@headless-lms/core 0.2.0 → 0.4.0

package/dist/automations/service.js

@@ -1,11 +1,12 @@
 import { deliverWebhookInputSchema } from "../types/schemas/automations.js";
+import { ConflictError, InvalidInputError, NotFoundError } from "../shared/errors.js";
 import { noopLogger } from "../shared/logger.js";
-import { ConflictError, NotFoundError } from "../shared/errors.js";
-import { DELIVER_WEBHOOK_ACTION, catalogActions, catalogTriggers } from "./catalog.js";
+import { ActionFailedError, AutomationKindMismatchError, InvalidTriggerError, ReservedActionError } from "./model.js";
+import { DELIVER_WEBHOOK_ACTION, catalogActions, catalogTriggers, publicDataSchema } from "./catalog.js";
 import { generateWebhookSecret } from "./webhook-signing.js";
 import { executeAction } from "./actions.js";
 import { automationEvents } from "./events.js";
-import { AutomationKindMismatchError, InvalidTriggerError, ReservedActionError } from "./model.js";
+import { cronSupported } from "./schedule.js";
 //#region src/automations/service.ts
 /** True only when `input` sets `enabled` and nothing else — emits automation.enabled|disabled instead of automation.updated. */
 function isEnabledOnlyUpdate(input) {
@@ -13,14 +14,83 @@ function isEnabledOnlyUpdate(input) {
 	const { enabled: _enabled, ...rest } = input;
 	return Object.values(rest).every((v) => v === void 0);
 }
+function floorMinute(at) {
+	const copy = new Date(at);
+	copy.setUTCSeconds(0, 0);
+	return copy.getTime();
+}
 function unique(values) {
 	return [...new Set(values)];
 }
+function filterMatches(filter, data) {
+	if (filter == null) return true;
+	if (typeof data !== "object" || data === null || Array.isArray(data)) return false;
+	const record = data;
+	return Object.entries(filter).every(([key, expected]) => {
+		if (!Object.prototype.hasOwnProperty.call(record, key)) return false;
+		return JSON.stringify(record[key]) === JSON.stringify(expected);
+	});
+}
 function assertAuthorableTriggers(triggers) {
-	for (const trigger of triggers) if (trigger.startsWith("automation.")) throw new InvalidTriggerError(trigger);
+	for (const trigger of triggers) {
+		if (trigger.startsWith("automation.")) throw new InvalidTriggerError(trigger);
+		if (trigger.startsWith("schedule:") && !cronSupported(trigger.slice(9))) throw new InvalidTriggerError(trigger, "schedule");
+	}
 }
+function assertCatalogTriggers(triggers, schedules) {
+	assertAuthorableTriggers(triggers);
+	const known = new Set(catalogTriggers().map((t) => t.type));
+	for (const trigger of triggers) if (!(schedules && trigger.startsWith("schedule:")) && !known.has(trigger)) throw new InvalidTriggerError(trigger, "unknown");
+}
+const REMOVED_ACTIONS = /* @__PURE__ */ new Set([
+	"notify",
+	"publishDuePosts",
+	"expireDueGrants",
+	"sendDigest",
+	"removeUnattachedUploads"
+]);
 function assertAuthorableActions(actions) {
-	for (const action of actions) if (action.type === "deliverWebhook") throw new ReservedActionError(action.type);
+	for (const action of actions) {
+		if (action.type === "deliverWebhook") throw new ReservedActionError(action.type);
+		if (REMOVED_ACTIONS.has(action.type)) throw new InvalidInputError(`The action "${action.type}" is no longer available`);
+	}
+}
+const SCHEDULE_FIRED = "automation.schedule.fired";
+function publicEventData(event) {
+	const parsed = event.type === SCHEDULE_FIRED ? {
+		success: true,
+		data: event.data
+	} : publicDataSchema(event.type)?.safeParse(event.data);
+	return parsed?.success ? JSON.parse(JSON.stringify(parsed.data)) : null;
+}
+/** A run as callers see it: its event carries only what a webhook of that event would. */
+function toRunView(run) {
+	const { type, version, id, orgId, occurredAt } = run.event;
+	return {
+		...run,
+		event: {
+			type,
+			version,
+			id,
+			orgId,
+			occurredAt,
+			data: publicEventData(run.event)
+		}
+	};
+}
+/** An automation as callers see it: a webhook's credential reference stays internal. */
+function toAutomationView(automation) {
+	return {
+		...automation,
+		actions: automation.actions.map((action) => {
+			if (action.type !== "deliverWebhook") return action;
+			const { secretRef: _secretRef, ...input } = action.input;
+			return {
+				...action,
+				input
+			};
+		})
+	};
 }
 function webhookTarget(automation) {
 	return deliverWebhookInputSchema.parse(automation.actions[0]?.input);
@@ -60,6 +130,10 @@ var AutomationsServiceImpl = class {
 	integrations;
 	credentials;
 	webhooks;
+	mail;
+	grants;
+	delivery;
+	processor;
 	logger;
 	constructor(params) {
 		this.repo = params.repo;
@@ -71,12 +145,41 @@ var AutomationsServiceImpl = class {
 		this.integrations = params.integrations;
 		this.credentials = params.credentials;
 		this.webhooks = params.webhooks;
+		this.mail = {
+			...params.mail,
+			recentMessageRecipients: (orgId, automationId, chatId, since) => this.runsRepo.recentRecipients(orgId, automationId, chatId, since)
+		};
+		this.grants = params.grants;
+		this.delivery = params.delivery;
+		this.processor = params.processor;
 		this.logger = params.logger ?? noopLogger;
 	}
 	async handle(event) {
 		if (event.type.startsWith("automation.")) return;
 		const automations = await this.safeListByTrigger(event);
-		for (const automation of automations.filter((a) => a.enabled)) await this.dispatchOne(automation, event);
+		for (const automation of automations) {
+			const matches = filterMatches(automation.filter, event.data);
+			if (!automation.enabled || !matches) {
+				if (automation.enabled && !matches) this.logger.debug("automation filter skipped", {
+					orgId: event.orgId,
+					automationId: automation.id,
+					trigger: event.type
+				});
+				continue;
+			}
+			await this.dispatchOne(automation, event);
+		}
+		await this.processor.process(event);
+	}
+	async reconcileSchedules(orgId) {
+		try {
+			await this.engine.syncSchedules?.();
+		} catch (err) {
+			this.logger.error("automation schedules not reconciled", {
+				orgId,
+				err
+			});
+		}
 	}
 	async safeListByTrigger(event) {
 		try {
@@ -85,7 +188,7 @@ var AutomationsServiceImpl = class {
 			this.logger.error("automations: failed to load trigger matches", {
 				orgId: event.orgId,
 				trigger: event.type,
-				error: err instanceof Error ? err.message : String(err)
+				err
 			});
 			return [];
 		}
@@ -97,14 +200,15 @@ var AutomationsServiceImpl = class {
 			if (!run) return;
 			await this.engine.dispatch(this.dispatchFor(automation, run, event));
 		} catch (err) {
-			const message = err instanceof Error ? err.message : String(err);
 			this.logger.error("automation run failed", {
 				orgId: event.orgId,
 				automationId: automation.id,
 				runId: run?.id,
-				error: message
+				trigger: event.type,
+				eventId: event.id,
+				err
 			});
-			if (run) await this.recordFailure(run, message);
+			if (run) await this.recordFailure(run, err instanceof Error ? err.message : String(err));
 		}
 	}
 	openRun(automation, event) {
@@ -139,7 +243,7 @@ var AutomationsServiceImpl = class {
 			event
 		};
 	}
-	/** Best-effort: logs and never rethrows — `handle` must never throw. */
+	/** Best-effort: logs and never rethrows, so an org automation never fails `handle`. */
 	async recordFailure(run, error) {
 		try {
 			return await this.uow.run(async ({ runs, outbox }) => {
@@ -157,8 +261,9 @@ var AutomationsServiceImpl = class {
 		} catch (err) {
 			this.logger.error("failed to record automation run failure", {
 				orgId: run.orgId,
+				automationId: run.automationId,
 				runId: run.id,
-				error: err instanceof Error ? err.message : String(err),
+				err,
 				originalError: error
 			});
 			return null;
@@ -167,18 +272,77 @@ var AutomationsServiceImpl = class {
 	async runAction(d, index) {
 		const action = d.actions[index];
 		if (!action) throw new Error(`automation ${d.automationId} run ${d.runId}: no action at index ${index}`);
-		await executeAction(action, d.event, {
-			mailer: this.mailer,
-			lookups: this.lookups,
-			credentials: this.credentials,
-			webhooks: this.webhooks
+		let outcome;
+		try {
+			outcome = await executeAction(action, d.event, {
+				mailer: this.mailer,
+				lookups: this.lookups,
+				credentials: this.credentials,
+				webhooks: this.webhooks,
+				mail: this.mail,
+				grants: this.grants,
+				automationId: d.automationId,
+				actionInput: action.input,
+				logger: this.logger
+			});
+		} catch (err) {
+			this.logger.error("automation action failed", {
+				orgId: d.orgId,
+				automationId: d.automationId,
+				runId: d.runId,
+				trigger: d.event.type,
+				index,
+				type: action.type,
+				err
+			});
+			throw err instanceof ActionFailedError ? err : new ActionFailedError();
+		}
+		const { recipients, failed } = outcome;
+		this.logger.info("automation action completed", {
+			orgId: d.orgId,
+			automationId: d.automationId,
+			runId: d.runId,
+			type: action.type,
+			recipients: recipients.length,
+			failed: failed.length
 		});
 		return {
 			index,
 			type: action.type,
-			status: "completed"
+			status: "completed",
+			...recipients.length > 0 ? { recipients } : {},
+			...failed.length > 0 ? { error: `delivery failed for ${failed.length} recipients: ${failed.join(", ")}` } : {}
 		};
 	}
+	runDelivery(d, lastAttempt) {
+		return this.delivery.run(d, lastAttempt);
+	}
+	async listSchedules() {
+		return this.repo.listSchedules();
+	}
+	async fireSchedule(orgId, automationId, at) {
+		const firedAt = new Date(floorMinute(at));
+		const automation = await this.repo.findById(orgId, automationId);
+		if (!automation?.enabled || firedAt.getTime() < floorMinute(automation.createdAt)) {
+			this.logger.debug("schedule skipped", {
+				orgId,
+				automationId
+			});
+			return;
+		}
+		const event = {
+			type: SCHEDULE_FIRED,
+			id: `schedule_${automationId}_${firedAt.toISOString()}`,
+			orgId,
+			version: 1,
+			occurredAt: firedAt.toISOString(),
+			data: {
+				automationId,
+				firedAt: firedAt.toISOString()
+			}
+		};
+		await this.dispatchOne(automation, event);
+	}
 	async finalize(d, results) {
 		const status = results.length === d.actions.length && results.every((r) => r.status === "completed") ? "completed" : "failed";
 		await this.uow.run(async ({ runs, outbox }) => {
@@ -201,9 +365,39 @@ var AutomationsServiceImpl = class {
 			}) }));
 			await outbox.append([runEvent, ...actionFailedEvents]);
 		});
+		this.logOutcome(d, status, results);
+	}
+	logOutcome(d, status, results) {
+		const run = {
+			orgId: d.orgId,
+			automationId: d.automationId,
+			runId: d.runId,
+			trigger: d.event.type,
+			eventId: d.event.id
+		};
+		if (status === "failed") {
+			const failed = results.find((r) => r.status === "failed");
+			const index = failed?.index ?? results.length;
+			this.logger.error("automation run failed", {
+				...run,
+				index,
+				action: failed?.type ?? d.actions[index]?.type,
+				error: failed?.error ?? "not every action ran"
+			});
+			return;
+		}
+		const partial = results.filter((r) => r.error !== void 0);
+		if (partial.length > 0) this.logger.warn("automation run completed with failed deliveries", {
+			...run,
+			actions: partial.map(({ index, type, error }) => ({
+				index,
+				type,
+				error
+			}))
+		});
 	}
 	async create(orgId, input) {
-		assertAuthorableTriggers(input.triggers);
+		assertCatalogTriggers(input.triggers, true);
 		assertAuthorableActions(input.actions);
 		const automation = await this.uow.run(async ({ automations, outbox }) => {
 			const created = await automations.insert(orgId, {
@@ -221,10 +415,11 @@ var AutomationsServiceImpl = class {
 			orgId,
 			automationId: automation.id
 		});
+		await this.reconcileSchedules(orgId);
 		return automation;
 	}
 	async update(orgId, id, input) {
-		if (input.triggers !== void 0) assertAuthorableTriggers(input.triggers);
+		if (input.triggers !== void 0) assertCatalogTriggers(input.triggers, true);
 		if (input.actions !== void 0) assertAuthorableActions(input.actions);
 		const existing = await this.repo.findById(orgId, id);
 		if (!existing) return null;
@@ -239,10 +434,13 @@ var AutomationsServiceImpl = class {
 			await outbox.append([updateEvent(orgId, input, updated)]);
 			return updated;
 		});
-		if (automation) this.logger.info("automation updated", {
-			orgId,
-			automationId: id
-		});
+		if (automation) {
+			this.logger.info("automation updated", {
+				orgId,
+				automationId: id
+			});
+			await this.reconcileSchedules(orgId);
+		}
 		return automation;
 	}
 	async delete(orgId, id) {
@@ -258,20 +456,28 @@ var AutomationsServiceImpl = class {
 			})]);
 			return removed;
 		});
-		if (deleted) this.logger.info("automation deleted", {
-			orgId,
-			automationId: id
-		});
+		if (deleted) {
+			this.logger.info("automation deleted", {
+				orgId,
+				automationId: id
+			});
+			await this.reconcileSchedules(orgId);
+		}
 		return deleted !== null;
 	}
-	list(orgId, query) {
-		return this.repo.listByOrg(orgId, query?.kind);
+	async list(orgId, query) {
+		return (await this.repo.listByOrg(orgId, query?.kind)).map(toAutomationView);
 	}
-	get(orgId, id) {
-		return this.repo.findById(orgId, id);
+	async get(orgId, id) {
+		const automation = await this.repo.findById(orgId, id);
+		return automation ? toAutomationView(automation) : null;
 	}
-	listRuns(orgId, automationId, query) {
-		return this.runsRepo.list(orgId, automationId, query);
+	async listRuns(orgId, automationId, query) {
+		const page = await this.runsRepo.list(orgId, automationId, query);
+		return {
+			...page,
+			rows: page.rows.map(toRunView)
+		};
 	}
 	async rerun(orgId, automationId, runId) {
 		const existing = await this.runsRepo.findById(orgId, runId);
@@ -291,21 +497,21 @@ var AutomationsServiceImpl = class {
 		try {
 			await this.engine.dispatch(this.dispatchFor(automation, run, run.event));
 		} catch (err) {
-			const message = err instanceof Error ? err.message : String(err);
 			this.logger.error("automation rerun failed", {
 				orgId,
 				automationId,
 				runId: run.id,
-				error: message
+				trigger: run.trigger,
+				err
 			});
-			return await this.recordFailure(run, message) ?? run;
+			return toRunView(await this.recordFailure(run, err instanceof Error ? err.message : String(err)) ?? run);
 		}
 		this.logger.info("automation rerun started", {
 			orgId,
 			automationId,
 			runId: run.id
 		});
-		return run;
+		return toRunView(run);
 	}
 	async listWebhooks(orgId) {
 		return (await this.repo.listByOrg(orgId, "webhook")).map(toWebhook);
@@ -316,7 +522,7 @@ var AutomationsServiceImpl = class {
 	}
 	async createWebhook(orgId, input) {
 		const events = unique(input.events);
-		this.assertSubscribableEvents(events);
+		assertCatalogTriggers(events, false);
 		const secret = generateWebhookSecret();
 		const automation = await this.uow.run(async ({ automations, credentials, outbox }) => {
 			const secretRef = await credentials.store(orgId, { secret });
@@ -352,7 +558,7 @@ var AutomationsServiceImpl = class {
 		const existing = await this.findWebhook(orgId, id);
 		if (!existing) return null;
 		const events = input.events === void 0 ? void 0 : unique(input.events);
-		if (events) this.assertSubscribableEvents(events);
+		if (events) assertCatalogTriggers(events, false);
 		const { secretRef } = webhookTarget(existing);
 		const patch = {
 			name: input.url,
@@ -422,11 +628,6 @@ var AutomationsServiceImpl = class {
 		const automation = await this.repo.findById(orgId, id);
 		return automation?.kind === "webhook" ? automation : null;
 	}
-	assertSubscribableEvents(events) {
-		assertAuthorableTriggers(events);
-		const known = new Set(catalogTriggers().map((t) => t.type));
-		for (const event of events) if (!known.has(event)) throw new InvalidTriggerError(event, "unknown");
-	}
 	availableActions() {
 		return [...catalogActions(), ...this.integrations.available().flatMap((integration) => integration.actions.map((action) => ({
 			type: `${integration.id}.${action.id}`,

package/dist/automations/service.js.map

@@ -1 +1 @@
-{"version":3,"file":"service.js","names":[],"sources":["../../src/automations/service.ts"],"sourcesContent":["// automations context — service implementation (inbound port) and the\n// AutomationExecutor the engine drives.\n//\n// `handle` is subscribed to all events on the EventBus: it matches an event\n// against enabled automations for its trigger, opens one run per match, and\n// hands it to the injected AutomationEngine, which calls back into\n// `runAction`/`finalize`.\nimport { catalogActions, catalogTriggers, DELIVER_WEBHOOK_ACTION } from './catalog.js';\nimport { executeAction } from './actions.js';\nimport { generateWebhookSecret } from './webhook-signing.js';\nimport {\n  AutomationKindMismatchError,\n  InvalidTriggerError,\n  ReservedActionError,\n  type Automation,\n  type AutomationAction,\n  type AutomationActionResult,\n  type AutomationRun,\n  type CreatedWebhook,\n  type DeliverWebhookInput,\n  type Page,\n  type Webhook,\n  type WebhookSecret,\n} from './model.js';\nimport type {\n  AutomationRunsQuery,\n  AutomationsQuery,\n  AvailableActions,\n  AvailableTriggers,\n  CreateAutomationInput,\n  CreateWebhookInput,\n  UpdateAutomationInput,\n  UpdateWebhookInput,\n} from './types.js';\nimport type {\n  AutomationDispatch,\n  AutomationEngine,\n  AutomationExecutor,\n  AutomationRunsRepository,\n  AutomationsRepository,\n  AutomationsService,\n  AutomationsUnitOfWork,\n  WebhookSender,\n} from './ports.js';\nimport type { CredentialStore, DomainEvent, Logger } from '../shared/ports.js';\nimport type { JsonValue } from '../types/index.js';\nimport { deliverWebhookInputSchema } from '../types/schemas/index.js';\nimport { ConflictError, NotFoundError } from '../shared/errors.js';\nimport { noopLogger } from '../shared/logger.js';\nimport type { Mailer, MailerLookups } from '../shared/mailer.js';\nimport type { IntegrationsService } from '../integrations/index.js';\nimport { automationEvents } from './events.js';\n\n/** True only when `input` sets `enabled` and nothing else — emits automation.enabled|disabled instead of automation.updated. */\nfunction isEnabledOnlyUpdate<T extends { enabled?: boolean }>(\n  input: T,\n): input is T & { enabled: boolean } {\n  if (input.enabled === undefined) {\n    return false;\n  }\n  const { enabled: _enabled, ...rest } = input;\n  return Object.values(rest).every((v) => v === undefined);\n}\n\nfunction unique(values: string[]): string[] {\n  return [...new Set(values)];\n}\n\nfunction assertAuthorableTriggers(triggers: string[]): void {\n  for (const trigger of triggers) {\n    if (trigger.startsWith('automation.')) {\n      throw new InvalidTriggerError(trigger);\n    }\n  }\n}\n\nfunction assertAuthorableActions(actions: AutomationAction[]): void {\n  for (const action of actions) {\n    if (action.type === DELIVER_WEBHOOK_ACTION) {\n      throw new ReservedActionError(action.type);\n    }\n  }\n}\n\nfunction webhookTarget(automation: Automation): DeliverWebhookInput {\n  return deliverWebhookInputSchema.parse(automation.actions[0]?.input);\n}\n\nfunction toWebhook(automation: Automation): Webhook {\n  return {\n    orgId: automation.orgId,\n    id: automation.id,\n    url: webhookTarget(automation).url,\n    events: automation.triggers,\n    description: automation.description,\n    enabled: automation.enabled,\n    createdAt: automation.createdAt,\n    updatedAt: automation.updatedAt,\n  };\n}\n\nfunction updateEvent(orgId: string, input: { enabled?: boolean }, updated: Automation) {\n  if (isEnabledOnlyUpdate(input)) {\n    return input.enabled\n      ? automationEvents.automationEnabled.make({ orgId, data: updated })\n      : automationEvents.automationDisabled.make({ orgId, data: updated });\n  }\n  return automationEvents.automationUpdated.make({ orgId, data: updated });\n}\n\nexport type AutomationsServiceParams = {\n  /** Read-only access (list/get/available) — runs outside any transaction. */\n  repo: AutomationsRepository;\n  runsRepo: AutomationRunsRepository;\n  /** Atomic write scope: tx-bound repos + credential store + outbox appender. */\n  uow: AutomationsUnitOfWork;\n  engine: AutomationEngine;\n  mailer: Pick<Mailer, 'send'>;\n  lookups: MailerLookups;\n  integrations: Pick<IntegrationsService, 'available'>;\n  credentials: CredentialStore;\n  webhooks: WebhookSender;\n  logger?: Logger;\n};\n\nexport class AutomationsServiceImpl implements AutomationsService, AutomationExecutor {\n  private readonly repo: AutomationsRepository;\n  private readonly runsRepo: AutomationRunsRepository;\n  private readonly uow: AutomationsUnitOfWork;\n  private readonly engine: AutomationEngine;\n  private readonly mailer: Pick<Mailer, 'send'>;\n  private readonly lookups: MailerLookups;\n  private readonly integrations: Pick<IntegrationsService, 'available'>;\n  private readonly credentials: CredentialStore;\n  private readonly webhooks: WebhookSender;\n  private readonly logger: Logger;\n\n  constructor(params: AutomationsServiceParams) {\n    this.repo = params.repo;\n    this.runsRepo = params.runsRepo;\n    this.uow = params.uow;\n    this.engine = params.engine;\n    this.mailer = params.mailer;\n    this.lookups = params.lookups;\n    this.integrations = params.integrations;\n    this.credentials = params.credentials;\n    this.webhooks = params.webhooks;\n    this.logger = params.logger ?? noopLogger;\n  }\n\n  async handle(event: DomainEvent): Promise<void> {\n    // automation.* events are this service's own output — matching one as a trigger would self-loop.\n    if (event.type.startsWith('automation.')) {\n      return;\n    }\n    const automations = await this.safeListByTrigger(event);\n    for (const automation of automations.filter((a) => a.enabled)) {\n      await this.dispatchOne(automation, event);\n    }\n  }\n\n  private async safeListByTrigger(event: DomainEvent): Promise<Automation[]> {\n    try {\n      return await this.repo.listByTrigger(event.orgId, event.type);\n    } catch (err) {\n      this.logger.error('automations: failed to load trigger matches', {\n        orgId: event.orgId,\n        trigger: event.type,\n        error: err instanceof Error ? err.message : String(err),\n      });\n      return [];\n    }\n  }\n\n  private async dispatchOne(automation: Automation, event: DomainEvent): Promise<void> {\n    let run: AutomationRun | null = null;\n    try {\n      run = await this.openRun(automation, event);\n      if (!run) {\n        // At-least-once redelivery of a trigger event already run for this automation — no-op.\n        return;\n      }\n      await this.engine.dispatch(this.dispatchFor(automation, run, event));\n    } catch (err) {\n      const message = err instanceof Error ? err.message : String(err);\n      this.logger.error('automation run failed', {\n        orgId: event.orgId,\n        automationId: automation.id,\n        runId: run?.id,\n        error: message,\n      });\n      if (run) {\n        await this.recordFailure(run, message);\n      }\n    }\n  }\n\n  private openRun(automation: Automation, event: DomainEvent): Promise<AutomationRun | null> {\n    const now = new Date();\n    return this.uow.run(async ({ runs, outbox }) => {\n      const inserted = await runs.insert(event.orgId, {\n        orgId: event.orgId,\n        automationId: automation.id,\n        trigger: event.type,\n        event,\n        status: 'running',\n        actionResults: [],\n        startedAt: now,\n        finishedAt: null,\n        createdAt: now,\n        updatedAt: now,\n      });\n      if (!inserted) {\n        return null;\n      }\n      await outbox.append([\n        automationEvents.runStarted.make({\n          orgId: event.orgId,\n          data: inserted,\n        }),\n      ]);\n      return inserted;\n    });\n  }\n\n  private dispatchFor(\n    automation: Automation,\n    run: AutomationRun,\n    event: DomainEvent,\n  ): AutomationDispatch {\n    return {\n      runId: run.id,\n      orgId: event.orgId,\n      automationId: automation.id,\n      actions: automation.actions,\n      event,\n    };\n  }\n\n  /** Best-effort: logs and never rethrows — `handle` must never throw. */\n  private async recordFailure(run: AutomationRun, error: string): Promise<AutomationRun | null> {\n    try {\n      return await this.uow.run(async ({ runs, outbox }) => {\n        const failed = await runs.recordOutcome(run.orgId, run.id, {\n          status: 'failed',\n          actionResults: run.actionResults,\n          finishedAt: new Date(),\n        });\n        if (failed) {\n          await outbox.append([\n            automationEvents.runFailed.make({\n              orgId: run.orgId,\n              data: failed,\n            }),\n          ]);\n        }\n        return failed;\n      });\n    } catch (err) {\n      this.logger.error('failed to record automation run failure', {\n        orgId: run.orgId,\n        runId: run.id,\n        error: err instanceof Error ? err.message : String(err),\n        originalError: error,\n      });\n      return null;\n    }\n  }\n\n  async runAction(d: AutomationDispatch, index: number): Promise<AutomationActionResult> {\n    const action = d.actions[index];\n    if (!action) {\n      throw new Error(`automation ${d.automationId} run ${d.runId}: no action at index ${index}`);\n    }\n    await executeAction(action, d.event, {\n      mailer: this.mailer,\n      lookups: this.lookups,\n      credentials: this.credentials,\n      webhooks: this.webhooks,\n    });\n    return { index, type: action.type, status: 'completed' };\n  }\n\n  async finalize(d: AutomationDispatch, results: AutomationActionResult[]): Promise<void> {\n    const status: 'completed' | 'failed' =\n      results.length === d.actions.length && results.every((r) => r.status === 'completed')\n        ? 'completed'\n        : 'failed';\n    await this.uow.run(async ({ runs, outbox }) => {\n      const run = await runs.recordOutcome(d.orgId, d.runId, {\n        status,\n        actionResults: results,\n        finishedAt: new Date(),\n      });\n      if (!run) {\n        return;\n      }\n      const runEvent =\n        status === 'completed'\n          ? automationEvents.runCompleted.make({ orgId: d.orgId, data: run })\n          : automationEvents.runFailed.make({ orgId: d.orgId, data: run });\n      const actionFailedEvents = results\n        .filter((r) => r.status === 'failed')\n        .map((result) => ({\n          ...automationEvents.actionFailed.make({\n            orgId: d.orgId,\n            data: result,\n          }),\n        }));\n      await outbox.append([runEvent, ...actionFailedEvents]);\n    });\n  }\n\n  async create(orgId: string, input: CreateAutomationInput): Promise<Automation> {\n    assertAuthorableTriggers(input.triggers);\n    assertAuthorableActions(input.actions);\n    const automation = await this.uow.run(async ({ automations, outbox }) => {\n      const created = await automations.insert(orgId, {\n        ...input,\n        triggers: unique(input.triggers),\n        kind: 'workflow',\n      });\n      await outbox.append([automationEvents.automationCreated.make({ orgId, data: created })]);\n      return created;\n    });\n    this.logger.info('automation created', { orgId, automationId: automation.id });\n    return automation;\n  }\n\n  async update(\n    orgId: string,\n    id: string,\n    input: UpdateAutomationInput,\n  ): Promise<Automation | null> {\n    if (input.triggers !== undefined) {\n      assertAuthorableTriggers(input.triggers);\n    }\n    if (input.actions !== undefined) {\n      assertAuthorableActions(input.actions);\n    }\n    const existing = await this.repo.findById(orgId, id);\n    if (!existing) {\n      return null;\n    }\n    if (existing.kind !== 'workflow') {\n      throw new AutomationKindMismatchError(id, existing.kind);\n    }\n    const patch =\n      input.triggers === undefined ? input : { ...input, triggers: unique(input.triggers) };\n    const automation = await this.uow.run(async ({ automations, outbox }) => {\n      const updated = await automations.update(orgId, id, patch);\n      if (!updated) {\n        return null;\n      }\n      await outbox.append([updateEvent(orgId, input, updated)]);\n      return updated;\n    });\n    if (automation) {\n      this.logger.info('automation updated', { orgId, automationId: id });\n    }\n    return automation;\n  }\n\n  async delete(orgId: string, id: string): Promise<boolean> {\n    const existing = await this.repo.findById(orgId, id);\n    if (!existing) {\n      return false;\n    }\n    if (existing.kind !== 'workflow') {\n      throw new AutomationKindMismatchError(id, existing.kind);\n    }\n    const deleted = await this.uow.run(async ({ automations, outbox }) => {\n      const removed = await automations.delete(orgId, id);\n      if (!removed) {\n        return null;\n      }\n      await outbox.append([automationEvents.automationDeleted.make({ orgId, data: removed })]);\n      return removed;\n    });\n    if (deleted) {\n      this.logger.info('automation deleted', { orgId, automationId: id });\n    }\n    return deleted !== null;\n  }\n\n  list(orgId: string, query?: AutomationsQuery): Promise<Automation[]> {\n    return this.repo.listByOrg(orgId, query?.kind);\n  }\n\n  get(orgId: string, id: string): Promise<Automation | null> {\n    return this.repo.findById(orgId, id);\n  }\n\n  listRuns(\n    orgId: string,\n    automationId: string,\n    query: AutomationRunsQuery,\n  ): Promise<Page<AutomationRun>> {\n    return this.runsRepo.list(orgId, automationId, query);\n  }\n\n  async rerun(orgId: string, automationId: string, runId: string): Promise<AutomationRun> {\n    const existing = await this.runsRepo.findById(orgId, runId);\n    if (!existing || existing.automationId !== automationId) {\n      throw new NotFoundError('Automation run', runId);\n    }\n    const automation = await this.repo.findById(orgId, automationId);\n    if (!automation) {\n      throw new NotFoundError('Automation', automationId);\n    }\n    const run = await this.uow.run(async ({ runs, outbox }) => {\n      const restarted = await runs.restart(orgId, runId, new Date());\n      if (!restarted) {\n        return null;\n      }\n      await outbox.append([automationEvents.runStarted.make({ orgId, data: restarted })]);\n      return restarted;\n    });\n    if (!run) {\n      throw new ConflictError(`automation run ${runId} is still running`);\n    }\n    try {\n      await this.engine.dispatch(this.dispatchFor(automation, run, run.event));\n    } catch (err) {\n      const message = err instanceof Error ? err.message : String(err);\n      this.logger.error('automation rerun failed', {\n        orgId,\n        automationId,\n        runId: run.id,\n        error: message,\n      });\n      return (await this.recordFailure(run, message)) ?? run;\n    }\n    this.logger.info('automation rerun started', { orgId, automationId, runId: run.id });\n    return run;\n  }\n\n  async listWebhooks(orgId: string): Promise<Webhook[]> {\n    const automations = await this.repo.listByOrg(orgId, 'webhook');\n    return automations.map(toWebhook);\n  }\n\n  async getWebhook(orgId: string, id: string): Promise<Webhook | null> {\n    const automation = await this.findWebhook(orgId, id);\n    return automation ? toWebhook(automation) : null;\n  }\n\n  async createWebhook(orgId: string, input: CreateWebhookInput): Promise<CreatedWebhook> {\n    const events = unique(input.events);\n    this.assertSubscribableEvents(events);\n    const secret = generateWebhookSecret();\n    const automation = await this.uow.run(async ({ automations, credentials, outbox }) => {\n      const secretRef = await credentials.store(orgId, { secret });\n      const created = await automations.insert(orgId, {\n        kind: 'webhook',\n        name: input.url,\n        description: input.description,\n        triggers: events,\n        actions: [{ type: DELIVER_WEBHOOK_ACTION, input: { url: input.url, secretRef } }],\n      });\n      await outbox.append([automationEvents.automationCreated.make({ orgId, data: created })]);\n      return created;\n    });\n    this.logger.info('webhook created', { orgId, automationId: automation.id });\n    return { ...toWebhook(automation), secret };\n  }\n\n  async updateWebhook(\n    orgId: string,\n    id: string,\n    input: UpdateWebhookInput,\n  ): Promise<Webhook | null> {\n    const existing = await this.findWebhook(orgId, id);\n    if (!existing) {\n      return null;\n    }\n    const events = input.events === undefined ? undefined : unique(input.events);\n    if (events) {\n      this.assertSubscribableEvents(events);\n    }\n    const { secretRef } = webhookTarget(existing);\n    const patch: UpdateAutomationInput = {\n      name: input.url,\n      description: input.description,\n      triggers: events,\n      actions:\n        input.url === undefined\n          ? undefined\n          : [{ type: DELIVER_WEBHOOK_ACTION, input: { url: input.url, secretRef } }],\n      enabled: input.enabled,\n    };\n    const updated = await this.uow.run(async ({ automations, outbox }) => {\n      const row = await automations.update(orgId, id, patch);\n      if (!row) {\n        return null;\n      }\n      await outbox.append([updateEvent(orgId, input, row)]);\n      return row;\n    });\n    if (!updated) {\n      return null;\n    }\n    this.logger.info('webhook updated', { orgId, automationId: id });\n    return toWebhook(updated);\n  }\n\n  async deleteWebhook(orgId: string, id: string): Promise<boolean> {\n    const existing = await this.findWebhook(orgId, id);\n    if (!existing) {\n      return false;\n    }\n    const { secretRef } = webhookTarget(existing);\n    const deleted = await this.uow.run(async ({ automations, credentials, outbox }) => {\n      const removed = await automations.delete(orgId, id);\n      if (!removed) {\n        return null;\n      }\n      await credentials.destroy(orgId, secretRef);\n      await outbox.append([automationEvents.automationDeleted.make({ orgId, data: removed })]);\n      return removed;\n    });\n    if (deleted) {\n      this.logger.info('webhook deleted', { orgId, automationId: id });\n    }\n    return deleted !== null;\n  }\n\n  async revealWebhookSecret(orgId: string, id: string): Promise<WebhookSecret | null> {\n    const existing = await this.findWebhook(orgId, id);\n    if (!existing) {\n      return null;\n    }\n    const secrets = await this.credentials.reveal(orgId, webhookTarget(existing).secretRef);\n    const secret = secrets?.['secret'];\n    if (typeof secret !== 'string') {\n      throw new Error(`webhook ${id}: signing secret is missing`);\n    }\n    return { secret };\n  }\n\n  async rotateWebhookSecret(orgId: string, id: string): Promise<WebhookSecret | null> {\n    const existing = await this.findWebhook(orgId, id);\n    if (!existing) {\n      return null;\n    }\n    const secret = generateWebhookSecret();\n    await this.credentials.update(orgId, webhookTarget(existing).secretRef, { secret });\n    this.logger.info('webhook secret rotated', { orgId, automationId: id });\n    return { secret };\n  }\n\n  private async findWebhook(orgId: string, id: string): Promise<Automation | null> {\n    const automation = await this.repo.findById(orgId, id);\n    return automation?.kind === 'webhook' ? automation : null;\n  }\n\n  private assertSubscribableEvents(events: string[]): void {\n    assertAuthorableTriggers(events);\n    const known = new Set(catalogTriggers().map((t) => t.type));\n    for (const event of events) {\n      if (!known.has(event)) {\n        throw new InvalidTriggerError(event, 'unknown');\n      }\n    }\n  }\n\n  availableActions(): AvailableActions {\n    return [\n      ...catalogActions(),\n      ...this.integrations.available().flatMap((integration) =>\n        integration.actions.map((action) => ({\n          type: `${integration.id}.${action.id}`,\n          description: action.description,\n          inputSchema: action.inputSchema as Record<string, JsonValue>,\n          source: integration.id,\n        })),\n      ),\n    ];\n  }\n\n  availableTriggers(): AvailableTriggers {\n    return { triggers: catalogTriggers() };\n  }\n}\n"],"mappings":";;;;;;;;;;AAsDA,SAAS,oBACP,OACmC;CACnC,IAAI,MAAM,YAAY,KAAA,GACpB,OAAO;CAET,MAAM,EAAE,SAAS,UAAU,GAAG,SAAS;CACvC,OAAO,OAAO,OAAO,IAAI,CAAC,CAAC,OAAO,MAAM,MAAM,KAAA,CAAS;AACzD;AAEA,SAAS,OAAO,QAA4B;CAC1C,OAAO,CAAC,GAAG,IAAI,IAAI,MAAM,CAAC;AAC5B;AAEA,SAAS,yBAAyB,UAA0B;CAC1D,KAAK,MAAM,WAAW,UACpB,IAAI,QAAQ,WAAW,aAAa,GAClC,MAAM,IAAI,oBAAoB,OAAO;AAG3C;AAEA,SAAS,wBAAwB,SAAmC;CAClE,KAAK,MAAM,UAAU,SACnB,IAAI,OAAO,SAAA,kBACT,MAAM,IAAI,oBAAoB,OAAO,IAAI;AAG/C;AAEA,SAAS,cAAc,YAA6C;CAClE,OAAO,0BAA0B,MAAM,WAAW,QAAQ,EAAE,EAAE,KAAK;AACrE;AAEA,SAAS,UAAU,YAAiC;CAClD,OAAO;EACL,OAAO,WAAW;EAClB,IAAI,WAAW;EACf,KAAK,cAAc,UAAU,CAAC,CAAC;EAC/B,QAAQ,WAAW;EACnB,aAAa,WAAW;EACxB,SAAS,WAAW;EACpB,WAAW,WAAW;EACtB,WAAW,WAAW;CACxB;AACF;AAEA,SAAS,YAAY,OAAe,OAA8B,SAAqB;CACrF,IAAI,oBAAoB,KAAK,GAC3B,OAAO,MAAM,UACT,iBAAiB,kBAAkB,KAAK;EAAE;EAAO,MAAM;CAAQ,CAAC,IAChE,iBAAiB,mBAAmB,KAAK;EAAE;EAAO,MAAM;CAAQ,CAAC;CAEvE,OAAO,iBAAiB,kBAAkB,KAAK;EAAE;EAAO,MAAM;CAAQ,CAAC;AACzE;AAiBA,IAAa,yBAAb,MAAsF;CACpF;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CAEA,YAAY,QAAkC;EAC5C,KAAK,OAAO,OAAO;EACnB,KAAK,WAAW,OAAO;EACvB,KAAK,MAAM,OAAO;EAClB,KAAK,SAAS,OAAO;EACrB,KAAK,SAAS,OAAO;EACrB,KAAK,UAAU,OAAO;EACtB,KAAK,eAAe,OAAO;EAC3B,KAAK,cAAc,OAAO;EAC1B,KAAK,WAAW,OAAO;EACvB,KAAK,SAAS,OAAO,UAAU;CACjC;CAEA,MAAM,OAAO,OAAmC;EAE9C,IAAI,MAAM,KAAK,WAAW,aAAa,GACrC;EAEF,MAAM,cAAc,MAAM,KAAK,kBAAkB,KAAK;EACtD,KAAK,MAAM,cAAc,YAAY,QAAQ,MAAM,EAAE,OAAO,GAC1D,MAAM,KAAK,YAAY,YAAY,KAAK;CAE5C;CAEA,MAAc,kBAAkB,OAA2C;EACzE,IAAI;GACF,OAAO,MAAM,KAAK,KAAK,cAAc,MAAM,OAAO,MAAM,IAAI;EAC9D,SAAS,KAAK;GACZ,KAAK,OAAO,MAAM,+CAA+C;IAC/D,OAAO,MAAM;IACb,SAAS,MAAM;IACf,OAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;GACxD,CAAC;GACD,OAAO,CAAC;EACV;CACF;CAEA,MAAc,YAAY,YAAwB,OAAmC;EACnF,IAAI,MAA4B;EAChC,IAAI;GACF,MAAM,MAAM,KAAK,QAAQ,YAAY,KAAK;GAC1C,IAAI,CAAC,KAEH;GAEF,MAAM,KAAK,OAAO,SAAS,KAAK,YAAY,YAAY,KAAK,KAAK,CAAC;EACrE,SAAS,KAAK;GACZ,MAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;GAC/D,KAAK,OAAO,MAAM,yBAAyB;IACzC,OAAO,MAAM;IACb,cAAc,WAAW;IACzB,OAAO,KAAK;IACZ,OAAO;GACT,CAAC;GACD,IAAI,KACF,MAAM,KAAK,cAAc,KAAK,OAAO;EAEzC;CACF;CAEA,QAAgB,YAAwB,OAAmD;EACzF,MAAM,sBAAM,IAAI,KAAK;EACrB,OAAO,KAAK,IAAI,IAAI,OAAO,EAAE,MAAM,aAAa;GAC9C,MAAM,WAAW,MAAM,KAAK,OAAO,MAAM,OAAO;IAC9C,OAAO,MAAM;IACb,cAAc,WAAW;IACzB,SAAS,MAAM;IACf;IACA,QAAQ;IACR,eAAe,CAAC;IAChB,WAAW;IACX,YAAY;IACZ,WAAW;IACX,WAAW;GACb,CAAC;GACD,IAAI,CAAC,UACH,OAAO;GAET,MAAM,OAAO,OAAO,CAClB,iBAAiB,WAAW,KAAK;IAC/B,OAAO,MAAM;IACb,MAAM;GACR,CAAC,CACH,CAAC;GACD,OAAO;EACT,CAAC;CACH;CAEA,YACE,YACA,KACA,OACoB;EACpB,OAAO;GACL,OAAO,IAAI;GACX,OAAO,MAAM;GACb,cAAc,WAAW;GACzB,SAAS,WAAW;GACpB;EACF;CACF;;CAGA,MAAc,cAAc,KAAoB,OAA8C;EAC5F,IAAI;GACF,OAAO,MAAM,KAAK,IAAI,IAAI,OAAO,EAAE,MAAM,aAAa;IACpD,MAAM,SAAS,MAAM,KAAK,cAAc,IAAI,OAAO,IAAI,IAAI;KACzD,QAAQ;KACR,eAAe,IAAI;KACnB,4BAAY,IAAI,KAAK;IACvB,CAAC;IACD,IAAI,QACF,MAAM,OAAO,OAAO,CAClB,iBAAiB,UAAU,KAAK;KAC9B,OAAO,IAAI;KACX,MAAM;IACR,CAAC,CACH,CAAC;IAEH,OAAO;GACT,CAAC;EACH,SAAS,KAAK;GACZ,KAAK,OAAO,MAAM,2CAA2C;IAC3D,OAAO,IAAI;IACX,OAAO,IAAI;IACX,OAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;IACtD,eAAe;GACjB,CAAC;GACD,OAAO;EACT;CACF;CAEA,MAAM,UAAU,GAAuB,OAAgD;EACrF,MAAM,SAAS,EAAE,QAAQ;EACzB,IAAI,CAAC,QACH,MAAM,IAAI,MAAM,cAAc,EAAE,aAAa,OAAO,EAAE,MAAM,uBAAuB,OAAO;EAE5F,MAAM,cAAc,QAAQ,EAAE,OAAO;GACnC,QAAQ,KAAK;GACb,SAAS,KAAK;GACd,aAAa,KAAK;GAClB,UAAU,KAAK;EACjB,CAAC;EACD,OAAO;GAAE;GAAO,MAAM,OAAO;GAAM,QAAQ;EAAY;CACzD;CAEA,MAAM,SAAS,GAAuB,SAAkD;EACtF,MAAM,SACJ,QAAQ,WAAW,EAAE,QAAQ,UAAU,QAAQ,OAAO,MAAM,EAAE,WAAW,WAAW,IAChF,cACA;EACN,MAAM,KAAK,IAAI,IAAI,OAAO,EAAE,MAAM,aAAa;GAC7C,MAAM,MAAM,MAAM,KAAK,cAAc,EAAE,OAAO,EAAE,OAAO;IACrD;IACA,eAAe;IACf,4BAAY,IAAI,KAAK;GACvB,CAAC;GACD,IAAI,CAAC,KACH;GAEF,MAAM,WACJ,WAAW,cACP,iBAAiB,aAAa,KAAK;IAAE,OAAO,EAAE;IAAO,MAAM;GAAI,CAAC,IAChE,iBAAiB,UAAU,KAAK;IAAE,OAAO,EAAE;IAAO,MAAM;GAAI,CAAC;GACnE,MAAM,qBAAqB,QACxB,QAAQ,MAAM,EAAE,WAAW,QAAQ,CAAC,CACpC,KAAK,YAAY,EAChB,GAAG,iBAAiB,aAAa,KAAK;IACpC,OAAO,EAAE;IACT,MAAM;GACR,CAAC,EACH,EAAE;GACJ,MAAM,OAAO,OAAO,CAAC,UAAU,GAAG,kBAAkB,CAAC;EACvD,CAAC;CACH;CAEA,MAAM,OAAO,OAAe,OAAmD;EAC7E,yBAAyB,MAAM,QAAQ;EACvC,wBAAwB,MAAM,OAAO;EACrC,MAAM,aAAa,MAAM,KAAK,IAAI,IAAI,OAAO,EAAE,aAAa,aAAa;GACvE,MAAM,UAAU,MAAM,YAAY,OAAO,OAAO;IAC9C,GAAG;IACH,UAAU,OAAO,MAAM,QAAQ;IAC/B,MAAM;GACR,CAAC;GACD,MAAM,OAAO,OAAO,CAAC,iBAAiB,kBAAkB,KAAK;IAAE;IAAO,MAAM;GAAQ,CAAC,CAAC,CAAC;GACvF,OAAO;EACT,CAAC;EACD,KAAK,OAAO,KAAK,sBAAsB;GAAE;GAAO,cAAc,WAAW;EAAG,CAAC;EAC7E,OAAO;CACT;CAEA,MAAM,OACJ,OACA,IACA,OAC4B;EAC5B,IAAI,MAAM,aAAa,KAAA,GACrB,yBAAyB,MAAM,QAAQ;EAEzC,IAAI,MAAM,YAAY,KAAA,GACpB,wBAAwB,MAAM,OAAO;EAEvC,MAAM,WAAW,MAAM,KAAK,KAAK,SAAS,OAAO,EAAE;EACnD,IAAI,CAAC,UACH,OAAO;EAET,IAAI,SAAS,SAAS,YACpB,MAAM,IAAI,4BAA4B,IAAI,SAAS,IAAI;EAEzD,MAAM,QACJ,MAAM,aAAa,KAAA,IAAY,QAAQ;GAAE,GAAG;GAAO,UAAU,OAAO,MAAM,QAAQ;EAAE;EACtF,MAAM,aAAa,MAAM,KAAK,IAAI,IAAI,OAAO,EAAE,aAAa,aAAa;GACvE,MAAM,UAAU,MAAM,YAAY,OAAO,OAAO,IAAI,KAAK;GACzD,IAAI,CAAC,SACH,OAAO;GAET,MAAM,OAAO,OAAO,CAAC,YAAY,OAAO,OAAO,OAAO,CAAC,CAAC;GACxD,OAAO;EACT,CAAC;EACD,IAAI,YACF,KAAK,OAAO,KAAK,sBAAsB;GAAE;GAAO,cAAc;EAAG,CAAC;EAEpE,OAAO;CACT;CAEA,MAAM,OAAO,OAAe,IAA8B;EACxD,MAAM,WAAW,MAAM,KAAK,KAAK,SAAS,OAAO,EAAE;EACnD,IAAI,CAAC,UACH,OAAO;EAET,IAAI,SAAS,SAAS,YACpB,MAAM,IAAI,4BAA4B,IAAI,SAAS,IAAI;EAEzD,MAAM,UAAU,MAAM,KAAK,IAAI,IAAI,OAAO,EAAE,aAAa,aAAa;GACpE,MAAM,UAAU,MAAM,YAAY,OAAO,OAAO,EAAE;GAClD,IAAI,CAAC,SACH,OAAO;GAET,MAAM,OAAO,OAAO,CAAC,iBAAiB,kBAAkB,KAAK;IAAE;IAAO,MAAM;GAAQ,CAAC,CAAC,CAAC;GACvF,OAAO;EACT,CAAC;EACD,IAAI,SACF,KAAK,OAAO,KAAK,sBAAsB;GAAE;GAAO,cAAc;EAAG,CAAC;EAEpE,OAAO,YAAY;CACrB;CAEA,KAAK,OAAe,OAAiD;EACnE,OAAO,KAAK,KAAK,UAAU,OAAO,OAAO,IAAI;CAC/C;CAEA,IAAI,OAAe,IAAwC;EACzD,OAAO,KAAK,KAAK,SAAS,OAAO,EAAE;CACrC;CAEA,SACE,OACA,cACA,OAC8B;EAC9B,OAAO,KAAK,SAAS,KAAK,OAAO,cAAc,KAAK;CACtD;CAEA,MAAM,MAAM,OAAe,cAAsB,OAAuC;EACtF,MAAM,WAAW,MAAM,KAAK,SAAS,SAAS,OAAO,KAAK;EAC1D,IAAI,CAAC,YAAY,SAAS,iBAAiB,cACzC,MAAM,IAAI,cAAc,kBAAkB,KAAK;EAEjD,MAAM,aAAa,MAAM,KAAK,KAAK,SAAS,OAAO,YAAY;EAC/D,IAAI,CAAC,YACH,MAAM,IAAI,cAAc,cAAc,YAAY;EAEpD,MAAM,MAAM,MAAM,KAAK,IAAI,IAAI,OAAO,EAAE,MAAM,aAAa;GACzD,MAAM,YAAY,MAAM,KAAK,QAAQ,OAAO,uBAAO,IAAI,KAAK,CAAC;GAC7D,IAAI,CAAC,WACH,OAAO;GAET,MAAM,OAAO,OAAO,CAAC,iBAAiB,WAAW,KAAK;IAAE;IAAO,MAAM;GAAU,CAAC,CAAC,CAAC;GAClF,OAAO;EACT,CAAC;EACD,IAAI,CAAC,KACH,MAAM,IAAI,cAAc,kBAAkB,MAAM,kBAAkB;EAEpE,IAAI;GACF,MAAM,KAAK,OAAO,SAAS,KAAK,YAAY,YAAY,KAAK,IAAI,KAAK,CAAC;EACzE,SAAS,KAAK;GACZ,MAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;GAC/D,KAAK,OAAO,MAAM,2BAA2B;IAC3C;IACA;IACA,OAAO,IAAI;IACX,OAAO;GACT,CAAC;GACD,OAAQ,MAAM,KAAK,cAAc,KAAK,OAAO,KAAM;EACrD;EACA,KAAK,OAAO,KAAK,4BAA4B;GAAE;GAAO;GAAc,OAAO,IAAI;EAAG,CAAC;EACnF,OAAO;CACT;CAEA,MAAM,aAAa,OAAmC;EAEpD,QAAO,MADmB,KAAK,KAAK,UAAU,OAAO,SAAS,EAAA,CAC3C,IAAI,SAAS;CAClC;CAEA,MAAM,WAAW,OAAe,IAAqC;EACnE,MAAM,aAAa,MAAM,KAAK,YAAY,OAAO,EAAE;EACnD,OAAO,aAAa,UAAU,UAAU,IAAI;CAC9C;CAEA,MAAM,cAAc,OAAe,OAAoD;EACrF,MAAM,SAAS,OAAO,MAAM,MAAM;EAClC,KAAK,yBAAyB,MAAM;EACpC,MAAM,SAAS,sBAAsB;EACrC,MAAM,aAAa,MAAM,KAAK,IAAI,IAAI,OAAO,EAAE,aAAa,aAAa,aAAa;GACpF,MAAM,YAAY,MAAM,YAAY,MAAM,OAAO,EAAE,OAAO,CAAC;GAC3D,MAAM,UAAU,MAAM,YAAY,OAAO,OAAO;IAC9C,MAAM;IACN,MAAM,MAAM;IACZ,aAAa,MAAM;IACnB,UAAU;IACV,SAAS,CAAC;KAAE,MAAM;KAAwB,OAAO;MAAE,KAAK,MAAM;MAAK;KAAU;IAAE,CAAC;GAClF,CAAC;GACD,MAAM,OAAO,OAAO,CAAC,iBAAiB,kBAAkB,KAAK;IAAE;IAAO,MAAM;GAAQ,CAAC,CAAC,CAAC;GACvF,OAAO;EACT,CAAC;EACD,KAAK,OAAO,KAAK,mBAAmB;GAAE;GAAO,cAAc,WAAW;EAAG,CAAC;EAC1E,OAAO;GAAE,GAAG,UAAU,UAAU;GAAG;EAAO;CAC5C;CAEA,MAAM,cACJ,OACA,IACA,OACyB;EACzB,MAAM,WAAW,MAAM,KAAK,YAAY,OAAO,EAAE;EACjD,IAAI,CAAC,UACH,OAAO;EAET,MAAM,SAAS,MAAM,WAAW,KAAA,IAAY,KAAA,IAAY,OAAO,MAAM,MAAM;EAC3E,IAAI,QACF,KAAK,yBAAyB,MAAM;EAEtC,MAAM,EAAE,cAAc,cAAc,QAAQ;EAC5C,MAAM,QAA+B;GACnC,MAAM,MAAM;GACZ,aAAa,MAAM;GACnB,UAAU;GACV,SACE,MAAM,QAAQ,KAAA,IACV,KAAA,IACA,CAAC;IAAE,MAAM;IAAwB,OAAO;KAAE,KAAK,MAAM;KAAK;IAAU;GAAE,CAAC;GAC7E,SAAS,MAAM;EACjB;EACA,MAAM,UAAU,MAAM,KAAK,IAAI,IAAI,OAAO,EAAE,aAAa,aAAa;GACpE,MAAM,MAAM,MAAM,YAAY,OAAO,OAAO,IAAI,KAAK;GACrD,IAAI,CAAC,KACH,OAAO;GAET,MAAM,OAAO,OAAO,CAAC,YAAY,OAAO,OAAO,GAAG,CAAC,CAAC;GACpD,OAAO;EACT,CAAC;EACD,IAAI,CAAC,SACH,OAAO;EAET,KAAK,OAAO,KAAK,mBAAmB;GAAE;GAAO,cAAc;EAAG,CAAC;EAC/D,OAAO,UAAU,OAAO;CAC1B;CAEA,MAAM,cAAc,OAAe,IAA8B;EAC/D,MAAM,WAAW,MAAM,KAAK,YAAY,OAAO,EAAE;EACjD,IAAI,CAAC,UACH,OAAO;EAET,MAAM,EAAE,cAAc,cAAc,QAAQ;EAC5C,MAAM,UAAU,MAAM,KAAK,IAAI,IAAI,OAAO,EAAE,aAAa,aAAa,aAAa;GACjF,MAAM,UAAU,MAAM,YAAY,OAAO,OAAO,EAAE;GAClD,IAAI,CAAC,SACH,OAAO;GAET,MAAM,YAAY,QAAQ,OAAO,SAAS;GAC1C,MAAM,OAAO,OAAO,CAAC,iBAAiB,kBAAkB,KAAK;IAAE;IAAO,MAAM;GAAQ,CAAC,CAAC,CAAC;GACvF,OAAO;EACT,CAAC;EACD,IAAI,SACF,KAAK,OAAO,KAAK,mBAAmB;GAAE;GAAO,cAAc;EAAG,CAAC;EAEjE,OAAO,YAAY;CACrB;CAEA,MAAM,oBAAoB,OAAe,IAA2C;EAClF,MAAM,WAAW,MAAM,KAAK,YAAY,OAAO,EAAE;EACjD,IAAI,CAAC,UACH,OAAO;EAGT,MAAM,UAAS,MADO,KAAK,YAAY,OAAO,OAAO,cAAc,QAAQ,CAAC,CAAC,SAAS,EAAA,GAC7D;EACzB,IAAI,OAAO,WAAW,UACpB,MAAM,IAAI,MAAM,WAAW,GAAG,4BAA4B;EAE5D,OAAO,EAAE,OAAO;CAClB;CAEA,MAAM,oBAAoB,OAAe,IAA2C;EAClF,MAAM,WAAW,MAAM,KAAK,YAAY,OAAO,EAAE;EACjD,IAAI,CAAC,UACH,OAAO;EAET,MAAM,SAAS,sBAAsB;EACrC,MAAM,KAAK,YAAY,OAAO,OAAO,cAAc,QAAQ,CAAC,CAAC,WAAW,EAAE,OAAO,CAAC;EAClF,KAAK,OAAO,KAAK,0BAA0B;GAAE;GAAO,cAAc;EAAG,CAAC;EACtE,OAAO,EAAE,OAAO;CAClB;CAEA,MAAc,YAAY,OAAe,IAAwC;EAC/E,MAAM,aAAa,MAAM,KAAK,KAAK,SAAS,OAAO,EAAE;EACrD,OAAO,YAAY,SAAS,YAAY,aAAa;CACvD;CAEA,yBAAiC,QAAwB;EACvD,yBAAyB,MAAM;EAC/B,MAAM,QAAQ,IAAI,IAAI,gBAAgB,CAAC,CAAC,KAAK,MAAM,EAAE,IAAI,CAAC;EAC1D,KAAK,MAAM,SAAS,QAClB,IAAI,CAAC,MAAM,IAAI,KAAK,GAClB,MAAM,IAAI,oBAAoB,OAAO,SAAS;CAGpD;CAEA,mBAAqC;EACnC,OAAO,CACL,GAAG,eAAe,GAClB,GAAG,KAAK,aAAa,UAAU,CAAC,CAAC,SAAS,gBACxC,YAAY,QAAQ,KAAK,YAAY;GACnC,MAAM,GAAG,YAAY,GAAG,GAAG,OAAO;GAClC,aAAa,OAAO;GACpB,aAAa,OAAO;GACpB,QAAQ,YAAY;EACtB,EAAE,CACJ,CACF;CACF;CAEA,oBAAuC;EACrC,OAAO,EAAE,UAAU,gBAAgB,EAAE;CACvC;AACF"}
+{"version":3,"file":"service.js","names":[],"sources":["../../src/automations/service.ts"],"sourcesContent":["// automations context — service implementation (inbound port) and the\n// AutomationExecutor the engine drives.\n//\n// `handle` is subscribed to all events on the EventBus: it matches an event\n// against enabled automations for its trigger, opens one run per match, and\n// hands it to the injected AutomationEngine, which calls back into\n// `runAction`/`finalize`.\nimport {\n  catalogActions,\n  catalogTriggers,\n  DELIVER_WEBHOOK_ACTION,\n  publicDataSchema,\n} from './catalog.js';\nimport { executeAction, type ActionOutcome } from './actions.js';\nimport { generateWebhookSecret } from './webhook-signing.js';\nimport type { CommunityMailReads, GrantWriter } from './community-mail.js';\nimport type { NotificationDelivery } from './notifications/delivery.js';\nimport type { NotificationProcessor } from './notifications/processor.js';\nimport { cronSupported } from './schedule.js';\nimport {\n  ActionFailedError,\n  AutomationKindMismatchError,\n  InvalidTriggerError,\n  ReservedActionError,\n  type Automation,\n  type AutomationAction,\n  type AutomationActionResult,\n  type AutomationRun,\n  type CreatedWebhook,\n  type DeliverWebhookInput,\n  type Page,\n  type Webhook,\n  type WebhookSecret,\n} from './model.js';\nimport type {\n  AutomationRunsQuery,\n  AutomationsQuery,\n  AvailableActions,\n  AvailableTriggers,\n  CreateAutomationInput,\n  CreateWebhookInput,\n  UpdateAutomationInput,\n  UpdateWebhookInput,\n} from './types.js';\nimport type {\n  AutomationDispatch,\n  AutomationEngine,\n  AutomationExecutor,\n  AutomationRunsRepository,\n  AutomationsRepository,\n  AutomationsService,\n  AutomationsUnitOfWork,\n  DeliveryDispatch,\n  WebhookSender,\n} from './ports.js';\nimport type { CredentialStore, DomainEvent, Logger } from '../shared/ports.js';\nimport type { JsonValue, ScheduledAutomation } from '../types/index.js';\nimport { deliverWebhookInputSchema } from '../types/schemas/index.js';\nimport { ConflictError, InvalidInputError, NotFoundError } from '../shared/errors.js';\nimport { noopLogger } from '../shared/logger.js';\nimport type { Mailer, MailerLookups } from '../shared/mailer.js';\nimport type { IntegrationsService } from '../integrations/index.js';\nimport { automationEvents } from './events.js';\n\n/** True only when `input` sets `enabled` and nothing else — emits automation.enabled|disabled instead of automation.updated. */\nfunction isEnabledOnlyUpdate<T extends { enabled?: boolean }>(\n  input: T,\n): input is T & { enabled: boolean } {\n  if (input.enabled === undefined) {\n    return false;\n  }\n  const { enabled: _enabled, ...rest } = input;\n  return Object.values(rest).every((v) => v === undefined);\n}\n\nfunction floorMinute(at: Date): number {\n  const copy = new Date(at);\n  copy.setUTCSeconds(0, 0);\n  return copy.getTime();\n}\n\nfunction unique(values: string[]): string[] {\n  return [...new Set(values)];\n}\n\nfunction filterMatches(filter: Record<string, JsonValue> | null, data: unknown): boolean {\n  if (filter == null) {\n    return true;\n  }\n  if (typeof data !== 'object' || data === null || Array.isArray(data)) {\n    return false;\n  }\n  const record = data as Record<string, unknown>;\n  return Object.entries(filter).every(([key, expected]) => {\n    if (!Object.prototype.hasOwnProperty.call(record, key)) {\n      return false;\n    }\n    return JSON.stringify(record[key]) === JSON.stringify(expected);\n  });\n}\n\nfunction assertAuthorableTriggers(triggers: string[]): void {\n  for (const trigger of triggers) {\n    if (trigger.startsWith('automation.')) {\n      throw new InvalidTriggerError(trigger);\n    }\n    if (trigger.startsWith('schedule:') && !cronSupported(trigger.slice('schedule:'.length))) {\n      throw new InvalidTriggerError(trigger, 'schedule');\n    }\n  }\n}\n\nfunction assertCatalogTriggers(triggers: string[], schedules: boolean): void {\n  assertAuthorableTriggers(triggers);\n  const known = new Set(catalogTriggers().map((t) => t.type));\n  for (const trigger of triggers) {\n    if (!(schedules && trigger.startsWith('schedule:')) && !known.has(trigger)) {\n      throw new InvalidTriggerError(trigger, 'unknown');\n    }\n  }\n}\n\nconst REMOVED_ACTIONS = new Set([\n  'notify',\n  'publishDuePosts',\n  'expireDueGrants',\n  'sendDigest',\n  'removeUnattachedUploads',\n]);\n\nfunction assertAuthorableActions(actions: AutomationAction[]): void {\n  for (const action of actions) {\n    if (action.type === DELIVER_WEBHOOK_ACTION) {\n      throw new ReservedActionError(action.type);\n    }\n    if (REMOVED_ACTIONS.has(action.type)) {\n      throw new InvalidInputError(`The action \"${action.type}\" is no longer available`);\n    }\n  }\n}\n\nconst SCHEDULE_FIRED = 'automation.schedule.fired';\n\nfunction publicEventData(event: DomainEvent): JsonValue {\n  const parsed =\n    event.type === SCHEDULE_FIRED\n      ? { success: true as const, data: event.data }\n      : publicDataSchema(event.type)?.safeParse(event.data);\n  return parsed?.success ? (JSON.parse(JSON.stringify(parsed.data)) as JsonValue) : null;\n}\n\n/** A run as callers see it: its event carries only what a webhook of that event would. */\nfunction toRunView(run: AutomationRun): AutomationRun {\n  const { type, version, id, orgId, occurredAt } = run.event;\n  return {\n    ...run,\n    event: { type, version, id, orgId, occurredAt, data: publicEventData(run.event) },\n  };\n}\n\n/** An automation as callers see it: a webhook's credential reference stays internal. */\nfunction toAutomationView(automation: Automation): Automation {\n  return {\n    ...automation,\n    actions: automation.actions.map((action) => {\n      if (action.type !== DELIVER_WEBHOOK_ACTION) {\n        return action;\n      }\n      const { secretRef: _secretRef, ...input } = action.input;\n      return { ...action, input };\n    }),\n  };\n}\n\nfunction webhookTarget(automation: Automation): DeliverWebhookInput {\n  return deliverWebhookInputSchema.parse(automation.actions[0]?.input);\n}\n\nfunction toWebhook(automation: Automation): Webhook {\n  return {\n    orgId: automation.orgId,\n    id: automation.id,\n    url: webhookTarget(automation).url,\n    events: automation.triggers,\n    description: automation.description,\n    enabled: automation.enabled,\n    createdAt: automation.createdAt,\n    updatedAt: automation.updatedAt,\n  };\n}\n\nfunction updateEvent(orgId: string, input: { enabled?: boolean }, updated: Automation) {\n  if (isEnabledOnlyUpdate(input)) {\n    return input.enabled\n      ? automationEvents.automationEnabled.make({ orgId, data: updated })\n      : automationEvents.automationDisabled.make({ orgId, data: updated });\n  }\n  return automationEvents.automationUpdated.make({ orgId, data: updated });\n}\n\nexport type AutomationsServiceParams = {\n  /** Read-only access (list/get/available) — runs outside any transaction. */\n  repo: AutomationsRepository;\n  runsRepo: AutomationRunsRepository;\n  /** Atomic write scope: tx-bound repos + credential store + outbox appender. */\n  uow: AutomationsUnitOfWork;\n  engine: AutomationEngine;\n  mailer: Pick<Mailer, 'send'>;\n  lookups: MailerLookups;\n  integrations: Pick<IntegrationsService, 'available'>;\n  credentials: CredentialStore;\n  webhooks: WebhookSender;\n  mail: Omit<CommunityMailReads, 'recentMessageRecipients'>;\n  grants: GrantWriter;\n  delivery: Pick<NotificationDelivery, 'run'>;\n  processor: Pick<NotificationProcessor, 'process'>;\n  logger?: Logger;\n};\n\nexport class AutomationsServiceImpl implements AutomationsService, AutomationExecutor {\n  private readonly repo: AutomationsRepository;\n  private readonly runsRepo: AutomationRunsRepository;\n  private readonly uow: AutomationsUnitOfWork;\n  private readonly engine: AutomationEngine;\n  private readonly mailer: Pick<Mailer, 'send'>;\n  private readonly lookups: MailerLookups;\n  private readonly integrations: Pick<IntegrationsService, 'available'>;\n  private readonly credentials: CredentialStore;\n  private readonly webhooks: WebhookSender;\n  private readonly mail: CommunityMailReads;\n  private readonly grants: GrantWriter;\n  private readonly delivery: Pick<NotificationDelivery, 'run'>;\n  private readonly processor: Pick<NotificationProcessor, 'process'>;\n  private readonly logger: Logger;\n\n  constructor(params: AutomationsServiceParams) {\n    this.repo = params.repo;\n    this.runsRepo = params.runsRepo;\n    this.uow = params.uow;\n    this.engine = params.engine;\n    this.mailer = params.mailer;\n    this.lookups = params.lookups;\n    this.integrations = params.integrations;\n    this.credentials = params.credentials;\n    this.webhooks = params.webhooks;\n    this.mail = {\n      ...params.mail,\n      recentMessageRecipients: (orgId, automationId, chatId, since) =>\n        this.runsRepo.recentRecipients(orgId, automationId, chatId, since),\n    };\n    this.grants = params.grants;\n    this.delivery = params.delivery;\n    this.processor = params.processor;\n    this.logger = params.logger ?? noopLogger;\n  }\n\n  async handle(event: DomainEvent): Promise<void> {\n    // automation.* events are this service's own output — matching one as a trigger would self-loop.\n    if (event.type.startsWith('automation.')) {\n      return;\n    }\n    const automations = await this.safeListByTrigger(event);\n    for (const automation of automations) {\n      const matches = filterMatches(automation.filter, event.data);\n      if (!automation.enabled || !matches) {\n        if (automation.enabled && !matches) {\n          this.logger.debug('automation filter skipped', {\n            orgId: event.orgId,\n            automationId: automation.id,\n            trigger: event.type,\n          });\n        }\n        continue;\n      }\n      await this.dispatchOne(automation, event);\n    }\n    await this.processor.process(event);\n  }\n\n  private async reconcileSchedules(orgId: string): Promise<void> {\n    try {\n      await this.engine.syncSchedules?.();\n    } catch (err) {\n      this.logger.error('automation schedules not reconciled', { orgId, err });\n    }\n  }\n\n  private async safeListByTrigger(event: DomainEvent): Promise<Automation[]> {\n    try {\n      return await this.repo.listByTrigger(event.orgId, event.type);\n    } catch (err) {\n      this.logger.error('automations: failed to load trigger matches', {\n        orgId: event.orgId,\n        trigger: event.type,\n        err,\n      });\n      return [];\n    }\n  }\n\n  private async dispatchOne(automation: Automation, event: DomainEvent): Promise<void> {\n    let run: AutomationRun | null = null;\n    try {\n      run = await this.openRun(automation, event);\n      if (!run) {\n        // At-least-once redelivery of a trigger event already run for this automation — no-op.\n        return;\n      }\n      await this.engine.dispatch(this.dispatchFor(automation, run, event));\n    } catch (err) {\n      this.logger.error('automation run failed', {\n        orgId: event.orgId,\n        automationId: automation.id,\n        runId: run?.id,\n        trigger: event.type,\n        eventId: event.id,\n        err,\n      });\n      if (run) {\n        await this.recordFailure(run, err instanceof Error ? err.message : String(err));\n      }\n    }\n  }\n\n  private openRun(automation: Automation, event: DomainEvent): Promise<AutomationRun | null> {\n    const now = new Date();\n    return this.uow.run(async ({ runs, outbox }) => {\n      const inserted = await runs.insert(event.orgId, {\n        orgId: event.orgId,\n        automationId: automation.id,\n        trigger: event.type,\n        event,\n        status: 'running',\n        actionResults: [],\n        startedAt: now,\n        finishedAt: null,\n        createdAt: now,\n        updatedAt: now,\n      });\n      if (!inserted) {\n        return null;\n      }\n      await outbox.append([\n        automationEvents.runStarted.make({\n          orgId: event.orgId,\n          data: inserted,\n        }),\n      ]);\n      return inserted;\n    });\n  }\n\n  private dispatchFor(\n    automation: Automation,\n    run: AutomationRun,\n    event: DomainEvent,\n  ): AutomationDispatch {\n    return {\n      runId: run.id,\n      orgId: event.orgId,\n      automationId: automation.id,\n      actions: automation.actions,\n      event,\n    };\n  }\n\n  /** Best-effort: logs and never rethrows, so an org automation never fails `handle`. */\n  private async recordFailure(run: AutomationRun, error: string): Promise<AutomationRun | null> {\n    try {\n      return await this.uow.run(async ({ runs, outbox }) => {\n        const failed = await runs.recordOutcome(run.orgId, run.id, {\n          status: 'failed',\n          actionResults: run.actionResults,\n          finishedAt: new Date(),\n        });\n        if (failed) {\n          await outbox.append([\n            automationEvents.runFailed.make({\n              orgId: run.orgId,\n              data: failed,\n            }),\n          ]);\n        }\n        return failed;\n      });\n    } catch (err) {\n      this.logger.error('failed to record automation run failure', {\n        orgId: run.orgId,\n        automationId: run.automationId,\n        runId: run.id,\n        err,\n        originalError: error,\n      });\n      return null;\n    }\n  }\n\n  async runAction(d: AutomationDispatch, index: number): Promise<AutomationActionResult> {\n    const action = d.actions[index];\n    if (!action) {\n      throw new Error(`automation ${d.automationId} run ${d.runId}: no action at index ${index}`);\n    }\n    let outcome: ActionOutcome;\n    try {\n      outcome = await executeAction(action, d.event, {\n        mailer: this.mailer,\n        lookups: this.lookups,\n        credentials: this.credentials,\n        webhooks: this.webhooks,\n        mail: this.mail,\n        grants: this.grants,\n        automationId: d.automationId,\n        actionInput: action.input,\n        logger: this.logger,\n      });\n    } catch (err) {\n      this.logger.error('automation action failed', {\n        orgId: d.orgId,\n        automationId: d.automationId,\n        runId: d.runId,\n        trigger: d.event.type,\n        index,\n        type: action.type,\n        err,\n      });\n      throw err instanceof ActionFailedError ? err : new ActionFailedError();\n    }\n    const { recipients, failed } = outcome;\n    this.logger.info('automation action completed', {\n      orgId: d.orgId,\n      automationId: d.automationId,\n      runId: d.runId,\n      type: action.type,\n      recipients: recipients.length,\n      failed: failed.length,\n    });\n    return {\n      index,\n      type: action.type,\n      status: 'completed',\n      ...(recipients.length > 0 ? { recipients } : {}),\n      ...(failed.length > 0\n        ? { error: `delivery failed for ${failed.length} recipients: ${failed.join(', ')}` }\n        : {}),\n    };\n  }\n\n  runDelivery(d: DeliveryDispatch, lastAttempt: boolean): Promise<void> {\n    return this.delivery.run(d, lastAttempt);\n  }\n\n  async listSchedules(): Promise<ScheduledAutomation[]> {\n    return this.repo.listSchedules();\n  }\n\n  async fireSchedule(orgId: string, automationId: string, at: Date): Promise<void> {\n    const firedAt = new Date(floorMinute(at));\n    const automation = await this.repo.findById(orgId, automationId);\n    if (!automation?.enabled || firedAt.getTime() < floorMinute(automation.createdAt)) {\n      this.logger.debug('schedule skipped', { orgId, automationId });\n      return;\n    }\n    const event: DomainEvent = {\n      type: SCHEDULE_FIRED,\n      id: `schedule_${automationId}_${firedAt.toISOString()}`,\n      orgId,\n      version: 1,\n      occurredAt: firedAt.toISOString(),\n      data: { automationId, firedAt: firedAt.toISOString() },\n    };\n    await this.dispatchOne(automation, event);\n  }\n\n  async finalize(d: AutomationDispatch, results: AutomationActionResult[]): Promise<void> {\n    const status: 'completed' | 'failed' =\n      results.length === d.actions.length && results.every((r) => r.status === 'completed')\n        ? 'completed'\n        : 'failed';\n    await this.uow.run(async ({ runs, outbox }) => {\n      const run = await runs.recordOutcome(d.orgId, d.runId, {\n        status,\n        actionResults: results,\n        finishedAt: new Date(),\n      });\n      if (!run) {\n        return;\n      }\n      const runEvent =\n        status === 'completed'\n          ? automationEvents.runCompleted.make({ orgId: d.orgId, data: run })\n          : automationEvents.runFailed.make({ orgId: d.orgId, data: run });\n      const actionFailedEvents = results\n        .filter((r) => r.status === 'failed')\n        .map((result) => ({\n          ...automationEvents.actionFailed.make({\n            orgId: d.orgId,\n            data: result,\n          }),\n        }));\n      await outbox.append([runEvent, ...actionFailedEvents]);\n    });\n    this.logOutcome(d, status, results);\n  }\n\n  private logOutcome(\n    d: AutomationDispatch,\n    status: 'completed' | 'failed',\n    results: AutomationActionResult[],\n  ): void {\n    const run = {\n      orgId: d.orgId,\n      automationId: d.automationId,\n      runId: d.runId,\n      trigger: d.event.type,\n      eventId: d.event.id,\n    };\n    if (status === 'failed') {\n      const failed = results.find((r) => r.status === 'failed');\n      const index = failed?.index ?? results.length;\n      this.logger.error('automation run failed', {\n        ...run,\n        index,\n        action: failed?.type ?? d.actions[index]?.type,\n        error: failed?.error ?? 'not every action ran',\n      });\n      return;\n    }\n    const partial = results.filter((r) => r.error !== undefined);\n    if (partial.length > 0) {\n      this.logger.warn('automation run completed with failed deliveries', {\n        ...run,\n        actions: partial.map(({ index, type, error }) => ({ index, type, error })),\n      });\n    }\n  }\n\n  async create(orgId: string, input: CreateAutomationInput): Promise<Automation> {\n    assertCatalogTriggers(input.triggers, true);\n    assertAuthorableActions(input.actions);\n    const automation = await this.uow.run(async ({ automations, outbox }) => {\n      const created = await automations.insert(orgId, {\n        ...input,\n        triggers: unique(input.triggers),\n        kind: 'workflow',\n      });\n      await outbox.append([automationEvents.automationCreated.make({ orgId, data: created })]);\n      return created;\n    });\n    this.logger.info('automation created', { orgId, automationId: automation.id });\n    await this.reconcileSchedules(orgId);\n    return automation;\n  }\n\n  async update(\n    orgId: string,\n    id: string,\n    input: UpdateAutomationInput,\n  ): Promise<Automation | null> {\n    if (input.triggers !== undefined) {\n      assertCatalogTriggers(input.triggers, true);\n    }\n    if (input.actions !== undefined) {\n      assertAuthorableActions(input.actions);\n    }\n    const existing = await this.repo.findById(orgId, id);\n    if (!existing) {\n      return null;\n    }\n    if (existing.kind !== 'workflow') {\n      throw new AutomationKindMismatchError(id, existing.kind);\n    }\n    const patch =\n      input.triggers === undefined ? input : { ...input, triggers: unique(input.triggers) };\n    const automation = await this.uow.run(async ({ automations, outbox }) => {\n      const updated = await automations.update(orgId, id, patch);\n      if (!updated) {\n        return null;\n      }\n      await outbox.append([updateEvent(orgId, input, updated)]);\n      return updated;\n    });\n    if (automation) {\n      this.logger.info('automation updated', { orgId, automationId: id });\n      await this.reconcileSchedules(orgId);\n    }\n    return automation;\n  }\n\n  async delete(orgId: string, id: string): Promise<boolean> {\n    const existing = await this.repo.findById(orgId, id);\n    if (!existing) {\n      return false;\n    }\n    if (existing.kind !== 'workflow') {\n      throw new AutomationKindMismatchError(id, existing.kind);\n    }\n    const deleted = await this.uow.run(async ({ automations, outbox }) => {\n      const removed = await automations.delete(orgId, id);\n      if (!removed) {\n        return null;\n      }\n      await outbox.append([automationEvents.automationDeleted.make({ orgId, data: removed })]);\n      return removed;\n    });\n    if (deleted) {\n      this.logger.info('automation deleted', { orgId, automationId: id });\n      await this.reconcileSchedules(orgId);\n    }\n    return deleted !== null;\n  }\n\n  async list(orgId: string, query?: AutomationsQuery): Promise<Automation[]> {\n    const automations = await this.repo.listByOrg(orgId, query?.kind);\n    return automations.map(toAutomationView);\n  }\n\n  async get(orgId: string, id: string): Promise<Automation | null> {\n    const automation = await this.repo.findById(orgId, id);\n    return automation ? toAutomationView(automation) : null;\n  }\n\n  async listRuns(\n    orgId: string,\n    automationId: string,\n    query: AutomationRunsQuery,\n  ): Promise<Page<AutomationRun>> {\n    const page = await this.runsRepo.list(orgId, automationId, query);\n    return { ...page, rows: page.rows.map(toRunView) };\n  }\n\n  async rerun(orgId: string, automationId: string, runId: string): Promise<AutomationRun> {\n    const existing = await this.runsRepo.findById(orgId, runId);\n    if (!existing || existing.automationId !== automationId) {\n      throw new NotFoundError('Automation run', runId);\n    }\n    const automation = await this.repo.findById(orgId, automationId);\n    if (!automation) {\n      throw new NotFoundError('Automation', automationId);\n    }\n    const run = await this.uow.run(async ({ runs, outbox }) => {\n      const restarted = await runs.restart(orgId, runId, new Date());\n      if (!restarted) {\n        return null;\n      }\n      await outbox.append([automationEvents.runStarted.make({ orgId, data: restarted })]);\n      return restarted;\n    });\n    if (!run) {\n      throw new ConflictError(`automation run ${runId} is still running`);\n    }\n    try {\n      await this.engine.dispatch(this.dispatchFor(automation, run, run.event));\n    } catch (err) {\n      this.logger.error('automation rerun failed', {\n        orgId,\n        automationId,\n        runId: run.id,\n        trigger: run.trigger,\n        err,\n      });\n      const failed = await this.recordFailure(\n        run,\n        err instanceof Error ? err.message : String(err),\n      );\n      return toRunView(failed ?? run);\n    }\n    this.logger.info('automation rerun started', { orgId, automationId, runId: run.id });\n    return toRunView(run);\n  }\n\n  async listWebhooks(orgId: string): Promise<Webhook[]> {\n    const automations = await this.repo.listByOrg(orgId, 'webhook');\n    return automations.map(toWebhook);\n  }\n\n  async getWebhook(orgId: string, id: string): Promise<Webhook | null> {\n    const automation = await this.findWebhook(orgId, id);\n    return automation ? toWebhook(automation) : null;\n  }\n\n  async createWebhook(orgId: string, input: CreateWebhookInput): Promise<CreatedWebhook> {\n    const events = unique(input.events);\n    assertCatalogTriggers(events, false);\n    const secret = generateWebhookSecret();\n    const automation = await this.uow.run(async ({ automations, credentials, outbox }) => {\n      const secretRef = await credentials.store(orgId, { secret });\n      const created = await automations.insert(orgId, {\n        kind: 'webhook',\n        name: input.url,\n        description: input.description,\n        triggers: events,\n        actions: [{ type: DELIVER_WEBHOOK_ACTION, input: { url: input.url, secretRef } }],\n      });\n      await outbox.append([automationEvents.automationCreated.make({ orgId, data: created })]);\n      return created;\n    });\n    this.logger.info('webhook created', { orgId, automationId: automation.id });\n    return { ...toWebhook(automation), secret };\n  }\n\n  async updateWebhook(\n    orgId: string,\n    id: string,\n    input: UpdateWebhookInput,\n  ): Promise<Webhook | null> {\n    const existing = await this.findWebhook(orgId, id);\n    if (!existing) {\n      return null;\n    }\n    const events = input.events === undefined ? undefined : unique(input.events);\n    if (events) {\n      assertCatalogTriggers(events, false);\n    }\n    const { secretRef } = webhookTarget(existing);\n    const patch: UpdateAutomationInput = {\n      name: input.url,\n      description: input.description,\n      triggers: events,\n      actions:\n        input.url === undefined\n          ? undefined\n          : [{ type: DELIVER_WEBHOOK_ACTION, input: { url: input.url, secretRef } }],\n      enabled: input.enabled,\n    };\n    const updated = await this.uow.run(async ({ automations, outbox }) => {\n      const row = await automations.update(orgId, id, patch);\n      if (!row) {\n        return null;\n      }\n      await outbox.append([updateEvent(orgId, input, row)]);\n      return row;\n    });\n    if (!updated) {\n      return null;\n    }\n    this.logger.info('webhook updated', { orgId, automationId: id });\n    return toWebhook(updated);\n  }\n\n  async deleteWebhook(orgId: string, id: string): Promise<boolean> {\n    const existing = await this.findWebhook(orgId, id);\n    if (!existing) {\n      return false;\n    }\n    const { secretRef } = webhookTarget(existing);\n    const deleted = await this.uow.run(async ({ automations, credentials, outbox }) => {\n      const removed = await automations.delete(orgId, id);\n      if (!removed) {\n        return null;\n      }\n      await credentials.destroy(orgId, secretRef);\n      await outbox.append([automationEvents.automationDeleted.make({ orgId, data: removed })]);\n      return removed;\n    });\n    if (deleted) {\n      this.logger.info('webhook deleted', { orgId, automationId: id });\n    }\n    return deleted !== null;\n  }\n\n  async revealWebhookSecret(orgId: string, id: string): Promise<WebhookSecret | null> {\n    const existing = await this.findWebhook(orgId, id);\n    if (!existing) {\n      return null;\n    }\n    const secrets = await this.credentials.reveal(orgId, webhookTarget(existing).secretRef);\n    const secret = secrets?.['secret'];\n    if (typeof secret !== 'string') {\n      throw new Error(`webhook ${id}: signing secret is missing`);\n    }\n    return { secret };\n  }\n\n  async rotateWebhookSecret(orgId: string, id: string): Promise<WebhookSecret | null> {\n    const existing = await this.findWebhook(orgId, id);\n    if (!existing) {\n      return null;\n    }\n    const secret = generateWebhookSecret();\n    await this.credentials.update(orgId, webhookTarget(existing).secretRef, { secret });\n    this.logger.info('webhook secret rotated', { orgId, automationId: id });\n    return { secret };\n  }\n\n  private async findWebhook(orgId: string, id: string): Promise<Automation | null> {\n    const automation = await this.repo.findById(orgId, id);\n    return automation?.kind === 'webhook' ? automation : null;\n  }\n\n  availableActions(): AvailableActions {\n    return [\n      ...catalogActions(),\n      ...this.integrations.available().flatMap((integration) =>\n        integration.actions.map((action) => ({\n          type: `${integration.id}.${action.id}`,\n          description: action.description,\n          inputSchema: action.inputSchema as Record<string, JsonValue>,\n          source: integration.id,\n        })),\n      ),\n    ];\n  }\n\n  availableTriggers(): AvailableTriggers {\n    return { triggers: catalogTriggers() };\n  }\n}\n"],"mappings":";;;;;;;;;;;AAiEA,SAAS,oBACP,OACmC;CACnC,IAAI,MAAM,YAAY,KAAA,GACpB,OAAO;CAET,MAAM,EAAE,SAAS,UAAU,GAAG,SAAS;CACvC,OAAO,OAAO,OAAO,IAAI,CAAC,CAAC,OAAO,MAAM,MAAM,KAAA,CAAS;AACzD;AAEA,SAAS,YAAY,IAAkB;CACrC,MAAM,OAAO,IAAI,KAAK,EAAE;CACxB,KAAK,cAAc,GAAG,CAAC;CACvB,OAAO,KAAK,QAAQ;AACtB;AAEA,SAAS,OAAO,QAA4B;CAC1C,OAAO,CAAC,GAAG,IAAI,IAAI,MAAM,CAAC;AAC5B;AAEA,SAAS,cAAc,QAA0C,MAAwB;CACvF,IAAI,UAAU,MACZ,OAAO;CAET,IAAI,OAAO,SAAS,YAAY,SAAS,QAAQ,MAAM,QAAQ,IAAI,GACjE,OAAO;CAET,MAAM,SAAS;CACf,OAAO,OAAO,QAAQ,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,cAAc;EACvD,IAAI,CAAC,OAAO,UAAU,eAAe,KAAK,QAAQ,GAAG,GACnD,OAAO;EAET,OAAO,KAAK,UAAU,OAAO,IAAI,MAAM,KAAK,UAAU,QAAQ;CAChE,CAAC;AACH;AAEA,SAAS,yBAAyB,UAA0B;CAC1D,KAAK,MAAM,WAAW,UAAU;EAC9B,IAAI,QAAQ,WAAW,aAAa,GAClC,MAAM,IAAI,oBAAoB,OAAO;EAEvC,IAAI,QAAQ,WAAW,WAAW,KAAK,CAAC,cAAc,QAAQ,MAAM,CAAkB,CAAC,GACrF,MAAM,IAAI,oBAAoB,SAAS,UAAU;CAErD;AACF;AAEA,SAAS,sBAAsB,UAAoB,WAA0B;CAC3E,yBAAyB,QAAQ;CACjC,MAAM,QAAQ,IAAI,IAAI,gBAAgB,CAAC,CAAC,KAAK,MAAM,EAAE,IAAI,CAAC;CAC1D,KAAK,MAAM,WAAW,UACpB,IAAI,EAAE,aAAa,QAAQ,WAAW,WAAW,MAAM,CAAC,MAAM,IAAI,OAAO,GACvE,MAAM,IAAI,oBAAoB,SAAS,SAAS;AAGtD;AAEA,MAAM,kCAAkB,IAAI,IAAI;CAC9B;CACA;CACA;CACA;CACA;AACF,CAAC;AAED,SAAS,wBAAwB,SAAmC;CAClE,KAAK,MAAM,UAAU,SAAS;EAC5B,IAAI,OAAO,SAAA,kBACT,MAAM,IAAI,oBAAoB,OAAO,IAAI;EAE3C,IAAI,gBAAgB,IAAI,OAAO,IAAI,GACjC,MAAM,IAAI,kBAAkB,eAAe,OAAO,KAAK,yBAAyB;CAEpF;AACF;AAEA,MAAM,iBAAiB;AAEvB,SAAS,gBAAgB,OAA+B;CACtD,MAAM,SACJ,MAAM,SAAS,iBACX;EAAE,SAAS;EAAe,MAAM,MAAM;CAAK,IAC3C,iBAAiB,MAAM,IAAI,CAAC,EAAE,UAAU,MAAM,IAAI;CACxD,OAAO,QAAQ,UAAW,KAAK,MAAM,KAAK,UAAU,OAAO,IAAI,CAAC,IAAkB;AACpF;;AAGA,SAAS,UAAU,KAAmC;CACpD,MAAM,EAAE,MAAM,SAAS,IAAI,OAAO,eAAe,IAAI;CACrD,OAAO;EACL,GAAG;EACH,OAAO;GAAE;GAAM;GAAS;GAAI;GAAO;GAAY,MAAM,gBAAgB,IAAI,KAAK;EAAE;CAClF;AACF;;AAGA,SAAS,iBAAiB,YAAoC;CAC5D,OAAO;EACL,GAAG;EACH,SAAS,WAAW,QAAQ,KAAK,WAAW;GAC1C,IAAI,OAAO,SAAA,kBACT,OAAO;GAET,MAAM,EAAE,WAAW,YAAY,GAAG,UAAU,OAAO;GACnD,OAAO;IAAE,GAAG;IAAQ;GAAM;EAC5B,CAAC;CACH;AACF;AAEA,SAAS,cAAc,YAA6C;CAClE,OAAO,0BAA0B,MAAM,WAAW,QAAQ,EAAE,EAAE,KAAK;AACrE;AAEA,SAAS,UAAU,YAAiC;CAClD,OAAO;EACL,OAAO,WAAW;EAClB,IAAI,WAAW;EACf,KAAK,cAAc,UAAU,CAAC,CAAC;EAC/B,QAAQ,WAAW;EACnB,aAAa,WAAW;EACxB,SAAS,WAAW;EACpB,WAAW,WAAW;EACtB,WAAW,WAAW;CACxB;AACF;AAEA,SAAS,YAAY,OAAe,OAA8B,SAAqB;CACrF,IAAI,oBAAoB,KAAK,GAC3B,OAAO,MAAM,UACT,iBAAiB,kBAAkB,KAAK;EAAE;EAAO,MAAM;CAAQ,CAAC,IAChE,iBAAiB,mBAAmB,KAAK;EAAE;EAAO,MAAM;CAAQ,CAAC;CAEvE,OAAO,iBAAiB,kBAAkB,KAAK;EAAE;EAAO,MAAM;CAAQ,CAAC;AACzE;AAqBA,IAAa,yBAAb,MAAsF;CACpF;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CAEA,YAAY,QAAkC;EAC5C,KAAK,OAAO,OAAO;EACnB,KAAK,WAAW,OAAO;EACvB,KAAK,MAAM,OAAO;EAClB,KAAK,SAAS,OAAO;EACrB,KAAK,SAAS,OAAO;EACrB,KAAK,UAAU,OAAO;EACtB,KAAK,eAAe,OAAO;EAC3B,KAAK,cAAc,OAAO;EAC1B,KAAK,WAAW,OAAO;EACvB,KAAK,OAAO;GACV,GAAG,OAAO;GACV,0BAA0B,OAAO,cAAc,QAAQ,UACrD,KAAK,SAAS,iBAAiB,OAAO,cAAc,QAAQ,KAAK;EACrE;EACA,KAAK,SAAS,OAAO;EACrB,KAAK,WAAW,OAAO;EACvB,KAAK,YAAY,OAAO;EACxB,KAAK,SAAS,OAAO,UAAU;CACjC;CAEA,MAAM,OAAO,OAAmC;EAE9C,IAAI,MAAM,KAAK,WAAW,aAAa,GACrC;EAEF,MAAM,cAAc,MAAM,KAAK,kBAAkB,KAAK;EACtD,KAAK,MAAM,cAAc,aAAa;GACpC,MAAM,UAAU,cAAc,WAAW,QAAQ,MAAM,IAAI;GAC3D,IAAI,CAAC,WAAW,WAAW,CAAC,SAAS;IACnC,IAAI,WAAW,WAAW,CAAC,SACzB,KAAK,OAAO,MAAM,6BAA6B;KAC7C,OAAO,MAAM;KACb,cAAc,WAAW;KACzB,SAAS,MAAM;IACjB,CAAC;IAEH;GACF;GACA,MAAM,KAAK,YAAY,YAAY,KAAK;EAC1C;EACA,MAAM,KAAK,UAAU,QAAQ,KAAK;CACpC;CAEA,MAAc,mBAAmB,OAA8B;EAC7D,IAAI;GACF,MAAM,KAAK,OAAO,gBAAgB;EACpC,SAAS,KAAK;GACZ,KAAK,OAAO,MAAM,uCAAuC;IAAE;IAAO;GAAI,CAAC;EACzE;CACF;CAEA,MAAc,kBAAkB,OAA2C;EACzE,IAAI;GACF,OAAO,MAAM,KAAK,KAAK,cAAc,MAAM,OAAO,MAAM,IAAI;EAC9D,SAAS,KAAK;GACZ,KAAK,OAAO,MAAM,+CAA+C;IAC/D,OAAO,MAAM;IACb,SAAS,MAAM;IACf;GACF,CAAC;GACD,OAAO,CAAC;EACV;CACF;CAEA,MAAc,YAAY,YAAwB,OAAmC;EACnF,IAAI,MAA4B;EAChC,IAAI;GACF,MAAM,MAAM,KAAK,QAAQ,YAAY,KAAK;GAC1C,IAAI,CAAC,KAEH;GAEF,MAAM,KAAK,OAAO,SAAS,KAAK,YAAY,YAAY,KAAK,KAAK,CAAC;EACrE,SAAS,KAAK;GACZ,KAAK,OAAO,MAAM,yBAAyB;IACzC,OAAO,MAAM;IACb,cAAc,WAAW;IACzB,OAAO,KAAK;IACZ,SAAS,MAAM;IACf,SAAS,MAAM;IACf;GACF,CAAC;GACD,IAAI,KACF,MAAM,KAAK,cAAc,KAAK,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC;EAElF;CACF;CAEA,QAAgB,YAAwB,OAAmD;EACzF,MAAM,sBAAM,IAAI,KAAK;EACrB,OAAO,KAAK,IAAI,IAAI,OAAO,EAAE,MAAM,aAAa;GAC9C,MAAM,WAAW,MAAM,KAAK,OAAO,MAAM,OAAO;IAC9C,OAAO,MAAM;IACb,cAAc,WAAW;IACzB,SAAS,MAAM;IACf;IACA,QAAQ;IACR,eAAe,CAAC;IAChB,WAAW;IACX,YAAY;IACZ,WAAW;IACX,WAAW;GACb,CAAC;GACD,IAAI,CAAC,UACH,OAAO;GAET,MAAM,OAAO,OAAO,CAClB,iBAAiB,WAAW,KAAK;IAC/B,OAAO,MAAM;IACb,MAAM;GACR,CAAC,CACH,CAAC;GACD,OAAO;EACT,CAAC;CACH;CAEA,YACE,YACA,KACA,OACoB;EACpB,OAAO;GACL,OAAO,IAAI;GACX,OAAO,MAAM;GACb,cAAc,WAAW;GACzB,SAAS,WAAW;GACpB;EACF;CACF;;CAGA,MAAc,cAAc,KAAoB,OAA8C;EAC5F,IAAI;GACF,OAAO,MAAM,KAAK,IAAI,IAAI,OAAO,EAAE,MAAM,aAAa;IACpD,MAAM,SAAS,MAAM,KAAK,cAAc,IAAI,OAAO,IAAI,IAAI;KACzD,QAAQ;KACR,eAAe,IAAI;KACnB,4BAAY,IAAI,KAAK;IACvB,CAAC;IACD,IAAI,QACF,MAAM,OAAO,OAAO,CAClB,iBAAiB,UAAU,KAAK;KAC9B,OAAO,IAAI;KACX,MAAM;IACR,CAAC,CACH,CAAC;IAEH,OAAO;GACT,CAAC;EACH,SAAS,KAAK;GACZ,KAAK,OAAO,MAAM,2CAA2C;IAC3D,OAAO,IAAI;IACX,cAAc,IAAI;IAClB,OAAO,IAAI;IACX;IACA,eAAe;GACjB,CAAC;GACD,OAAO;EACT;CACF;CAEA,MAAM,UAAU,GAAuB,OAAgD;EACrF,MAAM,SAAS,EAAE,QAAQ;EACzB,IAAI,CAAC,QACH,MAAM,IAAI,MAAM,cAAc,EAAE,aAAa,OAAO,EAAE,MAAM,uBAAuB,OAAO;EAE5F,IAAI;EACJ,IAAI;GACF,UAAU,MAAM,cAAc,QAAQ,EAAE,OAAO;IAC7C,QAAQ,KAAK;IACb,SAAS,KAAK;IACd,aAAa,KAAK;IAClB,UAAU,KAAK;IACf,MAAM,KAAK;IACX,QAAQ,KAAK;IACb,cAAc,EAAE;IAChB,aAAa,OAAO;IACpB,QAAQ,KAAK;GACf,CAAC;EACH,SAAS,KAAK;GACZ,KAAK,OAAO,MAAM,4BAA4B;IAC5C,OAAO,EAAE;IACT,cAAc,EAAE;IAChB,OAAO,EAAE;IACT,SAAS,EAAE,MAAM;IACjB;IACA,MAAM,OAAO;IACb;GACF,CAAC;GACD,MAAM,eAAe,oBAAoB,MAAM,IAAI,kBAAkB;EACvE;EACA,MAAM,EAAE,YAAY,WAAW;EAC/B,KAAK,OAAO,KAAK,+BAA+B;GAC9C,OAAO,EAAE;GACT,cAAc,EAAE;GAChB,OAAO,EAAE;GACT,MAAM,OAAO;GACb,YAAY,WAAW;GACvB,QAAQ,OAAO;EACjB,CAAC;EACD,OAAO;GACL;GACA,MAAM,OAAO;GACb,QAAQ;GACR,GAAI,WAAW,SAAS,IAAI,EAAE,WAAW,IAAI,CAAC;GAC9C,GAAI,OAAO,SAAS,IAChB,EAAE,OAAO,uBAAuB,OAAO,OAAO,eAAe,OAAO,KAAK,IAAI,IAAI,IACjF,CAAC;EACP;CACF;CAEA,YAAY,GAAqB,aAAqC;EACpE,OAAO,KAAK,SAAS,IAAI,GAAG,WAAW;CACzC;CAEA,MAAM,gBAAgD;EACpD,OAAO,KAAK,KAAK,cAAc;CACjC;CAEA,MAAM,aAAa,OAAe,cAAsB,IAAyB;EAC/E,MAAM,UAAU,IAAI,KAAK,YAAY,EAAE,CAAC;EACxC,MAAM,aAAa,MAAM,KAAK,KAAK,SAAS,OAAO,YAAY;EAC/D,IAAI,CAAC,YAAY,WAAW,QAAQ,QAAQ,IAAI,YAAY,WAAW,SAAS,GAAG;GACjF,KAAK,OAAO,MAAM,oBAAoB;IAAE;IAAO;GAAa,CAAC;GAC7D;EACF;EACA,MAAM,QAAqB;GACzB,MAAM;GACN,IAAI,YAAY,aAAa,GAAG,QAAQ,YAAY;GACpD;GACA,SAAS;GACT,YAAY,QAAQ,YAAY;GAChC,MAAM;IAAE;IAAc,SAAS,QAAQ,YAAY;GAAE;EACvD;EACA,MAAM,KAAK,YAAY,YAAY,KAAK;CAC1C;CAEA,MAAM,SAAS,GAAuB,SAAkD;EACtF,MAAM,SACJ,QAAQ,WAAW,EAAE,QAAQ,UAAU,QAAQ,OAAO,MAAM,EAAE,WAAW,WAAW,IAChF,cACA;EACN,MAAM,KAAK,IAAI,IAAI,OAAO,EAAE,MAAM,aAAa;GAC7C,MAAM,MAAM,MAAM,KAAK,cAAc,EAAE,OAAO,EAAE,OAAO;IACrD;IACA,eAAe;IACf,4BAAY,IAAI,KAAK;GACvB,CAAC;GACD,IAAI,CAAC,KACH;GAEF,MAAM,WACJ,WAAW,cACP,iBAAiB,aAAa,KAAK;IAAE,OAAO,EAAE;IAAO,MAAM;GAAI,CAAC,IAChE,iBAAiB,UAAU,KAAK;IAAE,OAAO,EAAE;IAAO,MAAM;GAAI,CAAC;GACnE,MAAM,qBAAqB,QACxB,QAAQ,MAAM,EAAE,WAAW,QAAQ,CAAC,CACpC,KAAK,YAAY,EAChB,GAAG,iBAAiB,aAAa,KAAK;IACpC,OAAO,EAAE;IACT,MAAM;GACR,CAAC,EACH,EAAE;GACJ,MAAM,OAAO,OAAO,CAAC,UAAU,GAAG,kBAAkB,CAAC;EACvD,CAAC;EACD,KAAK,WAAW,GAAG,QAAQ,OAAO;CACpC;CAEA,WACE,GACA,QACA,SACM;EACN,MAAM,MAAM;GACV,OAAO,EAAE;GACT,cAAc,EAAE;GAChB,OAAO,EAAE;GACT,SAAS,EAAE,MAAM;GACjB,SAAS,EAAE,MAAM;EACnB;EACA,IAAI,WAAW,UAAU;GACvB,MAAM,SAAS,QAAQ,MAAM,MAAM,EAAE,WAAW,QAAQ;GACxD,MAAM,QAAQ,QAAQ,SAAS,QAAQ;GACvC,KAAK,OAAO,MAAM,yBAAyB;IACzC,GAAG;IACH;IACA,QAAQ,QAAQ,QAAQ,EAAE,QAAQ,MAAM,EAAE;IAC1C,OAAO,QAAQ,SAAS;GAC1B,CAAC;GACD;EACF;EACA,MAAM,UAAU,QAAQ,QAAQ,MAAM,EAAE,UAAU,KAAA,CAAS;EAC3D,IAAI,QAAQ,SAAS,GACnB,KAAK,OAAO,KAAK,mDAAmD;GAClE,GAAG;GACH,SAAS,QAAQ,KAAK,EAAE,OAAO,MAAM,aAAa;IAAE;IAAO;IAAM;GAAM,EAAE;EAC3E,CAAC;CAEL;CAEA,MAAM,OAAO,OAAe,OAAmD;EAC7E,sBAAsB,MAAM,UAAU,IAAI;EAC1C,wBAAwB,MAAM,OAAO;EACrC,MAAM,aAAa,MAAM,KAAK,IAAI,IAAI,OAAO,EAAE,aAAa,aAAa;GACvE,MAAM,UAAU,MAAM,YAAY,OAAO,OAAO;IAC9C,GAAG;IACH,UAAU,OAAO,MAAM,QAAQ;IAC/B,MAAM;GACR,CAAC;GACD,MAAM,OAAO,OAAO,CAAC,iBAAiB,kBAAkB,KAAK;IAAE;IAAO,MAAM;GAAQ,CAAC,CAAC,CAAC;GACvF,OAAO;EACT,CAAC;EACD,KAAK,OAAO,KAAK,sBAAsB;GAAE;GAAO,cAAc,WAAW;EAAG,CAAC;EAC7E,MAAM,KAAK,mBAAmB,KAAK;EACnC,OAAO;CACT;CAEA,MAAM,OACJ,OACA,IACA,OAC4B;EAC5B,IAAI,MAAM,aAAa,KAAA,GACrB,sBAAsB,MAAM,UAAU,IAAI;EAE5C,IAAI,MAAM,YAAY,KAAA,GACpB,wBAAwB,MAAM,OAAO;EAEvC,MAAM,WAAW,MAAM,KAAK,KAAK,SAAS,OAAO,EAAE;EACnD,IAAI,CAAC,UACH,OAAO;EAET,IAAI,SAAS,SAAS,YACpB,MAAM,IAAI,4BAA4B,IAAI,SAAS,IAAI;EAEzD,MAAM,QACJ,MAAM,aAAa,KAAA,IAAY,QAAQ;GAAE,GAAG;GAAO,UAAU,OAAO,MAAM,QAAQ;EAAE;EACtF,MAAM,aAAa,MAAM,KAAK,IAAI,IAAI,OAAO,EAAE,aAAa,aAAa;GACvE,MAAM,UAAU,MAAM,YAAY,OAAO,OAAO,IAAI,KAAK;GACzD,IAAI,CAAC,SACH,OAAO;GAET,MAAM,OAAO,OAAO,CAAC,YAAY,OAAO,OAAO,OAAO,CAAC,CAAC;GACxD,OAAO;EACT,CAAC;EACD,IAAI,YAAY;GACd,KAAK,OAAO,KAAK,sBAAsB;IAAE;IAAO,cAAc;GAAG,CAAC;GAClE,MAAM,KAAK,mBAAmB,KAAK;EACrC;EACA,OAAO;CACT;CAEA,MAAM,OAAO,OAAe,IAA8B;EACxD,MAAM,WAAW,MAAM,KAAK,KAAK,SAAS,OAAO,EAAE;EACnD,IAAI,CAAC,UACH,OAAO;EAET,IAAI,SAAS,SAAS,YACpB,MAAM,IAAI,4BAA4B,IAAI,SAAS,IAAI;EAEzD,MAAM,UAAU,MAAM,KAAK,IAAI,IAAI,OAAO,EAAE,aAAa,aAAa;GACpE,MAAM,UAAU,MAAM,YAAY,OAAO,OAAO,EAAE;GAClD,IAAI,CAAC,SACH,OAAO;GAET,MAAM,OAAO,OAAO,CAAC,iBAAiB,kBAAkB,KAAK;IAAE;IAAO,MAAM;GAAQ,CAAC,CAAC,CAAC;GACvF,OAAO;EACT,CAAC;EACD,IAAI,SAAS;GACX,KAAK,OAAO,KAAK,sBAAsB;IAAE;IAAO,cAAc;GAAG,CAAC;GAClE,MAAM,KAAK,mBAAmB,KAAK;EACrC;EACA,OAAO,YAAY;CACrB;CAEA,MAAM,KAAK,OAAe,OAAiD;EAEzE,QAAO,MADmB,KAAK,KAAK,UAAU,OAAO,OAAO,IAAI,EAAA,CAC7C,IAAI,gBAAgB;CACzC;CAEA,MAAM,IAAI,OAAe,IAAwC;EAC/D,MAAM,aAAa,MAAM,KAAK,KAAK,SAAS,OAAO,EAAE;EACrD,OAAO,aAAa,iBAAiB,UAAU,IAAI;CACrD;CAEA,MAAM,SACJ,OACA,cACA,OAC8B;EAC9B,MAAM,OAAO,MAAM,KAAK,SAAS,KAAK,OAAO,cAAc,KAAK;EAChE,OAAO;GAAE,GAAG;GAAM,MAAM,KAAK,KAAK,IAAI,SAAS;EAAE;CACnD;CAEA,MAAM,MAAM,OAAe,cAAsB,OAAuC;EACtF,MAAM,WAAW,MAAM,KAAK,SAAS,SAAS,OAAO,KAAK;EAC1D,IAAI,CAAC,YAAY,SAAS,iBAAiB,cACzC,MAAM,IAAI,cAAc,kBAAkB,KAAK;EAEjD,MAAM,aAAa,MAAM,KAAK,KAAK,SAAS,OAAO,YAAY;EAC/D,IAAI,CAAC,YACH,MAAM,IAAI,cAAc,cAAc,YAAY;EAEpD,MAAM,MAAM,MAAM,KAAK,IAAI,IAAI,OAAO,EAAE,MAAM,aAAa;GACzD,MAAM,YAAY,MAAM,KAAK,QAAQ,OAAO,uBAAO,IAAI,KAAK,CAAC;GAC7D,IAAI,CAAC,WACH,OAAO;GAET,MAAM,OAAO,OAAO,CAAC,iBAAiB,WAAW,KAAK;IAAE;IAAO,MAAM;GAAU,CAAC,CAAC,CAAC;GAClF,OAAO;EACT,CAAC;EACD,IAAI,CAAC,KACH,MAAM,IAAI,cAAc,kBAAkB,MAAM,kBAAkB;EAEpE,IAAI;GACF,MAAM,KAAK,OAAO,SAAS,KAAK,YAAY,YAAY,KAAK,IAAI,KAAK,CAAC;EACzE,SAAS,KAAK;GACZ,KAAK,OAAO,MAAM,2BAA2B;IAC3C;IACA;IACA,OAAO,IAAI;IACX,SAAS,IAAI;IACb;GACF,CAAC;GAKD,OAAO,UAAU,MAJI,KAAK,cACxB,KACA,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CACjD,KAC2B,GAAG;EAChC;EACA,KAAK,OAAO,KAAK,4BAA4B;GAAE;GAAO;GAAc,OAAO,IAAI;EAAG,CAAC;EACnF,OAAO,UAAU,GAAG;CACtB;CAEA,MAAM,aAAa,OAAmC;EAEpD,QAAO,MADmB,KAAK,KAAK,UAAU,OAAO,SAAS,EAAA,CAC3C,IAAI,SAAS;CAClC;CAEA,MAAM,WAAW,OAAe,IAAqC;EACnE,MAAM,aAAa,MAAM,KAAK,YAAY,OAAO,EAAE;EACnD,OAAO,aAAa,UAAU,UAAU,IAAI;CAC9C;CAEA,MAAM,cAAc,OAAe,OAAoD;EACrF,MAAM,SAAS,OAAO,MAAM,MAAM;EAClC,sBAAsB,QAAQ,KAAK;EACnC,MAAM,SAAS,sBAAsB;EACrC,MAAM,aAAa,MAAM,KAAK,IAAI,IAAI,OAAO,EAAE,aAAa,aAAa,aAAa;GACpF,MAAM,YAAY,MAAM,YAAY,MAAM,OAAO,EAAE,OAAO,CAAC;GAC3D,MAAM,UAAU,MAAM,YAAY,OAAO,OAAO;IAC9C,MAAM;IACN,MAAM,MAAM;IACZ,aAAa,MAAM;IACnB,UAAU;IACV,SAAS,CAAC;KAAE,MAAM;KAAwB,OAAO;MAAE,KAAK,MAAM;MAAK;KAAU;IAAE,CAAC;GAClF,CAAC;GACD,MAAM,OAAO,OAAO,CAAC,iBAAiB,kBAAkB,KAAK;IAAE;IAAO,MAAM;GAAQ,CAAC,CAAC,CAAC;GACvF,OAAO;EACT,CAAC;EACD,KAAK,OAAO,KAAK,mBAAmB;GAAE;GAAO,cAAc,WAAW;EAAG,CAAC;EAC1E,OAAO;GAAE,GAAG,UAAU,UAAU;GAAG;EAAO;CAC5C;CAEA,MAAM,cACJ,OACA,IACA,OACyB;EACzB,MAAM,WAAW,MAAM,KAAK,YAAY,OAAO,EAAE;EACjD,IAAI,CAAC,UACH,OAAO;EAET,MAAM,SAAS,MAAM,WAAW,KAAA,IAAY,KAAA,IAAY,OAAO,MAAM,MAAM;EAC3E,IAAI,QACF,sBAAsB,QAAQ,KAAK;EAErC,MAAM,EAAE,cAAc,cAAc,QAAQ;EAC5C,MAAM,QAA+B;GACnC,MAAM,MAAM;GACZ,aAAa,MAAM;GACnB,UAAU;GACV,SACE,MAAM,QAAQ,KAAA,IACV,KAAA,IACA,CAAC;IAAE,MAAM;IAAwB,OAAO;KAAE,KAAK,MAAM;KAAK;IAAU;GAAE,CAAC;GAC7E,SAAS,MAAM;EACjB;EACA,MAAM,UAAU,MAAM,KAAK,IAAI,IAAI,OAAO,EAAE,aAAa,aAAa;GACpE,MAAM,MAAM,MAAM,YAAY,OAAO,OAAO,IAAI,KAAK;GACrD,IAAI,CAAC,KACH,OAAO;GAET,MAAM,OAAO,OAAO,CAAC,YAAY,OAAO,OAAO,GAAG,CAAC,CAAC;GACpD,OAAO;EACT,CAAC;EACD,IAAI,CAAC,SACH,OAAO;EAET,KAAK,OAAO,KAAK,mBAAmB;GAAE;GAAO,cAAc;EAAG,CAAC;EAC/D,OAAO,UAAU,OAAO;CAC1B;CAEA,MAAM,cAAc,OAAe,IAA8B;EAC/D,MAAM,WAAW,MAAM,KAAK,YAAY,OAAO,EAAE;EACjD,IAAI,CAAC,UACH,OAAO;EAET,MAAM,EAAE,cAAc,cAAc,QAAQ;EAC5C,MAAM,UAAU,MAAM,KAAK,IAAI,IAAI,OAAO,EAAE,aAAa,aAAa,aAAa;GACjF,MAAM,UAAU,MAAM,YAAY,OAAO,OAAO,EAAE;GAClD,IAAI,CAAC,SACH,OAAO;GAET,MAAM,YAAY,QAAQ,OAAO,SAAS;GAC1C,MAAM,OAAO,OAAO,CAAC,iBAAiB,kBAAkB,KAAK;IAAE;IAAO,MAAM;GAAQ,CAAC,CAAC,CAAC;GACvF,OAAO;EACT,CAAC;EACD,IAAI,SACF,KAAK,OAAO,KAAK,mBAAmB;GAAE;GAAO,cAAc;EAAG,CAAC;EAEjE,OAAO,YAAY;CACrB;CAEA,MAAM,oBAAoB,OAAe,IAA2C;EAClF,MAAM,WAAW,MAAM,KAAK,YAAY,OAAO,EAAE;EACjD,IAAI,CAAC,UACH,OAAO;EAGT,MAAM,UAAS,MADO,KAAK,YAAY,OAAO,OAAO,cAAc,QAAQ,CAAC,CAAC,SAAS,EAAA,GAC7D;EACzB,IAAI,OAAO,WAAW,UACpB,MAAM,IAAI,MAAM,WAAW,GAAG,4BAA4B;EAE5D,OAAO,EAAE,OAAO;CAClB;CAEA,MAAM,oBAAoB,OAAe,IAA2C;EAClF,MAAM,WAAW,MAAM,KAAK,YAAY,OAAO,EAAE;EACjD,IAAI,CAAC,UACH,OAAO;EAET,MAAM,SAAS,sBAAsB;EACrC,MAAM,KAAK,YAAY,OAAO,OAAO,cAAc,QAAQ,CAAC,CAAC,WAAW,EAAE,OAAO,CAAC;EAClF,KAAK,OAAO,KAAK,0BAA0B;GAAE;GAAO,cAAc;EAAG,CAAC;EACtE,OAAO,EAAE,OAAO;CAClB;CAEA,MAAc,YAAY,OAAe,IAAwC;EAC/E,MAAM,aAAa,MAAM,KAAK,KAAK,SAAS,OAAO,EAAE;EACrD,OAAO,YAAY,SAAS,YAAY,aAAa;CACvD;CAEA,mBAAqC;EACnC,OAAO,CACL,GAAG,eAAe,GAClB,GAAG,KAAK,aAAa,UAAU,CAAC,CAAC,SAAS,gBACxC,YAAY,QAAQ,KAAK,YAAY;GACnC,MAAM,GAAG,YAAY,GAAG,GAAG,OAAO;GAClC,aAAa,OAAO;GACpB,aAAa,OAAO;GACpB,QAAQ,YAAY;EACtB,EAAE,CACJ,CACF;CACF;CAEA,oBAAuC;EACrC,OAAO,EAAE,UAAU,gBAAgB,EAAE;CACvC;AACF"}