@cat-factory/orchestration 0.6.0

package/dist/modules/execution/stepResolvers.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=stepResolvers.js.map

package/dist/modules/execution/stepResolvers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stepResolvers.js","sourceRoot":"","sources":["../../../src/modules/execution/stepResolvers.ts"],"names":[],"mappings":""}

package/dist/modules/execution/tester-infra.logic.d.ts

@@ -0,0 +1,42 @@
+/** The Tester's resolved environment choice (`ephemeral` is the default when unset). */
+export type TesterEnvironment = 'local' | 'ephemeral';
+export interface TesterInfraInput {
+    /** Whether the runtime can run local docker-compose infra via Docker-in-Docker. */
+    localTestInfraSupported: boolean;
+    /** The task's resolved Tester environment. */
+    environment: TesterEnvironment;
+    /** The service frame is marked as having no infra to stand up. */
+    noInfraDependencies: boolean;
+    /** The service frame has a docker-compose path to stand its infra up. */
+    hasComposePath: boolean;
+    /** An ephemeral-environment provider is wired (so a deployed URL can be provisioned). */
+    hasEnvironmentProvider: boolean;
+}
+export type TesterInfraDecision = {
+    ok: true;
+} | {
+    ok: false;
+    reason: 'limited-local';
+} | {
+    ok: false;
+    reason: 'limited-ephemeral-no-provider';
+} | {
+    ok: false;
+    reason: 'local-unconfigured';
+};
+/**
+ * Decide whether a Tester pipeline may start.
+ *
+ * - **Limited mode** (runtime can't nest containers, e.g. Apple `container`): a `local`
+ *   run is allowed only when the service stands nothing up (`noInfraDependencies`); an
+ *   `ephemeral` run is allowed only when a provider is configured (else there's no URL,
+ *   and no local fallback on this runtime).
+ * - **Capable runtime**: `ephemeral` always passes (zero-config default); `local`
+ *   requires the service to declare a compose path or no infra.
+ */
+export declare function decideTesterInfra(input: TesterInfraInput): TesterInfraDecision;
+/** The actionable error message for each refusal reason. */
+export declare const TESTER_INFRA_MESSAGES: Record<Exclude<TesterInfraDecision, {
+    ok: true;
+}>['reason'], string>;
+//# sourceMappingURL=tester-infra.logic.d.ts.map

package/dist/modules/execution/tester-infra.logic.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tester-infra.logic.d.ts","sourceRoot":"","sources":["../../../src/modules/execution/tester-infra.logic.ts"],"names":[],"mappings":"AAOA,wFAAwF;AACxF,MAAM,MAAM,iBAAiB,GAAG,OAAO,GAAG,WAAW,CAAA;AAErD,MAAM,WAAW,gBAAgB;IAC/B,mFAAmF;IACnF,uBAAuB,EAAE,OAAO,CAAA;IAChC,8CAA8C;IAC9C,WAAW,EAAE,iBAAiB,CAAA;IAC9B,kEAAkE;IAClE,mBAAmB,EAAE,OAAO,CAAA;IAC5B,yEAAyE;IACzE,cAAc,EAAE,OAAO,CAAA;IACvB,yFAAyF;IACzF,sBAAsB,EAAE,OAAO,CAAA;CAChC;AAED,MAAM,MAAM,mBAAmB,GAC3B;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAEZ;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,eAAe,CAAA;CAAE,GAEtC;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,+BAA+B,CAAA;CAAE,GAEtD;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,oBAAoB,CAAA;CAAE,CAAA;AAE/C;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,gBAAgB,GAAG,mBAAmB,CAc9E;AAED,4DAA4D;AAC5D,eAAO,MAAM,qBAAqB,EAAE,MAAM,CACxC,OAAO,CAAC,mBAAmB,EAAE;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,CAAC,CAAC,QAAQ,CAAC,EACpD,MAAM,CAgBP,CAAA"}

package/dist/modules/execution/tester-infra.logic.js

@@ -0,0 +1,46 @@
+// Pure decision for the Tester's start-time infra gate — no IO, no ports. Given the
+// runtime's Docker-in-Docker capability and the task/service test-infra config, decide
+// whether a Tester pipeline may start, and if not, why. ExecutionService resolves the
+// inputs (service config, environment-provider presence) and translates the verdict
+// into an actionable ConflictError; keeping the branching here makes the whole matrix
+// (incl. the "limited mode" of a runtime without nesting) trivially testable.
+/**
+ * Decide whether a Tester pipeline may start.
+ *
+ * - **Limited mode** (runtime can't nest containers, e.g. Apple `container`): a `local`
+ *   run is allowed only when the service stands nothing up (`noInfraDependencies`); an
+ *   `ephemeral` run is allowed only when a provider is configured (else there's no URL,
+ *   and no local fallback on this runtime).
+ * - **Capable runtime**: `ephemeral` always passes (zero-config default); `local`
+ *   requires the service to declare a compose path or no infra.
+ */
+export function decideTesterInfra(input) {
+    if (!input.localTestInfraSupported) {
+        if (input.environment === 'local') {
+            return input.noInfraDependencies ? { ok: true } : { ok: false, reason: 'limited-local' };
+        }
+        return input.hasEnvironmentProvider
+            ? { ok: true }
+            : { ok: false, reason: 'limited-ephemeral-no-provider' };
+    }
+    if (input.environment !== 'local')
+        return { ok: true };
+    return input.noInfraDependencies || input.hasComposePath
+        ? { ok: true }
+        : { ok: false, reason: 'local-unconfigured' };
+}
+/** The actionable error message for each refusal reason. */
+export const TESTER_INFRA_MESSAGES = {
+    'limited-local': "This deployment's container runtime can't run the Tester's local docker-compose " +
+        'infra (no Docker-in-Docker). Switch the Tester to the ephemeral environment (with an ' +
+        "environment provider configured), or mark the service 'No infra dependencies', before " +
+        'starting.',
+    'limited-ephemeral-no-provider': "This deployment's container runtime can't run the Tester's local infra, and no " +
+        'ephemeral environment provider is configured, so the Tester has nothing to test ' +
+        'against. Configure an environment provider (ENVIRONMENTS_ENABLED + a connection), or ' +
+        "mark the service 'No infra dependencies' and run the Tester locally.",
+    'local-unconfigured': "This task's pipeline runs the Tester locally, but its service has no test infra " +
+        "configured. Set the service's docker-compose path, or mark it as having no infra " +
+        'dependencies, before starting — or switch the Tester to the ephemeral environment.',
+};
+//# sourceMappingURL=tester-infra.logic.js.map

package/dist/modules/execution/tester-infra.logic.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tester-infra.logic.js","sourceRoot":"","sources":["../../../src/modules/execution/tester-infra.logic.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,uFAAuF;AACvF,sFAAsF;AACtF,oFAAoF;AACpF,sFAAsF;AACtF,8EAA8E;AA2B9E;;;;;;;;;GASG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAuB;IACvD,IAAI,CAAC,KAAK,CAAC,uBAAuB,EAAE,CAAC;QACnC,IAAI,KAAK,CAAC,WAAW,KAAK,OAAO,EAAE,CAAC;YAClC,OAAO,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAA;QAC1F,CAAC;QACD,OAAO,KAAK,CAAC,sBAAsB;YACjC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE;YACd,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,+BAA+B,EAAE,CAAA;IAC5D,CAAC;IAED,IAAI,KAAK,CAAC,WAAW,KAAK,OAAO;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAA;IACtD,OAAO,KAAK,CAAC,mBAAmB,IAAI,KAAK,CAAC,cAAc;QACtD,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE;QACd,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAA;AACjD,CAAC;AAED,4DAA4D;AAC5D,MAAM,CAAC,MAAM,qBAAqB,GAG9B;IACF,eAAe,EACb,kFAAkF;QAClF,uFAAuF;QACvF,wFAAwF;QACxF,WAAW;IACb,+BAA+B,EAC7B,iFAAiF;QACjF,kFAAkF;QAClF,uFAAuF;QACvF,sEAAsE;IACxE,oBAAoB,EAClB,kFAAkF;QAClF,mFAAmF;QACnF,oFAAoF;CACvF,CAAA"}

package/dist/modules/merge/MergePresetService.d.ts

@@ -0,0 +1,32 @@
+import type { Clock, CreateMergePresetInput, IdGenerator, MergePresetRepository, MergeThresholdPreset, UpdateMergePresetInput, WorkspaceRepository } from '@cat-factory/kernel';
+export interface MergePresetServiceDependencies {
+    mergePresetRepository: MergePresetRepository;
+    workspaceRepository: WorkspaceRepository;
+    idGenerator: IdGenerator;
+    clock: Clock;
+}
+/**
+ * CRUD for a workspace's merge threshold presets (the library a task picks its
+ * auto-merge policy from). Maintains the invariant that a workspace always has at
+ * least one preset, exactly one of which is the default: {@link list} lazily seeds
+ * the built-in {@link DEFAULT_MERGE_PRESET} on first use, and the default cannot be
+ * deleted. The single-default promotion is enforced in the repository.
+ */
+export declare class MergePresetService {
+    private readonly presets;
+    private readonly workspaceRepository;
+    private readonly idGenerator;
+    private readonly clock;
+    constructor(deps: MergePresetServiceDependencies);
+    /** List a workspace's presets, seeding the built-in default if none exist yet. */
+    list(workspaceId: string): Promise<MergeThresholdPreset[]>;
+    /** Create a new preset. The first one (or one flagged default) becomes the default. */
+    create(workspaceId: string, input: CreateMergePresetInput): Promise<MergeThresholdPreset>;
+    /** Patch a preset. Demoting the only default is rejected (one must remain). */
+    update(workspaceId: string, id: string, patch: UpdateMergePresetInput): Promise<MergeThresholdPreset>;
+    /** Remove a preset. The default preset cannot be removed. */
+    remove(workspaceId: string, id: string): Promise<void>;
+    /** Seed the built-in default preset for a workspace that has none yet. Idempotent. */
+    private ensureDefault;
+}
+//# sourceMappingURL=MergePresetService.d.ts.map

package/dist/modules/merge/MergePresetService.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"MergePresetService.d.ts","sourceRoot":"","sources":["../../../src/modules/merge/MergePresetService.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,KAAK,EACL,sBAAsB,EACtB,WAAW,EACX,qBAAqB,EACrB,oBAAoB,EACpB,sBAAsB,EACtB,mBAAmB,EACpB,MAAM,qBAAqB,CAAA;AAQ5B,MAAM,WAAW,8BAA8B;IAC7C,qBAAqB,EAAE,qBAAqB,CAAA;IAC5C,mBAAmB,EAAE,mBAAmB,CAAA;IACxC,WAAW,EAAE,WAAW,CAAA;IACxB,KAAK,EAAE,KAAK,CAAA;CACb;AAED;;;;;;GAMG;AACH,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAuB;IAC/C,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAqB;IACzD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAa;IACzC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAO;IAE7B,YAAY,IAAI,EAAE,8BAA8B,EAK/C;IAED,kFAAkF;IAC5E,IAAI,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,EAAE,CAAC,CAI/D;IAED,uFAAuF;IACjF,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAoB9F;IAED,+EAA+E;IACzE,MAAM,CACV,WAAW,EAAE,MAAM,EACnB,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,sBAAsB,GAC5B,OAAO,CAAC,oBAAoB,CAAC,CA6B/B;IAED,6DAA6D;IACvD,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAO3D;IAED,sFAAsF;YACxE,aAAa;CAkB5B"}

package/dist/modules/merge/MergePresetService.js

@@ -0,0 +1,109 @@
+import { assertFound, ConflictError, DEFAULT_MERGE_PRESET, requireWorkspace, } from '@cat-factory/kernel';
+/**
+ * CRUD for a workspace's merge threshold presets (the library a task picks its
+ * auto-merge policy from). Maintains the invariant that a workspace always has at
+ * least one preset, exactly one of which is the default: {@link list} lazily seeds
+ * the built-in {@link DEFAULT_MERGE_PRESET} on first use, and the default cannot be
+ * deleted. The single-default promotion is enforced in the repository.
+ */
+export class MergePresetService {
+    presets;
+    workspaceRepository;
+    idGenerator;
+    clock;
+    constructor(deps) {
+        this.presets = deps.mergePresetRepository;
+        this.workspaceRepository = deps.workspaceRepository;
+        this.idGenerator = deps.idGenerator;
+        this.clock = deps.clock;
+    }
+    /** List a workspace's presets, seeding the built-in default if none exist yet. */
+    async list(workspaceId) {
+        await requireWorkspace(this.workspaceRepository, workspaceId);
+        await this.ensureDefault(workspaceId);
+        return this.presets.list(workspaceId);
+    }
+    /** Create a new preset. The first one (or one flagged default) becomes the default. */
+    async create(workspaceId, input) {
+        await requireWorkspace(this.workspaceRepository, workspaceId);
+        const existing = await this.presets.list(workspaceId);
+        const preset = {
+            id: this.idGenerator.next('mp'),
+            name: input.name,
+            maxComplexity: input.maxComplexity,
+            maxRisk: input.maxRisk,
+            maxImpact: input.maxImpact,
+            ciMaxAttempts: input.ciMaxAttempts,
+            maxRequirementIterations: input.maxRequirementIterations,
+            maxRequirementConcernAllowed: input.maxRequirementConcernAllowed,
+            releaseWatchWindowMinutes: input.releaseWatchWindowMinutes,
+            releaseMaxAttempts: input.releaseMaxAttempts,
+            // The very first preset must be the default; otherwise honour the request.
+            isDefault: existing.length === 0 ? true : input.isDefault,
+            createdAt: this.clock.now(),
+        };
+        await this.presets.upsert(workspaceId, preset);
+        return preset;
+    }
+    /** Patch a preset. Demoting the only default is rejected (one must remain). */
+    async update(workspaceId, id, patch) {
+        await requireWorkspace(this.workspaceRepository, workspaceId);
+        const existing = assertFound(await this.presets.get(workspaceId, id), 'MergePreset', id);
+        if (existing.isDefault && patch.isDefault === false) {
+            throw new ConflictError('Cannot unset the default preset; promote another preset instead.');
+        }
+        const updated = {
+            ...existing,
+            ...(patch.name !== undefined ? { name: patch.name } : {}),
+            ...(patch.maxComplexity !== undefined ? { maxComplexity: patch.maxComplexity } : {}),
+            ...(patch.maxRisk !== undefined ? { maxRisk: patch.maxRisk } : {}),
+            ...(patch.maxImpact !== undefined ? { maxImpact: patch.maxImpact } : {}),
+            ...(patch.ciMaxAttempts !== undefined ? { ciMaxAttempts: patch.ciMaxAttempts } : {}),
+            ...(patch.maxRequirementIterations !== undefined
+                ? { maxRequirementIterations: patch.maxRequirementIterations }
+                : {}),
+            ...(patch.maxRequirementConcernAllowed !== undefined
+                ? { maxRequirementConcernAllowed: patch.maxRequirementConcernAllowed }
+                : {}),
+            ...(patch.releaseWatchWindowMinutes !== undefined
+                ? { releaseWatchWindowMinutes: patch.releaseWatchWindowMinutes }
+                : {}),
+            ...(patch.releaseMaxAttempts !== undefined
+                ? { releaseMaxAttempts: patch.releaseMaxAttempts }
+                : {}),
+            ...(patch.isDefault !== undefined ? { isDefault: patch.isDefault } : {}),
+        };
+        await this.presets.upsert(workspaceId, updated);
+        return updated;
+    }
+    /** Remove a preset. The default preset cannot be removed. */
+    async remove(workspaceId, id) {
+        await requireWorkspace(this.workspaceRepository, workspaceId);
+        const existing = await this.presets.get(workspaceId, id);
+        if (existing?.isDefault) {
+            throw new ConflictError('Cannot delete the default preset; promote another preset first.');
+        }
+        await this.presets.remove(workspaceId, id);
+    }
+    /** Seed the built-in default preset for a workspace that has none yet. Idempotent. */
+    async ensureDefault(workspaceId) {
+        const current = await this.presets.list(workspaceId);
+        if (current.length > 0)
+            return;
+        await this.presets.upsert(workspaceId, {
+            id: this.idGenerator.next('mp'),
+            name: DEFAULT_MERGE_PRESET.name,
+            maxComplexity: DEFAULT_MERGE_PRESET.maxComplexity,
+            maxRisk: DEFAULT_MERGE_PRESET.maxRisk,
+            maxImpact: DEFAULT_MERGE_PRESET.maxImpact,
+            ciMaxAttempts: DEFAULT_MERGE_PRESET.ciMaxAttempts,
+            maxRequirementIterations: DEFAULT_MERGE_PRESET.maxRequirementIterations,
+            maxRequirementConcernAllowed: DEFAULT_MERGE_PRESET.maxRequirementConcernAllowed,
+            releaseWatchWindowMinutes: DEFAULT_MERGE_PRESET.releaseWatchWindowMinutes,
+            releaseMaxAttempts: DEFAULT_MERGE_PRESET.releaseMaxAttempts,
+            isDefault: true,
+            createdAt: this.clock.now(),
+        });
+    }
+}
+//# sourceMappingURL=MergePresetService.js.map

package/dist/modules/merge/MergePresetService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"MergePresetService.js","sourceRoot":"","sources":["../../../src/modules/merge/MergePresetService.ts"],"names":[],"mappings":"AASA,OAAO,EACL,WAAW,EACX,aAAa,EACb,oBAAoB,EACpB,gBAAgB,GACjB,MAAM,qBAAqB,CAAA;AAS5B;;;;;;GAMG;AACH,MAAM,OAAO,kBAAkB;IACZ,OAAO,CAAuB;IAC9B,mBAAmB,CAAqB;IACxC,WAAW,CAAa;IACxB,KAAK,CAAO;IAE7B,YAAY,IAAoC;QAC9C,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,qBAAqB,CAAA;QACzC,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC,mBAAmB,CAAA;QACnD,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAA;QACnC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAA;IACzB,CAAC;IAED,kFAAkF;IAClF,KAAK,CAAC,IAAI,CAAC,WAAmB;QAC5B,MAAM,gBAAgB,CAAC,IAAI,CAAC,mBAAmB,EAAE,WAAW,CAAC,CAAA;QAC7D,MAAM,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,CAAA;QACrC,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;IACvC,CAAC;IAED,uFAAuF;IACvF,KAAK,CAAC,MAAM,CAAC,WAAmB,EAAE,KAA6B;QAC7D,MAAM,gBAAgB,CAAC,IAAI,CAAC,mBAAmB,EAAE,WAAW,CAAC,CAAA;QAC7D,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;QACrD,MAAM,MAAM,GAAyB;YACnC,EAAE,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC;YAC/B,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,wBAAwB,EAAE,KAAK,CAAC,wBAAwB;YACxD,4BAA4B,EAAE,KAAK,CAAC,4BAA4B;YAChE,yBAAyB,EAAE,KAAK,CAAC,yBAAyB;YAC1D,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;YAC5C,2EAA2E;YAC3E,SAAS,EAAE,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS;YACzD,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE;SAC5B,CAAA;QACD,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,CAAA;QAC9C,OAAO,MAAM,CAAA;IACf,CAAC;IAED,+EAA+E;IAC/E,KAAK,CAAC,MAAM,CACV,WAAmB,EACnB,EAAU,EACV,KAA6B;QAE7B,MAAM,gBAAgB,CAAC,IAAI,CAAC,mBAAmB,EAAE,WAAW,CAAC,CAAA;QAC7D,MAAM,QAAQ,GAAG,WAAW,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC,EAAE,aAAa,EAAE,EAAE,CAAC,CAAA;QACxF,IAAI,QAAQ,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS,KAAK,KAAK,EAAE,CAAC;YACpD,MAAM,IAAI,aAAa,CAAC,kEAAkE,CAAC,CAAA;QAC7F,CAAC;QACD,MAAM,OAAO,GAAyB;YACpC,GAAG,QAAQ;YACX,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzD,GAAG,CAAC,KAAK,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpF,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClE,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxE,GAAG,CAAC,KAAK,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpF,GAAG,CAAC,KAAK,CAAC,wBAAwB,KAAK,SAAS;gBAC9C,CAAC,CAAC,EAAE,wBAAwB,EAAE,KAAK,CAAC,wBAAwB,EAAE;gBAC9D,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,KAAK,CAAC,4BAA4B,KAAK,SAAS;gBAClD,CAAC,CAAC,EAAE,4BAA4B,EAAE,KAAK,CAAC,4BAA4B,EAAE;gBACtE,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,KAAK,CAAC,yBAAyB,KAAK,SAAS;gBAC/C,CAAC,CAAC,EAAE,yBAAyB,EAAE,KAAK,CAAC,yBAAyB,EAAE;gBAChE,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,KAAK,CAAC,kBAAkB,KAAK,SAAS;gBACxC,CAAC,CAAC,EAAE,kBAAkB,EAAE,KAAK,CAAC,kBAAkB,EAAE;gBAClD,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACzE,CAAA;QACD,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,CAAA;QAC/C,OAAO,OAAO,CAAA;IAChB,CAAC;IAED,6DAA6D;IAC7D,KAAK,CAAC,MAAM,CAAC,WAAmB,EAAE,EAAU;QAC1C,MAAM,gBAAgB,CAAC,IAAI,CAAC,mBAAmB,EAAE,WAAW,CAAC,CAAA;QAC7D,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC,CAAA;QACxD,IAAI,QAAQ,EAAE,SAAS,EAAE,CAAC;YACxB,MAAM,IAAI,aAAa,CAAC,iEAAiE,CAAC,CAAA;QAC5F,CAAC;QACD,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC,CAAA;IAC5C,CAAC;IAED,sFAAsF;IAC9E,KAAK,CAAC,aAAa,CAAC,WAAmB;QAC7C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;QACpD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;YAAE,OAAM;QAC9B,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE;YACrC,EAAE,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC;YAC/B,IAAI,EAAE,oBAAoB,CAAC,IAAI;YAC/B,aAAa,EAAE,oBAAoB,CAAC,aAAa;YACjD,OAAO,EAAE,oBAAoB,CAAC,OAAO;YACrC,SAAS,EAAE,oBAAoB,CAAC,SAAS;YACzC,aAAa,EAAE,oBAAoB,CAAC,aAAa;YACjD,wBAAwB,EAAE,oBAAoB,CAAC,wBAAwB;YACvE,4BAA4B,EAAE,oBAAoB,CAAC,4BAA4B;YAC/E,yBAAyB,EAAE,oBAAoB,CAAC,yBAAyB;YACzE,kBAAkB,EAAE,oBAAoB,CAAC,kBAAkB;YAC3D,SAAS,EAAE,IAAI;YACf,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE;SAC5B,CAAC,CAAA;IACJ,CAAC;CACF"}

package/dist/modules/modelDefaults/ModelDefaultsService.d.ts

@@ -0,0 +1,22 @@
+import type { ModelDefaults, ModelDefaultsRepository, SetModelDefaultsInput, WorkspaceRepository } from '@cat-factory/kernel';
+export interface ModelDefaultsServiceDependencies {
+    modelDefaultsRepository: ModelDefaultsRepository;
+    workspaceRepository: WorkspaceRepository;
+}
+/**
+ * Read/replace a workspace's per-agent-kind default models (the model each agent
+ * kind defaults to, overriding the env routing for that workspace). The map is
+ * keyed by agent kind and valued by a model catalog id; sending the full map
+ * replaces it wholesale (a kind omitted is cleared). A kind absent from the map
+ * falls back to the env routing for that kind at run time.
+ */
+export declare class ModelDefaultsService {
+    private readonly defaults;
+    private readonly workspaceRepository;
+    constructor(deps: ModelDefaultsServiceDependencies);
+    /** The workspace's per-kind default map (empty when none set). */
+    get(workspaceId: string): Promise<ModelDefaults>;
+    /** Replace the workspace's per-kind default map and return the stored result. */
+    set(workspaceId: string, input: SetModelDefaultsInput): Promise<ModelDefaults>;
+}
+//# sourceMappingURL=ModelDefaultsService.d.ts.map

package/dist/modules/modelDefaults/ModelDefaultsService.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ModelDefaultsService.d.ts","sourceRoot":"","sources":["../../../src/modules/modelDefaults/ModelDefaultsService.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,aAAa,EACb,uBAAuB,EACvB,qBAAqB,EACrB,mBAAmB,EACpB,MAAM,qBAAqB,CAAA;AAG5B,MAAM,WAAW,gCAAgC;IAC/C,uBAAuB,EAAE,uBAAuB,CAAA;IAChD,mBAAmB,EAAE,mBAAmB,CAAA;CACzC;AAED;;;;;;GAMG;AACH,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAyB;IAClD,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAqB;IAEzD,YAAY,IAAI,EAAE,gCAAgC,EAGjD;IAED,kEAAkE;IAC5D,GAAG,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAGrD;IAED,iFAAiF;IAC3E,GAAG,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,qBAAqB,GAAG,OAAO,CAAC,aAAa,CAAC,CAInF;CACF"}

package/dist/modules/modelDefaults/ModelDefaultsService.js

@@ -0,0 +1,28 @@
+import { requireWorkspace } from '@cat-factory/kernel';
+/**
+ * Read/replace a workspace's per-agent-kind default models (the model each agent
+ * kind defaults to, overriding the env routing for that workspace). The map is
+ * keyed by agent kind and valued by a model catalog id; sending the full map
+ * replaces it wholesale (a kind omitted is cleared). A kind absent from the map
+ * falls back to the env routing for that kind at run time.
+ */
+export class ModelDefaultsService {
+    defaults;
+    workspaceRepository;
+    constructor(deps) {
+        this.defaults = deps.modelDefaultsRepository;
+        this.workspaceRepository = deps.workspaceRepository;
+    }
+    /** The workspace's per-kind default map (empty when none set). */
+    async get(workspaceId) {
+        await requireWorkspace(this.workspaceRepository, workspaceId);
+        return { defaults: await this.defaults.get(workspaceId) };
+    }
+    /** Replace the workspace's per-kind default map and return the stored result. */
+    async set(workspaceId, input) {
+        await requireWorkspace(this.workspaceRepository, workspaceId);
+        await this.defaults.replace(workspaceId, input.defaults);
+        return { defaults: input.defaults };
+    }
+}
+//# sourceMappingURL=ModelDefaultsService.js.map

package/dist/modules/modelDefaults/ModelDefaultsService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ModelDefaultsService.js","sourceRoot":"","sources":["../../../src/modules/modelDefaults/ModelDefaultsService.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAA;AAOtD;;;;;;GAMG;AACH,MAAM,OAAO,oBAAoB;IACd,QAAQ,CAAyB;IACjC,mBAAmB,CAAqB;IAEzD,YAAY,IAAsC;QAChD,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,uBAAuB,CAAA;QAC5C,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC,mBAAmB,CAAA;IACrD,CAAC;IAED,kEAAkE;IAClE,KAAK,CAAC,GAAG,CAAC,WAAmB;QAC3B,MAAM,gBAAgB,CAAC,IAAI,CAAC,mBAAmB,EAAE,WAAW,CAAC,CAAA;QAC7D,OAAO,EAAE,QAAQ,EAAE,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAA;IAC3D,CAAC;IAED,iFAAiF;IACjF,KAAK,CAAC,GAAG,CAAC,WAAmB,EAAE,KAA4B;QACzD,MAAM,gBAAgB,CAAC,IAAI,CAAC,mBAAmB,EAAE,WAAW,CAAC,CAAA;QAC7D,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAA;QACxD,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAA;IACrC,CAAC;CACF"}

package/dist/modules/notifications/NotificationService.d.ts

@@ -0,0 +1,74 @@
+import type { Clock, IdGenerator, Notification, NotificationChannel, NotificationPayload, NotificationRepository, NotificationType, ResolveNotificationAction } from '@cat-factory/kernel';
+import type { WorkspaceRepository } from '@cat-factory/kernel';
+export interface NotificationServiceDependencies {
+    notificationRepository: NotificationRepository;
+    workspaceRepository: WorkspaceRepository;
+    idGenerator: IdGenerator;
+    clock: Clock;
+    /**
+     * How humans are told. Defaults to in-app delivery (the `notification`
+     * WorkspaceEvent) wired by the worker; email / Slack channels compose in via
+     * {@link CompositeNotificationChannel} with no change here. Optional so tests
+     * can omit it (the repository remains the canonical store either way).
+     */
+    channel?: NotificationChannel;
+}
+/** What a caller (the execution engine) supplies to raise a notification. */
+export interface RaiseNotificationInput {
+    type: NotificationType;
+    blockId: string | null;
+    executionId: string | null;
+    title: string;
+    body: string;
+    payload?: NotificationPayload | null;
+}
+/**
+ * Owns the lifecycle of human-actionable notifications: the canonical D1-backed
+ * store (so the inbox + snapshot can render them) plus delivery to the configured
+ * channel(s). The *action* a notification triggers (merge a PR, confirm a
+ * pipeline, retry a run) is performed by the worker's controller; this service
+ * only raises, lists and resolves — keeping it free of execution/GitHub concerns.
+ */
+export declare class NotificationService {
+    private readonly notifications;
+    private readonly workspaceRepository;
+    private readonly idGenerator;
+    private readonly clock;
+    private readonly channel?;
+    constructor(deps: NotificationServiceDependencies);
+    /**
+     * Raise (or refresh) a notification. To avoid stacking identical cards when a
+     * run is re-driven, an existing OPEN notification of the same `type` on the same
+     * block is replaced in place (its id is reused) rather than duplicated.
+     */
+    raise(workspaceId: string, input: RaiseNotificationInput): Promise<Notification>;
+    /** Resolve a notification (the human acted on it or dismissed it). Idempotent. */
+    resolve(workspaceId: string, id: string, action: ResolveNotificationAction): Promise<Notification>;
+    /** All open notifications for the workspace (for the inbox + snapshot). */
+    listOpen(workspaceId: string): Promise<Notification[]>;
+    /**
+     * Resolve the auto-raised "waiting for a human decision" card on a block once its run
+     * has advanced past the decision (the human responded, or it auto-passed). Only the
+     * `decision_required` type is dismissed — the human-actionable cards a stopped run
+     * leaves behind (`merge_review`, `pipeline_complete`, `requirement_review`, …) are
+     * resolved by the human acting on them, not here. Without this the card would linger
+     * open and the escalation sweep would later flip it red ("Overdue") for a decision that
+     * was already made. Idempotent + best-effort: a no-op when no such card is open.
+     */
+    clearWaitingDecision(workspaceId: string, blockId: string): Promise<void>;
+    /**
+     * Escalate long-waiting open notifications from `normal` (yellow) to `urgent` (red).
+     * Called by the periodic sweep with the workspace's `waitingEscalationMinutes`
+     * threshold (as ms). Any open notification older than `thresholdMs` that is still
+     * `normal` is flipped to `urgent`, persisted, and re-delivered so the inbox re-renders
+     * it red in real time. This is the signal that replaced the old hard decision timeout:
+     * runs wait indefinitely, the notification colour conveys that a human is overdue.
+     * Returns the number escalated.
+     */
+    escalateStale(workspaceId: string, thresholdMs: number, now: number): Promise<number>;
+    /** A single notification by id, or null. */
+    get(workspaceId: string, id: string): Promise<Notification | null>;
+    /** Best-effort delivery to the channel — a failure must never break the caller. */
+    private deliver;
+}
+//# sourceMappingURL=NotificationService.d.ts.map

package/dist/modules/notifications/NotificationService.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"NotificationService.d.ts","sourceRoot":"","sources":["../../../src/modules/notifications/NotificationService.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,KAAK,EACL,WAAW,EACX,YAAY,EACZ,mBAAmB,EACnB,mBAAmB,EACnB,sBAAsB,EACtB,gBAAgB,EAChB,yBAAyB,EAC1B,MAAM,qBAAqB,CAAA;AAE5B,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAA;AAE9D,MAAM,WAAW,+BAA+B;IAC9C,sBAAsB,EAAE,sBAAsB,CAAA;IAC9C,mBAAmB,EAAE,mBAAmB,CAAA;IACxC,WAAW,EAAE,WAAW,CAAA;IACxB,KAAK,EAAE,KAAK,CAAA;IACZ;;;;;OAKG;IACH,OAAO,CAAC,EAAE,mBAAmB,CAAA;CAC9B;AAED,6EAA6E;AAC7E,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,gBAAgB,CAAA;IACtB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;IACtB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,CAAC,EAAE,mBAAmB,GAAG,IAAI,CAAA;CACrC;AAED;;;;;;GAMG;AACH,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAwB;IACtD,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAqB;IACzD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAa;IACzC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAO;IAC7B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAqB;IAE9C,YAAY,IAAI,EAAE,+BAA+B,EAMhD;IAED;;;;OAIG;IACG,KAAK,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAAC,YAAY,CAAC,CAuBrF;IAED,kFAAkF;IAC5E,OAAO,CACX,WAAW,EAAE,MAAM,EACnB,EAAE,EAAE,MAAM,EACV,MAAM,EAAE,yBAAyB,GAChC,OAAO,CAAC,YAAY,CAAC,CAYvB;IAED,2EAA2E;IACrE,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CAE3D;IAED;;;;;;;;OAQG;IACG,oBAAoB,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAc9E;IAED;;;;;;;;OAQG;IACG,aAAa,CAAC,WAAW,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAY1F;IAED,4CAA4C;IACtC,GAAG,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAEvE;IAED,mFAAmF;YACrE,OAAO;CAQtB"}

package/dist/modules/notifications/NotificationService.js

@@ -0,0 +1,131 @@
+import { assertFound, requireWorkspace } from '@cat-factory/kernel';
+/**
+ * Owns the lifecycle of human-actionable notifications: the canonical D1-backed
+ * store (so the inbox + snapshot can render them) plus delivery to the configured
+ * channel(s). The *action* a notification triggers (merge a PR, confirm a
+ * pipeline, retry a run) is performed by the worker's controller; this service
+ * only raises, lists and resolves — keeping it free of execution/GitHub concerns.
+ */
+export class NotificationService {
+    notifications;
+    workspaceRepository;
+    idGenerator;
+    clock;
+    channel;
+    constructor(deps) {
+        this.notifications = deps.notificationRepository;
+        this.workspaceRepository = deps.workspaceRepository;
+        this.idGenerator = deps.idGenerator;
+        this.clock = deps.clock;
+        this.channel = deps.channel;
+    }
+    /**
+     * Raise (or refresh) a notification. To avoid stacking identical cards when a
+     * run is re-driven, an existing OPEN notification of the same `type` on the same
+     * block is replaced in place (its id is reused) rather than duplicated.
+     */
+    async raise(workspaceId, input) {
+        const existing = input.blockId
+            ? await this.notifications.findOpenByBlock(workspaceId, input.blockId, input.type)
+            : null;
+        const now = this.clock.now();
+        const notification = {
+            id: existing?.id ?? this.idGenerator.next('ntf'),
+            type: input.type,
+            status: 'open',
+            // Preserve an already-escalated severity across a re-raise (createdAt is preserved
+            // too, so the card keeps its "overdue" red rather than resetting to yellow).
+            severity: existing?.severity ?? 'normal',
+            blockId: input.blockId,
+            executionId: input.executionId,
+            title: input.title,
+            body: input.body,
+            payload: input.payload ?? null,
+            createdAt: existing?.createdAt ?? now,
+            resolvedAt: null,
+        };
+        await this.notifications.upsert(workspaceId, notification);
+        await this.deliver(workspaceId, notification);
+        return notification;
+    }
+    /** Resolve a notification (the human acted on it or dismissed it). Idempotent. */
+    async resolve(workspaceId, id, action) {
+        await requireWorkspace(this.workspaceRepository, workspaceId);
+        const existing = assertFound(await this.notifications.get(workspaceId, id), 'Notification', id);
+        if (existing.status !== 'open')
+            return existing;
+        const resolved = {
+            ...existing,
+            status: action === 'act' ? 'acted' : 'dismissed',
+            resolvedAt: this.clock.now(),
+        };
+        await this.notifications.upsert(workspaceId, resolved);
+        await this.deliver(workspaceId, resolved);
+        return resolved;
+    }
+    /** All open notifications for the workspace (for the inbox + snapshot). */
+    async listOpen(workspaceId) {
+        return this.notifications.listOpen(workspaceId);
+    }
+    /**
+     * Resolve the auto-raised "waiting for a human decision" card on a block once its run
+     * has advanced past the decision (the human responded, or it auto-passed). Only the
+     * `decision_required` type is dismissed — the human-actionable cards a stopped run
+     * leaves behind (`merge_review`, `pipeline_complete`, `requirement_review`, …) are
+     * resolved by the human acting on them, not here. Without this the card would linger
+     * open and the escalation sweep would later flip it red ("Overdue") for a decision that
+     * was already made. Idempotent + best-effort: a no-op when no such card is open.
+     */
+    async clearWaitingDecision(workspaceId, blockId) {
+        const existing = await this.notifications.findOpenByBlock(workspaceId, blockId, 'decision_required');
+        if (!existing)
+            return;
+        const resolved = {
+            ...existing,
+            status: 'dismissed',
+            resolvedAt: this.clock.now(),
+        };
+        await this.notifications.upsert(workspaceId, resolved);
+        await this.deliver(workspaceId, resolved);
+    }
+    /**
+     * Escalate long-waiting open notifications from `normal` (yellow) to `urgent` (red).
+     * Called by the periodic sweep with the workspace's `waitingEscalationMinutes`
+     * threshold (as ms). Any open notification older than `thresholdMs` that is still
+     * `normal` is flipped to `urgent`, persisted, and re-delivered so the inbox re-renders
+     * it red in real time. This is the signal that replaced the old hard decision timeout:
+     * runs wait indefinitely, the notification colour conveys that a human is overdue.
+     * Returns the number escalated.
+     */
+    async escalateStale(workspaceId, thresholdMs, now) {
+        const open = await this.notifications.listOpen(workspaceId);
+        let escalated = 0;
+        for (const n of open) {
+            if ((n.severity ?? 'normal') !== 'normal')
+                continue;
+            if (now - n.createdAt < thresholdMs)
+                continue;
+            const updated = { ...n, severity: 'urgent' };
+            await this.notifications.upsert(workspaceId, updated);
+            await this.deliver(workspaceId, updated);
+            escalated++;
+        }
+        return escalated;
+    }
+    /** A single notification by id, or null. */
+    async get(workspaceId, id) {
+        return this.notifications.get(workspaceId, id);
+    }
+    /** Best-effort delivery to the channel — a failure must never break the caller. */
+    async deliver(workspaceId, notification) {
+        if (!this.channel)
+            return;
+        try {
+            await this.channel.deliver(workspaceId, notification);
+        }
+        catch {
+            // The row is persisted; delivery is an optimisation. Swallow channel errors.
+        }
+    }
+}
+//# sourceMappingURL=NotificationService.js.map

package/dist/modules/notifications/NotificationService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"NotificationService.js","sourceRoot":"","sources":["../../../src/modules/notifications/NotificationService.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAA;AA2BnE;;;;;;GAMG;AACH,MAAM,OAAO,mBAAmB;IACb,aAAa,CAAwB;IACrC,mBAAmB,CAAqB;IACxC,WAAW,CAAa;IACxB,KAAK,CAAO;IACZ,OAAO,CAAsB;IAE9C,YAAY,IAAqC;QAC/C,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,sBAAsB,CAAA;QAChD,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC,mBAAmB,CAAA;QACnD,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAA;QACnC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAA;QACvB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAA;IAC7B,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,KAAK,CAAC,WAAmB,EAAE,KAA6B;QAC5D,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO;YAC5B,CAAC,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC,WAAW,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC;YAClF,CAAC,CAAC,IAAI,CAAA;QACR,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAA;QAC5B,MAAM,YAAY,GAAiB;YACjC,EAAE,EAAE,QAAQ,EAAE,EAAE,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC;YAChD,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,MAAM,EAAE,MAAM;YACd,mFAAmF;YACnF,6EAA6E;YAC7E,QAAQ,EAAE,QAAQ,EAAE,QAAQ,IAAI,QAAQ;YACxC,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,IAAI;YAC9B,SAAS,EAAE,QAAQ,EAAE,SAAS,IAAI,GAAG;YACrC,UAAU,EAAE,IAAI;SACjB,CAAA;QACD,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,WAAW,EAAE,YAAY,CAAC,CAAA;QAC1D,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,YAAY,CAAC,CAAA;QAC7C,OAAO,YAAY,CAAA;IACrB,CAAC;IAED,kFAAkF;IAClF,KAAK,CAAC,OAAO,CACX,WAAmB,EACnB,EAAU,EACV,MAAiC;QAEjC,MAAM,gBAAgB,CAAC,IAAI,CAAC,mBAAmB,EAAE,WAAW,CAAC,CAAA;QAC7D,MAAM,QAAQ,GAAG,WAAW,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC,EAAE,cAAc,EAAE,EAAE,CAAC,CAAA;QAC/F,IAAI,QAAQ,CAAC,MAAM,KAAK,MAAM;YAAE,OAAO,QAAQ,CAAA;QAC/C,MAAM,QAAQ,GAAiB;YAC7B,GAAG,QAAQ;YACX,MAAM,EAAE,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW;YAChD,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE;SAC7B,CAAA;QACD,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAA;QACtD,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAA;QACzC,OAAO,QAAQ,CAAA;IACjB,CAAC;IAED,2EAA2E;IAC3E,KAAK,CAAC,QAAQ,CAAC,WAAmB;QAChC,OAAO,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;IACjD,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,oBAAoB,CAAC,WAAmB,EAAE,OAAe;QAC7D,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,eAAe,CACvD,WAAW,EACX,OAAO,EACP,mBAAmB,CACpB,CAAA;QACD,IAAI,CAAC,QAAQ;YAAE,OAAM;QACrB,MAAM,QAAQ,GAAiB;YAC7B,GAAG,QAAQ;YACX,MAAM,EAAE,WAAW;YACnB,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE;SAC7B,CAAA;QACD,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAA;QACtD,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAA;IAC3C,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,aAAa,CAAC,WAAmB,EAAE,WAAmB,EAAE,GAAW;QACvE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;QAC3D,IAAI,SAAS,GAAG,CAAC,CAAA;QACjB,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;YACrB,IAAI,CAAC,CAAC,CAAC,QAAQ,IAAI,QAAQ,CAAC,KAAK,QAAQ;gBAAE,SAAQ;YACnD,IAAI,GAAG,GAAG,CAAC,CAAC,SAAS,GAAG,WAAW;gBAAE,SAAQ;YAC7C,MAAM,OAAO,GAAiB,EAAE,GAAG,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAA;YAC1D,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,CAAA;YACrD,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,CAAA;YACxC,SAAS,EAAE,CAAA;QACb,CAAC;QACD,OAAO,SAAS,CAAA;IAClB,CAAC;IAED,4CAA4C;IAC5C,KAAK,CAAC,GAAG,CAAC,WAAmB,EAAE,EAAU;QACvC,OAAO,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC,CAAA;IAChD,CAAC;IAED,mFAAmF;IAC3E,KAAK,CAAC,OAAO,CAAC,WAAmB,EAAE,YAA0B;QACnE,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAM;QACzB,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,EAAE,YAAY,CAAC,CAAA;QACvD,CAAC;QAAC,MAAM,CAAC;YACP,6EAA6E;QAC/E,CAAC;IACH,CAAC;CACF"}