pi-forge 1.2.4 → 1.3.0

package/dist/server/sse-bridge.js

@@ -2,6 +2,7 @@ import { randomUUID } from "node:crypto";
 import { getSession } from "./session-registry.js";
 import { getPendingForSession as getPendingAskQuestions, subscribe as subscribeAskQuestions, } from "./ask-user-question/registry.js";
 import { peekCached as peekCachedTodo, subscribe as subscribeTodo } from "./todo/store.js";
+import { processManager } from "./processes/manager.js";
 /**
  * Per-client outbound-buffer cap. When Node's internal socket buffer
  * for a given client exceeds this many bytes, we drop the client
@@ -10,23 +11,82 @@ import { peekCached as peekCachedTodo, subscribe as subscribeTodo } from "./todo
  * can otherwise balloon resident memory by hundreds of MB during a
  * verbose tool execution before the kernel forces socket close.
  *
- * 256 KB matches roughly 50-100 typical events worth of unflushed
- * data — well above any legitimate transient buffering and below
- * the threshold where memory pressure starts mattering.
+ * 8 MB is well above any realistic transient burst: a `tool_result`
+ * for an 11k-token tool output serializes to ~80-150 KB, and the
+ * subsequent stream of `message_update` token deltas can pile more
+ * on top before the client drains. The earlier 256 KB cap was
+ * tripping mid-session on legitimate slow consumers (mobile, slow
+ * Wi-Fi) and producing a misleading "Reconnecting — server closed
+ * stream" banner. The cap still bounds the wedged-tab case — at a
+ * sustained 1 MB/s of events it fires within ~8s of zero consumption.
  */
-const BACKPRESSURE_LIMIT_BYTES = 256 * 1024;
+const BACKPRESSURE_LIMIT_BYTES = 8 * 1024 * 1024;
 /**
- * Cadence at which we send an SSE comment line (`: heartbeat\n\n`) on
- * every open stream. EventSource ignores comment lines silently, so the
- * browser sees nothing — but the bytes reset any idle-connection timer
- * sitting between us and the client. OpenShift's HAProxy router defaults
+ * Cadence at which we send an SSE keepalive on every open stream.
+ * EventSource ignores comment lines silently, so the browser sees
+ * nothing — but the bytes reset any idle-connection timer sitting
+ * between us and the client. OpenShift's HAProxy router defaults
  * `timeout server` to 30s for HTTP routes, and any L7 proxy / load
- * balancer enforces a similar window; with no agent activity between
- * turns, an idle SSE stream gets killed by the middlebox and the
- * browser shows "reconnecting." 20s gives us comfortable margin under
- * the typical 30s default.
+ * balancer enforces a similar window; with no agent activity
+ * between turns, an idle SSE stream gets killed by the middlebox
+ * and the browser shows "reconnecting." 20s gives us comfortable
+ * margin under the typical 30s default.
  */
 const HEARTBEAT_INTERVAL_MS = 20_000;
+/**
+ * Heartbeat payload, padded to 2KB.
+ *
+ * The earlier ~13-byte `: heartbeat\n\n` payload kept the *connection*
+ * alive (any byte resets the idle timer) but didn't help with L7
+ * proxies (most painfully OpenShift's HAProxy router) that buffer
+ * small writes until either a threshold is reached or the connection
+ * closes. During a long-running agent turn with no token output (a
+ * slow LLM call, a long-running tool, a multi-second compaction
+ * prefill), the symptom was: heartbeats sit in HAProxy's response
+ * buffer, the browser sees nothing for 30+ seconds, the connection
+ * times out somewhere on the path, and the user gets a misleading
+ * "Reconnecting — server closed stream" banner.
+ *
+ * Padding the heartbeat to 2KB pushes past the buffer-flush
+ * threshold so every heartbeat actually reaches the client. Same
+ * mechanism as the compaction-start one-shot padding flush, but
+ * applied every 20s instead of per-turn.
+ *
+ * Bandwidth cost: ~100 bytes/sec/client sustained. Negligible.
+ *
+ * Marker text `heartbeat` is kept so an operator inspecting raw SSE
+ * frames in `tcpdump` / `curl -N` can identify what they're looking
+ * at; the underscore padding is just deliberate filler.
+ */
+const HEARTBEAT_PADDING_BYTES = 2048;
+const HEARTBEAT_LINE = `: heartbeat ${"_".repeat(HEARTBEAT_PADDING_BYTES - 14)}\n\n`;
+/**
+ * One-shot padding flush we send right after the `compaction_start`
+ * event. Defeats response buffering at L7 proxies (OpenShift's
+ * HAProxy router most painfully) that hold small writes until either
+ * an internal buffer threshold is hit or the connection closes.
+ *
+ * The `compaction_start` event itself is ~150 bytes, well below any
+ * proxy's flush threshold. Without padding, that event sits in the
+ * router's response buffer for the entire duration of the compaction
+ * LLM call (several seconds) — by which point `compaction_end`
+ * arrives and the client sees both events fire back-to-back with no
+ * banner in between. With padding, the cumulative write pushes past
+ * HAProxy's default ~2KB threshold and the router flushes everything
+ * (including the compaction_start frame) immediately.
+ *
+ * Comment-line format (`: <bytes>\n\n`) — EventSource ignores
+ * comment lines silently, so the browser sees nothing visible. The
+ * `pad-flush` marker is included so an operator inspecting raw SSE
+ * frames in `tcpdump` / `curl -N` can tell what they're looking at.
+ *
+ * 2KB is the smallest size that reliably crosses the HAProxy default;
+ * tuning higher costs more bytes per compaction but doesn't change
+ * correctness. Only emitted on compaction_start (a per-turn event,
+ * not per-token), so the bandwidth impact is negligible.
+ */
+const COMPACTION_START_PADDING_BYTES = 2048;
+const COMPACTION_START_PADDING_LINE = `: pad-flush ${"_".repeat(COMPACTION_START_PADDING_BYTES - 14)}\n\n`;
 /**
  * Event types we forward to browser clients. Anything else from the SDK is
  * dropped on the floor — keeps the wire stream stable across SDK upgrades and
@@ -61,6 +121,15 @@ const ALLOWED_EVENT_TYPES = new Set([
     // store after every successful tool call so the UI panel updates
     // live. Also re-emitted on SSE snapshot with the cached state.
     "todo_update",
+    // Forge-native events for the `process` tool. process_update
+    // fans out the full snapshot on any lifecycle change (start /
+    // exit / kill / clear) and re-emits on snapshot connect.
+    // process_output is throttled per process to avoid flooding
+    // SSE on chatty processes. process_watch is the agent-alerting
+    // channel for log-watch matches.
+    "process_update",
+    "process_output",
+    "process_watch",
 ]);
 export function isAllowedEvent(event) {
     return ALLOWED_EVENT_TYPES.has(event.type);
@@ -85,6 +154,111 @@ export function initAskUserQuestionFanout() {
         }
     });
 }
+/**
+ * Wire the processes manager's per-session events into the SSE
+ * bridge. Called once at server boot. `process_update` carries
+ * the full per-session snapshot — clients don't have to
+ * reconcile partial updates. `process_output` is a thin pointer
+ * (just the changed process's id) so the client can decide
+ * whether to refetch a tail; flooding the full output on every
+ * write would saturate SSE for chatty processes. `process_watch`
+ * forwards the watch-match event verbatim for the agent-alerting
+ * UI to render.
+ */
+export function initProcessesFanout() {
+    return processManager.subscribe((event) => {
+        const live = getSession(event.sessionId);
+        if (live === undefined)
+            return;
+        if (event.type === "process_watch_matched") {
+            const frame = {
+                type: "process_watch",
+                sessionId: event.sessionId,
+                match: event.match,
+            };
+            for (const c of live.clients) {
+                try {
+                    c.send(frame);
+                }
+                catch {
+                    // best-effort fanout
+                }
+            }
+            return;
+        }
+        if (event.type === "process_output_changed") {
+            const frame = {
+                type: "process_output",
+                sessionId: event.sessionId,
+                id: event.id,
+            };
+            for (const c of live.clients) {
+                try {
+                    c.send(frame);
+                }
+                catch {
+                    // best-effort fanout
+                }
+            }
+            return;
+        }
+        if (event.type === "process_alert") {
+            // Inject a user-shaped message into the live session so the
+            // agent gets a turn to react to the process finishing. The
+            // alertOn* flags were set at start() time and already filtered
+            // in the manager — by the time we get here, the alert is
+            // wanted. Best-effort: `sendUserMessage` returns a Promise but
+            // we don't await it (the SSE fanout shouldn't block on a
+            // round-trip; agent processing happens in the background and
+            // the result lands in the session JSONL like any other turn).
+            //
+            // deliverAs: "followUp" — if the agent is mid-turn, queue the
+            // alert until that turn completes. If idle, sendUserMessage
+            // kicks off a fresh turn immediately. Either way the user
+            // sees the alert message in the chat as a normal user bubble
+            // (with the `[process alert]` prefix making it obvious it's
+            // automated).
+            const reasonText = event.reason === "success"
+                ? `finished successfully (exit ${event.info.exitCode ?? "?"})`
+                : event.reason === "failure"
+                    ? `failed with exit code ${event.info.exitCode ?? "?"}`
+                    : "was killed externally";
+            const message = `[process alert] "${event.info.name}" (id=${event.info.id}) ${reasonText}. ` +
+                `Use \`process output\` to inspect what it produced if you need to react.`;
+            void live.session
+                .sendUserMessage(message, { deliverAs: "followUp" })
+                .catch((err) => {
+                // Swallow — most likely failure mode is "session was
+                // disposed between fanout and queue-write," which is benign.
+                process.stderr.write(JSON.stringify({
+                    level: "warn",
+                    time: new Date().toISOString(),
+                    msg: "process-alert sendUserMessage failed",
+                    sessionId: event.sessionId,
+                    processId: event.info.id,
+                    reason: event.reason,
+                    err: err instanceof Error ? err.message : String(err),
+                }) + "\n");
+            });
+            return;
+        }
+        // Lifecycle events all carry a full-snapshot update on the
+        // wire — clients only need this one type to render the panel.
+        const snapshot = {
+            type: "process_update",
+            sessionId: event.sessionId,
+            processes: processManager.list(event.sessionId),
+        };
+        for (const c of live.clients) {
+            try {
+                c.send(snapshot);
+            }
+            catch {
+                // best-effort fanout
+            }
+        }
+    });
+}
 /**
  * Wire the todo store's per-session change-listener into the SSE
  * bridge. Called once at server boot from index.ts. Mirrors the
@@ -206,6 +380,18 @@ export function createSSEClient(reply, live) {
             // verbose tool execution can balloon resident memory by hundreds
             // of MB before the kernel forces the close.
             if (raw.writableLength > BACKPRESSURE_LIMIT_BYTES) {
+                // Operator-visible: this is the only reason the client sees a
+                // "server closed stream" mid-session despite no socket-level
+                // error. Bypass pino (same rationale as session-registry's
+                // logAgentEvent) so a LOG_LEVEL=warn deploy still surfaces it.
+                process.stderr.write(JSON.stringify({
+                    level: "warn",
+                    time: new Date().toISOString(),
+                    msg: "sse-client-dropped-backpressure",
+                    sessionId: live.sessionId,
+                    bufferedBytes: raw.writableLength,
+                    limitBytes: BACKPRESSURE_LIMIT_BYTES,
+                }) + "\n");
                 close();
                 return;
             }
@@ -224,6 +410,15 @@ export function createSSEClient(reply, live) {
             if (!isAllowedEvent(event))
                 return;
             writeRaw(serializeSSE(event));
+            // After compaction_start, follow with a padding flush so L7
+            // proxies (notably the OpenShift HAProxy router) release the
+            // event immediately rather than holding it through the
+            // multi-second compaction LLM call. See
+            // COMPACTION_START_PADDING_LINE doc-comment for the rationale.
+            // Cheap — fires at most once per compaction, ~2KB on the wire.
+            if (event.type === "compaction_start") {
+                writeRaw(COMPACTION_START_PADDING_LINE);
+            }
         };
         const client = { id, send, close };
         registeredClient = client;
@@ -267,19 +462,32 @@ export function createSSEClient(reply, live) {
             tasks: cachedTodo.tasks,
             nextId: cachedTodo.nextId,
         }));
+        // Same re-deliver for processes — empty list is still sent so
+        // the client knows to hide the chat-input badge if a prior
+        // tab left it visible. Manager.list() is cheap (in-memory
+        // map walk + clone).
+        writeRaw(serializeSSE({
+            type: "process_update",
+            sessionId: live.sessionId,
+            processes: processManager.list(live.sessionId),
+        }));
         // Wire close listeners AFTER the snapshot write so an immediate socket
         // close can't double-fire close() before the registry is in a coherent
         // state. Node's 'close' event fires next-tick anyway, but explicit
         // ordering is cheap insurance.
         raw.on("close", close);
         raw.on("error", close);
-        // Idle-timer reset for L7 proxies (OpenShift HAProxy router, nginx,
-        // ALB, etc.). Comment line, no `data:` field — EventSource skips it.
-        // Uses writeRaw so the same backpressure guard applies; if the socket
-        // is wedged the heartbeat will trip the limit and call close(), which
-        // tears the timer down.
+        // Idle-timer reset + buffer-flush for L7 proxies (OpenShift
+        // HAProxy router, nginx, ALB, etc.). Comment line, no `data:`
+        // field — EventSource skips it. HEARTBEAT_LINE is padded to 2KB
+        // to defeat HAProxy's small-write buffering so heartbeats
+        // actually reach the client during long idle gaps; see the
+        // HEARTBEAT_LINE doc-comment for the full rationale. Uses
+        // writeRaw so the same backpressure guard applies; if the
+        // socket is wedged the heartbeat will trip the limit and call
+        // close(), which tears the timer down.
         heartbeatTimer = setInterval(() => {
-            writeRaw(": heartbeat\n\n");
+            writeRaw(HEARTBEAT_LINE);
         }, HEARTBEAT_INTERVAL_MS);
         // Don't keep the Node event loop alive just for heartbeats — when
         // the socket closes the close handler clears the timer anyway.

package/dist/server/sse-bridge.js.map

@@ -1 +1 @@
-{"version":3,"file":"sse-bridge.js","sourceRoot":"","sources":["../src/sse-bridge.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAKzC,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EACL,oBAAoB,IAAI,sBAAsB,EAC9C,SAAS,IAAI,qBAAqB,GACnC,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,UAAU,IAAI,cAAc,EAAE,SAAS,IAAI,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAE3F;;;;;;;;;;;GAWG;AACH,MAAM,wBAAwB,GAAG,GAAG,GAAG,IAAI,CAAC;AAE5C;;;;;;;;;;GAUG;AACH,MAAM,qBAAqB,GAAG,MAAM,CAAC;AAcrC;;;;GAIG;AACH,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAS;IAC1C,aAAa;IACb,WAAW;IACX,YAAY;IACZ,UAAU;IACV,eAAe;IACf,gBAAgB;IAChB,aAAa;IACb,sBAAsB;IACtB,uBAAuB;IACvB,oBAAoB;IACpB,WAAW;IACX,aAAa;IACb,cAAc;IACd,kBAAkB;IAClB,gBAAgB;IAChB,kBAAkB;IAClB,gBAAgB;IAChB,UAAU;IACV,kEAAkE;IAClE,qDAAqD;IACrD,yEAAyE;IACzE,4DAA4D;IAC5D,mBAAmB;IACnB,6BAA6B;IAC7B,+DAA+D;IAC/D,iEAAiE;IACjE,+DAA+D;IAC/D,aAAa;CACd,CAAC,CAAC;AAEH,MAAM,UAAU,cAAc,CAAC,KAAuB;IACpD,OAAO,mBAAmB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAC7C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,yBAAyB;IACvC,OAAO,qBAAqB,CAAC,CAAC,KAAK,EAAE,EAAE;QACrC,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACzC,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO;QAC/B,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAC7B,IAAI,CAAC;gBACH,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAChB,CAAC;YAAC,MAAM,CAAC;gBACP,mEAAmE;YACrE,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc;IAC5B,OAAO,aAAa,CAAC,CAAC,MAAM,EAAE,EAAE;QAC9B,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC1C,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO;QAC/B,MAAM,KAAK,GAAG;YACZ,IAAI,EAAE,aAAsB;YAC5B,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,KAAK;YACzB,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM;SAC5B,CAAC;QACF,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAC7B,IAAI,CAAC;gBACH,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAChB,CAAC;YAAC,MAAM,CAAC;gBACP,qBAAqB;YACvB,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,KAA6C;IACxE,OAAO,SAAS,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC;AAC9C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,IAAiB;IAC7C,OAAO;QACL,IAAI,EAAE,UAAU;QAChB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ;QAC/B,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW;KACtC,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,eAAe,CAAC,KAAmB,EAAE,IAAiB;IACpE,KAAK,CAAC,MAAM,EAAE,CAAC;IACf,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC;IAEtB,uEAAuE;IACvE,wCAAwC;IACxC,IAAI,gBAAuC,CAAC;IAC5C,IAAI,MAAM,GAAG,KAAK,CAAC;IAEnB,wEAAwE;IACxE,0EAA0E;IAC1E,wEAAwE;IACxE,6EAA6E;IAC7E,0EAA0E;IAC1E,yEAAyE;IACzE,2EAA2E;IAC3E,IAAI,CAAC;QACH,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;YACjB,cAAc,EAAE,mBAAmB;YACnC,eAAe,EAAE,wBAAwB;YACzC,UAAU,EAAE,YAAY;YACxB,sEAAsE;YACtE,mBAAmB,EAAE,IAAI;SAC1B,CAAC,CAAC;QAEH,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;QAExB;;;;;WAKG;QACH,IAAI,cAA0C,CAAC;QAE/C,MAAM,KAAK,GAAG,GAAS,EAAE;YACvB,IAAI,MAAM;gBAAE,OAAO;YACnB,MAAM,GAAG,IAAI,CAAC;YACd,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;gBACjC,aAAa,CAAC,cAAc,CAAC,CAAC;gBAC9B,cAAc,GAAG,SAAS,CAAC;YAC7B,CAAC;YACD,IAAI,gBAAgB,KAAK,SAAS;gBAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;YAC1E,IAAI,CAAC;gBACH,GAAG,CAAC,GAAG,EAAE,CAAC;YACZ,CAAC;YAAC,MAAM,CAAC;gBACP,kCAAkC;YACpC,CAAC;QACH,CAAC,CAAC;QAEF,MAAM,QAAQ,GAAG,CAAC,KAAa,EAAQ,EAAE;YACvC,IAAI,MAAM;gBAAE,OAAO;YACnB,mEAAmE;YACnE,6DAA6D;YAC7D,+DAA+D;YAC/D,4DAA4D;YAC5D,iEAAiE;YACjE,4DAA4D;YAC5D,2DAA2D;YAC3D,0DAA0D;YAC1D,iEAAiE;YACjE,4CAA4C;YAC5C,IAAI,GAAG,CAAC,cAAc,GAAG,wBAAwB,EAAE,CAAC;gBAClD,KAAK,EAAE,CAAC;gBACR,OAAO;YACT,CAAC;YACD,IAAI,CAAC;gBACH,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACnB,CAAC;YAAC,MAAM,CAAC;gBACP,2DAA2D;gBAC3D,0DAA0D;gBAC1D,KAAK,EAAE,CAAC;YACV,CAAC;QACH,CAAC,CAAC;QAEF,MAAM,IAAI,GAAG,CAAC,KAAiE,EAAQ,EAAE;YACvF,IAAI,MAAM;gBAAE,OAAO;YACnB,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC;gBAAE,OAAO;YACnC,QAAQ,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;QAChC,CAAC,CAAC;QAEF,MAAM,MAAM,GAAc,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;QAC9C,gBAAgB,GAAG,MAAM,CAAC;QAE1B,mEAAmE;QACnE,8EAA8E;QAC9E,sEAAsE;QACtE,kEAAkE;QAClE,oEAAoE;QACpE,kEAAkE;QAClE,mEAAmE;QACnE,2DAA2D;QAC3D,gEAAgE;QAChE,sCAAsC;QACtC,EAAE;QACF,uEAAuE;QACvE,mEAAmE;QACnE,mEAAmE;QACnE,QAAQ,CACN,YAAY,CAAC,aAAa,CAAC,IAAI,CAAsD,CAAC,CACvF,CAAC;QACF,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAEzB,2DAA2D;QAC3D,2DAA2D;QAC3D,0DAA0D;QAC1D,8DAA8D;QAC9D,0BAA0B;QAC1B,KAAK,MAAM,CAAC,IAAI,sBAAsB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YACvD,QAAQ,CACN,YAAY,CAAC;gBACX,IAAI,EAAE,mBAAmB;gBACzB,SAAS,EAAE,CAAC,CAAC,SAAS;gBACtB,SAAS,EAAE,CAAC,CAAC,SAAS;gBACtB,SAAS,EAAE,CAAC,CAAC,SAAS;aACvB,CAAC,CACH,CAAC;QACJ,CAAC;QAED,2DAA2D;QAC3D,6DAA6D;QAC7D,+DAA+D;QAC/D,yBAAyB;QACzB,MAAM,UAAU,GAAG,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAClD,QAAQ,CACN,YAAY,CAAC;YACX,IAAI,EAAE,aAAa;YACnB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,KAAK,EAAE,UAAU,CAAC,KAAK;YACvB,MAAM,EAAE,UAAU,CAAC,MAAM;SAC1B,CAAC,CACH,CAAC;QAEF,uEAAuE;QACvE,uEAAuE;QACvE,mEAAmE;QACnE,+BAA+B;QAC/B,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACvB,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAEvB,oEAAoE;QACpE,qEAAqE;QACrE,sEAAsE;QACtE,sEAAsE;QACtE,wBAAwB;QACxB,cAAc,GAAG,WAAW,CAAC,GAAG,EAAE;YAChC,QAAQ,CAAC,iBAAiB,CAAC,CAAC;QAC9B,CAAC,EAAE,qBAAqB,CAAC,CAAC;QAC1B,kEAAkE;QAClE,+DAA+D;QAC/D,cAAc,CAAC,KAAK,EAAE,CAAC;QAEvB,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,uEAAuE;QACvE,wEAAwE;QACxE,MAAM,GAAG,IAAI,CAAC;QACd,IAAI,gBAAgB,KAAK,SAAS;YAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;QAC1E,IAAI,CAAC;YACH,GAAG,CAAC,OAAO,EAAE,CAAC;QAChB,CAAC;QAAC,MAAM,CAAC;YACP,oBAAoB;QACtB,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC"}
+{"version":3,"file":"sse-bridge.js","sourceRoot":"","sources":["../src/sse-bridge.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAKzC,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EACL,oBAAoB,IAAI,sBAAsB,EAC9C,SAAS,IAAI,qBAAqB,GACnC,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,UAAU,IAAI,cAAc,EAAE,SAAS,IAAI,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAC3F,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAExD;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,wBAAwB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAEjD;;;;;;;;;;GAUG;AACH,MAAM,qBAAqB,GAAG,MAAM,CAAC;AAErC;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,uBAAuB,GAAG,IAAI,CAAC;AACrC,MAAM,cAAc,GAAG,eAAe,GAAG,CAAC,MAAM,CAAC,uBAAuB,GAAG,EAAE,CAAC,MAAM,CAAC;AAErF;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,8BAA8B,GAAG,IAAI,CAAC;AAC5C,MAAM,6BAA6B,GAAG,eAAe,GAAG,CAAC,MAAM,CAAC,8BAA8B,GAAG,EAAE,CAAC,MAAM,CAAC;AAc3G;;;;GAIG;AACH,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAS;IAC1C,aAAa;IACb,WAAW;IACX,YAAY;IACZ,UAAU;IACV,eAAe;IACf,gBAAgB;IAChB,aAAa;IACb,sBAAsB;IACtB,uBAAuB;IACvB,oBAAoB;IACpB,WAAW;IACX,aAAa;IACb,cAAc;IACd,kBAAkB;IAClB,gBAAgB;IAChB,kBAAkB;IAClB,gBAAgB;IAChB,UAAU;IACV,kEAAkE;IAClE,qDAAqD;IACrD,yEAAyE;IACzE,4DAA4D;IAC5D,mBAAmB;IACnB,6BAA6B;IAC7B,+DAA+D;IAC/D,iEAAiE;IACjE,+DAA+D;IAC/D,aAAa;IACb,6DAA6D;IAC7D,8DAA8D;IAC9D,yDAAyD;IACzD,4DAA4D;IAC5D,+DAA+D;IAC/D,iCAAiC;IACjC,gBAAgB;IAChB,gBAAgB;IAChB,eAAe;CAChB,CAAC,CAAC;AAEH,MAAM,UAAU,cAAc,CAAC,KAAuB;IACpD,OAAO,mBAAmB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAC7C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,yBAAyB;IACvC,OAAO,qBAAqB,CAAC,CAAC,KAAK,EAAE,EAAE;QACrC,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACzC,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO;QAC/B,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAC7B,IAAI,CAAC;gBACH,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAChB,CAAC;YAAC,MAAM,CAAC;gBACP,mEAAmE;YACrE,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,mBAAmB;IACjC,OAAO,cAAc,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE;QACxC,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACzC,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO;QAC/B,IAAI,KAAK,CAAC,IAAI,KAAK,uBAAuB,EAAE,CAAC;YAC3C,MAAM,KAAK,GAAG;gBACZ,IAAI,EAAE,eAAwB;gBAC9B,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,KAAK,EAAE,KAAK,CAAC,KAAK;aACnB,CAAC;YACF,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBAC7B,IAAI,CAAC;oBACH,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAChB,CAAC;gBAAC,MAAM,CAAC;oBACP,qBAAqB;gBACvB,CAAC;YACH,CAAC;YACD,OAAO;QACT,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,wBAAwB,EAAE,CAAC;YAC5C,MAAM,KAAK,GAAG;gBACZ,IAAI,EAAE,gBAAyB;gBAC/B,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,EAAE,EAAE,KAAK,CAAC,EAAE;aACb,CAAC;YACF,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBAC7B,IAAI,CAAC;oBACH,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAChB,CAAC;gBAAC,MAAM,CAAC;oBACP,qBAAqB;gBACvB,CAAC;YACH,CAAC;YACD,OAAO;QACT,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;YACnC,4DAA4D;YAC5D,2DAA2D;YAC3D,+DAA+D;YAC/D,yDAAyD;YACzD,+DAA+D;YAC/D,yDAAyD;YACzD,6DAA6D;YAC7D,8DAA8D;YAC9D,EAAE;YACF,8DAA8D;YAC9D,4DAA4D;YAC5D,0DAA0D;YAC1D,6DAA6D;YAC7D,4DAA4D;YAC5D,cAAc;YACd,MAAM,UAAU,GACd,KAAK,CAAC,MAAM,KAAK,SAAS;gBACxB,CAAC,CAAC,+BAA+B,KAAK,CAAC,IAAI,CAAC,QAAQ,IAAI,GAAG,GAAG;gBAC9D,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS;oBAC1B,CAAC,CAAC,yBAAyB,KAAK,CAAC,IAAI,CAAC,QAAQ,IAAI,GAAG,EAAE;oBACvD,CAAC,CAAC,uBAAuB,CAAC;YAChC,MAAM,OAAO,GACX,oBAAoB,KAAK,CAAC,IAAI,CAAC,IAAI,SAAS,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,UAAU,IAAI;gBAC5E,0EAA0E,CAAC;YAC7E,KAAK,IAAI,CAAC,OAAO;iBACd,eAAe,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC;iBACnD,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;gBACtB,qDAAqD;gBACrD,6DAA6D;gBAC7D,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,IAAI,CAAC,SAAS,CAAC;oBACb,KAAK,EAAE,MAAM;oBACb,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;oBAC9B,GAAG,EAAE,sCAAsC;oBAC3C,SAAS,EAAE,KAAK,CAAC,SAAS;oBAC1B,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE;oBACxB,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,GAAG,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;iBACtD,CAAC,GAAG,IAAI,CACV,CAAC;YACJ,CAAC,CAAC,CAAC;YACL,OAAO;QACT,CAAC;QACD,2DAA2D;QAC3D,8DAA8D;QAC9D,MAAM,QAAQ,GAAG;YACf,IAAI,EAAE,gBAAyB;YAC/B,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,SAAS,EAAE,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC;SAChD,CAAC;QACF,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAC7B,IAAI,CAAC;gBACH,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACnB,CAAC;YAAC,MAAM,CAAC;gBACP,qBAAqB;YACvB,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc;IAC5B,OAAO,aAAa,CAAC,CAAC,MAAM,EAAE,EAAE;QAC9B,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC1C,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO;QAC/B,MAAM,KAAK,GAAG;YACZ,IAAI,EAAE,aAAsB;YAC5B,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,KAAK;YACzB,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM;SAC5B,CAAC;QACF,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAC7B,IAAI,CAAC;gBACH,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAChB,CAAC;YAAC,MAAM,CAAC;gBACP,qBAAqB;YACvB,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,KAA6C;IACxE,OAAO,SAAS,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC;AAC9C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,IAAiB;IAC7C,OAAO;QACL,IAAI,EAAE,UAAU;QAChB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ;QAC/B,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW;KACtC,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,eAAe,CAAC,KAAmB,EAAE,IAAiB;IACpE,KAAK,CAAC,MAAM,EAAE,CAAC;IACf,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC;IAEtB,uEAAuE;IACvE,wCAAwC;IACxC,IAAI,gBAAuC,CAAC;IAC5C,IAAI,MAAM,GAAG,KAAK,CAAC;IAEnB,wEAAwE;IACxE,0EAA0E;IAC1E,wEAAwE;IACxE,6EAA6E;IAC7E,0EAA0E;IAC1E,yEAAyE;IACzE,2EAA2E;IAC3E,IAAI,CAAC;QACH,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;YACjB,cAAc,EAAE,mBAAmB;YACnC,eAAe,EAAE,wBAAwB;YACzC,UAAU,EAAE,YAAY;YACxB,sEAAsE;YACtE,mBAAmB,EAAE,IAAI;SAC1B,CAAC,CAAC;QAEH,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;QAExB;;;;;WAKG;QACH,IAAI,cAA0C,CAAC;QAE/C,MAAM,KAAK,GAAG,GAAS,EAAE;YACvB,IAAI,MAAM;gBAAE,OAAO;YACnB,MAAM,GAAG,IAAI,CAAC;YACd,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;gBACjC,aAAa,CAAC,cAAc,CAAC,CAAC;gBAC9B,cAAc,GAAG,SAAS,CAAC;YAC7B,CAAC;YACD,IAAI,gBAAgB,KAAK,SAAS;gBAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;YAC1E,IAAI,CAAC;gBACH,GAAG,CAAC,GAAG,EAAE,CAAC;YACZ,CAAC;YAAC,MAAM,CAAC;gBACP,kCAAkC;YACpC,CAAC;QACH,CAAC,CAAC;QAEF,MAAM,QAAQ,GAAG,CAAC,KAAa,EAAQ,EAAE;YACvC,IAAI,MAAM;gBAAE,OAAO;YACnB,mEAAmE;YACnE,6DAA6D;YAC7D,+DAA+D;YAC/D,4DAA4D;YAC5D,iEAAiE;YACjE,4DAA4D;YAC5D,2DAA2D;YAC3D,0DAA0D;YAC1D,iEAAiE;YACjE,4CAA4C;YAC5C,IAAI,GAAG,CAAC,cAAc,GAAG,wBAAwB,EAAE,CAAC;gBAClD,8DAA8D;gBAC9D,6DAA6D;gBAC7D,2DAA2D;gBAC3D,+DAA+D;gBAC/D,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,IAAI,CAAC,SAAS,CAAC;oBACb,KAAK,EAAE,MAAM;oBACb,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;oBAC9B,GAAG,EAAE,iCAAiC;oBACtC,SAAS,EAAE,IAAI,CAAC,SAAS;oBACzB,aAAa,EAAE,GAAG,CAAC,cAAc;oBACjC,UAAU,EAAE,wBAAwB;iBACrC,CAAC,GAAG,IAAI,CACV,CAAC;gBACF,KAAK,EAAE,CAAC;gBACR,OAAO;YACT,CAAC;YACD,IAAI,CAAC;gBACH,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACnB,CAAC;YAAC,MAAM,CAAC;gBACP,2DAA2D;gBAC3D,0DAA0D;gBAC1D,KAAK,EAAE,CAAC;YACV,CAAC;QACH,CAAC,CAAC;QAEF,MAAM,IAAI,GAAG,CAAC,KAAiE,EAAQ,EAAE;YACvF,IAAI,MAAM;gBAAE,OAAO;YACnB,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC;gBAAE,OAAO;YACnC,QAAQ,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;YAC9B,4DAA4D;YAC5D,6DAA6D;YAC7D,uDAAuD;YACvD,wCAAwC;YACxC,+DAA+D;YAC/D,+DAA+D;YAC/D,IAAI,KAAK,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;gBACtC,QAAQ,CAAC,6BAA6B,CAAC,CAAC;YAC1C,CAAC;QACH,CAAC,CAAC;QAEF,MAAM,MAAM,GAAc,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;QAC9C,gBAAgB,GAAG,MAAM,CAAC;QAE1B,mEAAmE;QACnE,8EAA8E;QAC9E,sEAAsE;QACtE,kEAAkE;QAClE,oEAAoE;QACpE,kEAAkE;QAClE,mEAAmE;QACnE,2DAA2D;QAC3D,gEAAgE;QAChE,sCAAsC;QACtC,EAAE;QACF,uEAAuE;QACvE,mEAAmE;QACnE,mEAAmE;QACnE,QAAQ,CACN,YAAY,CAAC,aAAa,CAAC,IAAI,CAAsD,CAAC,CACvF,CAAC;QACF,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAEzB,2DAA2D;QAC3D,2DAA2D;QAC3D,0DAA0D;QAC1D,8DAA8D;QAC9D,0BAA0B;QAC1B,KAAK,MAAM,CAAC,IAAI,sBAAsB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YACvD,QAAQ,CACN,YAAY,CAAC;gBACX,IAAI,EAAE,mBAAmB;gBACzB,SAAS,EAAE,CAAC,CAAC,SAAS;gBACtB,SAAS,EAAE,CAAC,CAAC,SAAS;gBACtB,SAAS,EAAE,CAAC,CAAC,SAAS;aACvB,CAAC,CACH,CAAC;QACJ,CAAC;QAED,2DAA2D;QAC3D,6DAA6D;QAC7D,+DAA+D;QAC/D,yBAAyB;QACzB,MAAM,UAAU,GAAG,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAClD,QAAQ,CACN,YAAY,CAAC;YACX,IAAI,EAAE,aAAa;YACnB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,KAAK,EAAE,UAAU,CAAC,KAAK;YACvB,MAAM,EAAE,UAAU,CAAC,MAAM;SAC1B,CAAC,CACH,CAAC;QAEF,8DAA8D;QAC9D,2DAA2D;QAC3D,0DAA0D;QAC1D,qBAAqB;QACrB,QAAQ,CACN,YAAY,CAAC;YACX,IAAI,EAAE,gBAAgB;YACtB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,SAAS,EAAE,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC;SAC/C,CAAC,CACH,CAAC;QAEF,uEAAuE;QACvE,uEAAuE;QACvE,mEAAmE;QACnE,+BAA+B;QAC/B,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACvB,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAEvB,4DAA4D;QAC5D,8DAA8D;QAC9D,gEAAgE;QAChE,0DAA0D;QAC1D,2DAA2D;QAC3D,0DAA0D;QAC1D,0DAA0D;QAC1D,8DAA8D;QAC9D,uCAAuC;QACvC,cAAc,GAAG,WAAW,CAAC,GAAG,EAAE;YAChC,QAAQ,CAAC,cAAc,CAAC,CAAC;QAC3B,CAAC,EAAE,qBAAqB,CAAC,CAAC;QAC1B,kEAAkE;QAClE,+DAA+D;QAC/D,cAAc,CAAC,KAAK,EAAE,CAAC;QAEvB,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,uEAAuE;QACvE,wEAAwE;QACxE,MAAM,GAAG,IAAI,CAAC;QACd,IAAI,gBAAgB,KAAK,SAAS;YAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;QAC1E,IAAI,CAAC;YACH,GAAG,CAAC,OAAO,EAAE,CAAC;QAChB,CAAC;QAAC,MAAM,CAAC;YACP,oBAAoB;QACtB,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC"}

package/dist/server/webhooks/dispatcher.js

@@ -0,0 +1,254 @@
+/**
+ * Webhook delivery: takes a candidate event, finds every webhook
+ * that subscribes to it (matching events + scope + enabled), and
+ * fires an HTTP POST per match with retry + delivery recording.
+ *
+ * Per-webhook fire-and-forget — the function returns as soon as
+ * the deliveries are kicked off. Retries run in the background.
+ * The event source (event-bridge.ts) doesn't block on webhook
+ * outcomes.
+ *
+ * Retry policy:
+ *   - 2xx                 → "delivered", no retry.
+ *   - 4xx                 → "failed", no retry (consumer's
+ *                           problem; retrying won't help).
+ *   - 5xx / network error → "error", retry with exponential
+ *                           backoff (1s, 5s, 30s — 3 attempts
+ *                           total counting the initial fire).
+ *
+ * HMAC: when `webhook.secret` is set, every request includes
+ *   `X-Pi-Forge-Signature: sha256=<hex of HMAC-SHA256(secret, body)>`.
+ * The hex digest is the same convention GitHub webhooks use.
+ *
+ * `insecureTls: true` swaps the `https.Agent` for one with
+ * `rejectUnauthorized: false`. Logged to stderr on every fire
+ * so the relaxed security is visible in `docker logs`.
+ */
+import { createHmac, randomUUID } from "node:crypto";
+import { Agent as HttpsAgent } from "node:https";
+import { recordDelivery, readWebhooks, SECRET_PLACEHOLDER } from "./store.js";
+/**
+ * Reusable agents. The insecure one is allocated lazily — most
+ * deployments never set `insecureTls` on any webhook, and we'd
+ * rather not have a permissive agent sitting around unless asked.
+ */
+const SECURE_AGENT = new HttpsAgent({ keepAlive: true });
+let insecureAgent;
+function getInsecureAgent() {
+    if (insecureAgent === undefined) {
+        insecureAgent = new HttpsAgent({ keepAlive: true, rejectUnauthorized: false });
+    }
+    return insecureAgent;
+}
+const BACKOFF_MS = [1_000, 5_000, 30_000];
+const MAX_ATTEMPTS = BACKOFF_MS.length;
+const REQUEST_TIMEOUT_MS = 30_000;
+const ERROR_PREVIEW_LIMIT = 200;
+/**
+ * Reserved headers we always set ourselves. User-supplied custom
+ * headers for these names are silently overridden — letting a
+ * webhook config rewrite `X-Pi-Forge-Signature` would defeat the
+ * point of HMAC.
+ */
+const RESERVED_HEADERS = new Set([
+    "content-type",
+    "x-pi-forge-event",
+    "x-pi-forge-delivery",
+    "x-pi-forge-signature",
+    "user-agent",
+]);
+/**
+ * Public entry point. Resolves once all matching webhooks have
+ * been queued (kicks off the first attempt synchronously per
+ * webhook so the operator can observe failures immediately, then
+ * retries continue in the background).
+ *
+ * Returns the number of webhooks targeted — useful for the test
+ * route to surface "0 webhooks matched" feedback.
+ */
+export async function dispatch(opts, targeting) {
+    const webhooks = await readWebhooks();
+    const matches = webhooks.filter((w) => isMatch(w, opts, targeting));
+    if (matches.length === 0)
+        return 0;
+    // Build the payload ONCE — same body across all matching
+    // webhooks. Each webhook gets its own deliveryId since each is
+    // independently retryable.
+    const timestamp = new Date().toISOString();
+    for (const webhook of matches) {
+        const payload = {
+            deliveryId: randomUUID(),
+            event: opts.event,
+            timestamp,
+            ...(opts.sessionId !== undefined ? { sessionId: opts.sessionId } : {}),
+            ...(opts.projectId !== undefined ? { projectId: opts.projectId } : {}),
+            data: opts.data,
+        };
+        // Fire-and-forget. Retries handled inside; we don't await the
+        // full chain.
+        void deliverWithRetries(webhook, payload);
+    }
+    return matches.length;
+}
+function isMatch(webhook, opts, targeting) {
+    if (targeting?.onlyWebhookId !== undefined) {
+        return webhook.id === targeting.onlyWebhookId;
+    }
+    if (!webhook.enabled)
+        return false;
+    // Event subscription. `webhook.test` always matches if the test
+    // route invoked us (handled by targeting above); the real-event
+    // dispatch path goes through here and filters strictly.
+    if (opts.event === "webhook.test")
+        return false;
+    if (!webhook.events.includes(opts.event))
+        return false;
+    // Scope. Global webhooks match every event with a projectId or
+    // none. Per-project webhooks only fire when the event carries a
+    // matching projectId.
+    if (webhook.scope.kind === "project") {
+        return opts.projectId !== undefined && opts.projectId === webhook.scope.projectId;
+    }
+    return true;
+}
+async function deliverWithRetries(webhook, payload) {
+    for (let attempt = 1; attempt <= MAX_ATTEMPTS; attempt++) {
+        const outcome = await deliverOnce(webhook, payload, attempt);
+        const record = {
+            id: randomUUID(),
+            webhookId: webhook.id,
+            deliveryId: payload.deliveryId,
+            event: payload.event,
+            attempt,
+            status: outcome.status,
+            durationMs: outcome.durationMs,
+            requestedAt: outcome.requestedAt,
+            ...(payload.sessionId !== undefined ? { sessionId: payload.sessionId } : {}),
+            ...(payload.projectId !== undefined ? { projectId: payload.projectId } : {}),
+            ...(outcome.statusCode !== undefined ? { statusCode: outcome.statusCode } : {}),
+            ...(outcome.errorPreview !== undefined ? { errorPreview: outcome.errorPreview } : {}),
+        };
+        await recordDelivery(record).catch(() => undefined);
+        // Stop on success or terminal-4xx; retry on error.
+        if (outcome.status === "delivered" || outcome.status === "failed")
+            return;
+        if (attempt < MAX_ATTEMPTS) {
+            const backoff = BACKOFF_MS[attempt - 1] ?? BACKOFF_MS[BACKOFF_MS.length - 1] ?? 1000;
+            await new Promise((resolve) => setTimeout(resolve, backoff));
+        }
+    }
+}
+async function deliverOnce(webhook, payload, attempt) {
+    const body = JSON.stringify(payload);
+    const headers = {
+        "Content-Type": "application/json; charset=utf-8",
+        "User-Agent": "pi-forge-webhook/1.0",
+        "X-Pi-Forge-Event": payload.event,
+        "X-Pi-Forge-Delivery": payload.deliveryId,
+    };
+    if (webhook.secret !== undefined && webhook.secret.length > 0) {
+        const sig = createHmac("sha256", webhook.secret).update(body).digest("hex");
+        headers["X-Pi-Forge-Signature"] = `sha256=${sig}`;
+    }
+    if (webhook.headers !== undefined) {
+        for (const [name, value] of Object.entries(webhook.headers)) {
+            if (RESERVED_HEADERS.has(name.toLowerCase()))
+                continue;
+            // Defense in depth: the CRUD path round-trips header values
+            // through the SECRET_PLACEHOLDER sentinel so the wire never
+            // exposes them. A hand-edited webhooks.json (or a future
+            // bug) could leak the sentinel into stored config — skip
+            // here so we never POST literally `Authorization: ***REDACTED***`
+            // to the consumer.
+            if (value === SECRET_PLACEHOLDER)
+                continue;
+            headers[name] = value;
+        }
+    }
+    const requestedAt = new Date().toISOString();
+    const t0 = Date.now();
+    const controller = new AbortController();
+    const timeout = setTimeout(() => controller.abort(), REQUEST_TIMEOUT_MS);
+    timeout.unref();
+    if (webhook.insecureTls === true) {
+        process.stderr.write(JSON.stringify({
+            level: "warn",
+            time: requestedAt,
+            msg: "webhook-insecure-tls",
+            webhookId: webhook.id,
+            url: webhook.url,
+            event: payload.event,
+            attempt,
+        }) + "\n");
+    }
+    try {
+        // Node's global fetch routes through undici. We pass the
+        // agent via the `dispatcher` undici-extension field — TS's
+        // standard RequestInit doesn't know about it, hence the cast.
+        // Falls back gracefully on runtimes that ignore the field.
+        const agent = webhook.insecureTls === true ? getInsecureAgent() : SECURE_AGENT;
+        const init = {
+            method: "POST",
+            headers,
+            body,
+            signal: controller.signal,
+            agent,
+        };
+        const res = await fetch(webhook.url, init);
+        const durationMs = Date.now() - t0;
+        const statusCode = res.status;
+        if (statusCode >= 200 && statusCode < 300) {
+            return { status: "delivered", statusCode, durationMs, requestedAt };
+        }
+        if (statusCode >= 400 && statusCode < 500) {
+            const text = await safeReadErrorBody(res);
+            return {
+                status: "failed",
+                statusCode,
+                durationMs,
+                requestedAt,
+                ...(text !== undefined ? { errorPreview: text } : {}),
+            };
+        }
+        // 5xx or other non-2xx — retryable.
+        const text = await safeReadErrorBody(res);
+        return {
+            status: "error",
+            statusCode,
+            durationMs,
+            requestedAt,
+            ...(text !== undefined ? { errorPreview: text } : {}),
+        };
+    }
+    catch (err) {
+        const durationMs = Date.now() - t0;
+        const message = err instanceof Error ? err.message : String(err);
+        return {
+            status: "error",
+            durationMs,
+            requestedAt,
+            errorPreview: message.slice(0, ERROR_PREVIEW_LIMIT),
+        };
+    }
+    finally {
+        clearTimeout(timeout);
+    }
+}
+/**
+ * Read a small slice of the response body for diagnostics.
+ * Bounded so a runaway server returning megabytes doesn't blow
+ * memory. Body bytes themselves are not persisted in
+ * DeliveryRecord — only this preview makes it through.
+ */
+async function safeReadErrorBody(res) {
+    try {
+        const text = await res.text();
+        if (text.length === 0)
+            return undefined;
+        return text.slice(0, ERROR_PREVIEW_LIMIT);
+    }
+    catch {
+        return undefined;
+    }
+}
+//# sourceMappingURL=dispatcher.js.map

package/dist/server/webhooks/dispatcher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dispatcher.js","sourceRoot":"","sources":["../../src/webhooks/dispatcher.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,KAAK,IAAI,UAAU,EAAE,MAAM,YAAY,CAAC;AACjD,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAQ9E;;;;GAIG;AACH,MAAM,YAAY,GAAG,IAAI,UAAU,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AACzD,IAAI,aAAqC,CAAC;AAC1C,SAAS,gBAAgB;IACvB,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;QAChC,aAAa,GAAG,IAAI,UAAU,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,kBAAkB,EAAE,KAAK,EAAE,CAAC,CAAC;IACjF,CAAC;IACD,OAAO,aAAa,CAAC;AACvB,CAAC;AAED,MAAM,UAAU,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAU,CAAC;AACnD,MAAM,YAAY,GAAG,UAAU,CAAC,MAAM,CAAC;AACvC,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAClC,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAEhC;;;;;GAKG;AACH,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC;IAC/B,cAAc;IACd,kBAAkB;IAClB,qBAAqB;IACrB,sBAAsB;IACtB,YAAY;CACb,CAAC,CAAC;AAgBH;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,IAAqB,EACrB,SAAoC;IAEpC,MAAM,QAAQ,GAAG,MAAM,YAAY,EAAE,CAAC;IACtC,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;IACpE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IACnC,yDAAyD;IACzD,+DAA+D;IAC/D,2BAA2B;IAC3B,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3C,KAAK,MAAM,OAAO,IAAI,OAAO,EAAE,CAAC;QAC9B,MAAM,OAAO,GAAmB;YAC9B,UAAU,EAAE,UAAU,EAAE;YACxB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,SAAS;YACT,GAAG,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtE,GAAG,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtE,IAAI,EAAE,IAAI,CAAC,IAAI;SAChB,CAAC;QACF,8DAA8D;QAC9D,cAAc;QACd,KAAK,kBAAkB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC5C,CAAC;IACD,OAAO,OAAO,CAAC,MAAM,CAAC;AACxB,CAAC;AAED,SAAS,OAAO,CACd,OAAsB,EACtB,IAAqB,EACrB,SAA+C;IAE/C,IAAI,SAAS,EAAE,aAAa,KAAK,SAAS,EAAE,CAAC;QAC3C,OAAO,OAAO,CAAC,EAAE,KAAK,SAAS,CAAC,aAAa,CAAC;IAChD,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IACnC,gEAAgE;IAChE,gEAAgE;IAChE,wDAAwD;IACxD,IAAI,IAAI,CAAC,KAAK,KAAK,cAAc;QAAE,OAAO,KAAK,CAAC;IAChD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACvD,+DAA+D;IAC/D,gEAAgE;IAChE,sBAAsB;IACtB,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QACrC,OAAO,IAAI,CAAC,SAAS,KAAK,SAAS,IAAI,IAAI,CAAC,SAAS,KAAK,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC;IACpF,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,OAAsB,EAAE,OAAuB;IAC/E,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,YAAY,EAAE,OAAO,EAAE,EAAE,CAAC;QACzD,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QAC7D,MAAM,MAAM,GAAmB;YAC7B,EAAE,EAAE,UAAU,EAAE;YAChB,SAAS,EAAE,OAAO,CAAC,EAAE;YACrB,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,OAAO;YACP,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,GAAG,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5E,GAAG,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5E,GAAG,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/E,GAAG,CAAC,OAAO,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtF,CAAC;QACF,MAAM,cAAc,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACpD,mDAAmD;QACnD,IAAI,OAAO,CAAC,MAAM,KAAK,WAAW,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ;YAAE,OAAO;QAC1E,IAAI,OAAO,GAAG,YAAY,EAAE,CAAC;YAC3B,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,GAAG,CAAC,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC;YACrF,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;AACH,CAAC;AAUD,KAAK,UAAU,WAAW,CACxB,OAAsB,EACtB,OAAuB,EACvB,OAAe;IAEf,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IACrC,MAAM,OAAO,GAA2B;QACtC,cAAc,EAAE,iCAAiC;QACjD,YAAY,EAAE,sBAAsB;QACpC,kBAAkB,EAAE,OAAO,CAAC,KAAK;QACjC,qBAAqB,EAAE,OAAO,CAAC,UAAU;KAC1C,CAAC;IACF,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9D,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5E,OAAO,CAAC,sBAAsB,CAAC,GAAG,UAAU,GAAG,EAAE,CAAC;IACpD,CAAC;IACD,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAClC,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YAC5D,IAAI,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;gBAAE,SAAS;YACvD,4DAA4D;YAC5D,4DAA4D;YAC5D,yDAAyD;YACzD,yDAAyD;YACzD,kEAAkE;YAClE,mBAAmB;YACnB,IAAI,KAAK,KAAK,kBAAkB;gBAAE,SAAS;YAC3C,OAAO,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;QACxB,CAAC;IACH,CAAC;IAED,MAAM,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC7C,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACtB,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,kBAAkB,CAAC,CAAC;IACzE,OAAO,CAAC,KAAK,EAAE,CAAC;IAEhB,IAAI,OAAO,CAAC,WAAW,KAAK,IAAI,EAAE,CAAC;QACjC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,IAAI,CAAC,SAAS,CAAC;YACb,KAAK,EAAE,MAAM;YACb,IAAI,EAAE,WAAW;YACjB,GAAG,EAAE,sBAAsB;YAC3B,SAAS,EAAE,OAAO,CAAC,EAAE;YACrB,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,OAAO;SACR,CAAC,GAAG,IAAI,CACV,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,yDAAyD;QACzD,2DAA2D;QAC3D,8DAA8D;QAC9D,2DAA2D;QAC3D,MAAM,KAAK,GAAG,OAAO,CAAC,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC;QAC/E,MAAM,IAAI,GAAyC;YACjD,MAAM,EAAE,MAAM;YACd,OAAO;YACP,IAAI;YACJ,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,KAAK;SACN,CAAC;QACF,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC3C,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC;QACnC,MAAM,UAAU,GAAG,GAAG,CAAC,MAAM,CAAC;QAC9B,IAAI,UAAU,IAAI,GAAG,IAAI,UAAU,GAAG,GAAG,EAAE,CAAC;YAC1C,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC;QACtE,CAAC;QACD,IAAI,UAAU,IAAI,GAAG,IAAI,UAAU,GAAG,GAAG,EAAE,CAAC;YAC1C,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,GAAG,CAAC,CAAC;YAC1C,OAAO;gBACL,MAAM,EAAE,QAAQ;gBAChB,UAAU;gBACV,UAAU;gBACV,WAAW;gBACX,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACtD,CAAC;QACJ,CAAC;QACD,oCAAoC;QACpC,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,GAAG,CAAC,CAAC;QAC1C,OAAO;YACL,MAAM,EAAE,OAAO;YACf,UAAU;YACV,UAAU;YACV,WAAW;YACX,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtD,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC;QACnC,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,OAAO;YACL,MAAM,EAAE,OAAO;YACf,UAAU;YACV,WAAW;YACX,YAAY,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,mBAAmB,CAAC;SACpD,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,OAAO,CAAC,CAAC;IACxB,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,iBAAiB,CAAC,GAAa;IAC5C,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QACxC,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,mBAAmB,CAAC,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC"}