happy2 0.0.5

package/packages/happy2-server/dist/modules/integrations/transport.js

@@ -0,0 +1,108 @@
+import { createHash } from "node:crypto";
+import { request as httpRequest } from "node:http";
+import { request as httpsRequest } from "node:https";
+/**
+ * Standard-library webhook transport. It never follows redirects and overrides
+ * DNS lookup with an address approved by StrictWebhookUrlPolicy, preserving the
+ * original hostname for Host and TLS certificate/SNI verification.
+ */
+export class NodeWebhookTransport {
+    timeoutMs;
+    maximumRequestBytes;
+    maximumResponseBytes;
+    userAgent;
+    constructor(options = {}) {
+        this.timeoutMs = positiveInteger(options.timeoutMs ?? 10_000, "timeoutMs", 120_000);
+        this.maximumRequestBytes = positiveInteger(options.maximumRequestBytes ?? 1_000_000, "maximumRequestBytes", 10_000_000);
+        this.maximumResponseBytes = positiveInteger(options.maximumResponseBytes ?? 256_000, "maximumResponseBytes", 2_000_000);
+        this.userAgent = options.userAgent ?? "happy2-webhook/1.0";
+        if (!this.userAgent || /[\r\n]/.test(this.userAgent))
+            throw new TypeError("userAgent must be a valid HTTP header value");
+    }
+    async deliver(input) {
+        const url = new URL(input.url);
+        if (url.protocol !== "http:" && url.protocol !== "https:")
+            throw new Error("Webhook transport supports only HTTP and HTTPS");
+        if (url.username || url.password)
+            throw new Error("Webhook transport does not allow URL credentials");
+        if (input.allowedAddresses.length === 0)
+            throw new Error("Webhook transport requires an approved destination address");
+        const requestBytes = Buffer.byteLength(input.body, "utf8");
+        if (requestBytes > this.maximumRequestBytes)
+            throw new Error("Webhook request body exceeds the configured limit");
+        const target = selectAddress(input);
+        const lookup = (_hostname, _options, callback) => {
+            if (_options.all)
+                callback(null, [target]);
+            else
+                callback(null, target.address, target.family);
+        };
+        const headers = {
+            ...input.headers,
+            "content-length": String(requestBytes),
+            "user-agent": this.userAgent,
+        };
+        const options = {
+            method: "POST",
+            headers,
+            lookup,
+            // Prevent a pooled socket from carrying a later request to an address
+            // that was not selected for that delivery.
+            agent: false,
+            setHost: true,
+        };
+        return new Promise((resolve, reject) => {
+            let settled = false;
+            const finish = (error, response) => {
+                if (settled)
+                    return;
+                settled = true;
+                clearTimeout(timer);
+                if (error)
+                    reject(error);
+                else
+                    resolve(response);
+            };
+            const request = (url.protocol === "https:" ? httpsRequest : httpRequest)(url, options, (response) => {
+                response.once("error", (error) => finish(error));
+                const declaredLength = Number(response.headers["content-length"]);
+                if (Number.isFinite(declaredLength) &&
+                    declaredLength > this.maximumResponseBytes) {
+                    response.destroy(new Error("Webhook response body exceeds the configured limit"));
+                    return;
+                }
+                const chunks = [];
+                let received = 0;
+                response.on("data", (chunk) => {
+                    const buffer = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
+                    received += buffer.byteLength;
+                    if (received > this.maximumResponseBytes) {
+                        response.destroy(new Error("Webhook response body exceeds the configured limit"));
+                        return;
+                    }
+                    chunks.push(buffer);
+                });
+                response.once("end", () => finish(undefined, {
+                    statusCode: response.statusCode ?? 0,
+                    body: Buffer.concat(chunks).toString("utf8"),
+                }));
+            });
+            const timer = setTimeout(() => {
+                request.destroy(new Error("Webhook request timed out"));
+            }, this.timeoutMs);
+            timer.unref();
+            request.once("error", (error) => finish(error));
+            request.end(input.body, "utf8");
+        });
+    }
+}
+function selectAddress(input) {
+    const digest = createHash("sha256").update(input.deliveryId, "utf8").digest();
+    return input.allowedAddresses[digest.readUInt32BE(0) % input.allowedAddresses.length];
+}
+function positiveInteger(value, name, maximum) {
+    if (!Number.isSafeInteger(value) || value <= 0 || value > maximum)
+        throw new TypeError(`${name} must be an integer between 1 and ${maximum}`);
+    return value;
+}
+//# sourceMappingURL=transport.js.map

package/packages/happy2-server/dist/modules/integrations/transport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport.js","sourceRoot":"","sources":["../../../sources/modules/integrations/transport.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,OAAO,IAAI,WAAW,EAAuB,MAAM,WAAW,CAAC;AACxE,OAAO,EAAE,OAAO,IAAI,YAAY,EAAE,MAAM,YAAY,CAAC;AAerD;;;;GAIG;AACH,MAAM,OAAO,oBAAoB;IACZ,SAAS,CAAS;IAClB,mBAAmB,CAAS;IAC5B,oBAAoB,CAAS;IAC7B,SAAS,CAAS;IAEnC,YAAY,OAAO,GAAgC,EAAE;QACjD,IAAI,CAAC,SAAS,GAAG,eAAe,CAAC,OAAO,CAAC,SAAS,IAAI,MAAM,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;QACpF,IAAI,CAAC,mBAAmB,GAAG,eAAe,CACtC,OAAO,CAAC,mBAAmB,IAAI,SAAS,EACxC,qBAAqB,EACrB,UAAU,CACb,CAAC;QACF,IAAI,CAAC,oBAAoB,GAAG,eAAe,CACvC,OAAO,CAAC,oBAAoB,IAAI,OAAO,EACvC,sBAAsB,EACtB,SAAS,CACZ,CAAC;QACF,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,oBAAoB,CAAC;QAC3D,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC;YAChD,MAAM,IAAI,SAAS,CAAC,6CAA6C,CAAC,CAAC;IAC3E,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAA8B;QACxC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ;YACrD,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;QACtE,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ;YAC5B,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;QACxE,IAAI,KAAK,CAAC,gBAAgB,CAAC,MAAM,KAAK,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;QAClF,MAAM,YAAY,GAAG,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC3D,IAAI,YAAY,GAAG,IAAI,CAAC,mBAAmB;YACvC,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;QAEzE,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;QACpC,MAAM,MAAM,GAAmB,CAAC,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE;YAC7D,IAAI,QAAQ,CAAC,GAAG;gBAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;;gBACtC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QACvD,CAAC,CAAC;QACF,MAAM,OAAO,GAA2B;YACpC,GAAG,KAAK,CAAC,OAAO;YAChB,gBAAgB,EAAE,MAAM,CAAC,YAAY,CAAC;YACtC,YAAY,EAAE,IAAI,CAAC,SAAS;SAC/B,CAAC;QACF,MAAM,OAAO,GAAmB;YAC5B,MAAM,EAAE,MAAM;YACd,OAAO;YACP,MAAM;YACN,sEAAsE;YACtE,2CAA2C;YAC3C,KAAK,EAAE,KAAK;YACZ,OAAO,EAAE,IAAI;SAChB,CAAC;QAEF,OAAO,IAAI,OAAO,CAA2B,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC7D,IAAI,OAAO,GAAG,KAAK,CAAC;YACpB,MAAM,MAAM,GAAG,CACX,KAAwB,EACxB,QAAmC,EAC/B,EAAE;gBACN,IAAI,OAAO;oBAAE,OAAO;gBACpB,OAAO,GAAG,IAAI,CAAC;gBACf,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,IAAI,KAAK;oBAAE,MAAM,CAAC,KAAK,CAAC,CAAC;;oBACpB,OAAO,CAAC,QAAS,CAAC,CAAC;YAC5B,CAAC,CAAC;YACF,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,WAAW,CAAC,CACpE,GAAG,EACH,OAAO,EACP,CAAC,QAAQ,EAAE,EAAE;gBACT,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;gBACjD,MAAM,cAAc,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC;gBAClE,IACI,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC;oBAC/B,cAAc,GAAG,IAAI,CAAC,oBAAoB,EAC5C,CAAC;oBACC,QAAQ,CAAC,OAAO,CACZ,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAClE,CAAC;oBACF,OAAO;gBACX,CAAC;gBACD,MAAM,MAAM,GAAa,EAAE,CAAC;gBAC5B,IAAI,QAAQ,GAAG,CAAC,CAAC;gBACjB,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAsB,EAAE,EAAE;oBAC3C,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;oBACnE,QAAQ,IAAI,MAAM,CAAC,UAAU,CAAC;oBAC9B,IAAI,QAAQ,GAAG,IAAI,CAAC,oBAAoB,EAAE,CAAC;wBACvC,QAAQ,CAAC,OAAO,CACZ,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAClE,CAAC;wBACF,OAAO;oBACX,CAAC;oBACD,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACxB,CAAC,CAAC,CAAC;gBACH,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,CACtB,MAAM,CAAC,SAAS,EAAE;oBACd,UAAU,EAAE,QAAQ,CAAC,UAAU,IAAI,CAAC;oBACpC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;iBAC/C,CAAC,CACL,CAAC;YACN,CAAC,CACJ,CAAC;YACF,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC1B,OAAO,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC,CAAC;YAC5D,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;YACnB,KAAK,CAAC,KAAK,EAAE,CAAC;YACd,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YAChD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACpC,CAAC,CAAC,CAAC;IACP,CAAC;CACJ;AAED,SAAS,aAAa,CAAC,KAA8B;IACjD,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC;IAC9E,OAAO,KAAK,CAAC,gBAAgB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,gBAAgB,CAAC,MAAM,CAAE,CAAC;AAC3F,CAAC;AAED,SAAS,eAAe,CAAC,KAAa,EAAE,IAAY,EAAE,OAAe;IACjE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,KAAK,GAAG,OAAO;QAC7D,MAAM,IAAI,SAAS,CAAC,GAAG,IAAI,qCAAqC,OAAO,EAAE,CAAC,CAAC;IAC/E,OAAO,KAAK,CAAC;AACjB,CAAC"}

package/packages/happy2-server/dist/modules/integrations/transport.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=transport.test.d.ts.map

package/packages/happy2-server/dist/modules/integrations/transport.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport.test.d.ts","sourceRoot":"","sources":["../../../sources/modules/integrations/transport.test.ts"],"names":[],"mappings":""}

package/packages/happy2-server/dist/modules/integrations/transport.test.js

@@ -0,0 +1,66 @@
+import { createServer } from "node:http";
+import { afterEach, describe, expect, it } from "vitest";
+import { NodeWebhookTransport } from "./transport.js";
+const servers = [];
+afterEach(async () => {
+    for (const server of servers.splice(0)) {
+        server.closeAllConnections();
+        await new Promise((resolve) => server.close(() => resolve()));
+    }
+});
+describe("NodeWebhookTransport", () => {
+    it("pins the approved address, preserves Host, and does not follow redirects", async () => {
+        let finalRequests = 0;
+        const server = await listen(createServer((request, response) => {
+            if (request.url === "/redirect") {
+                expect(request.headers.host).toMatch(/^hooks\.example\.invalid:/);
+                response.writeHead(302, { location: "/final" }).end("redirect");
+                return;
+            }
+            finalRequests += 1;
+            response.end("must not be reached");
+        }));
+        const port = server.address().port;
+        const transport = new NodeWebhookTransport();
+        const response = await transport.deliver(request(`http://hooks.example.invalid:${port}/redirect`));
+        expect(response).toEqual({ statusCode: 302, body: "redirect" });
+        expect(finalRequests).toBe(0);
+    });
+    it("enforces request, response, and total-time limits", async () => {
+        const server = await listen(createServer((request, response) => {
+            if (request.url === "/large") {
+                response.end("x".repeat(100));
+                return;
+            }
+            // Leave the response open so the transport deadline owns cancellation.
+        }));
+        const port = server.address().port;
+        const base = `http://hooks.example.invalid:${port}`;
+        await expect(new NodeWebhookTransport({ maximumRequestBytes: 4 }).deliver({
+            ...request(`${base}/large`),
+            body: "too large",
+        })).rejects.toThrow("request body");
+        await expect(new NodeWebhookTransport({ maximumResponseBytes: 32 }).deliver(request(`${base}/large`))).rejects.toThrow("response body");
+        await expect(new NodeWebhookTransport({ timeoutMs: 30 }).deliver(request(`${base}/slow`))).rejects.toThrow("timed out");
+    });
+});
+function request(url) {
+    return {
+        deliveryId: "delivery_1",
+        eventId: "event_1",
+        eventType: "message.created",
+        url,
+        allowedAddresses: [{ address: "127.0.0.1", family: 4 }],
+        body: JSON.stringify({ hello: "world" }),
+        headers: { "content-type": "application/json" },
+    };
+}
+async function listen(server) {
+    servers.push(server);
+    await new Promise((resolve, reject) => {
+        server.once("error", reject);
+        server.listen(0, "127.0.0.1", () => resolve());
+    });
+    return server;
+}
+//# sourceMappingURL=transport.test.js.map

package/packages/happy2-server/dist/modules/integrations/transport.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport.test.js","sourceRoot":"","sources":["../../../sources/modules/integrations/transport.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAe,MAAM,WAAW,CAAC;AAEtD,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACzD,OAAO,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAGtD,MAAM,OAAO,GAAa,EAAE,CAAC;AAE7B,SAAS,CAAC,KAAK,IAAI,EAAE;IACjB,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;QACrC,MAAM,CAAC,mBAAmB,EAAE,CAAC;QAC7B,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IACxE,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IAClC,EAAE,CAAC,0EAA0E,EAAE,KAAK,IAAI,EAAE;QACtF,IAAI,aAAa,GAAG,CAAC,CAAC;QACtB,MAAM,MAAM,GAAG,MAAM,MAAM,CACvB,YAAY,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE;YAC/B,IAAI,OAAO,CAAC,GAAG,KAAK,WAAW,EAAE,CAAC;gBAC9B,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,2BAA2B,CAAC,CAAC;gBAClE,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;gBAChE,OAAO;YACX,CAAC;YACD,aAAa,IAAI,CAAC,CAAC;YACnB,QAAQ,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;QACxC,CAAC,CAAC,CACL,CAAC;QACF,MAAM,IAAI,GAAI,MAAM,CAAC,OAAO,EAAkB,CAAC,IAAI,CAAC;QACpD,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;QAC7C,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,OAAO,CACpC,OAAO,CAAC,gCAAgC,IAAI,WAAW,CAAC,CAC3D,CAAC;QAEF,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;QAChE,MAAM,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;QAC/D,MAAM,MAAM,GAAG,MAAM,MAAM,CACvB,YAAY,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE;YAC/B,IAAI,OAAO,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;gBAC3B,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;gBAC9B,OAAO;YACX,CAAC;YACD,uEAAuE;QAC3E,CAAC,CAAC,CACL,CAAC;QACF,MAAM,IAAI,GAAI,MAAM,CAAC,OAAO,EAAkB,CAAC,IAAI,CAAC;QACpD,MAAM,IAAI,GAAG,gCAAgC,IAAI,EAAE,CAAC;QAEpD,MAAM,MAAM,CACR,IAAI,oBAAoB,CAAC,EAAE,mBAAmB,EAAE,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC;YACzD,GAAG,OAAO,CAAC,GAAG,IAAI,QAAQ,CAAC;YAC3B,IAAI,EAAE,WAAW;SACpB,CAAC,CACL,CAAC,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QAClC,MAAM,MAAM,CACR,IAAI,oBAAoB,CAAC,EAAE,oBAAoB,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,CAC1D,OAAO,CAAC,GAAG,IAAI,QAAQ,CAAC,CAC3B,CACJ,CAAC,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QACnC,MAAM,MAAM,CACR,IAAI,oBAAoB,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,CAAC,CAC/E,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC;AAEH,SAAS,OAAO,CAAC,GAAW;IACxB,OAAO;QACH,UAAU,EAAE,YAAY;QACxB,OAAO,EAAE,SAAS;QAClB,SAAS,EAAE,iBAAiB;QAC5B,GAAG;QACH,gBAAgB,EAAE,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;QACvD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;QACxC,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;KAClD,CAAC;AACN,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,MAAc;IAChC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACrB,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACxC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IACH,OAAO,MAAM,CAAC;AAClB,CAAC"}

package/packages/happy2-server/dist/modules/integrations/types.d.ts

@@ -0,0 +1,155 @@
+export declare const integrationKinds: readonly ["app", "incoming_webhook", "outgoing_webhook", "slash_command", "service_account"];
+export type IntegrationKind = (typeof integrationKinds)[number];
+export declare const integrationScopes: readonly ["channels:read", "commands:receive", "events:read", "files:read", "files:write", "messages:read", "messages:write", "users:read"];
+export type IntegrationScope = (typeof integrationScopes)[number];
+export interface BotSummary {
+    id: string;
+    name: string;
+    username: string;
+    description?: string;
+    photoFileId?: string;
+    ownerUserId?: string;
+    active: boolean;
+    createdAt: string;
+    updatedAt: string;
+}
+export interface IntegrationSummary {
+    id: string;
+    kind: IntegrationKind;
+    name: string;
+    description?: string;
+    botId?: string;
+    scopes: IntegrationScope[];
+    active: boolean;
+    createdAt: string;
+    updatedAt: string;
+}
+export interface ApiCredentialSummary {
+    id: string;
+    integrationId: string;
+    name: string;
+    tokenPrefix: string;
+    scopes: IntegrationScope[];
+    expiresAt?: string;
+    lastUsedAt?: string;
+    revokedAt?: string;
+    createdAt: string;
+}
+export interface IssuedApiCredential {
+    credential: ApiCredentialSummary;
+    /** Returned only from the creation call. It is never persisted or listed. */
+    token: string;
+}
+export interface AuthenticatedIntegration {
+    integrationId: string;
+    credentialId: string;
+    actorUserId: string;
+    botId?: string;
+    scopes: IntegrationScope[];
+}
+export interface WebhookSubscriptionSummary {
+    id: string;
+    integrationId: string;
+    direction: "incoming" | "outgoing";
+    chatId?: string;
+    url?: string;
+    eventTypes: string[];
+    active: boolean;
+    createdAt: string;
+    updatedAt: string;
+}
+export interface IssuedIncomingWebhook {
+    integration: IntegrationSummary;
+    subscription: WebhookSubscriptionSummary;
+    /** Returned only once and subsequently represented only by its hash. */
+    token: string;
+}
+export interface IssuedOutgoingWebhook {
+    integration: IntegrationSummary;
+    subscription: WebhookSubscriptionSummary;
+    /** Returned only once; the database contains authenticated ciphertext. */
+    signingSecret: string;
+}
+export interface SlashCommandSummary {
+    id: string;
+    integrationId: string;
+    command: string;
+    description?: string;
+    usageHint?: string;
+    active: boolean;
+    createdAt: string;
+    updatedAt: string;
+}
+export interface IssuedSlashCommand {
+    integration: IntegrationSummary;
+    command: SlashCommandSummary;
+    /** Used to verify queued invocation deliveries and returned only once. */
+    signingSecret: string;
+}
+export interface IncomingWebhookMessage {
+    /** Administrative authority used by the collaboration repository for bot posts. */
+    actorUserId: string;
+    integrationId: string;
+    subscriptionId: string;
+    botId: string;
+    chatId: string;
+    text: string;
+    attachmentFileIds?: string[];
+    idempotencyKey?: string;
+}
+export interface IncomingWebhookSinkResult {
+    messageId: string;
+    sync?: unknown;
+}
+export interface IncomingWebhookSink {
+    sendMessage(message: IncomingWebhookMessage): Promise<IncomingWebhookSinkResult>;
+}
+export interface QueuedWebhookDelivery {
+    id: string;
+    subscriptionId: string;
+    eventId: string;
+    eventType: string;
+    status: "pending" | "delivering" | "delivered" | "failed" | "cancelled";
+    attempts: number;
+    nextAttemptAt: string;
+    createdAt: string;
+}
+export interface WebhookTransportRequest {
+    deliveryId: string;
+    eventId: string;
+    eventType: string;
+    url: string;
+    /** All addresses were checked by the URL policy; transports must pin to one. */
+    allowedAddresses: ReadonlyArray<{
+        address: string;
+        family: 4 | 6;
+    }>;
+    body: string;
+    headers: Readonly<Record<string, string>>;
+}
+export interface WebhookTransportResponse {
+    statusCode: number;
+    body?: string;
+}
+export interface WebhookTransport {
+    deliver(request: WebhookTransportRequest): Promise<WebhookTransportResponse>;
+}
+export interface IntegrationChange {
+    sequence: string;
+    kind: string;
+    entityId: string;
+}
+export interface IntegrationMutation<T> {
+    value: T;
+    change: IntegrationChange;
+}
+export interface IntegrationRouteCallbacks {
+    incomingWebhook: IncomingWebhookSink;
+    onChange?: (change: IntegrationChange) => Promise<void>;
+}
+export type IntegrationErrorCode = "conflict" | "forbidden" | "invalid" | "not_found" | "unauthorized";
+export declare class IntegrationError extends Error {
+    readonly code: IntegrationErrorCode;
+    constructor(code: IntegrationErrorCode, message: string);
+}
+//# sourceMappingURL=types.d.ts.map

package/packages/happy2-server/dist/modules/integrations/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../sources/modules/integrations/types.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,gBAAgB,YACzB,KAAK,EACL,kBAAkB,EAClB,kBAAkB,EAClB,eAAe,EACf,iBAAiB,CACX,CAAC;AAEX,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEhE,eAAO,MAAM,iBAAiB,YAC1B,eAAe,EACf,kBAAkB,EAClB,aAAa,EACb,YAAY,EACZ,aAAa,EACb,eAAe,EACf,gBAAgB,EAChB,YAAY,CACN,CAAC;AAEX,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC;AAElE,MAAM,WAAW,UAAU;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,OAAO,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,kBAAkB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,eAAe,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,gBAAgB,EAAE,CAAC;IAC3B,MAAM,EAAE,OAAO,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,oBAAoB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,aAAa,EAAE,MAAM,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,gBAAgB,EAAE,CAAC;IAC3B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,mBAAmB;IAChC,UAAU,EAAE,oBAAoB,CAAC;IACjC,6EAA6E;IAC7E,KAAK,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,wBAAwB;IACrC,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,gBAAgB,EAAE,CAAC;CAC9B;AAED,MAAM,WAAW,0BAA0B;IACvC,EAAE,EAAE,MAAM,CAAC;IACX,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,UAAU,GAAG,UAAU,CAAC;IACnC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,MAAM,EAAE,OAAO,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,qBAAqB;IAClC,WAAW,EAAE,kBAAkB,CAAC;IAChC,YAAY,EAAE,0BAA0B,CAAC;IACzC,wEAAwE;IACxE,KAAK,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,qBAAqB;IAClC,WAAW,EAAE,kBAAkB,CAAC;IAChC,YAAY,EAAE,0BAA0B,CAAC;IACzC,0EAA0E;IAC1E,aAAa,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,mBAAmB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,OAAO,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,kBAAkB;IAC/B,WAAW,EAAE,kBAAkB,CAAC;IAChC,OAAO,EAAE,mBAAmB,CAAC;IAC7B,0EAA0E;IAC1E,aAAa,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,sBAAsB;IACnC,mFAAmF;IACnF,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B,cAAc,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,yBAAyB;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,mBAAmB;IAChC,WAAW,CAAC,OAAO,EAAE,sBAAsB,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAAC;CACpF;AAED,MAAM,WAAW,qBAAqB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,cAAc,EAAE,MAAM,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,SAAS,GAAG,YAAY,GAAG,WAAW,GAAG,QAAQ,GAAG,WAAW,CAAC;IACxE,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,uBAAuB;IACpC,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC;IACZ,gFAAgF;IAChF,gBAAgB,EAAE,aAAa,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAA;KAAE,CAAC,CAAC;IACpE,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CAC7C;AAED,MAAM,WAAW,wBAAwB;IACrC,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,gBAAgB;IAC7B,OAAO,CAAC,OAAO,EAAE,uBAAuB,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAAC;CAChF;AAED,MAAM,WAAW,iBAAiB;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,mBAAmB,CAAC,CAAC;IAClC,KAAK,EAAE,CAAC,CAAC;IACT,MAAM,EAAE,iBAAiB,CAAC;CAC7B;AAED,MAAM,WAAW,yBAAyB;IACtC,eAAe,EAAE,mBAAmB,CAAC;IACrC,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,iBAAiB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3D;AAED,MAAM,MAAM,oBAAoB,GAC1B,UAAU,GACV,WAAW,GACX,SAAS,GACT,WAAW,GACX,cAAc,CAAC;AAErB,qBAAa,gBAAiB,SAAQ,KAAK;IAEnC,QAAQ,CAAC,IAAI,EAAE,oBAAoB;IADvC,YACa,IAAI,EAAE,oBAAoB,EACnC,OAAO,EAAE,MAAM,EAIlB;CACJ"}

package/packages/happy2-server/dist/modules/integrations/types.js

@@ -0,0 +1,26 @@
+export const integrationKinds = [
+    "app",
+    "incoming_webhook",
+    "outgoing_webhook",
+    "slash_command",
+    "service_account",
+];
+export const integrationScopes = [
+    "channels:read",
+    "commands:receive",
+    "events:read",
+    "files:read",
+    "files:write",
+    "messages:read",
+    "messages:write",
+    "users:read",
+];
+export class IntegrationError extends Error {
+    code;
+    constructor(code, message) {
+        super(message);
+        this.code = code;
+        this.name = "IntegrationError";
+    }
+}
+//# sourceMappingURL=types.js.map

package/packages/happy2-server/dist/modules/integrations/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../sources/modules/integrations/types.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC5B,KAAK;IACL,kBAAkB;IAClB,kBAAkB;IAClB,eAAe;IACf,iBAAiB;CACX,CAAC;AAIX,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC7B,eAAe;IACf,kBAAkB;IAClB,aAAa;IACb,YAAY;IACZ,aAAa;IACb,eAAe;IACf,gBAAgB;IAChB,YAAY;CACN,CAAC;AA6KX,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IAE1B,IAAI;IADjB,YACa,IAA0B,EACnC,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;oBAHN,IAAI;QAIb,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;IACnC,CAAC;CACJ"}

package/packages/happy2-server/dist/modules/operations/export-worker.d.ts

@@ -0,0 +1,16 @@
+import { type Database } from "../database.js";
+import type { FileStorage } from "../files/storage.js";
+import { OperationsRepository } from "./repository.js";
+/** Executes durable export claims. SQLite claim timestamps fence concurrent server instances. */
+export declare class DataExportWorker {
+    private readonly repository;
+    private readonly database;
+    private readonly files;
+    constructor(repository: OperationsRepository, database: Database, files: FileStorage);
+    runDue(limit?: number): Promise<{
+        completed: number;
+        failed: number;
+    }>;
+    private removeUnclaimedArtifact;
+}
+//# sourceMappingURL=export-worker.d.ts.map

package/packages/happy2-server/dist/modules/operations/export-worker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"export-worker.d.ts","sourceRoot":"","sources":["../../../sources/modules/operations/export-worker.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,QAAQ,EAAmB,MAAM,gBAAgB,CAAC;AAChE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAA0B,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAE/E,iGAAiG;AACjG,qBAAa,gBAAgB;IAErB,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,KAAK;IAH1B,YACqB,UAAU,EAAE,oBAAoB,EAChC,QAAQ,EAAE,QAAQ,EAClB,KAAK,EAAE,WAAW,EACnC;IAEE,MAAM,CAAC,KAAK,SAAI,GAAG,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAiCtE;YAEa,uBAAuB;CAYxC"}

package/packages/happy2-server/dist/modules/operations/export-worker.js

@@ -0,0 +1,56 @@
+import { Readable } from "node:stream";
+import {} from "../database.js";
+import { OperationsRepository } from "./repository.js";
+/** Executes durable export claims. SQLite claim timestamps fence concurrent server instances. */
+export class DataExportWorker {
+    repository;
+    database;
+    files;
+    constructor(repository, database, files) {
+        this.repository = repository;
+        this.database = database;
+        this.files = files;
+    }
+    async runDue(limit = 5) {
+        const claims = await this.repository.claimPendingDataExports(limit);
+        let completed = 0;
+        let failed = 0;
+        for (const claim of claims) {
+            let artifact;
+            try {
+                const requesterId = claim.requestedByUserId;
+                if (!requesterId)
+                    throw new Error("Data export requester no longer exists");
+                const requester = await this.database.findActiveUser(requesterId);
+                if (!requester)
+                    throw new Error("Data export requester is no longer active");
+                const payload = await this.repository.buildDataExportArtifact(claim);
+                const contents = Buffer.from(`${JSON.stringify(payload, null, 2)}\n`, "utf8");
+                artifact = await this.files.saveAttachmentUpload(requester, Readable.from([contents]), {
+                    filename: `happy2-${claim.kind}-${claim.id}.json`,
+                    contentType: "application/json",
+                });
+                if (!(await this.repository.completeClaimedDataExport(claim, artifact.id))) {
+                    await this.removeUnclaimedArtifact(claim, artifact).catch(() => undefined);
+                    continue;
+                }
+                completed += 1;
+            }
+            catch (error) {
+                if (artifact)
+                    await this.removeUnclaimedArtifact(claim, artifact).catch(() => undefined);
+                if (await this.repository.failClaimedDataExport(claim, error))
+                    failed += 1;
+            }
+        }
+        return { completed, failed };
+    }
+    async removeUnclaimedArtifact(claim, artifact) {
+        if (!claim.requestedByUserId)
+            return;
+        const deleted = await this.database.deleteOwnedUnreferencedFile(artifact.id, claim.requestedByUserId, "data export claim was lost");
+        if (deleted === "deleted")
+            await this.files.deleteStoredFile(artifact);
+    }
+}
+//# sourceMappingURL=export-worker.js.map

package/packages/happy2-server/dist/modules/operations/export-worker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"export-worker.js","sourceRoot":"","sources":["../../../sources/modules/operations/export-worker.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAkC,MAAM,gBAAgB,CAAC;AAEhE,OAAO,EAA0B,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAE/E,iGAAiG;AACjG,MAAM,OAAO,gBAAgB;IAEJ,UAAU;IACV,QAAQ;IACR,KAAK;IAH1B,YACqB,UAAgC,EAChC,QAAkB,EAClB,KAAkB;0BAFlB,UAAU;wBACV,QAAQ;qBACR,KAAK;IACvB,CAAC;IAEJ,KAAK,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC;QAClB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,uBAAuB,CAAC,KAAK,CAAC,CAAC;QACpE,IAAI,SAAS,GAAG,CAAC,CAAC;QAClB,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YACzB,IAAI,QAAgC,CAAC;YACrC,IAAI,CAAC;gBACD,MAAM,WAAW,GAAG,KAAK,CAAC,iBAAiB,CAAC;gBAC5C,IAAI,CAAC,WAAW;oBAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;gBAC5E,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;gBAClE,IAAI,CAAC,SAAS;oBAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;gBAC7E,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,uBAAuB,CAAC,KAAK,CAAC,CAAC;gBACrE,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;gBAC9E,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,oBAAoB,CAC5C,SAAS,EACT,QAAQ,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,EACzB;oBACI,QAAQ,EAAE,UAAU,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,EAAE,OAAO;oBACjD,WAAW,EAAE,kBAAkB;iBAClC,CACJ,CAAC;gBACF,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,yBAAyB,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;oBACzE,MAAM,IAAI,CAAC,uBAAuB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;oBAC3E,SAAS;gBACb,CAAC;gBACD,SAAS,IAAI,CAAC,CAAC;YACnB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACb,IAAI,QAAQ;oBACR,MAAM,IAAI,CAAC,uBAAuB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;gBAC/E,IAAI,MAAM,IAAI,CAAC,UAAU,CAAC,qBAAqB,CAAC,KAAK,EAAE,KAAK,CAAC;oBAAE,MAAM,IAAI,CAAC,CAAC;YAC/E,CAAC;QACL,CAAC;QACD,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;IACjC,CAAC;IAEO,KAAK,CAAC,uBAAuB,CACjC,KAAwB,EACxB,QAAoB;QAEpB,IAAI,CAAC,KAAK,CAAC,iBAAiB;YAAE,OAAO;QACrC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,2BAA2B,CAC3D,QAAQ,CAAC,EAAE,EACX,KAAK,CAAC,iBAAiB,EACvB,4BAA4B,CAC/B,CAAC;QACF,IAAI,OAAO,KAAK,SAAS;YAAE,MAAM,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAC3E,CAAC;CACJ"}