@mastra/factory 0.16.0-alpha.9 → 0.16.0

package/dist/integrations/gitlab/version-control.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"version-control.js","names":[],"sources":["../../../src/integrations/gitlab/version-control.ts"],"sourcesContent":["import { createHash } from 'node:crypto';\n\nimport type { IntegrationConnection } from '../../capabilities/connection.js';\nimport type {\n  PullRequest,\n  PullRequestComment,\n  RequestedReviewers,\n  Review,\n  ReviewComment,\n  VersionControl,\n} from '../../capabilities/version-control.js';\nimport type { SourceControlStorageHandle } from '../../storage/domains/source-control/base.js';\nimport {\n  GITLAB_DISCUSSIONS_PAGE_SIZE,\n  GITLAB_MERGE_REQUESTS_PAGE_SIZE,\n  GITLAB_NOTES_PAGE_SIZE,\n  GitLabApiError,\n} from './api.js';\nimport type {\n  GitLabApiClient,\n  GitLabDiscussionNote,\n  GitLabDiscussionPosition,\n  GitLabMember,\n  GitLabMergeRequest,\n  GitLabNote,\n  GitLabUser,\n} from './api.js';\n\nexport interface GitLabVersionControlContext {\n  api: GitLabApiClient;\n  connection: IntegrationConnection;\n  host: string;\n  webBaseUrl?: string;\n  repositoryAccessToken?: () => Promise<string>;\n}\n\nexport interface GitLabVersionControlDependencies {\n  contextForConnection(connection: IntegrationConnection): Promise<GitLabVersionControlContext>;\n  contextForStoredInstallation?(connection: IntegrationConnection, host: string | undefined): Promise<GitLabVersionControlContext>;\n}\n\nexport function buildGitLabVersionControl(deps: GitLabVersionControlDependencies): VersionControl {\n  let storage: SourceControlStorageHandle | undefined;\n\n  const sourceControlStorage = (): SourceControlStorageHandle => {\n    if (!storage) throw new Error('GitLab VersionControl is not initialized.');\n    return storage;\n  };\n\n  const listPullRequests: VersionControl['listPullRequests'] = async input => {\n    const context = await deps.contextForConnection(input.connection);\n    const page = parsePositiveCursor(input.cursor);\n    const state = input.state === 'open' ? 'opened' : input.state === 'closed' ? 'all' : (input.state ?? 'opened');\n    const mergeRequests = await context.api.listMergeRequests(input.sourceId, { page, state });\n    return {\n      pullRequests: mergeRequests\n        .filter(mergeRequest => input.state !== 'closed' || mergeRequest.state === 'closed' || mergeRequest.state === 'merged')\n        .filter(mergeRequest => input.includeDrafts !== false || !isDraft(mergeRequest))\n        .map(toPullRequest),\n      nextCursor: mergeRequests.length === GITLAB_MERGE_REQUESTS_PAGE_SIZE ? String(page + 1) : null,\n    };\n  };\n\n  const getPullRequest: VersionControl['getPullRequest'] = async input => {\n    const context = await deps.contextForConnection(input.connection);\n    try {\n      return toPullRequest(\n        await context.api.getMergeRequest(input.sourceId, requirePositiveId(input.pullRequestId, 'merge request')),\n      );\n    } catch (error) {\n      if (error instanceof GitLabApiError && error.status === 404) return null;\n      throw error;\n    }\n  };\n\n  const createPullRequest: VersionControl['createPullRequest'] = async input => {\n    const context = await deps.contextForConnection(input.connection);\n    const title = input.draft && !/^(?:draft:|\\[draft\\])/i.test(input.title) ? `Draft: ${input.title}` : input.title;\n    return toPullRequest(\n      await context.api.createMergeRequest(input.sourceId, {\n        sourceBranch: input.headBranch,\n        targetBranch: input.baseBranch,\n        title,\n        description: input.body,\n      }),\n    );\n  };\n\n  const updatePullRequest: VersionControl['updatePullRequest'] = async input => {\n    const context = await deps.contextForConnection(input.connection);\n    return toPullRequest(\n      await context.api.updateMergeRequest(input.sourceId, requirePositiveId(input.pullRequestId, 'merge request'), {\n        title: input.title,\n        description: input.body === null ? '' : input.body,\n        targetBranch: input.baseBranch,\n        stateEvent: input.state === 'closed' ? 'close' : input.state === 'open' ? 'reopen' : undefined,\n      }),\n    );\n  };\n\n  const closePullRequest: VersionControl['closePullRequest'] = input =>\n    updatePullRequest({ ...input, state: 'closed' });\n\n  const mergePullRequest: VersionControl['mergePullRequest'] = async input => {\n    if (input.method === 'rebase') {\n      throw notSupported('GitLab rebases merge requests asynchronously; rebase-and-merge is not supported.');\n    }\n    const context = await deps.contextForConnection(input.connection);\n    const commitMessage = combinedCommitMessage(input.commitTitle, input.commitMessage);\n    const result = await context.api.mergeMergeRequest(\n      input.sourceId,\n      requirePositiveId(input.pullRequestId, 'merge request'),\n      {\n        squash: input.method === 'squash',\n        mergeCommitMessage: input.method === 'squash' ? undefined : commitMessage,\n        squashCommitMessage: input.method === 'squash' ? commitMessage : undefined,\n      },\n    );\n    const merged = result.state === 'merged' || Boolean(result.merged_at);\n    return {\n      merged,\n      message: result.message ?? (merged ? 'Merge request merged.' : 'Merge request was not merged.'),\n      sha: result.squash_commit_sha ?? result.merge_commit_sha ?? result.sha ?? null,\n    };\n  };\n\n  const listComments: VersionControl['listComments'] = async input => {\n    const context = await deps.contextForConnection(input.connection);\n    const mergeRequestIid = requirePositiveId(input.pullRequestId, 'merge request');\n    const page = parsePositiveCursor(input.cursor);\n    const notes = await context.api.listMergeRequestNotes(input.sourceId, mergeRequestIid, { page });\n    return {\n      comments: notes\n        .filter(note => !note.system && note.type !== 'DiffNote')\n        .map(note => toPullRequestComment(webBaseUrl(context), input.sourceId, mergeRequestIid, note)),\n      nextCursor: notes.length === GITLAB_NOTES_PAGE_SIZE ? String(page + 1) : null,\n    };\n  };\n\n  const createComment: VersionControl['createComment'] = async input => {\n    const context = await deps.contextForConnection(input.connection);\n    const mergeRequestIid = requirePositiveId(input.pullRequestId, 'merge request');\n    const note = await context.api.createMergeRequestNote(input.sourceId, mergeRequestIid, input.body);\n    return toPullRequestComment(webBaseUrl(context), input.sourceId, mergeRequestIid, note);\n  };\n\n  const updateComment: VersionControl['updateComment'] = async input => {\n    const context = await deps.contextForConnection(input.connection);\n    const { mergeRequestIid, noteId } = parseNoteId(input.commentId);\n    const note = await context.api.updateMergeRequestNote(input.sourceId, mergeRequestIid, noteId, input.body);\n    return toPullRequestComment(webBaseUrl(context), input.sourceId, mergeRequestIid, note);\n  };\n\n  const deleteComment: VersionControl['deleteComment'] = async input => {\n    const context = await deps.contextForConnection(input.connection);\n    const { mergeRequestIid, noteId } = parseNoteId(input.commentId);\n    await context.api.deleteMergeRequestNote(input.sourceId, mergeRequestIid, noteId);\n  };\n\n  const listReviews: VersionControl['listReviews'] = async input => {\n    const context = await deps.contextForConnection(input.connection);\n    const mergeRequestIid = requirePositiveId(input.pullRequestId, 'merge request');\n    const approvals = await context.api.getMergeRequestApprovals(input.sourceId, mergeRequestIid);\n    return {\n      reviews: (approvals.approved_by ?? []).map(({ user }) =>\n        toApprovalReview(webBaseUrl(context), input.sourceId, mergeRequestIid, user),\n      ),\n      nextCursor: null,\n    };\n  };\n\n  const getReview: VersionControl['getReview'] = async input => {\n    const mergeRequestIid = requirePositiveId(input.pullRequestId, 'merge request');\n    const approvalPrefix = `${mergeRequestIid}:approval`;\n    const commentPrefix = `${mergeRequestIid}:comment:`;\n    if (input.reviewId !== approvalPrefix && !input.reviewId.startsWith(`${approvalPrefix}:`) && !input.reviewId.startsWith(commentPrefix)) {\n      return null;\n    }\n    const context = await deps.contextForConnection(input.connection);\n    if (input.reviewId === approvalPrefix || input.reviewId.startsWith(`${approvalPrefix}:`)) {\n      const reviewerKey = input.reviewId === approvalPrefix ? null : input.reviewId.slice(approvalPrefix.length + 1);\n      if (reviewerKey === '') return null;\n      const currentUser = reviewerKey === null ? await context.api.getCurrentUser() : null;\n      const approvals = await context.api.getMergeRequestApprovals(input.sourceId, mergeRequestIid);\n      const user = (approvals.approved_by ?? []).map(entry => entry.user).find(candidate =>\n        reviewerKey === null\n          ? (currentUser?.id !== undefined && candidate.id === currentUser.id) ||\n            candidate.username === currentUser?.username\n          : String(candidate.id ?? candidate.username) === reviewerKey,\n      );\n      return user ? toApprovalReview(webBaseUrl(context), input.sourceId, mergeRequestIid, user) : null;\n    }\n    const noteId = parsePositiveInteger(input.reviewId.slice(commentPrefix.length));\n    if (noteId === null) return null;\n    try {\n      const note = await context.api.getMergeRequestNote(input.sourceId, mergeRequestIid, noteId);\n      if (note.system || note.type === 'DiffNote') return null;\n      return toCommentReview(webBaseUrl(context), input.sourceId, mergeRequestIid, note);\n    } catch (error) {\n      if (error instanceof GitLabApiError && error.status === 404) return null;\n      throw error;\n    }\n  };\n\n  const createReview: VersionControl['createReview'] = async input =>\n    submitReviewAction(deps, {\n      connection: input.connection,\n      sourceId: input.sourceId,\n      pullRequestId: input.pullRequestId,\n      event: input.event,\n      body: input.body,\n      commitId: input.commitId,\n    });\n\n  const updateReview: VersionControl['updateReview'] = async () => {\n    // FLAGGED FOR MANUAL REVIEW (spec §6.2)\n    throw notSupported('GitLab does not expose mutable pending review objects.');\n  };\n\n  const submitReview: VersionControl['submitReview'] = async input =>\n    submitReviewAction(deps, {\n      connection: input.connection,\n      sourceId: input.sourceId,\n      pullRequestId: input.pullRequestId,\n      event: input.event,\n      body: input.body,\n    });\n\n  const dismissReview: VersionControl['dismissReview'] = async () => {\n    // FLAGGED FOR MANUAL REVIEW (spec §6.2)\n    throw notSupported('GitLab approval dismissal has no GitHub review equivalent.');\n  };\n\n  const deletePendingReview: VersionControl['deletePendingReview'] = async () => {\n    // FLAGGED FOR MANUAL REVIEW (spec §6.2)\n    throw notSupported('GitLab does not expose pending review objects.');\n  };\n\n  const listReviewComments: VersionControl['listReviewComments'] = async input => {\n    const context = await deps.contextForConnection(input.connection);\n    const mergeRequestIid = requirePositiveId(input.pullRequestId, 'merge request');\n    const page = parsePositiveCursor(input.cursor);\n    const discussions = await context.api.listMergeRequestDiscussions(input.sourceId, mergeRequestIid, { page });\n    return {\n      comments: discussions.flatMap(discussion => {\n        const position = discussionPosition(discussion.notes);\n        if (!position) return [];\n        const root = discussion.notes.find(note => note.position) ?? discussion.notes[0];\n        const replyToId = root ? packDiscussionNoteId(mergeRequestIid, discussion.id, root.id) : null;\n        return discussion.notes\n          .filter(note => !note.system)\n          .map(note =>\n            toReviewComment(\n              webBaseUrl(context),\n              input.sourceId,\n              mergeRequestIid,\n              discussion.id,\n              note,\n              note === root ? null : replyToId,\n              position,\n            ),\n          );\n      }),\n      nextCursor: discussions.length === GITLAB_DISCUSSIONS_PAGE_SIZE ? String(page + 1) : null,\n    };\n  };\n\n  const createReviewComment: VersionControl['createReviewComment'] = async input => {\n    const context = await deps.contextForConnection(input.connection);\n    const mergeRequestIid = requirePositiveId(input.pullRequestId, 'merge request');\n    if (input.replyToId) {\n      const thread = parseReviewReplyId(input.replyToId);\n      if (thread.mergeRequestIid !== mergeRequestIid) {\n        throw new GitLabApiError('GitLab discussion does not belong to the requested merge request.', 400);\n      }\n      const discussion = await context.api.getMergeRequestDiscussion(\n        input.sourceId,\n        mergeRequestIid,\n        thread.discussionId,\n      );\n      const position = discussionPosition(discussion.notes);\n      if (!position) throw new GitLabApiError('GitLab discussion is not anchored to a diff.', 400);\n      const root = discussion.notes.find(note => note.position) ?? discussion.notes[0];\n      if (!root) throw new GitLabApiError('GitLab discussion response did not include a note.', 502);\n      const note = await context.api.addMergeRequestDiscussionNote(\n        input.sourceId,\n        mergeRequestIid,\n        thread.discussionId,\n        input.body,\n      );\n      return toReviewComment(\n        webBaseUrl(context),\n        input.sourceId,\n        mergeRequestIid,\n        thread.discussionId,\n        note,\n        packDiscussionNoteId(mergeRequestIid, thread.discussionId, root.id),\n        position,\n      );\n    }\n\n    const mergeRequest = await context.api.getMergeRequest(input.sourceId, mergeRequestIid);\n    if (!mergeRequest.diff_refs) {\n      throw new GitLabApiError('GitLab merge request diff refs are not ready.', 409);\n    }\n    if (mergeRequest.diff_refs.head_sha !== input.commitId) {\n      throw new GitLabApiError('GitLab merge request changed since this review comment was prepared.', 409);\n    }\n    const { path, line, side } = input;\n    if (typeof path !== 'string' || typeof line !== 'number' || (side !== 'left' && side !== 'right')) {\n      throw new GitLabApiError('GitLab diff review comment position is invalid.', 400);\n    }\n    if ((input.startLine === undefined) !== (input.startSide === undefined)) {\n      throw new GitLabApiError('A multi-line GitLab review comment requires both startLine and startSide.', 400);\n    }\n    const position: GitLabDiscussionPosition = {\n      position_type: 'text',\n      ...mergeRequest.diff_refs,\n      old_path: path,\n      new_path: path,\n      old_line: side === 'left' ? line : undefined,\n      new_line: side === 'right' ? line : undefined,\n      ...(input.startLine !== undefined && input.startSide\n        ? {\n            line_range: {\n              start: discussionLine(path, input.startLine, input.startSide),\n              end: discussionLine(path, line, side),\n            },\n          }\n        : {}),\n    };\n    const discussion = await context.api.createMergeRequestDiscussion(input.sourceId, mergeRequestIid, {\n      body: input.body,\n      commitId: input.commitId,\n      position,\n    });\n    const note = discussion.notes.find(candidate => candidate.position) ?? discussion.notes[0];\n    if (!note) throw new GitLabApiError('GitLab discussion response did not include a note.', 502);\n    return toReviewComment(webBaseUrl(context), input.sourceId, mergeRequestIid, discussion.id, note, null, position);\n  };\n\n  const updateReviewComment: VersionControl['updateReviewComment'] = async input => {\n    const context = await deps.contextForConnection(input.connection);\n    const reference = parseDiscussionNoteId(input.commentId);\n    const discussion = await context.api.getMergeRequestDiscussion(\n      input.sourceId,\n      reference.mergeRequestIid,\n      reference.discussionId,\n    );\n    const position = discussionPosition(discussion.notes);\n    if (!position) throw new GitLabApiError('GitLab discussion is not anchored to a diff.', 400);\n    const root = discussion.notes.find(candidate => candidate.position) ?? discussion.notes[0];\n    if (!root) throw new GitLabApiError('GitLab discussion response did not include a note.', 502);\n    const note = await context.api.updateMergeRequestDiscussionNote(\n      input.sourceId,\n      reference.mergeRequestIid,\n      reference.discussionId,\n      reference.noteId,\n      input.body,\n    );\n    return toReviewComment(\n      webBaseUrl(context),\n      input.sourceId,\n      reference.mergeRequestIid,\n      reference.discussionId,\n      note,\n      note.id === root.id ? null : packDiscussionNoteId(reference.mergeRequestIid, reference.discussionId, root.id),\n      position,\n    );\n  };\n\n  const deleteReviewComment: VersionControl['deleteReviewComment'] = async input => {\n    const context = await deps.contextForConnection(input.connection);\n    const reference = parseDiscussionNoteId(input.commentId);\n    await context.api.deleteMergeRequestDiscussionNote(\n      input.sourceId,\n      reference.mergeRequestIid,\n      reference.discussionId,\n      reference.noteId,\n    );\n  };\n\n  const resolveReviewThread: NonNullable<VersionControl['resolveReviewThread']> = async input => {\n    const context = await deps.contextForConnection(input.connection);\n    const reference = parseDiscussionNoteId(input.commentId);\n    await context.api.resolveMergeRequestDiscussion(\n      input.sourceId,\n      reference.mergeRequestIid,\n      reference.discussionId,\n      input.resolved,\n    );\n  };\n\n  const listRequestedReviewers: VersionControl['listRequestedReviewers'] = async input => {\n    const context = await deps.contextForConnection(input.connection);\n    const mergeRequest = await context.api.getMergeRequest(\n      input.sourceId,\n      requirePositiveId(input.pullRequestId, 'merge request'),\n    );\n    return toRequestedReviewers(mergeRequest);\n  };\n\n  const requestReviewers: VersionControl['requestReviewers'] = async input => {\n    rejectTeamReviewers(input.teams);\n    const context = await deps.contextForConnection(input.connection);\n    const mergeRequestIid = requirePositiveId(input.pullRequestId, 'merge request');\n    const mergeRequest = await context.api.getMergeRequest(input.sourceId, mergeRequestIid);\n    const requestedMembers = await resolveMembers(context.api, input.sourceId, input.users ?? []);\n    const currentIds = await reviewerIds(context.api, input.sourceId, mergeRequest.reviewers ?? []);\n    const reviewerIdsToSet = [...new Set([...currentIds, ...requestedMembers.map(member => member.id)])];\n    return toRequestedReviewers(\n      await context.api.setMergeRequestReviewers(input.sourceId, mergeRequestIid, reviewerIdsToSet),\n    );\n  };\n\n  const removeRequestedReviewers: VersionControl['removeRequestedReviewers'] = async input => {\n    rejectTeamReviewers(input.teams);\n    const context = await deps.contextForConnection(input.connection);\n    const mergeRequestIid = requirePositiveId(input.pullRequestId, 'merge request');\n    const mergeRequest = await context.api.getMergeRequest(input.sourceId, mergeRequestIid);\n    const removals = new Set((input.users ?? []).map(username => username.toLowerCase()));\n    const retained = (mergeRequest.reviewers ?? []).filter(user => !removals.has(user.username.toLowerCase()));\n    const retainedIds = await reviewerIds(context.api, input.sourceId, retained);\n    return toRequestedReviewers(\n      await context.api.setMergeRequestReviewers(input.sourceId, mergeRequestIid, retainedIds),\n    );\n  };\n\n  return {\n    initialize: input => {\n      storage = input.storage;\n    },\n    registerInstallation: async ({ orgId, userId, installation }) => {\n      const requestedConnection = parseConnection(installation.metadata?.connection);\n      if (!requestedConnection) {\n        throw new GitLabApiError('GitLab installation metadata must include a valid connection.', 400);\n      }\n      const context = await deps.contextForConnection(requestedConnection);\n      return sourceControlStorage().installations.upsert({\n        orgId,\n        connectedByUserId: userId,\n        externalId: installation.externalId,\n        accountName: installation.accountName,\n        accountType: installation.accountType,\n        providerMetadata: {\n          ...installation.metadata,\n          connection: context.connection,\n          host: normalizeHost(context.host),\n        },\n      });\n    },\n    registerRepositories: async ({ orgId, installationId, repositories }) => {\n      const normalizedRepositories = repositories.map(repository => ({\n        ...repository,\n        slug: normalizeSlug(repository.slug),\n      }));\n      return await Promise.all(\n        normalizedRepositories.map(repository =>\n          sourceControlStorage().repositories.upsert({\n            orgId,\n            input: {\n              installationId,\n              externalId: repository.externalId,\n              slug: repository.slug,\n              defaultBranch: repository.defaultBranch,\n              providerMetadata: repository.metadata,\n            },\n          }),\n        ),\n      );\n    },\n    getRepositoryTarget: async ({ orgId, repositoryId }) => {\n      const repository = await sourceControlStorage().repositories.get({ orgId, id: repositoryId });\n      if (!repository) throw new Error('Version-control repository not found.');\n      const installation = await sourceControlStorage().installations.get({\n        orgId,\n        id: repository.installationId,\n      });\n      if (!installation) throw new Error('Version-control installation not found.');\n      const connection = parseConnection(installation.providerMetadata.connection);\n      if (!connection) throw new GitLabApiError('GitLab installation connection metadata is invalid.', 500);\n      const context = await (deps.contextForStoredInstallation ?? deps.contextForConnection)(\n        connection,\n        typeof installation.providerMetadata.host === 'string' ? installation.providerMetadata.host : undefined,\n      );\n      // The API uses GitLab's immutable numeric project ID because Platform's\n      // proxy normalizes encoded path slashes; retain the slug for browser URLs.\n      return { connection: context.connection, sourceId: `${repository.externalId}:${repository.slug}` };\n    },\n    getRepositoryAccess: async ({ orgId, repositoryId }) => {\n      const repository = await sourceControlStorage().repositories.get({ orgId, id: repositoryId });\n      if (!repository) throw new Error('Version-control repository not found.');\n      const installation = await sourceControlStorage().installations.get({\n        orgId,\n        id: repository.installationId,\n      });\n      if (!installation) throw new Error('Version-control installation not found.');\n      const connection = parseConnection(installation.providerMetadata.connection);\n      if (!connection) throw new GitLabApiError('GitLab installation connection metadata is invalid.', 500);\n      const context = await (deps.contextForStoredInstallation ?? deps.contextForConnection)(\n        connection,\n        typeof installation.providerMetadata.host === 'string' ? installation.providerMetadata.host : undefined,\n      );\n      if (!context.repositoryAccessToken) {\n        throw notSupported('This GitLab connection does not expose credentials for repository cloning.');\n      }\n      const token = await context.repositoryAccessToken();\n      const baseUrl = webBaseUrl(context);\n      const slug = normalizeSlug(repository.slug);\n      return {\n        cloneUrl: `${baseUrl}/${slug}.git`,\n        authorization: { scheme: 'bearer', token, username: 'oauth2' },\n      };\n    },\n    listPullRequests,\n    getPullRequest,\n    createPullRequest,\n    updatePullRequest,\n    closePullRequest,\n    mergePullRequest,\n    listComments,\n    resolveReviewThread,\n    createComment,\n    updateComment,\n    deleteComment,\n    listReviews,\n    getReview,\n    createReview,\n    updateReview,\n    submitReview,\n    dismissReview,\n    deletePendingReview,\n    listReviewComments,\n    createReviewComment,\n    updateReviewComment,\n    deleteReviewComment,\n    listRequestedReviewers,\n    requestReviewers,\n    removeRequestedReviewers,\n  };\n}\n\nasync function submitReviewAction(\n  deps: GitLabVersionControlDependencies,\n  input: {\n    connection: IntegrationConnection;\n    sourceId: string;\n    pullRequestId: string;\n    event: 'approve' | 'request-changes' | 'comment' | undefined;\n    body?: string;\n    commitId?: string;\n  },\n): Promise<Review> {\n  const context = await deps.contextForConnection(input.connection);\n  const mergeRequestIid = requirePositiveId(input.pullRequestId, 'merge request');\n  if (input.event === 'request-changes') {\n    // FLAGGED FOR MANUAL REVIEW (spec §6.2)\n    throw notSupported('GitLab has no first-class request-changes review event.');\n  }\n  if (input.event === undefined) {\n    // FLAGGED FOR MANUAL REVIEW (spec §6.2)\n    throw notSupported('GitLab has no first-class pending review object.');\n  }\n  if (input.event === 'approve') {\n    const body = input.body?.trim();\n    await context.api.approveMergeRequest(input.sourceId, mergeRequestIid, input.commitId);\n    const comment = body\n      ? toPullRequestComment(\n          webBaseUrl(context),\n          input.sourceId,\n          mergeRequestIid,\n          await context.api.createMergeRequestNote(input.sourceId, mergeRequestIid, body),\n        )\n      : null;\n    return {\n      id: String(mergeRequestIid) + ':approval',\n      url: comment?.url ?? mergeRequestUrl(webBaseUrl(context), input.sourceId, mergeRequestIid),\n      author: comment?.author ?? null,\n      body: comment?.body ?? null,\n      state: 'approved',\n      commitId: null,\n      submittedAt: comment?.createdAt ?? null,\n    };\n  }\n  const body = input.body?.trim();\n  if (!body) throw new GitLabApiError('GitLab comment reviews require a body.', 400);\n  const note = await context.api.createMergeRequestNote(input.sourceId, mergeRequestIid, body);\n  return toCommentReview(webBaseUrl(context), input.sourceId, mergeRequestIid, note);\n}\n\nfunction toCommentReview(host: string, sourceId: string, mergeRequestIid: number, note: GitLabNote): Review {\n  const comment = toPullRequestComment(host, sourceId, mergeRequestIid, note);\n  return {\n    id: `${mergeRequestIid}:comment:${note.id}`,\n    url: comment.url,\n    author: comment.author,\n    body: comment.body,\n    state: 'commented',\n    commitId: null,\n    submittedAt: note.created_at,\n  };\n}\n\nfunction toApprovalReview(host: string, sourceId: string, mergeRequestIid: number, user: GitLabUser): Review {\n  return {\n    id: `${mergeRequestIid}:approval:${user.id ?? user.username}`,\n    url: mergeRequestUrl(host, sourceId, mergeRequestIid),\n    author: displayName(user),\n    body: null,\n    state: 'approved',\n    commitId: null,\n    submittedAt: null,\n  };\n}\n\nfunction toReviewComment(\n  host: string,\n  sourceId: string,\n  mergeRequestIid: number,\n  discussionId: string,\n  note: GitLabDiscussionNote,\n  replyToId: string | null,\n  fallbackPosition?: GitLabDiscussionPosition,\n): ReviewComment {\n  const position = note.position ?? fallbackPosition;\n  if (!position) throw new GitLabApiError('GitLab review comment is missing its diff position.', 502);\n  const base = toPullRequestComment(host, sourceId, mergeRequestIid, note);\n  const side = position.new_line !== null && position.new_line !== undefined ? 'right' : 'left';\n  return {\n    ...base,\n    id: packDiscussionNoteId(mergeRequestIid, discussionId, note.id),\n    path: side === 'right' ? position.new_path : position.old_path,\n    line: side === 'right' ? (position.new_line ?? null) : (position.old_line ?? null),\n    side,\n    commitId: position.head_sha,\n    replyToId,\n  };\n}\n\nfunction mergeRequestUrl(host: string, sourceId: string, mergeRequestIid: number): string {\n  return `${host}/${sourcePath(sourceId)}/-/merge_requests/${mergeRequestIid}`;\n}\n\nfunction webBaseUrl(context: GitLabVersionControlContext): string {\n  const host = normalizeHost(context.host);\n  if (!context.webBaseUrl) return `https://${host}`;\n  let url: URL;\n  try {\n    url = new URL(context.webBaseUrl);\n  } catch {\n    throw new GitLabApiError('GitLab web base URL is invalid.', 400);\n  }\n  const loopback = url.hostname === 'localhost' || url.hostname === '[::1]' || /^127(?:\\.\\d{1,3}){3}$/.test(url.hostname);\n  if (\n    url.host !== host ||\n    (url.protocol !== 'https:' && !(url.protocol === 'http:' && loopback)) ||\n    url.username ||\n    url.password ||\n    url.search ||\n    url.hash\n  ) {\n    throw new GitLabApiError('GitLab web base URL is invalid.', 400);\n  }\n  return `${url.origin}${url.pathname.replace(/\\/+$/, '')}`;\n}\n\nfunction sourcePath(sourceId: string): string {\n  const match = /^\\d+:(.+)$/.exec(sourceId);\n  return normalizeSlug(match?.[1] ?? sourceId);\n}\n\nfunction packDiscussionId(mergeRequestIid: number, discussionId: string): string {\n  if (!discussionId || discussionId.includes(':')) {\n    throw new GitLabApiError('GitLab discussion id is invalid.', 400);\n  }\n  return `${mergeRequestIid}:${discussionId}`;\n}\n\nfunction packDiscussionNoteId(mergeRequestIid: number, discussionId: string, noteId: number): string {\n  return `${packDiscussionId(mergeRequestIid, discussionId)}:${noteId}`;\n}\n\nfunction parseReviewReplyId(value: string): { mergeRequestIid: number; discussionId: string } {\n  const parts = value.split(':');\n  if (parts.length === 2) return parseDiscussionId(value);\n  if (parts.length === 3 && parts[1]) {\n    requirePositiveId(parts[2]!, 'discussion note');\n    return {\n      mergeRequestIid: requirePositiveId(parts[0]!, 'merge request'),\n      discussionId: parts[1],\n    };\n  }\n  throw new GitLabApiError('GitLab review reply id is invalid.', 400);\n}\n\nfunction parseDiscussionId(value: string): { mergeRequestIid: number; discussionId: string } {\n  const parts = value.split(':');\n  if (parts.length !== 2 || !parts[1]) throw new GitLabApiError('GitLab discussion id is invalid.', 400);\n  return {\n    mergeRequestIid: requirePositiveId(parts[0]!, 'merge request'),\n    discussionId: parts[1],\n  };\n}\n\nfunction parseDiscussionNoteId(value: string): { mergeRequestIid: number; discussionId: string; noteId: number } {\n  const parts = value.split(':');\n  if (parts.length !== 3 || !parts[1]) throw new GitLabApiError('GitLab discussion note id is invalid.', 400);\n  return {\n    mergeRequestIid: requirePositiveId(parts[0]!, 'merge request'),\n    discussionId: parts[1],\n    noteId: requirePositiveId(parts[2]!, 'discussion note'),\n  };\n}\n\nfunction discussionPosition(notes: GitLabDiscussionNote[]): GitLabDiscussionPosition | undefined {\n  return notes.find(note => note.position)?.position ?? undefined;\n}\n\nfunction discussionLine(path: string, line: number, side: 'left' | 'right') {\n  const pathHash = createHash('sha1').update(path).digest('hex');\n  const oldLine = side === 'left' ? line : undefined;\n  const newLine = side === 'right' ? line : undefined;\n  return {\n    line_code: `${pathHash}_${oldLine ?? 0}_${newLine ?? 0}`,\n    type: side === 'left' ? ('old' as const) : ('new' as const),\n    old_line: oldLine,\n    new_line: newLine,\n  };\n}\n\nfunction toRequestedReviewers(mergeRequest: GitLabMergeRequest): RequestedReviewers {\n  return {\n    users: (mergeRequest.reviewers ?? []).map(user => user.username),\n    teams: [],\n  };\n}\n\nasync function resolveMembers(api: GitLabApiClient, sourceId: string, usernames: string[]): Promise<GitLabMember[]> {\n  return Promise.all(usernames.map(username => resolveMember(api, sourceId, username)));\n}\n\nasync function resolveMember(api: GitLabApiClient, sourceId: string, username: string): Promise<GitLabMember> {\n  const normalized = username.trim();\n  if (!normalized) throw new GitLabApiError('GitLab reviewer username is invalid.', 400);\n  const members = await api.listProjectMembers(sourceId, { query: normalized });\n  const member = members.find(candidate => candidate.username.toLowerCase() === normalized.toLowerCase());\n  if (!member) throw new GitLabApiError(`GitLab reviewer ${normalized} is not a project member.`, 404);\n  return member;\n}\n\nasync function reviewerIds(api: GitLabApiClient, sourceId: string, users: GitLabUser[]): Promise<number[]> {\n  return Promise.all(\n    users.map(async user => user.id ?? (await resolveMember(api, sourceId, user.username)).id),\n  );\n}\n\nfunction rejectTeamReviewers(teams: string[] | undefined): void {\n  if (!teams?.length) return;\n  // FLAGGED FOR MANUAL REVIEW (spec §6.2)\n  throw notSupported('GitLab merge requests do not have a direct team-reviewer equivalent.');\n}\n\nfunction notSupported(message: string): GitLabApiError {\n  return new GitLabApiError(message, 501);\n}\n\nfunction toPullRequest(mergeRequest: GitLabMergeRequest): PullRequest {\n  return {\n    id: String(mergeRequest.iid),\n    title: mergeRequest.title,\n    url: mergeRequest.web_url,\n    author: displayName(mergeRequest.author),\n    assignees: mergeRequest.assignees?.map(user => user.username),\n    requestedReviewers: mergeRequest.reviewers?.map(user => user.username),\n    labels: mergeRequest.labels,\n    body: mergeRequest.description?.trim() ? mergeRequest.description : null,\n    state: mergeRequest.state === 'closed' || mergeRequest.state === 'merged' ? 'closed' : 'open',\n    draft: isDraft(mergeRequest),\n    merged: mergeRequest.state === 'merged' || Boolean(mergeRequest.merged_at),\n    mergeable: mergeableState(mergeRequest.merge_status),\n    baseBranch: mergeRequest.target_branch,\n    headBranch: mergeRequest.source_branch,\n    headSha: mergeRequest.sha,\n    createdAt: mergeRequest.created_at,\n    updatedAt: mergeRequest.updated_at,\n  };\n}\n\nfunction toPullRequestComment(\n  host: string,\n  sourceId: string,\n  mergeRequestIid: number,\n  note: GitLabNote,\n): PullRequestComment {\n  return {\n    id: `${mergeRequestIid}:${note.id}`,\n    url: `${mergeRequestUrl(host, sourceId, mergeRequestIid)}#note_${note.id}`,\n    author: displayName(note.author),\n    body: note.body,\n    createdAt: note.created_at,\n    updatedAt: note.updated_at ?? note.created_at,\n  };\n}\n\nfunction displayName(user: { name?: string | null; username: string } | null | undefined): string | null {\n  return user?.username || user?.name?.trim() || null;\n}\n\nfunction isDraft(mergeRequest: GitLabMergeRequest): boolean {\n  return mergeRequest.draft ?? mergeRequest.work_in_progress ?? /^(?:draft:|\\[draft\\])/i.test(mergeRequest.title);\n}\n\nfunction mergeableState(status: string | undefined): boolean | null {\n  if (status === 'can_be_merged') return true;\n  if (status === 'cannot_be_merged') return false;\n  return null;\n}\n\nfunction combinedCommitMessage(title: string | undefined, body: string | undefined): string | undefined {\n  const parts = [title?.trim(), body?.trim()].filter((part): part is string => Boolean(part));\n  return parts.length > 0 ? parts.join('\\n\\n') : undefined;\n}\n\nfunction parseNoteId(value: string): { mergeRequestIid: number; noteId: number } {\n  const parts = value.split(':');\n  if (parts.length !== 2) throw new GitLabApiError('GitLab merge request note id is invalid.', 400);\n  return {\n    mergeRequestIid: requirePositiveId(parts[0]!, 'merge request'),\n    noteId: requirePositiveId(parts[1]!, 'note'),\n  };\n}\n\nfunction parsePositiveCursor(cursor: string | undefined): number {\n  if (cursor === undefined) return 1;\n  const page = parsePositiveInteger(cursor);\n  if (page === null) throw new GitLabApiError('GitLab cursor must be a positive page number.', 400);\n  return page;\n}\n\nfunction requirePositiveId(value: string, resource: string): number {\n  const parsed = parsePositiveInteger(value);\n  if (parsed === null) throw new GitLabApiError(`GitLab ${resource} id must be a positive integer.`, 400);\n  return parsed;\n}\n\nfunction parsePositiveInteger(value: string): number | null {\n  if (!/^\\d+$/.test(value)) return null;\n  const parsed = Number(value);\n  return Number.isSafeInteger(parsed) && parsed > 0 ? parsed : null;\n}\n\nfunction parseConnection(value: unknown): IntegrationConnection | null {\n  if (!value || typeof value !== 'object' || Array.isArray(value)) return null;\n  const connection = value as Record<string, unknown>;\n  if (connection.type === 'oauth' && typeof connection.accessToken === 'string' && connection.accessToken.length > 0) {\n    return { type: 'oauth', accessToken: connection.accessToken };\n  }\n  if (\n    connection.type === 'app-installation' &&\n    Number.isSafeInteger(connection.installationId) &&\n    Number(connection.installationId) > 0\n  ) {\n    return { type: 'app-installation', installationId: Number(connection.installationId) };\n  }\n  return null;\n}\n\nfunction normalizeHost(value: string): string {\n  const host = value.trim();\n  if (!host || host.includes('/') || host.includes('@')) throw new GitLabApiError('GitLab host is invalid.', 400);\n  let parsed: URL;\n  try {\n    parsed = new URL(`https://${host}`);\n  } catch {\n    throw new GitLabApiError('GitLab host is invalid.', 400);\n  }\n  if (parsed.host !== host) throw new GitLabApiError('GitLab host is invalid.', 400);\n  return host;\n}\n\nfunction normalizeSlug(value: string): string {\n  const slug = value.replace(/^\\/+|\\/+$/g, '');\n  const segments = slug.split('/');\n  if (!slug || segments.some(segment => !/^[A-Za-z0-9_.-]+$/.test(segment) || segment === '.' || segment === '..')) {\n    throw new GitLabApiError('GitLab repository slug is invalid.', 400);\n  }\n  return slug;\n}\n"],"mappings":";;;AAyCA,SAAgB,0BAA0B,MAAwD;CAChG,IAAI;CAEJ,MAAM,6BAAyD;EAC7D,IAAI,CAAC,SAAS,MAAM,IAAI,MAAM,2CAA2C;EACzE,OAAO;CACT;CAEA,MAAM,mBAAuD,OAAM,UAAS;EAC1E,MAAM,UAAU,MAAM,KAAK,qBAAqB,MAAM,UAAU;EAChE,MAAM,OAAO,oBAAoB,MAAM,MAAM;EAC7C,MAAM,QAAQ,MAAM,UAAU,SAAS,WAAW,MAAM,UAAU,WAAW,QAAS,MAAM,SAAS;EACrG,MAAM,gBAAgB,MAAM,QAAQ,IAAI,kBAAkB,MAAM,UAAU;GAAE;GAAM;EAAM,CAAC;EACzF,OAAO;GACL,cAAc,cACX,QAAO,iBAAgB,MAAM,UAAU,YAAY,aAAa,UAAU,YAAY,aAAa,UAAU,QAAQ,CAAC,CACtH,QAAO,iBAAgB,MAAM,kBAAkB,SAAS,CAAC,QAAQ,YAAY,CAAC,CAAC,CAC/E,IAAI,aAAa;GACpB,YAAY,cAAc,WAAA,KAA6C,OAAO,OAAO,CAAC,IAAI;EAC5F;CACF;CAEA,MAAM,iBAAmD,OAAM,UAAS;EACtE,MAAM,UAAU,MAAM,KAAK,qBAAqB,MAAM,UAAU;EAChE,IAAI;GACF,OAAO,cACL,MAAM,QAAQ,IAAI,gBAAgB,MAAM,UAAU,kBAAkB,MAAM,eAAe,eAAe,CAAC,CAC3G;EACF,SAAS,OAAO;GACd,IAAI,iBAAiB,kBAAkB,MAAM,WAAW,KAAK,OAAO;GACpE,MAAM;EACR;CACF;CAEA,MAAM,oBAAyD,OAAM,UAAS;EAC5E,MAAM,UAAU,MAAM,KAAK,qBAAqB,MAAM,UAAU;EAChE,MAAM,QAAQ,MAAM,SAAS,CAAC,yBAAyB,KAAK,MAAM,KAAK,IAAI,UAAU,MAAM,UAAU,MAAM;EAC3G,OAAO,cACL,MAAM,QAAQ,IAAI,mBAAmB,MAAM,UAAU;GACnD,cAAc,MAAM;GACpB,cAAc,MAAM;GACpB;GACA,aAAa,MAAM;EACrB,CAAC,CACH;CACF;CAEA,MAAM,oBAAyD,OAAM,UAAS;EAE5E,OAAO,cACL,OAAM,MAFc,KAAK,qBAAqB,MAAM,UAAU,EAAA,CAEhD,IAAI,mBAAmB,MAAM,UAAU,kBAAkB,MAAM,eAAe,eAAe,GAAG;GAC5G,OAAO,MAAM;GACb,aAAa,MAAM,SAAS,OAAO,KAAK,MAAM;GAC9C,cAAc,MAAM;GACpB,YAAY,MAAM,UAAU,WAAW,UAAU,MAAM,UAAU,SAAS,WAAW,KAAA;EACvF,CAAC,CACH;CACF;CAEA,MAAM,oBAAuD,UAC3D,kBAAkB;EAAE,GAAG;EAAO,OAAO;CAAS,CAAC;CAEjD,MAAM,mBAAuD,OAAM,UAAS;EAC1E,IAAI,MAAM,WAAW,UACnB,MAAM,aAAa,kFAAkF;EAEvG,MAAM,UAAU,MAAM,KAAK,qBAAqB,MAAM,UAAU;EAChE,MAAM,gBAAgB,sBAAsB,MAAM,aAAa,MAAM,aAAa;EAClF,MAAM,SAAS,MAAM,QAAQ,IAAI,kBAC/B,MAAM,UACN,kBAAkB,MAAM,eAAe,eAAe,GACtD;GACE,QAAQ,MAAM,WAAW;GACzB,oBAAoB,MAAM,WAAW,WAAW,KAAA,IAAY;GAC5D,qBAAqB,MAAM,WAAW,WAAW,gBAAgB,KAAA;EACnE,CACF;EACA,MAAM,SAAS,OAAO,UAAU,YAAY,QAAQ,OAAO,SAAS;EACpE,OAAO;GACL;GACA,SAAS,OAAO,YAAY,SAAS,0BAA0B;GAC/D,KAAK,OAAO,qBAAqB,OAAO,oBAAoB,OAAO,OAAO;EAC5E;CACF;CAEA,MAAM,eAA+C,OAAM,UAAS;EAClE,MAAM,UAAU,MAAM,KAAK,qBAAqB,MAAM,UAAU;EAChE,MAAM,kBAAkB,kBAAkB,MAAM,eAAe,eAAe;EAC9E,MAAM,OAAO,oBAAoB,MAAM,MAAM;EAC7C,MAAM,QAAQ,MAAM,QAAQ,IAAI,sBAAsB,MAAM,UAAU,iBAAiB,EAAE,KAAK,CAAC;EAC/F,OAAO;GACL,UAAU,MACP,QAAO,SAAQ,CAAC,KAAK,UAAU,KAAK,SAAS,UAAU,CAAC,CACxD,KAAI,SAAQ,qBAAqB,WAAW,OAAO,GAAG,MAAM,UAAU,iBAAiB,IAAI,CAAC;GAC/F,YAAY,MAAM,WAAA,MAAoC,OAAO,OAAO,CAAC,IAAI;EAC3E;CACF;CAEA,MAAM,gBAAiD,OAAM,UAAS;EACpE,MAAM,UAAU,MAAM,KAAK,qBAAqB,MAAM,UAAU;EAChE,MAAM,kBAAkB,kBAAkB,MAAM,eAAe,eAAe;EAC9E,MAAM,OAAO,MAAM,QAAQ,IAAI,uBAAuB,MAAM,UAAU,iBAAiB,MAAM,IAAI;EACjG,OAAO,qBAAqB,WAAW,OAAO,GAAG,MAAM,UAAU,iBAAiB,IAAI;CACxF;CAEA,MAAM,gBAAiD,OAAM,UAAS;EACpE,MAAM,UAAU,MAAM,KAAK,qBAAqB,MAAM,UAAU;EAChE,MAAM,EAAE,iBAAiB,WAAW,YAAY,MAAM,SAAS;EAC/D,MAAM,OAAO,MAAM,QAAQ,IAAI,uBAAuB,MAAM,UAAU,iBAAiB,QAAQ,MAAM,IAAI;EACzG,OAAO,qBAAqB,WAAW,OAAO,GAAG,MAAM,UAAU,iBAAiB,IAAI;CACxF;CAEA,MAAM,gBAAiD,OAAM,UAAS;EACpE,MAAM,UAAU,MAAM,KAAK,qBAAqB,MAAM,UAAU;EAChE,MAAM,EAAE,iBAAiB,WAAW,YAAY,MAAM,SAAS;EAC/D,MAAM,QAAQ,IAAI,uBAAuB,MAAM,UAAU,iBAAiB,MAAM;CAClF;CAEA,MAAM,cAA6C,OAAM,UAAS;EAChE,MAAM,UAAU,MAAM,KAAK,qBAAqB,MAAM,UAAU;EAChE,MAAM,kBAAkB,kBAAkB,MAAM,eAAe,eAAe;EAE9E,OAAO;GACL,WAAU,MAFY,QAAQ,IAAI,yBAAyB,MAAM,UAAU,eAAe,EAAA,CAEtE,eAAe,CAAC,EAAA,CAAG,KAAK,EAAE,WAC5C,iBAAiB,WAAW,OAAO,GAAG,MAAM,UAAU,iBAAiB,IAAI,CAC7E;GACA,YAAY;EACd;CACF;CAEA,MAAM,YAAyC,OAAM,UAAS;EAC5D,MAAM,kBAAkB,kBAAkB,MAAM,eAAe,eAAe;EAC9E,MAAM,iBAAiB,GAAG,gBAAgB;EAC1C,MAAM,gBAAgB,GAAG,gBAAgB;EACzC,IAAI,MAAM,aAAa,kBAAkB,CAAC,MAAM,SAAS,WAAW,GAAG,eAAe,EAAE,KAAK,CAAC,MAAM,SAAS,WAAW,aAAa,GACnI,OAAO;EAET,MAAM,UAAU,MAAM,KAAK,qBAAqB,MAAM,UAAU;EAChE,IAAI,MAAM,aAAa,kBAAkB,MAAM,SAAS,WAAW,GAAG,eAAe,EAAE,GAAG;GACxF,MAAM,cAAc,MAAM,aAAa,iBAAiB,OAAO,MAAM,SAAS,MAAM,eAAe,SAAS,CAAC;GAC7G,IAAI,gBAAgB,IAAI,OAAO;GAC/B,MAAM,cAAc,gBAAgB,OAAO,MAAM,QAAQ,IAAI,eAAe,IAAI;GAEhF,MAAM,SAAQ,MADU,QAAQ,IAAI,yBAAyB,MAAM,UAAU,eAAe,EAAA,CACpE,eAAe,CAAC,EAAA,CAAG,KAAI,UAAS,MAAM,IAAI,CAAC,CAAC,MAAK,cACvE,gBAAgB,OACX,aAAa,OAAO,KAAA,KAAa,UAAU,OAAO,YAAY,MAC/D,UAAU,aAAa,aAAa,WACpC,OAAO,UAAU,MAAM,UAAU,QAAQ,MAAM,WACrD;GACA,OAAO,OAAO,iBAAiB,WAAW,OAAO,GAAG,MAAM,UAAU,iBAAiB,IAAI,IAAI;EAC/F;EACA,MAAM,SAAS,qBAAqB,MAAM,SAAS,MAAM,cAAc,MAAM,CAAC;EAC9E,IAAI,WAAW,MAAM,OAAO;EAC5B,IAAI;GACF,MAAM,OAAO,MAAM,QAAQ,IAAI,oBAAoB,MAAM,UAAU,iBAAiB,MAAM;GAC1F,IAAI,KAAK,UAAU,KAAK,SAAS,YAAY,OAAO;GACpD,OAAO,gBAAgB,WAAW,OAAO,GAAG,MAAM,UAAU,iBAAiB,IAAI;EACnF,SAAS,OAAO;GACd,IAAI,iBAAiB,kBAAkB,MAAM,WAAW,KAAK,OAAO;GACpE,MAAM;EACR;CACF;CAEA,MAAM,eAA+C,OAAM,UACzD,mBAAmB,MAAM;EACvB,YAAY,MAAM;EAClB,UAAU,MAAM;EAChB,eAAe,MAAM;EACrB,OAAO,MAAM;EACb,MAAM,MAAM;EACZ,UAAU,MAAM;CAClB,CAAC;CAEH,MAAM,eAA+C,YAAY;EAE/D,MAAM,aAAa,wDAAwD;CAC7E;CAEA,MAAM,eAA+C,OAAM,UACzD,mBAAmB,MAAM;EACvB,YAAY,MAAM;EAClB,UAAU,MAAM;EAChB,eAAe,MAAM;EACrB,OAAO,MAAM;EACb,MAAM,MAAM;CACd,CAAC;CAEH,MAAM,gBAAiD,YAAY;EAEjE,MAAM,aAAa,4DAA4D;CACjF;CAEA,MAAM,sBAA6D,YAAY;EAE7E,MAAM,aAAa,gDAAgD;CACrE;CAEA,MAAM,qBAA2D,OAAM,UAAS;EAC9E,MAAM,UAAU,MAAM,KAAK,qBAAqB,MAAM,UAAU;EAChE,MAAM,kBAAkB,kBAAkB,MAAM,eAAe,eAAe;EAC9E,MAAM,OAAO,oBAAoB,MAAM,MAAM;EAC7C,MAAM,cAAc,MAAM,QAAQ,IAAI,4BAA4B,MAAM,UAAU,iBAAiB,EAAE,KAAK,CAAC;EAC3G,OAAO;GACL,UAAU,YAAY,SAAQ,eAAc;IAC1C,MAAM,WAAW,mBAAmB,WAAW,KAAK;IACpD,IAAI,CAAC,UAAU,OAAO,CAAC;IACvB,MAAM,OAAO,WAAW,MAAM,MAAK,SAAQ,KAAK,QAAQ,KAAK,WAAW,MAAM;IAC9E,MAAM,YAAY,OAAO,qBAAqB,iBAAiB,WAAW,IAAI,KAAK,EAAE,IAAI;IACzF,OAAO,WAAW,MACf,QAAO,SAAQ,CAAC,KAAK,MAAM,CAAC,CAC5B,KAAI,SACH,gBACE,WAAW,OAAO,GAClB,MAAM,UACN,iBACA,WAAW,IACX,MACA,SAAS,OAAO,OAAO,WACvB,QACF,CACF;GACJ,CAAC;GACD,YAAY,YAAY,WAAA,MAA0C,OAAO,OAAO,CAAC,IAAI;EACvF;CACF;CAEA,MAAM,sBAA6D,OAAM,UAAS;EAChF,MAAM,UAAU,MAAM,KAAK,qBAAqB,MAAM,UAAU;EAChE,MAAM,kBAAkB,kBAAkB,MAAM,eAAe,eAAe;EAC9E,IAAI,MAAM,WAAW;GACnB,MAAM,SAAS,mBAAmB,MAAM,SAAS;GACjD,IAAI,OAAO,oBAAoB,iBAC7B,MAAM,IAAI,eAAe,qEAAqE,GAAG;GAEnG,MAAM,aAAa,MAAM,QAAQ,IAAI,0BACnC,MAAM,UACN,iBACA,OAAO,YACT;GACA,MAAM,WAAW,mBAAmB,WAAW,KAAK;GACpD,IAAI,CAAC,UAAU,MAAM,IAAI,eAAe,gDAAgD,GAAG;GAC3F,MAAM,OAAO,WAAW,MAAM,MAAK,SAAQ,KAAK,QAAQ,KAAK,WAAW,MAAM;GAC9E,IAAI,CAAC,MAAM,MAAM,IAAI,eAAe,sDAAsD,GAAG;GAC7F,MAAM,OAAO,MAAM,QAAQ,IAAI,8BAC7B,MAAM,UACN,iBACA,OAAO,cACP,MAAM,IACR;GACA,OAAO,gBACL,WAAW,OAAO,GAClB,MAAM,UACN,iBACA,OAAO,cACP,MACA,qBAAqB,iBAAiB,OAAO,cAAc,KAAK,EAAE,GAClE,QACF;EACF;EAEA,MAAM,eAAe,MAAM,QAAQ,IAAI,gBAAgB,MAAM,UAAU,eAAe;EACtF,IAAI,CAAC,aAAa,WAChB,MAAM,IAAI,eAAe,iDAAiD,GAAG;EAE/E,IAAI,aAAa,UAAU,aAAa,MAAM,UAC5C,MAAM,IAAI,eAAe,wEAAwE,GAAG;EAEtG,MAAM,EAAE,MAAM,MAAM,SAAS;EAC7B,IAAI,OAAO,SAAS,YAAY,OAAO,SAAS,YAAa,SAAS,UAAU,SAAS,SACvF,MAAM,IAAI,eAAe,mDAAmD,GAAG;EAEjF,IAAK,MAAM,cAAc,KAAA,OAAgB,MAAM,cAAc,KAAA,IAC3D,MAAM,IAAI,eAAe,6EAA6E,GAAG;EAE3G,MAAM,WAAqC;GACzC,eAAe;GACf,GAAG,aAAa;GAChB,UAAU;GACV,UAAU;GACV,UAAU,SAAS,SAAS,OAAO,KAAA;GACnC,UAAU,SAAS,UAAU,OAAO,KAAA;GACpC,GAAI,MAAM,cAAc,KAAA,KAAa,MAAM,YACvC,EACE,YAAY;IACV,OAAO,eAAe,MAAM,MAAM,WAAW,MAAM,SAAS;IAC5D,KAAK,eAAe,MAAM,MAAM,IAAI;GACtC,EACF,IACA,CAAC;EACP;EACA,MAAM,aAAa,MAAM,QAAQ,IAAI,6BAA6B,MAAM,UAAU,iBAAiB;GACjG,MAAM,MAAM;GACZ,UAAU,MAAM;GAChB;EACF,CAAC;EACD,MAAM,OAAO,WAAW,MAAM,MAAK,cAAa,UAAU,QAAQ,KAAK,WAAW,MAAM;EACxF,IAAI,CAAC,MAAM,MAAM,IAAI,eAAe,sDAAsD,GAAG;EAC7F,OAAO,gBAAgB,WAAW,OAAO,GAAG,MAAM,UAAU,iBAAiB,WAAW,IAAI,MAAM,MAAM,QAAQ;CAClH;CAEA,MAAM,sBAA6D,OAAM,UAAS;EAChF,MAAM,UAAU,MAAM,KAAK,qBAAqB,MAAM,UAAU;EAChE,MAAM,YAAY,sBAAsB,MAAM,SAAS;EACvD,MAAM,aAAa,MAAM,QAAQ,IAAI,0BACnC,MAAM,UACN,UAAU,iBACV,UAAU,YACZ;EACA,MAAM,WAAW,mBAAmB,WAAW,KAAK;EACpD,IAAI,CAAC,UAAU,MAAM,IAAI,eAAe,gDAAgD,GAAG;EAC3F,MAAM,OAAO,WAAW,MAAM,MAAK,cAAa,UAAU,QAAQ,KAAK,WAAW,MAAM;EACxF,IAAI,CAAC,MAAM,MAAM,IAAI,eAAe,sDAAsD,GAAG;EAC7F,MAAM,OAAO,MAAM,QAAQ,IAAI,iCAC7B,MAAM,UACN,UAAU,iBACV,UAAU,cACV,UAAU,QACV,MAAM,IACR;EACA,OAAO,gBACL,WAAW,OAAO,GAClB,MAAM,UACN,UAAU,iBACV,UAAU,cACV,MACA,KAAK,OAAO,KAAK,KAAK,OAAO,qBAAqB,UAAU,iBAAiB,UAAU,cAAc,KAAK,EAAE,GAC5G,QACF;CACF;CAEA,MAAM,sBAA6D,OAAM,UAAS;EAChF,MAAM,UAAU,MAAM,KAAK,qBAAqB,MAAM,UAAU;EAChE,MAAM,YAAY,sBAAsB,MAAM,SAAS;EACvD,MAAM,QAAQ,IAAI,iCAChB,MAAM,UACN,UAAU,iBACV,UAAU,cACV,UAAU,MACZ;CACF;CAEA,MAAM,sBAA0E,OAAM,UAAS;EAC7F,MAAM,UAAU,MAAM,KAAK,qBAAqB,MAAM,UAAU;EAChE,MAAM,YAAY,sBAAsB,MAAM,SAAS;EACvD,MAAM,QAAQ,IAAI,8BAChB,MAAM,UACN,UAAU,iBACV,UAAU,cACV,MAAM,QACR;CACF;CAEA,MAAM,yBAAmE,OAAM,UAAS;EAMtF,OAAO,qBAAqB,OAJD,MADL,KAAK,qBAAqB,MAAM,UAAU,EAAA,CAC7B,IAAI,gBACrC,MAAM,UACN,kBAAkB,MAAM,eAAe,eAAe,CACxD,CACwC;CAC1C;CAEA,MAAM,mBAAuD,OAAM,UAAS;EAC1E,oBAAoB,MAAM,KAAK;EAC/B,MAAM,UAAU,MAAM,KAAK,qBAAqB,MAAM,UAAU;EAChE,MAAM,kBAAkB,kBAAkB,MAAM,eAAe,eAAe;EAC9E,MAAM,eAAe,MAAM,QAAQ,IAAI,gBAAgB,MAAM,UAAU,eAAe;EACtF,MAAM,mBAAmB,MAAM,eAAe,QAAQ,KAAK,MAAM,UAAU,MAAM,SAAS,CAAC,CAAC;EAC5F,MAAM,aAAa,MAAM,YAAY,QAAQ,KAAK,MAAM,UAAU,aAAa,aAAa,CAAC,CAAC;EAC9F,MAAM,mBAAmB,CAAC,mBAAG,IAAI,IAAI,CAAC,GAAG,YAAY,GAAG,iBAAiB,KAAI,WAAU,OAAO,EAAE,CAAC,CAAC,CAAC;EACnG,OAAO,qBACL,MAAM,QAAQ,IAAI,yBAAyB,MAAM,UAAU,iBAAiB,gBAAgB,CAC9F;CACF;CAEA,MAAM,2BAAuE,OAAM,UAAS;EAC1F,oBAAoB,MAAM,KAAK;EAC/B,MAAM,UAAU,MAAM,KAAK,qBAAqB,MAAM,UAAU;EAChE,MAAM,kBAAkB,kBAAkB,MAAM,eAAe,eAAe;EAC9E,MAAM,eAAe,MAAM,QAAQ,IAAI,gBAAgB,MAAM,UAAU,eAAe;EACtF,MAAM,WAAW,IAAI,KAAK,MAAM,SAAS,CAAC,EAAA,CAAG,KAAI,aAAY,SAAS,YAAY,CAAC,CAAC;EACpF,MAAM,YAAY,aAAa,aAAa,CAAC,EAAA,CAAG,QAAO,SAAQ,CAAC,SAAS,IAAI,KAAK,SAAS,YAAY,CAAC,CAAC;EACzG,MAAM,cAAc,MAAM,YAAY,QAAQ,KAAK,MAAM,UAAU,QAAQ;EAC3E,OAAO,qBACL,MAAM,QAAQ,IAAI,yBAAyB,MAAM,UAAU,iBAAiB,WAAW,CACzF;CACF;CAEA,OAAO;EACL,aAAY,UAAS;GACnB,UAAU,MAAM;EAClB;EACA,sBAAsB,OAAO,EAAE,OAAO,QAAQ,mBAAmB;GAC/D,MAAM,sBAAsB,gBAAgB,aAAa,UAAU,UAAU;GAC7E,IAAI,CAAC,qBACH,MAAM,IAAI,eAAe,iEAAiE,GAAG;GAE/F,MAAM,UAAU,MAAM,KAAK,qBAAqB,mBAAmB;GACnE,OAAO,qBAAqB,CAAC,CAAC,cAAc,OAAO;IACjD;IACA,mBAAmB;IACnB,YAAY,aAAa;IACzB,aAAa,aAAa;IAC1B,aAAa,aAAa;IAC1B,kBAAkB;KAChB,GAAG,aAAa;KAChB,YAAY,QAAQ;KACpB,MAAM,cAAc,QAAQ,IAAI;IAClC;GACF,CAAC;EACH;EACA,sBAAsB,OAAO,EAAE,OAAO,gBAAgB,mBAAmB;GACvE,MAAM,yBAAyB,aAAa,KAAI,gBAAe;IAC7D,GAAG;IACH,MAAM,cAAc,WAAW,IAAI;GACrC,EAAE;GACF,OAAO,MAAM,QAAQ,IACnB,uBAAuB,KAAI,eACzB,qBAAqB,CAAC,CAAC,aAAa,OAAO;IACzC;IACA,OAAO;KACL;KACA,YAAY,WAAW;KACvB,MAAM,WAAW;KACjB,eAAe,WAAW;KAC1B,kBAAkB,WAAW;IAC/B;GACF,CAAC,CACH,CACF;EACF;EACA,qBAAqB,OAAO,EAAE,OAAO,mBAAmB;GACtD,MAAM,aAAa,MAAM,qBAAqB,CAAC,CAAC,aAAa,IAAI;IAAE;IAAO,IAAI;GAAa,CAAC;GAC5F,IAAI,CAAC,YAAY,MAAM,IAAI,MAAM,uCAAuC;GACxE,MAAM,eAAe,MAAM,qBAAqB,CAAC,CAAC,cAAc,IAAI;IAClE;IACA,IAAI,WAAW;GACjB,CAAC;GACD,IAAI,CAAC,cAAc,MAAM,IAAI,MAAM,yCAAyC;GAC5E,MAAM,aAAa,gBAAgB,aAAa,iBAAiB,UAAU;GAC3E,IAAI,CAAC,YAAY,MAAM,IAAI,eAAe,uDAAuD,GAAG;GAOpG,OAAO;IAAE,aAAY,OANE,KAAK,gCAAgC,KAAK,qBAAA,CAC/D,YACA,OAAO,aAAa,iBAAiB,SAAS,WAAW,aAAa,iBAAiB,OAAO,KAAA,CAChG,EAAA,CAG6B;IAAY,UAAU,GAAG,WAAW,WAAW,GAAG,WAAW;GAAO;EACnG;EACA,qBAAqB,OAAO,EAAE,OAAO,mBAAmB;GACtD,MAAM,aAAa,MAAM,qBAAqB,CAAC,CAAC,aAAa,IAAI;IAAE;IAAO,IAAI;GAAa,CAAC;GAC5F,IAAI,CAAC,YAAY,MAAM,IAAI,MAAM,uCAAuC;GACxE,MAAM,eAAe,MAAM,qBAAqB,CAAC,CAAC,cAAc,IAAI;IAClE;IACA,IAAI,WAAW;GACjB,CAAC;GACD,IAAI,CAAC,cAAc,MAAM,IAAI,MAAM,yCAAyC;GAC5E,MAAM,aAAa,gBAAgB,aAAa,iBAAiB,UAAU;GAC3E,IAAI,CAAC,YAAY,MAAM,IAAI,eAAe,uDAAuD,GAAG;GACpG,MAAM,UAAU,OAAO,KAAK,gCAAgC,KAAK,qBAAA,CAC/D,YACA,OAAO,aAAa,iBAAiB,SAAS,WAAW,aAAa,iBAAiB,OAAO,KAAA,CAChG;GACA,IAAI,CAAC,QAAQ,uBACX,MAAM,aAAa,4EAA4E;GAEjG,MAAM,QAAQ,MAAM,QAAQ,sBAAsB;GAGlD,OAAO;IACL,UAAU,GAHI,WAAW,OAGN,EAAE,GAFV,cAAc,WAAW,IAET,EAAE;IAC7B,eAAe;KAAE,QAAQ;KAAU;KAAO,UAAU;IAAS;GAC/D;EACF;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;CACF;AACF;AAEA,eAAe,mBACb,MACA,OAQiB;CACjB,MAAM,UAAU,MAAM,KAAK,qBAAqB,MAAM,UAAU;CAChE,MAAM,kBAAkB,kBAAkB,MAAM,eAAe,eAAe;CAC9E,IAAI,MAAM,UAAU,mBAElB,MAAM,aAAa,yDAAyD;CAE9E,IAAI,MAAM,UAAU,KAAA,GAElB,MAAM,aAAa,kDAAkD;CAEvE,IAAI,MAAM,UAAU,WAAW;EAC7B,MAAM,OAAO,MAAM,MAAM,KAAK;EAC9B,MAAM,QAAQ,IAAI,oBAAoB,MAAM,UAAU,iBAAiB,MAAM,QAAQ;EACrF,MAAM,UAAU,OACZ,qBACE,WAAW,OAAO,GAClB,MAAM,UACN,iBACA,MAAM,QAAQ,IAAI,uBAAuB,MAAM,UAAU,iBAAiB,IAAI,CAChF,IACA;EACJ,OAAO;GACL,IAAI,OAAO,eAAe,IAAI;GAC9B,KAAK,SAAS,OAAO,gBAAgB,WAAW,OAAO,GAAG,MAAM,UAAU,eAAe;GACzF,QAAQ,SAAS,UAAU;GAC3B,MAAM,SAAS,QAAQ;GACvB,OAAO;GACP,UAAU;GACV,aAAa,SAAS,aAAa;EACrC;CACF;CACA,MAAM,OAAO,MAAM,MAAM,KAAK;CAC9B,IAAI,CAAC,MAAM,MAAM,IAAI,eAAe,0CAA0C,GAAG;CACjF,MAAM,OAAO,MAAM,QAAQ,IAAI,uBAAuB,MAAM,UAAU,iBAAiB,IAAI;CAC3F,OAAO,gBAAgB,WAAW,OAAO,GAAG,MAAM,UAAU,iBAAiB,IAAI;AACnF;AAEA,SAAS,gBAAgB,MAAc,UAAkB,iBAAyB,MAA0B;CAC1G,MAAM,UAAU,qBAAqB,MAAM,UAAU,iBAAiB,IAAI;CAC1E,OAAO;EACL,IAAI,GAAG,gBAAgB,WAAW,KAAK;EACvC,KAAK,QAAQ;EACb,QAAQ,QAAQ;EAChB,MAAM,QAAQ;EACd,OAAO;EACP,UAAU;EACV,aAAa,KAAK;CACpB;AACF;AAEA,SAAS,iBAAiB,MAAc,UAAkB,iBAAyB,MAA0B;CAC3G,OAAO;EACL,IAAI,GAAG,gBAAgB,YAAY,KAAK,MAAM,KAAK;EACnD,KAAK,gBAAgB,MAAM,UAAU,eAAe;EACpD,QAAQ,YAAY,IAAI;EACxB,MAAM;EACN,OAAO;EACP,UAAU;EACV,aAAa;CACf;AACF;AAEA,SAAS,gBACP,MACA,UACA,iBACA,cACA,MACA,WACA,kBACe;CACf,MAAM,WAAW,KAAK,YAAY;CAClC,IAAI,CAAC,UAAU,MAAM,IAAI,eAAe,uDAAuD,GAAG;CAClG,MAAM,OAAO,qBAAqB,MAAM,UAAU,iBAAiB,IAAI;CACvE,MAAM,OAAO,SAAS,aAAa,QAAQ,SAAS,aAAa,KAAA,IAAY,UAAU;CACvF,OAAO;EACL,GAAG;EACH,IAAI,qBAAqB,iBAAiB,cAAc,KAAK,EAAE;EAC/D,MAAM,SAAS,UAAU,SAAS,WAAW,SAAS;EACtD,MAAM,SAAS,UAAW,SAAS,YAAY,OAAS,SAAS,YAAY;EAC7E;EACA,UAAU,SAAS;EACnB;CACF;AACF;AAEA,SAAS,gBAAgB,MAAc,UAAkB,iBAAiC;CACxF,OAAO,GAAG,KAAK,GAAG,WAAW,QAAQ,EAAE,oBAAoB;AAC7D;AAEA,SAAS,WAAW,SAA8C;CAChE,MAAM,OAAO,cAAc,QAAQ,IAAI;CACvC,IAAI,CAAC,QAAQ,YAAY,OAAO,WAAW;CAC3C,IAAI;CACJ,IAAI;EACF,MAAM,IAAI,IAAI,QAAQ,UAAU;CAClC,QAAQ;EACN,MAAM,IAAI,eAAe,mCAAmC,GAAG;CACjE;CACA,MAAM,WAAW,IAAI,aAAa,eAAe,IAAI,aAAa,WAAW,wBAAwB,KAAK,IAAI,QAAQ;CACtH,IACE,IAAI,SAAS,QACZ,IAAI,aAAa,YAAY,EAAE,IAAI,aAAa,WAAW,aAC5D,IAAI,YACJ,IAAI,YACJ,IAAI,UACJ,IAAI,MAEJ,MAAM,IAAI,eAAe,mCAAmC,GAAG;CAEjE,OAAO,GAAG,IAAI,SAAS,IAAI,SAAS,QAAQ,QAAQ,EAAE;AACxD;AAEA,SAAS,WAAW,UAA0B;CAE5C,OAAO,cADO,aAAa,KAAK,QACP,CAAC,GAAG,MAAM,QAAQ;AAC7C;AAEA,SAAS,iBAAiB,iBAAyB,cAA8B;CAC/E,IAAI,CAAC,gBAAgB,aAAa,SAAS,GAAG,GAC5C,MAAM,IAAI,eAAe,oCAAoC,GAAG;CAElE,OAAO,GAAG,gBAAgB,GAAG;AAC/B;AAEA,SAAS,qBAAqB,iBAAyB,cAAsB,QAAwB;CACnG,OAAO,GAAG,iBAAiB,iBAAiB,YAAY,EAAE,GAAG;AAC/D;AAEA,SAAS,mBAAmB,OAAkE;CAC5F,MAAM,QAAQ,MAAM,MAAM,GAAG;CAC7B,IAAI,MAAM,WAAW,GAAG,OAAO,kBAAkB,KAAK;CACtD,IAAI,MAAM,WAAW,KAAK,MAAM,IAAI;EAClC,kBAAkB,MAAM,IAAK,iBAAiB;EAC9C,OAAO;GACL,iBAAiB,kBAAkB,MAAM,IAAK,eAAe;GAC7D,cAAc,MAAM;EACtB;CACF;CACA,MAAM,IAAI,eAAe,sCAAsC,GAAG;AACpE;AAEA,SAAS,kBAAkB,OAAkE;CAC3F,MAAM,QAAQ,MAAM,MAAM,GAAG;CAC7B,IAAI,MAAM,WAAW,KAAK,CAAC,MAAM,IAAI,MAAM,IAAI,eAAe,oCAAoC,GAAG;CACrG,OAAO;EACL,iBAAiB,kBAAkB,MAAM,IAAK,eAAe;EAC7D,cAAc,MAAM;CACtB;AACF;AAEA,SAAS,sBAAsB,OAAkF;CAC/G,MAAM,QAAQ,MAAM,MAAM,GAAG;CAC7B,IAAI,MAAM,WAAW,KAAK,CAAC,MAAM,IAAI,MAAM,IAAI,eAAe,yCAAyC,GAAG;CAC1G,OAAO;EACL,iBAAiB,kBAAkB,MAAM,IAAK,eAAe;EAC7D,cAAc,MAAM;EACpB,QAAQ,kBAAkB,MAAM,IAAK,iBAAiB;CACxD;AACF;AAEA,SAAS,mBAAmB,OAAqE;CAC/F,OAAO,MAAM,MAAK,SAAQ,KAAK,QAAQ,CAAC,EAAE,YAAY,KAAA;AACxD;AAEA,SAAS,eAAe,MAAc,MAAc,MAAwB;CAC1E,MAAM,WAAW,WAAW,MAAM,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO,KAAK;CAC7D,MAAM,UAAU,SAAS,SAAS,OAAO,KAAA;CACzC,MAAM,UAAU,SAAS,UAAU,OAAO,KAAA;CAC1C,OAAO;EACL,WAAW,GAAG,SAAS,GAAG,WAAW,EAAE,GAAG,WAAW;EACrD,MAAM,SAAS,SAAU,QAAmB;EAC5C,UAAU;EACV,UAAU;CACZ;AACF;AAEA,SAAS,qBAAqB,cAAsD;CAClF,OAAO;EACL,QAAQ,aAAa,aAAa,CAAC,EAAA,CAAG,KAAI,SAAQ,KAAK,QAAQ;EAC/D,OAAO,CAAC;CACV;AACF;AAEA,eAAe,eAAe,KAAsB,UAAkB,WAA8C;CAClH,OAAO,QAAQ,IAAI,UAAU,KAAI,aAAY,cAAc,KAAK,UAAU,QAAQ,CAAC,CAAC;AACtF;AAEA,eAAe,cAAc,KAAsB,UAAkB,UAAyC;CAC5G,MAAM,aAAa,SAAS,KAAK;CACjC,IAAI,CAAC,YAAY,MAAM,IAAI,eAAe,wCAAwC,GAAG;CAErF,MAAM,UAAS,MADO,IAAI,mBAAmB,UAAU,EAAE,OAAO,WAAW,CAAC,EAAA,CACrD,MAAK,cAAa,UAAU,SAAS,YAAY,MAAM,WAAW,YAAY,CAAC;CACtG,IAAI,CAAC,QAAQ,MAAM,IAAI,eAAe,mBAAmB,WAAW,4BAA4B,GAAG;CACnG,OAAO;AACT;AAEA,eAAe,YAAY,KAAsB,UAAkB,OAAwC;CACzG,OAAO,QAAQ,IACb,MAAM,IAAI,OAAM,SAAQ,KAAK,OAAO,MAAM,cAAc,KAAK,UAAU,KAAK,QAAQ,EAAA,CAAG,EAAE,CAC3F;AACF;AAEA,SAAS,oBAAoB,OAAmC;CAC9D,IAAI,CAAC,OAAO,QAAQ;CAEpB,MAAM,aAAa,sEAAsE;AAC3F;AAEA,SAAS,aAAa,SAAiC;CACrD,OAAO,IAAI,eAAe,SAAS,GAAG;AACxC;AAEA,SAAS,cAAc,cAA+C;CACpE,OAAO;EACL,IAAI,OAAO,aAAa,GAAG;EAC3B,OAAO,aAAa;EACpB,KAAK,aAAa;EAClB,QAAQ,YAAY,aAAa,MAAM;EACvC,WAAW,aAAa,WAAW,KAAI,SAAQ,KAAK,QAAQ;EAC5D,oBAAoB,aAAa,WAAW,KAAI,SAAQ,KAAK,QAAQ;EACrE,QAAQ,aAAa;EACrB,MAAM,aAAa,aAAa,KAAK,IAAI,aAAa,cAAc;EACpE,OAAO,aAAa,UAAU,YAAY,aAAa,UAAU,WAAW,WAAW;EACvF,OAAO,QAAQ,YAAY;EAC3B,QAAQ,aAAa,UAAU,YAAY,QAAQ,aAAa,SAAS;EACzE,WAAW,eAAe,aAAa,YAAY;EACnD,YAAY,aAAa;EACzB,YAAY,aAAa;EACzB,SAAS,aAAa;EACtB,WAAW,aAAa;EACxB,WAAW,aAAa;CAC1B;AACF;AAEA,SAAS,qBACP,MACA,UACA,iBACA,MACoB;CACpB,OAAO;EACL,IAAI,GAAG,gBAAgB,GAAG,KAAK;EAC/B,KAAK,GAAG,gBAAgB,MAAM,UAAU,eAAe,EAAE,QAAQ,KAAK;EACtE,QAAQ,YAAY,KAAK,MAAM;EAC/B,MAAM,KAAK;EACX,WAAW,KAAK;EAChB,WAAW,KAAK,cAAc,KAAK;CACrC;AACF;AAEA,SAAS,YAAY,MAAoF;CACvG,OAAO,MAAM,YAAY,MAAM,MAAM,KAAK,KAAK;AACjD;AAEA,SAAS,QAAQ,cAA2C;CAC1D,OAAO,aAAa,SAAS,aAAa,oBAAoB,yBAAyB,KAAK,aAAa,KAAK;AAChH;AAEA,SAAS,eAAe,QAA4C;CAClE,IAAI,WAAW,iBAAiB,OAAO;CACvC,IAAI,WAAW,oBAAoB,OAAO;CAC1C,OAAO;AACT;AAEA,SAAS,sBAAsB,OAA2B,MAA8C;CACtG,MAAM,QAAQ,CAAC,OAAO,KAAK,GAAG,MAAM,KAAK,CAAC,CAAC,CAAC,QAAQ,SAAyB,QAAQ,IAAI,CAAC;CAC1F,OAAO,MAAM,SAAS,IAAI,MAAM,KAAK,MAAM,IAAI,KAAA;AACjD;AAEA,SAAS,YAAY,OAA4D;CAC/E,MAAM,QAAQ,MAAM,MAAM,GAAG;CAC7B,IAAI,MAAM,WAAW,GAAG,MAAM,IAAI,eAAe,4CAA4C,GAAG;CAChG,OAAO;EACL,iBAAiB,kBAAkB,MAAM,IAAK,eAAe;EAC7D,QAAQ,kBAAkB,MAAM,IAAK,MAAM;CAC7C;AACF;AAEA,SAAS,oBAAoB,QAAoC;CAC/D,IAAI,WAAW,KAAA,GAAW,OAAO;CACjC,MAAM,OAAO,qBAAqB,MAAM;CACxC,IAAI,SAAS,MAAM,MAAM,IAAI,eAAe,iDAAiD,GAAG;CAChG,OAAO;AACT;AAEA,SAAS,kBAAkB,OAAe,UAA0B;CAClE,MAAM,SAAS,qBAAqB,KAAK;CACzC,IAAI,WAAW,MAAM,MAAM,IAAI,eAAe,UAAU,SAAS,kCAAkC,GAAG;CACtG,OAAO;AACT;AAEA,SAAS,qBAAqB,OAA8B;CAC1D,IAAI,CAAC,QAAQ,KAAK,KAAK,GAAG,OAAO;CACjC,MAAM,SAAS,OAAO,KAAK;CAC3B,OAAO,OAAO,cAAc,MAAM,KAAK,SAAS,IAAI,SAAS;AAC/D;AAEA,SAAS,gBAAgB,OAA8C;CACrE,IAAI,CAAC,SAAS,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,GAAG,OAAO;CACxE,MAAM,aAAa;CACnB,IAAI,WAAW,SAAS,WAAW,OAAO,WAAW,gBAAgB,YAAY,WAAW,YAAY,SAAS,GAC/G,OAAO;EAAE,MAAM;EAAS,aAAa,WAAW;CAAY;CAE9D,IACE,WAAW,SAAS,sBACpB,OAAO,cAAc,WAAW,cAAc,KAC9C,OAAO,WAAW,cAAc,IAAI,GAEpC,OAAO;EAAE,MAAM;EAAoB,gBAAgB,OAAO,WAAW,cAAc;CAAE;CAEvF,OAAO;AACT;AAEA,SAAS,cAAc,OAAuB;CAC5C,MAAM,OAAO,MAAM,KAAK;CACxB,IAAI,CAAC,QAAQ,KAAK,SAAS,GAAG,KAAK,KAAK,SAAS,GAAG,GAAG,MAAM,IAAI,eAAe,2BAA2B,GAAG;CAC9G,IAAI;CACJ,IAAI;EACF,SAAS,IAAI,IAAI,WAAW,MAAM;CACpC,QAAQ;EACN,MAAM,IAAI,eAAe,2BAA2B,GAAG;CACzD;CACA,IAAI,OAAO,SAAS,MAAM,MAAM,IAAI,eAAe,2BAA2B,GAAG;CACjF,OAAO;AACT;AAEA,SAAS,cAAc,OAAuB;CAC5C,MAAM,OAAO,MAAM,QAAQ,cAAc,EAAE;CAC3C,MAAM,WAAW,KAAK,MAAM,GAAG;CAC/B,IAAI,CAAC,QAAQ,SAAS,MAAK,YAAW,CAAC,oBAAoB,KAAK,OAAO,KAAK,YAAY,OAAO,YAAY,IAAI,GAC7G,MAAM,IAAI,eAAe,sCAAsC,GAAG;CAEpE,OAAO;AACT"}

package/dist/integrations/gitlab/webhook-dispatch.d.ts

@@ -0,0 +1,75 @@
+import type { MountedMastraCode } from '@mastra/code-sdk';
+import type { NotificationPriority } from '@mastra/core/notifications';
+import type { SubscriptionSessionLookup } from '../subscription-session.js';
+import type { GitLabSignalSubscriptionRow, GitLabSubscriptionStorage, GitLabWebhookMergeRequestTarget } from './subscriptions.js';
+import type { ParsedGitLabWebhook } from './webhook.js';
+export interface GitLabWebhookNotificationMetadata {
+    event: string;
+    action: string;
+    host: string;
+    projectId: number;
+    projectPath: string;
+    mergeRequestIid: number;
+    sender?: string;
+    senderId?: number;
+    deliveryId: string;
+}
+export interface GitLabWebhookNotification {
+    action: string;
+    kind: string;
+    priority: NotificationPriority;
+    summary: string;
+    terminal: boolean;
+    metadata: GitLabWebhookNotificationMetadata;
+    payload: Record<string, unknown>;
+}
+/**
+ * The integration surface this dispatch uses. Narrow on purpose so the direct
+ * and Platform-backed integrations, and tests, can satisfy it.
+ */
+export interface GitLabWebhookDispatchIntegration {
+    readonly integrationStorage: GitLabSubscriptionStorage;
+    readonly sourceControlStorage?: SubscriptionSessionLookup;
+    getProjectMemberAccessLevel(connectionId: string, projectId: string, username: string): Promise<number | undefined>;
+    resolveActiveConnectionForHost?(storedConnectionId: string, host: string): Promise<string>;
+}
+export interface GitLabWebhookDispatchDependencies {
+    controller: MountedMastraCode['controller'];
+    gitlab?: GitLabWebhookDispatchIntegration;
+    listSubscriptions?: (target: GitLabWebhookMergeRequestTarget, options?: {
+        includeTerminal?: boolean;
+    }) => Promise<GitLabSignalSubscriptionRow[]>;
+    retireSubscription?: (id: string, status: 'open' | 'closed' | 'merged') => Promise<void>;
+    /**
+     * Author gate override. The default requires the sender to be a trusted
+     * project member through the subscription's connection.
+     */
+    isAuthorizedSender?: (notification: GitLabWebhookNotification, subscription: GitLabSignalSubscriptionRow) => Promise<boolean>;
+    /** Called when the sender gate drops a notification, so the drop is observable. */
+    onSenderRejected?: (notification: GitLabWebhookNotification) => void;
+    onTargetError?: (subscription: GitLabSignalSubscriptionRow, error: unknown) => void;
+    /** Called when a subscription names a thread this deployment does not hold. */
+    onTargetSkipped?: (subscription: GitLabSignalSubscriptionRow) => void;
+    /**
+     * The connection the event arrived through. When set, only subscriptions
+     * created under that connection are delivered; a direct project webhook
+     * leaves it unset because GitLab does not say which connection it belongs to.
+     */
+    sourceConnectionId?: string;
+    /** Called when a subscription is skipped because it belongs to another connection. */
+    onConnectionMismatch?: (subscription: GitLabSignalSubscriptionRow) => void;
+}
+/**
+ * The GitLab instance a delivery came from: the project's `web_url` host, which
+ * must agree with the `X-Gitlab-Instance` header when one was sent. A mismatch
+ * yields no host, so the delivery matches no subscription.
+ */
+export declare function gitlabWebhookHost(parsed: ParsedGitLabWebhook): string | undefined;
+export declare function classifyGitLabWebhook(parsed: ParsedGitLabWebhook): GitLabWebhookNotification | undefined;
+export declare function dispatchGitLabWebhook(parsed: ParsedGitLabWebhook, dependencies: GitLabWebhookDispatchDependencies): Promise<{
+    delivered: number;
+    failed: number;
+    skipped: number;
+    ignored: boolean;
+}>;
+//# sourceMappingURL=webhook-dispatch.d.ts.map

package/dist/integrations/gitlab/webhook-dispatch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook-dispatch.d.ts","sourceRoot":"","sources":["../../../src/integrations/gitlab/webhook-dispatch.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAC1D,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAGvE,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,4BAA4B,CAAC;AAQ5E,OAAO,KAAK,EACV,2BAA2B,EAC3B,yBAAyB,EACzB,+BAA+B,EAChC,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAExD,MAAM,WAAW,iCAAiC;IAChD,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,yBAAyB;IACxC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,oBAAoB,CAAC;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,OAAO,CAAC;IAClB,QAAQ,EAAE,iCAAiC,CAAC;IAC5C,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAED;;;GAGG;AACH,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,kBAAkB,EAAE,yBAAyB,CAAC;IACvD,QAAQ,CAAC,oBAAoB,CAAC,EAAE,yBAAyB,CAAC;IAC1D,2BAA2B,CAAC,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACpH,8BAA8B,CAAC,CAAC,kBAAkB,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CAC5F;AAED,MAAM,WAAW,iCAAiC;IAChD,UAAU,EAAE,iBAAiB,CAAC,YAAY,CAAC,CAAC;IAC5C,MAAM,CAAC,EAAE,gCAAgC,CAAC;IAC1C,iBAAiB,CAAC,EAAE,CAClB,MAAM,EAAE,+BAA+B,EACvC,OAAO,CAAC,EAAE;QAAE,eAAe,CAAC,EAAE,OAAO,CAAA;KAAE,KACpC,OAAO,CAAC,2BAA2B,EAAE,CAAC,CAAC;IAC5C,kBAAkB,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,QAAQ,GAAG,QAAQ,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACzF;;;OAGG;IACH,kBAAkB,CAAC,EAAE,CACnB,YAAY,EAAE,yBAAyB,EACvC,YAAY,EAAE,2BAA2B,KACtC,OAAO,CAAC,OAAO,CAAC,CAAC;IACtB,mFAAmF;IACnF,gBAAgB,CAAC,EAAE,CAAC,YAAY,EAAE,yBAAyB,KAAK,IAAI,CAAC;IACrE,aAAa,CAAC,EAAE,CAAC,YAAY,EAAE,2BAA2B,EAAE,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC;IACpF,+EAA+E;IAC/E,eAAe,CAAC,EAAE,CAAC,YAAY,EAAE,2BAA2B,KAAK,IAAI,CAAC;IACtE;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,sFAAsF;IACtF,oBAAoB,CAAC,EAAE,CAAC,YAAY,EAAE,2BAA2B,KAAK,IAAI,CAAC;CAC5E;AAcD;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,mBAAmB,GAAG,MAAM,GAAG,SAAS,CAWjF;AAUD,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,mBAAmB,GAAG,yBAAyB,GAAG,SAAS,CA2FxG;AAyCD,wBAAsB,qBAAqB,CACzC,MAAM,EAAE,mBAAmB,EAC3B,YAAY,EAAE,iCAAiC,GAC9C,OAAO,CAAC;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,CAAC,CA0GnF"}

package/dist/integrations/gitlab/webhook-dispatch.js

@@ -0,0 +1,235 @@
+import { resolveSubscriptionSession, subscriptionRunContext } from "../subscription-session.js";
+import { listMergeRequestSubscriptionsForWebhook, mergeRequestUrl, normalizeSubscriptionHost, retireMergeRequestSubscription } from "./subscriptions.js";
+import "./integration.js";
+//#region src/integrations/gitlab/webhook-dispatch.ts
+function getObject(value) {
+	return value && typeof value === "object" && !Array.isArray(value) ? value : void 0;
+}
+function getString(value) {
+	return typeof value === "string" && value.length > 0 ? value : void 0;
+}
+function getNumber(value) {
+	return typeof value === "number" && Number.isFinite(value) ? value : void 0;
+}
+/**
+* The GitLab instance a delivery came from: the project's `web_url` host, which
+* must agree with the `X-Gitlab-Instance` header when one was sent. A mismatch
+* yields no host, so the delivery matches no subscription.
+*/
+function gitlabWebhookHost(parsed) {
+	const declaredHost = parsed.instanceHost ? normalizeSubscriptionHost(parsed.instanceHost) : void 0;
+	const projectUrl = getString(getObject(parsed.payload.project)?.web_url);
+	if (!projectUrl) return declaredHost;
+	try {
+		const payloadHost = normalizeSubscriptionHost(new URL(projectUrl).host);
+		if (declaredHost && declaredHost !== payloadHost) return void 0;
+		return payloadHost;
+	} catch {
+		return;
+	}
+}
+const AUTHOR_GATED_KINDS = /* @__PURE__ */ new Set([
+	"issue-comment-created",
+	"review-comment-created",
+	"review-approved",
+	"review-dismissed"
+]);
+const PERMISSION_CHECK_TIMEOUT_MS = 5e3;
+function classifyGitLabWebhook(parsed) {
+	const { event, payload } = parsed;
+	const project = getObject(payload.project);
+	const attributes = getObject(payload.object_attributes);
+	const user = getObject(payload.user);
+	const host = gitlabWebhookHost(parsed);
+	const projectId = getNumber(project?.id);
+	const projectPath = getString(project?.path_with_namespace);
+	const sender = getString(payload.user_username) ?? getString(user?.username);
+	const senderId = getNumber(user?.id) ?? getNumber(payload.user_id);
+	if (!host || !projectId || !projectPath || !attributes) return void 0;
+	let action;
+	let mergeRequestIid;
+	let priority;
+	let kind;
+	let label;
+	let terminal = false;
+	if (event === "Merge Request Hook") {
+		action = getString(attributes.action)?.toLowerCase() ?? "";
+		mergeRequestIid = getNumber(attributes.iid);
+		if (action === "approved") {
+			priority = "urgent";
+			kind = "review-approved";
+			label = "approved the merge request";
+		} else if (action === "unapproved") {
+			priority = "high";
+			kind = "review-dismissed";
+			label = "revoked an approval";
+		} else if (action === "merge") {
+			priority = "urgent";
+			kind = "pull-request-merged";
+			label = "merged the merge request";
+			terminal = true;
+		} else if (action === "close") {
+			priority = "urgent";
+			kind = "pull-request-closed";
+			label = "closed the merge request";
+			terminal = true;
+		} else if (action === "reopen") {
+			priority = "high";
+			kind = "pull-request-reopened";
+			label = "reopened the merge request";
+		} else if (action === "update" && getString(attributes.oldrev)) {
+			priority = "medium";
+			kind = "pull-request-synchronize";
+			label = "pushed new commits";
+		} else if (action === "update") {
+			priority = "low";
+			kind = "pull-request-edited";
+			label = "edited the merge request";
+		} else return;
+	} else if (event === "Note Hook" && getString(attributes.noteable_type) === "MergeRequest") {
+		action = "created";
+		mergeRequestIid = getNumber(getObject(payload.merge_request)?.iid);
+		priority = "high";
+		if (getString(attributes.type) === "DiffNote") {
+			kind = "review-comment-created";
+			label = "left a review comment";
+		} else {
+			kind = "issue-comment-created";
+			label = "commented";
+		}
+	} else return;
+	if (!mergeRequestIid) return void 0;
+	const actor = sender ? `${sender} ` : "";
+	return {
+		action,
+		kind,
+		priority,
+		summary: `${actor}${label} on ${projectPath}!${mergeRequestIid}`,
+		terminal,
+		metadata: {
+			event,
+			action,
+			host,
+			projectId,
+			projectPath,
+			mergeRequestIid,
+			...sender ? { sender } : {},
+			...senderId !== void 0 ? { senderId } : {},
+			deliveryId: parsed.deliveryId
+		},
+		payload
+	};
+}
+function notificationTargetUrl(notification) {
+	const attributes = getObject(notification.payload.object_attributes);
+	const { host, projectPath, mergeRequestIid } = notification.metadata;
+	return getString(attributes?.url) ?? mergeRequestUrl(host, projectPath, mergeRequestIid);
+}
+/**
+* Comments and approval changes wake a session only when a trusted project
+* member sent them. The check runs through the subscription's own connection so
+* a deployment answers with the credential that created the link; an
+* unreachable or slow provider fails closed.
+*/
+async function isTrustedGitLabSender(notification, subscription, gitlab) {
+	if (!AUTHOR_GATED_KINDS.has(notification.kind)) return true;
+	const sender = notification.metadata.sender;
+	if (!sender || !gitlab) return false;
+	let timeout;
+	try {
+		const connectionId = gitlab.resolveActiveConnectionForHost ? await gitlab.resolveActiveConnectionForHost(subscription.data.installationExternalId, subscription.data.host) : subscription.data.installationExternalId;
+		return (await Promise.race([gitlab.getProjectMemberAccessLevel(connectionId, subscription.data.projectId, sender), new Promise((resolve) => {
+			timeout = setTimeout(() => resolve(void 0), PERMISSION_CHECK_TIMEOUT_MS);
+		})]) ?? 0) >= 30;
+	} catch {
+		return false;
+	} finally {
+		if (timeout) clearTimeout(timeout);
+	}
+}
+async function dispatchGitLabWebhook(parsed, dependencies) {
+	const notification = classifyGitLabWebhook(parsed);
+	if (!notification) return {
+		delivered: 0,
+		failed: 0,
+		skipped: 0,
+		ignored: true
+	};
+	const target = {
+		host: notification.metadata.host,
+		projectId: String(notification.metadata.projectId),
+		changeRequestId: String(notification.metadata.mergeRequestIid)
+	};
+	const listSubscriptions = dependencies.listSubscriptions ?? ((subscriptionTarget, options) => {
+		if (!dependencies.gitlab) throw new Error("GitLab integration is required to load webhook subscriptions.");
+		return listMergeRequestSubscriptionsForWebhook(subscriptionTarget, options, dependencies.gitlab.integrationStorage);
+	});
+	const retireSubscription = dependencies.retireSubscription ?? ((id, status) => {
+		if (!dependencies.gitlab) throw new Error("GitLab integration is required to retire webhook subscriptions.");
+		return retireMergeRequestSubscription(id, status, dependencies.gitlab.integrationStorage);
+	});
+	const isAuthorizedSender = dependencies.isAuthorizedSender ?? ((candidate, subscription) => isTrustedGitLabSender(candidate, subscription, dependencies.gitlab));
+	const subscriptions = await listSubscriptions(target, { includeTerminal: notification.action === "reopen" });
+	let delivered = 0;
+	let failed = 0;
+	let skipped = 0;
+	let rejected = false;
+	for (const subscription of subscriptions) try {
+		if (dependencies.sourceConnectionId !== void 0 && subscription.data.installationExternalId !== dependencies.sourceConnectionId) {
+			skipped += 1;
+			dependencies.onConnectionMismatch?.(subscription);
+			continue;
+		}
+		if (!await isAuthorizedSender(notification, subscription)) {
+			rejected = true;
+			continue;
+		}
+		const session = await resolveSubscriptionSession(dependencies.controller, subscription, {
+			label: "GitLab",
+			sourceControl: dependencies.gitlab?.sourceControlStorage
+		});
+		if (!session) {
+			skipped += 1;
+			dependencies.onTargetSkipped?.(subscription);
+			continue;
+		}
+		const runContext = await subscriptionRunContext(subscription, dependencies.gitlab?.sourceControlStorage);
+		if (!runContext) throw new Error(`GitLab subscription ${subscription.id} has no resolvable tenant identity; not delivered.`);
+		const result = await session.sendNotificationSignal({
+			source: "gitlab",
+			kind: notification.kind,
+			summary: notification.summary,
+			priority: notification.priority,
+			payload: notification.payload,
+			sourceId: parsed.deliveryId,
+			dedupeKey: `${parsed.deliveryId}:${subscription.sessionId}:${subscription.threadId}`,
+			coalesceKey: `gitlab:${notification.metadata.host}:${notification.metadata.projectId}:merge-request:${notification.metadata.mergeRequestIid}`,
+			metadata: {
+				event: notification.metadata.event,
+				action: notification.action,
+				repository: notification.metadata.projectPath,
+				mergeRequestIid: notification.metadata.mergeRequestIid,
+				targetUrl: notificationTargetUrl(notification),
+				deliveryId: parsed.deliveryId
+			}
+		}, { requestContext: runContext });
+		await Promise.all([result.persisted, result.accepted].filter(Boolean));
+		if (notification.terminal) await retireSubscription(subscription.id, notification.kind === "pull-request-merged" ? "merged" : "closed");
+		else if (notification.action === "reopen") await retireSubscription(subscription.id, "open");
+		delivered += 1;
+	} catch (error) {
+		failed += 1;
+		dependencies.onTargetError?.(subscription, error);
+	}
+	if (rejected) dependencies.onSenderRejected?.(notification);
+	return {
+		delivered,
+		failed,
+		skipped,
+		ignored: false
+	};
+}
+//#endregion
+export { classifyGitLabWebhook, dispatchGitLabWebhook, gitlabWebhookHost };
+
+//# sourceMappingURL=webhook-dispatch.js.map

package/dist/integrations/gitlab/webhook-dispatch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook-dispatch.js","names":[],"sources":["../../../src/integrations/gitlab/webhook-dispatch.ts"],"sourcesContent":["import type { MountedMastraCode } from '@mastra/code-sdk';\nimport type { NotificationPriority } from '@mastra/core/notifications';\n\nimport { resolveSubscriptionSession, subscriptionRunContext } from '../subscription-session.js';\nimport type { SubscriptionSessionLookup } from '../subscription-session.js';\nimport { GITLAB_TRUSTED_ACCESS_LEVEL } from './integration.js';\nimport {\n  listMergeRequestSubscriptionsForWebhook,\n  mergeRequestUrl,\n  normalizeSubscriptionHost,\n  retireMergeRequestSubscription,\n} from './subscriptions.js';\nimport type {\n  GitLabSignalSubscriptionRow,\n  GitLabSubscriptionStorage,\n  GitLabWebhookMergeRequestTarget,\n} from './subscriptions.js';\nimport type { ParsedGitLabWebhook } from './webhook.js';\n\nexport interface GitLabWebhookNotificationMetadata {\n  event: string;\n  action: string;\n  host: string;\n  projectId: number;\n  projectPath: string;\n  mergeRequestIid: number;\n  sender?: string;\n  senderId?: number;\n  deliveryId: string;\n}\n\nexport interface GitLabWebhookNotification {\n  action: string;\n  kind: string;\n  priority: NotificationPriority;\n  summary: string;\n  terminal: boolean;\n  metadata: GitLabWebhookNotificationMetadata;\n  payload: Record<string, unknown>;\n}\n\n/**\n * The integration surface this dispatch uses. Narrow on purpose so the direct\n * and Platform-backed integrations, and tests, can satisfy it.\n */\nexport interface GitLabWebhookDispatchIntegration {\n  readonly integrationStorage: GitLabSubscriptionStorage;\n  readonly sourceControlStorage?: SubscriptionSessionLookup;\n  getProjectMemberAccessLevel(connectionId: string, projectId: string, username: string): Promise<number | undefined>;\n  resolveActiveConnectionForHost?(storedConnectionId: string, host: string): Promise<string>;\n}\n\nexport interface GitLabWebhookDispatchDependencies {\n  controller: MountedMastraCode['controller'];\n  gitlab?: GitLabWebhookDispatchIntegration;\n  listSubscriptions?: (\n    target: GitLabWebhookMergeRequestTarget,\n    options?: { includeTerminal?: boolean },\n  ) => Promise<GitLabSignalSubscriptionRow[]>;\n  retireSubscription?: (id: string, status: 'open' | 'closed' | 'merged') => Promise<void>;\n  /**\n   * Author gate override. The default requires the sender to be a trusted\n   * project member through the subscription's connection.\n   */\n  isAuthorizedSender?: (\n    notification: GitLabWebhookNotification,\n    subscription: GitLabSignalSubscriptionRow,\n  ) => Promise<boolean>;\n  /** Called when the sender gate drops a notification, so the drop is observable. */\n  onSenderRejected?: (notification: GitLabWebhookNotification) => void;\n  onTargetError?: (subscription: GitLabSignalSubscriptionRow, error: unknown) => void;\n  /** Called when a subscription names a thread this deployment does not hold. */\n  onTargetSkipped?: (subscription: GitLabSignalSubscriptionRow) => void;\n  /**\n   * The connection the event arrived through. When set, only subscriptions\n   * created under that connection are delivered; a direct project webhook\n   * leaves it unset because GitLab does not say which connection it belongs to.\n   */\n  sourceConnectionId?: string;\n  /** Called when a subscription is skipped because it belongs to another connection. */\n  onConnectionMismatch?: (subscription: GitLabSignalSubscriptionRow) => void;\n}\n\nfunction getObject(value: unknown): Record<string, unknown> | undefined {\n  return value && typeof value === 'object' && !Array.isArray(value) ? (value as Record<string, unknown>) : undefined;\n}\n\nfunction getString(value: unknown): string | undefined {\n  return typeof value === 'string' && value.length > 0 ? value : undefined;\n}\n\nfunction getNumber(value: unknown): number | undefined {\n  return typeof value === 'number' && Number.isFinite(value) ? value : undefined;\n}\n\n/**\n * The GitLab instance a delivery came from: the project's `web_url` host, which\n * must agree with the `X-Gitlab-Instance` header when one was sent. A mismatch\n * yields no host, so the delivery matches no subscription.\n */\nexport function gitlabWebhookHost(parsed: ParsedGitLabWebhook): string | undefined {\n  const declaredHost = parsed.instanceHost ? normalizeSubscriptionHost(parsed.instanceHost) : undefined;\n  const projectUrl = getString(getObject(parsed.payload.project)?.web_url);\n  if (!projectUrl) return declaredHost;\n  try {\n    const payloadHost = normalizeSubscriptionHost(new URL(projectUrl).host);\n    if (declaredHost && declaredHost !== payloadHost) return undefined;\n    return payloadHost;\n  } catch {\n    return undefined;\n  }\n}\n\nconst AUTHOR_GATED_KINDS = new Set([\n  'issue-comment-created',\n  'review-comment-created',\n  'review-approved',\n  'review-dismissed',\n]);\nconst PERMISSION_CHECK_TIMEOUT_MS = 5_000;\n\nexport function classifyGitLabWebhook(parsed: ParsedGitLabWebhook): GitLabWebhookNotification | undefined {\n  const { event, payload } = parsed;\n  const project = getObject(payload.project);\n  const attributes = getObject(payload.object_attributes);\n  const user = getObject(payload.user);\n  const host = gitlabWebhookHost(parsed);\n  const projectId = getNumber(project?.id);\n  const projectPath = getString(project?.path_with_namespace);\n  const sender = getString(payload.user_username) ?? getString(user?.username);\n  const senderId = getNumber(user?.id) ?? getNumber(payload.user_id);\n  if (!host || !projectId || !projectPath || !attributes) return undefined;\n\n  let action: string;\n  let mergeRequestIid: number | undefined;\n  let priority: NotificationPriority;\n  let kind: string;\n  let label: string;\n  let terminal = false;\n\n  if (event === 'Merge Request Hook') {\n    action = getString(attributes.action)?.toLowerCase() ?? '';\n    mergeRequestIid = getNumber(attributes.iid);\n    if (action === 'approved') {\n      priority = 'urgent';\n      kind = 'review-approved';\n      label = 'approved the merge request';\n    } else if (action === 'unapproved') {\n      priority = 'high';\n      kind = 'review-dismissed';\n      label = 'revoked an approval';\n    } else if (action === 'merge') {\n      priority = 'urgent';\n      kind = 'pull-request-merged';\n      label = 'merged the merge request';\n      terminal = true;\n    } else if (action === 'close') {\n      priority = 'urgent';\n      kind = 'pull-request-closed';\n      label = 'closed the merge request';\n      terminal = true;\n    } else if (action === 'reopen') {\n      priority = 'high';\n      kind = 'pull-request-reopened';\n      label = 'reopened the merge request';\n    } else if (action === 'update' && getString(attributes.oldrev)) {\n      priority = 'medium';\n      kind = 'pull-request-synchronize';\n      label = 'pushed new commits';\n    } else if (action === 'update') {\n      priority = 'low';\n      kind = 'pull-request-edited';\n      label = 'edited the merge request';\n    } else {\n      return undefined;\n    }\n  } else if (event === 'Note Hook' && getString(attributes.noteable_type) === 'MergeRequest') {\n    action = 'created';\n    mergeRequestIid = getNumber(getObject(payload.merge_request)?.iid);\n    priority = 'high';\n    if (getString(attributes.type) === 'DiffNote') {\n      kind = 'review-comment-created';\n      label = 'left a review comment';\n    } else {\n      kind = 'issue-comment-created';\n      label = 'commented';\n    }\n  } else {\n    return undefined;\n  }\n  if (!mergeRequestIid) return undefined;\n\n  const actor = sender ? `${sender} ` : '';\n  return {\n    action,\n    kind,\n    priority,\n    summary: `${actor}${label} on ${projectPath}!${mergeRequestIid}`,\n    terminal,\n    metadata: {\n      event,\n      action,\n      host,\n      projectId,\n      projectPath,\n      mergeRequestIid,\n      ...(sender ? { sender } : {}),\n      ...(senderId !== undefined ? { senderId } : {}),\n      deliveryId: parsed.deliveryId,\n    },\n    payload,\n  };\n}\n\nfunction notificationTargetUrl(notification: GitLabWebhookNotification): string {\n  const attributes = getObject(notification.payload.object_attributes);\n  const { host, projectPath, mergeRequestIid } = notification.metadata;\n  return getString(attributes?.url) ?? mergeRequestUrl(host, projectPath, mergeRequestIid);\n}\n\n/**\n * Comments and approval changes wake a session only when a trusted project\n * member sent them. The check runs through the subscription's own connection so\n * a deployment answers with the credential that created the link; an\n * unreachable or slow provider fails closed.\n */\nasync function isTrustedGitLabSender(\n  notification: GitLabWebhookNotification,\n  subscription: GitLabSignalSubscriptionRow,\n  gitlab: GitLabWebhookDispatchIntegration | undefined,\n): Promise<boolean> {\n  if (!AUTHOR_GATED_KINDS.has(notification.kind)) return true;\n  const sender = notification.metadata.sender;\n  if (!sender || !gitlab) return false;\n  let timeout: ReturnType<typeof setTimeout> | undefined;\n  try {\n    const connectionId = gitlab.resolveActiveConnectionForHost\n      ? await gitlab.resolveActiveConnectionForHost(subscription.data.installationExternalId, subscription.data.host)\n      : subscription.data.installationExternalId;\n    const accessLevel = await Promise.race([\n      gitlab.getProjectMemberAccessLevel(connectionId, subscription.data.projectId, sender),\n      new Promise<undefined>(resolve => {\n        timeout = setTimeout(() => resolve(undefined), PERMISSION_CHECK_TIMEOUT_MS);\n      }),\n    ]);\n    return (accessLevel ?? 0) >= GITLAB_TRUSTED_ACCESS_LEVEL;\n  } catch {\n    return false;\n  } finally {\n    if (timeout) clearTimeout(timeout);\n  }\n}\n\nexport async function dispatchGitLabWebhook(\n  parsed: ParsedGitLabWebhook,\n  dependencies: GitLabWebhookDispatchDependencies,\n): Promise<{ delivered: number; failed: number; skipped: number; ignored: boolean }> {\n  const notification = classifyGitLabWebhook(parsed);\n  if (!notification) return { delivered: 0, failed: 0, skipped: 0, ignored: true };\n\n  const target: GitLabWebhookMergeRequestTarget = {\n    host: notification.metadata.host,\n    projectId: String(notification.metadata.projectId),\n    changeRequestId: String(notification.metadata.mergeRequestIid),\n  };\n  const listSubscriptions =\n    dependencies.listSubscriptions ??\n    ((subscriptionTarget: GitLabWebhookMergeRequestTarget, options?: { includeTerminal?: boolean }) => {\n      if (!dependencies.gitlab) throw new Error('GitLab integration is required to load webhook subscriptions.');\n      return listMergeRequestSubscriptionsForWebhook(\n        subscriptionTarget,\n        options,\n        dependencies.gitlab.integrationStorage,\n      );\n    });\n  const retireSubscription =\n    dependencies.retireSubscription ??\n    ((id: string, status: 'open' | 'closed' | 'merged') => {\n      if (!dependencies.gitlab) throw new Error('GitLab integration is required to retire webhook subscriptions.');\n      return retireMergeRequestSubscription(id, status, dependencies.gitlab.integrationStorage);\n    });\n  const isAuthorizedSender =\n    dependencies.isAuthorizedSender ??\n    ((candidate: GitLabWebhookNotification, subscription: GitLabSignalSubscriptionRow) =>\n      isTrustedGitLabSender(candidate, subscription, dependencies.gitlab));\n\n  const subscriptions = await listSubscriptions(target, { includeTerminal: notification.action === 'reopen' });\n  let delivered = 0;\n  let failed = 0;\n  let skipped = 0;\n  let rejected = false;\n\n  for (const subscription of subscriptions) {\n    try {\n      // Two connections can reach the same project. Each polled event names\n      // its connection, so a subscription is woken once, by its own connection,\n      // and never by a credential that did not create the link.\n      if (\n        dependencies.sourceConnectionId !== undefined &&\n        subscription.data.installationExternalId !== dependencies.sourceConnectionId\n      ) {\n        skipped += 1;\n        dependencies.onConnectionMismatch?.(subscription);\n        continue;\n      }\n      if (!(await isAuthorizedSender(notification, subscription))) {\n        rejected = true;\n        continue;\n      }\n      const session = await resolveSubscriptionSession(dependencies.controller, subscription, {\n        label: 'GitLab',\n        sourceControl: dependencies.gitlab?.sourceControlStorage,\n      });\n      // No session means this deployment does not hold the subscribed thread.\n      // Not a delivery failure: leave the subscription for wherever it lives.\n      if (!session) {\n        skipped += 1;\n        dependencies.onTargetSkipped?.(subscription);\n        continue;\n      }\n      const runContext = await subscriptionRunContext(subscription, dependencies.gitlab?.sourceControlStorage);\n      // Without a tenant the woken run would fail closed after the terminal\n      // subscription had already been retired, so count it as a failed delivery.\n      if (!runContext) {\n        throw new Error(`GitLab subscription ${subscription.id} has no resolvable tenant identity; not delivered.`);\n      }\n      const result = await session.sendNotificationSignal(\n        {\n          source: 'gitlab',\n          kind: notification.kind,\n          summary: notification.summary,\n          priority: notification.priority,\n          payload: notification.payload,\n          sourceId: parsed.deliveryId,\n          dedupeKey: `${parsed.deliveryId}:${subscription.sessionId}:${subscription.threadId}`,\n          coalesceKey: `gitlab:${notification.metadata.host}:${notification.metadata.projectId}:merge-request:${notification.metadata.mergeRequestIid}`,\n          metadata: {\n            event: notification.metadata.event,\n            action: notification.action,\n            repository: notification.metadata.projectPath,\n            mergeRequestIid: notification.metadata.mergeRequestIid,\n            targetUrl: notificationTargetUrl(notification),\n            deliveryId: parsed.deliveryId,\n          },\n        },\n        { requestContext: runContext },\n      );\n      await Promise.all([result.persisted, result.accepted].filter(Boolean));\n      if (notification.terminal) {\n        await retireSubscription(subscription.id, notification.kind === 'pull-request-merged' ? 'merged' : 'closed');\n      } else if (notification.action === 'reopen') {\n        await retireSubscription(subscription.id, 'open');\n      }\n      delivered += 1;\n    } catch (error) {\n      failed += 1;\n      dependencies.onTargetError?.(subscription, error);\n    }\n  }\n  if (rejected) dependencies.onSenderRejected?.(notification);\n\n  return { delivered, failed, skipped, ignored: false };\n}\n"],"mappings":";;;;AAmFA,SAAS,UAAU,OAAqD;CACtE,OAAO,SAAS,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,KAAK,IAAK,QAAoC,KAAA;AAC5G;AAEA,SAAS,UAAU,OAAoC;CACrD,OAAO,OAAO,UAAU,YAAY,MAAM,SAAS,IAAI,QAAQ,KAAA;AACjE;AAEA,SAAS,UAAU,OAAoC;CACrD,OAAO,OAAO,UAAU,YAAY,OAAO,SAAS,KAAK,IAAI,QAAQ,KAAA;AACvE;;;;;;AAOA,SAAgB,kBAAkB,QAAiD;CACjF,MAAM,eAAe,OAAO,eAAe,0BAA0B,OAAO,YAAY,IAAI,KAAA;CAC5F,MAAM,aAAa,UAAU,UAAU,OAAO,QAAQ,OAAO,CAAC,EAAE,OAAO;CACvE,IAAI,CAAC,YAAY,OAAO;CACxB,IAAI;EACF,MAAM,cAAc,0BAA0B,IAAI,IAAI,UAAU,CAAC,CAAC,IAAI;EACtE,IAAI,gBAAgB,iBAAiB,aAAa,OAAO,KAAA;EACzD,OAAO;CACT,QAAQ;EACN;CACF;AACF;AAEA,MAAM,qCAAqB,IAAI,IAAI;CACjC;CACA;CACA;CACA;AACF,CAAC;AACD,MAAM,8BAA8B;AAEpC,SAAgB,sBAAsB,QAAoE;CACxG,MAAM,EAAE,OAAO,YAAY;CAC3B,MAAM,UAAU,UAAU,QAAQ,OAAO;CACzC,MAAM,aAAa,UAAU,QAAQ,iBAAiB;CACtD,MAAM,OAAO,UAAU,QAAQ,IAAI;CACnC,MAAM,OAAO,kBAAkB,MAAM;CACrC,MAAM,YAAY,UAAU,SAAS,EAAE;CACvC,MAAM,cAAc,UAAU,SAAS,mBAAmB;CAC1D,MAAM,SAAS,UAAU,QAAQ,aAAa,KAAK,UAAU,MAAM,QAAQ;CAC3E,MAAM,WAAW,UAAU,MAAM,EAAE,KAAK,UAAU,QAAQ,OAAO;CACjE,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,eAAe,CAAC,YAAY,OAAO,KAAA;CAE/D,IAAI;CACJ,IAAI;CACJ,IAAI;CACJ,IAAI;CACJ,IAAI;CACJ,IAAI,WAAW;CAEf,IAAI,UAAU,sBAAsB;EAClC,SAAS,UAAU,WAAW,MAAM,CAAC,EAAE,YAAY,KAAK;EACxD,kBAAkB,UAAU,WAAW,GAAG;EAC1C,IAAI,WAAW,YAAY;GACzB,WAAW;GACX,OAAO;GACP,QAAQ;EACV,OAAO,IAAI,WAAW,cAAc;GAClC,WAAW;GACX,OAAO;GACP,QAAQ;EACV,OAAO,IAAI,WAAW,SAAS;GAC7B,WAAW;GACX,OAAO;GACP,QAAQ;GACR,WAAW;EACb,OAAO,IAAI,WAAW,SAAS;GAC7B,WAAW;GACX,OAAO;GACP,QAAQ;GACR,WAAW;EACb,OAAO,IAAI,WAAW,UAAU;GAC9B,WAAW;GACX,OAAO;GACP,QAAQ;EACV,OAAO,IAAI,WAAW,YAAY,UAAU,WAAW,MAAM,GAAG;GAC9D,WAAW;GACX,OAAO;GACP,QAAQ;EACV,OAAO,IAAI,WAAW,UAAU;GAC9B,WAAW;GACX,OAAO;GACP,QAAQ;EACV,OACE;CAEJ,OAAO,IAAI,UAAU,eAAe,UAAU,WAAW,aAAa,MAAM,gBAAgB;EAC1F,SAAS;EACT,kBAAkB,UAAU,UAAU,QAAQ,aAAa,CAAC,EAAE,GAAG;EACjE,WAAW;EACX,IAAI,UAAU,WAAW,IAAI,MAAM,YAAY;GAC7C,OAAO;GACP,QAAQ;EACV,OAAO;GACL,OAAO;GACP,QAAQ;EACV;CACF,OACE;CAEF,IAAI,CAAC,iBAAiB,OAAO,KAAA;CAE7B,MAAM,QAAQ,SAAS,GAAG,OAAO,KAAK;CACtC,OAAO;EACL;EACA;EACA;EACA,SAAS,GAAG,QAAQ,MAAM,MAAM,YAAY,GAAG;EAC/C;EACA,UAAU;GACR;GACA;GACA;GACA;GACA;GACA;GACA,GAAI,SAAS,EAAE,OAAO,IAAI,CAAC;GAC3B,GAAI,aAAa,KAAA,IAAY,EAAE,SAAS,IAAI,CAAC;GAC7C,YAAY,OAAO;EACrB;EACA;CACF;AACF;AAEA,SAAS,sBAAsB,cAAiD;CAC9E,MAAM,aAAa,UAAU,aAAa,QAAQ,iBAAiB;CACnE,MAAM,EAAE,MAAM,aAAa,oBAAoB,aAAa;CAC5D,OAAO,UAAU,YAAY,GAAG,KAAK,gBAAgB,MAAM,aAAa,eAAe;AACzF;;;;;;;AAQA,eAAe,sBACb,cACA,cACA,QACkB;CAClB,IAAI,CAAC,mBAAmB,IAAI,aAAa,IAAI,GAAG,OAAO;CACvD,MAAM,SAAS,aAAa,SAAS;CACrC,IAAI,CAAC,UAAU,CAAC,QAAQ,OAAO;CAC/B,IAAI;CACJ,IAAI;EACF,MAAM,eAAe,OAAO,iCACxB,MAAM,OAAO,+BAA+B,aAAa,KAAK,wBAAwB,aAAa,KAAK,IAAI,IAC5G,aAAa,KAAK;EAOtB,QAAQ,MANkB,QAAQ,KAAK,CACrC,OAAO,4BAA4B,cAAc,aAAa,KAAK,WAAW,MAAM,GACpF,IAAI,SAAmB,YAAW;GAChC,UAAU,iBAAiB,QAAQ,KAAA,CAAS,GAAG,2BAA2B;EAC5E,CAAC,CACH,CAAC,KACsB,MAAA;CACzB,QAAQ;EACN,OAAO;CACT,UAAU;EACR,IAAI,SAAS,aAAa,OAAO;CACnC;AACF;AAEA,eAAsB,sBACpB,QACA,cACmF;CACnF,MAAM,eAAe,sBAAsB,MAAM;CACjD,IAAI,CAAC,cAAc,OAAO;EAAE,WAAW;EAAG,QAAQ;EAAG,SAAS;EAAG,SAAS;CAAK;CAE/E,MAAM,SAA0C;EAC9C,MAAM,aAAa,SAAS;EAC5B,WAAW,OAAO,aAAa,SAAS,SAAS;EACjD,iBAAiB,OAAO,aAAa,SAAS,eAAe;CAC/D;CACA,MAAM,oBACJ,aAAa,uBACX,oBAAqD,YAA4C;EACjG,IAAI,CAAC,aAAa,QAAQ,MAAM,IAAI,MAAM,+DAA+D;EACzG,OAAO,wCACL,oBACA,SACA,aAAa,OAAO,kBACtB;CACF;CACF,MAAM,qBACJ,aAAa,wBACX,IAAY,WAAyC;EACrD,IAAI,CAAC,aAAa,QAAQ,MAAM,IAAI,MAAM,iEAAiE;EAC3G,OAAO,+BAA+B,IAAI,QAAQ,aAAa,OAAO,kBAAkB;CAC1F;CACF,MAAM,qBACJ,aAAa,wBACX,WAAsC,iBACtC,sBAAsB,WAAW,cAAc,aAAa,MAAM;CAEtE,MAAM,gBAAgB,MAAM,kBAAkB,QAAQ,EAAE,iBAAiB,aAAa,WAAW,SAAS,CAAC;CAC3G,IAAI,YAAY;CAChB,IAAI,SAAS;CACb,IAAI,UAAU;CACd,IAAI,WAAW;CAEf,KAAK,MAAM,gBAAgB,eACzB,IAAI;EAIF,IACE,aAAa,uBAAuB,KAAA,KACpC,aAAa,KAAK,2BAA2B,aAAa,oBAC1D;GACA,WAAW;GACX,aAAa,uBAAuB,YAAY;GAChD;EACF;EACA,IAAI,CAAE,MAAM,mBAAmB,cAAc,YAAY,GAAI;GAC3D,WAAW;GACX;EACF;EACA,MAAM,UAAU,MAAM,2BAA2B,aAAa,YAAY,cAAc;GACtF,OAAO;GACP,eAAe,aAAa,QAAQ;EACtC,CAAC;EAGD,IAAI,CAAC,SAAS;GACZ,WAAW;GACX,aAAa,kBAAkB,YAAY;GAC3C;EACF;EACA,MAAM,aAAa,MAAM,uBAAuB,cAAc,aAAa,QAAQ,oBAAoB;EAGvG,IAAI,CAAC,YACH,MAAM,IAAI,MAAM,uBAAuB,aAAa,GAAG,mDAAmD;EAE5G,MAAM,SAAS,MAAM,QAAQ,uBAC3B;GACE,QAAQ;GACR,MAAM,aAAa;GACnB,SAAS,aAAa;GACtB,UAAU,aAAa;GACvB,SAAS,aAAa;GACtB,UAAU,OAAO;GACjB,WAAW,GAAG,OAAO,WAAW,GAAG,aAAa,UAAU,GAAG,aAAa;GAC1E,aAAa,UAAU,aAAa,SAAS,KAAK,GAAG,aAAa,SAAS,UAAU,iBAAiB,aAAa,SAAS;GAC5H,UAAU;IACR,OAAO,aAAa,SAAS;IAC7B,QAAQ,aAAa;IACrB,YAAY,aAAa,SAAS;IAClC,iBAAiB,aAAa,SAAS;IACvC,WAAW,sBAAsB,YAAY;IAC7C,YAAY,OAAO;GACrB;EACF,GACA,EAAE,gBAAgB,WAAW,CAC/B;EACA,MAAM,QAAQ,IAAI,CAAC,OAAO,WAAW,OAAO,QAAQ,CAAC,CAAC,OAAO,OAAO,CAAC;EACrE,IAAI,aAAa,UACf,MAAM,mBAAmB,aAAa,IAAI,aAAa,SAAS,wBAAwB,WAAW,QAAQ;OACtG,IAAI,aAAa,WAAW,UACjC,MAAM,mBAAmB,aAAa,IAAI,MAAM;EAElD,aAAa;CACf,SAAS,OAAO;EACd,UAAU;EACV,aAAa,gBAAgB,cAAc,KAAK;CAClD;CAEF,IAAI,UAAU,aAAa,mBAAmB,YAAY;CAE1D,OAAO;EAAE;EAAW;EAAQ;EAAS,SAAS;CAAM;AACtD"}

package/dist/integrations/gitlab/webhook.d.ts

@@ -0,0 +1,72 @@
+import type { Context } from 'hono';
+import type { GitLabWebhookDispatchDependencies } from './webhook-dispatch.js';
+export declare const SUPPORTED_GITLAB_WEBHOOK_EVENTS: Set<string>;
+export interface ParsedGitLabWebhook {
+    event: string;
+    deliveryId: string;
+    instanceHost?: string;
+    payload: Record<string, unknown>;
+}
+export interface GitLabWebhookMetadata {
+    event: string;
+    projectId?: number;
+    projectPath?: string;
+    issueIid?: number;
+    mergeRequestIid?: number;
+    noteableType?: string;
+    sender?: string;
+}
+export type GitLabWebhookResult = {
+    status: 202;
+    body: {
+        ok: true;
+        ignored?: true;
+    };
+} | {
+    status: 400;
+    body: {
+        error: 'bad_request';
+        message: string;
+    };
+} | {
+    status: 401;
+    body: {
+        error: 'unauthorized';
+        message: string;
+    };
+};
+/**
+ * What processing an already-parsed delivery needs: the rules ingress and,
+ * when a controller is mounted, the subscription dispatch. Shared by the
+ * direct webhook route and the Platform event poller.
+ */
+export interface GitLabWebhookProcessOptions extends Partial<Omit<GitLabWebhookDispatchDependencies, 'controller'>> {
+    ingestFactoryEvent?: (event: ParsedGitLabWebhook) => Promise<unknown>;
+    /** When present, merge-request activity is also delivered to subscribed sessions. */
+    controller?: GitLabWebhookDispatchDependencies['controller'];
+}
+export interface GitLabWebhookHandlerOptions extends GitLabWebhookProcessOptions {
+    webhookSecret?: string;
+}
+export declare function verifyGitLabToken(receivedToken: string, secret: string): boolean;
+export declare function parseGitLabWebhook(c: Context, secret: string | undefined): Promise<ParsedGitLabWebhook | GitLabWebhookResult>;
+export declare function normalizeGitLabWebhookMetadata(parsed: ParsedGitLabWebhook): GitLabWebhookMetadata;
+/**
+ * Build the parsed form of a GitLab webhook from its raw body alone, for
+ * deliveries that arrive without HTTP headers. The event name comes from
+ * `object_kind`; the caller supplies a delivery id that is stable across
+ * replays so rules replay handling and session dedupe keys behave as they do
+ * for a direct delivery. Returns null when the body is not a webhook object or
+ * its kind is one Factory does not handle, which callers treat exactly like an
+ * unsupported event header: acknowledged and dropped.
+ */
+export declare function parseGitLabWebhookBody(body: unknown, deliveryId: string): ParsedGitLabWebhook | null;
+/**
+ * Process a parsed delivery: rules ingress first, then session dispatch when a
+ * controller is mounted. Ingestion failures propagate so the caller can retry
+ * the delivery (GitLab redelivers on a non-2xx; the poller leaves its cursor
+ * in place).
+ */
+export declare function processGitLabWebhook(parsed: ParsedGitLabWebhook, options: GitLabWebhookProcessOptions): Promise<GitLabWebhookResult>;
+export declare function handleGitLabWebhook(c: Context, options: GitLabWebhookHandlerOptions): Promise<GitLabWebhookResult>;
+//# sourceMappingURL=webhook.d.ts.map

package/dist/integrations/gitlab/webhook.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook.d.ts","sourceRoot":"","sources":["../../../src/integrations/gitlab/webhook.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAGpC,OAAO,KAAK,EAAE,iCAAiC,EAAE,MAAM,uBAAuB,CAAC;AAE/E,eAAO,MAAM,+BAA+B,aAA0E,CAAC;AAEvH,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,MAAM,mBAAmB,GAC3B;IAAE,MAAM,EAAE,GAAG,CAAC;IAAC,IAAI,EAAE;QAAE,EAAE,EAAE,IAAI,CAAC;QAAC,OAAO,CAAC,EAAE,IAAI,CAAA;KAAE,CAAA;CAAE,GACnD;IAAE,MAAM,EAAE,GAAG,CAAC;IAAC,IAAI,EAAE;QAAE,KAAK,EAAE,aAAa,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,GAChE;IAAE,MAAM,EAAE,GAAG,CAAC;IAAC,IAAI,EAAE;QAAE,KAAK,EAAE,cAAc,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,CAAC;AAEtE;;;;GAIG;AACH,MAAM,WAAW,2BAA4B,SAAQ,OAAO,CAAC,IAAI,CAAC,iCAAiC,EAAE,YAAY,CAAC,CAAC;IACjH,kBAAkB,CAAC,EAAE,CAAC,KAAK,EAAE,mBAAmB,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACtE,qFAAqF;IACrF,UAAU,CAAC,EAAE,iCAAiC,CAAC,YAAY,CAAC,CAAC;CAC9D;AAED,MAAM,WAAW,2BAA4B,SAAQ,2BAA2B;IAC9E,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AA8BD,wBAAgB,iBAAiB,CAAC,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAIhF;AAED,wBAAsB,kBAAkB,CACtC,CAAC,EAAE,OAAO,EACV,MAAM,EAAE,MAAM,GAAG,SAAS,GACzB,OAAO,CAAC,mBAAmB,GAAG,mBAAmB,CAAC,CAoCpD;AAcD,wBAAgB,8BAA8B,CAAC,MAAM,EAAE,mBAAmB,GAAG,qBAAqB,CA2BjG;AAED;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,GAAG,mBAAmB,GAAG,IAAI,CAQpG;AAED;;;;;GAKG;AACH,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,mBAAmB,EAC3B,OAAO,EAAE,2BAA2B,GACnC,OAAO,CAAC,mBAAmB,CAAC,CA6B9B;AAED,wBAAsB,mBAAmB,CACvC,CAAC,EAAE,OAAO,EACV,OAAO,EAAE,2BAA2B,GACnC,OAAO,CAAC,mBAAmB,CAAC,CAK9B"}