@marinoscar/platform-api 0.1.0-next.19 → 0.1.0-next.20

package/dist/webhooks/webhooks.permissions.d.ts

@@ -0,0 +1,47 @@
+import type { PermissionDeclaration } from '../core/index';
+/** A permission declaration of this slice. @stability experimental */
+export type WebhooksPermissionDeclaration<Id extends string = string> = PermissionDeclaration<Id>;
+/**
+ * `webhooks:read` and `webhooks:write`, ORG scope, granted to every org role:
+ * a member manages the endpoints they own in the active organization. The
+ * service pins every query to the caller, so another member's endpoint is a 404.
+ *
+ * @example
+ * ```ts
+ * registerPermissions(WEBHOOKS_PERMISSIONS);
+ * ```
+ *
+ * @stability experimental
+ */
+export declare const WEBHOOKS_PERMISSIONS: {
+    /** `webhooks:read`: list and read one's own endpoints and deliveries. */
+    readonly WEBHOOKS_READ: WebhooksPermissionDeclaration<'webhooks:read'>;
+    /** `webhooks:write`: create, change, delete, rotate and test one's own endpoints; redeliver. */
+    readonly WEBHOOKS_WRITE: WebhooksPermissionDeclaration<'webhooks:write'>;
+};
+/**
+ * `org_webhooks:read` and `org_webhooks:write`, ORG scope, granted to
+ * `org_admin`: the active organization's shared endpoints.
+ *
+ * @stability experimental
+ */
+export declare const ORG_WEBHOOKS_PERMISSIONS: {
+    /** `org_webhooks:read`: the organization's endpoints and deliveries. */
+    readonly ORG_WEBHOOKS_READ: WebhooksPermissionDeclaration<'org_webhooks:read'>;
+    /** `org_webhooks:write`: manage them. */
+    readonly ORG_WEBHOOKS_WRITE: WebhooksPermissionDeclaration<'org_webhooks:write'>;
+};
+/**
+ * `system_webhooks:read` and `system_webhooks:write`, SYSTEM scope, granted to
+ * `admin`: the deployment's endpoints (platform events such as node and job
+ * failures).
+ *
+ * @stability experimental
+ */
+export declare const SYSTEM_WEBHOOKS_PERMISSIONS: {
+    /** `system_webhooks:read`: the deployment's endpoints and deliveries. */
+    readonly SYSTEM_WEBHOOKS_READ: WebhooksPermissionDeclaration<'system_webhooks:read'>;
+    /** `system_webhooks:write`: manage them. */
+    readonly SYSTEM_WEBHOOKS_WRITE: WebhooksPermissionDeclaration<'system_webhooks:write'>;
+};
+//# sourceMappingURL=webhooks.permissions.d.ts.map

package/dist/webhooks/webhooks.permissions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhooks.permissions.d.ts","sourceRoot":"","sources":["../../src/webhooks/webhooks.permissions.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AAE3D,sEAAsE;AACtE,MAAM,MAAM,6BAA6B,CAAC,EAAE,SAAS,MAAM,GAAG,MAAM,IAAI,qBAAqB,CAAC,EAAE,CAAC,CAAC;AAElG;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,oBAAoB,EAAE;IACjC,yEAAyE;IACzE,QAAQ,CAAC,aAAa,EAAE,6BAA6B,CAAC,eAAe,CAAC,CAAC;IACvE,gGAAgG;IAChG,QAAQ,CAAC,cAAc,EAAE,6BAA6B,CAAC,gBAAgB,CAAC,CAAC;CAc1E,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,wBAAwB,EAAE;IACrC,wEAAwE;IACxE,QAAQ,CAAC,iBAAiB,EAAE,6BAA6B,CAAC,mBAAmB,CAAC,CAAC;IAC/E,yCAAyC;IACzC,QAAQ,CAAC,kBAAkB,EAAE,6BAA6B,CAAC,oBAAoB,CAAC,CAAC;CAclF,CAAC;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,2BAA2B,EAAE;IACxC,yEAAyE;IACzE,QAAQ,CAAC,oBAAoB,EAAE,6BAA6B,CAAC,sBAAsB,CAAC,CAAC;IACrF,4CAA4C;IAC5C,QAAQ,CAAC,qBAAqB,EAAE,6BAA6B,CAAC,uBAAuB,CAAC,CAAC;CAcxF,CAAC"}

package/dist/webhooks/webhooks.permissions.js

@@ -0,0 +1,83 @@
+"use strict";
+// =============================================================================
+// The webhooks slice's permissions (issue #1046)
+// =============================================================================
+//
+// Three tiers, one string each way, declared beside the controllers that
+// enforce them:
+//
+//   webhooks:read / :write           ORG scope, every org role (a member manages
+//                                    their OWN endpoints; the service scopes by owner)
+//   org_webhooks:read / :write       ORG scope, `org_admin` (the organization's endpoints)
+//   system_webhooks:read / :write    SYSTEM scope, `admin` (the deployment's endpoints)
+// =============================================================================
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SYSTEM_WEBHOOKS_PERMISSIONS = exports.ORG_WEBHOOKS_PERMISSIONS = exports.WEBHOOKS_PERMISSIONS = void 0;
+/**
+ * `webhooks:read` and `webhooks:write`, ORG scope, granted to every org role:
+ * a member manages the endpoints they own in the active organization. The
+ * service pins every query to the caller, so another member's endpoint is a 404.
+ *
+ * @example
+ * ```ts
+ * registerPermissions(WEBHOOKS_PERMISSIONS);
+ * ```
+ *
+ * @stability experimental
+ */
+exports.WEBHOOKS_PERMISSIONS = {
+    WEBHOOKS_READ: {
+        id: 'webhooks:read',
+        description: 'View your own webhook endpoints and their deliveries',
+        scope: 'org',
+        defaultGrants: ['org_admin', 'contributor', 'viewer'],
+    },
+    WEBHOOKS_WRITE: {
+        id: 'webhooks:write',
+        description: 'Create, change, delete, rotate and test your own webhook endpoints',
+        scope: 'org',
+        defaultGrants: ['org_admin', 'contributor', 'viewer'],
+    },
+};
+/**
+ * `org_webhooks:read` and `org_webhooks:write`, ORG scope, granted to
+ * `org_admin`: the active organization's shared endpoints.
+ *
+ * @stability experimental
+ */
+exports.ORG_WEBHOOKS_PERMISSIONS = {
+    ORG_WEBHOOKS_READ: {
+        id: 'org_webhooks:read',
+        description: "View the active organization's webhook endpoints and their deliveries",
+        scope: 'org',
+        defaultGrants: ['org_admin'],
+    },
+    ORG_WEBHOOKS_WRITE: {
+        id: 'org_webhooks:write',
+        description: "Create, change, delete, rotate and test the active organization's webhook endpoints",
+        scope: 'org',
+        defaultGrants: ['org_admin'],
+    },
+};
+/**
+ * `system_webhooks:read` and `system_webhooks:write`, SYSTEM scope, granted to
+ * `admin`: the deployment's endpoints (platform events such as node and job
+ * failures).
+ *
+ * @stability experimental
+ */
+exports.SYSTEM_WEBHOOKS_PERMISSIONS = {
+    SYSTEM_WEBHOOKS_READ: {
+        id: 'system_webhooks:read',
+        description: "View the deployment's webhook endpoints and their deliveries",
+        scope: 'system',
+        defaultGrants: ['admin'],
+    },
+    SYSTEM_WEBHOOKS_WRITE: {
+        id: 'system_webhooks:write',
+        description: "Create, change, delete, rotate and test the deployment's webhook endpoints",
+        scope: 'system',
+        defaultGrants: ['admin'],
+    },
+};
+//# sourceMappingURL=webhooks.permissions.js.map

package/dist/webhooks/webhooks.permissions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhooks.permissions.js","sourceRoot":"","sources":["../../src/webhooks/webhooks.permissions.ts"],"names":[],"mappings":";AAAA,gFAAgF;AAChF,iDAAiD;AACjD,gFAAgF;AAChF,EAAE;AACF,yEAAyE;AACzE,gBAAgB;AAChB,EAAE;AACF,iFAAiF;AACjF,uFAAuF;AACvF,2FAA2F;AAC3F,wFAAwF;AACxF,gFAAgF;;;AAOhF;;;;;;;;;;;GAWG;AACU,QAAA,oBAAoB,GAK7B;IACF,aAAa,EAAE;QACb,EAAE,EAAE,eAAe;QACnB,WAAW,EAAE,sDAAsD;QACnE,KAAK,EAAE,KAAK;QACZ,aAAa,EAAE,CAAC,WAAW,EAAE,aAAa,EAAE,QAAQ,CAAC;KACtD;IACD,cAAc,EAAE;QACd,EAAE,EAAE,gBAAgB;QACpB,WAAW,EAAE,oEAAoE;QACjF,KAAK,EAAE,KAAK;QACZ,aAAa,EAAE,CAAC,WAAW,EAAE,aAAa,EAAE,QAAQ,CAAC;KACtD;CACF,CAAC;AAEF;;;;;GAKG;AACU,QAAA,wBAAwB,GAKjC;IACF,iBAAiB,EAAE;QACjB,EAAE,EAAE,mBAAmB;QACvB,WAAW,EAAE,uEAAuE;QACpF,KAAK,EAAE,KAAK;QACZ,aAAa,EAAE,CAAC,WAAW,CAAC;KAC7B;IACD,kBAAkB,EAAE;QAClB,EAAE,EAAE,oBAAoB;QACxB,WAAW,EAAE,qFAAqF;QAClG,KAAK,EAAE,KAAK;QACZ,aAAa,EAAE,CAAC,WAAW,CAAC;KAC7B;CACF,CAAC;AAEF;;;;;;GAMG;AACU,QAAA,2BAA2B,GAKpC;IACF,oBAAoB,EAAE;QACpB,EAAE,EAAE,sBAAsB;QAC1B,WAAW,EAAE,8DAA8D;QAC3E,KAAK,EAAE,QAAQ;QACf,aAAa,EAAE,CAAC,OAAO,CAAC;KACzB;IACD,qBAAqB,EAAE;QACrB,EAAE,EAAE,uBAAuB;QAC3B,WAAW,EAAE,4EAA4E;QACzF,KAAK,EAAE,QAAQ;QACf,aAAa,EAAE,CAAC,OAAO,CAAC;KACzB;CACF,CAAC"}

package/dist/webhooks/webhooks.repository.d.ts

@@ -0,0 +1,162 @@
+import type { WebhookScope } from '@marinoscar/platform-contract/webhooks';
+import { JobsService } from '../jobs/index';
+import type { WebhookDeliveryRow, WebhookEndpointRow, WebhookUserRow } from './data/webhooks-db';
+import { type WebhooksPrisma, type WebhooksSystemPrisma } from './ports';
+/** Which endpoints a query is about: a scope, and for user scope the owner. @stability experimental */
+export interface EndpointFilter {
+    /** The scope. */
+    readonly scope: WebhookScope;
+    /** User scope: the owner. */
+    readonly ownerUserId?: string;
+}
+/** A new endpoint row. @stability experimental */
+export interface NewEndpoint {
+    /** Scope. */
+    readonly scope: WebhookScope;
+    /** Owner user id. */
+    readonly ownerUserId: string | null;
+    /** Created by id. */
+    readonly createdById: string | null;
+    /** Name. */
+    readonly name: string;
+    /** Description. */
+    readonly description: string | null;
+    /** Url. */
+    readonly url: string;
+    /** Event keys. */
+    readonly eventKeys: string[];
+    /** Enabled. */
+    readonly enabled: boolean;
+}
+/** The columns an update may set. @stability experimental */
+export type EndpointPatch = Partial<Pick<WebhookEndpointRow, 'name' | 'description' | 'url' | 'eventKeys' | 'enabled' | 'secretVersion' | 'previousSecretUntil' | 'disabledReason' | 'consecutiveFailures'>>;
+/** A delivery row to insert. @stability experimental */
+export interface NewDelivery {
+    /** Endpoint id. */
+    readonly endpointId: string;
+    /** Event key. */
+    readonly eventKey: string;
+    /** Event id. */
+    readonly eventId: string;
+    /** Payload. */
+    readonly payload: unknown;
+}
+/** One page request of a delivery list. @stability experimental */
+export interface DeliveryQuery {
+    /** Page. */
+    readonly page: number;
+    /** Page size. */
+    readonly pageSize: number;
+    /** Status. */
+    readonly status?: WebhookDeliveryRow['status'];
+    /** Event key. */
+    readonly eventKey?: string;
+}
+/** A delivery with its endpoint, for the job. @stability experimental */
+export interface LoadedDelivery {
+    /** The delivery. */
+    delivery: WebhookDeliveryRow;
+    /** Its endpoint, or `null` when it is gone. */
+    endpoint: WebhookEndpointRow | null;
+}
+/** One page of deliveries. @stability experimental */
+export interface DeliveryPage {
+    /** The rows of the page, newest first. */
+    items: WebhookDeliveryRow[];
+    /** All rows matching the filter. */
+    total: number;
+}
+/** What one attempt settled to. @stability experimental */
+export interface AttemptOutcome {
+    /** The delivery's new state. */
+    readonly delivery: Partial<Pick<WebhookDeliveryRow, 'status' | 'attempt' | 'responseStatus' | 'responseSnippet' | 'errorCode' | 'durationMs' | 'nextAttemptAt' | 'deliveredAt'>>;
+    /** `success` resets the endpoint's failure counter; `failure` counts one; `neutral` leaves it (the endpoint was already gone). */
+    readonly endpoint: 'success' | 'failure' | 'neutral';
+    /** Failures at which the endpoint is switched off. */
+    readonly threshold: number;
+    /** Disable at once, with this reason (a 410). */
+    readonly disableNow?: string;
+    /** When set, a retry job is enqueued for this time. */
+    readonly retryAt?: Date;
+}
+/** What {@link WebhooksRepository.settleAttempt} reports. @stability experimental */
+export interface SettledAttempt {
+    /** The endpoint after the update, or `null` when it no longer exists. */
+    readonly endpoint: WebhookEndpointRow | null;
+    /** Whether THIS call switched the endpoint off (so the owner is told exactly once). */
+    readonly disabled: boolean;
+}
+/**
+ * The slice's data port. See the file header.
+ *
+ * @stability experimental
+ */
+export declare abstract class WebhooksRepository {
+    /** The endpoints matching `filter`, newest first. */
+    abstract listEndpoints(orgId: string | null, filter: EndpointFilter): Promise<WebhookEndpointRow[]>;
+    /** One endpoint of `filter`, or `null` (also when it is another owner's or organization's). */
+    abstract findEndpoint(orgId: string | null, id: string, filter: EndpointFilter): Promise<WebhookEndpointRow | null>;
+    /** How many endpoints `filter` has. */
+    abstract countEndpoints(orgId: string | null, filter: EndpointFilter): Promise<number>;
+    /** Inserts an endpoint. */
+    abstract createEndpoint(orgId: string | null, data: NewEndpoint): Promise<WebhookEndpointRow>;
+    /** Updates an endpoint by id. */
+    abstract updateEndpoint(orgId: string | null, id: string, patch: EndpointPatch): Promise<WebhookEndpointRow>;
+    /** Deletes an endpoint (its deliveries cascade). */
+    abstract deleteEndpoint(orgId: string | null, id: string): Promise<void>;
+    /** The enabled endpoints an event of `filter` may reach. */
+    abstract enabledEndpoints(orgId: string | null, filter: EndpointFilter): Promise<WebhookEndpointRow[]>;
+    /** Switches an endpoint off with a reason; `true` when it was enabled. */
+    abstract disableEndpoint(orgId: string | null, id: string, reason: string): Promise<boolean>;
+    /** The user, with the role graph, for the owner's permission re-check. */
+    abstract loadOwner(orgId: string | null, userId: string): Promise<WebhookUserRow | null>;
+    /** Inserts the rows (skipping an `(endpointId, eventId)` that exists) and enqueues one job per inserted row, in one transaction. */
+    abstract insertDeliveries(orgId: string | null, rows: readonly NewDelivery[]): Promise<WebhookDeliveryRow[]>;
+    /** One delivery of `filter`'s endpoints, or `null`. */
+    abstract findDelivery(orgId: string | null, id: string, filter: EndpointFilter): Promise<WebhookDeliveryRow | null>;
+    /** One delivery by id with its endpoint, for the job (no owner filter: the job is trusted). */
+    abstract loadDeliveryForJob(orgId: string | null, id: string): Promise<LoadedDelivery | null>;
+    /** A page of one endpoint's deliveries, newest first. */
+    abstract listDeliveries(orgId: string | null, endpointId: string, query: DeliveryQuery): Promise<DeliveryPage>;
+    /** Marks the delivery `delivering` and counts the attempt. */
+    abstract markDelivering(orgId: string | null, id: string): Promise<WebhookDeliveryRow>;
+    /** Writes an attempt's outcome to the delivery and the endpoint; optionally enqueues the retry. */
+    abstract settleAttempt(orgId: string | null, deliveryId: string, endpointId: string, outcome: AttemptOutcome): Promise<SettledAttempt>;
+    /** Resets a delivery to `pending` and enqueues it again. */
+    abstract resetForRedelivery(orgId: string | null, id: string): Promise<WebhookDeliveryRow>;
+    /** Deletes deliveries created before `cutoff`, in batches; returns how many. */
+    abstract purgeDeliveriesBefore(cutoff: Date): Promise<number>;
+}
+/**
+ * The Prisma implementation. See the file header.
+ *
+ * @internal
+ *
+ * @stability experimental
+ */
+export declare class PrismaWebhooksRepository extends WebhooksRepository {
+    private readonly prisma;
+    private readonly system;
+    private readonly jobs;
+    constructor(prisma: WebhooksPrisma, system: WebhooksSystemPrisma, jobs: JobsService);
+    private run;
+    listEndpoints(orgId: string | null, filter: EndpointFilter): Promise<WebhookEndpointRow[]>;
+    findEndpoint(orgId: string | null, id: string, filter: EndpointFilter): Promise<WebhookEndpointRow | null>;
+    countEndpoints(orgId: string | null, filter: EndpointFilter): Promise<number>;
+    createEndpoint(orgId: string | null, data: NewEndpoint): Promise<WebhookEndpointRow>;
+    updateEndpoint(orgId: string | null, id: string, patch: EndpointPatch): Promise<WebhookEndpointRow>;
+    deleteEndpoint(orgId: string | null, id: string): Promise<void>;
+    enabledEndpoints(orgId: string | null, filter: EndpointFilter): Promise<WebhookEndpointRow[]>;
+    disableEndpoint(orgId: string | null, id: string, reason: string): Promise<boolean>;
+    loadOwner(orgId: string | null, userId: string): Promise<WebhookUserRow | null>;
+    insertDeliveries(orgId: string | null, rows: readonly NewDelivery[]): Promise<WebhookDeliveryRow[]>;
+    private enqueue;
+    findDelivery(orgId: string | null, id: string, filter: EndpointFilter): Promise<WebhookDeliveryRow | null>;
+    loadDeliveryForJob(orgId: string | null, id: string): Promise<LoadedDelivery | null>;
+    listDeliveries(orgId: string | null, endpointId: string, query: DeliveryQuery): Promise<DeliveryPage>;
+    markDelivering(orgId: string | null, id: string): Promise<WebhookDeliveryRow>;
+    settleAttempt(orgId: string | null, deliveryId: string, endpointId: string, outcome: AttemptOutcome): Promise<SettledAttempt>;
+    resetForRedelivery(orgId: string | null, id: string): Promise<WebhookDeliveryRow>;
+    purgeDeliveriesBefore(cutoff: Date): Promise<number>;
+}
+//# sourceMappingURL=webhooks.repository.d.ts.map

package/dist/webhooks/webhooks.repository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhooks.repository.d.ts","sourceRoot":"","sources":["../../src/webhooks/webhooks.repository.ts"],"names":[],"mappings":"AA2BA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,wCAAwC,CAAC;AAI3E,OAAO,EAAE,WAAW,EAAe,MAAM,eAAe,CAAC;AACzD,OAAO,KAAK,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,cAAc,EAAc,MAAM,oBAAoB,CAAC;AAC7G,OAAO,EAA0B,KAAK,cAAc,EAAE,KAAK,oBAAoB,EAAE,MAAM,SAAS,CAAC;AAGjG,uGAAuG;AACvG,MAAM,WAAW,cAAc;IAC7B,iBAAiB;IACjB,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,6BAA6B;IAC7B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,kDAAkD;AAClD,MAAM,WAAW,WAAW;IAC1B,aAAa;IACb,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,qBAAqB;IACrB,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,qBAAqB;IACrB,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,YAAY;IACZ,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,mBAAmB;IACnB,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,WAAW;IACX,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,kBAAkB;IAClB,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,CAAC;IAC7B,eAAe;IACf,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;CAC3B;AAED,6DAA6D;AAC7D,MAAM,MAAM,aAAa,GAAG,OAAO,CACjC,IAAI,CAAC,kBAAkB,EAAE,MAAM,GAAG,aAAa,GAAG,KAAK,GAAG,WAAW,GAAG,SAAS,GAAG,eAAe,GAAG,qBAAqB,GAAG,gBAAgB,GAAG,qBAAqB,CAAC,CACxK,CAAC;AAEF,wDAAwD;AACxD,MAAM,WAAW,WAAW;IAC1B,mBAAmB;IACnB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,iBAAiB;IACjB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,gBAAgB;IAChB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,eAAe;IACf,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;CAC3B;AAED,mEAAmE;AACnE,MAAM,WAAW,aAAa;IAC5B,YAAY;IACZ,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,iBAAiB;IACjB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,cAAc;IACd,QAAQ,CAAC,MAAM,CAAC,EAAE,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IAC/C,iBAAiB;IACjB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,yEAAyE;AACzE,MAAM,WAAW,cAAc;IAC7B,oBAAoB;IACpB,QAAQ,EAAE,kBAAkB,CAAC;IAC7B,+CAA+C;IAC/C,QAAQ,EAAE,kBAAkB,GAAG,IAAI,CAAC;CACrC;AAED,sDAAsD;AACtD,MAAM,WAAW,YAAY;IAC3B,0CAA0C;IAC1C,KAAK,EAAE,kBAAkB,EAAE,CAAC;IAC5B,oCAAoC;IACpC,KAAK,EAAE,MAAM,CAAC;CACf;AAED,2DAA2D;AAC3D,MAAM,WAAW,cAAc;IAC7B,gCAAgC;IAChC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,kBAAkB,EAAE,QAAQ,GAAG,SAAS,GAAG,gBAAgB,GAAG,iBAAiB,GAAG,WAAW,GAAG,YAAY,GAAG,eAAe,GAAG,aAAa,CAAC,CAAC,CAAC;IACjL,kIAAkI;IAClI,QAAQ,CAAC,QAAQ,EAAE,SAAS,GAAG,SAAS,GAAG,SAAS,CAAC;IACrD,sDAAsD;IACtD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,iDAAiD;IACjD,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,uDAAuD;IACvD,QAAQ,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC;CACzB;AAED,qFAAqF;AACrF,MAAM,WAAW,cAAc;IAC7B,yEAAyE;IACzE,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,GAAG,IAAI,CAAC;IAC7C,uFAAuF;IACvF,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;CAC5B;AAED;;;;GAIG;AACH,8BAAsB,kBAAkB;IACtC,qDAAqD;IACrD,QAAQ,CAAC,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,EAAE,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC;IACnG,+FAA+F;IAC/F,QAAQ,CAAC,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;IACnH,uCAAuC;IACvC,QAAQ,CAAC,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,EAAE,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC;IACtF,2BAA2B;IAC3B,QAAQ,CAAC,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,EAAE,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAC7F,iCAAiC;IACjC,QAAQ,CAAC,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAC5G,oDAAoD;IACpD,QAAQ,CAAC,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IACxE,4DAA4D;IAC5D,QAAQ,CAAC,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,EAAE,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC;IACtG,0EAA0E;IAC1E,QAAQ,CAAC,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAC5F,0EAA0E;IAC1E,QAAQ,CAAC,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC;IAExF,oIAAoI;IACpI,QAAQ,CAAC,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,EAAE,IAAI,EAAE,SAAS,WAAW,EAAE,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC;IAC5G,uDAAuD;IACvD,QAAQ,CAAC,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;IACnH,+FAA+F;IAC/F,QAAQ,CAAC,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC;IAC7F,yDAAyD;IACzD,QAAQ,CAAC,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC;IAC9G,8DAA8D;IAC9D,QAAQ,CAAC,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC;IACtF,mGAAmG;IACnG,QAAQ,CAAC,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC;IACtI,4DAA4D;IAC5D,QAAQ,CAAC,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAC1F,gFAAgF;IAChF,QAAQ,CAAC,qBAAqB,CAAC,MAAM,EAAE,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC;CAC9D;AAYD;;;;;;GAMG;AACH,qBACa,wBAAyB,SAAQ,kBAAkB;IAEnC,OAAO,CAAC,QAAQ,CAAC,MAAM;IAChB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvD,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAFqB,MAAM,EAAE,cAAc,EACf,MAAM,EAAE,oBAAoB,EAC5D,IAAI,EAAE,WAAW;IAMpC,OAAO,CAAC,GAAG;IAKX,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,EAAE,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC;IAI1F,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;IAI1G,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,EAAE,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC;IAI7E,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,EAAE,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAIpF,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAQ7F,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIrE,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,EAAE,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC;IAI7F,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAOnF,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC;IAI/E,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,EAAE,IAAI,EAAE,SAAS,WAAW,EAAE,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC;IAYnG,OAAO,CAAC,OAAO;IAcf,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;IAY1G,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC;IASpF,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC;IAgBrG,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAO7E,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC;IAwB7H,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAW3E,qBAAqB,CAAC,MAAM,EAAE,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC;CAc3D"}

package/dist/webhooks/webhooks.repository.js

@@ -0,0 +1,246 @@
+"use strict";
+// =============================================================================
+// WebhooksRepository: every read and write of the two webhook tables
+// (issue #1046)
+// =============================================================================
+//
+// ONE PLACE decides which client touches which row, so row-level security is
+// never an afterthought of a caller:
+//
+//   - an organization's rows (`orgId` set: user and org scope) run in
+//     `runInOrg(PLATFORM_PRISMA, { orgId }, ...)`, the transaction-local
+//     `app.org_id` the policy reads;
+//   - a system-scope row has NO organization (`orgId` null); the policy shows
+//     it to the bypass client only, so those run in `WEBHOOKS_SYSTEM_PRISMA`
+//     with the registered reason `webhooks` (the purge uses `retention`).
+//
+// Every method takes the row's `orgId` (null = system) as its first argument
+// and every query also filters on it, so a mis-routed call finds nothing.
+//
+// Fan-out and redelivery insert the delivery rows and enqueue their jobs in ONE
+// transaction (`JobsService.enqueueWithin`): a delivery without a job, or a job
+// without a delivery, cannot exist.
+//
+// `WebhooksRepository` is an abstract class used as the injection token; the
+// slice's testing entry has an in-memory implementation.
+// =============================================================================
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PrismaWebhooksRepository = exports.WebhooksRepository = void 0;
+const common_1 = require("@nestjs/common");
+const index_1 = require("../core/index");
+const index_2 = require("../identity/index");
+const index_3 = require("../jobs/index");
+const ports_1 = require("./ports");
+const webhooks_constants_1 = require("./webhooks.constants");
+/**
+ * The slice's data port. See the file header.
+ *
+ * @stability experimental
+ */
+class WebhooksRepository {
+}
+exports.WebhooksRepository = WebhooksRepository;
+const SYSTEM_RETENTION_REASON = 'retention';
+function endpointWhere(orgId, filter) {
+    return {
+        orgId,
+        scope: filter.scope,
+        ...(filter.scope === 'user' && filter.ownerUserId !== undefined ? { ownerUserId: filter.ownerUserId } : {}),
+    };
+}
+/**
+ * The Prisma implementation. See the file header.
+ *
+ * @internal
+ *
+ * @stability experimental
+ */
+let PrismaWebhooksRepository = class PrismaWebhooksRepository extends WebhooksRepository {
+    prisma;
+    system;
+    jobs;
+    constructor(prisma, system, jobs) {
+        super();
+        this.prisma = prisma;
+        this.system = system;
+        this.jobs = jobs;
+        (0, webhooks_constants_1.registerWebhooksSystemAccessReason)();
+    }
+    run(orgId, fn) {
+        if (orgId === null)
+            return this.system.runAsSystem(webhooks_constants_1.WEBHOOKS_SYSTEM_ACCESS_REASON, fn);
+        return (0, index_1.runInOrg)(this.prisma, { orgId }, (tx) => fn(tx));
+    }
+    listEndpoints(orgId, filter) {
+        return this.run(orgId, (tx) => tx.webhookEndpoint.findMany({ where: endpointWhere(orgId, filter), orderBy: { createdAt: 'desc' } }));
+    }
+    findEndpoint(orgId, id, filter) {
+        return this.run(orgId, (tx) => tx.webhookEndpoint.findFirst({ where: { id, ...endpointWhere(orgId, filter) } }));
+    }
+    countEndpoints(orgId, filter) {
+        return this.run(orgId, (tx) => tx.webhookEndpoint.count({ where: endpointWhere(orgId, filter) }));
+    }
+    createEndpoint(orgId, data) {
+        return this.run(orgId, (tx) => tx.webhookEndpoint.create({ data: { ...data, orgId } }));
+    }
+    updateEndpoint(orgId, id, patch) {
+        return this.run(orgId, async (tx) => {
+            const result = await tx.webhookEndpoint.updateMany({ where: { id, orgId }, data: patch });
+            if (result.count !== 1)
+                throw new Error('Webhook endpoint not found');
+            return (await tx.webhookEndpoint.findFirst({ where: { id, orgId } }));
+        });
+    }
+    async deleteEndpoint(orgId, id) {
+        await this.run(orgId, (tx) => tx.webhookEndpoint.deleteMany({ where: { id, orgId } }));
+    }
+    enabledEndpoints(orgId, filter) {
+        return this.run(orgId, (tx) => tx.webhookEndpoint.findMany({ where: { ...endpointWhere(orgId, filter), enabled: true } }));
+    }
+    disableEndpoint(orgId, id, reason) {
+        return this.run(orgId, async (tx) => {
+            const result = await tx.webhookEndpoint.updateMany({ where: { id, orgId, enabled: true }, data: { enabled: false, disabledReason: reason } });
+            return result.count === 1;
+        });
+    }
+    loadOwner(orgId, userId) {
+        return this.run(orgId, (tx) => tx.user.findUnique({ where: { id: userId }, include: index_2.PRINCIPAL_USER_INCLUDE }));
+    }
+    insertDeliveries(orgId, rows) {
+        if (rows.length === 0)
+            return Promise.resolve([]);
+        return this.run(orgId, async (tx) => {
+            const inserted = await tx.webhookDelivery.createManyAndReturn({
+                data: rows.map((row) => ({ ...row, orgId, payload: row.payload })),
+                skipDuplicates: true,
+            });
+            for (const delivery of inserted)
+                await this.enqueue(tx, orgId, delivery.id, 'upload', undefined);
+            return inserted;
+        });
+    }
+    enqueue(tx, orgId, deliveryId, reason, scheduledFor) {
+        return this.jobs.enqueueWithin(tx, {
+            type: webhooks_constants_1.WEBHOOK_DELIVER_JOB_TYPE,
+            reason,
+            subjectType: webhooks_constants_1.WEBHOOK_DELIVERY_SUBJECT_TYPE,
+            subjectId: deliveryId,
+            orgId,
+            payload: { deliveryId },
+            ...(scheduledFor ? { scheduledFor } : {}),
+            // A retry is enqueued while the current attempt's job is still running: the dedup key (type + subject) would collapse onto it.
+            skipDedup: true,
+        });
+    }
+    findDelivery(orgId, id, filter) {
+        return this.run(orgId, (tx) => tx.webhookDelivery.findFirst({
+            where: {
+                id,
+                orgId,
+                endpoint: { is: { ...endpointWhere(orgId, filter) } },
+            },
+        }));
+    }
+    loadDeliveryForJob(orgId, id) {
+        return this.run(orgId, async (tx) => {
+            const delivery = await tx.webhookDelivery.findFirst({ where: { id, orgId } });
+            if (!delivery)
+                return null;
+            const endpoint = await tx.webhookEndpoint.findFirst({ where: { id: delivery.endpointId, orgId } });
+            return { delivery, endpoint };
+        });
+    }
+    listDeliveries(orgId, endpointId, query) {
+        const where = {
+            orgId,
+            endpointId,
+            ...(query.status ? { status: query.status } : {}),
+            ...(query.eventKey ? { eventKey: query.eventKey } : {}),
+        };
+        return this.run(orgId, async (tx) => {
+            const [items, total] = [
+                await tx.webhookDelivery.findMany({ where, orderBy: { createdAt: 'desc' }, skip: (query.page - 1) * query.pageSize, take: query.pageSize }),
+                await tx.webhookDelivery.count({ where }),
+            ];
+            return { items, total };
+        });
+    }
+    markDelivering(orgId, id) {
+        return this.run(orgId, async (tx) => {
+            await tx.webhookDelivery.updateMany({ where: { id, orgId }, data: { status: 'delivering', attempt: { increment: 1 }, nextAttemptAt: null } });
+            return (await tx.webhookDelivery.findFirst({ where: { id, orgId } }));
+        });
+    }
+    settleAttempt(orgId, deliveryId, endpointId, outcome) {
+        return this.run(orgId, async (tx) => {
+            await tx.webhookDelivery.updateMany({ where: { id: deliveryId, orgId }, data: outcome.delivery });
+            const now = new Date();
+            let endpoint = null;
+            let disabled = false;
+            if (outcome.endpoint === 'success') {
+                await tx.webhookEndpoint.updateMany({ where: { id: endpointId, orgId }, data: { consecutiveFailures: 0, lastDeliveryAt: now, lastSuccessAt: now } });
+                endpoint = await tx.webhookEndpoint.findFirst({ where: { id: endpointId, orgId } });
+            }
+            else if (outcome.endpoint === 'failure') {
+                await tx.webhookEndpoint.updateMany({ where: { id: endpointId, orgId }, data: { consecutiveFailures: { increment: 1 }, lastDeliveryAt: now } });
+                endpoint = await tx.webhookEndpoint.findFirst({ where: { id: endpointId, orgId } });
+                const reason = outcome.disableNow ?? (endpoint && endpoint.consecutiveFailures >= outcome.threshold ? 'circuit_open' : undefined);
+                if (endpoint && reason) {
+                    const result = await tx.webhookEndpoint.updateMany({ where: { id: endpointId, orgId, enabled: true }, data: { enabled: false, disabledReason: reason } });
+                    disabled = result.count === 1;
+                    if (disabled)
+                        endpoint = await tx.webhookEndpoint.findFirst({ where: { id: endpointId, orgId } });
+                }
+            }
+            if (outcome.retryAt)
+                await this.enqueue(tx, orgId, deliveryId, 'rerun', outcome.retryAt);
+            return { endpoint, disabled };
+        });
+    }
+    resetForRedelivery(orgId, id) {
+        return this.run(orgId, async (tx) => {
+            await tx.webhookDelivery.updateMany({
+                where: { id, orgId },
+                data: { status: 'pending', attempt: 0, responseStatus: null, responseSnippet: null, errorCode: null, durationMs: null, nextAttemptAt: null, deliveredAt: null },
+            });
+            await this.enqueue(tx, orgId, id, 'rerun', undefined);
+            return (await tx.webhookDelivery.findFirst({ where: { id, orgId } }));
+        });
+    }
+    async purgeDeliveriesBefore(cutoff) {
+        let deleted = 0;
+        for (let batch = 0; batch < webhooks_constants_1.WEBHOOK_PURGE_MAX_BATCHES; batch += 1) {
+            const count = await this.system.runAsSystem(SYSTEM_RETENTION_REASON, async (tx) => {
+                const rows = await tx.webhookDelivery.findMany({ where: { createdAt: { lt: cutoff } }, select: { id: true }, orderBy: { createdAt: 'asc' }, take: webhooks_constants_1.WEBHOOK_PURGE_BATCH });
+                if (rows.length === 0)
+                    return 0;
+                const result = await tx.webhookDelivery.deleteMany({ where: { id: { in: rows.map((row) => row.id) } } });
+                return result.count;
+            });
+            deleted += count;
+            if (count < webhooks_constants_1.WEBHOOK_PURGE_BATCH)
+                break;
+        }
+        return deleted;
+    }
+};
+exports.PrismaWebhooksRepository = PrismaWebhooksRepository;
+exports.PrismaWebhooksRepository = PrismaWebhooksRepository = __decorate([
+    (0, common_1.Injectable)(),
+    __param(0, (0, common_1.Inject)(index_1.PLATFORM_PRISMA)),
+    __param(1, (0, common_1.Inject)(ports_1.WEBHOOKS_SYSTEM_PRISMA)),
+    __metadata("design:paramtypes", [Object, Object, index_3.JobsService])
+], PrismaWebhooksRepository);
+//# sourceMappingURL=webhooks.repository.js.map

package/dist/webhooks/webhooks.repository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhooks.repository.js","sourceRoot":"","sources":["../../src/webhooks/webhooks.repository.ts"],"names":[],"mappings":";AAAA,gFAAgF;AAChF,qEAAqE;AACrE,gBAAgB;AAChB,gFAAgF;AAChF,EAAE;AACF,6EAA6E;AAC7E,qCAAqC;AACrC,EAAE;AACF,sEAAsE;AACtE,yEAAyE;AACzE,qCAAqC;AACrC,8EAA8E;AAC9E,6EAA6E;AAC7E,0EAA0E;AAC1E,EAAE;AACF,6EAA6E;AAC7E,0EAA0E;AAC1E,EAAE;AACF,gFAAgF;AAChF,gFAAgF;AAChF,oCAAoC;AACpC,EAAE;AACF,6EAA6E;AAC7E,yDAAyD;AACzD,gFAAgF;;;;;;;;;;;;;;;AAEhF,2CAAoD;AAGpD,yCAA0D;AAC1D,6CAA2D;AAC3D,yCAAyD;AAEzD,mCAAiG;AACjG,6DAAkN;AAiGlN;;;;GAIG;AACH,MAAsB,kBAAkB;CAoCvC;AApCD,gDAoCC;AAED,MAAM,uBAAuB,GAAG,WAAW,CAAC;AAE5C,SAAS,aAAa,CAAC,KAAoB,EAAE,MAAsB;IACjE,OAAO;QACL,KAAK;QACL,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,MAAM,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5G,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AAEI,IAAM,wBAAwB,GAA9B,MAAM,wBAAyB,SAAQ,kBAAkB;IAElB;IACO;IAChC;IAHnB,YAC4C,MAAsB,EACf,MAA4B,EAC5D,IAAiB;QAElC,KAAK,EAAE,CAAC;QAJkC,WAAM,GAAN,MAAM,CAAgB;QACf,WAAM,GAAN,MAAM,CAAsB;QAC5D,SAAI,GAAJ,IAAI,CAAa;QAGlC,IAAA,uDAAkC,GAAE,CAAC;IACvC,CAAC;IAEO,GAAG,CAAI,KAAoB,EAAE,EAAkC;QACrE,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,kDAA6B,EAAE,EAAE,CAAC,CAAC;QACtF,OAAO,IAAA,gBAAQ,EAAC,IAAI,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAA2B,CAAC,CAAC,CAAC;IACnF,CAAC;IAED,aAAa,CAAC,KAAoB,EAAE,MAAsB;QACxD,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,eAAe,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,aAAa,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;IACvI,CAAC;IAED,YAAY,CAAC,KAAoB,EAAE,EAAU,EAAE,MAAsB;QACnE,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,eAAe,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,GAAG,aAAa,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IACnH,CAAC;IAED,cAAc,CAAC,KAAoB,EAAE,MAAsB;QACzD,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,aAAa,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IACpG,CAAC;IAED,cAAc,CAAC,KAAoB,EAAE,IAAiB;QACpD,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC;IAC1F,CAAC;IAED,cAAc,CAAC,KAAoB,EAAE,EAAU,EAAE,KAAoB;QACnE,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;YAClC,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,eAAe,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAC1F,IAAI,MAAM,CAAC,KAAK,KAAK,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;YACtE,OAAO,CAAC,MAAM,EAAE,CAAC,eAAe,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,CAAuB,CAAC;QAC9F,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,KAAoB,EAAE,EAAU;QACnD,MAAM,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,eAAe,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC;IACzF,CAAC;IAED,gBAAgB,CAAC,KAAoB,EAAE,MAAsB;QAC3D,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,eAAe,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,EAAE,GAAG,aAAa,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;IAC7H,CAAC;IAED,eAAe,CAAC,KAAoB,EAAE,EAAU,EAAE,MAAc;QAC9D,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;YAClC,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,eAAe,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;YAC9I,OAAO,MAAM,CAAC,KAAK,KAAK,CAAC,CAAC;QAC5B,CAAC,CAAC,CAAC;IACL,CAAC;IAED,SAAS,CAAC,KAAoB,EAAE,MAAc;QAC5C,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,8BAAsB,EAAE,CAAC,CAAC,CAAC;IACjH,CAAC;IAED,gBAAgB,CAAC,KAAoB,EAAE,IAA4B;QACjE,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAClD,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;YAClC,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,eAAe,CAAC,mBAAmB,CAAC;gBAC5D,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC,OAAgB,EAAE,CAAC,CAAC;gBAC3E,cAAc,EAAE,IAAI;aACrB,CAAC,CAAC;YACH,KAAK,MAAM,QAAQ,IAAI,QAAQ;gBAAE,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,EAAE,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;YACjG,OAAO,QAAQ,CAAC;QAClB,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,OAAO,CAAC,EAAc,EAAE,KAAoB,EAAE,UAAkB,EAAE,MAA0B,EAAE,YAA8B;QAClI,OAAO,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,EAAuB,EAAE;YACtD,IAAI,EAAE,6CAAwB;YAC9B,MAAM;YACN,WAAW,EAAE,kDAA6B;YAC1C,SAAS,EAAE,UAAU;YACrB,KAAK;YACL,OAAO,EAAE,EAAE,UAAU,EAAE;YACvB,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzC,+HAA+H;YAC/H,SAAS,EAAE,IAAI;SAChB,CAAC,CAAC;IACL,CAAC;IAED,YAAY,CAAC,KAAoB,EAAE,EAAU,EAAE,MAAsB;QACnE,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,CAC5B,EAAE,CAAC,eAAe,CAAC,SAAS,CAAC;YAC3B,KAAK,EAAE;gBACL,EAAE;gBACF,KAAK;gBACL,QAAQ,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,aAAa,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,EAAE;aACtD;SACF,CAAC,CACH,CAAC;IACJ,CAAC;IAED,kBAAkB,CAAC,KAAoB,EAAE,EAAU;QACjD,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;YAClC,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,eAAe,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;YAC9E,IAAI,CAAC,QAAQ;gBAAE,OAAO,IAAI,CAAC;YAC3B,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,eAAe,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,QAAQ,CAAC,UAAU,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;YACnG,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;QAChC,CAAC,CAAC,CAAC;IACL,CAAC;IAED,cAAc,CAAC,KAAoB,EAAE,UAAkB,EAAE,KAAoB;QAC3E,MAAM,KAAK,GAAG;YACZ,KAAK;YACL,UAAU;YACV,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjD,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACxD,CAAC;QACF,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;YAClC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG;gBACrB,MAAM,EAAE,CAAC,eAAe,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC;gBAC3I,MAAM,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,CAAC;aAC1C,CAAC;YACF,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;QAC1B,CAAC,CAAC,CAAC;IACL,CAAC;IAED,cAAc,CAAC,KAAoB,EAAE,EAAU;QAC7C,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;YAClC,MAAM,EAAE,CAAC,eAAe,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;YAC9I,OAAO,CAAC,MAAM,EAAE,CAAC,eAAe,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,CAAuB,CAAC;QAC9F,CAAC,CAAC,CAAC;IACL,CAAC;IAED,aAAa,CAAC,KAAoB,EAAE,UAAkB,EAAE,UAAkB,EAAE,OAAuB;QACjG,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;YAClC,MAAM,EAAE,CAAC,eAAe,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;YAClG,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,IAAI,QAAQ,GAA8B,IAAI,CAAC;YAC/C,IAAI,QAAQ,GAAG,KAAK,CAAC;YACrB,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;gBACnC,MAAM,EAAE,CAAC,eAAe,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,mBAAmB,EAAE,CAAC,EAAE,cAAc,EAAE,GAAG,EAAE,aAAa,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;gBACrJ,QAAQ,GAAG,MAAM,EAAE,CAAC,eAAe,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;YACtF,CAAC;iBAAM,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC1C,MAAM,EAAE,CAAC,eAAe,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,mBAAmB,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;gBAChJ,QAAQ,GAAG,MAAM,EAAE,CAAC,eAAe,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;gBACpF,MAAM,MAAM,GAAG,OAAO,CAAC,UAAU,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,mBAAmB,IAAI,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;gBAClI,IAAI,QAAQ,IAAI,MAAM,EAAE,CAAC;oBACvB,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,eAAe,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;oBAC1J,QAAQ,GAAG,MAAM,CAAC,KAAK,KAAK,CAAC,CAAC;oBAC9B,IAAI,QAAQ;wBAAE,QAAQ,GAAG,MAAM,EAAE,CAAC,eAAe,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;gBACpG,CAAC;YACH,CAAC;YACD,IAAI,OAAO,CAAC,OAAO;gBAAE,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;YACzF,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;QAChC,CAAC,CAAC,CAAC;IACL,CAAC;IAED,kBAAkB,CAAC,KAAoB,EAAE,EAAU;QACjD,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;YAClC,MAAM,EAAE,CAAC,eAAe,CAAC,UAAU,CAAC;gBAClC,KAAK,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE;gBACpB,IAAI,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE;aAChK,CAAC,CAAC;YACH,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;YACtD,OAAO,CAAC,MAAM,EAAE,CAAC,eAAe,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,CAAuB,CAAC;QAC9F,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,qBAAqB,CAAC,MAAY;QACtC,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,8CAAyB,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;YAClE,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,uBAAuB,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;gBAChF,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,eAAe,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,wCAAmB,EAAE,CAAC,CAAC;gBACzK,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;oBAAE,OAAO,CAAC,CAAC;gBAChC,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,eAAe,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;gBACzG,OAAO,MAAM,CAAC,KAAK,CAAC;YACtB,CAAC,CAAC,CAAC;YACH,OAAO,IAAI,KAAK,CAAC;YACjB,IAAI,KAAK,GAAG,wCAAmB;gBAAE,MAAM;QACzC,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;CACF,CAAA;AAjLY,4DAAwB;mCAAxB,wBAAwB;IADpC,IAAA,mBAAU,GAAE;IAGR,WAAA,IAAA,eAAM,EAAC,uBAAe,CAAC,CAAA;IACvB,WAAA,IAAA,eAAM,EAAC,8BAAsB,CAAC,CAAA;qDACR,mBAAW;GAJzB,wBAAwB,CAiLpC"}