npm - @cat-factory/worker - Versions diffs - 0.157.0 → 0.159.0 - Mend

@cat-factory/worker 0.157.0 → 0.159.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (39) hide show

package/audit-migrations/0001_audit_events.sql ADDED Viewed

@@ -0,0 +1,41 @@
+-- The account audit log: an append-only record of who did what, when, for the privileged and
+-- destructive actions an account admin is answerable for.
+--
+-- Append-only by design: nothing in the platform issues an UPDATE or a DELETE against this
+-- table (the retention sweep is a later slice and is the only writer that ever will). That is
+-- the property that makes the log worth reading, so it is a convention enforced by the absence
+-- of repository methods rather than by a constraint.
+--
+-- `actor_kind` + the two nullable actor columns are a discriminated principal, not a nullable
+-- user id: `system` (the engine acted) and an unresolved user are different facts, and a log
+-- that renders them identically misattributes a human action to automation.
+--
+-- The read index is (account_id, at DESC, id DESC) because the viewer's ONLY read is one
+-- account's newest-first page: `id` breaks the tie so two events recorded in the same
+-- millisecond cannot straddle a page boundary and be served twice or skipped.
+-- This is the FIRST migration of the dedicated `AUDIT_DB` database's own lineage, not of the
+-- main one. The log lives apart because, once the run-lifecycle slice lands, it is the only table
+-- in the platform that grows monotonically with run volume AND wants a multi-year window
+-- (`token_usage` grows with runs but prunes at ~395 days; the telemetry sinks grow far faster but
+-- prune at 3). On a store with a hard 10 GB per-database ceiling that combination is a capacity
+-- question, and keeping it out of `DB` is what stops a years-deep trail from competing with live
+-- transactional state. Measured at ~508 B/row on Postgres, so 1,000 runs/day is ~550 MB/year.
+-- Mirrors the Node Drizzle `auditEvents` table (db/tables/audit.ts); keep in step.
+CREATE TABLE audit_events (
+  id TEXT PRIMARY KEY,
+  account_id TEXT NOT NULL,
+  workspace_id TEXT,
+  actor_kind TEXT NOT NULL,
+  actor_user_id TEXT,
+  actor_api_key_id TEXT,
+  action TEXT NOT NULL,
+  target_type TEXT NOT NULL,
+  target_id TEXT NOT NULL,
+  -- WHAT changed, as a JSON object of machine-readable fields (`{"previousRole":"viewer"}`),
+  -- never a human-readable sentence: the backend does not localize, and an audit row is
+  -- PERSISTED, so English prose written today could never be re-rendered for a reader in another
+  -- locale. The viewer interpolates these into translated copy keyed by `action`.
+  details TEXT NOT NULL,
+  at INTEGER NOT NULL
+);
+CREATE INDEX idx_audit_events_account_at ON audit_events (account_id, at DESC, id DESC);

package/dist/app.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"app.d.ts","sourceRoot":"","sources":["../src/app.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAA;AAU/D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAA;AAClE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAA;AAC7D,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,sBAAsB,CAAA;AAC/C,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAW3B,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,6BAA6B,CAAA;AAEzD,MAAM,WAAW,gBAAgB;IAC/B,+EAA+E;IAC/E,SAAS,CAAC,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAA;IACrC,mFAAmF;IACnF,uBAAuB,CAAC,EAAE,OAAO,CAAA;IACjC,gFAAgF;IAChF,aAAa,CAAC,EAAE,qBAAqB,CAAA;IACrC;;;;;;;;;;;;;;;;;;;OAmBG;IACH,wBAAwB,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,KAAK,kBAAkB,CAAA;IAC3D;;;;;;;;;;;OAWG;IACH,uCAAuC,CAAC,EAAE,OAAO,CAAA;CAClD;AAqBD;;;;;;;;;;GAUG;AACH,wBAAgB,SAAS,CAAC,OAAO,GAAE,gBAAqB,GAAG,IAAI,CAAC,MAAM,CAAC,~~CAiItE~~"}
1	+ {"version":3,"file":"app.d.ts","sourceRoot":"","sources":["../src/app.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAA;AAU/D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAA;AAClE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAA;AAC7D,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,sBAAsB,CAAA;AAC/C,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAW3B,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,6BAA6B,CAAA;AAEzD,MAAM,WAAW,gBAAgB;IAC/B,+EAA+E;IAC/E,SAAS,CAAC,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAA;IACrC,mFAAmF;IACnF,uBAAuB,CAAC,EAAE,OAAO,CAAA;IACjC,gFAAgF;IAChF,aAAa,CAAC,EAAE,qBAAqB,CAAA;IACrC;;;;;;;;;;;;;;;;;;;OAmBG;IACH,wBAAwB,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,KAAK,kBAAkB,CAAA;IAC3D;;;;;;;;;;;OAWG;IACH,uCAAuC,CAAC,EAAE,OAAO,CAAA;CAClD;AAqBD;;;;;;;;;;GAUG;AACH,wBAAgB,SAAS,CAAC,OAAO,GAAE,gBAAqB,GAAG,IAAI,CAAC,MAAM,CAAC,CAwItE"}

package/dist/app.js CHANGED Viewed

@@ -129,6 +129,13 @@ export function createApp(options = {}) {
         checks.telemetry = env.TELEMETRY_DB
             ? await probe(() => env.TELEMETRY_DB.prepare('SELECT 1').first())
             : { ok: false, error: 'TELEMETRY_DB is not bound' };
+        // AUDIT_DB is REQUIRED for the same reason and fails the same way: the container build
+        // refuses it (`requireAuditDb`), so an unbound binding serves the misconfiguration screen
+        // on EVERY request rather than quietly recording nothing. Probed here so a fresh deployment
+        // reads which binding is missing off one unauthenticated endpoint.
+        checks.audit = env.AUDIT_DB
+            ? await probe(() => env.AUDIT_DB.prepare('SELECT 1').first())
+            : { ok: false, error: 'AUDIT_DB is not bound' };
         const ready = Object.values(checks).every((check) => check.ok);
         return c.json({ status: ready ? 'ready' : 'not_ready', checks }, ready ? 200 : 503);
     });

package/dist/app.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"app.js","sourceRoot":"","sources":["../src/app.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,0BAA0B,EAC1B,uBAAuB,EACvB,MAAM,EACN,aAAa,EACb,mBAAmB,EACnB,uBAAuB,GACxB,MAAM,qBAAqB,CAAA;AAI5B,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAC3B,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EACL,oBAAoB,EACpB,oBAAoB,EACpB,qBAAqB,EACrB,iBAAiB,GAClB,MAAM,8BAA8B,CAAA;AACrC,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAA;AAC3D,OAAO,EAAE,wBAAwB,EAAE,MAAM,qCAAqC,CAAA;AAC9E,OAAO,EAAE,WAAW,EAAE,MAAM,oCAAoC,CAAA;AA8ChE,+FAA+F;AAC/F,6FAA6F;AAC7F,6FAA6F;AAC7F,iFAAiF;AACjF,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAU,CAAA;AAC1C,SAAS,oBAAoB,CAAC,QAAyB;IACrD,MAAM,SAAS,GAAG,QAAQ;SACvB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;SACjB,IAAI,EAAE;SACN,IAAI,CAAC,GAAG,CAAC,CAAA;IACZ,IAAI,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC;QAAE,OAAM;IAC3C,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;IAC/B,MAAM,CAAC,KAAK,CACV,yFAAyF;QACvF,0EAA0E,EAC5E,EAAE,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CACzC,CAAA;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,SAAS,CAAC,OAAO,GAAqB,EAAE;IACtD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAU,CAAA;IAE9B,+FAA+F;IAC/F,gGAAgG;IAChG,8FAA8F;IAC9F,+FAA+F;IAC/F,oDAAoD;IACpD,IACE,OAAO,CAAC,wBAAwB;QAChC,OAAO,CAAC,uCAAuC,KAAK,SAAS,EAC7D,CAAC;QACD,wBAAwB,CAAC;YACvB,GAAG,CAAC,OAAO,CAAC,wBAAwB;gBAClC,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,wBAAwB,EAAE;gBACtD,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,OAAO,CAAC,uCAAuC,KAAK,SAAS;gBAC/D,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,mBAAmB,EAAE,OAAO,CAAC,uCAAuC,EAAE,CAAC;SAC9E,CAAC,CAAA;IACJ,CAAC;IAED,4FAA4F;IAC5F,6FAA6F;IAC7F,kCAAkC;IAClC,mBAAmB,CAAC,GAAG,CAAC,CAAA;IAExB,6EAA6E;IAC7E,yEAAyE;IACzE,mFAAmF;IACnF,2EAA2E;IAC3E,yFAAyF;IACzF,GAAG,CAAC,GAAG,CACL,GAAG,EACH,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CACpB,iBAAiB,CACf,MAAM,EACN,CAAC,CAAC,GAAG,CAAC,oBAAoB,EAC1B,qBAAqB,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CACzC;QACH,iFAAiF;QACjF,mFAAmF;QACnF,kFAAkF;QAClF,wEAAwE;QACxE,YAAY,EAAE,CAAC,GAAG,oBAAoB,CAAC;QACvC,uFAAuF;QACvF,aAAa,EAAE,CAAC,GAAG,oBAAoB,CAAC;KACzC,CAAC,CACH,CAAA;IACD,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QAC7B,IAAI,CAAC;YACH,CAAC,CAAC,GAAG,CACH,WAAW,EACX,cAAc,CAAC,CAAC,CAAC,GAAG,EAAE,OAAO,CAAC,SAAS,EAAE;gBACvC,uBAAuB,EAAE,OAAO,CAAC,uBAAuB;gBACxD,aAAa,EAAE,OAAO,CAAC,aAAa;aACrC,CAAC,CACH,CAAA;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,6FAA6F;YAC7F,8FAA8F;YAC9F,+FAA+F;YAC/F,sFAAsF;YACtF,IAAI,uBAAuB,CAAC,GAAG,CAAC,EAAE,CAAC;gBACjC,oBAAoB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;gBAClC,MAAM,GAAG,GAAG,0BAA0B,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAA;gBACjF,yEAAyE;gBACzE,0FAA0F;gBAC1F,2FAA2F;gBAC3F,yFAAyF;gBACzF,0FAA0F;gBAC1F,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;gBACrC,IAAI,MAAM;oBAAE,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,6BAA6B,EAAE,MAAM,CAAC,CAAA;gBAClE,OAAO,GAAG,CAAA;YACZ,CAAC;YACD,MAAM,GAAG,CAAA;QACX,CAAC;QACD,MAAM,IAAI,EAAE,CAAA;IACd,CAAC,CAAC,CAAA;IAEF,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;IAEnD,6FAA6F;IAC7F,4FAA4F;IAC5F,sFAAsF;IACtF,8FAA8F;IAC9F,2FAA2F;IAC3F,sFAAsF;IACtF,EAAE;IACF,4FAA4F;IAC5F,4EAA4E;IAC5E,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC5B,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,CAAA;QACjB,MAAM,KAAK,GAAG,KAAK,EAAE,GAA2B,EAA4C,EAAE;YAC5F,IAAI,CAAC;gBACH,MAAM,GAAG,EAAE,CAAA;gBACX,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAA;YACrB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,uFAAuF;gBACvF,mFAAmF;gBACnF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAA;YAC/E,CAAC;QACH,CAAC,CAAA;QACD,MAAM,MAAM,GAAoD;YAC9D,QAAQ,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,KAAK,EAAE,CAAC;SAClE,CAAA;QACD,wFAAwF;QACxF,sDAAsD;QACtD,MAAM,CAAC,SAAS,GAAG,GAAG,CAAC,YAAY;YACjC,CAAC,CAAC,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,YAAa,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,KAAK,EAAE,CAAC;YAClE,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAA;QACrD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;QAC9D,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;IACrF,CAAC,CAAC,CAAA;IAEF,iFAAiF;IACjF,mFAAmF;IACnF,aAAa,CAAC,GAAG,CAAC,CAAA;IAElB,mFAAmF;IACnF,mFAAmF;IACnF,8EAA8E;IAC9E,gCAAgC;IAChC,uBAAuB,CAAC,GAAG,CAAC,CAAA;IAE5B,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAA;IAExB,OAAO,GAAG,CAAA;AACZ,CAAC"}
1	+ {"version":3,"file":"app.js","sourceRoot":"","sources":["../src/app.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,0BAA0B,EAC1B,uBAAuB,EACvB,MAAM,EACN,aAAa,EACb,mBAAmB,EACnB,uBAAuB,GACxB,MAAM,qBAAqB,CAAA;AAI5B,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAC3B,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EACL,oBAAoB,EACpB,oBAAoB,EACpB,qBAAqB,EACrB,iBAAiB,GAClB,MAAM,8BAA8B,CAAA;AACrC,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAA;AAC3D,OAAO,EAAE,wBAAwB,EAAE,MAAM,qCAAqC,CAAA;AAC9E,OAAO,EAAE,WAAW,EAAE,MAAM,oCAAoC,CAAA;AA8ChE,+FAA+F;AAC/F,6FAA6F;AAC7F,6FAA6F;AAC7F,iFAAiF;AACjF,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAU,CAAA;AAC1C,SAAS,oBAAoB,CAAC,QAAyB;IACrD,MAAM,SAAS,GAAG,QAAQ;SACvB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;SACjB,IAAI,EAAE;SACN,IAAI,CAAC,GAAG,CAAC,CAAA;IACZ,IAAI,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC;QAAE,OAAM;IAC3C,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;IAC/B,MAAM,CAAC,KAAK,CACV,yFAAyF;QACvF,0EAA0E,EAC5E,EAAE,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CACzC,CAAA;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,SAAS,CAAC,OAAO,GAAqB,EAAE;IACtD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAU,CAAA;IAE9B,+FAA+F;IAC/F,gGAAgG;IAChG,8FAA8F;IAC9F,+FAA+F;IAC/F,oDAAoD;IACpD,IACE,OAAO,CAAC,wBAAwB;QAChC,OAAO,CAAC,uCAAuC,KAAK,SAAS,EAC7D,CAAC;QACD,wBAAwB,CAAC;YACvB,GAAG,CAAC,OAAO,CAAC,wBAAwB;gBAClC,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,wBAAwB,EAAE;gBACtD,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,OAAO,CAAC,uCAAuC,KAAK,SAAS;gBAC/D,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,mBAAmB,EAAE,OAAO,CAAC,uCAAuC,EAAE,CAAC;SAC9E,CAAC,CAAA;IACJ,CAAC;IAED,4FAA4F;IAC5F,6FAA6F;IAC7F,kCAAkC;IAClC,mBAAmB,CAAC,GAAG,CAAC,CAAA;IAExB,6EAA6E;IAC7E,yEAAyE;IACzE,mFAAmF;IACnF,2EAA2E;IAC3E,yFAAyF;IACzF,GAAG,CAAC,GAAG,CACL,GAAG,EACH,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CACpB,iBAAiB,CACf,MAAM,EACN,CAAC,CAAC,GAAG,CAAC,oBAAoB,EAC1B,qBAAqB,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CACzC;QACH,iFAAiF;QACjF,mFAAmF;QACnF,kFAAkF;QAClF,wEAAwE;QACxE,YAAY,EAAE,CAAC,GAAG,oBAAoB,CAAC;QACvC,uFAAuF;QACvF,aAAa,EAAE,CAAC,GAAG,oBAAoB,CAAC;KACzC,CAAC,CACH,CAAA;IACD,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QAC7B,IAAI,CAAC;YACH,CAAC,CAAC,GAAG,CACH,WAAW,EACX,cAAc,CAAC,CAAC,CAAC,GAAG,EAAE,OAAO,CAAC,SAAS,EAAE;gBACvC,uBAAuB,EAAE,OAAO,CAAC,uBAAuB;gBACxD,aAAa,EAAE,OAAO,CAAC,aAAa;aACrC,CAAC,CACH,CAAA;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,6FAA6F;YAC7F,8FAA8F;YAC9F,+FAA+F;YAC/F,sFAAsF;YACtF,IAAI,uBAAuB,CAAC,GAAG,CAAC,EAAE,CAAC;gBACjC,oBAAoB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;gBAClC,MAAM,GAAG,GAAG,0BAA0B,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAA;gBACjF,yEAAyE;gBACzE,0FAA0F;gBAC1F,2FAA2F;gBAC3F,yFAAyF;gBACzF,0FAA0F;gBAC1F,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;gBACrC,IAAI,MAAM;oBAAE,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,6BAA6B,EAAE,MAAM,CAAC,CAAA;gBAClE,OAAO,GAAG,CAAA;YACZ,CAAC;YACD,MAAM,GAAG,CAAA;QACX,CAAC;QACD,MAAM,IAAI,EAAE,CAAA;IACd,CAAC,CAAC,CAAA;IAEF,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;IAEnD,6FAA6F;IAC7F,4FAA4F;IAC5F,sFAAsF;IACtF,8FAA8F;IAC9F,2FAA2F;IAC3F,sFAAsF;IACtF,EAAE;IACF,4FAA4F;IAC5F,4EAA4E;IAC5E,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC5B,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,CAAA;QACjB,MAAM,KAAK,GAAG,KAAK,EAAE,GAA2B,EAA4C,EAAE;YAC5F,IAAI,CAAC;gBACH,MAAM,GAAG,EAAE,CAAA;gBACX,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAA;YACrB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,uFAAuF;gBACvF,mFAAmF;gBACnF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAA;YAC/E,CAAC;QACH,CAAC,CAAA;QACD,MAAM,MAAM,GAAoD;YAC9D,QAAQ,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,KAAK,EAAE,CAAC;SAClE,CAAA;QACD,wFAAwF;QACxF,sDAAsD;QACtD,MAAM,CAAC,SAAS,GAAG,GAAG,CAAC,YAAY;YACjC,CAAC,CAAC,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,YAAa,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,KAAK,EAAE,CAAC;YAClE,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAA;QACrD,uFAAuF;QACvF,0FAA0F;QAC1F,4FAA4F;QAC5F,mEAAmE;QACnE,MAAM,CAAC,KAAK,GAAG,GAAG,CAAC,QAAQ;YACzB,CAAC,CAAC,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,QAAS,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,KAAK,EAAE,CAAC;YAC9D,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAA;QACjD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;QAC9D,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;IACrF,CAAC,CAAC,CAAA;IAEF,iFAAiF;IACjF,mFAAmF;IACnF,aAAa,CAAC,GAAG,CAAC,CAAA;IAElB,mFAAmF;IACnF,mFAAmF;IACnF,8EAA8E;IAC9E,gCAAgC;IAChC,uBAAuB,CAAC,GAAG,CAAC,CAAA;IAE5B,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAA;IAExB,OAAO,GAAG,CAAA;AACZ,CAAC"}

package/dist/infrastructure/config/retention.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"retention.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/config/retention.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAA;AAC1D,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,QAAQ,CAAA;AAGjC,YAAY,EAAE,eAAe,EAAE,CAAA;AAE/B,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,GAAG,GAAG,eAAe,~~CA2C7D~~"}
1	+ {"version":3,"file":"retention.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/config/retention.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAA;AAC1D,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,QAAQ,CAAA;AAGjC,YAAY,EAAE,eAAe,EAAE,CAAA;AAE/B,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,GAAG,GAAG,eAAe,CA8C7D"}

package/dist/infrastructure/config/retention.js CHANGED Viewed

@@ -7,9 +7,12 @@ export function loadRetentionConfig(env) {
         rateLimitMs: retentionMs('GITHUB_RATE_LIMIT_RETENTION_DAYS', env.GITHUB_RATE_LIMIT_RETENTION_DAYS, 7),
         // Caps the commits projection and bounds the initial backfill to the same age.
         commitMs: retentionMs('GITHUB_COMMIT_RETENTION_DAYS', env.GITHUB_COMMIT_RETENTION_DAYS, 90),
-        // Heavy (full per-call prompt/response) and only useful for recent debugging,
-        // so pruned aggressively — default 3 days.
-        llmCallMetricsMs: retentionMs('LLM_CALL_METRICS_RETENTION_DAYS', env.LLM_CALL_METRICS_RETENTION_DAYS, 3),
+        // Heavy (full per-call prompt/response), so the window trades disk against how far back a
+        // post-mortem can reach: default 14 days, matching the Node facade. The 3 days it replaced
+        // expired the record before most investigations start; a post-mortem that cannot read the
+        // calls it is about is the same as no telemetry at all. Set it back to 3 to restore the old
+        // footprint on a deployment that also stores bodies.
+        llmCallMetricsMs: retentionMs('LLM_CALL_METRICS_RETENTION_DAYS', env.LLM_CALL_METRICS_RETENTION_DAYS, 14),
         // High-churn provisioning event log (separate D1 db); aggressive default of 14 days.
         provisioningLogMs: retentionMs('PROVISIONING_LOG_RETENTION_DAYS', env.PROVISIONING_LOG_RETENTION_DAYS, 14),
         // Resolved (acted/dismissed) notifications; generous default of 90 days so the

package/dist/infrastructure/config/retention.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"retention.js","sourceRoot":"","sources":["../../../src/infrastructure/config/retention.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,MAAM,SAAS,CAAA;AAIrC,MAAM,UAAU,mBAAmB,CAAC,GAAQ;IAC1C,OAAO;QACL,8EAA8E;QAC9E,YAAY,EAAE,WAAW,CAAC,4BAA4B,EAAE,GAAG,CAAC,0BAA0B,EAAE,GAAG,CAAC;QAC5F,8EAA8E;QAC9E,WAAW,EAAE,WAAW,CACtB,kCAAkC,EAClC,GAAG,CAAC,gCAAgC,EACpC,CAAC,CACF;QACD,+EAA+E;QAC/E,QAAQ,EAAE,WAAW,CAAC,8BAA8B,EAAE,GAAG,CAAC,4BAA4B,EAAE,EAAE,CAAC;QAC3F,~~8EAA8E~~;~~QAC9E~~,~~2CAA2C~~;~~QAC3C~~,gBAAgB,EAAE,WAAW,CAC3B,iCAAiC,EACjC,GAAG,CAAC,+BAA+B,EACnC,~~CAAC~~,~~CACF~~;QACD,qFAAqF;QACrF,iBAAiB,EAAE,WAAW,CAC5B,iCAAiC,EACjC,GAAG,CAAC,+BAA+B,EACnC,EAAE,CACH;QACD,+EAA+E;QAC/E,gEAAgE;QAChE,eAAe,EAAE,WAAW,CAC1B,6BAA6B,EAC7B,GAAG,CAAC,2BAA2B,EAC/B,EAAE,CACH;QACD,uFAAuF;QACvF,8EAA8E;QAC9E,cAAc,EAAE,WAAW,CAAC,6BAA6B,EAAE,GAAG,CAAC,2BAA2B,EAAE,EAAE,CAAC;QAC/F,wFAAwF;QACxF,yFAAyF;QACzF,SAAS,EAAE,WAAW,CACpB,iCAAiC,EACjC,GAAG,CAAC,+BAA+B,EACnC,GAAG,CACJ;KACF,CAAA;AACH,CAAC"}
1	+ {"version":3,"file":"retention.js","sourceRoot":"","sources":["../../../src/infrastructure/config/retention.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,MAAM,SAAS,CAAA;AAIrC,MAAM,UAAU,mBAAmB,CAAC,GAAQ;IAC1C,OAAO;QACL,8EAA8E;QAC9E,YAAY,EAAE,WAAW,CAAC,4BAA4B,EAAE,GAAG,CAAC,0BAA0B,EAAE,GAAG,CAAC;QAC5F,8EAA8E;QAC9E,WAAW,EAAE,WAAW,CACtB,kCAAkC,EAClC,GAAG,CAAC,gCAAgC,EACpC,CAAC,CACF;QACD,+EAA+E;QAC/E,QAAQ,EAAE,WAAW,CAAC,8BAA8B,EAAE,GAAG,CAAC,4BAA4B,EAAE,EAAE,CAAC;QAC3F,0FAA0F;QAC1F,2FAA2F;QAC3F,0FAA0F;QAC1F,4FAA4F;QAC5F,qDAAqD;QACrD,gBAAgB,EAAE,WAAW,CAC3B,iCAAiC,EACjC,GAAG,CAAC,+BAA+B,EACnC,EAAE,CACH;QACD,qFAAqF;QACrF,iBAAiB,EAAE,WAAW,CAC5B,iCAAiC,EACjC,GAAG,CAAC,+BAA+B,EACnC,EAAE,CACH;QACD,+EAA+E;QAC/E,gEAAgE;QAChE,eAAe,EAAE,WAAW,CAC1B,6BAA6B,EAC7B,GAAG,CAAC,2BAA2B,EAC/B,EAAE,CACH;QACD,uFAAuF;QACvF,8EAA8E;QAC9E,cAAc,EAAE,WAAW,CAAC,6BAA6B,EAAE,GAAG,CAAC,2BAA2B,EAAE,EAAE,CAAC;QAC/F,wFAAwF;QACxF,yFAAyF;QACzF,SAAS,EAAE,WAAW,CACpB,iCAAiC,EACjC,GAAG,CAAC,+BAA+B,EACnC,GAAG,CACJ;KACF,CAAA;AACH,CAAC"}

package/dist/infrastructure/container-assembly.d.ts CHANGED Viewed

@@ -1,6 +1,6 @@
 import { type AppCaches, type Clock, type ExecutionEventPublisher, type IdGenerator, type ResolveBinaryArtifactStore } from '@cat-factory/kernel';
 import { type CoreDependencies, AgentContextObservabilityService, SearchQueryObservabilityService } from '@cat-factory/orchestration';
-import type { AccountSettingsService, ApiKeyService, LocalModelEndpointService, NotificationWebhookService, OpenRouterCatalogService, PersonalSubscriptionService, ProviderSubscriptionService, PublicApiKeyService, TestSecretsService, CapabilityCredentialsService, ValidationConfigService, UserSecretService } from '@cat-factory/integrations';
+import type { AccountSettingsService, ApiKeyService, LocalModelEndpointService, NotificationWebhookService, OpenRouterCatalogService, PersonalSubscriptionService, ProviderSubscriptionService, PublicApiKeyService, TestSecretsService, CapabilityCredentialsService, McpOAuthService, ValidationConfigService, UserSecretService } from '@cat-factory/integrations';
 import { type ServerContainer, type ToolSecretChain, type WebSearchUpstream } from '@cat-factory/server';
 import { type GateProviderOverrides } from '@cat-factory/gates';
 import type { NotificationChannel, PlatformAlertSink, RunLifecycleSink } from '@cat-factory/kernel';
@@ -37,6 +37,13 @@ export interface WorkerContainerAssemblyInput {
     subscriptions: ProviderSubscriptionService | undefined;
     testSecretsService: TestSecretsService | undefined;
     capabilityCredentialsService: CapabilityCredentialsService | undefined;
+    /**
+     * The per-workspace OAuth grant store for remote MCP tool servers, or undefined when the Worker
+     * has no ENCRYPTION_KEY. Feeds the connect/disconnect routes, the inventory's connection state
+     * and the executor's token source — absent, an OAuth server is stated as `oauth_not_connected`
+     * rather than dispatched without its token.
+     */
+    mcpOAuthService: McpOAuthService | undefined;
     validationConfigService: ValidationConfigService;
     personalSubscriptions: PersonalSubscriptionService | undefined;
     apiKeys: ApiKeyService | undefined;

package/dist/infrastructure/container-assembly.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"container-assembly.d.ts","sourceRoot":"","sources":["../../src/infrastructure/container-assembly.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,SAAS,EACd,KAAK,KAAK,EAEV,KAAK,uBAAuB,EAC5B,KAAK,WAAW,EAChB,KAAK,0BAA0B,EAChC,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EACL,KAAK,gBAAgB,EACrB,gCAAgC,EAChC,+BAA+B,EAEhC,MAAM,4BAA4B,CAAA;AACnC,OAAO,KAAK,EACV,sBAAsB,EACtB,aAAa,EACb,yBAAyB,EACzB,0BAA0B,EAC1B,wBAAwB,EACxB,2BAA2B,EAC3B,2BAA2B,EAC3B,mBAAmB,EACnB,kBAAkB,EAClB,4BAA4B,EAC5B,uBAAuB,EACvB,iBAAiB,EAClB,MAAM,2BAA2B,CAAA;~~AAClC~~,OAAO,~~EAQL~~,KAAK,eAAe,EACpB,KAAK,eAAe,EAEpB,KAAK,iBAAiB,EACvB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EACL,KAAK,qBAAqB,EAG3B,MAAM,oBAAoB,CAAA;AAC3B,OAAO,KAAK,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAA;AACnG,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,UAAU,CAAA;AAEzC,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,OAAO,CAAA;~~AAChC~~,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAA;AAIjE,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAA;AAEzE,OAAO,EACL,qBAAqB,EAGtB,MAAM,2BAA2B,CAAA;~~AA2BlC~~,OAAO,EAAE,2BAA2B,EAAE,MAAM,4CAA4C,CAAA;AAexF,OAAO,EAML,KAAK,kBAAkB,EAkBxB,MAAM,gBAAgB,CAAA;AAGvB,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAA;AAG3D;;;;;;;GAOG;AACH,MAAM,WAAW,4BAA4B;IAC3C,GAAG,EAAE,GAAG,CAAA;IACR,MAAM,EAAE,SAAS,CAAA;IACjB,EAAE,EAAE,UAAU,CAAA;IACd,WAAW,EAAE,UAAU,CAAA;IACvB,KAAK,EAAE,KAAK,CAAA;IACZ,WAAW,EAAE,WAAW,CAAA;IACxB,MAAM,EAAE,SAAS,CAAA;IACjB,SAAS,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAA;IACpC,aAAa,CAAC,EAAE,qBAAqB,CAAA;IACrC,uBAAuB,EAAE,OAAO,CAAA;IAChC,UAAU,EAAE,gBAAgB,CAAA;IAC5B,yBAAyB,EAAE,2BAA2B,GAAG,SAAS,CAAA;IAClE,gBAAgB,EAAE,sBAAsB,GAAG,IAAI,CAAA;IAC/C,aAAa,EAAE,2BAA2B,GAAG,SAAS,CAAA;IACtD,kBAAkB,EAAE,kBAAkB,GAAG,SAAS,CAAA;IAClD,4BAA4B,EAAE,4BAA4B,GAAG,SAAS,CAAA;IACtE,uBAAuB,EAAE,uBAAuB,CAAA;IAChD,qBAAqB,EAAE,2BAA2B,GAAG,SAAS,CAAA;IAC9D,OAAO,EAAE,aAAa,GAAG,SAAS,CAAA;IAClC,aAAa,EAAE,mBAAmB,GAAG,SAAS,CAAA;IAC9C;;;;OAIG;IACH,0BAA0B,EAAE;QAC1B,OAAO,EAAE,0BAA0B,CAAA;QACnC,OAAO,EAAE,mBAAmB,CAAA;QAC5B,uEAAuE;QACvE,gBAAgB,EAAE,gBAAgB,CAAA;QAClC;;;;WAIG;QACH,iBAAiB,EAAE,iBAAiB,CAAA;KACrC,GAAG,IAAI,CAAA;IACR,mBAAmB,EAAE,yBAAyB,GAAG,SAAS,CAAA;IAC1D,WAAW,EAAE,iBAAiB,GAAG,SAAS,CAAA;IAC1C,iBAAiB,EAAE,wBAAwB,GAAG,SAAS,CAAA;IACvD,cAAc,EAAE,uBAAuB,GAAG,SAAS,CAAA;IACnD,yBAAyB,EAAE,gCAAgC,CAAA;IAC3D,wBAAwB,EAAE,+BAA+B,CAAA;IACzD,eAAe,EAAE,sBAAsB,GAAG,SAAS,CAAA;IACnD,2FAA2F;IAC3F,yBAAyB,EAAE,kBAAkB,CAAC,0BAA0B,CAAC,CAAA;IACzE,6GAA6G;IAC7G,wBAAwB,EAAE,sBAAsB,GAAG,SAAS,CAAA;IAC5D;;;;;;;;OAQG;IACH,eAAe,EAAE,eAAe,CAAA;IAChC,wBAAwB,EAAE,iBAAiB,GAAG,SAAS,CAAA;IACvD,0BAA0B,EAAE,0BAA0B,CAAA;IACtD,mBAAmB,EAAE,qBAAqB,CAAA;CAC3C;~~AA6bD~~,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,4BAA4B,GAAG,eAAe,~~CAuP5F~~"}
1	+ {"version":3,"file":"container-assembly.d.ts","sourceRoot":"","sources":["../../src/infrastructure/container-assembly.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,SAAS,EACd,KAAK,KAAK,EAEV,KAAK,uBAAuB,EAC5B,KAAK,WAAW,EAChB,KAAK,0BAA0B,EAChC,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EACL,KAAK,gBAAgB,EACrB,gCAAgC,EAChC,+BAA+B,EAEhC,MAAM,4BAA4B,CAAA;AACnC,OAAO,KAAK,EACV,sBAAsB,EACtB,aAAa,EACb,yBAAyB,EACzB,0BAA0B,EAC1B,wBAAwB,EACxB,2BAA2B,EAC3B,2BAA2B,EAC3B,mBAAmB,EACnB,kBAAkB,EAClB,4BAA4B,EAC5B,eAAe,EACf,uBAAuB,EACvB,iBAAiB,EAClB,MAAM,2BAA2B,CAAA;AAElC,OAAO,EAUL,KAAK,eAAe,EACpB,KAAK,eAAe,EAEpB,KAAK,iBAAiB,EACvB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EACL,KAAK,qBAAqB,EAG3B,MAAM,oBAAoB,CAAA;AAC3B,OAAO,KAAK,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAA;AACnG,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,UAAU,CAAA;AAEzC,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,OAAO,CAAA;AAEhC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAA;AAIjE,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAA;AAEzE,OAAO,EACL,qBAAqB,EAGtB,MAAM,2BAA2B,CAAA;AA4BlC,OAAO,EAAE,2BAA2B,EAAE,MAAM,4CAA4C,CAAA;AAexF,OAAO,EAML,KAAK,kBAAkB,EAkBxB,MAAM,gBAAgB,CAAA;AAGvB,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAA;AAG3D;;;;;;;GAOG;AACH,MAAM,WAAW,4BAA4B;IAC3C,GAAG,EAAE,GAAG,CAAA;IACR,MAAM,EAAE,SAAS,CAAA;IACjB,EAAE,EAAE,UAAU,CAAA;IACd,WAAW,EAAE,UAAU,CAAA;IACvB,KAAK,EAAE,KAAK,CAAA;IACZ,WAAW,EAAE,WAAW,CAAA;IACxB,MAAM,EAAE,SAAS,CAAA;IACjB,SAAS,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAA;IACpC,aAAa,CAAC,EAAE,qBAAqB,CAAA;IACrC,uBAAuB,EAAE,OAAO,CAAA;IAChC,UAAU,EAAE,gBAAgB,CAAA;IAC5B,yBAAyB,EAAE,2BAA2B,GAAG,SAAS,CAAA;IAClE,gBAAgB,EAAE,sBAAsB,GAAG,IAAI,CAAA;IAC/C,aAAa,EAAE,2BAA2B,GAAG,SAAS,CAAA;IACtD,kBAAkB,EAAE,kBAAkB,GAAG,SAAS,CAAA;IAClD,4BAA4B,EAAE,4BAA4B,GAAG,SAAS,CAAA;IACtE;;;;;OAKG;IACH,eAAe,EAAE,eAAe,GAAG,SAAS,CAAA;IAC5C,uBAAuB,EAAE,uBAAuB,CAAA;IAChD,qBAAqB,EAAE,2BAA2B,GAAG,SAAS,CAAA;IAC9D,OAAO,EAAE,aAAa,GAAG,SAAS,CAAA;IAClC,aAAa,EAAE,mBAAmB,GAAG,SAAS,CAAA;IAC9C;;;;OAIG;IACH,0BAA0B,EAAE;QAC1B,OAAO,EAAE,0BAA0B,CAAA;QACnC,OAAO,EAAE,mBAAmB,CAAA;QAC5B,uEAAuE;QACvE,gBAAgB,EAAE,gBAAgB,CAAA;QAClC;;;;WAIG;QACH,iBAAiB,EAAE,iBAAiB,CAAA;KACrC,GAAG,IAAI,CAAA;IACR,mBAAmB,EAAE,yBAAyB,GAAG,SAAS,CAAA;IAC1D,WAAW,EAAE,iBAAiB,GAAG,SAAS,CAAA;IAC1C,iBAAiB,EAAE,wBAAwB,GAAG,SAAS,CAAA;IACvD,cAAc,EAAE,uBAAuB,GAAG,SAAS,CAAA;IACnD,yBAAyB,EAAE,gCAAgC,CAAA;IAC3D,wBAAwB,EAAE,+BAA+B,CAAA;IACzD,eAAe,EAAE,sBAAsB,GAAG,SAAS,CAAA;IACnD,2FAA2F;IAC3F,yBAAyB,EAAE,kBAAkB,CAAC,0BAA0B,CAAC,CAAA;IACzE,6GAA6G;IAC7G,wBAAwB,EAAE,sBAAsB,GAAG,SAAS,CAAA;IAC5D;;;;;;;;OAQG;IACH,eAAe,EAAE,eAAe,CAAA;IAChC,wBAAwB,EAAE,iBAAiB,GAAG,SAAS,CAAA;IACvD,0BAA0B,EAAE,0BAA0B,CAAA;IACtD,mBAAmB,EAAE,qBAAqB,CAAA;CAC3C;AAgdD,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,4BAA4B,GAAG,eAAe,CAsP5F"}

package/dist/infrastructure/container-assembly.js CHANGED Viewed

@@ -1,8 +1,10 @@
 import { DEFAULT_MODEL_PRESET_ID, } from '@cat-factory/kernel';
 import { AgentContextObservabilityService, SearchQueryObservabilityService, createCore, } from '@cat-factory/orchestration';
-import { logger, operationalMetrics, runWithInitiator, resolveWorkspaceCapabilities, testEnvHasZeroConfigDefault, WebCryptoPasswordHasher, toolSecretContainerFields, } from '@cat-factory/server';
+import { AuditService } from '@cat-factory/integrations';
+import { logger, mcpOAuthContainerFields, mcpOAuthExecutorDeps, operationalMetrics, runWithInitiator, resolveWorkspaceCapabilities, testEnvHasZeroConfigDefault, WebCryptoPasswordHasher, toolSecretContainerFields, } from '@cat-factory/server';
 import { applyGateProviders, warnUnwiredGates, } from '@cat-factory/gates';
 import { selectEnvConfigRepairer, selectRepoBootstrapper } from './container-dispatchers';
+import { requireAuditDb } from './env';
 import { baseUrlFor } from './ai/providerEndpoints';
 import { bedrockModelsCapability } from './ai/registries';
 import { buildResolvePresetProviderPreference } from './container-model-resolver.js';
@@ -21,6 +23,7 @@ import { D1BootstrapJobRepository } from './repositories/D1BootstrapJobRepositor
 import { CryptoIdGenerator } from './runtime';
 import { D1AuthAttemptRepository } from './repositories/D1AuthAttemptRepository';
 import { D1ConsensusSessionRepository } from './repositories/D1ConsensusSessionRepository';
+import { D1AuditEventRepository } from './repositories/D1AuditEventRepository';
 import { D1MachineNodeRepository } from './repositories/D1MachineNodeRepository';
 import { D1EnvConfigRepairJobRepository } from './repositories/D1EnvConfigRepairJobRepository';
 import { D1EnvironmentTestRunRepository } from './repositories/D1EnvironmentTestRunRepository';
@@ -184,7 +187,7 @@ function selectWorkerObservabilityDeps(args) {
     };
 }
 function buildWorkerCoreDependencies(input) {
-    const { env, config, db, telemetryDb, clock, idGenerator, caches, overrides, cloudflareModelsEnabled, registries, provisioningLogRepository, resolveTransport, subscriptions, testSecretsService, validationConfigService, personalSubscriptions, apiKeys, notificationWebhookSupport, localModelEndpoints, openRouterCatalog, eventPublisher, agentContextObservability, searchQueryObservability, accountSettings, executorPackageRegistries, webSearchAccountSettings, toolSecretChain, resolveBinaryArtifactStore, githubWebhookIngest, } = input;
+    const { env, config, db, telemetryDb, clock, idGenerator, caches, overrides, cloudflareModelsEnabled, registries, provisioningLogRepository, resolveTransport, subscriptions, testSecretsService, mcpOAuthService, validationConfigService, personalSubscriptions, apiKeys, notificationWebhookSupport, localModelEndpoints, openRouterCatalog, eventPublisher, agentContextObservability, searchQueryObservability, accountSettings, executorPackageRegistries, webSearchAccountSettings, toolSecretChain, resolveBinaryArtifactStore, githubWebhookIngest, } = input;
     const { environmentBackendRegistry, runnerBackendRegistry, customManifestTypeRegistry, agentKindRegistry, gateRegistry, judgeRegistry, stepResolverRegistry, initiativePresetRegistry, providerRegistry, } = registries;
     // The Bedrock allow-list that gates `bedrock`-flavour selectability, derived from `env` here
     // (like `baseUrlFor` below) because it is one deployment-level read with nothing
@@ -200,6 +203,17 @@ function buildWorkerCoreDependencies(input) {
         // an un-wired collector reads as "none of this ever happened". On this runtime it is
         // per-ISOLATE, which is why the entry points flush it rather than the cron alone.
         operationalMetrics,
+        // The third member of that obligation: where privileged actions are RECORDED for an account
+        // admin. Same position, same reason — an un-wired audit log reads as "nobody changed
+        // anything", which is the assurance it exists to give.
+        auditRecorder: new AuditService({
+            // The dedicated AUDIT_DB, not `db`: the log is retained for years and must not compete
+            // with live transactional state for the 10 GB per-database ceiling.
+            auditEventRepository: new D1AuditEventRepository({ db: requireAuditDb(env) }),
+            idGenerator,
+            clock,
+            logger,
+        }),
         // App-owned backend registries (kind → provider) the connection services resolve through.
         environmentBackendRegistry,
         runnerBackendRegistry,
@@ -254,6 +268,13 @@ function buildWorkerCoreDependencies(input) {
                     resolvePackageRegistries: executorPackageRegistries,
                     webSearchAccountSettings,
                     resolveToolSecrets: toolSecretChain.resolver,
+                    // The OAuth half of the same seam: the sealed grant store plus the chain above, which is
+                    // what resolves the OAuth client secret.
+                    ...mcpOAuthExecutorDeps({
+                        oauth: mcpOAuthService,
+                        resolveToolSecrets: toolSecretChain.resolver,
+                        logger,
+                    }),
                 }),
                 env,
                 config,
@@ -398,7 +419,7 @@ function selectWorkerMachineAuthDeps(db) {
 }
 export function assembleWorkerContainer(input) {
     const { env, config, db, clock, registries, resolveTransport, gateProviders } = input;
-    const { subscriptions, testSecretsService, capabilityCredentialsService, toolSecretChain, validationConfigService, personalSubscriptions, apiKeys, publicApiKeys, notificationWebhookSupport, localModelEndpoints, userSecrets, openRouterCatalog, cloudflareModelsEnabled, defaultWebSearchUpstream, resolveBinaryArtifactStore, githubWebhookIngest, } = input;
+    const { subscriptions, testSecretsService, capabilityCredentialsService, mcpOAuthService, toolSecretChain, validationConfigService, personalSubscriptions, apiKeys, publicApiKeys, notificationWebhookSupport, localModelEndpoints, userSecrets, openRouterCatalog, cloudflareModelsEnabled, defaultWebSearchUpstream, resolveBinaryArtifactStore, githubWebhookIngest, } = input;
     const { environmentBackendRegistry, runnerBackendRegistry, providerRegistry, vcsRegistry } = registries;
     const bedrockModels = bedrockModelsCapability(env);
     // The domain dependency object (built in its own function to stay within the size budget);
@@ -550,14 +571,12 @@ export function assembleWorkerContainer(input) {
         // The sensitive per-service test-credential store the shared test-secrets controller reads;
         // present when the shared ENCRYPTION_KEY is configured.
         ...(testSecretsService ? { testSecrets: testSecretsService } : {}),
-        ...(capabilityCredentialsService
-            ? { capabilityCredentials: capabilityCredentialsService }
-            : {}),
-        // The composed capability-credential chain: the resolver the tool-server probe resolves through
-        // (a probe must resolve exactly as a dispatch does, or it reports on the wrong tenant's value)
-        // and the description the credential checklist renders. Projected by ONE shared helper on both
-        // facades, since an absent description and a `false` one send an operator opposite ways.
-        ...toolSecretContainerFields(toolSecretChain),
+        ...workerCapabilityCredentialFields({
+            env,
+            capabilityCredentialsService,
+            mcpOAuthService,
+            toolSecretChain,
+        }),
         // The per-service pre-PR validation-check store the shared controller reads. Always present
         // (no secret material), unlike the sealed stores around it.
         validationConfig: validationConfigService,
@@ -617,4 +636,29 @@ export function assembleWorkerContainer(input) {
         },
     };
 }
+/**
+ * Everything a workspace's CAPABILITY CREDENTIALS contribute to the container: the sealed
+ * credential store, the sealed MCP OAuth grant store plus its redirect URL, and the composed
+ * resolver chain with the description the credential checklist renders.
+ *
+ * One projection because they are one surface. Both stores are optional on the same condition
+ * (`ENCRYPTION_KEY`), the OAuth token source resolves its client secret through the very chain
+ * beside it, and the chain's `environmentFallback` is a THREE-state answer the container must
+ * carry as ABSENT rather than as `undefined` — an absent description and a `false` one send an
+ * operator opposite ways. The Node facade projects the same fields from its own root.
+ */
+function workerCapabilityCredentialFields(input) {
+    return {
+        ...(input.capabilityCredentialsService
+            ? { capabilityCredentials: input.capabilityCredentialsService }
+            : {}),
+        ...mcpOAuthContainerFields({
+            oauth: input.mcpOAuthService,
+            redirectUrl: input.env.MCP_OAUTH_REDIRECT_URL,
+        }),
+        // The probe resolves through the SAME chain a dispatch does, or it reports on a tenant's value
+        // that is not this board's.
+        ...toolSecretContainerFields(input.toolSecretChain),
+    };
+}
 //# sourceMappingURL=container-assembly.js.map

package/dist/infrastructure/container-assembly.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"container-assembly.js","sourceRoot":"","sources":["../../src/infrastructure/container-assembly.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,uBAAuB,GAIxB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAEL,gCAAgC,EAChC,+BAA+B,EAC/B,UAAU,GACX,MAAM,4BAA4B,CAAA;AAenC,OAAO,EACL,MAAM,EACN,kBAAkB,EAClB,gBAAgB,EAChB,4BAA4B,EAC5B,2BAA2B,EAC3B,uBAAuB,EAIvB,yBAAyB,GAE1B,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAEL,kBAAkB,EAClB,gBAAgB,GACjB,MAAM,oBAAoB,CAAA;AAG3B,OAAO,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAA;AAGzF,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAA;AACnD,OAAO,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAA;AACzD,OAAO,EAAE,oCAAoC,EAAE,MAAM,+BAA+B,CAAA;AAEpF,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAA;AAChE,OAAO,EACL,qBAAqB,EACrB,sBAAsB,EACtB,0BAA0B,GAC3B,MAAM,2BAA2B,CAAA;AAClC,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAA;AAChE,OAAO,EAAE,8BAA8B,EAAE,MAAM,yCAAyC,CAAA;AACxF,OAAO,EAAE,wBAAwB,EAAE,MAAM,sCAAsC,CAAA;AAC/E,OAAO,EAAE,8BAA8B,EAAE,MAAM,4CAA4C,CAAA;AAC3F,OAAO,EAAE,8BAA8B,EAAE,MAAM,4CAA4C,CAAA;AAC3F,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAA;AACxE,OAAO,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAA;AAC1E,OAAO,EAAE,6BAA6B,EAAE,MAAM,8CAA8C,CAAA;AAC5F,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAA;AACpE,OAAO,EAAE,wBAAwB,EAAE,MAAM,yCAAyC,CAAA;AAClF,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAA;AAC7C,OAAO,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAA;AAChF,OAAO,EAAE,4BAA4B,EAAE,MAAM,6CAA6C,CAAA;AAC1F,OAAO,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAA;AAChF,OAAO,EAAE,8BAA8B,EAAE,MAAM,+CAA+C,CAAA;AAC9F,OAAO,EAAE,8BAA8B,EAAE,MAAM,+CAA+C,CAAA;AAC9F,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAA;AAC5E,OAAO,EAAE,8BAA8B,EAAE,MAAM,+CAA+C,CAAA;AAC9F,OAAO,EAAE,yBAAyB,EAAE,MAAM,0CAA0C,CAAA;AACpF,OAAO,EAAE,gCAAgC,EAAE,MAAM,iDAAiD,CAAA;AAClG,OAAO,EAAE,4BAA4B,EAAE,MAAM,6CAA6C,CAAA;AAC1F,OAAO,EAAE,yBAAyB,EAAE,MAAM,0CAA0C,CAAA;AACpF,OAAO,EAAE,sBAAsB,EAAE,MAAM,uCAAuC,CAAA;AAC9E,OAAO,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAA;AAC1E,OAAO,EAAE,uBAAuB,EAAE,MAAM,2CAA2C,CAAA;AACnF,OAAO,EAAE,2BAA2B,EAAE,MAAM,4CAA4C,CAAA;AACxF,OAAO,EAAE,2BAA2B,EAAE,MAAM,4CAA4C,CAAA;AACxF,OAAO,EAAE,iCAAiC,EAAE,MAAM,kDAAkD,CAAA;AACpG,OAAO,EAAE,0BAA0B,EAAE,MAAM,2CAA2C,CAAA;AACtF,OAAO,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAA;AAChF,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAA;AACxE,OAAO,EAAE,kCAAkC,EAAE,MAAM,iDAAiD,CAAA;AACpG,OAAO,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAA;AAChF,OAAO,EAAE,4BAA4B,EAAE,MAAM,6CAA6C,CAAA;AAC1F,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAA;AACxE,OAAO,EAAE,sBAAsB,EAAE,MAAM,uCAAuC,CAAA;AAC9E,OAAO,EAAE,0BAA0B,EAAE,MAAM,2CAA2C,CAAA;AACtF,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAA;AAClE,OAAO,EAAE,2BAA2B,EAAE,MAAM,4CAA4C,CAAA;AACxF,OAAO,EAAE,0BAA0B,EAAE,MAAM,2CAA2C,CAAA;AACtF,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAA;AAC5E,OAAO,EACL,gBAAgB,EAChB,sBAAsB,EACtB,8BAA8B,EAC9B,kBAAkB,EAClB,mBAAmB,EAEnB,gBAAgB,EAChB,mBAAmB,EACnB,yBAAyB,EACzB,sBAAsB,EACtB,yBAAyB,EACzB,4BAA4B,EAC5B,wBAAwB,EACxB,yBAAyB,EACzB,uBAAuB,EACvB,sBAAsB,EACtB,iBAAiB,EACjB,iBAAiB,EACjB,6BAA6B,EAC7B,sBAAsB,EACtB,eAAe,EACf,eAAe,EACf,gBAAgB,GACjB,MAAM,gBAAgB,CAAA;AACvB,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAA;AACjE,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAA;AAEnD,OAAO,EAAE,gCAAgC,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAA;AA0EjG;;;;;;;;GAQG;AACH;;;;;;;GAOG;AACH;;;;;GAKG;AACH,SAAS,0BAA0B,CAAC,IAOnC;IACC,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,gBAAgB,EAAE,GAAG,IAAI,CAAA;IACtE,OAAO;QACL,gFAAgF;QAChF,+EAA+E;QAC/E,+BAA+B,EAAE,IAAI,iCAAiC,CAAC,EAAE,EAAE,EAAE,CAAC;QAC9E,sBAAsB,EAAE,IAAI,wBAAwB,CAAC,EAAE,EAAE,EAAE,CAAC;QAC5D,gBAAgB,EAAE,sBAAsB,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,gBAAgB,CAAC;QAC/F,6EAA6E;QAC7E,6EAA6E;QAC7E,eAAe,EAAE,GAAG,CAAC,kBAAkB;YACrC,CAAC,CAAC,IAAI,wBAAwB,CAAC,GAAG,CAAC,kBAAkB,CAAC;YACtD,CAAC,CAAC,SAAS;QACb,iFAAiF;QACjF,sFAAsF;QACtF,0EAA0E;QAC1E,mFAAmF;QACnF,4BAA4B,EAAE,IAAI,8BAA8B,CAAC,EAAE,EAAE,EAAE,CAAC;QACxE,qBAAqB,EAAE,GAAG,CAAC,0BAA0B;YACnD,CAAC,CAAC,IAAI,8BAA8B,CAAC,GAAG,CAAC,0BAA0B,CAAC;YACpE,CAAC,CAAC,SAAS;QACb,uFAAuF;QACvF,uFAAuF;QACvF,uFAAuF;QACvF,sFAAsF;QACtF,aAAa;QACb,4BAA4B,EAAE,IAAI,8BAA8B,CAAC,EAAE,EAAE,EAAE,CAAC;QACxE,qBAAqB,EAAE,GAAG,CAAC,iBAAiB;YAC1C,CAAC,CAAC,IAAI,8BAA8B,CAAC,GAAG,CAAC,iBAAiB,CAAC;YAC3D,CAAC,CAAC,SAAS;KACd,CAAA;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,gCAAgC,CACvC,IAa8C;IAE9C,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,IAAI,CAAA;IAChC,OAAO,CAAC,WAAW,EAAE,WAAW,EAAE,aAAa,EAAE,EAAE,CACjD,4BAA4B,CAC1B;QACE,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,qBAAqB,EAAE,IAAI,CAAC,qBAAqB;QACjD,uBAAuB,EAAE,IAAI,CAAC,uBAAuB;QACrD,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,UAAU,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC;QACnD,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;QAC7C,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;QACzC,eAAe,EAAE,IAAI,CAAC,eAAe;QACrC,kBAAkB,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,qBAAqB,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3E,oBAAoB,EAAE,MAAM,CAAC,cAAc,EAAE,WAAW,EAAE,SAAS,IAAI,KAAK;QAC5E,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,+BAA+B,EAAE,oCAAoC,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC;KACvF,EACD,WAAW,EACX,WAAW,EACX,aAAa,CACd,CAAA;AACL,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAS,6BAA6B,CAAC,IAOtC;IAKC,MAAM,EACJ,MAAM,EACN,EAAE,EACF,WAAW,EACX,yBAAyB,EACzB,yBAAyB,EACzB,wBAAwB,GACzB,GAAG,IAAI,CAAA;IACR,OAAO;QACL,0DAA0D;QAC1D,uBAAuB,EAAE,IAAI,yBAAyB,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC;QAC3E,0FAA0F;QAC1F,0FAA0F;QAC1F,QAAQ;QACR,8BAA8B,EAAE,IAAI,gCAAgC,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC;QACzF,0BAA0B,EAAE,IAAI,4BAA4B,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC;QACjF,0FAA0F;QAC1F,0FAA0F;QAC1F,oEAAoE;QACpE,uBAAuB,EAAE,IAAI,yBAAyB,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC;QAC3E,kGAAkG;QAClG,yBAAyB,EAAE,IAAI,2BAA2B,CAAC,EAAE,EAAE,EAAE,CAAC;QAClE,yFAAyF;QACzF,4FAA4F;QAC5F,oEAAoE;QACpE,qBAAqB,EAAE,IAAI,uBAAuB,CAAC,EAAE,EAAE,EAAE,CAAC;QAC1D,qFAAqF;QACrF,oBAAoB;QACpB,iBAAiB,EAAE,IAAI,mBAAmB,CAAC,EAAE,EAAE,EAAE,CAAC;QAClD,kFAAkF;QAClF,mFAAmF;QACnF,oCAAoC;QACpC,GAAG,CAAC,yBAAyB,CAAC,CAAC,CAAC,EAAE,yBAAyB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,gBAAgB,EAAE,MAAM,CAAC,aAAa,CAAC,aAAa;QACpD,mFAAmF;QACnF,2DAA2D;QAC3D,yBAAyB;QACzB,mFAAmF;QACnF,sDAAsD;QACtD,wBAAwB;KACzB,CAAA;AACH,CAAC;AAED,SAAS,2BAA2B,CAAC,KAAmC;IACtE,MAAM,EACJ,GAAG,EACH,MAAM,EACN,EAAE,EACF,WAAW,EACX,KAAK,EACL,WAAW,EACX,MAAM,EACN,SAAS,EACT,uBAAuB,EACvB,UAAU,EACV,yBAAyB,EACzB,gBAAgB,EAChB,aAAa,EACb,kBAAkB,EAClB,uBAAuB,EACvB,qBAAqB,EACrB,OAAO,EACP,0BAA0B,EAC1B,mBAAmB,EACnB,iBAAiB,EACjB,cAAc,EACd,yBAAyB,EACzB,wBAAwB,EACxB,eAAe,EACf,yBAAyB,EACzB,wBAAwB,EACxB,eAAe,EACf,0BAA0B,EAC1B,mBAAmB,GACpB,GAAG,KAAK,CAAA;IACT,MAAM,EACJ,0BAA0B,EAC1B,qBAAqB,EACrB,0BAA0B,EAC1B,iBAAiB,EACjB,YAAY,EACZ,aAAa,EACb,oBAAoB,EACpB,wBAAwB,EACxB,gBAAgB,GACjB,GAAG,UAAU,CAAA;IACd,6FAA6F;IAC7F,iFAAiF;IACjF,0FAA0F;IAC1F,0FAA0F;IAC1F,MAAM,aAAa,GAAG,uBAAuB,CAAC,GAAG,CAAC,CAAA;IAElD,OAAO;QACL,0FAA0F;QAC1F,2FAA2F;QAC3F,4FAA4F;QAC5F,MAAM;QACN,2FAA2F;QAC3F,qFAAqF;QACrF,kFAAkF;QAClF,kBAAkB;QAClB,0FAA0F;QAC1F,0BAA0B;QAC1B,qBAAqB;QACrB,oFAAoF;QACpF,6FAA6F;QAC7F,mCAAmC;QACnC,0BAA0B;QAC1B,uEAAuE;QACvE,yEAAyE;QACzE,0BAA0B;QAC1B,mBAAmB,EAAE,IAAI,qBAAqB,CAAC,EAAE,EAAE,EAAE,CAAC;QACtD,yBAAyB,EAAE,IAAI,2BAA2B,CAAC,EAAE,EAAE,EAAE,CAAC;QAClE,iBAAiB,EAAE,IAAI,mBAAmB,CAAC,EAAE,EAAE,EAAE,CAAC;QAClD,oBAAoB,EAAE,IAAI,sBAAsB,CAAC,EAAE,EAAE,EAAE,CAAC;QACxD,cAAc,EAAE,IAAI,gBAAgB,CAAC,EAAE,EAAE,EAAE,CAAC;QAC5C,cAAc,EAAE,IAAI,uBAAuB,EAAE;QAC7C,eAAe,EAAE,IAAI,iBAAiB,CAAC,EAAE,EAAE,EAAE,CAAC;QAC9C,kBAAkB,EAAE,IAAI,oBAAoB,CAAC,EAAE,EAAE,EAAE,CAAC;QACpD,mBAAmB,EAAE,IAAI,qBAAqB,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;QAC7D,8FAA8F;QAC9F,gCAAgC,EAAE,IAAI,kCAAkC,CAAC,EAAE,EAAE,EAAE,CAAC;QAChF,iBAAiB,EAAE,IAAI,mBAAmB,CAAC,EAAE,EAAE,EAAE,CAAC;QAClD,wBAAwB,EAAE,IAAI,0BAA0B,CAAC,EAAE,EAAE,EAAE,CAAC;QAChE,oBAAoB,EAAE,IAAI,sBAAsB,CAAC,EAAE,EAAE,EAAE,CAAC;QACxD,GAAG,6BAA6B,CAAC;YAC/B,MAAM;YACN,EAAE;YACF,WAAW;YACX,yBAAyB;YACzB,yBAAyB;YACzB,wBAAwB;SACzB,CAAC;QACF,WAAW;QACX,KAAK;QACL,+EAA+E;QAC/E,+EAA+E;QAC/E,6EAA6E;QAC7E,6EAA6E;QAC7E,aAAa,EACX,SAAS,CAAC,aAAa;YACvB,kBAAkB,CAAC;gBACjB,QAAQ,EAAE,mBAAmB,CAAC;oBAC5B,GAAG;oBACH,MAAM;oBACN,EAAE;oBACF,KAAK;oBACL,MAAM;oBACN,gBAAgB;oBAChB,iBAAiB;oBACjB,aAAa;oBACb,qBAAqB;oBACrB,yBAAyB;oBACzB,wBAAwB,EAAE,yBAAyB;oBACnD,wBAAwB;oBACxB,kBAAkB,EAAE,eAAe,CAAC,QAAQ;iBAC7C,CAAC;gBACF,GAAG;gBACH,MAAM;gBACN,EAAE;gBACF,cAAc;gBACd,iBAAiB;gBACjB,MAAM;aACP,CAAC;QACJ,iBAAiB;QACjB,4FAA4F;QAC5F,uFAAuF;QACvF,YAAY;QACZ,6FAA6F;QAC7F,gFAAgF;QAChF,aAAa;QACb,oBAAoB;QACpB,8FAA8F;QAC9F,2DAA2D;QAC3D,gBAAgB;QAChB,wBAAwB;QACxB,UAAU,EAAE,gBAAgB,CAAC,GAAG,CAAC;QACjC,uBAAuB,EAAE,cAAc;QACvC,YAAY,EAAE,MAAM,CAAC,KAAK;QAC1B,gFAAgF;QAChF,sEAAsE;QACtE,qBAAqB,EAAE,iBAAiB;YACtC,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,iBAAiB,CAAC,eAAe,CAAC,EAAE,CAAC;YAC/C,CAAC,CAAC,SAAS;QACb,GAAG,0BAA0B,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,gBAAgB,EAAE,CAAC;QACxF,GAAG,gBAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,CAAC,SAAS,CAAC;QAC1E,GAAG,wBAAwB,CAAC;YAC1B,GAAG;YACH,MAAM;YACN,EAAE;YACF,KAAK;YACL,WAAW;YACX,gBAAgB;YAChB,cAAc,EAAE,0BAA0B,EAAE,OAAO;SACpD,CAAC;QACF,4FAA4F;QAC5F,yFAAyF;QACzF,GAAG,CAAC,0BAA0B;YAC5B,CAAC,CAAC,EAAE,gBAAgB,EAAE,0BAA0B,CAAC,gBAAgB,EAAE;YACnE,CAAC,CAAC,EAAE,CAAC;QACP,mFAAmF;QACnF,0FAA0F;QAC1F,uFAAuF;QACvF,wFAAwF;QACxF,4FAA4F;QAC5F,4FAA4F;QAC5F,oBAAoB,EAAE,SAAS,CAAC,oBAAoB,IAAI,uBAAuB;QAC/E,GAAG,uBAAuB,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,gBAAgB,CAAC;QAC7D,4FAA4F;QAC5F,mEAAmE;QACnE,GAAG,CAAC,kBAAkB;YACpB,CAAC,CAAC;gBACE,qBAAqB,EAAE,CAAC,WAAmB,EAAE,OAAe,EAAE,EAAE,CAC9D,kBAAkB,CAAC,mBAAmB,CAAC,WAAW,EAAE,OAAO,CAAC;aAC/D;YACH,CAAC,CAAC,EAAE,CAAC;QACP,qFAAqF;QACrF,0FAA0F;QAC1F,2FAA2F;QAC3F,4FAA4F;QAC5F,0EAA0E;QAC1E,uBAAuB,EAAE,CAAC,WAAmB,EAAE,OAAe,EAAE,EAAE,CAChE,uBAAuB,CAAC,eAAe,CAAC,WAAW,EAAE,OAAO,CAAC;QAC/D,GAAG,4BAA4B,CAAC,GAAG,EAAE,EAAE,EAAE,gBAAgB,CAAC;QAC1D,GAAG,yBAAyB,CAAC,GAAG,EAAE,EAAE,CAAC;QACrC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/C,GAAG,eAAe,CAAC,MAAM,EAAE,EAAE,CAAC;QAC9B,GAAG,yBAAyB,CAAC,MAAM,EAAE,EAAE,CAAC;QACxC,GAAG,eAAe,CAAC,MAAM,CAAC;QAC1B,GAAG,mBAAmB,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,WAAW,CAAC;QAC3D,GAAG,mBAAmB,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,WAAW,CAAC;QAC3D,GAAG,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,WAAW,CAAC;QACvD,GAAG,sBAAsB,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC;QAC1C,GAAG,iBAAiB,CAAC,GAAG,CAAC,UAAU,CAAC;QACpC,GAAG,sBAAsB,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC;QAC1C,GAAG,gBAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,CAAC;QAC3C,GAAG,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC;QACrC,GAAG,yBAAyB,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC;QAC7C,GAAG,sBAAsB,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC;QAC1C,oFAAoF;QACpF,4FAA4F;QAC5F,GAAG,6BAA6B,CAAC,EAAE,CAAC;QACpC,yFAAyF;QACzF,wFAAwF;QACxF,6BAA6B;QAC7B,kBAAkB,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,EAAE;YACpD,MAAM,mBAAmB,CAAC,gBAAgB,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAA;QACjE,CAAC;QACD,2DAA2D;QAC3D,yBAAyB,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE;YAChD,MAAM,mBAAmB,CAAC,uBAAuB,CAAC,QAAQ,CAAC,CAAA;QAC7D,CAAC;QACD,0FAA0F;QAC1F,6FAA6F;QAC7F,8EAA8E;QAC9E,MAAM;QACN,6FAA6F;QAC7F,4FAA4F;QAC5F,2BAA2B,EAAE,gCAAgC,CAAC;YAC5D,GAAG;YACH,MAAM;YACN,EAAE;YACF,MAAM;YACN,OAAO;YACP,aAAa;YACb,qBAAqB;YACrB,uBAAuB;YACvB,aAAa;YACb,mBAAmB;YACnB,iBAAiB;YACjB,eAAe;SAChB,CAAC;QACF,qFAAqF;QACrF,yEAAyE;QACzE,iBAAiB,EAAE,gBAAgB;QACnC,GAAG,SAAS;KACb,CAAA;AACH,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAS,2BAA2B,CAClC,EAAc;IAKd,OAAO;QACL,qBAAqB,EAAE,IAAI,uBAAuB,CAAC,EAAE,EAAE,EAAE,CAAC;QAC1D,qBAAqB,EAAE,IAAI,uBAAuB,CAAC;YACjD,EAAE;YACF,WAAW,EAAE,IAAI,iBAAiB,EAAE;SACrC,CAAC;QACF,oBAAoB,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,kBAAkB,CAAC,IAAI,SAAS;KAC3E,CAAA;AACH,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,KAAmC;IACzE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,gBAAgB,EAAE,aAAa,EAAE,GAAG,KAAK,CAAA;IACrF,MAAM,EACJ,aAAa,EACb,kBAAkB,EAClB,4BAA4B,EAC5B,eAAe,EACf,uBAAuB,EACvB,qBAAqB,EACrB,OAAO,EACP,aAAa,EACb,0BAA0B,EAC1B,mBAAmB,EACnB,WAAW,EACX,iBAAiB,EACjB,uBAAuB,EACvB,wBAAwB,EACxB,0BAA0B,EAC1B,mBAAmB,GACpB,GAAG,KAAK,CAAA;IACT,MAAM,EAAE,0BAA0B,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,WAAW,EAAE,GACxF,UAAU,CAAA;IACZ,MAAM,aAAa,GAAG,uBAAuB,CAAC,GAAG,CAAC,CAAA;IAClD,2FAA2F;IAC3F,yFAAyF;IACzF,MAAM,YAAY,GAAG,2BAA2B,CAAC,KAAK,CAAC,CAAA;IAEvD,uFAAuF;IACvF,sFAAsF;IACtF,2FAA2F;IAC3F,uFAAuF;IACvF,MAAM,iBAAiB,GAAG,uBAAuB,CAAC;QAChD,GAAG;QACH,MAAM;QACN,EAAE;QACF,KAAK;QACL,gBAAgB;QAChB,QAAQ,EAAE,YAAY,CAAC,mBAAmB;QAC1C,0BAA0B;KAC3B,CAAC,CAAA;IACF,sFAAsF;IACtF,gFAAgF;IAChF,IAAI,iBAAiB,IAAI,CAAC,YAAY,CAAC,iBAAiB,EAAE,CAAC;QACzD,YAAY,CAAC,iBAAiB,GAAG,iBAAiB,CAAA;IACpD,CAAC;IAED,8FAA8F;IAC9F,4FAA4F;IAC5F,iGAAiG;IACjG,kBAAkB,CAAC,gBAAgB,EAAE,aAAa,CAAC,CAAA;IACnD,wFAAwF;IACxF,yFAAyF;IACzF,gBAAgB,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAA;IAE1C,kFAAkF;IAClF,+FAA+F;IAC/F,4EAA4E;IAC5E,MAAM,kBAAkB,GAAG,IAAI,oBAAoB,CAAC,EAAE,EAAE,EAAE,CAAC,CAAA;IAC3D,6FAA6F;IAC7F,+FAA+F;IAC/F,MAAM,2BAA2B,GAAG,gCAAgC,CAClE,MAAM,EACN,EAAE,EACF,0BAA0B,EAAE,OAAO,CACpC,CAAA;IAED,OAAO;QACL,GAAG,UAAU,CAAC,YAAY,CAAC;QAC3B,MAAM;QACN,+FAA+F;QAC/F,6FAA6F;QAC7F,gGAAgG;QAChG,mDAAmD;QACnD,GAAG,CAAC,wBAAwB,CAAC,CAAC,CAAC,EAAE,wBAAwB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,yFAAyF;QACzF,8FAA8F;QAC9F,yFAAyF;QACzF,sFAAsF;QACtF,uFAAuF;QACvF,WAAW,EAAE,8BAA8B,CAAC,MAAM,CAAC;QACnD,0FAA0F;QAC1F,WAAW;QACX,uFAAuF;QACvF,kFAAkF;QAClF,qBAAqB,EAAE,YAAY,CAAC,qBAAqB;QACzD,sFAAsF;QACtF,uFAAuF;QACvF,iBAAiB,EAAE,sBAAsB,CAAC,EAAE,CAAC;QAC7C,kBAAkB;QAClB,2FAA2F;QAC3F,mBAAmB,EAAE,YAAY,CAAC,mBAAmB;QACrD,wFAAwF;QACxF,yFAAyF;QACzF,yFAAyF;QACzF,sFAAsF;QACtF,0CAA0C;QAC1C,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO;YACvB,CAAC,CAAC,EAAE,qBAAqB,EAAE,gBAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE;YACrE,CAAC,CAAC,EAAE,CAAC;QACP,2FAA2F;QAC3F,+FAA+F;QAC/F,8FAA8F;QAC9F,4FAA4F;QAC5F,2FAA2F;QAC3F,iBAAiB;QACjB,GAAG,CAAC,GAAG,CAAC,gBAAgB;YACtB,CAAC,CAAC,EAAE,iBAAiB,EAAE,IAAI,8BAA8B,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE;YACjF,CAAC,CAAC,EAAE,CAAC;QACP,oFAAoF;QACpF,uFAAuF;QACvF,8FAA8F;QAC9F,0FAA0F;QAC1F,4FAA4F;QAC5F,yFAAyF;QACzF,+DAA+D;QAC/D,GAAG,CAAC,2BAA2B;YAC7B,CAAC,CAAC,EAAE,2BAA2B,EAAE,2BAA2B,EAAE;YAC9D,CAAC,CAAC,EAAE,CAAC;QACP,6FAA6F;QAC7F,4FAA4F;QAC5F,0FAA0F;QAC1F,8FAA8F;QAC9F,6FAA6F;QAC7F,6FAA6F;QAC7F,0FAA0F;QAC1F,gFAAgF;QAChF,YAAY,EAAE;YACZ,GAAG,YAAY;YACf,kBAAkB;YAClB,0FAA0F;YAC1F,2FAA2F;YAC3F,6FAA6F;YAC7F,6FAA6F;YAC7F,uCAAuC;YACvC,2BAA2B,EAAE,IAAI,6BAA6B,CAAC,EAAE,EAAE,EAAE,CAAC;YACtE,4FAA4F;YAC5F,iFAAiF;YACjF,0FAA0F;YAC1F,2FAA2F;YAC3F,2FAA2F;YAC3F,eAAe;YACf,qBAAqB,EAAE,IAAI,uBAAuB,CAAC,EAAE,EAAE,EAAE,CAAC;YAC1D,yFAAyF;YACzF,2FAA2F;YAC3F,uFAAuF;YACvF,6EAA6E;YAC7E,0BAA0B,EAAE,IAAI,4BAA4B,CAAC,EAAE,EAAE,EAAE,CAAC;YACpE,6FAA6F;YAC7F,2FAA2F;YAC3F,qFAAqF;YACrF,8FAA8F;YAC9F,6FAA6F;YAC7F,yFAAyF;YACzF,8FAA8F;YAC9F,8FAA8F;YAC9F,8FAA8F;YAC9F,yDAAyD;YACzD,wBAAwB,EAAE,IAAI,0BAA0B,CAAC,EAAE,EAAE,EAAE,CAAC;YAChE,4BAA4B,EAAE,IAAI,8BAA8B,CAAC,EAAE,EAAE,EAAE,CAAC;SACvC;QACnC,uFAAuF;QACvF,GAAG,2BAA2B,CAAC,EAAE,CAAC;QAClC,kFAAkF;QAClF,0FAA0F;QAC1F,0BAA0B;QAC1B,qBAAqB;QACrB,kFAAkF;QAClF,mFAAmF;QACnF,0BAA0B,EAAE,IAAI,4BAA4B,CAAC,EAAE,EAAE,EAAE,CAAC;QACpE,6FAA6F;QAC7F,4FAA4F;QAC5F,0BAA0B,EACxB,YAAY,CAAC,0BAA0B,IAAI,0BAA0B;QACvE,6FAA6F;QAC7F,8FAA8F;QAC9F,8FAA8F;QAC9F,2FAA2F;QAC3F,oCAAoC,EAAE,CAAC,2BAA2B,CAAC,MAAM,CAAC,cAAc,CAAC;QACzF,4FAA4F;QAC5F,wDAAwD;QACxD,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClE,GAAG,CAAC,4BAA4B;YAC9B,CAAC,CAAC,EAAE,qBAAqB,EAAE,4BAA4B,EAAE;YACzD,CAAC,CAAC,EAAE,CAAC;QACP,gGAAgG;QAChG,+FAA+F;QAC/F,+FAA+F;QAC/F,yFAAyF;QACzF,GAAG,yBAAyB,CAAC,eAAe,CAAC;QAC7C,4FAA4F;QAC5F,4DAA4D;QAC5D,gBAAgB,EAAE,uBAAuB;QACzC,gFAAgF;QAChF,+DAA+D;QAC/D,aAAa;QACb,8EAA8E;QAC9E,uCAAuC;QACvC,qBAAqB;QACrB,8EAA8E;QAC9E,uCAAuC;QACvC,OAAO;QACP,0FAA0F;QAC1F,aAAa;QACb,8FAA8F;QAC9F,oBAAoB,EAAE,0BAA0B,EAAE,OAAO;QACzD,mFAAmF;QACnF,iBAAiB,EAAE,0BAA0B,EAAE,iBAAiB;QAChE,8EAA8E;QAC9E,uBAAuB;QACvB,yFAAyF;QACzF,iEAAiE;QACjE,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3C,oFAAoF;QACpF,uFAAuF;QACvF,UAAU,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC;QACnD,sFAAsF;QACtF,mBAAmB;QACnB,yFAAyF;QACzF,WAAW;QACX,yFAAyF;QACzF,cAAc,EAAE,IAAI,0BAA0B,CAAC,EAAE,EAAE,EAAE,CAAC;QACtD,+FAA+F;QAC/F,gEAAgE;QAChE,GAAG,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,EAAE;YAC5B,CAAC,CAAC,EAAE,qBAAqB,EAAE,IAAI,uBAAuB,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE;YAChE,CAAC,CAAC,EAAE,CAAC;QACP,wFAAwF;QACxF,iBAAiB;QACjB,QAAQ,EAAE;YACR,6EAA6E;YAC7E,4EAA4E;YAC5E,QAAQ,EAAE,IAAI,iBAAiB,CAAC,GAAG,CAAC,gBAAgB,CAAC;YACrD,gFAAgF;YAChF,+EAA+E;YAC/E,cAAc,EAAE,IAAI,0BAA0B,CAAC,GAAG,CAAC,wBAAwB,CAAC;YAC5E,aAAa,EAAE,mBAAmB;YAClC,uFAAuF;YACvF,oEAAoE;YACpE,cAAc,EAAE,IAAI,sBAAsB,CAAC,GAAG,CAAC,kBAAkB,CAAC;YAClE,iFAAiF;YACjF,uDAAuD;YACvD,WAAW,EAAE,IAAI,oBAAoB,CAAC,GAAG,CAAC;YAC1C,gFAAgF;YAChF,+EAA+E;YAC/E,kCAAkC;SACnC;KACF,CAAA;AACH,CAAC"}
1	+ {"version":3,"file":"container-assembly.js","sourceRoot":"","sources":["../../src/infrastructure/container-assembly.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,uBAAuB,GAIxB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAEL,gCAAgC,EAChC,+BAA+B,EAC/B,UAAU,GACX,MAAM,4BAA4B,CAAA;AAgBnC,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAA;AACxD,OAAO,EACL,MAAM,EACN,uBAAuB,EACvB,oBAAoB,EACpB,kBAAkB,EAClB,gBAAgB,EAChB,4BAA4B,EAC5B,2BAA2B,EAC3B,uBAAuB,EAIvB,yBAAyB,GAE1B,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAEL,kBAAkB,EAClB,gBAAgB,GACjB,MAAM,oBAAoB,CAAA;AAG3B,OAAO,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAA;AAEzF,OAAO,EAAE,cAAc,EAAE,MAAM,OAAO,CAAA;AAEtC,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAA;AACnD,OAAO,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAA;AACzD,OAAO,EAAE,oCAAoC,EAAE,MAAM,+BAA+B,CAAA;AAEpF,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAA;AAChE,OAAO,EACL,qBAAqB,EACrB,sBAAsB,EACtB,0BAA0B,GAC3B,MAAM,2BAA2B,CAAA;AAClC,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAA;AAChE,OAAO,EAAE,8BAA8B,EAAE,MAAM,yCAAyC,CAAA;AACxF,OAAO,EAAE,wBAAwB,EAAE,MAAM,sCAAsC,CAAA;AAC/E,OAAO,EAAE,8BAA8B,EAAE,MAAM,4CAA4C,CAAA;AAC3F,OAAO,EAAE,8BAA8B,EAAE,MAAM,4CAA4C,CAAA;AAC3F,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAA;AACxE,OAAO,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAA;AAC1E,OAAO,EAAE,6BAA6B,EAAE,MAAM,8CAA8C,CAAA;AAC5F,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAA;AACpE,OAAO,EAAE,wBAAwB,EAAE,MAAM,yCAAyC,CAAA;AAClF,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAA;AAC7C,OAAO,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAA;AAChF,OAAO,EAAE,4BAA4B,EAAE,MAAM,6CAA6C,CAAA;AAC1F,OAAO,EAAE,sBAAsB,EAAE,MAAM,uCAAuC,CAAA;AAC9E,OAAO,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAA;AAChF,OAAO,EAAE,8BAA8B,EAAE,MAAM,+CAA+C,CAAA;AAC9F,OAAO,EAAE,8BAA8B,EAAE,MAAM,+CAA+C,CAAA;AAC9F,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAA;AAC5E,OAAO,EAAE,8BAA8B,EAAE,MAAM,+CAA+C,CAAA;AAC9F,OAAO,EAAE,yBAAyB,EAAE,MAAM,0CAA0C,CAAA;AACpF,OAAO,EAAE,gCAAgC,EAAE,MAAM,iDAAiD,CAAA;AAClG,OAAO,EAAE,4BAA4B,EAAE,MAAM,6CAA6C,CAAA;AAC1F,OAAO,EAAE,yBAAyB,EAAE,MAAM,0CAA0C,CAAA;AACpF,OAAO,EAAE,sBAAsB,EAAE,MAAM,uCAAuC,CAAA;AAC9E,OAAO,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAA;AAC1E,OAAO,EAAE,uBAAuB,EAAE,MAAM,2CAA2C,CAAA;AACnF,OAAO,EAAE,2BAA2B,EAAE,MAAM,4CAA4C,CAAA;AACxF,OAAO,EAAE,2BAA2B,EAAE,MAAM,4CAA4C,CAAA;AACxF,OAAO,EAAE,iCAAiC,EAAE,MAAM,kDAAkD,CAAA;AACpG,OAAO,EAAE,0BAA0B,EAAE,MAAM,2CAA2C,CAAA;AACtF,OAAO,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAA;AAChF,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAA;AACxE,OAAO,EAAE,kCAAkC,EAAE,MAAM,iDAAiD,CAAA;AACpG,OAAO,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAA;AAChF,OAAO,EAAE,4BAA4B,EAAE,MAAM,6CAA6C,CAAA;AAC1F,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAA;AACxE,OAAO,EAAE,sBAAsB,EAAE,MAAM,uCAAuC,CAAA;AAC9E,OAAO,EAAE,0BAA0B,EAAE,MAAM,2CAA2C,CAAA;AACtF,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAA;AAClE,OAAO,EAAE,2BAA2B,EAAE,MAAM,4CAA4C,CAAA;AACxF,OAAO,EAAE,0BAA0B,EAAE,MAAM,2CAA2C,CAAA;AACtF,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAA;AAC5E,OAAO,EACL,gBAAgB,EAChB,sBAAsB,EACtB,8BAA8B,EAC9B,kBAAkB,EAClB,mBAAmB,EAEnB,gBAAgB,EAChB,mBAAmB,EACnB,yBAAyB,EACzB,sBAAsB,EACtB,yBAAyB,EACzB,4BAA4B,EAC5B,wBAAwB,EACxB,yBAAyB,EACzB,uBAAuB,EACvB,sBAAsB,EACtB,iBAAiB,EACjB,iBAAiB,EACjB,6BAA6B,EAC7B,sBAAsB,EACtB,eAAe,EACf,eAAe,EACf,gBAAgB,GACjB,MAAM,gBAAgB,CAAA;AACvB,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAA;AACjE,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAA;AAEnD,OAAO,EAAE,gCAAgC,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAA;AAiFjG;;;;;;;;GAQG;AACH;;;;;;;GAOG;AACH;;;;;GAKG;AACH,SAAS,0BAA0B,CAAC,IAOnC;IACC,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,gBAAgB,EAAE,GAAG,IAAI,CAAA;IACtE,OAAO;QACL,gFAAgF;QAChF,+EAA+E;QAC/E,+BAA+B,EAAE,IAAI,iCAAiC,CAAC,EAAE,EAAE,EAAE,CAAC;QAC9E,sBAAsB,EAAE,IAAI,wBAAwB,CAAC,EAAE,EAAE,EAAE,CAAC;QAC5D,gBAAgB,EAAE,sBAAsB,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,gBAAgB,CAAC;QAC/F,6EAA6E;QAC7E,6EAA6E;QAC7E,eAAe,EAAE,GAAG,CAAC,kBAAkB;YACrC,CAAC,CAAC,IAAI,wBAAwB,CAAC,GAAG,CAAC,kBAAkB,CAAC;YACtD,CAAC,CAAC,SAAS;QACb,iFAAiF;QACjF,sFAAsF;QACtF,0EAA0E;QAC1E,mFAAmF;QACnF,4BAA4B,EAAE,IAAI,8BAA8B,CAAC,EAAE,EAAE,EAAE,CAAC;QACxE,qBAAqB,EAAE,GAAG,CAAC,0BAA0B;YACnD,CAAC,CAAC,IAAI,8BAA8B,CAAC,GAAG,CAAC,0BAA0B,CAAC;YACpE,CAAC,CAAC,SAAS;QACb,uFAAuF;QACvF,uFAAuF;QACvF,uFAAuF;QACvF,sFAAsF;QACtF,aAAa;QACb,4BAA4B,EAAE,IAAI,8BAA8B,CAAC,EAAE,EAAE,EAAE,CAAC;QACxE,qBAAqB,EAAE,GAAG,CAAC,iBAAiB;YAC1C,CAAC,CAAC,IAAI,8BAA8B,CAAC,GAAG,CAAC,iBAAiB,CAAC;YAC3D,CAAC,CAAC,SAAS;KACd,CAAA;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,gCAAgC,CACvC,IAa8C;IAE9C,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,IAAI,CAAA;IAChC,OAAO,CAAC,WAAW,EAAE,WAAW,EAAE,aAAa,EAAE,EAAE,CACjD,4BAA4B,CAC1B;QACE,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,qBAAqB,EAAE,IAAI,CAAC,qBAAqB;QACjD,uBAAuB,EAAE,IAAI,CAAC,uBAAuB;QACrD,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,UAAU,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC;QACnD,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;QAC7C,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;QACzC,eAAe,EAAE,IAAI,CAAC,eAAe;QACrC,kBAAkB,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,qBAAqB,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3E,oBAAoB,EAAE,MAAM,CAAC,cAAc,EAAE,WAAW,EAAE,SAAS,IAAI,KAAK;QAC5E,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,+BAA+B,EAAE,oCAAoC,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC;KACvF,EACD,WAAW,EACX,WAAW,EACX,aAAa,CACd,CAAA;AACL,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAS,6BAA6B,CAAC,IAOtC;IAKC,MAAM,EACJ,MAAM,EACN,EAAE,EACF,WAAW,EACX,yBAAyB,EACzB,yBAAyB,EACzB,wBAAwB,GACzB,GAAG,IAAI,CAAA;IACR,OAAO;QACL,0DAA0D;QAC1D,uBAAuB,EAAE,IAAI,yBAAyB,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC;QAC3E,0FAA0F;QAC1F,0FAA0F;QAC1F,QAAQ;QACR,8BAA8B,EAAE,IAAI,gCAAgC,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC;QACzF,0BAA0B,EAAE,IAAI,4BAA4B,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC;QACjF,0FAA0F;QAC1F,0FAA0F;QAC1F,oEAAoE;QACpE,uBAAuB,EAAE,IAAI,yBAAyB,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC;QAC3E,kGAAkG;QAClG,yBAAyB,EAAE,IAAI,2BAA2B,CAAC,EAAE,EAAE,EAAE,CAAC;QAClE,yFAAyF;QACzF,4FAA4F;QAC5F,oEAAoE;QACpE,qBAAqB,EAAE,IAAI,uBAAuB,CAAC,EAAE,EAAE,EAAE,CAAC;QAC1D,qFAAqF;QACrF,oBAAoB;QACpB,iBAAiB,EAAE,IAAI,mBAAmB,CAAC,EAAE,EAAE,EAAE,CAAC;QAClD,kFAAkF;QAClF,mFAAmF;QACnF,oCAAoC;QACpC,GAAG,CAAC,yBAAyB,CAAC,CAAC,CAAC,EAAE,yBAAyB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,gBAAgB,EAAE,MAAM,CAAC,aAAa,CAAC,aAAa;QACpD,mFAAmF;QACnF,2DAA2D;QAC3D,yBAAyB;QACzB,mFAAmF;QACnF,sDAAsD;QACtD,wBAAwB;KACzB,CAAA;AACH,CAAC;AAED,SAAS,2BAA2B,CAAC,KAAmC;IACtE,MAAM,EACJ,GAAG,EACH,MAAM,EACN,EAAE,EACF,WAAW,EACX,KAAK,EACL,WAAW,EACX,MAAM,EACN,SAAS,EACT,uBAAuB,EACvB,UAAU,EACV,yBAAyB,EACzB,gBAAgB,EAChB,aAAa,EACb,kBAAkB,EAClB,eAAe,EACf,uBAAuB,EACvB,qBAAqB,EACrB,OAAO,EACP,0BAA0B,EAC1B,mBAAmB,EACnB,iBAAiB,EACjB,cAAc,EACd,yBAAyB,EACzB,wBAAwB,EACxB,eAAe,EACf,yBAAyB,EACzB,wBAAwB,EACxB,eAAe,EACf,0BAA0B,EAC1B,mBAAmB,GACpB,GAAG,KAAK,CAAA;IACT,MAAM,EACJ,0BAA0B,EAC1B,qBAAqB,EACrB,0BAA0B,EAC1B,iBAAiB,EACjB,YAAY,EACZ,aAAa,EACb,oBAAoB,EACpB,wBAAwB,EACxB,gBAAgB,GACjB,GAAG,UAAU,CAAA;IACd,6FAA6F;IAC7F,iFAAiF;IACjF,0FAA0F;IAC1F,0FAA0F;IAC1F,MAAM,aAAa,GAAG,uBAAuB,CAAC,GAAG,CAAC,CAAA;IAElD,OAAO;QACL,0FAA0F;QAC1F,2FAA2F;QAC3F,4FAA4F;QAC5F,MAAM;QACN,2FAA2F;QAC3F,qFAAqF;QACrF,kFAAkF;QAClF,kBAAkB;QAClB,4FAA4F;QAC5F,qFAAqF;QACrF,uDAAuD;QACvD,aAAa,EAAE,IAAI,YAAY,CAAC;YAC9B,uFAAuF;YACvF,oEAAoE;YACpE,oBAAoB,EAAE,IAAI,sBAAsB,CAAC,EAAE,EAAE,EAAE,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;YAC7E,WAAW;YACX,KAAK;YACL,MAAM;SACP,CAAC;QACF,0FAA0F;QAC1F,0BAA0B;QAC1B,qBAAqB;QACrB,oFAAoF;QACpF,6FAA6F;QAC7F,mCAAmC;QACnC,0BAA0B;QAC1B,uEAAuE;QACvE,yEAAyE;QACzE,0BAA0B;QAC1B,mBAAmB,EAAE,IAAI,qBAAqB,CAAC,EAAE,EAAE,EAAE,CAAC;QACtD,yBAAyB,EAAE,IAAI,2BAA2B,CAAC,EAAE,EAAE,EAAE,CAAC;QAClE,iBAAiB,EAAE,IAAI,mBAAmB,CAAC,EAAE,EAAE,EAAE,CAAC;QAClD,oBAAoB,EAAE,IAAI,sBAAsB,CAAC,EAAE,EAAE,EAAE,CAAC;QACxD,cAAc,EAAE,IAAI,gBAAgB,CAAC,EAAE,EAAE,EAAE,CAAC;QAC5C,cAAc,EAAE,IAAI,uBAAuB,EAAE;QAC7C,eAAe,EAAE,IAAI,iBAAiB,CAAC,EAAE,EAAE,EAAE,CAAC;QAC9C,kBAAkB,EAAE,IAAI,oBAAoB,CAAC,EAAE,EAAE,EAAE,CAAC;QACpD,mBAAmB,EAAE,IAAI,qBAAqB,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;QAC7D,8FAA8F;QAC9F,gCAAgC,EAAE,IAAI,kCAAkC,CAAC,EAAE,EAAE,EAAE,CAAC;QAChF,iBAAiB,EAAE,IAAI,mBAAmB,CAAC,EAAE,EAAE,EAAE,CAAC;QAClD,wBAAwB,EAAE,IAAI,0BAA0B,CAAC,EAAE,EAAE,EAAE,CAAC;QAChE,oBAAoB,EAAE,IAAI,sBAAsB,CAAC,EAAE,EAAE,EAAE,CAAC;QACxD,GAAG,6BAA6B,CAAC;YAC/B,MAAM;YACN,EAAE;YACF,WAAW;YACX,yBAAyB;YACzB,yBAAyB;YACzB,wBAAwB;SACzB,CAAC;QACF,WAAW;QACX,KAAK;QACL,+EAA+E;QAC/E,+EAA+E;QAC/E,6EAA6E;QAC7E,6EAA6E;QAC7E,aAAa,EACX,SAAS,CAAC,aAAa;YACvB,kBAAkB,CAAC;gBACjB,QAAQ,EAAE,mBAAmB,CAAC;oBAC5B,GAAG;oBACH,MAAM;oBACN,EAAE;oBACF,KAAK;oBACL,MAAM;oBACN,gBAAgB;oBAChB,iBAAiB;oBACjB,aAAa;oBACb,qBAAqB;oBACrB,yBAAyB;oBACzB,wBAAwB,EAAE,yBAAyB;oBACnD,wBAAwB;oBACxB,kBAAkB,EAAE,eAAe,CAAC,QAAQ;oBAC5C,yFAAyF;oBACzF,yCAAyC;oBACzC,GAAG,oBAAoB,CAAC;wBACtB,KAAK,EAAE,eAAe;wBACtB,kBAAkB,EAAE,eAAe,CAAC,QAAQ;wBAC5C,MAAM;qBACP,CAAC;iBACH,CAAC;gBACF,GAAG;gBACH,MAAM;gBACN,EAAE;gBACF,cAAc;gBACd,iBAAiB;gBACjB,MAAM;aACP,CAAC;QACJ,iBAAiB;QACjB,4FAA4F;QAC5F,uFAAuF;QACvF,YAAY;QACZ,6FAA6F;QAC7F,gFAAgF;QAChF,aAAa;QACb,oBAAoB;QACpB,8FAA8F;QAC9F,2DAA2D;QAC3D,gBAAgB;QAChB,wBAAwB;QACxB,UAAU,EAAE,gBAAgB,CAAC,GAAG,CAAC;QACjC,uBAAuB,EAAE,cAAc;QACvC,YAAY,EAAE,MAAM,CAAC,KAAK;QAC1B,gFAAgF;QAChF,sEAAsE;QACtE,qBAAqB,EAAE,iBAAiB;YACtC,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,iBAAiB,CAAC,eAAe,CAAC,EAAE,CAAC;YAC/C,CAAC,CAAC,SAAS;QACb,GAAG,0BAA0B,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,gBAAgB,EAAE,CAAC;QACxF,GAAG,gBAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,CAAC,SAAS,CAAC;QAC1E,GAAG,wBAAwB,CAAC;YAC1B,GAAG;YACH,MAAM;YACN,EAAE;YACF,KAAK;YACL,WAAW;YACX,gBAAgB;YAChB,cAAc,EAAE,0BAA0B,EAAE,OAAO;SACpD,CAAC;QACF,4FAA4F;QAC5F,yFAAyF;QACzF,GAAG,CAAC,0BAA0B;YAC5B,CAAC,CAAC,EAAE,gBAAgB,EAAE,0BAA0B,CAAC,gBAAgB,EAAE;YACnE,CAAC,CAAC,EAAE,CAAC;QACP,mFAAmF;QACnF,0FAA0F;QAC1F,uFAAuF;QACvF,wFAAwF;QACxF,4FAA4F;QAC5F,4FAA4F;QAC5F,oBAAoB,EAAE,SAAS,CAAC,oBAAoB,IAAI,uBAAuB;QAC/E,GAAG,uBAAuB,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,gBAAgB,CAAC;QAC7D,4FAA4F;QAC5F,mEAAmE;QACnE,GAAG,CAAC,kBAAkB;YACpB,CAAC,CAAC;gBACE,qBAAqB,EAAE,CAAC,WAAmB,EAAE,OAAe,EAAE,EAAE,CAC9D,kBAAkB,CAAC,mBAAmB,CAAC,WAAW,EAAE,OAAO,CAAC;aAC/D;YACH,CAAC,CAAC,EAAE,CAAC;QACP,qFAAqF;QACrF,0FAA0F;QAC1F,2FAA2F;QAC3F,4FAA4F;QAC5F,0EAA0E;QAC1E,uBAAuB,EAAE,CAAC,WAAmB,EAAE,OAAe,EAAE,EAAE,CAChE,uBAAuB,CAAC,eAAe,CAAC,WAAW,EAAE,OAAO,CAAC;QAC/D,GAAG,4BAA4B,CAAC,GAAG,EAAE,EAAE,EAAE,gBAAgB,CAAC;QAC1D,GAAG,yBAAyB,CAAC,GAAG,EAAE,EAAE,CAAC;QACrC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/C,GAAG,eAAe,CAAC,MAAM,EAAE,EAAE,CAAC;QAC9B,GAAG,yBAAyB,CAAC,MAAM,EAAE,EAAE,CAAC;QACxC,GAAG,eAAe,CAAC,MAAM,CAAC;QAC1B,GAAG,mBAAmB,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,WAAW,CAAC;QAC3D,GAAG,mBAAmB,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,WAAW,CAAC;QAC3D,GAAG,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,WAAW,CAAC;QACvD,GAAG,sBAAsB,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC;QAC1C,GAAG,iBAAiB,CAAC,GAAG,CAAC,UAAU,CAAC;QACpC,GAAG,sBAAsB,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC;QAC1C,GAAG,gBAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,CAAC;QAC3C,GAAG,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC;QACrC,GAAG,yBAAyB,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC;QAC7C,GAAG,sBAAsB,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC;QAC1C,oFAAoF;QACpF,4FAA4F;QAC5F,GAAG,6BAA6B,CAAC,EAAE,CAAC;QACpC,yFAAyF;QACzF,wFAAwF;QACxF,6BAA6B;QAC7B,kBAAkB,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,EAAE;YACpD,MAAM,mBAAmB,CAAC,gBAAgB,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAA;QACjE,CAAC;QACD,2DAA2D;QAC3D,yBAAyB,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE;YAChD,MAAM,mBAAmB,CAAC,uBAAuB,CAAC,QAAQ,CAAC,CAAA;QAC7D,CAAC;QACD,0FAA0F;QAC1F,6FAA6F;QAC7F,8EAA8E;QAC9E,MAAM;QACN,6FAA6F;QAC7F,4FAA4F;QAC5F,2BAA2B,EAAE,gCAAgC,CAAC;YAC5D,GAAG;YACH,MAAM;YACN,EAAE;YACF,MAAM;YACN,OAAO;YACP,aAAa;YACb,qBAAqB;YACrB,uBAAuB;YACvB,aAAa;YACb,mBAAmB;YACnB,iBAAiB;YACjB,eAAe;SAChB,CAAC;QACF,qFAAqF;QACrF,yEAAyE;QACzE,iBAAiB,EAAE,gBAAgB;QACnC,GAAG,SAAS;KACb,CAAA;AACH,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAS,2BAA2B,CAClC,EAAc;IAKd,OAAO;QACL,qBAAqB,EAAE,IAAI,uBAAuB,CAAC,EAAE,EAAE,EAAE,CAAC;QAC1D,qBAAqB,EAAE,IAAI,uBAAuB,CAAC;YACjD,EAAE;YACF,WAAW,EAAE,IAAI,iBAAiB,EAAE;SACrC,CAAC;QACF,oBAAoB,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,kBAAkB,CAAC,IAAI,SAAS;KAC3E,CAAA;AACH,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,KAAmC;IACzE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,gBAAgB,EAAE,aAAa,EAAE,GAAG,KAAK,CAAA;IACrF,MAAM,EACJ,aAAa,EACb,kBAAkB,EAClB,4BAA4B,EAC5B,eAAe,EACf,eAAe,EACf,uBAAuB,EACvB,qBAAqB,EACrB,OAAO,EACP,aAAa,EACb,0BAA0B,EAC1B,mBAAmB,EACnB,WAAW,EACX,iBAAiB,EACjB,uBAAuB,EACvB,wBAAwB,EACxB,0BAA0B,EAC1B,mBAAmB,GACpB,GAAG,KAAK,CAAA;IACT,MAAM,EAAE,0BAA0B,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,WAAW,EAAE,GACxF,UAAU,CAAA;IACZ,MAAM,aAAa,GAAG,uBAAuB,CAAC,GAAG,CAAC,CAAA;IAClD,2FAA2F;IAC3F,yFAAyF;IACzF,MAAM,YAAY,GAAG,2BAA2B,CAAC,KAAK,CAAC,CAAA;IAEvD,uFAAuF;IACvF,sFAAsF;IACtF,2FAA2F;IAC3F,uFAAuF;IACvF,MAAM,iBAAiB,GAAG,uBAAuB,CAAC;QAChD,GAAG;QACH,MAAM;QACN,EAAE;QACF,KAAK;QACL,gBAAgB;QAChB,QAAQ,EAAE,YAAY,CAAC,mBAAmB;QAC1C,0BAA0B;KAC3B,CAAC,CAAA;IACF,sFAAsF;IACtF,gFAAgF;IAChF,IAAI,iBAAiB,IAAI,CAAC,YAAY,CAAC,iBAAiB,EAAE,CAAC;QACzD,YAAY,CAAC,iBAAiB,GAAG,iBAAiB,CAAA;IACpD,CAAC;IAED,8FAA8F;IAC9F,4FAA4F;IAC5F,iGAAiG;IACjG,kBAAkB,CAAC,gBAAgB,EAAE,aAAa,CAAC,CAAA;IACnD,wFAAwF;IACxF,yFAAyF;IACzF,gBAAgB,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAA;IAE1C,kFAAkF;IAClF,+FAA+F;IAC/F,4EAA4E;IAC5E,MAAM,kBAAkB,GAAG,IAAI,oBAAoB,CAAC,EAAE,EAAE,EAAE,CAAC,CAAA;IAC3D,6FAA6F;IAC7F,+FAA+F;IAC/F,MAAM,2BAA2B,GAAG,gCAAgC,CAClE,MAAM,EACN,EAAE,EACF,0BAA0B,EAAE,OAAO,CACpC,CAAA;IAED,OAAO;QACL,GAAG,UAAU,CAAC,YAAY,CAAC;QAC3B,MAAM;QACN,+FAA+F;QAC/F,6FAA6F;QAC7F,gGAAgG;QAChG,mDAAmD;QACnD,GAAG,CAAC,wBAAwB,CAAC,CAAC,CAAC,EAAE,wBAAwB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,yFAAyF;QACzF,8FAA8F;QAC9F,yFAAyF;QACzF,sFAAsF;QACtF,uFAAuF;QACvF,WAAW,EAAE,8BAA8B,CAAC,MAAM,CAAC;QACnD,0FAA0F;QAC1F,WAAW;QACX,uFAAuF;QACvF,kFAAkF;QAClF,qBAAqB,EAAE,YAAY,CAAC,qBAAqB;QACzD,sFAAsF;QACtF,uFAAuF;QACvF,iBAAiB,EAAE,sBAAsB,CAAC,EAAE,CAAC;QAC7C,kBAAkB;QAClB,2FAA2F;QAC3F,mBAAmB,EAAE,YAAY,CAAC,mBAAmB;QACrD,wFAAwF;QACxF,yFAAyF;QACzF,yFAAyF;QACzF,sFAAsF;QACtF,0CAA0C;QAC1C,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO;YACvB,CAAC,CAAC,EAAE,qBAAqB,EAAE,gBAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE;YACrE,CAAC,CAAC,EAAE,CAAC;QACP,2FAA2F;QAC3F,+FAA+F;QAC/F,8FAA8F;QAC9F,4FAA4F;QAC5F,2FAA2F;QAC3F,iBAAiB;QACjB,GAAG,CAAC,GAAG,CAAC,gBAAgB;YACtB,CAAC,CAAC,EAAE,iBAAiB,EAAE,IAAI,8BAA8B,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE;YACjF,CAAC,CAAC,EAAE,CAAC;QACP,oFAAoF;QACpF,uFAAuF;QACvF,8FAA8F;QAC9F,0FAA0F;QAC1F,4FAA4F;QAC5F,yFAAyF;QACzF,+DAA+D;QAC/D,GAAG,CAAC,2BAA2B;YAC7B,CAAC,CAAC,EAAE,2BAA2B,EAAE,2BAA2B,EAAE;YAC9D,CAAC,CAAC,EAAE,CAAC;QACP,6FAA6F;QAC7F,4FAA4F;QAC5F,0FAA0F;QAC1F,8FAA8F;QAC9F,6FAA6F;QAC7F,6FAA6F;QAC7F,0FAA0F;QAC1F,gFAAgF;QAChF,YAAY,EAAE;YACZ,GAAG,YAAY;YACf,kBAAkB;YAClB,0FAA0F;YAC1F,2FAA2F;YAC3F,6FAA6F;YAC7F,6FAA6F;YAC7F,uCAAuC;YACvC,2BAA2B,EAAE,IAAI,6BAA6B,CAAC,EAAE,EAAE,EAAE,CAAC;YACtE,4FAA4F;YAC5F,iFAAiF;YACjF,0FAA0F;YAC1F,2FAA2F;YAC3F,2FAA2F;YAC3F,eAAe;YACf,qBAAqB,EAAE,IAAI,uBAAuB,CAAC,EAAE,EAAE,EAAE,CAAC;YAC1D,yFAAyF;YACzF,2FAA2F;YAC3F,uFAAuF;YACvF,6EAA6E;YAC7E,0BAA0B,EAAE,IAAI,4BAA4B,CAAC,EAAE,EAAE,EAAE,CAAC;YACpE,6FAA6F;YAC7F,2FAA2F;YAC3F,qFAAqF;YACrF,8FAA8F;YAC9F,6FAA6F;YAC7F,yFAAyF;YACzF,8FAA8F;YAC9F,8FAA8F;YAC9F,8FAA8F;YAC9F,yDAAyD;YACzD,wBAAwB,EAAE,IAAI,0BAA0B,CAAC,EAAE,EAAE,EAAE,CAAC;YAChE,4BAA4B,EAAE,IAAI,8BAA8B,CAAC,EAAE,EAAE,EAAE,CAAC;SACvC;QACnC,uFAAuF;QACvF,GAAG,2BAA2B,CAAC,EAAE,CAAC;QAClC,kFAAkF;QAClF,0FAA0F;QAC1F,0BAA0B;QAC1B,qBAAqB;QACrB,kFAAkF;QAClF,mFAAmF;QACnF,0BAA0B,EAAE,IAAI,4BAA4B,CAAC,EAAE,EAAE,EAAE,CAAC;QACpE,6FAA6F;QAC7F,4FAA4F;QAC5F,0BAA0B,EACxB,YAAY,CAAC,0BAA0B,IAAI,0BAA0B;QACvE,6FAA6F;QAC7F,8FAA8F;QAC9F,8FAA8F;QAC9F,2FAA2F;QAC3F,oCAAoC,EAAE,CAAC,2BAA2B,CAAC,MAAM,CAAC,cAAc,CAAC;QACzF,4FAA4F;QAC5F,wDAAwD;QACxD,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClE,GAAG,gCAAgC,CAAC;YAClC,GAAG;YACH,4BAA4B;YAC5B,eAAe;YACf,eAAe;SAChB,CAAC;QACF,4FAA4F;QAC5F,4DAA4D;QAC5D,gBAAgB,EAAE,uBAAuB;QACzC,gFAAgF;QAChF,+DAA+D;QAC/D,aAAa;QACb,8EAA8E;QAC9E,uCAAuC;QACvC,qBAAqB;QACrB,8EAA8E;QAC9E,uCAAuC;QACvC,OAAO;QACP,0FAA0F;QAC1F,aAAa;QACb,8FAA8F;QAC9F,oBAAoB,EAAE,0BAA0B,EAAE,OAAO;QACzD,mFAAmF;QACnF,iBAAiB,EAAE,0BAA0B,EAAE,iBAAiB;QAChE,8EAA8E;QAC9E,uBAAuB;QACvB,yFAAyF;QACzF,iEAAiE;QACjE,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3C,oFAAoF;QACpF,uFAAuF;QACvF,UAAU,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC;QACnD,sFAAsF;QACtF,mBAAmB;QACnB,yFAAyF;QACzF,WAAW;QACX,yFAAyF;QACzF,cAAc,EAAE,IAAI,0BAA0B,CAAC,EAAE,EAAE,EAAE,CAAC;QACtD,+FAA+F;QAC/F,gEAAgE;QAChE,GAAG,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,EAAE;YAC5B,CAAC,CAAC,EAAE,qBAAqB,EAAE,IAAI,uBAAuB,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE;YAChE,CAAC,CAAC,EAAE,CAAC;QACP,wFAAwF;QACxF,iBAAiB;QACjB,QAAQ,EAAE;YACR,6EAA6E;YAC7E,4EAA4E;YAC5E,QAAQ,EAAE,IAAI,iBAAiB,CAAC,GAAG,CAAC,gBAAgB,CAAC;YACrD,gFAAgF;YAChF,+EAA+E;YAC/E,cAAc,EAAE,IAAI,0BAA0B,CAAC,GAAG,CAAC,wBAAwB,CAAC;YAC5E,aAAa,EAAE,mBAAmB;YAClC,uFAAuF;YACvF,oEAAoE;YACpE,cAAc,EAAE,IAAI,sBAAsB,CAAC,GAAG,CAAC,kBAAkB,CAAC;YAClE,iFAAiF;YACjF,uDAAuD;YACvD,WAAW,EAAE,IAAI,oBAAoB,CAAC,GAAG,CAAC;YAC1C,gFAAgF;YAChF,+EAA+E;YAC/E,kCAAkC;SACnC;KACF,CAAA;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAS,gCAAgC,CAAC,KAKzC;IAQC,OAAO;QACL,GAAG,CAAC,KAAK,CAAC,4BAA4B;YACpC,CAAC,CAAC,EAAE,qBAAqB,EAAE,KAAK,CAAC,4BAA4B,EAAE;YAC/D,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,uBAAuB,CAAC;YACzB,KAAK,EAAE,KAAK,CAAC,eAAe;YAC5B,WAAW,EAAE,KAAK,CAAC,GAAG,CAAC,sBAAsB;SAC9C,CAAC;QACF,+FAA+F;QAC/F,4BAA4B;QAC5B,GAAG,yBAAyB,CAAC,KAAK,CAAC,eAAe,CAAC;KACpD,CAAA;AACH,CAAC"}

package/dist/infrastructure/container-shared-services.d.ts CHANGED Viewed

@@ -25,6 +25,7 @@ export declare function buildWorkerSharedServices(input: WorkerSharedServicesInp
     subscriptions: import("@cat-factory/integrations").ProviderSubscriptionService | undefined;
     testSecretsService: import("@cat-factory/integrations").TestSecretsService | undefined;
     capabilityCredentialsService: import("@cat-factory/integrations").CapabilityCredentialsService | undefined;
+    mcpOAuthService: import("@cat-factory/integrations").McpOAuthService | undefined;
     validationConfigService: import("@cat-factory/integrations").ValidationConfigService;
     personalSubscriptions: import("@cat-factory/integrations").PersonalSubscriptionService | undefined;
     apiKeys: import("@cat-factory/integrations").ApiKeyService | undefined;

package/dist/infrastructure/container-shared-services.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"container-shared-services.d.ts","sourceRoot":"","sources":["../../src/infrastructure/container-shared-services.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAA;AAC3D,OAAO,EACL,gCAAgC,EAChC,+BAA+B,EAChC,MAAM,4BAA4B,CAAA;AACnC,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AAEtD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,UAAU,CAAA;AACzC,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,OAAO,CAAA;AAChC,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,WAAW,CAAA;AAC1D,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAA;AAEnE,OAAO,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAA;~~AAoB1E~~,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAA;AAIjE,MAAM,WAAW,yBAAyB;IACxC,GAAG,EAAE,GAAG,CAAA;IACR,MAAM,EAAE,SAAS,CAAA;IACjB,EAAE,EAAE,UAAU,CAAA;IACd,WAAW,EAAE,UAAU,CAAA;IACvB,KAAK,EAAE,WAAW,CAAA;IAClB,WAAW,EAAE,iBAAiB,CAAA;IAC9B,MAAM,EAAE,UAAU,CAAC,OAAO,eAAe,CAAC,CAAA;IAC1C,sBAAsB,EAAE,UAAU,CAAC,OAAO,uBAAuB,CAAC,CAAC,wBAAwB,CAAC,CAAA;IAC5F,wBAAwB,EAAE,UAAU,CAAC,OAAO,wBAAwB,CAAC,CAAC,YAAY,CAAC,CAAA;IACnF,kBAAkB,EAAE,UAAU,CAAC,OAAO,wBAAwB,CAAC,CAAC,kBAAkB,CAAC,CAAA;IACnF,+BAA+B,EAAE,OAAO,GAAG,SAAS,CAAA;CACrD;AAED,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,yBAAyB~~;;;;;;;;;;;;;;;;;;;;;;;;;;;EAwKzE~~"}
1	+ {"version":3,"file":"container-shared-services.d.ts","sourceRoot":"","sources":["../../src/infrastructure/container-shared-services.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAA;AAC3D,OAAO,EACL,gCAAgC,EAChC,+BAA+B,EAChC,MAAM,4BAA4B,CAAA;AACnC,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AAEtD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,UAAU,CAAA;AACzC,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,OAAO,CAAA;AAChC,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,WAAW,CAAA;AAC1D,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAA;AAEnE,OAAO,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAA;AAqB1E,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAA;AAIjE,MAAM,WAAW,yBAAyB;IACxC,GAAG,EAAE,GAAG,CAAA;IACR,MAAM,EAAE,SAAS,CAAA;IACjB,EAAE,EAAE,UAAU,CAAA;IACd,WAAW,EAAE,UAAU,CAAA;IACvB,KAAK,EAAE,WAAW,CAAA;IAClB,WAAW,EAAE,iBAAiB,CAAA;IAC9B,MAAM,EAAE,UAAU,CAAC,OAAO,eAAe,CAAC,CAAA;IAC1C,sBAAsB,EAAE,UAAU,CAAC,OAAO,uBAAuB,CAAC,CAAC,wBAAwB,CAAC,CAAA;IAC5F,wBAAwB,EAAE,UAAU,CAAC,OAAO,wBAAwB,CAAC,CAAC,YAAY,CAAC,CAAA;IACnF,kBAAkB,EAAE,UAAU,CAAC,OAAO,wBAAwB,CAAC,CAAC,kBAAkB,CAAC,CAAA;IACnF,+BAA+B,EAAE,OAAO,GAAG,SAAS,CAAA;CACrD;AAED,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA4KzE"}

package/dist/infrastructure/container-shared-services.js CHANGED Viewed

@@ -6,7 +6,7 @@ import { resolveWorkerRegistries } from './container-registries.js';
 import { buildAccountSettings } from './container-account-settings.js';
 import { cloudflareContentStorage } from './container-artifact-storage.js';
 import { buildResolvePackageRegistries, selectEventPublisher } from './container.js';
-import { buildApiKeyService, buildLocalModelEndpointService, buildOpenRouterCatalogService, buildPersonalSubscriptionService, buildPublicApiKeyService, buildSubscriptionService, buildCapabilityCredentialsService, buildTestSecretsService, buildUserSecretService, buildValidationConfigService, } from './wireCredentialServices';
+import { buildApiKeyService, buildLocalModelEndpointService, buildOpenRouterCatalogService, buildPersonalSubscriptionService, buildPublicApiKeyService, buildSubscriptionService, buildCapabilityCredentialsService, buildMcpOAuthService, buildTestSecretsService, buildUserSecretService, buildValidationConfigService, } from './wireCredentialServices';
 import { buildDefaultWebSearchUpstream } from './container-executor-deps.js';
 import { D1AgentContextSnapshotRepository } from './repositories/D1AgentContextSnapshotRepository';
 import { D1AgentSearchQueryRepository } from './repositories/D1AgentSearchQueryRepository';
@@ -26,6 +26,9 @@ export function buildWorkerSharedServices(input) {
     // CRUD controller and the engine's prompt refs (the executor builds its own value resolver).
     const testSecretsService = buildTestSecretsService(env, db, clock);
     const capabilityCredentialsService = buildCapabilityCredentialsService(env, db, clock);
+    // The per-workspace OAuth grants for remote MCP tool servers — shared by the connect/disconnect
+    // routes, the inventory's connection state, and the executor's dispatch-time token source.
+    const mcpOAuthService = buildMcpOAuthService(env, db, clock);
     const validationConfigService = buildValidationConfigService(db, clock);
     // The per-user individual-usage subscription store (Claude) — shared by the
     // personal-subscription controller and the container executor's personal lease.
@@ -110,6 +113,7 @@ export function buildWorkerSharedServices(input) {
         subscriptions,
         testSecretsService,
         capabilityCredentialsService,
+        mcpOAuthService,
         validationConfigService,
         personalSubscriptions,
         apiKeys,

package/dist/infrastructure/container-shared-services.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"container-shared-services.js","sourceRoot":"","sources":["../../src/infrastructure/container-shared-services.ts"],"names":[],"mappings":"AAKA,OAAO,EACL,gCAAgC,EAChC,+BAA+B,GAChC,MAAM,4BAA4B,CAAA;AACnC,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AACtD,OAAO,EAAE,8BAA8B,EAAE,MAAM,qBAAqB,CAAA;AAGpE,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,WAAW,CAAA;AAC1D,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAA;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,iCAAiC,CAAA;AACtE,OAAO,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAA;AAC1E,OAAO,EAAE,6BAA6B,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAA;AACpF,OAAO,EACL,kBAAkB,EAClB,8BAA8B,EAC9B,6BAA6B,EAC7B,gCAAgC,EAChC,wBAAwB,EACxB,wBAAwB,EACxB,iCAAiC,EACjC,uBAAuB,EACvB,sBAAsB,EACtB,4BAA4B,GAC7B,MAAM,0BAA0B,CAAA;AACjC,OAAO,EAAE,6BAA6B,EAAE,MAAM,8BAA8B,CAAA;AAC5E,OAAO,EAAE,gCAAgC,EAAE,MAAM,iDAAiD,CAAA;AAClG,OAAO,EAAE,4BAA4B,EAAE,MAAM,6CAA6C,CAAA;AAC1F,OAAO,EAAE,6BAA6B,EAAE,MAAM,8CAA8C,CAAA;AAC5F,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAA;AAC5E,OAAO,EAAE,6BAA6B,EAAE,MAAM,8CAA8C,CAAA;AAC5F,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAA;AACjE,OAAO,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAA;AAC/C,OAAO,EAAE,wCAAwC,EAAE,MAAM,+BAA+B,CAAA;AAgBxF,MAAM,UAAU,yBAAyB,CAAC,KAAgC;IACxE,MAAM,EACJ,GAAG,EACH,MAAM,EACN,EAAE,EACF,WAAW,EACX,KAAK,EACL,WAAW,EACX,MAAM,EACN,sBAAsB,EACtB,wBAAwB,EACxB,kBAAkB,GACnB,GAAG,KAAK,CAAA;IAET,iFAAiF;IACjF,oEAAoE;IACpE,4DAA4D;IAC5D,MAAM,aAAa,GAAG,wBAAwB,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK,CAAC,CAAA;IAE9D,wFAAwF;IACxF,6FAA6F;IAC7F,MAAM,kBAAkB,GAAG,uBAAuB,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK,CAAC,CAAA;IAClE,MAAM,4BAA4B,GAAG,iCAAiC,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK,CAAC,CAAA;~~IAEtF~~,MAAM,uBAAuB,GAAG,4BAA4B,CAAC,EAAE,EAAE,KAAK,CAAC,CAAA;IAEvE,4EAA4E;IAC5E,gFAAgF;IAChF,MAAM,qBAAqB,GAAG,gCAAgC,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK,CAAC,CAAA;IAE9E,4EAA4E;IAC5E,gFAAgF;IAChF,MAAM,OAAO,GAAG,kBAAkB,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK,CAAC,CAAA;IAElD,2FAA2F;IAC3F,MAAM,aAAa,GAAG,wBAAwB,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK,CAAC,CAAA;IAE9D,sFAAsF;IACtF,8EAA8E;IAC9E,MAAM,mBAAmB,GAAG,8BAA8B,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK,CAAC,CAAA;IAE1E,qFAAqF;IACrF,sFAAsF;IACtF,MAAM,WAAW,GAAG,sBAAsB,CACxC,GAAG,EACH,EAAE,EACF,KAAK,EACL,sBAAsB,EACtB,MAAM,CAAC,WAAW,CACnB,CAAA;IAED,yFAAyF;IACzF,uFAAuF;IACvF,MAAM,iBAAiB,GAAG,6BAA6B,CACrD,GAAG,EACH,EAAE,EACF,KAAK,EACL,OAAO,EACP,MAAM,CAAC,KAAK,CAAC,QAAQ,CACtB,CAAA;IAED,sFAAsF;IACtF,8EAA8E;IAC9E,gEAAgE;IAChE,MAAM,uBAAuB,GAAG,KAAK,CAAC,+BAA+B,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAA;IAEjF,qFAAqF;IACrF,sEAAsE;IACtE,MAAM,cAAc,GAAG,oBAAoB,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;IAEpD,oFAAoF;IACpF,qFAAqF;IACrF,oFAAoF;IACpF,sFAAsF;IACtF,0CAA0C;IAC1C,MAAM,yBAAyB,GAAG,IAAI,gCAAgC,CAAC;QACrE,8BAA8B,EAAE,IAAI,gCAAgC,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC;QACzF,2BAA2B,EAAE,IAAI,6BAA6B,CAAC,EAAE,EAAE,EAAE,CAAC;QACtE,WAAW;QACX,KAAK;QACL,aAAa,EAAE,MAAM,CAAC,aAAa,CAAC,aAAa;KAClD,CAAC,CAAA;IAEF,mFAAmF;IACnF,iFAAiF;IACjF,iFAAiF;IACjF,iFAAiF;IACjF,MAAM,wBAAwB,GAAG,IAAI,+BAA+B,CAAC;QACnE,0BAA0B,EAAE,IAAI,4BAA4B,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC;QACjF,2BAA2B,EAAE,IAAI,6BAA6B,CAAC,EAAE,EAAE,EAAE,CAAC;QACtE,WAAW;QACX,KAAK;QACL,aAAa,EAAE,MAAM,CAAC,aAAa,CAAC,aAAa;KAClD,CAAC,CAAA;IAEF,2FAA2F;IAC3F,qFAAqF;IACrF,gFAAgF;IAChF,MAAM,eAAe,GAAG,oBAAoB,CAC1C,GAAG,EACH,EAAE,EACF,KAAK,EACL,wBAAwB,EACxB,MAAM,CAAC,eAAe,CACvB,CAAA;IAED,+FAA+F;IAC/F,6FAA6F;IAC7F,6FAA6F;IAC7F,MAAM,wBAAwB,GAAG,6BAA6B,CAAC,GAAG,CAAC,CAAA;IAEnE,uFAAuF;IACvF,2FAA2F;IAC3F,0FAA0F;IAC1F,wFAAwF;IACxF,oEAAoE;IACpE,MAAM,0BAA0B,GAAG,8BAA8B,CAAC;QAChE,eAAe;QACf,SAAS,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,IAAI,qBAAqB,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC;QACpF,QAAQ,EAAE,IAAI,6BAA6B,CAAC,EAAE,EAAE,EAAE,CAAC;QACnD,WAAW;QACX,KAAK;QACL,gBAAgB,EAAE,kBAAkB;QACpC,cAAc,EAAE,wBAAwB,CAAC,cAAc;QACvD,MAAM;KACP,CAAC,CAAA;IAEF,6FAA6F;IAC7F,4FAA4F;IAC5F,6EAA6E;IAC7E,MAAM,mBAAmB,GAAG,IAAI,qBAAqB,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAA;IAE5E,gGAAgG;IAChG,6FAA6F;IAC7F,kDAAkD;IAClD,MAAM,0BAA0B,GAAG,wCAAwC,CACzE,GAAG,EACH,MAAM,EACN,EAAE,EACF,KAAK,CACN,CAAA;IAED,OAAO;QACL,uBAAuB;QACvB,aAAa;QACb,kBAAkB;QAClB,4BAA4B;QAC5B,uBAAuB;QACvB,qBAAqB;QACrB,OAAO;QACP,aAAa;QACb,mBAAmB;QACnB,WAAW;QACX,iBAAiB;QACjB,cAAc;QACd,yBAAyB;QACzB,wBAAwB;QACxB,eAAe;QACf,uFAAuF;QACvF,4FAA4F;QAC5F,8EAA8E;QAC9E,yBAAyB,EAAE,6BAA6B,CAAC,GAAG,EAAE,EAAE,CAAC;QACjE,wBAAwB,EAAE,oBAAoB,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK,CAAC;QAC9D,wBAAwB;QACxB,0BAA0B;QAC1B,mBAAmB;QACnB,0BAA0B;KAC3B,CAAA;AACH,CAAC"}
1	+ {"version":3,"file":"container-shared-services.js","sourceRoot":"","sources":["../../src/infrastructure/container-shared-services.ts"],"names":[],"mappings":"AAKA,OAAO,EACL,gCAAgC,EAChC,+BAA+B,GAChC,MAAM,4BAA4B,CAAA;AACnC,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AACtD,OAAO,EAAE,8BAA8B,EAAE,MAAM,qBAAqB,CAAA;AAGpE,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,WAAW,CAAA;AAC1D,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAA;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,iCAAiC,CAAA;AACtE,OAAO,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAA;AAC1E,OAAO,EAAE,6BAA6B,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAA;AACpF,OAAO,EACL,kBAAkB,EAClB,8BAA8B,EAC9B,6BAA6B,EAC7B,gCAAgC,EAChC,wBAAwB,EACxB,wBAAwB,EACxB,iCAAiC,EACjC,oBAAoB,EACpB,uBAAuB,EACvB,sBAAsB,EACtB,4BAA4B,GAC7B,MAAM,0BAA0B,CAAA;AACjC,OAAO,EAAE,6BAA6B,EAAE,MAAM,8BAA8B,CAAA;AAC5E,OAAO,EAAE,gCAAgC,EAAE,MAAM,iDAAiD,CAAA;AAClG,OAAO,EAAE,4BAA4B,EAAE,MAAM,6CAA6C,CAAA;AAC1F,OAAO,EAAE,6BAA6B,EAAE,MAAM,8CAA8C,CAAA;AAC5F,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAA;AAC5E,OAAO,EAAE,6BAA6B,EAAE,MAAM,8CAA8C,CAAA;AAC5F,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAA;AACjE,OAAO,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAA;AAC/C,OAAO,EAAE,wCAAwC,EAAE,MAAM,+BAA+B,CAAA;AAgBxF,MAAM,UAAU,yBAAyB,CAAC,KAAgC;IACxE,MAAM,EACJ,GAAG,EACH,MAAM,EACN,EAAE,EACF,WAAW,EACX,KAAK,EACL,WAAW,EACX,MAAM,EACN,sBAAsB,EACtB,wBAAwB,EACxB,kBAAkB,GACnB,GAAG,KAAK,CAAA;IAET,iFAAiF;IACjF,oEAAoE;IACpE,4DAA4D;IAC5D,MAAM,aAAa,GAAG,wBAAwB,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK,CAAC,CAAA;IAE9D,wFAAwF;IACxF,6FAA6F;IAC7F,MAAM,kBAAkB,GAAG,uBAAuB,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK,CAAC,CAAA;IAClE,MAAM,4BAA4B,GAAG,iCAAiC,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK,CAAC,CAAA;IACtF,gGAAgG;IAChG,2FAA2F;IAC3F,MAAM,eAAe,GAAG,oBAAoB,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK,CAAC,CAAA;IAE5D,MAAM,uBAAuB,GAAG,4BAA4B,CAAC,EAAE,EAAE,KAAK,CAAC,CAAA;IAEvE,4EAA4E;IAC5E,gFAAgF;IAChF,MAAM,qBAAqB,GAAG,gCAAgC,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK,CAAC,CAAA;IAE9E,4EAA4E;IAC5E,gFAAgF;IAChF,MAAM,OAAO,GAAG,kBAAkB,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK,CAAC,CAAA;IAElD,2FAA2F;IAC3F,MAAM,aAAa,GAAG,wBAAwB,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK,CAAC,CAAA;IAE9D,sFAAsF;IACtF,8EAA8E;IAC9E,MAAM,mBAAmB,GAAG,8BAA8B,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK,CAAC,CAAA;IAE1E,qFAAqF;IACrF,sFAAsF;IACtF,MAAM,WAAW,GAAG,sBAAsB,CACxC,GAAG,EACH,EAAE,EACF,KAAK,EACL,sBAAsB,EACtB,MAAM,CAAC,WAAW,CACnB,CAAA;IAED,yFAAyF;IACzF,uFAAuF;IACvF,MAAM,iBAAiB,GAAG,6BAA6B,CACrD,GAAG,EACH,EAAE,EACF,KAAK,EACL,OAAO,EACP,MAAM,CAAC,KAAK,CAAC,QAAQ,CACtB,CAAA;IAED,sFAAsF;IACtF,8EAA8E;IAC9E,gEAAgE;IAChE,MAAM,uBAAuB,GAAG,KAAK,CAAC,+BAA+B,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAA;IAEjF,qFAAqF;IACrF,sEAAsE;IACtE,MAAM,cAAc,GAAG,oBAAoB,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;IAEpD,oFAAoF;IACpF,qFAAqF;IACrF,oFAAoF;IACpF,sFAAsF;IACtF,0CAA0C;IAC1C,MAAM,yBAAyB,GAAG,IAAI,gCAAgC,CAAC;QACrE,8BAA8B,EAAE,IAAI,gCAAgC,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC;QACzF,2BAA2B,EAAE,IAAI,6BAA6B,CAAC,EAAE,EAAE,EAAE,CAAC;QACtE,WAAW;QACX,KAAK;QACL,aAAa,EAAE,MAAM,CAAC,aAAa,CAAC,aAAa;KAClD,CAAC,CAAA;IAEF,mFAAmF;IACnF,iFAAiF;IACjF,iFAAiF;IACjF,iFAAiF;IACjF,MAAM,wBAAwB,GAAG,IAAI,+BAA+B,CAAC;QACnE,0BAA0B,EAAE,IAAI,4BAA4B,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC;QACjF,2BAA2B,EAAE,IAAI,6BAA6B,CAAC,EAAE,EAAE,EAAE,CAAC;QACtE,WAAW;QACX,KAAK;QACL,aAAa,EAAE,MAAM,CAAC,aAAa,CAAC,aAAa;KAClD,CAAC,CAAA;IAEF,2FAA2F;IAC3F,qFAAqF;IACrF,gFAAgF;IAChF,MAAM,eAAe,GAAG,oBAAoB,CAC1C,GAAG,EACH,EAAE,EACF,KAAK,EACL,wBAAwB,EACxB,MAAM,CAAC,eAAe,CACvB,CAAA;IAED,+FAA+F;IAC/F,6FAA6F;IAC7F,6FAA6F;IAC7F,MAAM,wBAAwB,GAAG,6BAA6B,CAAC,GAAG,CAAC,CAAA;IAEnE,uFAAuF;IACvF,2FAA2F;IAC3F,0FAA0F;IAC1F,wFAAwF;IACxF,oEAAoE;IACpE,MAAM,0BAA0B,GAAG,8BAA8B,CAAC;QAChE,eAAe;QACf,SAAS,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,IAAI,qBAAqB,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC;QACpF,QAAQ,EAAE,IAAI,6BAA6B,CAAC,EAAE,EAAE,EAAE,CAAC;QACnD,WAAW;QACX,KAAK;QACL,gBAAgB,EAAE,kBAAkB;QACpC,cAAc,EAAE,wBAAwB,CAAC,cAAc;QACvD,MAAM;KACP,CAAC,CAAA;IAEF,6FAA6F;IAC7F,4FAA4F;IAC5F,6EAA6E;IAC7E,MAAM,mBAAmB,GAAG,IAAI,qBAAqB,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAA;IAE5E,gGAAgG;IAChG,6FAA6F;IAC7F,kDAAkD;IAClD,MAAM,0BAA0B,GAAG,wCAAwC,CACzE,GAAG,EACH,MAAM,EACN,EAAE,EACF,KAAK,CACN,CAAA;IAED,OAAO;QACL,uBAAuB;QACvB,aAAa;QACb,kBAAkB;QAClB,4BAA4B;QAC5B,eAAe;QACf,uBAAuB;QACvB,qBAAqB;QACrB,OAAO;QACP,aAAa;QACb,mBAAmB;QACnB,WAAW;QACX,iBAAiB;QACjB,cAAc;QACd,yBAAyB;QACzB,wBAAwB;QACxB,eAAe;QACf,uFAAuF;QACvF,4FAA4F;QAC5F,8EAA8E;QAC9E,yBAAyB,EAAE,6BAA6B,CAAC,GAAG,EAAE,EAAE,CAAC;QACjE,wBAAwB,EAAE,oBAAoB,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK,CAAC;QAC9D,wBAAwB;QACxB,0BAA0B;QAC1B,mBAAmB;QACnB,0BAA0B;KAC3B,CAAA;AACH,CAAC"}

package/dist/infrastructure/env.d.ts CHANGED Viewed

@@ -77,6 +77,15 @@ export interface Env {
      * transports simply don't record). Mirrors the Node facade's separate Postgres schema.
      */
     PROVISIONING_DB?: D1Database;
+    /**
+     * REQUIRED, dedicated D1 database for the account audit log, with its own migrations lineage
+     * (`audit-migrations/`). Separate from `DB` for RETENTION rather than write profile: audit is
+     * low-volume, but once run-lifecycle events land it is the only table that grows with run
+     * volume AND wants a multi-year window, and D1's ceiling is 10 GB PER DATABASE. Required for
+     * the same reason `TELEMETRY_DB` is: an unbound binding means no audit trail, which reads
+     * exactly like a deployment where nothing privileged ever happened.
+     */
+    AUDIT_DB: D1Database;
     /** Cloudflare Workers AI binding (optional; used when provider = workers-ai). */
     AI?: Ai;
     /**
@@ -377,6 +386,21 @@ export interface Env {
      * environment/runner integrations need it (plus their enable flag) to assemble.
      */
     ENCRYPTION_KEY?: string;
+    /**
+     * The redirect URL a vendor's authorization server sends an operator's browser back to when they
+     * connect a remote (`http`) MCP tool server: this deployment's public app URL followed by
+     * `/mcp-oauth-callback`, and the same string registered as the OAuth client's redirect URI at the
+     * vendor. It points at the SPA rather than at this Worker on purpose: the page there re-presents
+     * the vendor's `code` and `state` over the authenticated API, which is what lets the completion
+     * be gated on a session at all (a vendor's redirect carries no bearer token).
+     *
+     * Operator-set rather than derived from the request, because the vendor has this exact value on
+     * file: a `Host`-derived string differs behind every route a Worker is reachable by, and the
+     * exchange then fails at the vendor with `redirect_uri_mismatch`. Unset ⇒ the interactive grant
+     * refuses with a 503 naming this variable; the client-credentials grant needs no redirect and
+     * works without it.
+     */
+    MCP_OAUTH_REDIRECT_URL?: string;
     /**
      * Comma-separated allow-list of sources to register (e.g. `confluence,notion`).
      * Defaults to all known sources when unset.
@@ -624,6 +648,13 @@ export interface Env {
  * unbound binding fails the same way instead of NPE-ing deep in a repo on first write.
  */
 export declare function requireTelemetryDb(env: Env): D1Database;
+/**
+ * Resolve the required audit database, throwing a clear, actionable error when the binding is
+ * absent. The account audit log lives in its own D1 database; every entry point that touches it
+ * goes through this, so an unbound binding fails the same way with the same message instead of
+ * NPE-ing deep in a repository on the first privileged action.
+ */
+export declare function requireAuditDb(env: Env): D1Database;
 /**
  * Resolve the required primary database, throwing a clear, actionable error when the `DB` binding
  * is absent/misnamed. `DB` holds ALL transactional state, so an unbound binding otherwise NPEs

package/dist/infrastructure/env.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"env.d.ts","sourceRoot":"","sources":["../../src/infrastructure/env.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,EAAE,EACF,UAAU,EACV,sBAAsB,EACtB,KAAK,EACL,QAAQ,EACR,QAAQ,EACT,MAAM,2BAA2B,CAAA;AAElC,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAA;AAC9D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAA;AACnE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAA;AACzE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,sCAAsC,CAAA;AAE9E,4EAA4E;AAC5E,MAAM,WAAW,qBAAqB;IACpC,WAAW,EAAE,MAAM,CAAA;IACnB,WAAW,EAAE,MAAM,CAAA;CACpB;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,iBAAiB,GACzB;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,GACxD;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,GAClE;IAAE,IAAI,EAAE,qBAAqB,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GACpE;IAAE,IAAI,EAAE,4BAA4B,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAA;AAE5D;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,kBAAkB;IACjC,WAAW,EAAE,MAAM,CAAA;IACnB,KAAK,EAAE,mBAAmB,CAAA;CAC3B;AAED,6EAA6E;AAC7E,MAAM,WAAW,GAAG;IAClB,EAAE,EAAE,UAAU,CAAA;IAEd;;;;;;OAMG;IACH,YAAY,EAAE,UAAU,CAAA;IAExB;;;;;;OAMG;IACH,UAAU,CAAC,EAAE,UAAU,CAAA;IAEvB;;;;;OAKG;IACH,eAAe,CAAC,EAAE,UAAU,CAAA;IAE5B,iFAAiF;IACjF,EAAE,CAAC,EAAE,EAAE,CAAA;IAEP;;;;;;;OAOG;IACH,eAAe,CAAC,EAAE,QAAQ,CAAA;IAG1B,gFAAgF;IAChF,kBAAkB,CAAC,EAAE,QAAQ,CAAA;IAC7B,4EAA4E;IAC5E,eAAe,CAAC,EAAE,KAAK,CAAC,qBAAqB,CAAC,CAAA;IAC9C;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,QAAQ,CAAA;IAC7B;;;;OAIG;IACH,0BAA0B,CAAC,EAAE,QAAQ,CAAA;IACrC;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,QAAQ,CAAA;IAC5B;;;;;OAKG;IACH,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,+EAA+E;IAC/E,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB;;;OAGG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B;;;;OAIG;IACH,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB;;;;OAIG;IACH,0BAA0B,CAAC,EAAE,MAAM,CAAA;IACnC;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,sBAAsB,CAAC,kBAAkB,CAAC,CAAA;IAG7D;;;OAGG;IACH,cAAc,CAAC,EAAE,sBAAsB,CAAC,kBAAkB,CAAC,CAAA;IAC3D;;;;;;;OAOG;IACH,gBAAgB,CAAC,EAAE,sBAAsB,CAAC,eAAe,CAAC,CAAA;IAC1D;;;;;;OAMG;IACH,qBAAqB,CAAC,EAAE,MAAM,CAAA;IAC9B;;;OAGG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B;;;;;OAKG;IACH,yBAAyB,CAAC,EAAE,MAAM,CAAA;IAGlC,sBAAsB,CAAC,EAAE,MAAM,CAAA;IAC/B,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,yBAAyB,CAAC,EAAE,MAAM,CAAA;IAClC,uBAAuB,CAAC,EAAE,MAAM,CAAA;IAChC,2FAA2F;IAC3F,YAAY,CAAC,EAAE,MAAM,CAAA;IAKrB;;;;OAIG;IACH,8BAA8B,CAAC,EAAE,MAAM,CAAA;IACvC,sFAAsF;IACtF,2BAA2B,CAAC,EAAE,MAAM,CAAA;IAGpC,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,2EAA2E;IAC3E,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,0EAA0E;IAC1E,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,6EAA6E;IAC7E,gBAAgB,CAAC,EAAE,MAAM,CAAA;IAIzB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,eAAe,CAAC,EAAE,MAAM,CAAA;IAGxB,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,gBAAgB,CAAC,EAAE,MAAM,CAAA;IAUzB,gFAAgF;IAChF,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB;;;;OAIG;IACH,cAAc,CAAC,EAAE,MAAM,CAAA;IAMvB,kGAAkG;IAClG,yBAAyB,CAAC,EAAE,MAAM,CAAA;IAClC;;;;;OAKG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,iFAAiF;IACjF,uBAAuB,CAAC,EAAE,MAAM,CAAA;IAChC,oFAAoF;IACpF,0BAA0B,CAAC,EAAE,MAAM,CAAA;IAOnC,sFAAsF;IACtF,wBAAwB,CAAC,EAAE,MAAM,CAAA;IACjC,6EAA6E;IAC7E,sBAAsB,CAAC,EAAE,MAAM,CAAA;IAC/B,sFAAsF;IACtF,0BAA0B,CAAC,EAAE,MAAM,CAAA;IAGnC,iEAAiE;IACjE,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,sDAAsD;IACtD,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,gEAAgE;IAChE,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,gEAAgE;IAChE,yBAAyB,CAAC,EAAE,MAAM,CAAA;IAClC,8CAA8C;IAC9C,sBAAsB,CAAC,EAAE,MAAM,CAAA;IAC/B,uCAAuC;IACvC,qBAAqB,CAAC,EAAE,MAAM,CAAA;IAC9B,6EAA6E;IAC7E,iBAAiB,CAAC,EAAE,KAAK,CAAC,iBAAiB,CAAC,CAAA;IAC5C;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,KAAK,CAAC,kBAAkB,CAAC,CAAA;IAC9C,0DAA0D;IAC1D,wBAAwB,CAAC,EAAE,QAAQ,CAAA;IAGnC,0FAA0F;IAC1F,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,wFAAwF;IACxF,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,qFAAqF;IACrF,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAC7B,oFAAoF;IACpF,qBAAqB,CAAC,EAAE,MAAM,CAAA;IAG9B;;;;;OAKG;IACH,wBAAwB,CAAC,EAAE,MAAM,CAAA;IACjC,yDAAyD;IACzD,iCAAiC,CAAC,EAAE,MAAM,CAAA;IAG1C,gFAAgF;IAChF,sBAAsB,CAAC,EAAE,MAAM,CAAA;IAC/B,oCAAoC;IACpC,0BAA0B,CAAC,EAAE,MAAM,CAAA;IACnC,mFAAmF;IACnF,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,gFAAgF;IAChF,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,2DAA2D;IAC3D,sBAAsB,CAAC,EAAE,MAAM,CAAA;IAC/B,oFAAoF;IACpF,yBAAyB,CAAC,EAAE,MAAM,CAAA;IAClC,yEAAyE;IACzE,yBAAyB,CAAC,EAAE,MAAM,CAAA;IAClC;;;;OAIG;IACH,6BAA6B,CAAC,EAAE,MAAM,CAAA;IACtC,mFAAmF;IACnF,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B;;;;OAIG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B;;;;;;OAMG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B;;;;;OAKG;IACH,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB;;;;OAIG;IACH,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,yFAAyF;IACzF,qBAAqB,CAAC,EAAE,MAAM,CAAA;IAC9B;;;OAGG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,8EAA8E;IAC9E,0BAA0B,CAAC,EAAE,MAAM,CAAA;IACnC,gFAAgF;IAChF,sBAAsB,CAAC,EAAE,MAAM,CAAA;IAC/B,0BAA0B,CAAC,EAAE,MAAM,CAAA;IACnC,gFAAgF;IAChF,yBAAyB,CAAC,EAAE,MAAM,CAAA;IAClC,sGAAsG;IACtG,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAC7B,0FAA0F;IAC1F,qBAAqB,CAAC,EAAE,MAAM,CAAA;IAC9B,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAC7B,4DAA4D;IAC5D,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB;;;;;OAKG;IACH,WAAW,CAAC,EAAE,MAAM,CAAA;IAEpB;;;;;;OAMG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAE7B;;;;;;;OAOG;IACH,cAAc,CAAC,EAAE,MAAM,CAAA;~~IAGvB~~;;;OAGG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB;;;OAGG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAA;IAMzB;;;;OAIG;IACH,4BAA4B,CAAC,EAAE,MAAM,CAAA;IACrC,gFAAgF;IAChF,4BAA4B,CAAC,EAAE,MAAM,CAAA;IACrC;;;;OAIG;IACH,kCAAkC,CAAC,EAAE,MAAM,CAAA;IAG3C;;;;;;OAMG;IACH,sBAAsB,CAAC,EAAE,MAAM,CAAA;IAG/B;;;;;;;;;;;OAWG;IACH,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,8GAA8G;IAC9G,uBAAuB,CAAC,EAAE,MAAM,CAAA;IAChC,yEAAyE;IACzE,uBAAuB,CAAC,EAAE,MAAM,CAAA;IAGhC;;;;;OAKG;IACH,oCAAoC,CAAC,EAAE,MAAM,CAAA;IAC7C,sFAAsF;IACtF,oCAAoC,CAAC,EAAE,MAAM,CAAA;IAG7C;;;;;OAKG;IACH,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAG3B;;;;OAIG;IACH,qBAAqB,CAAC,EAAE,MAAM,CAAA;IAC9B;;;;OAIG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAC7B,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAG3B;;;;OAIG;IACH,sBAAsB,CAAC,EAAE,MAAM,CAAA;IAC/B;;;OAGG;IACH,uBAAuB,CAAC,EAAE,MAAM,CAAA;IAGhC;;;;;OAKG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAG3B;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,uCAAuC;IACvC,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,wDAAwD;IACxD,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,4DAA4D;IAC5D,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAG1B;;;;;OAKG;IACH,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,yFAAyF;IACzF,2BAA2B,CAAC,EAAE,MAAM,CAAA;IACpC,qFAAqF;IACrF,0BAA0B,CAAC,EAAE,MAAM,CAAA;IACnC,0EAA0E;IAC1E,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B;;;;;OAKG;IACH,qBAAqB,CAAC,EAAE,MAAM,CAAA;IAC9B,sGAAsG;IACtG,4BAA4B,CAAC,EAAE,MAAM,CAAA;IACrC,+EAA+E;IAC/E,iCAAiC,CAAC,EAAE,MAAM,CAAA;IAC1C;;;;;OAKG;IACH,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,0FAA0F;IAC1F,wBAAwB,CAAC,EAAE,MAAM,CAAA;IACjC;;;OAGG;IACH,2BAA2B,CAAC,EAAE,MAAM,CAAA;IAGpC;;;;;;OAMG;IACH,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,uFAAuF;IACvF,sBAAsB,CAAC,EAAE,MAAM,CAAA;IAC/B,+EAA+E;IAC/E,2BAA2B,CAAC,EAAE,MAAM,CAAA;IACpC,8FAA8F;IAC9F,wBAAwB,CAAC,EAAE,MAAM,CAAA;IACjC,wFAAwF;IACxF,gCAAgC,CAAC,EAAE,MAAM,CAAA;IACzC,0FAA0F;IAC1F,+BAA+B,CAAC,EAAE,MAAM,CAAA;IACxC,wGAAwG;IACxG,2BAA2B,CAAC,EAAE,MAAM,CAAA;IACpC,+BAA+B,CAAC,EAAE,MAAM,CAAA;IACxC,sCAAsC,CAAC,EAAE,MAAM,CAAA;IAC/C,sCAAsC,CAAC,EAAE,MAAM,CAAA;IAC/C,kCAAkC,CAAC,EAAE,MAAM,CAAA;IAC3C;;;;;OAKG;IACH,kCAAkC,CAAC,EAAE,MAAM,CAAA;IAG3C;;;;;;;OAOG;IACH,wBAAwB,CAAC,EAAE,MAAM,CAAA;IACjC;;;;;OAKG;IACH,8BAA8B,CAAC,EAAE,MAAM,CAAA;IACvC,oFAAoF;IACpF,mCAAmC,CAAC,EAAE,MAAM,CAAA;IAG5C;;;;OAIG;IACH,0BAA0B,CAAC,EAAE,MAAM,CAAA;IACnC;;;OAGG;IACH,gCAAgC,CAAC,EAAE,MAAM,CAAA;IACzC;;;;OAIG;IACH,4BAA4B,CAAC,EAAE,MAAM,CAAA;IACrC;;;;OAIG;IACH,+BAA+B,CAAC,EAAE,MAAM,CAAA;IACxC;;;;OAIG;IACH,+BAA+B,CAAC,EAAE,MAAM,CAAA;IACxC;;;;OAIG;IACH,2BAA2B,CAAC,EAAE,MAAM,CAAA;IACpC,4FAA4F;IAC5F,2BAA2B,CAAC,EAAE,MAAM,CAAA;IACpC,0FAA0F;IAC1F,+BAA+B,CAAC,EAAE,MAAM,CAAA;CACzC;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,GAAG,GAAG,UAAU,CAKvD;AAED;;;;;GAKG;AACH,wBAAgB,SAAS,CAAC,GAAG,EAAE,GAAG,GAAG,UAAU,CAK9C"}
1	+ {"version":3,"file":"env.d.ts","sourceRoot":"","sources":["../../src/infrastructure/env.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,EAAE,EACF,UAAU,EACV,sBAAsB,EACtB,KAAK,EACL,QAAQ,EACR,QAAQ,EACT,MAAM,2BAA2B,CAAA;AAElC,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAA;AAC9D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAA;AACnE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAA;AACzE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,sCAAsC,CAAA;AAE9E,4EAA4E;AAC5E,MAAM,WAAW,qBAAqB;IACpC,WAAW,EAAE,MAAM,CAAA;IACnB,WAAW,EAAE,MAAM,CAAA;CACpB;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,iBAAiB,GACzB;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,GACxD;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,GAClE;IAAE,IAAI,EAAE,qBAAqB,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GACpE;IAAE,IAAI,EAAE,4BAA4B,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAA;AAE5D;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,kBAAkB;IACjC,WAAW,EAAE,MAAM,CAAA;IACnB,KAAK,EAAE,mBAAmB,CAAA;CAC3B;AAED,6EAA6E;AAC7E,MAAM,WAAW,GAAG;IAClB,EAAE,EAAE,UAAU,CAAA;IAEd;;;;;;OAMG;IACH,YAAY,EAAE,UAAU,CAAA;IAExB;;;;;;OAMG;IACH,UAAU,CAAC,EAAE,UAAU,CAAA;IAEvB;;;;;OAKG;IACH,eAAe,CAAC,EAAE,UAAU,CAAA;IAE5B;;;;;;;OAOG;IACH,QAAQ,EAAE,UAAU,CAAA;IAEpB,iFAAiF;IACjF,EAAE,CAAC,EAAE,EAAE,CAAA;IAEP;;;;;;;OAOG;IACH,eAAe,CAAC,EAAE,QAAQ,CAAA;IAG1B,gFAAgF;IAChF,kBAAkB,CAAC,EAAE,QAAQ,CAAA;IAC7B,4EAA4E;IAC5E,eAAe,CAAC,EAAE,KAAK,CAAC,qBAAqB,CAAC,CAAA;IAC9C;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,QAAQ,CAAA;IAC7B;;;;OAIG;IACH,0BAA0B,CAAC,EAAE,QAAQ,CAAA;IACrC;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,QAAQ,CAAA;IAC5B;;;;;OAKG;IACH,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,+EAA+E;IAC/E,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB;;;OAGG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B;;;;OAIG;IACH,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB;;;;OAIG;IACH,0BAA0B,CAAC,EAAE,MAAM,CAAA;IACnC;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,sBAAsB,CAAC,kBAAkB,CAAC,CAAA;IAG7D;;;OAGG;IACH,cAAc,CAAC,EAAE,sBAAsB,CAAC,kBAAkB,CAAC,CAAA;IAC3D;;;;;;;OAOG;IACH,gBAAgB,CAAC,EAAE,sBAAsB,CAAC,eAAe,CAAC,CAAA;IAC1D;;;;;;OAMG;IACH,qBAAqB,CAAC,EAAE,MAAM,CAAA;IAC9B;;;OAGG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B;;;;;OAKG;IACH,yBAAyB,CAAC,EAAE,MAAM,CAAA;IAGlC,sBAAsB,CAAC,EAAE,MAAM,CAAA;IAC/B,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,yBAAyB,CAAC,EAAE,MAAM,CAAA;IAClC,uBAAuB,CAAC,EAAE,MAAM,CAAA;IAChC,2FAA2F;IAC3F,YAAY,CAAC,EAAE,MAAM,CAAA;IAKrB;;;;OAIG;IACH,8BAA8B,CAAC,EAAE,MAAM,CAAA;IACvC,sFAAsF;IACtF,2BAA2B,CAAC,EAAE,MAAM,CAAA;IAGpC,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,2EAA2E;IAC3E,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,0EAA0E;IAC1E,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,6EAA6E;IAC7E,gBAAgB,CAAC,EAAE,MAAM,CAAA;IAIzB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,eAAe,CAAC,EAAE,MAAM,CAAA;IAGxB,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,gBAAgB,CAAC,EAAE,MAAM,CAAA;IAUzB,gFAAgF;IAChF,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB;;;;OAIG;IACH,cAAc,CAAC,EAAE,MAAM,CAAA;IAMvB,kGAAkG;IAClG,yBAAyB,CAAC,EAAE,MAAM,CAAA;IAClC;;;;;OAKG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,iFAAiF;IACjF,uBAAuB,CAAC,EAAE,MAAM,CAAA;IAChC,oFAAoF;IACpF,0BAA0B,CAAC,EAAE,MAAM,CAAA;IAOnC,sFAAsF;IACtF,wBAAwB,CAAC,EAAE,MAAM,CAAA;IACjC,6EAA6E;IAC7E,sBAAsB,CAAC,EAAE,MAAM,CAAA;IAC/B,sFAAsF;IACtF,0BAA0B,CAAC,EAAE,MAAM,CAAA;IAGnC,iEAAiE;IACjE,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,sDAAsD;IACtD,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,gEAAgE;IAChE,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,gEAAgE;IAChE,yBAAyB,CAAC,EAAE,MAAM,CAAA;IAClC,8CAA8C;IAC9C,sBAAsB,CAAC,EAAE,MAAM,CAAA;IAC/B,uCAAuC;IACvC,qBAAqB,CAAC,EAAE,MAAM,CAAA;IAC9B,6EAA6E;IAC7E,iBAAiB,CAAC,EAAE,KAAK,CAAC,iBAAiB,CAAC,CAAA;IAC5C;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,KAAK,CAAC,kBAAkB,CAAC,CAAA;IAC9C,0DAA0D;IAC1D,wBAAwB,CAAC,EAAE,QAAQ,CAAA;IAGnC,0FAA0F;IAC1F,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,wFAAwF;IACxF,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,qFAAqF;IACrF,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAC7B,oFAAoF;IACpF,qBAAqB,CAAC,EAAE,MAAM,CAAA;IAG9B;;;;;OAKG;IACH,wBAAwB,CAAC,EAAE,MAAM,CAAA;IACjC,yDAAyD;IACzD,iCAAiC,CAAC,EAAE,MAAM,CAAA;IAG1C,gFAAgF;IAChF,sBAAsB,CAAC,EAAE,MAAM,CAAA;IAC/B,oCAAoC;IACpC,0BAA0B,CAAC,EAAE,MAAM,CAAA;IACnC,mFAAmF;IACnF,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,gFAAgF;IAChF,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,2DAA2D;IAC3D,sBAAsB,CAAC,EAAE,MAAM,CAAA;IAC/B,oFAAoF;IACpF,yBAAyB,CAAC,EAAE,MAAM,CAAA;IAClC,yEAAyE;IACzE,yBAAyB,CAAC,EAAE,MAAM,CAAA;IAClC;;;;OAIG;IACH,6BAA6B,CAAC,EAAE,MAAM,CAAA;IACtC,mFAAmF;IACnF,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B;;;;OAIG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B;;;;;;OAMG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B;;;;;OAKG;IACH,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB;;;;OAIG;IACH,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,yFAAyF;IACzF,qBAAqB,CAAC,EAAE,MAAM,CAAA;IAC9B;;;OAGG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,8EAA8E;IAC9E,0BAA0B,CAAC,EAAE,MAAM,CAAA;IACnC,gFAAgF;IAChF,sBAAsB,CAAC,EAAE,MAAM,CAAA;IAC/B,0BAA0B,CAAC,EAAE,MAAM,CAAA;IACnC,gFAAgF;IAChF,yBAAyB,CAAC,EAAE,MAAM,CAAA;IAClC,sGAAsG;IACtG,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAC7B,0FAA0F;IAC1F,qBAAqB,CAAC,EAAE,MAAM,CAAA;IAC9B,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAC7B,4DAA4D;IAC5D,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB;;;;;OAKG;IACH,WAAW,CAAC,EAAE,MAAM,CAAA;IAEpB;;;;;;OAMG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAE7B;;;;;;;OAOG;IACH,cAAc,CAAC,EAAE,MAAM,CAAA;IAEvB;;;;;;;;;;;;;OAaG;IACH,sBAAsB,CAAC,EAAE,MAAM,CAAA;IAG/B;;;OAGG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB;;;OAGG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAA;IAMzB;;;;OAIG;IACH,4BAA4B,CAAC,EAAE,MAAM,CAAA;IACrC,gFAAgF;IAChF,4BAA4B,CAAC,EAAE,MAAM,CAAA;IACrC;;;;OAIG;IACH,kCAAkC,CAAC,EAAE,MAAM,CAAA;IAG3C;;;;;;OAMG;IACH,sBAAsB,CAAC,EAAE,MAAM,CAAA;IAG/B;;;;;;;;;;;OAWG;IACH,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,8GAA8G;IAC9G,uBAAuB,CAAC,EAAE,MAAM,CAAA;IAChC,yEAAyE;IACzE,uBAAuB,CAAC,EAAE,MAAM,CAAA;IAGhC;;;;;OAKG;IACH,oCAAoC,CAAC,EAAE,MAAM,CAAA;IAC7C,sFAAsF;IACtF,oCAAoC,CAAC,EAAE,MAAM,CAAA;IAG7C;;;;;OAKG;IACH,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAG3B;;;;OAIG;IACH,qBAAqB,CAAC,EAAE,MAAM,CAAA;IAC9B;;;;OAIG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAC7B,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAG3B;;;;OAIG;IACH,sBAAsB,CAAC,EAAE,MAAM,CAAA;IAC/B;;;OAGG;IACH,uBAAuB,CAAC,EAAE,MAAM,CAAA;IAGhC;;;;;OAKG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAG3B;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,uCAAuC;IACvC,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,wDAAwD;IACxD,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,4DAA4D;IAC5D,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAG1B;;;;;OAKG;IACH,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,yFAAyF;IACzF,2BAA2B,CAAC,EAAE,MAAM,CAAA;IACpC,qFAAqF;IACrF,0BAA0B,CAAC,EAAE,MAAM,CAAA;IACnC,0EAA0E;IAC1E,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B;;;;;OAKG;IACH,qBAAqB,CAAC,EAAE,MAAM,CAAA;IAC9B,sGAAsG;IACtG,4BAA4B,CAAC,EAAE,MAAM,CAAA;IACrC,+EAA+E;IAC/E,iCAAiC,CAAC,EAAE,MAAM,CAAA;IAC1C;;;;;OAKG;IACH,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,0FAA0F;IAC1F,wBAAwB,CAAC,EAAE,MAAM,CAAA;IACjC;;;OAGG;IACH,2BAA2B,CAAC,EAAE,MAAM,CAAA;IAGpC;;;;;;OAMG;IACH,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,uFAAuF;IACvF,sBAAsB,CAAC,EAAE,MAAM,CAAA;IAC/B,+EAA+E;IAC/E,2BAA2B,CAAC,EAAE,MAAM,CAAA;IACpC,8FAA8F;IAC9F,wBAAwB,CAAC,EAAE,MAAM,CAAA;IACjC,wFAAwF;IACxF,gCAAgC,CAAC,EAAE,MAAM,CAAA;IACzC,0FAA0F;IAC1F,+BAA+B,CAAC,EAAE,MAAM,CAAA;IACxC,wGAAwG;IACxG,2BAA2B,CAAC,EAAE,MAAM,CAAA;IACpC,+BAA+B,CAAC,EAAE,MAAM,CAAA;IACxC,sCAAsC,CAAC,EAAE,MAAM,CAAA;IAC/C,sCAAsC,CAAC,EAAE,MAAM,CAAA;IAC/C,kCAAkC,CAAC,EAAE,MAAM,CAAA;IAC3C;;;;;OAKG;IACH,kCAAkC,CAAC,EAAE,MAAM,CAAA;IAG3C;;;;;;;OAOG;IACH,wBAAwB,CAAC,EAAE,MAAM,CAAA;IACjC;;;;;OAKG;IACH,8BAA8B,CAAC,EAAE,MAAM,CAAA;IACvC,oFAAoF;IACpF,mCAAmC,CAAC,EAAE,MAAM,CAAA;IAG5C;;;;OAIG;IACH,0BAA0B,CAAC,EAAE,MAAM,CAAA;IACnC;;;OAGG;IACH,gCAAgC,CAAC,EAAE,MAAM,CAAA;IACzC;;;;OAIG;IACH,4BAA4B,CAAC,EAAE,MAAM,CAAA;IACrC;;;;OAIG;IACH,+BAA+B,CAAC,EAAE,MAAM,CAAA;IACxC;;;;OAIG;IACH,+BAA+B,CAAC,EAAE,MAAM,CAAA;IACxC;;;;OAIG;IACH,2BAA2B,CAAC,EAAE,MAAM,CAAA;IACpC,4FAA4F;IAC5F,2BAA2B,CAAC,EAAE,MAAM,CAAA;IACpC,0FAA0F;IAC1F,+BAA+B,CAAC,EAAE,MAAM,CAAA;CACzC;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,GAAG,GAAG,UAAU,CAKvD;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,GAAG,GAAG,UAAU,CAKnD;AAED;;;;;GAKG;AACH,wBAAgB,SAAS,CAAC,GAAG,EAAE,GAAG,GAAG,UAAU,CAK9C"}

package/dist/infrastructure/env.js CHANGED Viewed

@@ -12,6 +12,18 @@ export function requireTelemetryDb(env) {
     }
     return env.TELEMETRY_DB;
 }
+/**
+ * Resolve the required audit database, throwing a clear, actionable error when the binding is
+ * absent. The account audit log lives in its own D1 database; every entry point that touches it
+ * goes through this, so an unbound binding fails the same way with the same message instead of
+ * NPE-ing deep in a repository on the first privileged action.
+ */
+export function requireAuditDb(env) {
+    if (!env.AUDIT_DB) {
+        throw configProblem({ key: 'AUDIT_DB', ...ENV_HELP.AUDIT_DB });
+    }
+    return env.AUDIT_DB;
+}
 /**
  * Resolve the required primary database, throwing a clear, actionable error when the `DB` binding
  * is absent/misnamed. `DB` holds ALL transactional state, so an unbound binding otherwise NPEs

package/dist/infrastructure/env.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"env.js","sourceRoot":"","sources":["../../src/infrastructure/env.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;~~AAurB7D~~;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,GAAQ;IACzC,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC;QACtB,MAAM,aAAa,CAAC,EAAE,GAAG,EAAE,cAAc,EAAE,GAAG,QAAQ,CAAC,YAAY,EAAE,CAAC,CAAA;IACxE,CAAC;IACD,OAAO,GAAG,CAAC,YAAY,CAAA;AACzB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,SAAS,CAAC,GAAQ;IAChC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,aAAa,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAA;IACpD,CAAC;IACD,OAAO,GAAG,CAAC,EAAE,CAAA;AACf,CAAC"}
1	+ {"version":3,"file":"env.js","sourceRoot":"","sources":["../../src/infrastructure/env.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AAitB7D;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,GAAQ;IACzC,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC;QACtB,MAAM,aAAa,CAAC,EAAE,GAAG,EAAE,cAAc,EAAE,GAAG,QAAQ,CAAC,YAAY,EAAE,CAAC,CAAA;IACxE,CAAC;IACD,OAAO,GAAG,CAAC,YAAY,CAAA;AACzB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,GAAQ;IACrC,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;QAClB,MAAM,aAAa,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAA;IAChE,CAAC;IACD,OAAO,GAAG,CAAC,QAAQ,CAAA;AACrB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,SAAS,CAAC,GAAQ;IAChC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,aAAa,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAA;IACpD,CAAC;IACD,OAAO,GAAG,CAAC,EAAE,CAAA;AACf,CAAC"}

package/dist/infrastructure/repositories/D1AgentToolCallRepository.d.ts CHANGED Viewed

@@ -1,4 +1,4 @@
-import type { AgentToolCall, AgentToolCallPageQuery, AgentToolCallRepository, AgentToolCallTrajectoryQuery } from '@cat-factory/kernel';
+import type { AgentToolCall, AgentToolCallPageQuery, AgentToolCallRepository, AgentToolCallSummary, AgentToolCallTrajectoryQuery } from '@cat-factory/kernel';
 import type { D1Database } from '@cloudflare/workers-types';
 /**
  * D1-backed sink for the tool-call trajectory. Lives in the dedicated TELEMETRY_DB database
@@ -14,7 +14,7 @@ export declare class D1AgentToolCallRepository implements AgentToolCallRepositor
     private insertStatement;
     listByExecution(workspaceId: string, query: AgentToolCallTrajectoryQuery): Promise<AgentToolCall[]>;
     listPage(workspaceId: string, query: AgentToolCallPageQuery): Promise<AgentToolCall[]>;
-    countByExecution(workspaceId: string, executionId: string): Promise<number>;
+    summarizeByExecution(workspaceId: string, executionId: string): Promise<AgentToolCallSummary[]>;
     deleteOlderThan(epochMs: number): Promise<number>;
 }
 //# sourceMappingURL=D1AgentToolCallRepository.d.ts.map

package/dist/infrastructure/repositories/D1AgentToolCallRepository.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"D1AgentToolCallRepository.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/repositories/D1AgentToolCallRepository.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,aAAa,EACb,sBAAsB,EACtB,uBAAuB,EACvB,4BAA4B,EAC7B,MAAM,qBAAqB,CAAA;AAC5B,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAA;AAkD3D;;;;GAIG;AACH,qBAAa,yBAA0B,YAAW,uBAAuB;IACvE,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAY;IAE/B,YAAY,EAAE,EAAE,EAAE,EAAE;QAAE,EAAE,EAAE,UAAU,CAAA;KAAE,EAErC;IAEK,UAAU,CAAC,KAAK,EAAE,aAAa,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAStD;IAED,OAAO,CAAC,eAAe;IA6BjB,eAAe,CACnB,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,4BAA4B,GAClC,OAAO,CAAC,aAAa,EAAE,CAAC,~~CAsB1B~~;IAEK,QAAQ,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC,~~CAyB3F~~;IAEK,~~gBAAgB~~,~~CAAC~~,WAAW,EAAE,MAAM,~~EAAE~~,WAAW,EAAE,MAAM,~~GAAG~~,OAAO,CAAC,~~MAAM~~,CAAC,~~CAQhF~~;IAEK,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAOtD;CACF"}
1	+ {"version":3,"file":"D1AgentToolCallRepository.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/repositories/D1AgentToolCallRepository.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,aAAa,EACb,sBAAsB,EACtB,uBAAuB,EACvB,oBAAoB,EACpB,4BAA4B,EAC7B,MAAM,qBAAqB,CAAA;AAC5B,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAA;AAkD3D;;;;GAIG;AACH,qBAAa,yBAA0B,YAAW,uBAAuB;IACvE,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAY;IAE/B,YAAY,EAAE,EAAE,EAAE,EAAE;QAAE,EAAE,EAAE,UAAU,CAAA;KAAE,EAErC;IAEK,UAAU,CAAC,KAAK,EAAE,aAAa,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAStD;IAED,OAAO,CAAC,eAAe;IA6BjB,eAAe,CACnB,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,4BAA4B,GAClC,OAAO,CAAC,aAAa,EAAE,CAAC,CA0B1B;IAEK,QAAQ,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC,CA6B3F;IAEK,oBAAoB,CACxB,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,oBAAoB,EAAE,CAAC,CAqBjC;IAEK,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAOtD;CACF"}

package/dist/infrastructure/repositories/D1AgentToolCallRepository.js CHANGED Viewed

@@ -65,6 +65,10 @@ export class D1AgentToolCallRepository {
             clauses.push('job_id = ?');
             binds.push(query.jobId);
         }
+        if (query.ok !== undefined) {
+            clauses.push('ok = ?');
+            binds.push(query.ok ? 1 : 0);
+        }
         binds.push(query.limit);
         const { results } = await this.db
             .prepare(`SELECT * FROM agent_tool_calls
@@ -82,6 +86,10 @@ export class D1AgentToolCallRepository {
             clauses.push('job_id = ?');
             binds.push(query.jobId);
         }
+        if (query.ok !== undefined) {
+            clauses.push('ok = ?');
+            binds.push(query.ok ? 1 : 0);
+        }
         if (query.cursor) {
             // Composite keyset matching the ORDER BY, so rows sharing a `created_at` millisecond are
             // not skipped between pages — which on this sink is the COMMON case, not the corner one:
@@ -99,12 +107,25 @@ export class D1AgentToolCallRepository {
             .all();
         return (results ?? []).map(rowToCall);
     }
-    async countByExecution(workspaceId, executionId) {
-        const row = await this.db
-            .prepare('SELECT COUNT(*) AS n FROM agent_tool_calls WHERE workspace_id = ? AND execution_id = ?')
+    async summarizeByExecution(workspaceId, executionId) {
+        // One GROUP BY over the run's rows on `idx_agent_tool_calls_execution`, reading neither
+        // body column. The failures are summed in SQL beside the count rather than counted by a
+        // second query or reduced in JS: two aggregates over one population are two chances to
+        // disagree about it, and pulling the rows back to count them here is what this method
+        // exists to avoid.
+        const { results } = await this.db
+            .prepare(`SELECT agent_kind, tool, COUNT(*) AS calls, SUM(CASE WHEN ok = 0 THEN 1 ELSE 0 END) AS failures
+         FROM agent_tool_calls
+         WHERE workspace_id = ? AND execution_id = ?
+         GROUP BY agent_kind, tool`)
             .bind(workspaceId, executionId)
-            .first();
-        return row?.n ?? 0;
+            .all();
+        return (results ?? []).map((row) => ({
+            agentKind: row.agent_kind,
+            tool: row.tool,
+            calls: Number(row.calls),
+            failures: Number(row.failures ?? 0),
+        }));
     }
     async deleteOlderThan(epochMs) {
         // Range delete on idx_agent_tool_calls_created; bounded by the rows pruned.

package/dist/infrastructure/repositories/D1AgentToolCallRepository.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"D1AgentToolCallRepository.js","sourceRoot":"","sources":["../../../src/infrastructure/repositories/D1AgentToolCallRepository.ts"],"names":[],"mappings":"~~AA2BA~~,SAAS,SAAS,CAAC,GAAgB;IACjC,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,WAAW,EAAE,GAAG,CAAC,YAAY;QAC7B,WAAW,EAAE,GAAG,CAAC,YAAY;QAC7B,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,KAAK,EAAE,GAAG,CAAC,MAAM;QACjB,GAAG,EAAE,GAAG,CAAC,GAAG;QACZ,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,OAAO,EAAE,GAAG,CAAC,QAAQ;QACrB,EAAE,EAAE,GAAG,CAAC,EAAE,KAAK,CAAC;QAChB,0FAA0F;QAC1F,yFAAyF;QACzF,MAAM,EAAE,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU;QACvD,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,WAAW,EAAE,GAAG,CAAC,YAAY;QAC7B,aAAa,EAAE,GAAG,CAAC,cAAc;QACjC,SAAS,EAAE,GAAG,CAAC,UAAU;KAC1B,CAAA;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,iBAAiB,GAAG,EAAE,CAAA;AAE5B;;;;GAIG;AACH,MAAM,OAAO,yBAAyB;IACnB,EAAE,CAAY;IAE/B,YAAY,EAAE,EAAE,EAAsB;QACpC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAA;IACd,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,KAAsB;QACrC,0FAA0F;QAC1F,yFAAyF;QACzF,4FAA4F;QAC5F,0DAA0D;QAC1D,MAAM,UAAU,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAA;QAClE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,IAAI,iBAAiB,EAAE,CAAC;YAC9D,MAAM,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,iBAAiB,CAAC,CAAC,CAAA;QACjE,CAAC;IACH,CAAC;IAEO,eAAe,CAAC,IAAmB;QACzC,OAAO,IAAI,CAAC,EAAE;aACX,OAAO,CACN;;;;oCAI4B,CAC7B;aACA,IAAI,CACH,IAAI,CAAC,EAAE,EACP,IAAI,CAAC,WAAW,EAChB,IAAI,CAAC,WAAW,EAChB,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,GAAG,EACR,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,OAAO,EACZ,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EACf,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,WAAW,EAChB,IAAI,CAAC,aAAa,EAClB,IAAI,CAAC,SAAS,CACf,CAAA;IACL,CAAC;IAED,KAAK,CAAC,eAAe,CACnB,WAAmB,EACnB,KAAmC;QAEnC,0FAA0F;QAC1F,0FAA0F;QAC1F,uFAAuF;QACvF,oEAAoE;QACpE,MAAM,OAAO,GAAG,CAAC,kBAAkB,EAAE,kBAAkB,CAAC,CAAA;QACxD,MAAM,KAAK,GAAc,CAAC,WAAW,EAAE,KAAK,CAAC,WAAW,CAAC,CAAA;QACzD,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YAChB,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;YAC1B,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;QACzB,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;QACvB,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,EAAE;aAC9B,OAAO,CACN;iBACS,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC;;iBAErB,CACV;aACA,IAAI,CAAC,GAAG,KAAK,CAAC;aACd,GAAG,EAAe,CAAA;QACrB,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;IACvC,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,WAAmB,EAAE,KAA6B;QAC/D,MAAM,OAAO,GAAG,CAAC,kBAAkB,EAAE,kBAAkB,CAAC,CAAA;QACxD,MAAM,KAAK,GAAc,CAAC,WAAW,EAAE,KAAK,CAAC,WAAW,CAAC,CAAA;QACzD,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YAChB,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;YAC1B,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;QACzB,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;YACjB,yFAAyF;YACzF,yFAAyF;YACzF,oFAAoF;YACpF,OAAO,CAAC,IAAI,CAAC,iDAAiD,CAAC,CAAA;YAC/D,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;QAC7E,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;QACvB,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,EAAE;aAC9B,OAAO,CACN;iBACS,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC;;iBAErB,CACV;aACA,IAAI,CAAC,GAAG,KAAK,CAAC;aACd,GAAG,EAAe,CAAA;QACrB,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;IACvC,CAAC;IAED,KAAK,CAAC,~~gBAAgB~~,~~CAAC~~,WAAmB,~~EAAE~~,WAAmB;~~QAC7D~~,MAAM,~~GAAG~~,GAAG,MAAM,IAAI,CAAC,EAAE;~~aACtB~~,OAAO,CACN,~~wFAAwF,CACzF~~;aACA,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC;aAC9B,~~KAAK~~,~~EAAiB~~,CAAA;~~QACzB~~,OAAO,GAAG,EAAE,CAAC,IAAI,CAAC,CAAA;~~IACpB~~,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,OAAe;QACnC,4EAA4E;QAC5E,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,EAAE;aAC3B,OAAO,CAAC,mDAAmD,CAAC;aAC5D,IAAI,CAAC,OAAO,CAAC;aACb,GAAG,EAAE,CAAA;QACR,OAAO,IAAI,CAAC,OAAO,IAAI,CAAC,CAAA;IAC1B,CAAC;CACF"}
1	+ {"version":3,"file":"D1AgentToolCallRepository.js","sourceRoot":"","sources":["../../../src/infrastructure/repositories/D1AgentToolCallRepository.ts"],"names":[],"mappings":"AA4BA,SAAS,SAAS,CAAC,GAAgB;IACjC,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,WAAW,EAAE,GAAG,CAAC,YAAY;QAC7B,WAAW,EAAE,GAAG,CAAC,YAAY;QAC7B,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,KAAK,EAAE,GAAG,CAAC,MAAM;QACjB,GAAG,EAAE,GAAG,CAAC,GAAG;QACZ,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,OAAO,EAAE,GAAG,CAAC,QAAQ;QACrB,EAAE,EAAE,GAAG,CAAC,EAAE,KAAK,CAAC;QAChB,0FAA0F;QAC1F,yFAAyF;QACzF,MAAM,EAAE,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU;QACvD,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,WAAW,EAAE,GAAG,CAAC,YAAY;QAC7B,aAAa,EAAE,GAAG,CAAC,cAAc;QACjC,SAAS,EAAE,GAAG,CAAC,UAAU;KAC1B,CAAA;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,iBAAiB,GAAG,EAAE,CAAA;AAE5B;;;;GAIG;AACH,MAAM,OAAO,yBAAyB;IACnB,EAAE,CAAY;IAE/B,YAAY,EAAE,EAAE,EAAsB;QACpC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAA;IACd,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,KAAsB;QACrC,0FAA0F;QAC1F,yFAAyF;QACzF,4FAA4F;QAC5F,0DAA0D;QAC1D,MAAM,UAAU,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAA;QAClE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,IAAI,iBAAiB,EAAE,CAAC;YAC9D,MAAM,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,iBAAiB,CAAC,CAAC,CAAA;QACjE,CAAC;IACH,CAAC;IAEO,eAAe,CAAC,IAAmB;QACzC,OAAO,IAAI,CAAC,EAAE;aACX,OAAO,CACN;;;;oCAI4B,CAC7B;aACA,IAAI,CACH,IAAI,CAAC,EAAE,EACP,IAAI,CAAC,WAAW,EAChB,IAAI,CAAC,WAAW,EAChB,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,GAAG,EACR,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,OAAO,EACZ,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EACf,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,WAAW,EAChB,IAAI,CAAC,aAAa,EAClB,IAAI,CAAC,SAAS,CACf,CAAA;IACL,CAAC;IAED,KAAK,CAAC,eAAe,CACnB,WAAmB,EACnB,KAAmC;QAEnC,0FAA0F;QAC1F,0FAA0F;QAC1F,uFAAuF;QACvF,oEAAoE;QACpE,MAAM,OAAO,GAAG,CAAC,kBAAkB,EAAE,kBAAkB,CAAC,CAAA;QACxD,MAAM,KAAK,GAAc,CAAC,WAAW,EAAE,KAAK,CAAC,WAAW,CAAC,CAAA;QACzD,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YAChB,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;YAC1B,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;QACzB,CAAC;QACD,IAAI,KAAK,CAAC,EAAE,KAAK,SAAS,EAAE,CAAC;YAC3B,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;YACtB,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QAC9B,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;QACvB,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,EAAE;aAC9B,OAAO,CACN;iBACS,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC;;iBAErB,CACV;aACA,IAAI,CAAC,GAAG,KAAK,CAAC;aACd,GAAG,EAAe,CAAA;QACrB,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;IACvC,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,WAAmB,EAAE,KAA6B;QAC/D,MAAM,OAAO,GAAG,CAAC,kBAAkB,EAAE,kBAAkB,CAAC,CAAA;QACxD,MAAM,KAAK,GAAc,CAAC,WAAW,EAAE,KAAK,CAAC,WAAW,CAAC,CAAA;QACzD,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YAChB,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;YAC1B,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;QACzB,CAAC;QACD,IAAI,KAAK,CAAC,EAAE,KAAK,SAAS,EAAE,CAAC;YAC3B,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;YACtB,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QAC9B,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;YACjB,yFAAyF;YACzF,yFAAyF;YACzF,oFAAoF;YACpF,OAAO,CAAC,IAAI,CAAC,iDAAiD,CAAC,CAAA;YAC/D,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;QAC7E,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;QACvB,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,EAAE;aAC9B,OAAO,CACN;iBACS,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC;;iBAErB,CACV;aACA,IAAI,CAAC,GAAG,KAAK,CAAC;aACd,GAAG,EAAe,CAAA;QACrB,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;IACvC,CAAC;IAED,KAAK,CAAC,oBAAoB,CACxB,WAAmB,EACnB,WAAmB;QAEnB,wFAAwF;QACxF,wFAAwF;QACxF,uFAAuF;QACvF,sFAAsF;QACtF,mBAAmB;QACnB,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,EAAE;aAC9B,OAAO,CACN;;;mCAG2B,CAC5B;aACA,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC;aAC9B,GAAG,EAAyE,CAAA;QAC/E,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACnC,SAAS,EAAE,GAAG,CAAC,UAAU;YACzB,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC;YACxB,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,IAAI,CAAC,CAAC;SACpC,CAAC,CAAC,CAAA;IACL,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,OAAe;QACnC,4EAA4E;QAC5E,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,EAAE;aAC3B,OAAO,CAAC,mDAAmD,CAAC;aAC5D,IAAI,CAAC,OAAO,CAAC;aACb,GAAG,EAAE,CAAA;QACR,OAAO,IAAI,CAAC,OAAO,IAAI,CAAC,CAAA;IAC1B,CAAC;CACF"}

package/dist/infrastructure/repositories/D1AuditEventRepository.d.ts ADDED Viewed

@@ -0,0 +1,15 @@
+import type { AuditEventPage, AuditEventRecord, AuditEventRepository } from '@cat-factory/kernel';
+import type { D1Database } from '@cloudflare/workers-types';
+/** D1 append-only account audit log. Mirror of the Drizzle repo. */
+export declare class D1AuditEventRepository implements AuditEventRepository {
+    private readonly db;
+    constructor({ db }: {
+        db: D1Database;
+    });
+    append(event: AuditEventRecord): Promise<void>;
+    listByAccount(accountId: string, options?: {
+        cursor?: string | null;
+        limit?: number;
+    }): Promise<AuditEventPage>;
+}
+//# sourceMappingURL=D1AuditEventRepository.d.ts.map

package/dist/infrastructure/repositories/D1AuditEventRepository.d.ts.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"D1AuditEventRepository.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/repositories/D1AuditEventRepository.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,cAAc,EACd,gBAAgB,EAChB,oBAAoB,EAErB,MAAM,qBAAqB,CAAA;AAQ5B,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAA;AAE3D,oEAAoE;AACpE,qBAAa,sBAAuB,YAAW,oBAAoB;IACjE,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAY;IAE/B,YAAY,EAAE,EAAE,EAAE,EAAE;QAAE,EAAE,EAAE,UAAU,CAAA;KAAE,EAErC;IAEK,MAAM,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAyBnD;IAEK,aAAa,CACjB,SAAS,EAAE,MAAM,EACjB,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GACnD,OAAO,CAAC,cAAc,CAAC,CA8BzB;CACF"}

package/dist/infrastructure/repositories/D1AuditEventRepository.js ADDED Viewed

@@ -0,0 +1,47 @@
+import { auditEventColumns, auditPageLimit, decodeAuditCursor, encodeAuditCursor, rowToAuditEventView, } from '@cat-factory/kernel';
+/** D1 append-only account audit log. Mirror of the Drizzle repo. */
+export class D1AuditEventRepository {
+    db;
+    constructor({ db }) {
+        this.db = db;
+    }
+    async append(event) {
+        const row = auditEventColumns(event);
+        // No conflict clause: an id collision is an id-generator bug, and quietly folding one append
+        // onto another would lose an audited action, the one outcome this table exists to prevent.
+        await this.db
+            .prepare(`INSERT INTO audit_events
+           (id, account_id, workspace_id, actor_kind, actor_user_id, actor_api_key_id,
+            action, target_type, target_id, details, at)
+         VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`)
+            .bind(row.id, row.account_id, row.workspace_id, row.actor_kind, row.actor_user_id, row.actor_api_key_id, row.action, row.target_type, row.target_id, row.details, row.at)
+            .run();
+    }
+    async listByAccount(accountId, options) {
+        const limit = auditPageLimit(options?.limit);
+        const after = decodeAuditCursor(options?.cursor);
+        // One extra row tells us whether another page exists, with no second COUNT query. The keyset
+        // predicate is the (at, id) pair, matching the index's ordering exactly: an OFFSET would
+        // re-read every earlier row and skip a row that arrived mid-pagination.
+        const statement = after
+            ? this.db
+                .prepare(`SELECT * FROM audit_events
+              WHERE account_id = ? AND (at < ? OR (at = ? AND id < ?))
+              ORDER BY at DESC, id DESC LIMIT ?`)
+                .bind(accountId, after.at, after.at, after.id, limit + 1)
+            : this.db
+                .prepare(`SELECT * FROM audit_events
+              WHERE account_id = ?
+              ORDER BY at DESC, id DESC LIMIT ?`)
+                .bind(accountId, limit + 1);
+        const result = await statement.all();
+        const rows = result.results ?? [];
+        const page = rows.slice(0, limit).map(rowToAuditEventView);
+        const last = page.at(-1);
+        return {
+            events: page,
+            nextCursor: rows.length > limit && last ? encodeAuditCursor(last) : null,
+        };
+    }
+}
+//# sourceMappingURL=D1AuditEventRepository.js.map

package/dist/infrastructure/repositories/D1AuditEventRepository.js.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"D1AuditEventRepository.js","sourceRoot":"","sources":["../../../src/infrastructure/repositories/D1AuditEventRepository.ts"],"names":[],"mappings":"AAMA,OAAO,EACL,iBAAiB,EACjB,cAAc,EACd,iBAAiB,EACjB,iBAAiB,EACjB,mBAAmB,GACpB,MAAM,qBAAqB,CAAA;AAG5B,oEAAoE;AACpE,MAAM,OAAO,sBAAsB;IAChB,EAAE,CAAY;IAE/B,YAAY,EAAE,EAAE,EAAsB;QACpC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAA;IACd,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAAuB;QAClC,MAAM,GAAG,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAA;QACpC,6FAA6F;QAC7F,2FAA2F;QAC3F,MAAM,IAAI,CAAC,EAAE;aACV,OAAO,CACN;;;kDAG0C,CAC3C;aACA,IAAI,CACH,GAAG,CAAC,EAAE,EACN,GAAG,CAAC,UAAU,EACd,GAAG,CAAC,YAAY,EAChB,GAAG,CAAC,UAAU,EACd,GAAG,CAAC,aAAa,EACjB,GAAG,CAAC,gBAAgB,EACpB,GAAG,CAAC,MAAM,EACV,GAAG,CAAC,WAAW,EACf,GAAG,CAAC,SAAS,EACb,GAAG,CAAC,OAAO,EACX,GAAG,CAAC,EAAE,CACP;aACA,GAAG,EAAE,CAAA;IACV,CAAC;IAED,KAAK,CAAC,aAAa,CACjB,SAAiB,EACjB,OAAoD;QAEpD,MAAM,KAAK,GAAG,cAAc,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;QAC5C,MAAM,KAAK,GAAG,iBAAiB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;QAChD,6FAA6F;QAC7F,yFAAyF;QACzF,wEAAwE;QACxE,MAAM,SAAS,GAAG,KAAK;YACrB,CAAC,CAAC,IAAI,CAAC,EAAE;iBACJ,OAAO,CACN;;gDAEoC,CACrC;iBACA,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,KAAK,GAAG,CAAC,CAAC;YAC7D,CAAC,CAAC,IAAI,CAAC,EAAE;iBACJ,OAAO,CACN;;gDAEoC,CACrC;iBACA,IAAI,CAAC,SAAS,EAAE,KAAK,GAAG,CAAC,CAAC,CAAA;QAEjC,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,GAAG,EAAiB,CAAA;QACnD,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,IAAI,EAAE,CAAA;QACjC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAA;QAC1D,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;QACxB,OAAO;YACL,MAAM,EAAE,IAAI;YACZ,UAAU,EAAE,IAAI,CAAC,MAAM,GAAG,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI;SACzE,CAAA;IACH,CAAC;CACF"}

package/dist/infrastructure/repositories/D1McpOAuthGrantRepository.d.ts ADDED Viewed

@@ -0,0 +1,24 @@
+import type { McpOAuthGrantRecord, McpOAuthGrantRepository } from '@cat-factory/kernel';
+import type { D1Database } from '@cloudflare/workers-types';
+/**
+ * A workspace's OAuth grants against remote MCP tool servers (migration 0082), one row per
+ * (workspace, server). `tokens` is a sealed envelope the service opens; `summary` is the non-secret
+ * blob the connection panel renders.
+ *
+ * The rev-guarded `compareAndSwap` is what the REFRESH path rides (an `UPDATE … WHERE rev = ?`
+ * whose changed-row count decides the winner); the blind `upsert` bumps the stored rev in SQL, so a
+ * human completing a grant reliably beats a concurrent refresh's stale base. The Drizzle mirror is
+ * `DrizzleMcpOAuthGrantRepository`.
+ */
+export declare class D1McpOAuthGrantRepository implements McpOAuthGrantRepository {
+    private readonly db;
+    constructor({ db }: {
+        db: D1Database;
+    });
+    get(workspaceId: string, serverId: string): Promise<McpOAuthGrantRecord | null>;
+    listByWorkspace(workspaceId: string): Promise<McpOAuthGrantRecord[]>;
+    upsert(record: McpOAuthGrantRecord): Promise<void>;
+    compareAndSwap(record: McpOAuthGrantRecord, expectedRev: number | null): Promise<boolean>;
+    delete(workspaceId: string, serverId: string): Promise<void>;
+}
+//# sourceMappingURL=D1McpOAuthGrantRepository.d.ts.map

package/dist/infrastructure/repositories/D1McpOAuthGrantRepository.d.ts.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"D1McpOAuthGrantRepository.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/repositories/D1McpOAuthGrantRepository.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAA;AACvF,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAA;AAwB3D;;;;;;;;;GASG;AACH,qBAAa,yBAA0B,YAAW,uBAAuB;IACvE,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAY;IAE/B,YAAY,EAAE,EAAE,EAAE,EAAE;QAAE,EAAE,EAAE,UAAU,CAAA;KAAE,EAErC;IAEK,GAAG,CAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC,CAMpF;IAEK,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAMzE;IAEK,MAAM,CAAC,MAAM,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC,CAqBvD;IAEK,cAAc,CAAC,MAAM,EAAE,mBAAmB,EAAE,WAAW,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,CAqC9F;IAEK,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAKjE;CACF"}

package/dist/infrastructure/repositories/D1McpOAuthGrantRepository.js ADDED Viewed

@@ -0,0 +1,78 @@
+function rowToRecord(row) {
+    return {
+        workspaceId: row.workspace_id,
+        serverId: row.server_id,
+        tokens: row.tokens,
+        summary: row.summary,
+        rev: row.rev,
+        createdAt: row.created_at,
+        updatedAt: row.updated_at,
+    };
+}
+/**
+ * A workspace's OAuth grants against remote MCP tool servers (migration 0082), one row per
+ * (workspace, server). `tokens` is a sealed envelope the service opens; `summary` is the non-secret
+ * blob the connection panel renders.
+ *
+ * The rev-guarded `compareAndSwap` is what the REFRESH path rides (an `UPDATE … WHERE rev = ?`
+ * whose changed-row count decides the winner); the blind `upsert` bumps the stored rev in SQL, so a
+ * human completing a grant reliably beats a concurrent refresh's stale base. The Drizzle mirror is
+ * `DrizzleMcpOAuthGrantRepository`.
+ */
+export class D1McpOAuthGrantRepository {
+    db;
+    constructor({ db }) {
+        this.db = db;
+    }
+    async get(workspaceId, serverId) {
+        const row = await this.db
+            .prepare(`SELECT * FROM mcp_oauth_grants WHERE workspace_id = ? AND server_id = ?`)
+            .bind(workspaceId, serverId)
+            .first();
+        return row ? rowToRecord(row) : null;
+    }
+    async listByWorkspace(workspaceId) {
+        const result = await this.db
+            .prepare(`SELECT * FROM mcp_oauth_grants WHERE workspace_id = ? ORDER BY server_id`)
+            .bind(workspaceId)
+            .all();
+        return (result.results ?? []).map(rowToRecord);
+    }
+    async upsert(record) {
+        await this.db
+            .prepare(`INSERT INTO mcp_oauth_grants (workspace_id, server_id, tokens, summary, rev, created_at, updated_at)
+         VALUES (?, ?, ?, ?, ?, ?, ?)
+         ON CONFLICT (workspace_id, server_id) DO UPDATE SET
+           tokens = excluded.tokens,
+           summary = excluded.summary,
+           rev = mcp_oauth_grants.rev + 1,
+           updated_at = excluded.updated_at`)
+            .bind(record.workspaceId, record.serverId, record.tokens, record.summary, record.rev, record.createdAt, record.updatedAt)
+            .run();
+    }
+    async compareAndSwap(record, expectedRev) {
+        if (expectedRev === null) {
+            const result = await this.db
+                .prepare(`INSERT INTO mcp_oauth_grants (workspace_id, server_id, tokens, summary, rev, created_at, updated_at)
+           VALUES (?, ?, ?, ?, ?, ?, ?)
+           ON CONFLICT (workspace_id, server_id) DO NOTHING`)
+                .bind(record.workspaceId, record.serverId, record.tokens, record.summary, record.rev, record.createdAt, record.updatedAt)
+                .run();
+            return (result.meta?.changes ?? 0) > 0;
+        }
+        const result = await this.db
+            .prepare(`UPDATE mcp_oauth_grants
+           SET tokens = ?, summary = ?, rev = ?, updated_at = ?
+         WHERE workspace_id = ? AND server_id = ? AND rev = ?`)
+            .bind(record.tokens, record.summary, record.rev, record.updatedAt, record.workspaceId, record.serverId, expectedRev)
+            .run();
+        return (result.meta?.changes ?? 0) > 0;
+    }
+    async delete(workspaceId, serverId) {
+        await this.db
+            .prepare(`DELETE FROM mcp_oauth_grants WHERE workspace_id = ? AND server_id = ?`)
+            .bind(workspaceId, serverId)
+            .run();
+    }
+}
+//# sourceMappingURL=D1McpOAuthGrantRepository.js.map

package/dist/infrastructure/repositories/D1McpOAuthGrantRepository.js.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"D1McpOAuthGrantRepository.js","sourceRoot":"","sources":["../../../src/infrastructure/repositories/D1McpOAuthGrantRepository.ts"],"names":[],"mappings":"AAaA,SAAS,WAAW,CAAC,GAAqB;IACxC,OAAO;QACL,WAAW,EAAE,GAAG,CAAC,YAAY;QAC7B,QAAQ,EAAE,GAAG,CAAC,SAAS;QACvB,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,GAAG,EAAE,GAAG,CAAC,GAAG;QACZ,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,SAAS,EAAE,GAAG,CAAC,UAAU;KAC1B,CAAA;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,OAAO,yBAAyB;IACnB,EAAE,CAAY;IAE/B,YAAY,EAAE,EAAE,EAAsB;QACpC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAA;IACd,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,WAAmB,EAAE,QAAgB;QAC7C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,EAAE;aACtB,OAAO,CAAC,yEAAyE,CAAC;aAClF,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC;aAC3B,KAAK,EAAoB,CAAA;QAC5B,OAAO,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IACtC,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,WAAmB;QACvC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,EAAE;aACzB,OAAO,CAAC,0EAA0E,CAAC;aACnF,IAAI,CAAC,WAAW,CAAC;aACjB,GAAG,EAAoB,CAAA;QAC1B,OAAO,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;IAChD,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAA2B;QACtC,MAAM,IAAI,CAAC,EAAE;aACV,OAAO,CACN;;;;;;4CAMoC,CACrC;aACA,IAAI,CACH,MAAM,CAAC,WAAW,EAClB,MAAM,CAAC,QAAQ,EACf,MAAM,CAAC,MAAM,EACb,MAAM,CAAC,OAAO,EACd,MAAM,CAAC,GAAG,EACV,MAAM,CAAC,SAAS,EAChB,MAAM,CAAC,SAAS,CACjB;aACA,GAAG,EAAE,CAAA;IACV,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,MAA2B,EAAE,WAA0B;QAC1E,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;YACzB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,EAAE;iBACzB,OAAO,CACN;;4DAEkD,CACnD;iBACA,IAAI,CACH,MAAM,CAAC,WAAW,EAClB,MAAM,CAAC,QAAQ,EACf,MAAM,CAAC,MAAM,EACb,MAAM,CAAC,OAAO,EACd,MAAM,CAAC,GAAG,EACV,MAAM,CAAC,SAAS,EAChB,MAAM,CAAC,SAAS,CACjB;iBACA,GAAG,EAAE,CAAA;YACR,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,IAAI,CAAC,CAAC,GAAG,CAAC,CAAA;QACxC,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,EAAE;aACzB,OAAO,CACN;;8DAEsD,CACvD;aACA,IAAI,CACH,MAAM,CAAC,MAAM,EACb,MAAM,CAAC,OAAO,EACd,MAAM,CAAC,GAAG,EACV,MAAM,CAAC,SAAS,EAChB,MAAM,CAAC,WAAW,EAClB,MAAM,CAAC,QAAQ,EACf,WAAW,CACZ;aACA,GAAG,EAAE,CAAA;QACR,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,IAAI,CAAC,CAAC,GAAG,CAAC,CAAA;IACxC,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,WAAmB,EAAE,QAAgB;QAChD,MAAM,IAAI,CAAC,EAAE;aACV,OAAO,CAAC,uEAAuE,CAAC;aAChF,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC;aAC3B,GAAG,EAAE,CAAA;IACV,CAAC;CACF"}

package/dist/infrastructure/wireCredentialServices.d.ts CHANGED Viewed

@@ -1,5 +1,5 @@
 import type { Clock, GitHubRepo, GroupCacheHandle, ResolveUserGitHubToken } from '@cat-factory/kernel';
-import { ApiKeyService, LocalModelEndpointService, OpenRouterCatalogService, PersonalSubscriptionService, ProviderSubscriptionService, PublicApiKeyService, TestSecretsService, CapabilityCredentialsService, UserSecretService, ValidationConfigService, type UserSecretKindRegistry } from '@cat-factory/integrations';
+import { ApiKeyService, LocalModelEndpointService, OpenRouterCatalogService, PersonalSubscriptionService, ProviderSubscriptionService, PublicApiKeyService, TestSecretsService, CapabilityCredentialsService, McpOAuthService, UserSecretService, ValidationConfigService, type UserSecretKindRegistry } from '@cat-factory/integrations';
 import type { D1Database } from '@cloudflare/workers-types';
 import type { Env } from './env';
 /**
@@ -73,6 +73,17 @@ export declare function buildTestSecretsService(env: Env, db: D1Database, clock:
  * executor and the controller each build their own.
  */
 export declare function buildCapabilityCredentialsService(env: Env, db: D1Database, clock: Clock): CapabilityCredentialsService | undefined;
+/**
+ * Build the PER-WORKSPACE MCP OAUTH GRANT store (sealed), or undefined when the shared encryption
+ * key is absent. Backs the tool-server connect/disconnect routes, the inventory's connection
+ * state, AND the dispatch-time token source the executor mints an `Authorization` header from.
+ *
+ * Absent is a real deployment shape rather than a broken one: a Worker with no ENCRYPTION_KEY has
+ * nowhere to keep a grant, so every OAuth-declaring server is stated to its agent as
+ * `oauth_not_connected` instead of dispatched without a token. Stateless, so building a fresh
+ * instance per call site is safe (mirrors the sealed stores above).
+ */
+export declare function buildMcpOAuthService(env: Env, db: D1Database, clock: Clock): McpOAuthService | undefined;
 /**
  * Build the per-service PRE-PR VALIDATION CHECK store — the commands the executor-harness runs
  * against the checkout before opening a PR. Backs the validation-check CRUD controller and the

package/dist/infrastructure/wireCredentialServices.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"wireCredentialServices.d.ts","sourceRoot":"","sources":["../../src/infrastructure/wireCredentialServices.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,KAAK,EACL,UAAU,EACV,gBAAgB,EAChB,sBAAsB,EACvB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EACL,aAAa,EACb,yBAAyB,EACzB,wBAAwB,EACxB,2BAA2B,EAC3B,2BAA2B,EAC3B,mBAAmB,EAEnB,kBAAkB,EAElB,4BAA4B,~~EAC5B~~,iBAAiB,EACjB,uBAAuB,EACvB,KAAK,sBAAsB,EAE5B,MAAM,2BAA2B,CAAA;AAElC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAA;AAC3D,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,OAAO,CAAA;~~AA0BhC~~;;;;GAIG;AACH,wBAAgB,wBAAwB,CACtC,GAAG,EAAE,GAAG,EACR,EAAE,EAAE,UAAU,EACd,KAAK,EAAE,KAAK,GACX,2BAA2B,GAAG,SAAS,CAazC;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAChC,GAAG,EAAE,GAAG,EACR,EAAE,EAAE,UAAU,EACd,KAAK,EAAE,KAAK,GACX,aAAa,GAAG,SAAS,CAa3B;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CACtC,GAAG,EAAE,GAAG,EACR,EAAE,EAAE,UAAU,EACd,KAAK,EAAE,KAAK,GACX,mBAAmB,GAAG,SAAS,CASjC;AAED;;;;;;GAMG;AACH,wBAAgB,gCAAgC,CAC9C,GAAG,EAAE,GAAG,EACR,EAAE,EAAE,UAAU,EACd,KAAK,EAAE,KAAK,GACX,2BAA2B,GAAG,SAAS,CAczC;AAED;;;;;GAKG;AACH,wBAAgB,8BAA8B,CAC5C,GAAG,EAAE,GAAG,EACR,EAAE,EAAE,UAAU,EACd,KAAK,EAAE,KAAK,GACX,yBAAyB,GAAG,SAAS,CAevC;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CACpC,GAAG,EAAE,GAAG,EACR,EAAE,EAAE,UAAU,EACd,KAAK,EAAE,KAAK,EAIZ,sBAAsB,CAAC,EAAE,sBAAsB,EAI/C,gBAAgB,CAAC,EAAE,gBAAgB,CAAC,UAAU,EAAE,CAAC,GAChD,iBAAiB,GAAG,SAAS,CAe/B;AAED;;;;GAIG;AACH,wBAAgB,2BAA2B,CACzC,GAAG,EAAE,GAAG,EACR,EAAE,EAAE,UAAU,EACd,KAAK,EAAE,KAAK,GACX,sBAAsB,GAAG,SAAS,CAGpC;AAED;;;;;GAKG;AACH,wBAAgB,6BAA6B,CAC3C,GAAG,EAAE,GAAG,EACR,EAAE,EAAE,UAAU,EACd,KAAK,EAAE,KAAK,EACZ,OAAO,EAAE,aAAa,GAAG,SAAS,EAClC,aAAa,EAAE,MAAM,GACpB,wBAAwB,GAAG,SAAS,CAWtC;AACD;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CACrC,GAAG,EAAE,GAAG,EACR,EAAE,EAAE,UAAU,EACd,KAAK,EAAE,KAAK,GACX,kBAAkB,GAAG,SAAS,CAYhC;AAED;;;;;;;;GAQG;AACH,wBAAgB,iCAAiC,CAC/C,GAAG,EAAE,GAAG,EACR,EAAE,EAAE,UAAU,EACd,KAAK,EAAE,KAAK,GACX,4BAA4B,GAAG,SAAS,CAW1C;AAED;;;;;;;GAOG;AACH,wBAAgB,4BAA4B,CAC1C,EAAE,EAAE,UAAU,EACd,KAAK,EAAE,KAAK,GACX,uBAAuB,CAMzB"}
1	+ {"version":3,"file":"wireCredentialServices.d.ts","sourceRoot":"","sources":["../../src/infrastructure/wireCredentialServices.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,KAAK,EACL,UAAU,EACV,gBAAgB,EAChB,sBAAsB,EACvB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EACL,aAAa,EACb,yBAAyB,EACzB,wBAAwB,EACxB,2BAA2B,EAC3B,2BAA2B,EAC3B,mBAAmB,EAEnB,kBAAkB,EAElB,4BAA4B,EAE5B,eAAe,EACf,iBAAiB,EACjB,uBAAuB,EACvB,KAAK,sBAAsB,EAE5B,MAAM,2BAA2B,CAAA;AAElC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAA;AAC3D,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,OAAO,CAAA;AA2BhC;;;;GAIG;AACH,wBAAgB,wBAAwB,CACtC,GAAG,EAAE,GAAG,EACR,EAAE,EAAE,UAAU,EACd,KAAK,EAAE,KAAK,GACX,2BAA2B,GAAG,SAAS,CAazC;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAChC,GAAG,EAAE,GAAG,EACR,EAAE,EAAE,UAAU,EACd,KAAK,EAAE,KAAK,GACX,aAAa,GAAG,SAAS,CAa3B;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CACtC,GAAG,EAAE,GAAG,EACR,EAAE,EAAE,UAAU,EACd,KAAK,EAAE,KAAK,GACX,mBAAmB,GAAG,SAAS,CASjC;AAED;;;;;;GAMG;AACH,wBAAgB,gCAAgC,CAC9C,GAAG,EAAE,GAAG,EACR,EAAE,EAAE,UAAU,EACd,KAAK,EAAE,KAAK,GACX,2BAA2B,GAAG,SAAS,CAczC;AAED;;;;;GAKG;AACH,wBAAgB,8BAA8B,CAC5C,GAAG,EAAE,GAAG,EACR,EAAE,EAAE,UAAU,EACd,KAAK,EAAE,KAAK,GACX,yBAAyB,GAAG,SAAS,CAevC;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CACpC,GAAG,EAAE,GAAG,EACR,EAAE,EAAE,UAAU,EACd,KAAK,EAAE,KAAK,EAIZ,sBAAsB,CAAC,EAAE,sBAAsB,EAI/C,gBAAgB,CAAC,EAAE,gBAAgB,CAAC,UAAU,EAAE,CAAC,GAChD,iBAAiB,GAAG,SAAS,CAe/B;AAED;;;;GAIG;AACH,wBAAgB,2BAA2B,CACzC,GAAG,EAAE,GAAG,EACR,EAAE,EAAE,UAAU,EACd,KAAK,EAAE,KAAK,GACX,sBAAsB,GAAG,SAAS,CAGpC;AAED;;;;;GAKG;AACH,wBAAgB,6BAA6B,CAC3C,GAAG,EAAE,GAAG,EACR,EAAE,EAAE,UAAU,EACd,KAAK,EAAE,KAAK,EACZ,OAAO,EAAE,aAAa,GAAG,SAAS,EAClC,aAAa,EAAE,MAAM,GACpB,wBAAwB,GAAG,SAAS,CAWtC;AACD;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CACrC,GAAG,EAAE,GAAG,EACR,EAAE,EAAE,UAAU,EACd,KAAK,EAAE,KAAK,GACX,kBAAkB,GAAG,SAAS,CAYhC;AAED;;;;;;;;GAQG;AACH,wBAAgB,iCAAiC,CAC/C,GAAG,EAAE,GAAG,EACR,EAAE,EAAE,UAAU,EACd,KAAK,EAAE,KAAK,GACX,4BAA4B,GAAG,SAAS,CAW1C;AAED;;;;;;;;;GASG;AACH,wBAAgB,oBAAoB,CAClC,GAAG,EAAE,GAAG,EACR,EAAE,EAAE,UAAU,EACd,KAAK,EAAE,KAAK,GACX,eAAe,GAAG,SAAS,CAW7B;AAED;;;;;;;GAOG;AACH,wBAAgB,4BAA4B,CAC1C,EAAE,EAAE,UAAU,EACd,KAAK,EAAE,KAAK,GACX,uBAAuB,CAMzB"}

package/dist/infrastructure/wireCredentialServices.js CHANGED Viewed

@@ -1,9 +1,10 @@
-import { ApiKeyService, LocalModelEndpointService, OpenRouterCatalogService, PersonalSubscriptionService, ProviderSubscriptionService, PublicApiKeyService, TEST_SECRETS_CIPHER_INFO, TestSecretsService, CAPABILITY_CREDENTIALS_CIPHER_INFO, CapabilityCredentialsService, UserSecretService, ValidationConfigService, usdRateForSpendCurrency, } from '@cat-factory/integrations';
+import { ApiKeyService, LocalModelEndpointService, OpenRouterCatalogService, PersonalSubscriptionService, ProviderSubscriptionService, PublicApiKeyService, TEST_SECRETS_CIPHER_INFO, TestSecretsService, CAPABILITY_CREDENTIALS_CIPHER_INFO, CapabilityCredentialsService, MCP_OAUTH_CIPHER_INFO, McpOAuthService, UserSecretService, ValidationConfigService, usdRateForSpendCurrency, } from '@cat-factory/integrations';
 import { WebCryptoPersonalSecretCipher } from '@cat-factory/server';
 import { baseUrlFor } from './ai/providerEndpoints';
 import { WebCryptoSecretCipher } from './environments/WebCryptoSecretCipher';
 import { D1BlockRepository } from './repositories/D1BlockRepository';
 import { D1CapabilityCredentialRepository } from './repositories/D1CapabilityCredentialRepository';
+import { D1McpOAuthGrantRepository } from './repositories/D1McpOAuthGrantRepository';
 import { D1TestSecretsRepository } from './repositories/D1TestSecretsRepository';
 import { D1ValidationConfigRepository } from './repositories/D1ValidationConfigRepository';
 import { D1ProviderSubscriptionTokenRepository } from './repositories/D1ProviderSubscriptionTokenRepository';
@@ -223,6 +224,29 @@ export function buildCapabilityCredentialsService(env, db, clock) {
         clock,
     });
 }
+/**
+ * Build the PER-WORKSPACE MCP OAUTH GRANT store (sealed), or undefined when the shared encryption
+ * key is absent. Backs the tool-server connect/disconnect routes, the inventory's connection
+ * state, AND the dispatch-time token source the executor mints an `Authorization` header from.
+ *
+ * Absent is a real deployment shape rather than a broken one: a Worker with no ENCRYPTION_KEY has
+ * nowhere to keep a grant, so every OAuth-declaring server is stated to its agent as
+ * `oauth_not_connected` instead of dispatched without a token. Stateless, so building a fresh
+ * instance per call site is safe (mirrors the sealed stores above).
+ */
+export function buildMcpOAuthService(env, db, clock) {
+    const encryptionKey = env.ENCRYPTION_KEY?.trim();
+    if (!encryptionKey)
+        return undefined;
+    return new McpOAuthService({
+        mcpOAuthGrantRepository: new D1McpOAuthGrantRepository({ db }),
+        secretCipher: new WebCryptoSecretCipher({
+            masterKeyBase64: encryptionKey,
+            info: MCP_OAUTH_CIPHER_INFO,
+        }),
+        clock,
+    });
+}
 /**
  * Build the per-service PRE-PR VALIDATION CHECK store — the commands the executor-harness runs
  * against the checkout before opening a PR. Backs the validation-check CRUD controller and the

package/dist/infrastructure/wireCredentialServices.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"wireCredentialServices.js","sourceRoot":"","sources":["../../src/infrastructure/wireCredentialServices.ts"],"names":[],"mappings":"AAMA,OAAO,EACL,aAAa,EACb,yBAAyB,EACzB,wBAAwB,EACxB,2BAA2B,EAC3B,2BAA2B,EAC3B,mBAAmB,EACnB,wBAAwB,EACxB,kBAAkB,EAClB,kCAAkC,EAClC,4BAA4B,EAC5B,iBAAiB,EACjB,uBAAuB,EAEvB,uBAAuB,GACxB,MAAM,2BAA2B,CAAA;AAClC,OAAO,EAAE,6BAA6B,EAAE,MAAM,qBAAqB,CAAA;AAGnE,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAA;AACnD,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAA;AAC5E,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAA;AACpE,OAAO,EAAE,gCAAgC,EAAE,MAAM,iDAAiD,CAAA;AAClG,OAAO,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAA;AAChF,OAAO,EAAE,4BAA4B,EAAE,MAAM,6CAA6C,CAAA;AAC1F,OAAO,EAAE,qCAAqC,EAAE,MAAM,sDAAsD,CAAA;AAC5G,OAAO,EAAE,0BAA0B,EAAE,MAAM,2CAA2C,CAAA;AACtF,OAAO,EAAE,wBAAwB,EAAE,MAAM,yCAAyC,CAAA;AAClF,OAAO,EACL,gCAAgC,EAChC,kCAAkC,GACnC,MAAM,iDAAiD,CAAA;AACxD,OAAO,EAAE,8BAA8B,EAAE,MAAM,+CAA+C,CAAA;AAC9F,OAAO,EAAE,sBAAsB,EAAE,MAAM,uCAAuC,CAAA;AAC9E,OAAO,EAAE,gCAAgC,EAAE,MAAM,iDAAiD,CAAA;AAClG,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAA;AAC5E,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAA;AAE7C,0FAA0F;AAC1F,+EAA+E;AAC/E,0FAA0F;AAC1F,2FAA2F;AAC3F,sEAAsE;AAEtE;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CACtC,GAAQ,EACR,EAAc,EACd,KAAY;IAEZ,MAAM,eAAe,GAAG,GAAG,CAAC,cAAc,EAAE,IAAI,EAAE,CAAA;IAClD,IAAI,CAAC,eAAe;QAAE,OAAO,SAAS,CAAA;IACtC,OAAO,IAAI,2BAA2B,CAAC;QACrC,mCAAmC,EAAE,IAAI,qCAAqC,CAAC,EAAE,EAAE,EAAE,CAAC;QACtF,mBAAmB,EAAE,IAAI,qBAAqB,CAAC,EAAE,EAAE,EAAE,CAAC;QACtD,YAAY,EAAE,IAAI,qBAAqB,CAAC;YACtC,eAAe;YACf,IAAI,EAAE,oCAAoC;SAC3C,CAAC;QACF,WAAW,EAAE,IAAI,iBAAiB,EAAE;QACpC,KAAK;KACN,CAAC,CAAA;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAChC,GAAQ,EACR,EAAc,EACd,KAAY;IAEZ,MAAM,eAAe,GAAG,GAAG,CAAC,cAAc,EAAE,IAAI,EAAE,CAAA;IAClD,IAAI,CAAC,eAAe;QAAE,OAAO,SAAS,CAAA;IACtC,OAAO,IAAI,aAAa,CAAC;QACvB,wBAAwB,EAAE,IAAI,0BAA0B,CAAC,EAAE,EAAE,EAAE,CAAC;QAChE,mBAAmB,EAAE,IAAI,qBAAqB,CAAC,EAAE,EAAE,EAAE,CAAC;QACtD,YAAY,EAAE,IAAI,qBAAqB,CAAC;YACtC,eAAe;YACf,IAAI,EAAE,+BAA+B;SACtC,CAAC;QACF,WAAW,EAAE,IAAI,iBAAiB,EAAE;QACpC,KAAK;KACN,CAAC,CAAA;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB,CACtC,GAAQ,EACR,EAAc,EACd,KAAY;IAEZ,MAAM,MAAM,GAAG,GAAG,CAAC,cAAc,EAAE,IAAI,EAAE,CAAA;IACzC,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAA;IAC7B,OAAO,IAAI,mBAAmB,CAAC;QAC7B,UAAU,EAAE,IAAI,wBAAwB,CAAC,EAAE,EAAE,EAAE,CAAC;QAChD,MAAM;QACN,WAAW,EAAE,IAAI,iBAAiB,EAAE;QACpC,KAAK;KACN,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gCAAgC,CAC9C,GAAQ,EACR,EAAc,EACd,KAAY;IAEZ,MAAM,eAAe,GAAG,GAAG,CAAC,cAAc,EAAE,IAAI,EAAE,CAAA;IAClD,IAAI,CAAC,eAAe;QAAE,OAAO,SAAS,CAAA;IACtC,OAAO,IAAI,2BAA2B,CAAC;QACrC,8BAA8B,EAAE,IAAI,gCAAgC,CAAC,EAAE,EAAE,EAAE,CAAC;QAC5E,gCAAgC,EAAE,IAAI,kCAAkC,CAAC,EAAE,EAAE,EAAE,CAAC;QAChF,YAAY,EAAE,IAAI,qBAAqB,CAAC;YACtC,eAAe;YACf,IAAI,EAAE,oCAAoC;SAC3C,CAAC;QACF,cAAc,EAAE,IAAI,6BAA6B,EAAE;QACnD,WAAW,EAAE,IAAI,iBAAiB,EAAE;QACpC,KAAK;KACN,CAAC,CAAA;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,8BAA8B,CAC5C,GAAQ,EACR,EAAc,EACd,KAAY;IAEZ,MAAM,eAAe,GAAG,GAAG,CAAC,cAAc,EAAE,IAAI,EAAE,CAAA;IAClD,IAAI,CAAC,eAAe;QAAE,OAAO,SAAS,CAAA;IACtC,OAAO,IAAI,yBAAyB,CAAC;QACnC,4BAA4B,EAAE,IAAI,8BAA8B,CAAC,EAAE,EAAE,EAAE,CAAC;QACxE,YAAY,EAAE,IAAI,qBAAqB,CAAC;YACtC,eAAe;YACf,IAAI,EAAE,mCAAmC;SAC1C,CAAC;QACF,KAAK;QACL,4EAA4E;QAC5E,iFAAiF;QACjF,8EAA8E;QAC9E,oBAAoB,EAAE,GAAG,CAAC,sBAAsB,EAAE,IAAI,EAAE,KAAK,MAAM;KACpE,CAAC,CAAA;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CACpC,GAAQ,EACR,EAAc,EACd,KAAY;AACZ,yFAAyF;AACzF,qFAAqF;AACrF,iFAAiF;AACjF,sBAA+C;AAC/C,gGAAgG;AAChG,gGAAgG;AAChG,oFAAoF;AACpF,gBAAiD;IAEjD,MAAM,eAAe,GAAG,GAAG,CAAC,cAAc,EAAE,IAAI,EAAE,CAAA;IAClD,IAAI,CAAC,eAAe;QAAE,OAAO,SAAS,CAAA;IACtC,OAAO,IAAI,iBAAiB,CAAC;QAC3B,oBAAoB,EAAE,IAAI,sBAAsB,CAAC,EAAE,EAAE,EAAE,CAAC;QACxD,YAAY,EAAE,IAAI,qBAAqB,CAAC,EAAE,eAAe,EAAE,IAAI,EAAE,yBAAyB,EAAE,CAAC;QAC7F,KAAK;QACL,GAAG,CAAC,sBAAsB,CAAC,CAAC,CAAC,EAAE,sBAAsB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,GAAG,CAAC,gBAAgB;YAClB,CAAC,CAAC;gBACE,eAAe,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAChC,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,gBAAgB,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS;aAC/E;YACH,CAAC,CAAC,EAAE,CAAC;KACR,CAAC,CAAA;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,2BAA2B,CACzC,GAAQ,EACR,EAAc,EACd,KAAY;IAEZ,MAAM,WAAW,GAAG,sBAAsB,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK,CAAC,CAAA;IAC1D,OAAO,WAAW,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;AACxF,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,6BAA6B,CAC3C,GAAQ,EACR,EAAc,EACd,KAAY,EACZ,OAAkC,EAClC,aAAqB;IAErB,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAA;IAC9B,OAAO,IAAI,wBAAwB,CAAC;QAClC,8BAA8B,EAAE,IAAI,gCAAgC,CAAC,EAAE,EAAE,EAAE,CAAC;QAC5E,OAAO;QACP,KAAK;QACL,OAAO,EAAE,UAAU,CAAC,YAAY,EAAE,GAAG,CAAC,IAAI,SAAS;QACnD,wFAAwF;QACxF,8DAA8D;QAC9D,iBAAiB,EAAE,uBAAuB,CAAC,aAAa,CAAC;KAC1D,CAAC,CAAA;AACJ,CAAC;AACD;;;;;;GAMG;AACH,MAAM,UAAU,uBAAuB,CACrC,GAAQ,EACR,EAAc,EACd,KAAY;IAEZ,MAAM,aAAa,GAAG,GAAG,CAAC,cAAc,EAAE,IAAI,EAAE,CAAA;IAChD,IAAI,CAAC,aAAa;QAAE,OAAO,SAAS,CAAA;IACpC,OAAO,IAAI,kBAAkB,CAAC;QAC5B,qBAAqB,EAAE,IAAI,uBAAuB,CAAC,EAAE,EAAE,EAAE,CAAC;QAC1D,YAAY,EAAE,IAAI,qBAAqB,CAAC;YACtC,eAAe,EAAE,aAAa;YAC9B,IAAI,EAAE,wBAAwB;SAC/B,CAAC;QACF,eAAe,EAAE,IAAI,iBAAiB,CAAC,EAAE,EAAE,EAAE,CAAC;QAC9C,KAAK;KACN,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,iCAAiC,CAC/C,GAAQ,EACR,EAAc,EACd,KAAY;IAEZ,MAAM,aAAa,GAAG,GAAG,CAAC,cAAc,EAAE,IAAI,EAAE,CAAA;IAChD,IAAI,CAAC,aAAa;QAAE,OAAO,SAAS,CAAA;IACpC,OAAO,IAAI,4BAA4B,CAAC;QACtC,8BAA8B,EAAE,IAAI,gCAAgC,CAAC,EAAE,EAAE,EAAE,CAAC;QAC5E,YAAY,EAAE,IAAI,qBAAqB,CAAC;YACtC,eAAe,EAAE,aAAa;YAC9B,IAAI,EAAE,kCAAkC;SACzC,CAAC;QACF,KAAK;KACN,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,4BAA4B,CAC1C,EAAc,EACd,KAAY;IAEZ,OAAO,IAAI,uBAAuB,CAAC;QACjC,0BAA0B,EAAE,IAAI,4BAA4B,CAAC,EAAE,EAAE,EAAE,CAAC;QACpE,eAAe,EAAE,IAAI,iBAAiB,CAAC,EAAE,EAAE,EAAE,CAAC;QAC9C,KAAK;KACN,CAAC,CAAA;AACJ,CAAC"}
1	+ {"version":3,"file":"wireCredentialServices.js","sourceRoot":"","sources":["../../src/infrastructure/wireCredentialServices.ts"],"names":[],"mappings":"AAMA,OAAO,EACL,aAAa,EACb,yBAAyB,EACzB,wBAAwB,EACxB,2BAA2B,EAC3B,2BAA2B,EAC3B,mBAAmB,EACnB,wBAAwB,EACxB,kBAAkB,EAClB,kCAAkC,EAClC,4BAA4B,EAC5B,qBAAqB,EACrB,eAAe,EACf,iBAAiB,EACjB,uBAAuB,EAEvB,uBAAuB,GACxB,MAAM,2BAA2B,CAAA;AAClC,OAAO,EAAE,6BAA6B,EAAE,MAAM,qBAAqB,CAAA;AAGnE,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAA;AACnD,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAA;AAC5E,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAA;AACpE,OAAO,EAAE,gCAAgC,EAAE,MAAM,iDAAiD,CAAA;AAClG,OAAO,EAAE,yBAAyB,EAAE,MAAM,0CAA0C,CAAA;AACpF,OAAO,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAA;AAChF,OAAO,EAAE,4BAA4B,EAAE,MAAM,6CAA6C,CAAA;AAC1F,OAAO,EAAE,qCAAqC,EAAE,MAAM,sDAAsD,CAAA;AAC5G,OAAO,EAAE,0BAA0B,EAAE,MAAM,2CAA2C,CAAA;AACtF,OAAO,EAAE,wBAAwB,EAAE,MAAM,yCAAyC,CAAA;AAClF,OAAO,EACL,gCAAgC,EAChC,kCAAkC,GACnC,MAAM,iDAAiD,CAAA;AACxD,OAAO,EAAE,8BAA8B,EAAE,MAAM,+CAA+C,CAAA;AAC9F,OAAO,EAAE,sBAAsB,EAAE,MAAM,uCAAuC,CAAA;AAC9E,OAAO,EAAE,gCAAgC,EAAE,MAAM,iDAAiD,CAAA;AAClG,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAA;AAC5E,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAA;AAE7C,0FAA0F;AAC1F,+EAA+E;AAC/E,0FAA0F;AAC1F,2FAA2F;AAC3F,sEAAsE;AAEtE;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CACtC,GAAQ,EACR,EAAc,EACd,KAAY;IAEZ,MAAM,eAAe,GAAG,GAAG,CAAC,cAAc,EAAE,IAAI,EAAE,CAAA;IAClD,IAAI,CAAC,eAAe;QAAE,OAAO,SAAS,CAAA;IACtC,OAAO,IAAI,2BAA2B,CAAC;QACrC,mCAAmC,EAAE,IAAI,qCAAqC,CAAC,EAAE,EAAE,EAAE,CAAC;QACtF,mBAAmB,EAAE,IAAI,qBAAqB,CAAC,EAAE,EAAE,EAAE,CAAC;QACtD,YAAY,EAAE,IAAI,qBAAqB,CAAC;YACtC,eAAe;YACf,IAAI,EAAE,oCAAoC;SAC3C,CAAC;QACF,WAAW,EAAE,IAAI,iBAAiB,EAAE;QACpC,KAAK;KACN,CAAC,CAAA;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAChC,GAAQ,EACR,EAAc,EACd,KAAY;IAEZ,MAAM,eAAe,GAAG,GAAG,CAAC,cAAc,EAAE,IAAI,EAAE,CAAA;IAClD,IAAI,CAAC,eAAe;QAAE,OAAO,SAAS,CAAA;IACtC,OAAO,IAAI,aAAa,CAAC;QACvB,wBAAwB,EAAE,IAAI,0BAA0B,CAAC,EAAE,EAAE,EAAE,CAAC;QAChE,mBAAmB,EAAE,IAAI,qBAAqB,CAAC,EAAE,EAAE,EAAE,CAAC;QACtD,YAAY,EAAE,IAAI,qBAAqB,CAAC;YACtC,eAAe;YACf,IAAI,EAAE,+BAA+B;SACtC,CAAC;QACF,WAAW,EAAE,IAAI,iBAAiB,EAAE;QACpC,KAAK;KACN,CAAC,CAAA;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB,CACtC,GAAQ,EACR,EAAc,EACd,KAAY;IAEZ,MAAM,MAAM,GAAG,GAAG,CAAC,cAAc,EAAE,IAAI,EAAE,CAAA;IACzC,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAA;IAC7B,OAAO,IAAI,mBAAmB,CAAC;QAC7B,UAAU,EAAE,IAAI,wBAAwB,CAAC,EAAE,EAAE,EAAE,CAAC;QAChD,MAAM;QACN,WAAW,EAAE,IAAI,iBAAiB,EAAE;QACpC,KAAK;KACN,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gCAAgC,CAC9C,GAAQ,EACR,EAAc,EACd,KAAY;IAEZ,MAAM,eAAe,GAAG,GAAG,CAAC,cAAc,EAAE,IAAI,EAAE,CAAA;IAClD,IAAI,CAAC,eAAe;QAAE,OAAO,SAAS,CAAA;IACtC,OAAO,IAAI,2BAA2B,CAAC;QACrC,8BAA8B,EAAE,IAAI,gCAAgC,CAAC,EAAE,EAAE,EAAE,CAAC;QAC5E,gCAAgC,EAAE,IAAI,kCAAkC,CAAC,EAAE,EAAE,EAAE,CAAC;QAChF,YAAY,EAAE,IAAI,qBAAqB,CAAC;YACtC,eAAe;YACf,IAAI,EAAE,oCAAoC;SAC3C,CAAC;QACF,cAAc,EAAE,IAAI,6BAA6B,EAAE;QACnD,WAAW,EAAE,IAAI,iBAAiB,EAAE;QACpC,KAAK;KACN,CAAC,CAAA;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,8BAA8B,CAC5C,GAAQ,EACR,EAAc,EACd,KAAY;IAEZ,MAAM,eAAe,GAAG,GAAG,CAAC,cAAc,EAAE,IAAI,EAAE,CAAA;IAClD,IAAI,CAAC,eAAe;QAAE,OAAO,SAAS,CAAA;IACtC,OAAO,IAAI,yBAAyB,CAAC;QACnC,4BAA4B,EAAE,IAAI,8BAA8B,CAAC,EAAE,EAAE,EAAE,CAAC;QACxE,YAAY,EAAE,IAAI,qBAAqB,CAAC;YACtC,eAAe;YACf,IAAI,EAAE,mCAAmC;SAC1C,CAAC;QACF,KAAK;QACL,4EAA4E;QAC5E,iFAAiF;QACjF,8EAA8E;QAC9E,oBAAoB,EAAE,GAAG,CAAC,sBAAsB,EAAE,IAAI,EAAE,KAAK,MAAM;KACpE,CAAC,CAAA;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CACpC,GAAQ,EACR,EAAc,EACd,KAAY;AACZ,yFAAyF;AACzF,qFAAqF;AACrF,iFAAiF;AACjF,sBAA+C;AAC/C,gGAAgG;AAChG,gGAAgG;AAChG,oFAAoF;AACpF,gBAAiD;IAEjD,MAAM,eAAe,GAAG,GAAG,CAAC,cAAc,EAAE,IAAI,EAAE,CAAA;IAClD,IAAI,CAAC,eAAe;QAAE,OAAO,SAAS,CAAA;IACtC,OAAO,IAAI,iBAAiB,CAAC;QAC3B,oBAAoB,EAAE,IAAI,sBAAsB,CAAC,EAAE,EAAE,EAAE,CAAC;QACxD,YAAY,EAAE,IAAI,qBAAqB,CAAC,EAAE,eAAe,EAAE,IAAI,EAAE,yBAAyB,EAAE,CAAC;QAC7F,KAAK;QACL,GAAG,CAAC,sBAAsB,CAAC,CAAC,CAAC,EAAE,sBAAsB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,GAAG,CAAC,gBAAgB;YAClB,CAAC,CAAC;gBACE,eAAe,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAChC,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,gBAAgB,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS;aAC/E;YACH,CAAC,CAAC,EAAE,CAAC;KACR,CAAC,CAAA;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,2BAA2B,CACzC,GAAQ,EACR,EAAc,EACd,KAAY;IAEZ,MAAM,WAAW,GAAG,sBAAsB,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK,CAAC,CAAA;IAC1D,OAAO,WAAW,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;AACxF,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,6BAA6B,CAC3C,GAAQ,EACR,EAAc,EACd,KAAY,EACZ,OAAkC,EAClC,aAAqB;IAErB,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAA;IAC9B,OAAO,IAAI,wBAAwB,CAAC;QAClC,8BAA8B,EAAE,IAAI,gCAAgC,CAAC,EAAE,EAAE,EAAE,CAAC;QAC5E,OAAO;QACP,KAAK;QACL,OAAO,EAAE,UAAU,CAAC,YAAY,EAAE,GAAG,CAAC,IAAI,SAAS;QACnD,wFAAwF;QACxF,8DAA8D;QAC9D,iBAAiB,EAAE,uBAAuB,CAAC,aAAa,CAAC;KAC1D,CAAC,CAAA;AACJ,CAAC;AACD;;;;;;GAMG;AACH,MAAM,UAAU,uBAAuB,CACrC,GAAQ,EACR,EAAc,EACd,KAAY;IAEZ,MAAM,aAAa,GAAG,GAAG,CAAC,cAAc,EAAE,IAAI,EAAE,CAAA;IAChD,IAAI,CAAC,aAAa;QAAE,OAAO,SAAS,CAAA;IACpC,OAAO,IAAI,kBAAkB,CAAC;QAC5B,qBAAqB,EAAE,IAAI,uBAAuB,CAAC,EAAE,EAAE,EAAE,CAAC;QAC1D,YAAY,EAAE,IAAI,qBAAqB,CAAC;YACtC,eAAe,EAAE,aAAa;YAC9B,IAAI,EAAE,wBAAwB;SAC/B,CAAC;QACF,eAAe,EAAE,IAAI,iBAAiB,CAAC,EAAE,EAAE,EAAE,CAAC;QAC9C,KAAK;KACN,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,iCAAiC,CAC/C,GAAQ,EACR,EAAc,EACd,KAAY;IAEZ,MAAM,aAAa,GAAG,GAAG,CAAC,cAAc,EAAE,IAAI,EAAE,CAAA;IAChD,IAAI,CAAC,aAAa;QAAE,OAAO,SAAS,CAAA;IACpC,OAAO,IAAI,4BAA4B,CAAC;QACtC,8BAA8B,EAAE,IAAI,gCAAgC,CAAC,EAAE,EAAE,EAAE,CAAC;QAC5E,YAAY,EAAE,IAAI,qBAAqB,CAAC;YACtC,eAAe,EAAE,aAAa;YAC9B,IAAI,EAAE,kCAAkC;SACzC,CAAC;QACF,KAAK;KACN,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,oBAAoB,CAClC,GAAQ,EACR,EAAc,EACd,KAAY;IAEZ,MAAM,aAAa,GAAG,GAAG,CAAC,cAAc,EAAE,IAAI,EAAE,CAAA;IAChD,IAAI,CAAC,aAAa;QAAE,OAAO,SAAS,CAAA;IACpC,OAAO,IAAI,eAAe,CAAC;QACzB,uBAAuB,EAAE,IAAI,yBAAyB,CAAC,EAAE,EAAE,EAAE,CAAC;QAC9D,YAAY,EAAE,IAAI,qBAAqB,CAAC;YACtC,eAAe,EAAE,aAAa;YAC9B,IAAI,EAAE,qBAAqB;SAC5B,CAAC;QACF,KAAK;KACN,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,4BAA4B,CAC1C,EAAc,EACd,KAAY;IAEZ,OAAO,IAAI,uBAAuB,CAAC;QACjC,0BAA0B,EAAE,IAAI,4BAA4B,CAAC,EAAE,EAAE,EAAE,CAAC;QACpE,eAAe,EAAE,IAAI,iBAAiB,CAAC,EAAE,EAAE,EAAE,CAAC;QAC9C,KAAK;KACN,CAAC,CAAA;AACJ,CAAC"}

package/migrations/0082_mcp_oauth_grants.sql ADDED Viewed

@@ -0,0 +1,27 @@
+-- Per-workspace OAUTH GRANTS for remote (http) MCP tool servers (sealed).
+--
+-- A tool server declares its credentials by NAME and the value is resolved per dispatch through
+-- the capability-credential chain, which is the right answer for a static token and no answer at
+-- all for the OAuth-first vendor ecosystem (Figma, Atlassian, Slack and Linear remote MCP): those
+-- servers issue a token to a CLIENT after a person authorises it, and the token expires. This is
+-- the home for what comes out of that: the access token, the refresh token, and the non-secret
+-- summary the connection panel renders.
+--
+-- Sealed at rest by the SecretCipher (tag 'cat-factory:mcp-oauth'), so the row carries no token in
+-- the clear and can ride the mothership's persistence RPC, exactly like capability_credentials.
+--
+-- ONE ROW PER (workspace, server), unlike the one-blob-per-workspace credential store beside it.
+-- The writes differ: a credential row is edited by a human filling in a checklist, while a grant
+-- row is rewritten by a REFRESH on the dispatch path, and two dispatches refreshing two different
+-- servers at once is the ordinary case. Per-server rows keep those writes off each other, and the
+-- rev then only settles a race between two refreshes of the SAME grant, which is what it is for.
+CREATE TABLE mcp_oauth_grants (
+  workspace_id TEXT    NOT NULL,
+  server_id    TEXT    NOT NULL,               -- McpServerDefinition.id
+  tokens       TEXT    NOT NULL,               -- sealed JSON: access/refresh token, expiry, scope
+  summary      TEXT    NOT NULL DEFAULT '{}',  -- non-secret JSON the operator surface renders
+  rev          INTEGER NOT NULL DEFAULT 0,     -- optimistic concurrency for the refresh path
+  created_at   INTEGER NOT NULL,
+  updated_at   INTEGER NOT NULL,
+  PRIMARY KEY (workspace_id, server_id)
+);

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "@cat-factory/worker",
-  "version": "0.157.0",
+  "version": "0.159.0",
   "description": "Reusable Cloudflare Worker library (Hono + D1) exposing the Agent Architecture Board core: the `createApp()` Hono factory, the default fetch/scheduled/queue handler, and the Durable Object + Workflow classes. Deployments (see deploy/backend) supply the wrangler.toml + config and re-export these.",
   "repository": {
     "type": "git",
@@ -12,7 +12,8 @@
     "migrations",
     "telemetry-migrations",
     "sandbox-migrations",
-    "migrations-provisioning"
+    "migrations-provisioning",
+    "audit-migrations"
   ],
   "type": "module",
   "main": "./dist/index.js",
@@ -42,22 +43,22 @@
     "pino": "^10.3.1",
     "valibot": "^1.4.2",
     "workers-ai-provider": "^4.0.0",
-    "@cat-factory/agents": "0.112.5",
-    "@cat-factory/caching": "0.14.25",
-    "@cat-factory/consensus": "0.14.25",
-    "@cat-factory/contracts": "0.244.0",
-    "@cat-factory/eks": "0.1.235",
-    "@cat-factory/gates": "0.9.4",
-    "@cat-factory/gitlab": "0.15.40",
-    "@cat-factory/integrations": "0.130.1",
-    "@cat-factory/kernel": "0.243.0",
-    "@cat-factory/observability-langfuse": "0.10.9",
-    "@cat-factory/observability-otel": "0.13.1",
-    "@cat-factory/orchestration": "0.211.0",
-    "@cat-factory/prompt-fragments": "0.15.70",
-    "@cat-factory/provider-cloudflare": "0.7.387",
-    "@cat-factory/server": "0.222.1",
-    "@cat-factory/spend": "0.15.7"
+    "@cat-factory/agents": "0.113.0",
+    "@cat-factory/caching": "0.14.27",
+    "@cat-factory/consensus": "0.14.27",
+    "@cat-factory/contracts": "0.246.0",
+    "@cat-factory/eks": "0.1.237",
+    "@cat-factory/gates": "0.9.6",
+    "@cat-factory/gitlab": "0.15.42",
+    "@cat-factory/integrations": "0.131.0",
+    "@cat-factory/kernel": "0.244.0",
+    "@cat-factory/observability-langfuse": "0.10.11",
+    "@cat-factory/observability-otel": "0.13.3",
+    "@cat-factory/orchestration": "0.213.0",
+    "@cat-factory/prompt-fragments": "0.15.72",
+    "@cat-factory/provider-cloudflare": "0.7.389",
+    "@cat-factory/spend": "0.15.9",
+    "@cat-factory/server": "0.223.0"
   },
   "devDependencies": {
     "@cloudflare/vitest-pool-workers": "^0.20.1",
@@ -65,7 +66,7 @@
     "typescript": "7.0.2",
     "vitest": "^4.1.10",
     "wrangler": "^4.118.0",
-    "@cat-factory/conformance": "0.30.3"
+    "@cat-factory/conformance": "0.31.0"
   },
   "scripts": {
     "build": "tsc -b tsconfig.build.json",

package/telemetry-migrations/0003_llm_cache_class_split.sql CHANGED Viewed

@@ -8,7 +8,7 @@
 -- token-burn instrumentation needs (docs/initiatives/token-burn-instrumentation.md).
 --
 -- The old column is DROPPED rather than dual-read: backwards compatibility is a non-goal, and
--- this table is pruned to LLM_CALL_METRICS_RETENTION_DAYS (3 by default), so the rows whose
+-- this table is pruned to LLM_CALL_METRICS_RETENTION_DAYS, so the rows whose
 -- `prompt_tokens` still carries the old inclusive semantics churn out within the window. No
 -- backfill is attempted for the same reason — and because the split genuinely cannot be
 -- recovered from one summed number.

package/telemetry-migrations/0004_llm_call_phase_turn.sql CHANGED Viewed

@@ -13,8 +13,8 @@
 -- has no job-scoped counter at all. A 0 there would read as "the first turn" and quietly sort
 -- every proxied call to the front of its phase.
 --
--- No backfill and no index: this table is pruned to LLM_CALL_METRICS_RETENTION_DAYS (3 by
--- default), so pre-axis rows churn out within the window, and the per-execution rollup already
+-- No backfill and no index: this table is pruned to LLM_CALL_METRICS_RETENTION_DAYS, so
+-- pre-axis rows churn out within the window, and the per-execution rollup already
 -- rides idx_llm_call_metrics_execution.
 ALTER TABLE llm_call_metrics ADD COLUMN phase TEXT NOT NULL DEFAULT '';
 ALTER TABLE llm_call_metrics ADD COLUMN turn_index INTEGER;