@prenta/core 0.118.0

package/dist/security/webhook.js

@@ -0,0 +1,133 @@
+import { canonicalizeHostname, isPrivateAddress } from './ip-canon.js';
+/**
+ * Validate that a webhook URL does not target private/internal networks
+ * (string-level SSRF prevention).
+ *
+ * Catches every IP-literal encoding `getaddrinfo` accepts: decimal
+ * (`http://2130706433`), octal (`http://0177.0.0.1`), hex
+ * (`http://0x7f.0.0.1`), short-form (`http://127.1`), IPv4-mapped IPv6
+ * (`http://[::ffff:127.0.0.1]`), bracketed IPv6, and the reserved
+ * `100.64.0.0/10` carrier-grade NAT range that previously slipped through.
+ *
+ * **Important caveat:** this only validates the URL **as written**. A hostname
+ * like `attacker-controlled.tld` that resolves to a public IP at validation
+ * time and to `127.0.0.1` at fetch time (DNS rebinding) still bypasses this
+ * check — `safeFetch` calls `resolveAndCheck()` on top to defend against that.
+ */
+export function validateWebhookUrl(url) {
+    let parsed;
+    try {
+        parsed = new URL(url);
+    }
+    catch {
+        return { valid: false, error: 'Invalid URL' };
+    }
+    if (!['https:', 'http:'].includes(parsed.protocol)) {
+        return { valid: false, error: 'Only HTTP(S) protocols are allowed' };
+    }
+    // Special-case the well-known names — they're DNS hostnames so the
+    // canonicalizer can't catch them via numeric ranges.
+    const lowerHost = parsed.hostname.toLowerCase();
+    if (lowerHost === 'localhost' || lowerHost === 'ip6-localhost' || lowerHost === 'ip6-loopback') {
+        return { valid: false, error: 'Localhost hostnames are not allowed' };
+    }
+    // metadata.google.internal and AWS' internal DNS shadow real metadata IPs
+    // we already block — but the hostname can be redirected via /etc/hosts in
+    // self-hosted contexts, so block it explicitly.
+    if (lowerHost === 'metadata.google.internal' || lowerHost.endsWith('.internal')) {
+        return { valid: false, error: 'Cloud metadata hostnames are not allowed' };
+    }
+    const canonical = canonicalizeHostname(parsed.hostname);
+    if (!canonical.isHostname) {
+        // Three sub-cases for `!isHostname`:
+        //   1. Valid IP literal that's private  → reject with the range reason.
+        //   2. Valid IP literal that's public   → allow (fall through).
+        //   3. Malformed IP literal (e.g. `::1::1`, IPv6 with garbage) →
+        //      `isValidIp` is false. Fail closed: the URL was clearly not a
+        //      DNS hostname, so a `getaddrinfo` will reject it too — but
+        //      worse, on some platforms it may resolve to *something*. Reject
+        //      here rather than risk that ambiguity.
+        if (!canonical.isValidIp) {
+            return {
+                valid: false,
+                error: `Malformed IP literal in URL hostname: ${parsed.hostname}`,
+            };
+        }
+        const denied = isPrivateAddress(canonical);
+        if (denied) {
+            return {
+                valid: false,
+                error: `Private/internal IP address rejected: ${denied.reason}`,
+            };
+        }
+    }
+    return { valid: true };
+}
+/**
+ * Resolve a hostname's A/AAAA records and verify none of them land in a
+ * private range. Pair with `validateWebhookUrl` to defend against DNS
+ * rebinding — see `safeFetch`.
+ */
+export async function resolveAndCheck(hostname) {
+    // If the hostname is already an IP literal, skip DNS and check directly.
+    const directCanonical = canonicalizeHostname(hostname);
+    if (!directCanonical.isHostname) {
+        // Malformed IP literal — treat as unsafe. Without this, a bad IPv6
+        // string (e.g. `::1::garbage`) would slip through the SSRF gate
+        // because `isPrivateAddress` legitimately returns null when there's
+        // no parsed IP to check.
+        if (!directCanonical.isValidIp) {
+            return { safe: false, resolvedIp: hostname, error: 'malformed IP literal' };
+        }
+        const denied = isPrivateAddress(directCanonical);
+        if (denied) {
+            return { safe: false, resolvedIp: hostname, error: denied.reason };
+        }
+        return { safe: true, resolvedIp: hostname };
+    }
+    const { resolve4, resolve6 } = await import('node:dns/promises');
+    const ips = [];
+    try {
+        const v4 = await resolve4(hostname);
+        ips.push(...v4);
+    }
+    catch {
+        /* no A records */
+    }
+    try {
+        const v6 = await resolve6(hostname);
+        ips.push(...v6);
+    }
+    catch {
+        /* no AAAA records */
+    }
+    if (ips.length === 0) {
+        return { safe: false, error: `DNS resolution failed for ${hostname}` };
+    }
+    // Check EVERY resolved IP, not just the first — a multi-A-record response
+    // could mix public + private IPs and we must reject if any single one is
+    // private to defeat round-robin DNS rebinding.
+    for (const ip of ips) {
+        const c = canonicalizeHostname(ip);
+        // DNS resolvers return canonical IP literals, so `isValidIp` should be
+        // true. If a resolver ever returns something we can't parse, treat it
+        // as unsafe rather than trusting it.
+        if (!c.isValidIp) {
+            return {
+                safe: false,
+                resolvedIp: ip,
+                error: `Unparseable IP returned from DNS for ${hostname}: ${ip}`,
+            };
+        }
+        const denied = isPrivateAddress(c);
+        if (denied) {
+            return {
+                safe: false,
+                resolvedIp: ip,
+                error: `Resolved IP ${ip} is in a private range: ${denied.reason}`,
+            };
+        }
+    }
+    return { safe: true, resolvedIp: ips[0] };
+}
+//# sourceMappingURL=webhook.js.map

package/dist/security/webhook.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook.js","sourceRoot":"","sources":["../../src/security/webhook.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAA;AAEtE;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,kBAAkB,CAAC,GAAW;IAC5C,IAAI,MAAW,CAAA;IACf,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAA;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE,CAAA;IAC/C,CAAC;IAED,IAAI,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QACnD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,oCAAoC,EAAE,CAAA;IACtE,CAAC;IAED,mEAAmE;IACnE,qDAAqD;IACrD,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAA;IAC/C,IAAI,SAAS,KAAK,WAAW,IAAI,SAAS,KAAK,eAAe,IAAI,SAAS,KAAK,cAAc,EAAE,CAAC;QAC/F,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,qCAAqC,EAAE,CAAA;IACvE,CAAC;IACD,0EAA0E;IAC1E,0EAA0E;IAC1E,gDAAgD;IAChD,IAAI,SAAS,KAAK,0BAA0B,IAAI,SAAS,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QAChF,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,0CAA0C,EAAE,CAAA;IAC5E,CAAC;IAED,MAAM,SAAS,GAAG,oBAAoB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;IACvD,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,CAAC;QAC1B,qCAAqC;QACrC,wEAAwE;QACxE,gEAAgE;QAChE,iEAAiE;QACjE,oEAAoE;QACpE,iEAAiE;QACjE,sEAAsE;QACtE,6CAA6C;QAC7C,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,CAAC;YACzB,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,KAAK,EAAE,yCAAyC,MAAM,CAAC,QAAQ,EAAE;aAClE,CAAA;QACH,CAAC;QACD,MAAM,MAAM,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAA;QAC1C,IAAI,MAAM,EAAE,CAAC;YACX,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,KAAK,EAAE,yCAAyC,MAAM,CAAC,MAAM,EAAE;aAChE,CAAA;QACH,CAAC;IACH,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAA;AACxB,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,QAAgB;IAEhB,yEAAyE;IACzE,MAAM,eAAe,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAA;IACtD,IAAI,CAAC,eAAe,CAAC,UAAU,EAAE,CAAC;QAChC,mEAAmE;QACnE,gEAAgE;QAChE,oEAAoE;QACpE,yBAAyB;QACzB,IAAI,CAAC,eAAe,CAAC,SAAS,EAAE,CAAC;YAC/B,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAA;QAC7E,CAAC;QACD,MAAM,MAAM,GAAG,gBAAgB,CAAC,eAAe,CAAC,CAAA;QAChD,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,CAAA;QACpE,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAA;IAC7C,CAAC;IAED,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAA;IAEhE,MAAM,GAAG,GAAa,EAAE,CAAA;IACxB,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAA;QACnC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAA;IACjB,CAAC;IAAC,MAAM,CAAC;QACP,kBAAkB;IACpB,CAAC;IACD,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAA;QACnC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAA;IACjB,CAAC;IAAC,MAAM,CAAC;QACP,qBAAqB;IACvB,CAAC;IAED,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,6BAA6B,QAAQ,EAAE,EAAE,CAAA;IACxE,CAAC;IAED,0EAA0E;IAC1E,yEAAyE;IACzE,+CAA+C;IAC/C,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;QACrB,MAAM,CAAC,GAAG,oBAAoB,CAAC,EAAE,CAAC,CAAA;QAClC,uEAAuE;QACvE,sEAAsE;QACtE,qCAAqC;QACrC,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;YACjB,OAAO;gBACL,IAAI,EAAE,KAAK;gBACX,UAAU,EAAE,EAAE;gBACd,KAAK,EAAE,wCAAwC,QAAQ,KAAK,EAAE,EAAE;aACjE,CAAA;QACH,CAAC;QACD,MAAM,MAAM,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAA;QAClC,IAAI,MAAM,EAAE,CAAC;YACX,OAAO;gBACL,IAAI,EAAE,KAAK;gBACX,UAAU,EAAE,EAAE;gBACd,KAAK,EAAE,eAAe,EAAE,2BAA2B,MAAM,CAAC,MAAM,EAAE;aACnE,CAAA;QACH,CAAC;IACH,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,CAAA;AAC3C,CAAC"}

package/dist/seo/ai-bots.d.ts

@@ -0,0 +1,56 @@
+/**
+ * AI crawler taxonomy + robots.txt policy.
+ *
+ * Not all "AI bots" are equal, and blocking them all is usually the wrong call
+ * for visibility:
+ *
+ *   - TRAINING crawlers ingest your content into model weights and never send a
+ *     user or a citation back. Blocking these has little downside for traffic
+ *     and is what most "block AI" intentions actually mean.
+ *   - RETRIEVAL / answer-engine crawlers fetch a page to answer a user's live
+ *     query and typically cite + link the source (ChatGPT browsing, Perplexity,
+ *     etc.). Blocking these removes you from AI answers — usually undesirable.
+ *
+ * So we model the two independently. Lists are curated for 2026 and grouped by
+ * vendor for maintainability; keep them conservative (only well-attested UA
+ * tokens) to avoid accidentally blocking a general search crawler.
+ */
+/** Crawlers that ingest content for model TRAINING (no citation, no referral). */
+export declare const AI_TRAINING_BOTS: readonly string[];
+/** Answer-engine / live-retrieval crawlers (cite + refer users back). */
+export declare const AI_RETRIEVAL_BOTS: readonly string[];
+export type AiBotCategory = 'training' | 'retrieval';
+export interface DetectedAiBot {
+    /** The canonical UA token that matched (e.g. `GPTBot`). */
+    token: string;
+    category: AiBotCategory;
+}
+/**
+ * Identify a known AI crawler from a `User-Agent` string. Substring match
+ * (case-insensitive) against the curated taxonomy. TRAINING tokens are checked
+ * first so the more specific `*-Extended` variants win over their search-crawler
+ * namesakes (e.g. `Applebot-Extended` → training, plain `Applebot` → retrieval).
+ * Returns `null` for humans and unknown bots — never guesses.
+ */
+export declare function detectAiBot(userAgent: string | null | undefined): DetectedAiBot | null;
+export type AiBotStance = 'allow' | 'block';
+export interface AiBotPolicy {
+    /** Stance toward TRAINING crawlers. Default `allow`. */
+    training?: AiBotStance;
+    /** Stance toward RETRIEVAL / answer-engine crawlers. Default `allow`. */
+    retrieval?: AiBotStance;
+}
+/**
+ * Build the robots.txt User-agent/Disallow line groups for blocked AI bots.
+ *
+ * Precedence:
+ *   1. An explicit `policy` (nuanced training vs retrieval) wins.
+ *   2. Otherwise the legacy `blockAIBots` boolean blocks BOTH groups (preserves
+ *      pre-nuance behavior for sites that set it).
+ *   3. Otherwise nothing is emitted.
+ *
+ * Returns a flat array of robots.txt lines (each blocked bot gets its own
+ * `User-agent` + `Disallow: /` + blank-line group). Pure + deterministic.
+ */
+export declare function buildAiBotRobotsLines(policy: AiBotPolicy | undefined, legacyBlockAIBots: boolean | undefined): string[];
+//# sourceMappingURL=ai-bots.d.ts.map

package/dist/seo/ai-bots.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ai-bots.d.ts","sourceRoot":"","sources":["../../src/seo/ai-bots.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,kFAAkF;AAClF,eAAO,MAAM,gBAAgB,EAAE,SAAS,MAAM,EA0B7C,CAAA;AAED,yEAAyE;AACzE,eAAO,MAAM,iBAAiB,EAAE,SAAS,MAAM,EAiB9C,CAAA;AAED,MAAM,MAAM,aAAa,GAAG,UAAU,GAAG,WAAW,CAAA;AAEpD,MAAM,WAAW,aAAa;IAC5B,2DAA2D;IAC3D,KAAK,EAAE,MAAM,CAAA;IACb,QAAQ,EAAE,aAAa,CAAA;CACxB;AAED;;;;;;GAMG;AACH,wBAAgB,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,aAAa,GAAG,IAAI,CAUtF;AAED,MAAM,MAAM,WAAW,GAAG,OAAO,GAAG,OAAO,CAAA;AAE3C,MAAM,WAAW,WAAW;IAC1B,wDAAwD;IACxD,QAAQ,CAAC,EAAE,WAAW,CAAA;IACtB,yEAAyE;IACzE,SAAS,CAAC,EAAE,WAAW,CAAA;CACxB;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,WAAW,GAAG,SAAS,EAC/B,iBAAiB,EAAE,OAAO,GAAG,SAAS,GACrC,MAAM,EAAE,CAyBV"}

package/dist/seo/ai-bots.js

@@ -0,0 +1,125 @@
+/**
+ * AI crawler taxonomy + robots.txt policy.
+ *
+ * Not all "AI bots" are equal, and blocking them all is usually the wrong call
+ * for visibility:
+ *
+ *   - TRAINING crawlers ingest your content into model weights and never send a
+ *     user or a citation back. Blocking these has little downside for traffic
+ *     and is what most "block AI" intentions actually mean.
+ *   - RETRIEVAL / answer-engine crawlers fetch a page to answer a user's live
+ *     query and typically cite + link the source (ChatGPT browsing, Perplexity,
+ *     etc.). Blocking these removes you from AI answers — usually undesirable.
+ *
+ * So we model the two independently. Lists are curated for 2026 and grouped by
+ * vendor for maintainability; keep them conservative (only well-attested UA
+ * tokens) to avoid accidentally blocking a general search crawler.
+ */
+/** Crawlers that ingest content for model TRAINING (no citation, no referral). */
+export const AI_TRAINING_BOTS = [
+    // OpenAI
+    'GPTBot',
+    // Anthropic
+    'ClaudeBot',
+    'anthropic-ai',
+    // Google (Gemini training; distinct from Googlebot search)
+    'Google-Extended',
+    // Common Crawl (feeds many training sets)
+    'CCBot',
+    // ByteDance
+    'Bytespider',
+    // Apple (Apple Intelligence training; distinct from Applebot search)
+    'Applebot-Extended',
+    // Meta
+    'Meta-ExternalAgent',
+    'FacebookBot',
+    // Misc training/scraping crawlers
+    'Diffbot',
+    'Omgilibot',
+    'omgili',
+    'PanguBot',
+    'Timpibot',
+    'cohere-ai',
+    'ImagesiftBot',
+    'PetalBot',
+];
+/** Answer-engine / live-retrieval crawlers (cite + refer users back). */
+export const AI_RETRIEVAL_BOTS = [
+    // OpenAI
+    'OAI-SearchBot',
+    'ChatGPT-User',
+    // Perplexity
+    'PerplexityBot',
+    'Perplexity-User',
+    // Anthropic retrieval
+    'Claude-Web',
+    'Claude-User',
+    // Apple search (Siri/Spotlight)
+    'Applebot',
+    // Amazon (Alexa)
+    'Amazonbot',
+    // You.com / DuckDuckGo assist
+    'YouBot',
+    'DuckAssistBot',
+];
+/**
+ * Identify a known AI crawler from a `User-Agent` string. Substring match
+ * (case-insensitive) against the curated taxonomy. TRAINING tokens are checked
+ * first so the more specific `*-Extended` variants win over their search-crawler
+ * namesakes (e.g. `Applebot-Extended` → training, plain `Applebot` → retrieval).
+ * Returns `null` for humans and unknown bots — never guesses.
+ */
+export function detectAiBot(userAgent) {
+    if (!userAgent)
+        return null;
+    const ua = userAgent.toLowerCase();
+    for (const token of AI_TRAINING_BOTS) {
+        if (ua.includes(token.toLowerCase()))
+            return { token, category: 'training' };
+    }
+    for (const token of AI_RETRIEVAL_BOTS) {
+        if (ua.includes(token.toLowerCase()))
+            return { token, category: 'retrieval' };
+    }
+    return null;
+}
+/**
+ * Build the robots.txt User-agent/Disallow line groups for blocked AI bots.
+ *
+ * Precedence:
+ *   1. An explicit `policy` (nuanced training vs retrieval) wins.
+ *   2. Otherwise the legacy `blockAIBots` boolean blocks BOTH groups (preserves
+ *      pre-nuance behavior for sites that set it).
+ *   3. Otherwise nothing is emitted.
+ *
+ * Returns a flat array of robots.txt lines (each blocked bot gets its own
+ * `User-agent` + `Disallow: /` + blank-line group). Pure + deterministic.
+ */
+export function buildAiBotRobotsLines(policy, legacyBlockAIBots) {
+    let blockTraining;
+    let blockRetrieval;
+    if (policy && (policy.training || policy.retrieval)) {
+        blockTraining = policy.training === 'block';
+        blockRetrieval = policy.retrieval === 'block';
+    }
+    else if (legacyBlockAIBots) {
+        blockTraining = true;
+        blockRetrieval = true;
+    }
+    else {
+        return [];
+    }
+    const bots = [];
+    if (blockTraining)
+        bots.push(...AI_TRAINING_BOTS);
+    if (blockRetrieval)
+        bots.push(...AI_RETRIEVAL_BOTS);
+    const lines = [];
+    for (const bot of bots) {
+        lines.push(`User-agent: ${bot}`);
+        lines.push('Disallow: /');
+        lines.push('');
+    }
+    return lines;
+}
+//# sourceMappingURL=ai-bots.js.map

package/dist/seo/ai-bots.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ai-bots.js","sourceRoot":"","sources":["../../src/seo/ai-bots.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,kFAAkF;AAClF,MAAM,CAAC,MAAM,gBAAgB,GAAsB;IACjD,SAAS;IACT,QAAQ;IACR,YAAY;IACZ,WAAW;IACX,cAAc;IACd,2DAA2D;IAC3D,iBAAiB;IACjB,0CAA0C;IAC1C,OAAO;IACP,YAAY;IACZ,YAAY;IACZ,qEAAqE;IACrE,mBAAmB;IACnB,OAAO;IACP,oBAAoB;IACpB,aAAa;IACb,kCAAkC;IAClC,SAAS;IACT,WAAW;IACX,QAAQ;IACR,UAAU;IACV,UAAU;IACV,WAAW;IACX,cAAc;IACd,UAAU;CACX,CAAA;AAED,yEAAyE;AACzE,MAAM,CAAC,MAAM,iBAAiB,GAAsB;IAClD,SAAS;IACT,eAAe;IACf,cAAc;IACd,aAAa;IACb,eAAe;IACf,iBAAiB;IACjB,sBAAsB;IACtB,YAAY;IACZ,aAAa;IACb,gCAAgC;IAChC,UAAU;IACV,iBAAiB;IACjB,WAAW;IACX,8BAA8B;IAC9B,QAAQ;IACR,eAAe;CAChB,CAAA;AAUD;;;;;;GAMG;AACH,MAAM,UAAU,WAAW,CAAC,SAAoC;IAC9D,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAA;IAC3B,MAAM,EAAE,GAAG,SAAS,CAAC,WAAW,EAAE,CAAA;IAClC,KAAK,MAAM,KAAK,IAAI,gBAAgB,EAAE,CAAC;QACrC,IAAI,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;YAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAA;IAC9E,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,iBAAiB,EAAE,CAAC;QACtC,IAAI,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;YAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAA;IAC/E,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAWD;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,qBAAqB,CACnC,MAA+B,EAC/B,iBAAsC;IAEtC,IAAI,aAAsB,CAAA;IAC1B,IAAI,cAAuB,CAAA;IAE3B,IAAI,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;QACpD,aAAa,GAAG,MAAM,CAAC,QAAQ,KAAK,OAAO,CAAA;QAC3C,cAAc,GAAG,MAAM,CAAC,SAAS,KAAK,OAAO,CAAA;IAC/C,CAAC;SAAM,IAAI,iBAAiB,EAAE,CAAC;QAC7B,aAAa,GAAG,IAAI,CAAA;QACpB,cAAc,GAAG,IAAI,CAAA;IACvB,CAAC;SAAM,CAAC;QACN,OAAO,EAAE,CAAA;IACX,CAAC;IAED,MAAM,IAAI,GAAa,EAAE,CAAA;IACzB,IAAI,aAAa;QAAE,IAAI,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,CAAA;IACjD,IAAI,cAAc;QAAE,IAAI,CAAC,IAAI,CAAC,GAAG,iBAAiB,CAAC,CAAA;IAEnD,MAAM,KAAK,GAAa,EAAE,CAAA;IAC1B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,KAAK,CAAC,IAAI,CAAC,eAAe,GAAG,EAAE,CAAC,CAAA;QAChC,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAA;QACzB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IAChB,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC"}

package/dist/seo/ai-crawler-log.d.ts

@@ -0,0 +1,14 @@
+export type AiCrawlerSurface = 'llms' | 'llms-full' | 'md' | 'honeypot';
+/** Upsert one aggregated hit. Safe to await on any public route. */
+export declare function recordAiCrawlerHit(db: any, entry: {
+    bot: string;
+    surface: AiCrawlerSurface;
+    category?: string;
+}): Promise<void>;
+/**
+ * Detect a known AI crawler from the request's User-Agent and, if found, record
+ * a hit on the given surface. No-op for humans and unknown bots, so the only
+ * cost on a normal page request is a header read + taxonomy scan.
+ */
+export declare function recordAiCrawlerFromRequest(db: any, request: Request, surface: AiCrawlerSurface): Promise<void>;
+//# sourceMappingURL=ai-crawler-log.d.ts.map

package/dist/seo/ai-crawler-log.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ai-crawler-log.d.ts","sourceRoot":"","sources":["../../src/seo/ai-crawler-log.ts"],"names":[],"mappings":"AAWA,MAAM,MAAM,gBAAgB,GAAG,MAAM,GAAG,WAAW,GAAG,IAAI,GAAG,UAAU,CAAA;AAIvE,oEAAoE;AACpE,wBAAsB,kBAAkB,CACtC,EAAE,EAAE,GAAG,EACP,KAAK,EAAE;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,gBAAgB,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,GACnE,OAAO,CAAC,IAAI,CAAC,CAgBf;AAED;;;;GAIG;AACH,wBAAsB,0BAA0B,CAC9C,EAAE,EAAE,GAAG,EACP,OAAO,EAAE,OAAO,EAChB,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC,IAAI,CAAC,CAQf"}

package/dist/seo/ai-crawler-log.js

@@ -0,0 +1,48 @@
+/**
+ * AI-crawler activity logging for the admin "AI crawler activity" panel.
+ *
+ * Hits are aggregated per (bot token, surface) via upsert, so storage stays
+ * bounded (~known bots × surfaces) and never needs pruning. Recording is always
+ * best-effort: a logging failure — or a database that predates the
+ * `prenta_ai_crawler_hits` table — must never break a public surface.
+ */
+import { hasModel } from '../api/route-helpers.js';
+import { detectAiBot } from './ai-bots.js';
+const MAX_BOT_LEN = 128;
+/** Upsert one aggregated hit. Safe to await on any public route. */
+export async function recordAiCrawlerHit(db, entry) {
+    if (!db || !hasModel(db, 'aiCrawlerHit'))
+        return;
+    const bot = String(entry.bot ?? '')
+        .slice(0, MAX_BOT_LEN)
+        .trim();
+    if (!bot)
+        return;
+    const category = entry.category ?? 'other';
+    try {
+        await db.aiCrawlerHit.upsert({
+            where: { bot_surface: { bot, surface: entry.surface } },
+            update: { hits: { increment: 1 }, lastSeenAt: new Date(), category },
+            create: { bot, surface: entry.surface, category, hits: 1 },
+        });
+    }
+    catch {
+        // best-effort — swallow so logging can never break the response
+    }
+}
+/**
+ * Detect a known AI crawler from the request's User-Agent and, if found, record
+ * a hit on the given surface. No-op for humans and unknown bots, so the only
+ * cost on a normal page request is a header read + taxonomy scan.
+ */
+export async function recordAiCrawlerFromRequest(db, request, surface) {
+    const detected = detectAiBot(request.headers.get('user-agent'));
+    if (!detected)
+        return;
+    await recordAiCrawlerHit(db, {
+        bot: detected.token,
+        surface,
+        category: detected.category,
+    });
+}
+//# sourceMappingURL=ai-crawler-log.js.map

package/dist/seo/ai-crawler-log.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ai-crawler-log.js","sourceRoot":"","sources":["../../src/seo/ai-crawler-log.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAA;AAClD,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAA;AAI1C,MAAM,WAAW,GAAG,GAAG,CAAA;AAEvB,oEAAoE;AACpE,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,EAAO,EACP,KAAoE;IAEpE,IAAI,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,cAAc,CAAC;QAAE,OAAM;IAChD,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,EAAE,CAAC;SAChC,KAAK,CAAC,CAAC,EAAE,WAAW,CAAC;SACrB,IAAI,EAAE,CAAA;IACT,IAAI,CAAC,GAAG;QAAE,OAAM;IAChB,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,OAAO,CAAA;IAC1C,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC;YAC3B,KAAK,EAAE,EAAE,WAAW,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,EAAE;YACvD,MAAM,EAAE,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,EAAE,QAAQ,EAAE;YACpE,MAAM,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,EAAE;SAC3D,CAAC,CAAA;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,gEAAgE;IAClE,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,EAAO,EACP,OAAgB,EAChB,OAAyB;IAEzB,MAAM,QAAQ,GAAG,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAA;IAC/D,IAAI,CAAC,QAAQ;QAAE,OAAM;IACrB,MAAM,kBAAkB,CAAC,EAAE,EAAE;QAC3B,GAAG,EAAE,QAAQ,CAAC,KAAK;QACnB,OAAO;QACP,QAAQ,EAAE,QAAQ,CAAC,QAAQ;KAC5B,CAAC,CAAA;AACJ,CAAC"}

package/dist/seo/alt-text.d.ts

@@ -0,0 +1,39 @@
+/**
+ * Canonical image alt-text analysis, shared by every surface that reports on
+ * alt coverage (SEO analysis, the audit engine, the content-health scanner, the
+ * cron scan). Previously each had its own regex and they disagreed on the most
+ * important edge case — an intentionally *decorative* image — which produced
+ * conflicting "missing alt" counts.
+ *
+ * Rules (chosen to match the long-standing scanner/cron contract: an explicit
+ * empty `alt=""` is an intentional, valid decorative choice — only a *missing*
+ * `alt` attribute is an error):
+ *   - DECORATIVE: an empty `alt=""` (the author opted the image out of the
+ *     accessibility tree), or any image explicitly marked decorative for
+ *     assistive tech (`role="presentation"`, `role="none"`, `aria-hidden="true"`).
+ *     Decorative images are correct and never flagged as missing.
+ *   - MISSING: a non-decorative image with no `alt` attribute at all.
+ *   - HAS ALT: a non-empty `alt`.
+ */
+/**
+ * True when an `<img>` tag is decorative: either an explicit empty `alt=""`, or
+ * marked decorative for assistive tech (`role="presentation"`/`"none"` or
+ * `aria-hidden="true"`). A descriptive (non-empty) alt is never decorative.
+ */
+export declare function isDecorativeImgTag(tag: string): boolean;
+export interface ImageAltAnalysis {
+    /** All `<img>` tags found. */
+    total: number;
+    /** Non-decorative images that have non-empty alt text. */
+    withAlt: number;
+    /** Images correctly marked decorative (excluded from coverage math). */
+    decorative: number;
+    /** Non-decorative images with no/empty alt. */
+    missing: number;
+    /** The non-empty alt strings, trimmed. */
+    altTexts: string[];
+}
+export declare function analyzeImageAlts(html: string | null | undefined): ImageAltAnalysis;
+/** Count images missing alt text (decorative images excluded). */
+export declare function countMissingAltImages(html: string | null | undefined): number;
+//# sourceMappingURL=alt-text.d.ts.map

package/dist/seo/alt-text.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"alt-text.d.ts","sourceRoot":"","sources":["../../src/seo/alt-text.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAYH;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAQvD;AAED,MAAM,WAAW,gBAAgB;IAC/B,8BAA8B;IAC9B,KAAK,EAAE,MAAM,CAAA;IACb,0DAA0D;IAC1D,OAAO,EAAE,MAAM,CAAA;IACf,wEAAwE;IACxE,UAAU,EAAE,MAAM,CAAA;IAClB,+CAA+C;IAC/C,OAAO,EAAE,MAAM,CAAA;IACf,0CAA0C;IAC1C,QAAQ,EAAE,MAAM,EAAE,CAAA;CACnB;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,gBAAgB,CAiBlF;AAED,kEAAkE;AAClE,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,CAE7E"}

package/dist/seo/alt-text.js

@@ -0,0 +1,67 @@
+/**
+ * Canonical image alt-text analysis, shared by every surface that reports on
+ * alt coverage (SEO analysis, the audit engine, the content-health scanner, the
+ * cron scan). Previously each had its own regex and they disagreed on the most
+ * important edge case — an intentionally *decorative* image — which produced
+ * conflicting "missing alt" counts.
+ *
+ * Rules (chosen to match the long-standing scanner/cron contract: an explicit
+ * empty `alt=""` is an intentional, valid decorative choice — only a *missing*
+ * `alt` attribute is an error):
+ *   - DECORATIVE: an empty `alt=""` (the author opted the image out of the
+ *     accessibility tree), or any image explicitly marked decorative for
+ *     assistive tech (`role="presentation"`, `role="none"`, `aria-hidden="true"`).
+ *     Decorative images are correct and never flagged as missing.
+ *   - MISSING: a non-decorative image with no `alt` attribute at all.
+ *   - HAS ALT: a non-empty `alt`.
+ */
+const IMG_TAG_RE = /<img\b[^>]*>/gi;
+function getAttr(tag, name) {
+    // The negative lookbehind prevents matching a hyphenated/namespaced attribute
+    // that merely *ends* with `name` (e.g. `data-default-alt="…"` must not be read
+    // as the `alt` attribute).
+    const m = tag.match(new RegExp(`(?<![-\\w:])${name}\\s*=\\s*["']([^"']*)["']`, 'i'));
+    return m ? (m[1] ?? '') : null;
+}
+/**
+ * True when an `<img>` tag is decorative: either an explicit empty `alt=""`, or
+ * marked decorative for assistive tech (`role="presentation"`/`"none"` or
+ * `aria-hidden="true"`). A descriptive (non-empty) alt is never decorative.
+ */
+export function isDecorativeImgTag(tag) {
+    const alt = getAttr(tag, 'alt');
+    if (alt !== null && alt.trim().length > 0)
+        return false;
+    if (alt !== null && alt.trim().length === 0)
+        return true;
+    // No alt attribute at all: decorative only if explicitly marked so.
+    const role = getAttr(tag, 'role')?.toLowerCase();
+    const ariaHidden = getAttr(tag, 'aria-hidden')?.toLowerCase();
+    return role === 'presentation' || role === 'none' || ariaHidden === 'true';
+}
+export function analyzeImageAlts(html) {
+    const result = { total: 0, withAlt: 0, decorative: 0, missing: 0, altTexts: [] };
+    if (!html)
+        return result;
+    const tags = html.match(IMG_TAG_RE) ?? [];
+    result.total = tags.length;
+    for (const tag of tags) {
+        const alt = getAttr(tag, 'alt');
+        if (alt !== null && alt.trim().length > 0) {
+            result.withAlt++;
+            result.altTexts.push(alt.trim());
+        }
+        else if (isDecorativeImgTag(tag)) {
+            result.decorative++;
+        }
+        else {
+            result.missing++;
+        }
+    }
+    return result;
+}
+/** Count images missing alt text (decorative images excluded). */
+export function countMissingAltImages(html) {
+    return analyzeImageAlts(html).missing;
+}
+//# sourceMappingURL=alt-text.js.map

package/dist/seo/alt-text.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"alt-text.js","sourceRoot":"","sources":["../../src/seo/alt-text.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,MAAM,UAAU,GAAG,gBAAgB,CAAA;AAEnC,SAAS,OAAO,CAAC,GAAW,EAAE,IAAY;IACxC,8EAA8E;IAC9E,+EAA+E;IAC/E,2BAA2B;IAC3B,MAAM,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,eAAe,IAAI,2BAA2B,EAAE,GAAG,CAAC,CAAC,CAAA;IACpF,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;AAChC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,GAAW;IAC5C,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;IAC/B,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,KAAK,CAAA;IACvD,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IACxD,oEAAoE;IACpE,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,WAAW,EAAE,CAAA;IAChD,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,EAAE,aAAa,CAAC,EAAE,WAAW,EAAE,CAAA;IAC7D,OAAO,IAAI,KAAK,cAAc,IAAI,IAAI,KAAK,MAAM,IAAI,UAAU,KAAK,MAAM,CAAA;AAC5E,CAAC;AAeD,MAAM,UAAU,gBAAgB,CAAC,IAA+B;IAC9D,MAAM,MAAM,GAAqB,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAA;IAClG,IAAI,CAAC,IAAI;QAAE,OAAO,MAAM,CAAA;IACxB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,CAAA;IACzC,MAAM,CAAC,KAAK,GAAG,IAAI,CAAC,MAAM,CAAA;IAC1B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;QAC/B,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1C,MAAM,CAAC,OAAO,EAAE,CAAA;YAChB,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAA;QAClC,CAAC;aAAM,IAAI,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC;YACnC,MAAM,CAAC,UAAU,EAAE,CAAA;QACrB,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,OAAO,EAAE,CAAA;QAClB,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,qBAAqB,CAAC,IAA+B;IACnE,OAAO,gBAAgB,CAAC,IAAI,CAAC,CAAC,OAAO,CAAA;AACvC,CAAC"}

package/dist/seo/analysis.d.ts

@@ -0,0 +1,75 @@
+export interface SEOAnalysisResult {
+    score: number;
+    checks: SEOCheck[];
+}
+export interface SEOCheck {
+    id: string;
+    category: 'keyphrase' | 'readability' | 'seo' | 'social';
+    title: string;
+    status: 'good' | 'improvement' | 'problem';
+    description: string;
+}
+export interface AnalysisInput {
+    title: string;
+    slug: string;
+    content: string;
+    metaTitle?: string;
+    metaDescription?: string;
+    focusKeyphrase?: string;
+    canonical?: string;
+    ogTitle?: string;
+    ogDescription?: string;
+    ogImage?: string;
+    isCornerstone?: boolean;
+}
+export interface ReadabilityResult {
+    fleschScore: number;
+    fleschLabel: string;
+    avgSentenceLength: number;
+    avgWordLength: number;
+    passiveVoicePercent: number;
+    wordCount: number;
+    sentenceCount: number;
+    paragraphCount: number;
+    readingTimeMinutes: number;
+}
+/** Remove all HTML tags, returning plain text. */
+export declare function stripHtmlTags(html: string): string;
+/**
+ * Estimate the syllable count of an English word.
+ *
+ * Heuristic: count vowel groups, subtract 1 for a trailing silent 'e',
+ * and clamp to a minimum of 1.
+ */
+export declare function countSyllables(word: string): number;
+/** Detect passive voice in a single sentence. */
+export declare function detectPassiveVoice(sentence: string): boolean;
+/** Split plain text into sentences. */
+export declare function splitSentences(text: string): string[];
+/** Split plain text into paragraphs (double newlines or `<p>` boundaries). */
+export declare function splitParagraphs(text: string): string[];
+/**
+ * Extract headings of a given level from content that may be HTML **or**
+ * Markdown. The content analysis runs against whatever editors store in the
+ * body field; rich-text collections store HTML while markdown collections store
+ * raw `#`/`##` ATX (and `===`/`---` Setext) headings. Matching only HTML tags
+ * made every markdown post fail the "no H1 / no subheadings" checks. This
+ * recognises both syntaxes so the score reflects the real document structure.
+ */
+export declare function extractHeadings(content: string, level: 1 | 2 | 3 | 4): string[];
+/**
+ * Run a comprehensive SEO analysis on the given content and metadata.
+ *
+ * Returns a 0-100 score together with detailed per-check results across
+ * keyphrase, SEO, readability, and social categories.
+ */
+export declare function analyzeContent(input: AnalysisInput): SEOAnalysisResult;
+/**
+ * Calculate readability metrics for a block of plain text.
+ *
+ * Includes the Flesch reading ease score, average sentence/word lengths,
+ * passive voice percentage, word/sentence/paragraph counts, and estimated
+ * reading time.
+ */
+export declare function calculateReadability(text: string): ReadabilityResult;
+//# sourceMappingURL=analysis.d.ts.map

package/dist/seo/analysis.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"analysis.d.ts","sourceRoot":"","sources":["../../src/seo/analysis.ts"],"names":[],"mappings":"AASA,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,QAAQ,EAAE,CAAA;CACnB;AAED,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAA;IACV,QAAQ,EAAE,WAAW,GAAG,aAAa,GAAG,KAAK,GAAG,QAAQ,CAAA;IACxD,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS,CAAA;IAC1C,WAAW,EAAE,MAAM,CAAA;CACpB;AAED,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,aAAa,CAAC,EAAE,OAAO,CAAA;CACxB;AAED,MAAM,WAAW,iBAAiB;IAChC,WAAW,EAAE,MAAM,CAAA;IACnB,WAAW,EAAE,MAAM,CAAA;IACnB,iBAAiB,EAAE,MAAM,CAAA;IACzB,aAAa,EAAE,MAAM,CAAA;IACrB,mBAAmB,EAAE,MAAM,CAAA;IAC3B,SAAS,EAAE,MAAM,CAAA;IACjB,aAAa,EAAE,MAAM,CAAA;IACrB,cAAc,EAAE,MAAM,CAAA;IACtB,kBAAkB,EAAE,MAAM,CAAA;CAC3B;AA8DD,kDAAkD;AAClD,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAalD;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAsBnD;AAED,iDAAiD;AACjD,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAa5D;AAED,uCAAuC;AACvC,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAOrD;AAED,8EAA8E;AAC9E,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAKtD;AA+BD;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE,CAiC/E;AA2DD;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,aAAa,GAAG,iBAAiB,CAsZtE;AAID;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,iBAAiB,CAsCpE"}