@evalops/maestro 0.10.8 → 0.10.10

package/dist/webhooks/delivery.js.map

@@ -1 +1 @@
-{"version":3,"file":"delivery.js","sourceRoot":"","sources":["../../src/webhooks/delivery.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AAClE,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AACvD,OAAO,EACN,gBAAgB,EAChB,aAAa,EACb,iBAAiB,GACjB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAClE,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,8CAA8C;AAC9C,MAAM,WAAW,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;AAExE,MAAM,MAAM,GAAG,YAAY,CAAC,mBAAmB,CAAC,CAAC;AA2BjD,MAAM,UAAU,2BAA2B,CAC1C,SAAkB;IAElB,MAAM,OAAO,GAA2B;QACvC,cAAc,EAAE,kBAAkB;QAClC,YAAY,EAAE,sBAAsB;QACpC,cAAc,EAAE,MAAM,CAAC,UAAU,EAAE;KACnC,CAAC;IAEF,IAAI,SAAS,EAAE,CAAC;QACf,OAAO,CAAC,sBAAsB,CAAC,GAAG,SAAS,CAAC;QAC5C,OAAO,CAAC,qBAAqB,CAAC,GAAG,SAAS,CAAC;IAC5C,CAAC;IAED,OAAO,OAAO,CAAC;AAChB,CAAC;AAED,+EAA+E;AAC/E,eAAe;AACf,+EAA+E;AAE/E,gFAAgF;AAChF,MAAM,UAAU,WAAW,CAC1B,OAAe,EACf,MAAc,EACd,SAAkB;IAElB,MAAM,EAAE,GAAG,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IACtD,MAAM,aAAa,GAAG,GAAG,EAAE,IAAI,OAAO,EAAE,CAAC;IAEzC,MAAM,SAAS,GAAG,MAAM;SACtB,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC;SAC5B,MAAM,CAAC,aAAa,CAAC;SACrB,MAAM,CAAC,KAAK,CAAC,CAAC;IAEhB,OAAO;QACN,SAAS,EAAE,KAAK,EAAE,OAAO,SAAS,EAAE;QACpC,SAAS,EAAE,EAAE;KACb,CAAC;AACH,CAAC;AAED,MAAM,UAAU,eAAe,CAC9B,OAAe,EACf,SAAiB,EACjB,MAAc,EACd,gBAAgB,GAAG,GAAG;IAEtB,uCAAuC;IACvC,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACnC,MAAM,aAAa,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;IAC5D,MAAM,aAAa,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;IAE7D,IAAI,CAAC,aAAa,IAAI,CAAC,aAAa,EAAE,CAAC;QACtC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC;IAC5D,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC9D,MAAM,WAAW,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAE3C,IAAI,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;QAC7B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC;IACrD,CAAC;IAED,4BAA4B;IAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC1C,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,SAAS,CAAC,GAAG,gBAAgB,EAAE,CAAC;QAClD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,6BAA6B,EAAE,CAAC;IAC/D,CAAC;IAED,6BAA6B;IAC7B,MAAM,aAAa,GAAG,GAAG,SAAS,IAAI,OAAO,EAAE,CAAC;IAChD,MAAM,QAAQ,GAAG,MAAM;SACrB,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC;SAC5B,MAAM,CAAC,aAAa,CAAC;SACrB,MAAM,CAAC,KAAK,CAAC,CAAC;IAEhB,yBAAyB;IACzB,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;IACpD,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAEjD,IAAI,WAAW,CAAC,MAAM,KAAK,WAAW,CAAC,MAAM,EAAE,CAAC;QAC/C,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAC;IAC7D,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,CAAC;QACvD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC;IACtD,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACxB,CAAC;AAED,+EAA+E;AAC/E,gBAAgB;AAChB,+EAA+E;AAE/E,KAAK,UAAU,WAAW,CACzB,GAAW,EACX,OAAe,EACf,SAAkB,EAClB,SAAS,GAAG,MAAM;IAElB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,OAAO,GAAG,2BAA2B,CAAC,SAAS,CAAC,CAAC;IAEvD,IAAI,CAAC;QACJ,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;QAEhE,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YACjC,MAAM,EAAE,MAAM;YACd,OAAO;YACP,IAAI,EAAE,OAAO;YACb,MAAM,EAAE,UAAU,CAAC,MAAM;SACzB,CAAC,CAAC;QAEH,YAAY,CAAC,OAAO,CAAC,CAAC;QAEtB,MAAM,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QAE9C,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,OAAO;gBACN,OAAO,EAAE,IAAI;gBACb,UAAU,EAAE,QAAQ,CAAC,MAAM;gBAC3B,cAAc;aACd,CAAC;QACH,CAAC;QAED,OAAO;YACN,OAAO,EAAE,KAAK;YACd,UAAU,EAAE,QAAQ,CAAC,MAAM;YAC3B,cAAc;YACd,KAAK,EAAE,QAAQ,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,UAAU,EAAE;SACxD,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QAE9C,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YAC3D,OAAO;gBACN,OAAO,EAAE,KAAK;gBACd,cAAc;gBACd,KAAK,EAAE,iBAAiB;aACxB,CAAC;QACH,CAAC;QAED,OAAO;YACN,OAAO,EAAE,KAAK;YACd,cAAc;YACd,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;SAC/D,CAAC;IACH,CAAC;AACF,CAAC;AAED,+EAA+E;AAC/E,sBAAsB;AACtB,+EAA+E;AAE/E,MAAM,OAAO,GAAG,mBAAmB,CAAC;AACpC,MAAM,gBAAgB,GAAG,MAAM,CAAC,CAAC,yBAAyB;AAC1D,MAAM,eAAe,GAAG,MAAM,CAAC,CAAC,yBAAyB;AACzD,IAAI,iBAAiB,GAAG,KAAK,CAAC;AAE9B,KAAK,UAAU,cAAc;IAC5B,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC;QACtB,OAAO,IAAI,CAAC,CAAC,mCAAmC;IACjD,CAAC;IAED,IAAI,CAAC;QACJ,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;QACnB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,gBAAgB,CAAC,CAAC;QAE7D,2CAA2C;QAC3C,MAAM,EAAE;aACN,MAAM,CAAC,gBAAgB,CAAC;aACxB,MAAM,CAAC;YACP,EAAE,EAAE,OAAO;YACX,QAAQ,EAAE,WAAW;YACrB,UAAU,EAAE,GAAG;YACf,SAAS;SACT,CAAC;aACD,kBAAkB,CAAC;YACnB,MAAM,EAAE,gBAAgB,CAAC,EAAE;YAC3B,GAAG,EAAE;gBACJ,QAAQ,EAAE,WAAW;gBACrB,UAAU,EAAE,GAAG;gBACf,SAAS;aACT;YACD,uDAAuD;YACvD,QAAQ,EAAE,EAAE,CACX,EAAE,CAAC,gBAAgB,CAAC,SAAS,EAAE,GAAG,CAAC,EACnC,EAAE,CAAC,gBAAgB,CAAC,QAAQ,EAAE,WAAW,CAAC,CAC1C;SACD,CAAC,CAAC;QAEJ,2BAA2B;QAC3B,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,EAAE;aACrB,MAAM,EAAE;aACR,IAAI,CAAC,gBAAgB,CAAC;aACtB,KAAK,CAAC,EAAE,CAAC,gBAAgB,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;aACvC,KAAK,CAAC,CAAC,CAAC,CAAC;QAEX,OAAO,IAAI,EAAE,QAAQ,KAAK,WAAW,CAAC;IACvC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,CAAC,KAAK,CACX,wBAAwB,EACxB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAC1C,CAAC;QACF,OAAO,KAAK,CAAC;IACd,CAAC;AACF,CAAC;AAED,KAAK,UAAU,SAAS;IACvB,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC;QACtB,OAAO,IAAI,CAAC;IACb,CAAC;IAED,IAAI,CAAC;QACJ,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;QACnB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,gBAAgB,CAAC,CAAC;QAE7D,MAAM,MAAM,GAAG,MAAM,EAAE;aACrB,MAAM,CAAC,gBAAgB,CAAC;aACxB,GAAG,CAAC,EAAE,SAAS,EAAE,CAAC;aAClB,KAAK,CACL,GAAG,CACF,EAAE,CAAC,gBAAgB,CAAC,EAAE,EAAE,OAAO,CAAC,EAChC,EAAE,CAAC,gBAAgB,CAAC,QAAQ,EAAE,WAAW,CAAC,CAC1C,CACD;aACA,SAAS,CAAC,EAAE,EAAE,EAAE,gBAAgB,CAAC,EAAE,EAAE,CAAC,CAAC;QAEzC,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;IAC1B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,CAAC,KAAK,CACX,sBAAsB,EACtB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAC1C,CAAC;QACF,OAAO,KAAK,CAAC;IACd,CAAC;AACF,CAAC;AAED,KAAK,UAAU,WAAW;IACzB,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC;QACtB,OAAO;IACR,CAAC;IAED,IAAI,CAAC;QACJ,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;QACnB,MAAM,EAAE;aACN,MAAM,CAAC,gBAAgB,CAAC;aACxB,KAAK,CACL,GAAG,CACF,EAAE,CAAC,gBAAgB,CAAC,EAAE,EAAE,OAAO,CAAC,EAChC,EAAE,CAAC,gBAAgB,CAAC,QAAQ,EAAE,WAAW,CAAC,CAC1C,CACD,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,CAAC,KAAK,CACX,wBAAwB,EACxB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAC1C,CAAC;IACH,CAAC;AACF,CAAC;AAED,+EAA+E;AAC/E,4BAA4B;AAC5B,+EAA+E;AAE/E,SAAS,0BAA0B,CAClC,OAAe,EACf,MAAM,GAAG,IAAI,EACb,KAAK,GAAG,OAAO;IAEf,uCAAuC;IACvC,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,CAAC;IAC3D,+DAA+D;IAC/D,MAAM,MAAM,GAAG,WAAW,GAAG,CAAC,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IACnD,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;AAC5C,CAAC;AAED,+EAA+E;AAC/E,mBAAmB;AACnB,+EAA+E;AAE/E,6EAA6E;AAC7E,MAAM,CAAC,KAAK,UAAU,YAAY,CACjC,OAA+B;IAE/B,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC;QACtB,MAAM,CAAC,IAAI,CAAC,sDAAsD,CAAC,CAAC;QACpE,sDAAsD;QACtD,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAChD,wBAAwB;QACxB,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa;YACtC,CAAC,CAAC,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC,SAAS;YACvD,CAAC,CAAC,SAAS,CAAC;QAEb,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;QAClE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACrB,MAAM,CAAC,KAAK,CAAC,mCAAmC,EAAE,SAAS,EAAE;gBAC5D,GAAG,EAAE,OAAO,CAAC,GAAG;gBAChB,KAAK,EAAE,MAAM,CAAC,KAAK;aACnB,CAAC,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC;IACb,CAAC;IAED,IAAI,CAAC;QACJ,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;QAEnB,gEAAgE;QAChE,+DAA+D;QAC/D,MAAM,CAAC,QAAQ,CAAC,GAAG,MAAM,EAAE;aACzB,MAAM,CAAC,iBAAiB,CAAC;aACzB,MAAM,CAAC;YACP,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,6DAA6D;YAC7D,SAAS,EAAE,IAAI;YACf,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,CAAC;YACrC,WAAW,EAAE,IAAI,IAAI,EAAE,EAAE,0BAA0B;SACnD,CAAC;aACD,SAAS,CAAC,EAAE,EAAE,EAAE,iBAAiB,CAAC,EAAE,EAAE,CAAC,CAAC;QAE1C,IAAI,CAAC,QAAQ,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,+CAA+C,EAAE,SAAS,EAAE;gBACxE,GAAG,EAAE,OAAO,CAAC,GAAG;aAChB,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACb,CAAC;QAED,MAAM,CAAC,KAAK,CAAC,gBAAgB,EAAE;YAC9B,EAAE,EAAE,QAAQ,CAAC,EAAE;YACf,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK;SAC5B,CAAC,CAAC;QAEH,OAAO,QAAQ,CAAC,EAAE,CAAC;IACpB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,CAAC,KAAK,CACX,yBAAyB,EACzB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,EAC1C,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CACpB,CAAC;QACF,OAAO,IAAI,CAAC;IACb,CAAC;AACF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,SAAS,GAAG,EAAE;IACvD,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC;QACtB,OAAO,CAAC,CAAC;IACV,CAAC;IACD,IAAI,iBAAiB,EAAE,CAAC;QACvB,OAAO,CAAC,CAAC;IACV,CAAC;IACD,IAAI,CAAC;QACJ,iBAAiB,GAAG,IAAI,CAAC;QAEzB,sCAAsC;QACtC,MAAM,OAAO,GAAG,MAAM,cAAc,EAAE,CAAC;QACvC,IAAI,CAAC,OAAO,EAAE,CAAC;YACd,MAAM,CAAC,KAAK,CAAC,mDAAmD,CAAC,CAAC;YAClE,OAAO,CAAC,CAAC;QACV,CAAC;QAED,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;QACnB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QAEvB,kDAAkD;QAClD,MAAM,OAAO,GAAG,MAAM,EAAE;aACtB,MAAM,EAAE;aACR,IAAI,CAAC,iBAAiB,CAAC;aACvB,KAAK,CACL,GAAG,CACF,EAAE,CACD,EAAE,CAAC,iBAAiB,CAAC,MAAM,EAAE,SAAS,CAAC,EACvC,EAAE,CAAC,iBAAiB,CAAC,MAAM,EAAE,UAAU,CAAC,CACxC,EACD,GAAG,CAAC,iBAAiB,CAAC,WAAW,EAAE,GAAG,CAAC,EACvC,EAAE,CAAC,iBAAiB,CAAC,QAAQ,EAAE,iBAAiB,CAAC,WAAW,CAAC,CAC7D,CACD;aACA,KAAK,CAAC,SAAS,CAAC,CAAC;QAEnB,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,CAAC,CAAC;QACV,CAAC;QAED,IAAI,SAAS,GAAG,CAAC,CAAC;QAElB,KAAK,MAAM,QAAQ,IAAI,OAAO,EAAE,CAAC;YAChC,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAEjD,6CAA6C;YAC7C,IAAI,SAA6B,CAAC;YAClC,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;gBACpB,+BAA+B;gBAC/B,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE;qBACpB,MAAM,CAAC,EAAE,QAAQ,EAAE,aAAa,CAAC,QAAQ,EAAE,CAAC;qBAC5C,IAAI,CAAC,aAAa,CAAC;qBACnB,KAAK,CAAC,EAAE,CAAC,aAAa,CAAC,EAAE,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;qBAC3C,KAAK,CAAC,CAAC,CAAC,CAAC;gBAEX,gDAAgD;gBAChD,MAAM,iBAAiB,GAAG,kBAAkB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;gBAC5D,IAAI,iBAAiB,EAAE,oBAAoB,EAAE,CAAC;oBAC7C,SAAS,GAAG,WAAW,CACtB,OAAO,EACP,iBAAiB,CAAC,oBAAoB,CACtC,CAAC,SAAS,CAAC;gBACb,CAAC;YACF,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,QAAQ,CAAC,GAAG,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;YAEnE,MAAM,WAAW,GAAG,QAAQ,CAAC,QAAQ,GAAG,CAAC,CAAC;YAE1C,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,oBAAoB;gBACpB,MAAM,EAAE;qBACN,MAAM,CAAC,iBAAiB,CAAC;qBACzB,GAAG,CAAC;oBACJ,MAAM,EAAE,WAAW;oBACnB,QAAQ,EAAE,WAAW;oBACrB,cAAc,EAAE,MAAM,CAAC,UAAU;oBACjC,kBAAkB,EAAE,MAAM,CAAC,cAAc;oBACzC,WAAW,EAAE,IAAI,IAAI,EAAE;iBACvB,CAAC;qBACD,KAAK,CAAC,EAAE,CAAC,iBAAiB,CAAC,EAAE,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;gBAE/C,MAAM,CAAC,IAAI,CAAC,mBAAmB,EAAE;oBAChC,EAAE,EAAE,QAAQ,CAAC,EAAE;oBACf,GAAG,EAAE,QAAQ,CAAC,GAAG;oBACjB,QAAQ,EAAE,WAAW;oBACrB,cAAc,EAAE,MAAM,CAAC,cAAc;iBACrC,CAAC,CAAC;YACJ,CAAC;iBAAM,IAAI,WAAW,IAAI,QAAQ,CAAC,WAAW,EAAE,CAAC;gBAChD,uCAAuC;gBACvC,MAAM,EAAE;qBACN,MAAM,CAAC,iBAAiB,CAAC;qBACzB,GAAG,CAAC;oBACJ,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,WAAW;oBACrB,cAAc,EAAE,MAAM,CAAC,UAAU;oBACjC,kBAAkB,EAAE,MAAM,CAAC,cAAc;oBACzC,SAAS,EAAE,MAAM,CAAC,KAAK;iBACvB,CAAC;qBACD,KAAK,CAAC,EAAE,CAAC,iBAAiB,CAAC,EAAE,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;gBAE/C,MAAM,CAAC,KAAK,CAAC,qCAAqC,EAAE,SAAS,EAAE;oBAC9D,EAAE,EAAE,QAAQ,CAAC,EAAE;oBACf,GAAG,EAAE,QAAQ,CAAC,GAAG;oBACjB,QAAQ,EAAE,WAAW;oBACrB,KAAK,EAAE,MAAM,CAAC,KAAK;iBACnB,CAAC,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACP,mDAAmD;gBACnD,MAAM,SAAS,GAAG,0BAA0B,CAAC,WAAW,CAAC,CAAC;gBAC1D,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,CAAC;gBAEnD,MAAM,EAAE;qBACN,MAAM,CAAC,iBAAiB,CAAC;qBACzB,GAAG,CAAC;oBACJ,MAAM,EAAE,UAAU;oBAClB,QAAQ,EAAE,WAAW;oBACrB,cAAc,EAAE,MAAM,CAAC,UAAU;oBACjC,kBAAkB,EAAE,MAAM,CAAC,cAAc;oBACzC,SAAS,EAAE,MAAM,CAAC,KAAK;oBACvB,WAAW,EAAE,SAAS;iBACtB,CAAC;qBACD,KAAK,CAAC,EAAE,CAAC,iBAAiB,CAAC,EAAE,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;gBAE/C,MAAM,CAAC,IAAI,CAAC,2CAA2C,EAAE;oBACxD,EAAE,EAAE,QAAQ,CAAC,EAAE;oBACf,GAAG,EAAE,QAAQ,CAAC,GAAG;oBACjB,QAAQ,EAAE,WAAW;oBACrB,WAAW,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG;oBAC/C,KAAK,EAAE,MAAM,CAAC,KAAK;iBACnB,CAAC,CAAC;YACJ,CAAC;YAED,SAAS,EAAE,CAAC;YAEZ,+CAA+C;YAC/C,IAAI,SAAS,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;gBACzB,MAAM,SAAS,EAAE,CAAC;YACnB,CAAC;QACF,CAAC;QAED,OAAO,SAAS,CAAC;IAClB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,CAAC,KAAK,CACX,iCAAiC,EACjC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAC1C,CAAC;QACF,OAAO,CAAC,CAAC;IACV,CAAC;YAAS,CAAC;QACV,iBAAiB,GAAG,KAAK,CAAC;IAC3B,CAAC;AACF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,aAAa,GAAG,CAAC;IAC1D,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC;QACtB,OAAO,CAAC,CAAC;IACV,CAAC;IAED,IAAI,CAAC;QACJ,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;QACnB,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,aAAa,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAE1E,MAAM,MAAM,GAAG,MAAM,EAAE;aACrB,MAAM,CAAC,iBAAiB,CAAC;aACzB,KAAK,CACL,GAAG,CACF,EAAE,CACD,EAAE,CAAC,iBAAiB,CAAC,MAAM,EAAE,WAAW,CAAC,EACzC,EAAE,CAAC,iBAAiB,CAAC,MAAM,EAAE,QAAQ,CAAC,CACtC,EACD,GAAG,CAAC,iBAAiB,CAAC,SAAS,EAAE,MAAM,CAAC,CACxC,CACD;aACA,SAAS,CAAC,EAAE,EAAE,EAAE,iBAAiB,CAAC,EAAE,EAAE,CAAC,CAAC;QAE1C,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,CAAC,IAAI,CAAC,mCAAmC,EAAE;gBAChD,KAAK,EAAE,MAAM,CAAC,MAAM;gBACpB,aAAa;aACb,CAAC,CAAC;QACJ,CAAC;QAED,OAAO,MAAM,CAAC,MAAM,CAAC;IACtB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,CAAC,KAAK,CACX,iCAAiC,EACjC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAC1C,CAAC;QACF,OAAO,CAAC,CAAC;IACV,CAAC;AACF,CAAC;AAED,+EAA+E;AAC/E,4BAA4B;AAC5B,+EAA+E;AAE/E,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACtC,KAAa,EACb,KAKC;IAED,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC;QACtB,MAAM,CAAC,IAAI,CAAC,+CAA+C,CAAC,CAAC;QAC7D,OAAO;IACR,CAAC;IAED,IAAI,CAAC;QACJ,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;QAEnB,2DAA2D;QAC3D,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE;aACpB,MAAM,CAAC,EAAE,QAAQ,EAAE,aAAa,CAAC,QAAQ,EAAE,CAAC;aAC5C,IAAI,CAAC,aAAa,CAAC;aACnB,KAAK,CAAC,EAAE,CAAC,aAAa,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;aAClC,KAAK,CAAC,CAAC,CAAC,CAAC;QAEX,8CAA8C;QAC9C,MAAM,iBAAiB,GAAG,kBAAkB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAE5D,IAAI,CAAC,iBAAiB,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC;YAC/C,OAAO,CAAC,yBAAyB;QAClC,CAAC;QAED,MAAM,OAAO,GAAmB;YAC/B,KAAK,EAAE,SAAS,KAAK,CAAC,IAAI,EAAE;YAC5B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,IAAI,EAAE;gBACL,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,GAAG,KAAK,CAAC,QAAQ;aACjB;SACD,CAAC;QAEF,wCAAwC;QACxC,KAAK,MAAM,GAAG,IAAI,iBAAiB,CAAC,aAAa,EAAE,CAAC;YACnD,MAAM,YAAY,CAAC;gBAClB,KAAK;gBACL,GAAG;gBACH,OAAO;gBACP,aAAa,EAAE,iBAAiB,CAAC,oBAAoB;aACrD,CAAC,CAAC;QACJ,CAAC;QAED,MAAM,CAAC,KAAK,CAAC,uBAAuB,EAAE;YACrC,KAAK;YACL,SAAS,EAAE,KAAK,CAAC,IAAI;YACrB,YAAY,EAAE,iBAAiB,CAAC,aAAa,CAAC,MAAM;SACpD,CAAC,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,CAAC,KAAK,CACX,+BAA+B,EAC/B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,EAC1C,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,CAAC,IAAI,EAAE,CAChC,CAAC;IACH,CAAC;AACF,CAAC;AAED,+EAA+E;AAC/E,uBAAuB;AACvB,+EAA+E;AAE/E,IAAI,iBAAiB,GAA0C,IAAI,CAAC;AACpE,IAAI,mBAAmB,GAA0C,IAAI,CAAC;AAEtE,MAAM,UAAU,qBAAqB,CAAC,UAAU,GAAG,MAAM;IACxD,IAAI,iBAAiB,EAAE,CAAC;QACvB,OAAO,CAAC,kBAAkB;IAC3B,CAAC;IAED,iBAAiB,GAAG,WAAW,CAAC,GAAG,EAAE;QACpC,mBAAmB,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;YACrC,MAAM,CAAC,KAAK,CACX,yBAAyB,EACzB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAC1C,CAAC;QACH,CAAC,CAAC,CAAC;IACJ,CAAC,EAAE,UAAU,CAAC,CAAC;IAEf,kDAAkD;IAClD,mBAAmB,GAAG,WAAW,CAAC,GAAG,EAAE;QACtC,SAAS,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;YAC3B,MAAM,CAAC,KAAK,CACX,oBAAoB,EACpB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAC1C,CAAC;QACH,CAAC,CAAC,CAAC;IACJ,CAAC,EAAE,eAAe,CAAC,CAAC;IAEpB,qEAAqE;IACrE,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;QACtE,iBAAiB,CAAC,KAAK,EAAE,CAAC;QAC1B,mBAAmB,CAAC,KAAK,EAAE,CAAC;IAC7B,CAAC;IAED,MAAM,CAAC,IAAI,CAAC,2BAA2B,EAAE;QACxC,UAAU;QACV,UAAU,EAAE,WAAW;KACvB,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB;IACzC,IAAI,iBAAiB,EAAE,CAAC;QACvB,aAAa,CAAC,iBAAiB,CAAC,CAAC;QACjC,iBAAiB,GAAG,IAAI,CAAC;QACzB,qDAAqD;QACrD,MAAM,WAAW,EAAE,CAAC;QACpB,MAAM,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IAC1C,CAAC;IACD,IAAI,mBAAmB,EAAE,CAAC;QACzB,aAAa,CAAC,mBAAmB,CAAC,CAAC;QACnC,mBAAmB,GAAG,IAAI,CAAC;IAC5B,CAAC;AACF,CAAC;AAYD,MAAM,CAAC,KAAK,UAAU,sBAAsB;IAC3C,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC;QACtB,OAAO,EAAE,YAAY,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;IAC3D,CAAC;IAED,IAAI,CAAC;QACJ,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;QACnB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QAEvB,MAAM,CAAC,aAAa,CAAC,GAAG,MAAM,EAAE;aAC9B,MAAM,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC;aAC1B,IAAI,CAAC,iBAAiB,CAAC;aACvB,KAAK,CACL,GAAG,CACF,EAAE,CAAC,iBAAiB,CAAC,MAAM,EAAE,SAAS,CAAC,EACvC,EAAE,CACD,GAAG,CAAC,iBAAiB,CAAC,WAAW,EAAE,GAAG,CAAC,EACvC,MAAM,CAAC,iBAAiB,CAAC,WAAW,CAAC,CACrC,CACD,CACD,CAAC;QAEH,MAAM,CAAC,YAAY,CAAC,GAAG,MAAM,EAAE;aAC7B,MAAM,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC;aAC1B,IAAI,CAAC,iBAAiB,CAAC;aACvB,KAAK,CAAC,EAAE,CAAC,iBAAiB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;QAEhD,MAAM,CAAC,WAAW,CAAC,GAAG,MAAM,EAAE;aAC5B,MAAM,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC;aAC1B,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAE1B,OAAO;YACN,YAAY,EAAE,aAAa,EAAE,KAAK,IAAI,CAAC;YACvC,WAAW,EAAE,YAAY,EAAE,KAAK,IAAI,CAAC;YACrC,UAAU,EAAE,WAAW,EAAE,KAAK,IAAI,CAAC;SACnC,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,EAAE,YAAY,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;IAC3D,CAAC;AACF,CAAC","sourcesContent":["/**\n * Webhook Delivery Service\n *\n * Handles reliable webhook delivery with:\n * - HMAC signing for payload integrity\n * - Exponential backoff retries\n * - Database-backed delivery queue\n * - Delivery status tracking\n */\n\nimport crypto from \"node:crypto\";\nimport { and, count, eq, isNull, lt, lte, or } from \"drizzle-orm\";\nimport { getDb, isDbAvailable } from \"../db/client.js\";\nimport {\n\tdistributedLocks,\n\torganizations,\n\twebhookDeliveries,\n} from \"../db/schema.js\";\nimport { decryptOrgSettings } from \"../db/settings-encryption.js\";\nimport { createLogger } from \"../utils/logger.js\";\n\n// Unique identifier for this process instance\nconst INSTANCE_ID = `${process.pid}-${crypto.randomUUID().slice(0, 8)}`;\n\nconst logger = createLogger(\"webhooks:delivery\");\n\n// ============================================================================\n// TYPES\n// ============================================================================\n\nexport interface WebhookPayload {\n\tevent: string;\n\ttimestamp: string;\n\tdata: Record<string, unknown>;\n}\n\nexport interface WebhookDeliveryOptions {\n\torgId: string;\n\turl: string;\n\tpayload: WebhookPayload;\n\tsigningSecret?: string;\n\tmaxAttempts?: number;\n}\n\nexport interface DeliveryResult {\n\tsuccess: boolean;\n\tstatusCode?: number;\n\tresponseTimeMs?: number;\n\terror?: string;\n}\n\nexport function buildWebhookDeliveryHeaders(\n\tsignature?: string,\n): Record<string, string> {\n\tconst headers: Record<string, string> = {\n\t\t\"Content-Type\": \"application/json\",\n\t\t\"User-Agent\": \"Maestro-Webhooks/1.0\",\n\t\t\"X-Webhook-Id\": crypto.randomUUID(),\n\t};\n\n\tif (signature) {\n\t\theaders[\"X-Composer-Signature\"] = signature;\n\t\theaders[\"X-Maestro-Signature\"] = signature;\n\t}\n\n\treturn headers;\n}\n\n// ============================================================================\n// HMAC SIGNING\n// ============================================================================\n\n/** Sign a webhook payload with HMAC-SHA256. Format: t=timestamp,v1=signature */\nexport function signPayload(\n\tpayload: string,\n\tsecret: string,\n\ttimestamp?: number,\n): { signature: string; timestamp: number } {\n\tconst ts = timestamp ?? Math.floor(Date.now() / 1000);\n\tconst signatureBase = `${ts}.${payload}`;\n\n\tconst signature = crypto\n\t\t.createHmac(\"sha256\", secret)\n\t\t.update(signatureBase)\n\t\t.digest(\"hex\");\n\n\treturn {\n\t\tsignature: `t=${ts},v1=${signature}`,\n\t\ttimestamp: ts,\n\t};\n}\n\nexport function verifySignature(\n\tpayload: string,\n\tsignature: string,\n\tsecret: string,\n\ttoleranceSeconds = 300,\n): { valid: boolean; error?: string } {\n\t// Parse signature: t=timestamp,v1=hash\n\tconst parts = signature.split(\",\");\n\tconst timestampPart = parts.find((p) => p.startsWith(\"t=\"));\n\tconst signaturePart = parts.find((p) => p.startsWith(\"v1=\"));\n\n\tif (!timestampPart || !signaturePart) {\n\t\treturn { valid: false, error: \"Invalid signature format\" };\n\t}\n\n\tconst timestamp = Number.parseInt(timestampPart.slice(2), 10);\n\tconst providedSig = signaturePart.slice(3);\n\n\tif (Number.isNaN(timestamp)) {\n\t\treturn { valid: false, error: \"Invalid timestamp\" };\n\t}\n\n\t// Check timestamp freshness\n\tconst now = Math.floor(Date.now() / 1000);\n\tif (Math.abs(now - timestamp) > toleranceSeconds) {\n\t\treturn { valid: false, error: \"Timestamp outside tolerance\" };\n\t}\n\n\t// Compute expected signature\n\tconst signatureBase = `${timestamp}.${payload}`;\n\tconst expected = crypto\n\t\t.createHmac(\"sha256\", secret)\n\t\t.update(signatureBase)\n\t\t.digest(\"hex\");\n\n\t// Timing-safe comparison\n\tconst providedBuf = Buffer.from(providedSig, \"hex\");\n\tconst expectedBuf = Buffer.from(expected, \"hex\");\n\n\tif (providedBuf.length !== expectedBuf.length) {\n\t\treturn { valid: false, error: \"Signature length mismatch\" };\n\t}\n\n\tif (!crypto.timingSafeEqual(providedBuf, expectedBuf)) {\n\t\treturn { valid: false, error: \"Signature mismatch\" };\n\t}\n\n\treturn { valid: true };\n}\n\n// ============================================================================\n// HTTP DELIVERY\n// ============================================================================\n\nasync function deliverHttp(\n\turl: string,\n\tpayload: string,\n\tsignature?: string,\n\ttimeoutMs = 30_000,\n): Promise<DeliveryResult> {\n\tconst startTime = Date.now();\n\tconst headers = buildWebhookDeliveryHeaders(signature);\n\n\ttry {\n\t\tconst controller = new AbortController();\n\t\tconst timeout = setTimeout(() => controller.abort(), timeoutMs);\n\n\t\tconst response = await fetch(url, {\n\t\t\tmethod: \"POST\",\n\t\t\theaders,\n\t\t\tbody: payload,\n\t\t\tsignal: controller.signal,\n\t\t});\n\n\t\tclearTimeout(timeout);\n\n\t\tconst responseTimeMs = Date.now() - startTime;\n\n\t\tif (response.ok) {\n\t\t\treturn {\n\t\t\t\tsuccess: true,\n\t\t\t\tstatusCode: response.status,\n\t\t\t\tresponseTimeMs,\n\t\t\t};\n\t\t}\n\n\t\treturn {\n\t\t\tsuccess: false,\n\t\t\tstatusCode: response.status,\n\t\t\tresponseTimeMs,\n\t\t\terror: `HTTP ${response.status}: ${response.statusText}`,\n\t\t};\n\t} catch (error) {\n\t\tconst responseTimeMs = Date.now() - startTime;\n\n\t\tif (error instanceof Error && error.name === \"AbortError\") {\n\t\t\treturn {\n\t\t\t\tsuccess: false,\n\t\t\t\tresponseTimeMs,\n\t\t\t\terror: \"Request timeout\",\n\t\t\t};\n\t\t}\n\n\t\treturn {\n\t\t\tsuccess: false,\n\t\t\tresponseTimeMs,\n\t\t\terror: error instanceof Error ? error.message : \"Unknown error\",\n\t\t};\n\t}\n}\n\n// ============================================================================\n// DISTRIBUTED LOCKING\n// ============================================================================\n\nconst LOCK_ID = \"webhook_processor\";\nconst LOCK_DURATION_MS = 60_000; // 1 minute lock duration\nconst LOCK_RENEWAL_MS = 30_000; // Renew every 30 seconds\nlet processorInFlight = false;\n\nasync function tryAcquireLock(): Promise<boolean> {\n\tif (!isDbAvailable()) {\n\t\treturn true; // No DB, no locking - just process\n\t}\n\n\ttry {\n\t\tconst db = getDb();\n\t\tconst now = new Date();\n\t\tconst expiresAt = new Date(now.getTime() + LOCK_DURATION_MS);\n\n\t\t// Try to insert lock, or update if expired\n\t\tawait db\n\t\t\t.insert(distributedLocks)\n\t\t\t.values({\n\t\t\t\tid: LOCK_ID,\n\t\t\t\tholderId: INSTANCE_ID,\n\t\t\t\tacquiredAt: now,\n\t\t\t\texpiresAt,\n\t\t\t})\n\t\t\t.onConflictDoUpdate({\n\t\t\t\ttarget: distributedLocks.id,\n\t\t\t\tset: {\n\t\t\t\t\tholderId: INSTANCE_ID,\n\t\t\t\t\tacquiredAt: now,\n\t\t\t\t\texpiresAt,\n\t\t\t\t},\n\t\t\t\t// Only update if lock is expired or we already hold it\n\t\t\t\tsetWhere: or(\n\t\t\t\t\tlt(distributedLocks.expiresAt, now),\n\t\t\t\t\teq(distributedLocks.holderId, INSTANCE_ID),\n\t\t\t\t),\n\t\t\t});\n\n\t\t// Check if we got the lock\n\t\tconst [lock] = await db\n\t\t\t.select()\n\t\t\t.from(distributedLocks)\n\t\t\t.where(eq(distributedLocks.id, LOCK_ID))\n\t\t\t.limit(1);\n\n\t\treturn lock?.holderId === INSTANCE_ID;\n\t} catch (error) {\n\t\tlogger.error(\n\t\t\t\"Failed to acquire lock\",\n\t\t\terror instanceof Error ? error : undefined,\n\t\t);\n\t\treturn false;\n\t}\n}\n\nasync function renewLock(): Promise<boolean> {\n\tif (!isDbAvailable()) {\n\t\treturn true;\n\t}\n\n\ttry {\n\t\tconst db = getDb();\n\t\tconst now = new Date();\n\t\tconst expiresAt = new Date(now.getTime() + LOCK_DURATION_MS);\n\n\t\tconst result = await db\n\t\t\t.update(distributedLocks)\n\t\t\t.set({ expiresAt })\n\t\t\t.where(\n\t\t\t\tand(\n\t\t\t\t\teq(distributedLocks.id, LOCK_ID),\n\t\t\t\t\teq(distributedLocks.holderId, INSTANCE_ID),\n\t\t\t\t),\n\t\t\t)\n\t\t\t.returning({ id: distributedLocks.id });\n\n\t\treturn result.length > 0;\n\t} catch (error) {\n\t\tlogger.error(\n\t\t\t\"Failed to renew lock\",\n\t\t\terror instanceof Error ? error : undefined,\n\t\t);\n\t\treturn false;\n\t}\n}\n\nasync function releaseLock(): Promise<void> {\n\tif (!isDbAvailable()) {\n\t\treturn;\n\t}\n\n\ttry {\n\t\tconst db = getDb();\n\t\tawait db\n\t\t\t.delete(distributedLocks)\n\t\t\t.where(\n\t\t\t\tand(\n\t\t\t\t\teq(distributedLocks.id, LOCK_ID),\n\t\t\t\t\teq(distributedLocks.holderId, INSTANCE_ID),\n\t\t\t\t),\n\t\t\t);\n\t} catch (error) {\n\t\tlogger.error(\n\t\t\t\"Failed to release lock\",\n\t\t\terror instanceof Error ? error : undefined,\n\t\t);\n\t}\n}\n\n// ============================================================================\n// RETRY BACKOFF WITH JITTER\n// ============================================================================\n\nfunction calculateBackoffWithJitter(\n\tattempt: number,\n\tbaseMs = 1000,\n\tcapMs = 300_000,\n): number {\n\t// Exponential base: 2^attempt * baseMs\n\tconst exponential = Math.min(capMs, baseMs * 2 ** attempt);\n\t// Add jitter: random value between 50% and 150% of exponential\n\tconst jitter = exponential * (0.5 + Math.random());\n\treturn Math.min(capMs, Math.floor(jitter));\n}\n\n// ============================================================================\n// QUEUE OPERATIONS\n// ============================================================================\n\n/** Queue a webhook for delivery. Signature is generated at delivery time. */\nexport async function queueWebhook(\n\toptions: WebhookDeliveryOptions,\n): Promise<string | null> {\n\tif (!isDbAvailable()) {\n\t\tlogger.warn(\"Database unavailable, delivering webhook immediately\");\n\t\t// Fall back to immediate delivery without persistence\n\t\tconst payload = JSON.stringify(options.payload);\n\t\t// Sign at delivery time\n\t\tconst signature = options.signingSecret\n\t\t\t? signPayload(payload, options.signingSecret).signature\n\t\t\t: undefined;\n\n\t\tconst result = await deliverHttp(options.url, payload, signature);\n\t\tif (!result.success) {\n\t\t\tlogger.error(\"Immediate webhook delivery failed\", undefined, {\n\t\t\t\turl: options.url,\n\t\t\t\terror: result.error,\n\t\t\t});\n\t\t}\n\t\treturn null;\n\t}\n\n\ttry {\n\t\tconst db = getDb();\n\n\t\t// Don't pre-sign - signature will be generated at delivery time\n\t\t// This ensures the timestamp is fresh when the webhook is sent\n\t\tconst [delivery] = await db\n\t\t\t.insert(webhookDeliveries)\n\t\t\t.values({\n\t\t\t\torgId: options.orgId,\n\t\t\t\turl: options.url,\n\t\t\t\tpayload: options.payload,\n\t\t\t\t// Store the secret reference, not the pre-computed signature\n\t\t\t\tsignature: null,\n\t\t\t\tmaxAttempts: options.maxAttempts ?? 5,\n\t\t\t\tnextRetryAt: new Date(), // Immediate first attempt\n\t\t\t})\n\t\t\t.returning({ id: webhookDeliveries.id });\n\n\t\tif (!delivery) {\n\t\t\tlogger.error(\"Failed to queue webhook: no delivery returned\", undefined, {\n\t\t\t\turl: options.url,\n\t\t\t});\n\t\t\treturn null;\n\t\t}\n\n\t\tlogger.debug(\"Webhook queued\", {\n\t\t\tid: delivery.id,\n\t\t\turl: options.url,\n\t\t\tevent: options.payload.event,\n\t\t});\n\n\t\treturn delivery.id;\n\t} catch (error) {\n\t\tlogger.error(\n\t\t\t\"Failed to queue webhook\",\n\t\t\terror instanceof Error ? error : undefined,\n\t\t\t{ url: options.url },\n\t\t);\n\t\treturn null;\n\t}\n}\n\nexport async function processWebhookQueue(batchSize = 10): Promise<number> {\n\tif (!isDbAvailable()) {\n\t\treturn 0;\n\t}\n\tif (processorInFlight) {\n\t\treturn 0;\n\t}\n\ttry {\n\t\tprocessorInFlight = true;\n\n\t\t// Try to acquire the distributed lock\n\t\tconst hasLock = await tryAcquireLock();\n\t\tif (!hasLock) {\n\t\t\tlogger.debug(\"Another instance holds the webhook processor lock\");\n\t\t\treturn 0;\n\t\t}\n\n\t\tconst db = getDb();\n\t\tconst now = new Date();\n\n\t\t// Fetch pending webhooks ready for delivery/retry\n\t\tconst pending = await db\n\t\t\t.select()\n\t\t\t.from(webhookDeliveries)\n\t\t\t.where(\n\t\t\t\tand(\n\t\t\t\t\tor(\n\t\t\t\t\t\teq(webhookDeliveries.status, \"pending\"),\n\t\t\t\t\t\teq(webhookDeliveries.status, \"retrying\"),\n\t\t\t\t\t),\n\t\t\t\t\tlte(webhookDeliveries.nextRetryAt, now),\n\t\t\t\t\tlt(webhookDeliveries.attempts, webhookDeliveries.maxAttempts),\n\t\t\t\t),\n\t\t\t)\n\t\t\t.limit(batchSize);\n\n\t\tif (pending.length === 0) {\n\t\t\treturn 0;\n\t\t}\n\n\t\tlet processed = 0;\n\n\t\tfor (const delivery of pending) {\n\t\t\tconst payload = JSON.stringify(delivery.payload);\n\n\t\t\t// Sign at delivery time with fresh timestamp\n\t\t\tlet signature: string | undefined;\n\t\t\tif (delivery.orgId) {\n\t\t\t\t// Get the org's signing secret\n\t\t\t\tconst [org] = await db\n\t\t\t\t\t.select({ settings: organizations.settings })\n\t\t\t\t\t.from(organizations)\n\t\t\t\t\t.where(eq(organizations.id, delivery.orgId))\n\t\t\t\t\t.limit(1);\n\n\t\t\t\t// Decrypt settings to access the signing secret\n\t\t\t\tconst decryptedSettings = decryptOrgSettings(org?.settings);\n\t\t\t\tif (decryptedSettings?.webhookSigningSecret) {\n\t\t\t\t\tsignature = signPayload(\n\t\t\t\t\t\tpayload,\n\t\t\t\t\t\tdecryptedSettings.webhookSigningSecret,\n\t\t\t\t\t).signature;\n\t\t\t\t}\n\t\t\t}\n\n\t\t\tconst result = await deliverHttp(delivery.url, payload, signature);\n\n\t\t\tconst newAttempts = delivery.attempts + 1;\n\n\t\t\tif (result.success) {\n\t\t\t\t// Mark as delivered\n\t\t\t\tawait db\n\t\t\t\t\t.update(webhookDeliveries)\n\t\t\t\t\t.set({\n\t\t\t\t\t\tstatus: \"delivered\",\n\t\t\t\t\t\tattempts: newAttempts,\n\t\t\t\t\t\tlastStatusCode: result.statusCode,\n\t\t\t\t\t\tlastResponseTimeMs: result.responseTimeMs,\n\t\t\t\t\t\tdeliveredAt: new Date(),\n\t\t\t\t\t})\n\t\t\t\t\t.where(eq(webhookDeliveries.id, delivery.id));\n\n\t\t\t\tlogger.info(\"Webhook delivered\", {\n\t\t\t\t\tid: delivery.id,\n\t\t\t\t\turl: delivery.url,\n\t\t\t\t\tattempts: newAttempts,\n\t\t\t\t\tresponseTimeMs: result.responseTimeMs,\n\t\t\t\t});\n\t\t\t} else if (newAttempts >= delivery.maxAttempts) {\n\t\t\t\t// Max retries exceeded, mark as failed\n\t\t\t\tawait db\n\t\t\t\t\t.update(webhookDeliveries)\n\t\t\t\t\t.set({\n\t\t\t\t\t\tstatus: \"failed\",\n\t\t\t\t\t\tattempts: newAttempts,\n\t\t\t\t\t\tlastStatusCode: result.statusCode,\n\t\t\t\t\t\tlastResponseTimeMs: result.responseTimeMs,\n\t\t\t\t\t\tlastError: result.error,\n\t\t\t\t\t})\n\t\t\t\t\t.where(eq(webhookDeliveries.id, delivery.id));\n\n\t\t\t\tlogger.error(\"Webhook delivery failed permanently\", undefined, {\n\t\t\t\t\tid: delivery.id,\n\t\t\t\t\turl: delivery.url,\n\t\t\t\t\tattempts: newAttempts,\n\t\t\t\t\terror: result.error,\n\t\t\t\t});\n\t\t\t} else {\n\t\t\t\t// Schedule retry with exponential backoff + jitter\n\t\t\t\tconst backoffMs = calculateBackoffWithJitter(newAttempts);\n\t\t\t\tconst nextRetry = new Date(Date.now() + backoffMs);\n\n\t\t\t\tawait db\n\t\t\t\t\t.update(webhookDeliveries)\n\t\t\t\t\t.set({\n\t\t\t\t\t\tstatus: \"retrying\",\n\t\t\t\t\t\tattempts: newAttempts,\n\t\t\t\t\t\tlastStatusCode: result.statusCode,\n\t\t\t\t\t\tlastResponseTimeMs: result.responseTimeMs,\n\t\t\t\t\t\tlastError: result.error,\n\t\t\t\t\t\tnextRetryAt: nextRetry,\n\t\t\t\t\t})\n\t\t\t\t\t.where(eq(webhookDeliveries.id, delivery.id));\n\n\t\t\t\tlogger.warn(\"Webhook delivery failed, scheduling retry\", {\n\t\t\t\t\tid: delivery.id,\n\t\t\t\t\turl: delivery.url,\n\t\t\t\t\tattempts: newAttempts,\n\t\t\t\t\tnextRetryIn: `${Math.round(backoffMs / 1000)}s`,\n\t\t\t\t\terror: result.error,\n\t\t\t\t});\n\t\t\t}\n\n\t\t\tprocessed++;\n\n\t\t\t// Renew lock if we're processing many webhooks\n\t\t\tif (processed % 5 === 0) {\n\t\t\t\tawait renewLock();\n\t\t\t}\n\t\t}\n\n\t\treturn processed;\n\t} catch (error) {\n\t\tlogger.error(\n\t\t\t\"Failed to process webhook queue\",\n\t\t\terror instanceof Error ? error : undefined,\n\t\t);\n\t\treturn 0;\n\t} finally {\n\t\tprocessorInFlight = false;\n\t}\n}\n\nexport async function cleanupWebhookQueue(retentionDays = 7): Promise<number> {\n\tif (!isDbAvailable()) {\n\t\treturn 0;\n\t}\n\n\ttry {\n\t\tconst db = getDb();\n\t\tconst cutoff = new Date(Date.now() - retentionDays * 24 * 60 * 60 * 1000);\n\n\t\tconst result = await db\n\t\t\t.delete(webhookDeliveries)\n\t\t\t.where(\n\t\t\t\tand(\n\t\t\t\t\tor(\n\t\t\t\t\t\teq(webhookDeliveries.status, \"delivered\"),\n\t\t\t\t\t\teq(webhookDeliveries.status, \"failed\"),\n\t\t\t\t\t),\n\t\t\t\t\tlte(webhookDeliveries.createdAt, cutoff),\n\t\t\t\t),\n\t\t\t)\n\t\t\t.returning({ id: webhookDeliveries.id });\n\n\t\tif (result.length > 0) {\n\t\t\tlogger.info(\"Cleaned up old webhook deliveries\", {\n\t\t\t\tcount: result.length,\n\t\t\t\tretentionDays,\n\t\t\t});\n\t\t}\n\n\t\treturn result.length;\n\t} catch (error) {\n\t\tlogger.error(\n\t\t\t\"Failed to cleanup webhook queue\",\n\t\t\terror instanceof Error ? error : undefined,\n\t\t);\n\t\treturn 0;\n\t}\n}\n\n// ============================================================================\n// ALERT WEBHOOK INTEGRATION\n// ============================================================================\n\nexport async function sendAlertWebhooks(\n\torgId: string,\n\talert: {\n\t\ttype: string;\n\t\tseverity: string;\n\t\tmessage: string;\n\t\tmetadata?: Record<string, unknown>;\n\t},\n): Promise<void> {\n\tif (!isDbAvailable()) {\n\t\tlogger.warn(\"Database unavailable, skipping alert webhooks\");\n\t\treturn;\n\t}\n\n\ttry {\n\t\tconst db = getDb();\n\n\t\t// Get org settings to find webhook URLs and signing secret\n\t\tconst [org] = await db\n\t\t\t.select({ settings: organizations.settings })\n\t\t\t.from(organizations)\n\t\t\t.where(eq(organizations.id, orgId))\n\t\t\t.limit(1);\n\n\t\t// Decrypt settings to access sensitive fields\n\t\tconst decryptedSettings = decryptOrgSettings(org?.settings);\n\n\t\tif (!decryptedSettings?.alertWebhooks?.length) {\n\t\t\treturn; // No webhooks configured\n\t\t}\n\n\t\tconst payload: WebhookPayload = {\n\t\t\tevent: `alert.${alert.type}`,\n\t\t\ttimestamp: new Date().toISOString(),\n\t\t\tdata: {\n\t\t\t\tseverity: alert.severity,\n\t\t\t\tmessage: alert.message,\n\t\t\t\t...alert.metadata,\n\t\t\t},\n\t\t};\n\n\t\t// Queue webhooks to all configured URLs\n\t\tfor (const url of decryptedSettings.alertWebhooks) {\n\t\t\tawait queueWebhook({\n\t\t\t\torgId,\n\t\t\t\turl,\n\t\t\t\tpayload,\n\t\t\t\tsigningSecret: decryptedSettings.webhookSigningSecret,\n\t\t\t});\n\t\t}\n\n\t\tlogger.debug(\"Alert webhooks queued\", {\n\t\t\torgId,\n\t\t\talertType: alert.type,\n\t\t\twebhookCount: decryptedSettings.alertWebhooks.length,\n\t\t});\n\t} catch (error) {\n\t\tlogger.error(\n\t\t\t\"Failed to send alert webhooks\",\n\t\t\terror instanceof Error ? error : undefined,\n\t\t\t{ orgId, alertType: alert.type },\n\t\t);\n\t}\n}\n\n// ============================================================================\n// BACKGROUND PROCESSOR\n// ============================================================================\n\nlet processorInterval: ReturnType<typeof setInterval> | null = null;\nlet lockRenewalInterval: ReturnType<typeof setInterval> | null = null;\n\nexport function startWebhookProcessor(intervalMs = 10_000): void {\n\tif (processorInterval) {\n\t\treturn; // Already running\n\t}\n\n\tprocessorInterval = setInterval(() => {\n\t\tprocessWebhookQueue().catch((error) => {\n\t\t\tlogger.error(\n\t\t\t\t\"Webhook processor error\",\n\t\t\t\terror instanceof Error ? error : undefined,\n\t\t\t);\n\t\t});\n\t}, intervalMs);\n\n\t// Periodically renew the lock while we're running\n\tlockRenewalInterval = setInterval(() => {\n\t\trenewLock().catch((error) => {\n\t\t\tlogger.error(\n\t\t\t\t\"Lock renewal error\",\n\t\t\t\terror instanceof Error ? error : undefined,\n\t\t\t);\n\t\t});\n\t}, LOCK_RENEWAL_MS);\n\n\t// In test mode, unref intervals so they don't keep the process alive\n\tif (process.env.VITEST === \"true\" || process.env.NODE_ENV === \"test\") {\n\t\tprocessorInterval.unref();\n\t\tlockRenewalInterval.unref();\n\t}\n\n\tlogger.info(\"Webhook processor started\", {\n\t\tintervalMs,\n\t\tinstanceId: INSTANCE_ID,\n\t});\n}\n\nexport async function stopWebhookProcessor(): Promise<void> {\n\tif (processorInterval) {\n\t\tclearInterval(processorInterval);\n\t\tprocessorInterval = null;\n\t\t// Release the lock so another instance can take over\n\t\tawait releaseLock();\n\t\tlogger.info(\"Webhook processor stopped\");\n\t}\n\tif (lockRenewalInterval) {\n\t\tclearInterval(lockRenewalInterval);\n\t\tlockRenewalInterval = null;\n\t}\n}\n\n// ============================================================================\n// METRICS\n// ============================================================================\n\nexport interface WebhookQueueMetrics {\n\tpendingCount: number;\n\tfailedCount: number;\n\ttotalCount: number;\n}\n\nexport async function getWebhookQueueMetrics(): Promise<WebhookQueueMetrics> {\n\tif (!isDbAvailable()) {\n\t\treturn { pendingCount: 0, failedCount: 0, totalCount: 0 };\n\t}\n\n\ttry {\n\t\tconst db = getDb();\n\t\tconst now = new Date();\n\n\t\tconst [pendingResult] = await db\n\t\t\t.select({ value: count() })\n\t\t\t.from(webhookDeliveries)\n\t\t\t.where(\n\t\t\t\tand(\n\t\t\t\t\teq(webhookDeliveries.status, \"pending\"),\n\t\t\t\t\tor(\n\t\t\t\t\t\tlte(webhookDeliveries.nextRetryAt, now),\n\t\t\t\t\t\tisNull(webhookDeliveries.nextRetryAt),\n\t\t\t\t\t),\n\t\t\t\t),\n\t\t\t);\n\n\t\tconst [failedResult] = await db\n\t\t\t.select({ value: count() })\n\t\t\t.from(webhookDeliveries)\n\t\t\t.where(eq(webhookDeliveries.status, \"failed\"));\n\n\t\tconst [totalResult] = await db\n\t\t\t.select({ value: count() })\n\t\t\t.from(webhookDeliveries);\n\n\t\treturn {\n\t\t\tpendingCount: pendingResult?.value ?? 0,\n\t\t\tfailedCount: failedResult?.value ?? 0,\n\t\t\ttotalCount: totalResult?.value ?? 0,\n\t\t};\n\t} catch {\n\t\treturn { pendingCount: 0, failedCount: 0, totalCount: 0 };\n\t}\n}\n"]}
+{"version":3,"file":"delivery.js","sourceRoot":"","sources":["../../src/webhooks/delivery.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AAClE,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AACvD,OAAO,EACN,gBAAgB,EAChB,aAAa,EACb,iBAAiB,GACjB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAClE,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,8CAA8C;AAC9C,MAAM,WAAW,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;AAExE,MAAM,MAAM,GAAG,YAAY,CAAC,mBAAmB,CAAC,CAAC;AACjD,MAAM,+BAA+B,GAAG,CAAC,CAAC;AA2B1C,MAAM,UAAU,2BAA2B,CAC1C,SAAkB;IAElB,MAAM,OAAO,GAA2B;QACvC,cAAc,EAAE,kBAAkB;QAClC,YAAY,EAAE,sBAAsB;QACpC,cAAc,EAAE,MAAM,CAAC,UAAU,EAAE;KACnC,CAAC;IAEF,IAAI,SAAS,EAAE,CAAC;QACf,OAAO,CAAC,sBAAsB,CAAC,GAAG,SAAS,CAAC;QAC5C,OAAO,CAAC,qBAAqB,CAAC,GAAG,SAAS,CAAC;IAC5C,CAAC;IAED,OAAO,OAAO,CAAC;AAChB,CAAC;AAED,+EAA+E;AAC/E,eAAe;AACf,+EAA+E;AAE/E,gFAAgF;AAChF,MAAM,UAAU,WAAW,CAC1B,OAAe,EACf,MAAc,EACd,SAAkB;IAElB,MAAM,EAAE,GAAG,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IACtD,MAAM,aAAa,GAAG,GAAG,EAAE,IAAI,OAAO,EAAE,CAAC;IAEzC,MAAM,SAAS,GAAG,MAAM;SACtB,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC;SAC5B,MAAM,CAAC,aAAa,CAAC;SACrB,MAAM,CAAC,KAAK,CAAC,CAAC;IAEhB,OAAO;QACN,SAAS,EAAE,KAAK,EAAE,OAAO,SAAS,EAAE;QACpC,SAAS,EAAE,EAAE;KACb,CAAC;AACH,CAAC;AAED,MAAM,UAAU,eAAe,CAC9B,OAAe,EACf,SAAiB,EACjB,MAAc,EACd,gBAAgB,GAAG,GAAG;IAEtB,uCAAuC;IACvC,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACnC,MAAM,aAAa,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;IAC5D,MAAM,aAAa,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;IAE7D,IAAI,CAAC,aAAa,IAAI,CAAC,aAAa,EAAE,CAAC;QACtC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC;IAC5D,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC9D,MAAM,WAAW,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAE3C,IAAI,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;QAC7B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC;IACrD,CAAC;IAED,4BAA4B;IAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC1C,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,SAAS,CAAC,GAAG,gBAAgB,EAAE,CAAC;QAClD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,6BAA6B,EAAE,CAAC;IAC/D,CAAC;IAED,6BAA6B;IAC7B,MAAM,aAAa,GAAG,GAAG,SAAS,IAAI,OAAO,EAAE,CAAC;IAChD,MAAM,QAAQ,GAAG,MAAM;SACrB,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC;SAC5B,MAAM,CAAC,aAAa,CAAC;SACrB,MAAM,CAAC,KAAK,CAAC,CAAC;IAEhB,yBAAyB;IACzB,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;IACpD,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAEjD,IAAI,WAAW,CAAC,MAAM,KAAK,WAAW,CAAC,MAAM,EAAE,CAAC;QAC/C,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAC;IAC7D,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,CAAC;QACvD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC;IACtD,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACxB,CAAC;AAED,+EAA+E;AAC/E,gBAAgB;AAChB,+EAA+E;AAE/E,KAAK,UAAU,WAAW,CACzB,GAAW,EACX,OAAe,EACf,SAAkB,EAClB,SAAS,GAAG,MAAM;IAElB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,OAAO,GAAG,2BAA2B,CAAC,SAAS,CAAC,CAAC;IAEvD,IAAI,CAAC;QACJ,MAAM,QAAQ,GAAG,MAAM,eAAe,CACrC,GAAG,EACH;YACC,MAAM,EAAE,MAAM;YACd,OAAO;YACP,IAAI,EAAE,OAAO;SACb,EACD;YACC,WAAW,EAAE,kBAAkB;YAC/B,WAAW,EAAE,UAAU;YACvB,SAAS;YACT,oDAAoD;YACpD,WAAW,EAAE,+BAA+B;SAC5C,CACD,CAAC;QAEF,MAAM,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QAE9C,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,OAAO;gBACN,OAAO,EAAE,IAAI;gBACb,UAAU,EAAE,QAAQ,CAAC,MAAM;gBAC3B,cAAc;aACd,CAAC;QACH,CAAC;QAED,OAAO;YACN,OAAO,EAAE,KAAK;YACd,UAAU,EAAE,QAAQ,CAAC,MAAM;YAC3B,cAAc;YACd,KAAK,EAAE,QAAQ,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,UAAU,EAAE;SACxD,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QAE9C,OAAO;YACN,OAAO,EAAE,KAAK;YACd,cAAc;YACd,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;SAC/D,CAAC;IACH,CAAC;AACF,CAAC;AAED,+EAA+E;AAC/E,sBAAsB;AACtB,+EAA+E;AAE/E,MAAM,OAAO,GAAG,mBAAmB,CAAC;AACpC,MAAM,gBAAgB,GAAG,MAAM,CAAC,CAAC,yBAAyB;AAC1D,MAAM,eAAe,GAAG,MAAM,CAAC,CAAC,yBAAyB;AACzD,IAAI,iBAAiB,GAAG,KAAK,CAAC;AAE9B,KAAK,UAAU,cAAc;IAC5B,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC;QACtB,OAAO,IAAI,CAAC,CAAC,mCAAmC;IACjD,CAAC;IAED,IAAI,CAAC;QACJ,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;QACnB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,gBAAgB,CAAC,CAAC;QAE7D,2CAA2C;QAC3C,MAAM,EAAE;aACN,MAAM,CAAC,gBAAgB,CAAC;aACxB,MAAM,CAAC;YACP,EAAE,EAAE,OAAO;YACX,QAAQ,EAAE,WAAW;YACrB,UAAU,EAAE,GAAG;YACf,SAAS;SACT,CAAC;aACD,kBAAkB,CAAC;YACnB,MAAM,EAAE,gBAAgB,CAAC,EAAE;YAC3B,GAAG,EAAE;gBACJ,QAAQ,EAAE,WAAW;gBACrB,UAAU,EAAE,GAAG;gBACf,SAAS;aACT;YACD,uDAAuD;YACvD,QAAQ,EAAE,EAAE,CACX,EAAE,CAAC,gBAAgB,CAAC,SAAS,EAAE,GAAG,CAAC,EACnC,EAAE,CAAC,gBAAgB,CAAC,QAAQ,EAAE,WAAW,CAAC,CAC1C;SACD,CAAC,CAAC;QAEJ,2BAA2B;QAC3B,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,EAAE;aACrB,MAAM,EAAE;aACR,IAAI,CAAC,gBAAgB,CAAC;aACtB,KAAK,CAAC,EAAE,CAAC,gBAAgB,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;aACvC,KAAK,CAAC,CAAC,CAAC,CAAC;QAEX,OAAO,IAAI,EAAE,QAAQ,KAAK,WAAW,CAAC;IACvC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,CAAC,KAAK,CACX,wBAAwB,EACxB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAC1C,CAAC;QACF,OAAO,KAAK,CAAC;IACd,CAAC;AACF,CAAC;AAED,KAAK,UAAU,SAAS;IACvB,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC;QACtB,OAAO,IAAI,CAAC;IACb,CAAC;IAED,IAAI,CAAC;QACJ,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;QACnB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,gBAAgB,CAAC,CAAC;QAE7D,MAAM,MAAM,GAAG,MAAM,EAAE;aACrB,MAAM,CAAC,gBAAgB,CAAC;aACxB,GAAG,CAAC,EAAE,SAAS,EAAE,CAAC;aAClB,KAAK,CACL,GAAG,CACF,EAAE,CAAC,gBAAgB,CAAC,EAAE,EAAE,OAAO,CAAC,EAChC,EAAE,CAAC,gBAAgB,CAAC,QAAQ,EAAE,WAAW,CAAC,CAC1C,CACD;aACA,SAAS,CAAC,EAAE,EAAE,EAAE,gBAAgB,CAAC,EAAE,EAAE,CAAC,CAAC;QAEzC,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;IAC1B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,CAAC,KAAK,CACX,sBAAsB,EACtB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAC1C,CAAC;QACF,OAAO,KAAK,CAAC;IACd,CAAC;AACF,CAAC;AAED,KAAK,UAAU,WAAW;IACzB,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC;QACtB,OAAO;IACR,CAAC;IAED,IAAI,CAAC;QACJ,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;QACnB,MAAM,EAAE;aACN,MAAM,CAAC,gBAAgB,CAAC;aACxB,KAAK,CACL,GAAG,CACF,EAAE,CAAC,gBAAgB,CAAC,EAAE,EAAE,OAAO,CAAC,EAChC,EAAE,CAAC,gBAAgB,CAAC,QAAQ,EAAE,WAAW,CAAC,CAC1C,CACD,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,CAAC,KAAK,CACX,wBAAwB,EACxB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAC1C,CAAC;IACH,CAAC;AACF,CAAC;AAED,+EAA+E;AAC/E,4BAA4B;AAC5B,+EAA+E;AAE/E,SAAS,0BAA0B,CAClC,OAAe,EACf,MAAM,GAAG,IAAI,EACb,KAAK,GAAG,OAAO;IAEf,uCAAuC;IACvC,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,CAAC;IAC3D,+DAA+D;IAC/D,MAAM,MAAM,GAAG,WAAW,GAAG,CAAC,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IACnD,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;AAC5C,CAAC;AAED,+EAA+E;AAC/E,mBAAmB;AACnB,+EAA+E;AAE/E,6EAA6E;AAC7E,MAAM,CAAC,KAAK,UAAU,YAAY,CACjC,OAA+B;IAE/B,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC;QACtB,MAAM,CAAC,IAAI,CAAC,sDAAsD,CAAC,CAAC;QACpE,sDAAsD;QACtD,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAChD,wBAAwB;QACxB,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa;YACtC,CAAC,CAAC,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC,SAAS;YACvD,CAAC,CAAC,SAAS,CAAC;QAEb,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;QAClE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACrB,MAAM,CAAC,KAAK,CAAC,mCAAmC,EAAE,SAAS,EAAE;gBAC5D,GAAG,EAAE,OAAO,CAAC,GAAG;gBAChB,KAAK,EAAE,MAAM,CAAC,KAAK;aACnB,CAAC,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC;IACb,CAAC;IAED,IAAI,CAAC;QACJ,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;QAEnB,gEAAgE;QAChE,+DAA+D;QAC/D,MAAM,CAAC,QAAQ,CAAC,GAAG,MAAM,EAAE;aACzB,MAAM,CAAC,iBAAiB,CAAC;aACzB,MAAM,CAAC;YACP,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,6DAA6D;YAC7D,SAAS,EAAE,IAAI;YACf,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,CAAC;YACrC,WAAW,EAAE,IAAI,IAAI,EAAE,EAAE,0BAA0B;SACnD,CAAC;aACD,SAAS,CAAC,EAAE,EAAE,EAAE,iBAAiB,CAAC,EAAE,EAAE,CAAC,CAAC;QAE1C,IAAI,CAAC,QAAQ,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,+CAA+C,EAAE,SAAS,EAAE;gBACxE,GAAG,EAAE,OAAO,CAAC,GAAG;aAChB,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACb,CAAC;QAED,MAAM,CAAC,KAAK,CAAC,gBAAgB,EAAE;YAC9B,EAAE,EAAE,QAAQ,CAAC,EAAE;YACf,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK;SAC5B,CAAC,CAAC;QAEH,OAAO,QAAQ,CAAC,EAAE,CAAC;IACpB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,CAAC,KAAK,CACX,yBAAyB,EACzB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,EAC1C,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CACpB,CAAC;QACF,OAAO,IAAI,CAAC;IACb,CAAC;AACF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,SAAS,GAAG,EAAE;IACvD,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC;QACtB,OAAO,CAAC,CAAC;IACV,CAAC;IACD,IAAI,iBAAiB,EAAE,CAAC;QACvB,OAAO,CAAC,CAAC;IACV,CAAC;IACD,IAAI,CAAC;QACJ,iBAAiB,GAAG,IAAI,CAAC;QAEzB,sCAAsC;QACtC,MAAM,OAAO,GAAG,MAAM,cAAc,EAAE,CAAC;QACvC,IAAI,CAAC,OAAO,EAAE,CAAC;YACd,MAAM,CAAC,KAAK,CAAC,mDAAmD,CAAC,CAAC;YAClE,OAAO,CAAC,CAAC;QACV,CAAC;QAED,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;QACnB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QAEvB,kDAAkD;QAClD,MAAM,OAAO,GAAG,MAAM,EAAE;aACtB,MAAM,EAAE;aACR,IAAI,CAAC,iBAAiB,CAAC;aACvB,KAAK,CACL,GAAG,CACF,EAAE,CACD,EAAE,CAAC,iBAAiB,CAAC,MAAM,EAAE,SAAS,CAAC,EACvC,EAAE,CAAC,iBAAiB,CAAC,MAAM,EAAE,UAAU,CAAC,CACxC,EACD,GAAG,CAAC,iBAAiB,CAAC,WAAW,EAAE,GAAG,CAAC,EACvC,EAAE,CAAC,iBAAiB,CAAC,QAAQ,EAAE,iBAAiB,CAAC,WAAW,CAAC,CAC7D,CACD;aACA,KAAK,CAAC,SAAS,CAAC,CAAC;QAEnB,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,CAAC,CAAC;QACV,CAAC;QAED,IAAI,SAAS,GAAG,CAAC,CAAC;QAElB,KAAK,MAAM,QAAQ,IAAI,OAAO,EAAE,CAAC;YAChC,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAEjD,6CAA6C;YAC7C,IAAI,SAA6B,CAAC;YAClC,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;gBACpB,+BAA+B;gBAC/B,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE;qBACpB,MAAM,CAAC,EAAE,QAAQ,EAAE,aAAa,CAAC,QAAQ,EAAE,CAAC;qBAC5C,IAAI,CAAC,aAAa,CAAC;qBACnB,KAAK,CAAC,EAAE,CAAC,aAAa,CAAC,EAAE,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;qBAC3C,KAAK,CAAC,CAAC,CAAC,CAAC;gBAEX,gDAAgD;gBAChD,MAAM,iBAAiB,GAAG,kBAAkB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;gBAC5D,IAAI,iBAAiB,EAAE,oBAAoB,EAAE,CAAC;oBAC7C,SAAS,GAAG,WAAW,CACtB,OAAO,EACP,iBAAiB,CAAC,oBAAoB,CACtC,CAAC,SAAS,CAAC;gBACb,CAAC;YACF,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,QAAQ,CAAC,GAAG,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;YAEnE,MAAM,WAAW,GAAG,QAAQ,CAAC,QAAQ,GAAG,CAAC,CAAC;YAE1C,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,oBAAoB;gBACpB,MAAM,EAAE;qBACN,MAAM,CAAC,iBAAiB,CAAC;qBACzB,GAAG,CAAC;oBACJ,MAAM,EAAE,WAAW;oBACnB,QAAQ,EAAE,WAAW;oBACrB,cAAc,EAAE,MAAM,CAAC,UAAU;oBACjC,kBAAkB,EAAE,MAAM,CAAC,cAAc;oBACzC,WAAW,EAAE,IAAI,IAAI,EAAE;iBACvB,CAAC;qBACD,KAAK,CAAC,EAAE,CAAC,iBAAiB,CAAC,EAAE,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;gBAE/C,MAAM,CAAC,IAAI,CAAC,mBAAmB,EAAE;oBAChC,EAAE,EAAE,QAAQ,CAAC,EAAE;oBACf,GAAG,EAAE,QAAQ,CAAC,GAAG;oBACjB,QAAQ,EAAE,WAAW;oBACrB,cAAc,EAAE,MAAM,CAAC,cAAc;iBACrC,CAAC,CAAC;YACJ,CAAC;iBAAM,IAAI,WAAW,IAAI,QAAQ,CAAC,WAAW,EAAE,CAAC;gBAChD,uCAAuC;gBACvC,MAAM,EAAE;qBACN,MAAM,CAAC,iBAAiB,CAAC;qBACzB,GAAG,CAAC;oBACJ,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,WAAW;oBACrB,cAAc,EAAE,MAAM,CAAC,UAAU;oBACjC,kBAAkB,EAAE,MAAM,CAAC,cAAc;oBACzC,SAAS,EAAE,MAAM,CAAC,KAAK;iBACvB,CAAC;qBACD,KAAK,CAAC,EAAE,CAAC,iBAAiB,CAAC,EAAE,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;gBAE/C,MAAM,CAAC,KAAK,CAAC,qCAAqC,EAAE,SAAS,EAAE;oBAC9D,EAAE,EAAE,QAAQ,CAAC,EAAE;oBACf,GAAG,EAAE,QAAQ,CAAC,GAAG;oBACjB,QAAQ,EAAE,WAAW;oBACrB,KAAK,EAAE,MAAM,CAAC,KAAK;iBACnB,CAAC,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACP,mDAAmD;gBACnD,MAAM,SAAS,GAAG,0BAA0B,CAAC,WAAW,CAAC,CAAC;gBAC1D,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,CAAC;gBAEnD,MAAM,EAAE;qBACN,MAAM,CAAC,iBAAiB,CAAC;qBACzB,GAAG,CAAC;oBACJ,MAAM,EAAE,UAAU;oBAClB,QAAQ,EAAE,WAAW;oBACrB,cAAc,EAAE,MAAM,CAAC,UAAU;oBACjC,kBAAkB,EAAE,MAAM,CAAC,cAAc;oBACzC,SAAS,EAAE,MAAM,CAAC,KAAK;oBACvB,WAAW,EAAE,SAAS;iBACtB,CAAC;qBACD,KAAK,CAAC,EAAE,CAAC,iBAAiB,CAAC,EAAE,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;gBAE/C,MAAM,CAAC,IAAI,CAAC,2CAA2C,EAAE;oBACxD,EAAE,EAAE,QAAQ,CAAC,EAAE;oBACf,GAAG,EAAE,QAAQ,CAAC,GAAG;oBACjB,QAAQ,EAAE,WAAW;oBACrB,WAAW,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG;oBAC/C,KAAK,EAAE,MAAM,CAAC,KAAK;iBACnB,CAAC,CAAC;YACJ,CAAC;YAED,SAAS,EAAE,CAAC;YAEZ,+CAA+C;YAC/C,IAAI,SAAS,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;gBACzB,MAAM,SAAS,EAAE,CAAC;YACnB,CAAC;QACF,CAAC;QAED,OAAO,SAAS,CAAC;IAClB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,CAAC,KAAK,CACX,iCAAiC,EACjC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAC1C,CAAC;QACF,OAAO,CAAC,CAAC;IACV,CAAC;YAAS,CAAC;QACV,iBAAiB,GAAG,KAAK,CAAC;IAC3B,CAAC;AACF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,aAAa,GAAG,CAAC;IAC1D,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC;QACtB,OAAO,CAAC,CAAC;IACV,CAAC;IAED,IAAI,CAAC;QACJ,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;QACnB,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,aAAa,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAE1E,MAAM,MAAM,GAAG,MAAM,EAAE;aACrB,MAAM,CAAC,iBAAiB,CAAC;aACzB,KAAK,CACL,GAAG,CACF,EAAE,CACD,EAAE,CAAC,iBAAiB,CAAC,MAAM,EAAE,WAAW,CAAC,EACzC,EAAE,CAAC,iBAAiB,CAAC,MAAM,EAAE,QAAQ,CAAC,CACtC,EACD,GAAG,CAAC,iBAAiB,CAAC,SAAS,EAAE,MAAM,CAAC,CACxC,CACD;aACA,SAAS,CAAC,EAAE,EAAE,EAAE,iBAAiB,CAAC,EAAE,EAAE,CAAC,CAAC;QAE1C,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,CAAC,IAAI,CAAC,mCAAmC,EAAE;gBAChD,KAAK,EAAE,MAAM,CAAC,MAAM;gBACpB,aAAa;aACb,CAAC,CAAC;QACJ,CAAC;QAED,OAAO,MAAM,CAAC,MAAM,CAAC;IACtB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,CAAC,KAAK,CACX,iCAAiC,EACjC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAC1C,CAAC;QACF,OAAO,CAAC,CAAC;IACV,CAAC;AACF,CAAC;AAED,+EAA+E;AAC/E,4BAA4B;AAC5B,+EAA+E;AAE/E,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACtC,KAAa,EACb,KAKC;IAED,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC;QACtB,MAAM,CAAC,IAAI,CAAC,+CAA+C,CAAC,CAAC;QAC7D,OAAO;IACR,CAAC;IAED,IAAI,CAAC;QACJ,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;QAEnB,2DAA2D;QAC3D,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE;aACpB,MAAM,CAAC,EAAE,QAAQ,EAAE,aAAa,CAAC,QAAQ,EAAE,CAAC;aAC5C,IAAI,CAAC,aAAa,CAAC;aACnB,KAAK,CAAC,EAAE,CAAC,aAAa,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;aAClC,KAAK,CAAC,CAAC,CAAC,CAAC;QAEX,8CAA8C;QAC9C,MAAM,iBAAiB,GAAG,kBAAkB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAE5D,IAAI,CAAC,iBAAiB,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC;YAC/C,OAAO,CAAC,yBAAyB;QAClC,CAAC;QAED,MAAM,OAAO,GAAmB;YAC/B,KAAK,EAAE,SAAS,KAAK,CAAC,IAAI,EAAE;YAC5B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,IAAI,EAAE;gBACL,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,GAAG,KAAK,CAAC,QAAQ;aACjB;SACD,CAAC;QAEF,wCAAwC;QACxC,KAAK,MAAM,GAAG,IAAI,iBAAiB,CAAC,aAAa,EAAE,CAAC;YACnD,MAAM,YAAY,CAAC;gBAClB,KAAK;gBACL,GAAG;gBACH,OAAO;gBACP,aAAa,EAAE,iBAAiB,CAAC,oBAAoB;aACrD,CAAC,CAAC;QACJ,CAAC;QAED,MAAM,CAAC,KAAK,CAAC,uBAAuB,EAAE;YACrC,KAAK;YACL,SAAS,EAAE,KAAK,CAAC,IAAI;YACrB,YAAY,EAAE,iBAAiB,CAAC,aAAa,CAAC,MAAM;SACpD,CAAC,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,CAAC,KAAK,CACX,+BAA+B,EAC/B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,EAC1C,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,CAAC,IAAI,EAAE,CAChC,CAAC;IACH,CAAC;AACF,CAAC;AAED,+EAA+E;AAC/E,uBAAuB;AACvB,+EAA+E;AAE/E,IAAI,iBAAiB,GAA0C,IAAI,CAAC;AACpE,IAAI,mBAAmB,GAA0C,IAAI,CAAC;AAEtE,MAAM,UAAU,qBAAqB,CAAC,UAAU,GAAG,MAAM;IACxD,IAAI,iBAAiB,EAAE,CAAC;QACvB,OAAO,CAAC,kBAAkB;IAC3B,CAAC;IAED,iBAAiB,GAAG,WAAW,CAAC,GAAG,EAAE;QACpC,mBAAmB,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;YACrC,MAAM,CAAC,KAAK,CACX,yBAAyB,EACzB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAC1C,CAAC;QACH,CAAC,CAAC,CAAC;IACJ,CAAC,EAAE,UAAU,CAAC,CAAC;IAEf,kDAAkD;IAClD,mBAAmB,GAAG,WAAW,CAAC,GAAG,EAAE;QACtC,SAAS,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;YAC3B,MAAM,CAAC,KAAK,CACX,oBAAoB,EACpB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAC1C,CAAC;QACH,CAAC,CAAC,CAAC;IACJ,CAAC,EAAE,eAAe,CAAC,CAAC;IAEpB,qEAAqE;IACrE,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;QACtE,iBAAiB,CAAC,KAAK,EAAE,CAAC;QAC1B,mBAAmB,CAAC,KAAK,EAAE,CAAC;IAC7B,CAAC;IAED,MAAM,CAAC,IAAI,CAAC,2BAA2B,EAAE;QACxC,UAAU;QACV,UAAU,EAAE,WAAW;KACvB,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB;IACzC,IAAI,iBAAiB,EAAE,CAAC;QACvB,aAAa,CAAC,iBAAiB,CAAC,CAAC;QACjC,iBAAiB,GAAG,IAAI,CAAC;QACzB,qDAAqD;QACrD,MAAM,WAAW,EAAE,CAAC;QACpB,MAAM,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IAC1C,CAAC;IACD,IAAI,mBAAmB,EAAE,CAAC;QACzB,aAAa,CAAC,mBAAmB,CAAC,CAAC;QACnC,mBAAmB,GAAG,IAAI,CAAC;IAC5B,CAAC;AACF,CAAC;AAYD,MAAM,CAAC,KAAK,UAAU,sBAAsB;IAC3C,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC;QACtB,OAAO,EAAE,YAAY,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;IAC3D,CAAC;IAED,IAAI,CAAC;QACJ,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;QACnB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QAEvB,MAAM,CAAC,aAAa,CAAC,GAAG,MAAM,EAAE;aAC9B,MAAM,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC;aAC1B,IAAI,CAAC,iBAAiB,CAAC;aACvB,KAAK,CACL,GAAG,CACF,EAAE,CAAC,iBAAiB,CAAC,MAAM,EAAE,SAAS,CAAC,EACvC,EAAE,CACD,GAAG,CAAC,iBAAiB,CAAC,WAAW,EAAE,GAAG,CAAC,EACvC,MAAM,CAAC,iBAAiB,CAAC,WAAW,CAAC,CACrC,CACD,CACD,CAAC;QAEH,MAAM,CAAC,YAAY,CAAC,GAAG,MAAM,EAAE;aAC7B,MAAM,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC;aAC1B,IAAI,CAAC,iBAAiB,CAAC;aACvB,KAAK,CAAC,EAAE,CAAC,iBAAiB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;QAEhD,MAAM,CAAC,WAAW,CAAC,GAAG,MAAM,EAAE;aAC5B,MAAM,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC;aAC1B,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAE1B,OAAO;YACN,YAAY,EAAE,aAAa,EAAE,KAAK,IAAI,CAAC;YACvC,WAAW,EAAE,YAAY,EAAE,KAAK,IAAI,CAAC;YACrC,UAAU,EAAE,WAAW,EAAE,KAAK,IAAI,CAAC;SACnC,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,EAAE,YAAY,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;IAC3D,CAAC;AACF,CAAC","sourcesContent":["/**\n * Webhook Delivery Service\n *\n * Handles reliable webhook delivery with:\n * - HMAC signing for payload integrity\n * - Exponential backoff retries\n * - Database-backed delivery queue\n * - Delivery status tracking\n */\n\nimport crypto from \"node:crypto\";\nimport { and, count, eq, isNull, lt, lte, or } from \"drizzle-orm\";\nimport { getDb, isDbAvailable } from \"../db/client.js\";\nimport {\n\tdistributedLocks,\n\torganizations,\n\twebhookDeliveries,\n} from \"../db/schema.js\";\nimport { decryptOrgSettings } from \"../db/settings-encryption.js\";\nimport { fetchDownstream } from \"../utils/downstream-http.js\";\nimport { createLogger } from \"../utils/logger.js\";\n\n// Unique identifier for this process instance\nconst INSTANCE_ID = `${process.pid}-${crypto.randomUUID().slice(0, 8)}`;\n\nconst logger = createLogger(\"webhooks:delivery\");\nconst WEBHOOK_DOWNSTREAM_MAX_ATTEMPTS = 1;\n\n// ============================================================================\n// TYPES\n// ============================================================================\n\nexport interface WebhookPayload {\n\tevent: string;\n\ttimestamp: string;\n\tdata: Record<string, unknown>;\n}\n\nexport interface WebhookDeliveryOptions {\n\torgId: string;\n\turl: string;\n\tpayload: WebhookPayload;\n\tsigningSecret?: string;\n\tmaxAttempts?: number;\n}\n\nexport interface DeliveryResult {\n\tsuccess: boolean;\n\tstatusCode?: number;\n\tresponseTimeMs?: number;\n\terror?: string;\n}\n\nexport function buildWebhookDeliveryHeaders(\n\tsignature?: string,\n): Record<string, string> {\n\tconst headers: Record<string, string> = {\n\t\t\"Content-Type\": \"application/json\",\n\t\t\"User-Agent\": \"Maestro-Webhooks/1.0\",\n\t\t\"X-Webhook-Id\": crypto.randomUUID(),\n\t};\n\n\tif (signature) {\n\t\theaders[\"X-Composer-Signature\"] = signature;\n\t\theaders[\"X-Maestro-Signature\"] = signature;\n\t}\n\n\treturn headers;\n}\n\n// ============================================================================\n// HMAC SIGNING\n// ============================================================================\n\n/** Sign a webhook payload with HMAC-SHA256. Format: t=timestamp,v1=signature */\nexport function signPayload(\n\tpayload: string,\n\tsecret: string,\n\ttimestamp?: number,\n): { signature: string; timestamp: number } {\n\tconst ts = timestamp ?? Math.floor(Date.now() / 1000);\n\tconst signatureBase = `${ts}.${payload}`;\n\n\tconst signature = crypto\n\t\t.createHmac(\"sha256\", secret)\n\t\t.update(signatureBase)\n\t\t.digest(\"hex\");\n\n\treturn {\n\t\tsignature: `t=${ts},v1=${signature}`,\n\t\ttimestamp: ts,\n\t};\n}\n\nexport function verifySignature(\n\tpayload: string,\n\tsignature: string,\n\tsecret: string,\n\ttoleranceSeconds = 300,\n): { valid: boolean; error?: string } {\n\t// Parse signature: t=timestamp,v1=hash\n\tconst parts = signature.split(\",\");\n\tconst timestampPart = parts.find((p) => p.startsWith(\"t=\"));\n\tconst signaturePart = parts.find((p) => p.startsWith(\"v1=\"));\n\n\tif (!timestampPart || !signaturePart) {\n\t\treturn { valid: false, error: \"Invalid signature format\" };\n\t}\n\n\tconst timestamp = Number.parseInt(timestampPart.slice(2), 10);\n\tconst providedSig = signaturePart.slice(3);\n\n\tif (Number.isNaN(timestamp)) {\n\t\treturn { valid: false, error: \"Invalid timestamp\" };\n\t}\n\n\t// Check timestamp freshness\n\tconst now = Math.floor(Date.now() / 1000);\n\tif (Math.abs(now - timestamp) > toleranceSeconds) {\n\t\treturn { valid: false, error: \"Timestamp outside tolerance\" };\n\t}\n\n\t// Compute expected signature\n\tconst signatureBase = `${timestamp}.${payload}`;\n\tconst expected = crypto\n\t\t.createHmac(\"sha256\", secret)\n\t\t.update(signatureBase)\n\t\t.digest(\"hex\");\n\n\t// Timing-safe comparison\n\tconst providedBuf = Buffer.from(providedSig, \"hex\");\n\tconst expectedBuf = Buffer.from(expected, \"hex\");\n\n\tif (providedBuf.length !== expectedBuf.length) {\n\t\treturn { valid: false, error: \"Signature length mismatch\" };\n\t}\n\n\tif (!crypto.timingSafeEqual(providedBuf, expectedBuf)) {\n\t\treturn { valid: false, error: \"Signature mismatch\" };\n\t}\n\n\treturn { valid: true };\n}\n\n// ============================================================================\n// HTTP DELIVERY\n// ============================================================================\n\nasync function deliverHttp(\n\turl: string,\n\tpayload: string,\n\tsignature?: string,\n\ttimeoutMs = 30_000,\n): Promise<DeliveryResult> {\n\tconst startTime = Date.now();\n\tconst headers = buildWebhookDeliveryHeaders(signature);\n\n\ttry {\n\t\tconst response = await fetchDownstream(\n\t\t\turl,\n\t\t\t{\n\t\t\t\tmethod: \"POST\",\n\t\t\t\theaders,\n\t\t\t\tbody: payload,\n\t\t\t},\n\t\t\t{\n\t\t\t\tserviceName: \"webhook endpoint\",\n\t\t\t\tfailureMode: \"optional\",\n\t\t\t\ttimeoutMs,\n\t\t\t\t// The database queue owns webhook retry accounting.\n\t\t\t\tmaxAttempts: WEBHOOK_DOWNSTREAM_MAX_ATTEMPTS,\n\t\t\t},\n\t\t);\n\n\t\tconst responseTimeMs = Date.now() - startTime;\n\n\t\tif (response.ok) {\n\t\t\treturn {\n\t\t\t\tsuccess: true,\n\t\t\t\tstatusCode: response.status,\n\t\t\t\tresponseTimeMs,\n\t\t\t};\n\t\t}\n\n\t\treturn {\n\t\t\tsuccess: false,\n\t\t\tstatusCode: response.status,\n\t\t\tresponseTimeMs,\n\t\t\terror: `HTTP ${response.status}: ${response.statusText}`,\n\t\t};\n\t} catch (error) {\n\t\tconst responseTimeMs = Date.now() - startTime;\n\n\t\treturn {\n\t\t\tsuccess: false,\n\t\t\tresponseTimeMs,\n\t\t\terror: error instanceof Error ? error.message : \"Unknown error\",\n\t\t};\n\t}\n}\n\n// ============================================================================\n// DISTRIBUTED LOCKING\n// ============================================================================\n\nconst LOCK_ID = \"webhook_processor\";\nconst LOCK_DURATION_MS = 60_000; // 1 minute lock duration\nconst LOCK_RENEWAL_MS = 30_000; // Renew every 30 seconds\nlet processorInFlight = false;\n\nasync function tryAcquireLock(): Promise<boolean> {\n\tif (!isDbAvailable()) {\n\t\treturn true; // No DB, no locking - just process\n\t}\n\n\ttry {\n\t\tconst db = getDb();\n\t\tconst now = new Date();\n\t\tconst expiresAt = new Date(now.getTime() + LOCK_DURATION_MS);\n\n\t\t// Try to insert lock, or update if expired\n\t\tawait db\n\t\t\t.insert(distributedLocks)\n\t\t\t.values({\n\t\t\t\tid: LOCK_ID,\n\t\t\t\tholderId: INSTANCE_ID,\n\t\t\t\tacquiredAt: now,\n\t\t\t\texpiresAt,\n\t\t\t})\n\t\t\t.onConflictDoUpdate({\n\t\t\t\ttarget: distributedLocks.id,\n\t\t\t\tset: {\n\t\t\t\t\tholderId: INSTANCE_ID,\n\t\t\t\t\tacquiredAt: now,\n\t\t\t\t\texpiresAt,\n\t\t\t\t},\n\t\t\t\t// Only update if lock is expired or we already hold it\n\t\t\t\tsetWhere: or(\n\t\t\t\t\tlt(distributedLocks.expiresAt, now),\n\t\t\t\t\teq(distributedLocks.holderId, INSTANCE_ID),\n\t\t\t\t),\n\t\t\t});\n\n\t\t// Check if we got the lock\n\t\tconst [lock] = await db\n\t\t\t.select()\n\t\t\t.from(distributedLocks)\n\t\t\t.where(eq(distributedLocks.id, LOCK_ID))\n\t\t\t.limit(1);\n\n\t\treturn lock?.holderId === INSTANCE_ID;\n\t} catch (error) {\n\t\tlogger.error(\n\t\t\t\"Failed to acquire lock\",\n\t\t\terror instanceof Error ? error : undefined,\n\t\t);\n\t\treturn false;\n\t}\n}\n\nasync function renewLock(): Promise<boolean> {\n\tif (!isDbAvailable()) {\n\t\treturn true;\n\t}\n\n\ttry {\n\t\tconst db = getDb();\n\t\tconst now = new Date();\n\t\tconst expiresAt = new Date(now.getTime() + LOCK_DURATION_MS);\n\n\t\tconst result = await db\n\t\t\t.update(distributedLocks)\n\t\t\t.set({ expiresAt })\n\t\t\t.where(\n\t\t\t\tand(\n\t\t\t\t\teq(distributedLocks.id, LOCK_ID),\n\t\t\t\t\teq(distributedLocks.holderId, INSTANCE_ID),\n\t\t\t\t),\n\t\t\t)\n\t\t\t.returning({ id: distributedLocks.id });\n\n\t\treturn result.length > 0;\n\t} catch (error) {\n\t\tlogger.error(\n\t\t\t\"Failed to renew lock\",\n\t\t\terror instanceof Error ? error : undefined,\n\t\t);\n\t\treturn false;\n\t}\n}\n\nasync function releaseLock(): Promise<void> {\n\tif (!isDbAvailable()) {\n\t\treturn;\n\t}\n\n\ttry {\n\t\tconst db = getDb();\n\t\tawait db\n\t\t\t.delete(distributedLocks)\n\t\t\t.where(\n\t\t\t\tand(\n\t\t\t\t\teq(distributedLocks.id, LOCK_ID),\n\t\t\t\t\teq(distributedLocks.holderId, INSTANCE_ID),\n\t\t\t\t),\n\t\t\t);\n\t} catch (error) {\n\t\tlogger.error(\n\t\t\t\"Failed to release lock\",\n\t\t\terror instanceof Error ? error : undefined,\n\t\t);\n\t}\n}\n\n// ============================================================================\n// RETRY BACKOFF WITH JITTER\n// ============================================================================\n\nfunction calculateBackoffWithJitter(\n\tattempt: number,\n\tbaseMs = 1000,\n\tcapMs = 300_000,\n): number {\n\t// Exponential base: 2^attempt * baseMs\n\tconst exponential = Math.min(capMs, baseMs * 2 ** attempt);\n\t// Add jitter: random value between 50% and 150% of exponential\n\tconst jitter = exponential * (0.5 + Math.random());\n\treturn Math.min(capMs, Math.floor(jitter));\n}\n\n// ============================================================================\n// QUEUE OPERATIONS\n// ============================================================================\n\n/** Queue a webhook for delivery. Signature is generated at delivery time. */\nexport async function queueWebhook(\n\toptions: WebhookDeliveryOptions,\n): Promise<string | null> {\n\tif (!isDbAvailable()) {\n\t\tlogger.warn(\"Database unavailable, delivering webhook immediately\");\n\t\t// Fall back to immediate delivery without persistence\n\t\tconst payload = JSON.stringify(options.payload);\n\t\t// Sign at delivery time\n\t\tconst signature = options.signingSecret\n\t\t\t? signPayload(payload, options.signingSecret).signature\n\t\t\t: undefined;\n\n\t\tconst result = await deliverHttp(options.url, payload, signature);\n\t\tif (!result.success) {\n\t\t\tlogger.error(\"Immediate webhook delivery failed\", undefined, {\n\t\t\t\turl: options.url,\n\t\t\t\terror: result.error,\n\t\t\t});\n\t\t}\n\t\treturn null;\n\t}\n\n\ttry {\n\t\tconst db = getDb();\n\n\t\t// Don't pre-sign - signature will be generated at delivery time\n\t\t// This ensures the timestamp is fresh when the webhook is sent\n\t\tconst [delivery] = await db\n\t\t\t.insert(webhookDeliveries)\n\t\t\t.values({\n\t\t\t\torgId: options.orgId,\n\t\t\t\turl: options.url,\n\t\t\t\tpayload: options.payload,\n\t\t\t\t// Store the secret reference, not the pre-computed signature\n\t\t\t\tsignature: null,\n\t\t\t\tmaxAttempts: options.maxAttempts ?? 5,\n\t\t\t\tnextRetryAt: new Date(), // Immediate first attempt\n\t\t\t})\n\t\t\t.returning({ id: webhookDeliveries.id });\n\n\t\tif (!delivery) {\n\t\t\tlogger.error(\"Failed to queue webhook: no delivery returned\", undefined, {\n\t\t\t\turl: options.url,\n\t\t\t});\n\t\t\treturn null;\n\t\t}\n\n\t\tlogger.debug(\"Webhook queued\", {\n\t\t\tid: delivery.id,\n\t\t\turl: options.url,\n\t\t\tevent: options.payload.event,\n\t\t});\n\n\t\treturn delivery.id;\n\t} catch (error) {\n\t\tlogger.error(\n\t\t\t\"Failed to queue webhook\",\n\t\t\terror instanceof Error ? error : undefined,\n\t\t\t{ url: options.url },\n\t\t);\n\t\treturn null;\n\t}\n}\n\nexport async function processWebhookQueue(batchSize = 10): Promise<number> {\n\tif (!isDbAvailable()) {\n\t\treturn 0;\n\t}\n\tif (processorInFlight) {\n\t\treturn 0;\n\t}\n\ttry {\n\t\tprocessorInFlight = true;\n\n\t\t// Try to acquire the distributed lock\n\t\tconst hasLock = await tryAcquireLock();\n\t\tif (!hasLock) {\n\t\t\tlogger.debug(\"Another instance holds the webhook processor lock\");\n\t\t\treturn 0;\n\t\t}\n\n\t\tconst db = getDb();\n\t\tconst now = new Date();\n\n\t\t// Fetch pending webhooks ready for delivery/retry\n\t\tconst pending = await db\n\t\t\t.select()\n\t\t\t.from(webhookDeliveries)\n\t\t\t.where(\n\t\t\t\tand(\n\t\t\t\t\tor(\n\t\t\t\t\t\teq(webhookDeliveries.status, \"pending\"),\n\t\t\t\t\t\teq(webhookDeliveries.status, \"retrying\"),\n\t\t\t\t\t),\n\t\t\t\t\tlte(webhookDeliveries.nextRetryAt, now),\n\t\t\t\t\tlt(webhookDeliveries.attempts, webhookDeliveries.maxAttempts),\n\t\t\t\t),\n\t\t\t)\n\t\t\t.limit(batchSize);\n\n\t\tif (pending.length === 0) {\n\t\t\treturn 0;\n\t\t}\n\n\t\tlet processed = 0;\n\n\t\tfor (const delivery of pending) {\n\t\t\tconst payload = JSON.stringify(delivery.payload);\n\n\t\t\t// Sign at delivery time with fresh timestamp\n\t\t\tlet signature: string | undefined;\n\t\t\tif (delivery.orgId) {\n\t\t\t\t// Get the org's signing secret\n\t\t\t\tconst [org] = await db\n\t\t\t\t\t.select({ settings: organizations.settings })\n\t\t\t\t\t.from(organizations)\n\t\t\t\t\t.where(eq(organizations.id, delivery.orgId))\n\t\t\t\t\t.limit(1);\n\n\t\t\t\t// Decrypt settings to access the signing secret\n\t\t\t\tconst decryptedSettings = decryptOrgSettings(org?.settings);\n\t\t\t\tif (decryptedSettings?.webhookSigningSecret) {\n\t\t\t\t\tsignature = signPayload(\n\t\t\t\t\t\tpayload,\n\t\t\t\t\t\tdecryptedSettings.webhookSigningSecret,\n\t\t\t\t\t).signature;\n\t\t\t\t}\n\t\t\t}\n\n\t\t\tconst result = await deliverHttp(delivery.url, payload, signature);\n\n\t\t\tconst newAttempts = delivery.attempts + 1;\n\n\t\t\tif (result.success) {\n\t\t\t\t// Mark as delivered\n\t\t\t\tawait db\n\t\t\t\t\t.update(webhookDeliveries)\n\t\t\t\t\t.set({\n\t\t\t\t\t\tstatus: \"delivered\",\n\t\t\t\t\t\tattempts: newAttempts,\n\t\t\t\t\t\tlastStatusCode: result.statusCode,\n\t\t\t\t\t\tlastResponseTimeMs: result.responseTimeMs,\n\t\t\t\t\t\tdeliveredAt: new Date(),\n\t\t\t\t\t})\n\t\t\t\t\t.where(eq(webhookDeliveries.id, delivery.id));\n\n\t\t\t\tlogger.info(\"Webhook delivered\", {\n\t\t\t\t\tid: delivery.id,\n\t\t\t\t\turl: delivery.url,\n\t\t\t\t\tattempts: newAttempts,\n\t\t\t\t\tresponseTimeMs: result.responseTimeMs,\n\t\t\t\t});\n\t\t\t} else if (newAttempts >= delivery.maxAttempts) {\n\t\t\t\t// Max retries exceeded, mark as failed\n\t\t\t\tawait db\n\t\t\t\t\t.update(webhookDeliveries)\n\t\t\t\t\t.set({\n\t\t\t\t\t\tstatus: \"failed\",\n\t\t\t\t\t\tattempts: newAttempts,\n\t\t\t\t\t\tlastStatusCode: result.statusCode,\n\t\t\t\t\t\tlastResponseTimeMs: result.responseTimeMs,\n\t\t\t\t\t\tlastError: result.error,\n\t\t\t\t\t})\n\t\t\t\t\t.where(eq(webhookDeliveries.id, delivery.id));\n\n\t\t\t\tlogger.error(\"Webhook delivery failed permanently\", undefined, {\n\t\t\t\t\tid: delivery.id,\n\t\t\t\t\turl: delivery.url,\n\t\t\t\t\tattempts: newAttempts,\n\t\t\t\t\terror: result.error,\n\t\t\t\t});\n\t\t\t} else {\n\t\t\t\t// Schedule retry with exponential backoff + jitter\n\t\t\t\tconst backoffMs = calculateBackoffWithJitter(newAttempts);\n\t\t\t\tconst nextRetry = new Date(Date.now() + backoffMs);\n\n\t\t\t\tawait db\n\t\t\t\t\t.update(webhookDeliveries)\n\t\t\t\t\t.set({\n\t\t\t\t\t\tstatus: \"retrying\",\n\t\t\t\t\t\tattempts: newAttempts,\n\t\t\t\t\t\tlastStatusCode: result.statusCode,\n\t\t\t\t\t\tlastResponseTimeMs: result.responseTimeMs,\n\t\t\t\t\t\tlastError: result.error,\n\t\t\t\t\t\tnextRetryAt: nextRetry,\n\t\t\t\t\t})\n\t\t\t\t\t.where(eq(webhookDeliveries.id, delivery.id));\n\n\t\t\t\tlogger.warn(\"Webhook delivery failed, scheduling retry\", {\n\t\t\t\t\tid: delivery.id,\n\t\t\t\t\turl: delivery.url,\n\t\t\t\t\tattempts: newAttempts,\n\t\t\t\t\tnextRetryIn: `${Math.round(backoffMs / 1000)}s`,\n\t\t\t\t\terror: result.error,\n\t\t\t\t});\n\t\t\t}\n\n\t\t\tprocessed++;\n\n\t\t\t// Renew lock if we're processing many webhooks\n\t\t\tif (processed % 5 === 0) {\n\t\t\t\tawait renewLock();\n\t\t\t}\n\t\t}\n\n\t\treturn processed;\n\t} catch (error) {\n\t\tlogger.error(\n\t\t\t\"Failed to process webhook queue\",\n\t\t\terror instanceof Error ? error : undefined,\n\t\t);\n\t\treturn 0;\n\t} finally {\n\t\tprocessorInFlight = false;\n\t}\n}\n\nexport async function cleanupWebhookQueue(retentionDays = 7): Promise<number> {\n\tif (!isDbAvailable()) {\n\t\treturn 0;\n\t}\n\n\ttry {\n\t\tconst db = getDb();\n\t\tconst cutoff = new Date(Date.now() - retentionDays * 24 * 60 * 60 * 1000);\n\n\t\tconst result = await db\n\t\t\t.delete(webhookDeliveries)\n\t\t\t.where(\n\t\t\t\tand(\n\t\t\t\t\tor(\n\t\t\t\t\t\teq(webhookDeliveries.status, \"delivered\"),\n\t\t\t\t\t\teq(webhookDeliveries.status, \"failed\"),\n\t\t\t\t\t),\n\t\t\t\t\tlte(webhookDeliveries.createdAt, cutoff),\n\t\t\t\t),\n\t\t\t)\n\t\t\t.returning({ id: webhookDeliveries.id });\n\n\t\tif (result.length > 0) {\n\t\t\tlogger.info(\"Cleaned up old webhook deliveries\", {\n\t\t\t\tcount: result.length,\n\t\t\t\tretentionDays,\n\t\t\t});\n\t\t}\n\n\t\treturn result.length;\n\t} catch (error) {\n\t\tlogger.error(\n\t\t\t\"Failed to cleanup webhook queue\",\n\t\t\terror instanceof Error ? error : undefined,\n\t\t);\n\t\treturn 0;\n\t}\n}\n\n// ============================================================================\n// ALERT WEBHOOK INTEGRATION\n// ============================================================================\n\nexport async function sendAlertWebhooks(\n\torgId: string,\n\talert: {\n\t\ttype: string;\n\t\tseverity: string;\n\t\tmessage: string;\n\t\tmetadata?: Record<string, unknown>;\n\t},\n): Promise<void> {\n\tif (!isDbAvailable()) {\n\t\tlogger.warn(\"Database unavailable, skipping alert webhooks\");\n\t\treturn;\n\t}\n\n\ttry {\n\t\tconst db = getDb();\n\n\t\t// Get org settings to find webhook URLs and signing secret\n\t\tconst [org] = await db\n\t\t\t.select({ settings: organizations.settings })\n\t\t\t.from(organizations)\n\t\t\t.where(eq(organizations.id, orgId))\n\t\t\t.limit(1);\n\n\t\t// Decrypt settings to access sensitive fields\n\t\tconst decryptedSettings = decryptOrgSettings(org?.settings);\n\n\t\tif (!decryptedSettings?.alertWebhooks?.length) {\n\t\t\treturn; // No webhooks configured\n\t\t}\n\n\t\tconst payload: WebhookPayload = {\n\t\t\tevent: `alert.${alert.type}`,\n\t\t\ttimestamp: new Date().toISOString(),\n\t\t\tdata: {\n\t\t\t\tseverity: alert.severity,\n\t\t\t\tmessage: alert.message,\n\t\t\t\t...alert.metadata,\n\t\t\t},\n\t\t};\n\n\t\t// Queue webhooks to all configured URLs\n\t\tfor (const url of decryptedSettings.alertWebhooks) {\n\t\t\tawait queueWebhook({\n\t\t\t\torgId,\n\t\t\t\turl,\n\t\t\t\tpayload,\n\t\t\t\tsigningSecret: decryptedSettings.webhookSigningSecret,\n\t\t\t});\n\t\t}\n\n\t\tlogger.debug(\"Alert webhooks queued\", {\n\t\t\torgId,\n\t\t\talertType: alert.type,\n\t\t\twebhookCount: decryptedSettings.alertWebhooks.length,\n\t\t});\n\t} catch (error) {\n\t\tlogger.error(\n\t\t\t\"Failed to send alert webhooks\",\n\t\t\terror instanceof Error ? error : undefined,\n\t\t\t{ orgId, alertType: alert.type },\n\t\t);\n\t}\n}\n\n// ============================================================================\n// BACKGROUND PROCESSOR\n// ============================================================================\n\nlet processorInterval: ReturnType<typeof setInterval> | null = null;\nlet lockRenewalInterval: ReturnType<typeof setInterval> | null = null;\n\nexport function startWebhookProcessor(intervalMs = 10_000): void {\n\tif (processorInterval) {\n\t\treturn; // Already running\n\t}\n\n\tprocessorInterval = setInterval(() => {\n\t\tprocessWebhookQueue().catch((error) => {\n\t\t\tlogger.error(\n\t\t\t\t\"Webhook processor error\",\n\t\t\t\terror instanceof Error ? error : undefined,\n\t\t\t);\n\t\t});\n\t}, intervalMs);\n\n\t// Periodically renew the lock while we're running\n\tlockRenewalInterval = setInterval(() => {\n\t\trenewLock().catch((error) => {\n\t\t\tlogger.error(\n\t\t\t\t\"Lock renewal error\",\n\t\t\t\terror instanceof Error ? error : undefined,\n\t\t\t);\n\t\t});\n\t}, LOCK_RENEWAL_MS);\n\n\t// In test mode, unref intervals so they don't keep the process alive\n\tif (process.env.VITEST === \"true\" || process.env.NODE_ENV === \"test\") {\n\t\tprocessorInterval.unref();\n\t\tlockRenewalInterval.unref();\n\t}\n\n\tlogger.info(\"Webhook processor started\", {\n\t\tintervalMs,\n\t\tinstanceId: INSTANCE_ID,\n\t});\n}\n\nexport async function stopWebhookProcessor(): Promise<void> {\n\tif (processorInterval) {\n\t\tclearInterval(processorInterval);\n\t\tprocessorInterval = null;\n\t\t// Release the lock so another instance can take over\n\t\tawait releaseLock();\n\t\tlogger.info(\"Webhook processor stopped\");\n\t}\n\tif (lockRenewalInterval) {\n\t\tclearInterval(lockRenewalInterval);\n\t\tlockRenewalInterval = null;\n\t}\n}\n\n// ============================================================================\n// METRICS\n// ============================================================================\n\nexport interface WebhookQueueMetrics {\n\tpendingCount: number;\n\tfailedCount: number;\n\ttotalCount: number;\n}\n\nexport async function getWebhookQueueMetrics(): Promise<WebhookQueueMetrics> {\n\tif (!isDbAvailable()) {\n\t\treturn { pendingCount: 0, failedCount: 0, totalCount: 0 };\n\t}\n\n\ttry {\n\t\tconst db = getDb();\n\t\tconst now = new Date();\n\n\t\tconst [pendingResult] = await db\n\t\t\t.select({ value: count() })\n\t\t\t.from(webhookDeliveries)\n\t\t\t.where(\n\t\t\t\tand(\n\t\t\t\t\teq(webhookDeliveries.status, \"pending\"),\n\t\t\t\t\tor(\n\t\t\t\t\t\tlte(webhookDeliveries.nextRetryAt, now),\n\t\t\t\t\t\tisNull(webhookDeliveries.nextRetryAt),\n\t\t\t\t\t),\n\t\t\t\t),\n\t\t\t);\n\n\t\tconst [failedResult] = await db\n\t\t\t.select({ value: count() })\n\t\t\t.from(webhookDeliveries)\n\t\t\t.where(eq(webhookDeliveries.status, \"failed\"));\n\n\t\tconst [totalResult] = await db\n\t\t\t.select({ value: count() })\n\t\t\t.from(webhookDeliveries);\n\n\t\treturn {\n\t\t\tpendingCount: pendingResult?.value ?? 0,\n\t\t\tfailedCount: failedResult?.value ?? 0,\n\t\t\ttotalCount: totalResult?.value ?? 0,\n\t\t};\n\t} catch {\n\t\treturn { pendingCount: 0, failedCount: 0, totalCount: 0 };\n\t}\n}\n"]}

package/node_modules/@bufbuild/protobuf/dist/cjs/descriptors.d.ts

@@ -114,7 +114,7 @@ export interface DescEnum {
      * A prefix shared by all enum values.
      * For example, `my_enum_` for `enum MyEnum {MY_ENUM_A=0; MY_ENUM_B=1;}`
      */
-    readonly sharedPrefix?: string;
+    readonly sharedPrefix?: string | undefined;
     /**
      * Marked as deprecated in the protobuf source.
      */
@@ -192,8 +192,8 @@ export interface DescMessage {
      */
     readonly oneofs: DescOneof[];
     /**
-     * Fields and oneof groups for this message, ordered by their appearance in the
-     * protobuf source.
+     * Standalone fields and oneof groups for this message, ordered by
+     * their appearance in the protobuf source.
      */
     readonly members: (DescField | DescOneof)[];
     /**
@@ -283,6 +283,13 @@ interface descFieldAndExtensionShared {
      * See https://protobuf.dev/programming-guides/field_presence/
      */
     readonly presence: SupportedFieldPresence;
+    /**
+     * Whether to reject invalid UTF-8 when reading this field from the binary
+     * wire format. Reflects the resolved `utf8_validation` feature: true for
+     * VERIFY (proto3 and editions 2023+ default), false for NONE (proto2
+     * default).
+     */
+    readonly utf8Validation: boolean;
     /**
      * The compiler-generated descriptor.
      */
@@ -620,8 +627,8 @@ export interface DescMethod {
  */
 export interface DescComments {
     readonly leadingDetached: readonly string[];
-    readonly leading?: string;
-    readonly trailing?: string;
+    readonly leading?: string | undefined;
+    readonly trailing?: string | undefined;
     readonly sourcePath: readonly number[];
 }
 export {};

package/node_modules/@bufbuild/protobuf/dist/cjs/from-binary.js

@@ -94,7 +94,7 @@ function readField(message, reader, field, wireType, options) {
     var _a;
     switch (field.fieldKind) {
         case "scalar":
-            message.set(field, readScalar(reader, field.scalar));
+            message.set(field, readScalar(reader, field.scalar, field.utf8Validation));
             break;
         case "enum":
             const val = readScalar(reader, descriptors_js_1.ScalarType.INT32);
@@ -144,12 +144,12 @@ function readMapEntry(reader, map, options) {
         const [fieldNo] = reader.tag();
         switch (fieldNo) {
             case 1:
-                key = readScalar(reader, field.mapKey);
+                key = readScalar(reader, field.mapKey, field.utf8Validation);
                 break;
             case 2:
                 switch (field.mapKind) {
                     case "scalar":
-                        val = readScalar(reader, field.scalar);
+                        val = readScalar(reader, field.scalar, field.utf8Validation);
                         break;
                     case "enum":
                         val = reader.int32();
@@ -191,12 +191,12 @@ function readListField(reader, wireType, list, options) {
         scalarType != descriptors_js_1.ScalarType.STRING &&
         scalarType != descriptors_js_1.ScalarType.BYTES;
     if (!packed) {
-        list.add(readScalar(reader, scalarType));
+        list.add(readScalar(reader, scalarType, field.utf8Validation));
         return;
     }
     const e = reader.uint32() + reader.pos;
     while (reader.pos < e) {
-        list.add(readScalar(reader, scalarType));
+        list.add(readScalar(reader, scalarType, field.utf8Validation));
     }
 }
 function readMessageField(reader, options, field, mergeMessage) {
@@ -205,10 +205,10 @@ function readMessageField(reader, options, field, mergeMessage) {
     readMessage(message, reader, options, delimited, delimited ? field.number : reader.uint32());
     return message;
 }
-function readScalar(reader, type) {
+function readScalar(reader, type, validateUtf8 = false) {
     switch (type) {
         case descriptors_js_1.ScalarType.STRING:
-            return reader.string();
+            return reader.string(validateUtf8);
         case descriptors_js_1.ScalarType.BOOL:
             return reader.bool();
         case descriptors_js_1.ScalarType.DOUBLE:

package/node_modules/@bufbuild/protobuf/dist/cjs/from-json.d.ts

@@ -16,7 +16,7 @@ export interface JsonReadOptions {
      * This option is required to read `google.protobuf.Any` and extensions
      * from JSON format.
      */
-    registry?: Registry;
+    registry?: Registry | undefined;
 }
 /**
  * Parse a message from a JSON string.

package/node_modules/@bufbuild/protobuf/dist/cjs/from-json.js

@@ -491,7 +491,7 @@ function anyFromJson(any, json, opts) {
         throw new Error(`cannot decode message ${any.$typeName} from JSON: ${typeUrl} is not in the type registry`);
     }
     const msg = (0, reflect_js_1.reflect)(desc);
-    if (typeName.startsWith("google.protobuf.") &&
+    if ((0, index_js_1.hasCustomJsonRepresentation)(desc) &&
         Object.prototype.hasOwnProperty.call(json, "value")) {
         const value = json.value;
         readMessage(msg, value, opts);

package/node_modules/@bufbuild/protobuf/dist/cjs/reflect/path.d.ts

@@ -89,7 +89,7 @@ export declare function buildPath(schema: DescMessage): PathBuilder;
  * paths that refer to an extension.
  */
 export declare function parsePath(schema: DescMessage, path: string, options?: {
-    registry?: Registry;
+    registry?: Registry | undefined;
 }): Path;
 /**
  * Stringify a path.

package/node_modules/@bufbuild/protobuf/dist/cjs/registry.js

@@ -197,6 +197,8 @@ function initBaseRegistry(inputs) {
 const EDITION_PROTO2 = 998;
 // bootstrap-inject google.protobuf.Edition.EDITION_PROTO3: const $name: Edition.$localName = $number;
 const EDITION_PROTO3 = 999;
+// bootstrap-inject google.protobuf.Edition.EDITION_UNSTABLE: const $name: Edition.$localName = $number;
+const EDITION_UNSTABLE = 9999;
 // bootstrap-inject google.protobuf.FieldDescriptorProto.Type.TYPE_STRING: const $name: FieldDescriptorProto_Type.$localName = $number;
 const TYPE_STRING = 9;
 // bootstrap-inject google.protobuf.FieldDescriptorProto.Type.TYPE_GROUP: const $name: FieldDescriptorProto_Type.$localName = $number;
@@ -227,9 +229,11 @@ const PACKED = 1;
 const DELIMITED = 2;
 // bootstrap-inject google.protobuf.FeatureSet.EnumType.OPEN: const $name: FeatureSet_EnumType.$localName = $number;
 const OPEN = 1;
+// bootstrap-inject google.protobuf.FeatureSet.Utf8Validation.VERIFY: const $name: FeatureSet_Utf8Validation.$localName = $number;
+const VERIFY = 2;
 // biome-ignore format: want this to read well
 // bootstrap-inject defaults: EDITION_PROTO2 to EDITION_2024: export const minimumEdition: SupportedEdition = $minimumEdition, maximumEdition: SupportedEdition = $maximumEdition;
-// generated from protoc v33.2
+// generated from protoc v34.0
 exports.minimumEdition = 998, exports.maximumEdition = 1001;
 const featureDefaults = {
     // EDITION_PROTO2
@@ -568,6 +572,7 @@ function newField(proto, parentOrFile, reg, oneof, mapEntries) {
         message: undefined,
         enum: undefined,
         presence: getFieldPresence(proto, oneof, isExtension, parentOrFile),
+        utf8Validation: isUtf8Validated(proto, parentOrFile),
         listKind: undefined,
         mapKind: undefined,
         mapKey: undefined,
@@ -696,6 +701,12 @@ function getFileEdition(proto) {
         case "proto3":
             return EDITION_PROTO3;
         case "editions":
+            // EDITION_UNSTABLE is a sandbox for in-development features. Collapse
+            // it to maximumEdition so SupportedEdition and feature resolution do
+            // not leak the test-only edition to users.
+            if (proto.edition === EDITION_UNSTABLE) {
+                return exports.maximumEdition;
+            }
             if (proto.edition in featureDefaults) {
                 return proto.edition;
             }
@@ -891,6 +902,18 @@ function isDelimitedEncoding(proto, parent) {
             parent,
         }));
 }
+/**
+ * Reject invalid UTF-8 when reading string fields from the binary wire format?
+ * Driven by the resolved `utf8_validation` feature: VERIFY (proto3 / editions
+ * 2023+ default) enforces; NONE (proto2 default) does not.
+ */
+function isUtf8Validated(proto, parent) {
+    return (VERIFY ==
+        resolveFeature("utf8Validation", {
+            proto,
+            parent,
+        }));
+}
 function resolveFeature(name, ref) {
     var _a, _b;
     const featureSet = (_a = ref.proto.options) === null || _a === void 0 ? void 0 : _a.features;

package/node_modules/@bufbuild/protobuf/dist/cjs/to-json.d.ts

@@ -32,7 +32,7 @@ export interface JsonWriteOptions {
      * This option is required to write `google.protobuf.Any` and extensions
      * to JSON format.
      */
-    registry?: Registry;
+    registry?: Registry | undefined;
 }
 /**
  * Options for serializing to JSON.

package/node_modules/@bufbuild/protobuf/dist/cjs/to-json.js

@@ -226,10 +226,12 @@ function scalarToJson(field, value) {
         case descriptors_js_1.ScalarType.INT64:
         case descriptors_js_1.ScalarType.SFIXED64:
         case descriptors_js_1.ScalarType.SINT64:
-            if (typeof value != "bigint" && typeof value != "string") {
-                throw new Error(`cannot encode ${field} to JSON: ${(_e = (0, reflect_check_js_1.checkField)(field, value)) === null || _e === void 0 ? void 0 : _e.message}`);
+            if (typeof value == "bigint" ||
+                typeof value == "string" ||
+                (typeof value == "number" && Number.isInteger(value))) {
+                return value.toString();
             }
-            return value.toString();
+            throw new Error(`cannot encode ${field} to JSON: ${(_e = (0, reflect_check_js_1.checkField)(field, value)) === null || _e === void 0 ? void 0 : _e.message}`);
         // bytes: JSON value will be the data encoded as a string using standard base64 encoding with paddings.
         // Either standard or URL-safe base64 encoding with/without paddings are accepted.
         case descriptors_js_1.ScalarType.BYTES:
@@ -286,13 +288,10 @@ function anyToJson(val, opts) {
     if (!desc || !message) {
         throw new Error(`cannot encode message ${val.$typeName} to JSON: "${val.typeUrl}" is not in the type registry`);
     }
-    let json = reflectToJson((0, reflect_js_1.reflect)(desc, message), opts);
-    if (desc.typeName.startsWith("google.protobuf.") ||
-        json === null ||
-        Array.isArray(json) ||
-        typeof json !== "object") {
-        json = { value: json };
-    }
+    const reflected = (0, reflect_js_1.reflect)(desc, message);
+    const json = (0, wrappers_js_1.hasCustomJsonRepresentation)(desc)
+        ? { value: tryWktToJson(reflected, opts) }
+        : reflectToJson(reflected, opts);
     json["@type"] = val.typeUrl;
     return json;
 }

package/node_modules/@bufbuild/protobuf/dist/cjs/types.d.ts

@@ -15,7 +15,7 @@ export type Message<TypeName extends string = string> = {
     /**
      * Unknown fields and extensions stored on the message.
      */
-    $unknown?: UnknownField[];
+    $unknown?: UnknownField[] | undefined;
 };
 /**
  * Extract the message type from a message descriptor.

package/node_modules/@bufbuild/protobuf/dist/cjs/wire/binary-encoding.d.ts

@@ -63,7 +63,7 @@ export declare class BinaryWriter {
     private readonly encodeUtf8;
     /**
      * We cannot allocate a buffer for the entire output
-     * because we don't know it's size.
+     * because we don't know its size.
      *
      * So we collect smaller chunks of known size and
      * concat them later.
@@ -120,7 +120,7 @@ export declare class BinaryWriter {
      */
     int32(value: number): this;
     /**
-     * Write a `bool` value, a variant.
+     * Write a `bool` value, a varint.
      */
     bool(value: boolean): this;
     /**
@@ -152,7 +152,7 @@ export declare class BinaryWriter {
      */
     sint32(value: number): this;
     /**
-     * Write a `fixed64` value, a signed, fixed-length 64-bit integer.
+     * Write a `sfixed64` value, a signed, fixed-length 64-bit integer.
      */
     sfixed64(value: string | number | bigint): this;
     /**
@@ -184,9 +184,10 @@ export declare class BinaryReader {
     readonly len: number;
     protected readonly buf: Uint8Array;
     private readonly view;
-    constructor(buf: Uint8Array, decodeUtf8?: (bytes: Uint8Array) => string);
+    constructor(buf: Uint8Array, decodeUtf8?: (bytes: Uint8Array, strict?: boolean) => string);
     /**
-     * Reads a tag - field number and wire type.
+     * Reads a tag - field number and wire type. Tags are uint32 varints; values
+     * that do not fit in uint32 are rejected.
      */
     tag(): [number, WireType];
     /**
@@ -258,7 +259,8 @@ export declare class BinaryReader {
      */
     bytes(): Uint8Array;
     /**
-     * Read a `string` field, length-delimited data converted to UTF-8 text.
+     * Read a `string` field, length-delimited data converted to UTF-8 text. If
+     * `strict` is true, throw on invalid UTF-8 instead of substituting U+FFFD.
      */
-    string(): string;
+    string(strict?: boolean): string;
 }

package/node_modules/@bufbuild/protobuf/dist/cjs/wire/binary-encoding.js

@@ -181,7 +181,7 @@ class BinaryWriter {
         return this;
     }
     /**
-     * Write a `bool` value, a variant.
+     * Write a `bool` value, a varint.
      */
     bool(value) {
         this.buf.push(value ? 1 : 0);
@@ -248,7 +248,7 @@ class BinaryWriter {
         return this;
     }
     /**
-     * Write a `fixed64` value, a signed, fixed-length 64-bit integer.
+     * Write a `sfixed64` value, a signed, fixed-length 64-bit integer.
      */
     sfixed64(value) {
         let chunk = new Uint8Array(8), view = new DataView(chunk.buffer), tc = proto_int64_js_1.protoInt64.enc(value);
@@ -307,12 +307,21 @@ class BinaryReader {
         this.view = new DataView(buf.buffer, buf.byteOffset, buf.byteLength);
     }
     /**
-     * Reads a tag - field number and wire type.
+     * Reads a tag - field number and wire type. Tags are uint32 varints; values
+     * that do not fit in uint32 are rejected.
      */
     tag() {
-        let tag = this.uint32(), fieldNo = tag >>> 3, wireType = tag & 7;
-        if (fieldNo <= 0 || wireType < 0 || wireType > 5)
+        const start = this.pos;
+        const tag = this.uint32();
+        const bytesRead = this.pos - start;
+        if (bytesRead > 5 || (bytesRead == 5 && this.buf[this.pos - 1] > 0x0f)) {
+            throw new Error("illegal tag: varint overflows uint32");
+        }
+        const fieldNo = tag >>> 3;
+        const wireType = tag & 7;
+        if (fieldNo <= 0 || wireType > 5) {
             throw new Error("illegal tag: field no " + fieldNo + " wire type " + wireType);
+        }
         return [fieldNo, wireType];
     }
     /**
@@ -458,10 +467,11 @@ class BinaryReader {
         return this.buf.subarray(start, start + len);
     }
     /**
-     * Read a `string` field, length-delimited data converted to UTF-8 text.
+     * Read a `string` field, length-delimited data converted to UTF-8 text. If
+     * `strict` is true, throw on invalid UTF-8 instead of substituting U+FFFD.
      */
-    string() {
-        return this.decodeUtf8(this.bytes());
+    string(strict) {
+        return this.decodeUtf8(this.bytes(), strict);
     }
 }
 exports.BinaryReader = BinaryReader;

package/node_modules/@bufbuild/protobuf/dist/cjs/wire/text-encoding.d.ts

@@ -8,9 +8,11 @@ interface TextEncoding {
      */
     encodeUtf8: (text: string) => Uint8Array<ArrayBuffer>;
     /**
-     * Decode UTF-8 text from binary.
+     * Decode UTF-8 text from binary. If `strict` is true, throw on invalid byte
+     * sequences instead of silently substituting U+FFFD. Implementations that
+     * do not support strict decoding may ignore the flag.
      */
-    decodeUtf8: (bytes: Uint8Array) => string;
+    decodeUtf8: (bytes: Uint8Array, strict?: boolean) => string;
 }
 /**
  * Protobuf-ES requires the Text Encoding API to convert UTF-8 from and to

package/node_modules/@bufbuild/protobuf/dist/cjs/wire/text-encoding.js

@@ -32,11 +32,18 @@ function getTextEncoding() {
     if (globalThis[symbol] == undefined) {
         const te = new globalThis.TextEncoder();
         const td = new globalThis.TextDecoder();
+        let tdStrict;
         globalThis[symbol] = {
             encodeUtf8(text) {
                 return te.encode(text);
             },
-            decodeUtf8(bytes) {
+            decodeUtf8(bytes, strict) {
+                if (strict) {
+                    if (tdStrict === undefined) {
+                        tdStrict = new globalThis.TextDecoder("utf-8", { fatal: true });
+                    }
+                    return tdStrict.decode(bytes);
+                }
                 return td.decode(bytes);
             },
             checkUtf8(text) {

package/node_modules/@bufbuild/protobuf/dist/cjs/wkt/gen/google/protobuf/api_pb.d.ts

@@ -75,7 +75,7 @@ export type Api = Message<"google.protobuf.Api"> & {
      *
      * @generated from field: google.protobuf.SourceContext source_context = 5;
      */
-    sourceContext?: SourceContext;
+    sourceContext?: SourceContext | undefined;
     /**
      * Included interfaces. See [Mixin][].
      *

package/node_modules/@bufbuild/protobuf/dist/cjs/wkt/gen/google/protobuf/compiler/plugin_pb.d.ts

@@ -121,7 +121,7 @@ export type CodeGeneratorRequest = Message<"google.protobuf.compiler.CodeGenerat
      *
      * @generated from field: optional google.protobuf.compiler.Version compiler_version = 3;
      */
-    compilerVersion?: Version;
+    compilerVersion?: Version | undefined;
 };
 /**
  * An encoded CodeGeneratorRequest is written to the plugin's stdin.
@@ -371,7 +371,7 @@ export type CodeGeneratorResponse_File = Message<"google.protobuf.compiler.CodeG
      *
      * @generated from field: optional google.protobuf.GeneratedCodeInfo generated_code_info = 16;
      */
-    generatedCodeInfo?: GeneratedCodeInfo;
+    generatedCodeInfo?: GeneratedCodeInfo | undefined;
 };
 /**
  * Represents a single generated file.