dkimkit 0.0.0-stage → 0.7.0

package/dist/src/hosted/markdown.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"markdown.js","sourceRoot":"","sources":["../../../src/hosted/markdown.ts"],"names":[],"mappings":"AAAA,iFAAiF;AACjF,kFAAkF;AAClF,wEAAwE;AAcxE,MAAM,UAAU,GAAG,CAAC,CAAS,EAAE,EAAE,CAC/B,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AAEtH,MAAM,UAAU,OAAO,CAAC,IAAY;IAClC,OAAO,IAAI;SACR,WAAW,EAAE;SACb,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;SACvB,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC;SACrB,OAAO,CAAC,oBAAoB,EAAE,EAAE,CAAC;SACjC,IAAI,EAAE;SACN,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,QAAQ,GAAG,8BAA8B,CAAC;AAEhD,SAAS,MAAM,CAAC,IAAY,EAAE,IAAmB;IAC/C,yDAAyD;IACzD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC,EAAE,IAAY,EAAE,EAAE,CAAC,SAAS,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC/F,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;IAClB,sDAAsD;IACtD,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,8CAA8C,EAAE,CAAC,CAAC,EAAE,KAAa,EAAE,OAAe,EAAE,EAAE;QAClG,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QAC5C,qGAAqG;QACrG,MAAM,UAAU,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QACrE,MAAM,QAAQ,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACrH,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC;YAAE,OAAO,KAAK,CAAC;QACxD,MAAM,QAAQ,GAAG,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAChD,OAAO,YAAY,UAAU,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC,EAAE,IAAI,KAAK,MAAM,CAAC;IACzG,CAAC,CAAC,CAAC;IACH,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,kBAAkB,EAAE,qBAAqB,CAAC,CAAC;IACzD,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,+CAA+C,EAAE,eAAe,CAAC,CAAC;IAChF,OAAO,CAAC,CAAC,OAAO,CAAC,oBAAoB,EAAE,CAAC,CAAC,EAAE,CAAS,EAAE,EAAE,CAAC,SAAS,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAE,CAAC,SAAS,CAAC,CAAC;AAC5G,CAAC;AAED,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC,MAAM,CAAC;AACzE,MAAM,SAAS,GAAG,4BAA4B,CAAC;AAE/C,6CAA6C;AAC7C,SAAS,KAAK,CAAC,GAAW;IACxB,OAAO,GAAG;SACP,IAAI,EAAE;SACN,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;SAClB,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;SAClB,KAAK,CAAC,WAAW,CAAC;SAClB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,MAAM,CAAC,KAAe,EAAE,IAAmB,EAAE,GAAqB,EAAE,KAAK,GAAG,KAAK;IACxF,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,MAAM,KAAK,GAAG,GAAG,EAAE;QACjB,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QACnC,MAAM,OAAO,GAAG,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;QAClD,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,OAAO,MAAM,CAAC,CAAC;QACjD,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC;IACvB,CAAC,CAAC;IAEF,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;QACvB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAE5B,IAAI,OAAO,KAAK,EAAE,EAAE,CAAC;YACnB,KAAK,EAAE,CAAC;YACR,CAAC,EAAE,CAAC;YACJ,SAAS;QACX,CAAC;QAED,eAAe;QACf,MAAM,KAAK,GAAG,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpD,IAAI,KAAK,EAAE,CAAC;YACV,KAAK,EAAE,CAAC;YACR,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC,MAAM,CAAC;YAChC,MAAM,IAAI,GAAa,EAAE,CAAC;YAC1B,CAAC,EAAE,CAAC;YACJ,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,EAAE,CAAC;gBAC1D,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,CAAC;gBAClE,CAAC,EAAE,CAAC;YACN,CAAC;YACD,CAAC,EAAE,CAAC,CAAC,gBAAgB;YACrB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,oBAAoB,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YACzE,IAAI,CAAC,IAAI,CAAC,aAAa,IAAI,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,eAAe,CAAC,CAAC;YAC3E,SAAS;QACX,CAAC;QAED,YAAY;QACZ,MAAM,OAAO,GAAG,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAClD,IAAI,OAAO,EAAE,CAAC;YACZ,KAAK,EAAE,CAAC;YACR,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAE,CAAC,MAAM,CAAC;YACjC,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAE,CAAC;YACzB,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;YACzB,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACpC,IAAI,KAAK,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK;gBAAE,GAAG,CAAC,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YACrE,IAAI,KAAK,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC;gBAAE,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;YACjF,IAAI,CAAC,IAAI,CAAC,KAAK,KAAK,QAAQ,UAAU,CAAC,EAAE,CAAC,KAAK,QAAQ,MAAM,KAAK,GAAG,CAAC,CAAC;YACvE,CAAC,EAAE,CAAC;YACJ,SAAS;QACX,CAAC;QAED,kDAAkD;QAClD,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,IAAI,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC,EAAE,CAAC;YAC/F,KAAK,EAAE,CAAC;YACR,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;YACzB,CAAC,IAAI,CAAC,CAAC;YACP,MAAM,IAAI,GAAe,EAAE,CAAC;YAC5B,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAE,CAAC,CAAC,CAAC;YAC3F,IAAI,CAAC,IAAI,CACP,wCAAwC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,sBAAsB;gBACnH,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC3G,wBAAwB,CAC3B,CAAC;YACF,SAAS;QACX,CAAC;QAED,6EAA6E;QAC7E,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,IAAI,EAAE,CAAC;YACT,KAAK,EAAE,CAAC;YACR,MAAM,UAAU,GAAG,IAAI,CAAC,CAAC,CAAE,CAAC,MAAM,CAAC;YACnC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC,CAAE,CAAC,CAAC;YACxC,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC1D,MAAM,KAAK,GAAa,EAAE,CAAC;YAC3B,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;gBACxB,MAAM,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC;gBACpC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAE,CAAC,MAAM,KAAK,UAAU,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,CAAE,CAAC,KAAK,OAAO;oBAAE,MAAM;gBACjF,MAAM,aAAa,GAAG,UAAU,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC,MAAM,GAAG,CAAC,CAAC;gBACpD,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC;gBACrB,CAAC,EAAE,CAAC;gBACJ,sFAAsF;gBACtF,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;oBACxB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;oBACvB,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;wBACvB,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;wBAClE,IAAI,SAAS,KAAK,SAAS,IAAI,QAAQ,CAAC,SAAS,CAAC,IAAI,UAAU;4BAAE,MAAM;wBACxE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;wBACd,CAAC,EAAE,CAAC;wBACJ,SAAS;oBACX,CAAC;oBACD,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,UAAU;wBAAE,MAAM;oBACxC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;oBAC/D,CAAC,EAAE,CAAC;gBACN,CAAC;gBACD,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;gBAChD,KAAK,CAAC,IAAI,CAAC,OAAO,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;gBAC1D,6CAA6C;gBAC7C,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;oBACnD,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;oBAClE,MAAM,EAAE,GAAG,SAAS,IAAI,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;oBAClD,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAE,CAAC,MAAM,KAAK,UAAU;wBAAE,MAAM;oBAC/C,CAAC,EAAE,CAAC;gBACN,CAAC;YACH,CAAC;YACD,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;YAClC,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,GAAG,OAAO,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,GAAG,GAAG,CAAC,CAAC;YACpG,SAAS;QACX,CAAC;QAED,kDAAkD;QAClD,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACxB,CAAC,EAAE,CAAC;IACN,CAAC;IACD,KAAK,EAAE,CAAC;IACR,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,MAAc,EAAE,OAAsB,EAAE;IACrE,MAAM,GAAG,GAAqB,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IACpE,GAAG,CAAC,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;IACxE,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/src/hosted/net.d.ts

@@ -0,0 +1,9 @@
+export declare function isPrivateAddress(address: string): boolean;
+/**
+ * Webhook targets are customer-controlled, so they must be https and resolve
+ * only to public addresses; otherwise the server could be aimed at its own
+ * network. Checked when saved and again before each delivery.
+ */
+export declare function assertPublicHttpsUrl(raw: string, { allowPrivate }?: {
+    allowPrivate?: boolean | undefined;
+}): Promise<URL>;

package/dist/src/hosted/net.js

@@ -0,0 +1,60 @@
+import { lookup } from 'node:dns/promises';
+import { BlockList, isIP } from 'node:net';
+import { ConfigError } from '../errors.js';
+const PRIVATE = new BlockList();
+for (const [net, prefix] of [
+    ['0.0.0.0', 8], ['10.0.0.0', 8], ['100.64.0.0', 10], ['127.0.0.0', 8], ['169.254.0.0', 16], ['172.16.0.0', 12],
+    ['192.0.0.0', 24], ['192.168.0.0', 16], ['198.18.0.0', 15], ['224.0.0.0', 4], ['240.0.0.0', 4],
+])
+    PRIVATE.addSubnet(net, prefix, 'ipv4');
+for (const [net, prefix] of [
+    ['::', 128], ['::1', 128], ['64:ff9b::', 96], ['fc00::', 7], ['fe80::', 10], ['ff00::', 8],
+])
+    PRIVATE.addSubnet(net, prefix, 'ipv6');
+export function isPrivateAddress(address) {
+    // IPv4-mapped IPv6 (::ffff:a.b.c.d) is judged by its IPv4 part. Not done via a
+    // ::ffff:0:0/96 rule: BlockList would then match every plain IPv4 address too.
+    const mapped = /^::ffff:(\d+\.\d+\.\d+\.\d+)$/i.exec(address);
+    if (mapped)
+        return isPrivateAddress(mapped[1]);
+    const family = isIP(address);
+    if (family === 0)
+        return true;
+    return PRIVATE.check(address, family === 4 ? 'ipv4' : 'ipv6');
+}
+/**
+ * Webhook targets are customer-controlled, so they must be https and resolve
+ * only to public addresses; otherwise the server could be aimed at its own
+ * network. Checked when saved and again before each delivery.
+ */
+export async function assertPublicHttpsUrl(raw, { allowPrivate = false } = {}) {
+    let url;
+    try {
+        url = new URL(raw);
+    }
+    catch {
+        throw new ConfigError('webhook_url must be a valid URL.');
+    }
+    if (allowPrivate) {
+        if (url.protocol !== 'https:' && url.protocol !== 'http:')
+            throw new ConfigError('webhook_url must be http(s).');
+        return url;
+    }
+    if (url.protocol !== 'https:')
+        throw new ConfigError('webhook_url must use https.');
+    if (url.username || url.password)
+        throw new ConfigError('webhook_url must not contain credentials.');
+    const host = url.hostname.replace(/^\[|\]$/g, '');
+    let addresses;
+    try {
+        addresses = isIP(host) ? [host] : (await lookup(host, { all: true, verbatim: true })).map((a) => a.address);
+    }
+    catch {
+        throw new ConfigError(`webhook_url host ${host} does not resolve.`);
+    }
+    if (addresses.length === 0 || addresses.some(isPrivateAddress)) {
+        throw new ConfigError('webhook_url must resolve to a public IP address.');
+    }
+    return url;
+}
+//# sourceMappingURL=net.js.map

package/dist/src/hosted/net.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"net.js","sourceRoot":"","sources":["../../../src/hosted/net.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAC3C,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,UAAU,CAAC;AAC3C,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAE3C,MAAM,OAAO,GAAG,IAAI,SAAS,EAAE,CAAC;AAChC,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI;IAC1B,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,CAAC,UAAU,EAAE,CAAC,CAAC,EAAE,CAAC,YAAY,EAAE,EAAE,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,EAAE,CAAC,aAAa,EAAE,EAAE,CAAC,EAAE,CAAC,YAAY,EAAE,EAAE,CAAC;IAC9G,CAAC,WAAW,EAAE,EAAE,CAAC,EAAE,CAAC,aAAa,EAAE,EAAE,CAAC,EAAE,CAAC,YAAY,EAAE,EAAE,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;CACtF;IAAE,OAAO,CAAC,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;AACnD,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI;IAC1B,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC;CAClF;IAAE,OAAO,CAAC,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;AAEnD,MAAM,UAAU,gBAAgB,CAAC,OAAe;IAC9C,+EAA+E;IAC/E,+EAA+E;IAC/E,MAAM,MAAM,GAAG,gCAAgC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC9D,IAAI,MAAM;QAAE,OAAO,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,CAAC;IAChD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;IAC7B,IAAI,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9B,OAAO,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;AAChE,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,GAAW,EAAE,EAAE,YAAY,GAAG,KAAK,EAAE,GAAG,EAAE;IACnF,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,WAAW,CAAC,kCAAkC,CAAC,CAAC;IAC5D,CAAC;IACD,IAAI,YAAY,EAAE,CAAC;QACjB,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO;YAAE,MAAM,IAAI,WAAW,CAAC,8BAA8B,CAAC,CAAC;QACjH,OAAO,GAAG,CAAC;IACb,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ;QAAE,MAAM,IAAI,WAAW,CAAC,6BAA6B,CAAC,CAAC;IACpF,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ;QAAE,MAAM,IAAI,WAAW,CAAC,2CAA2C,CAAC,CAAC;IAErG,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAClD,IAAI,SAAmB,CAAC;IACxB,IAAI,CAAC;QACH,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IAC9G,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,WAAW,CAAC,oBAAoB,IAAI,oBAAoB,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE,CAAC;QAC/D,MAAM,IAAI,WAAW,CAAC,kDAAkD,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/src/hosted/postgres-store.d.ts

@@ -0,0 +1,62 @@
+import type { Pool, PoolConfig } from 'pg';
+import { type DashboardSession, type LoginToken, type UsageQuery, type UsageRecord, type UsageRow, type Account, type DomainEvent, type DomainRow, type ListDomainsQuery, type Store, type WebhookDelivery, type WidgetSession } from './store.js';
+export interface PostgresStoreOptions {
+    connectionString?: string;
+    /** Bring your own pool (it won't be closed by `close()`). */
+    pool?: Pool;
+    /** Extra pg pool settings, e.g. `ssl` or `max`. */
+    poolConfig?: PoolConfig;
+}
+/**
+ * Postgres-backed store for running the API and workers on several hosts.
+ * Job claiming uses FOR UPDATE SKIP LOCKED, so workers never take the same row.
+ */
+export declare class PostgresStore implements Store {
+    private readonly pool;
+    private readonly ownsPool;
+    private constructor();
+    static connect(opts: PostgresStoreOptions): Promise<PostgresStore>;
+    /** Creates or upgrades the schema. Safe when several instances start at once. */
+    migrate(): Promise<void>;
+    createAccount(account: Account): Promise<void>;
+    getAccount(id: string): Promise<Account | undefined>;
+    getAccountByKeyHash(hash: string): Promise<Account | undefined>;
+    updateAccount(id: string, patch: Partial<Account>): Promise<void>;
+    insertDomain(domain: DomainRow): Promise<void>;
+    getDomain(accountId: string, id: string): Promise<DomainRow | undefined>;
+    findDomain(accountId: string, domain: string, subdomain: string | null): Promise<DomainRow | undefined>;
+    listDomains(accountId: string, query: ListDomainsQuery): Promise<{
+        domains: DomainRow[];
+        next: string | null;
+    }>;
+    updateDomain(id: string, patch: Partial<DomainRow>): Promise<DomainRow>;
+    deleteDomain(id: string): Promise<void>;
+    claimDueDomains(now: number, limit: number, leaseMs: number): Promise<DomainRow[]>;
+    addEvent(event: DomainEvent): Promise<void>;
+    listEvents(domainId: string, limit: number): Promise<DomainEvent[]>;
+    addDelivery(delivery: WebhookDelivery): Promise<void>;
+    claimDueDeliveries(now: number, limit: number, leaseMs: number): Promise<WebhookDelivery[]>;
+    updateDelivery(id: string, patch: Partial<WebhookDelivery>): Promise<void>;
+    createWidgetSession(session: WidgetSession): Promise<void>;
+    getWidgetSessionByHash(hash: string): Promise<WidgetSession | undefined>;
+    updateWidgetSession(id: string, patch: Partial<WidgetSession>): Promise<void>;
+    listAccounts(): Promise<Account[]>;
+    countDomains(accountId: string): Promise<number>;
+    recordUsage(records: UsageRecord[]): Promise<void>;
+    recordActiveDomainDays(day: string, now: number): Promise<void>;
+    summarizeUsage(query: UsageQuery): Promise<UsageRow[]>;
+    getAccountByEmail(email: string): Promise<Account | undefined>;
+    getAccountByBillingCustomer(customerId: string): Promise<Account | undefined>;
+    listBillableAccounts(): Promise<Account[]>;
+    createLoginToken(token: LoginToken): Promise<void>;
+    consumeLoginToken(tokenHash: string, now: number): Promise<LoginToken | undefined>;
+    createDashboardSession(session: DashboardSession): Promise<void>;
+    getDashboardSession(tokenHash: string): Promise<DashboardSession | undefined>;
+    deleteDashboardSession(tokenHash: string): Promise<void>;
+    markBillingEventProcessed(eventId: string, now: number): Promise<boolean>;
+    close(): Promise<void>;
+    private one;
+    private insert;
+    private update;
+    private withClient;
+}

package/dist/src/hosted/postgres-store.js

@@ -0,0 +1,387 @@
+import { ConfigError } from '../errors.js';
+import { ACCOUNT_BILLING_COLUMNS, ACCOUNT_COLUMNS, DASHBOARD_SESSION_COLUMNS, LOGIN_TOKEN_COLUMNS, DELIVERY_COLUMNS, DOMAIN_COLUMNS, DuplicateError, EVENT_COLUMNS, fromColumns, jsonFallback, SESSION_COLUMNS, toColumns, toUsageRow, USAGE_COLUMNS, usageSql, } from './store.js';
+// Each statement is idempotent; they run in order under an advisory lock.
+const MIGRATIONS = [
+    `CREATE TABLE IF NOT EXISTS accounts (
+    id TEXT PRIMARY KEY,
+    name TEXT NOT NULL,
+    api_key_hash TEXT NOT NULL UNIQUE,
+    sendgrid_api_key_enc TEXT,
+    webhook_url TEXT,
+    webhook_secret TEXT NOT NULL,
+    widget_origins JSONB NOT NULL DEFAULT '[]',
+    created_at BIGINT NOT NULL
+  )`,
+    `CREATE TABLE IF NOT EXISTS domains (
+    id TEXT PRIMARY KEY,
+    account_id TEXT NOT NULL REFERENCES accounts(id) ON DELETE CASCADE,
+    domain TEXT NOT NULL,
+    subdomain TEXT NOT NULL DEFAULT '',
+    tenant_id TEXT,
+    metadata JSONB NOT NULL DEFAULT '{}',
+    status TEXT NOT NULL,
+    sendgrid_domain_id TEXT NOT NULL,
+    sendgrid_subuser TEXT,
+    dns_provider TEXT NOT NULL,
+    dns_credentials_enc TEXT,
+    inbound JSONB,
+    overwrite BOOLEAN NOT NULL DEFAULT false,
+    records JSONB NOT NULL DEFAULT '[]',
+    pending JSONB NOT NULL DEFAULT '[]',
+    validation JSONB,
+    conflicts JSONB,
+    last_error TEXT,
+    attempts INTEGER NOT NULL DEFAULT 0,
+    next_run_at BIGINT,
+    locked_until BIGINT,
+    verified_at BIGINT,
+    expires_at BIGINT,
+    created_at BIGINT NOT NULL,
+    updated_at BIGINT NOT NULL,
+    UNIQUE (account_id, domain, subdomain)
+  )`,
+    `CREATE INDEX IF NOT EXISTS domains_due ON domains (next_run_at) WHERE next_run_at IS NOT NULL`,
+    `CREATE INDEX IF NOT EXISTS domains_by_account ON domains (account_id, created_at DESC, id DESC)`,
+    `CREATE INDEX IF NOT EXISTS domains_by_tenant ON domains (account_id, tenant_id)`,
+    `CREATE TABLE IF NOT EXISTS events (
+    seq BIGSERIAL,
+    id TEXT PRIMARY KEY,
+    domain_id TEXT NOT NULL,
+    account_id TEXT NOT NULL,
+    type TEXT NOT NULL,
+    data JSONB NOT NULL,
+    created_at BIGINT NOT NULL
+  )`,
+    `CREATE INDEX IF NOT EXISTS events_by_domain ON events (domain_id, created_at DESC, seq DESC)`,
+    `CREATE TABLE IF NOT EXISTS webhook_deliveries (
+    id TEXT PRIMARY KEY,
+    account_id TEXT NOT NULL REFERENCES accounts(id) ON DELETE CASCADE,
+    event_id TEXT NOT NULL,
+    url TEXT NOT NULL,
+    payload TEXT NOT NULL,
+    status TEXT NOT NULL,
+    attempts INTEGER NOT NULL DEFAULT 0,
+    next_attempt_at BIGINT,
+    locked_until BIGINT,
+    last_error TEXT,
+    response_status INTEGER,
+    created_at BIGINT NOT NULL
+  )`,
+    `CREATE INDEX IF NOT EXISTS deliveries_due ON webhook_deliveries (next_attempt_at) WHERE status = 'pending'`,
+    `CREATE TABLE IF NOT EXISTS widget_sessions (
+    id TEXT PRIMARY KEY,
+    account_id TEXT NOT NULL REFERENCES accounts(id) ON DELETE CASCADE,
+    token_hash TEXT NOT NULL UNIQUE,
+    domain_id TEXT,
+    defaults JSONB,
+    expires_at BIGINT NOT NULL,
+    created_at BIGINT NOT NULL
+  )`,
+    `CREATE INDEX IF NOT EXISTS widget_sessions_by_domain ON widget_sessions (domain_id)`,
+    `ALTER TABLE accounts ADD COLUMN IF NOT EXISTS domain_limit INTEGER`,
+    `CREATE TABLE IF NOT EXISTS usage_records (
+    id TEXT PRIMARY KEY,
+    account_id TEXT NOT NULL,
+    tenant_id TEXT,
+    domain_id TEXT NOT NULL,
+    domain TEXT NOT NULL,
+    metric TEXT NOT NULL,
+    quantity INTEGER NOT NULL,
+    day TEXT NOT NULL,
+    occurred_at BIGINT NOT NULL
+  )`,
+    `CREATE INDEX IF NOT EXISTS usage_by_account_day ON usage_records (account_id, day)`,
+    ...ACCOUNT_BILLING_COLUMNS.map(([column, , postgres]) => `ALTER TABLE accounts ADD COLUMN IF NOT EXISTS ${column} ${postgres}`),
+    `CREATE UNIQUE INDEX IF NOT EXISTS accounts_by_email ON accounts (email)`,
+    // Legacy SendGrid keys move to the generic credentials column (idempotent).
+    `UPDATE accounts SET email_credentials_enc = sendgrid_api_key_enc
+     WHERE email_credentials_enc IS NULL AND sendgrid_api_key_enc IS NOT NULL`,
+    `CREATE INDEX IF NOT EXISTS accounts_by_billing_customer ON accounts (billing_customer_id)`,
+    `CREATE TABLE IF NOT EXISTS login_tokens (
+    token_hash TEXT PRIMARY KEY,
+    email TEXT NOT NULL,
+    name TEXT,
+    expires_at BIGINT NOT NULL,
+    used_at BIGINT,
+    created_at BIGINT NOT NULL
+  )`,
+    `CREATE TABLE IF NOT EXISTS dashboard_sessions (
+    token_hash TEXT PRIMARY KEY,
+    account_id TEXT NOT NULL REFERENCES accounts(id) ON DELETE CASCADE,
+    expires_at BIGINT NOT NULL,
+    created_at BIGINT NOT NULL
+  )`,
+    `CREATE TABLE IF NOT EXISTS billing_events (
+    id TEXT PRIMARY KEY,
+    processed_at BIGINT NOT NULL
+  )`,
+];
+/** Arbitrary constant identifying this app's migration lock. */
+const MIGRATION_LOCK = 7_310_455_201;
+const UNIQUE_VIOLATION = '23505';
+function encode(kind, v) {
+    if (kind === 'bool')
+        return Boolean(v);
+    if (kind === 'emptyAsNull')
+        return v ?? '';
+    // Always stringify JSON: pg would send JS arrays as Postgres arrays, not JSON.
+    if (typeof kind === 'object')
+        return v === null ? null : JSON.stringify(v);
+    return v ?? null;
+}
+function decode(kind, v) {
+    if (kind === 'int')
+        return v === null || v === undefined ? null : Number(v); // BIGINT arrives as a string
+    if (kind === 'bool')
+        return v === true;
+    if (kind === 'emptyAsNull')
+        return v === '' ? null : v;
+    if (typeof kind === 'object')
+        return v === null || v === undefined ? jsonFallback(kind) : v; // JSONB arrives parsed
+    return v ?? null;
+}
+const toRow = (map, value) => toColumns(map, value, encode);
+const fromRow = (map, row) => fromColumns(map, row, decode);
+/**
+ * Postgres-backed store for running the API and workers on several hosts.
+ * Job claiming uses FOR UPDATE SKIP LOCKED, so workers never take the same row.
+ */
+export class PostgresStore {
+    pool;
+    ownsPool;
+    constructor(pool, ownsPool) {
+        this.pool = pool;
+        this.ownsPool = ownsPool;
+    }
+    static async connect(opts) {
+        let pool = opts.pool;
+        if (!pool) {
+            let pg;
+            try {
+                pg = (await import('pg')).default;
+            }
+            catch {
+                throw new ConfigError('PostgreSQL support needs the "pg" package: npm install pg');
+            }
+            pool = new pg.Pool({ connectionString: opts.connectionString, max: 10, ...opts.poolConfig });
+        }
+        const store = new PostgresStore(pool, !opts.pool);
+        await store.migrate();
+        return store;
+    }
+    /** Creates or upgrades the schema. Safe when several instances start at once. */
+    async migrate() {
+        await this.withClient(async (client) => {
+            await client.query('SELECT pg_advisory_lock($1)', [MIGRATION_LOCK]);
+            try {
+                for (const sql of MIGRATIONS)
+                    await client.query(sql);
+            }
+            finally {
+                await client.query('SELECT pg_advisory_unlock($1)', [MIGRATION_LOCK]);
+            }
+        });
+    }
+    async createAccount(account) {
+        await this.insert('accounts', toRow(ACCOUNT_COLUMNS, account));
+    }
+    async getAccount(id) {
+        return fromRow(ACCOUNT_COLUMNS, await this.one('SELECT * FROM accounts WHERE id = $1', [id]));
+    }
+    async getAccountByKeyHash(hash) {
+        return fromRow(ACCOUNT_COLUMNS, await this.one('SELECT * FROM accounts WHERE api_key_hash = $1', [hash]));
+    }
+    async updateAccount(id, patch) {
+        await this.update('accounts', id, toRow(ACCOUNT_COLUMNS, patch));
+    }
+    async insertDomain(domain) {
+        try {
+            await this.insert('domains', toRow(DOMAIN_COLUMNS, domain));
+        }
+        catch (err) {
+            if (err.code === UNIQUE_VIOLATION)
+                throw new DuplicateError('Domain already registered');
+            throw err;
+        }
+    }
+    async getDomain(accountId, id) {
+        return fromRow(DOMAIN_COLUMNS, await this.one('SELECT * FROM domains WHERE account_id = $1 AND id = $2', [accountId, id]));
+    }
+    async findDomain(accountId, domain, subdomain) {
+        const row = await this.one('SELECT * FROM domains WHERE account_id = $1 AND domain = $2 AND subdomain = $3', [accountId, domain, subdomain ?? '']);
+        return fromRow(DOMAIN_COLUMNS, row);
+    }
+    async listDomains(accountId, query) {
+        const params = [accountId];
+        const where = ['account_id = $1'];
+        const param = (v) => `$${params.push(v)}`;
+        if (query.tenantId)
+            where.push(`tenant_id = ${param(query.tenantId)}`);
+        if (query.status)
+            where.push(`status = ${param(query.status)}`);
+        if (query.after) {
+            const [createdAt, id] = Buffer.from(query.after, 'base64url').toString('utf8').split(':');
+            const at = Number(createdAt);
+            if (!Number.isFinite(at))
+                return { domains: [], next: null };
+            where.push(`(created_at, id) < (${param(at)}, ${param(id ?? '')})`);
+        }
+        const { rows } = await this.pool.query(`SELECT * FROM domains WHERE ${where.join(' AND ')} ORDER BY created_at DESC, id DESC LIMIT ${param(query.limit + 1)}`, params);
+        const domains = rows.slice(0, query.limit).map((r) => fromRow(DOMAIN_COLUMNS, r));
+        const last = domains.at(-1);
+        const next = rows.length > query.limit && last ? Buffer.from(`${last.createdAt}:${last.id}`).toString('base64url') : null;
+        return { domains, next };
+    }
+    async updateDomain(id, patch) {
+        const row = toRow(DOMAIN_COLUMNS, patch);
+        const columns = Object.keys(row);
+        const result = columns.length === 0
+            ? await this.pool.query('SELECT * FROM domains WHERE id = $1', [id])
+            : await this.pool.query(`UPDATE domains SET ${columns.map((c, i) => `${c} = $${i + 2}`).join(', ')} WHERE id = $1 RETURNING *`, [id, ...columns.map((c) => row[c])]);
+        return fromRow(DOMAIN_COLUMNS, result.rows[0]);
+    }
+    async deleteDomain(id) {
+        await this.withClient(async (client) => {
+            await client.query('BEGIN');
+            try {
+                await client.query('DELETE FROM events WHERE domain_id = $1', [id]);
+                await client.query('DELETE FROM widget_sessions WHERE domain_id = $1', [id]);
+                await client.query('DELETE FROM domains WHERE id = $1', [id]);
+                await client.query('COMMIT');
+            }
+            catch (err) {
+                await client.query('ROLLBACK');
+                throw err;
+            }
+        });
+    }
+    async claimDueDomains(now, limit, leaseMs) {
+        const { rows } = await this.pool.query(`UPDATE domains SET locked_until = $1
+       WHERE id IN (
+         SELECT id FROM domains
+         WHERE next_run_at IS NOT NULL AND next_run_at <= $2 AND (locked_until IS NULL OR locked_until < $2)
+         ORDER BY next_run_at
+         LIMIT $3
+         FOR UPDATE SKIP LOCKED
+       )
+       RETURNING *`, [now + leaseMs, now, limit]);
+        return rows.map((r) => fromRow(DOMAIN_COLUMNS, r));
+    }
+    async addEvent(event) {
+        await this.insert('events', toRow(EVENT_COLUMNS, event));
+    }
+    async listEvents(domainId, limit) {
+        const { rows } = await this.pool.query('SELECT * FROM events WHERE domain_id = $1 ORDER BY created_at DESC, seq DESC LIMIT $2', [domainId, limit]);
+        return rows.map((r) => fromRow(EVENT_COLUMNS, r));
+    }
+    async addDelivery(delivery) {
+        await this.insert('webhook_deliveries', toRow(DELIVERY_COLUMNS, delivery));
+    }
+    async claimDueDeliveries(now, limit, leaseMs) {
+        const { rows } = await this.pool.query(`UPDATE webhook_deliveries SET locked_until = $1
+       WHERE id IN (
+         SELECT id FROM webhook_deliveries
+         WHERE status = 'pending' AND next_attempt_at <= $2 AND (locked_until IS NULL OR locked_until < $2)
+         ORDER BY next_attempt_at
+         LIMIT $3
+         FOR UPDATE SKIP LOCKED
+       )
+       RETURNING *`, [now + leaseMs, now, limit]);
+        return rows.map((r) => fromRow(DELIVERY_COLUMNS, r));
+    }
+    async updateDelivery(id, patch) {
+        await this.update('webhook_deliveries', id, toRow(DELIVERY_COLUMNS, patch));
+    }
+    async createWidgetSession(session) {
+        await this.insert('widget_sessions', toRow(SESSION_COLUMNS, session));
+    }
+    async getWidgetSessionByHash(hash) {
+        return fromRow(SESSION_COLUMNS, await this.one('SELECT * FROM widget_sessions WHERE token_hash = $1', [hash]));
+    }
+    async updateWidgetSession(id, patch) {
+        await this.update('widget_sessions', id, toRow(SESSION_COLUMNS, patch));
+    }
+    async listAccounts() {
+        const { rows } = await this.pool.query('SELECT * FROM accounts ORDER BY created_at, id');
+        return rows.map((r) => fromRow(ACCOUNT_COLUMNS, r));
+    }
+    async countDomains(accountId) {
+        return Number((await this.one('SELECT COUNT(*) AS n FROM domains WHERE account_id = $1', [accountId])).n);
+    }
+    async recordUsage(records) {
+        for (const record of records) {
+            const row = toRow(USAGE_COLUMNS, record);
+            const columns = Object.keys(row);
+            await this.pool.query(`INSERT INTO usage_records (${columns.join(', ')}) VALUES (${columns.map((_, i) => `$${i + 1}`).join(', ')})
+         ON CONFLICT (id) DO NOTHING`, columns.map((c) => row[c]));
+        }
+    }
+    async recordActiveDomainDays(day, now) {
+        await this.pool.query(`INSERT INTO usage_records (id, account_id, tenant_id, domain_id, domain, metric, quantity, day, occurred_at)
+       SELECT 'active_domain_day:' || id || ':' || $1, account_id, tenant_id, id, domain, 'active_domain_day', 1, $1, $2
+       FROM domains WHERE status = 'verified'
+       ON CONFLICT (id) DO NOTHING`, [day, now]);
+    }
+    async summarizeUsage(query) {
+        const params = [query.from, query.to, ...(query.accountId ? [query.accountId] : [])];
+        const { rows } = await this.pool.query(usageSql(query, (n) => `$${n}`), params);
+        return rows.map((r) => toUsageRow(r, Boolean(query.groupByTenant)));
+    }
+    async getAccountByEmail(email) {
+        return fromRow(ACCOUNT_COLUMNS, await this.one('SELECT * FROM accounts WHERE email = $1', [email]));
+    }
+    async getAccountByBillingCustomer(customerId) {
+        return fromRow(ACCOUNT_COLUMNS, await this.one('SELECT * FROM accounts WHERE billing_customer_id = $1', [customerId]));
+    }
+    async listBillableAccounts() {
+        const { rows } = await this.pool.query("SELECT * FROM accounts WHERE billing_status IN ('active', 'past_due') AND billing_customer_id IS NOT NULL ORDER BY id");
+        return rows.map((r) => fromRow(ACCOUNT_COLUMNS, r));
+    }
+    async createLoginToken(token) {
+        await this.insert('login_tokens', toRow(LOGIN_TOKEN_COLUMNS, token));
+    }
+    async consumeLoginToken(tokenHash, now) {
+        const row = await this.one('UPDATE login_tokens SET used_at = $1 WHERE token_hash = $2 AND used_at IS NULL AND expires_at > $1 RETURNING *', [now, tokenHash]);
+        return fromRow(LOGIN_TOKEN_COLUMNS, row);
+    }
+    async createDashboardSession(session) {
+        await this.insert('dashboard_sessions', toRow(DASHBOARD_SESSION_COLUMNS, session));
+    }
+    async getDashboardSession(tokenHash) {
+        return fromRow(DASHBOARD_SESSION_COLUMNS, await this.one('SELECT * FROM dashboard_sessions WHERE token_hash = $1', [tokenHash]));
+    }
+    async deleteDashboardSession(tokenHash) {
+        await this.pool.query('DELETE FROM dashboard_sessions WHERE token_hash = $1', [tokenHash]);
+    }
+    async markBillingEventProcessed(eventId, now) {
+        const { rowCount } = await this.pool.query('INSERT INTO billing_events (id, processed_at) VALUES ($1, $2) ON CONFLICT (id) DO NOTHING', [eventId, now]);
+        return rowCount === 1;
+    }
+    async close() {
+        if (this.ownsPool)
+            await this.pool.end();
+    }
+    async one(sql, params) {
+        return (await this.pool.query(sql, params)).rows[0];
+    }
+    async insert(table, row) {
+        const columns = Object.keys(row);
+        await this.pool.query(`INSERT INTO ${table} (${columns.join(', ')}) VALUES (${columns.map((_, i) => `$${i + 1}`).join(', ')})`, columns.map((c) => row[c]));
+    }
+    async update(table, id, row) {
+        const columns = Object.keys(row);
+        if (columns.length === 0)
+            return;
+        await this.pool.query(`UPDATE ${table} SET ${columns.map((c, i) => `${c} = $${i + 2}`).join(', ')} WHERE id = $1`, [id, ...columns.map((c) => row[c])]);
+    }
+    async withClient(fn) {
+        const client = await this.pool.connect();
+        try {
+            return await fn(client);
+        }
+        finally {
+            client.release();
+        }
+    }
+}
+//# sourceMappingURL=postgres-store.js.map

package/dist/src/hosted/postgres-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"postgres-store.js","sourceRoot":"","sources":["../../../src/hosted/postgres-store.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EACL,uBAAuB,EACvB,eAAe,EACf,yBAAyB,EACzB,mBAAmB,EAGnB,gBAAgB,EAChB,cAAc,EACd,cAAc,EACd,aAAa,EACb,WAAW,EACX,YAAY,EACZ,eAAe,EACf,SAAS,EACT,UAAU,EACV,aAAa,EACb,QAAQ,GAaT,MAAM,YAAY,CAAC;AAEpB,0EAA0E;AAC1E,MAAM,UAAU,GAAG;IACjB;;;;;;;;;IASE;IACF;;;;;;;;;;;;;;;;;;;;;;;;;;;IA2BE;IACF,+FAA+F;IAC/F,iGAAiG;IACjG,iFAAiF;IACjF;;;;;;;;IAQE;IACF,8FAA8F;IAC9F;;;;;;;;;;;;;IAaE;IACF,4GAA4G;IAC5G;;;;;;;;IAQE;IACF,qFAAqF;IACrF,oEAAoE;IACpE;;;;;;;;;;IAUE;IACF,oFAAoF;IACpF,GAAG,uBAAuB,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,AAAD,EAAG,QAAQ,CAAC,EAAE,EAAE,CAAC,iDAAiD,MAAM,IAAI,QAAQ,EAAE,CAAC;IAC/H,yEAAyE;IACzE,4EAA4E;IAC5E;8EAC4E;IAC5E,2FAA2F;IAC3F;;;;;;;IAOE;IACF;;;;;IAKE;IACF;;;IAGE;CACH,CAAC;AAEF,gEAAgE;AAChE,MAAM,cAAc,GAAG,aAAa,CAAC;AACrC,MAAM,gBAAgB,GAAG,OAAO,CAAC;AAEjC,SAAS,MAAM,CAAC,IAAgB,EAAE,CAAU;IAC1C,IAAI,IAAI,KAAK,MAAM;QAAE,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC;IACvC,IAAI,IAAI,KAAK,aAAa;QAAE,OAAO,CAAC,IAAI,EAAE,CAAC;IAC3C,+EAA+E;IAC/E,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IAC3E,OAAO,CAAC,IAAI,IAAI,CAAC;AACnB,CAAC;AAED,SAAS,MAAM,CAAC,IAAgB,EAAE,CAAU;IAC1C,IAAI,IAAI,KAAK,KAAK;QAAE,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,6BAA6B;IAC1G,IAAI,IAAI,KAAK,MAAM;QAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IACvC,IAAI,IAAI,KAAK,aAAa;QAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACvD,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,uBAAuB;IACpH,OAAO,CAAC,IAAI,IAAI,CAAC;AACnB,CAAC;AAGD,MAAM,KAAK,GAAG,CAAI,GAAiB,EAAE,KAAiB,EAAO,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;AAC9F,MAAM,OAAO,GAAG,CAAI,GAAiB,EAAE,GAAoB,EAAiB,EAAE,CAAC,WAAW,CAAI,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;AAUhH;;;GAGG;AACH,MAAM,OAAO,aAAa;IAEL;IACA;IAFnB,YACmB,IAAU,EACV,QAAiB;QADjB,SAAI,GAAJ,IAAI,CAAM;QACV,aAAQ,GAAR,QAAQ,CAAS;IACjC,CAAC;IAEJ,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,IAA0B;QAC7C,IAAI,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACrB,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,IAAI,EAAuB,CAAC;YAC5B,IAAI,CAAC;gBACH,EAAE,GAAG,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,OAAyC,CAAC;YACtE,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,IAAI,WAAW,CAAC,2DAA2D,CAAC,CAAC;YACrF,CAAC;YACD,IAAI,GAAG,IAAI,EAAE,CAAC,IAAI,CAAC,EAAE,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;QAC/F,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,aAAa,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClD,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC;QACtB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,iFAAiF;IACjF,KAAK,CAAC,OAAO;QACX,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,MAAM,CAAC,KAAK,CAAC,6BAA6B,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC;YACpE,IAAI,CAAC;gBACH,KAAK,MAAM,GAAG,IAAI,UAAU;oBAAE,MAAM,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACxD,CAAC;oBAAS,CAAC;gBACT,MAAM,MAAM,CAAC,KAAK,CAAC,+BAA+B,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC;YACxE,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,OAAgB;QAClC,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,KAAK,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC,CAAC;IACjE,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,EAAU;QACzB,OAAO,OAAO,CAAC,eAAe,EAAE,MAAM,IAAI,CAAC,GAAG,CAAC,sCAAsC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAChG,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,IAAY;QACpC,OAAO,OAAO,CAAC,eAAe,EAAE,MAAM,IAAI,CAAC,GAAG,CAAC,gDAAgD,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC5G,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,EAAU,EAAE,KAAuB;QACrD,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,EAAE,KAAK,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC,CAAC;IACnE,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,MAAiB;QAClC,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC;QAC9D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAK,GAAyB,CAAC,IAAI,KAAK,gBAAgB;gBAAE,MAAM,IAAI,cAAc,CAAC,2BAA2B,CAAC,CAAC;YAChH,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,SAAiB,EAAE,EAAU;QAC3C,OAAO,OAAO,CAAC,cAAc,EAAE,MAAM,IAAI,CAAC,GAAG,CAAC,yDAAyD,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IAC7H,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,SAAiB,EAAE,MAAc,EAAE,SAAwB;QAC1E,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,gFAAgF,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC;QACnJ,OAAO,OAAO,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC;IACtC,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,SAAiB,EAAE,KAAuB;QAC1D,MAAM,MAAM,GAAc,CAAC,SAAS,CAAC,CAAC;QACtC,MAAM,KAAK,GAAG,CAAC,iBAAiB,CAAC,CAAC;QAClC,MAAM,KAAK,GAAG,CAAC,CAAU,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QACnD,IAAI,KAAK,CAAC,QAAQ;YAAE,KAAK,CAAC,IAAI,CAAC,eAAe,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACvE,IAAI,KAAK,CAAC,MAAM;YAAE,KAAK,CAAC,IAAI,CAAC,YAAY,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAChE,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YAChB,MAAM,CAAC,SAAS,EAAE,EAAE,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC1F,MAAM,EAAE,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;YAC7B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;YAC7D,KAAK,CAAC,IAAI,CAAC,uBAAuB,KAAK,CAAC,EAAE,CAAC,KAAK,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC;QACtE,CAAC;QACD,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CACpC,+BAA+B,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,4CAA4C,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,EAAE,EACtH,MAAM,CACP,CAAC;QACF,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC,CAAE,CAAC,CAAC;QACnF,MAAM,IAAI,GAAG,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC1H,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,EAAU,EAAE,KAAyB;QACtD,MAAM,GAAG,GAAG,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;QACzC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,MAAM,GACV,OAAO,CAAC,MAAM,KAAK,CAAC;YAClB,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,qCAAqC,EAAE,CAAC,EAAE,CAAC,CAAC;YACpE,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CACnB,sBAAsB,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,4BAA4B,EACtG,CAAC,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CACpC,CAAC;QACR,OAAO,OAAO,CAAC,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAE,CAAC;IAClD,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,EAAU;QAC3B,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC5B,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,KAAK,CAAC,yCAAyC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;gBACpE,MAAM,MAAM,CAAC,KAAK,CAAC,kDAAkD,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;gBAC7E,MAAM,MAAM,CAAC,KAAK,CAAC,mCAAmC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;gBAC9D,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC/B,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;gBAC/B,MAAM,GAAG,CAAC;YACZ,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,GAAW,EAAE,KAAa,EAAE,OAAe;QAC/D,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CACpC;;;;;;;;mBAQa,EACb,CAAC,GAAG,GAAG,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,CAC5B,CAAC;QACF,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC,CAAE,CAAC,CAAC;IACtD,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,KAAkB;QAC/B,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC,CAAC;IAC3D,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,QAAgB,EAAE,KAAa;QAC9C,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CACpC,uFAAuF,EACvF,CAAC,QAAQ,EAAE,KAAK,CAAC,CAClB,CAAC;QACF,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC,CAAE,CAAC,CAAC;IACrD,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,QAAyB;QACzC,MAAM,IAAI,CAAC,MAAM,CAAC,oBAAoB,EAAE,KAAK,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC7E,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,GAAW,EAAE,KAAa,EAAE,OAAe;QAClE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CACpC;;;;;;;;mBAQa,EACb,CAAC,GAAG,GAAG,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,CAC5B,CAAC;QACF,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAE,CAAC,CAAC;IACxD,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,EAAU,EAAE,KAA+B;QAC9D,MAAM,IAAI,CAAC,MAAM,CAAC,oBAAoB,EAAE,EAAE,EAAE,KAAK,CAAC,gBAAgB,EAAE,KAAK,CAAC,CAAC,CAAC;IAC9E,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,OAAsB;QAC9C,MAAM,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,KAAK,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC,CAAC;IACxE,CAAC;IAED,KAAK,CAAC,sBAAsB,CAAC,IAAY;QACvC,OAAO,OAAO,CAAC,eAAe,EAAE,MAAM,IAAI,CAAC,GAAG,CAAC,qDAAqD,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACjH,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,EAAU,EAAE,KAA6B;QACjE,MAAM,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,EAAE,EAAE,KAAK,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC,CAAC;IAC1E,CAAC;IAED,KAAK,CAAC,YAAY;QAChB,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,gDAAgD,CAAC,CAAC;QACzF,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC,CAAE,CAAC,CAAC;IACvD,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,SAAiB;QAClC,OAAO,MAAM,CAAC,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,yDAAyD,EAAE,CAAC,SAAS,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC;IAC7G,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,OAAsB;QACtC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,MAAM,GAAG,GAAG,KAAK,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;YACzC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACjC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CACnB,8BAA8B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;qCAC7E,EAC7B,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAC3B,CAAC;QACJ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,sBAAsB,CAAC,GAAW,EAAE,GAAW;QACnD,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CACnB;;;mCAG6B,EAC7B,CAAC,GAAG,EAAE,GAAG,CAAC,CACX,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,KAAiB;QACpC,MAAM,MAAM,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACrF,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;QAChF,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;IACtE,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,KAAa;QACnC,OAAO,OAAO,CAAC,eAAe,EAAE,MAAM,IAAI,CAAC,GAAG,CAAC,yCAAyC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACtG,CAAC;IAED,KAAK,CAAC,2BAA2B,CAAC,UAAkB;QAClD,OAAO,OAAO,CAAC,eAAe,EAAE,MAAM,IAAI,CAAC,GAAG,CAAC,uDAAuD,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IACzH,CAAC;IAED,KAAK,CAAC,oBAAoB;QACxB,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CACpC,uHAAuH,CACxH,CAAC;QACF,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC,CAAE,CAAC,CAAC;IACvD,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,KAAiB;QACtC,MAAM,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,KAAK,CAAC,mBAAmB,EAAE,KAAK,CAAC,CAAC,CAAC;IACvE,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,SAAiB,EAAE,GAAW;QACpD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CACxB,gHAAgH,EAChH,CAAC,GAAG,EAAE,SAAS,CAAC,CACjB,CAAC;QACF,OAAO,OAAO,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC;IAC3C,CAAC;IAED,KAAK,CAAC,sBAAsB,CAAC,OAAyB;QACpD,MAAM,IAAI,CAAC,MAAM,CAAC,oBAAoB,EAAE,KAAK,CAAC,yBAAyB,EAAE,OAAO,CAAC,CAAC,CAAC;IACrF,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,SAAiB;QACzC,OAAO,OAAO,CAAC,yBAAyB,EAAE,MAAM,IAAI,CAAC,GAAG,CAAC,wDAAwD,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IACnI,CAAC;IAED,KAAK,CAAC,sBAAsB,CAAC,SAAiB;QAC5C,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,sDAAsD,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;IAC7F,CAAC;IAED,KAAK,CAAC,yBAAyB,CAAC,OAAe,EAAE,GAAW;QAC1D,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CACxC,2FAA2F,EAC3F,CAAC,OAAO,EAAE,GAAG,CAAC,CACf,CAAC;QACF,OAAO,QAAQ,KAAK,CAAC,CAAC;IACxB,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;IAC3C,CAAC;IAEO,KAAK,CAAC,GAAG,CAAC,GAAW,EAAE,MAAiB;QAC9C,OAAO,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACtD,CAAC;IAEO,KAAK,CAAC,MAAM,CAAC,KAAa,EAAE,GAAQ;QAC1C,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CACnB,eAAe,KAAK,KAAK,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EACxG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAC3B,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,MAAM,CAAC,KAAa,EAAE,EAAU,EAAE,GAAQ;QACtD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QACjC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CACnB,UAAU,KAAK,QAAQ,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAC3F,CAAC,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CACpC,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,UAAU,CAAI,EAAsC;QAChE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QACzC,IAAI,CAAC;YACH,OAAO,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC;QAC1B,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,CAAC;IACH,CAAC;CACF"}