@crowdsource.you/core 1.2.0

package/dist/esm/testing/sandbox.js

@@ -0,0 +1,337 @@
+/**
+ * An in-process CrowdSource, so an integration can be exercised end to end
+ * before a jury exists.
+ *
+ * The path an application actually cares about is: deliver a report → get a
+ * case → a decision is published → a signed webhook arrives → enforcement runs.
+ * Today the middle of that does not exist anywhere — sortition, review and
+ * consensus are not built, so nothing publishes a decision. Waiting for them
+ * means an integrator cannot write, or test, the half of their code that
+ * matters most: what they DO when a decision says `violation`.
+ *
+ * So this sandbox implements the two ends and lets the test drive the middle.
+ * It accepts reports over a `fetch` the real `@crowdsource.you/core` client can be
+ * pointed at — same transport, same idempotency, same 409, same tenant check —
+ * and `decide()` publishes a decision the way consensus eventually will, which
+ * `deliver()` then sends as a genuinely signed `case.decided`.
+ *
+ * **What it is and is not.** It is a faithful implementation of the RULES an
+ * integrator's code depends on: `applicationId` from the credential, an
+ * idempotency key that returns the same `reportId`, a 409 for a reused
+ * `externalReportId` with a changed body, and §7.3's "two reports about the same
+ * version of the same content are one case". It is NOT the service, it holds no
+ * state between processes, and where it and the backend ever disagree the
+ * backend is right. The deduplication projection below mirrors the backend's
+ * `modules/evidence/contentSnapshot.ts`; that logic belongs in the contracts
+ * package so both sides share one implementation, and until it moves this file
+ * is the second copy — which is a thing to know rather than a thing to rely on.
+ */
+import { createHash, randomUUID } from 'node:crypto';
+import { CreateReportRequestSchema, DecisionSchema, KnownWebhookEventSchema, PRINCIPAL_TARGETED_RELATION_TYPES, UNIVERSAL_TAXONOMY_VERSION, } from '@crowdsource.you/contracts';
+import { WebhookSimulator } from './webhook-simulator.js';
+const DEFAULT_BASE_URL = 'https://sandbox.crowdsource.test';
+function publicId(prefix) {
+    return `${prefix}_${randomUUID().replace(/-/g, '')}`;
+}
+function sha256Hex(value) {
+    return createHash('sha256').update(value, 'utf8').digest('hex');
+}
+/**
+ * §7.3's `contentEnvelopeHash`, over the same projection the backend hashes.
+ *
+ * The three normalisations that make two reporters agree, restated so a reader
+ * does not have to open the backend to know what is excluded: order is removed
+ * where it is not meaning, proof-of-delivery fields are dropped from principal
+ * bindings, and nothing per-reporter is included at all — no
+ * `externalReportId`, no `source`, no `allegations`, no reporter binding, no
+ * `urgency`, no `metadata`.
+ */
+function contentHashOf(envelope) {
+    const referencedPrincipals = new Set();
+    for (const resource of envelope.resources) {
+        if (resource.authorPrincipalRef !== undefined) {
+            referencedPrincipals.add(resource.authorPrincipalRef);
+        }
+        if (resource.type === 'listing' && resource.data.sellerRef !== undefined) {
+            referencedPrincipals.add(resource.data.sellerRef);
+        }
+    }
+    for (const relation of envelope.relations) {
+        if (PRINCIPAL_TARGETED_RELATION_TYPES.some((type) => type === relation.type)) {
+            referencedPrincipals.add(relation.to);
+        }
+    }
+    const snapshot = {
+        schemaVersion: envelope.schemaVersion,
+        subject: envelope.subject,
+        resources: [...envelope.resources].sort((left, right) => (left.id < right.id ? -1 : 1)),
+        relations: [...envelope.relations].sort((left, right) => `${left.from} ${left.type} ${left.to}` < `${right.from} ${right.type} ${right.to}` ? -1 : 1),
+        principals: envelope.principalBindings
+            .filter((binding) => referencedPrincipals.has(binding.principalRef))
+            .sort((left, right) => (left.principalRef < right.principalRef ? -1 : 1))
+            .map((binding) => ({
+            principalRef: binding.principalRef,
+            type: binding.type,
+            externalPrincipalId: binding.externalPrincipalId,
+        })),
+    };
+    return sha256Hex(JSON.stringify(snapshot));
+}
+function jsonResponse(status, body) {
+    return new Response(JSON.stringify(body), {
+        status,
+        headers: { 'content-type': 'application/json' },
+    });
+}
+function apiError(status, code, message) {
+    return jsonResponse(status, { error: { code, message } });
+}
+export class CrowdSourceSandbox {
+    constructor(options = {}) {
+        this.reportsById = new Map();
+        this.reportsByIdempotencyKey = new Map();
+        this.reportsByExternalId = new Map();
+        this.casesById = new Map();
+        this.caseIdByDedupKey = new Map();
+        this.decisionsById = new Map();
+        /** The `fetch` to hand `new CrowdSource({ fetch, serviceKey, baseUrl })`. */
+        this.fetch = async (input, init) => {
+            const url = new URL(typeof input === 'string' ? input : input instanceof URL ? input.href : input.url);
+            const method = (init?.method ?? 'GET').toUpperCase();
+            const headers = new Headers(init?.headers);
+            if (headers.get('authorization') !== `Bearer ${this.bearerToken}`) {
+                return apiError(401, 'unauthorized', 'The service credential is missing or invalid.');
+            }
+            if (method === 'POST' && url.pathname === '/v1/reports') {
+                return this.createReport(headers, init?.body);
+            }
+            if (method === 'GET' && url.pathname.startsWith('/v1/reports/')) {
+                return this.readReport(decodeURIComponent(url.pathname.slice('/v1/reports/'.length)));
+            }
+            if (method === 'GET' && url.pathname.startsWith('/v1/cases/')) {
+                return this.readCase(decodeURIComponent(url.pathname.slice('/v1/cases/'.length)));
+            }
+            if (method === 'GET' && url.pathname.startsWith('/v1/decisions/')) {
+                return this.readDecision(decodeURIComponent(url.pathname.slice('/v1/decisions/'.length)));
+            }
+            /**
+             * Everything else, including the upload routes, answers 404 — the same thing
+             * the deployed backend does today. A sandbox that faked an endpoint the
+             * service does not serve would let an integration pass its tests and fail on
+             * its first real call.
+             */
+            return apiError(404, 'not_found', `The sandbox does not serve ${method} ${url.pathname}.`);
+        };
+        this.applicationId = options.applicationId ?? publicId('app');
+        this.organizationId = options.organizationId ?? publicId('org');
+        this.baseUrl = options.baseUrl ?? DEFAULT_BASE_URL;
+        this.webhookSecret = options.webhookSecret ?? randomUUID();
+        const credentialId = publicId('csk');
+        const secret = randomUUID().replace(/-/g, '');
+        this.bearerToken = `${credentialId}.${secret}`;
+        this.serviceKey = [this.applicationId, credentialId, secret].join(':');
+    }
+    get reports() {
+        return [...this.reportsById.values()];
+    }
+    get cases() {
+        return [...this.casesById.values()];
+    }
+    /**
+     * Publishes a decision for a case, the way consensus eventually will.
+     *
+     * A published revision is immutable (Appendix F), so calling this twice
+     * produces revision 2 superseding revision 1 rather than editing anything.
+     */
+    decide(caseId, input = {}) {
+        const stored = this.casesById.get(caseId);
+        if (!stored)
+            throw new Error(`The sandbox holds no case '${caseId}'.`);
+        const previous = stored.decisions.at(-1);
+        const revision = (previous?.revision ?? 0) + 1;
+        const outcome = input.outcome ?? 'violation';
+        const decision = DecisionSchema.parse({
+            id: publicId('dec'),
+            caseId,
+            revision,
+            status: input.status ?? 'final',
+            outcome,
+            contextSufficiency: outcome === 'insufficient_context' ? 'insufficient' : 'sufficient',
+            confidence: input.confidence ?? 1,
+            findings: input.findings ??
+                (outcome === 'violation'
+                    ? [
+                        {
+                            code: stored.allegationCodes[0] ?? 'other.unclassifiable',
+                            resourceIds: ['res_subject'],
+                            severity: 'medium',
+                            scope: 'application_local',
+                            attribution: 'author',
+                        },
+                    ]
+                    : []),
+            recommendedActions: input.recommendedActions ??
+                (outcome === 'violation' ? [{ action: 'remove_or_restrict' }] : [{ action: 'no_action' }]),
+            jury: { size: 3, decisiveVotes: 3, winningVotes: 3, agreement: 1, specialistPresent: false },
+            policyVersions: {
+                taxonomy: UNIVERSAL_TAXONOMY_VERSION,
+                application: stored.policy.version,
+                oxyConduct: stored.policy.version,
+            },
+            ...(previous === undefined ? {} : { supersedesDecisionId: previous.id }),
+            publishedAt: new Date().toISOString(),
+        });
+        this.decisionsById.set(decision.id, decision);
+        this.casesById.set(caseId, { ...stored, decisions: [...stored.decisions, decision] });
+        return decision;
+    }
+    /** The `case.decided` (or `decision.corrected`) event for a decision. */
+    eventFor(decision) {
+        return KnownWebhookEventSchema.parse({
+            id: publicId('evt'),
+            type: decision.revision === 1 ? 'case.decided' : 'decision.corrected',
+            createdAt: new Date().toISOString(),
+            organizationId: this.organizationId,
+            applicationId: this.applicationId,
+            data: { caseId: decision.caseId, decision },
+        });
+    }
+    /** Signs and POSTs an event to the integration's webhook endpoint. */
+    async deliver(url, event) {
+        return await new WebhookSimulator({ secret: this.webhookSecret, url }).deliver(event);
+    }
+    createReport(headers, body) {
+        const idempotencyKey = headers.get('idempotency-key');
+        if (idempotencyKey === null || idempotencyKey.length === 0) {
+            return apiError(400, 'invalid_request', 'The Idempotency-Key header is required.');
+        }
+        if (typeof body !== 'string') {
+            return apiError(400, 'invalid_request', 'The request body must be JSON.');
+        }
+        let payload;
+        try {
+            payload = JSON.parse(body);
+        }
+        catch {
+            return apiError(400, 'invalid_request', 'The request body must be JSON.');
+        }
+        const parsed = CreateReportRequestSchema.safeParse(payload);
+        if (!parsed.success) {
+            return apiError(422, 'unprocessable_envelope', `The envelope cannot be processed — ${parsed.error.issues
+                .map((issue) => `${issue.path.join('.') || '(root)'}: ${issue.message}`)
+                .join('; ')}`);
+        }
+        const { externalReportId, envelope } = parsed.data;
+        if (envelope.applicationId !== this.applicationId) {
+            return apiError(403, 'forbidden', 'The envelope names a different applicationId than the credential it was delivered with.');
+        }
+        const payloadHash = sha256Hex(JSON.stringify(parsed.data));
+        /**
+         * Appendix D, both halves. The same key with the same payload is the SAME
+         * report and returns the same `reportId`; the same `externalReportId` with a
+         * DIFFERENT payload is §10.5's 409 — the two cannot both be that report, and
+         * no retry resolves it.
+         */
+        const byKey = this.reportsByIdempotencyKey.get(idempotencyKey);
+        if (byKey !== undefined) {
+            if (byKey.payloadHash !== payloadHash) {
+                return apiError(409, 'conflict', 'This Idempotency-Key was already used with a different payload.');
+            }
+            return this.receiptResponse(byKey);
+        }
+        const byExternalId = this.reportsByExternalId.get(externalReportId);
+        if (byExternalId !== undefined) {
+            if (byExternalId.payloadHash !== payloadHash) {
+                return apiError(409, 'conflict', `externalReportId '${externalReportId}' was already delivered with different content.`);
+            }
+            return this.receiptResponse(byExternalId);
+        }
+        const dedupKey = sha256Hex([
+            this.applicationId,
+            envelope.subject.externalId,
+            contentHashOf(envelope),
+            `${envelope.policy.policySetId}@${envelope.policy.version}`,
+        ].join(':'));
+        const existingCaseId = this.caseIdByDedupKey.get(dedupKey);
+        const merged = existingCaseId !== undefined;
+        const caseId = existingCaseId ?? publicId('case');
+        const report = {
+            reportId: publicId('rpt'),
+            externalReportId,
+            caseId,
+            idempotencyKey,
+            envelope,
+            status: merged ? 'merged' : 'received',
+            receivedAt: new Date().toISOString(),
+            payloadHash,
+        };
+        this.reportsById.set(report.reportId, report);
+        this.reportsByIdempotencyKey.set(idempotencyKey, report);
+        this.reportsByExternalId.set(externalReportId, report);
+        const existingCase = this.casesById.get(caseId);
+        this.casesById.set(caseId, {
+            caseId,
+            externalSubjectId: envelope.subject.externalId,
+            dedupKey,
+            policy: envelope.policy,
+            allegationCodes: [
+                ...new Set([
+                    ...(existingCase?.allegationCodes ?? []),
+                    ...envelope.allegations.map((allegation) => allegation.code),
+                ]),
+            ],
+            reportIds: [...(existingCase?.reportIds ?? []), report.reportId],
+            decisions: existingCase?.decisions ?? [],
+        });
+        this.caseIdByDedupKey.set(dedupKey, caseId);
+        return this.receiptResponse(report);
+    }
+    receiptResponse(report) {
+        return jsonResponse(202, {
+            reportId: report.reportId,
+            caseId: report.caseId,
+            status: report.status,
+            merged: report.status === 'merged',
+        });
+    }
+    readReport(reportId) {
+        const report = this.reportsById.get(reportId);
+        if (!report)
+            return apiError(404, 'not_found', 'No such report.');
+        return jsonResponse(200, {
+            reportId: report.reportId,
+            externalReportId: report.externalReportId,
+            caseId: report.caseId,
+            status: report.status,
+            receivedAt: report.receivedAt,
+        });
+    }
+    readCase(caseId) {
+        const stored = this.casesById.get(caseId);
+        if (!stored)
+            return apiError(404, 'not_found', 'No such case.');
+        return jsonResponse(200, {
+            caseId: stored.caseId,
+            status: stored.decisions.length > 0 ? 'decided' : 'awaiting_review',
+            subject: { externalId: stored.externalSubjectId, type: 'social.post' },
+            policy: stored.policy,
+            taxonomyVersion: UNIVERSAL_TAXONOMY_VERSION,
+            allegationCodes: stored.allegationCodes,
+            reportCount: stored.reportIds.length,
+            sensitivityClass: 'standard',
+            currentRevision: stored.decisions.length,
+            createdAt: new Date(0).toISOString(),
+            updatedAt: new Date().toISOString(),
+        });
+    }
+    readDecision(decisionId) {
+        const decision = this.decisionsById.get(decisionId);
+        if (!decision)
+            return apiError(404, 'not_found', 'No such decision.');
+        return jsonResponse(200, decision);
+    }
+}
+export function createCrowdSourceSandbox(options = {}) {
+    return new CrowdSourceSandbox(options);
+}
+//# sourceMappingURL=sandbox.js.map

package/dist/esm/testing/sandbox.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox.js","sourceRoot":"","sources":["../../../src/testing/sandbox.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAErD,OAAO,EACL,yBAAyB,EACzB,cAAc,EACd,uBAAuB,EACvB,iCAAiC,EACjC,0BAA0B,GAQ3B,MAAM,4BAA4B,CAAC;AAEpC,OAAO,EAAE,gBAAgB,EAA8B,MAAM,wBAAwB,CAAC;AA+CtF,MAAM,gBAAgB,GAAG,kCAAkC,CAAC;AAE5D,SAAS,QAAQ,CAAC,MAAc;IAC9B,OAAO,GAAG,MAAM,IAAI,UAAU,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC;AACvD,CAAC;AAED,SAAS,SAAS,CAAC,KAAa;IAC9B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAClE,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,aAAa,CAAC,QAAsB;IAC3C,MAAM,oBAAoB,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/C,KAAK,MAAM,QAAQ,IAAI,QAAQ,CAAC,SAAS,EAAE,CAAC;QAC1C,IAAI,QAAQ,CAAC,kBAAkB,KAAK,SAAS,EAAE,CAAC;YAC9C,oBAAoB,CAAC,GAAG,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC;QACxD,CAAC;QACD,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACzE,oBAAoB,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IACD,KAAK,MAAM,QAAQ,IAAI,QAAQ,CAAC,SAAS,EAAE,CAAC;QAC1C,IAAI,iCAAiC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7E,oBAAoB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAG;QACf,aAAa,EAAE,QAAQ,CAAC,aAAa;QACrC,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,SAAS,EAAE,CAAC,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACvF,SAAS,EAAE,CAAC,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACtD,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,EAAE,EAAE,GAAG,GAAG,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAC5F;QACD,UAAU,EAAE,QAAQ,CAAC,iBAAiB;aACnC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,oBAAoB,CAAC,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;aACnE,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;aACxE,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YACjB,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,mBAAmB,EAAE,OAAO,CAAC,mBAAmB;SACjD,CAAC,CAAC;KACN,CAAC;IAEF,OAAO,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;AAC7C,CAAC;AAED,SAAS,YAAY,CAAC,MAAc,EAAE,IAAa;IACjD,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE;QACxC,MAAM;QACN,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;KAChD,CAAC,CAAC;AACL,CAAC;AAED,SAAS,QAAQ,CAAC,MAAc,EAAE,IAAY,EAAE,OAAe;IAC7D,OAAO,YAAY,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,OAAO,kBAAkB;IAgB7B,YAAY,UAAqC,EAAE;QAPlC,gBAAW,GAAG,IAAI,GAAG,EAAyB,CAAC;QAC/C,4BAAuB,GAAG,IAAI,GAAG,EAAyB,CAAC;QAC3D,wBAAmB,GAAG,IAAI,GAAG,EAAyB,CAAC;QACvD,cAAS,GAAG,IAAI,GAAG,EAAuB,CAAC;QAC3C,qBAAgB,GAAG,IAAI,GAAG,EAAkB,CAAC;QAC7C,kBAAa,GAAG,IAAI,GAAG,EAAoB,CAAC;QAsB7D,6EAA6E;QACpE,UAAK,GAA4B,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YAC9D,MAAM,GAAG,GAAG,IAAI,GAAG,CACjB,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,YAAY,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAClF,CAAC;YACF,MAAM,MAAM,GAAG,CAAC,IAAI,EAAE,MAAM,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;YACrD,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAE3C,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,KAAK,UAAU,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;gBAClE,OAAO,QAAQ,CAAC,GAAG,EAAE,cAAc,EAAE,+CAA+C,CAAC,CAAC;YACxF,CAAC;YAED,IAAI,MAAM,KAAK,MAAM,IAAI,GAAG,CAAC,QAAQ,KAAK,aAAa,EAAE,CAAC;gBACxD,OAAO,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;YAChD,CAAC;YACD,IAAI,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;gBAChE,OAAO,IAAI,CAAC,UAAU,CAAC,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACxF,CAAC;YACD,IAAI,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;gBAC9D,OAAO,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACpF,CAAC;YACD,IAAI,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC;gBAClE,OAAO,IAAI,CAAC,YAAY,CAAC,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YAC5F,CAAC;YAED;;;;;eAKG;YACH,OAAO,QAAQ,CAAC,GAAG,EAAE,WAAW,EAAE,8BAA8B,MAAM,IAAI,GAAG,CAAC,QAAQ,GAAG,CAAC,CAAC;QAC7F,CAAC,CAAC;QAnDA,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC9D,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC;QAChE,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,gBAAgB,CAAC;QACnD,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,UAAU,EAAE,CAAC;QAE3D,MAAM,YAAY,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;QACrC,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC9C,IAAI,CAAC,WAAW,GAAG,GAAG,YAAY,IAAI,MAAM,EAAE,CAAC;QAC/C,IAAI,CAAC,UAAU,GAAG,CAAC,IAAI,CAAC,aAAa,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACzE,CAAC;IAED,IAAI,OAAO;QACT,OAAO,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC;IACxC,CAAC;IAED,IAAI,KAAK;QACP,OAAO,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;IACtC,CAAC;IAoCD;;;;;OAKG;IACH,MAAM,CAAC,MAAc,EAAE,QAA8B,EAAE;QACrD,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC1C,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,MAAM,IAAI,CAAC,CAAC;QAEvE,MAAM,QAAQ,GAAG,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACzC,MAAM,QAAQ,GAAG,CAAC,QAAQ,EAAE,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QAC/C,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,WAAW,CAAC;QAE7C,MAAM,QAAQ,GAAG,cAAc,CAAC,KAAK,CAAC;YACpC,EAAE,EAAE,QAAQ,CAAC,KAAK,CAAC;YACnB,MAAM;YACN,QAAQ;YACR,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,OAAO;YAC/B,OAAO;YACP,kBAAkB,EAAE,OAAO,KAAK,sBAAsB,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,YAAY;YACtF,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,CAAC;YACjC,QAAQ,EACN,KAAK,CAAC,QAAQ;gBACd,CAAC,OAAO,KAAK,WAAW;oBACtB,CAAC,CAAC;wBACE;4BACE,IAAI,EAAE,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,sBAAsB;4BACzD,WAAW,EAAE,CAAC,aAAa,CAAC;4BAC5B,QAAQ,EAAE,QAAQ;4BAClB,KAAK,EAAE,mBAAmB;4BAC1B,WAAW,EAAE,QAAQ;yBACtB;qBACF;oBACH,CAAC,CAAC,EAAE,CAAC;YACT,kBAAkB,EAChB,KAAK,CAAC,kBAAkB;gBACxB,CAAC,OAAO,KAAK,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;YAC5F,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,iBAAiB,EAAE,KAAK,EAAE;YAC5F,cAAc,EAAE;gBACd,QAAQ,EAAE,0BAA0B;gBACpC,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO;gBAClC,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO;aAClC;YACD,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,oBAAoB,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC;YACxE,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACtC,CAAC,CAAC;QAEH,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QAC9C,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,CAAC,GAAG,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;QACtF,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,yEAAyE;IACzE,QAAQ,CAAC,QAAkB;QACzB,OAAO,uBAAuB,CAAC,KAAK,CAAC;YACnC,EAAE,EAAE,QAAQ,CAAC,KAAK,CAAC;YACnB,IAAI,EAAE,QAAQ,CAAC,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,oBAAoB;YACrE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,IAAI,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,EAAE;SAC5C,CAAC,CAAC;IACL,CAAC;IAED,sEAAsE;IACtE,KAAK,CAAC,OAAO,CAAC,GAAW,EAAE,KAAc;QACvC,OAAO,MAAM,IAAI,gBAAgB,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,aAAa,EAAE,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACxF,CAAC;IAEO,YAAY,CAAC,OAAgB,EAAE,IAAiC;QACtE,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;QACtD,IAAI,cAAc,KAAK,IAAI,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3D,OAAO,QAAQ,CAAC,GAAG,EAAE,iBAAiB,EAAE,yCAAyC,CAAC,CAAC;QACrF,CAAC;QACD,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,OAAO,QAAQ,CAAC,GAAG,EAAE,iBAAiB,EAAE,gCAAgC,CAAC,CAAC;QAC5E,CAAC;QAED,IAAI,OAAgB,CAAC;QACrB,IAAI,CAAC;YACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;QACxC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,QAAQ,CAAC,GAAG,EAAE,iBAAiB,EAAE,gCAAgC,CAAC,CAAC;QAC5E,CAAC;QAED,MAAM,MAAM,GAAG,yBAAyB,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAC5D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,QAAQ,CACb,GAAG,EACH,wBAAwB,EACxB,sCAAsC,MAAM,CAAC,KAAK,CAAC,MAAM;iBACtD,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;iBACvE,IAAI,CAAC,IAAI,CAAC,EAAE,CAChB,CAAC;QACJ,CAAC;QACD,MAAM,EAAE,gBAAgB,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC;QAEnD,IAAI,QAAQ,CAAC,aAAa,KAAK,IAAI,CAAC,aAAa,EAAE,CAAC;YAClD,OAAO,QAAQ,CACb,GAAG,EACH,WAAW,EACX,yFAAyF,CAC1F,CAAC;QACJ,CAAC;QAED,MAAM,WAAW,GAAG,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAE3D;;;;;WAKG;QACH,MAAM,KAAK,GAAG,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QAC/D,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,IAAI,KAAK,CAAC,WAAW,KAAK,WAAW,EAAE,CAAC;gBACtC,OAAO,QAAQ,CACb,GAAG,EACH,UAAU,EACV,iEAAiE,CAClE,CAAC;YACJ,CAAC;YACD,OAAO,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QACrC,CAAC;QAED,MAAM,YAAY,GAAG,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;QACpE,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;YAC/B,IAAI,YAAY,CAAC,WAAW,KAAK,WAAW,EAAE,CAAC;gBAC7C,OAAO,QAAQ,CACb,GAAG,EACH,UAAU,EACV,qBAAqB,gBAAgB,iDAAiD,CACvF,CAAC;YACJ,CAAC;YACD,OAAO,IAAI,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC;QAC5C,CAAC;QAED,MAAM,QAAQ,GAAG,SAAS,CACxB;YACE,IAAI,CAAC,aAAa;YAClB,QAAQ,CAAC,OAAO,CAAC,UAAU;YAC3B,aAAa,CAAC,QAAQ,CAAC;YACvB,GAAG,QAAQ,CAAC,MAAM,CAAC,WAAW,IAAI,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE;SAC5D,CAAC,IAAI,CAAC,GAAG,CAAC,CACZ,CAAC;QAEF,MAAM,cAAc,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC3D,MAAM,MAAM,GAAG,cAAc,KAAK,SAAS,CAAC;QAC5C,MAAM,MAAM,GAAG,cAAc,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC;QAElD,MAAM,MAAM,GAAkB;YAC5B,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC;YACzB,gBAAgB;YAChB,MAAM;YACN,cAAc;YACd,QAAQ;YACR,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU;YACtC,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACpC,WAAW;SACZ,CAAC;QAEF,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC9C,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;QACzD,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC;QAEvD,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAChD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE;YACzB,MAAM;YACN,iBAAiB,EAAE,QAAQ,CAAC,OAAO,CAAC,UAAU;YAC9C,QAAQ;YACR,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,eAAe,EAAE;gBACf,GAAG,IAAI,GAAG,CAAC;oBACT,GAAG,CAAC,YAAY,EAAE,eAAe,IAAI,EAAE,CAAC;oBACxC,GAAG,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;iBAC7D,CAAC;aACH;YACD,SAAS,EAAE,CAAC,GAAG,CAAC,YAAY,EAAE,SAAS,IAAI,EAAE,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;YAChE,SAAS,EAAE,YAAY,EAAE,SAAS,IAAI,EAAE;SACzC,CAAC,CAAC;QACH,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAE5C,OAAO,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;IACtC,CAAC;IAEO,eAAe,CAAC,MAAqB;QAC3C,OAAO,YAAY,CAAC,GAAG,EAAE;YACvB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,MAAM,EAAE,MAAM,CAAC,MAAM,KAAK,QAAQ;SACnC,CAAC,CAAC;IACL,CAAC;IAEO,UAAU,CAAC,QAAgB;QACjC,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC9C,IAAI,CAAC,MAAM;YAAE,OAAO,QAAQ,CAAC,GAAG,EAAE,WAAW,EAAE,iBAAiB,CAAC,CAAC;QAElE,OAAO,YAAY,CAAC,GAAG,EAAE;YACvB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,UAAU,EAAE,MAAM,CAAC,UAAU;SAC9B,CAAC,CAAC;IACL,CAAC;IAEO,QAAQ,CAAC,MAAc;QAC7B,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC1C,IAAI,CAAC,MAAM;YAAE,OAAO,QAAQ,CAAC,GAAG,EAAE,WAAW,EAAE,eAAe,CAAC,CAAC;QAEhE,OAAO,YAAY,CAAC,GAAG,EAAE;YACvB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,MAAM,EAAE,MAAM,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,iBAAiB;YACnE,OAAO,EAAE,EAAE,UAAU,EAAE,MAAM,CAAC,iBAAiB,EAAE,IAAI,EAAE,aAAa,EAAE;YACtE,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,eAAe,EAAE,0BAA0B;YAC3C,eAAe,EAAE,MAAM,CAAC,eAAe;YACvC,WAAW,EAAE,MAAM,CAAC,SAAS,CAAC,MAAM;YACpC,gBAAgB,EAAE,UAAU;YAC5B,eAAe,EAAE,MAAM,CAAC,SAAS,CAAC,MAAM;YACxC,SAAS,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE;YACpC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC,CAAC;IACL,CAAC;IAEO,YAAY,CAAC,UAAkB;QACrC,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACpD,IAAI,CAAC,QAAQ;YAAE,OAAO,QAAQ,CAAC,GAAG,EAAE,WAAW,EAAE,mBAAmB,CAAC,CAAC;QACtE,OAAO,YAAY,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IACrC,CAAC;CACF;AAED,MAAM,UAAU,wBAAwB,CACtC,UAAqC,EAAE;IAEvC,OAAO,IAAI,kBAAkB,CAAC,OAAO,CAAC,CAAC;AACzC,CAAC"}

package/dist/esm/testing/webhook-simulator.js

@@ -0,0 +1,93 @@
+/**
+ * The webhook simulator — the producer side of §10.8.
+ *
+ * An integrator can point this at their own receiver and watch a real delivery
+ * arrive, signed exactly as CrowdSource signs one, without a jury having sat and
+ * without anything being enforced against a real user.
+ *
+ * It deliberately also makes it easy to send a delivery that is WRONG:
+ * `expired`, `wrongSecret`, `tampered` and a raw `signature` override are here
+ * so an integration test can assert that the receiver REFUSES those. A test
+ * suite that only ever sends valid deliveries proves the receiver can say yes.
+ * Proving it can say no is the part that matters, and it is the part nobody
+ * writes unless the tooling makes it a one-liner.
+ *
+ * Signing lives here rather than in `@crowdsource.you/core/express` because the two
+ * are opposite sides of the contract: the verifier must never import a signer
+ * that could be "corrected" until they agree with each other and both disagree
+ * with the service. What they share instead is
+ * `buildWebhookSignedPayload` from the contracts package, which is the one
+ * definition of what gets signed.
+ */
+import { createHmac } from 'node:crypto';
+import { WEBHOOK_EVENT_ID_HEADER, WEBHOOK_SIGNATURE_HEADER, WEBHOOK_SIGNATURE_VERSION, WEBHOOK_TIMESTAMP_HEADER, buildWebhookSignedPayload, } from '@crowdsource.you/contracts';
+function eventIdOf(event) {
+    if (typeof event === 'object' && event !== null && 'id' in event) {
+        const id = event.id;
+        if (typeof id === 'string')
+            return id;
+    }
+    throw new TypeError('A webhook event must carry a string `id` (§10.7).');
+}
+/** Signs one delivery. */
+export function signWebhookDelivery(input) {
+    const signedBody = JSON.stringify(input.event);
+    const timestamp = String(input.timestampSeconds ?? Math.floor(Date.now() / 1000));
+    const signature = input.signature ??
+        `${WEBHOOK_SIGNATURE_VERSION}=${createHmac('sha256', input.secret)
+            .update(buildWebhookSignedPayload(timestamp, signedBody), 'utf8')
+            .digest('hex')}`;
+    return {
+        headers: {
+            'content-type': 'application/json',
+            [WEBHOOK_EVENT_ID_HEADER]: input.eventId ?? eventIdOf(input.event),
+            [WEBHOOK_TIMESTAMP_HEADER]: timestamp,
+            [WEBHOOK_SIGNATURE_HEADER]: signature,
+        },
+        // The tampered body is sent WITHOUT re-signing, which is the whole point:
+        // the signature above covers `signedBody` and the receiver is handed
+        // something else.
+        body: input.tamperedBody ?? signedBody,
+    };
+}
+/** Comfortably outside the five-minute window, in either direction. */
+const EXPIRED_SKEW_SECONDS = 3600;
+export class WebhookSimulator {
+    constructor(options) {
+        this.options = options;
+    }
+    /** Signs a delivery without sending it. */
+    sign(event, overrides = {}) {
+        return signWebhookDelivery({
+            secret: overrides.wrongSecret ?? this.options.secret,
+            event,
+            timestampSeconds: overrides.timestampSeconds ??
+                Math.floor(Date.now() / 1000) - (overrides.expired === true ? EXPIRED_SKEW_SECONDS : 0),
+            ...(overrides.tamperedBody === undefined ? {} : { tamperedBody: overrides.tamperedBody }),
+            ...(overrides.signature === undefined ? {} : { signature: overrides.signature }),
+            ...(overrides.eventId === undefined ? {} : { eventId: overrides.eventId }),
+        });
+    }
+    /** Signs and POSTs a delivery to the receiver. */
+    async deliver(event, overrides = {}) {
+        const delivery = this.sign(event, overrides);
+        const fetchImpl = this.options.fetch ?? globalThis.fetch;
+        const response = await fetchImpl(this.options.url, {
+            method: 'POST',
+            headers: delivery.headers,
+            body: delivery.body,
+        });
+        const text = await response.text();
+        let body = null;
+        if (text.length > 0) {
+            try {
+                body = JSON.parse(text);
+            }
+            catch {
+                body = text;
+            }
+        }
+        return { status: response.status, body };
+    }
+}
+//# sourceMappingURL=webhook-simulator.js.map

package/dist/esm/testing/webhook-simulator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook-simulator.js","sourceRoot":"","sources":["../../../src/testing/webhook-simulator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EACL,uBAAuB,EACvB,wBAAwB,EACxB,yBAAyB,EACzB,wBAAwB,EACxB,yBAAyB,GAC1B,MAAM,4BAA4B,CAAC;AA4BpC,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,IAAI,IAAI,KAAK,EAAE,CAAC;QACjE,MAAM,EAAE,GAAa,KAAyB,CAAC,EAAE,CAAC;QAClD,IAAI,OAAO,EAAE,KAAK,QAAQ;YAAE,OAAO,EAAE,CAAC;IACxC,CAAC;IACD,MAAM,IAAI,SAAS,CAAC,mDAAmD,CAAC,CAAC;AAC3E,CAAC;AAED,0BAA0B;AAC1B,MAAM,UAAU,mBAAmB,CAAC,KAAuB;IACzD,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC/C,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,gBAAgB,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAK,CAAC,CAAC,CAAC;IAEnF,MAAM,SAAS,GACb,KAAK,CAAC,SAAS;QACf,GAAG,yBAAyB,IAAI,UAAU,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC;aAC/D,MAAM,CAAC,yBAAyB,CAAC,SAAS,EAAE,UAAU,CAAC,EAAE,MAAM,CAAC;aAChE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;IAErB,OAAO;QACL,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,CAAC,uBAAuB,CAAC,EAAE,KAAK,CAAC,OAAO,IAAI,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC;YAClE,CAAC,wBAAwB,CAAC,EAAE,SAAS;YACrC,CAAC,wBAAwB,CAAC,EAAE,SAAS;SACtC;QACD,0EAA0E;QAC1E,qEAAqE;QACrE,kBAAkB;QAClB,IAAI,EAAE,KAAK,CAAC,YAAY,IAAI,UAAU;KACvC,CAAC;AACJ,CAAC;AA2BD,uEAAuE;AACvE,MAAM,oBAAoB,GAAG,IAAK,CAAC;AAEnC,MAAM,OAAO,gBAAgB;IAG3B,YAAY,OAAgC;QAC1C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;IAED,2CAA2C;IAC3C,IAAI,CAAC,KAAc,EAAE,YAAsC,EAAE;QAC3D,OAAO,mBAAmB,CAAC;YACzB,MAAM,EAAE,SAAS,CAAC,WAAW,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM;YACpD,KAAK;YACL,gBAAgB,EACd,SAAS,CAAC,gBAAgB;gBAC1B,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAK,CAAC,GAAG,CAAC,SAAS,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,CAAC;YAC1F,GAAG,CAAC,SAAS,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,SAAS,CAAC,YAAY,EAAE,CAAC;YACzF,GAAG,CAAC,SAAS,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,SAAS,CAAC,SAAS,EAAE,CAAC;YAChF,GAAG,CAAC,SAAS,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,EAAE,CAAC;SAC3E,CAAC,CAAC;IACL,CAAC;IAED,kDAAkD;IAClD,KAAK,CAAC,OAAO,CACX,KAAc,EACd,YAAsC,EAAE;QAExC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QAC7C,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;QAEzD,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE;YACjD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,IAAI,EAAE,QAAQ,CAAC,IAAI;SACpB,CAAC,CAAC;QAEH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnC,IAAI,IAAI,GAAY,IAAI,CAAC;QACzB,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpB,IAAI,CAAC;gBACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;YACrC,CAAC;YAAC,MAAM,CAAC;gBACP,IAAI,GAAG,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC;IAC3C,CAAC;CACF"}

package/dist/esm/transport.js

@@ -0,0 +1,177 @@
+/**
+ * The HTTP transport: one authenticated call, and what happens when it fails.
+ *
+ * Two things here are worth reading before changing anything.
+ *
+ * **Retries do not replace the integrator's outbox.** §7.1 is explicit that the
+ * durable retry path belongs to the application: it stores the report and an
+ * outbox row in one operation, and a worker re-delivers until CrowdSource
+ * accepts. The retries below only smooth over a blip inside a single delivery
+ * attempt — they are bounded, they only fire for the statuses §10.5 marks as
+ * "come back later", and when they give up the error they throw still says
+ * `retryable: true` so the outbox keeps its job.
+ *
+ * **A retry is only safe because the write is idempotent.** Every write this
+ * client makes carries an `Idempotency-Key` (Appendix D), so a request that was
+ * received but whose response was lost returns the same `reportId` on the next
+ * attempt rather than creating a second report. A write without one must not be
+ * retried, and `request` refuses to retry a mutation that has no key rather than
+ * trusting the caller to have thought about it.
+ */
+import { CrowdSourceApiError, CrowdSourceTransportError, apiErrorCodeForStatus, isCrowdSourceApiErrorCode, } from './errors.js';
+/** How long a single attempt may take before it is abandoned. */
+export const DEFAULT_TIMEOUT_MS = 10000;
+/** Attempts per call, including the first. */
+export const DEFAULT_MAX_ATTEMPTS = 3;
+/** The base of the exponential backoff between attempts. */
+const RETRY_BASE_DELAY_MS = 250;
+/** A cap so a `Retry-After` of an hour cannot hang a delivery worker. */
+const RETRY_DELAY_CEILING_MS = 5000;
+function parsedErrorBody(payload) {
+    if (typeof payload !== 'object' || payload === null || !('error' in payload))
+        return null;
+    const error = payload.error;
+    if (typeof error !== 'object' || error === null)
+        return null;
+    const record = { ...error };
+    if (typeof record.code !== 'string' || typeof record.message !== 'string')
+        return null;
+    const details = typeof record.details === 'object' && record.details !== null
+        ? record.details
+        : undefined;
+    return { code: record.code, message: record.message, details };
+}
+/** `Retry-After` in either of its two legal forms, in milliseconds. */
+function retryAfterMs(header) {
+    if (header === null)
+        return null;
+    const seconds = Number(header);
+    if (Number.isFinite(seconds) && seconds >= 0)
+        return seconds * 1000;
+    const date = Date.parse(header);
+    if (Number.isNaN(date))
+        return null;
+    return Math.max(0, date - Date.now());
+}
+/**
+ * Full jitter over an exponential base. Without jitter, every worker that hit
+ * the same 503 comes back at the same millisecond and reproduces it.
+ */
+function backoffMs(attempt) {
+    const ceiling = Math.min(RETRY_BASE_DELAY_MS * 2 ** (attempt - 1), RETRY_DELAY_CEILING_MS);
+    return Math.random() * ceiling;
+}
+function delay(ms, signal) {
+    return new Promise((resolve, reject) => {
+        const timer = setTimeout(() => {
+            signal?.removeEventListener('abort', onAbort);
+            resolve();
+        }, ms);
+        const onAbort = () => {
+            clearTimeout(timer);
+            reject(new CrowdSourceTransportError('The request was aborted.', { retryable: false }));
+        };
+        if (signal?.aborted === true) {
+            onAbort();
+            return;
+        }
+        signal?.addEventListener('abort', onAbort, { once: true });
+    });
+}
+export class Transport {
+    constructor(config) {
+        this.config = config;
+    }
+    async request(request) {
+        if (request.method !== 'GET' && request.idempotencyKey === undefined) {
+            throw new Error(`A ${request.method} to ${request.path} was made without an idempotency key. Appendix D requires one on every write.`);
+        }
+        let lastError = null;
+        for (let attempt = 1; attempt <= this.config.maxAttempts; attempt += 1) {
+            const outcome = await this.attempt(request);
+            if (outcome.ok)
+                return outcome.value;
+            lastError = outcome.error;
+            if (!outcome.error.retryable || attempt === this.config.maxAttempts)
+                break;
+            await delay(outcome.retryAfterMs ?? backoffMs(attempt), request.signal);
+        }
+        // Unreachable with `maxAttempts >= 1`; the loop either returns or assigns.
+        if (lastError === null) {
+            throw new CrowdSourceTransportError('The request was never attempted.', {
+                retryable: false,
+            });
+        }
+        throw lastError;
+    }
+    async attempt(request) {
+        const headers = {
+            accept: 'application/json',
+            // Resolved per ATTEMPT, not per call: a retry that outlives a short-lived
+            // token must carry the new one, and this is the only place that knows an
+            // attempt is starting.
+            authorization: `Bearer ${await this.config.bearerToken()}`,
+        };
+        if (request.body !== undefined)
+            headers['content-type'] = 'application/json';
+        if (request.idempotencyKey !== undefined) {
+            headers['idempotency-key'] = request.idempotencyKey;
+        }
+        let response;
+        try {
+            response = await this.config.fetch(`${this.config.baseUrl}${request.path}`, {
+                method: request.method,
+                headers,
+                body: request.body === undefined ? undefined : JSON.stringify(request.body),
+                signal: this.attemptSignal(request.signal),
+            });
+        }
+        catch (cause) {
+            const callerAborted = request.signal?.aborted === true;
+            return {
+                ok: false,
+                error: new CrowdSourceTransportError(callerAborted
+                    ? 'The request was aborted by the caller.'
+                    : `The request to ${request.path} did not complete.`, { cause, retryable: !callerAborted }),
+            };
+        }
+        if (response.ok) {
+            return { ok: true, value: (await this.readJson(response)) };
+        }
+        const payload = await this.readJson(response).catch(() => null);
+        const body = parsedErrorBody(payload);
+        const code = body !== null && isCrowdSourceApiErrorCode(body.code)
+            ? body.code
+            : apiErrorCodeForStatus(response.status);
+        return {
+            ok: false,
+            error: new CrowdSourceApiError({
+                status: response.status,
+                code,
+                message: body?.message ?? `CrowdSource answered ${response.status} for ${request.path}.`,
+                details: body?.details,
+            }),
+            retryAfterMs: retryAfterMs(response.headers.get('retry-after')) ?? undefined,
+        };
+    }
+    /** The caller's cancellation and this attempt's timeout, as one signal. */
+    attemptSignal(callerSignal) {
+        const timeout = AbortSignal.timeout(this.config.timeoutMs);
+        return callerSignal === undefined ? timeout : AbortSignal.any([callerSignal, timeout]);
+    }
+    async readJson(response) {
+        const text = await response.text();
+        if (text.length === 0)
+            return null;
+        try {
+            return JSON.parse(text);
+        }
+        catch (cause) {
+            throw new CrowdSourceTransportError('CrowdSource answered with a body that is not JSON.', {
+                cause,
+                retryable: false,
+            });
+        }
+    }
+}
+//# sourceMappingURL=transport.js.map

package/dist/esm/transport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport.js","sourceRoot":"","sources":["../../src/transport.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EACL,mBAAmB,EACnB,yBAAyB,EACzB,qBAAqB,EACrB,yBAAyB,GAC1B,MAAM,aAAa,CAAC;AAIrB,iEAAiE;AACjE,MAAM,CAAC,MAAM,kBAAkB,GAAG,KAAM,CAAC;AAEzC,8CAA8C;AAC9C,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC;AAEtC,4DAA4D;AAC5D,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAEhC,yEAAyE;AACzE,MAAM,sBAAsB,GAAG,IAAK,CAAC;AAkCrC,SAAS,eAAe,CAAC,OAAgB;IACvC,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,IAAI,CAAC,CAAC,OAAO,IAAI,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IAE1F,MAAM,KAAK,GAAa,OAA8B,CAAC,KAAK,CAAC;IAC7D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAE7D,MAAM,MAAM,GAA4B,EAAE,GAAG,KAAK,EAAE,CAAC;IACrD,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAEvF,MAAM,OAAO,GACX,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI;QAC3D,CAAC,CAAE,MAAM,CAAC,OAA+D;QACzE,CAAC,CAAC,SAAS,CAAC;IAEhB,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC;AACjE,CAAC;AAED,uEAAuE;AACvE,SAAS,YAAY,CAAC,MAAqB;IACzC,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAEjC,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IAC/B,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,IAAI,CAAC;QAAE,OAAO,OAAO,GAAG,IAAK,CAAC;IAErE,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAChC,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;AACxC,CAAC;AAED;;;GAGG;AACH,SAAS,SAAS,CAAC,OAAe;IAChC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,mBAAmB,GAAG,CAAC,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,EAAE,sBAAsB,CAAC,CAAC;IAC3F,OAAO,IAAI,CAAC,MAAM,EAAE,GAAG,OAAO,CAAC;AACjC,CAAC;AAED,SAAS,KAAK,CAAC,EAAU,EAAE,MAA+B;IACxD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC9C,OAAO,EAAE,CAAC;QACZ,CAAC,EAAE,EAAE,CAAC,CAAC;QACP,MAAM,OAAO,GAAG,GAAS,EAAE;YACzB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,CAAC,IAAI,yBAAyB,CAAC,0BAA0B,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;QAC1F,CAAC,CAAC;QACF,IAAI,MAAM,EAAE,OAAO,KAAK,IAAI,EAAE,CAAC;YAC7B,OAAO,EAAE,CAAC;YACV,OAAO;QACT,CAAC;QACD,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,OAAO,SAAS;IAGpB,YAAY,MAAuB;QACjC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,OAAO,CAAI,OAAyB;QACxC,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,IAAI,OAAO,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;YACrE,MAAM,IAAI,KAAK,CACb,KAAK,OAAO,CAAC,MAAM,OAAO,OAAO,CAAC,IAAI,+EAA+E,CACtH,CAAC;QACJ,CAAC;QAED,IAAI,SAAS,GAA2D,IAAI,CAAC;QAE7E,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;YACvE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAI,OAAO,CAAC,CAAC;YAC/C,IAAI,OAAO,CAAC,EAAE;gBAAE,OAAO,OAAO,CAAC,KAAK,CAAC;YAErC,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC;YAC1B,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,IAAI,OAAO,KAAK,IAAI,CAAC,MAAM,CAAC,WAAW;gBAAE,MAAM;YAE3E,MAAM,KAAK,CAAC,OAAO,CAAC,YAAY,IAAI,SAAS,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QAC1E,CAAC;QAED,2EAA2E;QAC3E,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;YACvB,MAAM,IAAI,yBAAyB,CAAC,kCAAkC,EAAE;gBACtE,SAAS,EAAE,KAAK;aACjB,CAAC,CAAC;QACL,CAAC;QACD,MAAM,SAAS,CAAC;IAClB,CAAC;IAEO,KAAK,CAAC,OAAO,CACnB,OAAyB;QASzB,MAAM,OAAO,GAA2B;YACtC,MAAM,EAAE,kBAAkB;YAC1B,0EAA0E;YAC1E,yEAAyE;YACzE,uBAAuB;YACvB,aAAa,EAAE,UAAU,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE;SAC3D,CAAC;QACF,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS;YAAE,OAAO,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;QAC7E,IAAI,OAAO,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;YACzC,OAAO,CAAC,iBAAiB,CAAC,GAAG,OAAO,CAAC,cAAc,CAAC;QACtD,CAAC;QAED,IAAI,QAAkB,CAAC;QACvB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,EAAE;gBAC1E,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,OAAO;gBACP,IAAI,EAAE,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC;gBAC3E,MAAM,EAAE,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC;aAC3C,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,MAAM,aAAa,GAAG,OAAO,CAAC,MAAM,EAAE,OAAO,KAAK,IAAI,CAAC;YACvD,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,IAAI,yBAAyB,CAClC,aAAa;oBACX,CAAC,CAAC,wCAAwC;oBAC1C,CAAC,CAAC,kBAAkB,OAAO,CAAC,IAAI,oBAAoB,EACtD,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,aAAa,EAAE,CACrC;aACF,CAAC;QACJ,CAAC;QAED,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;YAChB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAM,EAAE,CAAC;QACnE,CAAC;QAED,MAAM,OAAO,GAAY,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QACzE,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;QACtC,MAAM,IAAI,GACR,IAAI,KAAK,IAAI,IAAI,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC;YACnD,CAAC,CAAC,IAAI,CAAC,IAAI;YACX,CAAC,CAAC,qBAAqB,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAE7C,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,IAAI,mBAAmB,CAAC;gBAC7B,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,IAAI;gBACJ,OAAO,EAAE,IAAI,EAAE,OAAO,IAAI,wBAAwB,QAAQ,CAAC,MAAM,QAAQ,OAAO,CAAC,IAAI,GAAG;gBACxF,OAAO,EAAE,IAAI,EAAE,OAAO;aACvB,CAAC;YACF,YAAY,EAAE,YAAY,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,IAAI,SAAS;SAC7E,CAAC;IACJ,CAAC;IAED,2EAA2E;IACnE,aAAa,CAAC,YAAqC;QACzD,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC3D,OAAO,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC;IACzF,CAAC;IAEO,KAAK,CAAC,QAAQ,CAAC,QAAkB;QACvC,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACnC,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;QACrC,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,MAAM,IAAI,yBAAyB,CAAC,oDAAoD,EAAE;gBACxF,KAAK;gBACL,SAAS,EAAE,KAAK;aACjB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;CACF"}