@cat-factory/orchestration 0.141.0 → 0.143.0

package/dist/modules/execution/run-context-admission.js

@@ -0,0 +1,54 @@
+/**
+ * The engine's context-building + run-admission pair: the {@link AgentContextBuilder} every
+ * dispatch composes its prompt through, and the {@link RunAdmission} preflight family
+ * (`assert*`) that start / retry / restart all gate on.
+ *
+ * Extracted verbatim from the {@link ExecutionService} constructor (which had grown past the
+ * per-function line budget — docs/initiatives/lint-complexity-size-ratchet.md) following the
+ * same sibling-factory pattern as `gate-window-controllers.ts`: ONE deps object of values the
+ * constructor already had in hand, and the two collaborators returned together because admission
+ * is built ON the context builder — they are one seam, not two. Behaviour-neutral.
+ */
+import { AgentContextBuilder } from './AgentContextBuilder.js';
+import { RunAdmission } from './RunAdmission.js';
+export function buildRunContextAndAdmission(deps) {
+    const contextBuilder = new AgentContextBuilder({
+        workspaceRepository: deps.workspaceRepository,
+        blockRepository: deps.blockRepository,
+        accountRepository: deps.accountRepository,
+        agentKindRegistry: deps.agentKindRegistry,
+        initiativePresetRegistry: deps.initiativePresetRegistry,
+        documents: deps.documentRepository,
+        documentUrlResolver: deps.documentUrlResolver,
+        tasks: deps.taskRepository,
+        requirementReviews: deps.requirementReviewRepository,
+        docInterviews: deps.docInterviewRepository,
+        clarityReviews: deps.clarityReviewRepository,
+        brainstormSessions: deps.brainstormSessionRepository,
+        initiatives: deps.initiativeRepository,
+        environmentProvisioning: deps.environmentProvisioning,
+        resolveTestSecretRefs: deps.resolveTestSecretRefs,
+        resolveValidationChecks: deps.resolveValidationChecks,
+        fragmentResolver: deps.fragmentResolver,
+        skillResolver: deps.skillResolver,
+    });
+    // The run-admission preflights (the shared start/retry/restart `assert*` gate family).
+    // The admission-only seams are forwarded here rather than stored on the engine.
+    const admission = new RunAdmission({
+        workspaceRepository: deps.workspaceRepository,
+        blockRepository: deps.blockRepository,
+        executionRepository: deps.executionRepository,
+        contextBuilder,
+        agentKindRegistry: deps.agentKindRegistry,
+        spend: deps.spendService,
+        environmentProvisioning: deps.environmentProvisioning,
+        workspaceSettingsService: deps.workspaceSettingsService,
+        resolveBinaryArtifactStore: deps.resolveBinaryArtifactStore,
+        resolveProviderCapabilities: deps.resolveProviderCapabilities,
+        inlineHarnessRef: deps.inlineHarnessRef,
+        resolveWorkspaceModelDefault: deps.resolveWorkspaceModelDefault,
+        assertAgentBackendConfigured: deps.assertAgentBackendConfigured,
+    });
+    return { contextBuilder, admission };
+}
+//# sourceMappingURL=run-context-admission.js.map

package/dist/modules/execution/run-context-admission.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-context-admission.js","sourceRoot":"","sources":["../../../src/modules/execution/run-context-admission.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAA;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAsChD,MAAM,UAAU,2BAA2B,CAAC,IAA6B;IAIvE,MAAM,cAAc,GAAG,IAAI,mBAAmB,CAAC;QAC7C,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;QAC7C,eAAe,EAAE,IAAI,CAAC,eAAe;QACrC,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;QACzC,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;QACzC,wBAAwB,EAAE,IAAI,CAAC,wBAAwB;QACvD,SAAS,EAAE,IAAI,CAAC,kBAAkB;QAClC,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;QAC7C,KAAK,EAAE,IAAI,CAAC,cAAc;QAC1B,kBAAkB,EAAE,IAAI,CAAC,2BAA2B;QACpD,aAAa,EAAE,IAAI,CAAC,sBAAsB;QAC1C,cAAc,EAAE,IAAI,CAAC,uBAAuB;QAC5C,kBAAkB,EAAE,IAAI,CAAC,2BAA2B;QACpD,WAAW,EAAE,IAAI,CAAC,oBAAoB;QACtC,uBAAuB,EAAE,IAAI,CAAC,uBAAuB;QACrD,qBAAqB,EAAE,IAAI,CAAC,qBAAqB;QACjD,uBAAuB,EAAE,IAAI,CAAC,uBAAuB;QACrD,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;QACvC,aAAa,EAAE,IAAI,CAAC,aAAa;KAClC,CAAC,CAAA;IACF,uFAAuF;IACvF,gFAAgF;IAChF,MAAM,SAAS,GAAG,IAAI,YAAY,CAAC;QACjC,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;QAC7C,eAAe,EAAE,IAAI,CAAC,eAAe;QACrC,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;QAC7C,cAAc;QACd,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;QACzC,KAAK,EAAE,IAAI,CAAC,YAAY;QACxB,uBAAuB,EAAE,IAAI,CAAC,uBAAuB;QACrD,wBAAwB,EAAE,IAAI,CAAC,wBAAwB;QACvD,0BAA0B,EAAE,IAAI,CAAC,0BAA0B;QAC3D,2BAA2B,EAAE,IAAI,CAAC,2BAA2B;QAC7D,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;QACvC,4BAA4B,EAAE,IAAI,CAAC,4BAA4B;QAC/D,4BAA4B,EAAE,IAAI,CAAC,4BAA4B;KAChE,CAAC,CAAA;IACF,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,CAAA;AACtC,CAAC"}

package/dist/modules/merge/MergeTrackRecordService.d.ts

@@ -0,0 +1,133 @@
+import type { Block, ChangeClass, Clock, MergeAssessment, MergeClassRollup, MergeTrackDecision, MergeTrackRecord, MergeTrackRecordRepository, ResolveRunRepoContext, ReviewEffort, VcsProvider, WorkspaceRepository } from '@cat-factory/kernel';
+/** The repo identity a record carries, in the provider-neutral VCS vocabulary. */
+export interface MergeTrackRepoRef {
+    repoId?: string | null;
+    provider?: VcsProvider | null;
+}
+/** Everything the merge path knows at the moment a merger step's decision is made. */
+export interface RecordMergeDecisionInput {
+    block: Block;
+    executionId: string;
+    decision: MergeTrackDecision;
+    /** The merger's scores, when it produced a parseable assessment. */
+    assessment?: MergeAssessment | null;
+    /** The preset the decision was made against (its id is absent for the built-in fallback). */
+    riskPolicyId?: string | null;
+    riskPolicyName?: string | null;
+    /**
+     * The pre-computed classification, when the caller already ran it (the merge resolver needs
+     * the class BEFORE it decides, so it classifies first and passes the result down rather than
+     * paying for a second VCS call). It carries the run's repo identity too, so the record is
+     * attributable without a second resolution — see {@link RunClassification}.
+     */
+    classification?: RunClassification;
+    /** Explicit override for the repo identity; normally it rides `classification`. */
+    repo?: MergeTrackRepoRef;
+}
+/**
+ * What classifying a run's pull request yields: the change class, how many files it covered,
+ * and WHICH REPO the PR belongs to.
+ *
+ * The repo identity is not incidental — it is the key external-merge attribution looks a record
+ * up by (`getByPullRequest(repoId, prNumber)`), because a webhook delivery knows only
+ * `(repoId, prNumber)`. It is captured here because `classify` already resolves the run's repo
+ * context to read the changed files, so recording it costs nothing extra; resolving it later
+ * would be a second walk of the same linkage.
+ */
+export interface RunClassification {
+    changeClass: ChangeClass;
+    fileCount: number;
+    repoId?: string | null;
+    provider?: VcsProvider | null;
+}
+export interface MergeTrackRecordServiceDependencies {
+    mergeTrackRecordRepository: MergeTrackRecordRepository;
+    workspaceRepository: WorkspaceRepository;
+    clock: Clock;
+    /**
+     * Resolve the run's repo so the changed-file list can be read (`RepoFiles.listChangedFiles`).
+     * Absent (tests / no VCS connected) ⇒ classification yields `unknown`, which never matches a
+     * per-class rule, so the merge policy falls back to the score thresholds untouched.
+     */
+    resolveRunRepoContext?: ResolveRunRepoContext;
+}
+/**
+ * The merge TRACK RECORD: one persisted row per merge decision carrying the run's
+ * deterministic change class, the merger's scores, what happened, and the reviewer-effort tag a
+ * human left — plus the per-class rollups that justify widening a preset's per-class rule.
+ *
+ * Every write here is a **best-effort side channel of the merge path**: `classify` and
+ * `recordDecision` swallow their own failures and return a degraded-but-valid result, because a
+ * classification or persistence fault must NEVER block or fail a merge. The read paths
+ * (`rollups`, `tag`) are ordinary request-scoped operations and do throw.
+ *
+ * Full design: `docs/initiatives/merge-track-record.md`.
+ */
+export declare class MergeTrackRecordService {
+    private readonly deps;
+    constructor(deps: MergeTrackRecordServiceDependencies);
+    /**
+     * Classify a block's pull request from the files it changed — ONE VCS call, then the pure
+     * `classifyChangedFiles` precedence rule (highest-ranked class present wins).
+     *
+     * Returns `unknown` (never throws) when there is no repo context, the bound client cannot
+     * enumerate a PR's files, the block has no PR number, or the call fails. `unknown` is inert by
+     * design: `resolveMergeClassRule` never matches it, so a transient VCS outage can neither
+     * widen nor tighten the merge policy.
+     */
+    classify(workspaceId: string, block: Block): Promise<RunClassification>;
+    /**
+     * Record a merger step's decision. Idempotent by construction: the id is derived from the
+     * run (`mtr_<executionId>`) and the insert is first-write-wins, so the durable driver
+     * re-resolving a step whose merge already landed cannot duplicate the row — nor clobber an
+     * effort tag a human has since added.
+     *
+     * Returns the stored record, or null when nothing could be written (no repository, or the
+     * write threw). Callers treat null as "no record" and carry on: the merge is what matters.
+     */
+    recordDecision(workspaceId: string, input: RecordMergeDecisionInput): Promise<MergeTrackRecord | null>;
+    /**
+     * Settle a record that was left `pending_review` once a human resolved it — merged it through
+     * cat-factory, merged it on the provider, or declined. Optionally tags the review effort in
+     * the same write (the merge card's one-tap confirm-and-tag).
+     *
+     * Best-effort and silent: a run with no record (classification never ran, or the merge came
+     * from a pipeline with no `merger` step) is simply skipped. Returns the record's id when one
+     * was updated, so a caller can put it on a notification payload.
+     *
+     * Only a still-`pending_review` record is SETTLED here, mirroring {@link recordExternalMerge}:
+     * a landed PR must never be re-decided by a late action on a stale card. The concrete case is
+     * a PR merged on the provider (recorded `external_merged`) whose merge-review card is then
+     * dismissed — without this guard that dismissal would rewrite a merged PR as `rejected` and
+     * corrupt the very rollup the record exists to produce. A later EFFORT TAG is still applied,
+     * because tagging is orthogonal to the decision and is welcome whenever it arrives.
+     */
+    resolveDecision(workspaceId: string, executionId: string, decision: Exclude<MergeTrackDecision, 'pending_review'>, reviewEffort?: ReviewEffort | null): Promise<string | null>;
+    /**
+     * Attribute an EXTERNAL merge: a human merged a PR directly on the VCS provider, bypassing
+     * cat-factory's merge card. Looks the record up by `(repoId, prNumber)` — which a merger-step
+     * record already carries — so no unindexed scan of the blocks' JSON PR column is needed, and
+     * the feature is correctly scoped to PRs cat-factory opened and was waiting on.
+     *
+     * Returns the settled record when this delivery is the one that flipped it (so the caller
+     * raises exactly ONE tag-request nudge), and null when there is nothing to attribute or the
+     * record was already resolved — webhook deliveries are re-sent, so this must be idempotent.
+     */
+    recordExternalMerge(workspaceId: string, repoId: string, prNumber: number): Promise<MergeTrackRecord | null>;
+    /** A record by id (for the tag surface and the notification card's context). */
+    get(workspaceId: string, id: string): Promise<MergeTrackRecord | null>;
+    /** The most recent record for a block — the seam the block-scoped merge controls tag through. */
+    getLatestByBlock(workspaceId: string, blockId: string): Promise<MergeTrackRecord | null>;
+    /**
+     * Tag (or clear) how much review effort a human spent. Unlike the write paths above this is a
+     * deliberate user action, so an unknown id is a real 404 rather than a silent skip.
+     */
+    tag(workspaceId: string, id: string, reviewEffort: ReviewEffort | null): Promise<MergeTrackRecord>;
+    /**
+     * Per-change-class rollups for the workspace: ONE SQL aggregate, then every class the query
+     * returned nothing for is filled in as an empty rollup so the caller always gets the full,
+     * stably-ordered set (the preset editor renders a row per class whether or not it has data).
+     */
+    rollups(workspaceId: string): Promise<MergeClassRollup[]>;
+}
+//# sourceMappingURL=MergeTrackRecordService.d.ts.map

package/dist/modules/merge/MergeTrackRecordService.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"MergeTrackRecordService.d.ts","sourceRoot":"","sources":["../../../src/modules/merge/MergeTrackRecordService.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,KAAK,EACL,WAAW,EACX,KAAK,EACL,eAAe,EACf,gBAAgB,EAChB,kBAAkB,EAClB,gBAAgB,EAChB,0BAA0B,EAC1B,qBAAqB,EACrB,YAAY,EACZ,WAAW,EACX,mBAAmB,EACpB,MAAM,qBAAqB,CAAA;AAI5B,kFAAkF;AAClF,MAAM,WAAW,iBAAiB;IAChC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACtB,QAAQ,CAAC,EAAE,WAAW,GAAG,IAAI,CAAA;CAC9B;AAED,sFAAsF;AACtF,MAAM,WAAW,wBAAwB;IACvC,KAAK,EAAE,KAAK,CAAA;IACZ,WAAW,EAAE,MAAM,CAAA;IACnB,QAAQ,EAAE,kBAAkB,CAAA;IAC5B,oEAAoE;IACpE,UAAU,CAAC,EAAE,eAAe,GAAG,IAAI,CAAA;IACnC,6FAA6F;IAC7F,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5B,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC9B;;;;;OAKG;IACH,cAAc,CAAC,EAAE,iBAAiB,CAAA;IAClC,mFAAmF;IACnF,IAAI,CAAC,EAAE,iBAAiB,CAAA;CACzB;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,iBAAiB;IAChC,WAAW,EAAE,WAAW,CAAA;IACxB,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACtB,QAAQ,CAAC,EAAE,WAAW,GAAG,IAAI,CAAA;CAC9B;AAED,MAAM,WAAW,mCAAmC;IAClD,0BAA0B,EAAE,0BAA0B,CAAA;IACtD,mBAAmB,EAAE,mBAAmB,CAAA;IACxC,KAAK,EAAE,KAAK,CAAA;IACZ;;;;OAIG;IACH,qBAAqB,CAAC,EAAE,qBAAqB,CAAA;CAC9C;AAED;;;;;;;;;;;GAWG;AACH,qBAAa,uBAAuB;IACtB,OAAO,CAAC,QAAQ,CAAC,IAAI;IAAjC,YAA6B,IAAI,EAAE,mCAAmC,EAAI;IAE1E;;;;;;;;OAQG;IACG,QAAQ,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAiB5E;IAED;;;;;;;;OAQG;IACG,cAAc,CAClB,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,wBAAwB,GAC9B,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CA8BlC;IAED;;;;;;;;;;;;;;;OAeG;IACG,eAAe,CACnB,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,OAAO,CAAC,kBAAkB,EAAE,gBAAgB,CAAC,EACvD,YAAY,CAAC,EAAE,YAAY,GAAG,IAAI,GACjC,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAqBxB;IAED;;;;;;;;;OASG;IACG,mBAAmB,CACvB,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAoBlC;IAED,gFAAgF;IAC1E,GAAG,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAG3E;IAED,iGAAiG;IAC3F,gBAAgB,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAG7F;IAED;;;OAGG;IACG,GAAG,CACP,WAAW,EAAE,MAAM,EACnB,EAAE,EAAE,MAAM,EACV,YAAY,EAAE,YAAY,GAAG,IAAI,GAChC,OAAO,CAAC,gBAAgB,CAAC,CAU3B;IAED;;;;OAIG;IACG,OAAO,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAK9D;CACF"}

package/dist/modules/merge/MergeTrackRecordService.js

@@ -0,0 +1,191 @@
+import { CHANGE_CLASSES, emptyMergeClassRollup } from '@cat-factory/contracts';
+import { assertFound, classifyChangedFiles, requireWorkspace } from '@cat-factory/kernel';
+/**
+ * The merge TRACK RECORD: one persisted row per merge decision carrying the run's
+ * deterministic change class, the merger's scores, what happened, and the reviewer-effort tag a
+ * human left — plus the per-class rollups that justify widening a preset's per-class rule.
+ *
+ * Every write here is a **best-effort side channel of the merge path**: `classify` and
+ * `recordDecision` swallow their own failures and return a degraded-but-valid result, because a
+ * classification or persistence fault must NEVER block or fail a merge. The read paths
+ * (`rollups`, `tag`) are ordinary request-scoped operations and do throw.
+ *
+ * Full design: `docs/initiatives/merge-track-record.md`.
+ */
+export class MergeTrackRecordService {
+    deps;
+    constructor(deps) {
+        this.deps = deps;
+    }
+    /**
+     * Classify a block's pull request from the files it changed — ONE VCS call, then the pure
+     * `classifyChangedFiles` precedence rule (highest-ranked class present wins).
+     *
+     * Returns `unknown` (never throws) when there is no repo context, the bound client cannot
+     * enumerate a PR's files, the block has no PR number, or the call fails. `unknown` is inert by
+     * design: `resolveMergeClassRule` never matches it, so a transient VCS outage can neither
+     * widen nor tighten the merge policy.
+     */
+    async classify(workspaceId, block) {
+        const absent = { changeClass: 'unknown', fileCount: 0 };
+        const prNumber = block.pullRequest?.number;
+        if (prNumber == null)
+            return absent;
+        try {
+            const ctx = await this.deps.resolveRunRepoContext?.(workspaceId, block.id);
+            if (!ctx)
+                return absent;
+            // Capture the repo identity even when the changed-file list is unreadable: the class then
+            // degrades to `unknown` (inert by design), but the record stays ATTRIBUTABLE, so a PR later
+            // merged on the provider is still matched by `(repoId, prNumber)`.
+            const repo = { repoId: ctx.repoId, provider: ctx.provider ?? null };
+            const files = await ctx.repo.listChangedFiles?.(prNumber);
+            if (!files)
+                return { ...absent, ...repo };
+            return { ...classifyChangedFiles(files.map((f) => f.path)), ...repo };
+        }
+        catch {
+            return absent;
+        }
+    }
+    /**
+     * Record a merger step's decision. Idempotent by construction: the id is derived from the
+     * run (`mtr_<executionId>`) and the insert is first-write-wins, so the durable driver
+     * re-resolving a step whose merge already landed cannot duplicate the row — nor clobber an
+     * effort tag a human has since added.
+     *
+     * Returns the stored record, or null when nothing could be written (no repository, or the
+     * write threw). Callers treat null as "no record" and carry on: the merge is what matters.
+     */
+    async recordDecision(workspaceId, input) {
+        try {
+            const now = this.deps.clock.now();
+            const classification = input.classification ?? (await this.classify(workspaceId, input.block));
+            const terminal = input.decision !== 'pending_review';
+            const record = {
+                id: `mtr_${input.executionId}`,
+                blockId: input.block.id,
+                executionId: input.executionId,
+                changeClass: classification.changeClass,
+                changedFileCount: classification.fileCount > 0 ? classification.fileCount : null,
+                complexity: input.assessment?.complexity ?? null,
+                risk: input.assessment?.risk ?? null,
+                impact: input.assessment?.impact ?? null,
+                riskPolicyId: input.riskPolicyId ?? null,
+                riskPolicyName: input.riskPolicyName ?? null,
+                decision: input.decision,
+                reviewEffort: null,
+                prNumber: input.block.pullRequest?.number ?? null,
+                prUrl: input.block.pullRequest?.url ?? null,
+                repoId: input.repo?.repoId ?? classification.repoId ?? null,
+                provider: input.repo?.provider ?? classification.provider ?? null,
+                createdAt: now,
+                resolvedAt: terminal ? now : null,
+                taggedAt: null,
+            };
+            return await this.deps.mergeTrackRecordRepository.insertIfAbsent(workspaceId, record);
+        }
+        catch {
+            return null;
+        }
+    }
+    /**
+     * Settle a record that was left `pending_review` once a human resolved it — merged it through
+     * cat-factory, merged it on the provider, or declined. Optionally tags the review effort in
+     * the same write (the merge card's one-tap confirm-and-tag).
+     *
+     * Best-effort and silent: a run with no record (classification never ran, or the merge came
+     * from a pipeline with no `merger` step) is simply skipped. Returns the record's id when one
+     * was updated, so a caller can put it on a notification payload.
+     *
+     * Only a still-`pending_review` record is SETTLED here, mirroring {@link recordExternalMerge}:
+     * a landed PR must never be re-decided by a late action on a stale card. The concrete case is
+     * a PR merged on the provider (recorded `external_merged`) whose merge-review card is then
+     * dismissed — without this guard that dismissal would rewrite a merged PR as `rejected` and
+     * corrupt the very rollup the record exists to produce. A later EFFORT TAG is still applied,
+     * because tagging is orthogonal to the decision and is welcome whenever it arrives.
+     */
+    async resolveDecision(workspaceId, executionId, decision, reviewEffort) {
+        try {
+            const existing = await this.deps.mergeTrackRecordRepository.getByExecution(workspaceId, executionId);
+            if (!existing)
+                return null;
+            const now = this.deps.clock.now();
+            const settled = existing.decision !== 'pending_review';
+            const tag = reviewEffort !== undefined ? { reviewEffort, taggedAt: reviewEffort ? now : null } : {};
+            if (settled && Object.keys(tag).length === 0)
+                return existing.id;
+            await this.deps.mergeTrackRecordRepository.patch(workspaceId, existing.id, {
+                // An already-terminal decision stands; only the tag is folded in.
+                ...(settled ? {} : { decision, resolvedAt: now }),
+                ...tag,
+            });
+            return existing.id;
+        }
+        catch {
+            return null;
+        }
+    }
+    /**
+     * Attribute an EXTERNAL merge: a human merged a PR directly on the VCS provider, bypassing
+     * cat-factory's merge card. Looks the record up by `(repoId, prNumber)` — which a merger-step
+     * record already carries — so no unindexed scan of the blocks' JSON PR column is needed, and
+     * the feature is correctly scoped to PRs cat-factory opened and was waiting on.
+     *
+     * Returns the settled record when this delivery is the one that flipped it (so the caller
+     * raises exactly ONE tag-request nudge), and null when there is nothing to attribute or the
+     * record was already resolved — webhook deliveries are re-sent, so this must be idempotent.
+     */
+    async recordExternalMerge(workspaceId, repoId, prNumber) {
+        try {
+            const existing = await this.deps.mergeTrackRecordRepository.getByPullRequest(workspaceId, repoId, prNumber);
+            // Only a still-pending record is attributable. An already-resolved one either merged
+            // through cat-factory (this delivery is the echo of our own merge) or was already
+            // attributed by an earlier redelivery.
+            if (!existing || existing.decision !== 'pending_review')
+                return null;
+            const now = this.deps.clock.now();
+            await this.deps.mergeTrackRecordRepository.patch(workspaceId, existing.id, {
+                decision: 'external_merged',
+                resolvedAt: now,
+            });
+            return { ...existing, decision: 'external_merged', resolvedAt: now };
+        }
+        catch {
+            return null;
+        }
+    }
+    /** A record by id (for the tag surface and the notification card's context). */
+    async get(workspaceId, id) {
+        await requireWorkspace(this.deps.workspaceRepository, workspaceId);
+        return this.deps.mergeTrackRecordRepository.get(workspaceId, id);
+    }
+    /** The most recent record for a block — the seam the block-scoped merge controls tag through. */
+    async getLatestByBlock(workspaceId, blockId) {
+        await requireWorkspace(this.deps.workspaceRepository, workspaceId);
+        return this.deps.mergeTrackRecordRepository.getLatestByBlock(workspaceId, blockId);
+    }
+    /**
+     * Tag (or clear) how much review effort a human spent. Unlike the write paths above this is a
+     * deliberate user action, so an unknown id is a real 404 rather than a silent skip.
+     */
+    async tag(workspaceId, id, reviewEffort) {
+        await requireWorkspace(this.deps.workspaceRepository, workspaceId);
+        const existing = assertFound(await this.deps.mergeTrackRecordRepository.get(workspaceId, id), 'MergeTrackRecord', id);
+        const taggedAt = reviewEffort ? this.deps.clock.now() : null;
+        await this.deps.mergeTrackRecordRepository.patch(workspaceId, id, { reviewEffort, taggedAt });
+        return { ...existing, reviewEffort, taggedAt };
+    }
+    /**
+     * Per-change-class rollups for the workspace: ONE SQL aggregate, then every class the query
+     * returned nothing for is filled in as an empty rollup so the caller always gets the full,
+     * stably-ordered set (the preset editor renders a row per class whether or not it has data).
+     */
+    async rollups(workspaceId) {
+        await requireWorkspace(this.deps.workspaceRepository, workspaceId);
+        const rows = await this.deps.mergeTrackRecordRepository.rollupByClass(workspaceId);
+        const byClass = new Map(rows.map((r) => [r.changeClass, r]));
+        return CHANGE_CLASSES.map((c) => byClass.get(c) ?? emptyMergeClassRollup(c));
+    }
+}
+//# sourceMappingURL=MergeTrackRecordService.js.map

package/dist/modules/merge/MergeTrackRecordService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"MergeTrackRecordService.js","sourceRoot":"","sources":["../../../src/modules/merge/MergeTrackRecordService.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,cAAc,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAA;AAC9E,OAAO,EAAE,WAAW,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAA;AA0DzF;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,uBAAuB;IACL,IAAI;IAAjC,YAA6B,IAAyC;oBAAzC,IAAI;IAAwC,CAAC;IAE1E;;;;;;;;OAQG;IACH,KAAK,CAAC,QAAQ,CAAC,WAAmB,EAAE,KAAY;QAC9C,MAAM,MAAM,GAAsB,EAAE,WAAW,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,EAAE,CAAA;QAC1E,MAAM,QAAQ,GAAG,KAAK,CAAC,WAAW,EAAE,MAAM,CAAA;QAC1C,IAAI,QAAQ,IAAI,IAAI;YAAE,OAAO,MAAM,CAAA;QACnC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,qBAAqB,EAAE,CAAC,WAAW,EAAE,KAAK,CAAC,EAAE,CAAC,CAAA;YAC1E,IAAI,CAAC,GAAG;gBAAE,OAAO,MAAM,CAAA;YACvB,0FAA0F;YAC1F,4FAA4F;YAC5F,mEAAmE;YACnE,MAAM,IAAI,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,IAAI,IAAI,EAAE,CAAA;YACnE,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC,QAAQ,CAAC,CAAA;YACzD,IAAI,CAAC,KAAK;gBAAE,OAAO,EAAE,GAAG,MAAM,EAAE,GAAG,IAAI,EAAE,CAAA;YACzC,OAAO,EAAE,GAAG,oBAAoB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,CAAA;QACvE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,MAAM,CAAA;QACf,CAAC;IACH,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,cAAc,CAClB,WAAmB,EACnB,KAA+B;QAE/B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAA;YACjC,MAAM,cAAc,GAAG,KAAK,CAAC,cAAc,IAAI,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAA;YAC9F,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,KAAK,gBAAgB,CAAA;YACpD,MAAM,MAAM,GAAqB;gBAC/B,EAAE,EAAE,OAAO,KAAK,CAAC,WAAW,EAAE;gBAC9B,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE;gBACvB,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,WAAW,EAAE,cAAc,CAAC,WAAW;gBACvC,gBAAgB,EAAE,cAAc,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI;gBAChF,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,UAAU,IAAI,IAAI;gBAChD,IAAI,EAAE,KAAK,CAAC,UAAU,EAAE,IAAI,IAAI,IAAI;gBACpC,MAAM,EAAE,KAAK,CAAC,UAAU,EAAE,MAAM,IAAI,IAAI;gBACxC,YAAY,EAAE,KAAK,CAAC,YAAY,IAAI,IAAI;gBACxC,cAAc,EAAE,KAAK,CAAC,cAAc,IAAI,IAAI;gBAC5C,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,YAAY,EAAE,IAAI;gBAClB,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,WAAW,EAAE,MAAM,IAAI,IAAI;gBACjD,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG,IAAI,IAAI;gBAC3C,MAAM,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,IAAI,cAAc,CAAC,MAAM,IAAI,IAAI;gBAC3D,QAAQ,EAAE,KAAK,CAAC,IAAI,EAAE,QAAQ,IAAI,cAAc,CAAC,QAAQ,IAAI,IAAI;gBACjE,SAAS,EAAE,GAAG;gBACd,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI;gBACjC,QAAQ,EAAE,IAAI;aACf,CAAA;YACD,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,0BAA0B,CAAC,cAAc,CAAC,WAAW,EAAE,MAAM,CAAC,CAAA;QACvF,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAA;QACb,CAAC;IACH,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IACH,KAAK,CAAC,eAAe,CACnB,WAAmB,EACnB,WAAmB,EACnB,QAAuD,EACvD,YAAkC;QAElC,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,0BAA0B,CAAC,cAAc,CACxE,WAAW,EACX,WAAW,CACZ,CAAA;YACD,IAAI,CAAC,QAAQ;gBAAE,OAAO,IAAI,CAAA;YAC1B,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAA;YACjC,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,KAAK,gBAAgB,CAAA;YACtD,MAAM,GAAG,GACP,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;YACzF,IAAI,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,QAAQ,CAAC,EAAE,CAAA;YAChE,MAAM,IAAI,CAAC,IAAI,CAAC,0BAA0B,CAAC,KAAK,CAAC,WAAW,EAAE,QAAQ,CAAC,EAAE,EAAE;gBACzE,kEAAkE;gBAClE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC;gBACjD,GAAG,GAAG;aACP,CAAC,CAAA;YACF,OAAO,QAAQ,CAAC,EAAE,CAAA;QACpB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAA;QACb,CAAC;IACH,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,mBAAmB,CACvB,WAAmB,EACnB,MAAc,EACd,QAAgB;QAEhB,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,0BAA0B,CAAC,gBAAgB,CAC1E,WAAW,EACX,MAAM,EACN,QAAQ,CACT,CAAA;YACD,qFAAqF;YACrF,kFAAkF;YAClF,uCAAuC;YACvC,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,QAAQ,KAAK,gBAAgB;gBAAE,OAAO,IAAI,CAAA;YACpE,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAA;YACjC,MAAM,IAAI,CAAC,IAAI,CAAC,0BAA0B,CAAC,KAAK,CAAC,WAAW,EAAE,QAAQ,CAAC,EAAE,EAAE;gBACzE,QAAQ,EAAE,iBAAiB;gBAC3B,UAAU,EAAE,GAAG;aAChB,CAAC,CAAA;YACF,OAAO,EAAE,GAAG,QAAQ,EAAE,QAAQ,EAAE,iBAAiB,EAAE,UAAU,EAAE,GAAG,EAAE,CAAA;QACtE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAA;QACb,CAAC;IACH,CAAC;IAED,gFAAgF;IAChF,KAAK,CAAC,GAAG,CAAC,WAAmB,EAAE,EAAU;QACvC,MAAM,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,WAAW,CAAC,CAAA;QAClE,OAAO,IAAI,CAAC,IAAI,CAAC,0BAA0B,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC,CAAA;IAClE,CAAC;IAED,iGAAiG;IACjG,KAAK,CAAC,gBAAgB,CAAC,WAAmB,EAAE,OAAe;QACzD,MAAM,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,WAAW,CAAC,CAAA;QAClE,OAAO,IAAI,CAAC,IAAI,CAAC,0BAA0B,CAAC,gBAAgB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAA;IACpF,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,GAAG,CACP,WAAmB,EACnB,EAAU,EACV,YAAiC;QAEjC,MAAM,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,WAAW,CAAC,CAAA;QAClE,MAAM,QAAQ,GAAG,WAAW,CAC1B,MAAM,IAAI,CAAC,IAAI,CAAC,0BAA0B,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC,EAC/D,kBAAkB,EAClB,EAAE,CACH,CAAA;QACD,MAAM,QAAQ,GAAG,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAA;QAC5D,MAAM,IAAI,CAAC,IAAI,CAAC,0BAA0B,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,EAAE,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC,CAAA;QAC7F,OAAO,EAAE,GAAG,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAA;IAChD,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,OAAO,CAAC,WAAmB;QAC/B,MAAM,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,WAAW,CAAC,CAAA;QAClE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,0BAA0B,CAAC,aAAa,CAAC,WAAW,CAAC,CAAA;QAClF,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;QAC5D,OAAO,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,qBAAqB,CAAC,CAAC,CAAC,CAAC,CAAA;IAC9E,CAAC;CACF"}

package/dist/modules/merge/RiskPolicyService.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"RiskPolicyService.d.ts","sourceRoot":"","sources":["../../../src/modules/merge/RiskPolicyService.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,KAAK,EACL,qBAAqB,EACrB,gBAAgB,EAChB,WAAW,EACX,oBAAoB,EACpB,UAAU,EACV,oBAAoB,EACpB,qBAAqB,EACrB,mBAAmB,EACpB,MAAM,qBAAqB,CAAA;AAU5B,MAAM,WAAW,6BAA6B;IAC5C,oBAAoB,EAAE,oBAAoB,CAAA;IAC1C,mBAAmB,EAAE,mBAAmB,CAAA;IACxC,WAAW,EAAE,WAAW,CAAA;IACxB,KAAK,EAAE,KAAK,CAAA;IACZ;;;;OAIG;IACH,eAAe,CAAC,EAAE,gBAAgB,CAAC,oBAAoB,CAAC,CAAA;CACzD;AAED;;;;;;;;GAQG;AACH,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAsB;IAC9C,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAqB;IACzD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAa;IACzC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAO;IAC7B,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAwC;IAE/D,YAAY,IAAI,EAAE,6BAA6B,EAM9C;IAED;;;;OAIG;YACW,UAAU;IAIxB,kFAAkF;IAC5E,IAAI,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,CAIrD;IAED,uFAAuF;IACjF,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,qBAAqB,GAAG,OAAO,CAAC,UAAU,CAAC,CAyBnF;IAED,+EAA+E;IACzE,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,qBAAqB,GAAG,OAAO,CAAC,UAAU,CAAC,CAsC/F;IAED,6DAA6D;IACvD,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAQ3D;IAED;;;;;;;;;;;OAWG;IACG,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAuBjE;IAED,sFAAsF;YACxE,YAAY;IAiB1B,2FAA2F;IAC3F,OAAO,CAAC,QAAQ;CAoBjB"}
+{"version":3,"file":"RiskPolicyService.d.ts","sourceRoot":"","sources":["../../../src/modules/merge/RiskPolicyService.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,KAAK,EACL,qBAAqB,EACrB,gBAAgB,EAChB,WAAW,EACX,oBAAoB,EACpB,UAAU,EACV,oBAAoB,EACpB,qBAAqB,EACrB,mBAAmB,EACpB,MAAM,qBAAqB,CAAA;AAU5B,MAAM,WAAW,6BAA6B;IAC5C,oBAAoB,EAAE,oBAAoB,CAAA;IAC1C,mBAAmB,EAAE,mBAAmB,CAAA;IACxC,WAAW,EAAE,WAAW,CAAA;IACxB,KAAK,EAAE,KAAK,CAAA;IACZ;;;;OAIG;IACH,eAAe,CAAC,EAAE,gBAAgB,CAAC,oBAAoB,CAAC,CAAA;CACzD;AAED;;;;;;;;GAQG;AACH,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAsB;IAC9C,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAqB;IACzD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAa;IACzC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAO;IAC7B,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAwC;IAE/D,YAAY,IAAI,EAAE,6BAA6B,EAM9C;IAED;;;;OAIG;YACW,UAAU;IAIxB,kFAAkF;IAC5E,IAAI,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,CAIrD;IAED,uFAAuF;IACjF,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,qBAAqB,GAAG,OAAO,CAAC,UAAU,CAAC,CA0BnF;IAED,+EAA+E;IACzE,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,qBAAqB,GAAG,OAAO,CAAC,UAAU,CAAC,CAyC/F;IAED,6DAA6D;IACvD,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAQ3D;IAED;;;;;;;;;;;OAWG;IACG,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAuBjE;IAED,sFAAsF;YACxE,YAAY;IAiB1B,2FAA2F;IAC3F,OAAO,CAAC,QAAQ;CAqBjB"}

package/dist/modules/merge/RiskPolicyService.js

@@ -54,6 +54,7 @@ export class RiskPolicyService {
             humanReviewGraceMinutes: input.humanReviewGraceMinutes,
             autoMergeEnabled: input.autoMergeEnabled,
             forkDecision: input.forkDecision ?? null,
+            classRules: input.classRules,
             // The very first preset must be the default; otherwise honour the request.
             isDefault: existing.length === 0 ? true : input.isDefault,
             createdAt: this.clock.now(),
@@ -96,6 +97,9 @@ export class RiskPolicyService {
                 : {}),
             ...(patch.autoMergeEnabled !== undefined ? { autoMergeEnabled: patch.autoMergeEnabled } : {}),
             ...(patch.forkDecision !== undefined ? { forkDecision: patch.forkDecision } : {}),
+            // Replaces the whole map rather than merging, so clearing a class's rule is a plain
+            // omission from the submitted set (there is no "delete this one key" wire shape).
+            ...(patch.classRules !== undefined ? { classRules: patch.classRules } : {}),
             ...(patch.isDefault !== undefined ? { isDefault: patch.isDefault } : {}),
         };
         await this.presets.upsert(workspaceId, updated);
@@ -181,6 +185,7 @@ export class RiskPolicyService {
             humanReviewGraceMinutes: seed.humanReviewGraceMinutes,
             autoMergeEnabled: seed.autoMergeEnabled,
             forkDecision: seed.forkDecision,
+            classRules: seed.classRules,
             isDefault: seed.isDefault,
             version: seed.version,
         };

package/dist/modules/merge/RiskPolicyService.js.map

@@ -1 +1 @@
-{"version":3,"file":"RiskPolicyService.js","sourceRoot":"","sources":["../../../src/modules/merge/RiskPolicyService.ts"],"names":[],"mappings":"AAWA,OAAO,EACL,WAAW,EACX,aAAa,EACb,gBAAgB,EAChB,gBAAgB,EAChB,eAAe,GAChB,MAAM,qBAAqB,CAAA;AAgB5B;;;;;;;;GAQG;AACH,MAAM,OAAO,iBAAiB;IACX,OAAO,CAAsB;IAC7B,mBAAmB,CAAqB;IACxC,WAAW,CAAa;IACxB,KAAK,CAAO;IACZ,KAAK,CAAyC;IAE/D,YAAY,IAAmC;QAC7C,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,oBAAoB,CAAA;QACxC,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC,mBAAmB,CAAA;QACnD,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAA;QACnC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAA;QACvB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,eAAe,CAAA;IACnC,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,UAAU,CAAC,WAAmB;QAC1C,MAAM,IAAI,CAAC,KAAK,EAAE,eAAe,CAAC,WAAW,CAAC,CAAA;IAChD,CAAC;IAED,kFAAkF;IAClF,KAAK,CAAC,IAAI,CAAC,WAAmB;QAC5B,MAAM,gBAAgB,CAAC,IAAI,CAAC,mBAAmB,EAAE,WAAW,CAAC,CAAA;QAC7D,MAAM,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,CAAA;QACpC,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;IACvC,CAAC;IAED,uFAAuF;IACvF,KAAK,CAAC,MAAM,CAAC,WAAmB,EAAE,KAA4B;QAC5D,MAAM,gBAAgB,CAAC,IAAI,CAAC,mBAAmB,EAAE,WAAW,CAAC,CAAA;QAC7D,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;QACrD,MAAM,MAAM,GAAe;YACzB,EAAE,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC;YAC/B,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,wBAAwB,EAAE,KAAK,CAAC,wBAAwB;YACxD,4BAA4B,EAAE,KAAK,CAAC,4BAA4B;YAChE,0BAA0B,EAAE,KAAK,CAAC,0BAA0B;YAC5D,yBAAyB,EAAE,KAAK,CAAC,yBAAyB;YAC1D,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;YAC5C,uBAAuB,EAAE,KAAK,CAAC,uBAAuB;YACtD,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;YACxC,YAAY,EAAE,KAAK,CAAC,YAAY,IAAI,IAAI;YACxC,2EAA2E;YAC3E,SAAS,EAAE,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS;YACzD,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE;SAC5B,CAAA;QACD,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,CAAA;QAC9C,MAAM,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,CAAA;QAClC,OAAO,MAAM,CAAA;IACf,CAAC;IAED,+EAA+E;IAC/E,KAAK,CAAC,MAAM,CAAC,WAAmB,EAAE,EAAU,EAAE,KAA4B;QACxE,MAAM,gBAAgB,CAAC,IAAI,CAAC,mBAAmB,EAAE,WAAW,CAAC,CAAA;QAC7D,MAAM,QAAQ,GAAG,WAAW,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC,EAAE,YAAY,EAAE,EAAE,CAAC,CAAA;QACvF,IAAI,QAAQ,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS,KAAK,KAAK,EAAE,CAAC;YACpD,MAAM,IAAI,aAAa,CAAC,kEAAkE,CAAC,CAAA;QAC7F,CAAC;QACD,MAAM,OAAO,GAAe;YAC1B,GAAG,QAAQ;YACX,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzD,GAAG,CAAC,KAAK,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpF,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClE,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxE,GAAG,CAAC,KAAK,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpF,GAAG,CAAC,KAAK,CAAC,wBAAwB,KAAK,SAAS;gBAC9C,CAAC,CAAC,EAAE,wBAAwB,EAAE,KAAK,CAAC,wBAAwB,EAAE;gBAC9D,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,KAAK,CAAC,4BAA4B,KAAK,SAAS;gBAClD,CAAC,CAAC,EAAE,4BAA4B,EAAE,KAAK,CAAC,4BAA4B,EAAE;gBACtE,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,KAAK,CAAC,0BAA0B,KAAK,SAAS;gBAChD,CAAC,CAAC,EAAE,0BAA0B,EAAE,KAAK,CAAC,0BAA0B,EAAE;gBAClE,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,KAAK,CAAC,yBAAyB,KAAK,SAAS;gBAC/C,CAAC,CAAC,EAAE,yBAAyB,EAAE,KAAK,CAAC,yBAAyB,EAAE;gBAChE,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,KAAK,CAAC,kBAAkB,KAAK,SAAS;gBACxC,CAAC,CAAC,EAAE,kBAAkB,EAAE,KAAK,CAAC,kBAAkB,EAAE;gBAClD,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,KAAK,CAAC,uBAAuB,KAAK,SAAS;gBAC7C,CAAC,CAAC,EAAE,uBAAuB,EAAE,KAAK,CAAC,uBAAuB,EAAE;gBAC5D,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,KAAK,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7F,GAAG,CAAC,KAAK,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjF,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACzE,CAAA;QACD,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,CAAA;QAC/C,MAAM,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,CAAA;QAClC,OAAO,OAAO,CAAA;IAChB,CAAC;IAED,6DAA6D;IAC7D,KAAK,CAAC,MAAM,CAAC,WAAmB,EAAE,EAAU;QAC1C,MAAM,gBAAgB,CAAC,IAAI,CAAC,mBAAmB,EAAE,WAAW,CAAC,CAAA;QAC7D,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC,CAAA;QACxD,IAAI,QAAQ,EAAE,SAAS,EAAE,CAAC;YACxB,MAAM,IAAI,aAAa,CAAC,iEAAiE,CAAC,CAAA;QAC5F,CAAC;QACD,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC,CAAA;QAC1C,MAAM,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,CAAA;IACpC,CAAC;IAED;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,MAAM,CAAC,WAAmB,EAAE,EAAU;QAC1C,MAAM,gBAAgB,CAAC,IAAI,CAAC,mBAAmB,EAAE,WAAW,CAAC,CAAA;QAC7D,MAAM,IAAI,GAAG,gBAAgB,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAA;QACxD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,eAAe,CACvB,gBAAgB,EAAE,oGAAoG,CACvH,CAAA;QACH,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC,CAAA;QACxD,oFAAoF;QACpF,qFAAqF;QACrF,oFAAoF;QACpF,MAAM,SAAS,GAAG,QAAQ;YACxB,CAAC,CAAC,QAAQ,CAAC,SAAS;YACpB,CAAC,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,KAAK,IAAI,CAAA;QAC3E,MAAM,MAAM,GAAe;YACzB,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;YACtB,SAAS;YACT,SAAS,EAAE,QAAQ,EAAE,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE;SACnD,CAAA;QACD,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,CAAA;QAC9C,MAAM,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,CAAA;QAClC,OAAO,MAAM,CAAA;IACf,CAAC;IAED,sFAAsF;IAC9E,KAAK,CAAC,YAAY,CAAC,WAAmB;QAC5C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;QACpD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;YAAE,OAAM;QAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAA;QAC5B,mFAAmF;QACnF,IAAI,MAAM,GAAG,CAAC,CAAA;QACd,KAAK,MAAM,IAAI,IAAI,gBAAgB,EAAE,EAAE,CAAC;YACtC,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE;gBACrC,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;gBACtB,SAAS,EAAE,GAAG,GAAG,MAAM,EAAE;aAC1B,CAAC,CAAA;QACJ,CAAC;QACD,wFAAwF;QACxF,0FAA0F;QAC1F,MAAM,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,CAAA;IACpC,CAAC;IAED,2FAA2F;IACnF,QAAQ,CAAC,IAAoB;QACnC,OAAO;YACL,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,wBAAwB,EAAE,IAAI,CAAC,wBAAwB;YACvD,4BAA4B,EAAE,IAAI,CAAC,4BAA4B;YAC/D,0BAA0B,EAAE,IAAI,CAAC,0BAA0B;YAC3D,yBAAyB,EAAE,IAAI,CAAC,yBAAyB;YACzD,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;YAC3C,uBAAuB,EAAE,IAAI,CAAC,uBAAuB;YACrD,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;YACvC,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,OAAO,EAAE,IAAI,CAAC,OAAO;SACtB,CAAA;IACH,CAAC;CACF"}
+{"version":3,"file":"RiskPolicyService.js","sourceRoot":"","sources":["../../../src/modules/merge/RiskPolicyService.ts"],"names":[],"mappings":"AAWA,OAAO,EACL,WAAW,EACX,aAAa,EACb,gBAAgB,EAChB,gBAAgB,EAChB,eAAe,GAChB,MAAM,qBAAqB,CAAA;AAgB5B;;;;;;;;GAQG;AACH,MAAM,OAAO,iBAAiB;IACX,OAAO,CAAsB;IAC7B,mBAAmB,CAAqB;IACxC,WAAW,CAAa;IACxB,KAAK,CAAO;IACZ,KAAK,CAAyC;IAE/D,YAAY,IAAmC;QAC7C,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,oBAAoB,CAAA;QACxC,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC,mBAAmB,CAAA;QACnD,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAA;QACnC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAA;QACvB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,eAAe,CAAA;IACnC,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,UAAU,CAAC,WAAmB;QAC1C,MAAM,IAAI,CAAC,KAAK,EAAE,eAAe,CAAC,WAAW,CAAC,CAAA;IAChD,CAAC;IAED,kFAAkF;IAClF,KAAK,CAAC,IAAI,CAAC,WAAmB;QAC5B,MAAM,gBAAgB,CAAC,IAAI,CAAC,mBAAmB,EAAE,WAAW,CAAC,CAAA;QAC7D,MAAM,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,CAAA;QACpC,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;IACvC,CAAC;IAED,uFAAuF;IACvF,KAAK,CAAC,MAAM,CAAC,WAAmB,EAAE,KAA4B;QAC5D,MAAM,gBAAgB,CAAC,IAAI,CAAC,mBAAmB,EAAE,WAAW,CAAC,CAAA;QAC7D,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;QACrD,MAAM,MAAM,GAAe;YACzB,EAAE,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC;YAC/B,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,wBAAwB,EAAE,KAAK,CAAC,wBAAwB;YACxD,4BAA4B,EAAE,KAAK,CAAC,4BAA4B;YAChE,0BAA0B,EAAE,KAAK,CAAC,0BAA0B;YAC5D,yBAAyB,EAAE,KAAK,CAAC,yBAAyB;YAC1D,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;YAC5C,uBAAuB,EAAE,KAAK,CAAC,uBAAuB;YACtD,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;YACxC,YAAY,EAAE,KAAK,CAAC,YAAY,IAAI,IAAI;YACxC,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,2EAA2E;YAC3E,SAAS,EAAE,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS;YACzD,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE;SAC5B,CAAA;QACD,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,CAAA;QAC9C,MAAM,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,CAAA;QAClC,OAAO,MAAM,CAAA;IACf,CAAC;IAED,+EAA+E;IAC/E,KAAK,CAAC,MAAM,CAAC,WAAmB,EAAE,EAAU,EAAE,KAA4B;QACxE,MAAM,gBAAgB,CAAC,IAAI,CAAC,mBAAmB,EAAE,WAAW,CAAC,CAAA;QAC7D,MAAM,QAAQ,GAAG,WAAW,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC,EAAE,YAAY,EAAE,EAAE,CAAC,CAAA;QACvF,IAAI,QAAQ,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS,KAAK,KAAK,EAAE,CAAC;YACpD,MAAM,IAAI,aAAa,CAAC,kEAAkE,CAAC,CAAA;QAC7F,CAAC;QACD,MAAM,OAAO,GAAe;YAC1B,GAAG,QAAQ;YACX,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzD,GAAG,CAAC,KAAK,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpF,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClE,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxE,GAAG,CAAC,KAAK,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpF,GAAG,CAAC,KAAK,CAAC,wBAAwB,KAAK,SAAS;gBAC9C,CAAC,CAAC,EAAE,wBAAwB,EAAE,KAAK,CAAC,wBAAwB,EAAE;gBAC9D,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,KAAK,CAAC,4BAA4B,KAAK,SAAS;gBAClD,CAAC,CAAC,EAAE,4BAA4B,EAAE,KAAK,CAAC,4BAA4B,EAAE;gBACtE,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,KAAK,CAAC,0BAA0B,KAAK,SAAS;gBAChD,CAAC,CAAC,EAAE,0BAA0B,EAAE,KAAK,CAAC,0BAA0B,EAAE;gBAClE,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,KAAK,CAAC,yBAAyB,KAAK,SAAS;gBAC/C,CAAC,CAAC,EAAE,yBAAyB,EAAE,KAAK,CAAC,yBAAyB,EAAE;gBAChE,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,KAAK,CAAC,kBAAkB,KAAK,SAAS;gBACxC,CAAC,CAAC,EAAE,kBAAkB,EAAE,KAAK,CAAC,kBAAkB,EAAE;gBAClD,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,KAAK,CAAC,uBAAuB,KAAK,SAAS;gBAC7C,CAAC,CAAC,EAAE,uBAAuB,EAAE,KAAK,CAAC,uBAAuB,EAAE;gBAC5D,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,KAAK,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7F,GAAG,CAAC,KAAK,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjF,oFAAoF;YACpF,kFAAkF;YAClF,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3E,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACzE,CAAA;QACD,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,CAAA;QAC/C,MAAM,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,CAAA;QAClC,OAAO,OAAO,CAAA;IAChB,CAAC;IAED,6DAA6D;IAC7D,KAAK,CAAC,MAAM,CAAC,WAAmB,EAAE,EAAU;QAC1C,MAAM,gBAAgB,CAAC,IAAI,CAAC,mBAAmB,EAAE,WAAW,CAAC,CAAA;QAC7D,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC,CAAA;QACxD,IAAI,QAAQ,EAAE,SAAS,EAAE,CAAC;YACxB,MAAM,IAAI,aAAa,CAAC,iEAAiE,CAAC,CAAA;QAC5F,CAAC;QACD,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC,CAAA;QAC1C,MAAM,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,CAAA;IACpC,CAAC;IAED;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,MAAM,CAAC,WAAmB,EAAE,EAAU;QAC1C,MAAM,gBAAgB,CAAC,IAAI,CAAC,mBAAmB,EAAE,WAAW,CAAC,CAAA;QAC7D,MAAM,IAAI,GAAG,gBAAgB,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAA;QACxD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,eAAe,CACvB,gBAAgB,EAAE,oGAAoG,CACvH,CAAA;QACH,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC,CAAA;QACxD,oFAAoF;QACpF,qFAAqF;QACrF,oFAAoF;QACpF,MAAM,SAAS,GAAG,QAAQ;YACxB,CAAC,CAAC,QAAQ,CAAC,SAAS;YACpB,CAAC,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,KAAK,IAAI,CAAA;QAC3E,MAAM,MAAM,GAAe;YACzB,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;YACtB,SAAS;YACT,SAAS,EAAE,QAAQ,EAAE,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE;SACnD,CAAA;QACD,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,CAAA;QAC9C,MAAM,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,CAAA;QAClC,OAAO,MAAM,CAAA;IACf,CAAC;IAED,sFAAsF;IAC9E,KAAK,CAAC,YAAY,CAAC,WAAmB;QAC5C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;QACpD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;YAAE,OAAM;QAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAA;QAC5B,mFAAmF;QACnF,IAAI,MAAM,GAAG,CAAC,CAAA;QACd,KAAK,MAAM,IAAI,IAAI,gBAAgB,EAAE,EAAE,CAAC;YACtC,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE;gBACrC,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;gBACtB,SAAS,EAAE,GAAG,GAAG,MAAM,EAAE;aAC1B,CAAC,CAAA;QACJ,CAAC;QACD,wFAAwF;QACxF,0FAA0F;QAC1F,MAAM,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,CAAA;IACpC,CAAC;IAED,2FAA2F;IACnF,QAAQ,CAAC,IAAoB;QACnC,OAAO;YACL,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,wBAAwB,EAAE,IAAI,CAAC,wBAAwB;YACvD,4BAA4B,EAAE,IAAI,CAAC,4BAA4B;YAC/D,0BAA0B,EAAE,IAAI,CAAC,0BAA0B;YAC3D,yBAAyB,EAAE,IAAI,CAAC,yBAAyB;YACzD,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;YAC3C,uBAAuB,EAAE,IAAI,CAAC,uBAAuB;YACrD,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;YACvC,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,OAAO,EAAE,IAAI,CAAC,OAAO;SACtB,CAAA;IACH,CAAC;CACF"}

package/dist/modules/merge/externalMergeObserver.d.ts

@@ -0,0 +1,27 @@
+import type { MergeTrackRecordService } from './MergeTrackRecordService.js';
+import type { NotificationService } from '../notifications/NotificationService.js';
+export interface ExternalMergeObserverDeps {
+    trackRecord: MergeTrackRecordService;
+    /** Absent ⇒ the record is still attributed, just without the tag-request nudge. */
+    notifications?: NotificationService;
+}
+/**
+ * Build the observer the GitHub/GitLab webhook ingest calls when a pull request is merged
+ * OUTSIDE cat-factory — a human clicking merge on the provider rather than acting on the
+ * merge-review card. Two things follow:
+ *
+ *  1. The run's merge track record is attributed `external_merged` (it would otherwise sit at
+ *     `pending_review` forever, overstating the class's un-decided share).
+ *  2. A `merge_tag_request` card asks for the one-tap reviewer-effort tag that the merge card
+ *     would have collected. It is a NUDGE: dismissible, gates nothing, and the record stays
+ *     perfectly valid untagged.
+ *
+ * `recordExternalMerge` returns a record ONLY on the delivery that actually flipped it, so a
+ * webhook redelivery — or the echo of cat-factory's own merge — raises no duplicate card.
+ *
+ * Lives in orchestration (not integrations) because it spans the track record and the
+ * notification inbox; the webhook service itself sees only a narrow
+ * `(workspaceId, repoId, prNumber)` callback and knows nothing about either.
+ */
+export declare function makeExternalMergeObserver(deps: ExternalMergeObserverDeps): (workspaceId: string, repoId: string, prNumber: number) => Promise<void>;
+//# sourceMappingURL=externalMergeObserver.d.ts.map

package/dist/modules/merge/externalMergeObserver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"externalMergeObserver.d.ts","sourceRoot":"","sources":["../../../src/modules/merge/externalMergeObserver.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAA;AAC3E,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,yCAAyC,CAAA;AAElF,MAAM,WAAW,yBAAyB;IACxC,WAAW,EAAE,uBAAuB,CAAA;IACpC,mFAAmF;IACnF,aAAa,CAAC,EAAE,mBAAmB,CAAA;CACpC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,yBAAyB,GAC9B,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAoB1E"}

package/dist/modules/merge/externalMergeObserver.js

@@ -0,0 +1,40 @@
+/**
+ * Build the observer the GitHub/GitLab webhook ingest calls when a pull request is merged
+ * OUTSIDE cat-factory — a human clicking merge on the provider rather than acting on the
+ * merge-review card. Two things follow:
+ *
+ *  1. The run's merge track record is attributed `external_merged` (it would otherwise sit at
+ *     `pending_review` forever, overstating the class's un-decided share).
+ *  2. A `merge_tag_request` card asks for the one-tap reviewer-effort tag that the merge card
+ *     would have collected. It is a NUDGE: dismissible, gates nothing, and the record stays
+ *     perfectly valid untagged.
+ *
+ * `recordExternalMerge` returns a record ONLY on the delivery that actually flipped it, so a
+ * webhook redelivery — or the echo of cat-factory's own merge — raises no duplicate card.
+ *
+ * Lives in orchestration (not integrations) because it spans the track record and the
+ * notification inbox; the webhook service itself sees only a narrow
+ * `(workspaceId, repoId, prNumber)` callback and knows nothing about either.
+ */
+export function makeExternalMergeObserver(deps) {
+    return async (workspaceId, repoId, prNumber) => {
+        const record = await deps.trackRecord.recordExternalMerge(workspaceId, repoId, prNumber);
+        if (!record)
+            return;
+        await deps.notifications?.raise(workspaceId, {
+            type: 'merge_tag_request',
+            blockId: record.blockId,
+            executionId: record.executionId,
+            title: 'How much review did that PR need?',
+            body: `This PR was merged directly on the provider, so its review effort was not recorded. ` +
+                `One tap tells the merge policy how much review a ${record.changeClass} change actually ` +
+                `needed — or dismiss this card.`,
+            payload: {
+                ...(record.prUrl ? { prUrl: record.prUrl } : {}),
+                ...(record.changeClass !== 'unknown' ? { changeClass: record.changeClass } : {}),
+                mergeTrackRecordId: record.id,
+            },
+        });
+    };
+}
+//# sourceMappingURL=externalMergeObserver.js.map

package/dist/modules/merge/externalMergeObserver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"externalMergeObserver.js","sourceRoot":"","sources":["../../../src/modules/merge/externalMergeObserver.ts"],"names":[],"mappings":"AASA;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,yBAAyB,CACvC,IAA+B;IAE/B,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE;QAC7C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAA;QACxF,IAAI,CAAC,MAAM;YAAE,OAAM;QACnB,MAAM,IAAI,CAAC,aAAa,EAAE,KAAK,CAAC,WAAW,EAAE;YAC3C,IAAI,EAAE,mBAAmB;YACzB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,KAAK,EAAE,mCAAmC;YAC1C,IAAI,EACF,sFAAsF;gBACtF,oDAAoD,MAAM,CAAC,WAAW,mBAAmB;gBACzF,gCAAgC;YAClC,OAAO,EAAE;gBACP,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAChD,GAAG,CAAC,MAAM,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAChF,kBAAkB,EAAE,MAAM,CAAC,EAAE;aAC9B;SACF,CAAC,CAAA;IACJ,CAAC,CAAA;AACH,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cat-factory/orchestration",
-  "version": "0.141.0",
+  "version": "0.143.0",
   "description": "Delivery-workflow engine for the Agent Architecture Board (execution, bootstrap, pipelines, board, boardScan, requirements, and composition root).",
   "repository": {
     "type": "git",
@@ -25,20 +25,20 @@
   },
   "dependencies": {
     "ai": "^7.0.35",
-    "@cat-factory/agents": "0.69.9",
-    "@cat-factory/caching": "0.10.42",
-    "@cat-factory/contracts": "0.166.0",
-    "@cat-factory/integrations": "0.99.0",
-    "@cat-factory/kernel": "0.160.0",
-    "@cat-factory/prompt-fragments": "0.14.14",
-    "@cat-factory/sandbox": "0.9.147",
-    "@cat-factory/spend": "0.12.86",
-    "@cat-factory/workspaces": "0.18.2"
+    "@cat-factory/agents": "0.70.0",
+    "@cat-factory/caching": "0.10.44",
+    "@cat-factory/contracts": "0.168.0",
+    "@cat-factory/integrations": "0.100.1",
+    "@cat-factory/kernel": "0.162.0",
+    "@cat-factory/prompt-fragments": "0.14.16",
+    "@cat-factory/sandbox": "0.9.149",
+    "@cat-factory/spend": "0.12.88",
+    "@cat-factory/workspaces": "0.18.4"
   },
   "devDependencies": {
     "typescript": "7.0.2",
     "vitest": "^4.1.10",
-    "@cat-factory/sandbox-fixtures": "0.7.197"
+    "@cat-factory/sandbox-fixtures": "0.7.199"
   },
   "scripts": {
     "build": "tsc -b tsconfig.build.json",