@noodleseed/one 0.17.0 → 0.18.0

package/node_modules/@noodle-borg/service/dist/routes/github-webhook.js

@@ -0,0 +1,355 @@
+import { createHmac, randomBytes, timingSafeEqual } from 'node:crypto';
+import { sendJson } from '../http-util.js';
+const SIGNATURE_HEADER = 'x-hub-signature-256';
+/** Timing-safe check of GitHub's `X-Hub-Signature-256: sha256=<hex>` over the raw body bytes. */
+export function verifyWebhookSignature(rawBody, signatureHeader, secret) {
+    if (signatureHeader === undefined || !signatureHeader.startsWith('sha256='))
+        return false;
+    const received = signatureHeader.slice('sha256='.length);
+    // Exactly 64 hex chars: Buffer.from(..., 'hex') silently drops a trailing odd nibble, so a lax
+    // length check would accept multiple encodings of the same digest.
+    if (!/^[0-9a-f]{64}$/i.test(received))
+        return false;
+    const expected = createHmac('sha256', secret).update(rawBody).digest();
+    const receivedBuf = Buffer.from(received, 'hex');
+    return receivedBuf.length === expected.length && timingSafeEqual(receivedBuf, expected);
+}
+async function readRawBody(req, max) {
+    const chunks = [];
+    let size = 0;
+    for await (const chunk of req) {
+        const buf = chunk;
+        size += buf.length;
+        if (size > max)
+            return { ok: false };
+        chunks.push(buf);
+    }
+    return { ok: true, raw: Buffer.concat(chunks) };
+}
+function defaultRunId() {
+    return `run-${randomBytes(6).toString('hex')}`;
+}
+function positiveInt(value) {
+    return typeof value === 'number' && Number.isInteger(value) && value > 0 ? value : undefined;
+}
+function asRecord(value) {
+    return typeof value === 'object' && value !== null
+        ? value
+        : undefined;
+}
+/** GitHub's `sender.login`, or `'unknown'` when the payload omits it. */
+function senderLogin(payload) {
+    const login = asRecord(payload.sender)?.login;
+    return typeof login === 'string' ? login : 'unknown';
+}
+function outcome(res, data) {
+    sendJson(res, 200, { ok: true, data });
+}
+function ignored(res, reason) {
+    outcome(res, { outcome: 'ignored', reason });
+}
+/** Repository id + installation-binding guard shared by every repo-scoped event. */
+async function boundConnection(ctx, payload) {
+    const repository = asRecord(payload.repository);
+    const repositoryId = positiveInt(repository?.id);
+    if (repositoryId === undefined) {
+        sendJson(ctx.res, 400, { error: 'malformed payload' });
+        return 'responded';
+    }
+    const connection = await ctx.deps.connectionStore.getRepoConnectionByRepository(repositoryId);
+    if (connection === undefined) {
+        ignored(ctx.res, 'no_connection');
+        return 'responded';
+    }
+    const installationId = positiveInt(asRecord(payload.installation)?.id);
+    if (installationId !== connection.installationId) {
+        // Signed traffic naming a bound repo under the WRONG installation is suspicious — audit it.
+        await ctx.deps.audit.emit({
+            eventType: 'github.webhook.installation_mismatch',
+            org: connection.orgSlug,
+            app: connection.appSlug,
+            decision: 'deny',
+            status: 200,
+            details: {
+                deliveryId: ctx.deliveryId,
+                expectedInstallationId: connection.installationId,
+                receivedInstallationId: installationId ?? 0,
+            },
+        });
+        ignored(ctx.res, 'installation_mismatch');
+        return 'responded';
+    }
+    return connection;
+}
+async function recordRun(ctx, connection, input) {
+    const result = await ctx.deps.runStore.createDeployRun({
+        ...input,
+        runId: (ctx.deps.newRunId ?? defaultRunId)(),
+        orgSlug: connection.orgSlug,
+        appSlug: connection.appSlug,
+        deliveryId: ctx.deliveryId,
+    });
+    if (!result.ok) {
+        outcome(ctx.res, { outcome: 'duplicate', reason: result.reason });
+        return;
+    }
+    await ctx.deps.audit.emit({
+        eventType: 'github.webhook.run_queued',
+        org: connection.orgSlug,
+        app: connection.appSlug,
+        decision: 'allow',
+        status: 200,
+        details: {
+            deliveryId: ctx.deliveryId,
+            runId: result.record.runId,
+            envName: result.record.envName,
+            commitSha: result.record.commitSha,
+            sourceEvent: result.record.sourceEvent,
+            supersededCount: result.superseded.length,
+            ...(result.record.blockedReason !== undefined
+                ? { blockedReason: result.record.blockedReason }
+                : {}),
+        },
+    });
+    outcome(ctx.res, {
+        outcome: 'run_queued',
+        runId: result.record.runId,
+        envName: result.record.envName,
+        superseded: result.superseded,
+    });
+}
+async function cancelRuns(ctx, connection, filter) {
+    const canceled = await ctx.deps.runStore.cancelQueuedDeployRuns({
+        orgSlug: connection.orgSlug,
+        appSlug: connection.appSlug,
+        ...filter,
+    });
+    if (canceled.length > 0) {
+        await ctx.deps.audit.emit({
+            eventType: 'github.webhook.runs_canceled',
+            org: connection.orgSlug,
+            app: connection.appSlug,
+            decision: 'allow',
+            status: 200,
+            details: {
+                deliveryId: ctx.deliveryId,
+                count: canceled.length,
+                ...(filter.envName !== undefined ? { envName: filter.envName } : {}),
+                ...(filter.ref !== undefined ? { ref: filter.ref } : {}),
+            },
+        });
+    }
+    outcome(ctx.res, { outcome: 'runs_canceled', canceled });
+}
+async function handlePush(ctx, payload) {
+    const connection = await boundConnection(ctx, payload);
+    if (connection === 'responded')
+        return;
+    const ref = typeof payload.ref === 'string' ? payload.ref : undefined;
+    if (ref === undefined)
+        return sendJson(ctx.res, 400, { error: 'malformed payload' });
+    if (payload.deleted === true)
+        return cancelRuns(ctx, connection, { ref });
+    const after = typeof payload.after === 'string' && payload.after.length > 0 ? payload.after : undefined;
+    if (after === undefined)
+        return sendJson(ctx.res, 400, { error: 'malformed payload' });
+    const actorLogin = senderLogin(payload);
+    if (ref !== `refs/heads/${connection.defaultBranch}`) {
+        // The pinned mapping: non-default-branch pushes with no PR produce NO run — an audit-level
+        // record only, so the runs feed stays signal.
+        await ctx.deps.audit.emit({
+            eventType: 'github.webhook.push_ignored',
+            org: connection.orgSlug,
+            app: connection.appSlug,
+            decision: 'allow',
+            status: 200,
+            details: { deliveryId: ctx.deliveryId, ref, commitSha: after },
+        });
+        return ignored(ctx.res, 'non_default_branch');
+    }
+    return recordRun(ctx, connection, {
+        envName: 'prod',
+        sourceEvent: 'push',
+        githubRepositoryId: connection.githubRepositoryId,
+        commitSha: after,
+        ref,
+        actorLogin,
+    });
+}
+async function handlePullRequest(ctx, payload) {
+    const connection = await boundConnection(ctx, payload);
+    if (connection === 'responded')
+        return;
+    const pr = asRecord(payload.pull_request);
+    const number = positiveInt(pr?.number);
+    const head = asRecord(pr?.head);
+    const headSha = typeof head?.sha === 'string' ? head.sha : undefined;
+    const headRef = typeof head?.ref === 'string' ? head.ref : undefined;
+    const action = typeof payload.action === 'string' ? payload.action : undefined;
+    if (number === undefined ||
+        headSha === undefined ||
+        headRef === undefined ||
+        action === undefined) {
+        return sendJson(ctx.res, 400, { error: 'malformed payload' });
+    }
+    const envName = `pr-${number}`;
+    if (action === 'closed')
+        return cancelRuns(ctx, connection, { envName });
+    if (action !== 'opened' && action !== 'synchronize' && action !== 'reopened') {
+        return ignored(ctx.res, 'unhandled_action');
+    }
+    const headRepoId = positiveInt(asRecord(head?.repo)?.id);
+    // ADR 0111 §8: fork PRs are recorded but inert — no secrets, no build until owner approval.
+    const isFork = headRepoId !== connection.githubRepositoryId;
+    const actorLogin = senderLogin(payload);
+    return recordRun(ctx, connection, {
+        envName,
+        sourceEvent: 'pull_request',
+        githubRepositoryId: connection.githubRepositoryId,
+        commitSha: headSha,
+        ref: `refs/heads/${headRef}`,
+        prNumber: number,
+        actorLogin,
+        ...(isFork ? { blockedReason: 'fork_pending_approval' } : {}),
+    });
+}
+async function disableConnections(ctx, connections, reason) {
+    let count = 0;
+    for (const connection of connections) {
+        const disabled = await ctx.deps.connectionStore.disableRepoConnection(connection.orgSlug, connection.appSlug);
+        if (!disabled)
+            continue;
+        count += 1;
+        await ctx.deps.audit.emit({
+            eventType: 'github.webhook.connection_disabled',
+            org: connection.orgSlug,
+            app: connection.appSlug,
+            decision: 'allow',
+            status: 200,
+            details: {
+                deliveryId: ctx.deliveryId,
+                githubRepositoryId: connection.githubRepositoryId,
+                reason,
+            },
+        });
+    }
+    if (count === 0)
+        return ignored(ctx.res, 'no_connection');
+    outcome(ctx.res, { outcome: 'connection_disabled', count });
+}
+async function handleRepository(ctx, payload) {
+    const connection = await boundConnection(ctx, payload);
+    if (connection === 'responded')
+        return;
+    const action = typeof payload.action === 'string' ? payload.action : undefined;
+    const repository = asRecord(payload.repository);
+    if (action === 'archived')
+        return disableConnections(ctx, [connection], 'repository_archived');
+    if (action === 'renamed' || action === 'transferred' || action === 'edited') {
+        const fullName = typeof repository?.full_name === 'string' ? repository.full_name : undefined;
+        const defaultBranch = typeof repository?.default_branch === 'string' ? repository.default_branch : undefined;
+        const refreshed = await ctx.deps.connectionStore.refreshRepoMetadata(connection.githubRepositoryId, {
+            ...(fullName !== undefined
+                ? { repoName: fullName, ownerLogin: fullName.split('/')[0] ?? connection.ownerLogin }
+                : {}),
+            ...(defaultBranch !== undefined ? { defaultBranch } : {}),
+        });
+        if (refreshed === undefined)
+            return ignored(ctx.res, 'no_connection');
+        await ctx.deps.audit.emit({
+            eventType: 'github.webhook.metadata_refreshed',
+            org: connection.orgSlug,
+            app: connection.appSlug,
+            decision: 'allow',
+            status: 200,
+            details: { deliveryId: ctx.deliveryId, githubRepositoryId: connection.githubRepositoryId },
+        });
+        return outcome(ctx.res, { outcome: 'metadata_refreshed' });
+    }
+    return ignored(ctx.res, 'unhandled_action');
+}
+async function handleInstallation(ctx, payload) {
+    const action = typeof payload.action === 'string' ? payload.action : undefined;
+    const installationId = positiveInt(asRecord(payload.installation)?.id);
+    if (installationId === undefined)
+        return sendJson(ctx.res, 400, { error: 'malformed payload' });
+    if (action !== 'deleted')
+        return ignored(ctx.res, 'unhandled_action');
+    const connections = await ctx.deps.connectionStore.listRepoConnectionsByInstallation(installationId);
+    return disableConnections(ctx, connections, 'installation_removed');
+}
+async function handleInstallationRepositories(ctx, payload) {
+    const action = typeof payload.action === 'string' ? payload.action : undefined;
+    if (action !== 'removed')
+        return ignored(ctx.res, 'unhandled_action');
+    const installationId = positiveInt(asRecord(payload.installation)?.id);
+    if (installationId === undefined)
+        return sendJson(ctx.res, 400, { error: 'malformed payload' });
+    const removed = Array.isArray(payload.repositories_removed) ? payload.repositories_removed : [];
+    const connections = [];
+    for (const item of removed) {
+        const id = positiveInt(asRecord(item)?.id);
+        if (id === undefined)
+            continue;
+        const connection = await ctx.deps.connectionStore.getRepoConnectionByRepository(id);
+        // Same repository+installation binding rule as every other event: a delivery for installation X
+        // must never disable a repo bound under installation Y.
+        if (connection !== undefined && connection.installationId === installationId) {
+            connections.push(connection);
+        }
+    }
+    return disableConnections(ctx, connections, 'repository_removed_from_installation');
+}
+export async function handleGithubWebhook(req, res, deps) {
+    // Fail closed when the feature is unconfigured: with no secret there is nothing to verify against.
+    if (deps.webhookSecret === undefined || deps.webhookSecret.length === 0) {
+        return sendJson(res, 403, { error: 'webhook not configured' });
+    }
+    const body = await readRawBody(req, deps.maxBody);
+    if (!body.ok)
+        return sendJson(res, 413, { error: 'request body too large' });
+    // Layer 1: the signature, over raw bytes, before ANY header/JSON interpretation.
+    const signature = req.headers[SIGNATURE_HEADER];
+    const signatureValue = Array.isArray(signature) ? signature[0] : signature;
+    if (!verifyWebhookSignature(body.raw, signatureValue, deps.webhookSecret)) {
+        return sendJson(res, 401, { error: 'invalid signature' });
+    }
+    // Layer 2: required delivery headers.
+    const eventHeader = req.headers['x-github-event'];
+    const deliveryHeader = req.headers['x-github-delivery'];
+    const eventName = Array.isArray(eventHeader) ? eventHeader[0] : eventHeader;
+    const deliveryId = Array.isArray(deliveryHeader) ? deliveryHeader[0] : deliveryHeader;
+    if (eventName === undefined || deliveryId === undefined || deliveryId.length === 0) {
+        return sendJson(res, 400, { error: 'missing event headers' });
+    }
+    // Layer 3: payload shape.
+    let payload;
+    try {
+        const parsed = JSON.parse(body.raw.toString('utf8'));
+        const record = asRecord(parsed);
+        if (record === undefined)
+            return sendJson(res, 400, { error: 'malformed payload' });
+        payload = record;
+    }
+    catch {
+        return sendJson(res, 400, { error: 'malformed payload' });
+    }
+    const ctx = { deliveryId, deps, res };
+    switch (eventName) {
+        case 'push':
+            return handlePush(ctx, payload);
+        case 'pull_request':
+            return handlePullRequest(ctx, payload);
+        case 'repository':
+            return handleRepository(ctx, payload);
+        case 'installation':
+            return handleInstallation(ctx, payload);
+        case 'installation_repositories':
+            return handleInstallationRepositories(ctx, payload);
+        default:
+            // The subscribed-event set can drift ahead of the handled set — unknown events are safely
+            // acknowledged so GitHub never retries them.
+            return ignored(res, 'unsupported_event');
+    }
+}
+//# sourceMappingURL=github-webhook.js.map

package/node_modules/@noodle-borg/service/dist/routes/github-webhook.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"github-webhook.js","sourceRoot":"","sources":["../../src/routes/github-webhook.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAEvE,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAiC3C,MAAM,gBAAgB,GAAG,qBAAqB,CAAC;AAE/C,iGAAiG;AACjG,MAAM,UAAU,sBAAsB,CACpC,OAAe,EACf,eAAmC,EACnC,MAAc;IAEd,IAAI,eAAe,KAAK,SAAS,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1F,MAAM,QAAQ,GAAG,eAAe,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACzD,+FAA+F;IAC/F,mEAAmE;IACnE,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,OAAO,KAAK,CAAC;IACpD,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC;IACvE,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IACjD,OAAO,WAAW,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,IAAI,eAAe,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;AAC1F,CAAC;AAED,KAAK,UAAU,WAAW,CACxB,GAAoB,EACpB,GAAW;IAEX,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,GAAG,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,KAAe,CAAC;QAC5B,IAAI,IAAI,GAAG,CAAC,MAAM,CAAC;QACnB,IAAI,IAAI,GAAG,GAAG;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;QACrC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACnB,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;AAClD,CAAC;AAED,SAAS,YAAY;IACnB,OAAO,OAAO,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;AACjD,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC/F,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAChD,CAAC,CAAE,KAAiC;QACpC,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,yEAAyE;AACzE,SAAS,WAAW,CAAC,OAAgC;IACnD,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC;IAC9C,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACvD,CAAC;AAQD,SAAS,OAAO,CAAC,GAAmB,EAAE,IAA6B;IACjE,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,OAAO,CAAC,GAAmB,EAAE,MAAc;IAClD,OAAO,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;AAC/C,CAAC;AAED,oFAAoF;AACpF,KAAK,UAAU,eAAe,CAC5B,GAAmB,EACnB,OAAgC;IAEhC,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAChD,MAAM,YAAY,GAAG,WAAW,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IACjD,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QAC/B,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;QACvD,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,MAAM,UAAU,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,6BAA6B,CAAC,YAAY,CAAC,CAAC;IAC9F,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;QAClC,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,MAAM,cAAc,GAAG,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC,CAAC;IACvE,IAAI,cAAc,KAAK,UAAU,CAAC,cAAc,EAAE,CAAC;QACjD,4FAA4F;QAC5F,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;YACxB,SAAS,EAAE,sCAAsC;YACjD,GAAG,EAAE,UAAU,CAAC,OAAO;YACvB,GAAG,EAAE,UAAU,CAAC,OAAO;YACvB,QAAQ,EAAE,MAAM;YAChB,MAAM,EAAE,GAAG;YACX,OAAO,EAAE;gBACP,UAAU,EAAE,GAAG,CAAC,UAAU;gBAC1B,sBAAsB,EAAE,UAAU,CAAC,cAAc;gBACjD,sBAAsB,EAAE,cAAc,IAAI,CAAC;aAC5C;SACF,CAAC,CAAC;QACH,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,uBAAuB,CAAC,CAAC;QAC1C,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,KAAK,UAAU,SAAS,CACtB,GAAmB,EACnB,UAAgC,EAChC,KAAiF;IAEjF,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC;QACrD,GAAG,KAAK;QACR,KAAK,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,IAAI,YAAY,CAAC,EAAE;QAC5C,OAAO,EAAE,UAAU,CAAC,OAAO;QAC3B,OAAO,EAAE,UAAU,CAAC,OAAO;QAC3B,UAAU,EAAE,GAAG,CAAC,UAAU;KAC3B,CAAC,CAAC;IACH,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QAClE,OAAO;IACT,CAAC;IACD,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;QACxB,SAAS,EAAE,2BAA2B;QACtC,GAAG,EAAE,UAAU,CAAC,OAAO;QACvB,GAAG,EAAE,UAAU,CAAC,OAAO;QACvB,QAAQ,EAAE,OAAO;QACjB,MAAM,EAAE,GAAG;QACX,OAAO,EAAE;YACP,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK;YAC1B,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO;YAC9B,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS;YAClC,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,WAAW;YACtC,eAAe,EAAE,MAAM,CAAC,UAAU,CAAC,MAAM;YACzC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,aAAa,KAAK,SAAS;gBAC3C,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,aAAa,EAAE;gBAChD,CAAC,CAAC,EAAE,CAAC;SACR;KACF,CAAC,CAAC;IACH,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE;QACf,OAAO,EAAE,YAAY;QACrB,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK;QAC1B,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO;QAC9B,UAAU,EAAE,MAAM,CAAC,UAAU;KAC9B,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,UAAU,CACvB,GAAmB,EACnB,UAAgC,EAChC,MAA0C;IAE1C,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,sBAAsB,CAAC;QAC9D,OAAO,EAAE,UAAU,CAAC,OAAO;QAC3B,OAAO,EAAE,UAAU,CAAC,OAAO;QAC3B,GAAG,MAAM;KACV,CAAC,CAAC;IACH,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;YACxB,SAAS,EAAE,8BAA8B;YACzC,GAAG,EAAE,UAAU,CAAC,OAAO;YACvB,GAAG,EAAE,UAAU,CAAC,OAAO;YACvB,QAAQ,EAAE,OAAO;YACjB,MAAM,EAAE,GAAG;YACX,OAAO,EAAE;gBACP,UAAU,EAAE,GAAG,CAAC,UAAU;gBAC1B,KAAK,EAAE,QAAQ,CAAC,MAAM;gBACtB,GAAG,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACpE,GAAG,CAAC,MAAM,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACzD;SACF,CAAC,CAAC;IACL,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAE,CAAC,CAAC;AAC3D,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,GAAmB,EAAE,OAAgC;IAC7E,MAAM,UAAU,GAAG,MAAM,eAAe,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACvD,IAAI,UAAU,KAAK,WAAW;QAAE,OAAO;IACvC,MAAM,GAAG,GAAG,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;IACtE,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;IACrF,IAAI,OAAO,CAAC,OAAO,KAAK,IAAI;QAAE,OAAO,UAAU,CAAC,GAAG,EAAE,UAAU,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IAE1E,MAAM,KAAK,GACT,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5F,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;IACvF,MAAM,UAAU,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IAExC,IAAI,GAAG,KAAK,cAAc,UAAU,CAAC,aAAa,EAAE,EAAE,CAAC;QACrD,2FAA2F;QAC3F,8CAA8C;QAC9C,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;YACxB,SAAS,EAAE,6BAA6B;YACxC,GAAG,EAAE,UAAU,CAAC,OAAO;YACvB,GAAG,EAAE,UAAU,CAAC,OAAO;YACvB,QAAQ,EAAE,OAAO;YACjB,MAAM,EAAE,GAAG;YACX,OAAO,EAAE,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE;SAC/D,CAAC,CAAC;QACH,OAAO,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,SAAS,CAAC,GAAG,EAAE,UAAU,EAAE;QAChC,OAAO,EAAE,MAAM;QACf,WAAW,EAAE,MAAM;QACnB,kBAAkB,EAAE,UAAU,CAAC,kBAAkB;QACjD,SAAS,EAAE,KAAK;QAChB,GAAG;QACH,UAAU;KACX,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,iBAAiB,CAC9B,GAAmB,EACnB,OAAgC;IAEhC,MAAM,UAAU,GAAG,MAAM,eAAe,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACvD,IAAI,UAAU,KAAK,WAAW;QAAE,OAAO;IACvC,MAAM,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,WAAW,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;IACvC,MAAM,IAAI,GAAG,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IAChC,MAAM,OAAO,GAAG,OAAO,IAAI,EAAE,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;IACrE,MAAM,OAAO,GAAG,OAAO,IAAI,EAAE,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;IACrE,MAAM,MAAM,GAAG,OAAO,OAAO,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/E,IACE,MAAM,KAAK,SAAS;QACpB,OAAO,KAAK,SAAS;QACrB,OAAO,KAAK,SAAS;QACrB,MAAM,KAAK,SAAS,EACpB,CAAC;QACD,OAAO,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;IAChE,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,MAAM,EAAE,CAAC;IAC/B,IAAI,MAAM,KAAK,QAAQ;QAAE,OAAO,UAAU,CAAC,GAAG,EAAE,UAAU,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;IACzE,IAAI,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,aAAa,IAAI,MAAM,KAAK,UAAU,EAAE,CAAC;QAC7E,OAAO,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC;IAC9C,CAAC;IACD,MAAM,UAAU,GAAG,WAAW,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;IACzD,4FAA4F;IAC5F,MAAM,MAAM,GAAG,UAAU,KAAK,UAAU,CAAC,kBAAkB,CAAC;IAC5D,MAAM,UAAU,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IACxC,OAAO,SAAS,CAAC,GAAG,EAAE,UAAU,EAAE;QAChC,OAAO;QACP,WAAW,EAAE,cAAc;QAC3B,kBAAkB,EAAE,UAAU,CAAC,kBAAkB;QACjD,SAAS,EAAE,OAAO;QAClB,GAAG,EAAE,cAAc,OAAO,EAAE;QAC5B,QAAQ,EAAE,MAAM;QAChB,UAAU;QACV,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,uBAAuB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9D,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,GAAmB,EACnB,WAA4C,EAC5C,MAAc;IAEd,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;QACrC,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,qBAAqB,CACnE,UAAU,CAAC,OAAO,EAClB,UAAU,CAAC,OAAO,CACnB,CAAC;QACF,IAAI,CAAC,QAAQ;YAAE,SAAS;QACxB,KAAK,IAAI,CAAC,CAAC;QACX,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;YACxB,SAAS,EAAE,oCAAoC;YAC/C,GAAG,EAAE,UAAU,CAAC,OAAO;YACvB,GAAG,EAAE,UAAU,CAAC,OAAO;YACvB,QAAQ,EAAE,OAAO;YACjB,MAAM,EAAE,GAAG;YACX,OAAO,EAAE;gBACP,UAAU,EAAE,GAAG,CAAC,UAAU;gBAC1B,kBAAkB,EAAE,UAAU,CAAC,kBAAkB;gBACjD,MAAM;aACP;SACF,CAAC,CAAC;IACL,CAAC;IACD,IAAI,KAAK,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;IAC1D,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,qBAAqB,EAAE,KAAK,EAAE,CAAC,CAAC;AAC9D,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC7B,GAAmB,EACnB,OAAgC;IAEhC,MAAM,UAAU,GAAG,MAAM,eAAe,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACvD,IAAI,UAAU,KAAK,WAAW;QAAE,OAAO;IACvC,MAAM,MAAM,GAAG,OAAO,OAAO,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/E,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAChD,IAAI,MAAM,KAAK,UAAU;QAAE,OAAO,kBAAkB,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,EAAE,qBAAqB,CAAC,CAAC;IAC/F,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,aAAa,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC5E,MAAM,QAAQ,GAAG,OAAO,UAAU,EAAE,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9F,MAAM,aAAa,GACjB,OAAO,UAAU,EAAE,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;QACzF,MAAM,SAAS,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,mBAAmB,CAClE,UAAU,CAAC,kBAAkB,EAC7B;YACE,GAAG,CAAC,QAAQ,KAAK,SAAS;gBACxB,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,UAAU,EAAE;gBACrF,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1D,CACF,CAAC;QACF,IAAI,SAAS,KAAK,SAAS;YAAE,OAAO,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;QACtE,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;YACxB,SAAS,EAAE,mCAAmC;YAC9C,GAAG,EAAE,UAAU,CAAC,OAAO;YACvB,GAAG,EAAE,UAAU,CAAC,OAAO;YACvB,QAAQ,EAAE,OAAO;YACjB,MAAM,EAAE,GAAG;YACX,OAAO,EAAE,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,kBAAkB,EAAE,UAAU,CAAC,kBAAkB,EAAE;SAC3F,CAAC,CAAC;QACH,OAAO,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,oBAAoB,EAAE,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC;AAC9C,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,GAAmB,EACnB,OAAgC;IAEhC,MAAM,MAAM,GAAG,OAAO,OAAO,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/E,MAAM,cAAc,GAAG,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC,CAAC;IACvE,IAAI,cAAc,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;IAChG,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC;IACtE,MAAM,WAAW,GACf,MAAM,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,iCAAiC,CAAC,cAAc,CAAC,CAAC;IACnF,OAAO,kBAAkB,CAAC,GAAG,EAAE,WAAW,EAAE,sBAAsB,CAAC,CAAC;AACtE,CAAC;AAED,KAAK,UAAU,8BAA8B,CAC3C,GAAmB,EACnB,OAAgC;IAEhC,MAAM,MAAM,GAAG,OAAO,OAAO,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/E,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC;IACtE,MAAM,cAAc,GAAG,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC,CAAC;IACvE,IAAI,cAAc,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;IAChG,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC,CAAC,EAAE,CAAC;IAChG,MAAM,WAAW,GAA2B,EAAE,CAAC;IAC/C,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC3B,MAAM,EAAE,GAAG,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;QAC3C,IAAI,EAAE,KAAK,SAAS;YAAE,SAAS;QAC/B,MAAM,UAAU,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,6BAA6B,CAAC,EAAE,CAAC,CAAC;QACpF,gGAAgG;QAChG,wDAAwD;QACxD,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,CAAC,cAAc,KAAK,cAAc,EAAE,CAAC;YAC7E,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;IACD,OAAO,kBAAkB,CAAC,GAAG,EAAE,WAAW,EAAE,sCAAsC,CAAC,CAAC;AACtF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,GAAoB,EACpB,GAAmB,EACnB,IAAuB;IAEvB,mGAAmG;IACnG,IAAI,IAAI,CAAC,aAAa,KAAK,SAAS,IAAI,IAAI,CAAC,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxE,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC,CAAC;IACjE,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAClD,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC,CAAC;IAE7E,iFAAiF;IACjF,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAChD,MAAM,cAAc,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3E,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,EAAE,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;QAC1E,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;IAC5D,CAAC;IAED,sCAAsC;IACtC,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAClD,MAAM,cAAc,GAAG,GAAG,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACxD,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC;IAC5E,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC;IACtF,IAAI,SAAS,KAAK,SAAS,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnF,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;IAChE,CAAC;IAED,0BAA0B;IAC1B,IAAI,OAAgC,CAAC;IACrC,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;QAChC,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;QACpF,OAAO,GAAG,MAAM,CAAC;IACnB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;IAC5D,CAAC;IAED,MAAM,GAAG,GAAmB,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;IACtD,QAAQ,SAAS,EAAE,CAAC;QAClB,KAAK,MAAM;YACT,OAAO,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAClC,KAAK,cAAc;YACjB,OAAO,iBAAiB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACzC,KAAK,YAAY;YACf,OAAO,gBAAgB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACxC,KAAK,cAAc;YACjB,OAAO,kBAAkB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAC1C,KAAK,2BAA2B;YAC9B,OAAO,8BAA8B,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACtD;YACE,0FAA0F;YAC1F,6CAA6C;YAC7C,OAAO,OAAO,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;IAC7C,CAAC;AACH,CAAC"}

package/node_modules/@noodle-borg/service/dist/routes/org-admin-dispatch.d.ts

@@ -0,0 +1,27 @@
+/**
+ * Dispatch for the org-admin control-plane routes: the orgs collection, the single-org item
+ * (PATCH rename / GET inspect), members, and invitations. Extracted verbatim from `service.ts`
+ * (which stays a thin composition root under the size gate), the same way as
+ * `analytics-dispatch.ts`/`github-dispatch.ts`. The path families here (`/v1/orgs`,
+ * `/v1/orgs/{org}`, `.../members`, `.../invitations`) are disjoint from the ADR 0128 resource
+ * reads (`apps`/`envs`/`deployments`), so this dispatcher's position next to them in the
+ * composition root is not behavior-bearing.
+ */
+import type { IncomingMessage, ServerResponse } from 'node:http';
+import type { TlsPosture } from '@noodle-borg/transport-http';
+import type { DeployAuthGate } from '../auth/deploy-gate.js';
+import type { AuditSink } from '../store/audit.js';
+import type { ControlPlaneStore } from '../store.js';
+export interface OrgAdminDispatchDeps {
+    readonly gate: DeployAuthGate;
+    readonly controlPlane: ControlPlaneStore;
+    readonly audit: AuditSink;
+    readonly maxBody: number;
+    readonly applySecurityHeaders: (res: ServerResponse, tls: TlsPosture) => void;
+    readonly enforceHttps: (req: IncomingMessage, res: ServerResponse, tls: TlsPosture) => boolean;
+    readonly sendJson: (res: ServerResponse, status: number, body: unknown) => void;
+    readonly tls: TlsPosture;
+}
+/** Try the org-admin routes; returns true when the request was handled (or a guard ended it). */
+export declare function dispatchOrgAdminRoutes(req: IncomingMessage, res: ServerResponse, url: URL, deps: OrgAdminDispatchDeps): boolean;
+//# sourceMappingURL=org-admin-dispatch.d.ts.map

package/node_modules/@noodle-borg/service/dist/routes/org-admin-dispatch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"org-admin-dispatch.d.ts","sourceRoot":"","sources":["../../src/routes/org-admin-dispatch.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AACjE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAUrD,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,iBAAiB,CAAC;IACzC,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,oBAAoB,EAAE,CAAC,GAAG,EAAE,cAAc,EAAE,GAAG,EAAE,UAAU,KAAK,IAAI,CAAC;IAC9E,QAAQ,CAAC,YAAY,EAAE,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,EAAE,GAAG,EAAE,UAAU,KAAK,OAAO,CAAC;IAC/F,QAAQ,CAAC,QAAQ,EAAE,CAAC,GAAG,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,KAAK,IAAI,CAAC;IAChF,QAAQ,CAAC,GAAG,EAAE,UAAU,CAAC;CAC1B;AAED,iGAAiG;AACjG,wBAAgB,sBAAsB,CACpC,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,GAAG,EAAE,GAAG,EACR,IAAI,EAAE,oBAAoB,GACzB,OAAO,CAkDT"}

package/node_modules/@noodle-borg/service/dist/routes/org-admin-dispatch.js

@@ -0,0 +1,61 @@
+import { handleInvitations, handleMembers, handleOrgInspect, handleOrgs, handleOrgUpdate, } from './org-admin.js';
+import { parseInvitationsPath, parseMembersPath, parseOrgPath } from './paths.js';
+/** Try the org-admin routes; returns true when the request was handled (or a guard ended it). */
+export function dispatchOrgAdminRoutes(req, res, url, deps) {
+    const { gate, controlPlane, audit, maxBody, applySecurityHeaders, enforceHttps, sendJson, tls } = deps;
+    if (url.pathname === '/v1/orgs' && (req.method === 'GET' || req.method === 'POST')) {
+        applySecurityHeaders(res, tls);
+        if (enforceHttps(req, res, tls))
+            return true;
+        handleOrgs(req, res, gate, controlPlane, maxBody).catch(() => {
+            if (!res.headersSent)
+                sendJson(res, 500, { error: 'internal error' });
+        });
+        return true;
+    }
+    const orgRef = parseOrgPath(url.pathname);
+    if (orgRef !== undefined && req.method === 'PATCH') {
+        applySecurityHeaders(res, tls);
+        if (enforceHttps(req, res, tls))
+            return true;
+        handleOrgUpdate(req, res, gate, controlPlane, maxBody, orgRef, audit).catch(() => {
+            if (!res.headersSent)
+                sendJson(res, 500, { error: 'internal error' });
+        });
+        return true;
+    }
+    if (orgRef !== undefined && req.method === 'GET') {
+        applySecurityHeaders(res, tls);
+        if (enforceHttps(req, res, tls))
+            return true;
+        handleOrgInspect(req, res, gate, controlPlane, orgRef).catch(() => {
+            if (!res.headersSent)
+                sendJson(res, 500, { error: 'internal error' });
+        });
+        return true;
+    }
+    const membersRef = parseMembersPath(url.pathname);
+    if (membersRef !== undefined) {
+        applySecurityHeaders(res, tls);
+        if (enforceHttps(req, res, tls))
+            return true;
+        handleMembers(req, res, gate, controlPlane, maxBody, membersRef, audit).catch(() => {
+            if (!res.headersSent)
+                sendJson(res, 500, { error: 'internal error' });
+        });
+        return true;
+    }
+    const invitationsRef = parseInvitationsPath(url.pathname);
+    if (invitationsRef !== undefined) {
+        applySecurityHeaders(res, tls);
+        if (enforceHttps(req, res, tls))
+            return true;
+        handleInvitations(req, res, gate, controlPlane, maxBody, invitationsRef, audit, url).catch(() => {
+            if (!res.headersSent)
+                sendJson(res, 500, { error: 'internal error' });
+        });
+        return true;
+    }
+    return false;
+}
+//# sourceMappingURL=org-admin-dispatch.js.map

package/node_modules/@noodle-borg/service/dist/routes/org-admin-dispatch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"org-admin-dispatch.js","sourceRoot":"","sources":["../../src/routes/org-admin-dispatch.ts"],"names":[],"mappings":"AAcA,OAAO,EACL,iBAAiB,EACjB,aAAa,EACb,gBAAgB,EAChB,UAAU,EACV,eAAe,GAChB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAalF,iGAAiG;AACjG,MAAM,UAAU,sBAAsB,CACpC,GAAoB,EACpB,GAAmB,EACnB,GAAQ,EACR,IAA0B;IAE1B,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,OAAO,EAAE,oBAAoB,EAAE,YAAY,EAAE,QAAQ,EAAE,GAAG,EAAE,GAC7F,IAAI,CAAC;IAEP,IAAI,GAAG,CAAC,QAAQ,KAAK,UAAU,IAAI,CAAC,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC,EAAE,CAAC;QACnF,oBAAoB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC/B,IAAI,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QAC7C,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;YAC3D,IAAI,CAAC,GAAG,CAAC,WAAW;gBAAE,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;QACxE,CAAC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC1C,IAAI,MAAM,KAAK,SAAS,IAAI,GAAG,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;QACnD,oBAAoB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC/B,IAAI,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QAC7C,eAAe,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;YAC/E,IAAI,CAAC,GAAG,CAAC,WAAW;gBAAE,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;QACxE,CAAC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,MAAM,KAAK,SAAS,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;QACjD,oBAAoB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC/B,IAAI,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QAC7C,gBAAgB,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;YAChE,IAAI,CAAC,GAAG,CAAC,WAAW;gBAAE,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;QACxE,CAAC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,UAAU,GAAG,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAClD,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,oBAAoB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC/B,IAAI,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QAC7C,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;YACjF,IAAI,CAAC,GAAG,CAAC,WAAW;gBAAE,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;QACxE,CAAC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,cAAc,GAAG,oBAAoB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC1D,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;QACjC,oBAAoB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC/B,IAAI,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QAC7C,iBAAiB,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,KAAK,CACxF,GAAG,EAAE;YACH,IAAI,CAAC,GAAG,CAAC,WAAW;gBAAE,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;QACxE,CAAC,CACF,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/node_modules/@noodle-borg/service/dist/routes/paths.d.ts

@@ -98,6 +98,18 @@ export declare function parseTenantAccessPath(pathname: string): TenantRef | und
 export declare function parseTenantLogsPath(pathname: string): TenantRef | undefined;
 export declare function parseTenantMetricsPath(pathname: string): TenantRef | undefined;
 export declare function parseTenantEventsPath(pathname: string): TenantRef | undefined;
+/** `GET|POST /v1/orgs/{org}/apps/{app}/envs/{env}/alerts` — the alert-rule collection (E2, ADR 0130). */
+export declare function parseTenantAlertsPath(pathname: string): TenantRef | undefined;
+/** `DELETE .../alerts/{id}` — one alert rule. Non-UUID ids never match (they cannot exist). */
+export declare function parseTenantAlertItemPath(pathname: string): {
+    readonly ref: TenantRef;
+    readonly id: string;
+} | undefined;
+/** `POST .../alerts/{id}/test` — synthetic test-fire through the rule's webhook (E2, ADR 0130). */
+export declare function parseTenantAlertTestPath(pathname: string): {
+    readonly ref: TenantRef;
+    readonly id: string;
+} | undefined;
 /** `GET /v1/orgs/{org}/apps/{app}/envs/{env}/sessions/{id}` — the analytics session view (ADR 0121). */
 export declare function parseTenantSessionPath(pathname: string): {
     readonly ref: TenantRef;
@@ -108,13 +120,20 @@ export declare function parseGithubConnectionPath(pathname: string): {
     org: string;
     app: string;
 } | undefined;
+/** Parse `/v1/orgs/{org}/apps/{app}/github/runs` (GHD-2, the deploy-runs read surface). */
+export declare function parseGithubRunsPath(pathname: string): {
+    org: string;
+    app: string;
+} | undefined;
 /** Match the fixed path `/v1/github/install-url` (GHD-1). */
 export declare function isGithubInstallUrlPath(pathname: string): boolean;
 /** Match the fixed path `/v1/github/installations/claim` (GHD-1). */
 export declare function isGithubInstallationClaimPath(pathname: string): boolean;
+/** Match the fixed path `/v1/github/webhook` (GHD-2, the GitHub App's webhook receiver). */
+export declare function isGithubWebhookPath(pathname: string): boolean;
 /** Match the fixed path `/v1/github/setup` (GHD-1.4, the GitHub App's configured Setup URL). */
 export declare function isGithubSetupPath(pathname: string): boolean;
 /** Match the fixed path `/v1/github/installations/pending` (GHD-1.4, the CLI's install poll target). */
 export declare function isGithubInstallationPendingPath(pathname: string): boolean;
-export declare function parseTenantActionPath(pathname: string, action: 'status' | 'access' | 'rollback' | 'inspect' | 'smoke' | 'logs' | 'metrics' | 'events'): TenantRef | undefined;
+export declare function parseTenantActionPath(pathname: string, action: 'status' | 'access' | 'rollback' | 'inspect' | 'smoke' | 'logs' | 'metrics' | 'events' | 'alerts'): TenantRef | undefined;
 //# sourceMappingURL=paths.d.ts.map

package/node_modules/@noodle-borg/service/dist/routes/paths.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"paths.d.ts","sourceRoot":"","sources":["../../src/routes/paths.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,WAAW,EAEhB,KAAK,iBAAiB,EACtB,KAAK,SAAS,EAKf,MAAM,aAAa,CAAC;AAErB,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,CAY7E;AAED,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,CAE/E;AAED,wBAAgB,6BAA6B,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,CAcrF;AAED,0FAA0F;AAC1F,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAQ1E;AAED,iGAAiG;AACjG,wBAAgB,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAQ3E;AAED,0FAA0F;AAC1F,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAW3F;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAWxF;AAED,qGAAqG;AACrG,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,CAYxE;AAED,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAmBhG;AAED,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,MAAM,GACf;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,QAAQ,CAAA;CAAE,GAAG,SAAS,CAoBhE;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;IACjC,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;IAC5B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS,CAsC5E;AAED,wBAAgB,cAAc,CAC5B,IAAI,EAAE,iBAAiB,EACvB,KAAK,EAAE,WAAW,EAClB,WAAW,EAAE,MAAM,GAAG,SAAS,GAC9B,cAAc,GAAG,SAAS,CAc5B;AAED,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,MAAM,GAAG;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAQlF;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CACrC,QAAQ,EAAE,MAAM,GACf;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAWnD;AAED,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,MAAM,GAAG;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAQlF;AAED,wBAAgB,aAAa,CAC3B,QAAQ,EAAE,MAAM,GACf;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,GAAG,SAAS,CAWzD;AAED,MAAM,MAAM,cAAc,GACtB;IACE,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC;IACxB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,YAAY,GAAG,WAAW,GAAG,UAAU,GAAG,OAAO,CAAC;IACnE,QAAQ,CAAC,EAAE,CAAC,EAAE,SAAS,CAAC;CACzB,GACD;IACE,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC;IACxB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;CACrB,GACD;IACE,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,YAAY,GAAG,WAAW,GAAG,UAAU,GAAG,OAAO,CAAC;IACnE,QAAQ,CAAC,EAAE,CAAC,EAAE,SAAS,CAAC;CACzB,GACD;IAAE,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CAAE,CAAC;AAE/F,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS,CAa5E;AAiCD,+FAA+F;AAC/F,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAED,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS,CAE7E;AAED,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS,CAE7E;AAkBD,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,CAE7E;AAED,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,CAE9E;AAED,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,CAE5E;AAED,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,CAE7E;AAED,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,CAE3E;AAED,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,CAE9E;AAED,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,CAE7E;AAED,wGAAwG;AACxG,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,MAAM,GACf;IAAE,QAAQ,CAAC,GAAG,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAiBrE;AAED,0GAA0G;AAC1G,wBAAgB,yBAAyB,CACvC,QAAQ,EAAE,MAAM,GACf;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAW1C;AAED,6DAA6D;AAC7D,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAEhE;AAED,qEAAqE;AACrE,wBAAgB,6BAA6B,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAEvE;AAED,gGAAgG;AAChG,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAE3D;AAED,wGAAwG;AACxG,wBAAgB,+BAA+B,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAEzE;AAED,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,QAAQ,GAAG,QAAQ,GAAG,UAAU,GAAG,SAAS,GAAG,OAAO,GAAG,MAAM,GAAG,SAAS,GAAG,QAAQ,GAC7F,SAAS,GAAG,SAAS,CAYvB"}
+{"version":3,"file":"paths.d.ts","sourceRoot":"","sources":["../../src/routes/paths.ts"],"names":[],"mappings":"AACA,OAAO,EACL,KAAK,WAAW,EAEhB,KAAK,iBAAiB,EACtB,KAAK,SAAS,EAKf,MAAM,aAAa,CAAC;AAErB,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,CAY7E;AAED,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,CAE/E;AAED,wBAAgB,6BAA6B,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,CAcrF;AAED,0FAA0F;AAC1F,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAQ1E;AAED,iGAAiG;AACjG,wBAAgB,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAQ3E;AAED,0FAA0F;AAC1F,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAW3F;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAWxF;AAED,qGAAqG;AACrG,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,CAYxE;AAED,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAmBhG;AAED,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,MAAM,GACf;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,QAAQ,CAAA;CAAE,GAAG,SAAS,CAoBhE;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;IACjC,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;IAC5B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS,CAsC5E;AAED,wBAAgB,cAAc,CAC5B,IAAI,EAAE,iBAAiB,EACvB,KAAK,EAAE,WAAW,EAClB,WAAW,EAAE,MAAM,GAAG,SAAS,GAC9B,cAAc,GAAG,SAAS,CAc5B;AAED,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,MAAM,GAAG;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAQlF;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CACrC,QAAQ,EAAE,MAAM,GACf;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAWnD;AAED,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,MAAM,GAAG;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAQlF;AAED,wBAAgB,aAAa,CAC3B,QAAQ,EAAE,MAAM,GACf;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,GAAG,SAAS,CAWzD;AAED,MAAM,MAAM,cAAc,GACtB;IACE,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC;IACxB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,YAAY,GAAG,WAAW,GAAG,UAAU,GAAG,OAAO,CAAC;IACnE,QAAQ,CAAC,EAAE,CAAC,EAAE,SAAS,CAAC;CACzB,GACD;IACE,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC;IACxB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;CACrB,GACD;IACE,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,YAAY,GAAG,WAAW,GAAG,UAAU,GAAG,OAAO,CAAC;IACnE,QAAQ,CAAC,EAAE,CAAC,EAAE,SAAS,CAAC;CACzB,GACD;IAAE,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CAAE,CAAC;AAE/F,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS,CAa5E;AAiCD,+FAA+F;AAC/F,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAED,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS,CAE7E;AAED,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS,CAE7E;AAkBD,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,CAE7E;AAED,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,CAE9E;AAED,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,CAE5E;AAED,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,CAE7E;AAED,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,CAE3E;AAED,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,CAE9E;AAED,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,CAE7E;AAED,yGAAyG;AACzG,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,CAE7E;AAED,+FAA+F;AAC/F,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,MAAM,GACf;IAAE,QAAQ,CAAC,GAAG,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAK9D;AAED,mGAAmG;AACnG,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,MAAM,GACf;IAAE,QAAQ,CAAC,GAAG,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAK9D;AAuBD,wGAAwG;AACxG,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,MAAM,GACf;IAAE,QAAQ,CAAC,GAAG,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAiBrE;AAED,0GAA0G;AAC1G,wBAAgB,yBAAyB,CACvC,QAAQ,EAAE,MAAM,GACf;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAW1C;AAED,2FAA2F;AAC3F,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAW9F;AAED,6DAA6D;AAC7D,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAEhE;AAED,qEAAqE;AACrE,wBAAgB,6BAA6B,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAEvE;AAED,4FAA4F;AAC5F,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAE7D;AAED,gGAAgG;AAChG,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAE3D;AAED,wGAAwG;AACxG,wBAAgB,+BAA+B,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAEzE;AAED,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,MAAM,EAChB,MAAM,EACF,QAAQ,GACR,QAAQ,GACR,UAAU,GACV,SAAS,GACT,OAAO,GACP,MAAM,GACN,SAAS,GACT,QAAQ,GACR,QAAQ,GACX,SAAS,GAAG,SAAS,CAYvB"}

package/node_modules/@noodle-borg/service/dist/routes/paths.js

@@ -1,3 +1,4 @@
+import { isAlertRuleId } from '../store/alert-rules.js';
 import { DEPLOYMENT_ID_PATTERN, validateConfigName, validateConfigScope, validateSlug, validateTenantRef, } from '../store.js';
 export function parseTenantDeployPath(pathname) {
     const match = /^\/v1\/orgs\/([^/]+)\/apps\/([^/]+)\/envs\/([^/]+)\/deploy$/.exec(pathname);
@@ -333,6 +334,40 @@ export function parseTenantMetricsPath(pathname) {
 export function parseTenantEventsPath(pathname) {
     return parseTenantActionPath(pathname, 'events');
 }
+/** `GET|POST /v1/orgs/{org}/apps/{app}/envs/{env}/alerts` — the alert-rule collection (E2, ADR 0130). */
+export function parseTenantAlertsPath(pathname) {
+    return parseTenantActionPath(pathname, 'alerts');
+}
+/** `DELETE .../alerts/{id}` — one alert rule. Non-UUID ids never match (they cannot exist). */
+export function parseTenantAlertItemPath(pathname) {
+    const match = /^\/v1\/orgs\/([^/]+)\/apps\/([^/]+)\/envs\/([^/]+)\/alerts\/([^/]+)$/.exec(pathname);
+    return match ? tenantAlertRef(match) : undefined;
+}
+/** `POST .../alerts/{id}/test` — synthetic test-fire through the rule's webhook (E2, ADR 0130). */
+export function parseTenantAlertTestPath(pathname) {
+    const match = /^\/v1\/orgs\/([^/]+)\/apps\/([^/]+)\/envs\/([^/]+)\/alerts\/([^/]+)\/test$/.exec(pathname);
+    return match ? tenantAlertRef(match) : undefined;
+}
+function tenantAlertRef(match) {
+    // Everything decodes inside the try: a malformed escape (`%zz`) throws URIError and must read
+    // as "no match", never an uncaught synchronous throw out of the dispatcher.
+    try {
+        const id = decodeURIComponent(match[4]);
+        if (!isAlertRuleId(id))
+            return undefined;
+        return {
+            ref: validateTenantRef({
+                org: decodeURIComponent(match[1]),
+                app: decodeURIComponent(match[2]),
+                env: decodeURIComponent(match[3]),
+            }),
+            id,
+        };
+    }
+    catch {
+        return undefined;
+    }
+}
 /** `GET /v1/orgs/{org}/apps/{app}/envs/{env}/sessions/{id}` — the analytics session view (ADR 0121). */
 export function parseTenantSessionPath(pathname) {
     const match = /^\/v1\/orgs\/([^/]+)\/apps\/([^/]+)\/envs\/([^/]+)\/sessions\/([^/]+)$/.exec(pathname);
@@ -367,6 +402,21 @@ export function parseGithubConnectionPath(pathname) {
         return undefined;
     }
 }
+/** Parse `/v1/orgs/{org}/apps/{app}/github/runs` (GHD-2, the deploy-runs read surface). */
+export function parseGithubRunsPath(pathname) {
+    const match = /^\/v1\/orgs\/([^/]+)\/apps\/([^/]+)\/github\/runs$/.exec(pathname);
+    if (!match)
+        return undefined;
+    try {
+        return {
+            org: validateSlug('org', decodeURIComponent(match[1])),
+            app: validateSlug('app', decodeURIComponent(match[2])),
+        };
+    }
+    catch {
+        return undefined;
+    }
+}
 /** Match the fixed path `/v1/github/install-url` (GHD-1). */
 export function isGithubInstallUrlPath(pathname) {
     return pathname === '/v1/github/install-url';
@@ -375,6 +425,10 @@ export function isGithubInstallUrlPath(pathname) {
 export function isGithubInstallationClaimPath(pathname) {
     return pathname === '/v1/github/installations/claim';
 }
+/** Match the fixed path `/v1/github/webhook` (GHD-2, the GitHub App's webhook receiver). */
+export function isGithubWebhookPath(pathname) {
+    return pathname === '/v1/github/webhook';
+}
 /** Match the fixed path `/v1/github/setup` (GHD-1.4, the GitHub App's configured Setup URL). */
 export function isGithubSetupPath(pathname) {
     return pathname === '/v1/github/setup';