@framers/agentos-ext-github 0.2.2 → 0.3.0

package/dist/__tests__/events.test.js

@@ -0,0 +1,304 @@
+/**
+ * @fileoverview A GitHub App's webhook deliveries read as typed events, over deliveries built the way GitHub sends
+ * them: the `X-GitHub-Event`, `X-GitHub-Delivery` and `X-Hub-Signature-256` headers and a JSON body whose payloads
+ * keep the fields of GitHub's push, installation, installation_repositories, installation_target and ping events
+ * (https://docs.github.com/en/webhooks/webhook-events-and-payloads), each signed with the webhook's secret.
+ */
+import { createHmac } from 'node:crypto';
+import { describe, expect, it } from 'vitest';
+import { readWebhookDelivery, readWebhookRequest, WebhookDeliveryRefused } from '../documents/index.js';
+const SECRET = 'test-webhook-secret';
+const DELIVERY_ID = '72d3162e-cc78-11e3-81ab-4c9367dc0958';
+const C1 = '1'.repeat(40);
+const C2 = '2'.repeat(40);
+const ZERO = '0'.repeat(40);
+/** The fields GitHub sends for the person who caused an event; the reader takes none of them. */
+const SENDER = { login: 'test-person', id: 501, type: 'User' };
+/** A push to the handbook's default branch, as an app's delivery carries it. */
+const PUSH = {
+    ref: 'refs/heads/main',
+    before: C1,
+    after: C2,
+    repository: {
+        id: 77,
+        node_id: 'R_test77',
+        name: 'handbook',
+        full_name: 'acme-team/handbook',
+        private: true,
+        default_branch: 'main',
+        master_branch: 'main',
+    },
+    pusher: { name: 'test-person', email: null },
+    sender: SENDER,
+    installation: { id: 5, node_id: 'I_test5' },
+    created: false,
+    deleted: false,
+    forced: false,
+    base_ref: null,
+    compare: `https://github.com/acme-team/handbook/compare/${C1.slice(0, 12)}...${C2.slice(0, 12)}`,
+    commits: [],
+    head_commit: null,
+};
+/** The installation of the app on the acme-team organization, on a selection of its repositories. */
+const INSTALLATION = {
+    id: 5,
+    account: { login: 'acme-team', id: 901, type: 'Organization' },
+    repository_selection: 'selected',
+    app_id: 1,
+    target_type: 'Organization',
+};
+/** A repository as an installation event lists it. */
+function listed(id, fullName) {
+    return { id, node_id: `R_test${id}`, name: fullName.split('/')[1], full_name: fullName, private: true };
+}
+/** A delivery as GitHub sends it: the event's name, the delivery's id and the body's signature under `secret`. */
+function delivery(event, payload, { id = DELIVERY_ID, secret = SECRET, body } = {}) {
+    const bytes = body ?? new TextEncoder().encode(JSON.stringify(payload));
+    const headers = new Headers({
+        'content-type': 'application/json',
+        'user-agent': 'GitHub-Hookshot/044aadd',
+        'x-hub-signature-256': `sha256=${createHmac('sha256', secret).update(bytes).digest('hex')}`,
+    });
+    if (event !== null)
+        headers.set('x-github-event', event);
+    if (id !== null)
+        headers.set('x-github-delivery', id);
+    return { headers, body: bytes };
+}
+/** What `readWebhookDelivery` refused the delivery for, or the delivery it read. */
+function refusalOf(read) {
+    try {
+        return read();
+    }
+    catch (error) {
+        if (error instanceof WebhookDeliveryRefused)
+            return error.reason;
+        throw error;
+    }
+}
+describe("a GitHub App's webhook deliveries", () => {
+    it('reads a push: the installation, the repository and its default branch, the ref and the commits around it', () => {
+        const read = readWebhookDelivery(delivery('push', PUSH), SECRET);
+        expect(read).toEqual({
+            id: DELIVERY_ID,
+            name: 'push',
+            event: {
+                kind: 'push',
+                installationId: 5,
+                repository: { id: 77, fullName: 'acme-team/handbook', defaultBranch: 'main' },
+                ref: 'refs/heads/main',
+                before: C1,
+                after: C2,
+                created: false,
+                deleted: false,
+                forced: false,
+                toDefaultBranch: true,
+            },
+        });
+    });
+    it('marks a push that moved the default branch, and no other: a force push counts, a branch, a tag and a deletion do not', () => {
+        const cases = [
+            [{ forced: true }, true],
+            [{ ref: 'refs/heads/feature' }, false],
+            [{ ref: 'refs/tags/v1.0.0' }, false],
+            [{ ref: 'refs/heads/mainline' }, false],
+            [{ deleted: true, after: ZERO }, false],
+            [{ created: true, before: ZERO, ref: 'refs/heads/draft' }, false],
+        ];
+        for (const [change, toDefaultBranch] of cases) {
+            const read = readWebhookDelivery(delivery('push', { ...PUSH, ...change }), SECRET);
+            expect(read.event.kind).toBe('push');
+            expect(read.event.kind === 'push' && read.event.toDefaultBranch).toBe(toDefaultBranch);
+        }
+    });
+    it("reads each of an installation's actions, with the account and the repositories a new installation lists", () => {
+        const created = readWebhookDelivery(delivery('installation', {
+            action: 'created',
+            installation: INSTALLATION,
+            repositories: [listed(77, 'acme-team/handbook'), listed(78, 'acme-team/large')],
+            requester: null,
+            sender: SENDER,
+        }), SECRET);
+        expect(created.event).toEqual({
+            kind: 'installation',
+            action: 'created',
+            installationId: 5,
+            account: { login: 'acme-team', id: 901 },
+            repositories: [
+                { id: 77, fullName: 'acme-team/handbook' },
+                { id: 78, fullName: 'acme-team/large' },
+            ],
+        });
+        for (const action of ['deleted', 'suspend', 'unsuspend', 'new_permissions_accepted']) {
+            const read = readWebhookDelivery(delivery('installation', { action, installation: INSTALLATION, sender: SENDER }), SECRET);
+            expect(read.event).toEqual({ kind: 'installation', action, installationId: 5, account: { login: 'acme-team', id: 901 }, repositories: [] });
+        }
+        const enterprise = readWebhookDelivery(delivery('installation', { action: 'suspend', installation: { ...INSTALLATION, account: { slug: 'acme-enterprise', id: 902 } }, sender: SENDER }), SECRET);
+        expect(enterprise.event).toMatchObject({ kind: 'installation', account: { login: 'acme-enterprise', id: 902 } });
+        const unknown = readWebhookDelivery(delivery('installation', { action: 'transferred', installation: INSTALLATION, sender: SENDER }), SECRET);
+        expect(unknown).toEqual({ id: DELIVERY_ID, name: 'installation', event: { kind: 'other' } });
+    });
+    it("reads the repositories added to and removed from an installation, and the selection they leave", () => {
+        const added = readWebhookDelivery(delivery('installation_repositories', {
+            action: 'added',
+            installation: INSTALLATION,
+            repository_selection: 'selected',
+            repositories_added: [listed(79, 'acme-team/notes')],
+            repositories_removed: [],
+            requester: null,
+            sender: SENDER,
+        }), SECRET);
+        expect(added.event).toEqual({
+            kind: 'installation_repositories',
+            action: 'added',
+            installationId: 5,
+            selection: 'selected',
+            added: [{ id: 79, fullName: 'acme-team/notes' }],
+            removed: [],
+        });
+        const removed = readWebhookDelivery(delivery('installation_repositories', {
+            action: 'removed',
+            installation: INSTALLATION,
+            repository_selection: 'selected',
+            repositories_added: [],
+            repositories_removed: [listed(77, 'acme-team/handbook')],
+            requester: null,
+            sender: SENDER,
+        }), SECRET);
+        expect(removed.event).toEqual({
+            kind: 'installation_repositories',
+            action: 'removed',
+            installationId: 5,
+            selection: 'selected',
+            added: [],
+            removed: [{ id: 77, fullName: 'acme-team/handbook' }],
+        });
+        // From all repositories to a selection, GitHub names none of the repositories that left.
+        const narrowed = readWebhookDelivery(delivery('installation_repositories', {
+            action: 'removed',
+            installation: { ...INSTALLATION, repository_selection: 'selected' },
+            repository_selection: 'selected',
+            repositories_added: [],
+            repositories_removed: [],
+            requester: null,
+            sender: SENDER,
+        }), SECRET);
+        expect(narrowed.event).toMatchObject({ kind: 'installation_repositories', action: 'removed', selection: 'selected', removed: [] });
+    });
+    it('reads an account renamed under an installation, by its new login or an enterprise slug', () => {
+        const renamed = readWebhookDelivery(delivery('installation_target', {
+            action: 'renamed',
+            account: { login: 'acme-renamed', id: 901, node_id: 'O_test901', avatar_url: 'https://avatars.example/901', html_url: 'https://github.com/acme-renamed' },
+            changes: { login: { from: 'acme-team' } },
+            target_type: 'Organization',
+            installation: { id: 5, node_id: 'I_test5' },
+            sender: SENDER,
+        }), SECRET);
+        expect(renamed.event).toEqual({ kind: 'installation_target', action: 'renamed', installationId: 5, account: { login: 'acme-renamed', id: 901 } });
+        const slug = readWebhookDelivery(delivery('installation_target', {
+            action: 'renamed',
+            account: { slug: 'acme-enterprise-renamed', id: 902, node_id: 'E_test902', avatar_url: 'https://avatars.example/902', html_url: 'https://github.com/enterprises/x' },
+            changes: { slug: { from: 'acme-enterprise' } },
+            target_type: 'Enterprise',
+            installation: { id: 6, node_id: 'I_test6' },
+        }), SECRET);
+        expect(slug.event).toEqual({ kind: 'installation_target', action: 'renamed', installationId: 6, account: { login: 'acme-enterprise-renamed', id: 902 } });
+    });
+    it('answers a ping, an event it does not read, and a payload without the fields it reads, naming no field of them', () => {
+        expect(readWebhookDelivery(delivery('ping', { zen: 'Keep it logically awesome.', hook_id: 123, hook: { type: 'App' } }), SECRET)).toEqual({
+            id: DELIVERY_ID,
+            name: 'ping',
+            event: { kind: 'ping' },
+        });
+        expect(readWebhookDelivery(delivery('issues', { action: 'opened', issue: { title: 'private words' }, sender: SENDER }), SECRET)).toEqual({
+            id: DELIVERY_ID,
+            name: 'issues',
+            event: { kind: 'other' },
+        });
+        const { installation: _dropped, ...withoutInstallation } = PUSH;
+        expect(readWebhookDelivery(delivery('push', withoutInstallation), SECRET).event).toEqual({ kind: 'other' });
+        expect(readWebhookDelivery(delivery('push', { ...PUSH, after: 'not-a-commit' }), SECRET).event).toEqual({ kind: 'other' });
+        expect(readWebhookDelivery(delivery('installation_repositories', { action: 'added', installation: INSTALLATION, sender: SENDER }), SECRET).event).toEqual({
+            kind: 'other',
+        });
+        const odd = readWebhookDelivery(delivery('Push Event!', PUSH), SECRET);
+        expect(odd).toEqual({ id: DELIVERY_ID, name: '', event: { kind: 'other' } });
+        expect(readWebhookDelivery(delivery(null, PUSH), SECRET)).toEqual({ id: DELIVERY_ID, name: '', event: { kind: 'other' } });
+    });
+    it('refuses a delivery whose signature does not hold before it reads the body', () => {
+        const signedElsewhere = delivery('push', PUSH, { secret: 'another-secret' });
+        expect(refusalOf(() => readWebhookDelivery(signedElsewhere, SECRET))).toBe('signature');
+        const unsigned = delivery('push', PUSH);
+        unsigned.headers.delete('x-hub-signature-256');
+        expect(refusalOf(() => readWebhookDelivery(unsigned, SECRET))).toBe('signature');
+        // A body that is not JSON under a wrong signature is refused for its signature, never parsed.
+        const garbled = delivery('push', null, { secret: 'another-secret', body: new TextEncoder().encode('{"private": ') });
+        expect(refusalOf(() => readWebhookDelivery(garbled, SECRET))).toBe('signature');
+    });
+    it('refuses a delivery without a usable id, a body past the cap, and a signed body that is not a JSON object, quoting none of it', () => {
+        expect(refusalOf(() => readWebhookDelivery(delivery('push', PUSH, { id: null }), SECRET))).toBe('delivery');
+        expect(refusalOf(() => readWebhookDelivery(delivery('push', PUSH, { id: 'not a delivery id' }), SECRET))).toBe('delivery');
+        const large = delivery('push', PUSH, { secret: 'another-secret' });
+        expect(refusalOf(() => readWebhookDelivery(large, SECRET, { maxBytes: large.body.byteLength - 1 }))).toBe('too_large');
+        expect(refusalOf(() => readWebhookDelivery(delivery('push', PUSH), SECRET, { maxBytes: 64 }))).toBe('too_large');
+        for (const body of ['[1,2]', 'null', '"push"', '{"private words": ']) {
+            const signed = delivery('push', null, { body: new TextEncoder().encode(body) });
+            let failure;
+            try {
+                readWebhookDelivery(signed, SECRET);
+            }
+            catch (error) {
+                failure = error;
+            }
+            expect(failure).toBeInstanceOf(WebhookDeliveryRefused);
+            expect(failure.reason).toBe('body');
+            expect(failure.message).not.toContain('private');
+        }
+        const notUtf8 = delivery('push', null, { body: new Uint8Array([0x7b, 0x22, 0xff, 0xfe, 0x22, 0x3a, 0x31, 0x7d]) });
+        expect(refusalOf(() => readWebhookDelivery(notUtf8, SECRET))).toBe('body');
+    });
+    it('throws a TypeError for an empty secret, whatever the delivery', () => {
+        expect(() => readWebhookDelivery(delivery('push', PUSH, { secret: '' }), '')).toThrow(TypeError);
+    });
+    it("reads a request's body under the cap, and stops a stream that passes it", async () => {
+        const { headers, body } = delivery('push', PUSH);
+        const sent = new ReadableStream({
+            start(controller) {
+                controller.enqueue(body.slice(0, 100));
+                controller.enqueue(body.slice(100));
+                controller.close();
+            },
+        });
+        const whole = await readWebhookRequest({ headers, body: sent }, SECRET);
+        expect(whole.event).toMatchObject({ kind: 'push', installationId: 5, toDefaultBranch: true });
+        expect(whole.id).toBe(DELIVERY_ID);
+        let pulled = 0;
+        let cancelled = false;
+        const endless = new ReadableStream({
+            pull(controller) {
+                pulled += 65_536;
+                controller.enqueue(new Uint8Array(65_536).fill(0x20));
+            },
+            cancel() {
+                cancelled = true;
+            },
+        }, { highWaterMark: 0 });
+        const failure = await readWebhookRequest({ headers, body: endless }, SECRET, { maxBytes: 200_000 }).catch((error) => error);
+        expect(failure).toBeInstanceOf(WebhookDeliveryRefused);
+        expect(failure.reason).toBe('too_large');
+        expect(cancelled).toBe(true);
+        expect(pulled).toBeLessThanOrEqual(200_000 + 65_536);
+        const declared = new Headers(headers);
+        declared.set('content-length', String(10_000_000));
+        let read = false;
+        const stated = new ReadableStream({
+            pull() {
+                read = true;
+            },
+        }, { highWaterMark: 0 });
+        const refused = await readWebhookRequest({ headers: declared, body: stated }, SECRET, { maxBytes: 200_000 }).catch((error) => error);
+        expect(refused.reason).toBe('too_large');
+        expect(read).toBe(false);
+    });
+});
+//# sourceMappingURL=events.test.js.map

package/dist/__tests__/events.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"events.test.js","sourceRoot":"","sources":["../../src/__tests__/events.test.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,sBAAsB,EAAuB,MAAM,uBAAuB,CAAC;AAE7H,MAAM,MAAM,GAAG,qBAAqB,CAAC;AACrC,MAAM,WAAW,GAAG,sCAAsC,CAAC;AAC3D,MAAM,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAC1B,MAAM,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAC1B,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAE5B,iGAAiG;AACjG,MAAM,MAAM,GAAG,EAAE,KAAK,EAAE,aAAa,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAE/D,gFAAgF;AAChF,MAAM,IAAI,GAAG;IACX,GAAG,EAAE,iBAAiB;IACtB,MAAM,EAAE,EAAE;IACV,KAAK,EAAE,EAAE;IACT,UAAU,EAAE;QACV,EAAE,EAAE,EAAE;QACN,OAAO,EAAE,UAAU;QACnB,IAAI,EAAE,UAAU;QAChB,SAAS,EAAE,oBAAoB;QAC/B,OAAO,EAAE,IAAI;QACb,cAAc,EAAE,MAAM;QACtB,aAAa,EAAE,MAAM;KACtB;IACD,MAAM,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,IAAI,EAAE;IAC5C,MAAM,EAAE,MAAM;IACd,YAAY,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE;IAC3C,OAAO,EAAE,KAAK;IACd,OAAO,EAAE,KAAK;IACd,MAAM,EAAE,KAAK;IACb,QAAQ,EAAE,IAAI;IACd,OAAO,EAAE,iDAAiD,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE;IAChG,OAAO,EAAE,EAAE;IACX,WAAW,EAAE,IAAI;CAClB,CAAC;AAEF,qGAAqG;AACrG,MAAM,YAAY,GAAG;IACnB,EAAE,EAAE,CAAC;IACL,OAAO,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,cAAc,EAAE;IAC9D,oBAAoB,EAAE,UAAU;IAChC,MAAM,EAAE,CAAC;IACT,WAAW,EAAE,cAAc;CAC5B,CAAC;AAEF,sDAAsD;AACtD,SAAS,MAAM,CAAC,EAAU,EAAE,QAAgB;IAC1C,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC1G,CAAC;AAED,kHAAkH;AAClH,SAAS,QAAQ,CACf,KAAoB,EACpB,OAAgB,EAChB,EAAE,EAAE,GAAG,WAAW,EAAE,MAAM,GAAG,MAAM,EAAE,IAAI,KAAiE,EAAE;IAE5G,MAAM,KAAK,GAAG,IAAI,IAAI,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IACxE,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC;QAC1B,cAAc,EAAE,kBAAkB;QAClC,YAAY,EAAE,yBAAyB;QACvC,qBAAqB,EAAE,UAAU,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;KAC5F,CAAC,CAAC;IACH,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,KAAK,CAAC,CAAC;IACzD,IAAI,EAAE,KAAK,IAAI;QAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAC;IACtD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AAClC,CAAC;AAED,oFAAoF;AACpF,SAAS,SAAS,CAAC,IAA0B;IAC3C,IAAI,CAAC;QACH,OAAO,IAAI,EAAE,CAAC;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,sBAAsB;YAAE,OAAO,KAAK,CAAC,MAAM,CAAC;QACjE,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,QAAQ,CAAC,mCAAmC,EAAE,GAAG,EAAE;IACjD,EAAE,CAAC,0GAA0G,EAAE,GAAG,EAAE;QAClH,MAAM,IAAI,GAAG,mBAAmB,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;QAEjE,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC;YACnB,EAAE,EAAE,WAAW;YACf,IAAI,EAAE,MAAM;YACZ,KAAK,EAAE;gBACL,IAAI,EAAE,MAAM;gBACZ,cAAc,EAAE,CAAC;gBACjB,UAAU,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,oBAAoB,EAAE,aAAa,EAAE,MAAM,EAAE;gBAC7E,GAAG,EAAE,iBAAiB;gBACtB,MAAM,EAAE,EAAE;gBACV,KAAK,EAAE,EAAE;gBACT,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,KAAK;gBACb,eAAe,EAAE,IAAI;aACtB;SACF,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sHAAsH,EAAE,GAAG,EAAE;QAC9H,MAAM,KAAK,GAAkD;YAC3D,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,IAAI,CAAC;YACxB,CAAC,EAAE,GAAG,EAAE,oBAAoB,EAAE,EAAE,KAAK,CAAC;YACtC,CAAC,EAAE,GAAG,EAAE,kBAAkB,EAAE,EAAE,KAAK,CAAC;YACpC,CAAC,EAAE,GAAG,EAAE,qBAAqB,EAAE,EAAE,KAAK,CAAC;YACvC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,KAAK,CAAC;YACvC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,kBAAkB,EAAE,EAAE,KAAK,CAAC;SAClE,CAAC;QACF,KAAK,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,IAAI,KAAK,EAAE,CAAC;YAC9C,MAAM,IAAI,GAAG,mBAAmB,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,GAAG,IAAI,EAAE,GAAG,MAAM,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;YACnF,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACrC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QACzF,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yGAAyG,EAAE,GAAG,EAAE;QACjH,MAAM,OAAO,GAAG,mBAAmB,CACjC,QAAQ,CAAC,cAAc,EAAE;YACvB,MAAM,EAAE,SAAS;YACjB,YAAY,EAAE,YAAY;YAC1B,YAAY,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,oBAAoB,CAAC,EAAE,MAAM,CAAC,EAAE,EAAE,iBAAiB,CAAC,CAAC;YAC/E,SAAS,EAAE,IAAI;YACf,MAAM,EAAE,MAAM;SACf,CAAC,EACF,MAAM,CACP,CAAC;QACF,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;YAC5B,IAAI,EAAE,cAAc;YACpB,MAAM,EAAE,SAAS;YACjB,cAAc,EAAE,CAAC;YACjB,OAAO,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,EAAE,GAAG,EAAE;YACxC,YAAY,EAAE;gBACZ,EAAE,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,oBAAoB,EAAE;gBAC1C,EAAE,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,iBAAiB,EAAE;aACxC;SACF,CAAC,CAAC;QAEH,KAAK,MAAM,MAAM,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,0BAA0B,CAAU,EAAE,CAAC;YAC9F,MAAM,IAAI,GAAG,mBAAmB,CAAC,QAAQ,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;YAC3H,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC,CAAC;QAC9I,CAAC;QAED,MAAM,UAAU,GAAG,mBAAmB,CACpC,QAAQ,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,YAAY,EAAE,EAAE,GAAG,YAAY,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,EACjJ,MAAM,CACP,CAAC;QACF,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;QAEjH,MAAM,OAAO,GAAG,mBAAmB,CAAC,QAAQ,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;QAC7I,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;IAC/F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gGAAgG,EAAE,GAAG,EAAE;QACxG,MAAM,KAAK,GAAG,mBAAmB,CAC/B,QAAQ,CAAC,2BAA2B,EAAE;YACpC,MAAM,EAAE,OAAO;YACf,YAAY,EAAE,YAAY;YAC1B,oBAAoB,EAAE,UAAU;YAChC,kBAAkB,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,iBAAiB,CAAC,CAAC;YACnD,oBAAoB,EAAE,EAAE;YACxB,SAAS,EAAE,IAAI;YACf,MAAM,EAAE,MAAM;SACf,CAAC,EACF,MAAM,CACP,CAAC;QACF,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;YAC1B,IAAI,EAAE,2BAA2B;YACjC,MAAM,EAAE,OAAO;YACf,cAAc,EAAE,CAAC;YACjB,SAAS,EAAE,UAAU;YACrB,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,iBAAiB,EAAE,CAAC;YAChD,OAAO,EAAE,EAAE;SACZ,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,mBAAmB,CACjC,QAAQ,CAAC,2BAA2B,EAAE;YACpC,MAAM,EAAE,SAAS;YACjB,YAAY,EAAE,YAAY;YAC1B,oBAAoB,EAAE,UAAU;YAChC,kBAAkB,EAAE,EAAE;YACtB,oBAAoB,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,oBAAoB,CAAC,CAAC;YACxD,SAAS,EAAE,IAAI;YACf,MAAM,EAAE,MAAM;SACf,CAAC,EACF,MAAM,CACP,CAAC;QACF,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;YAC5B,IAAI,EAAE,2BAA2B;YACjC,MAAM,EAAE,SAAS;YACjB,cAAc,EAAE,CAAC;YACjB,SAAS,EAAE,UAAU;YACrB,KAAK,EAAE,EAAE;YACT,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,oBAAoB,EAAE,CAAC;SACtD,CAAC,CAAC;QAEH,yFAAyF;QACzF,MAAM,QAAQ,GAAG,mBAAmB,CAClC,QAAQ,CAAC,2BAA2B,EAAE;YACpC,MAAM,EAAE,SAAS;YACjB,YAAY,EAAE,EAAE,GAAG,YAAY,EAAE,oBAAoB,EAAE,UAAU,EAAE;YACnE,oBAAoB,EAAE,UAAU;YAChC,kBAAkB,EAAE,EAAE;YACtB,oBAAoB,EAAE,EAAE;YACxB,SAAS,EAAE,IAAI;YACf,MAAM,EAAE,MAAM;SACf,CAAC,EACF,MAAM,CACP,CAAC;QACF,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,2BAA2B,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;IACrI,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wFAAwF,EAAE,GAAG,EAAE;QAChG,MAAM,OAAO,GAAG,mBAAmB,CACjC,QAAQ,CAAC,qBAAqB,EAAE;YAC9B,MAAM,EAAE,SAAS;YACjB,OAAO,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,6BAA6B,EAAE,QAAQ,EAAE,iCAAiC,EAAE;YACzJ,OAAO,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE;YACzC,WAAW,EAAE,cAAc;YAC3B,YAAY,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE;YAC3C,MAAM,EAAE,MAAM;SACf,CAAC,EACF,MAAM,CACP,CAAC;QACF,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,qBAAqB,EAAE,MAAM,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;QAElJ,MAAM,IAAI,GAAG,mBAAmB,CAC9B,QAAQ,CAAC,qBAAqB,EAAE;YAC9B,MAAM,EAAE,SAAS;YACjB,OAAO,EAAE,EAAE,IAAI,EAAE,yBAAyB,EAAE,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,6BAA6B,EAAE,QAAQ,EAAE,kCAAkC,EAAE;YACpK,OAAO,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,EAAE;YAC9C,WAAW,EAAE,YAAY;YACzB,YAAY,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE;SAC5C,CAAC,EACF,MAAM,CACP,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,qBAAqB,EAAE,MAAM,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,yBAAyB,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;IAC5J,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+GAA+G,EAAE,GAAG,EAAE;QACvH,MAAM,CAAC,mBAAmB,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,4BAA4B,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;YACxI,EAAE,EAAE,WAAW;YACf,IAAI,EAAE,MAAM;YACZ,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;SACxB,CAAC,CAAC;QACH,MAAM,CAAC,mBAAmB,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;YACvI,EAAE,EAAE,WAAW;YACf,IAAI,EAAE,QAAQ;YACd,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;SACzB,CAAC,CAAC;QAEH,MAAM,EAAE,YAAY,EAAE,QAAQ,EAAE,GAAG,mBAAmB,EAAE,GAAG,IAAI,CAAC;QAChE,MAAM,CAAC,mBAAmB,CAAC,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAC,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QAC5G,MAAM,CAAC,mBAAmB,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QAC3H,MAAM,CAAC,mBAAmB,CAAC,QAAQ,CAAC,2BAA2B,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;YACxJ,IAAI,EAAE,OAAO;SACd,CAAC,CAAC;QAEH,MAAM,GAAG,GAAG,mBAAmB,CAAC,QAAQ,CAAC,aAAa,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;QACvE,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;QAC7E,MAAM,CAAC,mBAAmB,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;IAC7H,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2EAA2E,EAAE,GAAG,EAAE;QACnF,MAAM,eAAe,GAAG,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC,CAAC;QAC7E,MAAM,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,mBAAmB,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAExF,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACxC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC;QAC/C,MAAM,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,mBAAmB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAEjF,8FAA8F;QAC9F,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,gBAAgB,EAAE,IAAI,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;QACrH,MAAM,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,mBAAmB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAClF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8HAA8H,EAAE,GAAG,EAAE;QACtI,MAAM,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,mBAAmB,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC5G,MAAM,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,mBAAmB,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,mBAAmB,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAE3H,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC,CAAC;QACnE,MAAM,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,mBAAmB,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,UAAU,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACvH,MAAM,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,mBAAmB,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAEjH,KAAK,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,oBAAoB,CAAC,EAAE,CAAC;YACrE,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAChF,IAAI,OAAgB,CAAC;YACrB,IAAI,CAAC;gBACH,mBAAmB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YACtC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,GAAG,KAAK,CAAC;YAClB,CAAC;YACD,MAAM,CAAC,OAAO,CAAC,CAAC,cAAc,CAAC,sBAAsB,CAAC,CAAC;YACvD,MAAM,CAAE,OAAkC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAChE,MAAM,CAAE,OAAiB,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QAC9D,CAAC;QAED,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,UAAU,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC;QACnH,MAAM,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,mBAAmB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC7E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+DAA+D,EAAE,GAAG,EAAE;QACvE,MAAM,CAAC,GAAG,EAAE,CAAC,mBAAmB,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACnG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yEAAyE,EAAE,KAAK,IAAI,EAAE;QACvF,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACjD,MAAM,IAAI,GAAG,IAAI,cAAc,CAAa;YAC1C,KAAK,CAAC,UAAU;gBACd,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;gBACvC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;gBACpC,UAAU,CAAC,KAAK,EAAE,CAAC;YACrB,CAAC;SACF,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,kBAAkB,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,MAAM,CAAC,CAAC;QACxE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9F,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAEnC,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,MAAM,OAAO,GAAG,IAAI,cAAc,CAChC;YACE,IAAI,CAAC,UAAU;gBACb,MAAM,IAAI,MAAM,CAAC;gBACjB,UAAU,CAAC,OAAO,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;YACxD,CAAC;YACD,MAAM;gBACJ,SAAS,GAAG,IAAI,CAAC;YACnB,CAAC;SACF,EACD,EAAE,aAAa,EAAE,CAAC,EAAE,CACrB,CAAC;QACF,MAAM,OAAO,GAAY,MAAM,kBAAkB,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC;QAC9I,MAAM,CAAC,OAAO,CAAC,CAAC,cAAc,CAAC,sBAAsB,CAAC,CAAC;QACvD,MAAM,CAAE,OAAkC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACrE,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,CAAC,CAAC,mBAAmB,CAAC,OAAO,GAAG,MAAM,CAAC,CAAC;QAErD,MAAM,QAAQ,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;QACtC,QAAQ,CAAC,GAAG,CAAC,gBAAgB,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;QACnD,IAAI,IAAI,GAAG,KAAK,CAAC;QACjB,MAAM,MAAM,GAAG,IAAI,cAAc,CAC/B;YACE,IAAI;gBACF,IAAI,GAAG,IAAI,CAAC;YACd,CAAC;SACF,EACD,EAAE,aAAa,EAAE,CAAC,EAAE,CACrB,CAAC;QACF,MAAM,OAAO,GAAY,MAAM,kBAAkB,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC;QACvJ,MAAM,CAAE,OAAkC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACrE,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/app/events.d.ts

@@ -0,0 +1,142 @@
+/**
+ * @fileoverview A GitHub App's webhook deliveries read as typed events. A delivery's size is checked first, then its
+ * `X-Hub-Signature-256` on the raw body, then its `X-GitHub-Delivery` id, and only then is its body parsed; each event
+ * an app reading its installations' repositories acts on (a push, an installation's actions, the repositories it
+ * reaches, its account renamed, a ping) is answered with the fields that reading needs, and every other delivery as
+ * `other`. No text of a payload reaches an error, and nothing of a payload but those fields leaves the reader.
+ * Payloads as https://docs.github.com/en/webhooks/webhook-events-and-payloads documents them.
+ * @module agentos-ext-github/app/events
+ */
+import { type GitHubAccount } from './installations.js';
+/** The largest delivery read by default: 25 MiB (26,214,400 bytes). GitHub delivers no payload past 25 MB. */
+export declare const DEFAULT_MAX_DELIVERY_BYTES = 26214400;
+/**
+ * Why a delivery was refused: `too_large` past the cap (answer 413), `signature` for a signature that does not hold
+ * or is missing (answer 401), `delivery` for a missing or malformed `X-GitHub-Delivery` (answer 400), `body` for a
+ * signed body that is not a JSON object in UTF-8 (answer 400).
+ */
+export type WebhookRefusalReason = 'too_large' | 'signature' | 'delivery' | 'body';
+/** A delivery the reader refused. The message names the reason alone, never the body or a header's value. */
+export declare class WebhookDeliveryRefused extends Error {
+    readonly reason: WebhookRefusalReason;
+    /** @param reason Why the delivery was refused. */
+    constructor(reason: WebhookRefusalReason);
+}
+/** A repository an event names. */
+export interface GitHubEventRepository {
+    id: number;
+    /** `owner/name`. */
+    fullName: string;
+}
+/** A push to a repository the installation reaches. */
+export interface GitHubPushEvent {
+    kind: 'push';
+    installationId: number;
+    repository: GitHubEventRepository & {
+        defaultBranch: string;
+    };
+    /** The full ref pushed, such as `refs/heads/main` or `refs/tags/v1.0.0`. */
+    ref: string;
+    /** The ref's commit before the push; zeros when the push created the ref. */
+    before: string;
+    /** The ref's commit after the push; zeros when the push deleted the ref. */
+    after: string;
+    created: boolean;
+    deleted: boolean;
+    forced: boolean;
+    /** True when the push moved the repository's default branch: `ref` is `refs/heads/<default branch>` and it was not deleted. */
+    toDefaultBranch: boolean;
+}
+/** An installation's action: installed, uninstalled, suspended, unsuspended, or new permissions accepted. */
+export interface GitHubInstallationEvent {
+    kind: 'installation';
+    action: 'created' | 'deleted' | 'suspend' | 'unsuspend' | 'new_permissions_accepted';
+    installationId: number;
+    /** The account the app is installed on, or null when GitHub sends none. */
+    account: GitHubAccount | null;
+    /** The repositories the installation can access, where GitHub lists them (an installation on selected repositories); else empty. */
+    repositories: GitHubEventRepository[];
+}
+/**
+ * Repositories added to or removed from an installation. When the installation goes from all of an account's
+ * repositories to a selection, GitHub sends `removed` with no repository listed, so `removed` can be empty while
+ * repositories left: read the installation's repositories again.
+ */
+export interface GitHubInstallationRepositoriesEvent {
+    kind: 'installation_repositories';
+    action: 'added' | 'removed';
+    installationId: number;
+    /** Whether the installation now reaches all of the account's repositories or a selection. */
+    selection: 'all' | 'selected';
+    added: GitHubEventRepository[];
+    removed: GitHubEventRepository[];
+}
+/** The account an installation is on was renamed. */
+export interface GitHubInstallationTargetEvent {
+    kind: 'installation_target';
+    action: 'renamed';
+    installationId: number;
+    /** The account under its new login, or an enterprise's new slug. */
+    account: GitHubAccount;
+}
+/** GitHub's check that the webhook is set up. */
+export interface GitHubPingEvent {
+    kind: 'ping';
+}
+/** A delivery the reader does not read: another event, another action, or a payload without the fields above. */
+export interface GitHubOtherEvent {
+    kind: 'other';
+}
+/** A delivery's event. */
+export type GitHubEvent = GitHubPushEvent | GitHubInstallationEvent | GitHubInstallationRepositoriesEvent | GitHubInstallationTargetEvent | GitHubPingEvent | GitHubOtherEvent;
+/** A delivery read. */
+export interface GitHubDelivery {
+    /** The `X-GitHub-Delivery` GUID: the same for a redelivery, so a receiver applies each id once. */
+    id: string;
+    /** The `X-GitHub-Event` name when it is an event name (lower case letters, digits and underscores), else `''`. */
+    name: string;
+    event: GitHubEvent;
+}
+/** What a delivery is read from: its headers and its raw body exactly as received. */
+export interface WebhookDeliveryInput {
+    headers: {
+        get(name: string): string | null;
+    };
+    body: Uint8Array;
+}
+/** What a request is read from: a `Request`, or anything with its headers and its body's stream. */
+export interface WebhookRequestInput {
+    headers: {
+        get(name: string): string | null;
+    };
+    body: ReadableStream<Uint8Array> | null;
+}
+/** The reader's bound. */
+export interface ReadWebhookOptions {
+    /** The largest body read, in bytes ({@link DEFAULT_MAX_DELIVERY_BYTES} when absent). */
+    maxBytes?: number;
+}
+/**
+ * Reads a delivery already received whole: refuses it past `maxBytes` (`too_large`), when its signature under
+ * `secret` does not hold (`signature`), when it has no usable `X-GitHub-Delivery` (`delivery`), or when its signed
+ * body is not a JSON object in UTF-8 (`body`), each with {@link WebhookDeliveryRefused}; answers its id, its event's
+ * name and its typed event otherwise. A receiver answers GitHub at once and applies each delivery id once: GitHub
+ * expects a 2xx within 10 seconds, and a redelivery carries the id of the delivery it repeats.
+ *
+ * @param input The delivery's headers and its raw body exactly as received.
+ * @param secret The webhook's secret, never empty.
+ * @param options The largest body read.
+ * @throws TypeError when the secret is empty or missing: anyone can sign a delivery under an empty key.
+ */
+export declare function readWebhookDelivery(input: WebhookDeliveryInput, secret: string, options?: ReadWebhookOptions): GitHubDelivery;
+/**
+ * Reads a delivery from a request: its body read as it streams and refused at `maxBytes` (`too_large`), before any
+ * check that needs it whole, the stream then cancelled unread; a `Content-Length` past the cap is refused before a byte
+ * is read. Then as {@link readWebhookDelivery}.
+ *
+ * @param request The request, or its headers and body stream.
+ * @param secret The webhook's secret, never empty.
+ * @param options The largest body read.
+ */
+export declare function readWebhookRequest(request: WebhookRequestInput, secret: string, options?: ReadWebhookOptions): Promise<GitHubDelivery>;
+//# sourceMappingURL=events.d.ts.map

package/dist/app/events.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"events.d.ts","sourceRoot":"","sources":["../../src/app/events.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,OAAO,EAAa,KAAK,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAGnE,8GAA8G;AAC9G,eAAO,MAAM,0BAA0B,WAAa,CAAC;AAErD;;;;GAIG;AACH,MAAM,MAAM,oBAAoB,GAAG,WAAW,GAAG,WAAW,GAAG,UAAU,GAAG,MAAM,CAAC;AAEnF,6GAA6G;AAC7G,qBAAa,sBAAuB,SAAQ,KAAK;IAEnC,QAAQ,CAAC,MAAM,EAAE,oBAAoB;IADjD,kDAAkD;gBAC7B,MAAM,EAAE,oBAAoB;CAIlD;AAED,mCAAmC;AACnC,MAAM,WAAW,qBAAqB;IACpC,EAAE,EAAE,MAAM,CAAC;IACX,oBAAoB;IACpB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,uDAAuD;AACvD,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,qBAAqB,GAAG;QAAE,aAAa,EAAE,MAAM,CAAA;KAAE,CAAC;IAC9D,4EAA4E;IAC5E,GAAG,EAAE,MAAM,CAAC;IACZ,6EAA6E;IAC7E,MAAM,EAAE,MAAM,CAAC;IACf,4EAA4E;IAC5E,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,OAAO,CAAC;IAChB,+HAA+H;IAC/H,eAAe,EAAE,OAAO,CAAC;CAC1B;AAED,6GAA6G;AAC7G,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,cAAc,CAAC;IACrB,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,SAAS,GAAG,WAAW,GAAG,0BAA0B,CAAC;IACrF,cAAc,EAAE,MAAM,CAAC;IACvB,2EAA2E;IAC3E,OAAO,EAAE,aAAa,GAAG,IAAI,CAAC;IAC9B,oIAAoI;IACpI,YAAY,EAAE,qBAAqB,EAAE,CAAC;CACvC;AAED;;;;GAIG;AACH,MAAM,WAAW,mCAAmC;IAClD,IAAI,EAAE,2BAA2B,CAAC;IAClC,MAAM,EAAE,OAAO,GAAG,SAAS,CAAC;IAC5B,cAAc,EAAE,MAAM,CAAC;IACvB,6FAA6F;IAC7F,SAAS,EAAE,KAAK,GAAG,UAAU,CAAC;IAC9B,KAAK,EAAE,qBAAqB,EAAE,CAAC;IAC/B,OAAO,EAAE,qBAAqB,EAAE,CAAC;CAClC;AAED,qDAAqD;AACrD,MAAM,WAAW,6BAA6B;IAC5C,IAAI,EAAE,qBAAqB,CAAC;IAC5B,MAAM,EAAE,SAAS,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,oEAAoE;IACpE,OAAO,EAAE,aAAa,CAAC;CACxB;AAED,iDAAiD;AACjD,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;CACd;AAED,iHAAiH;AACjH,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,OAAO,CAAC;CACf;AAED,0BAA0B;AAC1B,MAAM,MAAM,WAAW,GACnB,eAAe,GACf,uBAAuB,GACvB,mCAAmC,GACnC,6BAA6B,GAC7B,eAAe,GACf,gBAAgB,CAAC;AAErB,uBAAuB;AACvB,MAAM,WAAW,cAAc;IAC7B,mGAAmG;IACnG,EAAE,EAAE,MAAM,CAAC;IACX,kHAAkH;IAClH,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,WAAW,CAAC;CACpB;AAED,sFAAsF;AACtF,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE;QAAE,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IAC9C,IAAI,EAAE,UAAU,CAAC;CAClB;AAED,oGAAoG;AACpG,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE;QAAE,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IAC9C,IAAI,EAAE,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC;CACzC;AAED,0BAA0B;AAC1B,MAAM,WAAW,kBAAkB;IACjC,wFAAwF;IACxF,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAsGD;;;;;;;;;;;GAWG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,oBAAoB,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAE,kBAAuB,GAAG,cAAc,CAgBjI;AAED;;;;;;;;GAQG;AACH,wBAAsB,kBAAkB,CAAC,OAAO,EAAE,mBAAmB,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAE,kBAAuB,GAAG,OAAO,CAAC,cAAc,CAAC,CAWhJ"}