@onesub/server 0.12.0 → 0.12.1

package/dist/providers/google.js

@@ -1,522 +0,0 @@
-import { SUBSCRIPTION_STATUS } from '@onesub/shared';
-import { log } from '../logger.js';
-import { fetchWithTimeout } from '../http.js';
-import { getDefaultCache } from '../cache.js';
-import { mockValidateGoogleSubscription, mockValidateGoogleProduct, } from './mock.js';
-/**
- * Google RTDN notification types.
- * https://developer.android.com/google/play/billing/rtdn-reference
- */
-const GOOGLE_NOTIFICATION_TYPE = {
-    SUBSCRIPTION_RECOVERED: 1,
-    SUBSCRIPTION_RENEWED: 2,
-    SUBSCRIPTION_CANCELED: 3,
-    SUBSCRIPTION_PURCHASED: 4,
-    SUBSCRIPTION_ON_HOLD: 5,
-    SUBSCRIPTION_IN_GRACE_PERIOD: 6,
-    SUBSCRIPTION_RESTARTED: 7,
-    SUBSCRIPTION_PRICE_CHANGE_CONFIRMED: 8,
-    SUBSCRIPTION_DEFERRED: 9,
-    SUBSCRIPTION_PAUSED: 10,
-    SUBSCRIPTION_PAUSE_SCHEDULE_CHANGED: 11,
-    SUBSCRIPTION_REVOKED: 12,
-    SUBSCRIPTION_EXPIRED: 13,
-};
-/** Maximum age for product receipts (72 hours). */
-const MAX_PRODUCT_RECEIPT_AGE_MS = 72 * 60 * 60 * 1000;
-/**
- * Per-key in-flight token mint promises. Used to deduplicate concurrent
- * refreshes inside a single process — the cluster-wide cache layer sits in
- * `getDefaultCache()` underneath. Without this map every concurrent caller in
- * the same process would fire a separate network refresh while waiting for
- * the new value to land in Redis / memory.
- */
-const refreshPromises = new Map();
-/**
- * Build the cache key for a given service account.
- *
- * Hashing the key (instead of using it raw) keeps the key length bounded for
- * cache backends that have key-size limits, and avoids leaking partial JSON
- * into log lines that print cache keys.
- */
-function googleTokenCacheKey(serviceAccountKey) {
-    let hash = 0;
-    for (let i = 0; i < serviceAccountKey.length; i++) {
-        hash = (hash * 31 + serviceAccountKey.charCodeAt(i)) | 0;
-    }
-    return `google:oauth:${hash}`;
-}
-/**
- * Obtain a Google OAuth2 access token, returning a cached token if it has more
- * than 60 seconds of remaining validity. Google tokens are valid for 3600 seconds,
- * so this avoids a network round-trip on every API call.
- *
- * Cache layer: `getDefaultCache()` (in-memory by default, swappable with
- * Redis / Memcached via `setDefaultCache()`). When the cache is shared across
- * cluster nodes only one node refreshes per TTL window.
- *
- * Promise deduplication prevents a thundering herd inside a single process:
- * concurrent callers that arrive while the token is being refreshed all await
- * the same in-flight request instead of each issuing their own.
- */
-async function getCachedAccessToken(serviceAccountKey) {
-    const cache = getDefaultCache();
-    const cacheKey = googleTokenCacheKey(serviceAccountKey);
-    const cached = await cache.get(cacheKey);
-    if (cached && cached.expiresAt - Date.now() > 60_000) {
-        return cached.token;
-    }
-    const inflight = refreshPromises.get(cacheKey);
-    if (inflight)
-        return inflight;
-    const promise = getAccessToken(serviceAccountKey)
-        .then(async (token) => {
-        const expiresAt = Date.now() + 3_600_000;
-        // TTL slightly under the 1h Google validity — cache eviction matches token expiry.
-        await cache.set(cacheKey, { token, expiresAt }, 3_540);
-        return token;
-    })
-        .finally(() => {
-        refreshPromises.delete(cacheKey);
-    });
-    refreshPromises.set(cacheKey, promise);
-    return promise;
-}
-/**
- * Obtain a Google OAuth2 access token using a service account key (JWT assertion flow).
- * The serviceAccountKey is expected to be a JSON string of the service account credentials.
- */
-async function getAccessToken(serviceAccountKey) {
-    let key;
-    try {
-        key = JSON.parse(serviceAccountKey);
-    }
-    catch {
-        throw new Error('[onesub/google] Invalid serviceAccountKey JSON');
-    }
-    const tokenUri = key.token_uri ?? 'https://oauth2.googleapis.com/token';
-    const scope = 'https://www.googleapis.com/auth/androidpublisher';
-    const now = Math.floor(Date.now() / 1000);
-    // Build a JWT assertion
-    const header = Buffer.from(JSON.stringify({ alg: 'RS256', typ: 'JWT' })).toString('base64url');
-    const payload = Buffer.from(JSON.stringify({
-        iss: key.client_email,
-        scope,
-        aud: tokenUri,
-        iat: now,
-        exp: now + 3600,
-    })).toString('base64url');
-    const signingInput = `${header}.${payload}`;
-    // Sign with the private key using the native crypto module
-    const { createSign } = await import('crypto');
-    const sign = createSign('RSA-SHA256');
-    sign.update(signingInput);
-    const signature = sign.sign(key.private_key, 'base64url');
-    const assertion = `${signingInput}.${signature}`;
-    const resp = await fetchWithTimeout(tokenUri, {
-        method: 'POST',
-        headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
-        body: new URLSearchParams({
-            grant_type: 'urn:ietf:params:oauth:grant-type:jwt-bearer',
-            assertion,
-        }),
-    });
-    if (!resp.ok) {
-        throw new Error(`[onesub/google] Token request failed: ${resp.status}`);
-    }
-    const data = (await resp.json());
-    if (!data.access_token)
-        throw new Error('[onesub/google] No access_token in response');
-    return data.access_token;
-}
-/**
- * Fetch a subscription purchase from the Google Play Developer API
- * (purchases.subscriptionsv2.get). The v2 endpoint takes only the purchaseToken
- * — the productId comes back in lineItems, which lets one token represent a
- * multi-product subscription.
- */
-async function fetchSubscriptionPurchaseV2(packageName, purchaseToken, accessToken) {
-    const url = `https://androidpublisher.googleapis.com/androidpublisher/v3/applications/` +
-        `${encodeURIComponent(packageName)}/purchases/subscriptionsv2/tokens/` +
-        `${encodeURIComponent(purchaseToken)}`;
-    const resp = await fetchWithTimeout(url, {
-        headers: { Authorization: `Bearer ${accessToken}` },
-    });
-    if (!resp.ok) {
-        const body = await resp.text();
-        throw new Error(`[onesub/google] Play API v2 error ${resp.status}: ${body}`);
-    }
-    return resp.json();
-}
-/**
- * Fetch a one-time product purchase from the Google Play Developer API.
- * Uses purchases.products instead of purchases.subscriptions.
- */
-async function fetchProductPurchase(packageName, productId, purchaseToken, accessToken) {
-    const url = `https://androidpublisher.googleapis.com/androidpublisher/v3/applications/` +
-        `${encodeURIComponent(packageName)}/purchases/products/` +
-        `${encodeURIComponent(productId)}/tokens/${encodeURIComponent(purchaseToken)}`;
-    const resp = await fetchWithTimeout(url, {
-        headers: { Authorization: `Bearer ${accessToken}` },
-    });
-    if (!resp.ok) {
-        const body = await resp.text();
-        throw new Error(`[onesub/google] Play Products API error ${resp.status}: ${body}`);
-    }
-    return resp.json();
-}
-/**
- * Acknowledge a Google Play subscription purchase.
- * Google auto-refunds purchases that are not acknowledged within 3 days.
- *
- * Idempotent on Google's side: a no-op when the purchase has already been
- * acknowledged. Fire-and-forget — entitlement was already granted, so failures
- * are logged but not surfaced to the caller (operations should monitor logs).
- */
-export async function acknowledgeGoogleSubscription(purchaseToken, productId, config) {
-    if (config.mockMode)
-        return;
-    if (!config.serviceAccountKey)
-        return;
-    let accessToken;
-    try {
-        accessToken = await getCachedAccessToken(config.serviceAccountKey);
-    }
-    catch (err) {
-        log.warn('[onesub/google] Could not get access token for subscription ack:', err);
-        return;
-    }
-    const url = `https://androidpublisher.googleapis.com/androidpublisher/v3/applications/` +
-        `${encodeURIComponent(config.packageName)}/purchases/subscriptions/` +
-        `${encodeURIComponent(productId)}/tokens/${encodeURIComponent(purchaseToken)}:acknowledge`;
-    try {
-        const resp = await fetchWithTimeout(url, {
-            method: 'POST',
-            headers: { Authorization: `Bearer ${accessToken}`, 'Content-Type': 'application/json' },
-            body: '{}',
-        });
-        if (!resp.ok) {
-            const body = await resp.text();
-            log.warn(`[onesub/google] Subscription acknowledge API error ${resp.status}: ${body} — auto-refund risk`);
-        }
-    }
-    catch (err) {
-        log.warn('[onesub/google] Subscription acknowledge network error — auto-refund risk:', err);
-    }
-}
-/**
- * Acknowledge a Google Play one-time product purchase (non-consumable).
- * Consumables do not need this — :consume implicitly acknowledges.
- *
- * Same fire-and-forget semantics as acknowledgeGoogleSubscription.
- */
-export async function acknowledgeGoogleProduct(purchaseToken, productId, config) {
-    if (config.mockMode)
-        return;
-    if (!config.serviceAccountKey)
-        return;
-    let accessToken;
-    try {
-        accessToken = await getCachedAccessToken(config.serviceAccountKey);
-    }
-    catch (err) {
-        log.warn('[onesub/google] Could not get access token for product ack:', err);
-        return;
-    }
-    const url = `https://androidpublisher.googleapis.com/androidpublisher/v3/applications/` +
-        `${encodeURIComponent(config.packageName)}/purchases/products/` +
-        `${encodeURIComponent(productId)}/tokens/${encodeURIComponent(purchaseToken)}:acknowledge`;
-    try {
-        const resp = await fetchWithTimeout(url, {
-            method: 'POST',
-            headers: { Authorization: `Bearer ${accessToken}`, 'Content-Type': 'application/json' },
-            body: '{}',
-        });
-        if (!resp.ok) {
-            const body = await resp.text();
-            log.warn(`[onesub/google] Product acknowledge API error ${resp.status}: ${body} — auto-refund risk`);
-        }
-    }
-    catch (err) {
-        log.warn('[onesub/google] Product acknowledge network error — auto-refund risk:', err);
-    }
-}
-/**
- * Consume a one-time product purchase via the Google Play Developer API.
- * Must be called for consumables after the entitlement is granted to the user.
- * Google auto-refunds unconsumed purchases after 3 days.
- *
- * This function does not throw — callers should log failures and monitor,
- * as the entitlement has already been granted.
- */
-export async function consumeGoogleProductReceipt(purchaseToken, productId, config) {
-    if (!config.serviceAccountKey)
-        return;
-    let accessToken;
-    try {
-        accessToken = await getCachedAccessToken(config.serviceAccountKey);
-    }
-    catch (err) {
-        log.warn('[onesub/google] Could not get access token for consume:', err);
-        return;
-    }
-    const url = `https://androidpublisher.googleapis.com/androidpublisher/v3/applications/` +
-        `${encodeURIComponent(config.packageName)}/purchases/products/` +
-        `${encodeURIComponent(productId)}/tokens/${encodeURIComponent(purchaseToken)}:consume`;
-    try {
-        const resp = await fetchWithTimeout(url, {
-            method: 'POST',
-            headers: { Authorization: `Bearer ${accessToken}` },
-        });
-        if (!resp.ok) {
-            const body = await resp.text();
-            log.warn(`[onesub/google] Consume API error ${resp.status}: ${body} — auto-refund risk`);
-        }
-    }
-    catch (err) {
-        log.warn('[onesub/google] Consume network error — auto-refund risk:', err);
-    }
-}
-/**
- * Map a v2 subscriptionState string to onesub SubscriptionStatus.
- *
- * Returns null when the state is unrecognised or PENDING (initial purchase
- * not yet settled — entitlement should not be granted yet).
- */
-function deriveStatusV2(state) {
-    switch (state) {
-        case 'SUBSCRIPTION_STATE_ACTIVE':
-            return SUBSCRIPTION_STATUS.ACTIVE;
-        case 'SUBSCRIPTION_STATE_IN_GRACE_PERIOD':
-            return SUBSCRIPTION_STATUS.GRACE_PERIOD;
-        case 'SUBSCRIPTION_STATE_ON_HOLD':
-            return SUBSCRIPTION_STATUS.ON_HOLD;
-        case 'SUBSCRIPTION_STATE_PAUSED':
-            return SUBSCRIPTION_STATUS.PAUSED;
-        case 'SUBSCRIPTION_STATE_CANCELED':
-            return SUBSCRIPTION_STATUS.CANCELED;
-        case 'SUBSCRIPTION_STATE_EXPIRED':
-            return SUBSCRIPTION_STATUS.EXPIRED;
-        case 'SUBSCRIPTION_STATE_PENDING':
-        case 'SUBSCRIPTION_STATE_UNSPECIFIED':
-        default:
-            return null;
-    }
-}
-/**
- * Validate a Google Play purchase token via purchases.subscriptionsv2.get.
- *
- * The productId argument is used to pick the matching `lineItems` entry. If
- * the response has no lineItem with that productId, validation fails — the
- * token does not entitle the caller to that product. (For multi-product
- * subscriptions, callers can read other lineItems out of the API directly.)
- *
- * @param receipt    The purchaseToken from the client (Google Play Billing)
- * @param productId  Expected subscription productId — must match a lineItem
- * @param config     Google config with packageName + optional serviceAccountKey
- */
-export async function validateGoogleReceipt(receipt, productId, config) {
-    if (config.mockMode)
-        return mockValidateGoogleSubscription(receipt, productId);
-    if (!config.serviceAccountKey) {
-        log.warn('[onesub/google] No serviceAccountKey provided — cannot call Play API');
-        return null;
-    }
-    let purchase;
-    try {
-        const token = await getCachedAccessToken(config.serviceAccountKey);
-        purchase = await fetchSubscriptionPurchaseV2(config.packageName, receipt, token);
-    }
-    catch (err) {
-        log.error('[onesub/google] Receipt validation failed:', err);
-        return null;
-    }
-    const status = deriveStatusV2(purchase.subscriptionState);
-    if (!status) {
-        log.warn('[onesub/google] Unrecognised or pending subscriptionState — rejecting:', purchase.subscriptionState);
-        return null;
-    }
-    // Pick the lineItem matching the requested productId. v2 supports multi-product
-    // subscriptions so the same token can carry several lineItems; we only entitle
-    // the caller for the productId they explicitly asked about.
-    const lineItem = purchase.lineItems?.find((item) => item.productId === productId);
-    if (!lineItem) {
-        log.warn('[onesub/google] productId not found in subscription lineItems:', productId, 'available:', purchase.lineItems?.map((i) => i.productId).join(', ') ?? '(none)');
-        return null;
-    }
-    const expiresAt = lineItem.expiryTime ?? new Date().toISOString();
-    const purchasedAt = purchase.startTime ?? new Date().toISOString();
-    const willRenew = lineItem.autoRenewingPlan?.autoRenewEnabled ?? false;
-    // Surface autoResumeTime only when the subscription is actually paused —
-    // pausedStateContext is undefined for any other state, but be defensive in
-    // case Google starts including it on adjacent states (e.g. recently-resumed).
-    const autoResumeTime = status === SUBSCRIPTION_STATUS.PAUSED
-        ? purchase.pausedStateContext?.autoResumeTime
-        : undefined;
-    return {
-        userId: '', // caller fills this in
-        productId,
-        platform: 'google',
-        status,
-        expiresAt,
-        originalTransactionId: purchase.latestOrderId ?? receipt.slice(0, 64),
-        purchasedAt,
-        willRenew,
-        // Surface the linked token so host apps (and our webhook userId-continuity
-        // logic) can follow upgrade/downgrade chains.
-        linkedPurchaseToken: purchase.linkedPurchaseToken,
-        autoResumeTime,
-    };
-}
-/**
- * Validate a Google Play purchase token for a one-time product (consumable or
- * non-consumable). Uses purchases.products, not purchases.subscriptions.
- *
- * Security checks applied beyond basic API verification:
- * - purchaseState must be 0 (completed)
- * - consumptionState checked for consumables: already-consumed tokens indicate replay
- * - Receipt age limited to 72 hours
- * - orderId used as transactionId (per-purchase unique, unlike purchaseToken)
- */
-export async function validateGoogleProductReceipt(purchaseToken, productId, config, type = 'non_consumable') {
-    if (config.mockMode)
-        return mockValidateGoogleProduct(purchaseToken, productId);
-    if (!config.serviceAccountKey) {
-        log.warn('[onesub/google] No serviceAccountKey — cannot validate product receipt');
-        return null;
-    }
-    let purchase;
-    try {
-        const token = await getCachedAccessToken(config.serviceAccountKey);
-        purchase = await fetchProductPurchase(config.packageName, productId, purchaseToken, token);
-    }
-    catch (err) {
-        log.error('[onesub/google] Product receipt validation failed:', err);
-        return null;
-    }
-    // purchaseState 0 = completed (1 = canceled, 2 = pending)
-    if (purchase.purchaseState !== 0) {
-        log.warn('[onesub/google] Purchase not completed, state:', purchase.purchaseState);
-        return null;
-    }
-    // For consumables: consumptionState 1 means already consumed by a previous request.
-    // This is the primary replay-attack signal for consumables on Android.
-    if (type === 'consumable' && purchase.consumptionState === 1) {
-        log.warn('[onesub/google] Consumable already consumed — possible replay attack');
-        return null;
-    }
-    // Reject receipts older than 72 hours
-    if (purchase.purchaseTimeMillis) {
-        const purchaseTime = parseInt(purchase.purchaseTimeMillis, 10);
-        if (Date.now() - purchaseTime > MAX_PRODUCT_RECEIPT_AGE_MS) {
-            log.warn('[onesub/google] Product receipt too old (>72h)');
-            return null;
-        }
-    }
-    if (!purchase.orderId) {
-        log.warn('[onesub/google] No orderId in product purchase');
-        return null;
-    }
-    return {
-        transactionId: purchase.orderId,
-        purchasedAt: purchase.purchaseTimeMillis
-            ? new Date(parseInt(purchase.purchaseTimeMillis, 10)).toISOString()
-            : new Date().toISOString(),
-    };
-}
-/**
- * Decode a Google RTDN Pub/Sub notification.
- * Returns the extracted subscription notification data, or null for test pings
- * and notification kinds handled by other decoders (e.g. voided purchases).
- */
-export function decodeGoogleNotification(payload) {
-    let notification;
-    try {
-        const json = Buffer.from(payload.message.data, 'base64').toString('utf-8');
-        notification = JSON.parse(json);
-    }
-    catch {
-        return null;
-    }
-    if (!notification.subscriptionNotification) {
-        // test notification, voided purchase, or unsupported type
-        return null;
-    }
-    const { notificationType, purchaseToken, subscriptionId } = notification.subscriptionNotification;
-    return {
-        notificationType,
-        purchaseToken,
-        subscriptionId,
-        packageName: notification.packageName,
-    };
-}
-/**
- * Decode a Google RTDN voidedPurchaseNotification, if the payload is one.
- * Returns null when the payload is a different notification kind.
- */
-export function decodeGoogleVoidedNotification(payload) {
-    let notification;
-    try {
-        const json = Buffer.from(payload.message.data, 'base64').toString('utf-8');
-        notification = JSON.parse(json);
-    }
-    catch {
-        return null;
-    }
-    if (!notification.voidedPurchaseNotification)
-        return null;
-    const { purchaseToken, orderId, productType, refundType } = notification.voidedPurchaseNotification;
-    return {
-        purchaseToken,
-        orderId,
-        productType,
-        refundType,
-        packageName: notification.packageName,
-    };
-}
-/**
- * Determine if a Google RTDN notification type represents an active subscription
- * inside the paid window (excludes grace period — that's a separate state now).
- */
-export function isGoogleActiveNotification(notificationType) {
-    return (notificationType === GOOGLE_NOTIFICATION_TYPE.SUBSCRIPTION_PURCHASED ||
-        notificationType === GOOGLE_NOTIFICATION_TYPE.SUBSCRIPTION_RENEWED ||
-        notificationType === GOOGLE_NOTIFICATION_TYPE.SUBSCRIPTION_RECOVERED ||
-        notificationType === GOOGLE_NOTIFICATION_TYPE.SUBSCRIPTION_RESTARTED);
-}
-export function isGoogleCanceledNotification(notificationType) {
-    return (notificationType === GOOGLE_NOTIFICATION_TYPE.SUBSCRIPTION_CANCELED ||
-        notificationType === GOOGLE_NOTIFICATION_TYPE.SUBSCRIPTION_REVOKED);
-}
-export function isGoogleExpiredNotification(notificationType) {
-    return notificationType === GOOGLE_NOTIFICATION_TYPE.SUBSCRIPTION_EXPIRED;
-}
-/**
- * Subscription is in the store-granted grace period — payment failed but the
- * user retains access while Google retries. Maps to SUBSCRIPTION_STATUS.GRACE_PERIOD.
- */
-export function isGoogleGracePeriodNotification(notificationType) {
-    return notificationType === GOOGLE_NOTIFICATION_TYPE.SUBSCRIPTION_IN_GRACE_PERIOD;
-}
-/**
- * Subscription is on hold — grace period ended, retry continuing, entitlement
- * REVOKED. Maps to SUBSCRIPTION_STATUS.ON_HOLD.
- */
-export function isGoogleOnHoldNotification(notificationType) {
-    return notificationType === GOOGLE_NOTIFICATION_TYPE.SUBSCRIPTION_ON_HOLD;
-}
-/**
- * User-voluntary pause — entitlement REVOKED until autoResumeTime or manual
- * resume. Maps to SUBSCRIPTION_STATUS.PAUSED.
- */
-export function isGooglePausedNotification(notificationType) {
-    return notificationType === GOOGLE_NOTIFICATION_TYPE.SUBSCRIPTION_PAUSED;
-}
-/**
- * User agreed to a developer-initiated price change. The new price applies
- * on the next renewal. Subscription remains active in the meantime.
- */
-export function isGooglePriceChangeConfirmedNotification(notificationType) {
-    return notificationType === GOOGLE_NOTIFICATION_TYPE.SUBSCRIPTION_PRICE_CHANGE_CONFIRMED;
-}
-//# sourceMappingURL=google.js.map

package/dist/providers/google.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"google.js","sourceRoot":"","sources":["../../src/providers/google.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AACrD,OAAO,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AACnC,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EACL,8BAA8B,EAC9B,yBAAyB,GAC1B,MAAM,WAAW,CAAC;AAqDnB;;;GAGG;AACH,MAAM,wBAAwB,GAAG;IAC/B,sBAAsB,EAAE,CAAC;IACzB,oBAAoB,EAAE,CAAC;IACvB,qBAAqB,EAAE,CAAC;IACxB,sBAAsB,EAAE,CAAC;IACzB,oBAAoB,EAAE,CAAC;IACvB,4BAA4B,EAAE,CAAC;IAC/B,sBAAsB,EAAE,CAAC;IACzB,mCAAmC,EAAE,CAAC;IACtC,qBAAqB,EAAE,CAAC;IACxB,mBAAmB,EAAE,EAAE;IACvB,mCAAmC,EAAE,EAAE;IACvC,oBAAoB,EAAE,EAAE;IACxB,oBAAoB,EAAE,EAAE;CAChB,CAAC;AA0CX,mDAAmD;AACnD,MAAM,0BAA0B,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAEvD;;;;;;GAMG;AACH,MAAM,eAAe,GAAG,IAAI,GAAG,EAA2B,CAAC;AAE3D;;;;;;GAMG;AACH,SAAS,mBAAmB,CAAC,iBAAyB;IACpD,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,iBAAiB,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAClD,IAAI,GAAG,CAAC,IAAI,GAAG,EAAE,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO,gBAAgB,IAAI,EAAE,CAAC;AAChC,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,KAAK,UAAU,oBAAoB,CAAC,iBAAyB;IAC3D,MAAM,KAAK,GAAG,eAAe,EAAE,CAAC;IAChC,MAAM,QAAQ,GAAG,mBAAmB,CAAC,iBAAiB,CAAC,CAAC;IAExD,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,GAAG,CAAuC,QAAQ,CAAC,CAAC;IAC/E,IAAI,MAAM,IAAI,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC;QACrD,OAAO,MAAM,CAAC,KAAK,CAAC;IACtB,CAAC;IAED,MAAM,QAAQ,GAAG,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC/C,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAE9B,MAAM,OAAO,GAAG,cAAc,CAAC,iBAAiB,CAAC;SAC9C,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QACpB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QACzC,mFAAmF;QACnF,MAAM,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,KAAK,CAAC,CAAC;QACvD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;SACD,OAAO,CAAC,GAAG,EAAE;QACZ,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IACL,eAAe,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACvC,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,cAAc,CAAC,iBAAyB;IACrD,IAAI,GAIH,CAAC;IAEF,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAe,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IAED,MAAM,QAAQ,GAAG,GAAG,CAAC,SAAS,IAAI,qCAAqC,CAAC;IACxE,MAAM,KAAK,GAAG,kDAAkD,CAAC;IACjE,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAE1C,wBAAwB;IACxB,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC/F,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CACzB,IAAI,CAAC,SAAS,CAAC;QACb,GAAG,EAAE,GAAG,CAAC,YAAY;QACrB,KAAK;QACL,GAAG,EAAE,QAAQ;QACb,GAAG,EAAE,GAAG;QACR,GAAG,EAAE,GAAG,GAAG,IAAI;KAChB,CAAC,CACH,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAExB,MAAM,YAAY,GAAG,GAAG,MAAM,IAAI,OAAO,EAAE,CAAC;IAE5C,2DAA2D;IAC3D,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC9C,MAAM,IAAI,GAAG,UAAU,CAAC,YAAY,CAAC,CAAC;IACtC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IAC1B,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;IAE1D,MAAM,SAAS,GAAG,GAAG,YAAY,IAAI,SAAS,EAAE,CAAC;IAEjD,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,QAAQ,EAAE;QAC5C,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;QAChE,IAAI,EAAE,IAAI,eAAe,CAAC;YACxB,UAAU,EAAE,6CAA6C;YACzD,SAAS;SACV,CAAC;KACH,CAAC,CAAC;IAEH,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,yCAAyC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IAC1E,CAAC;IAED,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAA8B,CAAC;IAC9D,IAAI,CAAC,IAAI,CAAC,YAAY;QAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACvF,OAAO,IAAI,CAAC,YAAY,CAAC;AAC3B,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,2BAA2B,CACxC,WAAmB,EACnB,aAAqB,EACrB,WAAmB;IAEnB,MAAM,GAAG,GACP,2EAA2E;QAC3E,GAAG,kBAAkB,CAAC,WAAW,CAAC,oCAAoC;QACtE,GAAG,kBAAkB,CAAC,aAAa,CAAC,EAAE,CAAC;IAEzC,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE;QACvC,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,WAAW,EAAE,EAAE;KACpD,CAAC,CAAC;IAEH,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QACb,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,qCAAqC,IAAI,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC,CAAC;IAC/E,CAAC;IAED,OAAO,IAAI,CAAC,IAAI,EAA2C,CAAC;AAC9D,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,oBAAoB,CACjC,WAAmB,EACnB,SAAiB,EACjB,aAAqB,EACrB,WAAmB;IAEnB,MAAM,GAAG,GACP,2EAA2E;QAC3E,GAAG,kBAAkB,CAAC,WAAW,CAAC,sBAAsB;QACxD,GAAG,kBAAkB,CAAC,SAAS,CAAC,WAAW,kBAAkB,CAAC,aAAa,CAAC,EAAE,CAAC;IAEjF,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE;QACvC,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,WAAW,EAAE,EAAE;KACpD,CAAC,CAAC;IAEH,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QACb,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,2CAA2C,IAAI,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC,CAAC;IACrF,CAAC;IAED,OAAO,IAAI,CAAC,IAAI,EAAoC,CAAC;AACvD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,aAAqB,EACrB,SAAiB,EACjB,MAAoB;IAEpB,IAAI,MAAM,CAAC,QAAQ;QAAE,OAAO;IAC5B,IAAI,CAAC,MAAM,CAAC,iBAAiB;QAAE,OAAO;IAEtC,IAAI,WAAmB,CAAC;IACxB,IAAI,CAAC;QACH,WAAW,GAAG,MAAM,oBAAoB,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;IACrE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,IAAI,CAAC,kEAAkE,EAAE,GAAG,CAAC,CAAC;QAClF,OAAO;IACT,CAAC;IAED,MAAM,GAAG,GACP,2EAA2E;QAC3E,GAAG,kBAAkB,CAAC,MAAM,CAAC,WAAW,CAAC,2BAA2B;QACpE,GAAG,kBAAkB,CAAC,SAAS,CAAC,WAAW,kBAAkB,CAAC,aAAa,CAAC,cAAc,CAAC;IAE7F,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE;YACvC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,WAAW,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YACvF,IAAI,EAAE,IAAI;SACX,CAAC,CAAC;QAEH,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YACb,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;YAC/B,GAAG,CAAC,IAAI,CAAC,sDAAsD,IAAI,CAAC,MAAM,KAAK,IAAI,qBAAqB,CAAC,CAAC;QAC5G,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,IAAI,CAAC,4EAA4E,EAAE,GAAG,CAAC,CAAC;IAC9F,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,aAAqB,EACrB,SAAiB,EACjB,MAAoB;IAEpB,IAAI,MAAM,CAAC,QAAQ;QAAE,OAAO;IAC5B,IAAI,CAAC,MAAM,CAAC,iBAAiB;QAAE,OAAO;IAEtC,IAAI,WAAmB,CAAC;IACxB,IAAI,CAAC;QACH,WAAW,GAAG,MAAM,oBAAoB,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;IACrE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,IAAI,CAAC,6DAA6D,EAAE,GAAG,CAAC,CAAC;QAC7E,OAAO;IACT,CAAC;IAED,MAAM,GAAG,GACP,2EAA2E;QAC3E,GAAG,kBAAkB,CAAC,MAAM,CAAC,WAAW,CAAC,sBAAsB;QAC/D,GAAG,kBAAkB,CAAC,SAAS,CAAC,WAAW,kBAAkB,CAAC,aAAa,CAAC,cAAc,CAAC;IAE7F,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE;YACvC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,WAAW,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YACvF,IAAI,EAAE,IAAI;SACX,CAAC,CAAC;QAEH,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YACb,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;YAC/B,GAAG,CAAC,IAAI,CAAC,iDAAiD,IAAI,CAAC,MAAM,KAAK,IAAI,qBAAqB,CAAC,CAAC;QACvG,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,IAAI,CAAC,uEAAuE,EAAE,GAAG,CAAC,CAAC;IACzF,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,aAAqB,EACrB,SAAiB,EACjB,MAAoB;IAEpB,IAAI,CAAC,MAAM,CAAC,iBAAiB;QAAE,OAAO;IAEtC,IAAI,WAAmB,CAAC;IACxB,IAAI,CAAC;QACH,WAAW,GAAG,MAAM,oBAAoB,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;IACrE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,IAAI,CAAC,yDAAyD,EAAE,GAAG,CAAC,CAAC;QACzE,OAAO;IACT,CAAC;IAED,MAAM,GAAG,GACP,2EAA2E;QAC3E,GAAG,kBAAkB,CAAC,MAAM,CAAC,WAAW,CAAC,sBAAsB;QAC/D,GAAG,kBAAkB,CAAC,SAAS,CAAC,WAAW,kBAAkB,CAAC,aAAa,CAAC,UAAU,CAAC;IAEzF,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE;YACvC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,WAAW,EAAE,EAAE;SACpD,CAAC,CAAC;QAEH,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YACb,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;YAC/B,GAAG,CAAC,IAAI,CAAC,qCAAqC,IAAI,CAAC,MAAM,KAAK,IAAI,qBAAqB,CAAC,CAAC;QAC3F,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,IAAI,CAAC,2DAA2D,EAAE,GAAG,CAAC,CAAC;IAC7E,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAS,cAAc,CACrB,KAAwD;IAExD,QAAQ,KAAK,EAAE,CAAC;QACd,KAAK,2BAA2B;YAC9B,OAAO,mBAAmB,CAAC,MAAM,CAAC;QACpC,KAAK,oCAAoC;YACvC,OAAO,mBAAmB,CAAC,YAAY,CAAC;QAC1C,KAAK,4BAA4B;YAC/B,OAAO,mBAAmB,CAAC,OAAO,CAAC;QACrC,KAAK,2BAA2B;YAC9B,OAAO,mBAAmB,CAAC,MAAM,CAAC;QACpC,KAAK,6BAA6B;YAChC,OAAO,mBAAmB,CAAC,QAAQ,CAAC;QACtC,KAAK,4BAA4B;YAC/B,OAAO,mBAAmB,CAAC,OAAO,CAAC;QACrC,KAAK,4BAA4B,CAAC;QAClC,KAAK,gCAAgC,CAAC;QACtC;YACE,OAAO,IAAI,CAAC;IAChB,CAAC;AACH,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,OAAe,EACf,SAAiB,EACjB,MAAoB;IAEpB,IAAI,MAAM,CAAC,QAAQ;QAAE,OAAO,8BAA8B,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAC/E,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,CAAC;QAC9B,GAAG,CAAC,IAAI,CAAC,sEAAsE,CAAC,CAAC;QACjF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,QAAsC,CAAC;IAC3C,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,oBAAoB,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;QACnE,QAAQ,GAAG,MAAM,2BAA2B,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;IACnF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,KAAK,CAAC,4CAA4C,EAAE,GAAG,CAAC,CAAC;QAC7D,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,MAAM,GAAG,cAAc,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC;IAC1D,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,GAAG,CAAC,IAAI,CACN,wEAAwE,EACxE,QAAQ,CAAC,iBAAiB,CAC3B,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,gFAAgF;IAChF,+EAA+E;IAC/E,4DAA4D;IAC5D,MAAM,QAAQ,GAAG,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC;IAClF,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,GAAG,CAAC,IAAI,CACN,gEAAgE,EAChE,SAAS,EACT,YAAY,EACZ,QAAQ,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,QAAQ,CACnE,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,SAAS,GAAG,QAAQ,CAAC,UAAU,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAClE,MAAM,WAAW,GAAG,QAAQ,CAAC,SAAS,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACnE,MAAM,SAAS,GAAG,QAAQ,CAAC,gBAAgB,EAAE,gBAAgB,IAAI,KAAK,CAAC;IAEvE,yEAAyE;IACzE,2EAA2E;IAC3E,8EAA8E;IAC9E,MAAM,cAAc,GAClB,MAAM,KAAK,mBAAmB,CAAC,MAAM;QACnC,CAAC,CAAC,QAAQ,CAAC,kBAAkB,EAAE,cAAc;QAC7C,CAAC,CAAC,SAAS,CAAC;IAEhB,OAAO;QACL,MAAM,EAAE,EAAE,EAAG,uBAAuB;QACpC,SAAS;QACT,QAAQ,EAAE,QAAQ;QAClB,MAAM;QACN,SAAS;QACT,qBAAqB,EAAE,QAAQ,CAAC,aAAa,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;QACrE,WAAW;QACX,SAAS;QACT,2EAA2E;QAC3E,8CAA8C;QAC9C,mBAAmB,EAAE,QAAQ,CAAC,mBAAmB;QACjD,cAAc;KACf,CAAC;AACJ,CAAC;AAWD;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,aAAqB,EACrB,SAAiB,EACjB,MAAoB,EACpB,OAAwC,gBAAgB;IAExD,IAAI,MAAM,CAAC,QAAQ;QAAE,OAAO,yBAAyB,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;IAChF,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,CAAC;QAC9B,GAAG,CAAC,IAAI,CAAC,wEAAwE,CAAC,CAAC;QACnF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,QAA+B,CAAC;IACpC,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,oBAAoB,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;QACnE,QAAQ,GAAG,MAAM,oBAAoB,CAAC,MAAM,CAAC,WAAW,EAAE,SAAS,EAAE,aAAa,EAAE,KAAK,CAAC,CAAC;IAC7F,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,KAAK,CAAC,oDAAoD,EAAE,GAAG,CAAC,CAAC;QACrE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,0DAA0D;IAC1D,IAAI,QAAQ,CAAC,aAAa,KAAK,CAAC,EAAE,CAAC;QACjC,GAAG,CAAC,IAAI,CAAC,gDAAgD,EAAE,QAAQ,CAAC,aAAa,CAAC,CAAC;QACnF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,oFAAoF;IACpF,uEAAuE;IACvE,IAAI,IAAI,KAAK,YAAY,IAAI,QAAQ,CAAC,gBAAgB,KAAK,CAAC,EAAE,CAAC;QAC7D,GAAG,CAAC,IAAI,CAAC,sEAAsE,CAAC,CAAC;QACjF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,sCAAsC;IACtC,IAAI,QAAQ,CAAC,kBAAkB,EAAE,CAAC;QAChC,MAAM,YAAY,GAAG,QAAQ,CAAC,QAAQ,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC;QAC/D,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,YAAY,GAAG,0BAA0B,EAAE,CAAC;YAC3D,GAAG,CAAC,IAAI,CAAC,gDAAgD,CAAC,CAAC;YAC3D,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;QACtB,GAAG,CAAC,IAAI,CAAC,gDAAgD,CAAC,CAAC;QAC3D,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO;QACL,aAAa,EAAE,QAAQ,CAAC,OAAO;QAC/B,WAAW,EAAE,QAAQ,CAAC,kBAAkB;YACtC,CAAC,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE;YACnE,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KAC7B,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CAAC,OAAkC;IAMzE,IAAI,YAAyC,CAAC;IAE9C,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC3E,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAgC,CAAC;IACjE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAAC,YAAY,CAAC,wBAAwB,EAAE,CAAC;QAC3C,0DAA0D;QAC1D,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,EAAE,gBAAgB,EAAE,aAAa,EAAE,cAAc,EAAE,GAAG,YAAY,CAAC,wBAAwB,CAAC;IAElG,OAAO;QACL,gBAAgB;QAChB,aAAa;QACb,cAAc;QACd,WAAW,EAAE,YAAY,CAAC,WAAW;KACtC,CAAC;AACJ,CAAC;AAoBD;;;GAGG;AACH,MAAM,UAAU,8BAA8B,CAC5C,OAAkC;IAElC,IAAI,YAAyC,CAAC;IAE9C,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC3E,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAgC,CAAC;IACjE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAAC,YAAY,CAAC,0BAA0B;QAAE,OAAO,IAAI,CAAC;IAE1D,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,GAAG,YAAY,CAAC,0BAA0B,CAAC;IAEpG,OAAO;QACL,aAAa;QACb,OAAO;QACP,WAAW;QACX,UAAU;QACV,WAAW,EAAE,YAAY,CAAC,WAAW;KACtC,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,0BAA0B,CAAC,gBAAwC;IACjF,OAAO,CACL,gBAAgB,KAAK,wBAAwB,CAAC,sBAAsB;QACpE,gBAAgB,KAAK,wBAAwB,CAAC,oBAAoB;QAClE,gBAAgB,KAAK,wBAAwB,CAAC,sBAAsB;QACpE,gBAAgB,KAAK,wBAAwB,CAAC,sBAAsB,CACrE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,gBAAwC;IACnF,OAAO,CACL,gBAAgB,KAAK,wBAAwB,CAAC,qBAAqB;QACnE,gBAAgB,KAAK,wBAAwB,CAAC,oBAAoB,CACnE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,gBAAwC;IAClF,OAAO,gBAAgB,KAAK,wBAAwB,CAAC,oBAAoB,CAAC;AAC5E,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,+BAA+B,CAAC,gBAAwC;IACtF,OAAO,gBAAgB,KAAK,wBAAwB,CAAC,4BAA4B,CAAC;AACpF,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,0BAA0B,CAAC,gBAAwC;IACjF,OAAO,gBAAgB,KAAK,wBAAwB,CAAC,oBAAoB,CAAC;AAC5E,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,0BAA0B,CAAC,gBAAwC;IACjF,OAAO,gBAAgB,KAAK,wBAAwB,CAAC,mBAAmB,CAAC;AAC3E,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,wCAAwC,CAAC,gBAAwC;IAC/F,OAAO,gBAAgB,KAAK,wBAAwB,CAAC,mCAAmC,CAAC;AAC3F,CAAC"}

package/dist/providers/mock.js

@@ -1,93 +0,0 @@
-import { createHash } from 'node:crypto';
-import { SUBSCRIPTION_STATUS, MOCK_RECEIPT_PREFIX } from '@onesub/shared';
-import { log } from '../logger.js';
-export function classifyMockReceipt(receipt) {
-    if (receipt.startsWith(MOCK_RECEIPT_PREFIX.NETWORK_ERROR))
-        return { kind: 'network-error' };
-    if (receipt.startsWith(MOCK_RECEIPT_PREFIX.REVOKED))
-        return { kind: 'revoked' };
-    if (receipt.startsWith(MOCK_RECEIPT_PREFIX.EXPIRED))
-        return { kind: 'expired' };
-    if (receipt.startsWith(MOCK_RECEIPT_PREFIX.INVALID) ||
-        receipt.startsWith(MOCK_RECEIPT_PREFIX.BAD_SIG)) {
-        return { kind: 'invalid' };
-    }
-    if (receipt.startsWith(MOCK_RECEIPT_PREFIX.SANDBOX))
-        return { kind: 'sandbox' };
-    return { kind: 'valid' };
-}
-/**
- * Gate the outcome against `valid` / `sandbox`. Throws for network-error,
- * logs + returns false for rejection cases, returns true for pass-through.
- * Every mock validator uses this so their rejection behavior stays in sync.
- */
-function outcomePasses(outcome, tag) {
-    if (outcome.kind === 'network-error') {
-        throw new Error(`[onesub/mock/${tag}] simulated upstream network error`);
-    }
-    if (outcome.kind === 'valid' || outcome.kind === 'sandbox')
-        return true;
-    log.warn(`[onesub/mock/${tag}] receipt rejected`, { outcome: outcome.kind });
-    return false;
-}
-function deterministicTransactionId(prefix, receipt) {
-    const digest = createHash('sha256').update(receipt).digest('hex').slice(0, 24);
-    return `${prefix}_${digest}`;
-}
-const HOURS = 60 * 60 * 1000;
-const DAYS = 24 * HOURS;
-export function mockValidateAppleSubscription(receipt) {
-    const outcome = classifyMockReceipt(receipt);
-    if (!outcomePasses(outcome, 'apple'))
-        return null;
-    const now = Date.now();
-    const expiresAt = outcome.kind === 'sandbox' ? now + 1 * HOURS : now + 30 * DAYS;
-    return {
-        userId: '',
-        productId: 'mock_subscription',
-        platform: 'apple',
-        status: SUBSCRIPTION_STATUS.ACTIVE,
-        expiresAt: new Date(expiresAt).toISOString(),
-        originalTransactionId: deterministicTransactionId('mock_apple_orig', receipt),
-        purchasedAt: new Date(now).toISOString(),
-        willRenew: true,
-    };
-}
-export function mockValidateAppleProduct(receipt, expectedProductId) {
-    const outcome = classifyMockReceipt(receipt);
-    if (!outcomePasses(outcome, 'apple'))
-        return null;
-    const productId = expectedProductId ?? 'mock_product';
-    return {
-        transactionId: deterministicTransactionId(`mock_apple_${productId}`, receipt),
-        productId,
-        purchasedAt: new Date().toISOString(),
-    };
-}
-export function mockValidateGoogleSubscription(receipt, productId) {
-    const outcome = classifyMockReceipt(receipt);
-    if (!outcomePasses(outcome, 'google'))
-        return null;
-    const now = Date.now();
-    const expiresAt = outcome.kind === 'sandbox' ? now + 1 * HOURS : now + 30 * DAYS;
-    return {
-        userId: '',
-        productId,
-        platform: 'google',
-        status: SUBSCRIPTION_STATUS.ACTIVE,
-        expiresAt: new Date(expiresAt).toISOString(),
-        originalTransactionId: deterministicTransactionId('mock_google_orig', receipt),
-        purchasedAt: new Date(now).toISOString(),
-        willRenew: true,
-    };
-}
-export function mockValidateGoogleProduct(receipt, productId) {
-    const outcome = classifyMockReceipt(receipt);
-    if (!outcomePasses(outcome, 'google'))
-        return null;
-    return {
-        transactionId: deterministicTransactionId(`mock_google_${productId}`, receipt),
-        purchasedAt: new Date().toISOString(),
-    };
-}
-//# sourceMappingURL=mock.js.map

package/dist/providers/mock.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"mock.js","sourceRoot":"","sources":["../../src/providers/mock.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAC1E,OAAO,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AA8BnC,MAAM,UAAU,mBAAmB,CAAC,OAAe;IACjD,IAAI,OAAO,CAAC,UAAU,CAAC,mBAAmB,CAAC,aAAa,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;IAC5F,IAAI,OAAO,CAAC,UAAU,CAAC,mBAAmB,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAChF,IAAI,OAAO,CAAC,UAAU,CAAC,mBAAmB,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAChF,IACE,OAAO,CAAC,UAAU,CAAC,mBAAmB,CAAC,OAAO,CAAC;QAC/C,OAAO,CAAC,UAAU,CAAC,mBAAmB,CAAC,OAAO,CAAC,EAC/C,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAC7B,CAAC;IACD,IAAI,OAAO,CAAC,UAAU,CAAC,mBAAmB,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAChF,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AAC3B,CAAC;AAED;;;;GAIG;AACH,SAAS,aAAa,CAAC,OAA2B,EAAE,GAAW;IAC7D,IAAI,OAAO,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CAAC,gBAAgB,GAAG,oCAAoC,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACxE,GAAG,CAAC,IAAI,CAAC,gBAAgB,GAAG,oBAAoB,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IAC7E,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,0BAA0B,CAAC,MAAc,EAAE,OAAe;IACjE,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC/E,OAAO,GAAG,MAAM,IAAI,MAAM,EAAE,CAAC;AAC/B,CAAC;AAED,MAAM,KAAK,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAC7B,MAAM,IAAI,GAAG,EAAE,GAAG,KAAK,CAAC;AAExB,MAAM,UAAU,6BAA6B,CAAC,OAAe;IAC3D,MAAM,OAAO,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAC7C,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IAClD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,GAAG,GAAG,EAAE,GAAG,IAAI,CAAC;IACjF,OAAO;QACL,MAAM,EAAE,EAAE;QACV,SAAS,EAAE,mBAAmB;QAC9B,QAAQ,EAAE,OAAO;QACjB,MAAM,EAAE,mBAAmB,CAAC,MAAM;QAClC,SAAS,EAAE,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE;QAC5C,qBAAqB,EAAE,0BAA0B,CAAC,iBAAiB,EAAE,OAAO,CAAC;QAC7E,WAAW,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE;QACxC,SAAS,EAAE,IAAI;KAChB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,OAAe,EACf,iBAA0B;IAE1B,MAAM,OAAO,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAC7C,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IAClD,MAAM,SAAS,GAAG,iBAAiB,IAAI,cAAc,CAAC;IACtD,OAAO;QACL,aAAa,EAAE,0BAA0B,CAAC,cAAc,SAAS,EAAE,EAAE,OAAO,CAAC;QAC7E,SAAS;QACT,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACtC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,8BAA8B,CAC5C,OAAe,EACf,SAAiB;IAEjB,MAAM,OAAO,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAC7C,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IACnD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,GAAG,GAAG,EAAE,GAAG,IAAI,CAAC;IACjF,OAAO;QACL,MAAM,EAAE,EAAE;QACV,SAAS;QACT,QAAQ,EAAE,QAAQ;QAClB,MAAM,EAAE,mBAAmB,CAAC,MAAM;QAClC,SAAS,EAAE,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE;QAC5C,qBAAqB,EAAE,0BAA0B,CAAC,kBAAkB,EAAE,OAAO,CAAC;QAC9E,WAAW,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE;QACxC,SAAS,EAAE,IAAI;KAChB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,OAAe,EACf,SAAiB;IAEjB,MAAM,OAAO,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAC7C,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IACnD,OAAO;QACL,aAAa,EAAE,0BAA0B,CAAC,eAAe,SAAS,EAAE,EAAE,OAAO,CAAC;QAC9E,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACtC,CAAC;AACJ,CAAC"}