@mastra/factory 0.0.0-aggregate-trace-20261015182851

package/dist/integrations/gitlab/rules.d.ts

@@ -0,0 +1,35 @@
+import type { BoardRegistry } from '../../boards/index.js';
+import type { IntakeStorage } from '../../storage/domains/intake/base.js';
+import type { FactoryProjectsStorage } from '../../storage/domains/projects/base.js';
+import type { SourceControlStorageHandle } from '../../storage/domains/source-control/base.js';
+import type { WorkItemsStorage } from '../../storage/domains/work-items/base.js';
+import type { IntegrationContext } from '../base.js';
+import type { GitLabEventRules } from './default-rules.js';
+import type { ParsedGitLabWebhook } from './webhook.js';
+type IngressStatus = 'ignored' | 'committed' | 'replayed' | 'missing';
+export interface GitLabRulesIntegration {
+    readonly rules: GitLabEventRules;
+    resolveActiveConnectionForHost?(storedConnectionId: string, host: string): Promise<string>;
+    getProjectMemberAccessLevel(connectionId: string, projectId: string, username: string): Promise<number | undefined>;
+    getWorkItemAuthorUsername(connectionId: string, projectId: string, kind: 'issue' | 'merge_request', iid: number): Promise<string | undefined>;
+}
+interface GitLabRulesOptions {
+    gitlab: GitLabRulesIntegration;
+    sourceControl: SourceControlStorageHandle;
+    projects: FactoryProjectsStorage;
+    storage: WorkItemsStorage;
+    intake: IntakeStorage;
+    configVersion: string;
+    boards: BoardRegistry;
+}
+export declare class GitLabRules {
+    #private;
+    private readonly options;
+    constructor(options: GitLabRulesOptions);
+    ingest(parsed: ParsedGitLabWebhook): Promise<{
+        status: IngressStatus;
+    }>;
+}
+export declare function attachGitLabRules(gitlab: GitLabRulesIntegration, context: IntegrationContext): ((event: ParsedGitLabWebhook) => Promise<unknown>) | undefined;
+export {};
+//# sourceMappingURL=rules.d.ts.map

package/dist/integrations/gitlab/rules.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rules.d.ts","sourceRoot":"","sources":["../../../src/integrations/gitlab/rules.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAS3D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sCAAsC,CAAC;AAC1E,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,wCAAwC,CAAC;AACrF,OAAO,KAAK,EAEV,0BAA0B,EAC3B,MAAM,8CAA8C,CAAC;AAEtD,OAAO,KAAK,EAAe,gBAAgB,EAAE,MAAM,0CAA0C,CAAC;AAC9F,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAErD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAE3D,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAIxD,KAAK,aAAa,GAAG,SAAS,GAAG,WAAW,GAAG,UAAU,GAAG,SAAS,CAAC;AAiHtE,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,KAAK,EAAE,gBAAgB,CAAC;IACjC,8BAA8B,CAAC,CAAC,kBAAkB,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC3F,2BAA2B,CAAC,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACpH,yBAAyB,CACvB,YAAY,EAAE,MAAM,EACpB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,OAAO,GAAG,eAAe,EAC/B,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;CAChC;AAED,UAAU,kBAAkB;IAC1B,MAAM,EAAE,sBAAsB,CAAC;IAC/B,aAAa,EAAE,0BAA0B,CAAC;IAC1C,QAAQ,EAAE,sBAAsB,CAAC;IACjC,OAAO,EAAE,gBAAgB,CAAC;IAC1B,MAAM,EAAE,aAAa,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,aAAa,CAAC;CACvB;AAOD,qBAAa,WAAW;;IACV,OAAO,CAAC,QAAQ,CAAC,OAAO;gBAAP,OAAO,EAAE,kBAAkB;IAElD,MAAM,CAAC,MAAM,EAAE,mBAAmB,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,aAAa,CAAA;KAAE,CAAC;CA6hB9E;AAED,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,sBAAsB,EAC9B,OAAO,EAAE,kBAAkB,GAC1B,CAAC,CAAC,KAAK,EAAE,mBAAmB,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,SAAS,CAYhE"}

package/dist/integrations/gitlab/rules.js

@@ -0,0 +1,502 @@
+import { assertFactoryDecisionTarget, validateFactoryRuleDecisions } from "../../rules/validation.js";
+import { boardEventHandlers, boardForWorkItem, eventBoardId, rulePhaseField, withBoardClosure } from "../../boards/semantics.js";
+import "../../boards/index.js";
+import { WorkItemUpdateConflictError } from "../../storage/domains/work-items/base.js";
+import { hasExplicitRuleOverride, selectEventRule } from "../../rules/event-rules.js";
+import { recordPullRequestHead } from "../pull-request-head.js";
+import { encodeIssueReference, encodeSourceId } from "./integration.js";
+//#region src/integrations/gitlab/rules.ts
+const RULE_TIMEOUT_MS = 5e3;
+function object(value) {
+	return value && typeof value === "object" && !Array.isArray(value) ? value : void 0;
+}
+function string(value) {
+	return typeof value === "string" && value.length > 0 ? value : void 0;
+}
+function number(value) {
+	return typeof value === "number" && Number.isFinite(value) ? value : void 0;
+}
+/** GitLab sends `2024-01-02T03:04:05Z` or `2024-01-02 03:04:05 UTC`. */
+function timestamp(value) {
+	const text = string(value);
+	if (!text) return void 0;
+	const parsed = Date.parse(text.replace(" UTC", "Z").replace(" ", "T"));
+	return Number.isNaN(parsed) ? void 0 : parsed;
+}
+function boolean(value) {
+	return typeof value === "boolean" ? value : void 0;
+}
+function usernames(value) {
+	if (!Array.isArray(value)) return [];
+	return value.flatMap((entry) => {
+		const username = string(object(entry)?.username);
+		return username ? [username] : [];
+	});
+}
+function labelNames(value) {
+	if (!Array.isArray(value)) return [];
+	return value.flatMap((entry) => {
+		if (typeof entry === "string") return entry ? [entry] : [];
+		const title = string(object(entry)?.title) ?? string(object(entry)?.name);
+		return title ? [title] : [];
+	});
+}
+function labelColors(value) {
+	if (!Array.isArray(value)) return {};
+	return Object.fromEntries(value.flatMap((entry) => {
+		const label = object(entry);
+		const name = string(label?.title) ?? string(label?.name);
+		const color = string(label?.color);
+		return name && color ? [[name, color]] : [];
+	}));
+}
+function eventName(parsed) {
+	const attributes = object(parsed.payload.object_attributes);
+	const action = string(attributes?.action)?.toLowerCase();
+	if (parsed.event === "Issue Hook") {
+		if (action === "open" || action === "reopen") return "issueOpened";
+		if (action === "close") return "issueClosed";
+		return "issueUpdated";
+	}
+	if (parsed.event === "Note Hook") {
+		const noteableType = string(attributes?.noteable_type);
+		if (noteableType === "Issue") return "issueCommented";
+		if (noteableType === "MergeRequest") return "mergeRequestCommented";
+		return;
+	}
+	if (parsed.event !== "Merge Request Hook") return;
+	if (action === "open" || action === "reopen") return "mergeRequestOpened";
+	if (action === "merge") return "mergeRequestMerged";
+	if (action === "close") return "mergeRequestClosed";
+	return "mergeRequestUpdated";
+}
+function normalizeHost(host) {
+	return host.trim().toLowerCase().replace(/\.$/, "");
+}
+function hostFromPayload(parsed) {
+	const declaredHost = parsed.instanceHost ? normalizeHost(parsed.instanceHost) : void 0;
+	const projectUrl = string(object(parsed.payload.project)?.web_url);
+	if (!projectUrl) return declaredHost;
+	try {
+		const payloadHost = normalizeHost(new URL(projectUrl).host);
+		if (declaredHost && declaredHost !== payloadHost) return void 0;
+		return payloadHost;
+	} catch {
+		return;
+	}
+}
+function mergeRequestSourceKey(host, projectId, mergeRequestIid) {
+	return `gitlab-pr:${Buffer.from(JSON.stringify({
+		version: 1,
+		host,
+		projectId,
+		mergeRequestIid
+	}), "utf8").toString("base64url")}`;
+}
+async function withRuleTimeout(promise) {
+	let timeout;
+	try {
+		return await Promise.race([promise, new Promise((_, reject) => {
+			timeout = setTimeout(() => reject(/* @__PURE__ */ new Error("FACTORY_RULE_TIMEOUT")), RULE_TIMEOUT_MS);
+		})]);
+	} finally {
+		if (timeout) clearTimeout(timeout);
+	}
+}
+const MAX_STALE_RULE_ATTEMPTS = 3;
+var GitLabRules = class {
+	options;
+	constructor(options) {
+		this.options = options;
+	}
+	async ingest(parsed) {
+		const event = eventName(parsed);
+		const project = object(parsed.payload.project);
+		const projectId = number(project?.id);
+		const projectPath = string(project?.path_with_namespace);
+		const host = hostFromPayload(parsed);
+		const username = string(parsed.payload.user_username) ?? string(object(parsed.payload.user)?.username);
+		if (!event || !projectId || !projectPath || !host || !username) return { status: "ignored" };
+		const targets = await this.#targets(String(projectId), host);
+		if (targets.length === 0) return { status: "ignored" };
+		const results = [];
+		for (const target of targets) results.push(await this.#ingestProject(parsed, event, projectId, projectPath, host, username, target));
+		if (results.some((result) => result.status === "committed")) return { status: "committed" };
+		if (results.some((result) => result.status === "replayed")) return { status: "replayed" };
+		return results[0] ?? { status: "ignored" };
+	}
+	async #targets(repositoryExternalId, host) {
+		const grouped = /* @__PURE__ */ new Map();
+		const keys = (await this.options.sourceControl.projectRepositories.listConfiguredExternalKeys()).filter((key) => key.repositoryExternalId === repositoryExternalId);
+		for (const key of keys) {
+			const targets = await this.options.sourceControl.projectRepositories.listByExternalRepository({
+				installationExternalId: key.installationExternalId,
+				repositoryExternalId
+			});
+			for (const target of targets) {
+				const installationHost = string((await this.options.sourceControl.installations.findByExternalId({
+					orgId: target.orgId,
+					externalId: key.installationExternalId
+				}))?.providerMetadata.host);
+				if (!installationHost || normalizeHost(installationHost) !== normalizeHost(host)) continue;
+				const id = `${target.orgId}:${target.factoryProjectId}`;
+				const current = grouped.get(id);
+				if (current) {
+					if (!current.connectionIds.includes(key.installationExternalId)) current.connectionIds.push(key.installationExternalId);
+				} else grouped.set(id, {
+					target,
+					connectionIds: [key.installationExternalId]
+				});
+			}
+		}
+		return [...grouped.values()];
+	}
+	async #ingestProject(parsed, event, projectId, projectPath, host, username, target) {
+		const factoryProject = await this.options.projects.get({
+			orgId: target.target.orgId,
+			id: target.target.factoryProjectId
+		});
+		if (!factoryProject) return { status: "missing" };
+		const sourceId = encodeSourceId({
+			host,
+			projectId: String(projectId)
+		});
+		const config = await this.options.intake.getConfig({
+			orgId: target.target.orgId,
+			integrationIds: ["gitlab"]
+		});
+		if (!config.gitlab?.enabled || !config.gitlab.sourceIds?.includes(sourceId)) return { status: "ignored" };
+		const binding = (await this.options.intake.listBindings({
+			orgId: target.target.orgId,
+			integrationId: "gitlab"
+		})).find((candidate) => candidate.sourceId === sourceId && candidate.factoryProjectId === target.target.factoryProjectId);
+		if (!binding) return { status: "ignored" };
+		const board = this.options.boards.get(binding.board ?? "work");
+		if (!board) return { status: "ignored" };
+		const connectionIds = [...new Set(await Promise.all(target.connectionIds.map((connectionId) => this.options.gitlab.resolveActiveConnectionForHost?.(connectionId, host) ?? connectionId)))];
+		const attributes = object(parsed.payload.object_attributes);
+		const issue = parsed.event === "Note Hook" ? object(parsed.payload.issue) : attributes;
+		const mergeRequest = parsed.event === "Note Hook" ? object(parsed.payload.merge_request) : attributes;
+		const issueIid = number(issue?.iid);
+		const mergeRequestIid = number(mergeRequest?.iid);
+		const issueSourceKey = issueIid ? encodeIssueReference({
+			host,
+			projectId: String(projectId),
+			issueIid
+		}) : void 0;
+		const mergeRequestKey = mergeRequestIid ? mergeRequestSourceKey(host, projectId, mergeRequestIid) : void 0;
+		const items = await this.options.storage.list({
+			orgId: target.target.orgId,
+			factoryProjectId: target.target.factoryProjectId
+		});
+		const issueItem = issueSourceKey ? items.find((item) => item.externalSource?.integrationId === "gitlab" && item.externalSource.externalId === issueSourceKey) : void 0;
+		const reviewItem = mergeRequestKey ? items.find((item) => item.externalSource?.integrationId === "gitlab" && item.externalSource.externalId === mergeRequestKey) : void 0;
+		const headBranch = string(mergeRequest?.source_branch) ?? "";
+		const authoringItem = headBranch ? items.find((item) => item.externalSource?.type !== "pull-request" && Object.values(item.sessions).some((session) => session.branch === headBranch)) : void 0;
+		const actorTrusted = await this.#trusted(connectionIds, String(projectId), username);
+		const eventUserId = number(object(parsed.payload.user)?.id) ?? number(parsed.payload.user_id);
+		const resolveAuthor = async (item, kind, iid) => {
+			if (!item || !iid) return void 0;
+			const embedded = string(object(item.author)?.username);
+			if (embedded) return embedded;
+			if (eventUserId && eventUserId === number(item.author_id)) return username;
+			for (const connectionId of connectionIds) try {
+				const resolved = await this.options.gitlab.getWorkItemAuthorUsername(connectionId, String(projectId), kind, iid);
+				if (resolved) return resolved;
+			} catch {}
+		};
+		const [issueAuthor, mergeRequestAuthor] = await Promise.all([resolveAuthor(issue, "issue", issueIid), resolveAuthor(mergeRequest, "merge_request", mergeRequestIid)]);
+		const authorTrusted = async (author) => {
+			if (!author) return false;
+			return author === username ? actorTrusted : this.#trusted(connectionIds, String(projectId), author);
+		};
+		const [issueAuthorTrusted, mergeRequestAuthorTrusted] = await Promise.all([authorTrusted(issueAuthor), authorTrusted(mergeRequestAuthor)]);
+		const actor = {
+			type: "gitlab",
+			username,
+			trusted: actorTrusted,
+			factoryAuthored: false
+		};
+		const candidates = event === "mergeRequestMerged" ? [...new Map([reviewItem, authoringItem].filter(Boolean).map((item) => [item.id, item])).values()] : event === "mergeRequestCommented" ? [authoringItem ?? reviewItem] : event === "mergeRequestOpened" ? [authoringItem, ...authoringItem ? [authoringItem] : []] : event.startsWith("mergeRequest") ? [reviewItem ?? authoringItem] : [issueItem];
+		const results = [];
+		for (const [index, item] of candidates.entries()) results.push(await this.#evaluate({
+			parsed,
+			event,
+			projectId,
+			projectPath,
+			host,
+			actor,
+			orgId: target.target.orgId,
+			factoryProjectId: target.target.factoryProjectId,
+			factoryProject,
+			board: {
+				board: board.id,
+				initialPhase: board.initialPhase
+			},
+			issue,
+			issueAuthor,
+			issueAuthorTrusted,
+			issueIid,
+			issueSourceKey,
+			mergeRequest,
+			mergeRequestAuthor,
+			mergeRequestAuthorTrusted,
+			mergeRequestIid,
+			mergeRequestKey,
+			factoryAuthored: Boolean(authoringItem),
+			item,
+			ingressIdentity: `gitlab:${projectId}:${parsed.deliveryId}${index ? `:${item?.id ?? index}` : ""}`,
+			...event === "mergeRequestOpened" ? { mergeRequestOpenedScope: index ? "board" : "intake" } : {}
+		}));
+		const branchOwners = headBranch ? items.filter((item) => item.externalSource?.type !== "pull-request" && Object.values(item.sessions).some((session) => session.branch === headBranch)) : [];
+		if (authoringItem && mergeRequestIid && branchOwners.length === 1) await this.#trackOpenMergeRequest({
+			orgId: authoringItem.orgId,
+			id: authoringItem.id,
+			event,
+			mergeRequestIid,
+			eventAt: timestamp(mergeRequest?.updated_at),
+			opened: string(mergeRequest?.state) === "opened" && (actorTrusted || mergeRequestAuthorTrusted),
+			headSha: string(object(mergeRequest?.last_commit)?.id)?.toLowerCase()
+		});
+		const headSha = string(object(mergeRequest?.last_commit)?.id)?.toLowerCase();
+		const headAt = timestamp(mergeRequest?.updated_at);
+		if (event === "mergeRequestUpdated" && headSha && reviewItem) {
+			const parent = items.find((item) => item.id === reviewItem.parentWorkItemId);
+			await recordPullRequestHead(this.options.storage, {
+				orgId: reviewItem.orgId,
+				id: reviewItem.id,
+				headSha,
+				headAt
+			});
+			if (parent) await recordPullRequestHead(this.options.storage, {
+				orgId: parent.orgId,
+				id: parent.id,
+				headSha,
+				headAt,
+				ownedPullRequestNumber: mergeRequestIid
+			});
+		}
+		if (results.some((result) => result.status === "committed")) return { status: "committed" };
+		if (results.some((result) => result.status === "replayed")) return { status: "replayed" };
+		return results[0] ?? { status: "ignored" };
+	}
+	/**
+	* Records or clears the merge request a Work card has out. Each merge
+	* request's last applied event time is kept on the card, so an opening that
+	* is older than a close already applied (a replay, or a close delivered
+	* first) is ignored, while a genuine reopen is newer and records it again.
+	*/
+	async #trackOpenMergeRequest(input) {
+		const settling = input.event === "mergeRequestMerged" || input.event === "mergeRequestClosed";
+		if (input.event !== "mergeRequestOpened" && !settling) return;
+		const key = String(input.mergeRequestIid);
+		for (let attempt = 0; attempt < 3; attempt++) {
+			const item = await this.options.storage.get({
+				orgId: input.orgId,
+				id: input.id
+			});
+			if (!item) return;
+			const events = object(item.metadata?.mergeRequestEvents) ?? {};
+			const last = object(events[key]);
+			const lastAt = number(last?.at);
+			if (input.eventAt !== void 0 && lastAt !== void 0 && lastAt >= input.eventAt) return;
+			if (input.eventAt === void 0 && !settling && last?.open === false) return;
+			if (!settling && !input.opened) return;
+			const recorded = item.metadata?.openPullRequestNumber;
+			const patch = { mergeRequestEvents: {
+				...events,
+				[key]: {
+					at: input.eventAt ?? lastAt ?? null,
+					open: !settling
+				}
+			} };
+			if (!settling) {
+				if (recorded !== input.mergeRequestIid) {
+					patch.pullRequestHeadSha = input.headSha ?? null;
+					patch.pullRequestHeadAt = input.eventAt ?? null;
+				}
+				patch.openPullRequestNumber = input.mergeRequestIid;
+			} else if (recorded === input.mergeRequestIid) {
+				patch.openPullRequestNumber = null;
+				if (input.event === "mergeRequestMerged" && typeof item.metadata?.reviewVerdict === "string") patch.reviewVerdict = null;
+			}
+			try {
+				await this.options.storage.update({
+					orgId: item.orgId,
+					id: item.id,
+					userId: "factory-rule-dispatcher",
+					expectedRevision: item.revision,
+					patch: { metadata: patch }
+				});
+				return;
+			} catch (error) {
+				if (!(error instanceof WorkItemUpdateConflictError)) throw error;
+			}
+		}
+	}
+	async #trusted(connectionIds, projectId, username) {
+		for (const connectionId of connectionIds) try {
+			const level = await this.options.gitlab.getProjectMemberAccessLevel(connectionId, projectId, username);
+			if (level !== void 0) return level >= 30;
+		} catch {}
+		return false;
+	}
+	async #evaluate(input, attempt = 1) {
+		const note = object(input.parsed.payload.object_attributes);
+		const issueAuthor = input.issueAuthor;
+		const mergeRequestAuthor = input.mergeRequestAuthor;
+		const mergeRequestState = string(input.mergeRequest?.state);
+		const context = {
+			tenant: {
+				orgId: input.orgId,
+				projectId: input.factoryProjectId
+			},
+			actor: input.actor,
+			ingress: {
+				type: "gitlab",
+				id: input.ingressIdentity
+			},
+			cause: `gitlab.${input.event}`,
+			causalChain: [],
+			configVersion: this.options.configVersion,
+			...input.item ? {
+				item: {
+					id: input.item.id,
+					source: input.item.externalSource?.type === "pull-request" ? "gitlab-pr" : input.item.externalSource?.integrationId === "gitlab" ? "gitlab-issue" : "manual",
+					sourceKey: input.item.externalSource?.externalId ?? null,
+					parentWorkItemId: input.item.parentWorkItemId,
+					title: input.item.title,
+					url: input.item.externalSource?.url ?? null,
+					stages: input.item.stages,
+					acceptedAt: input.item.acceptedAt,
+					metadata: input.item.metadata
+				},
+				board: boardForWorkItem(input.item),
+				itemRevision: input.item.revision,
+				...withBoardClosure(this.options.boards, input.item),
+				...rulePhaseField(this.options.boards, input.item)
+			} : {},
+			intake: input.board,
+			event: input.event,
+			deliveryId: input.parsed.deliveryId,
+			factory: { createdAt: input.factoryProject.createdAt.toISOString() },
+			repository: {
+				id: input.projectId,
+				fullName: input.projectPath,
+				host: input.host
+			},
+			...input.issueIid && input.issueSourceKey && string(input.issue?.title) ? { issue: {
+				number: input.issueIid,
+				sourceKey: input.issueSourceKey,
+				title: string(input.issue?.title),
+				url: string(input.issue?.url) ?? string(input.issue?.web_url) ?? `https://${input.host}/${input.projectPath}/-/issues/${input.issueIid}`,
+				...string(input.issue?.created_at) ? { createdAt: string(input.issue?.created_at) } : {},
+				...string(input.issue?.updated_at) ? { updatedAt: string(input.issue?.updated_at) } : {},
+				assignees: usernames(input.parsed.payload.assignees ?? input.issue?.assignees),
+				labels: labelNames(input.issue?.labels ?? input.parsed.payload.labels),
+				labelColors: labelColors(input.issue?.labels ?? input.parsed.payload.labels),
+				state: string(input.issue?.state) === "closed" ? "closed" : "open",
+				...issueAuthor ? { author: issueAuthor } : {},
+				authorTrusted: input.issueAuthorTrusted
+			} } : {},
+			...input.parsed.event === "Note Hook" && number(note?.id) ? { note: {
+				id: number(note?.id),
+				...string(note?.note) ? { body: string(note?.note) } : {},
+				...string(note?.url) ? { url: string(note?.url) } : {},
+				...string(object(input.parsed.payload.user)?.username) ? { author: string(object(input.parsed.payload.user)?.username) } : {},
+				...string(note?.created_at) ? { createdAt: string(note?.created_at) } : {},
+				...string(note?.updated_at) ? { updatedAt: string(note?.updated_at) } : {}
+			} } : {},
+			...input.mergeRequestIid && input.mergeRequestKey && string(input.mergeRequest?.title) ? { mergeRequest: {
+				number: input.mergeRequestIid,
+				sourceKey: input.mergeRequestKey,
+				title: string(input.mergeRequest?.title),
+				url: string(input.mergeRequest?.url) ?? string(input.mergeRequest?.web_url) ?? `https://${input.host}/${input.projectPath}/-/merge_requests/${input.mergeRequestIid}`,
+				...string(input.mergeRequest?.created_at) ? { createdAt: string(input.mergeRequest?.created_at) } : {},
+				state: mergeRequestState === "closed" || mergeRequestState === "merged" ? "closed" : "open",
+				draft: boolean(input.mergeRequest?.draft) ?? boolean(input.mergeRequest?.work_in_progress) ?? false,
+				merged: input.event === "mergeRequestMerged" || mergeRequestState === "merged",
+				assignees: usernames(input.parsed.payload.assignees ?? input.mergeRequest?.assignees),
+				reviewers: usernames(input.parsed.payload.reviewers ?? input.mergeRequest?.reviewers),
+				labels: labelNames(input.mergeRequest?.labels ?? input.parsed.payload.labels),
+				labelColors: labelColors(input.mergeRequest?.labels ?? input.parsed.payload.labels),
+				...mergeRequestAuthor ? { author: mergeRequestAuthor } : {},
+				authorTrusted: input.mergeRequestAuthorTrusted,
+				factoryAuthored: input.factoryAuthored,
+				headBranch: string(input.mergeRequest?.source_branch) ?? "",
+				baseBranch: string(input.mergeRequest?.target_branch) ?? ""
+			} } : {}
+		};
+		const boardRules = boardEventHandlers(this.options.boards, input.mergeRequestOpenedScope === "intake" ? void 0 : eventBoardId(context), "gitlab");
+		const rule = input.mergeRequestOpenedScope === "board" ? hasExplicitRuleOverride(this.options.gitlab.rules, input.event) ? void 0 : boardRules?.mergeRequestOpened : selectEventRule(this.options.gitlab.rules, boardRules, input.event);
+		if (input.mergeRequestOpenedScope === "board" && !rule) return { status: "ignored" };
+		let decision;
+		let decisions = [];
+		let outcome = { status: "accepted" };
+		try {
+			decision = rule ? await withRuleTimeout(Promise.resolve(rule(Object.freeze(context)))) : void 0;
+			if (decision?.type === "reject") outcome = {
+				status: "rejected",
+				code: decision.code,
+				reason: decision.reason
+			};
+			else if (decision) decisions = validateFactoryRuleDecisions([decision]).map((entry) => {
+				assertFactoryDecisionTarget(entry, this.options.boards, input.item ? boardForWorkItem(input.item) : void 0);
+				return { ...entry };
+			});
+		} catch (error) {
+			const timedOut = error instanceof Error && error.message === "FACTORY_RULE_TIMEOUT";
+			outcome = {
+				status: "rejected",
+				code: timedOut ? "timeout" : "rule_error",
+				reason: timedOut ? "Factory rule evaluation timed out." : error instanceof Error ? error.message.slice(0, 2e3) : "Factory GitLab rule failed."
+			};
+		}
+		const committed = await this.options.storage.commitRuleEvaluation({
+			orgId: input.orgId,
+			factoryProjectId: input.factoryProjectId,
+			workItemId: input.item?.id ?? null,
+			ingress: {
+				identity: input.ingressIdentity,
+				triggerType: `gitlab.${input.event}`
+			},
+			configVersion: this.options.configVersion,
+			expectedRevision: input.item?.revision ?? null,
+			actor: { ...input.actor },
+			outcome,
+			decisions,
+			causalChain: [],
+			now: /* @__PURE__ */ new Date()
+		});
+		if (committed.status === "stale") {
+			if (attempt >= MAX_STALE_RULE_ATTEMPTS) throw new Error(`Factory GitLab rule evaluation for ${input.ingressIdentity} kept losing revision races.`);
+			const fresh = input.item ? await this.options.storage.get({
+				orgId: input.orgId,
+				id: input.item.id
+			}) : null;
+			if (input.item && !fresh) return { status: "missing" };
+			return this.#evaluate({
+				...input,
+				item: fresh ?? void 0
+			}, attempt + 1);
+		}
+		return { status: committed.status };
+	}
+};
+function attachGitLabRules(gitlab, context) {
+	if (!context.runtime) return void 0;
+	const rules = new GitLabRules({
+		gitlab,
+		sourceControl: context.storage.sourceControl,
+		projects: context.storage.projects,
+		storage: context.runtime.workItems,
+		intake: context.storage.intake,
+		configVersion: context.runtime.configVersion,
+		boards: context.runtime.boards
+	});
+	return (event) => rules.ingest(event);
+}
+//#endregion
+export { GitLabRules, attachGitLabRules };
+
+//# sourceMappingURL=rules.js.map

package/dist/integrations/gitlab/rules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rules.js","names":["#targets","#ingestProject","#trusted","#evaluate","#trackOpenMergeRequest"],"sources":["../../../src/integrations/gitlab/rules.ts"],"sourcesContent":["import {\n  boardEventHandlers,\n  boardForWorkItem,\n  eventBoardId,\n  rulePhaseField,\n  withBoardClosure,\n} from '../../boards/index.js';\nimport type { BoardRegistry } from '../../boards/index.js';\nimport { hasExplicitRuleOverride, selectEventRule } from '../../rules/event-rules.js';\nimport type {\n  FactoryGitLabEventName,\n  FactoryGitLabRuleContext,\n  FactoryRuleActor,\n  FactoryRuleDecision,\n} from '../../rules/types.js';\nimport { assertFactoryDecisionTarget, validateFactoryRuleDecisions } from '../../rules/validation.js';\nimport type { IntakeStorage } from '../../storage/domains/intake/base.js';\nimport type { FactoryProjectsStorage } from '../../storage/domains/projects/base.js';\nimport type {\n  ExternalRepositoryProjectTarget,\n  SourceControlStorageHandle,\n} from '../../storage/domains/source-control/base.js';\nimport { WorkItemUpdateConflictError } from '../../storage/domains/work-items/base.js';\nimport type { WorkItemRow, WorkItemsStorage } from '../../storage/domains/work-items/base.js';\nimport type { IntegrationContext } from '../base.js';\nimport { recordPullRequestHead } from '../pull-request-head.js';\nimport type { GitLabEventRules } from './default-rules.js';\nimport { encodeIssueReference, encodeSourceId, GITLAB_TRUSTED_ACCESS_LEVEL } from './integration.js';\nimport type { ParsedGitLabWebhook } from './webhook.js';\n\nconst RULE_TIMEOUT_MS = 5_000;\n\ntype IngressStatus = 'ignored' | 'committed' | 'replayed' | 'missing';\n\nfunction object(value: unknown): Record<string, unknown> | undefined {\n  return value && typeof value === 'object' && !Array.isArray(value) ? (value as Record<string, unknown>) : undefined;\n}\n\nfunction string(value: unknown): string | undefined {\n  return typeof value === 'string' && value.length > 0 ? value : undefined;\n}\n\nfunction number(value: unknown): number | undefined {\n  return typeof value === 'number' && Number.isFinite(value) ? value : undefined;\n}\n\n/** GitLab sends `2024-01-02T03:04:05Z` or `2024-01-02 03:04:05 UTC`. */\nfunction timestamp(value: unknown): number | undefined {\n  const text = string(value);\n  if (!text) return undefined;\n  const parsed = Date.parse(text.replace(' UTC', 'Z').replace(' ', 'T'));\n  return Number.isNaN(parsed) ? undefined : parsed;\n}\n\nfunction boolean(value: unknown): boolean | undefined {\n  return typeof value === 'boolean' ? value : undefined;\n}\n\nfunction usernames(value: unknown): string[] {\n  if (!Array.isArray(value)) return [];\n  return value.flatMap(entry => {\n    const username = string(object(entry)?.username);\n    return username ? [username] : [];\n  });\n}\n\nfunction labelNames(value: unknown): string[] {\n  if (!Array.isArray(value)) return [];\n  return value.flatMap(entry => {\n    if (typeof entry === 'string') return entry ? [entry] : [];\n    const title = string(object(entry)?.title) ?? string(object(entry)?.name);\n    return title ? [title] : [];\n  });\n}\n\nfunction labelColors(value: unknown): Record<string, string> {\n  if (!Array.isArray(value)) return {};\n  return Object.fromEntries(\n    value.flatMap(entry => {\n      const label = object(entry);\n      const name = string(label?.title) ?? string(label?.name);\n      const color = string(label?.color);\n      return name && color ? [[name, color]] : [];\n    }),\n  );\n}\n\nfunction eventName(parsed: ParsedGitLabWebhook): FactoryGitLabEventName | undefined {\n  const attributes = object(parsed.payload.object_attributes);\n  const action = string(attributes?.action)?.toLowerCase();\n  if (parsed.event === 'Issue Hook') {\n    if (action === 'open' || action === 'reopen') return 'issueOpened';\n    if (action === 'close') return 'issueClosed';\n    return 'issueUpdated';\n  }\n  if (parsed.event === 'Note Hook') {\n    const noteableType = string(attributes?.noteable_type);\n    if (noteableType === 'Issue') return 'issueCommented';\n    if (noteableType === 'MergeRequest') return 'mergeRequestCommented';\n    return;\n  }\n  if (parsed.event !== 'Merge Request Hook') return;\n  if (action === 'open' || action === 'reopen') return 'mergeRequestOpened';\n  if (action === 'merge') return 'mergeRequestMerged';\n  if (action === 'close') return 'mergeRequestClosed';\n  return 'mergeRequestUpdated';\n}\n\nfunction normalizeHost(host: string): string {\n  return host.trim().toLowerCase().replace(/\\.$/, '');\n}\n\nfunction hostFromPayload(parsed: ParsedGitLabWebhook): string | undefined {\n  const declaredHost = parsed.instanceHost ? normalizeHost(parsed.instanceHost) : undefined;\n  const projectUrl = string(object(parsed.payload.project)?.web_url);\n  if (!projectUrl) return declaredHost;\n  try {\n    const payloadHost = normalizeHost(new URL(projectUrl).host);\n    if (declaredHost && declaredHost !== payloadHost) return undefined;\n    return payloadHost;\n  } catch {\n    return undefined;\n  }\n}\n\nfunction mergeRequestSourceKey(host: string, projectId: number, mergeRequestIid: number): string {\n  return `gitlab-pr:${Buffer.from(JSON.stringify({ version: 1, host, projectId, mergeRequestIid }), 'utf8').toString('base64url')}`;\n}\n\nasync function withRuleTimeout<T>(promise: Promise<T>): Promise<T> {\n  let timeout: ReturnType<typeof setTimeout> | undefined;\n  try {\n    return await Promise.race([\n      promise,\n      new Promise<never>((_, reject) => {\n        timeout = setTimeout(() => reject(new Error('FACTORY_RULE_TIMEOUT')), RULE_TIMEOUT_MS);\n      }),\n    ]);\n  } finally {\n    if (timeout) clearTimeout(timeout);\n  }\n}\n\nconst MAX_STALE_RULE_ATTEMPTS = 3;\n\nexport interface GitLabRulesIntegration {\n  readonly rules: GitLabEventRules;\n  resolveActiveConnectionForHost?(storedConnectionId: string, host: string): Promise<string>;\n  getProjectMemberAccessLevel(connectionId: string, projectId: string, username: string): Promise<number | undefined>;\n  getWorkItemAuthorUsername(\n    connectionId: string,\n    projectId: string,\n    kind: 'issue' | 'merge_request',\n    iid: number,\n  ): Promise<string | undefined>;\n}\n\ninterface GitLabRulesOptions {\n  gitlab: GitLabRulesIntegration;\n  sourceControl: SourceControlStorageHandle;\n  projects: FactoryProjectsStorage;\n  storage: WorkItemsStorage;\n  intake: IntakeStorage;\n  configVersion: string;\n  boards: BoardRegistry;\n}\n\ninterface ProjectTarget {\n  target: ExternalRepositoryProjectTarget;\n  connectionIds: string[];\n}\n\nexport class GitLabRules {\n  constructor(private readonly options: GitLabRulesOptions) {}\n\n  async ingest(parsed: ParsedGitLabWebhook): Promise<{ status: IngressStatus }> {\n    const event = eventName(parsed);\n    const project = object(parsed.payload.project);\n    const projectId = number(project?.id);\n    const projectPath = string(project?.path_with_namespace);\n    const host = hostFromPayload(parsed);\n    const username = string(parsed.payload.user_username) ?? string(object(parsed.payload.user)?.username);\n    if (!event || !projectId || !projectPath || !host || !username) return { status: 'ignored' };\n\n    const targets = await this.#targets(String(projectId), host);\n    if (targets.length === 0) return { status: 'ignored' };\n    const results: Array<{ status: IngressStatus }> = [];\n    for (const target of targets) {\n      results.push(await this.#ingestProject(parsed, event, projectId, projectPath, host, username, target));\n    }\n    if (results.some(result => result.status === 'committed')) return { status: 'committed' };\n    if (results.some(result => result.status === 'replayed')) return { status: 'replayed' };\n    return results[0] ?? { status: 'ignored' };\n  }\n\n  async #targets(repositoryExternalId: string, host: string): Promise<ProjectTarget[]> {\n    const grouped = new Map<string, ProjectTarget>();\n    const keys = (await this.options.sourceControl.projectRepositories.listConfiguredExternalKeys()).filter(\n      key => key.repositoryExternalId === repositoryExternalId,\n    );\n    for (const key of keys) {\n      const targets = await this.options.sourceControl.projectRepositories.listByExternalRepository({\n        installationExternalId: key.installationExternalId,\n        repositoryExternalId,\n      });\n      for (const target of targets) {\n        const installation = await this.options.sourceControl.installations.findByExternalId({\n          orgId: target.orgId,\n          externalId: key.installationExternalId,\n        });\n        const installationHost = string(installation?.providerMetadata.host);\n        if (!installationHost || normalizeHost(installationHost) !== normalizeHost(host)) continue;\n        const id = `${target.orgId}:${target.factoryProjectId}`;\n        const current = grouped.get(id);\n        if (current) {\n          if (!current.connectionIds.includes(key.installationExternalId)) {\n            current.connectionIds.push(key.installationExternalId);\n          }\n        } else {\n          grouped.set(id, { target, connectionIds: [key.installationExternalId] });\n        }\n      }\n    }\n    return [...grouped.values()];\n  }\n\n  async #ingestProject(\n    parsed: ParsedGitLabWebhook,\n    event: FactoryGitLabEventName,\n    projectId: number,\n    projectPath: string,\n    host: string,\n    username: string,\n    target: ProjectTarget,\n  ): Promise<{ status: IngressStatus }> {\n    const factoryProject = await this.options.projects.get({\n      orgId: target.target.orgId,\n      id: target.target.factoryProjectId,\n    });\n    if (!factoryProject) return { status: 'missing' };\n\n    const sourceId = encodeSourceId({ host, projectId: String(projectId) });\n    const config = await this.options.intake.getConfig({\n      orgId: target.target.orgId,\n      integrationIds: ['gitlab'],\n    });\n    if (!config.gitlab?.enabled || !config.gitlab.sourceIds?.includes(sourceId)) return { status: 'ignored' };\n    const binding = (\n      await this.options.intake.listBindings({ orgId: target.target.orgId, integrationId: 'gitlab' })\n    ).find(\n      candidate => candidate.sourceId === sourceId && candidate.factoryProjectId === target.target.factoryProjectId,\n    );\n    if (!binding) return { status: 'ignored' };\n    const board = this.options.boards.get(binding.board ?? 'work');\n    if (!board) return { status: 'ignored' };\n\n    const connectionIds = [\n      ...new Set(\n        await Promise.all(\n          target.connectionIds.map(\n            connectionId => this.options.gitlab.resolveActiveConnectionForHost?.(connectionId, host) ?? connectionId,\n          ),\n        ),\n      ),\n    ];\n\n    const attributes = object(parsed.payload.object_attributes);\n    const issue = parsed.event === 'Note Hook' ? object(parsed.payload.issue) : attributes;\n    const mergeRequest = parsed.event === 'Note Hook' ? object(parsed.payload.merge_request) : attributes;\n    const issueIid = number(issue?.iid);\n    const mergeRequestIid = number(mergeRequest?.iid);\n    const issueSourceKey = issueIid\n      ? encodeIssueReference({ host, projectId: String(projectId), issueIid })\n      : undefined;\n    const mergeRequestKey = mergeRequestIid ? mergeRequestSourceKey(host, projectId, mergeRequestIid) : undefined;\n    const items = await this.options.storage.list({\n      orgId: target.target.orgId,\n      factoryProjectId: target.target.factoryProjectId,\n    });\n    const issueItem = issueSourceKey\n      ? items.find(\n          item => item.externalSource?.integrationId === 'gitlab' && item.externalSource.externalId === issueSourceKey,\n        )\n      : undefined;\n    const reviewItem = mergeRequestKey\n      ? items.find(\n          item => item.externalSource?.integrationId === 'gitlab' && item.externalSource.externalId === mergeRequestKey,\n        )\n      : undefined;\n    const headBranch = string(mergeRequest?.source_branch) ?? '';\n    const authoringItem = headBranch\n      ? items.find(\n          item =>\n            item.externalSource?.type !== 'pull-request' &&\n            Object.values(item.sessions).some(session => session.branch === headBranch),\n        )\n      : undefined;\n    const actorTrusted = await this.#trusted(connectionIds, String(projectId), username);\n    const eventUserId = number(object(parsed.payload.user)?.id) ?? number(parsed.payload.user_id);\n    const resolveAuthor = async (\n      item: Record<string, unknown> | undefined,\n      kind: 'issue' | 'merge_request',\n      iid: number | undefined,\n    ): Promise<string | undefined> => {\n      if (!item || !iid) return undefined;\n      const embedded = string(object(item.author)?.username);\n      if (embedded) return embedded;\n      if (eventUserId && eventUserId === number(item.author_id)) return username;\n      for (const connectionId of connectionIds) {\n        try {\n          const resolved = await this.options.gitlab.getWorkItemAuthorUsername(\n            connectionId,\n            String(projectId),\n            kind,\n            iid,\n          );\n          if (resolved) return resolved;\n        } catch {\n          // Another active credential may cover this project; otherwise leave author trust unset.\n        }\n      }\n      return undefined;\n    };\n    const [issueAuthor, mergeRequestAuthor] = await Promise.all([\n      resolveAuthor(issue, 'issue', issueIid),\n      resolveAuthor(mergeRequest, 'merge_request', mergeRequestIid),\n    ]);\n    const authorTrusted = async (author: string | undefined): Promise<boolean> => {\n      if (!author) return false;\n      return author === username ? actorTrusted : this.#trusted(connectionIds, String(projectId), author);\n    };\n    const [issueAuthorTrusted, mergeRequestAuthorTrusted] = await Promise.all([\n      authorTrusted(issueAuthor),\n      authorTrusted(mergeRequestAuthor),\n    ]);\n    const actor: FactoryRuleActor = {\n      type: 'gitlab',\n      username,\n      trusted: actorTrusted,\n      factoryAuthored: false,\n    };\n\n    const candidates: Array<WorkItemRow | undefined> =\n      event === 'mergeRequestMerged'\n        ? [...new Map([reviewItem, authoringItem].filter(Boolean).map(item => [item!.id, item!])).values()]\n        : event === 'mergeRequestCommented'\n          ? [authoringItem ?? reviewItem]\n          : event === 'mergeRequestOpened'\n            ? [authoringItem, ...(authoringItem ? [authoringItem] : [])]\n            : event.startsWith('mergeRequest')\n              ? [reviewItem ?? authoringItem]\n              : [issueItem];\n    const results = [];\n    for (const [index, item] of candidates.entries()) {\n      results.push(\n        await this.#evaluate({\n          parsed,\n          event,\n          projectId,\n          projectPath,\n          host,\n          actor,\n          orgId: target.target.orgId,\n          factoryProjectId: target.target.factoryProjectId,\n          factoryProject,\n          board: { board: board.id, initialPhase: board.initialPhase },\n          issue,\n          issueAuthor,\n          issueAuthorTrusted,\n          issueIid,\n          issueSourceKey,\n          mergeRequest,\n          mergeRequestAuthor,\n          mergeRequestAuthorTrusted,\n          mergeRequestIid,\n          mergeRequestKey,\n          factoryAuthored: Boolean(authoringItem),\n          item,\n          ingressIdentity: `gitlab:${projectId}:${parsed.deliveryId}${index ? `:${item?.id ?? index}` : ''}`,\n          // A merge request opening concerns two cards: its own Review card,\n          // which the integration handler files against the authoring item,\n          // and that authoring item, which its board may react to. The second\n          // evaluation runs only the board handler, under an id-suffixed\n          // identity so it is not dropped as a replay of the first.\n          ...(event === 'mergeRequestOpened' ? { mergeRequestOpenedScope: index ? ('board' as const) : ('intake' as const) } : {}),\n        }),\n      );\n    }\n    // The authoring Work item records which merge request it has out, so the\n    // Work transition policy keeps an agent from closing the work while it is\n    // open. Sessions carry no repository, so a branch shared by two Work cards\n    // is ambiguous and records nothing.\n    const branchOwners = headBranch\n      ? items.filter(\n          item =>\n            item.externalSource?.type !== 'pull-request' &&\n            Object.values(item.sessions).some(session => session.branch === headBranch),\n        )\n      : [];\n    if (authoringItem && mergeRequestIid && branchOwners.length === 1) {\n      await this.#trackOpenMergeRequest({\n        orgId: authoringItem.orgId,\n        id: authoringItem.id,\n        event,\n        mergeRequestIid,\n        eventAt: timestamp(mergeRequest?.updated_at),\n        opened: string(mergeRequest?.state) === 'opened' && (actorTrusted || mergeRequestAuthorTrusted),\n        headSha: string(object(mergeRequest?.last_commit)?.id)?.toLowerCase(),\n      });\n    }\n    // A push moves the head a recorded review verdict was given on. Recording\n    // the new head lets the verdict badge show that it is outdated, while the\n    // verdict itself stays so the next pass still runs as a re-review.\n    const headSha = string(object(mergeRequest?.last_commit)?.id)?.toLowerCase();\n    const headAt = timestamp(mergeRequest?.updated_at);\n    if (event === 'mergeRequestUpdated' && headSha && reviewItem) {\n      const parent = items.find(item => item.id === reviewItem.parentWorkItemId);\n      // The authoring Work item mirrors the verdict of the merge request it has\n      // out; a push to an older one must not mark its successor's verdict.\n      await recordPullRequestHead(this.options.storage, {\n        orgId: reviewItem.orgId,\n        id: reviewItem.id,\n        headSha,\n        headAt,\n      });\n      if (parent) {\n        await recordPullRequestHead(this.options.storage, {\n          orgId: parent.orgId,\n          id: parent.id,\n          headSha,\n          headAt,\n          ownedPullRequestNumber: mergeRequestIid,\n        });\n      }\n    }\n    if (results.some(result => result.status === 'committed')) return { status: 'committed' };\n    if (results.some(result => result.status === 'replayed')) return { status: 'replayed' };\n    return results[0] ?? { status: 'ignored' };\n  }\n\n  /**\n   * Records or clears the merge request a Work card has out. Each merge\n   * request's last applied event time is kept on the card, so an opening that\n   * is older than a close already applied (a replay, or a close delivered\n   * first) is ignored, while a genuine reopen is newer and records it again.\n   */\n  async #trackOpenMergeRequest(input: {\n    orgId: string;\n    id: string;\n    event: string;\n    mergeRequestIid: number;\n    eventAt: number | undefined;\n    opened: boolean;\n    headSha: string | undefined;\n  }): Promise<void> {\n    const settling = input.event === 'mergeRequestMerged' || input.event === 'mergeRequestClosed';\n    if (input.event !== 'mergeRequestOpened' && !settling) return;\n    const key = String(input.mergeRequestIid);\n    for (let attempt = 0; attempt < 3; attempt++) {\n      const item = await this.options.storage.get({ orgId: input.orgId, id: input.id });\n      if (!item) return;\n      const events = object(item.metadata?.mergeRequestEvents) ?? {};\n      const last = object(events[key]);\n      const lastAt = number(last?.at);\n      if (input.eventAt !== undefined && lastAt !== undefined && lastAt >= input.eventAt) return;\n      // Without a timestamp, only an opening that no close has settled is trusted.\n      if (input.eventAt === undefined && !settling && last?.open === false) return;\n      if (!settling && !input.opened) return;\n      const recorded = item.metadata?.openPullRequestNumber;\n      const patch: Record<string, unknown> = {\n        mergeRequestEvents: { ...events, [key]: { at: input.eventAt ?? lastAt ?? null, open: !settling } },\n      };\n      if (!settling) {\n        // A head recorded for an earlier merge request must not mark this one's\n        // verdict outdated. A replayed opening of the merge request already\n        // recorded keeps the head its pushes left.\n        if (recorded !== input.mergeRequestIid) {\n          patch.pullRequestHeadSha = input.headSha ?? null;\n          patch.pullRequestHeadAt = input.eventAt ?? null;\n        }\n        patch.openPullRequestNumber = input.mergeRequestIid;\n      } else if (recorded === input.mergeRequestIid) {\n        patch.openPullRequestNumber = null;\n        if (input.event === 'mergeRequestMerged' && typeof item.metadata?.reviewVerdict === 'string') {\n          patch.reviewVerdict = null;\n        }\n      }\n      try {\n        await this.options.storage.update({\n          orgId: item.orgId,\n          id: item.id,\n          userId: 'factory-rule-dispatcher',\n          expectedRevision: item.revision,\n          patch: { metadata: patch },\n        });\n        return;\n      } catch (error) {\n        if (!(error instanceof WorkItemUpdateConflictError)) throw error;\n      }\n    }\n  }\n\n  async #trusted(connectionIds: string[], projectId: string, username: string): Promise<boolean> {\n    for (const connectionId of connectionIds) {\n      try {\n        const level = await this.options.gitlab.getProjectMemberAccessLevel(connectionId, projectId, username);\n        if (level !== undefined) return level >= GITLAB_TRUSTED_ACCESS_LEVEL;\n      } catch {\n        // Try another active credential covering the same canonical project; otherwise fail closed.\n      }\n    }\n    return false;\n  }\n\n  async #evaluate(\n    input: {\n      parsed: ParsedGitLabWebhook;\n      event: FactoryGitLabEventName;\n      projectId: number;\n      projectPath: string;\n      host: string;\n      actor: FactoryRuleActor;\n      orgId: string;\n      factoryProjectId: string;\n      factoryProject: { createdAt: Date };\n      board: { board: string; initialPhase: string };\n      issue: Record<string, unknown> | undefined;\n      issueAuthor: string | undefined;\n      issueAuthorTrusted: boolean;\n      issueIid: number | undefined;\n      issueSourceKey: string | undefined;\n      mergeRequest: Record<string, unknown> | undefined;\n      mergeRequestAuthor: string | undefined;\n      mergeRequestAuthorTrusted: boolean;\n      mergeRequestIid: number | undefined;\n      mergeRequestKey: string | undefined;\n      factoryAuthored: boolean;\n      item: WorkItemRow | undefined;\n      ingressIdentity: string;\n      mergeRequestOpenedScope?: 'intake' | 'board';\n    },\n    attempt = 1,\n  ): Promise<{ status: IngressStatus }> {\n    const note = object(input.parsed.payload.object_attributes);\n    const issueAuthor = input.issueAuthor;\n    const mergeRequestAuthor = input.mergeRequestAuthor;\n    const mergeRequestState = string(input.mergeRequest?.state);\n    const context: FactoryGitLabRuleContext = {\n      tenant: { orgId: input.orgId, projectId: input.factoryProjectId },\n      actor: input.actor,\n      ingress: { type: 'gitlab', id: input.ingressIdentity },\n      cause: `gitlab.${input.event}`,\n      causalChain: [],\n      configVersion: this.options.configVersion,\n      ...(input.item\n        ? {\n            item: {\n              id: input.item.id,\n              source:\n                input.item.externalSource?.type === 'pull-request'\n                  ? ('gitlab-pr' as const)\n                  : input.item.externalSource?.integrationId === 'gitlab'\n                    ? ('gitlab-issue' as const)\n                    : ('manual' as const),\n              sourceKey: input.item.externalSource?.externalId ?? null,\n              parentWorkItemId: input.item.parentWorkItemId,\n              title: input.item.title,\n              url: input.item.externalSource?.url ?? null,\n              stages: input.item.stages,\n              acceptedAt: input.item.acceptedAt,\n              metadata: input.item.metadata,\n            },\n            board: boardForWorkItem(input.item),\n            itemRevision: input.item.revision,\n            ...withBoardClosure(this.options.boards, input.item),\n            ...rulePhaseField(this.options.boards, input.item),\n          }\n        : {}),\n      intake: input.board,\n      event: input.event,\n      deliveryId: input.parsed.deliveryId,\n      factory: { createdAt: input.factoryProject.createdAt.toISOString() },\n      repository: { id: input.projectId, fullName: input.projectPath, host: input.host },\n      ...(input.issueIid && input.issueSourceKey && string(input.issue?.title)\n        ? {\n            issue: {\n              number: input.issueIid,\n              sourceKey: input.issueSourceKey,\n              title: string(input.issue?.title)!,\n              url:\n                string(input.issue?.url) ??\n                string(input.issue?.web_url) ??\n                `https://${input.host}/${input.projectPath}/-/issues/${input.issueIid}`,\n              ...(string(input.issue?.created_at) ? { createdAt: string(input.issue?.created_at) } : {}),\n              ...(string(input.issue?.updated_at) ? { updatedAt: string(input.issue?.updated_at) } : {}),\n              assignees: usernames(input.parsed.payload.assignees ?? input.issue?.assignees),\n              labels: labelNames(input.issue?.labels ?? input.parsed.payload.labels),\n              labelColors: labelColors(input.issue?.labels ?? input.parsed.payload.labels),\n              state: string(input.issue?.state) === 'closed' ? ('closed' as const) : ('open' as const),\n              ...(issueAuthor ? { author: issueAuthor } : {}),\n              authorTrusted: input.issueAuthorTrusted,\n            },\n          }\n        : {}),\n      ...(input.parsed.event === 'Note Hook' && number(note?.id)\n        ? {\n            note: {\n              id: number(note?.id)!,\n              ...(string(note?.note) ? { body: string(note?.note) } : {}),\n              ...(string(note?.url) ? { url: string(note?.url) } : {}),\n              ...(string(object(input.parsed.payload.user)?.username)\n                ? { author: string(object(input.parsed.payload.user)?.username) }\n                : {}),\n              ...(string(note?.created_at) ? { createdAt: string(note?.created_at) } : {}),\n              ...(string(note?.updated_at) ? { updatedAt: string(note?.updated_at) } : {}),\n            },\n          }\n        : {}),\n      ...(input.mergeRequestIid && input.mergeRequestKey && string(input.mergeRequest?.title)\n        ? {\n            mergeRequest: {\n              number: input.mergeRequestIid,\n              sourceKey: input.mergeRequestKey,\n              title: string(input.mergeRequest?.title)!,\n              url:\n                string(input.mergeRequest?.url) ??\n                string(input.mergeRequest?.web_url) ??\n                `https://${input.host}/${input.projectPath}/-/merge_requests/${input.mergeRequestIid}`,\n              ...(string(input.mergeRequest?.created_at) ? { createdAt: string(input.mergeRequest?.created_at) } : {}),\n              state:\n                mergeRequestState === 'closed' || mergeRequestState === 'merged'\n                  ? ('closed' as const)\n                  : ('open' as const),\n              draft: boolean(input.mergeRequest?.draft) ?? boolean(input.mergeRequest?.work_in_progress) ?? false,\n              merged: input.event === 'mergeRequestMerged' || mergeRequestState === 'merged',\n              assignees: usernames(input.parsed.payload.assignees ?? input.mergeRequest?.assignees),\n              reviewers: usernames(input.parsed.payload.reviewers ?? input.mergeRequest?.reviewers),\n              labels: labelNames(input.mergeRequest?.labels ?? input.parsed.payload.labels),\n              labelColors: labelColors(input.mergeRequest?.labels ?? input.parsed.payload.labels),\n              ...(mergeRequestAuthor ? { author: mergeRequestAuthor } : {}),\n              authorTrusted: input.mergeRequestAuthorTrusted,\n              factoryAuthored: input.factoryAuthored,\n              headBranch: string(input.mergeRequest?.source_branch) ?? '',\n              baseBranch: string(input.mergeRequest?.target_branch) ?? '',\n            },\n          }\n        : {}),\n    };\n    const boardRules = boardEventHandlers(\n      this.options.boards,\n      input.mergeRequestOpenedScope === 'intake' ? undefined : eventBoardId(context),\n      'gitlab',\n    );\n    const rule =\n      input.mergeRequestOpenedScope === 'board'\n        ? hasExplicitRuleOverride(this.options.gitlab.rules, input.event)\n          ? undefined\n          : boardRules?.mergeRequestOpened\n        : selectEventRule(this.options.gitlab.rules, boardRules, input.event);\n    // Without a board handler the authoring card has nothing to answer; skip\n    // recording an empty evaluation for it.\n    if (input.mergeRequestOpenedScope === 'board' && !rule) return { status: 'ignored' };\n    let decision: FactoryRuleDecision | void;\n    let decisions: Record<string, unknown>[] = [];\n    let outcome: { status: 'accepted' | 'rejected'; code?: string; reason?: string } = { status: 'accepted' };\n    try {\n      decision = rule ? await withRuleTimeout(Promise.resolve(rule(Object.freeze(context)))) : undefined;\n      if (decision?.type === 'reject') {\n        outcome = { status: 'rejected', code: decision.code, reason: decision.reason };\n      } else if (decision) {\n        decisions = validateFactoryRuleDecisions([decision]).map(entry => {\n          assertFactoryDecisionTarget(\n            entry,\n            this.options.boards,\n            input.item ? boardForWorkItem(input.item) : undefined,\n          );\n          return { ...entry };\n        });\n      }\n    } catch (error) {\n      const timedOut = error instanceof Error && error.message === 'FACTORY_RULE_TIMEOUT';\n      outcome = {\n        status: 'rejected',\n        code: timedOut ? 'timeout' : 'rule_error',\n        reason: timedOut\n          ? 'Factory rule evaluation timed out.'\n          : error instanceof Error\n            ? error.message.slice(0, 2_000)\n            : 'Factory GitLab rule failed.',\n      };\n    }\n\n    const committed = await this.options.storage.commitRuleEvaluation({\n      orgId: input.orgId,\n      factoryProjectId: input.factoryProjectId,\n      workItemId: input.item?.id ?? null,\n      ingress: { identity: input.ingressIdentity, triggerType: `gitlab.${input.event}` },\n      configVersion: this.options.configVersion,\n      expectedRevision: input.item?.revision ?? null,\n      actor: { ...input.actor },\n      outcome,\n      decisions,\n      causalChain: [],\n      now: new Date(),\n    });\n    if (committed.status === 'stale') {\n      // Nothing was persisted: re-read the item and evaluate again at its fresh revision.\n      if (attempt >= MAX_STALE_RULE_ATTEMPTS) {\n        throw new Error(`Factory GitLab rule evaluation for ${input.ingressIdentity} kept losing revision races.`);\n      }\n      const fresh = input.item ? await this.options.storage.get({ orgId: input.orgId, id: input.item.id }) : null;\n      if (input.item && !fresh) return { status: 'missing' };\n      return this.#evaluate({ ...input, item: fresh ?? undefined }, attempt + 1);\n    }\n    return { status: committed.status };\n  }\n}\n\nexport function attachGitLabRules(\n  gitlab: GitLabRulesIntegration,\n  context: IntegrationContext,\n): ((event: ParsedGitLabWebhook) => Promise<unknown>) | undefined {\n  if (!context.runtime) return undefined;\n  const rules = new GitLabRules({\n    gitlab,\n    sourceControl: context.storage.sourceControl,\n    projects: context.storage.projects,\n    storage: context.runtime.workItems,\n    intake: context.storage.intake,\n    configVersion: context.runtime.configVersion,\n    boards: context.runtime.boards,\n  });\n  return event => rules.ingest(event);\n}\n"],"mappings":";;;;;;;;AA8BA,MAAM,kBAAkB;AAIxB,SAAS,OAAO,OAAqD;CACnE,OAAO,SAAS,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,KAAK,IAAK,QAAoC,KAAA;AAC5G;AAEA,SAAS,OAAO,OAAoC;CAClD,OAAO,OAAO,UAAU,YAAY,MAAM,SAAS,IAAI,QAAQ,KAAA;AACjE;AAEA,SAAS,OAAO,OAAoC;CAClD,OAAO,OAAO,UAAU,YAAY,OAAO,SAAS,KAAK,IAAI,QAAQ,KAAA;AACvE;;AAGA,SAAS,UAAU,OAAoC;CACrD,MAAM,OAAO,OAAO,KAAK;CACzB,IAAI,CAAC,MAAM,OAAO,KAAA;CAClB,MAAM,SAAS,KAAK,MAAM,KAAK,QAAQ,QAAQ,GAAG,CAAC,CAAC,QAAQ,KAAK,GAAG,CAAC;CACrE,OAAO,OAAO,MAAM,MAAM,IAAI,KAAA,IAAY;AAC5C;AAEA,SAAS,QAAQ,OAAqC;CACpD,OAAO,OAAO,UAAU,YAAY,QAAQ,KAAA;AAC9C;AAEA,SAAS,UAAU,OAA0B;CAC3C,IAAI,CAAC,MAAM,QAAQ,KAAK,GAAG,OAAO,CAAC;CACnC,OAAO,MAAM,SAAQ,UAAS;EAC5B,MAAM,WAAW,OAAO,OAAO,KAAK,CAAC,EAAE,QAAQ;EAC/C,OAAO,WAAW,CAAC,QAAQ,IAAI,CAAC;CAClC,CAAC;AACH;AAEA,SAAS,WAAW,OAA0B;CAC5C,IAAI,CAAC,MAAM,QAAQ,KAAK,GAAG,OAAO,CAAC;CACnC,OAAO,MAAM,SAAQ,UAAS;EAC5B,IAAI,OAAO,UAAU,UAAU,OAAO,QAAQ,CAAC,KAAK,IAAI,CAAC;EACzD,MAAM,QAAQ,OAAO,OAAO,KAAK,CAAC,EAAE,KAAK,KAAK,OAAO,OAAO,KAAK,CAAC,EAAE,IAAI;EACxE,OAAO,QAAQ,CAAC,KAAK,IAAI,CAAC;CAC5B,CAAC;AACH;AAEA,SAAS,YAAY,OAAwC;CAC3D,IAAI,CAAC,MAAM,QAAQ,KAAK,GAAG,OAAO,CAAC;CACnC,OAAO,OAAO,YACZ,MAAM,SAAQ,UAAS;EACrB,MAAM,QAAQ,OAAO,KAAK;EAC1B,MAAM,OAAO,OAAO,OAAO,KAAK,KAAK,OAAO,OAAO,IAAI;EACvD,MAAM,QAAQ,OAAO,OAAO,KAAK;EACjC,OAAO,QAAQ,QAAQ,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC;CAC5C,CAAC,CACH;AACF;AAEA,SAAS,UAAU,QAAiE;CAClF,MAAM,aAAa,OAAO,OAAO,QAAQ,iBAAiB;CAC1D,MAAM,SAAS,OAAO,YAAY,MAAM,CAAC,EAAE,YAAY;CACvD,IAAI,OAAO,UAAU,cAAc;EACjC,IAAI,WAAW,UAAU,WAAW,UAAU,OAAO;EACrD,IAAI,WAAW,SAAS,OAAO;EAC/B,OAAO;CACT;CACA,IAAI,OAAO,UAAU,aAAa;EAChC,MAAM,eAAe,OAAO,YAAY,aAAa;EACrD,IAAI,iBAAiB,SAAS,OAAO;EACrC,IAAI,iBAAiB,gBAAgB,OAAO;EAC5C;CACF;CACA,IAAI,OAAO,UAAU,sBAAsB;CAC3C,IAAI,WAAW,UAAU,WAAW,UAAU,OAAO;CACrD,IAAI,WAAW,SAAS,OAAO;CAC/B,IAAI,WAAW,SAAS,OAAO;CAC/B,OAAO;AACT;AAEA,SAAS,cAAc,MAAsB;CAC3C,OAAO,KAAK,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,QAAQ,OAAO,EAAE;AACpD;AAEA,SAAS,gBAAgB,QAAiD;CACxE,MAAM,eAAe,OAAO,eAAe,cAAc,OAAO,YAAY,IAAI,KAAA;CAChF,MAAM,aAAa,OAAO,OAAO,OAAO,QAAQ,OAAO,CAAC,EAAE,OAAO;CACjE,IAAI,CAAC,YAAY,OAAO;CACxB,IAAI;EACF,MAAM,cAAc,cAAc,IAAI,IAAI,UAAU,CAAC,CAAC,IAAI;EAC1D,IAAI,gBAAgB,iBAAiB,aAAa,OAAO,KAAA;EACzD,OAAO;CACT,QAAQ;EACN;CACF;AACF;AAEA,SAAS,sBAAsB,MAAc,WAAmB,iBAAiC;CAC/F,OAAO,aAAa,OAAO,KAAK,KAAK,UAAU;EAAE,SAAS;EAAG;EAAM;EAAW;CAAgB,CAAC,GAAG,MAAM,CAAC,CAAC,SAAS,WAAW;AAChI;AAEA,eAAe,gBAAmB,SAAiC;CACjE,IAAI;CACJ,IAAI;EACF,OAAO,MAAM,QAAQ,KAAK,CACxB,SACA,IAAI,SAAgB,GAAG,WAAW;GAChC,UAAU,iBAAiB,uBAAO,IAAI,MAAM,sBAAsB,CAAC,GAAG,eAAe;EACvF,CAAC,CACH,CAAC;CACH,UAAU;EACR,IAAI,SAAS,aAAa,OAAO;CACnC;AACF;AAEA,MAAM,0BAA0B;AA6BhC,IAAa,cAAb,MAAyB;CACM;CAA7B,YAAY,SAA8C;EAA7B,KAAA,UAAA;CAA8B;CAE3D,MAAM,OAAO,QAAiE;EAC5E,MAAM,QAAQ,UAAU,MAAM;EAC9B,MAAM,UAAU,OAAO,OAAO,QAAQ,OAAO;EAC7C,MAAM,YAAY,OAAO,SAAS,EAAE;EACpC,MAAM,cAAc,OAAO,SAAS,mBAAmB;EACvD,MAAM,OAAO,gBAAgB,MAAM;EACnC,MAAM,WAAW,OAAO,OAAO,QAAQ,aAAa,KAAK,OAAO,OAAO,OAAO,QAAQ,IAAI,CAAC,EAAE,QAAQ;EACrG,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,eAAe,CAAC,QAAQ,CAAC,UAAU,OAAO,EAAE,QAAQ,UAAU;EAE3F,MAAM,UAAU,MAAM,KAAKA,SAAS,OAAO,SAAS,GAAG,IAAI;EAC3D,IAAI,QAAQ,WAAW,GAAG,OAAO,EAAE,QAAQ,UAAU;EACrD,MAAM,UAA4C,CAAC;EACnD,KAAK,MAAM,UAAU,SACnB,QAAQ,KAAK,MAAM,KAAKC,eAAe,QAAQ,OAAO,WAAW,aAAa,MAAM,UAAU,MAAM,CAAC;EAEvG,IAAI,QAAQ,MAAK,WAAU,OAAO,WAAW,WAAW,GAAG,OAAO,EAAE,QAAQ,YAAY;EACxF,IAAI,QAAQ,MAAK,WAAU,OAAO,WAAW,UAAU,GAAG,OAAO,EAAE,QAAQ,WAAW;EACtF,OAAO,QAAQ,MAAM,EAAE,QAAQ,UAAU;CAC3C;CAEA,MAAMD,SAAS,sBAA8B,MAAwC;EACnF,MAAM,0BAAU,IAAI,IAA2B;EAC/C,MAAM,QAAQ,MAAM,KAAK,QAAQ,cAAc,oBAAoB,2BAA2B,EAAA,CAAG,QAC/F,QAAO,IAAI,yBAAyB,oBACtC;EACA,KAAK,MAAM,OAAO,MAAM;GACtB,MAAM,UAAU,MAAM,KAAK,QAAQ,cAAc,oBAAoB,yBAAyB;IAC5F,wBAAwB,IAAI;IAC5B;GACF,CAAC;GACD,KAAK,MAAM,UAAU,SAAS;IAK5B,MAAM,mBAAmB,QAAO,MAJL,KAAK,QAAQ,cAAc,cAAc,iBAAiB;KACnF,OAAO,OAAO;KACd,YAAY,IAAI;IAClB,CAAC,EAAA,EAC6C,iBAAiB,IAAI;IACnE,IAAI,CAAC,oBAAoB,cAAc,gBAAgB,MAAM,cAAc,IAAI,GAAG;IAClF,MAAM,KAAK,GAAG,OAAO,MAAM,GAAG,OAAO;IACrC,MAAM,UAAU,QAAQ,IAAI,EAAE;IAC9B,IAAI,SACE;SAAA,CAAC,QAAQ,cAAc,SAAS,IAAI,sBAAsB,GAC5D,QAAQ,cAAc,KAAK,IAAI,sBAAsB;IAAA,OAGvD,QAAQ,IAAI,IAAI;KAAE;KAAQ,eAAe,CAAC,IAAI,sBAAsB;IAAE,CAAC;GAE3E;EACF;EACA,OAAO,CAAC,GAAG,QAAQ,OAAO,CAAC;CAC7B;CAEA,MAAMC,eACJ,QACA,OACA,WACA,aACA,MACA,UACA,QACoC;EACpC,MAAM,iBAAiB,MAAM,KAAK,QAAQ,SAAS,IAAI;GACrD,OAAO,OAAO,OAAO;GACrB,IAAI,OAAO,OAAO;EACpB,CAAC;EACD,IAAI,CAAC,gBAAgB,OAAO,EAAE,QAAQ,UAAU;EAEhD,MAAM,WAAW,eAAe;GAAE;GAAM,WAAW,OAAO,SAAS;EAAE,CAAC;EACtE,MAAM,SAAS,MAAM,KAAK,QAAQ,OAAO,UAAU;GACjD,OAAO,OAAO,OAAO;GACrB,gBAAgB,CAAC,QAAQ;EAC3B,CAAC;EACD,IAAI,CAAC,OAAO,QAAQ,WAAW,CAAC,OAAO,OAAO,WAAW,SAAS,QAAQ,GAAG,OAAO,EAAE,QAAQ,UAAU;EACxG,MAAM,WACJ,MAAM,KAAK,QAAQ,OAAO,aAAa;GAAE,OAAO,OAAO,OAAO;GAAO,eAAe;EAAS,CAAC,EAAA,CAC9F,MACA,cAAa,UAAU,aAAa,YAAY,UAAU,qBAAqB,OAAO,OAAO,gBAC/F;EACA,IAAI,CAAC,SAAS,OAAO,EAAE,QAAQ,UAAU;EACzC,MAAM,QAAQ,KAAK,QAAQ,OAAO,IAAI,QAAQ,SAAS,MAAM;EAC7D,IAAI,CAAC,OAAO,OAAO,EAAE,QAAQ,UAAU;EAEvC,MAAM,gBAAgB,CACpB,GAAG,IAAI,IACL,MAAM,QAAQ,IACZ,OAAO,cAAc,KACnB,iBAAgB,KAAK,QAAQ,OAAO,iCAAiC,cAAc,IAAI,KAAK,YAC9F,CACF,CACF,CACF;EAEA,MAAM,aAAa,OAAO,OAAO,QAAQ,iBAAiB;EAC1D,MAAM,QAAQ,OAAO,UAAU,cAAc,OAAO,OAAO,QAAQ,KAAK,IAAI;EAC5E,MAAM,eAAe,OAAO,UAAU,cAAc,OAAO,OAAO,QAAQ,aAAa,IAAI;EAC3F,MAAM,WAAW,OAAO,OAAO,GAAG;EAClC,MAAM,kBAAkB,OAAO,cAAc,GAAG;EAChD,MAAM,iBAAiB,WACnB,qBAAqB;GAAE;GAAM,WAAW,OAAO,SAAS;GAAG;EAAS,CAAC,IACrE,KAAA;EACJ,MAAM,kBAAkB,kBAAkB,sBAAsB,MAAM,WAAW,eAAe,IAAI,KAAA;EACpG,MAAM,QAAQ,MAAM,KAAK,QAAQ,QAAQ,KAAK;GAC5C,OAAO,OAAO,OAAO;GACrB,kBAAkB,OAAO,OAAO;EAClC,CAAC;EACD,MAAM,YAAY,iBACd,MAAM,MACJ,SAAQ,KAAK,gBAAgB,kBAAkB,YAAY,KAAK,eAAe,eAAe,cAChG,IACA,KAAA;EACJ,MAAM,aAAa,kBACf,MAAM,MACJ,SAAQ,KAAK,gBAAgB,kBAAkB,YAAY,KAAK,eAAe,eAAe,eAChG,IACA,KAAA;EACJ,MAAM,aAAa,OAAO,cAAc,aAAa,KAAK;EAC1D,MAAM,gBAAgB,aAClB,MAAM,MACJ,SACE,KAAK,gBAAgB,SAAS,kBAC9B,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,MAAK,YAAW,QAAQ,WAAW,UAAU,CAC9E,IACA,KAAA;EACJ,MAAM,eAAe,MAAM,KAAKC,SAAS,eAAe,OAAO,SAAS,GAAG,QAAQ;EACnF,MAAM,cAAc,OAAO,OAAO,OAAO,QAAQ,IAAI,CAAC,EAAE,EAAE,KAAK,OAAO,OAAO,QAAQ,OAAO;EAC5F,MAAM,gBAAgB,OACpB,MACA,MACA,QACgC;GAChC,IAAI,CAAC,QAAQ,CAAC,KAAK,OAAO,KAAA;GAC1B,MAAM,WAAW,OAAO,OAAO,KAAK,MAAM,CAAC,EAAE,QAAQ;GACrD,IAAI,UAAU,OAAO;GACrB,IAAI,eAAe,gBAAgB,OAAO,KAAK,SAAS,GAAG,OAAO;GAClE,KAAK,MAAM,gBAAgB,eACzB,IAAI;IACF,MAAM,WAAW,MAAM,KAAK,QAAQ,OAAO,0BACzC,cACA,OAAO,SAAS,GAChB,MACA,GACF;IACA,IAAI,UAAU,OAAO;GACvB,QAAQ,CAER;EAGJ;EACA,MAAM,CAAC,aAAa,sBAAsB,MAAM,QAAQ,IAAI,CAC1D,cAAc,OAAO,SAAS,QAAQ,GACtC,cAAc,cAAc,iBAAiB,eAAe,CAC9D,CAAC;EACD,MAAM,gBAAgB,OAAO,WAAiD;GAC5E,IAAI,CAAC,QAAQ,OAAO;GACpB,OAAO,WAAW,WAAW,eAAe,KAAKA,SAAS,eAAe,OAAO,SAAS,GAAG,MAAM;EACpG;EACA,MAAM,CAAC,oBAAoB,6BAA6B,MAAM,QAAQ,IAAI,CACxE,cAAc,WAAW,GACzB,cAAc,kBAAkB,CAClC,CAAC;EACD,MAAM,QAA0B;GAC9B,MAAM;GACN;GACA,SAAS;GACT,iBAAiB;EACnB;EAEA,MAAM,aACJ,UAAU,uBACN,CAAC,GAAG,IAAI,IAAI,CAAC,YAAY,aAAa,CAAC,CAAC,OAAO,OAAO,CAAC,CAAC,KAAI,SAAQ,CAAC,KAAM,IAAI,IAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAChG,UAAU,0BACR,CAAC,iBAAiB,UAAU,IAC5B,UAAU,uBACR,CAAC,eAAe,GAAI,gBAAgB,CAAC,aAAa,IAAI,CAAC,CAAE,IACzD,MAAM,WAAW,cAAc,IAC7B,CAAC,cAAc,aAAa,IAC5B,CAAC,SAAS;EACtB,MAAM,UAAU,CAAC;EACjB,KAAK,MAAM,CAAC,OAAO,SAAS,WAAW,QAAQ,GAC7C,QAAQ,KACN,MAAM,KAAKC,UAAU;GACnB;GACA;GACA;GACA;GACA;GACA;GACA,OAAO,OAAO,OAAO;GACrB,kBAAkB,OAAO,OAAO;GAChC;GACA,OAAO;IAAE,OAAO,MAAM;IAAI,cAAc,MAAM;GAAa;GAC3D;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA,iBAAiB,QAAQ,aAAa;GACtC;GACA,iBAAiB,UAAU,UAAU,GAAG,OAAO,aAAa,QAAQ,IAAI,MAAM,MAAM,UAAU;GAM9F,GAAI,UAAU,uBAAuB,EAAE,yBAAyB,QAAS,UAAqB,SAAmB,IAAI,CAAC;EACxH,CAAC,CACH;EAMF,MAAM,eAAe,aACjB,MAAM,QACJ,SACE,KAAK,gBAAgB,SAAS,kBAC9B,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,MAAK,YAAW,QAAQ,WAAW,UAAU,CAC9E,IACA,CAAC;EACL,IAAI,iBAAiB,mBAAmB,aAAa,WAAW,GAC9D,MAAM,KAAKC,uBAAuB;GAChC,OAAO,cAAc;GACrB,IAAI,cAAc;GAClB;GACA;GACA,SAAS,UAAU,cAAc,UAAU;GAC3C,QAAQ,OAAO,cAAc,KAAK,MAAM,aAAa,gBAAgB;GACrE,SAAS,OAAO,OAAO,cAAc,WAAW,CAAC,EAAE,EAAE,CAAC,EAAE,YAAY;EACtE,CAAC;EAKH,MAAM,UAAU,OAAO,OAAO,cAAc,WAAW,CAAC,EAAE,EAAE,CAAC,EAAE,YAAY;EAC3E,MAAM,SAAS,UAAU,cAAc,UAAU;EACjD,IAAI,UAAU,yBAAyB,WAAW,YAAY;GAC5D,MAAM,SAAS,MAAM,MAAK,SAAQ,KAAK,OAAO,WAAW,gBAAgB;GAGzE,MAAM,sBAAsB,KAAK,QAAQ,SAAS;IAChD,OAAO,WAAW;IAClB,IAAI,WAAW;IACf;IACA;GACF,CAAC;GACD,IAAI,QACF,MAAM,sBAAsB,KAAK,QAAQ,SAAS;IAChD,OAAO,OAAO;IACd,IAAI,OAAO;IACX;IACA;IACA,wBAAwB;GAC1B,CAAC;EAEL;EACA,IAAI,QAAQ,MAAK,WAAU,OAAO,WAAW,WAAW,GAAG,OAAO,EAAE,QAAQ,YAAY;EACxF,IAAI,QAAQ,MAAK,WAAU,OAAO,WAAW,UAAU,GAAG,OAAO,EAAE,QAAQ,WAAW;EACtF,OAAO,QAAQ,MAAM,EAAE,QAAQ,UAAU;CAC3C;;;;;;;CAQA,MAAMA,uBAAuB,OAQX;EAChB,MAAM,WAAW,MAAM,UAAU,wBAAwB,MAAM,UAAU;EACzE,IAAI,MAAM,UAAU,wBAAwB,CAAC,UAAU;EACvD,MAAM,MAAM,OAAO,MAAM,eAAe;EACxC,KAAK,IAAI,UAAU,GAAG,UAAU,GAAG,WAAW;GAC5C,MAAM,OAAO,MAAM,KAAK,QAAQ,QAAQ,IAAI;IAAE,OAAO,MAAM;IAAO,IAAI,MAAM;GAAG,CAAC;GAChF,IAAI,CAAC,MAAM;GACX,MAAM,SAAS,OAAO,KAAK,UAAU,kBAAkB,KAAK,CAAC;GAC7D,MAAM,OAAO,OAAO,OAAO,IAAI;GAC/B,MAAM,SAAS,OAAO,MAAM,EAAE;GAC9B,IAAI,MAAM,YAAY,KAAA,KAAa,WAAW,KAAA,KAAa,UAAU,MAAM,SAAS;GAEpF,IAAI,MAAM,YAAY,KAAA,KAAa,CAAC,YAAY,MAAM,SAAS,OAAO;GACtE,IAAI,CAAC,YAAY,CAAC,MAAM,QAAQ;GAChC,MAAM,WAAW,KAAK,UAAU;GAChC,MAAM,QAAiC,EACrC,oBAAoB;IAAE,GAAG;KAAS,MAAM;KAAE,IAAI,MAAM,WAAW,UAAU;KAAM,MAAM,CAAC;IAAS;GAAE,EACnG;GACA,IAAI,CAAC,UAAU;IAIb,IAAI,aAAa,MAAM,iBAAiB;KACtC,MAAM,qBAAqB,MAAM,WAAW;KAC5C,MAAM,oBAAoB,MAAM,WAAW;IAC7C;IACA,MAAM,wBAAwB,MAAM;GACtC,OAAO,IAAI,aAAa,MAAM,iBAAiB;IAC7C,MAAM,wBAAwB;IAC9B,IAAI,MAAM,UAAU,wBAAwB,OAAO,KAAK,UAAU,kBAAkB,UAClF,MAAM,gBAAgB;GAE1B;GACA,IAAI;IACF,MAAM,KAAK,QAAQ,QAAQ,OAAO;KAChC,OAAO,KAAK;KACZ,IAAI,KAAK;KACT,QAAQ;KACR,kBAAkB,KAAK;KACvB,OAAO,EAAE,UAAU,MAAM;IAC3B,CAAC;IACD;GACF,SAAS,OAAO;IACd,IAAI,EAAE,iBAAiB,8BAA8B,MAAM;GAC7D;EACF;CACF;CAEA,MAAMF,SAAS,eAAyB,WAAmB,UAAoC;EAC7F,KAAK,MAAM,gBAAgB,eACzB,IAAI;GACF,MAAM,QAAQ,MAAM,KAAK,QAAQ,OAAO,4BAA4B,cAAc,WAAW,QAAQ;GACrG,IAAI,UAAU,KAAA,GAAW,OAAO,SAAA;EAClC,QAAQ,CAER;EAEF,OAAO;CACT;CAEA,MAAMC,UACJ,OA0BA,UAAU,GAC0B;EACpC,MAAM,OAAO,OAAO,MAAM,OAAO,QAAQ,iBAAiB;EAC1D,MAAM,cAAc,MAAM;EAC1B,MAAM,qBAAqB,MAAM;EACjC,MAAM,oBAAoB,OAAO,MAAM,cAAc,KAAK;EAC1D,MAAM,UAAoC;GACxC,QAAQ;IAAE,OAAO,MAAM;IAAO,WAAW,MAAM;GAAiB;GAChE,OAAO,MAAM;GACb,SAAS;IAAE,MAAM;IAAU,IAAI,MAAM;GAAgB;GACrD,OAAO,UAAU,MAAM;GACvB,aAAa,CAAC;GACd,eAAe,KAAK,QAAQ;GAC5B,GAAI,MAAM,OACN;IACE,MAAM;KACJ,IAAI,MAAM,KAAK;KACf,QACE,MAAM,KAAK,gBAAgB,SAAS,iBAC/B,cACD,MAAM,KAAK,gBAAgB,kBAAkB,WAC1C,iBACA;KACT,WAAW,MAAM,KAAK,gBAAgB,cAAc;KACpD,kBAAkB,MAAM,KAAK;KAC7B,OAAO,MAAM,KAAK;KAClB,KAAK,MAAM,KAAK,gBAAgB,OAAO;KACvC,QAAQ,MAAM,KAAK;KACnB,YAAY,MAAM,KAAK;KACvB,UAAU,MAAM,KAAK;IACvB;IACA,OAAO,iBAAiB,MAAM,IAAI;IAClC,cAAc,MAAM,KAAK;IACzB,GAAG,iBAAiB,KAAK,QAAQ,QAAQ,MAAM,IAAI;IACnD,GAAG,eAAe,KAAK,QAAQ,QAAQ,MAAM,IAAI;GACnD,IACA,CAAC;GACL,QAAQ,MAAM;GACd,OAAO,MAAM;GACb,YAAY,MAAM,OAAO;GACzB,SAAS,EAAE,WAAW,MAAM,eAAe,UAAU,YAAY,EAAE;GACnE,YAAY;IAAE,IAAI,MAAM;IAAW,UAAU,MAAM;IAAa,MAAM,MAAM;GAAK;GACjF,GAAI,MAAM,YAAY,MAAM,kBAAkB,OAAO,MAAM,OAAO,KAAK,IACnE,EACE,OAAO;IACL,QAAQ,MAAM;IACd,WAAW,MAAM;IACjB,OAAO,OAAO,MAAM,OAAO,KAAK;IAChC,KACE,OAAO,MAAM,OAAO,GAAG,KACvB,OAAO,MAAM,OAAO,OAAO,KAC3B,WAAW,MAAM,KAAK,GAAG,MAAM,YAAY,YAAY,MAAM;IAC/D,GAAI,OAAO,MAAM,OAAO,UAAU,IAAI,EAAE,WAAW,OAAO,MAAM,OAAO,UAAU,EAAE,IAAI,CAAC;IACxF,GAAI,OAAO,MAAM,OAAO,UAAU,IAAI,EAAE,WAAW,OAAO,MAAM,OAAO,UAAU,EAAE,IAAI,CAAC;IACxF,WAAW,UAAU,MAAM,OAAO,QAAQ,aAAa,MAAM,OAAO,SAAS;IAC7E,QAAQ,WAAW,MAAM,OAAO,UAAU,MAAM,OAAO,QAAQ,MAAM;IACrE,aAAa,YAAY,MAAM,OAAO,UAAU,MAAM,OAAO,QAAQ,MAAM;IAC3E,OAAO,OAAO,MAAM,OAAO,KAAK,MAAM,WAAY,WAAsB;IACxE,GAAI,cAAc,EAAE,QAAQ,YAAY,IAAI,CAAC;IAC7C,eAAe,MAAM;GACvB,EACF,IACA,CAAC;GACL,GAAI,MAAM,OAAO,UAAU,eAAe,OAAO,MAAM,EAAE,IACrD,EACE,MAAM;IACJ,IAAI,OAAO,MAAM,EAAE;IACnB,GAAI,OAAO,MAAM,IAAI,IAAI,EAAE,MAAM,OAAO,MAAM,IAAI,EAAE,IAAI,CAAC;IACzD,GAAI,OAAO,MAAM,GAAG,IAAI,EAAE,KAAK,OAAO,MAAM,GAAG,EAAE,IAAI,CAAC;IACtD,GAAI,OAAO,OAAO,MAAM,OAAO,QAAQ,IAAI,CAAC,EAAE,QAAQ,IAClD,EAAE,QAAQ,OAAO,OAAO,MAAM,OAAO,QAAQ,IAAI,CAAC,EAAE,QAAQ,EAAE,IAC9D,CAAC;IACL,GAAI,OAAO,MAAM,UAAU,IAAI,EAAE,WAAW,OAAO,MAAM,UAAU,EAAE,IAAI,CAAC;IAC1E,GAAI,OAAO,MAAM,UAAU,IAAI,EAAE,WAAW,OAAO,MAAM,UAAU,EAAE,IAAI,CAAC;GAC5E,EACF,IACA,CAAC;GACL,GAAI,MAAM,mBAAmB,MAAM,mBAAmB,OAAO,MAAM,cAAc,KAAK,IAClF,EACE,cAAc;IACZ,QAAQ,MAAM;IACd,WAAW,MAAM;IACjB,OAAO,OAAO,MAAM,cAAc,KAAK;IACvC,KACE,OAAO,MAAM,cAAc,GAAG,KAC9B,OAAO,MAAM,cAAc,OAAO,KAClC,WAAW,MAAM,KAAK,GAAG,MAAM,YAAY,oBAAoB,MAAM;IACvE,GAAI,OAAO,MAAM,cAAc,UAAU,IAAI,EAAE,WAAW,OAAO,MAAM,cAAc,UAAU,EAAE,IAAI,CAAC;IACtG,OACE,sBAAsB,YAAY,sBAAsB,WACnD,WACA;IACP,OAAO,QAAQ,MAAM,cAAc,KAAK,KAAK,QAAQ,MAAM,cAAc,gBAAgB,KAAK;IAC9F,QAAQ,MAAM,UAAU,wBAAwB,sBAAsB;IACtE,WAAW,UAAU,MAAM,OAAO,QAAQ,aAAa,MAAM,cAAc,SAAS;IACpF,WAAW,UAAU,MAAM,OAAO,QAAQ,aAAa,MAAM,cAAc,SAAS;IACpF,QAAQ,WAAW,MAAM,cAAc,UAAU,MAAM,OAAO,QAAQ,MAAM;IAC5E,aAAa,YAAY,MAAM,cAAc,UAAU,MAAM,OAAO,QAAQ,MAAM;IAClF,GAAI,qBAAqB,EAAE,QAAQ,mBAAmB,IAAI,CAAC;IAC3D,eAAe,MAAM;IACrB,iBAAiB,MAAM;IACvB,YAAY,OAAO,MAAM,cAAc,aAAa,KAAK;IACzD,YAAY,OAAO,MAAM,cAAc,aAAa,KAAK;GAC3D,EACF,IACA,CAAC;EACP;EACA,MAAM,aAAa,mBACjB,KAAK,QAAQ,QACb,MAAM,4BAA4B,WAAW,KAAA,IAAY,aAAa,OAAO,GAC7E,QACF;EACA,MAAM,OACJ,MAAM,4BAA4B,UAC9B,wBAAwB,KAAK,QAAQ,OAAO,OAAO,MAAM,KAAK,IAC5D,KAAA,IACA,YAAY,qBACd,gBAAgB,KAAK,QAAQ,OAAO,OAAO,YAAY,MAAM,KAAK;EAGxE,IAAI,MAAM,4BAA4B,WAAW,CAAC,MAAM,OAAO,EAAE,QAAQ,UAAU;EACnF,IAAI;EACJ,IAAI,YAAuC,CAAC;EAC5C,IAAI,UAA+E,EAAE,QAAQ,WAAW;EACxG,IAAI;GACF,WAAW,OAAO,MAAM,gBAAgB,QAAQ,QAAQ,KAAK,OAAO,OAAO,OAAO,CAAC,CAAC,CAAC,IAAI,KAAA;GACzF,IAAI,UAAU,SAAS,UACrB,UAAU;IAAE,QAAQ;IAAY,MAAM,SAAS;IAAM,QAAQ,SAAS;GAAO;QACxE,IAAI,UACT,YAAY,6BAA6B,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAI,UAAS;IAChE,4BACE,OACA,KAAK,QAAQ,QACb,MAAM,OAAO,iBAAiB,MAAM,IAAI,IAAI,KAAA,CAC9C;IACA,OAAO,EAAE,GAAG,MAAM;GACpB,CAAC;EAEL,SAAS,OAAO;GACd,MAAM,WAAW,iBAAiB,SAAS,MAAM,YAAY;GAC7D,UAAU;IACR,QAAQ;IACR,MAAM,WAAW,YAAY;IAC7B,QAAQ,WACJ,uCACA,iBAAiB,QACf,MAAM,QAAQ,MAAM,GAAG,GAAK,IAC5B;GACR;EACF;EAEA,MAAM,YAAY,MAAM,KAAK,QAAQ,QAAQ,qBAAqB;GAChE,OAAO,MAAM;GACb,kBAAkB,MAAM;GACxB,YAAY,MAAM,MAAM,MAAM;GAC9B,SAAS;IAAE,UAAU,MAAM;IAAiB,aAAa,UAAU,MAAM;GAAQ;GACjF,eAAe,KAAK,QAAQ;GAC5B,kBAAkB,MAAM,MAAM,YAAY;GAC1C,OAAO,EAAE,GAAG,MAAM,MAAM;GACxB;GACA;GACA,aAAa,CAAC;GACd,qBAAK,IAAI,KAAK;EAChB,CAAC;EACD,IAAI,UAAU,WAAW,SAAS;GAEhC,IAAI,WAAW,yBACb,MAAM,IAAI,MAAM,sCAAsC,MAAM,gBAAgB,6BAA6B;GAE3G,MAAM,QAAQ,MAAM,OAAO,MAAM,KAAK,QAAQ,QAAQ,IAAI;IAAE,OAAO,MAAM;IAAO,IAAI,MAAM,KAAK;GAAG,CAAC,IAAI;GACvG,IAAI,MAAM,QAAQ,CAAC,OAAO,OAAO,EAAE,QAAQ,UAAU;GACrD,OAAO,KAAKA,UAAU;IAAE,GAAG;IAAO,MAAM,SAAS,KAAA;GAAU,GAAG,UAAU,CAAC;EAC3E;EACA,OAAO,EAAE,QAAQ,UAAU,OAAO;CACpC;AACF;AAEA,SAAgB,kBACd,QACA,SACgE;CAChE,IAAI,CAAC,QAAQ,SAAS,OAAO,KAAA;CAC7B,MAAM,QAAQ,IAAI,YAAY;EAC5B;EACA,eAAe,QAAQ,QAAQ;EAC/B,UAAU,QAAQ,QAAQ;EAC1B,SAAS,QAAQ,QAAQ;EACzB,QAAQ,QAAQ,QAAQ;EACxB,eAAe,QAAQ,QAAQ;EAC/B,QAAQ,QAAQ,QAAQ;CAC1B,CAAC;CACD,QAAO,UAAS,MAAM,OAAO,KAAK;AACpC"}