@shipfox/api-integration-core 12.2.0 → 12.3.0

package/.turbo/turbo-build.log

@@ -1,17 +1,20 @@
 $ shipfox-swc && shipfox-temporal-bundle dist/temporal/workflows/index.js
-Successfully compiled: 50 files with swc (632.34ms)
-2026-08-06T13:13:12.437Z [INFO] asset workflow-bundle-646aca428e9943f8cf17.js 3.17 MiB [emitted] [immutable] (name: main)
+Successfully compiled: 54 files with swc (479.94ms)
+2026-08-07T08:47:05.106Z [INFO] asset workflow-bundle-e0d869d865fd59433325.js 3.17 MiB [emitted] [immutable] (name: main)
 orphan modules 33.5 KiB [orphan] 21 modules
 runtime modules 1.13 KiB 5 modules
 modules by path ../../../../node_modules/.pnpm/ 970 KiB 196 modules
-modules by path ./dist/temporal/workflows/ 1.39 KiB
+modules by path ./dist/temporal/ 2.41 KiB
+  modules by path ./dist/temporal/workflows/*.js 1.29 KiB
+    ./dist/temporal/workflows/index.js 169 bytes [built] [code generated]
+    ./dist/temporal/workflows/cleanup-integration-secrets-cron.js 750 bytes [built] [code generated]
+    ./dist/temporal/workflows/prune-webhook-deliveries-cron.js 405 bytes [built] [code generated]
   ./dist/temporal/workflows/index-autogenerated-entrypoint.cjs 941 bytes [built] [code generated]
-  ./dist/temporal/workflows/index.js 82 bytes [built] [code generated]
-  ./dist/temporal/workflows/prune-webhook-deliveries-cron.js 405 bytes [built] [code generated]
+  ./dist/temporal/constants.js 198 bytes [built] [code generated]
 optional modules 30 bytes [optional]
   __temporal_custom_payload_converter (ignored) 15 bytes [optional] [built] [code generated]
   __temporal_custom_failure_converter (ignored) 15 bytes [optional] [built] [code generated]
 ../../../shared/node/temporal/dist/workflow-error-interceptor.js 1.21 KiB [built] [code generated]
-webpack 5.107.2 compiled successfully in 10166 ms
-2026-08-06T13:13:12.466Z [INFO] Workflow bundle created { size: '3.17MB' }
-/home/runner/work/shipfox/shipfox/libs/api/integration/core/dist/temporal/workflows/index.js: 3323154 bytes
+webpack 5.107.2 compiled successfully in 5802 ms
+2026-08-07T08:47:05.141Z [INFO] Workflow bundle created { size: '3.17MB' }
+/home/runner/work/shipfox/shipfox/libs/api/integration/core/dist/temporal/workflows/index.js: 3328998 bytes

package/CHANGELOG.md

@@ -1,5 +1,23 @@
 # @shipfox/api-integration-core
 
+## 12.3.0
+
+### Patch Changes
+
+- e972eb3: Makes integration secret cleanup retryable after connection deletion.
+- e0110fe: Adds Jira webhook renewal and disconnect deregistration support.
+- Updated dependencies [4b0731e]
+- Updated dependencies [e0110fe]
+  - @shipfox/api-workflows-dto@12.3.0
+  - @shipfox/api-integration-jira@12.3.0
+  - @shipfox/api-integration-spi@1.1.0
+  - @shipfox/api-integration-gitea@12.3.0
+  - @shipfox/api-integration-github@12.3.0
+  - @shipfox/api-integration-linear@12.3.0
+  - @shipfox/api-integration-sentry@12.3.0
+  - @shipfox/api-integration-slack@12.3.0
+  - @shipfox/api-integration-webhook@12.3.0
+
 ## 12.2.0
 
 ### Patch Changes

package/dist/core/secret-cleanup.d.ts

@@ -0,0 +1,20 @@
+import type { IntegrationConnection } from '#core/entities/connection.js';
+import type { IntegrationProviderRegistry } from '#core/providers/registry.js';
+export interface ProcessIntegrationSecretCleanupsOptions {
+    registry: IntegrationProviderRegistry;
+    connectionId?: string | undefined;
+    connection?: IntegrationConnection | undefined;
+    limit?: number | undefined;
+    now?: Date | undefined;
+    heartbeat?: (() => void) | undefined;
+}
+export interface ProcessIntegrationSecretCleanupsResult {
+    claimed: number;
+    completed: number;
+    failed: number;
+    unavailable: number;
+    /** Rows whose lease was taken over by another sweep before this one acknowledged them. */
+    unacknowledged: number;
+}
+export declare function processIntegrationSecretCleanups(options: ProcessIntegrationSecretCleanupsOptions): Promise<ProcessIntegrationSecretCleanupsResult>;
+//# sourceMappingURL=secret-cleanup.d.ts.map

package/dist/core/secret-cleanup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-cleanup.d.ts","sourceRoot":"","sources":["../../src/core/secret-cleanup.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAC,qBAAqB,EAAC,MAAM,8BAA8B,CAAC;AACxE,OAAO,KAAK,EAAC,2BAA2B,EAAC,MAAM,6BAA6B,CAAC;AAkB7E,MAAM,WAAW,uCAAuC;IACtD,QAAQ,EAAE,2BAA2B,CAAC;IACtC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,UAAU,CAAC,EAAE,qBAAqB,GAAG,SAAS,CAAC;IAC/C,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,GAAG,CAAC,EAAE,IAAI,GAAG,SAAS,CAAC;IACvB,SAAS,CAAC,EAAE,CAAC,MAAM,IAAI,CAAC,GAAG,SAAS,CAAC;CACtC;AAED,MAAM,WAAW,sCAAsC;IACrD,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,0FAA0F;IAC1F,cAAc,EAAE,MAAM,CAAC;CACxB;AAID,wBAAsB,gCAAgC,CACpD,OAAO,EAAE,uCAAuC,GAC/C,OAAO,CAAC,sCAAsC,CAAC,CAyDjD"}

package/dist/core/secret-cleanup.js

@@ -0,0 +1,178 @@
+import { reportError } from '@shipfox/node-error-monitoring';
+import { logger } from '@shipfox/node-opentelemetry';
+import { claimIntegrationSecretCleanups, completeIntegrationSecretCleanup, retryIntegrationSecretCleanup } from '#db/secret-cleanups.js';
+const RETRY_BASE_DELAY_MS = 60 * 1_000;
+const RETRY_MAX_DELAY_MS = 60 * 60 * 1_000;
+const DEFAULT_BATCH_SIZE = 100;
+const HEARTBEAT_INTERVAL_MS = 15_000;
+const STUCK_CLEANUP_ALERT_CACHE_LIMIT = 10_000;
+// Attempts, not hours: the backoff caps at RETRY_MAX_DELAY_MS, so a stuck row is retried
+// hourly and this threshold lands about a week out. Revisit it alongside that cap.
+const STUCK_CLEANUP_ATTEMPT_COUNT = 7 * 24;
+const reportedStuckCleanupIds = new Set();
+export async function processIntegrationSecretCleanups(options) {
+    const cleanups = await claimIntegrationSecretCleanups({
+        connectionId: options.connectionId,
+        limit: options.limit ?? DEFAULT_BATCH_SIZE,
+        now: options.now ?? new Date()
+    });
+    const result = {
+        claimed: cleanups.length,
+        completed: 0,
+        failed: 0,
+        unavailable: 0,
+        unacknowledged: 0
+    };
+    for (const cleanup of cleanups){
+        // Keep heartbeating through the provider call itself. Beating only between rows would
+        // let one slow deletion trip the activity's heartbeat timeout and kill the whole sweep.
+        options.heartbeat?.();
+        const heartbeatInterval = setInterval(()=>options.heartbeat?.(), HEARTBEAT_INTERVAL_MS);
+        // A single row must never strand the rest of the claimed batch under its lease.
+        try {
+            const provider = options.registry.list().find((candidate)=>candidate.provider === cleanup.provider);
+            if (!provider) {
+                result.unavailable += 1;
+                if (!await scheduleRetry(cleanup, 'provider-unavailable')) {
+                    result.unacknowledged += 1;
+                }
+                continue;
+            }
+            // A loaded provider without the hook has no secrets to delete, so the intent is
+            // already satisfied and the row can retire.
+            await provider.deleteConnectionSecrets?.(getCleanupConnection(cleanup, options.connection));
+            const acknowledged = await completeIntegrationSecretCleanup({
+                id: cleanup.id,
+                leaseToken: requireLeaseToken(cleanup)
+            });
+            if (acknowledged) {
+                result.completed += 1;
+            } else {
+                result.unacknowledged += 1;
+                logLeaseLost(cleanup, 'complete');
+            }
+        } catch (error) {
+            result.failed += 1;
+            if (!await scheduleRetry(cleanup, 'cleanup-failed', error)) {
+                result.unacknowledged += 1;
+            }
+        } finally{
+            clearInterval(heartbeatInterval);
+            options.heartbeat?.();
+        }
+    }
+    return result;
+}
+function getCleanupConnection(cleanup, connection) {
+    if (connection?.id === cleanup.connectionId) return connection;
+    return {
+        id: cleanup.connectionId,
+        workspaceId: cleanup.workspaceId,
+        provider: cleanup.provider,
+        externalAccountId: cleanup.externalAccountId,
+        slug: cleanup.slug,
+        displayName: cleanup.displayName,
+        lifecycleStatus: cleanup.lifecycleStatus,
+        createdAt: cleanup.connectionCreatedAt,
+        updatedAt: cleanup.connectionUpdatedAt
+    };
+}
+async function scheduleRetry(cleanup, reason, error) {
+    const delayMs = retryDelayMs(cleanup.attemptCount);
+    logCleanupRetry(cleanup, reason, delayMs, error);
+    if (error !== undefined) {
+        reportError(error, {
+            boundary: 'integration.secret-cleanup',
+            operation: 'delete-connection-secrets',
+            tags: {
+                provider: cleanup.provider
+            }
+        });
+    }
+    // Keep escalating past the threshold. A stuck row means secrets may still exist, and
+    // one missed alert would hide that forever. The bounded per-cleanup cache suppresses
+    // duplicate reports in this worker while allowing a fresh process to re-alert.
+    if (cleanup.attemptCount >= STUCK_CLEANUP_ATTEMPT_COUNT) {
+        const stuckErrorMessage = 'Integration connection secret cleanup exceeded its retry threshold';
+        logger().error({
+            provider: cleanup.provider,
+            connectionId: cleanup.connectionId,
+            attempt: cleanup.attemptCount
+        }, stuckErrorMessage);
+        if (!reportedStuckCleanupIds.has(cleanup.id)) {
+            const eventId = reportError(new Error(stuckErrorMessage), {
+                boundary: 'integration.secret-cleanup',
+                operation: 'stuck-cleanup',
+                tags: {
+                    provider: cleanup.provider
+                },
+                extra: {
+                    cleanupId: cleanup.id
+                }
+            });
+            if (eventId) {
+                reportedStuckCleanupIds.add(cleanup.id);
+                if (reportedStuckCleanupIds.size > STUCK_CLEANUP_ALERT_CACHE_LIMIT) {
+                    const oldestCleanupId = reportedStuckCleanupIds.values().next().value;
+                    if (oldestCleanupId !== undefined) reportedStuckCleanupIds.delete(oldestCleanupId);
+                }
+            }
+        }
+    }
+    try {
+        const rescheduled = await retryIntegrationSecretCleanup({
+            id: cleanup.id,
+            leaseToken: requireLeaseToken(cleanup),
+            delayMs
+        });
+        if (!rescheduled) {
+            logLeaseLost(cleanup, 'retry');
+            return false;
+        }
+        return true;
+    } catch (retryError) {
+        // The lease expires on its own, so a later sweep still picks this row up.
+        logger().error({
+            provider: cleanup.provider,
+            connectionId: cleanup.connectionId,
+            err: retryError
+        }, 'Failed to reschedule integration connection secret cleanup');
+        reportError(retryError, {
+            boundary: 'integration.secret-cleanup',
+            operation: 'reschedule-cleanup',
+            tags: {
+                provider: cleanup.provider
+            }
+        });
+        return false;
+    }
+}
+function retryDelayMs(attemptCount) {
+    return Math.min(RETRY_BASE_DELAY_MS * 2 ** Math.max(0, attemptCount - 1), RETRY_MAX_DELAY_MS);
+}
+function requireLeaseToken(cleanup) {
+    if (!cleanup.leaseToken) throw new Error('Claimed integration secret cleanup has no lease token');
+    return cleanup.leaseToken;
+}
+function logCleanupRetry(cleanup, reason, delayMs, error) {
+    logger().warn({
+        provider: cleanup.provider,
+        connectionId: cleanup.connectionId,
+        attempt: cleanup.attemptCount,
+        reason,
+        delayMs,
+        ...error === undefined ? {} : {
+            err: error
+        }
+    }, 'Integration connection secret cleanup will be retried');
+}
+function logLeaseLost(cleanup, operation) {
+    logger().warn({
+        provider: cleanup.provider,
+        connectionId: cleanup.connectionId,
+        attempt: cleanup.attemptCount,
+        operation
+    }, 'Integration connection secret cleanup lease was lost before acknowledgement');
+}
+
+//# sourceMappingURL=secret-cleanup.js.map

package/dist/core/secret-cleanup.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/core/secret-cleanup.ts"],"sourcesContent":["import {reportError} from '@shipfox/node-error-monitoring';\nimport {logger} from '@shipfox/node-opentelemetry';\nimport type {IntegrationConnection} from '#core/entities/connection.js';\nimport type {IntegrationProviderRegistry} from '#core/providers/registry.js';\nimport {\n  claimIntegrationSecretCleanups,\n  completeIntegrationSecretCleanup,\n  type IntegrationSecretCleanup,\n  retryIntegrationSecretCleanup,\n} from '#db/secret-cleanups.js';\n\nconst RETRY_BASE_DELAY_MS = 60 * 1_000;\nconst RETRY_MAX_DELAY_MS = 60 * 60 * 1_000;\nconst DEFAULT_BATCH_SIZE = 100;\nconst HEARTBEAT_INTERVAL_MS = 15_000;\nconst STUCK_CLEANUP_ALERT_CACHE_LIMIT = 10_000;\n// Attempts, not hours: the backoff caps at RETRY_MAX_DELAY_MS, so a stuck row is retried\n// hourly and this threshold lands about a week out. Revisit it alongside that cap.\nconst STUCK_CLEANUP_ATTEMPT_COUNT = 7 * 24;\nconst reportedStuckCleanupIds = new Set<string>();\n\nexport interface ProcessIntegrationSecretCleanupsOptions {\n  registry: IntegrationProviderRegistry;\n  connectionId?: string | undefined;\n  connection?: IntegrationConnection | undefined;\n  limit?: number | undefined;\n  now?: Date | undefined;\n  heartbeat?: (() => void) | undefined;\n}\n\nexport interface ProcessIntegrationSecretCleanupsResult {\n  claimed: number;\n  completed: number;\n  failed: number;\n  unavailable: number;\n  /** Rows whose lease was taken over by another sweep before this one acknowledged them. */\n  unacknowledged: number;\n}\n\ntype CleanupRetryReason = 'provider-unavailable' | 'cleanup-failed';\n\nexport async function processIntegrationSecretCleanups(\n  options: ProcessIntegrationSecretCleanupsOptions,\n): Promise<ProcessIntegrationSecretCleanupsResult> {\n  const cleanups = await claimIntegrationSecretCleanups({\n    connectionId: options.connectionId,\n    limit: options.limit ?? DEFAULT_BATCH_SIZE,\n    now: options.now ?? new Date(),\n  });\n  const result: ProcessIntegrationSecretCleanupsResult = {\n    claimed: cleanups.length,\n    completed: 0,\n    failed: 0,\n    unavailable: 0,\n    unacknowledged: 0,\n  };\n\n  for (const cleanup of cleanups) {\n    // Keep heartbeating through the provider call itself. Beating only between rows would\n    // let one slow deletion trip the activity's heartbeat timeout and kill the whole sweep.\n    options.heartbeat?.();\n    const heartbeatInterval = setInterval(() => options.heartbeat?.(), HEARTBEAT_INTERVAL_MS);\n    // A single row must never strand the rest of the claimed batch under its lease.\n    try {\n      const provider = options.registry\n        .list()\n        .find((candidate) => candidate.provider === cleanup.provider);\n      if (!provider) {\n        result.unavailable += 1;\n        if (!(await scheduleRetry(cleanup, 'provider-unavailable'))) {\n          result.unacknowledged += 1;\n        }\n        continue;\n      }\n\n      // A loaded provider without the hook has no secrets to delete, so the intent is\n      // already satisfied and the row can retire.\n      await provider.deleteConnectionSecrets?.(getCleanupConnection(cleanup, options.connection));\n      const acknowledged = await completeIntegrationSecretCleanup({\n        id: cleanup.id,\n        leaseToken: requireLeaseToken(cleanup),\n      });\n      if (acknowledged) {\n        result.completed += 1;\n      } else {\n        result.unacknowledged += 1;\n        logLeaseLost(cleanup, 'complete');\n      }\n    } catch (error) {\n      result.failed += 1;\n      if (!(await scheduleRetry(cleanup, 'cleanup-failed', error))) {\n        result.unacknowledged += 1;\n      }\n    } finally {\n      clearInterval(heartbeatInterval);\n      options.heartbeat?.();\n    }\n  }\n\n  return result;\n}\n\nfunction getCleanupConnection(\n  cleanup: IntegrationSecretCleanup,\n  connection: IntegrationConnection | undefined,\n): IntegrationConnection {\n  if (connection?.id === cleanup.connectionId) return connection;\n  return {\n    id: cleanup.connectionId,\n    workspaceId: cleanup.workspaceId,\n    provider: cleanup.provider,\n    externalAccountId: cleanup.externalAccountId,\n    slug: cleanup.slug,\n    displayName: cleanup.displayName,\n    lifecycleStatus: cleanup.lifecycleStatus,\n    createdAt: cleanup.connectionCreatedAt,\n    updatedAt: cleanup.connectionUpdatedAt,\n  };\n}\n\nasync function scheduleRetry(\n  cleanup: IntegrationSecretCleanup,\n  reason: CleanupRetryReason,\n  error?: unknown,\n): Promise<boolean> {\n  const delayMs = retryDelayMs(cleanup.attemptCount);\n  logCleanupRetry(cleanup, reason, delayMs, error);\n  if (error !== undefined) {\n    reportError(error, {\n      boundary: 'integration.secret-cleanup',\n      operation: 'delete-connection-secrets',\n      tags: {provider: cleanup.provider},\n    });\n  }\n  // Keep escalating past the threshold. A stuck row means secrets may still exist, and\n  // one missed alert would hide that forever. The bounded per-cleanup cache suppresses\n  // duplicate reports in this worker while allowing a fresh process to re-alert.\n  if (cleanup.attemptCount >= STUCK_CLEANUP_ATTEMPT_COUNT) {\n    const stuckErrorMessage = 'Integration connection secret cleanup exceeded its retry threshold';\n    logger().error(\n      {\n        provider: cleanup.provider,\n        connectionId: cleanup.connectionId,\n        attempt: cleanup.attemptCount,\n      },\n      stuckErrorMessage,\n    );\n    if (!reportedStuckCleanupIds.has(cleanup.id)) {\n      const eventId = reportError(new Error(stuckErrorMessage), {\n        boundary: 'integration.secret-cleanup',\n        operation: 'stuck-cleanup',\n        tags: {provider: cleanup.provider},\n        extra: {cleanupId: cleanup.id},\n      });\n      if (eventId) {\n        reportedStuckCleanupIds.add(cleanup.id);\n        if (reportedStuckCleanupIds.size > STUCK_CLEANUP_ALERT_CACHE_LIMIT) {\n          const oldestCleanupId = reportedStuckCleanupIds.values().next().value;\n          if (oldestCleanupId !== undefined) reportedStuckCleanupIds.delete(oldestCleanupId);\n        }\n      }\n    }\n  }\n\n  try {\n    const rescheduled = await retryIntegrationSecretCleanup({\n      id: cleanup.id,\n      leaseToken: requireLeaseToken(cleanup),\n      delayMs,\n    });\n    if (!rescheduled) {\n      logLeaseLost(cleanup, 'retry');\n      return false;\n    }\n    return true;\n  } catch (retryError) {\n    // The lease expires on its own, so a later sweep still picks this row up.\n    logger().error(\n      {provider: cleanup.provider, connectionId: cleanup.connectionId, err: retryError},\n      'Failed to reschedule integration connection secret cleanup',\n    );\n    reportError(retryError, {\n      boundary: 'integration.secret-cleanup',\n      operation: 'reschedule-cleanup',\n      tags: {provider: cleanup.provider},\n    });\n    return false;\n  }\n}\n\nfunction retryDelayMs(attemptCount: number): number {\n  return Math.min(RETRY_BASE_DELAY_MS * 2 ** Math.max(0, attemptCount - 1), RETRY_MAX_DELAY_MS);\n}\n\nfunction requireLeaseToken(cleanup: IntegrationSecretCleanup): string {\n  if (!cleanup.leaseToken) throw new Error('Claimed integration secret cleanup has no lease token');\n  return cleanup.leaseToken;\n}\n\nfunction logCleanupRetry(\n  cleanup: IntegrationSecretCleanup,\n  reason: CleanupRetryReason,\n  delayMs: number,\n  error: unknown,\n): void {\n  logger().warn(\n    {\n      provider: cleanup.provider,\n      connectionId: cleanup.connectionId,\n      attempt: cleanup.attemptCount,\n      reason,\n      delayMs,\n      ...(error === undefined ? {} : {err: error}),\n    },\n    'Integration connection secret cleanup will be retried',\n  );\n}\n\nfunction logLeaseLost(cleanup: IntegrationSecretCleanup, operation: 'complete' | 'retry'): void {\n  logger().warn(\n    {\n      provider: cleanup.provider,\n      connectionId: cleanup.connectionId,\n      attempt: cleanup.attemptCount,\n      operation,\n    },\n    'Integration connection secret cleanup lease was lost before acknowledgement',\n  );\n}\n"],"names":["reportError","logger","claimIntegrationSecretCleanups","completeIntegrationSecretCleanup","retryIntegrationSecretCleanup","RETRY_BASE_DELAY_MS","RETRY_MAX_DELAY_MS","DEFAULT_BATCH_SIZE","HEARTBEAT_INTERVAL_MS","STUCK_CLEANUP_ALERT_CACHE_LIMIT","STUCK_CLEANUP_ATTEMPT_COUNT","reportedStuckCleanupIds","Set","processIntegrationSecretCleanups","options","cleanups","connectionId","limit","now","Date","result","claimed","length","completed","failed","unavailable","unacknowledged","cleanup","heartbeat","heartbeatInterval","setInterval","provider","registry","list","find","candidate","scheduleRetry","deleteConnectionSecrets","getCleanupConnection","connection","acknowledged","id","leaseToken","requireLeaseToken","logLeaseLost","error","clearInterval","workspaceId","externalAccountId","slug","displayName","lifecycleStatus","createdAt","connectionCreatedAt","updatedAt","connectionUpdatedAt","reason","delayMs","retryDelayMs","attemptCount","logCleanupRetry","undefined","boundary","operation","tags","stuckErrorMessage","attempt","has","eventId","Error","extra","cleanupId","add","size","oldestCleanupId","values","next","value","delete","rescheduled","retryError","err","Math","min","max","warn"],"mappings":"AAAA,SAAQA,WAAW,QAAO,iCAAiC;AAC3D,SAAQC,MAAM,QAAO,8BAA8B;AAGnD,SACEC,8BAA8B,EAC9BC,gCAAgC,EAEhCC,6BAA6B,QACxB,yBAAyB;AAEhC,MAAMC,sBAAsB,KAAK;AACjC,MAAMC,qBAAqB,KAAK,KAAK;AACrC,MAAMC,qBAAqB;AAC3B,MAAMC,wBAAwB;AAC9B,MAAMC,kCAAkC;AACxC,yFAAyF;AACzF,mFAAmF;AACnF,MAAMC,8BAA8B,IAAI;AACxC,MAAMC,0BAA0B,IAAIC;AAsBpC,OAAO,eAAeC,iCACpBC,OAAgD;IAEhD,MAAMC,WAAW,MAAMb,+BAA+B;QACpDc,cAAcF,QAAQE,YAAY;QAClCC,OAAOH,QAAQG,KAAK,IAAIV;QACxBW,KAAKJ,QAAQI,GAAG,IAAI,IAAIC;IAC1B;IACA,MAAMC,SAAiD;QACrDC,SAASN,SAASO,MAAM;QACxBC,WAAW;QACXC,QAAQ;QACRC,aAAa;QACbC,gBAAgB;IAClB;IAEA,KAAK,MAAMC,WAAWZ,SAAU;QAC9B,sFAAsF;QACtF,wFAAwF;QACxFD,QAAQc,SAAS;QACjB,MAAMC,oBAAoBC,YAAY,IAAMhB,QAAQc,SAAS,MAAMpB;QACnE,gFAAgF;QAChF,IAAI;YACF,MAAMuB,WAAWjB,QAAQkB,QAAQ,CAC9BC,IAAI,GACJC,IAAI,CAAC,CAACC,YAAcA,UAAUJ,QAAQ,KAAKJ,QAAQI,QAAQ;YAC9D,IAAI,CAACA,UAAU;gBACbX,OAAOK,WAAW,IAAI;gBACtB,IAAI,CAAE,MAAMW,cAAcT,SAAS,yBAA0B;oBAC3DP,OAAOM,cAAc,IAAI;gBAC3B;gBACA;YACF;YAEA,gFAAgF;YAChF,4CAA4C;YAC5C,MAAMK,SAASM,uBAAuB,GAAGC,qBAAqBX,SAASb,QAAQyB,UAAU;YACzF,MAAMC,eAAe,MAAMrC,iCAAiC;gBAC1DsC,IAAId,QAAQc,EAAE;gBACdC,YAAYC,kBAAkBhB;YAChC;YACA,IAAIa,cAAc;gBAChBpB,OAAOG,SAAS,IAAI;YACtB,OAAO;gBACLH,OAAOM,cAAc,IAAI;gBACzBkB,aAAajB,SAAS;YACxB;QACF,EAAE,OAAOkB,OAAO;YACdzB,OAAOI,MAAM,IAAI;YACjB,IAAI,CAAE,MAAMY,cAAcT,SAAS,kBAAkBkB,QAAS;gBAC5DzB,OAAOM,cAAc,IAAI;YAC3B;QACF,SAAU;YACRoB,cAAcjB;YACdf,QAAQc,SAAS;QACnB;IACF;IAEA,OAAOR;AACT;AAEA,SAASkB,qBACPX,OAAiC,EACjCY,UAA6C;IAE7C,IAAIA,YAAYE,OAAOd,QAAQX,YAAY,EAAE,OAAOuB;IACpD,OAAO;QACLE,IAAId,QAAQX,YAAY;QACxB+B,aAAapB,QAAQoB,WAAW;QAChChB,UAAUJ,QAAQI,QAAQ;QAC1BiB,mBAAmBrB,QAAQqB,iBAAiB;QAC5CC,MAAMtB,QAAQsB,IAAI;QAClBC,aAAavB,QAAQuB,WAAW;QAChCC,iBAAiBxB,QAAQwB,eAAe;QACxCC,WAAWzB,QAAQ0B,mBAAmB;QACtCC,WAAW3B,QAAQ4B,mBAAmB;IACxC;AACF;AAEA,eAAenB,cACbT,OAAiC,EACjC6B,MAA0B,EAC1BX,KAAe;IAEf,MAAMY,UAAUC,aAAa/B,QAAQgC,YAAY;IACjDC,gBAAgBjC,SAAS6B,QAAQC,SAASZ;IAC1C,IAAIA,UAAUgB,WAAW;QACvB7D,YAAY6C,OAAO;YACjBiB,UAAU;YACVC,WAAW;YACXC,MAAM;gBAACjC,UAAUJ,QAAQI,QAAQ;YAAA;QACnC;IACF;IACA,qFAAqF;IACrF,qFAAqF;IACrF,+EAA+E;IAC/E,IAAIJ,QAAQgC,YAAY,IAAIjD,6BAA6B;QACvD,MAAMuD,oBAAoB;QAC1BhE,SAAS4C,KAAK,CACZ;YACEd,UAAUJ,QAAQI,QAAQ;YAC1Bf,cAAcW,QAAQX,YAAY;YAClCkD,SAASvC,QAAQgC,YAAY;QAC/B,GACAM;QAEF,IAAI,CAACtD,wBAAwBwD,GAAG,CAACxC,QAAQc,EAAE,GAAG;YAC5C,MAAM2B,UAAUpE,YAAY,IAAIqE,MAAMJ,oBAAoB;gBACxDH,UAAU;gBACVC,WAAW;gBACXC,MAAM;oBAACjC,UAAUJ,QAAQI,QAAQ;gBAAA;gBACjCuC,OAAO;oBAACC,WAAW5C,QAAQc,EAAE;gBAAA;YAC/B;YACA,IAAI2B,SAAS;gBACXzD,wBAAwB6D,GAAG,CAAC7C,QAAQc,EAAE;gBACtC,IAAI9B,wBAAwB8D,IAAI,GAAGhE,iCAAiC;oBAClE,MAAMiE,kBAAkB/D,wBAAwBgE,MAAM,GAAGC,IAAI,GAAGC,KAAK;oBACrE,IAAIH,oBAAoBb,WAAWlD,wBAAwBmE,MAAM,CAACJ;gBACpE;YACF;QACF;IACF;IAEA,IAAI;QACF,MAAMK,cAAc,MAAM3E,8BAA8B;YACtDqC,IAAId,QAAQc,EAAE;YACdC,YAAYC,kBAAkBhB;YAC9B8B;QACF;QACA,IAAI,CAACsB,aAAa;YAChBnC,aAAajB,SAAS;YACtB,OAAO;QACT;QACA,OAAO;IACT,EAAE,OAAOqD,YAAY;QACnB,0EAA0E;QAC1E/E,SAAS4C,KAAK,CACZ;YAACd,UAAUJ,QAAQI,QAAQ;YAAEf,cAAcW,QAAQX,YAAY;YAAEiE,KAAKD;QAAU,GAChF;QAEFhF,YAAYgF,YAAY;YACtBlB,UAAU;YACVC,WAAW;YACXC,MAAM;gBAACjC,UAAUJ,QAAQI,QAAQ;YAAA;QACnC;QACA,OAAO;IACT;AACF;AAEA,SAAS2B,aAAaC,YAAoB;IACxC,OAAOuB,KAAKC,GAAG,CAAC9E,sBAAsB,KAAK6E,KAAKE,GAAG,CAAC,GAAGzB,eAAe,IAAIrD;AAC5E;AAEA,SAASqC,kBAAkBhB,OAAiC;IAC1D,IAAI,CAACA,QAAQe,UAAU,EAAE,MAAM,IAAI2B,MAAM;IACzC,OAAO1C,QAAQe,UAAU;AAC3B;AAEA,SAASkB,gBACPjC,OAAiC,EACjC6B,MAA0B,EAC1BC,OAAe,EACfZ,KAAc;IAEd5C,SAASoF,IAAI,CACX;QACEtD,UAAUJ,QAAQI,QAAQ;QAC1Bf,cAAcW,QAAQX,YAAY;QAClCkD,SAASvC,QAAQgC,YAAY;QAC7BH;QACAC;QACA,GAAIZ,UAAUgB,YAAY,CAAC,IAAI;YAACoB,KAAKpC;QAAK,CAAC;IAC7C,GACA;AAEJ;AAEA,SAASD,aAAajB,OAAiC,EAAEoC,SAA+B;IACtF9D,SAASoF,IAAI,CACX;QACEtD,UAAUJ,QAAQI,QAAQ;QAC1Bf,cAAcW,QAAQX,YAAY;QAClCkD,SAASvC,QAAQgC,YAAY;QAC7BI;IACF,GACA;AAEJ"}