@oobe-protocol-labs/sap-mcp-server 0.9.2 → 0.9.3

package/dist/premium/webhook-engine.d.ts

@@ -0,0 +1,138 @@
+/**
+ * @name premium/webhook-engine
+ * @description Signed webhook delivery engine for premium event callbacks.
+ *
+ * After a session is activated, the webhook engine registers a buyer-owned
+ * HTTPS endpoint, subscribes to the provider for matching events, signs each
+ * delivery with HMAC-SHA256, and dispatches it via HTTP POST.
+ *
+ * The engine enforces:
+ *   - Event filtering: only delivers event ids listed in the subscription.
+ *   - URL validation: rejects localhost, private networks, and non-HTTPS URLs.
+ *   - Signing: HMAC-SHA256 over `{deliveryId, deliveredAt, payload}` using
+ *     the `SAP_MCP_PREMIUM_WEBHOOK_SIGNER` env var.
+ *   - Retry: up to 3 attempts with exponential backoff for non-2xx responses.
+ *   - Unit quota: decrements after each successful delivery.
+ *   - Idempotency: deduplicates via `eventId` in the event store.
+ *
+ * @flow
+ *   1. Buyer calls `POST /premium/webhook/register` with targetUrl + events.
+ *   2. → `registerWebhook()` validates URL, creates subscription.
+ *   3. Engine subscribes to provider, receives events matching the subscription.
+ *   4. For each matching event: sign, POST to targetUrl, record delivery.
+ *   5. Buyer can check delivery status via `getWebhookDeliveryStatus()`.
+ *
+ * @module premium/webhook-engine
+ */
+import type { PremiumWebhookDelivery, PremiumWebhookSubscription } from './types.js';
+/**
+ * @name registerWebhook
+ * @description Register a webhook subscription for an active premium session.
+ *
+ * @param sessionId       - The activated premium session id.
+ * @param targetUrl       - HTTPS endpoint owned by the buyer.
+ * @param events          - Exact event ids to deliver.
+ * @param signingPublicKey - Optional buyer public key for signature verification.
+ * @returns The `PremiumWebhookSubscription`, or `null` if the session is not
+ *   active or the URL is invalid.
+ *
+ * @usedBy `premium-tools.ts` → MCP tool `sap_premium_webhook_register`,
+ *   `remote/server.ts` → `POST /premium/webhook/register`
+ */
+export declare function registerWebhook(sessionId: string, targetUrl: string, events: string[], signingPublicKey?: string): Promise<PremiumWebhookSubscription | null>;
+/**
+ * @name RELAY_TARGET_URL_EXPORT
+ * @description Exported relay sentinel so premium-tools and tests can reference it
+ *   without duplicating the literal.
+ */
+export declare const PREMIUM_WEBHOOK_RELAY_TARGET_URL = "relay://buffer";
+/**
+ * @name registerWebhookRelay
+ * @description Register a buffer-only (relay) webhook subscription for an active
+ *   premium session.
+ *
+ * Unlike `registerWebhook`, this does not require a public HTTPS endpoint.
+ * Events matching the subscription are appended to the event store by the
+ * delivery loop and the agent consumes them via `sap_premium_stream_poll` or
+ * `sap_premium_stream_flush`. This solves the core problem for agents running
+ * locally without a publicly reachable HTTPS callback URL.
+ *
+ * @param sessionId - The activated premium session id.
+ * @param events    - Exact event ids to buffer.
+ * @returns The `PremiumWebhookSubscription`, or `null` if the session is not
+ *   active or no events were provided.
+ *
+ * @usedBy `premium-tools.ts` → MCP tool `sap_premium_webhook_relay`
+ */
+export declare function registerWebhookRelay(sessionId: string, events: string[]): Promise<PremiumWebhookSubscription | null>;
+/**
+ * @name getRelaySubscriptionsForSession
+ * @description Return all active relay (buffer-only) webhook subscriptions for a
+ *   session id. Used by the relay status tool to report buffered event counts.
+ *
+ * @param sessionId - The premium session id.
+ * @returns Array of relay subscriptions for the session.
+ *
+ * @usedBy `premium-tools.ts` → MCP tool `sap_premium_webhook_relay_status`
+ */
+export declare function getRelaySubscriptionsForSession(sessionId: string): PremiumWebhookSubscription[];
+/**
+ * @name startWebhookDelivery
+ * @description Start the webhook delivery loop for a subscription.
+ *
+ * Subscribes to the provider, receives events, filters by the subscription's
+ * event list, signs and delivers each matching event, and decrements the
+ * session quota. Stops when the quota reaches zero or the subscription is
+ * deactivated.
+ *
+ * @param subscription - The webhook subscription to deliver for.
+ *
+ * @usedBy `remote/server.ts` → webhook delivery worker
+ */
+export declare function startWebhookDelivery(subscription: PremiumWebhookSubscription): Promise<void>;
+/**
+ * @name unregisterWebhook
+ * @description Deactivate and remove a webhook subscription.
+ *
+ * @param subscriptionId - The webhook subscription id.
+ * @returns True if the subscription was found and removed.
+ *
+ * @usedBy `premium-tools.ts` → MCP tool `sap_premium_webhook_unregister`
+ */
+export declare function unregisterWebhook(subscriptionId: string): boolean;
+/**
+ * @name getWebhookSubscription
+ * @description Retrieve a webhook subscription by id.
+ *
+ * @param subscriptionId - The webhook subscription id.
+ * @returns The subscription, or `null` if not found.
+ *
+ * @usedBy `premium-tools.ts` → MCP tool `sap_premium_webhook_status`
+ */
+export declare function getWebhookSubscription(subscriptionId: string): PremiumWebhookSubscription | null;
+/**
+ * @name getWebhookDeliveries
+ * @description Retrieve delivery records for a subscription.
+ *
+ * @param subscriptionId - The webhook subscription id.
+ * @param limit          - Maximum records to return (default 50).
+ * @returns Array of `PremiumWebhookDelivery` records.
+ *
+ * @usedBy `premium-tools.ts` → MCP tool `sap_premium_webhook_status`
+ */
+export declare function getWebhookDeliveries(subscriptionId: string, limit?: number): PremiumWebhookDelivery[];
+/**
+ * @name getActiveWebhookCount
+ * @description Return the number of currently active webhook subscriptions.
+ *
+ * @usedBy `metrics.ts`
+ */
+export declare function getActiveWebhookCount(): number;
+/**
+ * @name stopAllWebhooks
+ * @description Deactivate all webhook subscriptions. Called during graceful shutdown.
+ *
+ * @usedBy `remote/server.ts` shutdown handler
+ */
+export declare function stopAllWebhooks(): void;
+//# sourceMappingURL=webhook-engine.d.ts.map

package/dist/premium/webhook-engine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook-engine.d.ts","sourceRoot":"","sources":["../../src/premium/webhook-engine.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAMH,OAAO,KAAK,EAAE,sBAAsB,EAAE,0BAA0B,EAAiB,MAAM,YAAY,CAAC;AAwPpG;;;;;;;;;;;;;GAaG;AACH,wBAAsB,eAAe,CACnC,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EAAE,EAChB,gBAAgB,CAAC,EAAE,MAAM,GACxB,OAAO,CAAC,0BAA0B,GAAG,IAAI,CAAC,CAwB5C;AAED;;;;GAIG;AACH,eAAO,MAAM,gCAAgC,mBAAmB,CAAC;AAEjE;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAsB,oBAAoB,CACxC,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EAAE,GACf,OAAO,CAAC,0BAA0B,GAAG,IAAI,CAAC,CAuB5C;AAED;;;;;;;;;GASG;AACH,wBAAgB,+BAA+B,CAAC,SAAS,EAAE,MAAM,GAAG,0BAA0B,EAAE,CAQ/F;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,oBAAoB,CAAC,YAAY,EAAE,0BAA0B,GAAG,OAAO,CAAC,IAAI,CAAC,CA6ElG;AAED;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAMjE;AAED;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CAAC,cAAc,EAAE,MAAM,GAAG,0BAA0B,GAAG,IAAI,CAGhG;AAED;;;;;;;;;GASG;AACH,wBAAgB,oBAAoB,CAAC,cAAc,EAAE,MAAM,EAAE,KAAK,SAAK,GAAG,sBAAsB,EAAE,CASjG;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,IAAI,MAAM,CAM9C;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,IAAI,IAAI,CAKtC"}

package/dist/premium/webhook-engine.js

@@ -0,0 +1,516 @@
+/**
+ * @name premium/webhook-engine
+ * @description Signed webhook delivery engine for premium event callbacks.
+ *
+ * After a session is activated, the webhook engine registers a buyer-owned
+ * HTTPS endpoint, subscribes to the provider for matching events, signs each
+ * delivery with HMAC-SHA256, and dispatches it via HTTP POST.
+ *
+ * The engine enforces:
+ *   - Event filtering: only delivers event ids listed in the subscription.
+ *   - URL validation: rejects localhost, private networks, and non-HTTPS URLs.
+ *   - Signing: HMAC-SHA256 over `{deliveryId, deliveredAt, payload}` using
+ *     the `SAP_MCP_PREMIUM_WEBHOOK_SIGNER` env var.
+ *   - Retry: up to 3 attempts with exponential backoff for non-2xx responses.
+ *   - Unit quota: decrements after each successful delivery.
+ *   - Idempotency: deduplicates via `eventId` in the event store.
+ *
+ * @flow
+ *   1. Buyer calls `POST /premium/webhook/register` with targetUrl + events.
+ *   2. → `registerWebhook()` validates URL, creates subscription.
+ *   3. Engine subscribes to provider, receives events matching the subscription.
+ *   4. For each matching event: sign, POST to targetUrl, record delivery.
+ *   5. Buyer can check delivery status via `getWebhookDeliveryStatus()`.
+ *
+ * @module premium/webhook-engine
+ */
+import { createHmac, randomUUID } from 'node:crypto';
+import { request } from 'node:https';
+import { request as httpRequest } from 'node:http';
+import { URL } from 'node:url';
+import { getPremiumSession, decrementSessionQuota, closeSession } from './session-manager.js';
+import { subscribeToProvider } from './provider-bridge.js';
+import { appendEvent } from './event-store.js';
+/**
+ * @description Registry of active webhook subscriptions keyed by subscription id.
+ */
+const webhookSubscriptions = new Map();
+/**
+ * @description Delivery attempt records keyed by delivery id.
+ */
+const deliveryRecords = new Map();
+/**
+ * @description Hard cap on stored delivery records.
+ *
+ * Default: 100_000 (tuned for a 312GB RAM production server).
+ * Each record is ~512B, so 100K records ≈ 50MB.
+ * Override via `SAP_MCP_PREMIUM_MAX_DELIVERIES` env var.
+ */
+const MAX_DELIVERY_RECORDS = (() => {
+    const raw = process.env.SAP_MCP_PREMIUM_MAX_DELIVERIES;
+    const parsed = Number(raw);
+    return Number.isFinite(parsed) && parsed > 0 ? Math.trunc(parsed) : 100_000;
+})();
+/**
+ * @description Maximum retry attempts per delivery.
+ */
+const MAX_RETRIES = 3;
+/**
+ * @description Base delay for exponential backoff in milliseconds.
+ */
+const RETRY_BASE_DELAY_MS = 500;
+/**
+ * @name RELAY_TARGET_URL
+ * @description Sentinel target URL for buffer-only (relay) webhook subscriptions.
+ *
+ * When a subscription's `targetUrl` equals this value, the webhook engine skips
+ * HTTP POST delivery entirely. Events are still appended to the event store via
+ * `appendEvent()`, and the agent consumes them through
+ * `sap_premium_stream_poll` / `sap_premium_stream_flush`. This eliminates the
+ * need for a public HTTPS endpoint — agents running locally can receive webhook
+ * events by polling the server-side buffer.
+ *
+ * @internal
+ */
+const RELAY_TARGET_URL = 'relay://buffer';
+/**
+ * @name isRelayTarget
+ * @description Returns true when a target URL is the buffer-only relay sentinel.
+ *
+ * @param targetUrl - The target URL to check.
+ * @returns True if the URL is the relay buffer sentinel.
+ *
+ * @internal
+ */
+function isRelayTarget(targetUrl) {
+    return targetUrl === RELAY_TARGET_URL;
+}
+/**
+ * @name validateWebhookUrl
+ * @description Validate that a webhook target URL is safe for delivery.
+ *
+ * Accepts the relay sentinel `relay://buffer` as a buffer-only delivery mode
+ * that never makes an outbound HTTP call.
+ *
+ * Rejects:
+ *   - Non-HTTPS URLs in production (allow HTTP for localhost testing).
+ *   - localhost, 127.0.0.1, 0.0.0.0, private network ranges (10.x, 172.16-31.x, 192.168.x).
+ *
+ * @param targetUrl - The URL to validate.
+ * @returns True if the URL is safe for webhook delivery.
+ *
+ * @internal
+ */
+function validateWebhookUrl(targetUrl) {
+    // The relay sentinel is always valid — it never makes an outbound HTTP call.
+    if (isRelayTarget(targetUrl))
+        return true;
+    let parsed;
+    try {
+        parsed = new URL(targetUrl);
+    }
+    catch {
+        return false;
+    }
+    // Must be HTTPS in production. Allow HTTP only for localhost testing.
+    const isLocalhost = parsed.hostname === 'localhost' || parsed.hostname === '127.0.0.1';
+    if (parsed.protocol !== 'https:' && !isLocalhost)
+        return false;
+    // Block private network ranges (SSRF prevention).
+    const host = parsed.hostname;
+    if (host.startsWith('10.') ||
+        host.startsWith('172.16.') || host.startsWith('172.17.') || host.startsWith('172.18.') ||
+        host.startsWith('172.19.') || host.startsWith('172.20.') || host.startsWith('172.21.') ||
+        host.startsWith('172.22.') || host.startsWith('172.23.') || host.startsWith('172.24.') ||
+        host.startsWith('172.25.') || host.startsWith('172.26.') || host.startsWith('172.27.') ||
+        host.startsWith('172.28.') || host.startsWith('172.29.') || host.startsWith('172.30.') ||
+        host.startsWith('172.31.') ||
+        host.startsWith('192.168.') ||
+        host === '0.0.0.0' ||
+        host === '::1' ||
+        host.startsWith('fe80:')) {
+        return false;
+    }
+    return true;
+}
+/**
+ * @name signDelivery
+ * @description Sign a webhook delivery payload with HMAC-SHA256.
+ *
+ * The signature is computed over the string `${deliveryId}.${deliveredAt}.${JSON.stringify(payload)}`
+ * using the `SAP_MCP_PREMIUM_WEBHOOK_SIGNER` env var as the key.
+ *
+ * @param deliveryId   - The unique delivery id.
+ * @param deliveredAt  - ISO timestamp of the delivery.
+ * @param payload      - The event payload to sign.
+ * @returns Hex-encoded HMAC-SHA256 signature.
+ *
+ * @internal
+ */
+function signDelivery(deliveryId, deliveredAt, payload) {
+    const key = process.env.SAP_MCP_PREMIUM_WEBHOOK_SIGNER;
+    if (!key) {
+        throw new Error('SAP_MCP_PREMIUM_WEBHOOK_SIGNER is not set — webhook delivery requires a configured signing key');
+    }
+    const message = `${deliveryId}.${deliveredAt}.${JSON.stringify(payload)}`;
+    return createHmac('sha256', key).update(message).digest('hex');
+}
+/**
+ * @name deliverWebhook
+ * @description Deliver a single event to a webhook target URL with retries.
+ *
+ * @param subscription - The webhook subscription.
+ * @param event        - The provider event to deliver.
+ * @returns The `PremiumWebhookDelivery` record for this attempt.
+ *
+ * @internal
+ */
+async function deliverWebhook(subscription, event) {
+    const deliveryId = `wh-delivery-${randomUUID()}`;
+    const deliveredAt = new Date().toISOString();
+    const signature = signDelivery(deliveryId, deliveredAt, event.payload);
+    const body = JSON.stringify({
+        deliveryId,
+        eventType: event.eventType,
+        deliveredAt,
+        signature,
+        payload: event.payload,
+    });
+    let httpStatus = null;
+    let success = false;
+    let responseBody;
+    let retryCount = 0;
+    const parsedUrl = new URL(subscription.targetUrl);
+    const isHttps = parsedUrl.protocol === 'https:';
+    const reqFn = isHttps ? request : httpRequest;
+    for (let attempt = 0; attempt <= MAX_RETRIES; attempt++) {
+        retryCount = attempt;
+        try {
+            const response = await new Promise((resolve, reject) => {
+                const req = reqFn({
+                    hostname: parsedUrl.hostname,
+                    port: parsedUrl.port || (isHttps ? 443 : 80),
+                    path: `${parsedUrl.pathname}${parsedUrl.search}`,
+                    method: 'POST',
+                    headers: {
+                        'Content-Type': 'application/json',
+                        'Content-Length': Buffer.byteLength(body),
+                        'X-SAP-Premium-Delivery-Id': deliveryId,
+                        'X-SAP-Premium-Signature': signature,
+                    },
+                    timeout: 10_000,
+                }, (res) => {
+                    let data = '';
+                    res.on('data', (chunk) => { data += chunk.toString(); });
+                    res.on('end', () => resolve({ status: res.statusCode ?? 0, body: data }));
+                });
+                req.on('error', reject);
+                req.on('timeout', () => { req.destroy(); reject(new Error('Webhook delivery timeout.')); });
+                req.write(body);
+                req.end();
+            });
+            httpStatus = response.status;
+            responseBody = response.body.slice(0, 512);
+            success = response.status >= 200 && response.status < 300;
+            if (success)
+                break;
+        }
+        catch (error) {
+            responseBody = error instanceof Error ? error.message : 'Unknown delivery error.';
+        }
+        if (attempt < MAX_RETRIES) {
+            await new Promise(resolve => setTimeout(resolve, RETRY_BASE_DELAY_MS * 2 ** attempt));
+        }
+    }
+    const delivery = {
+        deliveryId,
+        subscriptionId: subscription.subscriptionId,
+        eventId: event.eventId,
+        eventType: event.eventType,
+        deliveredAt,
+        signature,
+        httpStatus,
+        success,
+        responseBody,
+        retryCount,
+    };
+    // Store delivery record with cap.
+    deliveryRecords.set(deliveryId, delivery);
+    if (deliveryRecords.size > MAX_DELIVERY_RECORDS) {
+        const oldestKey = deliveryRecords.keys().next().value;
+        if (oldestKey)
+            deliveryRecords.delete(oldestKey);
+    }
+    // Update subscription stats.
+    subscription.deliveriesAttempted++;
+    if (success)
+        subscription.deliveriesSucceeded++;
+    subscription.lastDeliveryAt = deliveredAt;
+    subscription.lastDeliveryStatus = httpStatus;
+    return delivery;
+}
+/**
+ * @name registerWebhook
+ * @description Register a webhook subscription for an active premium session.
+ *
+ * @param sessionId       - The activated premium session id.
+ * @param targetUrl       - HTTPS endpoint owned by the buyer.
+ * @param events          - Exact event ids to deliver.
+ * @param signingPublicKey - Optional buyer public key for signature verification.
+ * @returns The `PremiumWebhookSubscription`, or `null` if the session is not
+ *   active or the URL is invalid.
+ *
+ * @usedBy `premium-tools.ts` → MCP tool `sap_premium_webhook_register`,
+ *   `remote/server.ts` → `POST /premium/webhook/register`
+ */
+export async function registerWebhook(sessionId, targetUrl, events, signingPublicKey) {
+    const session = getPremiumSession(sessionId);
+    if (!session || session.status !== 'active')
+        return null;
+    if (!validateWebhookUrl(targetUrl))
+        return null;
+    if (events.length === 0)
+        return null;
+    const subscription = {
+        subscriptionId: `wh-sub-${randomUUID()}`,
+        sessionId,
+        pluginId: session.pluginId,
+        capabilityId: session.capabilityId,
+        targetUrl,
+        events,
+        signingPublicKey,
+        createdAt: new Date().toISOString(),
+        deliveriesAttempted: 0,
+        deliveriesSucceeded: 0,
+        lastDeliveryAt: null,
+        lastDeliveryStatus: null,
+        active: true,
+    };
+    webhookSubscriptions.set(subscription.subscriptionId, subscription);
+    return subscription;
+}
+/**
+ * @name RELAY_TARGET_URL_EXPORT
+ * @description Exported relay sentinel so premium-tools and tests can reference it
+ *   without duplicating the literal.
+ */
+export const PREMIUM_WEBHOOK_RELAY_TARGET_URL = RELAY_TARGET_URL;
+/**
+ * @name registerWebhookRelay
+ * @description Register a buffer-only (relay) webhook subscription for an active
+ *   premium session.
+ *
+ * Unlike `registerWebhook`, this does not require a public HTTPS endpoint.
+ * Events matching the subscription are appended to the event store by the
+ * delivery loop and the agent consumes them via `sap_premium_stream_poll` or
+ * `sap_premium_stream_flush`. This solves the core problem for agents running
+ * locally without a publicly reachable HTTPS callback URL.
+ *
+ * @param sessionId - The activated premium session id.
+ * @param events    - Exact event ids to buffer.
+ * @returns The `PremiumWebhookSubscription`, or `null` if the session is not
+ *   active or no events were provided.
+ *
+ * @usedBy `premium-tools.ts` → MCP tool `sap_premium_webhook_relay`
+ */
+export async function registerWebhookRelay(sessionId, events) {
+    const session = getPremiumSession(sessionId);
+    if (!session || session.status !== 'active')
+        return null;
+    if (events.length === 0)
+        return null;
+    const subscription = {
+        subscriptionId: `wh-relay-${randomUUID()}`,
+        sessionId,
+        pluginId: session.pluginId,
+        capabilityId: session.capabilityId,
+        targetUrl: RELAY_TARGET_URL,
+        events,
+        signingPublicKey: undefined,
+        createdAt: new Date().toISOString(),
+        deliveriesAttempted: 0,
+        deliveriesSucceeded: 0,
+        lastDeliveryAt: null,
+        lastDeliveryStatus: null,
+        active: true,
+    };
+    webhookSubscriptions.set(subscription.subscriptionId, subscription);
+    return subscription;
+}
+/**
+ * @name getRelaySubscriptionsForSession
+ * @description Return all active relay (buffer-only) webhook subscriptions for a
+ *   session id. Used by the relay status tool to report buffered event counts.
+ *
+ * @param sessionId - The premium session id.
+ * @returns Array of relay subscriptions for the session.
+ *
+ * @usedBy `premium-tools.ts` → MCP tool `sap_premium_webhook_relay_status`
+ */
+export function getRelaySubscriptionsForSession(sessionId) {
+    const results = [];
+    for (const sub of webhookSubscriptions.values()) {
+        if (sub.sessionId === sessionId && isRelayTarget(sub.targetUrl)) {
+            results.push({ ...sub });
+        }
+    }
+    return results;
+}
+/**
+ * @name startWebhookDelivery
+ * @description Start the webhook delivery loop for a subscription.
+ *
+ * Subscribes to the provider, receives events, filters by the subscription's
+ * event list, signs and delivers each matching event, and decrements the
+ * session quota. Stops when the quota reaches zero or the subscription is
+ * deactivated.
+ *
+ * @param subscription - The webhook subscription to deliver for.
+ *
+ * @usedBy `remote/server.ts` → webhook delivery worker
+ */
+export async function startWebhookDelivery(subscription) {
+    const iterable = await subscribeToProvider(subscription.pluginId, subscription.capabilityId, {});
+    if (!iterable) {
+        console.error(`[webhook-engine] Failed to start delivery loop for ${subscription.subscriptionId}: ` +
+            `provider adapter not available for ${subscription.pluginId}:${subscription.capabilityId}. ` +
+            `Check SAP_MCP_ENABLE_PREMIUM_PLUGINS, SAP_MCP_PLUGIN_DIR, and that providers are compiled (.js).`);
+        return;
+    }
+    console.log(`[webhook-engine] Delivery loop started for ${subscription.subscriptionId} ` +
+        `(${subscription.pluginId}:${subscription.capabilityId}, events: ${subscription.events.join(', ')}).`);
+    for await (const event of iterable) {
+        if (!subscription.active)
+            break;
+        // Filter: only deliver events listed in the subscription.
+        if (!subscription.events.includes(event.eventType))
+            continue;
+        // Store the event for replay/idempotency.
+        appendEvent({
+            eventId: event.eventId,
+            sessionId: subscription.sessionId,
+            pluginId: subscription.pluginId,
+            capabilityId: subscription.capabilityId,
+            eventType: event.eventType,
+            observedAt: event.observedAt,
+            payload: event.payload,
+            deliveredAt: new Date().toISOString(),
+        });
+        // Relay (buffer-only) mode: skip HTTP POST delivery entirely.
+        // The event is already in the event store; the agent consumes it via
+        // sap_premium_stream_poll / sap_premium_stream_flush.
+        if (isRelayTarget(subscription.targetUrl)) {
+            subscription.deliveriesAttempted++;
+            subscription.deliveriesSucceeded++;
+            subscription.lastDeliveryAt = new Date().toISOString();
+            subscription.lastDeliveryStatus = 200;
+            const relayDelivery = {
+                deliveryId: `wh-relay-${randomUUID()}`,
+                subscriptionId: subscription.subscriptionId,
+                eventId: event.eventId,
+                eventType: event.eventType,
+                deliveredAt: new Date().toISOString(),
+                signature: 'relay-buffer',
+                httpStatus: 200,
+                success: true,
+                responseBody: 'Buffered for agent poll consumption.',
+                retryCount: 0,
+            };
+            deliveryRecords.set(relayDelivery.deliveryId, relayDelivery);
+            if (deliveryRecords.size > MAX_DELIVERY_RECORDS) {
+                const oldestKey = deliveryRecords.keys().next().value;
+                if (oldestKey)
+                    deliveryRecords.delete(oldestKey);
+            }
+        }
+        else {
+            // Deliver via HTTP POST with retries.
+            await deliverWebhook(subscription, event);
+        }
+        // Decrement quota and auto-close at zero.
+        const remaining = decrementSessionQuota(subscription.sessionId);
+        if (remaining <= 0) {
+            subscription.active = false;
+            closeSession(subscription.sessionId, 'Webhook unit quota exhausted.');
+            break;
+        }
+    }
+}
+/**
+ * @name unregisterWebhook
+ * @description Deactivate and remove a webhook subscription.
+ *
+ * @param subscriptionId - The webhook subscription id.
+ * @returns True if the subscription was found and removed.
+ *
+ * @usedBy `premium-tools.ts` → MCP tool `sap_premium_webhook_unregister`
+ */
+export function unregisterWebhook(subscriptionId) {
+    const subscription = webhookSubscriptions.get(subscriptionId);
+    if (!subscription)
+        return false;
+    subscription.active = false;
+    webhookSubscriptions.delete(subscriptionId);
+    return true;
+}
+/**
+ * @name getWebhookSubscription
+ * @description Retrieve a webhook subscription by id.
+ *
+ * @param subscriptionId - The webhook subscription id.
+ * @returns The subscription, or `null` if not found.
+ *
+ * @usedBy `premium-tools.ts` → MCP tool `sap_premium_webhook_status`
+ */
+export function getWebhookSubscription(subscriptionId) {
+    const sub = webhookSubscriptions.get(subscriptionId);
+    return sub ? { ...sub } : null;
+}
+/**
+ * @name getWebhookDeliveries
+ * @description Retrieve delivery records for a subscription.
+ *
+ * @param subscriptionId - The webhook subscription id.
+ * @param limit          - Maximum records to return (default 50).
+ * @returns Array of `PremiumWebhookDelivery` records.
+ *
+ * @usedBy `premium-tools.ts` → MCP tool `sap_premium_webhook_status`
+ */
+export function getWebhookDeliveries(subscriptionId, limit = 50) {
+    const results = [];
+    for (const delivery of deliveryRecords.values()) {
+        if (delivery.subscriptionId === subscriptionId) {
+            results.push(delivery);
+            if (results.length >= limit)
+                break;
+        }
+    }
+    return results;
+}
+/**
+ * @name getActiveWebhookCount
+ * @description Return the number of currently active webhook subscriptions.
+ *
+ * @usedBy `metrics.ts`
+ */
+export function getActiveWebhookCount() {
+    let count = 0;
+    for (const sub of webhookSubscriptions.values()) {
+        if (sub.active)
+            count++;
+    }
+    return count;
+}
+/**
+ * @name stopAllWebhooks
+ * @description Deactivate all webhook subscriptions. Called during graceful shutdown.
+ *
+ * @usedBy `remote/server.ts` shutdown handler
+ */
+export function stopAllWebhooks() {
+    for (const sub of webhookSubscriptions.values()) {
+        sub.active = false;
+    }
+    webhookSubscriptions.clear();
+}
+//# sourceMappingURL=webhook-engine.js.map

package/dist/premium/webhook-engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook-engine.js","sourceRoot":"","sources":["../../src/premium/webhook-engine.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AACrC,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAE/B,OAAO,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAC9F,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAE/C;;GAEG;AACH,MAAM,oBAAoB,GAAG,IAAI,GAAG,EAAsC,CAAC;AAE3E;;GAEG;AACH,MAAM,eAAe,GAAG,IAAI,GAAG,EAAkC,CAAC;AAElE;;;;;;GAMG;AACH,MAAM,oBAAoB,GAAG,CAAC,GAAG,EAAE;IACjC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC;IACvD,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC3B,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;AAC9E,CAAC,CAAC,EAAE,CAAC;AAEL;;GAEG;AACH,MAAM,WAAW,GAAG,CAAC,CAAC;AAEtB;;GAEG;AACH,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAEhC;;;;;;;;;;;;GAYG;AACH,MAAM,gBAAgB,GAAG,gBAAgB,CAAC;AAE1C;;;;;;;;GAQG;AACH,SAAS,aAAa,CAAC,SAAiB;IACtC,OAAO,SAAS,KAAK,gBAAgB,CAAC;AACxC,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,SAAS,kBAAkB,CAAC,SAAiB;IAC3C,6EAA6E;IAC7E,IAAI,aAAa,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC;IAE1C,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IAED,sEAAsE;IACtE,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,KAAK,WAAW,IAAI,MAAM,CAAC,QAAQ,KAAK,WAAW,CAAC;IACvF,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,WAAW;QAAE,OAAO,KAAK,CAAC;IAE/D,kDAAkD;IAClD,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC;IAC7B,IACE,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;QACtB,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;QACtF,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;QACtF,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;QACtF,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;QACtF,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;QACtF,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;QAC1B,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;QAC3B,IAAI,KAAK,SAAS;QAClB,IAAI,KAAK,KAAK;QACd,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EACxB,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,SAAS,YAAY,CAAC,UAAkB,EAAE,WAAmB,EAAE,OAAgC;IAC7F,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC;IACvD,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CAAC,gGAAgG,CAAC,CAAC;IACpH,CAAC;IACD,MAAM,OAAO,GAAG,GAAG,UAAU,IAAI,WAAW,IAAI,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;IAC1E,OAAO,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACjE,CAAC;AAED;;;;;;;;;GASG;AACH,KAAK,UAAU,cAAc,CAC3B,YAAwC,EACxC,KAAoB;IAEpB,MAAM,UAAU,GAAG,eAAe,UAAU,EAAE,EAAE,CAAC;IACjD,MAAM,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC7C,MAAM,SAAS,GAAG,YAAY,CAAC,UAAU,EAAE,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IAEvE,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC;QAC1B,UAAU;QACV,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,WAAW;QACX,SAAS;QACT,OAAO,EAAE,KAAK,CAAC,OAAO;KACvB,CAAC,CAAC;IAEH,IAAI,UAAU,GAAkB,IAAI,CAAC;IACrC,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,YAAgC,CAAC;IACrC,IAAI,UAAU,GAAG,CAAC,CAAC;IAEnB,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;IAClD,MAAM,OAAO,GAAG,SAAS,CAAC,QAAQ,KAAK,QAAQ,CAAC;IAChD,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC;IAE9C,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,WAAW,EAAE,OAAO,EAAE,EAAE,CAAC;QACxD,UAAU,GAAG,OAAO,CAAC;QACrB,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,OAAO,CAAmC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBACvF,MAAM,GAAG,GAAG,KAAK,CACf;oBACE,QAAQ,EAAE,SAAS,CAAC,QAAQ;oBAC5B,IAAI,EAAE,SAAS,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC5C,IAAI,EAAE,GAAG,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,MAAM,EAAE;oBAChD,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE;wBACP,cAAc,EAAE,kBAAkB;wBAClC,gBAAgB,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC;wBACzC,2BAA2B,EAAE,UAAU;wBACvC,yBAAyB,EAAE,SAAS;qBACrC;oBACD,OAAO,EAAE,MAAM;iBAChB,EACD,CAAC,GAAG,EAAE,EAAE;oBACN,IAAI,IAAI,GAAG,EAAE,CAAC;oBACd,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,GAAG,IAAI,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;oBACjE,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,UAAU,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;gBAC5E,CAAC,CACF,CAAC;gBACF,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBACxB,GAAG,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC5F,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAChB,GAAG,CAAC,GAAG,EAAE,CAAC;YACZ,CAAC,CAAC,CAAC;YAEH,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC;YAC7B,YAAY,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YAC3C,OAAO,GAAG,QAAQ,CAAC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,CAAC;YAC1D,IAAI,OAAO;gBAAE,MAAM;QACrB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,yBAAyB,CAAC;QACpF,CAAC;QAED,IAAI,OAAO,GAAG,WAAW,EAAE,CAAC;YAC1B,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,mBAAmB,GAAG,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC;QACxF,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAA2B;QACvC,UAAU;QACV,cAAc,EAAE,YAAY,CAAC,cAAc;QAC3C,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,WAAW;QACX,SAAS;QACT,UAAU;QACV,OAAO;QACP,YAAY;QACZ,UAAU;KACX,CAAC;IAEF,kCAAkC;IAClC,eAAe,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IAC1C,IAAI,eAAe,CAAC,IAAI,GAAG,oBAAoB,EAAE,CAAC;QAChD,MAAM,SAAS,GAAG,eAAe,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAA2B,CAAC;QAC5E,IAAI,SAAS;YAAE,eAAe,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACnD,CAAC;IAED,6BAA6B;IAC7B,YAAY,CAAC,mBAAmB,EAAE,CAAC;IACnC,IAAI,OAAO;QAAE,YAAY,CAAC,mBAAmB,EAAE,CAAC;IAChD,YAAY,CAAC,cAAc,GAAG,WAAW,CAAC;IAC1C,YAAY,CAAC,kBAAkB,GAAG,UAAU,CAAC;IAE7C,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,SAAiB,EACjB,SAAiB,EACjB,MAAgB,EAChB,gBAAyB;IAEzB,MAAM,OAAO,GAAG,iBAAiB,CAAC,SAAS,CAAC,CAAC;IAC7C,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACzD,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC;IAChD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAErC,MAAM,YAAY,GAA+B;QAC/C,cAAc,EAAE,UAAU,UAAU,EAAE,EAAE;QACxC,SAAS;QACT,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,SAAS;QACT,MAAM;QACN,gBAAgB;QAChB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,mBAAmB,EAAE,CAAC;QACtB,mBAAmB,EAAE,CAAC;QACtB,cAAc,EAAE,IAAI;QACpB,kBAAkB,EAAE,IAAI;QACxB,MAAM,EAAE,IAAI;KACb,CAAC;IAEF,oBAAoB,CAAC,GAAG,CAAC,YAAY,CAAC,cAAc,EAAE,YAAY,CAAC,CAAC;IACpE,OAAO,YAAY,CAAC;AACtB,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAG,gBAAgB,CAAC;AAEjE;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,SAAiB,EACjB,MAAgB;IAEhB,MAAM,OAAO,GAAG,iBAAiB,CAAC,SAAS,CAAC,CAAC;IAC7C,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACzD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAErC,MAAM,YAAY,GAA+B;QAC/C,cAAc,EAAE,YAAY,UAAU,EAAE,EAAE;QAC1C,SAAS;QACT,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,SAAS,EAAE,gBAAgB;QAC3B,MAAM;QACN,gBAAgB,EAAE,SAAS;QAC3B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,mBAAmB,EAAE,CAAC;QACtB,mBAAmB,EAAE,CAAC;QACtB,cAAc,EAAE,IAAI;QACpB,kBAAkB,EAAE,IAAI;QACxB,MAAM,EAAE,IAAI;KACb,CAAC;IAEF,oBAAoB,CAAC,GAAG,CAAC,YAAY,CAAC,cAAc,EAAE,YAAY,CAAC,CAAC;IACpE,OAAO,YAAY,CAAC;AACtB,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,+BAA+B,CAAC,SAAiB;IAC/D,MAAM,OAAO,GAAiC,EAAE,CAAC;IACjD,KAAK,MAAM,GAAG,IAAI,oBAAoB,CAAC,MAAM,EAAE,EAAE,CAAC;QAChD,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YAChE,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,GAAG,EAAE,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,YAAwC;IACjF,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CACxC,YAAY,CAAC,QAAQ,EACrB,YAAY,CAAC,YAAY,EACzB,EAAE,CACH,CAAC;IACF,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,CAAC,KAAK,CACX,sDAAsD,YAAY,CAAC,cAAc,IAAI;YACrF,sCAAsC,YAAY,CAAC,QAAQ,IAAI,YAAY,CAAC,YAAY,IAAI;YAC5F,kGAAkG,CACnG,CAAC;QACF,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CACT,8CAA8C,YAAY,CAAC,cAAc,GAAG;QAC5E,IAAI,YAAY,CAAC,QAAQ,IAAI,YAAY,CAAC,YAAY,aAAa,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CACtG,CAAC;IAEF,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;QACnC,IAAI,CAAC,YAAY,CAAC,MAAM;YAAE,MAAM;QAEhC,0DAA0D;QAC1D,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC;YAAE,SAAS;QAE7D,0CAA0C;QAC1C,WAAW,CAAC;YACV,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,SAAS,EAAE,YAAY,CAAC,SAAS;YACjC,QAAQ,EAAE,YAAY,CAAC,QAAQ;YAC/B,YAAY,EAAE,YAAY,CAAC,YAAY;YACvC,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACtC,CAAC,CAAC;QAEH,8DAA8D;QAC9D,qEAAqE;QACrE,sDAAsD;QACtD,IAAI,aAAa,CAAC,YAAY,CAAC,SAAS,CAAC,EAAE,CAAC;YAC1C,YAAY,CAAC,mBAAmB,EAAE,CAAC;YACnC,YAAY,CAAC,mBAAmB,EAAE,CAAC;YACnC,YAAY,CAAC,cAAc,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YACvD,YAAY,CAAC,kBAAkB,GAAG,GAAG,CAAC;YAEtC,MAAM,aAAa,GAA2B;gBAC5C,UAAU,EAAE,YAAY,UAAU,EAAE,EAAE;gBACtC,cAAc,EAAE,YAAY,CAAC,cAAc;gBAC3C,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACrC,SAAS,EAAE,cAAc;gBACzB,UAAU,EAAE,GAAG;gBACf,OAAO,EAAE,IAAI;gBACb,YAAY,EAAE,sCAAsC;gBACpD,UAAU,EAAE,CAAC;aACd,CAAC;YACF,eAAe,CAAC,GAAG,CAAC,aAAa,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;YAC7D,IAAI,eAAe,CAAC,IAAI,GAAG,oBAAoB,EAAE,CAAC;gBAChD,MAAM,SAAS,GAAG,eAAe,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAA2B,CAAC;gBAC5E,IAAI,SAAS;oBAAE,eAAe,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YACnD,CAAC;QACH,CAAC;aAAM,CAAC;YACN,sCAAsC;YACtC,MAAM,cAAc,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;QAC5C,CAAC;QAED,0CAA0C;QAC1C,MAAM,SAAS,GAAG,qBAAqB,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;QAChE,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;YACnB,YAAY,CAAC,MAAM,GAAG,KAAK,CAAC;YAC5B,YAAY,CAAC,YAAY,CAAC,SAAS,EAAE,+BAA+B,CAAC,CAAC;YACtE,MAAM;QACR,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAAC,cAAsB;IACtD,MAAM,YAAY,GAAG,oBAAoB,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IAC9D,IAAI,CAAC,YAAY;QAAE,OAAO,KAAK,CAAC;IAChC,YAAY,CAAC,MAAM,GAAG,KAAK,CAAC;IAC5B,oBAAoB,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;IAC5C,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,sBAAsB,CAAC,cAAsB;IAC3D,MAAM,GAAG,GAAG,oBAAoB,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IACrD,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACjC,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,oBAAoB,CAAC,cAAsB,EAAE,KAAK,GAAG,EAAE;IACrE,MAAM,OAAO,GAA6B,EAAE,CAAC;IAC7C,KAAK,MAAM,QAAQ,IAAI,eAAe,CAAC,MAAM,EAAE,EAAE,CAAC;QAChD,IAAI,QAAQ,CAAC,cAAc,KAAK,cAAc,EAAE,CAAC;YAC/C,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACvB,IAAI,OAAO,CAAC,MAAM,IAAI,KAAK;gBAAE,MAAM;QACrC,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB;IACnC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,GAAG,IAAI,oBAAoB,CAAC,MAAM,EAAE,EAAE,CAAC;QAChD,IAAI,GAAG,CAAC,MAAM;YAAE,KAAK,EAAE,CAAC;IAC1B,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe;IAC7B,KAAK,MAAM,GAAG,IAAI,oBAAoB,CAAC,MAAM,EAAE,EAAE,CAAC;QAChD,GAAG,CAAC,MAAM,GAAG,KAAK,CAAC;IACrB,CAAC;IACD,oBAAoB,CAAC,KAAK,EAAE,CAAC;AAC/B,CAAC"}