@urateam/core 0.1.0

package/dist/webhook/github-handler.js

@@ -0,0 +1,439 @@
+import { Hono } from "hono";
+import { createHmac, timingSafeEqual } from "crypto";
+import { eq } from "drizzle-orm";
+import { pipelineRuns } from "../db/schema.js";
+import { createLogger } from "../logger.js";
+import { createGitHubClient } from "../repo/github.js";
+import { attemptAutoMerge } from "../pipeline/automerge.js";
+const log = createLogger({ component: "GitHubWebhookHandler" });
+// ---------------------------------------------------------------------------
+// Signature verification
+// ---------------------------------------------------------------------------
+/**
+ * Verify a GitHub webhook signature.
+ * GitHub sends "sha256=<hex-digest>" in the X-Hub-Signature-256 header.
+ */
+export function verifyGitHubSignature(body, signature, secret) {
+    if (!signature.startsWith("sha256="))
+        return false;
+    const sigHex = signature.slice(7); // strip "sha256=" prefix
+    const hmac = createHmac("sha256", secret);
+    hmac.update(body);
+    const expected = hmac.digest("hex");
+    try {
+        return timingSafeEqual(Buffer.from(sigHex), Buffer.from(expected));
+    }
+    catch {
+        return false; // Different lengths
+    }
+}
+// ---------------------------------------------------------------------------
+// In-memory dedup for processed comment IDs (30s TTL per entry)
+// ---------------------------------------------------------------------------
+class CommentDedupSet {
+    entries = new Map(); // commentId -> expiry ms
+    has(id) {
+        const expiry = this.entries.get(id);
+        if (expiry === undefined)
+            return false;
+        if (Date.now() > expiry) {
+            this.entries.delete(id);
+            return false;
+        }
+        return true;
+    }
+    add(id, ttlMs = 86_400_000 /* 24 h */) {
+        this.entries.set(id, Date.now() + ttlMs);
+    }
+    cleanup() {
+        const now = Date.now();
+        for (const [id, expiry] of this.entries) {
+            if (now > expiry)
+                this.entries.delete(id);
+        }
+    }
+}
+// ---------------------------------------------------------------------------
+// Automerge helper — invoked for check_suite, status, and pull_request events
+// ---------------------------------------------------------------------------
+/**
+ * Extract (owner, repo, prNumber) candidates from different GitHub event shapes,
+ * look them up in the DB to find the associated pipeline run, then check and
+ * merge if the pipeline config has `autoMergeConfig` configured.
+ */
+async function handleAutoMergeEvent(event, action, payload, config) {
+    if (!config.github) {
+        log.debug({ event }, "skipping automerge event — no GitHub App credentials configured");
+        return;
+    }
+    const candidates = [];
+    const repoOwner = payload.repository?.owner?.login ?? "";
+    const repoName = payload.repository?.name ?? "";
+    if (!repoOwner || !repoName)
+        return;
+    if (event === "check_suite") {
+        // check_suite events include an array of associated open PRs
+        const prs = payload.check_suite?.pull_requests ?? [];
+        for (const pr of prs) {
+            candidates.push({
+                owner: repoOwner,
+                repo: repoName,
+                prNumber: pr.number,
+                prUrl: pr.html_url,
+                prBranch: pr.head?.ref,
+            });
+        }
+    }
+    else if (event === "status") {
+        // status events don't include PR numbers directly; use branch names to look up DB
+        const branches = payload.branches ?? [];
+        for (const branch of branches) {
+            if (branch.name?.startsWith("agent/")) {
+                candidates.push({ owner: repoOwner, repo: repoName, prNumber: 0, prBranch: branch.name });
+            }
+        }
+    }
+    else if (event === "pull_request") {
+        const pr = payload.pull_request;
+        if (pr?.number) {
+            candidates.push({
+                owner: repoOwner,
+                repo: repoName,
+                prNumber: pr.number,
+                prUrl: pr.html_url,
+                prBranch: pr.head?.ref,
+            });
+        }
+    }
+    if (candidates.length === 0)
+        return;
+    const db = config.db;
+    const octokit = await createGitHubClient(config.github);
+    for (const candidate of candidates) {
+        // Look up pipeline run in DB by PR URL then branch
+        let originalRun;
+        if (candidate.prUrl) {
+            const rows = await db.select().from(pipelineRuns).where(eq(pipelineRuns.prUrl, candidate.prUrl)).limit(1);
+            if (rows.length > 0)
+                originalRun = rows[0];
+        }
+        if (!originalRun && candidate.prBranch?.startsWith("agent/")) {
+            const rows = await db.select().from(pipelineRuns).where(eq(pipelineRuns.branch, candidate.prBranch)).limit(1);
+            if (rows.length > 0)
+                originalRun = rows[0];
+        }
+        if (!originalRun) {
+            log.debug({ candidate }, "automerge: no pipeline run found for PR — skipping");
+            continue;
+        }
+        // Already merged — nothing to do
+        if (originalRun.autoMerged) {
+            log.debug({ runId: originalRun.id }, "automerge: PR already merged — skipping");
+            continue;
+        }
+        // Resolve pipeline config
+        const pipelineConfig = config.pipelineConfigs[originalRun.pipelineKey ?? ""];
+        if (!pipelineConfig?.autoMergeConfig) {
+            log.debug({ pipelineKey: originalRun.pipelineKey }, "automerge: no autoMergeConfig in pipeline — skipping");
+            continue;
+        }
+        // Resolve the PR number: prefer from payload, otherwise look up via GitHub API by branch
+        let prNumber = candidate.prNumber;
+        if (!prNumber && candidate.prBranch) {
+            try {
+                const { data: pulls } = await octokit.pulls.list({
+                    owner: candidate.owner,
+                    repo: candidate.repo,
+                    head: `${candidate.owner}:${candidate.prBranch}`,
+                    state: "open",
+                    per_page: 1,
+                });
+                if (pulls.length > 0)
+                    prNumber = pulls[0].number;
+            }
+            catch {
+                log.warn({ candidate }, "automerge: failed to look up PR number from branch — skipping");
+                continue;
+            }
+        }
+        if (!prNumber) {
+            log.debug({ candidate }, "automerge: could not determine PR number — skipping");
+            continue;
+        }
+        const autoMergeOptions = pipelineConfig.autoMergeConfig;
+        const result = await attemptAutoMerge(octokit, candidate.owner, candidate.repo, prNumber, autoMergeOptions);
+        // Persist result to DB
+        await db
+            .update(pipelineRuns)
+            .set({
+            autoMerged: result.merged || null,
+            autoMergeReason: result.message,
+        })
+            .where(eq(pipelineRuns.id, originalRun.id));
+        log.info({ runId: originalRun.id, prNumber, merged: result.merged, message: result.message }, "automerge: decision recorded");
+    }
+}
+// ---------------------------------------------------------------------------
+// Handler factory
+// ---------------------------------------------------------------------------
+export function createGitHubWebhookHandler(config) {
+    const app = new Hono();
+    const dedup = new CommentDedupSet();
+    // Periodic cleanup of expired entries (runs outside the hot path)
+    const cleanupTimer = setInterval(() => dedup.cleanup(), 60_000);
+    cleanupTimer.unref();
+    app.post("/webhooks/github", async (c) => {
+        const rawBody = await c.req.text();
+        const event = c.req.header("X-GitHub-Event") ?? "";
+        const signature = c.req.header("X-Hub-Signature-256") ?? "";
+        // 1. Verify signature (required — handler should only be mounted when secret is configured)
+        if (!config.webhookSecret) {
+            return c.json({ error: "Webhook secret not configured" }, 500);
+        }
+        if (!verifyGitHubSignature(rawBody, signature, config.webhookSecret)) {
+            return c.json({ error: "Invalid signature" }, 401);
+        }
+        // 2. Parse payload
+        let payload;
+        try {
+            payload = JSON.parse(rawBody);
+        }
+        catch {
+            return c.json({ error: "Invalid JSON" }, 400);
+        }
+        // 3. Route by event type
+        const action = payload.action;
+        // 3a. Automerge trigger events: check_suite.completed, status, pull_request.(labeled|synchronize|opened)
+        const isAutoMergeEvent = event === "check_suite" ||
+            event === "status" ||
+            (event === "pull_request" && ["labeled", "synchronize", "opened"].includes(action));
+        if (isAutoMergeEvent) {
+            await handleAutoMergeEvent(event, action, payload, config);
+            return c.json({ ok: true, action: "automerge-check-triggered" });
+        }
+        // 3b. Handle PR review, inline review comment, and issue comment events
+        if (event !== "pull_request_review" &&
+            event !== "pull_request_review_comment" &&
+            event !== "issue_comment") {
+            return c.json({ ok: true, skipped: "unhandled event type" });
+        }
+        // For reviews we only care about "submitted"; for comments only "created"
+        if (event === "pull_request_review" && action !== "submitted") {
+            return c.json({ ok: true, skipped: "not a submitted review" });
+        }
+        if (event === "pull_request_review_comment" && action !== "created") {
+            return c.json({ ok: true, skipped: "not a created comment" });
+        }
+        if (event === "issue_comment" && action !== "created") {
+            return c.json({ ok: true, skipped: "not a created comment" });
+        }
+        // issue_comment fires for both issues and PRs — skip non-PR comments
+        if (event === "issue_comment" && !payload.issue?.pull_request) {
+            return c.json({ ok: true, skipped: "not a PR comment" });
+        }
+        // 4. Extract comment metadata
+        let commentBody;
+        let commentId;
+        let commentAuthor;
+        let filePath;
+        let lineNumber;
+        if (event === "pull_request_review") {
+            commentBody = payload.review?.body ?? "";
+            commentId = String(payload.review?.id ?? "");
+            commentAuthor = payload.review?.user?.login ?? "";
+        }
+        else {
+            // pull_request_review_comment and issue_comment both use payload.comment
+            commentBody = payload.comment?.body ?? "";
+            commentId = String(payload.comment?.id ?? "");
+            commentAuthor = payload.comment?.user?.login ?? "";
+            if (event === "pull_request_review_comment") {
+                filePath = payload.comment?.path;
+                lineNumber = (payload.comment?.line ?? payload.comment?.original_line);
+            }
+        }
+        // Empty bodies (e.g. approved-without-comment reviews) are ignored
+        if (!commentBody.trim()) {
+            return c.json({ ok: true, skipped: "empty comment body" });
+        }
+        // 5. Extract PR metadata
+        // issue_comment events have a partial pull_request object under payload.issue.pull_request
+        // (only url/html_url/diff_url/patch_url — no head.ref, number, or draft).
+        // For full PR events, payload.pull_request has everything.
+        let prUrl;
+        let prBranch;
+        let prNumber;
+        let prIsDraft;
+        if (event === "issue_comment") {
+            const issuePr = payload.issue?.pull_request;
+            if (!issuePr) {
+                return c.json({ ok: true, skipped: "no pull_request in payload" });
+            }
+            prUrl = issuePr.html_url ?? "";
+            prNumber = payload.issue.number;
+            // issue_comment doesn't include head.ref or draft — we'll resolve branch
+            // from the DB lookup below and skip the draft check (draft PRs are unlikely
+            // to have agent pipeline runs in the DB)
+            prBranch = undefined;
+            prIsDraft = false;
+        }
+        else {
+            const pr = payload.pull_request;
+            if (!pr) {
+                return c.json({ ok: true, skipped: "no pull_request in payload" });
+            }
+            prUrl = pr.html_url;
+            prBranch = pr.head?.ref;
+            prNumber = pr.number;
+            prIsDraft = pr.draft === true;
+        }
+        // 5b. Skip draft PRs — they have known gaps and should not trigger feedback runs
+        if (prIsDraft) {
+            return c.json({ ok: true, skipped: "PR is a draft — feedback loop disabled" });
+        }
+        // 6. Find the original pipeline run for this PR
+        //    First try by PR URL (exact match), then by branch name (agent/ prefix).
+        const db = config.db;
+        let originalRun;
+        if (prUrl) {
+            const byUrl = await db
+                .select()
+                .from(pipelineRuns)
+                .where(eq(pipelineRuns.prUrl, prUrl))
+                .limit(1);
+            if (byUrl.length > 0)
+                originalRun = byUrl[0];
+        }
+        if (!originalRun && prBranch?.startsWith("agent/")) {
+            const byBranch = await db
+                .select()
+                .from(pipelineRuns)
+                .where(eq(pipelineRuns.branch, prBranch))
+                .limit(1);
+            if (byBranch.length > 0)
+                originalRun = byBranch[0];
+        }
+        if (!originalRun) {
+            return c.json({ ok: true, skipped: "not an agent-created PR" });
+        }
+        // For issue_comment events, resolve branch from the DB since the payload doesn't include it
+        if (!prBranch && originalRun.branch) {
+            prBranch = originalRun.branch;
+        }
+        // 7. Look up repo config for this run
+        const repoUrl = originalRun.repoUrl;
+        let repoConfig;
+        for (const rc of Object.values(config.repoConfigs)) {
+            if (rc.url === repoUrl) {
+                repoConfig = rc;
+                break;
+            }
+        }
+        if (!repoConfig) {
+            log.warn({ repoUrl }, "no repoConfig found for PR's repo URL");
+            return c.json({ ok: true, skipped: "no repo config for this PR" });
+        }
+        const feedbackCfg = repoConfig.githubFeedback;
+        // 8. Bot exclusion — never trigger on the bot's own comments
+        const botLogins = feedbackCfg?.botLogins ?? [];
+        if (botLogins.length > 0 && botLogins.includes(commentAuthor)) {
+            return c.json({ ok: true, skipped: "comment from bot login" });
+        }
+        // 9. Allowed-reviewer filter
+        const allowedReviewers = feedbackCfg?.allowedReviewers ?? [];
+        if (allowedReviewers.length > 0 && !allowedReviewers.includes(commentAuthor)) {
+            return c.json({ ok: true, skipped: "commenter not in allowedReviewers" });
+        }
+        // 10. Trigger-keyword check
+        // When a triggerKeyword is configured, always require it — regardless of autoTrigger.
+        // autoTrigger controls whether comments WITHOUT a keyword trigger (when no keyword is configured).
+        const triggerKeyword = feedbackCfg?.triggerKeyword;
+        const autoTrigger = feedbackCfg?.autoTrigger !== false; // default: true
+        if (triggerKeyword) {
+            if (!commentBody.includes(triggerKeyword)) {
+                return c.json({ ok: true, skipped: "trigger keyword not found" });
+            }
+        }
+        else if (!autoTrigger) {
+            // No keyword configured and autoTrigger is off — require explicit opt-in
+            return c.json({ ok: true, skipped: "autoTrigger is disabled and no triggerKeyword configured" });
+        }
+        // 11. Dedup — ignore if we've already processed this comment ID
+        if (dedup.has(commentId)) {
+            return c.json({ ok: true, deduplicated: true });
+        }
+        // 12. Rate-limit — don't start a new feedback run if one is already active for this PR
+        // Check BEFORE recording dedup so rejected comments can be reprocessed later.
+        if (config.runner.isActiveFeedback(prUrl)) {
+            log.info({ prUrl }, "feedback run already in progress for this PR — skipping");
+            return c.json({ ok: true, skipped: "feedback run already in progress" });
+        }
+        // 13. Look up pipeline config from the original run
+        const pipelineKey = originalRun.pipelineKey;
+        const pipelineConfig = config.pipelineConfigs[pipelineKey];
+        if (!pipelineConfig) {
+            log.warn({ pipelineKey }, "no pipeline config found for original run's pipelineKey");
+            return c.json({ ok: true, skipped: "pipeline config not found" });
+        }
+        // 14. Commit dedup entry only after all checks pass
+        dedup.add(commentId);
+        // 15. Build feedback comment payload — sanitize untrusted fields
+        const MAX_COMMENT_LENGTH = 4000;
+        const MAX_PATH_LENGTH = 500;
+        const sanitizedBody = commentBody
+            .slice(0, MAX_COMMENT_LENGTH)
+            .replace(/<\/review-comment>/gi, "[/review-comment]");
+        const sanitizedFilePath = filePath
+            ? filePath.slice(0, MAX_PATH_LENGTH).replace(/<\/review-comment>/gi, "[/review-comment]")
+            : undefined;
+        const feedbackComment = {
+            commentId,
+            author: commentAuthor,
+            body: sanitizedBody,
+            filePath: sanitizedFilePath,
+            lineNumber,
+        };
+        // 16. Build minimal LinearIssue from the DB row (issue was already sanitised earlier)
+        const issue = {
+            id: originalRun.issueId,
+            identifier: originalRun.issueId,
+            title: originalRun.issueTitle,
+            description: "",
+            labels: [],
+            priority: 0,
+            teamId: "",
+        };
+        // Reconstruct slug from branch name: "agent/<issueId>-<slug>" → "<issueId>-<slug>"
+        const branchSlug = prBranch?.startsWith("agent/")
+            ? prBranch.slice("agent/".length)
+            : (originalRun.issueId ?? "feedback");
+        const sanitizedIssue = {
+            id: originalRun.issueId,
+            slug: branchSlug,
+            title: originalRun.issueTitle,
+            description: "",
+            acceptanceCriteria: [],
+            labels: [],
+            priority: 0,
+        };
+        // 17. Fire and forget — don't await so the webhook returns quickly
+        config.runner
+            .startFeedback({
+            issue,
+            pipelineKey,
+            pipelineConfig,
+            repoConfig,
+            sanitizedIssue,
+            branch: prBranch ?? originalRun.branch ?? "",
+            prUrl,
+            prNumber,
+            parentRunId: originalRun.id,
+            feedbackComments: [feedbackComment],
+            rerequestReview: feedbackCfg?.rerequestReview ?? false,
+        })
+            .catch((err) => log.error({ err }, "runner.startFeedback() failed"));
+        return c.json({ ok: true, action: "feedback-triggered" });
+    });
+    return app;
+}
+//# sourceMappingURL=github-handler.js.map

package/dist/webhook/github-handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"github-handler.js","sourceRoot":"","sources":["../../src/webhook/github-handler.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,QAAQ,CAAC;AACrD,OAAO,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAI/C,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAEvD,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAE5D,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,SAAS,EAAE,sBAAsB,EAAE,CAAC,CAAC;AAmChE,8EAA8E;AAC9E,yBAAyB;AACzB,8EAA8E;AAE9E;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CACnC,IAAY,EACZ,SAAiB,EACjB,MAAc;IAEd,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,KAAK,CAAC;IACnD,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,yBAAyB;IAC5D,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC1C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAClB,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACpC,IAAI,CAAC;QACH,OAAO,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;IACrE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC,CAAC,oBAAoB;IACpC,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,gEAAgE;AAChE,8EAA8E;AAE9E,MAAM,eAAe;IACX,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC,CAAC,yBAAyB;IAEtE,GAAG,CAAC,EAAU;QACZ,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACpC,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QACvC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC;YACxB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACxB,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,GAAG,CAAC,EAAU,EAAE,KAAK,GAAG,UAAU,CAAC,UAAU;QAC3C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC;IAC3C,CAAC;IAED,OAAO;QACL,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACxC,IAAI,GAAG,GAAG,MAAM;gBAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;CACF;AAED,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAE9E;;;;GAIG;AACH,KAAK,UAAU,oBAAoB,CACjC,KAAa,EACb,MAAc,EACd,OAA4B,EAC5B,MAAkC;IAElC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QACnB,GAAG,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE,iEAAiE,CAAC,CAAC;QACxF,OAAO;IACT,CAAC;IAID,MAAM,UAAU,GAAkB,EAAE,CAAC;IAErC,MAAM,SAAS,GAAW,OAAO,CAAC,UAAU,EAAE,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC;IACjE,MAAM,QAAQ,GAAW,OAAO,CAAC,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC;IAExD,IAAI,CAAC,SAAS,IAAI,CAAC,QAAQ;QAAE,OAAO;IAEpC,IAAI,KAAK,KAAK,aAAa,EAAE,CAAC;QAC5B,6DAA6D;QAC7D,MAAM,GAAG,GACP,OAAO,CAAC,WAAW,EAAE,aAAa,IAAI,EAAE,CAAC;QAC3C,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;YACrB,UAAU,CAAC,IAAI,CAAC;gBACd,KAAK,EAAE,SAAS;gBAChB,IAAI,EAAE,QAAQ;gBACd,QAAQ,EAAE,EAAE,CAAC,MAAM;gBACnB,KAAK,EAAE,EAAE,CAAC,QAAQ;gBAClB,QAAQ,EAAE,EAAE,CAAC,IAAI,EAAE,GAAG;aACvB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;SAAM,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,kFAAkF;QAClF,MAAM,QAAQ,GAA4B,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC;QACjE,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;YAC9B,IAAI,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACtC,UAAU,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;YAC5F,CAAC;QACH,CAAC;IACH,CAAC;SAAM,IAAI,KAAK,KAAK,cAAc,EAAE,CAAC;QACpC,MAAM,EAAE,GAAG,OAAO,CAAC,YAAY,CAAC;QAChC,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC;YACf,UAAU,CAAC,IAAI,CAAC;gBACd,KAAK,EAAE,SAAS;gBAChB,IAAI,EAAE,QAAQ;gBACd,QAAQ,EAAE,EAAE,CAAC,MAAgB;gBAC7B,KAAK,EAAE,EAAE,CAAC,QAA8B;gBACxC,QAAQ,EAAE,EAAE,CAAC,IAAI,EAAE,GAAyB;aAC7C,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAEpC,MAAM,EAAE,GAAG,MAAM,CAAC,EAAE,CAAC;IACrB,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAExD,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,mDAAmD;QACnD,IAAI,WAA2D,CAAC;QAEhE,IAAI,SAAS,CAAC,KAAK,EAAE,CAAC;YACpB,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,KAAK,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAC1G,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;gBAAE,WAAW,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAC7C,CAAC;QACD,IAAI,CAAC,WAAW,IAAI,SAAS,CAAC,QAAQ,EAAE,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7D,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAC9G,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;gBAAE,WAAW,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAC7C,CAAC;QAED,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,GAAG,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,EAAE,oDAAoD,CAAC,CAAC;YAC/E,SAAS;QACX,CAAC;QAED,iCAAiC;QACjC,IAAI,WAAW,CAAC,UAAU,EAAE,CAAC;YAC3B,GAAG,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,WAAW,CAAC,EAAE,EAAE,EAAE,yCAAyC,CAAC,CAAC;YAChF,SAAS;QACX,CAAC;QAED,0BAA0B;QAC1B,MAAM,cAAc,GAAG,MAAM,CAAC,eAAe,CAAC,WAAW,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;QAC7E,IAAI,CAAC,cAAc,EAAE,eAAe,EAAE,CAAC;YACrC,GAAG,CAAC,KAAK,CAAC,EAAE,WAAW,EAAE,WAAW,CAAC,WAAW,EAAE,EAAE,sDAAsD,CAAC,CAAC;YAC5G,SAAS;QACX,CAAC;QAED,yFAAyF;QACzF,IAAI,QAAQ,GAAG,SAAS,CAAC,QAAQ,CAAC;QAClC,IAAI,CAAC,QAAQ,IAAI,SAAS,CAAC,QAAQ,EAAE,CAAC;YACpC,IAAI,CAAC;gBACH,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC;oBAC/C,KAAK,EAAE,SAAS,CAAC,KAAK;oBACtB,IAAI,EAAE,SAAS,CAAC,IAAI;oBACpB,IAAI,EAAE,GAAG,SAAS,CAAC,KAAK,IAAI,SAAS,CAAC,QAAQ,EAAE;oBAChD,KAAK,EAAE,MAAM;oBACb,QAAQ,EAAE,CAAC;iBACZ,CAAC,CAAC;gBACH,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;oBAAE,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;YACnD,CAAC;YAAC,MAAM,CAAC;gBACP,GAAG,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,EAAE,+DAA+D,CAAC,CAAC;gBACzF,SAAS;YACX,CAAC;QACH,CAAC;QAED,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,GAAG,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,EAAE,qDAAqD,CAAC,CAAC;YAChF,SAAS;QACX,CAAC;QAED,MAAM,gBAAgB,GAAG,cAAc,CAAC,eAAe,CAAC;QACxD,MAAM,MAAM,GAAG,MAAM,gBAAgB,CACnC,OAAO,EACP,SAAS,CAAC,KAAK,EACf,SAAS,CAAC,IAAI,EACd,QAAQ,EACR,gBAAgB,CACjB,CAAC;QAEF,uBAAuB;QACvB,MAAM,EAAE;aACL,MAAM,CAAC,YAAY,CAAC;aACpB,GAAG,CAAC;YACH,UAAU,EAAE,MAAM,CAAC,MAAM,IAAI,IAAI;YACjC,eAAe,EAAE,MAAM,CAAC,OAAO;SAChC,CAAC;aACD,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,EAAE,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC;QAE9C,GAAG,CAAC,IAAI,CACN,EAAE,KAAK,EAAE,WAAW,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,EACnF,8BAA8B,CAC/B,CAAC;IACJ,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,kBAAkB;AAClB,8EAA8E;AAE9E,MAAM,UAAU,0BAA0B,CACxC,MAAkC;IAElC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,MAAM,KAAK,GAAG,IAAI,eAAe,EAAE,CAAC;IAEpC,kEAAkE;IAClE,MAAM,YAAY,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,MAAM,CAAC,CAAC;IAChE,YAAY,CAAC,KAAK,EAAE,CAAC;IAErB,GAAG,CAAC,IAAI,CAAC,kBAAkB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACvC,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC;QACnD,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,qBAAqB,CAAC,IAAI,EAAE,CAAC;QAE5D,4FAA4F;QAC5F,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;YAC1B,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,+BAA+B,EAAE,EAAE,GAAG,CAAC,CAAC;QACjE,CAAC;QACD,IAAI,CAAC,qBAAqB,CAAC,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;YACrE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE,GAAG,CAAC,CAAC;QACrD,CAAC;QAED,mBAAmB;QACnB,IAAI,OAA4B,CAAC;QACjC,IAAI,CAAC;YACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAChC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAC;QAChD,CAAC;QAED,yBAAyB;QACzB,MAAM,MAAM,GAAG,OAAO,CAAC,MAAgB,CAAC;QAExC,yGAAyG;QACzG,MAAM,gBAAgB,GACpB,KAAK,KAAK,aAAa;YACvB,KAAK,KAAK,QAAQ;YAClB,CAAC,KAAK,KAAK,cAAc,IAAI,CAAC,SAAS,EAAE,aAAa,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QAEtF,IAAI,gBAAgB,EAAE,CAAC;YACrB,MAAM,oBAAoB,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;YAC3D,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,2BAA2B,EAAE,CAAC,CAAC;QACnE,CAAC;QAED,wEAAwE;QACxE,IACE,KAAK,KAAK,qBAAqB;YAC/B,KAAK,KAAK,6BAA6B;YACvC,KAAK,KAAK,eAAe,EACzB,CAAC;YACD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC,CAAC;QAC/D,CAAC;QAED,0EAA0E;QAC1E,IAAI,KAAK,KAAK,qBAAqB,IAAI,MAAM,KAAK,WAAW,EAAE,CAAC;YAC9D,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,wBAAwB,EAAE,CAAC,CAAC;QACjE,CAAC;QACD,IAAI,KAAK,KAAK,6BAA6B,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACpE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,uBAAuB,EAAE,CAAC,CAAC;QAChE,CAAC;QACD,IAAI,KAAK,KAAK,eAAe,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACtD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,uBAAuB,EAAE,CAAC,CAAC;QAChE,CAAC;QAED,qEAAqE;QACrE,IAAI,KAAK,KAAK,eAAe,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,YAAY,EAAE,CAAC;YAC9D,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAC3D,CAAC;QAED,8BAA8B;QAC9B,IAAI,WAAmB,CAAC;QACxB,IAAI,SAAiB,CAAC;QACtB,IAAI,aAAqB,CAAC;QAC1B,IAAI,QAA4B,CAAC;QACjC,IAAI,UAA8B,CAAC;QAEnC,IAAI,KAAK,KAAK,qBAAqB,EAAE,CAAC;YACpC,WAAW,GAAI,OAAO,CAAC,MAAM,EAAE,IAAe,IAAI,EAAE,CAAC;YACrD,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;YAC7C,aAAa,GAAI,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,KAAgB,IAAI,EAAE,CAAC;QAChE,CAAC;aAAM,CAAC;YACN,yEAAyE;YACzE,WAAW,GAAI,OAAO,CAAC,OAAO,EAAE,IAAe,IAAI,EAAE,CAAC;YACtD,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;YAC9C,aAAa,GAAI,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,KAAgB,IAAI,EAAE,CAAC;YAC/D,IAAI,KAAK,KAAK,6BAA6B,EAAE,CAAC;gBAC5C,QAAQ,GAAG,OAAO,CAAC,OAAO,EAAE,IAA0B,CAAC;gBACvD,UAAU,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,IAAI,OAAO,CAAC,OAAO,EAAE,aAAa,CAExD,CAAC;YAChB,CAAC;QACH,CAAC;QAED,mEAAmE;QACnE,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,EAAE,CAAC;YACxB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,oBAAoB,EAAE,CAAC,CAAC;QAC7D,CAAC;QAED,yBAAyB;QACzB,2FAA2F;QAC3F,0EAA0E;QAC1E,2DAA2D;QAC3D,IAAI,KAAa,CAAC;QAClB,IAAI,QAA4B,CAAC;QACjC,IAAI,QAAgB,CAAC;QACrB,IAAI,SAAkB,CAAC;QAEvB,IAAI,KAAK,KAAK,eAAe,EAAE,CAAC;YAC9B,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,EAAE,YAAY,CAAC;YAC5C,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,4BAA4B,EAAE,CAAC,CAAC;YACrE,CAAC;YACD,KAAK,GAAI,OAAO,CAAC,QAAmB,IAAI,EAAE,CAAC;YAC3C,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,MAAgB,CAAC;YAC1C,yEAAyE;YACzE,4EAA4E;YAC5E,yCAAyC;YACzC,QAAQ,GAAG,SAAS,CAAC;YACrB,SAAS,GAAG,KAAK,CAAC;QACpB,CAAC;aAAM,CAAC;YACN,MAAM,EAAE,GAAG,OAAO,CAAC,YAAY,CAAC;YAChC,IAAI,CAAC,EAAE,EAAE,CAAC;gBACR,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,4BAA4B,EAAE,CAAC,CAAC;YACrE,CAAC;YACD,KAAK,GAAG,EAAE,CAAC,QAAkB,CAAC;YAC9B,QAAQ,GAAG,EAAE,CAAC,IAAI,EAAE,GAAa,CAAC;YAClC,QAAQ,GAAG,EAAE,CAAC,MAAgB,CAAC;YAC/B,SAAS,GAAG,EAAE,CAAC,KAAK,KAAK,IAAI,CAAC;QAChC,CAAC;QAED,iFAAiF;QACjF,IAAI,SAAS,EAAE,CAAC;YACd,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,wCAAwC,EAAE,CAAC,CAAC;QACjF,CAAC;QAED,gDAAgD;QAChD,6EAA6E;QAC7E,MAAM,EAAE,GAAG,MAAM,CAAC,EAAE,CAAC;QACrB,IAAI,WAA2D,CAAC;QAEhE,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,KAAK,GAAG,MAAM,EAAE;iBACnB,MAAM,EAAE;iBACR,IAAI,CAAC,YAAY,CAAC;iBAClB,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;iBACpC,KAAK,CAAC,CAAC,CAAC,CAAC;YACZ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;gBAAE,WAAW,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QAC/C,CAAC;QAED,IAAI,CAAC,WAAW,IAAI,QAAQ,EAAE,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YACnD,MAAM,QAAQ,GAAG,MAAM,EAAE;iBACtB,MAAM,EAAE;iBACR,IAAI,CAAC,YAAY,CAAC;iBAClB,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;iBACxC,KAAK,CAAC,CAAC,CAAC,CAAC;YACZ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;gBAAE,WAAW,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;QACrD,CAAC;QAED,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,yBAAyB,EAAE,CAAC,CAAC;QAClE,CAAC;QAED,4FAA4F;QAC5F,IAAI,CAAC,QAAQ,IAAI,WAAW,CAAC,MAAM,EAAE,CAAC;YACpC,QAAQ,GAAG,WAAW,CAAC,MAAM,CAAC;QAChC,CAAC;QAED,sCAAsC;QACtC,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC;QACpC,IAAI,UAAkC,CAAC;QACvC,KAAK,MAAM,EAAE,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;YACnD,IAAI,EAAE,CAAC,GAAG,KAAK,OAAO,EAAE,CAAC;gBACvB,UAAU,GAAG,EAAE,CAAC;gBAChB,MAAM;YACR,CAAC;QACH,CAAC;QAED,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,EAAE,uCAAuC,CAAC,CAAC;YAC/D,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,4BAA4B,EAAE,CAAC,CAAC;QACrE,CAAC;QAED,MAAM,WAAW,GAAG,UAAU,CAAC,cAAc,CAAC;QAE9C,6DAA6D;QAC7D,MAAM,SAAS,GAAG,WAAW,EAAE,SAAS,IAAI,EAAE,CAAC;QAC/C,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;YAC9D,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,wBAAwB,EAAE,CAAC,CAAC;QACjE,CAAC;QAED,6BAA6B;QAC7B,MAAM,gBAAgB,GAAG,WAAW,EAAE,gBAAgB,IAAI,EAAE,CAAC;QAC7D,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;YAC7E,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,mCAAmC,EAAE,CAAC,CAAC;QAC5E,CAAC;QAED,4BAA4B;QAC5B,sFAAsF;QACtF,mGAAmG;QACnG,MAAM,cAAc,GAAG,WAAW,EAAE,cAAc,CAAC;QACnD,MAAM,WAAW,GAAG,WAAW,EAAE,WAAW,KAAK,KAAK,CAAC,CAAC,gBAAgB;QAExE,IAAI,cAAc,EAAE,CAAC;YACnB,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;gBAC1C,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,2BAA2B,EAAE,CAAC,CAAC;YACpE,CAAC;QACH,CAAC;aAAM,IAAI,CAAC,WAAW,EAAE,CAAC;YACxB,yEAAyE;YACzE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,0DAA0D,EAAE,CAAC,CAAC;QACnG,CAAC;QAED,gEAAgE;QAChE,IAAI,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YACzB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;QAClD,CAAC;QAED,uFAAuF;QACvF,8EAA8E;QAC9E,IAAI,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1C,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,yDAAyD,CAAC,CAAC;YAC/E,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,kCAAkC,EAAE,CAAC,CAAC;QAC3E,CAAC;QAED,oDAAoD;QACpD,MAAM,WAAW,GAAG,WAAW,CAAC,WAAW,CAAC;QAC5C,MAAM,cAAc,GAAG,MAAM,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;QAC3D,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,GAAG,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,EAAE,yDAAyD,CAAC,CAAC;YACrF,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,2BAA2B,EAAE,CAAC,CAAC;QACpE,CAAC;QAED,oDAAoD;QACpD,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAErB,iEAAiE;QACjE,MAAM,kBAAkB,GAAG,IAAI,CAAC;QAChC,MAAM,eAAe,GAAG,GAAG,CAAC;QAC5B,MAAM,aAAa,GAAG,WAAW;aAC9B,KAAK,CAAC,CAAC,EAAE,kBAAkB,CAAC;aAC5B,OAAO,CAAC,sBAAsB,EAAE,mBAAmB,CAAC,CAAC;QACxD,MAAM,iBAAiB,GAAG,QAAQ;YAChC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC,OAAO,CAAC,sBAAsB,EAAE,mBAAmB,CAAC;YACzF,CAAC,CAAC,SAAS,CAAC;QAEd,MAAM,eAAe,GAA0B;YAC7C,SAAS;YACT,MAAM,EAAE,aAAa;YACrB,IAAI,EAAE,aAAa;YACnB,QAAQ,EAAE,iBAAiB;YAC3B,UAAU;SACX,CAAC;QAEF,sFAAsF;QACtF,MAAM,KAAK,GAAG;YACZ,EAAE,EAAE,WAAW,CAAC,OAAO;YACvB,UAAU,EAAE,WAAW,CAAC,OAAO;YAC/B,KAAK,EAAE,WAAW,CAAC,UAAU;YAC7B,WAAW,EAAE,EAAE;YACf,MAAM,EAAE,EAA6B;YACrC,QAAQ,EAAE,CAAC;YACX,MAAM,EAAE,EAAE;SACX,CAAC;QAEF,mFAAmF;QACnF,MAAM,UAAU,GAAG,QAAQ,EAAE,UAAU,CAAC,QAAQ,CAAC;YAC/C,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC;YACjC,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,IAAI,UAAU,CAAC,CAAC;QAExC,MAAM,cAAc,GAAG;YACrB,EAAE,EAAE,WAAW,CAAC,OAAO;YACvB,IAAI,EAAE,UAAU;YAChB,KAAK,EAAE,WAAW,CAAC,UAAU;YAC7B,WAAW,EAAE,EAAE;YACf,kBAAkB,EAAE,EAAc;YAClC,MAAM,EAAE,EAAc;YACtB,QAAQ,EAAE,CAAC;SACZ,CAAC;QAEF,mEAAmE;QACnE,MAAM,CAAC,MAAM;aACV,aAAa,CAAC;YACb,KAAK;YACL,WAAW;YACX,cAAc;YACd,UAAU;YACV,cAAc;YACd,MAAM,EAAE,QAAQ,IAAI,WAAW,CAAC,MAAM,IAAI,EAAE;YAC5C,KAAK;YACL,QAAQ;YACR,WAAW,EAAE,WAAW,CAAC,EAAE;YAC3B,gBAAgB,EAAE,CAAC,eAAe,CAAC;YACnC,eAAe,EAAE,WAAW,EAAE,eAAe,IAAI,KAAK;SACvD,CAAC;aACD,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,+BAA+B,CAAC,CAAC,CAAC;QAEvE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/webhook/handler.d.ts

@@ -0,0 +1,16 @@
+import { Hono } from "hono";
+import type { TriggerMap } from "../types.js";
+import type { PipelineRunner } from "../pipeline/runner.js";
+import type { PipelineConfig, RepoConfig } from "../types.js";
+import type { AnyDb } from "../db/client.js";
+export interface WebhookHandlerConfig {
+    webhookSecret: string;
+    runner: PipelineRunner;
+    pipelineConfigs: Record<string, PipelineConfig>;
+    repoConfigs: Record<string, RepoConfig>;
+    triggerMap?: TriggerMap;
+    /** When provided, dedup keys are persisted in the database (survives restarts). */
+    db?: AnyDb;
+}
+export declare function createWebhookHandler(config: WebhookHandlerConfig): Hono;
+//# sourceMappingURL=handler.d.ts.map

package/dist/webhook/handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"handler.d.ts","sourceRoot":"","sources":["../../src/webhook/handler.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAK9C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAE5D,OAAO,KAAK,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAG9D,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAC;AAM7C,MAAM,WAAW,oBAAoB;IACnC,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,cAAc,CAAC;IACvB,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAChD,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACxC,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,mFAAmF;IACnF,EAAE,CAAC,EAAE,KAAK,CAAC;CACZ;AAyED,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,oBAAoB,GAAG,IAAI,CA0HvE"}

package/dist/webhook/handler.js

@@ -0,0 +1,171 @@
+import { Hono } from "hono";
+import { eq, lt } from "drizzle-orm";
+import { DEFAULT_TRIGGER_MAP } from "../types.js";
+import { verifyLinearSignature } from "./signature.js";
+import { parseStateChange } from "./parser.js";
+import { mapIssueToSchema } from "../executor/prompt/schema-mapper.js";
+import { resolvePipeline } from "../pipeline/router.js";
+import { createLogger } from "../logger.js";
+import { webhookDedup } from "../db/schema.js";
+const log = createLogger({ component: "WebhookHandler" });
+const DEDUP_TTL_MS = 30_000;
+// ---------------------------------------------------------------------------
+// In-memory dedup set — fallback when no DB is provided.
+// Resets on process restart and is not shared across instances.
+// ---------------------------------------------------------------------------
+class DedupSet {
+    keys = new Map();
+    async has(key) {
+        const expiry = this.keys.get(key);
+        if (!expiry)
+            return false;
+        if (Date.now() > expiry) {
+            this.keys.delete(key);
+            return false;
+        }
+        return true;
+    }
+    async add(key) {
+        this.keys.set(key, Date.now() + DEDUP_TTL_MS);
+    }
+    async cleanup() {
+        const now = Date.now();
+        for (const [key, expiry] of this.keys) {
+            if (now > expiry)
+                this.keys.delete(key);
+        }
+    }
+}
+// ---------------------------------------------------------------------------
+// DB-backed dedup set — survives restarts, shared across instances.
+// ---------------------------------------------------------------------------
+class DbDedupSet {
+    db;
+    ttlMs;
+    constructor(db, ttlMs) {
+        this.db = db;
+        this.ttlMs = ttlMs;
+    }
+    async has(key) {
+        const rows = await this.db
+            .select()
+            .from(webhookDedup)
+            .where(eq(webhookDedup.id, key));
+        if (rows.length === 0)
+            return false;
+        const expiresAt = rows[0].expiresAt;
+        if (Date.now() > expiresAt.getTime()) {
+            await this.db.delete(webhookDedup).where(eq(webhookDedup.id, key));
+            return false;
+        }
+        return true;
+    }
+    async add(key) {
+        const expiresAt = new Date(Date.now() + this.ttlMs);
+        await this.db
+            .insert(webhookDedup)
+            .values({ id: key, expiresAt })
+            .onConflictDoUpdate({ target: webhookDedup.id, set: { expiresAt } });
+    }
+    async cleanup() {
+        await this.db
+            .delete(webhookDedup)
+            .where(lt(webhookDedup.expiresAt, new Date()));
+    }
+}
+export function createWebhookHandler(config) {
+    const app = new Hono();
+    const dedup = config.db
+        ? new DbDedupSet(config.db, DEDUP_TTL_MS)
+        : new DedupSet();
+    // Periodic cleanup of expired dedup entries (runs outside the hot path)
+    const cleanupTimer = setInterval(() => {
+        dedup.cleanup().catch((err) => log.warn({ err }, "dedup cleanup failed"));
+    }, 30_000);
+    cleanupTimer.unref();
+    app.post("/webhooks/linear", async (c) => {
+        const rawBody = await c.req.text();
+        const signature = c.req.header("Linear-Signature") ?? "";
+        // 1. Verify signature
+        if (!verifyLinearSignature(rawBody, signature, config.webhookSecret)) {
+            return c.json({ error: "Invalid signature" }, 401);
+        }
+        // 2. Parse payload
+        let payload;
+        try {
+            payload = JSON.parse(rawBody);
+        }
+        catch {
+            return c.json({ error: "Invalid JSON" }, 400);
+        }
+        // 3. Extract state change
+        const stateChange = parseStateChange(payload);
+        if (!stateChange) {
+            return c.json({ ok: true }); // Ignore non-state-change webhooks
+        }
+        // 4. Resolve trigger map: per-team repo config -> global config -> DEFAULT_TRIGGER_MAP
+        const teamRepoConfig = config.repoConfigs[stateChange.issue.teamId] ??
+            config.repoConfigs[stateChange.issue.projectId ?? ""] ??
+            null;
+        const triggerMap = teamRepoConfig?.triggerMap ?? config.triggerMap ?? DEFAULT_TRIGGER_MAP;
+        // Build reverse map: state name -> action
+        const stateToAction = {
+            [triggerMap.start]: "start",
+            [triggerMap.resume]: "resume",
+            [triggerMap.pause]: "pause",
+            [triggerMap.abort]: "abort",
+        };
+        // 5. Determine action from state name
+        const action = stateToAction[stateChange.newState];
+        if (!action) {
+            return c.json({ ok: true }); // Ignore unrecognized states
+        }
+        // 6. Dedup
+        const roundedTs = Math.floor(Date.now() / 30_000);
+        const dedupKey = `${stateChange.issue.identifier}:${stateChange.newState}:${roundedTs}`;
+        if (await dedup.has(dedupKey)) {
+            return c.json({ ok: true, deduplicated: true });
+        }
+        await dedup.add(dedupKey);
+        // 7. Dispatch based on action
+        switch (action) {
+            case "start": {
+                // Resolve pipeline from labels
+                const labelNames = stateChange.issue.labels.map((l) => l.name);
+                const resolved = resolvePipeline(labelNames, config.pipelineConfigs);
+                if (!resolved) {
+                    // No pipeline matches
+                    return c.json({ ok: true, message: "No pipeline config for labels" });
+                }
+                // Reuse repo config resolved earlier for trigger map lookup
+                const repoConfig = teamRepoConfig;
+                if (!repoConfig) {
+                    log.error({ teamId: stateChange.issue.teamId, projectId: stateChange.issue.projectId ?? "none", issueId: stateChange.issue.identifier }, "no repo mapping for team/project — check repoConfigs keys match your Linear team/project IDs");
+                    return c.json({
+                        ok: false,
+                        error: "No repo mapping for team/project",
+                        teamId: stateChange.issue.teamId,
+                        projectId: stateChange.issue.projectId ?? null,
+                    }, 422);
+                }
+                const sanitizedIssue = mapIssueToSchema(stateChange.issue);
+                // Enqueue async - don't await, but catch unhandled errors
+                config.runner.start(stateChange.issue, resolved.key, resolved.config, repoConfig, sanitizedIssue).catch((err) => log.error({ err }, "runner.start() failed"));
+                return c.json({ ok: true, action: "start", runQueued: true });
+            }
+            case "resume":
+                config.runner.resume(stateChange.issue.identifier);
+                return c.json({ ok: true, action: "resume" });
+            case "pause":
+                config.runner.pause(stateChange.issue.identifier);
+                return c.json({ ok: true, action: "pause" });
+            case "abort":
+                config.runner.abort(stateChange.issue.identifier);
+                return c.json({ ok: true, action: "abort" });
+            default:
+                return c.json({ ok: true });
+        }
+    });
+    return app;
+}
+//# sourceMappingURL=handler.js.map