@mastra/factory 0.0.0-fix-thread-subscription-multi-instance-redis-streams-20260730204150

package/dist/routes/projects.js

@@ -0,0 +1,461 @@
+import { Route } from "./route.js";
+import { registerApiRoute } from "@mastra/core/server";
+//#region src/routes/projects.ts
+const UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+const MAX_NAME_LENGTH = 200;
+const MAX_DESCRIPTION_LENGTH = 2e3;
+const MAX_SETUP_COMMAND_LENGTH = 2e3;
+const MAX_BRANCH_LENGTH = 255;
+const MAX_SANDBOX_PROVIDER_LENGTH = 100;
+const MAX_SANDBOX_WORKDIR_LENGTH = 1e3;
+const CONTROL_CHAR_RE = /[\0-\x08\x0b\x0c\x0e-\x1f\x7f]/;
+function loose(context) {
+	return context;
+}
+async function readJson(context) {
+	try {
+		return await context.req.json();
+	} catch {
+		return;
+	}
+}
+function parseCreateInput(value) {
+	if (!value || typeof value !== "object") return null;
+	const input = value;
+	if (typeof input.name !== "string") return null;
+	const name = input.name.trim();
+	if (!name || name.length > MAX_NAME_LENGTH) return null;
+	if (input.description !== void 0 && input.description !== null && typeof input.description !== "string") return null;
+	const description = typeof input.description === "string" ? input.description.trim() || null : null;
+	if (description && description.length > MAX_DESCRIPTION_LENGTH) return null;
+	return {
+		name,
+		description
+	};
+}
+function parseUpdateInput(value) {
+	if (!value || typeof value !== "object") return null;
+	const input = value;
+	const patch = {};
+	if (input.name !== void 0) {
+		if (typeof input.name !== "string") return null;
+		const name = input.name.trim();
+		if (!name || name.length > MAX_NAME_LENGTH) return null;
+		patch.name = name;
+	}
+	if (input.description !== void 0) {
+		if (input.description !== null && typeof input.description !== "string") return null;
+		const description = typeof input.description === "string" ? input.description.trim() || null : null;
+		if (description && description.length > MAX_DESCRIPTION_LENGTH) return null;
+		patch.description = description;
+	}
+	if (input.defaultModelId !== void 0) {
+		const defaultModelId = parseOptionalString(input.defaultModelId, {
+			maxLength: MAX_NAME_LENGTH,
+			nullable: true
+		});
+		if (defaultModelId === false) return null;
+		patch.defaultModelId = defaultModelId ?? null;
+	}
+	if (input.slackWorkItemsEnabled !== void 0) {
+		if (typeof input.slackWorkItemsEnabled !== "boolean") return null;
+		patch.slackWorkItemsEnabled = input.slackWorkItemsEnabled;
+	}
+	return Object.keys(patch).length > 0 ? patch : null;
+}
+function parseConnectionInput(value) {
+	if (!value || typeof value !== "object") return null;
+	const input = value;
+	if (typeof input.integrationId !== "string" || !input.integrationId.trim()) return null;
+	if (typeof input.installationId !== "string" || !UUID_RE.test(input.installationId)) return null;
+	return {
+		integrationId: input.integrationId.trim(),
+		installationId: input.installationId
+	};
+}
+function parseOptionalString(value, { maxLength, nullable = false }) {
+	if (value === void 0) return void 0;
+	if (value === null) return nullable ? null : false;
+	if (typeof value !== "string") return false;
+	const normalized = value.trim();
+	if (!normalized) return nullable ? null : false;
+	if (normalized.length > maxLength || CONTROL_CHAR_RE.test(normalized)) return false;
+	return normalized;
+}
+function parseRepositoryLinkInput(value) {
+	if (!value || typeof value !== "object") return null;
+	const input = value;
+	if (typeof input.repositoryId !== "string" || !UUID_RE.test(input.repositoryId)) return null;
+	const branch = parseOptionalString(input.branch, {
+		maxLength: MAX_BRANCH_LENGTH,
+		nullable: true
+	});
+	const sandboxProvider = parseOptionalString(input.sandboxProvider, { maxLength: MAX_SANDBOX_PROVIDER_LENGTH });
+	const sandboxWorkdir = parseOptionalString(input.sandboxWorkdir, { maxLength: MAX_SANDBOX_WORKDIR_LENGTH });
+	const setupCommand = parseOptionalString(input.setupCommand, {
+		maxLength: MAX_SETUP_COMMAND_LENGTH,
+		nullable: true
+	});
+	if (branch === false || typeof sandboxProvider !== "string" || typeof sandboxWorkdir !== "string" || setupCommand === false) return null;
+	return {
+		repositoryId: input.repositoryId,
+		branch: branch ?? null,
+		sandboxProvider,
+		sandboxWorkdir,
+		setupCommand: setupCommand ?? null
+	};
+}
+function parseRepositoryUpdateInput(value) {
+	if (!value || typeof value !== "object") return null;
+	const input = value;
+	const patch = {};
+	const branch = parseOptionalString(input.branch, {
+		maxLength: MAX_BRANCH_LENGTH,
+		nullable: true
+	});
+	const sandboxProvider = parseOptionalString(input.sandboxProvider, { maxLength: MAX_SANDBOX_PROVIDER_LENGTH });
+	const sandboxWorkdir = parseOptionalString(input.sandboxWorkdir, { maxLength: MAX_SANDBOX_WORKDIR_LENGTH });
+	const setupCommand = parseOptionalString(input.setupCommand, {
+		maxLength: MAX_SETUP_COMMAND_LENGTH,
+		nullable: true
+	});
+	if (branch === false || sandboxProvider === false || sandboxProvider === null || sandboxWorkdir === false || sandboxWorkdir === null || setupCommand === false) return null;
+	if (branch !== void 0) patch.branch = branch;
+	if (sandboxProvider !== void 0) patch.sandboxProvider = sandboxProvider;
+	if (sandboxWorkdir !== void 0) patch.sandboxWorkdir = sandboxWorkdir;
+	if (setupCommand !== void 0) patch.setupCommand = setupCommand;
+	return Object.keys(patch).length > 0 ? patch : null;
+}
+var ProjectRoutes = class extends Route {
+	#versionControlIntegrationIds;
+	constructor(deps) {
+		super(deps);
+		this.#versionControlIntegrationIds = new Set(deps.versionControlIntegrationIds ?? []);
+	}
+	async #projects() {
+		await this.deps.projects.ensureReady();
+		return this.deps.projects;
+	}
+	async #sourceControl() {
+		await this.deps.sourceControl.ensureReady();
+		return this.deps.sourceControl;
+	}
+	async #handles() {
+		const storage = await this.#sourceControl();
+		return [...this.#versionControlIntegrationIds].map((integrationId) => storage.forIntegration(integrationId));
+	}
+	async #project(orgId, id) {
+		return (await this.#projects()).get({
+			orgId,
+			id
+		});
+	}
+	async #findConnection({ orgId, projectId, id }) {
+		for (const handle of await this.#handles()) {
+			const connection = await handle.connections.get({
+				orgId,
+				id
+			});
+			if (connection?.factoryProjectId === projectId) return {
+				handle,
+				connection
+			};
+		}
+		return null;
+	}
+	async #findProjectRepository({ orgId, projectId, id }) {
+		for (const handle of await this.#handles()) {
+			const projectRepository = await handle.projectRepositories.get({
+				orgId,
+				id
+			});
+			if (!projectRepository) continue;
+			const connection = await handle.connections.get({
+				orgId,
+				id: projectRepository.connectionId
+			});
+			if (connection?.factoryProjectId === projectId) return {
+				handle,
+				connection,
+				projectRepository
+			};
+		}
+		return null;
+	}
+	async #repositoryPayload(handle, orgId, projectRepository) {
+		const repository = await handle.repositories.get({
+			orgId,
+			id: projectRepository.repositoryId
+		});
+		return {
+			...projectRepository,
+			repository
+		};
+	}
+	async #resolveTenant(context) {
+		await this.deps.auth.ensureUser(context);
+		const tenant = this.deps.auth.tenant(context);
+		if (!tenant) return { response: context.json({ error: "unauthorized" }, 401) };
+		if (!tenant.orgId) return { response: context.json({
+			error: "organization_required",
+			message: "Factory projects require an organization."
+		}, 403) };
+		return {
+			orgId: tenant.orgId,
+			userId: tenant.userId
+		};
+	}
+	routes() {
+		return [
+			registerApiRoute("/web/factory/projects", {
+				method: "GET",
+				requiresAuth: false,
+				handler: async (routeContext) => {
+					const context = loose(routeContext);
+					const tenant = await this.#resolveTenant(context);
+					if ("response" in tenant) return tenant.response;
+					return context.json({ projects: await (await this.#projects()).list({ orgId: tenant.orgId }) });
+				}
+			}),
+			registerApiRoute("/web/factory/projects", {
+				method: "POST",
+				requiresAuth: false,
+				handler: async (routeContext) => {
+					const context = loose(routeContext);
+					const tenant = await this.#resolveTenant(context);
+					if ("response" in tenant) return tenant.response;
+					const input = parseCreateInput(await readJson(context));
+					if (!input) return context.json({ error: "invalid_project" }, 400);
+					const project = await (await this.#projects()).create({
+						orgId: tenant.orgId,
+						userId: tenant.userId,
+						input
+					});
+					return context.json({ project }, 201);
+				}
+			}),
+			registerApiRoute("/web/factory/projects/:id", {
+				method: "GET",
+				requiresAuth: false,
+				handler: async (routeContext) => {
+					const context = loose(routeContext);
+					const tenant = await this.#resolveTenant(context);
+					if ("response" in tenant) return tenant.response;
+					const id = context.req.param("id");
+					if (!id || !UUID_RE.test(id)) return context.json({ error: "Project not found" }, 404);
+					const project = await this.#project(tenant.orgId, id);
+					return project ? context.json({ project }) : context.json({ error: "Project not found" }, 404);
+				}
+			}),
+			registerApiRoute("/web/factory/projects/:id", {
+				method: "PATCH",
+				requiresAuth: false,
+				handler: async (routeContext) => {
+					const context = loose(routeContext);
+					const tenant = await this.#resolveTenant(context);
+					if ("response" in tenant) return tenant.response;
+					const id = context.req.param("id");
+					if (!id || !UUID_RE.test(id)) return context.json({ error: "Project not found" }, 404);
+					const input = parseUpdateInput(await readJson(context));
+					if (!input) return context.json({ error: "invalid_project" }, 400);
+					const project = await (await this.#projects()).update({
+						orgId: tenant.orgId,
+						id,
+						input
+					});
+					return project ? context.json({ project }) : context.json({ error: "Project not found" }, 404);
+				}
+			}),
+			registerApiRoute("/web/factory/projects/:id", {
+				method: "DELETE",
+				requiresAuth: false,
+				handler: async (routeContext) => {
+					const context = loose(routeContext);
+					const tenant = await this.#resolveTenant(context);
+					if ("response" in tenant) return tenant.response;
+					const id = context.req.param("id");
+					if (!id || !UUID_RE.test(id)) return context.json({ error: "Project not found" }, 404);
+					if (!await this.#project(tenant.orgId, id)) return context.json({ error: "Project not found" }, 404);
+					for (const handle of await this.#handles()) for (const connection of await handle.connections.list({
+						orgId: tenant.orgId,
+						factoryProjectId: id
+					})) await handle.connections.delete({
+						orgId: tenant.orgId,
+						id: connection.id
+					});
+					await (await this.#projects()).delete({
+						orgId: tenant.orgId,
+						id
+					});
+					return context.body(null, 204);
+				}
+			}),
+			registerApiRoute("/web/factory/projects/:id/source-control-connections", {
+				method: "GET",
+				requiresAuth: false,
+				handler: async (routeContext) => {
+					const context = loose(routeContext);
+					const tenant = await this.#resolveTenant(context);
+					if ("response" in tenant) return tenant.response;
+					const projectId = context.req.param("id");
+					if (!projectId || !UUID_RE.test(projectId) || !await this.#project(tenant.orgId, projectId)) return context.json({ error: "Project not found" }, 404);
+					const connections = [];
+					for (const handle of await this.#handles()) for (const connection of await handle.connections.list({
+						orgId: tenant.orgId,
+						factoryProjectId: projectId
+					})) {
+						const installation = await handle.installations.get({
+							orgId: tenant.orgId,
+							id: connection.installationId
+						});
+						if (!installation) continue;
+						const links = await handle.projectRepositories.list({
+							orgId: tenant.orgId,
+							connectionId: connection.id
+						});
+						connections.push({
+							...connection,
+							installation,
+							repositories: await Promise.all(links.map((link) => this.#repositoryPayload(handle, tenant.orgId, link)))
+						});
+					}
+					return context.json({ connections });
+				}
+			}),
+			registerApiRoute("/web/factory/projects/:id/source-control-connections", {
+				method: "POST",
+				requiresAuth: false,
+				handler: async (routeContext) => {
+					const context = loose(routeContext);
+					const tenant = await this.#resolveTenant(context);
+					if ("response" in tenant) return tenant.response;
+					const projectId = context.req.param("id");
+					if (!projectId || !UUID_RE.test(projectId) || !await this.#project(tenant.orgId, projectId)) return context.json({ error: "Project not found" }, 404);
+					const input = parseConnectionInput(await readJson(context));
+					if (!input) return context.json({ error: "invalid_source_control_connection" }, 400);
+					if (!this.#versionControlIntegrationIds.has(input.integrationId)) return context.json({ error: "Source-control integration not found" }, 404);
+					const handle = (await this.#sourceControl()).forIntegration(input.integrationId);
+					if (!await handle.installations.get({
+						orgId: tenant.orgId,
+						id: input.installationId
+					})) return context.json({ error: "Source-control installation not found" }, 404);
+					const connection = await handle.connections.create({
+						orgId: tenant.orgId,
+						factoryProjectId: projectId,
+						installationId: input.installationId,
+						createdByUserId: tenant.userId
+					});
+					return context.json({ connection }, 201);
+				}
+			}),
+			registerApiRoute("/web/factory/projects/:id/source-control-connections/:connectionId", {
+				method: "DELETE",
+				requiresAuth: false,
+				handler: async (routeContext) => {
+					const context = loose(routeContext);
+					const tenant = await this.#resolveTenant(context);
+					if ("response" in tenant) return tenant.response;
+					const projectId = context.req.param("id");
+					const connectionId = context.req.param("connectionId");
+					if (!projectId || !UUID_RE.test(projectId) || !connectionId || !UUID_RE.test(connectionId)) return context.json({ error: "Source-control connection not found" }, 404);
+					const found = await this.#findConnection({
+						orgId: tenant.orgId,
+						projectId,
+						id: connectionId
+					});
+					if (!found) return context.json({ error: "Source-control connection not found" }, 404);
+					await found.handle.connections.delete({
+						orgId: tenant.orgId,
+						id: connectionId
+					});
+					return context.body(null, 204);
+				}
+			}),
+			registerApiRoute("/web/factory/projects/:id/source-control-connections/:connectionId/repositories", {
+				method: "POST",
+				requiresAuth: false,
+				handler: async (routeContext) => {
+					const context = loose(routeContext);
+					const tenant = await this.#resolveTenant(context);
+					if ("response" in tenant) return tenant.response;
+					const projectId = context.req.param("id");
+					const connectionId = context.req.param("connectionId");
+					if (!projectId || !UUID_RE.test(projectId) || !connectionId || !UUID_RE.test(connectionId)) return context.json({ error: "Source-control connection not found" }, 404);
+					const found = await this.#findConnection({
+						orgId: tenant.orgId,
+						projectId,
+						id: connectionId
+					});
+					if (!found) return context.json({ error: "Source-control connection not found" }, 404);
+					const input = parseRepositoryLinkInput(await readJson(context));
+					if (!input) return context.json({ error: "invalid_project_repository" }, 400);
+					const repository = await found.handle.repositories.get({
+						orgId: tenant.orgId,
+						id: input.repositoryId
+					});
+					if (!repository || repository.installationId !== found.connection.installationId) return context.json({ error: "Source-control repository not found" }, 404);
+					const projectRepository = await found.handle.projectRepositories.link({
+						orgId: tenant.orgId,
+						connectionId,
+						createdByUserId: tenant.userId,
+						...input
+					});
+					return context.json({ projectRepository: await this.#repositoryPayload(found.handle, tenant.orgId, projectRepository) }, 201);
+				}
+			}),
+			registerApiRoute("/web/factory/projects/:id/repositories/:projectRepositoryId", {
+				method: "PATCH",
+				requiresAuth: false,
+				handler: async (routeContext) => {
+					const context = loose(routeContext);
+					const tenant = await this.#resolveTenant(context);
+					if ("response" in tenant) return tenant.response;
+					const projectId = context.req.param("id");
+					const projectRepositoryId = context.req.param("projectRepositoryId");
+					if (!projectId || !UUID_RE.test(projectId) || !projectRepositoryId || !UUID_RE.test(projectRepositoryId)) return context.json({ error: "Project repository not found" }, 404);
+					const found = await this.#findProjectRepository({
+						orgId: tenant.orgId,
+						projectId,
+						id: projectRepositoryId
+					});
+					if (!found) return context.json({ error: "Project repository not found" }, 404);
+					const input = parseRepositoryUpdateInput(await readJson(context));
+					if (!input) return context.json({ error: "invalid_project_repository" }, 400);
+					const projectRepository = await found.handle.projectRepositories.update({
+						orgId: tenant.orgId,
+						id: projectRepositoryId,
+						input
+					});
+					return context.json({ projectRepository: await this.#repositoryPayload(found.handle, tenant.orgId, projectRepository) });
+				}
+			}),
+			registerApiRoute("/web/factory/projects/:id/repositories/:projectRepositoryId", {
+				method: "DELETE",
+				requiresAuth: false,
+				handler: async (routeContext) => {
+					const context = loose(routeContext);
+					const tenant = await this.#resolveTenant(context);
+					if ("response" in tenant) return tenant.response;
+					const projectId = context.req.param("id");
+					const projectRepositoryId = context.req.param("projectRepositoryId");
+					if (!projectId || !UUID_RE.test(projectId) || !projectRepositoryId || !UUID_RE.test(projectRepositoryId)) return context.json({ error: "Project repository not found" }, 404);
+					const found = await this.#findProjectRepository({
+						orgId: tenant.orgId,
+						projectId,
+						id: projectRepositoryId
+					});
+					if (!found) return context.json({ error: "Project repository not found" }, 404);
+					await found.handle.projectRepositories.unlink({
+						orgId: tenant.orgId,
+						id: projectRepositoryId
+					});
+					return context.body(null, 204);
+				}
+			})
+		];
+	}
+};
+//#endregion
+export { ProjectRoutes };
+
+//# sourceMappingURL=projects.js.map

package/dist/routes/projects.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"projects.js","names":["#versionControlIntegrationIds","#projects","#sourceControl","#handles","#project","#findConnection","#findProjectRepository","#repositoryPayload","#resolveTenant"],"sources":["../../src/routes/projects.ts"],"sourcesContent":["import type { ApiRoute } from '@mastra/core/server';\nimport { registerApiRoute } from '@mastra/core/server';\nimport type { Context } from 'hono';\n\nimport type {\n  CreateFactoryProjectInput,\n  FactoryProjectsStorage,\n  UpdateFactoryProjectInput,\n} from '../storage/domains/projects/base.js';\nimport type {\n  ProjectRepository,\n  SourceControlStorage,\n  SourceControlStorageHandle,\n  UpdateProjectRepositoryInput,\n} from '../storage/domains/source-control/base.js';\nimport type { RouteDependencies } from './route.js';\nimport { Route } from './route.js';\n\nconst UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;\nconst MAX_NAME_LENGTH = 200;\nconst MAX_DESCRIPTION_LENGTH = 2_000;\nconst MAX_SETUP_COMMAND_LENGTH = 2_000;\nconst MAX_BRANCH_LENGTH = 255;\nconst MAX_SANDBOX_PROVIDER_LENGTH = 100;\nconst MAX_SANDBOX_WORKDIR_LENGTH = 1_000;\nconst CONTROL_CHAR_RE = /[\\0-\\x08\\x0b\\x0c\\x0e-\\x1f\\x7f]/;\n\nfunction loose(context: unknown): Context {\n  return context as Context;\n}\n\nasync function readJson(context: Context): Promise<unknown | undefined> {\n  try {\n    return await context.req.json();\n  } catch {\n    return undefined;\n  }\n}\n\nfunction parseCreateInput(value: unknown): CreateFactoryProjectInput | null {\n  if (!value || typeof value !== 'object') return null;\n  const input = value as Record<string, unknown>;\n  if (typeof input.name !== 'string') return null;\n  const name = input.name.trim();\n  if (!name || name.length > MAX_NAME_LENGTH) return null;\n  if (input.description !== undefined && input.description !== null && typeof input.description !== 'string')\n    return null;\n  const description = typeof input.description === 'string' ? input.description.trim() || null : null;\n  if (description && description.length > MAX_DESCRIPTION_LENGTH) return null;\n  return { name, description };\n}\n\nfunction parseUpdateInput(value: unknown): UpdateFactoryProjectInput | null {\n  if (!value || typeof value !== 'object') return null;\n  const input = value as Record<string, unknown>;\n  const patch: UpdateFactoryProjectInput = {};\n  if (input.name !== undefined) {\n    if (typeof input.name !== 'string') return null;\n    const name = input.name.trim();\n    if (!name || name.length > MAX_NAME_LENGTH) return null;\n    patch.name = name;\n  }\n  if (input.description !== undefined) {\n    if (input.description !== null && typeof input.description !== 'string') return null;\n    const description = typeof input.description === 'string' ? input.description.trim() || null : null;\n    if (description && description.length > MAX_DESCRIPTION_LENGTH) return null;\n    patch.description = description;\n  }\n  if (input.defaultModelId !== undefined) {\n    const defaultModelId = parseOptionalString(input.defaultModelId, { maxLength: MAX_NAME_LENGTH, nullable: true });\n    if (defaultModelId === false) return null;\n    patch.defaultModelId = defaultModelId ?? null;\n  }\n  if (input.slackWorkItemsEnabled !== undefined) {\n    if (typeof input.slackWorkItemsEnabled !== 'boolean') return null;\n    patch.slackWorkItemsEnabled = input.slackWorkItemsEnabled;\n  }\n  return Object.keys(patch).length > 0 ? patch : null;\n}\n\nfunction parseConnectionInput(value: unknown): { integrationId: string; installationId: string } | null {\n  if (!value || typeof value !== 'object') return null;\n  const input = value as Record<string, unknown>;\n  if (typeof input.integrationId !== 'string' || !input.integrationId.trim()) return null;\n  if (typeof input.installationId !== 'string' || !UUID_RE.test(input.installationId)) return null;\n  return { integrationId: input.integrationId.trim(), installationId: input.installationId };\n}\n\nfunction parseOptionalString(\n  value: unknown,\n  { maxLength, nullable = false }: { maxLength: number; nullable?: boolean },\n): string | null | undefined | false {\n  if (value === undefined) return undefined;\n  if (value === null) return nullable ? null : false;\n  if (typeof value !== 'string') return false;\n  const normalized = value.trim();\n  if (!normalized) return nullable ? null : false;\n  if (normalized.length > maxLength || CONTROL_CHAR_RE.test(normalized)) return false;\n  return normalized;\n}\n\nfunction parseRepositoryLinkInput(value: unknown): {\n  repositoryId: string;\n  branch: string | null;\n  sandboxProvider: string;\n  sandboxWorkdir: string;\n  setupCommand: string | null;\n} | null {\n  if (!value || typeof value !== 'object') return null;\n  const input = value as Record<string, unknown>;\n  if (typeof input.repositoryId !== 'string' || !UUID_RE.test(input.repositoryId)) return null;\n  const branch = parseOptionalString(input.branch, { maxLength: MAX_BRANCH_LENGTH, nullable: true });\n  const sandboxProvider = parseOptionalString(input.sandboxProvider, { maxLength: MAX_SANDBOX_PROVIDER_LENGTH });\n  const sandboxWorkdir = parseOptionalString(input.sandboxWorkdir, { maxLength: MAX_SANDBOX_WORKDIR_LENGTH });\n  const setupCommand = parseOptionalString(input.setupCommand, { maxLength: MAX_SETUP_COMMAND_LENGTH, nullable: true });\n  if (\n    branch === false ||\n    typeof sandboxProvider !== 'string' ||\n    typeof sandboxWorkdir !== 'string' ||\n    setupCommand === false\n  )\n    return null;\n  return {\n    repositoryId: input.repositoryId,\n    branch: branch ?? null,\n    sandboxProvider,\n    sandboxWorkdir,\n    setupCommand: setupCommand ?? null,\n  };\n}\n\nfunction parseRepositoryUpdateInput(value: unknown): UpdateProjectRepositoryInput | null {\n  if (!value || typeof value !== 'object') return null;\n  const input = value as Record<string, unknown>;\n  const patch: UpdateProjectRepositoryInput = {};\n  const branch = parseOptionalString(input.branch, { maxLength: MAX_BRANCH_LENGTH, nullable: true });\n  const sandboxProvider = parseOptionalString(input.sandboxProvider, { maxLength: MAX_SANDBOX_PROVIDER_LENGTH });\n  const sandboxWorkdir = parseOptionalString(input.sandboxWorkdir, { maxLength: MAX_SANDBOX_WORKDIR_LENGTH });\n  const setupCommand = parseOptionalString(input.setupCommand, { maxLength: MAX_SETUP_COMMAND_LENGTH, nullable: true });\n  if (\n    branch === false ||\n    sandboxProvider === false ||\n    sandboxProvider === null ||\n    sandboxWorkdir === false ||\n    sandboxWorkdir === null ||\n    setupCommand === false\n  )\n    return null;\n  if (branch !== undefined) patch.branch = branch;\n  if (sandboxProvider !== undefined) patch.sandboxProvider = sandboxProvider;\n  if (sandboxWorkdir !== undefined) patch.sandboxWorkdir = sandboxWorkdir;\n  if (setupCommand !== undefined) patch.setupCommand = setupCommand;\n  return Object.keys(patch).length > 0 ? patch : null;\n}\n\nexport interface ProjectRoutesDeps extends RouteDependencies {\n  /** Factory projects domain backing the CRUD surface. */\n  projects: FactoryProjectsStorage;\n  /** Source-control domain the connection/repository routes fan out over. */\n  sourceControl: SourceControlStorage;\n  /** Integration ids allowed as source-control connection targets. */\n  versionControlIntegrationIds?: string[];\n}\n\nexport class ProjectRoutes extends Route<ProjectRoutesDeps> {\n  readonly #versionControlIntegrationIds: Set<string>;\n\n  constructor(deps: ProjectRoutesDeps) {\n    super(deps);\n    this.#versionControlIntegrationIds = new Set(deps.versionControlIntegrationIds ?? []);\n  }\n\n  async #projects(): Promise<FactoryProjectsStorage> {\n    await this.deps.projects.ensureReady();\n    return this.deps.projects;\n  }\n\n  async #sourceControl(): Promise<SourceControlStorage> {\n    await this.deps.sourceControl.ensureReady();\n    return this.deps.sourceControl;\n  }\n\n  async #handles(): Promise<SourceControlStorageHandle[]> {\n    const storage = await this.#sourceControl();\n    return [...this.#versionControlIntegrationIds].map(integrationId => storage.forIntegration(integrationId));\n  }\n\n  async #project(orgId: string, id: string) {\n    return (await this.#projects()).get({ orgId, id });\n  }\n\n  async #findConnection({ orgId, projectId, id }: { orgId: string; projectId: string; id: string }) {\n    for (const handle of await this.#handles()) {\n      const connection = await handle.connections.get({ orgId, id });\n      if (connection?.factoryProjectId === projectId) return { handle, connection };\n    }\n    return null;\n  }\n\n  async #findProjectRepository({ orgId, projectId, id }: { orgId: string; projectId: string; id: string }) {\n    for (const handle of await this.#handles()) {\n      const projectRepository = await handle.projectRepositories.get({ orgId, id });\n      if (!projectRepository) continue;\n      const connection = await handle.connections.get({ orgId, id: projectRepository.connectionId });\n      if (connection?.factoryProjectId === projectId) return { handle, connection, projectRepository };\n    }\n    return null;\n  }\n\n  async #repositoryPayload(handle: SourceControlStorageHandle, orgId: string, projectRepository: ProjectRepository) {\n    const repository = await handle.repositories.get({ orgId, id: projectRepository.repositoryId });\n    return { ...projectRepository, repository };\n  }\n\n  async #resolveTenant(context: Context): Promise<{ orgId: string; userId: string } | { response: Response }> {\n    await this.deps.auth.ensureUser(context);\n    const tenant = this.deps.auth.tenant(context);\n    if (!tenant) return { response: context.json({ error: 'unauthorized' }, 401) };\n    if (!tenant.orgId) {\n      return {\n        response: context.json(\n          { error: 'organization_required', message: 'Factory projects require an organization.' },\n          403,\n        ),\n      };\n    }\n    return { orgId: tenant.orgId, userId: tenant.userId };\n  }\n\n  routes(): ApiRoute[] {\n    return [\n      registerApiRoute('/web/factory/projects', {\n        method: 'GET',\n        requiresAuth: false,\n        handler: async routeContext => {\n          const context = loose(routeContext);\n          const tenant = await this.#resolveTenant(context);\n          if ('response' in tenant) return tenant.response;\n          return context.json({ projects: await (await this.#projects()).list({ orgId: tenant.orgId }) });\n        },\n      }),\n      registerApiRoute('/web/factory/projects', {\n        method: 'POST',\n        requiresAuth: false,\n        handler: async routeContext => {\n          const context = loose(routeContext);\n          const tenant = await this.#resolveTenant(context);\n          if ('response' in tenant) return tenant.response;\n          const input = parseCreateInput(await readJson(context));\n          if (!input) return context.json({ error: 'invalid_project' }, 400);\n          const project = await (await this.#projects()).create({ orgId: tenant.orgId, userId: tenant.userId, input });\n          return context.json({ project }, 201);\n        },\n      }),\n      registerApiRoute('/web/factory/projects/:id', {\n        method: 'GET',\n        requiresAuth: false,\n        handler: async routeContext => {\n          const context = loose(routeContext);\n          const tenant = await this.#resolveTenant(context);\n          if ('response' in tenant) return tenant.response;\n          const id = context.req.param('id');\n          if (!id || !UUID_RE.test(id)) return context.json({ error: 'Project not found' }, 404);\n          const project = await this.#project(tenant.orgId, id);\n          return project ? context.json({ project }) : context.json({ error: 'Project not found' }, 404);\n        },\n      }),\n      registerApiRoute('/web/factory/projects/:id', {\n        method: 'PATCH',\n        requiresAuth: false,\n        handler: async routeContext => {\n          const context = loose(routeContext);\n          const tenant = await this.#resolveTenant(context);\n          if ('response' in tenant) return tenant.response;\n          const id = context.req.param('id');\n          if (!id || !UUID_RE.test(id)) return context.json({ error: 'Project not found' }, 404);\n          const input = parseUpdateInput(await readJson(context));\n          if (!input) return context.json({ error: 'invalid_project' }, 400);\n          const project = await (await this.#projects()).update({ orgId: tenant.orgId, id, input });\n          return project ? context.json({ project }) : context.json({ error: 'Project not found' }, 404);\n        },\n      }),\n      registerApiRoute('/web/factory/projects/:id', {\n        method: 'DELETE',\n        requiresAuth: false,\n        handler: async routeContext => {\n          const context = loose(routeContext);\n          const tenant = await this.#resolveTenant(context);\n          if ('response' in tenant) return tenant.response;\n          const id = context.req.param('id');\n          if (!id || !UUID_RE.test(id)) return context.json({ error: 'Project not found' }, 404);\n          if (!(await this.#project(tenant.orgId, id))) return context.json({ error: 'Project not found' }, 404);\n          for (const handle of await this.#handles()) {\n            for (const connection of await handle.connections.list({ orgId: tenant.orgId, factoryProjectId: id })) {\n              await handle.connections.delete({ orgId: tenant.orgId, id: connection.id });\n            }\n          }\n          await (await this.#projects()).delete({ orgId: tenant.orgId, id });\n          return context.body(null, 204);\n        },\n      }),\n      registerApiRoute('/web/factory/projects/:id/source-control-connections', {\n        method: 'GET',\n        requiresAuth: false,\n        handler: async routeContext => {\n          const context = loose(routeContext);\n          const tenant = await this.#resolveTenant(context);\n          if ('response' in tenant) return tenant.response;\n          const projectId = context.req.param('id');\n          if (!projectId || !UUID_RE.test(projectId) || !(await this.#project(tenant.orgId, projectId)))\n            return context.json({ error: 'Project not found' }, 404);\n          const connections = [];\n          for (const handle of await this.#handles()) {\n            for (const connection of await handle.connections.list({\n              orgId: tenant.orgId,\n              factoryProjectId: projectId,\n            })) {\n              const installation = await handle.installations.get({\n                orgId: tenant.orgId,\n                id: connection.installationId,\n              });\n              // Skip orphaned connections whose installation was pruned (e.g.\n              // the user uninstalled the GitHub App). Otherwise\n              // `projectRepositories.list` throws `requireConnection` and the\n              // whole endpoint 500s, which hangs the web UI on the page\n              // loader for every project. New code cascade-deletes these on\n              // installation removal, but this defensive skip lets already-\n              // orphaned rows in existing databases self-heal on read.\n              if (!installation) continue;\n              const links = await handle.projectRepositories.list({ orgId: tenant.orgId, connectionId: connection.id });\n              connections.push({\n                ...connection,\n                installation,\n                repositories: await Promise.all(links.map(link => this.#repositoryPayload(handle, tenant.orgId, link))),\n              });\n            }\n          }\n          return context.json({ connections });\n        },\n      }),\n      registerApiRoute('/web/factory/projects/:id/source-control-connections', {\n        method: 'POST',\n        requiresAuth: false,\n        handler: async routeContext => {\n          const context = loose(routeContext);\n          const tenant = await this.#resolveTenant(context);\n          if ('response' in tenant) return tenant.response;\n          const projectId = context.req.param('id');\n          if (!projectId || !UUID_RE.test(projectId) || !(await this.#project(tenant.orgId, projectId)))\n            return context.json({ error: 'Project not found' }, 404);\n          const input = parseConnectionInput(await readJson(context));\n          if (!input) return context.json({ error: 'invalid_source_control_connection' }, 400);\n          if (!this.#versionControlIntegrationIds.has(input.integrationId))\n            return context.json({ error: 'Source-control integration not found' }, 404);\n          const handle = (await this.#sourceControl()).forIntegration(input.integrationId);\n          if (!(await handle.installations.get({ orgId: tenant.orgId, id: input.installationId })))\n            return context.json({ error: 'Source-control installation not found' }, 404);\n          const connection = await handle.connections.create({\n            orgId: tenant.orgId,\n            factoryProjectId: projectId,\n            installationId: input.installationId,\n            createdByUserId: tenant.userId,\n          });\n          return context.json({ connection }, 201);\n        },\n      }),\n      registerApiRoute('/web/factory/projects/:id/source-control-connections/:connectionId', {\n        method: 'DELETE',\n        requiresAuth: false,\n        handler: async routeContext => {\n          const context = loose(routeContext);\n          const tenant = await this.#resolveTenant(context);\n          if ('response' in tenant) return tenant.response;\n          const projectId = context.req.param('id');\n          const connectionId = context.req.param('connectionId');\n          if (!projectId || !UUID_RE.test(projectId) || !connectionId || !UUID_RE.test(connectionId))\n            return context.json({ error: 'Source-control connection not found' }, 404);\n          const found = await this.#findConnection({ orgId: tenant.orgId, projectId, id: connectionId });\n          if (!found) return context.json({ error: 'Source-control connection not found' }, 404);\n          await found.handle.connections.delete({ orgId: tenant.orgId, id: connectionId });\n          return context.body(null, 204);\n        },\n      }),\n      registerApiRoute('/web/factory/projects/:id/source-control-connections/:connectionId/repositories', {\n        method: 'POST',\n        requiresAuth: false,\n        handler: async routeContext => {\n          const context = loose(routeContext);\n          const tenant = await this.#resolveTenant(context);\n          if ('response' in tenant) return tenant.response;\n          const projectId = context.req.param('id');\n          const connectionId = context.req.param('connectionId');\n          if (!projectId || !UUID_RE.test(projectId) || !connectionId || !UUID_RE.test(connectionId))\n            return context.json({ error: 'Source-control connection not found' }, 404);\n          const found = await this.#findConnection({ orgId: tenant.orgId, projectId, id: connectionId });\n          if (!found) return context.json({ error: 'Source-control connection not found' }, 404);\n          const input = parseRepositoryLinkInput(await readJson(context));\n          if (!input) return context.json({ error: 'invalid_project_repository' }, 400);\n          const repository = await found.handle.repositories.get({ orgId: tenant.orgId, id: input.repositoryId });\n          if (!repository || repository.installationId !== found.connection.installationId)\n            return context.json({ error: 'Source-control repository not found' }, 404);\n          const projectRepository = await found.handle.projectRepositories.link({\n            orgId: tenant.orgId,\n            connectionId,\n            createdByUserId: tenant.userId,\n            ...input,\n          });\n          return context.json(\n            { projectRepository: await this.#repositoryPayload(found.handle, tenant.orgId, projectRepository) },\n            201,\n          );\n        },\n      }),\n      registerApiRoute('/web/factory/projects/:id/repositories/:projectRepositoryId', {\n        method: 'PATCH',\n        requiresAuth: false,\n        handler: async routeContext => {\n          const context = loose(routeContext);\n          const tenant = await this.#resolveTenant(context);\n          if ('response' in tenant) return tenant.response;\n          const projectId = context.req.param('id');\n          const projectRepositoryId = context.req.param('projectRepositoryId');\n          if (!projectId || !UUID_RE.test(projectId) || !projectRepositoryId || !UUID_RE.test(projectRepositoryId))\n            return context.json({ error: 'Project repository not found' }, 404);\n          const found = await this.#findProjectRepository({ orgId: tenant.orgId, projectId, id: projectRepositoryId });\n          if (!found) return context.json({ error: 'Project repository not found' }, 404);\n          const input = parseRepositoryUpdateInput(await readJson(context));\n          if (!input) return context.json({ error: 'invalid_project_repository' }, 400);\n          const projectRepository = await found.handle.projectRepositories.update({\n            orgId: tenant.orgId,\n            id: projectRepositoryId,\n            input,\n          });\n          return context.json({\n            projectRepository: await this.#repositoryPayload(found.handle, tenant.orgId, projectRepository!),\n          });\n        },\n      }),\n      registerApiRoute('/web/factory/projects/:id/repositories/:projectRepositoryId', {\n        method: 'DELETE',\n        requiresAuth: false,\n        handler: async routeContext => {\n          const context = loose(routeContext);\n          const tenant = await this.#resolveTenant(context);\n          if ('response' in tenant) return tenant.response;\n          const projectId = context.req.param('id');\n          const projectRepositoryId = context.req.param('projectRepositoryId');\n          if (!projectId || !UUID_RE.test(projectId) || !projectRepositoryId || !UUID_RE.test(projectRepositoryId))\n            return context.json({ error: 'Project repository not found' }, 404);\n          const found = await this.#findProjectRepository({ orgId: tenant.orgId, projectId, id: projectRepositoryId });\n          if (!found) return context.json({ error: 'Project repository not found' }, 404);\n          await found.handle.projectRepositories.unlink({ orgId: tenant.orgId, id: projectRepositoryId });\n          return context.body(null, 204);\n        },\n      }),\n    ];\n  }\n}\n"],"mappings":";;;AAkBA,MAAM,UAAU;AAChB,MAAM,kBAAkB;AACxB,MAAM,yBAAyB;AAC/B,MAAM,2BAA2B;AACjC,MAAM,oBAAoB;AAC1B,MAAM,8BAA8B;AACpC,MAAM,6BAA6B;AACnC,MAAM,kBAAkB;AAExB,SAAS,MAAM,SAA2B;CACxC,OAAO;AACT;AAEA,eAAe,SAAS,SAAgD;CACtE,IAAI;EACF,OAAO,MAAM,QAAQ,IAAI,KAAK;CAChC,QAAQ;EACN;CACF;AACF;AAEA,SAAS,iBAAiB,OAAkD;CAC1E,IAAI,CAAC,SAAS,OAAO,UAAU,UAAU,OAAO;CAChD,MAAM,QAAQ;CACd,IAAI,OAAO,MAAM,SAAS,UAAU,OAAO;CAC3C,MAAM,OAAO,MAAM,KAAK,KAAK;CAC7B,IAAI,CAAC,QAAQ,KAAK,SAAS,iBAAiB,OAAO;CACnD,IAAI,MAAM,gBAAgB,KAAA,KAAa,MAAM,gBAAgB,QAAQ,OAAO,MAAM,gBAAgB,UAChG,OAAO;CACT,MAAM,cAAc,OAAO,MAAM,gBAAgB,WAAW,MAAM,YAAY,KAAK,KAAK,OAAO;CAC/F,IAAI,eAAe,YAAY,SAAS,wBAAwB,OAAO;CACvE,OAAO;EAAE;EAAM;CAAY;AAC7B;AAEA,SAAS,iBAAiB,OAAkD;CAC1E,IAAI,CAAC,SAAS,OAAO,UAAU,UAAU,OAAO;CAChD,MAAM,QAAQ;CACd,MAAM,QAAmC,CAAC;CAC1C,IAAI,MAAM,SAAS,KAAA,GAAW;EAC5B,IAAI,OAAO,MAAM,SAAS,UAAU,OAAO;EAC3C,MAAM,OAAO,MAAM,KAAK,KAAK;EAC7B,IAAI,CAAC,QAAQ,KAAK,SAAS,iBAAiB,OAAO;EACnD,MAAM,OAAO;CACf;CACA,IAAI,MAAM,gBAAgB,KAAA,GAAW;EACnC,IAAI,MAAM,gBAAgB,QAAQ,OAAO,MAAM,gBAAgB,UAAU,OAAO;EAChF,MAAM,cAAc,OAAO,MAAM,gBAAgB,WAAW,MAAM,YAAY,KAAK,KAAK,OAAO;EAC/F,IAAI,eAAe,YAAY,SAAS,wBAAwB,OAAO;EACvE,MAAM,cAAc;CACtB;CACA,IAAI,MAAM,mBAAmB,KAAA,GAAW;EACtC,MAAM,iBAAiB,oBAAoB,MAAM,gBAAgB;GAAE,WAAW;GAAiB,UAAU;EAAK,CAAC;EAC/G,IAAI,mBAAmB,OAAO,OAAO;EACrC,MAAM,iBAAiB,kBAAkB;CAC3C;CACA,IAAI,MAAM,0BAA0B,KAAA,GAAW;EAC7C,IAAI,OAAO,MAAM,0BAA0B,WAAW,OAAO;EAC7D,MAAM,wBAAwB,MAAM;CACtC;CACA,OAAO,OAAO,KAAK,KAAK,CAAC,CAAC,SAAS,IAAI,QAAQ;AACjD;AAEA,SAAS,qBAAqB,OAA0E;CACtG,IAAI,CAAC,SAAS,OAAO,UAAU,UAAU,OAAO;CAChD,MAAM,QAAQ;CACd,IAAI,OAAO,MAAM,kBAAkB,YAAY,CAAC,MAAM,cAAc,KAAK,GAAG,OAAO;CACnF,IAAI,OAAO,MAAM,mBAAmB,YAAY,CAAC,QAAQ,KAAK,MAAM,cAAc,GAAG,OAAO;CAC5F,OAAO;EAAE,eAAe,MAAM,cAAc,KAAK;EAAG,gBAAgB,MAAM;CAAe;AAC3F;AAEA,SAAS,oBACP,OACA,EAAE,WAAW,WAAW,SACW;CACnC,IAAI,UAAU,KAAA,GAAW,OAAO,KAAA;CAChC,IAAI,UAAU,MAAM,OAAO,WAAW,OAAO;CAC7C,IAAI,OAAO,UAAU,UAAU,OAAO;CACtC,MAAM,aAAa,MAAM,KAAK;CAC9B,IAAI,CAAC,YAAY,OAAO,WAAW,OAAO;CAC1C,IAAI,WAAW,SAAS,aAAa,gBAAgB,KAAK,UAAU,GAAG,OAAO;CAC9E,OAAO;AACT;AAEA,SAAS,yBAAyB,OAMzB;CACP,IAAI,CAAC,SAAS,OAAO,UAAU,UAAU,OAAO;CAChD,MAAM,QAAQ;CACd,IAAI,OAAO,MAAM,iBAAiB,YAAY,CAAC,QAAQ,KAAK,MAAM,YAAY,GAAG,OAAO;CACxF,MAAM,SAAS,oBAAoB,MAAM,QAAQ;EAAE,WAAW;EAAmB,UAAU;CAAK,CAAC;CACjG,MAAM,kBAAkB,oBAAoB,MAAM,iBAAiB,EAAE,WAAW,4BAA4B,CAAC;CAC7G,MAAM,iBAAiB,oBAAoB,MAAM,gBAAgB,EAAE,WAAW,2BAA2B,CAAC;CAC1G,MAAM,eAAe,oBAAoB,MAAM,cAAc;EAAE,WAAW;EAA0B,UAAU;CAAK,CAAC;CACpH,IACE,WAAW,SACX,OAAO,oBAAoB,YAC3B,OAAO,mBAAmB,YAC1B,iBAAiB,OAEjB,OAAO;CACT,OAAO;EACL,cAAc,MAAM;EACpB,QAAQ,UAAU;EAClB;EACA;EACA,cAAc,gBAAgB;CAChC;AACF;AAEA,SAAS,2BAA2B,OAAqD;CACvF,IAAI,CAAC,SAAS,OAAO,UAAU,UAAU,OAAO;CAChD,MAAM,QAAQ;CACd,MAAM,QAAsC,CAAC;CAC7C,MAAM,SAAS,oBAAoB,MAAM,QAAQ;EAAE,WAAW;EAAmB,UAAU;CAAK,CAAC;CACjG,MAAM,kBAAkB,oBAAoB,MAAM,iBAAiB,EAAE,WAAW,4BAA4B,CAAC;CAC7G,MAAM,iBAAiB,oBAAoB,MAAM,gBAAgB,EAAE,WAAW,2BAA2B,CAAC;CAC1G,MAAM,eAAe,oBAAoB,MAAM,cAAc;EAAE,WAAW;EAA0B,UAAU;CAAK,CAAC;CACpH,IACE,WAAW,SACX,oBAAoB,SACpB,oBAAoB,QACpB,mBAAmB,SACnB,mBAAmB,QACnB,iBAAiB,OAEjB,OAAO;CACT,IAAI,WAAW,KAAA,GAAW,MAAM,SAAS;CACzC,IAAI,oBAAoB,KAAA,GAAW,MAAM,kBAAkB;CAC3D,IAAI,mBAAmB,KAAA,GAAW,MAAM,iBAAiB;CACzD,IAAI,iBAAiB,KAAA,GAAW,MAAM,eAAe;CACrD,OAAO,OAAO,KAAK,KAAK,CAAC,CAAC,SAAS,IAAI,QAAQ;AACjD;AAWA,IAAa,gBAAb,cAAmC,MAAyB;CAC1D;CAEA,YAAY,MAAyB;EACnC,MAAM,IAAI;EACV,KAAKA,gCAAgC,IAAI,IAAI,KAAK,gCAAgC,CAAC,CAAC;CACtF;CAEA,MAAMC,YAA6C;EACjD,MAAM,KAAK,KAAK,SAAS,YAAY;EACrC,OAAO,KAAK,KAAK;CACnB;CAEA,MAAMC,iBAAgD;EACpD,MAAM,KAAK,KAAK,cAAc,YAAY;EAC1C,OAAO,KAAK,KAAK;CACnB;CAEA,MAAMC,WAAkD;EACtD,MAAM,UAAU,MAAM,KAAKD,eAAe;EAC1C,OAAO,CAAC,GAAG,KAAKF,6BAA6B,CAAC,CAAC,KAAI,kBAAiB,QAAQ,eAAe,aAAa,CAAC;CAC3G;CAEA,MAAMI,SAAS,OAAe,IAAY;EACxC,QAAQ,MAAM,KAAKH,UAAU,EAAA,CAAG,IAAI;GAAE;GAAO;EAAG,CAAC;CACnD;CAEA,MAAMI,gBAAgB,EAAE,OAAO,WAAW,MAAwD;EAChG,KAAK,MAAM,UAAU,MAAM,KAAKF,SAAS,GAAG;GAC1C,MAAM,aAAa,MAAM,OAAO,YAAY,IAAI;IAAE;IAAO;GAAG,CAAC;GAC7D,IAAI,YAAY,qBAAqB,WAAW,OAAO;IAAE;IAAQ;GAAW;EAC9E;EACA,OAAO;CACT;CAEA,MAAMG,uBAAuB,EAAE,OAAO,WAAW,MAAwD;EACvG,KAAK,MAAM,UAAU,MAAM,KAAKH,SAAS,GAAG;GAC1C,MAAM,oBAAoB,MAAM,OAAO,oBAAoB,IAAI;IAAE;IAAO;GAAG,CAAC;GAC5E,IAAI,CAAC,mBAAmB;GACxB,MAAM,aAAa,MAAM,OAAO,YAAY,IAAI;IAAE;IAAO,IAAI,kBAAkB;GAAa,CAAC;GAC7F,IAAI,YAAY,qBAAqB,WAAW,OAAO;IAAE;IAAQ;IAAY;GAAkB;EACjG;EACA,OAAO;CACT;CAEA,MAAMI,mBAAmB,QAAoC,OAAe,mBAAsC;EAChH,MAAM,aAAa,MAAM,OAAO,aAAa,IAAI;GAAE;GAAO,IAAI,kBAAkB;EAAa,CAAC;EAC9F,OAAO;GAAE,GAAG;GAAmB;EAAW;CAC5C;CAEA,MAAMC,eAAe,SAAuF;EAC1G,MAAM,KAAK,KAAK,KAAK,WAAW,OAAO;EACvC,MAAM,SAAS,KAAK,KAAK,KAAK,OAAO,OAAO;EAC5C,IAAI,CAAC,QAAQ,OAAO,EAAE,UAAU,QAAQ,KAAK,EAAE,OAAO,eAAe,GAAG,GAAG,EAAE;EAC7E,IAAI,CAAC,OAAO,OACV,OAAO,EACL,UAAU,QAAQ,KAChB;GAAE,OAAO;GAAyB,SAAS;EAA4C,GACvF,GACF,EACF;EAEF,OAAO;GAAE,OAAO,OAAO;GAAO,QAAQ,OAAO;EAAO;CACtD;CAEA,SAAqB;EACnB,OAAO;GACL,iBAAiB,yBAAyB;IACxC,QAAQ;IACR,cAAc;IACd,SAAS,OAAM,iBAAgB;KAC7B,MAAM,UAAU,MAAM,YAAY;KAClC,MAAM,SAAS,MAAM,KAAKA,eAAe,OAAO;KAChD,IAAI,cAAc,QAAQ,OAAO,OAAO;KACxC,OAAO,QAAQ,KAAK,EAAE,UAAU,OAAO,MAAM,KAAKP,UAAU,EAAA,CAAG,KAAK,EAAE,OAAO,OAAO,MAAM,CAAC,EAAE,CAAC;IAChG;GACF,CAAC;GACD,iBAAiB,yBAAyB;IACxC,QAAQ;IACR,cAAc;IACd,SAAS,OAAM,iBAAgB;KAC7B,MAAM,UAAU,MAAM,YAAY;KAClC,MAAM,SAAS,MAAM,KAAKO,eAAe,OAAO;KAChD,IAAI,cAAc,QAAQ,OAAO,OAAO;KACxC,MAAM,QAAQ,iBAAiB,MAAM,SAAS,OAAO,CAAC;KACtD,IAAI,CAAC,OAAO,OAAO,QAAQ,KAAK,EAAE,OAAO,kBAAkB,GAAG,GAAG;KACjE,MAAM,UAAU,OAAO,MAAM,KAAKP,UAAU,EAAA,CAAG,OAAO;MAAE,OAAO,OAAO;MAAO,QAAQ,OAAO;MAAQ;KAAM,CAAC;KAC3G,OAAO,QAAQ,KAAK,EAAE,QAAQ,GAAG,GAAG;IACtC;GACF,CAAC;GACD,iBAAiB,6BAA6B;IAC5C,QAAQ;IACR,cAAc;IACd,SAAS,OAAM,iBAAgB;KAC7B,MAAM,UAAU,MAAM,YAAY;KAClC,MAAM,SAAS,MAAM,KAAKO,eAAe,OAAO;KAChD,IAAI,cAAc,QAAQ,OAAO,OAAO;KACxC,MAAM,KAAK,QAAQ,IAAI,MAAM,IAAI;KACjC,IAAI,CAAC,MAAM,CAAC,QAAQ,KAAK,EAAE,GAAG,OAAO,QAAQ,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;KACrF,MAAM,UAAU,MAAM,KAAKJ,SAAS,OAAO,OAAO,EAAE;KACpD,OAAO,UAAU,QAAQ,KAAK,EAAE,QAAQ,CAAC,IAAI,QAAQ,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;IAC/F;GACF,CAAC;GACD,iBAAiB,6BAA6B;IAC5C,QAAQ;IACR,cAAc;IACd,SAAS,OAAM,iBAAgB;KAC7B,MAAM,UAAU,MAAM,YAAY;KAClC,MAAM,SAAS,MAAM,KAAKI,eAAe,OAAO;KAChD,IAAI,cAAc,QAAQ,OAAO,OAAO;KACxC,MAAM,KAAK,QAAQ,IAAI,MAAM,IAAI;KACjC,IAAI,CAAC,MAAM,CAAC,QAAQ,KAAK,EAAE,GAAG,OAAO,QAAQ,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;KACrF,MAAM,QAAQ,iBAAiB,MAAM,SAAS,OAAO,CAAC;KACtD,IAAI,CAAC,OAAO,OAAO,QAAQ,KAAK,EAAE,OAAO,kBAAkB,GAAG,GAAG;KACjE,MAAM,UAAU,OAAO,MAAM,KAAKP,UAAU,EAAA,CAAG,OAAO;MAAE,OAAO,OAAO;MAAO;MAAI;KAAM,CAAC;KACxF,OAAO,UAAU,QAAQ,KAAK,EAAE,QAAQ,CAAC,IAAI,QAAQ,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;IAC/F;GACF,CAAC;GACD,iBAAiB,6BAA6B;IAC5C,QAAQ;IACR,cAAc;IACd,SAAS,OAAM,iBAAgB;KAC7B,MAAM,UAAU,MAAM,YAAY;KAClC,MAAM,SAAS,MAAM,KAAKO,eAAe,OAAO;KAChD,IAAI,cAAc,QAAQ,OAAO,OAAO;KACxC,MAAM,KAAK,QAAQ,IAAI,MAAM,IAAI;KACjC,IAAI,CAAC,MAAM,CAAC,QAAQ,KAAK,EAAE,GAAG,OAAO,QAAQ,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;KACrF,IAAI,CAAE,MAAM,KAAKJ,SAAS,OAAO,OAAO,EAAE,GAAI,OAAO,QAAQ,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;KACrG,KAAK,MAAM,UAAU,MAAM,KAAKD,SAAS,GACvC,KAAK,MAAM,cAAc,MAAM,OAAO,YAAY,KAAK;MAAE,OAAO,OAAO;MAAO,kBAAkB;KAAG,CAAC,GAClG,MAAM,OAAO,YAAY,OAAO;MAAE,OAAO,OAAO;MAAO,IAAI,WAAW;KAAG,CAAC;KAG9E,OAAO,MAAM,KAAKF,UAAU,EAAA,CAAG,OAAO;MAAE,OAAO,OAAO;MAAO;KAAG,CAAC;KACjE,OAAO,QAAQ,KAAK,MAAM,GAAG;IAC/B;GACF,CAAC;GACD,iBAAiB,wDAAwD;IACvE,QAAQ;IACR,cAAc;IACd,SAAS,OAAM,iBAAgB;KAC7B,MAAM,UAAU,MAAM,YAAY;KAClC,MAAM,SAAS,MAAM,KAAKO,eAAe,OAAO;KAChD,IAAI,cAAc,QAAQ,OAAO,OAAO;KACxC,MAAM,YAAY,QAAQ,IAAI,MAAM,IAAI;KACxC,IAAI,CAAC,aAAa,CAAC,QAAQ,KAAK,SAAS,KAAK,CAAE,MAAM,KAAKJ,SAAS,OAAO,OAAO,SAAS,GACzF,OAAO,QAAQ,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;KACzD,MAAM,cAAc,CAAC;KACrB,KAAK,MAAM,UAAU,MAAM,KAAKD,SAAS,GACvC,KAAK,MAAM,cAAc,MAAM,OAAO,YAAY,KAAK;MACrD,OAAO,OAAO;MACd,kBAAkB;KACpB,CAAC,GAAG;MACF,MAAM,eAAe,MAAM,OAAO,cAAc,IAAI;OAClD,OAAO,OAAO;OACd,IAAI,WAAW;MACjB,CAAC;MAQD,IAAI,CAAC,cAAc;MACnB,MAAM,QAAQ,MAAM,OAAO,oBAAoB,KAAK;OAAE,OAAO,OAAO;OAAO,cAAc,WAAW;MAAG,CAAC;MACxG,YAAY,KAAK;OACf,GAAG;OACH;OACA,cAAc,MAAM,QAAQ,IAAI,MAAM,KAAI,SAAQ,KAAKI,mBAAmB,QAAQ,OAAO,OAAO,IAAI,CAAC,CAAC;MACxG,CAAC;KACH;KAEF,OAAO,QAAQ,KAAK,EAAE,YAAY,CAAC;IACrC;GACF,CAAC;GACD,iBAAiB,wDAAwD;IACvE,QAAQ;IACR,cAAc;IACd,SAAS,OAAM,iBAAgB;KAC7B,MAAM,UAAU,MAAM,YAAY;KAClC,MAAM,SAAS,MAAM,KAAKC,eAAe,OAAO;KAChD,IAAI,cAAc,QAAQ,OAAO,OAAO;KACxC,MAAM,YAAY,QAAQ,IAAI,MAAM,IAAI;KACxC,IAAI,CAAC,aAAa,CAAC,QAAQ,KAAK,SAAS,KAAK,CAAE,MAAM,KAAKJ,SAAS,OAAO,OAAO,SAAS,GACzF,OAAO,QAAQ,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;KACzD,MAAM,QAAQ,qBAAqB,MAAM,SAAS,OAAO,CAAC;KAC1D,IAAI,CAAC,OAAO,OAAO,QAAQ,KAAK,EAAE,OAAO,oCAAoC,GAAG,GAAG;KACnF,IAAI,CAAC,KAAKJ,8BAA8B,IAAI,MAAM,aAAa,GAC7D,OAAO,QAAQ,KAAK,EAAE,OAAO,uCAAuC,GAAG,GAAG;KAC5E,MAAM,UAAU,MAAM,KAAKE,eAAe,EAAA,CAAG,eAAe,MAAM,aAAa;KAC/E,IAAI,CAAE,MAAM,OAAO,cAAc,IAAI;MAAE,OAAO,OAAO;MAAO,IAAI,MAAM;KAAe,CAAC,GACpF,OAAO,QAAQ,KAAK,EAAE,OAAO,wCAAwC,GAAG,GAAG;KAC7E,MAAM,aAAa,MAAM,OAAO,YAAY,OAAO;MACjD,OAAO,OAAO;MACd,kBAAkB;MAClB,gBAAgB,MAAM;MACtB,iBAAiB,OAAO;KAC1B,CAAC;KACD,OAAO,QAAQ,KAAK,EAAE,WAAW,GAAG,GAAG;IACzC;GACF,CAAC;GACD,iBAAiB,sEAAsE;IACrF,QAAQ;IACR,cAAc;IACd,SAAS,OAAM,iBAAgB;KAC7B,MAAM,UAAU,MAAM,YAAY;KAClC,MAAM,SAAS,MAAM,KAAKM,eAAe,OAAO;KAChD,IAAI,cAAc,QAAQ,OAAO,OAAO;KACxC,MAAM,YAAY,QAAQ,IAAI,MAAM,IAAI;KACxC,MAAM,eAAe,QAAQ,IAAI,MAAM,cAAc;KACrD,IAAI,CAAC,aAAa,CAAC,QAAQ,KAAK,SAAS,KAAK,CAAC,gBAAgB,CAAC,QAAQ,KAAK,YAAY,GACvF,OAAO,QAAQ,KAAK,EAAE,OAAO,sCAAsC,GAAG,GAAG;KAC3E,MAAM,QAAQ,MAAM,KAAKH,gBAAgB;MAAE,OAAO,OAAO;MAAO;MAAW,IAAI;KAAa,CAAC;KAC7F,IAAI,CAAC,OAAO,OAAO,QAAQ,KAAK,EAAE,OAAO,sCAAsC,GAAG,GAAG;KACrF,MAAM,MAAM,OAAO,YAAY,OAAO;MAAE,OAAO,OAAO;MAAO,IAAI;KAAa,CAAC;KAC/E,OAAO,QAAQ,KAAK,MAAM,GAAG;IAC/B;GACF,CAAC;GACD,iBAAiB,mFAAmF;IAClG,QAAQ;IACR,cAAc;IACd,SAAS,OAAM,iBAAgB;KAC7B,MAAM,UAAU,MAAM,YAAY;KAClC,MAAM,SAAS,MAAM,KAAKG,eAAe,OAAO;KAChD,IAAI,cAAc,QAAQ,OAAO,OAAO;KACxC,MAAM,YAAY,QAAQ,IAAI,MAAM,IAAI;KACxC,MAAM,eAAe,QAAQ,IAAI,MAAM,cAAc;KACrD,IAAI,CAAC,aAAa,CAAC,QAAQ,KAAK,SAAS,KAAK,CAAC,gBAAgB,CAAC,QAAQ,KAAK,YAAY,GACvF,OAAO,QAAQ,KAAK,EAAE,OAAO,sCAAsC,GAAG,GAAG;KAC3E,MAAM,QAAQ,MAAM,KAAKH,gBAAgB;MAAE,OAAO,OAAO;MAAO;MAAW,IAAI;KAAa,CAAC;KAC7F,IAAI,CAAC,OAAO,OAAO,QAAQ,KAAK,EAAE,OAAO,sCAAsC,GAAG,GAAG;KACrF,MAAM,QAAQ,yBAAyB,MAAM,SAAS,OAAO,CAAC;KAC9D,IAAI,CAAC,OAAO,OAAO,QAAQ,KAAK,EAAE,OAAO,6BAA6B,GAAG,GAAG;KAC5E,MAAM,aAAa,MAAM,MAAM,OAAO,aAAa,IAAI;MAAE,OAAO,OAAO;MAAO,IAAI,MAAM;KAAa,CAAC;KACtG,IAAI,CAAC,cAAc,WAAW,mBAAmB,MAAM,WAAW,gBAChE,OAAO,QAAQ,KAAK,EAAE,OAAO,sCAAsC,GAAG,GAAG;KAC3E,MAAM,oBAAoB,MAAM,MAAM,OAAO,oBAAoB,KAAK;MACpE,OAAO,OAAO;MACd;MACA,iBAAiB,OAAO;MACxB,GAAG;KACL,CAAC;KACD,OAAO,QAAQ,KACb,EAAE,mBAAmB,MAAM,KAAKE,mBAAmB,MAAM,QAAQ,OAAO,OAAO,iBAAiB,EAAE,GAClG,GACF;IACF;GACF,CAAC;GACD,iBAAiB,+DAA+D;IAC9E,QAAQ;IACR,cAAc;IACd,SAAS,OAAM,iBAAgB;KAC7B,MAAM,UAAU,MAAM,YAAY;KAClC,MAAM,SAAS,MAAM,KAAKC,eAAe,OAAO;KAChD,IAAI,cAAc,QAAQ,OAAO,OAAO;KACxC,MAAM,YAAY,QAAQ,IAAI,MAAM,IAAI;KACxC,MAAM,sBAAsB,QAAQ,IAAI,MAAM,qBAAqB;KACnE,IAAI,CAAC,aAAa,CAAC,QAAQ,KAAK,SAAS,KAAK,CAAC,uBAAuB,CAAC,QAAQ,KAAK,mBAAmB,GACrG,OAAO,QAAQ,KAAK,EAAE,OAAO,+BAA+B,GAAG,GAAG;KACpE,MAAM,QAAQ,MAAM,KAAKF,uBAAuB;MAAE,OAAO,OAAO;MAAO;MAAW,IAAI;KAAoB,CAAC;KAC3G,IAAI,CAAC,OAAO,OAAO,QAAQ,KAAK,EAAE,OAAO,+BAA+B,GAAG,GAAG;KAC9E,MAAM,QAAQ,2BAA2B,MAAM,SAAS,OAAO,CAAC;KAChE,IAAI,CAAC,OAAO,OAAO,QAAQ,KAAK,EAAE,OAAO,6BAA6B,GAAG,GAAG;KAC5E,MAAM,oBAAoB,MAAM,MAAM,OAAO,oBAAoB,OAAO;MACtE,OAAO,OAAO;MACd,IAAI;MACJ;KACF,CAAC;KACD,OAAO,QAAQ,KAAK,EAClB,mBAAmB,MAAM,KAAKC,mBAAmB,MAAM,QAAQ,OAAO,OAAO,iBAAkB,EACjG,CAAC;IACH;GACF,CAAC;GACD,iBAAiB,+DAA+D;IAC9E,QAAQ;IACR,cAAc;IACd,SAAS,OAAM,iBAAgB;KAC7B,MAAM,UAAU,MAAM,YAAY;KAClC,MAAM,SAAS,MAAM,KAAKC,eAAe,OAAO;KAChD,IAAI,cAAc,QAAQ,OAAO,OAAO;KACxC,MAAM,YAAY,QAAQ,IAAI,MAAM,IAAI;KACxC,MAAM,sBAAsB,QAAQ,IAAI,MAAM,qBAAqB;KACnE,IAAI,CAAC,aAAa,CAAC,QAAQ,KAAK,SAAS,KAAK,CAAC,uBAAuB,CAAC,QAAQ,KAAK,mBAAmB,GACrG,OAAO,QAAQ,KAAK,EAAE,OAAO,+BAA+B,GAAG,GAAG;KACpE,MAAM,QAAQ,MAAM,KAAKF,uBAAuB;MAAE,OAAO,OAAO;MAAO;MAAW,IAAI;KAAoB,CAAC;KAC3G,IAAI,CAAC,OAAO,OAAO,QAAQ,KAAK,EAAE,OAAO,+BAA+B,GAAG,GAAG;KAC9E,MAAM,MAAM,OAAO,oBAAoB,OAAO;MAAE,OAAO,OAAO;MAAO,IAAI;KAAoB,CAAC;KAC9F,OAAO,QAAQ,KAAK,MAAM,GAAG;IAC/B;GACF,CAAC;EACH;CACF;AACF"}

package/dist/routes/provider-credentials.d.ts

@@ -0,0 +1,81 @@
+/**
+ * Per-request model-provider credential context.
+ *
+ * The provider config/OAuth routes serve two deployment shapes:
+ *
+ * - **Local** (no web auth adapter): credentials live in the server-global
+ *   file-backed `AuthStorage` (`auth.json`) — unchanged TUI behavior.
+ * - **Tenant** (auth adapter active): credentials live in the
+ *   `model-credentials` factory storage domain, scoped per `(orgId, userId)`
+ *   with optional org-wide rows (`userId` absent).
+ *
+ * `resolveCredentialContext` decides which shape a request is in: an
+ * authenticated user always gets the tenant path; an unauthenticated request
+ * is rejected when auth is enabled and falls back to local otherwise.
+ */
+import type { Context } from 'hono';
+import type { CredentialRecord, LoginSessionKind, ModelCredentialsStorage } from '../storage/domains/credentials/base.js';
+import type { RouteAuth } from './route.js';
+/**
+ * OAuth credentials are stored under the auth provider id, which differs from
+ * the catalog provider id for OpenAI (stored as `openai-codex`). Tenant rows
+ * use the same keying so one lookup serves both OAuth tokens and API keys.
+ */
+export declare function getAuthProviderId(provider: string): string;
+/**
+ * Providers that support a browser-driven OAuth sign-in flow, keyed by
+ * *catalog* provider id (what the routes and settings UI use). All flows need
+ * no inbound connection to the server: Anthropic uses paste-code PKCE, the
+ * rest use RFC 8628-style device codes.
+ */
+export declare const WEB_OAUTH_FLOW_KINDS: Readonly<Record<string, LoginSessionKind>>;
+export type CredentialContext = {
+    mode: 'local';
+} | {
+    mode: 'tenant';
+    storage: ModelCredentialsStorage;
+    orgId: string;
+    userId: string;
+};
+/**
+ * The tenant credentials domain, when registered and ready. `undefined` means
+ * the factory never ran (no handle threaded in) or the domain's init failed
+ * (fail-soft — callers report the feature unavailable instead of crashing).
+ */
+export declare function getTenantCredentialsStorage(credentials: ModelCredentialsStorage | undefined): Promise<ModelCredentialsStorage | undefined>;
+/**
+ * Org key for tenant rows. Personal accounts get an org bootstrapped by the
+ * auth adapter (`ensureOrg`); if one still isn't present, scope rows under a
+ * per-user synthetic org so credentials never become server-global.
+ */
+export declare function tenantOrgId(tenant: {
+    orgId?: string;
+    userId: string;
+}): string;
+/**
+ * Resolve the credential context for a request, or a ready-to-return error
+ * response. Mutating credential routes call this and hard-fail (401/503)
+ * when the tenant path is required but unavailable.
+ */
+export declare function resolveCredentialContext({ c, auth, credentials, }: {
+    c: Context;
+    auth: RouteAuth;
+    /** Tenant credential domain handle; absent in local (no-DB) mode. */
+    credentials?: ModelCredentialsStorage;
+}): Promise<CredentialContext | {
+    response: Response;
+}>;
+/**
+ * List the caller's tenant credential records for provider listing, or
+ * `undefined` in local mode (caller should fall back to `AuthStorage`).
+ * Read-only and degradation-friendly: an authenticated caller with the domain
+ * unavailable gets an empty list (sources show `env`/`none`) instead of a 503
+ * so the settings page still renders.
+ */
+export declare function listTenantCredentialsForRequest({ c, auth, credentials, }: {
+    c: Context;
+    auth: RouteAuth;
+    /** Tenant credential domain handle; absent in local (no-DB) mode. */
+    credentials?: ModelCredentialsStorage;
+}): Promise<CredentialRecord[] | undefined>;
+//# sourceMappingURL=provider-credentials.d.ts.map

package/dist/routes/provider-credentials.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-credentials.d.ts","sourceRoot":"","sources":["../../src/routes/provider-credentials.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAEpC,OAAO,KAAK,EACV,gBAAgB,EAChB,gBAAgB,EAChB,uBAAuB,EACxB,MAAM,wCAAwC,CAAC;AAChD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAE5C;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAE1D;AAED;;;;;GAKG;AACH,eAAO,MAAM,oBAAoB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAK3E,CAAC;AAEF,MAAM,MAAM,iBAAiB,GACzB;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,GACjB;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,OAAO,EAAE,uBAAuB,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAExF;;;;GAIG;AACH,wBAAsB,2BAA2B,CAC/C,WAAW,EAAE,uBAAuB,GAAG,SAAS,GAC/C,OAAO,CAAC,uBAAuB,GAAG,SAAS,CAAC,CAQ9C;AAED;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,MAAM,EAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAE9E;AAED;;;;GAIG;AACH,wBAAsB,wBAAwB,CAAC,EAC7C,CAAC,EACD,IAAI,EACJ,WAAW,GACZ,EAAE;IACD,CAAC,EAAE,OAAO,CAAC;IACX,IAAI,EAAE,SAAS,CAAC;IAChB,qEAAqE;IACrE,WAAW,CAAC,EAAE,uBAAuB,CAAC;CACvC,GAAG,OAAO,CAAC,iBAAiB,GAAG;IAAE,QAAQ,EAAE,QAAQ,CAAA;CAAE,CAAC,CAuBtD;AAED;;;;;;GAMG;AACH,wBAAsB,+BAA+B,CAAC,EACpD,CAAC,EACD,IAAI,EACJ,WAAW,GACZ,EAAE;IACD,CAAC,EAAE,OAAO,CAAC;IACX,IAAI,EAAE,SAAS,CAAC;IAChB,qEAAqE;IACrE,WAAW,CAAC,EAAE,uBAAuB,CAAC;CACvC,GAAG,OAAO,CAAC,gBAAgB,EAAE,GAAG,SAAS,CAAC,CAO1C"}