@shdan/submesh 0.1.0

package/dist/providers/google/plugin/play.js

@@ -0,0 +1,460 @@
+import { randomUUID } from "node:crypto";
+import { deprovisionGooglePlayPlan, provisionGooglePlayPlan } from "./play-plan-sync.js";
+import { verifyGooglePubSubWebhook } from "../security/pubsub-verification.js";
+import { verifyTrustedRelayWebhook } from "../../../security/plugin-webhook-verification.js";
+import { hashPayload } from "../../../plugins/hash-payload.js";
+const googleSubscriptionNotificationMap = {
+    1: {
+        eventType: "google-play.subscription.recovered",
+        lifecycle: "recovered",
+        status: "active",
+    },
+    2: {
+        eventType: "google-play.subscription.renewed",
+        lifecycle: "renewal",
+        status: "active",
+    },
+    3: {
+        eventType: "google-play.subscription.canceled",
+        lifecycle: "cancellation",
+        status: "active",
+    },
+    4: {
+        eventType: "google-play.subscription.purchased",
+        lifecycle: "purchase",
+        status: "active",
+    },
+    5: {
+        eventType: "google-play.subscription.on_hold",
+        lifecycle: "account_hold",
+        status: "billing_issue",
+    },
+    6: {
+        eventType: "google-play.subscription.in_grace_period",
+        lifecycle: "grace_period",
+        status: "grace_period",
+    },
+    7: {
+        eventType: "google-play.subscription.restarted",
+        lifecycle: "resubscription",
+        status: "active",
+    },
+    8: {
+        eventType: "google-play.subscription.price_change_confirmed",
+        lifecycle: "price_change_confirmation",
+        status: "active",
+    },
+    9: {
+        eventType: "google-play.subscription.deferred",
+        lifecycle: "deferred",
+        status: "active",
+    },
+    10: {
+        eventType: "google-play.subscription.paused",
+        lifecycle: "pause",
+        status: "paused",
+    },
+    11: {
+        eventType: "google-play.subscription.pause_schedule_changed",
+        lifecycle: "pause_schedule_changed",
+        status: "active",
+    },
+    12: {
+        eventType: "google-play.subscription.revoked",
+        lifecycle: "revoked",
+        status: "revoked",
+    },
+    13: {
+        eventType: "google-play.subscription.expired",
+        lifecycle: "expiration",
+        status: "expired",
+    },
+    17: {
+        eventType: "google-play.subscription.items_changed",
+        lifecycle: "items_changed",
+        status: "active",
+    },
+    18: {
+        eventType: "google-play.subscription.cancellation_scheduled",
+        lifecycle: "cancellation_scheduled",
+        status: "active",
+    },
+    19: {
+        eventType: "google-play.subscription.price_change_updated",
+        lifecycle: "price_change_updated",
+        status: "active",
+    },
+    20: {
+        eventType: "google-play.subscription.pending_purchase_canceled",
+        lifecycle: "pending_purchase_canceled",
+        status: "canceled",
+    },
+    22: {
+        eventType: "google-play.subscription.price_step_up_consent_updated",
+        lifecycle: "price_step_up_consent_updated",
+        status: "active",
+    },
+};
+const googleOneTimeNotificationMap = {
+    1: {
+        eventType: "google-play.one_time_product.purchased",
+        lifecycle: "purchase",
+        status: "active",
+    },
+    2: {
+        eventType: "google-play.one_time_product.canceled",
+        lifecycle: "pending_purchase_canceled",
+        status: "canceled",
+    },
+};
+function asObject(value, message) {
+    if (!value || typeof value !== "object" || Array.isArray(value)) {
+        throw new Error(message);
+    }
+    return value;
+}
+function getString(value) {
+    return typeof value === "string" && value.length > 0 ? value : undefined;
+}
+function getBoolean(value) {
+    return typeof value === "boolean" ? value : undefined;
+}
+function getArray(value) {
+    if (!Array.isArray(value)) {
+        return [];
+    }
+    return value.filter((entry) => Boolean(entry) && typeof entry === "object");
+}
+function isFutureTimestamp(value) {
+    if (!value) {
+        return false;
+    }
+    const time = Date.parse(value);
+    return Number.isFinite(time) && time > Date.now();
+}
+function normalizeGoogleSubscriptionState(state, details, currentPeriodEnd, isTrial) {
+    if (!state) {
+        return isTrial && details.status === "active" ? "trialing" : details.status;
+    }
+    switch (state) {
+        case "SUBSCRIPTION_STATE_ACTIVE":
+            return isTrial ? "trialing" : "active";
+        case "SUBSCRIPTION_STATE_IN_GRACE_PERIOD":
+            return "grace_period";
+        case "SUBSCRIPTION_STATE_ON_HOLD":
+            return "billing_issue";
+        case "SUBSCRIPTION_STATE_PAUSED":
+            return "paused";
+        case "SUBSCRIPTION_STATE_EXPIRED":
+            return "expired";
+        case "SUBSCRIPTION_STATE_PENDING":
+        case "SUBSCRIPTION_STATE_PENDING_PURCHASE_CANCELED":
+            return "canceled";
+        case "SUBSCRIPTION_STATE_CANCELED":
+            return isFutureTimestamp(currentPeriodEnd) ? "active" : "expired";
+        default:
+            return details.status;
+    }
+}
+function maybeJsonDecodeBase64(value) {
+    return asObject(JSON.parse(Buffer.from(value, "base64").toString("utf8")), "Google Play plugin expects base64 data to decode to an object.");
+}
+function parsePayload(body) {
+    const record = asObject(body, "Google Play plugin expects a JSON object payload.");
+    const message = record.message;
+    if (message && typeof message === "object" && !Array.isArray(message)) {
+        const messageRecord = message;
+        const data = getString(messageRecord.data);
+        if (data) {
+            return {
+                payload: maybeJsonDecodeBase64(data),
+                wrapper: record,
+            };
+        }
+    }
+    return {
+        payload: record,
+    };
+}
+function pickGoogleResource(payload) {
+    for (const candidateKey of [
+        "subscriptionPurchaseV2",
+        "subscription",
+        "purchase",
+        "resource",
+    ]) {
+        const candidate = payload[candidateKey];
+        if (candidate && typeof candidate === "object" && !Array.isArray(candidate)) {
+            return candidate;
+        }
+    }
+    return payload;
+}
+function pickGoogleLineItem(payload, resource) {
+    return (getArray(resource.lineItems)[0] ??
+        getArray(payload.lineItems)[0] ??
+        asObject(payload.lineItem ?? {}, "Google Play line item must be an object."));
+}
+function getExternalSubjectId(payload, resource) {
+    const accountIdentifiers = asObject(resource.externalAccountIdentifiers ?? payload.externalAccountIdentifiers ?? {}, "Google Play account identifiers must be an object.");
+    return (getString(payload.obfuscatedExternalAccountId) ??
+        getString(resource.obfuscatedExternalAccountId) ??
+        getString(accountIdentifiers.obfuscatedExternalAccountId) ??
+        getString(accountIdentifiers.obfuscatedExternalProfileId));
+}
+function buildMetadata(payload, wrapper, extra) {
+    return {
+        ...payload,
+        ...extra,
+        pubsub: wrapper
+            ? {
+                messageId: getString(asObject(wrapper.message ?? {}, "Google Play message must be an object.")
+                    .messageId),
+                publishTime: getString(asObject(wrapper.message ?? {}, "Google Play message must be an object.")
+                    .publishTime),
+                subscription: getString(wrapper.subscription),
+            }
+            : undefined,
+    };
+}
+function requireGoogleExternalProductId(input) {
+    const value = input.externalProductId ??
+        input.payloadProductId ??
+        input.resourceProductId ??
+        input.lineItemProductId ??
+        input.subscriptionId;
+    if (!value) {
+        throw new Error("Google Play payload is missing productId/subscriptionId. Provide product identifiers in normalized or RTDN payloads.");
+    }
+    return value;
+}
+function buildSubscriptionRecord(input) {
+    const resource = pickGoogleResource(input.payload);
+    const lineItem = pickGoogleLineItem(input.payload, resource);
+    const currentPeriodStart = getString(input.payload.startTime) ??
+        getString(resource.startTime) ??
+        getString(input.payload.purchaseTime) ??
+        null;
+    const currentPeriodEnd = getString(input.payload.expiryTime) ??
+        getString(resource.expiryTime) ??
+        getString(lineItem.expiryTime) ??
+        null;
+    const autoRenewingPlan = asObject(lineItem.autoRenewingPlan ?? input.payload.autoRenewingPlan ?? {}, "Google Play auto renewing plan must be an object.");
+    const autoRenewEnabled = getBoolean(autoRenewingPlan.autoRenewEnabled) ??
+        getBoolean(input.payload.autoRenewEnabled);
+    const offerPhase = asObject(lineItem.offerPhase ?? input.payload.offerPhase ?? {}, "Google Play offer phase must be an object.");
+    const isTrial = getBoolean(input.payload.isTrialPeriod) === true ||
+        Boolean(offerPhase.freeTrial && typeof offerPhase.freeTrial === "object");
+    const explicitStatus = getString(input.payload.status);
+    const subscriptionState = getString(input.payload.subscriptionState) ?? getString(resource.subscriptionState);
+    const externalProductId = requireGoogleExternalProductId({
+        externalProductId: input.externalProductId,
+        payloadProductId: getString(input.payload.productId),
+        resourceProductId: getString(resource.productId),
+        lineItemProductId: getString(lineItem.productId),
+        subscriptionId: getString(input.payload.subscriptionId),
+    });
+    const cancelAt = getString(input.payload.cancelAt) ??
+        ((autoRenewEnabled === false || input.lifecycle.lifecycle.includes("cancellation")) &&
+            isFutureTimestamp(currentPeriodEnd)
+            ? currentPeriodEnd
+            : null);
+    return {
+        pluginKey: "google-play",
+        sourceType: input.sourceType ?? "google-play",
+        sourceRef: input.sourceRef,
+        status: explicitStatus ??
+            normalizeGoogleSubscriptionState(subscriptionState, input.lifecycle, currentPeriodEnd, isTrial),
+        subjectId: getString(input.payload.subjectId) ??
+            getString(input.payload.userId) ??
+            getString(resource.subjectId) ??
+            getString(resource.userId),
+        externalSubjectId: getExternalSubjectId(input.payload, resource),
+        planCode: getString(input.payload.planCode) ?? getString(resource.planCode),
+        externalProductId,
+        currentPeriodStart,
+        currentPeriodEnd,
+        cancelAt,
+        metadata: buildMetadata(input.payload, input.wrapper, {
+            lifecycle: input.lifecycle.lifecycle,
+            notificationType: input.notificationType,
+            notificationName: typeof input.notificationType === "number"
+                ? input.lifecycle.eventType.split(".").at(-1)
+                : undefined,
+            linkedPurchaseToken: getString(input.payload.linkedPurchaseToken) ??
+                getString(resource.linkedPurchaseToken),
+            latestOrderId: getString(input.payload.latestOrderId) ?? getString(resource.latestOrderId),
+            subscriptionState,
+            autoRenewEnabled,
+            acknowledged: getString(resource.acknowledgementState) ??
+                getString(input.payload.acknowledgementState),
+        }),
+    };
+}
+function toNormalizedEvent(payload, wrapper) {
+    const sourceRef = String(payload.purchaseToken ?? payload.subscriptionId ?? payload.orderId ?? randomUUID());
+    const record = buildSubscriptionRecord({
+        payload,
+        wrapper,
+        lifecycle: {
+            eventType: getString(payload.eventType) ?? "google-play.subscription.updated",
+            lifecycle: "update",
+            status: getString(payload.status) ??
+                "active",
+        },
+        sourceRef,
+        externalProductId: getString(payload.productId) ?? getString(payload.subscriptionId),
+    });
+    return {
+        eventKey: getString(payload.eventKey) ??
+            getString(asObject(wrapper?.message ?? {}, "Google Play message must be an object.")
+                .messageId) ??
+            String(payload.orderId ?? payload.purchaseToken ?? hashPayload(payload)),
+        eventType: getString(payload.eventType) ?? "google-play.subscription.updated",
+        sourceRef,
+        records: [record],
+    };
+}
+function toSubscriptionNotificationEvent(payload, wrapper) {
+    const notification = asObject(payload.subscriptionNotification, "Google Play subscriptionNotification must be an object.");
+    const notificationType = Number(notification.notificationType ?? 4);
+    const lifecycle = googleSubscriptionNotificationMap[notificationType] ?? {
+        eventType: `google-play.subscription.notification.${notificationType}`,
+        lifecycle: "update",
+        status: "active",
+    };
+    const sourceRef = String(notification.purchaseToken ?? payload.eventTimeMillis ?? randomUUID());
+    return {
+        eventKey: getString(payload.eventKey) ??
+            getString(asObject(wrapper?.message ?? {}, "Google Play message must be an object.")
+                .messageId) ??
+            String(payload.eventTimeMillis ?? notification.purchaseToken ?? hashPayload(payload)),
+        eventType: lifecycle.eventType,
+        sourceRef,
+        records: [
+            buildSubscriptionRecord({
+                payload,
+                wrapper,
+                lifecycle,
+                notificationType,
+                sourceRef,
+                externalProductId: getString(notification.subscriptionId),
+            }),
+        ],
+    };
+}
+function toOneTimeProductEvent(payload, wrapper) {
+    const notification = asObject(payload.oneTimeProductNotification, "Google Play oneTimeProductNotification must be an object.");
+    const notificationType = Number(notification.notificationType ?? 1);
+    const lifecycle = googleOneTimeNotificationMap[notificationType] ?? {
+        eventType: `google-play.one_time_product.notification.${notificationType}`,
+        lifecycle: "update",
+        status: "active",
+    };
+    const sourceRef = String(notification.purchaseToken ?? payload.eventTimeMillis ?? randomUUID());
+    return {
+        eventKey: getString(payload.eventKey) ??
+            getString(asObject(wrapper?.message ?? {}, "Google Play message must be an object.")
+                .messageId) ??
+            String(payload.eventTimeMillis ?? notification.purchaseToken ?? hashPayload(payload)),
+        eventType: lifecycle.eventType,
+        sourceRef,
+        records: [
+            buildSubscriptionRecord({
+                payload: {
+                    ...payload,
+                    productId: notification.sku,
+                    purchaseToken: notification.purchaseToken,
+                },
+                wrapper,
+                lifecycle,
+                notificationType,
+                sourceType: "google-play-one-time",
+                sourceRef,
+                externalProductId: getString(notification.sku),
+            }),
+        ],
+    };
+}
+function toVoidedPurchaseEvent(payload, wrapper) {
+    const notification = asObject(payload.voidedPurchaseNotification, "Google Play voidedPurchaseNotification must be an object.");
+    const productType = Number(notification.productType ?? 1);
+    const refundType = Number(notification.refundType ?? 1);
+    const sourceRef = String(notification.purchaseToken ??
+        notification.orderId ??
+        payload.eventTimeMillis ??
+        randomUUID());
+    return {
+        eventKey: getString(payload.eventKey) ??
+            getString(asObject(wrapper?.message ?? {}, "Google Play message must be an object.")
+                .messageId) ??
+            String(notification.orderId ?? notification.purchaseToken ?? hashPayload(payload)),
+        eventType: "google-play.purchase.voided",
+        sourceRef,
+        records: [
+            buildSubscriptionRecord({
+                payload: {
+                    ...payload,
+                    purchaseToken: notification.purchaseToken,
+                    orderId: notification.orderId,
+                },
+                wrapper,
+                lifecycle: {
+                    eventType: "google-play.purchase.voided",
+                    lifecycle: refundType === 2 ? "partial_refund" : "refund",
+                    status: productType === 2 && refundType === 2 ? "active" : "refunded",
+                },
+                notificationType: productType,
+                sourceType: productType === 2 ? "google-play-one-time" : "google-play",
+                sourceRef,
+            }),
+        ],
+    };
+}
+function toTestNotificationEvent(payload, wrapper) {
+    return {
+        eventKey: getString(payload.eventKey) ??
+            getString(asObject(wrapper?.message ?? {}, "Google Play message must be an object.")
+                .messageId) ??
+            String(payload.eventTimeMillis ?? hashPayload(payload)),
+        eventType: "google-play.test_notification",
+        sourceRef: null,
+        records: [],
+    };
+}
+export const googlePlayPlugin = {
+    key: "google-play",
+    displayName: "Google Play Billing",
+    description: "Normalizes Google Play billing, RTDN lifecycle changes, one-time purchases, and verified Pub/Sub deliveries into the canonical model.",
+    capabilities: ["rtdn", "subscription-sync", "app-store", "one-time-purchase"],
+    async provisionPlan(input, context) {
+        return provisionGooglePlayPlan(input, context.config);
+    },
+    async deprovisionPlan(input, context) {
+        return deprovisionGooglePlayPlan(input, context.config, context.result);
+    },
+    async verifyWebhook(envelope, context) {
+        const googleVerification = await verifyGooglePubSubWebhook(envelope, context.config);
+        if (googleVerification) {
+            return googleVerification;
+        }
+        return verifyTrustedRelayWebhook(envelope, context.config);
+    },
+    async parseWebhook(envelope) {
+        const { payload, wrapper } = parsePayload(envelope.body);
+        if (payload.testNotification) {
+            return toTestNotificationEvent(payload, wrapper);
+        }
+        if (payload.subscriptionNotification) {
+            return toSubscriptionNotificationEvent(payload, wrapper);
+        }
+        if (payload.oneTimeProductNotification) {
+            return toOneTimeProductEvent(payload, wrapper);
+        }
+        if (payload.voidedPurchaseNotification) {
+            return toVoidedPurchaseEvent(payload, wrapper);
+        }
+        return toNormalizedEvent(payload, wrapper);
+    },
+};
+//# sourceMappingURL=play.js.map

package/dist/providers/google/plugin/play.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"play.js","sourceRoot":"","sources":["../../../../src/providers/google/plugin/play.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AASzC,OAAO,EAAE,yBAAyB,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AACzF,OAAO,EAAE,yBAAyB,EAAE,MAAM,oCAAoC,CAAC;AAC/E,OAAO,EAAE,yBAAyB,EAAE,MAAM,kDAAkD,CAAC;AAC7F,OAAO,EAAE,WAAW,EAAE,MAAM,kCAAkC,CAAC;AAQ/D,MAAM,iCAAiC,GAA2C;IAChF,CAAC,EAAE;QACD,SAAS,EAAE,oCAAoC;QAC/C,SAAS,EAAE,WAAW;QACtB,MAAM,EAAE,QAAQ;KACjB;IACD,CAAC,EAAE;QACD,SAAS,EAAE,kCAAkC;QAC7C,SAAS,EAAE,SAAS;QACpB,MAAM,EAAE,QAAQ;KACjB;IACD,CAAC,EAAE;QACD,SAAS,EAAE,mCAAmC;QAC9C,SAAS,EAAE,cAAc;QACzB,MAAM,EAAE,QAAQ;KACjB;IACD,CAAC,EAAE;QACD,SAAS,EAAE,oCAAoC;QAC/C,SAAS,EAAE,UAAU;QACrB,MAAM,EAAE,QAAQ;KACjB;IACD,CAAC,EAAE;QACD,SAAS,EAAE,kCAAkC;QAC7C,SAAS,EAAE,cAAc;QACzB,MAAM,EAAE,eAAe;KACxB;IACD,CAAC,EAAE;QACD,SAAS,EAAE,0CAA0C;QACrD,SAAS,EAAE,cAAc;QACzB,MAAM,EAAE,cAAc;KACvB;IACD,CAAC,EAAE;QACD,SAAS,EAAE,oCAAoC;QAC/C,SAAS,EAAE,gBAAgB;QAC3B,MAAM,EAAE,QAAQ;KACjB;IACD,CAAC,EAAE;QACD,SAAS,EAAE,iDAAiD;QAC5D,SAAS,EAAE,2BAA2B;QACtC,MAAM,EAAE,QAAQ;KACjB;IACD,CAAC,EAAE;QACD,SAAS,EAAE,mCAAmC;QAC9C,SAAS,EAAE,UAAU;QACrB,MAAM,EAAE,QAAQ;KACjB;IACD,EAAE,EAAE;QACF,SAAS,EAAE,iCAAiC;QAC5C,SAAS,EAAE,OAAO;QAClB,MAAM,EAAE,QAAQ;KACjB;IACD,EAAE,EAAE;QACF,SAAS,EAAE,iDAAiD;QAC5D,SAAS,EAAE,wBAAwB;QACnC,MAAM,EAAE,QAAQ;KACjB;IACD,EAAE,EAAE;QACF,SAAS,EAAE,kCAAkC;QAC7C,SAAS,EAAE,SAAS;QACpB,MAAM,EAAE,SAAS;KAClB;IACD,EAAE,EAAE;QACF,SAAS,EAAE,kCAAkC;QAC7C,SAAS,EAAE,YAAY;QACvB,MAAM,EAAE,SAAS;KAClB;IACD,EAAE,EAAE;QACF,SAAS,EAAE,wCAAwC;QACnD,SAAS,EAAE,eAAe;QAC1B,MAAM,EAAE,QAAQ;KACjB;IACD,EAAE,EAAE;QACF,SAAS,EAAE,iDAAiD;QAC5D,SAAS,EAAE,wBAAwB;QACnC,MAAM,EAAE,QAAQ;KACjB;IACD,EAAE,EAAE;QACF,SAAS,EAAE,+CAA+C;QAC1D,SAAS,EAAE,sBAAsB;QACjC,MAAM,EAAE,QAAQ;KACjB;IACD,EAAE,EAAE;QACF,SAAS,EAAE,oDAAoD;QAC/D,SAAS,EAAE,2BAA2B;QACtC,MAAM,EAAE,UAAU;KACnB;IACD,EAAE,EAAE;QACF,SAAS,EAAE,wDAAwD;QACnE,SAAS,EAAE,+BAA+B;QAC1C,MAAM,EAAE,QAAQ;KACjB;CACF,CAAC;AAEF,MAAM,4BAA4B,GAA2C;IAC3E,CAAC,EAAE;QACD,SAAS,EAAE,wCAAwC;QACnD,SAAS,EAAE,UAAU;QACrB,MAAM,EAAE,QAAQ;KACjB;IACD,CAAC,EAAE;QACD,SAAS,EAAE,uCAAuC;QAClD,SAAS,EAAE,2BAA2B;QACtC,MAAM,EAAE,UAAU;KACnB;CACF,CAAC;AAEF,SAAS,QAAQ,CAAC,KAAc,EAAE,OAAe;IAC/C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;IAC3B,CAAC;IAED,OAAO,KAAgC,CAAC;AAC1C,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3E,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,OAAO,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACxD,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,OAAO,KAAK,CAAC,MAAM,CACjB,CAAC,KAAK,EAAoC,EAAE,CAC1C,OAAO,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,KAAK,QAAQ,CAC9C,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAgC;IACzD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC/B,OAAO,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;AACpD,CAAC;AAED,SAAS,gCAAgC,CACvC,KAAyB,EACzB,OAA+B,EAC/B,gBAA+B,EAC/B,OAAgB;IAEhB,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IAC9E,CAAC;IAED,QAAQ,KAAK,EAAE,CAAC;QACd,KAAK,2BAA2B;YAC9B,OAAO,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC;QACzC,KAAK,oCAAoC;YACvC,OAAO,cAAc,CAAC;QACxB,KAAK,4BAA4B;YAC/B,OAAO,eAAe,CAAC;QACzB,KAAK,2BAA2B;YAC9B,OAAO,QAAQ,CAAC;QAClB,KAAK,4BAA4B;YAC/B,OAAO,SAAS,CAAC;QACnB,KAAK,4BAA4B,CAAC;QAClC,KAAK,8CAA8C;YACjD,OAAO,UAAU,CAAC;QACpB,KAAK,6BAA6B;YAChC,OAAO,iBAAiB,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;QACpE;YACE,OAAO,OAAO,CAAC,MAAM,CAAC;IAC1B,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAa;IAC1C,OAAO,QAAQ,CACb,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EACzD,gEAAgE,CACjE,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,IAAa;IAIjC,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,EAAE,mDAAmD,CAAC,CAAC;IACnF,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;IAE/B,IAAI,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACtE,MAAM,aAAa,GAAG,OAAkC,CAAC;QACzD,MAAM,IAAI,GAAG,SAAS,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;QAC3C,IAAI,IAAI,EAAE,CAAC;YACT,OAAO;gBACL,OAAO,EAAE,qBAAqB,CAAC,IAAI,CAAC;gBACpC,OAAO,EAAE,MAAM;aAChB,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO;QACL,OAAO,EAAE,MAAM;KAChB,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,OAAgC;IAC1D,KAAK,MAAM,YAAY,IAAI;QACzB,wBAAwB;QACxB,cAAc;QACd,UAAU;QACV,UAAU;KACX,EAAE,CAAC;QACF,MAAM,SAAS,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;QACxC,IAAI,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;YAC5E,OAAO,SAAoC,CAAC;QAC9C,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,kBAAkB,CACzB,OAAgC,EAChC,QAAiC;IAEjC,OAAO,CACL,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QAC/B,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QAC9B,QAAQ,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,EAAE,0CAA0C,CAAC,CAC7E,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAC3B,OAAgC,EAChC,QAAiC;IAEjC,MAAM,kBAAkB,GAAG,QAAQ,CACjC,QAAQ,CAAC,0BAA0B,IAAI,OAAO,CAAC,0BAA0B,IAAI,EAAE,EAC/E,oDAAoD,CACrD,CAAC;IAEF,OAAO,CACL,SAAS,CAAC,OAAO,CAAC,2BAA2B,CAAC;QAC9C,SAAS,CAAC,QAAQ,CAAC,2BAA2B,CAAC;QAC/C,SAAS,CAAC,kBAAkB,CAAC,2BAA2B,CAAC;QACzD,SAAS,CAAC,kBAAkB,CAAC,2BAA2B,CAAC,CAC1D,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CACpB,OAAgC,EAChC,OAA4C,EAC5C,KAA8B;IAE9B,OAAO;QACL,GAAG,OAAO;QACV,GAAG,KAAK;QACR,MAAM,EAAE,OAAO;YACb,CAAC,CAAC;gBACE,SAAS,EAAE,SAAS,CAClB,QAAQ,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,EAAE,wCAAwC,CAAC;qBACtE,SAAS,CACb;gBACD,WAAW,EAAE,SAAS,CACpB,QAAQ,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,EAAE,wCAAwC,CAAC;qBACtE,WAAW,CACf;gBACD,YAAY,EAAE,SAAS,CAAC,OAAO,CAAC,YAAY,CAAC;aAC9C;YACH,CAAC,CAAC,SAAS;KACd,CAAC;AACJ,CAAC;AAED,SAAS,8BAA8B,CAAC,KAMvC;IACC,MAAM,KAAK,GACT,KAAK,CAAC,iBAAiB;QACvB,KAAK,CAAC,gBAAgB;QACtB,KAAK,CAAC,iBAAiB;QACvB,KAAK,CAAC,iBAAiB;QACvB,KAAK,CAAC,cAAc,CAAC;IACvB,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CACb,sHAAsH,CACvH,CAAC;IACJ,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,uBAAuB,CAAC,KAQhC;IACC,MAAM,QAAQ,GAAG,kBAAkB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACnD,MAAM,QAAQ,GAAG,kBAAkB,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC7D,MAAM,kBAAkB,GACtB,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC;QAClC,SAAS,CAAC,QAAQ,CAAC,SAAS,CAAC;QAC7B,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC;QACrC,IAAI,CAAC;IACP,MAAM,gBAAgB,GACpB,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC;QACnC,SAAS,CAAC,QAAQ,CAAC,UAAU,CAAC;QAC9B,SAAS,CAAC,QAAQ,CAAC,UAAU,CAAC;QAC9B,IAAI,CAAC;IACP,MAAM,gBAAgB,GAAG,QAAQ,CAC/B,QAAQ,CAAC,gBAAgB,IAAI,KAAK,CAAC,OAAO,CAAC,gBAAgB,IAAI,EAAE,EACjE,mDAAmD,CACpD,CAAC;IACF,MAAM,gBAAgB,GACpB,UAAU,CAAC,gBAAgB,CAAC,gBAAgB,CAAC;QAC7C,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC7C,MAAM,UAAU,GAAG,QAAQ,CACzB,QAAQ,CAAC,UAAU,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,IAAI,EAAE,EACrD,4CAA4C,CAC7C,CAAC;IACF,MAAM,OAAO,GACX,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,KAAK,IAAI;QAChD,OAAO,CAAC,UAAU,CAAC,SAAS,IAAI,OAAO,UAAU,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC;IAC5E,MAAM,cAAc,GAAG,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAExC,CAAC;IACd,MAAM,iBAAiB,GACrB,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,iBAAiB,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC;IACtF,MAAM,iBAAiB,GAAG,8BAA8B,CAAC;QACvD,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;QAC1C,gBAAgB,EAAE,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC;QACpD,iBAAiB,EAAE,SAAS,CAAC,QAAQ,CAAC,SAAS,CAAC;QAChD,iBAAiB,EAAE,SAAS,CAAC,QAAQ,CAAC,SAAS,CAAC;QAChD,cAAc,EAAE,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC;KACxD,CAAC,CAAC;IACH,MAAM,QAAQ,GACZ,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;QACjC,CAAC,CAAC,gBAAgB,KAAK,KAAK,IAAI,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;YACnF,iBAAiB,CAAC,gBAAgB,CAAC;YACjC,CAAC,CAAC,gBAAgB;YAClB,CAAC,CAAC,IAAI,CAAC,CAAC;IAEZ,OAAO;QACL,SAAS,EAAE,aAAa;QACxB,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,aAAa;QAC7C,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,MAAM,EACJ,cAAc;YACd,gCAAgC,CAC9B,iBAAiB,EACjB,KAAK,CAAC,SAAS,EACf,gBAAgB,EAChB,OAAO,CACR;QACH,SAAS,EACP,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC;YAClC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAC/B,SAAS,CAAC,QAAQ,CAAC,SAAS,CAAC;YAC7B,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC;QAC5B,iBAAiB,EAAE,oBAAoB,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC;QAChE,QAAQ,EAAE,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAC3E,iBAAiB;QACjB,kBAAkB;QAClB,gBAAgB;QAChB,QAAQ;QACR,QAAQ,EAAE,aAAa,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE;YACpD,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,SAAS;YACpC,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;YACxC,gBAAgB,EACd,OAAO,KAAK,CAAC,gBAAgB,KAAK,QAAQ;gBACxC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;gBAC7C,CAAC,CAAC,SAAS;YACf,mBAAmB,EACjB,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,mBAAmB,CAAC;gBAC5C,SAAS,CAAC,QAAQ,CAAC,mBAAmB,CAAC;YACzC,aAAa,EACX,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,aAAa,CAAC;YAC7E,iBAAiB;YACjB,gBAAgB;YAChB,YAAY,EACV,SAAS,CAAC,QAAQ,CAAC,oBAAoB,CAAC;gBACxC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,oBAAoB,CAAC;SAChD,CAAC;KACH,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CACxB,OAAgC,EAChC,OAAiC;IAEjC,MAAM,SAAS,GAAG,MAAM,CACtB,OAAO,CAAC,aAAa,IAAI,OAAO,CAAC,cAAc,IAAI,OAAO,CAAC,OAAO,IAAI,UAAU,EAAE,CACnF,CAAC;IAEF,MAAM,MAAM,GAAG,uBAAuB,CAAC;QACrC,OAAO;QACP,OAAO;QACP,SAAS,EAAE;YACT,SAAS,EAAE,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,kCAAkC;YAC7E,SAAS,EAAE,QAAQ;YACnB,MAAM,EACH,SAAS,CAAC,OAAO,CAAC,MAAM,CAAsD;gBAC/E,QAAQ;SACX;QACD,SAAS;QACT,iBAAiB,EAAE,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,SAAS,CAAC,OAAO,CAAC,cAAc,CAAC;KACrF,CAAC,CAAC;IAEH,OAAO;QACL,QAAQ,EACN,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC;YAC3B,SAAS,CACP,QAAQ,CAAC,OAAO,EAAE,OAAO,IAAI,EAAE,EAAE,wCAAwC,CAAC;iBACvE,SAAS,CACb;YACD,MAAM,CAAC,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,aAAa,IAAI,WAAW,CAAC,OAAO,CAAC,CAAC;QAC1E,SAAS,EAAE,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,kCAAkC;QAC7E,SAAS;QACT,OAAO,EAAE,CAAC,MAAM,CAAC;KAClB,CAAC;AACJ,CAAC;AAED,SAAS,+BAA+B,CACtC,OAAgC,EAChC,OAAiC;IAEjC,MAAM,YAAY,GAAG,QAAQ,CAC3B,OAAO,CAAC,wBAAwB,EAChC,yDAAyD,CAC1D,CAAC;IACF,MAAM,gBAAgB,GAAG,MAAM,CAAC,YAAY,CAAC,gBAAgB,IAAI,CAAC,CAAC,CAAC;IACpE,MAAM,SAAS,GAAG,iCAAiC,CAAC,gBAAgB,CAAC,IAAI;QACvE,SAAS,EAAE,yCAAyC,gBAAgB,EAAE;QACtE,SAAS,EAAE,QAAQ;QACnB,MAAM,EAAE,QAAQ;KACjB,CAAC;IACF,MAAM,SAAS,GAAG,MAAM,CACtB,YAAY,CAAC,aAAa,IAAI,OAAO,CAAC,eAAe,IAAI,UAAU,EAAE,CACtE,CAAC;IAEF,OAAO;QACL,QAAQ,EACN,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC;YAC3B,SAAS,CACP,QAAQ,CAAC,OAAO,EAAE,OAAO,IAAI,EAAE,EAAE,wCAAwC,CAAC;iBACvE,SAAS,CACb;YACD,MAAM,CACJ,OAAO,CAAC,eAAe,IAAI,YAAY,CAAC,aAAa,IAAI,WAAW,CAAC,OAAO,CAAC,CAC9E;QACH,SAAS,EAAE,SAAS,CAAC,SAAS;QAC9B,SAAS;QACT,OAAO,EAAE;YACP,uBAAuB,CAAC;gBACtB,OAAO;gBACP,OAAO;gBACP,SAAS;gBACT,gBAAgB;gBAChB,SAAS;gBACT,iBAAiB,EAAE,SAAS,CAAC,YAAY,CAAC,cAAc,CAAC;aAC1D,CAAC;SACH;KACF,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB,CAC5B,OAAgC,EAChC,OAAiC;IAEjC,MAAM,YAAY,GAAG,QAAQ,CAC3B,OAAO,CAAC,0BAA0B,EAClC,2DAA2D,CAC5D,CAAC;IACF,MAAM,gBAAgB,GAAG,MAAM,CAAC,YAAY,CAAC,gBAAgB,IAAI,CAAC,CAAC,CAAC;IACpE,MAAM,SAAS,GAAG,4BAA4B,CAAC,gBAAgB,CAAC,IAAI;QAClE,SAAS,EAAE,6CAA6C,gBAAgB,EAAE;QAC1E,SAAS,EAAE,QAAQ;QACnB,MAAM,EAAE,QAAQ;KACjB,CAAC;IACF,MAAM,SAAS,GAAG,MAAM,CACtB,YAAY,CAAC,aAAa,IAAI,OAAO,CAAC,eAAe,IAAI,UAAU,EAAE,CACtE,CAAC;IAEF,OAAO;QACL,QAAQ,EACN,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC;YAC3B,SAAS,CACP,QAAQ,CAAC,OAAO,EAAE,OAAO,IAAI,EAAE,EAAE,wCAAwC,CAAC;iBACvE,SAAS,CACb;YACD,MAAM,CACJ,OAAO,CAAC,eAAe,IAAI,YAAY,CAAC,aAAa,IAAI,WAAW,CAAC,OAAO,CAAC,CAC9E;QACH,SAAS,EAAE,SAAS,CAAC,SAAS;QAC9B,SAAS;QACT,OAAO,EAAE;YACP,uBAAuB,CAAC;gBACtB,OAAO,EAAE;oBACP,GAAG,OAAO;oBACV,SAAS,EAAE,YAAY,CAAC,GAAG;oBAC3B,aAAa,EAAE,YAAY,CAAC,aAAa;iBAC1C;gBACD,OAAO;gBACP,SAAS;gBACT,gBAAgB;gBAChB,UAAU,EAAE,sBAAsB;gBAClC,SAAS;gBACT,iBAAiB,EAAE,SAAS,CAAC,YAAY,CAAC,GAAG,CAAC;aAC/C,CAAC;SACH;KACF,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB,CAC5B,OAAgC,EAChC,OAAiC;IAEjC,MAAM,YAAY,GAAG,QAAQ,CAC3B,OAAO,CAAC,0BAA0B,EAClC,2DAA2D,CAC5D,CAAC;IACF,MAAM,WAAW,GAAG,MAAM,CAAC,YAAY,CAAC,WAAW,IAAI,CAAC,CAAC,CAAC;IAC1D,MAAM,UAAU,GAAG,MAAM,CAAC,YAAY,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC;IACxD,MAAM,SAAS,GAAG,MAAM,CACtB,YAAY,CAAC,aAAa;QACxB,YAAY,CAAC,OAAO;QACpB,OAAO,CAAC,eAAe;QACvB,UAAU,EAAE,CACf,CAAC;IAEF,OAAO;QACL,QAAQ,EACN,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC;YAC3B,SAAS,CACP,QAAQ,CAAC,OAAO,EAAE,OAAO,IAAI,EAAE,EAAE,wCAAwC,CAAC;iBACvE,SAAS,CACb;YACD,MAAM,CAAC,YAAY,CAAC,OAAO,IAAI,YAAY,CAAC,aAAa,IAAI,WAAW,CAAC,OAAO,CAAC,CAAC;QACpF,SAAS,EAAE,6BAA6B;QACxC,SAAS;QACT,OAAO,EAAE;YACP,uBAAuB,CAAC;gBACtB,OAAO,EAAE;oBACP,GAAG,OAAO;oBACV,aAAa,EAAE,YAAY,CAAC,aAAa;oBACzC,OAAO,EAAE,YAAY,CAAC,OAAO;iBAC9B;gBACD,OAAO;gBACP,SAAS,EAAE;oBACT,SAAS,EAAE,6BAA6B;oBACxC,SAAS,EAAE,UAAU,KAAK,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,QAAQ;oBACzD,MAAM,EAAE,WAAW,KAAK,CAAC,IAAI,UAAU,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU;iBACtE;gBACD,gBAAgB,EAAE,WAAW;gBAC7B,UAAU,EAAE,WAAW,KAAK,CAAC,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,aAAa;gBACtE,SAAS;aACV,CAAC;SACH;KACF,CAAC;AACJ,CAAC;AAED,SAAS,uBAAuB,CAC9B,OAAgC,EAChC,OAAiC;IAEjC,OAAO;QACL,QAAQ,EACN,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC;YAC3B,SAAS,CACP,QAAQ,CAAC,OAAO,EAAE,OAAO,IAAI,EAAE,EAAE,wCAAwC,CAAC;iBACvE,SAAS,CACb;YACD,MAAM,CAAC,OAAO,CAAC,eAAe,IAAI,WAAW,CAAC,OAAO,CAAC,CAAC;QACzD,SAAS,EAAE,+BAA+B;QAC1C,SAAS,EAAE,IAAI;QACf,OAAO,EAAE,EAAE;KACZ,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,GAAG,EAAE,aAAa;IAClB,WAAW,EAAE,qBAAqB;IAClC,WAAW,EACT,uIAAuI;IACzI,YAAY,EAAE,CAAC,MAAM,EAAE,mBAAmB,EAAE,WAAW,EAAE,mBAAmB,CAAC;IAC7E,KAAK,CAAC,aAAa,CAAC,KAAK,EAAE,OAAO;QAChC,OAAO,uBAAuB,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IACxD,CAAC;IACD,KAAK,CAAC,eAAe,CAAC,KAAK,EAAE,OAAO;QAClC,OAAO,yBAAyB,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1E,CAAC;IACD,KAAK,CAAC,aAAa,CAAC,QAAQ,EAAE,OAAO;QACnC,MAAM,kBAAkB,GAAG,MAAM,yBAAyB,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QACrF,IAAI,kBAAkB,EAAE,CAAC;YACvB,OAAO,kBAAkB,CAAC;QAC5B,CAAC;QAED,OAAO,yBAAyB,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAC7D,CAAC;IACD,KAAK,CAAC,YAAY,CAAC,QAAQ;QACzB,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAEzD,IAAI,OAAO,CAAC,gBAAgB,EAAE,CAAC;YAC7B,OAAO,uBAAuB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACnD,CAAC;QAED,IAAI,OAAO,CAAC,wBAAwB,EAAE,CAAC;YACrC,OAAO,+BAA+B,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC3D,CAAC;QAED,IAAI,OAAO,CAAC,0BAA0B,EAAE,CAAC;YACvC,OAAO,qBAAqB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACjD,CAAC;QAED,IAAI,OAAO,CAAC,0BAA0B,EAAE,CAAC;YACvC,OAAO,qBAAqB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACjD,CAAC;QAED,OAAO,iBAAiB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC7C,CAAC;CACmD,CAAC"}

package/dist/providers/google/security/oauth.d.ts

@@ -0,0 +1,10 @@
+export interface GoogleServiceAccountConfig {
+    clientEmail: string;
+    privateKey: string;
+    privateKeyId?: string;
+    tokenUri?: string;
+    scope?: string;
+    allowCustomTokenUriHost?: boolean;
+}
+export declare function getGoogleAccessToken(serviceAccount: GoogleServiceAccountConfig): Promise<string>;
+//# sourceMappingURL=oauth.d.ts.map

package/dist/providers/google/security/oauth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.d.ts","sourceRoot":"","sources":["../../../../src/providers/google/security/oauth.ts"],"names":[],"mappings":"AAiGA,MAAM,WAAW,0BAA0B;IACzC,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,uBAAuB,CAAC,EAAE,OAAO,CAAC;CACnC;AAED,wBAAsB,oBAAoB,CACxC,cAAc,EAAE,0BAA0B,GACzC,OAAO,CAAC,MAAM,CAAC,CA+CjB"}

package/dist/providers/google/security/oauth.js

@@ -0,0 +1,116 @@
+import { createSign } from "node:crypto";
+const GOOGLE_OAUTH_SCOPE = "https://www.googleapis.com/auth/androidpublisher";
+const GOOGLE_TOKEN_URL = "https://oauth2.googleapis.com/token";
+const DEFAULT_TRUSTED_TOKEN_HOSTS = new Set(["oauth2.googleapis.com"]);
+const MAX_CACHE_SIZE = 100;
+const accessTokenCache = new Map();
+function getString(value) {
+    return typeof value === "string" && value.length > 0 ? value : undefined;
+}
+function getNumber(value) {
+    return typeof value === "number" && Number.isFinite(value) ? value : undefined;
+}
+function asObject(value) {
+    return value && typeof value === "object" && !Array.isArray(value)
+        ? value
+        : {};
+}
+function isExplicitlyEnabled(value) {
+    return value === true || value === "true";
+}
+function resolveTokenUrl(serviceAccount) {
+    const raw = serviceAccount.tokenUri ?? GOOGLE_TOKEN_URL;
+    let parsed;
+    try {
+        parsed = new URL(raw);
+    }
+    catch {
+        throw new Error(`Invalid Google OAuth token URL: ${raw}.`);
+    }
+    if (parsed.protocol !== "https:") {
+        throw new Error("Google OAuth token URL must use HTTPS.");
+    }
+    if (!DEFAULT_TRUSTED_TOKEN_HOSTS.has(parsed.hostname) &&
+        !isExplicitlyEnabled(serviceAccount.allowCustomTokenUriHost)) {
+        throw new Error(`Refusing Google OAuth token URL host "${parsed.hostname}". Set allowCustomTokenUriHost=true to override intentionally.`);
+    }
+    return parsed.toString();
+}
+function toBase64Url(value) {
+    return Buffer.from(value)
+        .toString("base64")
+        .replace(/\+/g, "-")
+        .replace(/\//g, "_")
+        .replace(/=+$/g, "");
+}
+function createServiceAccountJwt(input) {
+    const nowSeconds = Math.floor(Date.now() / 1000);
+    const header = {
+        alg: "RS256",
+        typ: "JWT",
+        kid: input.privateKeyId,
+    };
+    const payload = {
+        iss: input.clientEmail,
+        scope: input.scope ?? GOOGLE_OAUTH_SCOPE,
+        aud: input.tokenUri ?? GOOGLE_TOKEN_URL,
+        exp: nowSeconds + 3600,
+        iat: nowSeconds,
+    };
+    const encodedHeader = toBase64Url(JSON.stringify(header));
+    const encodedPayload = toBase64Url(JSON.stringify(payload));
+    const signingInput = `${encodedHeader}.${encodedPayload}`;
+    const signer = createSign("RSA-SHA256");
+    signer.update(signingInput);
+    signer.end();
+    const signature = signer
+        .sign(input.privateKey.replace(/\\n/g, "\n"))
+        .toString("base64")
+        .replace(/\+/g, "-")
+        .replace(/\//g, "_")
+        .replace(/=+$/g, "");
+    return `${signingInput}.${signature}`;
+}
+export async function getGoogleAccessToken(serviceAccount) {
+    const cacheKey = `${serviceAccount.clientEmail}:${serviceAccount.scope ?? GOOGLE_OAUTH_SCOPE}`;
+    const cached = accessTokenCache.get(cacheKey);
+    if (cached && cached.expiresAt > Date.now() + 60_000) {
+        return cached.accessToken;
+    }
+    const tokenUrl = resolveTokenUrl(serviceAccount);
+    const assertion = createServiceAccountJwt({
+        ...serviceAccount,
+        tokenUri: tokenUrl,
+    });
+    const response = await fetch(tokenUrl, {
+        method: "POST",
+        headers: {
+            "content-type": "application/x-www-form-urlencoded",
+        },
+        body: new URLSearchParams({
+            grant_type: "urn:ietf:params:oauth:grant-type:jwt-bearer",
+            assertion,
+        }),
+    });
+    if (!response.ok) {
+        throw new Error(`Google OAuth token exchange failed with status ${response.status}.`);
+    }
+    const body = asObject(await response.json());
+    const accessToken = getString(body.access_token);
+    const expiresIn = getNumber(body.expires_in) ?? 3600;
+    if (!accessToken) {
+        throw new Error("Google OAuth token response did not include access_token.");
+    }
+    accessTokenCache.set(cacheKey, {
+        accessToken,
+        expiresAt: Date.now() + expiresIn * 1000,
+    });
+    if (accessTokenCache.size > MAX_CACHE_SIZE) {
+        const firstKey = accessTokenCache.keys().next().value;
+        if (firstKey !== undefined) {
+            accessTokenCache.delete(firstKey);
+        }
+    }
+    return accessToken;
+}
+//# sourceMappingURL=oauth.js.map

package/dist/providers/google/security/oauth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.js","sourceRoot":"","sources":["../../../../src/providers/google/security/oauth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,MAAM,kBAAkB,GAAG,kDAAkD,CAAC;AAC9E,MAAM,gBAAgB,GAAG,qCAAqC,CAAC;AAC/D,MAAM,2BAA2B,GAAG,IAAI,GAAG,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC;AACvE,MAAM,cAAc,GAAG,GAAG,CAAC;AAE3B,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAsD,CAAC;AAEvF,SAAS,SAAS,CAAC,KAAc;IAC/B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3E,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACjF,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAChE,CAAC,CAAE,KAAiC;QACpC,CAAC,CAAC,EAAE,CAAC;AACT,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc;IACzC,OAAO,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,MAAM,CAAC;AAC5C,CAAC;AAED,SAAS,eAAe,CAAC,cAA0C;IACjE,MAAM,GAAG,GAAG,cAAc,CAAC,QAAQ,IAAI,gBAAgB,CAAC;IACxD,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,mCAAmC,GAAG,GAAG,CAAC,CAAC;IAC7D,CAAC;IAED,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,CAAC;IAED,IACE,CAAC,2BAA2B,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC;QACjD,CAAC,mBAAmB,CAAC,cAAc,CAAC,uBAAuB,CAAC,EAC5D,CAAC;QACD,MAAM,IAAI,KAAK,CACb,yCAAyC,MAAM,CAAC,QAAQ,gEAAgE,CACzH,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,CAAC,QAAQ,EAAE,CAAC;AAC3B,CAAC;AAED,SAAS,WAAW,CAAC,KAAa;IAChC,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;SACtB,QAAQ,CAAC,QAAQ,CAAC;SAClB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACzB,CAAC;AAED,SAAS,uBAAuB,CAAC,KAMhC;IACC,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IACjD,MAAM,MAAM,GAAG;QACb,GAAG,EAAE,OAAO;QACZ,GAAG,EAAE,KAAK;QACV,GAAG,EAAE,KAAK,CAAC,YAAY;KACxB,CAAC;IACF,MAAM,OAAO,GAAG;QACd,GAAG,EAAE,KAAK,CAAC,WAAW;QACtB,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,kBAAkB;QACxC,GAAG,EAAE,KAAK,CAAC,QAAQ,IAAI,gBAAgB;QACvC,GAAG,EAAE,UAAU,GAAG,IAAI;QACtB,GAAG,EAAE,UAAU;KAChB,CAAC;IACF,MAAM,aAAa,GAAG,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IAC1D,MAAM,cAAc,GAAG,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IAC5D,MAAM,YAAY,GAAG,GAAG,aAAa,IAAI,cAAc,EAAE,CAAC;IAC1D,MAAM,MAAM,GAAG,UAAU,CAAC,YAAY,CAAC,CAAC;IACxC,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IAC5B,MAAM,CAAC,GAAG,EAAE,CAAC;IAEb,MAAM,SAAS,GAAG,MAAM;SACrB,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;SAC5C,QAAQ,CAAC,QAAQ,CAAC;SAClB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAEvB,OAAO,GAAG,YAAY,IAAI,SAAS,EAAE,CAAC;AACxC,CAAC;AAWD,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,cAA0C;IAE1C,MAAM,QAAQ,GAAG,GAAG,cAAc,CAAC,WAAW,IAAI,cAAc,CAAC,KAAK,IAAI,kBAAkB,EAAE,CAAC;IAC/F,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC9C,IAAI,MAAM,IAAI,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC;QACrD,OAAO,MAAM,CAAC,WAAW,CAAC;IAC5B,CAAC;IAED,MAAM,QAAQ,GAAG,eAAe,CAAC,cAAc,CAAC,CAAC;IACjD,MAAM,SAAS,GAAG,uBAAuB,CAAC;QACxC,GAAG,cAAc;QACjB,QAAQ,EAAE,QAAQ;KACnB,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,QAAQ,EAAE;QACrC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,cAAc,EAAE,mCAAmC;SACpD;QACD,IAAI,EAAE,IAAI,eAAe,CAAC;YACxB,UAAU,EAAE,6CAA6C;YACzD,SAAS;SACV,CAAC;KACH,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,kDAAkD,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;IACxF,CAAC;IAED,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;IAC7C,MAAM,WAAW,GAAG,SAAS,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACjD,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC;IACrD,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;IAC/E,CAAC;IAED,gBAAgB,CAAC,GAAG,CAAC,QAAQ,EAAE;QAC7B,WAAW;QACX,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,GAAG,IAAI;KACzC,CAAC,CAAC;IAEH,IAAI,gBAAgB,CAAC,IAAI,GAAG,cAAc,EAAE,CAAC;QAC3C,MAAM,QAAQ,GAAG,gBAAgB,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC;QACtD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,gBAAgB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;IAED,OAAO,WAAW,CAAC;AACrB,CAAC"}

package/dist/providers/google/security/pubsub-verification.d.ts

@@ -0,0 +1,3 @@
+import type { PluginWebhookEnvelope, PluginWebhookVerification } from "@shdan/submesh-core";
+export declare function verifyGooglePubSubWebhook(envelope: PluginWebhookEnvelope, config: Record<string, unknown>): Promise<PluginWebhookVerification | undefined>;
+//# sourceMappingURL=pubsub-verification.d.ts.map

package/dist/providers/google/security/pubsub-verification.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pubsub-verification.d.ts","sourceRoot":"","sources":["../../../../src/providers/google/security/pubsub-verification.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,qBAAqB,EACrB,yBAAyB,EAC1B,MAAM,qBAAqB,CAAC;AA8L7B,wBAAsB,yBAAyB,CAC7C,QAAQ,EAAE,qBAAqB,EAC/B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,OAAO,CAAC,yBAAyB,GAAG,SAAS,CAAC,CAyFhD"}