@wesell/n8n-nodes-confirmx 0.1.0

package/nodes/ConfirmX/ConfirmXTrigger.node.js

@@ -0,0 +1,190 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ConfirmXTrigger = void 0;
+const n8n_workflow_1 = require("n8n-workflow");
+const http_1 = require("../../transports/http");
+const signature_1 = require("../../transports/signature");
+const api_1 = require("../../types/api");
+function sameEvents(a, b) {
+    if (!a)
+        return false;
+    if (a.length !== b.length)
+        return false;
+    return b.every((e) => a.includes(e));
+}
+class ConfirmXTrigger {
+    constructor() {
+        this.description = {
+            displayName: 'ConfirmX Trigger',
+            name: 'confirmXTrigger',
+            icon: 'file:confirmx.svg',
+            group: ['trigger'],
+            version: 1,
+            subtitle: '={{$parameter["events"].join(", ")}}',
+            description: 'Starts a flow when ConfirmX emits a webhook event (message received, conversation created, message sent, message status, template status). We register the subscription automatically.',
+            defaults: { name: 'ConfirmX Trigger' },
+            inputs: [],
+            outputs: ['main'],
+            credentials: [{ name: 'confirmXApi', required: true }],
+            webhooks: [
+                {
+                    name: 'default',
+                    httpMethod: 'POST',
+                    responseMode: 'onReceived',
+                    path: 'confirmx',
+                },
+            ],
+            properties: [
+                {
+                    displayName: 'Events',
+                    name: 'events',
+                    type: 'multiOptions',
+                    default: ['message.received'],
+                    required: true,
+                    options: api_1.WEBHOOK_EVENT_TYPES.map((e) => ({ name: e, value: e })),
+                    description: 'Which ConfirmX events to subscribe to',
+                },
+            ],
+        };
+    }
+    // ============================================
+    // trigger() — n8n calls this when the workflow is saved/activated.
+    //
+    // We DON'T have access to the per-flow webhook URL from ITriggerFunctions
+    // (only IWebhookFunctions / IHookFunctions expose getNodeWebhookUrl), so we
+    // perform the registration lazily on the first inbound webhook() call —
+    // see the webhook() method below.
+    //
+    // All we do here is ensure staticData is initialized and run cleanup hooks
+    // for any stale webhookIds left over from prior runs where the URL changed.
+    // ============================================
+    async trigger() {
+        // No-op stub — actual registration happens in webhook() so we have the URL.
+        return {
+            manualTriggerFunction: async () => undefined,
+        };
+    }
+    // ============================================
+    // webhook() — n8n calls this for each incoming POST from ConfirmX.
+    //
+    // On the FIRST call, we register the subscription against ConfirmX
+    // (since trigger() doesn't have access to getNodeWebhookUrl). Subsequent
+    // calls are no-ops for registration and just verify + emit.
+    // ============================================
+    async webhook() {
+        const staticData = this.getWorkflowStaticData('node');
+        const events = this.getNodeParameter('events', []);
+        const webhookUrl = this.getNodeWebhookUrl('default');
+        if (!webhookUrl) {
+            throw new n8n_workflow_1.NodeOperationError(this.getNode(), 'ConfirmX Trigger could not resolve its webhook URL. Confirm WEBHOOK_URL is set correctly on your n8n server.');
+        }
+        // Lazy registration (idempotent on (url, events)).
+        if (!staticData.webhookId || staticData.webhookUrl !== webhookUrl || !sameEvents(staticData.events, events)) {
+            // URL or events changed → best-effort cleanup of stale subscription.
+            if (staticData.webhookId && staticData.webhookUrl !== webhookUrl) {
+                try {
+                    await (0, http_1.confirmxApiRequest)(this, {
+                        method: 'DELETE',
+                        endpoint: `/webhooks/${staticData.webhookId}`,
+                    });
+                }
+                catch {
+                    // swallow
+                }
+            }
+            const res = await (0, http_1.confirmxApiRequest)(this, {
+                method: 'POST',
+                endpoint: '/webhooks',
+                body: { url: webhookUrl, events, description: 'n8n integration' },
+            });
+            staticData.webhookId = res.webhook.id;
+            staticData.secret = res.secret;
+            staticData.webhookUrl = webhookUrl;
+            staticData.events = events;
+            // Warn if URL looks suspicious (proxy misconfig).
+            if (/^(https?:\/\/)?(localhost|127\.|10\.|192\.168\.|172\.(1[6-9]|2\d|3[01])\.)/i.test(webhookUrl)) {
+                this.logger.warn(`ConfirmX Trigger webhook URL ${webhookUrl} points to a private/local address. Confirm WEBHOOK_URL is set correctly on your n8n server.`);
+            }
+        }
+        const secret = staticData.secret;
+        if (!secret) {
+            throw new n8n_workflow_1.NodeOperationError(this.getNode(), 'ConfirmX Trigger has no signing secret in workflow staticData. Send a test event to re-register.');
+        }
+        const req = this.getRequestObject();
+        const header = (name) => {
+            const v = req.headers?.[name.toLowerCase()];
+            return typeof v === 'string' ? v : Array.isArray(v) ? v[0] : undefined;
+        };
+        const signature = header('x-confirmx-signature');
+        const timestamp = header('x-confirmx-timestamp');
+        const eventType = header('x-confirmx-event');
+        const deliveryId = header('x-confirmx-delivery');
+        const eventId = header('x-confirmx-event-id');
+        if (!signature || !timestamp || !eventType) {
+            throw new n8n_workflow_1.NodeOperationError(this.getNode(), 'Missing required ConfirmX signature headers (X-ConfirmX-Signature / -Timestamp / -Event).');
+        }
+        // Replay window: ConfirmX uses 300s.
+        const skew = (0, signature_1.timestampSkewSeconds)(timestamp);
+        if (!Number.isFinite(skew) || skew > signature_1.REPLAY_WINDOW_SECONDS) {
+            throw new n8n_workflow_1.NodeOperationError(this.getNode(), `ConfirmX timestamp skew ${Math.round(skew)}s exceeds ${signature_1.REPLAY_WINDOW_SECONDS}s replay window.`);
+        }
+        const rawBody = typeof req.rawBody === 'string'
+            ? req.rawBody
+            : req.rawBody instanceof Buffer
+                ? req.rawBody.toString('utf8')
+                : typeof req.body === 'string'
+                    ? req.body
+                    : JSON.stringify(req.body ?? {});
+        if (!(0, signature_1.verifyPayload)({ secret, body: rawBody, timestamp, signatureHeader: signature })) {
+            throw new n8n_workflow_1.NodeOperationError(this.getNode(), 'Invalid ConfirmX webhook signature. (Confirm WEBHOOK_URL points at this n8n instance and the signing secret matches.)');
+        }
+        let envelope;
+        try {
+            envelope = JSON.parse(rawBody);
+        }
+        catch {
+            throw new n8n_workflow_1.NodeOperationError(this.getNode(), 'ConfirmX webhook body is not valid JSON.');
+        }
+        // Emit the inner `data` as the n8n item, plus envelope metadata
+        // under __confirmx for downstream nodes that need it.
+        const itemJson = {
+            ...(envelope.data ?? {}),
+            __confirmx: {
+                eventId: envelope.id ?? eventId ?? null,
+                type: envelope.type ?? eventType,
+                deliveryId: deliveryId ?? null,
+                organizationId: envelope.organizationId ?? null,
+                receivedAt: new Date().toISOString(),
+            },
+        };
+        return {
+            workflowData: [[{ json: itemJson }]],
+        };
+    }
+    // ============================================
+    // delete() — best-effort cleanup when the workflow is removed
+    // or the trigger node is deleted.
+    // ============================================
+    async delete() {
+        const staticData = this.getWorkflowStaticData('node');
+        if (!staticData.webhookId)
+            return;
+        try {
+            await (0, http_1.confirmxApiRequest)(this, {
+                method: 'DELETE',
+                endpoint: `/webhooks/${staticData.webhookId}`,
+            });
+        }
+        catch (err) {
+            this.logger.warn(`ConfirmX Trigger cleanup failed for webhook ${staticData.webhookId}: ${err.message}`);
+        }
+        finally {
+            delete staticData.webhookId;
+            delete staticData.secret;
+            delete staticData.webhookUrl;
+            delete staticData.events;
+        }
+    }
+}
+exports.ConfirmXTrigger = ConfirmXTrigger;
+//# sourceMappingURL=ConfirmXTrigger.node.js.map

package/nodes/ConfirmX/ConfirmXTrigger.node.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ConfirmXTrigger.node.js","sourceRoot":"","sources":["ConfirmXTrigger.node.ts"],"names":[],"mappings":";;;AAyBA,+CAAiD;AACjD,gDAA0D;AAC1D,0DAAuG;AACvG,yCAAqD;AASrD,SAAS,UAAU,CAAC,CAAuB,EAAE,CAAW;IACtD,IAAI,CAAC,CAAC;QAAE,OAAO,KAAK,CAAA;IACpB,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;QAAE,OAAO,KAAK,CAAA;IACvC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAA;AACtC,CAAC;AAED,MAAa,eAAe;IAA5B;QACE,gBAAW,GAAyB;YAClC,WAAW,EAAE,kBAAkB;YAC/B,IAAI,EAAE,iBAAiB;YACvB,IAAI,EAAE,mBAAmB;YACzB,KAAK,EAAE,CAAC,SAAS,CAAC;YAClB,OAAO,EAAE,CAAC;YACV,QAAQ,EAAE,sCAAsC;YAChD,WAAW,EACT,wLAAwL;YAC1L,QAAQ,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE;YACtC,MAAM,EAAE,EAAE;YACV,OAAO,EAAE,CAAC,MAAM,CAAC;YACjB,WAAW,EAAE,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;YACtD,QAAQ,EAAE;gBACR;oBACE,IAAI,EAAE,SAAS;oBACf,UAAU,EAAE,MAAM;oBAClB,YAAY,EAAE,YAAY;oBAC1B,IAAI,EAAE,UAAU;iBACjB;aACF;YACD,UAAU,EAAE;gBACV;oBACE,WAAW,EAAE,QAAQ;oBACrB,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,cAAc;oBACpB,OAAO,EAAE,CAAC,kBAAkB,CAAC;oBAC7B,QAAQ,EAAE,IAAI;oBACd,OAAO,EAAE,yBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;oBAChE,WAAW,EAAE,uCAAuC;iBACrD;aACF;SACF,CAAA;IAwKH,CAAC;IAtKC,+CAA+C;IAC/C,mEAAmE;IACnE,EAAE;IACF,0EAA0E;IAC1E,4EAA4E;IAC5E,wEAAwE;IACxE,kCAAkC;IAClC,EAAE;IACF,2EAA2E;IAC3E,4EAA4E;IAC5E,+CAA+C;IAC/C,KAAK,CAAC,OAAO;QACX,4EAA4E;QAC5E,OAAO;YACL,qBAAqB,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS;SAC7C,CAAA;IACH,CAAC;IAED,+CAA+C;IAC/C,mEAAmE;IACnE,EAAE;IACF,mEAAmE;IACnE,yEAAyE;IACzE,4DAA4D;IAC5D,+CAA+C;IAC/C,KAAK,CAAC,OAAO;QACX,MAAM,UAAU,GAAG,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAiC,CAAA;QACrF,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,EAAE,CAAa,CAAA;QAC9D,MAAM,UAAU,GAAG,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAA;QAEpD,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,IAAI,iCAAkB,CAC1B,IAAI,CAAC,OAAO,EAAE,EACd,8GAA8G,CAC/G,CAAA;QACH,CAAC;QAED,mDAAmD;QACnD,IAAI,CAAC,UAAU,CAAC,SAAS,IAAI,UAAU,CAAC,UAAU,KAAK,UAAU,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC;YAC5G,qEAAqE;YACrE,IAAI,UAAU,CAAC,SAAS,IAAI,UAAU,CAAC,UAAU,KAAK,UAAU,EAAE,CAAC;gBACjE,IAAI,CAAC;oBACH,MAAM,IAAA,yBAAkB,EAAC,IAAI,EAAE;wBAC7B,MAAM,EAAE,QAAQ;wBAChB,QAAQ,EAAE,aAAa,UAAU,CAAC,SAAS,EAAE;qBAC9C,CAAC,CAAA;gBACJ,CAAC;gBAAC,MAAM,CAAC;oBACP,UAAU;gBACZ,CAAC;YACH,CAAC;YACD,MAAM,GAAG,GAAG,MAAM,IAAA,yBAAkB,EAA8C,IAAI,EAAE;gBACtF,MAAM,EAAE,MAAM;gBACd,QAAQ,EAAE,WAAW;gBACrB,IAAI,EAAE,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,iBAAiB,EAAE;aAClE,CAAC,CAAA;YACF,UAAU,CAAC,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,EAAE,CAAA;YACrC,UAAU,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,CAAA;YAC9B,UAAU,CAAC,UAAU,GAAG,UAAU,CAAA;YAClC,UAAU,CAAC,MAAM,GAAG,MAAM,CAAA;YAE1B,kDAAkD;YAClD,IAAI,6EAA6E,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;gBACnG,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,gCAAgC,UAAU,8FAA8F,CACzI,CAAA;YACH,CAAC;QACH,CAAC;QAED,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAA;QAChC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,iCAAkB,CAC1B,IAAI,CAAC,OAAO,EAAE,EACd,kGAAkG,CACnG,CAAA;QACH,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,gBAAgB,EAAS,CAAA;QAC1C,MAAM,MAAM,GAAG,CAAC,IAAY,EAAsB,EAAE;YAClD,MAAM,CAAC,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAA;YAC3C,OAAO,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;QACxE,CAAC,CAAA;QACD,MAAM,SAAS,GAAG,MAAM,CAAC,sBAAsB,CAAC,CAAA;QAChD,MAAM,SAAS,GAAG,MAAM,CAAC,sBAAsB,CAAC,CAAA;QAChD,MAAM,SAAS,GAAG,MAAM,CAAC,kBAAkB,CAAC,CAAA;QAC5C,MAAM,UAAU,GAAG,MAAM,CAAC,qBAAqB,CAAC,CAAA;QAChD,MAAM,OAAO,GAAG,MAAM,CAAC,qBAAqB,CAAC,CAAA;QAE7C,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS,EAAE,CAAC;YAC3C,MAAM,IAAI,iCAAkB,CAC1B,IAAI,CAAC,OAAO,EAAE,EACd,2FAA2F,CAC5F,CAAA;QACH,CAAC;QAED,qCAAqC;QACrC,MAAM,IAAI,GAAG,IAAA,gCAAoB,EAAC,SAAS,CAAC,CAAA;QAC5C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,iCAAqB,EAAE,CAAC;YAC3D,MAAM,IAAI,iCAAkB,CAC1B,IAAI,CAAC,OAAO,EAAE,EACd,2BAA2B,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,iCAAqB,kBAAkB,CAChG,CAAA;QACH,CAAC;QAED,MAAM,OAAO,GACX,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ;YAC7B,CAAC,CAAC,GAAG,CAAC,OAAO;YACb,CAAC,CAAC,GAAG,CAAC,OAAO,YAAY,MAAM;gBAC/B,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;gBAC9B,CAAC,CAAC,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ;oBAC9B,CAAC,CAAC,GAAG,CAAC,IAAI;oBACV,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAA;QAEpC,IAAI,CAAC,IAAA,yBAAa,EAAC,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;YACrF,MAAM,IAAI,iCAAkB,CAC1B,IAAI,CAAC,OAAO,EAAE,EACd,uHAAuH,CACxH,CAAA;QACH,CAAC;QAED,IAAI,QAAiG,CAAA;QACrG,IAAI,CAAC;YACH,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;QAChC,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,iCAAkB,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,0CAA0C,CAAC,CAAA;QAC1F,CAAC;QAED,gEAAgE;QAChE,sDAAsD;QACtD,MAAM,QAAQ,GAAG;YACf,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI,EAAE,CAAC;YACxB,UAAU,EAAE;gBACV,OAAO,EAAE,QAAQ,CAAC,EAAE,IAAI,OAAO,IAAI,IAAI;gBACvC,IAAI,EAAE,QAAQ,CAAC,IAAI,IAAI,SAAS;gBAChC,UAAU,EAAE,UAAU,IAAI,IAAI;gBAC9B,cAAc,EAAE,QAAQ,CAAC,cAAc,IAAI,IAAI;gBAC/C,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACrC;SACF,CAAA;QACD,OAAO;YACL,YAAY,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;SACrC,CAAA;IACH,CAAC;IAED,+CAA+C;IAC/C,8DAA8D;IAC9D,kCAAkC;IAClC,+CAA+C;IAC/C,KAAK,CAAC,MAAM;QACV,MAAM,UAAU,GAAG,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAiC,CAAA;QACrF,IAAI,CAAC,UAAU,CAAC,SAAS;YAAE,OAAM;QACjC,IAAI,CAAC;YACH,MAAM,IAAA,yBAAkB,EAAC,IAAI,EAAE;gBAC7B,MAAM,EAAE,QAAQ;gBAChB,QAAQ,EAAE,aAAa,UAAU,CAAC,SAAS,EAAE;aAC9C,CAAC,CAAA;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,+CAA+C,UAAU,CAAC,SAAS,KAAM,GAAa,CAAC,OAAO,EAAE,CACjG,CAAA;QACH,CAAC;gBAAS,CAAC;YACT,OAAO,UAAU,CAAC,SAAS,CAAA;YAC3B,OAAO,UAAU,CAAC,MAAM,CAAA;YACxB,OAAO,UAAU,CAAC,UAAU,CAAA;YAC5B,OAAO,UAAU,CAAC,MAAM,CAAA;QAC1B,CAAC;IACH,CAAC;CACF;AAzMD,0CAyMC"}

package/nodes/ConfirmX/ConfirmXTrigger.node.ts

@@ -0,0 +1,245 @@
+/**
+ * ConfirmX Trigger — starts a flow when ConfirmX emits a webhook event.
+ *
+ * Self-registration lifecycle:
+ *   1. `trigger()` — n8n calls this when the trigger is added/edited or
+ *      the workflow is saved/activated. We POST /api/v1/webhooks with
+ *      the n8n-generated URL + the selected events, then persist the
+ *      returned `secret` in workflow staticData.
+ *   2. `webhook()` — n8n calls this for each incoming POST from ConfirmX.
+ *      We verify the HMAC signature, reject stale timestamps (300s window),
+ *      and emit the envelope's `data` field as the n8n item.
+ *   3. `delete()` / `deactivate()` — best-effort DELETE /api/v1/webhooks/:id.
+ *
+ * Critical invariant: the `secret` MUST persist client-side because
+ * `GET /api/v1/webhooks/:id` does NOT return it. If staticData is wiped
+ * (e.g. n8n SQLite volume loss), the trigger throws a clear error
+ * and the user must re-add the node to re-register.
+ */
+import type {
+  ITriggerFunctions,
+  ITriggerResponse,
+  IWebhookFunctions,
+  INodeType,
+  INodeTypeDescription,
+} from 'n8n-workflow'
+import { NodeOperationError } from 'n8n-workflow'
+import { confirmxApiRequest } from '../../transports/http'
+import { verifyPayload, timestampSkewSeconds, REPLAY_WINDOW_SECONDS } from '../../transports/signature'
+import { WEBHOOK_EVENT_TYPES } from '../../types/api'
+
+interface TriggerStaticData {
+  webhookId?: string
+  secret?: string
+  webhookUrl?: string
+  events?: string[]
+}
+
+function sameEvents(a: string[] | undefined, b: string[]): boolean {
+  if (!a) return false
+  if (a.length !== b.length) return false
+  return b.every((e) => a.includes(e))
+}
+
+export class ConfirmXTrigger implements INodeType {
+  description: INodeTypeDescription = {
+    displayName: 'ConfirmX Trigger',
+    name: 'confirmXTrigger',
+    icon: 'file:confirmx.svg',
+    group: ['trigger'],
+    version: 1,
+    subtitle: '={{$parameter["events"].join(", ")}}',
+    description:
+      'Starts a flow when ConfirmX emits a webhook event (message received, conversation created, message sent, message status, template status). We register the subscription automatically.',
+    defaults: { name: 'ConfirmX Trigger' },
+    inputs: [],
+    outputs: ['main'],
+    credentials: [{ name: 'confirmXApi', required: true }],
+    webhooks: [
+      {
+        name: 'default',
+        httpMethod: 'POST',
+        responseMode: 'onReceived',
+        path: 'confirmx',
+      },
+    ],
+    properties: [
+      {
+        displayName: 'Events',
+        name: 'events',
+        type: 'multiOptions',
+        default: ['message.received'],
+        required: true,
+        options: WEBHOOK_EVENT_TYPES.map((e) => ({ name: e, value: e })),
+        description: 'Which ConfirmX events to subscribe to',
+      },
+    ],
+  }
+
+  // ============================================
+  // trigger() — n8n calls this when the workflow is saved/activated.
+  //
+  // We DON'T have access to the per-flow webhook URL from ITriggerFunctions
+  // (only IWebhookFunctions / IHookFunctions expose getNodeWebhookUrl), so we
+  // perform the registration lazily on the first inbound webhook() call —
+  // see the webhook() method below.
+  //
+  // All we do here is ensure staticData is initialized and run cleanup hooks
+  // for any stale webhookIds left over from prior runs where the URL changed.
+  // ============================================
+  async trigger(this: ITriggerFunctions): Promise<ITriggerResponse> {
+    // No-op stub — actual registration happens in webhook() so we have the URL.
+    return {
+      manualTriggerFunction: async () => undefined,
+    }
+  }
+
+  // ============================================
+  // webhook() — n8n calls this for each incoming POST from ConfirmX.
+  //
+  // On the FIRST call, we register the subscription against ConfirmX
+  // (since trigger() doesn't have access to getNodeWebhookUrl). Subsequent
+  // calls are no-ops for registration and just verify + emit.
+  // ============================================
+  async webhook(this: IWebhookFunctions) {
+    const staticData = this.getWorkflowStaticData('node') as unknown as TriggerStaticData
+    const events = this.getNodeParameter('events', []) as string[]
+    const webhookUrl = this.getNodeWebhookUrl('default')
+
+    if (!webhookUrl) {
+      throw new NodeOperationError(
+        this.getNode(),
+        'ConfirmX Trigger could not resolve its webhook URL. Confirm WEBHOOK_URL is set correctly on your n8n server.',
+      )
+    }
+
+    // Lazy registration (idempotent on (url, events)).
+    if (!staticData.webhookId || staticData.webhookUrl !== webhookUrl || !sameEvents(staticData.events, events)) {
+      // URL or events changed → best-effort cleanup of stale subscription.
+      if (staticData.webhookId && staticData.webhookUrl !== webhookUrl) {
+        try {
+          await confirmxApiRequest(this, {
+            method: 'DELETE',
+            endpoint: `/webhooks/${staticData.webhookId}`,
+          })
+        } catch {
+          // swallow
+        }
+      }
+      const res = await confirmxApiRequest<{ webhook: { id: string }; secret: string }>(this, {
+        method: 'POST',
+        endpoint: '/webhooks',
+        body: { url: webhookUrl, events, description: 'n8n integration' },
+      })
+      staticData.webhookId = res.webhook.id
+      staticData.secret = res.secret
+      staticData.webhookUrl = webhookUrl
+      staticData.events = events
+
+      // Warn if URL looks suspicious (proxy misconfig).
+      if (/^(https?:\/\/)?(localhost|127\.|10\.|192\.168\.|172\.(1[6-9]|2\d|3[01])\.)/i.test(webhookUrl)) {
+        this.logger.warn(
+          `ConfirmX Trigger webhook URL ${webhookUrl} points to a private/local address. Confirm WEBHOOK_URL is set correctly on your n8n server.`,
+        )
+      }
+    }
+
+    const secret = staticData.secret
+    if (!secret) {
+      throw new NodeOperationError(
+        this.getNode(),
+        'ConfirmX Trigger has no signing secret in workflow staticData. Send a test event to re-register.',
+      )
+    }
+
+    const req = this.getRequestObject() as any
+    const header = (name: string): string | undefined => {
+      const v = req.headers?.[name.toLowerCase()]
+      return typeof v === 'string' ? v : Array.isArray(v) ? v[0] : undefined
+    }
+    const signature = header('x-confirmx-signature')
+    const timestamp = header('x-confirmx-timestamp')
+    const eventType = header('x-confirmx-event')
+    const deliveryId = header('x-confirmx-delivery')
+    const eventId = header('x-confirmx-event-id')
+
+    if (!signature || !timestamp || !eventType) {
+      throw new NodeOperationError(
+        this.getNode(),
+        'Missing required ConfirmX signature headers (X-ConfirmX-Signature / -Timestamp / -Event).',
+      )
+    }
+
+    // Replay window: ConfirmX uses 300s.
+    const skew = timestampSkewSeconds(timestamp)
+    if (!Number.isFinite(skew) || skew > REPLAY_WINDOW_SECONDS) {
+      throw new NodeOperationError(
+        this.getNode(),
+        `ConfirmX timestamp skew ${Math.round(skew)}s exceeds ${REPLAY_WINDOW_SECONDS}s replay window.`,
+      )
+    }
+
+    const rawBody =
+      typeof req.rawBody === 'string'
+        ? req.rawBody
+        : req.rawBody instanceof Buffer
+        ? req.rawBody.toString('utf8')
+        : typeof req.body === 'string'
+        ? req.body
+        : JSON.stringify(req.body ?? {})
+
+    if (!verifyPayload({ secret, body: rawBody, timestamp, signatureHeader: signature })) {
+      throw new NodeOperationError(
+        this.getNode(),
+        'Invalid ConfirmX webhook signature. (Confirm WEBHOOK_URL points at this n8n instance and the signing secret matches.)',
+      )
+    }
+
+    let envelope: { id?: string; type?: string; createdAt?: string; organizationId?: string; data?: any }
+    try {
+      envelope = JSON.parse(rawBody)
+    } catch {
+      throw new NodeOperationError(this.getNode(), 'ConfirmX webhook body is not valid JSON.')
+    }
+
+    // Emit the inner `data` as the n8n item, plus envelope metadata
+    // under __confirmx for downstream nodes that need it.
+    const itemJson = {
+      ...(envelope.data ?? {}),
+      __confirmx: {
+        eventId: envelope.id ?? eventId ?? null,
+        type: envelope.type ?? eventType,
+        deliveryId: deliveryId ?? null,
+        organizationId: envelope.organizationId ?? null,
+        receivedAt: new Date().toISOString(),
+      },
+    }
+    return {
+      workflowData: [[{ json: itemJson }]],
+    }
+  }
+
+  // ============================================
+  // delete() — best-effort cleanup when the workflow is removed
+  // or the trigger node is deleted.
+  // ============================================
+  async delete(this: ITriggerFunctions): Promise<void> {
+    const staticData = this.getWorkflowStaticData('node') as unknown as TriggerStaticData
+    if (!staticData.webhookId) return
+    try {
+      await confirmxApiRequest(this, {
+        method: 'DELETE',
+        endpoint: `/webhooks/${staticData.webhookId}`,
+      })
+    } catch (err) {
+      this.logger.warn(
+        `ConfirmX Trigger cleanup failed for webhook ${staticData.webhookId}: ${(err as Error).message}`,
+      )
+    } finally {
+      delete staticData.webhookId
+      delete staticData.secret
+      delete staticData.webhookUrl
+      delete staticData.events
+    }
+  }
+}

package/nodes/ConfirmX/ConfirmXWebhook.node.d.ts

@@ -0,0 +1,5 @@
+import type { INodeType, INodeTypeDescription } from 'n8n-workflow';
+export declare class ConfirmXWebhook implements INodeType {
+    description: INodeTypeDescription;
+    execute(this: any): Promise<any[][]>;
+}

package/nodes/ConfirmX/ConfirmXWebhook.node.js

@@ -0,0 +1,169 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ConfirmXWebhook = void 0;
+const http_1 = require("../../transports/http");
+const api_1 = require("../../types/api");
+class ConfirmXWebhook {
+    constructor() {
+        this.description = {
+            displayName: 'ConfirmX Webhook',
+            name: 'confirmXWebhook',
+            icon: 'file:confirmx.svg',
+            group: ['transform'],
+            version: 1,
+            subtitle: '={{$parameter["operation"]}}',
+            description: 'Manage ConfirmX outbound webhook subscriptions (list, create, update, delete). Use the ConfirmX Trigger node to receive events automatically.',
+            defaults: { name: 'ConfirmX Webhook' },
+            inputs: ['main'],
+            outputs: ['main'],
+            credentials: [{ name: 'confirmXApi', required: true }],
+            // Admin-only — not exposed as an AI tool.
+            properties: [
+                {
+                    displayName: 'Operation',
+                    name: 'operation',
+                    type: 'options',
+                    noDataExpression: true,
+                    options: [
+                        { name: 'List', value: 'list', action: 'List webhook subscriptions' },
+                        { name: 'Create', value: 'create', action: 'Create a webhook subscription' },
+                        { name: 'Update', value: 'update', action: 'Update a webhook subscription' },
+                        { name: 'Delete', value: 'delete', action: 'Delete a webhook subscription' },
+                    ],
+                    default: 'list',
+                },
+                // --- Common ---
+                {
+                    displayName: 'Webhook ID',
+                    name: 'webhookId',
+                    type: 'string',
+                    default: '',
+                    required: true,
+                    displayOptions: { show: { operation: ['update', 'delete'] } },
+                    description: 'The webhook subscription ID',
+                },
+                // --- Create / Update ---
+                {
+                    displayName: 'URL',
+                    name: 'url',
+                    type: 'string',
+                    default: '',
+                    required: true,
+                    displayOptions: { show: { operation: ['create', 'update'] } },
+                    placeholder: 'https://example.com/webhook',
+                    description: 'Public URL that ConfirmX will POST events to',
+                },
+                {
+                    displayName: 'Events',
+                    name: 'events',
+                    type: 'multiOptions',
+                    default: ['message.received'],
+                    required: true,
+                    displayOptions: { show: { operation: ['create', 'update'] } },
+                    options: api_1.WEBHOOK_EVENT_TYPES.map((e) => ({ name: e, value: e })),
+                    description: 'Event types this subscription should receive',
+                },
+                {
+                    displayName: 'Description',
+                    name: 'description',
+                    type: 'string',
+                    default: '',
+                    displayOptions: { show: { operation: ['create', 'update'] } },
+                    description: 'Optional human-readable description (max 256 chars)',
+                },
+                {
+                    displayName: 'Active',
+                    name: 'isActive',
+                    type: 'boolean',
+                    default: true,
+                    displayOptions: { show: { operation: ['update'] } },
+                    description: 'Whether the subscription is active',
+                },
+                // --- List ---
+                {
+                    displayName: 'Return All',
+                    name: 'returnAll',
+                    type: 'boolean',
+                    default: false,
+                    displayOptions: { show: { operation: ['list'] } },
+                },
+                {
+                    displayName: 'Limit',
+                    name: 'limit',
+                    type: 'number',
+                    default: 50,
+                    typeOptions: { minValue: 1, maxValue: 200 },
+                    displayOptions: { show: { operation: ['list'], returnAll: [false] } },
+                },
+            ],
+        };
+    }
+    async execute() {
+        const items = this.getInputData();
+        const returnData = [];
+        for (let i = 0; i < items.length; i++) {
+            const operation = this.getNodeParameter('operation', i);
+            if (operation === 'list') {
+                const returnAll = this.getNodeParameter('returnAll', i);
+                const limit = this.getNodeParameter('limit', i) || 50;
+                const res = await (0, http_1.confirmxApiRequest)(this, {
+                    method: 'GET',
+                    endpoint: '/webhooks',
+                });
+                const sliced = returnAll ? res.webhooks || [] : (res.webhooks || []).slice(0, limit);
+                returnData.push(...sliced.map((w) => ({ json: w })));
+            }
+            else if (operation === 'create') {
+                const body = {
+                    url: this.getNodeParameter('url', i),
+                    events: this.getNodeParameter('events', i),
+                    description: this.getNodeParameter('description', i) || undefined,
+                };
+                const res = await (0, http_1.confirmxApiRequest)(this, {
+                    method: 'POST',
+                    endpoint: '/webhooks',
+                    body,
+                });
+                // Surface the secret prominently — it is returned ONLY at create time.
+                returnData.push({
+                    json: {
+                        ...res,
+                        _warning: res.secretNote || 'Save the secret now — it cannot be retrieved later.',
+                    },
+                });
+            }
+            else if (operation === 'update') {
+                const webhookId = this.getNodeParameter('webhookId', i);
+                const body = {};
+                const url = this.getNodeParameter('url', i);
+                const events = this.getNodeParameter('events', i);
+                const description = this.getNodeParameter('description', i);
+                const isActive = this.getNodeParameter('isActive', i, true);
+                if (url)
+                    body.url = url;
+                if (events && events.length)
+                    body.events = events;
+                if (description !== undefined)
+                    body.description = description;
+                body.isActive = isActive;
+                const res = await (0, http_1.confirmxApiRequest)(this, {
+                    method: 'PATCH',
+                    endpoint: `/webhooks/${webhookId}`,
+                    body,
+                });
+                returnData.push({ json: res.webhook });
+            }
+            else if (operation === 'delete') {
+                const webhookId = this.getNodeParameter('webhookId', i);
+                const res = await (0, http_1.confirmxApiRequest)(this, {
+                    method: 'DELETE',
+                    endpoint: `/webhooks/${webhookId}`,
+                });
+                returnData.push({ json: { success: true, webhookId, ...res } });
+            }
+        }
+        return [returnData];
+    }
+}
+exports.ConfirmXWebhook = ConfirmXWebhook;
+//# sourceMappingURL=ConfirmXWebhook.node.js.map

package/nodes/ConfirmX/ConfirmXWebhook.node.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ConfirmXWebhook.node.js","sourceRoot":"","sources":["ConfirmXWebhook.node.ts"],"names":[],"mappings":";;;AACA,gDAA0D;AAC1D,yCAAqD;AAErD,MAAa,eAAe;IAA5B;QACE,gBAAW,GAAyB;YAClC,WAAW,EAAE,kBAAkB;YAC/B,IAAI,EAAE,iBAAiB;YACvB,IAAI,EAAE,mBAAmB;YACzB,KAAK,EAAE,CAAC,WAAW,CAAC;YACpB,OAAO,EAAE,CAAC;YACV,QAAQ,EAAE,8BAA8B;YACxC,WAAW,EACT,+IAA+I;YACjJ,QAAQ,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE;YACtC,MAAM,EAAE,CAAC,MAAM,CAAC;YAChB,OAAO,EAAE,CAAC,MAAM,CAAC;YACjB,WAAW,EAAE,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;YACtD,0CAA0C;YAC1C,UAAU,EAAE;gBACV;oBACE,WAAW,EAAE,WAAW;oBACxB,IAAI,EAAE,WAAW;oBACjB,IAAI,EAAE,SAAS;oBACf,gBAAgB,EAAE,IAAI;oBACtB,OAAO,EAAE;wBACP,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,4BAA4B,EAAE;wBACrE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,+BAA+B,EAAE;wBAC5E,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,+BAA+B,EAAE;wBAC5E,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,+BAA+B,EAAE;qBAC7E;oBACD,OAAO,EAAE,MAAM;iBAChB;gBACD,iBAAiB;gBACjB;oBACE,WAAW,EAAE,YAAY;oBACzB,IAAI,EAAE,WAAW;oBACjB,IAAI,EAAE,QAAQ;oBACd,OAAO,EAAE,EAAE;oBACX,QAAQ,EAAE,IAAI;oBACd,cAAc,EAAE,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,EAAE;oBAC7D,WAAW,EAAE,6BAA6B;iBAC3C;gBACD,0BAA0B;gBAC1B;oBACE,WAAW,EAAE,KAAK;oBAClB,IAAI,EAAE,KAAK;oBACX,IAAI,EAAE,QAAQ;oBACd,OAAO,EAAE,EAAE;oBACX,QAAQ,EAAE,IAAI;oBACd,cAAc,EAAE,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,EAAE;oBAC7D,WAAW,EAAE,6BAA6B;oBAC1C,WAAW,EAAE,8CAA8C;iBAC5D;gBACD;oBACE,WAAW,EAAE,QAAQ;oBACrB,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,cAAc;oBACpB,OAAO,EAAE,CAAC,kBAAkB,CAAC;oBAC7B,QAAQ,EAAE,IAAI;oBACd,cAAc,EAAE,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,EAAE;oBAC7D,OAAO,EAAE,yBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;oBAChE,WAAW,EAAE,8CAA8C;iBAC5D;gBACD;oBACE,WAAW,EAAE,aAAa;oBAC1B,IAAI,EAAE,aAAa;oBACnB,IAAI,EAAE,QAAQ;oBACd,OAAO,EAAE,EAAE;oBACX,cAAc,EAAE,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,EAAE;oBAC7D,WAAW,EAAE,qDAAqD;iBACnE;gBACD;oBACE,WAAW,EAAE,QAAQ;oBACrB,IAAI,EAAE,UAAU;oBAChB,IAAI,EAAE,SAAS;oBACf,OAAO,EAAE,IAAI;oBACb,cAAc,EAAE,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE;oBACnD,WAAW,EAAE,oCAAoC;iBAClD;gBACD,eAAe;gBACf;oBACE,WAAW,EAAE,YAAY;oBACzB,IAAI,EAAE,WAAW;oBACjB,IAAI,EAAE,SAAS;oBACf,OAAO,EAAE,KAAK;oBACd,cAAc,EAAE,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE;iBAClD;gBACD;oBACE,WAAW,EAAE,OAAO;oBACpB,IAAI,EAAE,OAAO;oBACb,IAAI,EAAE,QAAQ;oBACd,OAAO,EAAE,EAAE;oBACX,WAAW,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE;oBAC3C,cAAc,EAAE,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE;iBACtE;aACF;SACF,CAAA;IAiEH,CAAC;IA/DC,KAAK,CAAC,OAAO;QACX,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,EAAE,CAAA;QACjC,MAAM,UAAU,GAAU,EAAE,CAAA;QAE5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,MAAM,SAAS,GAAG,IAAI,CAAC,gBAAgB,CAAC,WAAW,EAAE,CAAC,CAAW,CAAA;YAEjE,IAAI,SAAS,KAAK,MAAM,EAAE,CAAC;gBACzB,MAAM,SAAS,GAAG,IAAI,CAAC,gBAAgB,CAAC,WAAW,EAAE,CAAC,CAAY,CAAA;gBAClE,MAAM,KAAK,GAAI,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,CAAC,CAAY,IAAI,EAAE,CAAA;gBACjE,MAAM,GAAG,GAAG,MAAM,IAAA,yBAAkB,EAAsB,IAAI,EAAE;oBAC9D,MAAM,EAAE,KAAK;oBACb,QAAQ,EAAE,WAAW;iBACtB,CAAC,CAAA;gBACF,MAAM,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;gBACpF,UAAU,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;YACtD,CAAC;iBAAM,IAAI,SAAS,KAAK,QAAQ,EAAE,CAAC;gBAClC,MAAM,IAAI,GAAG;oBACX,GAAG,EAAE,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,CAAC,CAAW;oBAC9C,MAAM,EAAE,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,CAAC,CAAa;oBACtD,WAAW,EAAG,IAAI,CAAC,gBAAgB,CAAC,aAAa,EAAE,CAAC,CAAY,IAAI,SAAS;iBAC9E,CAAA;gBACD,MAAM,GAAG,GAAG,MAAM,IAAA,yBAAkB,EAAM,IAAI,EAAE;oBAC9C,MAAM,EAAE,MAAM;oBACd,QAAQ,EAAE,WAAW;oBACrB,IAAI;iBACL,CAAC,CAAA;gBACF,uEAAuE;gBACvE,UAAU,CAAC,IAAI,CAAC;oBACd,IAAI,EAAE;wBACJ,GAAG,GAAG;wBACN,QAAQ,EAAE,GAAG,CAAC,UAAU,IAAI,qDAAqD;qBAClF;iBACF,CAAC,CAAA;YACJ,CAAC;iBAAM,IAAI,SAAS,KAAK,QAAQ,EAAE,CAAC;gBAClC,MAAM,SAAS,GAAG,IAAI,CAAC,gBAAgB,CAAC,WAAW,EAAE,CAAC,CAAW,CAAA;gBACjE,MAAM,IAAI,GAAwB,EAAE,CAAA;gBACpC,MAAM,GAAG,GAAG,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,CAAC,CAAW,CAAA;gBACrD,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,CAAC,CAAa,CAAA;gBAC7D,MAAM,WAAW,GAAG,IAAI,CAAC,gBAAgB,CAAC,aAAa,EAAE,CAAC,CAAW,CAAA;gBACrE,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC,UAAU,EAAE,CAAC,EAAE,IAAI,CAAY,CAAA;gBACtE,IAAI,GAAG;oBAAE,IAAI,CAAC,GAAG,GAAG,GAAG,CAAA;gBACvB,IAAI,MAAM,IAAI,MAAM,CAAC,MAAM;oBAAE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;gBACjD,IAAI,WAAW,KAAK,SAAS;oBAAE,IAAI,CAAC,WAAW,GAAG,WAAW,CAAA;gBAC7D,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAA;gBACxB,MAAM,GAAG,GAAG,MAAM,IAAA,yBAAkB,EAAmB,IAAI,EAAE;oBAC3D,MAAM,EAAE,OAAO;oBACf,QAAQ,EAAE,aAAa,SAAS,EAAE;oBAClC,IAAI;iBACL,CAAC,CAAA;gBACF,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAA;YACxC,CAAC;iBAAM,IAAI,SAAS,KAAK,QAAQ,EAAE,CAAC;gBAClC,MAAM,SAAS,GAAG,IAAI,CAAC,gBAAgB,CAAC,WAAW,EAAE,CAAC,CAAW,CAAA;gBACjE,MAAM,GAAG,GAAG,MAAM,IAAA,yBAAkB,EAAM,IAAI,EAAE;oBAC9C,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,aAAa,SAAS,EAAE;iBACnC,CAAC,CAAA;gBACF,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,GAAG,EAAE,EAAE,CAAC,CAAA;YACjE,CAAC;QACH,CAAC;QAED,OAAO,CAAC,UAAU,CAAC,CAAA;IACrB,CAAC;CACF;AA9JD,0CA8JC"}