@cat-factory/integrations 0.69.0 → 0.70.0

package/dist/modules/compose/recipe-runner.js

@@ -0,0 +1,145 @@
+import { classifyComposePs, composeExecArgs, healthGateIntervalMs, healthGateTimeoutMs, matchesHttpExpectation, recipeStepIntervalMs, recipeStepTimeoutMs, tailOutput, waitFileExecArgs, } from './compose-environment.logic.js';
+/** Run one recipe setup/teardown step, returning a normalized verdict (never throws). */
+export async function runRecipeStep(step, ctx) {
+    const { runtime, scope, env, project } = ctx;
+    const timeoutMs = recipeStepTimeoutMs(step);
+    try {
+        switch (step.kind) {
+            case 'compose-exec': {
+                const res = await runtime.compose(composeExecArgs(scope, step), {
+                    env,
+                    timeoutMs,
+                    ...(step.stdinFile ? { stdin: { project, checkoutFile: step.stdinFile } } : {}),
+                });
+                return res.code === 0
+                    ? { ok: true }
+                    : { ok: false, error: tailOutput(res.stderr || res.stdout) || `exit ${res.code}` };
+            }
+            case 'copy-file': {
+                if (!runtime.copyCheckoutFile)
+                    return { ok: false, error: 'runtime cannot copy checkout files' };
+                await runtime.copyCheckoutFile(project, step.from, step.to);
+                return { ok: true };
+            }
+            case 'wait-http':
+                return pollUntil(timeoutMs, recipeStepIntervalMs(step), () => probeHttp(step.url, step));
+            case 'wait-file':
+                return pollUntil(timeoutMs, recipeStepIntervalMs(step), () => probeFile(step, ctx));
+            case 'host-command': {
+                if (!runtime.hostCommand)
+                    return { ok: false, error: 'runtime cannot run host commands' };
+                const res = await runtime.hostCommand(project, step.command, {
+                    ...(step.workdir ? { workdir: step.workdir } : {}),
+                    env,
+                    timeoutMs,
+                });
+                return res.code === 0
+                    ? { ok: true }
+                    : { ok: false, error: tailOutput(res.stderr || res.stdout) || `exit ${res.code}` };
+            }
+            default:
+                // A structural guard elsewhere validates the recipe, so a stale/hand-edited config can
+                // carry an unknown step kind. Return a clean verdict rather than falling off the switch.
+                return {
+                    ok: false,
+                    error: `unsupported recipe step kind '${step.kind ?? 'unknown'}'`,
+                };
+        }
+    }
+    catch (err) {
+        return { ok: false, error: err instanceof Error ? err.message : String(err) };
+    }
+}
+/**
+ * Run the terminal health gate until it passes or its budget elapses (never throws). The gate's own
+ * timeout/interval are derived from `gate` here (via {@link healthGateTimeoutMs}/{@link
+ * healthGateIntervalMs}), so callers pass only `shortTimeoutMs` — the bound for the individual
+ * compose/HTTP probe calls the gate makes — rather than re-deriving the budget at every call site.
+ */
+export async function runHealthGate(gate, ctx, shortTimeoutMs) {
+    const { runtime, scope, env } = ctx;
+    const timeoutMs = healthGateTimeoutMs(gate);
+    const intervalMs = healthGateIntervalMs(gate);
+    if (gate.kind === 'http') {
+        return pollUntil(timeoutMs, intervalMs, () => probeHttp(gate.url, gate, shortTimeoutMs));
+    }
+    if (gate.kind === 'compose-exec') {
+        return pollUntil(timeoutMs, intervalMs, async () => {
+            const res = await runtime.compose(composeExecArgs(scope, { service: gate.service, command: gate.command }), { env, timeoutMs: shortTimeoutMs });
+            return {
+                done: res.code === 0,
+                error: tailOutput(res.stderr || res.stdout) || `exit ${res.code}`,
+            };
+        });
+    }
+    // compose-healthy: poll `ps` until the stack is ready / a service crashed.
+    return pollUntil(timeoutMs, intervalMs, async () => {
+        const ps = await runtime.compose([...scope, 'ps', '-a', '--format', 'json'], {
+            env,
+            timeoutMs: shortTimeoutMs,
+        });
+        const status = ps.code === 0 ? classifyComposePs(ps.stdout) : 'provisioning';
+        if (status === 'ready')
+            return { done: true };
+        if (status === 'failed')
+            return { done: false, fatal: true, error: 'a service is unhealthy or crashed' };
+        return { done: false, error: 'stack not healthy yet' };
+    });
+}
+/** Probe a URL once for a `wait-http` step / `http` gate; a network error is a non-fatal retry. */
+async function probeHttp(url, opts, timeoutMs = 60_000) {
+    try {
+        const res = await fetch(url, { signal: AbortSignal.timeout(timeoutMs) });
+        // Read the body only when a substring is required; otherwise release it so the poll doesn't
+        // leave an unconsumed body pinning the connection on every re-probe.
+        let body = '';
+        if (opts.expectBodyContains)
+            body = await res.text();
+        else
+            await res.body?.cancel();
+        return matchesHttpExpectation(res.status, body, opts)
+            ? { done: true }
+            : { done: false, error: `HTTP ${res.status}` };
+    }
+    catch (err) {
+        return { done: false, error: err instanceof Error ? err.message : String(err) };
+    }
+}
+/** Probe a `wait-file` step once — in a container (`test -f`) or the checkout. */
+async function probeFile(step, ctx, shortTimeoutMs = 60_000) {
+    const { runtime, scope, env, project } = ctx;
+    if (step.service) {
+        const res = await runtime.compose(waitFileExecArgs(scope, step.service, step.path), {
+            env,
+            timeoutMs: shortTimeoutMs,
+        });
+        return res.code === 0 ? { done: true } : { done: false, error: `not present yet` };
+    }
+    const exists = (await runtime.checkoutFileExists?.(project, step.path)) ?? false;
+    return exists ? { done: true } : { done: false, error: `not present yet` };
+}
+/**
+ * Poll `attempt` until it reports `done` (success) or `fatal` (a definitive failure — stop early),
+ * or the budget elapses (timeout failure). Attempts at least once; sleeps `intervalMs` between tries.
+ */
+async function pollUntil(timeoutMs, intervalMs, attempt) {
+    const deadline = Date.now() + timeoutMs;
+    let lastError = 'timed out';
+    for (;;) {
+        const res = await attempt();
+        if (res.done)
+            return { ok: true };
+        if (res.fatal)
+            return { ok: false, error: res.error ?? 'failed' };
+        lastError = res.error ?? lastError;
+        if (Date.now() + intervalMs >= deadline) {
+            return { ok: false, error: `timed out after ${timeoutMs}ms (${lastError})` };
+        }
+        await sleep(intervalMs);
+    }
+}
+/** Sleep `ms` between poll attempts (host-side; recipe execution is local-facade only). */
+function sleep(ms) {
+    return new Promise((resolve) => setTimeout(resolve, ms));
+}
+//# sourceMappingURL=recipe-runner.js.map

package/dist/modules/compose/recipe-runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"recipe-runner.js","sourceRoot":"","sources":["../../../src/modules/compose/recipe-runner.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,iBAAiB,EACjB,eAAe,EACf,oBAAoB,EACpB,mBAAmB,EACnB,sBAAsB,EACtB,oBAAoB,EACpB,mBAAmB,EACnB,UAAU,EACV,gBAAgB,GACjB,MAAM,gCAAgC,CAAA;AAkCvC,yFAAyF;AACzF,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAgB,EAAE,GAAqB;IACzE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,GAAG,CAAA;IAC5C,MAAM,SAAS,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAA;IAC3C,IAAI,CAAC;QACH,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;YAClB,KAAK,cAAc,EAAE,CAAC;gBACpB,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE;oBAC9D,GAAG;oBACH,SAAS;oBACT,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAChF,CAAC,CAAA;gBACF,OAAO,GAAG,CAAC,IAAI,KAAK,CAAC;oBACnB,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE;oBACd,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,CAAC,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,QAAQ,GAAG,CAAC,IAAI,EAAE,EAAE,CAAA;YACtF,CAAC;YACD,KAAK,WAAW,EAAE,CAAC;gBACjB,IAAI,CAAC,OAAO,CAAC,gBAAgB;oBAC3B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,oCAAoC,EAAE,CAAA;gBACnE,MAAM,OAAO,CAAC,gBAAgB,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,CAAA;gBAC3D,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAA;YACrB,CAAC;YACD,KAAK,WAAW;gBACd,OAAO,SAAS,CAAC,SAAS,EAAE,oBAAoB,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAA;YAC1F,KAAK,WAAW;gBACd,OAAO,SAAS,CAAC,SAAS,EAAE,oBAAoB,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAA;YACrF,KAAK,cAAc,EAAE,CAAC;gBACpB,IAAI,CAAC,OAAO,CAAC,WAAW;oBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,kCAAkC,EAAE,CAAA;gBACzF,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE;oBAC3D,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAClD,GAAG;oBACH,SAAS;iBACV,CAAC,CAAA;gBACF,OAAO,GAAG,CAAC,IAAI,KAAK,CAAC;oBACnB,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE;oBACd,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,CAAC,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,QAAQ,GAAG,CAAC,IAAI,EAAE,EAAE,CAAA;YACtF,CAAC;YACD;gBACE,uFAAuF;gBACvF,yFAAyF;gBACzF,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,KAAK,EAAE,iCAAkC,IAA0B,CAAC,IAAI,IAAI,SAAS,GAAG;iBACzF,CAAA;QACL,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAA;IAC/E,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,IAAsB,EACtB,GAA8E,EAC9E,cAAsB;IAEtB,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,GAAG,CAAA;IACnC,MAAM,SAAS,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAA;IAC3C,MAAM,UAAU,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAA;IAC7C,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QACzB,OAAO,SAAS,CAAC,SAAS,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC,CAAA;IAC1F,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;QACjC,OAAO,SAAS,CAAC,SAAS,EAAE,UAAU,EAAE,KAAK,IAAI,EAAE;YACjD,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,OAAO,CAC/B,eAAe,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,EACxE,EAAE,GAAG,EAAE,SAAS,EAAE,cAAc,EAAE,CACnC,CAAA;YACD,OAAO;gBACL,IAAI,EAAE,GAAG,CAAC,IAAI,KAAK,CAAC;gBACpB,KAAK,EAAE,UAAU,CAAC,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,QAAQ,GAAG,CAAC,IAAI,EAAE;aAClE,CAAA;QACH,CAAC,CAAC,CAAA;IACJ,CAAC;IACD,2EAA2E;IAC3E,OAAO,SAAS,CAAC,SAAS,EAAE,UAAU,EAAE,KAAK,IAAI,EAAE;QACjD,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC,EAAE;YAC3E,GAAG;YACH,SAAS,EAAE,cAAc;SAC1B,CAAC,CAAA;QACF,MAAM,MAAM,GAAG,EAAE,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,cAAc,CAAA;QAC5E,IAAI,MAAM,KAAK,OAAO;YAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;QAC7C,IAAI,MAAM,KAAK,QAAQ;YACrB,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,mCAAmC,EAAE,CAAA;QACjF,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAA;IACxD,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,mGAAmG;AACnG,KAAK,UAAU,SAAS,CACtB,GAAW,EACX,IAA4D,EAC5D,SAAS,GAAG,MAAM;IAElB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC,CAAA;QACxE,4FAA4F;QAC5F,qEAAqE;QACrE,IAAI,IAAI,GAAG,EAAE,CAAA;QACb,IAAI,IAAI,CAAC,kBAAkB;YAAE,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;;YAC/C,MAAM,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,CAAA;QAC7B,OAAO,sBAAsB,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC;YACnD,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE;YAChB,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,GAAG,CAAC,MAAM,EAAE,EAAE,CAAA;IAClD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAA;IACjF,CAAC;AACH,CAAC;AAED,kFAAkF;AAClF,KAAK,UAAU,SAAS,CACtB,IAAgD,EAChD,GAAqB,EACrB,cAAc,GAAG,MAAM;IAEvB,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,GAAG,CAAA;IAC5C,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,gBAAgB,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE;YAClF,GAAG;YACH,SAAS,EAAE,cAAc;SAC1B,CAAC,CAAA;QACF,OAAO,GAAG,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAA;IACpF,CAAC;IACD,MAAM,MAAM,GAAG,CAAC,MAAM,OAAO,CAAC,kBAAkB,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,CAAA;IAChF,OAAO,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAA;AAC5E,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,SAAS,CACtB,SAAiB,EACjB,UAAkB,EAClB,OAAmC;IAEnC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAA;IACvC,IAAI,SAAS,GAAG,WAAW,CAAA;IAC3B,SAAS,CAAC;QACR,MAAM,GAAG,GAAG,MAAM,OAAO,EAAE,CAAA;QAC3B,IAAI,GAAG,CAAC,IAAI;YAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAA;QACjC,IAAI,GAAG,CAAC,KAAK;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,IAAI,QAAQ,EAAE,CAAA;QACjE,SAAS,GAAG,GAAG,CAAC,KAAK,IAAI,SAAS,CAAA;QAClC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,IAAI,QAAQ,EAAE,CAAC;YACxC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,mBAAmB,SAAS,OAAO,SAAS,GAAG,EAAE,CAAA;QAC9E,CAAC;QACD,MAAM,KAAK,CAAC,UAAU,CAAC,CAAA;IACzB,CAAC;AACH,CAAC;AAED,2FAA2F;AAC3F,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAA;AAC1D,CAAC"}

package/dist/modules/sharedStack/SharedStackService.d.ts

@@ -0,0 +1,94 @@
+import type { Clock, CreateSharedStackInput, IdGenerator, RecipeStepRecorder, SharedStack, SharedStackRepository, UpdateSharedStackInput, WorkspaceRepository } from '@cat-factory/kernel';
+import { type ComposeRuntime } from '../compose/compose-environment.logic.js';
+export interface SharedStackServiceDependencies {
+    sharedStackRepository: SharedStackRepository;
+    workspaceRepository: WorkspaceRepository;
+    idGenerator: IdGenerator;
+    clock: Clock;
+    /**
+     * The host Docker seam used to bring a stack UP / tear it DOWN. Wired ONLY on a facade with a
+     * host daemon (the local facade); absent on the Worker / plain Node, where CRUD still works but
+     * `ensureUp`/`teardown` refuse with a clear "requires the local Docker runtime" error (the
+     * documented compose runtime-binding exception — persistence stays symmetric, execution does not).
+     */
+    composeRuntime?: ComposeRuntime;
+    /**
+     * Optional VCS token used to CLONE a stack's repo during bring-up (threaded to the runtime's
+     * `checkout` as `token`). Wired on the local facade from the same source-control PAT the agent
+     * containers push with, so a shared stack whose `cloneUrl` is a PRIVATE repo can be brought up.
+     * Absent ⇒ the clone runs unauthenticated (public repos only), exactly as before.
+     */
+    cloneToken?: string;
+    /**
+     * Optional per-step provisioning-log recorder factory: given a stack, returns a recorder the
+     * bring-up streams per-step verdicts through (clone, network, env-file, up, each setup step,
+     * health gate), so the Infrastructure "View logs" drawer shows which step ran/died. Absent ⇒ no
+     * per-step logging (the status/lastError on the record are still updated).
+     */
+    provisioningLog?: (stack: SharedStack) => RecipeStepRecorder;
+}
+/**
+ * Lifecycle for a workspace's SHARED STACKS — long-lived compose infra a per-PR consumer
+ * environment attaches to over an external network (the acme-shared-services pilot). CRUD is
+ * runtime-neutral persistence (works on every facade); the bring-up (`ensureUp`) / teardown drive a
+ * host Docker daemon through the injected {@link ComposeRuntime}, so they run ONLY on the local
+ * facade.
+ *
+ * A shared stack is NEVER swept with a run and NEVER TTL-reaped — teardown is a deliberate action.
+ * Unlike a per-PR preview env, its committed compose files run AS AUTHORED (host ports kept, no
+ * isolation rewrite): it is the operator's own trusted infra, so the trust boundary is configuring
+ * the stack, not sandboxing it. `ensureUp` is idempotent + coalesces concurrent callers onto one
+ * in-flight bring-up per stack id.
+ */
+export declare class SharedStackService {
+    private readonly stacks;
+    private readonly workspaceRepository;
+    private readonly idGenerator;
+    private readonly clock;
+    private readonly runtime;
+    private readonly cloneToken;
+    private readonly provisioningLog;
+    private readonly inflight;
+    constructor(deps: SharedStackServiceDependencies);
+    /** List a workspace's shared stacks (ordered by creation). */
+    list(workspaceId: string): Promise<SharedStack[]>;
+    /** A single shared stack by id. */
+    get(workspaceId: string, id: string): Promise<SharedStack>;
+    /** Create a new shared stack (initially `stopped`). */
+    create(workspaceId: string, input: CreateSharedStackInput): Promise<SharedStack>;
+    /** Patch a shared stack's config. A running stack cannot be reconfigured — tear it down first. */
+    update(workspaceId: string, id: string, patch: UpdateSharedStackInput): Promise<SharedStack>;
+    /** Remove a shared stack. A running stack must be torn down first (never silently killed). */
+    remove(workspaceId: string, id: string): Promise<void>;
+    /**
+     * Bring a shared stack up (idempotent). Already-`running` ⇒ a no-op returning the record.
+     * Otherwise: clone/refresh the repo, create its managed networks, `up -d` under its profiles,
+     * materialize env-file templates, run the ordered setup steps, then poll the terminal health gate
+     * — persisting `running` / `failed` (+ `lastError`) at the end. Concurrent callers coalesce onto
+     * one in-flight bring-up. Requires the host Docker runtime (local facade).
+     */
+    ensureUp(workspaceId: string, id: string): Promise<SharedStack>;
+    /** Tear a shared stack down (`down -v`). A deliberate action; the stack row is preserved. */
+    teardown(workspaceId: string, id: string): Promise<SharedStack>;
+    /** The stable compose project name for a shared stack (long-lived, NOT per-PR). */
+    private projectName;
+    /**
+     * Is the stack's compose project ACTUALLY up on the daemon right now? A project-name-scoped
+     * `compose ps` (no checkout / `-f` needed) classified as `ready`. Used to reconcile a stored
+     * `running` against reality before `ensureUp` short-circuits — a failed probe (daemon gone,
+     * containers pruned) reads as not-live so the caller re-provisions. Never throws.
+     */
+    private isStackLive;
+    /** Drive the full bring-up, persisting the terminal `running`/`failed` verdict. */
+    private bringUp;
+    /**
+     * Refuse a stack's `host-command` setup steps unless it opted in (`allowHostCommands`) AND the
+     * runtime can run host commands. Returns a blocking message, or null when allowed / none declared.
+     */
+    private checkHostCommands;
+    /** Write a stack's lifecycle transition (status + lastError, bumping updatedAt) and return it. */
+    private persist;
+    /** Best-effort per-step provisioning-log entry (never throws; no-op when no recorder is wired). */
+    private logStep;
+}
+//# sourceMappingURL=SharedStackService.d.ts.map

package/dist/modules/sharedStack/SharedStackService.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SharedStackService.d.ts","sourceRoot":"","sources":["../../../src/modules/sharedStack/SharedStackService.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,KAAK,EACL,sBAAsB,EACtB,WAAW,EACX,kBAAkB,EAClB,WAAW,EACX,qBAAqB,EACrB,sBAAsB,EACtB,mBAAmB,EACpB,MAAM,qBAAqB,CAAA;AAE5B,OAAO,EACL,KAAK,cAAc,EAKpB,MAAM,yCAAyC,CAAA;AAGhD,MAAM,WAAW,8BAA8B;IAC7C,qBAAqB,EAAE,qBAAqB,CAAA;IAC5C,mBAAmB,EAAE,mBAAmB,CAAA;IACxC,WAAW,EAAE,WAAW,CAAA;IACxB,KAAK,EAAE,KAAK,CAAA;IACZ;;;;;OAKG;IACH,cAAc,CAAC,EAAE,cAAc,CAAA;IAC/B;;;;;OAKG;IACH,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB;;;;;OAKG;IACH,eAAe,CAAC,EAAE,CAAC,KAAK,EAAE,WAAW,KAAK,kBAAkB,CAAA;CAC7D;AAOD;;;;;;;;;;;;GAYG;AACH,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAuB;IAC9C,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAqB;IACzD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAa;IACzC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAO;IAC7B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA4B;IACpD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAoB;IAC/C,OAAO,CAAC,QAAQ,CAAC,eAAe,CAA0D;IAG1F,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA0C;IAEnE,YAAY,IAAI,EAAE,8BAA8B,EAQ/C;IAED,8DAA8D;IACxD,IAAI,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,CAGtD;IAED,mCAAmC;IAC7B,GAAG,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAG/D;IAED,uDAAuD;IACjD,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAAC,WAAW,CAAC,CAuBrF;IAED,kGAAkG;IAC5F,MAAM,CACV,WAAW,EAAE,MAAM,EACnB,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,sBAAsB,GAC5B,OAAO,CAAC,WAAW,CAAC,CAwBtB;IAED,8FAA8F;IACxF,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAO3D;IAED;;;;;;OAMG;IACG,QAAQ,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAkBpE;IAED,6FAA6F;IACvF,QAAQ,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAcpE;IAID,mFAAmF;IACnF,OAAO,CAAC,WAAW;IAOnB;;;;;OAKG;YACW,WAAW;IAYzB,mFAAmF;YACrE,OAAO;IA8HrB;;;OAGG;IACH,OAAO,CAAC,iBAAiB;IAWzB,kGAAkG;YACpF,OAAO;IAerB,mGAAmG;YACrF,OAAO;CAmBtB"}

package/dist/modules/sharedStack/SharedStackService.js

@@ -0,0 +1,340 @@
+import { assertFound, ConflictError, requireWorkspace, ValidationError } from '@cat-factory/kernel';
+import { classifyComposePs, composeFileDir, DEFAULT_RECIPE_HEALTH_GATE, tailOutput, } from '../compose/compose-environment.logic.js';
+import { runHealthGate, runRecipeStep } from '../compose/recipe-runner.js';
+// Bound (ms) for the plain compose calls (network / down / version) so a wedged daemon can't hang
+// a bring-up/teardown forever; `up` clears its own health-gate budget separately.
+const SHORT_TIMEOUT_MS = 60_000;
+const UP_TIMEOUT_MS = 330_000;
+/**
+ * Lifecycle for a workspace's SHARED STACKS — long-lived compose infra a per-PR consumer
+ * environment attaches to over an external network (the acme-shared-services pilot). CRUD is
+ * runtime-neutral persistence (works on every facade); the bring-up (`ensureUp`) / teardown drive a
+ * host Docker daemon through the injected {@link ComposeRuntime}, so they run ONLY on the local
+ * facade.
+ *
+ * A shared stack is NEVER swept with a run and NEVER TTL-reaped — teardown is a deliberate action.
+ * Unlike a per-PR preview env, its committed compose files run AS AUTHORED (host ports kept, no
+ * isolation rewrite): it is the operator's own trusted infra, so the trust boundary is configuring
+ * the stack, not sandboxing it. `ensureUp` is idempotent + coalesces concurrent callers onto one
+ * in-flight bring-up per stack id.
+ */
+export class SharedStackService {
+    stacks;
+    workspaceRepository;
+    idGenerator;
+    clock;
+    runtime;
+    cloneToken;
+    provisioningLog;
+    // Coalesce concurrent `ensureUp` for the same stack onto one in-flight bring-up (a second caller
+    // must not start a duplicate `up` / re-run non-idempotent setup steps).
+    inflight = new Map();
+    constructor(deps) {
+        this.stacks = deps.sharedStackRepository;
+        this.workspaceRepository = deps.workspaceRepository;
+        this.idGenerator = deps.idGenerator;
+        this.clock = deps.clock;
+        this.runtime = deps.composeRuntime;
+        this.cloneToken = deps.cloneToken;
+        this.provisioningLog = deps.provisioningLog;
+    }
+    /** List a workspace's shared stacks (ordered by creation). */
+    async list(workspaceId) {
+        await requireWorkspace(this.workspaceRepository, workspaceId);
+        return this.stacks.list(workspaceId);
+    }
+    /** A single shared stack by id. */
+    async get(workspaceId, id) {
+        await requireWorkspace(this.workspaceRepository, workspaceId);
+        return assertFound(await this.stacks.get(workspaceId, id), 'SharedStack', id);
+    }
+    /** Create a new shared stack (initially `stopped`). */
+    async create(workspaceId, input) {
+        await requireWorkspace(this.workspaceRepository, workspaceId);
+        const now = this.clock.now();
+        const stack = {
+            id: this.idGenerator.next('ss'),
+            workspaceId,
+            name: input.name,
+            cloneUrl: input.cloneUrl,
+            gitRef: input.gitRef ?? null,
+            composeFiles: input.composeFiles,
+            composeProfiles: input.composeProfiles,
+            envFiles: input.envFiles,
+            managedNetworks: input.managedNetworks,
+            setupSteps: input.setupSteps,
+            healthGate: input.healthGate ?? null,
+            allowHostCommands: input.allowHostCommands,
+            status: 'stopped',
+            lastError: null,
+            createdAt: now,
+            updatedAt: now,
+        };
+        await this.stacks.upsert(workspaceId, stack);
+        return stack;
+    }
+    /** Patch a shared stack's config. A running stack cannot be reconfigured — tear it down first. */
+    async update(workspaceId, id, patch) {
+        await requireWorkspace(this.workspaceRepository, workspaceId);
+        const existing = assertFound(await this.stacks.get(workspaceId, id), 'SharedStack', id);
+        if (existing.status === 'running' || existing.status === 'starting') {
+            throw new ConflictError('Tear the shared stack down before reconfiguring it.');
+        }
+        const updated = {
+            ...existing,
+            ...(patch.name !== undefined ? { name: patch.name } : {}),
+            ...(patch.cloneUrl !== undefined ? { cloneUrl: patch.cloneUrl } : {}),
+            ...(patch.gitRef !== undefined ? { gitRef: patch.gitRef } : {}),
+            ...(patch.composeFiles !== undefined ? { composeFiles: patch.composeFiles } : {}),
+            ...(patch.composeProfiles !== undefined ? { composeProfiles: patch.composeProfiles } : {}),
+            ...(patch.envFiles !== undefined ? { envFiles: patch.envFiles } : {}),
+            ...(patch.managedNetworks !== undefined ? { managedNetworks: patch.managedNetworks } : {}),
+            ...(patch.setupSteps !== undefined ? { setupSteps: patch.setupSteps } : {}),
+            ...(patch.healthGate !== undefined ? { healthGate: patch.healthGate } : {}),
+            ...(patch.allowHostCommands !== undefined
+                ? { allowHostCommands: patch.allowHostCommands }
+                : {}),
+            updatedAt: this.clock.now(),
+        };
+        await this.stacks.upsert(workspaceId, updated);
+        return updated;
+    }
+    /** Remove a shared stack. A running stack must be torn down first (never silently killed). */
+    async remove(workspaceId, id) {
+        await requireWorkspace(this.workspaceRepository, workspaceId);
+        const existing = await this.stacks.get(workspaceId, id);
+        if (existing && (existing.status === 'running' || existing.status === 'starting')) {
+            throw new ConflictError('Tear the shared stack down before deleting it.');
+        }
+        await this.stacks.remove(workspaceId, id);
+    }
+    /**
+     * Bring a shared stack up (idempotent). Already-`running` ⇒ a no-op returning the record.
+     * Otherwise: clone/refresh the repo, create its managed networks, `up -d` under its profiles,
+     * materialize env-file templates, run the ordered setup steps, then poll the terminal health gate
+     * — persisting `running` / `failed` (+ `lastError`) at the end. Concurrent callers coalesce onto
+     * one in-flight bring-up. Requires the host Docker runtime (local facade).
+     */
+    async ensureUp(workspaceId, id) {
+        await requireWorkspace(this.workspaceRepository, workspaceId);
+        const stack = assertFound(await this.stacks.get(workspaceId, id), 'SharedStack', id);
+        if (!this.runtime) {
+            throw new ValidationError('Bringing a shared stack up requires the local Docker runtime (unavailable on this deployment).');
+        }
+        // Idempotent no-op ONLY when the daemon actually still has the stack up. The stored `running`
+        // is intent, not liveness — after a host reboot / `docker system prune` the row still says
+        // `running` while nothing is up, so trust-but-verify with a cheap `compose ps` before
+        // short-circuiting; a stale `running` falls through and re-provisions instead of wedging.
+        if (stack.status === 'running' && (await this.isStackLive(stack)))
+            return stack;
+        const existing = this.inflight.get(id);
+        if (existing)
+            return existing;
+        const run = this.bringUp(workspaceId, stack).finally(() => this.inflight.delete(id));
+        this.inflight.set(id, run);
+        return run;
+    }
+    /** Tear a shared stack down (`down -v`). A deliberate action; the stack row is preserved. */
+    async teardown(workspaceId, id) {
+        await requireWorkspace(this.workspaceRepository, workspaceId);
+        const stack = assertFound(await this.stacks.get(workspaceId, id), 'SharedStack', id);
+        if (!this.runtime) {
+            throw new ValidationError('Tearing a shared stack down requires the local Docker runtime (unavailable on this deployment).');
+        }
+        const project = this.projectName(stack);
+        await this.runtime
+            .compose(['-p', project, 'down', '-v', '--remove-orphans'], { timeoutMs: SHORT_TIMEOUT_MS })
+            .catch(() => { });
+        await this.runtime.cleanupProject?.(project);
+        return this.persist(workspaceId, stack, { status: 'stopped', lastError: null });
+    }
+    // --- internals ----------------------------------------------------------
+    /** The stable compose project name for a shared stack (long-lived, NOT per-PR). */
+    projectName(stack) {
+        return `cf-stack-${stack.id}`
+            .toLowerCase()
+            .replace(/[^a-z0-9_-]+/g, '-')
+            .slice(0, 63);
+    }
+    /**
+     * Is the stack's compose project ACTUALLY up on the daemon right now? A project-name-scoped
+     * `compose ps` (no checkout / `-f` needed) classified as `ready`. Used to reconcile a stored
+     * `running` against reality before `ensureUp` short-circuits — a failed probe (daemon gone,
+     * containers pruned) reads as not-live so the caller re-provisions. Never throws.
+     */
+    async isStackLive(stack) {
+        const runtime = this.runtime;
+        if (!runtime)
+            return false;
+        const ps = await runtime
+            .compose(['-p', this.projectName(stack), 'ps', '-a', '--format', 'json'], {
+            timeoutMs: SHORT_TIMEOUT_MS,
+        })
+            .catch(() => null);
+        if (!ps || ps.code !== 0)
+            return false;
+        return classifyComposePs(ps.stdout) === 'ready';
+    }
+    /** Drive the full bring-up, persisting the terminal `running`/`failed` verdict. */
+    async bringUp(workspaceId, stack) {
+        const runtime = this.runtime;
+        const record = this.provisioningLog?.(stack);
+        await this.persist(workspaceId, stack, { status: 'starting', lastError: null });
+        const project = this.projectName(stack);
+        if (!runtime.checkout || !runtime.copyCheckoutFile) {
+            return this.persist(workspaceId, stack, {
+                status: 'failed',
+                lastError: 'The runtime cannot clone + write a checkout (shared stacks need a host daemon).',
+            });
+        }
+        // A `host-command` setup step is refused unless the stack opted in AND the runtime supports it.
+        const hostCmdIssue = this.checkHostCommands(stack);
+        if (hostCmdIssue) {
+            return this.persist(workspaceId, stack, { status: 'failed', lastError: hostCmdIssue });
+        }
+        // Clone/refresh the stack repo into its own long-lived working tree.
+        const cloneStarted = this.clock.now();
+        let checkoutDir;
+        try {
+            ;
+            ({ dir: checkoutDir } = await runtime.checkout(project, {
+                cloneUrl: stack.cloneUrl,
+                ref: stack.gitRef ?? 'HEAD',
+                ...(this.cloneToken ? { token: this.cloneToken } : {}),
+            }));
+            await this.logStep(record, 'clone repo', cloneStarted, { ok: true });
+        }
+        catch (err) {
+            const message = `Could not clone the stack repo: ${err instanceof Error ? err.message : String(err)}`;
+            await this.logStep(record, 'clone repo', cloneStarted, { ok: false, error: message });
+            return this.persist(workspaceId, stack, { status: 'failed', lastError: message });
+        }
+        // Create the managed networks the stack owns (its consumers attach to these as external).
+        for (const network of stack.managedNetworks) {
+            const started = this.clock.now();
+            const res = (await runtime.ensureNetwork?.(network)) ?? {
+                code: 1,
+                stdout: '',
+                stderr: 'runtime cannot manage networks',
+            };
+            const ok = res.code === 0;
+            await this.logStep(record, `network: ${network}`, started, {
+                ok,
+                ...(ok ? {} : { error: tailOutput(res.stderr || res.stdout) || `exit ${res.code}` }),
+            });
+            if (!ok) {
+                return this.persist(workspaceId, stack, {
+                    status: 'failed',
+                    lastError: `Could not create network '${network}': ${tailOutput(res.stderr || res.stdout)}`,
+                });
+            }
+        }
+        // Materialize env-file templates BEFORE `up`, each a logged step.
+        for (const envFile of stack.envFiles) {
+            const started = this.clock.now();
+            try {
+                await runtime.copyCheckoutFile(project, envFile.template, envFile.target);
+                await this.logStep(record, `env-file: ${envFile.target}`, started, { ok: true });
+            }
+            catch (err) {
+                const message = `Could not materialize env file '${envFile.target}': ${err instanceof Error ? err.message : String(err)}`;
+                await this.logStep(record, `env-file: ${envFile.target}`, started, {
+                    ok: false,
+                    error: message,
+                });
+                return this.persist(workspaceId, stack, { status: 'failed', lastError: message });
+            }
+        }
+        // The stack runs its committed compose files AS AUTHORED (host ports kept — it is trusted infra,
+        // not an isolated per-PR preview). `--project-directory` is the first file's dir so its relative
+        // build contexts / binds / env_files resolve as written.
+        const composeDir = composeFileDir(stack.composeFiles[0]);
+        const projectDir = composeDir ? `${checkoutDir}/${composeDir}` : checkoutDir;
+        const files = stack.composeFiles.flatMap((f) => ['-f', `${checkoutDir}/${f}`]);
+        const scope = ['-p', project, '--project-directory', projectDir, ...files];
+        const env = stack.composeProfiles.length
+            ? { COMPOSE_PROFILES: stack.composeProfiles.join(',') }
+            : {};
+        const upStarted = this.clock.now();
+        const up = await runtime.compose([...scope, 'up', '-d'], { env, timeoutMs: UP_TIMEOUT_MS });
+        const upOk = up.code === 0;
+        await this.logStep(record, 'compose up', upStarted, {
+            ok: upOk,
+            ...(upOk ? {} : { error: tailOutput(up.stderr || up.stdout) }),
+        });
+        if (!upOk) {
+            return this.persist(workspaceId, stack, {
+                status: 'failed',
+                lastError: tailOutput(up.stderr || up.stdout) || 'docker compose up failed',
+            });
+        }
+        // Ordered setup steps (users sync, connector registration, seed import, …).
+        for (const step of stack.setupSteps) {
+            const started = this.clock.now();
+            const result = await runRecipeStep(step, { runtime, scope, env, project });
+            await this.logStep(record, step.name, started, result);
+            if (!result.ok) {
+                return this.persist(workspaceId, stack, {
+                    status: 'failed',
+                    lastError: `Setup step '${step.name}' failed: ${result.error}`,
+                });
+            }
+        }
+        // Terminal health gate.
+        const gate = stack.healthGate ?? DEFAULT_RECIPE_HEALTH_GATE;
+        const gateStarted = this.clock.now();
+        const gateResult = await runHealthGate(gate, { runtime, scope, env }, SHORT_TIMEOUT_MS);
+        await this.logStep(record, `health gate (${gate.kind})`, gateStarted, gateResult);
+        if (!gateResult.ok) {
+            return this.persist(workspaceId, stack, {
+                status: 'failed',
+                lastError: `Health gate did not pass: ${gateResult.error}`,
+            });
+        }
+        return this.persist(workspaceId, stack, { status: 'running', lastError: null });
+    }
+    /**
+     * Refuse a stack's `host-command` setup steps unless it opted in (`allowHostCommands`) AND the
+     * runtime can run host commands. Returns a blocking message, or null when allowed / none declared.
+     */
+    checkHostCommands(stack) {
+        if (!stack.setupSteps.some((s) => s.kind === 'host-command'))
+            return null;
+        if (!stack.allowHostCommands) {
+            return "This stack declares host-command step(s), but host commands are not enabled for it (set 'Allow host commands').";
+        }
+        if (!this.runtime?.hostCommand) {
+            return 'This stack declares host-command step(s), but the runtime cannot run host commands.';
+        }
+        return null;
+    }
+    /** Write a stack's lifecycle transition (status + lastError, bumping updatedAt) and return it. */
+    async persist(workspaceId, stack, change) {
+        const updated = {
+            ...stack,
+            status: change.status,
+            lastError: change.lastError,
+            updatedAt: this.clock.now(),
+        };
+        await this.stacks.upsert(workspaceId, updated);
+        return updated;
+    }
+    /** Best-effort per-step provisioning-log entry (never throws; no-op when no recorder is wired). */
+    async logStep(record, name, startedAt, result) {
+        if (!record)
+            return;
+        try {
+            await record({
+                name,
+                outcome: result.ok ? 'success' : 'failure',
+                durationMs: this.clock.now() - startedAt,
+                ...(result.detail ? { detail: result.detail } : {}),
+                ...(result.error ? { error: result.error } : {}),
+            });
+        }
+        catch {
+            // best-effort: a log-write failure must never break the bring-up.
+        }
+    }
+}
+//# sourceMappingURL=SharedStackService.js.map

package/dist/modules/sharedStack/SharedStackService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SharedStackService.js","sourceRoot":"","sources":["../../../src/modules/sharedStack/SharedStackService.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAA;AACnG,OAAO,EAEL,iBAAiB,EACjB,cAAc,EACd,0BAA0B,EAC1B,UAAU,GACX,MAAM,yCAAyC,CAAA;AAChD,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAA;AA8B1E,kGAAkG;AAClG,kFAAkF;AAClF,MAAM,gBAAgB,GAAG,MAAM,CAAA;AAC/B,MAAM,aAAa,GAAG,OAAO,CAAA;AAE7B;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,kBAAkB;IACZ,MAAM,CAAuB;IAC7B,mBAAmB,CAAqB;IACxC,WAAW,CAAa;IACxB,KAAK,CAAO;IACZ,OAAO,CAA4B;IACnC,UAAU,CAAoB;IAC9B,eAAe,CAA0D;IAC1F,iGAAiG;IACjG,wEAAwE;IACvD,QAAQ,GAAG,IAAI,GAAG,EAAgC,CAAA;IAEnE,YAAY,IAAoC;QAC9C,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,qBAAqB,CAAA;QACxC,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC,mBAAmB,CAAA;QACnD,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAA;QACnC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAA;QACvB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,cAAc,CAAA;QAClC,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAA;QACjC,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,eAAe,CAAA;IAC7C,CAAC;IAED,8DAA8D;IAC9D,KAAK,CAAC,IAAI,CAAC,WAAmB;QAC5B,MAAM,gBAAgB,CAAC,IAAI,CAAC,mBAAmB,EAAE,WAAW,CAAC,CAAA;QAC7D,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;IACtC,CAAC;IAED,mCAAmC;IACnC,KAAK,CAAC,GAAG,CAAC,WAAmB,EAAE,EAAU;QACvC,MAAM,gBAAgB,CAAC,IAAI,CAAC,mBAAmB,EAAE,WAAW,CAAC,CAAA;QAC7D,OAAO,WAAW,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC,EAAE,aAAa,EAAE,EAAE,CAAC,CAAA;IAC/E,CAAC;IAED,uDAAuD;IACvD,KAAK,CAAC,MAAM,CAAC,WAAmB,EAAE,KAA6B;QAC7D,MAAM,gBAAgB,CAAC,IAAI,CAAC,mBAAmB,EAAE,WAAW,CAAC,CAAA;QAC7D,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAA;QAC5B,MAAM,KAAK,GAAgB;YACzB,EAAE,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC;YAC/B,WAAW;YACX,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,IAAI;YAC5B,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,IAAI;YACpC,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;YAC1C,MAAM,EAAE,SAAS;YACjB,SAAS,EAAE,IAAI;YACf,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,GAAG;SACf,CAAA;QACD,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,CAAC,CAAA;QAC5C,OAAO,KAAK,CAAA;IACd,CAAC;IAED,kGAAkG;IAClG,KAAK,CAAC,MAAM,CACV,WAAmB,EACnB,EAAU,EACV,KAA6B;QAE7B,MAAM,gBAAgB,CAAC,IAAI,CAAC,mBAAmB,EAAE,WAAW,CAAC,CAAA;QAC7D,MAAM,QAAQ,GAAG,WAAW,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC,EAAE,aAAa,EAAE,EAAE,CAAC,CAAA;QACvF,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YACpE,MAAM,IAAI,aAAa,CAAC,qDAAqD,CAAC,CAAA;QAChF,CAAC;QACD,MAAM,OAAO,GAAgB;YAC3B,GAAG,QAAQ;YACX,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzD,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrE,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/D,GAAG,CAAC,KAAK,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjF,GAAG,CAAC,KAAK,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,KAAK,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1F,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrE,GAAG,CAAC,KAAK,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,KAAK,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1F,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3E,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3E,GAAG,CAAC,KAAK,CAAC,iBAAiB,KAAK,SAAS;gBACvC,CAAC,CAAC,EAAE,iBAAiB,EAAE,KAAK,CAAC,iBAAiB,EAAE;gBAChD,CAAC,CAAC,EAAE,CAAC;YACP,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE;SAC5B,CAAA;QACD,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,CAAA;QAC9C,OAAO,OAAO,CAAA;IAChB,CAAC;IAED,8FAA8F;IAC9F,KAAK,CAAC,MAAM,CAAC,WAAmB,EAAE,EAAU;QAC1C,MAAM,gBAAgB,CAAC,IAAI,CAAC,mBAAmB,EAAE,WAAW,CAAC,CAAA;QAC7D,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC,CAAA;QACvD,IAAI,QAAQ,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,KAAK,UAAU,CAAC,EAAE,CAAC;YAClF,MAAM,IAAI,aAAa,CAAC,gDAAgD,CAAC,CAAA;QAC3E,CAAC;QACD,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC,CAAA;IAC3C,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,QAAQ,CAAC,WAAmB,EAAE,EAAU;QAC5C,MAAM,gBAAgB,CAAC,IAAI,CAAC,mBAAmB,EAAE,WAAW,CAAC,CAAA;QAC7D,MAAM,KAAK,GAAG,WAAW,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC,EAAE,aAAa,EAAE,EAAE,CAAC,CAAA;QACpF,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAClB,MAAM,IAAI,eAAe,CACvB,gGAAgG,CACjG,CAAA;QACH,CAAC;QACD,8FAA8F;QAC9F,2FAA2F;QAC3F,sFAAsF;QACtF,0FAA0F;QAC1F,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YAAE,OAAO,KAAK,CAAA;QAC/E,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QACtC,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAA;QAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAA;QACpF,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAA;QAC1B,OAAO,GAAG,CAAA;IACZ,CAAC;IAED,6FAA6F;IAC7F,KAAK,CAAC,QAAQ,CAAC,WAAmB,EAAE,EAAU;QAC5C,MAAM,gBAAgB,CAAC,IAAI,CAAC,mBAAmB,EAAE,WAAW,CAAC,CAAA;QAC7D,MAAM,KAAK,GAAG,WAAW,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC,EAAE,aAAa,EAAE,EAAE,CAAC,CAAA;QACpF,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAClB,MAAM,IAAI,eAAe,CACvB,iGAAiG,CAClG,CAAA;QACH,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAA;QACvC,MAAM,IAAI,CAAC,OAAO;aACf,OAAO,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,CAAC,EAAE,EAAE,SAAS,EAAE,gBAAgB,EAAE,CAAC;aAC3F,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;QAClB,MAAM,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC,OAAO,CAAC,CAAA;QAC5C,OAAO,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IACjF,CAAC;IAED,2EAA2E;IAE3E,mFAAmF;IAC3E,WAAW,CAAC,KAAkB;QACpC,OAAO,YAAY,KAAK,CAAC,EAAE,EAAE;aAC1B,WAAW,EAAE;aACb,OAAO,CAAC,eAAe,EAAE,GAAG,CAAC;aAC7B,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IACjB,CAAC;IAED;;;;;OAKG;IACK,KAAK,CAAC,WAAW,CAAC,KAAkB;QAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAA;QAC5B,IAAI,CAAC,OAAO;YAAE,OAAO,KAAK,CAAA;QAC1B,MAAM,EAAE,GAAG,MAAM,OAAO;aACrB,OAAO,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC,EAAE;YACxE,SAAS,EAAE,gBAAgB;SAC5B,CAAC;aACD,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAA;QACpB,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,IAAI,KAAK,CAAC;YAAE,OAAO,KAAK,CAAA;QACtC,OAAO,iBAAiB,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,OAAO,CAAA;IACjD,CAAC;IAED,mFAAmF;IAC3E,KAAK,CAAC,OAAO,CAAC,WAAmB,EAAE,KAAkB;QAC3D,MAAM,OAAO,GAAG,IAAI,CAAC,OAAQ,CAAA;QAC7B,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC,KAAK,CAAC,CAAA;QAC5C,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAC/E,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAA;QAEvC,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC;YACnD,OAAO,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK,EAAE;gBACtC,MAAM,EAAE,QAAQ;gBAChB,SAAS,EACP,iFAAiF;aACpF,CAAC,CAAA;QACJ,CAAC;QAED,gGAAgG;QAChG,MAAM,YAAY,GAAG,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAA;QAClD,IAAI,YAAY,EAAE,CAAC;YACjB,OAAO,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC,CAAA;QACxF,CAAC;QAED,qEAAqE;QACrE,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAA;QACrC,IAAI,WAAmB,CAAA;QACvB,IAAI,CAAC;YACH,CAAC;YAAA,CAAC,EAAE,GAAG,EAAE,WAAW,EAAE,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,OAAO,EAAE;gBACvD,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,GAAG,EAAE,KAAK,CAAC,MAAM,IAAI,MAAM;gBAC3B,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACvD,CAAC,CAAC,CAAA;YACH,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,YAAY,EAAE,YAAY,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAA;QACtE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,mCAAmC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAA;YACrG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,YAAY,EAAE,YAAY,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAA;YACrF,OAAO,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAA;QACnF,CAAC;QAED,0FAA0F;QAC1F,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,eAAe,EAAE,CAAC;YAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAA;YAChC,MAAM,GAAG,GAAG,CAAC,MAAM,OAAO,CAAC,aAAa,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI;gBACtD,IAAI,EAAE,CAAC;gBACP,MAAM,EAAE,EAAE;gBACV,MAAM,EAAE,gCAAgC;aACzC,CAAA;YACD,MAAM,EAAE,GAAG,GAAG,CAAC,IAAI,KAAK,CAAC,CAAA;YACzB,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,YAAY,OAAO,EAAE,EAAE,OAAO,EAAE;gBACzD,EAAE;gBACF,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,UAAU,CAAC,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,QAAQ,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC;aACrF,CAAC,CAAA;YACF,IAAI,CAAC,EAAE,EAAE,CAAC;gBACR,OAAO,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK,EAAE;oBACtC,MAAM,EAAE,QAAQ;oBAChB,SAAS,EAAE,6BAA6B,OAAO,MAAM,UAAU,CAAC,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,EAAE;iBAC5F,CAAC,CAAA;YACJ,CAAC;QACH,CAAC;QAED,kEAAkE;QAClE,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YACrC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAA;YAChC,IAAI,CAAC;gBACH,MAAM,OAAO,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAA;gBACzE,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,aAAa,OAAO,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAA;YAClF,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,OAAO,GAAG,mCAAmC,OAAO,CAAC,MAAM,MAAM,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAA;gBACzH,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,aAAa,OAAO,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE;oBACjE,EAAE,EAAE,KAAK;oBACT,KAAK,EAAE,OAAO;iBACf,CAAC,CAAA;gBACF,OAAO,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAA;YACnF,CAAC;QACH,CAAC;QAED,iGAAiG;QACjG,iGAAiG;QACjG,yDAAyD;QACzD,MAAM,UAAU,GAAG,cAAc,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAE,CAAC,CAAA;QACzD,MAAM,UAAU,GAAG,UAAU,CAAC,CAAC,CAAC,GAAG,WAAW,IAAI,UAAU,EAAE,CAAC,CAAC,CAAC,WAAW,CAAA;QAC5E,MAAM,KAAK,GAAG,KAAK,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,GAAG,WAAW,IAAI,CAAC,EAAE,CAAC,CAAC,CAAA;QAC9E,MAAM,KAAK,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,qBAAqB,EAAE,UAAU,EAAE,GAAG,KAAK,CAAC,CAAA;QAC1E,MAAM,GAAG,GAA2B,KAAK,CAAC,eAAe,CAAC,MAAM;YAC9D,CAAC,CAAC,EAAE,gBAAgB,EAAE,KAAK,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;YACvD,CAAC,CAAC,EAAE,CAAA;QAEN,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAA;QAClC,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC,CAAA;QAC3F,MAAM,IAAI,GAAG,EAAE,CAAC,IAAI,KAAK,CAAC,CAAA;QAC1B,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,YAAY,EAAE,SAAS,EAAE;YAClD,EAAE,EAAE,IAAI;YACR,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,UAAU,CAAC,EAAE,CAAC,MAAM,IAAI,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC;SAC/D,CAAC,CAAA;QACF,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK,EAAE;gBACtC,MAAM,EAAE,QAAQ;gBAChB,SAAS,EAAE,UAAU,CAAC,EAAE,CAAC,MAAM,IAAI,EAAE,CAAC,MAAM,CAAC,IAAI,0BAA0B;aAC5E,CAAC,CAAA;QACJ,CAAC;QAED,4EAA4E;QAC5E,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;YACpC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAA;YAChC,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAA;YAC1E,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAA;YACtD,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;gBACf,OAAO,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK,EAAE;oBACtC,MAAM,EAAE,QAAQ;oBAChB,SAAS,EAAE,eAAe,IAAI,CAAC,IAAI,aAAa,MAAM,CAAC,KAAK,EAAE;iBAC/D,CAAC,CAAA;YACJ,CAAC;QACH,CAAC;QAED,wBAAwB;QACxB,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,IAAI,0BAA0B,CAAA;QAC3D,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAA;QACpC,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,gBAAgB,CAAC,CAAA;QACvF,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,gBAAgB,IAAI,CAAC,IAAI,GAAG,EAAE,WAAW,EAAE,UAAU,CAAC,CAAA;QACjF,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;YACnB,OAAO,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK,EAAE;gBACtC,MAAM,EAAE,QAAQ;gBAChB,SAAS,EAAE,6BAA6B,UAAU,CAAC,KAAK,EAAE;aAC3D,CAAC,CAAA;QACJ,CAAC;QAED,OAAO,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IACjF,CAAC;IAED;;;OAGG;IACK,iBAAiB,CAAC,KAAkB;QAC1C,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,cAAc,CAAC;YAAE,OAAO,IAAI,CAAA;QACzE,IAAI,CAAC,KAAK,CAAC,iBAAiB,EAAE,CAAC;YAC7B,OAAO,iHAAiH,CAAA;QAC1H,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,EAAE,CAAC;YAC/B,OAAO,qFAAqF,CAAA;QAC9F,CAAC;QACD,OAAO,IAAI,CAAA;IACb,CAAC;IAED,kGAAkG;IAC1F,KAAK,CAAC,OAAO,CACnB,WAAmB,EACnB,KAAkB,EAClB,MAAmE;QAEnE,MAAM,OAAO,GAAgB;YAC3B,GAAG,KAAK;YACR,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE;SAC5B,CAAA;QACD,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,CAAA;QAC9C,OAAO,OAAO,CAAA;IAChB,CAAC;IAED,mGAAmG;IAC3F,KAAK,CAAC,OAAO,CACnB,MAAsC,EACtC,IAAY,EACZ,SAAiB,EACjB,MAAwD;QAExD,IAAI,CAAC,MAAM;YAAE,OAAM;QACnB,IAAI,CAAC;YACH,MAAM,MAAM,CAAC;gBACX,IAAI;gBACJ,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;gBAC1C,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,SAAS;gBACxC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnD,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACjD,CAAC,CAAA;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,kEAAkE;QACpE,CAAC;IACH,CAAC;CACF"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cat-factory/integrations",
-  "version": "0.69.0",
+  "version": "0.70.0",
   "description": "External-system integration domain logic for the Agent Architecture Board (GitHub, documents, tasks, environments, runners).",
   "repository": {
     "type": "git",
@@ -24,14 +24,14 @@
     "access": "public"
   },
   "dependencies": {
-    "ai": "^6.0.214",
+    "ai": "^6.0.219",
     "yaml": "^2.9.0",
-    "@cat-factory/contracts": "0.101.1",
-    "@cat-factory/kernel": "0.92.0"
+    "@cat-factory/contracts": "0.103.0",
+    "@cat-factory/kernel": "0.94.0"
   },
   "devDependencies": {
     "typescript": "7.0.1-rc",
-    "undici": "^8.5.0",
+    "undici": "^8.7.0",
     "vitest": "^4.1.9"
   },
   "scripts": {