@onesub/server 0.13.0 → 0.14.0

package/dist/routes/webhook.js

@@ -1,461 +1,19 @@
 import { Router } from 'express';
-import { createRemoteJWKSet, jwtVerify } from 'jose';
-import { ROUTES, SUBSCRIPTION_STATUS, ONESUB_ERROR_CODE } from '@onesub/shared';
-import { decodeAppleNotification, decodeJws, sendAppleConsumptionResponse, fetchAppleSubscriptionStatus, } from '../providers/apple.js';
-import { decodeGoogleNotification, decodeGoogleVoidedNotification, validateGoogleReceipt, isGoogleActiveNotification, isGoogleCanceledNotification, isGoogleExpiredNotification, isGoogleGracePeriodNotification, isGoogleOnHoldNotification, isGooglePausedNotification, isGooglePriceChangeConfirmedNotification, } from '../providers/google.js';
-import { log } from '../logger.js';
-import { sendError } from '../errors.js';
-/**
- * Google's public JWKS endpoint used to verify Pub/Sub push JWT tokens.
- */
-const GOOGLE_JWKS_URL = 'https://www.googleapis.com/oauth2/v3/certs';
-// Lazily initialised — the JWKS fetch only occurs when the endpoint is first hit
-// and pushAudience is configured.
-let googleJwks = null;
-function getGoogleJwks() {
-    if (!googleJwks) {
-        googleJwks = createRemoteJWKSet(new URL(GOOGLE_JWKS_URL));
-    }
-    return googleJwks;
-}
-/**
- * Verifies the `Authorization: Bearer <token>` header as a Google-signed JWT
- * and checks that the `aud` claim matches `expectedAudience`.
- *
- * Returns `true` when verification succeeds, `false` otherwise.
- */
-async function verifyGooglePushToken(req, expectedAudience) {
-    const authHeader = req.headers['authorization'];
-    if (typeof authHeader !== 'string' || !authHeader.startsWith('Bearer ')) {
-        return false;
-    }
-    const token = authHeader.slice('Bearer '.length).trim();
-    try {
-        await jwtVerify(token, getGoogleJwks(), { audience: expectedAudience });
-        return true;
-    }
-    catch {
-        return false;
-    }
-}
-/**
- * Apple V2 notification types that indicate the subscription is now active.
- */
-const APPLE_ACTIVE_TYPES = new Set([
-    'SUBSCRIBED',
-    'DID_RENEW',
-    'DID_RECOVER',
-    'OFFER_REDEEMED',
-]);
-/**
- * Apple V2 notification types that indicate cancellation.
- */
-const APPLE_CANCELED_TYPES = new Set([
-    'REVOKE',
-    'REFUND',
-    'CONSUMPTION_REQUEST',
-]);
-/**
- * Apple V2 notification types that indicate expiry.
- * Pure EXPIRED only — GRACE_PERIOD_EXPIRED is handled separately as on_hold
- * because billing retry continues after the grace window ends.
- */
-const APPLE_EXPIRED_TYPES = new Set([
-    'EXPIRED',
-]);
-/**
- * Map an Apple notification (notificationType + optional subtype) to a
- * lifecycle state. Returns null if the notification doesn't carry an explicit
- * lifecycle signal (in which case the caller falls back to the JWS-derived status).
- *
- * Apple references:
- *   DID_FAIL_TO_RENEW + subtype GRACE_PERIOD  → GRACE_PERIOD
- *   DID_FAIL_TO_RENEW (no subtype)            → ON_HOLD (billing retry, no grace)
- *   GRACE_PERIOD_EXPIRED                      → ON_HOLD (grace ended, retry continues)
- *   EXPIRED                                   → EXPIRED (terminal, no further retries)
- *   SUBSCRIBED / DID_RENEW / DID_RECOVER /
- *     OFFER_REDEEMED                          → ACTIVE
- *   REVOKE / REFUND / CONSUMPTION_REQUEST     → CANCELED
- */
-function mapAppleNotificationStatus(notificationType, subtype) {
-    if (notificationType === 'DID_FAIL_TO_RENEW') {
-        return subtype === 'GRACE_PERIOD'
-            ? SUBSCRIPTION_STATUS.GRACE_PERIOD
-            : SUBSCRIPTION_STATUS.ON_HOLD;
-    }
-    if (notificationType === 'GRACE_PERIOD_EXPIRED')
-        return SUBSCRIPTION_STATUS.ON_HOLD;
-    if (APPLE_CANCELED_TYPES.has(notificationType))
-        return SUBSCRIPTION_STATUS.CANCELED;
-    if (APPLE_EXPIRED_TYPES.has(notificationType))
-        return SUBSCRIPTION_STATUS.EXPIRED;
-    if (APPLE_ACTIVE_TYPES.has(notificationType))
-        return SUBSCRIPTION_STATUS.ACTIVE;
-    return null;
-}
+import { ROUTES } from '@onesub/shared';
+import { handleAppleWebhook } from './webhook-apple.js';
+import { handleGoogleWebhook } from './webhook-google.js';
 /**
  * Retry / durability semantics.
  *
- * Both Apple (App Store Server Notifications V2) and Google (Pub/Sub RTDN)
- * retry on any non-2xx response:
- *   - Apple: up to 5 retries over ~3 days, exponential backoff.
- *   - Google: per-Pub/Sub-subscription retry policy (default: retries until
- *     the message is ack'd or the retention window expires, up to 7 days).
- *
- * This router uses that built-in retry instead of a local dead-letter queue:
- *
- *   4xx — the payload is unusable (missing signedPayload, bad signature,
- *         package mismatch). Return 4xx so the sender does NOT retry, since
- *         the same request would fail again.
- *   5xx — a transient failure on our side (DB down, network to Play API).
- *         Return 5xx so Apple / Google retry the notification for us.
- *   2xx — processed, or intentionally ignored (e.g. test notification).
- *
- * If you need an explicit DLQ, wrap `store.save()` with your own error
- * handler before passing the store to `createOneSubMiddleware()`.
+ * Both Apple and Google retry on any non-2xx response.
+ *   4xx — payload is unusable; do NOT retry.
+ *   5xx — transient failure; source will retry.
+ *   2xx — processed or intentionally ignored.
  */
 export function createWebhookRouter(config, store, purchaseStore, webhookEventStore) {
     const router = Router();
-    /**
-     * POST /onesub/webhook/apple
-     *
-     * Receives Apple App Store Server Notifications V2.
-     * Apple sends a JWS-signed payload with a `signedPayload` field.
-     */
-    router.post(ROUTES.WEBHOOK_APPLE, async (req, res) => {
-        // Apple sends the notification as { signedPayload: "<JWS>" }.
-        // Only the JWS-signed path is accepted. Pre-decoded payloads are rejected
-        // because they bypass signature verification and allow arbitrary state changes.
-        const body = req.body;
-        if (!body.signedPayload) {
-            sendError(res, 400, ONESUB_ERROR_CODE.MISSING_SIGNED_PAYLOAD, 'Missing signedPayload');
-            return;
-        }
-        let payload;
-        try {
-            payload = await decodeJws(body.signedPayload, config.apple?.skipJwsVerification);
-        }
-        catch (err) {
-            log.error('[onesub/webhook/apple] Failed to decode signedPayload:', err);
-            sendError(res, 400, ONESUB_ERROR_CODE.INVALID_SIGNED_PAYLOAD, 'Invalid signedPayload');
-            return;
-        }
-        // Idempotency — Apple's notificationUUID uniquely identifies each
-        // notification across retries. Skip if already processed.
-        if (webhookEventStore && typeof payload.notificationUUID === 'string') {
-            const fresh = await webhookEventStore.markIfNew('apple', payload.notificationUUID);
-            if (!fresh) {
-                log.info('[onesub/webhook/apple] dedupe: already processed', payload.notificationUUID);
-                res.status(200).json({ received: true, deduped: true });
-                return;
-            }
-        }
-        const decoded = await decodeAppleNotification(payload, config.apple?.skipJwsVerification);
-        if (!decoded) {
-            // Could be a test notification or unsupported type — acknowledge it
-            res.status(200).json({ received: true });
-            return;
-        }
-        const { originalTransactionId, transactionId, type, productId, bundleId, environment, status, willRenew, expiresAt, } = decoded;
-        const notificationType = payload.notificationType;
-        const subtype = payload.subtype;
-        // Derive final status from the notification type + subtype (overrides the
-        // JWS-derived status when there is an explicit lifecycle signal).
-        const mapped = mapAppleNotificationStatus(notificationType, subtype);
-        const finalStatus = mapped ?? status;
-        // CONSUMPTION_REQUEST — Apple is asking whether to grant a consumable
-        // refund. If the host app provided a consumptionInfoProvider, call it and
-        // PUT the response. Failures are logged; the webhook still 200s.
-        if (notificationType === 'CONSUMPTION_REQUEST' &&
-            config.apple?.consumptionInfoProvider &&
-            transactionId &&
-            productId) {
-            const provider = config.apple.consumptionInfoProvider;
-            const appleConfig = config.apple;
-            void (async () => {
-                try {
-                    const info = await provider({
-                        transactionId,
-                        originalTransactionId,
-                        productId,
-                        bundleId: bundleId ?? appleConfig.bundleId,
-                        environment,
-                    });
-                    if (info) {
-                        await sendAppleConsumptionResponse(transactionId, info, appleConfig, {
-                            sandbox: environment === 'Sandbox',
-                        });
-                    }
-                }
-                catch (err) {
-                    log.warn('[onesub/webhook/apple] consumptionInfoProvider failed:', err);
-                }
-            })();
-        }
-        // IAP refund / revoke for one-time purchases (consumable / non-consumable).
-        // Apple sends REFUND notifications for both subscriptions and IAP — the
-        // transaction `type` field disambiguates. Subscription refunds keep flowing
-        // into the SubscriptionStore branch below.
-        const isOneTimePurchase = type === 'Consumable' || type === 'Non-Consumable';
-        const isRefundOrRevoke = APPLE_CANCELED_TYPES.has(notificationType);
-        try {
-            if (isOneTimePurchase && isRefundOrRevoke) {
-                // For consumables, the refunded transactionId is unique per purchase.
-                // For non-consumables, transactionId === originalTransactionId, so either
-                // lookup succeeds.
-                const lookupId = transactionId ?? originalTransactionId;
-                const removed = await purchaseStore.deletePurchaseByTransactionId(lookupId);
-                if (!removed) {
-                    log.warn('[onesub/webhook/apple] IAP refund for unknown transaction:', lookupId);
-                }
-                res.status(200).json({ received: true });
-                return;
-            }
-            const existing = await store.getByTransactionId(originalTransactionId);
-            if (existing) {
-                // refundPolicy='until_expiry' for subscription refunds: keep status +
-                // expiresAt untouched, only flip willRenew=false. The status route's
-                // stale-record check will drop the user automatically once expiresAt
-                // passes. Refer to OneSubServerConfig.refundPolicy for rationale.
-                const isSubscriptionRefund = isRefundOrRevoke && !isOneTimePurchase && notificationType !== 'CONSUMPTION_REQUEST';
-                const keepEntitlement = isSubscriptionRefund && config.refundPolicy === 'until_expiry';
-                const updated = keepEntitlement
-                    ? { ...existing, willRenew: false }
-                    : {
-                        ...existing,
-                        status: finalStatus,
-                        willRenew,
-                        // expiresAt may be absent on non-subscription payloads — keep the
-                        // previously-stored value rather than overwriting with null/empty.
-                        expiresAt: expiresAt ?? existing.expiresAt,
-                    };
-                await store.save(updated);
-            }
-            else if (config.apple?.issuerId && config.apple?.keyId && config.apple?.privateKey) {
-                // No local record but App Store Server API credentials are present —
-                // fetch the canonical state from Apple. This recovers from missed
-                // webhooks (server downtime, queue truncation) and bootstraps
-                // subscriptions purchased before this server existed.
-                // userId is unknown at webhook time — store under originalTransactionId
-                // as placeholder so a later /onesub/validate call can claim ownership.
-                const fresh = await fetchAppleSubscriptionStatus(originalTransactionId, config.apple, {
-                    sandbox: environment === 'Sandbox',
-                });
-                if (fresh) {
-                    fresh.userId = originalTransactionId;
-                    await store.save(fresh);
-                }
-                else {
-                    log.warn('[onesub/webhook/apple] Unknown transaction and Status API returned no record:', originalTransactionId);
-                }
-            }
-            else {
-                // No local record and no API credentials to re-fetch — log and ack.
-                log.warn('[onesub/webhook/apple] Received notification for unknown transaction (no API creds to recover):', originalTransactionId);
-            }
-            res.status(200).json({ received: true });
-        }
-        catch (err) {
-            log.error('[onesub/webhook/apple] Store update error:', err);
-            sendError(res, 500, ONESUB_ERROR_CODE.WEBHOOK_PROCESSING_FAILED, 'Failed to update subscription');
-        }
-    });
-    /**
-     * POST /onesub/webhook/google
-     *
-     * Receives Google Play Real-Time Developer Notifications (RTDN) via Pub/Sub push.
-     * The body is a standard Pub/Sub push message with base64-encoded data.
-     */
-    router.post(ROUTES.WEBHOOK_GOOGLE, async (req, res) => {
-        // Verify Google-signed JWT when pushAudience is configured.
-        // If pushAudience is not set, authentication is skipped for backward compatibility.
-        if (config.google?.pushAudience) {
-            const authenticated = await verifyGooglePushToken(req, config.google.pushAudience);
-            if (!authenticated) {
-                sendError(res, 401, ONESUB_ERROR_CODE.UNAUTHORIZED, 'Unauthorized');
-                return;
-            }
-        }
-        const body = req.body;
-        if (!body.message?.data) {
-            sendError(res, 400, ONESUB_ERROR_CODE.MISSING_MESSAGE_DATA, 'Missing message.data');
-            return;
-        }
-        // Idempotency — Pub/Sub guarantees `messageId` uniqueness per notification.
-        // Skip if already processed (Pub/Sub redelivers on any non-2xx).
-        if (webhookEventStore && typeof body.message.messageId === 'string') {
-            const fresh = await webhookEventStore.markIfNew('google', body.message.messageId);
-            if (!fresh) {
-                log.info('[onesub/webhook/google] dedupe: already processed', body.message.messageId);
-                res.status(200).json({ received: true, deduped: true });
-                return;
-            }
-        }
-        // voidedPurchaseNotification — Google's refund/chargeback signal for both
-        // subscriptions and one-time products. Routed here before the regular
-        // subscriptionNotification decoder so it doesn't get swallowed as "unknown".
-        const voided = decodeGoogleVoidedNotification(body);
-        if (voided) {
-            if (config.google?.packageName && voided.packageName !== config.google.packageName) {
-                log.warn('[onesub/webhook/google] voided package name mismatch:', voided.packageName, '!==', config.google.packageName);
-                sendError(res, 400, ONESUB_ERROR_CODE.PACKAGE_NAME_MISMATCH, 'Package name mismatch');
-                return;
-            }
-            try {
-                if (voided.productType === 1) {
-                    // Subscription refund — purchaseToken is stored as originalTransactionId.
-                    const existing = await store.getByTransactionId(voided.purchaseToken);
-                    if (existing) {
-                        // refundPolicy='until_expiry' for subscription refunds: keep
-                        // status + expiresAt, only flip willRenew. See OneSubServerConfig.
-                        const updated = config.refundPolicy === 'until_expiry'
-                            ? { ...existing, willRenew: false }
-                            : { ...existing, status: SUBSCRIPTION_STATUS.CANCELED };
-                        await store.save(updated);
-                    }
-                    else {
-                        log.warn('[onesub/webhook/google] voided subscription for unknown purchaseToken:', voided.purchaseToken);
-                    }
-                }
-                else {
-                    // One-time product refund — orderId is stored as transactionId.
-                    // Always immediate (refundPolicy doesn't apply — IAP has no expiry).
-                    const removed = await purchaseStore.deletePurchaseByTransactionId(voided.orderId);
-                    if (!removed) {
-                        log.warn('[onesub/webhook/google] voided IAP for unknown orderId:', voided.orderId);
-                    }
-                }
-                res.status(200).json({ received: true });
-            }
-            catch (err) {
-                log.error('[onesub/webhook/google] voided notification error:', err);
-                sendError(res, 500, ONESUB_ERROR_CODE.WEBHOOK_PROCESSING_FAILED, 'Failed to process voided notification');
-            }
-            return;
-        }
-        const notification = decodeGoogleNotification(body);
-        if (!notification) {
-            // Test notification or unknown type — acknowledge
-            res.status(200).json({ received: true });
-            return;
-        }
-        const { notificationType, purchaseToken, subscriptionId, packageName } = notification;
-        // Validate the package name matches our config
-        if (config.google?.packageName && packageName !== config.google.packageName) {
-            log.warn('[onesub/webhook/google] Package name mismatch:', packageName, '!==', config.google.packageName);
-            sendError(res, 400, ONESUB_ERROR_CODE.PACKAGE_NAME_MISMATCH, 'Package name mismatch');
-            return;
-        }
-        try {
-            // Try to find the existing record by purchase token (used as originalTransactionId)
-            const existing = await store.getByTransactionId(purchaseToken);
-            let finalStatus;
-            if (isGoogleActiveNotification(notificationType)) {
-                finalStatus = SUBSCRIPTION_STATUS.ACTIVE;
-            }
-            else if (isGoogleGracePeriodNotification(notificationType)) {
-                finalStatus = SUBSCRIPTION_STATUS.GRACE_PERIOD;
-            }
-            else if (isGoogleOnHoldNotification(notificationType)) {
-                finalStatus = SUBSCRIPTION_STATUS.ON_HOLD;
-            }
-            else if (isGooglePausedNotification(notificationType)) {
-                finalStatus = SUBSCRIPTION_STATUS.PAUSED;
-            }
-            else if (isGooglePriceChangeConfirmedNotification(notificationType)) {
-                // User accepted a developer-initiated price change. Subscription stays
-                // active; the new price kicks in at the next renewal. Host can hook
-                // onPriceChangeConfirmed below to log/notify.
-                finalStatus = SUBSCRIPTION_STATUS.ACTIVE;
-            }
-            else if (isGoogleCanceledNotification(notificationType)) {
-                finalStatus = SUBSCRIPTION_STATUS.CANCELED;
-            }
-            else if (isGoogleExpiredNotification(notificationType)) {
-                finalStatus = SUBSCRIPTION_STATUS.EXPIRED;
-            }
-            else {
-                // Unhandled notification type (PAUSE_SCHEDULE_CHANGED, DEFERRED, etc.) —
-                // re-fetch from Play API will correct the status (subscriptionsv2 returns
-                // SUBSCRIPTION_STATE_PAUSED etc. directly).
-                finalStatus = SUBSCRIPTION_STATUS.ACTIVE; // optimistic; re-fetch below will correct it
-            }
-            // Fire-and-forget hook for PRICE_CHANGE_CONFIRMED — happens before store
-            // save so the hook still runs even if save errors out (the host's
-            // analytics/notification side effect shouldn't block on DB issues).
-            if (isGooglePriceChangeConfirmedNotification(notificationType) &&
-                config.google?.onPriceChangeConfirmed) {
-                const hook = config.google.onPriceChangeConfirmed;
-                void Promise.resolve()
-                    .then(() => hook({ purchaseToken, subscriptionId, packageName }))
-                    .catch((err) => log.warn('[onesub/webhook/google] onPriceChangeConfirmed hook failed:', err));
-            }
-            if (existing) {
-                // Re-validate against Play API to get the latest expiry date
-                let updated = { ...existing, status: finalStatus };
-                if (config.google?.serviceAccountKey) {
-                    const fresh = await validateGoogleReceipt(purchaseToken, subscriptionId, config.google);
-                    if (fresh) {
-                        // Notification-derived grace_period/on_hold are authoritative — the
-                        // expiry-based deriveStatus() in the provider can't observe these
-                        // states (paymentState heuristics are unreliable), so trust the
-                        // RTDN signal over the API-derived status for those two cases.
-                        const preserveNotificationStatus = finalStatus === SUBSCRIPTION_STATUS.GRACE_PERIOD ||
-                            finalStatus === SUBSCRIPTION_STATUS.ON_HOLD;
-                        updated = {
-                            ...existing,
-                            status: preserveNotificationStatus ? finalStatus : fresh.status,
-                            expiresAt: fresh.expiresAt,
-                            willRenew: fresh.willRenew,
-                            // Propagate v2-only fields that fresh may have updated. Without
-                            // these, paused→active transitions left autoResumeTime stale and
-                            // upgrade chains lost their linkedPurchaseToken on subsequent
-                            // notifications. Use ?? undefined so cleared values become undefined
-                            // (e.g. resume from paused → autoResumeTime should disappear).
-                            autoResumeTime: fresh.autoResumeTime,
-                            linkedPurchaseToken: fresh.linkedPurchaseToken ?? existing.linkedPurchaseToken,
-                        };
-                    }
-                }
-                await store.save(updated);
-            }
-            else {
-                // Unknown purchase token — attempt to create a record via Play API
-                if (config.google?.serviceAccountKey) {
-                    const fresh = await validateGoogleReceipt(purchaseToken, subscriptionId, config.google);
-                    if (fresh) {
-                        // Upgrade/downgrade continuity: if the v2 response carries a
-                        // linkedPurchaseToken pointing at a previous subscription we know
-                        // about, inherit the userId from it so the same person doesn't
-                        // appear as a brand-new placeholder after a plan change.
-                        if (fresh.linkedPurchaseToken) {
-                            const previous = await store.getByTransactionId(fresh.linkedPurchaseToken);
-                            if (previous) {
-                                fresh.userId = previous.userId;
-                                log.info(`[onesub/webhook/google] inherited userId ${previous.userId} from linkedPurchaseToken ${fresh.linkedPurchaseToken} → new token ${purchaseToken}`);
-                            }
-                            else {
-                                fresh.userId = purchaseToken;
-                            }
-                        }
-                        else {
-                            // userId is unknown at webhook time — use purchaseToken as placeholder
-                            fresh.userId = purchaseToken;
-                        }
-                        await store.save(fresh);
-                    }
-                }
-                else {
-                    log.warn('[onesub/webhook/google] Unknown purchase token and no serviceAccountKey to re-fetch:', purchaseToken);
-                }
-            }
-            res.status(200).json({ received: true });
-        }
-        catch (err) {
-            log.error('[onesub/webhook/google] Error handling notification:', err);
-            sendError(res, 500, ONESUB_ERROR_CODE.WEBHOOK_PROCESSING_FAILED, 'Failed to process notification');
-        }
-    });
+    router.post(ROUTES.WEBHOOK_APPLE, (req, res) => handleAppleWebhook(req, res, config, store, purchaseStore, webhookEventStore));
+    router.post(ROUTES.WEBHOOK_GOOGLE, (req, res) => handleGoogleWebhook(req, res, config, store, purchaseStore, webhookEventStore));
     return router;
 }
 //# sourceMappingURL=webhook.js.map

package/dist/routes/webhook.js.map

@@ -1 +1 @@
-{"version":3,"file":"webhook.js","sourceRoot":"","sources":["../../src/routes/webhook.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAEjC,OAAO,EAAE,kBAAkB,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AAOrD,OAAO,EAAE,MAAM,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAEhF,OAAO,EACL,uBAAuB,EACvB,SAAS,EACT,4BAA4B,EAC5B,4BAA4B,GAC7B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,wBAAwB,EACxB,8BAA8B,EAC9B,qBAAqB,EACrB,0BAA0B,EAC1B,4BAA4B,EAC5B,2BAA2B,EAC3B,+BAA+B,EAC/B,0BAA0B,EAC1B,0BAA0B,EAC1B,wCAAwC,GACzC,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AACnC,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAGzC;;GAEG;AACH,MAAM,eAAe,GAAG,4CAA4C,CAAC;AAErE,iFAAiF;AACjF,kCAAkC;AAClC,IAAI,UAAU,GAAiD,IAAI,CAAC;AAEpE,SAAS,aAAa;IACpB,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,UAAU,GAAG,kBAAkB,CAAC,IAAI,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,qBAAqB,CAAC,GAAY,EAAE,gBAAwB;IACzE,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IAChD,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QACxE,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IACxD,IAAI,CAAC;QACH,MAAM,SAAS,CAAC,KAAK,EAAE,aAAa,EAAE,EAAE,EAAE,QAAQ,EAAE,gBAAgB,EAAE,CAAC,CAAC;QACxE,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC;IACjC,YAAY;IACZ,WAAW;IACX,aAAa;IACb,gBAAgB;CACjB,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC;IACnC,QAAQ;IACR,QAAQ;IACR,qBAAqB;CACtB,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC;IAClC,SAAS;CACV,CAAC,CAAC;AAEH;;;;;;;;;;;;;GAaG;AACH,SAAS,0BAA0B,CACjC,gBAAwB,EACxB,OAA2B;IAE3B,IAAI,gBAAgB,KAAK,mBAAmB,EAAE,CAAC;QAC7C,OAAO,OAAO,KAAK,cAAc;YAC/B,CAAC,CAAC,mBAAmB,CAAC,YAAY;YAClC,CAAC,CAAC,mBAAmB,CAAC,OAAO,CAAC;IAClC,CAAC;IACD,IAAI,gBAAgB,KAAK,sBAAsB;QAAE,OAAO,mBAAmB,CAAC,OAAO,CAAC;IACpF,IAAI,oBAAoB,CAAC,GAAG,CAAC,gBAAgB,CAAC;QAAE,OAAO,mBAAmB,CAAC,QAAQ,CAAC;IACpF,IAAI,mBAAmB,CAAC,GAAG,CAAC,gBAAgB,CAAC;QAAE,OAAO,mBAAmB,CAAC,OAAO,CAAC;IAClF,IAAI,kBAAkB,CAAC,GAAG,CAAC,gBAAgB,CAAC;QAAE,OAAO,mBAAmB,CAAC,MAAM,CAAC;IAChF,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,mBAAmB,CACjC,MAA0B,EAC1B,KAAwB,EACxB,aAA4B,EAC5B,iBAAqC;IAErC,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;IAExB;;;;;OAKG;IACH,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;QACtE,8DAA8D;QAC9D,0EAA0E;QAC1E,gFAAgF;QAChF,MAAM,IAAI,GAAG,GAAG,CAAC,IAAkC,CAAC;QAEpD,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YACxB,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,iBAAiB,CAAC,sBAAsB,EAAE,uBAAuB,CAAC,CAAC;YACvF,OAAO;QACT,CAAC;QAED,IAAI,OAAiC,CAAC;QAEtC,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,SAAS,CACvB,IAAI,CAAC,aAAa,EAClB,MAAM,CAAC,KAAK,EAAE,mBAAmB,CAClC,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,KAAK,CAAC,wDAAwD,EAAE,GAAG,CAAC,CAAC;YACzE,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,iBAAiB,CAAC,sBAAsB,EAAE,uBAAuB,CAAC,CAAC;YACvF,OAAO;QACT,CAAC;QAED,kEAAkE;QAClE,0DAA0D;QAC1D,IAAI,iBAAiB,IAAI,OAAO,OAAO,CAAC,gBAAgB,KAAK,QAAQ,EAAE,CAAC;YACtE,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC;YACnF,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,GAAG,CAAC,IAAI,CAAC,kDAAkD,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC;gBACvF,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;gBACxD,OAAO;YACT,CAAC;QACH,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,uBAAuB,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,EAAE,mBAAmB,CAAC,CAAC;QAC1F,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,oEAAoE;YACpE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;YACzC,OAAO;QACT,CAAC;QAED,MAAM,EACJ,qBAAqB,EACrB,aAAa,EACb,IAAI,EACJ,SAAS,EACT,QAAQ,EACR,WAAW,EACX,MAAM,EACN,SAAS,EACT,SAAS,GACV,GAAG,OAAO,CAAC;QACZ,MAAM,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC;QAClD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAEhC,0EAA0E;QAC1E,kEAAkE;QAClE,MAAM,MAAM,GAAG,0BAA0B,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAC;QACrE,MAAM,WAAW,GAA+B,MAAM,IAAI,MAAM,CAAC;QAEjE,sEAAsE;QACtE,0EAA0E;QAC1E,iEAAiE;QACjE,IACE,gBAAgB,KAAK,qBAAqB;YAC1C,MAAM,CAAC,KAAK,EAAE,uBAAuB;YACrC,aAAa;YACb,SAAS,EACT,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,uBAAuB,CAAC;YACtD,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC;YACjC,KAAK,CAAC,KAAK,IAAI,EAAE;gBACf,IAAI,CAAC;oBACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC;wBAC1B,aAAa;wBACb,qBAAqB;wBACrB,SAAS;wBACT,QAAQ,EAAE,QAAQ,IAAI,WAAW,CAAC,QAAQ;wBAC1C,WAAW;qBACZ,CAAC,CAAC;oBACH,IAAI,IAAI,EAAE,CAAC;wBACT,MAAM,4BAA4B,CAAC,aAAa,EAAE,IAAI,EAAE,WAAW,EAAE;4BACnE,OAAO,EAAE,WAAW,KAAK,SAAS;yBACnC,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,GAAG,CAAC,IAAI,CAAC,wDAAwD,EAAE,GAAG,CAAC,CAAC;gBAC1E,CAAC;YACH,CAAC,CAAC,EAAE,CAAC;QACP,CAAC;QAED,4EAA4E;QAC5E,wEAAwE;QACxE,4EAA4E;QAC5E,2CAA2C;QAC3C,MAAM,iBAAiB,GAAG,IAAI,KAAK,YAAY,IAAI,IAAI,KAAK,gBAAgB,CAAC;QAC7E,MAAM,gBAAgB,GAAG,oBAAoB,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;QAEpE,IAAI,CAAC;YACH,IAAI,iBAAiB,IAAI,gBAAgB,EAAE,CAAC;gBAC1C,sEAAsE;gBACtE,0EAA0E;gBAC1E,mBAAmB;gBACnB,MAAM,QAAQ,GAAG,aAAa,IAAI,qBAAqB,CAAC;gBACxD,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,6BAA6B,CAAC,QAAQ,CAAC,CAAC;gBAC5E,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,GAAG,CAAC,IAAI,CACN,4DAA4D,EAC5D,QAAQ,CACT,CAAC;gBACJ,CAAC;gBACD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;gBACzC,OAAO;YACT,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,kBAAkB,CAAC,qBAAqB,CAAC,CAAC;YACvE,IAAI,QAAQ,EAAE,CAAC;gBACb,sEAAsE;gBACtE,qEAAqE;gBACrE,qEAAqE;gBACrE,kEAAkE;gBAClE,MAAM,oBAAoB,GACxB,gBAAgB,IAAI,CAAC,iBAAiB,IAAI,gBAAgB,KAAK,qBAAqB,CAAC;gBACvF,MAAM,eAAe,GAAG,oBAAoB,IAAI,MAAM,CAAC,YAAY,KAAK,cAAc,CAAC;gBAEvF,MAAM,OAAO,GAAqB,eAAe;oBAC/C,CAAC,CAAC,EAAE,GAAG,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE;oBACnC,CAAC,CAAC;wBACE,GAAG,QAAQ;wBACX,MAAM,EAAE,WAAW;wBACnB,SAAS;wBACT,kEAAkE;wBAClE,mEAAmE;wBACnE,SAAS,EAAE,SAAS,IAAI,QAAQ,CAAC,SAAS;qBAC3C,CAAC;gBACN,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC5B,CAAC;iBAAM,IAAI,MAAM,CAAC,KAAK,EAAE,QAAQ,IAAI,MAAM,CAAC,KAAK,EAAE,KAAK,IAAI,MAAM,CAAC,KAAK,EAAE,UAAU,EAAE,CAAC;gBACrF,qEAAqE;gBACrE,kEAAkE;gBAClE,8DAA8D;gBAC9D,sDAAsD;gBACtD,wEAAwE;gBACxE,uEAAuE;gBACvE,MAAM,KAAK,GAAG,MAAM,4BAA4B,CAAC,qBAAqB,EAAE,MAAM,CAAC,KAAK,EAAE;oBACpF,OAAO,EAAE,WAAW,KAAK,SAAS;iBACnC,CAAC,CAAC;gBACH,IAAI,KAAK,EAAE,CAAC;oBACV,KAAK,CAAC,MAAM,GAAG,qBAAqB,CAAC;oBACrC,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAC1B,CAAC;qBAAM,CAAC;oBACN,GAAG,CAAC,IAAI,CACN,+EAA+E,EAC/E,qBAAqB,CACtB,CAAC;gBACJ,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,oEAAoE;gBACpE,GAAG,CAAC,IAAI,CACN,iGAAiG,EACjG,qBAAqB,CACtB,CAAC;YACJ,CAAC;YAED,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,KAAK,CAAC,4CAA4C,EAAE,GAAG,CAAC,CAAC;YAC7D,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,iBAAiB,CAAC,yBAAyB,EAAE,+BAA+B,CAAC,CAAC;QACpG,CAAC;IACH,CAAC,CAAC,CAAC;IAEH;;;;;OAKG;IACH,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;QACvE,4DAA4D;QAC5D,oFAAoF;QACpF,IAAI,MAAM,CAAC,MAAM,EAAE,YAAY,EAAE,CAAC;YAChC,MAAM,aAAa,GAAG,MAAM,qBAAqB,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;YACnF,IAAI,CAAC,aAAa,EAAE,CAAC;gBACnB,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,iBAAiB,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;gBACpE,OAAO;YACT,CAAC;QACH,CAAC;QAED,MAAM,IAAI,GAAG,GAAG,CAAC,IAA0C,CAAC;QAE5D,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC;YACxB,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,iBAAiB,CAAC,oBAAoB,EAAE,sBAAsB,CAAC,CAAC;YACpF,OAAO;QACT,CAAC;QAED,4EAA4E;QAC5E,iEAAiE;QACjE,IAAI,iBAAiB,IAAI,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;YACpE,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAClF,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,GAAG,CAAC,IAAI,CAAC,mDAAmD,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;gBACtF,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;gBACxD,OAAO;YACT,CAAC;QACH,CAAC;QAED,0EAA0E;QAC1E,sEAAsE;QACtE,6EAA6E;QAC7E,MAAM,MAAM,GAAG,8BAA8B,CAAC,IAAiC,CAAC,CAAC;QACjF,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,MAAM,CAAC,MAAM,EAAE,WAAW,IAAI,MAAM,CAAC,WAAW,KAAK,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;gBACnF,GAAG,CAAC,IAAI,CACN,uDAAuD,EACvD,MAAM,CAAC,WAAW,EAClB,KAAK,EACL,MAAM,CAAC,MAAM,CAAC,WAAW,CAC1B,CAAC;gBACF,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,iBAAiB,CAAC,qBAAqB,EAAE,uBAAuB,CAAC,CAAC;gBACtF,OAAO;YACT,CAAC;YAED,IAAI,CAAC;gBACH,IAAI,MAAM,CAAC,WAAW,KAAK,CAAC,EAAE,CAAC;oBAC7B,0EAA0E;oBAC1E,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,kBAAkB,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;oBACtE,IAAI,QAAQ,EAAE,CAAC;wBACb,6DAA6D;wBAC7D,mEAAmE;wBACnE,MAAM,OAAO,GAAG,MAAM,CAAC,YAAY,KAAK,cAAc;4BACpD,CAAC,CAAC,EAAE,GAAG,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE;4BACnC,CAAC,CAAC,EAAE,GAAG,QAAQ,EAAE,MAAM,EAAE,mBAAmB,CAAC,QAAQ,EAAE,CAAC;wBAC1D,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;oBAC5B,CAAC;yBAAM,CAAC;wBACN,GAAG,CAAC,IAAI,CACN,wEAAwE,EACxE,MAAM,CAAC,aAAa,CACrB,CAAC;oBACJ,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,gEAAgE;oBAChE,qEAAqE;oBACrE,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,6BAA6B,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;oBAClF,IAAI,CAAC,OAAO,EAAE,CAAC;wBACb,GAAG,CAAC,IAAI,CACN,yDAAyD,EACzD,MAAM,CAAC,OAAO,CACf,CAAC;oBACJ,CAAC;gBACH,CAAC;gBACD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;YAC3C,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,GAAG,CAAC,KAAK,CAAC,oDAAoD,EAAE,GAAG,CAAC,CAAC;gBACrE,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,iBAAiB,CAAC,yBAAyB,EAAE,uCAAuC,CAAC,CAAC;YAC5G,CAAC;YACD,OAAO;QACT,CAAC;QAED,MAAM,YAAY,GAAG,wBAAwB,CAAC,IAAiC,CAAC,CAAC;QAEjF,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,kDAAkD;YAClD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;YACzC,OAAO;QACT,CAAC;QAED,MAAM,EAAE,gBAAgB,EAAE,aAAa,EAAE,cAAc,EAAE,WAAW,EAAE,GAAG,YAAY,CAAC;QAEtF,+CAA+C;QAC/C,IAAI,MAAM,CAAC,MAAM,EAAE,WAAW,IAAI,WAAW,KAAK,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YAC5E,GAAG,CAAC,IAAI,CACN,gDAAgD,EAChD,WAAW,EACX,KAAK,EACL,MAAM,CAAC,MAAM,CAAC,WAAW,CAC1B,CAAC;YACF,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,iBAAiB,CAAC,qBAAqB,EAAE,uBAAuB,CAAC,CAAC;YACtF,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,oFAAoF;YACpF,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,kBAAkB,CAAC,aAAa,CAAC,CAAC;YAE/D,IAAI,WAAuC,CAAC;YAC5C,IAAI,0BAA0B,CAAC,gBAAgB,CAAC,EAAE,CAAC;gBACjD,WAAW,GAAG,mBAAmB,CAAC,MAAM,CAAC;YAC3C,CAAC;iBAAM,IAAI,+BAA+B,CAAC,gBAAgB,CAAC,EAAE,CAAC;gBAC7D,WAAW,GAAG,mBAAmB,CAAC,YAAY,CAAC;YACjD,CAAC;iBAAM,IAAI,0BAA0B,CAAC,gBAAgB,CAAC,EAAE,CAAC;gBACxD,WAAW,GAAG,mBAAmB,CAAC,OAAO,CAAC;YAC5C,CAAC;iBAAM,IAAI,0BAA0B,CAAC,gBAAgB,CAAC,EAAE,CAAC;gBACxD,WAAW,GAAG,mBAAmB,CAAC,MAAM,CAAC;YAC3C,CAAC;iBAAM,IAAI,wCAAwC,CAAC,gBAAgB,CAAC,EAAE,CAAC;gBACtE,uEAAuE;gBACvE,oEAAoE;gBACpE,8CAA8C;gBAC9C,WAAW,GAAG,mBAAmB,CAAC,MAAM,CAAC;YAC3C,CAAC;iBAAM,IAAI,4BAA4B,CAAC,gBAAgB,CAAC,EAAE,CAAC;gBAC1D,WAAW,GAAG,mBAAmB,CAAC,QAAQ,CAAC;YAC7C,CAAC;iBAAM,IAAI,2BAA2B,CAAC,gBAAgB,CAAC,EAAE,CAAC;gBACzD,WAAW,GAAG,mBAAmB,CAAC,OAAO,CAAC;YAC5C,CAAC;iBAAM,CAAC;gBACN,yEAAyE;gBACzE,0EAA0E;gBAC1E,4CAA4C;gBAC5C,WAAW,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC,6CAA6C;YACzF,CAAC;YAED,yEAAyE;YACzE,kEAAkE;YAClE,oEAAoE;YACpE,IACE,wCAAwC,CAAC,gBAAgB,CAAC;gBAC1D,MAAM,CAAC,MAAM,EAAE,sBAAsB,EACrC,CAAC;gBACD,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,sBAAsB,CAAC;gBAClD,KAAK,OAAO,CAAC,OAAO,EAAE;qBACnB,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,EAAE,aAAa,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAC;qBAChE,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,6DAA6D,EAAE,GAAG,CAAC,CAAC,CAAC;YAClG,CAAC;YAED,IAAI,QAAQ,EAAE,CAAC;gBACb,6DAA6D;gBAC7D,IAAI,OAAO,GAAqB,EAAE,GAAG,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;gBAErE,IAAI,MAAM,CAAC,MAAM,EAAE,iBAAiB,EAAE,CAAC;oBACrC,MAAM,KAAK,GAAG,MAAM,qBAAqB,CAAC,aAAa,EAAE,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;oBACxF,IAAI,KAAK,EAAE,CAAC;wBACV,oEAAoE;wBACpE,kEAAkE;wBAClE,gEAAgE;wBAChE,+DAA+D;wBAC/D,MAAM,0BAA0B,GAC9B,WAAW,KAAK,mBAAmB,CAAC,YAAY;4BAChD,WAAW,KAAK,mBAAmB,CAAC,OAAO,CAAC;wBAC9C,OAAO,GAAG;4BACR,GAAG,QAAQ;4BACX,MAAM,EAAE,0BAA0B,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM;4BAC/D,SAAS,EAAE,KAAK,CAAC,SAAS;4BAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;4BAC1B,gEAAgE;4BAChE,iEAAiE;4BACjE,8DAA8D;4BAC9D,qEAAqE;4BACrE,+DAA+D;4BAC/D,cAAc,EAAE,KAAK,CAAC,cAAc;4BACpC,mBAAmB,EAAE,KAAK,CAAC,mBAAmB,IAAI,QAAQ,CAAC,mBAAmB;yBAC/E,CAAC;oBACJ,CAAC;gBACH,CAAC;gBAED,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC5B,CAAC;iBAAM,CAAC;gBACN,mEAAmE;gBACnE,IAAI,MAAM,CAAC,MAAM,EAAE,iBAAiB,EAAE,CAAC;oBACrC,MAAM,KAAK,GAAG,MAAM,qBAAqB,CAAC,aAAa,EAAE,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;oBACxF,IAAI,KAAK,EAAE,CAAC;wBACV,6DAA6D;wBAC7D,kEAAkE;wBAClE,+DAA+D;wBAC/D,yDAAyD;wBACzD,IAAI,KAAK,CAAC,mBAAmB,EAAE,CAAC;4BAC9B,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,kBAAkB,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;4BAC3E,IAAI,QAAQ,EAAE,CAAC;gCACb,KAAK,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;gCAC/B,GAAG,CAAC,IAAI,CACN,4CAA4C,QAAQ,CAAC,MAAM,6BAA6B,KAAK,CAAC,mBAAmB,gBAAgB,aAAa,EAAE,CACjJ,CAAC;4BACJ,CAAC;iCAAM,CAAC;gCACN,KAAK,CAAC,MAAM,GAAG,aAAa,CAAC;4BAC/B,CAAC;wBACH,CAAC;6BAAM,CAAC;4BACN,uEAAuE;4BACvE,KAAK,CAAC,MAAM,GAAG,aAAa,CAAC;wBAC/B,CAAC;wBACD,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;oBAC1B,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,GAAG,CAAC,IAAI,CACN,sFAAsF,EACtF,aAAa,CACd,CAAC;gBACJ,CAAC;YACH,CAAC;YAED,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,KAAK,CAAC,sDAAsD,EAAE,GAAG,CAAC,CAAC;YACvE,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,iBAAiB,CAAC,yBAAyB,EAAE,gCAAgC,CAAC,CAAC;QACrG,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC"}
+{"version":3,"file":"webhook.js","sourceRoot":"","sources":["../../src/routes/webhook.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAGjC,OAAO,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAGxC,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAE1D;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB,CACjC,MAA0B,EAC1B,KAAwB,EACxB,aAA4B,EAC5B,iBAAqC;IAErC,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;IAExB,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE,CAChE,kBAAkB,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,iBAAiB,CAAC,CAC9E,CAAC;IAEF,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE,CACjE,mBAAmB,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,iBAAiB,CAAC,CAC/E,CAAC;IAEF,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/stores/redis.js

@@ -35,6 +35,9 @@
 const SUB_TX_PREFIX = 'onesub:sub:tx:';
 const SUB_USER_PREFIX = 'onesub:sub:user:';
 const SUB_ALL = 'onesub:sub:all';
+// Global sorted set (score = save timestamp ms) — enables ordered listAll and
+// O(log n + limit) fast-path pagination when no secondary filters are applied.
+const SUB_ALL_SORTED = 'onesub:sub:all:sorted';
 const PUR_TX_PREFIX = 'onesub:purchase:tx:';
 const PUR_USER_PREFIX = 'onesub:purchase:user:';
 const PUR_USER_PRODUCT_PREFIX = 'onesub:purchase:user_product:';
@@ -48,14 +51,11 @@ export class RedisSubscriptionStore {
         const score = Date.now();
         const txKey = SUB_TX_PREFIX + sub.originalTransactionId;
         const userKey = SUB_USER_PREFIX + sub.userId;
-        // Multi-key write — use a pipeline so the three commands are at least
-        // sent in one round-trip. Atomicity is best-effort; the only consistency
-        // hazard is a crash between commands, which leaves the user index without
-        // the new tx (recoverable: subsequent writes for the same tx fix it).
         const pipeline = this.redis.multi();
         pipeline.set(txKey, JSON.stringify(sub));
         pipeline.zadd(userKey, score, sub.originalTransactionId);
         pipeline.sadd(SUB_ALL, sub.originalTransactionId);
+        pipeline.zadd(SUB_ALL_SORTED, score, sub.originalTransactionId);
         await pipeline.exec();
     }
     async getByUserId(userId) {
@@ -80,30 +80,51 @@ export class RedisSubscriptionStore {
         return raw ? JSON.parse(raw) : null;
     }
     async listAll() {
-        const ids = await this.redis.smembers(SUB_ALL);
+        // ZREVRANGE on the sorted set gives newest-first order (vs random SMEMBERS).
+        const ids = await this.redis.zrevrange(SUB_ALL_SORTED, 0, -1);
         if (ids.length === 0)
             return [];
         const raws = await this.redis.mget(...ids.map((id) => SUB_TX_PREFIX + id));
         return raws.filter((r) => r != null).map((r) => JSON.parse(r));
     }
     async listFiltered(opts) {
-        // Redis has no secondary indexes — for listFiltered we materialise the
-        // candidate set then apply filters in-process. Fine for small/medium data;
-        // for >100k rows pair this with Postgres or use Redis Stack with RediSearch.
         const limit = opts.limit ?? 50;
         const offset = opts.offset ?? 0;
-        let candidates;
+        const hasSecondaryFilters = !!(opts.status || opts.productId || opts.platform);
         if (opts.userId) {
-            candidates = await this.getAllByUserId(opts.userId);
+            // Per-user path — already O(log n) via per-user sorted set.
+            const candidates = await this.getAllByUserId(opts.userId);
+            const filtered = candidates.filter((s) => {
+                if (opts.status && s.status !== opts.status)
+                    return false;
+                if (opts.productId && s.productId !== opts.productId)
+                    return false;
+                if (opts.platform && s.platform !== opts.platform)
+                    return false;
+                return true;
+            });
+            return { items: filtered.slice(offset, offset + limit), total: filtered.length, limit, offset };
         }
-        else {
-            candidates = await this.listAll();
-            // Sort newest-first by purchasedAt as a stable proxy when no per-user
-            // sorted set is available. SubscriptionInfo doesn't carry updatedAt, so
-            // we fall back to expiresAt for a "freshest first" ordering.
-            candidates.sort((a, b) => Date.parse(b.expiresAt) - Date.parse(a.expiresAt));
+        if (!hasSecondaryFilters) {
+            // Fast path: pure pagination with no filter — O(log n + limit) via sorted set.
+            const [ids, total] = await Promise.all([
+                this.redis.zrevrange(SUB_ALL_SORTED, offset, offset + limit - 1),
+                this.redis.zcard(SUB_ALL_SORTED),
+            ]);
+            if (ids.length === 0)
+                return { items: [], total, limit, offset };
+            const raws = await this.redis.mget(...ids.map((id) => SUB_TX_PREFIX + id));
+            const items = raws.filter((r) => r != null).map((r) => JSON.parse(r));
+            return { items, total, limit, offset };
         }
-        const filtered = candidates.filter((s) => {
+        // Slow path: secondary filters require full scan. Results come in
+        // newest-first order. For >100k rows pair with Postgres or Redis Stack.
+        const allIds = await this.redis.zrevrange(SUB_ALL_SORTED, 0, -1);
+        if (allIds.length === 0)
+            return { items: [], total: 0, limit, offset };
+        const raws = await this.redis.mget(...allIds.map((id) => SUB_TX_PREFIX + id));
+        const all = raws.filter((r) => r != null).map((r) => JSON.parse(r));
+        const filtered = all.filter((s) => {
             if (opts.status && s.status !== opts.status)
                 return false;
             if (opts.productId && s.productId !== opts.productId)
@@ -112,12 +133,7 @@ export class RedisSubscriptionStore {
                 return false;
             return true;
         });
-        return {
-            items: filtered.slice(offset, offset + limit),
-            total: filtered.length,
-            limit,
-            offset,
-        };
+        return { items: filtered.slice(offset, offset + limit), total: filtered.length, limit, offset };
     }
 }
 export class RedisPurchaseStore {
@@ -252,4 +268,30 @@ export class RedisCacheAdapter {
         await this.redis.del(this.prefix + key);
     }
 }
+const WEBHOOK_EVENT_PREFIX = 'onesub:webhook:event:';
+const DEFAULT_WEBHOOK_TTL_SECONDS = 7 * 24 * 60 * 60; // 7 days — covers Apple's 3-day retry window
+/**
+ * Redis-backed webhook idempotency store.
+ *
+ * Uses `SET key '1' EX ttl NX` — a single atomic command that sets the key
+ * only if it does not already exist. Returns 'OK' (new event) or null
+ * (already seen), with no race between a GET and a subsequent SET.
+ *
+ * Prefer this over `CacheWebhookEventStore(new RedisCacheAdapter(...))` for
+ * production deployments; the cache-based variant is non-atomic under
+ * concurrent retries.
+ */
+export class RedisWebhookEventStore {
+    redis;
+    ttlSeconds;
+    constructor(redis, ttlSeconds = DEFAULT_WEBHOOK_TTL_SECONDS) {
+        this.redis = redis;
+        this.ttlSeconds = ttlSeconds;
+    }
+    async markIfNew(provider, eventId) {
+        const key = WEBHOOK_EVENT_PREFIX + provider + ':' + eventId;
+        const result = await this.redis.set(key, '1', 'EX', this.ttlSeconds, 'NX');
+        return result === 'OK';
+    }
+}
 //# sourceMappingURL=redis.js.map