@prosopo/provider 3.13.7 → 4.7.1

package/dist/tasks/captchaManager.js

@@ -1,12 +1,117 @@
-import { getLogger } from "@prosopo/common";
-import { CaptchaType, ApiParams, Tier } from "@prosopo/types";
-import { getPrioritisedAccessRule } from "../api/blacklistRequestInspector.js";
+import { getLogger } from "@prosopo/logger";
+import { ResultReason, Tier, ApiParams } from "@prosopo/types";
+import { AccessPolicyType } from "@prosopo/user-access-policy";
+import { getPrioritisedAccessRule, getRequestUserScope } from "../api/blacklistRequestInspector.js";
+import { getIpAddressFromComposite } from "../compositeIpAddress.js";
+import { checkSpamEmail } from "./spam/checkSpamEmail.js";
+import { checkTrafficFilter } from "./spam/checkTrafficFilter.js";
+const findHardBlockPolicy = (accessPolicies) => {
+  return accessPolicies.find(
+    (policy) => policy.type === AccessPolicyType.Block && !policy.captchaType
+  );
+};
 class CaptchaManager {
-  constructor(db, pair, config, logger) {
+  constructor(db, pair, config, logger, writeQueue) {
     this.pair = pair;
     this.db = db;
     this.config = config;
     this.logger = logger || getLogger("info", import.meta.url);
+    this.writeQueue = writeQueue ?? null;
+  }
+  /**
+   * Update a session record with cache-first / write-behind semantics:
+   * the Redis cache patch is awaited (so the in-request view of the
+   * session is up-to-date for any subsequent fast-path read), and the
+   * Mongo write is fire-and-forget so the response isn't gated on a
+   * round-trip to Mongo. Matches the `RedisWriteQueue` design where
+   * Redis is the source of truth for the in-flight request and Mongo is
+   * eventually consistent.
+   *
+   * Prefer this over `this.db.updateSessionRecord` in any in-request
+   * handler.
+   */
+  async updateSessionRecordWithCache(sessionId, updates, streamToCentral) {
+    if (this.writeQueue) {
+      await this.writeQueue.patchCachedSession(
+        sessionId,
+        updates
+      );
+    }
+    this.scheduleMongoSessionUpdate(sessionId, updates, streamToCentral);
+  }
+  /**
+   * Decrypt with the active detector keys and strip the throwaway
+   * `timestamp` field. Returns `undefined` when no key decrypts.
+   */
+  async decryptSimdReadingsForAttach(simdReadingsCiphertext) {
+    const decryptKeys = [
+      ...await this.getDetectorKeys(),
+      process.env.BOT_DECRYPTION_KEY
+    ];
+    const decrypted = await this.decryptSimdReadings(
+      simdReadingsCiphertext,
+      decryptKeys
+    );
+    if (!decrypted) return void 0;
+    const { timestamp: _ignored, ...readings } = decrypted;
+    return readings;
+  }
+  /** Decrypt + first-hop-wins attach. No-op on decrypt failure. */
+  async decryptAndAttachSimdReadingsIfAbsent(sessionId, simdReadingsCiphertext, stage) {
+    const readings = await this.decryptSimdReadingsForAttach(
+      simdReadingsCiphertext
+    );
+    if (!readings) return;
+    await this.recordSessionSimdReadingsIfAbsentWithCache(
+      sessionId,
+      readings,
+      stage
+    );
+  }
+  /**
+   * First-hop-wins SIMD attach with cache-first / Mongo-deferred
+   * semantics — mirrors `updateSessionRecordWithCache`.
+   */
+  async recordSessionSimdReadingsIfAbsentWithCache(sessionId, readings, stage) {
+    if (this.writeQueue) {
+      await this.writeQueue.patchCachedSimdReadingsIfAbsent(
+        sessionId,
+        readings,
+        stage
+      );
+    }
+    this.scheduleMongoSimdReadingsUpdate(sessionId, readings, stage);
+  }
+  /**
+   * Fire-and-forget Mongo session update. Public so non-Task handlers
+   * (e.g. challenge GETs) can keep request response latency off the
+   * Mongo critical path while still ensuring eventual persistence.
+   */
+  scheduleMongoSessionUpdate(sessionId, updates, streamToCentral) {
+    Promise.resolve(
+      streamToCentral === void 0 ? this.db.updateSessionRecord(sessionId, updates) : this.db.updateSessionRecord(sessionId, updates, streamToCentral)
+    ).catch((err) => {
+      this.logger.warn(() => ({
+        err,
+        msg: "Background Mongo session update failed",
+        data: { sessionId }
+      }));
+    });
+  }
+  /**
+   * Fire-and-forget Mongo SIMD-readings update. Public for the same
+   * reason as `scheduleMongoSessionUpdate`.
+   */
+  scheduleMongoSimdReadingsUpdate(sessionId, readings, stage) {
+    Promise.resolve(
+      this.db.recordSessionSimdReadingsIfAbsent(sessionId, readings, stage)
+    ).catch((err) => {
+      this.logger.warn(() => ({
+        err,
+        msg: "Background Mongo SIMD-readings update failed",
+        data: { sessionId, stage }
+      }));
+    });
   }
   async validateSessionIP(sessionRecord, currentIP, env) {
     return { valid: true };
@@ -29,79 +134,88 @@ class CaptchaManager {
       }));
       return {
         valid: false,
-        reason: "API.INCORRECT_CAPTCHA_TYPE",
+        reason: ResultReason.INCORRECT_CAPTCHA_TYPE,
         type: requestedCaptchaType
       };
     }
     if (sessionId) {
-      if (clientSettings?.settings?.captchaType === CaptchaType.frictionless) {
-        const sessionRecord = await this.db.checkAndRemoveSession(sessionId);
-        if (!sessionRecord) {
-          this.logger.warn(() => ({
-            msg: "No frictionless session found",
-            data: {
-              account: clientSettings.account,
-              sessionId
-            }
-          }));
-          return {
-            valid: false,
-            reason: "CAPTCHA.NO_SESSION_FOUND",
-            type: requestedCaptchaType
-          };
-        }
-        if (currentIP) {
-          const ipValidation = await this.validateSessionIP(
-            sessionRecord,
-            currentIP,
-            env
-          );
-          if (!ipValidation.valid) {
-            return {
-              valid: false,
-              reason: ipValidation.reason,
-              type: requestedCaptchaType
-            };
+      const cachedBeforeRemove = this.writeQueue ? await this.writeQueue.getCachedSession(sessionId) : null;
+      const cachedHash = typeof cachedBeforeRemove?.userSitekeyIpHash === "string" ? cachedBeforeRemove.userSitekeyIpHash : void 0;
+      await Promise.all([
+        this.writeQueue?.invalidateCachedSession(sessionId),
+        cachedHash ? this.writeQueue?.invalidateCachedSessionByHash(cachedHash) : Promise.resolve()
+      ]);
+      const sessionRecord = await this.db.checkAndRemoveSession(sessionId);
+      if (!sessionRecord) {
+        this.logger.warn(() => ({
+          msg: "No session found",
+          data: {
+            account: clientSettings.account,
+            sessionId
           }
+        }));
+        if (this.writeQueue) {
+          const cachedHash2 = typeof cachedBeforeRemove?.userSitekeyIpHash === "string" ? cachedBeforeRemove.userSitekeyIpHash : void 0;
+          await Promise.all([
+            this.writeQueue.invalidateCachedSession(sessionId),
+            cachedHash2 ? this.writeQueue.invalidateCachedSessionByHash(cachedHash2) : Promise.resolve()
+          ]);
         }
-        if (sessionRecord.captchaType !== requestedCaptchaType) {
-          this.logger.warn(() => ({
-            msg: "Invalid frictionless request",
-            data: {
-              account: clientSettings.account,
-              sessionId
-            }
-          }));
+        return {
+          valid: false,
+          reason: ResultReason.CAPTCHA_NO_SESSION_FOUND,
+          type: requestedCaptchaType
+        };
+      }
+      if (this.writeQueue) {
+        await Promise.all([
+          this.writeQueue.invalidateCachedSession(sessionId),
+          sessionRecord.userSitekeyIpHash ? this.writeQueue.invalidateCachedSessionByHash(
+            sessionRecord.userSitekeyIpHash
+          ) : Promise.resolve()
+        ]);
+      }
+      if (currentIP) {
+        const ipValidation = await this.validateSessionIP(
+          sessionRecord,
+          currentIP,
+          env
+        );
+        if (!ipValidation.valid) {
           return {
             valid: false,
-            reason: "CAPTCHA.NO_SESSION_FOUND",
+            reason: ipValidation.reason,
             type: requestedCaptchaType
           };
         }
-        return {
-          valid: true,
-          sessionId: sessionRecord.sessionId,
-          type: requestedCaptchaType,
-          ...sessionRecord.powDifficulty && {
-            powDifficulty: sessionRecord.powDifficulty
-          },
-          ...sessionRecord.solvedImagesCount && {
-            solvedImagesCount: sessionRecord.solvedImagesCount
+      }
+      if (sessionRecord.captchaType !== requestedCaptchaType) {
+        this.logger.warn(() => ({
+          msg: "Session captcha type does not match requested type",
+          data: {
+            account: clientSettings.account,
+            sessionId,
+            sessionCaptchaType: sessionRecord.captchaType,
+            requestedCaptchaType
           }
+        }));
+        return {
+          valid: false,
+          reason: ResultReason.INCORRECT_CAPTCHA_TYPE,
+          type: requestedCaptchaType
         };
       }
-      this.logger.warn(() => ({
-        msg: "Invalid frictionless request",
-        data: {
-          account: clientSettings.account,
-          sessionId,
-          settingsCaptchaType: clientSettings?.settings?.captchaType
-        }
-      }));
       return {
-        valid: false,
-        reason: "API.INCORRECT_CAPTCHA_TYPE",
-        type: requestedCaptchaType
+        valid: true,
+        sessionId: sessionRecord.sessionId,
+        type: requestedCaptchaType,
+        ...sessionRecord.powDifficulty && {
+          powDifficulty: sessionRecord.powDifficulty
+        },
+        ...sessionRecord.solvedImagesCount && {
+          solvedImagesCount: sessionRecord.solvedImagesCount
+        },
+        ipInfo: sessionRecord.ipInfo
       };
     }
     if (clientSettings?.settings?.captchaType !== requestedCaptchaType) {
@@ -115,13 +229,13 @@ class CaptchaManager {
       }));
       return {
         valid: false,
-        reason: "API.INCORRECT_CAPTCHA_TYPE",
+        reason: ResultReason.INCORRECT_CAPTCHA_TYPE,
         type: requestedCaptchaType
       };
     }
     return { valid: true, type: requestedCaptchaType };
   }
-  getVerificationResponse(verified, clientRecord, translateFn, score) {
+  getVerificationResponse(verified, clientRecord, translateFn, score, reason) {
     return {
       status: translateFn(
         verified ? "API.USER_VERIFIED" : "API.USER_NOT_VERIFIED"
@@ -129,6 +243,9 @@ class CaptchaManager {
       [ApiParams.verified]: verified,
       ...CaptchaManager.canClientSeeScore(clientRecord.tier, score) && {
         [ApiParams.score]: score
+      },
+      ...!verified && clientRecord.tier !== Tier.Free && reason && {
+        [ApiParams.reason]: reason
       }
     };
   }
@@ -142,6 +259,161 @@ class CaptchaManager {
   async getDetectorKeys() {
     return await this.db.getDetectorKeys();
   }
+  /**
+   * Decrypt the catcher's WASM SIMD CPU fingerprint readings via the
+   * obfuscated `decodeSimd.js` bundle (source lives in the private
+   * @prosopo/catcher repo). Mirrors `decryptBehavioralData`: tries each
+   * detector key in turn (loaded by the caller, with the env-var key as
+   * fallback). Returns null when no key works so the caller can drop
+   * the field rather than fail the whole request.
+   */
+  async decryptSimdReadings(encryptedData, decryptKeys) {
+    const decryptSimdReadings = (await import("./detection/decodeSimd.js")).default;
+    const validKeys = decryptKeys.filter((k) => k);
+    if (validKeys.length === 0) {
+      this.logger?.error(() => ({
+        msg: "No decryption keys provided for SIMD readings"
+      }));
+      return null;
+    }
+    for (const [keyIndex, key] of validKeys.entries()) {
+      try {
+        return await decryptSimdReadings(encryptedData, key);
+      } catch (err) {
+        this.logger?.debug(() => ({
+          msg: "Failed to decrypt SIMD readings with key, trying next",
+          data: {
+            keyIndex: keyIndex + 1,
+            totalKeys: validKeys.length,
+            err
+          }
+        }));
+      }
+    }
+    this.logger?.warn(() => ({
+      msg: "Failed to decrypt SIMD readings with all available keys",
+      data: { totalKeysAttempted: validKeys.length }
+    }));
+    return null;
+  }
+  async decryptBehavioralData(encryptedData, decryptKeys) {
+    const decryptBehavioralData = (await import("./detection/decodeBehavior.js")).default;
+    const validKeys = decryptKeys.filter((k) => k);
+    if (validKeys.length === 0) {
+      this.logger?.error(() => ({
+        msg: "No decryption keys provided for behavioral data"
+      }));
+      return null;
+    }
+    for (const [keyIndex, key] of validKeys.entries()) {
+      try {
+        this.logger?.debug(() => ({
+          msg: "Attempting to decrypt behavioral data",
+          data: {
+            keyIndex: keyIndex + 1,
+            totalKeys: validKeys.length
+          }
+        }));
+        const result = await decryptBehavioralData(encryptedData, key);
+        this.logger?.info(() => ({
+          msg: "Behavioral data decrypted successfully",
+          data: {
+            keyIndex: keyIndex + 1,
+            c1Length: result.collector1?.length || 0,
+            c2Length: result.collector2?.length || 0,
+            c3Length: result.collector3?.length || 0,
+            deviceCapability: result.deviceCapability
+          }
+        }));
+        return result;
+      } catch (error) {
+        this.logger?.debug(() => ({
+          msg: "Failed to decrypt with key, trying next",
+          data: {
+            keyIndex: keyIndex + 1,
+            totalKeys: validKeys.length,
+            err: error
+          }
+        }));
+      }
+    }
+    this.logger?.error(() => ({
+      msg: "Failed to decrypt behavioral data with all available keys",
+      data: {
+        totalKeysAttempted: validKeys.length
+      }
+    }));
+    return null;
+  }
+  /**
+   * Checks if a user should be hard blocked based on access policies
+   * Only checks for Block policies without captchaType
+   *
+   * @returns The blocking policy if user should be blocked, undefined otherwise
+   */
+  async checkForHardBlock(userAccessRulesStorage, challengeRecord, userAccount, headers, coords, countryCode) {
+    let headHash;
+    if (challengeRecord.sessionId) {
+      const sessionRecord = await this.db.getSessionRecordBySessionId(
+        challengeRecord.sessionId
+      );
+      headHash = sessionRecord?.decryptedHeadHash;
+    }
+    const coordsString = coords ? JSON.stringify(coords) : void 0;
+    const ipAddressRecord = getIpAddressFromComposite(
+      challengeRecord.ipAddress
+    );
+    const userScope = getRequestUserScope(
+      headers,
+      challengeRecord.ja4,
+      ipAddressRecord.address,
+      userAccount,
+      headHash,
+      coordsString,
+      countryCode
+    );
+    const accessPolicies = await this.getPrioritisedAccessPolicies(
+      userAccessRulesStorage,
+      challengeRecord.dappAccount,
+      userScope
+    );
+    return findHardBlockPolicy(accessPolicies);
+  }
+  /**
+   * Checks if the provided email address has a domain in the spam email domain list.
+   * Returns true if the email domain is spam (i.e. should be blocked), false otherwise.
+   * Handles formats: user@domain.com, @domain.com, domain.com
+   */
+  async checkSpamEmail(email) {
+    return checkSpamEmail(email, this.db, this.config, this.logger);
+  }
+  /**
+   * Resolves the IP info to feed to `checkTrafficFilter` and runs the check.
+   *
+   * - The captcha record already carries the IPInfoResponse from request
+   *   time (ipInfoMiddleware → storeXxxRecord), so by default we reuse it
+   *   instead of hitting the sidecar again.
+   * - If the dapp's server passed up the end user's current IP via the
+   *   verify call, look that up fresh — it's the "now" IP for filtering
+   *   and may differ from the IP that originally requested the captcha.
+   * - `blockAbuser` defaults to true so abusive networks are always
+   *   blocked even when the site hasn't configured a trafficFilter.
+   * - Returns `{ isBlocked: false }` if every filter flag is off, without
+   *   consulting the payload at all.
+   *
+   * Callers handle the "blocked" branch themselves (each verify path
+   * updates record / session state differently); this helper just returns
+   * the verdict.
+   */
+  async resolveTrafficFilterCheck(env, recordIpInfo, trafficFilter, currentIp) {
+    const effective = { blockAbuser: true, ...trafficFilter };
+    const hasAny = Object.values(effective).some((v) => v);
+    if (!hasAny) {
+      return { isBlocked: false };
+    }
+    const ipInfo = currentIp ? await env.ipInfoService.lookup(currentIp) : recordIpInfo;
+    return checkTrafficFilter(ipInfo, effective);
+  }
   static canClientSeeScore(tier, score) {
     return score && tier && tier !== Tier.Free;
   }

package/dist/tasks/captchaManager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"captchaManager.js","sourceRoot":"","sources":["../../src/tasks/captchaManager.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAe,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACzD,OAAO,EACN,SAAS,EAOT,YAAY,EAGZ,IAAI,GAEJ,MAAM,gBAAgB,CAAC;AASxB,OAAO,EAEN,gBAAgB,GAIhB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACN,wBAAwB,EACxB,mBAAmB,GACnB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAC;AAGrE,OAAO,EAAE,cAAc,IAAI,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC9E,OAAO,EAEN,kBAAkB,GAClB,MAAM,8BAA8B,CAAC;AAOtC,MAAM,mBAAmB,GAAG,CAC3B,cAA8B,EACH,EAAE;IAC7B,OAAO,cAAc,CAAC,IAAI,CACzB,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,gBAAgB,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,WAAW,CACzE,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,OAAO,cAAc;IAO1B,YACC,EAAqB,EACrB,IAAiB,EACjB,MAA2B,EAC3B,MAAe,EACf,UAAmC;QAEnC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,MAAM,GAAG,MAAM,IAAI,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC3D,IAAI,CAAC,UAAU,GAAG,UAAU,IAAI,IAAI,CAAC;IACtC,CAAC;IAcM,KAAK,CAAC,4BAA4B,CACxC,SAAiB,EACjB,OAAyB,EACzB,eAAyB;QAGzB,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACrB,MAAM,IAAI,CAAC,UAAU,CAAC,kBAAkB,CACvC,SAAS,EACT,OAA6C,CAC7C,CAAC;QACH,CAAC;QAGD,IAAI,CAAC,0BAA0B,CAAC,SAAS,EAAE,OAAO,EAAE,eAAe,CAAC,CAAC;IACtE,CAAC;IAMM,KAAK,CAAC,4BAA4B,CACxC,sBAA8B;QAE9B,MAAM,WAAW,GAAG;YACnB,GAAG,CAAC,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;YACjC,OAAO,CAAC,GAAG,CAAC,kBAAkB;SAC9B,CAAC;QACF,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAC/C,sBAAsB,EACtB,WAAW,CACX,CAAC;QACF,IAAI,CAAC,SAAS;YAAE,OAAO,SAAS,CAAC;QACjC,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,QAAQ,EAAE,GAAG,SAAS,CAAC;QACvD,OAAO,QAAQ,CAAC;IACjB,CAAC;IAGM,KAAK,CAAC,oCAAoC,CAChD,SAAiB,EACjB,sBAA8B,EAC9B,KAAwB;QAExB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,4BAA4B,CACvD,sBAAsB,CACtB,CAAC;QACF,IAAI,CAAC,QAAQ;YAAE,OAAO;QACtB,MAAM,IAAI,CAAC,0CAA0C,CACpD,SAAS,EACT,QAAQ,EACR,KAAK,CACL,CAAC;IACH,CAAC;IAMM,KAAK,CAAC,0CAA0C,CACtD,SAAiB,EACjB,QAA8C,EAC9C,KAAwB;QAExB,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACrB,MAAM,IAAI,CAAC,UAAU,CAAC,+BAA+B,CACpD,SAAS,EACT,QAA8C,EAC9C,KAAK,CACL,CAAC;QACH,CAAC;QACD,IAAI,CAAC,+BAA+B,CAAC,SAAS,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;IAClE,CAAC;IAOM,0BAA0B,CAChC,SAAiB,EACjB,OAAyB,EACzB,eAAyB;QAKzB,OAAO,CAAC,OAAO,CACd,eAAe,KAAK,SAAS;YAC5B,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,mBAAmB,CAAC,SAAS,EAAE,OAAO,CAAC;YACjD,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,mBAAmB,CAAC,SAAS,EAAE,OAAO,EAAE,eAAe,CAAC,CACnE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACf,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;gBACvB,GAAG;gBACH,GAAG,EAAE,wCAAwC;gBAC7C,IAAI,EAAE,EAAE,SAAS,EAAE;aACnB,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACJ,CAAC;IAMM,+BAA+B,CACrC,SAAiB,EACjB,QAA8C,EAC9C,KAAwB;QAExB,OAAO,CAAC,OAAO,CACd,IAAI,CAAC,EAAE,CAAC,iCAAiC,CAAC,SAAS,EAAE,QAAQ,EAAE,KAAK,CAAC,CACrE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACf,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;gBACvB,GAAG;gBACH,GAAG,EAAE,8CAA8C;gBACnD,IAAI,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE;aAC1B,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,iBAAiB,CACtB,aAAsB,EACtB,SAAiB,EACjB,GAAwB;QAIxB,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACxB,CAAC;IAED,KAAK,CAAC,cAAc,CACnB,cAA4C,EAC5C,oBAAiC,EACjC,GAAwB,EACxB,SAAkB,EAClB,gBAA+B,EAC/B,SAAkB;QAalB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;YACxB,GAAG,EAAE,oBAAoB;YACzB,IAAI,EAAE;gBACL,WAAW,EAAE,oBAAoB;gBACjC,SAAS;aACT;SACD,CAAC,CAAC,CAAC;QAGJ,IACC,gBAAgB;YAChB,gBAAgB,CAAC,WAAW,KAAK,oBAAoB,EACpD,CAAC;YACF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;gBACvB,GAAG,EAAE,6CAA6C;gBAClD,IAAI,EAAE;oBACL,OAAO,EAAE,cAAc,CAAC,OAAO;oBAC/B,WAAW,EAAE,gBAAgB,CAAC,WAAW;iBACzC;aACD,CAAC,CAAC,CAAC;YACJ,OAAO;gBACN,KAAK,EAAE,KAAK;gBACZ,MAAM,EAAE,YAAY,CAAC,sBAAsB;gBAC3C,IAAI,EAAE,oBAAoB;aAC1B,CAAC;QACH,CAAC;QAMD,IAAI,SAAS,EAAE,CAAC;YAKf,MAAM,kBAAkB,GAAG,IAAI,CAAC,UAAU;gBACzC,CAAC,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,SAAS,CAAC;gBACnD,CAAC,CAAC,IAAI,CAAC;YAKR,MAAM,UAAU,GACf,OAAO,kBAAkB,EAAE,iBAAiB,KAAK,QAAQ;gBACxD,CAAC,CAAC,kBAAkB,CAAC,iBAAiB;gBACtC,CAAC,CAAC,SAAS,CAAC;YACd,MAAM,OAAO,CAAC,GAAG,CAAC;gBACjB,IAAI,CAAC,UAAU,EAAE,uBAAuB,CAAC,SAAS,CAAC;gBACnD,UAAU;oBACT,CAAC,CAAC,IAAI,CAAC,UAAU,EAAE,6BAA6B,CAAC,UAAU,CAAC;oBAC5D,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE;aACpB,CAAC,CAAC;YAEH,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,qBAAqB,CAAC,SAAS,CAAC,CAAC;YACrE,IAAI,CAAC,aAAa,EAAE,CAAC;gBACpB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;oBACvB,GAAG,EAAE,kBAAkB;oBACvB,IAAI,EAAE;wBACL,OAAO,EAAE,cAAc,CAAC,OAAO;wBAC/B,SAAS,EAAE,SAAS;qBACpB;iBACD,CAAC,CAAC,CAAC;gBAMJ,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;oBACrB,MAAM,UAAU,GACf,OAAO,kBAAkB,EAAE,iBAAiB,KAAK,QAAQ;wBACxD,CAAC,CAAC,kBAAkB,CAAC,iBAAiB;wBACtC,CAAC,CAAC,SAAS,CAAC;oBACd,MAAM,OAAO,CAAC,GAAG,CAAC;wBACjB,IAAI,CAAC,UAAU,CAAC,uBAAuB,CAAC,SAAS,CAAC;wBAClD,UAAU;4BACT,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,6BAA6B,CAAC,UAAU,CAAC;4BAC3D,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE;qBACpB,CAAC,CAAC;gBACJ,CAAC;gBACD,OAAO;oBACN,KAAK,EAAE,KAAK;oBACZ,MAAM,EAAE,YAAY,CAAC,wBAAwB;oBAC7C,IAAI,EAAE,oBAAoB;iBAC1B,CAAC;YACH,CAAC;YAQD,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;gBACrB,MAAM,OAAO,CAAC,GAAG,CAAC;oBACjB,IAAI,CAAC,UAAU,CAAC,uBAAuB,CAAC,SAAS,CAAC;oBAClD,aAAa,CAAC,iBAAiB;wBAC9B,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,6BAA6B,CAC7C,aAAa,CAAC,iBAAiB,CAC/B;wBACF,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE;iBACpB,CAAC,CAAC;YACJ,CAAC;YAGD,IAAI,SAAS,EAAE,CAAC;gBACf,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAChD,aAAa,EACb,SAAS,EACT,GAAG,CACH,CAAC;gBACF,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;oBACzB,OAAO;wBACN,KAAK,EAAE,KAAK;wBACZ,MAAM,EAAE,YAAY,CAAC,MAAM;wBAC3B,IAAI,EAAE,oBAAoB;qBAC1B,CAAC;gBACH,CAAC;YACF,CAAC;YAGD,IAAI,aAAa,CAAC,WAAW,KAAK,oBAAoB,EAAE,CAAC;gBACxD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;oBACvB,GAAG,EAAE,oDAAoD;oBACzD,IAAI,EAAE;wBACL,OAAO,EAAE,cAAc,CAAC,OAAO;wBAC/B,SAAS,EAAE,SAAS;wBACpB,kBAAkB,EAAE,aAAa,CAAC,WAAW;wBAC7C,oBAAoB;qBACpB;iBACD,CAAC,CAAC,CAAC;gBACJ,OAAO;oBACN,KAAK,EAAE,KAAK;oBACZ,MAAM,EAAE,YAAY,CAAC,sBAAsB;oBAC3C,IAAI,EAAE,oBAAoB;iBAC1B,CAAC;YACH,CAAC;YAED,OAAO;gBACN,KAAK,EAAE,IAAI;gBACX,SAAS,EAAE,aAAa,CAAC,SAAS;gBAClC,IAAI,EAAE,oBAAoB;gBAC1B,GAAG,CAAC,aAAa,CAAC,aAAa,IAAI;oBAClC,aAAa,EAAE,aAAa,CAAC,aAAa;iBAC1C,CAAC;gBACF,GAAG,CAAC,aAAa,CAAC,iBAAiB,IAAI;oBACtC,iBAAiB,EAAE,aAAa,CAAC,iBAAiB;iBAClD,CAAC;gBACF,MAAM,EAAE,aAAa,CAAC,MAAM;aAC5B,CAAC;QACH,CAAC;QAQD,IAAI,cAAc,EAAE,QAAQ,EAAE,WAAW,KAAK,oBAAoB,EAAE,CAAC;YACpE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;gBACvB,GAAG,EAAE,WAAW,oBAAoB,UAAU;gBAC9C,IAAI,EAAE;oBACL,OAAO,EAAE,cAAc,CAAC,OAAO;oBAC/B,oBAAoB,EAAE,oBAAoB;oBAC1C,mBAAmB,EAAE,cAAc,EAAE,QAAQ,EAAE,WAAW;iBAC1D;aACD,CAAC,CAAC,CAAC;YACJ,OAAO;gBACN,KAAK,EAAE,KAAK;gBACZ,MAAM,EAAE,YAAY,CAAC,sBAAsB;gBAC3C,IAAI,EAAE,oBAAoB;aAC1B,CAAC;QACH,CAAC;QAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,oBAAoB,EAAE,CAAC;IACpD,CAAC;IAED,uBAAuB,CACtB,QAAiB,EACjB,YAA0B,EAC1B,WAAoC,EACpC,KAAc,EACd,MAAe;QAEf,OAAO;YACN,MAAM,EAAE,WAAW,CAClB,QAAQ,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,uBAAuB,CACxD;YACD,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,QAAQ;YAC9B,GAAG,CAAC,cAAc,CAAC,iBAAiB,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI;gBACjE,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,KAAK;aACxB,CAAC;YACF,GAAG,CAAC,CAAC,QAAQ;gBACZ,YAAY,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI;gBAC/B,MAAM,IAAI;gBACT,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,MAAM;aAC1B,CAAC;SACH,CAAC;IACH,CAAC;IAED,KAAK,CAAC,4BAA4B,CACjC,sBAA0C,EAC1C,QAAgB,EAChB,SAAsC;QAEtC,OAAO,wBAAwB,CAC9B,sBAAsB,EACtB,SAAS,EACT,QAAQ,CACR,CAAC;IACH,CAAC;IAED,KAAK,CAAC,eAAe;QACpB,OAAO,MAAM,IAAI,CAAC,EAAE,CAAC,eAAe,EAAE,CAAC;IACxC,CAAC;IAUD,KAAK,CAAC,mBAAmB,CACxB,aAAqB,EACrB,WAAmC;QAEnC,MAAM,mBAAmB,GAAG,CAAC,MAAM,MAAM,CAAC,2BAA2B,CAAC,CAAC;aACrE,OAAO,CAAC;QAEV,MAAM,SAAS,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;QAC/C,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;gBACzB,GAAG,EAAE,+CAA+C;aACpD,CAAC,CAAC,CAAC;YACJ,OAAO,IAAI,CAAC;QACb,CAAC;QAED,KAAK,MAAM,CAAC,QAAQ,EAAE,GAAG,CAAC,IAAI,SAAS,CAAC,OAAO,EAAE,EAAE,CAAC;YACnD,IAAI,CAAC;gBACJ,OAAO,MAAM,mBAAmB,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC;YACtD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACd,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;oBACzB,GAAG,EAAE,uDAAuD;oBAC5D,IAAI,EAAE;wBACL,QAAQ,EAAE,QAAQ,GAAG,CAAC;wBACtB,SAAS,EAAE,SAAS,CAAC,MAAM;wBAC3B,GAAG;qBACH;iBACD,CAAC,CAAC,CAAC;YACL,CAAC;QACF,CAAC;QAED,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YACxB,GAAG,EAAE,yDAAyD;YAC9D,IAAI,EAAE,EAAE,kBAAkB,EAAE,SAAS,CAAC,MAAM,EAAE;SAC9C,CAAC,CAAC,CAAC;QACJ,OAAO,IAAI,CAAC;IACb,CAAC;IAED,KAAK,CAAC,qBAAqB,CAC1B,aAAqB,EACrB,WAAmC;QAEnC,MAAM,qBAAqB,GAAG,CAC7B,MAAM,MAAM,CAAC,+BAA+B,CAAC,CAC7C,CAAC,OAAO,CAAC;QAEV,MAAM,SAAS,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;QAE/C,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;gBACzB,GAAG,EAAE,iDAAiD;aACtD,CAAC,CAAC,CAAC;YACJ,OAAO,IAAI,CAAC;QACb,CAAC;QAGD,KAAK,MAAM,CAAC,QAAQ,EAAE,GAAG,CAAC,IAAI,SAAS,CAAC,OAAO,EAAE,EAAE,CAAC;YACnD,IAAI,CAAC;gBACJ,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;oBACzB,GAAG,EAAE,uCAAuC;oBAC5C,IAAI,EAAE;wBACL,QAAQ,EAAE,QAAQ,GAAG,CAAC;wBACtB,SAAS,EAAE,SAAS,CAAC,MAAM;qBAC3B;iBACD,CAAC,CAAC,CAAC;gBAGJ,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC;gBAE/D,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;oBACxB,GAAG,EAAE,wCAAwC;oBAC7C,IAAI,EAAE;wBACL,QAAQ,EAAE,QAAQ,GAAG,CAAC;wBACtB,QAAQ,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,IAAI,CAAC;wBACxC,QAAQ,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,IAAI,CAAC;wBACxC,QAAQ,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,IAAI,CAAC;wBACxC,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;qBACzC;iBACD,CAAC,CAAC,CAAC;gBAEJ,OAAO,MAAM,CAAC;YACf,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;oBACzB,GAAG,EAAE,yCAAyC;oBAC9C,IAAI,EAAE;wBACL,QAAQ,EAAE,QAAQ,GAAG,CAAC;wBACtB,SAAS,EAAE,SAAS,CAAC,MAAM;wBAC3B,GAAG,EAAE,KAAK;qBACV;iBACD,CAAC,CAAC,CAAC;YAEL,CAAC;QACF,CAAC;QAGD,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;YACzB,GAAG,EAAE,2DAA2D;YAChE,IAAI,EAAE;gBACL,kBAAkB,EAAE,SAAS,CAAC,MAAM;aACpC;SACD,CAAC,CAAC,CAAC;QAEJ,OAAO,IAAI,CAAC;IACb,CAAC;IAQD,KAAK,CAAC,iBAAiB,CACtB,sBAA0C,EAC1C,eAAwE,EACxE,WAAmB,EACnB,OAAuB,EACvB,MAA6B,EAC7B,WAAoB;QAGpB,IAAI,QAA4B,CAAC;QACjC,IAAI,eAAe,CAAC,SAAS,EAAE,CAAC;YAC/B,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,2BAA2B,CAC9D,eAAe,CAAC,SAAS,CACzB,CAAC;YACF,QAAQ,GAAG,aAAa,EAAE,iBAAiB,CAAC;QAC7C,CAAC;QAGD,MAAM,YAAY,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAEjE,MAAM,eAAe,GAAG,yBAAyB,CAChD,eAAe,CAAC,SAAS,CACzB,CAAC;QAEF,MAAM,SAAS,GAAG,mBAAmB,CACpC,OAAO,EACP,eAAe,CAAC,GAAG,EACnB,eAAe,CAAC,OAAO,EACvB,WAAW,EACX,QAAQ,EACR,YAAY,EACZ,WAAW,CACX,CAAC;QAEF,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,4BAA4B,CAC7D,sBAAsB,EACtB,eAAe,CAAC,WAAW,EAC3B,SAAS,CACT,CAAC;QAEF,OAAO,mBAAmB,CAAC,cAAc,CAAC,CAAC;IAC5C,CAAC;IAOD,KAAK,CAAC,cAAc,CAAC,KAAa;QACjC,OAAO,gBAAgB,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IACnE,CAAC;IAoBD,KAAK,CAAC,yBAAyB,CAC9B,GAAwB,EACxB,YAAwC,EACxC,aAAkD,EAClD,SAAkB;QAElB,MAAM,SAAS,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,GAAG,aAAa,EAAE,CAAC;QAC1D,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;QACvD,IAAI,CAAC,MAAM,EAAE,CAAC;YACb,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;QAC7B,CAAC;QACD,MAAM,MAAM,GAAG,SAAS;YACvB,CAAC,CAAC,MAAM,GAAG,CAAC,aAAa,CAAC,MAAM,CAAC,SAAS,CAAC;YAC3C,CAAC,CAAC,YAAY,CAAC;QAChB,OAAO,kBAAkB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAC9C,CAAC;IAED,MAAM,CAAC,iBAAiB,CAAC,IAAU,EAAE,KAAc;QAClD,OAAO,KAAK,IAAI,IAAI,IAAI,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC;IAC5C,CAAC;CACD"}

package/dist/tasks/client/clientTasks.d.ts

@@ -0,0 +1,69 @@
+import { CaptchaDatabase } from "@prosopo/database";
+import type { Logger } from "@prosopo/logger";
+import { type DecisionMachineCaptchaType, type DecisionMachineLanguage, type DecisionMachineRuntime, DecisionMachineScope, type IUserSettings, type ProsopoConfigOutput, Tier } from "@prosopo/types";
+import type { IProviderDatabase } from "@prosopo/types-database";
+export declare class ClientTaskManager {
+    config: ProsopoConfigOutput;
+    logger: Logger;
+    providerDB: IProviderDatabase;
+    captchaDB: CaptchaDatabase | undefined;
+    constructor(config: ProsopoConfigOutput, logger: Logger, db: IProviderDatabase);
+    getCaptchaDB(mongoCaptchaUri: string): CaptchaDatabase;
+    storeCommitmentsExternal(): Promise<void>;
+    getClientList(): Promise<void>;
+    calculateClientEntropy(): Promise<void>;
+    registerSiteKey(siteKey: string, tier: Tier, settings: IUserSettings): Promise<void>;
+    registerSiteKeys(siteKeys: Array<{
+        siteKey: string;
+        tier: Tier;
+        settings: IUserSettings;
+    }>): Promise<void>;
+    removeSiteKey(siteKey: string): Promise<void>;
+    removeSiteKeys(siteKeys: Array<{
+        siteKey: string;
+    }>): Promise<void>;
+    updateDetectorKey(detectorKey: string): Promise<string[]>;
+    removeDetectorKey(detectorKey: string, expirationInSeconds?: number): Promise<void>;
+    updateDecisionMachine(scope: DecisionMachineScope, runtime: DecisionMachineRuntime, source: string, dappAccount?: string, language?: DecisionMachineLanguage, name?: string, version?: string, captchaType?: DecisionMachineCaptchaType): Promise<{
+        scope: DecisionMachineScope;
+        dappAccount?: string;
+        updatedAt: string;
+    }>;
+    getAllDecisionMachines(): Promise<{
+        _id: string;
+        scope: DecisionMachineScope;
+        dappAccount?: string;
+        runtime: DecisionMachineRuntime;
+        language?: DecisionMachineLanguage;
+        name?: string;
+        version?: string;
+        captchaType?: DecisionMachineCaptchaType;
+        createdAt: string;
+        updatedAt: string;
+    }[]>;
+    getDecisionMachine(id: string): Promise<{
+        _id: string;
+        scope: DecisionMachineScope;
+        dappAccount?: string;
+        runtime: DecisionMachineRuntime;
+        language?: DecisionMachineLanguage;
+        source: string;
+        name?: string;
+        version?: string;
+        captchaType?: DecisionMachineCaptchaType;
+        createdAt: string;
+        updatedAt: string;
+    }>;
+    removeDecisionMachine(id: string): Promise<{
+        success: boolean;
+        deletedId: string;
+    }>;
+    removeAllDecisionMachines(): Promise<{
+        success: boolean;
+        deletedCount: number;
+    }>;
+    domainPatternMatcher(referrer: string, clientDomain: string): boolean;
+    private isRecordUpdated;
+    private processBatchesWithCursor;
+}
+//# sourceMappingURL=clientTasks.d.ts.map

package/dist/tasks/client/clientTasks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"clientTasks.d.ts","sourceRoot":"","sources":["../../../src/tasks/client/clientTasks.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAE,eAAe,EAAkB,MAAM,mBAAmB,CAAC;AACpE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,EAEN,KAAK,0BAA0B,EAC/B,KAAK,uBAAuB,EAC5B,KAAK,sBAAsB,EAC3B,oBAAoB,EACpB,KAAK,aAAa,EAElB,KAAK,mBAAmB,EAGxB,IAAI,EAEJ,MAAM,gBAAgB,CAAC;AACxB,OAAO,KAAK,EAEX,iBAAiB,EAEjB,MAAM,yBAAyB,CAAC;AAmBjC,qBAAa,iBAAiB;IAC7B,MAAM,EAAE,mBAAmB,CAAC;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,iBAAiB,CAAC;IAC9B,SAAS,EAAE,eAAe,GAAG,SAAS,CAAC;gBAEtC,MAAM,EAAE,mBAAmB,EAC3B,MAAM,EAAE,MAAM,EACd,EAAE,EAAE,iBAAiB;IAWtB,YAAY,CAAC,eAAe,EAAE,MAAM,GAAG,eAAe;IAmBhD,wBAAwB,IAAI,OAAO,CAAC,IAAI,CAAC;IAsIzC,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC;IA8E9B,sBAAsB,IAAI,OAAO,CAAC,IAAI,CAAC;IAgFvC,eAAe,CACpB,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,IAAI,EACV,QAAQ,EAAE,aAAa,GACrB,OAAO,CAAC,IAAI,CAAC;IAWV,gBAAgB,CACrB,QAAQ,EAAE,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,IAAI,CAAC;QAAC,QAAQ,EAAE,aAAa,CAAA;KAAE,CAAC,GACvE,OAAO,CAAC,IAAI,CAAC;IAaV,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAK7C,cAAc,CAAC,QAAQ,EAAE,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IASnE,iBAAiB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAazD,iBAAiB,CACtB,WAAW,EAAE,MAAM,EACnB,mBAAmB,CAAC,EAAE,MAAM,GAC1B,OAAO,CAAC,IAAI,CAAC;IAUV,qBAAqB,CAC1B,KAAK,EAAE,oBAAoB,EAC3B,OAAO,EAAE,sBAAsB,EAC/B,MAAM,EAAE,MAAM,EACd,WAAW,CAAC,EAAE,MAAM,EACpB,QAAQ,CAAC,EAAE,uBAAuB,EAClC,IAAI,CAAC,EAAE,MAAM,EACb,OAAO,CAAC,EAAE,MAAM,EAChB,WAAW,CAAC,EAAE,0BAA0B,GACtC,OAAO,CAAC;QACV,KAAK,EAAE,oBAAoB,CAAC;QAC5B,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,SAAS,EAAE,MAAM,CAAC;KAClB,CAAC;IA6BI,sBAAsB,IAAI,OAAO,CACtC;QACC,GAAG,EAAE,MAAM,CAAC;QACZ,KAAK,EAAE,oBAAoB,CAAC;QAC5B,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,OAAO,EAAE,sBAAsB,CAAC;QAChC,QAAQ,CAAC,EAAE,uBAAuB,CAAC;QACnC,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,WAAW,CAAC,EAAE,0BAA0B,CAAC;QACzC,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,EAAE,MAAM,CAAC;KAClB,EAAE,CACH;IAgBK,kBAAkB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC;QAC7C,GAAG,EAAE,MAAM,CAAC;QACZ,KAAK,EAAE,oBAAoB,CAAC;QAC5B,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,OAAO,EAAE,sBAAsB,CAAC;QAChC,QAAQ,CAAC,EAAE,uBAAuB,CAAC;QACnC,MAAM,EAAE,MAAM,CAAC;QACf,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,WAAW,CAAC,EAAE,0BAA0B,CAAC;QACzC,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,EAAE,MAAM,CAAC;KAClB,CAAC;IAuBI,qBAAqB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC;QAChD,OAAO,EAAE,OAAO,CAAC;QACjB,SAAS,EAAE,MAAM,CAAC;KAClB,CAAC;IAcI,yBAAyB,IAAI,OAAO,CAAC;QAC1C,OAAO,EAAE,OAAO,CAAC;QACjB,YAAY,EAAE,MAAM,CAAC;KACrB,CAAC;IAaF,oBAAoB,CAAC,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO;IA8CrE,OAAO,CAAC,eAAe;YAWT,wBAAwB;CAatC"}