@mastra/factory 0.23.0-alpha.1 → 0.23.0-alpha.2

package/dist/routes/work-items.js.map

@@ -1 +1 @@
-{"version":3,"file":"work-items.js","names":["#boards","#defaultBoards","#resolveTenant","#resolveProject","#auditWorkItemPatch","#proposalRoute"],"sources":["../../src/routes/work-items.ts"],"sourcesContent":["/**\n * Mastra `apiRoutes` for Factory work items (the kanban board).\n *\n * Registered alongside the other `/web/*` routes behind the host auth gate.\n * The board is org-wide: every route re-resolves the caller's `(orgId, userId)`\n * tenant and scopes reads/writes by `orgId`, so any org member sees and moves\n * the same cards while `created_by` / stage history record who acted.\n */\n\nimport type { ApiRoute } from '@mastra/core/server';\nimport { registerApiRoute } from '@mastra/core/server';\nimport type { Context } from 'hono';\n\nimport { createBoardRegistry } from '../boards/index.js';\nimport type { BoardRegistry } from '../boards/index.js';\nimport { EXTERNAL_SOURCE_MISSING_KEY } from '../integrations/issue-reconciler.js';\nimport { decisionRetryable, overtakenDecisionIds } from '../rules/decision-applicability.js';\nimport type {\n  FactoryStartCoordinator,\n  FactoryStartPreparedResult,\n  FactoryStartRequest,\n} from '../rules/start-coordinator.js';\nimport { FactoryStartTransitionError, WorkItemRepositoryError } from '../rules/start-coordinator.js';\nimport type { FactoryTransitionRequest, FactoryTransitionService } from '../rules/transition-service.js';\nimport type { WorkItemSource } from '../rules/types.js';\nimport type { LiveSessions } from '../session/live-sessions.js';\nimport { auditRequestOrigin } from '../storage/domains/audit/domain.js';\nimport type { AuditEmitter } from '../storage/domains/audit/domain.js';\nimport type { WorkItemCommentsStorage } from '../storage/domains/comments/base.js';\nimport type { FactoryProjectsStorage } from '../storage/domains/projects/base.js';\nimport type { QueueHealthStorage } from '../storage/domains/queue-health/base.js';\nimport { thresholdsOrDefault } from '../storage/domains/queue-health/base.js';\nimport type {\n  CreateWorkItemInput,\n  FactoryDeferredDecisionRecord,\n  UpdateWorkItemInput,\n  WorkItemRow,\n  WorkItemsStorage,\n} from '../storage/domains/work-items/base.js';\nimport {\n  FACTORY_PULL_REQUEST_RECONCILIATION_KEY,\n  FACTORY_RULE_MATERIALIZATION_KEY,\n  WorkItemRelationError,\n  WorkItemUpdateConflictError,\n} from '../storage/domains/work-items/base.js';\nimport { computeFactoryMetrics, parseMetricsRange } from '../storage/domains/work-items/metrics.js';\nimport { buildAttentionRoutes, factoryDecisionType } from './attention.js';\nimport { FACTORY_ROUTE_CONTRACTS } from './contracts.js';\nimport type { RouteDependencies } from './route.js';\nimport { Route } from './route.js';\nimport { buildSupervisorRoutes } from './supervisor.js';\n\nexport interface WorkItemRoutesDeps extends RouteDependencies {\n  audit: AuditEmitter;\n  /** Factory projects domain — validates the `:id` project belongs to the caller's org. */\n  projects: FactoryProjectsStorage;\n  /** Work-items domain backing the kanban board. */\n  workItems: WorkItemsStorage;\n  /** Boards installed for this Factory instance. */\n  boardRegistry?: BoardRegistry;\n  /** Comments domain — backs the mention attention provider. */\n  comments: WorkItemCommentsStorage;\n  /** Per-project queue-health threshold config. */\n  queueHealth: QueueHealthStorage;\n  /** Governed stage-transition service. Stage moves 503 when absent. */\n  transitionService?: Pick<FactoryTransitionService, 'transition' | 'configVersion'>;\n  /** Coordinator that binds a Factory run before dispatching its kickoff. */\n  startCoordinator?: Pick<FactoryStartCoordinator, 'prepare'>;\n  /** Materialized sessions, read to report which of the listed cards are being worked or wait on someone. */\n  liveSessions: Pick<LiveSessions, 'isRunning' | 'parked' | 'parkedIn'>;\n}\n\n/** The card as clients see it, without the dispatcher's internal bookkeeping. */\nfunction toWireWorkItem(item: WorkItemRow): WorkItemRow {\n  if (\n    !item.metadata ||\n    (!(FACTORY_RULE_MATERIALIZATION_KEY in item.metadata) &&\n      !(FACTORY_PULL_REQUEST_RECONCILIATION_KEY in item.metadata) &&\n      !(EXTERNAL_SOURCE_MISSING_KEY in item.metadata))\n  ) {\n    return item;\n  }\n  return { ...item, metadata: publicWorkItemMetadata(item.metadata) ?? {} };\n}\n\n/** Session ids of the listed cards that the predicate picks, each once. */\nfunction sessionIdsWhere(items: WorkItemRow[], predicate: (sessionId: string) => boolean): string[] {\n  const picked = new Set<string>();\n  for (const item of items) {\n    for (const { sessionId } of Object.values(item.sessions)) {\n      if (predicate(sessionId)) picked.add(sessionId);\n    }\n  }\n  return [...picked];\n}\n\nfunction loose(c: unknown): Context {\n  return c as Context;\n}\n\nconst UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;\n\nfunction publicWorkItemMetadata(value: Record<string, unknown> | null): Record<string, unknown> | null {\n  if (value === null) return null;\n  const {\n    [FACTORY_RULE_MATERIALIZATION_KEY]: _materialization,\n    [FACTORY_PULL_REQUEST_RECONCILIATION_KEY]: _reconciliation,\n    [EXTERNAL_SOURCE_MISSING_KEY]: _externalSourceMissingAt,\n    ...metadata\n  } = value;\n  return metadata;\n}\n\n/** Validate an untrusted create body. Unknown keys are dropped. */\nexport function parseCreateWorkItem(body: unknown): CreateWorkItemInput | null {\n  const parsed = FACTORY_ROUTE_CONTRACTS.workItemCreate.bodySchema.safeParse(body);\n  return parsed.success ? parsed.data : null;\n}\n\n/** Validate an untrusted patch body. Unknown keys are dropped. */\nexport function parseUpdateWorkItem(body: unknown): UpdateWorkItemInput | null {\n  const parsed = FACTORY_ROUTE_CONTRACTS.workItemUpdate.bodySchema.safeParse(body);\n  return parsed.success ? parsed.data : null;\n}\n\nasync function readJson(c: Context): Promise<unknown | undefined> {\n  try {\n    return await c.req.json();\n  } catch {\n    return undefined;\n  }\n}\n\n/** Fields a PATCH touched, for the bounded `updated` event summary. */\nfunction patchedFields(patch: Record<string, unknown>): string[] {\n  return Object.keys(patch).filter(key => patch[key] !== undefined);\n}\n\nfunction parseTransitionBody(\n  body: unknown,\n): Omit<FactoryTransitionRequest, 'orgId' | 'factoryProjectId' | 'workItemId' | 'actor'> | null {\n  const parsed = FACTORY_ROUTE_CONTRACTS.workItemTransition.bodySchema.safeParse(body);\n  return parsed.success ? parsed.data : null;\n}\n\nfunction parseStartBody(\n  body: unknown,\n  tenant: { orgId: string; userId: string },\n  factoryProjectId: string,\n): FactoryStartRequest | null {\n  const parsed = FACTORY_ROUTE_CONTRACTS.workItemStart.bodySchema.safeParse(body);\n  return parsed.success ? { ...tenant, factoryProjectId, ...parsed.data } : null;\n}\n\nfunction encodeDecisionCursor(decision: FactoryDeferredDecisionRecord): string {\n  return Buffer.from(JSON.stringify([decision.createdAt.toISOString(), decision.id]), 'utf8').toString('base64url');\n}\n\n/** A proposed transition names the seat its lane addresses, so the card can label what approving starts. */\nfunction summaryRole(boards: BoardRegistry, decision: Record<string, unknown>): string | null {\n  if (typeof decision.role === 'string') return decision.role.slice(0, 32);\n  if (decision.type !== 'transition') return null;\n  const { board, stage } = decision;\n  if (typeof board !== 'string' || typeof stage !== 'string') return null;\n  return boards.get(board)?.roleForPhase(stage) ?? null;\n}\n\n/** A linked-card decision names where the card is synced from, so the UI can say \"GitHub\" rather than \"a linked card\". */\nfunction summarySource(decision: Record<string, unknown>): WorkItemSource | null {\n  if (decision.type !== 'upsertLinkedWorkItem') return null;\n  const source = decision.source;\n  return source === 'github-issue' ||\n    source === 'github-pr' ||\n    source === 'gitlab-issue' ||\n    source === 'gitlab-pr' ||\n    source === 'linear-issue' ||\n    source === 'manual'\n    ? source\n    : null;\n}\n\nfunction decisionSummary(boards: BoardRegistry, decision: FactoryDeferredDecisionRecord, overtaken = false) {\n  return {\n    id: decision.id,\n    evaluationId: decision.evaluationId,\n    workItemId: decision.workItemId,\n    type: factoryDecisionType(decision),\n    role: summaryRole(boards, decision.decision),\n    source: summarySource(decision.decision),\n    status: decision.status,\n    attempts: decision.attempts,\n    failureOccurrence: decision.failureOccurrence,\n    failureCode: decision.failureCode,\n    canRetry: decisionRetryable(decision, overtaken),\n    lastError: decision.lastError?.slice(0, 512) ?? null,\n    createdAt: decision.createdAt.toISOString(),\n    updatedAt: decision.updatedAt.toISOString(),\n    completedAt: decision.completedAt?.toISOString() ?? null,\n  };\n}\n\nexport class WorkItemRoutes extends Route<WorkItemRoutesDeps> {\n  #defaultBoards: BoardRegistry | undefined;\n\n  get #boards(): BoardRegistry {\n    return this.deps.boardRegistry ?? (this.#defaultBoards ??= createBoardRegistry());\n  }\n\n  /** Resolve the `(orgId, userId)` tenant or a ready-to-return error response. */\n  async #resolveTenant(c: Context): Promise<{ orgId: string; userId: string } | { response: Response }> {\n    await this.deps.auth.ensureUser(c);\n    const tenant = this.deps.auth.tenant(c);\n    if (!tenant) return { response: c.json({ error: 'unauthorized' }, 401) };\n    if (!tenant.orgId) {\n      return {\n        response: c.json(\n          { error: 'organization_required', message: 'The Factory board requires an organization.' },\n          403,\n        ),\n      };\n    }\n    return { orgId: tenant.orgId, userId: tenant.userId };\n  }\n\n  /**\n   * Resolve the tenant AND the org-owned project from the `:id` param. Work\n   * items hang off a project, so listing/creating requires the project to\n   * exist in the caller's org.\n   */\n  async #resolveProject(\n    c: Context,\n  ): Promise<\n    { orgId: string; userId: string; factoryProjectId: string; defaultModelId: string | null } | { response: Response }\n  > {\n    const tenant = await this.#resolveTenant(c);\n    if ('response' in tenant) return tenant;\n\n    const parsedPath = FACTORY_ROUTE_CONTRACTS.projectGet.pathSchema.safeParse({ id: c.req.param('id') });\n    if (!parsedPath.success) {\n      return { response: c.json({ error: 'Project not found' }, 404) };\n    }\n    const projectId = parsedPath.data.id;\n    const { projects } = this.deps;\n    await projects.ensureReady();\n    const project = await projects.get({ orgId: tenant.orgId, id: projectId });\n    if (!project) {\n      return { response: c.json({ error: 'Project not found' }, 404) };\n    }\n    return { ...tenant, factoryProjectId: projectId, defaultModelId: project.defaultModelId };\n  }\n\n  async #auditWorkItemPatch({\n    context,\n    item,\n    patch,\n  }: {\n    context: Context;\n    item: WorkItemRow;\n    patch: Record<string, unknown>;\n  }): Promise<void> {\n    await this.deps.audit.emit({\n      context,\n      input: {\n        action: 'factory.work_item.updated',\n        factoryProjectId: item.factoryProjectId,\n        targets: [{ type: 'work_item', id: item.id, name: item.title }],\n        metadata: { fields: patchedFields(patch) },\n      },\n    });\n  }\n\n  /** Releasing a parked run and dropping it: same request, opposite outcomes, both audited as consent. */\n  #proposalRoute({\n    verb,\n    settle,\n  }: {\n    verb: 'approve' | 'dismiss';\n    settle: (\n      orgId: string,\n      factoryProjectId: string,\n      decisionId: string,\n      now: Date,\n      userId: string,\n    ) => Promise<FactoryDeferredDecisionRecord | null>;\n  }): ApiRoute {\n    const { audit, workItems } = this.deps;\n    const contract =\n      verb === 'approve' ? FACTORY_ROUTE_CONTRACTS.decisionApprove : FACTORY_ROUTE_CONTRACTS.decisionDismiss;\n    return registerApiRoute(contract.path, {\n      method: contract.method,\n      requiresAuth: false,\n      handler: async c => {\n        const context = loose(c);\n        const resolved = await this.#resolveProject(context);\n        if ('response' in resolved) return resolved.response;\n        const parsedPath = contract.pathSchema.safeParse({\n          id: resolved.factoryProjectId,\n          decisionId: context.req.param('decisionId'),\n        });\n        if (!parsedPath.success) return c.json({ error: 'invalid_decision_id' }, 422);\n        const { decisionId } = parsedPath.data;\n        await workItems.ensureReady();\n        const now = new Date();\n        const decision = await settle(resolved.orgId, resolved.factoryProjectId, decisionId, now, resolved.userId);\n        if (!decision) return c.json({ error: 'decision_not_proposed' }, 409);\n        // Releasing a proposal is a person taking the item on. Approval arms the\n        // item's autonomy inside the same storage transaction (see\n        // approveDeferredDecision), so follow-up runs no longer wait for approval.\n        await audit.emit({\n          context,\n          input: {\n            action: verb === 'approve' ? 'factory.run.approved' : 'factory.run.dismissed',\n            factoryProjectId: resolved.factoryProjectId,\n            targets: decision.workItemId\n              ? [{ type: 'work_item', id: decision.workItemId }]\n              : [{ type: 'rule_decision', id: decision.id }],\n            metadata: { decisionId: decision.id, effect: factoryDecisionType(decision) },\n          },\n        });\n        return c.json({ decision: decisionSummary(this.#boards, decision) });\n      },\n    });\n  }\n\n  /** Build the Factory work-item routes as Mastra `apiRoutes`. */\n  routes(): ApiRoute[] {\n    const { audit, workItems, queueHealth, transitionService, startCoordinator, liveSessions } = this.deps;\n    return [\n      registerApiRoute(FACTORY_ROUTE_CONTRACTS.boardCatalog.path, {\n        method: FACTORY_ROUTE_CONTRACTS.boardCatalog.method,\n        requiresAuth: false,\n        handler: async c => {\n          const resolved = await this.#resolveProject(loose(c));\n          if ('response' in resolved) return resolved.response;\n          return c.json({\n            boards: [...this.#boards].map(([id, board]) => ({\n              id,\n              title: board.title,\n              initialPhase: board.initialPhase,\n              phases: Object.entries(board.phases).map(([phaseId, phase]) => ({\n                id: phaseId,\n                title: phase.title,\n                kind: phase.kind,\n                ...(phase.kind === 'working' ? { role: phase.role } : {}),\n                transitions: (board.transitions[phaseId] ?? []).map(({ outcome, to }) => ({ outcome, to })),\n              })),\n            })),\n          });\n        },\n      }),\n      // ── List the org's work items for a project, and which are being worked ─\n      registerApiRoute(FACTORY_ROUTE_CONTRACTS.workItemList.path, {\n        method: FACTORY_ROUTE_CONTRACTS.workItemList.method,\n        requiresAuth: false,\n        handler: async c => {\n          const resolved = await this.#resolveProject(loose(c));\n          if ('response' in resolved) return resolved.response;\n          await workItems.ensureReady();\n          const items = await workItems.list({\n            orgId: resolved.orgId,\n            factoryProjectId: resolved.factoryProjectId,\n          });\n          return c.json({\n            workItems: items.map(toWireWorkItem),\n            runningSessionIds: sessionIdsWhere(items, sessionId => liveSessions.isRunning(sessionId)),\n            parkedSessionIds: sessionIdsWhere(items, sessionId => liveSessions.parked(sessionId) !== undefined),\n          });\n        },\n      }),\n\n      // ── Flow metrics aggregated over the project's work items ───────────────\n      registerApiRoute(FACTORY_ROUTE_CONTRACTS.metricsGet.path, {\n        method: FACTORY_ROUTE_CONTRACTS.metricsGet.method,\n        requiresAuth: false,\n        handler: async c => {\n          const context = loose(c);\n          const resolved = await this.#resolveProject(context);\n          if ('response' in resolved) return resolved.response;\n          const query = FACTORY_ROUTE_CONTRACTS.metricsGet.querySchema.safeParse({\n            from: context.req.query('from'),\n            to: context.req.query('to'),\n          });\n          if (!query.success) return c.json({ error: 'invalid_metrics_range' }, 400);\n          const { windowStart, windowEnd } = parseMetricsRange(query.data.from, query.data.to, new Date());\n          await workItems.ensureReady();\n          const items = await workItems.list({\n            orgId: resolved.orgId,\n            factoryProjectId: resolved.factoryProjectId,\n          });\n          return c.json({ metrics: computeFactoryMetrics(items, { windowStart, windowEnd }) });\n        },\n      }),\n\n      // ── Per-project queue-health age-threshold config (seconds) ─────────────\n      registerApiRoute(FACTORY_ROUTE_CONTRACTS.healthThresholdsGet.path, {\n        method: FACTORY_ROUTE_CONTRACTS.healthThresholdsGet.method,\n        requiresAuth: false,\n        handler: async c => {\n          const resolved = await this.#resolveProject(loose(c));\n          if ('response' in resolved) return resolved.response;\n          await queueHealth.ensureReady();\n          const stored = await queueHealth.getConfig(resolved.orgId, resolved.factoryProjectId);\n          // Validate at the read choke point: `getConfig` round-trips a stored\n          // JSONB row, and only `saveConfig` validates on write — a corrupted or\n          // hand-edited row (empty / non-ascending) would otherwise flow to the\n          // chart and invert bucket colors. Fall back to the default on invalid.\n          return c.json({ thresholds: thresholdsOrDefault(stored) });\n        },\n      }),\n\n      // ── Bounded durable rule-decision status ────────────────────────────────\n      registerApiRoute(FACTORY_ROUTE_CONTRACTS.decisionList.path, {\n        method: FACTORY_ROUTE_CONTRACTS.decisionList.method,\n        requiresAuth: false,\n        handler: async c => {\n          const context = loose(c);\n          const resolved = await this.#resolveProject(context);\n          if ('response' in resolved) return resolved.response;\n\n          const query = FACTORY_ROUTE_CONTRACTS.decisionList.querySchema.safeParse({\n            statuses: context.req.query('statuses'),\n            before: context.req.query('before'),\n            limit: context.req.query('limit'),\n          });\n          if (!query.success) {\n            const field = query.error.issues[0]?.path[0];\n            return c.json({ error: field === 'before' ? 'invalid_cursor' : 'invalid_decision_query' }, 400);\n          }\n          await workItems.ensureReady();\n          const page = await workItems.listDeferredDecisionPage({\n            orgId: resolved.orgId,\n            factoryProjectId: resolved.factoryProjectId,\n            statuses: query.data.statuses,\n            before: query.data.before,\n            limit: query.data.limit,\n          });\n          const last = page.decisions.at(-1);\n          const overtaken = await overtakenDecisionIds(\n            workItems,\n            this.#boards,\n            resolved,\n            page.decisions.filter(decision => decision.status === 'failed'),\n          );\n          return c.json({\n            decisions: page.decisions.map(decision =>\n              decisionSummary(this.#boards, decision, overtaken.has(decision.id)),\n            ),\n            ...(page.hasMore && last ? { nextCursor: encodeDecisionCursor(last) } : {}),\n          });\n        },\n      }),\n\n      ...buildAttentionRoutes({\n        workItems,\n        boards: this.#boards,\n        comments: this.deps.comments,\n        liveSessions,\n        resolveProject: context => this.#resolveProject(loose(context)),\n      }),\n\n      ...buildSupervisorRoutes({\n        workItems,\n        boards: this.#boards,\n        resolveProject: context => this.#resolveProject(loose(context)),\n      }),\n\n      this.#proposalRoute({ verb: 'approve', settle: workItems.approveDeferredDecision.bind(workItems) }),\n      this.#proposalRoute({ verb: 'dismiss', settle: workItems.dismissDeferredDecision.bind(workItems) }),\n\n      registerApiRoute(FACTORY_ROUTE_CONTRACTS.decisionRetry.path, {\n        method: FACTORY_ROUTE_CONTRACTS.decisionRetry.method,\n        requiresAuth: false,\n        handler: async c => {\n          const context = loose(c);\n          const resolved = await this.#resolveProject(context);\n          if ('response' in resolved) return resolved.response;\n          const parsedPath = FACTORY_ROUTE_CONTRACTS.decisionRetry.pathSchema.safeParse({\n            id: resolved.factoryProjectId,\n            decisionId: context.req.param('decisionId'),\n          });\n          if (!parsedPath.success) return c.json({ error: 'invalid_decision_id' }, 422);\n          const { decisionId } = parsedPath.data;\n          await workItems.ensureReady();\n          const current = await workItems.getDeferredDecision(resolved.orgId, resolved.factoryProjectId, decisionId);\n          if (!current || !decisionRetryable(current, false)) {\n            return c.json({ error: 'decision_not_retryable' }, 409);\n          }\n          // A run decided for a phase the card has left would seat the old role on it.\n          if ((await overtakenDecisionIds(workItems, this.#boards, resolved, [current])).size > 0) {\n            return c.json({ error: 'decision_not_retryable' }, 409);\n          }\n          const decision = await workItems.retryDeferredDecision(\n            resolved.orgId,\n            resolved.factoryProjectId,\n            decisionId,\n            new Date(),\n          );\n          if (!decision) return c.json({ error: 'decision_not_retryable' }, 409);\n          return c.json({ decision: decisionSummary(this.#boards, decision) });\n        },\n      }),\n\n      // ── Create (upsert on sourceKey) a work item ─────────────────────────────\n      registerApiRoute(FACTORY_ROUTE_CONTRACTS.workItemCreate.path, {\n        method: FACTORY_ROUTE_CONTRACTS.workItemCreate.method,\n        requiresAuth: false,\n        handler: async c => {\n          const resolved = await this.#resolveProject(loose(c));\n          if ('response' in resolved) return resolved.response;\n\n          const body = await readJson(loose(c));\n          if (body === undefined) return c.json({ error: 'Invalid JSON body' }, 400);\n          const input = parseCreateWorkItem(body);\n          if (!input) return c.json({ error: 'invalid_work_item' }, 400);\n          const boardId = input.board ?? (input.externalSource?.type === 'pull-request' ? 'review' : 'work');\n          const board = this.#boards.get(boardId);\n          if (!board) return c.json({ error: 'invalid_board', message: `Board '${boardId}' is not installed.` }, 422);\n          const initialStages = input.stages ?? [board.initialPhase];\n          if (initialStages.length !== 1 || initialStages[0] !== board.initialPhase) {\n            return c.json(\n              {\n                error: 'governed_transition_required',\n                message: `New work items must enter through the '${board.initialPhase}' phase of board '${boardId}'.`,\n              },\n              409,\n            );\n          }\n\n          await workItems.ensureReady();\n          try {\n            const result = await workItems.upsert({\n              orgId: resolved.orgId,\n              userId: resolved.userId,\n              factoryProjectId: resolved.factoryProjectId,\n              input: { ...input, board: boardId, stages: initialStages },\n              reuseMode: 'non-stage',\n            });\n            let item = result.item;\n            if (result.created) {\n              if (!transitionService) {\n                await workItems.delete({ orgId: resolved.orgId, id: item.id });\n                return c.json({ error: 'factory_transitions_unavailable' }, 503);\n              }\n              const entered = await transitionService.transition({\n                orgId: resolved.orgId,\n                factoryProjectId: resolved.factoryProjectId,\n                workItemId: item.id,\n                board: boardId,\n                stage: board.initialPhase,\n                expectedRevision: item.revision,\n                actor: { type: 'human', id: resolved.userId },\n                ...auditRequestOrigin(loose(c)),\n                ingress: { type: 'human', identity: `work-item:${item.id}:initial-entry` },\n                cause: 'work_item_created',\n                initialEntry: true,\n              });\n              if (entered.status === 'rejected') {\n                await workItems.delete({ orgId: resolved.orgId, id: item.id });\n                return c.json({ status: 'rejected', code: entered.code, reason: entered.reason }, 422);\n              }\n              item = (await workItems.getForProject(resolved.orgId, resolved.factoryProjectId, item.id)) ?? item;\n              await audit.emit({\n                context: loose(c),\n                input: {\n                  action: 'factory.work_item.created',\n                  factoryProjectId: resolved.factoryProjectId,\n                  targets: [{ type: 'work_item', id: item.id, name: item.title }],\n                  metadata: { externalSource: item.externalSource, stages: item.stages },\n                },\n              });\n            } else {\n              // Source-key reuse: the POST updated an existing card, not created one.\n              const { stages: _stages, sessions: _sessions, ...boundedPatch } = input;\n              await this.#auditWorkItemPatch({\n                context: loose(c),\n                item,\n                patch: boundedPatch as unknown as Record<string, unknown>,\n              });\n            }\n            return c.json({ workItem: toWireWorkItem(item) });\n          } catch (error) {\n            if (error instanceof WorkItemRelationError) {\n              return c.json({ error: error.code, message: error.message }, 400);\n            }\n            throw error;\n          }\n        },\n      }),\n\n      // ── Authoritative stage transition ──────────────────────────────────────\n      registerApiRoute(FACTORY_ROUTE_CONTRACTS.workItemTransition.path, {\n        method: FACTORY_ROUTE_CONTRACTS.workItemTransition.method,\n        requiresAuth: false,\n        handler: async c => {\n          const resolved = await this.#resolveProject(loose(c));\n          if ('response' in resolved) return resolved.response;\n          const context = loose(c);\n          const parsedPath = FACTORY_ROUTE_CONTRACTS.workItemTransition.pathSchema.safeParse({\n            id: resolved.factoryProjectId,\n            workItemId: context.req.param('workItemId'),\n          });\n          if (!parsedPath.success) return c.json({ error: 'Work item not found' }, 404);\n          const { workItemId } = parsedPath.data;\n          const parsed = parseTransitionBody(await readJson(context));\n          if (!parsed) return c.json({ error: 'invalid_transition_request' }, 400);\n          if (!transitionService) {\n            return c.json({ error: 'factory_transition_unavailable' }, 503);\n          }\n          await workItems.ensureReady();\n          const result = await transitionService.transition({\n            ...parsed,\n            orgId: resolved.orgId,\n            factoryProjectId: resolved.factoryProjectId,\n            workItemId,\n            actor: { type: 'human', id: resolved.userId },\n            ...auditRequestOrigin(loose(c)),\n            ingress: {\n              ...parsed.ingress,\n              identity: `human:${resolved.userId}:${parsed.ingress.identity}`,\n            },\n          });\n          if (result.status === 'accepted') return c.json({ result });\n          return c.json({ result }, result.code === 'stale' ? 409 : 422);\n        },\n      }),\n\n      // ── Bind a Factory run before dispatching its kickoff ────────────────────\n      registerApiRoute(FACTORY_ROUTE_CONTRACTS.workItemStart.path, {\n        method: FACTORY_ROUTE_CONTRACTS.workItemStart.method,\n        requiresAuth: false,\n        handler: async c => {\n          const resolved = await this.#resolveProject(loose(c));\n          if ('response' in resolved) return resolved.response;\n          if (!startCoordinator) {\n            return c.json({ error: 'factory_start_unavailable' }, 503);\n          }\n          const input = parseStartBody(await readJson(loose(c)), resolved, resolved.factoryProjectId);\n          if (!input) return c.json({ error: 'invalid_factory_start' }, 400);\n          input.requestContext = loose(c).get('requestContext');\n          input.defaultModelId = resolved.defaultModelId ?? undefined;\n          await workItems.ensureReady();\n          let prepared: FactoryStartPreparedResult;\n          try {\n            prepared = await startCoordinator.prepare(input);\n          } catch (error) {\n            if (error instanceof FactoryStartTransitionError) {\n              return c.json({ result: error.result }, error.result.code === 'stale' ? 409 : 422);\n            }\n            if (error instanceof WorkItemRepositoryError) {\n              return c.json({ error: error.code, message: error.message, candidates: error.candidates }, 409);\n            }\n            throw error;\n          }\n          return c.json({ prepared }, 202);\n        },\n      }),\n\n      // ── Patch non-stage metadata / sessions / title ──────────────────────────\n      registerApiRoute(FACTORY_ROUTE_CONTRACTS.workItemUpdate.path, {\n        method: FACTORY_ROUTE_CONTRACTS.workItemUpdate.method,\n        requiresAuth: false,\n        handler: async c => {\n          const tenant = await this.#resolveTenant(loose(c));\n          if ('response' in tenant) return tenant.response;\n\n          const context = loose(c);\n          const parsedPath = FACTORY_ROUTE_CONTRACTS.workItemUpdate.pathSchema.safeParse({\n            id: context.req.param('id'),\n          });\n          if (!parsedPath.success) return c.json({ error: 'Work item not found' }, 404);\n          const { id } = parsedPath.data;\n\n          const body = await readJson(context);\n          if (body === undefined) return c.json({ error: 'Invalid JSON body' }, 400);\n          const patch = parseUpdateWorkItem(body);\n          if (!patch) return c.json({ error: 'invalid_work_item_patch' }, 400);\n\n          await workItems.ensureReady();\n          const existing = await workItems.get({ orgId: tenant.orgId, id });\n          if (!existing) return c.json({ error: 'Work item not found' }, 404);\n          if (patch.board !== undefined) {\n            const board = this.#boards.get(patch.board);\n            const stage = patch.stages?.length === 1 ? patch.stages[0] : undefined;\n            if (existing.board !== null) {\n              return c.json({ error: 'board_already_assigned' }, 409);\n            }\n            if (!board) {\n              return c.json({ error: 'board_not_installed' }, 400);\n            }\n            if (!stage || !Object.prototype.hasOwnProperty.call(board.phases, stage)) {\n              return c.json({ error: 'invalid_board_migration_phase' }, 400);\n            }\n          } else if (patch.stages !== undefined) {\n            return c.json(\n              { error: 'governed_transition_required', message: 'Use the Factory transition endpoint to move stages.' },\n              409,\n            );\n          }\n\n          try {\n            const updated = await workItems.update({\n              orgId: tenant.orgId,\n              id,\n              userId: tenant.userId,\n              patch,\n              ...(patch.board !== undefined ? { expectedRevision: existing.revision, expectedBoard: null } : {}),\n            });\n            if (!updated) return c.json({ error: 'Work item not found' }, 404);\n            await this.#auditWorkItemPatch({\n              context: loose(c),\n              item: updated.item,\n              patch: patch as Record<string, unknown>,\n            });\n            return c.json({ workItem: toWireWorkItem(updated.item) });\n          } catch (error) {\n            if (error instanceof WorkItemRelationError) {\n              return c.json({ error: error.code, message: error.message }, 400);\n            }\n            if (error instanceof WorkItemUpdateConflictError) {\n              return c.json({ error: error.reason === 'board' ? 'board_already_assigned' : error.code }, 409);\n            }\n            throw error;\n          }\n        },\n      }),\n\n      // ── Remove a work item ───────────────────────────────────────────────────\n      registerApiRoute(FACTORY_ROUTE_CONTRACTS.workItemDelete.path, {\n        method: FACTORY_ROUTE_CONTRACTS.workItemDelete.method,\n        requiresAuth: false,\n        handler: async c => {\n          const tenant = await this.#resolveTenant(loose(c));\n          if ('response' in tenant) return tenant.response;\n\n          const context = loose(c);\n          const parsedPath = FACTORY_ROUTE_CONTRACTS.workItemDelete.pathSchema.safeParse({\n            id: context.req.param('id'),\n          });\n          if (!parsedPath.success) return c.json({ error: 'Work item not found' }, 404);\n          const { id } = parsedPath.data;\n\n          await workItems.ensureReady();\n          const deleted = await workItems.delete({ orgId: tenant.orgId, id });\n          if (!deleted) return c.json({ error: 'Work item not found' }, 404);\n          await audit.emit({\n            context: loose(c),\n            input: {\n              action: 'factory.work_item.deleted',\n              factoryProjectId: deleted.factoryProjectId,\n              targets: [{ type: 'work_item', id: deleted.id, name: deleted.title }],\n            },\n          });\n          return c.json({ ok: true });\n        },\n      }),\n    ];\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;AAyEA,SAAS,eAAe,MAAgC;CACtD,IACE,CAAC,KAAK,YACL,EAAA,mCAAsC,KAAK,aAC1C,EAAA,sCAA6C,KAAK,aAClD,EAAA,6BAAiC,KAAK,WAExC,OAAO;CAET,OAAO;EAAE,GAAG;EAAM,UAAU,uBAAuB,KAAK,QAAQ,KAAK,CAAC;CAAE;AAC1E;;AAGA,SAAS,gBAAgB,OAAsB,WAAqD;CAClG,MAAM,yBAAS,IAAI,IAAY;CAC/B,KAAK,MAAM,QAAQ,OACjB,KAAK,MAAM,EAAE,eAAe,OAAO,OAAO,KAAK,QAAQ,GACrD,IAAI,UAAU,SAAS,GAAG,OAAO,IAAI,SAAS;CAGlD,OAAO,CAAC,GAAG,MAAM;AACnB;AAEA,SAAS,MAAM,GAAqB;CAClC,OAAO;AACT;AAIA,SAAS,uBAAuB,OAAuE;CACrG,IAAI,UAAU,MAAM,OAAO;CAC3B,MAAM,GACH,mCAAmC,mBACnC,0CAA0C,kBAC1C,8BAA8B,0BAC/B,GAAG,aACD;CACJ,OAAO;AACT;;AAGA,SAAgB,oBAAoB,MAA2C;CAC7E,MAAM,SAAS,wBAAwB,eAAe,WAAW,UAAU,IAAI;CAC/E,OAAO,OAAO,UAAU,OAAO,OAAO;AACxC;;AAGA,SAAgB,oBAAoB,MAA2C;CAC7E,MAAM,SAAS,wBAAwB,eAAe,WAAW,UAAU,IAAI;CAC/E,OAAO,OAAO,UAAU,OAAO,OAAO;AACxC;AAEA,eAAe,SAAS,GAA0C;CAChE,IAAI;EACF,OAAO,MAAM,EAAE,IAAI,KAAK;CAC1B,QAAQ;EACN;CACF;AACF;;AAGA,SAAS,cAAc,OAA0C;CAC/D,OAAO,OAAO,KAAK,KAAK,CAAC,CAAC,QAAO,QAAO,MAAM,SAAS,KAAA,CAAS;AAClE;AAEA,SAAS,oBACP,MAC8F;CAC9F,MAAM,SAAS,wBAAwB,mBAAmB,WAAW,UAAU,IAAI;CACnF,OAAO,OAAO,UAAU,OAAO,OAAO;AACxC;AAEA,SAAS,eACP,MACA,QACA,kBAC4B;CAC5B,MAAM,SAAS,wBAAwB,cAAc,WAAW,UAAU,IAAI;CAC9E,OAAO,OAAO,UAAU;EAAE,GAAG;EAAQ;EAAkB,GAAG,OAAO;CAAK,IAAI;AAC5E;AAEA,SAAS,qBAAqB,UAAiD;CAC7E,OAAO,OAAO,KAAK,KAAK,UAAU,CAAC,SAAS,UAAU,YAAY,GAAG,SAAS,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,SAAS,WAAW;AAClH;;AAGA,SAAS,YAAY,QAAuB,UAAkD;CAC5F,IAAI,OAAO,SAAS,SAAS,UAAU,OAAO,SAAS,KAAK,MAAM,GAAG,EAAE;CACvE,IAAI,SAAS,SAAS,cAAc,OAAO;CAC3C,MAAM,EAAE,OAAO,UAAU;CACzB,IAAI,OAAO,UAAU,YAAY,OAAO,UAAU,UAAU,OAAO;CACnE,OAAO,OAAO,IAAI,KAAK,CAAC,EAAE,aAAa,KAAK,KAAK;AACnD;;AAGA,SAAS,cAAc,UAA0D;CAC/E,IAAI,SAAS,SAAS,wBAAwB,OAAO;CACrD,MAAM,SAAS,SAAS;CACxB,OAAO,WAAW,kBAChB,WAAW,eACX,WAAW,kBACX,WAAW,eACX,WAAW,kBACX,WAAW,WACT,SACA;AACN;AAEA,SAAS,gBAAgB,QAAuB,UAAyC,YAAY,OAAO;CAC1G,OAAO;EACL,IAAI,SAAS;EACb,cAAc,SAAS;EACvB,YAAY,SAAS;EACrB,MAAM,oBAAoB,QAAQ;EAClC,MAAM,YAAY,QAAQ,SAAS,QAAQ;EAC3C,QAAQ,cAAc,SAAS,QAAQ;EACvC,QAAQ,SAAS;EACjB,UAAU,SAAS;EACnB,mBAAmB,SAAS;EAC5B,aAAa,SAAS;EACtB,UAAU,kBAAkB,UAAU,SAAS;EAC/C,WAAW,SAAS,WAAW,MAAM,GAAG,GAAG,KAAK;EAChD,WAAW,SAAS,UAAU,YAAY;EAC1C,WAAW,SAAS,UAAU,YAAY;EAC1C,aAAa,SAAS,aAAa,YAAY,KAAK;CACtD;AACF;AAEA,IAAa,iBAAb,cAAoC,MAA0B;CAC5D;CAEA,IAAIA,UAAyB;EAC3B,OAAO,KAAK,KAAK,kBAAkB,KAAKC,mBAAmB,oBAAoB;CACjF;;CAGA,MAAMC,eAAe,GAAiF;EACpG,MAAM,KAAK,KAAK,KAAK,WAAW,CAAC;EACjC,MAAM,SAAS,KAAK,KAAK,KAAK,OAAO,CAAC;EACtC,IAAI,CAAC,QAAQ,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,eAAe,GAAG,GAAG,EAAE;EACvE,IAAI,CAAC,OAAO,OACV,OAAO,EACL,UAAU,EAAE,KACV;GAAE,OAAO;GAAyB,SAAS;EAA8C,GACzF,GACF,EACF;EAEF,OAAO;GAAE,OAAO,OAAO;GAAO,QAAQ,OAAO;EAAO;CACtD;;;;;;CAOA,MAAMC,gBACJ,GAGA;EACA,MAAM,SAAS,MAAM,KAAKD,eAAe,CAAC;EAC1C,IAAI,cAAc,QAAQ,OAAO;EAEjC,MAAM,aAAa,wBAAwB,WAAW,WAAW,UAAU,EAAE,IAAI,EAAE,IAAI,MAAM,IAAI,EAAE,CAAC;EACpG,IAAI,CAAC,WAAW,SACd,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG,EAAE;EAEjE,MAAM,YAAY,WAAW,KAAK;EAClC,MAAM,EAAE,aAAa,KAAK;EAC1B,MAAM,SAAS,YAAY;EAC3B,MAAM,UAAU,MAAM,SAAS,IAAI;GAAE,OAAO,OAAO;GAAO,IAAI;EAAU,CAAC;EACzE,IAAI,CAAC,SACH,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG,EAAE;EAEjE,OAAO;GAAE,GAAG;GAAQ,kBAAkB;GAAW,gBAAgB,QAAQ;EAAe;CAC1F;CAEA,MAAME,oBAAoB,EACxB,SACA,MACA,SAKgB;EAChB,MAAM,KAAK,KAAK,MAAM,KAAK;GACzB;GACA,OAAO;IACL,QAAQ;IACR,kBAAkB,KAAK;IACvB,SAAS,CAAC;KAAE,MAAM;KAAa,IAAI,KAAK;KAAI,MAAM,KAAK;IAAM,CAAC;IAC9D,UAAU,EAAE,QAAQ,cAAc,KAAK,EAAE;GAC3C;EACF,CAAC;CACH;;CAGA,eAAe,EACb,MACA,UAUW;EACX,MAAM,EAAE,OAAO,cAAc,KAAK;EAClC,MAAM,WACJ,SAAS,YAAY,wBAAwB,kBAAkB,wBAAwB;EACzF,OAAO,iBAAiB,SAAS,MAAM;GACrC,QAAQ,SAAS;GACjB,cAAc;GACd,SAAS,OAAM,MAAK;IAClB,MAAM,UAAU,MAAM,CAAC;IACvB,MAAM,WAAW,MAAM,KAAKD,gBAAgB,OAAO;IACnD,IAAI,cAAc,UAAU,OAAO,SAAS;IAC5C,MAAM,aAAa,SAAS,WAAW,UAAU;KAC/C,IAAI,SAAS;KACb,YAAY,QAAQ,IAAI,MAAM,YAAY;IAC5C,CAAC;IACD,IAAI,CAAC,WAAW,SAAS,OAAO,EAAE,KAAK,EAAE,OAAO,sBAAsB,GAAG,GAAG;IAC5E,MAAM,EAAE,eAAe,WAAW;IAClC,MAAM,UAAU,YAAY;IAC5B,MAAM,sBAAM,IAAI,KAAK;IACrB,MAAM,WAAW,MAAM,OAAO,SAAS,OAAO,SAAS,kBAAkB,YAAY,KAAK,SAAS,MAAM;IACzG,IAAI,CAAC,UAAU,OAAO,EAAE,KAAK,EAAE,OAAO,wBAAwB,GAAG,GAAG;IAIpE,MAAM,MAAM,KAAK;KACf;KACA,OAAO;MACL,QAAQ,SAAS,YAAY,yBAAyB;MACtD,kBAAkB,SAAS;MAC3B,SAAS,SAAS,aACd,CAAC;OAAE,MAAM;OAAa,IAAI,SAAS;MAAW,CAAC,IAC/C,CAAC;OAAE,MAAM;OAAiB,IAAI,SAAS;MAAG,CAAC;MAC/C,UAAU;OAAE,YAAY,SAAS;OAAI,QAAQ,oBAAoB,QAAQ;MAAE;KAC7E;IACF,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,UAAU,gBAAgB,KAAKH,SAAS,QAAQ,EAAE,CAAC;GACrE;EACF,CAAC;CACH;;CAGA,SAAqB;EACnB,MAAM,EAAE,OAAO,WAAW,aAAa,mBAAmB,kBAAkB,iBAAiB,KAAK;EAClG,OAAO;GACL,iBAAiB,wBAAwB,aAAa,MAAM;IAC1D,QAAQ,wBAAwB,aAAa;IAC7C,cAAc;IACd,SAAS,OAAM,MAAK;KAClB,MAAM,WAAW,MAAM,KAAKG,gBAAgB,MAAM,CAAC,CAAC;KACpD,IAAI,cAAc,UAAU,OAAO,SAAS;KAC5C,OAAO,EAAE,KAAK,EACZ,QAAQ,CAAC,GAAG,KAAKH,OAAO,CAAC,CAAC,KAAK,CAAC,IAAI,YAAY;MAC9C;MACA,OAAO,MAAM;MACb,cAAc,MAAM;MACpB,QAAQ,OAAO,QAAQ,MAAM,MAAM,CAAC,CAAC,KAAK,CAAC,SAAS,YAAY;OAC9D,IAAI;OACJ,OAAO,MAAM;OACb,MAAM,MAAM;OACZ,GAAI,MAAM,SAAS,YAAY,EAAE,MAAM,MAAM,KAAK,IAAI,CAAC;OACvD,cAAc,MAAM,YAAY,YAAY,CAAC,EAAA,CAAG,KAAK,EAAE,SAAS,UAAU;QAAE;QAAS;OAAG,EAAE;MAC5F,EAAE;KACJ,EAAE,EACJ,CAAC;IACH;GACF,CAAC;GAED,iBAAiB,wBAAwB,aAAa,MAAM;IAC1D,QAAQ,wBAAwB,aAAa;IAC7C,cAAc;IACd,SAAS,OAAM,MAAK;KAClB,MAAM,WAAW,MAAM,KAAKG,gBAAgB,MAAM,CAAC,CAAC;KACpD,IAAI,cAAc,UAAU,OAAO,SAAS;KAC5C,MAAM,UAAU,YAAY;KAC5B,MAAM,QAAQ,MAAM,UAAU,KAAK;MACjC,OAAO,SAAS;MAChB,kBAAkB,SAAS;KAC7B,CAAC;KACD,OAAO,EAAE,KAAK;MACZ,WAAW,MAAM,IAAI,cAAc;MACnC,mBAAmB,gBAAgB,QAAO,cAAa,aAAa,UAAU,SAAS,CAAC;MACxF,kBAAkB,gBAAgB,QAAO,cAAa,aAAa,OAAO,SAAS,MAAM,KAAA,CAAS;KACpG,CAAC;IACH;GACF,CAAC;GAGD,iBAAiB,wBAAwB,WAAW,MAAM;IACxD,QAAQ,wBAAwB,WAAW;IAC3C,cAAc;IACd,SAAS,OAAM,MAAK;KAClB,MAAM,UAAU,MAAM,CAAC;KACvB,MAAM,WAAW,MAAM,KAAKA,gBAAgB,OAAO;KACnD,IAAI,cAAc,UAAU,OAAO,SAAS;KAC5C,MAAM,QAAQ,wBAAwB,WAAW,YAAY,UAAU;MACrE,MAAM,QAAQ,IAAI,MAAM,MAAM;MAC9B,IAAI,QAAQ,IAAI,MAAM,IAAI;KAC5B,CAAC;KACD,IAAI,CAAC,MAAM,SAAS,OAAO,EAAE,KAAK,EAAE,OAAO,wBAAwB,GAAG,GAAG;KACzE,MAAM,EAAE,aAAa,cAAc,kBAAkB,MAAM,KAAK,MAAM,MAAM,KAAK,oBAAI,IAAI,KAAK,CAAC;KAC/F,MAAM,UAAU,YAAY;KAC5B,MAAM,QAAQ,MAAM,UAAU,KAAK;MACjC,OAAO,SAAS;MAChB,kBAAkB,SAAS;KAC7B,CAAC;KACD,OAAO,EAAE,KAAK,EAAE,SAAS,sBAAsB,OAAO;MAAE;MAAa;KAAU,CAAC,EAAE,CAAC;IACrF;GACF,CAAC;GAGD,iBAAiB,wBAAwB,oBAAoB,MAAM;IACjE,QAAQ,wBAAwB,oBAAoB;IACpD,cAAc;IACd,SAAS,OAAM,MAAK;KAClB,MAAM,WAAW,MAAM,KAAKA,gBAAgB,MAAM,CAAC,CAAC;KACpD,IAAI,cAAc,UAAU,OAAO,SAAS;KAC5C,MAAM,YAAY,YAAY;KAC9B,MAAM,SAAS,MAAM,YAAY,UAAU,SAAS,OAAO,SAAS,gBAAgB;KAKpF,OAAO,EAAE,KAAK,EAAE,YAAY,oBAAoB,MAAM,EAAE,CAAC;IAC3D;GACF,CAAC;GAGD,iBAAiB,wBAAwB,aAAa,MAAM;IAC1D,QAAQ,wBAAwB,aAAa;IAC7C,cAAc;IACd,SAAS,OAAM,MAAK;KAClB,MAAM,UAAU,MAAM,CAAC;KACvB,MAAM,WAAW,MAAM,KAAKA,gBAAgB,OAAO;KACnD,IAAI,cAAc,UAAU,OAAO,SAAS;KAE5C,MAAM,QAAQ,wBAAwB,aAAa,YAAY,UAAU;MACvE,UAAU,QAAQ,IAAI,MAAM,UAAU;MACtC,QAAQ,QAAQ,IAAI,MAAM,QAAQ;MAClC,OAAO,QAAQ,IAAI,MAAM,OAAO;KAClC,CAAC;KACD,IAAI,CAAC,MAAM,SAAS;MAClB,MAAM,QAAQ,MAAM,MAAM,OAAO,EAAE,EAAE,KAAK;MAC1C,OAAO,EAAE,KAAK,EAAE,OAAO,UAAU,WAAW,mBAAmB,yBAAyB,GAAG,GAAG;KAChG;KACA,MAAM,UAAU,YAAY;KAC5B,MAAM,OAAO,MAAM,UAAU,yBAAyB;MACpD,OAAO,SAAS;MAChB,kBAAkB,SAAS;MAC3B,UAAU,MAAM,KAAK;MACrB,QAAQ,MAAM,KAAK;MACnB,OAAO,MAAM,KAAK;KACpB,CAAC;KACD,MAAM,OAAO,KAAK,UAAU,GAAG,EAAE;KACjC,MAAM,YAAY,MAAM,qBACtB,WACA,KAAKH,SACL,UACA,KAAK,UAAU,QAAO,aAAY,SAAS,WAAW,QAAQ,CAChE;KACA,OAAO,EAAE,KAAK;MACZ,WAAW,KAAK,UAAU,KAAI,aAC5B,gBAAgB,KAAKA,SAAS,UAAU,UAAU,IAAI,SAAS,EAAE,CAAC,CACpE;MACA,GAAI,KAAK,WAAW,OAAO,EAAE,YAAY,qBAAqB,IAAI,EAAE,IAAI,CAAC;KAC3E,CAAC;IACH;GACF,CAAC;GAED,GAAG,qBAAqB;IACtB;IACA,QAAQ,KAAKA;IACb,UAAU,KAAK,KAAK;IACpB;IACA,iBAAgB,YAAW,KAAKG,gBAAgB,MAAM,OAAO,CAAC;GAChE,CAAC;GAED,GAAG,sBAAsB;IACvB;IACA,QAAQ,KAAKH;IACb,iBAAgB,YAAW,KAAKG,gBAAgB,MAAM,OAAO,CAAC;GAChE,CAAC;GAED,KAAKE,eAAe;IAAE,MAAM;IAAW,QAAQ,UAAU,wBAAwB,KAAK,SAAS;GAAE,CAAC;GAClG,KAAKA,eAAe;IAAE,MAAM;IAAW,QAAQ,UAAU,wBAAwB,KAAK,SAAS;GAAE,CAAC;GAElG,iBAAiB,wBAAwB,cAAc,MAAM;IAC3D,QAAQ,wBAAwB,cAAc;IAC9C,cAAc;IACd,SAAS,OAAM,MAAK;KAClB,MAAM,UAAU,MAAM,CAAC;KACvB,MAAM,WAAW,MAAM,KAAKF,gBAAgB,OAAO;KACnD,IAAI,cAAc,UAAU,OAAO,SAAS;KAC5C,MAAM,aAAa,wBAAwB,cAAc,WAAW,UAAU;MAC5E,IAAI,SAAS;MACb,YAAY,QAAQ,IAAI,MAAM,YAAY;KAC5C,CAAC;KACD,IAAI,CAAC,WAAW,SAAS,OAAO,EAAE,KAAK,EAAE,OAAO,sBAAsB,GAAG,GAAG;KAC5E,MAAM,EAAE,eAAe,WAAW;KAClC,MAAM,UAAU,YAAY;KAC5B,MAAM,UAAU,MAAM,UAAU,oBAAoB,SAAS,OAAO,SAAS,kBAAkB,UAAU;KACzG,IAAI,CAAC,WAAW,CAAC,kBAAkB,SAAS,KAAK,GAC/C,OAAO,EAAE,KAAK,EAAE,OAAO,yBAAyB,GAAG,GAAG;KAGxD,KAAK,MAAM,qBAAqB,WAAW,KAAKH,SAAS,UAAU,CAAC,OAAO,CAAC,EAAA,CAAG,OAAO,GACpF,OAAO,EAAE,KAAK,EAAE,OAAO,yBAAyB,GAAG,GAAG;KAExD,MAAM,WAAW,MAAM,UAAU,sBAC/B,SAAS,OACT,SAAS,kBACT,4BACA,IAAI,KAAK,CACX;KACA,IAAI,CAAC,UAAU,OAAO,EAAE,KAAK,EAAE,OAAO,yBAAyB,GAAG,GAAG;KACrE,OAAO,EAAE,KAAK,EAAE,UAAU,gBAAgB,KAAKA,SAAS,QAAQ,EAAE,CAAC;IACrE;GACF,CAAC;GAGD,iBAAiB,wBAAwB,eAAe,MAAM;IAC5D,QAAQ,wBAAwB,eAAe;IAC/C,cAAc;IACd,SAAS,OAAM,MAAK;KAClB,MAAM,WAAW,MAAM,KAAKG,gBAAgB,MAAM,CAAC,CAAC;KACpD,IAAI,cAAc,UAAU,OAAO,SAAS;KAE5C,MAAM,OAAO,MAAM,SAAS,MAAM,CAAC,CAAC;KACpC,IAAI,SAAS,KAAA,GAAW,OAAO,EAAE,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;KACzE,MAAM,QAAQ,oBAAoB,IAAI;KACtC,IAAI,CAAC,OAAO,OAAO,EAAE,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;KAC7D,MAAM,UAAU,MAAM,UAAU,MAAM,gBAAgB,SAAS,iBAAiB,WAAW;KAC3F,MAAM,QAAQ,KAAKH,QAAQ,IAAI,OAAO;KACtC,IAAI,CAAC,OAAO,OAAO,EAAE,KAAK;MAAE,OAAO;MAAiB,SAAS,UAAU,QAAQ;KAAqB,GAAG,GAAG;KAC1G,MAAM,gBAAgB,MAAM,UAAU,CAAC,MAAM,YAAY;KACzD,IAAI,cAAc,WAAW,KAAK,cAAc,OAAO,MAAM,cAC3D,OAAO,EAAE,KACP;MACE,OAAO;MACP,SAAS,0CAA0C,MAAM,aAAa,oBAAoB,QAAQ;KACpG,GACA,GACF;KAGF,MAAM,UAAU,YAAY;KAC5B,IAAI;MACF,MAAM,SAAS,MAAM,UAAU,OAAO;OACpC,OAAO,SAAS;OAChB,QAAQ,SAAS;OACjB,kBAAkB,SAAS;OAC3B,OAAO;QAAE,GAAG;QAAO,OAAO;QAAS,QAAQ;OAAc;OACzD,WAAW;MACb,CAAC;MACD,IAAI,OAAO,OAAO;MAClB,IAAI,OAAO,SAAS;OAClB,IAAI,CAAC,mBAAmB;QACtB,MAAM,UAAU,OAAO;SAAE,OAAO,SAAS;SAAO,IAAI,KAAK;QAAG,CAAC;QAC7D,OAAO,EAAE,KAAK,EAAE,OAAO,kCAAkC,GAAG,GAAG;OACjE;OACA,MAAM,UAAU,MAAM,kBAAkB,WAAW;QACjD,OAAO,SAAS;QAChB,kBAAkB,SAAS;QAC3B,YAAY,KAAK;QACjB,OAAO;QACP,OAAO,MAAM;QACb,kBAAkB,KAAK;QACvB,OAAO;SAAE,MAAM;SAAS,IAAI,SAAS;QAAO;QAC5C,GAAG,mBAAmB,MAAM,CAAC,CAAC;QAC9B,SAAS;SAAE,MAAM;SAAS,UAAU,aAAa,KAAK,GAAG;QAAgB;QACzE,OAAO;QACP,cAAc;OAChB,CAAC;OACD,IAAI,QAAQ,WAAW,YAAY;QACjC,MAAM,UAAU,OAAO;SAAE,OAAO,SAAS;SAAO,IAAI,KAAK;QAAG,CAAC;QAC7D,OAAO,EAAE,KAAK;SAAE,QAAQ;SAAY,MAAM,QAAQ;SAAM,QAAQ,QAAQ;QAAO,GAAG,GAAG;OACvF;OACA,OAAQ,MAAM,UAAU,cAAc,SAAS,OAAO,SAAS,kBAAkB,KAAK,EAAE,KAAM;OAC9F,MAAM,MAAM,KAAK;QACf,SAAS,MAAM,CAAC;QAChB,OAAO;SACL,QAAQ;SACR,kBAAkB,SAAS;SAC3B,SAAS,CAAC;UAAE,MAAM;UAAa,IAAI,KAAK;UAAI,MAAM,KAAK;SAAM,CAAC;SAC9D,UAAU;UAAE,gBAAgB,KAAK;UAAgB,QAAQ,KAAK;SAAO;QACvE;OACF,CAAC;MACH,OAAO;OAEL,MAAM,EAAE,QAAQ,SAAS,UAAU,WAAW,GAAG,iBAAiB;OAClE,MAAM,KAAKI,oBAAoB;QAC7B,SAAS,MAAM,CAAC;QAChB;QACA,OAAO;OACT,CAAC;MACH;MACA,OAAO,EAAE,KAAK,EAAE,UAAU,eAAe,IAAI,EAAE,CAAC;KAClD,SAAS,OAAO;MACd,IAAI,iBAAiB,uBACnB,OAAO,EAAE,KAAK;OAAE,OAAO,MAAM;OAAM,SAAS,MAAM;MAAQ,GAAG,GAAG;MAElE,MAAM;KACR;IACF;GACF,CAAC;GAGD,iBAAiB,wBAAwB,mBAAmB,MAAM;IAChE,QAAQ,wBAAwB,mBAAmB;IACnD,cAAc;IACd,SAAS,OAAM,MAAK;KAClB,MAAM,WAAW,MAAM,KAAKD,gBAAgB,MAAM,CAAC,CAAC;KACpD,IAAI,cAAc,UAAU,OAAO,SAAS;KAC5C,MAAM,UAAU,MAAM,CAAC;KACvB,MAAM,aAAa,wBAAwB,mBAAmB,WAAW,UAAU;MACjF,IAAI,SAAS;MACb,YAAY,QAAQ,IAAI,MAAM,YAAY;KAC5C,CAAC;KACD,IAAI,CAAC,WAAW,SAAS,OAAO,EAAE,KAAK,EAAE,OAAO,sBAAsB,GAAG,GAAG;KAC5E,MAAM,EAAE,eAAe,WAAW;KAClC,MAAM,SAAS,oBAAoB,MAAM,SAAS,OAAO,CAAC;KAC1D,IAAI,CAAC,QAAQ,OAAO,EAAE,KAAK,EAAE,OAAO,6BAA6B,GAAG,GAAG;KACvE,IAAI,CAAC,mBACH,OAAO,EAAE,KAAK,EAAE,OAAO,iCAAiC,GAAG,GAAG;KAEhE,MAAM,UAAU,YAAY;KAC5B,MAAM,SAAS,MAAM,kBAAkB,WAAW;MAChD,GAAG;MACH,OAAO,SAAS;MAChB,kBAAkB,SAAS;MAC3B;MACA,OAAO;OAAE,MAAM;OAAS,IAAI,SAAS;MAAO;MAC5C,GAAG,mBAAmB,MAAM,CAAC,CAAC;MAC9B,SAAS;OACP,GAAG,OAAO;OACV,UAAU,SAAS,SAAS,OAAO,GAAG,OAAO,QAAQ;MACvD;KACF,CAAC;KACD,IAAI,OAAO,WAAW,YAAY,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC;KAC1D,OAAO,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,SAAS,UAAU,MAAM,GAAG;IAC/D;GACF,CAAC;GAGD,iBAAiB,wBAAwB,cAAc,MAAM;IAC3D,QAAQ,wBAAwB,cAAc;IAC9C,cAAc;IACd,SAAS,OAAM,MAAK;KAClB,MAAM,WAAW,MAAM,KAAKA,gBAAgB,MAAM,CAAC,CAAC;KACpD,IAAI,cAAc,UAAU,OAAO,SAAS;KAC5C,IAAI,CAAC,kBACH,OAAO,EAAE,KAAK,EAAE,OAAO,4BAA4B,GAAG,GAAG;KAE3D,MAAM,QAAQ,eAAe,MAAM,SAAS,MAAM,CAAC,CAAC,GAAG,UAAU,SAAS,gBAAgB;KAC1F,IAAI,CAAC,OAAO,OAAO,EAAE,KAAK,EAAE,OAAO,wBAAwB,GAAG,GAAG;KACjE,MAAM,iBAAiB,MAAM,CAAC,CAAC,CAAC,IAAI,gBAAgB;KACpD,MAAM,iBAAiB,SAAS,kBAAkB,KAAA;KAClD,MAAM,UAAU,YAAY;KAC5B,IAAI;KACJ,IAAI;MACF,WAAW,MAAM,iBAAiB,QAAQ,KAAK;KACjD,SAAS,OAAO;MACd,IAAI,iBAAiB,6BACnB,OAAO,EAAE,KAAK,EAAE,QAAQ,MAAM,OAAO,GAAG,MAAM,OAAO,SAAS,UAAU,MAAM,GAAG;MAEnF,IAAI,iBAAiB,yBACnB,OAAO,EAAE,KAAK;OAAE,OAAO,MAAM;OAAM,SAAS,MAAM;OAAS,YAAY,MAAM;MAAW,GAAG,GAAG;MAEhG,MAAM;KACR;KACA,OAAO,EAAE,KAAK,EAAE,SAAS,GAAG,GAAG;IACjC;GACF,CAAC;GAGD,iBAAiB,wBAAwB,eAAe,MAAM;IAC5D,QAAQ,wBAAwB,eAAe;IAC/C,cAAc;IACd,SAAS,OAAM,MAAK;KAClB,MAAM,SAAS,MAAM,KAAKD,eAAe,MAAM,CAAC,CAAC;KACjD,IAAI,cAAc,QAAQ,OAAO,OAAO;KAExC,MAAM,UAAU,MAAM,CAAC;KACvB,MAAM,aAAa,wBAAwB,eAAe,WAAW,UAAU,EAC7E,IAAI,QAAQ,IAAI,MAAM,IAAI,EAC5B,CAAC;KACD,IAAI,CAAC,WAAW,SAAS,OAAO,EAAE,KAAK,EAAE,OAAO,sBAAsB,GAAG,GAAG;KAC5E,MAAM,EAAE,OAAO,WAAW;KAE1B,MAAM,OAAO,MAAM,SAAS,OAAO;KACnC,IAAI,SAAS,KAAA,GAAW,OAAO,EAAE,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;KACzE,MAAM,QAAQ,oBAAoB,IAAI;KACtC,IAAI,CAAC,OAAO,OAAO,EAAE,KAAK,EAAE,OAAO,0BAA0B,GAAG,GAAG;KAEnE,MAAM,UAAU,YAAY;KAC5B,MAAM,WAAW,MAAM,UAAU,IAAI;MAAE,OAAO,OAAO;MAAO;KAAG,CAAC;KAChE,IAAI,CAAC,UAAU,OAAO,EAAE,KAAK,EAAE,OAAO,sBAAsB,GAAG,GAAG;KAClE,IAAI,MAAM,UAAU,KAAA,GAAW;MAC7B,MAAM,QAAQ,KAAKF,QAAQ,IAAI,MAAM,KAAK;MAC1C,MAAM,QAAQ,MAAM,QAAQ,WAAW,IAAI,MAAM,OAAO,KAAK,KAAA;MAC7D,IAAI,SAAS,UAAU,MACrB,OAAO,EAAE,KAAK,EAAE,OAAO,yBAAyB,GAAG,GAAG;MAExD,IAAI,CAAC,OACH,OAAO,EAAE,KAAK,EAAE,OAAO,sBAAsB,GAAG,GAAG;MAErD,IAAI,CAAC,SAAS,CAAC,OAAO,UAAU,eAAe,KAAK,MAAM,QAAQ,KAAK,GACrE,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAgC,GAAG,GAAG;KAEjE,OAAO,IAAI,MAAM,WAAW,KAAA,GAC1B,OAAO,EAAE,KACP;MAAE,OAAO;MAAgC,SAAS;KAAsD,GACxG,GACF;KAGF,IAAI;MACF,MAAM,UAAU,MAAM,UAAU,OAAO;OACrC,OAAO,OAAO;OACd;OACA,QAAQ,OAAO;OACf;OACA,GAAI,MAAM,UAAU,KAAA,IAAY;QAAE,kBAAkB,SAAS;QAAU,eAAe;OAAK,IAAI,CAAC;MAClG,CAAC;MACD,IAAI,CAAC,SAAS,OAAO,EAAE,KAAK,EAAE,OAAO,sBAAsB,GAAG,GAAG;MACjE,MAAM,KAAKI,oBAAoB;OAC7B,SAAS,MAAM,CAAC;OAChB,MAAM,QAAQ;OACP;MACT,CAAC;MACD,OAAO,EAAE,KAAK,EAAE,UAAU,eAAe,QAAQ,IAAI,EAAE,CAAC;KAC1D,SAAS,OAAO;MACd,IAAI,iBAAiB,uBACnB,OAAO,EAAE,KAAK;OAAE,OAAO,MAAM;OAAM,SAAS,MAAM;MAAQ,GAAG,GAAG;MAElE,IAAI,iBAAiB,6BACnB,OAAO,EAAE,KAAK,EAAE,OAAO,MAAM,WAAW,UAAU,2BAA2B,MAAM,KAAK,GAAG,GAAG;MAEhG,MAAM;KACR;IACF;GACF,CAAC;GAGD,iBAAiB,wBAAwB,eAAe,MAAM;IAC5D,QAAQ,wBAAwB,eAAe;IAC/C,cAAc;IACd,SAAS,OAAM,MAAK;KAClB,MAAM,SAAS,MAAM,KAAKF,eAAe,MAAM,CAAC,CAAC;KACjD,IAAI,cAAc,QAAQ,OAAO,OAAO;KAExC,MAAM,UAAU,MAAM,CAAC;KACvB,MAAM,aAAa,wBAAwB,eAAe,WAAW,UAAU,EAC7E,IAAI,QAAQ,IAAI,MAAM,IAAI,EAC5B,CAAC;KACD,IAAI,CAAC,WAAW,SAAS,OAAO,EAAE,KAAK,EAAE,OAAO,sBAAsB,GAAG,GAAG;KAC5E,MAAM,EAAE,OAAO,WAAW;KAE1B,MAAM,UAAU,YAAY;KAC5B,MAAM,UAAU,MAAM,UAAU,OAAO;MAAE,OAAO,OAAO;MAAO;KAAG,CAAC;KAClE,IAAI,CAAC,SAAS,OAAO,EAAE,KAAK,EAAE,OAAO,sBAAsB,GAAG,GAAG;KACjE,MAAM,MAAM,KAAK;MACf,SAAS,MAAM,CAAC;MAChB,OAAO;OACL,QAAQ;OACR,kBAAkB,QAAQ;OAC1B,SAAS,CAAC;QAAE,MAAM;QAAa,IAAI,QAAQ;QAAI,MAAM,QAAQ;OAAM,CAAC;MACtE;KACF,CAAC;KACD,OAAO,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC;IAC5B;GACF,CAAC;EACH;CACF;AACF"}
+{"version":3,"file":"work-items.js","names":["#boards","#defaultBoards","#resolveTenant","#resolveProject","#auditWorkItemPatch","#proposalRoute"],"sources":["../../src/routes/work-items.ts"],"sourcesContent":["/**\n * Mastra `apiRoutes` for Factory work items (the kanban board).\n *\n * Registered alongside the other `/web/*` routes behind the host auth gate.\n * The board is org-wide: every route re-resolves the caller's `(orgId, userId)`\n * tenant and scopes reads/writes by `orgId`, so any org member sees and moves\n * the same cards while `created_by` / stage history record who acted.\n */\n\nimport type { ApiRoute } from '@mastra/core/server';\nimport { registerApiRoute } from '@mastra/core/server';\nimport type { Context } from 'hono';\n\nimport { createBoardRegistry } from '../boards/index.js';\nimport type { BoardRegistry } from '../boards/index.js';\nimport { EXTERNAL_SOURCE_MISSING_KEY } from '../integrations/issue-reconciler.js';\nimport { decisionRetryable, overtakenDecisionIds } from '../rules/decision-applicability.js';\nimport type {\n  FactoryStartCoordinator,\n  FactoryStartPreparedResult,\n  FactoryStartRequest,\n} from '../rules/start-coordinator.js';\nimport { FactoryStartTransitionError, WorkItemRepositoryError } from '../rules/start-coordinator.js';\nimport type { FactoryTransitionRequest, FactoryTransitionService } from '../rules/transition-service.js';\nimport type { WorkItemSource } from '../rules/types.js';\nimport type { LiveSessions } from '../session/live-sessions.js';\nimport { auditRequestOrigin } from '../storage/domains/audit/domain.js';\nimport type { AuditEmitter } from '../storage/domains/audit/domain.js';\nimport type { WorkItemCommentsStorage } from '../storage/domains/comments/base.js';\nimport type { FactoryProjectsStorage } from '../storage/domains/projects/base.js';\nimport type { QueueHealthStorage } from '../storage/domains/queue-health/base.js';\nimport { thresholdsOrDefault } from '../storage/domains/queue-health/base.js';\nimport type {\n  CreateWorkItemInput,\n  FactoryDeferredDecisionRecord,\n  UpdateWorkItemInput,\n  WorkItemRow,\n  WorkItemsStorage,\n} from '../storage/domains/work-items/base.js';\nimport {\n  FACTORY_PULL_REQUEST_RECONCILIATION_KEY,\n  FACTORY_RULE_MATERIALIZATION_KEY,\n  WorkItemRelationError,\n  WorkItemUpdateConflictError,\n} from '../storage/domains/work-items/base.js';\nimport { computeFactoryMetrics, parseMetricsRange } from '../storage/domains/work-items/metrics.js';\nimport { buildAttentionRoutes, factoryDecisionType } from './attention.js';\nimport { FACTORY_ROUTE_CONTRACTS } from './contracts.js';\nimport type { RouteDependencies } from './route.js';\nimport { Route } from './route.js';\nimport { buildSupervisorRoutes } from './supervisor.js';\n\nexport interface WorkItemRoutesDeps extends RouteDependencies {\n  audit: AuditEmitter;\n  /** Factory projects domain — validates the `:id` project belongs to the caller's org. */\n  projects: FactoryProjectsStorage;\n  /** Work-items domain backing the kanban board. */\n  workItems: WorkItemsStorage;\n  /** Boards installed for this Factory instance. */\n  boardRegistry?: BoardRegistry;\n  /** Comments domain — backs the mention attention provider. */\n  comments: WorkItemCommentsStorage;\n  /** Per-project queue-health threshold config. */\n  queueHealth: QueueHealthStorage;\n  /** Governed stage-transition service. Stage moves 503 when absent. */\n  transitionService?: Pick<FactoryTransitionService, 'transition' | 'configVersion'>;\n  /** Coordinator that binds a Factory run before dispatching its kickoff. */\n  startCoordinator?: Pick<FactoryStartCoordinator, 'prepare'>;\n  /** Materialized sessions, read to report which of the listed cards are being worked or wait on someone. */\n  liveSessions: Pick<LiveSessions, 'isRunning' | 'parked' | 'parkedIn'>;\n}\n\n/** The card as clients see it, without the dispatcher's internal bookkeeping. */\nfunction toWireWorkItem(item: WorkItemRow): WorkItemRow {\n  if (\n    !item.metadata ||\n    (!(FACTORY_RULE_MATERIALIZATION_KEY in item.metadata) &&\n      !(FACTORY_PULL_REQUEST_RECONCILIATION_KEY in item.metadata) &&\n      !(EXTERNAL_SOURCE_MISSING_KEY in item.metadata))\n  ) {\n    return item;\n  }\n  return { ...item, metadata: publicWorkItemMetadata(item.metadata) ?? {} };\n}\n\n/** Session ids of the listed cards that the predicate picks, each once. */\nfunction sessionIdsWhere(items: WorkItemRow[], predicate: (sessionId: string) => boolean): string[] {\n  const picked = new Set<string>();\n  for (const item of items) {\n    for (const { sessionId } of Object.values(item.sessions)) {\n      if (predicate(sessionId)) picked.add(sessionId);\n    }\n  }\n  return [...picked];\n}\n\nfunction loose(c: unknown): Context {\n  return c as Context;\n}\n\nconst UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;\n\nfunction publicWorkItemMetadata(value: Record<string, unknown> | null): Record<string, unknown> | null {\n  if (value === null) return null;\n  const {\n    [FACTORY_RULE_MATERIALIZATION_KEY]: _materialization,\n    [FACTORY_PULL_REQUEST_RECONCILIATION_KEY]: _reconciliation,\n    [EXTERNAL_SOURCE_MISSING_KEY]: _externalSourceMissingAt,\n    ...metadata\n  } = value;\n  return metadata;\n}\n\n/** Validate an untrusted create body. Unknown keys are dropped. */\nexport function parseCreateWorkItem(body: unknown): CreateWorkItemInput | null {\n  const parsed = FACTORY_ROUTE_CONTRACTS.workItemCreate.bodySchema.safeParse(body);\n  return parsed.success ? parsed.data : null;\n}\n\n/** Validate an untrusted patch body. Unknown keys are dropped. */\nexport function parseUpdateWorkItem(body: unknown): UpdateWorkItemInput | null {\n  const parsed = FACTORY_ROUTE_CONTRACTS.workItemUpdate.bodySchema.safeParse(body);\n  return parsed.success ? parsed.data : null;\n}\n\nasync function readJson(c: Context): Promise<unknown | undefined> {\n  try {\n    return await c.req.json();\n  } catch {\n    return undefined;\n  }\n}\n\n/** Fields a PATCH touched, for the bounded `updated` event summary. */\nfunction patchedFields(patch: Record<string, unknown>): string[] {\n  return Object.keys(patch).filter(key => patch[key] !== undefined);\n}\n\nfunction parseTransitionBody(\n  body: unknown,\n): Omit<FactoryTransitionRequest, 'orgId' | 'factoryProjectId' | 'workItemId' | 'actor'> | null {\n  const parsed = FACTORY_ROUTE_CONTRACTS.workItemTransition.bodySchema.safeParse(body);\n  return parsed.success ? parsed.data : null;\n}\n\nfunction parseStartBody(\n  body: unknown,\n  tenant: { orgId: string; userId: string },\n  factoryProjectId: string,\n  modelScope: 'factory' | 'user',\n): FactoryStartRequest | null {\n  const parsed = FACTORY_ROUTE_CONTRACTS.workItemStart.bodySchema.safeParse(body);\n  return parsed.success ? { ...tenant, factoryProjectId, modelScope, ...parsed.data } : null;\n}\n\nfunction encodeDecisionCursor(decision: FactoryDeferredDecisionRecord): string {\n  return Buffer.from(JSON.stringify([decision.createdAt.toISOString(), decision.id]), 'utf8').toString('base64url');\n}\n\n/** A proposed transition names the seat its lane addresses, so the card can label what approving starts. */\nfunction summaryRole(boards: BoardRegistry, decision: Record<string, unknown>): string | null {\n  if (typeof decision.role === 'string') return decision.role.slice(0, 32);\n  if (decision.type !== 'transition') return null;\n  const { board, stage } = decision;\n  if (typeof board !== 'string' || typeof stage !== 'string') return null;\n  return boards.get(board)?.roleForPhase(stage) ?? null;\n}\n\n/** A linked-card decision names where the card is synced from, so the UI can say \"GitHub\" rather than \"a linked card\". */\nfunction summarySource(decision: Record<string, unknown>): WorkItemSource | null {\n  if (decision.type !== 'upsertLinkedWorkItem') return null;\n  const source = decision.source;\n  return source === 'github-issue' ||\n    source === 'github-pr' ||\n    source === 'gitlab-issue' ||\n    source === 'gitlab-pr' ||\n    source === 'linear-issue' ||\n    source === 'manual'\n    ? source\n    : null;\n}\n\nfunction decisionSummary(boards: BoardRegistry, decision: FactoryDeferredDecisionRecord, overtaken = false) {\n  return {\n    id: decision.id,\n    evaluationId: decision.evaluationId,\n    workItemId: decision.workItemId,\n    type: factoryDecisionType(decision),\n    role: summaryRole(boards, decision.decision),\n    source: summarySource(decision.decision),\n    status: decision.status,\n    attempts: decision.attempts,\n    failureOccurrence: decision.failureOccurrence,\n    failureCode: decision.failureCode,\n    canRetry: decisionRetryable(decision, overtaken),\n    lastError: decision.lastError?.slice(0, 512) ?? null,\n    createdAt: decision.createdAt.toISOString(),\n    updatedAt: decision.updatedAt.toISOString(),\n    completedAt: decision.completedAt?.toISOString() ?? null,\n  };\n}\n\nexport class WorkItemRoutes extends Route<WorkItemRoutesDeps> {\n  #defaultBoards: BoardRegistry | undefined;\n\n  get #boards(): BoardRegistry {\n    return this.deps.boardRegistry ?? (this.#defaultBoards ??= createBoardRegistry());\n  }\n\n  /** Resolve the `(orgId, userId)` tenant or a ready-to-return error response. */\n  async #resolveTenant(c: Context): Promise<{ orgId: string; userId: string } | { response: Response }> {\n    await this.deps.auth.ensureUser(c);\n    const tenant = this.deps.auth.tenant(c);\n    if (!tenant) return { response: c.json({ error: 'unauthorized' }, 401) };\n    if (!tenant.orgId) {\n      return {\n        response: c.json(\n          { error: 'organization_required', message: 'The Factory board requires an organization.' },\n          403,\n        ),\n      };\n    }\n    return { orgId: tenant.orgId, userId: tenant.userId };\n  }\n\n  /**\n   * Resolve the tenant AND the org-owned project from the `:id` param. Work\n   * items hang off a project, so listing/creating requires the project to\n   * exist in the caller's org.\n   */\n  async #resolveProject(c: Context): Promise<\n    | {\n        orgId: string;\n        userId: string;\n        factoryProjectId: string;\n        modelScope: 'factory' | 'user';\n        defaultModelId: string | null;\n      }\n    | { response: Response }\n  > {\n    const tenant = await this.#resolveTenant(c);\n    if ('response' in tenant) return tenant;\n\n    const parsedPath = FACTORY_ROUTE_CONTRACTS.projectGet.pathSchema.safeParse({ id: c.req.param('id') });\n    if (!parsedPath.success) {\n      return { response: c.json({ error: 'Project not found' }, 404) };\n    }\n    const projectId = parsedPath.data.id;\n    const { projects } = this.deps;\n    await projects.ensureReady();\n    const project = await projects.get({ orgId: tenant.orgId, id: projectId });\n    if (!project) {\n      return { response: c.json({ error: 'Project not found' }, 404) };\n    }\n    return {\n      ...tenant,\n      factoryProjectId: projectId,\n      modelScope: project.modelScope,\n      defaultModelId: project.modelScope === 'factory' ? project.defaultModelId : null,\n    };\n  }\n\n  async #auditWorkItemPatch({\n    context,\n    item,\n    patch,\n  }: {\n    context: Context;\n    item: WorkItemRow;\n    patch: Record<string, unknown>;\n  }): Promise<void> {\n    await this.deps.audit.emit({\n      context,\n      input: {\n        action: 'factory.work_item.updated',\n        factoryProjectId: item.factoryProjectId,\n        targets: [{ type: 'work_item', id: item.id, name: item.title }],\n        metadata: { fields: patchedFields(patch) },\n      },\n    });\n  }\n\n  /** Releasing a parked run and dropping it: same request, opposite outcomes, both audited as consent. */\n  #proposalRoute({\n    verb,\n    settle,\n  }: {\n    verb: 'approve' | 'dismiss';\n    settle: (\n      orgId: string,\n      factoryProjectId: string,\n      decisionId: string,\n      now: Date,\n      userId: string,\n    ) => Promise<FactoryDeferredDecisionRecord | null>;\n  }): ApiRoute {\n    const { audit, workItems } = this.deps;\n    const contract =\n      verb === 'approve' ? FACTORY_ROUTE_CONTRACTS.decisionApprove : FACTORY_ROUTE_CONTRACTS.decisionDismiss;\n    return registerApiRoute(contract.path, {\n      method: contract.method,\n      requiresAuth: false,\n      handler: async c => {\n        const context = loose(c);\n        const resolved = await this.#resolveProject(context);\n        if ('response' in resolved) return resolved.response;\n        const parsedPath = contract.pathSchema.safeParse({\n          id: resolved.factoryProjectId,\n          decisionId: context.req.param('decisionId'),\n        });\n        if (!parsedPath.success) return c.json({ error: 'invalid_decision_id' }, 422);\n        const { decisionId } = parsedPath.data;\n        await workItems.ensureReady();\n        const now = new Date();\n        const decision = await settle(resolved.orgId, resolved.factoryProjectId, decisionId, now, resolved.userId);\n        if (!decision) return c.json({ error: 'decision_not_proposed' }, 409);\n        // Releasing a proposal is a person taking the item on. Approval arms the\n        // item's autonomy inside the same storage transaction (see\n        // approveDeferredDecision), so follow-up runs no longer wait for approval.\n        await audit.emit({\n          context,\n          input: {\n            action: verb === 'approve' ? 'factory.run.approved' : 'factory.run.dismissed',\n            factoryProjectId: resolved.factoryProjectId,\n            targets: decision.workItemId\n              ? [{ type: 'work_item', id: decision.workItemId }]\n              : [{ type: 'rule_decision', id: decision.id }],\n            metadata: { decisionId: decision.id, effect: factoryDecisionType(decision) },\n          },\n        });\n        return c.json({ decision: decisionSummary(this.#boards, decision) });\n      },\n    });\n  }\n\n  /** Build the Factory work-item routes as Mastra `apiRoutes`. */\n  routes(): ApiRoute[] {\n    const { audit, workItems, queueHealth, transitionService, startCoordinator, liveSessions } = this.deps;\n    return [\n      registerApiRoute(FACTORY_ROUTE_CONTRACTS.boardCatalog.path, {\n        method: FACTORY_ROUTE_CONTRACTS.boardCatalog.method,\n        requiresAuth: false,\n        handler: async c => {\n          const resolved = await this.#resolveProject(loose(c));\n          if ('response' in resolved) return resolved.response;\n          return c.json({\n            boards: [...this.#boards].map(([id, board]) => ({\n              id,\n              title: board.title,\n              initialPhase: board.initialPhase,\n              phases: Object.entries(board.phases).map(([phaseId, phase]) => ({\n                id: phaseId,\n                title: phase.title,\n                kind: phase.kind,\n                ...(phase.kind === 'working' ? { role: phase.role } : {}),\n                transitions: (board.transitions[phaseId] ?? []).map(({ outcome, to }) => ({ outcome, to })),\n              })),\n            })),\n          });\n        },\n      }),\n      // ── List the org's work items for a project, and which are being worked ─\n      registerApiRoute(FACTORY_ROUTE_CONTRACTS.workItemList.path, {\n        method: FACTORY_ROUTE_CONTRACTS.workItemList.method,\n        requiresAuth: false,\n        handler: async c => {\n          const resolved = await this.#resolveProject(loose(c));\n          if ('response' in resolved) return resolved.response;\n          await workItems.ensureReady();\n          const items = await workItems.list({\n            orgId: resolved.orgId,\n            factoryProjectId: resolved.factoryProjectId,\n          });\n          return c.json({\n            workItems: items.map(toWireWorkItem),\n            runningSessionIds: sessionIdsWhere(items, sessionId => liveSessions.isRunning(sessionId)),\n            parkedSessionIds: sessionIdsWhere(items, sessionId => liveSessions.parked(sessionId) !== undefined),\n          });\n        },\n      }),\n\n      // ── Flow metrics aggregated over the project's work items ───────────────\n      registerApiRoute(FACTORY_ROUTE_CONTRACTS.metricsGet.path, {\n        method: FACTORY_ROUTE_CONTRACTS.metricsGet.method,\n        requiresAuth: false,\n        handler: async c => {\n          const context = loose(c);\n          const resolved = await this.#resolveProject(context);\n          if ('response' in resolved) return resolved.response;\n          const query = FACTORY_ROUTE_CONTRACTS.metricsGet.querySchema.safeParse({\n            from: context.req.query('from'),\n            to: context.req.query('to'),\n          });\n          if (!query.success) return c.json({ error: 'invalid_metrics_range' }, 400);\n          const { windowStart, windowEnd } = parseMetricsRange(query.data.from, query.data.to, new Date());\n          await workItems.ensureReady();\n          const items = await workItems.list({\n            orgId: resolved.orgId,\n            factoryProjectId: resolved.factoryProjectId,\n          });\n          return c.json({ metrics: computeFactoryMetrics(items, { windowStart, windowEnd }) });\n        },\n      }),\n\n      // ── Per-project queue-health age-threshold config (seconds) ─────────────\n      registerApiRoute(FACTORY_ROUTE_CONTRACTS.healthThresholdsGet.path, {\n        method: FACTORY_ROUTE_CONTRACTS.healthThresholdsGet.method,\n        requiresAuth: false,\n        handler: async c => {\n          const resolved = await this.#resolveProject(loose(c));\n          if ('response' in resolved) return resolved.response;\n          await queueHealth.ensureReady();\n          const stored = await queueHealth.getConfig(resolved.orgId, resolved.factoryProjectId);\n          // Validate at the read choke point: `getConfig` round-trips a stored\n          // JSONB row, and only `saveConfig` validates on write — a corrupted or\n          // hand-edited row (empty / non-ascending) would otherwise flow to the\n          // chart and invert bucket colors. Fall back to the default on invalid.\n          return c.json({ thresholds: thresholdsOrDefault(stored) });\n        },\n      }),\n\n      // ── Bounded durable rule-decision status ────────────────────────────────\n      registerApiRoute(FACTORY_ROUTE_CONTRACTS.decisionList.path, {\n        method: FACTORY_ROUTE_CONTRACTS.decisionList.method,\n        requiresAuth: false,\n        handler: async c => {\n          const context = loose(c);\n          const resolved = await this.#resolveProject(context);\n          if ('response' in resolved) return resolved.response;\n\n          const query = FACTORY_ROUTE_CONTRACTS.decisionList.querySchema.safeParse({\n            statuses: context.req.query('statuses'),\n            before: context.req.query('before'),\n            limit: context.req.query('limit'),\n          });\n          if (!query.success) {\n            const field = query.error.issues[0]?.path[0];\n            return c.json({ error: field === 'before' ? 'invalid_cursor' : 'invalid_decision_query' }, 400);\n          }\n          await workItems.ensureReady();\n          const page = await workItems.listDeferredDecisionPage({\n            orgId: resolved.orgId,\n            factoryProjectId: resolved.factoryProjectId,\n            statuses: query.data.statuses,\n            before: query.data.before,\n            limit: query.data.limit,\n          });\n          const last = page.decisions.at(-1);\n          const overtaken = await overtakenDecisionIds(\n            workItems,\n            this.#boards,\n            resolved,\n            page.decisions.filter(decision => decision.status === 'failed'),\n          );\n          return c.json({\n            decisions: page.decisions.map(decision =>\n              decisionSummary(this.#boards, decision, overtaken.has(decision.id)),\n            ),\n            ...(page.hasMore && last ? { nextCursor: encodeDecisionCursor(last) } : {}),\n          });\n        },\n      }),\n\n      ...buildAttentionRoutes({\n        workItems,\n        boards: this.#boards,\n        comments: this.deps.comments,\n        liveSessions,\n        resolveProject: context => this.#resolveProject(loose(context)),\n      }),\n\n      ...buildSupervisorRoutes({\n        workItems,\n        boards: this.#boards,\n        resolveProject: context => this.#resolveProject(loose(context)),\n      }),\n\n      this.#proposalRoute({ verb: 'approve', settle: workItems.approveDeferredDecision.bind(workItems) }),\n      this.#proposalRoute({ verb: 'dismiss', settle: workItems.dismissDeferredDecision.bind(workItems) }),\n\n      registerApiRoute(FACTORY_ROUTE_CONTRACTS.decisionRetry.path, {\n        method: FACTORY_ROUTE_CONTRACTS.decisionRetry.method,\n        requiresAuth: false,\n        handler: async c => {\n          const context = loose(c);\n          const resolved = await this.#resolveProject(context);\n          if ('response' in resolved) return resolved.response;\n          const parsedPath = FACTORY_ROUTE_CONTRACTS.decisionRetry.pathSchema.safeParse({\n            id: resolved.factoryProjectId,\n            decisionId: context.req.param('decisionId'),\n          });\n          if (!parsedPath.success) return c.json({ error: 'invalid_decision_id' }, 422);\n          const { decisionId } = parsedPath.data;\n          await workItems.ensureReady();\n          const current = await workItems.getDeferredDecision(resolved.orgId, resolved.factoryProjectId, decisionId);\n          if (!current || !decisionRetryable(current, false)) {\n            return c.json({ error: 'decision_not_retryable' }, 409);\n          }\n          // A run decided for a phase the card has left would seat the old role on it.\n          if ((await overtakenDecisionIds(workItems, this.#boards, resolved, [current])).size > 0) {\n            return c.json({ error: 'decision_not_retryable' }, 409);\n          }\n          const decision = await workItems.retryDeferredDecision(\n            resolved.orgId,\n            resolved.factoryProjectId,\n            decisionId,\n            new Date(),\n          );\n          if (!decision) return c.json({ error: 'decision_not_retryable' }, 409);\n          return c.json({ decision: decisionSummary(this.#boards, decision) });\n        },\n      }),\n\n      // ── Create (upsert on sourceKey) a work item ─────────────────────────────\n      registerApiRoute(FACTORY_ROUTE_CONTRACTS.workItemCreate.path, {\n        method: FACTORY_ROUTE_CONTRACTS.workItemCreate.method,\n        requiresAuth: false,\n        handler: async c => {\n          const resolved = await this.#resolveProject(loose(c));\n          if ('response' in resolved) return resolved.response;\n\n          const body = await readJson(loose(c));\n          if (body === undefined) return c.json({ error: 'Invalid JSON body' }, 400);\n          const input = parseCreateWorkItem(body);\n          if (!input) return c.json({ error: 'invalid_work_item' }, 400);\n          const boardId = input.board ?? (input.externalSource?.type === 'pull-request' ? 'review' : 'work');\n          const board = this.#boards.get(boardId);\n          if (!board) return c.json({ error: 'invalid_board', message: `Board '${boardId}' is not installed.` }, 422);\n          const initialStages = input.stages ?? [board.initialPhase];\n          if (initialStages.length !== 1 || initialStages[0] !== board.initialPhase) {\n            return c.json(\n              {\n                error: 'governed_transition_required',\n                message: `New work items must enter through the '${board.initialPhase}' phase of board '${boardId}'.`,\n              },\n              409,\n            );\n          }\n\n          await workItems.ensureReady();\n          try {\n            const result = await workItems.upsert({\n              orgId: resolved.orgId,\n              userId: resolved.userId,\n              factoryProjectId: resolved.factoryProjectId,\n              input: { ...input, board: boardId, stages: initialStages },\n              reuseMode: 'non-stage',\n            });\n            let item = result.item;\n            if (result.created) {\n              if (!transitionService) {\n                await workItems.delete({ orgId: resolved.orgId, id: item.id });\n                return c.json({ error: 'factory_transitions_unavailable' }, 503);\n              }\n              const entered = await transitionService.transition({\n                orgId: resolved.orgId,\n                factoryProjectId: resolved.factoryProjectId,\n                workItemId: item.id,\n                board: boardId,\n                stage: board.initialPhase,\n                expectedRevision: item.revision,\n                actor: { type: 'human', id: resolved.userId },\n                ...auditRequestOrigin(loose(c)),\n                ingress: { type: 'human', identity: `work-item:${item.id}:initial-entry` },\n                cause: 'work_item_created',\n                initialEntry: true,\n              });\n              if (entered.status === 'rejected') {\n                await workItems.delete({ orgId: resolved.orgId, id: item.id });\n                return c.json({ status: 'rejected', code: entered.code, reason: entered.reason }, 422);\n              }\n              item = (await workItems.getForProject(resolved.orgId, resolved.factoryProjectId, item.id)) ?? item;\n              await audit.emit({\n                context: loose(c),\n                input: {\n                  action: 'factory.work_item.created',\n                  factoryProjectId: resolved.factoryProjectId,\n                  targets: [{ type: 'work_item', id: item.id, name: item.title }],\n                  metadata: { externalSource: item.externalSource, stages: item.stages },\n                },\n              });\n            } else {\n              // Source-key reuse: the POST updated an existing card, not created one.\n              const { stages: _stages, sessions: _sessions, ...boundedPatch } = input;\n              await this.#auditWorkItemPatch({\n                context: loose(c),\n                item,\n                patch: boundedPatch as unknown as Record<string, unknown>,\n              });\n            }\n            return c.json({ workItem: toWireWorkItem(item) });\n          } catch (error) {\n            if (error instanceof WorkItemRelationError) {\n              return c.json({ error: error.code, message: error.message }, 400);\n            }\n            throw error;\n          }\n        },\n      }),\n\n      // ── Authoritative stage transition ──────────────────────────────────────\n      registerApiRoute(FACTORY_ROUTE_CONTRACTS.workItemTransition.path, {\n        method: FACTORY_ROUTE_CONTRACTS.workItemTransition.method,\n        requiresAuth: false,\n        handler: async c => {\n          const resolved = await this.#resolveProject(loose(c));\n          if ('response' in resolved) return resolved.response;\n          const context = loose(c);\n          const parsedPath = FACTORY_ROUTE_CONTRACTS.workItemTransition.pathSchema.safeParse({\n            id: resolved.factoryProjectId,\n            workItemId: context.req.param('workItemId'),\n          });\n          if (!parsedPath.success) return c.json({ error: 'Work item not found' }, 404);\n          const { workItemId } = parsedPath.data;\n          const parsed = parseTransitionBody(await readJson(context));\n          if (!parsed) return c.json({ error: 'invalid_transition_request' }, 400);\n          if (!transitionService) {\n            return c.json({ error: 'factory_transition_unavailable' }, 503);\n          }\n          await workItems.ensureReady();\n          const result = await transitionService.transition({\n            ...parsed,\n            orgId: resolved.orgId,\n            factoryProjectId: resolved.factoryProjectId,\n            workItemId,\n            actor: { type: 'human', id: resolved.userId },\n            ...auditRequestOrigin(loose(c)),\n            ingress: {\n              ...parsed.ingress,\n              identity: `human:${resolved.userId}:${parsed.ingress.identity}`,\n            },\n          });\n          if (result.status === 'accepted') return c.json({ result });\n          return c.json({ result }, result.code === 'stale' ? 409 : 422);\n        },\n      }),\n\n      // ── Bind a Factory run before dispatching its kickoff ────────────────────\n      registerApiRoute(FACTORY_ROUTE_CONTRACTS.workItemStart.path, {\n        method: FACTORY_ROUTE_CONTRACTS.workItemStart.method,\n        requiresAuth: false,\n        handler: async c => {\n          const resolved = await this.#resolveProject(loose(c));\n          if ('response' in resolved) return resolved.response;\n          if (!startCoordinator) {\n            return c.json({ error: 'factory_start_unavailable' }, 503);\n          }\n          const input = parseStartBody(\n            await readJson(loose(c)),\n            resolved,\n            resolved.factoryProjectId,\n            resolved.modelScope,\n          );\n          if (!input) return c.json({ error: 'invalid_factory_start' }, 400);\n          input.requestContext = loose(c).get('requestContext');\n          input.defaultModelId = resolved.defaultModelId ?? undefined;\n          await workItems.ensureReady();\n          let prepared: FactoryStartPreparedResult;\n          try {\n            prepared = await startCoordinator.prepare(input);\n          } catch (error) {\n            if (error instanceof FactoryStartTransitionError) {\n              return c.json({ result: error.result }, error.result.code === 'stale' ? 409 : 422);\n            }\n            if (error instanceof WorkItemRepositoryError) {\n              return c.json({ error: error.code, message: error.message, candidates: error.candidates }, 409);\n            }\n            throw error;\n          }\n          return c.json({ prepared }, 202);\n        },\n      }),\n\n      // ── Patch non-stage metadata / sessions / title ──────────────────────────\n      registerApiRoute(FACTORY_ROUTE_CONTRACTS.workItemUpdate.path, {\n        method: FACTORY_ROUTE_CONTRACTS.workItemUpdate.method,\n        requiresAuth: false,\n        handler: async c => {\n          const tenant = await this.#resolveTenant(loose(c));\n          if ('response' in tenant) return tenant.response;\n\n          const context = loose(c);\n          const parsedPath = FACTORY_ROUTE_CONTRACTS.workItemUpdate.pathSchema.safeParse({\n            id: context.req.param('id'),\n          });\n          if (!parsedPath.success) return c.json({ error: 'Work item not found' }, 404);\n          const { id } = parsedPath.data;\n\n          const body = await readJson(context);\n          if (body === undefined) return c.json({ error: 'Invalid JSON body' }, 400);\n          const patch = parseUpdateWorkItem(body);\n          if (!patch) return c.json({ error: 'invalid_work_item_patch' }, 400);\n\n          await workItems.ensureReady();\n          const existing = await workItems.get({ orgId: tenant.orgId, id });\n          if (!existing) return c.json({ error: 'Work item not found' }, 404);\n          if (patch.board !== undefined) {\n            const board = this.#boards.get(patch.board);\n            const stage = patch.stages?.length === 1 ? patch.stages[0] : undefined;\n            if (existing.board !== null) {\n              return c.json({ error: 'board_already_assigned' }, 409);\n            }\n            if (!board) {\n              return c.json({ error: 'board_not_installed' }, 400);\n            }\n            if (!stage || !Object.prototype.hasOwnProperty.call(board.phases, stage)) {\n              return c.json({ error: 'invalid_board_migration_phase' }, 400);\n            }\n          } else if (patch.stages !== undefined) {\n            return c.json(\n              { error: 'governed_transition_required', message: 'Use the Factory transition endpoint to move stages.' },\n              409,\n            );\n          }\n\n          try {\n            const updated = await workItems.update({\n              orgId: tenant.orgId,\n              id,\n              userId: tenant.userId,\n              patch,\n              ...(patch.board !== undefined ? { expectedRevision: existing.revision, expectedBoard: null } : {}),\n            });\n            if (!updated) return c.json({ error: 'Work item not found' }, 404);\n            await this.#auditWorkItemPatch({\n              context: loose(c),\n              item: updated.item,\n              patch: patch as Record<string, unknown>,\n            });\n            return c.json({ workItem: toWireWorkItem(updated.item) });\n          } catch (error) {\n            if (error instanceof WorkItemRelationError) {\n              return c.json({ error: error.code, message: error.message }, 400);\n            }\n            if (error instanceof WorkItemUpdateConflictError) {\n              return c.json({ error: error.reason === 'board' ? 'board_already_assigned' : error.code }, 409);\n            }\n            throw error;\n          }\n        },\n      }),\n\n      // ── Remove a work item ───────────────────────────────────────────────────\n      registerApiRoute(FACTORY_ROUTE_CONTRACTS.workItemDelete.path, {\n        method: FACTORY_ROUTE_CONTRACTS.workItemDelete.method,\n        requiresAuth: false,\n        handler: async c => {\n          const tenant = await this.#resolveTenant(loose(c));\n          if ('response' in tenant) return tenant.response;\n\n          const context = loose(c);\n          const parsedPath = FACTORY_ROUTE_CONTRACTS.workItemDelete.pathSchema.safeParse({\n            id: context.req.param('id'),\n          });\n          if (!parsedPath.success) return c.json({ error: 'Work item not found' }, 404);\n          const { id } = parsedPath.data;\n\n          await workItems.ensureReady();\n          const deleted = await workItems.delete({ orgId: tenant.orgId, id });\n          if (!deleted) return c.json({ error: 'Work item not found' }, 404);\n          await audit.emit({\n            context: loose(c),\n            input: {\n              action: 'factory.work_item.deleted',\n              factoryProjectId: deleted.factoryProjectId,\n              targets: [{ type: 'work_item', id: deleted.id, name: deleted.title }],\n            },\n          });\n          return c.json({ ok: true });\n        },\n      }),\n    ];\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;AAyEA,SAAS,eAAe,MAAgC;CACtD,IACE,CAAC,KAAK,YACL,EAAA,mCAAsC,KAAK,aAC1C,EAAA,sCAA6C,KAAK,aAClD,EAAA,6BAAiC,KAAK,WAExC,OAAO;CAET,OAAO;EAAE,GAAG;EAAM,UAAU,uBAAuB,KAAK,QAAQ,KAAK,CAAC;CAAE;AAC1E;;AAGA,SAAS,gBAAgB,OAAsB,WAAqD;CAClG,MAAM,yBAAS,IAAI,IAAY;CAC/B,KAAK,MAAM,QAAQ,OACjB,KAAK,MAAM,EAAE,eAAe,OAAO,OAAO,KAAK,QAAQ,GACrD,IAAI,UAAU,SAAS,GAAG,OAAO,IAAI,SAAS;CAGlD,OAAO,CAAC,GAAG,MAAM;AACnB;AAEA,SAAS,MAAM,GAAqB;CAClC,OAAO;AACT;AAIA,SAAS,uBAAuB,OAAuE;CACrG,IAAI,UAAU,MAAM,OAAO;CAC3B,MAAM,GACH,mCAAmC,mBACnC,0CAA0C,kBAC1C,8BAA8B,0BAC/B,GAAG,aACD;CACJ,OAAO;AACT;;AAGA,SAAgB,oBAAoB,MAA2C;CAC7E,MAAM,SAAS,wBAAwB,eAAe,WAAW,UAAU,IAAI;CAC/E,OAAO,OAAO,UAAU,OAAO,OAAO;AACxC;;AAGA,SAAgB,oBAAoB,MAA2C;CAC7E,MAAM,SAAS,wBAAwB,eAAe,WAAW,UAAU,IAAI;CAC/E,OAAO,OAAO,UAAU,OAAO,OAAO;AACxC;AAEA,eAAe,SAAS,GAA0C;CAChE,IAAI;EACF,OAAO,MAAM,EAAE,IAAI,KAAK;CAC1B,QAAQ;EACN;CACF;AACF;;AAGA,SAAS,cAAc,OAA0C;CAC/D,OAAO,OAAO,KAAK,KAAK,CAAC,CAAC,QAAO,QAAO,MAAM,SAAS,KAAA,CAAS;AAClE;AAEA,SAAS,oBACP,MAC8F;CAC9F,MAAM,SAAS,wBAAwB,mBAAmB,WAAW,UAAU,IAAI;CACnF,OAAO,OAAO,UAAU,OAAO,OAAO;AACxC;AAEA,SAAS,eACP,MACA,QACA,kBACA,YAC4B;CAC5B,MAAM,SAAS,wBAAwB,cAAc,WAAW,UAAU,IAAI;CAC9E,OAAO,OAAO,UAAU;EAAE,GAAG;EAAQ;EAAkB;EAAY,GAAG,OAAO;CAAK,IAAI;AACxF;AAEA,SAAS,qBAAqB,UAAiD;CAC7E,OAAO,OAAO,KAAK,KAAK,UAAU,CAAC,SAAS,UAAU,YAAY,GAAG,SAAS,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,SAAS,WAAW;AAClH;;AAGA,SAAS,YAAY,QAAuB,UAAkD;CAC5F,IAAI,OAAO,SAAS,SAAS,UAAU,OAAO,SAAS,KAAK,MAAM,GAAG,EAAE;CACvE,IAAI,SAAS,SAAS,cAAc,OAAO;CAC3C,MAAM,EAAE,OAAO,UAAU;CACzB,IAAI,OAAO,UAAU,YAAY,OAAO,UAAU,UAAU,OAAO;CACnE,OAAO,OAAO,IAAI,KAAK,CAAC,EAAE,aAAa,KAAK,KAAK;AACnD;;AAGA,SAAS,cAAc,UAA0D;CAC/E,IAAI,SAAS,SAAS,wBAAwB,OAAO;CACrD,MAAM,SAAS,SAAS;CACxB,OAAO,WAAW,kBAChB,WAAW,eACX,WAAW,kBACX,WAAW,eACX,WAAW,kBACX,WAAW,WACT,SACA;AACN;AAEA,SAAS,gBAAgB,QAAuB,UAAyC,YAAY,OAAO;CAC1G,OAAO;EACL,IAAI,SAAS;EACb,cAAc,SAAS;EACvB,YAAY,SAAS;EACrB,MAAM,oBAAoB,QAAQ;EAClC,MAAM,YAAY,QAAQ,SAAS,QAAQ;EAC3C,QAAQ,cAAc,SAAS,QAAQ;EACvC,QAAQ,SAAS;EACjB,UAAU,SAAS;EACnB,mBAAmB,SAAS;EAC5B,aAAa,SAAS;EACtB,UAAU,kBAAkB,UAAU,SAAS;EAC/C,WAAW,SAAS,WAAW,MAAM,GAAG,GAAG,KAAK;EAChD,WAAW,SAAS,UAAU,YAAY;EAC1C,WAAW,SAAS,UAAU,YAAY;EAC1C,aAAa,SAAS,aAAa,YAAY,KAAK;CACtD;AACF;AAEA,IAAa,iBAAb,cAAoC,MAA0B;CAC5D;CAEA,IAAIA,UAAyB;EAC3B,OAAO,KAAK,KAAK,kBAAkB,KAAKC,mBAAmB,oBAAoB;CACjF;;CAGA,MAAMC,eAAe,GAAiF;EACpG,MAAM,KAAK,KAAK,KAAK,WAAW,CAAC;EACjC,MAAM,SAAS,KAAK,KAAK,KAAK,OAAO,CAAC;EACtC,IAAI,CAAC,QAAQ,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,eAAe,GAAG,GAAG,EAAE;EACvE,IAAI,CAAC,OAAO,OACV,OAAO,EACL,UAAU,EAAE,KACV;GAAE,OAAO;GAAyB,SAAS;EAA8C,GACzF,GACF,EACF;EAEF,OAAO;GAAE,OAAO,OAAO;GAAO,QAAQ,OAAO;EAAO;CACtD;;;;;;CAOA,MAAMC,gBAAgB,GASpB;EACA,MAAM,SAAS,MAAM,KAAKD,eAAe,CAAC;EAC1C,IAAI,cAAc,QAAQ,OAAO;EAEjC,MAAM,aAAa,wBAAwB,WAAW,WAAW,UAAU,EAAE,IAAI,EAAE,IAAI,MAAM,IAAI,EAAE,CAAC;EACpG,IAAI,CAAC,WAAW,SACd,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG,EAAE;EAEjE,MAAM,YAAY,WAAW,KAAK;EAClC,MAAM,EAAE,aAAa,KAAK;EAC1B,MAAM,SAAS,YAAY;EAC3B,MAAM,UAAU,MAAM,SAAS,IAAI;GAAE,OAAO,OAAO;GAAO,IAAI;EAAU,CAAC;EACzE,IAAI,CAAC,SACH,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG,EAAE;EAEjE,OAAO;GACL,GAAG;GACH,kBAAkB;GAClB,YAAY,QAAQ;GACpB,gBAAgB,QAAQ,eAAe,YAAY,QAAQ,iBAAiB;EAC9E;CACF;CAEA,MAAME,oBAAoB,EACxB,SACA,MACA,SAKgB;EAChB,MAAM,KAAK,KAAK,MAAM,KAAK;GACzB;GACA,OAAO;IACL,QAAQ;IACR,kBAAkB,KAAK;IACvB,SAAS,CAAC;KAAE,MAAM;KAAa,IAAI,KAAK;KAAI,MAAM,KAAK;IAAM,CAAC;IAC9D,UAAU,EAAE,QAAQ,cAAc,KAAK,EAAE;GAC3C;EACF,CAAC;CACH;;CAGA,eAAe,EACb,MACA,UAUW;EACX,MAAM,EAAE,OAAO,cAAc,KAAK;EAClC,MAAM,WACJ,SAAS,YAAY,wBAAwB,kBAAkB,wBAAwB;EACzF,OAAO,iBAAiB,SAAS,MAAM;GACrC,QAAQ,SAAS;GACjB,cAAc;GACd,SAAS,OAAM,MAAK;IAClB,MAAM,UAAU,MAAM,CAAC;IACvB,MAAM,WAAW,MAAM,KAAKD,gBAAgB,OAAO;IACnD,IAAI,cAAc,UAAU,OAAO,SAAS;IAC5C,MAAM,aAAa,SAAS,WAAW,UAAU;KAC/C,IAAI,SAAS;KACb,YAAY,QAAQ,IAAI,MAAM,YAAY;IAC5C,CAAC;IACD,IAAI,CAAC,WAAW,SAAS,OAAO,EAAE,KAAK,EAAE,OAAO,sBAAsB,GAAG,GAAG;IAC5E,MAAM,EAAE,eAAe,WAAW;IAClC,MAAM,UAAU,YAAY;IAC5B,MAAM,sBAAM,IAAI,KAAK;IACrB,MAAM,WAAW,MAAM,OAAO,SAAS,OAAO,SAAS,kBAAkB,YAAY,KAAK,SAAS,MAAM;IACzG,IAAI,CAAC,UAAU,OAAO,EAAE,KAAK,EAAE,OAAO,wBAAwB,GAAG,GAAG;IAIpE,MAAM,MAAM,KAAK;KACf;KACA,OAAO;MACL,QAAQ,SAAS,YAAY,yBAAyB;MACtD,kBAAkB,SAAS;MAC3B,SAAS,SAAS,aACd,CAAC;OAAE,MAAM;OAAa,IAAI,SAAS;MAAW,CAAC,IAC/C,CAAC;OAAE,MAAM;OAAiB,IAAI,SAAS;MAAG,CAAC;MAC/C,UAAU;OAAE,YAAY,SAAS;OAAI,QAAQ,oBAAoB,QAAQ;MAAE;KAC7E;IACF,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,UAAU,gBAAgB,KAAKH,SAAS,QAAQ,EAAE,CAAC;GACrE;EACF,CAAC;CACH;;CAGA,SAAqB;EACnB,MAAM,EAAE,OAAO,WAAW,aAAa,mBAAmB,kBAAkB,iBAAiB,KAAK;EAClG,OAAO;GACL,iBAAiB,wBAAwB,aAAa,MAAM;IAC1D,QAAQ,wBAAwB,aAAa;IAC7C,cAAc;IACd,SAAS,OAAM,MAAK;KAClB,MAAM,WAAW,MAAM,KAAKG,gBAAgB,MAAM,CAAC,CAAC;KACpD,IAAI,cAAc,UAAU,OAAO,SAAS;KAC5C,OAAO,EAAE,KAAK,EACZ,QAAQ,CAAC,GAAG,KAAKH,OAAO,CAAC,CAAC,KAAK,CAAC,IAAI,YAAY;MAC9C;MACA,OAAO,MAAM;MACb,cAAc,MAAM;MACpB,QAAQ,OAAO,QAAQ,MAAM,MAAM,CAAC,CAAC,KAAK,CAAC,SAAS,YAAY;OAC9D,IAAI;OACJ,OAAO,MAAM;OACb,MAAM,MAAM;OACZ,GAAI,MAAM,SAAS,YAAY,EAAE,MAAM,MAAM,KAAK,IAAI,CAAC;OACvD,cAAc,MAAM,YAAY,YAAY,CAAC,EAAA,CAAG,KAAK,EAAE,SAAS,UAAU;QAAE;QAAS;OAAG,EAAE;MAC5F,EAAE;KACJ,EAAE,EACJ,CAAC;IACH;GACF,CAAC;GAED,iBAAiB,wBAAwB,aAAa,MAAM;IAC1D,QAAQ,wBAAwB,aAAa;IAC7C,cAAc;IACd,SAAS,OAAM,MAAK;KAClB,MAAM,WAAW,MAAM,KAAKG,gBAAgB,MAAM,CAAC,CAAC;KACpD,IAAI,cAAc,UAAU,OAAO,SAAS;KAC5C,MAAM,UAAU,YAAY;KAC5B,MAAM,QAAQ,MAAM,UAAU,KAAK;MACjC,OAAO,SAAS;MAChB,kBAAkB,SAAS;KAC7B,CAAC;KACD,OAAO,EAAE,KAAK;MACZ,WAAW,MAAM,IAAI,cAAc;MACnC,mBAAmB,gBAAgB,QAAO,cAAa,aAAa,UAAU,SAAS,CAAC;MACxF,kBAAkB,gBAAgB,QAAO,cAAa,aAAa,OAAO,SAAS,MAAM,KAAA,CAAS;KACpG,CAAC;IACH;GACF,CAAC;GAGD,iBAAiB,wBAAwB,WAAW,MAAM;IACxD,QAAQ,wBAAwB,WAAW;IAC3C,cAAc;IACd,SAAS,OAAM,MAAK;KAClB,MAAM,UAAU,MAAM,CAAC;KACvB,MAAM,WAAW,MAAM,KAAKA,gBAAgB,OAAO;KACnD,IAAI,cAAc,UAAU,OAAO,SAAS;KAC5C,MAAM,QAAQ,wBAAwB,WAAW,YAAY,UAAU;MACrE,MAAM,QAAQ,IAAI,MAAM,MAAM;MAC9B,IAAI,QAAQ,IAAI,MAAM,IAAI;KAC5B,CAAC;KACD,IAAI,CAAC,MAAM,SAAS,OAAO,EAAE,KAAK,EAAE,OAAO,wBAAwB,GAAG,GAAG;KACzE,MAAM,EAAE,aAAa,cAAc,kBAAkB,MAAM,KAAK,MAAM,MAAM,KAAK,oBAAI,IAAI,KAAK,CAAC;KAC/F,MAAM,UAAU,YAAY;KAC5B,MAAM,QAAQ,MAAM,UAAU,KAAK;MACjC,OAAO,SAAS;MAChB,kBAAkB,SAAS;KAC7B,CAAC;KACD,OAAO,EAAE,KAAK,EAAE,SAAS,sBAAsB,OAAO;MAAE;MAAa;KAAU,CAAC,EAAE,CAAC;IACrF;GACF,CAAC;GAGD,iBAAiB,wBAAwB,oBAAoB,MAAM;IACjE,QAAQ,wBAAwB,oBAAoB;IACpD,cAAc;IACd,SAAS,OAAM,MAAK;KAClB,MAAM,WAAW,MAAM,KAAKA,gBAAgB,MAAM,CAAC,CAAC;KACpD,IAAI,cAAc,UAAU,OAAO,SAAS;KAC5C,MAAM,YAAY,YAAY;KAC9B,MAAM,SAAS,MAAM,YAAY,UAAU,SAAS,OAAO,SAAS,gBAAgB;KAKpF,OAAO,EAAE,KAAK,EAAE,YAAY,oBAAoB,MAAM,EAAE,CAAC;IAC3D;GACF,CAAC;GAGD,iBAAiB,wBAAwB,aAAa,MAAM;IAC1D,QAAQ,wBAAwB,aAAa;IAC7C,cAAc;IACd,SAAS,OAAM,MAAK;KAClB,MAAM,UAAU,MAAM,CAAC;KACvB,MAAM,WAAW,MAAM,KAAKA,gBAAgB,OAAO;KACnD,IAAI,cAAc,UAAU,OAAO,SAAS;KAE5C,MAAM,QAAQ,wBAAwB,aAAa,YAAY,UAAU;MACvE,UAAU,QAAQ,IAAI,MAAM,UAAU;MACtC,QAAQ,QAAQ,IAAI,MAAM,QAAQ;MAClC,OAAO,QAAQ,IAAI,MAAM,OAAO;KAClC,CAAC;KACD,IAAI,CAAC,MAAM,SAAS;MAClB,MAAM,QAAQ,MAAM,MAAM,OAAO,EAAE,EAAE,KAAK;MAC1C,OAAO,EAAE,KAAK,EAAE,OAAO,UAAU,WAAW,mBAAmB,yBAAyB,GAAG,GAAG;KAChG;KACA,MAAM,UAAU,YAAY;KAC5B,MAAM,OAAO,MAAM,UAAU,yBAAyB;MACpD,OAAO,SAAS;MAChB,kBAAkB,SAAS;MAC3B,UAAU,MAAM,KAAK;MACrB,QAAQ,MAAM,KAAK;MACnB,OAAO,MAAM,KAAK;KACpB,CAAC;KACD,MAAM,OAAO,KAAK,UAAU,GAAG,EAAE;KACjC,MAAM,YAAY,MAAM,qBACtB,WACA,KAAKH,SACL,UACA,KAAK,UAAU,QAAO,aAAY,SAAS,WAAW,QAAQ,CAChE;KACA,OAAO,EAAE,KAAK;MACZ,WAAW,KAAK,UAAU,KAAI,aAC5B,gBAAgB,KAAKA,SAAS,UAAU,UAAU,IAAI,SAAS,EAAE,CAAC,CACpE;MACA,GAAI,KAAK,WAAW,OAAO,EAAE,YAAY,qBAAqB,IAAI,EAAE,IAAI,CAAC;KAC3E,CAAC;IACH;GACF,CAAC;GAED,GAAG,qBAAqB;IACtB;IACA,QAAQ,KAAKA;IACb,UAAU,KAAK,KAAK;IACpB;IACA,iBAAgB,YAAW,KAAKG,gBAAgB,MAAM,OAAO,CAAC;GAChE,CAAC;GAED,GAAG,sBAAsB;IACvB;IACA,QAAQ,KAAKH;IACb,iBAAgB,YAAW,KAAKG,gBAAgB,MAAM,OAAO,CAAC;GAChE,CAAC;GAED,KAAKE,eAAe;IAAE,MAAM;IAAW,QAAQ,UAAU,wBAAwB,KAAK,SAAS;GAAE,CAAC;GAClG,KAAKA,eAAe;IAAE,MAAM;IAAW,QAAQ,UAAU,wBAAwB,KAAK,SAAS;GAAE,CAAC;GAElG,iBAAiB,wBAAwB,cAAc,MAAM;IAC3D,QAAQ,wBAAwB,cAAc;IAC9C,cAAc;IACd,SAAS,OAAM,MAAK;KAClB,MAAM,UAAU,MAAM,CAAC;KACvB,MAAM,WAAW,MAAM,KAAKF,gBAAgB,OAAO;KACnD,IAAI,cAAc,UAAU,OAAO,SAAS;KAC5C,MAAM,aAAa,wBAAwB,cAAc,WAAW,UAAU;MAC5E,IAAI,SAAS;MACb,YAAY,QAAQ,IAAI,MAAM,YAAY;KAC5C,CAAC;KACD,IAAI,CAAC,WAAW,SAAS,OAAO,EAAE,KAAK,EAAE,OAAO,sBAAsB,GAAG,GAAG;KAC5E,MAAM,EAAE,eAAe,WAAW;KAClC,MAAM,UAAU,YAAY;KAC5B,MAAM,UAAU,MAAM,UAAU,oBAAoB,SAAS,OAAO,SAAS,kBAAkB,UAAU;KACzG,IAAI,CAAC,WAAW,CAAC,kBAAkB,SAAS,KAAK,GAC/C,OAAO,EAAE,KAAK,EAAE,OAAO,yBAAyB,GAAG,GAAG;KAGxD,KAAK,MAAM,qBAAqB,WAAW,KAAKH,SAAS,UAAU,CAAC,OAAO,CAAC,EAAA,CAAG,OAAO,GACpF,OAAO,EAAE,KAAK,EAAE,OAAO,yBAAyB,GAAG,GAAG;KAExD,MAAM,WAAW,MAAM,UAAU,sBAC/B,SAAS,OACT,SAAS,kBACT,4BACA,IAAI,KAAK,CACX;KACA,IAAI,CAAC,UAAU,OAAO,EAAE,KAAK,EAAE,OAAO,yBAAyB,GAAG,GAAG;KACrE,OAAO,EAAE,KAAK,EAAE,UAAU,gBAAgB,KAAKA,SAAS,QAAQ,EAAE,CAAC;IACrE;GACF,CAAC;GAGD,iBAAiB,wBAAwB,eAAe,MAAM;IAC5D,QAAQ,wBAAwB,eAAe;IAC/C,cAAc;IACd,SAAS,OAAM,MAAK;KAClB,MAAM,WAAW,MAAM,KAAKG,gBAAgB,MAAM,CAAC,CAAC;KACpD,IAAI,cAAc,UAAU,OAAO,SAAS;KAE5C,MAAM,OAAO,MAAM,SAAS,MAAM,CAAC,CAAC;KACpC,IAAI,SAAS,KAAA,GAAW,OAAO,EAAE,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;KACzE,MAAM,QAAQ,oBAAoB,IAAI;KACtC,IAAI,CAAC,OAAO,OAAO,EAAE,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;KAC7D,MAAM,UAAU,MAAM,UAAU,MAAM,gBAAgB,SAAS,iBAAiB,WAAW;KAC3F,MAAM,QAAQ,KAAKH,QAAQ,IAAI,OAAO;KACtC,IAAI,CAAC,OAAO,OAAO,EAAE,KAAK;MAAE,OAAO;MAAiB,SAAS,UAAU,QAAQ;KAAqB,GAAG,GAAG;KAC1G,MAAM,gBAAgB,MAAM,UAAU,CAAC,MAAM,YAAY;KACzD,IAAI,cAAc,WAAW,KAAK,cAAc,OAAO,MAAM,cAC3D,OAAO,EAAE,KACP;MACE,OAAO;MACP,SAAS,0CAA0C,MAAM,aAAa,oBAAoB,QAAQ;KACpG,GACA,GACF;KAGF,MAAM,UAAU,YAAY;KAC5B,IAAI;MACF,MAAM,SAAS,MAAM,UAAU,OAAO;OACpC,OAAO,SAAS;OAChB,QAAQ,SAAS;OACjB,kBAAkB,SAAS;OAC3B,OAAO;QAAE,GAAG;QAAO,OAAO;QAAS,QAAQ;OAAc;OACzD,WAAW;MACb,CAAC;MACD,IAAI,OAAO,OAAO;MAClB,IAAI,OAAO,SAAS;OAClB,IAAI,CAAC,mBAAmB;QACtB,MAAM,UAAU,OAAO;SAAE,OAAO,SAAS;SAAO,IAAI,KAAK;QAAG,CAAC;QAC7D,OAAO,EAAE,KAAK,EAAE,OAAO,kCAAkC,GAAG,GAAG;OACjE;OACA,MAAM,UAAU,MAAM,kBAAkB,WAAW;QACjD,OAAO,SAAS;QAChB,kBAAkB,SAAS;QAC3B,YAAY,KAAK;QACjB,OAAO;QACP,OAAO,MAAM;QACb,kBAAkB,KAAK;QACvB,OAAO;SAAE,MAAM;SAAS,IAAI,SAAS;QAAO;QAC5C,GAAG,mBAAmB,MAAM,CAAC,CAAC;QAC9B,SAAS;SAAE,MAAM;SAAS,UAAU,aAAa,KAAK,GAAG;QAAgB;QACzE,OAAO;QACP,cAAc;OAChB,CAAC;OACD,IAAI,QAAQ,WAAW,YAAY;QACjC,MAAM,UAAU,OAAO;SAAE,OAAO,SAAS;SAAO,IAAI,KAAK;QAAG,CAAC;QAC7D,OAAO,EAAE,KAAK;SAAE,QAAQ;SAAY,MAAM,QAAQ;SAAM,QAAQ,QAAQ;QAAO,GAAG,GAAG;OACvF;OACA,OAAQ,MAAM,UAAU,cAAc,SAAS,OAAO,SAAS,kBAAkB,KAAK,EAAE,KAAM;OAC9F,MAAM,MAAM,KAAK;QACf,SAAS,MAAM,CAAC;QAChB,OAAO;SACL,QAAQ;SACR,kBAAkB,SAAS;SAC3B,SAAS,CAAC;UAAE,MAAM;UAAa,IAAI,KAAK;UAAI,MAAM,KAAK;SAAM,CAAC;SAC9D,UAAU;UAAE,gBAAgB,KAAK;UAAgB,QAAQ,KAAK;SAAO;QACvE;OACF,CAAC;MACH,OAAO;OAEL,MAAM,EAAE,QAAQ,SAAS,UAAU,WAAW,GAAG,iBAAiB;OAClE,MAAM,KAAKI,oBAAoB;QAC7B,SAAS,MAAM,CAAC;QAChB;QACA,OAAO;OACT,CAAC;MACH;MACA,OAAO,EAAE,KAAK,EAAE,UAAU,eAAe,IAAI,EAAE,CAAC;KAClD,SAAS,OAAO;MACd,IAAI,iBAAiB,uBACnB,OAAO,EAAE,KAAK;OAAE,OAAO,MAAM;OAAM,SAAS,MAAM;MAAQ,GAAG,GAAG;MAElE,MAAM;KACR;IACF;GACF,CAAC;GAGD,iBAAiB,wBAAwB,mBAAmB,MAAM;IAChE,QAAQ,wBAAwB,mBAAmB;IACnD,cAAc;IACd,SAAS,OAAM,MAAK;KAClB,MAAM,WAAW,MAAM,KAAKD,gBAAgB,MAAM,CAAC,CAAC;KACpD,IAAI,cAAc,UAAU,OAAO,SAAS;KAC5C,MAAM,UAAU,MAAM,CAAC;KACvB,MAAM,aAAa,wBAAwB,mBAAmB,WAAW,UAAU;MACjF,IAAI,SAAS;MACb,YAAY,QAAQ,IAAI,MAAM,YAAY;KAC5C,CAAC;KACD,IAAI,CAAC,WAAW,SAAS,OAAO,EAAE,KAAK,EAAE,OAAO,sBAAsB,GAAG,GAAG;KAC5E,MAAM,EAAE,eAAe,WAAW;KAClC,MAAM,SAAS,oBAAoB,MAAM,SAAS,OAAO,CAAC;KAC1D,IAAI,CAAC,QAAQ,OAAO,EAAE,KAAK,EAAE,OAAO,6BAA6B,GAAG,GAAG;KACvE,IAAI,CAAC,mBACH,OAAO,EAAE,KAAK,EAAE,OAAO,iCAAiC,GAAG,GAAG;KAEhE,MAAM,UAAU,YAAY;KAC5B,MAAM,SAAS,MAAM,kBAAkB,WAAW;MAChD,GAAG;MACH,OAAO,SAAS;MAChB,kBAAkB,SAAS;MAC3B;MACA,OAAO;OAAE,MAAM;OAAS,IAAI,SAAS;MAAO;MAC5C,GAAG,mBAAmB,MAAM,CAAC,CAAC;MAC9B,SAAS;OACP,GAAG,OAAO;OACV,UAAU,SAAS,SAAS,OAAO,GAAG,OAAO,QAAQ;MACvD;KACF,CAAC;KACD,IAAI,OAAO,WAAW,YAAY,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC;KAC1D,OAAO,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,SAAS,UAAU,MAAM,GAAG;IAC/D;GACF,CAAC;GAGD,iBAAiB,wBAAwB,cAAc,MAAM;IAC3D,QAAQ,wBAAwB,cAAc;IAC9C,cAAc;IACd,SAAS,OAAM,MAAK;KAClB,MAAM,WAAW,MAAM,KAAKA,gBAAgB,MAAM,CAAC,CAAC;KACpD,IAAI,cAAc,UAAU,OAAO,SAAS;KAC5C,IAAI,CAAC,kBACH,OAAO,EAAE,KAAK,EAAE,OAAO,4BAA4B,GAAG,GAAG;KAE3D,MAAM,QAAQ,eACZ,MAAM,SAAS,MAAM,CAAC,CAAC,GACvB,UACA,SAAS,kBACT,SAAS,UACX;KACA,IAAI,CAAC,OAAO,OAAO,EAAE,KAAK,EAAE,OAAO,wBAAwB,GAAG,GAAG;KACjE,MAAM,iBAAiB,MAAM,CAAC,CAAC,CAAC,IAAI,gBAAgB;KACpD,MAAM,iBAAiB,SAAS,kBAAkB,KAAA;KAClD,MAAM,UAAU,YAAY;KAC5B,IAAI;KACJ,IAAI;MACF,WAAW,MAAM,iBAAiB,QAAQ,KAAK;KACjD,SAAS,OAAO;MACd,IAAI,iBAAiB,6BACnB,OAAO,EAAE,KAAK,EAAE,QAAQ,MAAM,OAAO,GAAG,MAAM,OAAO,SAAS,UAAU,MAAM,GAAG;MAEnF,IAAI,iBAAiB,yBACnB,OAAO,EAAE,KAAK;OAAE,OAAO,MAAM;OAAM,SAAS,MAAM;OAAS,YAAY,MAAM;MAAW,GAAG,GAAG;MAEhG,MAAM;KACR;KACA,OAAO,EAAE,KAAK,EAAE,SAAS,GAAG,GAAG;IACjC;GACF,CAAC;GAGD,iBAAiB,wBAAwB,eAAe,MAAM;IAC5D,QAAQ,wBAAwB,eAAe;IAC/C,cAAc;IACd,SAAS,OAAM,MAAK;KAClB,MAAM,SAAS,MAAM,KAAKD,eAAe,MAAM,CAAC,CAAC;KACjD,IAAI,cAAc,QAAQ,OAAO,OAAO;KAExC,MAAM,UAAU,MAAM,CAAC;KACvB,MAAM,aAAa,wBAAwB,eAAe,WAAW,UAAU,EAC7E,IAAI,QAAQ,IAAI,MAAM,IAAI,EAC5B,CAAC;KACD,IAAI,CAAC,WAAW,SAAS,OAAO,EAAE,KAAK,EAAE,OAAO,sBAAsB,GAAG,GAAG;KAC5E,MAAM,EAAE,OAAO,WAAW;KAE1B,MAAM,OAAO,MAAM,SAAS,OAAO;KACnC,IAAI,SAAS,KAAA,GAAW,OAAO,EAAE,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;KACzE,MAAM,QAAQ,oBAAoB,IAAI;KACtC,IAAI,CAAC,OAAO,OAAO,EAAE,KAAK,EAAE,OAAO,0BAA0B,GAAG,GAAG;KAEnE,MAAM,UAAU,YAAY;KAC5B,MAAM,WAAW,MAAM,UAAU,IAAI;MAAE,OAAO,OAAO;MAAO;KAAG,CAAC;KAChE,IAAI,CAAC,UAAU,OAAO,EAAE,KAAK,EAAE,OAAO,sBAAsB,GAAG,GAAG;KAClE,IAAI,MAAM,UAAU,KAAA,GAAW;MAC7B,MAAM,QAAQ,KAAKF,QAAQ,IAAI,MAAM,KAAK;MAC1C,MAAM,QAAQ,MAAM,QAAQ,WAAW,IAAI,MAAM,OAAO,KAAK,KAAA;MAC7D,IAAI,SAAS,UAAU,MACrB,OAAO,EAAE,KAAK,EAAE,OAAO,yBAAyB,GAAG,GAAG;MAExD,IAAI,CAAC,OACH,OAAO,EAAE,KAAK,EAAE,OAAO,sBAAsB,GAAG,GAAG;MAErD,IAAI,CAAC,SAAS,CAAC,OAAO,UAAU,eAAe,KAAK,MAAM,QAAQ,KAAK,GACrE,OAAO,EAAE,KAAK,EAAE,OAAO,gCAAgC,GAAG,GAAG;KAEjE,OAAO,IAAI,MAAM,WAAW,KAAA,GAC1B,OAAO,EAAE,KACP;MAAE,OAAO;MAAgC,SAAS;KAAsD,GACxG,GACF;KAGF,IAAI;MACF,MAAM,UAAU,MAAM,UAAU,OAAO;OACrC,OAAO,OAAO;OACd;OACA,QAAQ,OAAO;OACf;OACA,GAAI,MAAM,UAAU,KAAA,IAAY;QAAE,kBAAkB,SAAS;QAAU,eAAe;OAAK,IAAI,CAAC;MAClG,CAAC;MACD,IAAI,CAAC,SAAS,OAAO,EAAE,KAAK,EAAE,OAAO,sBAAsB,GAAG,GAAG;MACjE,MAAM,KAAKI,oBAAoB;OAC7B,SAAS,MAAM,CAAC;OAChB,MAAM,QAAQ;OACP;MACT,CAAC;MACD,OAAO,EAAE,KAAK,EAAE,UAAU,eAAe,QAAQ,IAAI,EAAE,CAAC;KAC1D,SAAS,OAAO;MACd,IAAI,iBAAiB,uBACnB,OAAO,EAAE,KAAK;OAAE,OAAO,MAAM;OAAM,SAAS,MAAM;MAAQ,GAAG,GAAG;MAElE,IAAI,iBAAiB,6BACnB,OAAO,EAAE,KAAK,EAAE,OAAO,MAAM,WAAW,UAAU,2BAA2B,MAAM,KAAK,GAAG,GAAG;MAEhG,MAAM;KACR;IACF;GACF,CAAC;GAGD,iBAAiB,wBAAwB,eAAe,MAAM;IAC5D,QAAQ,wBAAwB,eAAe;IAC/C,cAAc;IACd,SAAS,OAAM,MAAK;KAClB,MAAM,SAAS,MAAM,KAAKF,eAAe,MAAM,CAAC,CAAC;KACjD,IAAI,cAAc,QAAQ,OAAO,OAAO;KAExC,MAAM,UAAU,MAAM,CAAC;KACvB,MAAM,aAAa,wBAAwB,eAAe,WAAW,UAAU,EAC7E,IAAI,QAAQ,IAAI,MAAM,IAAI,EAC5B,CAAC;KACD,IAAI,CAAC,WAAW,SAAS,OAAO,EAAE,KAAK,EAAE,OAAO,sBAAsB,GAAG,GAAG;KAC5E,MAAM,EAAE,OAAO,WAAW;KAE1B,MAAM,UAAU,YAAY;KAC5B,MAAM,UAAU,MAAM,UAAU,OAAO;MAAE,OAAO,OAAO;MAAO;KAAG,CAAC;KAClE,IAAI,CAAC,SAAS,OAAO,EAAE,KAAK,EAAE,OAAO,sBAAsB,GAAG,GAAG;KACjE,MAAM,MAAM,KAAK;MACf,SAAS,MAAM,CAAC;MAChB,OAAO;OACL,QAAQ;OACR,kBAAkB,QAAQ;OAC1B,SAAS,CAAC;QAAE,MAAM;QAAa,IAAI,QAAQ;QAAI,MAAM,QAAQ;OAAM,CAAC;MACtE;KACF,CAAC;KACD,OAAO,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC;IAC5B;GACF,CAAC;EACH;CACF;AACF"}

package/dist/rules/start-coordinator.d.ts

@@ -2,6 +2,8 @@ import type { MastraCodeState } from '@mastra/code-sdk/schema';
 import type { AgentController } from '@mastra/core/agent-controller';
 import { RequestContext } from '@mastra/core/request-context';
 import type { IntakeStorage } from '../storage/domains/intake/base.js';
+import type { ModelDefaultsStorage } from '../storage/domains/model-defaults/base.js';
+import type { FactoryModelScope, FactoryProjectsStorage } from '../storage/domains/projects/base.js';
 import type { SourceControlStorageHandle } from '../storage/domains/source-control/base.js';
 import type { CreateWorkItemInput, WorkItemsStorage } from '../storage/domains/work-items/base.js';
 import type { FactoryTransitionService } from './transition-service.js';
@@ -15,6 +17,7 @@ export interface FactoryStartRequest {
     kickoffKey: string;
     /** Where the arrival path lands the card; a session opened on an existing card names none. */
     destinationStage?: FactoryRuleStage;
+    modelScope: FactoryModelScope;
     defaultModelId?: string;
     workItem: {
         id?: string;
@@ -50,7 +53,10 @@ export interface FactoryStartPreparedResult {
 type FactoryController = AgentController<MastraCodeState>;
 export declare class FactoryStartCoordinator {
     #private;
-    constructor(controller: FactoryController, storage: WorkItemsStorage, transitionService?: Pick<FactoryTransitionService, 'transition'>, sourceControl?: SourceControlStorageHandle | ((request: FactoryStartRequest) => SourceControlStorageHandle | undefined | Promise<SourceControlStorageHandle | undefined>), intake?: IntakeStorage);
+    constructor(controller: FactoryController, storage: WorkItemsStorage, transitionService?: Pick<FactoryTransitionService, 'transition'>, sourceControl?: SourceControlStorageHandle | ((request: FactoryStartRequest) => SourceControlStorageHandle | undefined | Promise<SourceControlStorageHandle | undefined>), intake?: IntakeStorage, sessionModel?: {
+        projects: FactoryProjectsStorage;
+        modelDefaults: ModelDefaultsStorage;
+    });
     prepare(request: FactoryStartRequest): Promise<FactoryStartPreparedResult>;
 }
 export {};

package/dist/rules/start-coordinator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"start-coordinator.d.ts","sourceRoot":"","sources":["../../src/rules/start-coordinator.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAK9D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAC;AACvE,OAAO,KAAK,EAAwB,0BAA0B,EAAE,MAAM,2CAA2C,CAAC;AAClH,OAAO,KAAK,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,uCAAuC,CAAC;AACnG,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AACxE,OAAO,KAAK,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,MAAM,YAAY,CAAC;AAE5E,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,gBAAgB,EAAE,MAAM,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,8FAA8F;IAC9F,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE;QACR,EAAE,CAAC,EAAE,MAAM,CAAC;QACZ,IAAI,EAAE,MAAM,CAAC;QACb,KAAK,EAAE,mBAAmB,CAAC;KAC5B,CAAC;IACF,cAAc,CAAC,EAAE,cAAc,CAAC;CACjC;AAED,qBAAa,uBAAwB,SAAQ,KAAK;IAE9C,QAAQ,CAAC,IAAI,EAAE,qBAAqB,GAAG,sBAAsB,GAAG,qBAAqB;IAErF,QAAQ,CAAC,UAAU,EAAE,MAAM,EAAE;gBAFpB,IAAI,EAAE,qBAAqB,GAAG,sBAAsB,GAAG,qBAAqB,EACrF,OAAO,EAAE,MAAM,EACN,UAAU,GAAE,MAAM,EAAO;CAKrC;AAED,qBAAa,2BAA4B,SAAQ,KAAK;IACpD,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,uBAAuB,EAAE;QAAE,MAAM,EAAE,UAAU,CAAA;KAAE,CAAC,CAAC;gBAE9D,MAAM,EAAE,OAAO,CAAC,uBAAuB,EAAE;QAAE,MAAM,EAAE,UAAU,CAAA;KAAE,CAAC;CAK7E;AAED,MAAM,WAAW,0BAA0B;IACzC,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,SAAS,GAAG,QAAQ,GAAG,OAAO,GAAG,MAAM,GAAG,QAAQ,CAAC;IAClE,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,KAAK,iBAAiB,GAAG,eAAe,CAAC,eAAe,CAAC,CAAC;AA+B1D,qBAAa,uBAAuB;;gBAYhC,UAAU,EAAE,iBAAiB,EAC7B,OAAO,EAAE,gBAAgB,EACzB,iBAAiB,CAAC,EAAE,IAAI,CAAC,wBAAwB,EAAE,YAAY,CAAC,EAChE,aAAa,CAAC,EACV,0BAA0B,GAC1B,CAAC,CACC,OAAO,EAAE,mBAAmB,KACzB,0BAA0B,GAAG,SAAS,GAAG,OAAO,CAAC,0BAA0B,GAAG,SAAS,CAAC,CAAC,EAClG,MAAM,CAAC,EAAE,aAAa;IASlB,OAAO,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,0BAA0B,CAAC;CAiLjF"}
+{"version":3,"file":"start-coordinator.d.ts","sourceRoot":"","sources":["../../src/rules/start-coordinator.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAM9D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAC;AACvE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACtF,OAAO,KAAK,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AACrG,OAAO,KAAK,EAAwB,0BAA0B,EAAE,MAAM,2CAA2C,CAAC;AAClH,OAAO,KAAK,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,uCAAuC,CAAC;AACnG,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AACxE,OAAO,KAAK,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,MAAM,YAAY,CAAC;AAE5E,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,gBAAgB,EAAE,MAAM,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,8FAA8F;IAC9F,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC,UAAU,EAAE,iBAAiB,CAAC;IAC9B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE;QACR,EAAE,CAAC,EAAE,MAAM,CAAC;QACZ,IAAI,EAAE,MAAM,CAAC;QACb,KAAK,EAAE,mBAAmB,CAAC;KAC5B,CAAC;IACF,cAAc,CAAC,EAAE,cAAc,CAAC;CACjC;AAED,qBAAa,uBAAwB,SAAQ,KAAK;IAE9C,QAAQ,CAAC,IAAI,EAAE,qBAAqB,GAAG,sBAAsB,GAAG,qBAAqB;IAErF,QAAQ,CAAC,UAAU,EAAE,MAAM,EAAE;gBAFpB,IAAI,EAAE,qBAAqB,GAAG,sBAAsB,GAAG,qBAAqB,EACrF,OAAO,EAAE,MAAM,EACN,UAAU,GAAE,MAAM,EAAO;CAKrC;AAED,qBAAa,2BAA4B,SAAQ,KAAK;IACpD,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,uBAAuB,EAAE;QAAE,MAAM,EAAE,UAAU,CAAA;KAAE,CAAC,CAAC;gBAE9D,MAAM,EAAE,OAAO,CAAC,uBAAuB,EAAE;QAAE,MAAM,EAAE,UAAU,CAAA;KAAE,CAAC;CAK7E;AAED,MAAM,WAAW,0BAA0B;IACzC,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,SAAS,GAAG,QAAQ,GAAG,OAAO,GAAG,MAAM,GAAG,QAAQ,CAAC;IAClE,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,KAAK,iBAAiB,GAAG,eAAe,CAAC,eAAe,CAAC,CAAC;AA+B1D,qBAAa,uBAAuB;;gBAchC,UAAU,EAAE,iBAAiB,EAC7B,OAAO,EAAE,gBAAgB,EACzB,iBAAiB,CAAC,EAAE,IAAI,CAAC,wBAAwB,EAAE,YAAY,CAAC,EAChE,aAAa,CAAC,EACV,0BAA0B,GAC1B,CAAC,CACC,OAAO,EAAE,mBAAmB,KACzB,0BAA0B,GAAG,SAAS,GAAG,OAAO,CAAC,0BAA0B,GAAG,SAAS,CAAC,CAAC,EAClG,MAAM,CAAC,EAAE,aAAa,EACtB,YAAY,CAAC,EAAE;QAAE,QAAQ,EAAE,sBAAsB,CAAC;QAAC,aAAa,EAAE,oBAAoB,CAAA;KAAE;IAWpF,OAAO,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,0BAA0B,CAAC;CAgMjF"}

package/dist/rules/start-coordinator.js

@@ -1,6 +1,7 @@
 import { boardForWorkItem } from "../boards/semantics.js";
 import "../boards/index.js";
-import { hydrateFactorySession } from "../session/factory-session.js";
+import { primeTenantCredentialsForTenant } from "../routes/tenant-credentials.js";
+import { hydrateFactorySession, resolveFactorySessionModel } from "../session/factory-session.js";
 import { resolveWorkItemRepository } from "../session/work-item-repository.js";
 import { RequestContext } from "@mastra/core/request-context";
 //#region src/rules/start-coordinator.ts
@@ -60,18 +61,32 @@ var FactoryStartCoordinator = class {
 	#transitionService;
 	#sourceControl;
 	#intake;
-	constructor(controller, storage, transitionService, sourceControl, intake) {
+	#projects;
+	#modelDefaults;
+	constructor(controller, storage, transitionService, sourceControl, intake, sessionModel) {
 		this.#controller = controller;
 		this.#storage = storage;
 		this.#transitionService = transitionService;
 		this.#sourceControl = sourceControl;
 		this.#intake = intake;
+		this.#projects = sessionModel?.projects;
+		this.#modelDefaults = sessionModel?.modelDefaults;
 	}
 	async prepare(request) {
 		const storage = this.#storage;
 		const sourceControl = typeof this.#sourceControl === "function" ? await this.#sourceControl(request) : this.#sourceControl;
 		if (!sourceControl) throw new Error("Factory source control storage is unavailable");
 		const sourceSession = await resolveSourceSession(sourceControl, request);
+		const sessionModel = this.#projects && this.#modelDefaults ? await resolveFactorySessionModel({
+			projects: this.#projects,
+			modelDefaults: this.#modelDefaults,
+			factoryProjectId: request.factoryProjectId,
+			orgId: request.orgId,
+			ownerUserId: sourceSession.userId
+		}) : {
+			modelScope: request.modelScope,
+			modelId: request.defaultModelId
+		};
 		const storedItem = request.workItem.id ? await storage.get({
 			orgId: request.orgId,
 			id: request.workItem.id
@@ -112,14 +127,9 @@ var FactoryStartCoordinator = class {
 		if (repository.projectRepositoryId !== sourceSession.projectRepositoryId) throw new WorkItemRepositoryError("repository_mismatch", `This run session is bound to a different repository than ${repository.slug}.`);
 		const requestContext = request.requestContext ?? new RequestContext();
 		const existingUser = requestContext.get("user");
-		if (existingUser && typeof existingUser === "object") requestContext.set("user", {
-			...existingUser,
-			orgFirstCredentials: true
-		});
-		else requestContext.set("user", {
+		if (!existingUser || typeof existingUser !== "object") requestContext.set("user", {
 			workosId: request.userId,
-			organizationId: request.orgId,
-			orgFirstCredentials: true
+			organizationId: request.orgId
 		});
 		const untrustedCheckout = request.workItem.input.externalSource?.type === "pull-request";
 		const metadataBaseBranch = request.workItem.input.metadata?.baseBranch;
@@ -141,15 +151,24 @@ var FactoryStartCoordinator = class {
 		await session.state.set({
 			...sessionTags,
 			factoryOrgId: request.orgId,
+			factoryModelScope: sessionModel.modelScope,
+			factoryOwnerUserId: sourceSession.userId,
 			pluginInstructions: [...existingPluginInstructions.filter((instruction) => instruction !== targetRepositoryInstruction), targetRepositoryInstruction],
 			...untrustedCheckout ? {
 				untrustedCheckout: true,
 				...baseRef ? { baseRef } : {}
 			} : {}
 		});
+		await primeTenantCredentialsForTenant({
+			orgId: request.orgId,
+			userId: sourceSession.userId,
+			credentialScope: sessionModel.modelScope
+		});
 		await hydrateFactorySession(session, {
 			orgId: request.orgId,
-			defaultModelId: request.defaultModelId
+			modelScope: sessionModel.modelScope,
+			ownerUserId: sourceSession.userId,
+			defaultModelId: sessionModel.modelId
 		});
 		await session.permissions.setForTool({
 			toolName: "factory_transition_work_item",

package/dist/rules/start-coordinator.js.map

@@ -1 +1 @@
-{"version":3,"file":"start-coordinator.js","names":["#controller","#storage","#transitionService","#sourceControl","#intake"],"sources":["../../src/rules/start-coordinator.ts"],"sourcesContent":["import type { MastraCodeState } from '@mastra/code-sdk/schema';\nimport type { AgentController } from '@mastra/core/agent-controller';\nimport { RequestContext } from '@mastra/core/request-context';\n\nimport { boardForWorkItem } from '../boards/index.js';\nimport { hydrateFactorySession } from '../session/factory-session.js';\nimport { resolveWorkItemRepository } from '../session/work-item-repository.js';\nimport type { IntakeStorage } from '../storage/domains/intake/base.js';\nimport type { SourceControlSession, SourceControlStorageHandle } from '../storage/domains/source-control/base.js';\nimport type { CreateWorkItemInput, WorkItemsStorage } from '../storage/domains/work-items/base.js';\nimport type { FactoryTransitionService } from './transition-service.js';\nimport type { FactoryRuleStage, FactoryTransitionResult } from './types.js';\n\nexport interface FactoryStartRequest {\n  orgId: string;\n  userId: string;\n  factoryProjectId: string;\n  sessionId: string;\n  threadTitle: string;\n  kickoffKey: string;\n  /** Where the arrival path lands the card; a session opened on an existing card names none. */\n  destinationStage?: FactoryRuleStage;\n  defaultModelId?: string;\n  workItem: {\n    id?: string;\n    role: string;\n    input: CreateWorkItemInput;\n  };\n  requestContext?: RequestContext;\n}\n\nexport class WorkItemRepositoryError extends Error {\n  constructor(\n    readonly code: 'repository_mismatch' | 'repository_ambiguous' | 'repository_unlinked',\n    message: string,\n    readonly candidates: string[] = [],\n  ) {\n    super(message);\n    this.name = 'WorkItemRepositoryError';\n  }\n}\n\nexport class FactoryStartTransitionError extends Error {\n  readonly result: Extract<FactoryTransitionResult, { status: 'rejected' }>;\n\n  constructor(result: Extract<FactoryTransitionResult, { status: 'rejected' }>) {\n    super(result.reason);\n    this.name = 'FactoryStartTransitionError';\n    this.result = result;\n  }\n}\n\nexport interface FactoryStartPreparedResult {\n  workItemId: string;\n  bindingId: string;\n  threadId: string;\n  resourceId: string;\n  sessionId: string;\n  branch: string;\n  revision: number;\n  kickoffStatus: 'pending' | 'leased' | 'retry' | 'sent' | 'failed';\n  replayed: boolean;\n}\n\ntype FactoryController = AgentController<MastraCodeState>;\ntype FactorySession = Awaited<ReturnType<FactoryController['createSession']>>;\n\nasync function resolveSourceSession(\n  storage: SourceControlStorageHandle,\n  request: FactoryStartRequest,\n): Promise<SourceControlSession & { projectRepositoryId: string }> {\n  const session = await storage.sessions.getBySessionId(request.sessionId);\n  if (!session || session.orgId !== request.orgId || session.userId !== request.userId) {\n    throw new Error('Factory session not found');\n  }\n  const projectRepositoryId = session.projectRepositoryId;\n  if (!projectRepositoryId) throw new Error('Factory session repository not found');\n  const projectRepository = await storage.projectRepositories.get({ orgId: request.orgId, id: projectRepositoryId });\n  if (!projectRepository) throw new Error('Factory session repository not found');\n  const connection = await storage.connections.get({ orgId: request.orgId, id: projectRepository.connectionId });\n  if (!connection || connection.factoryProjectId !== request.factoryProjectId) {\n    throw new Error('Factory session does not belong to this project');\n  }\n  return { ...session, projectRepositoryId };\n}\n\nasync function configureThread(session: FactorySession, request: FactoryStartRequest): Promise<string> {\n  const threadId = session.thread.requireId();\n  // Derived from the work item, not a user rename, so leave the title\n  // unpinned and let auto-naming keep refining it.\n  await session.thread.rename({ title: request.threadTitle, pin: false });\n  await session.thread.setSetting({ key: 'factorySessionId', value: request.sessionId });\n  return threadId;\n}\n\nexport class FactoryStartCoordinator {\n  readonly #controller: FactoryController;\n  readonly #storage: WorkItemsStorage;\n  readonly #transitionService?: Pick<FactoryTransitionService, 'transition'>;\n  readonly #sourceControl?:\n    | SourceControlStorageHandle\n    | ((\n        request: FactoryStartRequest,\n      ) => SourceControlStorageHandle | undefined | Promise<SourceControlStorageHandle | undefined>);\n  readonly #intake?: IntakeStorage;\n\n  constructor(\n    controller: FactoryController,\n    storage: WorkItemsStorage,\n    transitionService?: Pick<FactoryTransitionService, 'transition'>,\n    sourceControl?:\n      | SourceControlStorageHandle\n      | ((\n          request: FactoryStartRequest,\n        ) => SourceControlStorageHandle | undefined | Promise<SourceControlStorageHandle | undefined>),\n    intake?: IntakeStorage,\n  ) {\n    this.#controller = controller;\n    this.#storage = storage;\n    this.#transitionService = transitionService;\n    this.#sourceControl = sourceControl;\n    this.#intake = intake;\n  }\n\n  async prepare(request: FactoryStartRequest): Promise<FactoryStartPreparedResult> {\n    const storage = this.#storage;\n    const sourceControl =\n      typeof this.#sourceControl === 'function' ? await this.#sourceControl(request) : this.#sourceControl;\n    if (!sourceControl) throw new Error('Factory source control storage is unavailable');\n    const sourceSession = await resolveSourceSession(sourceControl, request);\n    const storedItem = request.workItem.id\n      ? await storage.get({ orgId: request.orgId, id: request.workItem.id })\n      : null;\n    const intakeConfig = await this.#intake?.getConfig({ orgId: request.orgId, integrationIds: ['linear'] });\n    let repository = await resolveWorkItemRepository({\n      sourceControl,\n      orgId: request.orgId,\n      factoryProjectId: request.factoryProjectId,\n      item: storedItem ?? { metadata: request.workItem.input.metadata ?? null },\n      linearRepositoryMap: intakeConfig?.linear?.repositoryByLinearProject,\n    });\n    if (repository.status === 'ambiguous') {\n      // A retry of this role's existing session keeps its already-chosen\n      // repository; a newly minted session must not choose for the card.\n      if (storedItem?.sessions[request.workItem.role]?.sessionId !== sourceSession.sessionId) {\n        throw new WorkItemRepositoryError(\n          'repository_ambiguous',\n          `Choose a repository for this work item: ${repository.candidates.join(', ')}.`,\n          repository.candidates,\n        );\n      }\n      const link = await sourceControl.projectRepositories.get({\n        orgId: request.orgId,\n        id: sourceSession.projectRepositoryId,\n      });\n      const linked = link && (await sourceControl.repositories.get({ orgId: request.orgId, id: link.repositoryId }));\n      const currentLinks = link\n        ? await sourceControl.projectRepositories.list({ orgId: request.orgId, connectionId: link.connectionId })\n        : [];\n      if (\n        !linked ||\n        !repository.candidates.includes(linked.slug) ||\n        !currentLinks.some(candidate => candidate.id === sourceSession.projectRepositoryId)\n      ) {\n        throw new WorkItemRepositoryError(\n          'repository_unlinked',\n          'The existing session repository is not linked to this Factory.',\n        );\n      }\n      repository = { status: 'resolved', slug: linked.slug, projectRepositoryId: sourceSession.projectRepositoryId };\n    }\n    if (repository.status === 'unlinked') {\n      throw new WorkItemRepositoryError('repository_unlinked', repository.hint);\n    }\n    if (repository.projectRepositoryId !== sourceSession.projectRepositoryId) {\n      throw new WorkItemRepositoryError(\n        'repository_mismatch',\n        `This run session is bound to a different repository than ${repository.slug}.`,\n      );\n    }\n    const requestContext = request.requestContext ?? new RequestContext();\n    // Factory runs resolve model credentials org > user: the org's shared keys\n    // win, with the acting user's personal credentials as a fallback — a board\n    // run should never silently prefer whoever kicked it off. The flag rides\n    // the stashed user even when a caller-provided context already has one.\n    const existingUser = requestContext.get('user');\n    if (existingUser && typeof existingUser === 'object') {\n      requestContext.set('user', { ...existingUser, orgFirstCredentials: true });\n    } else {\n      requestContext.set('user', {\n        workosId: request.userId,\n        organizationId: request.orgId,\n        orgFirstCredentials: true,\n      });\n    }\n    // Sessions kicked off against third-party content (a PR under review, or\n    // any pull-request-sourced work item) get `untrustedCheckout` so the SDK\n    // never ingests the checkout's AGENTS.md/CLAUDE.md into the system prompt\n    // or reminders — those files are attacker-writable in a PR branch.\n    const untrustedCheckout = request.workItem.input.externalSource?.type === 'pull-request';\n    // The trusted ref the SDK may serve project instruction files from on an\n    // untrusted checkout (the PR's base branch). Prefer the session record's\n    // base branch; fall back to the intake metadata captured from the PR.\n    const metadataBaseBranch = request.workItem.input.metadata?.baseBranch;\n    const baseRef =\n      (sourceSession.baseBranch || undefined) ??\n      (typeof metadataBaseBranch === 'string' && metadataBaseBranch ? metadataBaseBranch : undefined);\n    const sessionTags = {\n      factoryProjectId: request.factoryProjectId,\n      projectRepositoryId: sourceSession.projectRepositoryId,\n    };\n    const session = await this.#controller.createSession({\n      id: sourceSession.sessionId,\n      ownerId: request.userId,\n      resourceId: sourceSession.sessionId,\n      threadId: sourceSession.sessionId,\n      requestContext,\n      tags: sessionTags,\n    });\n    // Bound-agent authority gates (the transition tool, the factory-phase\n    // processor, workspace token selection) resolve the session address from\n    // controller state. Seed it server-side — `tags` covers fresh creation,\n    // the explicit setState covers get-or-create returning a session another\n    // caller created without them — so autonomous runs never depend on a\n    // browser connecting to populate the state. `untrustedCheckout` is a\n    // boolean so it rides only on state (tags are string-valued).\n    const targetRepositoryInstruction = `Target repository: ${repository.slug}. Before editing files or creating a pull request, verify this session's checkout matches the target repository.`;\n    const existingPluginInstructions = session.state.get()?.pluginInstructions ?? [];\n    await session.state.set({\n      ...sessionTags,\n      // The authoritative org id for every downstream identity read (the\n      // memory seam's organizationId): the session owner is a USER id, not an\n      // org, so it must never be improvised from ownerId.\n      factoryOrgId: request.orgId,\n      pluginInstructions: [\n        ...existingPluginInstructions.filter(instruction => instruction !== targetRepositoryInstruction),\n        targetRepositoryInstruction,\n      ],\n      ...(untrustedCheckout ? { untrustedCheckout: true, ...(baseRef ? { baseRef } : {}) } : {}),\n    });\n    // Apply the factory's main model before any model-dependent run work.\n    // Observational-memory settings are loaded per invocation by the input processor.\n    await hydrateFactorySession(session, {\n      orgId: request.orgId,\n      defaultModelId: request.defaultModelId,\n    });\n    // The tool is `requireApproval`, and that prompt parks the run whether or not\n    // someone pressed Start — a person is reading the plan, not an approval queue.\n    // Starting the run was already the say-so; the rules engine still governs.\n    await session.permissions.setForTool({ toolName: 'factory_transition_work_item', policy: 'allow' });\n    const threadId = await configureThread(session, request);\n    const prepared = await storage.prepareRunStart({\n      orgId: request.orgId,\n      userId: request.userId,\n      factoryProjectId: request.factoryProjectId,\n      workItem: { id: request.workItem.id, input: request.workItem.input },\n      role: request.workItem.role,\n      session: { sessionId: sourceSession.sessionId, branch: sourceSession.branch, threadId },\n      resourceId: sourceSession.sessionId,\n      kickoffKey: request.kickoffKey,\n      kickoffMessage: null,\n    });\n    await session.thread.setSetting({ key: 'factoryWorkItemId', value: prepared.item.id });\n\n    let revision = prepared.item.revision;\n    const destinationStage = request.destinationStage;\n    if (destinationStage && (prepared.item.stages.length !== 1 || prepared.item.stages[0] !== destinationStage)) {\n      if (!this.#transitionService) throw new Error('Factory transition service is unavailable.');\n      const transition = await this.#transitionService.transition({\n        orgId: request.orgId,\n        factoryProjectId: request.factoryProjectId,\n        workItemId: prepared.item.id,\n        board: boardForWorkItem(prepared.item),\n        stage: destinationStage,\n        expectedRevision: prepared.item.revision,\n        actor: { type: 'human', id: request.userId },\n        ingress: { type: 'human', identity: `start:${request.kickoffKey}:transition` },\n        cause: 'run_start',\n      });\n      if (transition.status === 'rejected') {\n        await storage.markPendingStart(prepared.binding.id, 'failed', transition.reason);\n        throw new FactoryStartTransitionError(transition);\n      }\n      revision = transition.revision;\n    }\n\n    await storage.markPendingStart(prepared.binding.id, 'sent');\n    prepared.pendingStart.status = 'sent';\n\n    return {\n      workItemId: prepared.item.id,\n      bindingId: prepared.binding.id,\n      threadId,\n      resourceId: sourceSession.sessionId,\n      sessionId: sourceSession.sessionId,\n      branch: sourceSession.branch,\n      revision,\n      kickoffStatus: prepared.pendingStart.status,\n      replayed: prepared.replayed,\n    };\n  }\n}\n"],"mappings":";;;;;;AA+BA,IAAa,0BAAb,cAA6C,MAAM;CAEtC;CAEA;CAHX,YACE,MACA,SACA,aAAgC,CAAC,GACjC;EACA,MAAM,OAAO;EAJJ,KAAA,OAAA;EAEA,KAAA,aAAA;EAGT,KAAK,OAAO;CACd;AACF;AAEA,IAAa,8BAAb,cAAiD,MAAM;CACrD;CAEA,YAAY,QAAkE;EAC5E,MAAM,OAAO,MAAM;EACnB,KAAK,OAAO;EACZ,KAAK,SAAS;CAChB;AACF;AAiBA,eAAe,qBACb,SACA,SACiE;CACjE,MAAM,UAAU,MAAM,QAAQ,SAAS,eAAe,QAAQ,SAAS;CACvE,IAAI,CAAC,WAAW,QAAQ,UAAU,QAAQ,SAAS,QAAQ,WAAW,QAAQ,QAC5E,MAAM,IAAI,MAAM,2BAA2B;CAE7C,MAAM,sBAAsB,QAAQ;CACpC,IAAI,CAAC,qBAAqB,MAAM,IAAI,MAAM,sCAAsC;CAChF,MAAM,oBAAoB,MAAM,QAAQ,oBAAoB,IAAI;EAAE,OAAO,QAAQ;EAAO,IAAI;CAAoB,CAAC;CACjH,IAAI,CAAC,mBAAmB,MAAM,IAAI,MAAM,sCAAsC;CAC9E,MAAM,aAAa,MAAM,QAAQ,YAAY,IAAI;EAAE,OAAO,QAAQ;EAAO,IAAI,kBAAkB;CAAa,CAAC;CAC7G,IAAI,CAAC,cAAc,WAAW,qBAAqB,QAAQ,kBACzD,MAAM,IAAI,MAAM,iDAAiD;CAEnE,OAAO;EAAE,GAAG;EAAS;CAAoB;AAC3C;AAEA,eAAe,gBAAgB,SAAyB,SAA+C;CACrG,MAAM,WAAW,QAAQ,OAAO,UAAU;CAG1C,MAAM,QAAQ,OAAO,OAAO;EAAE,OAAO,QAAQ;EAAa,KAAK;CAAM,CAAC;CACtE,MAAM,QAAQ,OAAO,WAAW;EAAE,KAAK;EAAoB,OAAO,QAAQ;CAAU,CAAC;CACrF,OAAO;AACT;AAEA,IAAa,0BAAb,MAAqC;CACnC;CACA;CACA;CACA;CAKA;CAEA,YACE,YACA,SACA,mBACA,eAKA,QACA;EACA,KAAKA,cAAc;EACnB,KAAKC,WAAW;EAChB,KAAKC,qBAAqB;EAC1B,KAAKC,iBAAiB;EACtB,KAAKC,UAAU;CACjB;CAEA,MAAM,QAAQ,SAAmE;EAC/E,MAAM,UAAU,KAAKH;EACrB,MAAM,gBACJ,OAAO,KAAKE,mBAAmB,aAAa,MAAM,KAAKA,eAAe,OAAO,IAAI,KAAKA;EACxF,IAAI,CAAC,eAAe,MAAM,IAAI,MAAM,+CAA+C;EACnF,MAAM,gBAAgB,MAAM,qBAAqB,eAAe,OAAO;EACvE,MAAM,aAAa,QAAQ,SAAS,KAChC,MAAM,QAAQ,IAAI;GAAE,OAAO,QAAQ;GAAO,IAAI,QAAQ,SAAS;EAAG,CAAC,IACnE;EACJ,MAAM,eAAe,MAAM,KAAKC,SAAS,UAAU;GAAE,OAAO,QAAQ;GAAO,gBAAgB,CAAC,QAAQ;EAAE,CAAC;EACvG,IAAI,aAAa,MAAM,0BAA0B;GAC/C;GACA,OAAO,QAAQ;GACf,kBAAkB,QAAQ;GAC1B,MAAM,cAAc,EAAE,UAAU,QAAQ,SAAS,MAAM,YAAY,KAAK;GACxE,qBAAqB,cAAc,QAAQ;EAC7C,CAAC;EACD,IAAI,WAAW,WAAW,aAAa;GAGrC,IAAI,YAAY,SAAS,QAAQ,SAAS,KAAK,EAAE,cAAc,cAAc,WAC3E,MAAM,IAAI,wBACR,wBACA,2CAA2C,WAAW,WAAW,KAAK,IAAI,EAAE,IAC5E,WAAW,UACb;GAEF,MAAM,OAAO,MAAM,cAAc,oBAAoB,IAAI;IACvD,OAAO,QAAQ;IACf,IAAI,cAAc;GACpB,CAAC;GACD,MAAM,SAAS,QAAS,MAAM,cAAc,aAAa,IAAI;IAAE,OAAO,QAAQ;IAAO,IAAI,KAAK;GAAa,CAAC;GAC5G,MAAM,eAAe,OACjB,MAAM,cAAc,oBAAoB,KAAK;IAAE,OAAO,QAAQ;IAAO,cAAc,KAAK;GAAa,CAAC,IACtG,CAAC;GACL,IACE,CAAC,UACD,CAAC,WAAW,WAAW,SAAS,OAAO,IAAI,KAC3C,CAAC,aAAa,MAAK,cAAa,UAAU,OAAO,cAAc,mBAAmB,GAElF,MAAM,IAAI,wBACR,uBACA,gEACF;GAEF,aAAa;IAAE,QAAQ;IAAY,MAAM,OAAO;IAAM,qBAAqB,cAAc;GAAoB;EAC/G;EACA,IAAI,WAAW,WAAW,YACxB,MAAM,IAAI,wBAAwB,uBAAuB,WAAW,IAAI;EAE1E,IAAI,WAAW,wBAAwB,cAAc,qBACnD,MAAM,IAAI,wBACR,uBACA,4DAA4D,WAAW,KAAK,EAC9E;EAEF,MAAM,iBAAiB,QAAQ,kBAAkB,IAAI,eAAe;EAKpE,MAAM,eAAe,eAAe,IAAI,MAAM;EAC9C,IAAI,gBAAgB,OAAO,iBAAiB,UAC1C,eAAe,IAAI,QAAQ;GAAE,GAAG;GAAc,qBAAqB;EAAK,CAAC;OAEzE,eAAe,IAAI,QAAQ;GACzB,UAAU,QAAQ;GAClB,gBAAgB,QAAQ;GACxB,qBAAqB;EACvB,CAAC;EAMH,MAAM,oBAAoB,QAAQ,SAAS,MAAM,gBAAgB,SAAS;EAI1E,MAAM,qBAAqB,QAAQ,SAAS,MAAM,UAAU;EAC5D,MAAM,WACH,cAAc,cAAc,KAAA,OAC5B,OAAO,uBAAuB,YAAY,qBAAqB,qBAAqB,KAAA;EACvF,MAAM,cAAc;GAClB,kBAAkB,QAAQ;GAC1B,qBAAqB,cAAc;EACrC;EACA,MAAM,UAAU,MAAM,KAAKJ,YAAY,cAAc;GACnD,IAAI,cAAc;GAClB,SAAS,QAAQ;GACjB,YAAY,cAAc;GAC1B,UAAU,cAAc;GACxB;GACA,MAAM;EACR,CAAC;EAQD,MAAM,8BAA8B,sBAAsB,WAAW,KAAK;EAC1E,MAAM,6BAA6B,QAAQ,MAAM,IAAI,CAAC,EAAE,sBAAsB,CAAC;EAC/E,MAAM,QAAQ,MAAM,IAAI;GACtB,GAAG;GAIH,cAAc,QAAQ;GACtB,oBAAoB,CAClB,GAAG,2BAA2B,QAAO,gBAAe,gBAAgB,2BAA2B,GAC/F,2BACF;GACA,GAAI,oBAAoB;IAAE,mBAAmB;IAAM,GAAI,UAAU,EAAE,QAAQ,IAAI,CAAC;GAAG,IAAI,CAAC;EAC1F,CAAC;EAGD,MAAM,sBAAsB,SAAS;GACnC,OAAO,QAAQ;GACf,gBAAgB,QAAQ;EAC1B,CAAC;EAID,MAAM,QAAQ,YAAY,WAAW;GAAE,UAAU;GAAgC,QAAQ;EAAQ,CAAC;EAClG,MAAM,WAAW,MAAM,gBAAgB,SAAS,OAAO;EACvD,MAAM,WAAW,MAAM,QAAQ,gBAAgB;GAC7C,OAAO,QAAQ;GACf,QAAQ,QAAQ;GAChB,kBAAkB,QAAQ;GAC1B,UAAU;IAAE,IAAI,QAAQ,SAAS;IAAI,OAAO,QAAQ,SAAS;GAAM;GACnE,MAAM,QAAQ,SAAS;GACvB,SAAS;IAAE,WAAW,cAAc;IAAW,QAAQ,cAAc;IAAQ;GAAS;GACtF,YAAY,cAAc;GAC1B,YAAY,QAAQ;GACpB,gBAAgB;EAClB,CAAC;EACD,MAAM,QAAQ,OAAO,WAAW;GAAE,KAAK;GAAqB,OAAO,SAAS,KAAK;EAAG,CAAC;EAErF,IAAI,WAAW,SAAS,KAAK;EAC7B,MAAM,mBAAmB,QAAQ;EACjC,IAAI,qBAAqB,SAAS,KAAK,OAAO,WAAW,KAAK,SAAS,KAAK,OAAO,OAAO,mBAAmB;GAC3G,IAAI,CAAC,KAAKE,oBAAoB,MAAM,IAAI,MAAM,4CAA4C;GAC1F,MAAM,aAAa,MAAM,KAAKA,mBAAmB,WAAW;IAC1D,OAAO,QAAQ;IACf,kBAAkB,QAAQ;IAC1B,YAAY,SAAS,KAAK;IAC1B,OAAO,iBAAiB,SAAS,IAAI;IACrC,OAAO;IACP,kBAAkB,SAAS,KAAK;IAChC,OAAO;KAAE,MAAM;KAAS,IAAI,QAAQ;IAAO;IAC3C,SAAS;KAAE,MAAM;KAAS,UAAU,SAAS,QAAQ,WAAW;IAAa;IAC7E,OAAO;GACT,CAAC;GACD,IAAI,WAAW,WAAW,YAAY;IACpC,MAAM,QAAQ,iBAAiB,SAAS,QAAQ,IAAI,UAAU,WAAW,MAAM;IAC/E,MAAM,IAAI,4BAA4B,UAAU;GAClD;GACA,WAAW,WAAW;EACxB;EAEA,MAAM,QAAQ,iBAAiB,SAAS,QAAQ,IAAI,MAAM;EAC1D,SAAS,aAAa,SAAS;EAE/B,OAAO;GACL,YAAY,SAAS,KAAK;GAC1B,WAAW,SAAS,QAAQ;GAC5B;GACA,YAAY,cAAc;GAC1B,WAAW,cAAc;GACzB,QAAQ,cAAc;GACtB;GACA,eAAe,SAAS,aAAa;GACrC,UAAU,SAAS;EACrB;CACF;AACF"}
+{"version":3,"file":"start-coordinator.js","names":["#controller","#storage","#transitionService","#sourceControl","#intake","#projects","#modelDefaults"],"sources":["../../src/rules/start-coordinator.ts"],"sourcesContent":["import type { MastraCodeState } from '@mastra/code-sdk/schema';\nimport type { AgentController } from '@mastra/core/agent-controller';\nimport { RequestContext } from '@mastra/core/request-context';\n\nimport { boardForWorkItem } from '../boards/index.js';\nimport { primeTenantCredentialsForTenant } from '../routes/tenant-credentials.js';\nimport { hydrateFactorySession, resolveFactorySessionModel } from '../session/factory-session.js';\nimport { resolveWorkItemRepository } from '../session/work-item-repository.js';\nimport type { IntakeStorage } from '../storage/domains/intake/base.js';\nimport type { ModelDefaultsStorage } from '../storage/domains/model-defaults/base.js';\nimport type { FactoryModelScope, FactoryProjectsStorage } from '../storage/domains/projects/base.js';\nimport type { SourceControlSession, SourceControlStorageHandle } from '../storage/domains/source-control/base.js';\nimport type { CreateWorkItemInput, WorkItemsStorage } from '../storage/domains/work-items/base.js';\nimport type { FactoryTransitionService } from './transition-service.js';\nimport type { FactoryRuleStage, FactoryTransitionResult } from './types.js';\n\nexport interface FactoryStartRequest {\n  orgId: string;\n  userId: string;\n  factoryProjectId: string;\n  sessionId: string;\n  threadTitle: string;\n  kickoffKey: string;\n  /** Where the arrival path lands the card; a session opened on an existing card names none. */\n  destinationStage?: FactoryRuleStage;\n  modelScope: FactoryModelScope;\n  defaultModelId?: string;\n  workItem: {\n    id?: string;\n    role: string;\n    input: CreateWorkItemInput;\n  };\n  requestContext?: RequestContext;\n}\n\nexport class WorkItemRepositoryError extends Error {\n  constructor(\n    readonly code: 'repository_mismatch' | 'repository_ambiguous' | 'repository_unlinked',\n    message: string,\n    readonly candidates: string[] = [],\n  ) {\n    super(message);\n    this.name = 'WorkItemRepositoryError';\n  }\n}\n\nexport class FactoryStartTransitionError extends Error {\n  readonly result: Extract<FactoryTransitionResult, { status: 'rejected' }>;\n\n  constructor(result: Extract<FactoryTransitionResult, { status: 'rejected' }>) {\n    super(result.reason);\n    this.name = 'FactoryStartTransitionError';\n    this.result = result;\n  }\n}\n\nexport interface FactoryStartPreparedResult {\n  workItemId: string;\n  bindingId: string;\n  threadId: string;\n  resourceId: string;\n  sessionId: string;\n  branch: string;\n  revision: number;\n  kickoffStatus: 'pending' | 'leased' | 'retry' | 'sent' | 'failed';\n  replayed: boolean;\n}\n\ntype FactoryController = AgentController<MastraCodeState>;\ntype FactorySession = Awaited<ReturnType<FactoryController['createSession']>>;\n\nasync function resolveSourceSession(\n  storage: SourceControlStorageHandle,\n  request: FactoryStartRequest,\n): Promise<SourceControlSession & { projectRepositoryId: string }> {\n  const session = await storage.sessions.getBySessionId(request.sessionId);\n  if (!session || session.orgId !== request.orgId || session.userId !== request.userId) {\n    throw new Error('Factory session not found');\n  }\n  const projectRepositoryId = session.projectRepositoryId;\n  if (!projectRepositoryId) throw new Error('Factory session repository not found');\n  const projectRepository = await storage.projectRepositories.get({ orgId: request.orgId, id: projectRepositoryId });\n  if (!projectRepository) throw new Error('Factory session repository not found');\n  const connection = await storage.connections.get({ orgId: request.orgId, id: projectRepository.connectionId });\n  if (!connection || connection.factoryProjectId !== request.factoryProjectId) {\n    throw new Error('Factory session does not belong to this project');\n  }\n  return { ...session, projectRepositoryId };\n}\n\nasync function configureThread(session: FactorySession, request: FactoryStartRequest): Promise<string> {\n  const threadId = session.thread.requireId();\n  // Derived from the work item, not a user rename, so leave the title\n  // unpinned and let auto-naming keep refining it.\n  await session.thread.rename({ title: request.threadTitle, pin: false });\n  await session.thread.setSetting({ key: 'factorySessionId', value: request.sessionId });\n  return threadId;\n}\n\nexport class FactoryStartCoordinator {\n  readonly #controller: FactoryController;\n  readonly #storage: WorkItemsStorage;\n  readonly #transitionService?: Pick<FactoryTransitionService, 'transition'>;\n  readonly #sourceControl?:\n    | SourceControlStorageHandle\n    | ((\n        request: FactoryStartRequest,\n      ) => SourceControlStorageHandle | undefined | Promise<SourceControlStorageHandle | undefined>);\n  readonly #intake?: IntakeStorage;\n  readonly #projects?: FactoryProjectsStorage;\n  readonly #modelDefaults?: ModelDefaultsStorage;\n\n  constructor(\n    controller: FactoryController,\n    storage: WorkItemsStorage,\n    transitionService?: Pick<FactoryTransitionService, 'transition'>,\n    sourceControl?:\n      | SourceControlStorageHandle\n      | ((\n          request: FactoryStartRequest,\n        ) => SourceControlStorageHandle | undefined | Promise<SourceControlStorageHandle | undefined>),\n    intake?: IntakeStorage,\n    sessionModel?: { projects: FactoryProjectsStorage; modelDefaults: ModelDefaultsStorage },\n  ) {\n    this.#controller = controller;\n    this.#storage = storage;\n    this.#transitionService = transitionService;\n    this.#sourceControl = sourceControl;\n    this.#intake = intake;\n    this.#projects = sessionModel?.projects;\n    this.#modelDefaults = sessionModel?.modelDefaults;\n  }\n\n  async prepare(request: FactoryStartRequest): Promise<FactoryStartPreparedResult> {\n    const storage = this.#storage;\n    const sourceControl =\n      typeof this.#sourceControl === 'function' ? await this.#sourceControl(request) : this.#sourceControl;\n    if (!sourceControl) throw new Error('Factory source control storage is unavailable');\n    const sourceSession = await resolveSourceSession(sourceControl, request);\n    const sessionModel =\n      this.#projects && this.#modelDefaults\n        ? await resolveFactorySessionModel({\n            projects: this.#projects,\n            modelDefaults: this.#modelDefaults,\n            factoryProjectId: request.factoryProjectId,\n            orgId: request.orgId,\n            ownerUserId: sourceSession.userId,\n          })\n        : { modelScope: request.modelScope, modelId: request.defaultModelId };\n    const storedItem = request.workItem.id\n      ? await storage.get({ orgId: request.orgId, id: request.workItem.id })\n      : null;\n    const intakeConfig = await this.#intake?.getConfig({ orgId: request.orgId, integrationIds: ['linear'] });\n    let repository = await resolveWorkItemRepository({\n      sourceControl,\n      orgId: request.orgId,\n      factoryProjectId: request.factoryProjectId,\n      item: storedItem ?? { metadata: request.workItem.input.metadata ?? null },\n      linearRepositoryMap: intakeConfig?.linear?.repositoryByLinearProject,\n    });\n    if (repository.status === 'ambiguous') {\n      // A retry of this role's existing session keeps its already-chosen\n      // repository; a newly minted session must not choose for the card.\n      if (storedItem?.sessions[request.workItem.role]?.sessionId !== sourceSession.sessionId) {\n        throw new WorkItemRepositoryError(\n          'repository_ambiguous',\n          `Choose a repository for this work item: ${repository.candidates.join(', ')}.`,\n          repository.candidates,\n        );\n      }\n      const link = await sourceControl.projectRepositories.get({\n        orgId: request.orgId,\n        id: sourceSession.projectRepositoryId,\n      });\n      const linked = link && (await sourceControl.repositories.get({ orgId: request.orgId, id: link.repositoryId }));\n      const currentLinks = link\n        ? await sourceControl.projectRepositories.list({ orgId: request.orgId, connectionId: link.connectionId })\n        : [];\n      if (\n        !linked ||\n        !repository.candidates.includes(linked.slug) ||\n        !currentLinks.some(candidate => candidate.id === sourceSession.projectRepositoryId)\n      ) {\n        throw new WorkItemRepositoryError(\n          'repository_unlinked',\n          'The existing session repository is not linked to this Factory.',\n        );\n      }\n      repository = { status: 'resolved', slug: linked.slug, projectRepositoryId: sourceSession.projectRepositoryId };\n    }\n    if (repository.status === 'unlinked') {\n      throw new WorkItemRepositoryError('repository_unlinked', repository.hint);\n    }\n    if (repository.projectRepositoryId !== sourceSession.projectRepositoryId) {\n      throw new WorkItemRepositoryError(\n        'repository_mismatch',\n        `This run session is bound to a different repository than ${repository.slug}.`,\n      );\n    }\n    const requestContext = request.requestContext ?? new RequestContext();\n    // Preserve an authenticated caller when present. Autonomous starts still\n    // need a principal so deployed credential resolution can authenticate the\n    // request before selecting the stamped session owner's exclusive scope.\n    const existingUser = requestContext.get('user');\n    if (!existingUser || typeof existingUser !== 'object') {\n      requestContext.set('user', {\n        workosId: request.userId,\n        organizationId: request.orgId,\n      });\n    }\n    // Sessions kicked off against third-party content (a PR under review, or\n    // any pull-request-sourced work item) get `untrustedCheckout` so the SDK\n    // never ingests the checkout's AGENTS.md/CLAUDE.md into the system prompt\n    // or reminders — those files are attacker-writable in a PR branch.\n    const untrustedCheckout = request.workItem.input.externalSource?.type === 'pull-request';\n    // The trusted ref the SDK may serve project instruction files from on an\n    // untrusted checkout (the PR's base branch). Prefer the session record's\n    // base branch; fall back to the intake metadata captured from the PR.\n    const metadataBaseBranch = request.workItem.input.metadata?.baseBranch;\n    const baseRef =\n      (sourceSession.baseBranch || undefined) ??\n      (typeof metadataBaseBranch === 'string' && metadataBaseBranch ? metadataBaseBranch : undefined);\n    const sessionTags = {\n      factoryProjectId: request.factoryProjectId,\n      projectRepositoryId: sourceSession.projectRepositoryId,\n    };\n    const session = await this.#controller.createSession({\n      id: sourceSession.sessionId,\n      ownerId: request.userId,\n      resourceId: sourceSession.sessionId,\n      threadId: sourceSession.sessionId,\n      requestContext,\n      tags: sessionTags,\n    });\n    // Bound-agent authority gates (the transition tool, the factory-phase\n    // processor, workspace token selection) resolve the session address from\n    // controller state. Seed it server-side — `tags` covers fresh creation,\n    // the explicit setState covers get-or-create returning a session another\n    // caller created without them — so autonomous runs never depend on a\n    // browser connecting to populate the state. `untrustedCheckout` is a\n    // boolean so it rides only on state (tags are string-valued).\n    const targetRepositoryInstruction = `Target repository: ${repository.slug}. Before editing files or creating a pull request, verify this session's checkout matches the target repository.`;\n    const existingPluginInstructions = session.state.get()?.pluginInstructions ?? [];\n    await session.state.set({\n      ...sessionTags,\n      // The authoritative org id for every downstream identity read (the\n      // memory seam's organizationId): the session owner is a USER id, not an\n      // org, so it must never be improvised from ownerId.\n      factoryOrgId: request.orgId,\n      factoryModelScope: sessionModel.modelScope,\n      factoryOwnerUserId: sourceSession.userId,\n      pluginInstructions: [\n        ...existingPluginInstructions.filter(instruction => instruction !== targetRepositoryInstruction),\n        targetRepositoryInstruction,\n      ],\n      ...(untrustedCheckout ? { untrustedCheckout: true, ...(baseRef ? { baseRef } : {}) } : {}),\n    });\n    await primeTenantCredentialsForTenant({\n      orgId: request.orgId,\n      userId: sourceSession.userId,\n      credentialScope: sessionModel.modelScope,\n    });\n    // Apply the factory's main model before any model-dependent run work.\n    // Observational-memory settings are loaded per invocation by the input processor.\n    await hydrateFactorySession(session, {\n      orgId: request.orgId,\n      modelScope: sessionModel.modelScope,\n      ownerUserId: sourceSession.userId,\n      defaultModelId: sessionModel.modelId,\n    });\n    // The tool is `requireApproval`, and that prompt parks the run whether or not\n    // someone pressed Start — a person is reading the plan, not an approval queue.\n    // Starting the run was already the say-so; the rules engine still governs.\n    await session.permissions.setForTool({ toolName: 'factory_transition_work_item', policy: 'allow' });\n    const threadId = await configureThread(session, request);\n    const prepared = await storage.prepareRunStart({\n      orgId: request.orgId,\n      userId: request.userId,\n      factoryProjectId: request.factoryProjectId,\n      workItem: { id: request.workItem.id, input: request.workItem.input },\n      role: request.workItem.role,\n      session: { sessionId: sourceSession.sessionId, branch: sourceSession.branch, threadId },\n      resourceId: sourceSession.sessionId,\n      kickoffKey: request.kickoffKey,\n      kickoffMessage: null,\n    });\n    await session.thread.setSetting({ key: 'factoryWorkItemId', value: prepared.item.id });\n\n    let revision = prepared.item.revision;\n    const destinationStage = request.destinationStage;\n    if (destinationStage && (prepared.item.stages.length !== 1 || prepared.item.stages[0] !== destinationStage)) {\n      if (!this.#transitionService) throw new Error('Factory transition service is unavailable.');\n      const transition = await this.#transitionService.transition({\n        orgId: request.orgId,\n        factoryProjectId: request.factoryProjectId,\n        workItemId: prepared.item.id,\n        board: boardForWorkItem(prepared.item),\n        stage: destinationStage,\n        expectedRevision: prepared.item.revision,\n        actor: { type: 'human', id: request.userId },\n        ingress: { type: 'human', identity: `start:${request.kickoffKey}:transition` },\n        cause: 'run_start',\n      });\n      if (transition.status === 'rejected') {\n        await storage.markPendingStart(prepared.binding.id, 'failed', transition.reason);\n        throw new FactoryStartTransitionError(transition);\n      }\n      revision = transition.revision;\n    }\n\n    await storage.markPendingStart(prepared.binding.id, 'sent');\n    prepared.pendingStart.status = 'sent';\n\n    return {\n      workItemId: prepared.item.id,\n      bindingId: prepared.binding.id,\n      threadId,\n      resourceId: sourceSession.sessionId,\n      sessionId: sourceSession.sessionId,\n      branch: sourceSession.branch,\n      revision,\n      kickoffStatus: prepared.pendingStart.status,\n      replayed: prepared.replayed,\n    };\n  }\n}\n"],"mappings":";;;;;;;AAmCA,IAAa,0BAAb,cAA6C,MAAM;CAEtC;CAEA;CAHX,YACE,MACA,SACA,aAAgC,CAAC,GACjC;EACA,MAAM,OAAO;EAJJ,KAAA,OAAA;EAEA,KAAA,aAAA;EAGT,KAAK,OAAO;CACd;AACF;AAEA,IAAa,8BAAb,cAAiD,MAAM;CACrD;CAEA,YAAY,QAAkE;EAC5E,MAAM,OAAO,MAAM;EACnB,KAAK,OAAO;EACZ,KAAK,SAAS;CAChB;AACF;AAiBA,eAAe,qBACb,SACA,SACiE;CACjE,MAAM,UAAU,MAAM,QAAQ,SAAS,eAAe,QAAQ,SAAS;CACvE,IAAI,CAAC,WAAW,QAAQ,UAAU,QAAQ,SAAS,QAAQ,WAAW,QAAQ,QAC5E,MAAM,IAAI,MAAM,2BAA2B;CAE7C,MAAM,sBAAsB,QAAQ;CACpC,IAAI,CAAC,qBAAqB,MAAM,IAAI,MAAM,sCAAsC;CAChF,MAAM,oBAAoB,MAAM,QAAQ,oBAAoB,IAAI;EAAE,OAAO,QAAQ;EAAO,IAAI;CAAoB,CAAC;CACjH,IAAI,CAAC,mBAAmB,MAAM,IAAI,MAAM,sCAAsC;CAC9E,MAAM,aAAa,MAAM,QAAQ,YAAY,IAAI;EAAE,OAAO,QAAQ;EAAO,IAAI,kBAAkB;CAAa,CAAC;CAC7G,IAAI,CAAC,cAAc,WAAW,qBAAqB,QAAQ,kBACzD,MAAM,IAAI,MAAM,iDAAiD;CAEnE,OAAO;EAAE,GAAG;EAAS;CAAoB;AAC3C;AAEA,eAAe,gBAAgB,SAAyB,SAA+C;CACrG,MAAM,WAAW,QAAQ,OAAO,UAAU;CAG1C,MAAM,QAAQ,OAAO,OAAO;EAAE,OAAO,QAAQ;EAAa,KAAK;CAAM,CAAC;CACtE,MAAM,QAAQ,OAAO,WAAW;EAAE,KAAK;EAAoB,OAAO,QAAQ;CAAU,CAAC;CACrF,OAAO;AACT;AAEA,IAAa,0BAAb,MAAqC;CACnC;CACA;CACA;CACA;CAKA;CACA;CACA;CAEA,YACE,YACA,SACA,mBACA,eAKA,QACA,cACA;EACA,KAAKA,cAAc;EACnB,KAAKC,WAAW;EAChB,KAAKC,qBAAqB;EAC1B,KAAKC,iBAAiB;EACtB,KAAKC,UAAU;EACf,KAAKC,YAAY,cAAc;EAC/B,KAAKC,iBAAiB,cAAc;CACtC;CAEA,MAAM,QAAQ,SAAmE;EAC/E,MAAM,UAAU,KAAKL;EACrB,MAAM,gBACJ,OAAO,KAAKE,mBAAmB,aAAa,MAAM,KAAKA,eAAe,OAAO,IAAI,KAAKA;EACxF,IAAI,CAAC,eAAe,MAAM,IAAI,MAAM,+CAA+C;EACnF,MAAM,gBAAgB,MAAM,qBAAqB,eAAe,OAAO;EACvE,MAAM,eACJ,KAAKE,aAAa,KAAKC,iBACnB,MAAM,2BAA2B;GAC/B,UAAU,KAAKD;GACf,eAAe,KAAKC;GACpB,kBAAkB,QAAQ;GAC1B,OAAO,QAAQ;GACf,aAAa,cAAc;EAC7B,CAAC,IACD;GAAE,YAAY,QAAQ;GAAY,SAAS,QAAQ;EAAe;EACxE,MAAM,aAAa,QAAQ,SAAS,KAChC,MAAM,QAAQ,IAAI;GAAE,OAAO,QAAQ;GAAO,IAAI,QAAQ,SAAS;EAAG,CAAC,IACnE;EACJ,MAAM,eAAe,MAAM,KAAKF,SAAS,UAAU;GAAE,OAAO,QAAQ;GAAO,gBAAgB,CAAC,QAAQ;EAAE,CAAC;EACvG,IAAI,aAAa,MAAM,0BAA0B;GAC/C;GACA,OAAO,QAAQ;GACf,kBAAkB,QAAQ;GAC1B,MAAM,cAAc,EAAE,UAAU,QAAQ,SAAS,MAAM,YAAY,KAAK;GACxE,qBAAqB,cAAc,QAAQ;EAC7C,CAAC;EACD,IAAI,WAAW,WAAW,aAAa;GAGrC,IAAI,YAAY,SAAS,QAAQ,SAAS,KAAK,EAAE,cAAc,cAAc,WAC3E,MAAM,IAAI,wBACR,wBACA,2CAA2C,WAAW,WAAW,KAAK,IAAI,EAAE,IAC5E,WAAW,UACb;GAEF,MAAM,OAAO,MAAM,cAAc,oBAAoB,IAAI;IACvD,OAAO,QAAQ;IACf,IAAI,cAAc;GACpB,CAAC;GACD,MAAM,SAAS,QAAS,MAAM,cAAc,aAAa,IAAI;IAAE,OAAO,QAAQ;IAAO,IAAI,KAAK;GAAa,CAAC;GAC5G,MAAM,eAAe,OACjB,MAAM,cAAc,oBAAoB,KAAK;IAAE,OAAO,QAAQ;IAAO,cAAc,KAAK;GAAa,CAAC,IACtG,CAAC;GACL,IACE,CAAC,UACD,CAAC,WAAW,WAAW,SAAS,OAAO,IAAI,KAC3C,CAAC,aAAa,MAAK,cAAa,UAAU,OAAO,cAAc,mBAAmB,GAElF,MAAM,IAAI,wBACR,uBACA,gEACF;GAEF,aAAa;IAAE,QAAQ;IAAY,MAAM,OAAO;IAAM,qBAAqB,cAAc;GAAoB;EAC/G;EACA,IAAI,WAAW,WAAW,YACxB,MAAM,IAAI,wBAAwB,uBAAuB,WAAW,IAAI;EAE1E,IAAI,WAAW,wBAAwB,cAAc,qBACnD,MAAM,IAAI,wBACR,uBACA,4DAA4D,WAAW,KAAK,EAC9E;EAEF,MAAM,iBAAiB,QAAQ,kBAAkB,IAAI,eAAe;EAIpE,MAAM,eAAe,eAAe,IAAI,MAAM;EAC9C,IAAI,CAAC,gBAAgB,OAAO,iBAAiB,UAC3C,eAAe,IAAI,QAAQ;GACzB,UAAU,QAAQ;GAClB,gBAAgB,QAAQ;EAC1B,CAAC;EAMH,MAAM,oBAAoB,QAAQ,SAAS,MAAM,gBAAgB,SAAS;EAI1E,MAAM,qBAAqB,QAAQ,SAAS,MAAM,UAAU;EAC5D,MAAM,WACH,cAAc,cAAc,KAAA,OAC5B,OAAO,uBAAuB,YAAY,qBAAqB,qBAAqB,KAAA;EACvF,MAAM,cAAc;GAClB,kBAAkB,QAAQ;GAC1B,qBAAqB,cAAc;EACrC;EACA,MAAM,UAAU,MAAM,KAAKJ,YAAY,cAAc;GACnD,IAAI,cAAc;GAClB,SAAS,QAAQ;GACjB,YAAY,cAAc;GAC1B,UAAU,cAAc;GACxB;GACA,MAAM;EACR,CAAC;EAQD,MAAM,8BAA8B,sBAAsB,WAAW,KAAK;EAC1E,MAAM,6BAA6B,QAAQ,MAAM,IAAI,CAAC,EAAE,sBAAsB,CAAC;EAC/E,MAAM,QAAQ,MAAM,IAAI;GACtB,GAAG;GAIH,cAAc,QAAQ;GACtB,mBAAmB,aAAa;GAChC,oBAAoB,cAAc;GAClC,oBAAoB,CAClB,GAAG,2BAA2B,QAAO,gBAAe,gBAAgB,2BAA2B,GAC/F,2BACF;GACA,GAAI,oBAAoB;IAAE,mBAAmB;IAAM,GAAI,UAAU,EAAE,QAAQ,IAAI,CAAC;GAAG,IAAI,CAAC;EAC1F,CAAC;EACD,MAAM,gCAAgC;GACpC,OAAO,QAAQ;GACf,QAAQ,cAAc;GACtB,iBAAiB,aAAa;EAChC,CAAC;EAGD,MAAM,sBAAsB,SAAS;GACnC,OAAO,QAAQ;GACf,YAAY,aAAa;GACzB,aAAa,cAAc;GAC3B,gBAAgB,aAAa;EAC/B,CAAC;EAID,MAAM,QAAQ,YAAY,WAAW;GAAE,UAAU;GAAgC,QAAQ;EAAQ,CAAC;EAClG,MAAM,WAAW,MAAM,gBAAgB,SAAS,OAAO;EACvD,MAAM,WAAW,MAAM,QAAQ,gBAAgB;GAC7C,OAAO,QAAQ;GACf,QAAQ,QAAQ;GAChB,kBAAkB,QAAQ;GAC1B,UAAU;IAAE,IAAI,QAAQ,SAAS;IAAI,OAAO,QAAQ,SAAS;GAAM;GACnE,MAAM,QAAQ,SAAS;GACvB,SAAS;IAAE,WAAW,cAAc;IAAW,QAAQ,cAAc;IAAQ;GAAS;GACtF,YAAY,cAAc;GAC1B,YAAY,QAAQ;GACpB,gBAAgB;EAClB,CAAC;EACD,MAAM,QAAQ,OAAO,WAAW;GAAE,KAAK;GAAqB,OAAO,SAAS,KAAK;EAAG,CAAC;EAErF,IAAI,WAAW,SAAS,KAAK;EAC7B,MAAM,mBAAmB,QAAQ;EACjC,IAAI,qBAAqB,SAAS,KAAK,OAAO,WAAW,KAAK,SAAS,KAAK,OAAO,OAAO,mBAAmB;GAC3G,IAAI,CAAC,KAAKE,oBAAoB,MAAM,IAAI,MAAM,4CAA4C;GAC1F,MAAM,aAAa,MAAM,KAAKA,mBAAmB,WAAW;IAC1D,OAAO,QAAQ;IACf,kBAAkB,QAAQ;IAC1B,YAAY,SAAS,KAAK;IAC1B,OAAO,iBAAiB,SAAS,IAAI;IACrC,OAAO;IACP,kBAAkB,SAAS,KAAK;IAChC,OAAO;KAAE,MAAM;KAAS,IAAI,QAAQ;IAAO;IAC3C,SAAS;KAAE,MAAM;KAAS,UAAU,SAAS,QAAQ,WAAW;IAAa;IAC7E,OAAO;GACT,CAAC;GACD,IAAI,WAAW,WAAW,YAAY;IACpC,MAAM,QAAQ,iBAAiB,SAAS,QAAQ,IAAI,UAAU,WAAW,MAAM;IAC/E,MAAM,IAAI,4BAA4B,UAAU;GAClD;GACA,WAAW,WAAW;EACxB;EAEA,MAAM,QAAQ,iBAAiB,SAAS,QAAQ,IAAI,MAAM;EAC1D,SAAS,aAAa,SAAS;EAE/B,OAAO;GACL,YAAY,SAAS,KAAK;GAC1B,WAAW,SAAS,QAAQ;GAC5B;GACA,YAAY,cAAc;GAC1B,WAAW,cAAc;GACzB,QAAQ,cAAc;GACtB;GACA,eAAe,SAAS,aAAa;GACrC,UAAU,SAAS;EACrB;CACF;AACF"}

package/dist/session/credential-policy.d.ts

@@ -0,0 +1,12 @@
+import { type CredentialTenant } from '@mastra/code-sdk/agents/credential-resolver';
+import type { RequestContext } from '@mastra/core/request-context';
+import type { FactoryProjectsStorage } from '../storage/domains/projects/base.js';
+import type { WorkItemsStorage } from '../storage/domains/work-items/base.js';
+import type { SourceControlSessionLookup } from './factory-session.js';
+/** Resolve billing authority from authenticated identity and durable bindings, never session state. */
+export declare function resolveFactoryCredentialTenant(requestContext: RequestContext, deps: {
+    projects: FactoryProjectsStorage;
+    sourceControl: SourceControlSessionLookup;
+    workItems: WorkItemsStorage;
+}): Promise<CredentialTenant | undefined>;
+//# sourceMappingURL=credential-policy.d.ts.map

package/dist/session/credential-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential-policy.d.ts","sourceRoot":"","sources":["../../src/session/credential-policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,gBAAgB,EACtB,MAAM,6CAA6C,CAAC;AAErD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAEnE,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAClF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uCAAuC,CAAC;AAE9E,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,sBAAsB,CAAC;AAEvE,uGAAuG;AACvG,wBAAsB,8BAA8B,CAClD,cAAc,EAAE,cAAc,EAC9B,IAAI,EAAE;IACJ,QAAQ,EAAE,sBAAsB,CAAC;IACjC,aAAa,EAAE,0BAA0B,CAAC;IAC1C,SAAS,EAAE,gBAAgB,CAAC;CAC7B,GACA,OAAO,CAAC,gBAAgB,GAAG,SAAS,CAAC,CAwCvC"}

package/dist/session/credential-policy.js

@@ -0,0 +1,46 @@
+import { parseSupervisorResourceId } from "../supervisor/session.js";
+import { resolveAuthenticatedCredentialTenant } from "@mastra/code-sdk/agents/credential-resolver";
+//#region src/session/credential-policy.ts
+/** Resolve billing authority from authenticated identity and durable bindings, never session state. */
+async function resolveFactoryCredentialTenant(requestContext, deps) {
+	const principal = resolveAuthenticatedCredentialTenant(requestContext);
+	if (!principal) return void 0;
+	const controller = requestContext.get("controller");
+	if (!controller?.resourceId) return principal;
+	const supervisorProjectId = parseSupervisorResourceId(controller.resourceId);
+	if (supervisorProjectId) {
+		const project = await deps.projects.getById({ id: supervisorProjectId });
+		if (!project || project.orgId !== principal.orgId) throw new Error("Factory model policy is unavailable.");
+		return {
+			orgId: project.orgId,
+			userId: project.createdBy,
+			credentialScope: project.modelScope
+		};
+	}
+	const sourceSession = await deps.sourceControl.getBySessionId(controller.resourceId);
+	const binding = principal.orgId && controller.threadId ? await deps.workItems.findActiveRunBindingByThread({
+		orgId: principal.orgId,
+		resourceId: controller.resourceId,
+		sessionId: controller.resourceId,
+		threadId: controller.threadId,
+		rejectAmbiguous: true
+	}) : null;
+	if (!sourceSession) {
+		if (!binding && (controller.resourceId === principal.userId || controller.resourceId.startsWith("channel:"))) return principal;
+		throw new Error("Factory session ownership is unavailable.");
+	}
+	if (sourceSession.orgId !== principal.orgId || sourceSession.visibility === "private" && sourceSession.userId !== principal.userId) throw new Error("Factory session is not available to the current user.");
+	if (!sourceSession.factoryProjectId) throw new Error("Factory session ownership is unavailable.");
+	const projectId = binding?.factoryProjectId ?? sourceSession.factoryProjectId;
+	const project = await deps.projects.getById({ id: projectId });
+	if (!project || project.orgId !== sourceSession.orgId) throw new Error("Factory model policy is unavailable.");
+	return {
+		orgId: project.orgId,
+		userId: sourceSession.userId,
+		credentialScope: project.modelScope
+	};
+}
+//#endregion
+export { resolveFactoryCredentialTenant };
+
+//# sourceMappingURL=credential-policy.js.map

package/dist/session/credential-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential-policy.js","names":[],"sources":["../../src/session/credential-policy.ts"],"sourcesContent":["import {\n  resolveAuthenticatedCredentialTenant,\n  type CredentialTenant,\n} from '@mastra/code-sdk/agents/credential-resolver';\nimport type { AgentControllerRequestContext } from '@mastra/core/agent-controller';\nimport type { RequestContext } from '@mastra/core/request-context';\n\nimport type { FactoryProjectsStorage } from '../storage/domains/projects/base.js';\nimport type { WorkItemsStorage } from '../storage/domains/work-items/base.js';\nimport { parseSupervisorResourceId } from '../supervisor/session.js';\nimport type { SourceControlSessionLookup } from './factory-session.js';\n\n/** Resolve billing authority from authenticated identity and durable bindings, never session state. */\nexport async function resolveFactoryCredentialTenant(\n  requestContext: RequestContext,\n  deps: {\n    projects: FactoryProjectsStorage;\n    sourceControl: SourceControlSessionLookup;\n    workItems: WorkItemsStorage;\n  },\n): Promise<CredentialTenant | undefined> {\n  const principal = resolveAuthenticatedCredentialTenant(requestContext);\n  if (!principal) return undefined;\n  const controller = requestContext.get('controller') as AgentControllerRequestContext | undefined;\n  if (!controller?.resourceId) return principal;\n\n  const supervisorProjectId = parseSupervisorResourceId(controller.resourceId);\n  if (supervisorProjectId) {\n    const project = await deps.projects.getById({ id: supervisorProjectId });\n    if (!project || project.orgId !== principal.orgId) throw new Error('Factory model policy is unavailable.');\n    return { orgId: project.orgId, userId: project.createdBy, credentialScope: project.modelScope };\n  }\n\n  const sourceSession = await deps.sourceControl.getBySessionId(controller.resourceId);\n  const binding =\n    principal.orgId && controller.threadId\n      ? await deps.workItems.findActiveRunBindingByThread({\n          orgId: principal.orgId,\n          resourceId: controller.resourceId,\n          sessionId: controller.resourceId,\n          threadId: controller.threadId,\n          rejectAmbiguous: true,\n        })\n      : null;\n  if (!sourceSession) {\n    if (!binding && (controller.resourceId === principal.userId || controller.resourceId.startsWith('channel:')))\n      return principal;\n    throw new Error('Factory session ownership is unavailable.');\n  }\n  if (\n    sourceSession.orgId !== principal.orgId ||\n    (sourceSession.visibility === 'private' && sourceSession.userId !== principal.userId)\n  ) {\n    throw new Error('Factory session is not available to the current user.');\n  }\n  if (!sourceSession.factoryProjectId) throw new Error('Factory session ownership is unavailable.');\n  const projectId = binding?.factoryProjectId ?? sourceSession.factoryProjectId;\n  const project = await deps.projects.getById({ id: projectId });\n  if (!project || project.orgId !== sourceSession.orgId) throw new Error('Factory model policy is unavailable.');\n  return { orgId: project.orgId, userId: sourceSession.userId, credentialScope: project.modelScope };\n}\n"],"mappings":";;;;AAaA,eAAsB,+BACpB,gBACA,MAKuC;CACvC,MAAM,YAAY,qCAAqC,cAAc;CACrE,IAAI,CAAC,WAAW,OAAO,KAAA;CACvB,MAAM,aAAa,eAAe,IAAI,YAAY;CAClD,IAAI,CAAC,YAAY,YAAY,OAAO;CAEpC,MAAM,sBAAsB,0BAA0B,WAAW,UAAU;CAC3E,IAAI,qBAAqB;EACvB,MAAM,UAAU,MAAM,KAAK,SAAS,QAAQ,EAAE,IAAI,oBAAoB,CAAC;EACvE,IAAI,CAAC,WAAW,QAAQ,UAAU,UAAU,OAAO,MAAM,IAAI,MAAM,sCAAsC;EACzG,OAAO;GAAE,OAAO,QAAQ;GAAO,QAAQ,QAAQ;GAAW,iBAAiB,QAAQ;EAAW;CAChG;CAEA,MAAM,gBAAgB,MAAM,KAAK,cAAc,eAAe,WAAW,UAAU;CACnF,MAAM,UACJ,UAAU,SAAS,WAAW,WAC1B,MAAM,KAAK,UAAU,6BAA6B;EAChD,OAAO,UAAU;EACjB,YAAY,WAAW;EACvB,WAAW,WAAW;EACtB,UAAU,WAAW;EACrB,iBAAiB;CACnB,CAAC,IACD;CACN,IAAI,CAAC,eAAe;EAClB,IAAI,CAAC,YAAY,WAAW,eAAe,UAAU,UAAU,WAAW,WAAW,WAAW,UAAU,IACxG,OAAO;EACT,MAAM,IAAI,MAAM,2CAA2C;CAC7D;CACA,IACE,cAAc,UAAU,UAAU,SACjC,cAAc,eAAe,aAAa,cAAc,WAAW,UAAU,QAE9E,MAAM,IAAI,MAAM,uDAAuD;CAEzE,IAAI,CAAC,cAAc,kBAAkB,MAAM,IAAI,MAAM,2CAA2C;CAChG,MAAM,YAAY,SAAS,oBAAoB,cAAc;CAC7D,MAAM,UAAU,MAAM,KAAK,SAAS,QAAQ,EAAE,IAAI,UAAU,CAAC;CAC7D,IAAI,CAAC,WAAW,QAAQ,UAAU,cAAc,OAAO,MAAM,IAAI,MAAM,sCAAsC;CAC7G,OAAO;EAAE,OAAO,QAAQ;EAAO,QAAQ,cAAc;EAAQ,iBAAiB,QAAQ;CAAW;AACnG"}

package/dist/session/default-model-hydration.d.ts

@@ -1,6 +1,7 @@
 import type { ModelDefaultsStorage } from '../storage/domains/model-defaults/base.js';
-import type { SourceControlStorageHandle } from '../storage/domains/source-control/base.js';
+import type { FactoryProjectsStorage } from '../storage/domains/projects/base.js';
 import type { WorkItemsStorage } from '../storage/domains/work-items/base.js';
+import type { SourceControlSessionLookup } from './factory-session.js';
 export interface DefaultModelApplicableSession {
     model: {
         switch(modelId: string): Promise<unknown>;
@@ -20,6 +21,7 @@ export interface DefaultModelHydrationSession extends DefaultModelApplicableSess
     };
     state: {
         get(): Record<string, unknown> | undefined;
+        set(updates: Record<string, unknown>): Promise<unknown>;
     };
     thread: {
         getId(): string | null | undefined;
@@ -29,12 +31,11 @@ export interface DefaultModelHydrationSession extends DefaultModelApplicableSess
     };
 }
 export interface DefaultModelHydrationDependencies {
-    sourceControl: {
-        sessions: Pick<SourceControlStorageHandle['sessions'], 'getBySessionId'>;
-    };
+    sourceControl: Pick<SourceControlSessionLookup, 'getBySessionId'>;
+    projects: Pick<FactoryProjectsStorage, 'getById'>;
     workItems: Pick<WorkItemsStorage, 'findActiveRunBindingByThread'>;
     modelDefaults: Pick<ModelDefaultsStorage, 'get'>;
 }
-/** Seed the user's default model into a new interactive chat; a chat with a user message keeps its model. */
-export declare function hydrateSessionDefaultModel(session: DefaultModelHydrationSession, { sourceControl, workItems, modelDefaults }: DefaultModelHydrationDependencies): Promise<void>;
+/** Seed a new chat's scoped default model; a chat with a user message keeps its model. */
+export declare function hydrateSessionDefaultModel(session: DefaultModelHydrationSession, { sourceControl, projects, workItems, modelDefaults }: DefaultModelHydrationDependencies): Promise<void>;
 //# sourceMappingURL=default-model-hydration.d.ts.map

package/dist/session/default-model-hydration.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"default-model-hydration.d.ts","sourceRoot":"","sources":["../../src/session/default-model-hydration.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACtF,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,2CAA2C,CAAC;AAC5F,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uCAAuC,CAAC;AAE9E,MAAM,WAAW,6BAA6B;IAC5C,KAAK,EAAE;QAAE,MAAM,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;KAAE,CAAC;IACrD,SAAS,EAAE;QAAE,KAAK,EAAE;YAAE,GAAG,CAAC,IAAI,EAAE;gBAAE,OAAO,EAAE,MAAM,CAAC;gBAAC,SAAS,EAAE,MAAM,CAAA;aAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;SAAE,CAAA;KAAE,CAAC;CAC/F;AAED,MAAM,WAAW,4BAA6B,SAAQ,6BAA6B;IACjF,QAAQ,CAAC,QAAQ,EAAE;QAAE,aAAa,IAAI,MAAM,CAAA;KAAE,CAAC;IAC/C,KAAK,EAAE;QAAE,GAAG,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAA;KAAE,CAAC;IACtD,MAAM,EAAE;QACN,KAAK,IAAI,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;QACnC,gBAAgB,CAAC,IAAI,EAAE;YAAE,QAAQ,EAAE,MAAM,CAAA;SAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;KAChE,CAAC;CACH;AAUD,MAAM,WAAW,iCAAiC;IAChD,aAAa,EAAE;QACb,QAAQ,EAAE,IAAI,CAAC,0BAA0B,CAAC,UAAU,CAAC,EAAE,gBAAgB,CAAC,CAAC;KAC1E,CAAC;IACF,SAAS,EAAE,IAAI,CAAC,gBAAgB,EAAE,8BAA8B,CAAC,CAAC;IAClE,aAAa,EAAE,IAAI,CAAC,oBAAoB,EAAE,KAAK,CAAC,CAAC;CAClD;AAED,6GAA6G;AAC7G,wBAAsB,0BAA0B,CAC9C,OAAO,EAAE,4BAA4B,EACrC,EAAE,aAAa,EAAE,SAAS,EAAE,aAAa,EAAE,EAAE,iCAAiC,GAC7E,OAAO,CAAC,IAAI,CAAC,CAyBf"}
+{"version":3,"file":"default-model-hydration.d.ts","sourceRoot":"","sources":["../../src/session/default-model-hydration.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACtF,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAClF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uCAAuC,CAAC;AAC9E,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,sBAAsB,CAAC;AAEvE,MAAM,WAAW,6BAA6B;IAC5C,KAAK,EAAE;QAAE,MAAM,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;KAAE,CAAC;IACrD,SAAS,EAAE;QAAE,KAAK,EAAE;YAAE,GAAG,CAAC,IAAI,EAAE;gBAAE,OAAO,EAAE,MAAM,CAAC;gBAAC,SAAS,EAAE,MAAM,CAAA;aAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;SAAE,CAAA;KAAE,CAAC;CAC/F;AAED,MAAM,WAAW,4BAA6B,SAAQ,6BAA6B;IACjF,QAAQ,CAAC,QAAQ,EAAE;QAAE,aAAa,IAAI,MAAM,CAAA;KAAE,CAAC;IAC/C,KAAK,EAAE;QACL,GAAG,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC;QAC3C,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;KACzD,CAAC;IACF,MAAM,EAAE;QACN,KAAK,IAAI,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;QACnC,gBAAgB,CAAC,IAAI,EAAE;YAAE,QAAQ,EAAE,MAAM,CAAA;SAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;KAChE,CAAC;CACH;AAUD,MAAM,WAAW,iCAAiC;IAChD,aAAa,EAAE,IAAI,CAAC,0BAA0B,EAAE,gBAAgB,CAAC,CAAC;IAClE,QAAQ,EAAE,IAAI,CAAC,sBAAsB,EAAE,SAAS,CAAC,CAAC;IAClD,SAAS,EAAE,IAAI,CAAC,gBAAgB,EAAE,8BAA8B,CAAC,CAAC;IAClE,aAAa,EAAE,IAAI,CAAC,oBAAoB,EAAE,KAAK,CAAC,CAAC;CAClD;AAED,0FAA0F;AAC1F,wBAAsB,0BAA0B,CAC9C,OAAO,EAAE,4BAA4B,EACrC,EAAE,aAAa,EAAE,QAAQ,EAAE,SAAS,EAAE,aAAa,EAAE,EAAE,iCAAiC,GACvF,OAAO,CAAC,IAAI,CAAC,CAoEf"}