@tappify/extension-sdk 2.0.0

package/dist/chunk-ZT35X7KL.mjs

@@ -0,0 +1,365 @@
+import {
+  EVENTS
+} from "./chunk-MNDVYPEP.mjs";
+import {
+  TapError,
+  TapServerError
+} from "./chunk-CSTYBKZC.mjs";
+
+// src/server/codes.ts
+var SERVER_ERROR_CODES = {
+  ROUTE_UNKNOWN: "TAP_ROUTE_UNKNOWN",
+  HANDLER_MISSING: "TAP_HANDLER_MISSING",
+  INTERNAL_ERROR: "TAP_INTERNAL_ERROR",
+  TOKEN_MISSING: "TAP_TOKEN_MISSING",
+  TOKEN_INVALID: "TAP_TOKEN_INVALID",
+  TOKEN_AUDIENCE: "TAP_TOKEN_AUDIENCE",
+  EVENT_ID_MISSING: "TAP_EVENT_ID_MISSING",
+  BODY_INVALID: "TAP_BODY_INVALID",
+  BODY_TOO_LARGE: "TAP_BODY_TOO_LARGE",
+  WEBHOOK_REJECTED: "TAP_WEBHOOK_REJECTED"
+};
+
+// src/server/token.ts
+import {
+  createLocalJWKSet,
+  createRemoteJWKSet,
+  jwtVerify
+} from "jose";
+var DEFAULT_JWKS_URL = "https://api.tappify.ai/api/v1/extensions/.well-known/jwks.json";
+var CLOCK_TOLERANCE_SECONDS = 60;
+var remoteSets = /* @__PURE__ */ new Map();
+function keySet(options) {
+  if (options.jwks) return createLocalJWKSet(options.jwks);
+  const url = options.jwksUrl ?? DEFAULT_JWKS_URL;
+  const cached = remoteSets.get(url);
+  if (cached) return cached;
+  const created = createRemoteJWKSet(new URL(url));
+  remoteSets.set(url, created);
+  return created;
+}
+function readString(payload, key) {
+  const value = payload[key];
+  return typeof value === "string" ? value : void 0;
+}
+function toClaims(payload, audience) {
+  const aud = payload.aud;
+  const matches = aud === audience || Array.isArray(aud) && aud.includes(audience);
+  if (!matches) {
+    throw new TapError(
+      "TAP_TOKEN_AUDIENCE",
+      `This install token was issued for a different extension. Create the handler with the same extensionId as the "id" in tappify.extension.json, so its audience is "${audience}".`
+    );
+  }
+  const installId = readString(payload, "installId");
+  const extensionId = readString(payload, "extensionId");
+  const organizationId = readString(payload, "organizationId");
+  if (installId === void 0 || extensionId === void 0 || organizationId === void 0) {
+    throw new TapError(
+      "TAP_TOKEN_INVALID",
+      `The install token is missing the installId, extensionId or organizationId claim. Verify against ${DEFAULT_JWKS_URL} and do not reuse tokens across environments.`
+    );
+  }
+  const scopes = payload.scopes;
+  const userId = readString(payload, "userId");
+  const claims = {
+    iss: readString(payload, "iss") ?? "",
+    aud: audience,
+    exp: typeof payload.exp === "number" ? payload.exp : 0,
+    iat: typeof payload.iat === "number" ? payload.iat : 0,
+    installId,
+    extensionId,
+    projectId: readString(payload, "projectId") ?? null,
+    organizationId,
+    scopes: Array.isArray(scopes) ? scopes.filter((scope) => typeof scope === "string") : []
+  };
+  if (userId !== void 0) claims.userId = userId;
+  return claims;
+}
+async function verifyTappifyToken(token, options) {
+  const audience = `ext:${options.extensionId}`;
+  let payload;
+  try {
+    const verified = await jwtVerify(token, keySet(options), {
+      algorithms: ["RS256"],
+      clockTolerance: CLOCK_TOLERANCE_SECONDS
+    });
+    payload = verified.payload;
+  } catch {
+    throw new TapError(
+      "TAP_TOKEN_INVALID",
+      "The install token did not verify. Check that your server reads the Authorization header unchanged, that its clock is correct, and that jwksUrl points at the Tappify environment that called you."
+    );
+  }
+  return toClaims(payload, audience);
+}
+
+// src/server/wire.ts
+var INTERNAL_MESSAGE = "The extension server failed to handle this call. Check your own logs; Tappify records the failure against your extension.";
+function json(data, status = 200) {
+  return new Response(JSON.stringify(data), {
+    status,
+    headers: { "content-type": "application/json" }
+  });
+}
+function wireError(code, message, status) {
+  return json({ error: { code, message } }, status);
+}
+function failure(code, message, status) {
+  return wireError(code, message, status);
+}
+function readUnknown(value, key) {
+  if (typeof value !== "object" || value === null) return void 0;
+  return value[key];
+}
+function readRecord(value, key) {
+  const nested = readUnknown(value, key);
+  return typeof nested === "object" && nested !== null ? nested : {};
+}
+function readText(value, key) {
+  const nested = readUnknown(value, key);
+  return typeof nested === "string" ? nested : null;
+}
+
+// src/server/handler.ts
+var MAX_BODY_BYTES = 1048576;
+var WORK_OPERATIONS = [
+  "list_containers",
+  "create",
+  "attach",
+  "comment",
+  "status",
+  "resolve"
+];
+var TOKEN_FAILURES = [
+  SERVER_ERROR_CODES.TOKEN_INVALID,
+  SERVER_ERROR_CODES.TOKEN_AUDIENCE
+];
+function toInstall(payload, claims) {
+  const raw = readRecord(payload, "install");
+  return {
+    id: claims.installId,
+    extensionId: claims.extensionId,
+    projectId: claims.projectId ?? readText(raw, "projectId"),
+    organizationId: claims.organizationId
+  };
+}
+function toPlatform(value) {
+  return value === "ios" || value === "android" ? value : "all";
+}
+function toPreset(value) {
+  return value === "7d" || value === "30d" || value === "90d" ? value : void 0;
+}
+function toContext(payload) {
+  const raw = readRecord(payload, "context");
+  const filters = readRecord(raw, "filters");
+  const rawRange = readRecord(filters, "range");
+  const from = readText(raw, "from") ?? readText(rawRange, "from") ?? "";
+  const to = readText(raw, "to") ?? readText(rawRange, "to") ?? "";
+  const range = {
+    from: readText(rawRange, "from") ?? from,
+    to: readText(rawRange, "to") ?? to
+  };
+  const preset = toPreset(readText(rawRange, "preset"));
+  if (preset !== void 0) range.preset = preset;
+  return {
+    projectId: readText(raw, "projectId"),
+    platform: toPlatform(readText(raw, "platform")),
+    from,
+    to,
+    filters: {
+      range,
+      platform: toPlatform(readText(filters, "platform")),
+      country: readText(filters, "country") ?? "all"
+    }
+  };
+}
+function toCredentials(payload) {
+  const raw = readRecord(payload, "credentials");
+  const credentials = {};
+  for (const [name, value] of Object.entries(raw)) {
+    if (typeof value === "string") credentials[name] = value;
+  }
+  return credentials;
+}
+function tooLarge() {
+  return new TapServerError(
+    SERVER_ERROR_CODES.BODY_TOO_LARGE,
+    "A Tappify request body is at most 1 MB. Return a cursor or an id the host can follow instead of inlining the payload.",
+    413
+  );
+}
+async function readBody(request) {
+  if (request.method === "GET" || request.method === "HEAD") return {};
+  const length = request.headers.get("content-length");
+  if (length !== null && Number(length) > MAX_BODY_BYTES) throw tooLarge();
+  const bytes = await request.arrayBuffer();
+  if (bytes.byteLength > MAX_BODY_BYTES) throw tooLarge();
+  if (bytes.byteLength === 0) return {};
+  const text = new TextDecoder().decode(bytes);
+  try {
+    return JSON.parse(text);
+  } catch {
+    throw new TapServerError(
+      SERVER_ERROR_CODES.BODY_INVALID,
+      "The request body was not JSON. Do not parse or re-encode the body before handing the Request to createTappifyHandler().",
+      400
+    );
+  }
+}
+function route(handler, input, event, noContent = false) {
+  return { handler, input, event, noContent };
+}
+function handlerFor(map, name) {
+  return map?.[name];
+}
+function resolveRoute(options, method, segments, url, payload) {
+  const [head, name] = segments;
+  const bodyInput = readUnknown(payload, "input") ?? {};
+  if (head === "metrics" && method === "POST") {
+    return route(options.metrics, bodyInput);
+  }
+  if (head === "tools" && method === "POST" && name !== void 0) {
+    return route(handlerFor(options.tools, name), bodyInput);
+  }
+  if (head === "mentions" && method === "GET" && name !== void 0) {
+    return route(handlerFor(options.mentions, name), {
+      q: url.searchParams.get("q") ?? ""
+    });
+  }
+  if (head === "actions" && method === "POST" && name !== void 0) {
+    return route(handlerFor(options.actions, name), bodyInput);
+  }
+  if (head === "procedures" && method === "POST" && name !== void 0) {
+    return route(handlerFor(options.procedures, name), bodyInput);
+  }
+  if (head === "context" && method === "GET" && name !== void 0) {
+    return route(handlerFor(options.context, name), void 0);
+  }
+  if (head === "work" && method === "POST" && name !== void 0) {
+    const operation = WORK_OPERATIONS.find((candidate) => candidate === name);
+    return route(
+      operation === void 0 ? void 0 : options.work?.[operation],
+      bodyInput
+    );
+  }
+  if (head === "events" && method === "POST") {
+    const envelope = readRecord(payload, "event");
+    const eventName = readText(envelope, "name");
+    if (eventName === null) {
+      throw new TapServerError(
+        SERVER_ERROR_CODES.BODY_INVALID,
+        'The events body has no event.name. Post the envelope Tappify sends unchanged, with the event name under "event".',
+        400
+      );
+    }
+    const declared = EVENTS.find((candidate) => candidate === eventName);
+    return route(
+      declared === void 0 ? void 0 : options.events?.[declared],
+      void 0,
+      readUnknown(envelope, "payload") ?? {},
+      true
+    );
+  }
+  return null;
+}
+function createTappifyHandler(options) {
+  const basePath = options.basePath ?? "";
+  return async function handle(request) {
+    const url = new URL(request.url);
+    const path = url.pathname.startsWith(basePath) ? url.pathname.slice(basePath.length) : url.pathname;
+    const segments = path.split("/").filter((segment) => segment !== "");
+    if (segments[0] !== "tappify") {
+      return failure(
+        SERVER_ERROR_CODES.ROUTE_UNKNOWN,
+        `Nothing is mounted at ${path}. Tappify calls paths under /tappify; set basePath if your framework mounts the handler under a prefix.`,
+        404
+      );
+    }
+    const rest = segments.slice(1);
+    if (rest[0] === "health" && request.method === "GET") {
+      const health = options.health ? await options.health() : { ok: true };
+      return json(health);
+    }
+    const authorization = request.headers.get("authorization") ?? "";
+    const token = authorization.startsWith("Bearer ") ? authorization.slice("Bearer ".length) : "";
+    if (token === "") {
+      return failure(
+        SERVER_ERROR_CODES.TOKEN_MISSING,
+        "This route needs an install token. Tappify sends it as Authorization: Bearer <token>; forward the header unchanged from your framework.",
+        401
+      );
+    }
+    const eventId = request.headers.get("x-tappify-event-id");
+    if (eventId === null || eventId === "") {
+      return failure(
+        SERVER_ERROR_CODES.EVENT_ID_MISSING,
+        "Every Tappify call carries X-Tappify-Event-Id for idempotency. Forward the header unchanged, and use it as the key when you deduplicate.",
+        400
+      );
+    }
+    try {
+      const claims = await verifyTappifyToken(token, {
+        extensionId: options.extensionId,
+        jwksUrl: options.jwksUrl,
+        jwks: options.jwks
+      });
+      const payload = await readBody(request);
+      const matched = resolveRoute(options, request.method, rest, url, payload);
+      if (matched === null) {
+        return failure(
+          SERVER_ERROR_CODES.ROUTE_UNKNOWN,
+          `Tappify has no ${request.method} ${path} route. The paths it calls are listed under "Vendor server endpoints" in the reference; check the method and the spelling.`,
+          404
+        );
+      }
+      if (matched.handler === void 0) {
+        return failure(
+          SERVER_ERROR_CODES.HANDLER_MISSING,
+          `No handler is registered for ${request.method} ${path}. Add it to createTappifyHandler(), or remove the contribution from tappify.extension.json.`,
+          404
+        );
+      }
+      const documents = readRecord(payload, "documents");
+      const typed = {
+        install: toInstall(payload, claims),
+        context: toContext(payload),
+        input: matched.input,
+        credentials: toCredentials(payload),
+        documents,
+        event: matched.event,
+        eventId,
+        claims,
+        request
+      };
+      const result = await matched.handler(typed);
+      return matched.noContent ? new Response(null, { status: 204 }) : json(result);
+    } catch (error) {
+      if (TapServerError.is(error)) {
+        return wireError(error.code, error.message, error.status ?? 400);
+      }
+      if (TapError.is(error)) {
+        const tokenFailure = TOKEN_FAILURES.find(
+          (candidate) => candidate === error.code
+        );
+        if (tokenFailure !== void 0) {
+          return failure(tokenFailure, error.message, 401);
+        }
+        return wireError(error.code, error.message, 400);
+      }
+      return failure(SERVER_ERROR_CODES.INTERNAL_ERROR, INTERNAL_MESSAGE, 500);
+    }
+  };
+}
+
+export {
+  SERVER_ERROR_CODES,
+  INTERNAL_MESSAGE,
+  wireError,
+  readRecord,
+  readText,
+  DEFAULT_JWKS_URL,
+  verifyTappifyToken,
+  createTappifyHandler
+};
+//# sourceMappingURL=chunk-ZT35X7KL.mjs.map

package/dist/chunk-ZT35X7KL.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/server/codes.ts","../src/server/token.ts","../src/server/wire.ts","../src/server/handler.ts"],"sourcesContent":["import type { TapErrorCode } from '../client/errors';\n\n/**\n * The codes `createTappifyHandler` answers with itself, keyed by a short name.\n *\n * @remarks\n * Every one of these comes from the SDK, not from your own handlers: a route or\n * handler that is not there, a token that is missing or does not verify, a missing\n * event id, a body that is not JSON or is over 1 MB, a webhook Tappify rejected,\n * and the catch-all for an error a handler let escape. Throw a `TapServerError`\n * with a code of your own for anything your server decides.\n */\nexport const SERVER_ERROR_CODES = {\n  ROUTE_UNKNOWN: 'TAP_ROUTE_UNKNOWN',\n  HANDLER_MISSING: 'TAP_HANDLER_MISSING',\n  INTERNAL_ERROR: 'TAP_INTERNAL_ERROR',\n  TOKEN_MISSING: 'TAP_TOKEN_MISSING',\n  TOKEN_INVALID: 'TAP_TOKEN_INVALID',\n  TOKEN_AUDIENCE: 'TAP_TOKEN_AUDIENCE',\n  EVENT_ID_MISSING: 'TAP_EVENT_ID_MISSING',\n  BODY_INVALID: 'TAP_BODY_INVALID',\n  BODY_TOO_LARGE: 'TAP_BODY_TOO_LARGE',\n  WEBHOOK_REJECTED: 'TAP_WEBHOOK_REJECTED',\n} as const satisfies Record<string, TapErrorCode>;\n\n/** Every code the handler answers with itself, as a union of its own values. */\nexport type TapServerErrorCode =\n  (typeof SERVER_ERROR_CODES)[keyof typeof SERVER_ERROR_CODES];\n","import {\n  createLocalJWKSet,\n  createRemoteJWKSet,\n  jwtVerify,\n  type JWTPayload,\n  type JWTVerifyGetKey,\n} from 'jose';\nimport { TapError } from '../client/errors';\nimport type { TappifyClaims, VerifyTokenOptions } from './types';\n\n/**\n * The key set `verifyTappifyToken` fetches when no `jwksUrl` or `jwks` is given.\n *\n * @remarks\n * This is production. Point `jwksUrl` at the environment that is calling you when\n * you run against another one, and pass `jwks` in tests.\n */\nexport const DEFAULT_JWKS_URL =\n  'https://api.tappify.ai/api/v1/extensions/.well-known/jwks.json';\n\nconst CLOCK_TOLERANCE_SECONDS = 60;\n\nconst remoteSets = new Map<string, JWTVerifyGetKey>();\n\nfunction keySet(options: VerifyTokenOptions): JWTVerifyGetKey {\n  if (options.jwks) return createLocalJWKSet(options.jwks);\n\n  const url = options.jwksUrl ?? DEFAULT_JWKS_URL;\n  const cached = remoteSets.get(url);\n  if (cached) return cached;\n\n  const created = createRemoteJWKSet(new URL(url));\n  remoteSets.set(url, created);\n  return created;\n}\n\nfunction readString(payload: JWTPayload, key: string): string | undefined {\n  const value = payload[key];\n  return typeof value === 'string' ? value : undefined;\n}\n\nfunction toClaims(payload: JWTPayload, audience: string): TappifyClaims {\n  const aud = payload.aud;\n  const matches =\n    aud === audience || (Array.isArray(aud) && aud.includes(audience));\n\n  if (!matches) {\n    throw new TapError(\n      'TAP_TOKEN_AUDIENCE',\n      `This install token was issued for a different extension. Create the handler with the same extensionId as the \"id\" in tappify.extension.json, so its audience is \"${audience}\".`,\n    );\n  }\n\n  const installId = readString(payload, 'installId');\n  const extensionId = readString(payload, 'extensionId');\n  const organizationId = readString(payload, 'organizationId');\n\n  if (\n    installId === undefined ||\n    extensionId === undefined ||\n    organizationId === undefined\n  ) {\n    throw new TapError(\n      'TAP_TOKEN_INVALID',\n      `The install token is missing the installId, extensionId or organizationId claim. Verify against ${DEFAULT_JWKS_URL} and do not reuse tokens across environments.`,\n    );\n  }\n\n  const scopes = payload.scopes;\n  const userId = readString(payload, 'userId');\n\n  const claims: TappifyClaims = {\n    iss: readString(payload, 'iss') ?? '',\n    aud: audience,\n    exp: typeof payload.exp === 'number' ? payload.exp : 0,\n    iat: typeof payload.iat === 'number' ? payload.iat : 0,\n    installId,\n    extensionId,\n    projectId: readString(payload, 'projectId') ?? null,\n    organizationId,\n    scopes: Array.isArray(scopes)\n      ? scopes.filter((scope): scope is string => typeof scope === 'string')\n      : [],\n  };\n\n  if (userId !== undefined) claims.userId = userId;\n  return claims;\n}\n\n/**\n * Verifies an install token against Tappify's signing keys and returns its\n * claims.\n *\n * @remarks\n * Checks the RS256 signature, the expiry with 60 seconds of clock tolerance, and\n * that the audience is `ext:<extensionId>`. Rejects with a `TapError` carrying\n * `TAP_TOKEN_INVALID` when the signature, the expiry or a required claim is wrong,\n * and `TAP_TOKEN_AUDIENCE` when the token was issued for another extension. A\n * remote key set is fetched once per url and cached for the process, so calling\n * this per request costs nothing after the first. `createTappifyHandler` already\n * verifies every route but health, so call this only outside the handler, or\n * where you accept a Tappify token on a route of your own.\n *\n * @example\n * ```ts\n * import { verifyTappifyToken } from '@tappify/extension-sdk/server';\n *\n * async function whoCalled(request: Request): Promise<string> {\n *   const token = (request.headers.get('authorization') ?? '').replace('Bearer ', '');\n *   const claims = await verifyTappifyToken(token, { extensionId: 'starter' });\n *   return claims.installId;\n * }\n * ```\n */\nexport async function verifyTappifyToken(\n  token: string,\n  options: VerifyTokenOptions,\n): Promise<TappifyClaims> {\n  const audience = `ext:${options.extensionId}`;\n\n  let payload: JWTPayload;\n  try {\n    const verified = await jwtVerify(token, keySet(options), {\n      algorithms: ['RS256'],\n      clockTolerance: CLOCK_TOLERANCE_SECONDS,\n    });\n    payload = verified.payload;\n  } catch {\n    throw new TapError(\n      'TAP_TOKEN_INVALID',\n      'The install token did not verify. Check that your server reads the Authorization header unchanged, that its clock is correct, and that jwksUrl points at the Tappify environment that called you.',\n    );\n  }\n\n  return toClaims(payload, audience);\n}\n","import type { TapServerErrorCode } from './codes';\n\nexport const INTERNAL_MESSAGE =\n  'The extension server failed to handle this call. Check your own logs; Tappify records the failure against your extension.';\n\nexport function json(data: unknown, status = 200): Response {\n  return new Response(JSON.stringify(data), {\n    status,\n    headers: { 'content-type': 'application/json' },\n  });\n}\n\nexport function wireError(\n  code: string,\n  message: string,\n  status: number,\n): Response {\n  return json({ error: { code, message } }, status);\n}\n\nexport function failure(\n  code: TapServerErrorCode,\n  message: string,\n  status: number,\n): Response {\n  return wireError(code, message, status);\n}\n\nexport function readUnknown(value: unknown, key: string): unknown {\n  if (typeof value !== 'object' || value === null) return undefined;\n  return (value as Record<string, unknown>)[key];\n}\n\nexport function readRecord(\n  value: unknown,\n  key: string,\n): Record<string, unknown> {\n  const nested = readUnknown(value, key);\n  return typeof nested === 'object' && nested !== null\n    ? (nested as Record<string, unknown>)\n    : {};\n}\n\nexport function readText(value: unknown, key: string): string | null {\n  const nested = readUnknown(value, key);\n  return typeof nested === 'string' ? nested : null;\n}\n","import { TapError, TapServerError } from '../client/errors';\nimport type { TapCredentialValues, TapDateRange } from '../client/types';\nimport { EVENTS } from '../manifest/constants';\nimport { SERVER_ERROR_CODES, type TapServerErrorCode } from './codes';\nimport { verifyTappifyToken } from './token';\nimport type {\n  ContextBlock,\n  MentionItems,\n  MetricsInput,\n  MetricsResponse,\n  TappifyCallContext,\n  TappifyClaims,\n  TappifyDocuments,\n  TappifyHandlerOptions,\n  TappifyHealth,\n  TappifyInstall,\n  TappifyRequest,\n  WorkOperation,\n} from './types';\nimport {\n  INTERNAL_MESSAGE,\n  failure,\n  json,\n  readRecord,\n  readText,\n  readUnknown,\n  wireError,\n} from './wire';\n\n/**\n * What `createTappifyHandler` returns: a `fetch` handler, which is what Cloudflare\n * Workers, Vercel and the two adapters all take.\n */\nexport type TappifyFetchHandler = (request: Request) => Promise<Response>;\n\nconst MAX_BODY_BYTES = 1_048_576;\n\nconst WORK_OPERATIONS: readonly WorkOperation[] = [\n  'list_containers',\n  'create',\n  'attach',\n  'comment',\n  'status',\n  'resolve',\n];\n\nconst TOKEN_FAILURES: readonly TapServerErrorCode[] = [\n  SERVER_ERROR_CODES.TOKEN_INVALID,\n  SERVER_ERROR_CODES.TOKEN_AUDIENCE,\n];\n\n/**\n * The token is signed by Tappify and the body is not, so the claims win wherever\n * they carry a value and the body only fills what the token leaves out.\n */\nfunction toInstall(payload: unknown, claims: TappifyClaims): TappifyInstall {\n  const raw = readRecord(payload, 'install');\n  return {\n    id: claims.installId,\n    extensionId: claims.extensionId,\n    projectId: claims.projectId ?? readText(raw, 'projectId'),\n    organizationId: claims.organizationId,\n  };\n}\n\nfunction toPlatform(value: string | null): TappifyCallContext['platform'] {\n  return value === 'ios' || value === 'android' ? value : 'all';\n}\n\nfunction toPreset(value: string | null): TapDateRange['preset'] {\n  return value === '7d' || value === '30d' || value === '90d'\n    ? value\n    : undefined;\n}\n\nfunction toContext(payload: unknown): TappifyCallContext {\n  const raw = readRecord(payload, 'context');\n  const filters = readRecord(raw, 'filters');\n  const rawRange = readRecord(filters, 'range');\n  const from = readText(raw, 'from') ?? readText(rawRange, 'from') ?? '';\n  const to = readText(raw, 'to') ?? readText(rawRange, 'to') ?? '';\n\n  const range: TapDateRange = {\n    from: readText(rawRange, 'from') ?? from,\n    to: readText(rawRange, 'to') ?? to,\n  };\n\n  const preset = toPreset(readText(rawRange, 'preset'));\n  if (preset !== undefined) range.preset = preset;\n\n  return {\n    projectId: readText(raw, 'projectId'),\n    platform: toPlatform(readText(raw, 'platform')),\n    from,\n    to,\n    filters: {\n      range,\n      platform: toPlatform(readText(filters, 'platform')),\n      country: readText(filters, 'country') ?? 'all',\n    },\n  };\n}\n\nfunction toCredentials(payload: unknown): TapCredentialValues {\n  const raw = readRecord(payload, 'credentials');\n  const credentials: Record<string, string> = {};\n  for (const [name, value] of Object.entries(raw)) {\n    if (typeof value === 'string') credentials[name] = value;\n  }\n  return credentials;\n}\n\nfunction tooLarge(): TapServerError {\n  return new TapServerError(\n    SERVER_ERROR_CODES.BODY_TOO_LARGE,\n    'A Tappify request body is at most 1 MB. Return a cursor or an id the host can follow instead of inlining the payload.',\n    413,\n  );\n}\n\nasync function readBody(request: Request): Promise<unknown> {\n  if (request.method === 'GET' || request.method === 'HEAD') return {};\n\n  const length = request.headers.get('content-length');\n  if (length !== null && Number(length) > MAX_BODY_BYTES) throw tooLarge();\n\n  const bytes = await request.arrayBuffer();\n  if (bytes.byteLength > MAX_BODY_BYTES) throw tooLarge();\n  if (bytes.byteLength === 0) return {};\n\n  const text = new TextDecoder().decode(bytes);\n  try {\n    return JSON.parse(text);\n  } catch {\n    throw new TapServerError(\n      SERVER_ERROR_CODES.BODY_INVALID,\n      'The request body was not JSON. Do not parse or re-encode the body before handing the Request to createTappifyHandler().',\n      400,\n    );\n  }\n}\n\n/**\n * The route table holds handlers whose declared input and event types the\n * manifest augmentations narrow. Method syntax keeps the parameter bivariant,\n * so a narrowed handler still fits a table the wire types as `unknown`.\n */\ntype AnyRouteHandler = {\n  route(request: TappifyRequest<unknown, unknown>): unknown;\n}['route'];\n\ninterface Route {\n  handler: AnyRouteHandler | undefined;\n  input: unknown;\n  event: unknown;\n  noContent: boolean;\n}\n\nfunction route(\n  handler: AnyRouteHandler | undefined,\n  input: unknown,\n  event?: unknown,\n  noContent = false,\n): Route {\n  return { handler, input, event, noContent };\n}\n\nfunction handlerFor(\n  map: Partial<Record<string, AnyRouteHandler>> | undefined,\n  name: string,\n): AnyRouteHandler | undefined {\n  return map?.[name];\n}\n\nfunction resolveRoute(\n  options: TappifyHandlerOptions,\n  method: string,\n  segments: string[],\n  url: URL,\n  payload: unknown,\n): Route | null {\n  const [head, name] = segments;\n  const bodyInput = readUnknown(payload, 'input') ?? {};\n\n  if (head === 'metrics' && method === 'POST') {\n    return route(options.metrics, bodyInput);\n  }\n  if (head === 'tools' && method === 'POST' && name !== undefined) {\n    return route(handlerFor(options.tools, name), bodyInput);\n  }\n  if (head === 'mentions' && method === 'GET' && name !== undefined) {\n    return route(handlerFor(options.mentions, name), {\n      q: url.searchParams.get('q') ?? '',\n    });\n  }\n  if (head === 'actions' && method === 'POST' && name !== undefined) {\n    return route(handlerFor(options.actions, name), bodyInput);\n  }\n  if (head === 'procedures' && method === 'POST' && name !== undefined) {\n    return route(handlerFor(options.procedures, name), bodyInput);\n  }\n  if (head === 'context' && method === 'GET' && name !== undefined) {\n    return route(handlerFor(options.context, name), undefined);\n  }\n  if (head === 'work' && method === 'POST' && name !== undefined) {\n    const operation = WORK_OPERATIONS.find(candidate => candidate === name);\n    return route(\n      operation === undefined ? undefined : options.work?.[operation],\n      bodyInput,\n    );\n  }\n  if (head === 'events' && method === 'POST') {\n    const envelope = readRecord(payload, 'event');\n    const eventName = readText(envelope, 'name');\n    if (eventName === null) {\n      throw new TapServerError(\n        SERVER_ERROR_CODES.BODY_INVALID,\n        'The events body has no event.name. Post the envelope Tappify sends unchanged, with the event name under \"event\".',\n        400,\n      );\n    }\n    const declared = EVENTS.find(candidate => candidate === eventName);\n    return route(\n      declared === undefined ? undefined : options.events?.[declared],\n      undefined,\n      readUnknown(envelope, 'payload') ?? {},\n      true,\n    );\n  }\n\n  return null;\n}\n\n/**\n * Builds the one `fetch` handler that answers every route Tappify calls on your\n * server.\n *\n * @remarks\n * It routes the paths under `/tappify`, minus `basePath` when your framework mounts\n * it under a prefix, and hands each matched handler a `TappifyRequest`. Every\n * route but `GET /tappify/health` needs a bearer install token, which it verifies\n * with `verifyTappifyToken`, and an `X-Tappify-Event-Id` header; a missing token is\n * 401 `TAP_TOKEN_MISSING`, a missing id 400 `TAP_EVENT_ID_MISSING`, an unknown path\n * 404 `TAP_ROUTE_UNKNOWN` and a declared name with no handler 404\n * `TAP_HANDLER_MISSING`. A body that is not JSON is 400 `TAP_BODY_INVALID` and one\n * over 1 MB is 413 `TAP_BODY_TOO_LARGE`. A `TapServerError` a handler throws is\n * answered with its own code and status, and a `TapError` other than the two token\n * failures with its own code and 400; anything else becomes 500\n * `TAP_INTERNAL_ERROR` with a fixed message, so an internal failure never reaches\n * the owner. An events route answers 204 with no body, and every other route\n * answers the handler's return value as JSON. Export the options object as well as\n * the handler: `createTestClient` takes the options.\n *\n * @example\n * ```ts\n * import {\n *   createTappifyHandler,\n *   type TappifyHandlerOptions,\n * } from '@tappify/extension-sdk/server';\n *\n * const handlerOptions: TappifyHandlerOptions = {\n *   extensionId: 'starter',\n *   health: () => ({ ok: true, version: '0.1.0' }),\n *   procedures: {\n *     getSummary: () => ({ installs: 1260, delta: 0.087, topKeyword: 'photo editor' }),\n *   },\n * };\n *\n * const handler = createTappifyHandler(handlerOptions);\n * ```\n */\nexport function createTappifyHandler(\n  options: TappifyHandlerOptions,\n): TappifyFetchHandler {\n  const basePath = options.basePath ?? '';\n\n  return async function handle(request: Request): Promise<Response> {\n    const url = new URL(request.url);\n    const path = url.pathname.startsWith(basePath)\n      ? url.pathname.slice(basePath.length)\n      : url.pathname;\n\n    const segments = path.split('/').filter(segment => segment !== '');\n    if (segments[0] !== 'tappify') {\n      return failure(\n        SERVER_ERROR_CODES.ROUTE_UNKNOWN,\n        `Nothing is mounted at ${path}. Tappify calls paths under /tappify; set basePath if your framework mounts the handler under a prefix.`,\n        404,\n      );\n    }\n\n    const rest = segments.slice(1);\n\n    if (rest[0] === 'health' && request.method === 'GET') {\n      const health: TappifyHealth = options.health\n        ? await options.health()\n        : { ok: true };\n      return json(health);\n    }\n\n    const authorization = request.headers.get('authorization') ?? '';\n    const token = authorization.startsWith('Bearer ')\n      ? authorization.slice('Bearer '.length)\n      : '';\n\n    if (token === '') {\n      return failure(\n        SERVER_ERROR_CODES.TOKEN_MISSING,\n        'This route needs an install token. Tappify sends it as Authorization: Bearer <token>; forward the header unchanged from your framework.',\n        401,\n      );\n    }\n\n    const eventId = request.headers.get('x-tappify-event-id');\n    if (eventId === null || eventId === '') {\n      return failure(\n        SERVER_ERROR_CODES.EVENT_ID_MISSING,\n        'Every Tappify call carries X-Tappify-Event-Id for idempotency. Forward the header unchanged, and use it as the key when you deduplicate.',\n        400,\n      );\n    }\n\n    try {\n      const claims = await verifyTappifyToken(token, {\n        extensionId: options.extensionId,\n        jwksUrl: options.jwksUrl,\n        jwks: options.jwks,\n      });\n\n      const payload = await readBody(request);\n      const matched = resolveRoute(options, request.method, rest, url, payload);\n\n      if (matched === null) {\n        return failure(\n          SERVER_ERROR_CODES.ROUTE_UNKNOWN,\n          `Tappify has no ${request.method} ${path} route. The paths it calls are listed under \"Vendor server endpoints\" in the reference; check the method and the spelling.`,\n          404,\n        );\n      }\n\n      if (matched.handler === undefined) {\n        return failure(\n          SERVER_ERROR_CODES.HANDLER_MISSING,\n          `No handler is registered for ${request.method} ${path}. Add it to createTappifyHandler(), or remove the contribution from tappify.extension.json.`,\n          404,\n        );\n      }\n\n      const documents = readRecord(payload, 'documents');\n\n      const typed: TappifyRequest<unknown, unknown> = {\n        install: toInstall(payload, claims),\n        context: toContext(payload),\n        input: matched.input,\n        credentials: toCredentials(payload),\n        documents: documents as TappifyDocuments,\n        event: matched.event,\n        eventId,\n        claims,\n        request,\n      };\n\n      const result = await matched.handler(typed);\n      return matched.noContent\n        ? new Response(null, { status: 204 })\n        : json(result);\n    } catch (error) {\n      if (TapServerError.is(error)) {\n        return wireError(error.code, error.message, error.status ?? 400);\n      }\n      if (TapError.is(error)) {\n        const tokenFailure = TOKEN_FAILURES.find(\n          candidate => candidate === error.code,\n        );\n        if (tokenFailure !== undefined) {\n          return failure(tokenFailure, error.message, 401);\n        }\n        return wireError(error.code, error.message, 400);\n      }\n      return failure(SERVER_ERROR_CODES.INTERNAL_ERROR, INTERNAL_MESSAGE, 500);\n    }\n  };\n}\n\nexport type {\n  ContextBlock,\n  MentionItems,\n  MetricsInput,\n  MetricsResponse,\n  TappifyClaims,\n};\n"],"mappings":";;;;;;;;;AAYO,IAAM,qBAAqB;AAAA,EAChC,eAAe;AAAA,EACf,iBAAiB;AAAA,EACjB,gBAAgB;AAAA,EAChB,eAAe;AAAA,EACf,eAAe;AAAA,EACf,gBAAgB;AAAA,EAChB,kBAAkB;AAAA,EAClB,cAAc;AAAA,EACd,gBAAgB;AAAA,EAChB,kBAAkB;AACpB;;;ACvBA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OAGK;AAWA,IAAM,mBACX;AAEF,IAAM,0BAA0B;AAEhC,IAAM,aAAa,oBAAI,IAA6B;AAEpD,SAAS,OAAO,SAA8C;AAC5D,MAAI,QAAQ,KAAM,QAAO,kBAAkB,QAAQ,IAAI;AAEvD,QAAM,MAAM,QAAQ,WAAW;AAC/B,QAAM,SAAS,WAAW,IAAI,GAAG;AACjC,MAAI,OAAQ,QAAO;AAEnB,QAAM,UAAU,mBAAmB,IAAI,IAAI,GAAG,CAAC;AAC/C,aAAW,IAAI,KAAK,OAAO;AAC3B,SAAO;AACT;AAEA,SAAS,WAAW,SAAqB,KAAiC;AACxE,QAAM,QAAQ,QAAQ,GAAG;AACzB,SAAO,OAAO,UAAU,WAAW,QAAQ;AAC7C;AAEA,SAAS,SAAS,SAAqB,UAAiC;AACtE,QAAM,MAAM,QAAQ;AACpB,QAAM,UACJ,QAAQ,YAAa,MAAM,QAAQ,GAAG,KAAK,IAAI,SAAS,QAAQ;AAElE,MAAI,CAAC,SAAS;AACZ,UAAM,IAAI;AAAA,MACR;AAAA,MACA,oKAAoK,QAAQ;AAAA,IAC9K;AAAA,EACF;AAEA,QAAM,YAAY,WAAW,SAAS,WAAW;AACjD,QAAM,cAAc,WAAW,SAAS,aAAa;AACrD,QAAM,iBAAiB,WAAW,SAAS,gBAAgB;AAE3D,MACE,cAAc,UACd,gBAAgB,UAChB,mBAAmB,QACnB;AACA,UAAM,IAAI;AAAA,MACR;AAAA,MACA,mGAAmG,gBAAgB;AAAA,IACrH;AAAA,EACF;AAEA,QAAM,SAAS,QAAQ;AACvB,QAAM,SAAS,WAAW,SAAS,QAAQ;AAE3C,QAAM,SAAwB;AAAA,IAC5B,KAAK,WAAW,SAAS,KAAK,KAAK;AAAA,IACnC,KAAK;AAAA,IACL,KAAK,OAAO,QAAQ,QAAQ,WAAW,QAAQ,MAAM;AAAA,IACrD,KAAK,OAAO,QAAQ,QAAQ,WAAW,QAAQ,MAAM;AAAA,IACrD;AAAA,IACA;AAAA,IACA,WAAW,WAAW,SAAS,WAAW,KAAK;AAAA,IAC/C;AAAA,IACA,QAAQ,MAAM,QAAQ,MAAM,IACxB,OAAO,OAAO,CAAC,UAA2B,OAAO,UAAU,QAAQ,IACnE,CAAC;AAAA,EACP;AAEA,MAAI,WAAW,OAAW,QAAO,SAAS;AAC1C,SAAO;AACT;AA2BA,eAAsB,mBACpB,OACA,SACwB;AACxB,QAAM,WAAW,OAAO,QAAQ,WAAW;AAE3C,MAAI;AACJ,MAAI;AACF,UAAM,WAAW,MAAM,UAAU,OAAO,OAAO,OAAO,GAAG;AAAA,MACvD,YAAY,CAAC,OAAO;AAAA,MACpB,gBAAgB;AAAA,IAClB,CAAC;AACD,cAAU,SAAS;AAAA,EACrB,QAAQ;AACN,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAEA,SAAO,SAAS,SAAS,QAAQ;AACnC;;;ACrIO,IAAM,mBACX;AAEK,SAAS,KAAK,MAAe,SAAS,KAAe;AAC1D,SAAO,IAAI,SAAS,KAAK,UAAU,IAAI,GAAG;AAAA,IACxC;AAAA,IACA,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,EAChD,CAAC;AACH;AAEO,SAAS,UACd,MACA,SACA,QACU;AACV,SAAO,KAAK,EAAE,OAAO,EAAE,MAAM,QAAQ,EAAE,GAAG,MAAM;AAClD;AAEO,SAAS,QACd,MACA,SACA,QACU;AACV,SAAO,UAAU,MAAM,SAAS,MAAM;AACxC;AAEO,SAAS,YAAY,OAAgB,KAAsB;AAChE,MAAI,OAAO,UAAU,YAAY,UAAU,KAAM,QAAO;AACxD,SAAQ,MAAkC,GAAG;AAC/C;AAEO,SAAS,WACd,OACA,KACyB;AACzB,QAAM,SAAS,YAAY,OAAO,GAAG;AACrC,SAAO,OAAO,WAAW,YAAY,WAAW,OAC3C,SACD,CAAC;AACP;AAEO,SAAS,SAAS,OAAgB,KAA4B;AACnE,QAAM,SAAS,YAAY,OAAO,GAAG;AACrC,SAAO,OAAO,WAAW,WAAW,SAAS;AAC/C;;;ACXA,IAAM,iBAAiB;AAEvB,IAAM,kBAA4C;AAAA,EAChD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEA,IAAM,iBAAgD;AAAA,EACpD,mBAAmB;AAAA,EACnB,mBAAmB;AACrB;AAMA,SAAS,UAAU,SAAkB,QAAuC;AAC1E,QAAM,MAAM,WAAW,SAAS,SAAS;AACzC,SAAO;AAAA,IACL,IAAI,OAAO;AAAA,IACX,aAAa,OAAO;AAAA,IACpB,WAAW,OAAO,aAAa,SAAS,KAAK,WAAW;AAAA,IACxD,gBAAgB,OAAO;AAAA,EACzB;AACF;AAEA,SAAS,WAAW,OAAsD;AACxE,SAAO,UAAU,SAAS,UAAU,YAAY,QAAQ;AAC1D;AAEA,SAAS,SAAS,OAA8C;AAC9D,SAAO,UAAU,QAAQ,UAAU,SAAS,UAAU,QAClD,QACA;AACN;AAEA,SAAS,UAAU,SAAsC;AACvD,QAAM,MAAM,WAAW,SAAS,SAAS;AACzC,QAAM,UAAU,WAAW,KAAK,SAAS;AACzC,QAAM,WAAW,WAAW,SAAS,OAAO;AAC5C,QAAM,OAAO,SAAS,KAAK,MAAM,KAAK,SAAS,UAAU,MAAM,KAAK;AACpE,QAAM,KAAK,SAAS,KAAK,IAAI,KAAK,SAAS,UAAU,IAAI,KAAK;AAE9D,QAAM,QAAsB;AAAA,IAC1B,MAAM,SAAS,UAAU,MAAM,KAAK;AAAA,IACpC,IAAI,SAAS,UAAU,IAAI,KAAK;AAAA,EAClC;AAEA,QAAM,SAAS,SAAS,SAAS,UAAU,QAAQ,CAAC;AACpD,MAAI,WAAW,OAAW,OAAM,SAAS;AAEzC,SAAO;AAAA,IACL,WAAW,SAAS,KAAK,WAAW;AAAA,IACpC,UAAU,WAAW,SAAS,KAAK,UAAU,CAAC;AAAA,IAC9C;AAAA,IACA;AAAA,IACA,SAAS;AAAA,MACP;AAAA,MACA,UAAU,WAAW,SAAS,SAAS,UAAU,CAAC;AAAA,MAClD,SAAS,SAAS,SAAS,SAAS,KAAK;AAAA,IAC3C;AAAA,EACF;AACF;AAEA,SAAS,cAAc,SAAuC;AAC5D,QAAM,MAAM,WAAW,SAAS,aAAa;AAC7C,QAAM,cAAsC,CAAC;AAC7C,aAAW,CAAC,MAAM,KAAK,KAAK,OAAO,QAAQ,GAAG,GAAG;AAC/C,QAAI,OAAO,UAAU,SAAU,aAAY,IAAI,IAAI;AAAA,EACrD;AACA,SAAO;AACT;AAEA,SAAS,WAA2B;AAClC,SAAO,IAAI;AAAA,IACT,mBAAmB;AAAA,IACnB;AAAA,IACA;AAAA,EACF;AACF;AAEA,eAAe,SAAS,SAAoC;AAC1D,MAAI,QAAQ,WAAW,SAAS,QAAQ,WAAW,OAAQ,QAAO,CAAC;AAEnE,QAAM,SAAS,QAAQ,QAAQ,IAAI,gBAAgB;AACnD,MAAI,WAAW,QAAQ,OAAO,MAAM,IAAI,eAAgB,OAAM,SAAS;AAEvE,QAAM,QAAQ,MAAM,QAAQ,YAAY;AACxC,MAAI,MAAM,aAAa,eAAgB,OAAM,SAAS;AACtD,MAAI,MAAM,eAAe,EAAG,QAAO,CAAC;AAEpC,QAAM,OAAO,IAAI,YAAY,EAAE,OAAO,KAAK;AAC3C,MAAI;AACF,WAAO,KAAK,MAAM,IAAI;AAAA,EACxB,QAAQ;AACN,UAAM,IAAI;AAAA,MACR,mBAAmB;AAAA,MACnB;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACF;AAkBA,SAAS,MACP,SACA,OACA,OACA,YAAY,OACL;AACP,SAAO,EAAE,SAAS,OAAO,OAAO,UAAU;AAC5C;AAEA,SAAS,WACP,KACA,MAC6B;AAC7B,SAAO,MAAM,IAAI;AACnB;AAEA,SAAS,aACP,SACA,QACA,UACA,KACA,SACc;AACd,QAAM,CAAC,MAAM,IAAI,IAAI;AACrB,QAAM,YAAY,YAAY,SAAS,OAAO,KAAK,CAAC;AAEpD,MAAI,SAAS,aAAa,WAAW,QAAQ;AAC3C,WAAO,MAAM,QAAQ,SAAS,SAAS;AAAA,EACzC;AACA,MAAI,SAAS,WAAW,WAAW,UAAU,SAAS,QAAW;AAC/D,WAAO,MAAM,WAAW,QAAQ,OAAO,IAAI,GAAG,SAAS;AAAA,EACzD;AACA,MAAI,SAAS,cAAc,WAAW,SAAS,SAAS,QAAW;AACjE,WAAO,MAAM,WAAW,QAAQ,UAAU,IAAI,GAAG;AAAA,MAC/C,GAAG,IAAI,aAAa,IAAI,GAAG,KAAK;AAAA,IAClC,CAAC;AAAA,EACH;AACA,MAAI,SAAS,aAAa,WAAW,UAAU,SAAS,QAAW;AACjE,WAAO,MAAM,WAAW,QAAQ,SAAS,IAAI,GAAG,SAAS;AAAA,EAC3D;AACA,MAAI,SAAS,gBAAgB,WAAW,UAAU,SAAS,QAAW;AACpE,WAAO,MAAM,WAAW,QAAQ,YAAY,IAAI,GAAG,SAAS;AAAA,EAC9D;AACA,MAAI,SAAS,aAAa,WAAW,SAAS,SAAS,QAAW;AAChE,WAAO,MAAM,WAAW,QAAQ,SAAS,IAAI,GAAG,MAAS;AAAA,EAC3D;AACA,MAAI,SAAS,UAAU,WAAW,UAAU,SAAS,QAAW;AAC9D,UAAM,YAAY,gBAAgB,KAAK,eAAa,cAAc,IAAI;AACtE,WAAO;AAAA,MACL,cAAc,SAAY,SAAY,QAAQ,OAAO,SAAS;AAAA,MAC9D;AAAA,IACF;AAAA,EACF;AACA,MAAI,SAAS,YAAY,WAAW,QAAQ;AAC1C,UAAM,WAAW,WAAW,SAAS,OAAO;AAC5C,UAAM,YAAY,SAAS,UAAU,MAAM;AAC3C,QAAI,cAAc,MAAM;AACtB,YAAM,IAAI;AAAA,QACR,mBAAmB;AAAA,QACnB;AAAA,QACA;AAAA,MACF;AAAA,IACF;AACA,UAAM,WAAW,OAAO,KAAK,eAAa,cAAc,SAAS;AACjE,WAAO;AAAA,MACL,aAAa,SAAY,SAAY,QAAQ,SAAS,QAAQ;AAAA,MAC9D;AAAA,MACA,YAAY,UAAU,SAAS,KAAK,CAAC;AAAA,MACrC;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AACT;AAwCO,SAAS,qBACd,SACqB;AACrB,QAAM,WAAW,QAAQ,YAAY;AAErC,SAAO,eAAe,OAAO,SAAqC;AAChE,UAAM,MAAM,IAAI,IAAI,QAAQ,GAAG;AAC/B,UAAM,OAAO,IAAI,SAAS,WAAW,QAAQ,IACzC,IAAI,SAAS,MAAM,SAAS,MAAM,IAClC,IAAI;AAER,UAAM,WAAW,KAAK,MAAM,GAAG,EAAE,OAAO,aAAW,YAAY,EAAE;AACjE,QAAI,SAAS,CAAC,MAAM,WAAW;AAC7B,aAAO;AAAA,QACL,mBAAmB;AAAA,QACnB,yBAAyB,IAAI;AAAA,QAC7B;AAAA,MACF;AAAA,IACF;AAEA,UAAM,OAAO,SAAS,MAAM,CAAC;AAE7B,QAAI,KAAK,CAAC,MAAM,YAAY,QAAQ,WAAW,OAAO;AACpD,YAAM,SAAwB,QAAQ,SAClC,MAAM,QAAQ,OAAO,IACrB,EAAE,IAAI,KAAK;AACf,aAAO,KAAK,MAAM;AAAA,IACpB;AAEA,UAAM,gBAAgB,QAAQ,QAAQ,IAAI,eAAe,KAAK;AAC9D,UAAM,QAAQ,cAAc,WAAW,SAAS,IAC5C,cAAc,MAAM,UAAU,MAAM,IACpC;AAEJ,QAAI,UAAU,IAAI;AAChB,aAAO;AAAA,QACL,mBAAmB;AAAA,QACnB;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,UAAM,UAAU,QAAQ,QAAQ,IAAI,oBAAoB;AACxD,QAAI,YAAY,QAAQ,YAAY,IAAI;AACtC,aAAO;AAAA,QACL,mBAAmB;AAAA,QACnB;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,QAAI;AACF,YAAM,SAAS,MAAM,mBAAmB,OAAO;AAAA,QAC7C,aAAa,QAAQ;AAAA,QACrB,SAAS,QAAQ;AAAA,QACjB,MAAM,QAAQ;AAAA,MAChB,CAAC;AAED,YAAM,UAAU,MAAM,SAAS,OAAO;AACtC,YAAM,UAAU,aAAa,SAAS,QAAQ,QAAQ,MAAM,KAAK,OAAO;AAExE,UAAI,YAAY,MAAM;AACpB,eAAO;AAAA,UACL,mBAAmB;AAAA,UACnB,kBAAkB,QAAQ,MAAM,IAAI,IAAI;AAAA,UACxC;AAAA,QACF;AAAA,MACF;AAEA,UAAI,QAAQ,YAAY,QAAW;AACjC,eAAO;AAAA,UACL,mBAAmB;AAAA,UACnB,gCAAgC,QAAQ,MAAM,IAAI,IAAI;AAAA,UACtD;AAAA,QACF;AAAA,MACF;AAEA,YAAM,YAAY,WAAW,SAAS,WAAW;AAEjD,YAAM,QAA0C;AAAA,QAC9C,SAAS,UAAU,SAAS,MAAM;AAAA,QAClC,SAAS,UAAU,OAAO;AAAA,QAC1B,OAAO,QAAQ;AAAA,QACf,aAAa,cAAc,OAAO;AAAA,QAClC;AAAA,QACA,OAAO,QAAQ;AAAA,QACf;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAEA,YAAM,SAAS,MAAM,QAAQ,QAAQ,KAAK;AAC1C,aAAO,QAAQ,YACX,IAAI,SAAS,MAAM,EAAE,QAAQ,IAAI,CAAC,IAClC,KAAK,MAAM;AAAA,IACjB,SAAS,OAAO;AACd,UAAI,eAAe,GAAG,KAAK,GAAG;AAC5B,eAAO,UAAU,MAAM,MAAM,MAAM,SAAS,MAAM,UAAU,GAAG;AAAA,MACjE;AACA,UAAI,SAAS,GAAG,KAAK,GAAG;AACtB,cAAM,eAAe,eAAe;AAAA,UAClC,eAAa,cAAc,MAAM;AAAA,QACnC;AACA,YAAI,iBAAiB,QAAW;AAC9B,iBAAO,QAAQ,cAAc,MAAM,SAAS,GAAG;AAAA,QACjD;AACA,eAAO,UAAU,MAAM,MAAM,MAAM,SAAS,GAAG;AAAA,MACjD;AACA,aAAO,QAAQ,mBAAmB,gBAAgB,kBAAkB,GAAG;AAAA,IACzE;AAAA,EACF;AACF;","names":[]}