polite-crawler 0.1.3 → 0.1.4

package/build/webbotauth-CjJdTAfE.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"webbotauth-CjJdTAfE.mjs","names":["signBytes","verifyBytes"],"sources":["../src/webbotauth.ts"],"sourcesContent":["import type { JsonWebKey, KeyObject } from \"node:crypto\";\nimport {\n  createHash,\n  createPrivateKey,\n  createPublicKey,\n  randomBytes,\n  sign as signBytes,\n  verify as verifyBytes,\n} from \"node:crypto\";\n\n/**\n * Signed requests: HTTP Message Signatures (RFC 9421), as the IETF Web Bot Auth profile tells\n * (`draft-ietf-webbotauth-httpsig-protocol-00`, 1 September 2026). A signature lets a site verify that\n * a request comes from the holder of a key that the operator publishes.\n *\n * - Each request gets three headers: `Signature-Agent`, `Signature-Input` and `Signature`.\n * - `Signature-Agent` is a dictionary. Its member names the key directory of the operator.\n * - The signature covers `@authority` and that member of `Signature-Agent`.\n * - The parameters are `created`, `keyid` (the JWK thumbprint of the key), `alg=\"ed25519\"`,\n *   `expires`, a random `nonce` and `tag=\"web-bot-auth\"`.\n * - The key is an Ed25519 key, and `node:crypto` signs. The package adds no dependency.\n *\n * A signature adds an identity. It does not replace the `User-Agent` header, which stays honest.\n */\n\n/** The path of the key directory on the host of the operator (the well-known URI of the draft). */\nexport const KEY_DIRECTORY_PATH = \"/.well-known/http-message-signatures-directory\";\n\n/** The media type of the key directory. The host of the directory sends it as `Content-Type`. */\nexport const KEY_DIRECTORY_TYPE = \"application/http-message-signatures-directory+json\";\n\n/** The value of the `tag` parameter of a Web Bot Auth signature. */\nexport const WEB_BOT_AUTH_TAG = \"web-bot-auth\";\n\n/**\n * This value tells how a site finds the keys from the URL of `Signature-Agent`:\n *\n * - `directory` (the default): the URL is an origin, and the keys are at `KEY_DIRECTORY_PATH` on it.\n * - `jwks_uri`: the URL is the address of a JSON Web Key Set, on any path.\n */\nexport type SignatureAgentType = \"directory\" | \"jwks_uri\";\n\n/** A key in one of the forms that `node:crypto` reads: a `KeyObject`, PEM text, DER bytes (PKCS#8 or SPKI) or a JWK. */\nexport type KeyInput = KeyObject | string | Uint8Array | JsonWebKey;\n\n/** These options make a signer for Web Bot Auth. */\nexport interface WebBotAuthOptions {\n  /** This key signs. It is an Ed25519 private key: a `KeyObject`, PKCS#8 (PEM text or DER bytes) or a JWK with `d`. */\n  readonly privateKey: KeyInput;\n  /**\n   * This text is the `keyid` of each signature: the JWK thumbprint of the key (RFC 8037). The signer\n   * calculates it. A value that is not the thumbprint of the key throws an error.\n   */\n  readonly keyId?: string | undefined;\n  /**\n   * This URL tells a site where the keys are. For the type `directory`, it is an https origin, for\n   * example `https://bot.example.com`. For `jwks_uri`, it is the https URL of a JSON Web Key Set.\n   */\n  readonly signatureAgent: string;\n  /** This value tells how a site finds the keys from `signatureAgent`. The default is `directory`. */\n  readonly agentType?: SignatureAgentType | undefined;\n  /** This value is the time that a signature stays valid, in milliseconds. The default is 5 minutes, and the maximum is 24 hours. */\n  readonly lifetimeMs?: number | undefined;\n  /** This text is the label of the signature, and the key of the member of `Signature-Agent`. The default is `sig1`. */\n  readonly label?: string | undefined;\n}\n\n/**\n * A request signer gives the signature headers of one request. The crawler uses it for each\n * request, robots.txt too. `createWebBotAuthSigner` makes one. A signer of your own can sign with a\n * key in a hardware module, for example.\n */\nexport interface RequestSigner {\n  /** This text is the `keyid` of the signatures. */\n  readonly keyId: string;\n  /** This URL is the value of the member of `Signature-Agent`: where a site finds the keys. */\n  readonly signatureAgent: string;\n  /** This method gives the headers that sign a request to `url` at the time `now` (milliseconds since the epoch). */\n  sign(url: URL, now: number): Readonly<Record<string, string>>;\n}\n\n/** The signer that `createWebBotAuthSigner` makes. It also gives its public key for the key directory. */\nexport interface WebBotAuthSigner extends RequestSigner {\n  /** This JWK is the public key of the signer, with no private part. Give it to `keyDirectory`. */\n  readonly publicKey: JsonWebKey;\n}\n\n/** One key of a key directory: an Ed25519 public key as a JWK, with its thumbprint as `kid`. */\nexport interface DirectoryKey {\n  readonly kty: \"OKP\";\n  readonly crv: \"Ed25519\";\n  readonly kid: string;\n  readonly x: string;\n  readonly use: \"sig\";\n}\n\n/** A key directory: a JSON Web Key Set. The operator serves it as JSON at `KEY_DIRECTORY_PATH`, with the type `KEY_DIRECTORY_TYPE`. */\nexport interface KeyDirectory {\n  readonly keys: readonly DirectoryKey[];\n}\n\n/** The parts of a request that `verifySignature` reads. */\nexport interface SignedRequest {\n  readonly url: string;\n  /** The default is `GET`. */\n  readonly method?: string | undefined;\n  /** These are the headers of the request. A name can be in any case, and a header can have more than one line. */\n  readonly headers: Readonly<Record<string, string | readonly string[] | undefined>>;\n}\n\n/** The result of `verifySignature`. */\nexport interface SignatureCheck {\n  /** This value is true when a Web Bot Auth signature of the request verifies with a key of the directory. */\n  readonly verified: boolean;\n  /** This text is the label of the signature that the check examined last, or null. */\n  readonly label: string | null;\n  readonly keyId: string | null;\n  /** This URL is the member of `Signature-Agent` that the signature covers, or null. */\n  readonly agent: string | null;\n  /** This text tells why the request does not verify. It is null when it verifies. */\n  readonly reason: string | null;\n}\n\n// ── structured fields (RFC 9651): the parts that the signature headers use ──\n\n/** A token of a structured field, for example `ed25519` in `alg=ed25519`. */\nclass Token {\n  constructor(readonly value: string) {}\n}\n\ntype BareItem = string | number | boolean | Uint8Array | Token;\ntype Params = ReadonlyArray<readonly [string, BareItem]>;\n\ninterface Item {\n  readonly value: BareItem;\n  readonly params: Params;\n}\n\ninterface InnerList {\n  readonly items: readonly Item[];\n  readonly params: Params;\n}\n\ntype Member = Item | InnerList;\n\nconst isInnerList = (member: Member): member is InnerList => \"items\" in member;\n\n/** This error tells that a structured field does not parse. */\nclass FieldError extends Error {}\n\nconst KEY_START = /[a-z*]/;\nconst KEY_CHAR = /[a-z0-9_\\-.*]/;\nconst TOKEN_START = /[A-Za-z*]/;\nconst TOKEN_CHAR = /[!#$%&'*+\\-.^_`|~0-9A-Za-z:/]/;\nconst BASE64 = /^[A-Za-z0-9+/=]*$/;\n\n/** This class reads one structured field from its text. */\nclass FieldParser {\n  private at = 0;\n  constructor(private readonly text: string) {}\n\n  private peek(): string {\n    return this.text[this.at] ?? \"\";\n  }\n\n  private spaces(): void {\n    while (this.peek() === \" \") this.at += 1;\n  }\n\n  private ows(): void {\n    while (this.peek() === \" \" || this.peek() === \"\\t\") this.at += 1;\n  }\n\n  dictionary(): Map<string, Member> {\n    const out = new Map<string, Member>();\n    this.spaces();\n    while (this.at < this.text.length) {\n      const key = this.key();\n      let member: Member;\n      if (this.peek() === \"=\") {\n        this.at += 1;\n        member = this.peek() === \"(\" ? this.innerList() : this.item();\n      } else {\n        member = { value: true, params: this.params() };\n      }\n      out.set(key, member);\n      this.ows();\n      if (this.at >= this.text.length) break;\n      if (this.peek() !== \",\") throw new FieldError(`a \",\" is necessary at ${String(this.at)}`);\n      this.at += 1;\n      this.ows();\n      if (this.at >= this.text.length) throw new FieldError(\"the field ends with a comma\");\n    }\n    return out;\n  }\n\n  /** This method reads one item and checks that the field has nothing after it. */\n  wholeItem(): Item {\n    this.spaces();\n    const item = this.item();\n    this.spaces();\n    if (this.at < this.text.length) throw new FieldError(\"text after the item\");\n    return item;\n  }\n\n  private key(): string {\n    if (!KEY_START.test(this.peek())) throw new FieldError(`no key at ${String(this.at)}`);\n    const start = this.at;\n    while (KEY_CHAR.test(this.peek()) && this.at < this.text.length) this.at += 1;\n    return this.text.slice(start, this.at);\n  }\n\n  private innerList(): InnerList {\n    this.at += 1;\n    const items: Item[] = [];\n    for (;;) {\n      this.spaces();\n      if (this.peek() === \")\") {\n        this.at += 1;\n        return { items, params: this.params() };\n      }\n      if (this.at >= this.text.length) throw new FieldError(\"an inner list has no end\");\n      items.push(this.item());\n      if (this.peek() !== \" \" && this.peek() !== \")\")\n        throw new FieldError(`a space or \")\" is necessary at ${String(this.at)}`);\n    }\n  }\n\n  private item(): Item {\n    const value = this.bare();\n    return { value, params: this.params() };\n  }\n\n  private params(): Params {\n    const out: Array<readonly [string, BareItem]> = [];\n    while (this.peek() === \";\") {\n      this.at += 1;\n      this.spaces();\n      const key = this.key();\n      let value: BareItem = true;\n      if (this.peek() === \"=\") {\n        this.at += 1;\n        value = this.bare();\n      }\n      const known = out.findIndex(([name]) => name === key);\n      if (known === -1) out.push([key, value]);\n      else out[known] = [key, value];\n    }\n    return out;\n  }\n\n  private bare(): BareItem {\n    const char = this.peek();\n    if (char === \"-\" || /[0-9]/.test(char)) return this.number();\n    if (char === '\"') return this.string();\n    if (char === \":\") return this.bytes();\n    if (char === \"?\") return this.boolean();\n    if (TOKEN_START.test(char)) return this.token();\n    throw new FieldError(`no item at ${String(this.at)}`);\n  }\n\n  private number(): number {\n    const match = /^-?(\\d{1,15})(\\.\\d{1,3})?/.exec(this.text.slice(this.at));\n    if (match === null || (match[2] !== undefined && match[1]!.length > 12))\n      throw new FieldError(`not a number at ${String(this.at)}`);\n    this.at += match[0].length;\n    return Number(match[0]);\n  }\n\n  private string(): string {\n    this.at += 1;\n    let out = \"\";\n    for (;;) {\n      const char = this.peek();\n      if (char === \"\") throw new FieldError(\"a string has no end\");\n      this.at += 1;\n      if (char === \"\\\\\") {\n        const next = this.peek();\n        if (next !== '\"' && next !== \"\\\\\") throw new FieldError(\"a bad escape in a string\");\n        out += next;\n        this.at += 1;\n      } else if (char === '\"') {\n        return out;\n      } else {\n        const code = char.charCodeAt(0);\n        if (code < 0x20 || code > 0x7e)\n          throw new FieldError(\"a string holds a character that is not printable ASCII\");\n        out += char;\n      }\n    }\n  }\n\n  private bytes(): Uint8Array {\n    this.at += 1;\n    const end = this.text.indexOf(\":\", this.at);\n    if (end === -1) throw new FieldError(\"a byte sequence has no end\");\n    const text = this.text.slice(this.at, end);\n    if (!BASE64.test(text)) throw new FieldError(\"a byte sequence is not base64\");\n    this.at = end + 1;\n    return new Uint8Array(Buffer.from(text, \"base64\"));\n  }\n\n  private boolean(): boolean {\n    const value = this.text.slice(this.at, this.at + 2);\n    if (value !== \"?1\" && value !== \"?0\") throw new FieldError(\"not a boolean\");\n    this.at += 2;\n    return value === \"?1\";\n  }\n\n  private token(): Token {\n    const start = this.at;\n    this.at += 1;\n    while (TOKEN_CHAR.test(this.peek()) && this.at < this.text.length) this.at += 1;\n    return new Token(this.text.slice(start, this.at));\n  }\n}\n\nconst serializeBare = (value: BareItem): string => {\n  if (value instanceof Token) return value.value;\n  if (value instanceof Uint8Array) return `:${Buffer.from(value).toString(\"base64\")}:`;\n  if (typeof value === \"boolean\") return value ? \"?1\" : \"?0\";\n  if (typeof value === \"number\")\n    return Number.isInteger(value) ? String(value) : String(Math.round(value * 1000) / 1000);\n  return `\"${value.replace(/[\"\\\\]/g, (char) => `\\\\${char}`)}\"`;\n};\n\nconst serializeParams = (params: Params): string =>\n  params\n    .map(([key, value]) => (value === true ? `;${key}` : `;${key}=${serializeBare(value)}`))\n    .join(\"\");\n\nconst serializeItem = (item: Item): string =>\n  `${serializeBare(item.value)}${serializeParams(item.params)}`;\n\nconst serializeMember = (member: Member): string =>\n  isInnerList(member)\n    ? `(${member.items.map(serializeItem).join(\" \")})${serializeParams(member.params)}`\n    : serializeItem(member);\n\n/** This function tells if a text is a key of a structured field: a label of a signature, for example. */\nconst isKey = (text: string): boolean => /^[a-z*][a-z0-9_\\-.*]*$/.test(text);\n\n// ── keys ──\n\nconst base64url = (bytes: Uint8Array): string => Buffer.from(bytes).toString(\"base64url\");\n\nconst isKeyObject = (key: KeyInput): key is KeyObject =>\n  typeof key === \"object\" && key !== null && \"asymmetricKeyType\" in key && \"export\" in key;\n\n/** This function reads a private key. Its errors do not hold the key. */\nconst privateKeyOf = (input: KeyInput): KeyObject => {\n  let key: KeyObject;\n  try {\n    if (isKeyObject(input)) key = input;\n    else if (typeof input === \"string\")\n      key = input.trim().startsWith(\"{\")\n        ? createPrivateKey({ key: JSON.parse(input) as JsonWebKey, format: \"jwk\" })\n        : createPrivateKey(input);\n    else if (input instanceof Uint8Array)\n      key = createPrivateKey({ key: Buffer.from(input), format: \"der\", type: \"pkcs8\" });\n    else key = createPrivateKey({ key: input, format: \"jwk\" });\n  } catch (cause) {\n    throw new Error(\n      \"the private key of the signer does not parse: give an Ed25519 key as PKCS#8 (PEM or DER) or as a JWK\",\n      { cause },\n    );\n  }\n  if (key.type !== \"private\")\n    throw new Error(\"the key of the signer is not a private key: give the Ed25519 private key\");\n  if (key.asymmetricKeyType !== \"ed25519\")\n    throw new Error(\n      `the key of the signer is ${key.asymmetricKeyType ?? \"not an asymmetric key\"}, not ed25519: Web Bot Auth here uses Ed25519 keys`,\n    );\n  return key;\n};\n\n/** This function reads a public key, or the public part of a private key. Its errors do not hold the key. */\nconst publicKeyOf = (input: KeyInput): KeyObject => {\n  let key: KeyObject;\n  try {\n    if (isKeyObject(input)) key = input.type === \"private\" ? createPublicKey(input) : input;\n    else if (typeof input === \"string\")\n      key = input.trim().startsWith(\"{\")\n        ? createPublicKey({ key: JSON.parse(input) as JsonWebKey, format: \"jwk\" })\n        : createPublicKey(input);\n    else if (input instanceof Uint8Array) {\n      const bytes = Buffer.from(input);\n      try {\n        key = createPublicKey({ key: bytes, format: \"der\", type: \"spki\" });\n      } catch {\n        key = createPublicKey(createPrivateKey({ key: bytes, format: \"der\", type: \"pkcs8\" }));\n      }\n    } else key = createPublicKey({ key: input, format: \"jwk\" });\n  } catch (cause) {\n    throw new Error(\"a key of the directory does not parse: give an Ed25519 key\", { cause });\n  }\n  if (key.asymmetricKeyType !== \"ed25519\")\n    throw new Error(\n      `a key of the directory is ${key.asymmetricKeyType ?? \"not an asymmetric key\"}, not ed25519`,\n    );\n  return key;\n};\n\n/** This function gives the JWK thumbprint of an Ed25519 public key (RFC 7638, RFC 8037 appendix A.3). */\nconst thumbprintOf = (x: string): string =>\n  base64url(\n    createHash(\"sha256\")\n      .update(JSON.stringify({ crv: \"Ed25519\", kty: \"OKP\", x }), \"utf8\")\n      .digest(),\n  );\n\nconst directoryKeyOf = (key: KeyObject): DirectoryKey => {\n  const jwk = key.export({ format: \"jwk\" });\n  const x = typeof jwk.x === \"string\" ? jwk.x : \"\";\n  return { kty: \"OKP\", crv: \"Ed25519\", kid: thumbprintOf(x), x, use: \"sig\" };\n};\n\n/**\n * This function makes the key directory for the operator to host: a JSON Web Key Set with each\n * public key and its thumbprint as `kid`. It takes public keys, or private keys, and it writes only\n * their public parts. Serve the JSON at `KEY_DIRECTORY_PATH` with the type `KEY_DIRECTORY_TYPE`.\n */\nexport const keyDirectory = (publicKeys: readonly KeyInput[]): KeyDirectory => {\n  const keys = new Map<string, DirectoryKey>();\n  for (const input of publicKeys) {\n    const key = directoryKeyOf(publicKeyOf(input));\n    keys.set(key.kid, key);\n  }\n  return { keys: [...keys.values()] };\n};\n\n// ── signing ──\n\n/** The parts of one signature. The signer and the tests use this function. */\nexport interface SignatureParts {\n  /** The value of `@authority`: the host and a port that is not the default port, in lowercase. */\n  readonly authority: string;\n  readonly label: string;\n  /** The key of the member of `Signature-Agent`. The draft uses the label of the signature. */\n  readonly agentKey: string;\n  /** The serialized value of the member: a string, and its parameters. */\n  readonly agentValue: string;\n  readonly keyId: string;\n  readonly created: number;\n  readonly expires: number;\n  readonly nonce?: string | undefined;\n}\n\n/** This function gives the `@signature-params` value: the covered components and the parameters, in the order of the draft. */\nconst signatureParams = (parts: SignatureParts): string =>\n  `(\"@authority\" \"signature-agent\";key=${serializeBare(parts.agentKey)});created=${String(parts.created)};keyid=${serializeBare(parts.keyId)};alg=\"ed25519\";expires=${String(parts.expires)}${parts.nonce === undefined ? \"\" : `;nonce=${serializeBare(parts.nonce)}`};tag=\"${WEB_BOT_AUTH_TAG}\"`;\n\n/** This function gives the signature base of RFC 9421, section 2.5, for the components of Web Bot Auth. */\nexport const signatureBase = (parts: SignatureParts): string =>\n  [\n    `\"@authority\": ${parts.authority}`,\n    `\"signature-agent\";key=${serializeBare(parts.agentKey)}: ${parts.agentValue}`,\n    `\"@signature-params\": ${signatureParams(parts)}`,\n  ].join(\"\\n\");\n\n/** This function signs the parts with an Ed25519 key, and gives the three headers. */\nexport const signParts = (\n  parts: SignatureParts,\n  key: KeyObject,\n): {\n  readonly \"signature-agent\": string;\n  readonly \"signature-input\": string;\n  readonly signature: string;\n} => {\n  const signature = signBytes(null, Buffer.from(signatureBase(parts), \"utf8\"), key);\n  return {\n    \"signature-agent\": `${parts.agentKey}=${parts.agentValue}`,\n    \"signature-input\": `${parts.label}=${signatureParams(parts)}`,\n    signature: `${parts.label}=:${signature.toString(\"base64\")}:`,\n  };\n};\n\nconst DEFAULT_LIFETIME_MS = 5 * 60_000;\nconst MAX_LIFETIME_MS = 24 * 60 * 60_000;\n\n/** This function checks the URL of `Signature-Agent`, and gives the URL and the serialized value of the member. */\nconst agentOf = (\n  url: string,\n  type: SignatureAgentType,\n): { readonly url: string; readonly value: string } => {\n  let target: URL;\n  try {\n    target = new URL(url);\n  } catch {\n    throw new Error(\n      `signatureAgent \"${url}\" is not a URL: give the https URL of the key directory`,\n    );\n  }\n  if (target.protocol !== \"https:\")\n    throw new Error(`signatureAgent \"${url}\" is not an https URL: the draft permits only https`);\n  if (target.username !== \"\" || target.password !== \"\" || target.hash !== \"\")\n    throw new Error(`signatureAgent \"${url}\" has a user name, a password or a fragment`);\n  if (type === \"directory\") {\n    if (target.pathname !== \"/\" || target.search !== \"\")\n      throw new Error(\n        `signatureAgent \"${url}\" is not an origin: the type directory takes only an origin, such as https://bot.example.com. For a key set on a path, set agentType to jwks_uri`,\n      );\n    return { url: target.origin, value: serializeBare(target.origin) };\n  }\n  return { url: target.href, value: `${serializeBare(target.href)};type=${type}` };\n};\n\n/**\n * This function makes a signer for Web Bot Auth with an Ed25519 key. Each signature covers\n * `@authority` and the member of `Signature-Agent`. It has a new random nonce, and it expires after\n * `lifetimeMs`. The signer keeps the private key in a closure: no property of the signer holds it.\n */\nexport const createWebBotAuthSigner = (options: WebBotAuthOptions): WebBotAuthSigner => {\n  const key = privateKeyOf(options.privateKey);\n  const publicKey = directoryKeyOf(createPublicKey(key));\n  if (options.keyId !== undefined && options.keyId !== publicKey.kid)\n    throw new Error(\n      `keyId \"${options.keyId}\" is not the JWK thumbprint of the key (${publicKey.kid}): Web Bot Auth uses the thumbprint as keyid`,\n    );\n  const agent = agentOf(options.signatureAgent, options.agentType ?? \"directory\");\n  const label = options.label ?? \"sig1\";\n  if (!isKey(label))\n    throw new Error(\n      `label \"${label}\" is not a key of a structured field: use lowercase letters, digits, \"_\", \"-\", \".\" and \"*\"`,\n    );\n  const lifetimeMs = options.lifetimeMs ?? DEFAULT_LIFETIME_MS;\n  if (!Number.isFinite(lifetimeMs) || lifetimeMs < 1000 || lifetimeMs > MAX_LIFETIME_MS)\n    throw new RangeError(\n      `lifetimeMs must be from 1000 (1 second) to ${String(MAX_LIFETIME_MS)} (24 hours), not ${String(lifetimeMs)}`,\n    );\n  const { kty, crv, x } = publicKey;\n  return {\n    keyId: publicKey.kid,\n    signatureAgent: agent.url,\n    publicKey: { kty, crv, x },\n    sign(url, now) {\n      const created = Math.floor(now / 1000);\n      return signParts(\n        {\n          authority: url.host.toLowerCase(),\n          label,\n          agentKey: label,\n          agentValue: agent.value,\n          keyId: publicKey.kid,\n          created,\n          expires: created + Math.ceil(lifetimeMs / 1000),\n          nonce: randomBytes(32).toString(\"base64\"),\n        },\n        key,\n      );\n    },\n  };\n};\n\n/** This function tells if a value is a request signer, not the options of one. */\nexport const isRequestSigner = (value: RequestSigner | WebBotAuthOptions): value is RequestSigner =>\n  typeof (value as Partial<RequestSigner>).sign === \"function\";\n\n/** This function gives a request signer: the signer itself, or a new signer from its options. */\nexport const signerOf = (\n  value: RequestSigner | WebBotAuthOptions | undefined,\n): RequestSigner | undefined =>\n  value === undefined ? undefined : isRequestSigner(value) ? value : createWebBotAuthSigner(value);\n\n// ── verification ──\n\n/** A signature can start this long before the clock of the verifier, for a small difference of the clocks. */\nconst CLOCK_SKEW_S = 60;\n\nconst headerLines = (\n  headers: SignedRequest[\"headers\"],\n  name: string,\n): readonly string[] | undefined => {\n  for (const [key, value] of Object.entries(headers)) {\n    if (key.toLowerCase() !== name || value === undefined) continue;\n    return typeof value === \"string\" ? [value] : value;\n  }\n  return undefined;\n};\n\n/** This function gives the value of a header as RFC 9421 section 2.1 combines it: each line without its outer spaces, with \", \" between. */\nconst fieldValue = (headers: SignedRequest[\"headers\"], name: string): string | undefined =>\n  headerLines(headers, name)\n    ?.map((line) => line.replace(/\\r?\\n[ \\t]+/g, \" \").trim())\n    .join(\", \");\n\n/** This function gives the value of one component of a request, or an error text. */\nconst componentValue = (\n  component: Item,\n  request: SignedRequest,\n  target: URL,\n): { readonly value: string } | { readonly error: string } => {\n  const name = component.value;\n  if (typeof name !== \"string\") return { error: \"a component is not a string\" };\n  const params = new Map(component.params);\n  if (name.startsWith(\"@\")) {\n    if (params.size > 0) return { error: `the parameters of ${name} are not supported` };\n    switch (name) {\n      case \"@method\":\n        return { value: (request.method ?? \"GET\").toUpperCase() };\n      case \"@authority\":\n        return { value: target.host.toLowerCase() };\n      case \"@scheme\":\n        return { value: target.protocol.slice(0, -1).toLowerCase() };\n      case \"@target-uri\":\n        return { value: target.href };\n      case \"@path\":\n        return { value: target.pathname === \"\" ? \"/\" : target.pathname };\n      case \"@query\":\n        return { value: target.search === \"\" ? \"?\" : target.search };\n      case \"@request-target\":\n        return { value: `${target.pathname}${target.search}` };\n      default:\n        return { error: `the component ${name} is not supported` };\n    }\n  }\n  const value = fieldValue(request.headers, name);\n  if (value === undefined) return { error: `the request has no ${name} header` };\n  if ([...params.keys()].some((param) => param !== \"key\"))\n    return { error: `the parameters of ${name} are not supported` };\n  const key = params.get(\"key\");\n  if (key === undefined) return { value };\n  if (typeof key !== \"string\") return { error: `the key of ${name} is not a string` };\n  let member: Member | undefined;\n  try {\n    member = new FieldParser(value).dictionary().get(key);\n  } catch (error) {\n    return { error: `the ${name} header is not a dictionary: ${(error as Error).message}` };\n  }\n  if (member === undefined) return { error: `the ${name} header has no member ${key}` };\n  return { value: serializeMember(member) };\n};\n\nconst failed = (\n  reason: string,\n  facts: { label?: string | null; keyId?: string | null; agent?: string | null } = {},\n): SignatureCheck => ({\n  verified: false,\n  label: facts.label ?? null,\n  keyId: facts.keyId ?? null,\n  agent: facts.agent ?? null,\n  reason,\n});\n\n/**\n * This function verifies the Web Bot Auth signatures of a request with the keys of a directory. It\n * applies RFC 9421 section 3.2 and the profile of the draft. The profile asks for the tag\n * `web-bot-auth`, `created`, `expires` and `@authority`. It also asks for the member of\n * `Signature-Agent`, and a key with the thumbprint of `keyid`. The tests use it, and an operator can check a setup with it. It sends no request.\n */\nexport const verifySignature = (\n  request: SignedRequest,\n  directory: KeyDirectory,\n  options: { readonly now?: number | undefined } = {},\n): SignatureCheck => {\n  let target: URL;\n  try {\n    target = new URL(request.url);\n  } catch {\n    return failed(\"the URL of the request is not a URL\");\n  }\n  const inputText = fieldValue(request.headers, \"signature-input\");\n  const signatureText = fieldValue(request.headers, \"signature\");\n  if (inputText === undefined || signatureText === undefined)\n    return failed(\"the request has no Signature-Input or no Signature header\");\n  let inputs: Map<string, Member>;\n  let signatures: Map<string, Member>;\n  try {\n    inputs = new FieldParser(inputText).dictionary();\n    signatures = new FieldParser(signatureText).dictionary();\n  } catch (error) {\n    return failed(`a signature header does not parse: ${(error as Error).message}`);\n  }\n  const now = Math.floor((options.now ?? Date.now()) / 1000);\n  const keys = new Map<string, KeyObject>();\n  for (const entry of directory.keys) {\n    try {\n      const key = createPublicKey({\n        key: { kty: entry.kty, crv: entry.crv, x: entry.x },\n        format: \"jwk\",\n      });\n      keys.set(thumbprintOf(entry.x), key);\n    } catch {\n      // a key that does not parse verifies nothing\n    }\n  }\n  let last: SignatureCheck = failed(\"the request has no Web Bot Auth signature\");\n  for (const [label, input] of inputs) {\n    if (!isInnerList(input)) continue;\n    const params = new Map(input.params);\n    if (params.get(\"tag\") !== WEB_BOT_AUTH_TAG) continue;\n    const keyId = typeof params.get(\"keyid\") === \"string\" ? (params.get(\"keyid\") as string) : null;\n    const covered = input.items;\n    const names = covered.map((item) => serializeItem(item));\n    const agentItem = covered.find((item) => item.value === \"signature-agent\");\n    let agent: string | null = null;\n    if (agentItem !== undefined) {\n      const value = componentValue(agentItem, request, target);\n      if (\"value\" in value) {\n        try {\n          const member = new FieldParser(value.value).wholeItem().value;\n          agent = typeof member === \"string\" ? member : null;\n        } catch {\n          agent = null;\n        }\n      }\n    }\n    const facts = { label, keyId, agent };\n    if (new Set(names).size !== names.length) {\n      last = failed(\"a component is covered two times\", facts);\n      continue;\n    }\n    if (!names.includes('\"@authority\"') && !names.includes('\"@target-uri\"')) {\n      last = failed(\"the signature does not cover @authority or @target-uri\", facts);\n      continue;\n    }\n    if (agentItem === undefined) {\n      last = failed(\"the signature does not cover Signature-Agent\", facts);\n      continue;\n    }\n    const created = params.get(\"created\");\n    const expires = params.get(\"expires\");\n    if (typeof created !== \"number\" || typeof expires !== \"number\") {\n      last = failed(\"the signature has no created or no expires\", facts);\n      continue;\n    }\n    if (expires <= now) {\n      last = failed(\"the signature expired\", facts);\n      continue;\n    }\n    if (created > now + CLOCK_SKEW_S) {\n      last = failed(\"the signature was created in the future\", facts);\n      continue;\n    }\n    const alg = params.get(\"alg\");\n    if (alg !== undefined && alg !== \"ed25519\") {\n      last = failed(`the algorithm ${serializeBare(alg)} is not ed25519`, facts);\n      continue;\n    }\n    const key = keyId === null ? undefined : keys.get(keyId);\n    if (key === undefined) {\n      last = failed(\"no key of the directory has the thumbprint of keyid\", facts);\n      continue;\n    }\n    const lines: string[] = [];\n    let error: string | undefined;\n    for (const item of covered) {\n      const value = componentValue(item, request, target);\n      if (\"error\" in value) {\n        error = value.error;\n        break;\n      }\n      lines.push(`${serializeItem(item)}: ${value.value}`);\n    }\n    if (error !== undefined) {\n      last = failed(error, facts);\n      continue;\n    }\n    lines.push(`\"@signature-params\": ${serializeMember(input)}`);\n    const signature = signatures.get(label);\n    if (\n      signature === undefined ||\n      isInnerList(signature) ||\n      !(signature.value instanceof Uint8Array)\n    ) {\n      last = failed(`the Signature header has no byte sequence for ${label}`, facts);\n      continue;\n    }\n    const good = verifyBytes(null, Buffer.from(lines.join(\"\\n\"), \"utf8\"), key, signature.value);\n    if (good) return { verified: true, label, keyId, agent, reason: null };\n    last = failed(\"the signature does not match the signature base\", facts);\n  }\n  return last;\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA0BA,MAAa,qBAAqB;;AAGlC,MAAa,qBAAqB;;AAGlC,MAAa,mBAAmB;;AA8FhC,IAAM,QAAN,MAAY;CACW;CAArB,YAAY,OAAwB;EAAf,KAAA,QAAA;CAAgB;AACvC;AAiBA,MAAM,eAAe,WAAwC,WAAW;;AAGxE,IAAM,aAAN,cAAyB,MAAM,CAAC;AAEhC,MAAM,YAAY;AAClB,MAAM,WAAW;AACjB,MAAM,cAAc;AACpB,MAAM,aAAa;AACnB,MAAM,SAAS;;AAGf,IAAM,cAAN,MAAkB;CAEa;CAD7B,KAAa;CACb,YAAY,MAA+B;EAAd,KAAA,OAAA;CAAe;CAE5C,OAAuB;EACrB,OAAO,KAAK,KAAK,KAAK,OAAO;CAC/B;CAEA,SAAuB;EACrB,OAAO,KAAK,KAAK,MAAM,KAAK,KAAK,MAAM;CACzC;CAEA,MAAoB;EAClB,OAAO,KAAK,KAAK,MAAM,OAAO,KAAK,KAAK,MAAM,KAAM,KAAK,MAAM;CACjE;CAEA,aAAkC;EAChC,MAAM,sBAAM,IAAI,IAAoB;EACpC,KAAK,OAAO;EACZ,OAAO,KAAK,KAAK,KAAK,KAAK,QAAQ;GACjC,MAAM,MAAM,KAAK,IAAI;GACrB,IAAI;GACJ,IAAI,KAAK,KAAK,MAAM,KAAK;IACvB,KAAK,MAAM;IACX,SAAS,KAAK,KAAK,MAAM,MAAM,KAAK,UAAU,IAAI,KAAK,KAAK;GAC9D,OACE,SAAS;IAAE,OAAO;IAAM,QAAQ,KAAK,OAAO;GAAE;GAEhD,IAAI,IAAI,KAAK,MAAM;GACnB,KAAK,IAAI;GACT,IAAI,KAAK,MAAM,KAAK,KAAK,QAAQ;GACjC,IAAI,KAAK,KAAK,MAAM,KAAK,MAAM,IAAI,WAAW,yBAAyB,OAAO,KAAK,EAAE,GAAG;GACxF,KAAK,MAAM;GACX,KAAK,IAAI;GACT,IAAI,KAAK,MAAM,KAAK,KAAK,QAAQ,MAAM,IAAI,WAAW,6BAA6B;EACrF;EACA,OAAO;CACT;;CAGA,YAAkB;EAChB,KAAK,OAAO;EACZ,MAAM,OAAO,KAAK,KAAK;EACvB,KAAK,OAAO;EACZ,IAAI,KAAK,KAAK,KAAK,KAAK,QAAQ,MAAM,IAAI,WAAW,qBAAqB;EAC1E,OAAO;CACT;CAEA,MAAsB;EACpB,IAAI,CAAC,UAAU,KAAK,KAAK,KAAK,CAAC,GAAG,MAAM,IAAI,WAAW,aAAa,OAAO,KAAK,EAAE,GAAG;EACrF,MAAM,QAAQ,KAAK;EACnB,OAAO,SAAS,KAAK,KAAK,KAAK,CAAC,KAAK,KAAK,KAAK,KAAK,KAAK,QAAQ,KAAK,MAAM;EAC5E,OAAO,KAAK,KAAK,MAAM,OAAO,KAAK,EAAE;CACvC;CAEA,YAA+B;EAC7B,KAAK,MAAM;EACX,MAAM,QAAgB,CAAC;EACvB,SAAS;GACP,KAAK,OAAO;GACZ,IAAI,KAAK,KAAK,MAAM,KAAK;IACvB,KAAK,MAAM;IACX,OAAO;KAAE;KAAO,QAAQ,KAAK,OAAO;IAAE;GACxC;GACA,IAAI,KAAK,MAAM,KAAK,KAAK,QAAQ,MAAM,IAAI,WAAW,0BAA0B;GAChF,MAAM,KAAK,KAAK,KAAK,CAAC;GACtB,IAAI,KAAK,KAAK,MAAM,OAAO,KAAK,KAAK,MAAM,KACzC,MAAM,IAAI,WAAW,kCAAkC,OAAO,KAAK,EAAE,GAAG;EAC5E;CACF;CAEA,OAAqB;EAEnB,OAAO;GAAE,OADK,KAAK,KACN;GAAG,QAAQ,KAAK,OAAO;EAAE;CACxC;CAEA,SAAyB;EACvB,MAAM,MAA0C,CAAC;EACjD,OAAO,KAAK,KAAK,MAAM,KAAK;GAC1B,KAAK,MAAM;GACX,KAAK,OAAO;GACZ,MAAM,MAAM,KAAK,IAAI;GACrB,IAAI,QAAkB;GACtB,IAAI,KAAK,KAAK,MAAM,KAAK;IACvB,KAAK,MAAM;IACX,QAAQ,KAAK,KAAK;GACpB;GACA,MAAM,QAAQ,IAAI,WAAW,CAAC,UAAU,SAAS,GAAG;GACpD,IAAI,UAAU,IAAI,IAAI,KAAK,CAAC,KAAK,KAAK,CAAC;QAClC,IAAI,SAAS,CAAC,KAAK,KAAK;EAC/B;EACA,OAAO;CACT;CAEA,OAAyB;EACvB,MAAM,OAAO,KAAK,KAAK;EACvB,IAAI,SAAS,OAAO,QAAQ,KAAK,IAAI,GAAG,OAAO,KAAK,OAAO;EAC3D,IAAI,SAAS,MAAK,OAAO,KAAK,OAAO;EACrC,IAAI,SAAS,KAAK,OAAO,KAAK,MAAM;EACpC,IAAI,SAAS,KAAK,OAAO,KAAK,QAAQ;EACtC,IAAI,YAAY,KAAK,IAAI,GAAG,OAAO,KAAK,MAAM;EAC9C,MAAM,IAAI,WAAW,cAAc,OAAO,KAAK,EAAE,GAAG;CACtD;CAEA,SAAyB;EACvB,MAAM,QAAQ,4BAA4B,KAAK,KAAK,KAAK,MAAM,KAAK,EAAE,CAAC;EACvE,IAAI,UAAU,QAAS,MAAM,OAAO,KAAA,KAAa,MAAM,EAAE,CAAE,SAAS,IAClE,MAAM,IAAI,WAAW,mBAAmB,OAAO,KAAK,EAAE,GAAG;EAC3D,KAAK,MAAM,MAAM,EAAE,CAAC;EACpB,OAAO,OAAO,MAAM,EAAE;CACxB;CAEA,SAAyB;EACvB,KAAK,MAAM;EACX,IAAI,MAAM;EACV,SAAS;GACP,MAAM,OAAO,KAAK,KAAK;GACvB,IAAI,SAAS,IAAI,MAAM,IAAI,WAAW,qBAAqB;GAC3D,KAAK,MAAM;GACX,IAAI,SAAS,MAAM;IACjB,MAAM,OAAO,KAAK,KAAK;IACvB,IAAI,SAAS,QAAO,SAAS,MAAM,MAAM,IAAI,WAAW,0BAA0B;IAClF,OAAO;IACP,KAAK,MAAM;GACb,OAAO,IAAI,SAAS,MAClB,OAAO;QACF;IACL,MAAM,OAAO,KAAK,WAAW,CAAC;IAC9B,IAAI,OAAO,MAAQ,OAAO,KACxB,MAAM,IAAI,WAAW,wDAAwD;IAC/E,OAAO;GACT;EACF;CACF;CAEA,QAA4B;EAC1B,KAAK,MAAM;EACX,MAAM,MAAM,KAAK,KAAK,QAAQ,KAAK,KAAK,EAAE;EAC1C,IAAI,QAAQ,IAAI,MAAM,IAAI,WAAW,4BAA4B;EACjE,MAAM,OAAO,KAAK,KAAK,MAAM,KAAK,IAAI,GAAG;EACzC,IAAI,CAAC,OAAO,KAAK,IAAI,GAAG,MAAM,IAAI,WAAW,+BAA+B;EAC5E,KAAK,KAAK,MAAM;EAChB,OAAO,IAAI,WAAW,OAAO,KAAK,MAAM,QAAQ,CAAC;CACnD;CAEA,UAA2B;EACzB,MAAM,QAAQ,KAAK,KAAK,MAAM,KAAK,IAAI,KAAK,KAAK,CAAC;EAClD,IAAI,UAAU,QAAQ,UAAU,MAAM,MAAM,IAAI,WAAW,eAAe;EAC1E,KAAK,MAAM;EACX,OAAO,UAAU;CACnB;CAEA,QAAuB;EACrB,MAAM,QAAQ,KAAK;EACnB,KAAK,MAAM;EACX,OAAO,WAAW,KAAK,KAAK,KAAK,CAAC,KAAK,KAAK,KAAK,KAAK,KAAK,QAAQ,KAAK,MAAM;EAC9E,OAAO,IAAI,MAAM,KAAK,KAAK,MAAM,OAAO,KAAK,EAAE,CAAC;CAClD;AACF;AAEA,MAAM,iBAAiB,UAA4B;CACjD,IAAI,iBAAiB,OAAO,OAAO,MAAM;CACzC,IAAI,iBAAiB,YAAY,OAAO,IAAI,OAAO,KAAK,KAAK,CAAC,CAAC,SAAS,QAAQ,EAAE;CAClF,IAAI,OAAO,UAAU,WAAW,OAAO,QAAQ,OAAO;CACtD,IAAI,OAAO,UAAU,UACnB,OAAO,OAAO,UAAU,KAAK,IAAI,OAAO,KAAK,IAAI,OAAO,KAAK,MAAM,QAAQ,GAAI,IAAI,GAAI;CACzF,OAAO,IAAI,MAAM,QAAQ,WAAW,SAAS,KAAK,MAAM,EAAE;AAC5D;AAEA,MAAM,mBAAmB,WACvB,OACG,KAAK,CAAC,KAAK,WAAY,UAAU,OAAO,IAAI,QAAQ,IAAI,IAAI,GAAG,cAAc,KAAK,GAAI,CAAC,CACvF,KAAK,EAAE;AAEZ,MAAM,iBAAiB,SACrB,GAAG,cAAc,KAAK,KAAK,IAAI,gBAAgB,KAAK,MAAM;AAE5D,MAAM,mBAAmB,WACvB,YAAY,MAAM,IACd,IAAI,OAAO,MAAM,IAAI,aAAa,CAAC,CAAC,KAAK,GAAG,EAAE,GAAG,gBAAgB,OAAO,MAAM,MAC9E,cAAc,MAAM;;AAG1B,MAAM,SAAS,SAA0B,yBAAyB,KAAK,IAAI;AAI3E,MAAM,aAAa,UAA8B,OAAO,KAAK,KAAK,CAAC,CAAC,SAAS,WAAW;AAExF,MAAM,eAAe,QACnB,OAAO,QAAQ,YAAY,QAAQ,QAAQ,uBAAuB,OAAO,YAAY;;AAGvF,MAAM,gBAAgB,UAA+B;CACnD,IAAI;CACJ,IAAI;EACF,IAAI,YAAY,KAAK,GAAG,MAAM;OACzB,IAAI,OAAO,UAAU,UACxB,MAAM,MAAM,KAAK,CAAC,CAAC,WAAW,GAAG,IAC7B,iBAAiB;GAAE,KAAK,KAAK,MAAM,KAAK;GAAiB,QAAQ;EAAM,CAAC,IACxE,iBAAiB,KAAK;OACvB,IAAI,iBAAiB,YACxB,MAAM,iBAAiB;GAAE,KAAK,OAAO,KAAK,KAAK;GAAG,QAAQ;GAAO,MAAM;EAAQ,CAAC;OAC7E,MAAM,iBAAiB;GAAE,KAAK;GAAO,QAAQ;EAAM,CAAC;CAC3D,SAAS,OAAO;EACd,MAAM,IAAI,MACR,wGACA,EAAE,MAAM,CACV;CACF;CACA,IAAI,IAAI,SAAS,WACf,MAAM,IAAI,MAAM,0EAA0E;CAC5F,IAAI,IAAI,sBAAsB,WAC5B,MAAM,IAAI,MACR,4BAA4B,IAAI,qBAAqB,wBAAwB,mDAC/E;CACF,OAAO;AACT;;AAGA,MAAM,eAAe,UAA+B;CAClD,IAAI;CACJ,IAAI;EACF,IAAI,YAAY,KAAK,GAAG,MAAM,MAAM,SAAS,YAAY,gBAAgB,KAAK,IAAI;OAC7E,IAAI,OAAO,UAAU,UACxB,MAAM,MAAM,KAAK,CAAC,CAAC,WAAW,GAAG,IAC7B,gBAAgB;GAAE,KAAK,KAAK,MAAM,KAAK;GAAiB,QAAQ;EAAM,CAAC,IACvE,gBAAgB,KAAK;OACtB,IAAI,iBAAiB,YAAY;GACpC,MAAM,QAAQ,OAAO,KAAK,KAAK;GAC/B,IAAI;IACF,MAAM,gBAAgB;KAAE,KAAK;KAAO,QAAQ;KAAO,MAAM;IAAO,CAAC;GACnE,QAAQ;IACN,MAAM,gBAAgB,iBAAiB;KAAE,KAAK;KAAO,QAAQ;KAAO,MAAM;IAAQ,CAAC,CAAC;GACtF;EACF,OAAO,MAAM,gBAAgB;GAAE,KAAK;GAAO,QAAQ;EAAM,CAAC;CAC5D,SAAS,OAAO;EACd,MAAM,IAAI,MAAM,8DAA8D,EAAE,MAAM,CAAC;CACzF;CACA,IAAI,IAAI,sBAAsB,WAC5B,MAAM,IAAI,MACR,6BAA6B,IAAI,qBAAqB,wBAAwB,cAChF;CACF,OAAO;AACT;;AAGA,MAAM,gBAAgB,MACpB,UACE,WAAW,QAAQ,CAAC,CACjB,OAAO,KAAK,UAAU;CAAE,KAAK;CAAW,KAAK;CAAO;AAAE,CAAC,GAAG,MAAM,CAAC,CACjE,OAAO,CACZ;AAEF,MAAM,kBAAkB,QAAiC;CACvD,MAAM,MAAM,IAAI,OAAO,EAAE,QAAQ,MAAM,CAAC;CACxC,MAAM,IAAI,OAAO,IAAI,MAAM,WAAW,IAAI,IAAI;CAC9C,OAAO;EAAE,KAAK;EAAO,KAAK;EAAW,KAAK,aAAa,CAAC;EAAG;EAAG,KAAK;CAAM;AAC3E;;;;;;AAOA,MAAa,gBAAgB,eAAkD;CAC7E,MAAM,uBAAO,IAAI,IAA0B;CAC3C,KAAK,MAAM,SAAS,YAAY;EAC9B,MAAM,MAAM,eAAe,YAAY,KAAK,CAAC;EAC7C,KAAK,IAAI,IAAI,KAAK,GAAG;CACvB;CACA,OAAO,EAAE,MAAM,CAAC,GAAG,KAAK,OAAO,CAAC,EAAE;AACpC;;AAoBA,MAAM,mBAAmB,UACvB,uCAAuC,cAAc,MAAM,QAAQ,EAAE,YAAY,OAAO,MAAM,OAAO,EAAE,SAAS,cAAc,MAAM,KAAK,EAAE,yBAAyB,OAAO,MAAM,OAAO,IAAI,MAAM,UAAU,KAAA,IAAY,KAAK,UAAU,cAAc,MAAM,KAAK,IAAI,QAAQ,iBAAiB;;AAG/R,MAAa,iBAAiB,UAC5B;CACE,iBAAiB,MAAM;CACvB,yBAAyB,cAAc,MAAM,QAAQ,EAAE,IAAI,MAAM;CACjE,wBAAwB,gBAAgB,KAAK;AAC/C,CAAC,CAAC,KAAK,IAAI;;AAGb,MAAa,aACX,OACA,QAKG;CACH,MAAM,YAAYA,KAAU,MAAM,OAAO,KAAK,cAAc,KAAK,GAAG,MAAM,GAAG,GAAG;CAChF,OAAO;EACL,mBAAmB,GAAG,MAAM,SAAS,GAAG,MAAM;EAC9C,mBAAmB,GAAG,MAAM,MAAM,GAAG,gBAAgB,KAAK;EAC1D,WAAW,GAAG,MAAM,MAAM,IAAI,UAAU,SAAS,QAAQ,EAAE;CAC7D;AACF;AAEA,MAAM,sBAAsB;AAC5B,MAAM,kBAAkB;;AAGxB,MAAM,WACJ,KACA,SACqD;CACrD,IAAI;CACJ,IAAI;EACF,SAAS,IAAI,IAAI,GAAG;CACtB,QAAQ;EACN,MAAM,IAAI,MACR,mBAAmB,IAAI,wDACzB;CACF;CACA,IAAI,OAAO,aAAa,UACtB,MAAM,IAAI,MAAM,mBAAmB,IAAI,oDAAoD;CAC7F,IAAI,OAAO,aAAa,MAAM,OAAO,aAAa,MAAM,OAAO,SAAS,IACtE,MAAM,IAAI,MAAM,mBAAmB,IAAI,4CAA4C;CACrF,IAAI,SAAS,aAAa;EACxB,IAAI,OAAO,aAAa,OAAO,OAAO,WAAW,IAC/C,MAAM,IAAI,MACR,mBAAmB,IAAI,iJACzB;EACF,OAAO;GAAE,KAAK,OAAO;GAAQ,OAAO,cAAc,OAAO,MAAM;EAAE;CACnE;CACA,OAAO;EAAE,KAAK,OAAO;EAAM,OAAO,GAAG,cAAc,OAAO,IAAI,EAAE,QAAQ;CAAO;AACjF;;;;;;AAOA,MAAa,0BAA0B,YAAiD;CACtF,MAAM,MAAM,aAAa,QAAQ,UAAU;CAC3C,MAAM,YAAY,eAAe,gBAAgB,GAAG,CAAC;CACrD,IAAI,QAAQ,UAAU,KAAA,KAAa,QAAQ,UAAU,UAAU,KAC7D,MAAM,IAAI,MACR,UAAU,QAAQ,MAAM,0CAA0C,UAAU,IAAI,6CAClF;CACF,MAAM,QAAQ,QAAQ,QAAQ,gBAAgB,QAAQ,aAAa,WAAW;CAC9E,MAAM,QAAQ,QAAQ,SAAS;CAC/B,IAAI,CAAC,MAAM,KAAK,GACd,MAAM,IAAI,MACR,UAAU,MAAM,2FAClB;CACF,MAAM,aAAa,QAAQ,cAAc;CACzC,IAAI,CAAC,OAAO,SAAS,UAAU,KAAK,aAAa,OAAQ,aAAa,iBACpE,MAAM,IAAI,WACR,8CAA8C,OAAO,eAAe,EAAE,mBAAmB,OAAO,UAAU,GAC5G;CACF,MAAM,EAAE,KAAK,KAAK,MAAM;CACxB,OAAO;EACL,OAAO,UAAU;EACjB,gBAAgB,MAAM;EACtB,WAAW;GAAE;GAAK;GAAK;EAAE;EACzB,KAAK,KAAK,KAAK;GACb,MAAM,UAAU,KAAK,MAAM,MAAM,GAAI;GACrC,OAAO,UACL;IACE,WAAW,IAAI,KAAK,YAAY;IAChC;IACA,UAAU;IACV,YAAY,MAAM;IAClB,OAAO,UAAU;IACjB;IACA,SAAS,UAAU,KAAK,KAAK,aAAa,GAAI;IAC9C,OAAO,YAAY,EAAE,CAAC,CAAC,SAAS,QAAQ;GAC1C,GACA,GACF;EACF;CACF;AACF;;AAGA,MAAa,mBAAmB,UAC9B,OAAQ,MAAiC,SAAS;;AAGpD,MAAa,YACX,UAEA,UAAU,KAAA,IAAY,KAAA,IAAY,gBAAgB,KAAK,IAAI,QAAQ,uBAAuB,KAAK;;AAKjG,MAAM,eAAe;AAErB,MAAM,eACJ,SACA,SACkC;CAClC,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,OAAO,GAAG;EAClD,IAAI,IAAI,YAAY,MAAM,QAAQ,UAAU,KAAA,GAAW;EACvD,OAAO,OAAO,UAAU,WAAW,CAAC,KAAK,IAAI;CAC/C;AAEF;;AAGA,MAAM,cAAc,SAAmC,SACrD,YAAY,SAAS,IAAI,CAAC,EACtB,KAAK,SAAS,KAAK,QAAQ,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CACxD,KAAK,IAAI;;AAGd,MAAM,kBACJ,WACA,SACA,WAC4D;CAC5D,MAAM,OAAO,UAAU;CACvB,IAAI,OAAO,SAAS,UAAU,OAAO,EAAE,OAAO,8BAA8B;CAC5E,MAAM,SAAS,IAAI,IAAI,UAAU,MAAM;CACvC,IAAI,KAAK,WAAW,GAAG,GAAG;EACxB,IAAI,OAAO,OAAO,GAAG,OAAO,EAAE,OAAO,qBAAqB,KAAK,oBAAoB;EACnF,QAAQ,MAAR;GACE,KAAK,WACH,OAAO,EAAE,QAAQ,QAAQ,UAAU,MAAA,CAAO,YAAY,EAAE;GAC1D,KAAK,cACH,OAAO,EAAE,OAAO,OAAO,KAAK,YAAY,EAAE;GAC5C,KAAK,WACH,OAAO,EAAE,OAAO,OAAO,SAAS,MAAM,GAAG,EAAE,CAAC,CAAC,YAAY,EAAE;GAC7D,KAAK,eACH,OAAO,EAAE,OAAO,OAAO,KAAK;GAC9B,KAAK,SACH,OAAO,EAAE,OAAO,OAAO,aAAa,KAAK,MAAM,OAAO,SAAS;GACjE,KAAK,UACH,OAAO,EAAE,OAAO,OAAO,WAAW,KAAK,MAAM,OAAO,OAAO;GAC7D,KAAK,mBACH,OAAO,EAAE,OAAO,GAAG,OAAO,WAAW,OAAO,SAAS;GACvD,SACE,OAAO,EAAE,OAAO,iBAAiB,KAAK,mBAAmB;EAC7D;CACF;CACA,MAAM,QAAQ,WAAW,QAAQ,SAAS,IAAI;CAC9C,IAAI,UAAU,KAAA,GAAW,OAAO,EAAE,OAAO,sBAAsB,KAAK,SAAS;CAC7E,IAAI,CAAC,GAAG,OAAO,KAAK,CAAC,CAAC,CAAC,MAAM,UAAU,UAAU,KAAK,GACpD,OAAO,EAAE,OAAO,qBAAqB,KAAK,oBAAoB;CAChE,MAAM,MAAM,OAAO,IAAI,KAAK;CAC5B,IAAI,QAAQ,KAAA,GAAW,OAAO,EAAE,MAAM;CACtC,IAAI,OAAO,QAAQ,UAAU,OAAO,EAAE,OAAO,cAAc,KAAK,kBAAkB;CAClF,IAAI;CACJ,IAAI;EACF,SAAS,IAAI,YAAY,KAAK,CAAC,CAAC,WAAW,CAAC,CAAC,IAAI,GAAG;CACtD,SAAS,OAAO;EACd,OAAO,EAAE,OAAO,OAAO,KAAK,+BAAgC,MAAgB,UAAU;CACxF;CACA,IAAI,WAAW,KAAA,GAAW,OAAO,EAAE,OAAO,OAAO,KAAK,wBAAwB,MAAM;CACpF,OAAO,EAAE,OAAO,gBAAgB,MAAM,EAAE;AAC1C;AAEA,MAAM,UACJ,QACA,QAAiF,CAAC,OAC9D;CACpB,UAAU;CACV,OAAO,MAAM,SAAS;CACtB,OAAO,MAAM,SAAS;CACtB,OAAO,MAAM,SAAS;CACtB;AACF;;;;;;;AAQA,MAAa,mBACX,SACA,WACA,UAAiD,CAAC,MAC/B;CACnB,IAAI;CACJ,IAAI;EACF,SAAS,IAAI,IAAI,QAAQ,GAAG;CAC9B,QAAQ;EACN,OAAO,OAAO,qCAAqC;CACrD;CACA,MAAM,YAAY,WAAW,QAAQ,SAAS,iBAAiB;CAC/D,MAAM,gBAAgB,WAAW,QAAQ,SAAS,WAAW;CAC7D,IAAI,cAAc,KAAA,KAAa,kBAAkB,KAAA,GAC/C,OAAO,OAAO,2DAA2D;CAC3E,IAAI;CACJ,IAAI;CACJ,IAAI;EACF,SAAS,IAAI,YAAY,SAAS,CAAC,CAAC,WAAW;EAC/C,aAAa,IAAI,YAAY,aAAa,CAAC,CAAC,WAAW;CACzD,SAAS,OAAO;EACd,OAAO,OAAO,sCAAuC,MAAgB,SAAS;CAChF;CACA,MAAM,MAAM,KAAK,OAAO,QAAQ,OAAO,KAAK,IAAI,KAAK,GAAI;CACzD,MAAM,uBAAO,IAAI,IAAuB;CACxC,KAAK,MAAM,SAAS,UAAU,MAC5B,IAAI;EACF,MAAM,MAAM,gBAAgB;GAC1B,KAAK;IAAE,KAAK,MAAM;IAAK,KAAK,MAAM;IAAK,GAAG,MAAM;GAAE;GAClD,QAAQ;EACV,CAAC;EACD,KAAK,IAAI,aAAa,MAAM,CAAC,GAAG,GAAG;CACrC,QAAQ,CAER;CAEF,IAAI,OAAuB,OAAO,2CAA2C;CAC7E,KAAK,MAAM,CAAC,OAAO,UAAU,QAAQ;EACnC,IAAI,CAAC,YAAY,KAAK,GAAG;EACzB,MAAM,SAAS,IAAI,IAAI,MAAM,MAAM;EACnC,IAAI,OAAO,IAAI,KAAK,MAAA,gBAAwB;EAC5C,MAAM,QAAQ,OAAO,OAAO,IAAI,OAAO,MAAM,WAAY,OAAO,IAAI,OAAO,IAAe;EAC1F,MAAM,UAAU,MAAM;EACtB,MAAM,QAAQ,QAAQ,KAAK,SAAS,cAAc,IAAI,CAAC;EACvD,MAAM,YAAY,QAAQ,MAAM,SAAS,KAAK,UAAU,iBAAiB;EACzE,IAAI,QAAuB;EAC3B,IAAI,cAAc,KAAA,GAAW;GAC3B,MAAM,QAAQ,eAAe,WAAW,SAAS,MAAM;GACvD,IAAI,WAAW,OACb,IAAI;IACF,MAAM,SAAS,IAAI,YAAY,MAAM,KAAK,CAAC,CAAC,UAAU,CAAC,CAAC;IACxD,QAAQ,OAAO,WAAW,WAAW,SAAS;GAChD,QAAQ;IACN,QAAQ;GACV;EAEJ;EACA,MAAM,QAAQ;GAAE;GAAO;GAAO;EAAM;EACpC,IAAI,IAAI,IAAI,KAAK,CAAC,CAAC,SAAS,MAAM,QAAQ;GACxC,OAAO,OAAO,oCAAoC,KAAK;GACvD;EACF;EACA,IAAI,CAAC,MAAM,SAAS,gBAAc,KAAK,CAAC,MAAM,SAAS,iBAAe,GAAG;GACvE,OAAO,OAAO,0DAA0D,KAAK;GAC7E;EACF;EACA,IAAI,cAAc,KAAA,GAAW;GAC3B,OAAO,OAAO,gDAAgD,KAAK;GACnE;EACF;EACA,MAAM,UAAU,OAAO,IAAI,SAAS;EACpC,MAAM,UAAU,OAAO,IAAI,SAAS;EACpC,IAAI,OAAO,YAAY,YAAY,OAAO,YAAY,UAAU;GAC9D,OAAO,OAAO,8CAA8C,KAAK;GACjE;EACF;EACA,IAAI,WAAW,KAAK;GAClB,OAAO,OAAO,yBAAyB,KAAK;GAC5C;EACF;EACA,IAAI,UAAU,MAAM,cAAc;GAChC,OAAO,OAAO,2CAA2C,KAAK;GAC9D;EACF;EACA,MAAM,MAAM,OAAO,IAAI,KAAK;EAC5B,IAAI,QAAQ,KAAA,KAAa,QAAQ,WAAW;GAC1C,OAAO,OAAO,iBAAiB,cAAc,GAAG,EAAE,kBAAkB,KAAK;GACzE;EACF;EACA,MAAM,MAAM,UAAU,OAAO,KAAA,IAAY,KAAK,IAAI,KAAK;EACvD,IAAI,QAAQ,KAAA,GAAW;GACrB,OAAO,OAAO,uDAAuD,KAAK;GAC1E;EACF;EACA,MAAM,QAAkB,CAAC;EACzB,IAAI;EACJ,KAAK,MAAM,QAAQ,SAAS;GAC1B,MAAM,QAAQ,eAAe,MAAM,SAAS,MAAM;GAClD,IAAI,WAAW,OAAO;IACpB,QAAQ,MAAM;IACd;GACF;GACA,MAAM,KAAK,GAAG,cAAc,IAAI,EAAE,IAAI,MAAM,OAAO;EACrD;EACA,IAAI,UAAU,KAAA,GAAW;GACvB,OAAO,OAAO,OAAO,KAAK;GAC1B;EACF;EACA,MAAM,KAAK,wBAAwB,gBAAgB,KAAK,GAAG;EAC3D,MAAM,YAAY,WAAW,IAAI,KAAK;EACtC,IACE,cAAc,KAAA,KACd,YAAY,SAAS,KACrB,EAAE,UAAU,iBAAiB,aAC7B;GACA,OAAO,OAAO,iDAAiD,SAAS,KAAK;GAC7E;EACF;EAEA,IADaC,OAAY,MAAM,OAAO,KAAK,MAAM,KAAK,IAAI,GAAG,MAAM,GAAG,KAAK,UAAU,KAC9E,GAAG,OAAO;GAAE,UAAU;GAAM;GAAO;GAAO;GAAO,QAAQ;EAAK;EACrE,OAAO,OAAO,mDAAmD,KAAK;CACxE;CACA,OAAO;AACT"}
+{"version":3,"file":"webbotauth-CjJdTAfE.mjs","names":["signBytes","verifyBytes"],"sources":["../src/webbotauth.ts"],"sourcesContent":["import type { JsonWebKeyInput, KeyObject } from \"node:crypto\";\nimport {\n  createHash,\n  createPrivateKey,\n  createPublicKey,\n  randomBytes,\n  sign as signBytes,\n  verify as verifyBytes,\n} from \"node:crypto\";\n\n/**\n * Signed requests: HTTP Message Signatures (RFC 9421), as the IETF Web Bot Auth profile tells\n * (`draft-ietf-webbotauth-httpsig-protocol-00`, 1 September 2026). A signature lets a site verify that\n * a request comes from the holder of a key that the operator publishes.\n *\n * - Each request gets three headers: `Signature-Agent`, `Signature-Input` and `Signature`.\n * - `Signature-Agent` is a dictionary. Its member names the key directory of the operator.\n * - The signature covers `@authority` and that member of `Signature-Agent`.\n * - The parameters are `created`, `keyid` (the JWK thumbprint of the key), `alg=\"ed25519\"`,\n *   `expires`, a random `nonce` and `tag=\"web-bot-auth\"`.\n * - The key is an Ed25519 key, and `node:crypto` signs. The package adds no dependency.\n *\n * A signature adds an identity. It does not replace the `User-Agent` header, which stays honest.\n */\n\n/** The path of the key directory on the host of the operator (the well-known URI of the draft). */\nexport const KEY_DIRECTORY_PATH = \"/.well-known/http-message-signatures-directory\";\n\n/** The media type of the key directory. The host of the directory sends it as `Content-Type`. */\nexport const KEY_DIRECTORY_TYPE = \"application/http-message-signatures-directory+json\";\n\n/** The value of the `tag` parameter of a Web Bot Auth signature. */\nexport const WEB_BOT_AUTH_TAG = \"web-bot-auth\";\n\n/**\n * This value tells how a site finds the keys from the URL of `Signature-Agent`:\n *\n * - `directory` (the default): the URL is an origin, and the keys are at `KEY_DIRECTORY_PATH` on it.\n * - `jwks_uri`: the URL is the address of a JSON Web Key Set, on any path.\n */\nexport type SignatureAgentType = \"directory\" | \"jwks_uri\";\n\n/** A key in one of the forms that `node:crypto` reads: a `KeyObject`, PEM text, DER bytes (PKCS#8 or SPKI) or a JWK. */\n/**\n * This type is a JSON Web Key, as `createPrivateKey` of `node:crypto` reads it. The type comes from `JsonWebKeyInput`, which\n * `@types/node` 22 and 26 both have: version 26 has no `JsonWebKey` export in `node:crypto`.\n */\ntype JsonWebKey = JsonWebKeyInput[\"key\"];\n\nexport type KeyInput = KeyObject | string | Uint8Array | JsonWebKey;\n\n/** These options make a signer for Web Bot Auth. */\nexport interface WebBotAuthOptions {\n  /** This key signs. It is an Ed25519 private key: a `KeyObject`, PKCS#8 (PEM text or DER bytes) or a JWK with `d`. */\n  readonly privateKey: KeyInput;\n  /**\n   * This text is the `keyid` of each signature: the JWK thumbprint of the key (RFC 8037). The signer\n   * calculates it. A value that is not the thumbprint of the key throws an error.\n   */\n  readonly keyId?: string | undefined;\n  /**\n   * This URL tells a site where the keys are. For the type `directory`, it is an https origin, for\n   * example `https://bot.example.com`. For `jwks_uri`, it is the https URL of a JSON Web Key Set.\n   */\n  readonly signatureAgent: string;\n  /** This value tells how a site finds the keys from `signatureAgent`. The default is `directory`. */\n  readonly agentType?: SignatureAgentType | undefined;\n  /** This value is the time that a signature stays valid, in milliseconds. The default is 5 minutes, and the maximum is 24 hours. */\n  readonly lifetimeMs?: number | undefined;\n  /** This text is the label of the signature, and the key of the member of `Signature-Agent`. The default is `sig1`. */\n  readonly label?: string | undefined;\n}\n\n/**\n * A request signer gives the signature headers of one request. The crawler uses it for each\n * request, robots.txt too. `createWebBotAuthSigner` makes one. A signer of your own can sign with a\n * key in a hardware module, for example.\n */\nexport interface RequestSigner {\n  /** This text is the `keyid` of the signatures. */\n  readonly keyId: string;\n  /** This URL is the value of the member of `Signature-Agent`: where a site finds the keys. */\n  readonly signatureAgent: string;\n  /** This method gives the headers that sign a request to `url` at the time `now` (milliseconds since the epoch). */\n  sign(url: URL, now: number): Readonly<Record<string, string>>;\n}\n\n/** The signer that `createWebBotAuthSigner` makes. It also gives its public key for the key directory. */\nexport interface WebBotAuthSigner extends RequestSigner {\n  /** This JWK is the public key of the signer, with no private part. Give it to `keyDirectory`. */\n  readonly publicKey: JsonWebKey;\n}\n\n/** One key of a key directory: an Ed25519 public key as a JWK, with its thumbprint as `kid`. */\nexport interface DirectoryKey {\n  readonly kty: \"OKP\";\n  readonly crv: \"Ed25519\";\n  readonly kid: string;\n  readonly x: string;\n  readonly use: \"sig\";\n}\n\n/** A key directory: a JSON Web Key Set. The operator serves it as JSON at `KEY_DIRECTORY_PATH`, with the type `KEY_DIRECTORY_TYPE`. */\nexport interface KeyDirectory {\n  readonly keys: readonly DirectoryKey[];\n}\n\n/** The parts of a request that `verifySignature` reads. */\nexport interface SignedRequest {\n  readonly url: string;\n  /** The default is `GET`. */\n  readonly method?: string | undefined;\n  /** These are the headers of the request. A name can be in any case, and a header can have more than one line. */\n  readonly headers: Readonly<Record<string, string | readonly string[] | undefined>>;\n}\n\n/** The result of `verifySignature`. */\nexport interface SignatureCheck {\n  /** This value is true when a Web Bot Auth signature of the request verifies with a key of the directory. */\n  readonly verified: boolean;\n  /** This text is the label of the signature that the check examined last, or null. */\n  readonly label: string | null;\n  readonly keyId: string | null;\n  /** This URL is the member of `Signature-Agent` that the signature covers, or null. */\n  readonly agent: string | null;\n  /** This text tells why the request does not verify. It is null when it verifies. */\n  readonly reason: string | null;\n}\n\n// ── structured fields (RFC 9651): the parts that the signature headers use ──\n\n/** A token of a structured field, for example `ed25519` in `alg=ed25519`. */\nclass Token {\n  constructor(readonly value: string) {}\n}\n\ntype BareItem = string | number | boolean | Uint8Array | Token;\ntype Params = ReadonlyArray<readonly [string, BareItem]>;\n\ninterface Item {\n  readonly value: BareItem;\n  readonly params: Params;\n}\n\ninterface InnerList {\n  readonly items: readonly Item[];\n  readonly params: Params;\n}\n\ntype Member = Item | InnerList;\n\nconst isInnerList = (member: Member): member is InnerList => \"items\" in member;\n\n/** This error tells that a structured field does not parse. */\nclass FieldError extends Error {}\n\nconst KEY_START = /[a-z*]/;\nconst KEY_CHAR = /[a-z0-9_\\-.*]/;\nconst TOKEN_START = /[A-Za-z*]/;\nconst TOKEN_CHAR = /[!#$%&'*+\\-.^_`|~0-9A-Za-z:/]/;\nconst BASE64 = /^[A-Za-z0-9+/=]*$/;\n\n/** This class reads one structured field from its text. */\nclass FieldParser {\n  private at = 0;\n  constructor(private readonly text: string) {}\n\n  private peek(): string {\n    return this.text[this.at] ?? \"\";\n  }\n\n  private spaces(): void {\n    while (this.peek() === \" \") this.at += 1;\n  }\n\n  private ows(): void {\n    while (this.peek() === \" \" || this.peek() === \"\\t\") this.at += 1;\n  }\n\n  dictionary(): Map<string, Member> {\n    const out = new Map<string, Member>();\n    this.spaces();\n    while (this.at < this.text.length) {\n      const key = this.key();\n      let member: Member;\n      if (this.peek() === \"=\") {\n        this.at += 1;\n        member = this.peek() === \"(\" ? this.innerList() : this.item();\n      } else {\n        member = { value: true, params: this.params() };\n      }\n      out.set(key, member);\n      this.ows();\n      if (this.at >= this.text.length) break;\n      if (this.peek() !== \",\") throw new FieldError(`a \",\" is necessary at ${String(this.at)}`);\n      this.at += 1;\n      this.ows();\n      if (this.at >= this.text.length) throw new FieldError(\"the field ends with a comma\");\n    }\n    return out;\n  }\n\n  /** This method reads one item and checks that the field has nothing after it. */\n  wholeItem(): Item {\n    this.spaces();\n    const item = this.item();\n    this.spaces();\n    if (this.at < this.text.length) throw new FieldError(\"text after the item\");\n    return item;\n  }\n\n  private key(): string {\n    if (!KEY_START.test(this.peek())) throw new FieldError(`no key at ${String(this.at)}`);\n    const start = this.at;\n    while (KEY_CHAR.test(this.peek()) && this.at < this.text.length) this.at += 1;\n    return this.text.slice(start, this.at);\n  }\n\n  private innerList(): InnerList {\n    this.at += 1;\n    const items: Item[] = [];\n    for (;;) {\n      this.spaces();\n      if (this.peek() === \")\") {\n        this.at += 1;\n        return { items, params: this.params() };\n      }\n      if (this.at >= this.text.length) throw new FieldError(\"an inner list has no end\");\n      items.push(this.item());\n      if (this.peek() !== \" \" && this.peek() !== \")\")\n        throw new FieldError(`a space or \")\" is necessary at ${String(this.at)}`);\n    }\n  }\n\n  private item(): Item {\n    const value = this.bare();\n    return { value, params: this.params() };\n  }\n\n  private params(): Params {\n    const out: Array<readonly [string, BareItem]> = [];\n    while (this.peek() === \";\") {\n      this.at += 1;\n      this.spaces();\n      const key = this.key();\n      let value: BareItem = true;\n      if (this.peek() === \"=\") {\n        this.at += 1;\n        value = this.bare();\n      }\n      const known = out.findIndex(([name]) => name === key);\n      if (known === -1) out.push([key, value]);\n      else out[known] = [key, value];\n    }\n    return out;\n  }\n\n  private bare(): BareItem {\n    const char = this.peek();\n    if (char === \"-\" || /[0-9]/.test(char)) return this.number();\n    if (char === '\"') return this.string();\n    if (char === \":\") return this.bytes();\n    if (char === \"?\") return this.boolean();\n    if (TOKEN_START.test(char)) return this.token();\n    throw new FieldError(`no item at ${String(this.at)}`);\n  }\n\n  private number(): number {\n    const match = /^-?(\\d{1,15})(\\.\\d{1,3})?/.exec(this.text.slice(this.at));\n    if (match === null || (match[2] !== undefined && match[1]!.length > 12))\n      throw new FieldError(`not a number at ${String(this.at)}`);\n    this.at += match[0].length;\n    return Number(match[0]);\n  }\n\n  private string(): string {\n    this.at += 1;\n    let out = \"\";\n    for (;;) {\n      const char = this.peek();\n      if (char === \"\") throw new FieldError(\"a string has no end\");\n      this.at += 1;\n      if (char === \"\\\\\") {\n        const next = this.peek();\n        if (next !== '\"' && next !== \"\\\\\") throw new FieldError(\"a bad escape in a string\");\n        out += next;\n        this.at += 1;\n      } else if (char === '\"') {\n        return out;\n      } else {\n        const code = char.charCodeAt(0);\n        if (code < 0x20 || code > 0x7e)\n          throw new FieldError(\"a string holds a character that is not printable ASCII\");\n        out += char;\n      }\n    }\n  }\n\n  private bytes(): Uint8Array {\n    this.at += 1;\n    const end = this.text.indexOf(\":\", this.at);\n    if (end === -1) throw new FieldError(\"a byte sequence has no end\");\n    const text = this.text.slice(this.at, end);\n    if (!BASE64.test(text)) throw new FieldError(\"a byte sequence is not base64\");\n    this.at = end + 1;\n    return new Uint8Array(Buffer.from(text, \"base64\"));\n  }\n\n  private boolean(): boolean {\n    const value = this.text.slice(this.at, this.at + 2);\n    if (value !== \"?1\" && value !== \"?0\") throw new FieldError(\"not a boolean\");\n    this.at += 2;\n    return value === \"?1\";\n  }\n\n  private token(): Token {\n    const start = this.at;\n    this.at += 1;\n    while (TOKEN_CHAR.test(this.peek()) && this.at < this.text.length) this.at += 1;\n    return new Token(this.text.slice(start, this.at));\n  }\n}\n\nconst serializeBare = (value: BareItem): string => {\n  if (value instanceof Token) return value.value;\n  if (value instanceof Uint8Array) return `:${Buffer.from(value).toString(\"base64\")}:`;\n  if (typeof value === \"boolean\") return value ? \"?1\" : \"?0\";\n  if (typeof value === \"number\")\n    return Number.isInteger(value) ? String(value) : String(Math.round(value * 1000) / 1000);\n  return `\"${value.replace(/[\"\\\\]/g, (char) => `\\\\${char}`)}\"`;\n};\n\nconst serializeParams = (params: Params): string =>\n  params\n    .map(([key, value]) => (value === true ? `;${key}` : `;${key}=${serializeBare(value)}`))\n    .join(\"\");\n\nconst serializeItem = (item: Item): string =>\n  `${serializeBare(item.value)}${serializeParams(item.params)}`;\n\nconst serializeMember = (member: Member): string =>\n  isInnerList(member)\n    ? `(${member.items.map(serializeItem).join(\" \")})${serializeParams(member.params)}`\n    : serializeItem(member);\n\n/** This function tells if a text is a key of a structured field: a label of a signature, for example. */\nconst isKey = (text: string): boolean => /^[a-z*][a-z0-9_\\-.*]*$/.test(text);\n\n// ── keys ──\n\nconst base64url = (bytes: Uint8Array): string => Buffer.from(bytes).toString(\"base64url\");\n\nconst isKeyObject = (key: KeyInput): key is KeyObject =>\n  typeof key === \"object\" && key !== null && \"asymmetricKeyType\" in key && \"export\" in key;\n\n/** This function reads a private key. Its errors do not hold the key. */\nconst privateKeyOf = (input: KeyInput): KeyObject => {\n  let key: KeyObject;\n  try {\n    if (isKeyObject(input)) key = input;\n    else if (typeof input === \"string\")\n      key = input.trim().startsWith(\"{\")\n        ? createPrivateKey({ key: JSON.parse(input) as JsonWebKey, format: \"jwk\" })\n        : createPrivateKey(input);\n    else if (input instanceof Uint8Array)\n      key = createPrivateKey({ key: Buffer.from(input), format: \"der\", type: \"pkcs8\" });\n    else key = createPrivateKey({ key: input, format: \"jwk\" });\n  } catch (cause) {\n    throw new Error(\n      \"the private key of the signer does not parse: give an Ed25519 key as PKCS#8 (PEM or DER) or as a JWK\",\n      { cause },\n    );\n  }\n  if (key.type !== \"private\")\n    throw new Error(\"the key of the signer is not a private key: give the Ed25519 private key\");\n  if (key.asymmetricKeyType !== \"ed25519\")\n    throw new Error(\n      `the key of the signer is ${key.asymmetricKeyType ?? \"not an asymmetric key\"}, not ed25519: Web Bot Auth here uses Ed25519 keys`,\n    );\n  return key;\n};\n\n/** This function reads a public key, or the public part of a private key. Its errors do not hold the key. */\nconst publicKeyOf = (input: KeyInput): KeyObject => {\n  let key: KeyObject;\n  try {\n    if (isKeyObject(input)) key = input.type === \"private\" ? createPublicKey(input) : input;\n    else if (typeof input === \"string\")\n      key = input.trim().startsWith(\"{\")\n        ? createPublicKey({ key: JSON.parse(input) as JsonWebKey, format: \"jwk\" })\n        : createPublicKey(input);\n    else if (input instanceof Uint8Array) {\n      const bytes = Buffer.from(input);\n      try {\n        key = createPublicKey({ key: bytes, format: \"der\", type: \"spki\" });\n      } catch {\n        key = createPublicKey(createPrivateKey({ key: bytes, format: \"der\", type: \"pkcs8\" }));\n      }\n    } else key = createPublicKey({ key: input, format: \"jwk\" });\n  } catch (cause) {\n    throw new Error(\"a key of the directory does not parse: give an Ed25519 key\", { cause });\n  }\n  if (key.asymmetricKeyType !== \"ed25519\")\n    throw new Error(\n      `a key of the directory is ${key.asymmetricKeyType ?? \"not an asymmetric key\"}, not ed25519`,\n    );\n  return key;\n};\n\n/** This function gives the JWK thumbprint of an Ed25519 public key (RFC 7638, RFC 8037 appendix A.3). */\nconst thumbprintOf = (x: string): string =>\n  base64url(\n    createHash(\"sha256\")\n      .update(JSON.stringify({ crv: \"Ed25519\", kty: \"OKP\", x }), \"utf8\")\n      .digest(),\n  );\n\nconst directoryKeyOf = (key: KeyObject): DirectoryKey => {\n  const jwk = key.export({ format: \"jwk\" });\n  const x = typeof jwk.x === \"string\" ? jwk.x : \"\";\n  return { kty: \"OKP\", crv: \"Ed25519\", kid: thumbprintOf(x), x, use: \"sig\" };\n};\n\n/**\n * This function makes the key directory for the operator to host: a JSON Web Key Set with each\n * public key and its thumbprint as `kid`. It takes public keys, or private keys, and it writes only\n * their public parts. Serve the JSON at `KEY_DIRECTORY_PATH` with the type `KEY_DIRECTORY_TYPE`.\n */\nexport const keyDirectory = (publicKeys: readonly KeyInput[]): KeyDirectory => {\n  const keys = new Map<string, DirectoryKey>();\n  for (const input of publicKeys) {\n    const key = directoryKeyOf(publicKeyOf(input));\n    keys.set(key.kid, key);\n  }\n  return { keys: [...keys.values()] };\n};\n\n// ── signing ──\n\n/** The parts of one signature. The signer and the tests use this function. */\nexport interface SignatureParts {\n  /** The value of `@authority`: the host and a port that is not the default port, in lowercase. */\n  readonly authority: string;\n  readonly label: string;\n  /** The key of the member of `Signature-Agent`. The draft uses the label of the signature. */\n  readonly agentKey: string;\n  /** The serialized value of the member: a string, and its parameters. */\n  readonly agentValue: string;\n  readonly keyId: string;\n  readonly created: number;\n  readonly expires: number;\n  readonly nonce?: string | undefined;\n}\n\n/** This function gives the `@signature-params` value: the covered components and the parameters, in the order of the draft. */\nconst signatureParams = (parts: SignatureParts): string =>\n  `(\"@authority\" \"signature-agent\";key=${serializeBare(parts.agentKey)});created=${String(parts.created)};keyid=${serializeBare(parts.keyId)};alg=\"ed25519\";expires=${String(parts.expires)}${parts.nonce === undefined ? \"\" : `;nonce=${serializeBare(parts.nonce)}`};tag=\"${WEB_BOT_AUTH_TAG}\"`;\n\n/** This function gives the signature base of RFC 9421, section 2.5, for the components of Web Bot Auth. */\nexport const signatureBase = (parts: SignatureParts): string =>\n  [\n    `\"@authority\": ${parts.authority}`,\n    `\"signature-agent\";key=${serializeBare(parts.agentKey)}: ${parts.agentValue}`,\n    `\"@signature-params\": ${signatureParams(parts)}`,\n  ].join(\"\\n\");\n\n/** This function signs the parts with an Ed25519 key, and gives the three headers. */\nexport const signParts = (\n  parts: SignatureParts,\n  key: KeyObject,\n): {\n  readonly \"signature-agent\": string;\n  readonly \"signature-input\": string;\n  readonly signature: string;\n} => {\n  const signature = signBytes(null, Buffer.from(signatureBase(parts), \"utf8\"), key);\n  return {\n    \"signature-agent\": `${parts.agentKey}=${parts.agentValue}`,\n    \"signature-input\": `${parts.label}=${signatureParams(parts)}`,\n    signature: `${parts.label}=:${signature.toString(\"base64\")}:`,\n  };\n};\n\nconst DEFAULT_LIFETIME_MS = 5 * 60_000;\nconst MAX_LIFETIME_MS = 24 * 60 * 60_000;\n\n/** This function checks the URL of `Signature-Agent`, and gives the URL and the serialized value of the member. */\nconst agentOf = (\n  url: string,\n  type: SignatureAgentType,\n): { readonly url: string; readonly value: string } => {\n  let target: URL;\n  try {\n    target = new URL(url);\n  } catch {\n    throw new Error(\n      `signatureAgent \"${url}\" is not a URL: give the https URL of the key directory`,\n    );\n  }\n  if (target.protocol !== \"https:\")\n    throw new Error(`signatureAgent \"${url}\" is not an https URL: the draft permits only https`);\n  if (target.username !== \"\" || target.password !== \"\" || target.hash !== \"\")\n    throw new Error(`signatureAgent \"${url}\" has a user name, a password or a fragment`);\n  if (type === \"directory\") {\n    if (target.pathname !== \"/\" || target.search !== \"\")\n      throw new Error(\n        `signatureAgent \"${url}\" is not an origin: the type directory takes only an origin, such as https://bot.example.com. For a key set on a path, set agentType to jwks_uri`,\n      );\n    return { url: target.origin, value: serializeBare(target.origin) };\n  }\n  return { url: target.href, value: `${serializeBare(target.href)};type=${type}` };\n};\n\n/**\n * This function makes a signer for Web Bot Auth with an Ed25519 key. Each signature covers\n * `@authority` and the member of `Signature-Agent`. It has a new random nonce, and it expires after\n * `lifetimeMs`. The signer keeps the private key in a closure: no property of the signer holds it.\n */\nexport const createWebBotAuthSigner = (options: WebBotAuthOptions): WebBotAuthSigner => {\n  const key = privateKeyOf(options.privateKey);\n  const publicKey = directoryKeyOf(createPublicKey(key));\n  if (options.keyId !== undefined && options.keyId !== publicKey.kid)\n    throw new Error(\n      `keyId \"${options.keyId}\" is not the JWK thumbprint of the key (${publicKey.kid}): Web Bot Auth uses the thumbprint as keyid`,\n    );\n  const agent = agentOf(options.signatureAgent, options.agentType ?? \"directory\");\n  const label = options.label ?? \"sig1\";\n  if (!isKey(label))\n    throw new Error(\n      `label \"${label}\" is not a key of a structured field: use lowercase letters, digits, \"_\", \"-\", \".\" and \"*\"`,\n    );\n  const lifetimeMs = options.lifetimeMs ?? DEFAULT_LIFETIME_MS;\n  if (!Number.isFinite(lifetimeMs) || lifetimeMs < 1000 || lifetimeMs > MAX_LIFETIME_MS)\n    throw new RangeError(\n      `lifetimeMs must be from 1000 (1 second) to ${String(MAX_LIFETIME_MS)} (24 hours), not ${String(lifetimeMs)}`,\n    );\n  const { kty, crv, x } = publicKey;\n  return {\n    keyId: publicKey.kid,\n    signatureAgent: agent.url,\n    publicKey: { kty, crv, x },\n    sign(url, now) {\n      const created = Math.floor(now / 1000);\n      return signParts(\n        {\n          authority: url.host.toLowerCase(),\n          label,\n          agentKey: label,\n          agentValue: agent.value,\n          keyId: publicKey.kid,\n          created,\n          expires: created + Math.ceil(lifetimeMs / 1000),\n          nonce: randomBytes(32).toString(\"base64\"),\n        },\n        key,\n      );\n    },\n  };\n};\n\n/** This function tells if a value is a request signer, not the options of one. */\nexport const isRequestSigner = (value: RequestSigner | WebBotAuthOptions): value is RequestSigner =>\n  typeof (value as Partial<RequestSigner>).sign === \"function\";\n\n/** This function gives a request signer: the signer itself, or a new signer from its options. */\nexport const signerOf = (\n  value: RequestSigner | WebBotAuthOptions | undefined,\n): RequestSigner | undefined =>\n  value === undefined ? undefined : isRequestSigner(value) ? value : createWebBotAuthSigner(value);\n\n// ── verification ──\n\n/** A signature can start this long before the clock of the verifier, for a small difference of the clocks. */\nconst CLOCK_SKEW_S = 60;\n\nconst headerLines = (\n  headers: SignedRequest[\"headers\"],\n  name: string,\n): readonly string[] | undefined => {\n  for (const [key, value] of Object.entries(headers)) {\n    if (key.toLowerCase() !== name || value === undefined) continue;\n    return typeof value === \"string\" ? [value] : value;\n  }\n  return undefined;\n};\n\n/** This function gives the value of a header as RFC 9421 section 2.1 combines it: each line without its outer spaces, with \", \" between. */\nconst fieldValue = (headers: SignedRequest[\"headers\"], name: string): string | undefined =>\n  headerLines(headers, name)\n    ?.map((line) => line.replace(/\\r?\\n[ \\t]+/g, \" \").trim())\n    .join(\", \");\n\n/** This function gives the value of one component of a request, or an error text. */\nconst componentValue = (\n  component: Item,\n  request: SignedRequest,\n  target: URL,\n): { readonly value: string } | { readonly error: string } => {\n  const name = component.value;\n  if (typeof name !== \"string\") return { error: \"a component is not a string\" };\n  const params = new Map(component.params);\n  if (name.startsWith(\"@\")) {\n    if (params.size > 0) return { error: `the parameters of ${name} are not supported` };\n    switch (name) {\n      case \"@method\":\n        return { value: (request.method ?? \"GET\").toUpperCase() };\n      case \"@authority\":\n        return { value: target.host.toLowerCase() };\n      case \"@scheme\":\n        return { value: target.protocol.slice(0, -1).toLowerCase() };\n      case \"@target-uri\":\n        return { value: target.href };\n      case \"@path\":\n        return { value: target.pathname === \"\" ? \"/\" : target.pathname };\n      case \"@query\":\n        return { value: target.search === \"\" ? \"?\" : target.search };\n      case \"@request-target\":\n        return { value: `${target.pathname}${target.search}` };\n      default:\n        return { error: `the component ${name} is not supported` };\n    }\n  }\n  const value = fieldValue(request.headers, name);\n  if (value === undefined) return { error: `the request has no ${name} header` };\n  if ([...params.keys()].some((param) => param !== \"key\"))\n    return { error: `the parameters of ${name} are not supported` };\n  const key = params.get(\"key\");\n  if (key === undefined) return { value };\n  if (typeof key !== \"string\") return { error: `the key of ${name} is not a string` };\n  let member: Member | undefined;\n  try {\n    member = new FieldParser(value).dictionary().get(key);\n  } catch (error) {\n    return { error: `the ${name} header is not a dictionary: ${(error as Error).message}` };\n  }\n  if (member === undefined) return { error: `the ${name} header has no member ${key}` };\n  return { value: serializeMember(member) };\n};\n\nconst failed = (\n  reason: string,\n  facts: { label?: string | null; keyId?: string | null; agent?: string | null } = {},\n): SignatureCheck => ({\n  verified: false,\n  label: facts.label ?? null,\n  keyId: facts.keyId ?? null,\n  agent: facts.agent ?? null,\n  reason,\n});\n\n/**\n * This function verifies the Web Bot Auth signatures of a request with the keys of a directory. It\n * applies RFC 9421 section 3.2 and the profile of the draft. The profile asks for the tag\n * `web-bot-auth`, `created`, `expires` and `@authority`. It also asks for the member of\n * `Signature-Agent`, and a key with the thumbprint of `keyid`. The tests use it, and an operator can check a setup with it. It sends no request.\n */\nexport const verifySignature = (\n  request: SignedRequest,\n  directory: KeyDirectory,\n  options: { readonly now?: number | undefined } = {},\n): SignatureCheck => {\n  let target: URL;\n  try {\n    target = new URL(request.url);\n  } catch {\n    return failed(\"the URL of the request is not a URL\");\n  }\n  const inputText = fieldValue(request.headers, \"signature-input\");\n  const signatureText = fieldValue(request.headers, \"signature\");\n  if (inputText === undefined || signatureText === undefined)\n    return failed(\"the request has no Signature-Input or no Signature header\");\n  let inputs: Map<string, Member>;\n  let signatures: Map<string, Member>;\n  try {\n    inputs = new FieldParser(inputText).dictionary();\n    signatures = new FieldParser(signatureText).dictionary();\n  } catch (error) {\n    return failed(`a signature header does not parse: ${(error as Error).message}`);\n  }\n  const now = Math.floor((options.now ?? Date.now()) / 1000);\n  const keys = new Map<string, KeyObject>();\n  for (const entry of directory.keys) {\n    try {\n      const key = createPublicKey({\n        key: { kty: entry.kty, crv: entry.crv, x: entry.x },\n        format: \"jwk\",\n      });\n      keys.set(thumbprintOf(entry.x), key);\n    } catch {\n      // a key that does not parse verifies nothing\n    }\n  }\n  let last: SignatureCheck = failed(\"the request has no Web Bot Auth signature\");\n  for (const [label, input] of inputs) {\n    if (!isInnerList(input)) continue;\n    const params = new Map(input.params);\n    if (params.get(\"tag\") !== WEB_BOT_AUTH_TAG) continue;\n    const keyId = typeof params.get(\"keyid\") === \"string\" ? (params.get(\"keyid\") as string) : null;\n    const covered = input.items;\n    const names = covered.map((item) => serializeItem(item));\n    const agentItem = covered.find((item) => item.value === \"signature-agent\");\n    let agent: string | null = null;\n    if (agentItem !== undefined) {\n      const value = componentValue(agentItem, request, target);\n      if (\"value\" in value) {\n        try {\n          const member = new FieldParser(value.value).wholeItem().value;\n          agent = typeof member === \"string\" ? member : null;\n        } catch {\n          agent = null;\n        }\n      }\n    }\n    const facts = { label, keyId, agent };\n    if (new Set(names).size !== names.length) {\n      last = failed(\"a component is covered two times\", facts);\n      continue;\n    }\n    if (!names.includes('\"@authority\"') && !names.includes('\"@target-uri\"')) {\n      last = failed(\"the signature does not cover @authority or @target-uri\", facts);\n      continue;\n    }\n    if (agentItem === undefined) {\n      last = failed(\"the signature does not cover Signature-Agent\", facts);\n      continue;\n    }\n    const created = params.get(\"created\");\n    const expires = params.get(\"expires\");\n    if (typeof created !== \"number\" || typeof expires !== \"number\") {\n      last = failed(\"the signature has no created or no expires\", facts);\n      continue;\n    }\n    if (expires <= now) {\n      last = failed(\"the signature expired\", facts);\n      continue;\n    }\n    if (created > now + CLOCK_SKEW_S) {\n      last = failed(\"the signature was created in the future\", facts);\n      continue;\n    }\n    const alg = params.get(\"alg\");\n    if (alg !== undefined && alg !== \"ed25519\") {\n      last = failed(`the algorithm ${serializeBare(alg)} is not ed25519`, facts);\n      continue;\n    }\n    const key = keyId === null ? undefined : keys.get(keyId);\n    if (key === undefined) {\n      last = failed(\"no key of the directory has the thumbprint of keyid\", facts);\n      continue;\n    }\n    const lines: string[] = [];\n    let error: string | undefined;\n    for (const item of covered) {\n      const value = componentValue(item, request, target);\n      if (\"error\" in value) {\n        error = value.error;\n        break;\n      }\n      lines.push(`${serializeItem(item)}: ${value.value}`);\n    }\n    if (error !== undefined) {\n      last = failed(error, facts);\n      continue;\n    }\n    lines.push(`\"@signature-params\": ${serializeMember(input)}`);\n    const signature = signatures.get(label);\n    if (\n      signature === undefined ||\n      isInnerList(signature) ||\n      !(signature.value instanceof Uint8Array)\n    ) {\n      last = failed(`the Signature header has no byte sequence for ${label}`, facts);\n      continue;\n    }\n    const good = verifyBytes(null, Buffer.from(lines.join(\"\\n\"), \"utf8\"), key, signature.value);\n    if (good) return { verified: true, label, keyId, agent, reason: null };\n    last = failed(\"the signature does not match the signature base\", facts);\n  }\n  return last;\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA0BA,MAAa,qBAAqB;;AAGlC,MAAa,qBAAqB;;AAGlC,MAAa,mBAAmB;;AAoGhC,IAAM,QAAN,MAAY;CACW;CAArB,YAAY,OAAwB;EAAf,KAAA,QAAA;CAAgB;AACvC;AAiBA,MAAM,eAAe,WAAwC,WAAW;;AAGxE,IAAM,aAAN,cAAyB,MAAM,CAAC;AAEhC,MAAM,YAAY;AAClB,MAAM,WAAW;AACjB,MAAM,cAAc;AACpB,MAAM,aAAa;AACnB,MAAM,SAAS;;AAGf,IAAM,cAAN,MAAkB;CAEa;CAD7B,KAAa;CACb,YAAY,MAA+B;EAAd,KAAA,OAAA;CAAe;CAE5C,OAAuB;EACrB,OAAO,KAAK,KAAK,KAAK,OAAO;CAC/B;CAEA,SAAuB;EACrB,OAAO,KAAK,KAAK,MAAM,KAAK,KAAK,MAAM;CACzC;CAEA,MAAoB;EAClB,OAAO,KAAK,KAAK,MAAM,OAAO,KAAK,KAAK,MAAM,KAAM,KAAK,MAAM;CACjE;CAEA,aAAkC;EAChC,MAAM,sBAAM,IAAI,IAAoB;EACpC,KAAK,OAAO;EACZ,OAAO,KAAK,KAAK,KAAK,KAAK,QAAQ;GACjC,MAAM,MAAM,KAAK,IAAI;GACrB,IAAI;GACJ,IAAI,KAAK,KAAK,MAAM,KAAK;IACvB,KAAK,MAAM;IACX,SAAS,KAAK,KAAK,MAAM,MAAM,KAAK,UAAU,IAAI,KAAK,KAAK;GAC9D,OACE,SAAS;IAAE,OAAO;IAAM,QAAQ,KAAK,OAAO;GAAE;GAEhD,IAAI,IAAI,KAAK,MAAM;GACnB,KAAK,IAAI;GACT,IAAI,KAAK,MAAM,KAAK,KAAK,QAAQ;GACjC,IAAI,KAAK,KAAK,MAAM,KAAK,MAAM,IAAI,WAAW,yBAAyB,OAAO,KAAK,EAAE,GAAG;GACxF,KAAK,MAAM;GACX,KAAK,IAAI;GACT,IAAI,KAAK,MAAM,KAAK,KAAK,QAAQ,MAAM,IAAI,WAAW,6BAA6B;EACrF;EACA,OAAO;CACT;;CAGA,YAAkB;EAChB,KAAK,OAAO;EACZ,MAAM,OAAO,KAAK,KAAK;EACvB,KAAK,OAAO;EACZ,IAAI,KAAK,KAAK,KAAK,KAAK,QAAQ,MAAM,IAAI,WAAW,qBAAqB;EAC1E,OAAO;CACT;CAEA,MAAsB;EACpB,IAAI,CAAC,UAAU,KAAK,KAAK,KAAK,CAAC,GAAG,MAAM,IAAI,WAAW,aAAa,OAAO,KAAK,EAAE,GAAG;EACrF,MAAM,QAAQ,KAAK;EACnB,OAAO,SAAS,KAAK,KAAK,KAAK,CAAC,KAAK,KAAK,KAAK,KAAK,KAAK,QAAQ,KAAK,MAAM;EAC5E,OAAO,KAAK,KAAK,MAAM,OAAO,KAAK,EAAE;CACvC;CAEA,YAA+B;EAC7B,KAAK,MAAM;EACX,MAAM,QAAgB,CAAC;EACvB,SAAS;GACP,KAAK,OAAO;GACZ,IAAI,KAAK,KAAK,MAAM,KAAK;IACvB,KAAK,MAAM;IACX,OAAO;KAAE;KAAO,QAAQ,KAAK,OAAO;IAAE;GACxC;GACA,IAAI,KAAK,MAAM,KAAK,KAAK,QAAQ,MAAM,IAAI,WAAW,0BAA0B;GAChF,MAAM,KAAK,KAAK,KAAK,CAAC;GACtB,IAAI,KAAK,KAAK,MAAM,OAAO,KAAK,KAAK,MAAM,KACzC,MAAM,IAAI,WAAW,kCAAkC,OAAO,KAAK,EAAE,GAAG;EAC5E;CACF;CAEA,OAAqB;EAEnB,OAAO;GAAE,OADK,KAAK,KACN;GAAG,QAAQ,KAAK,OAAO;EAAE;CACxC;CAEA,SAAyB;EACvB,MAAM,MAA0C,CAAC;EACjD,OAAO,KAAK,KAAK,MAAM,KAAK;GAC1B,KAAK,MAAM;GACX,KAAK,OAAO;GACZ,MAAM,MAAM,KAAK,IAAI;GACrB,IAAI,QAAkB;GACtB,IAAI,KAAK,KAAK,MAAM,KAAK;IACvB,KAAK,MAAM;IACX,QAAQ,KAAK,KAAK;GACpB;GACA,MAAM,QAAQ,IAAI,WAAW,CAAC,UAAU,SAAS,GAAG;GACpD,IAAI,UAAU,IAAI,IAAI,KAAK,CAAC,KAAK,KAAK,CAAC;QAClC,IAAI,SAAS,CAAC,KAAK,KAAK;EAC/B;EACA,OAAO;CACT;CAEA,OAAyB;EACvB,MAAM,OAAO,KAAK,KAAK;EACvB,IAAI,SAAS,OAAO,QAAQ,KAAK,IAAI,GAAG,OAAO,KAAK,OAAO;EAC3D,IAAI,SAAS,MAAK,OAAO,KAAK,OAAO;EACrC,IAAI,SAAS,KAAK,OAAO,KAAK,MAAM;EACpC,IAAI,SAAS,KAAK,OAAO,KAAK,QAAQ;EACtC,IAAI,YAAY,KAAK,IAAI,GAAG,OAAO,KAAK,MAAM;EAC9C,MAAM,IAAI,WAAW,cAAc,OAAO,KAAK,EAAE,GAAG;CACtD;CAEA,SAAyB;EACvB,MAAM,QAAQ,4BAA4B,KAAK,KAAK,KAAK,MAAM,KAAK,EAAE,CAAC;EACvE,IAAI,UAAU,QAAS,MAAM,OAAO,KAAA,KAAa,MAAM,EAAE,CAAE,SAAS,IAClE,MAAM,IAAI,WAAW,mBAAmB,OAAO,KAAK,EAAE,GAAG;EAC3D,KAAK,MAAM,MAAM,EAAE,CAAC;EACpB,OAAO,OAAO,MAAM,EAAE;CACxB;CAEA,SAAyB;EACvB,KAAK,MAAM;EACX,IAAI,MAAM;EACV,SAAS;GACP,MAAM,OAAO,KAAK,KAAK;GACvB,IAAI,SAAS,IAAI,MAAM,IAAI,WAAW,qBAAqB;GAC3D,KAAK,MAAM;GACX,IAAI,SAAS,MAAM;IACjB,MAAM,OAAO,KAAK,KAAK;IACvB,IAAI,SAAS,QAAO,SAAS,MAAM,MAAM,IAAI,WAAW,0BAA0B;IAClF,OAAO;IACP,KAAK,MAAM;GACb,OAAO,IAAI,SAAS,MAClB,OAAO;QACF;IACL,MAAM,OAAO,KAAK,WAAW,CAAC;IAC9B,IAAI,OAAO,MAAQ,OAAO,KACxB,MAAM,IAAI,WAAW,wDAAwD;IAC/E,OAAO;GACT;EACF;CACF;CAEA,QAA4B;EAC1B,KAAK,MAAM;EACX,MAAM,MAAM,KAAK,KAAK,QAAQ,KAAK,KAAK,EAAE;EAC1C,IAAI,QAAQ,IAAI,MAAM,IAAI,WAAW,4BAA4B;EACjE,MAAM,OAAO,KAAK,KAAK,MAAM,KAAK,IAAI,GAAG;EACzC,IAAI,CAAC,OAAO,KAAK,IAAI,GAAG,MAAM,IAAI,WAAW,+BAA+B;EAC5E,KAAK,KAAK,MAAM;EAChB,OAAO,IAAI,WAAW,OAAO,KAAK,MAAM,QAAQ,CAAC;CACnD;CAEA,UAA2B;EACzB,MAAM,QAAQ,KAAK,KAAK,MAAM,KAAK,IAAI,KAAK,KAAK,CAAC;EAClD,IAAI,UAAU,QAAQ,UAAU,MAAM,MAAM,IAAI,WAAW,eAAe;EAC1E,KAAK,MAAM;EACX,OAAO,UAAU;CACnB;CAEA,QAAuB;EACrB,MAAM,QAAQ,KAAK;EACnB,KAAK,MAAM;EACX,OAAO,WAAW,KAAK,KAAK,KAAK,CAAC,KAAK,KAAK,KAAK,KAAK,KAAK,QAAQ,KAAK,MAAM;EAC9E,OAAO,IAAI,MAAM,KAAK,KAAK,MAAM,OAAO,KAAK,EAAE,CAAC;CAClD;AACF;AAEA,MAAM,iBAAiB,UAA4B;CACjD,IAAI,iBAAiB,OAAO,OAAO,MAAM;CACzC,IAAI,iBAAiB,YAAY,OAAO,IAAI,OAAO,KAAK,KAAK,CAAC,CAAC,SAAS,QAAQ,EAAE;CAClF,IAAI,OAAO,UAAU,WAAW,OAAO,QAAQ,OAAO;CACtD,IAAI,OAAO,UAAU,UACnB,OAAO,OAAO,UAAU,KAAK,IAAI,OAAO,KAAK,IAAI,OAAO,KAAK,MAAM,QAAQ,GAAI,IAAI,GAAI;CACzF,OAAO,IAAI,MAAM,QAAQ,WAAW,SAAS,KAAK,MAAM,EAAE;AAC5D;AAEA,MAAM,mBAAmB,WACvB,OACG,KAAK,CAAC,KAAK,WAAY,UAAU,OAAO,IAAI,QAAQ,IAAI,IAAI,GAAG,cAAc,KAAK,GAAI,CAAC,CACvF,KAAK,EAAE;AAEZ,MAAM,iBAAiB,SACrB,GAAG,cAAc,KAAK,KAAK,IAAI,gBAAgB,KAAK,MAAM;AAE5D,MAAM,mBAAmB,WACvB,YAAY,MAAM,IACd,IAAI,OAAO,MAAM,IAAI,aAAa,CAAC,CAAC,KAAK,GAAG,EAAE,GAAG,gBAAgB,OAAO,MAAM,MAC9E,cAAc,MAAM;;AAG1B,MAAM,SAAS,SAA0B,yBAAyB,KAAK,IAAI;AAI3E,MAAM,aAAa,UAA8B,OAAO,KAAK,KAAK,CAAC,CAAC,SAAS,WAAW;AAExF,MAAM,eAAe,QACnB,OAAO,QAAQ,YAAY,QAAQ,QAAQ,uBAAuB,OAAO,YAAY;;AAGvF,MAAM,gBAAgB,UAA+B;CACnD,IAAI;CACJ,IAAI;EACF,IAAI,YAAY,KAAK,GAAG,MAAM;OACzB,IAAI,OAAO,UAAU,UACxB,MAAM,MAAM,KAAK,CAAC,CAAC,WAAW,GAAG,IAC7B,iBAAiB;GAAE,KAAK,KAAK,MAAM,KAAK;GAAiB,QAAQ;EAAM,CAAC,IACxE,iBAAiB,KAAK;OACvB,IAAI,iBAAiB,YACxB,MAAM,iBAAiB;GAAE,KAAK,OAAO,KAAK,KAAK;GAAG,QAAQ;GAAO,MAAM;EAAQ,CAAC;OAC7E,MAAM,iBAAiB;GAAE,KAAK;GAAO,QAAQ;EAAM,CAAC;CAC3D,SAAS,OAAO;EACd,MAAM,IAAI,MACR,wGACA,EAAE,MAAM,CACV;CACF;CACA,IAAI,IAAI,SAAS,WACf,MAAM,IAAI,MAAM,0EAA0E;CAC5F,IAAI,IAAI,sBAAsB,WAC5B,MAAM,IAAI,MACR,4BAA4B,IAAI,qBAAqB,wBAAwB,mDAC/E;CACF,OAAO;AACT;;AAGA,MAAM,eAAe,UAA+B;CAClD,IAAI;CACJ,IAAI;EACF,IAAI,YAAY,KAAK,GAAG,MAAM,MAAM,SAAS,YAAY,gBAAgB,KAAK,IAAI;OAC7E,IAAI,OAAO,UAAU,UACxB,MAAM,MAAM,KAAK,CAAC,CAAC,WAAW,GAAG,IAC7B,gBAAgB;GAAE,KAAK,KAAK,MAAM,KAAK;GAAiB,QAAQ;EAAM,CAAC,IACvE,gBAAgB,KAAK;OACtB,IAAI,iBAAiB,YAAY;GACpC,MAAM,QAAQ,OAAO,KAAK,KAAK;GAC/B,IAAI;IACF,MAAM,gBAAgB;KAAE,KAAK;KAAO,QAAQ;KAAO,MAAM;IAAO,CAAC;GACnE,QAAQ;IACN,MAAM,gBAAgB,iBAAiB;KAAE,KAAK;KAAO,QAAQ;KAAO,MAAM;IAAQ,CAAC,CAAC;GACtF;EACF,OAAO,MAAM,gBAAgB;GAAE,KAAK;GAAO,QAAQ;EAAM,CAAC;CAC5D,SAAS,OAAO;EACd,MAAM,IAAI,MAAM,8DAA8D,EAAE,MAAM,CAAC;CACzF;CACA,IAAI,IAAI,sBAAsB,WAC5B,MAAM,IAAI,MACR,6BAA6B,IAAI,qBAAqB,wBAAwB,cAChF;CACF,OAAO;AACT;;AAGA,MAAM,gBAAgB,MACpB,UACE,WAAW,QAAQ,CAAC,CACjB,OAAO,KAAK,UAAU;CAAE,KAAK;CAAW,KAAK;CAAO;AAAE,CAAC,GAAG,MAAM,CAAC,CACjE,OAAO,CACZ;AAEF,MAAM,kBAAkB,QAAiC;CACvD,MAAM,MAAM,IAAI,OAAO,EAAE,QAAQ,MAAM,CAAC;CACxC,MAAM,IAAI,OAAO,IAAI,MAAM,WAAW,IAAI,IAAI;CAC9C,OAAO;EAAE,KAAK;EAAO,KAAK;EAAW,KAAK,aAAa,CAAC;EAAG;EAAG,KAAK;CAAM;AAC3E;;;;;;AAOA,MAAa,gBAAgB,eAAkD;CAC7E,MAAM,uBAAO,IAAI,IAA0B;CAC3C,KAAK,MAAM,SAAS,YAAY;EAC9B,MAAM,MAAM,eAAe,YAAY,KAAK,CAAC;EAC7C,KAAK,IAAI,IAAI,KAAK,GAAG;CACvB;CACA,OAAO,EAAE,MAAM,CAAC,GAAG,KAAK,OAAO,CAAC,EAAE;AACpC;;AAoBA,MAAM,mBAAmB,UACvB,uCAAuC,cAAc,MAAM,QAAQ,EAAE,YAAY,OAAO,MAAM,OAAO,EAAE,SAAS,cAAc,MAAM,KAAK,EAAE,yBAAyB,OAAO,MAAM,OAAO,IAAI,MAAM,UAAU,KAAA,IAAY,KAAK,UAAU,cAAc,MAAM,KAAK,IAAI,QAAQ,iBAAiB;;AAG/R,MAAa,iBAAiB,UAC5B;CACE,iBAAiB,MAAM;CACvB,yBAAyB,cAAc,MAAM,QAAQ,EAAE,IAAI,MAAM;CACjE,wBAAwB,gBAAgB,KAAK;AAC/C,CAAC,CAAC,KAAK,IAAI;;AAGb,MAAa,aACX,OACA,QAKG;CACH,MAAM,YAAYA,KAAU,MAAM,OAAO,KAAK,cAAc,KAAK,GAAG,MAAM,GAAG,GAAG;CAChF,OAAO;EACL,mBAAmB,GAAG,MAAM,SAAS,GAAG,MAAM;EAC9C,mBAAmB,GAAG,MAAM,MAAM,GAAG,gBAAgB,KAAK;EAC1D,WAAW,GAAG,MAAM,MAAM,IAAI,UAAU,SAAS,QAAQ,EAAE;CAC7D;AACF;AAEA,MAAM,sBAAsB;AAC5B,MAAM,kBAAkB;;AAGxB,MAAM,WACJ,KACA,SACqD;CACrD,IAAI;CACJ,IAAI;EACF,SAAS,IAAI,IAAI,GAAG;CACtB,QAAQ;EACN,MAAM,IAAI,MACR,mBAAmB,IAAI,wDACzB;CACF;CACA,IAAI,OAAO,aAAa,UACtB,MAAM,IAAI,MAAM,mBAAmB,IAAI,oDAAoD;CAC7F,IAAI,OAAO,aAAa,MAAM,OAAO,aAAa,MAAM,OAAO,SAAS,IACtE,MAAM,IAAI,MAAM,mBAAmB,IAAI,4CAA4C;CACrF,IAAI,SAAS,aAAa;EACxB,IAAI,OAAO,aAAa,OAAO,OAAO,WAAW,IAC/C,MAAM,IAAI,MACR,mBAAmB,IAAI,iJACzB;EACF,OAAO;GAAE,KAAK,OAAO;GAAQ,OAAO,cAAc,OAAO,MAAM;EAAE;CACnE;CACA,OAAO;EAAE,KAAK,OAAO;EAAM,OAAO,GAAG,cAAc,OAAO,IAAI,EAAE,QAAQ;CAAO;AACjF;;;;;;AAOA,MAAa,0BAA0B,YAAiD;CACtF,MAAM,MAAM,aAAa,QAAQ,UAAU;CAC3C,MAAM,YAAY,eAAe,gBAAgB,GAAG,CAAC;CACrD,IAAI,QAAQ,UAAU,KAAA,KAAa,QAAQ,UAAU,UAAU,KAC7D,MAAM,IAAI,MACR,UAAU,QAAQ,MAAM,0CAA0C,UAAU,IAAI,6CAClF;CACF,MAAM,QAAQ,QAAQ,QAAQ,gBAAgB,QAAQ,aAAa,WAAW;CAC9E,MAAM,QAAQ,QAAQ,SAAS;CAC/B,IAAI,CAAC,MAAM,KAAK,GACd,MAAM,IAAI,MACR,UAAU,MAAM,2FAClB;CACF,MAAM,aAAa,QAAQ,cAAc;CACzC,IAAI,CAAC,OAAO,SAAS,UAAU,KAAK,aAAa,OAAQ,aAAa,iBACpE,MAAM,IAAI,WACR,8CAA8C,OAAO,eAAe,EAAE,mBAAmB,OAAO,UAAU,GAC5G;CACF,MAAM,EAAE,KAAK,KAAK,MAAM;CACxB,OAAO;EACL,OAAO,UAAU;EACjB,gBAAgB,MAAM;EACtB,WAAW;GAAE;GAAK;GAAK;EAAE;EACzB,KAAK,KAAK,KAAK;GACb,MAAM,UAAU,KAAK,MAAM,MAAM,GAAI;GACrC,OAAO,UACL;IACE,WAAW,IAAI,KAAK,YAAY;IAChC;IACA,UAAU;IACV,YAAY,MAAM;IAClB,OAAO,UAAU;IACjB;IACA,SAAS,UAAU,KAAK,KAAK,aAAa,GAAI;IAC9C,OAAO,YAAY,EAAE,CAAC,CAAC,SAAS,QAAQ;GAC1C,GACA,GACF;EACF;CACF;AACF;;AAGA,MAAa,mBAAmB,UAC9B,OAAQ,MAAiC,SAAS;;AAGpD,MAAa,YACX,UAEA,UAAU,KAAA,IAAY,KAAA,IAAY,gBAAgB,KAAK,IAAI,QAAQ,uBAAuB,KAAK;;AAKjG,MAAM,eAAe;AAErB,MAAM,eACJ,SACA,SACkC;CAClC,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,OAAO,GAAG;EAClD,IAAI,IAAI,YAAY,MAAM,QAAQ,UAAU,KAAA,GAAW;EACvD,OAAO,OAAO,UAAU,WAAW,CAAC,KAAK,IAAI;CAC/C;AAEF;;AAGA,MAAM,cAAc,SAAmC,SACrD,YAAY,SAAS,IAAI,CAAC,EACtB,KAAK,SAAS,KAAK,QAAQ,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CACxD,KAAK,IAAI;;AAGd,MAAM,kBACJ,WACA,SACA,WAC4D;CAC5D,MAAM,OAAO,UAAU;CACvB,IAAI,OAAO,SAAS,UAAU,OAAO,EAAE,OAAO,8BAA8B;CAC5E,MAAM,SAAS,IAAI,IAAI,UAAU,MAAM;CACvC,IAAI,KAAK,WAAW,GAAG,GAAG;EACxB,IAAI,OAAO,OAAO,GAAG,OAAO,EAAE,OAAO,qBAAqB,KAAK,oBAAoB;EACnF,QAAQ,MAAR;GACE,KAAK,WACH,OAAO,EAAE,QAAQ,QAAQ,UAAU,MAAA,CAAO,YAAY,EAAE;GAC1D,KAAK,cACH,OAAO,EAAE,OAAO,OAAO,KAAK,YAAY,EAAE;GAC5C,KAAK,WACH,OAAO,EAAE,OAAO,OAAO,SAAS,MAAM,GAAG,EAAE,CAAC,CAAC,YAAY,EAAE;GAC7D,KAAK,eACH,OAAO,EAAE,OAAO,OAAO,KAAK;GAC9B,KAAK,SACH,OAAO,EAAE,OAAO,OAAO,aAAa,KAAK,MAAM,OAAO,SAAS;GACjE,KAAK,UACH,OAAO,EAAE,OAAO,OAAO,WAAW,KAAK,MAAM,OAAO,OAAO;GAC7D,KAAK,mBACH,OAAO,EAAE,OAAO,GAAG,OAAO,WAAW,OAAO,SAAS;GACvD,SACE,OAAO,EAAE,OAAO,iBAAiB,KAAK,mBAAmB;EAC7D;CACF;CACA,MAAM,QAAQ,WAAW,QAAQ,SAAS,IAAI;CAC9C,IAAI,UAAU,KAAA,GAAW,OAAO,EAAE,OAAO,sBAAsB,KAAK,SAAS;CAC7E,IAAI,CAAC,GAAG,OAAO,KAAK,CAAC,CAAC,CAAC,MAAM,UAAU,UAAU,KAAK,GACpD,OAAO,EAAE,OAAO,qBAAqB,KAAK,oBAAoB;CAChE,MAAM,MAAM,OAAO,IAAI,KAAK;CAC5B,IAAI,QAAQ,KAAA,GAAW,OAAO,EAAE,MAAM;CACtC,IAAI,OAAO,QAAQ,UAAU,OAAO,EAAE,OAAO,cAAc,KAAK,kBAAkB;CAClF,IAAI;CACJ,IAAI;EACF,SAAS,IAAI,YAAY,KAAK,CAAC,CAAC,WAAW,CAAC,CAAC,IAAI,GAAG;CACtD,SAAS,OAAO;EACd,OAAO,EAAE,OAAO,OAAO,KAAK,+BAAgC,MAAgB,UAAU;CACxF;CACA,IAAI,WAAW,KAAA,GAAW,OAAO,EAAE,OAAO,OAAO,KAAK,wBAAwB,MAAM;CACpF,OAAO,EAAE,OAAO,gBAAgB,MAAM,EAAE;AAC1C;AAEA,MAAM,UACJ,QACA,QAAiF,CAAC,OAC9D;CACpB,UAAU;CACV,OAAO,MAAM,SAAS;CACtB,OAAO,MAAM,SAAS;CACtB,OAAO,MAAM,SAAS;CACtB;AACF;;;;;;;AAQA,MAAa,mBACX,SACA,WACA,UAAiD,CAAC,MAC/B;CACnB,IAAI;CACJ,IAAI;EACF,SAAS,IAAI,IAAI,QAAQ,GAAG;CAC9B,QAAQ;EACN,OAAO,OAAO,qCAAqC;CACrD;CACA,MAAM,YAAY,WAAW,QAAQ,SAAS,iBAAiB;CAC/D,MAAM,gBAAgB,WAAW,QAAQ,SAAS,WAAW;CAC7D,IAAI,cAAc,KAAA,KAAa,kBAAkB,KAAA,GAC/C,OAAO,OAAO,2DAA2D;CAC3E,IAAI;CACJ,IAAI;CACJ,IAAI;EACF,SAAS,IAAI,YAAY,SAAS,CAAC,CAAC,WAAW;EAC/C,aAAa,IAAI,YAAY,aAAa,CAAC,CAAC,WAAW;CACzD,SAAS,OAAO;EACd,OAAO,OAAO,sCAAuC,MAAgB,SAAS;CAChF;CACA,MAAM,MAAM,KAAK,OAAO,QAAQ,OAAO,KAAK,IAAI,KAAK,GAAI;CACzD,MAAM,uBAAO,IAAI,IAAuB;CACxC,KAAK,MAAM,SAAS,UAAU,MAC5B,IAAI;EACF,MAAM,MAAM,gBAAgB;GAC1B,KAAK;IAAE,KAAK,MAAM;IAAK,KAAK,MAAM;IAAK,GAAG,MAAM;GAAE;GAClD,QAAQ;EACV,CAAC;EACD,KAAK,IAAI,aAAa,MAAM,CAAC,GAAG,GAAG;CACrC,QAAQ,CAER;CAEF,IAAI,OAAuB,OAAO,2CAA2C;CAC7E,KAAK,MAAM,CAAC,OAAO,UAAU,QAAQ;EACnC,IAAI,CAAC,YAAY,KAAK,GAAG;EACzB,MAAM,SAAS,IAAI,IAAI,MAAM,MAAM;EACnC,IAAI,OAAO,IAAI,KAAK,MAAA,gBAAwB;EAC5C,MAAM,QAAQ,OAAO,OAAO,IAAI,OAAO,MAAM,WAAY,OAAO,IAAI,OAAO,IAAe;EAC1F,MAAM,UAAU,MAAM;EACtB,MAAM,QAAQ,QAAQ,KAAK,SAAS,cAAc,IAAI,CAAC;EACvD,MAAM,YAAY,QAAQ,MAAM,SAAS,KAAK,UAAU,iBAAiB;EACzE,IAAI,QAAuB;EAC3B,IAAI,cAAc,KAAA,GAAW;GAC3B,MAAM,QAAQ,eAAe,WAAW,SAAS,MAAM;GACvD,IAAI,WAAW,OACb,IAAI;IACF,MAAM,SAAS,IAAI,YAAY,MAAM,KAAK,CAAC,CAAC,UAAU,CAAC,CAAC;IACxD,QAAQ,OAAO,WAAW,WAAW,SAAS;GAChD,QAAQ;IACN,QAAQ;GACV;EAEJ;EACA,MAAM,QAAQ;GAAE;GAAO;GAAO;EAAM;EACpC,IAAI,IAAI,IAAI,KAAK,CAAC,CAAC,SAAS,MAAM,QAAQ;GACxC,OAAO,OAAO,oCAAoC,KAAK;GACvD;EACF;EACA,IAAI,CAAC,MAAM,SAAS,gBAAc,KAAK,CAAC,MAAM,SAAS,iBAAe,GAAG;GACvE,OAAO,OAAO,0DAA0D,KAAK;GAC7E;EACF;EACA,IAAI,cAAc,KAAA,GAAW;GAC3B,OAAO,OAAO,gDAAgD,KAAK;GACnE;EACF;EACA,MAAM,UAAU,OAAO,IAAI,SAAS;EACpC,MAAM,UAAU,OAAO,IAAI,SAAS;EACpC,IAAI,OAAO,YAAY,YAAY,OAAO,YAAY,UAAU;GAC9D,OAAO,OAAO,8CAA8C,KAAK;GACjE;EACF;EACA,IAAI,WAAW,KAAK;GAClB,OAAO,OAAO,yBAAyB,KAAK;GAC5C;EACF;EACA,IAAI,UAAU,MAAM,cAAc;GAChC,OAAO,OAAO,2CAA2C,KAAK;GAC9D;EACF;EACA,MAAM,MAAM,OAAO,IAAI,KAAK;EAC5B,IAAI,QAAQ,KAAA,KAAa,QAAQ,WAAW;GAC1C,OAAO,OAAO,iBAAiB,cAAc,GAAG,EAAE,kBAAkB,KAAK;GACzE;EACF;EACA,MAAM,MAAM,UAAU,OAAO,KAAA,IAAY,KAAK,IAAI,KAAK;EACvD,IAAI,QAAQ,KAAA,GAAW;GACrB,OAAO,OAAO,uDAAuD,KAAK;GAC1E;EACF;EACA,MAAM,QAAkB,CAAC;EACzB,IAAI;EACJ,KAAK,MAAM,QAAQ,SAAS;GAC1B,MAAM,QAAQ,eAAe,MAAM,SAAS,MAAM;GAClD,IAAI,WAAW,OAAO;IACpB,QAAQ,MAAM;IACd;GACF;GACA,MAAM,KAAK,GAAG,cAAc,IAAI,EAAE,IAAI,MAAM,OAAO;EACrD;EACA,IAAI,UAAU,KAAA,GAAW;GACvB,OAAO,OAAO,OAAO,KAAK;GAC1B;EACF;EACA,MAAM,KAAK,wBAAwB,gBAAgB,KAAK,GAAG;EAC3D,MAAM,YAAY,WAAW,IAAI,KAAK;EACtC,IACE,cAAc,KAAA,KACd,YAAY,SAAS,KACrB,EAAE,UAAU,iBAAiB,aAC7B;GACA,OAAO,OAAO,iDAAiD,SAAS,KAAK;GAC7E;EACF;EAEA,IADaC,OAAY,MAAM,OAAO,KAAK,MAAM,KAAK,IAAI,GAAG,MAAM,GAAG,KAAK,UAAU,KAC9E,GAAG,OAAO;GAAE,UAAU;GAAM;GAAO;GAAO;GAAO,QAAQ;EAAK;EACrE,OAAO,OAAO,mDAAmD,KAAK;CACxE;CACA,OAAO;AACT"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://json.schemastore.org/package",
   "name": "polite-crawler",
-  "version": "0.1.3",
+  "version": "0.1.4",
   "mcpName": "io.github.mark1russell7/polite-crawler",
   "description": "A polite web crawler for research and AI agents. It fetches a source once, keeps it, and reads it many times: robots.txt obeyed, one request per site, full-text search, an MCP server.",
   "keywords": [

package/build/index.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.mjs","names":["answered"],"sources":["../src/recipe-venue.ts","../src/recipe-product.ts"],"sourcesContent":["/*\n * The venue recipe reads the opening hours of a venue (a restaurant, a shop, a museum) from its own\n * site. It reads the cheap sources first:\n *\n * 1. The home page: its JSON-LD (`openingHoursSpecification` and `openingHours`) and its text.\n * 2. The few pages of the site that most likely hold hours or a menu, by the words of their links.\n * 3. An OpenStreetMap `opening_hours` value, when the caller gives one. The recipe sends no\n *    request to OpenStreetMap.\n *\n * Each reading names the page, the document and the capture that it came from. The recipe gives\n * readings only. To compare them with the hours that an application keeps is the work of the\n * application, and `compareHours` is the pure helper for it.\n */\nimport type { Doc } from \"./docs.ts\";\nimport type { Duration } from \"./duration.ts\";\nimport { durationMs } from \"./duration.ts\";\nimport type { Archived } from \"./fallback.ts\";\nimport { archivedOf } from \"./fallback.ts\";\nimport type { Day, Hours, Week } from \"./hours.ts\";\nimport {\n  DAYS,\n  describeWeek,\n  disagreements,\n  fromCompact,\n  fromSchemaOrg,\n  fromText,\n} from \"./hours.ts\";\nimport type { PageLink } from \"./html.ts\";\nimport { typesOf } from \"./html.ts\";\nimport type { RecipeTarget } from \"./recipe.ts\";\nimport { deadlineOf, runtimeOf } from \"./recipe.ts\";\nimport type { PageOptions, PageResult } from \"./runtime.ts\";\nimport { HELD_BACK, fetchPage, isHeldBack, recordOverride } from \"./runtime.ts\";\n\n/** These are the limits of the venue recipe. */\nexport const VENUE_LIMITS: {\n  /** The pages of the site that a read fetches after the home page, by default. */\n  readonly pages: number;\n  /** The most pages after the home page. */\n  readonly maxPages: number;\n  /** The most menu links of a result. */\n  readonly menus: number;\n  /** The most readings of one page. A page with more is a list of something else. */\n  readonly readingsPerPage: number;\n  /** The most links of one page that the recipe ranks. */\n  readonly links: number;\n  /** The distance in metres within which a JSON-LD location is the venue. */\n  readonly nearMetres: number;\n} = { pages: 3, maxPages: 8, menus: 8, readingsPerPage: 20, links: 200, nearMetres: 150 };\n\n// ── words ───────────────────────────────────────────────────────────────────\n\nconst STOP_WORDS: ReadonlySet<string> = new Set([\"the\", \"a\", \"an\", \"and\", \"of\", \"at\"]);\n\n/** This function gives the words of a text in one form: lower case, no accents, and `&` as `and`. */\nconst wordsOf = (text: string): string[] =>\n  text\n    .toLowerCase()\n    .normalize(\"NFKD\")\n    .replace(/\\p{M}/gu, \"\")\n    .replace(/&/g, \" and \")\n    .replace(/[^\\p{L}\\p{N} ]/gu, \" \")\n    .split(/\\s+/)\n    .filter((word) => word.length > 0 && !STOP_WORDS.has(word));\n\n/**\n * This function tells if a page names a venue: the page has the first word of the name and 60\n * percent of its words. A domain that a venue let go can show a different business. It gives\n * undefined for a name with no word.\n */\nexport const namesVenue = (\n  name: string,\n  page: { readonly title: string; readonly text: string },\n): boolean | undefined => {\n  const words = wordsOf(name);\n  if (words.length === 0) return undefined;\n  const onPage = new Set(wordsOf(`${page.title} ${page.text}`));\n  const named = new Set(words);\n  const found = [...named].filter((word) => onPage.has(word)).length;\n  return onPage.has(words[0]!) && found / named.size >= 0.6;\n};\n\n// ── the links of the site ───────────────────────────────────────────────────\n\n/** The words of a link that tell what its page holds, with their weights. */\nconst LINK_WORDS: ReadonlyArray<readonly [RegExp, number]> = [\n  [/hours|horario|horaires|opening/, 6],\n  [/menu|food|drink|wine|cocktail/, 4],\n  [/contact|location|visit|find.?us|directions/, 3],\n  [/about|info/, 2],\n  [/lunch|dinner|brunch|breakfast/, 2],\n];\n\n/** The hosts of review and social sites: a menu there is a different page about the venue. */\nconst SOCIAL =\n  /(?:^|\\.)(?:yelp|tripadvisor|facebook|instagram|twitter|x|tiktok|google|apple|spotify)\\.[a-z.]+$/i;\n\n/** The files that hold no hours as text. */\nconst FILE = /\\.(?:pdf|jpe?g|png|gif|webp|svg|mp4)(?:[?#]|$)/i;\n\nconst hostOf = (url: string): string | undefined => {\n  try {\n    return new URL(url).hostname.toLowerCase().replace(/^www\\./, \"\");\n  } catch {\n    return undefined;\n  }\n};\n\nconst withoutHash = (url: string): string => url.replace(/#.*$/s, \"\").replace(/\\/$/, \"\");\n\n/**\n * This function ranks the links of a page by the words of their text and path. The links to\n * the hours or a menu come first. It keeps only the links on the site of `home`,\n * and it leaves out the files (a PDF, an image) and the home page itself.\n */\nexport const rankHoursLinks = (links: readonly PageLink[], home: string): PageLink[] => {\n  const site = hostOf(home);\n  const self = withoutHash(home);\n  const seen = new Set<string>();\n  const scored: Array<{ readonly link: PageLink; readonly score: number }> = [];\n  for (const link of links.slice(0, VENUE_LIMITS.links)) {\n    if (typeof link?.href !== \"string\" || hostOf(link.href) !== site || FILE.test(link.href))\n      continue;\n    const key = withoutHash(link.href);\n    if (key === self || seen.has(key)) continue;\n    let path = \"\";\n    try {\n      path = new URL(link.href).pathname;\n    } catch {\n      continue;\n    }\n    const words = `${typeof link.text === \"string\" ? link.text : \"\"} ${path}`.toLowerCase();\n    const score = LINK_WORDS.reduce(\n      (sum, [pattern, weight]) => sum + (pattern.test(words) ? weight : 0),\n      0,\n    );\n    if (score <= 0) continue;\n    seen.add(key);\n    scored.push({ link, score });\n  }\n  // a stable sort: links of equal score keep the order of the page\n  return scored.sort((a, b) => b.score - a.score).map((entry) => entry.link);\n};\n\n/** A link to a menu. */\nexport interface VenueLink {\n  readonly url: string;\n  readonly text: string;\n}\n\n// ── the location of a venue ─────────────────────────────────────────────────\n\n/** The place of a venue, to choose its hours on a page that lists more than one location. */\nexport interface VenueLocation {\n  /** This text is the street address, for example `12 Via Esempio`. The number and the street count. */\n  readonly address?: string | undefined;\n  readonly lat?: number | undefined;\n  readonly lon?: number | undefined;\n}\n\ninterface Point {\n  readonly lat: number;\n  readonly lon: number;\n}\n\nconst EARTH_METRES = 6_371_000;\n\n/** This function gives the distance in metres between two points on the earth (the haversine formula). */\nconst metresBetween = (a: Point, b: Point): number => {\n  const rad = Math.PI / 180;\n  const dLat = (b.lat - a.lat) * rad;\n  const dLon = (b.lon - a.lon) * rad;\n  const h =\n    Math.sin(dLat / 2) ** 2 +\n    Math.cos(a.lat * rad) * Math.cos(b.lat * rad) * Math.sin(dLon / 2) ** 2;\n  return 2 * EARTH_METRES * Math.asin(Math.min(1, Math.sqrt(h)));\n};\n\nconst pointOf = (lat: unknown, lon: unknown): Point | undefined => {\n  const la = typeof lat === \"string\" ? Number.parseFloat(lat) : lat;\n  const lo = typeof lon === \"string\" ? Number.parseFloat(lon) : lon;\n  return typeof la === \"number\" &&\n    typeof lo === \"number\" &&\n    Number.isFinite(la) &&\n    Number.isFinite(lo) &&\n    Math.abs(la) <= 90 &&\n    Math.abs(lo) <= 180\n    ? { lat: la, lon: lo }\n    : undefined;\n};\n\n/** The words of a street that tell nothing about which street: directions and kinds of road. */\nconst STREET_NOISE: ReadonlySet<string> = new Set([\n  \"n\",\n  \"s\",\n  \"e\",\n  \"w\",\n  \"north\",\n  \"south\",\n  \"east\",\n  \"west\",\n  \"st\",\n  \"street\",\n  \"ave\",\n  \"avenue\",\n  \"rd\",\n  \"road\",\n  \"blvd\",\n  \"boulevard\",\n  \"dr\",\n  \"drive\",\n  \"ln\",\n  \"lane\",\n  \"ct\",\n  \"court\",\n  \"pl\",\n  \"place\",\n  \"sq\",\n  \"square\",\n  \"hwy\",\n  \"highway\",\n  \"pkwy\",\n  \"parkway\",\n  \"way\",\n  \"ter\",\n  \"terrace\",\n  \"suite\",\n  \"ste\",\n  \"unit\",\n]);\n\n/** This function gives the number of a street address and the words that name its street. */\nconst streetOf = (\n  address: string,\n): { readonly number: string; readonly words: ReadonlySet<string> } | undefined => {\n  const words = wordsOf((address.split(\",\")[0] ?? address).slice(0, 200));\n  const number = words.find((word) => /^\\d+[a-z]?$/.test(word));\n  if (number === undefined) return undefined;\n  return {\n    number,\n    words: new Set(words.filter((word) => !/^\\d/.test(word) && !STREET_NOISE.has(word))),\n  };\n};\n\nconst addressText = (value: unknown): string | undefined => {\n  if (typeof value === \"string\") return value;\n  if (Array.isArray(value)) return addressText(value[0]);\n  if (typeof value === \"object\" && value !== null) {\n    const street = (value as Record<string, unknown>)[\"streetAddress\"];\n    return typeof street === \"string\" ? street : undefined;\n  }\n  return undefined;\n};\n\n/**\n * This function tells if a JSON-LD location record is the venue. The record must have the same\n * number on a street that shares a word, or a position near the venue (`VENUE_LIMITS.nearMetres`).\n */\nexport const locationMatches = (\n  record: Readonly<Record<string, unknown>>,\n  location: VenueLocation,\n): boolean => {\n  const geo = record[\"geo\"];\n  const at =\n    typeof geo === \"object\" && geo !== null\n      ? pointOf(\n          (geo as Record<string, unknown>)[\"latitude\"],\n          (geo as Record<string, unknown>)[\"longitude\"],\n        )\n      : undefined;\n  const ours = pointOf(location.lat, location.lon);\n  if (at !== undefined && ours !== undefined && metresBetween(at, ours) <= VENUE_LIMITS.nearMetres)\n    return true;\n  const theirs = addressText(record[\"address\"]);\n  if (theirs === undefined || location.address === undefined) return false;\n  const a = streetOf(theirs);\n  const b = streetOf(location.address);\n  return (\n    a !== undefined &&\n    b !== undefined &&\n    a.number === b.number &&\n    [...a.words].some((word) => b.words.has(word))\n  );\n};\n\nconst located = (record: Readonly<Record<string, unknown>>): boolean =>\n  record[\"address\"] !== undefined || record[\"geo\"] !== undefined;\n\n// ── the readings ────────────────────────────────────────────────────────────\n\n/** One reading of the hours, with the source that it came from. */\nexport interface VenueReading {\n  /** The value `jsonld` is the structured data of a page, `text` the text of a page, and `osm` the value of the caller. */\n  readonly from: \"jsonld\" | \"osm\" | \"text\";\n  /**\n   * This value orders the readings, 0 first. JSON-LD is 0, a text under an hours heading is 1 and\n   * OpenStreetMap is 2. A text with no label of a different schedule is 3. A different schedule is\n   * 4, for example a brunch, a kitchen, a happy hour or an office.\n   */\n  readonly rank: number;\n  /** The value `opening` is the opening hours of the venue (a rank of 3 or less). Else it is `other`. */\n  readonly schedule: \"opening\" | \"other\";\n  /** This text is the line above a reading of the text, for example `Hours` or `Happy hour`. */\n  readonly label: string | null;\n  /** This text is the week as words, from `describeWeek`. */\n  readonly hours: string;\n  readonly week: Week;\n  /** This value is true when the reader guessed an am or a pm. */\n  readonly inferred: boolean;\n  /** This value is true when the reader left out a rule or a line (a holiday, a date). */\n  readonly partial: boolean;\n  /** This text names the season or the dates of the hours. */\n  readonly season: string | null;\n  /** This text is the words that the hours came from. A reading of the text can be a quote for `verify`. */\n  readonly raw: string;\n  /** This path names the JSON-LD record of the reading in the metadata of the document, for example `jsonld[2]`. */\n  readonly path: string | null;\n  /** This URL is the page of the reading. */\n  readonly url: string | null;\n  readonly doc: string | null;\n  /** This id is the capture of the text that the reading came from. A citation names it. */\n  readonly capture: string | null;\n  readonly fetched_at: string | null;\n  /** This value tells that the page is an archived copy, with the archive and the date of the copy. */\n  readonly archived?: Archived | undefined;\n}\n\n/** A stored document, or a version of one: what `venueReadingsOf` reads. */\nexport interface VenueSource {\n  readonly doc?: string | null | undefined;\n  readonly url: string | null;\n  readonly text: string;\n  readonly meta: Readonly<Record<string, unknown>>;\n  readonly capture?: string | null | undefined;\n  readonly fetched_at?: string | null | undefined;\n}\n\n/** The result of `venueReadingsOf`: what one document says. */\nexport interface VenueRead {\n  readonly readings: readonly VenueReading[];\n  /** This value is the first `telephone` of the JSON-LD records of the venue. */\n  readonly phone: string | null;\n  readonly menus: readonly VenueLink[];\n  readonly notes: readonly string[];\n  /** This value counts the work of the reader. The tests use it, because it does not change with the computer. */\n  readonly steps: number;\n}\n\n/** The types of JSON-LD records that have the hours of a venue. */\nconst HOURS_TYPES =\n  /Restaurant|LocalBusiness|FoodEstablishment|BarOrPub|CafeOrCoffeeShop|Bakery|Store|Place|Winery|Brewery|NightClub|Museum|TouristAttraction|Library|EntertainmentBusiness/;\n\n/**\n * A label that names a schedule that is not the opening hours. The line above a schedule is often a\n * different thing, for example a phone number, and such a line tells nothing.\n */\nconst OTHER_SCHEDULE =\n  /brunch|lunch|dinner|breakfast|happy|kitchen|\bbar\b|deliver|take.?out|pick.?up|patio|holiday|season|summer|winter|special|late|menu/i;\n\n/**\n * A label of a service beside the opening hours, or of an office. Its hours are a different\n * schedule, also when the label says \"hours\" (\"Happy hour\", \"Kitchen hours\", \"Office hours\").\n */\nconst SERVICE =\n  /happy|kitchen|deliver|take.?out|pick.?up|brunch|holiday|special|patio|\bbar\b|late.?night|office/i;\n\nconst rankOf = (from: VenueReading[\"from\"], label: string | null): number => {\n  if (from === \"jsonld\") return 0;\n  if (from === \"osm\") return 2;\n  const text = label ?? \"\";\n  if (SERVICE.test(text)) return 4;\n  if (/hour|open/i.test(text)) return 1;\n  return OTHER_SCHEDULE.test(text) ? 4 : 3;\n};\n\nconst reading = (\n  from: VenueReading[\"from\"],\n  hours: Hours,\n  label: string | null,\n  source: {\n    readonly url: string | null;\n    readonly doc: string | null;\n    readonly capture: string | null;\n    readonly fetched_at: string | null;\n    readonly path: string | null;\n    readonly archived?: Archived | undefined;\n  },\n): VenueReading => {\n  const rank = rankOf(from, label);\n  return {\n    from,\n    rank,\n    schedule: rank <= 3 ? \"opening\" : \"other\",\n    label,\n    hours: describeWeek(hours.week),\n    week: hours.week,\n    inferred: hours.inferred,\n    partial: hours.partial === true,\n    season: hours.season ?? null,\n    raw: hours.raw,\n    path: source.path,\n    url: source.url,\n    doc: source.doc,\n    capture: source.capture,\n    fetched_at: source.fetched_at,\n    ...(source.archived === undefined ? {} : { archived: source.archived }),\n  };\n};\n\nconst recordsOf = (meta: Readonly<Record<string, unknown>>): Record<string, unknown>[] => {\n  const jsonld = meta[\"jsonld\"];\n  return Array.isArray(jsonld)\n    ? jsonld.filter(\n        (record): record is Record<string, unknown> =>\n          record !== null && typeof record === \"object\" && !Array.isArray(record),\n      )\n    : [];\n};\n\nconst linksOf = (meta: Readonly<Record<string, unknown>>): PageLink[] => {\n  const links = meta[\"links\"];\n  return Array.isArray(links)\n    ? links.filter(\n        (link): link is PageLink =>\n          link !== null && typeof link === \"object\" && typeof (link as PageLink).href === \"string\",\n      )\n    : [];\n};\n\n/**\n * This function reads the hours of one stored document, or of one version of it. It is pure, and\n * it sends no request. Thus it also reads a version at a time (`versionAtTime`) or an archived copy.\n *\n * - It reads each JSON-LD record of a venue type with `fromSchemaOrg`, and the text with `fromText`.\n * - On a page that lists more than one location, it reads only the location that matches\n *   `location`. With no `location`, it reads none of them, and a note says so.\n * - It gives the first `telephone` and the menu links that are not on a review or social site.\n */\nexport const venueReadingsOf = (\n  source: VenueSource,\n  options: { readonly location?: VenueLocation | undefined } = {},\n): VenueRead => {\n  let steps = 0;\n  const notes: string[] = [];\n  const archived = archivedOf(source.meta);\n  const where = {\n    url: archived?.original ?? source.url,\n    doc: source.doc ?? null,\n    capture: source.capture ?? null,\n    fetched_at: source.fetched_at ?? null,\n    ...(archived === undefined ? {} : { archived }),\n  };\n  const all = recordsOf(source.meta);\n  steps += all.length;\n  const venues = all\n    .map((record, index) => ({ record, index }))\n    .filter(({ record }) => typesOf(record).some((type) => HOURS_TYPES.test(type)));\n  // a page of a group lists each of its locations: only the hours of this venue are its hours\n  let usable = venues;\n  const placed = venues.filter(({ record }) => located(record));\n  if (placed.length > 1) {\n    const location = options.location;\n    const ours =\n      location === undefined\n        ? []\n        : placed.filter(({ record }) => locationMatches(record, location));\n    if (ours.length === 0) {\n      notes.push(\n        location === undefined\n          ? `${where.url ?? \"the page\"} lists ${String(placed.length)} locations: give location to read the hours of one`\n          : `${where.url ?? \"the page\"} lists ${String(placed.length)} locations, and none matched the location: their hours were not read`,\n      );\n    }\n    usable = [...ours, ...venues.filter(({ record }) => !located(record))];\n  }\n  const readings: VenueReading[] = [];\n  let phone: string | null = null;\n  for (const { record, index } of usable) {\n    steps += 1;\n    const hours = fromSchemaOrg(record);\n    if (hours !== undefined && readings.length < VENUE_LIMITS.readingsPerPage) {\n      readings.push(reading(\"jsonld\", hours, null, { ...where, path: `jsonld[${String(index)}]` }));\n    }\n    const telephone = record[\"telephone\"];\n    if (phone === null && typeof telephone === \"string\" && telephone.trim().length > 0)\n      phone = telephone.trim().slice(0, 100);\n  }\n  steps += source.text.length;\n  for (const hours of fromText(source.text)) {\n    if (readings.length >= VENUE_LIMITS.readingsPerPage) {\n      notes.push(\n        `${where.url ?? \"the page\"} gives more than ${String(VENUE_LIMITS.readingsPerPage)} readings: the rest were not read`,\n      );\n      break;\n    }\n    readings.push(reading(\"text\", hours, hours.label, { ...where, path: null }));\n  }\n  const menus: VenueLink[] = [];\n  for (const link of linksOf(source.meta).slice(0, VENUE_LIMITS.links)) {\n    steps += 1;\n    if (menus.length >= VENUE_LIMITS.menus) break;\n    const text = typeof link.text === \"string\" ? link.text.slice(0, 200) : \"\";\n    const host = hostOf(link.href);\n    if (host === undefined || SOCIAL.test(host) || !/menu/i.test(`${text} ${link.href}`)) continue;\n    if (menus.some((menu) => menu.url === link.href)) continue;\n    menus.push({ url: link.href, text });\n  }\n  return { readings, phone, menus, notes, steps };\n};\n\n// ── the recipe ──────────────────────────────────────────────────────────────\n\n/** An OpenStreetMap `opening_hours` value, with where the caller got it. */\nexport interface VenueOsm {\n  /** This text is the value of the tag, for example `Mo-Fr 08:00-18:00; Sa 09:00-13:00`. */\n  readonly value: string;\n  readonly url?: string | null | undefined;\n  readonly doc?: string | null | undefined;\n  readonly capture?: string | null | undefined;\n  readonly fetched_at?: string | null | undefined;\n}\n\n/** These options control `readVenue`. */\nexport interface VenueOptions {\n  /** This value is the number of pages after the home page, from 0 to `VENUE_LIMITS.maxPages`. The default is 3. */\n  readonly pages?: number | undefined;\n  /** This text is the name of the venue. The result tells if the home page names it (`names_venue`). */\n  readonly name?: string | undefined;\n  /** With true, a home page that does not name the venue gives no reading, and the recipe fetches no more pages. */\n  readonly requireName?: boolean | undefined;\n  /** This value is the place of the venue, for a page that lists more than one location. */\n  readonly location?: VenueLocation | undefined;\n  /** This value is an OpenStreetMap `opening_hours` value. The recipe reads it, and sends no request for it. */\n  readonly osm?: string | VenueOsm | undefined;\n  /** The value `auto` renders a page only when it shows almost nothing without JavaScript. */\n  readonly render?: \"auto\" | \"never\" | \"always\" | undefined;\n  /** A stored copy younger than this age answers with no request. The default is `24h`. */\n  readonly maxAge?: Duration | undefined;\n  /** These agents get their robots.txt rules applied too, for example `Claude-User`. */\n  readonly onBehalfOf?: readonly string[] | undefined;\n  readonly signal?: AbortSignal | undefined;\n  /** No request starts after this time from the start of the read, for example `\"2m\"`. */\n  readonly budget?: Duration | undefined;\n  readonly scope?: string | undefined;\n  readonly labels?: Readonly<Record<string, string>> | undefined;\n  /** This name connects the captures to the job that asked for them. The default is `venue`. */\n  readonly job?: string | undefined;\n  /** This value is true when a person gave this URL directly. It is the only way to read a held-back page. The crawler logs it. */\n  readonly userProvided?: boolean | undefined;\n  /** The value `archive` reads an archived copy of a page that the site refuses, or when the site is down. */\n  readonly fallback?: \"archive\" | \"none\" | undefined;\n  readonly archiveDespiteRobots?: boolean | undefined;\n}\n\n/** One page that the venue recipe fetched. */\nexport interface VenuePage {\n  readonly url: string;\n  readonly doc: string | null;\n  readonly outcome: string;\n  readonly status: number;\n  readonly rendered: boolean;\n  readonly capture: string | null;\n  readonly fetched_at: string | null;\n  readonly from_cache: boolean;\n  readonly held_back: boolean;\n  readonly archived?: Archived | undefined;\n  readonly note: string | null;\n}\n\n/** The result of `readVenue`. */\nexport interface VenueResult {\n  /** This URL is the site that the caller gave. */\n  readonly url: string;\n  /** This URL is where the home page landed, after the redirects. */\n  readonly home: string | null;\n  /** This URL is the new site, when the home page landed on a different host. */\n  readonly moved: string | null;\n  /** This value tells if the home page names the venue. It is null with no `name`. */\n  readonly names_venue: boolean | null;\n  readonly pages: readonly VenuePage[];\n  /** These are the readings, one for each source, label and week: the best first. */\n  readonly readings: readonly VenueReading[];\n  /** This reading is the best reading of the opening hours, from any source. */\n  readonly best: VenueReading | null;\n  /** This reading is the best reading of the site itself (not OpenStreetMap) with no guess. A check for a change compares it. */\n  readonly from_site: VenueReading | null;\n  /** These days are the days where two readings of the whole schedule (a rank of 2 or less) disagree. */\n  readonly disagree: readonly Day[];\n  readonly menus: readonly VenueLink[];\n  readonly phone: string | null;\n  /** These ids are the captures of the pages that the recipe read. */\n  readonly captures: readonly string[];\n  /** This value is true when a page asked not to be AI input, so the recipe read nothing from it. */\n  readonly held_back: boolean;\n  readonly note: string | null;\n}\n\nconst answered = (page: PageResult): boolean =>\n  page.outcome === \"ok\" || page.outcome === \"not-modified\" || page.archived !== undefined;\n\n/**\n * This function reads the hours of a venue from its site. It fetches the home page and the pages\n * that most likely hold hours or a menu. Each one is a fetch of the crawler. Thus robots.txt, the\n * pace, the stops, the capture log and the rule for a held-back page apply. It renders a page only\n * when the page needs JavaScript, as `fetch` does.\n *\n * It gives each reading with its source, the best reading, and the days where the readings\n * disagree. It writes nothing but the capture log. To choose the true hours is the decision of\n * the application.\n */\nexport const readVenue = async (\n  target: RecipeTarget,\n  url: string,\n  options: VenueOptions = {},\n): Promise<VenueResult> => {\n  const runtime = runtimeOf(target);\n  const extra = options.pages ?? VENUE_LIMITS.pages;\n  if (!Number.isInteger(extra) || extra < 0 || extra > VENUE_LIMITS.maxPages) {\n    throw new RangeError(\n      `pages must be a whole number from 0 to ${String(VENUE_LIMITS.maxPages)}, not ${String(extra)}`,\n    );\n  }\n  let site: URL;\n  try {\n    site = new URL(url);\n  } catch {\n    throw new TypeError(`readVenue needs the URL of a site, not ${JSON.stringify(url)}`);\n  }\n  if (site.protocol !== \"http:\" && site.protocol !== \"https:\")\n    throw new TypeError(`readVenue needs an http or https URL, not ${url}`);\n  const maxAge = options.maxAge ?? \"24h\";\n  const job = options.job ?? \"venue\";\n  const userProvided = options.userProvided ?? false;\n  const pageOptions: PageOptions = {\n    render: options.render ?? \"auto\",\n    maxAgeMs: maxAge === \"auto\" ? \"auto\" : durationMs(maxAge),\n    onBehalfOf: options.onBehalfOf,\n    job,\n    signal: options.signal,\n    scope: options.scope,\n    labels: options.labels,\n    deadline: deadlineOf(runtime, options.budget),\n    fallback: options.fallback,\n    archiveDespiteRobots: options.archiveDespiteRobots,\n  };\n  const notes: string[] = [];\n  const readings: VenueReading[] = [];\n  const pages: VenuePage[] = [];\n  const menus: VenueLink[] = [];\n  const captures = new Set<string>();\n  let phone: string | null = null;\n  let heldBack = false;\n\n  if (options.osm !== undefined) {\n    const osm: VenueOsm = typeof options.osm === \"string\" ? { value: options.osm } : options.osm;\n    const hours = typeof osm.value === \"string\" ? fromCompact(osm.value, \"osm\") : undefined;\n    if (hours === undefined) {\n      notes.push(\n        `the OpenStreetMap hours cannot be read: ${JSON.stringify(String(osm.value).slice(0, 200))}`,\n      );\n    } else {\n      readings.push(\n        reading(\"osm\", hours, null, {\n          url: osm.url ?? null,\n          doc: osm.doc ?? null,\n          capture: osm.capture ?? null,\n          fetched_at: osm.fetched_at ?? null,\n          path: null,\n        }),\n      );\n      if (typeof osm.capture === \"string\") captures.add(osm.capture);\n    }\n  }\n\n  /** This function fetches one page, and gives its document when the recipe can read it. */\n  const readPage = async (pageUrl: string): Promise<Doc | undefined> => {\n    const page = await fetchPage(runtime, pageUrl, pageOptions);\n    const doc = page.doc === null ? undefined : runtime.index.get(page.doc);\n    const held = doc !== undefined && isHeldBack(doc, userProvided);\n    pages.push({\n      url: pageUrl,\n      doc: page.doc,\n      outcome: page.outcome,\n      status: page.status,\n      rendered: page.rendered,\n      capture: page.capture,\n      fetched_at: page.fetched_at,\n      from_cache: page.from_cache,\n      held_back: held,\n      ...(page.archived === undefined ? {} : { archived: page.archived }),\n      note: page.note,\n    });\n    if (!answered(page)) {\n      notes.push(`${pageUrl}: ${page.outcome}${page.note === null ? \"\" : ` (${page.note})`}`);\n    }\n    if (doc === undefined) return undefined;\n    if (held) {\n      heldBack = true;\n      return undefined;\n    }\n    if (doc.ai_input === \"no\") await recordOverride(runtime, doc, job);\n    captures.add(doc.capture);\n    return doc;\n  };\n\n  const readDoc = (doc: Doc): void => {\n    const read = venueReadingsOf(doc, { location: options.location });\n    readings.push(...read.readings);\n    notes.push(...read.notes);\n    phone ??= read.phone;\n    for (const menu of read.menus) {\n      if (menus.length < VENUE_LIMITS.menus && !menus.some((known) => known.url === menu.url))\n        menus.push(menu);\n    }\n  };\n\n  let homeUrl: string | null = null;\n  let namesVenueResult: boolean | null = null;\n  const home = await readPage(site.href);\n  if (home !== undefined) {\n    homeUrl = archivedOf(home.meta)?.original ?? home.url ?? site.href;\n    if (options.name !== undefined) {\n      namesVenueResult = namesVenue(options.name, home) ?? null;\n      if (namesVenueResult === false) {\n        notes.push(\n          `${homeUrl} does not name ${options.name}: the domain can belong to a different business now`,\n        );\n      }\n    }\n    if (namesVenueResult === false && options.requireName === true) {\n      notes.push(\"requireName: the recipe read no hours from a site that does not name the venue\");\n    } else {\n      readDoc(home);\n      for (const link of rankHoursLinks(linksOf(home.meta), homeUrl).slice(0, extra)) {\n        if (options.signal?.aborted === true) break;\n        const doc = await readPage(link.href);\n        if (doc !== undefined) readDoc(doc);\n      }\n    }\n  }\n  const moved = homeUrl !== null && hostOf(homeUrl) !== hostOf(site.href) ? homeUrl : null;\n  if (moved !== null) notes.push(`${site.href} now goes to ${moved}`);\n  if (heldBack) notes.push(HELD_BACK);\n\n  // one reading for each source, label and week: a site that repeats its JSON-LD on each page said it once\n  const firstOf = new Map<string, VenueReading>();\n  for (const one of readings) {\n    const key = `${one.from}|${one.label ?? \"\"}|${one.hours}|${one.season ?? \"\"}`;\n    if (!firstOf.has(key)) firstOf.set(key, one);\n  }\n  // the best first; of two equal readings, the reading as written before a guess\n  const unique = [...firstOf.values()].sort(\n    (a, b) => a.rank - b.rank || Number(a.inferred) - Number(b.inferred),\n  );\n  const disagree = new Set<Day>();\n  const whole = unique.filter((one) => one.rank <= 2);\n  for (let i = 0; i < whole.length; i += 1) {\n    for (let j = i + 1; j < whole.length; j += 1) {\n      for (const day of disagreements(whole[i]!.week, whole[j]!.week)) disagree.add(day);\n    }\n  }\n  const best = unique.find((one) => one.schedule === \"opening\") ?? null;\n  const fromSite =\n    unique.find((one) => one.from !== \"osm\" && one.schedule === \"opening\" && !one.inferred) ?? null;\n  return {\n    url: site.href,\n    home: homeUrl,\n    moved,\n    names_venue: namesVenueResult,\n    pages,\n    readings: unique,\n    best,\n    from_site: fromSite,\n    disagree: DAYS.filter((day) => disagree.has(day)),\n    menus,\n    phone,\n    captures: [...captures],\n    held_back: heldBack,\n    note: notes.length > 0 ? notes.join(\"; \") : null,\n  };\n};\n","/*\n * The product recipe reads a product page: its schema.org Product data. Most shop systems write\n * this data on each product page. The recipe gives the name, the brand, the codes (SKU and GTIN),\n * the price as an amount and a currency, a range of prices across the variants, the availability,\n * the seller, the image, and the variant that the URL names.\n *\n * A shop that refuses the crawler is a clean stop: the result says `wall`, with a note, and the\n * crawler does not try a different identity.\n */\nimport type { Doc } from \"./docs.ts\";\nimport type { Duration } from \"./duration.ts\";\nimport { durationMs } from \"./duration.ts\";\nimport type { Archived } from \"./fallback.ts\";\nimport { archivedOf } from \"./fallback.ts\";\nimport { extractPage, typesOf } from \"./html.ts\";\nimport type { RecipeTarget } from \"./recipe.ts\";\nimport { deadlineOf, runtimeOf } from \"./recipe.ts\";\nimport type { CrawlRuntime, PageOptions, PageResult } from \"./runtime.ts\";\nimport { HELD_BACK, fetchPage, isHeldBack, recordOverride } from \"./runtime.ts\";\nimport { decodeBody } from \"./text.ts\";\n\ntype Json = Readonly<Record<string, unknown>>;\n\n/** These are the limits of the product reader. A page with more is hostile or broken, and the reader stops there. */\nexport const PRODUCT_LIMITS: {\n  /** The most JSON-LD records that the reader examines. */\n  readonly records: number;\n  /** The most offers of one product or variant. */\n  readonly offers: number;\n  /** The most variants of one product. */\n  readonly variants: number;\n  /** The levels of `hasVariant` and of nested offers that the reader follows. */\n  readonly depth: number;\n  /** The longest text of a price. */\n  readonly priceChars: number;\n} = { records: 500, offers: 200, variants: 200, depth: 2, priceChars: 64 };\n\n/** An amount of money, as schema.org Product data gives it. */\nexport interface Money {\n  /** This value is the amount in the unit of the currency, for example 12.5. */\n  readonly amount: number;\n  /** This value is the ISO 4217 code of the currency, for example `EUR`. */\n  readonly currency: string;\n  /** This text is the price as the page wrote it, for a check with `extract`. */\n  readonly raw: string;\n}\n\n/** The variant of a product that the URL names. */\nexport interface ProductVariant {\n  readonly name: string | null;\n  readonly sku: string | null;\n  readonly price: Money | null;\n  readonly availability: string | null;\n}\n\n/** The result of `productOf`: what the Product data of a page says. */\nexport interface ProductRead {\n  /** This value is true when the page has a Product record. */\n  readonly found: boolean;\n  readonly name: string | null;\n  readonly brand: string | null;\n  readonly sku: string | null;\n  readonly gtin: string | null;\n  /** This value is the lowest price of the offers, in the first currency of the page. */\n  readonly price: Money | null;\n  /** This value is the highest price, when the offers give a range (sizes, colors, variants). */\n  readonly price_to: Money | null;\n  /**\n   * This value is the schema.org name of the availability, for example `InStock`. When the offers\n   * do not agree, it is `InStock` if one offer is in stock, and `availabilities` gives each value.\n   */\n  readonly availability: string | null;\n  readonly availabilities: readonly string[];\n  /** This value is the variant that the URL names (`?variant=`, `sku` or `gtin`), read alone. */\n  readonly variant: ProductVariant | null;\n  readonly seller: string | null;\n  readonly image: string | null;\n  readonly notes: readonly string[];\n  /** This value counts the work of the reader. The tests use it, because it does not change with the computer. */\n  readonly steps: number;\n}\n\nconst PRODUCT_TYPES = /^(?:Product|ProductGroup|IndividualProduct|ProductModel|SomeProducts)$/;\n\n/** A list price or a struck-through price is the old price, not the price. */\nconst WAS_PRICE = /ListPrice|StrikethroughPrice|MSRP|SRP/i;\n\nconst GTIN_KEYS = [\"gtin13\", \"gtin12\", \"gtin14\", \"gtin8\", \"gtin\"] as const;\n\n/** Two symbols that name one currency only. The other symbols (`$`, `¥`) name more than one. */\nconst SYMBOLS: Readonly<Record<string, string>> = { \"€\": \"EUR\", \"£\": \"GBP\" };\n\nlet knownCurrencies: ReadonlySet<string> | undefined;\n/** This function tells if a code is an ISO 4217 currency that the runtime knows. */\nconst isCurrency = (code: string): boolean => {\n  if (!/^[A-Z]{3}$/.test(code)) return false;\n  if (knownCurrencies === undefined) {\n    try {\n      knownCurrencies = new Set(Intl.supportedValuesOf(\"currency\"));\n    } catch {\n      // a runtime with no list: each code of three capital letters counts\n      knownCurrencies = new Set();\n    }\n  }\n  return knownCurrencies.size === 0 || knownCurrencies.has(code);\n};\n\n/** This function gives the number of digits after the decimal point of a currency: 2 for EUR, 0 for JPY. */\nconst fractionDigits = (currency: string | undefined): number | undefined => {\n  if (currency === undefined) return undefined;\n  try {\n    return new Intl.NumberFormat(\"en\", { style: \"currency\", currency }).resolvedOptions()\n      .maximumFractionDigits;\n  } catch {\n    return undefined;\n  }\n};\n\n/**\n * This function reads an amount as a shop writes it: `19.99`, `1,299.00`, `1.299,00`, `$19.99` or\n * the number 19.99. The last separator is the decimal point, with one exception. One kind of\n * separator, each followed by three digits, separates thousands: `1.299` is 1299. For a\n * currency with three decimal digits, one point with three digits is the decimal point. A text\n * with two numbers (a range), a negative amount or zero gives undefined.\n */\nexport const readAmount = (value: unknown, currency?: string): number | undefined => {\n  if (typeof value === \"number\") return Number.isFinite(value) && value > 0 ? value : undefined;\n  if (typeof value !== \"string\" || value.length > PRODUCT_LIMITS.priceChars) return undefined;\n  // one number, with the currency and the spaces around it\n  const match = /^[^\\d-]*?(\\d(?:[\\d.,'   ]*\\d)?)[^\\d]*$/.exec(value.trim());\n  if (match === null) return undefined;\n  let digits = match[1]!.replace(/['   ]/g, \"\");\n  const last = Math.max(digits.lastIndexOf(\".\"), digits.lastIndexOf(\",\"));\n  if (last !== -1) {\n    const kinds = new Set(digits.match(/[.,]/g));\n    const groups = kinds.size === 1 && /^[1-9]\\d{0,2}(?:[.,]\\d{3})+$/.test(digits);\n    const decimalThree = groups && fractionDigits(currency) === 3 && /^\\d+\\.\\d{3}$/.test(digits);\n    digits =\n      groups && !decimalThree\n        ? digits.replace(/[.,]/g, \"\")\n        : `${digits.slice(0, last).replace(/[.,]/g, \"\")}.${digits.slice(last + 1)}`;\n  }\n  const amount = Number(digits);\n  return Number.isFinite(amount) && amount > 0 ? amount : undefined;\n};\n\nconst list = (value: unknown, limit: number): unknown[] =>\n  (Array.isArray(value) ? value : value === undefined || value === null ? [] : [value]).slice(\n    0,\n    limit,\n  );\n\nconst objects = (value: unknown, limit: number): Json[] =>\n  list(value, limit).filter(\n    (item): item is Json => typeof item === \"object\" && item !== null && !Array.isArray(item),\n  );\n\n/** This function gives a name, written as a text or as an object that has one. */\nconst nameOf = (value: unknown): string | null => {\n  for (const item of list(value, 20)) {\n    if (typeof item === \"string\" && item.trim().length > 0) return item.trim().slice(0, 500);\n    if (typeof item === \"object\" && item !== null) {\n      const named = (item as Json)[\"name\"];\n      if (typeof named === \"string\" && named.trim().length > 0) return named.trim().slice(0, 500);\n    }\n  }\n  return null;\n};\n\nconst textOf = (value: unknown): string | null =>\n  typeof value === \"string\" && value.trim().length > 0\n    ? value.trim().slice(0, 200)\n    : typeof value === \"number\" && Number.isFinite(value)\n      ? String(value)\n      : null;\n\nconst imageOf = (value: unknown): string | null => {\n  for (const item of list(value, 20)) {\n    if (typeof item === \"string\" && /^https?:/i.test(item)) return item;\n    const url = typeof item === \"object\" && item !== null ? (item as Json)[\"url\"] : undefined;\n    if (typeof url === \"string\" && /^https?:/i.test(url)) return url;\n  }\n  return null;\n};\n\ninterface Offers {\n  readonly prices: Money[];\n  readonly unknownCurrencies: Set<string>;\n  readonly availability: Set<string>;\n  readonly sellers: Set<string>;\n  /** An amount with no currency, which is not a price. */\n  unstated: boolean;\n  steps: number;\n}\n\nconst emptyOffers = (): Offers => ({\n  prices: [],\n  unknownCurrencies: new Set(),\n  availability: new Set(),\n  sellers: new Set(),\n  unstated: false,\n  steps: 0,\n});\n\n/** This function reads the offers of a product into `read`, and the offers of its variants to `depth` levels. */\nconst readOffers = (product: Json, read: Offers, depth: number): void => {\n  const money = (value: unknown, currency: unknown): void => {\n    const written = typeof currency === \"string\" ? currency.trim() : \"\";\n    const code = SYMBOLS[written] ?? written.toUpperCase();\n    const amount = readAmount(value, code.length > 0 ? code : undefined);\n    if (amount === undefined) return;\n    if (code.length === 0) {\n      read.unstated = true;\n      return;\n    }\n    if (!isCurrency(code)) {\n      read.unknownCurrencies.add(written.slice(0, 20));\n      return;\n    }\n    read.prices.push({\n      amount,\n      currency: code,\n      raw: String(value).slice(0, PRODUCT_LIMITS.priceChars),\n    });\n  };\n  const offer = (o: Json, level: number): void => {\n    read.steps += 1;\n    const spec = objects(o[\"priceSpecification\"], PRODUCT_LIMITS.offers).find((entry) => {\n      const kind = entry[\"priceType\"];\n      return !(typeof kind === \"string\" && WAS_PRICE.test(kind));\n    });\n    const currency = o[\"priceCurrency\"] ?? spec?.[\"priceCurrency\"];\n    money(o[\"price\"] ?? spec?.[\"price\"], currency);\n    money(o[\"lowPrice\"], currency);\n    money(o[\"highPrice\"], currency);\n    const availability =\n      typeof o[\"availability\"] === \"string\"\n        ? o[\"availability\"]\n            .trim()\n            .replace(/^.*[/#:]/, \"\")\n            .slice(0, 60)\n        : undefined;\n    if (availability !== undefined && availability.length > 0) read.availability.add(availability);\n    const seller = nameOf(o[\"seller\"]);\n    if (seller !== null) read.sellers.add(seller);\n    // an AggregateOffer can list its offers\n    if (level < PRODUCT_LIMITS.depth) {\n      for (const inner of objects(o[\"offers\"], PRODUCT_LIMITS.offers)) offer(inner, level + 1);\n    }\n  };\n  for (const o of objects(product[\"offers\"], PRODUCT_LIMITS.offers)) offer(o, 0);\n  if (depth <= 0) return;\n  for (const variant of objects(product[\"hasVariant\"], PRODUCT_LIMITS.variants)) {\n    read.steps += 1;\n    readOffers(variant, read, depth - 1);\n  }\n};\n\nconst availabilityOf = (read: Offers): string | null =>\n  read.availability.size === 0\n    ? null\n    : read.availability.size === 1 || !read.availability.has(\"InStock\")\n      ? [...read.availability][0]!\n      : \"InStock\";\n\nconst pathKey = (value: string, page: string): string | undefined => {\n  // \"#product\" names a part of this page: a related product can have such an id too\n  if (value.startsWith(\"#\")) return undefined;\n  try {\n    const url = new URL(value, page);\n    return `${url.hostname.toLowerCase().replace(/^www\\./, \"\")}${url.pathname.replace(/\\/$/, \"\")}`;\n  } catch {\n    return undefined;\n  }\n};\n\n/** This function gives the size of a record as JSON, or 0 for a record that JSON cannot write (a nesting too deep). */\nconst sizeOf = (record: Json): number => {\n  try {\n    return JSON.stringify(record).length;\n  } catch {\n    return 0;\n  }\n};\n\n/**\n * This function picks the product of a page from its JSON-LD records. A page often has more\n * records of products: the related products, the products that others bought. It picks:\n *\n * 1. The product whose `url` or `@id` is the page (the path, with no query).\n * 2. Else the largest product with offers or variants.\n * 3. Else the largest product.\n *\n * It also reads the `mainEntity` of a record (a `WebPage` or an `ItemPage` that names its product).\n */\nexport const pickProduct = (\n  records: readonly Json[],\n  page: string,\n): { readonly product: Json | undefined; readonly steps: number } => {\n  let steps = 0;\n  const products: Json[] = [];\n  for (const record of records.slice(0, PRODUCT_LIMITS.records)) {\n    steps += 1;\n    if (typesOf(record as Record<string, unknown>).some((type) => PRODUCT_TYPES.test(type)))\n      products.push(record);\n    for (const inner of objects(record[\"mainEntity\"], 20)) {\n      steps += 1;\n      if (typesOf(inner as Record<string, unknown>).some((type) => PRODUCT_TYPES.test(type)))\n        products.push(inner);\n    }\n  }\n  const here = pathKey(page, page);\n  const own = products.find((product) =>\n    [product[\"url\"], product[\"@id\"]].some(\n      (value) => typeof value === \"string\" && here !== undefined && pathKey(value, page) === here,\n    ),\n  );\n  if (own !== undefined) return { product: own, steps };\n  const selling = products.filter(\n    (product) => list(product[\"offers\"], 1).length > 0 || list(product[\"hasVariant\"], 1).length > 0,\n  );\n  const pool = selling.length > 0 ? selling : products;\n  let best: Json | undefined;\n  let size = -1;\n  for (const product of pool) {\n    const length = sizeOf(product);\n    steps += length;\n    if (length > size) {\n      best = product;\n      size = length;\n    }\n  }\n  return { product: best, steps };\n};\n\n/** This function gives the variant that a URL names: the `variant` parameter of Shopify, or a `sku` or `gtin` parameter. */\nexport const pickVariant = (product: Json, page: string): Json | undefined => {\n  let params: URLSearchParams;\n  try {\n    params = new URL(page).searchParams;\n  } catch {\n    return undefined;\n  }\n  const variantId = params.get(\"variant\");\n  const code = params.get(\"sku\") ?? params.get(\"gtin\");\n  if (variantId === null && code === null) return undefined;\n  const names = (value: unknown): boolean => {\n    if (typeof value !== \"string\" || variantId === null) return false;\n    try {\n      return (\n        new URL(value, page).searchParams.get(\"variant\") === variantId ||\n        value.endsWith(`/${variantId}`)\n      );\n    } catch {\n      return false;\n    }\n  };\n  return objects(product[\"hasVariant\"], PRODUCT_LIMITS.variants).find((variant) => {\n    const offers = objects(variant[\"offers\"], PRODUCT_LIMITS.offers);\n    const codes = [\n      variant[\"sku\"],\n      variant[\"gtin\"],\n      variant[\"gtin13\"],\n      variant[\"gtin12\"],\n      variant[\"productID\"],\n    ]\n      .map(textOf)\n      .filter((one): one is string => one !== null);\n    return (\n      (code !== null && codes.includes(code)) ||\n      [variant[\"@id\"], variant[\"url\"], ...offers.map((offer) => offer[\"url\"])].some(names) ||\n      (variantId !== null && codes.includes(variantId))\n    );\n  });\n};\n\nconst byAmount = (a: Money, b: Money): number => a.amount - b.amount;\n\n/**\n * This function reads the Product data of a page from its JSON-LD records. It is pure, and it sends\n * no request. Thus it also reads a version at a time, or the stored JSON-LD of a document.\n *\n * - The prices are in the first currency of the offers. A price with no currency is not a price.\n * - A list price or a struck-through price is not the price.\n * - A currency must be an ISO 4217 code (`€` and `£` count too). The notes name each other one.\n */\nexport const productOf = (records: readonly Json[], page: string): ProductRead => {\n  const picked = pickProduct(records, page);\n  const product = picked.product;\n  if (product === undefined) {\n    return {\n      found: false,\n      name: null,\n      brand: null,\n      sku: null,\n      gtin: null,\n      price: null,\n      price_to: null,\n      availability: null,\n      availabilities: [],\n      variant: null,\n      seller: null,\n      image: null,\n      notes: [\n        \"no schema.org Product data on the page: a list of products, or a shop that does not publish it\",\n      ],\n      steps: picked.steps,\n    };\n  }\n  const read = emptyOffers();\n  readOffers(product, read, PRODUCT_LIMITS.depth);\n  const currency = read.prices[0]?.currency;\n  const sorted = read.prices.filter((price) => price.currency === currency).sort(byAmount);\n  const low = sorted[0] ?? null;\n  const high = sorted.at(-1) ?? null;\n  const gtin = GTIN_KEYS.map((key) => textOf(product[key])).find((value) => value !== null);\n  const chosen = pickVariant(product, page);\n  let variant: ProductVariant | null = null;\n  let steps = picked.steps + read.steps;\n  if (chosen !== undefined) {\n    const own = emptyOffers();\n    readOffers(chosen, own, 0);\n    steps += own.steps;\n    const prices = own.prices.filter((price) => price.currency === currency).sort(byAmount);\n    variant = {\n      name: nameOf(chosen[\"name\"]),\n      sku: textOf(chosen[\"sku\"]),\n      price: prices[0] ?? null,\n      availability: availabilityOf(own),\n    };\n  }\n  const notes = [\n    read.unknownCurrencies.size > 0\n      ? `a currency that is not an ISO 4217 code: ${[...read.unknownCurrencies].join(\", \")}`\n      : null,\n    read.unstated && sorted.length === 0\n      ? \"the page gives a price with no currency, so the price is not read as money\"\n      : sorted.length === 0\n        ? \"the page names the product and gives no price\"\n        : null,\n    new Set(read.prices.map((price) => price.currency)).size > 1\n      ? `the offers have more than one currency: the prices are in ${currency ?? \"\"}`\n      : null,\n    /[?&](?:variant|sku|gtin)=/.test(page) && chosen === undefined\n      ? \"the URL names a variant that the Product data does not list: the price is the whole range\"\n      : null,\n  ].filter((note): note is string => note !== null);\n  return {\n    found: true,\n    name: nameOf(product[\"name\"]),\n    brand: nameOf(product[\"brand\"]),\n    sku: textOf(product[\"sku\"]),\n    gtin: gtin ?? null,\n    price: low,\n    price_to: high !== null && low !== null && high.amount > low.amount ? high : null,\n    availability: availabilityOf(read),\n    availabilities: [...read.availability],\n    variant,\n    seller: read.sellers.size === 0 ? null : [...read.sellers].join(\", \"),\n    image: imageOf(product[\"image\"]),\n    notes,\n    steps,\n  };\n};\n\n// ── the recipe ──────────────────────────────────────────────────────────────\n\n/** These options control `readProduct`. */\nexport interface ProductOptions {\n  /** The value `auto` (the default) renders once more when the plain page has no Product data. `never` does not render. */\n  readonly render?: \"auto\" | \"never\" | \"always\" | undefined;\n  /** A stored copy younger than this age answers with no request. The default is `24h`. */\n  readonly maxAge?: Duration | undefined;\n  /** These agents get their robots.txt rules applied too, for example `Claude-User`. */\n  readonly onBehalfOf?: readonly string[] | undefined;\n  readonly signal?: AbortSignal | undefined;\n  /** No request starts after this time from the start of the read, for example `\"1m\"`. */\n  readonly budget?: Duration | undefined;\n  readonly scope?: string | undefined;\n  readonly labels?: Readonly<Record<string, string>> | undefined;\n  /** This name connects the captures to the job that asked for them. The default is `product`. */\n  readonly job?: string | undefined;\n  /** This value is true when a person gave this URL directly. It is the only way to read a held-back page. The crawler logs it. */\n  readonly userProvided?: boolean | undefined;\n  /** The value `archive` reads an archived copy of a page that the shop refuses. Its prices are of the date of the copy. */\n  readonly fallback?: \"archive\" | \"none\" | undefined;\n  readonly archiveDespiteRobots?: boolean | undefined;\n}\n\n/** The result of `readProduct`. */\nexport interface ProductResult extends Omit<ProductRead, \"steps\" | \"notes\"> {\n  readonly url: string;\n  /** This value is true when the page says what it sells, in structured data: the Product has a name. */\n  readonly verified: boolean;\n  /**\n   * This value is true when the site refused the crawler. The causes are a 401, a 402 or a 403, a\n   * challenge, a bot check, a stop of the host or robots.txt. The recipe stops there, and the note\n   * says why. With `fallback: \"archive\"`, it stays true when an archived copy answers.\n   */\n  readonly wall: boolean;\n  readonly outcome: string;\n  readonly status: number;\n  readonly rendered: boolean;\n  readonly doc: string | null;\n  /** This id is the capture of the text that the recipe read. A citation names it. */\n  readonly capture: string | null;\n  readonly fetched_at: string | null;\n  readonly captures: readonly string[];\n  readonly from_cache: boolean;\n  /** This value is true when the page asked not to be AI input, so the recipe read nothing from it. */\n  readonly held_back: boolean;\n  /** This value tells that the page is an archived copy, with the archive and the date of the copy. */\n  readonly archived?: Archived | undefined;\n  readonly note: string | null;\n}\n\nconst WALLS: ReadonlySet<string> = new Set([\"blocked\", \"challenge\", \"payment-required\"]);\n\n/** This function tells if the site refused the crawler. */\nconst wallOf = (page: PageResult): boolean =>\n  WALLS.has(page.outcome) ||\n  (page.outcome === \"skipped\" && /^(?:robots\\.txt disallows|host stopped)/.test(page.note ?? \"\")) ||\n  (page.doc === null && /\\bbot check\\b/.test(page.note ?? \"\"));\n\nconst answered = (page: PageResult): boolean =>\n  page.doc !== null &&\n  (page.outcome === \"ok\" || page.outcome === \"not-modified\" || page.archived !== undefined);\n\n/**\n * This function gives the JSON-LD records of a document from its stored body. The index keeps a\n * part of the JSON-LD of a large page only, and a product with many variants can be larger. An\n * archived copy gives the JSON-LD that the index keeps.\n */\nconst recordsOfDoc = async (runtime: CrawlRuntime, doc: Doc): Promise<readonly Json[]> => {\n  const kept = Array.isArray(doc.meta[\"jsonld\"]) ? (doc.meta[\"jsonld\"] as Json[]) : [];\n  if (doc.blob === null || archivedOf(doc.meta) !== undefined) return kept;\n  const body = await runtime.blobs.get(doc.blob);\n  if (body === undefined) return kept;\n  const at = doc.url ?? \"\";\n  const type = doc.rendered\n    ? \"text/html; charset=utf-8\"\n    : (runtime.index.latest(at, \"plain\")?.content_type ?? null);\n  try {\n    return extractPage(decodeBody(body, type), at).jsonld;\n  } catch {\n    return kept;\n  }\n};\n\n/**\n * This function reads a product page. It fetches the page through the crawler: robots.txt, the\n * pace, the stops, the capture log and the rule for a held-back page apply. When the plain page has\n * no Product data, it renders the page once, because some shops write that data with JavaScript.\n *\n * A shop that refuses the crawler gives `wall: true` and a note. The recipe writes nothing but the\n * capture log. `extract` can check each value against the stored page.\n */\nexport const readProduct = async (\n  target: RecipeTarget,\n  url: string,\n  options: ProductOptions = {},\n): Promise<ProductResult> => {\n  const runtime = runtimeOf(target);\n  try {\n    const parsed = new URL(url);\n    if (parsed.protocol !== \"http:\" && parsed.protocol !== \"https:\") throw new TypeError(url);\n  } catch {\n    throw new TypeError(`readProduct needs an http or https URL, not ${JSON.stringify(url)}`);\n  }\n  const maxAge = options.maxAge ?? \"24h\";\n  const job = options.job ?? \"product\";\n  const userProvided = options.userProvided ?? false;\n  const render = options.render ?? \"auto\";\n  const deadline = deadlineOf(runtime, options.budget);\n  const pageOptions = (mode: \"auto\" | \"never\" | \"always\"): PageOptions => ({\n    render: mode,\n    maxAgeMs: maxAge === \"auto\" ? \"auto\" : durationMs(maxAge),\n    onBehalfOf: options.onBehalfOf,\n    job,\n    signal: options.signal,\n    scope: options.scope,\n    labels: options.labels,\n    deadline,\n    fallback: options.fallback,\n    archiveDespiteRobots: options.archiveDespiteRobots,\n  });\n  let page = await fetchPage(runtime, url, pageOptions(render));\n  const notes: string[] = [];\n  const result = (\n    from: PageResult,\n    read: Omit<ProductRead, \"steps\"> | undefined,\n    more: { readonly held_back?: boolean } = {},\n  ): ProductResult => {\n    const all = [from.note, ...notes, ...(read?.notes ?? [])].filter(\n      (part): part is string => part !== null && part !== undefined && part.length > 0,\n    );\n    return {\n      url,\n      found: read?.found ?? false,\n      verified: read?.found === true && read.name !== null,\n      name: read?.name ?? null,\n      brand: read?.brand ?? null,\n      sku: read?.sku ?? null,\n      gtin: read?.gtin ?? null,\n      price: read?.price ?? null,\n      price_to: read?.price_to ?? null,\n      availability: read?.availability ?? null,\n      availabilities: read?.availabilities ?? [],\n      variant: read?.variant ?? null,\n      seller: read?.seller ?? null,\n      image: read?.image ?? null,\n      wall: wallOf(from),\n      outcome: from.outcome,\n      status: from.status,\n      rendered: from.rendered,\n      doc: from.doc,\n      capture: from.capture,\n      fetched_at: from.fetched_at,\n      captures: [...from.captures],\n      from_cache: from.from_cache,\n      held_back: more.held_back ?? false,\n      ...(from.archived === undefined ? {} : { archived: from.archived }),\n      note: all.length > 0 ? [...new Set(all)].join(\"; \") : null,\n    };\n  };\n  if (!answered(page)) {\n    const wall = wallOf(page);\n    notes.push(\n      wall\n        ? `the shop refused the crawler (${page.outcome}): the recipe read nothing, and it does not try a different identity`\n        : `the page gave no document (${page.outcome})`,\n    );\n    return result(page, undefined);\n  }\n  const held = (from: PageResult): Doc | undefined => {\n    const doc = from.doc === null ? undefined : runtime.index.get(from.doc);\n    return doc !== undefined && isHeldBack(doc, userProvided) ? doc : undefined;\n  };\n  if (held(page) !== undefined) {\n    notes.push(HELD_BACK);\n    return result(page, undefined, { held_back: true });\n  }\n  const docOf = (from: PageResult): Doc | undefined =>\n    from.doc === null ? undefined : runtime.index.get(from.doc);\n  let doc = docOf(page);\n  let read = doc === undefined ? undefined : productOf(await recordsOfDoc(runtime, doc), url);\n  // some shops write their Product data with JavaScript: one render before the recipe says that the page has none\n  if (read?.found !== true && !page.rendered && render === \"auto\" && page.archived === undefined) {\n    const rendered = await fetchPage(runtime, url, pageOptions(\"always\"));\n    const shown = docOf(rendered);\n    if (\n      rendered.rendered &&\n      answered(rendered) &&\n      shown !== undefined &&\n      held(rendered) === undefined\n    ) {\n      page = rendered;\n      doc = shown;\n      read = productOf(await recordsOfDoc(runtime, shown), url);\n    } else if (rendered.note !== null && !rendered.rendered) {\n      notes.push(`the render gave nothing more: ${rendered.note}`);\n    }\n  }\n  if (userProvided && doc?.ai_input === \"no\") await recordOverride(runtime, doc, job);\n  return result(page, read);\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAmCA,MAAa,eAaT;CAAE,OAAO;CAAG,UAAU;CAAG,OAAO;CAAG,iBAAiB;CAAI,OAAO;CAAK,YAAY;AAAI;AAIxF,MAAM,6BAAkC,IAAI,IAAI;CAAC;CAAO;CAAK;CAAM;CAAO;CAAM;AAAI,CAAC;;AAGrF,MAAM,WAAW,SACf,KACG,YAAY,CAAC,CACb,UAAU,MAAM,CAAC,CACjB,QAAQ,WAAW,EAAE,CAAC,CACtB,QAAQ,MAAM,OAAO,CAAC,CACtB,QAAQ,oBAAoB,GAAG,CAAC,CAChC,MAAM,KAAK,CAAC,CACZ,QAAQ,SAAS,KAAK,SAAS,KAAK,CAAC,WAAW,IAAI,IAAI,CAAC;;;;;;AAO9D,MAAa,cACX,MACA,SACwB;CACxB,MAAM,QAAQ,QAAQ,IAAI;CAC1B,IAAI,MAAM,WAAW,GAAG,OAAO,KAAA;CAC/B,MAAM,SAAS,IAAI,IAAI,QAAQ,GAAG,KAAK,MAAM,GAAG,KAAK,MAAM,CAAC;CAC5D,MAAM,QAAQ,IAAI,IAAI,KAAK;CAC3B,MAAM,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,QAAQ,SAAS,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC;CAC5D,OAAO,OAAO,IAAI,MAAM,EAAG,KAAK,QAAQ,MAAM,QAAQ;AACxD;;AAKA,MAAM,aAAuD;CAC3D,CAAC,kCAAkC,CAAC;CACpC,CAAC,iCAAiC,CAAC;CACnC,CAAC,8CAA8C,CAAC;CAChD,CAAC,cAAc,CAAC;CAChB,CAAC,iCAAiC,CAAC;AACrC;;AAGA,MAAM,SACJ;;AAGF,MAAM,OAAO;AAEb,MAAM,UAAU,QAAoC;CAClD,IAAI;EACF,OAAO,IAAI,IAAI,GAAG,CAAC,CAAC,SAAS,YAAY,CAAC,CAAC,QAAQ,UAAU,EAAE;CACjE,QAAQ;EACN;CACF;AACF;AAEA,MAAM,eAAe,QAAwB,IAAI,QAAQ,SAAS,EAAE,CAAC,CAAC,QAAQ,OAAO,EAAE;;;;;;AAOvF,MAAa,kBAAkB,OAA4B,SAA6B;CACtF,MAAM,OAAO,OAAO,IAAI;CACxB,MAAM,OAAO,YAAY,IAAI;CAC7B,MAAM,uBAAO,IAAI,IAAY;CAC7B,MAAM,SAAqE,CAAC;CAC5E,KAAK,MAAM,QAAQ,MAAM,MAAM,GAAG,aAAa,KAAK,GAAG;EACrD,IAAI,OAAO,MAAM,SAAS,YAAY,OAAO,KAAK,IAAI,MAAM,QAAQ,KAAK,KAAK,KAAK,IAAI,GACrF;EACF,MAAM,MAAM,YAAY,KAAK,IAAI;EACjC,IAAI,QAAQ,QAAQ,KAAK,IAAI,GAAG,GAAG;EACnC,IAAI,OAAO;EACX,IAAI;GACF,OAAO,IAAI,IAAI,KAAK,IAAI,CAAC,CAAC;EAC5B,QAAQ;GACN;EACF;EACA,MAAM,QAAQ,GAAG,OAAO,KAAK,SAAS,WAAW,KAAK,OAAO,GAAG,GAAG,OAAO,YAAY;EACtF,MAAM,QAAQ,WAAW,QACtB,KAAK,CAAC,SAAS,YAAY,OAAO,QAAQ,KAAK,KAAK,IAAI,SAAS,IAClE,CACF;EACA,IAAI,SAAS,GAAG;EAChB,KAAK,IAAI,GAAG;EACZ,OAAO,KAAK;GAAE;GAAM;EAAM,CAAC;CAC7B;CAEA,OAAO,OAAO,MAAM,GAAG,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC,KAAK,UAAU,MAAM,IAAI;AAC3E;AAuBA,MAAM,eAAe;;AAGrB,MAAM,iBAAiB,GAAU,MAAqB;CACpD,MAAM,MAAM,KAAK,KAAK;CACtB,MAAM,QAAQ,EAAE,MAAM,EAAE,OAAO;CAC/B,MAAM,QAAQ,EAAE,MAAM,EAAE,OAAO;CAC/B,MAAM,IACJ,KAAK,IAAI,OAAO,CAAC,KAAK,IACtB,KAAK,IAAI,EAAE,MAAM,GAAG,IAAI,KAAK,IAAI,EAAE,MAAM,GAAG,IAAI,KAAK,IAAI,OAAO,CAAC,KAAK;CACxE,OAAO,IAAI,eAAe,KAAK,KAAK,KAAK,IAAI,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC;AAC/D;AAEA,MAAM,WAAW,KAAc,QAAoC;CACjE,MAAM,KAAK,OAAO,QAAQ,WAAW,OAAO,WAAW,GAAG,IAAI;CAC9D,MAAM,KAAK,OAAO,QAAQ,WAAW,OAAO,WAAW,GAAG,IAAI;CAC9D,OAAO,OAAO,OAAO,YACnB,OAAO,OAAO,YACd,OAAO,SAAS,EAAE,KAClB,OAAO,SAAS,EAAE,KAClB,KAAK,IAAI,EAAE,KAAK,MAChB,KAAK,IAAI,EAAE,KAAK,MACd;EAAE,KAAK;EAAI,KAAK;CAAG,IACnB,KAAA;AACN;;AAGA,MAAM,+BAAoC,IAAI,IAAI;CAChD;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF,CAAC;;AAGD,MAAM,YACJ,YACiF;CACjF,MAAM,QAAQ,SAAS,QAAQ,MAAM,GAAG,CAAC,CAAC,MAAM,QAAA,CAAS,MAAM,GAAG,GAAG,CAAC;CACtE,MAAM,SAAS,MAAM,MAAM,SAAS,cAAc,KAAK,IAAI,CAAC;CAC5D,IAAI,WAAW,KAAA,GAAW,OAAO,KAAA;CACjC,OAAO;EACL;EACA,OAAO,IAAI,IAAI,MAAM,QAAQ,SAAS,CAAC,MAAM,KAAK,IAAI,KAAK,CAAC,aAAa,IAAI,IAAI,CAAC,CAAC;CACrF;AACF;AAEA,MAAM,eAAe,UAAuC;CAC1D,IAAI,OAAO,UAAU,UAAU,OAAO;CACtC,IAAI,MAAM,QAAQ,KAAK,GAAG,OAAO,YAAY,MAAM,EAAE;CACrD,IAAI,OAAO,UAAU,YAAY,UAAU,MAAM;EAC/C,MAAM,SAAU,MAAkC;EAClD,OAAO,OAAO,WAAW,WAAW,SAAS,KAAA;CAC/C;AAEF;;;;;AAMA,MAAa,mBACX,QACA,aACY;CACZ,MAAM,MAAM,OAAO;CACnB,MAAM,KACJ,OAAO,QAAQ,YAAY,QAAQ,OAC/B,QACG,IAAgC,aAChC,IAAgC,YACnC,IACA,KAAA;CACN,MAAM,OAAO,QAAQ,SAAS,KAAK,SAAS,GAAG;CAC/C,IAAI,OAAO,KAAA,KAAa,SAAS,KAAA,KAAa,cAAc,IAAI,IAAI,KAAK,aAAa,YACpF,OAAO;CACT,MAAM,SAAS,YAAY,OAAO,UAAU;CAC5C,IAAI,WAAW,KAAA,KAAa,SAAS,YAAY,KAAA,GAAW,OAAO;CACnE,MAAM,IAAI,SAAS,MAAM;CACzB,MAAM,IAAI,SAAS,SAAS,OAAO;CACnC,OACE,MAAM,KAAA,KACN,MAAM,KAAA,KACN,EAAE,WAAW,EAAE,UACf,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,MAAM,SAAS,EAAE,MAAM,IAAI,IAAI,CAAC;AAEjD;AAEA,MAAM,WAAW,WACf,OAAO,eAAe,KAAA,KAAa,OAAO,WAAW,KAAA;;AA+DvD,MAAM,cACJ;;;;;AAMF,MAAM,iBACJ;;;;;AAMF,MAAM,UACJ;AAEF,MAAM,UAAU,MAA4B,UAAiC;CAC3E,IAAI,SAAS,UAAU,OAAO;CAC9B,IAAI,SAAS,OAAO,OAAO;CAC3B,MAAM,OAAO,SAAS;CACtB,IAAI,QAAQ,KAAK,IAAI,GAAG,OAAO;CAC/B,IAAI,aAAa,KAAK,IAAI,GAAG,OAAO;CACpC,OAAO,eAAe,KAAK,IAAI,IAAI,IAAI;AACzC;AAEA,MAAM,WACJ,MACA,OACA,OACA,WAQiB;CACjB,MAAM,OAAO,OAAO,MAAM,KAAK;CAC/B,OAAO;EACL;EACA;EACA,UAAU,QAAQ,IAAI,YAAY;EAClC;EACA,OAAO,aAAa,MAAM,IAAI;EAC9B,MAAM,MAAM;EACZ,UAAU,MAAM;EAChB,SAAS,MAAM,YAAY;EAC3B,QAAQ,MAAM,UAAU;EACxB,KAAK,MAAM;EACX,MAAM,OAAO;EACb,KAAK,OAAO;EACZ,KAAK,OAAO;EACZ,SAAS,OAAO;EAChB,YAAY,OAAO;EACnB,GAAI,OAAO,aAAa,KAAA,IAAY,CAAC,IAAI,EAAE,UAAU,OAAO,SAAS;CACvE;AACF;AAEA,MAAM,aAAa,SAAuE;CACxF,MAAM,SAAS,KAAK;CACpB,OAAO,MAAM,QAAQ,MAAM,IACvB,OAAO,QACJ,WACC,WAAW,QAAQ,OAAO,WAAW,YAAY,CAAC,MAAM,QAAQ,MAAM,CAC1E,IACA,CAAC;AACP;AAEA,MAAM,WAAW,SAAwD;CACvE,MAAM,QAAQ,KAAK;CACnB,OAAO,MAAM,QAAQ,KAAK,IACtB,MAAM,QACH,SACC,SAAS,QAAQ,OAAO,SAAS,YAAY,OAAQ,KAAkB,SAAS,QACpF,IACA,CAAC;AACP;;;;;;;;;;AAWA,MAAa,mBACX,QACA,UAA6D,CAAC,MAChD;CACd,IAAI,QAAQ;CACZ,MAAM,QAAkB,CAAC;CACzB,MAAM,WAAW,WAAW,OAAO,IAAI;CACvC,MAAM,QAAQ;EACZ,KAAK,UAAU,YAAY,OAAO;EAClC,KAAK,OAAO,OAAO;EACnB,SAAS,OAAO,WAAW;EAC3B,YAAY,OAAO,cAAc;EACjC,GAAI,aAAa,KAAA,IAAY,CAAC,IAAI,EAAE,SAAS;CAC/C;CACA,MAAM,MAAM,UAAU,OAAO,IAAI;CACjC,SAAS,IAAI;CACb,MAAM,SAAS,IACZ,KAAK,QAAQ,WAAW;EAAE;EAAQ;CAAM,EAAE,CAAC,CAC3C,QAAQ,EAAE,aAAa,QAAQ,MAAM,CAAC,CAAC,MAAM,SAAS,YAAY,KAAK,IAAI,CAAC,CAAC;CAEhF,IAAI,SAAS;CACb,MAAM,SAAS,OAAO,QAAQ,EAAE,aAAa,QAAQ,MAAM,CAAC;CAC5D,IAAI,OAAO,SAAS,GAAG;EACrB,MAAM,WAAW,QAAQ;EACzB,MAAM,OACJ,aAAa,KAAA,IACT,CAAC,IACD,OAAO,QAAQ,EAAE,aAAa,gBAAgB,QAAQ,QAAQ,CAAC;EACrE,IAAI,KAAK,WAAW,GAClB,MAAM,KACJ,aAAa,KAAA,IACT,GAAG,MAAM,OAAO,WAAW,SAAS,OAAO,OAAO,MAAM,EAAE,sDAC1D,GAAG,MAAM,OAAO,WAAW,SAAS,OAAO,OAAO,MAAM,EAAE,qEAChE;EAEF,SAAS,CAAC,GAAG,MAAM,GAAG,OAAO,QAAQ,EAAE,aAAa,CAAC,QAAQ,MAAM,CAAC,CAAC;CACvE;CACA,MAAM,WAA2B,CAAC;CAClC,IAAI,QAAuB;CAC3B,KAAK,MAAM,EAAE,QAAQ,WAAW,QAAQ;EACtC,SAAS;EACT,MAAM,QAAQ,cAAc,MAAM;EAClC,IAAI,UAAU,KAAA,KAAa,SAAS,SAAS,aAAa,iBACxD,SAAS,KAAK,QAAQ,UAAU,OAAO,MAAM;GAAE,GAAG;GAAO,MAAM,UAAU,OAAO,KAAK,EAAE;EAAG,CAAC,CAAC;EAE9F,MAAM,YAAY,OAAO;EACzB,IAAI,UAAU,QAAQ,OAAO,cAAc,YAAY,UAAU,KAAK,CAAC,CAAC,SAAS,GAC/E,QAAQ,UAAU,KAAK,CAAC,CAAC,MAAM,GAAG,GAAG;CACzC;CACA,SAAS,OAAO,KAAK;CACrB,KAAK,MAAM,SAAS,SAAS,OAAO,IAAI,GAAG;EACzC,IAAI,SAAS,UAAU,aAAa,iBAAiB;GACnD,MAAM,KACJ,GAAG,MAAM,OAAO,WAAW,mBAAmB,OAAO,aAAa,eAAe,EAAE,kCACrF;GACA;EACF;EACA,SAAS,KAAK,QAAQ,QAAQ,OAAO,MAAM,OAAO;GAAE,GAAG;GAAO,MAAM;EAAK,CAAC,CAAC;CAC7E;CACA,MAAM,QAAqB,CAAC;CAC5B,KAAK,MAAM,QAAQ,QAAQ,OAAO,IAAI,CAAC,CAAC,MAAM,GAAG,aAAa,KAAK,GAAG;EACpE,SAAS;EACT,IAAI,MAAM,UAAU,aAAa,OAAO;EACxC,MAAM,OAAO,OAAO,KAAK,SAAS,WAAW,KAAK,KAAK,MAAM,GAAG,GAAG,IAAI;EACvE,MAAM,OAAO,OAAO,KAAK,IAAI;EAC7B,IAAI,SAAS,KAAA,KAAa,OAAO,KAAK,IAAI,KAAK,CAAC,QAAQ,KAAK,GAAG,KAAK,GAAG,KAAK,MAAM,GAAG;EACtF,IAAI,MAAM,MAAM,SAAS,KAAK,QAAQ,KAAK,IAAI,GAAG;EAClD,MAAM,KAAK;GAAE,KAAK,KAAK;GAAM;EAAK,CAAC;CACrC;CACA,OAAO;EAAE;EAAU;EAAO;EAAO;EAAO;CAAM;AAChD;AAyFA,MAAMA,cAAY,SAChB,KAAK,YAAY,QAAQ,KAAK,YAAY,kBAAkB,KAAK,aAAa,KAAA;;;;;;;;;;;AAYhF,MAAa,YAAY,OACvB,QACA,KACA,UAAwB,CAAC,MACA;CACzB,MAAM,UAAU,UAAU,MAAM;CAChC,MAAM,QAAQ,QAAQ,SAAS,aAAa;CAC5C,IAAI,CAAC,OAAO,UAAU,KAAK,KAAK,QAAQ,KAAK,QAAQ,aAAa,UAChE,MAAM,IAAI,WACR,0CAA0C,OAAO,aAAa,QAAQ,EAAE,QAAQ,OAAO,KAAK,GAC9F;CAEF,IAAI;CACJ,IAAI;EACF,OAAO,IAAI,IAAI,GAAG;CACpB,QAAQ;EACN,MAAM,IAAI,UAAU,0CAA0C,KAAK,UAAU,GAAG,GAAG;CACrF;CACA,IAAI,KAAK,aAAa,WAAW,KAAK,aAAa,UACjD,MAAM,IAAI,UAAU,6CAA6C,KAAK;CACxE,MAAM,SAAS,QAAQ,UAAU;CACjC,MAAM,MAAM,QAAQ,OAAO;CAC3B,MAAM,eAAe,QAAQ,gBAAgB;CAC7C,MAAM,cAA2B;EAC/B,QAAQ,QAAQ,UAAU;EAC1B,UAAU,WAAW,SAAS,SAAS,WAAW,MAAM;EACxD,YAAY,QAAQ;EACpB;EACA,QAAQ,QAAQ;EAChB,OAAO,QAAQ;EACf,QAAQ,QAAQ;EAChB,UAAU,WAAW,SAAS,QAAQ,MAAM;EAC5C,UAAU,QAAQ;EAClB,sBAAsB,QAAQ;CAChC;CACA,MAAM,QAAkB,CAAC;CACzB,MAAM,WAA2B,CAAC;CAClC,MAAM,QAAqB,CAAC;CAC5B,MAAM,QAAqB,CAAC;CAC5B,MAAM,2BAAW,IAAI,IAAY;CACjC,IAAI,QAAuB;CAC3B,IAAI,WAAW;CAEf,IAAI,QAAQ,QAAQ,KAAA,GAAW;EAC7B,MAAM,MAAgB,OAAO,QAAQ,QAAQ,WAAW,EAAE,OAAO,QAAQ,IAAI,IAAI,QAAQ;EACzF,MAAM,QAAQ,OAAO,IAAI,UAAU,WAAW,YAAY,IAAI,OAAO,KAAK,IAAI,KAAA;EAC9E,IAAI,UAAU,KAAA,GACZ,MAAM,KACJ,2CAA2C,KAAK,UAAU,OAAO,IAAI,KAAK,CAAC,CAAC,MAAM,GAAG,GAAG,CAAC,GAC3F;OACK;GACL,SAAS,KACP,QAAQ,OAAO,OAAO,MAAM;IAC1B,KAAK,IAAI,OAAO;IAChB,KAAK,IAAI,OAAO;IAChB,SAAS,IAAI,WAAW;IACxB,YAAY,IAAI,cAAc;IAC9B,MAAM;GACR,CAAC,CACH;GACA,IAAI,OAAO,IAAI,YAAY,UAAU,SAAS,IAAI,IAAI,OAAO;EAC/D;CACF;;CAGA,MAAM,WAAW,OAAO,YAA8C;EACpE,MAAM,OAAO,MAAM,UAAU,SAAS,SAAS,WAAW;EAC1D,MAAM,MAAM,KAAK,QAAQ,OAAO,KAAA,IAAY,QAAQ,MAAM,IAAI,KAAK,GAAG;EACtE,MAAM,OAAO,QAAQ,KAAA,KAAa,WAAW,KAAK,YAAY;EAC9D,MAAM,KAAK;GACT,KAAK;GACL,KAAK,KAAK;GACV,SAAS,KAAK;GACd,QAAQ,KAAK;GACb,UAAU,KAAK;GACf,SAAS,KAAK;GACd,YAAY,KAAK;GACjB,YAAY,KAAK;GACjB,WAAW;GACX,GAAI,KAAK,aAAa,KAAA,IAAY,CAAC,IAAI,EAAE,UAAU,KAAK,SAAS;GACjE,MAAM,KAAK;EACb,CAAC;EACD,IAAI,CAACA,WAAS,IAAI,GAChB,MAAM,KAAK,GAAG,QAAQ,IAAI,KAAK,UAAU,KAAK,SAAS,OAAO,KAAK,KAAK,KAAK,KAAK,IAAI;EAExF,IAAI,QAAQ,KAAA,GAAW,OAAO,KAAA;EAC9B,IAAI,MAAM;GACR,WAAW;GACX;EACF;EACA,IAAI,IAAI,aAAa,MAAM,MAAM,eAAe,SAAS,KAAK,GAAG;EACjE,SAAS,IAAI,IAAI,OAAO;EACxB,OAAO;CACT;CAEA,MAAM,WAAW,QAAmB;EAClC,MAAM,OAAO,gBAAgB,KAAK,EAAE,UAAU,QAAQ,SAAS,CAAC;EAChE,SAAS,KAAK,GAAG,KAAK,QAAQ;EAC9B,MAAM,KAAK,GAAG,KAAK,KAAK;EACxB,UAAU,KAAK;EACf,KAAK,MAAM,QAAQ,KAAK,OACtB,IAAI,MAAM,SAAS,aAAa,SAAS,CAAC,MAAM,MAAM,UAAU,MAAM,QAAQ,KAAK,GAAG,GACpF,MAAM,KAAK,IAAI;CAErB;CAEA,IAAI,UAAyB;CAC7B,IAAI,mBAAmC;CACvC,MAAM,OAAO,MAAM,SAAS,KAAK,IAAI;CACrC,IAAI,SAAS,KAAA,GAAW;EACtB,UAAU,WAAW,KAAK,IAAI,CAAC,EAAE,YAAY,KAAK,OAAO,KAAK;EAC9D,IAAI,QAAQ,SAAS,KAAA,GAAW;GAC9B,mBAAmB,WAAW,QAAQ,MAAM,IAAI,KAAK;GACrD,IAAI,qBAAqB,OACvB,MAAM,KACJ,GAAG,QAAQ,iBAAiB,QAAQ,KAAK,oDAC3C;EAEJ;EACA,IAAI,qBAAqB,SAAS,QAAQ,gBAAgB,MACxD,MAAM,KAAK,gFAAgF;OACtF;GACL,QAAQ,IAAI;GACZ,KAAK,MAAM,QAAQ,eAAe,QAAQ,KAAK,IAAI,GAAG,OAAO,CAAC,CAAC,MAAM,GAAG,KAAK,GAAG;IAC9E,IAAI,QAAQ,QAAQ,YAAY,MAAM;IACtC,MAAM,MAAM,MAAM,SAAS,KAAK,IAAI;IACpC,IAAI,QAAQ,KAAA,GAAW,QAAQ,GAAG;GACpC;EACF;CACF;CACA,MAAM,QAAQ,YAAY,QAAQ,OAAO,OAAO,MAAM,OAAO,KAAK,IAAI,IAAI,UAAU;CACpF,IAAI,UAAU,MAAM,MAAM,KAAK,GAAG,KAAK,KAAK,eAAe,OAAO;CAClE,IAAI,UAAU,MAAM,KAAK,SAAS;CAGlC,MAAM,0BAAU,IAAI,IAA0B;CAC9C,KAAK,MAAM,OAAO,UAAU;EAC1B,MAAM,MAAM,GAAG,IAAI,KAAK,GAAG,IAAI,SAAS,GAAG,GAAG,IAAI,MAAM,GAAG,IAAI,UAAU;EACzE,IAAI,CAAC,QAAQ,IAAI,GAAG,GAAG,QAAQ,IAAI,KAAK,GAAG;CAC7C;CAEA,MAAM,SAAS,CAAC,GAAG,QAAQ,OAAO,CAAC,CAAC,CAAC,MAClC,GAAG,MAAM,EAAE,OAAO,EAAE,QAAQ,OAAO,EAAE,QAAQ,IAAI,OAAO,EAAE,QAAQ,CACrE;CACA,MAAM,2BAAW,IAAI,IAAS;CAC9B,MAAM,QAAQ,OAAO,QAAQ,QAAQ,IAAI,QAAQ,CAAC;CAClD,KAAK,IAAI,IAAI,GAAG,IAAI,MAAM,QAAQ,KAAK,GACrC,KAAK,IAAI,IAAI,IAAI,GAAG,IAAI,MAAM,QAAQ,KAAK,GACzC,KAAK,MAAM,OAAO,cAAc,MAAM,EAAE,CAAE,MAAM,MAAM,EAAE,CAAE,IAAI,GAAG,SAAS,IAAI,GAAG;CAGrF,MAAM,OAAO,OAAO,MAAM,QAAQ,IAAI,aAAa,SAAS,KAAK;CACjE,MAAM,WACJ,OAAO,MAAM,QAAQ,IAAI,SAAS,SAAS,IAAI,aAAa,aAAa,CAAC,IAAI,QAAQ,KAAK;CAC7F,OAAO;EACL,KAAK,KAAK;EACV,MAAM;EACN;EACA,aAAa;EACb;EACA,UAAU;EACV;EACA,WAAW;EACX,UAAU,KAAK,QAAQ,QAAQ,SAAS,IAAI,GAAG,CAAC;EAChD;EACA;EACA,UAAU,CAAC,GAAG,QAAQ;EACtB,WAAW;EACX,MAAM,MAAM,SAAS,IAAI,MAAM,KAAK,IAAI,IAAI;CAC9C;AACF;;;;ACpvBA,MAAa,iBAWT;CAAE,SAAS;CAAK,QAAQ;CAAK,UAAU;CAAK,OAAO;CAAG,YAAY;AAAG;AA+CzE,MAAM,gBAAgB;;AAGtB,MAAM,YAAY;AAElB,MAAM,YAAY;CAAC;CAAU;CAAU;CAAU;CAAS;AAAM;;AAGhE,MAAM,UAA4C;CAAE,KAAK;CAAO,KAAK;AAAM;AAE3E,IAAI;;AAEJ,MAAM,cAAc,SAA0B;CAC5C,IAAI,CAAC,aAAa,KAAK,IAAI,GAAG,OAAO;CACrC,IAAI,oBAAoB,KAAA,GACtB,IAAI;EACF,kBAAkB,IAAI,IAAI,KAAK,kBAAkB,UAAU,CAAC;CAC9D,QAAQ;EAEN,kCAAkB,IAAI,IAAI;CAC5B;CAEF,OAAO,gBAAgB,SAAS,KAAK,gBAAgB,IAAI,IAAI;AAC/D;;AAGA,MAAM,kBAAkB,aAAqD;CAC3E,IAAI,aAAa,KAAA,GAAW,OAAO,KAAA;CACnC,IAAI;EACF,OAAO,IAAI,KAAK,aAAa,MAAM;GAAE,OAAO;GAAY;EAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAClF;CACL,QAAQ;EACN;CACF;AACF;;;;;;;;AASA,MAAa,cAAc,OAAgB,aAA0C;CACnF,IAAI,OAAO,UAAU,UAAU,OAAO,OAAO,SAAS,KAAK,KAAK,QAAQ,IAAI,QAAQ,KAAA;CACpF,IAAI,OAAO,UAAU,YAAY,MAAM,SAAS,eAAe,YAAY,OAAO,KAAA;CAElF,MAAM,QAAQ,yCAAyC,KAAK,MAAM,KAAK,CAAC;CACxE,IAAI,UAAU,MAAM,OAAO,KAAA;CAC3B,IAAI,SAAS,MAAM,EAAE,CAAE,QAAQ,WAAW,EAAE;CAC5C,MAAM,OAAO,KAAK,IAAI,OAAO,YAAY,GAAG,GAAG,OAAO,YAAY,GAAG,CAAC;CACtE,IAAI,SAAS,IAAI;EAEf,MAAM,SAAS,IADG,IAAI,OAAO,MAAM,OAAO,CACvB,CAAC,CAAC,SAAS,KAAK,+BAA+B,KAAK,MAAM;EAC7E,MAAM,eAAe,UAAU,eAAe,QAAQ,MAAM,KAAK,eAAe,KAAK,MAAM;EAC3F,SACE,UAAU,CAAC,eACP,OAAO,QAAQ,SAAS,EAAE,IAC1B,GAAG,OAAO,MAAM,GAAG,IAAI,CAAC,CAAC,QAAQ,SAAS,EAAE,EAAE,GAAG,OAAO,MAAM,OAAO,CAAC;CAC9E;CACA,MAAM,SAAS,OAAO,MAAM;CAC5B,OAAO,OAAO,SAAS,MAAM,KAAK,SAAS,IAAI,SAAS,KAAA;AAC1D;AAEA,MAAM,QAAQ,OAAgB,WAC3B,MAAM,QAAQ,KAAK,IAAI,QAAQ,UAAU,KAAA,KAAa,UAAU,OAAO,CAAC,IAAI,CAAC,KAAK,EAAA,CAAG,MACpF,GACA,KACF;AAEF,MAAM,WAAW,OAAgB,UAC/B,KAAK,OAAO,KAAK,CAAC,CAAC,QAChB,SAAuB,OAAO,SAAS,YAAY,SAAS,QAAQ,CAAC,MAAM,QAAQ,IAAI,CAC1F;;AAGF,MAAM,UAAU,UAAkC;CAChD,KAAK,MAAM,QAAQ,KAAK,OAAO,EAAE,GAAG;EAClC,IAAI,OAAO,SAAS,YAAY,KAAK,KAAK,CAAC,CAAC,SAAS,GAAG,OAAO,KAAK,KAAK,CAAC,CAAC,MAAM,GAAG,GAAG;EACvF,IAAI,OAAO,SAAS,YAAY,SAAS,MAAM;GAC7C,MAAM,QAAS,KAAc;GAC7B,IAAI,OAAO,UAAU,YAAY,MAAM,KAAK,CAAC,CAAC,SAAS,GAAG,OAAO,MAAM,KAAK,CAAC,CAAC,MAAM,GAAG,GAAG;EAC5F;CACF;CACA,OAAO;AACT;AAEA,MAAM,UAAU,UACd,OAAO,UAAU,YAAY,MAAM,KAAK,CAAC,CAAC,SAAS,IAC/C,MAAM,KAAK,CAAC,CAAC,MAAM,GAAG,GAAG,IACzB,OAAO,UAAU,YAAY,OAAO,SAAS,KAAK,IAChD,OAAO,KAAK,IACZ;AAER,MAAM,WAAW,UAAkC;CACjD,KAAK,MAAM,QAAQ,KAAK,OAAO,EAAE,GAAG;EAClC,IAAI,OAAO,SAAS,YAAY,YAAY,KAAK,IAAI,GAAG,OAAO;EAC/D,MAAM,MAAM,OAAO,SAAS,YAAY,SAAS,OAAQ,KAAc,SAAS,KAAA;EAChF,IAAI,OAAO,QAAQ,YAAY,YAAY,KAAK,GAAG,GAAG,OAAO;CAC/D;CACA,OAAO;AACT;AAYA,MAAM,qBAA6B;CACjC,QAAQ,CAAC;CACT,mCAAmB,IAAI,IAAI;CAC3B,8BAAc,IAAI,IAAI;CACtB,yBAAS,IAAI,IAAI;CACjB,UAAU;CACV,OAAO;AACT;;AAGA,MAAM,cAAc,SAAe,MAAc,UAAwB;CACvE,MAAM,SAAS,OAAgB,aAA4B;EACzD,MAAM,UAAU,OAAO,aAAa,WAAW,SAAS,KAAK,IAAI;EACjE,MAAM,OAAO,QAAQ,YAAY,QAAQ,YAAY;EACrD,MAAM,SAAS,WAAW,OAAO,KAAK,SAAS,IAAI,OAAO,KAAA,CAAS;EACnE,IAAI,WAAW,KAAA,GAAW;EAC1B,IAAI,KAAK,WAAW,GAAG;GACrB,KAAK,WAAW;GAChB;EACF;EACA,IAAI,CAAC,WAAW,IAAI,GAAG;GACrB,KAAK,kBAAkB,IAAI,QAAQ,MAAM,GAAG,EAAE,CAAC;GAC/C;EACF;EACA,KAAK,OAAO,KAAK;GACf;GACA,UAAU;GACV,KAAK,OAAO,KAAK,CAAC,CAAC,MAAM,GAAG,eAAe,UAAU;EACvD,CAAC;CACH;CACA,MAAM,SAAS,GAAS,UAAwB;EAC9C,KAAK,SAAS;EACd,MAAM,OAAO,QAAQ,EAAE,uBAAuB,eAAe,MAAM,CAAC,CAAC,MAAM,UAAU;GACnF,MAAM,OAAO,MAAM;GACnB,OAAO,EAAE,OAAO,SAAS,YAAY,UAAU,KAAK,IAAI;EAC1D,CAAC;EACD,MAAM,WAAW,EAAE,oBAAoB,OAAO;EAC9C,MAAM,EAAE,YAAY,OAAO,UAAU,QAAQ;EAC7C,MAAM,EAAE,aAAa,QAAQ;EAC7B,MAAM,EAAE,cAAc,QAAQ;EAC9B,MAAM,eACJ,OAAO,EAAE,oBAAoB,WACzB,EAAE,eAAe,CACd,KAAK,CAAC,CACN,QAAQ,YAAY,EAAE,CAAC,CACvB,MAAM,GAAG,EAAE,IACd,KAAA;EACN,IAAI,iBAAiB,KAAA,KAAa,aAAa,SAAS,GAAG,KAAK,aAAa,IAAI,YAAY;EAC7F,MAAM,SAAS,OAAO,EAAE,SAAS;EACjC,IAAI,WAAW,MAAM,KAAK,QAAQ,IAAI,MAAM;EAE5C,IAAI,QAAQ,eAAe,OACzB,KAAK,MAAM,SAAS,QAAQ,EAAE,WAAW,eAAe,MAAM,GAAG,MAAM,OAAO,QAAQ,CAAC;CAE3F;CACA,KAAK,MAAM,KAAK,QAAQ,QAAQ,WAAW,eAAe,MAAM,GAAG,MAAM,GAAG,CAAC;CAC7E,IAAI,SAAS,GAAG;CAChB,KAAK,MAAM,WAAW,QAAQ,QAAQ,eAAe,eAAe,QAAQ,GAAG;EAC7E,KAAK,SAAS;EACd,WAAW,SAAS,MAAM,QAAQ,CAAC;CACrC;AACF;AAEA,MAAM,kBAAkB,SACtB,KAAK,aAAa,SAAS,IACvB,OACA,KAAK,aAAa,SAAS,KAAK,CAAC,KAAK,aAAa,IAAI,SAAS,IAC9D,CAAC,GAAG,KAAK,YAAY,CAAC,CAAC,KACvB;AAER,MAAM,WAAW,OAAe,SAAqC;CAEnE,IAAI,MAAM,WAAW,GAAG,GAAG,OAAO,KAAA;CAClC,IAAI;EACF,MAAM,MAAM,IAAI,IAAI,OAAO,IAAI;EAC/B,OAAO,GAAG,IAAI,SAAS,YAAY,CAAC,CAAC,QAAQ,UAAU,EAAE,IAAI,IAAI,SAAS,QAAQ,OAAO,EAAE;CAC7F,QAAQ;EACN;CACF;AACF;;AAGA,MAAM,UAAU,WAAyB;CACvC,IAAI;EACF,OAAO,KAAK,UAAU,MAAM,CAAC,CAAC;CAChC,QAAQ;EACN,OAAO;CACT;AACF;;;;;;;;;;;AAYA,MAAa,eACX,SACA,SACmE;CACnE,IAAI,QAAQ;CACZ,MAAM,WAAmB,CAAC;CAC1B,KAAK,MAAM,UAAU,QAAQ,MAAM,GAAG,eAAe,OAAO,GAAG;EAC7D,SAAS;EACT,IAAI,QAAQ,MAAiC,CAAC,CAAC,MAAM,SAAS,cAAc,KAAK,IAAI,CAAC,GACpF,SAAS,KAAK,MAAM;EACtB,KAAK,MAAM,SAAS,QAAQ,OAAO,eAAe,EAAE,GAAG;GACrD,SAAS;GACT,IAAI,QAAQ,KAAgC,CAAC,CAAC,MAAM,SAAS,cAAc,KAAK,IAAI,CAAC,GACnF,SAAS,KAAK,KAAK;EACvB;CACF;CACA,MAAM,OAAO,QAAQ,MAAM,IAAI;CAC/B,MAAM,MAAM,SAAS,MAAM,YACzB,CAAC,QAAQ,QAAQ,QAAQ,MAAM,CAAC,CAAC,MAC9B,UAAU,OAAO,UAAU,YAAY,SAAS,KAAA,KAAa,QAAQ,OAAO,IAAI,MAAM,IACzF,CACF;CACA,IAAI,QAAQ,KAAA,GAAW,OAAO;EAAE,SAAS;EAAK;CAAM;CACpD,MAAM,UAAU,SAAS,QACtB,YAAY,KAAK,QAAQ,WAAW,CAAC,CAAC,CAAC,SAAS,KAAK,KAAK,QAAQ,eAAe,CAAC,CAAC,CAAC,SAAS,CAChG;CACA,MAAM,OAAO,QAAQ,SAAS,IAAI,UAAU;CAC5C,IAAI;CACJ,IAAI,OAAO;CACX,KAAK,MAAM,WAAW,MAAM;EAC1B,MAAM,SAAS,OAAO,OAAO;EAC7B,SAAS;EACT,IAAI,SAAS,MAAM;GACjB,OAAO;GACP,OAAO;EACT;CACF;CACA,OAAO;EAAE,SAAS;EAAM;CAAM;AAChC;;AAGA,MAAa,eAAe,SAAe,SAAmC;CAC5E,IAAI;CACJ,IAAI;EACF,SAAS,IAAI,IAAI,IAAI,CAAC,CAAC;CACzB,QAAQ;EACN;CACF;CACA,MAAM,YAAY,OAAO,IAAI,SAAS;CACtC,MAAM,OAAO,OAAO,IAAI,KAAK,KAAK,OAAO,IAAI,MAAM;CACnD,IAAI,cAAc,QAAQ,SAAS,MAAM,OAAO,KAAA;CAChD,MAAM,SAAS,UAA4B;EACzC,IAAI,OAAO,UAAU,YAAY,cAAc,MAAM,OAAO;EAC5D,IAAI;GACF,OACE,IAAI,IAAI,OAAO,IAAI,CAAC,CAAC,aAAa,IAAI,SAAS,MAAM,aACrD,MAAM,SAAS,IAAI,WAAW;EAElC,QAAQ;GACN,OAAO;EACT;CACF;CACA,OAAO,QAAQ,QAAQ,eAAe,eAAe,QAAQ,CAAC,CAAC,MAAM,YAAY;EAC/E,MAAM,SAAS,QAAQ,QAAQ,WAAW,eAAe,MAAM;EAC/D,MAAM,QAAQ;GACZ,QAAQ;GACR,QAAQ;GACR,QAAQ;GACR,QAAQ;GACR,QAAQ;EACV,CAAC,CACE,IAAI,MAAM,CAAC,CACX,QAAQ,QAAuB,QAAQ,IAAI;EAC9C,OACG,SAAS,QAAQ,MAAM,SAAS,IAAI,KACrC;GAAC,QAAQ;GAAQ,QAAQ;GAAQ,GAAG,OAAO,KAAK,UAAU,MAAM,MAAM;EAAC,CAAC,CAAC,KAAK,KAAK,KAClF,cAAc,QAAQ,MAAM,SAAS,SAAS;CAEnD,CAAC;AACH;AAEA,MAAM,YAAY,GAAU,MAAqB,EAAE,SAAS,EAAE;;;;;;;;;AAU9D,MAAa,aAAa,SAA0B,SAA8B;CAChF,MAAM,SAAS,YAAY,SAAS,IAAI;CACxC,MAAM,UAAU,OAAO;CACvB,IAAI,YAAY,KAAA,GACd,OAAO;EACL,OAAO;EACP,MAAM;EACN,OAAO;EACP,KAAK;EACL,MAAM;EACN,OAAO;EACP,UAAU;EACV,cAAc;EACd,gBAAgB,CAAC;EACjB,SAAS;EACT,QAAQ;EACR,OAAO;EACP,OAAO,CACL,gGACF;EACA,OAAO,OAAO;CAChB;CAEF,MAAM,OAAO,YAAY;CACzB,WAAW,SAAS,MAAM,eAAe,KAAK;CAC9C,MAAM,WAAW,KAAK,OAAO,EAAE,EAAE;CACjC,MAAM,SAAS,KAAK,OAAO,QAAQ,UAAU,MAAM,aAAa,QAAQ,CAAC,CAAC,KAAK,QAAQ;CACvF,MAAM,MAAM,OAAO,MAAM;CACzB,MAAM,OAAO,OAAO,GAAG,EAAE,KAAK;CAC9B,MAAM,OAAO,UAAU,KAAK,QAAQ,OAAO,QAAQ,IAAI,CAAC,CAAC,CAAC,MAAM,UAAU,UAAU,IAAI;CACxF,MAAM,SAAS,YAAY,SAAS,IAAI;CACxC,IAAI,UAAiC;CACrC,IAAI,QAAQ,OAAO,QAAQ,KAAK;CAChC,IAAI,WAAW,KAAA,GAAW;EACxB,MAAM,MAAM,YAAY;EACxB,WAAW,QAAQ,KAAK,CAAC;EACzB,SAAS,IAAI;EACb,MAAM,SAAS,IAAI,OAAO,QAAQ,UAAU,MAAM,aAAa,QAAQ,CAAC,CAAC,KAAK,QAAQ;EACtF,UAAU;GACR,MAAM,OAAO,OAAO,OAAO;GAC3B,KAAK,OAAO,OAAO,MAAM;GACzB,OAAO,OAAO,MAAM;GACpB,cAAc,eAAe,GAAG;EAClC;CACF;CACA,MAAM,QAAQ;EACZ,KAAK,kBAAkB,OAAO,IAC1B,4CAA4C,CAAC,GAAG,KAAK,iBAAiB,CAAC,CAAC,KAAK,IAAI,MACjF;EACJ,KAAK,YAAY,OAAO,WAAW,IAC/B,+EACA,OAAO,WAAW,IAChB,kDACA;EACN,IAAI,IAAI,KAAK,OAAO,KAAK,UAAU,MAAM,QAAQ,CAAC,CAAC,CAAC,OAAO,IACvD,6DAA6D,YAAY,OACzE;EACJ,4BAA4B,KAAK,IAAI,KAAK,WAAW,KAAA,IACjD,8FACA;CACN,CAAC,CAAC,QAAQ,SAAyB,SAAS,IAAI;CAChD,OAAO;EACL,OAAO;EACP,MAAM,OAAO,QAAQ,OAAO;EAC5B,OAAO,OAAO,QAAQ,QAAQ;EAC9B,KAAK,OAAO,QAAQ,MAAM;EAC1B,MAAM,QAAQ;EACd,OAAO;EACP,UAAU,SAAS,QAAQ,QAAQ,QAAQ,KAAK,SAAS,IAAI,SAAS,OAAO;EAC7E,cAAc,eAAe,IAAI;EACjC,gBAAgB,CAAC,GAAG,KAAK,YAAY;EACrC;EACA,QAAQ,KAAK,QAAQ,SAAS,IAAI,OAAO,CAAC,GAAG,KAAK,OAAO,CAAC,CAAC,KAAK,IAAI;EACpE,OAAO,QAAQ,QAAQ,QAAQ;EAC/B;EACA;CACF;AACF;AAqDA,MAAM,wBAA6B,IAAI,IAAI;CAAC;CAAW;CAAa;AAAkB,CAAC;;AAGvF,MAAM,UAAU,SACd,MAAM,IAAI,KAAK,OAAO,KACrB,KAAK,YAAY,aAAa,0CAA0C,KAAK,KAAK,QAAQ,EAAE,KAC5F,KAAK,QAAQ,QAAQ,gBAAgB,KAAK,KAAK,QAAQ,EAAE;AAE5D,MAAM,YAAY,SAChB,KAAK,QAAQ,SACZ,KAAK,YAAY,QAAQ,KAAK,YAAY,kBAAkB,KAAK,aAAa,KAAA;;;;;;AAOjF,MAAM,eAAe,OAAO,SAAuB,QAAuC;CACxF,MAAM,OAAO,MAAM,QAAQ,IAAI,KAAK,SAAS,IAAK,IAAI,KAAK,YAAuB,CAAC;CACnF,IAAI,IAAI,SAAS,QAAQ,WAAW,IAAI,IAAI,MAAM,KAAA,GAAW,OAAO;CACpE,MAAM,OAAO,MAAM,QAAQ,MAAM,IAAI,IAAI,IAAI;CAC7C,IAAI,SAAS,KAAA,GAAW,OAAO;CAC/B,MAAM,KAAK,IAAI,OAAO;CACtB,MAAM,OAAO,IAAI,WACb,6BACC,QAAQ,MAAM,OAAO,IAAI,OAAO,CAAC,EAAE,gBAAgB;CACxD,IAAI;EACF,OAAO,YAAY,WAAW,MAAM,IAAI,GAAG,EAAE,CAAC,CAAC;CACjD,QAAQ;EACN,OAAO;CACT;AACF;;;;;;;;;AAUA,MAAa,cAAc,OACzB,QACA,KACA,UAA0B,CAAC,MACA;CAC3B,MAAM,UAAU,UAAU,MAAM;CAChC,IAAI;EACF,MAAM,SAAS,IAAI,IAAI,GAAG;EAC1B,IAAI,OAAO,aAAa,WAAW,OAAO,aAAa,UAAU,MAAM,IAAI,UAAU,GAAG;CAC1F,QAAQ;EACN,MAAM,IAAI,UAAU,+CAA+C,KAAK,UAAU,GAAG,GAAG;CAC1F;CACA,MAAM,SAAS,QAAQ,UAAU;CACjC,MAAM,MAAM,QAAQ,OAAO;CAC3B,MAAM,eAAe,QAAQ,gBAAgB;CAC7C,MAAM,SAAS,QAAQ,UAAU;CACjC,MAAM,WAAW,WAAW,SAAS,QAAQ,MAAM;CACnD,MAAM,eAAe,UAAoD;EACvE,QAAQ;EACR,UAAU,WAAW,SAAS,SAAS,WAAW,MAAM;EACxD,YAAY,QAAQ;EACpB;EACA,QAAQ,QAAQ;EAChB,OAAO,QAAQ;EACf,QAAQ,QAAQ;EAChB;EACA,UAAU,QAAQ;EAClB,sBAAsB,QAAQ;CAChC;CACA,IAAI,OAAO,MAAM,UAAU,SAAS,KAAK,YAAY,MAAM,CAAC;CAC5D,MAAM,QAAkB,CAAC;CACzB,MAAM,UACJ,MACA,MACA,OAAyC,CAAC,MACxB;EAClB,MAAM,MAAM;GAAC,KAAK;GAAM,GAAG;GAAO,GAAI,MAAM,SAAS,CAAC;EAAE,CAAC,CAAC,QACvD,SAAyB,SAAS,QAAQ,SAAS,KAAA,KAAa,KAAK,SAAS,CACjF;EACA,OAAO;GACL;GACA,OAAO,MAAM,SAAS;GACtB,UAAU,MAAM,UAAU,QAAQ,KAAK,SAAS;GAChD,MAAM,MAAM,QAAQ;GACpB,OAAO,MAAM,SAAS;GACtB,KAAK,MAAM,OAAO;GAClB,MAAM,MAAM,QAAQ;GACpB,OAAO,MAAM,SAAS;GACtB,UAAU,MAAM,YAAY;GAC5B,cAAc,MAAM,gBAAgB;GACpC,gBAAgB,MAAM,kBAAkB,CAAC;GACzC,SAAS,MAAM,WAAW;GAC1B,QAAQ,MAAM,UAAU;GACxB,OAAO,MAAM,SAAS;GACtB,MAAM,OAAO,IAAI;GACjB,SAAS,KAAK;GACd,QAAQ,KAAK;GACb,UAAU,KAAK;GACf,KAAK,KAAK;GACV,SAAS,KAAK;GACd,YAAY,KAAK;GACjB,UAAU,CAAC,GAAG,KAAK,QAAQ;GAC3B,YAAY,KAAK;GACjB,WAAW,KAAK,aAAa;GAC7B,GAAI,KAAK,aAAa,KAAA,IAAY,CAAC,IAAI,EAAE,UAAU,KAAK,SAAS;GACjE,MAAM,IAAI,SAAS,IAAI,CAAC,GAAG,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI;EACxD;CACF;CACA,IAAI,CAAC,SAAS,IAAI,GAAG;EACnB,MAAM,OAAO,OAAO,IAAI;EACxB,MAAM,KACJ,OACI,iCAAiC,KAAK,QAAQ,wEAC9C,8BAA8B,KAAK,QAAQ,EACjD;EACA,OAAO,OAAO,MAAM,KAAA,CAAS;CAC/B;CACA,MAAM,QAAQ,SAAsC;EAClD,MAAM,MAAM,KAAK,QAAQ,OAAO,KAAA,IAAY,QAAQ,MAAM,IAAI,KAAK,GAAG;EACtE,OAAO,QAAQ,KAAA,KAAa,WAAW,KAAK,YAAY,IAAI,MAAM,KAAA;CACpE;CACA,IAAI,KAAK,IAAI,MAAM,KAAA,GAAW;EAC5B,MAAM,KAAK,SAAS;EACpB,OAAO,OAAO,MAAM,KAAA,GAAW,EAAE,WAAW,KAAK,CAAC;CACpD;CACA,MAAM,SAAS,SACb,KAAK,QAAQ,OAAO,KAAA,IAAY,QAAQ,MAAM,IAAI,KAAK,GAAG;CAC5D,IAAI,MAAM,MAAM,IAAI;CACpB,IAAI,OAAO,QAAQ,KAAA,IAAY,KAAA,IAAY,UAAU,MAAM,aAAa,SAAS,GAAG,GAAG,GAAG;CAE1F,IAAI,MAAM,UAAU,QAAQ,CAAC,KAAK,YAAY,WAAW,UAAU,KAAK,aAAa,KAAA,GAAW;EAC9F,MAAM,WAAW,MAAM,UAAU,SAAS,KAAK,YAAY,QAAQ,CAAC;EACpE,MAAM,QAAQ,MAAM,QAAQ;EAC5B,IACE,SAAS,YACT,SAAS,QAAQ,KACjB,UAAU,KAAA,KACV,KAAK,QAAQ,MAAM,KAAA,GACnB;GACA,OAAO;GACP,MAAM;GACN,OAAO,UAAU,MAAM,aAAa,SAAS,KAAK,GAAG,GAAG;EAC1D,OAAO,IAAI,SAAS,SAAS,QAAQ,CAAC,SAAS,UAC7C,MAAM,KAAK,iCAAiC,SAAS,MAAM;CAE/D;CACA,IAAI,gBAAgB,KAAK,aAAa,MAAM,MAAM,eAAe,SAAS,KAAK,GAAG;CAClF,OAAO,OAAO,MAAM,IAAI;AAC1B"}