@adcp/sdk 5.23.0

package/dist/lib/testing/storyboard/webhook-assertions.js

@@ -0,0 +1,538 @@
+"use strict";
+/**
+ * Webhook-assertion pseudo-tasks.
+ *
+ * Three step `task` values graded by observing the runner's webhook
+ * receiver rather than by calling the agent:
+ *
+ *   - `expect_webhook`
+ *       Assert at least one matching webhook arrived carrying a
+ *       well-formed `idempotency_key`. Optional: body-schema validation and
+ *       max-deliveries-per-logical-event cap (catches duplicate-side-effect
+ *       bugs on replay).
+ *
+ *   - `expect_webhook_retry_keys_stable`
+ *       Configure the receiver to reject the first N deliveries with 5xx so
+ *       the sender retries, then assert every delivery within the window
+ *       carries the byte-identical `idempotency_key` (a key rotation across
+ *       retries breaks at-least-once delivery semantics).
+ *
+ *   - `expect_webhook_signature_valid`
+ *       Delegate to the @adcp/sdk 9421 webhook verifier (pending; grades
+ *       `not_applicable` until the client verifier lands). Asserts the
+ *       arriving webhook verifies under the `adcp/webhook-signing/v1` profile.
+ *
+ * Spec: adcontextprotocol/adcp#2431 (storyboard-schema.yaml webhook section).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WEBHOOK_ASSERTION_TASKS = void 0;
+exports.armWebhookAssertions = armWebhookAssertions;
+exports.executeWebhookAssertionStep = executeWebhookAssertionStep;
+const node_crypto_1 = require("node:crypto");
+const context_1 = require("./context");
+const types_1 = require("./types");
+const webhook_verifier_1 = require("../../signing/webhook-verifier");
+const errors_1 = require("../../signing/errors");
+const replay_1 = require("../../signing/replay");
+const revocation_1 = require("../../signing/revocation");
+const RUN_STATE_REPLAY_KEY = '__webhook_signing_replay_store';
+const RUN_STATE_REVOCATION_KEY = '__webhook_signing_revocation_store';
+/**
+ * Return a replay store that's shared for the rest of this run, so a
+ * replayed `(keyid, nonce)` across two deliveries of the same event is
+ * detected. Lazy-constructed on first use so runs without signature
+ * assertions pay zero cost. Explicit caller-supplied stores take
+ * precedence — operators who want durable cross-run detection wire their
+ * own store via `options.webhook_signing.replayStore`.
+ */
+function getSharedReplayStore(runnerVars, override) {
+    if (override)
+        return override;
+    const existing = runnerVars.runState.get(RUN_STATE_REPLAY_KEY);
+    if (existing)
+        return existing;
+    const store = new replay_1.InMemoryReplayStore();
+    runnerVars.runState.set(RUN_STATE_REPLAY_KEY, store);
+    return store;
+}
+function getSharedRevocationStore(runnerVars, override) {
+    if (override)
+        return override;
+    const existing = runnerVars.runState.get(RUN_STATE_REVOCATION_KEY);
+    if (existing)
+        return existing;
+    const store = new revocation_1.InMemoryRevocationStore();
+    runnerVars.runState.set(RUN_STATE_REVOCATION_KEY, store);
+    return store;
+}
+exports.WEBHOOK_ASSERTION_TASKS = new Set([
+    'expect_webhook',
+    'expect_webhook_retry_keys_stable',
+    'expect_webhook_signature_valid',
+]);
+const DEFAULT_TIMEOUT_SECONDS = 30;
+const DEFAULT_RETRY_REPLAY_TIMEOUT_SECONDS = 90;
+const DEFAULT_RETRY_COUNT = 3;
+const DEFAULT_RETRY_HTTP_STATUS = 503;
+const DEFAULT_MIN_DELIVERIES = 2;
+const DEFAULT_WEBHOOK_SIGNING_TAG = 'adcp/webhook-signing/v1';
+/**
+ * Caps on storyboard-declared knobs. Storyboards are data; treat their
+ * fields as untrusted when they drive network behavior against a real
+ * seller. A typo'd `retry_trigger.count: 1_000_000` would otherwise turn
+ * the runner into a DoS amplifier; a `timeout_seconds: 86400` would wedge
+ * CI for a day. Clamps here fail-safe (use the max, don't reject) so a
+ * compliance run never dies on a storyboard author's fat-fingered YAML.
+ */
+const MAX_RETRY_REPLAY_COUNT = 10;
+const MAX_TIMEOUT_SECONDS = 300;
+/** HTTP statuses the retry-replay policy may return. 429 + 5xx are the
+ * shapes any conformant at-least-once sender treats as retryable. */
+const ALLOWED_RETRY_HTTP_STATUSES = new Set([429, 500, 502, 503, 504]);
+function clampTimeoutSeconds(raw, fallback) {
+    const resolved = typeof raw === 'number' && raw > 0 ? raw : fallback;
+    return Math.min(resolved, MAX_TIMEOUT_SECONDS);
+}
+function clampRetryPolicy(spec) {
+    const requestedCount = spec?.count ?? DEFAULT_RETRY_COUNT;
+    const count = Math.max(1, Math.min(requestedCount, MAX_RETRY_REPLAY_COUNT));
+    const requestedStatus = spec?.http_status ?? DEFAULT_RETRY_HTTP_STATUS;
+    const http_status = ALLOWED_RETRY_HTTP_STATUSES.has(requestedStatus) ? requestedStatus : DEFAULT_RETRY_HTTP_STATUS;
+    return { count, http_status };
+}
+/**
+ * Pre-mint operation ids and install retry-replay policies for every
+ * `expect_webhook_retry_keys_stable` step declared by the storyboard.
+ *
+ * Called once at runStoryboard init — ordering matters: the receiver must
+ * be armed BEFORE the triggering step runs or the first delivery will be
+ * accepted and the sender won't retry.
+ */
+function armWebhookAssertions(storyboard, runnerVars, receiver) {
+    for (const phase of storyboard.phases) {
+        for (const step of phase.steps) {
+            if (step.task !== 'expect_webhook_retry_keys_stable')
+                continue;
+            if (!step.triggered_by)
+                continue;
+            // Pre-mint operation_id so the triggering step's {{runner.webhook_url:<id>}}
+            // expansion matches the retry-policy key here.
+            let opId = runnerVars.stepOperationIds.get(step.triggered_by);
+            if (!opId) {
+                opId = (0, node_crypto_1.randomUUID)();
+                runnerVars.stepOperationIds.set(step.triggered_by, opId);
+            }
+            const policy = clampRetryPolicy(step.retry_trigger);
+            receiver.set_retry_replay({ step_id: step.triggered_by, operation_id: opId }, policy);
+        }
+    }
+}
+/**
+ * Dispatch any of the three webhook-assertion pseudo-tasks.
+ *
+ * Called by runner.executeStep when the step's `task` is in
+ * `WEBHOOK_ASSERTION_TASKS`. Every path returns a `StoryboardStepResult`
+ * with validations that carry the spec error codes in `actual.code`.
+ */
+async function executeWebhookAssertionStep(step, phaseId, context, allSteps, options, runState, getNextPreview) {
+    const start = Date.now();
+    const next = getNextPreview?.(step.id);
+    const requestRecord = {
+        transport: 'http',
+        operation: step.task,
+        payload: null,
+    };
+    const extraction = { path: 'none', note: 'webhook-assertion step' };
+    // `requires_contract` skip — assertion opts out cleanly when the harness
+    // contract the author depended on isn't configured on this runner.
+    if (step.requires_contract) {
+        const contracts = new Set(options.contracts ?? []);
+        if (!contracts.has(step.requires_contract)) {
+            return skippedResult(step, phaseId, context, start, {
+                skip_reason: 'unsatisfied_contract',
+                detail: `Test-kit contract "${step.requires_contract}" is not configured on this runner.`,
+                extraction,
+                request: requestRecord,
+                next,
+            });
+        }
+    }
+    if (!runState.webhookReceiver || !runState.runnerVars) {
+        // Webhook receiver isn't enabled — equivalent to "contract not in scope"
+        // for compliance reports. Grade as not_applicable, not fail.
+        return skippedResult(step, phaseId, context, start, {
+            skip_reason: 'unsatisfied_contract',
+            detail: `Step "${step.task}" requires an ephemeral webhook receiver. Pass ` +
+                '`webhook_receiver` on runStoryboard options to enable.',
+            extraction,
+            request: requestRecord,
+            next,
+        });
+    }
+    // If the triggering step failed or was skipped, there's no webhook to
+    // observe — surface as prerequisite_failed rather than timing out.
+    if (step.triggered_by) {
+        const prior = runState.priorStepResults.get(step.triggered_by);
+        if (prior && (prior.skipped || !prior.passed)) {
+            return skippedResult(step, phaseId, context, start, {
+                skip_reason: 'prerequisite_failed',
+                detail: `Triggering step "${step.triggered_by}" did not complete successfully.`,
+                extraction,
+                request: requestRecord,
+                next,
+            });
+        }
+    }
+    const receiver = runState.webhookReceiver;
+    const runnerVars = runState.runnerVars;
+    const filter = buildFilter(step, context, runnerVars);
+    let validations;
+    let passed;
+    switch (step.task) {
+        case 'expect_webhook': {
+            const outcome = await runExpectWebhook(step, filter, receiver);
+            validations = outcome.validations;
+            passed = outcome.passed;
+            break;
+        }
+        case 'expect_webhook_retry_keys_stable': {
+            const outcome = await runExpectRetryKeysStable(step, filter, receiver);
+            validations = outcome.validations;
+            passed = outcome.passed;
+            break;
+        }
+        case 'expect_webhook_signature_valid': {
+            const outcome = await runExpectSignatureValid(step, filter, receiver, options, runnerVars);
+            validations = outcome.validations;
+            passed = outcome.passed;
+            // When the verifier isn't configured, the spec says not_applicable
+            // rather than fail. Return the skipped shape.
+            if (outcome.skipped) {
+                return skippedResult(step, phaseId, context, start, {
+                    skip_reason: 'unsatisfied_contract',
+                    detail: outcome.skipReason ?? 'Signature verifier not configured.',
+                    extraction,
+                    request: requestRecord,
+                    next,
+                });
+            }
+            break;
+        }
+        default: {
+            // Defensive — this function is only called for tasks in WEBHOOK_ASSERTION_TASKS.
+            validations = [];
+            passed = false;
+        }
+    }
+    return {
+        step_id: step.id,
+        phase_id: phaseId,
+        title: step.title,
+        task: step.task,
+        passed,
+        expect_error: step.expect_error,
+        duration_ms: Date.now() - start,
+        validations,
+        context,
+        ...(next && { next }),
+        request: requestRecord,
+        extraction,
+    };
+}
+// ────────────────────────────────────────────────────────────
+// Filter construction
+// ────────────────────────────────────────────────────────────
+function buildFilter(step, context, runnerVars) {
+    const filter = {};
+    // Default: scope to the triggering step's URL. Authors can override via
+    // an explicit `filter.operation_id` (useful for fan-in tests).
+    if (step.triggered_by) {
+        filter.step_id = step.triggered_by;
+        const priorOpId = runnerVars.stepOperationIds.get(step.triggered_by);
+        if (priorOpId)
+            filter.operation_id = priorOpId;
+    }
+    if (step.filter) {
+        // Resolve any `{{prior_step.<id>.operation_id}}` / `$context.*` tokens
+        // before matching — the storyboard may author operation_id this way.
+        const resolved = (0, context_1.injectContext)({ __f: { ...step.filter } }, context, runnerVars).__f;
+        if (resolved && typeof resolved === 'object') {
+            if (typeof resolved.operation_id === 'string') {
+                filter.operation_id = resolved.operation_id;
+            }
+            if (resolved.body && typeof resolved.body === 'object' && !Array.isArray(resolved.body)) {
+                filter.body = resolved.body;
+            }
+        }
+    }
+    return filter;
+}
+// ────────────────────────────────────────────────────────────
+// expect_webhook
+// ────────────────────────────────────────────────────────────
+async function runExpectWebhook(step, filter, receiver) {
+    const timeoutMs = clampTimeoutSeconds(step.timeout_seconds, DEFAULT_TIMEOUT_SECONDS) * 1000;
+    const checkIdempotency = step.expect_idempotency_key !== false;
+    const capCount = step.expect_max_deliveries_per_logical_event;
+    // When we're asserting a cap (e.g., "at most 1 logical event on replay"),
+    // wait the full window to let any duplicate delivery arrive before judging.
+    // When we just need ≥1 delivery, resolve on first match.
+    let matches;
+    if (typeof capCount === 'number') {
+        matches = await receiver.wait_all(filter, timeoutMs);
+    }
+    else {
+        const first = await receiver.wait(filter, timeoutMs);
+        matches = first.webhook ? [first.webhook] : [];
+    }
+    if (matches.length === 0) {
+        return singleFailure(step, 'no_webhook_received', `No webhook matching filter arrived within ${timeoutMs}ms.`, 'webhook delivery matching filter', null);
+    }
+    const first = matches[0];
+    if (first.parse_error !== undefined) {
+        return singleFailure(step, 'schema_violation', `Webhook body was not valid JSON: ${first.parse_error}`, 'JSON object body', first.raw_body.slice(0, 256));
+    }
+    if (checkIdempotency) {
+        const idempotencyCheck = assertIdempotencyKey(first);
+        if (idempotencyCheck)
+            return { validations: [idempotencyCheck], passed: false };
+    }
+    if (typeof capCount === 'number') {
+        const distinctKeys = new Set(matches.map(m => extractIdempotencyKey(m)).filter((k) => !!k));
+        if (distinctKeys.size > capCount) {
+            return singleFailure(step, 'duplicate_webhook_on_replay', `Observed ${distinctKeys.size} distinct logical events in the window (idempotency_keys); expected ≤ ${capCount}.`, `≤ ${capCount} distinct idempotency_keys`, Array.from(distinctKeys));
+        }
+    }
+    return {
+        validations: [
+            {
+                check: 'expect_webhook',
+                passed: true,
+                description: `Webhook arrived at ${filter.step_id ?? 'receiver'} with valid idempotency_key.`,
+                json_pointer: '/idempotency_key',
+            },
+        ],
+        passed: true,
+    };
+}
+// ────────────────────────────────────────────────────────────
+// expect_webhook_retry_keys_stable
+// ────────────────────────────────────────────────────────────
+async function runExpectRetryKeysStable(step, filter, receiver) {
+    const timeoutMs = clampTimeoutSeconds(step.timeout_seconds, DEFAULT_RETRY_REPLAY_TIMEOUT_SECONDS) * 1000;
+    const minDeliveries = step.expect_min_deliveries ?? DEFAULT_MIN_DELIVERIES;
+    const matches = await receiver.wait_all(filter, timeoutMs);
+    if (matches.length < minDeliveries) {
+        return singleFailure(step, 'insufficient_retries', `Observed ${matches.length} deliveries; expected at least ${minDeliveries}. ` +
+            'The sender may not be retrying on 5xx responses.', `≥ ${minDeliveries} deliveries`, matches.length);
+    }
+    const keys = matches.map(m => extractIdempotencyKey(m));
+    const missingKey = matches.find((_, i) => !keys[i]);
+    if (missingKey) {
+        return singleFailure(step, 'missing_idempotency_key', `Delivery ${missingKey.delivery_index} carried no idempotency_key.`, 'every delivery carries idempotency_key', null);
+    }
+    const firstKey = keys[0];
+    const formatValid = keys.every(k => k && types_1.WEBHOOK_IDEMPOTENCY_KEY_PATTERN.test(k));
+    if (!formatValid) {
+        const bad = keys.find(k => !k || !types_1.WEBHOOK_IDEMPOTENCY_KEY_PATTERN.test(k));
+        return singleFailure(step, 'idempotency_key_format_changed', `One or more deliveries carried a malformed idempotency_key. Required pattern: ${types_1.WEBHOOK_IDEMPOTENCY_KEY_PATTERN.source}`, types_1.WEBHOOK_IDEMPOTENCY_KEY_PATTERN.source, bad ?? null);
+    }
+    const rotated = keys.some(k => k !== firstKey);
+    if (rotated) {
+        return singleFailure(step, 'idempotency_key_rotated', "idempotency_key rotated across retries. Senders MUST reuse the first delivery's key for every retry of the same logical event.", 'byte-identical idempotency_key on every delivery', keys);
+    }
+    return {
+        validations: [
+            {
+                check: 'expect_webhook_retry_keys_stable',
+                passed: true,
+                description: `${matches.length} deliveries observed; all carried byte-identical idempotency_key.`,
+                json_pointer: '/idempotency_key',
+            },
+        ],
+        passed: true,
+    };
+}
+// ────────────────────────────────────────────────────────────
+// expect_webhook_signature_valid
+// ────────────────────────────────────────────────────────────
+async function runExpectSignatureValid(step, filter, receiver, options, runnerVars) {
+    const config = options.webhook_signing;
+    if (!config) {
+        return {
+            validations: [],
+            passed: true,
+            skipped: true,
+            skipReason: '`expect_webhook_signature_valid` requires `webhook_signing` on runStoryboard options ' +
+                '(pass a JwksResolver; replay + revocation stores default to in-memory).',
+        };
+    }
+    const timeoutMs = clampTimeoutSeconds(step.timeout_seconds, DEFAULT_TIMEOUT_SECONDS) * 1000;
+    const wait = await receiver.wait(filter, timeoutMs);
+    if (wait.timed_out || !wait.webhook) {
+        return singleFailure(step, 'no_webhook_received', `No webhook matching filter arrived within ${timeoutMs}ms.`, 'signed webhook delivery matching filter', null);
+    }
+    const webhook = wait.webhook;
+    void runnerVars;
+    const requestLike = toRequestLike(webhook, receiver);
+    const requiredTag = step.require_tag ?? config.required_tag ?? DEFAULT_WEBHOOK_SIGNING_TAG;
+    try {
+        await (0, webhook_verifier_1.verifyWebhookSignature)(requestLike, {
+            jwks: config.jwks,
+            replayStore: getSharedReplayStore(runnerVars, config.replayStore),
+            revocationStore: getSharedRevocationStore(runnerVars, config.revocationStore),
+            requiredTag,
+        });
+    }
+    catch (err) {
+        if (err instanceof errors_1.WebhookSignatureError) {
+            return singleFailure(step, mapSignatureErrorCode(err.code), err.message, `checklist step ${err.failedStep} passes`, { code: err.code, step: err.failedStep });
+        }
+        return singleFailure(step, 'signature_invalid', err instanceof Error ? err.message : String(err), '9421 webhook signature verification', null);
+    }
+    return {
+        validations: [
+            {
+                check: 'expect_webhook_signature_valid',
+                passed: true,
+                description: `9421 webhook signature verified under ${requiredTag}.`,
+            },
+        ],
+        passed: true,
+    };
+}
+/**
+ * Translate a captured webhook into the `RequestLike` shape the shared
+ * canonicalizer expects. The receiver's `base_url` plus `step_id` /
+ * `operation_id` reconstruct the `@target-uri` the publisher signed.
+ */
+function toRequestLike(webhook, receiver) {
+    const url = `${receiver.base_url}/step/${webhook.step_id}/${webhook.operation_id}`;
+    return {
+        method: webhook.method,
+        url,
+        headers: webhook.headers,
+        body: webhook.raw_body,
+    };
+}
+/**
+ * Map the verifier's `webhook_signature_*` error codes to the storyboard-side
+ * `signature_*` codes defined by adcontextprotocol/adcp#2431. Exhaustive so
+ * that adding a new verifier code without a mapping is a TS compile error
+ * rather than a silent collapse onto `signature_invalid` — distinct
+ * remediation paths deserve distinct codes (a revoked key needs rotation,
+ * a malformed window is a signer bug, etc.).
+ */
+function mapSignatureErrorCode(code) {
+    switch (code) {
+        case 'webhook_signature_header_malformed':
+            return 'signature_header_malformed';
+        case 'webhook_signature_params_incomplete':
+            return 'signature_params_incomplete';
+        case 'webhook_signature_tag_invalid':
+            return 'signature_tag_invalid';
+        case 'webhook_signature_alg_not_allowed':
+            return 'signature_alg_not_allowed';
+        case 'webhook_signature_window_invalid':
+            return 'signature_window_invalid';
+        case 'webhook_signature_components_incomplete':
+            return 'signature_components_incomplete';
+        case 'webhook_signature_key_unknown':
+            return 'signature_key_unknown';
+        case 'webhook_signature_key_purpose_invalid':
+            return 'signature_key_purpose_invalid';
+        case 'webhook_mode_mismatch':
+            return 'signature_mode_mismatch';
+        case 'webhook_target_uri_malformed':
+            return 'signature_target_uri_malformed';
+        case 'webhook_signature_key_revoked':
+            return 'signature_key_revoked';
+        case 'webhook_signature_revocation_stale':
+            return 'signature_revocation_stale';
+        case 'webhook_signature_rate_abuse':
+            return 'signature_rate_abuse';
+        case 'webhook_signature_digest_mismatch':
+            return 'signature_digest_mismatch';
+        case 'webhook_signature_replayed':
+            return 'signature_replayed';
+        case 'webhook_signature_invalid':
+            return 'signature_invalid';
+        default: {
+            // Exhaustiveness: any unhandled code is a compile error.
+            const _exhaustive = code;
+            void _exhaustive;
+            return 'signature_invalid';
+        }
+    }
+}
+// ────────────────────────────────────────────────────────────
+// Helpers
+// ────────────────────────────────────────────────────────────
+function extractIdempotencyKey(webhook) {
+    const body = webhook.body;
+    if (body === null || typeof body !== 'object' || Array.isArray(body))
+        return undefined;
+    const key = body.idempotency_key;
+    return typeof key === 'string' ? key : undefined;
+}
+function assertIdempotencyKey(webhook) {
+    const body = webhook.body;
+    if (body === null || typeof body !== 'object' || Array.isArray(body)) {
+        return failure('schema_violation', 'Webhook body was not a JSON object.', 'JSON object body', null);
+    }
+    const key = body.idempotency_key;
+    if (typeof key !== 'string' || key.length === 0) {
+        return failure('missing_idempotency_key', 'Webhook body is missing a non-empty `idempotency_key` — required by AdCP 3.0.', 'non-empty string', key ?? null);
+    }
+    if (!types_1.WEBHOOK_IDEMPOTENCY_KEY_PATTERN.test(key)) {
+        return failure('invalid_idempotency_key_format', `idempotency_key "${key}" does not match required pattern ${types_1.WEBHOOK_IDEMPOTENCY_KEY_PATTERN.source}.`, types_1.WEBHOOK_IDEMPOTENCY_KEY_PATTERN.source, key);
+    }
+    return undefined;
+}
+function failure(code, message, expected, actual) {
+    return {
+        check: 'expect_webhook',
+        passed: false,
+        description: 'Webhook conformance assertion failed.',
+        error: message,
+        json_pointer: '/idempotency_key',
+        expected,
+        actual: { code, actual },
+    };
+}
+function singleFailure(step, code, message, expected, actual) {
+    return {
+        validations: [
+            {
+                check: step.task,
+                passed: false,
+                description: step.expected ?? step.title,
+                error: message,
+                json_pointer: '/idempotency_key',
+                expected,
+                actual: { code, actual },
+            },
+        ],
+        passed: false,
+    };
+}
+function skippedResult(step, phaseId, context, start, opts) {
+    return {
+        step_id: step.id,
+        phase_id: phaseId,
+        title: step.title,
+        task: step.task,
+        passed: true,
+        skipped: true,
+        skip_reason: opts.skip_reason,
+        skip: { reason: opts.skip_reason, detail: opts.detail },
+        duration_ms: Date.now() - start,
+        validations: [],
+        context,
+        error: opts.detail,
+        ...(opts.next && { next: opts.next }),
+        request: opts.request,
+        extraction: opts.extraction,
+    };
+}
+//# sourceMappingURL=webhook-assertions.js.map

package/dist/lib/testing/storyboard/webhook-assertions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook-assertions.js","sourceRoot":"","sources":["../../../../src/lib/testing/storyboard/webhook-assertions.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;;;AA0HH,oDAqBC;AASD,kEAwHC;AA9QD,6CAAyC;AACzC,uCAAgE;AAchE,mCAA0D;AAE1D,qEAAwE;AACxE,iDAA6D;AAC7D,iDAA6E;AAC7E,yDAAyF;AAGzF,MAAM,oBAAoB,GAAG,gCAAgC,CAAC;AAC9D,MAAM,wBAAwB,GAAG,oCAAoC,CAAC;AAEtE;;;;;;;GAOG;AACH,SAAS,oBAAoB,CAAC,UAA2B,EAAE,QAAiC;IAC1F,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;IAC/D,IAAI,QAAQ;QAAE,OAAO,QAAuB,CAAC;IAC7C,MAAM,KAAK,GAAG,IAAI,4BAAmB,EAAE,CAAC;IACxC,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,oBAAoB,EAAE,KAAK,CAAC,CAAC;IACrD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,wBAAwB,CAAC,UAA2B,EAAE,QAAqC;IAClG,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;IACnE,IAAI,QAAQ;QAAE,OAAO,QAA2B,CAAC;IACjD,MAAM,KAAK,GAAG,IAAI,oCAAuB,EAAE,CAAC;IAC5C,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,wBAAwB,EAAE,KAAK,CAAC,CAAC;IACzD,OAAO,KAAK,CAAC;AACf,CAAC;AAEY,QAAA,uBAAuB,GAAgB,IAAI,GAAG,CAAC;IAC1D,gBAAgB;IAChB,kCAAkC;IAClC,gCAAgC;CACjC,CAAC,CAAC;AAEH,MAAM,uBAAuB,GAAG,EAAE,CAAC;AACnC,MAAM,oCAAoC,GAAG,EAAE,CAAC;AAChD,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAC9B,MAAM,yBAAyB,GAAG,GAAG,CAAC;AACtC,MAAM,sBAAsB,GAAG,CAAC,CAAC;AACjC,MAAM,2BAA2B,GAAG,yBAAyB,CAAC;AAE9D;;;;;;;GAOG;AACH,MAAM,sBAAsB,GAAG,EAAE,CAAC;AAClC,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAChC;qEACqE;AACrE,MAAM,2BAA2B,GAAwB,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;AAE5F,SAAS,mBAAmB,CAAC,GAAuB,EAAE,QAAgB;IACpE,MAAM,QAAQ,GAAG,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC;IACrE,OAAO,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAC;AACjD,CAAC;AAED,SAAS,gBAAgB,CAAC,IAA0D;IAIlF,MAAM,cAAc,GAAG,IAAI,EAAE,KAAK,IAAI,mBAAmB,CAAC;IAC1D,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,cAAc,EAAE,sBAAsB,CAAC,CAAC,CAAC;IAC5E,MAAM,eAAe,GAAG,IAAI,EAAE,WAAW,IAAI,yBAAyB,CAAC;IACvE,MAAM,WAAW,GAAG,2BAA2B,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,yBAAyB,CAAC;IACnH,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;AAChC,CAAC;AAmBD;;;;;;;GAOG;AACH,SAAgB,oBAAoB,CAClC,UAAsB,EACtB,UAA2B,EAC3B,QAAyB;IAEzB,KAAK,MAAM,KAAK,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC;QACtC,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YAC/B,IAAI,IAAI,CAAC,IAAI,KAAK,kCAAkC;gBAAE,SAAS;YAC/D,IAAI,CAAC,IAAI,CAAC,YAAY;gBAAE,SAAS;YAEjC,6EAA6E;YAC7E,+CAA+C;YAC/C,IAAI,IAAI,GAAG,UAAU,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAC9D,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,IAAI,GAAG,IAAA,wBAAU,GAAE,CAAC;gBACpB,UAAU,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;YAC3D,CAAC;YACD,MAAM,MAAM,GAAsB,gBAAgB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YACvE,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,YAAY,EAAE,YAAY,EAAE,IAAI,EAAE,EAAE,MAAM,CAAC,CAAC;QACxF,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACI,KAAK,UAAU,2BAA2B,CAC/C,IAAoB,EACpB,OAAe,EACf,OAA0B,EAC1B,QAAoB,EACpB,OAA6B,EAC7B,QAAkC,EAClC,cAA+B;IAE/B,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACzB,MAAM,IAAI,GAAG,cAAc,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACvC,MAAM,aAAa,GAAwB;QACzC,SAAS,EAAE,MAAM;QACjB,SAAS,EAAE,IAAI,CAAC,IAAI;QACpB,OAAO,EAAE,IAAI;KACd,CAAC;IACF,MAAM,UAAU,GAA2B,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,wBAAwB,EAAE,CAAC;IAE5F,yEAAyE;IACzE,mEAAmE;IACnE,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC3B,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;QACnD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,CAAC;YAC3C,OAAO,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE;gBAClD,WAAW,EAAE,sBAAsB;gBACnC,MAAM,EAAE,sBAAsB,IAAI,CAAC,iBAAiB,qCAAqC;gBACzF,UAAU;gBACV,OAAO,EAAE,aAAa;gBACtB,IAAI;aACL,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,eAAe,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC;QACtD,yEAAyE;QACzE,6DAA6D;QAC7D,OAAO,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE;YAClD,WAAW,EAAE,sBAAsB;YACnC,MAAM,EACJ,SAAS,IAAI,CAAC,IAAI,iDAAiD;gBACnE,wDAAwD;YAC1D,UAAU;YACV,OAAO,EAAE,aAAa;YACtB,IAAI;SACL,CAAC,CAAC;IACL,CAAC;IAED,sEAAsE;IACtE,mEAAmE;IACnE,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;QACtB,MAAM,KAAK,GAAG,QAAQ,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC/D,IAAI,KAAK,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;YAC9C,OAAO,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE;gBAClD,WAAW,EAAE,qBAAqB;gBAClC,MAAM,EAAE,oBAAoB,IAAI,CAAC,YAAY,kCAAkC;gBAC/E,UAAU;gBACV,OAAO,EAAE,aAAa;gBACtB,IAAI;aACL,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,QAAQ,CAAC,eAAe,CAAC;IAC1C,MAAM,UAAU,GAAG,QAAQ,CAAC,UAAU,CAAC;IACvC,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;IAEtD,IAAI,WAA+B,CAAC;IACpC,IAAI,MAAe,CAAC;IAEpB,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;QAClB,KAAK,gBAAgB,CAAC,CAAC,CAAC;YACtB,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;YAC/D,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;YAClC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;YACxB,MAAM;QACR,CAAC;QACD,KAAK,kCAAkC,CAAC,CAAC,CAAC;YACxC,MAAM,OAAO,GAAG,MAAM,wBAAwB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;YACvE,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;YAClC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;YACxB,MAAM;QACR,CAAC;QACD,KAAK,gCAAgC,CAAC,CAAC,CAAC;YACtC,MAAM,OAAO,GAAG,MAAM,uBAAuB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;YAC3F,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;YAClC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;YACxB,mEAAmE;YACnE,8CAA8C;YAC9C,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;gBACpB,OAAO,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE;oBAClD,WAAW,EAAE,sBAAsB;oBACnC,MAAM,EAAE,OAAO,CAAC,UAAU,IAAI,oCAAoC;oBAClE,UAAU;oBACV,OAAO,EAAE,aAAa;oBACtB,IAAI;iBACL,CAAC,CAAC;YACL,CAAC;YACD,MAAM;QACR,CAAC;QACD,OAAO,CAAC,CAAC,CAAC;YACR,iFAAiF;YACjF,WAAW,GAAG,EAAE,CAAC;YACjB,MAAM,GAAG,KAAK,CAAC;QACjB,CAAC;IACH,CAAC;IAED,OAAO;QACL,OAAO,EAAE,IAAI,CAAC,EAAE;QAChB,QAAQ,EAAE,OAAO;QACjB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,MAAM;QACN,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;QAC/B,WAAW;QACX,OAAO;QACP,GAAG,CAAC,IAAI,IAAI,EAAE,IAAI,EAAE,CAAC;QACrB,OAAO,EAAE,aAAa;QACtB,UAAU;KACX,CAAC;AACJ,CAAC;AAED,+DAA+D;AAC/D,sBAAsB;AACtB,+DAA+D;AAE/D,SAAS,WAAW,CAAC,IAAoB,EAAE,OAA0B,EAAE,UAA2B;IAChG,MAAM,MAAM,GAAkB,EAAE,CAAC;IAEjC,wEAAwE;IACxE,+DAA+D;IAC/D,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;QACtB,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC;QACnC,MAAM,SAAS,GAAG,UAAU,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACrE,IAAI,SAAS;YAAE,MAAM,CAAC,YAAY,GAAG,SAAS,CAAC;IACjD,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,uEAAuE;QACvE,qEAAqE;QACrE,MAAM,QAAQ,GAAG,IAAA,uBAAa,EAAC,EAAE,GAAG,EAAE,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC,GAA8B,CAAC;QAChH,IAAI,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC7C,IAAI,OAAO,QAAQ,CAAC,YAAY,KAAK,QAAQ,EAAE,CAAC;gBAC9C,MAAM,CAAC,YAAY,GAAG,QAAQ,CAAC,YAAY,CAAC;YAC9C,CAAC;YACD,IAAI,QAAQ,CAAC,IAAI,IAAI,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBACxF,MAAM,CAAC,IAAI,GAAG,QAAQ,CAAC,IAA+B,CAAC;YACzD,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,+DAA+D;AAC/D,iBAAiB;AACjB,+DAA+D;AAE/D,KAAK,UAAU,gBAAgB,CAC7B,IAAoB,EACpB,MAAqB,EACrB,QAAyB;IAEzB,MAAM,SAAS,GAAG,mBAAmB,CAAC,IAAI,CAAC,eAAe,EAAE,uBAAuB,CAAC,GAAG,IAAI,CAAC;IAC5F,MAAM,gBAAgB,GAAG,IAAI,CAAC,sBAAsB,KAAK,KAAK,CAAC;IAC/D,MAAM,QAAQ,GAAG,IAAI,CAAC,uCAAuC,CAAC;IAE9D,0EAA0E;IAC1E,4EAA4E;IAC5E,yDAAyD;IACzD,IAAI,OAA0B,CAAC;IAC/B,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACjC,OAAO,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IACvD,CAAC;SAAM,CAAC;QACN,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QACrD,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACjD,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,aAAa,CAClB,IAAI,EACJ,qBAAqB,EACrB,6CAA6C,SAAS,KAAK,EAC3D,kCAAkC,EAClC,IAAI,CACL,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAE,CAAC;IAC1B,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QACpC,OAAO,aAAa,CAClB,IAAI,EACJ,kBAAkB,EAClB,oCAAoC,KAAK,CAAC,WAAW,EAAE,EACvD,kBAAkB,EAClB,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAC7B,CAAC;IACJ,CAAC;IAED,IAAI,gBAAgB,EAAE,CAAC;QACrB,MAAM,gBAAgB,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;QACrD,IAAI,gBAAgB;YAAE,OAAO,EAAE,WAAW,EAAE,CAAC,gBAAgB,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAClF,CAAC;IAED,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACjC,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACzG,IAAI,YAAY,CAAC,IAAI,GAAG,QAAQ,EAAE,CAAC;YACjC,OAAO,aAAa,CAClB,IAAI,EACJ,6BAA6B,EAC7B,YAAY,YAAY,CAAC,IAAI,yEAAyE,QAAQ,GAAG,EACjH,KAAK,QAAQ,4BAA4B,EACzC,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CACzB,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO;QACL,WAAW,EAAE;YACX;gBACE,KAAK,EAAE,gBAAgB;gBACvB,MAAM,EAAE,IAAI;gBACZ,WAAW,EAAE,sBAAsB,MAAM,CAAC,OAAO,IAAI,UAAU,8BAA8B;gBAC7F,YAAY,EAAE,kBAAkB;aACjC;SACF;QACD,MAAM,EAAE,IAAI;KACb,CAAC;AACJ,CAAC;AAED,+DAA+D;AAC/D,mCAAmC;AACnC,+DAA+D;AAE/D,KAAK,UAAU,wBAAwB,CACrC,IAAoB,EACpB,MAAqB,EACrB,QAAyB;IAEzB,MAAM,SAAS,GAAG,mBAAmB,CAAC,IAAI,CAAC,eAAe,EAAE,oCAAoC,CAAC,GAAG,IAAI,CAAC;IACzG,MAAM,aAAa,GAAG,IAAI,CAAC,qBAAqB,IAAI,sBAAsB,CAAC;IAE3E,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAE3D,IAAI,OAAO,CAAC,MAAM,GAAG,aAAa,EAAE,CAAC;QACnC,OAAO,aAAa,CAClB,IAAI,EACJ,sBAAsB,EACtB,YAAY,OAAO,CAAC,MAAM,kCAAkC,aAAa,IAAI;YAC3E,kDAAkD,EACpD,KAAK,aAAa,aAAa,EAC/B,OAAO,CAAC,MAAM,CACf,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,CAAC;IACxD,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACpD,IAAI,UAAU,EAAE,CAAC;QACf,OAAO,aAAa,CAClB,IAAI,EACJ,yBAAyB,EACzB,YAAY,UAAU,CAAC,cAAc,8BAA8B,EACnE,wCAAwC,EACxC,IAAI,CACL,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAE,CAAC;IAC1B,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,uCAA+B,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAClF,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,uCAA+B,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3E,OAAO,aAAa,CAClB,IAAI,EACJ,gCAAgC,EAChC,iFAAiF,uCAA+B,CAAC,MAAM,EAAE,EACzH,uCAA+B,CAAC,MAAM,EACtC,GAAG,IAAI,IAAI,CACZ,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC;IAC/C,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,aAAa,CAClB,IAAI,EACJ,yBAAyB,EACzB,gIAAgI,EAChI,kDAAkD,EAClD,IAAI,CACL,CAAC;IACJ,CAAC;IAED,OAAO;QACL,WAAW,EAAE;YACX;gBACE,KAAK,EAAE,kCAAkC;gBACzC,MAAM,EAAE,IAAI;gBACZ,WAAW,EAAE,GAAG,OAAO,CAAC,MAAM,mEAAmE;gBACjG,YAAY,EAAE,kBAAkB;aACjC;SACF;QACD,MAAM,EAAE,IAAI;KACb,CAAC;AACJ,CAAC;AAED,+DAA+D;AAC/D,iCAAiC;AACjC,+DAA+D;AAE/D,KAAK,UAAU,uBAAuB,CACpC,IAAoB,EACpB,MAAqB,EACrB,QAAyB,EACzB,OAA6B,EAC7B,UAA2B;IAE3B,MAAM,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;IACvC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO;YACL,WAAW,EAAE,EAAE;YACf,MAAM,EAAE,IAAI;YACZ,OAAO,EAAE,IAAI;YACb,UAAU,EACR,uFAAuF;gBACvF,yEAAyE;SAC5E,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,mBAAmB,CAAC,IAAI,CAAC,eAAe,EAAE,uBAAuB,CAAC,GAAG,IAAI,CAAC;IAC5F,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IACpD,IAAI,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QACpC,OAAO,aAAa,CAClB,IAAI,EACJ,qBAAqB,EACrB,6CAA6C,SAAS,KAAK,EAC3D,yCAAyC,EACzC,IAAI,CACL,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;IAC7B,KAAK,UAAU,CAAC;IAChB,MAAM,WAAW,GAAG,aAAa,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACrD,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,MAAM,CAAC,YAAY,IAAI,2BAA2B,CAAC;IAE3F,IAAI,CAAC;QACH,MAAM,IAAA,yCAAsB,EAAC,WAAW,EAAE;YACxC,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,WAAW,EAAE,oBAAoB,CAAC,UAAU,EAAE,MAAM,CAAC,WAAW,CAAC;YACjE,eAAe,EAAE,wBAAwB,CAAC,UAAU,EAAE,MAAM,CAAC,eAAe,CAAC;YAC7E,WAAW;SACZ,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,8BAAqB,EAAE,CAAC;YACzC,OAAO,aAAa,CAClB,IAAI,EACJ,qBAAqB,CAAC,GAAG,CAAC,IAAI,CAAC,EAC/B,GAAG,CAAC,OAAO,EACX,kBAAkB,GAAG,CAAC,UAAU,SAAS,EACzC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,UAAU,EAAE,CACzC,CAAC;QACJ,CAAC;QACD,OAAO,aAAa,CAClB,IAAI,EACJ,mBAAmB,EACnB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAChD,qCAAqC,EACrC,IAAI,CACL,CAAC;IACJ,CAAC;IAED,OAAO;QACL,WAAW,EAAE;YACX;gBACE,KAAK,EAAE,gCAAgC;gBACvC,MAAM,EAAE,IAAI;gBACZ,WAAW,EAAE,yCAAyC,WAAW,GAAG;aACrE;SACF;QACD,MAAM,EAAE,IAAI;KACb,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,aAAa,CAAC,OAAwB,EAAE,QAAyB;IACxE,MAAM,GAAG,GAAG,GAAG,QAAQ,CAAC,QAAQ,SAAS,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;IACnF,OAAO;QACL,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,GAAG;QACH,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,IAAI,EAAE,OAAO,CAAC,QAAQ;KACvB,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,qBAAqB,CAC5B,IAA8D;IAE9D,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,oCAAoC;YACvC,OAAO,4BAA4B,CAAC;QACtC,KAAK,qCAAqC;YACxC,OAAO,6BAA6B,CAAC;QACvC,KAAK,+BAA+B;YAClC,OAAO,uBAAuB,CAAC;QACjC,KAAK,mCAAmC;YACtC,OAAO,2BAA2B,CAAC;QACrC,KAAK,kCAAkC;YACrC,OAAO,0BAA0B,CAAC;QACpC,KAAK,yCAAyC;YAC5C,OAAO,iCAAiC,CAAC;QAC3C,KAAK,+BAA+B;YAClC,OAAO,uBAAuB,CAAC;QACjC,KAAK,uCAAuC;YAC1C,OAAO,+BAA+B,CAAC;QACzC,KAAK,uBAAuB;YAC1B,OAAO,yBAAyB,CAAC;QACnC,KAAK,8BAA8B;YACjC,OAAO,gCAAgC,CAAC;QAC1C,KAAK,+BAA+B;YAClC,OAAO,uBAAuB,CAAC;QACjC,KAAK,oCAAoC;YACvC,OAAO,4BAA4B,CAAC;QACtC,KAAK,8BAA8B;YACjC,OAAO,sBAAsB,CAAC;QAChC,KAAK,mCAAmC;YACtC,OAAO,2BAA2B,CAAC;QACrC,KAAK,4BAA4B;YAC/B,OAAO,oBAAoB,CAAC;QAC9B,KAAK,2BAA2B;YAC9B,OAAO,mBAAmB,CAAC;QAC7B,OAAO,CAAC,CAAC,CAAC;YACR,yDAAyD;YACzD,MAAM,WAAW,GAAU,IAAI,CAAC;YAChC,KAAK,WAAW,CAAC;YACjB,OAAO,mBAAmB,CAAC;QAC7B,CAAC;IACH,CAAC;AACH,CAAC;AAED,+DAA+D;AAC/D,UAAU;AACV,+DAA+D;AAE/D,SAAS,qBAAqB,CAAC,OAAwB;IACrD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAC1B,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IACvF,MAAM,GAAG,GAAI,IAAgC,CAAC,eAAe,CAAC;IAC9D,OAAO,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;AACnD,CAAC;AAED,SAAS,oBAAoB,CAAC,OAAwB;IACpD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAC1B,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACrE,OAAO,OAAO,CAAC,kBAAkB,EAAE,qCAAqC,EAAE,kBAAkB,EAAE,IAAI,CAAC,CAAC;IACtG,CAAC;IACD,MAAM,GAAG,GAAI,IAAgC,CAAC,eAAe,CAAC;IAC9D,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChD,OAAO,OAAO,CACZ,yBAAyB,EACzB,+EAA+E,EAC/E,kBAAkB,EAClB,GAAG,IAAI,IAAI,CACZ,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,uCAA+B,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,OAAO,OAAO,CACZ,gCAAgC,EAChC,oBAAoB,GAAG,qCAAqC,uCAA+B,CAAC,MAAM,GAAG,EACrG,uCAA+B,CAAC,MAAM,EACtC,GAAG,CACJ,CAAC;IACJ,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,OAAO,CACd,IAA+B,EAC/B,OAAe,EACf,QAAiB,EACjB,MAAe;IAEf,OAAO;QACL,KAAK,EAAE,gBAAgB;QACvB,MAAM,EAAE,KAAK;QACb,WAAW,EAAE,uCAAuC;QACpD,KAAK,EAAE,OAAO;QACd,YAAY,EAAE,kBAAkB;QAChC,QAAQ;QACR,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;KACzB,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CACpB,IAAoB,EACpB,IAA+B,EAC/B,OAAe,EACf,QAAiB,EACjB,MAAe;IAEf,OAAO;QACL,WAAW,EAAE;YACX;gBACE,KAAK,EAAE,IAAI,CAAC,IAAI;gBAChB,MAAM,EAAE,KAAK;gBACb,WAAW,EAAE,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,KAAK;gBACxC,KAAK,EAAE,OAAO;gBACd,YAAY,EAAE,kBAAkB;gBAChC,QAAQ;gBACR,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;aACzB;SACF;QACD,MAAM,EAAE,KAAK;KACd,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CACpB,IAAoB,EACpB,OAAe,EACf,OAA0B,EAC1B,KAAa,EACb,IAMC;IAED,OAAO;QACL,OAAO,EAAE,IAAI,CAAC,EAAE;QAChB,QAAQ,EAAE,OAAO;QACjB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,MAAM,EAAE,IAAI;QACZ,OAAO,EAAE,IAAI;QACb,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE;QACvD,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;QAC/B,WAAW,EAAE,EAAE;QACf,OAAO;QACP,KAAK,EAAE,IAAI,CAAC,MAAM;QAClB,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;QACrC,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,UAAU,EAAE,IAAI,CAAC,UAAU;KAC5B,CAAC;AACJ,CAAC"}

package/dist/lib/testing/storyboard/webhook-receiver.d.ts

@@ -0,0 +1,104 @@
+/**
+ * Ephemeral webhook receiver for storyboard runs.
+ *
+ * The runner binds an HTTP listener, mints per-step URLs under
+ * `/step/<step_id>/<operation_id>`, and captures inbound POSTs so
+ * `expect_webhook*` pseudo-steps can observe outbound webhook behavior
+ * (idempotency_key presence, retry-key stability, 9421 signature validity).
+ *
+ * Matches the `webhook_receiver_runner` test-kit contract in
+ * adcontextprotocol/adcp#2431:
+ *   - Per-step URL template `{{runner.webhook_base}}/step/<step_id>/<operation_id>`.
+ *   - Retry-replay: the receiver returns a configurable 5xx for the first N
+ *     deliveries on a given `(step_id, operation_id)`, then 2xx, so senders
+ *     are forced to retry and retry-key stability can be graded.
+ *   - Loopback-mock mode (HTTP on 127.0.0.1, zero external deps) by default;
+ *     proxy-URL mode swaps in an operator-supplied public base.
+ */
+export interface CapturedWebhook {
+    /** Runner-assigned id; stable across filter matches. */
+    id: string;
+    /** Step id extracted from the URL path. */
+    step_id: string;
+    /** Operation id extracted from the URL path. */
+    operation_id: string;
+    /** Delivery sequence number for this (step_id, operation_id) — 1-based. */
+    delivery_index: number;
+    /** Wall-clock millis at receipt. */
+    received_at: number;
+    method: string;
+    /** Path + query. */
+    path: string;
+    /** Lowercased header names; duplicate values joined with ", ". */
+    headers: Record<string, string>;
+    /** Raw request body — needed for RFC 9421 content-digest recompute. */
+    raw_body: string;
+    /** Parsed JSON body; undefined on parse failure. */
+    body?: unknown;
+    /** Parse error message when raw_body was non-empty but not valid JSON. */
+    parse_error?: string;
+    /** HTTP status the receiver returned (reflects retry-replay policy). */
+    response_status: number;
+}
+/** Match predicate applied when waiting for a webhook. */
+export interface WebhookFilter {
+    /** Restrict matches to this step id's URL. */
+    step_id?: string;
+    /** Restrict matches to this operation id. */
+    operation_id?: string;
+    /** Dotted-path → expected-value pairs compared against the parsed body. */
+    body?: Record<string, unknown>;
+}
+export type WebhookWaitResult = {
+    webhook: CapturedWebhook;
+    timed_out?: false;
+} | {
+    timed_out: true;
+    webhook?: undefined;
+};
+export interface RetryReplayPolicy {
+    /** How many deliveries to reject before accepting. */
+    count: number;
+    /** HTTP status to return on rejection. */
+    http_status: number;
+}
+export interface WebhookReceiver {
+    /** Public base URL (`http://host:port` for loopback, operator URL for proxy). */
+    readonly base_url: string;
+    /** Whether the receiver is in loopback-mock or proxy-url mode. */
+    readonly mode: 'loopback_mock' | 'proxy_url';
+    /** All webhooks captured so far, in arrival order. */
+    all(): CapturedWebhook[];
+    /** Webhooks matching a filter, in arrival order. */
+    matching(filter: WebhookFilter): CapturedWebhook[];
+    /**
+     * Configure the receiver to return `http_status` for the first `count`
+     * deliveries at `(step_id, operation_id)` and 2xx afterwards. Idempotent:
+     * setting a new policy replaces any existing one for the same key.
+     */
+    set_retry_replay(key: {
+        step_id: string;
+        operation_id: string;
+    }, policy: RetryReplayPolicy): void;
+    /** Resolve with the first match within `timeout_ms`, or `timed_out: true`. */
+    wait(filter: WebhookFilter, timeout_ms: number): Promise<WebhookWaitResult>;
+    /**
+     * Resolve with every match observed between call time and deadline. Used
+     * by `expect_webhook_retry_keys_stable` which needs the full sequence of
+     * deliveries for the retry-replay assertion.
+     */
+    wait_all(filter: WebhookFilter, timeout_ms: number): Promise<CapturedWebhook[]>;
+    /** Stop the listener. Idempotent. */
+    close(): Promise<void>;
+}
+export interface CreateWebhookReceiverOptions {
+    mode?: 'loopback_mock' | 'proxy_url';
+    /** Bind host for the local listener. Defaults to `127.0.0.1`. */
+    host?: string;
+    /** Bind port. `0` (default) lets the kernel assign one. */
+    port?: number;
+    /** Public URL to advertise when `mode: 'proxy_url'`. */
+    public_url?: string;
+}
+export declare function createWebhookReceiver(options?: CreateWebhookReceiverOptions): Promise<WebhookReceiver>;
+//# sourceMappingURL=webhook-receiver.d.ts.map