@traceten/ai-crawl 0.1.0

package/dist/ip.js

@@ -0,0 +1,109 @@
+/**
+ * Crawler IP resolution.
+ *
+ * The crawler's TCP connection terminates at the CUSTOMER's server, so the
+ * crawler IP is only observable here — Traceten's edge sees the customer's
+ * origin IP, not the crawler's. This module
+ * derives the best-available value; the payload OMITS the field rather than
+ * send a wrong one.
+ *
+ * Resolution order:
+ *   1. `cf-connecting-ip` — ONLY when `trustCfConnectingIp` is set. The
+ *      Cloudflare adapters set it automatically (the platform strips and
+ *      rewrites the header there); anywhere else it is client-forgeable,
+ *      and a forged vendor-range IP paired with a vendor UA is exactly the
+ *      spoof the server-side verification exists to catch.
+ *   2. `x-forwarded-for` — ONLY when `trustProxy` is true, selecting the
+ *      entry `proxyDepth` hops from the right (each trusted proxy appends
+ *      one entry; anything further left is attacker-controllable)
+ *   3. Socket remote address, where the runtime exposes one
+ */
+const IPV4_RE = /^(\d{1,3})\.(\d{1,3})\.(\d{1,3})\.(\d{1,3})$/;
+// Loose IPv6 shape check — up to 8 hex groups separated by colons ("::"
+// compression appears as empty groups). Deliberately permissive: this is a
+// plausibility gate, not a validator; the edge re-validates.
+const IPV6_RE = /^[0-9a-f]{0,4}(:[0-9a-f]{0,4}){1,7}$/i;
+/** Normalise a candidate; returns `undefined` when it is not a plausible IP. */
+export function normalizeIp(raw) {
+    if (!raw)
+        return undefined;
+    let value = raw.trim();
+    if (value === "")
+        return undefined;
+    // Bracketed IPv6, possibly with a port: [::1]:8080
+    if (value.startsWith("[")) {
+        const close = value.indexOf("]");
+        if (close === -1)
+            return undefined;
+        value = value.slice(1, close);
+    }
+    else {
+        // IPv4 with a port: 1.2.3.4:5678 (a bare IPv6 also contains ":", so only
+        // strip when what remains is a valid IPv4).
+        const colon = value.indexOf(":");
+        if (colon !== -1 && value.indexOf(":", colon + 1) === -1) {
+            const head = value.slice(0, colon);
+            if (IPV4_RE.test(head))
+                value = head;
+        }
+    }
+    // Node reports IPv4-mapped addresses as ::ffff:1.2.3.4.
+    if (value.toLowerCase().startsWith("::ffff:")) {
+        const tail = value.slice(7);
+        if (IPV4_RE.test(tail))
+            value = tail;
+    }
+    const v4 = IPV4_RE.exec(value);
+    if (v4 !== null) {
+        for (let i = 1; i <= 4; i++) {
+            if (Number(v4[i]) > 255)
+                return undefined;
+        }
+        return value;
+    }
+    if (value.includes(":") && value.length <= 45 && IPV6_RE.test(value)) {
+        return value.toLowerCase();
+    }
+    return undefined;
+}
+/**
+ * Select the client entry from an `x-forwarded-for` value given the number
+ * of trusted proxies that append to it. Returns `undefined` when the chain
+ * is shorter than `proxyDepth` (a wrong value is worse than none).
+ */
+export function ipFromForwardedFor(headerValue, proxyDepth) {
+    const entries = headerValue
+        .split(",")
+        .map((e) => e.trim())
+        .filter((e) => e !== "");
+    if (entries.length === 0 || proxyDepth < 1 || entries.length < proxyDepth) {
+        return undefined;
+    }
+    return normalizeIp(entries[entries.length - proxyDepth]);
+}
+/**
+ * Resolve the crawler IP from a request. Returns `undefined` when no
+ * trustworthy value is derivable. Never throws.
+ */
+export function resolveCrawlerIp(cfg, facts) {
+    try {
+        if (cfg.trustCfConnectingIp) {
+            const cf = normalizeIp(facts.header("cf-connecting-ip"));
+            if (cf !== undefined)
+                return cf;
+        }
+        if (cfg.trustProxy) {
+            const xff = facts.header("x-forwarded-for");
+            if (xff) {
+                const fromXff = ipFromForwardedFor(xff, cfg.proxyDepth);
+                if (fromXff !== undefined)
+                    return fromXff;
+            }
+        }
+        return normalizeIp(facts.socketAddr);
+    }
+    catch {
+        return undefined;
+    }
+}
+//# sourceMappingURL=ip.js.map

package/dist/ip.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ip.js","sourceRoot":"","sources":["../src/ip.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAIH,MAAM,OAAO,GAAG,8CAA8C,CAAC;AAC/D,wEAAwE;AACxE,2EAA2E;AAC3E,6DAA6D;AAC7D,MAAM,OAAO,GAAG,uCAAuC,CAAC;AAExD,gFAAgF;AAChF,MAAM,UAAU,WAAW,CAAC,GAA8B;IACxD,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,IAAI,KAAK,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACvB,IAAI,KAAK,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IAEnC,mDAAmD;IACnD,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,KAAK,KAAK,CAAC,CAAC;YAAE,OAAO,SAAS,CAAC;QACnC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IAChC,CAAC;SAAM,CAAC;QACN,yEAAyE;QACzE,4CAA4C;QAC5C,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,KAAK,KAAK,CAAC,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YACzD,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;YACnC,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,KAAK,GAAG,IAAI,CAAC;QACvC,CAAC;IACH,CAAC;IAED,wDAAwD;IACxD,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC5B,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,KAAK,GAAG,IAAI,CAAC;IACvC,CAAC;IAED,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC/B,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;QAChB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC5B,IAAI,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG;gBAAE,OAAO,SAAS,CAAC;QAC5C,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,EAAE,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACrE,OAAO,KAAK,CAAC,WAAW,EAAE,CAAC;IAC7B,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,WAAmB,EAAE,UAAkB;IACxE,MAAM,OAAO,GAAG,WAAW;SACxB,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;IAC3B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,UAAU,GAAG,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,UAAU,EAAE,CAAC;QAC1E,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAC9B,GAA0B,EAC1B,KAAmB;IAEnB,IAAI,CAAC;QACH,IAAI,GAAG,CAAC,mBAAmB,EAAE,CAAC;YAC5B,MAAM,EAAE,GAAG,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,CAAC;YACzD,IAAI,EAAE,KAAK,SAAS;gBAAE,OAAO,EAAE,CAAC;QAClC,CAAC;QAED,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;YACnB,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;YAC5C,IAAI,GAAG,EAAE,CAAC;gBACR,MAAM,OAAO,GAAG,kBAAkB,CAAC,GAAG,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC;gBACxD,IAAI,OAAO,KAAK,SAAS;oBAAE,OAAO,OAAO,CAAC;YAC5C,CAAC;QACH,CAAC;QAED,OAAO,WAAW,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC"}

package/dist/matcher.d.ts

@@ -0,0 +1,44 @@
+/**
+ * Anchored two-tier user-agent matching.
+ *
+ * NEVER `includes()` on the whole string — that is the reference package's
+ * defect (its page claims token matching; its code does substring matching,
+ * so a browser UA containing `grok` or `copilot` false-positives). Follows
+ * the same anchoring discipline Traceten's server-side classifier uses,
+ * adapted for crawler UAs where the token sits mid-string
+ * (`Mozilla/5.0 … compatible; GPTBot/1.1; +https://openai.com/gptbot`).
+ *
+ * Boundary rule: a token matches only when the character before it and (for
+ * tier 1) the character after it are NOT token characters `[a-z0-9._-]`.
+ * So `compatible; GPTBot/1.1` matches, and `not-really-GPTBot` does not
+ * (preceded by `-`), and `GPTBotnet` does not (followed by `n`).
+ */
+import type { CrawlerMatch } from "./types.js";
+/** Anchoring mode. */
+export type AnchorMode = "token" | "prefix";
+/**
+ * True when `needle` occurs in `haystack` (both lowercase) anchored at a
+ * token boundary.
+ *
+ * `"token"` (tier 1): boundary required on BOTH sides — `GPTBot/1.1`
+ * matches, `not-really-GPTBot` and `GPTBotnet` do not.
+ *
+ * `"prefix"` (tier 2): left boundary required; the right side must be a
+ * boundary OR a compound-token delimiter (`-`, `_`, `.`) — so `claude`
+ * catches a future `Claude-NewAgent/1.0` without matching `claudius`.
+ * A needle that itself ends in a delimiter (e.g. `oai-`, `meta-`) is a free
+ * prefix past that delimiter.
+ */
+export declare function hasAnchoredToken(haystack: string, needle: string, mode: AnchorMode): boolean;
+/**
+ * Match a raw User-Agent string against the local crawler list.
+ *
+ * Tier 1: exact agent tokens, boundary-anchored on both sides.
+ * Tier 2: coarse provider aliases, left-boundary-anchored prefixes, so a new
+ * agent from a known vendor is captured without a release. Tier-2 matches
+ * carry category `ai_crawler` locally; the server assigns the real one.
+ *
+ * Returns `null` for no match. Never throws.
+ */
+export declare function matchCrawler(userAgent: string | null | undefined): CrawlerMatch | null;
+//# sourceMappingURL=matcher.d.ts.map

package/dist/matcher.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"matcher.d.ts","sourceRoot":"","sources":["../src/matcher.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAGH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAS/C,sBAAsB;AACtB,MAAM,MAAM,UAAU,GAAG,OAAO,GAAG,QAAQ,CAAC;AAE5C;;;;;;;;;;;;GAYG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,GAAG,OAAO,CA+B5F;AAED;;;;;;;;;GASG;AACH,wBAAgB,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,YAAY,GAAG,IAAI,CAiCtF"}

package/dist/matcher.js

@@ -0,0 +1,111 @@
+/**
+ * Anchored two-tier user-agent matching.
+ *
+ * NEVER `includes()` on the whole string — that is the reference package's
+ * defect (its page claims token matching; its code does substring matching,
+ * so a browser UA containing `grok` or `copilot` false-positives). Follows
+ * the same anchoring discipline Traceten's server-side classifier uses,
+ * adapted for crawler UAs where the token sits mid-string
+ * (`Mozilla/5.0 … compatible; GPTBot/1.1; +https://openai.com/gptbot`).
+ *
+ * Boundary rule: a token matches only when the character before it and (for
+ * tier 1) the character after it are NOT token characters `[a-z0-9._-]`.
+ * So `compatible; GPTBot/1.1` matches, and `not-really-GPTBot` does not
+ * (preceded by `-`), and `GPTBotnet` does not (followed by `n`).
+ */
+import { AGENT_TOKENS, PROVIDER_ALIASES } from "./crawlers.js";
+/** Characters that can appear inside a UA product token. */
+function isTokenChar(ch) {
+    return ((ch >= "a" && ch <= "z") || (ch >= "0" && ch <= "9") || ch === "." || ch === "_" || ch === "-");
+}
+/**
+ * True when `needle` occurs in `haystack` (both lowercase) anchored at a
+ * token boundary.
+ *
+ * `"token"` (tier 1): boundary required on BOTH sides — `GPTBot/1.1`
+ * matches, `not-really-GPTBot` and `GPTBotnet` do not.
+ *
+ * `"prefix"` (tier 2): left boundary required; the right side must be a
+ * boundary OR a compound-token delimiter (`-`, `_`, `.`) — so `claude`
+ * catches a future `Claude-NewAgent/1.0` without matching `claudius`.
+ * A needle that itself ends in a delimiter (e.g. `oai-`, `meta-`) is a free
+ * prefix past that delimiter.
+ */
+export function hasAnchoredToken(haystack, needle, mode) {
+    const needleEndsWithDelimiter = needle.endsWith("-") || needle.endsWith("_") || needle.endsWith(".");
+    let idx = haystack.indexOf(needle);
+    while (idx !== -1) {
+        let leftOk = idx === 0 || !isTokenChar(haystack.charAt(idx - 1));
+        // Prefix (tier-2) matches skip occurrences that start a URL host —
+        // `SomeScraper/1.0 (+https://anthropic.com/policies)` is a scraper
+        // citing a vendor page, not a vendor agent. Tier-1 tokens keep matching
+        // anywhere: real crawler tokens never begin a hostname.
+        if (leftOk && mode === "prefix" && idx >= 3 && haystack.slice(idx - 3, idx) === "://") {
+            leftOk = false;
+        }
+        const rightIdx = idx + needle.length;
+        const nextCh = rightIdx >= haystack.length ? "" : haystack.charAt(rightIdx);
+        let rightOk;
+        if (mode === "token") {
+            rightOk = nextCh === "" || !isTokenChar(nextCh);
+        }
+        else {
+            rightOk =
+                needleEndsWithDelimiter ||
+                    nextCh === "" ||
+                    !isTokenChar(nextCh) ||
+                    nextCh === "-" ||
+                    nextCh === "_" ||
+                    nextCh === ".";
+        }
+        if (leftOk && rightOk)
+            return true;
+        idx = haystack.indexOf(needle, idx + 1);
+    }
+    return false;
+}
+/**
+ * Match a raw User-Agent string against the local crawler list.
+ *
+ * Tier 1: exact agent tokens, boundary-anchored on both sides.
+ * Tier 2: coarse provider aliases, left-boundary-anchored prefixes, so a new
+ * agent from a known vendor is captured without a release. Tier-2 matches
+ * carry category `ai_crawler` locally; the server assigns the real one.
+ *
+ * Returns `null` for no match. Never throws.
+ */
+export function matchCrawler(userAgent) {
+    if (!userAgent)
+        return null;
+    let ua;
+    try {
+        ua = userAgent.toLowerCase();
+    }
+    catch {
+        return null;
+    }
+    if (ua.length === 0 || ua.length > 4096)
+        return null;
+    for (const entry of AGENT_TOKENS) {
+        if (hasAnchoredToken(ua, entry.token, "token")) {
+            return {
+                agent: entry.agent,
+                provider: entry.provider,
+                category: entry.category,
+                tier: "exact",
+            };
+        }
+    }
+    for (const entry of PROVIDER_ALIASES) {
+        if (hasAnchoredToken(ua, entry.alias, "prefix")) {
+            return {
+                agent: null,
+                provider: entry.provider,
+                category: "ai_crawler",
+                tier: "provider",
+            };
+        }
+    }
+    return null;
+}
+//# sourceMappingURL=matcher.js.map

package/dist/matcher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"matcher.js","sourceRoot":"","sources":["../src/matcher.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAG/D,4DAA4D;AAC5D,SAAS,WAAW,CAAC,EAAU;IAC7B,OAAO,CACL,CAAC,EAAE,IAAI,GAAG,IAAI,EAAE,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,GAAG,IAAI,EAAE,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG,CAC/F,CAAC;AACJ,CAAC;AAKD;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAAgB,EAAE,MAAc,EAAE,IAAgB;IACjF,MAAM,uBAAuB,GAC3B,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IACvE,IAAI,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACnC,OAAO,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC;QAClB,IAAI,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;QACjE,mEAAmE;QACnE,mEAAmE;QACnE,wEAAwE;QACxE,wDAAwD;QACxD,IAAI,MAAM,IAAI,IAAI,KAAK,QAAQ,IAAI,GAAG,IAAI,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,EAAE,GAAG,CAAC,KAAK,KAAK,EAAE,CAAC;YACtF,MAAM,GAAG,KAAK,CAAC;QACjB,CAAC;QACD,MAAM,QAAQ,GAAG,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC;QACrC,MAAM,MAAM,GAAG,QAAQ,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC5E,IAAI,OAAgB,CAAC;QACrB,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;YACrB,OAAO,GAAG,MAAM,KAAK,EAAE,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAClD,CAAC;aAAM,CAAC;YACN,OAAO;gBACL,uBAAuB;oBACvB,MAAM,KAAK,EAAE;oBACb,CAAC,WAAW,CAAC,MAAM,CAAC;oBACpB,MAAM,KAAK,GAAG;oBACd,MAAM,KAAK,GAAG;oBACd,MAAM,KAAK,GAAG,CAAC;QACnB,CAAC;QACD,IAAI,MAAM,IAAI,OAAO;YAAE,OAAO,IAAI,CAAC;QACnC,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,YAAY,CAAC,SAAoC;IAC/D,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IAC5B,IAAI,EAAU,CAAC;IACf,IAAI,CAAC;QACH,EAAE,GAAG,SAAS,CAAC,WAAW,EAAE,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,IAAI;QAAE,OAAO,IAAI,CAAC;IAErD,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE,CAAC;QACjC,IAAI,gBAAgB,CAAC,EAAE,EAAE,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC;YAC/C,OAAO;gBACL,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,IAAI,EAAE,OAAO;aACd,CAAC;QACJ,CAAC;IACH,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,gBAAgB,EAAE,CAAC;QACrC,IAAI,gBAAgB,CAAC,EAAE,EAAE,KAAK,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC;YAChD,OAAO;gBACL,KAAK,EAAE,IAAI;gBACX,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,QAAQ,EAAE,YAAY;gBACtB,IAAI,EAAE,UAAU;aACjB,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/report.d.ts

@@ -0,0 +1,43 @@
+/**
+ * Payload construction + delivery.
+ *
+ * Contract: never throws, never blocks the response, 1500 ms
+ * timeout, `keepalive: true`, snake_case on the wire. Delivery failures are
+ * silent — a broken analytics call must never surface on a customer's site.
+ *
+ * Silent is not the same as invisible: an opt-in `onError` reports a non-2xx
+ * or a network failure to the caller. Without it a rejected report cannot be
+ * told from a delivered one, and a bad token reads as "no crawlers visited".
+ */
+import type { AiCrawlWirePayload, ResolvedAiCrawlConfig } from "./types.js";
+export declare const REPORT_TIMEOUT_MS = 1500;
+/** Rebuild the reported URL against `publicOrigin` when configured. Never throws. */
+export declare function buildReportUrl(cfg: ResolvedAiCrawlConfig, url: string): string;
+export interface ReportInput {
+    url: string;
+    method: string;
+    userAgent: string;
+    status?: number | undefined;
+    ip?: string | undefined;
+}
+/** Build the wire payload. Optional fields are OMITTED, never null/wrong. */
+export declare function buildPayload(cfg: ResolvedAiCrawlConfig, input: ReportInput): AiCrawlWirePayload;
+/** Delivery options. */
+export interface SendOptions {
+    /**
+     * Set `keepalive: true` on the fetch. Default `true` for fire-and-forget
+     * paths (Express, bare fetch) where nothing else keeps delivery alive
+     * past the response. Callers that schedule via `waitUntil` pass `false`:
+     * `waitUntil` already extends the lifetime, and `keepalive` is not
+     * reliably supported on workerd — if the option ever threw there, every
+     * report from the Cloudflare adapters would be lost, silently.
+     */
+    keepalive?: boolean;
+}
+/**
+ * Send a report. Returns a promise that ALWAYS resolves — network errors,
+ * timeouts and non-2xx responses are swallowed. Suitable for `waitUntil`
+ * (which needs the promise) and for fire-and-forget (ignore it).
+ */
+export declare function sendReport(cfg: ResolvedAiCrawlConfig, payload: AiCrawlWirePayload, options?: SendOptions): Promise<void>;
+//# sourceMappingURL=report.d.ts.map

package/dist/report.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"report.d.ts","sourceRoot":"","sources":["../src/report.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAEV,kBAAkB,EAClB,qBAAqB,EACtB,MAAM,YAAY,CAAC;AAEpB,eAAO,MAAM,iBAAiB,OAAO,CAAC;AAEtC,qFAAqF;AACrF,wBAAgB,cAAc,CAAC,GAAG,EAAE,qBAAqB,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAa9E;AAED,MAAM,WAAW,WAAW;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,EAAE,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACzB;AAED,6EAA6E;AAC7E,wBAAgB,YAAY,CAAC,GAAG,EAAE,qBAAqB,EAAE,KAAK,EAAE,WAAW,GAAG,kBAAkB,CAe/F;AAcD,wBAAwB;AACxB,MAAM,WAAW,WAAW;IAC1B;;;;;;;OAOG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED;;;;GAIG;AACH,wBAAgB,UAAU,CACxB,GAAG,EAAE,qBAAqB,EAC1B,OAAO,EAAE,kBAAkB,EAC3B,OAAO,CAAC,EAAE,WAAW,GACpB,OAAO,CAAC,IAAI,CAAC,CAsCf"}

package/dist/report.js

@@ -0,0 +1,116 @@
+/**
+ * Payload construction + delivery.
+ *
+ * Contract: never throws, never blocks the response, 1500 ms
+ * timeout, `keepalive: true`, snake_case on the wire. Delivery failures are
+ * silent — a broken analytics call must never surface on a customer's site.
+ *
+ * Silent is not the same as invisible: an opt-in `onError` reports a non-2xx
+ * or a network failure to the caller. Without it a rejected report cannot be
+ * told from a delivered one, and a bad token reads as "no crawlers visited".
+ */
+export const REPORT_TIMEOUT_MS = 1500;
+/** Rebuild the reported URL against `publicOrigin` when configured. Never throws. */
+export function buildReportUrl(cfg, url) {
+    try {
+        if (cfg.publicOrigin === undefined)
+            return url;
+        const schemeIdx = url.indexOf("://");
+        if (schemeIdx === -1) {
+            // Bare path — just prefix the origin.
+            return cfg.publicOrigin + (url.startsWith("/") ? url : `/${url}`);
+        }
+        const pathStart = url.indexOf("/", schemeIdx + 3);
+        return pathStart === -1 ? cfg.publicOrigin + "/" : cfg.publicOrigin + url.slice(pathStart);
+    }
+    catch {
+        return url;
+    }
+}
+/** Build the wire payload. Optional fields are OMITTED, never null/wrong. */
+export function buildPayload(cfg, input) {
+    const payload = {
+        site_id: cfg.siteId,
+        url: buildReportUrl(cfg, input.url),
+        method: input.method.toUpperCase(),
+        user_agent: input.userAgent.slice(0, 1024),
+        ts: Date.now(),
+    };
+    if (typeof input.status === "number" && input.status >= 100 && input.status <= 599) {
+        payload.status = input.status;
+    }
+    if (input.ip !== undefined) {
+        payload.ip = input.ip;
+    }
+    return payload;
+}
+/** Abort signal with a 1500 ms timeout, where the runtime supports it. */
+function timeoutSignal() {
+    try {
+        if (typeof AbortSignal !== "undefined" && typeof AbortSignal.timeout === "function") {
+            return AbortSignal.timeout(REPORT_TIMEOUT_MS);
+        }
+    }
+    catch {
+        /* ignore */
+    }
+    return undefined;
+}
+/**
+ * Send a report. Returns a promise that ALWAYS resolves — network errors,
+ * timeouts and non-2xx responses are swallowed. Suitable for `waitUntil`
+ * (which needs the promise) and for fire-and-forget (ignore it).
+ */
+export function sendReport(cfg, payload, options) {
+    try {
+        const fetchImpl = cfg.fetch ?? (typeof fetch !== "undefined" ? fetch : undefined);
+        if (fetchImpl === undefined)
+            return Promise.resolve();
+        const signal = timeoutSignal();
+        const init = {
+            method: "POST",
+            headers: {
+                "content-type": "application/json",
+                authorization: `Bearer ${cfg.authToken}`,
+            },
+            body: JSON.stringify(payload),
+        };
+        // Omit the property entirely when disabled — safer than `keepalive:
+        // false` on runtimes that reject the option.
+        if (options?.keepalive !== false)
+            init.keepalive = true;
+        if (signal !== undefined)
+            init.signal = signal;
+        return fetchImpl(cfg.endpoint, init).then((res) => {
+            // A rejected report used to be indistinguishable from a delivered one:
+            // both branches discarded their argument, so a 401 from a bad token or
+            // a 403 from blocked egress read as success and the customer saw
+            // "no crawlers" forever. Still silent by default: `onError` is opt-in.
+            if (res !== undefined && res !== null && res.ok !== true) {
+                notifyError(cfg, { kind: "http", status: res.status, endpoint: cfg.endpoint });
+            }
+            return undefined;
+        }, (cause) => {
+            notifyError(cfg, { kind: "network", cause, endpoint: cfg.endpoint });
+            return undefined;
+        });
+    }
+    catch {
+        return Promise.resolve();
+    }
+}
+/**
+ * Hand a delivery failure to the customer's callback.
+ *
+ * Guarded: a throwing `onError` must not escape into the host's response path,
+ * which is the whole reason delivery is silent in the first place.
+ */
+function notifyError(cfg, error) {
+    try {
+        cfg.onError?.(error);
+    }
+    catch {
+        // Deliberately empty — see above.
+    }
+}
+//# sourceMappingURL=report.js.map

package/dist/report.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"report.js","sourceRoot":"","sources":["../src/report.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAQH,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,CAAC;AAEtC,qFAAqF;AACrF,MAAM,UAAU,cAAc,CAAC,GAA0B,EAAE,GAAW;IACpE,IAAI,CAAC;QACH,IAAI,GAAG,CAAC,YAAY,KAAK,SAAS;YAAE,OAAO,GAAG,CAAC;QAC/C,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACrC,IAAI,SAAS,KAAK,CAAC,CAAC,EAAE,CAAC;YACrB,sCAAsC;YACtC,OAAO,GAAG,CAAC,YAAY,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC;QACpE,CAAC;QACD,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS,GAAG,CAAC,CAAC,CAAC;QAClD,OAAO,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,GAAG,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAC7F,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,CAAC;IACb,CAAC;AACH,CAAC;AAUD,6EAA6E;AAC7E,MAAM,UAAU,YAAY,CAAC,GAA0B,EAAE,KAAkB;IACzE,MAAM,OAAO,GAAuB;QAClC,OAAO,EAAE,GAAG,CAAC,MAAM;QACnB,GAAG,EAAE,cAAc,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC;QACnC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE;QAClC,UAAU,EAAE,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC;QAC1C,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE;KACf,CAAC;IACF,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,IAAI,GAAG,IAAI,KAAK,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;QACnF,OAAO,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IAChC,CAAC;IACD,IAAI,KAAK,CAAC,EAAE,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO,CAAC,EAAE,GAAG,KAAK,CAAC,EAAE,CAAC;IACxB,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,0EAA0E;AAC1E,SAAS,aAAa;IACpB,IAAI,CAAC;QACH,IAAI,OAAO,WAAW,KAAK,WAAW,IAAI,OAAO,WAAW,CAAC,OAAO,KAAK,UAAU,EAAE,CAAC;YACpF,OAAO,WAAW,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,YAAY;IACd,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAeD;;;;GAIG;AACH,MAAM,UAAU,UAAU,CACxB,GAA0B,EAC1B,OAA2B,EAC3B,OAAqB;IAErB,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,GAAG,CAAC,KAAK,IAAI,CAAC,OAAO,KAAK,KAAK,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAClF,IAAI,SAAS,KAAK,SAAS;YAAE,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;QAEtD,MAAM,MAAM,GAAG,aAAa,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAgB;YACxB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,aAAa,EAAE,UAAU,GAAG,CAAC,SAAS,EAAE;aACzC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;SAC9B,CAAC;QACF,oEAAoE;QACpE,6CAA6C;QAC7C,IAAI,OAAO,EAAE,SAAS,KAAK,KAAK;YAAE,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACxD,IAAI,MAAM,KAAK,SAAS;YAAE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QAE/C,OAAO,SAAS,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,IAAI,CACvC,CAAC,GAAG,EAAE,EAAE;YACN,uEAAuE;YACvE,uEAAuE;YACvE,iEAAiE;YACjE,uEAAuE;YACvE,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,KAAK,IAAI,EAAE,CAAC;gBACzD,WAAW,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;YACjF,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC,EACD,CAAC,KAAc,EAAE,EAAE;YACjB,WAAW,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;YACrE,OAAO,SAAS,CAAC;QACnB,CAAC,CACF,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAS,WAAW,CAAC,GAA0B,EAAE,KAA2B;IAC1E,IAAI,CAAC;QACH,GAAG,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,kCAAkC;IACpC,CAAC;AACH,CAAC"}

package/dist/track.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Shared orchestrator used by every adapter:
+ * pre-filter → anchored UA match → category opt-outs → IP resolution → send.
+ *
+ * `trackFacts` never throws and never blocks: it either schedules the send
+ * via the runtime's `waitUntil` or fires-and-forgets it.
+ */
+import type { AiCrawlWirePayload, RequestFacts, ResolvedAiCrawlConfig } from "./types.js";
+/** Minimal structural view of a fetch-API `Request` — avoids DOM/runtime type deps. */
+export interface FetchLikeRequest {
+    readonly method: string;
+    readonly url: string;
+    readonly headers: {
+        get(name: string): string | null;
+    };
+}
+/** Build {@link RequestFacts} from a fetch-API `Request`. Never throws. */
+export declare function factsFromFetchRequest(request: FetchLikeRequest): RequestFacts;
+/**
+ * Evaluate a request. Returns the wire payload when it should be reported,
+ * `null` otherwise. Pure apart from `Date.now()`; never throws.
+ */
+export declare function evaluateRequest(cfg: ResolvedAiCrawlConfig, facts: RequestFacts, status?: number | undefined): AiCrawlWirePayload | null;
+/**
+ * Evaluate and deliver. Uses `waitUntil` where the runtime provides one so
+ * the report outlives the response without ever delaying it; otherwise
+ * fire-and-forget. Never throws.
+ */
+export declare function trackFacts(cfg: ResolvedAiCrawlConfig, facts: RequestFacts, status?: number | undefined, waitUntil?: ((promise: Promise<unknown>) => void) | undefined): void;
+//# sourceMappingURL=track.d.ts.map

package/dist/track.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"track.d.ts","sourceRoot":"","sources":["../src/track.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAMH,OAAO,KAAK,EACV,kBAAkB,EAElB,YAAY,EACZ,qBAAqB,EACtB,MAAM,YAAY,CAAC;AAEpB,uFAAuF;AACvF,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,OAAO,EAAE;QAAE,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;CACxD;AAED,2EAA2E;AAC3E,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,gBAAgB,GAAG,YAAY,CAY7E;AAgBD;;;GAGG;AACH,wBAAgB,eAAe,CAC7B,GAAG,EAAE,qBAAqB,EAC1B,KAAK,EAAE,YAAY,EACnB,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,GAC1B,kBAAkB,GAAG,IAAI,CAoB3B;AAED;;;;GAIG;AACH,wBAAgB,UAAU,CACxB,GAAG,EAAE,qBAAqB,EAC1B,KAAK,EAAE,YAAY,EACnB,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,EAC3B,SAAS,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC,GAAG,SAAS,GAC5D,IAAI,CAqBN"}

package/dist/track.js

@@ -0,0 +1,96 @@
+/**
+ * Shared orchestrator used by every adapter:
+ * pre-filter → anchored UA match → category opt-outs → IP resolution → send.
+ *
+ * `trackFacts` never throws and never blocks: it either schedules the send
+ * via the runtime's `waitUntil` or fires-and-forgets it.
+ */
+import { passesPreFilter } from "./filter.js";
+import { resolveCrawlerIp } from "./ip.js";
+import { matchCrawler } from "./matcher.js";
+import { buildPayload, sendReport } from "./report.js";
+/** Build {@link RequestFacts} from a fetch-API `Request`. Never throws. */
+export function factsFromFetchRequest(request) {
+    return {
+        method: request.method,
+        url: request.url,
+        header: (name) => {
+            try {
+                return request.headers.get(name);
+            }
+            catch {
+                return null;
+            }
+        },
+    };
+}
+/** Is this category disabled by config? */
+function categoryDisabled(cfg, category) {
+    switch (category) {
+        case "answer_fetch":
+            return cfg.disableAnswerFetch;
+        case "search_index":
+            return cfg.disableSearchCrawlers;
+        case "training":
+            return cfg.disableTrainingCrawlers;
+        case "ai_crawler":
+            return cfg.disableOtherCrawlers;
+    }
+}
+/**
+ * Evaluate a request. Returns the wire payload when it should be reported,
+ * `null` otherwise. Pure apart from `Date.now()`; never throws.
+ */
+export function evaluateRequest(cfg, facts, status) {
+    try {
+        const secFetchDest = facts.header("sec-fetch-dest");
+        if (!passesPreFilter(cfg, facts.method, facts.url, secFetchDest))
+            return null;
+        const userAgent = facts.header("user-agent");
+        const match = matchCrawler(userAgent);
+        if (match === null)
+            return null;
+        if (categoryDisabled(cfg, match.category))
+            return null;
+        return buildPayload(cfg, {
+            url: facts.url,
+            method: facts.method,
+            userAgent: userAgent, // non-null: matchCrawler(null) === null
+            status,
+            ip: resolveCrawlerIp(cfg, facts),
+        });
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Evaluate and deliver. Uses `waitUntil` where the runtime provides one so
+ * the report outlives the response without ever delaying it; otherwise
+ * fire-and-forget. Never throws.
+ */
+export function trackFacts(cfg, facts, status, waitUntil) {
+    try {
+        const payload = evaluateRequest(cfg, facts, status);
+        if (payload === null)
+            return;
+        // With a waitUntil, delivery lifetime is already guaranteed — skip
+        // keepalive (unverified on workerd). Without one, keepalive is what
+        // keeps the request alive past the response.
+        const delivery = sendReport(cfg, payload, {
+            keepalive: typeof waitUntil !== "function",
+        });
+        if (typeof waitUntil === "function") {
+            try {
+                waitUntil(delivery);
+            }
+            catch {
+                /* runtime rejected the promise registration — delivery still runs */
+            }
+        }
+    }
+    catch {
+        /* silent by contract */
+    }
+}
+//# sourceMappingURL=track.js.map

package/dist/track.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"track.js","sourceRoot":"","sources":["../src/track.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAC3C,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAevD,2EAA2E;AAC3E,MAAM,UAAU,qBAAqB,CAAC,OAAyB;IAC7D,OAAO;QACL,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,MAAM,EAAE,CAAC,IAAY,EAAiB,EAAE;YACtC,IAAI,CAAC;gBACH,OAAO,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACnC,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED,2CAA2C;AAC3C,SAAS,gBAAgB,CAAC,GAA0B,EAAE,QAAyB;IAC7E,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,cAAc;YACjB,OAAO,GAAG,CAAC,kBAAkB,CAAC;QAChC,KAAK,cAAc;YACjB,OAAO,GAAG,CAAC,qBAAqB,CAAC;QACnC,KAAK,UAAU;YACb,OAAO,GAAG,CAAC,uBAAuB,CAAC;QACrC,KAAK,YAAY;YACf,OAAO,GAAG,CAAC,oBAAoB,CAAC;IACpC,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAC7B,GAA0B,EAC1B,KAAmB,EACnB,MAA2B;IAE3B,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,KAAK,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;QACpD,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,EAAE,YAAY,CAAC;YAAE,OAAO,IAAI,CAAC;QAE9E,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QAC7C,MAAM,KAAK,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;QACtC,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QAChC,IAAI,gBAAgB,CAAC,GAAG,EAAE,KAAK,CAAC,QAAQ,CAAC;YAAE,OAAO,IAAI,CAAC;QAEvD,OAAO,YAAY,CAAC,GAAG,EAAE;YACvB,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,SAAS,EAAE,SAAmB,EAAE,wCAAwC;YACxE,MAAM;YACN,EAAE,EAAE,gBAAgB,CAAC,GAAG,EAAE,KAAK,CAAC;SACjC,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,UAAU,CACxB,GAA0B,EAC1B,KAAmB,EACnB,MAA2B,EAC3B,SAA6D;IAE7D,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,eAAe,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;QACpD,IAAI,OAAO,KAAK,IAAI;YAAE,OAAO;QAE7B,mEAAmE;QACnE,oEAAoE;QACpE,6CAA6C;QAC7C,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,EAAE,OAAO,EAAE;YACxC,SAAS,EAAE,OAAO,SAAS,KAAK,UAAU;SAC3C,CAAC,CAAC;QACH,IAAI,OAAO,SAAS,KAAK,UAAU,EAAE,CAAC;YACpC,IAAI,CAAC;gBACH,SAAS,CAAC,QAAQ,CAAC,CAAC;YACtB,CAAC;YAAC,MAAM,CAAC;gBACP,qEAAqE;YACvE,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,wBAAwB;IAC1B,CAAC;AACH,CAAC"}