM,SAAA,EAAW,IAAA,EAAM,KAAA,EAAM;AAAA,EACxC;AACF,CAAA;AAKO,IAAM,mCAAN,MAAuC;AAAA,EACpC,QAAA;AAAA,EACA,MAAA,uBAA0C,GAAA,EAAI;AAAA,EAEtD,YAAY,MAAA,EAAqD;AAC/D,IAAA,IAAA,CAAK,QAAA,GAAW,IAAI,yBAAA,CAA0B,MAAA,EAAQ,cAAc,IAAI,CAAA;AACxE,IAAA,IAAI,QAAQ,OAAA,EAAS;AACnB,MAAA,IAAA,CAAK,QAAA,CAAS,UAAA,CAAW,MAAA,CAAO,OAAO,CAAA;AAAA,IACzC;AAAA,EACF;AAAA,EAEA,WAAW,GAAA,EAAa;AACtB,IAAA,IAAA,CAAK,QAAA,CAAS,WAAW,GAAG,CAAA;AAAA,EAC9B;AAAA,EAEA,MAAM,QAAQ,KAAA,EAAiD;AAC7D,IAAA,MAAM,MAAA,GAAS,MAAM,IAAA,CAAK,QAAA,CAAS,QAAQ,KAAK,CAAA;AAGhD,IAAA,IAAI,OAAO,OAAA,IAAW,IAAA,CAAK,MAAA,CAAO,GAAA,CAAI,gBAAgB,CAAA,EAAG;AACvD,MAAA,MAAM,WAAW,IAAA,CAAK,MAAA,CAAO,GAAA,CAAI,gBAAgB,KAAK,EAAC;AACvD,MAAA,QAAA,CAAS,QAAQ,CAAC,OAAA,KAAY,OAAA,CAAQ,MAAA,EAAQ,KAAK,CAAC,CAAA;AAAA,IACtD;AAEA,IAAA,OAAO,MAAA;AAAA,EACT;AAAA,EAEA,EAAA,CAAG,OAAe,OAAA,EAA6B;AAC7C,IAAA,IAAI,CAAC,IAAA,CAAK,MAAA,CAAO,GAAA,CAAI,KAAK,CAAA,EAAG;AAC3B,MAAA,IAAA,CAAK,MAAA,CAAO,GAAA,CAAI,KAAA,EAAO,EAAE,CAAA;AAAA,IAC3B;AACA,IAAA,IAAA,CAAK,MAAA,CAAO,GAAA,CAAI,KAAK,CAAA,CAAG,KAAK,OAAO,CAAA;AAAA,EACtC;AAAA,EAEA,IAAA,CAAK,UAAkB,IAAA,EAAuB;AAC5C,IAAA,MAAM,WAAW,IAAA,CAAK,MAAA,CAAO,GAAA,CAAI,KAAK,KAAK,EAAC;AAC5C,IAAA,QAAA,CAAS,QAAQ,CAAC,OAAA,KAAY,OAAA,CAAQ,GAAG,IAAI,CAAC,CAAA;AAAA,EAChD;AAAA,EAEA,MAAM,IAAA,GAAsB;AAC1B,IAAA,MAAM,IAAA,CAAK,SAAS,IAAA,EAAK;AAAA,EAC3B;AACF,CAAA;;;AC7WO,IAAM,qBAAN,MAAyB;AAAA,EACb,MAAA;AAAA,EAEjB,YAAY,MAAA,EAA+B;AACzC,IAAA,IAAA,CAAK,MAAA,GAAS;AAAA,MACZ,SAAS,MAAA,CAAO,OAAA;AAAA,MAChB,UAAA,EAAY,OAAO,UAAA,IAAc,uBAAA;AAAA,MACjC,YAAA,EAAc,OAAO,YAAA,IAAgB,IAAA;AAAA;AAAA,MACrC,aAAA,EACE,MAAA,CAAO,aAAA,IACP,OAAA,CAAQ,IAAI,kBAAA,IACZ;AAAA,KACJ;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,KAAA,CACJ,QAAA,EACA,QAAA,EACA,MAAA,EACuB;AACvB,IAAA,IAAI;AACF,MAAA,IAAI,CAAC,IAAA,CAAK,MAAA,CAAO,OAAA,IAAW,CAAC,OAAO,OAAA,EAAS;AAC3C,QAAA,OAAO,QAAA;AAAA,MACT;AAEA,MAAA,MAAM,WAAA,GAA2B;AAAA,QAC/B,EAAA,EAAI,OAAO,UAAA,EAAW;AAAA,QACtB,KAAA,EAAO,MAAA,CAAO,aAAA,EAAe,IAAA,IAAQ,SAAA;AAAA,QACrC,YAAY,MAAA,CAAO,UAAA;AAAA,QACnB,UAAA,EAAY,KAAK,GAAA,EAAI;AAAA,QACrB,SAAS,IAAA,CAAK,GAAA,EAAI,GAAI,IAAA,CAAK,OAAO,YAAA,GAAe;AAAA,OACnD;AAGA,MAAA,MAAM,YAAY,MAAM,IAAA,CAAK,QAAQ,IAAA,CAAK,SAAA,CAAU,WAAW,CAAC,CAAA;AAGhE,MAAA,QAAA,CAAS,OAAA,CAAQ,GAAA,CAAI,IAAA,CAAK,MAAA,CAAO,YAAY,SAAA,EAAW;AAAA,QACtD,QAAA,EAAU,IAAA;AAAA,QACV,MAAA,EAAQ,OAAA,CAAQ,GAAA,CAAI,QAAA,KAAa,YAAA;AAAA,QACjC,QAAA,EAAU,KAAA;AAAA,QACV,MAAA,EAAQ,KAAK,MAAA,CAAO,YAAA;AAAA,QACpB,IAAA,EAAM;AAAA,OACP,CAAA;AAED,MAAA,OAAO,QAAA;AAAA,IACT,SAAS,KAAA,EAAO;AAEd,MAAA,IAAI,OAAA,CAAQ,IAAI,iBAAA,EAAmB;AACjC,QAAA,OAAA,CAAQ,IAAA,CAAK,yCAAyC,KAAK,CAAA;AAAA,MAC7D;AACA,MAAA,OAAO,QAAA;AAAA,IACT;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,MAAM,OAAA,EAAmD;AAC7D,IAAA,IAAI;AACF,MAAA,IAAI,CAAC,IAAA,CAAK,MAAA,CAAO,OAAA,EAAS;AACxB,QAAA,OAAO,IAAA;AAAA,MACT;AAEA,MAAA,MAAM,SAAS,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,IAAA,CAAK,OAAO,UAAU,CAAA;AACzD,MAAA,IAAI,CAAC,QAAQ,KAAA,EAAO;AAClB,QAAA,OAAO,IAAA;AAAA,MACT;AAGA,MAAA,MAAM,SAAA,GAAY,MAAM,IAAA,CAAK,OAAA,CAAQ,OAAO,KAAK,CAAA;AACjD,MAAA,MAAM,OAAA,GAAuB,IAAA,CAAK,KAAA,CAAM,SAAS,CAAA;AAGjD,MAAA,IAAI,OAAA,CAAQ,OAAA,GAAU,IAAA,CAAK,GAAA,EAAI,EAAG;AAChC,QAAA,OAAO,IAAA;AAAA,MACT;AAEA,MAAA,OAAO,OAAA;AAAA,IACT,SAAS,KAAA,EAAO;AAEd,MAAA,IAAI,OAAA,CAAQ,IAAI,iBAAA,EAAmB;AACjC,QAAA,OAAA,CAAQ,IAAA,CAAK,yCAAyC,KAAK,CAAA;AAAA,MAC7D;AACA,MAAA,OAAO,IAAA;AAAA,IACT;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,QAAA,EAAsC;AAC1C,IAAA,IAAI;AACF,MAAA,QAAA,CAAS,OAAA,CAAQ,MAAA,CAAO,IAAA,CAAK,MAAA,CAAO,UAAU,CAAA;AAAA,IAChD,SAAS,KAAA,EAAO;AAEd,MAAA,IAAI,OAAA,CAAQ,IAAI,iBAAA,EAAmB;AACjC,QAAA,OAAA,CAAQ,IAAA,CAAK,yCAAyC,KAAK,CAAA;AAAA,MAC7D;AAAA,IACF;AACA,IAAA,OAAO,QAAA;AAAA,EACT;AAAA;AAAA;AAAA;AAAA,EAKA,MAAc,QAAQ,IAAA,EAA+B;AACnD,IAAA,IAAI;AAGF,MAAA,MAAM,GAAA,GAAM,KAAK,MAAA,CAAO,aAAA;AACxB,MAAA,MAAM,OAAA,GAAU,IAAI,WAAA,EAAY,CAAE,OAAO,IAAI,CAAA;AAG7C,MAAA,MAAM,UAAA,GAAa,IAAI,UAAA,CAAW,OAAA,CAAQ,MAAM,CAAA;AAChD,MAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,OAAA,CAAQ,QAAQ,CAAA,EAAA,EAAK;AACvC,QAAA,UAAA,CAAW,CAAC,CAAA,GAAA,CAAK,OAAA,CAAQ,CAAC,CAAA,IAAK,KAAK,GAAA,CAAI,UAAA,CAAW,CAAA,GAAI,GAAA,CAAI,MAAM,CAAA;AAAA,MACnE;AAGA,MAAA,OAAO,IAAA;AAAA,QACL,KAAA,CAAM,IAAA,CAAK,UAAA,EAAY,CAAA,IAAA,KAAQ,MAAA,CAAO,aAAa,IAAI,CAAC,CAAA,CAAE,IAAA,CAAK,EAAE;AAAA,OACnE;AAAA,IACF,SAAS,KAAA,EAAO;AAEd,MAAA,OAAO,KAAK,IAAI,CAAA;AAAA,IAClB;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAc,QAAQ,IAAA,EAA+B;AACnD,IAAA,IAAI;AACF,MAAA,MAAM,GAAA,GAAM,KAAK,MAAA,CAAO,aAAA;AACxB,MAAA,MAAM,OAAA,GAAU,UAAA,CAAW,IAAA,CAAK,IAAA,CAAK,IAAI,GAAG,CAAA,CAAA,KAAK,CAAA,CAAE,UAAA,CAAW,CAAC,CAAC,CAAA;AAGhE,MAAA,MAAM,YAAA,GAAe,IAAI,UAAA,CAAW,OAAA,CAAQ,MAAM,CAAA;AAClD,MAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,OAAA,CAAQ,QAAQ,CAAA,EAAA,EAAK;AACvC,QAAA,YAAA,CAAa,CAAC,CAAA,GAAA,CAAK,OAAA,CAAQ,CAAC,CAAA,IAAK,KAAK,GAAA,CAAI,UAAA,CAAW,CAAA,GAAI,GAAA,CAAI,MAAM,CAAA;AAAA,MACrE;AAEA,MAAA,OAAO,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,YAAY,CAAA;AAAA,IAC9C,SAAS,KAAA,EAAO;AAEd,MAAA,OAAO,KAAK,IAAI,CAAA;AAAA,IAClB;AAAA,EACF;AACF,CAAA;;;AC9JO,SAAS,2BAAA,CAA4B,MAAA,GAA0C,EAAC,EAAG;AAExF,EAAA,MAAM,QAAA,GAAW,MAAA,CAAO,UAAA,GACpB,IAAI,gCAAA,CAAkB,EAAE,UAAA,EAAY,IAAA,EAAM,CAAA,GAC1C,IAAI,wBAAA,CAAc,MAAM,CAAA;AAG5B,EAAA,MAAM,iBACJ,MAAA,CAAO,eAAA,EAAiB,WAAW,MAAA,CAAO,UAAA,GACtC,IAAI,kBAAA,CAAmB;AAAA,IACrB,OAAA,EAAS,IAAA;AAAA,IACT,GAAG,MAAA,CAAO;AAAA,GACX,CAAA,GACD,IAAA;AAGN,EAAA,IAAI,OAAO,MAAA,EAAQ;AACjB,IAAA,MAAA,CAAO,OAAA,CAAQ,OAAO,MAAM,CAAA,CAAE,QAAQ,CAAC,CAAC,KAAA,EAAO,OAAO,CAAA,KAAM;AAC1D,MAAA,IAAI,OAAA,EAAS;AACX,QAAA,QAAA,CAAS,EAAA,CAAG,OAAO,OAAuC,CAAA;AAAA,MAC5D;AAAA,IACF,CAAC,CAAA;AAAA,EACH;AAEA,EAAA,MAAM;AAAA,IACJ,eAAA,GAAkB,KAAA;AAAA,IAClB,WAAA;AAAA,IACA,YAAY,EAAC;AAAA,IACb,eAAA,GAAkB;AAAA,MAChB,MAAA,EAAQ,GAAA;AAAA,MACR,OAAA,EAAS,yCAAA;AAAA,MACT,OAAA,EAAS,EAAE,cAAA,EAAgB,kBAAA;AAAmB,KAChD;AAAA,IACA,WAAA,GAAc,UAAA;AAAA,IACd,UAAA,GAAa;AAAA,GACf,GAAI,MAAA;AAEJ,EAAA,OAAO,OAAO,OAAA,KAAgD;AAC5D,IAAA,IAAI;AAEF,MAAA,MAAM,UAAA,GAAa,SAAA,CAAU,IAAA,CAAK,CAAC,OAAA,KAAY;AAC7C,QAAA,IAAI,OAAO,YAAY,QAAA,EAAU;AAC/B,UAAA,OAAO,OAAA,CAAQ,OAAA,CAAQ,QAAA,CAAS,UAAA,CAAW,OAAO,CAAA;AAAA,QACpD;AACA,QAAA,OAAO,OAAA,CAAQ,IAAA,CAAK,OAAA,CAAQ,OAAA,CAAQ,QAAQ,CAAA;AAAA,MAC9C,CAAC,CAAA;AAED,MAAA,IAAI,UAAA,EAAY;AAEd,QAAC,OAAA,CAA+B,WAAA,GAAc,EAAE,OAAA,EAAS,IAAA,EAAK;AAC9D,QAAA,OAAOC,oBAAa,IAAA,EAAK;AAAA,MAC3B;AAGA,MAAA,MAAM,kBAAkB,cAAA,GAAiB,MAAM,cAAA,CAAe,KAAA,CAAM,OAAO,CAAA,GAAI,IAAA;AAE/E,MAAA,IAAI,eAAA,EAAiB;AAEnB,QAAA,MAAMH,SAAAA,GAAWG,oBAAa,IAAA,EAAK;AAGnC,QAAAH,SAAAA,CAAS,OAAA,CAAQ,GAAA,CAAI,wBAAA,EAA0B,MAAM,CAAA;AACrD,QAAAA,SAAAA,CAAS,OAAA,CAAQ,GAAA,CAAI,qBAAA,EAAuB,gBAAgB,KAAK,CAAA;AACjE,QAAAA,UAAS,OAAA,CAAQ,GAAA,CAAI,4BAA4B,eAAA,CAAgB,UAAA,CAAW,UAAU,CAAA;AACtF,QAAAA,SAAAA,CAAS,OAAA,CAAQ,GAAA,CAAI,uBAAA,EAAyB,WAAW,CAAA;AACzD,QAAAA,SAAAA,CAAS,OAAA,CAAQ,GAAA,CAAI,0BAAA,EAA4B,gBAAgB,EAAE,CAAA;AAGnE,QAAC,QAA+B,WAAA,GAAc;AAAA,UAC5C,MAAA,EAAQ;AAAA,YACN,OAAA,EAAS,IAAA;AAAA,YACT,YAAY,eAAA,CAAgB,UAAA;AAAA,YAC5B,cAAA,EAAgB,EAAE,IAAA,EAAM,SAAA,EAAU;AAAA,YAClC,aAAA,EAAe;AAAA,cACb,IAAA,EAAM,UAAA;AAAA,cACN,MAAM,eAAA,CAAgB;AAAA,aACxB;AAAA,YACA,SAAA,sBAAe,IAAA,EAAK;AAAA,YACpB,kBAAA,EAAoB,YAAA;AAAA,YACpB,OAAA,EAAS,CAAC,mBAAmB,CAAA;AAAA,YAC7B,SAAS;AAAC,WACZ;AAAA,UACA,OAAA,EAAS,eAAA;AAAA,UACT,OAAA,EAAS;AAAA,SACX;AAGA,QAAA,MAAMI,QAAAA,GAAU;AAAA,UACd,SAAA,EAAW,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,YAAY,CAAA,IAAK,EAAA;AAAA,UAChD,YAAY,OAAA,CAAQ,EAAA,IAAM,QAAQ,OAAA,CAAQ,GAAA,CAAI,iBAAiB,CAAA,KAAM,EAAA;AAAA,UACrE,SAAS,MAAA,CAAO,WAAA,CAAY,OAAA,CAAQ,OAAA,CAAQ,SAAS,CAAA;AAAA,UACrD,KAAK,OAAA,CAAQ,GAAA;AAAA,UACb,QAAQ,OAAA,CAAQ,MAAA;AAAA,UAChB,SAAA,sBAAe,IAAA;AAAK,SACtB;AAEA,QAAA,QAAA,CAAS,IAAA,CAAK,yBAAA,EAA2B,eAAA,EAAiBA,QAAO,CAAA;AAEjE,QAAA,OAAOJ,SAAAA;AAAA,MACT;AAGA,MAAA,MAAM,SAAA,GAAY,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,YAAY,CAAA;AAClD,MAAA,MAAM,YAAY,OAAA,CAAQ,EAAA,IAAM,OAAA,CAAQ,OAAA,CAAQ,IAAI,iBAAiB,CAAA;AAGrE,MAAA,MAAM,GAAA,GAAM,IAAI,GAAA,CAAI,OAAA,CAAQ,GAAG,CAAA;AAC/B,MAAA,MAAM,aAAA,GAAgB,GAAA,CAAI,QAAA,GAAW,GAAA,CAAI,MAAA;AAEzC,MAAA,MAAM,OAAA,GAAU;AAAA,QACd,GAAI,SAAA,IAAa,EAAE,SAAA,EAAU;AAAA,QAC7B,GAAI,SAAA,IAAa,EAAE,SAAA,EAAU;AAAA,QAC7B,SAAS,MAAA,CAAO,WAAA,CAAY,OAAA,CAAQ,OAAA,CAAQ,SAAS,CAAA;AAAA,QACrD,GAAA,EAAK,aAAA;AAAA;AAAA,QACL,QAAQ,OAAA,CAAQ,MAAA;AAAA,QAChB,SAAA,sBAAe,IAAA;AAAK,OACtB;AAGA,MAAA,MAAM,MAAA,GAAS,MAAM,QAAA,CAAS,OAAA,CAAQ,OAAO,CAAA;AAG7C,MAAA,IACE,OAAO,OAAA,IACP,MAAA,CAAO,UAAA,KAAe,MAAA,CAAO,uBAAuB,EAAA,CAAA,EACpD;AAEA,QAAA,IAAI,WAAA,EAAa;AACf,UAAA,MAAM,cAAA,GAAiB,MAAM,WAAA,CAAY,OAAA,EAAS,MAAM,CAAA;AACxD,UAAA,IAAI,cAAA,EAAgB;AAClB,YAAA,OAAO,cAAA;AAAA,UACT;AAAA,QACF;AAGA,QAAA,QAAQ,eAAA;AAAiB,UACvB,KAAK,OAAA,EAAS;AACZ,YAAA,MAAMA,YAAWG,mBAAA,CAAa,IAAA;AAAA,cAC5B;AAAA,gBACE,OAAO,eAAA,CAAgB,OAAA;AAAA,gBACvB,QAAA,EAAU,IAAA;AAAA,gBACV,YAAY,MAAA,CAAO,UAAA;AAAA,gBACnB,WAAW,MAAA,CAAO;AAAA,eACpB;AAAA,cACA,EAAE,MAAA,EAAQ,eAAA,CAAgB,MAAA;AAAO,aACnC;AAEA,YAAA,IAAI,gBAAgB,OAAA,EAAS;AAC3B,cAAA,MAAA,CAAO,OAAA,CAAQ,gBAAgB,OAAO,CAAA,CAAE,QAAQ,CAAC,CAAC,GAAA,EAAK,KAAK,CAAA,KAAM;AAChE,gBAAAH,SAAAA,CAAS,OAAA,CAAQ,GAAA,CAAI,GAAA,EAAK,KAAK,CAAA;AAAA,cACjC,CAAC,CAAA;AAAA,YACH;AAGA,YAAA,QAAA,CAAS,IAAA,CAAK,eAAA,EAAiB,MAAA,EAAQ,OAAO,CAAA;AAE9C,YAAA,OAAOA,SAAAA;AAAA,UACT;AAAA,UAEA,KAAK,UAAA;AACH,YAAA,OAAOG,oBAAa,QAAA,CAAS,IAAI,IAAI,WAAA,EAAa,OAAA,CAAQ,GAAG,CAAC,CAAA;AAAA,UAEhE,KAAK,SAAA;AACH,YAAA,OAAOA,oBAAa,OAAA,CAAQ,IAAI,IAAI,UAAA,EAAY,OAAA,CAAQ,GAAG,CAAC,CAAA;AAAA,UAE9D,KAAK,KAAA;AAEH,YAAA,IAAI,OAAA,CAAQ,GAAA,CAAI,QAAA,KAAa,YAAA,EAAc;AACzC,cAAA,OAAA,CAAQ,MAAM,6BAAA,EAA+B;AAAA,gBAC3C,WAAW,OAAA,CAAQ,SAAA;AAAA,gBACnB,WAAW,OAAA,CAAQ,SAAA;AAAA,gBACnB,YAAY,MAAA,CAAO,UAAA;AAAA,gBACnB,SAAS,MAAA,CAAO,OAAA;AAAA,gBAChB,QAAA,EAAU,QAAQ,OAAA,CAAQ;AAAA,eAC3B,CAAA;AAAA,YACH;AACA,YAAA;AAAA,UAEF,KAAK,OAAA;AAAA,UACL;AAEE,YAAA,IACE,OAAO,OAAA,IACP,MAAA,CAAO,UAAA,KAAe,MAAA,CAAO,uBAAuB,EAAA,CAAA,EACpD;AACA,cAAA,QAAA,CAAS,IAAA,CAAK,eAAA,EAAiB,MAAA,EAAQ,OAAO,CAAA;AAAA,YAChD;AAEA,YAAA;AAAA;AACJ,MACF;AAGA,MAAC,QAA+B,WAAA,GAAc;AAAA,QAC5C,MAAA;AAAA,QACA,OAAA,EAAS;AAAA,OACX;AAGA,MAAA,IAAI,QAAA,GAAWA,oBAAa,IAAA,EAAK;AACjC,MAAA,QAAA,CAAS,QAAQ,GAAA,CAAI,wBAAA,EAA0B,MAAA,CAAO,OAAA,CAAQ,UAAU,CAAA;AACxE,MAAA,QAAA,CAAS,QAAQ,GAAA,CAAI,0BAAA,EAA4B,MAAA,CAAO,UAAA,CAAW,UAAU,CAAA;AAG7E,MAAA,IAAI,MAAA,CAAO,eAAe,IAAA,EAAM;AAC9B,QAAA,QAAA,CAAS,OAAA,CAAQ,GAAA,CAAI,qBAAA,EAAuB,MAAA,CAAO,cAAc,IAAI,CAAA;AAAA,MACvE;AAGA,MAAA,IACE,kBACA,MAAA,CAAO,OAAA,IACP,OAAO,UAAA,KAAe,MAAA,CAAO,uBAAuB,EAAA,CAAA,EACpD;AACA,QAAA,QAAA,GAAW,MAAM,cAAA,CAAe,KAAA,CAAM,OAAA,EAAS,UAAU,MAAM,CAAA;AAC/D,QAAA,QAAA,CAAS,OAAA,CAAQ,GAAA,CAAI,uBAAA,EAAyB,KAAK,CAAA;AAGnD,QAAA,QAAA,CAAS,IAAA,CAAK,uBAAA,EAAyB,MAAA,EAAQ,OAAO,CAAA;AAAA,MACxD;AAEA,MAAA,OAAO,QAAA;AAAA,IACT,SAAS,KAAA,EAAO;AACd,MAAA,OAAA,CAAQ,KAAA,CAAM,iCAAiC,KAAK,CAAA;AACpD,MAAA,OAAOA,oBAAa,IAAA,EAAK;AAAA,IAC3B;AAAA,EACF,CAAA;AACF;AAKO,SAAS,WAAA,CAAY,MAAA,GAA0C,EAAC,EAAG;AACxE,EAAA,OAAO,4BAA4B,MAAM,CAAA;AAC3C","file":"middleware.js","sourcesContent":["/**\n * Ed25519 Signature Verification for HTTP Message Signatures\n * Implements proper cryptographic verification for ChatGPT and other agents\n *\n * Based on RFC 9421 (HTTP Message Signatures) and ChatGPT's implementation\n * Reference: https://help.openai.com/en/articles/9785974-chatgpt-user-allowlisting\n */\n\nimport * as ed25519 from '@noble/ed25519';\nimport { sha512 } from '@noble/hashes/sha2.js';\n\n// Configure @noble/ed25519 to use sync SHA-512 from @noble/hashes\n// This works in all environments including Edge Runtime\ned25519.etc.sha512Sync = (...m) => sha512(ed25519.etc.concatBytes(...m));\n\n/**\n * Known public keys for AI agents (fallback)\n *\n * IMPORTANT: These keys are used as fallback when the API is unavailable.\n * The primary source of keys should be the /api/internal/signature-keys endpoint\n * which fetches from https://chatgpt.com/.well-known/http-message-signatures-directory\n *\n * TODO: Implement automated key rotation by:\n * 1. Setting up a cron job to fetch from OpenAI's well-known endpoint\n * 2. Storing keys in database/KV store with proper expiration handling\n * 3. Removing hardcoded fallback keys entirely\n */\nconst KNOWN_KEYS = {\n  chatgpt: [\n    {\n      kid: 'otMqcjr17mGyruktGvJU8oojQTSMHlVm7uO-lrcqbdg',\n      // ChatGPT's current Ed25519 public key (base64)\n      // Source: https://chatgpt.com/.well-known/http-message-signatures-directory\n      publicKey: '7F_3jDlxaquwh291MiACkcS3Opq88NksyHiakzS-Y1g',\n      validFrom: 1735689600, // Jan 1, 2025 (from OpenAI's nbf)\n      // Extended expiration as fallback safety - API fetch should provide fresh keys\n      // Check OpenAI's well-known endpoint for actual expiration dates\n      validUntil: 1799625600, // Jan 1, 2027 (extended for fallback safety)\n    },\n  ],\n};\n\n/**\n * In-memory cache for API-fetched keys\n */\ninterface CachedKeys {\n  keys: Array<{\n    kid: string;\n    publicKey: string;\n    validFrom: number;\n    validUntil: number;\n  }>;\n  cachedAt: number;\n}\n\nconst keyCache = new Map<string, CachedKeys>();\nconst CACHE_TTL_MS = 5 * 60 * 1000; // 5 minutes\nconst CACHE_MAX_SIZE = 100; // Maximum cache entries before cleanup\n\n/**\n * Get API base URL for fetching keys\n * Returns absolute URL for server-side, relative for browser\n */\nfunction getApiBaseUrl(): string {\n  if (typeof window !== 'undefined') {\n    // Browser: use relative path\n    return '/api/internal';\n  }\n\n  // Server-side: must use absolute URL\n  // Try environment variables first\n  const baseUrl =\n    process.env.NEXT_PUBLIC_APP_URL ||\n    process.env.NEXT_PUBLIC_API_URL ||\n    process.env.API_URL ||\n    (process.env.VERCEL_URL ? `https://${process.env.VERCEL_URL}` : null);\n\n  if (baseUrl) {\n    return baseUrl.replace(/\\/$/, '') + '/api/internal';\n  }\n\n  // Fallback: try to construct from request context if available\n  // For middleware/edge runtime, we may need to pass the request URL\n  // For now, return relative path and log warning\n  if (process.env.NODE_ENV !== 'production') {\n    console.warn(\n      '[Signature] No base URL configured for server-side fetch. Using localhost fallback.'\n    );\n    return 'http://localhost:3000/api/internal';\n  }\n\n  // Production fallback - should not reach here if properly configured\n  console.error(\n    '[Signature] CRITICAL: No base URL configured for server-side fetch in production!'\n  );\n  return '/api/internal'; // Will fail, but prevents silent success\n}\n\n/**\n * Clean up expired cache entries and enforce size limit\n * Called periodically to prevent unbounded memory growth\n * Uses LRU-style eviction: removes expired entries first, then oldest entries if still over limit\n */\nfunction cleanupExpiredCache(): void {\n  const now = Date.now();\n  const entriesToDelete: string[] = [];\n\n  // First pass: remove expired entries\n  for (const [agent, cached] of keyCache.entries()) {\n    if (now - cached.cachedAt > CACHE_TTL_MS) {\n      entriesToDelete.push(agent);\n    }\n  }\n\n  for (const agent of entriesToDelete) {\n    keyCache.delete(agent);\n  }\n\n  // Second pass: if still over limit, remove oldest entries (LRU eviction)\n  if (keyCache.size > CACHE_MAX_SIZE) {\n    // Convert entries to array with cachedAt timestamp for sorting\n    const entries = Array.from(keyCache.entries()).map(([agent, cached]) => ({\n      agent,\n      cachedAt: cached.cachedAt,\n    }));\n\n    // Sort by cachedAt (oldest first)\n    entries.sort((a, b) => a.cachedAt - b.cachedAt);\n\n    // Remove oldest entries until we're under the limit\n    const toRemove = entries.slice(0, keyCache.size - CACHE_MAX_SIZE);\n    for (const entry of toRemove) {\n      keyCache.delete(entry.agent);\n    }\n  }\n}\n\n/**\n * Fetch keys from API with caching\n */\nasync function fetchKeysFromApi(agent: string): Promise<Array<{\n  kid: string;\n  publicKey: string;\n  validFrom: number;\n  validUntil: number;\n}> | null> {\n  // Periodic cleanup to prevent memory leaks\n  if (keyCache.size > CACHE_MAX_SIZE) {\n    cleanupExpiredCache();\n  }\n\n  // Check cache first\n  const cached = keyCache.get(agent);\n  if (cached && Date.now() - cached.cachedAt < CACHE_TTL_MS) {\n    return cached.keys;\n  }\n\n  // Check if fetch is available (Edge Runtime compatibility)\n  if (typeof fetch === 'undefined') {\n    console.warn('[Signature] fetch() not available in this environment');\n    return null;\n  }\n\n  try {\n    const apiBaseUrl = getApiBaseUrl();\n    const url = `${apiBaseUrl}/signature-keys?agent=${encodeURIComponent(agent)}`;\n\n    const response = await fetch(url, {\n      method: 'GET',\n      headers: {\n        'Content-Type': 'application/json',\n      },\n      // 5 second timeout\n      signal: AbortSignal.timeout(5000),\n    });\n\n    if (!response.ok) {\n      console.warn(`[Signature] Failed to fetch keys from API: ${response.status}`);\n      return null;\n    }\n\n    const data = await response.json();\n\n    if (!data.keys || !Array.isArray(data.keys) || data.keys.length === 0) {\n      console.warn(`[Signature] No keys returned from API for agent: ${agent}`);\n      return null;\n    }\n\n    // Cache the result\n    keyCache.set(agent, {\n      keys: data.keys,\n      cachedAt: Date.now(),\n    });\n\n    return data.keys;\n  } catch (error) {\n    console.warn('[Signature] Error fetching keys from API, using fallback', {\n      error: error instanceof Error ? error.message : 'Unknown error',\n      agent,\n    });\n    return null;\n  }\n}\n\n/**\n * Type guard to check if agent is a valid key in KNOWN_KEYS\n */\nfunction isValidAgent(agent: string): agent is keyof typeof KNOWN_KEYS {\n  return agent in KNOWN_KEYS;\n}\n\n/**\n * Get keys for an agent (API first, then fallback)\n */\nasync function getKeysForAgent(agent: string): Promise<\n  Array<{\n    kid: string;\n    publicKey: string;\n    validFrom: number;\n    validUntil: number;\n  }>\n> {\n  // Try API first\n  const apiKeys = await fetchKeysFromApi(agent);\n  if (apiKeys && apiKeys.length > 0) {\n    return apiKeys;\n  }\n\n  // Fallback to hardcoded keys with type guard\n  if (isValidAgent(agent)) {\n    return KNOWN_KEYS[agent];\n  }\n\n  return [];\n}\n\n/**\n * Parse the Signature-Input header according to RFC 9421\n */\nfunction parseSignatureInput(signatureInput: string): {\n  keyid: string;\n  created?: number | undefined;\n  expires?: number | undefined;\n  signedHeaders: string[];\n} | null {\n  try {\n    // Example: sig1=(\"@method\" \"@path\" \"@authority\" \"date\");keyid=\"...\";created=1234567890\n    const match = signatureInput.match(/sig1=\\((.*?)\\);(.+)/);\n    if (!match) return null;\n\n    const [, headersList, params] = match;\n\n    // Parse signed headers\n    const signedHeaders = headersList\n      ? headersList\n          .split(' ')\n          .map((h) => h.replace(/\"/g, '').trim())\n          .filter((h) => h.length > 0)\n      : [];\n\n    // Parse parameters\n    const keyidMatch = params ? params.match(/keyid=\"([^\"]+)\"/) : null;\n    const createdMatch = params ? params.match(/created=(\\d+)/) : null;\n    const expiresMatch = params ? params.match(/expires=(\\d+)/) : null;\n\n    if (!keyidMatch || !keyidMatch[1]) return null;\n\n    return {\n      keyid: keyidMatch[1],\n      created: createdMatch && createdMatch[1] ? parseInt(createdMatch[1]) : undefined,\n      expires: expiresMatch && expiresMatch[1] ? parseInt(expiresMatch[1]) : undefined,\n      signedHeaders,\n    };\n  } catch (error) {\n    console.error('[Signature] Failed to parse Signature-Input:', error);\n    return null;\n  }\n}\n\n/**\n * Build the signature base string according to RFC 9421\n * This is what gets signed\n */\nfunction buildSignatureBase(\n  method: string,\n  path: string,\n  headers: Record<string, string>,\n  signedHeaders: string[]\n): string {\n  const components: string[] = [];\n\n  for (const headerName of signedHeaders) {\n    let value: string;\n\n    switch (headerName) {\n      case '@method':\n        value = method.toUpperCase();\n        break;\n      case '@path':\n        value = path;\n        break;\n      case '@authority':\n        // Get from Host header or URL\n        value = headers['host'] || headers['Host'] || '';\n        break;\n      default: {\n        // Regular headers (case-insensitive lookup)\n        const key = Object.keys(headers).find((k) => k.toLowerCase() === headerName.toLowerCase());\n        value = key ? headers[key] || '' : '';\n        break;\n      }\n    }\n\n    // Format according to RFC 9421\n    components.push(`\"${headerName}\": ${value}`);\n  }\n\n  return components.join('\\n');\n}\n\n/**\n * Decode base64 (handles both standard and URL-safe variants)\n * URL-safe base64 uses - instead of + and _ instead of /\n */\nfunction base64ToBytes(base64: string): Uint8Array {\n  // Convert URL-safe base64 to standard base64\n  let standardBase64 = base64.replace(/-/g, '+').replace(/_/g, '/');\n\n  // Add padding if needed\n  const padding = standardBase64.length % 4;\n  if (padding) {\n    standardBase64 += '='.repeat(4 - padding);\n  }\n\n  const binaryString = atob(standardBase64);\n  return Uint8Array.from(binaryString, (c) => c.charCodeAt(0));\n}\n\n/**\n * Verify Ed25519 signature using @noble/ed25519 (works in all environments including Edge Runtime)\n * Falls back to Web Crypto API if available\n */\nasync function verifyEd25519Signature(\n  publicKeyBase64: string,\n  signatureBase64: string,\n  message: string\n): Promise<boolean> {\n  try {\n    // Decode base64 to Uint8Array (handles URL-safe base64)\n    const publicKeyBytes = base64ToBytes(publicKeyBase64);\n    const signatureBytes = base64ToBytes(signatureBase64);\n    const messageBytes = new TextEncoder().encode(message);\n\n    // Check key and signature lengths\n    if (publicKeyBytes.length !== 32) {\n      console.error('[Signature] Invalid public key length:', publicKeyBytes.length);\n      return false;\n    }\n    if (signatureBytes.length !== 64) {\n      console.error('[Signature] Invalid signature length:', signatureBytes.length);\n      return false;\n    }\n\n    // Use @noble/ed25519 with sync SHA-512 - works in all environments including Edge Runtime\n    return ed25519.verify(signatureBytes, messageBytes, publicKeyBytes);\n  } catch (nobleError) {\n    console.warn('[Signature] @noble/ed25519 failed, trying Web Crypto fallback:', nobleError);\n\n    // Fallback to Web Crypto API (may not work in Edge Runtime)\n    try {\n      const publicKeyBytes = base64ToBytes(publicKeyBase64);\n      const signatureBytes = base64ToBytes(signatureBase64);\n      const messageBytes = new TextEncoder().encode(message);\n\n      const publicKey = await crypto.subtle.importKey(\n        'raw',\n        publicKeyBytes.buffer as ArrayBuffer,\n        {\n          name: 'Ed25519',\n          namedCurve: 'Ed25519',\n        },\n        false,\n        ['verify']\n      );\n\n      return await crypto.subtle.verify(\n        'Ed25519',\n        publicKey,\n        signatureBytes.buffer as ArrayBuffer,\n        messageBytes\n      );\n    } catch (cryptoError) {\n      console.error('[Signature] Both @noble/ed25519 and Web Crypto failed:', {\n        nobleError: nobleError instanceof Error ? nobleError.message : 'Unknown',\n        cryptoError: cryptoError instanceof Error ? cryptoError.message : 'Unknown',\n      });\n      return false;\n    }\n  }\n}\n\n/**\n * Signature verification result\n */\nexport interface SignatureVerificationResult {\n  isValid: boolean;\n  agent?: string;\n  keyid?: string;\n  confidence: number;\n  reason?: string;\n  verificationMethod: 'signature' | 'none';\n}\n\n/**\n * Verify HTTP Message Signature for AI agents\n */\nexport async function verifyAgentSignature(\n  method: string,\n  path: string,\n  headers: Record<string, string>\n): Promise<SignatureVerificationResult> {\n  // Check for signature headers\n  const signature = headers['signature'] || headers['Signature'];\n  const signatureInput = headers['signature-input'] || headers['Signature-Input'];\n  const signatureAgent = headers['signature-agent'] || headers['Signature-Agent'];\n\n  // No signature present\n  if (!signature || !signatureInput) {\n    return {\n      isValid: false,\n      confidence: 0,\n      reason: 'No signature headers present',\n      verificationMethod: 'none',\n    };\n  }\n\n  // Parse Signature-Input header\n  const parsed = parseSignatureInput(signatureInput);\n  if (!parsed) {\n    return {\n      isValid: false,\n      confidence: 0,\n      reason: 'Invalid Signature-Input header',\n      verificationMethod: 'none',\n    };\n  }\n\n  // Check timestamp if present\n  if (parsed.created) {\n    const now = Math.floor(Date.now() / 1000);\n    const age = now - parsed.created;\n\n    // Reject signatures older than 5 minutes\n    if (age > 300) {\n      return {\n        isValid: false,\n        confidence: 0,\n        reason: 'Signature expired (older than 5 minutes)',\n        verificationMethod: 'none',\n      };\n    }\n\n    // Reject signatures from the future (clock skew tolerance: 30 seconds)\n    if (age < -30) {\n      return {\n        isValid: false,\n        confidence: 0,\n        reason: 'Signature timestamp is in the future',\n        verificationMethod: 'none',\n      };\n    }\n  }\n\n  // Determine which agent based on signature-agent header\n  let agent: string | undefined;\n  let agentKey: string | undefined;\n\n  if (signatureAgent === '\"https://chatgpt.com\"' || signatureAgent?.includes('chatgpt.com')) {\n    agent = 'ChatGPT';\n    agentKey = 'chatgpt';\n  }\n  // Add other agents here as needed\n\n  if (!agent || !agentKey) {\n    return {\n      isValid: false,\n      confidence: 0,\n      reason: 'Unknown signature agent',\n      verificationMethod: 'none',\n    };\n  }\n\n  // Get keys (API first, then fallback)\n  const knownKeys = await getKeysForAgent(agentKey);\n\n  if (knownKeys.length === 0) {\n    return {\n      isValid: false,\n      confidence: 0,\n      reason: 'No keys available for agent',\n      verificationMethod: 'none',\n    };\n  }\n\n  // Find the key by ID\n  const key = knownKeys.find((k) => k.kid === parsed.keyid);\n  if (!key) {\n    return {\n      isValid: false,\n      confidence: 0,\n      reason: `Unknown key ID: ${parsed.keyid}`,\n      verificationMethod: 'none',\n    };\n  }\n\n  // Check key validity period\n  const now = Math.floor(Date.now() / 1000);\n  if (now < key.validFrom || now > key.validUntil) {\n    return {\n      isValid: false,\n      confidence: 0,\n      reason: 'Key is not valid at current time',\n      verificationMethod: 'none',\n    };\n  }\n\n  // Build the signature base string\n  const signatureBase = buildSignatureBase(method, path, headers, parsed.signedHeaders);\n\n  // Extract the actual signature value (remove \"sig1=:\" prefix and \"::\" suffix if present)\n  let signatureValue = signature;\n  if (signatureValue.startsWith('sig1=:')) {\n    signatureValue = signatureValue.substring(6);\n  }\n  if (signatureValue.endsWith(':')) {\n    signatureValue = signatureValue.slice(0, -1);\n  }\n\n  // Verify the signature\n  const isValid = await verifyEd25519Signature(key.publicKey, signatureValue, signatureBase);\n\n  if (isValid) {\n    return {\n      isValid: true,\n      agent,\n      keyid: parsed.keyid,\n      confidence: 1.0, // 100% confidence for valid signature\n      verificationMethod: 'signature',\n    };\n  } else {\n    return {\n      isValid: false,\n      confidence: 0,\n      reason: 'Signature verification failed',\n      verificationMethod: 'none',\n    };\n  }\n}\n\n/**\n * Quick check if signature headers are present (for performance)\n */\nexport function hasSignatureHeaders(headers: Record<string, string>): boolean {\n  return !!(\n    (headers['signature'] || headers['Signature']) &&\n    (headers['signature-input'] || headers['Signature-Input'])\n  );\n}\n\n/**\n * Check if this is a ChatGPT signature based on headers\n * Uses secure URL parsing to prevent spoofing attacks\n */\nexport function isChatGPTSignature(headers: Record<string, string>): boolean {\n  const signatureAgent = headers['signature-agent'] || headers['Signature-Agent'];\n\n  if (!signatureAgent) {\n    return false;\n  }\n\n  // Strip leading/trailing quotes if present\n  const agentUrlStr = signatureAgent.replace(/^\"+|\"+$/g, '');\n\n  // Exact match for the standard ChatGPT signature agent\n  if (agentUrlStr === 'https://chatgpt.com') {\n    return true;\n  }\n\n  // Parse URL and validate host to prevent spoofing\n  try {\n    const agentUrl = new URL(agentUrlStr);\n    const allowedHosts = ['chatgpt.com', 'www.chatgpt.com'];\n    return allowedHosts.includes(agentUrl.host);\n  } catch {\n    // Not a valid URL, return false for security\n    return false;\n  }\n}\n","/**\n * Wrapper for EdgeAgentDetector to match AgentDetector interface\n * This allows the middleware to work with EdgeAgentDetector in Edge Runtime\n *\n * This is a self-contained implementation to avoid import resolution issues\n * Includes proper Ed25519 signature verification for ChatGPT and other agents\n */\n\ntype DetectionInput = {\n  userAgent?: string;\n  ip?: string;\n  ipAddress?: string;\n  headers?: Record<string, string>;\n  url?: string;\n  method?: string;\n  timestamp?: Date;\n};\n\n// Import the proper DetectionResult type from shared package\nimport type { DetectionResult } from '@kya-os/agentshield-shared';\n\ntype EventHandler = (...args: unknown[]) => void;\n\n// Import signature verifier\nimport {\n  verifyAgentSignature,\n  hasSignatureHeaders,\n  isChatGPTSignature,\n} from './signature-verifier';\nimport {\n  loadRulesSync,\n  type DetectionRules,\n  type UserAgentRule,\n  type HeaderRule,\n  type IpRangeRule,\n} from '@kya-os/agentshield-shared';\n\n// Load centralized rules - this will fail fast if rules cannot be loaded\nconst rules: DetectionRules = loadRulesSync();\n\n/**\n * Self-contained EdgeAgentDetector implementation with proper signature verification\n */\nclass EdgeAgentDetector {\n  private rules: DetectionRules;\n\n  constructor() {\n    this.rules = rules;\n  }\n\n  async analyze(input: DetectionInput): Promise<DetectionResult> {\n    const reasons: string[] = [];\n    let detectedAgent: { type: string; name: string } | undefined;\n    let verificationMethod: string | undefined;\n    let confidence = 0;\n\n    const headers = input.headers || {};\n    const normalizedHeaders: Record<string, string> = {};\n\n    // Normalize header names to lowercase\n    for (const [key, value] of Object.entries(headers)) {\n      normalizedHeaders[key.toLowerCase()] = value;\n    }\n\n    // Check for HTTP Message Signatures with proper cryptographic verification\n    if (hasSignatureHeaders(headers)) {\n      try {\n        // Verify the signature cryptographically\n        const signatureResult = await verifyAgentSignature(\n          input.method || 'GET',\n          input.url || '/',\n          headers\n        );\n\n        if (signatureResult.isValid) {\n          // Valid cryptographic signature - highest confidence (convert 0-1 to 0-100)\n          confidence = signatureResult.confidence * 100;\n          reasons.push(`verified_signature:${signatureResult.agent?.toLowerCase() || 'unknown'}`);\n          if (signatureResult.agent) {\n            detectedAgent = {\n              type: signatureResult.agent.toLowerCase(),\n              name: signatureResult.agent,\n            };\n          }\n          verificationMethod = signatureResult.verificationMethod;\n\n          // Add keyid to reasons for debugging\n          if (signatureResult.keyid) {\n            reasons.push(`keyid:${signatureResult.keyid}`);\n          }\n        } else {\n          // Invalid signature - suspicious\n          console.warn('[EdgeAgentDetector] Signature verification failed:', {\n            reason: signatureResult.reason,\n            agent: signatureResult.agent,\n            hasSignatureAgent: !!headers['signature-agent'] || !!headers['Signature-Agent'],\n            signatureAgentValue: headers['signature-agent'] || headers['Signature-Agent'],\n          });\n          confidence = Math.max(confidence, 30); // Updated to 0-100 scale (was 0.3)\n          reasons.push('invalid_signature');\n          if (signatureResult.reason) {\n            reasons.push(`signature_error:${signatureResult.reason}`);\n          }\n\n          // Still check if it claims to be ChatGPT\n          if (isChatGPTSignature(headers)) {\n            reasons.push('claims_chatgpt');\n            detectedAgent = { type: 'chatgpt', name: 'ChatGPT (unverified)' };\n          }\n        }\n      } catch (error) {\n        // Error during verification\n        console.error('[EdgeAgentDetector] Signature verification error:', error);\n        confidence = Math.max(confidence, 20); // Updated to 0-100 scale (was 0.2)\n        reasons.push('signature_verification_error');\n      }\n    }\n\n    // Check User-Agent patterns using centralized rules\n    // Sort rules to check more specific patterns first (generic_bot last)\n    const userAgent = input.userAgent || input.headers?.['user-agent'] || '';\n    if (userAgent) {\n      const userAgentEntries = Object.entries(this.rules.rules.userAgents);\n      // Sort: put generic_bot, dev_tools, automation_tools last since they have broad patterns\n      const genericKeys = ['generic_bot', 'dev_tools', 'automation_tools'];\n      const sortedEntries = userAgentEntries.sort((a, b) => {\n        const aIsGeneric = genericKeys.includes(a[0]);\n        const bIsGeneric = genericKeys.includes(b[0]);\n        if (aIsGeneric && !bIsGeneric) return 1;\n        if (!aIsGeneric && bIsGeneric) return -1;\n        return 0;\n      });\n\n      for (const [agentKey, agentRule] of sortedEntries) {\n        const rule = agentRule as UserAgentRule;\n        const matched = rule.patterns.some((pattern: string) => {\n          const regex = new RegExp(pattern, 'i');\n          return regex.test(userAgent);\n        });\n\n        if (matched) {\n          const agentType = this.getAgentType(agentKey);\n          const agentName = this.getAgentName(agentKey);\n\n          confidence = Math.max(confidence, rule.confidence * 100); // Convert 0-1 rule confidence to 0-100 scale\n          reasons.push(`known_pattern:${agentType}`);\n          if (!detectedAgent) {\n            detectedAgent = { type: agentType, name: agentName };\n            verificationMethod = 'pattern';\n          }\n          break;\n        }\n      }\n    }\n\n    // Check AI-specific headers using centralized rules\n    const suspiciousHeaders = this.rules.rules.headers.suspicious;\n    const foundAiHeaders = suspiciousHeaders.filter(\n      (headerRule: HeaderRule) => normalizedHeaders[headerRule.name.toLowerCase()]\n    );\n\n    if (foundAiHeaders.length > 0) {\n      const maxConfidence = Math.max(...foundAiHeaders.map((h: HeaderRule) => h.confidence * 100)); // Convert 0-1 to 0-100\n      confidence = Math.max(confidence, maxConfidence);\n      reasons.push(`ai_headers:${foundAiHeaders.length}`);\n    }\n\n    // Check cloud provider IPs using centralized rules\n    const ip = input.ip || input.ipAddress;\n    if (ip && !normalizedHeaders['x-forwarded-for'] && !normalizedHeaders['x-real-ip']) {\n      // Handle both old (with providers) and new (direct) structures\n      const ipRanges =\n        'providers' in this.rules.rules.ipRanges\n          ? this.rules.rules.ipRanges.providers\n          : this.rules.rules.ipRanges;\n\n      for (const [provider, ipRule] of Object.entries(ipRanges)) {\n        // Skip non-rule entries\n        if (\n          !ipRule ||\n          typeof ipRule !== 'object' ||\n          !('ranges' in ipRule) ||\n          !Array.isArray(ipRule.ranges)\n        )\n          continue;\n\n        const matched = ipRule.ranges.some((range: string) => {\n          const prefix = range.split('/')[0];\n          const prefixParts = prefix.split('.');\n          const ipParts = ip.split('.');\n\n          // Check if IP starts with the same octets\n          for (let i = 0; i < Math.min(prefixParts.length - 1, 2); i++) {\n            if (prefixParts[i] !== ipParts[i] && prefixParts[i] !== '0') {\n              return false;\n            }\n          }\n          return true;\n        });\n\n        if (matched) {\n          const rule = ipRule as IpRangeRule;\n          confidence = Math.max(confidence, rule.confidence * 40); // Convert 0-1 to 0-100 with 0.4 reduction factor\n          reasons.push(`cloud_provider:${provider}`);\n          break;\n        }\n      }\n    }\n\n    // Boost confidence for combinations (but not if already at 100 from signature)\n    if (reasons.length > 2 && confidence < 100) {\n      confidence = Math.min(confidence * 1.2, 95); // Cap at 95 to leave room for cryptographic verification\n    }\n\n    // Ensure confidence stays within 0-100 range\n    confidence = Math.min(Math.max(confidence, 0), 100);\n\n    return {\n      isAgent: confidence > 30, // Updated to 0-100 scale (was 0.3)\n      confidence,\n      detectionClass:\n        confidence > 30 && detectedAgent // Updated to 0-100 scale\n          ? { type: 'AiAgent' as const, agentType: detectedAgent.name }\n          : confidence > 30 // Updated to 0-100 scale\n            ? { type: 'Unknown' as const }\n            : { type: 'Human' as const },\n      signals: [], // Will be populated by enhanced detection engine in future tasks\n      ...(detectedAgent && { detectedAgent }),\n      reasons,\n      ...(verificationMethod && {\n        verificationMethod: verificationMethod as\n          | 'signature'\n          | 'pattern'\n          | 'behavioral'\n          | 'network'\n          | 'mcp_i_handshake'\n          | 'none',\n      }),\n      forgeabilityRisk:\n        verificationMethod === 'signature' ? 'low' : confidence > 80 ? 'medium' : 'high', // Updated to 0-100 scale\n      timestamp: new Date(),\n    };\n  }\n\n  /**\n   * Get agent type from rule key\n   */\n  private getAgentType(agentKey: string): string {\n    const typeMap: Record<string, string> = {\n      openai_gptbot: 'openai',\n      anthropic_claude: 'anthropic',\n      perplexity_bot: 'perplexity',\n      google_ai: 'google',\n      microsoft_ai: 'microsoft',\n      meta_ai: 'meta',\n      cohere_bot: 'cohere',\n      huggingface_bot: 'huggingface',\n      generic_bot: 'generic',\n      dev_tools: 'dev',\n      automation_tools: 'automation',\n    };\n    return typeMap[agentKey] || agentKey;\n  }\n\n  /**\n   * Get agent name from rule key\n   */\n  private getAgentName(agentKey: string): string {\n    const nameMap: Record<string, string> = {\n      openai_gptbot: 'ChatGPT/GPTBot',\n      anthropic_claude: 'Claude',\n      perplexity_bot: 'Perplexity',\n      google_ai: 'Google AI',\n      microsoft_ai: 'Microsoft Copilot',\n      meta_ai: 'Meta AI',\n      cohere_bot: 'Cohere',\n      huggingface_bot: 'HuggingFace',\n      generic_bot: 'Generic Bot',\n      dev_tools: 'Development Tool',\n      automation_tools: 'Automation Tool',\n    };\n    return nameMap[agentKey] || agentKey;\n  }\n}\n\n/**\n * Wrapper that provides event emitter functionality\n */\nexport class EdgeAgentDetectorWrapper {\n  private detector: EdgeAgentDetector;\n  private events: Map<string, EventHandler[]> = new Map();\n\n  constructor(_config?: unknown) {\n    // Config is accepted but not used by EdgeAgentDetector\n    this.detector = new EdgeAgentDetector();\n  }\n\n  async analyze(input: DetectionInput): Promise<DetectionResult> {\n    const result = await this.detector.analyze(input);\n\n    // Emit events if there are listeners\n    if (result.isAgent && this.events.has('agent.detected')) {\n      const handlers = this.events.get('agent.detected') || [];\n      handlers.forEach((handler) => handler(result, input));\n    }\n\n    return result;\n  }\n\n  on(event: string, handler: EventHandler): void {\n    if (!this.events.has(event)) {\n      this.events.set(event, []);\n    }\n    this.events.get(event)!.push(handler);\n  }\n\n  emit(event: string, ...args: unknown[]): void {\n    const handlers = this.events.get(event) || [];\n    handlers.forEach((handler) => handler(...args));\n  }\n\n  async init(): Promise<void> {\n    // EdgeAgentDetector doesn't need initialization\n    return;\n  }\n}\n","/**\n * WASM Loader for AgentShield in Edge Runtime\n * Handles loading and initialization of WebAssembly module\n *\n * IMPORTANT: wasm-bindgen Import Names Limitation\n * ================================================\n * The import function names (e.g., __wbg_log_1d3ae13c3d5e6b8e) are generated\n * by wasm-bindgen with hash suffixes that change with each WASM rebuild.\n * If the WASM module is rebuilt, these function names MUST be updated to match\n * the new exports from wasm-pack.\n *\n * To get the correct function names after a WASM rebuild:\n * 1. Run `wasm-pack build --target web` in the rust/crates/agentshield-wasm directory\n * 2. Check the generated `agentshield_wasm_bg.js` file for the actual export names\n * 3. Update the import object in this file to match\n *\n * TODO: Consider using the generated JS bindings from wasm-pack instead of\n * manually specifying imports, or add CI verification to catch mismatches.\n */\n\n// Dynamic WASM loading - no direct imports to avoid build issues\nlet wasmInstance: WebAssembly.Instance | null = null;\ninterface WasmExports {\n  detect_agent: (ptr: number, len: number) => number;\n  get_version: () => number;\n  __wbindgen_malloc: (size: number) => number;\n  __wbindgen_free: (ptr: number, size: number) => void;\n  __wbindgen_realloc: (ptr: number, oldSize: number, newSize: number) => number;\n  memory: WebAssembly.Memory;\n  [key: string]: unknown;\n}\nlet wasmExports: WasmExports | null = null;\nlet initPromise: Promise<void> | null = null;\n\n// Store the WASM module URL for runtime loading\nconst WASM_PATH = '/wasm/agentshield_wasm_bg.wasm';\n\n// Store base URL for constructing absolute URLs in Edge Runtime\nlet baseUrl: string | null = null;\n\n/**\n * Set the base URL for WASM loading (needed in Edge Runtime)\n */\nexport function setWasmBaseUrl(url: string) {\n  baseUrl = url;\n}\n\n/**\n * Construct the full WASM URL based on context\n */\nfunction getWasmUrl(): string {\n  // If we have a base URL (Edge Runtime), construct absolute URL\n  if (baseUrl) {\n    try {\n      const url = new URL(baseUrl);\n      // Use the origin to construct the full URL\n      return `${url.origin}${WASM_PATH}`;\n    } catch {\n      // Fallback to relative path if URL construction fails\n      return WASM_PATH;\n    }\n  }\n  // Default to relative path\n  return WASM_PATH;\n}\n\n/**\n * Initialize the WASM module\n * This is safe to call multiple times - it will only initialize once\n */\nexport async function initWasm(): Promise<boolean> {\n  if (wasmExports) return true;\n  if (initPromise) {\n    await initPromise;\n    return !!wasmExports;\n  }\n\n  initPromise = (async () => {\n    try {\n      // Create AbortController for timeout\n      const controller = new AbortController();\n      const timeout = setTimeout(() => controller.abort(), 3000); // 3 second timeout\n\n      try {\n        const wasmUrl = getWasmUrl();\n\n        // Try streaming compilation first (most efficient)\n        if (typeof WebAssembly.instantiateStreaming === 'function') {\n          try {\n            const response = await fetch(wasmUrl, { signal: controller.signal });\n            clearTimeout(timeout);\n\n            if (!response.ok) {\n              throw new Error(`Failed to fetch WASM: ${response.status}`);\n            }\n\n            // Clone response for streaming (in case we need to retry)\n            const streamResponse = response.clone();\n\n            // Use streaming compilation for best performance\n            const { instance } = await WebAssembly.instantiateStreaming(streamResponse, {\n              wbg: {\n                __wbg_log_1d3ae13c3d5e6b8e: (ptr: number, len: number) => {\n                  if (process.env.NODE_ENV !== 'production') {\n                    console.debug('WASM:', ptr, len);\n                  }\n                },\n                __wbindgen_throw: (ptr: number, len: number) => {\n                  throw new Error(`WASM Error at ${ptr}, length ${len}`);\n                },\n              },\n            });\n\n            wasmInstance = instance;\n            wasmExports = instance.exports as WasmExports;\n\n            if (process.env.NODE_ENV !== 'production') {\n              console.debug('[AgentShield] ✅ WASM module initialized with streaming');\n            }\n            return;\n          } catch (streamError) {\n            // If not aborted, try fallback\n            if (!controller.signal.aborted) {\n              if (process.env.NODE_ENV !== 'production') {\n                console.debug(\n                  '[AgentShield] Streaming compilation failed, falling back to standard compilation'\n                );\n              }\n            } else {\n              throw streamError;\n            }\n          }\n        }\n\n        // Fallback to standard compilation if streaming not available\n        const response = await fetch(wasmUrl, { signal: controller.signal });\n        clearTimeout(timeout);\n\n        if (!response.ok) {\n          throw new Error(`Failed to fetch WASM: ${response.status}`);\n        }\n\n        const wasmArrayBuffer = await response.arrayBuffer();\n        const compiledModule = await WebAssembly.compile(wasmArrayBuffer);\n\n        const imports = {\n          wbg: {\n            __wbg_log_1d3ae13c3d5e6b8e: (ptr: number, len: number) => {\n              if (process.env.NODE_ENV !== 'production') {\n                console.debug('WASM:', ptr, len);\n              }\n            },\n            __wbindgen_throw: (ptr: number, len: number) => {\n              throw new Error(`WASM Error at ${ptr}, length ${len}`);\n            },\n          },\n        };\n\n        wasmInstance = await WebAssembly.instantiate(compiledModule, imports);\n        wasmExports = wasmInstance.exports as WasmExports;\n\n        if (process.env.NODE_ENV !== 'production') {\n          console.debug('[AgentShield] ✅ WASM module initialized via fallback');\n        }\n      } catch (fetchError: unknown) {\n        const error = fetchError as { name?: string; message?: string };\n        if (error.name === 'AbortError') {\n          console.warn(\n            '[AgentShield] WASM fetch timed out after 3 seconds - using pattern detection'\n          );\n        } else {\n          console.warn(\n            '[AgentShield] Failed to fetch WASM file:',\n            error.message || 'Unknown error'\n          );\n        }\n        wasmExports = null;\n      }\n    } catch (error) {\n      console.error('[AgentShield] Failed to initialize WASM:', error);\n      wasmExports = null;\n    }\n  })();\n\n  await initPromise;\n  return !!wasmExports;\n}\n\n/**\n * Detect agent using WASM\n * Returns null if WASM is not available\n */\nexport async function detectAgentWithWasm(\n  userAgent: string | undefined,\n  headers: Record<string, string>,\n  ipAddress?: string\n): Promise<{\n  isAgent: boolean;\n  confidence: number;\n  agent?: string;\n  verificationMethod: string;\n  riskLevel: string;\n} | null> {\n  // Ensure WASM is initialized\n  const initialized = await initWasm();\n  if (!initialized || !wasmExports) {\n    return null;\n  }\n\n  try {\n    // Note: The actual WASM exports will depend on how wasm-bindgen generates them\n    // This is a simplified version - you may need to adjust based on actual exports\n\n    // Prepare input for WASM\n    const headersJson = JSON.stringify(headers);\n\n    // Call WASM detection function (adjust function name based on actual exports)\n    if (typeof wasmExports.detect_agent === 'function') {\n      const result = wasmExports.detect_agent(\n        userAgent || '',\n        headersJson,\n        ipAddress || '',\n        new Date().toISOString()\n      );\n\n      // Parse result (format depends on WASM implementation)\n      return {\n        isAgent: result.is_agent || false,\n        confidence: result.confidence || 0,\n        agent: result.agent,\n        verificationMethod: result.verification_method || 'wasm',\n        riskLevel: result.risk_level || 'low',\n      };\n    }\n\n    console.warn('[AgentShield] WASM exports do not include detect_agent function');\n    return null;\n  } catch (error) {\n    console.error('[AgentShield] WASM detection failed:', error);\n    return null;\n  }\n}\n\n/**\n * Get WASM version\n */\nexport async function getWasmVersion(): Promise<string | null> {\n  const initialized = await initWasm();\n  if (!initialized || !wasmExports) {\n    return null;\n  }\n\n  if (typeof wasmExports.version === 'function') {\n    return wasmExports.version();\n  }\n\n  return 'unknown';\n}\n\n/**\n * Check if WASM is available and working\n */\nexport async function isWasmAvailable(): Promise<boolean> {\n  try {\n    const initialized = await initWasm();\n    if (!initialized) return false;\n\n    // Try to get version as a simple test\n    const version = await getWasmVersion();\n    return version !== null;\n  } catch {\n    return false;\n  }\n}\n","/**\n * Enhanced EdgeAgentDetector with WASM support\n * Provides both pattern-based and WASM-based detection\n */\n\nimport { detectAgentWithWasm, initWasm, isWasmAvailable, setWasmBaseUrl } from './wasm-loader';\nimport {\n  loadRulesSync,\n  type DetectionRules,\n  type DetectionResult,\n  type DetectionInput,\n  mapVerificationMethod,\n} from '@kya-os/agentshield-shared';\n\ntype EventHandler = (...args: unknown[]) => void;\n\n// Load centralized rules - this will fail fast if rules cannot be loaded\nconst rules: DetectionRules = loadRulesSync();\n\n/**\n * EdgeAgentDetector with WASM enhancement\n */\nexport class EdgeAgentDetectorWithWasm {\n  private wasmEnabled: boolean = false;\n  private initPromise: Promise<void> | null = null;\n  private baseUrl: string | null = null;\n  private rules: DetectionRules;\n\n  constructor(private enableWasm: boolean = true) {\n    this.rules = rules;\n  }\n\n  /**\n   * Set the base URL for WASM loading in Edge Runtime\n   */\n  setBaseUrl(url: string) {\n    this.baseUrl = url;\n    setWasmBaseUrl(url);\n  }\n\n  /**\n   * Initialize the detector (including WASM if enabled)\n   */\n  async init(): Promise<void> {\n    if (!this.enableWasm) {\n      this.wasmEnabled = false;\n      return;\n    }\n\n    if (this.initPromise) {\n      await this.initPromise;\n      return;\n    }\n\n    this.initPromise = (async () => {\n      try {\n        // Try to initialize WASM\n        const wasmAvailable = await isWasmAvailable();\n\n        if (wasmAvailable) {\n          // Set base URL if provided before initializing\n          if (this.baseUrl) {\n            setWasmBaseUrl(this.baseUrl);\n          }\n          await initWasm(); // Actually initialize WASM\n          this.wasmEnabled = true;\n          // WASM detection enabled\n        } else {\n          this.wasmEnabled = false;\n          // WASM not available, using pattern detection\n        }\n      } catch (error) {\n        console.error('[AgentShield] Failed to initialize WASM:', error);\n        this.wasmEnabled = false;\n      }\n    })();\n\n    await this.initPromise;\n  }\n\n  /**\n   * Pattern-based detection (fallback)\n   */\n  private async patternDetection(input: DetectionInput): Promise<DetectionResult> {\n    const reasons: string[] = [];\n    let detectedAgent: { type: string; name: string } | undefined;\n    let verificationMethod: string | undefined;\n    let confidence = 0; // 0-100 scale\n\n    const headers = input.headers || {};\n    const normalizedHeaders: Record<string, string> = {};\n\n    // Normalize header names to lowercase\n    for (const [key, value] of Object.entries(headers)) {\n      normalizedHeaders[key.toLowerCase()] = value;\n    }\n\n    // Check for HTTP Message Signatures (highest confidence)\n    const signaturePresent = !!(\n      normalizedHeaders['signature'] || normalizedHeaders['signature-input']\n    );\n    const signatureAgent = normalizedHeaders['signature-agent'];\n\n    if (signatureAgent?.includes('chatgpt.com')) {\n      confidence = 85; // High confidence for ChatGPT signature\n      reasons.push('signature_agent:chatgpt');\n      detectedAgent = { type: 'chatgpt', name: 'ChatGPT' };\n      verificationMethod = 'signature';\n    } else if (signaturePresent) {\n      confidence = Math.max(confidence, 40); // Medium confidence for generic signature\n      reasons.push('signature_present');\n    }\n\n    // Check User-Agent patterns using centralized rules\n    const userAgent = input.userAgent || input.headers?.['user-agent'] || '';\n    if (userAgent) {\n      for (const [agentKey, agentRule] of Object.entries(this.rules.rules.userAgents)) {\n        const matched = agentRule.patterns.some((pattern) => {\n          const regex = new RegExp(pattern, 'i');\n          return regex.test(userAgent);\n        });\n\n        if (matched) {\n          const agentType = this.getAgentType(agentKey);\n          const agentName = this.getAgentName(agentKey);\n\n          confidence = Math.max(confidence, Math.round(agentRule.confidence * 0.85 * 100));\n          reasons.push(`known_pattern:${agentType}`);\n          if (!detectedAgent) {\n            detectedAgent = { type: agentType, name: agentName };\n            verificationMethod = 'pattern';\n          }\n          break;\n        }\n      }\n    }\n\n    // Check AI-specific headers using centralized rules\n    const suspiciousHeaders = this.rules.rules.headers.suspicious;\n    const foundAiHeaders = suspiciousHeaders.filter(\n      (headerRule) => normalizedHeaders[headerRule.name.toLowerCase()]\n    );\n\n    if (foundAiHeaders.length > 0) {\n      const maxConfidence = Math.max(...foundAiHeaders.map((h) => h.confidence));\n      confidence = Math.max(confidence, maxConfidence);\n      reasons.push(`ai_headers:${foundAiHeaders.length}`);\n    }\n\n    // Check cloud provider IPs using centralized rules\n    const ip = input.ip || input.ipAddress;\n    if (ip && !normalizedHeaders['x-forwarded-for'] && !normalizedHeaders['x-real-ip']) {\n      // Handle both old (with providers) and new (direct) structures\n      const ipRanges =\n        'providers' in this.rules.rules.ipRanges\n          ? this.rules.rules.ipRanges.providers\n          : this.rules.rules.ipRanges;\n\n      for (const [provider, ipRule] of Object.entries(ipRanges)) {\n        // Skip non-rule entries\n        if (\n          !ipRule ||\n          typeof ipRule !== 'object' ||\n          !('ranges' in ipRule) ||\n          !Array.isArray(ipRule.ranges)\n        )\n          continue;\n\n        const matched = ipRule.ranges.some((range: string) => {\n          const prefix = range.split('/')[0];\n          const prefixParts = prefix.split('.');\n          const ipParts = ip.split('.');\n\n          // Check if IP starts with the same octets\n          for (let i = 0; i < Math.min(prefixParts.length - 1, 2); i++) {\n            if (prefixParts[i] !== ipParts[i] && prefixParts[i] !== '0') {\n              return false;\n            }\n          }\n          return true;\n        });\n\n        if (matched) {\n          confidence = Math.max(confidence, Math.round(ipRule.confidence * 0.4 * 100));\n          reasons.push(`cloud_provider:${provider}`);\n          break;\n        }\n      }\n    }\n\n    // Boost confidence for combinations\n    if (reasons.length > 2) {\n      confidence = Math.min(Math.round(confidence * 1.2), 95);\n    }\n\n    // Ensure confidence stays within 0-100 range\n    confidence = Math.min(Math.max(confidence, 0), 100);\n\n    return {\n      isAgent: confidence > 30, // 30% threshold\n      confidence,\n      detectionClass:\n        confidence > 30 && detectedAgent\n          ? { type: 'AiAgent' as const, agentType: detectedAgent.name }\n          : confidence > 30\n            ? { type: 'Unknown' as const }\n            : { type: 'Human' as const },\n      signals: [], // Will be populated by enhanced detection engine in future tasks\n      ...(detectedAgent && { detectedAgent }),\n      reasons,\n      ...(verificationMethod && {\n        verificationMethod: mapVerificationMethod(verificationMethod),\n      }),\n      forgeabilityRisk: confidence > 80 ? 'medium' : 'high',\n      timestamp: new Date(),\n    };\n  }\n\n  /**\n   * Analyze request with WASM enhancement when available\n   */\n  async analyze(input: DetectionInput): Promise<DetectionResult> {\n    // Ensure initialization\n    await this.init();\n\n    // Try WASM detection first if enabled\n    if (this.wasmEnabled) {\n      try {\n        const wasmResult = await detectAgentWithWasm(\n          input.userAgent || input.headers?.['user-agent'],\n          input.headers || {},\n          input.ip || input.ipAddress\n        );\n\n        if (wasmResult) {\n          // WASM detection succeeded\n\n          // Map WASM result to DetectionResult\n          const detectedAgent = wasmResult.agent ? this.mapAgentName(wasmResult.agent) : undefined;\n\n          return {\n            isAgent: wasmResult.isAgent,\n            confidence: wasmResult.confidence,\n            detectionClass:\n              wasmResult.isAgent && detectedAgent\n                ? { type: 'AiAgent' as const, agentType: detectedAgent.name }\n                : wasmResult.isAgent\n                  ? { type: 'Unknown' as const }\n                  : { type: 'Human' as const },\n            signals: [], // Will be populated by enhanced detection engine in future tasks\n            ...(detectedAgent && { detectedAgent }),\n            reasons: [`wasm:${wasmResult.verificationMethod}`],\n            verificationMethod: mapVerificationMethod(wasmResult.verificationMethod),\n            forgeabilityRisk:\n              wasmResult.verificationMethod === 'signature'\n                ? 'low'\n                : wasmResult.confidence > 90\n                  ? 'medium'\n                  : 'high',\n            timestamp: new Date(),\n          };\n        }\n      } catch (error) {\n        console.error('[AgentShield] WASM detection error:', error);\n      }\n    }\n\n    // Fall back to pattern detection\n    const patternResult = await this.patternDetection(input);\n\n    // If WASM is available but didn't detect anything, boost confidence slightly\n    // to indicate WASM verification was performed\n    if (this.wasmEnabled && patternResult.confidence >= 85) {\n      patternResult.confidence = Math.min(95, patternResult.confidence + 10);\n      patternResult.reasons.push('wasm_enhanced');\n      // Note: Keep original verification method since 'wasm-enhanced' is not a valid type\n    }\n\n    return patternResult;\n  }\n\n  /**\n   * Get agent type from rule key\n   */\n  private getAgentType(agentKey: string): string {\n    const typeMap: Record<string, string> = {\n      openai_gptbot: 'openai',\n      anthropic_claude: 'anthropic',\n      perplexity_bot: 'perplexity',\n      google_ai: 'google',\n      microsoft_ai: 'microsoft',\n      meta_ai: 'meta',\n      cohere_bot: 'cohere',\n      huggingface_bot: 'huggingface',\n      generic_bot: 'generic',\n      dev_tools: 'dev',\n      automation_tools: 'automation',\n    };\n    return typeMap[agentKey] || agentKey;\n  }\n\n  /**\n   * Get agent name from rule key\n   */\n  private getAgentName(agentKey: string): string {\n    const nameMap: Record<string, string> = {\n      openai_gptbot: 'ChatGPT/GPTBot',\n      anthropic_claude: 'Claude',\n      perplexity_bot: 'Perplexity',\n      google_ai: 'Google AI',\n      microsoft_ai: 'Microsoft Copilot',\n      meta_ai: 'Meta AI',\n      cohere_bot: 'Cohere',\n      huggingface_bot: 'HuggingFace',\n      generic_bot: 'Generic Bot',\n      dev_tools: 'Development Tool',\n      automation_tools: 'Automation Tool',\n    };\n    return nameMap[agentKey] || agentKey;\n  }\n\n  /**\n   * Map agent names from WASM to consistent format\n   */\n  private mapAgentName(agent: string): { type: string; name: string } | undefined {\n    const lowerAgent = agent.toLowerCase();\n\n    if (lowerAgent.includes('chatgpt')) {\n      return { type: 'chatgpt', name: 'ChatGPT' };\n    } else if (lowerAgent.includes('claude')) {\n      return { type: 'claude', name: 'Claude' };\n    } else if (lowerAgent.includes('perplexity')) {\n      return { type: 'perplexity', name: 'Perplexity' };\n    } else if (lowerAgent.includes('bing')) {\n      return { type: 'bing', name: 'Bing AI' };\n    } else if (lowerAgent.includes('anthropic')) {\n      return { type: 'anthropic', name: 'Anthropic' };\n    }\n\n    return { type: 'unknown', name: agent };\n  }\n}\n\n/**\n * Wrapper that provides event emitter functionality\n */\nexport class EdgeAgentDetectorWrapperWithWasm {\n  private detector: EdgeAgentDetectorWithWasm;\n  private events: Map<string, EventHandler[]> = new Map();\n\n  constructor(config?: { enableWasm?: boolean; baseUrl?: string }) {\n    this.detector = new EdgeAgentDetectorWithWasm(config?.enableWasm ?? true);\n    if (config?.baseUrl) {\n      this.detector.setBaseUrl(config.baseUrl);\n    }\n  }\n\n  setBaseUrl(url: string) {\n    this.detector.setBaseUrl(url);\n  }\n\n  async analyze(input: DetectionInput): Promise<DetectionResult> {\n    const result = await this.detector.analyze(input);\n\n    // Emit events if there are listeners\n    if (result.isAgent && this.events.has('agent.detected')) {\n      const handlers = this.events.get('agent.detected') || [];\n      handlers.forEach((handler) => handler(result, input));\n    }\n\n    return result;\n  }\n\n  on(event: string, handler: EventHandler): void {\n    if (!this.events.has(event)) {\n      this.events.set(event, []);\n    }\n    this.events.get(event)!.push(handler);\n  }\n\n  emit(event: string, ...args: unknown[]): void {\n    const handlers = this.events.get(event) || [];\n    handlers.forEach((handler) => handler(...args));\n  }\n\n  async init(): Promise<void> {\n    await this.detector.init();\n  }\n}\n","/**\n * Edge-compatible session tracking for AI agents\n * Uses cookie-based storage to work in Edge Runtime\n */\n\nimport type { NextRequest, NextResponse } from 'next/server';\nimport type { DetectionResult } from '@kya-os/agentshield-shared';\n\nexport interface SessionData {\n  id: string;\n  agent: string;\n  confidence: number;\n  detectedAt: number;\n  expires: number;\n}\n\nexport interface SessionTrackingConfig {\n  enabled: boolean;\n  cookieName?: string;\n  cookieMaxAge?: number; // in seconds\n  encryptionKey?: string;\n}\n\nexport class EdgeSessionTracker {\n  private readonly config: Required<SessionTrackingConfig>;\n\n  constructor(config: SessionTrackingConfig) {\n    this.config = {\n      enabled: config.enabled,\n      cookieName: config.cookieName || '__agentshield_session',\n      cookieMaxAge: config.cookieMaxAge || 3600, // 1 hour default\n      encryptionKey:\n        config.encryptionKey ||\n        process.env.AGENTSHIELD_SECRET ||\n        'agentshield-default-key',\n    };\n  }\n\n  /**\n   * Track a new AI agent session\n   */\n  async track(\n    _request: NextRequest,\n    response: NextResponse,\n    result: DetectionResult\n  ): Promise<NextResponse> {\n    try {\n      if (!this.config.enabled || !result.isAgent) {\n        return response;\n      }\n\n      const sessionData: SessionData = {\n        id: crypto.randomUUID(),\n        agent: result.detectedAgent?.name || 'unknown',\n        confidence: result.confidence,\n        detectedAt: Date.now(),\n        expires: Date.now() + this.config.cookieMaxAge * 1000,\n      };\n\n      // Encrypt session data for security\n      const encrypted = await this.encrypt(JSON.stringify(sessionData));\n\n      // Set secure httpOnly cookie\n      response.cookies.set(this.config.cookieName, encrypted, {\n        httpOnly: true,\n        secure: process.env.NODE_ENV === 'production',\n        sameSite: 'lax',\n        maxAge: this.config.cookieMaxAge,\n        path: '/',\n      });\n\n      return response;\n    } catch (error) {\n      // Fail gracefully - log error but don't break request\n      if (process.env.DEBUG_AGENTSHIELD) {\n        console.warn('AgentShield: Failed to track session:', error);\n      }\n      return response;\n    }\n  }\n\n  /**\n   * Check for existing AI agent session\n   */\n  async check(request: NextRequest): Promise<SessionData | null> {\n    try {\n      if (!this.config.enabled) {\n        return null;\n      }\n\n      const cookie = request.cookies.get(this.config.cookieName);\n      if (!cookie?.value) {\n        return null;\n      }\n\n      // Decrypt and parse session data\n      const decrypted = await this.decrypt(cookie.value);\n      const session: SessionData = JSON.parse(decrypted);\n\n      // Check if session is expired\n      if (session.expires < Date.now()) {\n        return null;\n      }\n\n      return session;\n    } catch (error) {\n      // Fail gracefully - invalid or corrupted session\n      if (process.env.DEBUG_AGENTSHIELD) {\n        console.warn('AgentShield: Failed to check session:', error);\n      }\n      return null;\n    }\n  }\n\n  /**\n   * Clear an existing session\n   */\n  clear(response: NextResponse): NextResponse {\n    try {\n      response.cookies.delete(this.config.cookieName);\n    } catch (error) {\n      // Fail gracefully\n      if (process.env.DEBUG_AGENTSHIELD) {\n        console.warn('AgentShield: Failed to clear session:', error);\n      }\n    }\n    return response;\n  }\n\n  /**\n   * Simple encryption using Web Crypto API (Edge-compatible)\n   */\n  private async encrypt(data: string): Promise<string> {\n    try {\n      // For Edge Runtime, use simple base64 encoding with obfuscation\n      // In production, consider using Web Crypto API subtle.encrypt()\n      const key = this.config.encryptionKey;\n      const encoded = new TextEncoder().encode(data);\n\n      // Simple XOR obfuscation\n      const obfuscated = new Uint8Array(encoded.length);\n      for (let i = 0; i < encoded.length; i++) {\n        obfuscated[i] = (encoded[i] || 0) ^ key.charCodeAt(i % key.length);\n      }\n\n      // Convert to base64\n      return btoa(\n        Array.from(obfuscated, byte => String.fromCharCode(byte)).join('')\n      );\n    } catch (error) {\n      // Fallback to simple base64 if encryption fails\n      return btoa(data);\n    }\n  }\n\n  /**\n   * Simple decryption (Edge-compatible)\n   */\n  private async decrypt(data: string): Promise<string> {\n    try {\n      const key = this.config.encryptionKey;\n      const decoded = Uint8Array.from(atob(data), c => c.charCodeAt(0));\n\n      // Reverse XOR obfuscation\n      const deobfuscated = new Uint8Array(decoded.length);\n      for (let i = 0; i < decoded.length; i++) {\n        deobfuscated[i] = (decoded[i] || 0) ^ key.charCodeAt(i % key.length);\n      }\n\n      return new TextDecoder().decode(deobfuscated);\n    } catch (error) {\n      // Fallback to simple base64 if decryption fails\n      return atob(data);\n    }\n  }\n}\n\n/**\n * Stateless session checker for non-Next.js environments (Express, etc.)\n * Uses a combination of headers to identify continued sessions\n */\nexport class StatelessSessionChecker {\n  static check(headers: Record<string, string>): SessionData | null {\n    try {\n      // Check for session headers (set by previous response)\n      const agent = headers['x-agentshield-session-agent'];\n      const confidence = headers['x-agentshield-session-confidence'];\n      const sessionId = headers['x-agentshield-session-id'];\n\n      if (agent && confidence && sessionId) {\n        return {\n          id: sessionId,\n          agent,\n          confidence: parseFloat(confidence),\n          detectedAt: Date.now(),\n          expires: Date.now() + 3600000, // 1 hour\n        };\n      }\n\n      // Check for cookie-based session (if cookies are parsed)\n      const cookieHeader = headers['cookie'];\n      if (cookieHeader && cookieHeader.includes('__agentshield_session=')) {\n        // Simple cookie parsing\n        const match = cookieHeader.match(/__agentshield_session=([^;]+)/);\n        if (match && match[1]) {\n          try {\n            const decoded = atob(match[1]);\n            return JSON.parse(decoded);\n          } catch {\n            // Invalid session data\n          }\n        }\n      }\n\n      return null;\n    } catch {\n      return null;\n    }\n  }\n\n  static setHeaders(response: any, session: SessionData): void {\n    try {\n      // Set session headers for stateless tracking\n      if (response.setHeader) {\n        response.setHeader('X-AgentShield-Session-Agent', session.agent);\n        response.setHeader(\n          'X-AgentShield-Session-Confidence',\n          session.confidence.toString()\n        );\n        response.setHeader('X-AgentShield-Session-Id', session.id);\n      } else if (response.headers && response.headers.set) {\n        response.headers.set('x-agentshield-session-agent', session.agent);\n        response.headers.set(\n          'x-agentshield-session-confidence',\n          session.confidence.toString()\n        );\n        response.headers.set('x-agentshield-session-id', session.id);\n      }\n    } catch {\n      // Fail gracefully\n    }\n  }\n}\n","/**\n * Next.js middleware for AgentShield\n *\n * Uses edge-safe imports to avoid WASM in Edge Runtime\n */\n\nimport { NextRequest, NextResponse } from 'next/server';\n// Use wrapper for EdgeAgentDetector to match expected interface\nimport { EdgeAgentDetectorWrapper as AgentDetector } from './edge-detector-wrapper';\n// Import WASM-enhanced detector as an alternative\nimport { EdgeAgentDetectorWrapperWithWasm as WasmAgentDetector } from './edge-detector-with-wasm';\nimport { EdgeSessionTracker } from './session-tracker';\nimport type { NextJSMiddlewareConfig, AgentShieldRequest } from './types';\n\n/**\n * Create AgentShield middleware for Next.js\n */\nexport function createAgentShieldMiddleware(config: Partial<NextJSMiddlewareConfig> = {}) {\n  // Use WASM-enhanced detector if enableWasm is true, otherwise use pattern-only detector\n  const detector = config.enableWasm\n    ? new WasmAgentDetector({ enableWasm: true })\n    : new AgentDetector(config);\n\n  // Initialize session tracker if enabled (or if WASM is enabled)\n  const sessionTracker =\n    config.sessionTracking?.enabled || config.enableWasm\n      ? new EdgeSessionTracker({\n          enabled: true,\n          ...config.sessionTracking,\n        })\n      : null;\n\n  // Wire up event handlers if provided\n  if (config.events) {\n    Object.entries(config.events).forEach(([event, handler]) => {\n      if (handler) {\n        detector.on(event, handler as (...args: unknown[]) => void);\n      }\n    });\n  }\n\n  const {\n    onAgentDetected = 'log',\n    onDetection,\n    skipPaths = [],\n    blockedResponse = {\n      status: 403,\n      message: 'Access denied: Automated agent detected',\n      headers: { 'Content-Type': 'application/json' },\n    },\n    redirectUrl = '/blocked',\n    rewriteUrl = '/blocked',\n  } = config;\n\n  return async (request: NextRequest): Promise<NextResponse> => {\n    try {\n      // Check if path should be skipped\n      const shouldSkip = skipPaths.some((pattern) => {\n        if (typeof pattern === 'string') {\n          return request.nextUrl.pathname.startsWith(pattern);\n        }\n        return pattern.test(request.nextUrl.pathname);\n      });\n\n      if (shouldSkip) {\n        // Mark as skipped in request\n        (request as AgentShieldRequest).agentShield = { skipped: true };\n        return NextResponse.next();\n      }\n\n      // Check for existing session first\n      const existingSession = sessionTracker ? await sessionTracker.check(request) : null;\n\n      if (existingSession) {\n        // This is a continued AI agent session\n        const response = NextResponse.next();\n\n        // Set headers to indicate continued session\n        response.headers.set('x-agentshield-detected', 'true');\n        response.headers.set('x-agentshield-agent', existingSession.agent);\n        response.headers.set('x-agentshield-confidence', existingSession.confidence.toString());\n        response.headers.set('x-agentshield-session', 'continued');\n        response.headers.set('x-agentshield-session-id', existingSession.id);\n\n        // Mark request with session info\n        (request as AgentShieldRequest).agentShield = {\n          result: {\n            isAgent: true,\n            confidence: existingSession.confidence,\n            detectionClass: { type: 'AiAgent' },\n            detectedAgent: {\n              type: 'ai_agent',\n              name: existingSession.agent,\n            },\n            timestamp: new Date(),\n            verificationMethod: 'behavioral',\n            reasons: ['Session continued'],\n            signals: [],\n          },\n          session: existingSession,\n          skipped: false,\n        };\n\n        // Emit session continued event\n        const context = {\n          userAgent: request.headers.get('user-agent') || '',\n          ipAddress: (request.ip ?? request.headers.get('x-forwarded-for')) || '',\n          headers: Object.fromEntries(request.headers.entries()),\n          url: request.url,\n          method: request.method,\n          timestamp: new Date(),\n        };\n\n        detector.emit('agent.session.continued', existingSession, context);\n\n        return response;\n      }\n\n      // Prepare request context for new detection\n      const userAgent = request.headers.get('user-agent');\n      const ipAddress = request.ip ?? request.headers.get('x-forwarded-for');\n\n      // Extract path from URL for signature verification\n      const url = new URL(request.url);\n      const pathWithQuery = url.pathname + url.search;\n\n      const context = {\n        ...(userAgent && { userAgent }),\n        ...(ipAddress && { ipAddress }),\n        headers: Object.fromEntries(request.headers.entries()),\n        url: pathWithQuery, // Use path instead of full URL for signature verification\n        method: request.method,\n        timestamp: new Date(),\n      };\n\n      // Analyze request\n      const result = await detector.analyze(context);\n\n      // Handle detection result\n      if (\n        result.isAgent &&\n        result.confidence >= (config.confidenceThreshold ?? 70) // Updated to 0-100 scale (was 0.7)\n      ) {\n        // Call custom detection handler if provided\n        if (onDetection) {\n          const customResponse = await onDetection(request, result);\n          if (customResponse) {\n            return customResponse;\n          }\n        }\n\n        // Handle based on configuration\n        switch (onAgentDetected) {\n          case 'block': {\n            const response = NextResponse.json(\n              {\n                error: blockedResponse.message,\n                detected: true,\n                confidence: result.confidence,\n                timestamp: result.timestamp,\n              },\n              { status: blockedResponse.status }\n            );\n\n            if (blockedResponse.headers) {\n              Object.entries(blockedResponse.headers).forEach(([key, value]) => {\n                response.headers.set(key, value);\n              });\n            }\n\n            // Emit blocked event\n            detector.emit('agent.blocked', result, context);\n\n            return response;\n          }\n\n          case 'redirect':\n            return NextResponse.redirect(new URL(redirectUrl, request.url));\n\n          case 'rewrite':\n            return NextResponse.rewrite(new URL(rewriteUrl, request.url));\n\n          case 'log':\n            // Use console.debug for development logging\n            if (process.env.NODE_ENV !== 'production') {\n              console.debug('AgentShield: Agent detected', {\n                ipAddress: context.ipAddress,\n                userAgent: context.userAgent,\n                confidence: result.confidence,\n                reasons: result.reasons,\n                pathname: request.nextUrl.pathname,\n              });\n            }\n            break;\n\n          case 'allow':\n          default:\n            // Emit allowed event for high-confidence agents\n            if (\n              result.isAgent &&\n              result.confidence >= (config.confidenceThreshold ?? 70) // Updated to 0-100 scale (was 0.7)\n            ) {\n              detector.emit('agent.allowed', result, context);\n            }\n            // Continue processing\n            break;\n        }\n      }\n\n      // Add detection result to request for API routes\n      (request as AgentShieldRequest).agentShield = {\n        result,\n        skipped: false,\n      };\n\n      // Add detection result to response headers for debugging\n      let response = NextResponse.next();\n      response.headers.set('x-agentshield-detected', result.isAgent.toString());\n      response.headers.set('x-agentshield-confidence', result.confidence.toString());\n\n      // Add agent name if detected\n      if (result.detectedAgent?.name) {\n        response.headers.set('x-agentshield-agent', result.detectedAgent.name);\n      }\n\n      // Track new AI agent sessions\n      if (\n        sessionTracker &&\n        result.isAgent &&\n        result.confidence >= (config.confidenceThreshold ?? 70) // Updated to 0-100 scale (was 0.7)\n      ) {\n        response = await sessionTracker.track(request, response, result);\n        response.headers.set('x-agentshield-session', 'new');\n\n        // Emit new session event\n        detector.emit('agent.session.started', result, context);\n      }\n\n      return response;\n    } catch (error) {\n      console.error('AgentShield middleware error:', error);\n      return NextResponse.next(); // Continue on error\n    }\n  };\n}\n\n/**\n * Convenience function for basic setup\n */\nexport function agentShield(config: Partial<NextJSMiddlewareConfig> = {}) {\n  return createAgentShieldMiddleware(config);\n}\n"]}