@blokjs/trigger-webhook 0.2.1 → 0.6.2

package/dist/verifiers.js

@@ -0,0 +1,294 @@
+/**
+ * Webhook signature verifiers — one strategy per supported provider.
+ *
+ * Each verifier reads the raw request bytes (NOT the JSON-parsed body)
+ * and the provider-specific signature header, computes the expected
+ * HMAC against a shared secret, and constant-time compares. On match,
+ * returns `{ ok: true, eventId, eventType }`. On mismatch / missing
+ * header / drift, returns `{ ok: false, reason, message }`.
+ *
+ * Constant-time comparison via `crypto.timingSafeEqual` is mandatory —
+ * a naive `===` compare leaks the expected HMAC byte by byte through
+ * timing variance and a network-adjacent attacker can recover the
+ * secret in ~256 requests per byte.
+ *
+ * Built-in providers + their signature shapes:
+ *
+ *   - **github**:    `X-Hub-Signature-256: sha256=<hex>` over rawBody.
+ *                    Event id from `X-GitHub-Delivery`; event type
+ *                    from `X-GitHub-Event` header.
+ *   - **stripe**:    `Stripe-Signature: t=<ts>,v1=<hex>` over
+ *                    `<ts>.<rawBody>` with a 5-minute drift window.
+ *                    Event id + type from body.id / body.type.
+ *   - **slack**:     `X-Slack-Signature: v0=<hex>` over
+ *                    `v0:<X-Slack-Request-Timestamp>:<rawBody>` with a
+ *                    5-minute drift window. Event type from
+ *                    body.event.type; event id from body.event_id.
+ *   - **shopify**:   `X-Shopify-Hmac-Sha256: <base64>` over rawBody.
+ *                    Event type from `X-Shopify-Topic`; event id from
+ *                    `X-Shopify-Webhook-Id`.
+ *   - **svix**:      Standard Webhooks. `webhook-signature:
+ *                    v1,<base64>` over `<webhook-id>.<webhook-timestamp>.<rawBody>`
+ *                    with a 5-minute drift window. Event id from
+ *                    `webhook-id`; event type from body.type.
+ *
+ * Custom (unknown provider) verifier is built dynamically by
+ * `buildCustomVerifier()` from the workflow's `signature` config.
+ */
+import { createHmac, timingSafeEqual } from "node:crypto";
+const DEFAULT_TOLERANCE_SEC = 300;
+function safeEqualString(a, b) {
+    const aBuf = Buffer.from(a);
+    const bBuf = Buffer.from(b);
+    if (aBuf.length !== bBuf.length)
+        return false;
+    return timingSafeEqual(aBuf, bBuf);
+}
+function hmacHex(algo, secret, data) {
+    return createHmac(algo, secret).update(data).digest("hex");
+}
+function hmacBase64(algo, secret, data) {
+    return createHmac(algo, secret).update(data).digest("base64");
+}
+function isWithinTolerance(timestampSec, toleranceSec) {
+    const nowSec = Math.floor(Date.now() / 1000);
+    return Math.abs(nowSec - timestampSec) <= toleranceSec;
+}
+function getEventTypeFromBody(parsedBody, key = "type") {
+    if (!parsedBody || typeof parsedBody !== "object")
+        return undefined;
+    const value = parsedBody[key];
+    return typeof value === "string" ? value : undefined;
+}
+// =============================================================================
+// Built-in providers
+// =============================================================================
+export const githubVerifier = {
+    verify({ headers, rawBody, secret }) {
+        if (!secret)
+            return { ok: false, reason: "missing_secret", message: "GitHub: secret not configured" };
+        const sig = headers["x-hub-signature-256"];
+        if (!sig)
+            return { ok: false, reason: "missing_signature", message: "GitHub: X-Hub-Signature-256 header missing" };
+        const expected = `sha256=${hmacHex("sha256", secret, rawBody)}`;
+        if (!safeEqualString(sig, expected)) {
+            return { ok: false, reason: "signature_mismatch", message: "GitHub: signature mismatch" };
+        }
+        return {
+            ok: true,
+            eventId: headers["x-github-delivery"] ?? "",
+            eventType: headers["x-github-event"] ?? "unknown",
+        };
+    },
+};
+export const stripeVerifier = {
+    verify({ headers, rawBody, parsedBody, secret, toleranceSec }) {
+        if (!secret)
+            return { ok: false, reason: "missing_secret", message: "Stripe: secret not configured" };
+        const sig = headers["stripe-signature"];
+        if (!sig)
+            return { ok: false, reason: "missing_signature", message: "Stripe: Stripe-Signature header missing" };
+        // Format: t=1234567890,v1=<hex>,v0=<hex>,...
+        const parts = Object.fromEntries(sig
+            .split(",")
+            .map((p) => p.trim())
+            .map((p) => {
+            const idx = p.indexOf("=");
+            return idx === -1 ? [p, ""] : [p.slice(0, idx), p.slice(idx + 1)];
+        }));
+        const ts = parts.t;
+        const v1 = parts.v1;
+        if (!ts || !v1) {
+            return {
+                ok: false,
+                reason: "bad_format",
+                message: "Stripe: signature missing t= or v1= component",
+            };
+        }
+        const tsNum = Number.parseInt(ts, 10);
+        if (!Number.isFinite(tsNum)) {
+            return { ok: false, reason: "bad_format", message: "Stripe: t= is not numeric" };
+        }
+        if (!isWithinTolerance(tsNum, toleranceSec || DEFAULT_TOLERANCE_SEC)) {
+            return {
+                ok: false,
+                reason: "timestamp_drift",
+                message: `Stripe: timestamp drift exceeds ${toleranceSec || DEFAULT_TOLERANCE_SEC}s tolerance`,
+            };
+        }
+        const expected = hmacHex("sha256", secret, `${ts}.${rawBody}`);
+        if (!safeEqualString(v1, expected)) {
+            return { ok: false, reason: "signature_mismatch", message: "Stripe: signature mismatch" };
+        }
+        const eventId = parsedBody?.id;
+        const eventType = getEventTypeFromBody(parsedBody);
+        return {
+            ok: true,
+            eventId: typeof eventId === "string" ? eventId : "",
+            eventType: eventType ?? "unknown",
+        };
+    },
+};
+export const slackVerifier = {
+    verify({ headers, rawBody, parsedBody, secret, toleranceSec }) {
+        if (!secret)
+            return { ok: false, reason: "missing_secret", message: "Slack: secret not configured" };
+        const sig = headers["x-slack-signature"];
+        if (!sig)
+            return { ok: false, reason: "missing_signature", message: "Slack: X-Slack-Signature header missing" };
+        const ts = headers["x-slack-request-timestamp"];
+        if (!ts) {
+            return {
+                ok: false,
+                reason: "missing_timestamp",
+                message: "Slack: X-Slack-Request-Timestamp header missing",
+            };
+        }
+        const tsNum = Number.parseInt(ts, 10);
+        if (!Number.isFinite(tsNum)) {
+            return { ok: false, reason: "bad_format", message: "Slack: timestamp is not numeric" };
+        }
+        if (!isWithinTolerance(tsNum, toleranceSec || DEFAULT_TOLERANCE_SEC)) {
+            return {
+                ok: false,
+                reason: "timestamp_drift",
+                message: `Slack: timestamp drift exceeds ${toleranceSec || DEFAULT_TOLERANCE_SEC}s tolerance`,
+            };
+        }
+        const expected = `v0=${hmacHex("sha256", secret, `v0:${ts}:${rawBody}`)}`;
+        if (!safeEqualString(sig, expected)) {
+            return { ok: false, reason: "signature_mismatch", message: "Slack: signature mismatch" };
+        }
+        const event = parsedBody ?? {};
+        const eventType = typeof event.event?.type === "string" ? event.event.type : "unknown";
+        const eventId = typeof event.event_id === "string" ? event.event_id : "";
+        return { ok: true, eventId, eventType };
+    },
+};
+export const shopifyVerifier = {
+    verify({ headers, rawBody, secret }) {
+        if (!secret)
+            return { ok: false, reason: "missing_secret", message: "Shopify: secret not configured" };
+        const sig = headers["x-shopify-hmac-sha256"];
+        if (!sig) {
+            return { ok: false, reason: "missing_signature", message: "Shopify: X-Shopify-Hmac-Sha256 header missing" };
+        }
+        const expected = hmacBase64("sha256", secret, rawBody);
+        if (!safeEqualString(sig, expected)) {
+            return { ok: false, reason: "signature_mismatch", message: "Shopify: signature mismatch" };
+        }
+        return {
+            ok: true,
+            eventId: headers["x-shopify-webhook-id"] ?? "",
+            eventType: headers["x-shopify-topic"] ?? "unknown",
+        };
+    },
+};
+export const svixVerifier = {
+    verify({ headers, rawBody, parsedBody, secret, toleranceSec }) {
+        if (!secret)
+            return { ok: false, reason: "missing_secret", message: "Svix: secret not configured" };
+        const webhookId = headers["webhook-id"];
+        const webhookTs = headers["webhook-timestamp"];
+        const webhookSig = headers["webhook-signature"];
+        if (!webhookId || !webhookTs || !webhookSig) {
+            return {
+                ok: false,
+                reason: "missing_signature",
+                message: "Svix/Standard Webhooks: missing webhook-id, webhook-timestamp, or webhook-signature header",
+            };
+        }
+        const tsNum = Number.parseInt(webhookTs, 10);
+        if (!Number.isFinite(tsNum)) {
+            return { ok: false, reason: "bad_format", message: "Svix: webhook-timestamp is not numeric" };
+        }
+        if (!isWithinTolerance(tsNum, toleranceSec || DEFAULT_TOLERANCE_SEC)) {
+            return {
+                ok: false,
+                reason: "timestamp_drift",
+                message: `Svix: timestamp drift exceeds ${toleranceSec || DEFAULT_TOLERANCE_SEC}s tolerance`,
+            };
+        }
+        const signed = `${webhookId}.${webhookTs}.${rawBody}`;
+        // Strip optional `whsec_` prefix Svix recommends for secrets.
+        const rawSecret = secret.startsWith("whsec_") ? secret.slice("whsec_".length) : secret;
+        // Svix encodes the secret as base64 — decode before HMAC.
+        const secretBuf = Buffer.from(rawSecret, "base64");
+        const expected = createHmac("sha256", secretBuf).update(signed).digest("base64");
+        // webhook-signature may include multiple versions: `v1,base64 v1,base64 ...`
+        const sigs = webhookSig.split(" ").map((s) => {
+            const idx = s.indexOf(",");
+            return idx === -1 ? s : s.slice(idx + 1);
+        });
+        const matched = sigs.some((s) => safeEqualString(s, expected));
+        if (!matched) {
+            return { ok: false, reason: "signature_mismatch", message: "Svix: signature mismatch" };
+        }
+        return {
+            ok: true,
+            eventId: webhookId,
+            eventType: getEventTypeFromBody(parsedBody) ?? "unknown",
+        };
+    },
+};
+export function buildCustomVerifier(config) {
+    const algo = config.scheme === "hmac-sha1" ? "sha1" : config.scheme === "hmac-sha512" ? "sha512" : "sha256";
+    const headerLower = config.header.toLowerCase();
+    const tsHeaderLower = config.timestampHeader?.toLowerCase();
+    return {
+        verify({ headers, rawBody, parsedBody, secret, toleranceSec }) {
+            if (!secret)
+                return { ok: false, reason: "missing_secret", message: `${config.header}: secret not configured` };
+            const sig = headers[headerLower];
+            if (!sig) {
+                return { ok: false, reason: "missing_signature", message: `${config.header}: header missing` };
+            }
+            let signedString = rawBody;
+            if (tsHeaderLower) {
+                const ts = headers[tsHeaderLower];
+                if (!ts) {
+                    return {
+                        ok: false,
+                        reason: "missing_timestamp",
+                        message: `${config.timestampHeader}: header missing`,
+                    };
+                }
+                const tsNum = Number.parseInt(ts, 10);
+                if (!Number.isFinite(tsNum)) {
+                    return {
+                        ok: false,
+                        reason: "bad_format",
+                        message: `${config.timestampHeader}: not numeric`,
+                    };
+                }
+                if (!isWithinTolerance(tsNum, toleranceSec || config.tolerance)) {
+                    return {
+                        ok: false,
+                        reason: "timestamp_drift",
+                        message: `Timestamp drift exceeds ${toleranceSec || config.tolerance}s tolerance`,
+                    };
+                }
+                signedString = `${ts}.${rawBody}`;
+            }
+            const hex = hmacHex(algo, secret, signedString);
+            const base64 = hmacBase64(algo, secret, signedString);
+            const expected = config.format.replace("{hex}", hex).replace("{base64}", base64);
+            if (!safeEqualString(sig, expected)) {
+                return { ok: false, reason: "signature_mismatch", message: `${config.header}: signature mismatch` };
+            }
+            return {
+                ok: true,
+                eventId: "",
+                eventType: getEventTypeFromBody(parsedBody) ?? "unknown",
+            };
+        },
+    };
+}
+export const BUILTIN_VERIFIERS = {
+    github: githubVerifier,
+    stripe: stripeVerifier,
+    slack: slackVerifier,
+    shopify: shopifyVerifier,
+    svix: svixVerifier,
+};
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoidmVyaWZpZXJzLmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vc3JjL3ZlcmlmaWVycy50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiQUFBQTs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7O0dBb0NHO0FBRUgsT0FBTyxFQUFFLFVBQVUsRUFBRSxlQUFlLEVBQUUsTUFBTSxhQUFhLENBQUM7QUF5QzFELE1BQU0scUJBQXFCLEdBQUcsR0FBRyxDQUFDO0FBRWxDLFNBQVMsZUFBZSxDQUFDLENBQVMsRUFBRSxDQUFTO0lBQzVDLE1BQU0sSUFBSSxHQUFHLE1BQU0sQ0FBQyxJQUFJLENBQUMsQ0FBQyxDQUFDLENBQUM7SUFDNUIsTUFBTSxJQUFJLEdBQUcsTUFBTSxDQUFDLElBQUksQ0FBQyxDQUFDLENBQUMsQ0FBQztJQUM1QixJQUFJLElBQUksQ0FBQyxNQUFNLEtBQUssSUFBSSxDQUFDLE1BQU07UUFBRSxPQUFPLEtBQUssQ0FBQztJQUM5QyxPQUFPLGVBQWUsQ0FBQyxJQUFJLEVBQUUsSUFBSSxDQUFDLENBQUM7QUFDcEMsQ0FBQztBQUVELFNBQVMsT0FBTyxDQUFDLElBQWtDLEVBQUUsTUFBYyxFQUFFLElBQVk7SUFDaEYsT0FBTyxVQUFVLENBQUMsSUFBSSxFQUFFLE1BQU0sQ0FBQyxDQUFDLE1BQU0sQ0FBQyxJQUFJLENBQUMsQ0FBQyxNQUFNLENBQUMsS0FBSyxDQUFDLENBQUM7QUFDNUQsQ0FBQztBQUVELFNBQVMsVUFBVSxDQUFDLElBQWtDLEVBQUUsTUFBYyxFQUFFLElBQVk7SUFDbkYsT0FBTyxVQUFVLENBQUMsSUFBSSxFQUFFLE1BQU0sQ0FBQyxDQUFDLE1BQU0sQ0FBQyxJQUFJLENBQUMsQ0FBQyxNQUFNLENBQUMsUUFBUSxDQUFDLENBQUM7QUFDL0QsQ0FBQztBQUVELFNBQVMsaUJBQWlCLENBQUMsWUFBb0IsRUFBRSxZQUFvQjtJQUNwRSxNQUFNLE1BQU0sR0FBRyxJQUFJLENBQUMsS0FBSyxDQUFDLElBQUksQ0FBQyxHQUFHLEVBQUUsR0FBRyxJQUFJLENBQUMsQ0FBQztJQUM3QyxPQUFPLElBQUksQ0FBQyxHQUFHLENBQUMsTUFBTSxHQUFHLFlBQVksQ0FBQyxJQUFJLFlBQVksQ0FBQztBQUN4RCxDQUFDO0FBRUQsU0FBUyxvQkFBb0IsQ0FBQyxVQUFtQixFQUFFLEdBQUcsR0FBRyxNQUFNO0lBQzlELElBQUksQ0FBQyxVQUFVLElBQUksT0FBTyxVQUFVLEtBQUssUUFBUTtRQUFFLE9BQU8sU0FBUyxDQUFDO0lBQ3BFLE1BQU0sS0FBSyxHQUFJLFVBQXNDLENBQUMsR0FBRyxDQUFDLENBQUM7SUFDM0QsT0FBTyxPQUFPLEtBQUssS0FBSyxRQUFRLENBQUMsQ0FBQyxDQUFDLEtBQUssQ0FBQyxDQUFDLENBQUMsU0FBUyxDQUFDO0FBQ3RELENBQUM7QUFFRCxnRkFBZ0Y7QUFDaEYscUJBQXFCO0FBQ3JCLGdGQUFnRjtBQUVoRixNQUFNLENBQUMsTUFBTSxjQUFjLEdBQWE7SUFDdkMsTUFBTSxDQUFDLEVBQUUsT0FBTyxFQUFFLE9BQU8sRUFBRSxNQUFNLEVBQUU7UUFDbEMsSUFBSSxDQUFDLE1BQU07WUFBRSxPQUFPLEVBQUUsRUFBRSxFQUFFLEtBQUssRUFBRSxNQUFNLEVBQUUsZ0JBQWdCLEVBQUUsT0FBTyxFQUFFLCtCQUErQixFQUFFLENBQUM7UUFDdEcsTUFBTSxHQUFHLEdBQUcsT0FBTyxDQUFDLHFCQUFxQixDQUFDLENBQUM7UUFDM0MsSUFBSSxDQUFDLEdBQUc7WUFBRSxPQUFPLEVBQUUsRUFBRSxFQUFFLEtBQUssRUFBRSxNQUFNLEVBQUUsbUJBQW1CLEVBQUUsT0FBTyxFQUFFLDRDQUE0QyxFQUFFLENBQUM7UUFDbkgsTUFBTSxRQUFRLEdBQUcsVUFBVSxPQUFPLENBQUMsUUFBUSxFQUFFLE1BQU0sRUFBRSxPQUFPLENBQUMsRUFBRSxDQUFDO1FBQ2hFLElBQUksQ0FBQyxlQUFlLENBQUMsR0FBRyxFQUFFLFFBQVEsQ0FBQyxFQUFFLENBQUM7WUFDckMsT0FBTyxFQUFFLEVBQUUsRUFBRSxLQUFLLEVBQUUsTUFBTSxFQUFFLG9CQUFvQixFQUFFLE9BQU8sRUFBRSw0QkFBNEIsRUFBRSxDQUFDO1FBQzNGLENBQUM7UUFDRCxPQUFPO1lBQ04sRUFBRSxFQUFFLElBQUk7WUFDUixPQUFPLEVBQUUsT0FBTyxDQUFDLG1CQUFtQixDQUFDLElBQUksRUFBRTtZQUMzQyxTQUFTLEVBQUUsT0FBTyxDQUFDLGdCQUFnQixDQUFDLElBQUksU0FBUztTQUNqRCxDQUFDO0lBQ0gsQ0FBQztDQUNELENBQUM7QUFFRixNQUFNLENBQUMsTUFBTSxjQUFjLEdBQWE7SUFDdkMsTUFBTSxDQUFDLEVBQUUsT0FBTyxFQUFFLE9BQU8sRUFBRSxVQUFVLEVBQUUsTUFBTSxFQUFFLFlBQVksRUFBRTtRQUM1RCxJQUFJLENBQUMsTUFBTTtZQUFFLE9BQU8sRUFBRSxFQUFFLEVBQUUsS0FBSyxFQUFFLE1BQU0sRUFBRSxnQkFBZ0IsRUFBRSxPQUFPLEVBQUUsK0JBQStCLEVBQUUsQ0FBQztRQUN0RyxNQUFNLEdBQUcsR0FBRyxPQUFPLENBQUMsa0JBQWtCLENBQUMsQ0FBQztRQUN4QyxJQUFJLENBQUMsR0FBRztZQUFFLE9BQU8sRUFBRSxFQUFFLEVBQUUsS0FBSyxFQUFFLE1BQU0sRUFBRSxtQkFBbUIsRUFBRSxPQUFPLEVBQUUseUNBQXlDLEVBQUUsQ0FBQztRQUVoSCw2Q0FBNkM7UUFDN0MsTUFBTSxLQUFLLEdBQUcsTUFBTSxDQUFDLFdBQVcsQ0FDL0IsR0FBRzthQUNELEtBQUssQ0FBQyxHQUFHLENBQUM7YUFDVixHQUFHLENBQUMsQ0FBQyxDQUFDLEVBQUUsRUFBRSxDQUFDLENBQUMsQ0FBQyxJQUFJLEVBQUUsQ0FBQzthQUNwQixHQUFHLENBQUMsQ0FBQyxDQUFDLEVBQUUsRUFBRTtZQUNWLE1BQU0sR0FBRyxHQUFHLENBQUMsQ0FBQyxPQUFPLENBQUMsR0FBRyxDQUFDLENBQUM7WUFDM0IsT0FBTyxHQUFHLEtBQUssQ0FBQyxDQUFDLENBQUMsQ0FBQyxDQUFDLENBQUMsQ0FBQyxFQUFFLEVBQUUsQ0FBQyxDQUFDLENBQUMsQ0FBQyxDQUFDLENBQUMsQ0FBQyxLQUFLLENBQUMsQ0FBQyxFQUFFLEdBQUcsQ0FBQyxFQUFFLENBQUMsQ0FBQyxLQUFLLENBQUMsR0FBRyxHQUFHLENBQUMsQ0FBQyxDQUFDLENBQUM7UUFDbkUsQ0FBQyxDQUFDLENBQ0gsQ0FBQztRQUNGLE1BQU0sRUFBRSxHQUFHLEtBQUssQ0FBQyxDQUFDLENBQUM7UUFDbkIsTUFBTSxFQUFFLEdBQUcsS0FBSyxDQUFDLEVBQUUsQ0FBQztRQUNwQixJQUFJLENBQUMsRUFBRSxJQUFJLENBQUMsRUFBRSxFQUFFLENBQUM7WUFDaEIsT0FBTztnQkFDTixFQUFFLEVBQUUsS0FBSztnQkFDVCxNQUFNLEVBQUUsWUFBWTtnQkFDcEIsT0FBTyxFQUFFLCtDQUErQzthQUN4RCxDQUFDO1FBQ0gsQ0FBQztRQUNELE1BQU0sS0FBSyxHQUFHLE1BQU0sQ0FBQyxRQUFRLENBQUMsRUFBRSxFQUFFLEVBQUUsQ0FBQyxDQUFDO1FBQ3RDLElBQUksQ0FBQyxNQUFNLENBQUMsUUFBUSxDQUFDLEtBQUssQ0FBQyxFQUFFLENBQUM7WUFDN0IsT0FBTyxFQUFFLEVBQUUsRUFBRSxLQUFLLEVBQUUsTUFBTSxFQUFFLFlBQVksRUFBRSxPQUFPLEVBQUUsMkJBQTJCLEVBQUUsQ0FBQztRQUNsRixDQUFDO1FBQ0QsSUFBSSxDQUFDLGlCQUFpQixDQUFDLEtBQUssRUFBRSxZQUFZLElBQUkscUJBQXFCLENBQUMsRUFBRSxDQUFDO1lBQ3RFLE9BQU87Z0JBQ04sRUFBRSxFQUFFLEtBQUs7Z0JBQ1QsTUFBTSxFQUFFLGlCQUFpQjtnQkFDekIsT0FBTyxFQUFFLG1DQUFtQyxZQUFZLElBQUkscUJBQXFCLGFBQWE7YUFDOUYsQ0FBQztRQUNILENBQUM7UUFDRCxNQUFNLFFBQVEsR0FBRyxPQUFPLENBQUMsUUFBUSxFQUFFLE1BQU0sRUFBRSxHQUFHLEVBQUUsSUFBSSxPQUFPLEVBQUUsQ0FBQyxDQUFDO1FBQy9ELElBQUksQ0FBQyxlQUFlLENBQUMsRUFBRSxFQUFFLFFBQVEsQ0FBQyxFQUFFLENBQUM7WUFDcEMsT0FBTyxFQUFFLEVBQUUsRUFBRSxLQUFLLEVBQUUsTUFBTSxFQUFFLG9CQUFvQixFQUFFLE9BQU8sRUFBRSw0QkFBNEIsRUFBRSxDQUFDO1FBQzNGLENBQUM7UUFDRCxNQUFNLE9BQU8sR0FBSSxVQUFzQyxFQUFFLEVBQUUsQ0FBQztRQUM1RCxNQUFNLFNBQVMsR0FBRyxvQkFBb0IsQ0FBQyxVQUFVLENBQUMsQ0FBQztRQUNuRCxPQUFPO1lBQ04sRUFBRSxFQUFFLElBQUk7WUFDUixPQUFPLEVBQUUsT0FBTyxPQUFPLEtBQUssUUFBUSxDQUFDLENBQUMsQ0FBQyxPQUFPLENBQUMsQ0FBQyxDQUFDLEVBQUU7WUFDbkQsU0FBUyxFQUFFLFNBQVMsSUFBSSxTQUFTO1NBQ2pDLENBQUM7SUFDSCxDQUFDO0NBQ0QsQ0FBQztBQUVGLE1BQU0sQ0FBQyxNQUFNLGFBQWEsR0FBYTtJQUN0QyxNQUFNLENBQUMsRUFBRSxPQUFPLEVBQUUsT0FBTyxFQUFFLFVBQVUsRUFBRSxNQUFNLEVBQUUsWUFBWSxFQUFFO1FBQzVELElBQUksQ0FBQyxNQUFNO1lBQUUsT0FBTyxFQUFFLEVBQUUsRUFBRSxLQUFLLEVBQUUsTUFBTSxFQUFFLGdCQUFnQixFQUFFLE9BQU8sRUFBRSw4QkFBOEIsRUFBRSxDQUFDO1FBQ3JHLE1BQU0sR0FBRyxHQUFHLE9BQU8sQ0FBQyxtQkFBbUIsQ0FBQyxDQUFDO1FBQ3pDLElBQUksQ0FBQyxHQUFHO1lBQUUsT0FBTyxFQUFFLEVBQUUsRUFBRSxLQUFLLEVBQUUsTUFBTSxFQUFFLG1CQUFtQixFQUFFLE9BQU8sRUFBRSx5Q0FBeUMsRUFBRSxDQUFDO1FBQ2hILE1BQU0sRUFBRSxHQUFHLE9BQU8sQ0FBQywyQkFBMkIsQ0FBQyxDQUFDO1FBQ2hELElBQUksQ0FBQyxFQUFFLEVBQUUsQ0FBQztZQUNULE9BQU87Z0JBQ04sRUFBRSxFQUFFLEtBQUs7Z0JBQ1QsTUFBTSxFQUFFLG1CQUFtQjtnQkFDM0IsT0FBTyxFQUFFLGlEQUFpRDthQUMxRCxDQUFDO1FBQ0gsQ0FBQztRQUNELE1BQU0sS0FBSyxHQUFHLE1BQU0sQ0FBQyxRQUFRLENBQUMsRUFBRSxFQUFFLEVBQUUsQ0FBQyxDQUFDO1FBQ3RDLElBQUksQ0FBQyxNQUFNLENBQUMsUUFBUSxDQUFDLEtBQUssQ0FBQyxFQUFFLENBQUM7WUFDN0IsT0FBTyxFQUFFLEVBQUUsRUFBRSxLQUFLLEVBQUUsTUFBTSxFQUFFLFlBQVksRUFBRSxPQUFPLEVBQUUsaUNBQWlDLEVBQUUsQ0FBQztRQUN4RixDQUFDO1FBQ0QsSUFBSSxDQUFDLGlCQUFpQixDQUFDLEtBQUssRUFBRSxZQUFZLElBQUkscUJBQXFCLENBQUMsRUFBRSxDQUFDO1lBQ3RFLE9BQU87Z0JBQ04sRUFBRSxFQUFFLEtBQUs7Z0JBQ1QsTUFBTSxFQUFFLGlCQUFpQjtnQkFDekIsT0FBTyxFQUFFLGtDQUFrQyxZQUFZLElBQUkscUJBQXFCLGFBQWE7YUFDN0YsQ0FBQztRQUNILENBQUM7UUFDRCxNQUFNLFFBQVEsR0FBRyxNQUFNLE9BQU8sQ0FBQyxRQUFRLEVBQUUsTUFBTSxFQUFFLE1BQU0sRUFBRSxJQUFJLE9BQU8sRUFBRSxDQUFDLEVBQUUsQ0FBQztRQUMxRSxJQUFJLENBQUMsZUFBZSxDQUFDLEdBQUcsRUFBRSxRQUFRLENBQUMsRUFBRSxDQUFDO1lBQ3JDLE9BQU8sRUFBRSxFQUFFLEVBQUUsS0FBSyxFQUFFLE1BQU0sRUFBRSxvQkFBb0IsRUFBRSxPQUFPLEVBQUUsMkJBQTJCLEVBQUUsQ0FBQztRQUMxRixDQUFDO1FBQ0QsTUFBTSxLQUFLLEdBQUksVUFBd0UsSUFBSSxFQUFFLENBQUM7UUFDOUYsTUFBTSxTQUFTLEdBQUcsT0FBTyxLQUFLLENBQUMsS0FBSyxFQUFFLElBQUksS0FBSyxRQUFRLENBQUMsQ0FBQyxDQUFDLEtBQUssQ0FBQyxLQUFLLENBQUMsSUFBSSxDQUFDLENBQUMsQ0FBQyxTQUFTLENBQUM7UUFDdkYsTUFBTSxPQUFPLEdBQUcsT0FBTyxLQUFLLENBQUMsUUFBUSxLQUFLLFFBQVEsQ0FBQyxDQUFDLENBQUMsS0FBSyxDQUFDLFFBQVEsQ0FBQyxDQUFDLENBQUMsRUFBRSxDQUFDO1FBQ3pFLE9BQU8sRUFBRSxFQUFFLEVBQUUsSUFBSSxFQUFFLE9BQU8sRUFBRSxTQUFTLEVBQUUsQ0FBQztJQUN6QyxDQUFDO0NBQ0QsQ0FBQztBQUVGLE1BQU0sQ0FBQyxNQUFNLGVBQWUsR0FBYTtJQUN4QyxNQUFNLENBQUMsRUFBRSxPQUFPLEVBQUUsT0FBTyxFQUFFLE1BQU0sRUFBRTtRQUNsQyxJQUFJLENBQUMsTUFBTTtZQUFFLE9BQU8sRUFBRSxFQUFFLEVBQUUsS0FBSyxFQUFFLE1BQU0sRUFBRSxnQkFBZ0IsRUFBRSxPQUFPLEVBQUUsZ0NBQWdDLEVBQUUsQ0FBQztRQUN2RyxNQUFNLEdBQUcsR0FBRyxPQUFPLENBQUMsdUJBQXVCLENBQUMsQ0FBQztRQUM3QyxJQUFJLENBQUMsR0FBRyxFQUFFLENBQUM7WUFDVixPQUFPLEVBQUUsRUFBRSxFQUFFLEtBQUssRUFBRSxNQUFNLEVBQUUsbUJBQW1CLEVBQUUsT0FBTyxFQUFFLCtDQUErQyxFQUFFLENBQUM7UUFDN0csQ0FBQztRQUNELE1BQU0sUUFBUSxHQUFHLFVBQVUsQ0FBQyxRQUFRLEVBQUUsTUFBTSxFQUFFLE9BQU8sQ0FBQyxDQUFDO1FBQ3ZELElBQUksQ0FBQyxlQUFlLENBQUMsR0FBRyxFQUFFLFFBQVEsQ0FBQyxFQUFFLENBQUM7WUFDckMsT0FBTyxFQUFFLEVBQUUsRUFBRSxLQUFLLEVBQUUsTUFBTSxFQUFFLG9CQUFvQixFQUFFLE9BQU8sRUFBRSw2QkFBNkIsRUFBRSxDQUFDO1FBQzVGLENBQUM7UUFDRCxPQUFPO1lBQ04sRUFBRSxFQUFFLElBQUk7WUFDUixPQUFPLEVBQUUsT0FBTyxDQUFDLHNCQUFzQixDQUFDLElBQUksRUFBRTtZQUM5QyxTQUFTLEVBQUUsT0FBTyxDQUFDLGlCQUFpQixDQUFDLElBQUksU0FBUztTQUNsRCxDQUFDO0lBQ0gsQ0FBQztDQUNELENBQUM7QUFFRixNQUFNLENBQUMsTUFBTSxZQUFZLEdBQWE7SUFDckMsTUFBTSxDQUFDLEVBQUUsT0FBTyxFQUFFLE9BQU8sRUFBRSxVQUFVLEVBQUUsTUFBTSxFQUFFLFlBQVksRUFBRTtRQUM1RCxJQUFJLENBQUMsTUFBTTtZQUFFLE9BQU8sRUFBRSxFQUFFLEVBQUUsS0FBSyxFQUFFLE1BQU0sRUFBRSxnQkFBZ0IsRUFBRSxPQUFPLEVBQUUsNkJBQTZCLEVBQUUsQ0FBQztRQUNwRyxNQUFNLFNBQVMsR0FBRyxPQUFPLENBQUMsWUFBWSxDQUFDLENBQUM7UUFDeEMsTUFBTSxTQUFTLEdBQUcsT0FBTyxDQUFDLG1CQUFtQixDQUFDLENBQUM7UUFDL0MsTUFBTSxVQUFVLEdBQUcsT0FBTyxDQUFDLG1CQUFtQixDQUFDLENBQUM7UUFDaEQsSUFBSSxDQUFDLFNBQVMsSUFBSSxDQUFDLFNBQVMsSUFBSSxDQUFDLFVBQVUsRUFBRSxDQUFDO1lBQzdDLE9BQU87Z0JBQ04sRUFBRSxFQUFFLEtBQUs7Z0JBQ1QsTUFBTSxFQUFFLG1CQUFtQjtnQkFDM0IsT0FBTyxFQUFFLDRGQUE0RjthQUNyRyxDQUFDO1FBQ0gsQ0FBQztRQUNELE1BQU0sS0FBSyxHQUFHLE1BQU0sQ0FBQyxRQUFRLENBQUMsU0FBUyxFQUFFLEVBQUUsQ0FBQyxDQUFDO1FBQzdDLElBQUksQ0FBQyxNQUFNLENBQUMsUUFBUSxDQUFDLEtBQUssQ0FBQyxFQUFFLENBQUM7WUFDN0IsT0FBTyxFQUFFLEVBQUUsRUFBRSxLQUFLLEVBQUUsTUFBTSxFQUFFLFlBQVksRUFBRSxPQUFPLEVBQUUsd0NBQXdDLEVBQUUsQ0FBQztRQUMvRixDQUFDO1FBQ0QsSUFBSSxDQUFDLGlCQUFpQixDQUFDLEtBQUssRUFBRSxZQUFZLElBQUkscUJBQXFCLENBQUMsRUFBRSxDQUFDO1lBQ3RFLE9BQU87Z0JBQ04sRUFBRSxFQUFFLEtBQUs7Z0JBQ1QsTUFBTSxFQUFFLGlCQUFpQjtnQkFDekIsT0FBTyxFQUFFLGlDQUFpQyxZQUFZLElBQUkscUJBQXFCLGFBQWE7YUFDNUYsQ0FBQztRQUNILENBQUM7UUFDRCxNQUFNLE1BQU0sR0FBRyxHQUFHLFNBQVMsSUFBSSxTQUFTLElBQUksT0FBTyxFQUFFLENBQUM7UUFDdEQsOERBQThEO1FBQzlELE1BQU0sU0FBUyxHQUFHLE1BQU0sQ0FBQyxVQUFVLENBQUMsUUFBUSxDQUFDLENBQUMsQ0FBQyxDQUFDLE1BQU0sQ0FBQyxLQUFLLENBQUMsUUFBUSxDQUFDLE1BQU0sQ0FBQyxDQUFDLENBQUMsQ0FBQyxNQUFNLENBQUM7UUFDdkYsMERBQTBEO1FBQzFELE1BQU0sU0FBUyxHQUFHLE1BQU0sQ0FBQyxJQUFJLENBQUMsU0FBUyxFQUFFLFFBQVEsQ0FBQyxDQUFDO1FBQ25ELE1BQU0sUUFBUSxHQUFHLFVBQVUsQ0FBQyxRQUFRLEVBQUUsU0FBUyxDQUFDLENBQUMsTUFBTSxDQUFDLE1BQU0sQ0FBQyxDQUFDLE1BQU0sQ0FBQyxRQUFRLENBQUMsQ0FBQztRQUNqRiw2RUFBNkU7UUFDN0UsTUFBTSxJQUFJLEdBQUcsVUFBVSxDQUFDLEtBQUssQ0FBQyxHQUFHLENBQUMsQ0FBQyxHQUFHLENBQUMsQ0FBQyxDQUFDLEVBQUUsRUFBRTtZQUM1QyxNQUFNLEdBQUcsR0FBRyxDQUFDLENBQUMsT0FBTyxDQUFDLEdBQUcsQ0FBQyxDQUFDO1lBQzNCLE9BQU8sR0FBRyxLQUFLLENBQUMsQ0FBQyxDQUFDLENBQUMsQ0FBQyxDQUFDLENBQUMsQ0FBQyxDQUFDLENBQUMsQ0FBQyxLQUFLLENBQUMsR0FBRyxHQUFHLENBQUMsQ0FBQyxDQUFDO1FBQzFDLENBQUMsQ0FBQyxDQUFDO1FBQ0gsTUFBTSxPQUFPLEdBQUcsSUFBSSxDQUFDLElBQUksQ0FBQyxDQUFDLENBQUMsRUFBRSxFQUFFLENBQUMsZUFBZSxDQUFDLENBQUMsRUFBRSxRQUFRLENBQUMsQ0FBQyxDQUFDO1FBQy9ELElBQUksQ0FBQyxPQUFPLEVBQUUsQ0FBQztZQUNkLE9BQU8sRUFBRSxFQUFFLEVBQUUsS0FBSyxFQUFFLE1BQU0sRUFBRSxvQkFBb0IsRUFBRSxPQUFPLEVBQUUsMEJBQTBCLEVBQUUsQ0FBQztRQUN6RixDQUFDO1FBQ0QsT0FBTztZQUNOLEVBQUUsRUFBRSxJQUFJO1lBQ1IsT0FBTyxFQUFFLFNBQVM7WUFDbEIsU0FBUyxFQUFFLG9CQUFvQixDQUFDLFVBQVUsQ0FBQyxJQUFJLFNBQVM7U0FDeEQsQ0FBQztJQUNILENBQUM7Q0FDRCxDQUFDO0FBZUYsTUFBTSxVQUFVLG1CQUFtQixDQUFDLE1BQTZCO0lBQ2hFLE1BQU0sSUFBSSxHQUNULE1BQU0sQ0FBQyxNQUFNLEtBQUssV0FBVyxDQUFDLENBQUMsQ0FBQyxNQUFNLENBQUMsQ0FBQyxDQUFDLE1BQU0sQ0FBQyxNQUFNLEtBQUssYUFBYSxDQUFDLENBQUMsQ0FBQyxRQUFRLENBQUMsQ0FBQyxDQUFDLFFBQVEsQ0FBQztJQUNoRyxNQUFNLFdBQVcsR0FBRyxNQUFNLENBQUMsTUFBTSxDQUFDLFdBQVcsRUFBRSxDQUFDO0lBQ2hELE1BQU0sYUFBYSxHQUFHLE1BQU0sQ0FBQyxlQUFlLEVBQUUsV0FBVyxFQUFFLENBQUM7SUFFNUQsT0FBTztRQUNOLE1BQU0sQ0FBQyxFQUFFLE9BQU8sRUFBRSxPQUFPLEVBQUUsVUFBVSxFQUFFLE1BQU0sRUFBRSxZQUFZLEVBQUU7WUFDNUQsSUFBSSxDQUFDLE1BQU07Z0JBQUUsT0FBTyxFQUFFLEVBQUUsRUFBRSxLQUFLLEVBQUUsTUFBTSxFQUFFLGdCQUFnQixFQUFFLE9BQU8sRUFBRSxHQUFHLE1BQU0sQ0FBQyxNQUFNLHlCQUF5QixFQUFFLENBQUM7WUFDaEgsTUFBTSxHQUFHLEdBQUcsT0FBTyxDQUFDLFdBQVcsQ0FBQyxDQUFDO1lBQ2pDLElBQUksQ0FBQyxHQUFHLEVBQUUsQ0FBQztnQkFDVixPQUFPLEVBQUUsRUFBRSxFQUFFLEtBQUssRUFBRSxNQUFNLEVBQUUsbUJBQW1CLEVBQUUsT0FBTyxFQUFFLEdBQUcsTUFBTSxDQUFDLE1BQU0sa0JBQWtCLEVBQUUsQ0FBQztZQUNoRyxDQUFDO1lBRUQsSUFBSSxZQUFZLEdBQUcsT0FBTyxDQUFDO1lBQzNCLElBQUksYUFBYSxFQUFFLENBQUM7Z0JBQ25CLE1BQU0sRUFBRSxHQUFHLE9BQU8sQ0FBQyxhQUFhLENBQUMsQ0FBQztnQkFDbEMsSUFBSSxDQUFDLEVBQUUsRUFBRSxDQUFDO29CQUNULE9BQU87d0JBQ04sRUFBRSxFQUFFLEtBQUs7d0JBQ1QsTUFBTSxFQUFFLG1CQUFtQjt3QkFDM0IsT0FBTyxFQUFFLEdBQUcsTUFBTSxDQUFDLGVBQWUsa0JBQWtCO3FCQUNwRCxDQUFDO2dCQUNILENBQUM7Z0JBQ0QsTUFBTSxLQUFLLEdBQUcsTUFBTSxDQUFDLFFBQVEsQ0FBQyxFQUFFLEVBQUUsRUFBRSxDQUFDLENBQUM7Z0JBQ3RDLElBQUksQ0FBQyxNQUFNLENBQUMsUUFBUSxDQUFDLEtBQUssQ0FBQyxFQUFFLENBQUM7b0JBQzdCLE9BQU87d0JBQ04sRUFBRSxFQUFFLEtBQUs7d0JBQ1QsTUFBTSxFQUFFLFlBQVk7d0JBQ3BCLE9BQU8sRUFBRSxHQUFHLE1BQU0sQ0FBQyxlQUFlLGVBQWU7cUJBQ2pELENBQUM7Z0JBQ0gsQ0FBQztnQkFDRCxJQUFJLENBQUMsaUJBQWlCLENBQUMsS0FBSyxFQUFFLFlBQVksSUFBSSxNQUFNLENBQUMsU0FBUyxDQUFDLEVBQUUsQ0FBQztvQkFDakUsT0FBTzt3QkFDTixFQUFFLEVBQUUsS0FBSzt3QkFDVCxNQUFNLEVBQUUsaUJBQWlCO3dCQUN6QixPQUFPLEVBQUUsMkJBQTJCLFlBQVksSUFBSSxNQUFNLENBQUMsU0FBUyxhQUFhO3FCQUNqRixDQUFDO2dCQUNILENBQUM7Z0JBQ0QsWUFBWSxHQUFHLEdBQUcsRUFBRSxJQUFJLE9BQU8sRUFBRSxDQUFDO1lBQ25DLENBQUM7WUFFRCxNQUFNLEdBQUcsR0FBRyxPQUFPLENBQUMsSUFBSSxFQUFFLE1BQU0sRUFBRSxZQUFZLENBQUMsQ0FBQztZQUNoRCxNQUFNLE1BQU0sR0FBRyxVQUFVLENBQUMsSUFBSSxFQUFFLE1BQU0sRUFBRSxZQUFZLENBQUMsQ0FBQztZQUN0RCxNQUFNLFFBQVEsR0FBRyxNQUFNLENBQUMsTUFBTSxDQUFDLE9BQU8sQ0FBQyxPQUFPLEVBQUUsR0FBRyxDQUFDLENBQUMsT0FBTyxDQUFDLFVBQVUsRUFBRSxNQUFNLENBQUMsQ0FBQztZQUVqRixJQUFJLENBQUMsZUFBZSxDQUFDLEdBQUcsRUFBRSxRQUFRLENBQUMsRUFBRSxDQUFDO2dCQUNyQyxPQUFPLEVBQUUsRUFBRSxFQUFFLEtBQUssRUFBRSxNQUFNLEVBQUUsb0JBQW9CLEVBQUUsT0FBTyxFQUFFLEdBQUcsTUFBTSxDQUFDLE1BQU0sc0JBQXNCLEVBQUUsQ0FBQztZQUNyRyxDQUFDO1lBQ0QsT0FBTztnQkFDTixFQUFFLEVBQUUsSUFBSTtnQkFDUixPQUFPLEVBQUUsRUFBRTtnQkFDWCxTQUFTLEVBQUUsb0JBQW9CLENBQUMsVUFBVSxDQUFDLElBQUksU0FBUzthQUN4RCxDQUFDO1FBQ0gsQ0FBQztLQUNELENBQUM7QUFDSCxDQUFDO0FBRUQsTUFBTSxDQUFDLE1BQU0saUJBQWlCLEdBQTZCO0lBQzFELE1BQU0sRUFBRSxjQUFjO0lBQ3RCLE1BQU0sRUFBRSxjQUFjO0lBQ3RCLEtBQUssRUFBRSxhQUFhO0lBQ3BCLE9BQU8sRUFBRSxlQUFlO0lBQ3hCLElBQUksRUFBRSxZQUFZO0NBQ2xCLENBQUMiLCJzb3VyY2VzQ29udGVudCI6WyIvKipcbiAqIFdlYmhvb2sgc2lnbmF0dXJlIHZlcmlmaWVycyDigJQgb25lIHN0cmF0ZWd5IHBlciBzdXBwb3J0ZWQgcHJvdmlkZXIuXG4gKlxuICogRWFjaCB2ZXJpZmllciByZWFkcyB0aGUgcmF3IHJlcXVlc3QgYnl0ZXMgKE5PVCB0aGUgSlNPTi1wYXJzZWQgYm9keSlcbiAqIGFuZCB0aGUgcHJvdmlkZXItc3BlY2lmaWMgc2lnbmF0dXJlIGhlYWRlciwgY29tcHV0ZXMgdGhlIGV4cGVjdGVkXG4gKiBITUFDIGFnYWluc3QgYSBzaGFyZWQgc2VjcmV0LCBhbmQgY29uc3RhbnQtdGltZSBjb21wYXJlcy4gT24gbWF0Y2gsXG4gKiByZXR1cm5zIGB7IG9rOiB0cnVlLCBldmVudElkLCBldmVudFR5cGUgfWAuIE9uIG1pc21hdGNoIC8gbWlzc2luZ1xuICogaGVhZGVyIC8gZHJpZnQsIHJldHVybnMgYHsgb2s6IGZhbHNlLCByZWFzb24sIG1lc3NhZ2UgfWAuXG4gKlxuICogQ29uc3RhbnQtdGltZSBjb21wYXJpc29uIHZpYSBgY3J5cHRvLnRpbWluZ1NhZmVFcXVhbGAgaXMgbWFuZGF0b3J5IOKAlFxuICogYSBuYWl2ZSBgPT09YCBjb21wYXJlIGxlYWtzIHRoZSBleHBlY3RlZCBITUFDIGJ5dGUgYnkgYnl0ZSB0aHJvdWdoXG4gKiB0aW1pbmcgdmFyaWFuY2UgYW5kIGEgbmV0d29yay1hZGphY2VudCBhdHRhY2tlciBjYW4gcmVjb3ZlciB0aGVcbiAqIHNlY3JldCBpbiB+MjU2IHJlcXVlc3RzIHBlciBieXRlLlxuICpcbiAqIEJ1aWx0LWluIHByb3ZpZGVycyArIHRoZWlyIHNpZ25hdHVyZSBzaGFwZXM6XG4gKlxuICogICAtICoqZ2l0aHViKio6ICAgIGBYLUh1Yi1TaWduYXR1cmUtMjU2OiBzaGEyNTY9PGhleD5gIG92ZXIgcmF3Qm9keS5cbiAqICAgICAgICAgICAgICAgICAgICBFdmVudCBpZCBmcm9tIGBYLUdpdEh1Yi1EZWxpdmVyeWA7IGV2ZW50IHR5cGVcbiAqICAgICAgICAgICAgICAgICAgICBmcm9tIGBYLUdpdEh1Yi1FdmVudGAgaGVhZGVyLlxuICogICAtICoqc3RyaXBlKio6ICAgIGBTdHJpcGUtU2lnbmF0dXJlOiB0PTx0cz4sdjE9PGhleD5gIG92ZXJcbiAqICAgICAgICAgICAgICAgICAgICBgPHRzPi48cmF3Qm9keT5gIHdpdGggYSA1LW1pbnV0ZSBkcmlmdCB3aW5kb3cuXG4gKiAgICAgICAgICAgICAgICAgICAgRXZlbnQgaWQgKyB0eXBlIGZyb20gYm9keS5pZCAvIGJvZHkudHlwZS5cbiAqICAgLSAqKnNsYWNrKio6ICAgICBgWC1TbGFjay1TaWduYXR1cmU6IHYwPTxoZXg+YCBvdmVyXG4gKiAgICAgICAgICAgICAgICAgICAgYHYwOjxYLVNsYWNrLVJlcXVlc3QtVGltZXN0YW1wPjo8cmF3Qm9keT5gIHdpdGggYVxuICogICAgICAgICAgICAgICAgICAgIDUtbWludXRlIGRyaWZ0IHdpbmRvdy4gRXZlbnQgdHlwZSBmcm9tXG4gKiAgICAgICAgICAgICAgICAgICAgYm9keS5ldmVudC50eXBlOyBldmVudCBpZCBmcm9tIGJvZHkuZXZlbnRfaWQuXG4gKiAgIC0gKipzaG9waWZ5Kio6ICAgYFgtU2hvcGlmeS1IbWFjLVNoYTI1NjogPGJhc2U2ND5gIG92ZXIgcmF3Qm9keS5cbiAqICAgICAgICAgICAgICAgICAgICBFdmVudCB0eXBlIGZyb20gYFgtU2hvcGlmeS1Ub3BpY2A7IGV2ZW50IGlkIGZyb21cbiAqICAgICAgICAgICAgICAgICAgICBgWC1TaG9waWZ5LVdlYmhvb2stSWRgLlxuICogICAtICoqc3ZpeCoqOiAgICAgIFN0YW5kYXJkIFdlYmhvb2tzLiBgd2ViaG9vay1zaWduYXR1cmU6XG4gKiAgICAgICAgICAgICAgICAgICAgdjEsPGJhc2U2ND5gIG92ZXIgYDx3ZWJob29rLWlkPi48d2ViaG9vay10aW1lc3RhbXA+LjxyYXdCb2R5PmBcbiAqICAgICAgICAgICAgICAgICAgICB3aXRoIGEgNS1taW51dGUgZHJpZnQgd2luZG93LiBFdmVudCBpZCBmcm9tXG4gKiAgICAgICAgICAgICAgICAgICAgYHdlYmhvb2staWRgOyBldmVudCB0eXBlIGZyb20gYm9keS50eXBlLlxuICpcbiAqIEN1c3RvbSAodW5rbm93biBwcm92aWRlcikgdmVyaWZpZXIgaXMgYnVpbHQgZHluYW1pY2FsbHkgYnlcbiAqIGBidWlsZEN1c3RvbVZlcmlmaWVyKClgIGZyb20gdGhlIHdvcmtmbG93J3MgYHNpZ25hdHVyZWAgY29uZmlnLlxuICovXG5cbmltcG9ydCB7IGNyZWF0ZUhtYWMsIHRpbWluZ1NhZmVFcXVhbCB9IGZyb20gXCJub2RlOmNyeXB0b1wiO1xuXG4vKiogU3VjY2Vzc2Z1bCB2ZXJpZmljYXRpb24gcmVzdWx0IOKAlCB3b3JrZmxvdyBtYXkgcHJvY2VlZC4gKi9cbmV4cG9ydCBpbnRlcmZhY2UgVmVyaWZ5T2sge1xuXHRvazogdHJ1ZTtcblx0LyoqIFByb3ZpZGVyLXNwZWNpZmljIGV2ZW50IGlkICh1c2VkIGZvciByZXBsYXktcHJvdGVjdGlvbiBjYWNoZSBrZXkpLiAqL1xuXHRldmVudElkOiBzdHJpbmc7XG5cdC8qKiBQcm92aWRlci1zcGVjaWZpYyBldmVudCB0eXBlICh1c2VkIGZvciB0aGUgYWxsb3dsaXN0IGNoZWNrKS4gKi9cblx0ZXZlbnRUeXBlOiBzdHJpbmc7XG59XG5cbi8qKiBWZXJpZmljYXRpb24gZmFpbHVyZSDigJQgdHJpZ2dlciByZXR1cm5zIDQwMSB3aXRoIHN0cnVjdHVyZWQgcmVhc29uLiAqL1xuZXhwb3J0IGludGVyZmFjZSBWZXJpZnlFcnJvciB7XG5cdG9rOiBmYWxzZTtcblx0LyoqIFN0YWJsZSBkaXNjcmltaW5hdG9yIOKAlCBsb2cvYWxlcnQgZGFzaGJvYXJkcyBicmFuY2ggb24gdGhpcy4gKi9cblx0cmVhc29uOlxuXHRcdHwgXCJtaXNzaW5nX3NpZ25hdHVyZVwiXG5cdFx0fCBcIm1pc3NpbmdfdGltZXN0YW1wXCJcblx0XHR8IFwibWlzc2luZ19zZWNyZXRcIlxuXHRcdHwgXCJiYWRfZm9ybWF0XCJcblx0XHR8IFwidGltZXN0YW1wX2RyaWZ0XCJcblx0XHR8IFwic2lnbmF0dXJlX21pc21hdGNoXCI7XG5cdC8qKiBIdW1hbi1yZWFkYWJsZSBlcnJvciBtZXNzYWdlLiBTYWZlIHRvIHN1cmZhY2UgdG8gdGhlIHNlbmRlci4gKi9cblx0bWVzc2FnZTogc3RyaW5nO1xufVxuXG5leHBvcnQgdHlwZSBWZXJpZnlSZXN1bHQgPSBWZXJpZnlPayB8IFZlcmlmeUVycm9yO1xuXG4vKiogSW5wdXRzIGV2ZXJ5IHZlcmlmaWVyIHJlY2VpdmVzLiAqL1xuZXhwb3J0IGludGVyZmFjZSBWZXJpZnlJbnB1dCB7XG5cdGhlYWRlcnM6IFJlY29yZDxzdHJpbmcsIHN0cmluZz47XG5cdHJhd0JvZHk6IHN0cmluZztcblx0cGFyc2VkQm9keTogdW5rbm93bjtcblx0c2VjcmV0OiBzdHJpbmc7XG5cdHRvbGVyYW5jZVNlYzogbnVtYmVyO1xufVxuXG5leHBvcnQgaW50ZXJmYWNlIFZlcmlmaWVyIHtcblx0dmVyaWZ5KGlucHV0OiBWZXJpZnlJbnB1dCk6IFZlcmlmeVJlc3VsdDtcbn1cblxuY29uc3QgREVGQVVMVF9UT0xFUkFOQ0VfU0VDID0gMzAwO1xuXG5mdW5jdGlvbiBzYWZlRXF1YWxTdHJpbmcoYTogc3RyaW5nLCBiOiBzdHJpbmcpOiBib29sZWFuIHtcblx0Y29uc3QgYUJ1ZiA9IEJ1ZmZlci5mcm9tKGEpO1xuXHRjb25zdCBiQnVmID0gQnVmZmVyLmZyb20oYik7XG5cdGlmIChhQnVmLmxlbmd0aCAhPT0gYkJ1Zi5sZW5ndGgpIHJldHVybiBmYWxzZTtcblx0cmV0dXJuIHRpbWluZ1NhZmVFcXVhbChhQnVmLCBiQnVmKTtcbn1cblxuZnVuY3Rpb24gaG1hY0hleChhbGdvOiBcInNoYTI1NlwiIHwgXCJzaGExXCIgfCBcInNoYTUxMlwiLCBzZWNyZXQ6IHN0cmluZywgZGF0YTogc3RyaW5nKTogc3RyaW5nIHtcblx0cmV0dXJuIGNyZWF0ZUhtYWMoYWxnbywgc2VjcmV0KS51cGRhdGUoZGF0YSkuZGlnZXN0KFwiaGV4XCIpO1xufVxuXG5mdW5jdGlvbiBobWFjQmFzZTY0KGFsZ286IFwic2hhMjU2XCIgfCBcInNoYTFcIiB8IFwic2hhNTEyXCIsIHNlY3JldDogc3RyaW5nLCBkYXRhOiBzdHJpbmcpOiBzdHJpbmcge1xuXHRyZXR1cm4gY3JlYXRlSG1hYyhhbGdvLCBzZWNyZXQpLnVwZGF0ZShkYXRhKS5kaWdlc3QoXCJiYXNlNjRcIik7XG59XG5cbmZ1bmN0aW9uIGlzV2l0aGluVG9sZXJhbmNlKHRpbWVzdGFtcFNlYzogbnVtYmVyLCB0b2xlcmFuY2VTZWM6IG51bWJlcik6IGJvb2xlYW4ge1xuXHRjb25zdCBub3dTZWMgPSBNYXRoLmZsb29yKERhdGUubm93KCkgLyAxMDAwKTtcblx0cmV0dXJuIE1hdGguYWJzKG5vd1NlYyAtIHRpbWVzdGFtcFNlYykgPD0gdG9sZXJhbmNlU2VjO1xufVxuXG5mdW5jdGlvbiBnZXRFdmVudFR5cGVGcm9tQm9keShwYXJzZWRCb2R5OiB1bmtub3duLCBrZXkgPSBcInR5cGVcIik6IHN0cmluZyB8IHVuZGVmaW5lZCB7XG5cdGlmICghcGFyc2VkQm9keSB8fCB0eXBlb2YgcGFyc2VkQm9keSAhPT0gXCJvYmplY3RcIikgcmV0dXJuIHVuZGVmaW5lZDtcblx0Y29uc3QgdmFsdWUgPSAocGFyc2VkQm9keSBhcyBSZWNvcmQ8c3RyaW5nLCB1bmtub3duPilba2V5XTtcblx0cmV0dXJuIHR5cGVvZiB2YWx1ZSA9PT0gXCJzdHJpbmdcIiA/IHZhbHVlIDogdW5kZWZpbmVkO1xufVxuXG4vLyA9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PVxuLy8gQnVpbHQtaW4gcHJvdmlkZXJzXG4vLyA9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PVxuXG5leHBvcnQgY29uc3QgZ2l0aHViVmVyaWZpZXI6IFZlcmlmaWVyID0ge1xuXHR2ZXJpZnkoeyBoZWFkZXJzLCByYXdCb2R5LCBzZWNyZXQgfSkge1xuXHRcdGlmICghc2VjcmV0KSByZXR1cm4geyBvazogZmFsc2UsIHJlYXNvbjogXCJtaXNzaW5nX3NlY3JldFwiLCBtZXNzYWdlOiBcIkdpdEh1Yjogc2VjcmV0IG5vdCBjb25maWd1cmVkXCIgfTtcblx0XHRjb25zdCBzaWcgPSBoZWFkZXJzW1wieC1odWItc2lnbmF0dXJlLTI1NlwiXTtcblx0XHRpZiAoIXNpZykgcmV0dXJuIHsgb2s6IGZhbHNlLCByZWFzb246IFwibWlzc2luZ19zaWduYXR1cmVcIiwgbWVzc2FnZTogXCJHaXRIdWI6IFgtSHViLVNpZ25hdHVyZS0yNTYgaGVhZGVyIG1pc3NpbmdcIiB9O1xuXHRcdGNvbnN0IGV4cGVjdGVkID0gYHNoYTI1Nj0ke2htYWNIZXgoXCJzaGEyNTZcIiwgc2VjcmV0LCByYXdCb2R5KX1gO1xuXHRcdGlmICghc2FmZUVxdWFsU3RyaW5nKHNpZywgZXhwZWN0ZWQpKSB7XG5cdFx0XHRyZXR1cm4geyBvazogZmFsc2UsIHJlYXNvbjogXCJzaWduYXR1cmVfbWlzbWF0Y2hcIiwgbWVzc2FnZTogXCJHaXRIdWI6IHNpZ25hdHVyZSBtaXNtYXRjaFwiIH07XG5cdFx0fVxuXHRcdHJldHVybiB7XG5cdFx0XHRvazogdHJ1ZSxcblx0XHRcdGV2ZW50SWQ6IGhlYWRlcnNbXCJ4LWdpdGh1Yi1kZWxpdmVyeVwiXSA/PyBcIlwiLFxuXHRcdFx0ZXZlbnRUeXBlOiBoZWFkZXJzW1wieC1naXRodWItZXZlbnRcIl0gPz8gXCJ1bmtub3duXCIsXG5cdFx0fTtcblx0fSxcbn07XG5cbmV4cG9ydCBjb25zdCBzdHJpcGVWZXJpZmllcjogVmVyaWZpZXIgPSB7XG5cdHZlcmlmeSh7IGhlYWRlcnMsIHJhd0JvZHksIHBhcnNlZEJvZHksIHNlY3JldCwgdG9sZXJhbmNlU2VjIH0pIHtcblx0XHRpZiAoIXNlY3JldCkgcmV0dXJuIHsgb2s6IGZhbHNlLCByZWFzb246IFwibWlzc2luZ19zZWNyZXRcIiwgbWVzc2FnZTogXCJTdHJpcGU6IHNlY3JldCBub3QgY29uZmlndXJlZFwiIH07XG5cdFx0Y29uc3Qgc2lnID0gaGVhZGVyc1tcInN0cmlwZS1zaWduYXR1cmVcIl07XG5cdFx0aWYgKCFzaWcpIHJldHVybiB7IG9rOiBmYWxzZSwgcmVhc29uOiBcIm1pc3Npbmdfc2lnbmF0dXJlXCIsIG1lc3NhZ2U6IFwiU3RyaXBlOiBTdHJpcGUtU2lnbmF0dXJlIGhlYWRlciBtaXNzaW5nXCIgfTtcblxuXHRcdC8vIEZvcm1hdDogdD0xMjM0NTY3ODkwLHYxPTxoZXg+LHYwPTxoZXg+LC4uLlxuXHRcdGNvbnN0IHBhcnRzID0gT2JqZWN0LmZyb21FbnRyaWVzKFxuXHRcdFx0c2lnXG5cdFx0XHRcdC5zcGxpdChcIixcIilcblx0XHRcdFx0Lm1hcCgocCkgPT4gcC50cmltKCkpXG5cdFx0XHRcdC5tYXAoKHApID0+IHtcblx0XHRcdFx0XHRjb25zdCBpZHggPSBwLmluZGV4T2YoXCI9XCIpO1xuXHRcdFx0XHRcdHJldHVybiBpZHggPT09IC0xID8gW3AsIFwiXCJdIDogW3Auc2xpY2UoMCwgaWR4KSwgcC5zbGljZShpZHggKyAxKV07XG5cdFx0XHRcdH0pLFxuXHRcdCk7XG5cdFx0Y29uc3QgdHMgPSBwYXJ0cy50O1xuXHRcdGNvbnN0IHYxID0gcGFydHMudjE7XG5cdFx0aWYgKCF0cyB8fCAhdjEpIHtcblx0XHRcdHJldHVybiB7XG5cdFx0XHRcdG9rOiBmYWxzZSxcblx0XHRcdFx0cmVhc29uOiBcImJhZF9mb3JtYXRcIixcblx0XHRcdFx0bWVzc2FnZTogXCJTdHJpcGU6IHNpZ25hdHVyZSBtaXNzaW5nIHQ9IG9yIHYxPSBjb21wb25lbnRcIixcblx0XHRcdH07XG5cdFx0fVxuXHRcdGNvbnN0IHRzTnVtID0gTnVtYmVyLnBhcnNlSW50KHRzLCAxMCk7XG5cdFx0aWYgKCFOdW1iZXIuaXNGaW5pdGUodHNOdW0pKSB7XG5cdFx0XHRyZXR1cm4geyBvazogZmFsc2UsIHJlYXNvbjogXCJiYWRfZm9ybWF0XCIsIG1lc3NhZ2U6IFwiU3RyaXBlOiB0PSBpcyBub3QgbnVtZXJpY1wiIH07XG5cdFx0fVxuXHRcdGlmICghaXNXaXRoaW5Ub2xlcmFuY2UodHNOdW0sIHRvbGVyYW5jZVNlYyB8fCBERUZBVUxUX1RPTEVSQU5DRV9TRUMpKSB7XG5cdFx0XHRyZXR1cm4ge1xuXHRcdFx0XHRvazogZmFsc2UsXG5cdFx0XHRcdHJlYXNvbjogXCJ0aW1lc3RhbXBfZHJpZnRcIixcblx0XHRcdFx0bWVzc2FnZTogYFN0cmlwZTogdGltZXN0YW1wIGRyaWZ0IGV4Y2VlZHMgJHt0b2xlcmFuY2VTZWMgfHwgREVGQVVMVF9UT0xFUkFOQ0VfU0VDfXMgdG9sZXJhbmNlYCxcblx0XHRcdH07XG5cdFx0fVxuXHRcdGNvbnN0IGV4cGVjdGVkID0gaG1hY0hleChcInNoYTI1NlwiLCBzZWNyZXQsIGAke3RzfS4ke3Jhd0JvZHl9YCk7XG5cdFx0aWYgKCFzYWZlRXF1YWxTdHJpbmcodjEsIGV4cGVjdGVkKSkge1xuXHRcdFx0cmV0dXJuIHsgb2s6IGZhbHNlLCByZWFzb246IFwic2lnbmF0dXJlX21pc21hdGNoXCIsIG1lc3NhZ2U6IFwiU3RyaXBlOiBzaWduYXR1cmUgbWlzbWF0Y2hcIiB9O1xuXHRcdH1cblx0XHRjb25zdCBldmVudElkID0gKHBhcnNlZEJvZHkgYXMgeyBpZD86IHVua25vd24gfSB8IG51bGwpPy5pZDtcblx0XHRjb25zdCBldmVudFR5cGUgPSBnZXRFdmVudFR5cGVGcm9tQm9keShwYXJzZWRCb2R5KTtcblx0XHRyZXR1cm4ge1xuXHRcdFx0b2s6IHRydWUsXG5cdFx0XHRldmVudElkOiB0eXBlb2YgZXZlbnRJZCA9PT0gXCJzdHJpbmdcIiA/IGV2ZW50SWQgOiBcIlwiLFxuXHRcdFx0ZXZlbnRUeXBlOiBldmVudFR5cGUgPz8gXCJ1bmtub3duXCIsXG5cdFx0fTtcblx0fSxcbn07XG5cbmV4cG9ydCBjb25zdCBzbGFja1ZlcmlmaWVyOiBWZXJpZmllciA9IHtcblx0dmVyaWZ5KHsgaGVhZGVycywgcmF3Qm9keSwgcGFyc2VkQm9keSwgc2VjcmV0LCB0b2xlcmFuY2VTZWMgfSkge1xuXHRcdGlmICghc2VjcmV0KSByZXR1cm4geyBvazogZmFsc2UsIHJlYXNvbjogXCJtaXNzaW5nX3NlY3JldFwiLCBtZXNzYWdlOiBcIlNsYWNrOiBzZWNyZXQgbm90IGNvbmZpZ3VyZWRcIiB9O1xuXHRcdGNvbnN0IHNpZyA9IGhlYWRlcnNbXCJ4LXNsYWNrLXNpZ25hdHVyZVwiXTtcblx0XHRpZiAoIXNpZykgcmV0dXJuIHsgb2s6IGZhbHNlLCByZWFzb246IFwibWlzc2luZ19zaWduYXR1cmVcIiwgbWVzc2FnZTogXCJTbGFjazogWC1TbGFjay1TaWduYXR1cmUgaGVhZGVyIG1pc3NpbmdcIiB9O1xuXHRcdGNvbnN0IHRzID0gaGVhZGVyc1tcIngtc2xhY2stcmVxdWVzdC10aW1lc3RhbXBcIl07XG5cdFx0aWYgKCF0cykge1xuXHRcdFx0cmV0dXJuIHtcblx0XHRcdFx0b2s6IGZhbHNlLFxuXHRcdFx0XHRyZWFzb246IFwibWlzc2luZ190aW1lc3RhbXBcIixcblx0XHRcdFx0bWVzc2FnZTogXCJTbGFjazogWC1TbGFjay1SZXF1ZXN0LVRpbWVzdGFtcCBoZWFkZXIgbWlzc2luZ1wiLFxuXHRcdFx0fTtcblx0XHR9XG5cdFx0Y29uc3QgdHNOdW0gPSBOdW1iZXIucGFyc2VJbnQodHMsIDEwKTtcblx0XHRpZiAoIU51bWJlci5pc0Zpbml0ZSh0c051bSkpIHtcblx0XHRcdHJldHVybiB7IG9rOiBmYWxzZSwgcmVhc29uOiBcImJhZF9mb3JtYXRcIiwgbWVzc2FnZTogXCJTbGFjazogdGltZXN0YW1wIGlzIG5vdCBudW1lcmljXCIgfTtcblx0XHR9XG5cdFx0aWYgKCFpc1dpdGhpblRvbGVyYW5jZSh0c051bSwgdG9sZXJhbmNlU2VjIHx8IERFRkFVTFRfVE9MRVJBTkNFX1NFQykpIHtcblx0XHRcdHJldHVybiB7XG5cdFx0XHRcdG9rOiBmYWxzZSxcblx0XHRcdFx0cmVhc29uOiBcInRpbWVzdGFtcF9kcmlmdFwiLFxuXHRcdFx0XHRtZXNzYWdlOiBgU2xhY2s6IHRpbWVzdGFtcCBkcmlmdCBleGNlZWRzICR7dG9sZXJhbmNlU2VjIHx8IERFRkFVTFRfVE9MRVJBTkNFX1NFQ31zIHRvbGVyYW5jZWAsXG5cdFx0XHR9O1xuXHRcdH1cblx0XHRjb25zdCBleHBlY3RlZCA9IGB2MD0ke2htYWNIZXgoXCJzaGEyNTZcIiwgc2VjcmV0LCBgdjA6JHt0c306JHtyYXdCb2R5fWApfWA7XG5cdFx0aWYgKCFzYWZlRXF1YWxTdHJpbmcoc2lnLCBleHBlY3RlZCkpIHtcblx0XHRcdHJldHVybiB7IG9rOiBmYWxzZSwgcmVhc29uOiBcInNpZ25hdHVyZV9taXNtYXRjaFwiLCBtZXNzYWdlOiBcIlNsYWNrOiBzaWduYXR1cmUgbWlzbWF0Y2hcIiB9O1xuXHRcdH1cblx0XHRjb25zdCBldmVudCA9IChwYXJzZWRCb2R5IGFzIHsgZXZlbnQ/OiB7IHR5cGU/OiB1bmtub3duIH07IGV2ZW50X2lkPzogdW5rbm93biB9IHwgbnVsbCkgPz8ge307XG5cdFx0Y29uc3QgZXZlbnRUeXBlID0gdHlwZW9mIGV2ZW50LmV2ZW50Py50eXBlID09PSBcInN0cmluZ1wiID8gZXZlbnQuZXZlbnQudHlwZSA6IFwidW5rbm93blwiO1xuXHRcdGNvbnN0IGV2ZW50SWQgPSB0eXBlb2YgZXZlbnQuZXZlbnRfaWQgPT09IFwic3RyaW5nXCIgPyBldmVudC5ldmVudF9pZCA6IFwiXCI7XG5cdFx0cmV0dXJuIHsgb2s6IHRydWUsIGV2ZW50SWQsIGV2ZW50VHlwZSB9O1xuXHR9LFxufTtcblxuZXhwb3J0IGNvbnN0IHNob3BpZnlWZXJpZmllcjogVmVyaWZpZXIgPSB7XG5cdHZlcmlmeSh7IGhlYWRlcnMsIHJhd0JvZHksIHNlY3JldCB9KSB7XG5cdFx0aWYgKCFzZWNyZXQpIHJldHVybiB7IG9rOiBmYWxzZSwgcmVhc29uOiBcIm1pc3Npbmdfc2VjcmV0XCIsIG1lc3NhZ2U6IFwiU2hvcGlmeTogc2VjcmV0IG5vdCBjb25maWd1cmVkXCIgfTtcblx0XHRjb25zdCBzaWcgPSBoZWFkZXJzW1wieC1zaG9waWZ5LWhtYWMtc2hhMjU2XCJdO1xuXHRcdGlmICghc2lnKSB7XG5cdFx0XHRyZXR1cm4geyBvazogZmFsc2UsIHJlYXNvbjogXCJtaXNzaW5nX3NpZ25hdHVyZVwiLCBtZXNzYWdlOiBcIlNob3BpZnk6IFgtU2hvcGlmeS1IbWFjLVNoYTI1NiBoZWFkZXIgbWlzc2luZ1wiIH07XG5cdFx0fVxuXHRcdGNvbnN0IGV4cGVjdGVkID0gaG1hY0Jhc2U2NChcInNoYTI1NlwiLCBzZWNyZXQsIHJhd0JvZHkpO1xuXHRcdGlmICghc2FmZUVxdWFsU3RyaW5nKHNpZywgZXhwZWN0ZWQpKSB7XG5cdFx0XHRyZXR1cm4geyBvazogZmFsc2UsIHJlYXNvbjogXCJzaWduYXR1cmVfbWlzbWF0Y2hcIiwgbWVzc2FnZTogXCJTaG9waWZ5OiBzaWduYXR1cmUgbWlzbWF0Y2hcIiB9O1xuXHRcdH1cblx0XHRyZXR1cm4ge1xuXHRcdFx0b2s6IHRydWUsXG5cdFx0XHRldmVudElkOiBoZWFkZXJzW1wieC1zaG9waWZ5LXdlYmhvb2staWRcIl0gPz8gXCJcIixcblx0XHRcdGV2ZW50VHlwZTogaGVhZGVyc1tcIngtc2hvcGlmeS10b3BpY1wiXSA/PyBcInVua25vd25cIixcblx0XHR9O1xuXHR9LFxufTtcblxuZXhwb3J0IGNvbnN0IHN2aXhWZXJpZmllcjogVmVyaWZpZXIgPSB7XG5cdHZlcmlmeSh7IGhlYWRlcnMsIHJhd0JvZHksIHBhcnNlZEJvZHksIHNlY3JldCwgdG9sZXJhbmNlU2VjIH0pIHtcblx0XHRpZiAoIXNlY3JldCkgcmV0dXJuIHsgb2s6IGZhbHNlLCByZWFzb246IFwibWlzc2luZ19zZWNyZXRcIiwgbWVzc2FnZTogXCJTdml4OiBzZWNyZXQgbm90IGNvbmZpZ3VyZWRcIiB9O1xuXHRcdGNvbnN0IHdlYmhvb2tJZCA9IGhlYWRlcnNbXCJ3ZWJob29rLWlkXCJdO1xuXHRcdGNvbnN0IHdlYmhvb2tUcyA9IGhlYWRlcnNbXCJ3ZWJob29rLXRpbWVzdGFtcFwiXTtcblx0XHRjb25zdCB3ZWJob29rU2lnID0gaGVhZGVyc1tcIndlYmhvb2stc2lnbmF0dXJlXCJdO1xuXHRcdGlmICghd2ViaG9va0lkIHx8ICF3ZWJob29rVHMgfHwgIXdlYmhvb2tTaWcpIHtcblx0XHRcdHJldHVybiB7XG5cdFx0XHRcdG9rOiBmYWxzZSxcblx0XHRcdFx0cmVhc29uOiBcIm1pc3Npbmdfc2lnbmF0dXJlXCIsXG5cdFx0XHRcdG1lc3NhZ2U6IFwiU3ZpeC9TdGFuZGFyZCBXZWJob29rczogbWlzc2luZyB3ZWJob29rLWlkLCB3ZWJob29rLXRpbWVzdGFtcCwgb3Igd2ViaG9vay1zaWduYXR1cmUgaGVhZGVyXCIsXG5cdFx0XHR9O1xuXHRcdH1cblx0XHRjb25zdCB0c051bSA9IE51bWJlci5wYXJzZUludCh3ZWJob29rVHMsIDEwKTtcblx0XHRpZiAoIU51bWJlci5pc0Zpbml0ZSh0c051bSkpIHtcblx0XHRcdHJldHVybiB7IG9rOiBmYWxzZSwgcmVhc29uOiBcImJhZF9mb3JtYXRcIiwgbWVzc2FnZTogXCJTdml4OiB3ZWJob29rLXRpbWVzdGFtcCBpcyBub3QgbnVtZXJpY1wiIH07XG5cdFx0fVxuXHRcdGlmICghaXNXaXRoaW5Ub2xlcmFuY2UodHNOdW0sIHRvbGVyYW5jZVNlYyB8fCBERUZBVUxUX1RPTEVSQU5DRV9TRUMpKSB7XG5cdFx0XHRyZXR1cm4ge1xuXHRcdFx0XHRvazogZmFsc2UsXG5cdFx0XHRcdHJlYXNvbjogXCJ0aW1lc3RhbXBfZHJpZnRcIixcblx0XHRcdFx0bWVzc2FnZTogYFN2aXg6IHRpbWVzdGFtcCBkcmlmdCBleGNlZWRzICR7dG9sZXJhbmNlU2VjIHx8IERFRkFVTFRfVE9MRVJBTkNFX1NFQ31zIHRvbGVyYW5jZWAsXG5cdFx0XHR9O1xuXHRcdH1cblx0XHRjb25zdCBzaWduZWQgPSBgJHt3ZWJob29rSWR9LiR7d2ViaG9va1RzfS4ke3Jhd0JvZHl9YDtcblx0XHQvLyBTdHJpcCBvcHRpb25hbCBgd2hzZWNfYCBwcmVmaXggU3ZpeCByZWNvbW1lbmRzIGZvciBzZWNyZXRzLlxuXHRcdGNvbnN0IHJhd1NlY3JldCA9IHNlY3JldC5zdGFydHNXaXRoKFwid2hzZWNfXCIpID8gc2VjcmV0LnNsaWNlKFwid2hzZWNfXCIubGVuZ3RoKSA6IHNlY3JldDtcblx0XHQvLyBTdml4IGVuY29kZXMgdGhlIHNlY3JldCBhcyBiYXNlNjQg4oCUIGRlY29kZSBiZWZvcmUgSE1BQy5cblx0XHRjb25zdCBzZWNyZXRCdWYgPSBCdWZmZXIuZnJvbShyYXdTZWNyZXQsIFwiYmFzZTY0XCIpO1xuXHRcdGNvbnN0IGV4cGVjdGVkID0gY3JlYXRlSG1hYyhcInNoYTI1NlwiLCBzZWNyZXRCdWYpLnVwZGF0ZShzaWduZWQpLmRpZ2VzdChcImJhc2U2NFwiKTtcblx0XHQvLyB3ZWJob29rLXNpZ25hdHVyZSBtYXkgaW5jbHVkZSBtdWx0aXBsZSB2ZXJzaW9uczogYHYxLGJhc2U2NCB2MSxiYXNlNjQgLi4uYFxuXHRcdGNvbnN0IHNpZ3MgPSB3ZWJob29rU2lnLnNwbGl0KFwiIFwiKS5tYXAoKHMpID0+IHtcblx0XHRcdGNvbnN0IGlkeCA9IHMuaW5kZXhPZihcIixcIik7XG5cdFx0XHRyZXR1cm4gaWR4ID09PSAtMSA/IHMgOiBzLnNsaWNlKGlkeCArIDEpO1xuXHRcdH0pO1xuXHRcdGNvbnN0IG1hdGNoZWQgPSBzaWdzLnNvbWUoKHMpID0+IHNhZmVFcXVhbFN0cmluZyhzLCBleHBlY3RlZCkpO1xuXHRcdGlmICghbWF0Y2hlZCkge1xuXHRcdFx0cmV0dXJuIHsgb2s6IGZhbHNlLCByZWFzb246IFwic2lnbmF0dXJlX21pc21hdGNoXCIsIG1lc3NhZ2U6IFwiU3ZpeDogc2lnbmF0dXJlIG1pc21hdGNoXCIgfTtcblx0XHR9XG5cdFx0cmV0dXJuIHtcblx0XHRcdG9rOiB0cnVlLFxuXHRcdFx0ZXZlbnRJZDogd2ViaG9va0lkLFxuXHRcdFx0ZXZlbnRUeXBlOiBnZXRFdmVudFR5cGVGcm9tQm9keShwYXJzZWRCb2R5KSA/PyBcInVua25vd25cIixcblx0XHR9O1xuXHR9LFxufTtcblxuLy8gPT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT1cbi8vIEN1c3RvbSB2ZXJpZmllciDigJQgYnVpbHQgZnJvbSB0aGUgd29ya2Zsb3cncyBgc2lnbmF0dXJlOiB7IC4uLiB9YCBjb25maWdcbi8vID09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09XG5cbmV4cG9ydCBpbnRlcmZhY2UgQ3VzdG9tU2lnbmF0dXJlQ29uZmlnIHtcblx0c2NoZW1lOiBcImhtYWMtc2hhMjU2XCIgfCBcImhtYWMtc2hhMVwiIHwgXCJobWFjLXNoYTUxMlwiO1xuXHRoZWFkZXI6IHN0cmluZztcblx0Zm9ybWF0OiBzdHJpbmc7XG5cdHNlY3JldEVudjogc3RyaW5nO1xuXHR0b2xlcmFuY2U6IG51bWJlcjtcblx0dGltZXN0YW1wSGVhZGVyPzogc3RyaW5nO1xufVxuXG5leHBvcnQgZnVuY3Rpb24gYnVpbGRDdXN0b21WZXJpZmllcihjb25maWc6IEN1c3RvbVNpZ25hdHVyZUNvbmZpZyk6IFZlcmlmaWVyIHtcblx0Y29uc3QgYWxnbzogXCJzaGEyNTZcIiB8IFwic2hhMVwiIHwgXCJzaGE1MTJcIiA9XG5cdFx0Y29uZmlnLnNjaGVtZSA9PT0gXCJobWFjLXNoYTFcIiA/IFwic2hhMVwiIDogY29uZmlnLnNjaGVtZSA9PT0gXCJobWFjLXNoYTUxMlwiID8gXCJzaGE1MTJcIiA6IFwic2hhMjU2XCI7XG5cdGNvbnN0IGhlYWRlckxvd2VyID0gY29uZmlnLmhlYWRlci50b0xvd2VyQ2FzZSgpO1xuXHRjb25zdCB0c0hlYWRlckxvd2VyID0gY29uZmlnLnRpbWVzdGFtcEhlYWRlcj8udG9Mb3dlckNhc2UoKTtcblxuXHRyZXR1cm4ge1xuXHRcdHZlcmlmeSh7IGhlYWRlcnMsIHJhd0JvZHksIHBhcnNlZEJvZHksIHNlY3JldCwgdG9sZXJhbmNlU2VjIH0pIHtcblx0XHRcdGlmICghc2VjcmV0KSByZXR1cm4geyBvazogZmFsc2UsIHJlYXNvbjogXCJtaXNzaW5nX3NlY3JldFwiLCBtZXNzYWdlOiBgJHtjb25maWcuaGVhZGVyfTogc2VjcmV0IG5vdCBjb25maWd1cmVkYCB9O1xuXHRcdFx0Y29uc3Qgc2lnID0gaGVhZGVyc1toZWFkZXJMb3dlcl07XG5cdFx0XHRpZiAoIXNpZykge1xuXHRcdFx0XHRyZXR1cm4geyBvazogZmFsc2UsIHJlYXNvbjogXCJtaXNzaW5nX3NpZ25hdHVyZVwiLCBtZXNzYWdlOiBgJHtjb25maWcuaGVhZGVyfTogaGVhZGVyIG1pc3NpbmdgIH07XG5cdFx0XHR9XG5cblx0XHRcdGxldCBzaWduZWRTdHJpbmcgPSByYXdCb2R5O1xuXHRcdFx0aWYgKHRzSGVhZGVyTG93ZXIpIHtcblx0XHRcdFx0Y29uc3QgdHMgPSBoZWFkZXJzW3RzSGVhZGVyTG93ZXJdO1xuXHRcdFx0XHRpZiAoIXRzKSB7XG5cdFx0XHRcdFx0cmV0dXJuIHtcblx0XHRcdFx0XHRcdG9rOiBmYWxzZSxcblx0XHRcdFx0XHRcdHJlYXNvbjogXCJtaXNzaW5nX3RpbWVzdGFtcFwiLFxuXHRcdFx0XHRcdFx0bWVzc2FnZTogYCR7Y29uZmlnLnRpbWVzdGFtcEhlYWRlcn06IGhlYWRlciBtaXNzaW5nYCxcblx0XHRcdFx0XHR9O1xuXHRcdFx0XHR9XG5cdFx0XHRcdGNvbnN0IHRzTnVtID0gTnVtYmVyLnBhcnNlSW50KHRzLCAxMCk7XG5cdFx0XHRcdGlmICghTnVtYmVyLmlzRmluaXRlKHRzTnVtKSkge1xuXHRcdFx0XHRcdHJldHVybiB7XG5cdFx0XHRcdFx0XHRvazogZmFsc2UsXG5cdFx0XHRcdFx0XHRyZWFzb246IFwiYmFkX2Zvcm1hdFwiLFxuXHRcdFx0XHRcdFx0bWVzc2FnZTogYCR7Y29uZmlnLnRpbWVzdGFtcEhlYWRlcn06IG5vdCBudW1lcmljYCxcblx0XHRcdFx0XHR9O1xuXHRcdFx0XHR9XG5cdFx0XHRcdGlmICghaXNXaXRoaW5Ub2xlcmFuY2UodHNOdW0sIHRvbGVyYW5jZVNlYyB8fCBjb25maWcudG9sZXJhbmNlKSkge1xuXHRcdFx0XHRcdHJldHVybiB7XG5cdFx0XHRcdFx0XHRvazogZmFsc2UsXG5cdFx0XHRcdFx0XHRyZWFzb246IFwidGltZXN0YW1wX2RyaWZ0XCIsXG5cdFx0XHRcdFx0XHRtZXNzYWdlOiBgVGltZXN0YW1wIGRyaWZ0IGV4Y2VlZHMgJHt0b2xlcmFuY2VTZWMgfHwgY29uZmlnLnRvbGVyYW5jZX1zIHRvbGVyYW5jZWAsXG5cdFx0XHRcdFx0fTtcblx0XHRcdFx0fVxuXHRcdFx0XHRzaWduZWRTdHJpbmcgPSBgJHt0c30uJHtyYXdCb2R5fWA7XG5cdFx0XHR9XG5cblx0XHRcdGNvbnN0IGhleCA9IGhtYWNIZXgoYWxnbywgc2VjcmV0LCBzaWduZWRTdHJpbmcpO1xuXHRcdFx0Y29uc3QgYmFzZTY0ID0gaG1hY0Jhc2U2NChhbGdvLCBzZWNyZXQsIHNpZ25lZFN0cmluZyk7XG5cdFx0XHRjb25zdCBleHBlY3RlZCA9IGNvbmZpZy5mb3JtYXQucmVwbGFjZShcIntoZXh9XCIsIGhleCkucmVwbGFjZShcIntiYXNlNjR9XCIsIGJhc2U2NCk7XG5cblx0XHRcdGlmICghc2FmZUVxdWFsU3RyaW5nKHNpZywgZXhwZWN0ZWQpKSB7XG5cdFx0XHRcdHJldHVybiB7IG9rOiBmYWxzZSwgcmVhc29uOiBcInNpZ25hdHVyZV9taXNtYXRjaFwiLCBtZXNzYWdlOiBgJHtjb25maWcuaGVhZGVyfTogc2lnbmF0dXJlIG1pc21hdGNoYCB9O1xuXHRcdFx0fVxuXHRcdFx0cmV0dXJuIHtcblx0XHRcdFx0b2s6IHRydWUsXG5cdFx0XHRcdGV2ZW50SWQ6IFwiXCIsXG5cdFx0XHRcdGV2ZW50VHlwZTogZ2V0RXZlbnRUeXBlRnJvbUJvZHkocGFyc2VkQm9keSkgPz8gXCJ1bmtub3duXCIsXG5cdFx0XHR9O1xuXHRcdH0sXG5cdH07XG59XG5cbmV4cG9ydCBjb25zdCBCVUlMVElOX1ZFUklGSUVSUzogUmVjb3JkPHN0cmluZywgVmVyaWZpZXI+ID0ge1xuXHRnaXRodWI6IGdpdGh1YlZlcmlmaWVyLFxuXHRzdHJpcGU6IHN0cmlwZVZlcmlmaWVyLFxuXHRzbGFjazogc2xhY2tWZXJpZmllcixcblx0c2hvcGlmeTogc2hvcGlmeVZlcmlmaWVyLFxuXHRzdml4OiBzdml4VmVyaWZpZXIsXG59O1xuIl19

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@blokjs/trigger-webhook",
-	"version": "0.2.1",
+	"version": "0.6.2",
 	"description": "Webhook trigger for Blok workflows - supports GitHub, Stripe, Shopify, and custom webhooks",
 	"type": "module",
 	"main": "dist/index.js",
@@ -14,13 +14,15 @@
 	"author": "Deskree Technologies Inc.",
 	"license": "Apache-2.0",
 	"dependencies": {
-		"@blokjs/helper": "^0.2.0",
-		"@blokjs/runner": "^0.2.0",
-		"@blokjs/shared": "^0.2.0",
+		"@blokjs/helper": "^0.6.2",
+		"@blokjs/runner": "^0.6.2",
+		"@blokjs/shared": "^0.6.2",
 		"@opentelemetry/api": "^1.9.0",
+		"hono": "^4.11.7",
 		"uuid": "^11.1.0"
 	},
 	"devDependencies": {
+		"@hono/node-server": "^1.19.9",
 		"@types/node": "^22.15.21",
 		"@types/uuid": "^11.0.0",
 		"typescript": "^5.8.3",

package/src/WebhookTrigger.integration.test.ts

@@ -0,0 +1,162 @@
+/**
+ * v0.7 PR 4 — full end-to-end webhook trigger integration test.
+ *
+ * Spins up a real Hono app + `@hono/node-server` with a real
+ * WebhookTrigger configured for a GitHub-style provider. Sends a
+ * signed POST via native `fetch` and asserts the workflow ran. A
+ * second POST with the same delivery id exercises the replay-cache
+ * dedup path and expects `{ status: "duplicate" }`.
+ *
+ * Complements `WebhookTrigger.test.ts` + `verifiers.test.ts` (unit
+ * coverage of the public surface).
+ */
+
+import { createHmac } from "node:crypto";
+import type { Server } from "node:http";
+import { NodeMap, RunTracker, WorkflowRegistry, defineNode } from "@blokjs/runner";
+import { serve } from "@hono/node-server";
+import { Hono } from "hono";
+import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
+import { z } from "zod";
+
+vi.mock("@opentelemetry/api", () => ({
+	trace: {
+		getTracer: () => ({
+			startActiveSpan: (_name: string, fn: (span: unknown) => unknown) =>
+				fn({ setAttribute: vi.fn(), setStatus: vi.fn(), recordException: vi.fn(), end: vi.fn() }),
+		}),
+	},
+	metrics: {
+		getMeter: () => ({
+			createCounter: () => ({ add: vi.fn() }),
+			createHistogram: () => ({ record: vi.fn() }),
+			createGauge: () => ({ record: vi.fn() }),
+			createObservableGauge: () => ({ addCallback: vi.fn() }),
+		}),
+	},
+	SpanStatusCode: { OK: 0, ERROR: 1 },
+}));
+
+import WebhookTriggerClass, { _setActiveWebhookTrigger } from "./WebhookTrigger";
+
+const TEST_PORT = 4903;
+const SECRET = "shhh-its-a-secret-1234567890";
+
+function hmacHex(body: string): string {
+	return createHmac("sha256", SECRET).update(body).digest("hex");
+}
+
+const handleNode = defineNode({
+	name: "handle-event",
+	description: "test fixture — record the event id + type",
+	input: z.object({}).passthrough(),
+	output: z.object({ handled: z.boolean(), eventId: z.string() }),
+	async execute(ctx) {
+		const body = (ctx.request?.body as { delivery_id?: string } | undefined) ?? {};
+		return { handled: true, eventId: body.delivery_id ?? "" };
+	},
+});
+
+describe("WebhookTrigger — v0.7 PR 4 integration (real HTTP)", () => {
+	let app: Hono;
+	let trigger: InstanceType<typeof WebhookTriggerClass>;
+	let httpServer: Server | null = null;
+
+	beforeEach(() => {
+		WorkflowRegistry.resetInstance();
+		_setActiveWebhookTrigger(null);
+		process.env.GH_SECRET = SECRET;
+		app = new Hono();
+	});
+
+	afterEach(
+		() =>
+			new Promise<void>((resolve) => {
+				if (trigger) void trigger.stop();
+				if (httpServer) {
+					httpServer.close(() => {
+						httpServer = null;
+						WorkflowRegistry.resetInstance();
+						_setActiveWebhookTrigger(null);
+						process.env.GH_SECRET = undefined;
+						resolve();
+					});
+				} else {
+					WorkflowRegistry.resetInstance();
+					_setActiveWebhookTrigger(null);
+					process.env.GH_SECRET = undefined;
+					resolve();
+				}
+			}),
+	);
+
+	it("verifies a signed GitHub-style POST, runs the workflow, and dedups replays", async () => {
+		const nodes = new NodeMap();
+		nodes.addNode("handle-event", handleNode);
+
+		WorkflowRegistry.getInstance().register({
+			name: "gh-events",
+			source: "/test/gh.json",
+			workflow: {
+				name: "gh-events",
+				version: "1.0.0",
+				trigger: {
+					webhook: {
+						provider: "github",
+						path: "/webhooks/github",
+						secretEnv: "GH_SECRET",
+						idempotencyKey: "js/ctx.request.headers['x-github-delivery']",
+					},
+				},
+				steps: [{ id: "handle", node: "handle-event", type: "module", inputs: {} }],
+				nodes: { handle: { inputs: {} } },
+			},
+		});
+
+		trigger = new WebhookTriggerClass(app);
+		trigger.setNodeMap({ nodes });
+		await trigger.listen();
+
+		await new Promise<void>((resolve) => {
+			httpServer = serve({ fetch: app.fetch, port: TEST_PORT }, () => resolve()) as Server;
+		});
+
+		const body = JSON.stringify({ ref: "refs/heads/main", delivery_id: "delivery-uuid-9" });
+		const sig = `sha256=${hmacHex(body)}`;
+		const reqInit = {
+			method: "POST",
+			headers: {
+				"content-type": "application/json",
+				"x-hub-signature-256": sig,
+				"x-github-event": "push",
+				"x-github-delivery": "delivery-uuid-9",
+			},
+			body,
+		};
+
+		// First delivery — should run the workflow.
+		const first = await fetch(`http://localhost:${TEST_PORT}/webhooks/github`, reqInit);
+		expect(first.status).toBe(200);
+		const firstJson = (await first.json()) as { status?: string; eventId?: string };
+		expect(firstJson.status).toBe("ok");
+		expect(firstJson.eventId).toBe("delivery-uuid-9");
+
+		// Second delivery with the same delivery id — replay cache should
+		// short-circuit with `duplicate` and NOT run the workflow.
+		const second = await fetch(`http://localhost:${TEST_PORT}/webhooks/github`, reqInit);
+		expect(second.status).toBe(200);
+		const secondJson = (await second.json()) as { status?: string; eventId?: string };
+		expect(secondJson.status).toBe("duplicate");
+		expect(secondJson.eventId).toBe("delivery-uuid-9");
+	}, 15_000);
+});
+
+// Drain the per-process RunTracker after the suite to keep singletons
+// from leaking into other tests in the same project.
+afterEach(() => {
+	try {
+		RunTracker.resetInstance();
+	} catch {
+		/* ignore — older test orderings */
+	}
+});