@cat-factory/worker 0.6.0

package/dist/infrastructure/tasks/GitHubIssuesProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"GitHubIssuesProvider.js","sourceRoot":"","sources":["../../../src/infrastructure/tasks/GitHubIssuesProvider.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,aAAa,EACb,eAAe,GAQhB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAE,wBAAwB,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAA;AAgBvF,MAAM,OAAO,oBAAoB;IAIF,IAAI;IAHxB,IAAI,GAAG,QAAiB,CAAA;IACxB,UAAU,GAAG,wBAAwB,CAAA;IAE9C,YAA6B,IAAsC;oBAAtC,IAAI;IAAqC,CAAC;IAEvE;;;;OAIG;IACH,mBAAmB,CAAC,MAAuB;QACzC,OAAO,EAAE,WAAW,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAA;IAC7C,CAAC;IAED,QAAQ,CAAC,KAAa;QACpB,OAAO,iBAAiB,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAA;IACrD,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,YAA6B,EAAE,UAAkB;QAC/D,MAAM,EAAE,GAAG,iBAAiB,CAAC,0BAA0B,CAAC,UAAU,CAAC,CAAA;QACnE,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,MAAM,IAAI,eAAe,CAAC,IAAI,UAAU,yCAAyC,CAAC,CAAA;QACpF,CAAC;QACD,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,EAAE,CAAC,KAAK,CAAC,CAAA;QACjE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAClD,cAAc,EACd,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,EAClC,EAAE,CAAC,MAAM,CACV,CAAA;QACD,OAAO;YACL,UAAU;YACV,GAAG,EAAE,MAAM,CAAC,GAAG,IAAI,iBAAiB,CAAC,cAAc,CAAC,EAAE,CAAC;YACvD,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,4EAA4E;YAC5E,uEAAuE;YACvE,0CAA0C;YAC1C,MAAM,EAAE,MAAM,CAAC,KAAK;YACpB,IAAI,EAAE,OAAO;YACb,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,WAAW,EAAE,MAAM,CAAC,IAAI;YACxB,QAAQ,EAAE,MAAM,CAAC,QAAQ;SAC1B,CAAA;IACH,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,MAAM,CACV,YAA6B,EAC7B,KAAa,EACb,WAAmB;QAEnB,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,cAAc,CAAC,WAAW,CAAC,CAAA;QAC9E,IAAI,CAAC,YAAY;YAAE,OAAO,EAAE,CAAA;QAC5B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,YAAY;aACtC,YAAY,CAAC,YAAY,CAAC,cAAc,EAAE,KAAK,EAAE,EAAE,CAAC;aACpD,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAA;QAClB,MAAM,GAAG,GAAuB,EAAE,CAAA;QAClC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;QAC9B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,UAAU,GAAG,iBAAiB,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAA;YAC/D,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC;gBAAE,SAAQ;YAClC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;YACpB,GAAG,CAAC,IAAI,CAAC;gBACP,MAAM,EAAE,QAAQ;gBAChB,UAAU;gBACV,KAAK,EAAE,GAAG,CAAC,KAAK;gBAChB,GAAG,EAAE,GAAG,CAAC,GAAG;gBACZ,MAAM,EAAE,GAAG,CAAC,KAAK;gBACjB,OAAO,EAAE,EAAE;aACZ,CAAC,CAAA;QACJ,CAAC;QACD,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IACzB,CAAC;IAED;;;;;OAKG;IACK,KAAK,CAAC,qBAAqB,CAAC,KAAa;QAC/C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,UAAU,EAAE,CAAA;QACzD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,WAAW,EAAE,CAAC,CAAA;QACtF,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,aAAa,CACrB,yCAAyC,KAAK,+DAA+D,CAC9G,CAAA;QACH,CAAC;QACD,OAAO,KAAK,CAAC,cAAc,CAAA;IAC7B,CAAC;CACF"}

package/dist/infrastructure/tasks/JiraProvider.d.ts

@@ -0,0 +1,29 @@
+import { type TaskContent, type TaskCredentials, type TaskSearchResult, type TaskSourceProvider, type NormalizedTaskConnection } from '@cat-factory/kernel';
+/** Carries the HTTP status so callers can surface a meaningful error. */
+export declare class JiraApiError extends Error {
+    readonly status: number;
+    constructor(status: number, message: string);
+}
+export declare class JiraProvider implements TaskSourceProvider {
+    readonly kind: 'jira';
+    readonly descriptor: {
+        source: "github" | "jira";
+        label: string;
+        icon: string;
+        credentialFields: {
+            key: string;
+            label: string;
+            help?: string | undefined;
+            placeholder?: string | undefined;
+            secret?: boolean | undefined;
+        }[];
+        refLabel: string;
+        refPlaceholder: string;
+        searchable?: boolean | undefined;
+    };
+    normalizeConnection(input: TaskCredentials): NormalizedTaskConnection;
+    parseRef(input: string): string | null;
+    fetchTask(credentials: TaskCredentials, externalId: string): Promise<TaskContent>;
+    search(credentials: TaskCredentials, query: string): Promise<TaskSearchResult[]>;
+}
+//# sourceMappingURL=JiraProvider.d.ts.map

package/dist/infrastructure/tasks/JiraProvider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"JiraProvider.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/tasks/JiraProvider.ts"],"names":[],"mappings":"AAAA,OAAO,EAIL,KAAK,WAAW,EAChB,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EACvB,KAAK,wBAAwB,EAC9B,MAAM,qBAAqB,CAAA;AAa5B,yEAAyE;AACzE,qBAAa,YAAa,SAAQ,KAAK;IAEnC,QAAQ,CAAC,MAAM,EAAE,MAAM;IADzB,YACW,MAAM,EAAE,MAAM,EACvB,OAAO,EAAE,MAAM,EAIhB;CACF;AAsBD,qBAAa,YAAa,YAAW,kBAAkB;IACrD,QAAQ,CAAC,IAAI,EAAG,MAAM,CAAS;IAC/B,QAAQ,CAAC,UAAU;;;;;;;;;;;;;;MAAkB;IAErC,mBAAmB,CAAC,KAAK,EAAE,eAAe,GAAG,wBAAwB,CAepE;IAED,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAErC;IAEK,SAAS,CAAC,WAAW,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CA4CtF;IAEK,MAAM,CAAC,WAAW,EAAE,eAAe,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC,CA6BrF;CACF"}

package/dist/infrastructure/tasks/JiraProvider.js

@@ -0,0 +1,109 @@
+import { ValidationError, atlassianLogic, } from '@cat-factory/kernel';
+import { JIRA_DESCRIPTOR, jiraLogic } from '@cat-factory/integrations';
+// JiraProvider: the task-source provider for Jira Cloud. It authenticates with
+// HTTP Basic (account email + API token, the same scheme as Confluence), fetches
+// an issue via the REST v3 API, and maps it onto the structured TaskContent —
+// converting the ADF description and comment bodies to the Markdown the generic
+// excerpt/prompt logic consumes. All Jira-specific *pure* logic (ref parsing, ADF
+// conversion) lives in `@cat-factory/integrations` so it is unit-testable; this class is
+// the thin `fetch` shell around it. No SDK — fetch + `btoa` suffice.
+const USER_AGENT = 'cat-factory';
+/** Carries the HTTP status so callers can surface a meaningful error. */
+export class JiraApiError extends Error {
+    status;
+    constructor(status, message) {
+        super(message);
+        this.status = status;
+        this.name = 'JiraApiError';
+    }
+}
+export class JiraProvider {
+    kind = 'jira';
+    descriptor = JIRA_DESCRIPTOR;
+    normalizeConnection(input) {
+        const baseUrlRaw = input.baseUrl?.trim();
+        const accountEmail = input.accountEmail?.trim();
+        const apiToken = input.apiToken?.trim();
+        if (!baseUrlRaw || !accountEmail || !apiToken) {
+            throw new ValidationError('Jira requires a site URL, account email and API token');
+        }
+        const baseUrl = atlassianLogic.normalizeAtlassianBaseUrl(baseUrlRaw);
+        // Guard against SSRF: the stored base URL is later fetched with the
+        // workspace's credentials, so it must be a public https host.
+        atlassianLogic.assertSafeAtlassianBaseUrl(baseUrl);
+        return {
+            credentials: { baseUrl, accountEmail, apiToken },
+            label: baseUrl,
+        };
+    }
+    parseRef(input) {
+        return jiraLogic.parseJiraRef(input);
+    }
+    async fetchTask(credentials, externalId) {
+        const base = credentials.baseUrl.replace(/\/+$/, '');
+        const fields = 'summary,description,status,issuetype,assignee,priority,labels,comment';
+        const url = `${base}/rest/api/3/issue/${encodeURIComponent(externalId)}?fields=${fields}`;
+        const auth = btoa(`${credentials.accountEmail}:${credentials.apiToken}`);
+        const res = await fetch(url, {
+            method: 'GET',
+            headers: {
+                authorization: `Basic ${auth}`,
+                accept: 'application/json',
+                'user-agent': USER_AGENT,
+            },
+        });
+        if (!res.ok) {
+            const text = await res.text().catch(() => '');
+            throw new JiraApiError(res.status, `Jira GET ${url} → ${res.status}: ${text.slice(0, 300)}`);
+        }
+        const json = (await res.json().catch(() => null));
+        if (!json || !json.key || !json.fields) {
+            throw new JiraApiError(502, `Jira returned an unexpected body for issue ${externalId}`);
+        }
+        const f = json.fields;
+        const comments = (f.comment?.comments ?? []).map((c) => ({
+            author: c.author?.displayName ?? '',
+            createdAt: c.created ?? '',
+            body: jiraLogic.adfToMarkdown(c.body),
+        }));
+        return {
+            externalId: json.key,
+            url: `${base}/browse/${json.key}`,
+            title: f.summary ?? '(untitled)',
+            status: f.status?.name ?? '',
+            type: f.issuetype?.name ?? '',
+            assignee: f.assignee?.displayName ?? null,
+            priority: f.priority?.name ?? null,
+            labels: Array.isArray(f.labels) ? f.labels : [],
+            description: jiraLogic.adfToMarkdown(f.description),
+            comments,
+        };
+    }
+    async search(credentials, query) {
+        const base = credentials.baseUrl.replace(/\/+$/, '');
+        // Re-validate the stored base before fetching with the workspace's credentials
+        // (defense-in-depth against a base that became unsafe since connect time).
+        atlassianLogic.assertSafeAtlassianBaseUrl(base);
+        const jql = encodeURIComponent(jiraLogic.buildJiraSearchJql(query));
+        // `/rest/api/3/search/jql` is the current enhanced-search endpoint; the legacy
+        // GET `/rest/api/3/search` was removed by Atlassian (May 2025). The `issues[]`
+        // response shape is unchanged, so `parseJiraSearchResults` still applies.
+        const url = `${base}/rest/api/3/search/jql?jql=${jql}&fields=summary,status&maxResults=20`;
+        const auth = btoa(`${credentials.accountEmail}:${credentials.apiToken}`);
+        const res = await fetch(url, {
+            method: 'GET',
+            headers: {
+                authorization: `Basic ${auth}`,
+                accept: 'application/json',
+                'user-agent': USER_AGENT,
+            },
+        });
+        if (!res.ok) {
+            const text = await res.text().catch(() => '');
+            throw new JiraApiError(res.status, `Jira search ${url} → ${res.status}: ${text.slice(0, 300)}`);
+        }
+        const json = await res.json().catch(() => null);
+        return jiraLogic.parseJiraSearchResults(json, base);
+    }
+}
+//# sourceMappingURL=JiraProvider.js.map

package/dist/infrastructure/tasks/JiraProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"JiraProvider.js","sourceRoot":"","sources":["../../../src/infrastructure/tasks/JiraProvider.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,eAAe,EACf,cAAc,GAOf,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAA;AAEtE,+EAA+E;AAC/E,iFAAiF;AACjF,8EAA8E;AAC9E,gFAAgF;AAChF,kFAAkF;AAClF,yFAAyF;AACzF,qEAAqE;AAErE,MAAM,UAAU,GAAG,aAAa,CAAA;AAEhC,yEAAyE;AACzE,MAAM,OAAO,YAAa,SAAQ,KAAK;IAE1B,MAAM;IADjB,YACW,MAAc,EACvB,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAA;sBAHL,MAAM;QAIf,IAAI,CAAC,IAAI,GAAG,cAAc,CAAA;IAC5B,CAAC;CACF;AAsBD,MAAM,OAAO,YAAY;IACd,IAAI,GAAG,MAAe,CAAA;IACtB,UAAU,GAAG,eAAe,CAAA;IAErC,mBAAmB,CAAC,KAAsB;QACxC,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,CAAA;QACxC,MAAM,YAAY,GAAG,KAAK,CAAC,YAAY,EAAE,IAAI,EAAE,CAAA;QAC/C,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAA;QACvC,IAAI,CAAC,UAAU,IAAI,CAAC,YAAY,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC9C,MAAM,IAAI,eAAe,CAAC,uDAAuD,CAAC,CAAA;QACpF,CAAC;QACD,MAAM,OAAO,GAAG,cAAc,CAAC,yBAAyB,CAAC,UAAU,CAAC,CAAA;QACpE,oEAAoE;QACpE,8DAA8D;QAC9D,cAAc,CAAC,0BAA0B,CAAC,OAAO,CAAC,CAAA;QAClD,OAAO;YACL,WAAW,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE;YAChD,KAAK,EAAE,OAAO;SACf,CAAA;IACH,CAAC;IAED,QAAQ,CAAC,KAAa;QACpB,OAAO,SAAS,CAAC,YAAY,CAAC,KAAK,CAAC,CAAA;IACtC,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,WAA4B,EAAE,UAAkB;QAC9D,MAAM,IAAI,GAAG,WAAW,CAAC,OAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;QACrD,MAAM,MAAM,GAAG,uEAAuE,CAAA;QACtF,MAAM,GAAG,GAAG,GAAG,IAAI,qBAAqB,kBAAkB,CAAC,UAAU,CAAC,WAAW,MAAM,EAAE,CAAA;QACzF,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,WAAW,CAAC,YAAY,IAAI,WAAW,CAAC,QAAQ,EAAE,CAAC,CAAA;QAExE,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAC3B,MAAM,EAAE,KAAK;YACb,OAAO,EAAE;gBACP,aAAa,EAAE,SAAS,IAAI,EAAE;gBAC9B,MAAM,EAAE,kBAAkB;gBAC1B,YAAY,EAAE,UAAU;aACzB;SACF,CAAC,CAAA;QAEF,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAA;YAC7C,MAAM,IAAI,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,YAAY,GAAG,MAAM,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAA;QAC9F,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAyB,CAAA;QACzE,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACvC,MAAM,IAAI,YAAY,CAAC,GAAG,EAAE,8CAA8C,UAAU,EAAE,CAAC,CAAA;QACzF,CAAC;QAED,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,CAAA;QACrB,MAAM,QAAQ,GAAkB,CAAC,CAAC,CAAC,OAAO,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACtE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,WAAW,IAAI,EAAE;YACnC,SAAS,EAAE,CAAC,CAAC,OAAO,IAAI,EAAE;YAC1B,IAAI,EAAE,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC;SACtC,CAAC,CAAC,CAAA;QAEH,OAAO;YACL,UAAU,EAAE,IAAI,CAAC,GAAG;YACpB,GAAG,EAAE,GAAG,IAAI,WAAW,IAAI,CAAC,GAAG,EAAE;YACjC,KAAK,EAAE,CAAC,CAAC,OAAO,IAAI,YAAY;YAChC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,IAAI,IAAI,EAAE;YAC5B,IAAI,EAAE,CAAC,CAAC,SAAS,EAAE,IAAI,IAAI,EAAE;YAC7B,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,WAAW,IAAI,IAAI;YACzC,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,IAAI,IAAI,IAAI;YAClC,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;YAC/C,WAAW,EAAE,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC;YACnD,QAAQ;SACT,CAAA;IACH,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,WAA4B,EAAE,KAAa;QACtD,MAAM,IAAI,GAAG,WAAW,CAAC,OAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;QACrD,+EAA+E;QAC/E,2EAA2E;QAC3E,cAAc,CAAC,0BAA0B,CAAC,IAAI,CAAC,CAAA;QAC/C,MAAM,GAAG,GAAG,kBAAkB,CAAC,SAAS,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAA;QACnE,+EAA+E;QAC/E,+EAA+E;QAC/E,0EAA0E;QAC1E,MAAM,GAAG,GAAG,GAAG,IAAI,8BAA8B,GAAG,sCAAsC,CAAA;QAC1F,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,WAAW,CAAC,YAAY,IAAI,WAAW,CAAC,QAAQ,EAAE,CAAC,CAAA;QAExE,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAC3B,MAAM,EAAE,KAAK;YACb,OAAO,EAAE;gBACP,aAAa,EAAE,SAAS,IAAI,EAAE;gBAC9B,MAAM,EAAE,kBAAkB;gBAC1B,YAAY,EAAE,UAAU;aACzB;SACF,CAAC,CAAA;QACF,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAA;YAC7C,MAAM,IAAI,YAAY,CACpB,GAAG,CAAC,MAAM,EACV,eAAe,GAAG,MAAM,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAC5D,CAAA;QACH,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAA;QAC/C,OAAO,SAAS,CAAC,sBAAsB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;IACrD,CAAC;CACF"}

package/dist/infrastructure/workflows/BootstrapWorkflow.d.ts

@@ -0,0 +1,21 @@
+import { WorkflowEntrypoint, type WorkflowEvent, type WorkflowStep } from 'cloudflare:workers';
+import type { Env } from '../env';
+/** Params passed to a BootstrapWorkflow instance (its id is the bootstrap job id). */
+export interface BootstrapWorkflowParams {
+    workspaceId: string;
+    jobId: string;
+}
+/**
+ * Durable driver for one "bootstrap repo" run, mirroring ExecutionWorkflow. It
+ * holds NO business logic — every decision lives in core's BootstrapService. Each
+ * iteration polls the bootstrap container once inside a retriable, checkpointed
+ * `step.do` and sleeps durably between polls, so the long container run survives
+ * eviction while the driver stays cheap. The poll itself persists subtask progress
+ * and finalises the board frame on a terminal outcome; this loop only decides when
+ * to stop. The container's own inactivity + max-duration watchdogs bound the work;
+ * `jobMaxPolls` is a backstop in case it never reports terminal.
+ */
+export declare class BootstrapWorkflow extends WorkflowEntrypoint<Env, BootstrapWorkflowParams> {
+    run(event: WorkflowEvent<BootstrapWorkflowParams>, step: WorkflowStep): Promise<void>;
+}
+//# sourceMappingURL=BootstrapWorkflow.d.ts.map

package/dist/infrastructure/workflows/BootstrapWorkflow.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"BootstrapWorkflow.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/workflows/BootstrapWorkflow.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kBAAkB,EAClB,KAAK,aAAa,EAElB,KAAK,YAAY,EAElB,MAAM,oBAAoB,CAAA;AAE3B,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,QAAQ,CAAA;AAKjC,sFAAsF;AACtF,MAAM,WAAW,uBAAuB;IACtC,WAAW,EAAE,MAAM,CAAA;IACnB,KAAK,EAAE,MAAM,CAAA;CACd;AAQD;;;;;;;;;GASG;AACH,qBAAa,iBAAkB,SAAQ,kBAAkB,CAAC,GAAG,EAAE,uBAAuB,CAAC;IACtE,GAAG,CAChB,KAAK,EAAE,aAAa,CAAC,uBAAuB,CAAC,EAC7C,IAAI,EAAE,YAAY,GACjB,OAAO,CAAC,IAAI,CAAC,CAoDf;CACF"}

package/dist/infrastructure/workflows/BootstrapWorkflow.js

@@ -0,0 +1,72 @@
+import { WorkflowEntrypoint, } from 'cloudflare:workers';
+import { buildContainer } from '../container';
+import { loadConfig } from '../config';
+import { logger } from '../observability/logger';
+/** Per-step retry policy: a transient poll failure retries before the run fails. */
+const STEP_CONFIG = {
+    retries: { limit: 3, delay: '5 seconds', backoff: 'exponential' },
+    timeout: '2 minutes',
+};
+/**
+ * Durable driver for one "bootstrap repo" run, mirroring ExecutionWorkflow. It
+ * holds NO business logic — every decision lives in core's BootstrapService. Each
+ * iteration polls the bootstrap container once inside a retriable, checkpointed
+ * `step.do` and sleeps durably between polls, so the long container run survives
+ * eviction while the driver stays cheap. The poll itself persists subtask progress
+ * and finalises the board frame on a terminal outcome; this loop only decides when
+ * to stop. The container's own inactivity + max-duration watchdogs bound the work;
+ * `jobMaxPolls` is a backstop in case it never reports terminal.
+ */
+export class BootstrapWorkflow extends WorkflowEntrypoint {
+    async run(event, step) {
+        const { workspaceId, jobId } = event.payload;
+        const execConfig = loadConfig(this.env).execution;
+        const pollInterval = execConfig.jobPollInterval;
+        const log = logger.child({ workspaceId, jobId, workflow: 'bootstrap' });
+        // Consecutive failures to READ status — not the bootstrap failing. The agent
+        // can briefly make the container unresponsive while busy (cloning, installing,
+        // building); the job's real liveness is bounded container-side (inactivity +
+        // max-duration watchdogs), and a vanished container surfaces as a 404→failed
+        // value, so a *thrown* poll error is always transient. Tolerate a bounded run
+        // of them (reset on any good poll) rather than abandoning a healthy run on the
+        // first blip.
+        let pollReadFailures = 0;
+        for (let p = 0; p < execConfig.jobMaxPolls; p++) {
+            await step.sleep(`poll-wait-${p}`, pollInterval);
+            let result;
+            try {
+                result = (await step.do(`poll-${p}`, STEP_CONFIG, async () => {
+                    const container = buildContainer(this.env);
+                    if (!container.bootstrap) {
+                        throw new Error('Bootstrap module is not configured');
+                    }
+                    return container.bootstrap.service.pollBootstrapJob(workspaceId, jobId);
+                }));
+            }
+            catch (error) {
+                pollReadFailures += 1;
+                log.warn({ err: error instanceof Error ? error.message : String(error), pollReadFailures }, 'bootstrap poll could not read job status; treating as still running and retrying');
+                // Sustained unreachability: leave the job `running` so the cron sweep can
+                // re-drive it later (the container may recover, or report terminal, by then).
+                // Stop this instance to avoid burning the whole poll budget while wedged.
+                if (pollReadFailures >= execConfig.jobPollFailureTolerance) {
+                    log.error('bootstrap poll unreadable past tolerance; leaving for sweeper');
+                    return;
+                }
+                continue;
+            }
+            pollReadFailures = 0;
+            if (result.state === 'done') {
+                log.info('bootstrap run succeeded');
+                return;
+            }
+            if (result.state === 'failed') {
+                log.warn({ error: result.error }, 'bootstrap run failed');
+                return;
+            }
+            // still running — loop and poll again after the next durable sleep.
+        }
+        log.warn('bootstrap run did not finish within its polling budget');
+    }
+}
+//# sourceMappingURL=BootstrapWorkflow.js.map

package/dist/infrastructure/workflows/BootstrapWorkflow.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"BootstrapWorkflow.js","sourceRoot":"","sources":["../../../src/infrastructure/workflows/BootstrapWorkflow.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kBAAkB,GAKnB,MAAM,oBAAoB,CAAA;AAG3B,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAA;AACtC,OAAO,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAA;AAQhD,oFAAoF;AACpF,MAAM,WAAW,GAAG;IAClB,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,aAAa,EAAE;IACjE,OAAO,EAAE,WAAW;CACQ,CAAA;AAE9B;;;;;;;;;GASG;AACH,MAAM,OAAO,iBAAkB,SAAQ,kBAAgD;IAC5E,KAAK,CAAC,GAAG,CAChB,KAA6C,EAC7C,IAAkB;QAElB,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC,OAAO,CAAA;QAC5C,MAAM,UAAU,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,SAAS,CAAA;QACjD,MAAM,YAAY,GAAG,UAAU,CAAC,eAAwC,CAAA;QACxE,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,CAAA;QAEvE,6EAA6E;QAC7E,+EAA+E;QAC/E,6EAA6E;QAC7E,6EAA6E;QAC7E,8EAA8E;QAC9E,+EAA+E;QAC/E,cAAc;QACd,IAAI,gBAAgB,GAAG,CAAC,CAAA;QACxB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,WAAW,EAAE,CAAC,EAAE,EAAE,CAAC;YAChD,MAAM,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,EAAE,YAAY,CAAC,CAAA;YAChD,IAAI,MAA2B,CAAA;YAC/B,IAAI,CAAC;gBACH,MAAM,GAAG,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,WAAW,EAAE,KAAK,IAAI,EAAE;oBAC3D,MAAM,SAAS,GAAG,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;oBAC1C,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,CAAC;wBACzB,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAA;oBACvD,CAAC;oBACD,OAAO,SAAS,CAAC,SAAS,CAAC,OAAO,CAAC,gBAAgB,CAAC,WAAW,EAAE,KAAK,CAAC,CAAA;gBACzE,CAAC,CAAC,CAAwB,CAAA;YAC5B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,gBAAgB,IAAI,CAAC,CAAA;gBACrB,GAAG,CAAC,IAAI,CACN,EAAE,GAAG,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,gBAAgB,EAAE,EACjF,kFAAkF,CACnF,CAAA;gBACD,0EAA0E;gBAC1E,8EAA8E;gBAC9E,0EAA0E;gBAC1E,IAAI,gBAAgB,IAAI,UAAU,CAAC,uBAAuB,EAAE,CAAC;oBAC3D,GAAG,CAAC,KAAK,CAAC,+DAA+D,CAAC,CAAA;oBAC1E,OAAM;gBACR,CAAC;gBACD,SAAQ;YACV,CAAC;YACD,gBAAgB,GAAG,CAAC,CAAA;YACpB,IAAI,MAAM,CAAC,KAAK,KAAK,MAAM,EAAE,CAAC;gBAC5B,GAAG,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAA;gBACnC,OAAM;YACR,CAAC;YACD,IAAI,MAAM,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC9B,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,EAAE,sBAAsB,CAAC,CAAA;gBACzD,OAAM;YACR,CAAC;YACD,oEAAoE;QACtE,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,wDAAwD,CAAC,CAAA;IACpE,CAAC;CACF"}

package/dist/infrastructure/workflows/ExecutionWorkflow.d.ts

@@ -0,0 +1,15 @@
+import { WorkflowEntrypoint, type WorkflowEvent, type WorkflowStep } from 'cloudflare:workers';
+import type { Env } from '../env';
+import type { ExecutionWorkflowParams } from './WorkflowsWorkRunner';
+/**
+ * Durable driver for one pipeline run. It contains NO business logic — every
+ * decision lives in core's ExecutionService. Each loop iteration advances the
+ * run by exactly one agent step inside a retriable, checkpointed `step.do`, then
+ * either loops, parks on a human decision via `waitForEvent`, or stops. Because
+ * each committed step is memoised, a crash and replay never re-issues an
+ * already-completed LLM call.
+ */
+export declare class ExecutionWorkflow extends WorkflowEntrypoint<Env, ExecutionWorkflowParams> {
+    run(event: WorkflowEvent<ExecutionWorkflowParams>, step: WorkflowStep): Promise<void>;
+}
+//# sourceMappingURL=ExecutionWorkflow.d.ts.map

package/dist/infrastructure/workflows/ExecutionWorkflow.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ExecutionWorkflow.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/workflows/ExecutionWorkflow.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kBAAkB,EAClB,KAAK,aAAa,EAElB,KAAK,YAAY,EAElB,MAAM,oBAAoB,CAAA;AAG3B,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,QAAQ,CAAA;AAIjC,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAA;AAQpE;;;;;;;GAOG;AACH,qBAAa,iBAAkB,SAAQ,kBAAkB,CAAC,GAAG,EAAE,uBAAuB,CAAC;IACtE,GAAG,CAChB,KAAK,EAAE,aAAa,CAAC,uBAAuB,CAAC,EAC7C,IAAI,EAAE,YAAY,GACjB,OAAO,CAAC,IAAI,CAAC,CA6Lf;CACF"}

package/dist/infrastructure/workflows/ExecutionWorkflow.js

@@ -0,0 +1,169 @@
+import { WorkflowEntrypoint, } from 'cloudflare:workers';
+import { buildContainer } from '../container';
+import { loadConfig } from '../config';
+import { logger } from '../observability/logger';
+/** Per-step retry policy: failures retry a few times before the run is failed. */
+const STEP_CONFIG = {
+    retries: { limit: 3, delay: '5 seconds', backoff: 'exponential' },
+    timeout: '5 minutes',
+};
+/**
+ * Durable driver for one pipeline run. It contains NO business logic — every
+ * decision lives in core's ExecutionService. Each loop iteration advances the
+ * run by exactly one agent step inside a retriable, checkpointed `step.do`, then
+ * either loops, parks on a human decision via `waitForEvent`, or stops. Because
+ * each committed step is memoised, a crash and replay never re-issues an
+ * already-completed LLM call.
+ */
+export class ExecutionWorkflow extends WorkflowEntrypoint {
+    async run(event, step) {
+        const { workspaceId, executionId } = event.payload;
+        const execConfig = loadConfig(this.env).execution;
+        const decisionTimeout = execConfig.decisionTimeout;
+        const jobPollInterval = execConfig.jobPollInterval;
+        const ciPollInterval = execConfig.ciPollInterval;
+        const failRun = async (i, message, kind = 'agent', detail = null) => {
+            logger.warn({ workspaceId, executionId, step: i }, `failing run: ${message}`);
+            await step.do(`fail-${i}`, () => buildContainer(this.env).executionService.failRun(workspaceId, executionId, message, kind, detail));
+        };
+        for (let i = 0;; i++) {
+            let result;
+            try {
+                result = (await step.do(`advance-${i}`, STEP_CONFIG, () => buildContainer(this.env).executionService.advanceInstance(workspaceId, executionId, {
+                    rethrowAgentErrors: true,
+                })));
+            }
+            catch (error) {
+                // Retries exhausted: persist the failure and open the block for review.
+                await failRun(i, error instanceof Error ? error.message : String(error));
+                return;
+            }
+            // An async step (a container coding job) dispatched and parked. Poll it
+            // between durable sleeps until it finishes — each poll is its own short,
+            // retriable step, so the job can run far longer than one step's timeout
+            // while the driver stays cheap and survives eviction. The job's bound is
+            // enforced container-side (inactivity + max-duration watchdogs); `jobMaxPolls`
+            // is only a backstop in case it never reports a terminal state.
+            if (result.kind === 'awaiting_job') {
+                let polled = false;
+                // Consecutive failures to READ status — not the job failing. A coding step
+                // legitimately runs long shell commands (installing deps, build/test/e2e
+                // suites) that can briefly make the container unresponsive to a poll. The
+                // job's real liveness is bounded container-side (inactivity + max-duration
+                // watchdogs); eviction surfaces as a 404→failed value and a genuine job
+                // error as job_failed — both returned, not thrown. So a *thrown* poll error
+                // is always transient: tolerate a bounded run of them (reset on any good
+                // poll) rather than failing a healthy long-running job on the first blip.
+                let pollReadFailures = 0;
+                for (let p = 0; p < execConfig.jobMaxPolls; p++) {
+                    await step.sleep(`poll-wait-${i}-${p}`, jobPollInterval);
+                    try {
+                        result = (await step.do(`poll-${i}-${p}`, STEP_CONFIG, () => buildContainer(this.env).executionService.pollAgentJob(workspaceId, executionId)));
+                    }
+                    catch (error) {
+                        pollReadFailures += 1;
+                        const message = error instanceof Error ? error.message : String(error);
+                        logger.warn({ workspaceId, executionId, step: i, poll: p, pollReadFailures, err: message }, 'poll could not read job status; treating as still running and retrying');
+                        if (pollReadFailures >= execConfig.jobPollFailureTolerance) {
+                            await failRun(i, `Job status was unreadable for ${pollReadFailures} consecutive polls; ` +
+                                `the container appears unreachable (last error: ${message})`, 'timeout');
+                            return;
+                        }
+                        continue;
+                    }
+                    pollReadFailures = 0;
+                    if (result.kind !== 'awaiting_job') {
+                        polled = true;
+                        break;
+                    }
+                }
+                if (!polled && result.kind === 'awaiting_job') {
+                    await failRun(i, 'Implementation job did not finish within its polling budget', 'timeout');
+                    return;
+                }
+            }
+            // A polling gate step (`ci` / `conflicts`) is gating the PR on its precheck.
+            // Re-run the precheck between durable sleeps — mirroring the job-poll loop above
+            // — until the gate yields something terminal: a passing precheck returns
+            // `continue`, a dispatched helper agent returns `awaiting_job` (handled on the
+            // next outer-loop iteration), and a spent budget returns `job_failed`. Which gate
+            // is resolved inside `pollGate` from the current step, so one loop drives both.
+            // Each poll is its own short, retriable step so the gate can wait far longer than
+            // one step's timeout while the driver stays cheap and survives eviction.
+            if (result.kind === 'awaiting_gate') {
+                let settled = false;
+                let pollReadFailures = 0;
+                for (let p = 0; p < execConfig.ciMaxPolls; p++) {
+                    await step.sleep(`gate-wait-${i}-${p}`, ciPollInterval);
+                    try {
+                        result = (await step.do(`gate-poll-${i}-${p}`, STEP_CONFIG, () => buildContainer(this.env).executionService.pollGate(workspaceId, executionId)));
+                    }
+                    catch (error) {
+                        pollReadFailures += 1;
+                        const message = error instanceof Error ? error.message : String(error);
+                        logger.warn({ workspaceId, executionId, step: i, poll: p, pollReadFailures, err: message }, 'gate poll could not read its precheck; treating as still pending and retrying');
+                        if (pollReadFailures >= execConfig.jobPollFailureTolerance) {
+                            await failRun(i, `Gate precheck was unreadable for ${pollReadFailures} consecutive polls (last error: ${message})`, 'timeout');
+                            return;
+                        }
+                        continue;
+                    }
+                    pollReadFailures = 0;
+                    if (result.kind !== 'awaiting_gate') {
+                        settled = true;
+                        break;
+                    }
+                }
+                if (!settled && result.kind === 'awaiting_gate') {
+                    // Poll budget spent. Let the gate decide: a time-windowed watch gate
+                    // (post-release-health) PASSES (the window outlasted the budget with no
+                    // regression), while CI/conflicts resolve to a `job_failed` timeout the
+                    // checks below funnel through `failRun`. One policy, both runtimes.
+                    result = (await step.do(`gate-exhausted-${i}`, STEP_CONFIG, () => buildContainer(this.env).executionService.resolveGatePollExhaustion(workspaceId, executionId)));
+                }
+                // Fall through: the now-updated `result` (continue / done / awaiting_job /
+                // job_failed) is handled by the checks below and the next outer-loop iteration.
+            }
+            if (result.kind === 'job_failed') {
+                // An inline gate may carry the precise classification + diagnostic (e.g. an
+                // unparseable companion verdict → `companion_rejected` with its raw reply as
+                // detail); record those instead of the generic container-failure framing.
+                await failRun(i, result.error, result.failureKind ?? 'job_failed', result.detail ?? null);
+                return;
+            }
+            // The container kept getting evicted/crashing even after the engine's single
+            // automatic fresh-container restart, so the eviction is deterministic: fail
+            // the run as `evicted` (its hint points at the container logs / instance size).
+            if (result.kind === 'job_evicted') {
+                await failRun(i, result.error, 'evicted');
+                return;
+            }
+            // 'paused' means the spend budget is exhausted: stop driving this run.
+            // The /spend/resume endpoint re-creates the workflow once it frees up.
+            if (result.kind === 'done' || result.kind === 'noop' || result.kind === 'paused')
+                return;
+            if (result.kind === 'awaiting_decision') {
+                const decisionId = result.decisionId;
+                // A parked run waits for a human INDEFINITELY — the old hard "decision timeout"
+                // that failed the run is gone (a run can legitimately sit waiting for input for
+                // as long as it takes; urgency is surfaced by the notification escalating
+                // yellow → red, not by killing the run). Cloudflare's `waitForEvent` still needs
+                // a finite timeout, so we wait in chunks: on expiry we simply re-loop, which
+                // re-advances the run from storage — resuming if the decision was resolved while
+                // we weren't listening (self-healing a missed signal), or re-arming the wait
+                // otherwise. The per-iteration `-${i}` keeps each re-armed wait a distinct step.
+                try {
+                    await step.waitForEvent(`await-${decisionId}-${i}`, {
+                        type: `decision-${decisionId}`,
+                        timeout: decisionTimeout,
+                    });
+                }
+                catch {
+                    // Timed out without a signal — fall through and re-loop (do NOT fail the run).
+                }
+            }
+            // 'continue', a resolved decision, or a re-armed wait: loop and advance again.
+        }
+    }
+}
+//# sourceMappingURL=ExecutionWorkflow.js.map

package/dist/infrastructure/workflows/ExecutionWorkflow.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ExecutionWorkflow.js","sourceRoot":"","sources":["../../../src/infrastructure/workflows/ExecutionWorkflow.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kBAAkB,GAKnB,MAAM,oBAAoB,CAAA;AAI3B,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAA;AACtC,OAAO,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAA;AAGhD,kFAAkF;AAClF,MAAM,WAAW,GAAG;IAClB,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,aAAa,EAAE;IACjE,OAAO,EAAE,WAAW;CACQ,CAAA;AAE9B;;;;;;;GAOG;AACH,MAAM,OAAO,iBAAkB,SAAQ,kBAAgD;IAC5E,KAAK,CAAC,GAAG,CAChB,KAA6C,EAC7C,IAAkB;QAElB,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,GAAG,KAAK,CAAC,OAAO,CAAA;QAClD,MAAM,UAAU,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,SAAS,CAAA;QACjD,MAAM,eAAe,GAAG,UAAU,CAAC,eAAwC,CAAA;QAC3E,MAAM,eAAe,GAAG,UAAU,CAAC,eAAwC,CAAA;QAC3E,MAAM,cAAc,GAAG,UAAU,CAAC,cAAuC,CAAA;QAEzE,MAAM,OAAO,GAAG,KAAK,EACnB,CAAS,EACT,OAAe,EACf,IAAI,GAAqB,OAAO,EAChC,MAAM,GAAkB,IAAI,EACb,EAAE;YACjB,MAAM,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,gBAAgB,OAAO,EAAE,CAAC,CAAA;YAC7E,MAAM,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,EAAE,CAC9B,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,gBAAgB,CAAC,OAAO,CAC/C,WAAW,EACX,WAAW,EACX,OAAO,EACP,IAAI,EACJ,MAAM,CACP,CACF,CAAA;QACH,CAAC,CAAA;QAED,KAAK,IAAI,CAAC,GAAG,CAAC,GAAI,CAAC,EAAE,EAAE,CAAC;YACtB,IAAI,MAAqB,CAAA;YACzB,IAAI,CAAC;gBACH,MAAM,GAAG,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE,CACxD,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,gBAAgB,CAAC,eAAe,CAAC,WAAW,EAAE,WAAW,EAAE;oBAClF,kBAAkB,EAAE,IAAI;iBACzB,CAAC,CACH,CAAkB,CAAA;YACrB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,wEAAwE;gBACxE,MAAM,OAAO,CAAC,CAAC,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;gBACxE,OAAM;YACR,CAAC;YAED,wEAAwE;YACxE,yEAAyE;YACzE,wEAAwE;YACxE,yEAAyE;YACzE,+EAA+E;YAC/E,gEAAgE;YAChE,IAAI,MAAM,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;gBACnC,IAAI,MAAM,GAAG,KAAK,CAAA;gBAClB,2EAA2E;gBAC3E,yEAAyE;gBACzE,0EAA0E;gBAC1E,2EAA2E;gBAC3E,wEAAwE;gBACxE,4EAA4E;gBAC5E,yEAAyE;gBACzE,0EAA0E;gBAC1E,IAAI,gBAAgB,GAAG,CAAC,CAAA;gBACxB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,WAAW,EAAE,CAAC,EAAE,EAAE,CAAC;oBAChD,MAAM,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,EAAE,eAAe,CAAC,CAAA;oBACxD,IAAI,CAAC;wBACH,MAAM,GAAG,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE,CAC1D,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,gBAAgB,CAAC,YAAY,CAAC,WAAW,EAAE,WAAW,CAAC,CACjF,CAAkB,CAAA;oBACrB,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,gBAAgB,IAAI,CAAC,CAAA;wBACrB,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;wBACtE,MAAM,CAAC,IAAI,CACT,EAAE,WAAW,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,gBAAgB,EAAE,GAAG,EAAE,OAAO,EAAE,EAC9E,wEAAwE,CACzE,CAAA;wBACD,IAAI,gBAAgB,IAAI,UAAU,CAAC,uBAAuB,EAAE,CAAC;4BAC3D,MAAM,OAAO,CACX,CAAC,EACD,iCAAiC,gBAAgB,sBAAsB;gCACrE,kDAAkD,OAAO,GAAG,EAC9D,SAAS,CACV,CAAA;4BACD,OAAM;wBACR,CAAC;wBACD,SAAQ;oBACV,CAAC;oBACD,gBAAgB,GAAG,CAAC,CAAA;oBACpB,IAAI,MAAM,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;wBACnC,MAAM,GAAG,IAAI,CAAA;wBACb,MAAK;oBACP,CAAC;gBACH,CAAC;gBACD,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;oBAC9C,MAAM,OAAO,CAAC,CAAC,EAAE,6DAA6D,EAAE,SAAS,CAAC,CAAA;oBAC1F,OAAM;gBACR,CAAC;YACH,CAAC;YAED,6EAA6E;YAC7E,iFAAiF;YACjF,yEAAyE;YACzE,+EAA+E;YAC/E,kFAAkF;YAClF,gFAAgF;YAChF,kFAAkF;YAClF,yEAAyE;YACzE,IAAI,MAAM,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;gBACpC,IAAI,OAAO,GAAG,KAAK,CAAA;gBACnB,IAAI,gBAAgB,GAAG,CAAC,CAAA;gBACxB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,UAAU,EAAE,CAAC,EAAE,EAAE,CAAC;oBAC/C,MAAM,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,EAAE,cAAc,CAAC,CAAA;oBACvD,IAAI,CAAC;wBACH,MAAM,GAAG,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE,CAC/D,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,gBAAgB,CAAC,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC,CAC7E,CAAkB,CAAA;oBACrB,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,gBAAgB,IAAI,CAAC,CAAA;wBACrB,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;wBACtE,MAAM,CAAC,IAAI,CACT,EAAE,WAAW,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,gBAAgB,EAAE,GAAG,EAAE,OAAO,EAAE,EAC9E,+EAA+E,CAChF,CAAA;wBACD,IAAI,gBAAgB,IAAI,UAAU,CAAC,uBAAuB,EAAE,CAAC;4BAC3D,MAAM,OAAO,CACX,CAAC,EACD,oCAAoC,gBAAgB,mCAAmC,OAAO,GAAG,EACjG,SAAS,CACV,CAAA;4BACD,OAAM;wBACR,CAAC;wBACD,SAAQ;oBACV,CAAC;oBACD,gBAAgB,GAAG,CAAC,CAAA;oBACpB,IAAI,MAAM,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;wBACpC,OAAO,GAAG,IAAI,CAAA;wBACd,MAAK;oBACP,CAAC;gBACH,CAAC;gBACD,IAAI,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;oBAChD,qEAAqE;oBACrE,wEAAwE;oBACxE,wEAAwE;oBACxE,oEAAoE;oBACpE,MAAM,GAAG,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC,kBAAkB,CAAC,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE,CAC/D,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,gBAAgB,CAAC,yBAAyB,CACjE,WAAW,EACX,WAAW,CACZ,CACF,CAAkB,CAAA;gBACrB,CAAC;gBACD,2EAA2E;gBAC3E,gFAAgF;YAClF,CAAC;YAED,IAAI,MAAM,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBACjC,4EAA4E;gBAC5E,6EAA6E;gBAC7E,0EAA0E;gBAC1E,MAAM,OAAO,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,WAAW,IAAI,YAAY,EAAE,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,CAAA;gBACzF,OAAM;YACR,CAAC;YAED,6EAA6E;YAC7E,4EAA4E;YAC5E,gFAAgF;YAChF,IAAI,MAAM,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;gBAClC,MAAM,OAAO,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,CAAA;gBACzC,OAAM;YACR,CAAC;YAED,uEAAuE;YACvE,uEAAuE;YACvE,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAM;YAExF,IAAI,MAAM,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;gBACxC,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAA;gBACpC,gFAAgF;gBAChF,gFAAgF;gBAChF,0EAA0E;gBAC1E,iFAAiF;gBACjF,6EAA6E;gBAC7E,iFAAiF;gBACjF,6EAA6E;gBAC7E,iFAAiF;gBACjF,IAAI,CAAC;oBACH,MAAM,IAAI,CAAC,YAAY,CAAC,SAAS,UAAU,IAAI,CAAC,EAAE,EAAE;wBAClD,IAAI,EAAE,YAAY,UAAU,EAAE;wBAC9B,OAAO,EAAE,eAAe;qBACzB,CAAC,CAAA;gBACJ,CAAC;gBAAC,MAAM,CAAC;oBACP,+EAA+E;gBACjF,CAAC;YACH,CAAC;YACD,+EAA+E;QACjF,CAAC;IACH,CAAC;CACF"}

package/dist/infrastructure/workflows/GitHubBackfillWorkflow.d.ts

@@ -0,0 +1,17 @@
+import { WorkflowEntrypoint, type WorkflowEvent, type WorkflowStep } from 'cloudflare:workers';
+import type { Env } from '../env';
+/** Params for a full-repo backfill of one installation. */
+export interface GitHubBackfillParams {
+    installationId: number;
+}
+/**
+ * Durable full backfill for a GitHub App installation: rediscover its repos and
+ * deep-sync each one. Used for the initial connect and explicit `full` resyncs,
+ * where doing the work inline could exceed request limits. All business logic
+ * lives in core's GitHubSyncService; this just drives it inside a retriable,
+ * checkpointed step.
+ */
+export declare class GitHubBackfillWorkflow extends WorkflowEntrypoint<Env, GitHubBackfillParams> {
+    run(event: WorkflowEvent<GitHubBackfillParams>, step: WorkflowStep): Promise<void>;
+}
+//# sourceMappingURL=GitHubBackfillWorkflow.d.ts.map

package/dist/infrastructure/workflows/GitHubBackfillWorkflow.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"GitHubBackfillWorkflow.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/workflows/GitHubBackfillWorkflow.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kBAAkB,EAClB,KAAK,aAAa,EAClB,KAAK,YAAY,EAElB,MAAM,oBAAoB,CAAA;AAC3B,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,QAAQ,CAAA;AAGjC,2DAA2D;AAC3D,MAAM,WAAW,oBAAoB;IACnC,cAAc,EAAE,MAAM,CAAA;CACvB;AAOD;;;;;;GAMG;AACH,qBAAa,sBAAuB,SAAQ,kBAAkB,CAAC,GAAG,EAAE,oBAAoB,CAAC;IACxE,GAAG,CAChB,KAAK,EAAE,aAAa,CAAC,oBAAoB,CAAC,EAC1C,IAAI,EAAE,YAAY,GACjB,OAAO,CAAC,IAAI,CAAC,CAMf;CACF"}

package/dist/infrastructure/workflows/GitHubBackfillWorkflow.js

@@ -0,0 +1,24 @@
+import { WorkflowEntrypoint, } from 'cloudflare:workers';
+import { buildContainer } from '../container';
+const STEP_CONFIG = {
+    retries: { limit: 3, delay: '10 seconds', backoff: 'exponential' },
+    timeout: '10 minutes',
+};
+/**
+ * Durable full backfill for a GitHub App installation: rediscover its repos and
+ * deep-sync each one. Used for the initial connect and explicit `full` resyncs,
+ * where doing the work inline could exceed request limits. All business logic
+ * lives in core's GitHubSyncService; this just drives it inside a retriable,
+ * checkpointed step.
+ */
+export class GitHubBackfillWorkflow extends WorkflowEntrypoint {
+    async run(event, step) {
+        const { installationId } = event.payload;
+        await step.do(`backfill-${installationId}`, STEP_CONFIG, async () => {
+            const github = buildContainer(this.env).github;
+            if (github)
+                await github.syncService.backfillInstallation(installationId);
+        });
+    }
+}
+//# sourceMappingURL=GitHubBackfillWorkflow.js.map

package/dist/infrastructure/workflows/GitHubBackfillWorkflow.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"GitHubBackfillWorkflow.js","sourceRoot":"","sources":["../../../src/infrastructure/workflows/GitHubBackfillWorkflow.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kBAAkB,GAInB,MAAM,oBAAoB,CAAA;AAE3B,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAO7C,MAAM,WAAW,GAAG;IAClB,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,aAAa,EAAE;IAClE,OAAO,EAAE,YAAY;CACO,CAAA;AAE9B;;;;;;GAMG;AACH,MAAM,OAAO,sBAAuB,SAAQ,kBAA6C;IAC9E,KAAK,CAAC,GAAG,CAChB,KAA0C,EAC1C,IAAkB;QAElB,MAAM,EAAE,cAAc,EAAE,GAAG,KAAK,CAAC,OAAO,CAAA;QACxC,MAAM,IAAI,CAAC,EAAE,CAAC,YAAY,cAAc,EAAE,EAAE,WAAW,EAAE,KAAK,IAAI,EAAE;YAClE,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CAAA;YAC9C,IAAI,MAAM;gBAAE,MAAM,MAAM,CAAC,WAAW,CAAC,oBAAoB,CAAC,cAAc,CAAC,CAAA;QAC3E,CAAC,CAAC,CAAA;IACJ,CAAC;CACF"}

package/dist/infrastructure/workflows/WorkflowsBootstrapRunner.d.ts

@@ -0,0 +1,15 @@
+import type { BootstrapRunner } from '@cat-factory/kernel';
+import type { Workflow } from '@cloudflare/workers-types';
+/**
+ * Drives "bootstrap repo" runs durably via Cloudflare Workflows, mirroring
+ * WorkflowsWorkRunner for pipeline runs. Each run maps to one Workflows instance
+ * whose id is the bootstrap job id, which makes `startRun` idempotent (a duplicate
+ * start, or a sweeper re-drive racing a live instance, is tolerated).
+ */
+export declare class WorkflowsBootstrapRunner implements BootstrapRunner {
+    private readonly workflow;
+    constructor(workflow: Workflow);
+    startRun(workspaceId: string, jobId: string): Promise<void>;
+    cancelRun(_workspaceId: string, jobId: string): Promise<void>;
+}
+//# sourceMappingURL=WorkflowsBootstrapRunner.d.ts.map

package/dist/infrastructure/workflows/WorkflowsBootstrapRunner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"WorkflowsBootstrapRunner.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/workflows/WorkflowsBootstrapRunner.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAA;AAC1D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,2BAA2B,CAAA;AAGzD;;;;;GAKG;AACH,qBAAa,wBAAyB,YAAW,eAAe;IAClD,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAArC,YAA6B,QAAQ,EAAE,QAAQ,EAAI;IAE7C,QAAQ,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAUhE;IAEK,SAAS,CAAC,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAOlE;CACF"}

package/dist/infrastructure/workflows/WorkflowsBootstrapRunner.js

@@ -0,0 +1,34 @@
+/**
+ * Drives "bootstrap repo" runs durably via Cloudflare Workflows, mirroring
+ * WorkflowsWorkRunner for pipeline runs. Each run maps to one Workflows instance
+ * whose id is the bootstrap job id, which makes `startRun` idempotent (a duplicate
+ * start, or a sweeper re-drive racing a live instance, is tolerated).
+ */
+export class WorkflowsBootstrapRunner {
+    workflow;
+    constructor(workflow) {
+        this.workflow = workflow;
+    }
+    async startRun(workspaceId, jobId) {
+        try {
+            await this.workflow.create({
+                id: jobId,
+                params: { workspaceId, jobId },
+            });
+        }
+        catch {
+            // An instance with this id already exists (a duplicate start or a sweeper
+            // re-drive racing a live instance). The existing instance is authoritative.
+        }
+    }
+    async cancelRun(_workspaceId, jobId) {
+        try {
+            const instance = await this.workflow.get(jobId);
+            await instance.terminate();
+        }
+        catch {
+            // No live instance to terminate (already finished/terminated). Nothing to do.
+        }
+    }
+}
+//# sourceMappingURL=WorkflowsBootstrapRunner.js.map

package/dist/infrastructure/workflows/WorkflowsBootstrapRunner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"WorkflowsBootstrapRunner.js","sourceRoot":"","sources":["../../../src/infrastructure/workflows/WorkflowsBootstrapRunner.ts"],"names":[],"mappings":"AAIA;;;;;GAKG;AACH,MAAM,OAAO,wBAAwB;IACN,QAAQ;IAArC,YAA6B,QAAkB;wBAAlB,QAAQ;IAAa,CAAC;IAEnD,KAAK,CAAC,QAAQ,CAAC,WAAmB,EAAE,KAAa;QAC/C,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;gBACzB,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,EAAE,WAAW,EAAE,KAAK,EAAoC;aACjE,CAAC,CAAA;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,0EAA0E;YAC1E,4EAA4E;QAC9E,CAAC;IACH,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,YAAoB,EAAE,KAAa;QACjD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;YAC/C,MAAM,QAAQ,CAAC,SAAS,EAAE,CAAA;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,8EAA8E;QAChF,CAAC;IACH,CAAC;CACF"}

package/dist/infrastructure/workflows/WorkflowsWorkRunner.d.ts

@@ -0,0 +1,31 @@
+import type { WorkRunner } from '@cat-factory/kernel';
+import type { Queue, Workflow } from '@cloudflare/workers-types';
+import type { ExecutionStartMessage } from '../env';
+/** Params passed to a Workflows instance; also the queue message shape. */
+export interface ExecutionWorkflowParams {
+    workspaceId: string;
+    executionId: string;
+}
+export interface WorkflowsWorkRunnerDeps {
+    workflow: Workflow;
+    /** When present, runs are started via the queue (admission rate limiting). */
+    queue?: Queue<ExecutionStartMessage>;
+}
+/**
+ * Drives runs durably via Cloudflare Workflows. Each run maps to one Workflows
+ * instance whose id is the execution id, which makes start idempotent and lets
+ * decisions/cancels address the instance directly. When a queue is configured,
+ * `startRun` enqueues instead of creating directly so the consumer's
+ * `max_concurrency` bounds how fast runs are kicked off.
+ */
+export declare class WorkflowsWorkRunner implements WorkRunner {
+    private readonly workflow;
+    private readonly queue?;
+    constructor({ workflow, queue }: WorkflowsWorkRunnerDeps);
+    startRun(workspaceId: string, executionId: string): Promise<void>;
+    /** Create the Workflows instance, tolerating an existing one (idempotent). */
+    create(workspaceId: string, executionId: string): Promise<void>;
+    signalDecision(_workspaceId: string, executionId: string, decisionId: string, choice: string): Promise<void>;
+    cancelRun(_workspaceId: string, executionId: string): Promise<void>;
+}
+//# sourceMappingURL=WorkflowsWorkRunner.d.ts.map

package/dist/infrastructure/workflows/WorkflowsWorkRunner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"WorkflowsWorkRunner.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/workflows/WorkflowsWorkRunner.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AACrD,OAAO,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,2BAA2B,CAAA;AAChE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,QAAQ,CAAA;AAEnD,2EAA2E;AAC3E,MAAM,WAAW,uBAAuB;IACtC,WAAW,EAAE,MAAM,CAAA;IACnB,WAAW,EAAE,MAAM,CAAA;CACpB;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,EAAE,QAAQ,CAAA;IAClB,8EAA8E;IAC9E,KAAK,CAAC,EAAE,KAAK,CAAC,qBAAqB,CAAC,CAAA;CACrC;AAED;;;;;;GAMG;AACH,qBAAa,mBAAoB,YAAW,UAAU;IACpD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAU;IACnC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAA8B;IAErD,YAAY,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,uBAAuB,EAGvD;IAEK,QAAQ,CAAC,WAAW,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAMtE;IAED,8EAA8E;IACxE,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAUpE;IAEK,cAAc,CAClB,YAAY,EAAE,MAAM,EACpB,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,IAAI,CAAC,CAQf;IAEK,SAAS,CAAC,YAAY,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAOxE;CACF"}