@molecule/api-emails-inbound-agentmail 1.0.0

package/dist/types.d.ts

@@ -0,0 +1,229 @@
+/**
+ * Type definitions for the AgentMail inbound-emails provider.
+ *
+ * Only the fields this bond reads are typed; AgentMail emits a superset.
+ * Every optional field is read defensively — a payload that omits or
+ * mistypes one degrades to "absent", never to a crash.
+ *
+ * @see https://docs.agentmail.to/api-reference/webhooks/events/message-received
+ * @see https://docs.agentmail.to/api-reference/inboxes/messages/get
+ *
+ * @module
+ */
+export type { InboundEmail, InboundEmailAttachment, InboundEmailProvider, InboundEmailReply, InboundEmailReplyResult, } from '@molecule/api-emails-inbound';
+/**
+ * Attachment METADATA as carried by a webhook payload or a `GET message`
+ * response. The bytes are never inline — see
+ * {@link AgentMailAttachmentDownload}.
+ */
+export interface AgentMailAttachmentMeta {
+    /** AgentMail's identifier for the attachment. */
+    attachment_id: string;
+    /** Size of the attachment in bytes. */
+    size: number;
+    /** Original filename, when the sender supplied one. */
+    filename?: string;
+    /** MIME type, when known. */
+    content_type?: string;
+    /** `inline` for `cid:`-referenced parts, `attachment` otherwise. */
+    content_disposition?: 'inline' | 'attachment';
+    /** Content-ID for inline parts referenced from the HTML body. */
+    content_id?: string;
+}
+/**
+ * Response of `GET /v0/inboxes/{inbox_id}/messages/{message_id}/attachments/{attachment_id}`:
+ * the attachment's metadata plus a presigned, time-limited `download_url`
+ * from which the raw bytes are fetched.
+ *
+ * @see https://docs.agentmail.to/api-reference/inboxes/messages/get-attachment
+ */
+export interface AgentMailAttachmentDownload extends AgentMailAttachmentMeta {
+    /** Presigned URL serving the raw attachment bytes (no auth header needed). */
+    download_url: string;
+    /** When `download_url` stops working. */
+    expires_at?: string;
+}
+/**
+ * An AgentMail message as it appears in a `message.received` webhook payload
+ * and in the `GET message` response (same schema).
+ *
+ * `message_id` is the RFC 5322 `Message-ID`, INCLUDING its angle brackets
+ * (`<abc@agentmail.to>`); AgentMail uses that exact string as the path
+ * parameter of every per-message endpoint.
+ */
+export interface AgentMailMessage {
+    /** Opaque id of the inbox that received the message (NOT its address). */
+    inbox_id: string;
+    /** Opaque id of the conversation thread. */
+    thread_id?: string;
+    /** RFC 5322 Message-ID, with angle brackets. */
+    message_id: string;
+    /** AgentMail labels, e.g. `['received']`. */
+    labels?: string[];
+    /** ISO 8601 time AgentMail received the message. */
+    timestamp?: string;
+    /**
+     * Sender mailbox (`Alice <alice@example.com>`). The API reference spells
+     * this `from`; the webhooks guide's example spells it `from_` — both are
+     * documented, so both are read.
+     */
+    from?: string;
+    /** Alternate documented spelling of {@link AgentMailMessage.from}. */
+    from_?: string;
+    /** `To:` recipients. */
+    to?: string[];
+    /** `Cc:` recipients. */
+    cc?: string[];
+    /** `Bcc:` recipients. */
+    bcc?: string[];
+    /** `Reply-To:` addresses. */
+    reply_to?: string[];
+    /** Subject line. */
+    subject?: string;
+    /** Short body preview. */
+    preview?: string;
+    /**
+     * Plain-text body. Omitted (together with `html`) when the webhook payload
+     * would exceed AgentMail's 1 MB cap — fetch the message via the API then.
+     */
+    text?: string;
+    /** HTML body. Omitted under the same 1 MB rule as `text`. */
+    html?: string;
+    /** Attachment metadata only — bytes come from the attachment endpoint. */
+    attachments?: AgentMailAttachmentMeta[];
+    /** `In-Reply-To` header value, with angle brackets. */
+    in_reply_to?: string;
+    /** `References` header values, with angle brackets. */
+    references?: string[];
+    /** Raw message headers as a name → value map. */
+    headers?: Record<string, string>;
+    /** Message size in bytes. */
+    size?: number;
+    /** ISO 8601 creation time. */
+    created_at?: string;
+    /** ISO 8601 last-update time. */
+    updated_at?: string;
+}
+/**
+ * Top-level shape of an AgentMail webhook delivery for the
+ * `message.received*` event family.
+ *
+ * @see https://docs.agentmail.to/api-reference/webhooks/events/message-received
+ */
+export interface AgentMailWebhookEvent {
+    /** Always `event`. */
+    type?: string;
+    /**
+     * `message.received`, `message.received.spam`,
+     * `message.received.blocked`, or `message.received.unauthenticated`.
+     */
+    event_type: string;
+    /** Unique id of this event. */
+    event_id?: string;
+    /** The received message. */
+    message: AgentMailMessage;
+}
+/**
+ * Request body of `POST /v0/inboxes/{inbox_id}/messages/{message_id}/reply`.
+ * Every field is optional on the wire; AgentMail threads the reply itself
+ * (there is no `subject` — the original's is reused).
+ *
+ * @see https://docs.agentmail.to/api-reference/inboxes/messages/reply
+ */
+export interface AgentMailReplyRequest {
+    /** Recipient(s). */
+    to?: string | string[];
+    /** CC recipient(s). */
+    cc?: string | string[];
+    /** BCC recipient(s). */
+    bcc?: string | string[];
+    /** Reply-To address(es). */
+    reply_to?: string | string[];
+    /** Plain-text body. */
+    text?: string;
+    /** HTML body. */
+    html?: string;
+    /** Attachments; `content` is the base64-encoded payload. */
+    attachments?: AgentMailReplyAttachment[];
+    /** Custom message headers. */
+    headers?: Record<string, string>;
+    /** Message labels. */
+    labels?: string[];
+}
+/** One attachment in an {@link AgentMailReplyRequest}. */
+export interface AgentMailReplyAttachment {
+    /** Filename shown to the recipient. */
+    filename?: string;
+    /** MIME type. */
+    content_type?: string;
+    /** `inline` for `cid:`-referenced parts. */
+    content_disposition?: 'inline' | 'attachment';
+    /** Content-ID for inline parts. */
+    content_id?: string;
+    /** Base64-encoded attachment bytes. */
+    content?: string;
+}
+/** Response of the reply endpoint. */
+export interface AgentMailReplyResponse {
+    /** Message-ID of the created reply. */
+    message_id: string;
+    /** Thread the reply belongs to. */
+    thread_id?: string;
+}
+/**
+ * AgentMail's error envelope.
+ *
+ * @see https://docs.agentmail.to/errors
+ */
+export interface AgentMailErrorBody {
+    /** Legacy error type name (e.g. `NotFoundError`). */
+    name?: string;
+    /** Machine-readable error code (e.g. `unknown_api_key`, `rate_limit_exceeded`). */
+    code?: string;
+    /** Human-readable description. */
+    message?: string;
+    /** Concrete remediation steps, when AgentMail supplied them. */
+    fix?: string;
+    /** Link to the error's documentation. */
+    docs?: string;
+}
+declare global {
+    namespace NodeJS {
+        /**
+         * Process Env interface — AgentMail credentials for the inbound bond.
+         * Webhooks are verified with the per-webhook signing secret; the API key
+         * is used for message/attachment hydration and for reply dispatch.
+         */
+        interface ProcessEnv {
+            /**
+             * AgentMail API key (`am_…`). Sent as `Authorization: Bearer` on every
+             * API call: body hydration, attachment download, reply dispatch.
+             */
+            AGENTMAIL_API_KEY?: string;
+            /**
+             * Webhook signing secret (`whsec_…`) returned when the webhook was
+             * created. Used to verify the `svix-signature` of inbound webhooks.
+             */
+            AGENTMAIL_WEBHOOK_SECRET?: string;
+            /**
+             * Optional `inbox_id` this app owns. When set, webhooks for any other
+             * inbox are rejected by `parseWebhookPayload`, and replies are sent
+             * from this inbox even when the original parse happened in another
+             * process.
+             */
+            AGENTMAIL_INBOX_ID?: string;
+            /**
+             * Optional API base URL. Defaults to `https://api.agentmail.to`; set
+             * `https://api.agentmail.eu` for the EU region.
+             */
+            AGENTMAIL_BASE_URL?: string;
+            /**
+             * Maximum age in seconds for an inbound webhook timestamp before the
+             * provider rejects it as a replay. Defaults to `300` (5 minutes) when
+             * unset.
+             */
+            AGENTMAIL_INBOUND_REPLAY_WINDOW_SECONDS?: string;
+        }
+    }
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,YAAY,EACV,YAAY,EACZ,sBAAsB,EACtB,oBAAoB,EACpB,iBAAiB,EACjB,uBAAuB,GACxB,MAAM,8BAA8B,CAAA;AAErC;;;;GAIG;AACH,MAAM,WAAW,uBAAuB;IACtC,iDAAiD;IACjD,aAAa,EAAE,MAAM,CAAA;IACrB,uCAAuC;IACvC,IAAI,EAAE,MAAM,CAAA;IACZ,uDAAuD;IACvD,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,6BAA6B;IAC7B,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,oEAAoE;IACpE,mBAAmB,CAAC,EAAE,QAAQ,GAAG,YAAY,CAAA;IAC7C,iEAAiE;IACjE,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,2BAA4B,SAAQ,uBAAuB;IAC1E,8EAA8E;IAC9E,YAAY,EAAE,MAAM,CAAA;IACpB,yCAAyC;IACzC,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,gBAAgB;IAC/B,0EAA0E;IAC1E,QAAQ,EAAE,MAAM,CAAA;IAChB,4CAA4C;IAC5C,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,gDAAgD;IAChD,UAAU,EAAE,MAAM,CAAA;IAClB,6CAA6C;IAC7C,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;IACjB,oDAAoD;IACpD,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB;;;;OAIG;IACH,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,sEAAsE;IACtE,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,wBAAwB;IACxB,EAAE,CAAC,EAAE,MAAM,EAAE,CAAA;IACb,wBAAwB;IACxB,EAAE,CAAC,EAAE,MAAM,EAAE,CAAA;IACb,yBAAyB;IACzB,GAAG,CAAC,EAAE,MAAM,EAAE,CAAA;IACd,6BAA6B;IAC7B,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAA;IACnB,oBAAoB;IACpB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,0BAA0B;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB;;;OAGG;IACH,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,6DAA6D;IAC7D,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,0EAA0E;IAC1E,WAAW,CAAC,EAAE,uBAAuB,EAAE,CAAA;IACvC,uDAAuD;IACvD,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,uDAAuD;IACvD,UAAU,CAAC,EAAE,MAAM,EAAE,CAAA;IACrB,iDAAiD;IACjD,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAChC,6BAA6B;IAC7B,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,8BAA8B;IAC9B,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,iCAAiC;IACjC,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB;AAED;;;;;GAKG;AACH,MAAM,WAAW,qBAAqB;IACpC,sBAAsB;IACtB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb;;;OAGG;IACH,UAAU,EAAE,MAAM,CAAA;IAClB,+BAA+B;IAC/B,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,4BAA4B;IAC5B,OAAO,EAAE,gBAAgB,CAAA;CAC1B;AAED;;;;;;GAMG;AACH,MAAM,WAAW,qBAAqB;IACpC,oBAAoB;IACpB,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAA;IACtB,uBAAuB;IACvB,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAA;IACtB,wBAAwB;IACxB,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAA;IACvB,4BAA4B;IAC5B,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAA;IAC5B,uBAAuB;IACvB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,iBAAiB;IACjB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,4DAA4D;IAC5D,WAAW,CAAC,EAAE,wBAAwB,EAAE,CAAA;IACxC,8BAA8B;IAC9B,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAChC,sBAAsB;IACtB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;CAClB;AAED,0DAA0D;AAC1D,MAAM,WAAW,wBAAwB;IACvC,uCAAuC;IACvC,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,iBAAiB;IACjB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,4CAA4C;IAC5C,mBAAmB,CAAC,EAAE,QAAQ,GAAG,YAAY,CAAA;IAC7C,mCAAmC;IACnC,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,uCAAuC;IACvC,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB;AAED,sCAAsC;AACtC,MAAM,WAAW,sBAAsB;IACrC,uCAAuC;IACvC,UAAU,EAAE,MAAM,CAAA;IAClB,mCAAmC;IACnC,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED;;;;GAIG;AACH,MAAM,WAAW,kBAAkB;IACjC,qDAAqD;IACrD,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,mFAAmF;IACnF,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,kCAAkC;IAClC,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,gEAAgE;IAChE,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,yCAAyC;IACzC,IAAI,CAAC,EAAE,MAAM,CAAA;CACd;AAED,OAAO,CAAC,MAAM,CAAC;IAEb,UAAU,MAAM,CAAC;QACf;;;;WAIG;QACH,UAAiB,UAAU;YACzB;;;eAGG;YACH,iBAAiB,CAAC,EAAE,MAAM,CAAA;YAE1B;;;eAGG;YACH,wBAAwB,CAAC,EAAE,MAAM,CAAA;YAEjC;;;;;eAKG;YACH,kBAAkB,CAAC,EAAE,MAAM,CAAA;YAE3B;;;eAGG;YACH,kBAAkB,CAAC,EAAE,MAAM,CAAA;YAE3B;;;;eAIG;YACH,uCAAuC,CAAC,EAAE,MAAM,CAAA;SACjD;KACF;CACF"}

package/dist/types.js

@@ -0,0 +1,14 @@
+/**
+ * Type definitions for the AgentMail inbound-emails provider.
+ *
+ * Only the fields this bond reads are typed; AgentMail emits a superset.
+ * Every optional field is read defensively — a payload that omits or
+ * mistypes one degrades to "absent", never to a crash.
+ *
+ * @see https://docs.agentmail.to/api-reference/webhooks/events/message-received
+ * @see https://docs.agentmail.to/api-reference/inboxes/messages/get
+ *
+ * @module
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG"}

package/dist/utilities.d.ts

@@ -0,0 +1,148 @@
+/**
+ * Internal utilities for the AgentMail inbound-emails provider.
+ *
+ * Kept out of `provider.ts` so the signing/parsing helpers can be
+ * unit-tested in isolation without touching the bond singleton or the
+ * network.
+ *
+ * @module
+ */
+import { Buffer } from 'node:buffer';
+/**
+ * Default replay window for inbound webhook timestamps, in seconds.
+ *
+ * AgentMail delivers webhooks through Svix, whose documented default
+ * tolerance for `svix-timestamp` is five minutes.
+ */
+export declare const DEFAULT_REPLAY_WINDOW_SECONDS = 300;
+/** Default AgentMail API base URL (production). */
+export declare const DEFAULT_BASE_URL = "https://api.agentmail.to";
+/** Prefix Svix puts on webhook signing secrets before the base64 key. */
+export declare const WEBHOOK_SECRET_PREFIX = "whsec_";
+/** The only signature-scheme version this bond understands. */
+export declare const SIGNATURE_VERSION = "v1";
+/**
+ * Coerces an HTTP header value (which may be `string`, `string[]`, or
+ * `undefined`) to a single string. Multi-value headers are joined with
+ * `, ` per RFC 9110 §5.2.
+ *
+ * @param value - The header value to coerce.
+ * @returns The header value as a single string, or `undefined` when the
+ *   header was not present.
+ */
+export declare const headerToString: (value: string | string[] | undefined) => string | undefined;
+/**
+ * Returns the value of `headers[name]` (case-insensitive) coerced to a
+ * single string.
+ *
+ * @param headers - The headers object.
+ * @param name - The header name (case-insensitive).
+ * @returns The header value as a single string, or `undefined` if absent.
+ */
+export declare const getHeader: (headers: Record<string, string | string[] | undefined>, name: string) => string | undefined;
+/**
+ * Coerces the request body into a UTF-8 string. Buffers are decoded as
+ * UTF-8 (AgentMail POSTs `application/json`), strings are returned as-is.
+ *
+ * @param body - The raw body.
+ * @returns The body as a UTF-8 string.
+ */
+export declare const bodyToString: (body: Buffer | string) => string;
+/**
+ * Narrowing guard for a plain JSON object.
+ *
+ * @param value - Any value.
+ * @returns `true` when `value` is a non-null, non-array object.
+ */
+export declare const isRecord: (value: unknown) => value is Record<string, unknown>;
+/**
+ * Parses a JSON request body. Accepts the raw bytes/string of the request
+ * or an already-parsed object (Express's JSON middleware gives us the
+ * latter when a JSON route captures the webhook).
+ *
+ * @param body - Raw body or pre-parsed object.
+ * @returns The parsed JSON value.
+ * @throws {SyntaxError} When a string/Buffer body is not valid JSON.
+ */
+export declare const parseJsonBody: (body: Buffer | string | Record<string, unknown>) => unknown;
+/**
+ * Decodes a Svix-style signing secret into raw key bytes: strip the
+ * `whsec_` prefix, then base64-decode the remainder. A secret without the
+ * prefix is base64-decoded as-is (the Svix libraries do the same).
+ *
+ * @param secret - The signing secret as configured.
+ * @returns The HMAC key bytes (empty when the secret decodes to nothing).
+ */
+export declare const decodeWebhookSecret: (secret: string) => Buffer;
+/**
+ * Builds the exact bytes Svix signs: `${id}.${timestamp}.` followed by the
+ * raw request body, unchanged. Returned as a Buffer so a body that is not
+ * valid UTF-8 still signs byte-for-byte.
+ *
+ * @param id - The `svix-id` header value.
+ * @param timestamp - The `svix-timestamp` header value (as received).
+ * @param body - The raw request body.
+ * @returns The signed content.
+ */
+export declare const buildSignedContent: (id: string, timestamp: string, body: Buffer | string) => Buffer;
+/**
+ * Splits a `svix-signature` header — a space-delimited list of
+ * `<version>,<base64>` entries (e.g. `v1,abc v1,def`) — into the `v1`
+ * signatures. Entries of any other version are ignored, not rejected: Svix
+ * may add versions and a receiver is expected to match on any one it
+ * understands.
+ *
+ * @param value - The raw header value.
+ * @returns The base64 `v1` signatures (empty when none are present).
+ */
+export declare const parseSignatureHeader: (value: string | undefined) => string[];
+/**
+ * Constant-time comparison of two base64-encoded digests.
+ *
+ * @param a - The first digest.
+ * @param b - The second digest.
+ * @returns `true` when the decoded bytes are equal.
+ */
+export declare const safeEqualBase64: (a: string, b: string) => boolean;
+/**
+ * Normalizes an address field that AgentMail types as `string` in one
+ * place and `string[]` in another into a trimmed, non-empty string array.
+ *
+ * @param value - The raw field value.
+ * @returns The addresses (empty when the field is absent or malformed).
+ */
+export declare const normalizeAddressList: (value: unknown) => string[];
+/**
+ * Recovers the core's normalized headers map (lowercased names,
+ * multi-value headers as arrays) from AgentMail's `headers` object. Any
+ * non-string value is skipped; a missing or malformed map yields `{}`.
+ *
+ * @param value - The raw `headers` field.
+ * @returns Normalized headers map.
+ */
+export declare const lowercaseHeaderMap: (value: unknown) => Record<string, string | string[]>;
+/**
+ * Strips surrounding angle brackets from a `Message-ID` value.
+ *
+ * @param value - The raw value (with or without angle brackets).
+ * @returns The value without angle brackets, or `undefined` if input was
+ *   empty or not a string.
+ */
+export declare const unwrapMessageId: (value: unknown) => string | undefined;
+/**
+ * Parses an ISO 8601 timestamp into a `Date`.
+ *
+ * @param value - The raw field value.
+ * @returns The date, or `undefined` when absent or unparseable.
+ */
+export declare const parseTimestamp: (value: unknown) => Date | undefined;
+/**
+ * Parses a `Retry-After` header, which is equally valid as delta-seconds
+ * (`'30'`) or an HTTP-date, into whole seconds from now.
+ *
+ * @param value - The raw header value.
+ * @returns Seconds to wait (never negative), or `undefined` when absent or
+ *   unparseable.
+ */
+export declare const parseRetryAfterSeconds: (value: string | null | undefined) => number | undefined;
+//# sourceMappingURL=utilities.d.ts.map

package/dist/utilities.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"utilities.d.ts","sourceRoot":"","sources":["../src/utilities.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAGpC;;;;;GAKG;AACH,eAAO,MAAM,6BAA6B,MAAM,CAAA;AAEhD,mDAAmD;AACnD,eAAO,MAAM,gBAAgB,6BAA6B,CAAA;AAE1D,yEAAyE;AACzE,eAAO,MAAM,qBAAqB,WAAW,CAAA;AAE7C,+DAA+D;AAC/D,eAAO,MAAM,iBAAiB,OAAO,CAAA;AAErC;;;;;;;;GAQG;AACH,eAAO,MAAM,cAAc,GAAI,OAAO,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,KAAG,MAAM,GAAG,SAG9E,CAAA;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,SAAS,GACpB,SAAS,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,EACtD,MAAM,MAAM,KACX,MAAM,GAAG,SAQX,CAAA;AAED;;;;;;GAMG;AACH,eAAO,MAAM,YAAY,GAAI,MAAM,MAAM,GAAG,MAAM,KAAG,MAEpD,CAAA;AAED;;;;;GAKG;AACH,eAAO,MAAM,QAAQ,GAAI,OAAO,OAAO,KAAG,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAExE,CAAA;AAED;;;;;;;;GAQG;AACH,eAAO,MAAM,aAAa,GAAI,MAAM,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAG,OAK/E,CAAA;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,mBAAmB,GAAI,QAAQ,MAAM,KAAG,MAMpD,CAAA;AAED;;;;;;;;;GASG;AACH,eAAO,MAAM,kBAAkB,GAC7B,IAAI,MAAM,EACV,WAAW,MAAM,EACjB,MAAM,MAAM,GAAG,MAAM,KACpB,MAGF,CAAA;AAED;;;;;;;;;GASG;AACH,eAAO,MAAM,oBAAoB,GAAI,OAAO,MAAM,GAAG,SAAS,KAAG,MAAM,EAWtE,CAAA;AAED;;;;;;GAMG;AACH,eAAO,MAAM,eAAe,GAAI,GAAG,MAAM,EAAE,GAAG,MAAM,KAAG,OAKtD,CAAA;AAED;;;;;;GAMG;AACH,eAAO,MAAM,oBAAoB,GAAI,OAAO,OAAO,KAAG,MAAM,EAS3D,CAAA;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,kBAAkB,GAAI,OAAO,OAAO,KAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAsBnF,CAAA;AAED;;;;;;GAMG;AACH,eAAO,MAAM,eAAe,GAAI,OAAO,OAAO,KAAG,MAAM,GAAG,SAKzD,CAAA;AAED;;;;;GAKG;AACH,eAAO,MAAM,cAAc,GAAI,OAAO,OAAO,KAAG,IAAI,GAAG,SAItD,CAAA;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,sBAAsB,GAAI,OAAO,MAAM,GAAG,IAAI,GAAG,SAAS,KAAG,MAAM,GAAG,SAOlF,CAAA"}

package/dist/utilities.js

@@ -0,0 +1,257 @@
+/**
+ * Internal utilities for the AgentMail inbound-emails provider.
+ *
+ * Kept out of `provider.ts` so the signing/parsing helpers can be
+ * unit-tested in isolation without touching the bond singleton or the
+ * network.
+ *
+ * @module
+ */
+import { Buffer } from 'node:buffer';
+import { timingSafeEqual } from 'node:crypto';
+/**
+ * Default replay window for inbound webhook timestamps, in seconds.
+ *
+ * AgentMail delivers webhooks through Svix, whose documented default
+ * tolerance for `svix-timestamp` is five minutes.
+ */
+export const DEFAULT_REPLAY_WINDOW_SECONDS = 300;
+/** Default AgentMail API base URL (production). */
+export const DEFAULT_BASE_URL = 'https://api.agentmail.to';
+/** Prefix Svix puts on webhook signing secrets before the base64 key. */
+export const WEBHOOK_SECRET_PREFIX = 'whsec_';
+/** The only signature-scheme version this bond understands. */
+export const SIGNATURE_VERSION = 'v1';
+/**
+ * Coerces an HTTP header value (which may be `string`, `string[]`, or
+ * `undefined`) to a single string. Multi-value headers are joined with
+ * `, ` per RFC 9110 §5.2.
+ *
+ * @param value - The header value to coerce.
+ * @returns The header value as a single string, or `undefined` when the
+ *   header was not present.
+ */
+export const headerToString = (value) => {
+    if (value === undefined)
+        return undefined;
+    return Array.isArray(value) ? value.join(', ') : value;
+};
+/**
+ * Returns the value of `headers[name]` (case-insensitive) coerced to a
+ * single string.
+ *
+ * @param headers - The headers object.
+ * @param name - The header name (case-insensitive).
+ * @returns The header value as a single string, or `undefined` if absent.
+ */
+export const getHeader = (headers, name) => {
+    const target = name.toLowerCase();
+    for (const key of Object.keys(headers)) {
+        if (key.toLowerCase() === target) {
+            return headerToString(headers[key]);
+        }
+    }
+    return undefined;
+};
+/**
+ * Coerces the request body into a UTF-8 string. Buffers are decoded as
+ * UTF-8 (AgentMail POSTs `application/json`), strings are returned as-is.
+ *
+ * @param body - The raw body.
+ * @returns The body as a UTF-8 string.
+ */
+export const bodyToString = (body) => {
+    return Buffer.isBuffer(body) ? body.toString('utf8') : body;
+};
+/**
+ * Narrowing guard for a plain JSON object.
+ *
+ * @param value - Any value.
+ * @returns `true` when `value` is a non-null, non-array object.
+ */
+export const isRecord = (value) => {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+};
+/**
+ * Parses a JSON request body. Accepts the raw bytes/string of the request
+ * or an already-parsed object (Express's JSON middleware gives us the
+ * latter when a JSON route captures the webhook).
+ *
+ * @param body - Raw body or pre-parsed object.
+ * @returns The parsed JSON value.
+ * @throws {SyntaxError} When a string/Buffer body is not valid JSON.
+ */
+export const parseJsonBody = (body) => {
+    if (typeof body === 'string' || Buffer.isBuffer(body)) {
+        return JSON.parse(bodyToString(body));
+    }
+    return body;
+};
+/**
+ * Decodes a Svix-style signing secret into raw key bytes: strip the
+ * `whsec_` prefix, then base64-decode the remainder. A secret without the
+ * prefix is base64-decoded as-is (the Svix libraries do the same).
+ *
+ * @param secret - The signing secret as configured.
+ * @returns The HMAC key bytes (empty when the secret decodes to nothing).
+ */
+export const decodeWebhookSecret = (secret) => {
+    const trimmed = secret.trim();
+    const encoded = trimmed.startsWith(WEBHOOK_SECRET_PREFIX)
+        ? trimmed.slice(WEBHOOK_SECRET_PREFIX.length)
+        : trimmed;
+    return Buffer.from(encoded, 'base64');
+};
+/**
+ * Builds the exact bytes Svix signs: `${id}.${timestamp}.` followed by the
+ * raw request body, unchanged. Returned as a Buffer so a body that is not
+ * valid UTF-8 still signs byte-for-byte.
+ *
+ * @param id - The `svix-id` header value.
+ * @param timestamp - The `svix-timestamp` header value (as received).
+ * @param body - The raw request body.
+ * @returns The signed content.
+ */
+export const buildSignedContent = (id, timestamp, body) => {
+    const bodyBytes = Buffer.isBuffer(body) ? body : Buffer.from(body, 'utf8');
+    return Buffer.concat([Buffer.from(`${id}.${timestamp}.`, 'utf8'), bodyBytes]);
+};
+/**
+ * Splits a `svix-signature` header — a space-delimited list of
+ * `<version>,<base64>` entries (e.g. `v1,abc v1,def`) — into the `v1`
+ * signatures. Entries of any other version are ignored, not rejected: Svix
+ * may add versions and a receiver is expected to match on any one it
+ * understands.
+ *
+ * @param value - The raw header value.
+ * @returns The base64 `v1` signatures (empty when none are present).
+ */
+export const parseSignatureHeader = (value) => {
+    if (!value)
+        return [];
+    const out = [];
+    for (const entry of value.split(/\s+/u)) {
+        const separator = entry.indexOf(',');
+        if (separator <= 0)
+            continue;
+        const version = entry.slice(0, separator);
+        const signature = entry.slice(separator + 1);
+        if (version === SIGNATURE_VERSION && signature.length > 0)
+            out.push(signature);
+    }
+    return out;
+};
+/**
+ * Constant-time comparison of two base64-encoded digests.
+ *
+ * @param a - The first digest.
+ * @param b - The second digest.
+ * @returns `true` when the decoded bytes are equal.
+ */
+export const safeEqualBase64 = (a, b) => {
+    const left = Buffer.from(a, 'base64');
+    const right = Buffer.from(b, 'base64');
+    if (left.length === 0 || left.length !== right.length)
+        return false;
+    return timingSafeEqual(left, right);
+};
+/**
+ * Normalizes an address field that AgentMail types as `string` in one
+ * place and `string[]` in another into a trimmed, non-empty string array.
+ *
+ * @param value - The raw field value.
+ * @returns The addresses (empty when the field is absent or malformed).
+ */
+export const normalizeAddressList = (value) => {
+    const raw = Array.isArray(value) ? value : [value];
+    const out = [];
+    for (const entry of raw) {
+        if (typeof entry !== 'string')
+            continue;
+        const trimmed = entry.trim();
+        if (trimmed.length > 0)
+            out.push(trimmed);
+    }
+    return out;
+};
+/**
+ * Recovers the core's normalized headers map (lowercased names,
+ * multi-value headers as arrays) from AgentMail's `headers` object. Any
+ * non-string value is skipped; a missing or malformed map yields `{}`.
+ *
+ * @param value - The raw `headers` field.
+ * @returns Normalized headers map.
+ */
+export const lowercaseHeaderMap = (value) => {
+    const out = {};
+    if (!isRecord(value))
+        return out;
+    for (const [nameRaw, valueRaw] of Object.entries(value)) {
+        const values = Array.isArray(valueRaw)
+            ? valueRaw.filter((v) => typeof v === 'string')
+            : typeof valueRaw === 'string'
+                ? [valueRaw]
+                : [];
+        const name = nameRaw.toLowerCase();
+        for (const entry of values) {
+            const existing = out[name];
+            if (existing === undefined) {
+                out[name] = entry;
+            }
+            else if (Array.isArray(existing)) {
+                existing.push(entry);
+            }
+            else {
+                out[name] = [existing, entry];
+            }
+        }
+    }
+    return out;
+};
+/**
+ * Strips surrounding angle brackets from a `Message-ID` value.
+ *
+ * @param value - The raw value (with or without angle brackets).
+ * @returns The value without angle brackets, or `undefined` if input was
+ *   empty or not a string.
+ */
+export const unwrapMessageId = (value) => {
+    if (typeof value !== 'string')
+        return undefined;
+    const trimmed = value.trim();
+    if (trimmed.length === 0)
+        return undefined;
+    return trimmed.replace(/^<|>$/gu, '');
+};
+/**
+ * Parses an ISO 8601 timestamp into a `Date`.
+ *
+ * @param value - The raw field value.
+ * @returns The date, or `undefined` when absent or unparseable.
+ */
+export const parseTimestamp = (value) => {
+    if (typeof value !== 'string' || value.length === 0)
+        return undefined;
+    const date = new Date(value);
+    return Number.isNaN(date.getTime()) ? undefined : date;
+};
+/**
+ * Parses a `Retry-After` header, which is equally valid as delta-seconds
+ * (`'30'`) or an HTTP-date, into whole seconds from now.
+ *
+ * @param value - The raw header value.
+ * @returns Seconds to wait (never negative), or `undefined` when absent or
+ *   unparseable.
+ */
+export const parseRetryAfterSeconds = (value) => {
+    if (!value)
+        return undefined;
+    const trimmed = value.trim();
+    if (/^\d+$/u.test(trimmed))
+        return Number.parseInt(trimmed, 10);
+    const at = Date.parse(trimmed);
+    if (Number.isNaN(at))
+        return undefined;
+    return Math.max(0, Math.ceil((at - Date.now()) / 1000));
+};
+//# sourceMappingURL=utilities.js.map

package/dist/utilities.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"utilities.js","sourceRoot":"","sources":["../src/utilities.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACpC,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAE7C;;;;;GAKG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,GAAG,CAAA;AAEhD,mDAAmD;AACnD,MAAM,CAAC,MAAM,gBAAgB,GAAG,0BAA0B,CAAA;AAE1D,yEAAyE;AACzE,MAAM,CAAC,MAAM,qBAAqB,GAAG,QAAQ,CAAA;AAE7C,+DAA+D;AAC/D,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,CAAA;AAErC;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,KAAoC,EAAsB,EAAE;IACzF,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAA;IACzC,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAA;AACxD,CAAC,CAAA;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,CACvB,OAAsD,EACtD,IAAY,EACQ,EAAE;IACtB,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,CAAA;IACjC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACvC,IAAI,GAAG,CAAC,WAAW,EAAE,KAAK,MAAM,EAAE,CAAC;YACjC,OAAO,cAAc,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAA;QACrC,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC,CAAA;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,IAAqB,EAAU,EAAE;IAC5D,OAAO,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;AAC7D,CAAC,CAAA;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,KAAc,EAAoC,EAAE;IAC3E,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;AAC7E,CAAC,CAAA;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,IAA+C,EAAW,EAAE;IACxF,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACtD,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAA;IACvC,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC,CAAA;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,MAAc,EAAU,EAAE;IAC5D,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,CAAA;IAC7B,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC,qBAAqB,CAAC;QACvD,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,qBAAqB,CAAC,MAAM,CAAC;QAC7C,CAAC,CAAC,OAAO,CAAA;IACX,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAA;AACvC,CAAC,CAAA;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAChC,EAAU,EACV,SAAiB,EACjB,IAAqB,EACb,EAAE;IACV,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;IAC1E,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,SAAS,GAAG,EAAE,MAAM,CAAC,EAAE,SAAS,CAAC,CAAC,CAAA;AAC/E,CAAC,CAAA;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,KAAyB,EAAY,EAAE;IAC1E,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAA;IACrB,MAAM,GAAG,GAAa,EAAE,CAAA;IACxB,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QACxC,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QACpC,IAAI,SAAS,IAAI,CAAC;YAAE,SAAQ;QAC5B,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAA;QACzC,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAA;QAC5C,IAAI,OAAO,KAAK,iBAAiB,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IAChF,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC,CAAA;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAS,EAAE,CAAS,EAAW,EAAE;IAC/D,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAA;IACrC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAA;IACtC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;QAAE,OAAO,KAAK,CAAA;IACnE,OAAO,eAAe,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;AACrC,CAAC,CAAA;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,KAAc,EAAY,EAAE;IAC/D,MAAM,GAAG,GAAc,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;IAC7D,MAAM,GAAG,GAAa,EAAE,CAAA;IACxB,KAAK,MAAM,KAAK,IAAI,GAAG,EAAE,CAAC;QACxB,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,SAAQ;QACvC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAA;QAC5B,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IAC3C,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC,CAAA;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,KAAc,EAAqC,EAAE;IACtF,MAAM,GAAG,GAAsC,EAAE,CAAA;IACjD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,GAAG,CAAA;IAChC,KAAK,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxD,MAAM,MAAM,GAAa,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;YAC9C,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;YAC5D,CAAC,CAAC,OAAO,QAAQ,KAAK,QAAQ;gBAC5B,CAAC,CAAC,CAAC,QAAQ,CAAC;gBACZ,CAAC,CAAC,EAAE,CAAA;QACR,MAAM,IAAI,GAAG,OAAO,CAAC,WAAW,EAAE,CAAA;QAClC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,MAAM,QAAQ,GAAG,GAAG,CAAC,IAAI,CAAC,CAAA;YAC1B,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC3B,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,CAAA;YACnB,CAAC;iBAAM,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACnC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;YACtB,CAAC;iBAAM,CAAC;gBACN,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAA;YAC/B,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC,CAAA;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,KAAc,EAAsB,EAAE;IACpE,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAA;IAC/C,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAA;IAC5B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAA;IAC1C,OAAO,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAA;AACvC,CAAC,CAAA;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,KAAc,EAAoB,EAAE;IACjE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAA;IACrE,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,CAAA;IAC5B,OAAO,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAA;AACxD,CAAC,CAAA;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,KAAgC,EAAsB,EAAE;IAC7F,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAA;IAC5B,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAA;IAC5B,IAAI,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,CAAA;IAC/D,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;IAC9B,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QAAE,OAAO,SAAS,CAAA;IACtC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,CAAA;AACzD,CAAC,CAAA"}