ribaunt 0.1.2 → 0.1.5

package/README.md

@@ -0,0 +1,258 @@
+# Ribaunt
+
+[![npm version](https://img.shields.io/npm/v/ribaunt.svg)](https://www.npmjs.com/package/ribaunt)
+[![license: GPL-3.0-only](https://img.shields.io/badge/license-GPL--3.0--only-blue.svg)](./LICENSE)
+
+Ribaunt is a stateless proof-of-work CAPTCHA library for Node.js and modern browsers. It issues signed JWT challenges from your server, solves them in the browser, and verifies the submitted proof before you accept a form, sign-up, comment, or other sensitive action.
+
+- Website: [ribaunt.com](https://ribaunt.com)
+- Package: [npmjs.com/package/ribaunt](https://www.npmjs.com/package/ribaunt)
+- Docs: [GitHub docs](https://github.com/ribaunt/ribaunt/tree/main/docs)
+- Context7: [context7.com/ribaunt/ribaunt](https://context7.com/ribaunt/ribaunt)
+
+## Features
+
+- Stateless challenge tokens signed with your `RIBAUNT_SECRET`
+- Browser widget for plain HTML apps
+- React and Next.js-friendly wrapper via `ribaunt/widget-react`
+- Server helpers for creating, solving, and verifying PoW challenges
+- Default process-local replay protection with support for remote replay stores
+- CSS custom properties for theming
+- TypeScript types included
+
+## Install
+
+```bash
+npm install ribaunt
+```
+
+```bash
+yarn add ribaunt
+```
+
+```bash
+pnpm add ribaunt
+```
+
+## Quick Start
+
+Set a strong secret in your server environment. Keep this server-only.
+
+```env
+RIBAUNT_SECRET="replace-with-a-long-random-secret"
+```
+
+Create two endpoints: one to issue challenges and one to verify solutions.
+
+```ts
+import 'dotenv/config';
+import express from 'express';
+import { createChallenge, verifySolution } from 'ribaunt';
+
+const app = express();
+
+app.use(express.json());
+
+app.get('/api/captcha/challenge', (_req, res) => {
+  const challenges = createChallenge(5, 4, 120);
+  res.json({ challenges });
+});
+
+app.post('/api/captcha/verify', async (req, res) => {
+  const { tokens, solutions } = req.body;
+  const valid = await verifySolution(tokens, solutions);
+
+  if (!valid) {
+    return res.status(400).json({ success: false, error: 'Invalid CAPTCHA solution' });
+  }
+
+  return res.json({ success: true });
+});
+
+app.listen(3000);
+```
+
+Add the widget to your frontend.
+
+```html
+<script type="module" src="/node_modules/ribaunt/dist/widget-browser.js"></script>
+
+<ribaunt-widget
+  challenge-endpoint="/api/captcha/challenge"
+  verify-endpoint="/api/captcha/verify"
+  auto-verify="true"
+  solve-timeout="15000"
+></ribaunt-widget>
+
+<script>
+  const widget = document.querySelector('ribaunt-widget');
+
+  widget.addEventListener('verify', (event) => {
+    console.log('Verified:', event.detail.solutions);
+  });
+
+  widget.addEventListener('error', (event) => {
+    console.error('Verification failed:', event.detail.error);
+  });
+</script>
+```
+
+Browser solving requires a secure context. Use HTTPS in production or `http://localhost` during development.
+
+## React Usage
+
+```tsx
+'use client';
+
+import RibauntWidget from 'ribaunt/widget-react';
+
+export function ContactFormCaptcha() {
+  return (
+    <RibauntWidget
+      challengeEndpoint="/api/captcha/challenge"
+      verifyEndpoint="/api/captcha/verify"
+      autoVerify={true}
+      solveTimeout={15000}
+      onVerify={(detail) => console.log('Verified:', detail.solutions)}
+      onError={(detail) => console.error('CAPTCHA failed:', detail.error)}
+    />
+  );
+}
+```
+
+For Next.js App Router, keep the widget in a client component. Do not expose `RIBAUNT_SECRET` with a `NEXT_PUBLIC_` prefix.
+
+## API
+
+### `createChallenge(difficulty, amount, ttlSeconds)`
+
+Creates signed challenge tokens.
+
+```ts
+const challenges = createChallenge(5, 4, 120);
+```
+
+| Parameter | Default | Description |
+| --- | --- | --- |
+| `difficulty` | `5` | Number of leading zeros required in the SHA-256 hash. Higher values increase solve time. |
+| `amount` | `4` | Number of challenges to create. |
+| `ttlSeconds` | `30` | Challenge token lifetime in seconds. |
+
+Validate user- or config-controlled values before passing them to `createChallenge()`. Invalid values throw.
+
+### `verifySolution(tokens, solutions, options?)`
+
+Verifies submitted solutions and returns `Promise<boolean>`.
+
+```ts
+const valid = await verifySolution(tokens, solutions, {
+  onWarning: (warning) => {
+    console.log('captcha warning', warning.reason, warning.message);
+  },
+});
+```
+
+Replay prevention defaults to `local`, which blocks token reuse in the current process. For serverless or horizontally scaled deployments, use `replayPrevention: 'remote'` with an atomic distributed store.
+
+```ts
+const valid = await verifySolution(tokens, solutions, {
+  replayPrevention: 'remote',
+  replayStore: {
+    consume: async (jti, expiresAt) => {
+      // Implement with Redis/Valkey using atomic set-if-not-exists plus expiry.
+      return true;
+    },
+  },
+});
+```
+
+### `solveChallenge(token, options?)`
+
+Solves challenges synchronously. This is mainly useful for tests and debugging.
+
+```ts
+const solutions = solveChallenge(challenges, {
+  maxDurationMs: 2000,
+  maxIterations: 500_000,
+});
+```
+
+## Widget Configuration
+
+```html
+<ribaunt-widget
+  challenge-endpoint="/api/captcha/challenge"
+  verify-endpoint="/api/captcha/verify"
+  auto-verify="true"
+  show-warning="false"
+  warning-message="Verification may take longer on this device."
+  solve-timeout="15000"
+  disabled="false"
+></ribaunt-widget>
+```
+
+| HTML attribute | React prop | Description |
+| --- | --- | --- |
+| `challenge-endpoint` | `challengeEndpoint` | Endpoint that returns `{ challenges: string[] }`. |
+| `verify-endpoint` | `verifyEndpoint` | Endpoint that accepts `{ tokens, solutions }`. |
+| `auto-verify` | `autoVerify` | Starts verification when the widget loads. |
+| `show-warning` | `showWarning` | Shows a warning banner. |
+| `warning-message` | `warningMessage` | Custom warning text. |
+| `solve-timeout` | `solveTimeout` | Optional solve timeout in milliseconds. |
+| `disabled` | `disabled` | Blocks user interaction and automatic verification. |
+
+The recommended challenge response shape is:
+
+```json
+{ "challenges": ["jwt-token-1", "jwt-token-2"] }
+```
+
+The widget also accepts `{ "tokens": [...] }` and raw string arrays for compatibility.
+
+## Theming
+
+Customize the widget with CSS custom properties.
+
+```css
+ribaunt-widget {
+  --ribaunt-background: #ffffff;
+  --ribaunt-border-color: #d8dee4;
+  --ribaunt-border-radius: 10px;
+  --ribaunt-color: #111827;
+  --ribaunt-widget-width: 260px;
+  --ribaunt-spinner-color: #111827;
+}
+```
+
+See [theming docs](https://github.com/ribaunt/ribaunt/blob/main/docs/theming.md) for the full variable list.
+
+## Documentation
+
+- [Quick start](https://github.com/ribaunt/ribaunt/blob/main/docs/quick-start.md)
+- [Configuration](https://github.com/ribaunt/ribaunt/blob/main/docs/configuration.md)
+- [Events](https://github.com/ribaunt/ribaunt/blob/main/docs/events.md)
+- [HTML integration](https://github.com/ribaunt/ribaunt/blob/main/docs/integrations/html.md)
+- [React integration](https://github.com/ribaunt/ribaunt/blob/main/docs/integrations/react.md)
+- [Next.js integration](https://github.com/ribaunt/ribaunt/blob/main/docs/integrations/nextjs.md)
+- [Vue integration](https://github.com/ribaunt/ribaunt/blob/main/docs/integrations/vue.md)
+- [Express server example](https://github.com/ribaunt/ribaunt/blob/main/docs/server/express.md)
+- [Next.js route handlers](https://github.com/ribaunt/ribaunt/blob/main/docs/server/nextjs-api.md)
+- [Testing](https://github.com/ribaunt/ribaunt/blob/main/docs/testing.md)
+
+You can also ask documentation-aware tools to use the Context7 library ID:
+
+```text
+/ribaunt/ribaunt
+```
+
+## Development
+
+```bash
+npm install
+npm test
+npm run build
+```
+
+## License
+
+GPL-3.0-only. See [LICENSE](./LICENSE).

package/context7.json

@@ -0,0 +1,4 @@
+{
+  "url": "https://context7.com/ribaunt/ribaunt",
+  "public_key": "pk_0hOWdNLxagQvIBshSH0ZZ"
+}

package/dist/cjs/index.d.ts

@@ -3,10 +3,35 @@ export interface ChallengeSolution {
     nonce: string;
     hash: string;
 }
+export interface ReplayStore {
+    consume(jti: string, expiresAt: number): Promise<boolean>;
+}
+export type ReplayPreventionMode = 'disabled' | 'local' | 'remote';
+export interface VerifySolutionOptions {
+    replayPrevention?: ReplayPreventionMode;
+    replayStore?: ReplayStore;
+    debug?: boolean;
+    onWarning?: (warning: VerifyWarning) => void;
+}
+export type VerifyWarningReason = 'invalid-token' | 'expired-token' | 'invalid-solution' | 'replay-detected' | 'configuration-error';
+export interface VerifyWarning {
+    reason: VerifyWarningReason;
+    message: string;
+    error?: unknown;
+}
+export interface SolveChallengeOptions {
+    maxIterations?: number;
+    maxDurationMs?: number;
+}
+export declare class LocalReplayStore implements ReplayStore {
+    private usedTokens;
+    consume(jti: string, expiresAt: number): Promise<boolean>;
+    private cleanup;
+}
 /**
  * Creates one or more PoW challenges and returns them as signed JWT tokens.
  *
- * @param difficulty - Number of leading zeros required in the hash (default 6)
+ * @param difficulty - Number of leading zeros required in the hash (default 5)
  * @param amount - Number of challenges to create (default 4)
  * @param ttlSeconds - Time to live for each challenge in seconds (default 30)
  * @returns An array of JWT challenge tokens
@@ -16,10 +41,13 @@ export declare function createChallenge(difficulty?: number, amount?: number, tt
  * Solves one or more PoW challenges encoded in JWT tokens.
  *
  * @param token - The JWT challenge token or an array of tokens
+ * @param options - Optional guardrails for test/debug usage (`maxIterations`, `maxDurationMs`)
  * @returns The nonce/hash pair for single input or an array of them for multiple tokens
  */
 export declare function solveChallenge(token: ChallengeToken): ChallengeSolution | undefined;
+export declare function solveChallenge(token: ChallengeToken, options?: SolveChallengeOptions): ChallengeSolution | undefined;
 export declare function solveChallenge(token: ChallengeToken[]): ChallengeSolution[] | undefined;
+export declare function solveChallenge(token: ChallengeToken[], options?: SolveChallengeOptions): ChallengeSolution[] | undefined;
 /**
  * Verifies a PoW solution returned by the client.
  *
@@ -27,5 +55,5 @@ export declare function solveChallenge(token: ChallengeToken[]): ChallengeSoluti
  * @param nonce - The nonce/answer submitted by the client (single nonce, array of nonces, or array of solution objects)
  * @returns true only if every provided solution is valid; otherwise false
  */
-export declare function verifySolution(token: ChallengeToken | ChallengeToken[], nonce: number | string | Array<number | string> | ChallengeSolution | ChallengeSolution[]): boolean;
+export declare function verifySolution(token: ChallengeToken | ChallengeToken[], nonce: number | string | Array<number | string> | ChallengeSolution | ChallengeSolution[], options?: VerifySolutionOptions): Promise<boolean>;
 //# sourceMappingURL=index.d.ts.map

package/dist/cjs/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AASA,MAAM,MAAM,cAAc,GAAG,MAAM,CAAC;AAEpC,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;CACd;AAyED;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAC7B,UAAU,GAAE,MAAU,EACtB,MAAM,GAAE,MAAU,EAClB,UAAU,GAAE,MAAW,GACtB,cAAc,EAAE,CAUlB;AAoDD;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,cAAc,GAAG,iBAAiB,GAAG,SAAS,CAAC;AACrF,wBAAgB,cAAc,CAAC,KAAK,EAAE,cAAc,EAAE,GAAG,iBAAiB,EAAE,GAAG,SAAS,CAAC;AAuBzF;;;;;;GAMG;AACH,wBAAgB,cAAc,CAC5B,KAAK,EAAE,cAAc,GAAG,cAAc,EAAE,EACxC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,GAAG,iBAAiB,GAAG,iBAAiB,EAAE,GACxF,OAAO,CAqDT"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAUA,MAAM,MAAM,cAAc,GAAG,MAAM,CAAC;AAEpC,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC3D;AAED,MAAM,MAAM,oBAAoB,GAAG,UAAU,GAAG,OAAO,GAAG,QAAQ,CAAC;AAEnE,MAAM,WAAW,qBAAqB;IACpC,gBAAgB,CAAC,EAAE,oBAAoB,CAAC;IACxC,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,aAAa,KAAK,IAAI,CAAC;CAC9C;AAED,MAAM,MAAM,mBAAmB,GAC3B,eAAe,GACf,eAAe,GACf,kBAAkB,GAClB,iBAAiB,GACjB,qBAAqB,CAAC;AAE1B,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,mBAAmB,CAAC;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,qBAAqB;IACpC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,qBAAa,gBAAiB,YAAW,WAAW;IAClD,OAAO,CAAC,UAAU,CAA6B;IAEzC,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAW/D,OAAO,CAAC,OAAO;CAShB;AAoMD;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAC7B,UAAU,GAAE,MAAU,EACtB,MAAM,GAAE,MAAU,EAClB,UAAU,GAAE,MAAW,GACtB,cAAc,EAAE,CAUlB;AA0FD;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,cAAc,GAAG,iBAAiB,GAAG,SAAS,CAAC;AACrF,wBAAgB,cAAc,CAC5B,KAAK,EAAE,cAAc,EACrB,OAAO,CAAC,EAAE,qBAAqB,GAC9B,iBAAiB,GAAG,SAAS,CAAC;AACjC,wBAAgB,cAAc,CAAC,KAAK,EAAE,cAAc,EAAE,GAAG,iBAAiB,EAAE,GAAG,SAAS,CAAC;AACzF,wBAAgB,cAAc,CAC5B,KAAK,EAAE,cAAc,EAAE,EACvB,OAAO,CAAC,EAAE,qBAAqB,GAC9B,iBAAiB,EAAE,GAAG,SAAS,CAAC;AAwBnC;;;;;;GAMG;AACH,wBAAgB,cAAc,CAC5B,KAAK,EAAE,cAAc,GAAG,cAAc,EAAE,EACxC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,GAAG,iBAAiB,GAAG,iBAAiB,EAAE,EACzF,OAAO,CAAC,EAAE,qBAAqB,GAC9B,OAAO,CAAC,OAAO,CAAC,CAuDlB"}

package/dist/cjs/index.js

@@ -3,11 +3,36 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.LocalReplayStore = void 0;
 exports.createChallenge = createChallenge;
 exports.solveChallenge = solveChallenge;
 exports.verifySolution = verifySolution;
 const crypto_1 = __importDefault(require("crypto"));
 const jsonwebtoken_1 = __importDefault(require("jsonwebtoken"));
+class LocalReplayStore {
+    constructor() {
+        this.usedTokens = new Map();
+    }
+    async consume(jti, expiresAt) {
+        this.cleanup();
+        if (this.usedTokens.has(jti)) {
+            return false;
+        }
+        this.usedTokens.set(jti, expiresAt);
+        return true;
+    }
+    cleanup() {
+        const now = Math.floor(Date.now() / 1000);
+        for (const [jti, expiresAt] of this.usedTokens.entries()) {
+            if (expiresAt < now) {
+                this.usedTokens.delete(jti);
+            }
+        }
+    }
+}
+exports.LocalReplayStore = LocalReplayStore;
+const defaultLocalReplayStore = new LocalReplayStore();
+const DEFAULT_SOLVE_MAX_DURATION_MS = 30000;
 function generateChallenge(length = 8) {
     const buffer = crypto_1.default.randomBytes(length);
     return buffer.toString('base64').slice(0, length);
@@ -17,14 +42,101 @@ function createChallengePayload(difficulty, ttlSeconds) {
         challenge: generateChallenge(),
         difficulty,
         expires: Math.floor(Date.now() / 1000) + ttlSeconds,
+        jti: crypto_1.default.randomUUID(),
     };
 }
+let cachedSecret;
 function getSecret() {
     const secret = process.env.RIBAUNT_SECRET;
     if (!secret) {
+        cachedSecret = undefined;
         throw new Error('RIBAUNT_SECRET environment variable is not set!');
     }
-    return secret;
+    if (cachedSecret === secret) {
+        return cachedSecret;
+    }
+    cachedSecret = secret;
+    return cachedSecret;
+}
+function shouldDebugVerifyErrors(options) {
+    if (options?.debug !== undefined) {
+        return options.debug;
+    }
+    return process.env.NODE_ENV === 'development';
+}
+function logVerifyWarning(message, options, error) {
+    const warning = {
+        reason: classifyVerifyWarningReason(error),
+        message,
+        error,
+    };
+    options?.onWarning?.(warning);
+    if (!shouldDebugVerifyErrors(options)) {
+        return;
+    }
+    const details = error instanceof Error ? error.message : error;
+    console.warn(`[ribaunt] ${message}`, details ?? '');
+}
+function emitVerifyWarning(reason, message, options) {
+    options?.onWarning?.({ reason, message });
+    if (!shouldDebugVerifyErrors(options)) {
+        return;
+    }
+    console.warn(`[ribaunt] ${message}`, '');
+}
+function classifyVerifyWarningReason(error) {
+    if (error && typeof error === 'object' && 'name' in error) {
+        const name = String(error.name);
+        if (name === 'TokenExpiredError') {
+            return 'expired-token';
+        }
+        if (name === 'JsonWebTokenError' || name === 'NotBeforeError') {
+            return 'invalid-token';
+        }
+    }
+    if (error instanceof Error && error.message.includes('replayStore')) {
+        return 'configuration-error';
+    }
+    return 'invalid-token';
+}
+function normalizeMaxIterations(options) {
+    if (options?.maxIterations === undefined) {
+        return undefined;
+    }
+    if (!Number.isFinite(options.maxIterations)) {
+        return undefined;
+    }
+    const normalized = Math.floor(options.maxIterations);
+    if (normalized < 1) {
+        return 1;
+    }
+    return normalized;
+}
+function normalizeMaxDurationMs(options) {
+    if (options?.maxDurationMs === undefined) {
+        return DEFAULT_SOLVE_MAX_DURATION_MS;
+    }
+    if (!Number.isFinite(options.maxDurationMs)) {
+        return DEFAULT_SOLVE_MAX_DURATION_MS;
+    }
+    const normalized = Math.floor(options.maxDurationMs);
+    if (normalized < 1) {
+        return 1;
+    }
+    return normalized;
+}
+function getReplayStore(options) {
+    const mode = options?.replayPrevention ?? 'local';
+    if (mode === 'disabled') {
+        return undefined;
+    }
+    if (mode === 'local') {
+        return defaultLocalReplayStore;
+    }
+    if (!options?.replayStore) {
+        throw new Error('A replayStore is required when replayPrevention is set to "remote"');
+    }
+    return options.replayStore;
 }
 function signChallenge(payload) {
     return jsonwebtoken_1.default.sign(payload, getSecret());
@@ -66,7 +178,7 @@ function createSingleChallenge(difficulty, ttlSeconds) {
 /**
  * Creates one or more PoW challenges and returns them as signed JWT tokens.
  *
- * @param difficulty - Number of leading zeros required in the hash (default 6)
+ * @param difficulty - Number of leading zeros required in the hash (default 5)
  * @param amount - Number of challenges to create (default 4)
  * @param ttlSeconds - Time to live for each challenge in seconds (default 30)
  * @returns An array of JWT challenge tokens
@@ -78,15 +190,24 @@ function createChallenge(difficulty = 5, amount = 4, ttlSeconds = 30) {
     const challenges = Array.from({ length: normalizedAmount }, () => createSingleChallenge(normalizedDifficulty, normalizedTtl));
     return challenges;
 }
-function solveSingleChallenge(token) {
+function solveSingleChallenge(token, options) {
     try {
         const payload = jsonwebtoken_1.default.decode(token);
         if (!payload)
             return undefined;
         const { challenge, difficulty } = payload;
         const prefix = '0'.repeat(difficulty);
+        const maxIterations = normalizeMaxIterations(options);
+        const maxDurationMs = normalizeMaxDurationMs(options);
+        const startedAt = Date.now();
         let nonce = 0;
         while (true) {
+            if (maxIterations !== undefined && nonce >= maxIterations) {
+                return undefined;
+            }
+            if (Date.now() - startedAt >= maxDurationMs) {
+                return undefined;
+            }
             const hash = crypto_1.default
                 .createHash('sha256')
                 .update(`${challenge}${nonce}`)
@@ -101,32 +222,49 @@ function solveSingleChallenge(token) {
         return undefined;
     }
 }
-function verifySingleSolution(token, nonce) {
+async function verifySingleSolution(token, nonce, options) {
     if (nonce === undefined || nonce === null) {
+        emitVerifyWarning('invalid-solution', 'verifySolution received an empty nonce', options);
         return false;
     }
     try {
+        const replayStore = getReplayStore(options);
         const payload = jsonwebtoken_1.default.verify(token, getSecret());
         const now = Math.floor(Date.now() / 1000);
-        if (payload.expires < now)
+        if (payload.expires < now) {
+            emitVerifyWarning('expired-token', 'verifySolution rejected an expired challenge token', options);
             return false;
+        }
         const nonceValue = typeof nonce === 'number' ? String(nonce) : nonce;
         const hash = crypto_1.default
             .createHash('sha256')
             .update(`${payload.challenge}${nonceValue}`)
             .digest('hex');
         const prefix = '0'.repeat(payload.difficulty);
-        return hash.startsWith(prefix);
+        const isValid = hash.startsWith(prefix);
+        if (!isValid) {
+            emitVerifyWarning('invalid-solution', 'verifySolution rejected an invalid nonce', options);
+            return false;
+        }
+        if (replayStore && payload.jti) {
+            const consumed = await replayStore.consume(payload.jti, payload.expires);
+            if (!consumed) {
+                emitVerifyWarning('replay-detected', 'verifySolution rejected a replayed token', options);
+                return false;
+            }
+        }
+        return true;
     }
     catch (err) {
+        logVerifyWarning('verifySolution rejected a token or nonce', options, err);
         return false;
     }
 }
-function solveChallenge(token) {
+function solveChallenge(token, options) {
     if (Array.isArray(token)) {
         const solutions = [];
         for (const singleToken of token) {
-            const solution = solveSingleChallenge(singleToken);
+            const solution = solveSingleChallenge(singleToken, options);
             if (!solution) {
                 return undefined;
             }
@@ -134,7 +272,7 @@ function solveChallenge(token) {
         }
         return solutions;
     }
-    const solution = solveSingleChallenge(token);
+    const solution = solveSingleChallenge(token, options);
     return solution;
 }
 /**
@@ -144,12 +282,12 @@ function solveChallenge(token) {
  * @param nonce - The nonce/answer submitted by the client (single nonce, array of nonces, or array of solution objects)
  * @returns true only if every provided solution is valid; otherwise false
  */
-function verifySolution(token, nonce) {
+function verifySolution(token, nonce, options) {
     if (Array.isArray(token)) {
         let nonces;
         if (Array.isArray(nonce)) {
             if (nonce.length !== token.length) {
-                return false;
+                return Promise.resolve(false);
             }
             if (nonce.length > 0 && typeof nonce[0] === 'object' && 'nonce' in nonce[0]) {
                 nonces = nonce.map(s => s.nonce);
@@ -159,24 +297,26 @@ function verifySolution(token, nonce) {
             }
         }
         else {
-            return false;
+            return Promise.resolve(false);
         }
-        for (let index = 0; index < token.length; index++) {
-            const challengeToken = token[index];
-            const nonceEntry = nonces[index];
-            if (challengeToken === undefined || nonceEntry === undefined) {
-                return false;
-            }
-            if (!verifySingleSolution(challengeToken, nonceEntry)) {
-                return false;
+        return (async () => {
+            for (let index = 0; index < token.length; index++) {
+                const challengeToken = token[index];
+                const nonceEntry = nonces[index];
+                if (challengeToken === undefined || nonceEntry === undefined) {
+                    return false;
+                }
+                if (!await verifySingleSolution(challengeToken, nonceEntry, options)) {
+                    return false;
+                }
             }
-        }
-        return true;
+            return true;
+        })();
     }
     let effectiveNonce;
     if (Array.isArray(nonce)) {
         if (nonce.length === 0) {
-            return false;
+            return Promise.resolve(false);
         }
         if (typeof nonce[0] === 'object' && 'nonce' in nonce[0]) {
             effectiveNonce = nonce[0].nonce;
@@ -185,16 +325,15 @@ function verifySolution(token, nonce) {
             effectiveNonce = nonce[0];
         }
     }
-    else if (typeof nonce === 'object' && 'nonce' in nonce) {
+    else if (nonce && typeof nonce === 'object' && 'nonce' in nonce) {
         effectiveNonce = nonce.nonce;
     }
     else {
         effectiveNonce = nonce;
     }
     if (effectiveNonce === undefined) {
-        return false;
+        return Promise.resolve(false);
     }
-    const result = verifySingleSolution(token, effectiveNonce);
-    return result;
+    return verifySingleSolution(token, effectiveNonce, options);
 }
 //# sourceMappingURL=index.js.map

package/dist/cjs/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":";;;;;AA+FA,0CAcC;AA4DD,wCAoBC;AASD,wCAwDC;AA9PD,oDAA4B;AAC5B,gEAA+B;AAe/B,SAAS,iBAAiB,CAAC,MAAM,GAAG,CAAC;IACnC,MAAM,MAAM,GAAG,gBAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IAC1C,OAAO,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;AACpD,CAAC;AAED,SAAS,sBAAsB,CAAC,UAAkB,EAAE,UAAkB;IACpE,OAAO;QACL,SAAS,EAAE,iBAAiB,EAAE;QAC9B,UAAU;QACV,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,UAAU;KACpD,CAAC;AACJ,CAAC;AAED,SAAS,SAAS;IAChB,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;IAE1C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACrE,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,aAAa,CAAC,OAA8B;IACnD,OAAO,sBAAG,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,iBAAiB,CAAC,MAAc;IACvC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACtC,IAAI,UAAU,GAAG,CAAC,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzD,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,qBAAqB,CAAC,UAAkB;IAC/C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC1C,IAAI,UAAU,GAAG,CAAC,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7D,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,cAAc,CAAC,UAAkB;IACxC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC1C,IAAI,UAAU,GAAG,CAAC,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7D,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,qBAAqB,CAAC,UAAkB,EAAE,UAAkB;IACnE,MAAM,OAAO,GAAG,sBAAsB,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;IAC/D,OAAO,aAAa,CAAC,OAAO,CAAC,CAAC;AAChC,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,eAAe,CAC7B,aAAqB,CAAC,EACtB,SAAiB,CAAC,EAClB,aAAqB,EAAE;IAEvB,MAAM,oBAAoB,GAAG,qBAAqB,CAAC,UAAU,CAAC,CAAC;IAC/D,MAAM,gBAAgB,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IACnD,MAAM,aAAa,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;IAEjD,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,CAC3B,EAAE,MAAM,EAAE,gBAAgB,EAAE,EAC5B,GAAG,EAAE,CAAC,qBAAqB,CAAC,oBAAoB,EAAE,aAAa,CAAC,CACjE,CAAC;IACF,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAqB;IACjD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,sBAAG,CAAC,MAAM,CAAC,KAAK,CAAiC,CAAC;QAClE,IAAI,CAAC,OAAO;YAAE,OAAO,SAAS,CAAC;QAE/B,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC;QAC1C,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAEtC,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,OAAO,IAAI,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,gBAAM;iBAChB,UAAU,CAAC,QAAQ,CAAC;iBACpB,MAAM,CAAC,GAAG,SAAS,GAAG,KAAK,EAAE,CAAC;iBAC9B,MAAM,CAAC,KAAK,CAAC,CAAC;YAEjB,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC5B,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC;YACxC,CAAC;YAED,KAAK,EAAE,CAAC;QACV,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAqB,EAAE,KAAkC;IACrF,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAC1C,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,sBAAG,CAAC,MAAM,CAAC,KAAK,EAAE,SAAS,EAAE,CAA0B,CAAC;QAExE,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAC1C,IAAI,OAAO,CAAC,OAAO,GAAG,GAAG;YAAE,OAAO,KAAK,CAAC;QAExC,MAAM,UAAU,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QACrE,MAAM,IAAI,GAAG,gBAAM;aAChB,UAAU,CAAC,QAAQ,CAAC;aACpB,MAAM,CAAC,GAAG,OAAO,CAAC,SAAS,GAAG,UAAU,EAAE,CAAC;aAC3C,MAAM,CAAC,KAAK,CAAC,CAAC;QAEjB,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAC9C,OAAO,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IACjC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAUD,SAAgB,cAAc,CAC5B,KAAwC;IAExC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,SAAS,GAAwB,EAAE,CAAC;QAE1C,KAAK,MAAM,WAAW,IAAI,KAAK,EAAE,CAAC;YAChC,MAAM,QAAQ,GAAG,oBAAoB,CAAC,WAAW,CAAC,CAAC;YACnD,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO,SAAS,CAAC;YACnB,CAAC;YAED,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC3B,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,QAAQ,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;IAC7C,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,cAAc,CAC5B,KAAwC,EACxC,KAAyF;IAEzF,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,IAAI,MAA8B,CAAC;QACnC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,IAAI,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;gBAClC,OAAO,KAAK,CAAC;YACf,CAAC;YACD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,OAAO,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC5E,MAAM,GAAI,KAA6B,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YAC5D,CAAC;iBAAM,CAAC;gBACN,MAAM,GAAG,KAA+B,CAAC;YAC3C,CAAC;QACH,CAAC;aAAM,CAAC;YACN,OAAO,KAAK,CAAC;QACf,CAAC;QAED,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;YAClD,MAAM,cAAc,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;YACpC,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;YAEjC,IAAI,cAAc,KAAK,SAAS,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;gBAC7D,OAAO,KAAK,CAAC;YACf,CAAC;YAED,IAAI,CAAC,oBAAoB,CAAC,cAAc,EAAE,UAAU,CAAC,EAAE,CAAC;gBACtD,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,cAA+B,CAAC;IACpC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,OAAO,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;YACxD,cAAc,GAAI,KAAK,CAAC,CAAC,CAAuB,CAAC,KAAK,CAAC;QACzD,CAAC;aAAM,CAAC;YACN,cAAc,GAAG,KAAK,CAAC,CAAC,CAAoB,CAAC;QAC/C,CAAC;IACH,CAAC;SAAM,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,IAAI,KAAK,EAAE,CAAC;QACzD,cAAc,GAAI,KAA2B,CAAC,KAAK,CAAC;IACtD,CAAC;SAAM,CAAC;QACN,cAAc,GAAG,KAAwB,CAAC;IAC5C,CAAC;IAED,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;QACjC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,MAAM,GAAG,oBAAoB,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;IAC3D,OAAO,MAAM,CAAC;AAChB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":";;;;;;AAmRA,0CAcC;AA2GD,wCAqBC;AASD,wCA2DC;AAreD,oDAA4B;AAC5B,gEAA+B;AA+C/B,MAAa,gBAAgB;IAA7B;QACU,eAAU,GAAG,IAAI,GAAG,EAAkB,CAAC;IAsBjD,CAAC;IApBC,KAAK,CAAC,OAAO,CAAC,GAAW,EAAE,SAAiB;QAC1C,IAAI,CAAC,OAAO,EAAE,CAAC;QAEf,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAC7B,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QACpC,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,OAAO;QACb,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAE1C,KAAK,MAAM,CAAC,GAAG,EAAE,SAAS,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC;YACzD,IAAI,SAAS,GAAG,GAAG,EAAE,CAAC;gBACpB,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC9B,CAAC;QACH,CAAC;IACH,CAAC;CACF;AAvBD,4CAuBC;AAED,MAAM,uBAAuB,GAAG,IAAI,gBAAgB,EAAE,CAAC;AACvD,MAAM,6BAA6B,GAAG,KAAM,CAAC;AAE7C,SAAS,iBAAiB,CAAC,MAAM,GAAG,CAAC;IACnC,MAAM,MAAM,GAAG,gBAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IAC1C,OAAO,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;AACpD,CAAC;AAED,SAAS,sBAAsB,CAAC,UAAkB,EAAE,UAAkB;IACpE,OAAO;QACL,SAAS,EAAE,iBAAiB,EAAE;QAC9B,UAAU;QACV,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,UAAU;QACnD,GAAG,EAAE,gBAAM,CAAC,UAAU,EAAE;KACzB,CAAC;AACJ,CAAC;AAED,IAAI,YAAgC,CAAC;AAErC,SAAS,SAAS;IAChB,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;IAE1C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,YAAY,GAAG,SAAS,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACrE,CAAC;IAED,IAAI,YAAY,KAAK,MAAM,EAAE,CAAC;QAC5B,OAAO,YAAY,CAAC;IACtB,CAAC;IAED,YAAY,GAAG,MAAM,CAAC;IACtB,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,SAAS,uBAAuB,CAAC,OAA+B;IAC9D,IAAI,OAAO,EAAE,KAAK,KAAK,SAAS,EAAE,CAAC;QACjC,OAAO,OAAO,CAAC,KAAK,CAAC;IACvB,CAAC;IAED,OAAO,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,aAAa,CAAC;AAChD,CAAC;AAED,SAAS,gBAAgB,CAAC,OAAe,EAAE,OAA+B,EAAE,KAAe;IACzF,MAAM,OAAO,GAAkB;QAC7B,MAAM,EAAE,2BAA2B,CAAC,KAAK,CAAC;QAC1C,OAAO;QACP,KAAK;KACN,CAAC;IAEF,OAAO,EAAE,SAAS,EAAE,CAAC,OAAO,CAAC,CAAC;IAE9B,IAAI,CAAC,uBAAuB,CAAC,OAAO,CAAC,EAAE,CAAC;QACtC,OAAO;IACT,CAAC;IAED,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;IAC/D,OAAO,CAAC,IAAI,CAAC,aAAa,OAAO,EAAE,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,iBAAiB,CACxB,MAA2B,EAC3B,OAAe,EACf,OAA+B;IAE/B,OAAO,EAAE,SAAS,EAAE,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;IAE1C,IAAI,CAAC,uBAAuB,CAAC,OAAO,CAAC,EAAE,CAAC;QACtC,OAAO;IACT,CAAC;IAED,OAAO,CAAC,IAAI,CAAC,aAAa,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,2BAA2B,CAAC,KAAc;IACjD,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,IAAI,KAAK,EAAE,CAAC;QAC1D,MAAM,IAAI,GAAG,MAAM,CAAE,KAA4B,CAAC,IAAI,CAAC,CAAC;QAExD,IAAI,IAAI,KAAK,mBAAmB,EAAE,CAAC;YACjC,OAAO,eAAe,CAAC;QACzB,CAAC;QAED,IAAI,IAAI,KAAK,mBAAmB,IAAI,IAAI,KAAK,gBAAgB,EAAE,CAAC;YAC9D,OAAO,eAAe,CAAC;QACzB,CAAC;IACH,CAAC;IAED,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;QACpE,OAAO,qBAAqB,CAAC;IAC/B,CAAC;IAED,OAAO,eAAe,CAAC;AACzB,CAAC;AAED,SAAS,sBAAsB,CAAC,OAA+B;IAC7D,IAAI,OAAO,EAAE,aAAa,KAAK,SAAS,EAAE,CAAC;QACzC,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;QAC5C,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IACrD,IAAI,UAAU,GAAG,CAAC,EAAE,CAAC;QACnB,OAAO,CAAC,CAAC;IACX,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,sBAAsB,CAAC,OAA+B;IAC7D,IAAI,OAAO,EAAE,aAAa,KAAK,SAAS,EAAE,CAAC;QACzC,OAAO,6BAA6B,CAAC;IACvC,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;QAC5C,OAAO,6BAA6B,CAAC;IACvC,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IACrD,IAAI,UAAU,GAAG,CAAC,EAAE,CAAC;QACnB,OAAO,CAAC,CAAC;IACX,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,cAAc,CAAC,OAA+B;IACrD,MAAM,IAAI,GAAG,OAAO,EAAE,gBAAgB,IAAI,OAAO,CAAC;IAElD,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;QACxB,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QACrB,OAAO,uBAAuB,CAAC;IACjC,CAAC;IAED,IAAI,CAAC,OAAO,EAAE,WAAW,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;IACxF,CAAC;IAED,OAAO,OAAO,CAAC,WAAW,CAAC;AAC7B,CAAC;AAED,SAAS,aAAa,CAAC,OAA8B;IACnD,OAAO,sBAAG,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,iBAAiB,CAAC,MAAc;IACvC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACtC,IAAI,UAAU,GAAG,CAAC,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzD,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,qBAAqB,CAAC,UAAkB;IAC/C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC1C,IAAI,UAAU,GAAG,CAAC,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7D,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,cAAc,CAAC,UAAkB;IACxC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC1C,IAAI,UAAU,GAAG,CAAC,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7D,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,qBAAqB,CAAC,UAAkB,EAAE,UAAkB;IACnE,MAAM,OAAO,GAAG,sBAAsB,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;IAC/D,OAAO,aAAa,CAAC,OAAO,CAAC,CAAC;AAChC,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,eAAe,CAC7B,aAAqB,CAAC,EACtB,SAAiB,CAAC,EAClB,aAAqB,EAAE;IAEvB,MAAM,oBAAoB,GAAG,qBAAqB,CAAC,UAAU,CAAC,CAAC;IAC/D,MAAM,gBAAgB,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IACnD,MAAM,aAAa,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;IAEjD,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,CAC3B,EAAE,MAAM,EAAE,gBAAgB,EAAE,EAC5B,GAAG,EAAE,CAAC,qBAAqB,CAAC,oBAAoB,EAAE,aAAa,CAAC,CACjE,CAAC;IACF,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,oBAAoB,CAC3B,KAAqB,EACrB,OAA+B;IAE/B,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,sBAAG,CAAC,MAAM,CAAC,KAAK,CAAiC,CAAC;QAClE,IAAI,CAAC,OAAO;YAAE,OAAO,SAAS,CAAC;QAE/B,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC;QAC1C,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACtC,MAAM,aAAa,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;QACtD,MAAM,aAAa,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;QACtD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAE7B,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,OAAO,IAAI,EAAE,CAAC;YACZ,IAAI,aAAa,KAAK,SAAS,IAAI,KAAK,IAAI,aAAa,EAAE,CAAC;gBAC1D,OAAO,SAAS,CAAC;YACnB,CAAC;YAED,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,IAAI,aAAa,EAAE,CAAC;gBAC5C,OAAO,SAAS,CAAC;YACnB,CAAC;YAED,MAAM,IAAI,GAAG,gBAAM;iBAChB,UAAU,CAAC,QAAQ,CAAC;iBACpB,MAAM,CAAC,GAAG,SAAS,GAAG,KAAK,EAAE,CAAC;iBAC9B,MAAM,CAAC,KAAK,CAAC,CAAC;YAEjB,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC5B,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC;YACxC,CAAC;YAED,KAAK,EAAE,CAAC;QACV,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,oBAAoB,CACjC,KAAqB,EACrB,KAAkC,EAClC,OAA+B;IAE/B,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAC1C,iBAAiB,CAAC,kBAAkB,EAAE,wCAAwC,EAAE,OAAO,CAAC,CAAC;QACzF,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;QAC5C,MAAM,OAAO,GAAG,sBAAG,CAAC,MAAM,CAAC,KAAK,EAAE,SAAS,EAAE,CAA0B,CAAC;QAExE,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAC1C,IAAI,OAAO,CAAC,OAAO,GAAG,GAAG,EAAE,CAAC;YAC1B,iBAAiB,CAAC,eAAe,EAAE,oDAAoD,EAAE,OAAO,CAAC,CAAC;YAClG,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,UAAU,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QACrE,MAAM,IAAI,GAAG,gBAAM;aAChB,UAAU,CAAC,QAAQ,CAAC;aACpB,MAAM,CAAC,GAAG,OAAO,CAAC,SAAS,GAAG,UAAU,EAAE,CAAC;aAC3C,MAAM,CAAC,KAAK,CAAC,CAAC;QAEjB,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAC9C,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QACxC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,iBAAiB,CAAC,kBAAkB,EAAE,0CAA0C,EAAE,OAAO,CAAC,CAAC;YAC3F,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,WAAW,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;YAC/B,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;YACzE,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,iBAAiB,CAAC,iBAAiB,EAAE,0CAA0C,EAAE,OAAO,CAAC,CAAC;gBAC1F,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,gBAAgB,CAAC,0CAA0C,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;QAC3E,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAmBD,SAAgB,cAAc,CAC5B,KAAwC,EACxC,OAA+B;IAE/B,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,SAAS,GAAwB,EAAE,CAAC;QAE1C,KAAK,MAAM,WAAW,IAAI,KAAK,EAAE,CAAC;YAChC,MAAM,QAAQ,GAAG,oBAAoB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;YAC5D,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO,SAAS,CAAC;YACnB,CAAC;YAED,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC3B,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,QAAQ,GAAG,oBAAoB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACtD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,cAAc,CAC5B,KAAwC,EACxC,KAAyF,EACzF,OAA+B;IAE/B,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,IAAI,MAA8B,CAAC;QACnC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,IAAI,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;gBAClC,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAChC,CAAC;YACD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,OAAO,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC5E,MAAM,GAAI,KAA6B,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YAC5D,CAAC;iBAAM,CAAC;gBACN,MAAM,GAAG,KAA+B,CAAC;YAC3C,CAAC;QACH,CAAC;aAAM,CAAC;YACN,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAChC,CAAC;QAED,OAAO,CAAC,KAAK,IAAI,EAAE;YACjB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;gBAClD,MAAM,cAAc,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;gBACpC,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;gBAEjC,IAAI,cAAc,KAAK,SAAS,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;oBAC7D,OAAO,KAAK,CAAC;gBACf,CAAC;gBAED,IAAI,CAAC,MAAM,oBAAoB,CAAC,cAAc,EAAE,UAAU,EAAE,OAAO,CAAC,EAAE,CAAC;oBACrE,OAAO,KAAK,CAAC;gBACf,CAAC;YACH,CAAC;YAED,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,EAAE,CAAC;IACP,CAAC;IAED,IAAI,cAA+B,CAAC;IACpC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAChC,CAAC;QACD,IAAI,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,OAAO,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;YACxD,cAAc,GAAI,KAAK,CAAC,CAAC,CAAuB,CAAC,KAAK,CAAC;QACzD,CAAC;aAAM,CAAC;YACN,cAAc,GAAG,KAAK,CAAC,CAAC,CAAoB,CAAC;QAC/C,CAAC;IACH,CAAC;SAAM,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,IAAI,KAAK,EAAE,CAAC;QAClE,cAAc,GAAI,KAA2B,CAAC,KAAK,CAAC;IACtD,CAAC;SAAM,CAAC;QACN,cAAc,GAAG,KAAwB,CAAC;IAC5C,CAAC;IAED,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;QACjC,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC;IAED,OAAO,oBAAoB,CAAC,KAAK,EAAE,cAAc,EAAE,OAAO,CAAC,CAAC;AAC9D,CAAC"}