@entrolytics/webhooks 3.0.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2025 Entrolytics <hey@entrolytics.click>
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/dist/index.d.ts

@@ -0,0 +1,50 @@
+/**
+ * Shared outbound webhook delivery used by BOTH the API and the worker so the SSRF guard, HMAC
+ * signing, retry schedule, and delivery state machine cannot drift between surfaces (JWE-03).
+ * Producer entry point is dispatchWebhookEvent; the worker drives durable retries via
+ * retryFailedDeliveries.
+ */
+export declare const WEBHOOK_EVENT_TYPES: readonly ['pageview.created', 'session.created', 'event.created', 'goal.completed', 'visitor.identified', 'revenue.recorded'];
+export declare const WEBHOOK_EVENT_WILDCARD = "*";
+export type WebhookEventType = (typeof WEBHOOK_EVENT_TYPES)[number];
+export type WebhookSubscriptionEventType = WebhookEventType | typeof WEBHOOK_EVENT_WILDCARD;
+export declare const MAX_WEBHOOK_ATTEMPTS: number;
+/**
+ * Validate a webhook target URL against the SSRF policy. In production: HTTPS only, no credentials,
+ * no localhost/0.0.0.0, and no literal-or-DNS-resolved private network address.
+ */
+export declare function assertWebhookTargetAllowed(rawUrl: string): Promise<URL>;
+/** Generate the HMAC-SHA256 signature header value for an outbound payload. */
+export declare function generateWebhookSignature(payload: string, secret: string): string;
+/** Verify an inbound webhook signature (for receivers / tests). */
+export declare function verifyWebhookSignature(payload: string, signature: string, secret: string, tolerance?: number): boolean;
+export interface WebhookSendResult {
+    success: boolean;
+    retryable: boolean;
+    statusCode?: number;
+    response?: string;
+    error?: string;
+}
+/**
+ * Send one signed webhook request through the SSRF guard with a bounded timeout. This is the ONLY
+ * outbound sender; both dispatch and retry route through it.
+ */
+export declare function sendWebhookRequest(url: string, payload: Record<string, unknown>, secret: string): Promise<WebhookSendResult>;
+/**
+ * Dispatch a webhook event to all subscribed, enabled endpoints. Creates a durable webhook_delivery
+ * row per target (so failures can be retried by the worker) and attempts immediate delivery. Call
+ * this from ingestion / domain events (JWE-02).
+ */
+export declare function dispatchWebhookEvent(eventType: WebhookEventType, data: Record<string, unknown>, websiteId?: string): Promise<void>;
+/**
+ * Drive due deliveries to a terminal state. Each row is CLAIMED atomically (status -> 'sending' via
+ * a conditional UPDATE) before the network call, so concurrent worker instances or overlapping
+ * ticks cannot double-send the same delivery (JWE-07). Idempotent and safe to run every minute.
+ */
+export declare function retryFailedDeliveries(batchSize?: number): Promise<void>;
+/**
+ * Send a SIGNED test event using the same envelope and sender as production dispatch, so
+ * signature-verifying receivers accept it (JWE-05).
+ */
+export declare function testWebhook(webhookId: string): Promise<WebhookSendResult>;
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAMA;;;;;GAKG;AAEH,eAAO,MAAM,mBAAmB,YAC9B,kBAAkB,EAClB,iBAAiB,EACjB,eAAe,EACf,gBAAgB,EAChB,oBAAoB,EACpB,kBAAkB,CACV,CAAA;AAEV,eAAO,MAAM,sBAAsB,MAAM,CAAA;AAGzC,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAA;AACnE,MAAM,MAAM,4BAA4B,GAAG,gBAAgB,GAAG,OAAO,sBAAsB,CAAA;AAI3F,eAAO,MAAM,oBAAoB,QAA0B,CAAA;AA0D3D;;;GAGG;AACH,wBAAsB,0BAA0B,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAwC7E;AAID,+EAA+E;AAC/E,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAKhF;AAED,mEAAmE;AACnE,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,SAAS,SAAM,GACd,OAAO,CAuBT;AAID,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,OAAO,CAAA;IAChB,SAAS,EAAE,OAAO,CAAA;IAClB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAED;;;GAGG;AACH,wBAAsB,kBAAkB,CACtC,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,iBAAiB,CAAC,CAoD5B;AA+CD;;;;GAIG;AACH,wBAAsB,oBAAoB,CACxC,SAAS,EAAE,gBAAgB,EAC3B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,IAAI,CAAC,CAkDf;AAID;;;;GAIG;AACH,wBAAsB,qBAAqB,CAAC,SAAS,SAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CA0F1E;AAID;;;GAGG;AACH,wBAAsB,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAoB/E"}

package/dist/index.js

@@ -0,0 +1,360 @@
+import crypto from 'node:crypto';
+import { lookup } from 'node:dns/promises';
+import { isIP } from 'node:net';
+import { and, db, eq, isNull, lt, or, sql, webhook, webhookDelivery } from '@entrolytics/db';
+/**
+ * Shared outbound webhook delivery used by BOTH the API and the worker so the SSRF guard, HMAC
+ * signing, retry schedule, and delivery state machine cannot drift between surfaces (JWE-03).
+ * Producer entry point is dispatchWebhookEvent; the worker drives durable retries via
+ * retryFailedDeliveries.
+ */
+export const WEBHOOK_EVENT_TYPES = [
+    'pageview.created',
+    'session.created',
+    'event.created',
+    'goal.completed',
+    'visitor.identified',
+    'revenue.recorded',
+];
+export const WEBHOOK_EVENT_WILDCARD = '*';
+// Exponential backoff schedule (1min, 5min, 15min). Total attempts = initial + 3.
+const RETRY_DELAYS = [60_000, 300_000, 900_000];
+export const MAX_WEBHOOK_ATTEMPTS = RETRY_DELAYS.length + 1;
+const WEBHOOK_TIMEOUT_MS = 30_000;
+function isRetryableStatusCode(statusCode) {
+    return statusCode >= 500 || [408, 409, 425, 429].includes(statusCode);
+}
+function getNextRetryAt(attempts, maxAttempts) {
+    if (attempts >= maxAttempts) {
+        return null;
+    }
+    const retryDelay = RETRY_DELAYS[Math.min(attempts - 1, RETRY_DELAYS.length - 1)];
+    return new Date(Date.now() + retryDelay);
+}
+// ---- SSRF guard ----------------------------------------------------------
+function isPrivateIpv4(address) {
+    const parts = address.split('.').map((part) => Number.parseInt(part, 10));
+    if (parts.length !== 4 || parts.some((part) => Number.isNaN(part) || part < 0 || part > 255)) {
+        return false;
+    }
+    const [a, b] = parts;
+    return (a === 0 ||
+        a === 10 ||
+        a === 127 ||
+        (a === 100 && b >= 64 && b <= 127) ||
+        (a === 169 && b === 254) ||
+        (a === 172 && b >= 16 && b <= 31) ||
+        (a === 192 && b === 168));
+}
+function isPrivateIpv6(address) {
+    const normalized = address.toLowerCase();
+    if (normalized === '::' || normalized === '::1')
+        return true;
+    if (normalized.startsWith('::ffff:')) {
+        return isPrivateIpv4(normalized.replace('::ffff:', ''));
+    }
+    return (normalized.startsWith('fc') ||
+        normalized.startsWith('fd') ||
+        normalized.startsWith('fe8') ||
+        normalized.startsWith('fe9') ||
+        normalized.startsWith('fea') ||
+        normalized.startsWith('feb'));
+}
+function isPrivateAddress(address) {
+    const version = isIP(address);
+    if (version === 4)
+        return isPrivateIpv4(address);
+    if (version === 6)
+        return isPrivateIpv6(address);
+    return false;
+}
+/**
+ * Validate a webhook target URL against the SSRF policy. In production: HTTPS only, no credentials,
+ * no localhost/0.0.0.0, and no literal-or-DNS-resolved private network address.
+ */
+export async function assertWebhookTargetAllowed(rawUrl) {
+    const parsed = new URL(rawUrl);
+    if (!['http:', 'https:'].includes(parsed.protocol)) {
+        throw new Error('Webhook URL must use HTTP or HTTPS');
+    }
+    if (parsed.username || parsed.password) {
+        throw new Error('Webhook URL must not include credentials');
+    }
+    const enforcePublicNetwork = process.env.NODE_ENV === 'production';
+    if (!enforcePublicNetwork) {
+        return parsed;
+    }
+    if (parsed.protocol !== 'https:') {
+        throw new Error('Webhook URL must use HTTPS in production');
+    }
+    const hostname = parsed.hostname.toLowerCase();
+    if (hostname === 'localhost' || hostname.endsWith('.localhost') || hostname === '0.0.0.0') {
+        throw new Error('Webhook URL hostname is not allowed in production');
+    }
+    const literalIpVersion = isIP(hostname);
+    if (literalIpVersion !== 0 && isPrivateAddress(hostname)) {
+        throw new Error('Webhook URL points to a private network address');
+    }
+    if (literalIpVersion === 0) {
+        const records = await lookup(hostname, { all: true, order: 'verbatim' });
+        if (records.length === 0) {
+            throw new Error('Webhook URL hostname did not resolve to any IP address');
+        }
+        if (records.some((record) => isPrivateAddress(record.address))) {
+            throw new Error('Webhook URL resolves to a private network address');
+        }
+    }
+    return parsed;
+}
+// ---- Signing -------------------------------------------------------------
+/** Generate the HMAC-SHA256 signature header value for an outbound payload. */
+export function generateWebhookSignature(payload, secret) {
+    const timestamp = Math.floor(Date.now() / 1000);
+    const signedPayload = `${timestamp}.${payload}`;
+    const signature = crypto.createHmac('sha256', secret).update(signedPayload).digest('hex');
+    return `t=${timestamp},v1=${signature}`;
+}
+/** Verify an inbound webhook signature (for receivers / tests). */
+export function verifyWebhookSignature(payload, signature, secret, tolerance = 300) {
+    try {
+        const parts = signature.split(',');
+        const timestampPart = parts.find((p) => p.startsWith('t='));
+        const signaturePart = parts.find((p) => p.startsWith('v1='));
+        if (!timestampPart || !signaturePart)
+            return false;
+        const timestamp = Number.parseInt(timestampPart.replace('t=', ''), 10);
+        const expectedSignature = signaturePart.replace('v1=', '');
+        const now = Math.floor(Date.now() / 1000);
+        if (Math.abs(now - timestamp) > tolerance)
+            return false;
+        const signedPayload = `${timestamp}.${payload}`;
+        const computedSignature = crypto
+            .createHmac('sha256', secret)
+            .update(signedPayload)
+            .digest('hex');
+        return crypto.timingSafeEqual(Buffer.from(expectedSignature), Buffer.from(computedSignature));
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Send one signed webhook request through the SSRF guard with a bounded timeout. This is the ONLY
+ * outbound sender; both dispatch and retry route through it.
+ */
+export async function sendWebhookRequest(url, payload, secret) {
+    const payloadString = JSON.stringify(payload);
+    const signature = generateWebhookSignature(payloadString, secret);
+    let targetUrl;
+    try {
+        targetUrl = await assertWebhookTargetAllowed(url);
+    }
+    catch (err) {
+        return {
+            error: err instanceof Error ? err.message : 'Invalid webhook target URL',
+            retryable: false,
+            success: false,
+        };
+    }
+    try {
+        const response = await fetch(targetUrl.toString(), {
+            body: payloadString,
+            headers: {
+                'Content-Type': 'application/json',
+                'User-Agent': 'Entrolytics-Webhook/1.0',
+                'X-Entrolytics-Signature': signature,
+            },
+            method: 'POST',
+            signal: AbortSignal.timeout(WEBHOOK_TIMEOUT_MS),
+        });
+        const responseText = await response.text().catch(() => '');
+        if (response.ok) {
+            return {
+                response: responseText.slice(0, 1000),
+                retryable: false,
+                statusCode: response.status,
+                success: true,
+            };
+        }
+        return {
+            error: `HTTP ${response.status}: ${response.statusText}`,
+            response: responseText.slice(0, 1000),
+            retryable: isRetryableStatusCode(response.status),
+            statusCode: response.status,
+            success: false,
+        };
+    }
+    catch (err) {
+        return {
+            error: err instanceof Error ? err.message : 'Unknown error',
+            retryable: true,
+            success: false,
+        };
+    }
+}
+// ---- Delivery store helpers ---------------------------------------------
+async function getEnabledWebhooksForEvent(eventType, websiteId) {
+    if (websiteId) {
+        return db
+            .select()
+            .from(webhook)
+            .where(and(eq(webhook.websiteId, websiteId), or(sql `${eventType} = ANY(${webhook.events})`, sql `${WEBHOOK_EVENT_WILDCARD} = ANY(${webhook.events})`), eq(webhook.enabled, true), isNull(webhook.deletedAt)));
+    }
+    return db
+        .select()
+        .from(webhook)
+        .where(and(eq(webhook.enabled, true), or(sql `${eventType} = ANY(${webhook.events})`, sql `${WEBHOOK_EVENT_WILDCARD} = ANY(${webhook.events})`), isNull(webhook.deletedAt)));
+}
+function isWebhookPayload(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+function getWebhookPayload(value) {
+    if (isWebhookPayload(value))
+        return value;
+    throw new Error('Webhook payload must be a JSON object');
+}
+// ---- Producer ------------------------------------------------------------
+/**
+ * Dispatch a webhook event to all subscribed, enabled endpoints. Creates a durable webhook_delivery
+ * row per target (so failures can be retried by the worker) and attempts immediate delivery. Call
+ * this from ingestion / domain events (JWE-02).
+ */
+export async function dispatchWebhookEvent(eventType, data, websiteId) {
+    const webhooks = await getEnabledWebhooksForEvent(eventType, websiteId);
+    if (webhooks.length === 0)
+        return;
+    const payload = {
+        created: new Date().toISOString(),
+        data,
+        id: crypto.randomUUID(),
+        type: eventType,
+    };
+    await Promise.all(webhooks.map(async (target) => {
+        const delivery = (await db
+            .insert(webhookDelivery)
+            .values({
+            attempts: 0,
+            eventType,
+            maxAttempts: MAX_WEBHOOK_ATTEMPTS,
+            payload,
+            status: 'pending',
+            webhookId: target.id,
+        })
+            .returning()).at(0);
+        if (!delivery)
+            return;
+        const result = await sendWebhookRequest(target.url, payload, target.secret);
+        const attempts = 1;
+        const maxAttempts = delivery.maxAttempts ?? MAX_WEBHOOK_ATTEMPTS;
+        const nextRetryAt = !result.success && result.retryable ? getNextRetryAt(attempts, maxAttempts) : null;
+        const shouldRetry = nextRetryAt !== null;
+        await db
+            .update(webhookDelivery)
+            .set({
+            attempts,
+            deliveredAt: result.success ? new Date() : null,
+            failedAt: result.success || shouldRetry ? null : new Date(),
+            nextRetryAt,
+            responseBody: result.response ?? (result.error ? `Error: ${result.error}` : null),
+            status: result.success ? 'success' : shouldRetry ? 'retrying' : 'failed',
+            statusCode: result.statusCode,
+        })
+            .where(eq(webhookDelivery.id, delivery.id));
+    }));
+}
+// ---- Retry pump (worker) -------------------------------------------------
+/**
+ * Drive due deliveries to a terminal state. Each row is CLAIMED atomically (status -> 'sending' via
+ * a conditional UPDATE) before the network call, so concurrent worker instances or overlapping
+ * ticks cannot double-send the same delivery (JWE-07). Idempotent and safe to run every minute.
+ */
+export async function retryFailedDeliveries(batchSize = 100) {
+    const now = new Date();
+    // Select candidates: pending/retrying and due.
+    const candidates = await db
+        .select({ id: webhookDelivery.id })
+        .from(webhookDelivery)
+        .where(and(or(eq(webhookDelivery.status, 'pending'), eq(webhookDelivery.status, 'retrying')), or(isNull(webhookDelivery.nextRetryAt), lt(webhookDelivery.nextRetryAt, now))))
+        .limit(batchSize);
+    for (const candidate of candidates) {
+        // Atomically claim: only one worker wins the transition out of pending/retrying.
+        const claimed = await db
+            .update(webhookDelivery)
+            .set({ status: 'sending' })
+            .where(and(eq(webhookDelivery.id, candidate.id), or(eq(webhookDelivery.status, 'pending'), eq(webhookDelivery.status, 'retrying'))))
+            .returning();
+        const delivery = claimed.at(0);
+        if (!delivery)
+            continue; // lost the race to another worker
+        const target = (await db.select().from(webhook).where(eq(webhook.id, delivery.webhookId)).limit(1)).at(0);
+        if (!target?.active || !target.enabled || target.deletedAt) {
+            await db
+                .update(webhookDelivery)
+                .set({
+                failedAt: new Date(),
+                nextRetryAt: null,
+                responseBody: 'Webhook disabled or deleted',
+                status: 'failed',
+            })
+                .where(eq(webhookDelivery.id, delivery.id));
+            continue;
+        }
+        const maxAttempts = delivery.maxAttempts ?? MAX_WEBHOOK_ATTEMPTS;
+        if ((delivery.attempts ?? 0) >= maxAttempts) {
+            await db
+                .update(webhookDelivery)
+                .set({
+                failedAt: new Date(),
+                nextRetryAt: null,
+                responseBody: 'Max retry attempts reached',
+                status: 'failed',
+            })
+                .where(eq(webhookDelivery.id, delivery.id));
+            continue;
+        }
+        const result = await sendWebhookRequest(target.url, getWebhookPayload(delivery.payload), target.secret);
+        const newAttempts = (delivery.attempts ?? 0) + 1;
+        const nextRetryAt = !result.success && result.retryable ? getNextRetryAt(newAttempts, maxAttempts) : null;
+        const shouldRetry = nextRetryAt !== null;
+        await db
+            .update(webhookDelivery)
+            .set({
+            attempts: newAttempts,
+            deliveredAt: result.success ? new Date() : null,
+            failedAt: result.success || shouldRetry ? null : new Date(),
+            nextRetryAt,
+            responseBody: result.success
+                ? (result.response ?? null)
+                : result.error
+                    ? `${result.error}\n\n${result.response ?? ''}`
+                    : (result.response ?? null),
+            status: result.success ? 'success' : shouldRetry ? 'retrying' : 'failed',
+            statusCode: result.statusCode,
+        })
+            .where(eq(webhookDelivery.id, delivery.id));
+    }
+}
+// ---- Test ----------------------------------------------------------------
+/**
+ * Send a SIGNED test event using the same envelope and sender as production dispatch, so
+ * signature-verifying receivers accept it (JWE-05).
+ */
+export async function testWebhook(webhookId) {
+    const target = (await db.select().from(webhook).where(eq(webhook.id, webhookId)).limit(1)).at(0);
+    if (!target) {
+        return { error: 'Webhook not found', retryable: false, success: false };
+    }
+    const testPayload = {
+        created: new Date().toISOString(),
+        data: {
+            message: 'This is a test webhook from Entrolytics',
+            webhookId: target.id,
+            webhookName: target.name,
+            websiteId: target.websiteId,
+        },
+        id: crypto.randomUUID(),
+        type: 'test',
+    };
+    return sendWebhookRequest(target.url, testPayload, target.secret);
+}
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAA;AAChC,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAA;AAC1C,OAAO,EAAE,IAAI,EAAE,MAAM,UAAU,CAAA;AAE/B,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAA;AAE5F;;;;;GAKG;AAEH,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,kBAAkB;IAClB,iBAAiB;IACjB,eAAe;IACf,gBAAgB;IAChB,oBAAoB;IACpB,kBAAkB;CACV,CAAA;AAEV,MAAM,CAAC,MAAM,sBAAsB,GAAG,GAAG,CAAA;AAMzC,kFAAkF;AAClF,MAAM,YAAY,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAA;AAC/C,MAAM,CAAC,MAAM,oBAAoB,GAAG,YAAY,CAAC,MAAM,GAAG,CAAC,CAAA;AAE3D,MAAM,kBAAkB,GAAG,MAAM,CAAA;AAEjC,SAAS,qBAAqB,CAAC,UAAkB;IAC/C,OAAO,UAAU,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAA;AACvE,CAAC;AAED,SAAS,cAAc,CAAC,QAAgB,EAAE,WAAmB;IAC3D,IAAI,QAAQ,IAAI,WAAW,EAAE,CAAC;QAC5B,OAAO,IAAI,CAAA;IACb,CAAC;IACD,MAAM,UAAU,GAAG,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,GAAG,CAAC,EAAE,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAA;IAChF,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,CAAC,CAAA;AAC1C,CAAC;AAED,6EAA6E;AAE7E,SAAS,aAAa,CAAC,OAAe;IACpC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAA;IACzE,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC;QAC7F,OAAO,KAAK,CAAA;IACd,CAAC;IACD,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,KAAK,CAAA;IACpB,OAAO,CACL,CAAC,KAAK,CAAC;QACP,CAAC,KAAK,EAAE;QACR,CAAC,KAAK,GAAG;QACT,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,GAAG,CAAC;QAClC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC;QACxB,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;QACjC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC,CACzB,CAAA;AACH,CAAC;AAED,SAAS,aAAa,CAAC,OAAe;IACpC,MAAM,UAAU,GAAG,OAAO,CAAC,WAAW,EAAE,CAAA;IACxC,IAAI,UAAU,KAAK,IAAI,IAAI,UAAU,KAAK,KAAK;QAAE,OAAO,IAAI,CAAA;IAC5D,IAAI,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QACrC,OAAO,aAAa,CAAC,UAAU,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAA;IACzD,CAAC;IACD,OAAO,CACL,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC;QAC3B,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC;QAC3B,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC;QAC5B,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC;QAC5B,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC;QAC5B,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC,CAC7B,CAAA;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,OAAe;IACvC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,CAAA;IAC7B,IAAI,OAAO,KAAK,CAAC;QAAE,OAAO,aAAa,CAAC,OAAO,CAAC,CAAA;IAChD,IAAI,OAAO,KAAK,CAAC;QAAE,OAAO,aAAa,CAAC,OAAO,CAAC,CAAA;IAChD,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,MAAc;IAC7D,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAA;IAE9B,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QACnD,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAA;IACvD,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAA;IAC7D,CAAC;IAED,MAAM,oBAAoB,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,CAAA;IAClE,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAC1B,OAAO,MAAM,CAAA;IACf,CAAC;IAED,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAA;IAC7D,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAA;IAC9C,IAAI,QAAQ,KAAK,WAAW,IAAI,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC1F,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAA;IACtE,CAAC;IAED,MAAM,gBAAgB,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAA;IACvC,IAAI,gBAAgB,KAAK,CAAC,IAAI,gBAAgB,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzD,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAA;IACpE,CAAC;IAED,IAAI,gBAAgB,KAAK,CAAC,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAA;QACxE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAA;QAC3E,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,gBAAgB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;YAC/D,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAA;QACtE,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAA;AACf,CAAC;AAED,6EAA6E;AAE7E,+EAA+E;AAC/E,MAAM,UAAU,wBAAwB,CAAC,OAAe,EAAE,MAAc;IACtE,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAA;IAC/C,MAAM,aAAa,GAAG,GAAG,SAAS,IAAI,OAAO,EAAE,CAAA;IAC/C,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IACzF,OAAO,KAAK,SAAS,OAAO,SAAS,EAAE,CAAA;AACzC,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,sBAAsB,CACpC,OAAe,EACf,SAAiB,EACjB,MAAc,EACd,SAAS,GAAG,GAAG;IAEf,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QAClC,MAAM,aAAa,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAA;QAC3D,MAAM,aAAa,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAA;QAC5D,IAAI,CAAC,aAAa,IAAI,CAAC,aAAa;YAAE,OAAO,KAAK,CAAA;QAElD,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAA;QACtE,MAAM,iBAAiB,GAAG,aAAa,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;QAE1D,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAA;QACzC,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,SAAS,CAAC,GAAG,SAAS;YAAE,OAAO,KAAK,CAAA;QAEvD,MAAM,aAAa,GAAG,GAAG,SAAS,IAAI,OAAO,EAAE,CAAA;QAC/C,MAAM,iBAAiB,GAAG,MAAM;aAC7B,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC;aAC5B,MAAM,CAAC,aAAa,CAAC;aACrB,MAAM,CAAC,KAAK,CAAC,CAAA;QAEhB,OAAO,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAA;IAC/F,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC;AAYD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,GAAW,EACX,OAAgC,EAChC,MAAc;IAEd,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAA;IAC7C,MAAM,SAAS,GAAG,wBAAwB,CAAC,aAAa,EAAE,MAAM,CAAC,CAAA;IAEjE,IAAI,SAAc,CAAA;IAClB,IAAI,CAAC;QACH,SAAS,GAAG,MAAM,0BAA0B,CAAC,GAAG,CAAC,CAAA;IACnD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,4BAA4B;YACxE,SAAS,EAAE,KAAK;YAChB,OAAO,EAAE,KAAK;SACf,CAAA;IACH,CAAC;IAED,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE;YACjD,IAAI,EAAE,aAAa;YACnB,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,YAAY,EAAE,yBAAyB;gBACvC,yBAAyB,EAAE,SAAS;aACrC;YACD,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,kBAAkB,CAAC;SAChD,CAAC,CAAA;QAEF,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAA;QAE1D,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;YAChB,OAAO;gBACL,QAAQ,EAAE,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC;gBACrC,SAAS,EAAE,KAAK;gBAChB,UAAU,EAAE,QAAQ,CAAC,MAAM;gBAC3B,OAAO,EAAE,IAAI;aACd,CAAA;QACH,CAAC;QAED,OAAO;YACL,KAAK,EAAE,QAAQ,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,UAAU,EAAE;YACxD,QAAQ,EAAE,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC;YACrC,SAAS,EAAE,qBAAqB,CAAC,QAAQ,CAAC,MAAM,CAAC;YACjD,UAAU,EAAE,QAAQ,CAAC,MAAM;YAC3B,OAAO,EAAE,KAAK;SACf,CAAA;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;YAC3D,SAAS,EAAE,IAAI;YACf,OAAO,EAAE,KAAK;SACf,CAAA;IACH,CAAC;AACH,CAAC;AAED,4EAA4E;AAE5E,KAAK,UAAU,0BAA0B,CAAC,SAAiB,EAAE,SAAkB;IAC7E,IAAI,SAAS,EAAE,CAAC;QACd,OAAO,EAAE;aACN,MAAM,EAAE;aACR,IAAI,CAAC,OAAO,CAAC;aACb,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC,EAChC,EAAE,CACA,GAAG,CAAA,GAAG,SAAS,UAAU,OAAO,CAAC,MAAM,GAAG,EAC1C,GAAG,CAAA,GAAG,sBAAsB,UAAU,OAAO,CAAC,MAAM,GAAG,CACxD,EACD,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,EACzB,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAC1B,CACF,CAAA;IACL,CAAC;IACD,OAAO,EAAE;SACN,MAAM,EAAE;SACR,IAAI,CAAC,OAAO,CAAC;SACb,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,EACzB,EAAE,CACA,GAAG,CAAA,GAAG,SAAS,UAAU,OAAO,CAAC,MAAM,GAAG,EAC1C,GAAG,CAAA,GAAG,sBAAsB,UAAU,OAAO,CAAC,MAAM,GAAG,CACxD,EACD,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAC1B,CACF,CAAA;AACL,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;AAC7E,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,IAAI,gBAAgB,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAA;IACzC,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAA;AAC1D,CAAC;AAED,6EAA6E;AAE7E;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,SAA2B,EAC3B,IAA6B,EAC7B,SAAkB;IAElB,MAAM,QAAQ,GAAG,MAAM,0BAA0B,CAAC,SAAS,EAAE,SAAS,CAAC,CAAA;IACvE,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAM;IAEjC,MAAM,OAAO,GAAG;QACd,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACjC,IAAI;QACJ,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE;QACvB,IAAI,EAAE,SAAS;KAChB,CAAA;IAED,MAAM,OAAO,CAAC,GAAG,CACf,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;QAC5B,MAAM,QAAQ,GAAG,CACf,MAAM,EAAE;aACL,MAAM,CAAC,eAAe,CAAC;aACvB,MAAM,CAAC;YACN,QAAQ,EAAE,CAAC;YACX,SAAS;YACT,WAAW,EAAE,oBAAoB;YACjC,OAAO;YACP,MAAM,EAAE,SAAS;YACjB,SAAS,EAAE,MAAM,CAAC,EAAE;SACrB,CAAC;aACD,SAAS,EAAE,CACf,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;QAEP,IAAI,CAAC,QAAQ;YAAE,OAAM;QAErB,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,MAAM,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,CAAA;QAC3E,MAAM,QAAQ,GAAG,CAAC,CAAA;QAClB,MAAM,WAAW,GAAG,QAAQ,CAAC,WAAW,IAAI,oBAAoB,CAAA;QAChE,MAAM,WAAW,GACf,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;QACpF,MAAM,WAAW,GAAG,WAAW,KAAK,IAAI,CAAA;QAExC,MAAM,EAAE;aACL,MAAM,CAAC,eAAe,CAAC;aACvB,GAAG,CAAC;YACH,QAAQ;YACR,WAAW,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI;YAC/C,QAAQ,EAAE,MAAM,CAAC,OAAO,IAAI,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE;YAC3D,WAAW;YACX,YAAY,EAAE,MAAM,CAAC,QAAQ,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;YACjF,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ;YACxE,UAAU,EAAE,MAAM,CAAC,UAAU;SAC9B,CAAC;aACD,KAAK,CAAC,EAAE,CAAC,eAAe,CAAC,EAAE,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAA;IAC/C,CAAC,CAAC,CACH,CAAA;AACH,CAAC;AAED,6EAA6E;AAE7E;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,SAAS,GAAG,GAAG;IACzD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAA;IAEtB,+CAA+C;IAC/C,MAAM,UAAU,GAAG,MAAM,EAAE;SACxB,MAAM,CAAC,EAAE,EAAE,EAAE,eAAe,CAAC,EAAE,EAAE,CAAC;SAClC,IAAI,CAAC,eAAe,CAAC;SACrB,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,EAAE,CAAC,eAAe,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,EACjF,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,CAC9E,CACF;SACA,KAAK,CAAC,SAAS,CAAC,CAAA;IAEnB,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,iFAAiF;QACjF,MAAM,OAAO,GAAG,MAAM,EAAE;aACrB,MAAM,CAAC,eAAe,CAAC;aACvB,GAAG,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;aAC1B,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,eAAe,CAAC,EAAE,EAAE,SAAS,CAAC,EAAE,CAAC,EACpC,EAAE,CAAC,EAAE,CAAC,eAAe,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAClF,CACF;aACA,SAAS,EAAE,CAAA;QAEd,MAAM,QAAQ,GAAG,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;QAC9B,IAAI,CAAC,QAAQ;YAAE,SAAQ,CAAC,kCAAkC;QAE1D,MAAM,MAAM,GAAG,CACb,MAAM,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CACnF,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;QAEP,IAAI,CAAC,MAAM,EAAE,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;YAC3D,MAAM,EAAE;iBACL,MAAM,CAAC,eAAe,CAAC;iBACvB,GAAG,CAAC;gBACH,QAAQ,EAAE,IAAI,IAAI,EAAE;gBACpB,WAAW,EAAE,IAAI;gBACjB,YAAY,EAAE,6BAA6B;gBAC3C,MAAM,EAAE,QAAQ;aACjB,CAAC;iBACD,KAAK,CAAC,EAAE,CAAC,eAAe,CAAC,EAAE,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAA;YAC7C,SAAQ;QACV,CAAC;QAED,MAAM,WAAW,GAAG,QAAQ,CAAC,WAAW,IAAI,oBAAoB,CAAA;QAChE,IAAI,CAAC,QAAQ,CAAC,QAAQ,IAAI,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC;YAC5C,MAAM,EAAE;iBACL,MAAM,CAAC,eAAe,CAAC;iBACvB,GAAG,CAAC;gBACH,QAAQ,EAAE,IAAI,IAAI,EAAE;gBACpB,WAAW,EAAE,IAAI;gBACjB,YAAY,EAAE,4BAA4B;gBAC1C,MAAM,EAAE,QAAQ;aACjB,CAAC;iBACD,KAAK,CAAC,EAAE,CAAC,eAAe,CAAC,EAAE,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAA;YAC7C,SAAQ;QACV,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,kBAAkB,CACrC,MAAM,CAAC,GAAG,EACV,iBAAiB,CAAC,QAAQ,CAAC,OAAO,CAAC,EACnC,MAAM,CAAC,MAAM,CACd,CAAA;QAED,MAAM,WAAW,GAAG,CAAC,QAAQ,CAAC,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,CAAA;QAChD,MAAM,WAAW,GACf,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;QACvF,MAAM,WAAW,GAAG,WAAW,KAAK,IAAI,CAAA;QAExC,MAAM,EAAE;aACL,MAAM,CAAC,eAAe,CAAC;aACvB,GAAG,CAAC;YACH,QAAQ,EAAE,WAAW;YACrB,WAAW,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI;YAC/C,QAAQ,EAAE,MAAM,CAAC,OAAO,IAAI,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE;YAC3D,WAAW;YACX,YAAY,EAAE,MAAM,CAAC,OAAO;gBAC1B,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,IAAI,IAAI,CAAC;gBAC3B,CAAC,CAAC,MAAM,CAAC,KAAK;oBACZ,CAAC,CAAC,GAAG,MAAM,CAAC,KAAK,OAAO,MAAM,CAAC,QAAQ,IAAI,EAAE,EAAE;oBAC/C,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,IAAI,IAAI,CAAC;YAC/B,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ;YACxE,UAAU,EAAE,MAAM,CAAC,UAAU;SAC9B,CAAC;aACD,KAAK,CAAC,EAAE,CAAC,eAAe,CAAC,EAAE,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAA;IAC/C,CAAC;AACH,CAAC;AAED,6EAA6E;AAE7E;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,SAAiB;IACjD,MAAM,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;IAEhG,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,EAAE,KAAK,EAAE,mBAAmB,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,CAAA;IACzE,CAAC;IAED,MAAM,WAAW,GAAG;QAClB,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACjC,IAAI,EAAE;YACJ,OAAO,EAAE,yCAAyC;YAClD,SAAS,EAAE,MAAM,CAAC,EAAE;YACpB,WAAW,EAAE,MAAM,CAAC,IAAI;YACxB,SAAS,EAAE,MAAM,CAAC,SAAS;SAC5B;QACD,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE;QACvB,IAAI,EAAE,MAAM;KACb,CAAA;IAED,OAAO,kBAAkB,CAAC,MAAM,CAAC,GAAG,EAAE,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,CAAA;AACnE,CAAC"}

package/package.json

@@ -0,0 +1,34 @@
+{
+  "name": "@entrolytics/webhooks",
+  "version": "3.0.0",
+  "description": "Shared outbound webhook delivery (SSRF-guarded sender, HMAC signing, retry state machine) for Entrolytics",
+  "files": [
+    "dist",
+    "!dist/*.tsbuildinfo",
+    "package.json"
+  ],
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    }
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "dependencies": {
+    "@entrolytics/db": "^3.0.0",
+    "drizzle-orm": "rc5"
+  },
+  "devDependencies": {
+    "@types/node": "^26.5.0",
+    "typescript": "next"
+  },
+  "scripts": {
+    "build": "tsc",
+    "check-types": "tsc --noEmit"
+  }
+}