@shipfox/api-integration-github 5.0.0 → 7.0.1

package/dist/presentation/routes/webhooks.js

@@ -1,16 +1,12 @@
-import { Buffer } from 'node:buffer';
-import { Webhooks } from '@octokit/webhooks';
-import { defineRoute, rawBodyPlugin, WEBHOOK_BODY_LIMIT } from '@shipfox/node-fastify';
-import { logger } from '@shipfox/node-opentelemetry';
-import { config } from '#config.js';
-import { handleGithubEvent } from '#core/webhook.js';
+import { randomUUID } from 'node:crypto';
+import { createStoredWebhookRequest, WEBHOOK_MAX_RAW_BODY_BYTES } from '@shipfox/api-integration-core-dto';
+import { ClientError, defineRoute, rawBodyPlugin, WEBHOOK_BODY_LIMIT } from '@shipfox/node-fastify';
+import { createGithubWebhookProcessor } from '#core/webhook-processor.js';
 const SIGNATURE_HEADER = 'x-hub-signature-256';
 const EVENT_HEADER = 'x-github-event';
 const DELIVERY_HEADER = 'x-github-delivery';
 export function createGithubWebhookRoutes(options) {
-    const webhooks = new Webhooks({
-        secret: config.GITHUB_APP_WEBHOOK_SECRET
-    });
+    const processor = options.processor ?? createGithubWebhookProcessor(options);
     const pushRoute = defineRoute({
         method: 'POST',
         path: '/',
@@ -41,58 +37,18 @@ export function createGithubWebhookRoutes(options) {
                     error: 'missing X-GitHub-Event header'
                 };
             }
-            const body = request.body;
-            if (!Buffer.isBuffer(body)) {
+            if (!(request.body instanceof Uint8Array)) {
                 reply.code(400);
                 return {
                     error: 'expected raw JSON body'
                 };
             }
-            const rawBody = body.toString('utf8');
-            let verified;
-            try {
-                verified = await webhooks.verify(rawBody, signature);
-            } catch (error) {
-                logger().warn({
-                    deliveryId,
-                    err: error
-                }, 'github webhook signature verification threw');
-                verified = false;
-            }
-            if (!verified) {
-                reply.code(401);
-                return {
-                    error: 'invalid signature'
-                };
-            }
-            let parsedJson;
-            try {
-                parsedJson = JSON.parse(rawBody);
-            } catch (error) {
-                logger().warn({
-                    deliveryId,
-                    err: error
-                }, 'github webhook payload JSON parse failed');
-                reply.code(400);
-                return {
-                    error: 'malformed JSON'
-                };
-            }
-            await options.coreDb().transaction(async (tx)=>{
-                await handleGithubEvent({
-                    tx,
-                    deliveryId,
-                    event,
-                    payload: parsedJson,
-                    publishIntegrationEventReceived: options.publishIntegrationEventReceived,
-                    publishSourcePush: options.publishSourcePush,
-                    recordDeliveryOnly: options.recordDeliveryOnly,
-                    getIntegrationConnectionById: options.getIntegrationConnectionById,
-                    deleteInstallationTokenSecret: options.deleteInstallationTokenSecret
-                });
-            });
-            reply.code(204);
-            return null;
+            const result = await processor.process(createGithubStoredWebhookRequest({
+                body: request.body,
+                headers: request.headers,
+                rawQueryString: request.raw.url?.split('?')[1] ?? ''
+            }));
+            return sendGithubWebhookResponse(reply, result);
         }
     });
     return {
@@ -106,5 +62,66 @@ export function createGithubWebhookRoutes(options) {
         ]
     };
 }
+function createGithubStoredWebhookRequest(input) {
+    if (input.body.byteLength > WEBHOOK_MAX_RAW_BODY_BYTES) {
+        throw new ClientError('Webhook request body is too large', 'body-too-large', {
+            status: 413
+        });
+    }
+    try {
+        return createStoredWebhookRequest({
+            requestId: randomUUID(),
+            routeId: 'github',
+            receivedAt: new Date().toISOString(),
+            rawQueryString: input.rawQueryString,
+            headers: githubWebhookHeaders(input.headers),
+            body: input.body
+        });
+    } catch (error) {
+        throw new ClientError('Webhook request metadata is invalid', 'invalid-webhook-request', {
+            cause: error
+        });
+    }
+}
+function githubWebhookHeaders(headers) {
+    return Object.fromEntries([
+        'content-type',
+        DELIVERY_HEADER,
+        EVENT_HEADER,
+        SIGNATURE_HEADER
+    ].flatMap((name)=>{
+        const value = headers[name];
+        return typeof value === 'string' ? [
+            [
+                name,
+                value
+            ]
+        ] : [];
+    }));
+}
+function sendGithubWebhookResponse(reply, result) {
+    if (result.outcome !== 'discarded') {
+        reply.code(204);
+        return null;
+    }
+    switch(result.reason){
+        case 'invalid_signature':
+            reply.code(401);
+            return {
+                error: 'invalid signature'
+            };
+        case 'malformed_payload':
+            reply.code(400);
+            return {
+                error: 'malformed JSON'
+            };
+        case 'connection_unavailable':
+        case 'missing_required_input':
+        case 'stale_at_receipt':
+        case 'unsupported_event':
+            reply.code(204);
+            return null;
+    }
+}
 
 //# sourceMappingURL=webhooks.js.map

package/dist/presentation/routes/webhooks.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/presentation/routes/webhooks.ts"],"sourcesContent":["import {Buffer} from 'node:buffer';\nimport {Webhooks} from '@octokit/webhooks';\nimport type {\n  GetIntegrationConnectionByIdFn,\n  PublishIntegrationEventReceivedFn,\n  PublishSourcePushFn,\n  RecordDeliveryOnlyFn,\n} from '@shipfox/api-integration-core-dto';\nimport {\n  defineRoute,\n  type RouteGroup,\n  rawBodyPlugin,\n  WEBHOOK_BODY_LIMIT,\n} from '@shipfox/node-fastify';\nimport {logger} from '@shipfox/node-opentelemetry';\nimport type {NodePgDatabase} from 'drizzle-orm/node-postgres';\nimport {config} from '#config.js';\nimport {handleGithubEvent} from '#core/webhook.js';\n\nconst SIGNATURE_HEADER = 'x-hub-signature-256';\nconst EVENT_HEADER = 'x-github-event';\nconst DELIVERY_HEADER = 'x-github-delivery';\n\nexport interface CreateGithubWebhookRoutesOptions {\n  coreDb: () => NodePgDatabase<Record<string, unknown>>;\n  publishIntegrationEventReceived: PublishIntegrationEventReceivedFn;\n  publishSourcePush: PublishSourcePushFn;\n  recordDeliveryOnly: RecordDeliveryOnlyFn;\n  getIntegrationConnectionById: GetIntegrationConnectionByIdFn;\n  deleteInstallationTokenSecret?:\n    | ((params: {workspaceId: string; installationId: number}) => Promise<unknown>)\n    | undefined;\n}\n\nexport function createGithubWebhookRoutes(options: CreateGithubWebhookRoutesOptions): RouteGroup {\n  const webhooks = new Webhooks({secret: config.GITHUB_APP_WEBHOOK_SECRET});\n\n  const pushRoute = defineRoute({\n    method: 'POST',\n    path: '/',\n    auth: [],\n    description: 'GitHub App webhook receiver.',\n    options: {bodyLimit: WEBHOOK_BODY_LIMIT},\n    handler: async (request, reply) => {\n      const deliveryId = request.headers[DELIVERY_HEADER];\n      const signature = request.headers[SIGNATURE_HEADER];\n      const event = request.headers[EVENT_HEADER];\n\n      if (typeof deliveryId !== 'string' || !deliveryId) {\n        reply.code(400);\n        return {error: 'missing X-GitHub-Delivery header'};\n      }\n      if (typeof signature !== 'string' || !signature) {\n        reply.code(401);\n        return {error: 'missing X-Hub-Signature-256 header'};\n      }\n      if (typeof event !== 'string' || !event) {\n        reply.code(400);\n        return {error: 'missing X-GitHub-Event header'};\n      }\n\n      const body = request.body;\n      if (!Buffer.isBuffer(body)) {\n        reply.code(400);\n        return {error: 'expected raw JSON body'};\n      }\n      const rawBody = body.toString('utf8');\n\n      let verified: boolean;\n      try {\n        verified = await webhooks.verify(rawBody, signature);\n      } catch (error) {\n        logger().warn({deliveryId, err: error}, 'github webhook signature verification threw');\n        verified = false;\n      }\n      if (!verified) {\n        reply.code(401);\n        return {error: 'invalid signature'};\n      }\n\n      let parsedJson: unknown;\n      try {\n        parsedJson = JSON.parse(rawBody);\n      } catch (error) {\n        logger().warn({deliveryId, err: error}, 'github webhook payload JSON parse failed');\n        reply.code(400);\n        return {error: 'malformed JSON'};\n      }\n\n      await options.coreDb().transaction(async (tx) => {\n        await handleGithubEvent({\n          tx,\n          deliveryId,\n          event,\n          payload: parsedJson,\n          publishIntegrationEventReceived: options.publishIntegrationEventReceived,\n          publishSourcePush: options.publishSourcePush,\n          recordDeliveryOnly: options.recordDeliveryOnly,\n          getIntegrationConnectionById: options.getIntegrationConnectionById,\n          deleteInstallationTokenSecret: options.deleteInstallationTokenSecret,\n        });\n      });\n\n      reply.code(204);\n      return null;\n    },\n  });\n\n  return {\n    prefix: '/webhooks/integrations/github',\n    auth: [],\n    plugins: [rawBodyPlugin],\n    routes: [pushRoute],\n  };\n}\n"],"names":["Buffer","Webhooks","defineRoute","rawBodyPlugin","WEBHOOK_BODY_LIMIT","logger","config","handleGithubEvent","SIGNATURE_HEADER","EVENT_HEADER","DELIVERY_HEADER","createGithubWebhookRoutes","options","webhooks","secret","GITHUB_APP_WEBHOOK_SECRET","pushRoute","method","path","auth","description","bodyLimit","handler","request","reply","deliveryId","headers","signature","event","code","error","body","isBuffer","rawBody","toString","verified","verify","warn","err","parsedJson","JSON","parse","coreDb","transaction","tx","payload","publishIntegrationEventReceived","publishSourcePush","recordDeliveryOnly","getIntegrationConnectionById","deleteInstallationTokenSecret","prefix","plugins","routes"],"mappings":"AAAA,SAAQA,MAAM,QAAO,cAAc;AACnC,SAAQC,QAAQ,QAAO,oBAAoB;AAO3C,SACEC,WAAW,EAEXC,aAAa,EACbC,kBAAkB,QACb,wBAAwB;AAC/B,SAAQC,MAAM,QAAO,8BAA8B;AAEnD,SAAQC,MAAM,QAAO,aAAa;AAClC,SAAQC,iBAAiB,QAAO,mBAAmB;AAEnD,MAAMC,mBAAmB;AACzB,MAAMC,eAAe;AACrB,MAAMC,kBAAkB;AAaxB,OAAO,SAASC,0BAA0BC,OAAyC;IACjF,MAAMC,WAAW,IAAIZ,SAAS;QAACa,QAAQR,OAAOS,yBAAyB;IAAA;IAEvE,MAAMC,YAAYd,YAAY;QAC5Be,QAAQ;QACRC,MAAM;QACNC,MAAM,EAAE;QACRC,aAAa;QACbR,SAAS;YAACS,WAAWjB;QAAkB;QACvCkB,SAAS,OAAOC,SAASC;YACvB,MAAMC,aAAaF,QAAQG,OAAO,CAAChB,gBAAgB;YACnD,MAAMiB,YAAYJ,QAAQG,OAAO,CAAClB,iBAAiB;YACnD,MAAMoB,QAAQL,QAAQG,OAAO,CAACjB,aAAa;YAE3C,IAAI,OAAOgB,eAAe,YAAY,CAACA,YAAY;gBACjDD,MAAMK,IAAI,CAAC;gBACX,OAAO;oBAACC,OAAO;gBAAkC;YACnD;YACA,IAAI,OAAOH,cAAc,YAAY,CAACA,WAAW;gBAC/CH,MAAMK,IAAI,CAAC;gBACX,OAAO;oBAACC,OAAO;gBAAoC;YACrD;YACA,IAAI,OAAOF,UAAU,YAAY,CAACA,OAAO;gBACvCJ,MAAMK,IAAI,CAAC;gBACX,OAAO;oBAACC,OAAO;gBAA+B;YAChD;YAEA,MAAMC,OAAOR,QAAQQ,IAAI;YACzB,IAAI,CAAC/B,OAAOgC,QAAQ,CAACD,OAAO;gBAC1BP,MAAMK,IAAI,CAAC;gBACX,OAAO;oBAACC,OAAO;gBAAwB;YACzC;YACA,MAAMG,UAAUF,KAAKG,QAAQ,CAAC;YAE9B,IAAIC;YACJ,IAAI;gBACFA,WAAW,MAAMtB,SAASuB,MAAM,CAACH,SAASN;YAC5C,EAAE,OAAOG,OAAO;gBACdzB,SAASgC,IAAI,CAAC;oBAACZ;oBAAYa,KAAKR;gBAAK,GAAG;gBACxCK,WAAW;YACb;YACA,IAAI,CAACA,UAAU;gBACbX,MAAMK,IAAI,CAAC;gBACX,OAAO;oBAACC,OAAO;gBAAmB;YACpC;YAEA,IAAIS;YACJ,IAAI;gBACFA,aAAaC,KAAKC,KAAK,CAACR;YAC1B,EAAE,OAAOH,OAAO;gBACdzB,SAASgC,IAAI,CAAC;oBAACZ;oBAAYa,KAAKR;gBAAK,GAAG;gBACxCN,MAAMK,IAAI,CAAC;gBACX,OAAO;oBAACC,OAAO;gBAAgB;YACjC;YAEA,MAAMlB,QAAQ8B,MAAM,GAAGC,WAAW,CAAC,OAAOC;gBACxC,MAAMrC,kBAAkB;oBACtBqC;oBACAnB;oBACAG;oBACAiB,SAASN;oBACTO,iCAAiClC,QAAQkC,+BAA+B;oBACxEC,mBAAmBnC,QAAQmC,iBAAiB;oBAC5CC,oBAAoBpC,QAAQoC,kBAAkB;oBAC9CC,8BAA8BrC,QAAQqC,4BAA4B;oBAClEC,+BAA+BtC,QAAQsC,6BAA6B;gBACtE;YACF;YAEA1B,MAAMK,IAAI,CAAC;YACX,OAAO;QACT;IACF;IAEA,OAAO;QACLsB,QAAQ;QACRhC,MAAM,EAAE;QACRiC,SAAS;YAACjD;SAAc;QACxBkD,QAAQ;YAACrC;SAAU;IACrB;AACF"}
+{"version":3,"sources":["../../../src/presentation/routes/webhooks.ts"],"sourcesContent":["import {randomUUID} from 'node:crypto';\nimport type {\n  GetIntegrationConnectionByIdFn,\n  PublishIntegrationEventReceivedFn,\n  PublishSourcePushFn,\n  RecordDeliveryOnlyFn,\n  StoredWebhookRequest,\n  WebhookProcessingResult,\n} from '@shipfox/api-integration-core-dto';\nimport {\n  createStoredWebhookRequest,\n  WEBHOOK_MAX_RAW_BODY_BYTES,\n} from '@shipfox/api-integration-core-dto';\nimport {\n  ClientError,\n  defineRoute,\n  type RouteGroup,\n  rawBodyPlugin,\n  WEBHOOK_BODY_LIMIT,\n} from '@shipfox/node-fastify';\nimport type {NodePgDatabase} from 'drizzle-orm/node-postgres';\nimport {\n  createGithubWebhookProcessor,\n  type GithubWebhookProcessor,\n} from '#core/webhook-processor.js';\n\nconst SIGNATURE_HEADER = 'x-hub-signature-256';\nconst EVENT_HEADER = 'x-github-event';\nconst DELIVERY_HEADER = 'x-github-delivery';\n\nexport interface CreateGithubWebhookRoutesOptions {\n  coreDb: () => NodePgDatabase<Record<string, unknown>>;\n  publishIntegrationEventReceived: PublishIntegrationEventReceivedFn;\n  publishSourcePush: PublishSourcePushFn;\n  recordDeliveryOnly: RecordDeliveryOnlyFn;\n  getIntegrationConnectionById: GetIntegrationConnectionByIdFn;\n  deleteInstallationTokenSecret?:\n    | ((params: {workspaceId: string; installationId: number}) => Promise<unknown>)\n    | undefined;\n  processor?: GithubWebhookProcessor | undefined;\n}\n\nexport function createGithubWebhookRoutes(options: CreateGithubWebhookRoutesOptions): RouteGroup {\n  const processor = options.processor ?? createGithubWebhookProcessor(options);\n\n  const pushRoute = defineRoute({\n    method: 'POST',\n    path: '/',\n    auth: [],\n    description: 'GitHub App webhook receiver.',\n    options: {bodyLimit: WEBHOOK_BODY_LIMIT},\n    handler: async (request, reply) => {\n      const deliveryId = request.headers[DELIVERY_HEADER];\n      const signature = request.headers[SIGNATURE_HEADER];\n      const event = request.headers[EVENT_HEADER];\n\n      if (typeof deliveryId !== 'string' || !deliveryId) {\n        reply.code(400);\n        return {error: 'missing X-GitHub-Delivery header'};\n      }\n      if (typeof signature !== 'string' || !signature) {\n        reply.code(401);\n        return {error: 'missing X-Hub-Signature-256 header'};\n      }\n      if (typeof event !== 'string' || !event) {\n        reply.code(400);\n        return {error: 'missing X-GitHub-Event header'};\n      }\n\n      if (!(request.body instanceof Uint8Array)) {\n        reply.code(400);\n        return {error: 'expected raw JSON body'};\n      }\n      const result = await processor.process(\n        createGithubStoredWebhookRequest({\n          body: request.body,\n          headers: request.headers,\n          rawQueryString: request.raw.url?.split('?')[1] ?? '',\n        }),\n      );\n      return sendGithubWebhookResponse(reply, result);\n    },\n  });\n\n  return {\n    prefix: '/webhooks/integrations/github',\n    auth: [],\n    plugins: [rawBodyPlugin],\n    routes: [pushRoute],\n  };\n}\n\nfunction createGithubStoredWebhookRequest(input: {\n  body: Uint8Array;\n  headers: Record<string, string | string[] | undefined>;\n  rawQueryString: string;\n}): StoredWebhookRequest {\n  if (input.body.byteLength > WEBHOOK_MAX_RAW_BODY_BYTES) {\n    throw new ClientError('Webhook request body is too large', 'body-too-large', {status: 413});\n  }\n  try {\n    return createStoredWebhookRequest({\n      requestId: randomUUID(),\n      routeId: 'github',\n      receivedAt: new Date().toISOString(),\n      rawQueryString: input.rawQueryString,\n      headers: githubWebhookHeaders(input.headers),\n      body: input.body,\n    });\n  } catch (error) {\n    throw new ClientError('Webhook request metadata is invalid', 'invalid-webhook-request', {\n      cause: error,\n    });\n  }\n}\n\nfunction githubWebhookHeaders(headers: Record<string, string | string[] | undefined>) {\n  return Object.fromEntries(\n    ['content-type', DELIVERY_HEADER, EVENT_HEADER, SIGNATURE_HEADER].flatMap((name) => {\n      const value = headers[name];\n      return typeof value === 'string' ? [[name, value]] : [];\n    }),\n  );\n}\n\nfunction sendGithubWebhookResponse(\n  reply: {code(statusCode: number): void},\n  result: WebhookProcessingResult,\n) {\n  if (result.outcome !== 'discarded') {\n    reply.code(204);\n    return null;\n  }\n\n  switch (result.reason) {\n    case 'invalid_signature':\n      reply.code(401);\n      return {error: 'invalid signature'};\n    case 'malformed_payload':\n      reply.code(400);\n      return {error: 'malformed JSON'};\n    case 'connection_unavailable':\n    case 'missing_required_input':\n    case 'stale_at_receipt':\n    case 'unsupported_event':\n      reply.code(204);\n      return null;\n  }\n}\n"],"names":["randomUUID","createStoredWebhookRequest","WEBHOOK_MAX_RAW_BODY_BYTES","ClientError","defineRoute","rawBodyPlugin","WEBHOOK_BODY_LIMIT","createGithubWebhookProcessor","SIGNATURE_HEADER","EVENT_HEADER","DELIVERY_HEADER","createGithubWebhookRoutes","options","processor","pushRoute","method","path","auth","description","bodyLimit","handler","request","reply","deliveryId","headers","signature","event","code","error","body","Uint8Array","result","process","createGithubStoredWebhookRequest","rawQueryString","raw","url","split","sendGithubWebhookResponse","prefix","plugins","routes","input","byteLength","status","requestId","routeId","receivedAt","Date","toISOString","githubWebhookHeaders","cause","Object","fromEntries","flatMap","name","value","outcome","reason"],"mappings":"AAAA,SAAQA,UAAU,QAAO,cAAc;AASvC,SACEC,0BAA0B,EAC1BC,0BAA0B,QACrB,oCAAoC;AAC3C,SACEC,WAAW,EACXC,WAAW,EAEXC,aAAa,EACbC,kBAAkB,QACb,wBAAwB;AAE/B,SACEC,4BAA4B,QAEvB,6BAA6B;AAEpC,MAAMC,mBAAmB;AACzB,MAAMC,eAAe;AACrB,MAAMC,kBAAkB;AAcxB,OAAO,SAASC,0BAA0BC,OAAyC;IACjF,MAAMC,YAAYD,QAAQC,SAAS,IAAIN,6BAA6BK;IAEpE,MAAME,YAAYV,YAAY;QAC5BW,QAAQ;QACRC,MAAM;QACNC,MAAM,EAAE;QACRC,aAAa;QACbN,SAAS;YAACO,WAAWb;QAAkB;QACvCc,SAAS,OAAOC,SAASC;YACvB,MAAMC,aAAaF,QAAQG,OAAO,CAACd,gBAAgB;YACnD,MAAMe,YAAYJ,QAAQG,OAAO,CAAChB,iBAAiB;YACnD,MAAMkB,QAAQL,QAAQG,OAAO,CAACf,aAAa;YAE3C,IAAI,OAAOc,eAAe,YAAY,CAACA,YAAY;gBACjDD,MAAMK,IAAI,CAAC;gBACX,OAAO;oBAACC,OAAO;gBAAkC;YACnD;YACA,IAAI,OAAOH,cAAc,YAAY,CAACA,WAAW;gBAC/CH,MAAMK,IAAI,CAAC;gBACX,OAAO;oBAACC,OAAO;gBAAoC;YACrD;YACA,IAAI,OAAOF,UAAU,YAAY,CAACA,OAAO;gBACvCJ,MAAMK,IAAI,CAAC;gBACX,OAAO;oBAACC,OAAO;gBAA+B;YAChD;YAEA,IAAI,CAAEP,CAAAA,QAAQQ,IAAI,YAAYC,UAAS,GAAI;gBACzCR,MAAMK,IAAI,CAAC;gBACX,OAAO;oBAACC,OAAO;gBAAwB;YACzC;YACA,MAAMG,SAAS,MAAMlB,UAAUmB,OAAO,CACpCC,iCAAiC;gBAC/BJ,MAAMR,QAAQQ,IAAI;gBAClBL,SAASH,QAAQG,OAAO;gBACxBU,gBAAgBb,QAAQc,GAAG,CAACC,GAAG,EAAEC,MAAM,IAAI,CAAC,EAAE,IAAI;YACpD;YAEF,OAAOC,0BAA0BhB,OAAOS;QAC1C;IACF;IAEA,OAAO;QACLQ,QAAQ;QACRtB,MAAM,EAAE;QACRuB,SAAS;YAACnC;SAAc;QACxBoC,QAAQ;YAAC3B;SAAU;IACrB;AACF;AAEA,SAASmB,iCAAiCS,KAIzC;IACC,IAAIA,MAAMb,IAAI,CAACc,UAAU,GAAGzC,4BAA4B;QACtD,MAAM,IAAIC,YAAY,qCAAqC,kBAAkB;YAACyC,QAAQ;QAAG;IAC3F;IACA,IAAI;QACF,OAAO3C,2BAA2B;YAChC4C,WAAW7C;YACX8C,SAAS;YACTC,YAAY,IAAIC,OAAOC,WAAW;YAClCf,gBAAgBQ,MAAMR,cAAc;YACpCV,SAAS0B,qBAAqBR,MAAMlB,OAAO;YAC3CK,MAAMa,MAAMb,IAAI;QAClB;IACF,EAAE,OAAOD,OAAO;QACd,MAAM,IAAIzB,YAAY,uCAAuC,2BAA2B;YACtFgD,OAAOvB;QACT;IACF;AACF;AAEA,SAASsB,qBAAqB1B,OAAsD;IAClF,OAAO4B,OAAOC,WAAW,CACvB;QAAC;QAAgB3C;QAAiBD;QAAcD;KAAiB,CAAC8C,OAAO,CAAC,CAACC;QACzE,MAAMC,QAAQhC,OAAO,CAAC+B,KAAK;QAC3B,OAAO,OAAOC,UAAU,WAAW;YAAC;gBAACD;gBAAMC;aAAM;SAAC,GAAG,EAAE;IACzD;AAEJ;AAEA,SAASlB,0BACPhB,KAAuC,EACvCS,MAA+B;IAE/B,IAAIA,OAAO0B,OAAO,KAAK,aAAa;QAClCnC,MAAMK,IAAI,CAAC;QACX,OAAO;IACT;IAEA,OAAQI,OAAO2B,MAAM;QACnB,KAAK;YACHpC,MAAMK,IAAI,CAAC;YACX,OAAO;gBAACC,OAAO;YAAmB;QACpC,KAAK;YACHN,MAAMK,IAAI,CAAC;YACX,OAAO;gBAACC,OAAO;YAAgB;QACjC,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;YACHN,MAAMK,IAAI,CAAC;YACX,OAAO;IACX;AACF"}