@medalsocial/booking 0.0.0-placeholder.0 → 0.2.0

package/dist/next/request.mjs

@@ -0,0 +1,123 @@
+//#region src/next/request.ts
+function isLocalhost(url) {
+	let hostname = "";
+	try {
+		hostname = new URL(url).hostname.toLowerCase();
+	} catch {
+		return false;
+	}
+	return hostname === "localhost" || hostname === "127.0.0.1" || hostname === "0.0.0.0";
+}
+/**
+* The host the browser asked for: `x-forwarded-host` when present, else `host`.
+*
+* Behind a proxy the bare `host` is the last hop, not what was typed. Only the
+* first value of a comma-joined list is used — the rest are upstream hops.
+*/
+function forwardedHost(headers) {
+	return (headers.get("x-forwarded-host") ?? headers.get("host"))?.split(",")[0]?.trim();
+}
+/**
+* The origin a request arrived on, from its headers, or `fallback`.
+*
+* For code that runs inside a Server Action, which has no `Request` to read
+* `url` from the way a route handler does. `x-forwarded-host` and
+* `x-forwarded-proto` win over `host` because on Cloudflare and behind Next's
+* own proxying they name the host the browser typed; a bare `host` is the
+* last hop. HTTPS is assumed whenever the proto header is missing and the
+* host is not local — an absolute URL handed to a third party should not
+* guess `http`.
+*/
+function originFromHeaders(headers, fallback) {
+	const host = forwardedHost(headers);
+	if (!host) return fallback;
+	const origin = `${headers.get("x-forwarded-proto")?.split(",")[0]?.trim() || (isLocalhost(`http://${host}`) ? "http" : "https")}://${host}`;
+	try {
+		return new URL(origin).origin;
+	} catch {
+		return fallback;
+	}
+}
+/**
+* Whether the submission came from a page on somebody else's origin.
+*
+* The threat this answers is a page on another origin POSTing here on a
+* visitor's behalf — for which comparing the declared origin to this site's
+* own is sufficient, because a browser sets `Origin` on a cross-site POST and
+* will not let the page lie about it.
+*
+* A request that declares NEITHER `Origin` nor `Referer` is let through here;
+* the routes that mint a session refuse it on their own (`declaresNoOrigin`).
+*
+* An origin that will not parse — `null` from a sandboxed frame, or a garbled
+* one — is treated as somebody else's. It is not this site's.
+*/
+function isCrossOriginRequest(request) {
+	const declared = request.headers.get("origin") ?? request.headers.get("referer");
+	if (!declared) return false;
+	let declaredOrigin;
+	try {
+		declaredOrigin = new URL(declared).origin;
+	} catch {
+		return true;
+	}
+	let ownOrigin;
+	try {
+		ownOrigin = new URL(request.url).origin;
+	} catch {
+		return true;
+	}
+	return declaredOrigin !== originFromHeaders(request.headers, ownOrigin);
+}
+/** Neither `Origin` nor `Referer`: every browser sends `Origin` on a `fetch` POST. */
+function declaresNoOrigin(request) {
+	return !request.headers.get("origin") && !request.headers.get("referer");
+}
+/**
+* The request body as text, or `null` if it is over the ceiling.
+*
+* Read in pieces and counted in BYTES, which is the whole point of both
+* halves. `request.text()` buffers everything before anything can judge it,
+* and a decoded string's `.length` is UTF-16 code units, not bytes — so
+* measuring the decoded string against a byte limit lets a multibyte body
+* several times the ceiling straight through.
+*
+* The stream is cancelled the moment the count passes the ceiling, so the
+* remainder is never pulled across.
+*/
+async function readBoundedText(request, maxBytes) {
+	const body = request.body;
+	if (!body) {
+		const fallback = await request.text();
+		return new TextEncoder().encode(fallback).byteLength > maxBytes ? null : fallback;
+	}
+	const reader = body.getReader();
+	const chunks = [];
+	let total = 0;
+	try {
+		while (true) {
+			const { done, value } = await reader.read();
+			if (done) break;
+			if (!value) continue;
+			total += value.byteLength;
+			if (total > maxBytes) {
+				await reader.cancel();
+				return null;
+			}
+			chunks.push(value);
+		}
+	} finally {
+		reader.releaseLock();
+	}
+	const joined = new Uint8Array(total);
+	let at = 0;
+	for (const chunk of chunks) {
+		joined.set(chunk, at);
+		at += chunk.byteLength;
+	}
+	return new TextDecoder().decode(joined);
+}
+//#endregion
+export { declaresNoOrigin, isCrossOriginRequest, originFromHeaders, readBoundedText };
+
+//# sourceMappingURL=request.mjs.map

package/dist/next/request.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"request.mjs","names":[],"sources":["../../src/next/request.ts"],"sourcesContent":["/**\n * The request guards the portal routes share: same-origin checks, a bounded\n * body read and the origin a request arrived on.\n */\n\n/** The subset of `Headers` these helpers read. Keeps them callable from tests. */\nexport type RequestHeaders = { get(name: string): string | null };\n\nfunction isLocalhost(url: string): boolean {\n  let hostname = '';\n  try {\n    hostname = new URL(url).hostname.toLowerCase();\n  } catch {\n    return false;\n  }\n  return hostname === 'localhost' || hostname === '127.0.0.1' || hostname === '0.0.0.0';\n}\n\n/**\n * The host the browser asked for: `x-forwarded-host` when present, else `host`.\n *\n * Behind a proxy the bare `host` is the last hop, not what was typed. Only the\n * first value of a comma-joined list is used — the rest are upstream hops.\n */\nfunction forwardedHost(headers: RequestHeaders): string | undefined {\n  return (headers.get('x-forwarded-host') ?? headers.get('host'))?.split(',')[0]?.trim();\n}\n\n/**\n * The origin a request arrived on, from its headers, or `fallback`.\n *\n * For code that runs inside a Server Action, which has no `Request` to read\n * `url` from the way a route handler does. `x-forwarded-host` and\n * `x-forwarded-proto` win over `host` because on Cloudflare and behind Next's\n * own proxying they name the host the browser typed; a bare `host` is the\n * last hop. HTTPS is assumed whenever the proto header is missing and the\n * host is not local — an absolute URL handed to a third party should not\n * guess `http`.\n */\nexport function originFromHeaders(headers: RequestHeaders, fallback: string): string {\n  const host = forwardedHost(headers);\n  if (!host) return fallback;\n  const forwardedProto = headers.get('x-forwarded-proto')?.split(',')[0]?.trim();\n  const proto = forwardedProto || (isLocalhost(`http://${host}`) ? 'http' : 'https');\n  const origin = `${proto}://${host}`;\n  try {\n    return new URL(origin).origin;\n  } catch {\n    return fallback;\n  }\n}\n\n/**\n * Whether the submission came from a page on somebody else's origin.\n *\n * The threat this answers is a page on another origin POSTing here on a\n * visitor's behalf — for which comparing the declared origin to this site's\n * own is sufficient, because a browser sets `Origin` on a cross-site POST and\n * will not let the page lie about it.\n *\n * A request that declares NEITHER `Origin` nor `Referer` is let through here;\n * the routes that mint a session refuse it on their own (`declaresNoOrigin`).\n *\n * An origin that will not parse — `null` from a sandboxed frame, or a garbled\n * one — is treated as somebody else's. It is not this site's.\n */\nexport function isCrossOriginRequest(request: Request): boolean {\n  const declared = request.headers.get('origin') ?? request.headers.get('referer');\n  if (!declared) return false;\n\n  let declaredOrigin: string;\n  try {\n    declaredOrigin = new URL(declared).origin;\n  } catch {\n    return true;\n  }\n\n  // The host the browser typed, not the last hop: on Cloudflare the Worker's\n  // own `request.url` can name an internal hostname the `Origin` never will.\n  let ownOrigin: string;\n  try {\n    ownOrigin = new URL(request.url).origin;\n  } catch {\n    return true;\n  }\n  return declaredOrigin !== originFromHeaders(request.headers, ownOrigin);\n}\n\n/** Neither `Origin` nor `Referer`: every browser sends `Origin` on a `fetch` POST. */\nexport function declaresNoOrigin(request: Request): boolean {\n  return !request.headers.get('origin') && !request.headers.get('referer');\n}\n\n/**\n * The request body as text, or `null` if it is over the ceiling.\n *\n * Read in pieces and counted in BYTES, which is the whole point of both\n * halves. `request.text()` buffers everything before anything can judge it,\n * and a decoded string's `.length` is UTF-16 code units, not bytes — so\n * measuring the decoded string against a byte limit lets a multibyte body\n * several times the ceiling straight through.\n *\n * The stream is cancelled the moment the count passes the ceiling, so the\n * remainder is never pulled across.\n */\nexport async function readBoundedText(request: Request, maxBytes: number): Promise<string | null> {\n  const body = request.body;\n  // No stream to read — an empty body, or a runtime that does not expose one.\n  // `text()` is bounded by the same ceiling rather than trusted.\n  if (!body) {\n    const fallback = await request.text();\n    return new TextEncoder().encode(fallback).byteLength > maxBytes ? null : fallback;\n  }\n\n  const reader = body.getReader();\n  const chunks: Uint8Array[] = [];\n  let total = 0;\n  try {\n    while (true) {\n      const { done, value } = await reader.read();\n      if (done) break;\n      if (!value) continue;\n      total += value.byteLength;\n      if (total > maxBytes) {\n        await reader.cancel();\n        return null;\n      }\n      chunks.push(value);\n    }\n  } finally {\n    reader.releaseLock();\n  }\n\n  const joined = new Uint8Array(total);\n  let at = 0;\n  for (const chunk of chunks) {\n    joined.set(chunk, at);\n    at += chunk.byteLength;\n  }\n  return new TextDecoder().decode(joined);\n}\n"],"mappings":";AAQA,SAAS,YAAY,KAAsB;CACzC,IAAI,WAAW;CACf,IAAI;EACF,WAAW,IAAI,IAAI,GAAG,CAAC,CAAC,SAAS,YAAY;CAC/C,QAAQ;EACN,OAAO;CACT;CACA,OAAO,aAAa,eAAe,aAAa,eAAe,aAAa;AAC9E;;;;;;;AAQA,SAAS,cAAc,SAA6C;CAClE,QAAQ,QAAQ,IAAI,kBAAkB,KAAK,QAAQ,IAAI,MAAM,EAAA,EAAI,MAAM,GAAG,CAAC,CAAC,EAAE,EAAE,KAAK;AACvF;;;;;;;;;;;;AAaA,SAAgB,kBAAkB,SAAyB,UAA0B;CACnF,MAAM,OAAO,cAAc,OAAO;CAClC,IAAI,CAAC,MAAM,OAAO;CAGlB,MAAM,SAAS,GAFQ,QAAQ,IAAI,mBAAmB,CAAC,EAAE,MAAM,GAAG,CAAC,CAAC,EAAE,EAAE,KAAK,MAC5C,YAAY,UAAU,MAAM,IAAI,SAAS,SAClD,KAAK;CAC7B,IAAI;EACF,OAAO,IAAI,IAAI,MAAM,CAAC,CAAC;CACzB,QAAQ;EACN,OAAO;CACT;AACF;;;;;;;;;;;;;;;AAgBA,SAAgB,qBAAqB,SAA2B;CAC9D,MAAM,WAAW,QAAQ,QAAQ,IAAI,QAAQ,KAAK,QAAQ,QAAQ,IAAI,SAAS;CAC/E,IAAI,CAAC,UAAU,OAAO;CAEtB,IAAI;CACJ,IAAI;EACF,iBAAiB,IAAI,IAAI,QAAQ,CAAC,CAAC;CACrC,QAAQ;EACN,OAAO;CACT;CAIA,IAAI;CACJ,IAAI;EACF,YAAY,IAAI,IAAI,QAAQ,GAAG,CAAC,CAAC;CACnC,QAAQ;EACN,OAAO;CACT;CACA,OAAO,mBAAmB,kBAAkB,QAAQ,SAAS,SAAS;AACxE;;AAGA,SAAgB,iBAAiB,SAA2B;CAC1D,OAAO,CAAC,QAAQ,QAAQ,IAAI,QAAQ,KAAK,CAAC,QAAQ,QAAQ,IAAI,SAAS;AACzE;;;;;;;;;;;;;AAcA,eAAsB,gBAAgB,SAAkB,UAA0C;CAChG,MAAM,OAAO,QAAQ;CAGrB,IAAI,CAAC,MAAM;EACT,MAAM,WAAW,MAAM,QAAQ,KAAK;EACpC,OAAO,IAAI,YAAY,CAAC,CAAC,OAAO,QAAQ,CAAC,CAAC,aAAa,WAAW,OAAO;CAC3E;CAEA,MAAM,SAAS,KAAK,UAAU;CAC9B,MAAM,SAAuB,CAAC;CAC9B,IAAI,QAAQ;CACZ,IAAI;EACF,OAAO,MAAM;GACX,MAAM,EAAE,MAAM,UAAU,MAAM,OAAO,KAAK;GAC1C,IAAI,MAAM;GACV,IAAI,CAAC,OAAO;GACZ,SAAS,MAAM;GACf,IAAI,QAAQ,UAAU;IACpB,MAAM,OAAO,OAAO;IACpB,OAAO;GACT;GACA,OAAO,KAAK,KAAK;EACnB;CACF,UAAU;EACR,OAAO,YAAY;CACrB;CAEA,MAAM,SAAS,IAAI,WAAW,KAAK;CACnC,IAAI,KAAK;CACT,KAAK,MAAM,SAAS,QAAQ;EAC1B,OAAO,IAAI,OAAO,EAAE;EACpB,MAAM,MAAM;CACd;CACA,OAAO,IAAI,YAAY,CAAC,CAAC,OAAO,MAAM;AACxC"}

package/dist/next/routes/catalogue-routes.mjs

@@ -0,0 +1,344 @@
+import { RESOURCE_ID_SHAPE } from "../../core/dto.mjs";
+import { earliestOpening } from "../../core/next-available.mjs";
+import { DEFAULT_AVATAR_HOSTS } from "../options.mjs";
+import { bookingErrorResponse, catalogueErrorResponse, knownExtraServiceIds, knownServiceId, parseRange } from "./shared.mjs";
+import { NextResponse } from "next/server";
+//#region src/next/routes/catalogue-routes.ts
+/**
+* The read routes the wizard asks while it is on screen: the price list, the
+* stylists (with each one's next opening), free slots, opening hours, the
+* next free start and a stylist's photo.
+*
+* Every guard answers before Medal is called, and every read goes through the
+* data cache (`catalogue.ts`), which the site's own writes expire. There is
+* deliberately no way for a visitor to skip it.
+*/
+/**
+* The full price list, in the order Medal returns it. Nothing is filtered: a
+* service with `bookable_online: false` is still a service the business sells,
+* and hiding it here would leave the printed price list and the website
+* disagreeing. Read through the catalogue cache (at most ~10 min old).
+*/
+async function servicesRoute(rt) {
+	try {
+		const services = await rt.catalogue.cachedServices();
+		return NextResponse.json({ services: services.map(rt.dto.toBookingServiceDto) });
+	} catch (error) {
+		return catalogueErrorResponse(rt, error, "services");
+	}
+}
+/**
+* The window the caller asked about, never one this route invents: «next
+* free» has to agree with the day strip on the time step, and the wizard owns
+* that horizon.
+*
+* Best effort, and never fatal. A stylist list with no «next free» lines is a
+* working step; a 502 here would be a screen with nobody on it.
+*/
+async function firstOpeningPerResource(rt, serviceId, extraServiceIds, range) {
+	try {
+		const slots = await rt.catalogue.cachedAvailability({
+			serviceId,
+			...extraServiceIds.length > 0 ? { extraServiceIds } : {},
+			...range
+		});
+		const earliest = {};
+		for (const slot of slots) {
+			if (slot.resource_id === null || slot.start_ts === null) continue;
+			const startTs = Date.parse(slot.start_ts);
+			if (!Number.isFinite(startTs)) continue;
+			const seen = earliest[slot.resource_id];
+			if (seen === void 0 || startTs < seen) earliest[slot.resource_id] = startTs;
+		}
+		return earliest;
+	} catch (error) {
+		rt.logger.warn({
+			err: error,
+			serviceId
+		}, "Could not read next-available times for step 2");
+		return {};
+	}
+}
+/**
+* The stylists step 2 offers, and — when asked about a service — the first
+* minute each of them is free. Two answers from one round trip, because step 2
+* is one screen. The availability read is the SAME cached entry the
+* availability route and the booking page use for this service and window.
+*/
+async function resourcesRoute(rt, request) {
+	const { searchParams } = new URL(request.url);
+	const rawServiceId = searchParams.get("service_id")?.trim();
+	let range = null;
+	let serviceId = null;
+	let extraServiceIds = [];
+	if (rawServiceId) {
+		const parsed = parseRange(searchParams);
+		if ("error" in parsed) return parsed.error;
+		range = parsed;
+		const known = await knownServiceId(rt, rawServiceId);
+		if ("error" in known) return known.error;
+		serviceId = known.serviceId;
+		const extras = await knownExtraServiceIds(rt, searchParams.get("extra_service_ids"), serviceId);
+		if ("error" in extras) return extras.error;
+		extraServiceIds = extras.extraServiceIds;
+	}
+	const nextAvailable = serviceId !== null && range !== null ? firstOpeningPerResource(rt, serviceId, extraServiceIds, range) : Promise.resolve({});
+	let resources;
+	try {
+		resources = await rt.catalogue.cachedResources();
+	} catch (error) {
+		return catalogueErrorResponse(rt, error, "resources");
+	}
+	return NextResponse.json({
+		resources: resources.map(rt.dto.toBookingResourceDto),
+		nextAvailableTs: await nextAvailable
+	});
+}
+/**
+* Free slots for one visit over one range — one service, or one person's
+* several (`extra_service_ids`) back to back — optionally narrowed to the
+* stylist chosen on step 2. Read through the slot cache (at most ~60 s old),
+* which the site's own create / move / cancel routes expire on success.
+*/
+async function availabilityRoute(rt, request) {
+	const { searchParams } = new URL(request.url);
+	const rawServiceId = searchParams.get("service_id")?.trim();
+	if (!rawServiceId) return bookingErrorResponse("invalidInput", 400, "service_id is required");
+	const range = parseRange(searchParams);
+	if ("error" in range) return range.error;
+	const known = await knownServiceId(rt, rawServiceId);
+	if ("error" in known) return known.error;
+	const { serviceId } = known;
+	const extras = await knownExtraServiceIds(rt, searchParams.get("extra_service_ids"), serviceId);
+	if ("error" in extras) return extras.error;
+	const { extraServiceIds } = extras;
+	const resourceId = searchParams.get("resource_id")?.trim();
+	try {
+		const slots = await rt.catalogue.cachedAvailability({
+			serviceId,
+			...extraServiceIds.length > 0 ? { extraServiceIds } : {},
+			...resourceId ? { resourceId } : {},
+			fromTs: range.fromTs,
+			toTs: range.toTs
+		});
+		return NextResponse.json({ slots: slots.flatMap(rt.dto.toBookingSlotDto) });
+	} catch (error) {
+		return catalogueErrorResponse(rt, error, "availability");
+	}
+}
+/**
+* The open dates over one range, optionally narrowed to one stylist — the half
+* availability cannot answer: it returns free slots and nothing else, so a
+* closed Sunday, an evening after closing and a booked-out Thursday all arrive
+* as the same empty array. A date ABSENT from the response is one the business
+* keeps no hours on. Opening hours are per stylist, so the filter matters here
+* as much as on availability.
+*/
+async function scheduleRoute(rt, request) {
+	const { searchParams } = new URL(request.url);
+	const rawServiceId = searchParams.get("service_id")?.trim();
+	if (!rawServiceId) return bookingErrorResponse("invalidInput", 400, "service_id is required");
+	const range = parseRange(searchParams);
+	if ("error" in range) return range.error;
+	const known = await knownServiceId(rt, rawServiceId);
+	if ("error" in known) return known.error;
+	const { serviceId } = known;
+	const extras = await knownExtraServiceIds(rt, searchParams.get("extra_service_ids"), serviceId);
+	if ("error" in extras) return extras.error;
+	const { extraServiceIds } = extras;
+	const resourceId = searchParams.get("resource_id")?.trim();
+	try {
+		const days = await rt.catalogue.cachedSchedule({
+			...resourceId ? { resourceId } : {},
+			serviceId,
+			...extraServiceIds.length > 0 ? { extraServiceIds } : {},
+			fromTs: range.fromTs,
+			toTs: range.toTs
+		});
+		return NextResponse.json({ days: days.flatMap(rt.dto.toBookingDayDto) });
+	} catch (error) {
+		return catalogueErrorResponse(rt, error, "schedule");
+	}
+}
+/**
+* «Next free: today 11:00» — the next free start for the default prefetch
+* set, for a sticky booking bar or a hero. Read from the booking seed the
+* booking page itself renders from, so it costs no Medal call of its own and
+* cannot name a time the wizard will not show. `startTs: null` when nothing is
+* free or the seed cannot be read: the callers then simply say nothing.
+*
+* The label is formatted here, on the business's clock, so a visitor abroad
+* and the server agree on what «today» means.
+*/
+async function nextFreeRoute(rt) {
+	const now = Date.now();
+	try {
+		const seed = await rt.seed.loadBookingSeed(void 0, now);
+		const startTs = earliestOpening(seed.slots, now);
+		return NextResponse.json({
+			startTs,
+			label: startTs === null ? null : rt.clock.when(startTs, now)
+		}, { headers: { "Cache-Control": "private, max-age=30" } });
+	} catch (error) {
+		rt.logger.warn({ err: error }, "next-free: booking seed unavailable");
+		return NextResponse.json({
+			startTs: null,
+			label: null
+		}, { headers: { "Cache-Control": "no-store" } });
+	}
+}
+const AVATAR_CACHE_CONTROL = "public, max-age=86400, stale-while-revalidate=604800";
+function uncached(status) {
+	return new NextResponse(null, {
+		status,
+		headers: { "Cache-Control": "no-store" }
+	});
+}
+/** How long the photo host gets before the card falls back to initials: a hung
+* read must not hold a request open. */
+const UPSTREAM_TIMEOUT_MS = 5e3;
+/** FNV-1a, 32-bit, twice with different seeds — synchronous and plenty for a
+* cache validator; nothing here is a secret. */
+function etagFor(objectKey) {
+	const hash = (seed) => {
+		let h = seed;
+		for (let i = 0; i < objectKey.length; i += 1) {
+			h ^= objectKey.charCodeAt(i);
+			h = Math.imul(h, 16777619);
+		}
+		return (h >>> 0).toString(16).padStart(8, "0");
+	};
+	return `"${hash(2166136261)}${hash(16777619)}"`;
+}
+/**
+* Names that never leave the machine or the private network, whatever a site
+* lists: a photo fetched from one of them would be this server probing its own
+* neighbourhood on behalf of whoever can edit a stylist's photo.
+*/
+const INTERNAL_NAME = /(^|\.)(localhost|local|internal|intranet|lan|home\.arpa)$/;
+/** WHATWG URL normalises every IPv4 spelling (`2130706433`, `0x7f.1`) to dotted quads. */
+const IPV4 = /^\d{1,3}(\.\d{1,3}){3}$/;
+/** Whether `hostname` (already lower-cased by `URL`) is one the site allows. */
+function allowedPhotoHost(hostname, allowed) {
+	if (hostname.startsWith("[") || IPV4.test(hostname) || !hostname.includes(".")) return false;
+	if (INTERNAL_NAME.test(hostname)) return false;
+	return allowed.some((entry) => {
+		const pattern = entry.trim().toLowerCase();
+		if (pattern.startsWith("*.")) {
+			const suffix = pattern.slice(1);
+			return suffix.lastIndexOf(".") > 0 && hostname.endsWith(suffix);
+		}
+		return pattern.length > 0 && hostname === pattern;
+	});
+}
+/**
+* The object, without the signature: origin and path. `null` for a URL this
+* server will not fetch — anything but `https:` on the default port, with no
+* credentials, on a host the site allows (`options.avatarHosts`).
+*
+* ASSUMPTION: the ETag is only a content validator because Medal stores each
+* uploaded avatar under a fresh key, so a new photo is a new path.
+*/
+function objectKeyOf(photoUrl, allowed) {
+	let url;
+	try {
+		url = new URL(photoUrl);
+	} catch {
+		return null;
+	}
+	if (url.protocol !== "https:" || url.port !== "" || url.username !== "" || url.password !== "") return null;
+	return allowedPhotoHost(url.hostname, allowed) ? `${url.origin}${url.pathname}` : null;
+}
+/**
+* The raster formats a stylist photo may be. Anything else — SVG above all,
+* and HTML or a missing type — is refused rather than served from this
+* origin, where it would be the site's own active content.
+*/
+const RASTER_TYPES = /* @__PURE__ */ new Set([
+	"image/avif",
+	"image/gif",
+	"image/jpeg",
+	"image/png",
+	"image/webp"
+]);
+/** `Image/PNG; charset=…` → `image/png`; `null` for a type that is not on the list. */
+function rasterType(header) {
+	const type = (header ?? "").split(";")[0].trim().toLowerCase();
+	return RASTER_TYPES.has(type) ? type : null;
+}
+function etagMatches(header, etag) {
+	if (header === null) return false;
+	return header.split(",").map((value) => value.trim().replace(/^W\//, "")).some((value) => value === etag || value === "*");
+}
+/**
+* A stylist's photo, from a URL the browser can cache.
+*
+* Medal returns `photo_url` as a presigned URL that is signed afresh on every
+* read, so the wizard used to download every photo on every visit. This route
+* looks the stylist up in the cached catalogue, fetches the object server-side
+* and hands it back under one stable address with a day of browser cache and
+* an ETag keyed to the OBJECT (the URL without its signature).
+*/
+async function avatarRoute(rt, request, resourceId) {
+	if (!RESOURCE_ID_SHAPE.test(resourceId)) return uncached(400);
+	let photoUrl;
+	try {
+		photoUrl = (await rt.catalogue.cachedResources()).find((resource) => resource.id === resourceId)?.photo_url;
+	} catch (error) {
+		rt.logger.warn({
+			err: error,
+			resourceId
+		}, "Could not read the stylists for an avatar");
+		return uncached(502);
+	}
+	const objectKey = photoUrl ? objectKeyOf(photoUrl, rt.options.avatarHosts ?? DEFAULT_AVATAR_HOSTS) : null;
+	if (!photoUrl || objectKey === null) {
+		if (photoUrl) rt.logger.warn({ resourceId }, "Stylist photo is on a host this site does not allow");
+		return uncached(404);
+	}
+	const etag = etagFor(objectKey);
+	if (etagMatches(request.headers.get("If-None-Match"), etag)) return new NextResponse(null, {
+		status: 304,
+		headers: {
+			ETag: etag,
+			"Cache-Control": AVATAR_CACHE_CONTROL
+		}
+	});
+	let upstream;
+	try {
+		upstream = await fetch(photoUrl, {
+			cache: "no-store",
+			redirect: "manual",
+			signal: AbortSignal.timeout(UPSTREAM_TIMEOUT_MS)
+		});
+	} catch (error) {
+		rt.logger.warn({
+			err: error,
+			resourceId
+		}, "Could not fetch a stylist photo");
+		return uncached(502);
+	}
+	const contentType = rasterType(upstream.headers.get("Content-Type"));
+	if (!upstream.ok || contentType === null) {
+		if (upstream.ok) rt.logger.warn({
+			resourceId,
+			contentType: upstream.headers.get("Content-Type")
+		}, "Stylist photo is not a raster image");
+		await upstream.body?.cancel();
+		return uncached(502);
+	}
+	return new NextResponse(upstream.body, {
+		status: 200,
+		headers: {
+			"Content-Type": contentType,
+			"Cache-Control": AVATAR_CACHE_CONTROL,
+			ETag: etag,
+			"X-Content-Type-Options": "nosniff",
+			"Content-Security-Policy": "default-src 'none'; sandbox"
+		}
+	});
+}
+//#endregion
+export { availabilityRoute, avatarRoute, nextFreeRoute, resourcesRoute, scheduleRoute, servicesRoute };
+
+//# sourceMappingURL=catalogue-routes.mjs.map

package/dist/next/routes/catalogue-routes.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"catalogue-routes.mjs","names":[],"sources":["../../../src/next/routes/catalogue-routes.ts"],"sourcesContent":["/**\n * The read routes the wizard asks while it is on screen: the price list, the\n * stylists (with each one's next opening), free slots, opening hours, the\n * next free start and a stylist's photo.\n *\n * Every guard answers before Medal is called, and every read goes through the\n * data cache (`catalogue.ts`), which the site's own writes expire. There is\n * deliberately no way for a visitor to skip it.\n */\n\nimport { NextResponse } from 'next/server';\nimport { RESOURCE_ID_SHAPE } from '../../core/dto';\nimport { earliestOpening } from '../../core/next-available';\nimport type { MedalResource } from '../../core/wire';\nimport { DEFAULT_AVATAR_HOSTS } from '../options';\nimport type { BookingRuntime } from '../runtime';\nimport {\n  bookingErrorResponse,\n  catalogueErrorResponse,\n  knownExtraServiceIds,\n  knownServiceId,\n  parseRange,\n} from './shared';\n\n/**\n * The full price list, in the order Medal returns it. Nothing is filtered: a\n * service with `bookable_online: false` is still a service the business sells,\n * and hiding it here would leave the printed price list and the website\n * disagreeing. Read through the catalogue cache (at most ~10 min old).\n */\nexport async function servicesRoute(rt: BookingRuntime): Promise<Response> {\n  try {\n    const services = await rt.catalogue.cachedServices();\n    return NextResponse.json({ services: services.map(rt.dto.toBookingServiceDto) });\n  } catch (error) {\n    return catalogueErrorResponse(rt, error, 'services');\n  }\n}\n\n/**\n * The window the caller asked about, never one this route invents: «next\n * free» has to agree with the day strip on the time step, and the wizard owns\n * that horizon.\n *\n * Best effort, and never fatal. A stylist list with no «next free» lines is a\n * working step; a 502 here would be a screen with nobody on it.\n */\nasync function firstOpeningPerResource(\n  rt: BookingRuntime,\n  serviceId: string,\n  extraServiceIds: string[],\n  range: { fromTs: number; toTs: number }\n): Promise<Record<string, number>> {\n  try {\n    // Unfiltered by resource, deliberately: the whole point is one entry per\n    // stylist, and `resource_id` would collapse the answer to that one. The\n    // whole visit, too: a stylist free for the cut but not the cut and the\n    // wash is not free for this person.\n    const slots = await rt.catalogue.cachedAvailability({\n      serviceId,\n      ...(extraServiceIds.length > 0 ? { extraServiceIds } : {}),\n      ...range,\n    });\n    const earliest: Record<string, number> = {};\n    for (const slot of slots) {\n      // A slot with no stylist cannot fill anybody's line, and an unparseable\n      // start would render «Invalid Date».\n      if (slot.resource_id === null || slot.start_ts === null) continue;\n      const startTs = Date.parse(slot.start_ts);\n      if (!Number.isFinite(startTs)) continue;\n      const seen = earliest[slot.resource_id];\n      if (seen === undefined || startTs < seen) earliest[slot.resource_id] = startTs;\n    }\n    return earliest;\n  } catch (error) {\n    rt.logger.warn({ err: error, serviceId }, 'Could not read next-available times for step 2');\n    return {};\n  }\n}\n\n/**\n * The stylists step 2 offers, and — when asked about a service — the first\n * minute each of them is free. Two answers from one round trip, because step 2\n * is one screen. The availability read is the SAME cached entry the\n * availability route and the booking page use for this service and window.\n */\nexport async function resourcesRoute(rt: BookingRuntime, request: Request): Promise<Response> {\n  const { searchParams } = new URL(request.url);\n  const rawServiceId = searchParams.get('service_id')?.trim();\n\n  // The range is only meaningful alongside a service to ask about. Without one\n  // this route is the catalogue alone, and a stray `from_ts` is not worth a 400.\n  let range: { fromTs: number; toTs: number } | null = null;\n  let serviceId: string | null = null;\n  let extraServiceIds: string[] = [];\n  if (rawServiceId) {\n    const parsed = parseRange(searchParams);\n    if ('error' in parsed) return parsed.error;\n    range = parsed;\n    const known = await knownServiceId(rt, rawServiceId);\n    if ('error' in known) return known.error;\n    serviceId = known.serviceId;\n    const extras = await knownExtraServiceIds(rt, searchParams.get('extra_service_ids'), serviceId);\n    if ('error' in extras) return extras.error;\n    extraServiceIds = extras.extraServiceIds;\n  }\n\n  // Started before the stylist list is awaited, so the two reads overlap.\n  // `firstOpeningPerResource` never rejects.\n  const nextAvailable =\n    serviceId !== null && range !== null\n      ? firstOpeningPerResource(rt, serviceId, extraServiceIds, range)\n      : Promise.resolve({});\n\n  let resources: MedalResource[];\n  try {\n    resources = await rt.catalogue.cachedResources();\n  } catch (error) {\n    return catalogueErrorResponse(rt, error, 'resources');\n  }\n\n  return NextResponse.json({\n    // Unsorted, in the order Medal returned it: step 2 sorts by `sortOrder`\n    // itself, and the party seating uses first-encounter order as its\n    // tie-break.\n    resources: resources.map(rt.dto.toBookingResourceDto),\n    nextAvailableTs: await nextAvailable,\n  });\n}\n\n/**\n * Free slots for one visit over one range — one service, or one person's\n * several (`extra_service_ids`) back to back — optionally narrowed to the\n * stylist chosen on step 2. Read through the slot cache (at most ~60 s old),\n * which the site's own create / move / cancel routes expire on success.\n */\nexport async function availabilityRoute(rt: BookingRuntime, request: Request): Promise<Response> {\n  const { searchParams } = new URL(request.url);\n\n  const rawServiceId = searchParams.get('service_id')?.trim();\n  if (!rawServiceId) {\n    return bookingErrorResponse('invalidInput', 400, 'service_id is required');\n  }\n\n  const range = parseRange(searchParams);\n  if ('error' in range) return range.error;\n\n  const known = await knownServiceId(rt, rawServiceId);\n  if ('error' in known) return known.error;\n  const { serviceId } = known;\n\n  const extras = await knownExtraServiceIds(rt, searchParams.get('extra_service_ids'), serviceId);\n  if ('error' in extras) return extras.error;\n  const { extraServiceIds } = extras;\n\n  const resourceId = searchParams.get('resource_id')?.trim();\n\n  try {\n    const slots = await rt.catalogue.cachedAvailability({\n      serviceId,\n      ...(extraServiceIds.length > 0 ? { extraServiceIds } : {}),\n      // Omitted rather than passed as an empty string: `?resource_id=` with\n      // nothing after it means «first available».\n      ...(resourceId ? { resourceId } : {}),\n      fromTs: range.fromTs,\n      toTs: range.toTs,\n    });\n    return NextResponse.json({ slots: slots.flatMap(rt.dto.toBookingSlotDto) });\n  } catch (error) {\n    return catalogueErrorResponse(rt, error, 'availability');\n  }\n}\n\n/**\n * The open dates over one range, optionally narrowed to one stylist — the half\n * availability cannot answer: it returns free slots and nothing else, so a\n * closed Sunday, an evening after closing and a booked-out Thursday all arrive\n * as the same empty array. A date ABSENT from the response is one the business\n * keeps no hours on. Opening hours are per stylist, so the filter matters here\n * as much as on availability.\n */\nexport async function scheduleRoute(rt: BookingRuntime, request: Request): Promise<Response> {\n  const { searchParams } = new URL(request.url);\n\n  const rawServiceId = searchParams.get('service_id')?.trim();\n  if (!rawServiceId) {\n    return bookingErrorResponse('invalidInput', 400, 'service_id is required');\n  }\n\n  const range = parseRange(searchParams);\n  if ('error' in range) return range.error;\n\n  const known = await knownServiceId(rt, rawServiceId);\n  if ('error' in known) return known.error;\n  const { serviceId } = known;\n\n  const extras = await knownExtraServiceIds(rt, searchParams.get('extra_service_ids'), serviceId);\n  if ('error' in extras) return extras.error;\n  const { extraServiceIds } = extras;\n\n  const resourceId = searchParams.get('resource_id')?.trim();\n\n  try {\n    const days = await rt.catalogue.cachedSchedule({\n      ...(resourceId ? { resourceId } : {}),\n      serviceId,\n      // The whole visit's hours: its last start leaves room for every service.\n      ...(extraServiceIds.length > 0 ? { extraServiceIds } : {}),\n      fromTs: range.fromTs,\n      toTs: range.toTs,\n    });\n    return NextResponse.json({ days: days.flatMap(rt.dto.toBookingDayDto) });\n  } catch (error) {\n    return catalogueErrorResponse(rt, error, 'schedule');\n  }\n}\n\n/**\n * «Next free: today 11:00» — the next free start for the default prefetch\n * set, for a sticky booking bar or a hero. Read from the booking seed the\n * booking page itself renders from, so it costs no Medal call of its own and\n * cannot name a time the wizard will not show. `startTs: null` when nothing is\n * free or the seed cannot be read: the callers then simply say nothing.\n *\n * The label is formatted here, on the business's clock, so a visitor abroad\n * and the server agree on what «today» means.\n */\nexport async function nextFreeRoute(rt: BookingRuntime): Promise<Response> {\n  const now = Date.now();\n  try {\n    const seed = await rt.seed.loadBookingSeed(undefined, now);\n    const startTs = earliestOpening(seed.slots, now);\n    return NextResponse.json(\n      { startTs, label: startTs === null ? null : rt.clock.when(startTs, now) },\n      // Short and private: the answer turns over with the seed's 30 s bucket.\n      { headers: { 'Cache-Control': 'private, max-age=30' } }\n    );\n  } catch (error) {\n    rt.logger.warn({ err: error }, 'next-free: booking seed unavailable');\n    return NextResponse.json(\n      { startTs: null, label: null },\n      { headers: { 'Cache-Control': 'no-store' } }\n    );\n  }\n}\n\nconst AVATAR_CACHE_CONTROL = 'public, max-age=86400, stale-while-revalidate=604800';\n\nfunction uncached(status: number): NextResponse {\n  return new NextResponse(null, { status, headers: { 'Cache-Control': 'no-store' } });\n}\n\n/** How long the photo host gets before the card falls back to initials: a hung\n * read must not hold a request open. */\nconst UPSTREAM_TIMEOUT_MS = 5000;\n\n/** FNV-1a, 32-bit, twice with different seeds — synchronous and plenty for a\n * cache validator; nothing here is a secret. */\nfunction etagFor(objectKey: string): string {\n  const hash = (seed: number) => {\n    let h = seed;\n    for (let i = 0; i < objectKey.length; i += 1) {\n      h ^= objectKey.charCodeAt(i);\n      h = Math.imul(h, 0x01000193);\n    }\n    return (h >>> 0).toString(16).padStart(8, '0');\n  };\n  return `\"${hash(0x811c9dc5)}${hash(0x01000193)}\"`;\n}\n\n/**\n * Names that never leave the machine or the private network, whatever a site\n * lists: a photo fetched from one of them would be this server probing its own\n * neighbourhood on behalf of whoever can edit a stylist's photo.\n */\nconst INTERNAL_NAME = /(^|\\.)(localhost|local|internal|intranet|lan|home\\.arpa)$/;\n/** WHATWG URL normalises every IPv4 spelling (`2130706433`, `0x7f.1`) to dotted quads. */\nconst IPV4 = /^\\d{1,3}(\\.\\d{1,3}){3}$/;\n\n/** Whether `hostname` (already lower-cased by `URL`) is one the site allows. */\nfunction allowedPhotoHost(hostname: string, allowed: readonly string[]): boolean {\n  // An IPv6 literal, an IPv4 one, a single label or an internal name: never.\n  if (hostname.startsWith('[') || IPV4.test(hostname) || !hostname.includes('.')) return false;\n  if (INTERNAL_NAME.test(hostname)) return false;\n  return allowed.some((entry) => {\n    const pattern = entry.trim().toLowerCase();\n    if (pattern.startsWith('*.')) {\n      const suffix = pattern.slice(1);\n      // `*.` alone, or `*.com`, would be every host there is.\n      return suffix.lastIndexOf('.') > 0 && hostname.endsWith(suffix);\n    }\n    return pattern.length > 0 && hostname === pattern;\n  });\n}\n\n/**\n * The object, without the signature: origin and path. `null` for a URL this\n * server will not fetch — anything but `https:` on the default port, with no\n * credentials, on a host the site allows (`options.avatarHosts`).\n *\n * ASSUMPTION: the ETag is only a content validator because Medal stores each\n * uploaded avatar under a fresh key, so a new photo is a new path.\n */\nfunction objectKeyOf(photoUrl: string, allowed: readonly string[]): string | null {\n  let url: URL;\n  try {\n    url = new URL(photoUrl);\n  } catch {\n    return null;\n  }\n  if (url.protocol !== 'https:' || url.port !== '' || url.username !== '' || url.password !== '') {\n    return null;\n  }\n  return allowedPhotoHost(url.hostname, allowed) ? `${url.origin}${url.pathname}` : null;\n}\n\n/**\n * The raster formats a stylist photo may be. Anything else — SVG above all,\n * and HTML or a missing type — is refused rather than served from this\n * origin, where it would be the site's own active content.\n */\nconst RASTER_TYPES = new Set(['image/avif', 'image/gif', 'image/jpeg', 'image/png', 'image/webp']);\n\n/** `Image/PNG; charset=…` → `image/png`; `null` for a type that is not on the list. */\nfunction rasterType(header: string | null): string | null {\n  const type = (header ?? '').split(';')[0].trim().toLowerCase();\n  return RASTER_TYPES.has(type) ? type : null;\n}\n\nfunction etagMatches(header: string | null, etag: string): boolean {\n  if (header === null) return false;\n  return header\n    .split(',')\n    .map((value) => value.trim().replace(/^W\\//, ''))\n    .some((value) => value === etag || value === '*');\n}\n\n/**\n * A stylist's photo, from a URL the browser can cache.\n *\n * Medal returns `photo_url` as a presigned URL that is signed afresh on every\n * read, so the wizard used to download every photo on every visit. This route\n * looks the stylist up in the cached catalogue, fetches the object server-side\n * and hands it back under one stable address with a day of browser cache and\n * an ETag keyed to the OBJECT (the URL without its signature).\n */\nexport async function avatarRoute(\n  rt: BookingRuntime,\n  request: Request,\n  resourceId: string\n): Promise<Response> {\n  if (!RESOURCE_ID_SHAPE.test(resourceId)) return uncached(400);\n\n  let photoUrl: string | null | undefined;\n  try {\n    photoUrl = (await rt.catalogue.cachedResources()).find(\n      (resource) => resource.id === resourceId\n    )?.photo_url;\n  } catch (error) {\n    rt.logger.warn({ err: error, resourceId }, 'Could not read the stylists for an avatar');\n    return uncached(502);\n  }\n  const objectKey = photoUrl\n    ? objectKeyOf(photoUrl, rt.options.avatarHosts ?? DEFAULT_AVATAR_HOSTS)\n    : null;\n  if (!photoUrl || objectKey === null) {\n    if (photoUrl)\n      rt.logger.warn({ resourceId }, 'Stylist photo is on a host this site does not allow');\n    return uncached(404);\n  }\n\n  const etag = etagFor(objectKey);\n  if (etagMatches(request.headers.get('If-None-Match'), etag)) {\n    return new NextResponse(null, {\n      status: 304,\n      headers: { ETag: etag, 'Cache-Control': AVATAR_CACHE_CONTROL },\n    });\n  }\n\n  let upstream: Response;\n  try {\n    upstream = await fetch(photoUrl, {\n      cache: 'no-store',\n      // A redirect is answered, never followed: its target was not checked\n      // against the allowed hosts. A 3xx is not `ok`, so it is a 502 below.\n      redirect: 'manual',\n      signal: AbortSignal.timeout(UPSTREAM_TIMEOUT_MS),\n    });\n  } catch (error) {\n    rt.logger.warn({ err: error, resourceId }, 'Could not fetch a stylist photo');\n    return uncached(502);\n  }\n  const contentType = rasterType(upstream.headers.get('Content-Type'));\n  // Only raster images are relayed. Whatever the bucket answers is served from\n  // THIS origin, and an HTML or SVG body here would be script on the site.\n  if (!upstream.ok || contentType === null) {\n    if (upstream.ok) {\n      rt.logger.warn(\n        { resourceId, contentType: upstream.headers.get('Content-Type') },\n        'Stylist photo is not a raster image'\n      );\n    }\n    await upstream.body?.cancel();\n    return uncached(502);\n  }\n\n  return new NextResponse(upstream.body, {\n    status: 200,\n    headers: {\n      'Content-Type': contentType,\n      'Cache-Control': AVATAR_CACHE_CONTROL,\n      ETag: etag,\n      'X-Content-Type-Options': 'nosniff',\n      // Belt and braces for a body opened as a document: no script, no\n      // subresource, a unique origin.\n      'Content-Security-Policy': \"default-src 'none'; sandbox\",\n    },\n  });\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AA8BA,eAAsB,cAAc,IAAuC;CACzE,IAAI;EACF,MAAM,WAAW,MAAM,GAAG,UAAU,eAAe;EACnD,OAAO,aAAa,KAAK,EAAE,UAAU,SAAS,IAAI,GAAG,IAAI,mBAAmB,EAAE,CAAC;CACjF,SAAS,OAAO;EACd,OAAO,uBAAuB,IAAI,OAAO,UAAU;CACrD;AACF;;;;;;;;;AAUA,eAAe,wBACb,IACA,WACA,iBACA,OACiC;CACjC,IAAI;EAKF,MAAM,QAAQ,MAAM,GAAG,UAAU,mBAAmB;GAClD;GACA,GAAI,gBAAgB,SAAS,IAAI,EAAE,gBAAgB,IAAI,CAAC;GACxD,GAAG;EACL,CAAC;EACD,MAAM,WAAmC,CAAC;EAC1C,KAAK,MAAM,QAAQ,OAAO;GAGxB,IAAI,KAAK,gBAAgB,QAAQ,KAAK,aAAa,MAAM;GACzD,MAAM,UAAU,KAAK,MAAM,KAAK,QAAQ;GACxC,IAAI,CAAC,OAAO,SAAS,OAAO,GAAG;GAC/B,MAAM,OAAO,SAAS,KAAK;GAC3B,IAAI,SAAS,KAAA,KAAa,UAAU,MAAM,SAAS,KAAK,eAAe;EACzE;EACA,OAAO;CACT,SAAS,OAAO;EACd,GAAG,OAAO,KAAK;GAAE,KAAK;GAAO;EAAU,GAAG,gDAAgD;EAC1F,OAAO,CAAC;CACV;AACF;;;;;;;AAQA,eAAsB,eAAe,IAAoB,SAAqC;CAC5F,MAAM,EAAE,iBAAiB,IAAI,IAAI,QAAQ,GAAG;CAC5C,MAAM,eAAe,aAAa,IAAI,YAAY,CAAC,EAAE,KAAK;CAI1D,IAAI,QAAiD;CACrD,IAAI,YAA2B;CAC/B,IAAI,kBAA4B,CAAC;CACjC,IAAI,cAAc;EAChB,MAAM,SAAS,WAAW,YAAY;EACtC,IAAI,WAAW,QAAQ,OAAO,OAAO;EACrC,QAAQ;EACR,MAAM,QAAQ,MAAM,eAAe,IAAI,YAAY;EACnD,IAAI,WAAW,OAAO,OAAO,MAAM;EACnC,YAAY,MAAM;EAClB,MAAM,SAAS,MAAM,qBAAqB,IAAI,aAAa,IAAI,mBAAmB,GAAG,SAAS;EAC9F,IAAI,WAAW,QAAQ,OAAO,OAAO;EACrC,kBAAkB,OAAO;CAC3B;CAIA,MAAM,gBACJ,cAAc,QAAQ,UAAU,OAC5B,wBAAwB,IAAI,WAAW,iBAAiB,KAAK,IAC7D,QAAQ,QAAQ,CAAC,CAAC;CAExB,IAAI;CACJ,IAAI;EACF,YAAY,MAAM,GAAG,UAAU,gBAAgB;CACjD,SAAS,OAAO;EACd,OAAO,uBAAuB,IAAI,OAAO,WAAW;CACtD;CAEA,OAAO,aAAa,KAAK;EAIvB,WAAW,UAAU,IAAI,GAAG,IAAI,oBAAoB;EACpD,iBAAiB,MAAM;CACzB,CAAC;AACH;;;;;;;AAQA,eAAsB,kBAAkB,IAAoB,SAAqC;CAC/F,MAAM,EAAE,iBAAiB,IAAI,IAAI,QAAQ,GAAG;CAE5C,MAAM,eAAe,aAAa,IAAI,YAAY,CAAC,EAAE,KAAK;CAC1D,IAAI,CAAC,cACH,OAAO,qBAAqB,gBAAgB,KAAK,wBAAwB;CAG3E,MAAM,QAAQ,WAAW,YAAY;CACrC,IAAI,WAAW,OAAO,OAAO,MAAM;CAEnC,MAAM,QAAQ,MAAM,eAAe,IAAI,YAAY;CACnD,IAAI,WAAW,OAAO,OAAO,MAAM;CACnC,MAAM,EAAE,cAAc;CAEtB,MAAM,SAAS,MAAM,qBAAqB,IAAI,aAAa,IAAI,mBAAmB,GAAG,SAAS;CAC9F,IAAI,WAAW,QAAQ,OAAO,OAAO;CACrC,MAAM,EAAE,oBAAoB;CAE5B,MAAM,aAAa,aAAa,IAAI,aAAa,CAAC,EAAE,KAAK;CAEzD,IAAI;EACF,MAAM,QAAQ,MAAM,GAAG,UAAU,mBAAmB;GAClD;GACA,GAAI,gBAAgB,SAAS,IAAI,EAAE,gBAAgB,IAAI,CAAC;GAGxD,GAAI,aAAa,EAAE,WAAW,IAAI,CAAC;GACnC,QAAQ,MAAM;GACd,MAAM,MAAM;EACd,CAAC;EACD,OAAO,aAAa,KAAK,EAAE,OAAO,MAAM,QAAQ,GAAG,IAAI,gBAAgB,EAAE,CAAC;CAC5E,SAAS,OAAO;EACd,OAAO,uBAAuB,IAAI,OAAO,cAAc;CACzD;AACF;;;;;;;;;AAUA,eAAsB,cAAc,IAAoB,SAAqC;CAC3F,MAAM,EAAE,iBAAiB,IAAI,IAAI,QAAQ,GAAG;CAE5C,MAAM,eAAe,aAAa,IAAI,YAAY,CAAC,EAAE,KAAK;CAC1D,IAAI,CAAC,cACH,OAAO,qBAAqB,gBAAgB,KAAK,wBAAwB;CAG3E,MAAM,QAAQ,WAAW,YAAY;CACrC,IAAI,WAAW,OAAO,OAAO,MAAM;CAEnC,MAAM,QAAQ,MAAM,eAAe,IAAI,YAAY;CACnD,IAAI,WAAW,OAAO,OAAO,MAAM;CACnC,MAAM,EAAE,cAAc;CAEtB,MAAM,SAAS,MAAM,qBAAqB,IAAI,aAAa,IAAI,mBAAmB,GAAG,SAAS;CAC9F,IAAI,WAAW,QAAQ,OAAO,OAAO;CACrC,MAAM,EAAE,oBAAoB;CAE5B,MAAM,aAAa,aAAa,IAAI,aAAa,CAAC,EAAE,KAAK;CAEzD,IAAI;EACF,MAAM,OAAO,MAAM,GAAG,UAAU,eAAe;GAC7C,GAAI,aAAa,EAAE,WAAW,IAAI,CAAC;GACnC;GAEA,GAAI,gBAAgB,SAAS,IAAI,EAAE,gBAAgB,IAAI,CAAC;GACxD,QAAQ,MAAM;GACd,MAAM,MAAM;EACd,CAAC;EACD,OAAO,aAAa,KAAK,EAAE,MAAM,KAAK,QAAQ,GAAG,IAAI,eAAe,EAAE,CAAC;CACzE,SAAS,OAAO;EACd,OAAO,uBAAuB,IAAI,OAAO,UAAU;CACrD;AACF;;;;;;;;;;;AAYA,eAAsB,cAAc,IAAuC;CACzE,MAAM,MAAM,KAAK,IAAI;CACrB,IAAI;EACF,MAAM,OAAO,MAAM,GAAG,KAAK,gBAAgB,KAAA,GAAW,GAAG;EACzD,MAAM,UAAU,gBAAgB,KAAK,OAAO,GAAG;EAC/C,OAAO,aAAa,KAClB;GAAE;GAAS,OAAO,YAAY,OAAO,OAAO,GAAG,MAAM,KAAK,SAAS,GAAG;EAAE,GAExE,EAAE,SAAS,EAAE,iBAAiB,sBAAsB,EAAE,CACxD;CACF,SAAS,OAAO;EACd,GAAG,OAAO,KAAK,EAAE,KAAK,MAAM,GAAG,qCAAqC;EACpE,OAAO,aAAa,KAClB;GAAE,SAAS;GAAM,OAAO;EAAK,GAC7B,EAAE,SAAS,EAAE,iBAAiB,WAAW,EAAE,CAC7C;CACF;AACF;AAEA,MAAM,uBAAuB;AAE7B,SAAS,SAAS,QAA8B;CAC9C,OAAO,IAAI,aAAa,MAAM;EAAE;EAAQ,SAAS,EAAE,iBAAiB,WAAW;CAAE,CAAC;AACpF;;;AAIA,MAAM,sBAAsB;;;AAI5B,SAAS,QAAQ,WAA2B;CAC1C,MAAM,QAAQ,SAAiB;EAC7B,IAAI,IAAI;EACR,KAAK,IAAI,IAAI,GAAG,IAAI,UAAU,QAAQ,KAAK,GAAG;GAC5C,KAAK,UAAU,WAAW,CAAC;GAC3B,IAAI,KAAK,KAAK,GAAG,QAAU;EAC7B;EACA,QAAQ,MAAM,EAAA,CAAG,SAAS,EAAE,CAAC,CAAC,SAAS,GAAG,GAAG;CAC/C;CACA,OAAO,IAAI,KAAK,UAAU,IAAI,KAAK,QAAU,EAAE;AACjD;;;;;;AAOA,MAAM,gBAAgB;;AAEtB,MAAM,OAAO;;AAGb,SAAS,iBAAiB,UAAkB,SAAqC;CAE/E,IAAI,SAAS,WAAW,GAAG,KAAK,KAAK,KAAK,QAAQ,KAAK,CAAC,SAAS,SAAS,GAAG,GAAG,OAAO;CACvF,IAAI,cAAc,KAAK,QAAQ,GAAG,OAAO;CACzC,OAAO,QAAQ,MAAM,UAAU;EAC7B,MAAM,UAAU,MAAM,KAAK,CAAC,CAAC,YAAY;EACzC,IAAI,QAAQ,WAAW,IAAI,GAAG;GAC5B,MAAM,SAAS,QAAQ,MAAM,CAAC;GAE9B,OAAO,OAAO,YAAY,GAAG,IAAI,KAAK,SAAS,SAAS,MAAM;EAChE;EACA,OAAO,QAAQ,SAAS,KAAK,aAAa;CAC5C,CAAC;AACH;;;;;;;;;AAUA,SAAS,YAAY,UAAkB,SAA2C;CAChF,IAAI;CACJ,IAAI;EACF,MAAM,IAAI,IAAI,QAAQ;CACxB,QAAQ;EACN,OAAO;CACT;CACA,IAAI,IAAI,aAAa,YAAY,IAAI,SAAS,MAAM,IAAI,aAAa,MAAM,IAAI,aAAa,IAC1F,OAAO;CAET,OAAO,iBAAiB,IAAI,UAAU,OAAO,IAAI,GAAG,IAAI,SAAS,IAAI,aAAa;AACpF;;;;;;AAOA,MAAM,+BAAe,IAAI,IAAI;CAAC;CAAc;CAAa;CAAc;CAAa;AAAY,CAAC;;AAGjG,SAAS,WAAW,QAAsC;CACxD,MAAM,QAAQ,UAAU,GAAA,CAAI,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,YAAY;CAC7D,OAAO,aAAa,IAAI,IAAI,IAAI,OAAO;AACzC;AAEA,SAAS,YAAY,QAAuB,MAAuB;CACjE,IAAI,WAAW,MAAM,OAAO;CAC5B,OAAO,OACJ,MAAM,GAAG,CAAC,CACV,KAAK,UAAU,MAAM,KAAK,CAAC,CAAC,QAAQ,QAAQ,EAAE,CAAC,CAAC,CAChD,MAAM,UAAU,UAAU,QAAQ,UAAU,GAAG;AACpD;;;;;;;;;;AAWA,eAAsB,YACpB,IACA,SACA,YACmB;CACnB,IAAI,CAAC,kBAAkB,KAAK,UAAU,GAAG,OAAO,SAAS,GAAG;CAE5D,IAAI;CACJ,IAAI;EACF,YAAY,MAAM,GAAG,UAAU,gBAAgB,EAAA,CAAG,MAC/C,aAAa,SAAS,OAAO,UAChC,CAAC,EAAE;CACL,SAAS,OAAO;EACd,GAAG,OAAO,KAAK;GAAE,KAAK;GAAO;EAAW,GAAG,2CAA2C;EACtF,OAAO,SAAS,GAAG;CACrB;CACA,MAAM,YAAY,WACd,YAAY,UAAU,GAAG,QAAQ,eAAe,oBAAoB,IACpE;CACJ,IAAI,CAAC,YAAY,cAAc,MAAM;EACnC,IAAI,UACF,GAAG,OAAO,KAAK,EAAE,WAAW,GAAG,qDAAqD;EACtF,OAAO,SAAS,GAAG;CACrB;CAEA,MAAM,OAAO,QAAQ,SAAS;CAC9B,IAAI,YAAY,QAAQ,QAAQ,IAAI,eAAe,GAAG,IAAI,GACxD,OAAO,IAAI,aAAa,MAAM;EAC5B,QAAQ;EACR,SAAS;GAAE,MAAM;GAAM,iBAAiB;EAAqB;CAC/D,CAAC;CAGH,IAAI;CACJ,IAAI;EACF,WAAW,MAAM,MAAM,UAAU;GAC/B,OAAO;GAGP,UAAU;GACV,QAAQ,YAAY,QAAQ,mBAAmB;EACjD,CAAC;CACH,SAAS,OAAO;EACd,GAAG,OAAO,KAAK;GAAE,KAAK;GAAO;EAAW,GAAG,iCAAiC;EAC5E,OAAO,SAAS,GAAG;CACrB;CACA,MAAM,cAAc,WAAW,SAAS,QAAQ,IAAI,cAAc,CAAC;CAGnE,IAAI,CAAC,SAAS,MAAM,gBAAgB,MAAM;EACxC,IAAI,SAAS,IACX,GAAG,OAAO,KACR;GAAE;GAAY,aAAa,SAAS,QAAQ,IAAI,cAAc;EAAE,GAChE,qCACF;EAEF,MAAM,SAAS,MAAM,OAAO;EAC5B,OAAO,SAAS,GAAG;CACrB;CAEA,OAAO,IAAI,aAAa,SAAS,MAAM;EACrC,QAAQ;EACR,SAAS;GACP,gBAAgB;GAChB,iBAAiB;GACjB,MAAM;GACN,0BAA0B;GAG1B,2BAA2B;EAC7B;CACF,CAAC;AACH"}