@cat-factory/kernel 0.271.0 → 0.273.0

package/dist/domain/agent-capabilities.js

@@ -187,24 +187,63 @@ export function isLoopbackMcpHttpUrl(raw) {
     const parsed = parseMcpHttpUrl(raw);
     return parsed ? isLoopbackHost(parsed.host) : false;
 }
+/**
+ * Whether the url carries an ASCII control character or a space ANYWHERE, which is refused rather
+ * than canonicalised.
+ *
+ * The WHATWG parser strips leading and trailing C0-and-space and REMOVES tab, LF and CR from
+ * anywhere in the string, so a url carrying one parses to something other than what it reads as.
+ * The admitted string is stored and handed VERBATIM to the agent CLI's MCP config, so admitting one
+ * url and starting another is the one thing this predicate may not do. They are all typos in
+ * deployment-authored config, and a refusal at registration names the problem where a silent
+ * rewrite would not.
+ */
+function hasControlOrSpace(raw) {
+    for (let i = 0; i < raw.length; i += 1) {
+        if (raw.charCodeAt(i) <= 0x20)
+            return true;
+    }
+    return false;
+}
+const UrlParser = globalThis.URL;
 /**
  * Split an http(s) URL into its scheme and bare host, or undefined when it is neither.
  *
- * Hand-parsed rather than handed to `new URL`, because the userinfo rule is the whole point: strip it
- * FIRST and from the LAST `@`, or `http://127.0.0.1@evil.example` reads as loopback while the request
- * goes to evil.example.
+ * Parsed by `new URL` DELIBERATELY: it is the same WHATWG parser `fetch` and every agent CLI we
+ * hand the url to resolve the request with, so the host ruled on here is the host the credential
+ * actually travels to. A hand-written parse cannot hold that property, and the ways it silently
+ * loses it are not enumerable. `http://evil.example\@127.0.0.1/t` is the worked example: a
+ * backslash terminates the authority for a special scheme, so the WHATWG host is `evil.example`
+ * while an authority regex that stops only at `/?#` reads the userinfo rule onto `127.0.0.1` and
+ * hands `evil.example` a cleartext credential header.
+ *
+ * `hostname` already applies every rule the hand-parse was written for and several it was not:
+ * userinfo stripped from the LAST `@`, the host lowercased, IDNA applied, and the IPv4 shorthands
+ * (`127.1`, `0177.0.0.1`, `2130706433`) collapsed to the address they dial. Only the brackets an
+ * IPv6 literal keeps have to come off, since {@link isLoopbackHost} tests the address itself.
  */
 function parseMcpHttpUrl(raw) {
-    const match = /^(https?):\/\/([^/?#]*)/i.exec(raw);
-    if (!match)
+    if (hasControlOrSpace(raw))
+        return undefined;
+    // A runtime with no URL parser REFUSES rather than falling back to an authority scan. Being
+    // unable to hold the property above is exactly what disqualified the hand-written parse, so a
+    // fallback would reinstate the bug on the one runtime nobody tests.
+    if (!UrlParser)
+        return undefined;
+    let parsed;
+    try {
+        parsed = new UrlParser(raw);
+    }
+    catch {
+        // silent-catch-ok: an unparseable url IS the "neither" this returns undefined for, and the
+        // caller renders the refusal. There is nothing here a cause would add.
+        return undefined;
+    }
+    if (parsed.protocol !== 'http:' && parsed.protocol !== 'https:')
         return undefined;
-    const authority = match[2];
-    const hostPort = authority.slice(authority.lastIndexOf('@') + 1);
-    const closingBracket = hostPort.indexOf(']');
-    const host = (hostPort.startsWith('[') && closingBracket !== -1
-        ? hostPort.slice(1, closingBracket) // IPv6 literal, e.g. [::1]:8080
-        : (hostPort.split(':')[0] ?? '')).toLowerCase();
-    return { scheme: match[1].toLowerCase(), host };
+    const hostname = parsed.hostname;
+    const host = hostname.startsWith('[') ? hostname.slice(1, -1) : hostname;
+    return { scheme: parsed.protocol.slice(0, -1), host };
 }
 function isLoopbackHost(host) {
     return host === 'localhost' || host === '::1' || /^127\.\d+\.\d+\.\d+$/.test(host);

package/dist/domain/agent-capabilities.js.map

@@ -1 +1 @@
-{"version":3,"file":"agent-capabilities.js","sourceRoot":"","sources":["../../src/domain/agent-capabilities.ts"],"names":[],"mappings":"AA2OA,0FAA0F;AAC1F,MAAM,CAAC,MAAM,wBAAwB,GAAG,eAAe,CAAA;AACvD,yFAAyF;AACzF,MAAM,CAAC,MAAM,iCAAiC,GAAG,gBAAgB,CAAA;AAuIjE;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAyD;IAC1F,EAAE,EAAE,EAAE;IACN,aAAa,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC;IAChC,KAAK,EAAE,CAAC,OAAO,CAAC;CACjB,CAAA;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAClC,MAAM,CAAC,IAAI,CAAC,sBAAsB,CACnC,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;AAEjE;;;;;;;;GAQG;AACH,MAAM,UAAU,wBAAwB,CACtC,UAAkD,EAClD,OAAoB;IAEpB,IAAI,CAAC,uBAAuB,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAA;IAC5D,OAAO,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;AAC7E,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,yBAAyB,CACvC,OAAoB,EACpB,SAA+B;IAE/B,OAAO,sBAAsB,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAA;AAC5D,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,oBAAoB,CAClC,UAAgE;IAEhE,OAAO,uBAAuB,CAAC,MAAM,CACnC,CAAC,OAAO,EAAE,EAAE,CACV,wBAAwB,CAAC,UAAU,EAAE,OAAO,CAAC;QAC7C,yBAAyB,CAAC,OAAO,EAAE,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,CAChE,CAAA;AACH,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,gDAAgD;IAChD,UAAU,EAAE,EAAE;IACd,0EAA0E;IAC1E,aAAa,EAAE,MAAM;IACrB;;;;;;;OAOG;IACH,oBAAoB,EAAE,EAAE;CAChB,CAAA;AAEV;;;;;;;;;;GAUG;AACH,MAAM,UAAU,uBAAuB,CAAC,UAA+B;IACrE,MAAM,SAAS,GACb,UAAU,CAAC,SAAS,CAAC,IAAI,KAAK,OAAO;QACnC,CAAC,CAAC;YACE,OAAO,EAAE,UAAU,CAAC,SAAS,CAAC,OAAO;YACrC,IAAI,EAAE,UAAU,CAAC,SAAS,CAAC,IAAI;YAC/B,GAAG,EAAE,UAAU,CAAC,SAAS,CAAC,GAAG;SAC9B;QACH,CAAC,CAAC,EAAE,GAAG,EAAE,UAAU,CAAC,SAAS,CAAC,GAAG,EAAE,OAAO,EAAE,UAAU,CAAC,SAAS,CAAC,OAAO,EAAE,CAAA;IAC9E,MAAM,IAAI,GAAG;QACX,EAAE,EAAE,UAAU,CAAC,EAAE;QACjB,SAAS,EAAE,UAAU,CAAC,SAAS,CAAC,IAAI;QACpC,GAAG,SAAS;QACZ,YAAY,EAAE,UAAU,CAAC,YAAY;KACtC,CAAA;IACD,OAAO,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAA;AAC7C,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,cAAc,CAAC,KAAa;IACnC,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;QACrC,KAAK,IAAI,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACxE,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,4BAA4B,CAAA;AAEjE,MAAM,UAAU,kBAAkB,CAAC,EAAU;IAC3C,OAAO,qBAAqB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;AACvC,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,oCAAoC,CAAA;AAEzE,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,OAAO,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACzC,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAW;IAC7C,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,CAAC,CAAA;IACnC,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAA;IACzB,OAAO,MAAM,CAAC,MAAM,KAAK,OAAO,IAAI,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;AACjE,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,oBAAoB,CAAC,GAAW;IAC9C,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,CAAC,CAAA;IACnC,OAAO,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAA;AACrD,CAAC;AAED;;;;;;GAMG;AACH,SAAS,eAAe,CAAC,GAAW;IAClC,MAAM,KAAK,GAAG,0BAA0B,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IAClD,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAA;IAC5B,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAE,CAAA;IAC3B,MAAM,QAAQ,GAAG,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAA;IAChE,MAAM,cAAc,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IAC5C,MAAM,IAAI,GAAG,CACX,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,cAAc,KAAK,CAAC,CAAC;QAC/C,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC,gCAAgC;QACpE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CACnC,CAAC,WAAW,EAAE,CAAA;IACf,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAE,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,CAAA;AAClD,CAAC;AAED,SAAS,cAAc,CAAC,IAAY;IAClC,OAAO,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,KAAK,IAAI,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACpF,CAAC"}
+{"version":3,"file":"agent-capabilities.js","sourceRoot":"","sources":["../../src/domain/agent-capabilities.ts"],"names":[],"mappings":"AA2OA,0FAA0F;AAC1F,MAAM,CAAC,MAAM,wBAAwB,GAAG,eAAe,CAAA;AACvD,yFAAyF;AACzF,MAAM,CAAC,MAAM,iCAAiC,GAAG,gBAAgB,CAAA;AAuIjE;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAyD;IAC1F,EAAE,EAAE,EAAE;IACN,aAAa,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC;IAChC,KAAK,EAAE,CAAC,OAAO,CAAC;CACjB,CAAA;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAClC,MAAM,CAAC,IAAI,CAAC,sBAAsB,CACnC,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;AAEjE;;;;;;;;GAQG;AACH,MAAM,UAAU,wBAAwB,CACtC,UAAkD,EAClD,OAAoB;IAEpB,IAAI,CAAC,uBAAuB,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAA;IAC5D,OAAO,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;AAC7E,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,yBAAyB,CACvC,OAAoB,EACpB,SAA+B;IAE/B,OAAO,sBAAsB,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAA;AAC5D,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,oBAAoB,CAClC,UAAgE;IAEhE,OAAO,uBAAuB,CAAC,MAAM,CACnC,CAAC,OAAO,EAAE,EAAE,CACV,wBAAwB,CAAC,UAAU,EAAE,OAAO,CAAC;QAC7C,yBAAyB,CAAC,OAAO,EAAE,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,CAChE,CAAA;AACH,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,gDAAgD;IAChD,UAAU,EAAE,EAAE;IACd,0EAA0E;IAC1E,aAAa,EAAE,MAAM;IACrB;;;;;;;OAOG;IACH,oBAAoB,EAAE,EAAE;CAChB,CAAA;AAEV;;;;;;;;;;GAUG;AACH,MAAM,UAAU,uBAAuB,CAAC,UAA+B;IACrE,MAAM,SAAS,GACb,UAAU,CAAC,SAAS,CAAC,IAAI,KAAK,OAAO;QACnC,CAAC,CAAC;YACE,OAAO,EAAE,UAAU,CAAC,SAAS,CAAC,OAAO;YACrC,IAAI,EAAE,UAAU,CAAC,SAAS,CAAC,IAAI;YAC/B,GAAG,EAAE,UAAU,CAAC,SAAS,CAAC,GAAG;SAC9B;QACH,CAAC,CAAC,EAAE,GAAG,EAAE,UAAU,CAAC,SAAS,CAAC,GAAG,EAAE,OAAO,EAAE,UAAU,CAAC,SAAS,CAAC,OAAO,EAAE,CAAA;IAC9E,MAAM,IAAI,GAAG;QACX,EAAE,EAAE,UAAU,CAAC,EAAE;QACjB,SAAS,EAAE,UAAU,CAAC,SAAS,CAAC,IAAI;QACpC,GAAG,SAAS;QACZ,YAAY,EAAE,UAAU,CAAC,YAAY;KACtC,CAAA;IACD,OAAO,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAA;AAC7C,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,cAAc,CAAC,KAAa;IACnC,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;QACrC,KAAK,IAAI,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACxE,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,4BAA4B,CAAA;AAEjE,MAAM,UAAU,kBAAkB,CAAC,EAAU;IAC3C,OAAO,qBAAqB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;AACvC,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,oCAAoC,CAAA;AAEzE,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,OAAO,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACzC,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAW;IAC7C,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,CAAC,CAAA;IACnC,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAA;IACzB,OAAO,MAAM,CAAC,MAAM,KAAK,OAAO,IAAI,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;AACjE,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,oBAAoB,CAAC,GAAW;IAC9C,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,CAAC,CAAA;IACnC,OAAO,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAA;AACrD,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAS,iBAAiB,CAAC,GAAW;IACpC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,IAAI;YAAE,OAAO,IAAI,CAAA;IAC5C,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAUD,MAAM,SAAS,GAAI,UAAwD,CAAC,GAAG,CAAA;AAE/E;;;;;;;;;;;;;;;GAeG;AACH,SAAS,eAAe,CAAC,GAAW;IAClC,IAAI,iBAAiB,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAA;IAC5C,4FAA4F;IAC5F,8FAA8F;IAC9F,oEAAoE;IACpE,IAAI,CAAC,SAAS;QAAE,OAAO,SAAS,CAAA;IAChC,IAAI,MAAkB,CAAA;IACtB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,SAAS,CAAC,GAAG,CAAC,CAAA;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,2FAA2F;QAC3F,uEAAuE;QACvE,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAA;IACjF,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAA;IAChC,MAAM,IAAI,GAAG,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAA;IACxE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAA;AACvD,CAAC;AAED,SAAS,cAAc,CAAC,IAAY;IAClC,OAAO,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,KAAK,IAAI,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACpF,CAAC"}

package/dist/domain/binary-store-registry.d.ts

@@ -0,0 +1,98 @@
+import type { BinaryBlobBackend } from '../ports/binary-artifacts.js';
+import type { Logger } from '../ports/logging.js';
+/** What the resolver tells a store about the account it is being built for. */
+export interface BinaryStoreContext {
+    /**
+     * The account whose artifacts this store will hold, or null for a legacy unscoped board.
+     *
+     * Supplied so a multi-tenant deployment can shard by account (a bucket or key prefix per
+     * account) without a per-account settings surface. A store that ignores it holds every
+     * account's bytes together, which is the right shape for a single-tenant deployment and is why
+     * this is context rather than a required parameter.
+     */
+    accountId: string | null;
+    /** The composition root's logger, for a store that wants to report its own diagnostics. */
+    logger?: Logger;
+}
+/**
+ * A binary artifact store a DEPLOYMENT defines in code: identity for the account-settings picker,
+ * plus the factory that builds the {@link BinaryBlobBackend} the composed store writes through.
+ */
+export interface BinaryStoreDefinition {
+    /**
+     * Stable id. It is what an account's content-storage config names, and what is stamped onto
+     * each artifact row's `storage` column, so it must be stable across releases: changing it
+     * orphans the rows already pointing at it (the bytes stay where they are, but nothing left
+     * says which store to ask for them).
+     *
+     * Lowercase letters, digits and dashes, and never one of the platform's own kinds — see
+     * {@link BinaryStoreRegistrationError}.
+     */
+    id: string;
+    /** Human-readable name, shown in the account-settings storage picker. */
+    name: string;
+    /** One line of what it is and where the bytes go, shown beside the name. */
+    summary?: string;
+    /**
+     * Build the backend for one account. Called on a cache miss (the resolver memoises the composed
+     * store per account), so a client built here survives across requests.
+     *
+     * Return `null` for "this deployment cannot serve the store right now" (an unset credential, an
+     * un-provisioned bucket): the resolver treats it exactly as it treats an unsupported built-in
+     * backend, so storage reads as unavailable rather than half-working, and says so in the log.
+     * Throwing is for a programming error, and propagates.
+     *
+     * The returned backend's own `kind` is not used: the resolver stamps {@link id} onto the
+     * artifact rows, because one implementation registered twice (a bucket per region, say) would
+     * otherwise file both registrations' rows under one name.
+     */
+    create(context: BinaryStoreContext): BinaryBlobBackend | null;
+}
+/** What the picker and the boot report show about a registered store — never the backend itself. */
+export interface BinaryStoreView {
+    id: string;
+    name: string;
+    summary?: string;
+}
+/**
+ * A registration this platform refuses. Thrown at REGISTRATION rather than collected as a
+ * warning, because a store is composition code: the deployment is holding the registry when it
+ * happens, and the alternative (a store registered under an id the resolver can never select) is
+ * an account settings picker offering an entry that silently resolves to no storage at all.
+ */
+export declare class BinaryStoreRegistrationError extends Error {
+    constructor(message: string);
+}
+/**
+ * App-owned registry of the deployment's own binary artifact stores. The composition root news
+ * ONE instance and a deployment registers its stores on it by reference; the per-account resolver
+ * builds a backend from it whenever an account has selected one.
+ */
+export declare class BinaryStoreRegistry {
+    private readonly definitions;
+    /**
+     * Register a store. A registration whose id matches an earlier one replaces it (the same
+     * last-wins rule every other app-owned registry uses, so a deployment can override a store its
+     * own shared composition module registered).
+     *
+     * Refuses an id the resolver could not honour: a malformed one, or one of the platform's own
+     * backend kinds. The second is the load-bearing check — `s3` and `fs` are selected through
+     * their own config (a bucket, a base path, sealed credentials), so a store registered under
+     * one of those names would be picked in the UI and never built, with the account looking
+     * correctly configured throughout.
+     */
+    register(definition: BinaryStoreDefinition): void;
+    /** Register several stores at once. */
+    registerAll(definitions: Iterable<BinaryStoreDefinition>): void;
+    /** The registered definition for an id, or undefined when this build registers none. */
+    get(id: string): BinaryStoreDefinition | undefined;
+    /** Every registered id, in registration order. */
+    ids(): string[];
+    /** How many stores are registered — the "does this deployment offer any" check. */
+    get size(): number;
+    /** The picker-facing projection: identity only, never the factory. */
+    views(): BinaryStoreView[];
+}
+/** A fresh, EMPTY registry — the platform registers no custom stores of its own. */
+export declare function defaultBinaryStoreRegistry(): BinaryStoreRegistry;
+//# sourceMappingURL=binary-store-registry.d.ts.map

package/dist/domain/binary-store-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"binary-store-registry.d.ts","sourceRoot":"","sources":["../../src/domain/binary-store-registry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAA;AAErE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAA;AAyBjD,+EAA+E;AAC/E,MAAM,WAAW,kBAAkB;IACjC;;;;;;;OAOG;IACH,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,2FAA2F;IAC3F,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAED;;;GAGG;AACH,MAAM,WAAW,qBAAqB;IACpC;;;;;;;;OAQG;IACH,EAAE,EAAE,MAAM,CAAA;IACV,yEAAyE;IACzE,IAAI,EAAE,MAAM,CAAA;IACZ,4EAA4E;IAC5E,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB;;;;;;;;;;;;OAYG;IACH,MAAM,CAAC,OAAO,EAAE,kBAAkB,GAAG,iBAAiB,GAAG,IAAI,CAAA;CAC9D;AAED,oGAAoG;AACpG,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB;AAED;;;;;GAKG;AACH,qBAAa,4BAA6B,SAAQ,KAAK;IACrD,YAAY,OAAO,EAAE,MAAM,EAG1B;CACF;AAKD;;;;GAIG;AACH,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA2C;IAEvE;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,UAAU,EAAE,qBAAqB,GAAG,IAAI,CAkBhD;IAED,uCAAuC;IACvC,WAAW,CAAC,WAAW,EAAE,QAAQ,CAAC,qBAAqB,CAAC,GAAG,IAAI,CAE9D;IAED,wFAAwF;IACxF,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,qBAAqB,GAAG,SAAS,CAEjD;IAED,kDAAkD;IAClD,GAAG,IAAI,MAAM,EAAE,CAEd;IAED,mFAAmF;IACnF,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED,sEAAsE;IACtE,KAAK,IAAI,eAAe,EAAE,CAMzB;CACF;AAED,oFAAoF;AACpF,wBAAgB,0BAA0B,IAAI,mBAAmB,CAEhE"}

package/dist/domain/binary-store-registry.js

@@ -0,0 +1,79 @@
+import { BUILTIN_BINARY_ARTIFACT_STORAGE_KINDS } from '../ports/binary-artifacts.js';
+/**
+ * A registration this platform refuses. Thrown at REGISTRATION rather than collected as a
+ * warning, because a store is composition code: the deployment is holding the registry when it
+ * happens, and the alternative (a store registered under an id the resolver can never select) is
+ * an account settings picker offering an entry that silently resolves to no storage at all.
+ */
+export class BinaryStoreRegistrationError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'BinaryStoreRegistrationError';
+    }
+}
+/** Ids are compared and persisted as-is, so the shape is constrained rather than normalised. */
+const ID_PATTERN = /^[a-z0-9][a-z0-9-]{0,62}$/;
+/**
+ * App-owned registry of the deployment's own binary artifact stores. The composition root news
+ * ONE instance and a deployment registers its stores on it by reference; the per-account resolver
+ * builds a backend from it whenever an account has selected one.
+ */
+export class BinaryStoreRegistry {
+    definitions = new Map();
+    /**
+     * Register a store. A registration whose id matches an earlier one replaces it (the same
+     * last-wins rule every other app-owned registry uses, so a deployment can override a store its
+     * own shared composition module registered).
+     *
+     * Refuses an id the resolver could not honour: a malformed one, or one of the platform's own
+     * backend kinds. The second is the load-bearing check — `s3` and `fs` are selected through
+     * their own config (a bucket, a base path, sealed credentials), so a store registered under
+     * one of those names would be picked in the UI and never built, with the account looking
+     * correctly configured throughout.
+     */
+    register(definition) {
+        const id = definition.id;
+        if (!ID_PATTERN.test(id)) {
+            throw new BinaryStoreRegistrationError(`binary store id ${JSON.stringify(id)} is not usable: use lowercase letters, digits and ` +
+                `dashes (max 63 characters). The id is persisted on every artifact row, so it is ` +
+                `constrained rather than normalised.`);
+        }
+        if (BUILTIN_BINARY_ARTIFACT_STORAGE_KINDS.includes(id)) {
+            throw new BinaryStoreRegistrationError(`binary store id ${JSON.stringify(id)} is one of the platform's own backend kinds ` +
+                `(${BUILTIN_BINARY_ARTIFACT_STORAGE_KINDS.join(', ')}). Those are selected through their ` +
+                `own account config, so a store registered under one would be offered in the settings ` +
+                `picker and never built. Pick another id.`);
+        }
+        this.definitions.set(id, definition);
+    }
+    /** Register several stores at once. */
+    registerAll(definitions) {
+        for (const definition of definitions)
+            this.register(definition);
+    }
+    /** The registered definition for an id, or undefined when this build registers none. */
+    get(id) {
+        return this.definitions.get(id);
+    }
+    /** Every registered id, in registration order. */
+    ids() {
+        return [...this.definitions.keys()];
+    }
+    /** How many stores are registered — the "does this deployment offer any" check. */
+    get size() {
+        return this.definitions.size;
+    }
+    /** The picker-facing projection: identity only, never the factory. */
+    views() {
+        return [...this.definitions.values()].map((definition) => ({
+            id: definition.id,
+            name: definition.name,
+            ...(definition.summary ? { summary: definition.summary } : {}),
+        }));
+    }
+}
+/** A fresh, EMPTY registry — the platform registers no custom stores of its own. */
+export function defaultBinaryStoreRegistry() {
+    return new BinaryStoreRegistry();
+}
+//# sourceMappingURL=binary-store-registry.js.map

package/dist/domain/binary-store-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"binary-store-registry.js","sourceRoot":"","sources":["../../src/domain/binary-store-registry.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qCAAqC,EAAE,MAAM,8BAA8B,CAAA;AAmFpF;;;;;GAKG;AACH,MAAM,OAAO,4BAA6B,SAAQ,KAAK;IACrD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,8BAA8B,CAAA;IAC5C,CAAC;CACF;AAED,gGAAgG;AAChG,MAAM,UAAU,GAAG,2BAA2B,CAAA;AAE9C;;;;GAIG;AACH,MAAM,OAAO,mBAAmB;IACb,WAAW,GAAG,IAAI,GAAG,EAAiC,CAAA;IAEvE;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,UAAiC;QACxC,MAAM,EAAE,GAAG,UAAU,CAAC,EAAE,CAAA;QACxB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,4BAA4B,CACpC,mBAAmB,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,oDAAoD;gBACvF,kFAAkF;gBAClF,qCAAqC,CACxC,CAAA;QACH,CAAC;QACD,IAAK,qCAA2D,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;YAC9E,MAAM,IAAI,4BAA4B,CACpC,mBAAmB,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,8CAA8C;gBACjF,IAAI,qCAAqC,CAAC,IAAI,CAAC,IAAI,CAAC,sCAAsC;gBAC1F,uFAAuF;gBACvF,0CAA0C,CAC7C,CAAA;QACH,CAAC;QACD,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,EAAE,UAAU,CAAC,CAAA;IACtC,CAAC;IAED,uCAAuC;IACvC,WAAW,CAAC,WAA4C;QACtD,KAAK,MAAM,UAAU,IAAI,WAAW;YAAE,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAA;IACjE,CAAC;IAED,wFAAwF;IACxF,GAAG,CAAC,EAAU;QACZ,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;IACjC,CAAC;IAED,kDAAkD;IAClD,GAAG;QACD,OAAO,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAA;IACrC,CAAC;IAED,mFAAmF;IACnF,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,CAAA;IAC9B,CAAC;IAED,sEAAsE;IACtE,KAAK;QACH,OAAO,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;YACzD,EAAE,EAAE,UAAU,CAAC,EAAE;YACjB,IAAI,EAAE,UAAU,CAAC,IAAI;YACrB,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC/D,CAAC,CAAC,CAAA;IACL,CAAC;CACF;AAED,oFAAoF;AACpF,MAAM,UAAU,0BAA0B;IACxC,OAAO,IAAI,mBAAmB,EAAE,CAAA;AAClC,CAAC"}

package/dist/domain/notification-audience.d.ts

@@ -0,0 +1,27 @@
+import type { AccountRole } from './types.js';
+import type { WorkspaceAccessRow } from './workspace-access.js';
+/** One account membership as the audience rules read it. */
+export interface AudienceAccountMember {
+    userId: string;
+    roles: AccountRole[];
+}
+export interface NotificationAudienceInput {
+    /** The board's access row (owning account, legacy owner, access mode). */
+    workspace: WorkspaceAccessRow;
+    /** Every membership in the board's owning account. Empty for a legacy board. */
+    accountMembers: AudienceAccountMember[];
+    /** The user ids holding an explicit `workspace_members` row on this board. */
+    workspaceMemberUserIds: string[];
+}
+/**
+ * The user ids a workspace notification may be delivered to, de-duplicated and in a
+ * stable order (account roster order, then the member rows).
+ *
+ *  - Legacy / unscoped board (`accountId === null`): its owner alone.
+ *  - `accessMode: 'account'`: every account member (a member ROW is an upgrade-only
+ *    overlay there, so it adds nobody).
+ *  - `accessMode: 'restricted'`: the account admins plus the account members who hold a
+ *    member row.
+ */
+export declare function notificationAudienceUserIds(input: NotificationAudienceInput): string[];
+//# sourceMappingURL=notification-audience.d.ts.map

package/dist/domain/notification-audience.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"notification-audience.d.ts","sourceRoot":"","sources":["../../src/domain/notification-audience.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAC7C,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAA;AAE/D,4DAA4D;AAC5D,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,EAAE,WAAW,EAAE,CAAA;CACrB;AAED,MAAM,WAAW,yBAAyB;IACxC,0EAA0E;IAC1E,SAAS,EAAE,kBAAkB,CAAA;IAC7B,gFAAgF;IAChF,cAAc,EAAE,qBAAqB,EAAE,CAAA;IACvC,8EAA8E;IAC9E,sBAAsB,EAAE,MAAM,EAAE,CAAA;CACjC;AAED;;;;;;;;;GASG;AACH,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,yBAAyB,GAAG,MAAM,EAAE,CActF"}

package/dist/domain/notification-audience.js

@@ -0,0 +1,40 @@
+// ---------------------------------------------------------------------------
+// Who a workspace-scoped notification is addressed to, when the channel has to name
+// PEOPLE rather than a destination (email today; any future per-person transport).
+//
+// It is the same question `resolveWorkspaceAccess` answers, asked over a roster instead
+// of about one caller, so it is derived from the SAME rules and lives beside them: a
+// second, looser reading of who can see a board would mail a task's contents to someone
+// the board itself hides it from. Account membership is the prerequisite, an account
+// admin always qualifies, and a `workspace_members` row only counts for someone who is
+// still an account member (an orphaned row is inert, exactly as it is for access).
+//
+// Pure, so both facades and the tests agree without a store.
+// ---------------------------------------------------------------------------
+/**
+ * The user ids a workspace notification may be delivered to, de-duplicated and in a
+ * stable order (account roster order, then the member rows).
+ *
+ *  - Legacy / unscoped board (`accountId === null`): its owner alone.
+ *  - `accessMode: 'account'`: every account member (a member ROW is an upgrade-only
+ *    overlay there, so it adds nobody).
+ *  - `accessMode: 'restricted'`: the account admins plus the account members who hold a
+ *    member row.
+ */
+export function notificationAudienceUserIds(input) {
+    const { workspace, accountMembers, workspaceMemberUserIds } = input;
+    if (workspace.accountId === null) {
+        return workspace.ownerUserId ? [workspace.ownerUserId] : [];
+    }
+    if (workspace.accessMode === 'account') {
+        return unique(accountMembers.map((m) => m.userId));
+    }
+    const rostered = new Set(workspaceMemberUserIds);
+    return unique(accountMembers
+        .filter((m) => m.roles.includes('admin') || rostered.has(m.userId))
+        .map((m) => m.userId));
+}
+function unique(ids) {
+    return [...new Set(ids)];
+}
+//# sourceMappingURL=notification-audience.js.map

package/dist/domain/notification-audience.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"notification-audience.js","sourceRoot":"","sources":["../../src/domain/notification-audience.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,oFAAoF;AACpF,mFAAmF;AACnF,EAAE;AACF,wFAAwF;AACxF,qFAAqF;AACrF,wFAAwF;AACxF,qFAAqF;AACrF,uFAAuF;AACvF,mFAAmF;AACnF,EAAE;AACF,6DAA6D;AAC7D,8EAA8E;AAoB9E;;;;;;;;;GASG;AACH,MAAM,UAAU,2BAA2B,CAAC,KAAgC;IAC1E,MAAM,EAAE,SAAS,EAAE,cAAc,EAAE,sBAAsB,EAAE,GAAG,KAAK,CAAA;IACnE,IAAI,SAAS,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;QACjC,OAAO,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;IAC7D,CAAC;IACD,IAAI,SAAS,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACvC,OAAO,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAA;IACpD,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,sBAAsB,CAAC,CAAA;IAChD,OAAO,MAAM,CACX,cAAc;SACX,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;SAClE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CACxB,CAAA;AACH,CAAC;AAED,SAAS,MAAM,CAAC,GAAa;IAC3B,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAA;AAC1B,CAAC"}

package/dist/domain/types.d.ts

@@ -1,6 +1,6 @@
 export type { AgentKind, AgentState, AgentFailure, AgentFailureKind, AgentRunKind, ModelFamily, ModelFamilyPolicy, ModelPolicyMode, AccountRegion, ModelFamilyPolicyPreset, Block, BlockLevel, BlockStatus, BlockType, TaskType, CreateTaskType, TaskTypeFields, CustomTaskType, TaskTypePresentation, TaskTypeFieldDescriptor, TaskTypeFieldType, TaskTypeFieldOption, DescriptorField, DescriptorFieldType, DescriptorFieldOption, DescriptorFieldShowWhen, DescriptorFieldValue, DescriptorFieldValues, DocKind, Decision, EnvConfigRepairJob, EnvConfigRepairStatus, EnvironmentTestRun, EnvironmentTestStage, EnvironmentTestStatus, ExecutionInstance, ExecutionStatus, IntakeOrigin, InputGateIssue, InputGateIssueCode, InputGateMode, InputGateSeverity, InputGateStatus, RunInputGate, ResolveInputGateChoice, ResolveInputGateRequest, Pipeline, PipelineAvailability, PipelineStep, Position, PriorStepOutput, PromptFragment, PullRequestRef, PeerPullRequest, ReferenceRepo, AprioriBranch, SpendStatus, StepApproval, StepReviewComment, StepSubtasks, WebSearchAvailability, WebSearchProvider, Workspace, WorkspaceSnapshot, FragmentOwnerKind, FragmentTier, CreatePromptFragmentInput, CreateDocumentFragmentInput, UpdatePromptFragmentInput, FragmentSource, LinkFragmentSourceInput, FragmentSyncResult, FragmentSourceStatus, ResolvedFragment, ResolvedFragmentCatalog, Account, AccountType, AccountRole, AccountMember, CreateAccountInput, AddMemberInput, WorkspaceRole, WorkspacePermission, WorkspaceAccessMode, WorkspaceMember, Service, WorkspaceMount, MountServiceInput, UpdateMountInput, GitHubBranch, GitHubCheckRun, GitHubCommit, GitHubConnection, GitHubInstallationOption, GitHubAvailableRepo, GitHubIssue, GitHubIssueState, GitHubPullRequest, GitHubPullRequestState, OpenedPullRequest, GitHubRepo, RepoTreeEntry, SetRepoMonorepoInput, CommitFilesInput, LinkReposInput, OpenPullRequestInput, MergePullRequestInput, ProviderConfigFieldType, ProviderConfigField, ProviderDescriptor, ConnectionTestResult, ConnectionWarning, ConnectionWarningCode, UserSecretKind, UserSecretStatus, StoreUserSecretInput, TestUserSecretInput, UserSecretDescriptor, DocumentSourceKind, DocumentOrigin, DocumentLinkRole, DocumentRenderStatus, DocumentSourceDescriptor, CredentialField, DocumentConnection, SourceDocument, DocumentSearchResult, DocumentBoardPlan, PlanFrame, PlanModule, PlanTask, TaskSourceKind, TaskSourceDescriptor, TaskSourceState, TaskSourceDiagnostic, TaskSourceDiagnosticStatus, TaskConnection, TaskComment, TaskDependencyLink, SourceTask, TaskSearchResult, IssueIntakePredicate, TrackerBoard, BugCandidate, BugHuntAnalysis, BugHuntAnalysisStatus, BugHuntCandidate, BugHuntConfidence, BugHuntResult, RunBugHuntInput, EnvironmentSecretRef, EnvironmentAuthScheme, EnvironmentHttpMethod, EnvironmentRequestTemplate, EnvironmentStatus, TeardownConfirmation, EnvironmentAccessScheme, EnvironmentAccessMapping, EnvironmentResponseMapping, EnvironmentManifest, EnvironmentBackendConfig, EnvironmentBackendKind, KubernetesEnvironmentConfig, KubernetesManifestSource, KubernetesUrlSource, KubernetesRenderer, KubernetesImageOverride, KubernetesHelmRelease, KubernetesHelmSet, KubernetesSecretEntry, KubernetesSecretInjection, KubernetesProvisionConfig, CloudflareEnvironmentConfig, ProvisionType, EnvironmentFailureReason, InfraEngine, ManifestId, ServiceProvisioning, StackRecipe, RecipeStep, RecipeStepKind, RecipeHealthGate, RecipeEnvFile, PreflightCheckId, PreflightParams, PreflightRef, PreflightStatus, PreflightResult, FrontendConfig, FrontendBackendBinding, FrontendBackendSource, ResolvedFrontendBinding, LiveEnvHandle, ServiceConnection, KubernetesEngineConfig, InfraHandlerConfig, CustomManifestType, CustomManifestTypeSource, UpsertCustomManifestTypeInput, EnvironmentAccessHandle, EnvironmentHandle, EnvironmentConnection, TestEnvironmentConnectionInput, TestEnvironmentHandlerInput, ValidateEnvironmentRepoInput, BootstrapEnvironmentRepoInput, BootstrapRepoResult, TestSecretRef, TestSecretEntry, ServiceTestSecretsView, UpsertServiceTestSecretsInput, ProvisioningSubsystem, ProvisioningOperation, ProvisioningOutcome, ProvisioningLogEntry, RunnerPoolSecretRef, RunnerPoolAuthScheme, RunnerPoolRequestTemplate, RunnerJobState, RunnerPoolResponseMapping, RunnerPoolManifest, RunnerPoolConnection, TestRunnerPoolConnectionInput, RunnerBackendConfig, RunnerBackendKind, KubernetesRunnerConfig, KubernetesResourceQuantities, ReferenceArchitecture, CreateReferenceArchitectureInput, UpdateReferenceArchitectureInput, BootstrapStatus, BootstrapFailure, BootstrapFailureKind, BootstrapJob, BootstrapRepoInput, BlueprintModule, BlueprintService, BlueprintSource, BoardScanSpawnResult, ReviewItemCategory, ReviewItemSeverity, ReviewItemStatus, RequirementReviewItem, RequirementReviewStatus, RequirementReview, DocInterviewQa, DocInterviewStatus, DocInterviewSession, AnswerDocInterviewInput, KaizenGradingStatus, KaizenGrading, KaizenVerifiedCombo, KaizenOverview, KaizenRunGradings, RecommendationStatus, RequirementRecommendation, ReplyReviewItemInput, UpdateReviewItemStatusInput, IncorporateRequirementsInput, RequestRecommendationItem, RequestRecommendationsInput, ReRequestRecommendationInput, ResolveRequirementsExceededInput, ResolveRequirementsExceededChoice, FollowUpItemKind, FollowUpItemStatus, FollowUpItem, FollowUpsStepState, AnswerFollowUpInput, StreamedFollowUp, ForkOption, ForkChatMessage, ForkDecisionStatus, ForkChoice, ForkDecisionStepState, ForkChatRequestInput, ChooseForkInput, ForkProposal, JudgeFindingSeverity, JudgeFinding, JudgeVerdict, JudgeDisposition, JudgeStatus, JudgeRound, JudgeStepState, JudgeModelPin, JudgeModelPinStatus, ResolveJudgeInput, PrReviewSeverity, PrReviewCategory, PrReviewSlice, PrReviewSliceReview, PrReviewFinding, PrReviewFindingChallenge, PrReviewStatus, PrReviewResolution, PrReviewStepState, PrReviewPostReport, PrReviewPostFailure, PrReviewAgentOutput, PrReviewChallengeOutput, ResolvePrReviewInput, ChallengePrReviewFindingInput, ClarityReviewItem, ClarityReviewStatus, ClarityReview, ReplyClarityItemInput, UpdateClarityItemStatusInput, IncorporateClarityInput, ResolveClarityExceededInput, ResolveClarityExceededChoice, BrainstormStage, BrainstormItem, BrainstormStatus, BrainstormSession, ReplyBrainstormItemInput, UpdateBrainstormItemStatusInput, IncorporateBrainstormInput, ResolveBrainstormExceededInput, ResolveBrainstormExceededChoice, IterationCapChoice, ResolveIterationCapInput, RequirementPriority, RequirementKind, 
 /** Implementation state: agreed-but-not-built vs observed-to-hold. */
-RequirementState, AcceptanceCriterion, RequirementItem, DomainRule, RequirementGroup, SpecModule, SpecDoc, CompanionAssessment, CompanionVerdict, GateStepState, GateFailingCheck, GateAttempt, RalphStepState, RalphVerdict, RalphAttempt, ValidationCheck, ValidationCheckOutcome, ValidationReport, ResolvedValidationChecks, ServiceValidationConfig, UpsertServiceValidationConfigInput, ReproductionProofMode, ResolvedReproduction, ReproductionStatus, ReproductionPhaseOutcome, ReproductionReport, HumanTestStepState, HumanTestEnvironment, HumanTestRound, RequestHumanTestFixInput, VisualConfirmStepState, VisualConfirmPair, VisualConfirmRound, MergeAssessment, MergeAxis, MergeDecision, MergeDecisionThresholds, MergeClassRule, MergeClassRules, ClassRulesByRole, SubmissionClassesByRole, RunMode, ChangeClass, ReviewEffort, MergeTrackDecision, MergeTrackRecord, MergeClassRollup, ReviewEffortDistribution, TagReviewEffortInput, PrVerificationReport, PrReportScope, PrReportOwnPullRequest, PrReportSectionStatus, PrReportStep, PrReportIssue, PrReportJudge, PrReportRun, PrReportCheck, PrReportCi, PrReportTestOutcome, PrReportTestConcern, PrReportTests, PrReportContext, PrReportContextDocument, PrReportValidation, PrReportValidationCommand, PrReportReproduction, PrReportReproductionPhase, PrReportEnvironment, PrReportEnvironments, PrReportEnvironmentTimeline, PrReportTimelineGap, PrReportEnvironmentEvidence, PrReportEvidenceArtifact, PrReportRequirement, PrReportRequirements, PrReportMerge, PrReportObservability, RiskPolicy, RequirementConcernLevel, CreateRiskPolicyInput, UpdateRiskPolicyInput, ComposeFileRef, ComposeSource, ComposeSourceKind, SharedStack, SharedStackStatus, CreateSharedStackInput, UpdateSharedStackInput, DetectSharedStackInput, SharedStackRecommendation, ConsensusStrategy, ConsensusParticipant, ConsensusGating, StepGating, ConsensusStepConfig, ConsensusGroup, CreateConsensusGroupInput, UpdateConsensusGroupInput, TaskEstimate, ConsensusScore, ConsensusContribution, ConsensusRound, ConsensusSessionStatus, ConsensusSession, AgentConfigOption, AgentConfigDescriptor, AgentConfigCatalog, AgentConfigValues, TestReport, TestOutcome, TestConcern, TestConcernSeverity, RequirementVerdict, RequirementVerdictStatus, TesterQualityConfig, StepOptions, StepGateConfig, GateApproverPolicy, GateApprovalRecord, CloudProvider, InstanceSize, UpdateAccountInput, ModelFlavor, ModelPreset, CreateModelPresetInput, UpdateModelPresetInput, AgentPromptRevision, AgentPromptDetail, AgentPromptSummary, SaveAgentPromptInput, PromoteAgentPromptInput, WorkspaceAgentSettings, UpdateWorkspaceAgentSettingsInput, ServiceFragmentDefaults, SetServiceFragmentDefaultsInput, Notification, NotificationType, NotificationStatus, NotificationSeverity, NotificationPayload, ResolveNotificationAction, WorkspaceSettings, UpdateWorkspaceSettingsInput, TaskLimitMode, TaskLimitPerType, UserSettings, UpdateUserSettingsInput, TutorialProgress, TutorialDecision, UpdateTutorialProgressInput, TutorialEvent, RecordTutorialEventInput, SlackConnection, SlackRoute, SlackNotificationSettings, SlackMemberMappingEntry, SlackMemberRole, SlackMemberMapping, SlackChannel, ConnectSlackByTokenInput, UpdateSlackSettingsInput, UpdateSlackMemberMappingInput, ScheduleTemplate, Recurrence, IssueIntakeConfig, PipelineSchedule, ScheduleRun, CreateScheduleInput, UpdateScheduleInput, TrackerKind, TrackerSettings, PutTrackerSettingsInput, WritebackOverride, LlmCallActivity, SandboxPromptOrigin, SandboxPromptVersion, SandboxFixtureKind, SandboxRepoRef, SandboxFixtureObjective, SandboxFixture, SandboxExperimentStatus, SandboxMatrix, SandboxExperiment, SandboxRunStatus, SandboxTokenUsage, SandboxRun, SandboxGradeDimension, SandboxObjectiveResult, SandboxGrade, Initiative, InitiativeStatus, InitiativeItem, InitiativeItemStatus, InitiativePhase, InitiativeEstimate, InitiativePipelineRule, InitiativeExecutionPolicy, InitiativeDecision, InitiativeDeviation, InitiativeFollowUp, InitiativeQa, InitiativeQaStatus, InitiativeInterviewState, InitiativePlanDraft, InitiativeDraftItem, InitiativeVersion, CreateInitiativeInput, AnswerInitiativeQuestionInput, PromoteInitiativeFollowUpInput, UpdateInitiativeItemInput, UpdateInitiativePolicyInput, AccountSettingsConfig, ContentStorageConfig, FigmaOAuthSecret, LinearOAuthSecret, S3CredentialsSecret, SlackOAuthSecret, WebSearchSecret, } from '@cat-factory/contracts';
+RequirementState, AcceptanceCriterion, RequirementItem, DomainRule, RequirementGroup, SpecModule, SpecDoc, CompanionAssessment, CompanionVerdict, GateStepState, GateFailingCheck, GateAttempt, RalphStepState, RalphVerdict, RalphAttempt, ValidationCheck, ValidationCheckOutcome, ValidationReport, ResolvedValidationChecks, ServiceValidationConfig, UpsertServiceValidationConfigInput, ReproductionProofMode, ResolvedReproduction, ReproductionStatus, ReproductionPhaseOutcome, ReproductionReport, HumanTestStepState, HumanTestEnvironment, HumanTestRound, RequestHumanTestFixInput, VisualConfirmStepState, VisualConfirmPair, VisualConfirmReferenceOrigin, VisualConfirmDesignGap, VisualConfirmDesignGapReason, VisualConfirmDesignReferences, VisualConfirmRound, MergeAssessment, MergeAxis, MergeDecision, MergeDecisionThresholds, MergeClassRule, MergeClassRules, ClassRulesByRole, SubmissionClassesByRole, RunMode, ChangeClass, ReviewEffort, MergeTrackDecision, MergeTrackRecord, MergeClassRollup, ReviewEffortDistribution, TagReviewEffortInput, PrVerificationReport, PrReportScope, PrReportOwnPullRequest, PrReportSectionStatus, PrReportStep, PrReportIssue, PrReportJudge, PrReportRun, PrReportCheck, PrReportCi, PrReportTestOutcome, PrReportTestConcern, PrReportTests, PrReportContext, PrReportContextDocument, PrReportValidation, PrReportValidationCommand, PrReportReproduction, PrReportReproductionPhase, PrReportEnvironment, PrReportEnvironments, PrReportEnvironmentTimeline, PrReportTimelineGap, PrReportEnvironmentEvidence, PrReportEvidenceArtifact, PrReportRequirement, PrReportRequirements, PrReportMerge, PrReportObservability, RiskPolicy, RequirementConcernLevel, CreateRiskPolicyInput, UpdateRiskPolicyInput, ComposeFileRef, ComposeSource, ComposeSourceKind, SharedStack, SharedStackStatus, CreateSharedStackInput, UpdateSharedStackInput, DetectSharedStackInput, SharedStackRecommendation, ConsensusStrategy, ConsensusParticipant, ConsensusGating, StepGating, ConsensusStepConfig, ConsensusGroup, CreateConsensusGroupInput, UpdateConsensusGroupInput, TaskEstimate, ConsensusScore, ConsensusContribution, ConsensusRound, ConsensusSessionStatus, ConsensusSession, AgentConfigOption, AgentConfigDescriptor, AgentConfigCatalog, AgentConfigValues, TestReport, TestOutcome, TestConcern, TestConcernSeverity, RequirementVerdict, RequirementVerdictStatus, TesterQualityConfig, StepOptions, StepGateConfig, GateApproverPolicy, GateApprovalRecord, CloudProvider, InstanceSize, UpdateAccountInput, ModelFlavor, ModelPreset, CreateModelPresetInput, UpdateModelPresetInput, AgentPromptRevision, AgentPromptDetail, AgentPromptSummary, SaveAgentPromptInput, PromoteAgentPromptInput, WorkspaceAgentSettings, UpdateWorkspaceAgentSettingsInput, ServiceFragmentDefaults, SetServiceFragmentDefaultsInput, Notification, NotificationType, NotificationStatus, NotificationSeverity, NotificationPayload, ResolveNotificationAction, NotificationDeliveryChannel, NotificationChannelOverrides, NotificationRoutingMatrix, NotificationSettings, UpdateNotificationSettingsInput, WorkspaceSettings, UpdateWorkspaceSettingsInput, TaskLimitMode, TaskLimitPerType, UserSettings, UpdateUserSettingsInput, TutorialProgress, TutorialDecision, UpdateTutorialProgressInput, TutorialEvent, RecordTutorialEventInput, SlackConnection, SlackRoute, SlackNotificationSettings, SlackMemberMappingEntry, SlackMemberRole, SlackMemberMapping, SlackChannel, ConnectSlackByTokenInput, UpdateSlackSettingsInput, UpdateSlackMemberMappingInput, ScheduleTemplate, Recurrence, IssueIntakeConfig, PipelineSchedule, ScheduleRun, CreateScheduleInput, UpdateScheduleInput, TrackerKind, TrackerSettings, PutTrackerSettingsInput, WritebackOverride, LlmCallActivity, SandboxPromptOrigin, SandboxPromptVersion, SandboxFixtureKind, SandboxRepoRef, SandboxFixtureObjective, SandboxFixture, SandboxExperimentStatus, SandboxMatrix, SandboxExperiment, SandboxRunStatus, SandboxTokenUsage, SandboxRun, SandboxGradeDimension, SandboxObjectiveResult, SandboxGrade, Initiative, InitiativeStatus, InitiativeItem, InitiativeItemStatus, InitiativePhase, InitiativeEstimate, InitiativePipelineRule, InitiativeExecutionPolicy, InitiativeDecision, InitiativeDeviation, InitiativeFollowUp, InitiativeQa, InitiativeQaStatus, InitiativeInterviewState, InitiativePlanDraft, InitiativeDraftItem, InitiativeVersion, CreateInitiativeInput, AnswerInitiativeQuestionInput, PromoteInitiativeFollowUpInput, UpdateInitiativeItemInput, UpdateInitiativePolicyInput, AccountSettingsConfig, ContentStorageConfig, FigmaOAuthSecret, LinearOAuthSecret, S3CredentialsSecret, SlackOAuthSecret, WebSearchSecret, } from '@cat-factory/contracts';
 /**
  * A backend-prepared file to inject into a container agent's `.cat-context/` directory before
  * it runs — the deterministic analogue of the linked-doc context the executor already

package/dist/domain/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/domain/types.ts"],"names":[],"mappings":"AAIA,YAAY,EACV,SAAS,EACT,UAAU,EACV,YAAY,EACZ,gBAAgB,EAChB,YAAY,EACZ,WAAW,EACX,iBAAiB,EACjB,eAAe,EACf,aAAa,EACb,uBAAuB,EACvB,KAAK,EACL,UAAU,EACV,WAAW,EACX,SAAS,EACT,QAAQ,EACR,cAAc,EACd,cAAc,EAWd,cAAc,EACd,oBAAoB,EACpB,uBAAuB,EACvB,iBAAiB,EACjB,mBAAmB,EAGnB,eAAe,EACf,mBAAmB,EACnB,qBAAqB,EACrB,uBAAuB,EACvB,oBAAoB,EACpB,qBAAqB,EACrB,OAAO,EACP,QAAQ,EACR,kBAAkB,EAClB,qBAAqB,EACrB,kBAAkB,EAClB,oBAAoB,EACpB,qBAAqB,EACrB,iBAAiB,EACjB,eAAe,EACf,YAAY,EAEZ,cAAc,EACd,kBAAkB,EAClB,aAAa,EACb,iBAAiB,EACjB,eAAe,EACf,YAAY,EACZ,sBAAsB,EACtB,uBAAuB,EACvB,QAAQ,EACR,oBAAoB,EACpB,YAAY,EACZ,QAAQ,EACR,eAAe,EACf,cAAc,EACd,cAAc,EACd,eAAe,EACf,aAAa,EACb,aAAa,EACb,WAAW,EACX,YAAY,EACZ,iBAAiB,EACjB,YAAY,EACZ,qBAAqB,EACrB,iBAAiB,EACjB,SAAS,EACT,iBAAiB,EAEjB,iBAAiB,EACjB,YAAY,EACZ,yBAAyB,EACzB,2BAA2B,EAC3B,yBAAyB,EACzB,cAAc,EACd,uBAAuB,EACvB,kBAAkB,EAClB,oBAAoB,EACpB,gBAAgB,EAChB,uBAAuB,EAEvB,OAAO,EACP,WAAW,EACX,WAAW,EACX,aAAa,EACb,kBAAkB,EAClB,cAAc,EAEd,aAAa,EACb,mBAAmB,EACnB,mBAAmB,EACnB,eAAe,EAEf,OAAO,EACP,cAAc,EACd,iBAAiB,EACjB,gBAAgB,EAEhB,YAAY,EACZ,cAAc,EACd,YAAY,EACZ,gBAAgB,EAChB,wBAAwB,EACxB,mBAAmB,EACnB,WAAW,EACX,gBAAgB,EAChB,iBAAiB,EACjB,sBAAsB,EACtB,iBAAiB,EACjB,UAAU,EACV,aAAa,EACb,oBAAoB,EACpB,gBAAgB,EAChB,cAAc,EACd,oBAAoB,EACpB,qBAAqB,EAErB,uBAAuB,EACvB,mBAAmB,EACnB,kBAAkB,EAClB,oBAAoB,EACpB,iBAAiB,EACjB,qBAAqB,EAErB,cAAc,EACd,gBAAgB,EAChB,oBAAoB,EACpB,mBAAmB,EACnB,oBAAoB,EAEpB,kBAAkB,EAClB,cAAc,EACd,gBAAgB,EAChB,oBAAoB,EACpB,wBAAwB,EACxB,eAAe,EACf,kBAAkB,EAClB,cAAc,EACd,oBAAoB,EACpB,iBAAiB,EACjB,SAAS,EACT,UAAU,EACV,QAAQ,EAER,cAAc,EACd,oBAAoB,EACpB,eAAe,EACf,oBAAoB,EACpB,0BAA0B,EAC1B,cAAc,EACd,WAAW,EACX,kBAAkB,EAClB,UAAU,EACV,gBAAgB,EAChB,oBAAoB,EAEpB,YAAY,EACZ,YAAY,EACZ,eAAe,EACf,qBAAqB,EACrB,gBAAgB,EAChB,iBAAiB,EACjB,aAAa,EACb,eAAe,EAEf,oBAAoB,EACpB,qBAAqB,EACrB,qBAAqB,EACrB,0BAA0B,EAC1B,iBAAiB,EAGjB,oBAAoB,EACpB,uBAAuB,EACvB,wBAAwB,EACxB,0BAA0B,EAC1B,mBAAmB,EAEnB,wBAAwB,EACxB,sBAAsB,EACtB,2BAA2B,EAC3B,wBAAwB,EACxB,mBAAmB,EACnB,kBAAkB,EAClB,uBAAuB,EACvB,qBAAqB,EACrB,iBAAiB,EACjB,qBAAqB,EACrB,yBAAyB,EACzB,yBAAyB,EAEzB,2BAA2B,EAE3B,aAAa,EACb,wBAAwB,EACxB,WAAW,EACX,UAAU,EACV,mBAAmB,EAEnB,WAAW,EACX,UAAU,EACV,cAAc,EACd,gBAAgB,EAChB,aAAa,EAEb,gBAAgB,EAChB,eAAe,EACf,YAAY,EACZ,eAAe,EACf,eAAe,EAEf,cAAc,EACd,sBAAsB,EACtB,qBAAqB,EAErB,uBAAuB,EACvB,aAAa,EAEb,iBAAiB,EACjB,sBAAsB,EACtB,kBAAkB,EAClB,kBAAkB,EAClB,wBAAwB,EACxB,6BAA6B,EAC7B,uBAAuB,EACvB,iBAAiB,EACjB,qBAAqB,EACrB,8BAA8B,EAC9B,2BAA2B,EAC3B,4BAA4B,EAC5B,6BAA6B,EAC7B,mBAAmB,EAEnB,aAAa,EACb,eAAe,EACf,sBAAsB,EACtB,6BAA6B,EAE7B,qBAAqB,EACrB,qBAAqB,EACrB,mBAAmB,EACnB,oBAAoB,EAEpB,mBAAmB,EACnB,oBAAoB,EACpB,yBAAyB,EACzB,cAAc,EACd,yBAAyB,EACzB,kBAAkB,EAClB,oBAAoB,EACpB,6BAA6B,EAE7B,mBAAmB,EACnB,iBAAiB,EACjB,sBAAsB,EACtB,4BAA4B,EAE5B,qBAAqB,EACrB,gCAAgC,EAChC,gCAAgC,EAChC,eAAe,EACf,gBAAgB,EAChB,oBAAoB,EACpB,YAAY,EACZ,kBAAkB,EAGlB,eAAe,EACf,gBAAgB,EAChB,eAAe,EACf,oBAAoB,EAEpB,kBAAkB,EAClB,kBAAkB,EAClB,gBAAgB,EAChB,qBAAqB,EACrB,uBAAuB,EACvB,iBAAiB,EAEjB,cAAc,EACd,kBAAkB,EAClB,mBAAmB,EACnB,uBAAuB,EAEvB,mBAAmB,EACnB,aAAa,EACb,mBAAmB,EACnB,cAAc,EACd,iBAAiB,EACjB,oBAAoB,EACpB,yBAAyB,EACzB,oBAAoB,EACpB,2BAA2B,EAC3B,4BAA4B,EAC5B,yBAAyB,EACzB,2BAA2B,EAC3B,4BAA4B,EAC5B,gCAAgC,EAChC,iCAAiC,EAGjC,gBAAgB,EAChB,kBAAkB,EAClB,YAAY,EACZ,kBAAkB,EAClB,mBAAmB,EACnB,gBAAgB,EAGhB,UAAU,EACV,eAAe,EACf,kBAAkB,EAClB,UAAU,EACV,qBAAqB,EACrB,oBAAoB,EACpB,eAAe,EACf,YAAY,EAGZ,oBAAoB,EACpB,YAAY,EACZ,YAAY,EACZ,gBAAgB,EAChB,WAAW,EACX,UAAU,EACV,cAAc,EACd,aAAa,EACb,mBAAmB,EACnB,iBAAiB,EAGjB,gBAAgB,EAChB,gBAAgB,EAChB,aAAa,EAGb,mBAAmB,EACnB,eAAe,EACf,wBAAwB,EACxB,cAAc,EACd,kBAAkB,EAClB,iBAAiB,EACjB,kBAAkB,EAClB,mBAAmB,EACnB,mBAAmB,EACnB,uBAAuB,EACvB,oBAAoB,EACpB,6BAA6B,EAG7B,iBAAiB,EACjB,mBAAmB,EACnB,aAAa,EACb,qBAAqB,EACrB,4BAA4B,EAC5B,uBAAuB,EACvB,2BAA2B,EAC3B,4BAA4B,EAG5B,eAAe,EACf,cAAc,EACd,gBAAgB,EAChB,iBAAiB,EACjB,wBAAwB,EACxB,+BAA+B,EAC/B,0BAA0B,EAC1B,8BAA8B,EAC9B,+BAA+B,EAE/B,kBAAkB,EAClB,wBAAwB,EAExB,mBAAmB,EACnB,eAAe;AACf,sEAAsE;AACtE,gBAAgB,EAChB,mBAAmB,EACnB,eAAe,EACf,UAAU,EACV,gBAAgB,EAChB,UAAU,EACV,OAAO,EAEP,mBAAmB,EACnB,gBAAgB,EAEhB,aAAa,EACb,gBAAgB,EAChB,WAAW,EAEX,cAAc,EACd,YAAY,EACZ,YAAY,EAEZ,eAAe,EACf,sBAAsB,EACtB,gBAAgB,EAChB,wBAAwB,EACxB,uBAAuB,EACvB,kCAAkC,EAElC,qBAAqB,EACrB,oBAAoB,EACpB,kBAAkB,EAClB,wBAAwB,EACxB,kBAAkB,EAElB,kBAAkB,EAClB,oBAAoB,EACpB,cAAc,EACd,wBAAwB,EAExB,sBAAsB,EACtB,iBAAiB,EACjB,kBAAkB,EAClB,eAAe,EACf,SAAS,EACT,aAAa,EACb,uBAAuB,EACvB,cAAc,EACd,eAAe,EAGf,gBAAgB,EAChB,uBAAuB,EACvB,OAAO,EAEP,WAAW,EACX,YAAY,EACZ,kBAAkB,EAClB,gBAAgB,EAChB,gBAAgB,EAChB,wBAAwB,EACxB,oBAAoB,EAGpB,oBAAoB,EAGpB,aAAa,EACb,sBAAsB,EACtB,qBAAqB,EACrB,YAAY,EACZ,aAAa,EACb,aAAa,EACb,WAAW,EACX,aAAa,EACb,UAAU,EACV,mBAAmB,EACnB,mBAAmB,EACnB,aAAa,EAEb,eAAe,EACf,uBAAuB,EAGvB,kBAAkB,EAClB,yBAAyB,EACzB,oBAAoB,EACpB,yBAAyB,EACzB,mBAAmB,EACnB,oBAAoB,EAGpB,2BAA2B,EAC3B,mBAAmB,EACnB,2BAA2B,EAC3B,wBAAwB,EAExB,mBAAmB,EACnB,oBAAoB,EACpB,aAAa,EACb,qBAAqB,EACrB,UAAU,EACV,uBAAuB,EACvB,qBAAqB,EACrB,qBAAqB,EAGrB,cAAc,EACd,aAAa,EACb,iBAAiB,EAEjB,WAAW,EACX,iBAAiB,EACjB,sBAAsB,EACtB,sBAAsB,EACtB,sBAAsB,EACtB,yBAAyB,EAGzB,iBAAiB,EACjB,oBAAoB,EACpB,eAAe,EACf,UAAU,EACV,mBAAmB,EAEnB,cAAc,EACd,yBAAyB,EACzB,yBAAyB,EACzB,YAAY,EACZ,cAAc,EACd,qBAAqB,EACrB,cAAc,EACd,sBAAsB,EACtB,gBAAgB,EAEhB,iBAAiB,EACjB,qBAAqB,EACrB,kBAAkB,EAClB,iBAAiB,EAEjB,UAAU,EACV,WAAW,EACX,WAAW,EACX,mBAAmB,EAEnB,kBAAkB,EAClB,wBAAwB,EAExB,mBAAmB,EAEnB,WAAW,EAGX,cAAc,EACd,kBAAkB,EAClB,kBAAkB,EAElB,aAAa,EACb,YAAY,EACZ,kBAAkB,EAGlB,WAAW,EACX,WAAW,EACX,sBAAsB,EACtB,sBAAsB,EAEtB,mBAAmB,EACnB,iBAAiB,EACjB,kBAAkB,EAClB,oBAAoB,EACpB,uBAAuB,EAEvB,sBAAsB,EACtB,iCAAiC,EAEjC,uBAAuB,EACvB,+BAA+B,EAE/B,YAAY,EACZ,gBAAgB,EAChB,kBAAkB,EAClB,oBAAoB,EACpB,mBAAmB,EACnB,yBAAyB,EAEzB,iBAAiB,EACjB,4BAA4B,EAC5B,aAAa,EACb,gBAAgB,EAEhB,YAAY,EACZ,uBAAuB,EAEvB,gBAAgB,EAChB,gBAAgB,EAChB,2BAA2B,EAC3B,aAAa,EACb,wBAAwB,EAExB,eAAe,EACf,UAAU,EACV,yBAAyB,EACzB,uBAAuB,EACvB,eAAe,EACf,kBAAkB,EAClB,YAAY,EACZ,wBAAwB,EACxB,wBAAwB,EACxB,6BAA6B,EAE7B,gBAAgB,EAChB,UAAU,EACV,iBAAiB,EACjB,gBAAgB,EAChB,WAAW,EACX,mBAAmB,EACnB,mBAAmB,EAEnB,WAAW,EACX,eAAe,EACf,uBAAuB,EACvB,iBAAiB,EAEjB,eAAe,EAEf,mBAAmB,EACnB,oBAAoB,EACpB,kBAAkB,EAClB,cAAc,EACd,uBAAuB,EACvB,cAAc,EACd,uBAAuB,EACvB,aAAa,EACb,iBAAiB,EACjB,gBAAgB,EAChB,iBAAiB,EACjB,UAAU,EACV,qBAAqB,EACrB,sBAAsB,EACtB,YAAY,EAEZ,UAAU,EACV,gBAAgB,EAChB,cAAc,EACd,oBAAoB,EACpB,eAAe,EACf,kBAAkB,EAClB,sBAAsB,EACtB,yBAAyB,EACzB,kBAAkB,EAClB,mBAAmB,EACnB,kBAAkB,EAClB,YAAY,EACZ,kBAAkB,EAClB,wBAAwB,EACxB,mBAAmB,EACnB,mBAAmB,EACnB,iBAAiB,EACjB,qBAAqB,EACrB,6BAA6B,EAC7B,8BAA8B,EAC9B,yBAAyB,EACzB,2BAA2B,EAC3B,qBAAqB,EACrB,oBAAoB,EACpB,gBAAgB,EAChB,iBAAiB,EACjB,mBAAmB,EACnB,gBAAgB,EAChB,eAAe,GAChB,MAAM,wBAAwB,CAAA;AAE/B;;;;;;;;GAQG;AACH,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;CAChB"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/domain/types.ts"],"names":[],"mappings":"AAIA,YAAY,EACV,SAAS,EACT,UAAU,EACV,YAAY,EACZ,gBAAgB,EAChB,YAAY,EACZ,WAAW,EACX,iBAAiB,EACjB,eAAe,EACf,aAAa,EACb,uBAAuB,EACvB,KAAK,EACL,UAAU,EACV,WAAW,EACX,SAAS,EACT,QAAQ,EACR,cAAc,EACd,cAAc,EAWd,cAAc,EACd,oBAAoB,EACpB,uBAAuB,EACvB,iBAAiB,EACjB,mBAAmB,EAGnB,eAAe,EACf,mBAAmB,EACnB,qBAAqB,EACrB,uBAAuB,EACvB,oBAAoB,EACpB,qBAAqB,EACrB,OAAO,EACP,QAAQ,EACR,kBAAkB,EAClB,qBAAqB,EACrB,kBAAkB,EAClB,oBAAoB,EACpB,qBAAqB,EACrB,iBAAiB,EACjB,eAAe,EACf,YAAY,EAEZ,cAAc,EACd,kBAAkB,EAClB,aAAa,EACb,iBAAiB,EACjB,eAAe,EACf,YAAY,EACZ,sBAAsB,EACtB,uBAAuB,EACvB,QAAQ,EACR,oBAAoB,EACpB,YAAY,EACZ,QAAQ,EACR,eAAe,EACf,cAAc,EACd,cAAc,EACd,eAAe,EACf,aAAa,EACb,aAAa,EACb,WAAW,EACX,YAAY,EACZ,iBAAiB,EACjB,YAAY,EACZ,qBAAqB,EACrB,iBAAiB,EACjB,SAAS,EACT,iBAAiB,EAEjB,iBAAiB,EACjB,YAAY,EACZ,yBAAyB,EACzB,2BAA2B,EAC3B,yBAAyB,EACzB,cAAc,EACd,uBAAuB,EACvB,kBAAkB,EAClB,oBAAoB,EACpB,gBAAgB,EAChB,uBAAuB,EAEvB,OAAO,EACP,WAAW,EACX,WAAW,EACX,aAAa,EACb,kBAAkB,EAClB,cAAc,EAEd,aAAa,EACb,mBAAmB,EACnB,mBAAmB,EACnB,eAAe,EAEf,OAAO,EACP,cAAc,EACd,iBAAiB,EACjB,gBAAgB,EAEhB,YAAY,EACZ,cAAc,EACd,YAAY,EACZ,gBAAgB,EAChB,wBAAwB,EACxB,mBAAmB,EACnB,WAAW,EACX,gBAAgB,EAChB,iBAAiB,EACjB,sBAAsB,EACtB,iBAAiB,EACjB,UAAU,EACV,aAAa,EACb,oBAAoB,EACpB,gBAAgB,EAChB,cAAc,EACd,oBAAoB,EACpB,qBAAqB,EAErB,uBAAuB,EACvB,mBAAmB,EACnB,kBAAkB,EAClB,oBAAoB,EACpB,iBAAiB,EACjB,qBAAqB,EAErB,cAAc,EACd,gBAAgB,EAChB,oBAAoB,EACpB,mBAAmB,EACnB,oBAAoB,EAEpB,kBAAkB,EAClB,cAAc,EACd,gBAAgB,EAChB,oBAAoB,EACpB,wBAAwB,EACxB,eAAe,EACf,kBAAkB,EAClB,cAAc,EACd,oBAAoB,EACpB,iBAAiB,EACjB,SAAS,EACT,UAAU,EACV,QAAQ,EAER,cAAc,EACd,oBAAoB,EACpB,eAAe,EACf,oBAAoB,EACpB,0BAA0B,EAC1B,cAAc,EACd,WAAW,EACX,kBAAkB,EAClB,UAAU,EACV,gBAAgB,EAChB,oBAAoB,EAEpB,YAAY,EACZ,YAAY,EACZ,eAAe,EACf,qBAAqB,EACrB,gBAAgB,EAChB,iBAAiB,EACjB,aAAa,EACb,eAAe,EAEf,oBAAoB,EACpB,qBAAqB,EACrB,qBAAqB,EACrB,0BAA0B,EAC1B,iBAAiB,EAGjB,oBAAoB,EACpB,uBAAuB,EACvB,wBAAwB,EACxB,0BAA0B,EAC1B,mBAAmB,EAEnB,wBAAwB,EACxB,sBAAsB,EACtB,2BAA2B,EAC3B,wBAAwB,EACxB,mBAAmB,EACnB,kBAAkB,EAClB,uBAAuB,EACvB,qBAAqB,EACrB,iBAAiB,EACjB,qBAAqB,EACrB,yBAAyB,EACzB,yBAAyB,EAEzB,2BAA2B,EAE3B,aAAa,EACb,wBAAwB,EACxB,WAAW,EACX,UAAU,EACV,mBAAmB,EAEnB,WAAW,EACX,UAAU,EACV,cAAc,EACd,gBAAgB,EAChB,aAAa,EAEb,gBAAgB,EAChB,eAAe,EACf,YAAY,EACZ,eAAe,EACf,eAAe,EAEf,cAAc,EACd,sBAAsB,EACtB,qBAAqB,EAErB,uBAAuB,EACvB,aAAa,EAEb,iBAAiB,EACjB,sBAAsB,EACtB,kBAAkB,EAClB,kBAAkB,EAClB,wBAAwB,EACxB,6BAA6B,EAC7B,uBAAuB,EACvB,iBAAiB,EACjB,qBAAqB,EACrB,8BAA8B,EAC9B,2BAA2B,EAC3B,4BAA4B,EAC5B,6BAA6B,EAC7B,mBAAmB,EAEnB,aAAa,EACb,eAAe,EACf,sBAAsB,EACtB,6BAA6B,EAE7B,qBAAqB,EACrB,qBAAqB,EACrB,mBAAmB,EACnB,oBAAoB,EAEpB,mBAAmB,EACnB,oBAAoB,EACpB,yBAAyB,EACzB,cAAc,EACd,yBAAyB,EACzB,kBAAkB,EAClB,oBAAoB,EACpB,6BAA6B,EAE7B,mBAAmB,EACnB,iBAAiB,EACjB,sBAAsB,EACtB,4BAA4B,EAE5B,qBAAqB,EACrB,gCAAgC,EAChC,gCAAgC,EAChC,eAAe,EACf,gBAAgB,EAChB,oBAAoB,EACpB,YAAY,EACZ,kBAAkB,EAGlB,eAAe,EACf,gBAAgB,EAChB,eAAe,EACf,oBAAoB,EAEpB,kBAAkB,EAClB,kBAAkB,EAClB,gBAAgB,EAChB,qBAAqB,EACrB,uBAAuB,EACvB,iBAAiB,EAEjB,cAAc,EACd,kBAAkB,EAClB,mBAAmB,EACnB,uBAAuB,EAEvB,mBAAmB,EACnB,aAAa,EACb,mBAAmB,EACnB,cAAc,EACd,iBAAiB,EACjB,oBAAoB,EACpB,yBAAyB,EACzB,oBAAoB,EACpB,2BAA2B,EAC3B,4BAA4B,EAC5B,yBAAyB,EACzB,2BAA2B,EAC3B,4BAA4B,EAC5B,gCAAgC,EAChC,iCAAiC,EAGjC,gBAAgB,EAChB,kBAAkB,EAClB,YAAY,EACZ,kBAAkB,EAClB,mBAAmB,EACnB,gBAAgB,EAGhB,UAAU,EACV,eAAe,EACf,kBAAkB,EAClB,UAAU,EACV,qBAAqB,EACrB,oBAAoB,EACpB,eAAe,EACf,YAAY,EAGZ,oBAAoB,EACpB,YAAY,EACZ,YAAY,EACZ,gBAAgB,EAChB,WAAW,EACX,UAAU,EACV,cAAc,EACd,aAAa,EACb,mBAAmB,EACnB,iBAAiB,EAGjB,gBAAgB,EAChB,gBAAgB,EAChB,aAAa,EAGb,mBAAmB,EACnB,eAAe,EACf,wBAAwB,EACxB,cAAc,EACd,kBAAkB,EAClB,iBAAiB,EACjB,kBAAkB,EAClB,mBAAmB,EACnB,mBAAmB,EACnB,uBAAuB,EACvB,oBAAoB,EACpB,6BAA6B,EAG7B,iBAAiB,EACjB,mBAAmB,EACnB,aAAa,EACb,qBAAqB,EACrB,4BAA4B,EAC5B,uBAAuB,EACvB,2BAA2B,EAC3B,4BAA4B,EAG5B,eAAe,EACf,cAAc,EACd,gBAAgB,EAChB,iBAAiB,EACjB,wBAAwB,EACxB,+BAA+B,EAC/B,0BAA0B,EAC1B,8BAA8B,EAC9B,+BAA+B,EAE/B,kBAAkB,EAClB,wBAAwB,EAExB,mBAAmB,EACnB,eAAe;AACf,sEAAsE;AACtE,gBAAgB,EAChB,mBAAmB,EACnB,eAAe,EACf,UAAU,EACV,gBAAgB,EAChB,UAAU,EACV,OAAO,EAEP,mBAAmB,EACnB,gBAAgB,EAEhB,aAAa,EACb,gBAAgB,EAChB,WAAW,EAEX,cAAc,EACd,YAAY,EACZ,YAAY,EAEZ,eAAe,EACf,sBAAsB,EACtB,gBAAgB,EAChB,wBAAwB,EACxB,uBAAuB,EACvB,kCAAkC,EAElC,qBAAqB,EACrB,oBAAoB,EACpB,kBAAkB,EAClB,wBAAwB,EACxB,kBAAkB,EAElB,kBAAkB,EAClB,oBAAoB,EACpB,cAAc,EACd,wBAAwB,EAExB,sBAAsB,EACtB,iBAAiB,EACjB,4BAA4B,EAC5B,sBAAsB,EACtB,4BAA4B,EAC5B,6BAA6B,EAC7B,kBAAkB,EAClB,eAAe,EACf,SAAS,EACT,aAAa,EACb,uBAAuB,EACvB,cAAc,EACd,eAAe,EAGf,gBAAgB,EAChB,uBAAuB,EACvB,OAAO,EAEP,WAAW,EACX,YAAY,EACZ,kBAAkB,EAClB,gBAAgB,EAChB,gBAAgB,EAChB,wBAAwB,EACxB,oBAAoB,EAGpB,oBAAoB,EAGpB,aAAa,EACb,sBAAsB,EACtB,qBAAqB,EACrB,YAAY,EACZ,aAAa,EACb,aAAa,EACb,WAAW,EACX,aAAa,EACb,UAAU,EACV,mBAAmB,EACnB,mBAAmB,EACnB,aAAa,EAEb,eAAe,EACf,uBAAuB,EAGvB,kBAAkB,EAClB,yBAAyB,EACzB,oBAAoB,EACpB,yBAAyB,EACzB,mBAAmB,EACnB,oBAAoB,EAGpB,2BAA2B,EAC3B,mBAAmB,EACnB,2BAA2B,EAC3B,wBAAwB,EAExB,mBAAmB,EACnB,oBAAoB,EACpB,aAAa,EACb,qBAAqB,EACrB,UAAU,EACV,uBAAuB,EACvB,qBAAqB,EACrB,qBAAqB,EAGrB,cAAc,EACd,aAAa,EACb,iBAAiB,EAEjB,WAAW,EACX,iBAAiB,EACjB,sBAAsB,EACtB,sBAAsB,EACtB,sBAAsB,EACtB,yBAAyB,EAGzB,iBAAiB,EACjB,oBAAoB,EACpB,eAAe,EACf,UAAU,EACV,mBAAmB,EAEnB,cAAc,EACd,yBAAyB,EACzB,yBAAyB,EACzB,YAAY,EACZ,cAAc,EACd,qBAAqB,EACrB,cAAc,EACd,sBAAsB,EACtB,gBAAgB,EAEhB,iBAAiB,EACjB,qBAAqB,EACrB,kBAAkB,EAClB,iBAAiB,EAEjB,UAAU,EACV,WAAW,EACX,WAAW,EACX,mBAAmB,EAEnB,kBAAkB,EAClB,wBAAwB,EAExB,mBAAmB,EAEnB,WAAW,EAGX,cAAc,EACd,kBAAkB,EAClB,kBAAkB,EAElB,aAAa,EACb,YAAY,EACZ,kBAAkB,EAGlB,WAAW,EACX,WAAW,EACX,sBAAsB,EACtB,sBAAsB,EAEtB,mBAAmB,EACnB,iBAAiB,EACjB,kBAAkB,EAClB,oBAAoB,EACpB,uBAAuB,EAEvB,sBAAsB,EACtB,iCAAiC,EAEjC,uBAAuB,EACvB,+BAA+B,EAE/B,YAAY,EACZ,gBAAgB,EAChB,kBAAkB,EAClB,oBAAoB,EACpB,mBAAmB,EACnB,yBAAyB,EAEzB,2BAA2B,EAC3B,4BAA4B,EAC5B,yBAAyB,EACzB,oBAAoB,EACpB,+BAA+B,EAE/B,iBAAiB,EACjB,4BAA4B,EAC5B,aAAa,EACb,gBAAgB,EAEhB,YAAY,EACZ,uBAAuB,EAEvB,gBAAgB,EAChB,gBAAgB,EAChB,2BAA2B,EAC3B,aAAa,EACb,wBAAwB,EAExB,eAAe,EACf,UAAU,EACV,yBAAyB,EACzB,uBAAuB,EACvB,eAAe,EACf,kBAAkB,EAClB,YAAY,EACZ,wBAAwB,EACxB,wBAAwB,EACxB,6BAA6B,EAE7B,gBAAgB,EAChB,UAAU,EACV,iBAAiB,EACjB,gBAAgB,EAChB,WAAW,EACX,mBAAmB,EACnB,mBAAmB,EAEnB,WAAW,EACX,eAAe,EACf,uBAAuB,EACvB,iBAAiB,EAEjB,eAAe,EAEf,mBAAmB,EACnB,oBAAoB,EACpB,kBAAkB,EAClB,cAAc,EACd,uBAAuB,EACvB,cAAc,EACd,uBAAuB,EACvB,aAAa,EACb,iBAAiB,EACjB,gBAAgB,EAChB,iBAAiB,EACjB,UAAU,EACV,qBAAqB,EACrB,sBAAsB,EACtB,YAAY,EAEZ,UAAU,EACV,gBAAgB,EAChB,cAAc,EACd,oBAAoB,EACpB,eAAe,EACf,kBAAkB,EAClB,sBAAsB,EACtB,yBAAyB,EACzB,kBAAkB,EAClB,mBAAmB,EACnB,kBAAkB,EAClB,YAAY,EACZ,kBAAkB,EAClB,wBAAwB,EACxB,mBAAmB,EACnB,mBAAmB,EACnB,iBAAiB,EACjB,qBAAqB,EACrB,6BAA6B,EAC7B,8BAA8B,EAC9B,yBAAyB,EACzB,2BAA2B,EAC3B,qBAAqB,EACrB,oBAAoB,EACpB,gBAAgB,EAChB,iBAAiB,EACjB,mBAAmB,EACnB,gBAAgB,EAChB,eAAe,GAChB,MAAM,wBAAwB,CAAA;AAE/B;;;;;;;;GAQG;AACH,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;CAChB"}

package/dist/domain/vcs-errors.d.ts

@@ -1,4 +1,29 @@
 import type { VcsProvider } from './vcs-types.js';
+import { UnavailableError } from './errors.js';
+/**
+ * A provider-routing VCS client was asked for a member the ROUTED provider's client does not
+ * implement, while the other configured provider's does. Thrown by
+ * `providerRoutingGitHubClient` (`@cat-factory/server`) and lives here so a consumer BELOW the
+ * server layer can catch it.
+ *
+ * A distinct class rather than a bare {@link UnavailableError} because the two facts need
+ * different handling and only the caller knows which it can absorb: the generic 503 says "this
+ * deployment has not configured the capability", a build problem an operator fixes by wiring
+ * something, while this is a permanent property of the provider the workspace CONNECTED, which
+ * no amount of wiring changes. A caller that already models "the client cannot answer this"
+ * (`GitHubService.checkDefaultBranchProtection`'s `capability: 'unavailable'`) reports that;
+ * one that does not lets it surface as the 503 it is.
+ *
+ * Surfacing is only honest because the reason is a member of contracts' `UNAVAILABLE_REASONS`
+ * and the SPA keys its own copy off it. Without that entry the 503 renders as the generic
+ * "not configured" wording, so the class would state the distinction in its own message while
+ * the only text a user reads asserts the opposite.
+ */
+export declare class VcsCapabilityUnsupportedError extends UnavailableError {
+    readonly provider: VcsProvider;
+    readonly operation: string;
+    constructor(provider: VcsProvider, operation: string);
+}
 /** In-repo docs the VCS remedies deep-link to. */
 export declare const VCS_DOC_URLS: {
     /** GitHub connect / repo linking. */

package/dist/domain/vcs-errors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"vcs-errors.d.ts","sourceRoot":"","sources":["../../src/domain/vcs-errors.ts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAA;AAOjD,kDAAkD;AAClD,eAAO,MAAM,YAAY;IACvB,qCAAqC;aACrC,iBAAiB;IACjB,oCAAoC;aACpC,gBAAgB;IAChB,oDAAoD;aACpD,YAAY;CACJ,CAAA;AAEV,mFAAmF;AACnF,eAAO,MAAM,oBAAoB;aAC/B,aAAa,EAAE,2CAA2C;CAClD,CAAA;AAEV,yFAAyF;AACzF,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,WAAW,CAAA;IACrB,8CAA8C;IAC9C,MAAM,EAAE,MAAM,CAAA;IACd,mDAAmD;IACnD,MAAM,EAAE,MAAM,CAAA;IACd,gDAAgD;IAChD,GAAG,EAAE,MAAM,CAAA;IACX,oFAAoF;IACpF,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,6FAA6F;IAC7F,WAAW,CAAC,EAAE,OAAO,CAAA;IACrB,oEAAoE;IACpE,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CACxB;AAmDD;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,mBAAmB,GAAG,MAAM,CAMpE"}
+{"version":3,"file":"vcs-errors.d.ts","sourceRoot":"","sources":["../../src/domain/vcs-errors.ts"],"names":[],"mappings":"AAmBA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAA;AACjD,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AAY9C;;;;;;;;;;;;;;;;;;GAkBG;AACH,qBAAa,6BAA8B,SAAQ,gBAAgB;IAE/D,QAAQ,CAAC,QAAQ,EAAE,WAAW;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM;IAF5B,YACW,QAAQ,EAAE,WAAW,EACrB,SAAS,EAAE,MAAM,EAM3B;CACF;AAOD,kDAAkD;AAClD,eAAO,MAAM,YAAY;IACvB,qCAAqC;aACrC,iBAAiB;IACjB,oCAAoC;aACpC,gBAAgB;IAChB,oDAAoD;aACpD,YAAY;CACJ,CAAA;AAEV,mFAAmF;AACnF,eAAO,MAAM,oBAAoB;aAC/B,aAAa,EAAE,2CAA2C;CAClD,CAAA;AAEV,yFAAyF;AACzF,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,WAAW,CAAA;IACrB,8CAA8C;IAC9C,MAAM,EAAE,MAAM,CAAA;IACd,mDAAmD;IACnD,MAAM,EAAE,MAAM,CAAA;IACd,gDAAgD;IAChD,GAAG,EAAE,MAAM,CAAA;IACX,oFAAoF;IACpF,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,6FAA6F;IAC7F,WAAW,CAAC,EAAE,OAAO,CAAA;IACrB,oEAAoE;IACpE,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CACxB;AAmDD;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,mBAAmB,GAAG,MAAM,CAMpE"}

package/dist/domain/vcs-errors.js

@@ -15,6 +15,47 @@
 // `@cat-factory/gitlab`) but share `@cat-factory/kernel`, so keeping the copy here keeps the two
 // providers' remedies from drifting and lets the mapping be unit-tested in one place.
 // ---------------------------------------------------------------------------
+import { UnavailableError } from './errors.js';
+/**
+ * Typed against the SHARED vocabulary rather than passed as a bare string, because this reason
+ * only does its job if the SPA has copy keyed to it. `UnavailableError.reason` is `string` on
+ * purpose (most reasons are internal and never reach a human), so nothing else would notice if
+ * the entry were dropped from `UNAVAILABLE_REASONS`: the refusal would keep working and quietly
+ * fall back to the generic "not configured" wording this class exists to avoid. Naming the union
+ * here turns that into a build failure.
+ */
+const VCS_CAPABILITY_UNSUPPORTED = 'vcs_capability_unsupported';
+/**
+ * A provider-routing VCS client was asked for a member the ROUTED provider's client does not
+ * implement, while the other configured provider's does. Thrown by
+ * `providerRoutingGitHubClient` (`@cat-factory/server`) and lives here so a consumer BELOW the
+ * server layer can catch it.
+ *
+ * A distinct class rather than a bare {@link UnavailableError} because the two facts need
+ * different handling and only the caller knows which it can absorb: the generic 503 says "this
+ * deployment has not configured the capability", a build problem an operator fixes by wiring
+ * something, while this is a permanent property of the provider the workspace CONNECTED, which
+ * no amount of wiring changes. A caller that already models "the client cannot answer this"
+ * (`GitHubService.checkDefaultBranchProtection`'s `capability: 'unavailable'`) reports that;
+ * one that does not lets it surface as the 503 it is.
+ *
+ * Surfacing is only honest because the reason is a member of contracts' `UNAVAILABLE_REASONS`
+ * and the SPA keys its own copy off it. Without that entry the 503 renders as the generic
+ * "not configured" wording, so the class would state the distinction in its own message while
+ * the only text a user reads asserts the opposite.
+ */
+export class VcsCapabilityUnsupportedError extends UnavailableError {
+    provider;
+    operation;
+    constructor(provider, operation) {
+        super(`The ${provider} client does not support ${operation}`, VCS_CAPABILITY_UNSUPPORTED, {
+            provider,
+            operation,
+        });
+        this.provider = provider;
+        this.operation = operation;
+    }
+}
 // In-repo docs are linked as stable GitHub blob URLs on `main`. Kernel sits BELOW the server
 // layer, so it cannot import `@cat-factory/server`'s `config/docs.ts`; per the doc-URL convention
 // a package outside the server layer keeps its own equivalent — this is that equivalent.

package/dist/domain/vcs-errors.js.map

@@ -1 +1 @@
-{"version":3,"file":"vcs-errors.js","sourceRoot":"","sources":["../../src/domain/vcs-errors.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,0DAA0D;AAC1D,EAAE;AACF,yFAAyF;AACzF,6FAA6F;AAC7F,0FAA0F;AAC1F,+FAA+F;AAC/F,+FAA+F;AAC/F,2FAA2F;AAC3F,sEAAsE;AACtE,EAAE;AACF,kGAAkG;AAClG,iGAAiG;AACjG,mGAAmG;AACnG,iGAAiG;AACjG,sFAAsF;AACtF,8EAA8E;AAI9E,6FAA6F;AAC7F,kGAAkG;AAClG,yFAAyF;AACzF,MAAM,kBAAkB,GAAG,oDAAoD,CAAA;AAE/E,kDAAkD;AAClD,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,qCAAqC;IACrC,iBAAiB,EAAE,GAAG,kBAAkB,qCAAqC;IAC7E,oCAAoC;IACpC,gBAAgB,EAAE,GAAG,kBAAkB,oCAAoC;IAC3E,oDAAoD;IACpD,YAAY,EAAE,GAAG,kBAAkB,gCAAgC;CAC3D,CAAA;AAEV,mFAAmF;AACnF,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,aAAa,EAAE,2CAA2C;CAClD,CAAA;AAmBV,4FAA4F;AAC5F,SAAS,aAAa,CAAC,QAAqB;IAC1C,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAA;AACpD,CAAC;AAED,SAAS,YAAY,CAAC,GAAwB;IAC5C,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,GAAG,CAAA;IAC5C,MAAM,IAAI,GAAG,YAAY,CAAA;IACzB,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACnB,OAAO,qPAAqP,oBAAoB,CAAC,aAAa,SAAS,IAAI,CAAC,gBAAgB,GAAG,CAAA;IACjU,CAAC;IACD,IAAI,CAAC,MAAM,KAAK,GAAG,IAAI,WAAW,CAAC,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACtD,MAAM,SAAS,GACb,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,wBAAwB,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,CAAA;QAC/F,OAAO,iDAAiD,SAAS,kIAAkI,IAAI,CAAC,gBAAgB,GAAG,CAAA;IAC7N,CAAC;IACD,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACnB,OAAO,wMAAwM,oBAAoB,CAAC,aAAa,oDAAoD,IAAI,CAAC,gBAAgB,GAAG,CAAA;IAC/T,CAAC;IACD,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACnB,OAAO,8RAA8R,IAAI,CAAC,iBAAiB,GAAG,CAAA;IAChU,CAAC;IACD,IAAI,MAAM,IAAI,GAAG,EAAE,CAAC;QAClB,OAAO,8FAA8F,IAAI,CAAC,gBAAgB,GAAG,CAAA;IAC/H,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,SAAS,YAAY,CAAC,GAAwB;IAC5C,MAAM,EAAE,MAAM,EAAE,GAAG,GAAG,CAAA;IACtB,MAAM,IAAI,GAAG,YAAY,CAAA;IACzB,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACnB,OAAO,4PAA4P,IAAI,CAAC,YAAY,GAAG,CAAA;IACzR,CAAC;IACD,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACnB,OAAO,iFAAiF,IAAI,CAAC,YAAY,GAAG,CAAA;IAC9G,CAAC;IACD,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACnB,OAAO,6KAA6K,IAAI,CAAC,YAAY,GAAG,CAAA;IAC1M,CAAC;IACD,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACnB,OAAO,yIAAyI,IAAI,CAAC,YAAY,GAAG,CAAA;IACtK,CAAC;IACD,IAAI,MAAM,IAAI,GAAG,EAAE,CAAC;QAClB,OAAO,8FAA8F,IAAI,CAAC,YAAY,GAAG,CAAA;IAC3H,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAwB;IAC1D,MAAM,OAAO,GAAG,GAAG,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,GAAG,MAAM,GAAG,CAAC,MAAM,GACrF,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAC/B,EAAE,CAAA;IACF,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,CAAA;IAChF,OAAO,MAAM,CAAC,CAAC,CAAC,GAAG,OAAO,KAAK,MAAM,EAAE,CAAC,CAAC,CAAC,OAAO,CAAA;AACnD,CAAC"}
+{"version":3,"file":"vcs-errors.js","sourceRoot":"","sources":["../../src/domain/vcs-errors.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,0DAA0D;AAC1D,EAAE;AACF,yFAAyF;AACzF,6FAA6F;AAC7F,0FAA0F;AAC1F,+FAA+F;AAC/F,+FAA+F;AAC/F,2FAA2F;AAC3F,sEAAsE;AACtE,EAAE;AACF,kGAAkG;AAClG,iGAAiG;AACjG,mGAAmG;AACnG,iGAAiG;AACjG,sFAAsF;AACtF,8EAA8E;AAI9E,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AAE9C;;;;;;;GAOG;AACH,MAAM,0BAA0B,GAAsB,4BAA4B,CAAA;AAElF;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,OAAO,6BAA8B,SAAQ,gBAAgB;IAEtD,QAAQ;IACR,SAAS;IAFpB,YACW,QAAqB,EACrB,SAAiB;QAE1B,KAAK,CAAC,OAAO,QAAQ,4BAA4B,SAAS,EAAE,EAAE,0BAA0B,EAAE;YACxF,QAAQ;YACR,SAAS;SACV,CAAC,CAAA;wBANO,QAAQ;yBACR,SAAS;IAMpB,CAAC;CACF;AAED,6FAA6F;AAC7F,kGAAkG;AAClG,yFAAyF;AACzF,MAAM,kBAAkB,GAAG,oDAAoD,CAAA;AAE/E,kDAAkD;AAClD,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,qCAAqC;IACrC,iBAAiB,EAAE,GAAG,kBAAkB,qCAAqC;IAC7E,oCAAoC;IACpC,gBAAgB,EAAE,GAAG,kBAAkB,oCAAoC;IAC3E,oDAAoD;IACpD,YAAY,EAAE,GAAG,kBAAkB,gCAAgC;CAC3D,CAAA;AAEV,mFAAmF;AACnF,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,aAAa,EAAE,2CAA2C;CAClD,CAAA;AAmBV,4FAA4F;AAC5F,SAAS,aAAa,CAAC,QAAqB;IAC1C,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAA;AACpD,CAAC;AAED,SAAS,YAAY,CAAC,GAAwB;IAC5C,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,GAAG,CAAA;IAC5C,MAAM,IAAI,GAAG,YAAY,CAAA;IACzB,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACnB,OAAO,qPAAqP,oBAAoB,CAAC,aAAa,SAAS,IAAI,CAAC,gBAAgB,GAAG,CAAA;IACjU,CAAC;IACD,IAAI,CAAC,MAAM,KAAK,GAAG,IAAI,WAAW,CAAC,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACtD,MAAM,SAAS,GACb,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,wBAAwB,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,CAAA;QAC/F,OAAO,iDAAiD,SAAS,kIAAkI,IAAI,CAAC,gBAAgB,GAAG,CAAA;IAC7N,CAAC;IACD,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACnB,OAAO,wMAAwM,oBAAoB,CAAC,aAAa,oDAAoD,IAAI,CAAC,gBAAgB,GAAG,CAAA;IAC/T,CAAC;IACD,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACnB,OAAO,8RAA8R,IAAI,CAAC,iBAAiB,GAAG,CAAA;IAChU,CAAC;IACD,IAAI,MAAM,IAAI,GAAG,EAAE,CAAC;QAClB,OAAO,8FAA8F,IAAI,CAAC,gBAAgB,GAAG,CAAA;IAC/H,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,SAAS,YAAY,CAAC,GAAwB;IAC5C,MAAM,EAAE,MAAM,EAAE,GAAG,GAAG,CAAA;IACtB,MAAM,IAAI,GAAG,YAAY,CAAA;IACzB,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACnB,OAAO,4PAA4P,IAAI,CAAC,YAAY,GAAG,CAAA;IACzR,CAAC;IACD,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACnB,OAAO,iFAAiF,IAAI,CAAC,YAAY,GAAG,CAAA;IAC9G,CAAC;IACD,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACnB,OAAO,6KAA6K,IAAI,CAAC,YAAY,GAAG,CAAA;IAC1M,CAAC;IACD,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACnB,OAAO,yIAAyI,IAAI,CAAC,YAAY,GAAG,CAAA;IACtK,CAAC;IACD,IAAI,MAAM,IAAI,GAAG,EAAE,CAAC;QAClB,OAAO,8FAA8F,IAAI,CAAC,YAAY,GAAG,CAAA;IAC3H,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAwB;IAC1D,MAAM,OAAO,GAAG,GAAG,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,GAAG,MAAM,GAAG,CAAC,MAAM,GACrF,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAC/B,EAAE,CAAA;IACF,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,CAAA;IAChF,OAAO,MAAM,CAAC,CAAC,CAAC,GAAG,OAAO,KAAK,MAAM,EAAE,CAAC,CAAC,CAAC,OAAO,CAAA;AACnD,CAAC"}

package/dist/domain/workspace-cascade.d.ts

@@ -20,7 +20,7 @@
  * - Runtime-specific tables that only exist on one facade (e.g. the Cloudflare-only
  *   `live_containers` Durable-Object tracking table) are appended by that facade.
  */
-export declare const WORKSPACE_SCOPED_TABLES: readonly ['agent_prompt_revisions', 'agent_runs', 'blocks', 'brainstorm_sessions', 'capability_credentials', 'clarity_reviews', 'consensus_groups', 'consensus_sessions', 'custom_manifest_types', 'doc_interview_sessions', 'document_connections', 'documents', 'environment_connections', 'environment_test_runs', 'environment_user_handlers', 'environments', 'gate_outcomes', 'github_branches', 'github_check_runs', 'github_commits', 'github_installations', 'github_issues', 'github_pull_requests', 'github_repos', 'incident_enrichment_connections', 'initiatives', 'kaizen_gradings', 'kaizen_verified_combos', 'mcp_oauth_grants', 'merge_threshold_presets', 'merge_track_records', 'model_presets', 'notification_webhooks', 'notifications', 'observability_connections', 'package_registry_connections', 'pipeline_schedule_runs', 'pipeline_schedules', 'pipelines', 'platform_run_days', 'provider_model_catalog', 'provider_subscription_tokens', 'public_api_keys', 'reference_architectures', 'release_health_configs', 'requirement_reviews', 'review_question_posts', 'runner_pool_connections', 'shared_stacks', 'slack_settings', 'task_connections', 'task_source_settings', 'task_type_suppressions', 'tasks', 'test_secrets', 'tracker_comment_ingests', 'token_usage', 'tracker_settings', 'validation_configs', 'workspace_agent_settings', 'workspace_fragment_defaults', 'workspace_members', 'workspace_settings'];
+export declare const WORKSPACE_SCOPED_TABLES: readonly ['agent_prompt_revisions', 'agent_runs', 'blocks', 'brainstorm_sessions', 'capability_credentials', 'clarity_reviews', 'consensus_groups', 'consensus_sessions', 'custom_manifest_types', 'doc_interview_sessions', 'document_connections', 'documents', 'environment_connections', 'environment_test_runs', 'environment_user_handlers', 'environments', 'gate_outcomes', 'github_branches', 'github_check_runs', 'github_commits', 'github_installations', 'github_issues', 'github_pull_requests', 'github_repos', 'incident_enrichment_connections', 'initiatives', 'kaizen_gradings', 'kaizen_verified_combos', 'mcp_oauth_grants', 'merge_threshold_presets', 'merge_track_records', 'model_presets', 'notification_settings', 'notification_webhooks', 'notifications', 'observability_connections', 'package_registry_connections', 'pipeline_schedule_runs', 'pipeline_schedules', 'pipelines', 'platform_run_days', 'provider_model_catalog', 'provider_subscription_tokens', 'public_api_keys', 'reference_architectures', 'release_health_configs', 'requirement_reviews', 'review_question_posts', 'runner_pool_connections', 'shared_stacks', 'slack_settings', 'task_connections', 'task_source_settings', 'task_type_suppressions', 'tasks', 'test_secrets', 'tracker_comment_ingests', 'token_usage', 'tracker_settings', 'validation_configs', 'workspace_agent_settings', 'workspace_fragment_defaults', 'workspace_members', 'workspace_settings'];
 export type WorkspaceScopedTable = (typeof WORKSPACE_SCOPED_TABLES)[number];
 /**
  * Tables that carry a `workspace_id` column but are NOT in {@link WORKSPACE_SCOPED_TABLES}:

package/dist/domain/workspace-cascade.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"workspace-cascade.d.ts","sourceRoot":"","sources":["../../src/domain/workspace-cascade.ts"],"names":[],"mappings":"AAyBA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,eAAO,MAAM,uBAAuB,YAClC,wBAAwB,EACxB,YAAY,EACZ,QAAQ,EACR,qBAAqB,EACrB,wBAAwB,EACxB,iBAAiB,EACjB,kBAAkB,EAClB,oBAAoB,EACpB,uBAAuB,EACvB,wBAAwB,EACxB,sBAAsB,EACtB,WAAW,EACX,yBAAyB,EACzB,uBAAuB,EACvB,2BAA2B,EAC3B,cAAc,EACd,eAAe,EACf,iBAAiB,EACjB,mBAAmB,EACnB,gBAAgB,EAChB,sBAAsB,EACtB,eAAe,EACf,sBAAsB,EACtB,cAAc,EACd,iCAAiC,EACjC,aAAa,EACb,iBAAiB,EACjB,wBAAwB,EACxB,kBAAkB,EAClB,yBAAyB,EACzB,qBAAqB,EACrB,eAAe,EACf,uBAAuB,EACvB,eAAe,EACf,2BAA2B,EAC3B,8BAA8B,EAC9B,wBAAwB,EACxB,oBAAoB,EACpB,WAAW,EACX,mBAAmB,EACnB,wBAAwB,EACxB,8BAA8B,EAC9B,iBAAiB,EACjB,yBAAyB,EACzB,wBAAwB,EACxB,qBAAqB,EACrB,uBAAuB,EACvB,yBAAyB,EACzB,eAAe,EACf,gBAAgB,EAChB,kBAAkB,EAClB,sBAAsB,EACtB,wBAAwB,EACxB,OAAO,EACP,cAAc,EACd,yBAAyB,EACzB,aAAa,EACb,kBAAkB,EAClB,oBAAoB,EACpB,0BAA0B,EAC1B,6BAA6B,EAC7B,mBAAmB,EACnB,oBAAoB,CACZ,CAAA;AAEV,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,uBAAuB,CAAC,CAAC,MAAM,CAAC,CAAA;AAE3E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,eAAO,MAAM,gCAAgC,YAC3C,oBAAoB,EACpB,kBAAkB,EAClB,YAAY,CACJ,CAAA"}
+{"version":3,"file":"workspace-cascade.d.ts","sourceRoot":"","sources":["../../src/domain/workspace-cascade.ts"],"names":[],"mappings":"AAyBA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,eAAO,MAAM,uBAAuB,YAClC,wBAAwB,EACxB,YAAY,EACZ,QAAQ,EACR,qBAAqB,EACrB,wBAAwB,EACxB,iBAAiB,EACjB,kBAAkB,EAClB,oBAAoB,EACpB,uBAAuB,EACvB,wBAAwB,EACxB,sBAAsB,EACtB,WAAW,EACX,yBAAyB,EACzB,uBAAuB,EACvB,2BAA2B,EAC3B,cAAc,EACd,eAAe,EACf,iBAAiB,EACjB,mBAAmB,EACnB,gBAAgB,EAChB,sBAAsB,EACtB,eAAe,EACf,sBAAsB,EACtB,cAAc,EACd,iCAAiC,EACjC,aAAa,EACb,iBAAiB,EACjB,wBAAwB,EACxB,kBAAkB,EAClB,yBAAyB,EACzB,qBAAqB,EACrB,eAAe,EACf,uBAAuB,EACvB,uBAAuB,EACvB,eAAe,EACf,2BAA2B,EAC3B,8BAA8B,EAC9B,wBAAwB,EACxB,oBAAoB,EACpB,WAAW,EACX,mBAAmB,EACnB,wBAAwB,EACxB,8BAA8B,EAC9B,iBAAiB,EACjB,yBAAyB,EACzB,wBAAwB,EACxB,qBAAqB,EACrB,uBAAuB,EACvB,yBAAyB,EACzB,eAAe,EACf,gBAAgB,EAChB,kBAAkB,EAClB,sBAAsB,EACtB,wBAAwB,EACxB,OAAO,EACP,cAAc,EACd,yBAAyB,EACzB,aAAa,EACb,kBAAkB,EAClB,oBAAoB,EACpB,0BAA0B,EAC1B,6BAA6B,EAC7B,mBAAmB,EACnB,oBAAoB,CACZ,CAAA;AAEV,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,uBAAuB,CAAC,CAAC,MAAM,CAAC,CAAA;AAE3E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,eAAO,MAAM,gCAAgC,YAC3C,oBAAoB,EACpB,kBAAkB,EAClB,YAAY,CACJ,CAAA"}

package/dist/domain/workspace-cascade.js

@@ -77,6 +77,7 @@ export const WORKSPACE_SCOPED_TABLES = [
     'merge_threshold_presets',
     'merge_track_records',
     'model_presets',
+    'notification_settings',
     'notification_webhooks',
     'notifications',
     'observability_connections',

package/dist/domain/workspace-cascade.js.map

@@ -1 +1 @@
-{"version":3,"file":"workspace-cascade.js","sourceRoot":"","sources":["../../src/domain/workspace-cascade.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,+EAA+E;AAC/E,2EAA2E;AAC3E,kFAAkF;AAClF,kFAAkF;AAClF,iFAAiF;AACjF,kFAAkF;AAClF,mFAAmF;AACnF,2CAA2C;AAC3C,EAAE;AACF,kFAAkF;AAClF,kFAAkF;AAClF,8EAA8E;AAC9E,0EAA0E;AAC1E,EAAE;AACF,4EAA4E;AAC5E,mFAAmF;AACnF,2EAA2E;AAC3E,+EAA+E;AAC/E,oFAAoF;AACpF,mFAAmF;AACnF,mFAAmF;AACnF,oFAAoF;AACpF,8EAA8E;AAE9E;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,wBAAwB;IACxB,YAAY;IACZ,QAAQ;IACR,qBAAqB;IACrB,wBAAwB;IACxB,iBAAiB;IACjB,kBAAkB;IAClB,oBAAoB;IACpB,uBAAuB;IACvB,wBAAwB;IACxB,sBAAsB;IACtB,WAAW;IACX,yBAAyB;IACzB,uBAAuB;IACvB,2BAA2B;IAC3B,cAAc;IACd,eAAe;IACf,iBAAiB;IACjB,mBAAmB;IACnB,gBAAgB;IAChB,sBAAsB;IACtB,eAAe;IACf,sBAAsB;IACtB,cAAc;IACd,iCAAiC;IACjC,aAAa;IACb,iBAAiB;IACjB,wBAAwB;IACxB,kBAAkB;IAClB,yBAAyB;IACzB,qBAAqB;IACrB,eAAe;IACf,uBAAuB;IACvB,eAAe;IACf,2BAA2B;IAC3B,8BAA8B;IAC9B,wBAAwB;IACxB,oBAAoB;IACpB,WAAW;IACX,mBAAmB;IACnB,wBAAwB;IACxB,8BAA8B;IAC9B,iBAAiB;IACjB,yBAAyB;IACzB,wBAAwB;IACxB,qBAAqB;IACrB,uBAAuB;IACvB,yBAAyB;IACzB,eAAe;IACf,gBAAgB;IAChB,kBAAkB;IAClB,sBAAsB;IACtB,wBAAwB;IACxB,OAAO;IACP,cAAc;IACd,yBAAyB;IACzB,aAAa;IACb,kBAAkB;IAClB,oBAAoB;IACpB,0BAA0B;IAC1B,6BAA6B;IAC7B,mBAAmB;IACnB,oBAAoB;CACZ,CAAA;AAIV;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAG;IAC9C,oBAAoB;IACpB,kBAAkB;IAClB,YAAY;CACJ,CAAA"}
+{"version":3,"file":"workspace-cascade.js","sourceRoot":"","sources":["../../src/domain/workspace-cascade.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,+EAA+E;AAC/E,2EAA2E;AAC3E,kFAAkF;AAClF,kFAAkF;AAClF,iFAAiF;AACjF,kFAAkF;AAClF,mFAAmF;AACnF,2CAA2C;AAC3C,EAAE;AACF,kFAAkF;AAClF,kFAAkF;AAClF,8EAA8E;AAC9E,0EAA0E;AAC1E,EAAE;AACF,4EAA4E;AAC5E,mFAAmF;AACnF,2EAA2E;AAC3E,+EAA+E;AAC/E,oFAAoF;AACpF,mFAAmF;AACnF,mFAAmF;AACnF,oFAAoF;AACpF,8EAA8E;AAE9E;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,wBAAwB;IACxB,YAAY;IACZ,QAAQ;IACR,qBAAqB;IACrB,wBAAwB;IACxB,iBAAiB;IACjB,kBAAkB;IAClB,oBAAoB;IACpB,uBAAuB;IACvB,wBAAwB;IACxB,sBAAsB;IACtB,WAAW;IACX,yBAAyB;IACzB,uBAAuB;IACvB,2BAA2B;IAC3B,cAAc;IACd,eAAe;IACf,iBAAiB;IACjB,mBAAmB;IACnB,gBAAgB;IAChB,sBAAsB;IACtB,eAAe;IACf,sBAAsB;IACtB,cAAc;IACd,iCAAiC;IACjC,aAAa;IACb,iBAAiB;IACjB,wBAAwB;IACxB,kBAAkB;IAClB,yBAAyB;IACzB,qBAAqB;IACrB,eAAe;IACf,uBAAuB;IACvB,uBAAuB;IACvB,eAAe;IACf,2BAA2B;IAC3B,8BAA8B;IAC9B,wBAAwB;IACxB,oBAAoB;IACpB,WAAW;IACX,mBAAmB;IACnB,wBAAwB;IACxB,8BAA8B;IAC9B,iBAAiB;IACjB,yBAAyB;IACzB,wBAAwB;IACxB,qBAAqB;IACrB,uBAAuB;IACvB,yBAAyB;IACzB,eAAe;IACf,gBAAgB;IAChB,kBAAkB;IAClB,sBAAsB;IACtB,wBAAwB;IACxB,OAAO;IACP,cAAc;IACd,yBAAyB;IACzB,aAAa;IACb,kBAAkB;IAClB,oBAAoB;IACpB,0BAA0B;IAC1B,6BAA6B;IAC7B,mBAAmB;IACnB,oBAAoB;CACZ,CAAA;AAIV;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAG;IAC9C,oBAAoB;IACpB,kBAAkB;IAClB,YAAY;CACJ,CAAA"}