@mastra/factory 0.24.0-alpha.6 → 0.24.0-alpha.8

package/dist/integrations/gitlab/rules.js.map

@@ -1 +1 @@
-{"version":3,"file":"rules.js","names":["#targets","#ingestProject","#trusted","#evaluate","#trackOpenMergeRequest"],"sources":["../../../src/integrations/gitlab/rules.ts"],"sourcesContent":["import {\n  boardEventHandlers,\n  boardForWorkItem,\n  eventBoardId,\n  rulePhaseField,\n  withBoardClosure,\n} from '../../boards/index.js';\nimport type { BoardRegistry } from '../../boards/index.js';\nimport { hasExplicitRuleOverride, selectEventRule } from '../../rules/event-rules.js';\nimport type {\n  FactoryGitLabEventName,\n  FactoryGitLabRuleContext,\n  FactoryRuleActor,\n  FactoryRuleDecision,\n} from '../../rules/types.js';\nimport { assertFactoryDecisionTarget, validateFactoryRuleDecisions } from '../../rules/validation.js';\nimport type { IntakeStorage } from '../../storage/domains/intake/base.js';\nimport type { FactoryProjectsStorage } from '../../storage/domains/projects/base.js';\nimport type {\n  ExternalRepositoryProjectTarget,\n  SourceControlStorageHandle,\n} from '../../storage/domains/source-control/base.js';\nimport { WorkItemUpdateConflictError } from '../../storage/domains/work-items/base.js';\nimport type { WorkItemRow, WorkItemsStorage } from '../../storage/domains/work-items/base.js';\nimport type { IntegrationContext } from '../base.js';\nimport { recordPullRequestHead } from '../pull-request-head.js';\nimport type { GitLabEventRules } from './default-rules.js';\nimport { encodeIssueReference, encodeSourceId, GITLAB_TRUSTED_ACCESS_LEVEL } from './integration.js';\nimport type { ParsedGitLabWebhook } from './webhook.js';\n\nconst RULE_TIMEOUT_MS = 5_000;\n\ntype IngressStatus = 'ignored' | 'committed' | 'replayed' | 'missing';\n\nfunction object(value: unknown): Record<string, unknown> | undefined {\n  return value && typeof value === 'object' && !Array.isArray(value) ? (value as Record<string, unknown>) : undefined;\n}\n\nfunction string(value: unknown): string | undefined {\n  return typeof value === 'string' && value.length > 0 ? value : undefined;\n}\n\nfunction number(value: unknown): number | undefined {\n  return typeof value === 'number' && Number.isFinite(value) ? value : undefined;\n}\n\n/** GitLab sends `2024-01-02T03:04:05Z` or `2024-01-02 03:04:05 UTC`. */\nfunction timestamp(value: unknown): number | undefined {\n  const text = string(value);\n  if (!text) return undefined;\n  const parsed = Date.parse(text.replace(' UTC', 'Z').replace(' ', 'T'));\n  return Number.isNaN(parsed) ? undefined : parsed;\n}\n\nfunction boolean(value: unknown): boolean | undefined {\n  return typeof value === 'boolean' ? value : undefined;\n}\n\nfunction usernames(value: unknown): string[] {\n  if (!Array.isArray(value)) return [];\n  return value.flatMap(entry => {\n    const username = string(object(entry)?.username);\n    return username ? [username] : [];\n  });\n}\n\nfunction labelNames(value: unknown): string[] {\n  if (!Array.isArray(value)) return [];\n  return value.flatMap(entry => {\n    if (typeof entry === 'string') return entry ? [entry] : [];\n    const title = string(object(entry)?.title) ?? string(object(entry)?.name);\n    return title ? [title] : [];\n  });\n}\n\nfunction labelColors(value: unknown): Record<string, string> {\n  if (!Array.isArray(value)) return {};\n  return Object.fromEntries(\n    value.flatMap(entry => {\n      const label = object(entry);\n      const name = string(label?.title) ?? string(label?.name);\n      const color = string(label?.color);\n      return name && color ? [[name, color]] : [];\n    }),\n  );\n}\n\nfunction eventName(parsed: ParsedGitLabWebhook): FactoryGitLabEventName | undefined {\n  const attributes = object(parsed.payload.object_attributes);\n  const action = string(attributes?.action)?.toLowerCase();\n  if (parsed.event === 'Issue Hook') {\n    if (action === 'open' || action === 'reopen') return 'issueOpened';\n    if (action === 'close') return 'issueClosed';\n    return 'issueUpdated';\n  }\n  if (parsed.event === 'Note Hook') {\n    const noteableType = string(attributes?.noteable_type);\n    if (noteableType === 'Issue') return 'issueCommented';\n    if (noteableType === 'MergeRequest') return 'mergeRequestCommented';\n    return;\n  }\n  if (parsed.event !== 'Merge Request Hook') return;\n  if (action === 'open' || action === 'reopen') return 'mergeRequestOpened';\n  if (action === 'merge') return 'mergeRequestMerged';\n  if (action === 'close') return 'mergeRequestClosed';\n  return 'mergeRequestUpdated';\n}\n\nfunction normalizeHost(host: string): string {\n  return host.trim().toLowerCase().replace(/\\.$/, '');\n}\n\nfunction hostFromPayload(parsed: ParsedGitLabWebhook): string | undefined {\n  const declaredHost = parsed.instanceHost ? normalizeHost(parsed.instanceHost) : undefined;\n  const projectUrl = string(object(parsed.payload.project)?.web_url);\n  if (!projectUrl) return declaredHost;\n  try {\n    const payloadHost = normalizeHost(new URL(projectUrl).host);\n    if (declaredHost && declaredHost !== payloadHost) return undefined;\n    return payloadHost;\n  } catch {\n    return undefined;\n  }\n}\n\nfunction mergeRequestSourceKey(host: string, projectId: number, mergeRequestIid: number): string {\n  return `gitlab-pr:${Buffer.from(JSON.stringify({ version: 1, host, projectId, mergeRequestIid }), 'utf8').toString('base64url')}`;\n}\n\nasync function withRuleTimeout<T>(promise: Promise<T>): Promise<T> {\n  let timeout: ReturnType<typeof setTimeout> | undefined;\n  try {\n    return await Promise.race([\n      promise,\n      new Promise<never>((_, reject) => {\n        timeout = setTimeout(() => reject(new Error('FACTORY_RULE_TIMEOUT')), RULE_TIMEOUT_MS);\n      }),\n    ]);\n  } finally {\n    if (timeout) clearTimeout(timeout);\n  }\n}\n\nconst MAX_STALE_RULE_ATTEMPTS = 3;\n\nexport interface GitLabRulesIntegration {\n  readonly rules: GitLabEventRules;\n  resolveActiveConnectionForHost?(storedConnectionId: string, host: string): Promise<string>;\n  getProjectMemberAccessLevel(connectionId: string, projectId: string, username: string): Promise<number | undefined>;\n  getWorkItemAuthorUsername(\n    connectionId: string,\n    projectId: string,\n    kind: 'issue' | 'merge_request',\n    iid: number,\n  ): Promise<string | undefined>;\n}\n\ninterface GitLabRulesOptions {\n  gitlab: GitLabRulesIntegration;\n  sourceControl: SourceControlStorageHandle;\n  projects: FactoryProjectsStorage;\n  storage: WorkItemsStorage;\n  intake: IntakeStorage;\n  configVersion: string;\n  boards: BoardRegistry;\n}\n\ninterface ProjectTarget {\n  target: ExternalRepositoryProjectTarget;\n  connectionIds: string[];\n}\n\nexport class GitLabRules {\n  constructor(private readonly options: GitLabRulesOptions) {}\n\n  async ingest(parsed: ParsedGitLabWebhook): Promise<{ status: IngressStatus }> {\n    const event = eventName(parsed);\n    const project = object(parsed.payload.project);\n    const projectId = number(project?.id);\n    const projectPath = string(project?.path_with_namespace);\n    const host = hostFromPayload(parsed);\n    const username = string(parsed.payload.user_username) ?? string(object(parsed.payload.user)?.username);\n    if (!event || !projectId || !projectPath || !host || !username) return { status: 'ignored' };\n\n    const targets = await this.#targets(String(projectId), host);\n    if (targets.length === 0) return { status: 'ignored' };\n    const results: Array<{ status: IngressStatus }> = [];\n    for (const target of targets) {\n      results.push(await this.#ingestProject(parsed, event, projectId, projectPath, host, username, target));\n    }\n    if (results.some(result => result.status === 'committed')) return { status: 'committed' };\n    if (results.some(result => result.status === 'replayed')) return { status: 'replayed' };\n    return results[0] ?? { status: 'ignored' };\n  }\n\n  async #targets(repositoryExternalId: string, host: string): Promise<ProjectTarget[]> {\n    const grouped = new Map<string, ProjectTarget>();\n    const keys = (await this.options.sourceControl.projectRepositories.listConfiguredExternalKeys()).filter(\n      key => key.repositoryExternalId === repositoryExternalId,\n    );\n    for (const key of keys) {\n      const targets = await this.options.sourceControl.projectRepositories.listByExternalRepository({\n        installationExternalId: key.installationExternalId,\n        repositoryExternalId,\n      });\n      for (const target of targets) {\n        const installation = await this.options.sourceControl.installations.findByExternalId({\n          orgId: target.orgId,\n          externalId: key.installationExternalId,\n        });\n        const installationHost = string(installation?.providerMetadata.host);\n        if (!installationHost || normalizeHost(installationHost) !== normalizeHost(host)) continue;\n        const id = `${target.orgId}:${target.factoryProjectId}`;\n        const current = grouped.get(id);\n        if (current) {\n          if (!current.connectionIds.includes(key.installationExternalId)) {\n            current.connectionIds.push(key.installationExternalId);\n          }\n        } else {\n          grouped.set(id, { target, connectionIds: [key.installationExternalId] });\n        }\n      }\n    }\n    return [...grouped.values()];\n  }\n\n  async #ingestProject(\n    parsed: ParsedGitLabWebhook,\n    event: FactoryGitLabEventName,\n    projectId: number,\n    projectPath: string,\n    host: string,\n    username: string,\n    target: ProjectTarget,\n  ): Promise<{ status: IngressStatus }> {\n    const factoryProject = await this.options.projects.get({\n      orgId: target.target.orgId,\n      id: target.target.factoryProjectId,\n    });\n    if (!factoryProject) return { status: 'missing' };\n\n    const sourceId = encodeSourceId({ host, projectId: String(projectId) });\n    const config = await this.options.intake.getConfig({\n      orgId: target.target.orgId,\n      integrationIds: ['gitlab'],\n    });\n    if (!config.gitlab?.enabled || !config.gitlab.sourceIds?.includes(sourceId)) return { status: 'ignored' };\n    const binding = (\n      await this.options.intake.listBindings({ orgId: target.target.orgId, integrationId: 'gitlab' })\n    ).find(\n      candidate => candidate.sourceId === sourceId && candidate.factoryProjectId === target.target.factoryProjectId,\n    );\n    if (!binding) return { status: 'ignored' };\n    const board = this.options.boards.get(binding.board ?? 'work');\n    if (!board) return { status: 'ignored' };\n\n    const connectionIds = [\n      ...new Set(\n        await Promise.all(\n          target.connectionIds.map(\n            connectionId => this.options.gitlab.resolveActiveConnectionForHost?.(connectionId, host) ?? connectionId,\n          ),\n        ),\n      ),\n    ];\n\n    const attributes = object(parsed.payload.object_attributes);\n    const issue = parsed.event === 'Note Hook' ? object(parsed.payload.issue) : attributes;\n    const mergeRequest = parsed.event === 'Note Hook' ? object(parsed.payload.merge_request) : attributes;\n    const issueIid = number(issue?.iid);\n    const mergeRequestIid = number(mergeRequest?.iid);\n    const issueSourceKey = issueIid\n      ? encodeIssueReference({ host, projectId: String(projectId), issueIid })\n      : undefined;\n    const mergeRequestKey = mergeRequestIid ? mergeRequestSourceKey(host, projectId, mergeRequestIid) : undefined;\n    const items = await this.options.storage.list({\n      orgId: target.target.orgId,\n      factoryProjectId: target.target.factoryProjectId,\n    });\n    const issueItem = issueSourceKey\n      ? items.find(\n          item => item.externalSource?.integrationId === 'gitlab' && item.externalSource.externalId === issueSourceKey,\n        )\n      : undefined;\n    const reviewItem = mergeRequestKey\n      ? items.find(\n          item => item.externalSource?.integrationId === 'gitlab' && item.externalSource.externalId === mergeRequestKey,\n        )\n      : undefined;\n    const headBranch = string(mergeRequest?.source_branch) ?? '';\n    const authoringItem = headBranch\n      ? items.find(\n          item =>\n            item.externalSource?.type !== 'pull-request' &&\n            Object.values(item.sessions).some(session => session.branch === headBranch),\n        )\n      : undefined;\n    const actorTrusted = await this.#trusted(connectionIds, String(projectId), username);\n    const eventUserId = number(object(parsed.payload.user)?.id) ?? number(parsed.payload.user_id);\n    const resolveAuthor = async (\n      item: Record<string, unknown> | undefined,\n      kind: 'issue' | 'merge_request',\n      iid: number | undefined,\n    ): Promise<string | undefined> => {\n      if (!item || !iid) return undefined;\n      const embedded = string(object(item.author)?.username);\n      if (embedded) return embedded;\n      if (eventUserId && eventUserId === number(item.author_id)) return username;\n      for (const connectionId of connectionIds) {\n        try {\n          const resolved = await this.options.gitlab.getWorkItemAuthorUsername(\n            connectionId,\n            String(projectId),\n            kind,\n            iid,\n          );\n          if (resolved) return resolved;\n        } catch {\n          // Another active credential may cover this project; otherwise leave author trust unset.\n        }\n      }\n      return undefined;\n    };\n    const [issueAuthor, mergeRequestAuthor] = await Promise.all([\n      resolveAuthor(issue, 'issue', issueIid),\n      resolveAuthor(mergeRequest, 'merge_request', mergeRequestIid),\n    ]);\n    const authorTrusted = async (author: string | undefined): Promise<boolean> => {\n      if (!author) return false;\n      return author === username ? actorTrusted : this.#trusted(connectionIds, String(projectId), author);\n    };\n    const [issueAuthorTrusted, mergeRequestAuthorTrusted] = await Promise.all([\n      authorTrusted(issueAuthor),\n      authorTrusted(mergeRequestAuthor),\n    ]);\n    const actor: FactoryRuleActor = {\n      type: 'gitlab',\n      username,\n      trusted: actorTrusted,\n      factoryAuthored: false,\n    };\n\n    const candidates: Array<WorkItemRow | undefined> =\n      event === 'mergeRequestMerged'\n        ? [...new Map([reviewItem, authoringItem].filter(Boolean).map(item => [item!.id, item!])).values()]\n        : event === 'mergeRequestCommented'\n          ? [authoringItem ?? reviewItem]\n          : event === 'mergeRequestOpened'\n            ? [authoringItem, ...(authoringItem ? [authoringItem] : [])]\n            : event.startsWith('mergeRequest')\n              ? [reviewItem ?? authoringItem]\n              : [issueItem];\n    const results = [];\n    for (const [index, item] of candidates.entries()) {\n      results.push(\n        await this.#evaluate({\n          parsed,\n          event,\n          projectId,\n          projectPath,\n          host,\n          actor,\n          orgId: target.target.orgId,\n          factoryProjectId: target.target.factoryProjectId,\n          factoryProject,\n          board: { board: board.id, initialPhase: board.initialPhase },\n          issue,\n          issueAuthor,\n          issueAuthorTrusted,\n          issueIid,\n          issueSourceKey,\n          mergeRequest,\n          mergeRequestAuthor,\n          mergeRequestAuthorTrusted,\n          mergeRequestIid,\n          mergeRequestKey,\n          factoryAuthored: Boolean(authoringItem),\n          item,\n          ingressIdentity: `gitlab:${projectId}:${parsed.deliveryId}${index ? `:${item?.id ?? index}` : ''}`,\n          // A merge request opening concerns two cards: its own Review card,\n          // which the integration handler files against the authoring item,\n          // and that authoring item, which its board may react to. The second\n          // evaluation runs only the board handler, under an id-suffixed\n          // identity so it is not dropped as a replay of the first.\n          ...(event === 'mergeRequestOpened' ? { mergeRequestOpenedScope: index ? ('board' as const) : ('intake' as const) } : {}),\n        }),\n      );\n    }\n    // The authoring Work item records which merge request it has out, so the\n    // Work transition policy keeps an agent from closing the work while it is\n    // open. Sessions carry no repository, so a branch shared by two Work cards\n    // is ambiguous and records nothing.\n    const branchOwners = headBranch\n      ? items.filter(\n          item =>\n            item.externalSource?.type !== 'pull-request' &&\n            Object.values(item.sessions).some(session => session.branch === headBranch),\n        )\n      : [];\n    if (authoringItem && mergeRequestIid && branchOwners.length === 1) {\n      await this.#trackOpenMergeRequest({\n        orgId: authoringItem.orgId,\n        id: authoringItem.id,\n        event,\n        mergeRequestIid,\n        eventAt: timestamp(mergeRequest?.updated_at),\n        opened: string(mergeRequest?.state) === 'opened' && (actorTrusted || mergeRequestAuthorTrusted),\n        headSha: string(object(mergeRequest?.last_commit)?.id)?.toLowerCase(),\n      });\n    }\n    // A push moves the head a recorded review verdict was given on. Recording\n    // the new head lets the verdict badge show that it is outdated, while the\n    // verdict itself stays so the next pass still runs as a re-review.\n    const headSha = string(object(mergeRequest?.last_commit)?.id)?.toLowerCase();\n    const headAt = timestamp(mergeRequest?.updated_at);\n    if (event === 'mergeRequestUpdated' && headSha && reviewItem) {\n      const parent = items.find(item => item.id === reviewItem.parentWorkItemId);\n      // The authoring Work item mirrors the verdict of the merge request it has\n      // out; a push to an older one must not mark its successor's verdict.\n      await recordPullRequestHead(this.options.storage, {\n        orgId: reviewItem.orgId,\n        id: reviewItem.id,\n        headSha,\n        headAt,\n      });\n      if (parent) {\n        await recordPullRequestHead(this.options.storage, {\n          orgId: parent.orgId,\n          id: parent.id,\n          headSha,\n          headAt,\n          ownedPullRequestNumber: mergeRequestIid,\n        });\n      }\n    }\n    if (results.some(result => result.status === 'committed')) return { status: 'committed' };\n    if (results.some(result => result.status === 'replayed')) return { status: 'replayed' };\n    return results[0] ?? { status: 'ignored' };\n  }\n\n  /**\n   * Records or clears the merge request a Work card has out. Each merge\n   * request's last applied event time is kept on the card, so an opening that\n   * is older than a close already applied (a replay, or a close delivered\n   * first) is ignored, while a genuine reopen is newer and records it again.\n   */\n  async #trackOpenMergeRequest(input: {\n    orgId: string;\n    id: string;\n    event: string;\n    mergeRequestIid: number;\n    eventAt: number | undefined;\n    opened: boolean;\n    headSha: string | undefined;\n  }): Promise<void> {\n    const settling = input.event === 'mergeRequestMerged' || input.event === 'mergeRequestClosed';\n    if (input.event !== 'mergeRequestOpened' && !settling) return;\n    const key = String(input.mergeRequestIid);\n    for (let attempt = 0; attempt < 3; attempt++) {\n      const item = await this.options.storage.get({ orgId: input.orgId, id: input.id });\n      if (!item) return;\n      const events = object(item.metadata?.mergeRequestEvents) ?? {};\n      const last = object(events[key]);\n      const lastAt = number(last?.at);\n      if (input.eventAt !== undefined && lastAt !== undefined && lastAt >= input.eventAt) return;\n      // Without a timestamp, only an opening that no close has settled is trusted.\n      if (input.eventAt === undefined && !settling && last?.open === false) return;\n      if (!settling && !input.opened) return;\n      const recorded = item.metadata?.openPullRequestNumber;\n      const patch: Record<string, unknown> = {\n        mergeRequestEvents: { ...events, [key]: { at: input.eventAt ?? lastAt ?? null, open: !settling } },\n      };\n      if (!settling) {\n        // A head recorded for an earlier merge request must not mark this one's\n        // verdict outdated. A replayed opening of the merge request already\n        // recorded keeps the head its pushes left.\n        if (recorded !== input.mergeRequestIid) {\n          patch.pullRequestHeadSha = input.headSha ?? null;\n          patch.pullRequestHeadAt = input.eventAt ?? null;\n        }\n        patch.openPullRequestNumber = input.mergeRequestIid;\n      } else if (recorded === input.mergeRequestIid) {\n        patch.openPullRequestNumber = null;\n        if (input.event === 'mergeRequestMerged' && typeof item.metadata?.reviewVerdict === 'string') {\n          patch.reviewVerdict = null;\n        }\n      }\n      try {\n        await this.options.storage.update({\n          orgId: item.orgId,\n          id: item.id,\n          userId: 'factory-rule-dispatcher',\n          expectedRevision: item.revision,\n          patch: { metadata: patch },\n        });\n        return;\n      } catch (error) {\n        if (!(error instanceof WorkItemUpdateConflictError)) throw error;\n      }\n    }\n  }\n\n  async #trusted(connectionIds: string[], projectId: string, username: string): Promise<boolean> {\n    for (const connectionId of connectionIds) {\n      try {\n        const level = await this.options.gitlab.getProjectMemberAccessLevel(connectionId, projectId, username);\n        if (level !== undefined) return level >= GITLAB_TRUSTED_ACCESS_LEVEL;\n      } catch {\n        // Try another active credential covering the same canonical project; otherwise fail closed.\n      }\n    }\n    return false;\n  }\n\n  async #evaluate(\n    input: {\n      parsed: ParsedGitLabWebhook;\n      event: FactoryGitLabEventName;\n      projectId: number;\n      projectPath: string;\n      host: string;\n      actor: FactoryRuleActor;\n      orgId: string;\n      factoryProjectId: string;\n      factoryProject: { createdAt: Date };\n      board: { board: string; initialPhase: string };\n      issue: Record<string, unknown> | undefined;\n      issueAuthor: string | undefined;\n      issueAuthorTrusted: boolean;\n      issueIid: number | undefined;\n      issueSourceKey: string | undefined;\n      mergeRequest: Record<string, unknown> | undefined;\n      mergeRequestAuthor: string | undefined;\n      mergeRequestAuthorTrusted: boolean;\n      mergeRequestIid: number | undefined;\n      mergeRequestKey: string | undefined;\n      factoryAuthored: boolean;\n      item: WorkItemRow | undefined;\n      ingressIdentity: string;\n      mergeRequestOpenedScope?: 'intake' | 'board';\n    },\n    attempt = 1,\n  ): Promise<{ status: IngressStatus }> {\n    const note = object(input.parsed.payload.object_attributes);\n    const issueAuthor = input.issueAuthor;\n    const mergeRequestAuthor = input.mergeRequestAuthor;\n    const mergeRequestState = string(input.mergeRequest?.state);\n    const context: FactoryGitLabRuleContext = {\n      tenant: { orgId: input.orgId, projectId: input.factoryProjectId },\n      actor: input.actor,\n      ingress: { type: 'gitlab', id: input.ingressIdentity },\n      cause: `gitlab.${input.event}`,\n      causalChain: [],\n      configVersion: this.options.configVersion,\n      ...(input.item\n        ? {\n            item: {\n              id: input.item.id,\n              source:\n                input.item.externalSource?.type === 'pull-request'\n                  ? ('gitlab-pr' as const)\n                  : input.item.externalSource?.integrationId === 'gitlab'\n                    ? ('gitlab-issue' as const)\n                    : ('manual' as const),\n              sourceKey: input.item.externalSource?.externalId ?? null,\n              parentWorkItemId: input.item.parentWorkItemId,\n              title: input.item.title,\n              url: input.item.externalSource?.url ?? null,\n              stages: input.item.stages,\n              acceptedAt: input.item.acceptedAt,\n              metadata: input.item.metadata,\n            },\n            board: boardForWorkItem(input.item),\n            itemRevision: input.item.revision,\n            ...withBoardClosure(this.options.boards, input.item),\n            ...rulePhaseField(this.options.boards, input.item),\n          }\n        : {}),\n      intake: input.board,\n      event: input.event,\n      deliveryId: input.parsed.deliveryId,\n      factory: { createdAt: input.factoryProject.createdAt.toISOString() },\n      repository: { id: input.projectId, fullName: input.projectPath, host: input.host },\n      ...(input.issueIid && input.issueSourceKey && string(input.issue?.title)\n        ? {\n            issue: {\n              number: input.issueIid,\n              sourceKey: input.issueSourceKey,\n              title: string(input.issue?.title)!,\n              url:\n                string(input.issue?.url) ??\n                string(input.issue?.web_url) ??\n                `https://${input.host}/${input.projectPath}/-/issues/${input.issueIid}`,\n              ...(string(input.issue?.created_at) ? { createdAt: string(input.issue?.created_at) } : {}),\n              ...(string(input.issue?.updated_at) ? { updatedAt: string(input.issue?.updated_at) } : {}),\n              assignees: usernames(input.parsed.payload.assignees ?? input.issue?.assignees),\n              labels: labelNames(input.issue?.labels ?? input.parsed.payload.labels),\n              labelColors: labelColors(input.issue?.labels ?? input.parsed.payload.labels),\n              state: string(input.issue?.state) === 'closed' ? ('closed' as const) : ('open' as const),\n              ...(issueAuthor ? { author: issueAuthor } : {}),\n              authorTrusted: input.issueAuthorTrusted,\n            },\n          }\n        : {}),\n      ...(input.parsed.event === 'Note Hook' && number(note?.id)\n        ? {\n            note: {\n              id: number(note?.id)!,\n              ...(string(note?.note) ? { body: string(note?.note) } : {}),\n              ...(string(note?.url) ? { url: string(note?.url) } : {}),\n              ...(string(object(input.parsed.payload.user)?.username)\n                ? { author: string(object(input.parsed.payload.user)?.username) }\n                : {}),\n              ...(string(note?.created_at) ? { createdAt: string(note?.created_at) } : {}),\n              ...(string(note?.updated_at) ? { updatedAt: string(note?.updated_at) } : {}),\n            },\n          }\n        : {}),\n      ...(input.mergeRequestIid && input.mergeRequestKey && string(input.mergeRequest?.title)\n        ? {\n            mergeRequest: {\n              number: input.mergeRequestIid,\n              sourceKey: input.mergeRequestKey,\n              title: string(input.mergeRequest?.title)!,\n              url:\n                string(input.mergeRequest?.url) ??\n                string(input.mergeRequest?.web_url) ??\n                `https://${input.host}/${input.projectPath}/-/merge_requests/${input.mergeRequestIid}`,\n              ...(string(input.mergeRequest?.created_at) ? { createdAt: string(input.mergeRequest?.created_at) } : {}),\n              state:\n                mergeRequestState === 'closed' || mergeRequestState === 'merged'\n                  ? ('closed' as const)\n                  : ('open' as const),\n              draft: boolean(input.mergeRequest?.draft) ?? boolean(input.mergeRequest?.work_in_progress) ?? false,\n              merged: input.event === 'mergeRequestMerged' || mergeRequestState === 'merged',\n              assignees: usernames(input.parsed.payload.assignees ?? input.mergeRequest?.assignees),\n              reviewers: usernames(input.parsed.payload.reviewers ?? input.mergeRequest?.reviewers),\n              labels: labelNames(input.mergeRequest?.labels ?? input.parsed.payload.labels),\n              labelColors: labelColors(input.mergeRequest?.labels ?? input.parsed.payload.labels),\n              ...(mergeRequestAuthor ? { author: mergeRequestAuthor } : {}),\n              authorTrusted: input.mergeRequestAuthorTrusted,\n              factoryAuthored: input.factoryAuthored,\n              headBranch: string(input.mergeRequest?.source_branch) ?? '',\n              baseBranch: string(input.mergeRequest?.target_branch) ?? '',\n            },\n          }\n        : {}),\n    };\n    const boardRules = boardEventHandlers(\n      this.options.boards,\n      input.mergeRequestOpenedScope === 'intake' ? undefined : eventBoardId(context),\n      'gitlab',\n    );\n    const rule =\n      input.mergeRequestOpenedScope === 'board'\n        ? hasExplicitRuleOverride(this.options.gitlab.rules, input.event)\n          ? undefined\n          : boardRules?.mergeRequestOpened\n        : selectEventRule(this.options.gitlab.rules, boardRules, input.event);\n    // Without a board handler the authoring card has nothing to answer; skip\n    // recording an empty evaluation for it.\n    if (input.mergeRequestOpenedScope === 'board' && !rule) return { status: 'ignored' };\n    let decision: FactoryRuleDecision | void;\n    let decisions: Record<string, unknown>[] = [];\n    let outcome: { status: 'accepted' | 'rejected'; code?: string; reason?: string } = { status: 'accepted' };\n    try {\n      decision = rule ? await withRuleTimeout(Promise.resolve(rule(Object.freeze(context)))) : undefined;\n      if (decision?.type === 'reject') {\n        outcome = { status: 'rejected', code: decision.code, reason: decision.reason };\n      } else if (decision) {\n        decisions = validateFactoryRuleDecisions([decision]).map(entry => {\n          assertFactoryDecisionTarget(\n            entry,\n            this.options.boards,\n            input.item ? boardForWorkItem(input.item) : undefined,\n          );\n          return { ...entry };\n        });\n      }\n    } catch (error) {\n      const timedOut = error instanceof Error && error.message === 'FACTORY_RULE_TIMEOUT';\n      outcome = {\n        status: 'rejected',\n        code: timedOut ? 'timeout' : 'rule_error',\n        reason: timedOut\n          ? 'Factory rule evaluation timed out.'\n          : error instanceof Error\n            ? error.message.slice(0, 2_000)\n            : 'Factory GitLab rule failed.',\n      };\n    }\n\n    const committed = await this.options.storage.commitRuleEvaluation({\n      orgId: input.orgId,\n      factoryProjectId: input.factoryProjectId,\n      workItemId: input.item?.id ?? null,\n      ingress: { identity: input.ingressIdentity, triggerType: `gitlab.${input.event}` },\n      configVersion: this.options.configVersion,\n      expectedRevision: input.item?.revision ?? null,\n      actor: { ...input.actor },\n      outcome,\n      decisions,\n      causalChain: [],\n      now: new Date(),\n    });\n    if (committed.status === 'stale') {\n      // Nothing was persisted: re-read the item and evaluate again at its fresh revision.\n      if (attempt >= MAX_STALE_RULE_ATTEMPTS) {\n        throw new Error(`Factory GitLab rule evaluation for ${input.ingressIdentity} kept losing revision races.`);\n      }\n      const fresh = input.item ? await this.options.storage.get({ orgId: input.orgId, id: input.item.id }) : null;\n      if (input.item && !fresh) return { status: 'missing' };\n      return this.#evaluate({ ...input, item: fresh ?? undefined }, attempt + 1);\n    }\n    return { status: committed.status };\n  }\n}\n\nexport function attachGitLabRules(\n  gitlab: GitLabRulesIntegration,\n  context: IntegrationContext,\n): ((event: ParsedGitLabWebhook) => Promise<unknown>) | undefined {\n  if (!context.runtime) return undefined;\n  const rules = new GitLabRules({\n    gitlab,\n    sourceControl: context.storage.sourceControl,\n    projects: context.storage.projects,\n    storage: context.runtime.workItems,\n    intake: context.storage.intake,\n    configVersion: context.runtime.configVersion,\n    boards: context.runtime.boards,\n  });\n  return event => rules.ingest(event);\n}\n"],"mappings":";;;;;;;;AA8BA,MAAM,kBAAkB;AAIxB,SAAS,OAAO,OAAqD;CACnE,OAAO,SAAS,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,KAAK,IAAK,QAAoC,KAAA;AAC5G;AAEA,SAAS,OAAO,OAAoC;CAClD,OAAO,OAAO,UAAU,YAAY,MAAM,SAAS,IAAI,QAAQ,KAAA;AACjE;AAEA,SAAS,OAAO,OAAoC;CAClD,OAAO,OAAO,UAAU,YAAY,OAAO,SAAS,KAAK,IAAI,QAAQ,KAAA;AACvE;;AAGA,SAAS,UAAU,OAAoC;CACrD,MAAM,OAAO,OAAO,KAAK;CACzB,IAAI,CAAC,MAAM,OAAO,KAAA;CAClB,MAAM,SAAS,KAAK,MAAM,KAAK,QAAQ,QAAQ,GAAG,CAAC,CAAC,QAAQ,KAAK,GAAG,CAAC;CACrE,OAAO,OAAO,MAAM,MAAM,IAAI,KAAA,IAAY;AAC5C;AAEA,SAAS,QAAQ,OAAqC;CACpD,OAAO,OAAO,UAAU,YAAY,QAAQ,KAAA;AAC9C;AAEA,SAAS,UAAU,OAA0B;CAC3C,IAAI,CAAC,MAAM,QAAQ,KAAK,GAAG,OAAO,CAAC;CACnC,OAAO,MAAM,SAAQ,UAAS;EAC5B,MAAM,WAAW,OAAO,OAAO,KAAK,CAAC,EAAE,QAAQ;EAC/C,OAAO,WAAW,CAAC,QAAQ,IAAI,CAAC;CAClC,CAAC;AACH;AAEA,SAAS,WAAW,OAA0B;CAC5C,IAAI,CAAC,MAAM,QAAQ,KAAK,GAAG,OAAO,CAAC;CACnC,OAAO,MAAM,SAAQ,UAAS;EAC5B,IAAI,OAAO,UAAU,UAAU,OAAO,QAAQ,CAAC,KAAK,IAAI,CAAC;EACzD,MAAM,QAAQ,OAAO,OAAO,KAAK,CAAC,EAAE,KAAK,KAAK,OAAO,OAAO,KAAK,CAAC,EAAE,IAAI;EACxE,OAAO,QAAQ,CAAC,KAAK,IAAI,CAAC;CAC5B,CAAC;AACH;AAEA,SAAS,YAAY,OAAwC;CAC3D,IAAI,CAAC,MAAM,QAAQ,KAAK,GAAG,OAAO,CAAC;CACnC,OAAO,OAAO,YACZ,MAAM,SAAQ,UAAS;EACrB,MAAM,QAAQ,OAAO,KAAK;EAC1B,MAAM,OAAO,OAAO,OAAO,KAAK,KAAK,OAAO,OAAO,IAAI;EACvD,MAAM,QAAQ,OAAO,OAAO,KAAK;EACjC,OAAO,QAAQ,QAAQ,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC;CAC5C,CAAC,CACH;AACF;AAEA,SAAS,UAAU,QAAiE;CAClF,MAAM,aAAa,OAAO,OAAO,QAAQ,iBAAiB;CAC1D,MAAM,SAAS,OAAO,YAAY,MAAM,CAAC,EAAE,YAAY;CACvD,IAAI,OAAO,UAAU,cAAc;EACjC,IAAI,WAAW,UAAU,WAAW,UAAU,OAAO;EACrD,IAAI,WAAW,SAAS,OAAO;EAC/B,OAAO;CACT;CACA,IAAI,OAAO,UAAU,aAAa;EAChC,MAAM,eAAe,OAAO,YAAY,aAAa;EACrD,IAAI,iBAAiB,SAAS,OAAO;EACrC,IAAI,iBAAiB,gBAAgB,OAAO;EAC5C;CACF;CACA,IAAI,OAAO,UAAU,sBAAsB;CAC3C,IAAI,WAAW,UAAU,WAAW,UAAU,OAAO;CACrD,IAAI,WAAW,SAAS,OAAO;CAC/B,IAAI,WAAW,SAAS,OAAO;CAC/B,OAAO;AACT;AAEA,SAAS,cAAc,MAAsB;CAC3C,OAAO,KAAK,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,QAAQ,OAAO,EAAE;AACpD;AAEA,SAAS,gBAAgB,QAAiD;CACxE,MAAM,eAAe,OAAO,eAAe,cAAc,OAAO,YAAY,IAAI,KAAA;CAChF,MAAM,aAAa,OAAO,OAAO,OAAO,QAAQ,OAAO,CAAC,EAAE,OAAO;CACjE,IAAI,CAAC,YAAY,OAAO;CACxB,IAAI;EACF,MAAM,cAAc,cAAc,IAAI,IAAI,UAAU,CAAC,CAAC,IAAI;EAC1D,IAAI,gBAAgB,iBAAiB,aAAa,OAAO,KAAA;EACzD,OAAO;CACT,QAAQ;EACN;CACF;AACF;AAEA,SAAS,sBAAsB,MAAc,WAAmB,iBAAiC;CAC/F,OAAO,aAAa,OAAO,KAAK,KAAK,UAAU;EAAE,SAAS;EAAG;EAAM;EAAW;CAAgB,CAAC,GAAG,MAAM,CAAC,CAAC,SAAS,WAAW;AAChI;AAEA,eAAe,gBAAmB,SAAiC;CACjE,IAAI;CACJ,IAAI;EACF,OAAO,MAAM,QAAQ,KAAK,CACxB,SACA,IAAI,SAAgB,GAAG,WAAW;GAChC,UAAU,iBAAiB,uBAAO,IAAI,MAAM,sBAAsB,CAAC,GAAG,eAAe;EACvF,CAAC,CACH,CAAC;CACH,UAAU;EACR,IAAI,SAAS,aAAa,OAAO;CACnC;AACF;AAEA,MAAM,0BAA0B;AA6BhC,IAAa,cAAb,MAAyB;CACM;CAA7B,YAAY,SAA8C;EAA7B,KAAA,UAAA;CAA8B;CAE3D,MAAM,OAAO,QAAiE;EAC5E,MAAM,QAAQ,UAAU,MAAM;EAC9B,MAAM,UAAU,OAAO,OAAO,QAAQ,OAAO;EAC7C,MAAM,YAAY,OAAO,SAAS,EAAE;EACpC,MAAM,cAAc,OAAO,SAAS,mBAAmB;EACvD,MAAM,OAAO,gBAAgB,MAAM;EACnC,MAAM,WAAW,OAAO,OAAO,QAAQ,aAAa,KAAK,OAAO,OAAO,OAAO,QAAQ,IAAI,CAAC,EAAE,QAAQ;EACrG,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,eAAe,CAAC,QAAQ,CAAC,UAAU,OAAO,EAAE,QAAQ,UAAU;EAE3F,MAAM,UAAU,MAAM,KAAKA,SAAS,OAAO,SAAS,GAAG,IAAI;EAC3D,IAAI,QAAQ,WAAW,GAAG,OAAO,EAAE,QAAQ,UAAU;EACrD,MAAM,UAA4C,CAAC;EACnD,KAAK,MAAM,UAAU,SACnB,QAAQ,KAAK,MAAM,KAAKC,eAAe,QAAQ,OAAO,WAAW,aAAa,MAAM,UAAU,MAAM,CAAC;EAEvG,IAAI,QAAQ,MAAK,WAAU,OAAO,WAAW,WAAW,GAAG,OAAO,EAAE,QAAQ,YAAY;EACxF,IAAI,QAAQ,MAAK,WAAU,OAAO,WAAW,UAAU,GAAG,OAAO,EAAE,QAAQ,WAAW;EACtF,OAAO,QAAQ,MAAM,EAAE,QAAQ,UAAU;CAC3C;CAEA,MAAMD,SAAS,sBAA8B,MAAwC;EACnF,MAAM,0BAAU,IAAI,IAA2B;EAC/C,MAAM,QAAQ,MAAM,KAAK,QAAQ,cAAc,oBAAoB,2BAA2B,EAAA,CAAG,QAC/F,QAAO,IAAI,yBAAyB,oBACtC;EACA,KAAK,MAAM,OAAO,MAAM;GACtB,MAAM,UAAU,MAAM,KAAK,QAAQ,cAAc,oBAAoB,yBAAyB;IAC5F,wBAAwB,IAAI;IAC5B;GACF,CAAC;GACD,KAAK,MAAM,UAAU,SAAS;IAK5B,MAAM,mBAAmB,QAAO,MAJL,KAAK,QAAQ,cAAc,cAAc,iBAAiB;KACnF,OAAO,OAAO;KACd,YAAY,IAAI;IAClB,CAAC,EAAA,EAC6C,iBAAiB,IAAI;IACnE,IAAI,CAAC,oBAAoB,cAAc,gBAAgB,MAAM,cAAc,IAAI,GAAG;IAClF,MAAM,KAAK,GAAG,OAAO,MAAM,GAAG,OAAO;IACrC,MAAM,UAAU,QAAQ,IAAI,EAAE;IAC9B,IAAI,SACE;SAAA,CAAC,QAAQ,cAAc,SAAS,IAAI,sBAAsB,GAC5D,QAAQ,cAAc,KAAK,IAAI,sBAAsB;IAAA,OAGvD,QAAQ,IAAI,IAAI;KAAE;KAAQ,eAAe,CAAC,IAAI,sBAAsB;IAAE,CAAC;GAE3E;EACF;EACA,OAAO,CAAC,GAAG,QAAQ,OAAO,CAAC;CAC7B;CAEA,MAAMC,eACJ,QACA,OACA,WACA,aACA,MACA,UACA,QACoC;EACpC,MAAM,iBAAiB,MAAM,KAAK,QAAQ,SAAS,IAAI;GACrD,OAAO,OAAO,OAAO;GACrB,IAAI,OAAO,OAAO;EACpB,CAAC;EACD,IAAI,CAAC,gBAAgB,OAAO,EAAE,QAAQ,UAAU;EAEhD,MAAM,WAAW,eAAe;GAAE;GAAM,WAAW,OAAO,SAAS;EAAE,CAAC;EACtE,MAAM,SAAS,MAAM,KAAK,QAAQ,OAAO,UAAU;GACjD,OAAO,OAAO,OAAO;GACrB,gBAAgB,CAAC,QAAQ;EAC3B,CAAC;EACD,IAAI,CAAC,OAAO,QAAQ,WAAW,CAAC,OAAO,OAAO,WAAW,SAAS,QAAQ,GAAG,OAAO,EAAE,QAAQ,UAAU;EACxG,MAAM,WACJ,MAAM,KAAK,QAAQ,OAAO,aAAa;GAAE,OAAO,OAAO,OAAO;GAAO,eAAe;EAAS,CAAC,EAAA,CAC9F,MACA,cAAa,UAAU,aAAa,YAAY,UAAU,qBAAqB,OAAO,OAAO,gBAC/F;EACA,IAAI,CAAC,SAAS,OAAO,EAAE,QAAQ,UAAU;EACzC,MAAM,QAAQ,KAAK,QAAQ,OAAO,IAAI,QAAQ,SAAS,MAAM;EAC7D,IAAI,CAAC,OAAO,OAAO,EAAE,QAAQ,UAAU;EAEvC,MAAM,gBAAgB,CACpB,GAAG,IAAI,IACL,MAAM,QAAQ,IACZ,OAAO,cAAc,KACnB,iBAAgB,KAAK,QAAQ,OAAO,iCAAiC,cAAc,IAAI,KAAK,YAC9F,CACF,CACF,CACF;EAEA,MAAM,aAAa,OAAO,OAAO,QAAQ,iBAAiB;EAC1D,MAAM,QAAQ,OAAO,UAAU,cAAc,OAAO,OAAO,QAAQ,KAAK,IAAI;EAC5E,MAAM,eAAe,OAAO,UAAU,cAAc,OAAO,OAAO,QAAQ,aAAa,IAAI;EAC3F,MAAM,WAAW,OAAO,OAAO,GAAG;EAClC,MAAM,kBAAkB,OAAO,cAAc,GAAG;EAChD,MAAM,iBAAiB,WACnB,qBAAqB;GAAE;GAAM,WAAW,OAAO,SAAS;GAAG;EAAS,CAAC,IACrE,KAAA;EACJ,MAAM,kBAAkB,kBAAkB,sBAAsB,MAAM,WAAW,eAAe,IAAI,KAAA;EACpG,MAAM,QAAQ,MAAM,KAAK,QAAQ,QAAQ,KAAK;GAC5C,OAAO,OAAO,OAAO;GACrB,kBAAkB,OAAO,OAAO;EAClC,CAAC;EACD,MAAM,YAAY,iBACd,MAAM,MACJ,SAAQ,KAAK,gBAAgB,kBAAkB,YAAY,KAAK,eAAe,eAAe,cAChG,IACA,KAAA;EACJ,MAAM,aAAa,kBACf,MAAM,MACJ,SAAQ,KAAK,gBAAgB,kBAAkB,YAAY,KAAK,eAAe,eAAe,eAChG,IACA,KAAA;EACJ,MAAM,aAAa,OAAO,cAAc,aAAa,KAAK;EAC1D,MAAM,gBAAgB,aAClB,MAAM,MACJ,SACE,KAAK,gBAAgB,SAAS,kBAC9B,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,MAAK,YAAW,QAAQ,WAAW,UAAU,CAC9E,IACA,KAAA;EACJ,MAAM,eAAe,MAAM,KAAKC,SAAS,eAAe,OAAO,SAAS,GAAG,QAAQ;EACnF,MAAM,cAAc,OAAO,OAAO,OAAO,QAAQ,IAAI,CAAC,EAAE,EAAE,KAAK,OAAO,OAAO,QAAQ,OAAO;EAC5F,MAAM,gBAAgB,OACpB,MACA,MACA,QACgC;GAChC,IAAI,CAAC,QAAQ,CAAC,KAAK,OAAO,KAAA;GAC1B,MAAM,WAAW,OAAO,OAAO,KAAK,MAAM,CAAC,EAAE,QAAQ;GACrD,IAAI,UAAU,OAAO;GACrB,IAAI,eAAe,gBAAgB,OAAO,KAAK,SAAS,GAAG,OAAO;GAClE,KAAK,MAAM,gBAAgB,eACzB,IAAI;IACF,MAAM,WAAW,MAAM,KAAK,QAAQ,OAAO,0BACzC,cACA,OAAO,SAAS,GAChB,MACA,GACF;IACA,IAAI,UAAU,OAAO;GACvB,QAAQ,CAER;EAGJ;EACA,MAAM,CAAC,aAAa,sBAAsB,MAAM,QAAQ,IAAI,CAC1D,cAAc,OAAO,SAAS,QAAQ,GACtC,cAAc,cAAc,iBAAiB,eAAe,CAC9D,CAAC;EACD,MAAM,gBAAgB,OAAO,WAAiD;GAC5E,IAAI,CAAC,QAAQ,OAAO;GACpB,OAAO,WAAW,WAAW,eAAe,KAAKA,SAAS,eAAe,OAAO,SAAS,GAAG,MAAM;EACpG;EACA,MAAM,CAAC,oBAAoB,6BAA6B,MAAM,QAAQ,IAAI,CACxE,cAAc,WAAW,GACzB,cAAc,kBAAkB,CAClC,CAAC;EACD,MAAM,QAA0B;GAC9B,MAAM;GACN;GACA,SAAS;GACT,iBAAiB;EACnB;EAEA,MAAM,aACJ,UAAU,uBACN,CAAC,GAAG,IAAI,IAAI,CAAC,YAAY,aAAa,CAAC,CAAC,OAAO,OAAO,CAAC,CAAC,KAAI,SAAQ,CAAC,KAAM,IAAI,IAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAChG,UAAU,0BACR,CAAC,iBAAiB,UAAU,IAC5B,UAAU,uBACR,CAAC,eAAe,GAAI,gBAAgB,CAAC,aAAa,IAAI,CAAC,CAAE,IACzD,MAAM,WAAW,cAAc,IAC7B,CAAC,cAAc,aAAa,IAC5B,CAAC,SAAS;EACtB,MAAM,UAAU,CAAC;EACjB,KAAK,MAAM,CAAC,OAAO,SAAS,WAAW,QAAQ,GAC7C,QAAQ,KACN,MAAM,KAAKC,UAAU;GACnB;GACA;GACA;GACA;GACA;GACA;GACA,OAAO,OAAO,OAAO;GACrB,kBAAkB,OAAO,OAAO;GAChC;GACA,OAAO;IAAE,OAAO,MAAM;IAAI,cAAc,MAAM;GAAa;GAC3D;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA,iBAAiB,QAAQ,aAAa;GACtC;GACA,iBAAiB,UAAU,UAAU,GAAG,OAAO,aAAa,QAAQ,IAAI,MAAM,MAAM,UAAU;GAM9F,GAAI,UAAU,uBAAuB,EAAE,yBAAyB,QAAS,UAAqB,SAAmB,IAAI,CAAC;EACxH,CAAC,CACH;EAMF,MAAM,eAAe,aACjB,MAAM,QACJ,SACE,KAAK,gBAAgB,SAAS,kBAC9B,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,MAAK,YAAW,QAAQ,WAAW,UAAU,CAC9E,IACA,CAAC;EACL,IAAI,iBAAiB,mBAAmB,aAAa,WAAW,GAC9D,MAAM,KAAKC,uBAAuB;GAChC,OAAO,cAAc;GACrB,IAAI,cAAc;GAClB;GACA;GACA,SAAS,UAAU,cAAc,UAAU;GAC3C,QAAQ,OAAO,cAAc,KAAK,MAAM,aAAa,gBAAgB;GACrE,SAAS,OAAO,OAAO,cAAc,WAAW,CAAC,EAAE,EAAE,CAAC,EAAE,YAAY;EACtE,CAAC;EAKH,MAAM,UAAU,OAAO,OAAO,cAAc,WAAW,CAAC,EAAE,EAAE,CAAC,EAAE,YAAY;EAC3E,MAAM,SAAS,UAAU,cAAc,UAAU;EACjD,IAAI,UAAU,yBAAyB,WAAW,YAAY;GAC5D,MAAM,SAAS,MAAM,MAAK,SAAQ,KAAK,OAAO,WAAW,gBAAgB;GAGzE,MAAM,sBAAsB,KAAK,QAAQ,SAAS;IAChD,OAAO,WAAW;IAClB,IAAI,WAAW;IACf;IACA;GACF,CAAC;GACD,IAAI,QACF,MAAM,sBAAsB,KAAK,QAAQ,SAAS;IAChD,OAAO,OAAO;IACd,IAAI,OAAO;IACX;IACA;IACA,wBAAwB;GAC1B,CAAC;EAEL;EACA,IAAI,QAAQ,MAAK,WAAU,OAAO,WAAW,WAAW,GAAG,OAAO,EAAE,QAAQ,YAAY;EACxF,IAAI,QAAQ,MAAK,WAAU,OAAO,WAAW,UAAU,GAAG,OAAO,EAAE,QAAQ,WAAW;EACtF,OAAO,QAAQ,MAAM,EAAE,QAAQ,UAAU;CAC3C;;;;;;;CAQA,MAAMA,uBAAuB,OAQX;EAChB,MAAM,WAAW,MAAM,UAAU,wBAAwB,MAAM,UAAU;EACzE,IAAI,MAAM,UAAU,wBAAwB,CAAC,UAAU;EACvD,MAAM,MAAM,OAAO,MAAM,eAAe;EACxC,KAAK,IAAI,UAAU,GAAG,UAAU,GAAG,WAAW;GAC5C,MAAM,OAAO,MAAM,KAAK,QAAQ,QAAQ,IAAI;IAAE,OAAO,MAAM;IAAO,IAAI,MAAM;GAAG,CAAC;GAChF,IAAI,CAAC,MAAM;GACX,MAAM,SAAS,OAAO,KAAK,UAAU,kBAAkB,KAAK,CAAC;GAC7D,MAAM,OAAO,OAAO,OAAO,IAAI;GAC/B,MAAM,SAAS,OAAO,MAAM,EAAE;GAC9B,IAAI,MAAM,YAAY,KAAA,KAAa,WAAW,KAAA,KAAa,UAAU,MAAM,SAAS;GAEpF,IAAI,MAAM,YAAY,KAAA,KAAa,CAAC,YAAY,MAAM,SAAS,OAAO;GACtE,IAAI,CAAC,YAAY,CAAC,MAAM,QAAQ;GAChC,MAAM,WAAW,KAAK,UAAU;GAChC,MAAM,QAAiC,EACrC,oBAAoB;IAAE,GAAG;KAAS,MAAM;KAAE,IAAI,MAAM,WAAW,UAAU;KAAM,MAAM,CAAC;IAAS;GAAE,EACnG;GACA,IAAI,CAAC,UAAU;IAIb,IAAI,aAAa,MAAM,iBAAiB;KACtC,MAAM,qBAAqB,MAAM,WAAW;KAC5C,MAAM,oBAAoB,MAAM,WAAW;IAC7C;IACA,MAAM,wBAAwB,MAAM;GACtC,OAAO,IAAI,aAAa,MAAM,iBAAiB;IAC7C,MAAM,wBAAwB;IAC9B,IAAI,MAAM,UAAU,wBAAwB,OAAO,KAAK,UAAU,kBAAkB,UAClF,MAAM,gBAAgB;GAE1B;GACA,IAAI;IACF,MAAM,KAAK,QAAQ,QAAQ,OAAO;KAChC,OAAO,KAAK;KACZ,IAAI,KAAK;KACT,QAAQ;KACR,kBAAkB,KAAK;KACvB,OAAO,EAAE,UAAU,MAAM;IAC3B,CAAC;IACD;GACF,SAAS,OAAO;IACd,IAAI,EAAE,iBAAiB,8BAA8B,MAAM;GAC7D;EACF;CACF;CAEA,MAAMF,SAAS,eAAyB,WAAmB,UAAoC;EAC7F,KAAK,MAAM,gBAAgB,eACzB,IAAI;GACF,MAAM,QAAQ,MAAM,KAAK,QAAQ,OAAO,4BAA4B,cAAc,WAAW,QAAQ;GACrG,IAAI,UAAU,KAAA,GAAW,OAAO,SAAA;EAClC,QAAQ,CAER;EAEF,OAAO;CACT;CAEA,MAAMC,UACJ,OA0BA,UAAU,GAC0B;EACpC,MAAM,OAAO,OAAO,MAAM,OAAO,QAAQ,iBAAiB;EAC1D,MAAM,cAAc,MAAM;EAC1B,MAAM,qBAAqB,MAAM;EACjC,MAAM,oBAAoB,OAAO,MAAM,cAAc,KAAK;EAC1D,MAAM,UAAoC;GACxC,QAAQ;IAAE,OAAO,MAAM;IAAO,WAAW,MAAM;GAAiB;GAChE,OAAO,MAAM;GACb,SAAS;IAAE,MAAM;IAAU,IAAI,MAAM;GAAgB;GACrD,OAAO,UAAU,MAAM;GACvB,aAAa,CAAC;GACd,eAAe,KAAK,QAAQ;GAC5B,GAAI,MAAM,OACN;IACE,MAAM;KACJ,IAAI,MAAM,KAAK;KACf,QACE,MAAM,KAAK,gBAAgB,SAAS,iBAC/B,cACD,MAAM,KAAK,gBAAgB,kBAAkB,WAC1C,iBACA;KACT,WAAW,MAAM,KAAK,gBAAgB,cAAc;KACpD,kBAAkB,MAAM,KAAK;KAC7B,OAAO,MAAM,KAAK;KAClB,KAAK,MAAM,KAAK,gBAAgB,OAAO;KACvC,QAAQ,MAAM,KAAK;KACnB,YAAY,MAAM,KAAK;KACvB,UAAU,MAAM,KAAK;IACvB;IACA,OAAO,iBAAiB,MAAM,IAAI;IAClC,cAAc,MAAM,KAAK;IACzB,GAAG,iBAAiB,KAAK,QAAQ,QAAQ,MAAM,IAAI;IACnD,GAAG,eAAe,KAAK,QAAQ,QAAQ,MAAM,IAAI;GACnD,IACA,CAAC;GACL,QAAQ,MAAM;GACd,OAAO,MAAM;GACb,YAAY,MAAM,OAAO;GACzB,SAAS,EAAE,WAAW,MAAM,eAAe,UAAU,YAAY,EAAE;GACnE,YAAY;IAAE,IAAI,MAAM;IAAW,UAAU,MAAM;IAAa,MAAM,MAAM;GAAK;GACjF,GAAI,MAAM,YAAY,MAAM,kBAAkB,OAAO,MAAM,OAAO,KAAK,IACnE,EACE,OAAO;IACL,QAAQ,MAAM;IACd,WAAW,MAAM;IACjB,OAAO,OAAO,MAAM,OAAO,KAAK;IAChC,KACE,OAAO,MAAM,OAAO,GAAG,KACvB,OAAO,MAAM,OAAO,OAAO,KAC3B,WAAW,MAAM,KAAK,GAAG,MAAM,YAAY,YAAY,MAAM;IAC/D,GAAI,OAAO,MAAM,OAAO,UAAU,IAAI,EAAE,WAAW,OAAO,MAAM,OAAO,UAAU,EAAE,IAAI,CAAC;IACxF,GAAI,OAAO,MAAM,OAAO,UAAU,IAAI,EAAE,WAAW,OAAO,MAAM,OAAO,UAAU,EAAE,IAAI,CAAC;IACxF,WAAW,UAAU,MAAM,OAAO,QAAQ,aAAa,MAAM,OAAO,SAAS;IAC7E,QAAQ,WAAW,MAAM,OAAO,UAAU,MAAM,OAAO,QAAQ,MAAM;IACrE,aAAa,YAAY,MAAM,OAAO,UAAU,MAAM,OAAO,QAAQ,MAAM;IAC3E,OAAO,OAAO,MAAM,OAAO,KAAK,MAAM,WAAY,WAAsB;IACxE,GAAI,cAAc,EAAE,QAAQ,YAAY,IAAI,CAAC;IAC7C,eAAe,MAAM;GACvB,EACF,IACA,CAAC;GACL,GAAI,MAAM,OAAO,UAAU,eAAe,OAAO,MAAM,EAAE,IACrD,EACE,MAAM;IACJ,IAAI,OAAO,MAAM,EAAE;IACnB,GAAI,OAAO,MAAM,IAAI,IAAI,EAAE,MAAM,OAAO,MAAM,IAAI,EAAE,IAAI,CAAC;IACzD,GAAI,OAAO,MAAM,GAAG,IAAI,EAAE,KAAK,OAAO,MAAM,GAAG,EAAE,IAAI,CAAC;IACtD,GAAI,OAAO,OAAO,MAAM,OAAO,QAAQ,IAAI,CAAC,EAAE,QAAQ,IAClD,EAAE,QAAQ,OAAO,OAAO,MAAM,OAAO,QAAQ,IAAI,CAAC,EAAE,QAAQ,EAAE,IAC9D,CAAC;IACL,GAAI,OAAO,MAAM,UAAU,IAAI,EAAE,WAAW,OAAO,MAAM,UAAU,EAAE,IAAI,CAAC;IAC1E,GAAI,OAAO,MAAM,UAAU,IAAI,EAAE,WAAW,OAAO,MAAM,UAAU,EAAE,IAAI,CAAC;GAC5E,EACF,IACA,CAAC;GACL,GAAI,MAAM,mBAAmB,MAAM,mBAAmB,OAAO,MAAM,cAAc,KAAK,IAClF,EACE,cAAc;IACZ,QAAQ,MAAM;IACd,WAAW,MAAM;IACjB,OAAO,OAAO,MAAM,cAAc,KAAK;IACvC,KACE,OAAO,MAAM,cAAc,GAAG,KAC9B,OAAO,MAAM,cAAc,OAAO,KAClC,WAAW,MAAM,KAAK,GAAG,MAAM,YAAY,oBAAoB,MAAM;IACvE,GAAI,OAAO,MAAM,cAAc,UAAU,IAAI,EAAE,WAAW,OAAO,MAAM,cAAc,UAAU,EAAE,IAAI,CAAC;IACtG,OACE,sBAAsB,YAAY,sBAAsB,WACnD,WACA;IACP,OAAO,QAAQ,MAAM,cAAc,KAAK,KAAK,QAAQ,MAAM,cAAc,gBAAgB,KAAK;IAC9F,QAAQ,MAAM,UAAU,wBAAwB,sBAAsB;IACtE,WAAW,UAAU,MAAM,OAAO,QAAQ,aAAa,MAAM,cAAc,SAAS;IACpF,WAAW,UAAU,MAAM,OAAO,QAAQ,aAAa,MAAM,cAAc,SAAS;IACpF,QAAQ,WAAW,MAAM,cAAc,UAAU,MAAM,OAAO,QAAQ,MAAM;IAC5E,aAAa,YAAY,MAAM,cAAc,UAAU,MAAM,OAAO,QAAQ,MAAM;IAClF,GAAI,qBAAqB,EAAE,QAAQ,mBAAmB,IAAI,CAAC;IAC3D,eAAe,MAAM;IACrB,iBAAiB,MAAM;IACvB,YAAY,OAAO,MAAM,cAAc,aAAa,KAAK;IACzD,YAAY,OAAO,MAAM,cAAc,aAAa,KAAK;GAC3D,EACF,IACA,CAAC;EACP;EACA,MAAM,aAAa,mBACjB,KAAK,QAAQ,QACb,MAAM,4BAA4B,WAAW,KAAA,IAAY,aAAa,OAAO,GAC7E,QACF;EACA,MAAM,OACJ,MAAM,4BAA4B,UAC9B,wBAAwB,KAAK,QAAQ,OAAO,OAAO,MAAM,KAAK,IAC5D,KAAA,IACA,YAAY,qBACd,gBAAgB,KAAK,QAAQ,OAAO,OAAO,YAAY,MAAM,KAAK;EAGxE,IAAI,MAAM,4BAA4B,WAAW,CAAC,MAAM,OAAO,EAAE,QAAQ,UAAU;EACnF,IAAI;EACJ,IAAI,YAAuC,CAAC;EAC5C,IAAI,UAA+E,EAAE,QAAQ,WAAW;EACxG,IAAI;GACF,WAAW,OAAO,MAAM,gBAAgB,QAAQ,QAAQ,KAAK,OAAO,OAAO,OAAO,CAAC,CAAC,CAAC,IAAI,KAAA;GACzF,IAAI,UAAU,SAAS,UACrB,UAAU;IAAE,QAAQ;IAAY,MAAM,SAAS;IAAM,QAAQ,SAAS;GAAO;QACxE,IAAI,UACT,YAAY,6BAA6B,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAI,UAAS;IAChE,4BACE,OACA,KAAK,QAAQ,QACb,MAAM,OAAO,iBAAiB,MAAM,IAAI,IAAI,KAAA,CAC9C;IACA,OAAO,EAAE,GAAG,MAAM;GACpB,CAAC;EAEL,SAAS,OAAO;GACd,MAAM,WAAW,iBAAiB,SAAS,MAAM,YAAY;GAC7D,UAAU;IACR,QAAQ;IACR,MAAM,WAAW,YAAY;IAC7B,QAAQ,WACJ,uCACA,iBAAiB,QACf,MAAM,QAAQ,MAAM,GAAG,GAAK,IAC5B;GACR;EACF;EAEA,MAAM,YAAY,MAAM,KAAK,QAAQ,QAAQ,qBAAqB;GAChE,OAAO,MAAM;GACb,kBAAkB,MAAM;GACxB,YAAY,MAAM,MAAM,MAAM;GAC9B,SAAS;IAAE,UAAU,MAAM;IAAiB,aAAa,UAAU,MAAM;GAAQ;GACjF,eAAe,KAAK,QAAQ;GAC5B,kBAAkB,MAAM,MAAM,YAAY;GAC1C,OAAO,EAAE,GAAG,MAAM,MAAM;GACxB;GACA;GACA,aAAa,CAAC;GACd,qBAAK,IAAI,KAAK;EAChB,CAAC;EACD,IAAI,UAAU,WAAW,SAAS;GAEhC,IAAI,WAAW,yBACb,MAAM,IAAI,MAAM,sCAAsC,MAAM,gBAAgB,6BAA6B;GAE3G,MAAM,QAAQ,MAAM,OAAO,MAAM,KAAK,QAAQ,QAAQ,IAAI;IAAE,OAAO,MAAM;IAAO,IAAI,MAAM,KAAK;GAAG,CAAC,IAAI;GACvG,IAAI,MAAM,QAAQ,CAAC,OAAO,OAAO,EAAE,QAAQ,UAAU;GACrD,OAAO,KAAKA,UAAU;IAAE,GAAG;IAAO,MAAM,SAAS,KAAA;GAAU,GAAG,UAAU,CAAC;EAC3E;EACA,OAAO,EAAE,QAAQ,UAAU,OAAO;CACpC;AACF;AAEA,SAAgB,kBACd,QACA,SACgE;CAChE,IAAI,CAAC,QAAQ,SAAS,OAAO,KAAA;CAC7B,MAAM,QAAQ,IAAI,YAAY;EAC5B;EACA,eAAe,QAAQ,QAAQ;EAC/B,UAAU,QAAQ,QAAQ;EAC1B,SAAS,QAAQ,QAAQ;EACzB,QAAQ,QAAQ,QAAQ;EACxB,eAAe,QAAQ,QAAQ;EAC/B,QAAQ,QAAQ,QAAQ;CAC1B,CAAC;CACD,QAAO,UAAS,MAAM,OAAO,KAAK;AACpC"}
+{"version":3,"file":"rules.js","names":["#targets","#ingestProject","#trusted","#evaluate","#trackOpenMergeRequest"],"sources":["../../../src/integrations/gitlab/rules.ts"],"sourcesContent":["import {\n  boardEventHandlers,\n  boardForWorkItem,\n  eventBoardId,\n  rulePhaseField,\n  withBoardClosure,\n} from '../../boards/index.js';\nimport type { BoardRegistry } from '../../boards/index.js';\nimport { hasExplicitRuleOverride, selectEventRule } from '../../rules/event-rules.js';\nimport type {\n  FactoryGitLabEventName,\n  FactoryGitLabRuleContext,\n  FactoryRuleActor,\n  FactoryRuleDecision,\n} from '../../rules/types.js';\nimport { assertFactoryDecisionTarget, validateFactoryRuleDecisions } from '../../rules/validation.js';\nimport type { IntakeStorage } from '../../storage/domains/intake/base.js';\nimport type { FactoryProjectsStorage } from '../../storage/domains/projects/base.js';\nimport type {\n  ExternalRepositoryProjectTarget,\n  SourceControlStorageHandle,\n} from '../../storage/domains/source-control/base.js';\nimport { WorkItemUpdateConflictError } from '../../storage/domains/work-items/base.js';\nimport type { WorkItemRow, WorkItemsStorage } from '../../storage/domains/work-items/base.js';\nimport type { IntegrationContext } from '../base.js';\nimport { recordPullRequestHead } from '../pull-request-head.js';\nimport type { GitLabEventRules } from './default-rules.js';\nimport { encodeIssueReference, encodeSourceId, GITLAB_TRUSTED_ACCESS_LEVEL } from './integration.js';\nimport type { ParsedGitLabWebhook } from './webhook.js';\n\nconst RULE_TIMEOUT_MS = 5_000;\n\ntype IngressStatus = 'ignored' | 'committed' | 'replayed' | 'missing';\n\nfunction object(value: unknown): Record<string, unknown> | undefined {\n  return value && typeof value === 'object' && !Array.isArray(value) ? (value as Record<string, unknown>) : undefined;\n}\n\nfunction string(value: unknown): string | undefined {\n  return typeof value === 'string' && value.length > 0 ? value : undefined;\n}\n\nfunction number(value: unknown): number | undefined {\n  return typeof value === 'number' && Number.isFinite(value) ? value : undefined;\n}\n\n/** GitLab sends `2024-01-02T03:04:05Z`, `2024-01-02 03:04:05 UTC` or `2024-01-02 03:04:05 +0000`. */\nfunction timestamp(value: unknown): number | undefined {\n  const text = string(value);\n  if (!text) return undefined;\n  const spaced = /^(\\d{4}-\\d{2}-\\d{2}) (\\d{2}:\\d{2}:\\d{2}(?:\\.\\d+)?) (?:UTC|([+-]\\d{2}):?(\\d{2}))$/.exec(text);\n  const parsed = Date.parse(\n    spaced ? `${spaced[1]}T${spaced[2]}${spaced[3] ? `${spaced[3]}:${spaced[4]}` : 'Z'}` : text,\n  );\n  return Number.isNaN(parsed) ? undefined : parsed;\n}\n\nfunction boolean(value: unknown): boolean | undefined {\n  return typeof value === 'boolean' ? value : undefined;\n}\n\nfunction usernames(value: unknown): string[] {\n  if (!Array.isArray(value)) return [];\n  return value.flatMap(entry => {\n    const username = string(object(entry)?.username);\n    return username ? [username] : [];\n  });\n}\n\nfunction labelNames(value: unknown): string[] {\n  if (!Array.isArray(value)) return [];\n  return value.flatMap(entry => {\n    if (typeof entry === 'string') return entry ? [entry] : [];\n    const title = string(object(entry)?.title) ?? string(object(entry)?.name);\n    return title ? [title] : [];\n  });\n}\n\nfunction labelColors(value: unknown): Record<string, string> {\n  if (!Array.isArray(value)) return {};\n  return Object.fromEntries(\n    value.flatMap(entry => {\n      const label = object(entry);\n      const name = string(label?.title) ?? string(label?.name);\n      const color = string(label?.color);\n      return name && color ? [[name, color]] : [];\n    }),\n  );\n}\n\nfunction eventName(parsed: ParsedGitLabWebhook): FactoryGitLabEventName | undefined {\n  const attributes = object(parsed.payload.object_attributes);\n  const action = string(attributes?.action)?.toLowerCase();\n  if (parsed.event === 'Issue Hook') {\n    if (action === 'open' || action === 'reopen') return 'issueOpened';\n    if (action === 'close') return 'issueClosed';\n    return 'issueUpdated';\n  }\n  if (parsed.event === 'Note Hook') {\n    const noteableType = string(attributes?.noteable_type);\n    if (noteableType === 'Issue') return 'issueCommented';\n    if (noteableType === 'MergeRequest') return 'mergeRequestCommented';\n    return;\n  }\n  if (parsed.event !== 'Merge Request Hook') return;\n  if (action === 'open' || action === 'reopen') return 'mergeRequestOpened';\n  if (action === 'merge') return 'mergeRequestMerged';\n  if (action === 'close') return 'mergeRequestClosed';\n  return 'mergeRequestUpdated';\n}\n\nfunction normalizeHost(host: string): string {\n  return host.trim().toLowerCase().replace(/\\.$/, '');\n}\n\nfunction hostFromPayload(parsed: ParsedGitLabWebhook): string | undefined {\n  const declaredHost = parsed.instanceHost ? normalizeHost(parsed.instanceHost) : undefined;\n  const projectUrl = string(object(parsed.payload.project)?.web_url);\n  if (!projectUrl) return declaredHost;\n  try {\n    const payloadHost = normalizeHost(new URL(projectUrl).host);\n    if (declaredHost && declaredHost !== payloadHost) return undefined;\n    return payloadHost;\n  } catch {\n    return undefined;\n  }\n}\n\nfunction mergeRequestSourceKey(host: string, projectId: number, mergeRequestIid: number): string {\n  return `gitlab-pr:${Buffer.from(JSON.stringify({ version: 1, host, projectId, mergeRequestIid }), 'utf8').toString('base64url')}`;\n}\n\nasync function withRuleTimeout<T>(promise: Promise<T>): Promise<T> {\n  let timeout: ReturnType<typeof setTimeout> | undefined;\n  try {\n    return await Promise.race([\n      promise,\n      new Promise<never>((_, reject) => {\n        timeout = setTimeout(() => reject(new Error('FACTORY_RULE_TIMEOUT')), RULE_TIMEOUT_MS);\n      }),\n    ]);\n  } finally {\n    if (timeout) clearTimeout(timeout);\n  }\n}\n\nconst MAX_STALE_RULE_ATTEMPTS = 3;\n\nexport interface GitLabRulesIntegration {\n  readonly rules: GitLabEventRules;\n  resolveActiveConnectionForHost?(storedConnectionId: string, host: string): Promise<string>;\n  getProjectMemberAccessLevel(connectionId: string, projectId: string, username: string): Promise<number | undefined>;\n  getWorkItemAuthorUsername(\n    connectionId: string,\n    projectId: string,\n    kind: 'issue' | 'merge_request',\n    iid: number,\n  ): Promise<string | undefined>;\n}\n\ninterface GitLabRulesOptions {\n  gitlab: GitLabRulesIntegration;\n  sourceControl: SourceControlStorageHandle;\n  projects: FactoryProjectsStorage;\n  storage: WorkItemsStorage;\n  intake: IntakeStorage;\n  configVersion: string;\n  boards: BoardRegistry;\n}\n\ninterface ProjectTarget {\n  target: ExternalRepositoryProjectTarget;\n  connectionIds: string[];\n}\n\nexport class GitLabRules {\n  constructor(private readonly options: GitLabRulesOptions) {}\n\n  async ingest(parsed: ParsedGitLabWebhook): Promise<{ status: IngressStatus }> {\n    const event = eventName(parsed);\n    const project = object(parsed.payload.project);\n    const projectId = number(project?.id);\n    const projectPath = string(project?.path_with_namespace);\n    const host = hostFromPayload(parsed);\n    const username = string(parsed.payload.user_username) ?? string(object(parsed.payload.user)?.username);\n    if (!event || !projectId || !projectPath || !host || !username) return { status: 'ignored' };\n\n    const targets = await this.#targets(String(projectId), host);\n    if (targets.length === 0) return { status: 'ignored' };\n    const results: Array<{ status: IngressStatus }> = [];\n    for (const target of targets) {\n      results.push(await this.#ingestProject(parsed, event, projectId, projectPath, host, username, target));\n    }\n    if (results.some(result => result.status === 'committed')) return { status: 'committed' };\n    if (results.some(result => result.status === 'replayed')) return { status: 'replayed' };\n    return results[0] ?? { status: 'ignored' };\n  }\n\n  async #targets(repositoryExternalId: string, host: string): Promise<ProjectTarget[]> {\n    const grouped = new Map<string, ProjectTarget>();\n    const keys = (await this.options.sourceControl.projectRepositories.listConfiguredExternalKeys()).filter(\n      key => key.repositoryExternalId === repositoryExternalId,\n    );\n    for (const key of keys) {\n      const targets = await this.options.sourceControl.projectRepositories.listByExternalRepository({\n        installationExternalId: key.installationExternalId,\n        repositoryExternalId,\n      });\n      for (const target of targets) {\n        const installation = await this.options.sourceControl.installations.findByExternalId({\n          orgId: target.orgId,\n          externalId: key.installationExternalId,\n        });\n        const installationHost = string(installation?.providerMetadata.host);\n        if (!installationHost || normalizeHost(installationHost) !== normalizeHost(host)) continue;\n        const id = `${target.orgId}:${target.factoryProjectId}`;\n        const current = grouped.get(id);\n        if (current) {\n          if (!current.connectionIds.includes(key.installationExternalId)) {\n            current.connectionIds.push(key.installationExternalId);\n          }\n        } else {\n          grouped.set(id, { target, connectionIds: [key.installationExternalId] });\n        }\n      }\n    }\n    return [...grouped.values()];\n  }\n\n  async #ingestProject(\n    parsed: ParsedGitLabWebhook,\n    event: FactoryGitLabEventName,\n    projectId: number,\n    projectPath: string,\n    host: string,\n    username: string,\n    target: ProjectTarget,\n  ): Promise<{ status: IngressStatus }> {\n    const factoryProject = await this.options.projects.get({\n      orgId: target.target.orgId,\n      id: target.target.factoryProjectId,\n    });\n    if (!factoryProject) return { status: 'missing' };\n\n    const sourceId = encodeSourceId({ host, projectId: String(projectId) });\n    const config = await this.options.intake.getConfig({\n      orgId: target.target.orgId,\n      integrationIds: ['gitlab'],\n    });\n    if (!config.gitlab?.enabled || !config.gitlab.sourceIds?.includes(sourceId)) return { status: 'ignored' };\n    const binding = (\n      await this.options.intake.listBindings({ orgId: target.target.orgId, integrationId: 'gitlab' })\n    ).find(\n      candidate => candidate.sourceId === sourceId && candidate.factoryProjectId === target.target.factoryProjectId,\n    );\n    if (!binding) return { status: 'ignored' };\n    const board = this.options.boards.get(binding.board ?? 'work');\n    if (!board) return { status: 'ignored' };\n\n    const connectionIds = [\n      ...new Set(\n        await Promise.all(\n          target.connectionIds.map(\n            connectionId => this.options.gitlab.resolveActiveConnectionForHost?.(connectionId, host) ?? connectionId,\n          ),\n        ),\n      ),\n    ];\n\n    const attributes = object(parsed.payload.object_attributes);\n    const issue = parsed.event === 'Note Hook' ? object(parsed.payload.issue) : attributes;\n    const mergeRequest = parsed.event === 'Note Hook' ? object(parsed.payload.merge_request) : attributes;\n    const issueIid = number(issue?.iid);\n    const mergeRequestIid = number(mergeRequest?.iid);\n    const issueSourceKey = issueIid\n      ? encodeIssueReference({ host, projectId: String(projectId), issueIid })\n      : undefined;\n    const mergeRequestKey = mergeRequestIid ? mergeRequestSourceKey(host, projectId, mergeRequestIid) : undefined;\n    const items = await this.options.storage.list({\n      orgId: target.target.orgId,\n      factoryProjectId: target.target.factoryProjectId,\n    });\n    const issueItem = issueSourceKey\n      ? items.find(\n          item => item.externalSource?.integrationId === 'gitlab' && item.externalSource.externalId === issueSourceKey,\n        )\n      : undefined;\n    const reviewItem = mergeRequestKey\n      ? items.find(\n          item => item.externalSource?.integrationId === 'gitlab' && item.externalSource.externalId === mergeRequestKey,\n        )\n      : undefined;\n    const headBranch = string(mergeRequest?.source_branch) ?? '';\n    const authoringItem = headBranch\n      ? items.find(\n          item =>\n            item.externalSource?.type !== 'pull-request' &&\n            Object.values(item.sessions).some(session => session.branch === headBranch),\n        )\n      : undefined;\n    const actorTrusted = await this.#trusted(connectionIds, String(projectId), username);\n    const eventUserId = number(object(parsed.payload.user)?.id) ?? number(parsed.payload.user_id);\n    const resolveAuthor = async (\n      item: Record<string, unknown> | undefined,\n      kind: 'issue' | 'merge_request',\n      iid: number | undefined,\n    ): Promise<string | undefined> => {\n      if (!item || !iid) return undefined;\n      const embedded = string(object(item.author)?.username);\n      if (embedded) return embedded;\n      if (eventUserId && eventUserId === number(item.author_id)) return username;\n      for (const connectionId of connectionIds) {\n        try {\n          const resolved = await this.options.gitlab.getWorkItemAuthorUsername(\n            connectionId,\n            String(projectId),\n            kind,\n            iid,\n          );\n          if (resolved) return resolved;\n        } catch {\n          // Another active credential may cover this project; otherwise leave author trust unset.\n        }\n      }\n      return undefined;\n    };\n    const [issueAuthor, mergeRequestAuthor] = await Promise.all([\n      resolveAuthor(issue, 'issue', issueIid),\n      resolveAuthor(mergeRequest, 'merge_request', mergeRequestIid),\n    ]);\n    const authorTrusted = async (author: string | undefined): Promise<boolean> => {\n      if (!author) return false;\n      return author === username ? actorTrusted : this.#trusted(connectionIds, String(projectId), author);\n    };\n    const [issueAuthorTrusted, mergeRequestAuthorTrusted] = await Promise.all([\n      authorTrusted(issueAuthor),\n      authorTrusted(mergeRequestAuthor),\n    ]);\n    const actor: FactoryRuleActor = {\n      type: 'gitlab',\n      username,\n      trusted: actorTrusted,\n      factoryAuthored: false,\n    };\n\n    // A push moves the head a recorded review verdict was given on. Recording\n    // the new head lets the verdict badge show that it is outdated, while the\n    // verdict itself stays so the next pass still runs as a re-review. It is\n    // recorded before the push is evaluated: the dispatcher can apply the\n    // re-review transition as soon as it commits, and the pass it starts names\n    // the head it covers, which must be the pushed one.\n    const lastCommit = object(mergeRequest?.last_commit);\n    const headSha = string(lastCommit?.id)?.toLowerCase();\n    // Without an update time the commit time still orders the push; dropping\n    // the write would leave the pass naming the head the last verdict covered.\n    const headAt = timestamp(mergeRequest?.updated_at) ?? timestamp(lastCommit?.timestamp);\n    let pushedReviewItem = reviewItem;\n    if (event === 'mergeRequestUpdated' && headSha && reviewItem) {\n      const parent = items.find(item => item.id === reviewItem.parentWorkItemId);\n      // The authoring Work item mirrors the verdict of the merge request it has\n      // out; a push to an older one must not mark its successor's verdict.\n      await recordPullRequestHead(this.options.storage, {\n        orgId: reviewItem.orgId,\n        id: reviewItem.id,\n        headSha,\n        headAt,\n      });\n      if (parent) {\n        await recordPullRequestHead(this.options.storage, {\n          orgId: parent.orgId,\n          id: parent.id,\n          headSha,\n          headAt,\n          ownedPullRequestNumber: mergeRequestIid,\n        });\n      }\n      pushedReviewItem = (await this.options.storage.get({ orgId: reviewItem.orgId, id: reviewItem.id })) ?? reviewItem;\n    }\n    const candidates: Array<WorkItemRow | undefined> =\n      event === 'mergeRequestMerged'\n        ? [...new Map([reviewItem, authoringItem].filter(Boolean).map(item => [item!.id, item!])).values()]\n        : event === 'mergeRequestCommented'\n          ? [authoringItem ?? reviewItem]\n          : event === 'mergeRequestOpened'\n            ? [authoringItem, ...(authoringItem ? [authoringItem] : [])]\n            : event.startsWith('mergeRequest')\n              ? [pushedReviewItem ?? authoringItem]\n              : [issueItem];\n    const results = [];\n    for (const [index, item] of candidates.entries()) {\n      results.push(\n        await this.#evaluate({\n          parsed,\n          event,\n          projectId,\n          projectPath,\n          host,\n          actor,\n          orgId: target.target.orgId,\n          factoryProjectId: target.target.factoryProjectId,\n          factoryProject,\n          board: { board: board.id, initialPhase: board.initialPhase },\n          issue,\n          issueAuthor,\n          issueAuthorTrusted,\n          issueIid,\n          issueSourceKey,\n          mergeRequest,\n          mergeRequestAuthor,\n          mergeRequestAuthorTrusted,\n          mergeRequestIid,\n          mergeRequestKey,\n          factoryAuthored: Boolean(authoringItem),\n          item,\n          ingressIdentity: `gitlab:${projectId}:${parsed.deliveryId}${index ? `:${item?.id ?? index}` : ''}`,\n          // A merge request opening concerns two cards: its own Review card,\n          // which the integration handler files against the authoring item,\n          // and that authoring item, which its board may react to. The second\n          // evaluation runs only the board handler, under an id-suffixed\n          // identity so it is not dropped as a replay of the first.\n          ...(event === 'mergeRequestOpened' ? { mergeRequestOpenedScope: index ? ('board' as const) : ('intake' as const) } : {}),\n        }),\n      );\n    }\n    // The authoring Work item records which merge request it has out, so the\n    // Work transition policy keeps an agent from closing the work while it is\n    // open. Sessions carry no repository, so a branch shared by two Work cards\n    // is ambiguous and records nothing.\n    const branchOwners = headBranch\n      ? items.filter(\n          item =>\n            item.externalSource?.type !== 'pull-request' &&\n            Object.values(item.sessions).some(session => session.branch === headBranch),\n        )\n      : [];\n    if (authoringItem && mergeRequestIid && branchOwners.length === 1) {\n      await this.#trackOpenMergeRequest({\n        orgId: authoringItem.orgId,\n        id: authoringItem.id,\n        event,\n        mergeRequestIid,\n        eventAt: timestamp(mergeRequest?.updated_at),\n        opened: string(mergeRequest?.state) === 'opened' && (actorTrusted || mergeRequestAuthorTrusted),\n        headSha: string(object(mergeRequest?.last_commit)?.id)?.toLowerCase(),\n      });\n    }\n    if (results.some(result => result.status === 'committed')) return { status: 'committed' };\n    if (results.some(result => result.status === 'replayed')) return { status: 'replayed' };\n    return results[0] ?? { status: 'ignored' };\n  }\n\n  /**\n   * Records or clears the merge request a Work card has out. Each merge\n   * request's last applied event time is kept on the card, so an opening that\n   * is older than a close already applied (a replay, or a close delivered\n   * first) is ignored, while a genuine reopen is newer and records it again.\n   */\n  async #trackOpenMergeRequest(input: {\n    orgId: string;\n    id: string;\n    event: string;\n    mergeRequestIid: number;\n    eventAt: number | undefined;\n    opened: boolean;\n    headSha: string | undefined;\n  }): Promise<void> {\n    const settling = input.event === 'mergeRequestMerged' || input.event === 'mergeRequestClosed';\n    if (input.event !== 'mergeRequestOpened' && !settling) return;\n    const key = String(input.mergeRequestIid);\n    for (let attempt = 0; attempt < 3; attempt++) {\n      const item = await this.options.storage.get({ orgId: input.orgId, id: input.id });\n      if (!item) return;\n      const events = object(item.metadata?.mergeRequestEvents) ?? {};\n      const last = object(events[key]);\n      const lastAt = number(last?.at);\n      if (input.eventAt !== undefined && lastAt !== undefined && lastAt >= input.eventAt) return;\n      // Without a timestamp, only an opening that no close has settled is trusted.\n      if (input.eventAt === undefined && !settling && last?.open === false) return;\n      if (!settling && !input.opened) return;\n      const recorded = item.metadata?.openPullRequestNumber;\n      const patch: Record<string, unknown> = {\n        mergeRequestEvents: { ...events, [key]: { at: input.eventAt ?? lastAt ?? null, open: !settling } },\n      };\n      if (!settling) {\n        // A head recorded for an earlier merge request must not mark this one's\n        // verdict outdated. A replayed opening of the merge request already\n        // recorded keeps the head its pushes left.\n        if (recorded !== input.mergeRequestIid) {\n          patch.pullRequestHeadSha = input.headSha ?? null;\n          patch.pullRequestHeadAt = input.eventAt ?? null;\n        }\n        patch.openPullRequestNumber = input.mergeRequestIid;\n      } else if (recorded === input.mergeRequestIid) {\n        patch.openPullRequestNumber = null;\n        if (input.event === 'mergeRequestMerged' && typeof item.metadata?.reviewVerdict === 'string') {\n          patch.reviewVerdict = null;\n        }\n      }\n      try {\n        await this.options.storage.update({\n          orgId: item.orgId,\n          id: item.id,\n          userId: 'factory-rule-dispatcher',\n          expectedRevision: item.revision,\n          patch: { metadata: patch },\n        });\n        return;\n      } catch (error) {\n        if (!(error instanceof WorkItemUpdateConflictError)) throw error;\n      }\n    }\n  }\n\n  async #trusted(connectionIds: string[], projectId: string, username: string): Promise<boolean> {\n    for (const connectionId of connectionIds) {\n      try {\n        const level = await this.options.gitlab.getProjectMemberAccessLevel(connectionId, projectId, username);\n        if (level !== undefined) return level >= GITLAB_TRUSTED_ACCESS_LEVEL;\n      } catch {\n        // Try another active credential covering the same canonical project; otherwise fail closed.\n      }\n    }\n    return false;\n  }\n\n  async #evaluate(\n    input: {\n      parsed: ParsedGitLabWebhook;\n      event: FactoryGitLabEventName;\n      projectId: number;\n      projectPath: string;\n      host: string;\n      actor: FactoryRuleActor;\n      orgId: string;\n      factoryProjectId: string;\n      factoryProject: { createdAt: Date };\n      board: { board: string; initialPhase: string };\n      issue: Record<string, unknown> | undefined;\n      issueAuthor: string | undefined;\n      issueAuthorTrusted: boolean;\n      issueIid: number | undefined;\n      issueSourceKey: string | undefined;\n      mergeRequest: Record<string, unknown> | undefined;\n      mergeRequestAuthor: string | undefined;\n      mergeRequestAuthorTrusted: boolean;\n      mergeRequestIid: number | undefined;\n      mergeRequestKey: string | undefined;\n      factoryAuthored: boolean;\n      item: WorkItemRow | undefined;\n      ingressIdentity: string;\n      mergeRequestOpenedScope?: 'intake' | 'board';\n    },\n    attempt = 1,\n  ): Promise<{ status: IngressStatus }> {\n    const note = object(input.parsed.payload.object_attributes);\n    const issueAuthor = input.issueAuthor;\n    const mergeRequestAuthor = input.mergeRequestAuthor;\n    const mergeRequestState = string(input.mergeRequest?.state);\n    const context: FactoryGitLabRuleContext = {\n      tenant: { orgId: input.orgId, projectId: input.factoryProjectId },\n      actor: input.actor,\n      ingress: { type: 'gitlab', id: input.ingressIdentity },\n      cause: `gitlab.${input.event}`,\n      causalChain: [],\n      configVersion: this.options.configVersion,\n      ...(input.item\n        ? {\n            item: {\n              id: input.item.id,\n              source:\n                input.item.externalSource?.type === 'pull-request'\n                  ? ('gitlab-pr' as const)\n                  : input.item.externalSource?.integrationId === 'gitlab'\n                    ? ('gitlab-issue' as const)\n                    : ('manual' as const),\n              sourceKey: input.item.externalSource?.externalId ?? null,\n              parentWorkItemId: input.item.parentWorkItemId,\n              title: input.item.title,\n              url: input.item.externalSource?.url ?? null,\n              stages: input.item.stages,\n              acceptedAt: input.item.acceptedAt,\n              metadata: input.item.metadata,\n            },\n            board: boardForWorkItem(input.item),\n            itemRevision: input.item.revision,\n            ...withBoardClosure(this.options.boards, input.item),\n            ...rulePhaseField(this.options.boards, input.item),\n          }\n        : {}),\n      intake: input.board,\n      event: input.event,\n      deliveryId: input.parsed.deliveryId,\n      factory: { createdAt: input.factoryProject.createdAt.toISOString() },\n      repository: { id: input.projectId, fullName: input.projectPath, host: input.host },\n      ...(input.issueIid && input.issueSourceKey && string(input.issue?.title)\n        ? {\n            issue: {\n              number: input.issueIid,\n              sourceKey: input.issueSourceKey,\n              title: string(input.issue?.title)!,\n              url:\n                string(input.issue?.url) ??\n                string(input.issue?.web_url) ??\n                `https://${input.host}/${input.projectPath}/-/issues/${input.issueIid}`,\n              ...(string(input.issue?.created_at) ? { createdAt: string(input.issue?.created_at) } : {}),\n              ...(string(input.issue?.updated_at) ? { updatedAt: string(input.issue?.updated_at) } : {}),\n              assignees: usernames(input.parsed.payload.assignees ?? input.issue?.assignees),\n              labels: labelNames(input.issue?.labels ?? input.parsed.payload.labels),\n              labelColors: labelColors(input.issue?.labels ?? input.parsed.payload.labels),\n              state: string(input.issue?.state) === 'closed' ? ('closed' as const) : ('open' as const),\n              ...(issueAuthor ? { author: issueAuthor } : {}),\n              authorTrusted: input.issueAuthorTrusted,\n            },\n          }\n        : {}),\n      ...(input.parsed.event === 'Note Hook' && number(note?.id)\n        ? {\n            note: {\n              id: number(note?.id)!,\n              ...(string(note?.note) ? { body: string(note?.note) } : {}),\n              ...(string(note?.url) ? { url: string(note?.url) } : {}),\n              ...(string(object(input.parsed.payload.user)?.username)\n                ? { author: string(object(input.parsed.payload.user)?.username) }\n                : {}),\n              ...(string(note?.created_at) ? { createdAt: string(note?.created_at) } : {}),\n              ...(string(note?.updated_at) ? { updatedAt: string(note?.updated_at) } : {}),\n            },\n          }\n        : {}),\n      ...(input.mergeRequestIid && input.mergeRequestKey && string(input.mergeRequest?.title)\n        ? {\n            mergeRequest: {\n              number: input.mergeRequestIid,\n              sourceKey: input.mergeRequestKey,\n              title: string(input.mergeRequest?.title)!,\n              url:\n                string(input.mergeRequest?.url) ??\n                string(input.mergeRequest?.web_url) ??\n                `https://${input.host}/${input.projectPath}/-/merge_requests/${input.mergeRequestIid}`,\n              ...(string(input.mergeRequest?.created_at) ? { createdAt: string(input.mergeRequest?.created_at) } : {}),\n              state:\n                mergeRequestState === 'closed' || mergeRequestState === 'merged'\n                  ? ('closed' as const)\n                  : ('open' as const),\n              draft: boolean(input.mergeRequest?.draft) ?? boolean(input.mergeRequest?.work_in_progress) ?? false,\n              merged: input.event === 'mergeRequestMerged' || mergeRequestState === 'merged',\n              assignees: usernames(input.parsed.payload.assignees ?? input.mergeRequest?.assignees),\n              reviewers: usernames(input.parsed.payload.reviewers ?? input.mergeRequest?.reviewers),\n              labels: labelNames(input.mergeRequest?.labels ?? input.parsed.payload.labels),\n              labelColors: labelColors(input.mergeRequest?.labels ?? input.parsed.payload.labels),\n              ...(mergeRequestAuthor ? { author: mergeRequestAuthor } : {}),\n              authorTrusted: input.mergeRequestAuthorTrusted,\n              factoryAuthored: input.factoryAuthored,\n              headBranch: string(input.mergeRequest?.source_branch) ?? '',\n              baseBranch: string(input.mergeRequest?.target_branch) ?? '',\n            },\n          }\n        : {}),\n    };\n    const boardRules = boardEventHandlers(\n      this.options.boards,\n      input.mergeRequestOpenedScope === 'intake' ? undefined : eventBoardId(context),\n      'gitlab',\n    );\n    const rule =\n      input.mergeRequestOpenedScope === 'board'\n        ? hasExplicitRuleOverride(this.options.gitlab.rules, input.event)\n          ? undefined\n          : boardRules?.mergeRequestOpened\n        : selectEventRule(this.options.gitlab.rules, boardRules, input.event);\n    // Without a board handler the authoring card has nothing to answer; skip\n    // recording an empty evaluation for it.\n    if (input.mergeRequestOpenedScope === 'board' && !rule) return { status: 'ignored' };\n    let decision: FactoryRuleDecision | void;\n    let decisions: Record<string, unknown>[] = [];\n    let outcome: { status: 'accepted' | 'rejected'; code?: string; reason?: string } = { status: 'accepted' };\n    try {\n      decision = rule ? await withRuleTimeout(Promise.resolve(rule(Object.freeze(context)))) : undefined;\n      if (decision?.type === 'reject') {\n        outcome = { status: 'rejected', code: decision.code, reason: decision.reason };\n      } else if (decision) {\n        decisions = validateFactoryRuleDecisions([decision]).map(entry => {\n          assertFactoryDecisionTarget(\n            entry,\n            this.options.boards,\n            input.item ? boardForWorkItem(input.item) : undefined,\n          );\n          return { ...entry };\n        });\n      }\n    } catch (error) {\n      const timedOut = error instanceof Error && error.message === 'FACTORY_RULE_TIMEOUT';\n      outcome = {\n        status: 'rejected',\n        code: timedOut ? 'timeout' : 'rule_error',\n        reason: timedOut\n          ? 'Factory rule evaluation timed out.'\n          : error instanceof Error\n            ? error.message.slice(0, 2_000)\n            : 'Factory GitLab rule failed.',\n      };\n    }\n\n    const committed = await this.options.storage.commitRuleEvaluation({\n      orgId: input.orgId,\n      factoryProjectId: input.factoryProjectId,\n      workItemId: input.item?.id ?? null,\n      ingress: { identity: input.ingressIdentity, triggerType: `gitlab.${input.event}` },\n      configVersion: this.options.configVersion,\n      expectedRevision: input.item?.revision ?? null,\n      actor: { ...input.actor },\n      outcome,\n      decisions,\n      causalChain: [],\n      now: new Date(),\n    });\n    if (committed.status === 'stale') {\n      // Nothing was persisted: re-read the item and evaluate again at its fresh revision.\n      if (attempt >= MAX_STALE_RULE_ATTEMPTS) {\n        throw new Error(`Factory GitLab rule evaluation for ${input.ingressIdentity} kept losing revision races.`);\n      }\n      const fresh = input.item ? await this.options.storage.get({ orgId: input.orgId, id: input.item.id }) : null;\n      if (input.item && !fresh) return { status: 'missing' };\n      return this.#evaluate({ ...input, item: fresh ?? undefined }, attempt + 1);\n    }\n    return { status: committed.status };\n  }\n}\n\nexport function attachGitLabRules(\n  gitlab: GitLabRulesIntegration,\n  context: IntegrationContext,\n): ((event: ParsedGitLabWebhook) => Promise<unknown>) | undefined {\n  if (!context.runtime) return undefined;\n  const rules = new GitLabRules({\n    gitlab,\n    sourceControl: context.storage.sourceControl,\n    projects: context.storage.projects,\n    storage: context.runtime.workItems,\n    intake: context.storage.intake,\n    configVersion: context.runtime.configVersion,\n    boards: context.runtime.boards,\n  });\n  return event => rules.ingest(event);\n}\n"],"mappings":";;;;;;;;AA8BA,MAAM,kBAAkB;AAIxB,SAAS,OAAO,OAAqD;CACnE,OAAO,SAAS,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,KAAK,IAAK,QAAoC,KAAA;AAC5G;AAEA,SAAS,OAAO,OAAoC;CAClD,OAAO,OAAO,UAAU,YAAY,MAAM,SAAS,IAAI,QAAQ,KAAA;AACjE;AAEA,SAAS,OAAO,OAAoC;CAClD,OAAO,OAAO,UAAU,YAAY,OAAO,SAAS,KAAK,IAAI,QAAQ,KAAA;AACvE;;AAGA,SAAS,UAAU,OAAoC;CACrD,MAAM,OAAO,OAAO,KAAK;CACzB,IAAI,CAAC,MAAM,OAAO,KAAA;CAClB,MAAM,SAAS,mFAAmF,KAAK,IAAI;CAC3G,MAAM,SAAS,KAAK,MAClB,SAAS,GAAG,OAAO,GAAG,GAAG,OAAO,KAAK,OAAO,KAAK,GAAG,OAAO,GAAG,GAAG,OAAO,OAAO,QAAQ,IACzF;CACA,OAAO,OAAO,MAAM,MAAM,IAAI,KAAA,IAAY;AAC5C;AAEA,SAAS,QAAQ,OAAqC;CACpD,OAAO,OAAO,UAAU,YAAY,QAAQ,KAAA;AAC9C;AAEA,SAAS,UAAU,OAA0B;CAC3C,IAAI,CAAC,MAAM,QAAQ,KAAK,GAAG,OAAO,CAAC;CACnC,OAAO,MAAM,SAAQ,UAAS;EAC5B,MAAM,WAAW,OAAO,OAAO,KAAK,CAAC,EAAE,QAAQ;EAC/C,OAAO,WAAW,CAAC,QAAQ,IAAI,CAAC;CAClC,CAAC;AACH;AAEA,SAAS,WAAW,OAA0B;CAC5C,IAAI,CAAC,MAAM,QAAQ,KAAK,GAAG,OAAO,CAAC;CACnC,OAAO,MAAM,SAAQ,UAAS;EAC5B,IAAI,OAAO,UAAU,UAAU,OAAO,QAAQ,CAAC,KAAK,IAAI,CAAC;EACzD,MAAM,QAAQ,OAAO,OAAO,KAAK,CAAC,EAAE,KAAK,KAAK,OAAO,OAAO,KAAK,CAAC,EAAE,IAAI;EACxE,OAAO,QAAQ,CAAC,KAAK,IAAI,CAAC;CAC5B,CAAC;AACH;AAEA,SAAS,YAAY,OAAwC;CAC3D,IAAI,CAAC,MAAM,QAAQ,KAAK,GAAG,OAAO,CAAC;CACnC,OAAO,OAAO,YACZ,MAAM,SAAQ,UAAS;EACrB,MAAM,QAAQ,OAAO,KAAK;EAC1B,MAAM,OAAO,OAAO,OAAO,KAAK,KAAK,OAAO,OAAO,IAAI;EACvD,MAAM,QAAQ,OAAO,OAAO,KAAK;EACjC,OAAO,QAAQ,QAAQ,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC;CAC5C,CAAC,CACH;AACF;AAEA,SAAS,UAAU,QAAiE;CAClF,MAAM,aAAa,OAAO,OAAO,QAAQ,iBAAiB;CAC1D,MAAM,SAAS,OAAO,YAAY,MAAM,CAAC,EAAE,YAAY;CACvD,IAAI,OAAO,UAAU,cAAc;EACjC,IAAI,WAAW,UAAU,WAAW,UAAU,OAAO;EACrD,IAAI,WAAW,SAAS,OAAO;EAC/B,OAAO;CACT;CACA,IAAI,OAAO,UAAU,aAAa;EAChC,MAAM,eAAe,OAAO,YAAY,aAAa;EACrD,IAAI,iBAAiB,SAAS,OAAO;EACrC,IAAI,iBAAiB,gBAAgB,OAAO;EAC5C;CACF;CACA,IAAI,OAAO,UAAU,sBAAsB;CAC3C,IAAI,WAAW,UAAU,WAAW,UAAU,OAAO;CACrD,IAAI,WAAW,SAAS,OAAO;CAC/B,IAAI,WAAW,SAAS,OAAO;CAC/B,OAAO;AACT;AAEA,SAAS,cAAc,MAAsB;CAC3C,OAAO,KAAK,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,QAAQ,OAAO,EAAE;AACpD;AAEA,SAAS,gBAAgB,QAAiD;CACxE,MAAM,eAAe,OAAO,eAAe,cAAc,OAAO,YAAY,IAAI,KAAA;CAChF,MAAM,aAAa,OAAO,OAAO,OAAO,QAAQ,OAAO,CAAC,EAAE,OAAO;CACjE,IAAI,CAAC,YAAY,OAAO;CACxB,IAAI;EACF,MAAM,cAAc,cAAc,IAAI,IAAI,UAAU,CAAC,CAAC,IAAI;EAC1D,IAAI,gBAAgB,iBAAiB,aAAa,OAAO,KAAA;EACzD,OAAO;CACT,QAAQ;EACN;CACF;AACF;AAEA,SAAS,sBAAsB,MAAc,WAAmB,iBAAiC;CAC/F,OAAO,aAAa,OAAO,KAAK,KAAK,UAAU;EAAE,SAAS;EAAG;EAAM;EAAW;CAAgB,CAAC,GAAG,MAAM,CAAC,CAAC,SAAS,WAAW;AAChI;AAEA,eAAe,gBAAmB,SAAiC;CACjE,IAAI;CACJ,IAAI;EACF,OAAO,MAAM,QAAQ,KAAK,CACxB,SACA,IAAI,SAAgB,GAAG,WAAW;GAChC,UAAU,iBAAiB,uBAAO,IAAI,MAAM,sBAAsB,CAAC,GAAG,eAAe;EACvF,CAAC,CACH,CAAC;CACH,UAAU;EACR,IAAI,SAAS,aAAa,OAAO;CACnC;AACF;AAEA,MAAM,0BAA0B;AA6BhC,IAAa,cAAb,MAAyB;CACM;CAA7B,YAAY,SAA8C;EAA7B,KAAA,UAAA;CAA8B;CAE3D,MAAM,OAAO,QAAiE;EAC5E,MAAM,QAAQ,UAAU,MAAM;EAC9B,MAAM,UAAU,OAAO,OAAO,QAAQ,OAAO;EAC7C,MAAM,YAAY,OAAO,SAAS,EAAE;EACpC,MAAM,cAAc,OAAO,SAAS,mBAAmB;EACvD,MAAM,OAAO,gBAAgB,MAAM;EACnC,MAAM,WAAW,OAAO,OAAO,QAAQ,aAAa,KAAK,OAAO,OAAO,OAAO,QAAQ,IAAI,CAAC,EAAE,QAAQ;EACrG,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,eAAe,CAAC,QAAQ,CAAC,UAAU,OAAO,EAAE,QAAQ,UAAU;EAE3F,MAAM,UAAU,MAAM,KAAKA,SAAS,OAAO,SAAS,GAAG,IAAI;EAC3D,IAAI,QAAQ,WAAW,GAAG,OAAO,EAAE,QAAQ,UAAU;EACrD,MAAM,UAA4C,CAAC;EACnD,KAAK,MAAM,UAAU,SACnB,QAAQ,KAAK,MAAM,KAAKC,eAAe,QAAQ,OAAO,WAAW,aAAa,MAAM,UAAU,MAAM,CAAC;EAEvG,IAAI,QAAQ,MAAK,WAAU,OAAO,WAAW,WAAW,GAAG,OAAO,EAAE,QAAQ,YAAY;EACxF,IAAI,QAAQ,MAAK,WAAU,OAAO,WAAW,UAAU,GAAG,OAAO,EAAE,QAAQ,WAAW;EACtF,OAAO,QAAQ,MAAM,EAAE,QAAQ,UAAU;CAC3C;CAEA,MAAMD,SAAS,sBAA8B,MAAwC;EACnF,MAAM,0BAAU,IAAI,IAA2B;EAC/C,MAAM,QAAQ,MAAM,KAAK,QAAQ,cAAc,oBAAoB,2BAA2B,EAAA,CAAG,QAC/F,QAAO,IAAI,yBAAyB,oBACtC;EACA,KAAK,MAAM,OAAO,MAAM;GACtB,MAAM,UAAU,MAAM,KAAK,QAAQ,cAAc,oBAAoB,yBAAyB;IAC5F,wBAAwB,IAAI;IAC5B;GACF,CAAC;GACD,KAAK,MAAM,UAAU,SAAS;IAK5B,MAAM,mBAAmB,QAAO,MAJL,KAAK,QAAQ,cAAc,cAAc,iBAAiB;KACnF,OAAO,OAAO;KACd,YAAY,IAAI;IAClB,CAAC,EAAA,EAC6C,iBAAiB,IAAI;IACnE,IAAI,CAAC,oBAAoB,cAAc,gBAAgB,MAAM,cAAc,IAAI,GAAG;IAClF,MAAM,KAAK,GAAG,OAAO,MAAM,GAAG,OAAO;IACrC,MAAM,UAAU,QAAQ,IAAI,EAAE;IAC9B,IAAI,SACE;SAAA,CAAC,QAAQ,cAAc,SAAS,IAAI,sBAAsB,GAC5D,QAAQ,cAAc,KAAK,IAAI,sBAAsB;IAAA,OAGvD,QAAQ,IAAI,IAAI;KAAE;KAAQ,eAAe,CAAC,IAAI,sBAAsB;IAAE,CAAC;GAE3E;EACF;EACA,OAAO,CAAC,GAAG,QAAQ,OAAO,CAAC;CAC7B;CAEA,MAAMC,eACJ,QACA,OACA,WACA,aACA,MACA,UACA,QACoC;EACpC,MAAM,iBAAiB,MAAM,KAAK,QAAQ,SAAS,IAAI;GACrD,OAAO,OAAO,OAAO;GACrB,IAAI,OAAO,OAAO;EACpB,CAAC;EACD,IAAI,CAAC,gBAAgB,OAAO,EAAE,QAAQ,UAAU;EAEhD,MAAM,WAAW,eAAe;GAAE;GAAM,WAAW,OAAO,SAAS;EAAE,CAAC;EACtE,MAAM,SAAS,MAAM,KAAK,QAAQ,OAAO,UAAU;GACjD,OAAO,OAAO,OAAO;GACrB,gBAAgB,CAAC,QAAQ;EAC3B,CAAC;EACD,IAAI,CAAC,OAAO,QAAQ,WAAW,CAAC,OAAO,OAAO,WAAW,SAAS,QAAQ,GAAG,OAAO,EAAE,QAAQ,UAAU;EACxG,MAAM,WACJ,MAAM,KAAK,QAAQ,OAAO,aAAa;GAAE,OAAO,OAAO,OAAO;GAAO,eAAe;EAAS,CAAC,EAAA,CAC9F,MACA,cAAa,UAAU,aAAa,YAAY,UAAU,qBAAqB,OAAO,OAAO,gBAC/F;EACA,IAAI,CAAC,SAAS,OAAO,EAAE,QAAQ,UAAU;EACzC,MAAM,QAAQ,KAAK,QAAQ,OAAO,IAAI,QAAQ,SAAS,MAAM;EAC7D,IAAI,CAAC,OAAO,OAAO,EAAE,QAAQ,UAAU;EAEvC,MAAM,gBAAgB,CACpB,GAAG,IAAI,IACL,MAAM,QAAQ,IACZ,OAAO,cAAc,KACnB,iBAAgB,KAAK,QAAQ,OAAO,iCAAiC,cAAc,IAAI,KAAK,YAC9F,CACF,CACF,CACF;EAEA,MAAM,aAAa,OAAO,OAAO,QAAQ,iBAAiB;EAC1D,MAAM,QAAQ,OAAO,UAAU,cAAc,OAAO,OAAO,QAAQ,KAAK,IAAI;EAC5E,MAAM,eAAe,OAAO,UAAU,cAAc,OAAO,OAAO,QAAQ,aAAa,IAAI;EAC3F,MAAM,WAAW,OAAO,OAAO,GAAG;EAClC,MAAM,kBAAkB,OAAO,cAAc,GAAG;EAChD,MAAM,iBAAiB,WACnB,qBAAqB;GAAE;GAAM,WAAW,OAAO,SAAS;GAAG;EAAS,CAAC,IACrE,KAAA;EACJ,MAAM,kBAAkB,kBAAkB,sBAAsB,MAAM,WAAW,eAAe,IAAI,KAAA;EACpG,MAAM,QAAQ,MAAM,KAAK,QAAQ,QAAQ,KAAK;GAC5C,OAAO,OAAO,OAAO;GACrB,kBAAkB,OAAO,OAAO;EAClC,CAAC;EACD,MAAM,YAAY,iBACd,MAAM,MACJ,SAAQ,KAAK,gBAAgB,kBAAkB,YAAY,KAAK,eAAe,eAAe,cAChG,IACA,KAAA;EACJ,MAAM,aAAa,kBACf,MAAM,MACJ,SAAQ,KAAK,gBAAgB,kBAAkB,YAAY,KAAK,eAAe,eAAe,eAChG,IACA,KAAA;EACJ,MAAM,aAAa,OAAO,cAAc,aAAa,KAAK;EAC1D,MAAM,gBAAgB,aAClB,MAAM,MACJ,SACE,KAAK,gBAAgB,SAAS,kBAC9B,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,MAAK,YAAW,QAAQ,WAAW,UAAU,CAC9E,IACA,KAAA;EACJ,MAAM,eAAe,MAAM,KAAKC,SAAS,eAAe,OAAO,SAAS,GAAG,QAAQ;EACnF,MAAM,cAAc,OAAO,OAAO,OAAO,QAAQ,IAAI,CAAC,EAAE,EAAE,KAAK,OAAO,OAAO,QAAQ,OAAO;EAC5F,MAAM,gBAAgB,OACpB,MACA,MACA,QACgC;GAChC,IAAI,CAAC,QAAQ,CAAC,KAAK,OAAO,KAAA;GAC1B,MAAM,WAAW,OAAO,OAAO,KAAK,MAAM,CAAC,EAAE,QAAQ;GACrD,IAAI,UAAU,OAAO;GACrB,IAAI,eAAe,gBAAgB,OAAO,KAAK,SAAS,GAAG,OAAO;GAClE,KAAK,MAAM,gBAAgB,eACzB,IAAI;IACF,MAAM,WAAW,MAAM,KAAK,QAAQ,OAAO,0BACzC,cACA,OAAO,SAAS,GAChB,MACA,GACF;IACA,IAAI,UAAU,OAAO;GACvB,QAAQ,CAER;EAGJ;EACA,MAAM,CAAC,aAAa,sBAAsB,MAAM,QAAQ,IAAI,CAC1D,cAAc,OAAO,SAAS,QAAQ,GACtC,cAAc,cAAc,iBAAiB,eAAe,CAC9D,CAAC;EACD,MAAM,gBAAgB,OAAO,WAAiD;GAC5E,IAAI,CAAC,QAAQ,OAAO;GACpB,OAAO,WAAW,WAAW,eAAe,KAAKA,SAAS,eAAe,OAAO,SAAS,GAAG,MAAM;EACpG;EACA,MAAM,CAAC,oBAAoB,6BAA6B,MAAM,QAAQ,IAAI,CACxE,cAAc,WAAW,GACzB,cAAc,kBAAkB,CAClC,CAAC;EACD,MAAM,QAA0B;GAC9B,MAAM;GACN;GACA,SAAS;GACT,iBAAiB;EACnB;EAQA,MAAM,aAAa,OAAO,cAAc,WAAW;EACnD,MAAM,UAAU,OAAO,YAAY,EAAE,CAAC,EAAE,YAAY;EAGpD,MAAM,SAAS,UAAU,cAAc,UAAU,KAAK,UAAU,YAAY,SAAS;EACrF,IAAI,mBAAmB;EACvB,IAAI,UAAU,yBAAyB,WAAW,YAAY;GAC5D,MAAM,SAAS,MAAM,MAAK,SAAQ,KAAK,OAAO,WAAW,gBAAgB;GAGzE,MAAM,sBAAsB,KAAK,QAAQ,SAAS;IAChD,OAAO,WAAW;IAClB,IAAI,WAAW;IACf;IACA;GACF,CAAC;GACD,IAAI,QACF,MAAM,sBAAsB,KAAK,QAAQ,SAAS;IAChD,OAAO,OAAO;IACd,IAAI,OAAO;IACX;IACA;IACA,wBAAwB;GAC1B,CAAC;GAEH,mBAAoB,MAAM,KAAK,QAAQ,QAAQ,IAAI;IAAE,OAAO,WAAW;IAAO,IAAI,WAAW;GAAG,CAAC,KAAM;EACzG;EACA,MAAM,aACJ,UAAU,uBACN,CAAC,GAAG,IAAI,IAAI,CAAC,YAAY,aAAa,CAAC,CAAC,OAAO,OAAO,CAAC,CAAC,KAAI,SAAQ,CAAC,KAAM,IAAI,IAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAChG,UAAU,0BACR,CAAC,iBAAiB,UAAU,IAC5B,UAAU,uBACR,CAAC,eAAe,GAAI,gBAAgB,CAAC,aAAa,IAAI,CAAC,CAAE,IACzD,MAAM,WAAW,cAAc,IAC7B,CAAC,oBAAoB,aAAa,IAClC,CAAC,SAAS;EACtB,MAAM,UAAU,CAAC;EACjB,KAAK,MAAM,CAAC,OAAO,SAAS,WAAW,QAAQ,GAC7C,QAAQ,KACN,MAAM,KAAKC,UAAU;GACnB;GACA;GACA;GACA;GACA;GACA;GACA,OAAO,OAAO,OAAO;GACrB,kBAAkB,OAAO,OAAO;GAChC;GACA,OAAO;IAAE,OAAO,MAAM;IAAI,cAAc,MAAM;GAAa;GAC3D;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA,iBAAiB,QAAQ,aAAa;GACtC;GACA,iBAAiB,UAAU,UAAU,GAAG,OAAO,aAAa,QAAQ,IAAI,MAAM,MAAM,UAAU;GAM9F,GAAI,UAAU,uBAAuB,EAAE,yBAAyB,QAAS,UAAqB,SAAmB,IAAI,CAAC;EACxH,CAAC,CACH;EAMF,MAAM,eAAe,aACjB,MAAM,QACJ,SACE,KAAK,gBAAgB,SAAS,kBAC9B,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,MAAK,YAAW,QAAQ,WAAW,UAAU,CAC9E,IACA,CAAC;EACL,IAAI,iBAAiB,mBAAmB,aAAa,WAAW,GAC9D,MAAM,KAAKC,uBAAuB;GAChC,OAAO,cAAc;GACrB,IAAI,cAAc;GAClB;GACA;GACA,SAAS,UAAU,cAAc,UAAU;GAC3C,QAAQ,OAAO,cAAc,KAAK,MAAM,aAAa,gBAAgB;GACrE,SAAS,OAAO,OAAO,cAAc,WAAW,CAAC,EAAE,EAAE,CAAC,EAAE,YAAY;EACtE,CAAC;EAEH,IAAI,QAAQ,MAAK,WAAU,OAAO,WAAW,WAAW,GAAG,OAAO,EAAE,QAAQ,YAAY;EACxF,IAAI,QAAQ,MAAK,WAAU,OAAO,WAAW,UAAU,GAAG,OAAO,EAAE,QAAQ,WAAW;EACtF,OAAO,QAAQ,MAAM,EAAE,QAAQ,UAAU;CAC3C;;;;;;;CAQA,MAAMA,uBAAuB,OAQX;EAChB,MAAM,WAAW,MAAM,UAAU,wBAAwB,MAAM,UAAU;EACzE,IAAI,MAAM,UAAU,wBAAwB,CAAC,UAAU;EACvD,MAAM,MAAM,OAAO,MAAM,eAAe;EACxC,KAAK,IAAI,UAAU,GAAG,UAAU,GAAG,WAAW;GAC5C,MAAM,OAAO,MAAM,KAAK,QAAQ,QAAQ,IAAI;IAAE,OAAO,MAAM;IAAO,IAAI,MAAM;GAAG,CAAC;GAChF,IAAI,CAAC,MAAM;GACX,MAAM,SAAS,OAAO,KAAK,UAAU,kBAAkB,KAAK,CAAC;GAC7D,MAAM,OAAO,OAAO,OAAO,IAAI;GAC/B,MAAM,SAAS,OAAO,MAAM,EAAE;GAC9B,IAAI,MAAM,YAAY,KAAA,KAAa,WAAW,KAAA,KAAa,UAAU,MAAM,SAAS;GAEpF,IAAI,MAAM,YAAY,KAAA,KAAa,CAAC,YAAY,MAAM,SAAS,OAAO;GACtE,IAAI,CAAC,YAAY,CAAC,MAAM,QAAQ;GAChC,MAAM,WAAW,KAAK,UAAU;GAChC,MAAM,QAAiC,EACrC,oBAAoB;IAAE,GAAG;KAAS,MAAM;KAAE,IAAI,MAAM,WAAW,UAAU;KAAM,MAAM,CAAC;IAAS;GAAE,EACnG;GACA,IAAI,CAAC,UAAU;IAIb,IAAI,aAAa,MAAM,iBAAiB;KACtC,MAAM,qBAAqB,MAAM,WAAW;KAC5C,MAAM,oBAAoB,MAAM,WAAW;IAC7C;IACA,MAAM,wBAAwB,MAAM;GACtC,OAAO,IAAI,aAAa,MAAM,iBAAiB;IAC7C,MAAM,wBAAwB;IAC9B,IAAI,MAAM,UAAU,wBAAwB,OAAO,KAAK,UAAU,kBAAkB,UAClF,MAAM,gBAAgB;GAE1B;GACA,IAAI;IACF,MAAM,KAAK,QAAQ,QAAQ,OAAO;KAChC,OAAO,KAAK;KACZ,IAAI,KAAK;KACT,QAAQ;KACR,kBAAkB,KAAK;KACvB,OAAO,EAAE,UAAU,MAAM;IAC3B,CAAC;IACD;GACF,SAAS,OAAO;IACd,IAAI,EAAE,iBAAiB,8BAA8B,MAAM;GAC7D;EACF;CACF;CAEA,MAAMF,SAAS,eAAyB,WAAmB,UAAoC;EAC7F,KAAK,MAAM,gBAAgB,eACzB,IAAI;GACF,MAAM,QAAQ,MAAM,KAAK,QAAQ,OAAO,4BAA4B,cAAc,WAAW,QAAQ;GACrG,IAAI,UAAU,KAAA,GAAW,OAAO,SAAA;EAClC,QAAQ,CAER;EAEF,OAAO;CACT;CAEA,MAAMC,UACJ,OA0BA,UAAU,GAC0B;EACpC,MAAM,OAAO,OAAO,MAAM,OAAO,QAAQ,iBAAiB;EAC1D,MAAM,cAAc,MAAM;EAC1B,MAAM,qBAAqB,MAAM;EACjC,MAAM,oBAAoB,OAAO,MAAM,cAAc,KAAK;EAC1D,MAAM,UAAoC;GACxC,QAAQ;IAAE,OAAO,MAAM;IAAO,WAAW,MAAM;GAAiB;GAChE,OAAO,MAAM;GACb,SAAS;IAAE,MAAM;IAAU,IAAI,MAAM;GAAgB;GACrD,OAAO,UAAU,MAAM;GACvB,aAAa,CAAC;GACd,eAAe,KAAK,QAAQ;GAC5B,GAAI,MAAM,OACN;IACE,MAAM;KACJ,IAAI,MAAM,KAAK;KACf,QACE,MAAM,KAAK,gBAAgB,SAAS,iBAC/B,cACD,MAAM,KAAK,gBAAgB,kBAAkB,WAC1C,iBACA;KACT,WAAW,MAAM,KAAK,gBAAgB,cAAc;KACpD,kBAAkB,MAAM,KAAK;KAC7B,OAAO,MAAM,KAAK;KAClB,KAAK,MAAM,KAAK,gBAAgB,OAAO;KACvC,QAAQ,MAAM,KAAK;KACnB,YAAY,MAAM,KAAK;KACvB,UAAU,MAAM,KAAK;IACvB;IACA,OAAO,iBAAiB,MAAM,IAAI;IAClC,cAAc,MAAM,KAAK;IACzB,GAAG,iBAAiB,KAAK,QAAQ,QAAQ,MAAM,IAAI;IACnD,GAAG,eAAe,KAAK,QAAQ,QAAQ,MAAM,IAAI;GACnD,IACA,CAAC;GACL,QAAQ,MAAM;GACd,OAAO,MAAM;GACb,YAAY,MAAM,OAAO;GACzB,SAAS,EAAE,WAAW,MAAM,eAAe,UAAU,YAAY,EAAE;GACnE,YAAY;IAAE,IAAI,MAAM;IAAW,UAAU,MAAM;IAAa,MAAM,MAAM;GAAK;GACjF,GAAI,MAAM,YAAY,MAAM,kBAAkB,OAAO,MAAM,OAAO,KAAK,IACnE,EACE,OAAO;IACL,QAAQ,MAAM;IACd,WAAW,MAAM;IACjB,OAAO,OAAO,MAAM,OAAO,KAAK;IAChC,KACE,OAAO,MAAM,OAAO,GAAG,KACvB,OAAO,MAAM,OAAO,OAAO,KAC3B,WAAW,MAAM,KAAK,GAAG,MAAM,YAAY,YAAY,MAAM;IAC/D,GAAI,OAAO,MAAM,OAAO,UAAU,IAAI,EAAE,WAAW,OAAO,MAAM,OAAO,UAAU,EAAE,IAAI,CAAC;IACxF,GAAI,OAAO,MAAM,OAAO,UAAU,IAAI,EAAE,WAAW,OAAO,MAAM,OAAO,UAAU,EAAE,IAAI,CAAC;IACxF,WAAW,UAAU,MAAM,OAAO,QAAQ,aAAa,MAAM,OAAO,SAAS;IAC7E,QAAQ,WAAW,MAAM,OAAO,UAAU,MAAM,OAAO,QAAQ,MAAM;IACrE,aAAa,YAAY,MAAM,OAAO,UAAU,MAAM,OAAO,QAAQ,MAAM;IAC3E,OAAO,OAAO,MAAM,OAAO,KAAK,MAAM,WAAY,WAAsB;IACxE,GAAI,cAAc,EAAE,QAAQ,YAAY,IAAI,CAAC;IAC7C,eAAe,MAAM;GACvB,EACF,IACA,CAAC;GACL,GAAI,MAAM,OAAO,UAAU,eAAe,OAAO,MAAM,EAAE,IACrD,EACE,MAAM;IACJ,IAAI,OAAO,MAAM,EAAE;IACnB,GAAI,OAAO,MAAM,IAAI,IAAI,EAAE,MAAM,OAAO,MAAM,IAAI,EAAE,IAAI,CAAC;IACzD,GAAI,OAAO,MAAM,GAAG,IAAI,EAAE,KAAK,OAAO,MAAM,GAAG,EAAE,IAAI,CAAC;IACtD,GAAI,OAAO,OAAO,MAAM,OAAO,QAAQ,IAAI,CAAC,EAAE,QAAQ,IAClD,EAAE,QAAQ,OAAO,OAAO,MAAM,OAAO,QAAQ,IAAI,CAAC,EAAE,QAAQ,EAAE,IAC9D,CAAC;IACL,GAAI,OAAO,MAAM,UAAU,IAAI,EAAE,WAAW,OAAO,MAAM,UAAU,EAAE,IAAI,CAAC;IAC1E,GAAI,OAAO,MAAM,UAAU,IAAI,EAAE,WAAW,OAAO,MAAM,UAAU,EAAE,IAAI,CAAC;GAC5E,EACF,IACA,CAAC;GACL,GAAI,MAAM,mBAAmB,MAAM,mBAAmB,OAAO,MAAM,cAAc,KAAK,IAClF,EACE,cAAc;IACZ,QAAQ,MAAM;IACd,WAAW,MAAM;IACjB,OAAO,OAAO,MAAM,cAAc,KAAK;IACvC,KACE,OAAO,MAAM,cAAc,GAAG,KAC9B,OAAO,MAAM,cAAc,OAAO,KAClC,WAAW,MAAM,KAAK,GAAG,MAAM,YAAY,oBAAoB,MAAM;IACvE,GAAI,OAAO,MAAM,cAAc,UAAU,IAAI,EAAE,WAAW,OAAO,MAAM,cAAc,UAAU,EAAE,IAAI,CAAC;IACtG,OACE,sBAAsB,YAAY,sBAAsB,WACnD,WACA;IACP,OAAO,QAAQ,MAAM,cAAc,KAAK,KAAK,QAAQ,MAAM,cAAc,gBAAgB,KAAK;IAC9F,QAAQ,MAAM,UAAU,wBAAwB,sBAAsB;IACtE,WAAW,UAAU,MAAM,OAAO,QAAQ,aAAa,MAAM,cAAc,SAAS;IACpF,WAAW,UAAU,MAAM,OAAO,QAAQ,aAAa,MAAM,cAAc,SAAS;IACpF,QAAQ,WAAW,MAAM,cAAc,UAAU,MAAM,OAAO,QAAQ,MAAM;IAC5E,aAAa,YAAY,MAAM,cAAc,UAAU,MAAM,OAAO,QAAQ,MAAM;IAClF,GAAI,qBAAqB,EAAE,QAAQ,mBAAmB,IAAI,CAAC;IAC3D,eAAe,MAAM;IACrB,iBAAiB,MAAM;IACvB,YAAY,OAAO,MAAM,cAAc,aAAa,KAAK;IACzD,YAAY,OAAO,MAAM,cAAc,aAAa,KAAK;GAC3D,EACF,IACA,CAAC;EACP;EACA,MAAM,aAAa,mBACjB,KAAK,QAAQ,QACb,MAAM,4BAA4B,WAAW,KAAA,IAAY,aAAa,OAAO,GAC7E,QACF;EACA,MAAM,OACJ,MAAM,4BAA4B,UAC9B,wBAAwB,KAAK,QAAQ,OAAO,OAAO,MAAM,KAAK,IAC5D,KAAA,IACA,YAAY,qBACd,gBAAgB,KAAK,QAAQ,OAAO,OAAO,YAAY,MAAM,KAAK;EAGxE,IAAI,MAAM,4BAA4B,WAAW,CAAC,MAAM,OAAO,EAAE,QAAQ,UAAU;EACnF,IAAI;EACJ,IAAI,YAAuC,CAAC;EAC5C,IAAI,UAA+E,EAAE,QAAQ,WAAW;EACxG,IAAI;GACF,WAAW,OAAO,MAAM,gBAAgB,QAAQ,QAAQ,KAAK,OAAO,OAAO,OAAO,CAAC,CAAC,CAAC,IAAI,KAAA;GACzF,IAAI,UAAU,SAAS,UACrB,UAAU;IAAE,QAAQ;IAAY,MAAM,SAAS;IAAM,QAAQ,SAAS;GAAO;QACxE,IAAI,UACT,YAAY,6BAA6B,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAI,UAAS;IAChE,4BACE,OACA,KAAK,QAAQ,QACb,MAAM,OAAO,iBAAiB,MAAM,IAAI,IAAI,KAAA,CAC9C;IACA,OAAO,EAAE,GAAG,MAAM;GACpB,CAAC;EAEL,SAAS,OAAO;GACd,MAAM,WAAW,iBAAiB,SAAS,MAAM,YAAY;GAC7D,UAAU;IACR,QAAQ;IACR,MAAM,WAAW,YAAY;IAC7B,QAAQ,WACJ,uCACA,iBAAiB,QACf,MAAM,QAAQ,MAAM,GAAG,GAAK,IAC5B;GACR;EACF;EAEA,MAAM,YAAY,MAAM,KAAK,QAAQ,QAAQ,qBAAqB;GAChE,OAAO,MAAM;GACb,kBAAkB,MAAM;GACxB,YAAY,MAAM,MAAM,MAAM;GAC9B,SAAS;IAAE,UAAU,MAAM;IAAiB,aAAa,UAAU,MAAM;GAAQ;GACjF,eAAe,KAAK,QAAQ;GAC5B,kBAAkB,MAAM,MAAM,YAAY;GAC1C,OAAO,EAAE,GAAG,MAAM,MAAM;GACxB;GACA;GACA,aAAa,CAAC;GACd,qBAAK,IAAI,KAAK;EAChB,CAAC;EACD,IAAI,UAAU,WAAW,SAAS;GAEhC,IAAI,WAAW,yBACb,MAAM,IAAI,MAAM,sCAAsC,MAAM,gBAAgB,6BAA6B;GAE3G,MAAM,QAAQ,MAAM,OAAO,MAAM,KAAK,QAAQ,QAAQ,IAAI;IAAE,OAAO,MAAM;IAAO,IAAI,MAAM,KAAK;GAAG,CAAC,IAAI;GACvG,IAAI,MAAM,QAAQ,CAAC,OAAO,OAAO,EAAE,QAAQ,UAAU;GACrD,OAAO,KAAKA,UAAU;IAAE,GAAG;IAAO,MAAM,SAAS,KAAA;GAAU,GAAG,UAAU,CAAC;EAC3E;EACA,OAAO,EAAE,QAAQ,UAAU,OAAO;CACpC;AACF;AAEA,SAAgB,kBACd,QACA,SACgE;CAChE,IAAI,CAAC,QAAQ,SAAS,OAAO,KAAA;CAC7B,MAAM,QAAQ,IAAI,YAAY;EAC5B;EACA,eAAe,QAAQ,QAAQ;EAC/B,UAAU,QAAQ,QAAQ;EAC1B,SAAS,QAAQ,QAAQ;EACzB,QAAQ,QAAQ,QAAQ;EACxB,eAAe,QAAQ,QAAQ;EAC/B,QAAQ,QAAQ,QAAQ;CAC1B,CAAC;CACD,QAAO,UAAS,MAAM,OAAO,KAAK;AACpC"}

package/dist/integrations/slack/integration.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"integration.d.ts","sourceRoot":"","sources":["../../../src/integrations/slack/integration.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAGH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,eAAe,CAAC;AAE/D,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,6CAA6C,CAAC;AACzF,OAAO,KAAK,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAMhG;;;;;GAKG;AACH,MAAM,WAAW,sBAAsB;IACrC,2DAA2D;IAC3D,aAAa,EAAE,MAAM,CAAC;IACtB,0DAA0D;IAC1D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;OAGG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,uDAAuD;IACvD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;;;;;;;;;;OAaG;IACH,cAAc,CAAC,EAAE,yBAAyB,CAAC;CAC5C;AAyBD,qBAAa,gBAAiB,YAAW,kBAAkB;;IACzD,QAAQ,CAAC,EAAE,WAAW;IACtB;;;;OAIG;IACH,QAAQ,CAAC,yBAAyB,QAAQ;gBAU9B,MAAM,EAAE,sBAAsB;IAS1C,QAAQ,CAAC,GAAG,EAAE,kBAAkB,GAAG,qBAAqB;IA2BxD,aAAa,CAAC,GAAG,EAAE,kBAAkB,GAAG,qBAAqB;IAI7D,MAAM,CAAC,GAAG,EAAE,kBAAkB,GAAG,QAAQ,EAAE;IAc3C,WAAW,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CASvC"}
+{"version":3,"file":"integration.d.ts","sourceRoot":"","sources":["../../../src/integrations/slack/integration.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAGH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,eAAe,CAAC;AAE/D,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,6CAA6C,CAAC;AACzF,OAAO,KAAK,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAMhG;;;;;GAKG;AACH,MAAM,WAAW,sBAAsB;IACrC,2DAA2D;IAC3D,aAAa,EAAE,MAAM,CAAC;IACtB,0DAA0D;IAC1D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;OAGG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,uDAAuD;IACvD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;;;;;;;;;;OAaG;IACH,cAAc,CAAC,EAAE,yBAAyB,CAAC;CAC5C;AA4DD,qBAAa,gBAAiB,YAAW,kBAAkB;;IACzD,QAAQ,CAAC,EAAE,WAAW;IACtB;;;;OAIG;IACH,QAAQ,CAAC,yBAAyB,QAAQ;gBAU9B,MAAM,EAAE,sBAAsB;IAS1C,QAAQ,CAAC,GAAG,EAAE,kBAAkB,GAAG,qBAAqB;IAuBxD,aAAa,CAAC,GAAG,EAAE,kBAAkB,GAAG,qBAAqB;IAI7D,MAAM,CAAC,GAAG,EAAE,kBAAkB,GAAG,QAAQ,EAAE;IAc3C,WAAW,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CASvC"}

package/dist/integrations/slack/integration.js

@@ -2,11 +2,27 @@ import { createSlackConnectRoutes } from "./connect-route.js";
 import { SlackFeedPublisher } from "./feed-publisher.js";
 import { createSlackChannelsConfig } from "./slack.js";
 //#region src/integrations/slack/integration.ts
+/** Slack renders the status inline next to the app name; keep it to one short line. */
+const MAX_STATUS_LENGTH = 80;
+/**
+* Turns a tool's `description` arg ("Listing the repo root") into a status
+* line that reads after the app name ("<App> is listing the repo root…").
+* Only the first line counts: issue/PR creators carry whole bodies there.
+*/
+function describeToolCall(args) {
+	if (!args || typeof args !== "object") return void 0;
+	const { description } = args;
+	if (typeof description !== "string") return void 0;
+	const line = description.split("\n").map((part) => part.replace(/\s+/g, " ").trim()).find(Boolean);
+	if (!line) return void 0;
+	const text = line.length > MAX_STATUS_LENGTH ? `${line.slice(0, MAX_STATUS_LENGTH - 1)}…` : line;
+	return `is ${/^[A-Z][a-z]/.test(text) ? text.charAt(0).toLowerCase() + text.slice(1) : text}`;
+}
 const factoryTypingStatus = (chunk) => {
 	switch (chunk.type) {
 		case "reasoning-delta": return "is thinking...";
 		case "text-delta": return "is typing...";
-		case "tool-call": return "is working...";
+		case "tool-call": return describeToolCall(chunk.payload.args) ?? "is working...";
 		default: return;
 	}
 };
@@ -17,6 +33,21 @@ const factoryTypingStatus = (chunk) => {
 function adapterOverrides(options) {
 	return Object.fromEntries(Object.entries(options ?? {}).filter(([, value]) => value !== void 0));
 }
+/**
+* Factory defaults under the caller's overrides. Tool calls stay out of the
+* thread: a Factory session runs hundreds of them, and a row per call (or a
+* card per call) buries the reply. Progress shows through the typing status
+* instead, which names the tool's current step; the session link carries the
+* full trace. `grouped` remains available via `adapterOptions` for callers
+* who want Slack's "Thinking Steps" widget.
+*/
+function factoryAdapterOptions(overrides) {
+	return {
+		typingStatus: factoryTypingStatus,
+		toolDisplay: "hidden",
+		...overrides
+	};
+}
 var SlackIntegration = class {
 	id = "slack";
 	/**
@@ -52,11 +83,7 @@ var SlackIntegration = class {
 			modelDefaults: ctx.storage.modelDefaults,
 			workItems: ctx.runtime?.workItems,
 			feed: ctx.feed,
-			adapterOptions: {
-				toolDisplay: "hidden",
-				typingStatus: factoryTypingStatus,
-				...adapterOverrides(this.#config.adapterOptions)
-			}
+			adapterOptions: factoryAdapterOptions(adapterOverrides(this.#config.adapterOptions))
 		});
 	}
 	feedPublisher(ctx) {

package/dist/integrations/slack/integration.js.map

@@ -1 +1 @@
-{"version":3,"file":"integration.js","names":["#config","#repoBackedSessions"],"sources":["../../../src/integrations/slack/integration.ts"],"sourcesContent":["/**\n * `SlackIntegration` — Slack as a `FactoryIntegration`.\n *\n * Slack contributes two things to a factory: the chat channels that carry\n * inbound messages into agent runs (`channels()`), and the browser-facing\n * account-link routes that bind a Slack sender to a Mastra tenant (`routes()`).\n * Both used to be assembled by hand in the deploy entry, which had to reach\n * into the prepared agent controller by string key, resolve storage domains\n * itself, mint its own state signer, and splice routes onto the factory's\n * assembled server config. Implementing the integration interface instead means\n * the factory does all of that the same way it already does for GitHub and\n * Linear, and the entry's job shrinks to reading Slack's env vars once.\n *\n * Slack ships as a factory built-in alongside GitHub and Linear (it originally\n * lived in `mastracode/web` to keep `@mastra/slack`/`chat` out of this package;\n * the team reversed that so `create-factory` consumers get Slack channels out\n * of the box). The integration interface remains open — third parties still add\n * capabilities by implementing `FactoryIntegration` from outside the package.\n */\n\nimport type { TypingStatusFn } from '@mastra/core/channels';\nimport type { ApiRoute } from '@mastra/core/server';\nimport type { SlackAdapterChannelConfig } from '@mastra/slack';\n\nimport type { WorkItemFeedPublisher } from '../../storage/domains/comments/feed-sync.js';\nimport type { FactoryChannelsConfig, FactoryIntegration, IntegrationContext } from '../base.js';\n\nimport { createSlackConnectRoutes } from './connect-route.js';\nimport { SlackFeedPublisher } from './feed-publisher.js';\nimport { createSlackChannelsConfig } from './slack.js';\n\n/**\n * Slack app credentials, read from env ONCE by the deploy entry. `signingSecret`\n * is required because the Slack adapter validates it at construction — an\n * integration constructed without it would throw during `prepare()` rather than\n * reporting itself unconfigured.\n */\nexport interface SlackIntegrationConfig {\n  /** Verifies inbound Slack request signatures. Required. */\n  signingSecret: string;\n  /** Bot token used to post replies and ephemeral cards. */\n  botToken?: string;\n  /**\n   * OAuth client credentials. Required for account linking: \"Sign in with\n   * Slack\" (OIDC) is the only flow that writes a link, so without these the\n   * settings surface reports `canConnect: false` and no sender can link.\n   */\n  clientId?: string;\n  clientSecret?: string;\n  /**\n   * HTTPS origin Slack redirects back to. Slack requires HTTPS, so locally this\n   * is the tunnel origin rather than the app's own public URL.\n   */\n  oidcRedirectBaseUrl?: string;\n  /** SPA origin the post-connect redirect returns to. */\n  uiOrigin?: string;\n  /**\n   * Overrides for the Slack channel adapter entry.\n   *\n   * @example\n   * ```ts\n   * new SlackIntegration({\n   *   signingSecret,\n   *   adapterOptions: {\n   *     streaming: true,\n   *     toolDisplay: 'grouped',\n   *   },\n   * });\n   * ```\n   */\n  adapterOptions?: SlackAdapterChannelConfig;\n}\n\nconst factoryTypingStatus: TypingStatusFn = chunk => {\n  switch (chunk.type) {\n    case 'reasoning-delta':\n      return 'is thinking...';\n    case 'text-delta':\n      return 'is typing...';\n    case 'tool-call':\n      return 'is working...';\n    default:\n      return undefined;\n  }\n};\n\n/**\n * Drops keys the caller set to `undefined` so spreading the overrides cannot\n * erase the Factory defaults they sit on top of.\n */\nfunction adapterOverrides(options: SlackAdapterChannelConfig | undefined): SlackAdapterChannelConfig {\n  return Object.fromEntries(\n    Object.entries(options ?? {}).filter(([, value]) => value !== undefined),\n  ) as SlackAdapterChannelConfig;\n}\n\nexport class SlackIntegration implements FactoryIntegration {\n  readonly id = 'slack';\n  /**\n   * The OIDC connect flow round-trips a signed `state` through Slack, so the\n   * replica handling the callback must be able to verify a state a different\n   * replica signed.\n   */\n  readonly requiresStableStateSigner = true;\n\n  readonly #config: SlackIntegrationConfig;\n  /**\n   * Whether `channels()` found a source-control owner on the context and wired\n   * repo-backed sessions. Set at the channels() attach path, which runs once at\n   * boot before diagnostics are served.\n   */\n  #repoBackedSessions = false;\n\n  constructor(config: SlackIntegrationConfig) {\n    if (!config.signingSecret) {\n      throw new Error(\n        \"SlackIntegration: 'signingSecret' is required — Slack cannot verify inbound requests without it.\",\n      );\n    }\n    this.#config = config;\n  }\n\n  channels(ctx: IntegrationContext): FactoryChannelsConfig {\n    // Repo-backed sessions select the source-control provider from the linked\n    // repository on each Factory project.\n    const sourceControls =\n      ctx.storage.sourceControls ?? (ctx.storage.sourceControlOwner ? [ctx.storage.sourceControlOwner] : []);\n    this.#repoBackedSessions = sourceControls.length > 0;\n    return createSlackChannelsConfig({\n      slack: {\n        clientId: this.#config.clientId,\n        clientSecret: this.#config.clientSecret,\n        signingSecret: this.#config.signingSecret,\n        botToken: this.#config.botToken,\n      },\n      accountLinks: ctx.storage.channelIdentity,\n      projects: ctx.storage.projects,\n      sourceControls,\n      modelDefaults: ctx.storage.modelDefaults,\n      workItems: ctx.runtime?.workItems,\n      feed: ctx.feed,\n      adapterOptions: {\n        toolDisplay: 'hidden',\n        typingStatus: factoryTypingStatus,\n        ...adapterOverrides(this.#config.adapterOptions),\n      },\n    });\n  }\n\n  feedPublisher(ctx: IntegrationContext): WorkItemFeedPublisher {\n    return new SlackFeedPublisher({ controller: ctx.controller });\n  }\n\n  routes(ctx: IntegrationContext): ApiRoute[] {\n    const { clientId, clientSecret, oidcRedirectBaseUrl, uiOrigin } = this.#config;\n    return createSlackConnectRoutes({\n      auth: ctx.auth,\n      accountLinks: ctx.storage.channelIdentity,\n      tenantStateSigner: ctx.stateSigner,\n      oidc:\n        clientId && clientSecret && oidcRedirectBaseUrl\n          ? { clientId, clientSecret, redirectBaseUrl: oidcRedirectBaseUrl, uiOrigin }\n          : undefined,\n      projects: ctx.storage.projects,\n    });\n  }\n\n  diagnostics(): Record<string, unknown> {\n    const { clientId, clientSecret, botToken, oidcRedirectBaseUrl } = this.#config;\n    return {\n      configured: true,\n      botTokenConfigured: Boolean(botToken),\n      oidcConfigured: Boolean(clientId && clientSecret && oidcRedirectBaseUrl),\n      repoBackedSessions: this.#repoBackedSessions,\n    };\n  }\n}\n"],"mappings":";;;;AAyEA,MAAM,uBAAsC,UAAS;CACnD,QAAQ,MAAM,MAAd;EACE,KAAK,mBACH,OAAO;EACT,KAAK,cACH,OAAO;EACT,KAAK,aACH,OAAO;EACT,SACE;CACJ;AACF;;;;;AAMA,SAAS,iBAAiB,SAA2E;CACnG,OAAO,OAAO,YACZ,OAAO,QAAQ,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,GAAG,WAAW,UAAU,KAAA,CAAS,CACzE;AACF;AAEA,IAAa,mBAAb,MAA4D;CAC1D,KAAc;;;;;;CAMd,4BAAqC;CAErC;;;;;;CAMA,sBAAsB;CAEtB,YAAY,QAAgC;EAC1C,IAAI,CAAC,OAAO,eACV,MAAM,IAAI,MACR,kGACF;EAEF,KAAKA,UAAU;CACjB;CAEA,SAAS,KAAgD;EAGvD,MAAM,iBACJ,IAAI,QAAQ,mBAAmB,IAAI,QAAQ,qBAAqB,CAAC,IAAI,QAAQ,kBAAkB,IAAI,CAAC;EACtG,KAAKC,sBAAsB,eAAe,SAAS;EACnD,OAAO,0BAA0B;GAC/B,OAAO;IACL,UAAU,KAAKD,QAAQ;IACvB,cAAc,KAAKA,QAAQ;IAC3B,eAAe,KAAKA,QAAQ;IAC5B,UAAU,KAAKA,QAAQ;GACzB;GACA,cAAc,IAAI,QAAQ;GAC1B,UAAU,IAAI,QAAQ;GACtB;GACA,eAAe,IAAI,QAAQ;GAC3B,WAAW,IAAI,SAAS;GACxB,MAAM,IAAI;GACV,gBAAgB;IACd,aAAa;IACb,cAAc;IACd,GAAG,iBAAiB,KAAKA,QAAQ,cAAc;GACjD;EACF,CAAC;CACH;CAEA,cAAc,KAAgD;EAC5D,OAAO,IAAI,mBAAmB,EAAE,YAAY,IAAI,WAAW,CAAC;CAC9D;CAEA,OAAO,KAAqC;EAC1C,MAAM,EAAE,UAAU,cAAc,qBAAqB,aAAa,KAAKA;EACvE,OAAO,yBAAyB;GAC9B,MAAM,IAAI;GACV,cAAc,IAAI,QAAQ;GAC1B,mBAAmB,IAAI;GACvB,MACE,YAAY,gBAAgB,sBACxB;IAAE;IAAU;IAAc,iBAAiB;IAAqB;GAAS,IACzE,KAAA;GACN,UAAU,IAAI,QAAQ;EACxB,CAAC;CACH;CAEA,cAAuC;EACrC,MAAM,EAAE,UAAU,cAAc,UAAU,wBAAwB,KAAKA;EACvE,OAAO;GACL,YAAY;GACZ,oBAAoB,QAAQ,QAAQ;GACpC,gBAAgB,QAAQ,YAAY,gBAAgB,mBAAmB;GACvE,oBAAoB,KAAKC;EAC3B;CACF;AACF"}
+{"version":3,"file":"integration.js","names":["#config","#repoBackedSessions"],"sources":["../../../src/integrations/slack/integration.ts"],"sourcesContent":["/**\n * `SlackIntegration` — Slack as a `FactoryIntegration`.\n *\n * Slack contributes two things to a factory: the chat channels that carry\n * inbound messages into agent runs (`channels()`), and the browser-facing\n * account-link routes that bind a Slack sender to a Mastra tenant (`routes()`).\n * Both used to be assembled by hand in the deploy entry, which had to reach\n * into the prepared agent controller by string key, resolve storage domains\n * itself, mint its own state signer, and splice routes onto the factory's\n * assembled server config. Implementing the integration interface instead means\n * the factory does all of that the same way it already does for GitHub and\n * Linear, and the entry's job shrinks to reading Slack's env vars once.\n *\n * Slack ships as a factory built-in alongside GitHub and Linear (it originally\n * lived in `mastracode/web` to keep `@mastra/slack`/`chat` out of this package;\n * the team reversed that so `create-factory` consumers get Slack channels out\n * of the box). The integration interface remains open — third parties still add\n * capabilities by implementing `FactoryIntegration` from outside the package.\n */\n\nimport type { TypingStatusFn } from '@mastra/core/channels';\nimport type { ApiRoute } from '@mastra/core/server';\nimport type { SlackAdapterChannelConfig } from '@mastra/slack';\n\nimport type { WorkItemFeedPublisher } from '../../storage/domains/comments/feed-sync.js';\nimport type { FactoryChannelsConfig, FactoryIntegration, IntegrationContext } from '../base.js';\n\nimport { createSlackConnectRoutes } from './connect-route.js';\nimport { SlackFeedPublisher } from './feed-publisher.js';\nimport { createSlackChannelsConfig } from './slack.js';\n\n/**\n * Slack app credentials, read from env ONCE by the deploy entry. `signingSecret`\n * is required because the Slack adapter validates it at construction — an\n * integration constructed without it would throw during `prepare()` rather than\n * reporting itself unconfigured.\n */\nexport interface SlackIntegrationConfig {\n  /** Verifies inbound Slack request signatures. Required. */\n  signingSecret: string;\n  /** Bot token used to post replies and ephemeral cards. */\n  botToken?: string;\n  /**\n   * OAuth client credentials. Required for account linking: \"Sign in with\n   * Slack\" (OIDC) is the only flow that writes a link, so without these the\n   * settings surface reports `canConnect: false` and no sender can link.\n   */\n  clientId?: string;\n  clientSecret?: string;\n  /**\n   * HTTPS origin Slack redirects back to. Slack requires HTTPS, so locally this\n   * is the tunnel origin rather than the app's own public URL.\n   */\n  oidcRedirectBaseUrl?: string;\n  /** SPA origin the post-connect redirect returns to. */\n  uiOrigin?: string;\n  /**\n   * Overrides for the Slack channel adapter entry.\n   *\n   * @example\n   * ```ts\n   * new SlackIntegration({\n   *   signingSecret,\n   *   adapterOptions: {\n   *     streaming: true,\n   *     toolDisplay: 'grouped',\n   *   },\n   * });\n   * ```\n   */\n  adapterOptions?: SlackAdapterChannelConfig;\n}\n\n/** Slack renders the status inline next to the app name; keep it to one short line. */\nconst MAX_STATUS_LENGTH = 80;\n\n/**\n * Turns a tool's `description` arg (\"Listing the repo root\") into a status\n * line that reads after the app name (\"<App> is listing the repo root…\").\n * Only the first line counts: issue/PR creators carry whole bodies there.\n */\nfunction describeToolCall(args: unknown): string | undefined {\n  if (!args || typeof args !== 'object') return undefined;\n  const { description } = args as { description?: unknown };\n  if (typeof description !== 'string') return undefined;\n  const line = description\n    .split('\\n')\n    .map(part => part.replace(/\\s+/g, ' ').trim())\n    .find(Boolean);\n  if (!line) return undefined;\n  const text = line.length > MAX_STATUS_LENGTH ? `${line.slice(0, MAX_STATUS_LENGTH - 1)}…` : line;\n  // Drop the sentence-case capital (\"Listing\" → \"listing\") but leave acronyms\n  // and identifiers (\"PR lookup\", \"CI status\") alone.\n  return `is ${/^[A-Z][a-z]/.test(text) ? text.charAt(0).toLowerCase() + text.slice(1) : text}`;\n}\n\nconst factoryTypingStatus: TypingStatusFn = chunk => {\n  switch (chunk.type) {\n    case 'reasoning-delta':\n      return 'is thinking...';\n    case 'text-delta':\n      return 'is typing...';\n    case 'tool-call':\n      return describeToolCall(chunk.payload.args) ?? 'is working...';\n    default:\n      return undefined;\n  }\n};\n\n/**\n * Drops keys the caller set to `undefined` so spreading the overrides cannot\n * erase the Factory defaults they sit on top of.\n */\nfunction adapterOverrides(options: SlackAdapterChannelConfig | undefined): SlackAdapterChannelConfig {\n  return Object.fromEntries(\n    Object.entries(options ?? {}).filter(([, value]) => value !== undefined),\n  ) as SlackAdapterChannelConfig;\n}\n\n/**\n * Factory defaults under the caller's overrides. Tool calls stay out of the\n * thread: a Factory session runs hundreds of them, and a row per call (or a\n * card per call) buries the reply. Progress shows through the typing status\n * instead, which names the tool's current step; the session link carries the\n * full trace. `grouped` remains available via `adapterOptions` for callers\n * who want Slack's \"Thinking Steps\" widget.\n */\nfunction factoryAdapterOptions(overrides: SlackAdapterChannelConfig): SlackAdapterChannelConfig {\n  return { typingStatus: factoryTypingStatus, toolDisplay: 'hidden', ...overrides };\n}\n\nexport class SlackIntegration implements FactoryIntegration {\n  readonly id = 'slack';\n  /**\n   * The OIDC connect flow round-trips a signed `state` through Slack, so the\n   * replica handling the callback must be able to verify a state a different\n   * replica signed.\n   */\n  readonly requiresStableStateSigner = true;\n\n  readonly #config: SlackIntegrationConfig;\n  /**\n   * Whether `channels()` found a source-control owner on the context and wired\n   * repo-backed sessions. Set at the channels() attach path, which runs once at\n   * boot before diagnostics are served.\n   */\n  #repoBackedSessions = false;\n\n  constructor(config: SlackIntegrationConfig) {\n    if (!config.signingSecret) {\n      throw new Error(\n        \"SlackIntegration: 'signingSecret' is required — Slack cannot verify inbound requests without it.\",\n      );\n    }\n    this.#config = config;\n  }\n\n  channels(ctx: IntegrationContext): FactoryChannelsConfig {\n    // Repo-backed sessions select the source-control provider from the linked\n    // repository on each Factory project.\n    const sourceControls =\n      ctx.storage.sourceControls ?? (ctx.storage.sourceControlOwner ? [ctx.storage.sourceControlOwner] : []);\n    this.#repoBackedSessions = sourceControls.length > 0;\n    return createSlackChannelsConfig({\n      slack: {\n        clientId: this.#config.clientId,\n        clientSecret: this.#config.clientSecret,\n        signingSecret: this.#config.signingSecret,\n        botToken: this.#config.botToken,\n      },\n      accountLinks: ctx.storage.channelIdentity,\n      projects: ctx.storage.projects,\n      sourceControls,\n      modelDefaults: ctx.storage.modelDefaults,\n      workItems: ctx.runtime?.workItems,\n      feed: ctx.feed,\n      adapterOptions: factoryAdapterOptions(adapterOverrides(this.#config.adapterOptions)),\n    });\n  }\n\n  feedPublisher(ctx: IntegrationContext): WorkItemFeedPublisher {\n    return new SlackFeedPublisher({ controller: ctx.controller });\n  }\n\n  routes(ctx: IntegrationContext): ApiRoute[] {\n    const { clientId, clientSecret, oidcRedirectBaseUrl, uiOrigin } = this.#config;\n    return createSlackConnectRoutes({\n      auth: ctx.auth,\n      accountLinks: ctx.storage.channelIdentity,\n      tenantStateSigner: ctx.stateSigner,\n      oidc:\n        clientId && clientSecret && oidcRedirectBaseUrl\n          ? { clientId, clientSecret, redirectBaseUrl: oidcRedirectBaseUrl, uiOrigin }\n          : undefined,\n      projects: ctx.storage.projects,\n    });\n  }\n\n  diagnostics(): Record<string, unknown> {\n    const { clientId, clientSecret, botToken, oidcRedirectBaseUrl } = this.#config;\n    return {\n      configured: true,\n      botTokenConfigured: Boolean(botToken),\n      oidcConfigured: Boolean(clientId && clientSecret && oidcRedirectBaseUrl),\n      repoBackedSessions: this.#repoBackedSessions,\n    };\n  }\n}\n"],"mappings":";;;;;AA0EA,MAAM,oBAAoB;;;;;;AAO1B,SAAS,iBAAiB,MAAmC;CAC3D,IAAI,CAAC,QAAQ,OAAO,SAAS,UAAU,OAAO,KAAA;CAC9C,MAAM,EAAE,gBAAgB;CACxB,IAAI,OAAO,gBAAgB,UAAU,OAAO,KAAA;CAC5C,MAAM,OAAO,YACV,MAAM,IAAI,CAAC,CACX,KAAI,SAAQ,KAAK,QAAQ,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAC7C,KAAK,OAAO;CACf,IAAI,CAAC,MAAM,OAAO,KAAA;CAClB,MAAM,OAAO,KAAK,SAAS,oBAAoB,GAAG,KAAK,MAAM,GAAG,oBAAoB,CAAC,EAAE,KAAK;CAG5F,OAAO,MAAM,cAAc,KAAK,IAAI,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,YAAY,IAAI,KAAK,MAAM,CAAC,IAAI;AACzF;AAEA,MAAM,uBAAsC,UAAS;CACnD,QAAQ,MAAM,MAAd;EACE,KAAK,mBACH,OAAO;EACT,KAAK,cACH,OAAO;EACT,KAAK,aACH,OAAO,iBAAiB,MAAM,QAAQ,IAAI,KAAK;EACjD,SACE;CACJ;AACF;;;;;AAMA,SAAS,iBAAiB,SAA2E;CACnG,OAAO,OAAO,YACZ,OAAO,QAAQ,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,GAAG,WAAW,UAAU,KAAA,CAAS,CACzE;AACF;;;;;;;;;AAUA,SAAS,sBAAsB,WAAiE;CAC9F,OAAO;EAAE,cAAc;EAAqB,aAAa;EAAU,GAAG;CAAU;AAClF;AAEA,IAAa,mBAAb,MAA4D;CAC1D,KAAc;;;;;;CAMd,4BAAqC;CAErC;;;;;;CAMA,sBAAsB;CAEtB,YAAY,QAAgC;EAC1C,IAAI,CAAC,OAAO,eACV,MAAM,IAAI,MACR,kGACF;EAEF,KAAKA,UAAU;CACjB;CAEA,SAAS,KAAgD;EAGvD,MAAM,iBACJ,IAAI,QAAQ,mBAAmB,IAAI,QAAQ,qBAAqB,CAAC,IAAI,QAAQ,kBAAkB,IAAI,CAAC;EACtG,KAAKC,sBAAsB,eAAe,SAAS;EACnD,OAAO,0BAA0B;GAC/B,OAAO;IACL,UAAU,KAAKD,QAAQ;IACvB,cAAc,KAAKA,QAAQ;IAC3B,eAAe,KAAKA,QAAQ;IAC5B,UAAU,KAAKA,QAAQ;GACzB;GACA,cAAc,IAAI,QAAQ;GAC1B,UAAU,IAAI,QAAQ;GACtB;GACA,eAAe,IAAI,QAAQ;GAC3B,WAAW,IAAI,SAAS;GACxB,MAAM,IAAI;GACV,gBAAgB,sBAAsB,iBAAiB,KAAKA,QAAQ,cAAc,CAAC;EACrF,CAAC;CACH;CAEA,cAAc,KAAgD;EAC5D,OAAO,IAAI,mBAAmB,EAAE,YAAY,IAAI,WAAW,CAAC;CAC9D;CAEA,OAAO,KAAqC;EAC1C,MAAM,EAAE,UAAU,cAAc,qBAAqB,aAAa,KAAKA;EACvE,OAAO,yBAAyB;GAC9B,MAAM,IAAI;GACV,cAAc,IAAI,QAAQ;GAC1B,mBAAmB,IAAI;GACvB,MACE,YAAY,gBAAgB,sBACxB;IAAE;IAAU;IAAc,iBAAiB;IAAqB;GAAS,IACzE,KAAA;GACN,UAAU,IAAI,QAAQ;EACxB,CAAC;CACH;CAEA,cAAuC;EACrC,MAAM,EAAE,UAAU,cAAc,UAAU,wBAAwB,KAAKA;EACvE,OAAO;GACL,YAAY;GACZ,oBAAoB,QAAQ,QAAQ;GACpC,gBAAgB,QAAQ,YAAY,gBAAgB,mBAAmB;GACvE,oBAAoB,KAAKC;EAC3B;CACF;AACF"}

package/dist/integrations/slack/slack.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"slack.d.ts","sourceRoot":"","sources":["../../../src/integrations/slack/slack.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,cAAc,EAEd,eAAe,EACf,qBAAqB,EACrB,mBAAmB,EACnB,iBAAiB,EACjB,eAAe,EAChB,MAAM,uBAAuB,CAAC;AAG/B,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,eAAe,CAAC;AAiB/D,OAAO,KAAK,EACV,kBAAkB,EAClB,qBAAqB,EACrB,sBAAsB,EACvB,MAAM,gDAAgD,CAAC;AAGxD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,0CAA0C,CAAC;AAC/E,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,8CAA8C,CAAC;AACzF,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,wCAAwC,CAAC;AACrF,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,8CAA8C,CAAC;AAC/F,OAAO,KAAK,EAAE,sBAAsB,EAAe,gBAAgB,EAAE,MAAM,0CAA0C,CAAC;AAEtH,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAWxD,KAAK,aAAa,GAAG,UAAU,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC;AACnD,KAAK,cAAc,GAAG,UAAU,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC;AAMpD,uFAAuF;AACvF,UAAU,gBAAgB;IACxB;;;;;;OAMG;IACH,YAAY,CAAC,EAAE,sBAAsB,CAAC;IACtC;;;;;;;OAOG;IACH,QAAQ,CAAC,EAAE,sBAAsB,CAAC;IAClC;;;;;;;;;;OAUG;IACH,aAAa,CAAC,EAAE,0BAA0B,CAAC;IAC3C,uGAAuG;IACvG,cAAc,CAAC,EAAE,SAAS,0BAA0B,EAAE,CAAC;IACvD;;;;;OAKG;IACH,aAAa,CAAC,EAAE,oBAAoB,CAAC;IACrC;;;OAGG;IACH,SAAS,CAAC,EAAE,gBAAgB,CAAC;IAC7B;;;OAGG;IACH,IAAI,CAAC,EAAE,IAAI,CAAC,cAAc,EAAE,eAAe,CAAC,CAAC;IAC7C,4DAA4D;IAC5D,cAAc,CAAC,EAAE,yBAAyB,CAAC;CAC5C;AAyCD,+DAA+D;AAC/D,KAAK,kBAAkB;AACrB,0EAA0E;AACxE;IAAE,MAAM,EAAE,SAAS,CAAA;CAAE;AACvB,8EAA8E;GAC5E;IAAE,MAAM,EAAE,SAAS,CAAA;CAAE;AACvB,6EAA6E;GAC3E;IAAE,MAAM,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,kBAAkB,CAAC;IAAC,GAAG,EAAE,qBAAqB,CAAA;CAAE,CAAC;AAE/E;;;;GAIG;AACH,wBAAsB,mBAAmB,CAAC,EACxC,MAAM,EACN,OAAO,EACP,YAAY,GACb,EAAE;IACD,MAAM,EAAE,aAAa,CAAC;IACtB,OAAO,EAAE,cAAc,CAAC;IACxB,YAAY,CAAC,EAAE,sBAAsB,CAAC;CACvC,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAmB9B;AAwBD,0EAA0E;AAC1E,KAAK,kBAAkB;AACrB,mEAAmE;AACjE;IAAE,MAAM,EAAE,SAAS,CAAA;CAAE;AACvB,iFAAiF;GAC/E;IAAE,MAAM,EAAE,SAAS,CAAA;CAAE;AACvB,uDAAuD;GACrD;IAAE,MAAM,EAAE,UAAU,CAAC;IAAC,gBAAgB,EAAE,MAAM,CAAA;CAAE,CAAC;AAErD;;;;;;;;;;GAUG;AACH,wBAAsB,qBAAqB,CAAC,EAC1C,MAAM,EACN,IAAI,EACJ,GAAG,EACH,YAAY,EACZ,QAAQ,GACT,EAAE;IACD,MAAM,EAAE,aAAa,CAAC;IACtB,IAAI,EAAE,kBAAkB,CAAC;IACzB,GAAG,EAAE,qBAAqB,CAAC;IAC3B,YAAY,EAAE,sBAAsB,CAAC;IACrC,QAAQ,CAAC,EAAE,sBAAsB,CAAC;CACnC,GAAG,OAAO,CAAC,kBAAkB,CAAC,CA0C9B;AAmBD;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAgB,+BAA+B,CAAC,IAAI,EAAE,gBAAgB,GAAG,iBAAiB,CAiHzF;AAED;;;;;;;;GAQG;AACH,eAAO,MAAM,sBAAsB,EAAE,eAC6B,CAAC;AAEnE,gGAAgG;AAChG,wBAAgB,4BAA4B,CAAC,IAAI,EAAE,gBAAgB,GAAG,qBAAqB,CAkB1F;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,6BAA6B,CAAC,IAAI,EAAE,gBAAgB,GAAG,mBAAmB,CAuGzF;AAiKD;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,aAAa,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,sBAAsB,CAOhG;AAiMD,eAAO,MAAM,cAAc,GAAI,MAAM,gBAAgB,KAAG,eAyBvD,CAAC;AAEF,kFAAkF;AAClF,UAAU,gBAAgB;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,gBAAgB,GAAG;IAAE,KAAK,EAAE,gBAAgB,CAAA;CAAE,GAAG,qBAAqB,CAqBrH"}
+{"version":3,"file":"slack.d.ts","sourceRoot":"","sources":["../../../src/integrations/slack/slack.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,cAAc,EAEd,eAAe,EACf,qBAAqB,EACrB,mBAAmB,EACnB,iBAAiB,EACjB,eAAe,EAChB,MAAM,uBAAuB,CAAC;AAG/B,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,eAAe,CAAC;AAkB/D,OAAO,KAAK,EACV,kBAAkB,EAClB,qBAAqB,EACrB,sBAAsB,EACvB,MAAM,gDAAgD,CAAC;AAGxD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,0CAA0C,CAAC;AAC/E,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,8CAA8C,CAAC;AACzF,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,wCAAwC,CAAC;AACrF,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,8CAA8C,CAAC;AAC/F,OAAO,KAAK,EAAE,sBAAsB,EAAe,gBAAgB,EAAE,MAAM,0CAA0C,CAAC;AAEtH,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAWxD,KAAK,aAAa,GAAG,UAAU,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC;AACnD,KAAK,cAAc,GAAG,UAAU,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC;AAMpD,uFAAuF;AACvF,UAAU,gBAAgB;IACxB;;;;;;OAMG;IACH,YAAY,CAAC,EAAE,sBAAsB,CAAC;IACtC;;;;;;;OAOG;IACH,QAAQ,CAAC,EAAE,sBAAsB,CAAC;IAClC;;;;;;;;;;OAUG;IACH,aAAa,CAAC,EAAE,0BAA0B,CAAC;IAC3C,uGAAuG;IACvG,cAAc,CAAC,EAAE,SAAS,0BAA0B,EAAE,CAAC;IACvD;;;;;OAKG;IACH,aAAa,CAAC,EAAE,oBAAoB,CAAC;IACrC;;;OAGG;IACH,SAAS,CAAC,EAAE,gBAAgB,CAAC;IAC7B;;;OAGG;IACH,IAAI,CAAC,EAAE,IAAI,CAAC,cAAc,EAAE,eAAe,CAAC,CAAC;IAC7C,4DAA4D;IAC5D,cAAc,CAAC,EAAE,yBAAyB,CAAC;CAC5C;AAyCD,+DAA+D;AAC/D,KAAK,kBAAkB;AACrB,0EAA0E;AACxE;IAAE,MAAM,EAAE,SAAS,CAAA;CAAE;AACvB,8EAA8E;GAC5E;IAAE,MAAM,EAAE,SAAS,CAAA;CAAE;AACvB,6EAA6E;GAC3E;IAAE,MAAM,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,kBAAkB,CAAC;IAAC,GAAG,EAAE,qBAAqB,CAAA;CAAE,CAAC;AAE/E;;;;GAIG;AACH,wBAAsB,mBAAmB,CAAC,EACxC,MAAM,EACN,OAAO,EACP,YAAY,GACb,EAAE;IACD,MAAM,EAAE,aAAa,CAAC;IACtB,OAAO,EAAE,cAAc,CAAC;IACxB,YAAY,CAAC,EAAE,sBAAsB,CAAC;CACvC,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAmB9B;AAwBD,0EAA0E;AAC1E,KAAK,kBAAkB;AACrB,mEAAmE;AACjE;IAAE,MAAM,EAAE,SAAS,CAAA;CAAE;AACvB,iFAAiF;GAC/E;IAAE,MAAM,EAAE,SAAS,CAAA;CAAE;AACvB,uDAAuD;GACrD;IAAE,MAAM,EAAE,UAAU,CAAC;IAAC,gBAAgB,EAAE,MAAM,CAAA;CAAE,CAAC;AAErD;;;;;;;;;;GAUG;AACH,wBAAsB,qBAAqB,CAAC,EAC1C,MAAM,EACN,IAAI,EACJ,GAAG,EACH,YAAY,EACZ,QAAQ,GACT,EAAE;IACD,MAAM,EAAE,aAAa,CAAC;IACtB,IAAI,EAAE,kBAAkB,CAAC;IACzB,GAAG,EAAE,qBAAqB,CAAC;IAC3B,YAAY,EAAE,sBAAsB,CAAC;IACrC,QAAQ,CAAC,EAAE,sBAAsB,CAAC;CACnC,GAAG,OAAO,CAAC,kBAAkB,CAAC,CA0C9B;AAmBD;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAgB,+BAA+B,CAAC,IAAI,EAAE,gBAAgB,GAAG,iBAAiB,CAiHzF;AAED;;;;;;;;GAQG;AACH,eAAO,MAAM,sBAAsB,EAAE,eAC6B,CAAC;AAEnE,gGAAgG;AAChG,wBAAgB,4BAA4B,CAAC,IAAI,EAAE,gBAAgB,GAAG,qBAAqB,CAkB1F;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,6BAA6B,CAAC,IAAI,EAAE,gBAAgB,GAAG,mBAAmB,CAuGzF;AAiKD;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,aAAa,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,sBAAsB,CAOhG;AAiKD,eAAO,MAAM,cAAc,GAAI,MAAM,gBAAgB,KAAG,eA0BvD,CAAC;AAEF,kFAAkF;AAClF,UAAU,gBAAgB;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,gBAAgB,GAAG;IAAE,KAAK,EAAE,gBAAgB,CAAA;CAAE,GAAG,qBAAqB,CAqBrH"}

package/dist/integrations/slack/slack.js

@@ -5,6 +5,7 @@ import { readRequestContextOrgId, seedSessionOrg } from "../../session/org-seed.
 import { prepareSessionRunContext } from "../subscription-session.js";
 import { FactorySourceControlConflictError, createSourceControlSessionLookup, hydrateFactorySession, resolveFactorySessionModel, resolveFactorySourceControl, resolvePrimaryEnvironmentRepository } from "../../session/factory-session.js";
 import { FACTORY_SLACK_SENDER_KEY } from "../../tools/scope.js";
+import { markNewChannelSession } from "../../session/channel-session-link-processor.js";
 import { resolveEmojiShortcodes } from "./emoji.js";
 import { slackCommentSource } from "./feed-publisher.js";
 import { ChannelSessionRejectedError } from "@mastra/core/channels";
@@ -548,38 +549,37 @@ async function reportPreDispatchError(thread, message, ctx, error) {
 		})}`);
 	}
 }
+/**
+* What the sender sees while nothing has been posted yet. Core's typing
+* wrapper only sets a status once the agent stream yields its first chunk,
+* and everything before that — credential priming, session rows, the
+* controller start hook, model time-to-first-token — is silent. Pin the same
+* status Factory's `typingStatus` uses for reasoning so the bot visibly
+* "picks up" as soon as the gate passes, and the stream's own status replaces
+* it without a visual change. Slack clears it on the first post; core clears
+* it when a run ends without posting.
+*/
+const EARLY_TYPING_STATUS = "is thinking...";
+function acknowledgeReceipt(thread, deps) {
+	if (deps.adapterOptions?.typingStatus === false) return;
+	thread.startTyping(EARLY_TYPING_STATUS).catch((error) => {
+		console.warn("[slack] early typing status failed", {
+			thread: thread.id,
+			error
+		});
+	});
+}
 function createNewSessionChatHandler(deps) {
 	return async (thread, message, defaultHandler, ctx) => {
-		let gate;
-		let isNewSession;
 		try {
-			gate = await gateDispatch(thread, message, deps, ctx);
-			if (!gate) return;
-			isNewSession = !await thread.isSubscribed();
+			if (!await gateDispatch(thread, message, deps, ctx)) return;
+			if (!await thread.isSubscribed()) markNewChannelSession(ctx.requestContext);
+			acknowledgeReceipt(thread, deps);
 		} catch (error) {
 			await reportPreDispatchError(thread, message, ctx, error);
 			return;
 		}
 		await defaultHandler(thread, message);
-		if (!isNewSession) return;
-		const internalThread = await findInternalThread(ctx.mastra, thread);
-		if (!internalThread) {
-			console.warn("[onMention] no internal thread found for", thread.id);
-			return;
-		}
-		const isChatOnly = internalThread.resourceId.startsWith("channel:");
-		const workspaceSegment = isChatOnly ? "channel" : encodeURIComponent(internalThread.resourceId);
-		const threadPath = gate.routed ? `/factories/${encodeURIComponent(gate.routed.factoryProjectId)}/workspaces/${workspaceSegment}/threads/${encodeURIComponent(internalThread.id)}` : `/threads/${internalThread.id}`;
-		const needsResourceParam = isChatOnly || !gate.routed;
-		const deepLink = process.env.MASTRACODE_PUBLIC_URL ? needsResourceParam ? `${process.env.MASTRACODE_PUBLIC_URL}${threadPath}?resourceId=${encodeURIComponent(internalThread.resourceId)}` : `${process.env.MASTRACODE_PUBLIC_URL}${threadPath}` : void 0;
-		if (!deepLink) return;
-		await thread.post(Card({
-			title: "New session started",
-			children: [Actions([LinkButton({
-				url: deepLink,
-				label: "View session"
-			})])]
-		}));
 	};
 }
 /**
@@ -642,6 +642,7 @@ const createHandlers = (deps) => {
 				await reportPreDispatchError(thread, message, ctx, error);
 				return;
 			}
+			acknowledgeReceipt(thread, deps);
 			await defaultHandler(thread, message);
 		},
 		onMention: newSessionChatHandler,