npm - @shieldlabs-ai/node - Versions diffs - 0.0.0-stage → 1.0.0 - Mend

@shieldlabs-ai/node 0.0.0-stage → 1.0.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (14) hide show

package/dist/index.js.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"sources":["../src/constants.ts","../src/errors.ts","../src/normalize.ts","../src/version.ts","../src/runtime.ts","../src/webhooks.ts","../src/http.ts","../src/validation.ts","../src/history.ts","../src/management.ts","../src/risk.ts","../src/index.ts"],"names":["backend","DEFAULT_TIMEOUT_MS","DEFAULT_MAX_RETRIES","band"],"mappings":";;;;;AAGO,IAAM,QAAA,GAAW;AAMjB,IAAM,OAAA,GAAU,OAAO,MAAA,CAAO;AAAA,EACnC,GAAA,EAAK,KAAA;AAAA,EACL,mBAAA,EAAqB,qBAAA;AAAA,EACrB,WAAA,EAAa,aAAA;AAAA,EACb,kBAAA,EAAoB,oBAAA;AAAA,EACpB,uBAAA,EAAyB,yBAAA;AAAA,EACzB,0BAAA,EAA4B,4BAAA;AAAA,EAC5B,kBAAA,EAAoB,oBAAA;AAAA,EACpB,gBAAA,EAAkB,kBAAA;AAAA,EAClB,oBAAA,EAAsB,sBAAA;AAAA,EACtB,eAAA,EAAiB,iBAAA;AAAA,EACjB,iBAAA,EAAmB,mBAAA;AAAA,EACnB,GAAA,EAAK,KAAA;AAAA,EACL,aAAA,EAAe,eAAA;AAAA,EACf,KAAA,EAAO,OAAA;AAAA,EACP,aAAA,EAAe,eAAA;AAAA,EACf,MAAA,EAAQ,QAAA;AAAA,EACR,iBAAA,EAAmB,mBAAA;AAAA,EACnB,YAAA,EAAc;AAChB,CAAU;AAMH,IAAM,UAAA,GAAa,OAAO,MAAA,CAAO;AAAA,EACtC,OAAA,EAAS,OAAO,MAAA,CAAO,EAAE,KAAK,CAAA,EAAG,GAAA,EAAK,IAAI,CAAA;AAAA,EAC1C,UAAA,EAAY,OAAO,MAAA,CAAO,EAAE,KAAK,EAAA,EAAI,GAAA,EAAK,IAAI,CAAA;AAAA,EAC9C,SAAA,EAAW,OAAO,MAAA,CAAO,EAAE,KAAK,EAAA,EAAI,GAAA,EAAK,KAAK;AAChD,CAAU;AAEH,IAAM,eAAA,GAAuC,CAAC,SAAA,EAAW,YAAA,EAAc,WAAW,CAAA;AAElF,IAAM,YAAA,GAAsC;AAAA,EACjD,IAAA;AAAA,EACA,UAAA;AAAA,EACA,YAAA;AAAA,EACA,YAAA;AAAA,EACA,WAAA;AAAA,EACA,YAAA;AAAA,EACA;AACF,CAAA;AAKO,IAAM,SAAA,GAAgC;AAAA,EAC3C,KAAA;AAAA,EACA,eAAA;AAAA,EACA,mBAAA;AAAA,EACA,KAAA;AAAA,EACA,OAAA;AAAA,EACA,eAAA;AAAA,EACA,QAAA;AAAA,EACA,aAAA;AAAA,EACA,iBAAA;AAAA,EACA,mBAAA;AAAA,EACA,qBAAA;AAAA,EACA,oBAAA;AAAA,EACA,aAAA;AAAA,EACA,WAAA;AAAA,EACA,YAAA;AAAA,EACA,uBAAA;AAAA,EACA,qBAAA;AAAA,EACA,kBAAA;AAAA,EACA;AACF,CAAA;AAGO,IAAM,oBAAA,GAAuB,YAAA;AAE7B,IAAM,wBAAA,GAA2B,+BAAA;AACjC,IAAM,2BAAA,GAA8B,2BAAA;;;AC/DpC,IAAM,eAAA,GAAN,cAA8B,KAAA,CAAM;AAAA,EAChC,IAAA,GAAO,iBAAA;AAAA,EAEhB,WAAA,CAAY,SAAiB,OAAA,EAA+B;AAC1D,IAAA,KAAA,CAAM,OAAA,EAAS,SAAS,KAAA,KAAU,MAAA,GAAY,SAAY,EAAE,KAAA,EAAO,OAAA,CAAQ,KAAA,EAAO,CAAA;AAAA,EACpF;AACF;AAUA,IAAM,aAAA,GAA6B,EAAE,GAAA,EAAK,MAAM,IAAA,EAAK;AAG9C,IAAM,QAAA,GAAN,cAAuB,eAAA,CAAgB;AAAA,EACnC,IAAA,GAAO,UAAA;AAAA;AAAA,EAEP,MAAA;AAAA;AAAA,EAEA,IAAA;AAAA;AAAA,EAEA,OAAA;AAAA,EAET,WAAA,CAAY,SAAiB,OAAA,EAA0B;AACrD,IAAA,KAAA,CAAM,OAAA,EAAS,EAAE,KAAA,EAAO,OAAA,CAAQ,OAAO,CAAA;AACvC,IAAA,IAAA,CAAK,SAAS,OAAA,CAAQ,MAAA;AACtB,IAAA,IAAA,CAAK,IAAA,GAAO,OAAA,CAAQ,IAAA,KAAS,MAAA,GAAY,OAAO,OAAA,CAAQ,IAAA;AACxD,IAAA,IAAA,CAAK,OAAA,GAAU,QAAQ,OAAA,IAAW,aAAA;AAAA,EACpC;AACF;AAGO,IAAM,eAAA,GAAN,cAA8B,QAAA,CAAS;AAAA,EACnC,IAAA,GAAO,iBAAA;AAClB;AAGO,IAAM,mBAAA,GAAN,cAAkC,QAAA,CAAS;AAAA,EACvC,IAAA,GAAO,qBAAA;AAClB;AAMO,IAAM,kBAAA,GAAN,cAAiC,QAAA,CAAS;AAAA,EACtC,IAAA,GAAO,oBAAA;AAClB;AAGO,IAAM,aAAA,GAAN,cAA4B,QAAA,CAAS;AAAA,EACjC,IAAA,GAAO,eAAA;AAClB;AAGO,IAAM,cAAA,GAAN,cAA6B,QAAA,CAAS;AAAA,EAClC,IAAA,GAAO,gBAAA;AAAA;AAAA,EAEP,UAAA;AAAA,EAET,WAAA,CAAY,SAAiB,OAAA,EAAgE;AAC3F,IAAA,KAAA,CAAM,SAAS,OAAO,CAAA;AACtB,IAAA,IAAA,CAAK,aAAa,OAAA,CAAQ,UAAA;AAAA,EAC5B;AACF;AAGO,IAAM,WAAA,GAAN,cAA0B,QAAA,CAAS;AAAA,EAC/B,IAAA,GAAO,aAAA;AAClB;AAGO,IAAM,eAAA,GAAN,cAA8B,eAAA,CAAgB;AAAA,EAC1C,IAAA,GAAO,iBAAA;AAClB;AAGO,IAAM,YAAA,GAAN,cAA2B,eAAA,CAAgB;AAAA,EACvC,IAAA,GAAO,cAAA;AAClB;AAGO,IAAM,0BAAA,GAAN,cAAyC,eAAA,CAAgB;AAAA,EACrD,IAAA,GAAO,4BAAA;AAClB;AAGO,IAAM,iBAAA,GAAN,cAAgC,eAAA,CAAgB;AAAA,EAC5C,IAAA,GAAO,mBAAA;AAClB;AAGO,IAAM,eAAA,GAAN,cAA8B,eAAA,CAAgB;AAAA,EAC1C,IAAA,GAAO,iBAAA;AAClB;;;AChGO,SAAS,cAAc,KAAA,EAAqC;AACjE,EAAA,OAAO,OAAO,UAAU,QAAA,IAAY,KAAA,KAAU,QAAQ,CAAC,KAAA,CAAM,QAAQ,KAAK,CAAA;AAC5E;AAEA,SAAS,MAAA,CAAO,KAAiB,GAAA,EAAsB;AACrD,EAAA,OAAO,MAAA,CAAO,SAAA,CAAU,cAAA,CAAe,IAAA,CAAK,KAAK,GAAG,CAAA;AACtD;AAGA,SAAS,GAAA,CAAI,KAAiB,GAAA,EAAsB;AAClD,EAAA,OAAO,OAAO,GAAA,EAAK,GAAG,CAAA,GAAI,GAAA,CAAI,GAAG,CAAA,GAAI,MAAA;AACvC;AAGA,SAAS,WAAA,CAAY,KAAiB,GAAA,EAAqB;AACzD,EAAA,MAAM,KAAA,GAAQ,GAAA,CAAI,GAAA,EAAK,GAAG,CAAA;AAC1B,EAAA,OAAO,OAAO,KAAA,KAAU,QAAA,GAAW,KAAA,GAAQ,EAAA;AAC7C;AAGO,SAAS,SAAS,KAAA,EAAyB;AAChD,EAAA,IAAI,KAAA,KAAU,MAAA,IAAa,KAAA,KAAU,IAAA,EAAM,OAAO,KAAA;AAClD,EAAA,IAAI,OAAO,KAAA,KAAU,SAAA,EAAW,OAAO,KAAA;AACvC,EAAA,IAAI,OAAO,KAAA,KAAU,QAAA,EAAU,OAAO,KAAA,KAAU,CAAA;AAChD,EAAA,IAAI,OAAO,KAAA,KAAU,QAAA,EAAU,OAAO,MAAM,MAAA,GAAS,CAAA;AACrD,EAAA,IAAI,MAAM,OAAA,CAAQ,KAAK,CAAA,EAAG,OAAO,MAAM,MAAA,GAAS,CAAA;AAChD,EAAA,IAAI,OAAO,UAAU,QAAA,EAAU,OAAO,OAAO,IAAA,CAAK,KAAK,EAAE,MAAA,GAAS,CAAA;AAClE,EAAA,OAAO,IAAA;AACT;AAIA,IAAM,UAAA,uBAAiB,GAAA,CAAY;AAAA,EACjC,CAAA;AAAA,EAAM,EAAA;AAAA,EAAM,EAAA;AAAA,EAAM,EAAA;AAAA,EAAM,EAAA;AAAA,EAAM,EAAA;AAAA,EAAM,EAAA;AAAA,EAAM,EAAA;AAAA,EAAM,EAAA;AAAA,EAAM,EAAA;AAAA,EAAM,GAAA;AAAA,EAAM,GAAA;AAAA,EAAM,IAAA;AAAA,EAAQ,IAAA;AAAA,EAAQ,IAAA;AAAA,EACxF,IAAA;AAAA,EAAQ,IAAA;AAAA,EAAQ,IAAA;AAAA,EAAQ,IAAA;AAAA,EAAQ,IAAA;AAAA,EAAQ,IAAA;AAAA,EAAQ,IAAA;AAAA,EAAQ,IAAA;AAAA,EAAQ,IAAA;AAAA,EAAQ,IAAA;AAAA,EAAQ,IAAA;AAAA,EAAQ,IAAA;AAAA,EACxF,IAAA;AAAA,EAAQ;AACV,CAAC,CAAA;AAGM,SAAS,gBAAgB,IAAA,EAAsB;AACpD,EAAA,IAAI,KAAA,GAAQ,CAAA;AACZ,EAAA,IAAI,MAAM,IAAA,CAAK,MAAA;AACf,EAAA,OAAO,KAAA,GAAQ,OAAO,UAAA,CAAW,GAAA,CAAI,KAAK,UAAA,CAAW,KAAK,CAAC,CAAA,EAAG,KAAA,EAAA;AAC9D,EAAA,OAAO,GAAA,GAAM,SAAS,UAAA,CAAW,GAAA,CAAI,KAAK,UAAA,CAAW,GAAA,GAAM,CAAC,CAAC,CAAA,EAAG,GAAA,EAAA;AAChE,EAAA,OAAO,IAAA,CAAK,KAAA,CAAM,KAAA,EAAO,GAAG,CAAA;AAC9B;AAEA,SAAS,iBAAiB,IAAA,EAAsB;AAC9C,EAAA,IAAI,KAAA,GAAQ,CAAA;AACZ,EAAA,IAAI,MAAM,IAAA,CAAK,MAAA;AACf,EAAA,OAAO,KAAA,GAAQ,GAAA,IAAO,IAAA,CAAK,KAAK,MAAM,GAAA,EAAK,KAAA,EAAA;AAC3C,EAAA,OAAO,MAAM,KAAA,IAAS,IAAA,CAAK,GAAA,GAAM,CAAC,MAAM,GAAA,EAAK,GAAA,EAAA;AAC7C,EAAA,OAAO,IAAA,CAAK,KAAA,CAAM,KAAA,EAAO,GAAG,CAAA;AAC9B;AAMA,IAAM,WAAA,uBAAkB,GAAA,CAAoB;AAAA,EAC1C,CAAC,UAAU,KAAK,CAAA;AAAA,EAChB,CAAC,UAAU,KAAK,CAAA;AAAA,EAChB,CAAC,oBAAoB,eAAe,CAAA;AAAA,EACpC,CAAC,YAAY,OAAO,CAAA;AAAA,EACpB,CAAC,iBAAiB,eAAe,CAAA;AAAA,EACjC,CAAC,aAAa,QAAQ,CAAA;AAAA,EACtB,CAAC,uBAAuB,kBAAkB,CAAA;AAAA,EAC1C,CAAC,yCAAyC,sBAAsB,CAAA;AAAA,EAChE,CAAC,yBAAyB,iBAAiB,CAAA;AAAA,EAC3C,CAAC,8BAA8B,iBAAiB,CAAA;AAAA,EAChD,CAAC,uCAAkC,mBAAmB,CAAA;AAAA,EACtD,CAAC,qBAAqB,mBAAmB,CAAA;AAAA,EACzC,CAAC,sBAAsB,oBAAoB,CAAA;AAAA,EAC3C,CAAC,2DAA2D,yBAAyB,CAAA;AAAA,EACrF,CAAC,6CAA6C,cAAc;AAC9D,CAAC,CAAA;AAED,IAAM,YAAA,GAAuE;AAAA,EAC3E,CAAC,sBAAsB,oBAAoB,CAAA;AAAA,EAC3C,CAAC,eAAe,aAAa,CAAA;AAAA,EAC7B,CAAC,gBAAgB,cAAc,CAAA;AAAA,EAC/B,CAAC,iBAAiB,kBAAkB,CAAA;AAAA,EACpC,CAAC,gBAAgB,gBAAgB,CAAA;AAAA,EACjC,CAAC,uBAAuB,qBAAqB;AAC/C,CAAA;AAEA,IAAM,aAAA,GAAgB,kBAAA;AACtB,IAAM,eAAA,GAAkB,kBAAA;AAOjB,SAAS,aAAa,WAAA,EAA6B;AACxD,EAAA,IAAI,IAAA,GAAO,gBAAgB,WAAW,CAAA;AACtC,EAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,OAAA,CAAQ,GAAG,CAAA;AAC9B,EAAA,IAAI,KAAA,IAAS,GAAG,IAAA,GAAO,eAAA,CAAgB,KAAK,KAAA,CAAM,CAAA,EAAG,KAAK,CAAC,CAAA;AAC3D,EAAA,IAAI,GAAA,GAAM,EAAA;AACV,EAAA,IAAI,oBAAA,GAAuB,KAAA;AAC3B,EAAA,KAAA,MAAW,MAAM,IAAA,EAAM;AACrB,IAAA,IAAI,EAAA,KAAO,GAAA,IAAO,EAAA,KAAO,GAAA,IAAO,OAAO,GAAA,EAAK;AAC1C,MAAA,IAAI,CAAC,oBAAA,IAAwB,GAAA,CAAI,MAAA,GAAS,CAAA,EAAG;AAC3C,QAAA,GAAA,IAAO,GAAA;AACP,QAAA,oBAAA,GAAuB,IAAA;AAAA,MACzB;AAAA,IACF,CAAA,MAAA,IAAW,OAAO,QAAA,EAAK;AACrB,MAAA,GAAA,IAAO,OAAA;AACP,MAAA,oBAAA,GAAuB,KAAA;AAAA,IACzB,CAAA,MAAA,IAAW,eAAA,CAAgB,IAAA,CAAK,EAAE,CAAA,EAAG;AACnC,MAAA,GAAA,IAAO,GAAG,WAAA,EAAY;AACtB,MAAA,oBAAA,GAAuB,KAAA;AAAA,IACzB;AAAA,EACF;AACA,EAAA,MAAM,IAAA,GAAO,iBAAiB,GAAG,CAAA;AACjC,EAAA,OAAO,IAAA,KAAS,KAAK,SAAA,GAAY,IAAA;AACnC;AAGO,SAAS,WAAW,WAAA,EAA6B;AACtD,EAAA,MAAM,KAAA,GAAQ,WAAA,CAAY,GAAA,CAAI,WAAW,CAAA;AACzC,EAAA,IAAI,KAAA,KAAU,QAAW,OAAO,KAAA;AAChC,EAAA,KAAA,MAAW,CAAC,MAAA,EAAQ,IAAI,CAAA,IAAK,YAAA,EAAc;AACzC,IAAA,IAAI,WAAA,CAAY,UAAA,CAAW,MAAM,CAAA,EAAG,OAAO,IAAA;AAAA,EAC7C;AACA,EAAA,IAAI,WAAA,CAAY,UAAA,CAAW,aAAa,CAAA,EAAG;AACzC,IAAA,MAAM,KAAA,GAAQ,WAAA,CAAY,OAAA,CAAQ,GAAG,CAAA;AACrC,IAAA,MAAM,IAAA,GACJ,KAAA,IAAS,CAAA,IAAK,KAAA,GAAQ,CAAA,GAAI,WAAA,CAAY,MAAA,GAClC,eAAA,CAAgB,WAAA,CAAY,KAAA,CAAM,KAAA,GAAQ,CAAC,CAAC,CAAA,GAC5C,WAAA;AACN,IAAA,OAAO,aAAa,IAAI,CAAA;AAAA,EAC1B;AACA,EAAA,OAAO,aAAa,WAAW,CAAA;AACjC;AAOA,IAAM,YAAA,GACJ,6FAAA;AAGF,IAAM,OAAA,GACJ,yFAAA;AAEF,SAAS,WAAW,IAAA,EAAuB;AACzC,EAAA,OAAQ,OAAO,CAAA,KAAM,CAAA,IAAK,OAAO,GAAA,KAAQ,CAAA,IAAM,OAAO,GAAA,KAAQ,CAAA;AAChE;AAEA,SAAS,WAAA,CAAY,MAAc,KAAA,EAAuB;AACxD,EAAA,IAAI,UAAU,CAAA,EAAG,OAAO,UAAA,CAAW,IAAI,IAAI,EAAA,GAAK,EAAA;AAChD,EAAA,OAAO,CAAC,GAAG,CAAA,EAAG,CAAA,EAAG,EAAE,CAAA,CAAE,QAAA,CAAS,KAAK,CAAA,GAAI,EAAA,GAAK,EAAA;AAC9C;AAEA,SAAS,GAAA,CAAI,OAAe,KAAA,EAAuB;AACjD,EAAA,OAAO,MAAA,CAAO,KAAK,CAAA,CAAE,QAAA,CAAS,OAAO,GAAG,CAAA;AAC1C;AAMA,SAAS,SAAA,CAAU,OAAyB,aAAA,EAAsC;AAChF,EAAA,MAAM,CAAC,IAAA,EAAM,KAAA,EAAO,GAAA,EAAK,MAAM,MAAA,EAAQ,MAAM,CAAA,GAAI,CAAC,GAAG,CAAA,EAAG,CAAA,EAAG,CAAA,EAAG,CAAA,EAAG,CAAC,CAAA,CAAE,GAAA;AAAA,IAAI,CAAC,CAAA,KACvE,MAAA,CAAO,KAAA,CAAM,CAAC,CAAC;AAAA,GACjB;AACA,EAAA,IACE,OAAO,CAAA,IACP,KAAA,GAAQ,KACR,KAAA,GAAQ,EAAA,IACR,MAAM,CAAA,IACN,GAAA,GAAM,WAAA,CAAY,IAAA,EAAM,KAAK,CAAA,IAC7B,IAAA,GAAO,MACP,MAAA,GAAS,EAAA,IACT,SAAS,EAAA,EACT;AACA,IAAA,OAAO,IAAA;AAAA,EACT;AACA,EAAA,MAAM,KAAA,mBAAQ,IAAI,IAAA,CAAK,CAAC,CAAA;AACxB,EAAA,KAAA,CAAM,cAAA,CAAe,IAAA,EAAM,KAAA,GAAQ,CAAA,EAAG,GAAG,CAAA;AACzC,EAAA,KAAA,CAAM,WAAA,CAAY,IAAA,EAAM,MAAA,EAAQ,MAAA,EAAQ,CAAC,CAAA;AACzC,EAAA,MAAM,MAAM,IAAI,IAAA,CAAK,MAAM,OAAA,EAAQ,GAAI,gBAAgB,GAAM,CAAA;AAC7D,EAAA,MAAM,OAAA,GAAU,IAAI,cAAA,EAAe;AACnC,EAAA,IAAI,OAAA,GAAU,CAAA,IAAK,OAAA,GAAU,IAAA,EAAM,OAAO,IAAA;AAC1C,EAAA,MAAM,MAAA,GAAA,CAAU,KAAA,CAAM,CAAC,CAAA,IAAK,GAAA,EAAK,KAAA,CAAM,CAAA,EAAG,CAAC,CAAA,CAAE,MAAA,CAAO,CAAA,EAAG,GAAG,CAAA;AAC1D,EAAA,OACE,GAAG,GAAA,CAAI,OAAA,EAAS,CAAC,CAAC,CAAA,CAAA,EAAI,IAAI,GAAA,CAAI,WAAA,KAAgB,CAAA,EAAG,CAAC,CAAC,CAAA,CAAA,EAAI,GAAA,CAAI,IAAI,UAAA,EAAW,EAAG,CAAC,CAAC,CAAA,CAAA,EAC3E,GAAA,CAAI,GAAA,CAAI,aAAY,EAAG,CAAC,CAAC,CAAA,CAAA,EAAI,GAAA,CAAI,IAAI,aAAA,EAAc,EAAG,CAAC,CAAC,CAAA,CAAA,EAAI,IAAI,GAAA,CAAI,aAAA,IAAiB,CAAC,CAAC,IACvF,MAAM,CAAA,CAAA,CAAA;AAEd;AAGO,SAAS,iBAAiB,KAAA,EAA+B;AAC9D,EAAA,IAAI,OAAO,KAAA,KAAU,QAAA,EAAU,OAAO,IAAA;AACtC,EAAA,MAAM,IAAA,GAAO,gBAAgB,KAAK,CAAA;AAClC,EAAA,IAAI,IAAA,KAAS,IAAI,OAAO,IAAA;AACxB,EAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,KAAA,CAAM,YAAY,CAAA;AACrC,EAAA,OAAO,KAAA,GAAQ,SAAA,CAAU,KAAA,EAAO,CAAC,CAAA,GAAI,IAAA;AACvC;AAGO,SAAS,aAAa,KAAA,EAA+B;AAC1D,EAAA,IAAI,OAAO,KAAA,KAAU,QAAA,EAAU,OAAO,IAAA;AACtC,EAAA,MAAM,KAAA,GAAQ,KAAA,CAAM,KAAA,CAAM,OAAO,CAAA;AACjC,EAAA,IAAI,CAAC,OAAO,OAAO,IAAA;AACnB,EAAA,MAAM,IAAA,GAAO,KAAA,CAAM,CAAC,CAAA,IAAK,GAAA;AACzB,EAAA,IAAI,aAAA,GAAgB,CAAA;AACpB,EAAA,IAAI,SAAS,GAAA,EAAK;AAChB,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,UAAA,CAAW,GAAG,IAAI,CAAA,GAAI,EAAA;AACxC,IAAA,aAAA,GAAgB,IAAA,IAAQ,MAAA,CAAO,IAAA,CAAK,KAAA,CAAM,GAAG,CAAC,CAAC,CAAA,GAAI,EAAA,GAAK,MAAA,CAAO,IAAA,CAAK,KAAA,CAAM,CAAA,EAAG,CAAC,CAAC,CAAA,CAAA;AAAA,EACjF;AACA,EAAA,OAAO,SAAA,CAAU,OAAO,aAAa,CAAA;AACvC;AAQA,IAAM,oBAAA,GAAiE;AAAA,EACrE,GAAA,EAAK,QAAA;AAAA,EACL,aAAA,EAAe,kBAAA;AAAA,EACf,GAAA,EAAK,QAAA;AAAA,EACL,KAAA,EAAO,UAAA;AAAA,EACP,aAAA,EAAe,eAAA;AAAA,EACf,MAAA,EAAQ,WAAA;AAAA,EACR,WAAA,EAAa,gBAAA;AAAA,EACb,eAAA,EAAiB,oBAAA;AAAA,EACjB,iBAAA,EAAmB,sBAAA;AAAA,EACnB,mBAAA,EAAqB,eAAA;AAAA,EACrB,kBAAA,EAAoB,uBAAA;AAAA,EACpB,SAAA,EAAW,cAAA;AAAA,EACX,UAAA,EAAY,eAAA;AAAA,EACZ,qBAAA,EAAuB,0BAAA;AAAA,EACvB,mBAAA,EAAqB,gBAAA;AAAA,EACrB,gBAAA,EAAkB,qBAAA;AAAA,EAClB,gBAAA,EAAkB;AACpB,CAAA;AAGA,SAAS,YAAY,KAAA,EAAwB;AAC3C,EAAA,IAAI,OAAO,KAAA,KAAU,QAAA,EAAU,OAAO,EAAA;AACtC,EAAA,MAAM,EAAA,GAAK,gBAAgB,KAAK,CAAA;AAChC,EAAA,OAAO,EAAA,KAAO,YAAY,EAAA,GAAK,EAAA;AACjC;AAGA,SAAS,iBAAiB,KAAA,EAA+B;AACvD,EAAA,IAAI,UAAU,MAAA,IAAa,KAAA,KAAU,IAAA,IAAQ,KAAA,KAAU,IAAI,OAAO,IAAA;AAClE,EAAA,IAAI,OAAO,KAAA,KAAU,QAAA,EAAU,OAAO,KAAA;AACtC,EAAA,IAAI,OAAO,UAAU,QAAA,IAAY,OAAO,UAAU,SAAA,EAAW,OAAO,OAAO,KAAK,CAAA;AAChF,EAAA,OAAO,IAAA;AACT;AAGA,SAAS,cAAA,CAAe,KAAiB,GAAA,EAAqB;AAC5D,EAAA,IAAI,CAAC,MAAA,CAAO,GAAA,EAAK,GAAG,GAAG,OAAO,CAAA;AAC9B,EAAA,MAAM,KAAA,GAAQ,IAAI,GAAG,CAAA;AACrB,EAAA,OAAO,OAAO,KAAA,KAAU,QAAA,GAAW,KAAA,GAAQ,MAAA,CAAO,GAAA;AACpD;AAGA,SAAS,kBAAkB,KAAA,EAA2B;AACpD,EAAA,MAAM,IAAA,GAAO,QAAA,CAAS,KAAK,CAAA,GAAI,KAAA,GAAQ,IAAA;AACvC,EAAA,IAAI,OAAO,IAAA,KAAS,QAAA,EAAU,OAAO,EAAC;AACtC,EAAA,IAAI;AACF,IAAA,MAAM,MAAA,GAAkB,IAAA,CAAK,KAAA,CAAM,IAAI,CAAA;AACvC,IAAA,OAAO,KAAA,CAAM,OAAA,CAAQ,MAAM,CAAA,GAAI,SAAS,EAAC;AAAA,EAC3C,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,EAAC;AAAA,EACV;AACF;AAEA,SAAS,OAAO,KAAA,EAAwB;AACtC,EAAA,MAAM,GAAA,GAAM,aAAA,CAAc,KAAK,CAAA,GAAI,QAAQ,EAAC;AAC5C,EAAA,OAAO,EAAE,EAAA,EAAI,WAAA,CAAY,GAAA,CAAI,GAAA,EAAK,IAAI,CAAC,CAAA,EAAG,OAAA,EAAS,WAAA,CAAY,GAAA,EAAK,SAAS,CAAA,EAAE;AACjF;AAEA,IAAM,YAAA,GAAmD;AAAA,EACvD,SAAA;AAAA,EACA,iBAAA;AAAA,EACA,aAAA;AAAA,EACA,eAAA;AAAA,EACA,YAAA;AAAA,EACA,YAAA;AAAA,EACA,cAAA;AAAA,EACA,aAAA;AAAA,EACA;AACF,CAAA;AAGO,SAAS,eAAe,GAAA,EAAiC;AAC9D,EAAA,MAAM,UAAA,GAAa,eAAA,CAAgB,WAAA,CAAY,GAAA,EAAK,oBAAoB,CAAC,CAAA;AACzE,EAAA,IAAI,OAAA;AACJ,EAAA,IAAI,YAAA;AACJ,EAAA,IAAI,UAAA,KAAe,EAAA,IAAM,UAAA,KAAe,MAAA,EAAQ;AAC9C,IAAA,OAAA,GAAU,WAAA,CAAY,GAAA,CAAI,GAAA,EAAK,gBAAgB,CAAC,CAAA;AAChD,IAAA,YAAA,GAAe,WAAA,CAAY,KAAK,qBAAqB,CAAA;AAAA,EACvD,CAAA,MAAO;AACL,IAAA,OAAA,GAAU,WAAA,CAAY,GAAA,CAAI,GAAA,EAAK,YAAY,CAAC,CAAA;AAC5C,IAAA,YAAA,GAAe,WAAA,CAAY,KAAK,iBAAiB,CAAA;AAAA,EACnD;AACA,EAAA,MAAM,QAAA,GAAW,WAAA,CAAY,GAAA,CAAI,GAAA,EAAK,IAAI,CAAC,CAAA;AAE3C,EAAA,MAAM,UAAkC,EAAC;AACzC,EAAA,IAAI,YAAA,GAAe,KAAA;AACnB,EAAA,KAAA,MAAW,SAAS,iBAAA,CAAkB,GAAA,CAAI,GAAA,EAAK,eAAe,CAAC,CAAA,EAAG;AAChE,IAAA,IAAI,CAAC,aAAA,CAAc,KAAK,CAAA,EAAG;AAC3B,IAAA,MAAM,WAAA,GAAc,WAAA,CAAY,KAAA,EAAO,aAAa,CAAA;AACpD,IAAA,IAAI,WAAA,CAAY,UAAA,CAAW,kBAAa,CAAA,EAAG,YAAA,GAAe,IAAA;AAC1D,IAAA,MAAM,KAAA,GAAQ,GAAA,CAAI,KAAA,EAAO,OAAO,CAAA;AAChC,IAAA,IAAI,OAAO,UAAU,QAAA,IAAY,CAAC,OAAO,SAAA,CAAU,KAAK,CAAA,IAAK,KAAA,KAAU,CAAA,EAAG;AAC1E,IAAA,OAAA,CAAQ,IAAA,CAAK,EAAE,IAAA,EAAM,UAAA,CAAW,WAAW,CAAA,EAAG,MAAA,EAAQ,KAAA,EAAO,WAAA,EAAa,CAAA;AAAA,EAC5E;AAEA,EAAA,MAAM,SAAA,GAAY,QAAA,CAAS,GAAA,CAAI,GAAA,EAAK,eAAe,CAAC,CAAA;AACpD,EAAA,MAAM,QAAQ,EAAC;AACf,EAAA,KAAA,MAAW,OAAO,SAAA,EAAW;AAC3B,IAAA,IAAI,QAAQ,mBAAA,EAAqB;AAC/B,MAAA,KAAA,CAAM,GAAG,CAAA,GAAI,GAAA,CAAI,GAAA,EAAK,iBAAiB,CAAA,KAAM,mBAAA;AAAA,IAC/C,CAAA,MAAA,IAAW,QAAQ,aAAA,EAAe;AAChC,MAAA,KAAA,CAAM,GAAG,IACP,CAAC,SAAA,KAAc,gBAAiB,QAAA,KAAa,EAAA,IAAM,OAAA,KAAY,EAAA,IAAM,QAAA,KAAa,OAAA,CAAA;AAAA,IACtF,CAAA,MAAO;AACL,MAAA,KAAA,CAAM,GAAG,IAAI,QAAA,CAAS,GAAA,CAAI,KAAK,oBAAA,CAAqB,GAAG,CAAC,CAAC,CAAA;AAAA,IAC3D;AAAA,EACF;AAEA,EAAA,MAAM,UAAA,GAAa,GAAA,CAAI,GAAA,EAAK,aAAa,CAAA;AACzC,EAAA,IAAI,MAAA;AACJ,EAAA,IAAI,QAAA,CAAS,UAAU,CAAA,EAAG;AACxB,IAAA,MAAA,GAAS,OAAO,UAAA,KAAe,QAAA,GAAW,UAAA,GAAa,EAAA;AAAA,EACzD,CAAA,MAAO;AACL,IAAA,MAAA,GAAS,WAAA,CAAY,KAAK,QAAQ,CAAA;AAAA,EACpC;AAEA,EAAA,OAAO;AAAA,IACL,UAAA,EAAY,WAAA,CAAY,GAAA,EAAK,YAAY,CAAA;AAAA,IACzC,UAAA,EAAY,WAAA,CAAY,GAAA,EAAK,YAAY,CAAA;AAAA,IACzC,SAAA,EAAW,WAAA,CAAY,GAAA,EAAK,WAAW,CAAA;AAAA,IACvC,UAAA,EAAY,WAAA,CAAY,GAAA,EAAK,YAAY,CAAA;AAAA,IACzC,SAAA,EAAW,WAAA,CAAY,GAAA,EAAK,WAAW,CAAA;AAAA,IACvC,QAAA,EAAU,gBAAA,CAAiB,GAAA,CAAI,GAAA,EAAK,UAAU,CAAC,CAAA;AAAA,IAC/C,MAAA;AAAA,IACA,SAAA,EAAW,EAAE,EAAA,EAAI,QAAA,EAAU,SAAS,WAAA,CAAY,GAAA,EAAK,SAAS,CAAA,EAAE;AAAA,IAChE,QAAA,EAAU,EAAE,EAAA,EAAI,OAAA,EAAS,SAAS,YAAA,EAAa;AAAA,IAC/C,eAAA,EAAiB,WAAA,CAAY,GAAA,EAAK,iBAAiB,CAAA;AAAA,IACnD,EAAA,EAAI,WAAA,CAAY,GAAA,EAAK,IAAI,CAAA;AAAA,IACzB,OAAA,EAAS,WAAA,CAAY,GAAA,EAAK,SAAS,CAAA;AAAA,IACnC,WAAA,EAAa,WAAA,CAAY,GAAA,EAAK,aAAa,CAAA;AAAA,IAC3C,cAAA,EAAgB;AAAA,MACd,OAAA,EAAS,WAAA,CAAY,GAAA,EAAK,iBAAiB,CAAA;AAAA,MAC3C,eAAA,EAAiB,WAAA,CAAY,GAAA,EAAK,iBAAiB,CAAA;AAAA,MACnD,WAAA,EAAa,WAAA,CAAY,GAAA,EAAK,WAAW,CAAA;AAAA,MACzC,aAAA,EAAe,WAAA,CAAY,GAAA,EAAK,eAAe,CAAA;AAAA,MAC/C,UAAA,EAAY,WAAA,CAAY,GAAA,EAAK,YAAY,CAAA;AAAA,MACzC,UAAA,EAAY,WAAA,CAAY,GAAA,EAAK,YAAY,CAAA;AAAA,MACzC,YAAA,EAAc,WAAA,CAAY,GAAA,EAAK,cAAc,CAAA;AAAA,MAC7C,WAAA,EAAa,WAAA,CAAY,GAAA,EAAK,aAAa,CAAA;AAAA,MAC3C,QAAA,EAAU,WAAA,CAAY,GAAA,EAAK,UAAU;AAAA,KACvC;AAAA,IACA,UAAA,EAAY,cAAA,CAAe,GAAA,EAAK,OAAO,CAAA;AAAA,IACvC,OAAA;AAAA,IACA,eAAA,EAAiB,KAAA;AAAA,IACjB,WAAA,EAAa,gBAAA,CAAiB,GAAA,CAAI,GAAA,EAAK,YAAY,CAAC,CAAA;AAAA,IACpD,MAAA,EAAQ,SAAA;AAAA,IACR,GAAA,EAAK;AAAA,GACP;AACF;AAGO,SAAS,gBAAgB,IAAA,EAAkC;AAChE,EAAA,MAAM,QAAA,GAAW,GAAA,CAAI,IAAA,EAAM,iBAAiB,CAAA;AAC5C,EAAA,MAAM,UAAA,GAAa,aAAA,CAAc,QAAQ,CAAA,GAAI,WAAW,EAAC;AACzD,EAAA,MAAM,QAAQ,EAAC;AACf,EAAA,KAAA,MAAW,GAAA,IAAO,WAAW,KAAA,CAAM,GAAG,IAAI,QAAA,CAAS,GAAA,CAAI,UAAA,EAAY,GAAG,CAAC,CAAA;AAEvE,EAAA,MAAM,UAAA,GAAa,GAAA,CAAI,IAAA,EAAM,gBAAgB,CAAA;AAC7C,EAAA,MAAM,aAAA,GAAgB,aAAA,CAAc,UAAU,CAAA,GAAI,aAAa,EAAC;AAChE,EAAA,MAAM,UAAU,EAAC;AACjB,EAAA,KAAA,MAAW,OAAO,YAAA,EAAc,OAAA,CAAQ,GAAG,CAAA,GAAI,WAAA,CAAY,eAAe,GAAG,CAAA;AAE7E,EAAA,MAAM,UAAA,GAAa,GAAA,CAAI,IAAA,EAAM,SAAS,CAAA;AACtC,EAAA,MAAM,OAAA,GAAkC,KAAA,CAAM,OAAA,CAAQ,UAAU,CAAA,GAC5D,UAAA,CAAW,MAAA,CAAO,aAAa,CAAA,CAAE,GAAA,CAAI,CAAC,MAAA,KAAW;AAC/C,IAAA,MAAM,MAAA,GAAS,GAAA,CAAI,MAAA,EAAQ,QAAQ,CAAA;AACnC,IAAA,OAAO;AAAA,MACL,IAAA,EAAM,WAAA,CAAY,MAAA,EAAQ,MAAM,CAAA;AAAA,MAChC,MAAA,EAAQ,OAAO,MAAA,KAAW,QAAA,GAAW,MAAA,GAAS,CAAA;AAAA,MAC9C,WAAA,EAAa;AAAA,KACf;AAAA,EACF,CAAC,IACD,EAAC;AAEL,EAAA,OAAO;AAAA,IACL,UAAA,EAAY,WAAA,CAAY,IAAA,EAAM,YAAY,CAAA;AAAA,IAC1C,UAAA,EAAY,WAAA,CAAY,IAAA,EAAM,YAAY,CAAA;AAAA,IAC1C,SAAA,EAAW,WAAA,CAAY,IAAA,EAAM,WAAW,CAAA;AAAA,IACxC,UAAA,EAAY,WAAA,CAAY,IAAA,EAAM,YAAY,CAAA;AAAA,IAC1C,SAAA,EAAW,WAAA,CAAY,IAAA,EAAM,WAAW,CAAA;AAAA,IACxC,QAAA,EAAU,gBAAA,CAAiB,GAAA,CAAI,IAAA,EAAM,UAAU,CAAC,CAAA;AAAA,IAChD,MAAA,EAAQ,WAAA,CAAY,IAAA,EAAM,QAAQ,CAAA;AAAA,IAClC,SAAA,EAAW,MAAA,CAAO,GAAA,CAAI,IAAA,EAAM,WAAW,CAAC,CAAA;AAAA,IACxC,QAAA,EAAU,MAAA,CAAO,GAAA,CAAI,IAAA,EAAM,UAAU,CAAC,CAAA;AAAA,IACtC,eAAA,EAAiB,WAAA,CAAY,IAAA,EAAM,iBAAiB,CAAA;AAAA,IACpD,EAAA,EAAI,WAAA,CAAY,IAAA,EAAM,IAAI,CAAA;AAAA,IAC1B,OAAA,EAAS,WAAA,CAAY,IAAA,EAAM,SAAS,CAAA;AAAA,IACpC,WAAA,EAAa,WAAA,CAAY,IAAA,EAAM,aAAa,CAAA;AAAA,IAC5C,cAAA,EAAgB,OAAA;AAAA,IAChB,UAAA,EAAY,cAAA,CAAe,IAAA,EAAM,YAAY,CAAA;AAAA,IAC7C,OAAA;AAAA,IACA,eAAA,EAAiB,KAAA;AAAA,IACjB,WAAA,EAAa,YAAA,CAAa,GAAA,CAAI,IAAA,EAAM,aAAa,CAAC,CAAA;AAAA,IAClD,MAAA,EAAQ,SAAA;AAAA,IACR,GAAA,EAAK;AAAA,GACP;AACF;AAGO,SAAS,oBAAoB,IAAA,EAAiC;AACnE,EAAA,MAAM,MAAA,GAAS,GAAA,CAAI,IAAA,EAAM,QAAQ,CAAA;AACjC,EAAA,OAAO;AAAA,IACL,MAAA,EAAQ,WAAA,CAAY,IAAA,EAAM,QAAQ,CAAA;AAAA,IAClC,yBAAA,EAA2B,OAAO,MAAA,KAAW,QAAA,IAAY,OAAO,QAAA,CAAS,MAAM,IAAI,MAAA,GAAS,CAAA;AAAA,IAC5F,iBAAA,EAAmB,WAAA,CAAY,IAAA,EAAM,WAAW,CAAA;AAAA,IAChD,iBAAA,EAAmB,WAAA,CAAY,IAAA,EAAM,QAAQ,CAAA;AAAA,IAC7C,UAAA,EAAY,YAAA,CAAa,GAAA,CAAI,IAAA,EAAM,WAAW,CAAC,CAAA;AAAA,IAC/C,GAAA,EAAK;AAAA,GACP;AACF;;;ACtcO,IAAM,OAAA,GAAU;;;ACShB,SAAS,aAAA,GAA+B;AAC7C,EAAA,MAAM,CAAA,GAAI,UAAA;AACV,EAAA,IAAI,OAAO,EAAE,GAAA,EAAK,OAAA,KAAY,UAAU,OAAO,CAAA,IAAA,EAAO,CAAA,CAAE,GAAA,CAAI,OAAO,CAAA,CAAA;AACnE,EAAA,IAAI,OAAO,CAAA,CAAE,IAAA,EAAM,OAAA,EAAS,IAAA,KAAS,QAAA,EAAU,OAAO,CAAA,KAAA,EAAQ,CAAA,CAAE,IAAA,CAAK,OAAA,CAAQ,IAAI,CAAA,CAAA;AACjF,EAAA,IAAI,OAAO,CAAA,CAAE,WAAA,KAAgB,QAAA,EAAU,OAAO,cAAA;AAC9C,EAAA,IAAI,CAAA,CAAE,SAAA,EAAW,SAAA,KAAc,oBAAA,EAAsB,OAAO,SAAA;AAC5D,EAAA,IAAI,OAAO,CAAA,CAAE,OAAA,EAAS,QAAA,EAAU,IAAA,KAAS,QAAA,EAAU,OAAO,CAAA,KAAA,EAAQ,CAAA,CAAE,OAAA,CAAQ,QAAA,CAAS,IAAI,CAAA,CAAA;AACzF,EAAA,OAAO,IAAA;AACT;AAEA,IAAI,eAAA;AAGG,SAAS,SAAA,GAAoB;AAClC,EAAA,IAAI,oBAAoB,MAAA,EAAW;AACjC,IAAA,MAAM,UAAU,aAAA,EAAc;AAC9B,IAAA,eAAA,GAAkB,UACd,CAAA,gBAAA,EAAmB,OAAO,IAAI,OAAO,CAAA,CAAA,GACrC,mBAAmB,OAAO,CAAA,CAAA;AAAA,EAChC;AACA,EAAA,OAAO,eAAA;AACT;AAGO,SAAS,YAAY,MAAA,EAA8B;AACxD,EAAA,IAAI,MAAA,CAAO,MAAA,KAAW,MAAA,EAAW,OAAO,MAAA,CAAO,MAAA;AAC/C,EAAA,MAAM,KAAA,GAAQ,IAAI,KAAA,CAAM,4BAA4B,CAAA;AACpD,EAAA,KAAA,CAAM,IAAA,GAAO,YAAA;AACb,EAAA,OAAO,KAAA;AACT;AAEO,SAAS,eAAe,MAAA,EAAuC;AACpE,EAAA,IAAI,MAAA,EAAQ,OAAA,EAAS,MAAM,WAAA,CAAY,MAAM,CAAA;AAC/C;AAGA,IAAM,kBAAA,GAAqB,UAAA;AAGpB,SAAS,KAAA,CAAM,IAAY,MAAA,EAAqC;AACrE,EAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,OAAA,EAAS,MAAA,KAAW;AACtC,IAAA,IAAI,QAAQ,OAAA,EAAS;AACnB,MAAA,MAAA,CAAO,WAAA,CAAY,MAAM,CAAC,CAAA;AAC1B,MAAA;AAAA,IACF;AACA,IAAA,IAAI,KAAA;AACJ,IAAA,MAAM,UAAU,MAAY;AAC1B,MAAA,YAAA,CAAa,KAAK,CAAA;AAClB,MAAA,MAAA,CAAO,WAAA,CAAY,MAAqB,CAAC,CAAA;AAAA,IAC3C,CAAA;AAEA,IAAA,MAAM,IAAA,GAAO,CAAC,IAAA,KAAuB;AACnC,MAAA,KAAA,GAAQ,UAAA;AAAA,QACN,MAAM;AACJ,UAAA,IAAI,OAAO,kBAAA,EAAoB;AAC7B,YAAA,IAAA,CAAK,OAAO,kBAAkB,CAAA;AAC9B,YAAA;AAAA,UACF;AACA,UAAA,MAAA,EAAQ,mBAAA,CAAoB,SAAS,OAAO,CAAA;AAC5C,UAAA,OAAA,EAAQ;AAAA,QACV,CAAA;AAAA,QACA,IAAA,CAAK,GAAA,CAAI,IAAA,EAAM,kBAAkB;AAAA,OACnC;AAAA,IACF,CAAA;AACA,IAAA,IAAA,CAAK,EAAE,CAAA;AACP,IAAA,MAAA,EAAQ,iBAAiB,OAAA,EAAS,OAAA,EAAS,EAAE,IAAA,EAAM,MAAM,CAAA;AAAA,EAC3D,CAAC,CAAA;AACH;AAEA,IAAM,MAAA,uBAAa,GAAA,EAAY;AAC/B,IAAM,YAAA,GAAe,EAAA;AAGd,SAAS,QAAA,CAAS,KAAa,OAAA,EAAuB;AAC3D,EAAA,IAAI,OAAO,GAAA,CAAI,GAAG,CAAA,IAAK,MAAA,CAAO,QAAQ,YAAA,EAAc;AACpD,EAAA,MAAA,CAAO,IAAI,GAAG,CAAA;AACd,EAAA,OAAA,CAAQ,IAAA,CAAK,CAAA,aAAA,EAAgB,OAAO,CAAA,CAAE,CAAA;AACxC;AAMO,SAAS,iBAAA,CAAkB,QAAgB,GAAA,EAAmB;AACnE,EAAA,MAAM,CAAA,GAAI,UAAA;AACV,EAAA,IAAI,CAAA,CAAE,MAAA,KAAW,MAAA,IAAa,CAAA,CAAE,aAAa,MAAA,EAAW;AACtD,IAAA,QAAA;AAAA,MACE,gBAAgB,MAAM,CAAA,CAAA;AAAA,MACtB,CAAA,EAAG,MAAM,CAAA,sCAAA,EAAyC,GAAG,CAAA,gIAAA;AAAA,KACvD;AAAA,EACF;AACF;;;ACpCA,IAAM,gBAAA,GAAmB,SAAA;AACzB,IAAM,UAAA,GAAa,mBAAA;AACnB,IAAM,QAAA,GACJ,0KAAA;AAEF,IAAM,OAAA,GAAU,IAAI,WAAA,EAAY;AAGzB,SAAS,qBAAqB,MAAA,EAAgC;AACnE,EAAA,IAAI,KAAA,GAAQ,MAAA;AACZ,EAAA,IAAI,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA,EAAG;AACxB,IAAA,IAAI,KAAA,CAAM,MAAA,KAAW,CAAA,EAAG,OAAO,IAAA;AAC/B,IAAA,KAAA,GAAQ,MAAM,CAAC,CAAA;AAAA,EACjB;AACA,EAAA,IAAI,OAAO,KAAA,KAAU,QAAA,EAAU,OAAO,IAAA;AACtC,EAAA,MAAM,OAAA,GAAU,MAAM,IAAA,EAAK;AAC3B,EAAA,IAAI,CAAC,OAAA,CAAQ,UAAA,CAAW,gBAAgB,GAAG,OAAO,IAAA;AAClD,EAAA,MAAM,MAAA,GAAS,OAAA,CAAQ,KAAA,CAAM,gBAAA,CAAiB,MAAM,CAAA;AACpD,EAAA,OAAO,WAAW,IAAA,CAAK,MAAM,CAAA,GAAI,MAAA,CAAO,aAAY,GAAI,IAAA;AAC1D;AAGO,SAAS,WAAW,MAAA,EAA2B;AACpD,EAAA,MAAM,OAAkB,KAAA,CAAM,OAAA,CAAQ,MAAM,CAAA,GAAI,MAAA,GAAS,CAAC,MAAM,CAAA;AAChE,EAAA,OAAO,IAAA,CAAK,OAAO,CAAC,IAAA,KAAyB,OAAO,IAAA,KAAS,QAAA,IAAY,SAAS,EAAE,CAAA;AACtF;AAEA,SAAS,cAAc,KAAA,EAAsC;AAC3D,EAAA,OACE,iBAAiB,WAAA,IAAe,MAAA,CAAO,UAAU,QAAA,CAAS,IAAA,CAAK,KAAK,CAAA,KAAM,sBAAA;AAE9E;AAGO,SAAS,aAAa,OAAA,EAAqC;AAChE,EAAA,IAAI,OAAO,OAAA,KAAY,QAAA,EAAU,OAAO,OAAA,CAAQ,OAAO,OAAO,CAAA;AAC9D,EAAA,IAAI,OAAA,YAAmB,YAAY,OAAO,OAAA;AAC1C,EAAA,IAAI,WAAA,CAAY,MAAA,CAAO,OAAO,CAAA,EAAG;AAC/B,IAAA,OAAO,IAAI,UAAA,CAAW,OAAA,CAAQ,QAAQ,OAAA,CAAQ,UAAA,EAAY,QAAQ,UAAU,CAAA;AAAA,EAC9E;AACA,EAAA,IAAI,cAAc,OAAO,CAAA,EAAG,OAAO,IAAI,WAAW,OAAO,CAAA;AACzD,EAAA,OAAO,IAAA;AACT;AAEO,SAAS,WAAW,GAAA,EAAyB;AAClD,EAAA,MAAM,KAAA,GAAQ,IAAI,UAAA,CAAW,GAAA,CAAI,SAAS,CAAC,CAAA;AAC3C,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,KAAA,CAAM,QAAQ,CAAA,EAAA,EAAK;AACrC,IAAA,KAAA,CAAM,CAAC,CAAA,GAAI,MAAA,CAAO,QAAA,CAAS,GAAA,CAAI,KAAA,CAAM,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,CAAA,GAAI,CAAC,CAAA,EAAG,EAAE,CAAA;AAAA,EAC5D;AACA,EAAA,OAAO,KAAA;AACT;AAEO,SAAS,WAAW,KAAA,EAA2B;AACpD,EAAA,IAAI,GAAA,GAAM,EAAA;AACV,EAAA,KAAA,MAAW,IAAA,IAAQ,OAAO,GAAA,IAAO,IAAA,CAAK,SAAS,EAAE,CAAA,CAAE,QAAA,CAAS,CAAA,EAAG,GAAG,CAAA;AAClE,EAAA,OAAO,GAAA;AACT;AAGO,SAAS,iBAAA,CAAkB,GAAe,CAAA,EAAwB;AACvE,EAAA,IAAI,CAAA,CAAE,MAAA,KAAW,CAAA,CAAE,MAAA,EAAQ,OAAO,KAAA;AAClC,EAAA,IAAI,IAAA,GAAO,CAAA;AACX,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,CAAA,CAAE,MAAA,EAAQ,CAAA,EAAA,EAAK,IAAA,IAAS,CAAA,CAAE,CAAC,CAAA,GAAgB,CAAA,CAAE,CAAC,CAAA;AAClE,EAAA,OAAO,IAAA,KAAS,CAAA;AAClB;AAMA,SAAS,OAAA,CAAQ,OAAA,EAAkB,MAAA,EAAiB,MAAA,EAA2B;AAC7E,EAAA,MAAM,KAAA,GAAQ,aAAa,OAAO,CAAA;AAClC,EAAA,IAAI,UAAU,IAAA,EAAM;AAClB,IAAA,OAAO;AAAA,MACL,EAAA,EAAI,KAAA;AAAA,MACJ,MAAA,EACE;AAAA,KACJ;AAAA,EACF;AACA,EAAA,MAAM,MAAA,GAAS,qBAAqB,MAAM,CAAA;AAC1C,EAAA,IAAI,WAAW,IAAA,EAAM;AACnB,IAAA,OAAO;AAAA,MACL,EAAA,EAAI,KAAA;AAAA,MACJ,MAAA,EACE;AAAA,KACJ;AAAA,EACF;AACA,EAAA,MAAM,OAAA,GAAU,WAAW,MAAM,CAAA;AACjC,EAAA,IAAI,OAAA,CAAQ,WAAW,CAAA,EAAG;AACxB,IAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,MAAA,EAAQ,yCAAA,EAA0C;AAAA,EACxE;AACA,EAAA,OAAO,EAAE,IAAI,IAAA,EAAM,KAAA,EAAO,UAAU,UAAA,CAAW,MAAM,GAAG,OAAA,EAAQ;AAClE;AAEA,IAAM,OAAA,GAAU,IAAI,WAAA,CAAY,OAAO,CAAA;AAEvC,SAAS,QAAQ,IAAA,EAAsB;AACrC,EAAA,OAAO,IAAA,CAAK,SAAS,EAAA,GAAK,CAAA,EAAG,KAAK,KAAA,CAAM,CAAA,EAAG,EAAE,CAAC,CAAA,GAAA,CAAA,GAAQ,IAAA;AACxD;AAGO,SAAS,WAAW,KAAA,EAAiC;AAC1D,EAAA,MAAM,IAAA,GAAO,OAAA,CAAQ,MAAA,CAAO,KAAK,CAAA;AACjC,EAAA,IAAI,MAAA;AACJ,EAAA,IAAI;AACF,IAAA,MAAA,GAAS,IAAA,CAAK,MAAM,IAAI,CAAA;AAAA,EAC1B,SAAS,KAAA,EAAO;AACd,IAAA,MAAM,IAAI,iBAAA,CAAkB,qCAAA,EAAuC,EAAE,KAAA,EAAO,OAAO,CAAA;AAAA,EACrF;AACA,EAAA,IAAI,CAAC,aAAA,CAAc,MAAM,CAAA,EAAG;AAC1B,IAAA,MAAM,IAAI,kBAAkB,wCAAwC,CAAA;AAAA,EACtE;AACA,EAAA,MAAM,YAAY,MAAA,CAAO,UAAA;AACzB,EAAA,IAAI,OAAO,SAAA,KAAc,QAAA,IAAY,SAAA,KAAc,EAAA,EAAI;AACrD,IAAA,MAAM,IAAI,kBAAkB,qCAAqC,CAAA;AAAA,EACnE;AACA,EAAA,MAAM,gBAAgB,OAAO,MAAA,CAAO,cAAA,KAAmB,QAAA,GAAW,OAAO,cAAA,GAAiB,EAAA;AAC1F,EAAA,MAAM,YAAY,OAAO,MAAA,CAAO,UAAA,KAAe,QAAA,GAAW,OAAO,UAAA,GAAa,EAAA;AAC9E,EAAA,IAAI,kBAAkB,oBAAA,EAAsB;AAC1C,IAAA,QAAA;AAAA,MACE,kBAAkB,aAAa,CAAA,CAAA;AAAA,MAC/B,CAAA,wCAAA,EAA2C,OAAA,CAAQ,aAAa,CAAC,qCAAqC,oBAAoB,CAAA,sFAAA;AAAA,KAC5H;AAAA,EACF;AACA,EAAA,IAAI,cAAc,uBAAA,EAAyB;AACzC,IAAA,IAAI,CAAC,aAAA,CAAc,MAAA,CAAO,IAAI,CAAA,EAAG;AAC/B,MAAA,MAAM,IAAI,kBAAkB,qDAAqD,CAAA;AAAA,IACnF;AACA,IAAA,OAAO;AAAA,MACL,UAAA,EAAY,uBAAA;AAAA,MACZ,cAAA,EAAgB,aAAA;AAAA,MAChB,UAAA,EAAY,SAAA;AAAA,MACZ,IAAA,EAAM,eAAA,CAAgB,MAAA,CAAO,IAAI,CAAA;AAAA,MACjC,GAAA,EAAK;AAAA,KACP;AAAA,EACF;AACA,EAAA,IAAI,cAAc,cAAA,EAAgB;AAChC,IAAA,OAAO;AAAA,MACL,UAAA,EAAY,cAAA;AAAA,MACZ,cAAA,EAAgB,aAAA;AAAA,MAChB,UAAA,EAAY,SAAA;AAAA,MACZ,GAAA,EAAK;AAAA,KACP;AAAA,EACF;AACA,EAAA,OAAO;AAAA,IACL,UAAA,EAAY,SAAA;AAAA,IACZ,cAAA,EAAgB,aAAA;AAAA,IAChB,UAAA,EAAY,SAAA;AAAA,IACZ,GAAA,EAAK;AAAA,GACP;AACF;AAEO,SAAS,eAAA,CAAgB,IAAY,WAAA,EAAsC;AAChF,EAAA,OAAO,IAAI,eAAA;AAAA,IACT,CAAA,EAAG,EAAE,CAAA,8GAAA,EAAiH,WAAW,CAAA,WAAA;AAAA,GACnI;AACF;AAGO,SAAS,eAAeA,QAAAA,EAAkC;AAC/D,EAAA,MAAM,KAAA,GAAQA,SAAQ,KAAA,IAAS,iBAAA;AAE/B,EAAA,SAAS,UAAA,CACP,OAAA,EACA,MAAA,EACA,MAAA,EACA,IAAA,EACU;AACV,IAAA,MAAM,QAAA,GAAW,OAAA,CAAQ,OAAA,EAAS,MAAA,EAAQ,MAAM,CAAA;AAChD,IAAA,IAAI,CAAC,QAAA,CAAS,EAAA,EAAI,OAAO,QAAA;AACzB,IAAA,KAAA,MAAW,GAAA,IAAO,SAAS,OAAA,EAAS;AAClC,MAAA,IAAI,KAAA,CAAM,KAAK,GAAA,EAAK,QAAA,CAAS,KAAK,CAAA,EAAG,QAAA,CAAS,QAAQ,CAAA,EAAG,OAAO,QAAA;AAAA,IAClE;AACA,IAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,MAAA,EAAQ,QAAA,EAAS;AAAA,EACvC;AAEA,EAAA,eAAe,WAAA,CACb,OAAA,EACA,MAAA,EACA,MAAA,EACmB;AACnB,IAAA,MAAM,QAAA,GAAW,OAAA,CAAQ,OAAA,EAAS,MAAA,EAAQ,MAAM,CAAA;AAChD,IAAA,IAAI,CAAC,QAAA,CAAS,EAAA,EAAI,OAAO,QAAA;AACzB,IAAA,KAAA,MAAW,GAAA,IAAO,SAAS,OAAA,EAAS;AAClC,MAAA,IAAI,KAAA,CAAM,MAAMA,QAAAA,CAAQ,SAAA,CAAU,GAAA,EAAK,QAAA,CAAS,KAAK,CAAA,EAAG,QAAA,CAAS,QAAQ,CAAA,EAAG,OAAO,QAAA;AAAA,IACrF;AACA,IAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,MAAA,EAAQ,QAAA,EAAS;AAAA,EACvC;AAEA,EAAA,SAAS,WAAA,CAAY,IAAY,WAAA,EAA+B;AAC9D,IAAA,IAAIA,SAAQ,QAAA,KAAa,IAAA,EAAM,MAAM,eAAA,CAAgB,IAAI,WAAW,CAAA;AACpE,IAAA,OAAOA,QAAAA,CAAQ,QAAA;AAAA,EACjB;AAEA,EAAA,OAAO,OAAO,MAAA,CAAO;AAAA,IACnB,eAAA,CACE,OAAA,EACA,eAAA,EACA,MAAA,EACS;AACT,MAAA,MAAM,IAAA,GAAO,WAAA,CAAY,0BAAA,EAA4B,+BAA+B,CAAA;AACpF,MAAA,OAAO,UAAA,CAAW,OAAA,EAAS,eAAA,EAAiB,MAAA,EAAQ,IAAI,CAAA,CAAE,EAAA;AAAA,IAC5D,CAAA;AAAA,IACA,cAAA,CACE,OAAA,EACA,eAAA,EACA,MAAA,EACc;AACd,MAAA,MAAM,IAAA,GAAO,WAAA,CAAY,yBAAA,EAA2B,8BAA8B,CAAA;AAClF,MAAA,MAAM,MAAA,GAAS,UAAA,CAAW,OAAA,EAAS,eAAA,EAAiB,QAAQ,IAAI,CAAA;AAChE,MAAA,IAAI,CAAC,MAAA,CAAO,EAAA,QAAU,IAAI,0BAAA,CAA2B,OAAO,MAAM,CAAA;AAClE,MAAA,OAAO,UAAA,CAAW,OAAO,KAAK,CAAA;AAAA,IAChC,CAAA;AAAA,IACA,MAAM,oBAAA,CACJ,OAAA,EACA,eAAA,EACA,MAAA,EACkB;AAClB,MAAA,OAAA,CAAQ,MAAM,WAAA,CAAY,OAAA,EAAS,eAAA,EAAiB,MAAM,CAAA,EAAG,EAAA;AAAA,IAC/D,CAAA;AAAA,IACA,MAAM,mBAAA,CACJ,OAAA,EACA,eAAA,EACA,MAAA,EACuB;AACvB,MAAA,MAAM,MAAA,GAAS,MAAM,WAAA,CAAY,OAAA,EAAS,iBAAiB,MAAM,CAAA;AACjE,MAAA,IAAI,CAAC,MAAA,CAAO,EAAA,QAAU,IAAI,0BAAA,CAA2B,OAAO,MAAM,CAAA;AAClE,MAAA,OAAO,UAAA,CAAW,OAAO,KAAK,CAAA;AAAA,IAChC;AAAA,GACD,CAAA;AACH;AAEA,SAAS,oBAAA,CAAqB,QAAiB,MAAA,EAAuB;AACpE,EAAA,IAAI,OAAO,MAAA,KAAW,QAAA,IAAY,MAAA,KAAW,EAAA,EAAI;AAC/C,IAAA,MAAM,IAAI,gBAAgB,oCAAoC,CAAA;AAAA,EAChE;AACA,EAAA,IAAI,OAAO,MAAA,KAAW,QAAA,IAAY,MAAA,KAAW,EAAA,EAAI;AAC/C,IAAA,MAAM,IAAI,gBAAgB,oCAAoC,CAAA;AAAA,EAChE;AACF;AAGO,SAAS,cAAA,CAAeA,QAAAA,EAAwB,MAAA,EAAgB,MAAA,EAAwB;AAC7F,EAAA,IAAIA,SAAQ,QAAA,KAAa,IAAA,EAAM,MAAM,eAAA,CAAgB,WAAW,cAAc,CAAA;AAC9E,EAAA,oBAAA,CAAqB,QAAQ,MAAM,CAAA;AACnC,EAAA,OAAO,UAAA,CAAWA,SAAQ,QAAA,CAAS,MAAA,EAAQ,QAAQ,MAAA,CAAO,MAAM,CAAC,CAAC,CAAA;AACpE;AAEA,eAAsB,mBAAA,CACpBA,QAAAA,EACA,MAAA,EACA,MAAA,EACiB;AACjB,EAAA,oBAAA,CAAqB,QAAQ,MAAM,CAAA;AACnC,EAAA,OAAO,UAAA,CAAW,MAAMA,QAAAA,CAAQ,SAAA,CAAU,QAAQ,OAAA,CAAQ,MAAA,CAAO,MAAM,CAAC,CAAC,CAAA;AAC3E;;;AC7SO,IAAM,eAAA,GAAkB,GAAA;AACxB,IAAM,cAAA,GAAiB,GAAA;AACvB,IAAM,kBAAA,GAAqB,GAAA;AAM3B,IAAM,mBAAA,GAAsB,GAAA;AACnC,IAAM,iBAAA,GAAoB,GAAA;AAoCnB,SAAS,eAAe,QAAA,EAA2B;AACxD,EAAA,OACE,QAAA,KAAa,WAAA,IACb,QAAA,CAAS,QAAA,CAAS,YAAY,KAC9B,QAAA,KAAa,OAAA,IACb,kCAAA,CAAmC,IAAA,CAAK,QAAQ,CAAA;AAEpD;AAOO,SAAS,gBAAA,CACd,KAAA,EACA,IAAA,EACA,cAAA,EACA,oBAAoB,KAAA,EACZ;AACR,EAAA,IAAI,OAAO,KAAA,KAAU,QAAA,IAAY,KAAA,CAAM,IAAA,OAAW,EAAA,EAAI;AACpD,IAAA,MAAM,IAAI,eAAA,CAAgB,CAAA,EAAG,IAAI,CAAA,yBAAA,CAA2B,CAAA;AAAA,EAC9D;AACA,EAAA,IAAI,GAAA;AACJ,EAAA,IAAI;AACF,IAAA,GAAA,GAAM,IAAI,GAAA,CAAI,KAAA,CAAM,IAAA,EAAM,CAAA;AAAA,EAC5B,CAAA,CAAA,MAAQ;AACN,IAAA,MAAM,IAAI,eAAA,CAAgB,CAAA,EAAG,IAAI,CAAA,oBAAA,CAAsB,CAAA;AAAA,EACzD;AACA,EAAA,IAAI,GAAA,CAAI,QAAA,KAAa,QAAA,IAAY,GAAA,CAAI,aAAa,OAAA,EAAS;AACzD,IAAA,MAAM,IAAI,eAAA,CAAgB,CAAA,EAAG,IAAI,CAAA,sBAAA,CAAwB,CAAA;AAAA,EAC3D;AACA,EAAA,IAAI,GAAA,CAAI,QAAA,KAAa,EAAA,IAAM,GAAA,CAAI,aAAa,EAAA,EAAI;AAC9C,IAAA,MAAM,IAAI,eAAA,CAAgB,CAAA,EAAG,IAAI,CAAA,8BAAA,CAAgC,CAAA;AAAA,EACnE;AACA,EAAA,IAAI,GAAA,CAAI,MAAA,KAAW,EAAA,IAAM,GAAA,CAAI,SAAS,EAAA,EAAI;AACxC,IAAA,MAAM,IAAI,eAAA,CAAgB,CAAA,EAAG,IAAI,CAAA,+CAAA,CAAiD,CAAA;AAAA,EACpF;AACA,EAAA,IAAI,IAAI,QAAA,KAAa,OAAA,IAAW,CAAC,cAAA,CAAe,GAAA,CAAI,QAAQ,CAAA,EAAG;AAC7D,IAAA,IAAI,CAAC,iBAAA,EAAmB;AACtB,MAAA,MAAM,IAAI,eAAA;AAAA,QACR,GAAG,IAAI,CAAA,oMAAA;AAAA,OACT;AAAA,IACF;AACA,IAAA,QAAA;AAAA,MACE,CAAA,kBAAA,EAAqB,IAAI,MAAM,CAAA,CAAA;AAAA,MAC/B,GAAG,IAAI,CAAA,qFAAA;AAAA,KACT;AAAA,EACF;AACA,EAAA,IAAI,IAAA,GAAO,GAAA,CAAI,QAAA,CAAS,OAAA,CAAQ,QAAQ,EAAE,CAAA;AAC1C,EAAA,IAAI,cAAA,IAAkB,SAAA,CAAU,IAAA,CAAK,IAAI,CAAA,EAAG,IAAA,GAAO,IAAA,CAAK,KAAA,CAAM,CAAA,EAAG,EAAE,CAAA,CAAE,OAAA,CAAQ,QAAQ,EAAE,CAAA;AACvF,EAAA,OAAO,CAAA,EAAG,GAAA,CAAI,MAAM,CAAA,EAAG,IAAI,CAAA,CAAA;AAC7B;AAGO,SAAS,eAAA,CACd,KAAA,EACA,KAAA,GAAQ,IAAA,CAAK,KAAI,EACG;AACpB,EAAA,IAAI,KAAA,KAAU,IAAA,IAAQ,KAAA,KAAU,MAAA,EAAW,OAAO,MAAA;AAClD,EAAA,MAAM,IAAA,GAAO,MAAM,IAAA,EAAK;AACxB,EAAA,IAAI,kBAAkB,IAAA,CAAK,IAAI,CAAA,EAAG,OAAO,OAAO,IAAI,CAAA;AAEpD,EAAA,IAAI,CAAC,WAAA,CAAY,IAAA,CAAK,IAAI,GAAG,OAAO,MAAA;AACpC,EAAA,MAAM,IAAA,GAAO,IAAA,CAAK,KAAA,CAAM,IAAI,CAAA;AAC5B,EAAA,IAAI,MAAA,CAAO,KAAA,CAAM,IAAI,CAAA,EAAG,OAAO,MAAA;AAC/B,EAAA,OAAO,IAAA,CAAK,IAAI,CAAA,EAAG,IAAA,CAAK,MAAM,IAAA,GAAO,KAAA,IAAS,GAAI,CAAC,CAAA;AACrD;AAEA,SAAS,SAAS,IAAA,EAAsB;AACtC,EAAA,OAAO,IAAA,CAAK,MAAA,GAAS,iBAAA,GAAoB,CAAA,EAAG,IAAA,CAAK,MAAM,CAAA,EAAG,iBAAA,GAAoB,CAAC,CAAC,CAAA,GAAA,CAAA,GAAQ,IAAA;AAC1F;AAEA,SAAS,WAAA,CAAY,IAAA,EAAe,UAAA,EAAqB,IAAA,EAAkC;AACzF,EAAA,IAAI,UAAA,EAAY;AACd,IAAA,IAAI,aAAA,CAAc,IAAI,CAAA,IAAK,OAAO,KAAK,KAAA,KAAU,QAAA,IAAY,IAAA,CAAK,KAAA,KAAU,EAAA,EAAI;AAC9E,MAAA,OAAO,QAAA,CAAS,KAAK,KAAK,CAAA;AAAA,IAC5B;AACA,IAAA,IAAI,OAAO,IAAA,KAAS,QAAA,IAAY,SAAS,EAAA,EAAI,OAAO,SAAS,IAAI,CAAA;AACjE,IAAA,OAAO,MAAA;AAAA,EACT;AACA,EAAA,MAAM,OAAA,GAAU,KAAK,IAAA,EAAK;AAC1B,EAAA,IAAI,YAAY,EAAA,IAAM,OAAA,CAAQ,UAAA,CAAW,GAAG,GAAG,OAAO,MAAA;AACtD,EAAA,OAAO,SAAS,OAAO,CAAA;AACzB;AAEA,SAAS,OAAA,CAAQ,SAAkB,MAAA,EAAwB;AACzD,EAAA,IAAI,MAAA,KAAW,GAAA,IAAO,MAAA,KAAW,GAAA,EAAK;AACpC,IAAA,OAAO,OAAA,KAAY,gBACf,qEAAA,GACA,8EAAA;AAAA,EACN;AACA,EAAA,IAAI,MAAA,KAAW,KAAK,OAAO,sBAAA;AAC3B,EAAA,IAAI,MAAA,KAAW,GAAA,IAAO,OAAA,KAAY,gBAAA,EAAkB;AAClD,IAAA,OAAO,oGAAA;AAAA,EACT;AACA,EAAA,OAAO,EAAA;AACT;AAGO,SAAS,cAAA,CACd,OAAA,EACA,MAAA,EACA,IAAA,EACA,OAAA,EACU;AACV,EAAA,IAAI,IAAA,GAAgB,IAAA;AACpB,EAAA,IAAI,UAAA,GAAa,KAAA;AACjB,EAAA,IAAI,SAAS,EAAA,EAAI;AACf,IAAA,IAAI;AACF,MAAA,IAAA,GAAO,IAAA,CAAK,MAAM,IAAI,CAAA;AACtB,MAAA,UAAA,GAAa,IAAA;AAAA,IACf,CAAA,CAAA,MAAQ;AACN,MAAA,IAAA,GAAO,IAAA;AAAA,IACT;AAAA,EACF;AACA,EAAA,MAAM,MAAA,GAAS,WAAA,CAAY,IAAA,EAAM,UAAA,EAAY,IAAI,CAAA;AACjD,EAAA,MAAM,OAAA,GAAU,CAAA,EAAG,OAAO,CAAA,0BAAA,EAA6B,MAAM,CAAA,EAAG,MAAA,GAAS,CAAA,EAAA,EAAK,MAAM,MAAM,EAAE,CAAA,CAAA,EAAI,OAAA,CAAQ,OAAA,EAAS,MAAM,CAAC,CAAA,CAAA;AACxH,EAAA,MAAM,OAAA,GAA2B,EAAE,MAAA,EAAQ,IAAA,EAAM,OAAA,EAAQ;AACzD,EAAA,IAAI,WAAW,GAAA,EAAK,OAAO,IAAI,eAAA,CAAgB,SAAS,OAAO,CAAA;AAC/D,EAAA,IAAI,MAAA,KAAW,OAAO,MAAA,KAAW,GAAA,SAAY,IAAI,mBAAA,CAAoB,SAAS,OAAO,CAAA;AACrF,EAAA,IAAI,WAAW,GAAA,EAAK,OAAO,IAAI,kBAAA,CAAmB,SAAS,OAAO,CAAA;AAClE,EAAA,IAAI,WAAW,GAAA,EAAK,OAAO,IAAI,aAAA,CAAc,SAAS,OAAO,CAAA;AAC7D,EAAA,IAAI,WAAW,GAAA,EAAK;AAClB,IAAA,IAAI,UAAA;AACJ,IAAA,IAAI;AACF,MAAA,UAAA,GAAa,eAAA,CAAgB,OAAA,CAAQ,GAAA,CAAI,aAAa,CAAC,CAAA;AAAA,IACzD,CAAA,CAAA,MAAQ;AACN,MAAA,UAAA,GAAa,MAAA;AAAA,IACf;AACA,IAAA,OAAO,IAAI,cAAA,CAAe,OAAA,EAAS,EAAE,GAAG,OAAA,EAAS,YAAY,CAAA;AAAA,EAC/D;AACA,EAAA,IAAI,MAAA,IAAU,OAAO,MAAA,IAAU,GAAA,SAAY,IAAI,WAAA,CAAY,SAAS,OAAO,CAAA;AAC3E,EAAA,OAAO,IAAI,QAAA,CAAS,OAAA,EAAS,OAAO,CAAA;AACtC;AAEA,SAAS,UAAU,KAAA,EAAwB;AACzC,EAAA,OAAO,iBAAiB,KAAA,IAAS,KAAA,CAAM,UAAU,KAAA,CAAM,OAAA,GAAU,OAAO,KAAK,CAAA;AAC/E;AAMA,SAAS,YAAY,KAAA,EAAwB;AAC3C,EAAA,MAAM,KAAA,GAAQ,KAAA,YAAiB,KAAA,GAAQ,KAAA,CAAM,KAAA,GAAQ,MAAA;AACrD,EAAA,IAAI,OAAO,KAAA,KAAU,QAAA,IAAY,KAAA,KAAU,MAAM,OAAO,EAAA;AACxD,EAAA,MAAM,EAAE,IAAA,EAAM,OAAA,EAAQ,GAAI,KAAA;AAC1B,EAAA,MAAM,QAAA,GAAW,OAAO,IAAA,KAAS,QAAA,GAAW,IAAA,GAAO,EAAA;AACnD,EAAA,MAAM,OAAO,OAAO,OAAA,KAAY,QAAA,GAAW,OAAA,CAAQ,MAAK,GAAI,EAAA;AAC5D,EAAA,IAAI,IAAA,KAAS,MAAM,QAAA,KAAa,EAAA,IAAM,CAAC,IAAA,CAAK,QAAA,CAAS,QAAQ,CAAA,EAAG;AAC9D,IAAA,OAAO,CAAA,EAAA,EAAK,QAAQ,CAAA,EAAA,EAAK,QAAA,CAAS,IAAI,CAAC,CAAA,CAAA,CAAA;AAAA,EACzC;AACA,EAAA,IAAI,SAAS,EAAA,EAAI,OAAO,CAAA,EAAA,EAAK,QAAA,CAAS,IAAI,CAAC,CAAA,CAAA,CAAA;AAC3C,EAAA,OAAO,QAAA,KAAa,EAAA,GAAK,EAAA,GAAK,CAAA,EAAA,EAAK,QAAQ,CAAA,CAAA,CAAA;AAC7C;AAGA,SAAS,eAAe,KAAA,EAA0B;AAChD,EAAA,MAAM,QAAkB,EAAC;AACzB,EAAA,IAAI,OAAA,GAAmB,KAAA;AACvB,EAAA,KAAA,IAAS,KAAA,GAAQ,GAAG,KAAA,GAAQ,CAAA,IAAK,YAAY,MAAA,IAAa,OAAA,KAAY,MAAM,KAAA,EAAA,EAAS;AACnF,IAAA,IAAI,OAAO,YAAY,QAAA,EAAU;AAC/B,MAAA,IAAI,OAAO,OAAA,KAAY,QAAA,EAAU,KAAA,CAAM,KAAK,OAAO,CAAA;AACnD,MAAA;AAAA,IACF;AACA,IAAA,MAAM,EAAE,OAAA,EAAS,KAAA,EAAM,GAAI,OAAA;AAC3B,IAAA,IAAI,OAAO,OAAA,KAAY,QAAA,EAAU,KAAA,CAAM,KAAK,OAAO,CAAA;AACnD,IAAA,IAAI,OAAO,KAAA,KAAU,QAAA,EAAU,KAAA,CAAM,KAAK,KAAK,CAAA;AAC/C,IAAA,IAAI;AACF,MAAA,KAAA,CAAM,IAAA,CAAK,IAAA,CAAK,SAAA,CAAU,OAAO,KAAK,EAAE,CAAA;AAAA,IAC1C,CAAA,CAAA,MAAQ;AAAA,IAER;AACA,IAAA,OAAA,GAAW,OAAA,CAAgC,KAAA;AAAA,EAC7C;AACA,EAAA,OAAO,KAAA;AACT;AAEA,SAAS,cAAA,CAAe,OAA0B,OAAA,EAAqC;AACrF,EAAA,OAAO,OAAA,CAAQ,IAAA,CAAK,CAAC,MAAA,KAAW,WAAW,EAAA,IAAM,KAAA,CAAM,IAAA,CAAK,CAAC,IAAA,KAAS,IAAA,CAAK,QAAA,CAAS,MAAM,CAAC,CAAC,CAAA;AAC9F;AAGA,SAAS,aAAA,CAAiB,SAAqB,MAAA,EAAiC;AAC9E,EAAA,OAAO,IAAI,OAAA,CAAW,CAAC,OAAA,EAAS,MAAA,KAAW;AACzC,IAAA,IAAI,OAAO,OAAA,EAAS;AAClB,MAAA,MAAA,CAAO,WAAA,CAAY,MAAM,CAAC,CAAA;AAC1B,MAAA;AAAA,IACF;AACA,IAAA,MAAM,OAAA,GAAU,MAAY,MAAA,CAAO,WAAA,CAAY,MAAM,CAAC,CAAA;AACtD,IAAA,MAAA,CAAO,iBAAiB,OAAA,EAAS,OAAA,EAAS,EAAE,IAAA,EAAM,MAAM,CAAA;AACxD,IAAA,OAAA,CAAQ,IAAA;AAAA,MACN,CAAC,KAAA,KAAU;AACT,QAAA,MAAA,CAAO,mBAAA,CAAoB,SAAS,OAAO,CAAA;AAC3C,QAAA,OAAA,CAAQ,KAAK,CAAA;AAAA,MACf,CAAA;AAAA,MACA,CAAC,KAAA,KAAmB;AAClB,QAAA,MAAA,CAAO,mBAAA,CAAoB,SAAS,OAAO,CAAA;AAC3C,QAAA,MAAA,CAAO,KAAA,YAAiB,QAAQ,KAAA,GAAQ,IAAI,MAAM,MAAA,CAAO,KAAK,CAAC,CAAC,CAAA;AAAA,MAClE;AAAA,KACF;AAAA,EACF,CAAC,CAAA;AACH;AAEA,SAAS,WAAA,GAAyB;AAChC,EAAA,MAAM,YAAa,UAAA,CAAmC,KAAA;AACtD,EAAA,IAAI,OAAO,cAAc,UAAA,EAAY;AACnC,IAAA,MAAM,IAAI,eAAA;AAAA,MACR;AAAA,KACF;AAAA,EACF;AACA,EAAA,MAAM,OAAA,GAAU,SAAA;AAChB,EAAA,OAAO,CAAC,GAAA,EAAK,IAAA,KAAS,QAAQ,IAAA,CAAK,UAAA,EAAY,KAAK,IAAI,CAAA;AAC1D;AAGO,IAAM,YAAN,MAAgB;AAAA,EACZ,QAAA;AAAA,EAET,YAAY,OAAA,EAA2B;AACrC,IAAA,IAAA,CAAK,QAAA,GAAW,OAAA;AAAA,EAClB;AAAA;AAAA,EAGA,IAAI,OAAA,GAAkB;AACpB,IAAA,OAAO,KAAK,QAAA,CAAS,OAAA;AAAA,EACvB;AAAA,EAEA,MAAM,OAAA,CAAQ,IAAA,EAAc,OAAA,GAA0B,EAAC,EAA0B;AAC/E,IAAA,MAAM,UAAA,GAAa,OAAA,CAAQ,UAAA,IAAc,IAAA,CAAK,QAAA,CAAS,UAAA;AACvD,IAAA,IAAI,MAAM,CAAA,EAAG,IAAA,CAAK,QAAA,CAAS,OAAO,GAAG,IAAI,CAAA,CAAA;AACzC,IAAA,IAAI,OAAA,CAAQ,KAAA,EAAO,GAAA,IAAO,CAAA,CAAA,EAAI,IAAI,gBAAgB,OAAA,CAAQ,KAAK,CAAA,CAAE,QAAA,EAAU,CAAA,CAAA;AAC3E,IAAA,KAAA,IAAS,OAAA,GAAU,KAAK,OAAA,EAAA,EAAW;AACjC,MAAA,cAAA,CAAe,QAAQ,MAAM,CAAA;AAC7B,MAAA,IAAI;AACF,QAAA,OAAO,MAAM,IAAA,CAAK,QAAA,CAAS,KAAK,OAAA,CAAQ,MAAA,EAAQ,QAAQ,OAAO,CAAA;AAAA,MACjE,SAAS,KAAA,EAAO;AACd,QAAA,IAAI,WAAW,UAAA,IAAc,CAAC,KAAK,YAAA,CAAa,KAAK,GAAG,MAAM,KAAA;AAC9D,QAAA,MAAM,MAAM,IAAA,CAAK,WAAA,CAAY,OAAO,OAAO,CAAA,EAAG,QAAQ,MAAM,CAAA;AAAA,MAC9D;AAAA,IACF;AAAA,EACF;AAAA,EAEA,aAAa,KAAA,EAAyB;AACpC,IAAA,IAAI,KAAA,YAAiB,eAAA,IAAmB,KAAA,YAAiB,YAAA,EAAc,OAAO,IAAA;AAC9E,IAAA,IAAI,KAAA,YAAiB,cAAA,EAAgB,OAAO,IAAA,CAAK,QAAA,CAAS,gBAAA;AAC1D,IAAA,OAAO,KAAA,YAAiB,WAAA;AAAA,EAC1B;AAAA,EAEA,WAAA,CAAY,OAAgB,OAAA,EAAyB;AACnD,IAAA,IAAI,iBAAiB,QAAA,EAAU;AAC7B,MAAA,MAAM,UAAA,GACJ,KAAA,YAAiB,cAAA,GACb,KAAA,CAAM,UAAA,GACN,gBAAgB,KAAA,CAAM,OAAA,CAAQ,GAAA,CAAI,aAAa,CAAC,CAAA;AACtD,MAAA,IAAI,eAAe,MAAA,EAAW,OAAO,KAAK,GAAA,CAAI,UAAA,GAAa,KAAM,kBAAkB,CAAA;AAAA,IACrF;AACA,IAAA,MAAM,UAAU,IAAA,CAAK,GAAA,CAAI,cAAA,EAAgB,eAAA,GAAkB,KAAK,OAAO,CAAA;AACvE,IAAA,MAAM,QAAQ,OAAA,GAAU,CAAA,GAAI,IAAA,CAAK,MAAA,MAAY,OAAA,GAAU,CAAA,CAAA;AACvD,IAAA,OAAO,iBAAiB,cAAA,GAAiB,IAAA,CAAK,GAAA,CAAI,KAAA,EAAO,mBAAmB,CAAA,GAAI,KAAA;AAAA,EAClF;AAAA,EAEA,iBAAiB,KAAA,EAAiC;AAChD,IAAA,MAAM,EAAE,OAAA,EAAS,OAAA,EAAQ,GAAI,IAAA,CAAK,QAAA;AAClC,IAAA,MAAM,OAAA,GAAU,CAAA,EAAG,OAAO,CAAA,iBAAA,EAAoB,SAAA,CAAU,KAAK,CAAC,CAAA,EAAG,WAAA,CAAY,KAAK,CAAC,CAAA,CAAA;AACnF,IAAA,IAAI,cAAA,CAAe,CAAC,OAAA,EAAS,GAAG,eAAe,KAAK,CAAC,CAAA,EAAG,OAAO,CAAA,EAAG;AAEhE,MAAA,OAAO,IAAI,eAAA;AAAA,QACT,GAAG,OAAO,CAAA,oHAAA;AAAA,OACZ;AAAA,IACF;AACA,IAAA,OAAO,IAAI,eAAA,CAAgB,OAAA,EAAS,EAAE,KAAA,EAAO,OAAO,CAAA;AAAA,EACtD;AAAA,EAEA,MAAM,QAAA,CACJ,GAAA,EACA,MAAA,EACA,UAAA,EACuB;AACvB,IAAA,MAAM,EAAE,OAAA,EAAQ,GAAI,IAAA,CAAK,QAAA;AACzB,IAAA,MAAM,OAAA,GAAU,KAAK,GAAA,CAAI,IAAA,CAAK,SAAS,OAAA,EAAS,UAAA,IAAc,OAAO,iBAAiB,CAAA;AACtF,IAAA,MAAM,SAAA,GAAY,IAAA,CAAK,QAAA,CAAS,KAAA,IAAS,WAAA,EAAY;AACrD,IAAA,MAAM,UAAA,GAAa,IAAI,eAAA,EAAgB;AACvC,IAAA,IAAI,QAAA,GAAW,KAAA;AACf,IAAA,MAAM,KAAA,GAAQ,WAAW,MAAM;AAC7B,MAAA,QAAA,GAAW,IAAA;AACX,MAAA,UAAA,CAAW,KAAA,EAAM;AAAA,IACnB,GAAG,OAAO,CAAA;AACV,IAAA,MAAM,OAAA,GAAU,MAAY,UAAA,CAAW,KAAA,EAAM;AAC7C,IAAA,MAAA,EAAQ,iBAAiB,OAAA,EAAS,OAAA,EAAS,EAAE,IAAA,EAAM,MAAM,CAAA;AAEzD,IAAA,IAAI,QAAA;AACJ,IAAA,IAAI,IAAA;AACJ,IAAA,IAAI;AACF,MAAA,MAAM,IAAA,GAAO;AAAA,QACX,MAAA,EAAQ,KAAA;AAAA,QACR,OAAA,EAAS;AAAA,UACP,MAAA,EAAQ,kBAAA;AAAA,UACR,cAAc,SAAA,EAAU;AAAA,UACxB,GAAG,KAAK,QAAA,CAAS;AAAA,SACnB;AAAA,QACA,QAAQ,UAAA,CAAW;AAAA,OACrB;AACA,MAAA,QAAA,GAAW,MAAM,aAAA;AAAA,QACf,OAAA,CAAQ,SAAQ,CAAE,IAAA,CAAK,MAAM,SAAA,CAAU,GAAA,EAAK,IAAI,CAAC,CAAA;AAAA,QACjD,UAAA,CAAW;AAAA,OACb;AACA,MAAA,IAAA,GAAO,MAAM,aAAA;AAAA,QACX,QAAQ,OAAA,EAAQ,CAAE,KAAK,MAAM,QAAA,CAAS,MAAM,CAAA;AAAA,QAC5C,UAAA,CAAW;AAAA,OACb;AAAA,IACF,SAAS,KAAA,EAAO;AACd,MAAA,IAAI,MAAA,EAAQ,OAAA,EAAS,MAAM,WAAA,CAAY,MAAM,CAAA;AAC7C,MAAA,IAAI,QAAA,EAAU;AACZ,QAAA,MAAM,IAAI,YAAA,CAAa,CAAA,EAAG,OAAO,CAAA,yBAAA,EAA4B,OAAO,CAAA,IAAA,CAAA,EAAQ;AAAA,UAC1E,KAAA,EAAO;AAAA,SACR,CAAA;AAAA,MACH;AACA,MAAA,IAAI,KAAA,YAAiB,iBAAiB,MAAM,KAAA;AAC5C,MAAA,MAAM,IAAA,CAAK,iBAAiB,KAAK,CAAA;AAAA,IACnC,CAAA,SAAE;AACA,MAAA,YAAA,CAAa,KAAK,CAAA;AAClB,MAAA,MAAA,EAAQ,mBAAA,CAAoB,SAAS,OAAO,CAAA;AAAA,IAC9C;AAEA,IAAA,MAAM,EAAE,MAAA,EAAQ,OAAA,EAAQ,GAAI,QAAA;AAC5B,IAAA,IAAI,MAAA,IAAU,GAAA,IAAO,MAAA,GAAS,GAAA,EAAK;AACjC,MAAA,IAAI;AACF,QAAA,OAAO,EAAE,IAAA,EAAM,IAAA,CAAK,MAAM,IAAI,CAAA,EAAc,QAAQ,OAAA,EAAQ;AAAA,MAC9D,SAAS,KAAA,EAAO;AACd,QAAA,MAAM,IAAI,QAAA;AAAA,UACR,CAAA,EAAG,OAAO,CAAA,kDAAA,EAAqD,MAAM,CAAA,EAAA,CAAA;AAAA,UACrE;AAAA,YACE,MAAA;AAAA,YACA,IAAA,EAAM,IAAA;AAAA,YACN,OAAA;AAAA,YACA,KAAA,EAAO;AAAA;AACT,SACF;AAAA,MACF;AAAA,IACF;AACA,IAAA,MAAM,cAAA,CAAe,OAAA,EAAS,MAAA,EAAQ,IAAA,EAAM,OAAO,CAAA;AAAA,EACrD;AACF,CAAA;;;ACpZA,IAAM,IAAA,GAAO,+EAAA;AACb,IAAM,UAAA,GAAa,yCAAA;AACnB,IAAM,OAAO,IAAI,MAAA,CAAO,IAAI,UAAU,CAAA,MAAA,EAAS,UAAU,CAAA,KAAA,CAAO,CAAA;AAShE,SAAS,SAAS,KAAA,EAAwB;AACxC,EAAA,MAAM,IAAA,GAAO,OAAO,KAAA,KAAU,QAAA,GAAW,KAAK,SAAA,CAAU,KAAK,CAAA,GAAI,MAAA,CAAO,KAAK,CAAA;AAC7E,EAAA,OAAO,IAAA,CAAK,SAAS,EAAA,GAAK,CAAA,EAAG,KAAK,KAAA,CAAM,CAAA,EAAG,EAAE,CAAC,CAAA,GAAA,CAAA,GAAQ,IAAA;AACxD;AAGA,IAAM,aAAA,GAAgB,+BAAA;AAEtB,IAAM,eAAA,GAAkB,UAAA;AAQjB,SAAS,kBAAkB,KAAA,EAAuB;AACvD,EAAA,IAAI,OAAA;AACJ,EAAA,IAAI;AACF,IAAA,OAAA,GAAU,mBAAmB,KAAK,CAAA;AAAA,EACpC,CAAA,CAAA,MAAQ;AACN,IAAA,MAAM,IAAI,eAAA;AAAA,MACR;AAAA,KACF;AAAA,EACF;AACA,EAAA,OAAO,OAAA,CACJ,QAAQ,aAAA,EAAe,CAAC,UAAU,kBAAA,CAAmB,KAAK,CAAC,CAAA,CAC3D,OAAA,CAAQ,eAAA,EAAiB,CAAC,IAAA,KAAS,CAAA,CAAA,EAAI,IAAA,CAAK,UAAA,CAAW,CAAC,CAAA,CAAE,SAAS,EAAE,CAAA,CAAE,WAAA,EAAa,CAAA,CAAE,CAAA;AAC3F;AAMO,SAAS,cAAA,CAAe,MAAe,KAAA,EAAwB;AACpE,EAAA,IAAI,OAAO,IAAA,KAAS,QAAA,IAAY,CAAC,YAAA,CAAa,QAAA,CAAS,IAAkB,CAAA,EAAG;AAC1E,IAAA,MAAM,IAAI,eAAA;AAAA,MACR,CAAA,oBAAA,EAAuB,SAAS,IAAI,CAAC,iBAAiB,YAAA,CAAa,IAAA,CAAK,IAAI,CAAC,CAAA,CAAA;AAAA,KAC/E;AAAA,EACF;AACA,EAAA,MAAM,UAAA,GAAa,IAAA;AACnB,EAAA,IAAI,OAAO,UAAU,QAAA,EAAU;AAC7B,IAAA,MAAM,IAAI,eAAA,CAAgB,CAAA,IAAA,EAAO,UAAU,CAAA,wBAAA,CAA0B,CAAA;AAAA,EACvE;AACA,EAAA,IAAI,eAAe,UAAA,EAAY;AAC7B,IAAA,IAAI,KAAA,KAAU,EAAA,EAAI,MAAM,IAAI,gBAAgB,sCAAsC,CAAA;AAClF,IAAA,IAAI,KAAA,KAAU,GAAA,IAAO,KAAA,KAAU,IAAA,EAAM;AACnC,MAAA,MAAM,IAAI,eAAA;AAAA,QACR;AAAA,OACF;AAAA,IACF;AACA,IAAA,IAAI,KAAA,CAAM,QAAA,CAAS,GAAG,CAAA,EAAG;AACvB,MAAA,MAAM,IAAI,eAAA;AAAA,QACR;AAAA,OACF;AAAA,IACF;AACA,IAAA,OAAO,EAAE,IAAA,EAAM,UAAA,EAAY,OAAO,OAAA,EAAS,iBAAA,CAAkB,KAAK,CAAA,EAAE;AAAA,EACtE;AACA,EAAA,IAAI,eAAe,IAAA,EAAM;AACvB,IAAA,IAAI,KAAA,CAAM,QAAA,CAAS,GAAG,CAAA,EAAG;AACvB,MAAA,MAAM,IAAI,eAAA;AAAA,QACR;AAAA,OACF;AAAA,IACF;AACA,IAAA,IAAI,CAAC,IAAA,CAAK,IAAA,CAAK,KAAK,CAAA,EAAG;AACrB,MAAA,MAAM,IAAI,gBAAgB,wDAAwD,CAAA;AAAA,IACpF;AACA,IAAA,OAAO,EAAE,IAAA,EAAM,UAAA,EAAY,KAAA,EAAO,SAAS,KAAA,EAAM;AAAA,EACnD;AACA,EAAA,IAAI,CAAC,IAAA,CAAK,IAAA,CAAK,KAAK,CAAA,EAAG;AACrB,IAAA,MAAM,IAAI,eAAA,CAAgB,CAAA,EAAG,UAAU,CAAA,gDAAA,CAAkD,CAAA;AAAA,EAC3F;AACA,EAAA,MAAM,IAAA,GAAO,MAAM,WAAA,EAAY;AAC/B,EAAA,OAAO,EAAE,IAAA,EAAM,UAAA,EAAY,KAAA,EAAO,IAAA,EAAM,SAAS,IAAA,EAAK;AACxD;AAGO,SAAS,kBAAkB,SAAA,EAA4B;AAC5D,EAAA,IAAI,OAAO,SAAA,KAAc,QAAA,IAAY,CAAC,IAAA,CAAK,IAAA,CAAK,SAAS,CAAA,EAAG;AAC1D,IAAA,MAAM,IAAI,gBAAgB,2DAA2D,CAAA;AAAA,EACvF;AACA,EAAA,OAAO,UAAU,WAAA,EAAY;AAC/B;AAGO,SAAS,eAAA,CAAgB,OAAgB,IAAA,EAAuB;AACrE,EAAA,IAAI,OAAO,UAAU,SAAA,EAAW,MAAM,IAAI,eAAA,CAAgB,CAAA,EAAG,IAAI,CAAA,mBAAA,CAAqB,CAAA;AACtF,EAAA,OAAO,KAAA;AACT;AAGO,SAAS,gBAAA,CAAiB,OAAgB,IAAA,EAAsB;AACrE,EAAA,IAAI,OAAO,KAAA,KAAU,QAAA,IAAY,CAAC,MAAA,CAAO,SAAA,CAAU,KAAK,CAAA,IAAK,KAAA,GAAQ,CAAA,IAAK,KAAA,GAAQ,GAAA,EAAK;AACrF,IAAA,MAAM,IAAI,eAAA,CAAgB,CAAA,EAAG,IAAI,CAAA,kCAAA,CAAoC,CAAA;AAAA,EACvE;AACA,EAAA,OAAO,KAAA;AACT;AAGO,SAAS,0BAAA,CAA2B,OAAgB,IAAA,EAAsB;AAC/E,EAAA,IAAI,OAAO,UAAU,QAAA,IAAY,CAAC,OAAO,aAAA,CAAc,KAAK,CAAA,IAAK,KAAA,GAAQ,CAAA,EAAG;AAC1E,IAAA,MAAM,IAAI,eAAA,CAAgB,CAAA,EAAG,IAAI,CAAA,+CAAA,CAAiD,CAAA;AAAA,EACpF;AACA,EAAA,OAAO,KAAA;AACT;AAGO,SAAS,oBAAA,CAAqB,KAAA,EAAgB,IAAA,EAAc,SAAA,GAAY,KAAA,EAAe;AAC5F,EAAA,IACE,OAAO,KAAA,KAAU,QAAA,IACjB,CAAC,MAAA,CAAO,QAAA,CAAS,KAAK,CAAA,IACtB,KAAA,GAAQ,CAAA,IACP,CAAC,SAAA,IAAa,UAAU,CAAA,EACzB;AACA,IAAA,MAAM,KAAA,GAAQ,YAAY,4BAAA,GAA+B,gBAAA;AACzD,IAAA,MAAM,IAAI,eAAA,CAAgB,CAAA,EAAG,IAAI,CAAA,kCAAA,EAAqC,KAAK,CAAA,CAAA,CAAG,CAAA;AAAA,EAChF;AACA,EAAA,OAAO,KAAA;AACT;AAEA,IAAM,WAAA,GAAc,gBAAA;AAMb,SAAS,iBAAA,CAAkB,MAAc,IAAA,EAAoB;AAClE,EAAA,IAAI,CAAC,WAAA,CAAY,IAAA,CAAK,IAAI,CAAA,EAAG;AAC3B,IAAA,MAAM,IAAI,eAAA;AAAA,MACR,GAAG,IAAI,CAAA,uGAAA;AAAA,KACT;AAAA,EACF;AACF;AAGO,SAAS,QAAQ,IAAA,EAAuB;AAC7C,EAAA,KAAA,IAAS,KAAA,GAAQ,CAAA,EAAG,KAAA,GAAQ,IAAA,CAAK,QAAQ,KAAA,EAAA,EAAS;AAChD,IAAA,IAAI,IAAA,CAAK,UAAA,CAAW,KAAK,CAAA,GAAI,KAAM,OAAO,KAAA;AAAA,EAC5C;AACA,EAAA,OAAO,IAAA;AACT;AAGO,SAAS,kBAAA,CAAmB,OAAgB,IAAA,EAAsB;AACvE,EAAA,IAAI,OAAO,KAAA,KAAU,QAAA,IAAY,KAAA,CAAM,IAAA,OAAW,EAAA,EAAI;AACpD,IAAA,MAAM,IAAI,eAAA,CAAgB,CAAA,EAAG,IAAI,CAAA,4CAAA,CAA8C,CAAA;AAAA,EACjF;AACA,EAAA,MAAM,UAAA,GAAa,MAAM,IAAA,EAAK;AAC9B,EAAA,iBAAA,CAAkB,YAAY,IAAI,CAAA;AAClC,EAAA,OAAO,UAAA;AACT;;;ACjFA,IAAM,cAAA,GAAiB,2CAAA;AACvB,IAAM,kBAAA,GAAqB,GAAA;AAC3B,IAAM,mBAAA,GAAsB,CAAA;AAC5B,IAAM,aAAA,GAAgB,EAAA;AACtB,IAAM,iBAAA,GAAoB,GAAA;AAC1B,IAAM,uBAAA,GAA0B,GAAA;AAChC,IAAM,wBAAA,GAA2B,GAAA;AAEjC,IAAM,gBAAA,GAAmB,GAAA;AAEzB,IAAM,iBAAA,GAAoB,CAAC,CAAA,EAAG,CAAA,EAAG,GAAG,CAAC,CAAA;AAErC,IAAM,qBAAA,GAAwB,CAAA;AAE9B,IAAM,mBAAA,GAAsB,GAAA;AAQrB,SAAS,QAAA,CAAS,OAAe,YAAA,EAA8B;AACpE,EAAA,MAAM,MAAA,GAAS,iBAAA,CAAkB,KAAK,CAAA,IAAK,qBAAA;AAC3C,EAAA,OAAO,IAAA,CAAK,IAAI,IAAA,CAAK,GAAA,CAAI,kBAAkB,YAAY,CAAA,EAAG,eAAe,MAAM,CAAA;AACjF;AAEA,SAAS,SAAA,CAAU,IAAA,EAAe,MAAA,EAAgB,OAAA,EAA2C;AAC3F,EAAA,IAAI,CAAC,cAAc,IAAI,CAAA,IAAK,CAAC,KAAA,CAAM,OAAA,CAAQ,IAAA,CAAK,IAAI,CAAA,EAAG;AACrD,IAAA,MAAM,IAAI,SAAS,mDAAA,EAAqD;AAAA,MACtE,MAAA;AAAA,MACA,IAAA;AAAA,MACA;AAAA,KACD,CAAA;AAAA,EACH;AACA,EAAA,MAAM,OAAO,IAAA,CAAK,IAAA,CAAK,OAAO,aAAa,CAAA,CAAE,IAAI,cAAc,CAAA;AAC/D,EAAA,MAAM,KAAA,GACJ,OAAO,IAAA,CAAK,KAAA,KAAU,QAAA,IAAY,MAAA,CAAO,QAAA,CAAS,IAAA,CAAK,KAAK,CAAA,GAAI,IAAA,CAAK,KAAA,GAAQ,IAAA,CAAK,MAAA;AACpF,EAAA,OAAO,EAAE,MAAM,KAAA,EAAM;AACvB;AAMA,eAAe,UACb,SAAA,EACA,MAAA,EACA,OACA,MAAA,EACA,MAAA,EACA,YACA,cAAA,EACsB;AACtB,EAAA,MAAM,OAAO,CAAA,gBAAA,EAAmB,MAAA,CAAO,IAAI,CAAA,CAAA,EAAI,OAAO,OAAO,CAAA,CAAA;AAC7D,EAAA,MAAM,QAAA,GAAW,MAAM,SAAA,CAAU,OAAA,CAAQ,IAAA,EAAM;AAAA,IAC7C,KAAA,EAAO,EAAE,KAAA,EAAO,MAAA,CAAO,KAAK,CAAA,EAAG,MAAA,EAAQ,MAAA,CAAO,MAAM,CAAA,EAAE;AAAA,IACtD,MAAA;AAAA,IACA,UAAA;AAAA,IACA,OAAA,EAAS;AAAA,GACV,CAAA;AACD,EAAA,OAAO,UAAU,QAAA,CAAS,IAAA,EAAM,QAAA,CAAS,MAAA,EAAQ,SAAS,OAAO,CAAA;AACnE;AAGA,SAAS,qBAAqB,KAAA,EAA0C;AACtE,EAAA,OACE,iBAAiB,cAAA,IACjB,KAAA,YAAiB,WAAA,IACjB,KAAA,YAAiB,mBACjB,KAAA,YAAiB,YAAA;AAErB;AAGO,IAAM,kBAAN,MAAsB;AAAA,EAClB,UAAA;AAAA,EAET,YAAY,SAAA,EAAsB;AAChC,IAAA,IAAA,CAAK,UAAA,GAAa,SAAA;AAAA,EACpB;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,MAAA,CAAO,IAAA,EAAkB,KAAA,EAAe,OAAA,GAAyB,EAAC,EAAyB;AAC/F,IAAA,MAAM,MAAA,GAAS,cAAA,CAAe,IAAA,EAAM,KAAK,CAAA;AACzC,IAAA,MAAM,KAAA,GAAQ,gBAAA,CAAiB,OAAA,CAAQ,KAAA,IAAS,eAAe,OAAO,CAAA;AACtE,IAAA,MAAM,MAAA,GAAS,0BAAA,CAA2B,OAAA,CAAQ,MAAA,IAAU,GAAG,QAAQ,CAAA;AACvE,IAAA,OAAO,UAAU,IAAA,CAAK,UAAA,EAAY,QAAQ,KAAA,EAAO,MAAA,EAAQ,QAAQ,MAAM,CAAA;AAAA,EACzE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,OAAA,CACE,IAAA,EACA,KAAA,EACA,OAAA,GAA0B,EAAC,EACsB;AACjD,IAAA,MAAM,MAAA,GAAS,cAAA,CAAe,IAAA,EAAM,KAAK,CAAA;AACzC,IAAA,MAAM,QAAA,GAAW,gBAAA,CAAiB,OAAA,CAAQ,QAAA,IAAY,mBAAmB,UAAU,CAAA;AACnF,IAAA,MAAM,QAAA,GACJ,QAAQ,QAAA,KAAa,MAAA,GACjB,SACA,0BAAA,CAA2B,OAAA,CAAQ,UAAU,UAAU,CAAA;AAC7D,IAAA,OAAO,KAAK,QAAA,CAAS,MAAA,EAAQ,QAAA,EAAU,QAAA,EAAU,QAAQ,MAAM,CAAA;AAAA,EACjE;AAAA,EAEA,OAAO,QAAA,CACL,MAAA,EACA,QAAA,EACA,UACA,MAAA,EACiD;AACjD,IAAA,MAAM,IAAA,uBAAW,GAAA,EAAY;AAC7B,IAAA,IAAI,MAAA,GAAS,CAAA;AACb,IAAA,IAAI,OAAA,GAAU,CAAA;AACd,IAAA,WAAS;AACP,MAAA,IAAI,QAAA,KAAa,MAAA,IAAa,OAAA,IAAW,QAAA,EAAU;AACnD,MAAA,MAAM,IAAA,GAAO,MAAM,SAAA,CAAU,IAAA,CAAK,YAAY,MAAA,EAAQ,QAAA,EAAU,QAAQ,MAAM,CAAA;AAC9E,MAAA,IAAI,IAAA,CAAK,IAAA,CAAK,MAAA,KAAW,CAAA,EAAG;AAC5B,MAAA,KAAA,MAAW,cAAA,IAAkB,KAAK,IAAA,EAAM;AACtC,QAAA,MAAM,MAAM,cAAA,CAAe,UAAA;AAC3B,QAAA,IAAI,QAAQ,EAAA,EAAI;AACd,UAAA,IAAI,IAAA,CAAK,GAAA,CAAI,GAAG,CAAA,EAAG;AACnB,UAAA,IAAA,CAAK,IAAI,GAAG,CAAA;AAAA,QACd;AACA,QAAA,MAAM,cAAA;AACN,QAAA,OAAA,EAAA;AACA,QAAA,IAAI,QAAA,KAAa,MAAA,IAAa,OAAA,IAAW,QAAA,EAAU;AAAA,MACrD;AACA,MAAA,MAAA,IAAU,KAAK,IAAA,CAAK,MAAA;AACpB,MAAA,IAAI,MAAA,IAAU,KAAK,KAAA,EAAO;AAAA,IAC5B;AAAA,EACF;AACF,CAAA;AAGO,IAAM,0BAAN,MAA8B;AAAA,EAC1B,UAAA;AAAA,EAET,YAAY,SAAA,EAAsB;AAChC,IAAA,IAAA,CAAK,UAAA,GAAa,SAAA;AAAA,EACpB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAyBA,MAAM,GAAA,CACJ,SAAA,EACA,OAAA,GAAoC,EAAC,EACL;AAChC,IAAA,MAAM,EAAA,GAAK,kBAAkB,SAAS,CAAA;AACtC,IAAA,MAAM,IAAA,GAAO,eAAA,CAAgB,OAAA,CAAQ,IAAA,IAAQ,MAAM,MAAM,CAAA;AACzD,IAAA,MAAM,OAAA,GAAU,oBAAA;AAAA,MACd,QAAQ,OAAA,IAAW,uBAAA;AAAA,MACnB,SAAA;AAAA,MACA;AAAA,KACF;AACA,IAAA,MAAM,YAAA,GAAe,oBAAA;AAAA,MACnB,QAAQ,YAAA,IAAgB,wBAAA;AAAA,MACxB;AAAA,KACF;AACA,IAAA,MAAM,EAAE,QAAO,GAAI,OAAA;AACnB,IAAA,cAAA,CAAe,MAAM,CAAA;AACrB,IAAA,MAAM,SAAiB,EAAE,IAAA,EAAM,cAAc,KAAA,EAAO,EAAA,EAAI,SAAS,EAAA,EAAG;AAEpE,IAAA,IAAI,CAAC,IAAA,EAAM;AACT,MAAA,MAAM,IAAA,GAAO,MAAM,SAAA,CAAU,IAAA,CAAK,YAAY,MAAA,EAAQ,CAAA,EAAG,GAAG,MAAM,CAAA;AAClE,MAAA,OAAO,IAAA,CAAK,IAAA,CAAK,CAAC,CAAA,IAAK,IAAA;AAAA,IACzB;AACA,IAAA,OAAO,IAAA,CAAK,MAAM,MAAA,EAAQ,IAAA,CAAK,KAAI,GAAI,OAAA,EAAS,cAAc,MAAM,CAAA;AAAA,EACtE;AAAA,EAEA,MAAM,KAAA,CACJ,MAAA,EACA,QAAA,EACA,cACA,MAAA,EACgC;AAChC,IAAA,IAAI,UAAA,GAAa,KAAA;AACjB,IAAA,KAAA,IAAS,KAAA,GAAQ,KAAK,KAAA,EAAA,EAAS;AAC7B,MAAA,MAAM,iBAAiB,IAAA,CAAK,GAAA;AAAA,QAC1B,KAAK,UAAA,CAAW,OAAA;AAAA,QAChB,KAAK,GAAA,CAAI,QAAA,GAAW,IAAA,CAAK,GAAA,IAAO,mBAAmB;AAAA,OACrD;AACA,MAAA,IAAI,OAAA;AACJ,MAAA,IAAI;AACF,QAAA,MAAM,IAAA,GAAO,MAAM,SAAA,CAAU,IAAA,CAAK,UAAA,EAAY,QAAQ,CAAA,EAAG,CAAA,EAAG,MAAA,EAAQ,CAAA,EAAG,cAAc,CAAA;AACrF,QAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,IAAA,CAAK,CAAC,CAAA;AACzB,QAAA,IAAI,OAAO,OAAO,KAAA;AAAA,MACpB,SAAS,KAAA,EAAO;AACd,QAAA,cAAA,CAAe,MAAM,CAAA;AACrB,QAAA,IAAI,CAAC,oBAAA,CAAqB,KAAK,CAAA,EAAG,MAAM,KAAA;AACxC,QAAA,OAAA,GAAU,KAAA;AAAA,MACZ;AAEA,MAAA,MAAM,SAAA,GAAY,QAAA,GAAW,IAAA,CAAK,GAAA,EAAI;AACtC,MAAA,IAAI,UAAA,IAAc,aAAa,CAAA,EAAG;AAChC,QAAA,IAAI,OAAA,KAAY,QAAW,MAAM,OAAA;AACjC,QAAA,OAAO,IAAA;AAAA,MACT;AAEA,MAAA,IAAI,KAAA,GAAQ,QAAA,CAAS,KAAA,EAAO,YAAY,CAAA;AACxC,MAAA,IAAI,mBAAmB,cAAA,EAAgB;AAErC,QAAA,MAAM,aAAa,IAAA,CAAK,GAAA,CAAA,CAAK,QAAQ,UAAA,IAAc,CAAA,IAAK,KAAM,kBAAkB,CAAA;AAEhF,QAAA,IAAI,UAAA,GAAa,WAAW,MAAM,OAAA;AAClC,QAAA,KAAA,GAAQ,IAAA,CAAK,GAAA,CAAI,KAAA,EAAO,mBAAA,EAAqB,UAAU,CAAA;AAAA,MACzD;AACA,MAAA,IAAI,SAAS,SAAA,EAAW;AACtB,QAAA,KAAA,GAAQ,SAAA;AACR,QAAA,UAAA,GAAa,IAAA;AAAA,MACf;AACA,MAAA,MAAM,KAAA,CAAM,OAAO,MAAM,CAAA;AAAA,IAC3B;AAAA,EACF;AACF,CAAA;AAOO,IAAM,aAAN,MAAiB;AAAA;AAAA,EAEb,eAAA;AAAA;AAAA,EAEA,OAAA;AAAA,EAET,YAAY,OAAA,EAA4B;AACtC,IAAA,IAAI,CAAC,aAAA,CAAc,OAAO,CAAA,EAAG;AAC3B,MAAA,MAAM,IAAI,gBAAgB,uDAAuD,CAAA;AAAA,IACnF;AACA,IAAA,MAAM,MAAA,GAAS,kBAAA,CAAmB,OAAA,CAAQ,MAAA,EAAQ,QAAQ,CAAA;AAC1D,IAAA,iBAAA,CAAkB,cAAc,iBAAiB,CAAA;AACjD,IAAA,IAAI,CAAC,cAAA,CAAe,IAAA,CAAK,MAAM,CAAA,EAAG;AAChC,MAAA,QAAA;AAAA,QACE,gBAAA;AAAA,QACA;AAAA,OACF;AAAA,IACF;AACA,IAAA,MAAM,OAAA,GAAU,gBAAA;AAAA,MACd,QAAQ,OAAA,IAAW,wBAAA;AAAA,MACnB,SAAA;AAAA,MACA,IAAA;AAAA,MACA,eAAA,CAAgB,OAAA,CAAQ,iBAAA,IAAqB,KAAA,EAAO,mBAAmB;AAAA,KACzE;AACA,IAAA,MAAM,OAAA,GAAU,oBAAA,CAAqB,OAAA,CAAQ,OAAA,IAAW,oBAAoB,SAAS,CAAA;AACrF,IAAA,MAAM,UAAA,GAAa,0BAAA;AAAA,MACjB,QAAQ,UAAA,IAAc,mBAAA;AAAA,MACtB;AAAA,KACF;AACA,IAAA,IAAI,QAAQ,KAAA,KAAU,MAAA,IAAa,OAAO,OAAA,CAAQ,UAAU,UAAA,EAAY;AACtE,MAAA,MAAM,IAAI,gBAAgB,2BAA2B,CAAA;AAAA,IACvD;AACA,IAAA,MAAM,SAAA,GAAY,IAAI,SAAA,CAAU;AAAA,MAC9B,OAAA,EAAS,aAAA;AAAA,MACT,OAAA;AAAA,MACA,OAAA,EAAS,EAAE,aAAA,EAAe,CAAA,OAAA,EAAU,MAAM,CAAA,CAAA,EAAG;AAAA,MAC7C,OAAA,EAAS,CAAC,MAAM,CAAA;AAAA,MAChB,OAAA;AAAA,MACA,UAAA;AAAA,MACA,gBAAA,EAAkB,IAAA;AAAA,MAClB,OAAO,OAAA,CAAQ;AAAA,KAChB,CAAA;AACD,IAAA,IAAA,CAAK,OAAA,GAAU,IAAI,eAAA,CAAgB,SAAS,CAAA;AAC5C,IAAA,IAAA,CAAK,eAAA,GAAkB,IAAI,uBAAA,CAAwB,SAAS,CAAA;AAAA,EAC9D;AACF;;;ACjVA,IAAMC,mBAAAA,GAAqB,GAAA;AAC3B,IAAMC,oBAAAA,GAAsB,CAAA;AAMrB,SAAS,gBAAgB,KAAA,EAAuB;AACrD,EAAA,IAAI,MAAA,GAAS,KAAA,CAAM,IAAA,EAAK,CAAE,WAAA,EAAY;AACtC,EAAA,MAAA,GAAS,MAAA,CAAO,OAAA,CAAQ,yBAAA,EAA2B,EAAE,CAAA;AACrD,EAAA,MAAA,GAAS,OAAO,KAAA,CAAM,OAAA,EAAS,CAAC,CAAA,CAAE,CAAC,CAAA,IAAK,EAAA;AACxC,EAAA,OAAO,MAAA,CAAO,OAAA,CAAQ,QAAA,EAAU,EAAE,CAAA;AACpC;AAQO,IAAM,uBAAN,MAA2B;AAAA;AAAA,EAEvB,MAAA;AAAA,EACA,UAAA;AAAA,EAET,YAAY,OAAA,EAAsC;AAChD,IAAA,IAAI,CAAC,aAAA,CAAc,OAAO,CAAA,EAAG;AAC3B,MAAA,MAAM,IAAI,eAAA;AAAA,QACR;AAAA,OACF;AAAA,IACF;AACA,IAAA,MAAM,SAAA,GAAY,kBAAA,CAAmB,OAAA,CAAQ,SAAA,EAAW,WAAW,CAAA;AACnE,IAAA,iBAAA,CAAkB,wBAAwB,YAAY,CAAA;AACtD,IAAA,IAAI,OAAO,OAAA,CAAQ,MAAA,KAAW,QAAA,EAAU;AACtC,MAAA,MAAM,IAAI,gBAAgB,gEAAgE,CAAA;AAAA,IAC5F;AACA,IAAA,MAAM,MAAA,GAAS,eAAA,CAAgB,OAAA,CAAQ,MAAM,CAAA;AAC7C,IAAA,IAAI,WAAW,EAAA,EAAI;AACjB,MAAA,MAAM,IAAI,gBAAgB,gEAAgE,CAAA;AAAA,IAC5F;AACA,IAAA,IAAI,CAAC,OAAA,CAAQ,MAAM,CAAA,EAAG;AACpB,MAAA,MAAM,IAAI,gBAAgB,yDAAyD,CAAA;AAAA,IACrF;AACA,IAAA,iBAAA,CAAkB,QAAQ,QAAQ,CAAA;AAClC,IAAA,MAAM,OAAA,GAAU,gBAAA;AAAA,MACd,QAAQ,OAAA,IAAW,2BAAA;AAAA,MACnB,SAAA;AAAA,MACA,KAAA;AAAA,MACA,eAAA,CAAgB,OAAA,CAAQ,iBAAA,IAAqB,KAAA,EAAO,mBAAmB;AAAA,KACzE;AACA,IAAA,MAAM,OAAA,GAAU,oBAAA,CAAqB,OAAA,CAAQ,OAAA,IAAWD,qBAAoB,SAAS,CAAA;AACrF,IAAA,MAAM,UAAA,GAAa,0BAAA;AAAA,MACjB,QAAQ,UAAA,IAAcC,oBAAAA;AAAA,MACtB;AAAA,KACF;AACA,IAAA,IAAI,QAAQ,KAAA,KAAU,MAAA,IAAa,OAAO,OAAA,CAAQ,UAAU,UAAA,EAAY;AACtE,MAAA,MAAM,IAAI,gBAAgB,2BAA2B,CAAA;AAAA,IACvD;AACA,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AACd,IAAA,IAAA,CAAK,UAAA,GAAa,IAAI,SAAA,CAAU;AAAA,MAC9B,OAAA,EAAS,gBAAA;AAAA,MACT,OAAA;AAAA,MACA,SAAS,EAAE,iBAAA,EAAmB,QAAQ,aAAA,EAAe,CAAA,OAAA,EAAU,SAAS,CAAA,CAAA,EAAG;AAAA,MAC3E,OAAA,EAAS,CAAC,SAAS,CAAA;AAAA,MACnB,OAAA;AAAA,MACA,UAAA;AAAA,MACA,gBAAA,EAAkB,KAAA;AAAA,MAClB,OAAO,OAAA,CAAQ;AAAA,KAChB,CAAA;AAAA,EACH;AAAA;AAAA,EAGA,MAAM,UAAA,CAAW,OAAA,GAA6B,EAAC,EAA2B;AACxE,IAAA,MAAM,QAAA,GAAW,MAAM,IAAA,CAAK,UAAA,CAAW,OAAA,CAAQ,eAAe,EAAE,MAAA,EAAQ,OAAA,CAAQ,MAAA,EAAQ,CAAA;AACxF,IAAA,IAAI,CAAC,aAAA,CAAc,QAAA,CAAS,IAAI,CAAA,EAAG;AACjC,MAAA,MAAM,IAAI,SAAS,sDAAA,EAAwD;AAAA,QACzE,QAAQ,QAAA,CAAS,MAAA;AAAA,QACjB,MAAM,QAAA,CAAS,IAAA;AAAA,QACf,SAAS,QAAA,CAAS;AAAA,OACnB,CAAA;AAAA,IACH;AACA,IAAA,OAAO,mBAAA,CAAoB,SAAS,IAAI,CAAA;AAAA,EAC1C;AACF;;;ACpHO,SAAS,SAAS,KAAA,EAA0C;AACjE,EAAA,IAAI,OAAO,KAAA,KAAU,QAAA,IAAY,MAAA,CAAO,KAAA,CAAM,KAAK,CAAA,EAAG;AACpD,IAAA,MAAM,IAAI,gBAAgB,wCAAwC,CAAA;AAAA,EACpE;AACA,EAAA,IAAI,KAAA,GAAQ,KAAK,OAAO,cAAA;AACxB,EAAA,IAAI,KAAA,IAAS,IAAI,OAAO,WAAA;AACxB,EAAA,IAAI,KAAA,IAAS,IAAI,OAAO,YAAA;AACxB,EAAA,OAAO,SAAA;AACT;AAGO,SAAS,cAAc,KAAA,EAAwB;AACpD,EAAA,OAAO,OAAO,KAAA,KAAU,QAAA,IAAY,KAAA,GAAQ,GAAA;AAC9C;AA6CA,IAAM,kBAAA,GAAqB,GAAA;AAC3B,IAAM,mBAAA,GAA2C,CAAC,WAAW,CAAA;AAC7D,IAAM,mBAAA,GAA0C,CAAC,oBAAA,EAAsB,qBAAqB,CAAA;AAE5F,SAAS,WAAW,GAAA,EAAwC;AAC1D,EAAA,IAAI,GAAA,KAAQ,MAAA,EAAW,OAAO,IAAA,CAAK,GAAA,EAAI;AACvC,EAAA,MAAM,KAAA,GAAQ,GAAA,YAAe,IAAA,GAAO,GAAA,CAAI,SAAQ,GAAI,GAAA;AACpD,EAAA,IAAI,OAAO,KAAA,KAAU,QAAA,IAAY,CAAC,MAAA,CAAO,QAAA,CAAS,KAAK,CAAA,EAAG;AACxD,IAAA,MAAM,IAAI,gBAAgB,6DAA6D,CAAA;AAAA,EACzF;AACA,EAAA,OAAO,KAAA;AACT;AAEA,SAAS,WAAW,KAAA,EAAyB;AAC3C,EAAA,OAAA,CACG,OAAO,KAAA,KAAU,QAAA,IAAY,OAAO,KAAA,KAAU,eAC/C,KAAA,KAAU,IAAA,IACV,OAAQ,KAAA,CAA6B,IAAA,KAAS,UAAA;AAElD;AAOO,SAAS,sBAAA,CACd,cAAA,EACA,OAAA,GAA2B,EAAC,EAChB;AACZ,EAAA,MAAM,MAAA,GAAS,QAAQ,MAAA,IAAU,kBAAA;AACjC,EAAA,IAAI,OAAO,WAAW,QAAA,IAAY,MAAA,CAAO,MAAM,MAAM,CAAA,IAAK,SAAS,CAAA,EAAG;AACpE,IAAA,MAAM,IAAI,eAAA;AAAA,MACR;AAAA,KACF;AAAA,EACF;AACA,EAAA,MAAM,KAAA,GAAQ,UAAA,CAAW,OAAA,CAAQ,GAAG,CAAA;AACpC,EAAA,MAAM,UAAA,GAAa,QAAQ,UAAA,IAAc,mBAAA;AACzC,EAAA,KAAA,MAAWC,SAAQ,UAAA,EAAY;AAC7B,IAAA,IAAI,CAAC,eAAA,CAAgB,QAAA,CAASA,KAAI,CAAA,EAAG;AACnC,MAAA,MAAM,IAAI,eAAA;AAAA,QACR,CAAA,6CAAA,EAAgD,eAAA,CAAgB,IAAA,CAAK,IAAI,CAAC,CAAA,CAAA;AAAA,OAC5E;AAAA,IACF;AAAA,EACF;AACA,EAAA,MAAM,UAAA,GAAa,QAAQ,UAAA,IAAc,mBAAA;AACzC,EAAA,KAAA,MAAW,QAAQ,UAAA,EAAY;AAC7B,IAAA,IAAI,CAAC,SAAA,CAAU,QAAA,CAAS,IAAI,CAAA,EAAG;AAC7B,MAAA,MAAM,IAAI,eAAA;AAAA,QACR,CAAA,kDAAA,EAAqD,SAAA,CAAU,IAAA,CAAK,IAAI,CAAC,CAAA,CAAA;AAAA,OAC3E;AAAA,IACF;AAAA,EACF;AAEA,EAAA,IAAI,cAAA,KAAmB,IAAA,IAAQ,cAAA,KAAmB,MAAA,EAAW;AAC3D,IAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,MAAA,EAAQ,SAAA,EAAW,MAAM,IAAA,EAAK;AAAA,EACpD;AAEA,EAAA,MAAM,IAAA,GAAO,QAAA,CAAS,cAAA,CAAe,UAAU,CAAA;AAE/C,EAAA,IAAI,QAAQ,QAAA,EAAU;AACpB,IAAA,MAAM,QAAA,GAAoB,OAAA,CAAQ,QAAA,CAAS,cAAA,CAAe,UAAU,CAAA;AACpE,IAAA,IAAI,UAAA,CAAW,QAAQ,CAAA,EAAG;AACxB,MAAA,MAAM,IAAI,eAAA;AAAA,QACR;AAAA,OACF;AAAA,IACF;AACA,IAAA,IAAI,UAAU,OAAO,EAAE,IAAI,KAAA,EAAO,MAAA,EAAQ,YAAY,IAAA,EAAK;AAAA,EAC7D;AAEA,EAAA,IAAI,MAAA,KAAW,OAAO,iBAAA,EAAmB;AACvC,IAAA,MAAM,UAAA,GACJ,eAAe,WAAA,KAAgB,IAAA,GAAO,OAAO,GAAA,GAAM,IAAA,CAAK,KAAA,CAAM,cAAA,CAAe,WAAW,CAAA;AAC1F,IAAA,IAAI,OAAO,KAAA,CAAM,UAAU,CAAA,IAAK,KAAA,GAAQ,aAAa,MAAA,EAAQ;AAC3D,MAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,MAAA,EAAQ,SAAS,IAAA,EAAK;AAAA,IAC5C;AAAA,EACF;AAEA,EAAA,IAAI,aAAA,CAAc,cAAA,CAAe,UAAU,CAAA,EAAG;AAC5C,IAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,MAAA,EAAQ,gBAAgB,IAAA,EAAK;AAAA,EACnD;AAEA,EAAA,IAAI,CAAC,cAAA,CAAe,SAAA,IAAa,cAAA,CAAe,cAAc,QAAA,EAAU;AACtE,IAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,MAAA,EAAQ,qBAAqB,IAAA,EAAK;AAAA,EACxD;AAEA,EAAA,KAAA,MAAW,QAAQ,UAAA,EAAY;AAC7B,IAAA,IAAI,cAAA,CAAe,eAAA,CAAgB,IAAI,CAAA,EAAG;AACxC,MAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,MAAA,EAAQ,cAAA,EAAgB,MAAM,IAAA,EAAK;AAAA,IACzD;AAAA,EACF;AAEA,EAAA,IAAI,IAAA,KAAS,cAAA,IAAkB,UAAA,CAAW,QAAA,CAAS,IAAI,CAAA,EAAG;AACxD,IAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,MAAA,EAAQ,gBAAgB,IAAA,EAAK;AAAA,EACnD;AAEA,EAAA,OAAO,EAAE,EAAA,EAAI,IAAA,EAAM,MAAA,EAAQ,MAAM,IAAA,EAAK;AACxC;;;ACnJA,IAAM,QAAA,GAAW,CAAC,GAAA,EAAa,OAAA,KAC7B,UAAA,CAAW,QAAA,EAAU,GAAG,CAAA,CAAE,MAAA,CAAO,OAAO,CAAA,CAAE,MAAA,EAAO;AAEnD,IAAM,OAAA,GAAyB;AAAA,EAC7B,QAAA;AAAA,EACA,SAAA,EAAW,CAAC,GAAA,EAAK,OAAA,KAAY,OAAA,CAAQ,OAAA,EAAQ,CAAE,IAAA,CAAK,MAAM,QAAA,CAAS,GAAA,EAAK,OAAO,CAAC,CAAA;AAAA,EAChF,KAAA,EAAO,CAAC,CAAA,EAAG,CAAA,KAAM,CAAA,CAAE,WAAW,CAAA,CAAE,MAAA,IAAU,eAAA,CAAgB,CAAA,EAAG,CAAC;AAChE,CAAA;AAGO,IAAM,QAAA,GAAqB,eAAe,OAAO;AAQjD,SAAS,OAAA,CAAQ,QAAgB,MAAA,EAAwB;AAC9D,EAAA,OAAO,cAAA,CAAe,OAAA,EAAS,MAAA,EAAQ,MAAM,CAAA;AAC/C;AAGO,SAAS,YAAA,CAAa,QAAgB,MAAA,EAAiC;AAC5E,EAAA,OAAO,mBAAA,CAAoB,OAAA,EAAS,MAAA,EAAQ,MAAM,CAAA;AACpD","file":"index.js","sourcesContent":["import type { DetectionFlags, LookupType, RiskBand } from './types.js';\n\n/** The all-zero UUID. As a device ID it means \"no usable device signals\". */\nexport const NIL_UUID = '00000000-0000-0000-0000-000000000000';\n\n/**\n * Known risk signal slugs (`IdentificationSignal.name`). Signal names are an open set: new slugs\n * can appear at any time, so compare against these constants and never treat them as exhaustive.\n */\nexport const SIGNALS = Object.freeze({\n TOR: 'tor',\n JAVASCRIPT_DISABLED: 'javascript_disabled',\n OS_MISMATCH: 'os_mismatch',\n ANTIDETECT_BROWSER: 'antidetect_browser',\n PROXY_ROUTED_ANTIDETECT: 'proxy_routed_antidetect',\n PORT_SCAN_ROUTED_VIA_PROXY: 'port_scan_routed_via_proxy',\n BROWSER_AUTOMATION: 'browser_automation',\n STUN_NOT_CHECKED: 'stun_not_checked',\n STUN_LATE_CORRECTION: 'stun_late_correction',\n OS_NOT_DETECTED: 'os_not_detected',\n BROWSER_VPN_PROXY: 'browser_vpn_proxy',\n VPN: 'vpn',\n PRIVACY_RELAY: 'privacy_relay',\n PROXY: 'proxy',\n DATACENTER_IP: 'datacenter_ip',\n ABUSER: 'abuser',\n TIMEZONE_MISMATCH: 'timezone_mismatch',\n RATE_LIMITED: 'rate_limited',\n} as const);\n\n/** A known signal slug. */\nexport type KnownSignal = (typeof SIGNALS)[keyof typeof SIGNALS];\n\n/** Score ranges of the three risk bands (inclusive). */\nexport const RISK_BANDS = Object.freeze({\n trusted: Object.freeze({ min: 0, max: 29 }),\n suspicious: Object.freeze({ min: 30, max: 59 }),\n dangerous: Object.freeze({ min: 60, max: 100 }),\n} as const);\n\nexport const RISK_BAND_NAMES: readonly RiskBand[] = ['trusted', 'suspicious', 'dangerous'];\n\nexport const LOOKUP_TYPES: readonly LookupType[] = [\n 'ip',\n 'user_hid',\n 'visitor_id',\n 'request_id',\n 'device_id',\n 'session_id',\n 'cookie_id',\n];\n\nexport type FlagKey = keyof DetectionFlags;\n\n/** The 19 detection flag keys, in the order the webhook payload lists them. */\nexport const FLAG_KEYS: readonly FlagKey[] = [\n 'vpn',\n 'privacy_relay',\n 'browser_vpn_proxy',\n 'tor',\n 'proxy',\n 'datacenter_ip',\n 'abuser',\n 'os_mismatch',\n 'os_not_detected',\n 'timezone_mismatch',\n 'anti_detect_browser',\n 'browser_automation',\n 'ip_mismatch',\n 'incognito',\n 'search_bot',\n 'suspicious_paid_click',\n 'javascript_disabled',\n 'stun_not_checked',\n 'check_incomplete',\n];\n\n/** Webhook schema version this SDK was built for. */\nexport const KNOWN_SCHEMA_VERSION = '2026-06-01';\n\nexport const DEFAULT_HISTORY_BASE_URL = 'https://account.shieldlabs.ai';\nexport const DEFAULT_MANAGEMENT_BASE_URL = 'https://api.shieldlabs.ai';\n","/**\n * Error hierarchy of the SDK.\n *\n * ShieldLabsError\n * ApiError (the server answered with an error status or an unusable body)\n * BadRequestError (400), AuthenticationError (401, 403), QuotaExceededError (402),\n * NotFoundError (404), RateLimitError (429), ServerError (5xx)\n * ConnectionError (network failure), TimeoutError (per-attempt timeout)\n * SignatureVerificationError, WebhookParseError\n * ValidationError (invalid arguments, detected before any HTTP request)\n */\n\n/** Minimal view of response headers (a `Headers` object satisfies it). */\nexport interface HeadersLike {\n get(name: string): string | null;\n}\n\n/** Base class of every error thrown by this SDK. */\nexport class ShieldLabsError extends Error {\n override name = 'ShieldLabsError';\n\n constructor(message: string, options?: { cause?: unknown }) {\n super(message, options?.cause === undefined ? undefined : { cause: options.cause });\n }\n}\n\nexport interface ApiErrorOptions {\n status: number;\n /** Parsed response body: a JSON value when the body parses as JSON, the raw text otherwise, null when empty. */\n body?: unknown;\n headers?: HeadersLike | undefined;\n cause?: unknown;\n}\n\nconst EMPTY_HEADERS: HeadersLike = { get: () => null };\n\n/** The server answered with an error status (or a success status with an unusable body). */\nexport class ApiError extends ShieldLabsError {\n override name = 'ApiError';\n /** HTTP status code. */\n readonly status: number;\n /** Parsed response body: JSON value, raw text, or null when the body was empty. */\n readonly body: unknown;\n /** Response headers. */\n readonly headers: HeadersLike;\n\n constructor(message: string, options: ApiErrorOptions) {\n super(message, { cause: options.cause });\n this.status = options.status;\n this.body = options.body === undefined ? null : options.body;\n this.headers = options.headers ?? EMPTY_HEADERS;\n }\n}\n\n/** HTTP 400. */\nexport class BadRequestError extends ApiError {\n override name = 'BadRequestError';\n}\n\n/** HTTP 401 or 403: the key, secret or domain is wrong, or the domain is disabled. */\nexport class AuthenticationError extends ApiError {\n override name = 'AuthenticationError';\n}\n\n/**\n * HTTP 402. Neither the History API nor the Management API returns it today: an account over its\n * included volume keeps working and its profile shows a negative remaining count.\n */\nexport class QuotaExceededError extends ApiError {\n override name = 'QuotaExceededError';\n}\n\n/** HTTP 404: usually a wrong base URL or path. */\nexport class NotFoundError extends ApiError {\n override name = 'NotFoundError';\n}\n\n/** HTTP 429. */\nexport class RateLimitError extends ApiError {\n override name = 'RateLimitError';\n /** Seconds to wait, from the Retry-After header, when the server sent one. */\n readonly retryAfter: number | undefined;\n\n constructor(message: string, options: ApiErrorOptions & { retryAfter?: number | undefined }) {\n super(message, options);\n this.retryAfter = options.retryAfter;\n }\n}\n\n/** HTTP 5xx, including gateway errors from edge proxies. */\nexport class ServerError extends ApiError {\n override name = 'ServerError';\n}\n\n/** The request never produced an HTTP response (DNS, TLS, connection reset, and so on). */\nexport class ConnectionError extends ShieldLabsError {\n override name = 'ConnectionError';\n}\n\n/** A request attempt took longer than the configured timeout. */\nexport class TimeoutError extends ShieldLabsError {\n override name = 'TimeoutError';\n}\n\n/** The X-Shield-Signature header is missing, malformed or does not match the body. */\nexport class SignatureVerificationError extends ShieldLabsError {\n override name = 'SignatureVerificationError';\n}\n\n/** The webhook body is authentic but is not a usable ShieldLabs event. */\nexport class WebhookParseError extends ShieldLabsError {\n override name = 'WebhookParseError';\n}\n\n/** An argument is invalid. Thrown before any HTTP request is sent. */\nexport class ValidationError extends ShieldLabsError {\n override name = 'ValidationError';\n}\n","/**\n * Normalization of History API rows and webhook `data` objects into one `Identification` shape.\n *\n * This module follows the shared normalization rules used by every ShieldLabs server SDK,\n * including their edge cases (truthiness of flag values, whitespace trimming rules and\n * timestamp handling), so that all SDKs produce identical results for identical input.\n * The only intentional differences are type guarantees: a value of the wrong JSON type becomes\n * \"\" (strings), 0 (weights) or NaN (scores) instead of being passed through.\n */\nimport { FLAG_KEYS, type FlagKey } from './constants.js';\nimport type {\n DetectionFlags,\n DomainProfile,\n Identification,\n IdentificationSignal,\n IpInfo,\n TrafficSource,\n} from './types.js';\n\nexport type JsonObject = Record<string, unknown>;\n\nexport function isPlainObject(value: unknown): value is JsonObject {\n return typeof value === 'object' && value !== null && !Array.isArray(value);\n}\n\nfunction hasOwn(obj: JsonObject, key: string): boolean {\n return Object.prototype.hasOwnProperty.call(obj, key);\n}\n\n/** Own property value, or undefined when the key is absent. */\nfunction own(obj: JsonObject, key: string): unknown {\n return hasOwn(obj, key) ? obj[key] : undefined;\n}\n\n/** A string property, or \"\" when it is absent or not a string. */\nfunction stringField(obj: JsonObject, key: string): string {\n const value = own(obj, key);\n return typeof value === 'string' ? value : '';\n}\n\n/** Truthiness as defined by the shared rules: empty strings, arrays and objects, 0 and null are false. */\nexport function isTruthy(value: unknown): boolean {\n if (value === undefined || value === null) return false;\n if (typeof value === 'boolean') return value;\n if (typeof value === 'number') return value !== 0;\n if (typeof value === 'string') return value.length > 0;\n if (Array.isArray(value)) return value.length > 0;\n if (typeof value === 'object') return Object.keys(value).length > 0;\n return true;\n}\n\n// Unicode whitespace as defined by the shared rules. Differs from String.prototype.trim():\n// it includes U+001C to U+001F and U+0085, and excludes U+FEFF.\nconst WHITESPACE = new Set<number>([\n 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x1c, 0x1d, 0x1e, 0x1f, 0x20, 0x85, 0xa0, 0x1680, 0x2000, 0x2001,\n 0x2002, 0x2003, 0x2004, 0x2005, 0x2006, 0x2007, 0x2008, 0x2009, 0x200a, 0x2028, 0x2029, 0x202f,\n 0x205f, 0x3000,\n]);\n\n/** Trims whitespace (as defined above) from both ends. */\nexport function stripWhitespace(text: string): string {\n let start = 0;\n let end = text.length;\n while (start < end && WHITESPACE.has(text.charCodeAt(start))) start++;\n while (end > start && WHITESPACE.has(text.charCodeAt(end - 1))) end--;\n return text.slice(start, end);\n}\n\nfunction stripUnderscores(text: string): string {\n let start = 0;\n let end = text.length;\n while (start < end && text[start] === '_') start++;\n while (end > start && text[end - 1] === '_') end--;\n return text.slice(start, end);\n}\n\n// ---------------------------------------------------------------------------------------------\n// Signal slugs\n// ---------------------------------------------------------------------------------------------\n\nconst EXACT_SLUGS = new Map<string, string>([\n ['Is tor', 'tor'],\n ['Is VPN', 'vpn'],\n ['Is privacy relay', 'privacy_relay'],\n ['Is proxy', 'proxy'],\n ['Is datacenter', 'datacenter_ip'],\n ['Is abuser', 'abuser'],\n ['Stun is not checked', 'stun_not_checked'],\n ['Stun passed (late arrival, corrected)', 'stun_late_correction'],\n ['UA OS is not detected', 'os_not_detected'],\n ['Network OS is not detected', 'os_not_detected'],\n ['Browser timezone ≠ IP-timezone', 'timezone_mismatch'],\n ['Browser VPN/Proxy', 'browser_vpn_proxy'],\n ['Browser Automation', 'browser_automation'],\n ['Port scan routed via proxy (antidetect browser pattern)', 'proxy_routed_antidetect'],\n ['User has been banned 1H, to many requests', 'rate_limited'],\n]);\n\nconst PREFIX_SLUGS: ReadonlyArray<readonly [prefix: string, slug: string]> = [\n ['Antidetect browser', 'antidetect_browser'],\n ['Os_mismatch', 'os_mismatch'],\n ['OS mismatch2', 'os_mismatch2'],\n ['TCP handshake', 'tcp_handshake_v2'],\n ['Latency test', 'ws_tcp_latency'],\n ['JavaScript disabled', 'javascript_disabled'],\n];\n\nconst STICKY_PREFIX = 'Sticky verdict: ';\nconst LETTER_OR_DIGIT = /^[\\p{L}\\p{Nd}]$/u;\n\n/**\n * Slug for a description without an explicit mapping: the text before the first \"(\",\n * lowercased, with spaces, \"-\" and \"/\" collapsed to \"_\", \"≠\" written as \"_neq_\" and any other\n * punctuation dropped.\n */\nexport function fallbackSlug(description: string): string {\n let text = stripWhitespace(description);\n const paren = text.indexOf('(');\n if (paren >= 0) text = stripWhitespace(text.slice(0, paren));\n let out = '';\n let previousWasSeparator = false;\n for (const ch of text) {\n if (ch === ' ' || ch === '-' || ch === '/') {\n if (!previousWasSeparator && out.length > 0) {\n out += '_';\n previousWasSeparator = true;\n }\n } else if (ch === '≠') {\n out += '_neq_';\n previousWasSeparator = false;\n } else if (LETTER_OR_DIGIT.test(ch)) {\n out += ch.toLowerCase();\n previousWasSeparator = false;\n }\n }\n const slug = stripUnderscores(out);\n return slug === '' ? 'unknown' : slug;\n}\n\n/** Signal slug for a History `score_details` description (the webhook `signals[].name`). */\nexport function signalSlug(description: string): string {\n const exact = EXACT_SLUGS.get(description);\n if (exact !== undefined) return exact;\n for (const [prefix, slug] of PREFIX_SLUGS) {\n if (description.startsWith(prefix)) return slug;\n }\n if (description.startsWith(STICKY_PREFIX)) {\n const colon = description.indexOf(':');\n const rest =\n colon >= 0 && colon + 1 < description.length\n ? stripWhitespace(description.slice(colon + 1))\n : description;\n return fallbackSlug(rest);\n }\n return fallbackSlug(description);\n}\n\n// ---------------------------------------------------------------------------------------------\n// Timestamps\n// ---------------------------------------------------------------------------------------------\n\n// History rows: \"YYYY-MM-DD HH:MM:SS[.fff]\" in UTC. A zone designator is accepted and ignored.\nconst HISTORY_TIME =\n /^(\\d{4})-(\\d{2})-(\\d{2})[ T](\\d{2}):(\\d{2}):(\\d{2})(?:\\.(\\d{1,9}))?(?:Z|[+-]\\d{2}:?\\d{2})?$/;\n// Webhooks and the Management API: RFC 3339 with up to 9 fractional digits. A single trailing\n// newline is tolerated.\nconst RFC3339 =\n /^(\\d{4})-(\\d{2})-(\\d{2})T(\\d{2}):(\\d{2}):(\\d{2})(?:\\.(\\d{1,9}))?(Z|[+-]\\d{2}:\\d{2})\\n?$/;\n\nfunction isLeapYear(year: number): boolean {\n return (year % 4 === 0 && year % 100 !== 0) || year % 400 === 0;\n}\n\nfunction daysInMonth(year: number, month: number): number {\n if (month === 2) return isLeapYear(year) ? 29 : 28;\n return [4, 6, 9, 11].includes(month) ? 30 : 31;\n}\n\nfunction pad(value: number, width: number): string {\n return String(value).padStart(width, '0');\n}\n\n/**\n * Formats matched date parts as \"YYYY-MM-DDTHH:MM:SS.mmmZ\" after applying the offset. The\n * fraction is truncated to milliseconds (never rounded). Returns null for impossible dates.\n */\nfunction formatUtc(match: RegExpMatchArray, offsetMinutes: number): string | null {\n const [year, month, day, hour, minute, second] = [1, 2, 3, 4, 5, 6].map((i) =>\n Number(match[i]),\n ) as [number, number, number, number, number, number];\n if (\n year < 1 ||\n month < 1 ||\n month > 12 ||\n day < 1 ||\n day > daysInMonth(year, month) ||\n hour > 23 ||\n minute > 59 ||\n second > 59\n ) {\n return null;\n }\n const local = new Date(0);\n local.setUTCFullYear(year, month - 1, day);\n local.setUTCHours(hour, minute, second, 0);\n const utc = new Date(local.getTime() - offsetMinutes * 60_000);\n const utcYear = utc.getUTCFullYear();\n if (utcYear < 1 || utcYear > 9999) return null;\n const millis = (match[7] ?? '0').slice(0, 3).padEnd(3, '0');\n return (\n `${pad(utcYear, 4)}-${pad(utc.getUTCMonth() + 1, 2)}-${pad(utc.getUTCDate(), 2)}` +\n `T${pad(utc.getUTCHours(), 2)}:${pad(utc.getUTCMinutes(), 2)}:${pad(utc.getUTCSeconds(), 2)}` +\n `.${millis}Z`\n );\n}\n\n/** History `created_at` (\"YYYY-MM-DD HH:MM:SS[.fff]\", UTC) to RFC 3339 with milliseconds. */\nexport function parseHistoryTime(value: unknown): string | null {\n if (typeof value !== 'string') return null;\n const text = stripWhitespace(value);\n if (text === '') return null;\n const match = text.match(HISTORY_TIME);\n return match ? formatUtc(match, 0) : null;\n}\n\n/** RFC 3339 timestamp (up to 9 fractional digits, any offset) to UTC with milliseconds. */\nexport function parseRfc3339(value: unknown): string | null {\n if (typeof value !== 'string') return null;\n const match = value.match(RFC3339);\n if (!match) return null;\n const zone = match[8] ?? 'Z';\n let offsetMinutes = 0;\n if (zone !== 'Z') {\n const sign = zone.startsWith('+') ? 1 : -1;\n offsetMinutes = sign * (Number(zone.slice(1, 3)) * 60 + Number(zone.slice(4, 6)));\n }\n return formatUtc(match, offsetMinutes);\n}\n\n// ---------------------------------------------------------------------------------------------\n// Identification\n// ---------------------------------------------------------------------------------------------\n\ntype HistoryFlagKey = Exclude<FlagKey, 'browser_vpn_proxy' | 'ip_mismatch'>;\n\nconst HISTORY_FLAG_COLUMNS: Readonly<Record<HistoryFlagKey, string>> = {\n vpn: 'is_vpn',\n privacy_relay: 'is_privacy_relay',\n tor: 'is_tor',\n proxy: 'is_proxy',\n datacenter_ip: 'is_datacenter',\n abuser: 'is_abuser',\n os_mismatch: 'is_os_mismatch',\n os_not_detected: 'is_os_not_detected',\n timezone_mismatch: 'is_timezone_mismatch',\n anti_detect_browser: 'is_antidetect',\n browser_automation: 'is_browser_automation',\n incognito: 'is_incognito',\n search_bot: 'is_search_bot',\n suspicious_paid_click: 'is_suspicious_paid_click',\n javascript_disabled: 'is_js_disabled',\n stun_not_checked: 'is_stun_not_checked',\n check_incomplete: 'check_incomplete',\n};\n\n/** IP sentinel handling: trimmed, and \"0.0.0.0\" means no IP (\"\"). */\nfunction normalizeIp(value: unknown): string {\n if (typeof value !== 'string') return '';\n const ip = stripWhitespace(value);\n return ip === '0.0.0.0' ? '' : ip;\n}\n\n/** \"\" and null become null; other User HID values (including sentinels) are kept. */\nfunction normalizeUserHid(value: unknown): string | null {\n if (value === undefined || value === null || value === '') return null;\n if (typeof value === 'string') return value;\n if (typeof value === 'number' || typeof value === 'boolean') return String(value);\n return null;\n}\n\n/** Score as sent; absent means 0, a non-numeric value becomes NaN (never a valid score). */\nfunction normalizeScore(obj: JsonObject, key: string): number {\n if (!hasOwn(obj, key)) return 0;\n const value = obj[key];\n return typeof value === 'number' ? value : Number.NaN;\n}\n\n/** Parses the JSON-encoded `score_details` string. \"\" or invalid JSON gives an empty list. */\nfunction parseScoreDetails(value: unknown): unknown[] {\n const text = isTruthy(value) ? value : '[]';\n if (typeof text !== 'string') return [];\n try {\n const parsed: unknown = JSON.parse(text);\n return Array.isArray(parsed) ? parsed : [];\n } catch {\n return [];\n }\n}\n\nfunction ipInfo(value: unknown): IpInfo {\n const obj = isPlainObject(value) ? value : {};\n return { ip: normalizeIp(own(obj, 'ip')), country: stringField(obj, 'country') };\n}\n\nconst TRAFFIC_KEYS: ReadonlyArray<keyof TrafficSource> = [\n 'channel',\n 'referrer_domain',\n 'landing_url',\n 'click_id_type',\n 'utm_source',\n 'utm_medium',\n 'utm_campaign',\n 'utm_content',\n 'utm_term',\n];\n\n/** Builds an Identification from one History API row. */\nexport function fromHistoryRow(row: JsonObject): Identification {\n const leakSource = stripWhitespace(stringField(row, 'webrtc_leak_source'));\n let localIp: string;\n let localCountry: string;\n if (leakSource !== '' && leakSource !== 'none') {\n localIp = normalizeIp(own(row, 'webrtc_leak_ip'));\n localCountry = stringField(row, 'webrtc_leak_country');\n } else {\n localIp = normalizeIp(own(row, 'web_rtc_ip'));\n localCountry = stringField(row, 'web_rtc_country');\n }\n const publicIp = normalizeIp(own(row, 'ip'));\n\n const signals: IdentificationSignal[] = [];\n let ipLeakDetail = false;\n for (const entry of parseScoreDetails(own(row, 'score_details'))) {\n if (!isPlainObject(entry)) continue;\n const description = stringField(entry, 'Description');\n if (description.startsWith('IP ≠ leakIP')) ipLeakDetail = true;\n const value = own(entry, 'Value');\n if (typeof value !== 'number' || !Number.isInteger(value) || value === 0) continue;\n signals.push({ name: signalSlug(description), weight: value, description });\n }\n\n const searchBot = isTruthy(own(row, 'is_search_bot'));\n const flags = {} as DetectionFlags;\n for (const key of FLAG_KEYS) {\n if (key === 'browser_vpn_proxy') {\n flags[key] = own(row, 'connection_type') === 'browser_vpn_proxy';\n } else if (key === 'ip_mismatch') {\n flags[key] =\n !searchBot && (ipLeakDetail || (publicIp !== '' && localIp !== '' && publicIp !== localIp));\n } else {\n flags[key] = isTruthy(own(row, HISTORY_FLAG_COLUMNS[key]));\n }\n }\n\n const siteDomain = own(row, 'site_domain');\n let domain: string;\n if (isTruthy(siteDomain)) {\n domain = typeof siteDomain === 'string' ? siteDomain : '';\n } else {\n domain = stringField(row, 'domain');\n }\n\n return {\n request_id: stringField(row, 'request_id'),\n visitor_id: stringField(row, 'visitor_id'),\n device_id: stringField(row, 'device_id'),\n session_id: stringField(row, 'session_id'),\n cookie_id: stringField(row, 'cookie_id'),\n user_hid: normalizeUserHid(own(row, 'user_hid')),\n domain,\n public_ip: { ip: publicIp, country: stringField(row, 'country') },\n local_ip: { ip: localIp, country: localCountry },\n connection_type: stringField(row, 'connection_type'),\n os: stringField(row, 'os'),\n browser: stringField(row, 'browser'),\n device_type: stringField(row, 'device_type'),\n traffic_source: {\n channel: stringField(row, 'traffic_channel'),\n referrer_domain: stringField(row, 'referrer_domain'),\n landing_url: stringField(row, 'entry_url'),\n click_id_type: stringField(row, 'click_id_type'),\n utm_source: stringField(row, 'utm_source'),\n utm_medium: stringField(row, 'utm_medium'),\n utm_campaign: stringField(row, 'utm_campaign'),\n utm_content: stringField(row, 'utm_content'),\n utm_term: stringField(row, 'utm_term'),\n },\n risk_score: normalizeScore(row, 'score'),\n signals,\n detection_flags: flags,\n observed_at: parseHistoryTime(own(row, 'created_at')),\n source: 'history',\n raw: row,\n };\n}\n\n/** Builds an Identification from the `data` object of an `identification.scored` webhook. */\nexport function fromWebhookData(data: JsonObject): Identification {\n const rawFlags = own(data, 'detection_flags');\n const flagSource = isPlainObject(rawFlags) ? rawFlags : {};\n const flags = {} as DetectionFlags;\n for (const key of FLAG_KEYS) flags[key] = isTruthy(own(flagSource, key));\n\n const rawTraffic = own(data, 'traffic_source');\n const trafficSource = isPlainObject(rawTraffic) ? rawTraffic : {};\n const traffic = {} as TrafficSource;\n for (const key of TRAFFIC_KEYS) traffic[key] = stringField(trafficSource, key);\n\n const rawSignals = own(data, 'signals');\n const signals: IdentificationSignal[] = Array.isArray(rawSignals)\n ? rawSignals.filter(isPlainObject).map((signal) => {\n const weight = own(signal, 'weight');\n return {\n name: stringField(signal, 'name'),\n weight: typeof weight === 'number' ? weight : 0,\n description: null,\n };\n })\n : [];\n\n return {\n request_id: stringField(data, 'request_id'),\n visitor_id: stringField(data, 'visitor_id'),\n device_id: stringField(data, 'device_id'),\n session_id: stringField(data, 'session_id'),\n cookie_id: stringField(data, 'cookie_id'),\n user_hid: normalizeUserHid(own(data, 'user_hid')),\n domain: stringField(data, 'domain'),\n public_ip: ipInfo(own(data, 'public_ip')),\n local_ip: ipInfo(own(data, 'local_ip')),\n connection_type: stringField(data, 'connection_type'),\n os: stringField(data, 'os'),\n browser: stringField(data, 'browser'),\n device_type: stringField(data, 'device_type'),\n traffic_source: traffic,\n risk_score: normalizeScore(data, 'risk_score'),\n signals,\n detection_flags: flags,\n observed_at: parseRfc3339(own(data, 'observed_at')),\n source: 'webhook',\n raw: data,\n };\n}\n\n/** Builds a DomainProfile from a Management API profile response (PascalCase keys). */\nexport function profileFromResponse(body: JsonObject): DomainProfile {\n const weight = own(body, 'Weight');\n return {\n domain: stringField(body, 'Domain'),\n remaining_identifications: typeof weight === 'number' && Number.isFinite(weight) ? weight : 0,\n public_key_masked: stringField(body, 'PublicKey'),\n secret_key_masked: stringField(body, 'Secret'),\n created_at: parseRfc3339(own(body, 'CreatedAt')),\n raw: body,\n };\n}\n","/** Version of this SDK. Sent in the User-Agent header of every request. */\nexport const VERSION = '1.0.0';\n","import { VERSION } from './version.js';\n\ninterface RuntimeGlobals {\n Bun?: { version?: unknown };\n Deno?: { version?: { deno?: unknown } };\n EdgeRuntime?: unknown;\n navigator?: { userAgent?: unknown };\n process?: { versions?: { node?: unknown } };\n}\n\nexport function detectRuntime(): string | null {\n const g = globalThis as unknown as RuntimeGlobals;\n if (typeof g.Bun?.version === 'string') return `bun/${g.Bun.version}`;\n if (typeof g.Deno?.version?.deno === 'string') return `deno/${g.Deno.version.deno}`;\n if (typeof g.EdgeRuntime === 'string') return 'edge-runtime';\n if (g.navigator?.userAgent === 'Cloudflare-Workers') return 'workerd';\n if (typeof g.process?.versions?.node === 'string') return `node/${g.process.versions.node}`;\n return null;\n}\n\nlet cachedUserAgent: string | undefined;\n\n/** \"shieldlabs-node/<version>\" followed by the runtime, for example \"node/20.11.1\". */\nexport function userAgent(): string {\n if (cachedUserAgent === undefined) {\n const runtime = detectRuntime();\n cachedUserAgent = runtime\n ? `shieldlabs-node/${VERSION} ${runtime}`\n : `shieldlabs-node/${VERSION}`;\n }\n return cachedUserAgent;\n}\n\n/** The reason an aborted signal carries, or a generic AbortError. */\nexport function abortReason(signal: AbortSignal): unknown {\n if (signal.reason !== undefined) return signal.reason;\n const error = new Error('The operation was aborted.');\n error.name = 'AbortError';\n return error;\n}\n\nexport function throwIfAborted(signal: AbortSignal | undefined): void {\n if (signal?.aborted) throw abortReason(signal);\n}\n\n/** Longest delay of one timer: runtimes fire a timer with a longer delay almost at once. */\nconst MAX_TIMER_DELAY_MS = 2_147_483_647;\n\n/** Waits `ms` milliseconds; rejects with the abort reason as soon as `signal` aborts. */\nexport function sleep(ms: number, signal?: AbortSignal): Promise<void> {\n return new Promise((resolve, reject) => {\n if (signal?.aborted) {\n reject(abortReason(signal));\n return;\n }\n let timer: ReturnType<typeof setTimeout> | undefined;\n const onAbort = (): void => {\n clearTimeout(timer);\n reject(abortReason(signal as AbortSignal));\n };\n // A wait longer than one timer allows runs as a chain of timers.\n const wait = (left: number): void => {\n timer = setTimeout(\n () => {\n if (left > MAX_TIMER_DELAY_MS) {\n wait(left - MAX_TIMER_DELAY_MS);\n return;\n }\n signal?.removeEventListener('abort', onAbort);\n resolve();\n },\n Math.min(left, MAX_TIMER_DELAY_MS),\n );\n };\n wait(ms);\n signal?.addEventListener('abort', onAbort, { once: true });\n });\n}\n\nconst warned = new Set<string>();\nconst MAX_WARNINGS = 32;\n\n/** Prints a warning once per process for each key. Never include secrets in `message`. */\nexport function warnOnce(key: string, message: string): void {\n if (warned.has(key) || warned.size >= MAX_WARNINGS) return;\n warned.add(key);\n console.warn(`[shieldlabs] ${message}`);\n}\n\n/**\n * Warns once when a client is created in a web page (a global window with a document), where its\n * key is visible to every visitor. Servers, workers and edge runtimes stay silent.\n */\nexport function warnIfBrowserPage(client: string, key: string): void {\n const g = globalThis as { window?: unknown; document?: unknown };\n if (g.window !== undefined && g.document !== undefined) {\n warnOnce(\n `browser-page:${client}`,\n `${client} was created in a web page, where its ${key} is visible to every visitor. Use @shieldlabs-ai/node on your server only; in the page, use the browser SDK (@shieldlabs-ai/js).`,\n );\n }\n}\n\n/** Test hook: forget which warnings were printed. */\nexport function resetWarnings(): void {\n warned.clear();\n}\n","import { KNOWN_SCHEMA_VERSION } from './constants.js';\nimport {\n ShieldLabsError,\n SignatureVerificationError,\n ValidationError,\n WebhookParseError,\n} from './errors.js';\nimport { fromWebhookData, isPlainObject } from './normalize.js';\nimport { warnOnce } from './runtime.js';\nimport type {\n SignatureHeader,\n UnknownEventType,\n WebhookEvent,\n WebhookPayload,\n WebhookSecret,\n} from './types.js';\n\n/** Webhook signature verification and typed event parsing. */\nexport interface Webhooks {\n /**\n * True when `signatureHeader` (X-Shield-Signature) is a valid signature of `payload` for any\n * of the given secrets. Returns false for a malformed header, an empty secret or a payload that\n * is not raw bytes or a string. Needs node:crypto: in edge runtimes use `verifySignatureAsync`.\n */\n verifySignature(\n payload: WebhookPayload,\n signatureHeader: SignatureHeader,\n secret: WebhookSecret,\n ): boolean;\n /**\n * Verifies the signature, then parses the body into a typed event.\n * Throws SignatureVerificationError or WebhookParseError.\n * Needs node:crypto: in edge runtimes use `constructEventAsync`.\n */\n constructEvent(\n payload: WebhookPayload,\n signatureHeader: SignatureHeader,\n secret: WebhookSecret,\n ): WebhookEvent;\n /** Same as `verifySignature`, using WebCrypto where node:crypto is not available. */\n verifySignatureAsync(\n payload: WebhookPayload,\n signatureHeader: SignatureHeader,\n secret: WebhookSecret,\n ): Promise<boolean>;\n /** Same as `constructEvent`, using WebCrypto where node:crypto is not available. */\n constructEventAsync(\n payload: WebhookPayload,\n signatureHeader: SignatureHeader,\n secret: WebhookSecret,\n ): Promise<WebhookEvent>;\n}\n\n/** HMAC-SHA256 over `message` with the UTF-8 bytes of `key`. */\nexport type HmacSync = (key: string, message: Uint8Array) => Uint8Array;\nexport type HmacAsync = (key: string, message: Uint8Array) => Promise<Uint8Array>;\n\nexport interface CryptoBackend {\n /** Synchronous HMAC, or null where node:crypto is not loaded. */\n hmacSync: HmacSync | null;\n hmacAsync: HmacAsync;\n /** Constant-time comparison of two digests. */\n equal?: (a: Uint8Array, b: Uint8Array) => boolean;\n}\n\nconst SIGNATURE_PREFIX = 'sha256=';\nconst HEX_DIGEST = /^[0-9a-fA-F]{64}$/;\nconst MISMATCH =\n 'The webhook signature does not match the payload. Check the endpoint signing secret (including its whsec_ prefix) and verify the raw body bytes, not re-serialized JSON.';\n\nconst encoder = new TextEncoder();\n\n/** Lowercase hex digest from an X-Shield-Signature header value, or null when malformed. */\nexport function parseSignatureHeader(header: unknown): string | null {\n let value = header;\n if (Array.isArray(value)) {\n if (value.length !== 1) return null;\n value = value[0];\n }\n if (typeof value !== 'string') return null;\n const trimmed = value.trim();\n if (!trimmed.startsWith(SIGNATURE_PREFIX)) return null;\n const digest = trimmed.slice(SIGNATURE_PREFIX.length);\n return HEX_DIGEST.test(digest) ? digest.toLowerCase() : null;\n}\n\n/** The non-empty secrets of one secret or a list of secrets. */\nexport function secretList(secret: unknown): string[] {\n const list: unknown[] = Array.isArray(secret) ? secret : [secret];\n return list.filter((item): item is string => typeof item === 'string' && item !== '');\n}\n\nfunction isArrayBuffer(value: unknown): value is ArrayBuffer {\n return (\n value instanceof ArrayBuffer || Object.prototype.toString.call(value) === '[object ArrayBuffer]'\n );\n}\n\n/** The payload as bytes, or null when it is neither a string nor binary data. */\nexport function payloadBytes(payload: unknown): Uint8Array | null {\n if (typeof payload === 'string') return encoder.encode(payload);\n if (payload instanceof Uint8Array) return payload;\n if (ArrayBuffer.isView(payload)) {\n return new Uint8Array(payload.buffer, payload.byteOffset, payload.byteLength);\n }\n if (isArrayBuffer(payload)) return new Uint8Array(payload);\n return null;\n}\n\nexport function hexToBytes(hex: string): Uint8Array {\n const bytes = new Uint8Array(hex.length / 2);\n for (let i = 0; i < bytes.length; i++) {\n bytes[i] = Number.parseInt(hex.slice(i * 2, i * 2 + 2), 16);\n }\n return bytes;\n}\n\nexport function bytesToHex(bytes: Uint8Array): string {\n let hex = '';\n for (const byte of bytes) hex += byte.toString(16).padStart(2, '0');\n return hex;\n}\n\n/** Compares two byte arrays without an early exit. */\nexport function constantTimeEqual(a: Uint8Array, b: Uint8Array): boolean {\n if (a.length !== b.length) return false;\n let diff = 0;\n for (let i = 0; i < a.length; i++) diff |= (a[i] as number) ^ (b[i] as number);\n return diff === 0;\n}\n\ntype Prepared =\n | { ok: true; bytes: Uint8Array; expected: Uint8Array; secrets: string[] }\n | { ok: false; reason: string };\n\nfunction prepare(payload: unknown, header: unknown, secret: unknown): Prepared {\n const bytes = payloadBytes(payload);\n if (bytes === null) {\n return {\n ok: false,\n reason:\n 'The payload must be the raw request body (a string, Uint8Array or ArrayBuffer). A parsed object cannot be verified because re-serializing changes the bytes.',\n };\n }\n const digest = parseSignatureHeader(header);\n if (digest === null) {\n return {\n ok: false,\n reason:\n 'The X-Shield-Signature header is missing or malformed (expected sha256=<64 hex characters>).',\n };\n }\n const secrets = secretList(secret);\n if (secrets.length === 0) {\n return { ok: false, reason: 'No webhook signing secret was provided.' };\n }\n return { ok: true, bytes, expected: hexToBytes(digest), secrets };\n}\n\nconst decoder = new TextDecoder('utf-8');\n\nfunction preview(text: string): string {\n return text.length > 40 ? `${text.slice(0, 37)}...` : text;\n}\n\n/** Parses verified webhook bytes into a typed event. */\nexport function parseEvent(bytes: Uint8Array): WebhookEvent {\n const text = decoder.decode(bytes);\n let parsed: unknown;\n try {\n parsed = JSON.parse(text);\n } catch (error) {\n throw new WebhookParseError('The webhook body is not valid JSON.', { cause: error });\n }\n if (!isPlainObject(parsed)) {\n throw new WebhookParseError('The webhook body is not a JSON object.');\n }\n const eventType = parsed.event_type;\n if (typeof eventType !== 'string' || eventType === '') {\n throw new WebhookParseError('The webhook body has no event_type.');\n }\n const schemaVersion = typeof parsed.schema_version === 'string' ? parsed.schema_version : '';\n const createdAt = typeof parsed.created_at === 'string' ? parsed.created_at : '';\n if (schemaVersion !== KNOWN_SCHEMA_VERSION) {\n warnOnce(\n `schema-version:${schemaVersion}`,\n `Received a webhook with schema_version \"${preview(schemaVersion)}\" while this SDK version targets \"${KNOWN_SCHEMA_VERSION}\". The event was parsed; update @shieldlabs-ai/node for typed support of newer fields.`,\n );\n }\n if (eventType === 'identification.scored') {\n if (!isPlainObject(parsed.data)) {\n throw new WebhookParseError('The identification.scored event has no data object.');\n }\n return {\n event_type: 'identification.scored',\n schema_version: schemaVersion,\n created_at: createdAt,\n data: fromWebhookData(parsed.data),\n raw: parsed,\n };\n }\n if (eventType === 'webhook.ping') {\n return {\n event_type: 'webhook.ping',\n schema_version: schemaVersion,\n created_at: createdAt,\n raw: parsed,\n };\n }\n return {\n event_type: eventType as UnknownEventType,\n schema_version: schemaVersion,\n created_at: createdAt,\n raw: parsed,\n };\n}\n\nexport function syncUnavailable(fn: string, alternative: string): ShieldLabsError {\n return new ShieldLabsError(\n `${fn}() is synchronous and needs node:crypto, which the edge build of @shieldlabs-ai/node does not load. Use await ${alternative}() instead.`,\n );\n}\n\n/** Builds the `webhooks` helpers on top of a crypto backend. */\nexport function createWebhooks(backend: CryptoBackend): Webhooks {\n const equal = backend.equal ?? constantTimeEqual;\n\n function verifySync(\n payload: unknown,\n header: unknown,\n secret: unknown,\n hmac: HmacSync,\n ): Prepared {\n const prepared = prepare(payload, header, secret);\n if (!prepared.ok) return prepared;\n for (const key of prepared.secrets) {\n if (equal(hmac(key, prepared.bytes), prepared.expected)) return prepared;\n }\n return { ok: false, reason: MISMATCH };\n }\n\n async function verifyAsync(\n payload: unknown,\n header: unknown,\n secret: unknown,\n ): Promise<Prepared> {\n const prepared = prepare(payload, header, secret);\n if (!prepared.ok) return prepared;\n for (const key of prepared.secrets) {\n if (equal(await backend.hmacAsync(key, prepared.bytes), prepared.expected)) return prepared;\n }\n return { ok: false, reason: MISMATCH };\n }\n\n function requireSync(fn: string, alternative: string): HmacSync {\n if (backend.hmacSync === null) throw syncUnavailable(fn, alternative);\n return backend.hmacSync;\n }\n\n return Object.freeze({\n verifySignature(\n payload: WebhookPayload,\n signatureHeader: SignatureHeader,\n secret: WebhookSecret,\n ): boolean {\n const hmac = requireSync('webhooks.verifySignature', 'webhooks.verifySignatureAsync');\n return verifySync(payload, signatureHeader, secret, hmac).ok;\n },\n constructEvent(\n payload: WebhookPayload,\n signatureHeader: SignatureHeader,\n secret: WebhookSecret,\n ): WebhookEvent {\n const hmac = requireSync('webhooks.constructEvent', 'webhooks.constructEventAsync');\n const result = verifySync(payload, signatureHeader, secret, hmac);\n if (!result.ok) throw new SignatureVerificationError(result.reason);\n return parseEvent(result.bytes);\n },\n async verifySignatureAsync(\n payload: WebhookPayload,\n signatureHeader: SignatureHeader,\n secret: WebhookSecret,\n ): Promise<boolean> {\n return (await verifyAsync(payload, signatureHeader, secret)).ok;\n },\n async constructEventAsync(\n payload: WebhookPayload,\n signatureHeader: SignatureHeader,\n secret: WebhookSecret,\n ): Promise<WebhookEvent> {\n const result = await verifyAsync(payload, signatureHeader, secret);\n if (!result.ok) throw new SignatureVerificationError(result.reason);\n return parseEvent(result.bytes);\n },\n });\n}\n\nfunction validateUserHidInput(userId: unknown, secret: unknown): void {\n if (typeof userId !== 'string' || userId === '') {\n throw new ValidationError('userId must be a non-empty string.');\n }\n if (typeof secret !== 'string' || secret === '') {\n throw new ValidationError('secret must be a non-empty string.');\n }\n}\n\n/** HMAC-SHA256(key = secret, message = userId) as 64 lowercase hex characters. */\nexport function computeUserHid(backend: CryptoBackend, userId: string, secret: string): string {\n if (backend.hmacSync === null) throw syncUnavailable('userHid', 'userHidAsync');\n validateUserHidInput(userId, secret);\n return bytesToHex(backend.hmacSync(secret, encoder.encode(userId)));\n}\n\nexport async function computeUserHidAsync(\n backend: CryptoBackend,\n userId: string,\n secret: string,\n): Promise<string> {\n validateUserHidInput(userId, secret);\n return bytesToHex(await backend.hmacAsync(secret, encoder.encode(userId)));\n}\n","import {\n ApiError,\n AuthenticationError,\n BadRequestError,\n ConnectionError,\n NotFoundError,\n QuotaExceededError,\n RateLimitError,\n ServerError,\n ShieldLabsError,\n TimeoutError,\n ValidationError,\n type ApiErrorOptions,\n type HeadersLike,\n} from './errors.js';\nimport { isPlainObject } from './normalize.js';\nimport { abortReason, sleep, throwIfAborted, userAgent, warnOnce } from './runtime.js';\nimport type { FetchLike, FetchResponseLike } from './types.js';\n\nexport const BACKOFF_BASE_MS = 500;\nexport const BACKOFF_CAP_MS = 8_000;\nexport const RETRY_AFTER_CAP_MS = 10_000;\n/**\n * Shortest wait after a History 429 (the limit resets every second): after any 429 inside the wait\n * of `identifications.get`, and before retrying an ordinary request whose 429 had no Retry-After.\n * An ordinary request with Retry-After waits as long as it says, capped at RETRY_AFTER_CAP_MS.\n */\nexport const RATE_LIMIT_FLOOR_MS = 1_000;\nconst MAX_DETAIL_LENGTH = 200;\n\nexport type ApiName = 'History API' | 'Management API';\n\nexport interface TransportOptions {\n apiName: ApiName;\n /** Normalized base URL without a trailing slash. */\n baseUrl: string;\n /** Credential headers sent with every request. */\n headers: Record<string, string>;\n /** Credentials that must never appear in an error message or cause. */\n secrets: readonly string[];\n /** Per-attempt timeout in milliseconds. */\n timeout: number;\n maxRetries: number;\n /** False for the Management API: a 429 there starts a 10-minute block, so it is never retried. */\n retryRateLimited: boolean;\n fetch: FetchLike | undefined;\n}\n\nexport interface RequestOptions {\n query?: Record<string, string> | undefined;\n signal?: AbortSignal | undefined;\n /** Overrides the transport's maxRetries for this call. */\n maxRetries?: number | undefined;\n /** Caps the attempt timeout of this call in milliseconds; the client timeout still applies. */\n timeout?: number | undefined;\n}\n\nexport interface JsonResponse {\n body: unknown;\n status: number;\n headers: HeadersLike;\n}\n\n/** Loopback hosts, as the URL parser normalizes them. */\nexport function isLoopbackHost(hostname: string): boolean {\n return (\n hostname === 'localhost' ||\n hostname.endsWith('.localhost') ||\n hostname === '[::1]' ||\n /^127\\.\\d{1,3}\\.\\d{1,3}\\.\\d{1,3}$/.test(hostname)\n );\n}\n\n/**\n * Normalizes a base URL: https origin plus an optional path prefix, no trailing slash. Plain http\n * is accepted for loopback hosts, and for other hosts only with `allowInsecureHttp`.\n * With `stripApiSuffix`, a trailing \"/api\" is removed so paths never become \"/api/api/...\".\n */\nexport function normalizeBaseUrl(\n input: unknown,\n name: string,\n stripApiSuffix: boolean,\n allowInsecureHttp = false,\n): string {\n if (typeof input !== 'string' || input.trim() === '') {\n throw new ValidationError(`${name} must be a non-empty URL.`);\n }\n let url: URL;\n try {\n url = new URL(input.trim());\n } catch {\n throw new ValidationError(`${name} is not a valid URL.`);\n }\n if (url.protocol !== 'https:' && url.protocol !== 'http:') {\n throw new ValidationError(`${name} must be an https URL.`);\n }\n if (url.username !== '' || url.password !== '') {\n throw new ValidationError(`${name} must not contain credentials.`);\n }\n if (url.search !== '' || url.hash !== '') {\n throw new ValidationError(`${name} must not contain a query string or a fragment.`);\n }\n if (url.protocol === 'http:' && !isLoopbackHost(url.hostname)) {\n if (!allowInsecureHttp) {\n throw new ValidationError(\n `${name} must be an https URL: with plain http the key would travel unencrypted. Plain http is accepted for localhost, 127.0.0.1 and [::1]; for a test server on another host, pass allowInsecureHttp: true.`,\n );\n }\n warnOnce(\n `insecure-base-url:${url.origin}`,\n `${name} uses plain http, so credentials travel unencrypted. Use https outside local testing.`,\n );\n }\n let path = url.pathname.replace(/\\/+$/, '');\n if (stripApiSuffix && /\\/api$/i.test(path)) path = path.slice(0, -4).replace(/\\/+$/, '');\n return `${url.origin}${path}`;\n}\n\n/** Parses a Retry-After header (delta seconds or an HTTP date) into seconds. */\nexport function parseRetryAfter(\n value: string | null | undefined,\n nowMs = Date.now(),\n): number | undefined {\n if (value === null || value === undefined) return undefined;\n const text = value.trim();\n if (/^\\d+(?:\\.\\d+)?$/.test(text)) return Number(text);\n // HTTP dates always name the weekday and month (\"Wed, 30 Sep 2026 12:00:30 GMT\").\n if (!/[a-z]{3}/i.test(text)) return undefined;\n const date = Date.parse(text);\n if (Number.isNaN(date)) return undefined;\n return Math.max(0, Math.ceil((date - nowMs) / 1000));\n}\n\nfunction truncate(text: string): string {\n return text.length > MAX_DETAIL_LENGTH ? `${text.slice(0, MAX_DETAIL_LENGTH - 3)}...` : text;\n}\n\nfunction errorDetail(body: unknown, parsedJson: boolean, text: string): string | undefined {\n if (parsedJson) {\n if (isPlainObject(body) && typeof body.error === 'string' && body.error !== '') {\n return truncate(body.error);\n }\n if (typeof body === 'string' && body !== '') return truncate(body);\n return undefined;\n }\n const trimmed = text.trim();\n if (trimmed === '' || trimmed.startsWith('<')) return undefined;\n return truncate(trimmed);\n}\n\nfunction hintFor(apiName: ApiName, status: number): string {\n if (status === 401 || status === 403) {\n return apiName === 'History API'\n ? ' Check that apiKey is the Private API Key (sec_...) of this domain.'\n : ' Check the Secret Key and that domain matches the registered domain exactly.';\n }\n if (status === 404) return ' Check the base URL.';\n if (status === 429 && apiName === 'Management API') {\n return ' The Management API allows about 15 requests per minute per IP, then blocks the IP for 10 minutes.';\n }\n return '';\n}\n\n/** Maps an error response to the matching error class. Never throws. */\nexport function createApiError(\n apiName: ApiName,\n status: number,\n text: string,\n headers: HeadersLike,\n): ApiError {\n let body: unknown = null;\n let parsedJson = false;\n if (text !== '') {\n try {\n body = JSON.parse(text);\n parsedJson = true;\n } catch {\n body = text;\n }\n }\n const detail = errorDetail(body, parsedJson, text);\n const message = `${apiName} request failed with HTTP ${status}${detail ? ` (${detail})` : ''}.${hintFor(apiName, status)}`;\n const options: ApiErrorOptions = { status, body, headers };\n if (status === 400) return new BadRequestError(message, options);\n if (status === 401 || status === 403) return new AuthenticationError(message, options);\n if (status === 402) return new QuotaExceededError(message, options);\n if (status === 404) return new NotFoundError(message, options);\n if (status === 429) {\n let retryAfter: number | undefined;\n try {\n retryAfter = parseRetryAfter(headers.get('retry-after'));\n } catch {\n retryAfter = undefined;\n }\n return new RateLimitError(message, { ...options, retryAfter });\n }\n if (status >= 500 && status <= 599) return new ServerError(message, options);\n return new ApiError(message, options);\n}\n\nfunction messageOf(error: unknown): string {\n return error instanceof Error && error.message ? error.message : String(error);\n}\n\n/**\n * The network cause behind a failed fetch, for example \" (connect ECONNREFUSED 192.0.2.1:443)\":\n * runtimes wrap it in a generic \"fetch failed\" error.\n */\nfunction causeDetail(error: unknown): string {\n const cause = error instanceof Error ? error.cause : undefined;\n if (typeof cause !== 'object' || cause === null) return '';\n const { code, message } = cause as { code?: unknown; message?: unknown };\n const codeText = typeof code === 'string' ? code : '';\n const text = typeof message === 'string' ? message.trim() : '';\n if (text !== '' && codeText !== '' && !text.includes(codeText)) {\n return ` (${codeText}: ${truncate(text)})`;\n }\n if (text !== '') return ` (${truncate(text)})`;\n return codeText === '' ? '' : ` (${codeText})`;\n}\n\n/** Text an error and its causes can print: messages, stacks and their own string properties. */\nfunction printableTexts(error: unknown): string[] {\n const texts: string[] = [];\n let current: unknown = error;\n for (let depth = 0; depth < 5 && current !== undefined && current !== null; depth++) {\n if (typeof current !== 'object') {\n if (typeof current === 'string') texts.push(current);\n break;\n }\n const { message, stack } = current as { message?: unknown; stack?: unknown };\n if (typeof message === 'string') texts.push(message);\n if (typeof stack === 'string') texts.push(stack);\n try {\n texts.push(JSON.stringify(current) ?? '');\n } catch {\n // Circular or otherwise unserializable: the message and stack above still count.\n }\n current = (current as { cause?: unknown }).cause;\n }\n return texts;\n}\n\nfunction mentionsSecret(texts: readonly string[], secrets: readonly string[]): boolean {\n return secrets.some((secret) => secret !== '' && texts.some((text) => text.includes(secret)));\n}\n\n/** Resolves when `promise` settles, or rejects as soon as `signal` aborts (even if `promise` never settles). */\nfunction raceWithAbort<T>(promise: Promise<T>, signal: AbortSignal): Promise<T> {\n return new Promise<T>((resolve, reject) => {\n if (signal.aborted) {\n reject(abortReason(signal));\n return;\n }\n const onAbort = (): void => reject(abortReason(signal));\n signal.addEventListener('abort', onAbort, { once: true });\n promise.then(\n (value) => {\n signal.removeEventListener('abort', onAbort);\n resolve(value);\n },\n (error: unknown) => {\n signal.removeEventListener('abort', onAbort);\n reject(error instanceof Error ? error : new Error(String(error)));\n },\n );\n });\n}\n\nfunction globalFetch(): FetchLike {\n const candidate = (globalThis as { fetch?: unknown }).fetch;\n if (typeof candidate !== 'function') {\n throw new ValidationError(\n 'No fetch implementation is available. Use Node.js 18 or later, or pass the fetch option.',\n );\n }\n const fetchFn = candidate as FetchLike;\n return (url, init) => fetchFn.call(globalThis, url, init);\n}\n\n/** Sends GET requests with timeouts, retries and error mapping. Safe for concurrent use. */\nexport class Transport {\n readonly #options: TransportOptions;\n\n constructor(options: TransportOptions) {\n this.#options = options;\n }\n\n /** The client's per-attempt timeout in milliseconds. */\n get timeout(): number {\n return this.#options.timeout;\n }\n\n async getJson(path: string, options: RequestOptions = {}): Promise<JsonResponse> {\n const maxRetries = options.maxRetries ?? this.#options.maxRetries;\n let url = `${this.#options.baseUrl}${path}`;\n if (options.query) url += `?${new URLSearchParams(options.query).toString()}`;\n for (let attempt = 0; ; attempt++) {\n throwIfAborted(options.signal);\n try {\n return await this.#attempt(url, options.signal, options.timeout);\n } catch (error) {\n if (attempt >= maxRetries || !this.#isRetryable(error)) throw error;\n await sleep(this.#retryDelay(error, attempt), options.signal);\n }\n }\n }\n\n #isRetryable(error: unknown): boolean {\n if (error instanceof ConnectionError || error instanceof TimeoutError) return true;\n if (error instanceof RateLimitError) return this.#options.retryRateLimited;\n return error instanceof ServerError;\n }\n\n #retryDelay(error: unknown, attempt: number): number {\n if (error instanceof ApiError) {\n const retryAfter =\n error instanceof RateLimitError\n ? error.retryAfter\n : parseRetryAfter(error.headers.get('retry-after'));\n if (retryAfter !== undefined) return Math.min(retryAfter * 1000, RETRY_AFTER_CAP_MS);\n }\n const nominal = Math.min(BACKOFF_CAP_MS, BACKOFF_BASE_MS * 2 ** attempt);\n const delay = nominal / 2 + Math.random() * (nominal / 2);\n return error instanceof RateLimitError ? Math.max(delay, RATE_LIMIT_FLOOR_MS) : delay;\n }\n\n #connectionError(error: unknown): ConnectionError {\n const { apiName, secrets } = this.#options;\n const message = `${apiName} request failed: ${messageOf(error)}${causeDetail(error)}`;\n if (mentionsSecret([message, ...printableTexts(error)], secrets)) {\n // For example a runtime error that echoes a header value: keep it out of logs entirely.\n return new ConnectionError(\n `${apiName} request failed before a response was received. The underlying error was withheld because it contained a credential.`,\n );\n }\n return new ConnectionError(message, { cause: error });\n }\n\n async #attempt(\n url: string,\n signal: AbortSignal | undefined,\n timeoutCap: number | undefined,\n ): Promise<JsonResponse> {\n const { apiName } = this.#options;\n const timeout = Math.min(this.#options.timeout, timeoutCap ?? Number.POSITIVE_INFINITY);\n const fetchImpl = this.#options.fetch ?? globalFetch();\n const controller = new AbortController();\n let timedOut = false;\n const timer = setTimeout(() => {\n timedOut = true;\n controller.abort();\n }, timeout);\n const onAbort = (): void => controller.abort();\n signal?.addEventListener('abort', onAbort, { once: true });\n\n let response: FetchResponseLike;\n let text: string;\n try {\n const init = {\n method: 'GET' as const,\n headers: {\n Accept: 'application/json',\n 'User-Agent': userAgent(),\n ...this.#options.headers,\n },\n signal: controller.signal,\n };\n response = await raceWithAbort(\n Promise.resolve().then(() => fetchImpl(url, init)),\n controller.signal,\n );\n text = await raceWithAbort(\n Promise.resolve().then(() => response.text()),\n controller.signal,\n );\n } catch (error) {\n if (signal?.aborted) throw abortReason(signal);\n if (timedOut) {\n throw new TimeoutError(`${apiName} request timed out after ${timeout} ms.`, {\n cause: error,\n });\n }\n if (error instanceof ShieldLabsError) throw error;\n throw this.#connectionError(error);\n } finally {\n clearTimeout(timer);\n signal?.removeEventListener('abort', onAbort);\n }\n\n const { status, headers } = response;\n if (status >= 200 && status < 300) {\n try {\n return { body: JSON.parse(text) as unknown, status, headers };\n } catch (error) {\n throw new ApiError(\n `${apiName} returned a response that is not valid JSON (HTTP ${status}).`,\n {\n status,\n body: text,\n headers,\n cause: error,\n },\n );\n }\n }\n throw createApiError(apiName, status, text, headers);\n }\n}\n","import { LOOKUP_TYPES } from './constants.js';\nimport { ValidationError } from './errors.js';\nimport type { LookupType } from './types.js';\n\nconst UUID = /^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$/;\nconst IPV4_OCTET = '(?:25[0-5]|2[0-4]\\\\d|1\\\\d\\\\d|[1-9]?\\\\d)';\nconst IPV4 = new RegExp(`^${IPV4_OCTET}(?:\\\\.${IPV4_OCTET}){3}$`);\n\nexport interface Lookup {\n type: LookupType;\n value: string;\n /** The value escaped as one URL path segment. */\n segment: string;\n}\n\nfunction describe(value: unknown): string {\n const text = typeof value === 'string' ? JSON.stringify(value) : String(value);\n return text.length > 40 ? `${text.slice(0, 37)}...` : text;\n}\n\n// Escapes that canonical path escaping leaves as plain characters: $ & + , : ; = @\nconst PLAIN_IN_PATH = /%(?:24|26|2B|2C|3A|3B|3D|40)/g;\n// Characters encodeURIComponent leaves as they are but canonical path escaping escapes.\nconst ESCAPED_IN_PATH = /[!'()*]/g;\n\n/**\n * Escapes a User HID as one URL path segment in canonical form: A-Z, a-z, 0-9, \"-\", \".\", \"_\",\n * \"~\" and $ & + , : ; = @ stay as they are, every other character becomes uppercase %XX of its\n * UTF-8 bytes. The History API decodes the value only when the path is escaped exactly this way\n * and otherwise compares the escaped text, which finds nothing.\n */\nexport function encodePathSegment(value: string): string {\n let escaped: string;\n try {\n escaped = encodeURIComponent(value);\n } catch {\n throw new ValidationError(\n 'user_hid must be valid Unicode text (it has an unpaired surrogate).',\n );\n }\n return escaped\n .replace(PLAIN_IN_PATH, (match) => decodeURIComponent(match))\n .replace(ESCAPED_IN_PATH, (char) => `%${char.charCodeAt(0).toString(16).toUpperCase()}`);\n}\n\n/**\n * Validates a History lookup before anything is sent. The server does not validate: an unknown\n * type returns unfiltered rows and a malformed UUID or IP returns a 500.\n */\nexport function validateLookup(type: unknown, value: unknown): Lookup {\n if (typeof type !== 'string' || !LOOKUP_TYPES.includes(type as LookupType)) {\n throw new ValidationError(\n `Unknown lookup type ${describe(type)}. Use one of: ${LOOKUP_TYPES.join(', ')}.`,\n );\n }\n const lookupType = type as LookupType;\n if (typeof value !== 'string') {\n throw new ValidationError(`The ${lookupType} value must be a string.`);\n }\n if (lookupType === 'user_hid') {\n if (value === '') throw new ValidationError('user_hid must be a non-empty string.');\n if (value === '.' || value === '..') {\n throw new ValidationError(\n 'user_hid cannot be \".\" or \"..\": a URL path segment cannot carry it.',\n );\n }\n if (value.includes('/')) {\n throw new ValidationError(\n 'user_hid cannot contain \"/\": the History API cannot search a value with a slash. Use URL-safe User HIDs, such as the 64 hex characters of userHid().',\n );\n }\n return { type: lookupType, value, segment: encodePathSegment(value) };\n }\n if (lookupType === 'ip') {\n if (value.includes(':')) {\n throw new ValidationError(\n 'IPv6 addresses cannot be searched: the History API stores IPv4 addresses only.',\n );\n }\n if (!IPV4.test(value)) {\n throw new ValidationError('ip must be a dotted IPv4 address such as 203.0.113.24.');\n }\n return { type: lookupType, value, segment: value };\n }\n if (!UUID.test(value)) {\n throw new ValidationError(`${lookupType} must be a UUID (8-4-4-4-12 hexadecimal digits).`);\n }\n const uuid = value.toLowerCase();\n return { type: lookupType, value: uuid, segment: uuid };\n}\n\n/** A request ID must be a UUID; it is sent lowercase. */\nexport function validateRequestId(requestId: unknown): string {\n if (typeof requestId !== 'string' || !UUID.test(requestId)) {\n throw new ValidationError('requestId must be a UUID (8-4-4-4-12 hexadecimal digits).');\n }\n return requestId.toLowerCase();\n}\n\n/** A boolean option. */\nexport function validateBoolean(value: unknown, name: string): boolean {\n if (typeof value !== 'boolean') throw new ValidationError(`${name} must be a boolean.`);\n return value;\n}\n\n/** Integer page size from 1 to 100 (the server silently turns other values into 20). */\nexport function validatePageSize(value: unknown, name: string): number {\n if (typeof value !== 'number' || !Number.isInteger(value) || value < 1 || value > 100) {\n throw new ValidationError(`${name} must be an integer from 1 to 100.`);\n }\n return value;\n}\n\n/** Integer greater than or equal to 0. */\nexport function validateNonNegativeInteger(value: unknown, name: string): number {\n if (typeof value !== 'number' || !Number.isSafeInteger(value) || value < 0) {\n throw new ValidationError(`${name} must be an integer greater than or equal to 0.`);\n }\n return value;\n}\n\n/** Finite number of milliseconds, greater than 0 (or greater than or equal to 0 when allowZero). */\nexport function validateMilliseconds(value: unknown, name: string, allowZero = false): number {\n if (\n typeof value !== 'number' ||\n !Number.isFinite(value) ||\n value < 0 ||\n (!allowZero && value === 0)\n ) {\n const bound = allowZero ? 'greater than or equal to 0' : 'greater than 0';\n throw new ValidationError(`${name} must be a number of milliseconds ${bound}.`);\n }\n return value;\n}\n\nconst HEADER_SAFE = /^[\\x21-\\x7E]+$/;\n\n/**\n * Throws when `text` cannot be sent as an HTTP header value. The check runs before any request,\n * because the errors of the HTTP layer can echo the rejected value; the message never includes it.\n */\nexport function requireHeaderSafe(text: string, name: string): void {\n if (!HEADER_SAFE.test(text)) {\n throw new ValidationError(\n `${name} contains characters that cannot be sent in an HTTP header (only visible ASCII characters are allowed).`,\n );\n }\n}\n\n/** True when every character is ASCII. */\nexport function isAscii(text: string): boolean {\n for (let index = 0; index < text.length; index++) {\n if (text.charCodeAt(index) > 0x7f) return false;\n }\n return true;\n}\n\n/** A non-empty string of visible ASCII characters (after trimming), returned trimmed. */\nexport function validateCredential(value: unknown, name: string): string {\n if (typeof value !== 'string' || value.trim() === '') {\n throw new ValidationError(`${name} is required and must be a non-empty string.`);\n }\n const credential = value.trim();\n requireHeaderSafe(credential, name);\n return credential;\n}\n","import { DEFAULT_HISTORY_BASE_URL } from './constants.js';\nimport {\n ApiError,\n ConnectionError,\n RateLimitError,\n ServerError,\n type ShieldLabsError,\n TimeoutError,\n ValidationError,\n} from './errors.js';\nimport { RATE_LIMIT_FLOOR_MS, RETRY_AFTER_CAP_MS, Transport, normalizeBaseUrl } from './http.js';\nimport { fromHistoryRow, isPlainObject } from './normalize.js';\nimport { sleep, throwIfAborted, warnIfBrowserPage, warnOnce } from './runtime.js';\nimport type { FetchLike, HistoryPage, Identification, LookupType } from './types.js';\nimport {\n validateBoolean,\n validateCredential,\n validateLookup,\n validateMilliseconds,\n validateNonNegativeInteger,\n validatePageSize,\n validateRequestId,\n type Lookup,\n} from './validation.js';\n\n/** Options of the History API client. */\nexport interface ShieldLabsOptions {\n /** Private API Key of the domain (sec_...). Keep it on your server. */\n apiKey: string;\n /** Origin of the History API. Default https://account.shieldlabs.ai. A trailing /api is removed. */\n baseUrl?: string | undefined;\n /** Timeout of one HTTP attempt in milliseconds. Default 10 000. */\n timeout?: number | undefined;\n /** Retries for connection errors, timeouts, 429 and 5xx. Default 2. */\n maxRetries?: number | undefined;\n /** Custom fetch implementation. Default: the global fetch. */\n fetch?: FetchLike | undefined;\n /**\n * Accept a plain http `baseUrl` on a host other than localhost, 127.0.0.1 or [::1], for a test\n * server. The key then travels unencrypted. Default false.\n */\n allowInsecureHttp?: boolean | undefined;\n}\n\n/** Options of `history.search`. */\nexport interface SearchOptions {\n /** Page size from 1 to 100. Default 20. */\n limit?: number | undefined;\n /** Number of rows to skip. Default 0. */\n offset?: number | undefined;\n signal?: AbortSignal | undefined;\n}\n\n/** Options of `history.iterate`. */\nexport interface IterateOptions {\n /** Rows per request from 1 to 100. Default 100. */\n pageSize?: number | undefined;\n /** Stop after this many identifications. Default: no limit. */\n maxItems?: number | undefined;\n signal?: AbortSignal | undefined;\n}\n\n/** Options of `identifications.get`. */\nexport interface GetIdentificationOptions {\n /** Poll until the identification appears (true) or read once (false). Default true. */\n wait?: boolean | undefined;\n /**\n * Total time budget of the wait in milliseconds, counted from the call. Default 10 000. The\n * last poll runs at this deadline. Each poll is one HTTP attempt whose timeout is the client\n * timeout, shortened to the time left but never below 1 second, so the last poll can end up\n * to 1 second after the deadline. Pass `signal` (for example `AbortSignal.timeout(11_000)`)\n * for a hard limit that also cancels a request in flight.\n */\n timeout?: number | undefined;\n /**\n * Base wait between polls in milliseconds. The waits are 1, 2, 4 and 6 times this value, then 8\n * times it for every later wait, each capped at 2 000 or at this value when it is longer.\n * Default 250, which gives waits of 250, 500, 1 000, 1 500 and then 2 000; 1 000 gives 1 000\n * and then 2 000; 3 000 gives 3 000 every time.\n */\n pollInterval?: number | undefined;\n signal?: AbortSignal | undefined;\n}\n\nconst API_KEY_FORMAT = /^sec_[a-z0-9]{8}-[a-z0-9]{8}-[a-z0-9]{8}$/;\nconst DEFAULT_TIMEOUT_MS = 10_000;\nconst DEFAULT_MAX_RETRIES = 2;\nconst DEFAULT_LIMIT = 20;\nconst DEFAULT_PAGE_SIZE = 100;\nconst DEFAULT_WAIT_TIMEOUT_MS = 10_000;\nconst DEFAULT_POLL_INTERVAL_MS = 250;\n/** Cap of every wait between polls, unless `pollInterval` is longer: then that is the cap. */\nconst POLL_WAIT_CAP_MS = 2_000;\n/** Multiples of `pollInterval` for the waits after the first four polls. */\nconst POLL_WAIT_FACTORS = [1, 2, 4, 6] as const;\n/** Multiple of `pollInterval` for every later wait. */\nconst LAST_POLL_WAIT_FACTOR = 8;\n/** Shortest attempt timeout of a poll, even when less time is left before the deadline. */\nconst MIN_POLL_ATTEMPT_MS = 1_000;\n\n/**\n * The scheduled wait after poll number `index` (0 for the first poll): `pollInterval` times 1, 2,\n * 4 and 6, then 8 times it for every later wait, each capped at max(2 s, `pollInterval`). The\n * default 250 ms gives 250, 500, 1 000, 1 500 and then 2 000 ms; 1 s gives 1 s and then 2 s;\n * 3 s gives 3 s every time.\n */\nexport function pollWait(index: number, pollInterval: number): number {\n const factor = POLL_WAIT_FACTORS[index] ?? LAST_POLL_WAIT_FACTOR;\n return Math.min(Math.max(POLL_WAIT_CAP_MS, pollInterval), pollInterval * factor);\n}\n\nfunction parsePage(body: unknown, status: number, headers: ApiError['headers']): HistoryPage {\n if (!isPlainObject(body) || !Array.isArray(body.data)) {\n throw new ApiError('History API returned an unexpected response body.', {\n status,\n body,\n headers,\n });\n }\n const data = body.data.filter(isPlainObject).map(fromHistoryRow);\n const total =\n typeof body.total === 'number' && Number.isFinite(body.total) ? body.total : data.length;\n return { data, total };\n}\n\n/**\n * One validated History request. `maxRetries` overrides the client setting and `attemptTimeout`\n * caps the client timeout when given.\n */\nasync function fetchPage(\n transport: Transport,\n lookup: Lookup,\n limit: number,\n offset: number,\n signal: AbortSignal | undefined,\n maxRetries?: number,\n attemptTimeout?: number,\n): Promise<HistoryPage> {\n const path = `/api/v1/history/${lookup.type}/${lookup.segment}`;\n const response = await transport.getJson(path, {\n query: { limit: String(limit), offset: String(offset) },\n signal,\n maxRetries,\n timeout: attemptTimeout,\n });\n return parsePage(response.body, response.status, response.headers);\n}\n\n/** Errors a later poll can get past: 429, 5xx, connection failures and attempt timeouts. */\nfunction isTransientPollError(error: unknown): error is ShieldLabsError {\n return (\n error instanceof RateLimitError ||\n error instanceof ServerError ||\n error instanceof ConnectionError ||\n error instanceof TimeoutError\n );\n}\n\n/** Reads identifications from the History API. */\nexport class HistoryResource {\n readonly #transport: Transport;\n\n constructor(transport: Transport) {\n this.#transport = transport;\n }\n\n /**\n * One page of identifications for one identifier, newest first.\n * `GET /api/v1/history/{type}/{value}`.\n */\n async search(type: LookupType, value: string, options: SearchOptions = {}): Promise<HistoryPage> {\n const lookup = validateLookup(type, value);\n const limit = validatePageSize(options.limit ?? DEFAULT_LIMIT, 'limit');\n const offset = validateNonNegativeInteger(options.offset ?? 0, 'offset');\n return fetchPage(this.#transport, lookup, limit, offset, options.signal);\n }\n\n /**\n * Every identification for one identifier, newest first, fetched page by page. Rows repeated\n * across pages (new rows can shift offsets) are skipped by request ID. Stops at `total`, at an\n * empty page or after `maxItems`.\n */\n iterate(\n type: LookupType,\n value: string,\n options: IterateOptions = {},\n ): AsyncGenerator<Identification, void, undefined> {\n const lookup = validateLookup(type, value);\n const pageSize = validatePageSize(options.pageSize ?? DEFAULT_PAGE_SIZE, 'pageSize');\n const maxItems =\n options.maxItems === undefined\n ? undefined\n : validateNonNegativeInteger(options.maxItems, 'maxItems');\n return this.#iterate(lookup, pageSize, maxItems, options.signal);\n }\n\n async *#iterate(\n lookup: Lookup,\n pageSize: number,\n maxItems: number | undefined,\n signal: AbortSignal | undefined,\n ): AsyncGenerator<Identification, void, undefined> {\n const seen = new Set<string>();\n let offset = 0;\n let yielded = 0;\n for (;;) {\n if (maxItems !== undefined && yielded >= maxItems) return;\n const page = await fetchPage(this.#transport, lookup, pageSize, offset, signal);\n if (page.data.length === 0) return;\n for (const identification of page.data) {\n const key = identification.request_id;\n if (key !== '') {\n if (seen.has(key)) continue;\n seen.add(key);\n }\n yield identification;\n yielded++;\n if (maxItems !== undefined && yielded >= maxItems) return;\n }\n offset += page.data.length;\n if (offset >= page.total) return;\n }\n }\n}\n\n/** Reads single identifications by request ID. */\nexport class IdentificationsResource {\n readonly #transport: Transport;\n\n constructor(transport: Transport) {\n this.#transport = transport;\n }\n\n /**\n * The identification with this request ID, or null when none is found.\n *\n * Scoring is asynchronous: the row appears about 1 to 3 seconds after the browser call and can\n * be refined for up to about 10 seconds while follow-up checks finish; this returns the first\n * version it sees. With `wait` (the default), `timeout` is the total budget of the call:\n *\n * - The first poll runs at once. The waits between polls are `pollInterval` times 1, 2, 4 and 6,\n * then 8 times it for every later wait, each capped at max(2 s, `pollInterval`): 250 ms,\n * 500 ms, 1 s, 1.5 s and then every 2 s by default, and every 3 s for a `pollInterval` of\n * 3 s. A wait that would pass the deadline is cut short, so the last poll runs at the\n * deadline.\n * - Each poll is one HTTP attempt without retries, with the timeout\n * min(client timeout, max(time left, 1 s)).\n * - 429, 5xx, connection errors and timeouts do not end the wait. After a 429 the next wait is\n * the longest of the scheduled wait, 1 s and the Retry-After capped at 10 s (a missing\n * Retry-After, 0 or a past date counts as 0), cut short at the deadline like any other wait.\n * When the capped Retry-After is longer than the time left, that RateLimitError is thrown at\n * once.\n * - At the deadline, the error of the last poll is thrown if it failed; otherwise the result\n * is null.\n * - 400, 401, 403 and 404 (and any other error that another poll cannot fix) are thrown at once.\n */\n async get(\n requestId: string,\n options: GetIdentificationOptions = {},\n ): Promise<Identification | null> {\n const id = validateRequestId(requestId);\n const wait = validateBoolean(options.wait ?? true, 'wait');\n const timeout = validateMilliseconds(\n options.timeout ?? DEFAULT_WAIT_TIMEOUT_MS,\n 'timeout',\n true,\n );\n const pollInterval = validateMilliseconds(\n options.pollInterval ?? DEFAULT_POLL_INTERVAL_MS,\n 'pollInterval',\n );\n const { signal } = options;\n throwIfAborted(signal);\n const lookup: Lookup = { type: 'request_id', value: id, segment: id };\n\n if (!wait) {\n const page = await fetchPage(this.#transport, lookup, 1, 0, signal);\n return page.data[0] ?? null;\n }\n return this.#poll(lookup, Date.now() + timeout, pollInterval, signal);\n }\n\n async #poll(\n lookup: Lookup,\n deadline: number,\n pollInterval: number,\n signal: AbortSignal | undefined,\n ): Promise<Identification | null> {\n let atDeadline = false;\n for (let index = 0; ; index++) {\n const attemptTimeout = Math.min(\n this.#transport.timeout,\n Math.max(deadline - Date.now(), MIN_POLL_ATTEMPT_MS),\n );\n let failure: ShieldLabsError | undefined;\n try {\n const page = await fetchPage(this.#transport, lookup, 1, 0, signal, 0, attemptTimeout);\n const found = page.data[0];\n if (found) return found;\n } catch (error) {\n throwIfAborted(signal);\n if (!isTransientPollError(error)) throw error;\n failure = error;\n }\n\n const remaining = deadline - Date.now();\n if (atDeadline || remaining <= 0) {\n if (failure !== undefined) throw failure;\n return null;\n }\n\n let delay = pollWait(index, pollInterval);\n if (failure instanceof RateLimitError) {\n // No Retry-After counts as 0, like \"Retry-After: 0\" or a past date: the 1 s floor applies.\n const retryAfter = Math.min((failure.retryAfter ?? 0) * 1000, RETRY_AFTER_CAP_MS);\n // Retry-After asks for more time than is left: no later poll fits before the deadline.\n if (retryAfter > remaining) throw failure;\n delay = Math.max(delay, RATE_LIMIT_FLOOR_MS, retryAfter);\n }\n if (delay >= remaining) {\n delay = remaining;\n atDeadline = true;\n }\n await sleep(delay, signal);\n }\n }\n}\n\n/**\n * Client for the History API (`https://account.shieldlabs.ai`), authenticated with the Private\n * API Key of one domain. Stateless apart from its configuration, so one instance can be shared\n * by concurrent requests.\n */\nexport class ShieldLabs {\n /** Single identifications by request ID, with wait-for-verdict polling. */\n readonly identifications: IdentificationsResource;\n /** History lookups by identifier. */\n readonly history: HistoryResource;\n\n constructor(options: ShieldLabsOptions) {\n if (!isPlainObject(options)) {\n throw new ValidationError('new ShieldLabs() needs an options object with apiKey.');\n }\n const apiKey = validateCredential(options.apiKey, 'apiKey');\n warnIfBrowserPage('ShieldLabs', 'Private API Key');\n if (!API_KEY_FORMAT.test(apiKey)) {\n warnOnce(\n 'api-key-format',\n 'apiKey does not look like a Private API Key (sec_xxxxxxxx-xxxxxxxx-xxxxxxxx). The History API needs the Private API Key, not the Public Key or the Secret Key.',\n );\n }\n const baseUrl = normalizeBaseUrl(\n options.baseUrl ?? DEFAULT_HISTORY_BASE_URL,\n 'baseUrl',\n true,\n validateBoolean(options.allowInsecureHttp ?? false, 'allowInsecureHttp'),\n );\n const timeout = validateMilliseconds(options.timeout ?? DEFAULT_TIMEOUT_MS, 'timeout');\n const maxRetries = validateNonNegativeInteger(\n options.maxRetries ?? DEFAULT_MAX_RETRIES,\n 'maxRetries',\n );\n if (options.fetch !== undefined && typeof options.fetch !== 'function') {\n throw new ValidationError('fetch must be a function.');\n }\n const transport = new Transport({\n apiName: 'History API',\n baseUrl,\n headers: { Authorization: `Bearer ${apiKey}` },\n secrets: [apiKey],\n timeout,\n maxRetries,\n retryRateLimited: true,\n fetch: options.fetch,\n });\n this.history = new HistoryResource(transport);\n this.identifications = new IdentificationsResource(transport);\n }\n}\n","import { DEFAULT_MANAGEMENT_BASE_URL } from './constants.js';\nimport { ApiError, ValidationError } from './errors.js';\nimport { Transport, normalizeBaseUrl } from './http.js';\nimport { isPlainObject, profileFromResponse } from './normalize.js';\nimport { warnIfBrowserPage } from './runtime.js';\nimport type { DomainProfile, FetchLike } from './types.js';\nimport {\n isAscii,\n requireHeaderSafe,\n validateBoolean,\n validateCredential,\n validateMilliseconds,\n validateNonNegativeInteger,\n} from './validation.js';\n\n/** Options of the Management API client. */\nexport interface ShieldLabsManagementOptions {\n /** Secret Key of the domain. Keep it on your server. */\n secretKey: string;\n /** The registered domain, for example \"example.com\". Normalized before it is sent. */\n domain: string;\n /** Origin of the Management API. Default https://api.shieldlabs.ai. */\n baseUrl?: string | undefined;\n /** Timeout of one HTTP attempt in milliseconds. Default 10 000. */\n timeout?: number | undefined;\n /** Retries for connection errors, timeouts and 5xx (never for 429). Default 2. */\n maxRetries?: number | undefined;\n /** Custom fetch implementation. Default: the global fetch. */\n fetch?: FetchLike | undefined;\n /**\n * Accept a plain http `baseUrl` on a host other than localhost, 127.0.0.1 or [::1], for a test\n * server. The Secret Key then travels unencrypted. Default false.\n */\n allowInsecureHttp?: boolean | undefined;\n}\n\n/** Options of `getProfile`. */\nexport interface GetProfileOptions {\n signal?: AbortSignal | undefined;\n}\n\nconst DEFAULT_TIMEOUT_MS = 10_000;\nconst DEFAULT_MAX_RETRIES = 2;\n\n/**\n * Normalizes a domain the way registered domains are stored: trimmed, lowercase, without scheme,\n * path, trailing slash or a leading \"www.\". The server matches the registered domain exactly.\n */\nexport function normalizeDomain(input: string): string {\n let domain = input.trim().toLowerCase();\n domain = domain.replace(/^[a-z][a-z0-9+.-]*:\\/\\//, '');\n domain = domain.split(/[/?#]/, 1)[0] ?? '';\n return domain.replace(/^www\\./, '');\n}\n\n/**\n * Client for the Management API (`https://api.shieldlabs.ai`), authenticated with the Secret Key\n * and the registered domain. The API allows about 15 requests per minute per IP and then blocks\n * the IP for 10 minutes, so this client never retries a 429: call it sparingly and cache results.\n * Safe for concurrent use.\n */\nexport class ShieldLabsManagement {\n /** The normalized domain sent in X-Shield-Domain. */\n readonly domain: string;\n readonly #transport: Transport;\n\n constructor(options: ShieldLabsManagementOptions) {\n if (!isPlainObject(options)) {\n throw new ValidationError(\n 'new ShieldLabsManagement() needs an options object with secretKey and domain.',\n );\n }\n const secretKey = validateCredential(options.secretKey, 'secretKey');\n warnIfBrowserPage('ShieldLabsManagement', 'Secret Key');\n if (typeof options.domain !== 'string') {\n throw new ValidationError('domain is required and must be a string such as \"example.com\".');\n }\n const domain = normalizeDomain(options.domain);\n if (domain === '') {\n throw new ValidationError('domain is required and must be a string such as \"example.com\".');\n }\n if (!isAscii(domain)) {\n throw new ValidationError('domain must be ASCII: pass the punycode form (xn--...).');\n }\n requireHeaderSafe(domain, 'domain');\n const baseUrl = normalizeBaseUrl(\n options.baseUrl ?? DEFAULT_MANAGEMENT_BASE_URL,\n 'baseUrl',\n false,\n validateBoolean(options.allowInsecureHttp ?? false, 'allowInsecureHttp'),\n );\n const timeout = validateMilliseconds(options.timeout ?? DEFAULT_TIMEOUT_MS, 'timeout');\n const maxRetries = validateNonNegativeInteger(\n options.maxRetries ?? DEFAULT_MAX_RETRIES,\n 'maxRetries',\n );\n if (options.fetch !== undefined && typeof options.fetch !== 'function') {\n throw new ValidationError('fetch must be a function.');\n }\n this.domain = domain;\n this.#transport = new Transport({\n apiName: 'Management API',\n baseUrl,\n headers: { 'X-Shield-Domain': domain, Authorization: `Bearer ${secretKey}` },\n secrets: [secretKey],\n timeout,\n maxRetries,\n retryRateLimited: false,\n fetch: options.fetch,\n });\n }\n\n /** The domain profile: remaining identifications and masked keys. `GET /v1/profile`. */\n async getProfile(options: GetProfileOptions = {}): Promise<DomainProfile> {\n const response = await this.#transport.getJson('/v1/profile', { signal: options.signal });\n if (!isPlainObject(response.body)) {\n throw new ApiError('Management API returned an unexpected response body.', {\n status: response.status,\n body: response.body,\n headers: response.headers,\n });\n }\n return profileFromResponse(response.body);\n }\n}\n","import { FLAG_KEYS, NIL_UUID, RISK_BAND_NAMES, type FlagKey } from './constants.js';\nimport { ValidationError } from './errors.js';\nimport type { DetectionFlags, Identification, RiskBand } from './types.js';\n\n/**\n * Risk band for a Risk Score: trusted 0-29, suspicious 30-59, dangerous 60-100.\n * A score above 100 (the 999 marker) is not a score: it returns \"rate_limited\".\n */\nexport function riskBand(score: number): RiskBand | 'rate_limited' {\n if (typeof score !== 'number' || Number.isNaN(score)) {\n throw new ValidationError('riskBand() needs a numeric Risk Score.');\n }\n if (score > 100) return 'rate_limited';\n if (score >= 60) return 'dangerous';\n if (score >= 30) return 'suspicious';\n return 'trusted';\n}\n\n/** True for the rate-limit marker (a Risk Score above 100, sent as 999). */\nexport function isRateLimited(score: number): boolean {\n return typeof score === 'number' && score > 100;\n}\n\n/** Why an identification did not pass `evaluateIdentification`. */\nexport type EvaluationReason =\n | 'missing'\n | 'replayed'\n | 'stale'\n | 'rate_limited'\n | 'no_device_signals'\n | 'blocked_flag'\n | 'blocked_band';\n\n/** Result of `evaluateIdentification`. */\nexport interface Evaluation {\n /** True when every check passed. */\n ok: boolean;\n /** The first check that failed, or null when `ok` is true. */\n reason: EvaluationReason | null;\n /** Band of the Risk Score (\"rate_limited\" for the 999 marker), or null when the identification is missing. */\n band: RiskBand | 'rate_limited' | null;\n /** The detection flag that failed the check, when `reason` is \"blocked_flag\". */\n flag?: keyof DetectionFlags;\n}\n\n/** Options of `evaluateIdentification`. The defaults are a starting point to tune. */\nexport interface EvaluateOptions {\n /**\n * Maximum age of the identification in milliseconds, measured from `observed_at`. Default\n * 300 000 (5 minutes). `Infinity` skips the freshness check.\n */\n maxAge?: number | undefined;\n /** Current time (Date or epoch milliseconds). Default: now. */\n now?: Date | number | undefined;\n /** Bands that fail the check. Default [\"dangerous\"]. */\n blockBands?: readonly RiskBand[] | undefined;\n /** Detection flags that fail the check. Default [\"browser_automation\", \"javascript_disabled\"]. */\n blockFlags?: readonly (keyof DetectionFlags)[] | undefined;\n /**\n * Returns true when this request ID was already used for a protected action. The SDK keeps\n * no state: claim the request ID in your own store first (an atomic insert-if-absent) and\n * return the result here. Must return a boolean synchronously.\n */\n isReplay?: ((requestId: string) => boolean) | undefined;\n}\n\nconst DEFAULT_MAX_AGE_MS = 300_000;\nconst DEFAULT_BLOCK_BANDS: readonly RiskBand[] = ['dangerous'];\nconst DEFAULT_BLOCK_FLAGS: readonly FlagKey[] = ['browser_automation', 'javascript_disabled'];\n\nfunction resolveNow(now: Date | number | undefined): number {\n if (now === undefined) return Date.now();\n const value = now instanceof Date ? now.getTime() : now;\n if (typeof value !== 'number' || !Number.isFinite(value)) {\n throw new ValidationError('now must be a valid Date or a number of epoch milliseconds.');\n }\n return value;\n}\n\nfunction isThenable(value: unknown): boolean {\n return (\n (typeof value === 'object' || typeof value === 'function') &&\n value !== null &&\n typeof (value as { then?: unknown }).then === 'function'\n );\n}\n\n/**\n * Applies a reusable guard policy to an identification. Checks run in this order and the first\n * failure wins: missing identification, replayed request ID (`isReplay`), older than `maxAge`,\n * rate-limit marker, all-zero device ID, a flag in `blockFlags`, a band in `blockBands`.\n */\nexport function evaluateIdentification(\n identification: Identification | null | undefined,\n options: EvaluateOptions = {},\n): Evaluation {\n const maxAge = options.maxAge ?? DEFAULT_MAX_AGE_MS;\n if (typeof maxAge !== 'number' || Number.isNaN(maxAge) || maxAge < 0) {\n throw new ValidationError(\n 'maxAge must be a number of milliseconds greater than or equal to 0, or Infinity to skip the freshness check.',\n );\n }\n const nowMs = resolveNow(options.now);\n const blockBands = options.blockBands ?? DEFAULT_BLOCK_BANDS;\n for (const band of blockBands) {\n if (!RISK_BAND_NAMES.includes(band)) {\n throw new ValidationError(\n `Unknown risk band in blockBands. Use one of: ${RISK_BAND_NAMES.join(', ')}.`,\n );\n }\n }\n const blockFlags = options.blockFlags ?? DEFAULT_BLOCK_FLAGS;\n for (const flag of blockFlags) {\n if (!FLAG_KEYS.includes(flag)) {\n throw new ValidationError(\n `Unknown detection flag in blockFlags. Use one of: ${FLAG_KEYS.join(', ')}.`,\n );\n }\n }\n\n if (identification === null || identification === undefined) {\n return { ok: false, reason: 'missing', band: null };\n }\n\n const band = riskBand(identification.risk_score);\n\n if (options.isReplay) {\n const replayed: unknown = options.isReplay(identification.request_id);\n if (isThenable(replayed)) {\n throw new ValidationError(\n 'isReplay must return a boolean synchronously. Claim the request ID in your store first (an atomic insert-if-absent), then pass the result, for example isReplay: () => !claimed.',\n );\n }\n if (replayed) return { ok: false, reason: 'replayed', band };\n }\n\n if (maxAge !== Number.POSITIVE_INFINITY) {\n const observedMs =\n identification.observed_at === null ? Number.NaN : Date.parse(identification.observed_at);\n if (Number.isNaN(observedMs) || nowMs - observedMs > maxAge) {\n return { ok: false, reason: 'stale', band };\n }\n }\n\n if (isRateLimited(identification.risk_score)) {\n return { ok: false, reason: 'rate_limited', band };\n }\n\n if (!identification.device_id || identification.device_id === NIL_UUID) {\n return { ok: false, reason: 'no_device_signals', band };\n }\n\n for (const flag of blockFlags) {\n if (identification.detection_flags[flag]) {\n return { ok: false, reason: 'blocked_flag', band, flag };\n }\n }\n\n if (band !== 'rate_limited' && blockBands.includes(band)) {\n return { ok: false, reason: 'blocked_band', band };\n }\n\n return { ok: true, reason: null, band };\n}\n","/**\n * @shieldlabs-ai/node for Node.js and Bun.\n *\n * Read identifications from the History API, read the domain profile from the Management API,\n * verify signed webhooks and apply risk helpers. Edge runtimes resolve `edge.ts` instead, which\n * exposes the same API without loading node:crypto.\n */\nimport { createHmac, timingSafeEqual } from 'node:crypto';\nimport {\n computeUserHid,\n computeUserHidAsync,\n createWebhooks,\n type CryptoBackend,\n type Webhooks,\n} from './webhooks.js';\n\nconst hmacSync = (key: string, message: Uint8Array): Uint8Array =>\n createHmac('sha256', key).update(message).digest();\n\nconst backend: CryptoBackend = {\n hmacSync,\n hmacAsync: (key, message) => Promise.resolve().then(() => hmacSync(key, message)),\n equal: (a, b) => a.length === b.length && timingSafeEqual(a, b),\n};\n\n/** Webhook signature verification (X-Shield-Signature) and typed event parsing. */\nexport const webhooks: Webhooks = createWebhooks(backend);\n\n/**\n * A stable, irreversible User HID for one of your accounts: HMAC-SHA256 of `userId` keyed with\n * `secret`, as 64 lowercase hex characters. Compute it on your server and pass it to the browser\n * agent instead of a raw email address or account ID. Throws ValidationError on empty input.\n * Needs node:crypto: in edge runtimes use `userHidAsync`.\n */\nexport function userHid(userId: string, secret: string): string {\n return computeUserHid(backend, userId, secret);\n}\n\n/** Same as `userHid`, as a promise (works in every runtime). */\nexport function userHidAsync(userId: string, secret: string): Promise<string> {\n return computeUserHidAsync(backend, userId, secret);\n}\n\nexport * from './common.js';\n"]}

package/package.json CHANGED Viewed

@@ -1,6 +1,140 @@
 {
   "name": "@shieldlabs-ai/node",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "1.0.0",
+  "description": "ShieldLabs server SDK for Node.js and edge runtimes: History API and Management API clients, webhook signature verification, typed identifications and risk helpers.",
+  "license": "MIT",
+  "author": "ShieldLabs Inc. <contact@shieldlabs.ai>",
+  "homepage": "https://docs.shieldlabs.ai",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/ShieldLabs-ai/shieldlabs-node.git"
+  },
+  "bugs": {
+    "url": "https://github.com/ShieldLabs-ai/shieldlabs-node/issues",
+    "email": "contact@shieldlabs.ai"
+  },
+  "keywords": [
+    "shieldlabs",
+    "device-intelligence",
+    "risk-score",
+    "fraud-prevention",
+    "bot-detection",
+    "webhooks",
+    "server-sdk"
+  ],
+  "type": "module",
+  "main": "./dist/index.cjs",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "bun": {
+        "import": {
+          "types": "./dist/index.d.ts",
+          "default": "./dist/index.js"
+        },
+        "require": {
+          "types": "./dist/index.d.cts",
+          "default": "./dist/index.cjs"
+        }
+      },
+      "deno": {
+        "import": {
+          "types": "./dist/index.d.ts",
+          "default": "./dist/edge.js"
+        },
+        "require": {
+          "types": "./dist/index.d.cts",
+          "default": "./dist/edge.cjs"
+        }
+      },
+      "workerd": {
+        "import": {
+          "types": "./dist/index.d.ts",
+          "default": "./dist/edge.js"
+        },
+        "require": {
+          "types": "./dist/index.d.cts",
+          "default": "./dist/edge.cjs"
+        }
+      },
+      "worker": {
+        "import": {
+          "types": "./dist/index.d.ts",
+          "default": "./dist/edge.js"
+        },
+        "require": {
+          "types": "./dist/index.d.cts",
+          "default": "./dist/edge.cjs"
+        }
+      },
+      "edge-light": {
+        "import": {
+          "types": "./dist/index.d.ts",
+          "default": "./dist/edge.js"
+        },
+        "require": {
+          "types": "./dist/index.d.cts",
+          "default": "./dist/edge.cjs"
+        }
+      },
+      "browser": {
+        "import": {
+          "types": "./dist/index.d.ts",
+          "default": "./dist/edge.js"
+        },
+        "require": {
+          "types": "./dist/index.d.cts",
+          "default": "./dist/edge.cjs"
+        }
+      },
+      "import": {
+        "types": "./dist/index.d.ts",
+        "default": "./dist/index.js"
+      },
+      "require": {
+        "types": "./dist/index.d.cts",
+        "default": "./dist/index.cjs"
+      },
+      "default": "./dist/index.js"
+    },
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "CHANGELOG.md",
+    "LICENSE"
+  ],
+  "sideEffects": false,
+  "engines": {
+    "node": ">=18"
+  },
+  "scripts": {
+    "build": "tsup",
+    "typecheck": "tsc --noEmit",
+    "lint": "eslint . && prettier --check .",
+    "format": "prettier --write .",
+    "test": "vitest run",
+    "test:package": "node scripts/check-package.mjs",
+    "test:runtime": "node test/runtime/smoke.mjs && node --conditions=worker test/runtime/smoke.mjs",
+    "test:example": "node scripts/smoke-example.mjs",
+    "prepack": "npm run build"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "devDependencies": {
+    "@eslint/js": "^9.39.5",
+    "@types/node": "^20.19.43",
+    "@vitest/coverage-v8": "^4.1.11",
+    "eslint": "^9.39.5",
+    "globals": "^16.5.0",
+    "prettier": "^3.9.9",
+    "tsup": "^8.5.1",
+    "typescript": "^5.9.3",
+    "typescript-eslint": "^8.71.0",
+    "vite": "^6.4.3",
+    "vitest": "^4.1.11"
+  }
+}