@cat-factory/server 0.256.0 → 0.258.0

package/dist/modules/publicApi/PublicMergeEvidenceController.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PublicMergeEvidenceController.d.ts","sourceRoot":"","sources":["../../../src/modules/publicApi/PublicMergeEvidenceController.ts"],"names":[],"mappings":"AAYA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAE3B,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAA;AAuG/C,wBAAgB,6BAA6B,IAAI,IAAI,CAAC,MAAM,CAAC,CAgE5D"}

package/dist/modules/publicApi/PublicMergeEvidenceController.js

@@ -0,0 +1,158 @@
+import { getPublicMergeRecordContract, getPublicRunMergeRecordContract, listPublicMergeClassRollupsContract, MERGE_RECORD_NOT_FOUND_REASON, tagPublicMergeReviewEffortContract, } from '@cat-factory/contracts';
+import { NotFoundError } from '@cat-factory/kernel';
+import { buildHonoRoute } from '@toad-contracts/hono';
+import { Hono } from 'hono';
+import { requireCapability } from '../../http/guards.js';
+import { requireScopedRun } from './decisions/scope.js';
+import { authorize, refuse } from './publicApiAuth.js';
+// The public MERGE-EVIDENCE surface: the merge decision a run left behind, the workspace's
+// per-change-class rollups, and the reviewer-effort tag a human leaves on a landed pull request
+// (ADR 0046).
+//
+// The gap this closes is a split one, not a missing read. An integration could already start a
+// run through `/api/v1` and merge its pull request through `POST /notifications/:id/act`; what it
+// could not do was record how much review that merge actually took, nor read back what the
+// workspace has accumulated per class. So the evidence the auto-merge policy is meant to
+// eventually stand on was collectable only by people driving the app, and never by the harness
+// driving the runs.
+//
+// Four rules shape this controller:
+//
+//  1. **Tagging is `write`, not `admin`.** `act` sits at the top of the ladder because it MERGES
+//     a pull request for real; recording how much review an already-landed one needed performs
+//     no external side-effect and can merge nothing. Gating the tag at `admin` too would mean an
+//     integration whose whole job is recording evidence had to hold a key that also deletes
+//     tasks and merges pull requests, which is the opposite of what the ladder is for.
+//  2. **The run-scoped read carries the `/api/v1/runs/:runId/*` access semantic**, resolved
+//     through `requireScopedRun` like every other route under that prefix, while the two
+//     record-addressed routes re-apply the key's workspace to the row they load, the rule every
+//     point read on this API follows. One prefix, one access model: the trap `debug-api.md`
+//     records.
+//
+//     The two therefore DIVERGE on a record whose run row is gone (a re-run, a cancel), and that
+//     divergence is the feature rather than a hole in it. A track record deliberately carries no
+//     foreign key to its execution: it is the evidence a merge decision LEFT BEHIND, and the
+//     rollups aggregate exactly those rows, so a record that stopped being readable the moment its
+//     run was re-run would erase the history the surface exists to serve. Nothing widens: both
+//     doors re-apply the key's workspace, and the rollups already publish every record in it at
+//     `read`. What the run-scoped read narrows is which RUN a key may address, not which record
+//     exists. A record id is derivable (`mtr_<executionId>`), so treating that read as a second
+//     confidentiality boundary would be a fiction anyway; the workspace is the boundary, once.
+//  3. **A missing record is a 404, never an empty body.** A run whose pipeline had no `merger`
+//     step made no merge decision, and that is a fact about the run; answering with a nulled-out
+//     record would read as a decision nobody made.
+//  4. **Refusals THROW**, so this surface answers with the one `handleError` envelope (which
+//     carries `details.reason`, the request id and the error-code metric). The exception is the
+//     AUTH gate, whose failure is shared DATA produced by `publicApiAuth`. Each refusal is built
+//     by ONE named factory below, so no two routes answer the same condition with different words
+//     and the reason a caller branches on is decided once per condition rather than per route.
+/** The merge track-record module, or a 503 naming what this deployment has not wired. */
+function requireTrackRecords(c) {
+    return requireCapability(c.get('container').mergeTrackRecords, 'Merge track records are not configured');
+}
+/**
+ * The 404 the RUN-scoped read answers for a run it CAN see that left no merge decision behind.
+ *
+ * It names the run as the run it is, not as a record id: record ids are minted inside the merge
+ * path and a caller holding only a run id has never seen one, so rendering `MergeTrackRecord
+ * '<runId>' not found` would tell it an id it never supplied is missing. Only `details.reason`
+ * is machine-readable, but the prose is what a person reads out of a log.
+ */
+const noMergeRecord = (runId) => new NotFoundError('Merge record for run', runId, { reason: 'no_merge_record' });
+/**
+ * The 404 the RECORD-addressed read answers, sharing its reason with the one
+ * `MergeTrackRecordService.tag` raises for the same condition on the same id. Two routes, one
+ * fact: the id names no record this workspace holds.
+ */
+const mergeRecordNotFound = (recordId) => new NotFoundError('MergeTrackRecord', recordId, { reason: MERGE_RECORD_NOT_FOUND_REASON });
+/**
+ * Project a stored record onto the public id vocabulary: `/api/v1` addresses a task as `taskId`
+ * and a run as `runId`, so publishing the row's own `blockId`/`executionId` would hand a caller
+ * two ids it can address nothing with, beside the ones it can. Nothing is dropped.
+ */
+function recordToWire(record) {
+    return {
+        recordId: record.id,
+        taskId: record.blockId,
+        runId: record.executionId,
+        changeClass: record.changeClass,
+        changedFileCount: record.changedFileCount,
+        complexity: record.complexity,
+        risk: record.risk,
+        impact: record.impact,
+        mergePresetId: record.riskPolicyId,
+        mergePresetName: record.riskPolicyName,
+        decision: record.decision,
+        reviewEffort: record.reviewEffort,
+        prNumber: record.prNumber,
+        prUrl: record.prUrl,
+        repoId: record.repoId,
+        provider: record.provider,
+        createdAt: record.createdAt,
+        resolvedAt: record.resolvedAt,
+        taggedAt: record.taggedAt,
+    };
+}
+export function publicMergeEvidenceController() {
+    const app = new Hono();
+    // The workspace's per-class rollups, as ONE aggregate. Registered ahead of the point read
+    // below so `rollups` is matched as itself rather than as a record id.
+    buildHonoRoute(app, listPublicMergeClassRollupsContract, async (c) => {
+        const gate = await authorize(c, listPublicMergeClassRollupsContract.minScope);
+        if ('fail' in gate)
+            return refuse(c, gate.fail);
+        const records = requireTrackRecords(c);
+        return c.json({ rollups: await records.service.rollups(gate.auth.workspaceId) }, 200);
+    });
+    // The merge decision a RUN left behind: the entry point for a caller holding a run id, and
+    // where it picks up the `recordId` the tag route takes.
+    buildHonoRoute(app, getPublicRunMergeRecordContract, async (c) => {
+        const gate = await authorize(c, getPublicRunMergeRecordContract.minScope);
+        if ('fail' in gate)
+            return refuse(c, gate.fail);
+        const { workspaceId } = gate.auth;
+        const runId = c.req.valid('param').runId;
+        const records = requireTrackRecords(c);
+        // Resolve the run FIRST, so a run this key may not read answers "no such run" rather than
+        // "no such record", the latter confirming the run exists to a caller that cannot see it.
+        // The same refusal the sibling evidence reads answer, from the same factory.
+        await requireScopedRun(c, workspaceId, runId);
+        const record = await records.service.getForRun(workspaceId, runId);
+        // A distinct reason from the one above: "there is no such run" is a caller's mistake to stop
+        // repeating, where "this run made no merge decision" is a fact about a run it may well be
+        // watching (its pipeline has no `merger`, or it never reached one). Prose alone leaves a
+        // machine unable to tell those apart.
+        if (!record)
+            throw noMergeRecord(runId);
+        return c.json(recordToWire(record), 200);
+    });
+    // One record by id, so a caller holding a `recordId` (off a `merge_tag_request` card, say) can
+    // read what it is about to tag.
+    buildHonoRoute(app, getPublicMergeRecordContract, async (c) => {
+        const gate = await authorize(c, getPublicMergeRecordContract.minScope);
+        if ('fail' in gate)
+            return refuse(c, gate.fail);
+        const recordId = c.req.valid('param').recordId;
+        const records = requireTrackRecords(c);
+        const record = await records.service.get(gate.auth.workspaceId, recordId);
+        if (!record)
+            throw mergeRecordNotFound(recordId);
+        return c.json(recordToWire(record), 200);
+    });
+    // Tag (or clear) the reviewer effort. `service.tag` raises the NotFound for an unknown or
+    // foreign id, carrying the SAME `merge_record_not_found` reason the read above answers, so the
+    // two routes addressing one id agree about what a missing one is. Refusing inside the service
+    // rather than pre-checking here keeps the write a single round-trip and leaves no window
+    // between a check and the patch. A deliberate user action gets a real refusal, where the merge
+    // path's own writes are best-effort and silent.
+    buildHonoRoute(app, tagPublicMergeReviewEffortContract, async (c) => {
+        const gate = await authorize(c, tagPublicMergeReviewEffortContract.minScope);
+        if ('fail' in gate)
+            return refuse(c, gate.fail);
+        const records = requireTrackRecords(c);
+        const tagged = await records.service.tag(gate.auth.workspaceId, c.req.valid('param').recordId, c.req.valid('json').reviewEffort);
+        return c.json(recordToWire(tagged), 200);
+    });
+    return app;
+}
+//# sourceMappingURL=PublicMergeEvidenceController.js.map

package/dist/modules/publicApi/PublicMergeEvidenceController.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PublicMergeEvidenceController.js","sourceRoot":"","sources":["../../../src/modules/publicApi/PublicMergeEvidenceController.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,4BAA4B,EAC5B,+BAA+B,EAC/B,mCAAmC,EACnC,6BAA6B,EAC7B,kCAAkC,GAGnC,MAAM,wBAAwB,CAAA;AAE/B,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AACrD,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAG3B,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAA;AACxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAA;AACvD,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAA;AAEtD,2FAA2F;AAC3F,gGAAgG;AAChG,cAAc;AACd,EAAE;AACF,+FAA+F;AAC/F,kGAAkG;AAClG,2FAA2F;AAC3F,yFAAyF;AACzF,+FAA+F;AAC/F,oBAAoB;AACpB,EAAE;AACF,oCAAoC;AACpC,EAAE;AACF,iGAAiG;AACjG,+FAA+F;AAC/F,iGAAiG;AACjG,4FAA4F;AAC5F,uFAAuF;AACvF,4FAA4F;AAC5F,yFAAyF;AACzF,gGAAgG;AAChG,4FAA4F;AAC5F,eAAe;AACf,EAAE;AACF,iGAAiG;AACjG,iGAAiG;AACjG,6FAA6F;AAC7F,mGAAmG;AACnG,+FAA+F;AAC/F,gGAAgG;AAChG,gGAAgG;AAChG,gGAAgG;AAChG,+FAA+F;AAC/F,+FAA+F;AAC/F,iGAAiG;AACjG,mDAAmD;AACnD,6FAA6F;AAC7F,gGAAgG;AAChG,iGAAiG;AACjG,kGAAkG;AAClG,+FAA+F;AAE/F,yFAAyF;AACzF,SAAS,mBAAmB,CAAmB,CAAa;IAC1D,OAAO,iBAAiB,CACtB,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,iBAAiB,EACpC,wCAAwC,CACzC,CAAA;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,aAAa,GAAG,CAAC,KAAa,EAAE,EAAE,CACtC,IAAI,aAAa,CAAC,sBAAsB,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC,CAAA;AAEjF;;;;GAIG;AACH,MAAM,mBAAmB,GAAG,CAAC,QAAgB,EAAE,EAAE,CAC/C,IAAI,aAAa,CAAC,kBAAkB,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,6BAA6B,EAAE,CAAC,CAAA;AAE5F;;;;GAIG;AACH,SAAS,YAAY,CAAC,MAAwB;IAC5C,OAAO;QACL,QAAQ,EAAE,MAAM,CAAC,EAAE;QACnB,MAAM,EAAE,MAAM,CAAC,OAAO;QACtB,KAAK,EAAE,MAAM,CAAC,WAAW;QACzB,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;QACzC,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,aAAa,EAAE,MAAM,CAAC,YAAY;QAClC,eAAe,EAAE,MAAM,CAAC,cAAc;QACtC,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,QAAQ,EAAE,MAAM,CAAC,QAAQ;KAC1B,CAAA;AACH,CAAC;AAED,MAAM,UAAU,6BAA6B;IAC3C,MAAM,GAAG,GAAG,IAAI,IAAI,EAAU,CAAA;IAE9B,0FAA0F;IAC1F,sEAAsE;IACtE,cAAc,CAAC,GAAG,EAAE,mCAAmC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACnE,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,CAAC,EAAE,mCAAmC,CAAC,QAAQ,CAAC,CAAA;QAC7E,IAAI,MAAM,IAAI,IAAI;YAAE,OAAO,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAA;QAC/C,MAAM,OAAO,GAAG,mBAAmB,CAAC,CAAC,CAAC,CAAA;QACtC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,GAAG,CAAC,CAAA;IACvF,CAAC,CAAC,CAAA;IAEF,2FAA2F;IAC3F,wDAAwD;IACxD,cAAc,CAAC,GAAG,EAAE,+BAA+B,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC/D,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,CAAC,EAAE,+BAA+B,CAAC,QAAQ,CAAC,CAAA;QACzE,IAAI,MAAM,IAAI,IAAI;YAAE,OAAO,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAA;QAC/C,MAAM,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC,IAAI,CAAA;QACjC,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,CAAA;QACxC,MAAM,OAAO,GAAG,mBAAmB,CAAC,CAAC,CAAC,CAAA;QACtC,0FAA0F;QAC1F,yFAAyF;QACzF,6EAA6E;QAC7E,MAAM,gBAAgB,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,CAAA;QAC7C,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,WAAW,EAAE,KAAK,CAAC,CAAA;QAClE,6FAA6F;QAC7F,0FAA0F;QAC1F,yFAAyF;QACzF,sCAAsC;QACtC,IAAI,CAAC,MAAM;YAAE,MAAM,aAAa,CAAC,KAAK,CAAC,CAAA;QACvC,OAAO,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,CAAA;IAC1C,CAAC,CAAC,CAAA;IAEF,+FAA+F;IAC/F,gCAAgC;IAChC,cAAc,CAAC,GAAG,EAAE,4BAA4B,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC5D,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,CAAC,EAAE,4BAA4B,CAAC,QAAQ,CAAC,CAAA;QACtE,IAAI,MAAM,IAAI,IAAI;YAAE,OAAO,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAA;QAC/C,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAA;QAC9C,MAAM,OAAO,GAAG,mBAAmB,CAAC,CAAC,CAAC,CAAA;QACtC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAA;QACzE,IAAI,CAAC,MAAM;YAAE,MAAM,mBAAmB,CAAC,QAAQ,CAAC,CAAA;QAChD,OAAO,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,CAAA;IAC1C,CAAC,CAAC,CAAA;IAEF,0FAA0F;IAC1F,+FAA+F;IAC/F,8FAA8F;IAC9F,yFAAyF;IACzF,+FAA+F;IAC/F,gDAAgD;IAChD,cAAc,CAAC,GAAG,EAAE,kCAAkC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAClE,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,CAAC,EAAE,kCAAkC,CAAC,QAAQ,CAAC,CAAA;QAC5E,IAAI,MAAM,IAAI,IAAI;YAAE,OAAO,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAA;QAC/C,MAAM,OAAO,GAAG,mBAAmB,CAAC,CAAC,CAAC,CAAA;QACtC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,GAAG,CACtC,IAAI,CAAC,IAAI,CAAC,WAAW,EACrB,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,QAAQ,EAC7B,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,YAAY,CACjC,CAAA;QACD,OAAO,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,CAAA;IAC1C,CAAC,CAAC,CAAA;IAEF,OAAO,GAAG,CAAA;AACZ,CAAC"}

package/dist/modules/publicApi/PublicSpecController.d.ts

@@ -0,0 +1,4 @@
+import { Hono } from 'hono';
+import type { AppEnv } from '../../http/env.js';
+export declare function publicSpecController(): Hono<AppEnv>;
+//# sourceMappingURL=PublicSpecController.d.ts.map

package/dist/modules/publicApi/PublicSpecController.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PublicSpecController.d.ts","sourceRoot":"","sources":["../../../src/modules/publicApi/PublicSpecController.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAE3B,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAA;AAsJ/C,wBAAgB,oBAAoB,IAAI,IAAI,CAAC,MAAM,CAAC,CAkCnD"}

package/dist/modules/publicApi/PublicSpecController.js

@@ -0,0 +1,169 @@
+import { getPublicServiceSpecContract, } from '@cat-factory/contracts';
+import { readServiceSpec } from '@cat-factory/agents';
+import { NotFoundError, UnavailableError } from '@cat-factory/kernel';
+import { buildHonoRoute } from '@toad-contracts/hono';
+import { Hono } from 'hono';
+import { authorizeOrThrow } from './publicApiAuth.js';
+import { toPublicServiceSpec } from './specProjection.js';
+// The public SPEC read (`GET /api/v1/services/:serviceId/spec`): the service's in-repo prescriptive
+// specification (the structured requirement tree and the Gherkin rendered from it) for a consumer
+// holding only an API key.
+//
+// It exists because the requirement ids on `GET /api/v1/runs/:runId/report` and `…/outcome` were a
+// join key onto a document no headless caller could fetch. With this, reviewing a run's outcome
+// against the criteria it was scored on is two GETs and a map lookup, with no repository clone and
+// no VCS credential.
+//
+// Everything below is one idea applied repeatedly: **a spec read has several outcomes and this
+// controller refuses to fold them**, because the fold is silent and always in the same direction.
+// The internal view the app's requirements window consumes reports `present: false` for both "this
+// branch holds no spec" and "we could not read the repository", which is right for a window that
+// draws an empty state and wrong here: it would tell every integrator that every service is
+// requirement-free for the duration of a VCS incident, and nothing in the payload would say
+// otherwise.
+//
+//  1. **No VCS integration wired** → `503`, `reason: "vcs_not_configured"`. The deployment, not the
+//     service.
+//  2. **The repository could not be read** → `503`, `reason: "spec_read_failed"`. Retry; the spec
+//     may well be there.
+//  3. **The branch could not be resolved** → `503`, `reason: "spec_ref_unresolved"`. Its own
+//     outcome rather than a shade of the last one, because it is the case the provider REFUSES to
+//     distinguish: a renamed, transferred or deleted repository, a stale default branch and a lost
+//     installation all answer 404 exactly as an absent file does. Distinct because the fix is
+//     distinct: the deployment's repo link is wrong, and no amount of retrying repairs it.
+//  4. **No spec on the default branch** → `200`, `anchor: "absent"`. A real, common, final answer,
+//     and one only reached with the ref resolved, so it is a statement about the branch rather
+//     than about our luck reaching it.
+//  5. **An anchor that is present and unusable** → `200`, `anchor: "unparsed"`, with the file named
+//     in `issues`. Its own value, not folded onto `absent`: a corrupt `spec/service.json` is a repo
+//     state somebody has to fix, and an integrator reading it as "no requirements" would be
+//     reporting a broken file as a service that declares nothing.
+//  6. **A spec that read partially** → `200` with the tree, `issues` naming every file that did not
+//     survive and `truncations` naming every cap that bit.
+//
+// One further case is not this controller's to invent: a service frame with no linked repository throws
+// the same `ValidationError` (a `422`) that `resolveRepoTarget` raises everywhere else, because
+// execution refuses that service too and a read that answered "no requirements" would describe a
+// service nothing can run as one that simply has nothing to say.
+//
+// Two further notes on what this is NOT. It is not a subscription: the spec on the default branch
+// is not the spec a run with an open pull request is working against, which is why the response
+// names the commit it describes. And there is no write half, deliberately: the files are the truth
+// and the write path is a reviewed commit (see `../../../../../contracts/src/public-spec.ts`).
+/** The refusal for an id that names no service this key may read. */
+const serviceNotFound = (serviceId) => new NotFoundError('Service', serviceId, { reason: 'service_not_found' });
+/**
+ * The run-repo resolver, or the 503 that names what this deployment has not wired.
+ *
+ * A total accessor rather than a nullable read the route re-refuses, the shape `http/guards.ts`
+ * describes. It carries its own `reason` rather than going through `requireCapability`, because on
+ * this surface the machine-readable code is the whole remedy: a headless caller has no setup screen
+ * to be sent to and branches on the string.
+ */
+function requireRepoResolver(c) {
+    const resolve = c.get('container').resolveRunRepoContext;
+    if (!resolve) {
+        throw new UnavailableError('No version-control integration is configured for this deployment', 'vcs_not_configured');
+    }
+    return resolve;
+}
+/**
+ * The head commit of the branch the spec is read from, or null when it cannot be resolved.
+ *
+ * Read BEFORE the tree walk, so the commit named is one the tree is at least as new as. It carries
+ * two jobs, and the second is why it is not merely decorative: it names the snapshot in
+ * `provenance`, and it is the only POSITIVE evidence this endpoint has that the branch is
+ * reachable at all. A repository that serves its files but not its ref still answers the spec, with
+ * an unnamed commit; a repository that answers neither is refused rather than reported empty (see
+ * {@link requireReadableAnchor}). Null is therefore "unproven", not "unimportant".
+ */
+async function resolveCommit(ctx) {
+    try {
+        return await ctx.repo.headSha(ctx.baseBranch);
+    }
+    catch {
+        return null;
+    }
+}
+/** Where the tree was read from, for a response that has to stand alone. */
+function provenanceOf(ctx, commit) {
+    return {
+        provider: ctx.provider ?? 'github',
+        // The resolver's owner/name are optional for back-compat with older fakes; the real resolvers
+        // always set them, and an empty string is the honest stand-in for a binding that did not.
+        owner: ctx.owner ?? '',
+        repo: ctx.name ?? '',
+        ref: ctx.baseBranch,
+        commit,
+    };
+}
+/**
+ * The state of the branch's presence anchor, or the refusal for an emptiness that is an OUTAGE
+ * rather than an answer.
+ *
+ * The one place the outcomes are separated, and the ONLY producer of the response's `anchor`, so a
+ * new state cannot be answered by accident: the `switch` is exhaustive over the reader's own
+ * `SpecAnchorState` through a `never`, and a fifth member fails the build here rather than
+ * surfacing as an unmapped value on `/api/v1`.
+ *
+ * `commit` is the second half of the judgement, and the reason this takes it. GitHub answers 404
+ * for a file that is absent, a repository that was renamed, transferred or deleted, a `ref` that no
+ * longer exists, and an installation that lost access, and the client maps all of them to "no such
+ * file". So `absent` alone is not evidence of an empty branch: it is equally the shape of a
+ * repository nobody can read. What separates them is whether the ref RESOLVED, which the walk's own
+ * provenance read already establishes, and which cannot 404 for the innocent reason a missing file
+ * can. Unresolved plus absent is unproven, and unproven is refused rather than served as the
+ * confident "this service declares nothing" the whole endpoint exists to avoid emitting.
+ */
+function requireReadableAnchor(view, commit) {
+    const anchor = view.diagnostics?.anchor ?? (view.present ? 'present' : 'absent');
+    switch (anchor) {
+        case 'present':
+        case 'unparsed':
+            // Both PROVE the branch was read: the anchor's own bytes came back.
+            return anchor;
+        case 'absent':
+            if (commit)
+                return 'absent';
+            throw new UnavailableError(`The branch the spec is read from could not be resolved, so an absent spec cannot be told apart from an unreachable repository`, 'spec_ref_unresolved');
+        case 'read_failed':
+            throw new UnavailableError("The service's repository could not be read; the spec may exist but could not be fetched", 'spec_read_failed');
+        default:
+            return assertNever(anchor);
+    }
+}
+/** The compile-time half of the exhaustiveness guard above. */
+function assertNever(value) {
+    throw new UnavailableError(`Unhandled spec anchor state: ${String(value)}`, 'spec_read_failed');
+}
+export function publicSpecController() {
+    const app = new Hono();
+    buildHonoRoute(app, getPublicServiceSpecContract, async (c) => {
+        const auth = await authorizeOrThrow(c, getPublicServiceSpecContract.minScope);
+        const { workspaceId } = auth;
+        const { serviceId } = c.req.valid('param');
+        const container = c.get('container');
+        // Resolve the service before the resolver's 503, so a mistyped id is answered by the 404 it
+        // deserves rather than by a report on the deployment's wiring.
+        if (!(await container.boardService.getService(workspaceId, serviceId))) {
+            throw serviceNotFound(serviceId);
+        }
+        // The repo resolution walks the block's ancestry to the enclosing service frame and reads that
+        // frame's linked repository: the same seam the engine binds a run's pre/post-ops through, and
+        // deliberately with no "first repo" fallback. A service under no linked repo THROWS out of
+        // here (a 422), which is the answer every other surface gives it.
+        const ctx = await requireRepoResolver(c)(workspaceId, serviceId);
+        if (!ctx) {
+            throw new UnavailableError('No version-control integration is connected for this workspace', 'vcs_not_configured');
+        }
+        const commit = await resolveCommit(ctx);
+        // `readServiceSpec` is the ONE spec reader: the same walk, the same per-node salvage and the
+        // same diagnostics the app's window and the run-evidence reductions read through. A second
+        // reader here is how two surfaces come to disagree about what a malformed group renders as.
+        const view = await readServiceSpec(ctx.repo, ctx.baseBranch);
+        const anchor = requireReadableAnchor(view, commit);
+        return c.json(toPublicServiceSpec(serviceId, anchor, view, provenanceOf(ctx, commit)), 200);
+    });
+    return app;
+}
+//# sourceMappingURL=PublicSpecController.js.map

package/dist/modules/publicApi/PublicSpecController.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PublicSpecController.js","sourceRoot":"","sources":["../../../src/modules/publicApi/PublicSpecController.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,4BAA4B,GAI7B,MAAM,wBAAwB,CAAA;AAC/B,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAA;AAErD,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAA;AACrE,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AACrD,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAG3B,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAA;AACrD,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAA;AAEzD,oGAAoG;AACpG,kGAAkG;AAClG,2BAA2B;AAC3B,EAAE;AACF,mGAAmG;AACnG,gGAAgG;AAChG,mGAAmG;AACnG,qBAAqB;AACrB,EAAE;AACF,+FAA+F;AAC/F,kGAAkG;AAClG,mGAAmG;AACnG,iGAAiG;AACjG,4FAA4F;AAC5F,4FAA4F;AAC5F,aAAa;AACb,EAAE;AACF,oGAAoG;AACpG,eAAe;AACf,kGAAkG;AAClG,yBAAyB;AACzB,6FAA6F;AAC7F,kGAAkG;AAClG,mGAAmG;AACnG,8FAA8F;AAC9F,2FAA2F;AAC3F,mGAAmG;AACnG,+FAA+F;AAC/F,uCAAuC;AACvC,oGAAoG;AACpG,oGAAoG;AACpG,4FAA4F;AAC5F,kEAAkE;AAClE,oGAAoG;AACpG,2DAA2D;AAC3D,EAAE;AACF,wGAAwG;AACxG,gGAAgG;AAChG,iGAAiG;AACjG,iEAAiE;AACjE,EAAE;AACF,kGAAkG;AAClG,gGAAgG;AAChG,mGAAmG;AACnG,+FAA+F;AAE/F,qEAAqE;AACrE,MAAM,eAAe,GAAG,CAAC,SAAiB,EAAE,EAAE,CAC5C,IAAI,aAAa,CAAC,SAAS,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC,CAAA;AAE1E;;;;;;;GAOG;AACH,SAAS,mBAAmB,CAAmB,CAAa;IAC1D,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,qBAAqB,CAAA;IACxD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,gBAAgB,CACxB,kEAAkE,EAClE,oBAAoB,CACrB,CAAA;IACH,CAAC;IACD,OAAO,OAAO,CAAA;AAChB,CAAC;AAED;;;;;;;;;GASG;AACH,KAAK,UAAU,aAAa,CAAC,GAAmB;IAC9C,IAAI,CAAC;QACH,OAAO,MAAM,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED,4EAA4E;AAC5E,SAAS,YAAY,CAAC,GAAmB,EAAE,MAAqB;IAC9D,OAAO;QACL,QAAQ,EAAE,GAAG,CAAC,QAAQ,IAAI,QAAQ;QAClC,8FAA8F;QAC9F,0FAA0F;QAC1F,KAAK,EAAE,GAAG,CAAC,KAAK,IAAI,EAAE;QACtB,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,EAAE;QACpB,GAAG,EAAE,GAAG,CAAC,UAAU;QACnB,MAAM;KACP,CAAA;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,SAAS,qBAAqB,CAAC,IAAqB,EAAE,MAAqB;IACzE,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAA;IAChF,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,SAAS,CAAC;QACf,KAAK,UAAU;YACb,oEAAoE;YACpE,OAAO,MAAM,CAAA;QACf,KAAK,QAAQ;YACX,IAAI,MAAM;gBAAE,OAAO,QAAQ,CAAA;YAC3B,MAAM,IAAI,gBAAgB,CACxB,+HAA+H,EAC/H,qBAAqB,CACtB,CAAA;QACH,KAAK,aAAa;YAChB,MAAM,IAAI,gBAAgB,CACxB,yFAAyF,EACzF,kBAAkB,CACnB,CAAA;QACH;YACE,OAAO,WAAW,CAAC,MAAM,CAAC,CAAA;IAC9B,CAAC;AACH,CAAC;AAED,+DAA+D;AAC/D,SAAS,WAAW,CAAC,KAAY;IAC/B,MAAM,IAAI,gBAAgB,CAAC,gCAAgC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,kBAAkB,CAAC,CAAA;AACjG,CAAC;AAED,MAAM,UAAU,oBAAoB;IAClC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAU,CAAA;IAE9B,cAAc,CAAC,GAAG,EAAE,4BAA4B,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC5D,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,CAAC,EAAE,4BAA4B,CAAC,QAAQ,CAAC,CAAA;QAC7E,MAAM,EAAE,WAAW,EAAE,GAAG,IAAI,CAAA;QAC5B,MAAM,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;QAC1C,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;QACpC,4FAA4F;QAC5F,+DAA+D;QAC/D,IAAI,CAAC,CAAC,MAAM,SAAS,CAAC,YAAY,CAAC,UAAU,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC,EAAE,CAAC;YACvE,MAAM,eAAe,CAAC,SAAS,CAAC,CAAA;QAClC,CAAC;QACD,+FAA+F;QAC/F,8FAA8F;QAC9F,2FAA2F;QAC3F,kEAAkE;QAClE,MAAM,GAAG,GAAG,MAAM,mBAAmB,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,SAAS,CAAC,CAAA;QAChE,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,gBAAgB,CACxB,gEAAgE,EAChE,oBAAoB,CACrB,CAAA;QACH,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,CAAA;QACvC,6FAA6F;QAC7F,2FAA2F;QAC3F,4FAA4F;QAC5F,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,UAAU,CAAC,CAAA;QAC5D,MAAM,MAAM,GAAG,qBAAqB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;QAClD,OAAO,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;IAC7F,CAAC,CAAC,CAAA;IAEF,OAAO,GAAG,CAAA;AACZ,CAAC"}

package/dist/modules/publicApi/decisions/scope.d.ts

@@ -1,5 +1,6 @@
 import type { BrainstormSession, BrainstormStage, ClarityReview, ExecutionInstance, RequirementReview } from '@cat-factory/contracts';
 import type { GateActor } from '@cat-factory/kernel';
+import { NotFoundError } from '@cat-factory/kernel';
 import type { PublicApiKeyAuth } from '@cat-factory/integrations';
 import type { Context } from 'hono';
 import type { BrainstormModule, ClarityModule, InterviewGate, RequirementsModule } from '@cat-factory/orchestration';
@@ -31,6 +32,26 @@ export interface ScopedRun {
  * unreachable branch in four published SDK error vocabularies.
  */
 export declare function loadScopedRun<E extends AppEnv>(c: Context<E>, workspaceId: string, runId: string): Promise<ScopedRun | null>;
+/**
+ * The refusal every THROWING route under `/api/v1/runs/:runId/*` shares: the id names no run this
+ * key may read.
+ *
+ * One factory rather than a literal per route so no two routes answer the same condition with
+ * different words, and so the reason a caller branches on is decided once for the whole prefix.
+ * It lives beside {@link loadScopedRun} because the two are one thought: this is what a null from
+ * that loader MEANS on a surface whose refusals throw.
+ */
+export declare const runNotFound: (runId: string) => NotFoundError;
+/**
+ * {@link loadScopedRun}'s total twin: resolve the run or THROW {@link runNotFound}.
+ *
+ * The nullable loader stays exported for the DATA-returning decision surface (which must emit its
+ * own typed envelope) and for the two evidence reads that answer the same 404 a second time when
+ * the composed report comes back empty. Every other caller wants the run or nothing, and a
+ * `require*` accessor is how this codebase spells that. A nullable read plus an `if` at each
+ * route is the shape it replaced.
+ */
+export declare function requireScopedRun<E extends AppEnv>(c: Context<E>, workspaceId: string, runId: string): Promise<ScopedRun>;
 /** The error a gate rejected with, kept as DATA so each handler emits its own typed `c.json`. */
 export type GateFailure = {
     fail: {

package/dist/modules/publicApi/decisions/scope.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"scope.d.ts","sourceRoot":"","sources":["../../../../src/modules/publicApi/decisions/scope.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,iBAAiB,EACjB,eAAe,EACf,aAAa,EACb,iBAAiB,EACjB,iBAAiB,EAClB,MAAM,wBAAwB,CAAA;AAC/B,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAA;AACpD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAA;AACjE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAA;AAEnC,OAAO,KAAK,EACV,gBAAgB,EAChB,aAAa,EACb,aAAa,EACb,kBAAkB,EACnB,MAAM,4BAA4B,CAAA;AACnC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAA;AAYlD,6EAA6E;AAC7E,MAAM,WAAW,SAAS;IACxB,SAAS,EAAE,iBAAiB,CAAA;IAC5B,0EAA0E;IAC1E,OAAO,EAAE,MAAM,CAAA;CAChB;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAsB,aAAa,CAAC,CAAC,SAAS,MAAM,EAClD,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,EACb,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAQ3B;AAED,iGAAiG;AACjG,MAAM,MAAM,WAAW,GAAG;IAAE,IAAI,EAAE;QAAE,MAAM,EAAE,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,CAAA;AAEpG;;;;;;;;GAQG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,WAAW,CAAC,MAAM,CAAC,GAAG;IACtD,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAA;CACzC,CAEA;AAED;;;;;;;;GAQG;AACH,wBAAsB,kBAAkB,CAAC,CAAC,SAAS,MAAM,EACvD,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,EACb,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,SAAS,CAAC;IAAC,IAAI,EAAE,gBAAgB,CAAA;CAAE,GAAG,WAAW,CAAC,CAc3F;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,gBAAgB,GAAG,SAAS,CAEpE;AAED,kFAAkF;AAClF,MAAM,WAAW,YAAY,CAAC,OAAO;IACnC,WAAW,EAAE,MAAM,CAAA;IACnB,MAAM,EAAE,SAAS,CAAA;IACjB,MAAM,EAAE,OAAO,CAAA;CAChB;AAED,wDAAwD;AACxD,MAAM,WAAW,kBAAmB,SAAQ,YAAY,CAAC,iBAAiB,CAAC;IACzE,YAAY,EAAE,kBAAkB,CAAA;CACjC;AAED;;;;;GAKG;AACH,wBAAsB,sBAAsB,CAAC,CAAC,SAAS,MAAM,EAC3D,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,EACb,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,kBAAkB,GAAG,WAAW,CAAC,CAa3C;AAED,mDAAmD;AACnD,MAAM,WAAW,aAAc,SAAQ,YAAY,CAAC,aAAa,CAAC;IAChE,OAAO,EAAE,aAAa,CAAA;CACvB;AAED;;;;;GAKG;AACH,wBAAsB,iBAAiB,CAAC,CAAC,SAAS,MAAM,EACtD,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,EACb,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,aAAa,GAAG,WAAW,CAAC,CAatC;AAED,qEAAqE;AACrE,MAAM,WAAW,gBAAiB,SAAQ,YAAY,CAAC,iBAAiB,CAAC;IACvE,UAAU,EAAE,gBAAgB,CAAA;IAC5B,KAAK,EAAE,eAAe,CAAA;CACvB;AAED;;;;GAIG;AACH,wBAAsB,oBAAoB,CAAC,CAAC,SAAS,MAAM,EACzD,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,EACb,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,eAAe,GACrB,OAAO,CAAC,gBAAgB,GAAG,WAAW,CAAC,CAazC;AAED,+FAA+F;AAC/F,MAAM,WAAW,eAAe;IAC9B,WAAW,EAAE,MAAM,CAAA;IACnB,MAAM,EAAE,SAAS,CAAA;IACjB,IAAI,EAAE,aAAa,CAAA;IACnB,4FAA4F;IAC5F,QAAQ,EAAE,MAAM,CAAA;CACjB;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,mBAAmB,CAAC,CAAC,SAAS,MAAM,EACxD,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,EACb,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,eAAe,GAAG,WAAW,CAAC,CAiBxC"}
+{"version":3,"file":"scope.d.ts","sourceRoot":"","sources":["../../../../src/modules/publicApi/decisions/scope.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,iBAAiB,EACjB,eAAe,EACf,aAAa,EACb,iBAAiB,EACjB,iBAAiB,EAClB,MAAM,wBAAwB,CAAA;AAC/B,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAA;AACpD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AACnD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAA;AACjE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAA;AAEnC,OAAO,KAAK,EACV,gBAAgB,EAChB,aAAa,EACb,aAAa,EACb,kBAAkB,EACnB,MAAM,4BAA4B,CAAA;AACnC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAA;AAYlD,6EAA6E;AAC7E,MAAM,WAAW,SAAS;IACxB,SAAS,EAAE,iBAAiB,CAAA;IAC5B,0EAA0E;IAC1E,OAAO,EAAE,MAAM,CAAA;CAChB;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAsB,aAAa,CAAC,CAAC,SAAS,MAAM,EAClD,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,EACb,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAQ3B;AAED;;;;;;;;GAQG;AACH,eAAO,MAAM,WAAW,UAAW,MAAM,KAAG,aACkB,CAAA;AAE9D;;;;;;;;GAQG;AACH,wBAAsB,gBAAgB,CAAC,CAAC,SAAS,MAAM,EACrD,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,EACb,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,SAAS,CAAC,CAIpB;AAED,iGAAiG;AACjG,MAAM,MAAM,WAAW,GAAG;IAAE,IAAI,EAAE;QAAE,MAAM,EAAE,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,CAAA;AAEpG;;;;;;;;GAQG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,WAAW,CAAC,MAAM,CAAC,GAAG;IACtD,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAA;CACzC,CAEA;AAED;;;;;;;;GAQG;AACH,wBAAsB,kBAAkB,CAAC,CAAC,SAAS,MAAM,EACvD,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,EACb,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,SAAS,CAAC;IAAC,IAAI,EAAE,gBAAgB,CAAA;CAAE,GAAG,WAAW,CAAC,CAc3F;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,gBAAgB,GAAG,SAAS,CAEpE;AAED,kFAAkF;AAClF,MAAM,WAAW,YAAY,CAAC,OAAO;IACnC,WAAW,EAAE,MAAM,CAAA;IACnB,MAAM,EAAE,SAAS,CAAA;IACjB,MAAM,EAAE,OAAO,CAAA;CAChB;AAED,wDAAwD;AACxD,MAAM,WAAW,kBAAmB,SAAQ,YAAY,CAAC,iBAAiB,CAAC;IACzE,YAAY,EAAE,kBAAkB,CAAA;CACjC;AAED;;;;;GAKG;AACH,wBAAsB,sBAAsB,CAAC,CAAC,SAAS,MAAM,EAC3D,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,EACb,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,kBAAkB,GAAG,WAAW,CAAC,CAa3C;AAED,mDAAmD;AACnD,MAAM,WAAW,aAAc,SAAQ,YAAY,CAAC,aAAa,CAAC;IAChE,OAAO,EAAE,aAAa,CAAA;CACvB;AAED;;;;;GAKG;AACH,wBAAsB,iBAAiB,CAAC,CAAC,SAAS,MAAM,EACtD,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,EACb,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,aAAa,GAAG,WAAW,CAAC,CAatC;AAED,qEAAqE;AACrE,MAAM,WAAW,gBAAiB,SAAQ,YAAY,CAAC,iBAAiB,CAAC;IACvE,UAAU,EAAE,gBAAgB,CAAA;IAC5B,KAAK,EAAE,eAAe,CAAA;CACvB;AAED;;;;GAIG;AACH,wBAAsB,oBAAoB,CAAC,CAAC,SAAS,MAAM,EACzD,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,EACb,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,eAAe,GACrB,OAAO,CAAC,gBAAgB,GAAG,WAAW,CAAC,CAazC;AAED,+FAA+F;AAC/F,MAAM,WAAW,eAAe;IAC9B,WAAW,EAAE,MAAM,CAAA;IACnB,MAAM,EAAE,SAAS,CAAA;IACjB,IAAI,EAAE,aAAa,CAAA;IACnB,4FAA4F;IAC5F,QAAQ,EAAE,MAAM,CAAA;CACjB;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,mBAAmB,CAAC,CAAC,SAAS,MAAM,EACxD,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,EACb,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,eAAe,GAAG,WAAW,CAAC,CAiBxC"}

package/dist/modules/publicApi/decisions/scope.js

@@ -1,3 +1,4 @@
+import { NotFoundError } from '@cat-factory/kernel';
 import { findParkedInterviewStep } from '@cat-factory/orchestration';
 import { authorize } from '../publicApiAuth.js';
 /**
@@ -31,6 +32,31 @@ export async function loadScopedRun(c, workspaceId, runId) {
     const anchor = await container.boardService.getInternalTask(workspaceId, execution.blockId);
     return anchor ? { execution, blockId: execution.blockId } : null;
 }
+/**
+ * The refusal every THROWING route under `/api/v1/runs/:runId/*` shares: the id names no run this
+ * key may read.
+ *
+ * One factory rather than a literal per route so no two routes answer the same condition with
+ * different words, and so the reason a caller branches on is decided once for the whole prefix.
+ * It lives beside {@link loadScopedRun} because the two are one thought: this is what a null from
+ * that loader MEANS on a surface whose refusals throw.
+ */
+export const runNotFound = (runId) => new NotFoundError('Run', runId, { reason: 'run_not_found' });
+/**
+ * {@link loadScopedRun}'s total twin: resolve the run or THROW {@link runNotFound}.
+ *
+ * The nullable loader stays exported for the DATA-returning decision surface (which must emit its
+ * own typed envelope) and for the two evidence reads that answer the same 404 a second time when
+ * the composed report comes back empty. Every other caller wants the run or nothing, and a
+ * `require*` accessor is how this codebase spells that. A nullable read plus an `if` at each
+ * route is the shape it replaced.
+ */
+export async function requireScopedRun(c, workspaceId, runId) {
+    const scoped = await loadScopedRun(c, workspaceId, runId);
+    if (!scoped)
+        throw runNotFound(runId);
+    return scoped;
+}
 /**
  * Emit a gate's rejection as the surface's standard error body.
  *

package/dist/modules/publicApi/decisions/scope.js.map

@@ -1 +1 @@
-{"version":3,"file":"scope.js","sourceRoot":"","sources":["../../../../src/modules/publicApi/decisions/scope.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAA;AAQpE,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAA;AAkB/C;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,CAAa,EACb,WAAmB,EACnB,KAAa;IAEb,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;IACpC,MAAM,SAAS,GAAG,MAAM,SAAS,CAAC,mBAAmB,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,CAAC,CAAA;IAC7E,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAA;IAC3B,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,YAAY,CAAC,cAAc,CAAC,WAAW,EAAE,SAAS,CAAC,OAAO,CAAC,CAAA;IACxF,IAAI,IAAI;QAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,EAAE,CAAA;IAC1D,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,YAAY,CAAC,eAAe,CAAC,WAAW,EAAE,SAAS,CAAC,OAAO,CAAC,CAAA;IAC3F,OAAO,MAAM,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,CAAA;AAClE,CAAC;AAKD;;;;;;;;GAQG;AACH,MAAM,UAAU,WAAW,CAAC,IAAyB;IAGnD,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,CAAA;AAC9D,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,CAAa,EACb,KAAa;IAEb,gGAAgG;IAChG,iGAAiG;IACjG,iGAAiG;IACjG,4FAA4F;IAC5F,iGAAiG;IACjG,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAA;IACzC,IAAI,MAAM,IAAI,IAAI;QAAE,OAAO,IAAI,CAAA;IAC/B,MAAM,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC,IAAI,CAAA;IACjC,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,CAAA;IACzD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,eAAe,EAAE,EAAE,CAAA;IAC/E,CAAC;IACD,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAA;AACjD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAsB;IACvD,OAAO,EAAE,EAAE,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;AACxD,CAAC;AAcD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,CAAa,EACb,KAAa;IAEb,MAAM,KAAK,GAAG,MAAM,kBAAkB,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;IAChD,IAAI,MAAM,IAAI,KAAK;QAAE,OAAO,KAAK,CAAA;IACjC,MAAM,YAAY,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,YAAY,CAAA;IACpD,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,OAAO,iBAAiB,CAAC,uCAAuC,CAAC,CAAA;IACnE,CAAC;IACD,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,KAAK,CAAA;IACrC,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,WAAW,CAAC,WAAW,EAAE,MAAM,CAAC,OAAO,CAAC,CAAA;IAClF,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,QAAQ,CAAC,qCAAqC,CAAC,CAAA;IACxD,CAAC;IACD,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,CAAA;AACtD,CAAC;AAOD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,CAAa,EACb,KAAa;IAEb,MAAM,KAAK,GAAG,MAAM,kBAAkB,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;IAChD,IAAI,MAAM,IAAI,KAAK;QAAE,OAAO,KAAK,CAAA;IACjC,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,OAAO,CAAA;IAC1C,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,iBAAiB,CAAC,kCAAkC,CAAC,CAAA;IAC9D,CAAC;IACD,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,KAAK,CAAA;IACrC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,WAAW,EAAE,MAAM,CAAC,OAAO,CAAC,CAAA;IAC7E,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,QAAQ,CAAC,gCAAgC,CAAC,CAAA;IACnD,CAAC;IACD,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CAAA;AACjD,CAAC;AAQD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,CAAa,EACb,KAAa,EACb,KAAsB;IAEtB,MAAM,KAAK,GAAG,MAAM,kBAAkB,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;IAChD,IAAI,MAAM,IAAI,KAAK;QAAE,OAAO,KAAK,CAAA;IACjC,MAAM,UAAU,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,UAAU,CAAA;IAChD,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,iBAAiB,CAAC,8BAA8B,CAAC,CAAA;IAC1D,CAAC;IACD,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,KAAK,CAAA;IACrC,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,WAAW,CAAC,WAAW,EAAE,MAAM,CAAC,OAAO,CAAC,CAAA;IACxF,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,QAAQ,CAAC,mBAAmB,KAAK,aAAa,CAAC,CAAA;IACxD,CAAC;IACD,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,CAAA;AAC3D,CAAC;AAWD;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,CAAa,EACb,KAAa;IAEb,MAAM,KAAK,GAAG,MAAM,kBAAkB,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;IAChD,IAAI,MAAM,IAAI,KAAK;QAAE,OAAO,KAAK,CAAA;IACjC,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,KAAK,CAAA;IACrC,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;IACpC,MAAM,MAAM,GAAG,uBAAuB,CAAC,MAAM,CAAC,SAAS,EAAE,SAAS,CAAC,iBAAiB,CAAC,CAAA;IACrF,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO;YACL,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,gCAAgC,EAAE;SACvF,CAAA;IACH,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAA;IACtC,MAAM,IAAI,GAAG,SAAS,CAAC,gBAAgB,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAA;IAClE,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,iBAAiB,CAAC,OAAO,QAAQ,gCAAgC,CAAC,CAAA;IAC3E,CAAC;IACD,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAA;AAChD,CAAC;AAED,iGAAiG;AACjG,SAAS,iBAAiB,CAAC,OAAe;IACxC,OAAO,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,EAAE,CAAA;AAChE,CAAC;AAED;;;;GAIG;AACH,SAAS,QAAQ,CAAC,OAAe;IAC/B,OAAO,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,EAAE,CAAA;AAC9D,CAAC"}
+{"version":3,"file":"scope.js","sourceRoot":"","sources":["../../../../src/modules/publicApi/decisions/scope.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AAGnD,OAAO,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAA;AAQpE,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAA;AAkB/C;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,CAAa,EACb,WAAmB,EACnB,KAAa;IAEb,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;IACpC,MAAM,SAAS,GAAG,MAAM,SAAS,CAAC,mBAAmB,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,CAAC,CAAA;IAC7E,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAA;IAC3B,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,YAAY,CAAC,cAAc,CAAC,WAAW,EAAE,SAAS,CAAC,OAAO,CAAC,CAAA;IACxF,IAAI,IAAI;QAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,EAAE,CAAA;IAC1D,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,YAAY,CAAC,eAAe,CAAC,WAAW,EAAE,SAAS,CAAC,OAAO,CAAC,CAAA;IAC3F,OAAO,MAAM,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,CAAA;AAClE,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,KAAa,EAAiB,EAAE,CAC1D,IAAI,aAAa,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,CAAA;AAE9D;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,CAAa,EACb,WAAmB,EACnB,KAAa;IAEb,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,CAAA;IACzD,IAAI,CAAC,MAAM;QAAE,MAAM,WAAW,CAAC,KAAK,CAAC,CAAA;IACrC,OAAO,MAAM,CAAA;AACf,CAAC;AAKD;;;;;;;;GAQG;AACH,MAAM,UAAU,WAAW,CAAC,IAAyB;IAGnD,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,CAAA;AAC9D,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,CAAa,EACb,KAAa;IAEb,gGAAgG;IAChG,iGAAiG;IACjG,iGAAiG;IACjG,4FAA4F;IAC5F,iGAAiG;IACjG,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAA;IACzC,IAAI,MAAM,IAAI,IAAI;QAAE,OAAO,IAAI,CAAA;IAC/B,MAAM,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC,IAAI,CAAA;IACjC,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,CAAA;IACzD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,eAAe,EAAE,EAAE,CAAA;IAC/E,CAAC;IACD,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAA;AACjD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAsB;IACvD,OAAO,EAAE,EAAE,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;AACxD,CAAC;AAcD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,CAAa,EACb,KAAa;IAEb,MAAM,KAAK,GAAG,MAAM,kBAAkB,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;IAChD,IAAI,MAAM,IAAI,KAAK;QAAE,OAAO,KAAK,CAAA;IACjC,MAAM,YAAY,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,YAAY,CAAA;IACpD,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,OAAO,iBAAiB,CAAC,uCAAuC,CAAC,CAAA;IACnE,CAAC;IACD,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,KAAK,CAAA;IACrC,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,WAAW,CAAC,WAAW,EAAE,MAAM,CAAC,OAAO,CAAC,CAAA;IAClF,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,QAAQ,CAAC,qCAAqC,CAAC,CAAA;IACxD,CAAC;IACD,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,CAAA;AACtD,CAAC;AAOD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,CAAa,EACb,KAAa;IAEb,MAAM,KAAK,GAAG,MAAM,kBAAkB,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;IAChD,IAAI,MAAM,IAAI,KAAK;QAAE,OAAO,KAAK,CAAA;IACjC,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,OAAO,CAAA;IAC1C,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,iBAAiB,CAAC,kCAAkC,CAAC,CAAA;IAC9D,CAAC;IACD,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,KAAK,CAAA;IACrC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,WAAW,EAAE,MAAM,CAAC,OAAO,CAAC,CAAA;IAC7E,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,QAAQ,CAAC,gCAAgC,CAAC,CAAA;IACnD,CAAC;IACD,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CAAA;AACjD,CAAC;AAQD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,CAAa,EACb,KAAa,EACb,KAAsB;IAEtB,MAAM,KAAK,GAAG,MAAM,kBAAkB,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;IAChD,IAAI,MAAM,IAAI,KAAK;QAAE,OAAO,KAAK,CAAA;IACjC,MAAM,UAAU,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,UAAU,CAAA;IAChD,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,iBAAiB,CAAC,8BAA8B,CAAC,CAAA;IAC1D,CAAC;IACD,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,KAAK,CAAA;IACrC,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,WAAW,CAAC,WAAW,EAAE,MAAM,CAAC,OAAO,CAAC,CAAA;IACxF,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,QAAQ,CAAC,mBAAmB,KAAK,aAAa,CAAC,CAAA;IACxD,CAAC;IACD,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,CAAA;AAC3D,CAAC;AAWD;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,CAAa,EACb,KAAa;IAEb,MAAM,KAAK,GAAG,MAAM,kBAAkB,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;IAChD,IAAI,MAAM,IAAI,KAAK;QAAE,OAAO,KAAK,CAAA;IACjC,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,KAAK,CAAA;IACrC,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;IACpC,MAAM,MAAM,GAAG,uBAAuB,CAAC,MAAM,CAAC,SAAS,EAAE,SAAS,CAAC,iBAAiB,CAAC,CAAA;IACrF,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO;YACL,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,gCAAgC,EAAE;SACvF,CAAA;IACH,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAA;IACtC,MAAM,IAAI,GAAG,SAAS,CAAC,gBAAgB,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAA;IAClE,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,iBAAiB,CAAC,OAAO,QAAQ,gCAAgC,CAAC,CAAA;IAC3E,CAAC;IACD,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAA;AAChD,CAAC;AAED,iGAAiG;AACjG,SAAS,iBAAiB,CAAC,OAAe;IACxC,OAAO,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,EAAE,CAAA;AAChE,CAAC;AAED;;;;GAIG;AACH,SAAS,QAAQ,CAAC,OAAe;IAC/B,OAAO,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,EAAE,CAAA;AAC9D,CAAC"}