@prosopo/provider 5.8.1 → 5.9.0

package/dist/tests/integration/webBotAuthAuthenticated.integration.test.js

@@ -0,0 +1,448 @@
+import { createServer } from "node:http";
+import { dirname, join } from "node:path";
+import { fileURLToPath } from "node:url";
+import { ed25519 } from "@noble/curves/ed25519";
+import { stringToU8a, u8aToHex } from "@polkadot/util";
+import { ProviderEnvironment } from "@prosopo/env";
+import { generateMnemonic, getPair } from "@prosopo/keyring";
+import { Tasks, isTlsAvailable, startProviderApi } from "@prosopo/provider";
+import { ApiParams, CaptchaType, ClientApiPaths, ClientSettingsSchema, DatabaseTypes, ProsopoConfigSchema, Tier, encodeProcaptchaOutput, } from "@prosopo/types";
+import { AccessPolicyType, accessRuleInput, } from "@prosopo/user-access-policy";
+import { randomAsHex } from "@prosopo/util-crypto";
+import { buildSignatureBase } from "@prosopo/web-bot-auth";
+import { GenericContainer } from "testcontainers";
+import { afterAll, beforeAll, beforeEach, describe, expect, it } from "vitest";
+import { getVerdictCache } from "../../api/blacklistRequestInspector.js";
+import { reservePort, testFetch } from "./testUtils.js";
+const KEY_ID = "web-bot-auth-integration-key";
+const cleanIpInfo = (ip) => ({
+    ip,
+    isValid: true,
+    isVPN: false,
+    isTor: false,
+    isProxy: false,
+    isDatacenter: false,
+    isAbuser: false,
+    isMobile: false,
+    isSatellite: false,
+    isCrawler: false,
+});
+const toBase64 = (bytes) => {
+    let bin = "";
+    for (let i = 0; i < bytes.length; i++)
+        bin += String.fromCharCode(bytes[i]);
+    return btoa(bin);
+};
+const toBase64Url = (bytes) => toBase64(bytes).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
+describe("Web Bot Auth authenticated flow (integration)", () => {
+    let env;
+    let tasks;
+    let accessRulesStorage;
+    let mongoContainer;
+    let redisContainer;
+    let server;
+    let jwksServer;
+    let baseUrl;
+    let testPort;
+    let authority;
+    let signerUrl;
+    let privateKey;
+    let publicKey;
+    let jwksRequests = 0;
+    const previousPoolDir = process.env.PROSOPO_DETECTOR_POOL_DIR;
+    beforeAll(async () => {
+        testPort = await reservePort();
+        const protocol = isTlsAvailable() ? "https" : "http";
+        baseUrl = `${protocol}://localhost:${testPort}`;
+        authority = `localhost:${testPort}`;
+        privateKey = ed25519.utils.randomPrivateKey();
+        publicKey = ed25519.getPublicKey(privateKey);
+        const jwksPort = await reservePort();
+        signerUrl = `http://localhost:${jwksPort}`;
+        jwksServer = createServer((req, res) => {
+            if (req.url === "/.well-known/http-message-signatures-directory") {
+                jwksRequests += 1;
+                res.writeHead(200, {
+                    "content-type": "application/json",
+                    "cache-control": "max-age=1",
+                });
+                res.end(JSON.stringify({
+                    keys: [
+                        {
+                            kty: "OKP",
+                            crv: "Ed25519",
+                            alg: "EdDSA",
+                            kid: KEY_ID,
+                            x: toBase64Url(publicKey),
+                        },
+                    ],
+                }));
+                return;
+            }
+            res.writeHead(404).end();
+        });
+        await new Promise((resolve) => jwksServer?.listen(jwksPort, "127.0.0.1", resolve));
+        mongoContainer = await new GenericContainer("mongo:6.0.28")
+            .withExposedPorts(27017)
+            .withEnvironment({
+            MONGO_INITDB_ROOT_USERNAME: "root",
+            MONGO_INITDB_ROOT_PASSWORD: "root",
+            MONGO_INITDB_DATABASE: "prosopo_test",
+        })
+            .start();
+        redisContainer = await new GenericContainer("redis/redis-stack:latest")
+            .withExposedPorts(6379)
+            .withEnvironment({ REDIS_ARGS: "--requirepass root" })
+            .start();
+        const config = ProsopoConfigSchema.parse({
+            defaultEnvironment: "development",
+            host: baseUrl,
+            account: {
+                secret: "puppy cream effort carbon despair leg pyramid cotton endorse immense drill peasant",
+            },
+            authAccount: {
+                secret: "puppy cream effort carbon despair leg pyramid cotton endorse immense drill peasant",
+            },
+            database: {
+                development: {
+                    type: DatabaseTypes.enum.provider,
+                    endpoint: `mongodb://root:root@${mongoContainer.getHost()}:${mongoContainer.getMappedPort(27017)}`,
+                    dbname: `prosopo_web_bot_auth_test_${Date.now()}`,
+                    authSource: "admin",
+                },
+            },
+            redisConnection: {
+                url: `redis://:${encodeURIComponent("root")}@${redisContainer.getHost()}:${redisContainer.getMappedPort(6379)}`,
+                password: "root",
+                indexName: randomAsHex(16),
+            },
+            ipApi: { baseUrl: "https://dummyUrl.com", apiKey: "dummyKey" },
+            server: { baseURL: `${protocol}://localhost`, port: testPort },
+        });
+        env = new ProviderEnvironment(config);
+        await env.isReady();
+        env.ipInfoService = {
+            initialize: async () => { },
+            isAvailable: () => true,
+            lookup: async (ip) => cleanIpInfo(ip),
+        };
+        process.env.PROSOPO_DETECTOR_POOL_DIR = join(dirname(fileURLToPath(import.meta.url)), "../../../fixtures/detector-pool");
+        tasks = new Tasks(env);
+        accessRulesStorage = env.getDb().getUserAccessRulesStorage();
+        await env.getDb().getRedisAccessRulesConnection().getClient();
+        server = await startProviderApi(env, true, testPort);
+    }, 180_000);
+    afterAll(async () => {
+        process.env.PROSOPO_DETECTOR_POOL_DIR = previousPoolDir;
+        if (jwksServer) {
+            await new Promise((resolve) => jwksServer?.close(() => resolve()));
+        }
+        if (server) {
+            await new Promise((resolve) => server?.close(() => resolve()));
+        }
+        try {
+            await env?.getDb().close();
+        }
+        catch { }
+        try {
+            await redisContainer?.stop();
+        }
+        catch { }
+        try {
+            await mongoContainer?.stop();
+        }
+        catch { }
+    });
+    beforeEach(async () => {
+        await accessRulesStorage.deleteAllRules();
+        getVerdictCache().clear();
+    });
+    const registerSite = async () => {
+        const [mnemonic, siteKey] = await generateMnemonic();
+        await tasks.clientTaskManager.registerSiteKey(siteKey, Tier.Professional, ClientSettingsSchema.parse({
+            captchaType: CaptchaType.frictionless,
+            domains: ["localhost", "example.com"],
+        }));
+        return [mnemonic, siteKey];
+    };
+    const signedHeaders = (expiresInSeconds = 300) => {
+        const created = Math.floor(Date.now() / 1000);
+        const expires = created + expiresInSeconds;
+        const signatureAgent = `"${signerUrl}"`;
+        const params = `("@authority" "signature-agent");created=${created};expires=${expires};keyid="${KEY_ID}";alg="ed25519";tag="web-bot-auth"`;
+        const base = buildSignatureBase(["@authority", "signature-agent"], { authority, signatureAgent }, params);
+        const signature = ed25519.sign(new TextEncoder().encode(base), privateKey);
+        return {
+            "Signature-Agent": signatureAgent,
+            "Signature-Input": `sig1=${params}`,
+            Signature: `sig1=:${toBase64(signature)}:`,
+        };
+    };
+    const frictionless = async (siteKey, options) => {
+        const body = {
+            [ApiParams.dapp]: siteKey,
+            [ApiParams.token]: randomAsHex(16),
+            [ApiParams.user]: options.userId,
+            [ApiParams.headHash]: randomAsHex(16),
+            ...(options.clientSessionId && {
+                [ApiParams.clientSessionId]: options.clientSessionId,
+            }),
+        };
+        const response = await testFetch(`${baseUrl}${ClientApiPaths.GetFrictionlessCaptchaChallenge}`, {
+            method: "POST",
+            headers: {
+                Connection: "close",
+                "Content-Type": "application/json",
+                Origin: "https://localhost",
+                "Prosopo-Site-Key": siteKey,
+                "Prosopo-User": options.userId,
+                "User-Agent": options.userAgent,
+                "X-Forwarded-For": options.ip,
+                ...options.extraHeaders,
+            },
+            body: JSON.stringify(body),
+        });
+        return {
+            status: response.status,
+            body: response.status === 200 ? await response.json() : {},
+        };
+    };
+    const authenticatedVerify = async (siteKey, siteKeyMnemonic, userId, sessionId, extra = {}) => {
+        const timestamp = Date.now().toString();
+        const token = encodeProcaptchaOutput({
+            [ApiParams.dapp]: siteKey,
+            [ApiParams.user]: userId,
+            ...(sessionId ? { [ApiParams.commitmentId]: sessionId } : {}),
+            [ApiParams.timestamp]: timestamp,
+            [ApiParams.signature]: {
+                [ApiParams.provider]: {},
+                [ApiParams.user]: {},
+            },
+        });
+        const body = {
+            [ApiParams.token]: token,
+            [ApiParams.dappSignature]: u8aToHex(getPair(siteKeyMnemonic).sign(stringToU8a(timestamp))),
+            ...(extra.ip !== undefined && { [ApiParams.ip]: extra.ip }),
+            ...(extra.clientSessionId !== undefined && {
+                [ApiParams.clientSessionId]: extra.clientSessionId,
+            }),
+        };
+        const response = await testFetch(`${baseUrl}${ClientApiPaths.VerifyAuthenticatedSession}`, {
+            method: "POST",
+            headers: {
+                Connection: "close",
+                "Content-Type": "application/json",
+                Origin: "https://localhost",
+                "Prosopo-Site-Key": siteKey,
+                "Prosopo-User": userId,
+            },
+            body: JSON.stringify(body),
+        });
+        expect(response.status).toBe(200);
+        return (await response.json());
+    };
+    const allowRule = async (siteKey, fields) => {
+        await accessRulesStorage.insertRules([
+            {
+                rule: accessRuleInput.parse({
+                    type: AccessPolicyType.Allow,
+                    clientId: siteKey,
+                    ...fields,
+                }),
+            },
+        ]);
+    };
+    describe("frictionless entry", () => {
+        it("mints an authenticated session for a request a verified Web Bot Auth signer is allowed on", async () => {
+            const [, siteKey] = await registerSite();
+            const [, userId] = await generateMnemonic();
+            await allowRule(siteKey, { webBotAuthAgent: signerUrl });
+            const before = jwksRequests;
+            const { status, body } = await frictionless(siteKey, {
+                userId,
+                ip: "203.0.113.7",
+                userAgent: "IntegrationAgent/1.0",
+                extraHeaders: signedHeaders(),
+            });
+            expect(status).toBe(200);
+            expect(body.captchaType).toBe(CaptchaType.authenticated);
+            expect(body.sessionId).toBeTruthy();
+            expect(body.agent).toBe(signerUrl);
+            expect(jwksRequests).toBeGreaterThan(before);
+            const session = await env
+                .getDb()
+                .getSessionRecordBySessionId(body.sessionId);
+            expect(session?.captchaType).toBe(CaptchaType.authenticated);
+            expect(session?.serverChecked).toBe(false);
+        });
+        it("does not mint an authenticated session when the signature is expired", async () => {
+            const [, siteKey] = await registerSite();
+            const [, userId] = await generateMnemonic();
+            await allowRule(siteKey, { webBotAuthAgent: signerUrl });
+            const { status, body } = await frictionless(siteKey, {
+                userId,
+                ip: "203.0.113.8",
+                userAgent: "IntegrationAgent/1.0",
+                extraHeaders: signedHeaders(-60),
+            });
+            expect(status).toBe(200);
+            expect(body.captchaType).not.toBe(CaptchaType.authenticated);
+        });
+        it("does not mint an authenticated session for an unsigned request carrying only the Signature-Agent header", async () => {
+            const [, siteKey] = await registerSite();
+            const [, userId] = await generateMnemonic();
+            await allowRule(siteKey, { webBotAuthAgent: signerUrl });
+            const { status, body } = await frictionless(siteKey, {
+                userId,
+                ip: "203.0.113.9",
+                userAgent: "IntegrationAgent/1.0",
+                extraHeaders: { "Signature-Agent": `"${signerUrl}"` },
+            });
+            expect(status).toBe(200);
+            expect(body.captchaType).not.toBe(CaptchaType.authenticated);
+        });
+        it("mints an authenticated session for a non-signature qualifier (user agent)", async () => {
+            const [, siteKey] = await registerSite();
+            const [, userId] = await generateMnemonic();
+            const userAgent = `TrustedPartnerAgent/${randomAsHex(4)}`;
+            await allowRule(siteKey, { userAgent });
+            const { status, body } = await frictionless(siteKey, {
+                userId,
+                ip: "203.0.113.10",
+                userAgent,
+            });
+            expect(status).toBe(200);
+            expect(body.captchaType).toBe(CaptchaType.authenticated);
+            expect(body.agent).toBeUndefined();
+        });
+        it("lets a Block on the same scope beat the Allow", async () => {
+            const [, siteKey] = await registerSite();
+            const [, userId] = await generateMnemonic();
+            const userAgent = `TrustedPartnerAgent/${randomAsHex(4)}`;
+            await allowRule(siteKey, { userAgent });
+            await accessRulesStorage.insertRules([
+                {
+                    rule: accessRuleInput.parse({
+                        type: AccessPolicyType.Block,
+                        clientId: siteKey,
+                        userAgent,
+                    }),
+                },
+            ]);
+            const { status, body } = await frictionless(siteKey, {
+                userId,
+                ip: "203.0.113.11",
+                userAgent,
+            });
+            expect(body.captchaType).not.toBe(CaptchaType.authenticated);
+            expect(status).not.toBe(200);
+        });
+        it("ignores a deferToVerify Allow at frictionless entry", async () => {
+            const [, siteKey] = await registerSite();
+            const [, userId] = await generateMnemonic();
+            const userAgent = `DeferredPartnerAgent/${randomAsHex(4)}`;
+            await allowRule(siteKey, { userAgent, deferToVerify: true });
+            const { status, body } = await frictionless(siteKey, {
+                userId,
+                ip: "203.0.113.12",
+                userAgent,
+            });
+            expect(status).toBe(200);
+            expect(body.captchaType).not.toBe(CaptchaType.authenticated);
+        });
+        it("does not mint an authenticated session when no Allow rule matches", async () => {
+            const [, siteKey] = await registerSite();
+            const [, userId] = await generateMnemonic();
+            await allowRule(siteKey, { userAgent: "SomeOtherAgent/9.9" });
+            const { status, body } = await frictionless(siteKey, {
+                userId,
+                ip: "203.0.113.13",
+                userAgent: "IntegrationAgent/1.0",
+            });
+            expect(status).toBe(200);
+            expect(body.captchaType).not.toBe(CaptchaType.authenticated);
+        });
+    });
+    describe("/client/authenticated/verify", () => {
+        const AGENT_IP = "203.0.113.20";
+        const mintSession = async (clientSessionId) => {
+            const [siteKeyMnemonic, siteKey] = await registerSite();
+            const [, userId] = await generateMnemonic();
+            const userAgent = `TrustedPartnerAgent/${randomAsHex(4)}`;
+            await allowRule(siteKey, { userAgent });
+            const { body } = await frictionless(siteKey, {
+                userId,
+                ip: AGENT_IP,
+                userAgent,
+                clientSessionId,
+            });
+            expect(body.captchaType).toBe(CaptchaType.authenticated);
+            return {
+                siteKey,
+                siteKeyMnemonic,
+                userId,
+                sessionId: body.sessionId,
+            };
+        };
+        it("verifies once and refuses the second redemption", async () => {
+            const { siteKey, siteKeyMnemonic, userId, sessionId } = await mintSession();
+            const first = await authenticatedVerify(siteKey, siteKeyMnemonic, userId, sessionId, { ip: AGENT_IP });
+            expect(first).toEqual({ verified: true, status: "API.USER_VERIFIED" });
+            const second = await authenticatedVerify(siteKey, siteKeyMnemonic, userId, sessionId, { ip: AGENT_IP });
+            expect(second.verified).toBe(false);
+            expect(second.status).toBe("API.USER_ALREADY_VERIFIED");
+        });
+        it("refuses when the operator forwards no IP", async () => {
+            const { siteKey, siteKeyMnemonic, userId, sessionId } = await mintSession();
+            const result = await authenticatedVerify(siteKey, siteKeyMnemonic, userId, sessionId);
+            expect(result.verified).toBe(false);
+            expect(result.status).toBe("API.AUTHENTICATED_IP_REQUIRED");
+        });
+        it("refuses when the forwarded IP is not the one the session was issued to", async () => {
+            const { siteKey, siteKeyMnemonic, userId, sessionId } = await mintSession();
+            const result = await authenticatedVerify(siteKey, siteKeyMnemonic, userId, sessionId, { ip: "198.51.100.44" });
+            expect(result.verified).toBe(false);
+            expect(result.status).toBe("API.AUTHENTICATED_IP_MISMATCH");
+        });
+        it("leaves the session redeemable after a rejected verify", async () => {
+            const { siteKey, siteKeyMnemonic, userId, sessionId } = await mintSession();
+            await authenticatedVerify(siteKey, siteKeyMnemonic, userId, sessionId, {
+                ip: "198.51.100.44",
+            });
+            const result = await authenticatedVerify(siteKey, siteKeyMnemonic, userId, sessionId, { ip: AGENT_IP });
+            expect(result).toEqual({ verified: true, status: "API.USER_VERIFIED" });
+        });
+        it("refuses when the forwarded clientSessionId is not the one the session was minted with", async () => {
+            const { siteKey, siteKeyMnemonic, userId, sessionId } = await mintSession("render-session-a");
+            const result = await authenticatedVerify(siteKey, siteKeyMnemonic, userId, sessionId, { ip: AGENT_IP, clientSessionId: "render-session-b" });
+            expect(result.verified).toBe(false);
+            expect(result.status).toBe("API.CLIENT_SESSION_MISMATCH");
+        });
+        it("verifies when the forwarded clientSessionId matches", async () => {
+            const { siteKey, siteKeyMnemonic, userId, sessionId } = await mintSession("render-session-a");
+            const result = await authenticatedVerify(siteKey, siteKeyMnemonic, userId, sessionId, { ip: AGENT_IP, clientSessionId: "render-session-a" });
+            expect(result).toEqual({ verified: true, status: "API.USER_VERIFIED" });
+        });
+        it("refuses a session that was not minted as authenticated", async () => {
+            const [siteKeyMnemonic, siteKey] = await registerSite();
+            const [, userId] = await generateMnemonic();
+            const { body } = await frictionless(siteKey, {
+                userId,
+                ip: AGENT_IP,
+                userAgent: "IntegrationAgent/1.0",
+            });
+            expect(body.captchaType).not.toBe(CaptchaType.authenticated);
+            const result = await authenticatedVerify(siteKey, siteKeyMnemonic, userId, body.sessionId, { ip: AGENT_IP });
+            expect(result.verified).toBe(false);
+            expect(result.status).toBe("API.INCORRECT_CAPTCHA_TYPE");
+        });
+        it("refuses a token carrying no session id", async () => {
+            const [siteKeyMnemonic, siteKey] = await registerSite();
+            const [, userId] = await generateMnemonic();
+            const result = await authenticatedVerify(siteKey, siteKeyMnemonic, userId, undefined, { ip: AGENT_IP });
+            expect(result.verified).toBe(false);
+            expect(result.status).toBe("API.USER_NOT_VERIFIED_NO_SOLUTION");
+        });
+    });
+});
+//# sourceMappingURL=webBotAuthAuthenticated.integration.test.js.map

package/dist/tests/integration/webBotAuthAuthenticated.integration.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webBotAuthAuthenticated.integration.test.js","sourceRoot":"","sources":["../../../src/tests/integration/webBotAuthAuthenticated.integration.test.ts"],"names":[],"mappings":"AAqCA,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAGzC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AAChD,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAC7D,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAC5E,OAAO,EACN,SAAS,EACT,WAAW,EACX,cAAc,EACd,oBAAoB,EACpB,aAAa,EAGb,mBAAmB,EACnB,IAAI,EAEJ,sBAAsB,GACtB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACN,gBAAgB,EAEhB,eAAe,GACf,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EAAE,gBAAgB,EAA6B,MAAM,gBAAgB,CAAC;AAC7E,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC/E,OAAO,EAAE,eAAe,EAAE,MAAM,wCAAwC,CAAC;AACzE,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAExD,MAAM,MAAM,GAAG,8BAA8B,CAAC;AAE9C,MAAM,WAAW,GAAG,CAAC,EAAU,EAAgB,EAAE,CAAC,CAAC;IAClD,EAAE;IACF,OAAO,EAAE,IAAI;IACb,KAAK,EAAE,KAAK;IACZ,KAAK,EAAE,KAAK;IACZ,OAAO,EAAE,KAAK;IACd,YAAY,EAAE,KAAK;IACnB,QAAQ,EAAE,KAAK;IACf,QAAQ,EAAE,KAAK;IACf,WAAW,EAAE,KAAK;IAClB,SAAS,EAAE,KAAK;CAChB,CAAC,CAAC;AAEH,MAAM,QAAQ,GAAG,CAAC,KAAiB,EAAU,EAAE;IAC9C,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE;QACpC,GAAG,IAAI,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAW,CAAC,CAAC;IAChD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;AAClB,CAAC,CAAC;AACF,MAAM,WAAW,GAAG,CAAC,KAAiB,EAAU,EAAE,CACjD,QAAQ,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AAc5E,QAAQ,CAAC,+CAA+C,EAAE,GAAG,EAAE;IAC9D,IAAI,GAAwB,CAAC;IAC7B,IAAI,KAAY,CAAC;IACjB,IAAI,kBAAsC,CAAC;IAC3C,IAAI,cAAoC,CAAC;IACzC,IAAI,cAAoC,CAAC;IACzC,IAAI,MAA0B,CAAC;IAC/B,IAAI,UAAkC,CAAC;IACvC,IAAI,OAAe,CAAC;IACpB,IAAI,QAAgB,CAAC;IACrB,IAAI,SAAiB,CAAC;IAItB,IAAI,SAAiB,CAAC;IACtB,IAAI,UAAsB,CAAC;IAC3B,IAAI,SAAqB,CAAC;IAC1B,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,MAAM,eAAe,GAAG,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC;IAE9D,SAAS,CAAC,KAAK,IAAI,EAAE;QACpB,QAAQ,GAAG,MAAM,WAAW,EAAE,CAAC;QAC/B,MAAM,QAAQ,GAAG,cAAc,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;QACrD,OAAO,GAAG,GAAG,QAAQ,gBAAgB,QAAQ,EAAE,CAAC;QAChD,SAAS,GAAG,aAAa,QAAQ,EAAE,CAAC;QAEpC,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,gBAAgB,EAAE,CAAC;QAC9C,SAAS,GAAG,OAAO,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;QAK7C,MAAM,QAAQ,GAAG,MAAM,WAAW,EAAE,CAAC;QACrC,SAAS,GAAG,oBAAoB,QAAQ,EAAE,CAAC;QAC3C,UAAU,GAAG,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;YACtC,IAAI,GAAG,CAAC,GAAG,KAAK,gDAAgD,EAAE,CAAC;gBAClE,YAAY,IAAI,CAAC,CAAC;gBAClB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;oBAClB,cAAc,EAAE,kBAAkB;oBAGlC,eAAe,EAAE,WAAW;iBAC5B,CAAC,CAAC;gBACH,GAAG,CAAC,GAAG,CACN,IAAI,CAAC,SAAS,CAAC;oBACd,IAAI,EAAE;wBACL;4BACC,GAAG,EAAE,KAAK;4BACV,GAAG,EAAE,SAAS;4BACd,GAAG,EAAE,OAAO;4BACZ,GAAG,EAAE,MAAM;4BACX,CAAC,EAAE,WAAW,CAAC,SAAS,CAAC;yBACzB;qBACD;iBACD,CAAC,CACF,CAAC;gBACF,OAAO;YACR,CAAC;YACD,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;QAC1B,CAAC,CAAC,CAAC;QACH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CACnC,UAAU,EAAE,MAAM,CAAC,QAAQ,EAAE,WAAW,EAAE,OAAO,CAAC,CAClD,CAAC;QAEF,cAAc,GAAG,MAAM,IAAI,gBAAgB,CAAC,cAAc,CAAC;aACzD,gBAAgB,CAAC,KAAK,CAAC;aACvB,eAAe,CAAC;YAChB,0BAA0B,EAAE,MAAM;YAClC,0BAA0B,EAAE,MAAM;YAClC,qBAAqB,EAAE,cAAc;SACrC,CAAC;aACD,KAAK,EAAE,CAAC;QAKV,cAAc,GAAG,MAAM,IAAI,gBAAgB,CAAC,0BAA0B,CAAC;aACrE,gBAAgB,CAAC,IAAI,CAAC;aACtB,eAAe,CAAC,EAAE,UAAU,EAAE,oBAAoB,EAAE,CAAC;aACrD,KAAK,EAAE,CAAC;QAEV,MAAM,MAAM,GAAG,mBAAmB,CAAC,KAAK,CAAC;YACxC,kBAAkB,EAAE,aAAa;YACjC,IAAI,EAAE,OAAO;YACb,OAAO,EAAE;gBACR,MAAM,EACL,oFAAoF;aACrF;YACD,WAAW,EAAE;gBACZ,MAAM,EACL,oFAAoF;aACrF;YACD,QAAQ,EAAE;gBACT,WAAW,EAAE;oBACZ,IAAI,EAAE,aAAa,CAAC,IAAI,CAAC,QAAQ;oBACjC,QAAQ,EAAE,uBAAuB,cAAc,CAAC,OAAO,EAAE,IAAI,cAAc,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE;oBAClG,MAAM,EAAE,6BAA6B,IAAI,CAAC,GAAG,EAAE,EAAE;oBACjD,UAAU,EAAE,OAAO;iBACnB;aACD;YACD,eAAe,EAAE;gBAChB,GAAG,EAAE,YAAY,kBAAkB,CAAC,MAAM,CAAC,IAAI,cAAc,CAAC,OAAO,EAAE,IAAI,cAAc,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE;gBAC/G,QAAQ,EAAE,MAAM;gBAChB,SAAS,EAAE,WAAW,CAAC,EAAE,CAAC;aAC1B;YACD,KAAK,EAAE,EAAE,OAAO,EAAE,sBAAsB,EAAE,MAAM,EAAE,UAAU,EAAE;YAC9D,MAAM,EAAE,EAAE,OAAO,EAAE,GAAG,QAAQ,cAAc,EAAE,IAAI,EAAE,QAAQ,EAAE;SAC9D,CAAC,CAAC;QAEH,GAAG,GAAG,IAAI,mBAAmB,CAAC,MAAM,CAAC,CAAC;QACtC,MAAM,GAAG,CAAC,OAAO,EAAE,CAAC;QACpB,GAAG,CAAC,aAAa,GAAG;YACnB,UAAU,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC;YAC1B,WAAW,EAAE,GAAG,EAAE,CAAC,IAAI;YACvB,MAAM,EAAE,KAAK,EAAE,EAAU,EAAE,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC;SAC7C,CAAC;QAMF,OAAO,CAAC,GAAG,CAAC,yBAAyB,GAAG,IAAI,CAC3C,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EACvC,iCAAiC,CACjC,CAAC;QAEF,KAAK,GAAG,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC;QACvB,kBAAkB,GAAG,GAAG,CAAC,KAAK,EAAE,CAAC,yBAAyB,EAAE,CAAC;QAC7D,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC,6BAA6B,EAAE,CAAC,SAAS,EAAE,CAAC;QAC9D,MAAM,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;IACtD,CAAC,EAAE,OAAO,CAAC,CAAC;IAEZ,QAAQ,CAAC,KAAK,IAAI,EAAE;QACnB,OAAO,CAAC,GAAG,CAAC,yBAAyB,GAAG,eAAe,CAAC;QACxD,IAAI,UAAU,EAAE,CAAC;YAChB,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QAC1E,CAAC;QACD,IAAI,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACtE,CAAC;QACD,IAAI,CAAC;YACJ,MAAM,GAAG,EAAE,KAAK,EAAE,CAAC,KAAK,EAAE,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;QACV,IAAI,CAAC;YACJ,MAAM,cAAc,EAAE,IAAI,EAAE,CAAC;QAC9B,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;QACV,IAAI,CAAC;YACJ,MAAM,cAAc,EAAE,IAAI,EAAE,CAAC;QAC9B,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;IACX,CAAC,CAAC,CAAC;IAEH,UAAU,CAAC,KAAK,IAAI,EAAE;QACrB,MAAM,kBAAkB,CAAC,cAAc,EAAE,CAAC;QAI1C,eAAe,EAAE,CAAC,KAAK,EAAE,CAAC;IAC3B,CAAC,CAAC,CAAC;IAEH,MAAM,YAAY,GAAG,KAAK,IAA+B,EAAE;QAC1D,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,GAAG,MAAM,gBAAgB,EAAE,CAAC;QACrD,MAAM,KAAK,CAAC,iBAAiB,CAAC,eAAe,CAC5C,OAAO,EACP,IAAI,CAAC,YAAY,EACjB,oBAAoB,CAAC,KAAK,CAAC;YAC1B,WAAW,EAAE,WAAW,CAAC,YAAY;YACrC,OAAO,EAAE,CAAC,WAAW,EAAE,aAAa,CAAC;SACrC,CAAC,CACF,CAAC;QACF,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC5B,CAAC,CAAC;IAGF,MAAM,aAAa,GAAG,CAAC,gBAAgB,GAAG,GAAG,EAA0B,EAAE;QACxE,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAC9C,MAAM,OAAO,GAAG,OAAO,GAAG,gBAAgB,CAAC;QAC3C,MAAM,cAAc,GAAG,IAAI,SAAS,GAAG,CAAC;QACxC,MAAM,MAAM,GAAG,4CAA4C,OAAO,YAAY,OAAO,WAAW,MAAM,oCAAoC,CAAC;QAC3I,MAAM,IAAI,GAAG,kBAAkB,CAC9B,CAAC,YAAY,EAAE,iBAAiB,CAAC,EACjC,EAAE,SAAS,EAAE,cAAc,EAAE,EAC7B,MAAM,CACN,CAAC;QACF,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,UAAU,CAAC,CAAC;QAC3E,OAAO;YACN,iBAAiB,EAAE,cAAc;YACjC,iBAAiB,EAAE,QAAQ,MAAM,EAAE;YACnC,SAAS,EAAE,SAAS,QAAQ,CAAC,SAAS,CAAC,GAAG;SAC1C,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,YAAY,GAAG,KAAK,EACzB,OAAe,EACf,OAMC,EACyD,EAAE;QAC5D,MAAM,IAAI,GAAqD;YAC9D,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,OAAO;YACzB,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,WAAW,CAAC,EAAE,CAAC;YAClC,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,MAAM;YAChC,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,WAAW,CAAC,EAAE,CAAC;YACrC,GAAG,CAAC,OAAO,CAAC,eAAe,IAAI;gBAC9B,CAAC,SAAS,CAAC,eAAe,CAAC,EAAE,OAAO,CAAC,eAAe;aACpD,CAAC;SACF,CAAC;QACF,MAAM,QAAQ,GAAG,MAAM,SAAS,CAC/B,GAAG,OAAO,GAAG,cAAc,CAAC,+BAA+B,EAAE,EAC7D;YACC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACR,UAAU,EAAE,OAAO;gBACnB,cAAc,EAAE,kBAAkB;gBAClC,MAAM,EAAE,mBAAmB;gBAC3B,kBAAkB,EAAE,OAAO;gBAC3B,cAAc,EAAE,OAAO,CAAC,MAAM;gBAC9B,YAAY,EAAE,OAAO,CAAC,SAAS;gBAC/B,iBAAiB,EAAE,OAAO,CAAC,EAAE;gBAC7B,GAAG,OAAO,CAAC,YAAY;aACvB;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;SAC1B,CACD,CAAC;QACF,OAAO;YACN,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,IAAI,EAAE,QAAQ,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE;SAC1D,CAAC;IACH,CAAC,CAAC;IAGF,MAAM,mBAAmB,GAAG,KAAK,EAChC,OAAe,EACf,eAAuB,EACvB,MAAc,EACd,SAA6B,EAC7B,QAAmD,EAAE,EAC3B,EAAE;QAC5B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC;QACxC,MAAM,KAAK,GAAG,sBAAsB,CAAC;YACpC,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,OAAO;YACzB,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,MAAM;YACxB,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC,YAAY,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7D,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,SAAS;YAChC,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE;gBACtB,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,EAAE;gBACxB,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE;aACpB;SACD,CAAC,CAAC;QACH,MAAM,IAAI,GAAgC;YACzC,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,KAAK;YACxB,CAAC,SAAS,CAAC,aAAa,CAAC,EAAE,QAAQ,CAClC,OAAO,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,CACrD;YACD,GAAG,CAAC,KAAK,CAAC,EAAE,KAAK,SAAS,IAAI,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC;YAC3D,GAAG,CAAC,KAAK,CAAC,eAAe,KAAK,SAAS,IAAI;gBAC1C,CAAC,SAAS,CAAC,eAAe,CAAC,EAAE,KAAK,CAAC,eAAe;aAClD,CAAC;SACF,CAAC;QACF,MAAM,QAAQ,GAAG,MAAM,SAAS,CAC/B,GAAG,OAAO,GAAG,cAAc,CAAC,0BAA0B,EAAE,EACxD;YACC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACR,UAAU,EAAE,OAAO;gBACnB,cAAc,EAAE,kBAAkB;gBAClC,MAAM,EAAE,mBAAmB;gBAC3B,kBAAkB,EAAE,OAAO;gBAC3B,cAAc,EAAE,MAAM;aACtB;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;SAC1B,CACD,CAAC;QACF,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClC,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAmB,CAAC;IAClD,CAAC,CAAC;IAEF,MAAM,SAAS,GAAG,KAAK,EACtB,OAAe,EACf,MAA+B,EACf,EAAE;QAClB,MAAM,kBAAkB,CAAC,WAAW,CAAC;YACpC;gBACC,IAAI,EAAE,eAAe,CAAC,KAAK,CAAC;oBAC3B,IAAI,EAAE,gBAAgB,CAAC,KAAK;oBAC5B,QAAQ,EAAE,OAAO;oBACjB,GAAG,MAAM;iBACT,CAAC;aACF;SACD,CAAC,CAAC;IACJ,CAAC,CAAC;IAEF,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;QACnC,EAAE,CAAC,2FAA2F,EAAE,KAAK,IAAI,EAAE;YAC1G,MAAM,CAAC,EAAE,OAAO,CAAC,GAAG,MAAM,YAAY,EAAE,CAAC;YACzC,MAAM,CAAC,EAAE,MAAM,CAAC,GAAG,MAAM,gBAAgB,EAAE,CAAC;YAC5C,MAAM,SAAS,CAAC,OAAO,EAAE,EAAE,eAAe,EAAE,SAAS,EAAE,CAAC,CAAC;YAEzD,MAAM,MAAM,GAAG,YAAY,CAAC;YAC5B,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,YAAY,CAAC,OAAO,EAAE;gBACpD,MAAM;gBACN,EAAE,EAAE,aAAa;gBACjB,SAAS,EAAE,sBAAsB;gBACjC,YAAY,EAAE,aAAa,EAAE;aAC7B,CAAC,CAAC;YAEH,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACzB,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC;YACzD,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,UAAU,EAAE,CAAC;YAIpC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAInC,MAAM,CAAC,YAAY,CAAC,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;YAE7C,MAAM,OAAO,GAAG,MAAM,GAAG;iBACvB,KAAK,EAAE;iBACP,2BAA2B,CAAC,IAAI,CAAC,SAAmB,CAAC,CAAC;YACxD,MAAM,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC;YAC7D,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC5C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,sEAAsE,EAAE,KAAK,IAAI,EAAE;YACrF,MAAM,CAAC,EAAE,OAAO,CAAC,GAAG,MAAM,YAAY,EAAE,CAAC;YACzC,MAAM,CAAC,EAAE,MAAM,CAAC,GAAG,MAAM,gBAAgB,EAAE,CAAC;YAC5C,MAAM,SAAS,CAAC,OAAO,EAAE,EAAE,eAAe,EAAE,SAAS,EAAE,CAAC,CAAC;YAEzD,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,YAAY,CAAC,OAAO,EAAE;gBACpD,MAAM;gBACN,EAAE,EAAE,aAAa;gBACjB,SAAS,EAAE,sBAAsB;gBAEjC,YAAY,EAAE,aAAa,CAAC,CAAC,EAAE,CAAC;aAChC,CAAC,CAAC;YAEH,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACzB,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC;QAC9D,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,yGAAyG,EAAE,KAAK,IAAI,EAAE;YACxH,MAAM,CAAC,EAAE,OAAO,CAAC,GAAG,MAAM,YAAY,EAAE,CAAC;YACzC,MAAM,CAAC,EAAE,MAAM,CAAC,GAAG,MAAM,gBAAgB,EAAE,CAAC;YAC5C,MAAM,SAAS,CAAC,OAAO,EAAE,EAAE,eAAe,EAAE,SAAS,EAAE,CAAC,CAAC;YAEzD,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,YAAY,CAAC,OAAO,EAAE;gBACpD,MAAM;gBACN,EAAE,EAAE,aAAa;gBACjB,SAAS,EAAE,sBAAsB;gBACjC,YAAY,EAAE,EAAE,iBAAiB,EAAE,IAAI,SAAS,GAAG,EAAE;aACrD,CAAC,CAAC;YAEH,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACzB,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC;QAC9D,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,2EAA2E,EAAE,KAAK,IAAI,EAAE;YAC1F,MAAM,CAAC,EAAE,OAAO,CAAC,GAAG,MAAM,YAAY,EAAE,CAAC;YACzC,MAAM,CAAC,EAAE,MAAM,CAAC,GAAG,MAAM,gBAAgB,EAAE,CAAC;YAC5C,MAAM,SAAS,GAAG,uBAAuB,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1D,MAAM,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;YAExC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,YAAY,CAAC,OAAO,EAAE;gBACpD,MAAM;gBACN,EAAE,EAAE,cAAc;gBAClB,SAAS;aACT,CAAC,CAAC;YAEH,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACzB,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC;YAEzD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,aAAa,EAAE,CAAC;QACpC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;YAC9D,MAAM,CAAC,EAAE,OAAO,CAAC,GAAG,MAAM,YAAY,EAAE,CAAC;YACzC,MAAM,CAAC,EAAE,MAAM,CAAC,GAAG,MAAM,gBAAgB,EAAE,CAAC;YAC5C,MAAM,SAAS,GAAG,uBAAuB,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1D,MAAM,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;YACxC,MAAM,kBAAkB,CAAC,WAAW,CAAC;gBACpC;oBACC,IAAI,EAAE,eAAe,CAAC,KAAK,CAAC;wBAC3B,IAAI,EAAE,gBAAgB,CAAC,KAAK;wBAC5B,QAAQ,EAAE,OAAO;wBACjB,SAAS;qBACT,CAAC;iBACF;aACD,CAAC,CAAC;YAEH,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,YAAY,CAAC,OAAO,EAAE;gBACpD,MAAM;gBACN,EAAE,EAAE,cAAc;gBAClB,SAAS;aACT,CAAC,CAAC;YAEH,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC;YAE7D,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC9B,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;YACpE,MAAM,CAAC,EAAE,OAAO,CAAC,GAAG,MAAM,YAAY,EAAE,CAAC;YACzC,MAAM,CAAC,EAAE,MAAM,CAAC,GAAG,MAAM,gBAAgB,EAAE,CAAC;YAC5C,MAAM,SAAS,GAAG,wBAAwB,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3D,MAAM,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;YAE7D,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,YAAY,CAAC,OAAO,EAAE;gBACpD,MAAM;gBACN,EAAE,EAAE,cAAc;gBAClB,SAAS;aACT,CAAC,CAAC;YAEH,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACzB,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC;QAC9D,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,mEAAmE,EAAE,KAAK,IAAI,EAAE;YAClF,MAAM,CAAC,EAAE,OAAO,CAAC,GAAG,MAAM,YAAY,EAAE,CAAC;YACzC,MAAM,CAAC,EAAE,MAAM,CAAC,GAAG,MAAM,gBAAgB,EAAE,CAAC;YAC5C,MAAM,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,oBAAoB,EAAE,CAAC,CAAC;YAE9D,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,YAAY,CAAC,OAAO,EAAE;gBACpD,MAAM;gBACN,EAAE,EAAE,cAAc;gBAClB,SAAS,EAAE,sBAAsB;aACjC,CAAC,CAAC;YAEH,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACzB,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC;QAC9D,CAAC,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,8BAA8B,EAAE,GAAG,EAAE;QAC7C,MAAM,QAAQ,GAAG,cAAc,CAAC;QAEhC,MAAM,WAAW,GAAG,KAAK,EACxB,eAAwB,EAMtB,EAAE;YACJ,MAAM,CAAC,eAAe,EAAE,OAAO,CAAC,GAAG,MAAM,YAAY,EAAE,CAAC;YACxD,MAAM,CAAC,EAAE,MAAM,CAAC,GAAG,MAAM,gBAAgB,EAAE,CAAC;YAC5C,MAAM,SAAS,GAAG,uBAAuB,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1D,MAAM,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;YACxC,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,YAAY,CAAC,OAAO,EAAE;gBAC5C,MAAM;gBACN,EAAE,EAAE,QAAQ;gBACZ,SAAS;gBACT,eAAe;aACf,CAAC,CAAC;YACH,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC;YACzD,OAAO;gBACN,OAAO;gBACP,eAAe;gBACf,MAAM;gBACN,SAAS,EAAE,IAAI,CAAC,SAAmB;aACnC,CAAC;QACH,CAAC,CAAC;QAEF,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;YAChE,MAAM,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,EAAE,SAAS,EAAE,GACpD,MAAM,WAAW,EAAE,CAAC;YAErB,MAAM,KAAK,GAAG,MAAM,mBAAmB,CACtC,OAAO,EACP,eAAe,EACf,MAAM,EACN,SAAS,EACT,EAAE,EAAE,EAAE,QAAQ,EAAE,CAChB,CAAC;YACF,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC,CAAC;YAKvE,MAAM,MAAM,GAAG,MAAM,mBAAmB,CACvC,OAAO,EACP,eAAe,EACf,MAAM,EACN,SAAS,EACT,EAAE,EAAE,EAAE,QAAQ,EAAE,CAChB,CAAC;YACF,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACpC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;QACzD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;YACzD,MAAM,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,EAAE,SAAS,EAAE,GACpD,MAAM,WAAW,EAAE,CAAC;YAErB,MAAM,MAAM,GAAG,MAAM,mBAAmB,CACvC,OAAO,EACP,eAAe,EACf,MAAM,EACN,SAAS,CACT,CAAC;YACF,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACpC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;QAC7D,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,wEAAwE,EAAE,KAAK,IAAI,EAAE;YACvF,MAAM,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,EAAE,SAAS,EAAE,GACpD,MAAM,WAAW,EAAE,CAAC;YAErB,MAAM,MAAM,GAAG,MAAM,mBAAmB,CACvC,OAAO,EACP,eAAe,EACf,MAAM,EACN,SAAS,EACT,EAAE,EAAE,EAAE,eAAe,EAAE,CACvB,CAAC;YACF,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACpC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;QAC7D,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;YACtE,MAAM,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,EAAE,SAAS,EAAE,GACpD,MAAM,WAAW,EAAE,CAAC;YAIrB,MAAM,mBAAmB,CAAC,OAAO,EAAE,eAAe,EAAE,MAAM,EAAE,SAAS,EAAE;gBACtE,EAAE,EAAE,eAAe;aACnB,CAAC,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,mBAAmB,CACvC,OAAO,EACP,eAAe,EACf,MAAM,EACN,SAAS,EACT,EAAE,EAAE,EAAE,QAAQ,EAAE,CAChB,CAAC;YACF,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC,CAAC;QACzE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,uFAAuF,EAAE,KAAK,IAAI,EAAE;YACtG,MAAM,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,EAAE,SAAS,EAAE,GACpD,MAAM,WAAW,CAAC,kBAAkB,CAAC,CAAC;YAEvC,MAAM,MAAM,GAAG,MAAM,mBAAmB,CACvC,OAAO,EACP,eAAe,EACf,MAAM,EACN,SAAS,EACT,EAAE,EAAE,EAAE,QAAQ,EAAE,eAAe,EAAE,kBAAkB,EAAE,CACrD,CAAC;YACF,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACpC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;QAC3D,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;YACpE,MAAM,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,EAAE,SAAS,EAAE,GACpD,MAAM,WAAW,CAAC,kBAAkB,CAAC,CAAC;YAEvC,MAAM,MAAM,GAAG,MAAM,mBAAmB,CACvC,OAAO,EACP,eAAe,EACf,MAAM,EACN,SAAS,EACT,EAAE,EAAE,EAAE,QAAQ,EAAE,eAAe,EAAE,kBAAkB,EAAE,CACrD,CAAC;YACF,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC,CAAC;QACzE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;YAIvE,MAAM,CAAC,eAAe,EAAE,OAAO,CAAC,GAAG,MAAM,YAAY,EAAE,CAAC;YACxD,MAAM,CAAC,EAAE,MAAM,CAAC,GAAG,MAAM,gBAAgB,EAAE,CAAC;YAC5C,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,YAAY,CAAC,OAAO,EAAE;gBAC5C,MAAM;gBACN,EAAE,EAAE,QAAQ;gBACZ,SAAS,EAAE,sBAAsB;aACjC,CAAC,CAAC;YACH,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC;YAE7D,MAAM,MAAM,GAAG,MAAM,mBAAmB,CACvC,OAAO,EACP,eAAe,EACf,MAAM,EACN,IAAI,CAAC,SAAS,EACd,EAAE,EAAE,EAAE,QAAQ,EAAE,CAChB,CAAC;YACF,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACpC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;QAC1D,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;YACvD,MAAM,CAAC,eAAe,EAAE,OAAO,CAAC,GAAG,MAAM,YAAY,EAAE,CAAC;YACxD,MAAM,CAAC,EAAE,MAAM,CAAC,GAAG,MAAM,gBAAgB,EAAE,CAAC;YAE5C,MAAM,MAAM,GAAG,MAAM,mBAAmB,CACvC,OAAO,EACP,eAAe,EACf,MAAM,EACN,SAAS,EACT,EAAE,EAAE,EAAE,QAAQ,EAAE,CAChB,CAAC;YACF,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACpC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;QACjE,CAAC,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;AACJ,CAAC,CAAC,CAAC"}

package/dist/tests/unit/api/admin/apiRegisterSiteKeyEndpoint.unit.test.js

@@ -1,5 +1,5 @@
 import { ApiEndpointResponseStatus } from "@prosopo/api-route";
-import { CaptchaType, Tier } from "@prosopo/types";
+import { CaptchaType, Tier, puzzleMaxDifficultyDefault, } from "@prosopo/types";
 import { beforeEach, describe, expect, it, vi } from "vitest";
 import { ApiRegisterSiteKeyEndpoint } from "../../../../api/admin/apiRegisterSiteKeyEndpoint.js";
 describe("ApiRegisterSiteKeyEndpoint", () => {
@@ -43,6 +43,7 @@ describe("ApiRegisterSiteKeyEndpoint", () => {
             verifiedTimeout: 120000,
             solutionTimeout: 60000,
             puzzleTolerance: 15,
+            puzzleMaxDifficulty: puzzleMaxDifficultyDefault,
             disallowWebView: false,
         };
         await endpoint.processRequest({ siteKey, tier, settings }, mockLogger);

package/dist/tests/unit/api/admin/apiRegisterSiteKeyEndpoint.unit.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"apiRegisterSiteKeyEndpoint.unit.test.js","sourceRoot":"","sources":["../../../../../src/tests/unit/api/admin/apiRegisterSiteKeyEndpoint.unit.test.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAC;AAC/D,OAAO,EAAE,WAAW,EAAsB,IAAI,EAAE,MAAM,gBAAgB,CAAC;AACvE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9D,OAAO,EAAE,0BAA0B,EAAE,MAAM,qDAAqD,CAAC;AAEjG,QAAQ,CAAC,4BAA4B,EAAE,GAAG,EAAE;IAC3C,IAAI,QAAoC,CAAC;IACzC,IAAI,qBAEH,CAAC;IACF,IAAI,UAGH,CAAC;IAEF,UAAU,CAAC,GAAG,EAAE;QACf,EAAE,CAAC,aAAa,EAAE,CAAC;QACnB,qBAAqB,GAAG;YACvB,eAAe,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,SAAS,CAAC;SACrD,CAAC;QACF,UAAU,GAAG;YACZ,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE;YACb,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,cAAc,EAAE;SAC9B,CAAC;QACF,QAAQ,GAAG,IAAI,0BAA0B,CAAC,qBAA8B,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;QACnE,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,cAAc,CAC3C;YACC,OAAO,EAAE,kDAAkD;YAC3D,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,QAAQ,EAAE,EAAE,OAAO,EAAE,CAAC,WAAW,CAAC,EAA8B;SAChE,EACD,UAAmB,CACnB,CAAC;QAEF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,yBAAyB,CAAC,OAAO,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;QAC9D,MAAM,OAAO,GAAG,kDAAkD,CAAC;QACnE,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,CAAC;QAC/B,MAAM,QAAQ,GAAG;YAChB,OAAO,EAAE,CAAC,aAAa,CAAC;YACxB,WAAW,EAAE,WAAW,CAAC,GAAG;YAC5B,qBAAqB,EAAE;gBACtB,2BAA2B,EAAE,GAAG;gBAChC,0BAA0B,EAAE,CAAC;aAC7B;YACD,iBAAiB,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE;YAChD,aAAa,EAAE,MAAM;YACrB,cAAc,EAAE,GAAG;YACnB,cAAc,EAAE,CAAC;YACjB,cAAc,EAAE,CAAC;YACjB,eAAe,EAAE,MAAM;YACvB,eAAe,EAAE,KAAK;YACtB,eAAe,EAAE,EAAE;YACnB,eAAe,EAAE,KAAK;SACtB,CAAC;QAEF,MAAM,QAAQ,CAAC,cAAc,CAC5B,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,EAC3B,UAAmB,CACnB,CAAC;QAEF,MAAM,CAAC,qBAAqB,CAAC,eAAe,CAAC,CAAC,oBAAoB,CACjE,OAAO,EACP,IAAI,EACJ,QAAQ,CACR,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2BAA2B,EAAE,KAAK,IAAI,EAAE;QAC1C,MAAM,QAAQ,CAAC,cAAc,CAC5B;YACC,OAAO,EAAE,kDAAkD;YAC3D,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,QAAQ,EAAE,EAAE,OAAO,EAAE,CAAC,WAAW,CAAC,EAA8B;SAChE,EACD,UAAmB,CACnB,CAAC;QAEF,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,gBAAgB,EAAE,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wBAAwB,EAAE,GAAG,EAAE;QACjC,MAAM,MAAM,GAAG,QAAQ,CAAC,oBAAoB,EAAE,CAAC;QAC/C,MAAM,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC;IAC9B,CAAC,CAAC,CAAC;AACJ,CAAC,CAAC,CAAC"}
+{"version":3,"file":"apiRegisterSiteKeyEndpoint.unit.test.js","sourceRoot":"","sources":["../../../../../src/tests/unit/api/admin/apiRegisterSiteKeyEndpoint.unit.test.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAC;AAC/D,OAAO,EACN,WAAW,EAEX,IAAI,EACJ,0BAA0B,GAC1B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9D,OAAO,EAAE,0BAA0B,EAAE,MAAM,qDAAqD,CAAC;AAEjG,QAAQ,CAAC,4BAA4B,EAAE,GAAG,EAAE;IAC3C,IAAI,QAAoC,CAAC;IACzC,IAAI,qBAEH,CAAC;IACF,IAAI,UAGH,CAAC;IAEF,UAAU,CAAC,GAAG,EAAE;QACf,EAAE,CAAC,aAAa,EAAE,CAAC;QACnB,qBAAqB,GAAG;YACvB,eAAe,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,SAAS,CAAC;SACrD,CAAC;QACF,UAAU,GAAG;YACZ,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE;YACb,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,cAAc,EAAE;SAC9B,CAAC;QACF,QAAQ,GAAG,IAAI,0BAA0B,CAAC,qBAA8B,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;QACnE,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,cAAc,CAC3C;YACC,OAAO,EAAE,kDAAkD;YAC3D,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,QAAQ,EAAE,EAAE,OAAO,EAAE,CAAC,WAAW,CAAC,EAA8B;SAChE,EACD,UAAmB,CACnB,CAAC;QAEF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,yBAAyB,CAAC,OAAO,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;QAC9D,MAAM,OAAO,GAAG,kDAAkD,CAAC;QACnE,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,CAAC;QAC/B,MAAM,QAAQ,GAAG;YAChB,OAAO,EAAE,CAAC,aAAa,CAAC;YACxB,WAAW,EAAE,WAAW,CAAC,GAAG;YAC5B,qBAAqB,EAAE;gBACtB,2BAA2B,EAAE,GAAG;gBAChC,0BAA0B,EAAE,CAAC;aAC7B;YACD,iBAAiB,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE;YAChD,aAAa,EAAE,MAAM;YACrB,cAAc,EAAE,GAAG;YACnB,cAAc,EAAE,CAAC;YACjB,cAAc,EAAE,CAAC;YACjB,eAAe,EAAE,MAAM;YACvB,eAAe,EAAE,KAAK;YACtB,eAAe,EAAE,EAAE;YACnB,mBAAmB,EAAE,0BAA0B;YAC/C,eAAe,EAAE,KAAK;SACtB,CAAC;QAEF,MAAM,QAAQ,CAAC,cAAc,CAC5B,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,EAC3B,UAAmB,CACnB,CAAC;QAEF,MAAM,CAAC,qBAAqB,CAAC,eAAe,CAAC,CAAC,oBAAoB,CACjE,OAAO,EACP,IAAI,EACJ,QAAQ,CACR,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2BAA2B,EAAE,KAAK,IAAI,EAAE;QAC1C,MAAM,QAAQ,CAAC,cAAc,CAC5B;YACC,OAAO,EAAE,kDAAkD;YAC3D,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,QAAQ,EAAE,EAAE,OAAO,EAAE,CAAC,WAAW,CAAC,EAA8B;SAChE,EACD,UAAmB,CACnB,CAAC;QAEF,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,gBAAgB,EAAE,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wBAAwB,EAAE,GAAG,EAAE;QACjC,MAAM,MAAM,GAAG,QAAQ,CAAC,oBAAoB,EAAE,CAAC;QAC/C,MAAM,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC;IAC9B,CAAC,CAAC,CAAC;AACJ,CAAC,CAAC,CAAC"}

package/dist/tests/unit/signedAssetsResolver.unit.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=signedAssetsResolver.unit.test.d.ts.map

package/dist/tests/unit/signedAssetsResolver.unit.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"signedAssetsResolver.unit.test.d.ts","sourceRoot":"","sources":["../../../src/tests/unit/signedAssetsResolver.unit.test.ts"],"names":[],"mappings":""}

package/dist/tests/unit/signedAssetsResolver.unit.test.js

@@ -0,0 +1,77 @@
+import { createHash } from "node:crypto";
+import { afterEach, describe, expect, test } from "vitest";
+import { DEFAULT_ASSET_TOKEN_TTL_SECONDS, SignedAssetsResolver, getSignedAssetsResolver, } from "../../api/captcha/signedAssetsResolver.js";
+const KEY = "test-security-key";
+const NOW_MS = 1_700_000_000_000;
+const IMAGE = "https://prosopoimages.b-cdn.net/v5_dataset_flat/images/abc.webp";
+const resolver = (ttlSeconds, clientIp) => new SignedAssetsResolver({
+    securityKey: KEY,
+    now: () => NOW_MS,
+    ...(ttlSeconds !== undefined ? { ttlSeconds } : {}),
+    ...(clientIp !== undefined ? { clientIp } : {}),
+});
+const expected = (path, expires, ip = "") => createHash("sha256")
+    .update(`${KEY}${path}${expires}${ip}`)
+    .digest("base64")
+    .replace(/\+/g, "-")
+    .replace(/\//g, "_")
+    .replace(/=/g, "");
+describe("SignedAssetsResolver", () => {
+    test("signs the URL with a token and expiry", () => {
+        const url = new URL(resolver(300).resolveAsset(IMAGE).getURL());
+        const expires = NOW_MS / 1000 + 300;
+        expect(url.origin + url.pathname).toBe(IMAGE);
+        expect(url.searchParams.get("expires")).toBe(String(expires));
+        expect(url.searchParams.get("token")).toBe(expected("/v5_dataset_flat/images/abc.webp", expires));
+    });
+    test("preserves the original URI on the asset", () => {
+        expect(resolver().resolveAsset(IMAGE).URI).toBe(IMAGE);
+    });
+    test("defaults to a short TTL", () => {
+        const url = new URL(resolver().resolveAsset(IMAGE).getURL());
+        expect(url.searchParams.get("expires")).toBe(String(NOW_MS / 1000 + DEFAULT_ASSET_TOKEN_TTL_SECONDS));
+    });
+    test("binds the token to its exact path", () => {
+        const a = resolver().resolveAsset(IMAGE).getURL();
+        const b = resolver()
+            .resolveAsset("https://prosopoimages.b-cdn.net/v5_dataset_flat/images/def.webp")
+            .getURL();
+        const tokenOf = (u) => new URL(u).searchParams.get("token");
+        expect(tokenOf(a)).not.toBe(tokenOf(b));
+    });
+    test("includes the client IP when bound", () => {
+        const url = new URL(resolver(300, "203.0.113.9").resolveAsset(IMAGE).getURL());
+        const expires = NOW_MS / 1000 + 300;
+        expect(url.searchParams.get("token")).toBe(expected("/v5_dataset_flat/images/abc.webp", expires, "203.0.113.9"));
+    });
+    test("passes non-http URIs through untouched", () => {
+        const local = "/home/prosopo/images/abc.webp";
+        expect(resolver().resolveAsset(local).getURL()).toBe(local);
+    });
+    test("refuses to sign a URL that already has a query string", () => {
+        expect(() => resolver().resolveAsset(`${IMAGE}?w=100`)).toThrow(/already has a query string/);
+    });
+});
+describe("getSignedAssetsResolver", () => {
+    afterEach(() => {
+        process.env.PROSOPO_ASSET_TOKEN_KEY = undefined;
+        process.env.PROSOPO_ASSET_TOKEN_BIND_IP = undefined;
+    });
+    test("is undefined when no key is configured", () => {
+        process.env.PROSOPO_ASSET_TOKEN_KEY = "";
+        expect(getSignedAssetsResolver()).toBeUndefined();
+    });
+    test("is constructed when a key is configured", () => {
+        process.env.PROSOPO_ASSET_TOKEN_KEY = KEY;
+        expect(getSignedAssetsResolver()).toBeInstanceOf(SignedAssetsResolver);
+    });
+    test("ignores the client IP unless binding is enabled", () => {
+        process.env.PROSOPO_ASSET_TOKEN_KEY = KEY;
+        const unbound = getSignedAssetsResolver("203.0.113.9");
+        process.env.PROSOPO_ASSET_TOKEN_BIND_IP = "true";
+        const bound = getSignedAssetsResolver("203.0.113.9");
+        const tokenOf = (u) => new URL(u).searchParams.get("token");
+        expect(tokenOf(unbound?.resolveAsset(IMAGE).getURL() ?? "")).not.toBe(tokenOf(bound?.resolveAsset(IMAGE).getURL() ?? ""));
+    });
+});
+//# sourceMappingURL=signedAssetsResolver.unit.test.js.map

package/dist/tests/unit/signedAssetsResolver.unit.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signedAssetsResolver.unit.test.js","sourceRoot":"","sources":["../../../src/tests/unit/signedAssetsResolver.unit.test.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAC3D,OAAO,EACN,+BAA+B,EAC/B,oBAAoB,EACpB,uBAAuB,GACvB,MAAM,2CAA2C,CAAC;AAEnD,MAAM,GAAG,GAAG,mBAAmB,CAAC;AAChC,MAAM,MAAM,GAAG,iBAAiB,CAAC;AACjC,MAAM,KAAK,GAAG,iEAAiE,CAAC;AAEhF,MAAM,QAAQ,GAAG,CAChB,UAAmB,EACnB,QAAiB,EACM,EAAE,CACzB,IAAI,oBAAoB,CAAC;IACxB,WAAW,EAAE,GAAG;IAChB,GAAG,EAAE,GAAG,EAAE,CAAC,MAAM;IACjB,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACnD,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;CAC/C,CAAC,CAAC;AAGJ,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAE,OAAe,EAAE,EAAE,GAAG,EAAE,EAAU,EAAE,CACnE,UAAU,CAAC,QAAQ,CAAC;KAClB,MAAM,CAAC,GAAG,GAAG,GAAG,IAAI,GAAG,OAAO,GAAG,EAAE,EAAE,CAAC;KACtC,MAAM,CAAC,QAAQ,CAAC;KAChB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;KACnB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;KACnB,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;AAErB,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACrC,IAAI,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAClD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QAChE,MAAM,OAAO,GAAG,MAAM,GAAG,IAAI,GAAG,GAAG,CAAC;QAEpC,MAAM,CAAC,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9C,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;QAC9D,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CACzC,QAAQ,CAAC,kCAAkC,EAAE,OAAO,CAAC,CACrD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACpD,MAAM,CAAC,QAAQ,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,yBAAyB,EAAE,GAAG,EAAE;QACpC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QAC7D,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAC3C,MAAM,CAAC,MAAM,GAAG,IAAI,GAAG,+BAA+B,CAAC,CACvD,CAAC;IACH,CAAC,CAAC,CAAC;IAIH,IAAI,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC9C,MAAM,CAAC,GAAG,QAAQ,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC;QAClD,MAAM,CAAC,GAAG,QAAQ,EAAE;aAClB,YAAY,CACZ,iEAAiE,CACjE;aACA,MAAM,EAAE,CAAC;QACX,MAAM,OAAO,GAAG,CAAC,CAAS,EAAiB,EAAE,CAC5C,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACtC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC9C,MAAM,GAAG,GAAG,IAAI,GAAG,CAClB,QAAQ,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CACzD,CAAC;QACF,MAAM,OAAO,GAAG,MAAM,GAAG,IAAI,GAAG,GAAG,CAAC;QACpC,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CACzC,QAAQ,CAAC,kCAAkC,EAAE,OAAO,EAAE,aAAa,CAAC,CACpE,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,wCAAwC,EAAE,GAAG,EAAE;QACnD,MAAM,KAAK,GAAG,+BAA+B,CAAC;QAC9C,MAAM,CAAC,QAAQ,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IAIH,IAAI,CAAC,uDAAuD,EAAE,GAAG,EAAE;QAClE,MAAM,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,YAAY,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAC9D,4BAA4B,CAC5B,CAAC;IACH,CAAC,CAAC,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;IACxC,SAAS,CAAC,GAAG,EAAE;QACd,OAAO,CAAC,GAAG,CAAC,uBAAuB,GAAG,SAAS,CAAC;QAChD,OAAO,CAAC,GAAG,CAAC,2BAA2B,GAAG,SAAS,CAAC;IACrD,CAAC,CAAC,CAAC;IAIH,IAAI,CAAC,wCAAwC,EAAE,GAAG,EAAE;QACnD,OAAO,CAAC,GAAG,CAAC,uBAAuB,GAAG,EAAE,CAAC;QACzC,MAAM,CAAC,uBAAuB,EAAE,CAAC,CAAC,aAAa,EAAE,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACpD,OAAO,CAAC,GAAG,CAAC,uBAAuB,GAAG,GAAG,CAAC;QAC1C,MAAM,CAAC,uBAAuB,EAAE,CAAC,CAAC,cAAc,CAAC,oBAAoB,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,iDAAiD,EAAE,GAAG,EAAE;QAC5D,OAAO,CAAC,GAAG,CAAC,uBAAuB,GAAG,GAAG,CAAC;QAC1C,MAAM,OAAO,GAAG,uBAAuB,CAAC,aAAa,CAAC,CAAC;QACvD,OAAO,CAAC,GAAG,CAAC,2BAA2B,GAAG,MAAM,CAAC;QACjD,MAAM,KAAK,GAAG,uBAAuB,CAAC,aAAa,CAAC,CAAC;QAErD,MAAM,OAAO,GAAG,CAAC,CAAS,EAAiB,EAAE,CAC5C,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACtC,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,YAAY,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CACpE,OAAO,CAAC,KAAK,EAAE,YAAY,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAClD,CAAC;IACH,CAAC,CAAC,CAAC;AACJ,CAAC,CAAC,CAAC"}

package/dist/tests/unit/tasks/captchaManager.unit.test.js

@@ -1,6 +1,6 @@
 import { getLogger } from "@prosopo/logger";
 import { IpAddressType } from "@prosopo/types";
-import { CaptchaType, ResultReason, Tier, TrafficFilterAction, } from "@prosopo/types";
+import { CaptchaType, ResultReason, Tier, TrafficFilterAction, puzzleMaxDifficultyDefault, } from "@prosopo/types";
 import { AccessPolicyType, } from "@prosopo/user-access-policy";
 import { beforeEach, describe, expect, it, vi } from "vitest";
 import { CaptchaManager } from "../../../tasks/captchaManager.js";
@@ -23,6 +23,7 @@ const defaultUserSettings = {
     verifiedTimeout: 120000,
     solutionTimeout: 60000,
     puzzleTolerance: 15,
+    puzzleMaxDifficulty: puzzleMaxDifficultyDefault,
     disallowWebView: false,
 };
 describe("CaptchaManager", () => {