batchwork 1.0.0 → 1.0.1

package/dist/batch.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"batch.d.ts","sourceRoot":"","sources":["../src/batch.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAGjC,OAAO,KAAK,EACV,YAAY,EAEZ,QAAQ,EACR,WAAW,EAEZ,MAAM,SAAS,CAAC;AAoBjB;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,KAAK,YAAmB,YAAY,KAAG,OAAO,CAAC,QAAQ,CAwBnE,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,QAAQ,QAAe,QAAQ,KAAG,OAAO,CAAC,QAAQ,CAK9D,CAAC;AAEF,uEAAuE;AACvE,eAAO,MAAM,eAAe,QAAS,QAAQ,KAAG,cAAc,CAAC,WAAW,CAGzE,CAAC;AAEF,uDAAuD;AACvD,eAAO,MAAM,WAAW,QAAe,QAAQ,KAAG,OAAO,CAAC,IAAI,CAG7D,CAAC"}
+{"version":3,"file":"batch.d.ts","sourceRoot":"","sources":["../src/batch.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAIjC,OAAO,KAAK,EACV,YAAY,EAEZ,QAAQ,EACR,WAAW,EAEZ,MAAM,SAAS,CAAC;AAoBjB;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,KAAK,YAAmB,YAAY,KAAG,OAAO,CAAC,QAAQ,CA2BnE,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,QAAQ,QAAe,QAAQ,KAAG,OAAO,CAAC,QAAQ,CAK9D,CAAC;AAEF,uEAAuE;AACvE,eAAO,MAAM,eAAe,QAAS,QAAQ,KAAG,cAAc,CAAC,WAAW,CAGzE,CAAC;AAEF,uDAAuD;AACvD,eAAO,MAAM,WAAW,QAAe,QAAQ,KAAG,OAAO,CAAC,IAAI,CAG7D,CAAC"}

package/dist/body.d.ts

@@ -1,5 +1,6 @@
+import type { ResolvedBatchLimits } from "./limits";
 import type { ResolvedModel } from "./model";
-import type { BatchDefaults, BatchRequest, ProviderCredentials } from "./types";
+import type { BatchDefaults, BatchLimits, BatchRequest, ProviderCredentials } from "./types";
 /** A provider request body derived from a single batch item. */
 export interface BuiltRequest {
     /** The serialized provider request body (becomes the batch line). */
@@ -14,5 +15,5 @@ export interface BuiltRequest {
  * tool, and multimodal conversion, so the body matches what `generateText`
  * would send — minus the network call.
  */
-export declare const buildRequestBodies: (resolved: ResolvedModel, requests: readonly BatchRequest[], defaults: BatchDefaults | undefined, credentials: ProviderCredentials) => Promise<BuiltRequest[]>;
+export declare const buildRequestBodies: (resolved: ResolvedModel, requests: readonly BatchRequest[], defaults: BatchDefaults | undefined, credentials: ProviderCredentials, rawLimits?: BatchLimits | ResolvedBatchLimits) => Promise<BuiltRequest[]>;
 //# sourceMappingURL=body.d.ts.map

package/dist/body.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"body.d.ts","sourceRoot":"","sources":["../src/body.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAkB,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7D,OAAO,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,mBAAmB,EAAE,MAAM,SAAS,CAAC;AAIhF,gEAAgE;AAChE,MAAM,WAAW,YAAY;IAC3B,qEAAqE;IACrE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,wEAAwE;IACxE,QAAQ,EAAE,MAAM,CAAC;CAClB;AAuID;;;;;GAKG;AACH,eAAO,MAAM,kBAAkB,aACnB,aAAa,YACb,SAAS,YAAY,EAAE,YACvB,aAAa,GAAG,SAAS,eACtB,mBAAmB,KAC/B,OAAO,CAAC,YAAY,EAAE,CAsBxB,CAAC"}
+{"version":3,"file":"body.d.ts","sourceRoot":"","sources":["../src/body.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAC;AAEpD,OAAO,KAAK,EAAkB,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7D,OAAO,KAAK,EACV,aAAa,EACb,WAAW,EACX,YAAY,EACZ,mBAAmB,EACpB,MAAM,SAAS,CAAC;AAIjB,gEAAgE;AAChE,MAAM,WAAW,YAAY;IAC3B,qEAAqE;IACrE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,wEAAwE;IACxE,QAAQ,EAAE,MAAM,CAAC;CAClB;AAuID;;;;;GAKG;AACH,eAAO,MAAM,kBAAkB,aACnB,aAAa,YACb,SAAS,YAAY,EAAE,YACvB,aAAa,GAAG,SAAS,eACtB,mBAAmB,cACpB,WAAW,GAAG,mBAAmB,KAC5C,OAAO,CAAC,YAAY,EAAE,CAwCxB,CAAC"}

package/dist/{chunk-zp2cxkyb.js → chunk-e6qn48qa.js}

@@ -2,7 +2,7 @@ import {
   BatchworkError,
   getAdapter,
   isTerminalStatus
-} from "./chunk-kv3847wy.js";
+} from "./chunk-g481f961.js";
 
 // src/server/events.ts
 var EVENT_BY_STATUS = {
@@ -25,6 +25,20 @@ var SIGNATURE_VERSION = "v1";
 var TOLERANCE_SECONDS = 300;
 var SECRET_PREFIX = "whsec_";
 var encoder = new TextEncoder;
+var replayCache = new Map;
+var defaultReplayStore = {
+  get: (id) => replayCache.get(id),
+  set: (id, expiresAt) => {
+    replayCache.set(id, expiresAt);
+  }
+};
+var pruneReplayCache = (now) => {
+  for (const [id, expiresAt] of replayCache) {
+    if (expiresAt <= now) {
+      replayCache.delete(id);
+    }
+  }
+};
 var base64ToBytes = (value) => Uint8Array.from(atob(value), (char) => char.codePointAt(0) ?? 0);
 var bytesToBase64 = (bytes) => {
   let binary = "";
@@ -46,6 +60,16 @@ var verifyContent = async (secret, content, signature) => {
   const key = await importKey(secret);
   return crypto.subtle.verify("HMAC", key, base64ToBytes(signature), encoder.encode(content));
 };
+var rememberWebhookId = async (id, timestamp, now, store) => {
+  if (store === defaultReplayStore) {
+    pruneReplayCache(now);
+  }
+  const expiresAt = await store.get(id);
+  if (expiresAt && expiresAt > now) {
+    throw new BatchworkError("batchwork: webhook replay detected.");
+  }
+  await store.set(id, timestamp + TOLERANCE_SECONDS);
+};
 var signWebhook = async (secret, id, body, timestampSeconds) => {
   const timestamp = Math.floor(timestampSeconds).toString();
   const signature = await signContent(secret, `${id}.${timestamp}.${body}`);
@@ -55,7 +79,7 @@ var signWebhook = async (secret, id, body, timestampSeconds) => {
     "webhook-timestamp": timestamp
   };
 };
-var verifyWebhook = async (request, secret) => {
+var verifyWebhook = async (request, secret, options) => {
   const id = request.headers.get("webhook-id");
   const timestamp = request.headers.get("webhook-timestamp");
   const signatureHeader = request.headers.get("webhook-signature");
@@ -63,7 +87,8 @@ var verifyWebhook = async (request, secret) => {
     throw new BatchworkError("batchwork: missing webhook signature headers.");
   }
   const seconds = Number(timestamp);
-  if (!Number.isFinite(seconds) || Math.abs(Date.now() / 1000 - seconds) > TOLERANCE_SECONDS) {
+  const now = Date.now() / 1000;
+  if (!Number.isFinite(seconds) || Math.abs(now - seconds) > TOLERANCE_SECONDS) {
     throw new BatchworkError("batchwork: webhook timestamp outside tolerance.");
   }
   const body = await request.text();
@@ -82,18 +107,62 @@ var verifyWebhook = async (request, secret) => {
   if (!valid) {
     throw new BatchworkError("batchwork: webhook signature verification failed.");
   }
+  await rememberWebhookId(id, seconds, now, options?.replayStore ?? defaultReplayStore);
   return { body, id, timestamp: seconds };
 };
-var verifyBatchWebhook = async (request, secret) => {
-  const { body } = await verifyWebhook(request, secret);
+var verifyBatchWebhook = async (request, secret, options) => {
+  const { body } = await verifyWebhook(request, secret, options);
   return JSON.parse(body);
 };
 
 // src/server/poller.ts
-var sendWebhook = async (record, snapshot) => {
+var parseIpv4 = (host) => {
+  if (!/^\d{1,3}(?:\.\d{1,3}){3}$/u.test(host)) {
+    return;
+  }
+  const parts = host.split(".").map(Number);
+  const valid = parts.every((part) => Number.isInteger(part) && part >= 0 && part <= 255);
+  return valid ? parts : undefined;
+};
+var isPrivateIpv4 = (parts) => {
+  const [a = 0, b = 0] = parts;
+  return a === 0 || a === 10 || a === 127 || a === 100 && b >= 64 && b <= 127 || a === 169 && b === 254 || a === 172 && b >= 16 && b <= 31 || a === 192 && b === 168 || a === 198 && (b === 18 || b === 19) || a >= 224;
+};
+var isPrivateIpv6 = (host) => {
+  const normalized = host.replace(/^\[/u, "").replace(/\]$/u, "").toLowerCase();
+  return normalized === "::" || normalized === "::1" || normalized.startsWith("fc") || normalized.startsWith("fd") || normalized.startsWith("fe80:");
+};
+var isRedirectStatus = (status) => status >= 300 && status < 400;
+var assertSafeWebhookUrl = (url) => {
+  if (url.protocol !== "https:") {
+    throw new BatchworkError("batchwork: webhookUrl must use https.");
+  }
+  if (url.username || url.password) {
+    throw new BatchworkError("batchwork: webhookUrl must not include credentials.");
+  }
+  const host = url.hostname.toLowerCase();
+  const ipv4 = parseIpv4(host);
+  if (host === "localhost" || host.endsWith(".localhost") || host.endsWith(".local") || ipv4 && isPrivateIpv4(ipv4) || isPrivateIpv6(host)) {
+    throw new BatchworkError("batchwork: webhookUrl must not target localhost or private networks.");
+  }
+};
+var validateWebhookUrl = async (rawUrl, validator) => {
+  let url;
+  try {
+    url = new URL(rawUrl);
+  } catch (error) {
+    throw new BatchworkError("batchwork: webhookUrl must be a valid URL.", {
+      cause: error
+    });
+  }
+  await validator(url);
+  return url.toString();
+};
+var createWebhookSink = (validator) => async (record, snapshot) => {
   if (!record.webhookUrl) {
     throw new BatchworkError("batchwork: tracked batch has no webhookUrl to deliver to.");
   }
+  const webhookUrl = await validateWebhookUrl(record.webhookUrl, validator);
   const body = JSON.stringify(toEvent(record.provider, snapshot));
   const headers = {
     "content-type": "application/json"
@@ -101,13 +170,17 @@ var sendWebhook = async (record, snapshot) => {
   if (record.webhookSecret) {
     Object.assign(headers, await signWebhook(record.webhookSecret, record.id, body, Date.now() / 1000));
   }
-  const response = await fetch(record.webhookUrl, {
+  const response = await fetch(webhookUrl, {
     body,
     headers,
-    method: "POST"
+    method: "POST",
+    redirect: "manual"
   });
+  if (isRedirectStatus(response.status)) {
+    throw new BatchworkError(`batchwork: webhook delivery to ${webhookUrl} redirected (${response.status}).`);
+  }
   if (!response.ok) {
-    throw new BatchworkError(`batchwork: webhook delivery to ${record.webhookUrl} failed (${response.status}).`);
+    throw new BatchworkError(`batchwork: webhook delivery to ${webhookUrl} failed (${response.status}).`);
   }
 };
 var createBatchPoller = (options) => {
@@ -117,7 +190,8 @@ var createBatchPoller = (options) => {
     }
     return options.credentials ?? {};
   };
-  const sink = options.onComplete ?? sendWebhook;
+  const webhookUrlValidator = options.validateWebhookUrl ?? assertSafeWebhookUrl;
+  const sink = options.onComplete ?? createWebhookSink(webhookUrlValidator);
   const deliver = async (record, snapshot) => {
     await sink(record, snapshot);
     await options.store.set({
@@ -127,13 +201,14 @@ var createBatchPoller = (options) => {
     });
   };
   const track = async (target, opts) => {
+    const webhookUrl = opts.webhookUrl && !options.onComplete ? await validateWebhookUrl(opts.webhookUrl, webhookUrlValidator) : opts.webhookUrl;
     const record = {
       createdAt: new Date().toISOString(),
       id: target.id,
       provider: target.provider,
       status: target.status ?? "in_progress",
       webhookSecret: opts.secret,
-      webhookUrl: opts.webhookUrl
+      webhookUrl
     };
     await options.store.set(record);
     return record;
@@ -222,5 +297,5 @@ var createMemoryStore = () => {
 
 export { toEvent, signWebhook, verifyWebhook, verifyBatchWebhook, createBatchPoller, createMemoryStore };
 
-//# debugId=344750DFEF66E25964756E2164756E21
-//# sourceMappingURL=chunk-zp2cxkyb.js.map
+//# debugId=14EA1AD74C5676A164756E2164756E21
+//# sourceMappingURL=chunk-e6qn48qa.js.map

package/dist/chunk-e6qn48qa.js.map

@@ -0,0 +1,13 @@
+{
+  "version": 3,
+  "sources": ["../src/server/events.ts", "../src/server/signing.ts", "../src/server/poller.ts", "../src/server/store.ts"],
+  "sourcesContent": [
+    "import type { BatchProvider, BatchSnapshot, BatchStatus } from \"../types\";\nimport type { BatchWebhookEvent, BatchWebhookEventType } from \"./types\";\n\nconst EVENT_BY_STATUS: Partial<Record<BatchStatus, BatchWebhookEventType>> = {\n  cancelled: \"batch.cancelled\",\n  completed: \"batch.completed\",\n  expired: \"batch.expired\",\n  failed: \"batch.failed\",\n};\n\n/** Map a terminal snapshot to the unified webhook event batchwork delivers. */\nexport const toEvent = (\n  provider: BatchProvider,\n  snapshot: BatchSnapshot\n): BatchWebhookEvent => ({\n  completedAt: snapshot.completedAt?.toISOString(),\n  createdAt: snapshot.createdAt?.toISOString(),\n  id: snapshot.id,\n  provider,\n  requestCounts: snapshot.requestCounts,\n  type: EVENT_BY_STATUS[snapshot.status] ?? \"batch.completed\",\n});\n",
+    "import { BatchworkError } from \"../errors\";\nimport type { BatchWebhookEvent } from \"./types\";\n\n// Standard Webhooks-style HMAC-SHA256 signing, compatible with OpenAI's webhook\n// signatures (so the same verifier handles inbound OpenAI events and batchwork's\n// own outbound deliveries). Uses Web Crypto so it runs on edge runtimes.\n\nconst SIGNATURE_VERSION = \"v1\";\nconst TOLERANCE_SECONDS = 300;\nconst SECRET_PREFIX = \"whsec_\";\nconst encoder = new TextEncoder();\n\nexport interface WebhookReplayStore {\n  get: (id: string) => number | Promise<number | undefined> | undefined;\n  set: (id: string, expiresAt: number) => Promise<void> | void;\n}\n\nexport interface VerifyWebhookOptions {\n  replayStore?: WebhookReplayStore;\n}\n\nconst replayCache = new Map<string, number>();\n\nconst defaultReplayStore: WebhookReplayStore = {\n  get: (id) => replayCache.get(id),\n  set: (id, expiresAt) => {\n    replayCache.set(id, expiresAt);\n  },\n};\n\nconst pruneReplayCache = (now: number): void => {\n  for (const [id, expiresAt] of replayCache) {\n    if (expiresAt <= now) {\n      replayCache.delete(id);\n    }\n  }\n};\n\nconst base64ToBytes = (value: string): Uint8Array<ArrayBuffer> =>\n  Uint8Array.from(atob(value), (char) => char.codePointAt(0) ?? 0);\n\nconst bytesToBase64 = (bytes: Uint8Array): string => {\n  let binary = \"\";\n  for (const byte of bytes) {\n    binary += String.fromCodePoint(byte);\n  }\n  return btoa(binary);\n};\n\nconst importKey = (secret: string): Promise<CryptoKey> => {\n  const raw = secret.startsWith(SECRET_PREFIX)\n    ? base64ToBytes(secret.slice(SECRET_PREFIX.length))\n    : encoder.encode(secret);\n  return crypto.subtle.importKey(\n    \"raw\",\n    raw,\n    { hash: \"SHA-256\", name: \"HMAC\" },\n    false,\n    [\"sign\", \"verify\"]\n  );\n};\n\nconst signContent = async (\n  secret: string,\n  content: string\n): Promise<string> => {\n  const key = await importKey(secret);\n  const signature = await crypto.subtle.sign(\n    \"HMAC\",\n    key,\n    encoder.encode(content)\n  );\n  return bytesToBase64(new Uint8Array(signature));\n};\n\nconst verifyContent = async (\n  secret: string,\n  content: string,\n  signature: string\n): Promise<boolean> => {\n  const key = await importKey(secret);\n  return crypto.subtle.verify(\n    \"HMAC\",\n    key,\n    base64ToBytes(signature),\n    encoder.encode(content)\n  );\n};\n\nconst rememberWebhookId = async (\n  id: string,\n  timestamp: number,\n  now: number,\n  store: WebhookReplayStore\n): Promise<void> => {\n  if (store === defaultReplayStore) {\n    pruneReplayCache(now);\n  }\n  const expiresAt = await store.get(id);\n  if (expiresAt && expiresAt > now) {\n    throw new BatchworkError(\"batchwork: webhook replay detected.\");\n  }\n  await store.set(id, timestamp + TOLERANCE_SECONDS);\n};\n\n/** Build Standard Webhooks signature headers for an outbound delivery. */\nexport const signWebhook = async (\n  secret: string,\n  id: string,\n  body: string,\n  timestampSeconds: number\n): Promise<Record<string, string>> => {\n  const timestamp = Math.floor(timestampSeconds).toString();\n  const signature = await signContent(secret, `${id}.${timestamp}.${body}`);\n  return {\n    \"webhook-id\": id,\n    \"webhook-signature\": `${SIGNATURE_VERSION},${signature}`,\n    \"webhook-timestamp\": timestamp,\n  };\n};\n\nexport interface VerifiedWebhook {\n  id: string;\n  timestamp: number;\n  body: string;\n}\n\n/**\n * Verify a Standard Webhooks-signed request and return its raw body. Throws if\n * headers are missing, the timestamp is outside tolerance, or no signature\n * matches. Consumes the request body.\n */\nexport const verifyWebhook = async (\n  request: Request,\n  secret: string,\n  options?: VerifyWebhookOptions\n): Promise<VerifiedWebhook> => {\n  const id = request.headers.get(\"webhook-id\");\n  const timestamp = request.headers.get(\"webhook-timestamp\");\n  const signatureHeader = request.headers.get(\"webhook-signature\");\n  if (!(id && timestamp && signatureHeader)) {\n    throw new BatchworkError(\"batchwork: missing webhook signature headers.\");\n  }\n\n  const seconds = Number(timestamp);\n  const now = Date.now() / 1000;\n  if (\n    !Number.isFinite(seconds) ||\n    Math.abs(now - seconds) > TOLERANCE_SECONDS\n  ) {\n    throw new BatchworkError(\"batchwork: webhook timestamp outside tolerance.\");\n  }\n\n  const body = await request.text();\n  const content = `${id}.${timestamp}.${body}`;\n  const signatures = signatureHeader.split(\" \").map((part) => {\n    const comma = part.indexOf(\",\");\n    return comma === -1 ? part : part.slice(comma + 1);\n  });\n\n  let valid = false;\n  for (const signature of signatures) {\n    // oxlint-disable-next-line no-await-in-loop -- usually a single signature.\n    if (await verifyContent(secret, content, signature)) {\n      valid = true;\n      break;\n    }\n  }\n  if (!valid) {\n    throw new BatchworkError(\n      \"batchwork: webhook signature verification failed.\"\n    );\n  }\n\n  await rememberWebhookId(\n    id,\n    seconds,\n    now,\n    options?.replayStore ?? defaultReplayStore\n  );\n\n  return { body, id, timestamp: seconds };\n};\n\n/**\n * Verify and parse a batchwork webhook on your receiving endpoint. Returns the\n * unified {@link BatchWebhookEvent}.\n */\nexport const verifyBatchWebhook = async (\n  request: Request,\n  secret: string,\n  options?: VerifyWebhookOptions\n): Promise<BatchWebhookEvent> => {\n  const { body } = await verifyWebhook(request, secret, options);\n  return JSON.parse(body) as BatchWebhookEvent;\n};\n",
+    "import { BatchworkError } from \"../errors\";\nimport { isTerminalStatus } from \"../job\";\nimport { getAdapter } from \"../providers\";\nimport type {\n  BatchProvider,\n  BatchSnapshot,\n  BatchStatus,\n  ProviderCredentials,\n} from \"../types\";\nimport { toEvent } from \"./events\";\nimport { signWebhook, verifyWebhook } from \"./signing\";\nimport type { BatchStore, TrackedBatch } from \"./types\";\n\n/** Credentials for polling: a fixed config, or one resolved per provider. */\nexport type CredentialResolver =\n  | ProviderCredentials\n  | ((provider: BatchProvider) => ProviderCredentials);\n\n/**\n * Handles a batch reaching a terminal status. Replaces the default signed\n * webhook delivery — e.g. to invoke a callback instead (see `batchwork/next`).\n */\nexport type CompletionSink = (\n  record: TrackedBatch,\n  snapshot: BatchSnapshot\n) => Promise<void>;\n\nexport type WebhookUrlValidator = (url: URL) => void | Promise<void>;\n\nexport interface BatchPollerOptions {\n  store: BatchStore;\n  /** Falls back to provider env vars (e.g. `OPENAI_API_KEY`) when omitted. */\n  credentials?: CredentialResolver;\n  /** Replaces signed-webhook delivery when a batch finishes. */\n  onComplete?: CompletionSink;\n  /** Override the default webhook URL policy with an application allowlist. */\n  validateWebhookUrl?: WebhookUrlValidator;\n  /**\n   * Called when processing a single batch throws during `tick`. When provided,\n   * the tick reports the error and continues to the next batch; when omitted,\n   * the error propagates out of `tick`.\n   */\n  onError?: (record: TrackedBatch, error: unknown) => void;\n}\n\nexport interface TrackTarget {\n  id: string;\n  provider: BatchProvider;\n  status?: BatchStatus;\n}\n\nexport interface TrackOptions {\n  /** Where to POST the completion webhook. Omit for callback-based delivery. */\n  webhookUrl?: string;\n  /** Signs the outbound webhook (Standard Webhooks HMAC) when provided. */\n  secret?: string;\n}\n\nexport interface TickResult {\n  checked: number;\n  delivered: string[];\n  /** Batches whose processing threw this tick (only when `onError` is set). */\n  failed?: { id: string; error: string }[];\n}\n\nexport interface OpenAIWebhookOptions {\n  /** The OpenAI webhook signing secret (`whsec_…`). */\n  signingSecret: string;\n}\n\nexport interface BatchPoller {\n  track: (target: TrackTarget, options: TrackOptions) => Promise<TrackedBatch>;\n  tick: () => Promise<TickResult>;\n  deliver: (record: TrackedBatch, snapshot: BatchSnapshot) => Promise<void>;\n  openaiWebhookHandler: (\n    options: OpenAIWebhookOptions\n  ) => (request: Request) => Promise<Response>;\n}\n\nconst parseIpv4 = (host: string): number[] | undefined => {\n  if (!/^\\d{1,3}(?:\\.\\d{1,3}){3}$/u.test(host)) {\n    return;\n  }\n  const parts = host.split(\".\").map(Number);\n  const valid = parts.every(\n    (part) => Number.isInteger(part) && part >= 0 && part <= 255\n  );\n  return valid ? parts : undefined;\n};\n\nconst isPrivateIpv4 = (parts: number[]): boolean => {\n  const [a = 0, b = 0] = parts;\n  return (\n    a === 0 ||\n    a === 10 ||\n    a === 127 ||\n    (a === 100 && b >= 64 && b <= 127) ||\n    (a === 169 && b === 254) ||\n    (a === 172 && b >= 16 && b <= 31) ||\n    (a === 192 && b === 168) ||\n    (a === 198 && (b === 18 || b === 19)) ||\n    a >= 224\n  );\n};\n\nconst isPrivateIpv6 = (host: string): boolean => {\n  const normalized = host.replace(/^\\[/u, \"\").replace(/\\]$/u, \"\").toLowerCase();\n  return (\n    normalized === \"::\" ||\n    normalized === \"::1\" ||\n    normalized.startsWith(\"fc\") ||\n    normalized.startsWith(\"fd\") ||\n    normalized.startsWith(\"fe80:\")\n  );\n};\n\nconst isRedirectStatus = (status: number): boolean =>\n  status >= 300 && status < 400;\n\nconst assertSafeWebhookUrl: WebhookUrlValidator = (url) => {\n  if (url.protocol !== \"https:\") {\n    throw new BatchworkError(\"batchwork: webhookUrl must use https.\");\n  }\n  if (url.username || url.password) {\n    throw new BatchworkError(\n      \"batchwork: webhookUrl must not include credentials.\"\n    );\n  }\n\n  const host = url.hostname.toLowerCase();\n  const ipv4 = parseIpv4(host);\n  if (\n    host === \"localhost\" ||\n    host.endsWith(\".localhost\") ||\n    host.endsWith(\".local\") ||\n    (ipv4 && isPrivateIpv4(ipv4)) ||\n    isPrivateIpv6(host)\n  ) {\n    throw new BatchworkError(\n      \"batchwork: webhookUrl must not target localhost or private networks.\"\n    );\n  }\n};\n\nconst validateWebhookUrl = async (\n  rawUrl: string,\n  validator: WebhookUrlValidator\n): Promise<string> => {\n  let url: URL;\n  try {\n    url = new URL(rawUrl);\n  } catch (error) {\n    throw new BatchworkError(\"batchwork: webhookUrl must be a valid URL.\", {\n      cause: error,\n    });\n  }\n  await validator(url);\n  return url.toString();\n};\n\n/** The default completion sink: POST a signed webhook to the tracked URL. */\nconst createWebhookSink =\n  (validator: WebhookUrlValidator): CompletionSink =>\n  async (record, snapshot) => {\n    if (!record.webhookUrl) {\n      throw new BatchworkError(\n        \"batchwork: tracked batch has no webhookUrl to deliver to.\"\n      );\n    }\n    const webhookUrl = await validateWebhookUrl(record.webhookUrl, validator);\n    const body = JSON.stringify(toEvent(record.provider, snapshot));\n    const headers: Record<string, string> = {\n      \"content-type\": \"application/json\",\n    };\n    if (record.webhookSecret) {\n      Object.assign(\n        headers,\n        await signWebhook(\n          record.webhookSecret,\n          record.id,\n          body,\n          Date.now() / 1000\n        )\n      );\n    }\n    const response = await fetch(webhookUrl, {\n      body,\n      headers,\n      method: \"POST\",\n      redirect: \"manual\",\n    });\n    if (isRedirectStatus(response.status)) {\n      throw new BatchworkError(\n        `batchwork: webhook delivery to ${webhookUrl} redirected (${response.status}).`\n      );\n    }\n    if (!response.ok) {\n      throw new BatchworkError(\n        `batchwork: webhook delivery to ${webhookUrl} failed (${response.status}).`\n      );\n    }\n  };\n\n/**\n * Create a managed poller: register submitted batches with `track`, then run\n * `tick` on a schedule (cron) to poll open batches and deliver one unified,\n * signed webhook per batch when it finishes. For OpenAI, mount\n * `openaiWebhookHandler` to skip polling and react to native webhooks instead.\n */\nexport const createBatchPoller = (options: BatchPollerOptions): BatchPoller => {\n  const resolveCredentials = (provider: BatchProvider): ProviderCredentials => {\n    if (typeof options.credentials === \"function\") {\n      return options.credentials(provider);\n    }\n    return options.credentials ?? {};\n  };\n\n  const webhookUrlValidator =\n    options.validateWebhookUrl ?? assertSafeWebhookUrl;\n  const sink = options.onComplete ?? createWebhookSink(webhookUrlValidator);\n\n  const deliver = async (\n    record: TrackedBatch,\n    snapshot: BatchSnapshot\n  ): Promise<void> => {\n    // Run the side effect before marking delivered: if it throws, the record\n    // stays pending and is retried on the next tick (at-least-once delivery).\n    await sink(record, snapshot);\n    await options.store.set({\n      ...record,\n      deliveredAt: new Date().toISOString(),\n      status: snapshot.status,\n    });\n  };\n\n  const track = async (\n    target: TrackTarget,\n    opts: TrackOptions\n  ): Promise<TrackedBatch> => {\n    const webhookUrl =\n      opts.webhookUrl && !options.onComplete\n        ? await validateWebhookUrl(opts.webhookUrl, webhookUrlValidator)\n        : opts.webhookUrl;\n    const record: TrackedBatch = {\n      createdAt: new Date().toISOString(),\n      id: target.id,\n      provider: target.provider,\n      status: target.status ?? \"in_progress\",\n      webhookSecret: opts.secret,\n      webhookUrl,\n    };\n    await options.store.set(record);\n    return record;\n  };\n\n  const process = async (\n    record: TrackedBatch,\n    delivered: string[]\n  ): Promise<void> => {\n    const adapter = getAdapter(record.provider);\n    const snapshot = await adapter.retrieve(\n      record.id,\n      resolveCredentials(record.provider)\n    );\n    if (isTerminalStatus(snapshot.status)) {\n      await deliver(record, snapshot);\n      delivered.push(record.id);\n    } else if (snapshot.status !== record.status) {\n      await options.store.set({ ...record, status: snapshot.status });\n    }\n  };\n\n  const tick = async (): Promise<TickResult> => {\n    const pending = await options.store.list({ delivered: false });\n    const delivered: string[] = [];\n    const failed: { id: string; error: string }[] = [];\n    for (const record of pending) {\n      // oxlint-disable-next-line no-await-in-loop -- batches are polled serially\n      // to avoid hammering provider rate limits; deliver before the next.\n      try {\n        // oxlint-disable-next-line no-await-in-loop -- see above.\n        await process(record, delivered);\n      } catch (error) {\n        // Without an `onError` handler, preserve the propagate-the-throw\n        // behavior; with one, report and continue so a single failing batch\n        // can't starve the rest of the queue. Either way the record stays\n        // pending (it was never marked delivered) and retries next tick.\n        if (!options.onError) {\n          throw error;\n        }\n        options.onError(record, error);\n        failed.push({\n          error: error instanceof Error ? error.message : String(error),\n          id: record.id,\n        });\n      }\n    }\n    return failed.length > 0\n      ? { checked: pending.length, delivered, failed }\n      : { checked: pending.length, delivered };\n  };\n\n  const openaiWebhookHandler =\n    (config: OpenAIWebhookOptions) =>\n    async (request: Request): Promise<Response> => {\n      let verified: { body: string };\n      try {\n        verified = await verifyWebhook(request, config.signingSecret);\n      } catch {\n        return new Response(\"invalid signature\", { status: 400 });\n      }\n\n      const payload = JSON.parse(verified.body) as {\n        type?: string;\n        data?: { id?: string };\n      };\n      if (!payload.type?.startsWith(\"batch.\")) {\n        return new Response(\"ignored\", { status: 202 });\n      }\n      const id = payload.data?.id;\n      if (!id) {\n        return new Response(\"missing batch id\", { status: 400 });\n      }\n      const record = await options.store.get(id);\n      if (!record || record.deliveredAt) {\n        return new Response(\"ok\", { status: 200 });\n      }\n      const snapshot = await getAdapter(\"openai\").retrieve(\n        id,\n        resolveCredentials(\"openai\")\n      );\n      if (isTerminalStatus(snapshot.status)) {\n        await deliver(record, snapshot);\n      }\n      return new Response(\"ok\", { status: 200 });\n    };\n\n  return { deliver, openaiWebhookHandler, tick, track };\n};\n",
+    "import type { BatchStore, TrackedBatch } from \"./types\";\n\n/** An in-memory `BatchStore`. Suitable for development and single-process use. */\nexport const createMemoryStore = (): BatchStore => {\n  const records = new Map<string, TrackedBatch>();\n\n  return {\n    delete: (id) => {\n      records.delete(id);\n      return Promise.resolve();\n    },\n    get: (id) => Promise.resolve(records.get(id) ?? null),\n    list: (filter) => {\n      const all = [...records.values()];\n      if (filter?.delivered === undefined) {\n        return Promise.resolve(all);\n      }\n      const { delivered } = filter;\n      return Promise.resolve(\n        all.filter((record) => (record.deliveredAt !== undefined) === delivered)\n      );\n    },\n    set: (record) => {\n      records.set(record.id, record);\n      return Promise.resolve();\n    },\n  };\n};\n"
+  ],
+  "mappings": ";;;;;;;AAGA,IAAM,kBAAuE;AAAA,EAC3E,WAAW;AAAA,EACX,WAAW;AAAA,EACX,SAAS;AAAA,EACT,QAAQ;AACV;AAGO,IAAM,UAAU,CACrB,UACA,cACuB;AAAA,EACvB,aAAa,SAAS,aAAa,YAAY;AAAA,EAC/C,WAAW,SAAS,WAAW,YAAY;AAAA,EAC3C,IAAI,SAAS;AAAA,EACb;AAAA,EACA,eAAe,SAAS;AAAA,EACxB,MAAM,gBAAgB,SAAS,WAAW;AAC5C;;;ACdA,IAAM,oBAAoB;AAC1B,IAAM,oBAAoB;AAC1B,IAAM,gBAAgB;AACtB,IAAM,UAAU,IAAI;AAWpB,IAAM,cAAc,IAAI;AAExB,IAAM,qBAAyC;AAAA,EAC7C,KAAK,CAAC,OAAO,YAAY,IAAI,EAAE;AAAA,EAC/B,KAAK,CAAC,IAAI,cAAc;AAAA,IACtB,YAAY,IAAI,IAAI,SAAS;AAAA;AAEjC;AAEA,IAAM,mBAAmB,CAAC,QAAsB;AAAA,EAC9C,YAAY,IAAI,cAAc,aAAa;AAAA,IACzC,IAAI,aAAa,KAAK;AAAA,MACpB,YAAY,OAAO,EAAE;AAAA,IACvB;AAAA,EACF;AAAA;AAGF,IAAM,gBAAgB,CAAC,UACrB,WAAW,KAAK,KAAK,KAAK,GAAG,CAAC,SAAS,KAAK,YAAY,CAAC,KAAK,CAAC;AAEjE,IAAM,gBAAgB,CAAC,UAA8B;AAAA,EACnD,IAAI,SAAS;AAAA,EACb,WAAW,QAAQ,OAAO;AAAA,IACxB,UAAU,OAAO,cAAc,IAAI;AAAA,EACrC;AAAA,EACA,OAAO,KAAK,MAAM;AAAA;AAGpB,IAAM,YAAY,CAAC,WAAuC;AAAA,EACxD,MAAM,MAAM,OAAO,WAAW,aAAa,IACvC,cAAc,OAAO,MAAM,cAAc,MAAM,CAAC,IAChD,QAAQ,OAAO,MAAM;AAAA,EACzB,OAAO,OAAO,OAAO,UACnB,OACA,KACA,EAAE,MAAM,WAAW,MAAM,OAAO,GAChC,OACA,CAAC,QAAQ,QAAQ,CACnB;AAAA;AAGF,IAAM,cAAc,OAClB,QACA,YACoB;AAAA,EACpB,MAAM,MAAM,MAAM,UAAU,MAAM;AAAA,EAClC,MAAM,YAAY,MAAM,OAAO,OAAO,KACpC,QACA,KACA,QAAQ,OAAO,OAAO,CACxB;AAAA,EACA,OAAO,cAAc,IAAI,WAAW,SAAS,CAAC;AAAA;AAGhD,IAAM,gBAAgB,OACpB,QACA,SACA,cACqB;AAAA,EACrB,MAAM,MAAM,MAAM,UAAU,MAAM;AAAA,EAClC,OAAO,OAAO,OAAO,OACnB,QACA,KACA,cAAc,SAAS,GACvB,QAAQ,OAAO,OAAO,CACxB;AAAA;AAGF,IAAM,oBAAoB,OACxB,IACA,WACA,KACA,UACkB;AAAA,EAClB,IAAI,UAAU,oBAAoB;AAAA,IAChC,iBAAiB,GAAG;AAAA,EACtB;AAAA,EACA,MAAM,YAAY,MAAM,MAAM,IAAI,EAAE;AAAA,EACpC,IAAI,aAAa,YAAY,KAAK;AAAA,IAChC,MAAM,IAAI,eAAe,qCAAqC;AAAA,EAChE;AAAA,EACA,MAAM,MAAM,IAAI,IAAI,YAAY,iBAAiB;AAAA;AAI5C,IAAM,cAAc,OACzB,QACA,IACA,MACA,qBACoC;AAAA,EACpC,MAAM,YAAY,KAAK,MAAM,gBAAgB,EAAE,SAAS;AAAA,EACxD,MAAM,YAAY,MAAM,YAAY,QAAQ,GAAG,MAAM,aAAa,MAAM;AAAA,EACxE,OAAO;AAAA,IACL,cAAc;AAAA,IACd,qBAAqB,GAAG,qBAAqB;AAAA,IAC7C,qBAAqB;AAAA,EACvB;AAAA;AAcK,IAAM,gBAAgB,OAC3B,SACA,QACA,YAC6B;AAAA,EAC7B,MAAM,KAAK,QAAQ,QAAQ,IAAI,YAAY;AAAA,EAC3C,MAAM,YAAY,QAAQ,QAAQ,IAAI,mBAAmB;AAAA,EACzD,MAAM,kBAAkB,QAAQ,QAAQ,IAAI,mBAAmB;AAAA,EAC/D,IAAI,EAAE,MAAM,aAAa,kBAAkB;AAAA,IACzC,MAAM,IAAI,eAAe,+CAA+C;AAAA,EAC1E;AAAA,EAEA,MAAM,UAAU,OAAO,SAAS;AAAA,EAChC,MAAM,MAAM,KAAK,IAAI,IAAI;AAAA,EACzB,IACE,CAAC,OAAO,SAAS,OAAO,KACxB,KAAK,IAAI,MAAM,OAAO,IAAI,mBAC1B;AAAA,IACA,MAAM,IAAI,eAAe,iDAAiD;AAAA,EAC5E;AAAA,EAEA,MAAM,OAAO,MAAM,QAAQ,KAAK;AAAA,EAChC,MAAM,UAAU,GAAG,MAAM,aAAa;AAAA,EACtC,MAAM,aAAa,gBAAgB,MAAM,GAAG,EAAE,IAAI,CAAC,SAAS;AAAA,IAC1D,MAAM,QAAQ,KAAK,QAAQ,GAAG;AAAA,IAC9B,OAAO,UAAU,KAAK,OAAO,KAAK,MAAM,QAAQ,CAAC;AAAA,GAClD;AAAA,EAED,IAAI,QAAQ;AAAA,EACZ,WAAW,aAAa,YAAY;AAAA,IAElC,IAAI,MAAM,cAAc,QAAQ,SAAS,SAAS,GAAG;AAAA,MACnD,QAAQ;AAAA,MACR;AAAA,IACF;AAAA,EACF;AAAA,EACA,IAAI,CAAC,OAAO;AAAA,IACV,MAAM,IAAI,eACR,mDACF;AAAA,EACF;AAAA,EAEA,MAAM,kBACJ,IACA,SACA,KACA,SAAS,eAAe,kBAC1B;AAAA,EAEA,OAAO,EAAE,MAAM,IAAI,WAAW,QAAQ;AAAA;AAOjC,IAAM,qBAAqB,OAChC,SACA,QACA,YAC+B;AAAA,EAC/B,QAAQ,SAAS,MAAM,cAAc,SAAS,QAAQ,OAAO;AAAA,EAC7D,OAAO,KAAK,MAAM,IAAI;AAAA;;;ACnHxB,IAAM,YAAY,CAAC,SAAuC;AAAA,EACxD,IAAI,CAAC,6BAA6B,KAAK,IAAI,GAAG;AAAA,IAC5C;AAAA,EACF;AAAA,EACA,MAAM,QAAQ,KAAK,MAAM,GAAG,EAAE,IAAI,MAAM;AAAA,EACxC,MAAM,QAAQ,MAAM,MAClB,CAAC,SAAS,OAAO,UAAU,IAAI,KAAK,QAAQ,KAAK,QAAQ,GAC3D;AAAA,EACA,OAAO,QAAQ,QAAQ;AAAA;AAGzB,IAAM,gBAAgB,CAAC,UAA6B;AAAA,EAClD,OAAO,IAAI,GAAG,IAAI,KAAK;AAAA,EACvB,OACE,MAAM,KACN,MAAM,MACN,MAAM,OACL,MAAM,OAAO,KAAK,MAAM,KAAK,OAC7B,MAAM,OAAO,MAAM,OACnB,MAAM,OAAO,KAAK,MAAM,KAAK,MAC7B,MAAM,OAAO,MAAM,OACnB,MAAM,QAAQ,MAAM,MAAM,MAAM,OACjC,KAAK;AAAA;AAIT,IAAM,gBAAgB,CAAC,SAA0B;AAAA,EAC/C,MAAM,aAAa,KAAK,QAAQ,QAAQ,EAAE,EAAE,QAAQ,QAAQ,EAAE,EAAE,YAAY;AAAA,EAC5E,OACE,eAAe,QACf,eAAe,SACf,WAAW,WAAW,IAAI,KAC1B,WAAW,WAAW,IAAI,KAC1B,WAAW,WAAW,OAAO;AAAA;AAIjC,IAAM,mBAAmB,CAAC,WACxB,UAAU,OAAO,SAAS;AAE5B,IAAM,uBAA4C,CAAC,QAAQ;AAAA,EACzD,IAAI,IAAI,aAAa,UAAU;AAAA,IAC7B,MAAM,IAAI,eAAe,uCAAuC;AAAA,EAClE;AAAA,EACA,IAAI,IAAI,YAAY,IAAI,UAAU;AAAA,IAChC,MAAM,IAAI,eACR,qDACF;AAAA,EACF;AAAA,EAEA,MAAM,OAAO,IAAI,SAAS,YAAY;AAAA,EACtC,MAAM,OAAO,UAAU,IAAI;AAAA,EAC3B,IACE,SAAS,eACT,KAAK,SAAS,YAAY,KAC1B,KAAK,SAAS,QAAQ,KACrB,QAAQ,cAAc,IAAI,KAC3B,cAAc,IAAI,GAClB;AAAA,IACA,MAAM,IAAI,eACR,sEACF;AAAA,EACF;AAAA;AAGF,IAAM,qBAAqB,OACzB,QACA,cACoB;AAAA,EACpB,IAAI;AAAA,EACJ,IAAI;AAAA,IACF,MAAM,IAAI,IAAI,MAAM;AAAA,IACpB,OAAO,OAAO;AAAA,IACd,MAAM,IAAI,eAAe,8CAA8C;AAAA,MACrE,OAAO;AAAA,IACT,CAAC;AAAA;AAAA,EAEH,MAAM,UAAU,GAAG;AAAA,EACnB,OAAO,IAAI,SAAS;AAAA;AAItB,IAAM,oBACJ,CAAC,cACD,OAAO,QAAQ,aAAa;AAAA,EAC1B,IAAI,CAAC,OAAO,YAAY;AAAA,IACtB,MAAM,IAAI,eACR,2DACF;AAAA,EACF;AAAA,EACA,MAAM,aAAa,MAAM,mBAAmB,OAAO,YAAY,SAAS;AAAA,EACxE,MAAM,OAAO,KAAK,UAAU,QAAQ,OAAO,UAAU,QAAQ,CAAC;AAAA,EAC9D,MAAM,UAAkC;AAAA,IACtC,gBAAgB;AAAA,EAClB;AAAA,EACA,IAAI,OAAO,eAAe;AAAA,IACxB,OAAO,OACL,SACA,MAAM,YACJ,OAAO,eACP,OAAO,IACP,MACA,KAAK,IAAI,IAAI,IACf,CACF;AAAA,EACF;AAAA,EACA,MAAM,WAAW,MAAM,MAAM,YAAY;AAAA,IACvC;AAAA,IACA;AAAA,IACA,QAAQ;AAAA,IACR,UAAU;AAAA,EACZ,CAAC;AAAA,EACD,IAAI,iBAAiB,SAAS,MAAM,GAAG;AAAA,IACrC,MAAM,IAAI,eACR,kCAAkC,0BAA0B,SAAS,UACvE;AAAA,EACF;AAAA,EACA,IAAI,CAAC,SAAS,IAAI;AAAA,IAChB,MAAM,IAAI,eACR,kCAAkC,sBAAsB,SAAS,UACnE;AAAA,EACF;AAAA;AASG,IAAM,oBAAoB,CAAC,YAA6C;AAAA,EAC7E,MAAM,qBAAqB,CAAC,aAAiD;AAAA,IAC3E,IAAI,OAAO,QAAQ,gBAAgB,YAAY;AAAA,MAC7C,OAAO,QAAQ,YAAY,QAAQ;AAAA,IACrC;AAAA,IACA,OAAO,QAAQ,eAAe,CAAC;AAAA;AAAA,EAGjC,MAAM,sBACJ,QAAQ,sBAAsB;AAAA,EAChC,MAAM,OAAO,QAAQ,cAAc,kBAAkB,mBAAmB;AAAA,EAExE,MAAM,UAAU,OACd,QACA,aACkB;AAAA,IAGlB,MAAM,KAAK,QAAQ,QAAQ;AAAA,IAC3B,MAAM,QAAQ,MAAM,IAAI;AAAA,SACnB;AAAA,MACH,aAAa,IAAI,KAAK,EAAE,YAAY;AAAA,MACpC,QAAQ,SAAS;AAAA,IACnB,CAAC;AAAA;AAAA,EAGH,MAAM,QAAQ,OACZ,QACA,SAC0B;AAAA,IAC1B,MAAM,aACJ,KAAK,cAAc,CAAC,QAAQ,aACxB,MAAM,mBAAmB,KAAK,YAAY,mBAAmB,IAC7D,KAAK;AAAA,IACX,MAAM,SAAuB;AAAA,MAC3B,WAAW,IAAI,KAAK,EAAE,YAAY;AAAA,MAClC,IAAI,OAAO;AAAA,MACX,UAAU,OAAO;AAAA,MACjB,QAAQ,OAAO,UAAU;AAAA,MACzB,eAAe,KAAK;AAAA,MACpB;AAAA,IACF;AAAA,IACA,MAAM,QAAQ,MAAM,IAAI,MAAM;AAAA,IAC9B,OAAO;AAAA;AAAA,EAGT,MAAM,UAAU,OACd,QACA,cACkB;AAAA,IAClB,MAAM,UAAU,WAAW,OAAO,QAAQ;AAAA,IAC1C,MAAM,WAAW,MAAM,QAAQ,SAC7B,OAAO,IACP,mBAAmB,OAAO,QAAQ,CACpC;AAAA,IACA,IAAI,iBAAiB,SAAS,MAAM,GAAG;AAAA,MACrC,MAAM,QAAQ,QAAQ,QAAQ;AAAA,MAC9B,UAAU,KAAK,OAAO,EAAE;AAAA,IAC1B,EAAO,SAAI,SAAS,WAAW,OAAO,QAAQ;AAAA,MAC5C,MAAM,QAAQ,MAAM,IAAI,KAAK,QAAQ,QAAQ,SAAS,OAAO,CAAC;AAAA,IAChE;AAAA;AAAA,EAGF,MAAM,OAAO,YAAiC;AAAA,IAC5C,MAAM,UAAU,MAAM,QAAQ,MAAM,KAAK,EAAE,WAAW,MAAM,CAAC;AAAA,IAC7D,MAAM,YAAsB,CAAC;AAAA,IAC7B,MAAM,SAA0C,CAAC;AAAA,IACjD,WAAW,UAAU,SAAS;AAAA,MAG5B,IAAI;AAAA,QAEF,MAAM,QAAQ,QAAQ,SAAS;AAAA,QAC/B,OAAO,OAAO;AAAA,QAKd,IAAI,CAAC,QAAQ,SAAS;AAAA,UACpB,MAAM;AAAA,QACR;AAAA,QACA,QAAQ,QAAQ,QAAQ,KAAK;AAAA,QAC7B,OAAO,KAAK;AAAA,UACV,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAAA,UAC5D,IAAI,OAAO;AAAA,QACb,CAAC;AAAA;AAAA,IAEL;AAAA,IACA,OAAO,OAAO,SAAS,IACnB,EAAE,SAAS,QAAQ,QAAQ,WAAW,OAAO,IAC7C,EAAE,SAAS,QAAQ,QAAQ,UAAU;AAAA;AAAA,EAG3C,MAAM,uBACJ,CAAC,WACD,OAAO,YAAwC;AAAA,IAC7C,IAAI;AAAA,IACJ,IAAI;AAAA,MACF,WAAW,MAAM,cAAc,SAAS,OAAO,aAAa;AAAA,MAC5D,MAAM;AAAA,MACN,OAAO,IAAI,SAAS,qBAAqB,EAAE,QAAQ,IAAI,CAAC;AAAA;AAAA,IAG1D,MAAM,UAAU,KAAK,MAAM,SAAS,IAAI;AAAA,IAIxC,IAAI,CAAC,QAAQ,MAAM,WAAW,QAAQ,GAAG;AAAA,MACvC,OAAO,IAAI,SAAS,WAAW,EAAE,QAAQ,IAAI,CAAC;AAAA,IAChD;AAAA,IACA,MAAM,KAAK,QAAQ,MAAM;AAAA,IACzB,IAAI,CAAC,IAAI;AAAA,MACP,OAAO,IAAI,SAAS,oBAAoB,EAAE,QAAQ,IAAI,CAAC;AAAA,IACzD;AAAA,IACA,MAAM,SAAS,MAAM,QAAQ,MAAM,IAAI,EAAE;AAAA,IACzC,IAAI,CAAC,UAAU,OAAO,aAAa;AAAA,MACjC,OAAO,IAAI,SAAS,MAAM,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC3C;AAAA,IACA,MAAM,WAAW,MAAM,WAAW,QAAQ,EAAE,SAC1C,IACA,mBAAmB,QAAQ,CAC7B;AAAA,IACA,IAAI,iBAAiB,SAAS,MAAM,GAAG;AAAA,MACrC,MAAM,QAAQ,QAAQ,QAAQ;AAAA,IAChC;AAAA,IACA,OAAO,IAAI,SAAS,MAAM,EAAE,QAAQ,IAAI,CAAC;AAAA;AAAA,EAG7C,OAAO,EAAE,SAAS,sBAAsB,MAAM,MAAM;AAAA;;;AC9U/C,IAAM,oBAAoB,MAAkB;AAAA,EACjD,MAAM,UAAU,IAAI;AAAA,EAEpB,OAAO;AAAA,IACL,QAAQ,CAAC,OAAO;AAAA,MACd,QAAQ,OAAO,EAAE;AAAA,MACjB,OAAO,QAAQ,QAAQ;AAAA;AAAA,IAEzB,KAAK,CAAC,OAAO,QAAQ,QAAQ,QAAQ,IAAI,EAAE,KAAK,IAAI;AAAA,IACpD,MAAM,CAAC,WAAW;AAAA,MAChB,MAAM,MAAM,CAAC,GAAG,QAAQ,OAAO,CAAC;AAAA,MAChC,IAAI,QAAQ,cAAc,WAAW;AAAA,QACnC,OAAO,QAAQ,QAAQ,GAAG;AAAA,MAC5B;AAAA,MACA,QAAQ,cAAc;AAAA,MACtB,OAAO,QAAQ,QACb,IAAI,OAAO,CAAC,WAAY,OAAO,gBAAgB,cAAe,SAAS,CACzE;AAAA;AAAA,IAEF,KAAK,CAAC,WAAW;AAAA,MACf,QAAQ,IAAI,OAAO,IAAI,MAAM;AAAA,MAC7B,OAAO,QAAQ,QAAQ;AAAA;AAAA,EAE3B;AAAA;",
+  "debugId": "14EA1AD74C5676A164756E2164756E21",
+  "names": []
+}