@runcore-sh/runcore 0.1.2

package/dist/webhooks/registry.js

@@ -0,0 +1,143 @@
+/**
+ * Generic webhook registry.
+ *
+ * Provider registration, lookup, stats tracking, and health monitoring.
+ * Signature verification, routing, retry, and configuration live in
+ * their own modules — this file re-exports them for backward compatibility.
+ */
+import { createLogger } from "../utils/logger.js";
+const log = createLogger("webhooks.registry");
+export { hmacSha256Hex, hmacSha256Base64, hmacSha1Base64, timingSafeCompare, isTimestampFresh, } from "./verify.js";
+export { withWebhookRetry } from "./retry.js";
+export { routeWebhook, routeWebhookRequest, composeMiddleware, validateRequest, deduplicateRequests, createWebhookEvent, } from "./router.js";
+// ── Registry ─────────────────────────────────────────────────────────────────
+const providers = new Map();
+/**
+ * Register a webhook provider.
+ * Skips re-registration if a provider with the same name is already registered.
+ * Uses debug logging instead of activity log to prevent the trace insight engine
+ * from flagging normal startup registrations as bottlenecks (DASH-61, DASH-62).
+ */
+export function registerProvider(provider) {
+    if (providers.has(provider.name))
+        return;
+    providers.set(provider.name, provider);
+    log.debug(`Webhook provider registered: ${provider.name}`);
+}
+/**
+ * Register multiple providers in a single batch.
+ * Skips providers that are already registered by name, avoiding duplicate
+ * registrations across watch-mode restarts or repeated calls.
+ * Uses debug logging instead of activity log to prevent the trace insight
+ * engine from flagging normal startup registrations as bottlenecks (DASH-61, DASH-62).
+ */
+export function registerProviders(list) {
+    const registered = [];
+    const skipped = [];
+    for (const provider of list) {
+        if (providers.has(provider.name)) {
+            skipped.push(provider.name);
+            continue;
+        }
+        providers.set(provider.name, provider);
+        registered.push(provider.name);
+    }
+    if (registered.length > 0) {
+        log.debug(`Webhook providers registered: [${registered.join(", ")}]`);
+    }
+    if (skipped.length > 0) {
+        log.debug(`Webhook providers skipped (already registered): [${skipped.join(", ")}]`);
+    }
+}
+/** Get a registered provider by name. */
+export function getProvider(name) {
+    return providers.get(name);
+}
+/** List all registered provider names. */
+export function listProviders() {
+    return [...providers.keys()];
+}
+/** Remove a provider by name. */
+export function removeProvider(name) {
+    return providers.delete(name);
+}
+// ── Provider Stats ──────────────────────────────────────────────────────────
+const statsMap = new Map();
+function getOrCreateStats(name) {
+    let stats = statsMap.get(name);
+    if (!stats) {
+        stats = {
+            name,
+            invocations: 0,
+            successes: 0,
+            failures: 0,
+            lastInvokedAt: null,
+            lastErrorAt: null,
+            lastError: null,
+        };
+        statsMap.set(name, stats);
+    }
+    return stats;
+}
+/** Record a successful webhook invocation. */
+export function recordSuccess(providerName) {
+    const stats = getOrCreateStats(providerName);
+    stats.invocations++;
+    stats.successes++;
+    stats.lastInvokedAt = new Date().toISOString();
+}
+/** Record a failed webhook invocation. */
+export function recordFailure(providerName, error) {
+    const stats = getOrCreateStats(providerName);
+    stats.invocations++;
+    stats.failures++;
+    stats.lastInvokedAt = new Date().toISOString();
+    stats.lastErrorAt = new Date().toISOString();
+    stats.lastError = error;
+}
+/** Get stats for a specific provider. */
+export function getProviderStats(name) {
+    return statsMap.get(name);
+}
+/** Get stats for all providers. */
+export function getAllProviderStats() {
+    return [...statsMap.values()];
+}
+/** Reset stats (useful in tests). Pass a name to reset one provider, or omit to reset all. */
+export function resetProviderStats(name) {
+    if (name) {
+        statsMap.delete(name);
+    }
+    else {
+        statsMap.clear();
+    }
+}
+// ── Provider Health ──────────────────────────────────────────────────────────
+/**
+ * Get health summary for a provider based on failure rate.
+ * @param name Provider name.
+ * @param failureThreshold Failure rate (0–1) above which status is "degraded". Default: 0.5.
+ */
+export function getProviderHealth(name, failureThreshold = 0.5) {
+    const stats = statsMap.get(name);
+    if (!stats)
+        return undefined;
+    if (stats.invocations === 0) {
+        return { name, health: "unknown", failureRate: 0, stats };
+    }
+    const failureRate = stats.failures / stats.invocations;
+    const health = failureRate >= failureThreshold ? "degraded" : "healthy";
+    return { name, health, failureRate, stats };
+}
+/** Get health summaries for all registered providers. */
+export function getAllProviderHealth(failureThreshold = 0.5) {
+    return [...providers.keys()].map((name) => {
+        return (getProviderHealth(name, failureThreshold) ?? {
+            name,
+            health: "unknown",
+            failureRate: 0,
+            stats: getOrCreateStats(name),
+        });
+    });
+}
+//# sourceMappingURL=registry.js.map

package/dist/webhooks/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/webhooks/registry.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAQlD,MAAM,GAAG,GAAG,YAAY,CAAC,mBAAmB,CAAC,CAAC;AAmB9C,OAAO,EACL,aAAa,EACb,gBAAgB,EAChB,cAAc,EACd,iBAAiB,EACjB,gBAAgB,GACjB,MAAM,aAAa,CAAC;AAErB,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAE9C,OAAO,EACL,YAAY,EACZ,mBAAmB,EACnB,iBAAiB,EACjB,eAAe,EACf,mBAAmB,EACnB,kBAAkB,GACnB,MAAM,aAAa,CAAC;AAErB,gFAAgF;AAEhF,MAAM,SAAS,GAAG,IAAI,GAAG,EAA2B,CAAC;AAErD;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAAyB;IACxD,IAAI,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO;IACzC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACvC,GAAG,CAAC,KAAK,CAAC,gCAAgC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;AAC7D,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAuB;IACvD,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,QAAQ,IAAI,IAAI,EAAE,CAAC;QAC5B,IAAI,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACjC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC5B,SAAS;QACX,CAAC;QACD,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QACvC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC;IAED,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,GAAG,CAAC,KAAK,CAAC,kCAAkC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,GAAG,CAAC,KAAK,CAAC,oDAAoD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACvF,CAAC;AACH,CAAC;AAED,yCAAyC;AACzC,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,OAAO,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAC7B,CAAC;AAED,0CAA0C;AAC1C,MAAM,UAAU,aAAa;IAC3B,OAAO,CAAC,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC;AAC/B,CAAC;AAED,iCAAiC;AACjC,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,OAAO,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AAChC,CAAC;AAED,+EAA+E;AAE/E,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAyB,CAAC;AAElD,SAAS,gBAAgB,CAAC,IAAY;IACpC,IAAI,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,KAAK,GAAG;YACN,IAAI;YACJ,WAAW,EAAE,CAAC;YACd,SAAS,EAAE,CAAC;YACZ,QAAQ,EAAE,CAAC;YACX,aAAa,EAAE,IAAI;YACnB,WAAW,EAAE,IAAI;YACjB,SAAS,EAAE,IAAI;SAChB,CAAC;QACF,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC5B,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,8CAA8C;AAC9C,MAAM,UAAU,aAAa,CAAC,YAAoB;IAChD,MAAM,KAAK,GAAG,gBAAgB,CAAC,YAAY,CAAC,CAAC;IAC7C,KAAK,CAAC,WAAW,EAAE,CAAC;IACpB,KAAK,CAAC,SAAS,EAAE,CAAC;IAClB,KAAK,CAAC,aAAa,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AACjD,CAAC;AAED,0CAA0C;AAC1C,MAAM,UAAU,aAAa,CAAC,YAAoB,EAAE,KAAa;IAC/D,MAAM,KAAK,GAAG,gBAAgB,CAAC,YAAY,CAAC,CAAC;IAC7C,KAAK,CAAC,WAAW,EAAE,CAAC;IACpB,KAAK,CAAC,QAAQ,EAAE,CAAC;IACjB,KAAK,CAAC,aAAa,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC/C,KAAK,CAAC,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC7C,KAAK,CAAC,SAAS,GAAG,KAAK,CAAC;AAC1B,CAAC;AAED,yCAAyC;AACzC,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,OAAO,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAC5B,CAAC;AAED,mCAAmC;AACnC,MAAM,UAAU,mBAAmB;IACjC,OAAO,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;AAChC,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,kBAAkB,CAAC,IAAa;IAC9C,IAAI,IAAI,EAAE,CAAC;QACT,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACxB,CAAC;SAAM,CAAC;QACN,QAAQ,CAAC,KAAK,EAAE,CAAC;IACnB,CAAC;AACH,CAAC;AAED,gFAAgF;AAEhF;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAC/B,IAAY,EACZ,gBAAgB,GAAG,GAAG;IAEtB,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACjC,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAE7B,IAAI,KAAK,CAAC,WAAW,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC;IAC5D,CAAC;IAED,MAAM,WAAW,GAAG,KAAK,CAAC,QAAQ,GAAG,KAAK,CAAC,WAAW,CAAC;IACvD,MAAM,MAAM,GACV,WAAW,IAAI,gBAAgB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3D,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;AAC9C,CAAC;AAED,yDAAyD;AACzD,MAAM,UAAU,oBAAoB,CAClC,gBAAgB,GAAG,GAAG;IAEtB,OAAO,CAAC,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACxC,OAAO,CACL,iBAAiB,CAAC,IAAI,EAAE,gBAAgB,CAAC,IAAI;YAC3C,IAAI;YACJ,MAAM,EAAE,SAA2B;YACnC,WAAW,EAAE,CAAC;YACd,KAAK,EAAE,gBAAgB,CAAC,IAAI,CAAC;SAC9B,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/webhooks/relay.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Relay webhook verification and processing.
+ *
+ * Handles incoming messages relayed from the Cloudflare Worker (whatsapp-relay).
+ * The Worker has already verified the Twilio signature — this module verifies
+ * the relay's own HMAC-SHA256 signature to ensure the request is authentic.
+ *
+ * Relay signature scheme:
+ *   HMAC-SHA256("{timestamp}.{body}", RELAY_SECRET) → hex
+ *   Sent in X-Relay-Signature header, timestamp in X-Relay-Timestamp.
+ *   Replays rejected if timestamp is older than 5 minutes.
+ */
+export interface RelayVerifyResult {
+    valid: boolean;
+    error?: string;
+}
+/**
+ * Verify a relay request from the Cloudflare Worker.
+ *
+ * @param rawBody   The raw request body (URL-encoded form data)
+ * @param headers   Request headers (lowercase keys)
+ * @param secret    The shared relay secret (RELAY_SECRET env var)
+ */
+export declare function verifyRelaySignature(rawBody: string, headers: Record<string, string>, secret: string): RelayVerifyResult;
+//# sourceMappingURL=relay.d.ts.map

package/dist/webhooks/relay.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"relay.d.ts","sourceRoot":"","sources":["../../src/webhooks/relay.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAYH,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,MAAM,EAAE,MAAM,GACb,iBAAiB,CAkCnB"}

package/dist/webhooks/relay.js

@@ -0,0 +1,53 @@
+/**
+ * Relay webhook verification and processing.
+ *
+ * Handles incoming messages relayed from the Cloudflare Worker (whatsapp-relay).
+ * The Worker has already verified the Twilio signature — this module verifies
+ * the relay's own HMAC-SHA256 signature to ensure the request is authentic.
+ *
+ * Relay signature scheme:
+ *   HMAC-SHA256("{timestamp}.{body}", RELAY_SECRET) → hex
+ *   Sent in X-Relay-Signature header, timestamp in X-Relay-Timestamp.
+ *   Replays rejected if timestamp is older than 5 minutes.
+ */
+import { hmacSha256Hex, timingSafeCompare, isTimestampFresh } from "./verify.js";
+import { logActivity } from "../activity/log.js";
+// ── Constants ────────────────────────────────────────────────────────────────
+/** Maximum age (seconds) for relay timestamps. Default: 300 (5 min). */
+const MAX_RELAY_TIMESTAMP_AGE = 300;
+/**
+ * Verify a relay request from the Cloudflare Worker.
+ *
+ * @param rawBody   The raw request body (URL-encoded form data)
+ * @param headers   Request headers (lowercase keys)
+ * @param secret    The shared relay secret (RELAY_SECRET env var)
+ */
+export function verifyRelaySignature(rawBody, headers, secret) {
+    if (!secret) {
+        return { valid: false, error: "RELAY_SECRET not configured" };
+    }
+    const signature = headers["x-relay-signature"];
+    if (!signature) {
+        return { valid: false, error: "Missing X-Relay-Signature header" };
+    }
+    const timestamp = headers["x-relay-timestamp"];
+    if (!timestamp) {
+        return { valid: false, error: "Missing X-Relay-Timestamp header" };
+    }
+    const ts = parseInt(timestamp, 10);
+    if (!isTimestampFresh(ts, MAX_RELAY_TIMESTAMP_AGE)) {
+        return { valid: false, error: "Relay timestamp expired or invalid" };
+    }
+    // The Worker signs: "{timestamp}.{body}"
+    const payload = `${timestamp}.${rawBody}`;
+    const expected = hmacSha256Hex(payload, secret);
+    if (!timingSafeCompare(signature, expected)) {
+        return { valid: false, error: "Invalid relay signature" };
+    }
+    logActivity({
+        source: "system",
+        summary: "Relay webhook verified (whatsapp-relay worker)",
+    });
+    return { valid: true };
+}
+//# sourceMappingURL=relay.js.map

package/dist/webhooks/relay.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"relay.js","sourceRoot":"","sources":["../../src/webhooks/relay.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AACjF,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEjD,gFAAgF;AAEhF,wEAAwE;AACxE,MAAM,uBAAuB,GAAG,GAAG,CAAC;AASpC;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAClC,OAAe,EACf,OAA+B,EAC/B,MAAc;IAEd,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,6BAA6B,EAAE,CAAC;IAChE,CAAC;IAED,MAAM,SAAS,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAC/C,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,kCAAkC,EAAE,CAAC;IACrE,CAAC;IAED,MAAM,SAAS,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAC/C,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,kCAAkC,EAAE,CAAC;IACrE,CAAC;IAED,MAAM,EAAE,GAAG,QAAQ,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IACnC,IAAI,CAAC,gBAAgB,CAAC,EAAE,EAAE,uBAAuB,CAAC,EAAE,CAAC;QACnD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,oCAAoC,EAAE,CAAC;IACvE,CAAC;IAED,yCAAyC;IACzC,MAAM,OAAO,GAAG,GAAG,SAAS,IAAI,OAAO,EAAE,CAAC;IAC1C,MAAM,QAAQ,GAAG,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAEhD,IAAI,CAAC,iBAAiB,CAAC,SAAS,EAAE,QAAQ,CAAC,EAAE,CAAC;QAC5C,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC;IAC5D,CAAC;IAED,WAAW,CAAC;QACV,MAAM,EAAE,QAAQ;QAChB,OAAO,EAAE,gDAAgD;KAC1D,CAAC,CAAC;IAEH,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACzB,CAAC"}

package/dist/webhooks/retry.d.ts

@@ -0,0 +1,92 @@
+/**
+ * Retry logic and error handling for webhook processing.
+ *
+ * Provides exponential backoff with jitter for transient failures,
+ * dead-letter tracking for permanently failed events, and
+ * error classification utilities.
+ */
+import type { WebhookRetryOpts, WebhookResult } from "./types.js";
+/**
+ * Execute a function with retry logic.
+ * Retries on thrown errors, stops on success or exhaustion.
+ * Uses exponential backoff with jitter:
+ *   delay = min(baseDelay × 2^(attempt-1), maxDelay) × random(0.5–1.5)
+ */
+export declare function withWebhookRetry<T>(fn: () => Promise<T>, opts?: WebhookRetryOpts & {
+    label?: string;
+}): Promise<T>;
+/** Error classification for webhook processing failures. */
+export type WebhookErrorKind = "transient" | "permanent" | "auth";
+/** A classified webhook error with metadata. */
+export interface WebhookError {
+    kind: WebhookErrorKind;
+    message: string;
+    provider: string;
+    timestamp: string;
+    attempt?: number;
+    cause?: unknown;
+}
+/**
+ * Classify an error for retry decisions.
+ * - Network errors, 429, 5xx → transient (retry)
+ * - 400, 404, validation → permanent (don't retry)
+ * - 401, 403 → auth (don't retry, flag for re-auth)
+ */
+export declare function classifyError(err: unknown): WebhookErrorKind;
+/**
+ * Create a WebhookError from a caught exception.
+ */
+export declare function createWebhookError(err: unknown, provider: string, attempt?: number): WebhookError;
+/** A failed webhook event stored for later inspection or replay. */
+export interface DeadLetterEntry {
+    id: string;
+    provider: string;
+    payload: unknown;
+    error: WebhookError;
+    receivedAt: string;
+    exhaustedAt: string;
+    attempts: number;
+}
+/**
+ * Dead-letter queue for failed webhook events.
+ * Stores events that exhausted all retries for manual inspection or replay.
+ * Optionally persists to a JSON file to survive process restarts.
+ */
+export declare class DeadLetterQueue {
+    private entries;
+    private maxSize;
+    private filePath;
+    private dirty;
+    /**
+     * @param maxSize Maximum entries to keep in the queue.
+     * @param filePath Optional file path for persistence. If provided, entries
+     *                 are loaded on construction and saved on mutation.
+     */
+    constructor(maxSize?: number, filePath?: string);
+    /** Add a failed event to the dead-letter queue. */
+    add(entry: Omit<DeadLetterEntry, "id" | "exhaustedAt">): void;
+    /** Get all entries, optionally filtered by provider. */
+    list(provider?: string): DeadLetterEntry[];
+    /** Remove an entry by ID. Returns true if found. */
+    remove(id: string): boolean;
+    /** Remove all entries, optionally for a specific provider. */
+    clear(provider?: string): number;
+    /** Number of entries in the queue. */
+    get size(): number;
+    /** Whether the queue has a file-backed persistence path configured. */
+    get persistent(): boolean;
+    /** Load entries from the persistence file. Silently skips if file doesn't exist. */
+    private loadFromFile;
+    /** Persist current entries to the file. Debounced to avoid excessive writes. */
+    private persist;
+    private writeToFile;
+}
+/**
+ * Wrap a webhook handler with retry logic.
+ * Useful for handlers that call external APIs that may transiently fail.
+ */
+export declare function withRetryHandler(source: string, fn: (payload: unknown, ctx?: Record<string, unknown>) => Promise<WebhookResult>, retryOpts?: {
+    maxAttempts?: number;
+    baseDelayMs?: number;
+}): (payload: unknown, ctx?: Record<string, unknown>) => Promise<WebhookResult>;
+//# sourceMappingURL=retry.d.ts.map

package/dist/webhooks/retry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"retry.d.ts","sourceRoot":"","sources":["../../src/webhooks/retry.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAKH,OAAO,KAAK,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAIlE;;;;;GAKG;AACH,wBAAsB,gBAAgB,CAAC,CAAC,EACtC,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EACpB,IAAI,CAAC,EAAE,gBAAgB,GAAG;IAAE,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,GAC3C,OAAO,CAAC,CAAC,CAAC,CAiDZ;AAID,4DAA4D;AAC5D,MAAM,MAAM,gBAAgB,GAAG,WAAW,GAAG,WAAW,GAAG,MAAM,CAAC;AAElE,gDAAgD;AAChD,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,gBAAgB,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,OAAO,GAAG,gBAAgB,CA6B5D;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAChC,GAAG,EAAE,OAAO,EACZ,QAAQ,EAAE,MAAM,EAChB,OAAO,CAAC,EAAE,MAAM,GACf,YAAY,CAUd;AAID,oEAAoE;AACpE,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,YAAY,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;;GAIG;AACH,qBAAa,eAAe;IAC1B,OAAO,CAAC,OAAO,CAAyB;IACxC,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,QAAQ,CAAgB;IAChC,OAAO,CAAC,KAAK,CAAS;IAEtB;;;;OAIG;gBACS,OAAO,SAAM,EAAE,QAAQ,CAAC,EAAE,MAAM;IAS5C,mDAAmD;IACnD,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,eAAe,EAAE,IAAI,GAAG,aAAa,CAAC,GAAG,IAAI;IAsB7D,wDAAwD;IACxD,IAAI,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,eAAe,EAAE;IAO1C,oDAAoD;IACpD,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO;IAQ3B,8DAA8D;IAC9D,KAAK,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM;IAchC,sCAAsC;IACtC,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED,uEAAuE;IACvE,IAAI,UAAU,IAAI,OAAO,CAExB;IAID,oFAAoF;IACpF,OAAO,CAAC,YAAY;IAwBpB,gFAAgF;IAChF,OAAO,CAAC,OAAO;IAYf,OAAO,CAAC,WAAW;CAsBpB;AAID;;;GAGG;AACH,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,MAAM,EACd,EAAE,EAAE,CACF,OAAO,EAAE,OAAO,EAChB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAC1B,OAAO,CAAC,aAAa,CAAC,EAC3B,SAAS,CAAC,EAAE;IAAE,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE,GACzD,CACD,OAAO,EAAE,OAAO,EAChB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAC1B,OAAO,CAAC,aAAa,CAAC,CAO1B"}

package/dist/webhooks/retry.js

@@ -0,0 +1,270 @@
+/**
+ * Retry logic and error handling for webhook processing.
+ *
+ * Provides exponential backoff with jitter for transient failures,
+ * dead-letter tracking for permanently failed events, and
+ * error classification utilities.
+ */
+import * as fs from "node:fs";
+import * as path from "node:path";
+import { logActivity } from "../activity/log.js";
+// ── Retry with exponential backoff ───────────────────────────────────────────
+/**
+ * Execute a function with retry logic.
+ * Retries on thrown errors, stops on success or exhaustion.
+ * Uses exponential backoff with jitter:
+ *   delay = min(baseDelay × 2^(attempt-1), maxDelay) × random(0.5–1.5)
+ */
+export async function withWebhookRetry(fn, opts) {
+    const maxAttempts = opts?.maxAttempts ?? 3;
+    const baseDelay = opts?.baseDelayMs ?? 500;
+    const maxDelay = opts?.maxDelayMs ?? 10_000;
+    const label = opts?.label ?? "webhook";
+    const retryStart = performance.now();
+    let lastError;
+    let totalSleepMs = 0;
+    for (let attempt = 1; attempt <= maxAttempts; attempt++) {
+        const attemptStart = performance.now();
+        try {
+            const result = await fn();
+            const attemptMs = performance.now() - attemptStart;
+            if (attempt > 1) {
+                const totalMs = performance.now() - retryStart;
+                logActivity({
+                    source: "system",
+                    summary: `[perf] ${label}: succeeded on attempt ${attempt}/${maxAttempts} — attempt:${attemptMs.toFixed(1)}ms, totalRetry:${totalMs.toFixed(1)}ms, totalSleep:${totalSleepMs.toFixed(0)}ms`,
+                });
+            }
+            return result;
+        }
+        catch (err) {
+            lastError = err;
+            const attemptMs = performance.now() - attemptStart;
+            const errMsg = err instanceof Error ? err.message : String(err);
+            const errKind = classifyError(err);
+            if (attempt < maxAttempts) {
+                const delay = Math.min(baseDelay * 2 ** (attempt - 1), maxDelay);
+                const jitter = delay * (0.5 + Math.random() * 0.5);
+                totalSleepMs += jitter;
+                logActivity({
+                    source: "system",
+                    summary: `${label}: attempt ${attempt}/${maxAttempts} failed (${errKind}, ${attemptMs.toFixed(1)}ms: ${errMsg}), retrying in ${Math.round(jitter)}ms`,
+                });
+                await new Promise((resolve) => setTimeout(resolve, jitter));
+            }
+            else {
+                const totalMs = performance.now() - retryStart;
+                logActivity({
+                    source: "system",
+                    summary: `[perf] ${label}: exhausted ${maxAttempts} attempts — total:${totalMs.toFixed(1)}ms, sleep:${totalSleepMs.toFixed(0)}ms, lastAttempt:${attemptMs.toFixed(1)}ms, error:${errKind}:${errMsg}`,
+                });
+            }
+        }
+    }
+    opts?.onExhausted?.(lastError, maxAttempts);
+    throw lastError;
+}
+/**
+ * Classify an error for retry decisions.
+ * - Network errors, 429, 5xx → transient (retry)
+ * - 400, 404, validation → permanent (don't retry)
+ * - 401, 403 → auth (don't retry, flag for re-auth)
+ */
+export function classifyError(err) {
+    if (err instanceof Error) {
+        const msg = err.message.toLowerCase();
+        // Auth errors
+        if (msg.includes("unauthorized") || msg.includes("forbidden")) {
+            return "auth";
+        }
+        if (msg.includes("401") || msg.includes("403")) {
+            return "auth";
+        }
+        // Transient errors
+        if (msg.includes("timeout") ||
+            msg.includes("econnreset") ||
+            msg.includes("econnrefused") ||
+            msg.includes("socket hang up") ||
+            msg.includes("429") ||
+            msg.includes("rate limit") ||
+            msg.includes("503") ||
+            msg.includes("502") ||
+            msg.includes("504")) {
+            return "transient";
+        }
+    }
+    return "permanent";
+}
+/**
+ * Create a WebhookError from a caught exception.
+ */
+export function createWebhookError(err, provider, attempt) {
+    const message = err instanceof Error ? err.message : String(err);
+    return {
+        kind: classifyError(err),
+        message,
+        provider,
+        timestamp: new Date().toISOString(),
+        attempt,
+        cause: err,
+    };
+}
+/**
+ * Dead-letter queue for failed webhook events.
+ * Stores events that exhausted all retries for manual inspection or replay.
+ * Optionally persists to a JSON file to survive process restarts.
+ */
+export class DeadLetterQueue {
+    entries = [];
+    maxSize;
+    filePath;
+    dirty = false;
+    /**
+     * @param maxSize Maximum entries to keep in the queue.
+     * @param filePath Optional file path for persistence. If provided, entries
+     *                 are loaded on construction and saved on mutation.
+     */
+    constructor(maxSize = 100, filePath) {
+        this.maxSize = maxSize;
+        this.filePath = filePath ?? null;
+        if (this.filePath) {
+            this.loadFromFile();
+        }
+    }
+    /** Add a failed event to the dead-letter queue. */
+    add(entry) {
+        const dlEntry = {
+            ...entry,
+            id: `dlq_${Date.now()}_${Math.random().toString(36).slice(2, 8)}`,
+            exhaustedAt: new Date().toISOString(),
+        };
+        this.entries.push(dlEntry);
+        // Evict oldest entries if over capacity
+        if (this.entries.length > this.maxSize) {
+            this.entries = this.entries.slice(-this.maxSize);
+        }
+        logActivity({
+            source: "system",
+            summary: `Dead-letter: ${entry.provider} event added (${entry.error.message})`,
+        });
+        this.persist();
+    }
+    /** Get all entries, optionally filtered by provider. */
+    list(provider) {
+        if (provider) {
+            return this.entries.filter((e) => e.provider === provider);
+        }
+        return [...this.entries];
+    }
+    /** Remove an entry by ID. Returns true if found. */
+    remove(id) {
+        const idx = this.entries.findIndex((e) => e.id === id);
+        if (idx === -1)
+            return false;
+        this.entries.splice(idx, 1);
+        this.persist();
+        return true;
+    }
+    /** Remove all entries, optionally for a specific provider. */
+    clear(provider) {
+        if (provider) {
+            const before = this.entries.length;
+            this.entries = this.entries.filter((e) => e.provider !== provider);
+            const removed = before - this.entries.length;
+            if (removed > 0)
+                this.persist();
+            return removed;
+        }
+        const count = this.entries.length;
+        this.entries = [];
+        if (count > 0)
+            this.persist();
+        return count;
+    }
+    /** Number of entries in the queue. */
+    get size() {
+        return this.entries.length;
+    }
+    /** Whether the queue has a file-backed persistence path configured. */
+    get persistent() {
+        return this.filePath !== null;
+    }
+    // ── File persistence ────────────────────────────────────────────────────────
+    /** Load entries from the persistence file. Silently skips if file doesn't exist. */
+    loadFromFile() {
+        if (!this.filePath)
+            return;
+        try {
+            const resolved = path.resolve(this.filePath);
+            if (!fs.existsSync(resolved))
+                return;
+            const content = fs.readFileSync(resolved, "utf-8");
+            const parsed = JSON.parse(content);
+            if (Array.isArray(parsed)) {
+                this.entries = parsed.slice(-this.maxSize);
+                logActivity({
+                    source: "system",
+                    summary: `DLQ: loaded ${this.entries.length} entries from ${this.filePath}`,
+                });
+            }
+        }
+        catch (err) {
+            const msg = err instanceof Error ? err.message : String(err);
+            logActivity({
+                source: "system",
+                summary: `DLQ: failed to load from ${this.filePath}: ${msg}`,
+            });
+        }
+    }
+    /** Persist current entries to the file. Debounced to avoid excessive writes. */
+    persist() {
+        if (!this.filePath)
+            return;
+        if (this.dirty)
+            return; // already scheduled
+        this.dirty = true;
+        // Debounce: write on next tick to batch rapid mutations
+        queueMicrotask(() => {
+            this.dirty = false;
+            this.writeToFile();
+        });
+    }
+    writeToFile() {
+        if (!this.filePath)
+            return;
+        try {
+            const resolved = path.resolve(this.filePath);
+            const dir = path.dirname(resolved);
+            if (!fs.existsSync(dir)) {
+                fs.mkdirSync(dir, { recursive: true });
+            }
+            // Exclude non-serializable `cause` from errors before writing
+            const serializable = this.entries.map((e) => ({
+                ...e,
+                error: { ...e.error, cause: undefined },
+            }));
+            fs.writeFileSync(resolved, JSON.stringify(serializable, null, 2), "utf-8");
+        }
+        catch (err) {
+            const msg = err instanceof Error ? err.message : String(err);
+            logActivity({
+                source: "system",
+                summary: `DLQ: failed to persist to ${this.filePath}: ${msg}`,
+            });
+        }
+    }
+}
+// ── Retry-wrapped handler factory ────────────────────────────────────────────
+/**
+ * Wrap a webhook handler with retry logic.
+ * Useful for handlers that call external APIs that may transiently fail.
+ */
+export function withRetryHandler(source, fn, retryOpts) {
+    return async (payload, ctx) => {
+        return withWebhookRetry(() => fn(payload, ctx), {
+            label: source,
+            ...retryOpts,
+        });
+    };
+}
+//# sourceMappingURL=retry.js.map

package/dist/webhooks/retry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"retry.js","sourceRoot":"","sources":["../../src/webhooks/retry.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAGjD,gFAAgF;AAEhF;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,EAAoB,EACpB,IAA4C;IAE5C,MAAM,WAAW,GAAG,IAAI,EAAE,WAAW,IAAI,CAAC,CAAC;IAC3C,MAAM,SAAS,GAAG,IAAI,EAAE,WAAW,IAAI,GAAG,CAAC;IAC3C,MAAM,QAAQ,GAAG,IAAI,EAAE,UAAU,IAAI,MAAM,CAAC;IAC5C,MAAM,KAAK,GAAG,IAAI,EAAE,KAAK,IAAI,SAAS,CAAC;IACvC,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;IACrC,IAAI,SAAkB,CAAC;IACvB,IAAI,YAAY,GAAG,CAAC,CAAC;IAErB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,WAAW,EAAE,OAAO,EAAE,EAAE,CAAC;QACxD,MAAM,YAAY,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QACvC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,EAAE,EAAE,CAAC;YAC1B,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,YAAY,CAAC;YACnD,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;gBAChB,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,UAAU,CAAC;gBAC/C,WAAW,CAAC;oBACV,MAAM,EAAE,QAAQ;oBAChB,OAAO,EAAE,UAAU,KAAK,0BAA0B,OAAO,IAAI,WAAW,cAAc,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,kBAAkB,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,kBAAkB,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI;iBAC5L,CAAC,CAAC;YACL,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,SAAS,GAAG,GAAG,CAAC;YAChB,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,YAAY,CAAC;YACnD,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAChE,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;YAEnC,IAAI,OAAO,GAAG,WAAW,EAAE,CAAC;gBAC1B,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,GAAG,CAAC,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;gBACjE,MAAM,MAAM,GAAG,KAAK,GAAG,CAAC,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC;gBACnD,YAAY,IAAI,MAAM,CAAC;gBACvB,WAAW,CAAC;oBACV,MAAM,EAAE,QAAQ;oBAChB,OAAO,EAAE,GAAG,KAAK,aAAa,OAAO,IAAI,WAAW,YAAY,OAAO,KAAK,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,MAAM,kBAAkB,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI;iBACtJ,CAAC,CAAC;gBACH,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;YAC9D,CAAC;iBAAM,CAAC;gBACN,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,UAAU,CAAC;gBAC/C,WAAW,CAAC;oBACV,MAAM,EAAE,QAAQ;oBAChB,OAAO,EAAE,UAAU,KAAK,eAAe,WAAW,qBAAqB,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,mBAAmB,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,OAAO,IAAI,MAAM,EAAE;iBACrM,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,EAAE,WAAW,EAAE,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IAC5C,MAAM,SAAS,CAAC;AAClB,CAAC;AAiBD;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,GAAY;IACxC,IAAI,GAAG,YAAY,KAAK,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;QAEtC,cAAc;QACd,IAAI,GAAG,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YAC9D,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC/C,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,mBAAmB;QACnB,IACE,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC;YACvB,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC;YAC1B,GAAG,CAAC,QAAQ,CAAC,cAAc,CAAC;YAC5B,GAAG,CAAC,QAAQ,CAAC,gBAAgB,CAAC;YAC9B,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC;YACnB,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC;YAC1B,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC;YACnB,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC;YACnB,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,EACnB,CAAC;YACD,OAAO,WAAW,CAAC;QACrB,CAAC;IACH,CAAC;IAED,OAAO,WAAW,CAAC;AACrB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAChC,GAAY,EACZ,QAAgB,EAChB,OAAgB;IAEhB,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACjE,OAAO;QACL,IAAI,EAAE,aAAa,CAAC,GAAG,CAAC;QACxB,OAAO;QACP,QAAQ;QACR,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,OAAO;QACP,KAAK,EAAE,GAAG;KACX,CAAC;AACJ,CAAC;AAeD;;;;GAIG;AACH,MAAM,OAAO,eAAe;IAClB,OAAO,GAAsB,EAAE,CAAC;IAChC,OAAO,CAAS;IAChB,QAAQ,CAAgB;IACxB,KAAK,GAAG,KAAK,CAAC;IAEtB;;;;OAIG;IACH,YAAY,OAAO,GAAG,GAAG,EAAE,QAAiB;QAC1C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,QAAQ,GAAG,QAAQ,IAAI,IAAI,CAAC;QAEjC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,IAAI,CAAC,YAAY,EAAE,CAAC;QACtB,CAAC;IACH,CAAC;IAED,mDAAmD;IACnD,GAAG,CAAC,KAAkD;QACpD,MAAM,OAAO,GAAoB;YAC/B,GAAG,KAAK;YACR,EAAE,EAAE,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE;YACjE,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACtC,CAAC;QAEF,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAE3B,wCAAwC;QACxC,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;YACvC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACnD,CAAC;QAED,WAAW,CAAC;YACV,MAAM,EAAE,QAAQ;YAChB,OAAO,EAAE,gBAAgB,KAAK,CAAC,QAAQ,iBAAiB,KAAK,CAAC,KAAK,CAAC,OAAO,GAAG;SAC/E,CAAC,CAAC;QAEH,IAAI,CAAC,OAAO,EAAE,CAAC;IACjB,CAAC;IAED,wDAAwD;IACxD,IAAI,CAAC,QAAiB;QACpB,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;QAC7D,CAAC;QACD,OAAO,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;IAC3B,CAAC;IAED,oDAAoD;IACpD,MAAM,CAAC,EAAU;QACf,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QACvD,IAAI,GAAG,KAAK,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;QAC7B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAC5B,IAAI,CAAC,OAAO,EAAE,CAAC;QACf,OAAO,IAAI,CAAC;IACd,CAAC;IAED,8DAA8D;IAC9D,KAAK,CAAC,QAAiB;QACrB,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;YACnC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;YACnE,MAAM,OAAO,GAAG,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;YAC7C,IAAI,OAAO,GAAG,CAAC;gBAAE,IAAI,CAAC,OAAO,EAAE,CAAC;YAChC,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;QAClC,IAAI,CAAC,OAAO,GAAG,EAAE,CAAC;QAClB,IAAI,KAAK,GAAG,CAAC;YAAE,IAAI,CAAC,OAAO,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC;IACf,CAAC;IAED,sCAAsC;IACtC,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;IAC7B,CAAC;IAED,uEAAuE;IACvE,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC;IAChC,CAAC;IAED,+EAA+E;IAE/E,oFAAoF;IAC5E,YAAY;QAClB,IAAI,CAAC,IAAI,CAAC,QAAQ;YAAE,OAAO;QAC3B,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC7C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;gBAAE,OAAO;YAErC,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YACnD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACnC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC1B,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBAC3C,WAAW,CAAC;oBACV,MAAM,EAAE,QAAQ;oBAChB,OAAO,EAAE,eAAe,IAAI,CAAC,OAAO,CAAC,MAAM,iBAAiB,IAAI,CAAC,QAAQ,EAAE;iBAC5E,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,WAAW,CAAC;gBACV,MAAM,EAAE,QAAQ;gBAChB,OAAO,EAAE,4BAA4B,IAAI,CAAC,QAAQ,KAAK,GAAG,EAAE;aAC7D,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,gFAAgF;IACxE,OAAO;QACb,IAAI,CAAC,IAAI,CAAC,QAAQ;YAAE,OAAO;QAC3B,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO,CAAC,oBAAoB;QAC5C,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAElB,wDAAwD;QACxD,cAAc,CAAC,GAAG,EAAE;YAClB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;YACnB,IAAI,CAAC,WAAW,EAAE,CAAC;QACrB,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,WAAW;QACjB,IAAI,CAAC,IAAI,CAAC,QAAQ;YAAE,OAAO;QAC3B,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC7C,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YACnC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBACxB,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACzC,CAAC;YACD,8DAA8D;YAC9D,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC5C,GAAG,CAAC;gBACJ,KAAK,EAAE,EAAE,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE;aACxC,CAAC,CAAC,CAAC;YACJ,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QAC7E,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,WAAW,CAAC;gBACV,MAAM,EAAE,QAAQ;gBAChB,OAAO,EAAE,6BAA6B,IAAI,CAAC,QAAQ,KAAK,GAAG,EAAE;aAC9D,CAAC,CAAC;QACL,CAAC;IACH,CAAC;CACF;AAED,gFAAgF;AAEhF;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAC9B,MAAc,EACd,EAG2B,EAC3B,SAA0D;IAK1D,OAAO,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE;QAC5B,OAAO,gBAAgB,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE;YAC9C,KAAK,EAAE,MAAM;YACb,GAAG,SAAS;SACb,CAAC,CAAC;IACL,CAAC,CAAC;AACJ,CAAC"}