easy-ping 0.6.1 → 0.7.0

package/dist/plugins/telegram.d.cts

@@ -0,0 +1,153 @@
+import { h as EasyPingPlugin, L as Logger } from '../plugin-Wwp1nvo0.cjs';
+import { TelegramProvider, TelegramUpdate } from '../providers/telegram.cjs';
+import '../adapter-BJ8Iejvs.cjs';
+
+type TelegramChat = {
+    id: string;
+    userId: string;
+    chatId: string;
+    /** "private", "group", "supergroup" or "channel". */
+    chatType: string;
+    username: string | null;
+    title: string | null;
+    linkedAt: Date;
+    lastSeenAt: Date;
+};
+type TelegramLink = {
+    code: string;
+    userId: string;
+    createdAt: Date;
+    expiresAt: Date;
+};
+type TelegramRendered = {
+    /** Telegram HTML. Anything user-typed inside it goes through escapeHtml(). */
+    text: string;
+    /** Adds one inline button under the message. */
+    button?: {
+        text: string;
+        url: string;
+    } | undefined;
+};
+type TelegramOptions = {
+    provider: TelegramProvider;
+    /** Without the @. Builds the https://t.me/<bot>?start=<code> link. */
+    botUsername: string;
+    render: (input: {
+        type: string;
+        payload: unknown;
+    }) => TelegramRendered;
+    /**
+     * Shared with Telegram through setWebhook; Telegram echoes it in
+     * X-Telegram-Bot-Api-Secret-Token and the webhook route accepts nothing else.
+     * Unset, the route is not mounted and updates must come through poll().
+     */
+    webhookSecret?: string | undefined;
+    /** How long a "Connect Telegram" link stays valid. Default 10 minutes. */
+    linkTtlMinutes?: number | undefined;
+    /** Linking past this evicts the user's least recently seen chat. Default 5. */
+    maxChatsPerUser?: number | undefined;
+    /** Bot replies, if the defaults are not your voice. */
+    messages?: Partial<typeof DEFAULT_MESSAGES> | undefined;
+};
+declare const DEFAULT_MESSAGES: {
+    connected: string;
+    disconnected: string;
+    expired: string;
+    start: string;
+};
+/** The tables this plugin owns, exported so DDL needs no plugin instance. */
+declare const telegramSchema: {
+    readonly telegramChat: {
+        readonly tableName: "notification_telegram_chat";
+        readonly fields: {
+            readonly id: {
+                readonly type: "string";
+                readonly required: true;
+            };
+            readonly userId: {
+                readonly type: "string";
+                readonly required: true;
+            };
+            readonly chatId: {
+                readonly type: "string";
+                readonly required: true;
+            };
+            readonly chatType: {
+                readonly type: "string";
+                readonly required: true;
+            };
+            readonly username: {
+                readonly type: "string";
+            };
+            readonly title: {
+                readonly type: "string";
+            };
+            readonly linkedAt: {
+                readonly type: "date";
+                readonly required: true;
+                readonly defaultNow: true;
+            };
+            readonly lastSeenAt: {
+                readonly type: "date";
+                readonly required: true;
+                readonly defaultNow: true;
+            };
+        };
+        readonly primaryKey: readonly ["id"];
+        readonly indexes: readonly [{
+            readonly on: readonly ["userId"];
+            readonly name: "telegram_chat_user_idx";
+        }, {
+            readonly on: readonly ["chatId"];
+            readonly unique: true;
+            readonly name: "telegram_chat_chat_idx";
+        }];
+    };
+    readonly telegramLink: {
+        readonly tableName: "notification_telegram_link";
+        readonly fields: {
+            readonly code: {
+                readonly type: "string";
+                readonly required: true;
+            };
+            readonly userId: {
+                readonly type: "string";
+                readonly required: true;
+            };
+            readonly createdAt: {
+                readonly type: "date";
+                readonly required: true;
+                readonly defaultNow: true;
+            };
+            readonly expiresAt: {
+                readonly type: "date";
+                readonly required: true;
+            };
+        };
+        readonly primaryKey: readonly ["code"];
+        readonly indexes: readonly [{
+            readonly on: readonly ["userId"];
+            readonly name: "telegram_link_user_idx";
+        }];
+    };
+};
+/** Telegram refuses buttons to localhost, private hosts and non-http schemes with a 400 for the whole message. */
+declare function isButtonUrlAllowed(value: string): boolean;
+type TelegramPlugin = EasyPingPlugin<"telegram", typeof telegramSchema> & {
+    /** Feeds one Bot API update through the linking logic. The webhook route and poll() both call it. */
+    handleUpdate(update: TelegramUpdate): Promise<void>;
+    /**
+     * Long-polls getUpdates instead of a webhook: for development, or a host
+     * with no public URL. One poller per bot token, or Telegram splits updates
+     * between them. Call stop() on shutdown.
+     */
+    poll(options?: {
+        logger?: Logger | undefined;
+    }): {
+        stop(): void;
+    };
+};
+/** Telegram over a bot the user connects with one tap. Fans out per linked chat; blocked chats are pruned. */
+declare function telegram(options: TelegramOptions): TelegramPlugin;
+
+export { type TelegramChat, type TelegramLink, type TelegramOptions, type TelegramPlugin, type TelegramRendered, isButtonUrlAllowed, telegram, telegramSchema };

package/dist/plugins/telegram.d.ts

@@ -0,0 +1,153 @@
+import { h as EasyPingPlugin, L as Logger } from '../plugin-CSLKKgXT.js';
+import { TelegramProvider, TelegramUpdate } from '../providers/telegram.js';
+import '../adapter-BJ8Iejvs.js';
+
+type TelegramChat = {
+    id: string;
+    userId: string;
+    chatId: string;
+    /** "private", "group", "supergroup" or "channel". */
+    chatType: string;
+    username: string | null;
+    title: string | null;
+    linkedAt: Date;
+    lastSeenAt: Date;
+};
+type TelegramLink = {
+    code: string;
+    userId: string;
+    createdAt: Date;
+    expiresAt: Date;
+};
+type TelegramRendered = {
+    /** Telegram HTML. Anything user-typed inside it goes through escapeHtml(). */
+    text: string;
+    /** Adds one inline button under the message. */
+    button?: {
+        text: string;
+        url: string;
+    } | undefined;
+};
+type TelegramOptions = {
+    provider: TelegramProvider;
+    /** Without the @. Builds the https://t.me/<bot>?start=<code> link. */
+    botUsername: string;
+    render: (input: {
+        type: string;
+        payload: unknown;
+    }) => TelegramRendered;
+    /**
+     * Shared with Telegram through setWebhook; Telegram echoes it in
+     * X-Telegram-Bot-Api-Secret-Token and the webhook route accepts nothing else.
+     * Unset, the route is not mounted and updates must come through poll().
+     */
+    webhookSecret?: string | undefined;
+    /** How long a "Connect Telegram" link stays valid. Default 10 minutes. */
+    linkTtlMinutes?: number | undefined;
+    /** Linking past this evicts the user's least recently seen chat. Default 5. */
+    maxChatsPerUser?: number | undefined;
+    /** Bot replies, if the defaults are not your voice. */
+    messages?: Partial<typeof DEFAULT_MESSAGES> | undefined;
+};
+declare const DEFAULT_MESSAGES: {
+    connected: string;
+    disconnected: string;
+    expired: string;
+    start: string;
+};
+/** The tables this plugin owns, exported so DDL needs no plugin instance. */
+declare const telegramSchema: {
+    readonly telegramChat: {
+        readonly tableName: "notification_telegram_chat";
+        readonly fields: {
+            readonly id: {
+                readonly type: "string";
+                readonly required: true;
+            };
+            readonly userId: {
+                readonly type: "string";
+                readonly required: true;
+            };
+            readonly chatId: {
+                readonly type: "string";
+                readonly required: true;
+            };
+            readonly chatType: {
+                readonly type: "string";
+                readonly required: true;
+            };
+            readonly username: {
+                readonly type: "string";
+            };
+            readonly title: {
+                readonly type: "string";
+            };
+            readonly linkedAt: {
+                readonly type: "date";
+                readonly required: true;
+                readonly defaultNow: true;
+            };
+            readonly lastSeenAt: {
+                readonly type: "date";
+                readonly required: true;
+                readonly defaultNow: true;
+            };
+        };
+        readonly primaryKey: readonly ["id"];
+        readonly indexes: readonly [{
+            readonly on: readonly ["userId"];
+            readonly name: "telegram_chat_user_idx";
+        }, {
+            readonly on: readonly ["chatId"];
+            readonly unique: true;
+            readonly name: "telegram_chat_chat_idx";
+        }];
+    };
+    readonly telegramLink: {
+        readonly tableName: "notification_telegram_link";
+        readonly fields: {
+            readonly code: {
+                readonly type: "string";
+                readonly required: true;
+            };
+            readonly userId: {
+                readonly type: "string";
+                readonly required: true;
+            };
+            readonly createdAt: {
+                readonly type: "date";
+                readonly required: true;
+                readonly defaultNow: true;
+            };
+            readonly expiresAt: {
+                readonly type: "date";
+                readonly required: true;
+            };
+        };
+        readonly primaryKey: readonly ["code"];
+        readonly indexes: readonly [{
+            readonly on: readonly ["userId"];
+            readonly name: "telegram_link_user_idx";
+        }];
+    };
+};
+/** Telegram refuses buttons to localhost, private hosts and non-http schemes with a 400 for the whole message. */
+declare function isButtonUrlAllowed(value: string): boolean;
+type TelegramPlugin = EasyPingPlugin<"telegram", typeof telegramSchema> & {
+    /** Feeds one Bot API update through the linking logic. The webhook route and poll() both call it. */
+    handleUpdate(update: TelegramUpdate): Promise<void>;
+    /**
+     * Long-polls getUpdates instead of a webhook: for development, or a host
+     * with no public URL. One poller per bot token, or Telegram splits updates
+     * between them. Call stop() on shutdown.
+     */
+    poll(options?: {
+        logger?: Logger | undefined;
+    }): {
+        stop(): void;
+    };
+};
+/** Telegram over a bot the user connects with one tap. Fans out per linked chat; blocked chats are pruned. */
+declare function telegram(options: TelegramOptions): TelegramPlugin;
+
+export { type TelegramChat, type TelegramLink, type TelegramOptions, type TelegramPlugin, type TelegramRendered, isButtonUrlAllowed, telegram, telegramSchema };

package/dist/plugins/telegram.js

@@ -0,0 +1,313 @@
+import { telegramStartLink } from '../chunk-SSHVZHSJ.js';
+import { escapeHtml } from '../chunk-R3BE67L7.js';
+import { readJsonBody } from '../chunk-JOVIZXO6.js';
+import '../chunk-ORZKH224.js';
+import { encodeBase64Url } from '../chunk-PTGHMCCG.js';
+
+// src/plugins/telegram/index.ts
+var CHAT = "notification_telegram_chat";
+var LINK = "notification_telegram_link";
+var DEFAULT_MESSAGES = {
+  connected: "Connected. You will receive notifications here.",
+  disconnected: "Disconnected. You will not receive notifications here any more.",
+  expired: "That link has expired. Open the app and connect Telegram again.",
+  start: "Open the app and use \u201CConnect Telegram\u201D to link this chat."
+};
+var telegramSchema = {
+  telegramChat: {
+    tableName: CHAT,
+    fields: {
+      id: { type: "string", required: true },
+      userId: { type: "string", required: true },
+      chatId: { type: "string", required: true },
+      chatType: { type: "string", required: true },
+      username: { type: "string" },
+      title: { type: "string" },
+      linkedAt: { type: "date", required: true, defaultNow: true },
+      lastSeenAt: { type: "date", required: true, defaultNow: true }
+    },
+    primaryKey: ["id"],
+    indexes: [
+      { on: ["userId"], name: "telegram_chat_user_idx" },
+      // A chat belongs to one account at a time; re-linking moves it.
+      { on: ["chatId"], unique: true, name: "telegram_chat_chat_idx" }
+    ]
+  },
+  telegramLink: {
+    tableName: LINK,
+    fields: {
+      code: { type: "string", required: true },
+      userId: { type: "string", required: true },
+      createdAt: { type: "date", required: true, defaultNow: true },
+      expiresAt: { type: "date", required: true }
+    },
+    primaryKey: ["code"],
+    indexes: [{ on: ["userId"], name: "telegram_link_user_idx" }]
+  }
+};
+var randomCode = () => encodeBase64Url(crypto.getRandomValues(new Uint8Array(24)));
+function isButtonUrlAllowed(value) {
+  let url;
+  try {
+    url = new URL(value);
+  } catch {
+    return false;
+  }
+  if (url.protocol !== "https:" && url.protocol !== "http:") return url.protocol === "tg:";
+  const host = url.hostname.toLowerCase();
+  return !(host === "localhost" || /\.(localhost|local|internal|lan)$/.test(host) || /^\d+\.\d+\.\d+\.\d+$/.test(host) || host.startsWith("["));
+}
+var encoder = new TextEncoder();
+async function timingSafeEqual(a, b) {
+  const [left, right] = await Promise.all(
+    [a, b].map(
+      async (value) => new Uint8Array(await crypto.subtle.digest("SHA-256", encoder.encode(value)))
+    )
+  );
+  let diff = 0;
+  for (let i = 0; i < 32; i += 1) diff |= (left?.[i] ?? 0) ^ (right?.[i] ?? 0);
+  return diff === 0;
+}
+function telegram(options) {
+  let ctx;
+  const messages = { ...DEFAULT_MESSAGES, ...options.messages };
+  const ttlMs = (options.linkTtlMinutes ?? 10) * 6e4;
+  const maxChats = Math.max(1, options.maxChatsPerUser ?? 5);
+  const botUsername = options.botUsername.replace(/^@/, "");
+  const reply = async (chatId, text) => {
+    const result = await options.provider.send({ chatId, text: escapeHtml(text) });
+    if (!result.ok) ctx.logger.warn(`telegram reply to chat failed: ${result.error}`);
+  };
+  async function link(code, chat) {
+    const [pending] = await ctx.store.find(LINK, { code }, { limit: 1 });
+    const chatId = String(chat.id);
+    if (!pending || pending.expiresAt.getTime() < Date.now()) {
+      if (pending) await ctx.store.remove(LINK, { code });
+      await reply(chatId, messages.expired);
+      return;
+    }
+    await ctx.store.remove(LINK, { code });
+    const now = /* @__PURE__ */ new Date();
+    const details = {
+      chatType: chat.type,
+      username: chat.username ?? null,
+      title: chat.title ?? null,
+      lastSeenAt: now
+    };
+    const [existing] = await ctx.store.find(CHAT, { chatId }, { limit: 1 });
+    if (existing) {
+      await ctx.store.update(
+        CHAT,
+        { id: existing.id },
+        { userId: pending.userId, linkedAt: now, ...details }
+      );
+    } else {
+      const chats = await ctx.store.find(
+        CHAT,
+        { userId: pending.userId },
+        { orderBy: { field: "lastSeenAt", direction: "asc" } }
+      );
+      const excess = chats.length - maxChats + 1;
+      if (excess > 0) {
+        await ctx.store.remove(CHAT, { id: { in: chats.slice(0, excess).map((row) => row.id) } });
+      }
+      await ctx.store.insert(CHAT, [
+        { id: crypto.randomUUID(), userId: pending.userId, chatId, linkedAt: now, ...details }
+      ]);
+    }
+    await reply(chatId, messages.connected);
+  }
+  async function handleUpdate(update) {
+    const member = update.my_chat_member;
+    if (member && ["kicked", "left"].includes(member.new_chat_member.status)) {
+      await ctx.store.remove(CHAT, { chatId: String(member.chat.id) });
+      return;
+    }
+    const message = update.message;
+    if (!message?.text) return;
+    const chatId = String(message.chat.id);
+    const [command, argument] = message.text.trim().split(/\s+/, 2);
+    const name = command?.split("@")[0];
+    if (name === "/start") {
+      if (argument) await link(argument, message.chat);
+      else await reply(chatId, messages.start);
+      return;
+    }
+    if (name === "/stop") {
+      const removed = await ctx.store.remove(CHAT, { chatId });
+      if (removed > 0) await reply(chatId, messages.disconnected);
+    }
+  }
+  const routes = [
+    {
+      path: "/telegram/link",
+      method: "POST",
+      scope: { type: "user" },
+      handler: async ({ userId }) => {
+        const owner = userId ?? "";
+        const now = Date.now();
+        await ctx.store.remove(LINK, { userId: owner, expiresAt: { lt: new Date(now) } });
+        const code = randomCode();
+        const expiresAt = new Date(now + ttlMs);
+        await ctx.store.insert(LINK, [
+          { code, userId: owner, createdAt: new Date(now), expiresAt }
+        ]);
+        return Response.json({
+          url: telegramStartLink(botUsername, code),
+          code,
+          expiresAt: expiresAt.toISOString()
+        });
+      }
+    },
+    {
+      path: "/telegram/chats",
+      method: "GET",
+      scope: { type: "user" },
+      handler: async ({ userId }) => {
+        const chats = await ctx.store.find(
+          CHAT,
+          { userId: userId ?? "" },
+          { orderBy: { field: "linkedAt", direction: "desc" } }
+        );
+        return Response.json({
+          chats: chats.map((chat) => ({
+            chatId: chat.chatId,
+            chatType: chat.chatType,
+            username: chat.username,
+            title: chat.title,
+            linkedAt: chat.linkedAt.toISOString()
+          }))
+        });
+      }
+    },
+    {
+      path: "/telegram/unlink",
+      method: "POST",
+      scope: { type: "user" },
+      handler: async ({ request, userId }) => {
+        const parsed = await readJsonBody(request);
+        if ("error" in parsed) return parsed.error;
+        const { chatId } = parsed.body;
+        const owner = userId ?? "";
+        const removed = await ctx.store.remove(
+          CHAT,
+          typeof chatId === "string" && chatId !== "" ? { userId: owner, chatId } : { userId: owner }
+        );
+        return Response.json({ removed });
+      }
+    }
+  ];
+  if (options.webhookSecret) {
+    const secret = options.webhookSecret;
+    routes.push({
+      path: "/telegram/webhook",
+      method: "POST",
+      scope: {
+        type: "custom",
+        justification: "called by Telegram, authenticated by the X-Telegram-Bot-Api-Secret-Token header set through setWebhook"
+      },
+      handler: async ({ request }) => {
+        const presented = request.headers.get("x-telegram-bot-api-secret-token") ?? "";
+        if (!await timingSafeEqual(presented, secret)) return new Response(null, { status: 401 });
+        const parsed = await readJsonBody(request);
+        if ("error" in parsed) return parsed.error;
+        try {
+          await handleUpdate(parsed.body);
+        } catch (error) {
+          ctx.logger.error("telegram update failed", { error });
+        }
+        return Response.json({ ok: true });
+      }
+    });
+  }
+  return {
+    id: "telegram",
+    channels: ["telegram"],
+    schema: telegramSchema,
+    init: (context) => {
+      ctx = context;
+    },
+    hooks: {
+      deliver: async (context) => {
+        const chats = await ctx.store.find(CHAT, {
+          userId: context.notification.userId
+        });
+        if (chats.length === 0) return { result: "skipped", reason: "no linked telegram chat" };
+        const rendered = options.render({
+          type: context.notification.type,
+          payload: context.notification.payload
+        });
+        let button = rendered.button;
+        if (button && !isButtonUrlAllowed(button.url)) {
+          ctx.logger.warn(
+            `telegram: dropped button "${button.url}"; Telegram accepts only public http(s) links`
+          );
+          button = void 0;
+        }
+        const results = await Promise.all(
+          chats.map(
+            (chat) => options.provider.send({
+              chatId: chat.chatId,
+              text: rendered.text,
+              buttons: button ? [button] : void 0,
+              signal: context.signal
+            })
+          )
+        );
+        const prune = [];
+        let delivered = 0;
+        let retryable = false;
+        let lastError = "";
+        results.forEach((result, index) => {
+          const chat = chats[index];
+          if (!chat) return;
+          if (result.ok) {
+            delivered += 1;
+            return;
+          }
+          lastError = result.error;
+          if (result.gone) prune.push(chat.id);
+          else if (result.retryable) retryable = true;
+        });
+        if (prune.length > 0) await ctx.store.remove(CHAT, { id: { in: prune } });
+        if (delivered > 0) return { result: "sent" };
+        if (prune.length === chats.length) {
+          return { result: "failed", error: "every linked chat is gone", retryable: false };
+        }
+        return { result: "failed", error: lastError || "telegram refused the message", retryable };
+      }
+    },
+    routes,
+    handleUpdate,
+    poll(pollOptions = {}) {
+      const logger = pollOptions.logger ?? ctx.logger;
+      const controller = new AbortController();
+      let offset;
+      void (async () => {
+        while (!controller.signal.aborted) {
+          try {
+            const updates = await options.provider.getUpdates({
+              offset,
+              signal: controller.signal
+            });
+            for (const update of updates) {
+              offset = update.update_id + 1;
+              await handleUpdate(update).catch(
+                (error) => logger.error("telegram update failed", { error })
+              );
+            }
+          } catch (error) {
+            if (controller.signal.aborted) return;
+            logger.error("telegram polling failed", { error });
+            await new Promise((resolve) => setTimeout(resolve, 3e3));
+          }
+        }
+      })();
+      return { stop: () => controller.abort() };
+    }
+  };
+}
+
+export { isButtonUrlAllowed, telegram, telegramSchema };
+//# sourceMappingURL=telegram.js.map
+//# sourceMappingURL=telegram.js.map

package/dist/plugins/telegram.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/plugins/telegram/index.ts"],"names":[],"mappings":";;;;;;;AAkBA,IAAM,IAAA,GAAO,4BAAA;AACb,IAAM,IAAA,GAAO,4BAAA;AA+Cb,IAAM,gBAAA,GAAmB;AAAA,EACvB,SAAA,EAAW,iDAAA;AAAA,EACX,YAAA,EAAc,iEAAA;AAAA,EACd,OAAA,EAAS,iEAAA;AAAA,EACT,KAAA,EAAO;AACT,CAAA;AAGO,IAAM,cAAA,GAAiB;AAAA,EAC5B,YAAA,EAAc;AAAA,IACZ,SAAA,EAAW,IAAA;AAAA,IACX,MAAA,EAAQ;AAAA,MACN,EAAA,EAAI,EAAE,IAAA,EAAM,QAAA,EAAU,UAAU,IAAA,EAAK;AAAA,MACrC,MAAA,EAAQ,EAAE,IAAA,EAAM,QAAA,EAAU,UAAU,IAAA,EAAK;AAAA,MACzC,MAAA,EAAQ,EAAE,IAAA,EAAM,QAAA,EAAU,UAAU,IAAA,EAAK;AAAA,MACzC,QAAA,EAAU,EAAE,IAAA,EAAM,QAAA,EAAU,UAAU,IAAA,EAAK;AAAA,MAC3C,QAAA,EAAU,EAAE,IAAA,EAAM,QAAA,EAAS;AAAA,MAC3B,KAAA,EAAO,EAAE,IAAA,EAAM,QAAA,EAAS;AAAA,MACxB,UAAU,EAAE,IAAA,EAAM,QAAQ,QAAA,EAAU,IAAA,EAAM,YAAY,IAAA,EAAK;AAAA,MAC3D,YAAY,EAAE,IAAA,EAAM,QAAQ,QAAA,EAAU,IAAA,EAAM,YAAY,IAAA;AAAK,KAC/D;AAAA,IACA,UAAA,EAAY,CAAC,IAAI,CAAA;AAAA,IACjB,OAAA,EAAS;AAAA,MACP,EAAE,EAAA,EAAI,CAAC,QAAQ,CAAA,EAAG,MAAM,wBAAA,EAAyB;AAAA;AAAA,MAEjD,EAAE,IAAI,CAAC,QAAQ,GAAG,MAAA,EAAQ,IAAA,EAAM,MAAM,wBAAA;AAAyB;AACjE,GACF;AAAA,EACA,YAAA,EAAc;AAAA,IACZ,SAAA,EAAW,IAAA;AAAA,IACX,MAAA,EAAQ;AAAA,MACN,IAAA,EAAM,EAAE,IAAA,EAAM,QAAA,EAAU,UAAU,IAAA,EAAK;AAAA,MACvC,MAAA,EAAQ,EAAE,IAAA,EAAM,QAAA,EAAU,UAAU,IAAA,EAAK;AAAA,MACzC,WAAW,EAAE,IAAA,EAAM,QAAQ,QAAA,EAAU,IAAA,EAAM,YAAY,IAAA,EAAK;AAAA,MAC5D,SAAA,EAAW,EAAE,IAAA,EAAM,MAAA,EAAQ,UAAU,IAAA;AAAK,KAC5C;AAAA,IACA,UAAA,EAAY,CAAC,MAAM,CAAA;AAAA,IACnB,OAAA,EAAS,CAAC,EAAE,EAAA,EAAI,CAAC,QAAQ,CAAA,EAAG,IAAA,EAAM,wBAAA,EAA0B;AAAA;AAEhE;AAEA,IAAM,UAAA,GAAa,MAAM,eAAA,CAAgB,MAAA,CAAO,gBAAgB,IAAI,UAAA,CAAW,EAAE,CAAC,CAAC,CAAA;AAG5E,SAAS,mBAAmB,KAAA,EAAwB;AACzD,EAAA,IAAI,GAAA;AACJ,EAAA,IAAI;AACF,IAAA,GAAA,GAAM,IAAI,IAAI,KAAK,CAAA;AAAA,EACrB,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,KAAA;AAAA,EACT;AACA,EAAA,IAAI,GAAA,CAAI,aAAa,QAAA,IAAY,GAAA,CAAI,aAAa,OAAA,EAAS,OAAO,IAAI,QAAA,KAAa,KAAA;AACnF,EAAA,MAAM,IAAA,GAAO,GAAA,CAAI,QAAA,CAAS,WAAA,EAAY;AACtC,EAAA,OAAO,EACL,IAAA,KAAS,WAAA,IACT,mCAAA,CAAoC,IAAA,CAAK,IAAI,CAAA,IAC7C,sBAAA,CAAuB,IAAA,CAAK,IAAI,CAAA,IAChC,IAAA,CAAK,WAAW,GAAG,CAAA,CAAA;AAEvB;AAEA,IAAM,OAAA,GAAU,IAAI,WAAA,EAAY;AAEhC,eAAe,eAAA,CAAgB,GAAW,CAAA,EAA6B;AACrE,EAAA,MAAM,CAAC,IAAA,EAAM,KAAK,CAAA,GAAI,MAAM,OAAA,CAAQ,GAAA;AAAA,IAClC,CAAC,CAAA,EAAG,CAAC,CAAA,CAAE,GAAA;AAAA,MACL,OAAO,KAAA,KAAU,IAAI,UAAA,CAAW,MAAM,MAAA,CAAO,MAAA,CAAO,MAAA,CAAO,SAAA,EAAW,OAAA,CAAQ,MAAA,CAAO,KAAK,CAAC,CAAC;AAAA;AAC9F,GACF;AACA,EAAA,IAAI,IAAA,GAAO,CAAA;AACX,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,EAAA,EAAI,CAAA,IAAK,CAAA,EAAG,IAAA,IAAA,CAAS,IAAA,GAAO,CAAC,CAAA,IAAK,CAAA,KAAM,KAAA,GAAQ,CAAC,CAAA,IAAK,CAAA,CAAA;AAC1E,EAAA,OAAO,IAAA,KAAS,CAAA;AAClB;AAcO,SAAS,SAAS,OAAA,EAA0C;AACjE,EAAA,IAAI,GAAA;AACJ,EAAA,MAAM,WAAW,EAAE,GAAG,gBAAA,EAAkB,GAAG,QAAQ,QAAA,EAAS;AAC5D,EAAA,MAAM,KAAA,GAAA,CAAS,OAAA,CAAQ,cAAA,IAAkB,EAAA,IAAM,GAAA;AAC/C,EAAA,MAAM,WAAW,IAAA,CAAK,GAAA,CAAI,CAAA,EAAG,OAAA,CAAQ,mBAAmB,CAAC,CAAA;AACzD,EAAA,MAAM,WAAA,GAAc,OAAA,CAAQ,WAAA,CAAY,OAAA,CAAQ,MAAM,EAAE,CAAA;AAExD,EAAA,MAAM,KAAA,GAAQ,OAAO,MAAA,EAAgB,IAAA,KAAiB;AACpD,IAAA,MAAM,MAAA,GAAS,MAAM,OAAA,CAAQ,QAAA,CAAS,IAAA,CAAK,EAAE,MAAA,EAAQ,IAAA,EAAM,UAAA,CAAW,IAAI,CAAA,EAAG,CAAA;AAC7E,IAAA,IAAI,CAAC,OAAO,EAAA,EAAI,GAAA,CAAI,OAAO,IAAA,CAAK,CAAA,+BAAA,EAAkC,MAAA,CAAO,KAAK,CAAA,CAAE,CAAA;AAAA,EAClF,CAAA;AAEA,EAAA,eAAe,IAAA,CAAK,MAAc,IAAA,EAAsD;AACtF,IAAA,MAAM,CAAC,OAAO,CAAA,GAAI,MAAM,IAAI,KAAA,CAAM,IAAA,CAAmB,IAAA,EAAM,EAAE,IAAA,EAAK,EAAG,EAAE,KAAA,EAAO,GAAG,CAAA;AACjF,IAAA,MAAM,MAAA,GAAS,MAAA,CAAO,IAAA,CAAK,EAAE,CAAA;AAE7B,IAAA,IAAI,CAAC,WAAW,OAAA,CAAQ,SAAA,CAAU,SAAQ,GAAI,IAAA,CAAK,KAAI,EAAG;AACxD,MAAA,IAAI,OAAA,QAAe,GAAA,CAAI,KAAA,CAAM,OAAO,IAAA,EAAM,EAAE,MAAM,CAAA;AAClD,MAAA,MAAM,KAAA,CAAM,MAAA,EAAQ,QAAA,CAAS,OAAO,CAAA;AACpC,MAAA;AAAA,IACF;AAEA,IAAA,MAAM,IAAI,KAAA,CAAM,MAAA,CAAO,IAAA,EAAM,EAAE,MAAM,CAAA;AAErC,IAAA,MAAM,GAAA,uBAAU,IAAA,EAAK;AACrB,IAAA,MAAM,OAAA,GAAU;AAAA,MACd,UAAU,IAAA,CAAK,IAAA;AAAA,MACf,QAAA,EAAU,KAAK,QAAA,IAAY,IAAA;AAAA,MAC3B,KAAA,EAAO,KAAK,KAAA,IAAS,IAAA;AAAA,MACrB,UAAA,EAAY;AAAA,KACd;AACA,IAAA,MAAM,CAAC,QAAQ,CAAA,GAAI,MAAM,IAAI,KAAA,CAAM,IAAA,CAAmB,IAAA,EAAM,EAAE,MAAA,EAAO,EAAG,EAAE,KAAA,EAAO,GAAG,CAAA;AAEpF,IAAA,IAAI,QAAA,EAAU;AAGZ,MAAA,MAAM,IAAI,KAAA,CAAM,MAAA;AAAA,QACd,IAAA;AAAA,QACA,EAAE,EAAA,EAAI,QAAA,CAAS,EAAA,EAAG;AAAA,QAClB,EAAE,MAAA,EAAQ,OAAA,CAAQ,QAAQ,QAAA,EAAU,GAAA,EAAK,GAAG,OAAA;AAAQ,OACtD;AAAA,IACF,CAAA,MAAO;AACL,MAAA,MAAM,KAAA,GAAQ,MAAM,GAAA,CAAI,KAAA,CAAM,IAAA;AAAA,QAC5B,IAAA;AAAA,QACA,EAAE,MAAA,EAAQ,OAAA,CAAQ,MAAA,EAAO;AAAA,QACzB,EAAE,OAAA,EAAS,EAAE,OAAO,YAAA,EAAc,SAAA,EAAW,OAAM;AAAE,OACvD;AACA,MAAA,MAAM,MAAA,GAAS,KAAA,CAAM,MAAA,GAAS,QAAA,GAAW,CAAA;AACzC,MAAA,IAAI,SAAS,CAAA,EAAG;AACd,QAAA,MAAM,GAAA,CAAI,MAAM,MAAA,CAAO,IAAA,EAAM,EAAE,EAAA,EAAI,EAAE,IAAI,KAAA,CAAM,KAAA,CAAM,GAAG,MAAM,CAAA,CAAE,IAAI,CAAC,GAAA,KAAQ,IAAI,EAAE,CAAA,IAAK,CAAA;AAAA,MAC1F;AACA,MAAA,MAAM,GAAA,CAAI,KAAA,CAAM,MAAA,CAAO,IAAA,EAAM;AAAA,QAC3B,EAAE,EAAA,EAAI,MAAA,CAAO,UAAA,EAAW,EAAG,MAAA,EAAQ,OAAA,CAAQ,MAAA,EAAQ,MAAA,EAAQ,QAAA,EAAU,GAAA,EAAK,GAAG,OAAA;AAAQ,OACtF,CAAA;AAAA,IACH;AACA,IAAA,MAAM,KAAA,CAAM,MAAA,EAAQ,QAAA,CAAS,SAAS,CAAA;AAAA,EACxC;AAEA,EAAA,eAAe,aAAa,MAAA,EAAuC;AACjE,IAAA,MAAM,SAAS,MAAA,CAAO,cAAA;AACtB,IAAA,IAAI,MAAA,IAAU,CAAC,QAAA,EAAU,MAAM,EAAE,QAAA,CAAS,MAAA,CAAO,eAAA,CAAgB,MAAM,CAAA,EAAG;AACxE,MAAA,MAAM,GAAA,CAAI,KAAA,CAAM,MAAA,CAAO,IAAA,EAAM,EAAE,MAAA,EAAQ,MAAA,CAAO,MAAA,CAAO,IAAA,CAAK,EAAE,CAAA,EAAG,CAAA;AAC/D,MAAA;AAAA,IACF;AAEA,IAAA,MAAM,UAAU,MAAA,CAAO,OAAA;AACvB,IAAA,IAAI,CAAC,SAAS,IAAA,EAAM;AACpB,IAAA,MAAM,MAAA,GAAS,MAAA,CAAO,OAAA,CAAQ,IAAA,CAAK,EAAE,CAAA;AACrC,IAAA,MAAM,CAAC,OAAA,EAAS,QAAQ,CAAA,GAAI,OAAA,CAAQ,KAAK,IAAA,EAAK,CAAE,KAAA,CAAM,KAAA,EAAO,CAAC,CAAA;AAE9D,IAAA,MAAM,IAAA,GAAO,OAAA,EAAS,KAAA,CAAM,GAAG,EAAE,CAAC,CAAA;AAElC,IAAA,IAAI,SAAS,QAAA,EAAU;AACrB,MAAA,IAAI,QAAA,EAAU,MAAM,IAAA,CAAK,QAAA,EAAU,QAAQ,IAAI,CAAA;AAAA,WAC1C,MAAM,KAAA,CAAM,MAAA,EAAQ,QAAA,CAAS,KAAK,CAAA;AACvC,MAAA;AAAA,IACF;AACA,IAAA,IAAI,SAAS,OAAA,EAAS;AACpB,MAAA,MAAM,OAAA,GAAU,MAAM,GAAA,CAAI,KAAA,CAAM,OAAO,IAAA,EAAM,EAAE,QAAQ,CAAA;AACvD,MAAA,IAAI,UAAU,CAAA,EAAG,MAAM,KAAA,CAAM,MAAA,EAAQ,SAAS,YAAY,CAAA;AAAA,IAC5D;AAAA,EACF;AAEA,EAAA,MAAM,MAAA,GAA4B;AAAA,IAChC;AAAA,MACE,IAAA,EAAM,gBAAA;AAAA,MACN,MAAA,EAAQ,MAAA;AAAA,MACR,KAAA,EAAO,EAAE,IAAA,EAAM,MAAA,EAAO;AAAA,MACtB,OAAA,EAAS,OAAO,EAAE,MAAA,EAAO,KAAM;AAC7B,QAAA,MAAM,QAAQ,MAAA,IAAU,EAAA;AACxB,QAAA,MAAM,GAAA,GAAM,KAAK,GAAA,EAAI;AAErB,QAAA,MAAM,GAAA,CAAI,KAAA,CAAM,MAAA,CAAO,IAAA,EAAM,EAAE,MAAA,EAAQ,KAAA,EAAO,SAAA,EAAW,EAAE,IAAI,IAAI,IAAA,CAAK,GAAG,CAAA,IAAK,CAAA;AAEhF,QAAA,MAAM,OAAO,UAAA,EAAW;AACxB,QAAA,MAAM,SAAA,GAAY,IAAI,IAAA,CAAK,GAAA,GAAM,KAAK,CAAA;AACtC,QAAA,MAAM,GAAA,CAAI,KAAA,CAAM,MAAA,CAAO,IAAA,EAAM;AAAA,UAC3B,EAAE,MAAM,MAAA,EAAQ,KAAA,EAAO,WAAW,IAAI,IAAA,CAAK,GAAG,CAAA,EAAG,SAAA;AAAU,SAC5D,CAAA;AACD,QAAA,OAAO,SAAS,IAAA,CAAK;AAAA,UACnB,GAAA,EAAK,iBAAA,CAAkB,WAAA,EAAa,IAAI,CAAA;AAAA,UACxC,IAAA;AAAA,UACA,SAAA,EAAW,UAAU,WAAA;AAAY,SAClC,CAAA;AAAA,MACH;AAAA,KACF;AAAA,IACA;AAAA,MACE,IAAA,EAAM,iBAAA;AAAA,MACN,MAAA,EAAQ,KAAA;AAAA,MACR,KAAA,EAAO,EAAE,IAAA,EAAM,MAAA,EAAO;AAAA,MACtB,OAAA,EAAS,OAAO,EAAE,MAAA,EAAO,KAAM;AAC7B,QAAA,MAAM,KAAA,GAAQ,MAAM,GAAA,CAAI,KAAA,CAAM,IAAA;AAAA,UAC5B,IAAA;AAAA,UACA,EAAE,MAAA,EAAQ,MAAA,IAAU,EAAA,EAAG;AAAA,UACvB,EAAE,OAAA,EAAS,EAAE,OAAO,UAAA,EAAY,SAAA,EAAW,QAAO;AAAE,SACtD;AACA,QAAA,OAAO,SAAS,IAAA,CAAK;AAAA,UACnB,KAAA,EAAO,KAAA,CAAM,GAAA,CAAI,CAAC,IAAA,MAAU;AAAA,YAC1B,QAAQ,IAAA,CAAK,MAAA;AAAA,YACb,UAAU,IAAA,CAAK,QAAA;AAAA,YACf,UAAU,IAAA,CAAK,QAAA;AAAA,YACf,OAAO,IAAA,CAAK,KAAA;AAAA,YACZ,QAAA,EAAU,IAAA,CAAK,QAAA,CAAS,WAAA;AAAY,WACtC,CAAE;AAAA,SACH,CAAA;AAAA,MACH;AAAA,KACF;AAAA,IACA;AAAA,MACE,IAAA,EAAM,kBAAA;AAAA,MACN,MAAA,EAAQ,MAAA;AAAA,MACR,KAAA,EAAO,EAAE,IAAA,EAAM,MAAA,EAAO;AAAA,MACtB,OAAA,EAAS,OAAO,EAAE,OAAA,EAAS,QAAO,KAAM;AACtC,QAAA,MAAM,MAAA,GAAS,MAAM,YAAA,CAAa,OAAO,CAAA;AACzC,QAAA,IAAI,OAAA,IAAW,MAAA,EAAQ,OAAO,MAAA,CAAO,KAAA;AACrC,QAAA,MAAM,EAAE,MAAA,EAAO,GAAI,MAAA,CAAO,IAAA;AAC1B,QAAA,MAAM,QAAQ,MAAA,IAAU,EAAA;AAExB,QAAA,MAAM,OAAA,GAAU,MAAM,GAAA,CAAI,KAAA,CAAM,MAAA;AAAA,UAC9B,IAAA;AAAA,UACA,OAAO,MAAA,KAAW,QAAA,IAAY,MAAA,KAAW,EAAA,GACrC,EAAE,MAAA,EAAQ,KAAA,EAAO,MAAA,EAAO,GACxB,EAAE,MAAA,EAAQ,KAAA;AAAM,SACtB;AACA,QAAA,OAAO,QAAA,CAAS,IAAA,CAAK,EAAE,OAAA,EAAS,CAAA;AAAA,MAClC;AAAA;AACF,GACF;AAEA,EAAA,IAAI,QAAQ,aAAA,EAAe;AACzB,IAAA,MAAM,SAAS,OAAA,CAAQ,aAAA;AACvB,IAAA,MAAA,CAAO,IAAA,CAAK;AAAA,MACV,IAAA,EAAM,mBAAA;AAAA,MACN,MAAA,EAAQ,MAAA;AAAA,MACR,KAAA,EAAO;AAAA,QACL,IAAA,EAAM,QAAA;AAAA,QACN,aAAA,EACE;AAAA,OACJ;AAAA,MACA,OAAA,EAAS,OAAO,EAAE,OAAA,EAAQ,KAAM;AAC9B,QAAA,MAAM,SAAA,GAAY,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,iCAAiC,CAAA,IAAK,EAAA;AAC5E,QAAA,IAAI,CAAE,MAAM,eAAA,CAAgB,SAAA,EAAW,MAAM,CAAA,EAAI,OAAO,IAAI,QAAA,CAAS,IAAA,EAAM,EAAE,MAAA,EAAQ,KAAK,CAAA;AAE1F,QAAA,MAAM,MAAA,GAAS,MAAM,YAAA,CAAa,OAAO,CAAA;AACzC,QAAA,IAAI,OAAA,IAAW,MAAA,EAAQ,OAAO,MAAA,CAAO,KAAA;AACrC,QAAA,IAAI;AACF,UAAA,MAAM,YAAA,CAAa,OAAO,IAAiC,CAAA;AAAA,QAC7D,SAAS,KAAA,EAAO;AAEd,UAAA,GAAA,CAAI,MAAA,CAAO,KAAA,CAAM,wBAAA,EAA0B,EAAE,OAAO,CAAA;AAAA,QACtD;AACA,QAAA,OAAO,QAAA,CAAS,IAAA,CAAK,EAAE,EAAA,EAAI,MAAM,CAAA;AAAA,MACnC;AAAA,KACD,CAAA;AAAA,EACH;AAEA,EAAA,OAAO;AAAA,IACL,EAAA,EAAI,UAAA;AAAA,IACJ,QAAA,EAAU,CAAC,UAAU,CAAA;AAAA,IACrB,MAAA,EAAQ,cAAA;AAAA,IAER,IAAA,EAAM,CAAC,OAAA,KAAY;AACjB,MAAA,GAAA,GAAM,OAAA;AAAA,IACR,CAAA;AAAA,IAEA,KAAA,EAAO;AAAA,MACL,OAAA,EAAS,OAAO,OAAA,KAAsD;AACpE,QAAA,MAAM,KAAA,GAAQ,MAAM,GAAA,CAAI,KAAA,CAAM,KAAmB,IAAA,EAAM;AAAA,UACrD,MAAA,EAAQ,QAAQ,YAAA,CAAa;AAAA,SAC9B,CAAA;AACD,QAAA,IAAI,KAAA,CAAM,WAAW,CAAA,EAAG,OAAO,EAAE,MAAA,EAAQ,SAAA,EAAW,QAAQ,yBAAA,EAA0B;AAEtF,QAAA,MAAM,QAAA,GAAW,QAAQ,MAAA,CAAO;AAAA,UAC9B,IAAA,EAAM,QAAQ,YAAA,CAAa,IAAA;AAAA,UAC3B,OAAA,EAAS,QAAQ,YAAA,CAAa;AAAA,SAC/B,CAAA;AACD,QAAA,IAAI,SAAS,QAAA,CAAS,MAAA;AACtB,QAAA,IAAI,MAAA,IAAU,CAAC,kBAAA,CAAmB,MAAA,CAAO,GAAG,CAAA,EAAG;AAC7C,UAAA,GAAA,CAAI,MAAA,CAAO,IAAA;AAAA,YACT,CAAA,0BAAA,EAA6B,OAAO,GAAG,CAAA,6CAAA;AAAA,WACzC;AACA,UAAA,MAAA,GAAS,MAAA;AAAA,QACX;AAEA,QAAA,MAAM,OAAA,GAAU,MAAM,OAAA,CAAQ,GAAA;AAAA,UAC5B,KAAA,CAAM,GAAA;AAAA,YAAI,CAAC,IAAA,KACT,OAAA,CAAQ,QAAA,CAAS,IAAA,CAAK;AAAA,cACpB,QAAQ,IAAA,CAAK,MAAA;AAAA,cACb,MAAM,QAAA,CAAS,IAAA;AAAA,cACf,OAAA,EAAS,MAAA,GAAS,CAAC,MAAM,CAAA,GAAI,MAAA;AAAA,cAC7B,QAAQ,OAAA,CAAQ;AAAA,aACjB;AAAA;AACH,SACF;AAEA,QAAA,MAAM,QAAkB,EAAC;AACzB,QAAA,IAAI,SAAA,GAAY,CAAA;AAChB,QAAA,IAAI,SAAA,GAAY,KAAA;AAChB,QAAA,IAAI,SAAA,GAAY,EAAA;AAChB,QAAA,OAAA,CAAQ,OAAA,CAAQ,CAAC,MAAA,EAAQ,KAAA,KAAU;AACjC,UAAA,MAAM,IAAA,GAAO,MAAM,KAAK,CAAA;AACxB,UAAA,IAAI,CAAC,IAAA,EAAM;AACX,UAAA,IAAI,OAAO,EAAA,EAAI;AACb,YAAA,SAAA,IAAa,CAAA;AACb,YAAA;AAAA,UACF;AACA,UAAA,SAAA,GAAY,MAAA,CAAO,KAAA;AACnB,UAAA,IAAI,MAAA,CAAO,IAAA,EAAM,KAAA,CAAM,IAAA,CAAK,KAAK,EAAE,CAAA;AAAA,eAAA,IAC1B,MAAA,CAAO,WAAW,SAAA,GAAY,IAAA;AAAA,QACzC,CAAC,CAAA;AAED,QAAA,IAAI,KAAA,CAAM,MAAA,GAAS,CAAA,EAAG,MAAM,IAAI,KAAA,CAAM,MAAA,CAAO,IAAA,EAAM,EAAE,EAAA,EAAI,EAAE,EAAA,EAAI,KAAA,IAAS,CAAA;AACxE,QAAA,IAAI,SAAA,GAAY,CAAA,EAAG,OAAO,EAAE,QAAQ,MAAA,EAAO;AAC3C,QAAA,IAAI,KAAA,CAAM,MAAA,KAAW,KAAA,CAAM,MAAA,EAAQ;AACjC,UAAA,OAAO,EAAE,MAAA,EAAQ,QAAA,EAAU,KAAA,EAAO,2BAAA,EAA6B,WAAW,KAAA,EAAM;AAAA,QAClF;AACA,QAAA,OAAO,EAAE,MAAA,EAAQ,QAAA,EAAU,KAAA,EAAO,SAAA,IAAa,gCAAgC,SAAA,EAAU;AAAA,MAC3F;AAAA,KACF;AAAA,IAEA,MAAA;AAAA,IACA,YAAA;AAAA,IAEA,IAAA,CAAK,WAAA,GAAc,EAAC,EAAG;AACrB,MAAA,MAAM,MAAA,GAAS,WAAA,CAAY,MAAA,IAAU,GAAA,CAAI,MAAA;AACzC,MAAA,MAAM,UAAA,GAAa,IAAI,eAAA,EAAgB;AACvC,MAAA,IAAI,MAAA;AAEJ,MAAA,KAAA,CAAM,YAAY;AAChB,QAAA,OAAO,CAAC,UAAA,CAAW,MAAA,CAAO,OAAA,EAAS;AACjC,UAAA,IAAI;AACF,YAAA,MAAM,OAAA,GAAU,MAAM,OAAA,CAAQ,QAAA,CAAS,UAAA,CAAW;AAAA,cAChD,MAAA;AAAA,cACA,QAAQ,UAAA,CAAW;AAAA,aACpB,CAAA;AACD,YAAA,KAAA,MAAW,UAAU,OAAA,EAAS;AAC5B,cAAA,MAAA,GAAS,OAAO,SAAA,GAAY,CAAA;AAC5B,cAAA,MAAM,YAAA,CAAa,MAAM,CAAA,CAAE,KAAA;AAAA,gBAAM,CAAC,KAAA,KAChC,MAAA,CAAO,MAAM,wBAAA,EAA0B,EAAE,OAAO;AAAA,eAClD;AAAA,YACF;AAAA,UACF,SAAS,KAAA,EAAO;AACd,YAAA,IAAI,UAAA,CAAW,OAAO,OAAA,EAAS;AAC/B,YAAA,MAAA,CAAO,KAAA,CAAM,yBAAA,EAA2B,EAAE,KAAA,EAAO,CAAA;AACjD,YAAA,MAAM,IAAI,OAAA,CAAQ,CAAC,YAAY,UAAA,CAAW,OAAA,EAAS,GAAK,CAAC,CAAA;AAAA,UAC3D;AAAA,QACF;AAAA,MACF,CAAA,GAAG;AAEH,MAAA,OAAO,EAAE,IAAA,EAAM,MAAM,UAAA,CAAW,OAAM,EAAE;AAAA,IAC1C;AAAA,GACF;AACF","file":"telegram.js","sourcesContent":["import type { DeliveryOutcome } from \"../../core/adapter\";\nimport { encodeBase64Url } from \"../../core/base64url\";\nimport type { Logger } from \"../../core/errors\";\nimport { readJsonBody } from \"../../core/handler\";\nimport { escapeHtml } from \"../../core/html\";\nimport type {\n  DeliverContext,\n  EasyPingPlugin,\n  PluginInitContext,\n  RouteDefinition,\n  SchemaDeclaration,\n} from \"../../core/plugin\";\nimport {\n  type TelegramProvider,\n  type TelegramUpdate,\n  telegramStartLink,\n} from \"../../providers/telegram\";\n\nconst CHAT = \"notification_telegram_chat\";\nconst LINK = \"notification_telegram_link\";\n\nexport type TelegramChat = {\n  id: string;\n  userId: string;\n  chatId: string;\n  /** \"private\", \"group\", \"supergroup\" or \"channel\". */\n  chatType: string;\n  username: string | null;\n  title: string | null;\n  linkedAt: Date;\n  lastSeenAt: Date;\n};\n\nexport type TelegramLink = {\n  code: string;\n  userId: string;\n  createdAt: Date;\n  expiresAt: Date;\n};\n\nexport type TelegramRendered = {\n  /** Telegram HTML. Anything user-typed inside it goes through escapeHtml(). */\n  text: string;\n  /** Adds one inline button under the message. */\n  button?: { text: string; url: string } | undefined;\n};\n\nexport type TelegramOptions = {\n  provider: TelegramProvider;\n  /** Without the @. Builds the https://t.me/<bot>?start=<code> link. */\n  botUsername: string;\n  render: (input: { type: string; payload: unknown }) => TelegramRendered;\n  /**\n   * Shared with Telegram through setWebhook; Telegram echoes it in\n   * X-Telegram-Bot-Api-Secret-Token and the webhook route accepts nothing else.\n   * Unset, the route is not mounted and updates must come through poll().\n   */\n  webhookSecret?: string | undefined;\n  /** How long a \"Connect Telegram\" link stays valid. Default 10 minutes. */\n  linkTtlMinutes?: number | undefined;\n  /** Linking past this evicts the user's least recently seen chat. Default 5. */\n  maxChatsPerUser?: number | undefined;\n  /** Bot replies, if the defaults are not your voice. */\n  messages?: Partial<typeof DEFAULT_MESSAGES> | undefined;\n};\n\nconst DEFAULT_MESSAGES = {\n  connected: \"Connected. You will receive notifications here.\",\n  disconnected: \"Disconnected. You will not receive notifications here any more.\",\n  expired: \"That link has expired. Open the app and connect Telegram again.\",\n  start: \"Open the app and use “Connect Telegram” to link this chat.\",\n};\n\n/** The tables this plugin owns, exported so DDL needs no plugin instance. */\nexport const telegramSchema = {\n  telegramChat: {\n    tableName: CHAT,\n    fields: {\n      id: { type: \"string\", required: true },\n      userId: { type: \"string\", required: true },\n      chatId: { type: \"string\", required: true },\n      chatType: { type: \"string\", required: true },\n      username: { type: \"string\" },\n      title: { type: \"string\" },\n      linkedAt: { type: \"date\", required: true, defaultNow: true },\n      lastSeenAt: { type: \"date\", required: true, defaultNow: true },\n    },\n    primaryKey: [\"id\"],\n    indexes: [\n      { on: [\"userId\"], name: \"telegram_chat_user_idx\" },\n      // A chat belongs to one account at a time; re-linking moves it.\n      { on: [\"chatId\"], unique: true, name: \"telegram_chat_chat_idx\" },\n    ],\n  },\n  telegramLink: {\n    tableName: LINK,\n    fields: {\n      code: { type: \"string\", required: true },\n      userId: { type: \"string\", required: true },\n      createdAt: { type: \"date\", required: true, defaultNow: true },\n      expiresAt: { type: \"date\", required: true },\n    },\n    primaryKey: [\"code\"],\n    indexes: [{ on: [\"userId\"], name: \"telegram_link_user_idx\" }],\n  },\n} as const satisfies SchemaDeclaration;\n\nconst randomCode = () => encodeBase64Url(crypto.getRandomValues(new Uint8Array(24)));\n\n/** Telegram refuses buttons to localhost, private hosts and non-http schemes with a 400 for the whole message. */\nexport function isButtonUrlAllowed(value: string): boolean {\n  let url: URL;\n  try {\n    url = new URL(value);\n  } catch {\n    return false;\n  }\n  if (url.protocol !== \"https:\" && url.protocol !== \"http:\") return url.protocol === \"tg:\";\n  const host = url.hostname.toLowerCase();\n  return !(\n    host === \"localhost\" ||\n    /\\.(localhost|local|internal|lan)$/.test(host) ||\n    /^\\d+\\.\\d+\\.\\d+\\.\\d+$/.test(host) ||\n    host.startsWith(\"[\")\n  );\n}\n\nconst encoder = new TextEncoder();\n\nasync function timingSafeEqual(a: string, b: string): Promise<boolean> {\n  const [left, right] = await Promise.all(\n    [a, b].map(\n      async (value) => new Uint8Array(await crypto.subtle.digest(\"SHA-256\", encoder.encode(value))),\n    ),\n  );\n  let diff = 0;\n  for (let i = 0; i < 32; i += 1) diff |= (left?.[i] ?? 0) ^ (right?.[i] ?? 0);\n  return diff === 0;\n}\n\nexport type TelegramPlugin = EasyPingPlugin<\"telegram\", typeof telegramSchema> & {\n  /** Feeds one Bot API update through the linking logic. The webhook route and poll() both call it. */\n  handleUpdate(update: TelegramUpdate): Promise<void>;\n  /**\n   * Long-polls getUpdates instead of a webhook: for development, or a host\n   * with no public URL. One poller per bot token, or Telegram splits updates\n   * between them. Call stop() on shutdown.\n   */\n  poll(options?: { logger?: Logger | undefined }): { stop(): void };\n};\n\n/** Telegram over a bot the user connects with one tap. Fans out per linked chat; blocked chats are pruned. */\nexport function telegram(options: TelegramOptions): TelegramPlugin {\n  let ctx: PluginInitContext;\n  const messages = { ...DEFAULT_MESSAGES, ...options.messages };\n  const ttlMs = (options.linkTtlMinutes ?? 10) * 60_000;\n  const maxChats = Math.max(1, options.maxChatsPerUser ?? 5);\n  const botUsername = options.botUsername.replace(/^@/, \"\");\n\n  const reply = async (chatId: string, text: string) => {\n    const result = await options.provider.send({ chatId, text: escapeHtml(text) });\n    if (!result.ok) ctx.logger.warn(`telegram reply to chat failed: ${result.error}`);\n  };\n\n  async function link(code: string, chat: NonNullable<TelegramUpdate[\"message\"]>[\"chat\"]) {\n    const [pending] = await ctx.store.find<TelegramLink>(LINK, { code }, { limit: 1 });\n    const chatId = String(chat.id);\n\n    if (!pending || pending.expiresAt.getTime() < Date.now()) {\n      if (pending) await ctx.store.remove(LINK, { code });\n      await reply(chatId, messages.expired);\n      return;\n    }\n    // One-time: the code is spent whether or not the rest succeeds.\n    await ctx.store.remove(LINK, { code });\n\n    const now = new Date();\n    const details = {\n      chatType: chat.type,\n      username: chat.username ?? null,\n      title: chat.title ?? null,\n      lastSeenAt: now,\n    };\n    const [existing] = await ctx.store.find<TelegramChat>(CHAT, { chatId }, { limit: 1 });\n\n    if (existing) {\n      // Re-linking moves the chat to whoever holds the fresh code: the Telegram\n      // user tapped it, and the app session that minted it is theirs.\n      await ctx.store.update(\n        CHAT,\n        { id: existing.id },\n        { userId: pending.userId, linkedAt: now, ...details },\n      );\n    } else {\n      const chats = await ctx.store.find<TelegramChat>(\n        CHAT,\n        { userId: pending.userId },\n        { orderBy: { field: \"lastSeenAt\", direction: \"asc\" } },\n      );\n      const excess = chats.length - maxChats + 1;\n      if (excess > 0) {\n        await ctx.store.remove(CHAT, { id: { in: chats.slice(0, excess).map((row) => row.id) } });\n      }\n      await ctx.store.insert(CHAT, [\n        { id: crypto.randomUUID(), userId: pending.userId, chatId, linkedAt: now, ...details },\n      ]);\n    }\n    await reply(chatId, messages.connected);\n  }\n\n  async function handleUpdate(update: TelegramUpdate): Promise<void> {\n    const member = update.my_chat_member;\n    if (member && [\"kicked\", \"left\"].includes(member.new_chat_member.status)) {\n      await ctx.store.remove(CHAT, { chatId: String(member.chat.id) });\n      return;\n    }\n\n    const message = update.message;\n    if (!message?.text) return;\n    const chatId = String(message.chat.id);\n    const [command, argument] = message.text.trim().split(/\\s+/, 2);\n    // \"/start@botname\" arrives in groups.\n    const name = command?.split(\"@\")[0];\n\n    if (name === \"/start\") {\n      if (argument) await link(argument, message.chat);\n      else await reply(chatId, messages.start);\n      return;\n    }\n    if (name === \"/stop\") {\n      const removed = await ctx.store.remove(CHAT, { chatId });\n      if (removed > 0) await reply(chatId, messages.disconnected);\n    }\n  }\n\n  const routes: RouteDefinition[] = [\n    {\n      path: \"/telegram/link\",\n      method: \"POST\",\n      scope: { type: \"user\" },\n      handler: async ({ userId }) => {\n        const owner = userId ?? \"\";\n        const now = Date.now();\n        // A user's stale codes go, so the table cannot fill with abandoned links.\n        await ctx.store.remove(LINK, { userId: owner, expiresAt: { lt: new Date(now) } });\n\n        const code = randomCode();\n        const expiresAt = new Date(now + ttlMs);\n        await ctx.store.insert(LINK, [\n          { code, userId: owner, createdAt: new Date(now), expiresAt },\n        ]);\n        return Response.json({\n          url: telegramStartLink(botUsername, code),\n          code,\n          expiresAt: expiresAt.toISOString(),\n        });\n      },\n    },\n    {\n      path: \"/telegram/chats\",\n      method: \"GET\",\n      scope: { type: \"user\" },\n      handler: async ({ userId }) => {\n        const chats = await ctx.store.find<TelegramChat>(\n          CHAT,\n          { userId: userId ?? \"\" },\n          { orderBy: { field: \"linkedAt\", direction: \"desc\" } },\n        );\n        return Response.json({\n          chats: chats.map((chat) => ({\n            chatId: chat.chatId,\n            chatType: chat.chatType,\n            username: chat.username,\n            title: chat.title,\n            linkedAt: chat.linkedAt.toISOString(),\n          })),\n        });\n      },\n    },\n    {\n      path: \"/telegram/unlink\",\n      method: \"POST\",\n      scope: { type: \"user\" },\n      handler: async ({ request, userId }) => {\n        const parsed = await readJsonBody(request);\n        if (\"error\" in parsed) return parsed.error;\n        const { chatId } = parsed.body;\n        const owner = userId ?? \"\";\n        // Scoped by userId too: a chat id is not a secret.\n        const removed = await ctx.store.remove(\n          CHAT,\n          typeof chatId === \"string\" && chatId !== \"\"\n            ? { userId: owner, chatId }\n            : { userId: owner },\n        );\n        return Response.json({ removed });\n      },\n    },\n  ];\n\n  if (options.webhookSecret) {\n    const secret = options.webhookSecret;\n    routes.push({\n      path: \"/telegram/webhook\",\n      method: \"POST\",\n      scope: {\n        type: \"custom\",\n        justification:\n          \"called by Telegram, authenticated by the X-Telegram-Bot-Api-Secret-Token header set through setWebhook\",\n      },\n      handler: async ({ request }) => {\n        const presented = request.headers.get(\"x-telegram-bot-api-secret-token\") ?? \"\";\n        if (!(await timingSafeEqual(presented, secret))) return new Response(null, { status: 401 });\n\n        const parsed = await readJsonBody(request);\n        if (\"error\" in parsed) return parsed.error;\n        try {\n          await handleUpdate(parsed.body as unknown as TelegramUpdate);\n        } catch (error) {\n          // Telegram retries non-2xx for hours; a bad update is logged and acknowledged.\n          ctx.logger.error(\"telegram update failed\", { error });\n        }\n        return Response.json({ ok: true });\n      },\n    });\n  }\n\n  return {\n    id: \"telegram\",\n    channels: [\"telegram\"],\n    schema: telegramSchema,\n\n    init: (context) => {\n      ctx = context;\n    },\n\n    hooks: {\n      deliver: async (context: DeliverContext): Promise<DeliveryOutcome> => {\n        const chats = await ctx.store.find<TelegramChat>(CHAT, {\n          userId: context.notification.userId,\n        });\n        if (chats.length === 0) return { result: \"skipped\", reason: \"no linked telegram chat\" };\n\n        const rendered = options.render({\n          type: context.notification.type,\n          payload: context.notification.payload,\n        });\n        let button = rendered.button;\n        if (button && !isButtonUrlAllowed(button.url)) {\n          ctx.logger.warn(\n            `telegram: dropped button \"${button.url}\"; Telegram accepts only public http(s) links`,\n          );\n          button = undefined;\n        }\n\n        const results = await Promise.all(\n          chats.map((chat) =>\n            options.provider.send({\n              chatId: chat.chatId,\n              text: rendered.text,\n              buttons: button ? [button] : undefined,\n              signal: context.signal,\n            }),\n          ),\n        );\n\n        const prune: string[] = [];\n        let delivered = 0;\n        let retryable = false;\n        let lastError = \"\";\n        results.forEach((result, index) => {\n          const chat = chats[index];\n          if (!chat) return;\n          if (result.ok) {\n            delivered += 1;\n            return;\n          }\n          lastError = result.error;\n          if (result.gone) prune.push(chat.id);\n          else if (result.retryable) retryable = true;\n        });\n\n        if (prune.length > 0) await ctx.store.remove(CHAT, { id: { in: prune } });\n        if (delivered > 0) return { result: \"sent\" };\n        if (prune.length === chats.length) {\n          return { result: \"failed\", error: \"every linked chat is gone\", retryable: false };\n        }\n        return { result: \"failed\", error: lastError || \"telegram refused the message\", retryable };\n      },\n    },\n\n    routes,\n    handleUpdate,\n\n    poll(pollOptions = {}) {\n      const logger = pollOptions.logger ?? ctx.logger;\n      const controller = new AbortController();\n      let offset: number | undefined;\n\n      void (async () => {\n        while (!controller.signal.aborted) {\n          try {\n            const updates = await options.provider.getUpdates({\n              offset,\n              signal: controller.signal,\n            });\n            for (const update of updates) {\n              offset = update.update_id + 1;\n              await handleUpdate(update).catch((error) =>\n                logger.error(\"telegram update failed\", { error }),\n              );\n            }\n          } catch (error) {\n            if (controller.signal.aborted) return;\n            logger.error(\"telegram polling failed\", { error });\n            await new Promise((resolve) => setTimeout(resolve, 3_000));\n          }\n        }\n      })();\n\n      return { stop: () => controller.abort() };\n    },\n  };\n}\n"]}