@mastra/factory 0.24.0-alpha.9 → 0.25.0-alpha.0

package/dist/integrations/slack/slack.js

@@ -1,11 +1,12 @@
 import { actorFromChannelAuthor } from "../../storage/domains/comments/actor.js";
 import { FACTORY_INTERACTIVE_KEY } from "../../auth.js";
+import { isRunBound, memoryResourceOf, sessionStampCounts } from "../../session/session-threads.js";
 import { primeTenantCredentialsForRequestContext, primeTenantCredentialsForTenant } from "../../routes/tenant-credentials.js";
 import { readRequestContextOrgId, seedSessionOrg } from "../../session/org-seed.js";
 import { prepareSessionRunContext } from "../subscription-session.js";
 import { FactorySourceControlConflictError, createSourceControlSessionLookup, hydrateFactorySession, resolveFactorySessionModel, resolveFactorySourceControl, resolvePrimaryEnvironmentRepository } from "../../session/factory-session.js";
 import { FACTORY_SLACK_SENDER_KEY } from "../../tools/scope.js";
-import { markNewChannelSession } from "../../session/channel-session-link-processor.js";
+import { markNewChannelSession } from "./channel-session-link-processor.js";
 import { resolveEmojiShortcodes } from "./emoji.js";
 import { slackCommentSource } from "./feed-publisher.js";
 import { ChannelSessionRejectedError } from "@mastra/core/channels";
@@ -152,7 +153,11 @@ function threadBranch(threadId) {
 }
 /**
 * Resolve the resourceId for a NEW Slack channel thread. A linked sender whose
-* factory has a repository gets a Factory user-session id — the controller
+* factory has a repository gets a Factory session. A channel thread belongs to
+* the Factory: its resourceId is the Factory id, so the thread shares the
+* Factory's memory. A DM is private to the sender, so it runs under the
+* sender's user id and shares memory with their own sessions. The session id is recorded in `startedSessions` for the
+* thread-id resolver. The controller
 * session then materializes the repo sandbox via the factory's dynamic
 * workspace (clone + PAT), the session shows up in the web Sessions list, and
 * View Session deep-links land on the normal workspace route.
@@ -176,7 +181,7 @@ function threadBranch(threadId) {
 * Pure lookups only — cards for unlinked/unrouted senders are the dispatch
 * gate's job; this hook must never post.
 */
-function createChannelResourceIdResolver(deps) {
+function createChannelResourceIdResolver(deps, startedSessions = /* @__PURE__ */ new WeakMap()) {
 	const { accountLinks, projects } = deps;
 	const sourceControls = configuredSourceControls(deps);
 	return async ({ platform, thread, message }) => {
@@ -219,13 +224,17 @@ function createChannelResourceIdResolver(deps) {
 			});
 			if (!repo.found) throw new SlackSessionStartError(repo.reason === "connection" ? "Could not start a session: connect source control to this Factory project." : "Could not start a session: link a repository to this Factory project.");
 			const branch = threadBranch(thread.id);
+			const memoryResourceId = thread.isDM ? link.userId : factoryProjectId;
 			const existing = await sourceControl.sessions.getForBranch({
 				factoryProjectId,
 				userId: link.userId,
 				branch
 			});
-			if (existing) return existing.sessionId;
-			return (await sourceControl.sessions.create({
+			if (existing) {
+				startedSessions.set(message, existing.sessionId);
+				return memoryResourceId;
+			}
+			const session = await sourceControl.sessions.create({
 				sessionId: globalThis.crypto.randomUUID(),
 				projectRepositoryId: repo.projectRepositoryId,
 				factoryProjectId,
@@ -234,7 +243,9 @@ function createChannelResourceIdResolver(deps) {
 				branch,
 				baseBranch: repo.baseBranch,
 				visibility: thread.isDM ? "private" : "org"
-			})).sessionId;
+			});
+			startedSessions.set(message, session.sessionId);
+			return memoryResourceId;
 		} catch (error) {
 			if (error instanceof ChannelSessionRejectedError || error instanceof SlackSessionStartError) throw error;
 			if (error instanceof FactorySourceControlConflictError) throw new SlackSessionStartError("Could not start a session: this Factory project has repositories from more than one source-control provider.", { cause: error });
@@ -245,22 +256,55 @@ function createChannelResourceIdResolver(deps) {
 }
 /**
 * Thread id for a NEW Slack channel thread. Repo-backed threads take the
-* user-session id AS their thread id, matching the web convention
+* session id AS their thread id, matching the web convention
 * (FactoryStartCoordinator seeds threads with threadId = sessionId) so
 * `/workspaces/{sessionId}/threads/{sessionId}` resolves Slack-created
-* sessions exactly like web-created ones — no `?resourceId=` override needed.
+* sessions exactly like web-created ones — no `?sessionId=` override needed.
 * Chat-only threads keep the default random id: their `channel:...`
 * resourceId is a memory key, not a unique thread id.
 */
-const resolveChannelThreadId = ({ resourceId, defaultThreadId }) => resourceId.startsWith("channel:") ? defaultThreadId : resourceId;
+function createChannelThreadIdResolver(startedSessions) {
+	return ({ message, defaultThreadId }) => startedSessions.get(message) ?? defaultThreadId;
+}
+/**
+* The Factory session a repo-backed Slack thread belongs to. A thread under
+* the Factory resource is stamped with its session id (the startup migration
+* stamps threads it moved there). An unmigrated thread runs under its session
+* id as its resource, and a newer thread is named after its session. A stamp
+* or thread id only counts under that session's memory resource; a thread
+* named after a session it can't claim is refused. With no session row for
+* either, the thread is addressed by its own id and fails authorization like
+* any session without a row.
+*/
+const UNCLAIMED_SESSION = Symbol("unclaimed-session");
+async function slackThreadSessionId(sessions, thread, loadThread, runs) {
+	if (thread.resourceId.startsWith("channel:")) return null;
+	const claims = async (sessionId) => {
+		const row = await sessions.getBySessionId(sessionId);
+		if (!row) return false;
+		if (sessionId !== thread.id && !sessionStampCounts(row, thread.resourceId)) return false;
+		const own = sessionId === thread.id ? thread : await loadThread(sessionId);
+		return thread.resourceId === memoryResourceOf(row, own, await isRunBound(row, runs));
+	};
+	const stamped = thread.metadata?.factorySessionId;
+	if (typeof stamped === "string" && stamped && await claims(stamped)) return stamped;
+	if (await sessions.getSourceControlBySessionId(thread.resourceId)) return thread.resourceId;
+	if (await claims(thread.id)) return thread.id;
+	if (await sessions.getBySessionId(thread.id)) return UNCLAIMED_SESSION;
+	return thread.id;
+}
 /** Create channel sessions with their Factory ownership present in initial controller state. */
 function createChannelSessionResolver(deps) {
 	const sourceControlSessions = createSourceControlSessionLookup(configuredSourceControls(deps));
 	return async ({ controller, thread, requestContext }) => {
-		const sourceControl = thread.resourceId.startsWith("channel:") ? null : await sourceControlSessions.getSourceControlBySessionId(thread.resourceId);
-		const session = sourceControl ? await sourceControl.sessions.getBySessionId(thread.resourceId) : null;
+		const stored = thread.metadata?.factorySessionId || thread.resourceId.startsWith("channel:") ? thread : await controller.queryThreadById({ threadId: thread.id }) ?? thread;
+		const resolved = await slackThreadSessionId(sourceControlSessions, stored, (threadId) => controller.queryThreadById({ threadId }), deps.workItems);
+		if (resolved === UNCLAIMED_SESSION) throw new Error(`Slack thread ${thread.id} is named after a Factory session it doesn't belong to.`);
+		const sessionId = resolved ?? thread.resourceId;
+		const sourceControl = sessionId.startsWith("channel:") ? null : await sourceControlSessions.getSourceControlBySessionId(sessionId);
+		const session = sourceControl ? await sourceControl.sessions.getBySessionId(sessionId) : null;
 		return controller.createSession({
-			id: thread.resourceId,
+			id: sessionId,
 			ownerId: controller.id,
 			resourceId: thread.resourceId,
 			threadId: thread.id,
@@ -299,15 +343,16 @@ function createChannelSessionStartHook(deps) {
 		await seedSessionOrg(session, readRequestContextOrgId(requestContext));
 		if (!projects) return;
 		if (thread.resourceId.startsWith("channel:")) return;
-		const sourceControl = await sourceControlSessions.getSourceControlBySessionId(thread.resourceId);
+		const sessionId = session.identity.getId();
+		const sourceControl = await sourceControlSessions.getSourceControlBySessionId(sessionId);
 		if (!sourceControl) return;
-		const sourceSession = await sourceControl.sessions.getBySessionId(thread.resourceId);
+		const sourceSession = await sourceControl.sessions.getBySessionId(sessionId);
 		if (!sourceSession?.factoryProjectId) return;
 		const threadId = session.thread.getId();
 		const binding = threadId && deps.workItems ? await deps.workItems.findRunBindingByThread({
 			orgId: sourceSession.orgId,
-			resourceId: thread.resourceId,
-			sessionId: thread.resourceId,
+			resourceId: session.identity.getResourceId(),
+			sessionId,
 			threadId,
 			rejectAmbiguous: true
 		}) : null;
@@ -335,8 +380,13 @@ function createChannelSessionStartHook(deps) {
 			userId: owner.userId,
 			credentialScope: sessionModel.modelScope
 		});
-		const modeId = session.mode.get();
 		const activeThreadId = session.thread.getId();
+		if (activeThreadId) await session.thread.setSettingOn({
+			threadId: activeThreadId,
+			key: "factorySessionId",
+			value: sessionId
+		});
+		const modeId = session.mode.get();
 		if (await migratePersistedModelSelection({
 			getMetadata: async () => activeThreadId ? (await session.thread.getById({ threadId: activeThreadId }))?.metadata ?? {} : {},
 			modeId,
@@ -405,27 +455,28 @@ async function findInternalThread(mastra, thread) {
 		} },
 		perPage: 1
 	}) ?? { threads: [] };
-	return threads[0];
+	return threads[0] ?? null;
 }
 async function prepareExistingSessionOwnerContext(thread, deps, ctx, options) {
 	const sourceControls = configuredSourceControls(deps);
 	if (sourceControls.length === 0 && !options.requireInternalThread) return "ready";
-	const internalThread = await findInternalThread(ctx.mastra, thread);
+	const internalThread = options.internalThread !== void 0 ? options.internalThread : await findInternalThread(ctx.mastra, thread);
 	if (!internalThread) {
 		if (options.requireInternalThread) throw new Error(`Could not resolve the internal Slack thread for ${thread.id}.`);
 		return "ready";
 	}
 	if (sourceControls.length === 0 || internalThread.resourceId.startsWith("channel:")) return "ready";
 	const sessions = createSourceControlSessionLookup(sourceControls);
-	const sessionRow = await sessions.getBySessionId(internalThread.resourceId);
+	const memory = await ctx.mastra?.getStorage()?.getStore("memory");
+	const resolved = await slackThreadSessionId(sessions, internalThread, async (threadId) => memory?.getThreadById({ threadId }), deps.workItems);
+	if (resolved === UNCLAIMED_SESSION) return "access-denied";
+	const sessionId = resolved ?? internalThread.resourceId;
+	const sessionRow = await sessions.getBySessionId(sessionId);
 	if (sessionRow && sessionRow.orgId === options.expectedOrgId && sessionRow.visibility === "private" && sessionRow.userId !== options.senderUserId) return "access-denied";
-	if (!options.expectedOrgId) throw new Error(`Could not authorize the owner of Slack Factory session ${internalThread.resourceId}: the sender's account link has no organization.`);
-	const preparation = await prepareSessionRunContext(ctx.requestContext, internalThread.resourceId, { sessions }, { expectedOrgId: options.expectedOrgId });
+	if (!options.expectedOrgId) throw new Error(`Could not authorize the owner of Slack Factory session ${sessionId}: the sender's account link has no organization.`);
+	const preparation = await prepareSessionRunContext(ctx.requestContext, sessionId, { sessions }, { expectedOrgId: options.expectedOrgId });
 	if (preparation === "organization-mismatch") return preparation;
-	if (preparation !== "prepared") {
-		const reason = preparation === "session-not-found" ? "no source-control session row exists for it, or its project repository row is missing" : "its source-control session row has no organization";
-		throw new Error(`Could not authorize the owner of Slack Factory session ${internalThread.resourceId}: ${reason}.`);
-	}
+	if (preparation !== "prepared") throw new Error(`Could not authorize the owner of Slack Factory session ${sessionId}: ${preparation === "session-not-found" ? "no source-control session row exists for it, or its project repository row is missing" : "its source-control session row has no organization"}.`);
 	return "ready";
 }
 /**
@@ -455,7 +506,8 @@ async function gateDispatch(thread, message, deps, ctx, options = { requireInter
 		const ownerContext = await prepareExistingSessionOwnerContext(thread, deps, ctx, {
 			expectedOrgId: sender.link.orgId,
 			senderUserId: sender.link.userId,
-			requireInternalThread: options.requireInternalThread
+			requireInternalThread: options.requireInternalThread,
+			internalThread: options.internalThread
 		});
 		if (ownerContext === "access-denied") {
 			await thread.post("This private Factory session belongs to another user.");
@@ -636,41 +688,90 @@ const createHandlers = (deps) => {
 	return {
 		onSubscribedMessage: async (thread, message, defaultHandler, ctx) => {
 			if (/^aside\b/i.test(message.text)) return ingestAside(thread, message, deps);
+			const internalThread = await findInternalThread(ctx.mastra, thread);
+			if (!message.isMention && internalThread?.metadata?.[MUTED_KEY] === "true") return;
 			try {
-				if (!await gateDispatch(thread, message, deps, ctx, { requireInternalThread: true })) return;
+				if (!await gateDispatch(thread, message, deps, ctx, {
+					requireInternalThread: true,
+					internalThread
+				})) return;
 			} catch (error) {
 				await reportPreDispatchError(thread, message, ctx, error);
 				return;
 			}
+			const command = message.isMention ? muteCommand(message) : void 0;
+			if (command && internalThread) return setThreadMuted(thread, internalThread, message, ctx, command === "mute");
 			acknowledgeReceipt(thread, deps);
 			await defaultHandler(thread, message);
 		},
-		onMention: newSessionChatHandler,
+		onMention: async (thread, message, defaultHandler, ctx) => {
+			if (muteCommand(message)) return;
+			await newSessionChatHandler(thread, message, defaultHandler, ctx);
+		},
 		onDirectMessage: newSessionChatHandler
 	};
 };
+/** Thread metadata key; one Factory runs one Slack app, so this is per bot. */
+const MUTED_KEY = "factory_muted";
+/**
+* `mute` or `unmute` when that word, with the mentions taken out, is the whole
+* message. Reads Slack's raw text, where a mention is still `<@U…>`: the
+* normalized `message.text` spells it as the bot's display name, which can
+* hold spaces and punctuation (`@Mastra Factory(Caleb)`).
+*/
+function muteCommand(message) {
+	const raw = message.raw;
+	const rest = (typeof raw?.text === "string" ? raw.text : message.text).replace(/<@[^>]+>/g, " ").replace(/(?<!\w)@[\w.-]+/g, " ").trim().replace(/[.!]+$/, "").toLowerCase();
+	return rest === "mute" || rest === "unmute" ? rest : void 0;
+}
+/**
+* Stored on the Mastra thread next to `channel_subscribed`, so a mute holds
+* across deploys and replicas. Callers run the sender's link and session
+* access gate first. A reaction confirms it without posting.
+*/
+async function setThreadMuted(thread, internal, message, ctx, muted) {
+	const store = await ctx.mastra?.getStorage()?.getStore("memory");
+	if (!store) return;
+	await store.patchThread({
+		id: internal.id,
+		metadata: {
+			...internal.metadata,
+			[MUTED_KEY]: String(muted)
+		}
+	});
+	try {
+		await thread.adapter.addReaction(thread.id, message.id, muted ? "mute" : "loud_sound");
+	} catch (error) {
+		console.warn("[slack] mute reaction failed", {
+			thread: thread.id,
+			error
+		});
+	}
+}
 function createSlackChannelsConfig(deps) {
 	const adapter = createSlackAdapter({
 		...deps.slack,
 		webClientOptions: { timeout: SLACK_REQUEST_TIMEOUT_MS }
 	});
+	const slack = deps.adapterOptions?.streaming === false ? {
+		adapter,
+		...deps.adapterOptions
+	} : {
+		adapter,
+		...deps.adapterOptions,
+		streaming: deps.adapterOptions?.streaming ?? true
+	};
+	const startedSessions = /* @__PURE__ */ new WeakMap();
 	return {
-		adapters: { slack: deps.adapterOptions?.streaming === false ? {
-			adapter,
-			...deps.adapterOptions
-		} : {
-			adapter,
-			...deps.adapterOptions,
-			streaming: deps.adapterOptions?.streaming ?? true
-		} },
+		adapters: { slack },
 		handlers: createHandlers(deps),
-		resolveResourceId: createChannelResourceIdResolver(deps),
-		resolveThreadId: resolveChannelThreadId,
+		resolveResourceId: createChannelResourceIdResolver(deps, startedSessions),
+		resolveThreadId: createChannelThreadIdResolver(startedSessions),
 		resolveSession: createChannelSessionResolver(deps),
 		onSessionStart: createChannelSessionStartHook(deps)
 	};
 }
 //#endregion
-export { createChannelResourceIdResolver, createChannelSessionResolver, createChannelSessionStartHook, createHandlers, createSlackChannelsConfig, resolveChannelThreadId, resolveFactoryForLink, resolveLinkedSender, slackThreadSource };
+export { createChannelResourceIdResolver, createChannelSessionResolver, createChannelSessionStartHook, createChannelThreadIdResolver, createHandlers, createSlackChannelsConfig, resolveFactoryForLink, resolveLinkedSender, slackThreadSource };
 
 //# sourceMappingURL=slack.js.map

package/dist/integrations/slack/slack.js.map

@@ -1 +1 @@
-{"version":3,"file":"slack.js","names":[],"sources":["../../../src/integrations/slack/slack.ts"],"sourcesContent":["import { migratePersistedModelSelection } from '@mastra/core/agent-controller';\nimport { ChannelSessionRejectedError } from '@mastra/core/channels';\nimport type {\n  ChannelHandler,\n  ChannelHandlerContext,\n  ChannelHandlers,\n  ChannelSessionResolve,\n  ChannelSessionStart,\n  ResolveResourceId,\n  ResolveThreadId,\n} from '@mastra/core/channels';\nimport type { Mastra } from '@mastra/core/mastra';\nimport { createSlackAdapter } from '@mastra/slack';\nimport type { SlackAdapterChannelConfig } from '@mastra/slack';\nimport { Card, CardText, Actions, LinkButton } from 'chat';\n\nimport { FACTORY_INTERACTIVE_KEY } from '../../auth.js';\nimport {\n  primeTenantCredentialsForRequestContext,\n  primeTenantCredentialsForTenant,\n} from '../../routes/tenant-credentials.js';\nimport { markNewChannelSession } from '../../session/channel-session-link-processor.js';\nimport {\n  createSourceControlSessionLookup,\n  FactorySourceControlConflictError,\n  hydrateFactorySession,\n  resolveFactorySessionModel,\n  resolveFactorySourceControl,\n  resolvePrimaryEnvironmentRepository,\n} from '../../session/factory-session.js';\nimport { readRequestContextOrgId, seedSessionOrg } from '../../session/org-seed.js';\nimport type {\n  ChannelAccountLink,\n  ChannelAccountLinkKey,\n  ChannelIdentityStorage,\n} from '../../storage/domains/channel-identity/base.js';\nimport type { FactoryActorExternalIdentity } from '../../storage/domains/comments/actor.js';\nimport { actorFromChannelAuthor } from '../../storage/domains/comments/actor.js';\nimport type { CommentsDomain } from '../../storage/domains/comments/domain.js';\nimport type { ModelDefaultsStorage } from '../../storage/domains/model-defaults/base.js';\nimport type { FactoryProjectsStorage } from '../../storage/domains/projects/base.js';\nimport type { SourceControlStorageHandle } from '../../storage/domains/source-control/base.js';\nimport type { ExternalWorkItemSource, WorkItemRow, WorkItemsStorage } from '../../storage/domains/work-items/base.js';\nimport { FACTORY_SLACK_SENDER_KEY } from '../../tools/scope.js';\nimport type { FactoryChannelsConfig } from '../base.js';\nimport { prepareSessionRunContext } from '../subscription-session.js';\n\nimport { resolveEmojiShortcodes } from './emoji.js';\nimport { slackCommentSource } from './feed-publisher.js';\n\n// Derive the thread/message types from the core handler signature rather than\n// importing them from `chat` directly: mc-web can resolve a different `chat`\n// version than @mastra/core, and the two `Thread`/`Message` declarations are\n// structurally incompatible (private fields). Using the handler's own types\n// keeps everything on one version.\ntype HandlerThread = Parameters<ChannelHandler>[0];\ntype HandlerMessage = Parameters<ChannelHandler>[1];\n\nconst SLACK_REQUEST_TIMEOUT_MS = 15_000;\n\nclass SlackSessionStartError extends Error {}\n\n/** Dependencies the Slack channel handlers close over, injected from the web entry. */\ninterface SlackChannelDeps {\n  /**\n   * The factory's reverse-index store mapping a Slack sender to a Mastra\n   * tenant. When provided, inbound messages from an unlinked sender are not\n   * dispatched — the run only proceeds (with the sender's tenant stamped on\n   * the request context) once they've linked their account. Unlinked senders\n   * get an ephemeral \"connect your account\" card instead.\n   */\n  accountLinks?: ChannelIdentityStorage;\n  /**\n   * Factory projects domain. When provided (alongside `accountLinks`), a\n   * linked sender's run must also resolve to a Factory project before it\n   * dispatches: their link's default factory, else their tenant's only\n   * factory (stamped back onto the link), else a \"pick a default factory\"\n   * card posted in the thread and no run. Unset → no factory routing (runs\n   * dispatch as before).\n   */\n  projects?: FactoryProjectsStorage;\n  /**\n   * Storage handle of the integration that owns source control\n   * (`IntegrationContext.storage.sourceControlOwner`). Used to make new Slack\n   * threads repo-backed: when the sender is linked and their factory has a\n   * repository, the thread's resourceId becomes a Factory user-session id (repo\n   * cloned on a `slack/{threadTs}` branch) instead of the chat-only\n   * `channel:...` id. It also lets a started session read back the project it\n   * belongs to. Nothing here is provider-specific — the connection is matched\n   * by the handle's own `integrationId`. Absent (no source-control integration\n   * registered) → chat-only sessions as before.\n   */\n  sourceControl?: SourceControlStorageHandle;\n  /** Registered source-control partitions used to select the provider linked to each Factory project. */\n  sourceControls?: readonly SourceControlStorageHandle[];\n  /**\n   * Model-defaults domain. When provided, a new repo-backed session starts on\n   * the linked sender's default model before the factory's shared default. Read\n   * once, when the thread's build model is first chosen; the choice is persisted\n   * on the thread and never re-resolved. Unset → the factory default, as before.\n   */\n  modelDefaults?: ModelDefaultsStorage;\n  /**\n   * Factory work-items domain, used to find the card a Slack thread already\n   * has so an `aside` can land on it. New threads never create cards.\n   */\n  workItems?: WorkItemsStorage;\n  /**\n   * Work-item feed. With it (and `workItems`), an `aside` lands as a comment on\n   * the card the thread already has. Unset → asides stay ignored, as before.\n   */\n  feed?: Pick<CommentsDomain, 'createComment'>;\n  /** Overrides applied to the Slack channel adapter entry. */\n  adapterOptions?: SlackAdapterChannelConfig;\n}\n\nfunction configuredSourceControls(deps: SlackChannelDeps): readonly SourceControlStorageHandle[] {\n  return deps.sourceControls ?? (deps.sourceControl ? [deps.sourceControl] : []);\n}\n\n/**\n * Read the Slack team id off a raw platform payload (Events API envelope or\n * slash-command body — both carry `team_id`), duck-typed to build the\n * workspace-scoped account-link key.\n */\nfunction rawTeamId(rawPayload: unknown): string | undefined {\n  if (!rawPayload || typeof rawPayload !== 'object') return undefined;\n  const raw = rawPayload as { team_id?: unknown; team?: unknown };\n  if (typeof raw.team_id === 'string' && raw.team_id) return raw.team_id;\n  if (typeof raw.team === 'string' && raw.team) return raw.team;\n  if (raw.team && typeof raw.team === 'object') {\n    const id = (raw.team as { id?: unknown }).id;\n    if (typeof id === 'string' && id) return id;\n  }\n  return undefined;\n}\n\n/**\n * The Slack team id survives onto a normalized chat Message only on\n * `message.raw` (the Slack Events API envelope).\n */\nfunction slackTeamId(message: HandlerMessage): string | undefined {\n  return rawTeamId(message.raw);\n}\n\n/**\n * Resolve the web-UI origin for links humans open in a browser (Connect card,\n * session deep links). Prefers `MASTRACODE_PUBLIC_URL` — the origin auth\n * cookies and OAuth redirect allow-lists are registered against — over the\n * channels tunnel, which only Slack's servers need to reach.\n */\nfunction webPublicUrl(): string | undefined {\n  return process.env.MASTRACODE_PUBLIC_URL ?? process.env.MASTRACODE_CHANNELS_PUBLIC_URL;\n}\n\n/** Outcome of the sender-link gate for one inbound message. */\ntype LinkedSenderResult =\n  /** Gating not configured — dispatch as before account linking existed. */\n  | { status: 'ungated' }\n  /** Sender unlinked — Connect card posted (when possible), do not dispatch. */\n  | { status: 'blocked' }\n  /** Sender linked — their tenant plus the sender key the link lives under. */\n  | { status: 'linked'; link: ChannelAccountLink; key: ChannelAccountLinkKey };\n\n/**\n * Resolve the sender's account link, posting an ephemeral \"connect your\n * account\" card (visible only to the sender) linking into the web UI's\n * Slack-connect flow when they're unlinked.\n */\nexport async function resolveLinkedSender({\n  thread,\n  message,\n  accountLinks,\n}: {\n  thread: HandlerThread;\n  message: HandlerMessage;\n  accountLinks?: ChannelIdentityStorage;\n}): Promise<LinkedSenderResult> {\n  if (!accountLinks) return { status: 'ungated' };\n  const platform = thread.adapter.name;\n  const externalUserId = message.author.userId;\n  const externalTeamId = slackTeamId(message);\n  // Without a team id we can't identify the workspace-scoped link; treat as\n  // unlinked so a run never proceeds tenant-less.\n  const key = externalTeamId ? { platform, externalTeamId, externalUserId } : undefined;\n  const link = key ? await accountLinks.getAccountLink(key) : null;\n  if (link && key) return { status: 'linked', link, key };\n\n  const publicUrl = webPublicUrl();\n  // A public origin is all the card needs. The link carries no identity: the\n  // web app authenticates the visitor, then Slack's OIDC flow proves which\n  // Slack account they control. Without an origin, still block, just no card.\n  if (publicUrl) {\n    await thread.postEphemeral(message.author, buildConnectCard(publicUrl, thread), { fallbackToDM: true });\n  }\n  return { status: 'blocked' };\n}\n\nconst retryHint = (thread: HandlerThread) => (thread.isDM ? 'message me again' : 'mention me again');\n\n/**\n * The \"connect your account\" card. The link is deliberately identity-free —\n * `/connect/slack` sends the visitor to Connections, where \"Connect Slack\"\n * runs the OIDC flow and Slack itself asserts the (team, user) pair.\n */\nfunction buildConnectCard(publicUrl: string, thread: HandlerThread) {\n  return Card({\n    title: 'Connect your account',\n    children: [\n      CardText(`Connect your account to use this agent, then ${retryHint(thread)}.`),\n      Actions([\n        LinkButton({\n          url: `${publicUrl}/connect/slack`,\n          label: 'Connect account',\n        }),\n      ]),\n    ],\n  });\n}\n\n/** Outcome of factory routing for one linked sender's inbound message. */\ntype FactoryRouteResult =\n  /** Factory routing not configured — dispatch without a factory. */\n  | { status: 'ungated' }\n  /** No factory resolved — prompt card posted (when possible), do not dispatch. */\n  | { status: 'blocked' }\n  /** The Factory project this sender's runs route to. */\n  | { status: 'resolved'; factoryProjectId: string };\n\n/**\n * Decide which Factory project a linked sender's run belongs to:\n *\n * 1. The link's `defaultFactoryProjectId`, when it still exists (a stale id —\n *    deleted factory — falls through as if unset).\n * 2. Else, the tenant's only factory, stamped back onto the link so it shows\n *    up (and stays editable) in Connected Accounts settings.\n * 3. Else — zero or several factories — a \"pick a default factory\" card\n *    posted publicly in the thread so Slack notifies the sender, and the run is\n *    blocked.\n */\nexport async function resolveFactoryForLink({\n  thread,\n  link,\n  key,\n  accountLinks,\n  projects,\n}: {\n  thread: HandlerThread;\n  link: ChannelAccountLink;\n  key: ChannelAccountLinkKey;\n  accountLinks: ChannelIdentityStorage;\n  projects?: FactoryProjectsStorage;\n}): Promise<FactoryRouteResult> {\n  if (!projects) return { status: 'ungated' };\n  // Factories are org-scoped; a personal account (no org) has none and lands\n  // on the prompt below.\n  const orgId = link.orgId ?? '';\n\n  if (link.defaultFactoryProjectId) {\n    const existing = await projects.get({ orgId, id: link.defaultFactoryProjectId });\n    if (existing) {\n      return { status: 'resolved', factoryProjectId: existing.id };\n    }\n  }\n\n  const factories = orgId ? await projects.list({ orgId }) : [];\n  if (factories.length === 1) {\n    const only = factories[0]!;\n    await accountLinks.setDefaultFactory({ ...key, userId: link.userId, factoryProjectId: only.id });\n    return { status: 'resolved', factoryProjectId: only.id };\n  }\n\n  const publicUrl = webPublicUrl();\n  if (publicUrl) {\n    await thread.post(\n      Card({\n        title: 'Pick a default factory',\n        children: [\n          CardText(\n            factories.length === 0\n              ? `Your account has no factory yet. Create one in the web app, then ${retryHint(thread)}.`\n              : `Your account has several factories. Pick which one Slack sessions should go to, then ${retryHint(thread)}.`,\n          ),\n          Actions([\n            LinkButton({\n              url: `${publicUrl}/settings/connections`,\n              label: 'Open settings',\n            }),\n          ]),\n        ],\n      }),\n    );\n  }\n  return { status: 'blocked' };\n}\n\n/**\n * Deterministic per-thread branch name: `slack/{threadTs}` with characters\n * outside the sandbox git-ref allow-list (`[A-Za-z0-9_./-]`, and `.` for\n * readability) mapped to `-`. `thread.id` is `{channelId}:{threadTs}`\n * (platform-prefixed on handler threads) — the trailing segment is the ts.\n *\n * Top-level DM and channel conversations use the empty-threadTs thread form,\n * so the trailing segment can be empty; a bare `slack/` is not a valid git\n * ref. Fall back to the last non-empty segment (the channel id): one\n * deterministic branch per top-level conversation.\n */\nfunction threadBranch(threadId: string): string {\n  const segments = threadId.split(':');\n  const tail = segments.findLast(segment => segment.length > 0) ?? threadId;\n  return `slack/${tail.replace(/[^A-Za-z0-9_/-]/g, '-')}`;\n}\n\n/**\n * Resolve the resourceId for a NEW Slack channel thread. A linked sender whose\n * factory has a repository gets a Factory user-session id — the controller\n * session then materializes the repo sandbox via the factory's dynamic\n * workspace (clone + PAT), the session shows up in the web Sessions list, and\n * View Session deep-links land on the normal workspace route.\n *\n * A gated deployment refuses a thread it cannot place, rather than falling back\n * to a chat-only session: a repo-backed thread is the whole point of the\n * integration, and answering in a chat-only one would run the sender's request\n * in no project, on the SDK's built-in defaults. A linked sender whose project\n * cannot start a session gets an actionable error in Slack; the dispatch gate\n * handles unlinked or unrouted senders before this hook runs.\n * The hook only runs when a NEW thread is actually created (`getOrCreateThread`\n * resolves the owner lazily), so an established conversation is never touched:\n * it keeps its session, its model, and its history.\n *\n * The chat-only `channel:...` id survives for two cases where refusing would be\n * wrong: a deployment that cannot produce a repo-backed thread at all (no\n * account linking, no projects, or no source-control integration registered),\n * and a message carrying no sender id. In both, a `channel:` thread is the only\n * shape a session can take.\n *\n * Pure lookups only — cards for unlinked/unrouted senders are the dispatch\n * gate's job; this hook must never post.\n */\nexport function createChannelResourceIdResolver(deps: SlackChannelDeps): ResolveResourceId {\n  const { accountLinks, projects } = deps;\n  const sourceControls = configuredSourceControls(deps);\n  return async ({ platform, thread, message }) => {\n    // NOT the hook's `defaultResourceId`: configuring a custom resolver\n    // bypasses AgentControllerChannels' own `channel:{thread.id}` derivation\n    // (agent-controller-channels.ts `resolveChannelResourceId`), and the base\n    // default is the per-USER memory key. Chat-only fallbacks must stay\n    // per-thread, so reproduce the controller default here.\n    const chatOnlyResourceId = `channel:${thread.id}`;\n    // A deployment with no account linking, no projects, or no source-control\n    // integration cannot produce a repo-backed thread at all, so a `channel:`\n    // thread is the only shape it has. Every refusal below is a different thing\n    // entirely: a sender the bot cannot place, in a deployment that can.\n    if (!accountLinks || !projects || sourceControls.length === 0) return chatOnlyResourceId;\n    // No sender id at all — a malformed message, not a sender the host turned\n    // away. There is nothing to place, so give it the per-thread memory key.\n    if (!message.author.userId) return chatOnlyResourceId;\n\n    const externalTeamId = rawTeamId(message.raw);\n    if (!externalTeamId) {\n      throw new ChannelSessionRejectedError('No Slack workspace id on the message — the sender cannot be identified');\n    }\n    try {\n      const link = await accountLinks.getAccountLink({\n        platform,\n        externalTeamId,\n        externalUserId: message.author.userId,\n      });\n      if (!link) {\n        throw new ChannelSessionRejectedError(\n          `Slack sender ${message.author.userId} is not linked to a Factory account`,\n        );\n      }\n\n      // Same chain as `resolveFactoryForLink`, minus prompts/stamping: the\n      // dispatch gate has already run (and stamped a lone factory) by the\n      // time a new thread is created, so this is a read-only re-resolve.\n      const orgId = link.orgId ?? '';\n      let factoryProjectId: string | undefined;\n      if (link.defaultFactoryProjectId && (await projects.get({ orgId, id: link.defaultFactoryProjectId }))) {\n        factoryProjectId = link.defaultFactoryProjectId;\n      } else if (orgId) {\n        const factories = await projects.list({ orgId });\n        if (factories.length === 1) factoryProjectId = factories[0]!.id;\n      }\n      if (!factoryProjectId) {\n        throw new ChannelSessionRejectedError(`Linked Slack sender ${message.author.userId} has no Factory project`);\n      }\n\n      // Linked and routed, so a repo-backed session is not a preference: with no\n      // repository to work in there is no thread to start, and starting one\n      // anyway would answer in a project the sender never picked, on the SDK's\n      // built-in defaults.\n      const sourceControl = await resolveFactorySourceControl({ sourceControls, orgId, factoryProjectId });\n      if (!sourceControl) {\n        const connections = await Promise.all(\n          sourceControls.map(sourceControl => sourceControl.connections.list({ orgId, factoryProjectId })),\n        );\n        throw new SlackSessionStartError(\n          connections.some(rows => rows.length > 0)\n            ? 'Could not start a session: link a repository to this Factory project.'\n            : 'Could not start a session: connect source control to this Factory project.',\n        );\n      }\n      // The session's link is the factory's position-1 environment\n      // repository (D1); the sandbox boots every environment repository.\n      const repo = await resolvePrimaryEnvironmentRepository({ sourceControl, orgId, factoryProjectId });\n      if (!repo.found) {\n        throw new SlackSessionStartError(\n          repo.reason === 'connection'\n            ? 'Could not start a session: connect source control to this Factory project.'\n            : 'Could not start a session: link a repository to this Factory project.',\n        );\n      }\n\n      const branch = threadBranch(thread.id);\n      // Attributed to the Slack sender, not to whoever connected the repository:\n      // unlike an autonomous rule run, a Slack thread has a real interactive user.\n      // Keyed by factory, not by link: the thread's session stays found when the\n      // position-1 repository changes between two messages.\n      const existing = await sourceControl.sessions.getForBranch({\n        factoryProjectId,\n        userId: link.userId,\n        branch,\n      });\n      if (existing) return existing.sessionId;\n      const session = await sourceControl.sessions.create({\n        sessionId: globalThis.crypto.randomUUID(),\n        projectRepositoryId: repo.projectRepositoryId,\n        factoryProjectId,\n        orgId,\n        userId: link.userId,\n        branch,\n        baseBranch: repo.baseBranch,\n        // DMs are the only private origin; channel threads are org-visible.\n        visibility: thread.isDM ? 'private' : 'org',\n      });\n      return session.sessionId;\n    } catch (error) {\n      if (error instanceof ChannelSessionRejectedError || error instanceof SlackSessionStartError) throw error;\n      if (error instanceof FactorySourceControlConflictError) {\n        throw new SlackSessionStartError(\n          'Could not start a session: this Factory project has repositories from more than one source-control provider.',\n          { cause: error },\n        );\n      }\n      console.error('[slack] failed to start repo-backed session for thread', thread.id, error);\n      throw new SlackSessionStartError('Could not start a session right now. Please try again later.', {\n        cause: error,\n      });\n    }\n  };\n}\n\n/**\n * Thread id for a NEW Slack channel thread. Repo-backed threads take the\n * user-session id AS their thread id, matching the web convention\n * (FactoryStartCoordinator seeds threads with threadId = sessionId) so\n * `/workspaces/{sessionId}/threads/{sessionId}` resolves Slack-created\n * sessions exactly like web-created ones — no `?resourceId=` override needed.\n * Chat-only threads keep the default random id: their `channel:...`\n * resourceId is a memory key, not a unique thread id.\n */\nexport const resolveChannelThreadId: ResolveThreadId = ({ resourceId, defaultThreadId }) =>\n  resourceId.startsWith('channel:') ? defaultThreadId : resourceId;\n\n/** Create channel sessions with their Factory ownership present in initial controller state. */\nexport function createChannelSessionResolver(deps: SlackChannelDeps): ChannelSessionResolve {\n  const sourceControlSessions = createSourceControlSessionLookup(configuredSourceControls(deps));\n  return async ({ controller, thread, requestContext }) => {\n    const sourceControl = thread.resourceId.startsWith('channel:')\n      ? null\n      : await sourceControlSessions.getSourceControlBySessionId(thread.resourceId);\n    const session = sourceControl ? await sourceControl.sessions.getBySessionId(thread.resourceId) : null;\n    return controller.createSession({\n      id: thread.resourceId,\n      ownerId: controller.id,\n      resourceId: thread.resourceId,\n      // Bind the Slack-created thread itself. Without it the scoped session\n      // auto-selects (or creates) another thread and is switched onto this one later.\n      threadId: thread.id,\n      requestContext,\n      ...(session?.factoryProjectId ? { tags: { factoryProjectId: session.factoryProjectId } } : {}),\n    });\n  };\n}\n\n/**\n * Apply the factory's configuration to a Slack-created session the first time\n * its thread reaches the controller.\n *\n * Without this a Slack session runs on the SDK's built-in mode default\n * (`openai/gpt-5.5`), so a factory configured for any other provider fails every\n * message with a missing-credentials error. The web kickoff has always applied\n * the factory default; this brings Slack to the same footing.\n *\n * Only repo-backed threads are configured. Their resourceId IS the Factory\n * session id, which the source-control rows turn back into a project — a\n * chat-only `channel:...` id names no project, so there is nothing to read.\n *\n * The model this session starts on is picked here, once, from the project's\n * effective model scope for a session: the Factory default or the durable session owner's\n * default, else the SDK's built-in model. The choice is persisted on the thread\n * as `currentModelId`, so it outlives the process that made it.\n *\n * The model resolution is skipped on a session that already has a model\n * persisted on the thread. That is the durable record of a deliberate choice —\n * either an earlier start or a user's own switch — and re-applying a preference\n * over it would undo the user's selection every time the process restarts.\n */\nexport function createChannelSessionStartHook(deps: SlackChannelDeps): ChannelSessionStart {\n  const { projects, modelDefaults } = deps;\n  const sourceControlSessions = createSourceControlSessionLookup(configuredSourceControls(deps));\n  return async ({ session, thread, requestContext }) => {\n    // Seed the tenant org above every guard below. `gateDispatch` stamps it on\n    // the message's request context before the session exists, so this needs no\n    // storage read — which matters, because the model lookups below deliberately\n    // skip storage on a restarted session. A channel-only thread and a thread\n    // whose dispatch was ungated both land here with no org and are marked\n    // unresolved rather than being left to look like a local session.\n    await seedSessionOrg(session, readRequestContextOrgId(requestContext));\n\n    if (!projects) return;\n    if (thread.resourceId.startsWith('channel:')) return;\n\n    const sourceControl = await sourceControlSessions.getSourceControlBySessionId(thread.resourceId);\n    if (!sourceControl) return;\n    const sourceSession = await sourceControl.sessions.getBySessionId(thread.resourceId);\n    if (!sourceSession?.factoryProjectId) return;\n    const threadId = session.thread.getId();\n    const binding =\n      threadId && deps.workItems\n        ? await deps.workItems.findRunBindingByThread({\n            orgId: sourceSession.orgId,\n            resourceId: thread.resourceId,\n            sessionId: thread.resourceId,\n            threadId,\n            rejectAmbiguous: true,\n          })\n        : null;\n    const owner = {\n      factoryProjectId: binding?.factoryProjectId ?? sourceSession.factoryProjectId,\n      orgId: sourceSession.orgId,\n      userId: sourceSession.userId,\n    };\n\n    const sessionModel = await resolveFactorySessionModel({\n      projects,\n      modelDefaults,\n      factoryProjectId: owner.factoryProjectId,\n      orgId: owner.orgId,\n      ownerUserId: owner.userId,\n      context: binding ? 'run' : 'session',\n    });\n\n    // Repo-backed Slack sessions use the source-control row's durable owner,\n    // never the sender, for both model and credential scope.\n    await session.state.set({\n      factoryProjectId: owner.factoryProjectId,\n      factoryModelScope: sessionModel.modelScope,\n      factoryOwnerUserId: owner.userId,\n    });\n    // Route the org through the seed helper rather than stamping it directly:\n    // an ungated dispatch marked this session unresolved above, and owner\n    // recovery is the resolution that has to clear that marker with it.\n    await seedSessionOrg(session, owner.orgId);\n    await primeTenantCredentialsForTenant({\n      orgId: owner.orgId,\n      userId: owner.userId,\n      credentialScope: sessionModel.modelScope,\n    });\n\n    const modeId = session.mode.get();\n    const activeThreadId = session.thread.getId();\n    const persistedModelId = await migratePersistedModelSelection({\n      getMetadata: async () =>\n        activeThreadId\n          ? (((await session.thread.getById({ threadId: activeThreadId }))?.metadata as\n              Record<string, unknown> | undefined) ?? {})\n          : {},\n      modeId,\n      set: (key: string, value: unknown) =>\n        activeThreadId ? session.thread.setSettingOn({ threadId: activeThreadId, key, value }) : Promise.resolve(),\n      threadId: activeThreadId ?? undefined,\n    });\n    if (persistedModelId) {\n      // Subagent models live in session state only, so restore the ones this\n      // thread pinned at its first start instead of re-resolving them.\n      for (const agentType of SUBAGENT_TYPES) {\n        const modelId = await session.thread.getSetting({ key: pinnedSubagentModelKey(agentType) });\n        if (typeof modelId === 'string') await applySubagentModel(session, agentType, modelId);\n      }\n    } else {\n      // `hydrateFactorySession` persists the scoped model, a connected provider's\n      // provider default, or the SDK mode default as this thread's model of record.\n      const selectedModelId =\n        (await hydrateFactorySession(session, {\n          orgId: owner.orgId,\n          modelScope: sessionModel.modelScope,\n          ownerUserId: owner.userId,\n          defaultModelId: sessionModel.modelId,\n        })) ?? session.model.get();\n\n      // Pin subagent models on the thread like the main model so a restart\n      // restores the selected scope's choice rather than re-resolving it.\n      for (const agentType of SUBAGENT_TYPES) {\n        if (!selectedModelId) continue;\n        if (await applySubagentModel(session, agentType, selectedModelId)) {\n          await session.thread.setSetting({ key: pinnedSubagentModelKey(agentType), value: selectedModelId });\n        }\n      }\n    }\n  };\n}\n\nconst SUBAGENT_TYPES = ['explore', 'plan', 'execute'] as const;\nconst pinnedSubagentModelKey = (agentType: string) => `slackSubagentModelId_${agentType}`;\n\n/** Best-effort: a subagent model that can't be applied must not fail the message. */\nasync function applySubagentModel(\n  session: Parameters<ChannelSessionStart>[0]['session'],\n  agentType: (typeof SUBAGENT_TYPES)[number],\n  modelId: string,\n): Promise<boolean> {\n  try {\n    await session.subagents.model.set({ modelId, agentType });\n    return true;\n  } catch (error) {\n    console.warn('[slack] Failed to apply the subagent model', {\n      agentType,\n      modelId,\n      error: error instanceof Error ? error.message : String(error),\n    });\n    return false;\n  }\n}\n\n/**\n * The internal Mastra thread the framework created for a channel conversation.\n * The handler's `thread.id` is the platform thread id (e.g. `slack:C123:ts`),\n * NOT the internal UUID — the mapping lives in the stored thread's channel\n * metadata.\n */\nasync function findInternalThread(mastra: Mastra | undefined, thread: HandlerThread) {\n  const store = await mastra?.getStorage()?.getStore('memory');\n  const { threads } = (await store?.listThreads({\n    filter: {\n      metadata: {\n        channel_platform: thread.adapter.name,\n        channel_externalThreadId: thread.id,\n        channel_externalChannelId: thread.channelId,\n      },\n    },\n    perPage: 1,\n  })) ?? { threads: [] };\n  return threads[0];\n}\n\nasync function prepareExistingSessionOwnerContext(\n  thread: HandlerThread,\n  deps: SlackChannelDeps,\n  ctx: ChannelHandlerContext,\n  options: { expectedOrgId?: string; senderUserId?: string; requireInternalThread: boolean },\n): Promise<'ready' | 'organization-mismatch' | 'access-denied'> {\n  const sourceControls = configuredSourceControls(deps);\n  if (sourceControls.length === 0 && !options.requireInternalThread) return 'ready';\n\n  const internalThread = await findInternalThread(ctx.mastra, thread);\n  if (!internalThread) {\n    if (options.requireInternalThread) {\n      throw new Error(`Could not resolve the internal Slack thread for ${thread.id}.`);\n    }\n    return 'ready';\n  }\n  if (sourceControls.length === 0 || internalThread.resourceId.startsWith('channel:')) return 'ready';\n  const sessions = createSourceControlSessionLookup(sourceControls);\n  const sessionRow = await sessions.getBySessionId(internalThread.resourceId);\n  if (\n    sessionRow &&\n    sessionRow.orgId === options.expectedOrgId &&\n    sessionRow.visibility === 'private' &&\n    sessionRow.userId !== options.senderUserId\n  ) {\n    return 'access-denied';\n  }\n  if (!options.expectedOrgId) {\n    throw new Error(\n      `Could not authorize the owner of Slack Factory session ${internalThread.resourceId}: the sender's account link has no organization.`,\n    );\n  }\n\n  const preparation = await prepareSessionRunContext(\n    ctx.requestContext,\n    internalThread.resourceId,\n    { sessions },\n    { expectedOrgId: options.expectedOrgId },\n  );\n  if (preparation === 'organization-mismatch') return preparation;\n  if (preparation !== 'prepared') {\n    const reason =\n      preparation === 'session-not-found'\n        ? 'no source-control session row exists for it, or its project repository row is missing'\n        : 'its source-control session row has no organization';\n    throw new Error(`Could not authorize the owner of Slack Factory session ${internalThread.resourceId}: ${reason}.`);\n  }\n  return 'ready';\n}\n\n/**\n * Build the \"new session\" handler for mention / direct-message events. A mention or\n * DM on a not-yet-subscribed thread starts a NEW session; once subscribed, later\n * events are follow-ups and don't re-announce.\n */\n/**\n * Run the account-link + factory-routing gates for one inbound message.\n * Returns `null` when the run must not dispatch (a prompt card was posted\n * where possible); otherwise the dispatch context — with `routed` present\n * only when a linked sender resolved to a factory.\n */\nasync function gateDispatch(\n  thread: HandlerThread,\n  message: HandlerMessage,\n  deps: SlackChannelDeps,\n  ctx: ChannelHandlerContext,\n  options: { requireInternalThread: boolean } = { requireInternalThread: false },\n): Promise<{\n  routed?: { link: ChannelAccountLink; factoryProjectId: string };\n} | null> {\n  const { accountLinks, projects } = deps;\n  const sender = await resolveLinkedSender({ thread, message, accountLinks });\n  if (sender.status === 'blocked') return null;\n  // Linked senders must also route to a Factory project before a run starts.\n  if (sender.status === 'linked' && accountLinks) {\n    // Stamp the tenant on the run's request context — the single seam\n    // `resolveCredentialStore` reads to load this sender's model credentials.\n    // This belongs to the link, not to the routing: a linked sender whose\n    // factory routing comes back `ungated` still exits below and dispatches, so\n    // stamping only in the routed branch would silently run them on default\n    // credentials.\n    ctx.requestContext.set('user', { id: sender.link.userId, organizationId: sender.link.orgId });\n    const ownerContext = await prepareExistingSessionOwnerContext(thread, deps, ctx, {\n      expectedOrgId: sender.link.orgId,\n      senderUserId: sender.link.userId,\n      requireInternalThread: options.requireInternalThread,\n    });\n    if (ownerContext === 'access-denied') {\n      await thread.post('This private Factory session belongs to another user.');\n      return null;\n    }\n    if (ownerContext === 'organization-mismatch') {\n      await thread.post('This thread belongs to a Factory session in another organization.');\n      return null;\n    }\n    // Credential resolution reads an in-memory snapshot that only priming\n    // fills, so prime whichever tenant now owns the run (the sender, or the\n    // existing session's owner) — otherwise a cold snapshot after a restart\n    // fails the run until that user happens to hit the web UI.\n    await primeTenantCredentialsForRequestContext(ctx.requestContext);\n\n    const route = await resolveFactoryForLink({ thread, ...sender, accountLinks, projects });\n    if (route.status === 'blocked') return null;\n    if (route.status === 'resolved') {\n      // The model runs with the session owner's credentials, but Factory tools\n      // must act as the authenticated Slack sender, not the session owner.\n      if (sender.link.orgId) {\n        ctx.requestContext.set(FACTORY_SLACK_SENDER_KEY, { userId: sender.link.userId, orgId: sender.link.orgId });\n        ctx.requestContext.set(FACTORY_INTERACTIVE_KEY, true);\n      }\n      return { routed: { link: sender.link, factoryProjectId: route.factoryProjectId } };\n    }\n  }\n  return {};\n}\n\n/**\n * A channel id and a `ts` name a thread only inside the workspace that issued\n * them, so the team scopes the card's key — without it two workspaces could\n * hold one key and an aside would land on another tenant's card.\n */\nexport function slackThreadSource(thread: HandlerThread, teamId?: string): ExternalWorkItemSource {\n  return {\n    integrationId: thread.adapter.name,\n    type: 'slack-thread',\n    ...(teamId ? { workspaceId: teamId } : {}),\n    externalId: thread.id,\n  };\n}\n\n/** Cards written before the key carried a team are still keyed bare. */\nasync function findThreadWorkItem(\n  workItems: WorkItemsStorage,\n  thread: HandlerThread,\n  teamId?: string,\n): Promise<WorkItemRow | null> {\n  const scoped = await workItems.getBySource(slackThreadSource(thread, teamId));\n  if (scoped || !teamId) return scoped;\n  return workItems.getBySource(slackThreadSource(thread));\n}\n\nfunction preDispatchErrorDetails(error: unknown): { message: string; cause?: { message: string } } {\n  const readMessage = (value: unknown) => {\n    const message =\n      typeof value === 'string'\n        ? value\n        : value && typeof value === 'object' && 'message' in value\n          ? value.message\n          : undefined;\n    return typeof message === 'string' && message.length > 0 ? message : undefined;\n  };\n  try {\n    const message = readMessage(error) ?? 'Unknown error';\n    const cause = error && typeof error === 'object' && 'cause' in error ? readMessage(error.cause) : undefined;\n    return { message, ...(cause ? { cause: { message: cause } } : {}) };\n  } catch {\n    return { message: 'Error details unavailable' };\n  }\n}\n\nasync function reportPreDispatchError(\n  thread: HandlerThread,\n  message: HandlerMessage,\n  ctx: ChannelHandlerContext,\n  error: unknown,\n): Promise<void> {\n  try {\n    if (error instanceof ChannelSessionRejectedError) return;\n  } catch {\n    // A thrown proxy can fail even the refusal check; still report the failure.\n  }\n  const correlation = {\n    platform: thread.adapter.name,\n    threadId: thread.id,\n    messageId: message.id,\n    authorId: message.author.userId,\n  };\n  const logger = typeof ctx.mastra?.getLogger === 'function' ? ctx.mastra.getLogger() : undefined;\n  const logError = (line: string) => (logger ? logger.error(line) : console.error(line));\n  logError(`[slack] Pre-dispatch failure ${JSON.stringify({ ...correlation, error: preDispatchErrorDetails(error) })}`);\n  try {\n    // The message id is the lookup key for the diagnostic above.\n    await thread.post(`Couldn’t start processing your message. Please try again.\\n\\`messageId: ${message.id}\\``);\n  } catch (deliveryError) {\n    logError(\n      `[slack] Failed to deliver pre-dispatch error reply ${JSON.stringify({ ...correlation, error: preDispatchErrorDetails(deliveryError) })}`,\n    );\n  }\n}\n\n/**\n * What the sender sees while nothing has been posted yet. Core's typing\n * wrapper only sets a status once the agent stream yields its first chunk,\n * and everything before that — credential priming, session rows, the\n * controller start hook, model time-to-first-token — is silent. Pin the same\n * status Factory's `typingStatus` uses for reasoning so the bot visibly\n * \"picks up\" as soon as the gate passes, and the stream's own status replaces\n * it without a visual change. Slack clears it on the first post; core clears\n * it when a run ends without posting.\n */\nconst EARLY_TYPING_STATUS = 'is thinking...';\n\nfunction acknowledgeReceipt(thread: HandlerThread, deps: SlackChannelDeps): void {\n  if (deps.adapterOptions?.typingStatus === false) return;\n  // Best-effort like every other status call: a failed status must not\n  // keep the run from starting.\n  void thread.startTyping(EARLY_TYPING_STATUS).catch(error => {\n    console.warn('[slack] early typing status failed', { thread: thread.id, error });\n  });\n}\n\nfunction createNewSessionChatHandler(deps: SlackChannelDeps): ChannelHandler {\n  return async (thread, message, defaultHandler, ctx) => {\n    // Gate on the sender having linked their Slack account to a Mastra tenant.\n    // Unlinked → post the ephemeral Connect card and stop; no session/run is\n    // created (which would otherwise be tenant-less and fail credential\n    // resolution). This handler is the only gate — core dispatches whatever\n    // reaches it — so every slot that can start a run must call it.\n    try {\n      if (!(await gateDispatch(thread, message, deps, ctx))) return;\n      // A mention on a not-yet-subscribed thread is a NEW session. The default\n      // handler auto-subscribes, so once subscribed this is a follow-up — the\n      // thread already carries its link. Factory posts nothing of its own:\n      // FactoryChannelSessionLinkProcessor emits the `Open session ↗` link right\n      // after the agent's first reply.\n      if (!(await thread.isSubscribed())) markNewChannelSession(ctx.requestContext);\n      acknowledgeReceipt(thread, deps);\n    } catch (error) {\n      await reportPreDispatchError(thread, message, ctx, error);\n      return;\n    }\n    await defaultHandler(thread, message);\n  };\n}\n\n/**\n * An `aside` never reaches the agent, but it is still part of the conversation:\n * record it on the card the thread already has. The link is resolved here rather\n * than through `gateDispatch`, which posts a Connect card an aside must not\n * trigger. Best-effort — nothing here may surface in the Slack thread.\n */\nasync function ingestAside(\n  thread: HandlerThread,\n  message: HandlerMessage,\n  { feed, workItems, accountLinks }: SlackChannelDeps,\n): Promise<void> {\n  if (!feed || !workItems) return;\n  const body = resolveEmojiShortcodes(message.text.replace(/^aside\\b[,:]?\\s*/i, '').trim());\n  if (!body) return;\n  try {\n    const teamId = slackTeamId(message);\n    const workItem = await findThreadWorkItem(workItems, thread, teamId);\n    if (!workItem) return;\n\n    const external: FactoryActorExternalIdentity = {\n      platform: thread.adapter.name,\n      ...(teamId ? { teamId } : {}),\n      messageId: message.id,\n      userId: message.author.userId,\n      userName: message.author.userName,\n      fullName: message.author.fullName,\n      isBot: message.author.isBot,\n    };\n    const link =\n      accountLinks && teamId\n        ? await accountLinks.getAccountLink({\n            platform: external.platform,\n            externalTeamId: teamId,\n            externalUserId: external.userId,\n          })\n        : null;\n\n    const result = await feed.createComment({\n      orgId: workItem.orgId,\n      workItemId: workItem.id,\n      author: actorFromChannelAuthor(external, link),\n      body,\n      occurredAt: message.metadata.dateSent,\n      externalSource: slackCommentSource(thread.id, message.id, teamId),\n    });\n    if (result.status !== 'created') {\n      console.warn('[slack] aside not ingested', { thread: thread.id, messageTs: message.id, status: result.status });\n    }\n  } catch (error) {\n    // Slack was acked before this handler ran, so a lost aside is never redelivered.\n    console.warn('[slack] aside ingest failed', { thread: thread.id, messageTs: message.id, error });\n  }\n}\n\nexport const createHandlers = (deps: SlackChannelDeps): ChannelHandlers => {\n  const newSessionChatHandler = createNewSessionChatHandler(deps);\n\n  return {\n    onSubscribedMessage: async (thread, message, defaultHandler, ctx) => {\n      // `aside` as its own leading word lets humans talk in a subscribed\n      // thread without the bot replying. Word boundary so messages that\n      // merely start with \"aside...\" (e.g. \"asides can wait\") still route.\n      if (/^aside\\b/i.test(message.text)) return ingestAside(thread, message, deps);\n      // A subscribed follow-up from an unlinked sender must not run either\n      // (e.g. the link was removed mid-conversation), and it must still\n      // resolve a factory (e.g. the default was cleared or its factory\n      // deleted mid-conversation).\n      try {\n        const gate = await gateDispatch(thread, message, deps, ctx, { requireInternalThread: true });\n        if (!gate) return;\n      } catch (error) {\n        await reportPreDispatchError(thread, message, ctx, error);\n        return;\n      }\n      acknowledgeReceipt(thread, deps);\n      await defaultHandler(thread, message);\n    },\n    onMention: newSessionChatHandler,\n    onDirectMessage: newSessionChatHandler,\n  };\n};\n\n/** Slack app credentials, passed in explicitly rather than read from env here. */\ninterface SlackCredentials {\n  clientId?: string;\n  clientSecret?: string;\n  signingSecret: string;\n  botToken?: string;\n}\n\nexport function createSlackChannelsConfig(deps: SlackChannelDeps & { slack: SlackCredentials }): FactoryChannelsConfig {\n  // Per HTTP attempt, not per call: the WebClient's own retry policy still\n  // waits out a 429. Without it a dead socket hangs a post forever.\n  const adapter = createSlackAdapter({ ...deps.slack, webClientOptions: { timeout: SLACK_REQUEST_TIMEOUT_MS } });\n  const slack =\n    deps.adapterOptions?.streaming === false\n      ? { adapter, ...deps.adapterOptions }\n      : { adapter, ...deps.adapterOptions, streaming: deps.adapterOptions?.streaming ?? true };\n\n  return {\n    adapters: { slack },\n    handlers: createHandlers(deps),\n    // New linked+repo-backed threads own a Factory user-session id as their\n    // resourceId, which is what makes the controller session repo-backed.\n    resolveResourceId: createChannelResourceIdResolver(deps),\n    resolveThreadId: resolveChannelThreadId,\n    resolveSession: createChannelSessionResolver(deps),\n    // Those sessions are created by the channel machinery, not the web kickoff,\n    // so this is where they pick up the factory's configuration.\n    onSessionStart: createChannelSessionStartHook(deps),\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;AA0DA,MAAM,2BAA2B;AAEjC,IAAM,yBAAN,cAAqC,MAAM,CAAC;AAwD5C,SAAS,yBAAyB,MAA+D;CAC/F,OAAO,KAAK,mBAAmB,KAAK,gBAAgB,CAAC,KAAK,aAAa,IAAI,CAAC;AAC9E;;;;;;AAOA,SAAS,UAAU,YAAyC;CAC1D,IAAI,CAAC,cAAc,OAAO,eAAe,UAAU,OAAO,KAAA;CAC1D,MAAM,MAAM;CACZ,IAAI,OAAO,IAAI,YAAY,YAAY,IAAI,SAAS,OAAO,IAAI;CAC/D,IAAI,OAAO,IAAI,SAAS,YAAY,IAAI,MAAM,OAAO,IAAI;CACzD,IAAI,IAAI,QAAQ,OAAO,IAAI,SAAS,UAAU;EAC5C,MAAM,KAAM,IAAI,KAA0B;EAC1C,IAAI,OAAO,OAAO,YAAY,IAAI,OAAO;CAC3C;AAEF;;;;;AAMA,SAAS,YAAY,SAA6C;CAChE,OAAO,UAAU,QAAQ,GAAG;AAC9B;;;;;;;AAQA,SAAS,eAAmC;CAC1C,OAAO,QAAQ,IAAI,yBAAyB,QAAQ,IAAI;AAC1D;;;;;;AAgBA,eAAsB,oBAAoB,EACxC,QACA,SACA,gBAK8B;CAC9B,IAAI,CAAC,cAAc,OAAO,EAAE,QAAQ,UAAU;CAC9C,MAAM,WAAW,OAAO,QAAQ;CAChC,MAAM,iBAAiB,QAAQ,OAAO;CACtC,MAAM,iBAAiB,YAAY,OAAO;CAG1C,MAAM,MAAM,iBAAiB;EAAE;EAAU;EAAgB;CAAe,IAAI,KAAA;CAC5E,MAAM,OAAO,MAAM,MAAM,aAAa,eAAe,GAAG,IAAI;CAC5D,IAAI,QAAQ,KAAK,OAAO;EAAE,QAAQ;EAAU;EAAM;CAAI;CAEtD,MAAM,YAAY,aAAa;CAI/B,IAAI,WACF,MAAM,OAAO,cAAc,QAAQ,QAAQ,iBAAiB,WAAW,MAAM,GAAG,EAAE,cAAc,KAAK,CAAC;CAExG,OAAO,EAAE,QAAQ,UAAU;AAC7B;AAEA,MAAM,aAAa,WAA2B,OAAO,OAAO,qBAAqB;;;;;;AAOjF,SAAS,iBAAiB,WAAmB,QAAuB;CAClE,OAAO,KAAK;EACV,OAAO;EACP,UAAU,CACR,SAAS,gDAAgD,UAAU,MAAM,EAAE,EAAE,GAC7E,QAAQ,CACN,WAAW;GACT,KAAK,GAAG,UAAU;GAClB,OAAO;EACT,CAAC,CACH,CAAC,CACH;CACF,CAAC;AACH;;;;;;;;;;;;AAsBA,eAAsB,sBAAsB,EAC1C,QACA,MACA,KACA,cACA,YAO8B;CAC9B,IAAI,CAAC,UAAU,OAAO,EAAE,QAAQ,UAAU;CAG1C,MAAM,QAAQ,KAAK,SAAS;CAE5B,IAAI,KAAK,yBAAyB;EAChC,MAAM,WAAW,MAAM,SAAS,IAAI;GAAE;GAAO,IAAI,KAAK;EAAwB,CAAC;EAC/E,IAAI,UACF,OAAO;GAAE,QAAQ;GAAY,kBAAkB,SAAS;EAAG;CAE/D;CAEA,MAAM,YAAY,QAAQ,MAAM,SAAS,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC;CAC5D,IAAI,UAAU,WAAW,GAAG;EAC1B,MAAM,OAAO,UAAU;EACvB,MAAM,aAAa,kBAAkB;GAAE,GAAG;GAAK,QAAQ,KAAK;GAAQ,kBAAkB,KAAK;EAAG,CAAC;EAC/F,OAAO;GAAE,QAAQ;GAAY,kBAAkB,KAAK;EAAG;CACzD;CAEA,MAAM,YAAY,aAAa;CAC/B,IAAI,WACF,MAAM,OAAO,KACX,KAAK;EACH,OAAO;EACP,UAAU,CACR,SACE,UAAU,WAAW,IACjB,oEAAoE,UAAU,MAAM,EAAE,KACtF,wFAAwF,UAAU,MAAM,EAAE,EAChH,GACA,QAAQ,CACN,WAAW;GACT,KAAK,GAAG,UAAU;GAClB,OAAO;EACT,CAAC,CACH,CAAC,CACH;CACF,CAAC,CACH;CAEF,OAAO,EAAE,QAAQ,UAAU;AAC7B;;;;;;;;;;;;AAaA,SAAS,aAAa,UAA0B;CAG9C,OAAO,UAFU,SAAS,MAAM,GACZ,CAAC,CAAC,UAAS,YAAW,QAAQ,SAAS,CAAC,KAAK,SAAA,CAC5C,QAAQ,oBAAoB,GAAG;AACtD;;;;;;;;;;;;;;;;;;;;;;;;;;;AA4BA,SAAgB,gCAAgC,MAA2C;CACzF,MAAM,EAAE,cAAc,aAAa;CACnC,MAAM,iBAAiB,yBAAyB,IAAI;CACpD,OAAO,OAAO,EAAE,UAAU,QAAQ,cAAc;EAM9C,MAAM,qBAAqB,WAAW,OAAO;EAK7C,IAAI,CAAC,gBAAgB,CAAC,YAAY,eAAe,WAAW,GAAG,OAAO;EAGtE,IAAI,CAAC,QAAQ,OAAO,QAAQ,OAAO;EAEnC,MAAM,iBAAiB,UAAU,QAAQ,GAAG;EAC5C,IAAI,CAAC,gBACH,MAAM,IAAI,4BAA4B,wEAAwE;EAEhH,IAAI;GACF,MAAM,OAAO,MAAM,aAAa,eAAe;IAC7C;IACA;IACA,gBAAgB,QAAQ,OAAO;GACjC,CAAC;GACD,IAAI,CAAC,MACH,MAAM,IAAI,4BACR,gBAAgB,QAAQ,OAAO,OAAO,oCACxC;GAMF,MAAM,QAAQ,KAAK,SAAS;GAC5B,IAAI;GACJ,IAAI,KAAK,2BAA4B,MAAM,SAAS,IAAI;IAAE;IAAO,IAAI,KAAK;GAAwB,CAAC,GACjG,mBAAmB,KAAK;QACnB,IAAI,OAAO;IAChB,MAAM,YAAY,MAAM,SAAS,KAAK,EAAE,MAAM,CAAC;IAC/C,IAAI,UAAU,WAAW,GAAG,mBAAmB,UAAU,EAAE,CAAE;GAC/D;GACA,IAAI,CAAC,kBACH,MAAM,IAAI,4BAA4B,uBAAuB,QAAQ,OAAO,OAAO,wBAAwB;GAO7G,MAAM,gBAAgB,MAAM,4BAA4B;IAAE;IAAgB;IAAO;GAAiB,CAAC;GACnG,IAAI,CAAC,eAIH,MAAM,IAAI,wBACR,MAJwB,QAAQ,IAChC,eAAe,KAAI,kBAAiB,cAAc,YAAY,KAAK;IAAE;IAAO;GAAiB,CAAC,CAAC,CACjG,EAEE,CAAY,MAAK,SAAQ,KAAK,SAAS,CAAC,IACpC,0EACA,4EACN;GAIF,MAAM,OAAO,MAAM,oCAAoC;IAAE;IAAe;IAAO;GAAiB,CAAC;GACjG,IAAI,CAAC,KAAK,OACR,MAAM,IAAI,uBACR,KAAK,WAAW,eACZ,+EACA,uEACN;GAGF,MAAM,SAAS,aAAa,OAAO,EAAE;GAKrC,MAAM,WAAW,MAAM,cAAc,SAAS,aAAa;IACzD;IACA,QAAQ,KAAK;IACb;GACF,CAAC;GACD,IAAI,UAAU,OAAO,SAAS;GAY9B,QAAO,MAXe,cAAc,SAAS,OAAO;IAClD,WAAW,WAAW,OAAO,WAAW;IACxC,qBAAqB,KAAK;IAC1B;IACA;IACA,QAAQ,KAAK;IACb;IACA,YAAY,KAAK;IAEjB,YAAY,OAAO,OAAO,YAAY;GACxC,CAAC,EAAA,CACc;EACjB,SAAS,OAAO;GACd,IAAI,iBAAiB,+BAA+B,iBAAiB,wBAAwB,MAAM;GACnG,IAAI,iBAAiB,mCACnB,MAAM,IAAI,uBACR,gHACA,EAAE,OAAO,MAAM,CACjB;GAEF,QAAQ,MAAM,0DAA0D,OAAO,IAAI,KAAK;GACxF,MAAM,IAAI,uBAAuB,gEAAgE,EAC/F,OAAO,MACT,CAAC;EACH;CACF;AACF;;;;;;;;;;AAWA,MAAa,0BAA2C,EAAE,YAAY,sBACpE,WAAW,WAAW,UAAU,IAAI,kBAAkB;;AAGxD,SAAgB,6BAA6B,MAA+C;CAC1F,MAAM,wBAAwB,iCAAiC,yBAAyB,IAAI,CAAC;CAC7F,OAAO,OAAO,EAAE,YAAY,QAAQ,qBAAqB;EACvD,MAAM,gBAAgB,OAAO,WAAW,WAAW,UAAU,IACzD,OACA,MAAM,sBAAsB,4BAA4B,OAAO,UAAU;EAC7E,MAAM,UAAU,gBAAgB,MAAM,cAAc,SAAS,eAAe,OAAO,UAAU,IAAI;EACjG,OAAO,WAAW,cAAc;GAC9B,IAAI,OAAO;GACX,SAAS,WAAW;GACpB,YAAY,OAAO;GAGnB,UAAU,OAAO;GACjB;GACA,GAAI,SAAS,mBAAmB,EAAE,MAAM,EAAE,kBAAkB,QAAQ,iBAAiB,EAAE,IAAI,CAAC;EAC9F,CAAC;CACH;AACF;;;;;;;;;;;;;;;;;;;;;;;;AAyBA,SAAgB,8BAA8B,MAA6C;CACzF,MAAM,EAAE,UAAU,kBAAkB;CACpC,MAAM,wBAAwB,iCAAiC,yBAAyB,IAAI,CAAC;CAC7F,OAAO,OAAO,EAAE,SAAS,QAAQ,qBAAqB;EAOpD,MAAM,eAAe,SAAS,wBAAwB,cAAc,CAAC;EAErE,IAAI,CAAC,UAAU;EACf,IAAI,OAAO,WAAW,WAAW,UAAU,GAAG;EAE9C,MAAM,gBAAgB,MAAM,sBAAsB,4BAA4B,OAAO,UAAU;EAC/F,IAAI,CAAC,eAAe;EACpB,MAAM,gBAAgB,MAAM,cAAc,SAAS,eAAe,OAAO,UAAU;EACnF,IAAI,CAAC,eAAe,kBAAkB;EACtC,MAAM,WAAW,QAAQ,OAAO,MAAM;EACtC,MAAM,UACJ,YAAY,KAAK,YACb,MAAM,KAAK,UAAU,uBAAuB;GAC1C,OAAO,cAAc;GACrB,YAAY,OAAO;GACnB,WAAW,OAAO;GAClB;GACA,iBAAiB;EACnB,CAAC,IACD;EACN,MAAM,QAAQ;GACZ,kBAAkB,SAAS,oBAAoB,cAAc;GAC7D,OAAO,cAAc;GACrB,QAAQ,cAAc;EACxB;EAEA,MAAM,eAAe,MAAM,2BAA2B;GACpD;GACA;GACA,kBAAkB,MAAM;GACxB,OAAO,MAAM;GACb,aAAa,MAAM;GACnB,SAAS,UAAU,QAAQ;EAC7B,CAAC;EAID,MAAM,QAAQ,MAAM,IAAI;GACtB,kBAAkB,MAAM;GACxB,mBAAmB,aAAa;GAChC,oBAAoB,MAAM;EAC5B,CAAC;EAID,MAAM,eAAe,SAAS,MAAM,KAAK;EACzC,MAAM,gCAAgC;GACpC,OAAO,MAAM;GACb,QAAQ,MAAM;GACd,iBAAiB,aAAa;EAChC,CAAC;EAED,MAAM,SAAS,QAAQ,KAAK,IAAI;EAChC,MAAM,iBAAiB,QAAQ,OAAO,MAAM;EAY5C,IAAI,MAX2B,+BAA+B;GAC5D,aAAa,YACX,kBACO,MAAM,QAAQ,OAAO,QAAQ,EAAE,UAAU,eAAe,CAAC,EAAA,EAAI,YACtB,CAAC,IAC3C,CAAC;GACP;GACA,MAAM,KAAa,UACjB,iBAAiB,QAAQ,OAAO,aAAa;IAAE,UAAU;IAAgB;IAAK;GAAM,CAAC,IAAI,QAAQ,QAAQ;GAC3G,UAAU,kBAAkB,KAAA;EAC9B,CAAC,GAIC,KAAK,MAAM,aAAa,gBAAgB;GACtC,MAAM,UAAU,MAAM,QAAQ,OAAO,WAAW,EAAE,KAAK,uBAAuB,SAAS,EAAE,CAAC;GAC1F,IAAI,OAAO,YAAY,UAAU,MAAM,mBAAmB,SAAS,WAAW,OAAO;EACvF;OACK;GAGL,MAAM,kBACH,MAAM,sBAAsB,SAAS;IACpC,OAAO,MAAM;IACb,YAAY,aAAa;IACzB,aAAa,MAAM;IACnB,gBAAgB,aAAa;GAC/B,CAAC,KAAM,QAAQ,MAAM,IAAI;GAI3B,KAAK,MAAM,aAAa,gBAAgB;IACtC,IAAI,CAAC,iBAAiB;IACtB,IAAI,MAAM,mBAAmB,SAAS,WAAW,eAAe,GAC9D,MAAM,QAAQ,OAAO,WAAW;KAAE,KAAK,uBAAuB,SAAS;KAAG,OAAO;IAAgB,CAAC;GAEtG;EACF;CACF;AACF;AAEA,MAAM,iBAAiB;CAAC;CAAW;CAAQ;AAAS;AACpD,MAAM,0BAA0B,cAAsB,wBAAwB;;AAG9E,eAAe,mBACb,SACA,WACA,SACkB;CAClB,IAAI;EACF,MAAM,QAAQ,UAAU,MAAM,IAAI;GAAE;GAAS;EAAU,CAAC;EACxD,OAAO;CACT,SAAS,OAAO;EACd,QAAQ,KAAK,8CAA8C;GACzD;GACA;GACA,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;EAC9D,CAAC;EACD,OAAO;CACT;AACF;;;;;;;AAQA,eAAe,mBAAmB,QAA4B,QAAuB;CAEnF,MAAM,EAAE,YAAa,OAAM,MADP,QAAQ,WAAW,CAAC,EAAE,SAAS,QAAQ,EAAA,EACzB,YAAY;EAC5C,QAAQ,EACN,UAAU;GACR,kBAAkB,OAAO,QAAQ;GACjC,0BAA0B,OAAO;GACjC,2BAA2B,OAAO;EACpC,EACF;EACA,SAAS;CACX,CAAC,KAAM,EAAE,SAAS,CAAC,EAAE;CACrB,OAAO,QAAQ;AACjB;AAEA,eAAe,mCACb,QACA,MACA,KACA,SAC8D;CAC9D,MAAM,iBAAiB,yBAAyB,IAAI;CACpD,IAAI,eAAe,WAAW,KAAK,CAAC,QAAQ,uBAAuB,OAAO;CAE1E,MAAM,iBAAiB,MAAM,mBAAmB,IAAI,QAAQ,MAAM;CAClE,IAAI,CAAC,gBAAgB;EACnB,IAAI,QAAQ,uBACV,MAAM,IAAI,MAAM,mDAAmD,OAAO,GAAG,EAAE;EAEjF,OAAO;CACT;CACA,IAAI,eAAe,WAAW,KAAK,eAAe,WAAW,WAAW,UAAU,GAAG,OAAO;CAC5F,MAAM,WAAW,iCAAiC,cAAc;CAChE,MAAM,aAAa,MAAM,SAAS,eAAe,eAAe,UAAU;CAC1E,IACE,cACA,WAAW,UAAU,QAAQ,iBAC7B,WAAW,eAAe,aAC1B,WAAW,WAAW,QAAQ,cAE9B,OAAO;CAET,IAAI,CAAC,QAAQ,eACX,MAAM,IAAI,MACR,0DAA0D,eAAe,WAAW,iDACtF;CAGF,MAAM,cAAc,MAAM,yBACxB,IAAI,gBACJ,eAAe,YACf,EAAE,SAAS,GACX,EAAE,eAAe,QAAQ,cAAc,CACzC;CACA,IAAI,gBAAgB,yBAAyB,OAAO;CACpD,IAAI,gBAAgB,YAAY;EAC9B,MAAM,SACJ,gBAAgB,sBACZ,0FACA;EACN,MAAM,IAAI,MAAM,0DAA0D,eAAe,WAAW,IAAI,OAAO,EAAE;CACnH;CACA,OAAO;AACT;;;;;;;;;;;;AAaA,eAAe,aACb,QACA,SACA,MACA,KACA,UAA8C,EAAE,uBAAuB,MAAM,GAGrE;CACR,MAAM,EAAE,cAAc,aAAa;CACnC,MAAM,SAAS,MAAM,oBAAoB;EAAE;EAAQ;EAAS;CAAa,CAAC;CAC1E,IAAI,OAAO,WAAW,WAAW,OAAO;CAExC,IAAI,OAAO,WAAW,YAAY,cAAc;EAO9C,IAAI,eAAe,IAAI,QAAQ;GAAE,IAAI,OAAO,KAAK;GAAQ,gBAAgB,OAAO,KAAK;EAAM,CAAC;EAC5F,MAAM,eAAe,MAAM,mCAAmC,QAAQ,MAAM,KAAK;GAC/E,eAAe,OAAO,KAAK;GAC3B,cAAc,OAAO,KAAK;GAC1B,uBAAuB,QAAQ;EACjC,CAAC;EACD,IAAI,iBAAiB,iBAAiB;GACpC,MAAM,OAAO,KAAK,uDAAuD;GACzE,OAAO;EACT;EACA,IAAI,iBAAiB,yBAAyB;GAC5C,MAAM,OAAO,KAAK,mEAAmE;GACrF,OAAO;EACT;EAKA,MAAM,wCAAwC,IAAI,cAAc;EAEhE,MAAM,QAAQ,MAAM,sBAAsB;GAAE;GAAQ,GAAG;GAAQ;GAAc;EAAS,CAAC;EACvF,IAAI,MAAM,WAAW,WAAW,OAAO;EACvC,IAAI,MAAM,WAAW,YAAY;GAG/B,IAAI,OAAO,KAAK,OAAO;IACrB,IAAI,eAAe,IAAI,0BAA0B;KAAE,QAAQ,OAAO,KAAK;KAAQ,OAAO,OAAO,KAAK;IAAM,CAAC;IACzG,IAAI,eAAe,IAAI,yBAAyB,IAAI;GACtD;GACA,OAAO,EAAE,QAAQ;IAAE,MAAM,OAAO;IAAM,kBAAkB,MAAM;GAAiB,EAAE;EACnF;CACF;CACA,OAAO,CAAC;AACV;;;;;;AAOA,SAAgB,kBAAkB,QAAuB,QAAyC;CAChG,OAAO;EACL,eAAe,OAAO,QAAQ;EAC9B,MAAM;EACN,GAAI,SAAS,EAAE,aAAa,OAAO,IAAI,CAAC;EACxC,YAAY,OAAO;CACrB;AACF;;AAGA,eAAe,mBACb,WACA,QACA,QAC6B;CAC7B,MAAM,SAAS,MAAM,UAAU,YAAY,kBAAkB,QAAQ,MAAM,CAAC;CAC5E,IAAI,UAAU,CAAC,QAAQ,OAAO;CAC9B,OAAO,UAAU,YAAY,kBAAkB,MAAM,CAAC;AACxD;AAEA,SAAS,wBAAwB,OAAkE;CACjG,MAAM,eAAe,UAAmB;EACtC,MAAM,UACJ,OAAO,UAAU,WACb,QACA,SAAS,OAAO,UAAU,YAAY,aAAa,QACjD,MAAM,UACN,KAAA;EACR,OAAO,OAAO,YAAY,YAAY,QAAQ,SAAS,IAAI,UAAU,KAAA;CACvE;CACA,IAAI;EACF,MAAM,UAAU,YAAY,KAAK,KAAK;EACtC,MAAM,QAAQ,SAAS,OAAO,UAAU,YAAY,WAAW,QAAQ,YAAY,MAAM,KAAK,IAAI,KAAA;EAClG,OAAO;GAAE;GAAS,GAAI,QAAQ,EAAE,OAAO,EAAE,SAAS,MAAM,EAAE,IAAI,CAAC;EAAG;CACpE,QAAQ;EACN,OAAO,EAAE,SAAS,4BAA4B;CAChD;AACF;AAEA,eAAe,uBACb,QACA,SACA,KACA,OACe;CACf,IAAI;EACF,IAAI,iBAAiB,6BAA6B;CACpD,QAAQ,CAER;CACA,MAAM,cAAc;EAClB,UAAU,OAAO,QAAQ;EACzB,UAAU,OAAO;EACjB,WAAW,QAAQ;EACnB,UAAU,QAAQ,OAAO;CAC3B;CACA,MAAM,SAAS,OAAO,IAAI,QAAQ,cAAc,aAAa,IAAI,OAAO,UAAU,IAAI,KAAA;CACtF,MAAM,YAAY,SAAkB,SAAS,OAAO,MAAM,IAAI,IAAI,QAAQ,MAAM,IAAI;CACpF,SAAS,gCAAgC,KAAK,UAAU;EAAE,GAAG;EAAa,OAAO,wBAAwB,KAAK;CAAE,CAAC,GAAG;CACpH,IAAI;EAEF,MAAM,OAAO,KAAK,2EAA2E,QAAQ,GAAG,GAAG;CAC7G,SAAS,eAAe;EACtB,SACE,sDAAsD,KAAK,UAAU;GAAE,GAAG;GAAa,OAAO,wBAAwB,aAAa;EAAE,CAAC,GACxI;CACF;AACF;;;;;;;;;;;AAYA,MAAM,sBAAsB;AAE5B,SAAS,mBAAmB,QAAuB,MAA8B;CAC/E,IAAI,KAAK,gBAAgB,iBAAiB,OAAO;CAGjD,OAAY,YAAY,mBAAmB,CAAC,CAAC,OAAM,UAAS;EAC1D,QAAQ,KAAK,sCAAsC;GAAE,QAAQ,OAAO;GAAI;EAAM,CAAC;CACjF,CAAC;AACH;AAEA,SAAS,4BAA4B,MAAwC;CAC3E,OAAO,OAAO,QAAQ,SAAS,gBAAgB,QAAQ;EAMrD,IAAI;GACF,IAAI,CAAE,MAAM,aAAa,QAAQ,SAAS,MAAM,GAAG,GAAI;GAMvD,IAAI,CAAE,MAAM,OAAO,aAAa,GAAI,sBAAsB,IAAI,cAAc;GAC5E,mBAAmB,QAAQ,IAAI;EACjC,SAAS,OAAO;GACd,MAAM,uBAAuB,QAAQ,SAAS,KAAK,KAAK;GACxD;EACF;EACA,MAAM,eAAe,QAAQ,OAAO;CACtC;AACF;;;;;;;AAQA,eAAe,YACb,QACA,SACA,EAAE,MAAM,WAAW,gBACJ;CACf,IAAI,CAAC,QAAQ,CAAC,WAAW;CACzB,MAAM,OAAO,uBAAuB,QAAQ,KAAK,QAAQ,qBAAqB,EAAE,CAAC,CAAC,KAAK,CAAC;CACxF,IAAI,CAAC,MAAM;CACX,IAAI;EACF,MAAM,SAAS,YAAY,OAAO;EAClC,MAAM,WAAW,MAAM,mBAAmB,WAAW,QAAQ,MAAM;EACnE,IAAI,CAAC,UAAU;EAEf,MAAM,WAAyC;GAC7C,UAAU,OAAO,QAAQ;GACzB,GAAI,SAAS,EAAE,OAAO,IAAI,CAAC;GAC3B,WAAW,QAAQ;GACnB,QAAQ,QAAQ,OAAO;GACvB,UAAU,QAAQ,OAAO;GACzB,UAAU,QAAQ,OAAO;GACzB,OAAO,QAAQ,OAAO;EACxB;EACA,MAAM,OACJ,gBAAgB,SACZ,MAAM,aAAa,eAAe;GAChC,UAAU,SAAS;GACnB,gBAAgB;GAChB,gBAAgB,SAAS;EAC3B,CAAC,IACD;EAEN,MAAM,SAAS,MAAM,KAAK,cAAc;GACtC,OAAO,SAAS;GAChB,YAAY,SAAS;GACrB,QAAQ,uBAAuB,UAAU,IAAI;GAC7C;GACA,YAAY,QAAQ,SAAS;GAC7B,gBAAgB,mBAAmB,OAAO,IAAI,QAAQ,IAAI,MAAM;EAClE,CAAC;EACD,IAAI,OAAO,WAAW,WACpB,QAAQ,KAAK,8BAA8B;GAAE,QAAQ,OAAO;GAAI,WAAW,QAAQ;GAAI,QAAQ,OAAO;EAAO,CAAC;CAElH,SAAS,OAAO;EAEd,QAAQ,KAAK,+BAA+B;GAAE,QAAQ,OAAO;GAAI,WAAW,QAAQ;GAAI;EAAM,CAAC;CACjG;AACF;AAEA,MAAa,kBAAkB,SAA4C;CACzE,MAAM,wBAAwB,4BAA4B,IAAI;CAE9D,OAAO;EACL,qBAAqB,OAAO,QAAQ,SAAS,gBAAgB,QAAQ;GAInE,IAAI,YAAY,KAAK,QAAQ,IAAI,GAAG,OAAO,YAAY,QAAQ,SAAS,IAAI;GAK5E,IAAI;IAEF,IAAI,CAAC,MADc,aAAa,QAAQ,SAAS,MAAM,KAAK,EAAE,uBAAuB,KAAK,CAAC,GAChF;GACb,SAAS,OAAO;IACd,MAAM,uBAAuB,QAAQ,SAAS,KAAK,KAAK;IACxD;GACF;GACA,mBAAmB,QAAQ,IAAI;GAC/B,MAAM,eAAe,QAAQ,OAAO;EACtC;EACA,WAAW;EACX,iBAAiB;CACnB;AACF;AAUA,SAAgB,0BAA0B,MAA6E;CAGrH,MAAM,UAAU,mBAAmB;EAAE,GAAG,KAAK;EAAO,kBAAkB,EAAE,SAAS,yBAAyB;CAAE,CAAC;CAM7G,OAAO;EACL,UAAU,EAAE,OALZ,KAAK,gBAAgB,cAAc,QAC/B;GAAE;GAAS,GAAG,KAAK;EAAe,IAClC;GAAE;GAAS,GAAG,KAAK;GAAgB,WAAW,KAAK,gBAAgB,aAAa;EAAK,EAGvE;EAClB,UAAU,eAAe,IAAI;EAG7B,mBAAmB,gCAAgC,IAAI;EACvD,iBAAiB;EACjB,gBAAgB,6BAA6B,IAAI;EAGjD,gBAAgB,8BAA8B,IAAI;CACpD;AACF"}
+{"version":3,"file":"slack.js","names":[],"sources":["../../../src/integrations/slack/slack.ts"],"sourcesContent":["import { migratePersistedModelSelection } from '@mastra/core/agent-controller';\nimport { ChannelSessionRejectedError } from '@mastra/core/channels';\nimport type {\n  ChannelHandler,\n  ChannelHandlerContext,\n  ChannelHandlers,\n  ChannelSessionResolve,\n  ChannelSessionStart,\n  ResolveResourceId,\n  ResolveThreadId,\n} from '@mastra/core/channels';\nimport type { Mastra } from '@mastra/core/mastra';\nimport { createSlackAdapter } from '@mastra/slack';\nimport type { SlackAdapterChannelConfig } from '@mastra/slack';\nimport { Card, CardText, Actions, LinkButton } from 'chat';\n\nimport { FACTORY_INTERACTIVE_KEY } from '../../auth.js';\nimport {\n  primeTenantCredentialsForRequestContext,\n  primeTenantCredentialsForTenant,\n} from '../../routes/tenant-credentials.js';\nimport {\n  createSourceControlSessionLookup,\n  FactorySourceControlConflictError,\n  hydrateFactorySession,\n  resolveFactorySessionModel,\n  resolveFactorySourceControl,\n  resolvePrimaryEnvironmentRepository,\n} from '../../session/factory-session.js';\nimport { readRequestContextOrgId, seedSessionOrg } from '../../session/org-seed.js';\nimport { isRunBound, memoryResourceOf, sessionStampCounts } from '../../session/session-threads.js';\nimport type { SessionRunBindings } from '../../session/session-threads.js';\nimport type {\n  ChannelAccountLink,\n  ChannelAccountLinkKey,\n  ChannelIdentityStorage,\n} from '../../storage/domains/channel-identity/base.js';\nimport type { FactoryActorExternalIdentity } from '../../storage/domains/comments/actor.js';\nimport { actorFromChannelAuthor } from '../../storage/domains/comments/actor.js';\nimport type { CommentsDomain } from '../../storage/domains/comments/domain.js';\nimport type { ModelDefaultsStorage } from '../../storage/domains/model-defaults/base.js';\nimport type { FactoryProjectsStorage } from '../../storage/domains/projects/base.js';\nimport type { SourceControlStorageHandle } from '../../storage/domains/source-control/base.js';\nimport type { ExternalWorkItemSource, WorkItemRow, WorkItemsStorage } from '../../storage/domains/work-items/base.js';\nimport { FACTORY_SLACK_SENDER_KEY } from '../../tools/scope.js';\nimport type { FactoryChannelsConfig } from '../base.js';\nimport { prepareSessionRunContext } from '../subscription-session.js';\nimport { markNewChannelSession } from './channel-session-link-processor.js';\n\nimport { resolveEmojiShortcodes } from './emoji.js';\nimport { slackCommentSource } from './feed-publisher.js';\n\n// Derive the thread/message types from the core handler signature rather than\n// importing them from `chat` directly: mc-web can resolve a different `chat`\n// version than @mastra/core, and the two `Thread`/`Message` declarations are\n// structurally incompatible (private fields). Using the handler's own types\n// keeps everything on one version.\ntype HandlerThread = Parameters<ChannelHandler>[0];\ntype HandlerMessage = Parameters<ChannelHandler>[1];\n\nconst SLACK_REQUEST_TIMEOUT_MS = 15_000;\n\nclass SlackSessionStartError extends Error {}\n\n/** Dependencies the Slack channel handlers close over, injected from the web entry. */\ninterface SlackChannelDeps {\n  /**\n   * The factory's reverse-index store mapping a Slack sender to a Mastra\n   * tenant. When provided, inbound messages from an unlinked sender are not\n   * dispatched — the run only proceeds (with the sender's tenant stamped on\n   * the request context) once they've linked their account. Unlinked senders\n   * get an ephemeral \"connect your account\" card instead.\n   */\n  accountLinks?: ChannelIdentityStorage;\n  /**\n   * Factory projects domain. When provided (alongside `accountLinks`), a\n   * linked sender's run must also resolve to a Factory project before it\n   * dispatches: their link's default factory, else their tenant's only\n   * factory (stamped back onto the link), else a \"pick a default factory\"\n   * card posted in the thread and no run. Unset → no factory routing (runs\n   * dispatch as before).\n   */\n  projects?: FactoryProjectsStorage;\n  /**\n   * Storage handle of the integration that owns source control\n   * (`IntegrationContext.storage.sourceControlOwner`). Used to make new Slack\n   * threads repo-backed: when the sender is linked and their factory has a\n   * repository, the thread's resourceId becomes a Factory user-session id (repo\n   * cloned on a `slack/{threadTs}` branch) instead of the chat-only\n   * `channel:...` id. It also lets a started session read back the project it\n   * belongs to. Nothing here is provider-specific — the connection is matched\n   * by the handle's own `integrationId`. Absent (no source-control integration\n   * registered) → chat-only sessions as before.\n   */\n  sourceControl?: SourceControlStorageHandle;\n  /** Registered source-control partitions used to select the provider linked to each Factory project. */\n  sourceControls?: readonly SourceControlStorageHandle[];\n  /**\n   * Model-defaults domain. When provided, a new repo-backed session starts on\n   * the linked sender's default model before the factory's shared default. Read\n   * once, when the thread's build model is first chosen; the choice is persisted\n   * on the thread and never re-resolved. Unset → the factory default, as before.\n   */\n  modelDefaults?: ModelDefaultsStorage;\n  /**\n   * Factory work-items domain, used to find the card a Slack thread already\n   * has so an `aside` can land on it. New threads never create cards.\n   */\n  workItems?: WorkItemsStorage;\n  /**\n   * Work-item feed. With it (and `workItems`), an `aside` lands as a comment on\n   * the card the thread already has. Unset → asides stay ignored, as before.\n   */\n  feed?: Pick<CommentsDomain, 'createComment'>;\n  /** Overrides applied to the Slack channel adapter entry. */\n  adapterOptions?: SlackAdapterChannelConfig;\n}\n\nfunction configuredSourceControls(deps: SlackChannelDeps): readonly SourceControlStorageHandle[] {\n  return deps.sourceControls ?? (deps.sourceControl ? [deps.sourceControl] : []);\n}\n\n/**\n * Read the Slack team id off a raw platform payload (Events API envelope or\n * slash-command body — both carry `team_id`), duck-typed to build the\n * workspace-scoped account-link key.\n */\nfunction rawTeamId(rawPayload: unknown): string | undefined {\n  if (!rawPayload || typeof rawPayload !== 'object') return undefined;\n  const raw = rawPayload as { team_id?: unknown; team?: unknown };\n  if (typeof raw.team_id === 'string' && raw.team_id) return raw.team_id;\n  if (typeof raw.team === 'string' && raw.team) return raw.team;\n  if (raw.team && typeof raw.team === 'object') {\n    const id = (raw.team as { id?: unknown }).id;\n    if (typeof id === 'string' && id) return id;\n  }\n  return undefined;\n}\n\n/**\n * The Slack team id survives onto a normalized chat Message only on\n * `message.raw` (the Slack Events API envelope).\n */\nfunction slackTeamId(message: HandlerMessage): string | undefined {\n  return rawTeamId(message.raw);\n}\n\n/**\n * Resolve the web-UI origin for links humans open in a browser (Connect card,\n * session deep links). Prefers `MASTRACODE_PUBLIC_URL` — the origin auth\n * cookies and OAuth redirect allow-lists are registered against — over the\n * channels tunnel, which only Slack's servers need to reach.\n */\nfunction webPublicUrl(): string | undefined {\n  return process.env.MASTRACODE_PUBLIC_URL ?? process.env.MASTRACODE_CHANNELS_PUBLIC_URL;\n}\n\n/** Outcome of the sender-link gate for one inbound message. */\ntype LinkedSenderResult =\n  /** Gating not configured — dispatch as before account linking existed. */\n  | { status: 'ungated' }\n  /** Sender unlinked — Connect card posted (when possible), do not dispatch. */\n  | { status: 'blocked' }\n  /** Sender linked — their tenant plus the sender key the link lives under. */\n  | { status: 'linked'; link: ChannelAccountLink; key: ChannelAccountLinkKey };\n\n/**\n * Resolve the sender's account link, posting an ephemeral \"connect your\n * account\" card (visible only to the sender) linking into the web UI's\n * Slack-connect flow when they're unlinked.\n */\nexport async function resolveLinkedSender({\n  thread,\n  message,\n  accountLinks,\n}: {\n  thread: HandlerThread;\n  message: HandlerMessage;\n  accountLinks?: ChannelIdentityStorage;\n}): Promise<LinkedSenderResult> {\n  if (!accountLinks) return { status: 'ungated' };\n  const platform = thread.adapter.name;\n  const externalUserId = message.author.userId;\n  const externalTeamId = slackTeamId(message);\n  // Without a team id we can't identify the workspace-scoped link; treat as\n  // unlinked so a run never proceeds tenant-less.\n  const key = externalTeamId ? { platform, externalTeamId, externalUserId } : undefined;\n  const link = key ? await accountLinks.getAccountLink(key) : null;\n  if (link && key) return { status: 'linked', link, key };\n\n  const publicUrl = webPublicUrl();\n  // A public origin is all the card needs. The link carries no identity: the\n  // web app authenticates the visitor, then Slack's OIDC flow proves which\n  // Slack account they control. Without an origin, still block, just no card.\n  if (publicUrl) {\n    await thread.postEphemeral(message.author, buildConnectCard(publicUrl, thread), { fallbackToDM: true });\n  }\n  return { status: 'blocked' };\n}\n\nconst retryHint = (thread: HandlerThread) => (thread.isDM ? 'message me again' : 'mention me again');\n\n/**\n * The \"connect your account\" card. The link is deliberately identity-free —\n * `/connect/slack` sends the visitor to Connections, where \"Connect Slack\"\n * runs the OIDC flow and Slack itself asserts the (team, user) pair.\n */\nfunction buildConnectCard(publicUrl: string, thread: HandlerThread) {\n  return Card({\n    title: 'Connect your account',\n    children: [\n      CardText(`Connect your account to use this agent, then ${retryHint(thread)}.`),\n      Actions([\n        LinkButton({\n          url: `${publicUrl}/connect/slack`,\n          label: 'Connect account',\n        }),\n      ]),\n    ],\n  });\n}\n\n/** Outcome of factory routing for one linked sender's inbound message. */\ntype FactoryRouteResult =\n  /** Factory routing not configured — dispatch without a factory. */\n  | { status: 'ungated' }\n  /** No factory resolved — prompt card posted (when possible), do not dispatch. */\n  | { status: 'blocked' }\n  /** The Factory project this sender's runs route to. */\n  | { status: 'resolved'; factoryProjectId: string };\n\n/**\n * Decide which Factory project a linked sender's run belongs to:\n *\n * 1. The link's `defaultFactoryProjectId`, when it still exists (a stale id —\n *    deleted factory — falls through as if unset).\n * 2. Else, the tenant's only factory, stamped back onto the link so it shows\n *    up (and stays editable) in Connected Accounts settings.\n * 3. Else — zero or several factories — a \"pick a default factory\" card\n *    posted publicly in the thread so Slack notifies the sender, and the run is\n *    blocked.\n */\nexport async function resolveFactoryForLink({\n  thread,\n  link,\n  key,\n  accountLinks,\n  projects,\n}: {\n  thread: HandlerThread;\n  link: ChannelAccountLink;\n  key: ChannelAccountLinkKey;\n  accountLinks: ChannelIdentityStorage;\n  projects?: FactoryProjectsStorage;\n}): Promise<FactoryRouteResult> {\n  if (!projects) return { status: 'ungated' };\n  // Factories are org-scoped; a personal account (no org) has none and lands\n  // on the prompt below.\n  const orgId = link.orgId ?? '';\n\n  if (link.defaultFactoryProjectId) {\n    const existing = await projects.get({ orgId, id: link.defaultFactoryProjectId });\n    if (existing) {\n      return { status: 'resolved', factoryProjectId: existing.id };\n    }\n  }\n\n  const factories = orgId ? await projects.list({ orgId }) : [];\n  if (factories.length === 1) {\n    const only = factories[0]!;\n    await accountLinks.setDefaultFactory({ ...key, userId: link.userId, factoryProjectId: only.id });\n    return { status: 'resolved', factoryProjectId: only.id };\n  }\n\n  const publicUrl = webPublicUrl();\n  if (publicUrl) {\n    await thread.post(\n      Card({\n        title: 'Pick a default factory',\n        children: [\n          CardText(\n            factories.length === 0\n              ? `Your account has no factory yet. Create one in the web app, then ${retryHint(thread)}.`\n              : `Your account has several factories. Pick which one Slack sessions should go to, then ${retryHint(thread)}.`,\n          ),\n          Actions([\n            LinkButton({\n              url: `${publicUrl}/settings/connections`,\n              label: 'Open settings',\n            }),\n          ]),\n        ],\n      }),\n    );\n  }\n  return { status: 'blocked' };\n}\n\n/**\n * Deterministic per-thread branch name: `slack/{threadTs}` with characters\n * outside the sandbox git-ref allow-list (`[A-Za-z0-9_./-]`, and `.` for\n * readability) mapped to `-`. `thread.id` is `{channelId}:{threadTs}`\n * (platform-prefixed on handler threads) — the trailing segment is the ts.\n *\n * Top-level DM and channel conversations use the empty-threadTs thread form,\n * so the trailing segment can be empty; a bare `slack/` is not a valid git\n * ref. Fall back to the last non-empty segment (the channel id): one\n * deterministic branch per top-level conversation.\n */\nfunction threadBranch(threadId: string): string {\n  const segments = threadId.split(':');\n  const tail = segments.findLast(segment => segment.length > 0) ?? threadId;\n  return `slack/${tail.replace(/[^A-Za-z0-9_/-]/g, '-')}`;\n}\n\n/**\n * Session ids of repo-backed Slack threads, keyed by the message that started\n * them. The resourceId resolver records the session it found or created; the\n * thread-id resolver, which core runs next for the same message, names the new\n * thread after it.\n */\nexport type SlackStartedSessions = WeakMap<object, string>;\n\n/**\n * Resolve the resourceId for a NEW Slack channel thread. A linked sender whose\n * factory has a repository gets a Factory session. A channel thread belongs to\n * the Factory: its resourceId is the Factory id, so the thread shares the\n * Factory's memory. A DM is private to the sender, so it runs under the\n * sender's user id and shares memory with their own sessions. The session id is recorded in `startedSessions` for the\n * thread-id resolver. The controller\n * session then materializes the repo sandbox via the factory's dynamic\n * workspace (clone + PAT), the session shows up in the web Sessions list, and\n * View Session deep-links land on the normal workspace route.\n *\n * A gated deployment refuses a thread it cannot place, rather than falling back\n * to a chat-only session: a repo-backed thread is the whole point of the\n * integration, and answering in a chat-only one would run the sender's request\n * in no project, on the SDK's built-in defaults. A linked sender whose project\n * cannot start a session gets an actionable error in Slack; the dispatch gate\n * handles unlinked or unrouted senders before this hook runs.\n * The hook only runs when a NEW thread is actually created (`getOrCreateThread`\n * resolves the owner lazily), so an established conversation is never touched:\n * it keeps its session, its model, and its history.\n *\n * The chat-only `channel:...` id survives for two cases where refusing would be\n * wrong: a deployment that cannot produce a repo-backed thread at all (no\n * account linking, no projects, or no source-control integration registered),\n * and a message carrying no sender id. In both, a `channel:` thread is the only\n * shape a session can take.\n *\n * Pure lookups only — cards for unlinked/unrouted senders are the dispatch\n * gate's job; this hook must never post.\n */\nexport function createChannelResourceIdResolver(\n  deps: SlackChannelDeps,\n  startedSessions: SlackStartedSessions = new WeakMap(),\n): ResolveResourceId {\n  const { accountLinks, projects } = deps;\n  const sourceControls = configuredSourceControls(deps);\n  return async ({ platform, thread, message }) => {\n    // NOT the hook's `defaultResourceId`: configuring a custom resolver\n    // bypasses AgentControllerChannels' own `channel:{thread.id}` derivation\n    // (agent-controller-channels.ts `resolveChannelResourceId`), and the base\n    // default is the per-USER memory key. Chat-only fallbacks must stay\n    // per-thread, so reproduce the controller default here.\n    const chatOnlyResourceId = `channel:${thread.id}`;\n    // A deployment with no account linking, no projects, or no source-control\n    // integration cannot produce a repo-backed thread at all, so a `channel:`\n    // thread is the only shape it has. Every refusal below is a different thing\n    // entirely: a sender the bot cannot place, in a deployment that can.\n    if (!accountLinks || !projects || sourceControls.length === 0) return chatOnlyResourceId;\n    // No sender id at all — a malformed message, not a sender the host turned\n    // away. There is nothing to place, so give it the per-thread memory key.\n    if (!message.author.userId) return chatOnlyResourceId;\n\n    const externalTeamId = rawTeamId(message.raw);\n    if (!externalTeamId) {\n      throw new ChannelSessionRejectedError('No Slack workspace id on the message — the sender cannot be identified');\n    }\n    try {\n      const link = await accountLinks.getAccountLink({\n        platform,\n        externalTeamId,\n        externalUserId: message.author.userId,\n      });\n      if (!link) {\n        throw new ChannelSessionRejectedError(\n          `Slack sender ${message.author.userId} is not linked to a Factory account`,\n        );\n      }\n\n      // Same chain as `resolveFactoryForLink`, minus prompts/stamping: the\n      // dispatch gate has already run (and stamped a lone factory) by the\n      // time a new thread is created, so this is a read-only re-resolve.\n      const orgId = link.orgId ?? '';\n      let factoryProjectId: string | undefined;\n      if (link.defaultFactoryProjectId && (await projects.get({ orgId, id: link.defaultFactoryProjectId }))) {\n        factoryProjectId = link.defaultFactoryProjectId;\n      } else if (orgId) {\n        const factories = await projects.list({ orgId });\n        if (factories.length === 1) factoryProjectId = factories[0]!.id;\n      }\n      if (!factoryProjectId) {\n        throw new ChannelSessionRejectedError(`Linked Slack sender ${message.author.userId} has no Factory project`);\n      }\n\n      // Linked and routed, so a repo-backed session is not a preference: with no\n      // repository to work in there is no thread to start, and starting one\n      // anyway would answer in a project the sender never picked, on the SDK's\n      // built-in defaults.\n      const sourceControl = await resolveFactorySourceControl({ sourceControls, orgId, factoryProjectId });\n      if (!sourceControl) {\n        const connections = await Promise.all(\n          sourceControls.map(sourceControl => sourceControl.connections.list({ orgId, factoryProjectId })),\n        );\n        throw new SlackSessionStartError(\n          connections.some(rows => rows.length > 0)\n            ? 'Could not start a session: link a repository to this Factory project.'\n            : 'Could not start a session: connect source control to this Factory project.',\n        );\n      }\n      // The session's link is the factory's position-1 environment\n      // repository (D1); the sandbox boots every environment repository.\n      const repo = await resolvePrimaryEnvironmentRepository({ sourceControl, orgId, factoryProjectId });\n      if (!repo.found) {\n        throw new SlackSessionStartError(\n          repo.reason === 'connection'\n            ? 'Could not start a session: connect source control to this Factory project.'\n            : 'Could not start a session: link a repository to this Factory project.',\n        );\n      }\n\n      const branch = threadBranch(thread.id);\n      const memoryResourceId = thread.isDM ? link.userId : factoryProjectId;\n      // Attributed to the Slack sender, not to whoever connected the repository:\n      // unlike an autonomous rule run, a Slack thread has a real interactive user.\n      // Keyed by factory, not by link: the thread's session stays found when the\n      // position-1 repository changes between two messages.\n      const existing = await sourceControl.sessions.getForBranch({\n        factoryProjectId,\n        userId: link.userId,\n        branch,\n      });\n      if (existing) {\n        startedSessions.set(message, existing.sessionId);\n        return memoryResourceId;\n      }\n      const session = await sourceControl.sessions.create({\n        sessionId: globalThis.crypto.randomUUID(),\n        projectRepositoryId: repo.projectRepositoryId,\n        factoryProjectId,\n        orgId,\n        userId: link.userId,\n        branch,\n        baseBranch: repo.baseBranch,\n        // DMs are the only private origin; channel threads are org-visible.\n        visibility: thread.isDM ? 'private' : 'org',\n      });\n      startedSessions.set(message, session.sessionId);\n      return memoryResourceId;\n    } catch (error) {\n      if (error instanceof ChannelSessionRejectedError || error instanceof SlackSessionStartError) throw error;\n      if (error instanceof FactorySourceControlConflictError) {\n        throw new SlackSessionStartError(\n          'Could not start a session: this Factory project has repositories from more than one source-control provider.',\n          { cause: error },\n        );\n      }\n      console.error('[slack] failed to start repo-backed session for thread', thread.id, error);\n      throw new SlackSessionStartError('Could not start a session right now. Please try again later.', {\n        cause: error,\n      });\n    }\n  };\n}\n\n/**\n * Thread id for a NEW Slack channel thread. Repo-backed threads take the\n * session id AS their thread id, matching the web convention\n * (FactoryStartCoordinator seeds threads with threadId = sessionId) so\n * `/workspaces/{sessionId}/threads/{sessionId}` resolves Slack-created\n * sessions exactly like web-created ones — no `?sessionId=` override needed.\n * Chat-only threads keep the default random id: their `channel:...`\n * resourceId is a memory key, not a unique thread id.\n */\nexport function createChannelThreadIdResolver(startedSessions: SlackStartedSessions): ResolveThreadId {\n  return ({ message, defaultThreadId }) => startedSessions.get(message) ?? defaultThreadId;\n}\n\n/**\n * The Factory session a repo-backed Slack thread belongs to. A thread under\n * the Factory resource is stamped with its session id (the startup migration\n * stamps threads it moved there). An unmigrated thread runs under its session\n * id as its resource, and a newer thread is named after its session. A stamp\n * or thread id only counts under that session's memory resource; a thread\n * named after a session it can't claim is refused. With no session row for\n * either, the thread is addressed by its own id and fails authorization like\n * any session without a row.\n */\nconst UNCLAIMED_SESSION = Symbol('unclaimed-session');\n\nasync function slackThreadSessionId(\n  sessions: ReturnType<typeof createSourceControlSessionLookup>,\n  thread: { id: string; resourceId: string; metadata?: Record<string, unknown> },\n  loadThread: (threadId: string) => Promise<{ resourceId: string } | null | undefined>,\n  runs: SessionRunBindings | undefined,\n): Promise<string | null | typeof UNCLAIMED_SESSION> {\n  if (thread.resourceId.startsWith('channel:')) return null;\n  // Stamps and thread ids are client-writable: a session only claims a thread\n  // under its own memory resource.\n  const claims = async (sessionId: string) => {\n    const row = await sessions.getBySessionId(sessionId);\n    if (!row) return false;\n    // A stamp only counts where the session's stamps are trusted.\n    if (sessionId !== thread.id && !sessionStampCounts(row, thread.resourceId)) return false;\n    const own = sessionId === thread.id ? thread : await loadThread(sessionId);\n    return thread.resourceId === memoryResourceOf(row, own, await isRunBound(row, runs));\n  };\n  const stamped = thread.metadata?.factorySessionId;\n  if (typeof stamped === 'string' && stamped && (await claims(stamped))) return stamped;\n  if (await sessions.getSourceControlBySessionId(thread.resourceId)) return thread.resourceId;\n  if (await claims(thread.id)) return thread.id;\n  if (await sessions.getBySessionId(thread.id)) return UNCLAIMED_SESSION;\n  // With no session row the thread is its own session: falling back to the\n  // resource would put every such thread under the Factory (or a sender) into\n  // one shared session.\n  return thread.id;\n}\n\n/** Create channel sessions with their Factory ownership present in initial controller state. */\nexport function createChannelSessionResolver(deps: SlackChannelDeps): ChannelSessionResolve {\n  const sourceControlSessions = createSourceControlSessionLookup(configuredSourceControls(deps));\n  return async ({ controller, thread, requestContext }) => {\n    // A session-bound Slack thread is addressed by its Factory session id and\n    // runs under the thread's resource (the Factory). A chat-only thread is its\n    // own session, addressed by its `channel:` resource.\n    // Approval clicks pass the thread without its metadata; load the stored\n    // thread whenever the session stamp is missing so a migrated thread's\n    // stamp is read.\n    const stamped = (thread as { metadata?: Record<string, unknown> }).metadata?.factorySessionId;\n    const stored =\n      stamped || thread.resourceId.startsWith('channel:')\n        ? thread\n        : ((await controller.queryThreadById({ threadId: thread.id })) ?? thread);\n    const resolved = await slackThreadSessionId(\n      sourceControlSessions,\n      stored,\n      threadId => controller.queryThreadById({ threadId }),\n      deps.workItems,\n    );\n    if (resolved === UNCLAIMED_SESSION) {\n      throw new Error(`Slack thread ${thread.id} is named after a Factory session it doesn't belong to.`);\n    }\n    const sessionId = resolved ?? thread.resourceId;\n    const sourceControl = sessionId.startsWith('channel:')\n      ? null\n      : await sourceControlSessions.getSourceControlBySessionId(sessionId);\n    const session = sourceControl ? await sourceControl.sessions.getBySessionId(sessionId) : null;\n    return controller.createSession({\n      id: sessionId,\n      ownerId: controller.id,\n      resourceId: thread.resourceId,\n      // Bind the Slack-created thread itself. Without it the session\n      // auto-selects (or creates) another thread and is switched onto this one later.\n      threadId: thread.id,\n      requestContext,\n      ...(session?.factoryProjectId ? { tags: { factoryProjectId: session.factoryProjectId } } : {}),\n    });\n  };\n}\n\n/**\n * Apply the factory's configuration to a Slack-created session the first time\n * its thread reaches the controller.\n *\n * Without this a Slack session runs on the SDK's built-in mode default\n * (`openai/gpt-5.5`), so a factory configured for any other provider fails every\n * message with a missing-credentials error. The web kickoff has always applied\n * the factory default; this brings Slack to the same footing.\n *\n * Only repo-backed threads are configured. Their resourceId IS the Factory\n * session id, which the source-control rows turn back into a project — a\n * chat-only `channel:...` id names no project, so there is nothing to read.\n *\n * The model this session starts on is picked here, once, from the project's\n * effective model scope for a session: the Factory default or the durable session owner's\n * default, else the SDK's built-in model. The choice is persisted on the thread\n * as `currentModelId`, so it outlives the process that made it.\n *\n * The model resolution is skipped on a session that already has a model\n * persisted on the thread. That is the durable record of a deliberate choice —\n * either an earlier start or a user's own switch — and re-applying a preference\n * over it would undo the user's selection every time the process restarts.\n */\nexport function createChannelSessionStartHook(deps: SlackChannelDeps): ChannelSessionStart {\n  const { projects, modelDefaults } = deps;\n  const sourceControlSessions = createSourceControlSessionLookup(configuredSourceControls(deps));\n  return async ({ session, thread, requestContext }) => {\n    // Seed the tenant org above every guard below. `gateDispatch` stamps it on\n    // the message's request context before the session exists, so this needs no\n    // storage read — which matters, because the model lookups below deliberately\n    // skip storage on a restarted session. A channel-only thread and a thread\n    // whose dispatch was ungated both land here with no org and are marked\n    // unresolved rather than being left to look like a local session.\n    await seedSessionOrg(session, readRequestContextOrgId(requestContext));\n\n    if (!projects) return;\n    if (thread.resourceId.startsWith('channel:')) return;\n\n    const sessionId = session.identity.getId();\n    const sourceControl = await sourceControlSessions.getSourceControlBySessionId(sessionId);\n    if (!sourceControl) return;\n    const sourceSession = await sourceControl.sessions.getBySessionId(sessionId);\n    if (!sourceSession?.factoryProjectId) return;\n    const threadId = session.thread.getId();\n    const binding =\n      threadId && deps.workItems\n        ? await deps.workItems.findRunBindingByThread({\n            orgId: sourceSession.orgId,\n            resourceId: session.identity.getResourceId(),\n            sessionId,\n            threadId,\n            rejectAmbiguous: true,\n          })\n        : null;\n    const owner = {\n      factoryProjectId: binding?.factoryProjectId ?? sourceSession.factoryProjectId,\n      orgId: sourceSession.orgId,\n      userId: sourceSession.userId,\n    };\n\n    const sessionModel = await resolveFactorySessionModel({\n      projects,\n      modelDefaults,\n      factoryProjectId: owner.factoryProjectId,\n      orgId: owner.orgId,\n      ownerUserId: owner.userId,\n      context: binding ? 'run' : 'session',\n    });\n\n    // Repo-backed Slack sessions use the source-control row's durable owner,\n    // never the sender, for both model and credential scope.\n    await session.state.set({\n      factoryProjectId: owner.factoryProjectId,\n      factoryModelScope: sessionModel.modelScope,\n      factoryOwnerUserId: owner.userId,\n    });\n    // Route the org through the seed helper rather than stamping it directly:\n    // an ungated dispatch marked this session unresolved above, and owner\n    // recovery is the resolution that has to clear that marker with it.\n    await seedSessionOrg(session, owner.orgId);\n    await primeTenantCredentialsForTenant({\n      orgId: owner.orgId,\n      userId: owner.userId,\n      credentialScope: sessionModel.modelScope,\n    });\n\n    const activeThreadId = session.thread.getId();\n    // Threads of one Factory share its resource; the stamp ties this thread to its session.\n    if (activeThreadId) {\n      await session.thread.setSettingOn({ threadId: activeThreadId, key: 'factorySessionId', value: sessionId });\n    }\n    const modeId = session.mode.get();\n    const persistedModelId = await migratePersistedModelSelection({\n      getMetadata: async () =>\n        activeThreadId\n          ? (((await session.thread.getById({ threadId: activeThreadId }))?.metadata as\n              Record<string, unknown> | undefined) ?? {})\n          : {},\n      modeId,\n      set: (key: string, value: unknown) =>\n        activeThreadId ? session.thread.setSettingOn({ threadId: activeThreadId, key, value }) : Promise.resolve(),\n      threadId: activeThreadId ?? undefined,\n    });\n    if (persistedModelId) {\n      // Subagent models live in session state only, so restore the ones this\n      // thread pinned at its first start instead of re-resolving them.\n      for (const agentType of SUBAGENT_TYPES) {\n        const modelId = await session.thread.getSetting({ key: pinnedSubagentModelKey(agentType) });\n        if (typeof modelId === 'string') await applySubagentModel(session, agentType, modelId);\n      }\n    } else {\n      // `hydrateFactorySession` persists the scoped model, a connected provider's\n      // provider default, or the SDK mode default as this thread's model of record.\n      const selectedModelId =\n        (await hydrateFactorySession(session, {\n          orgId: owner.orgId,\n          modelScope: sessionModel.modelScope,\n          ownerUserId: owner.userId,\n          defaultModelId: sessionModel.modelId,\n        })) ?? session.model.get();\n\n      // Pin subagent models on the thread like the main model so a restart\n      // restores the selected scope's choice rather than re-resolving it.\n      for (const agentType of SUBAGENT_TYPES) {\n        if (!selectedModelId) continue;\n        if (await applySubagentModel(session, agentType, selectedModelId)) {\n          await session.thread.setSetting({ key: pinnedSubagentModelKey(agentType), value: selectedModelId });\n        }\n      }\n    }\n  };\n}\n\nconst SUBAGENT_TYPES = ['explore', 'plan', 'execute'] as const;\nconst pinnedSubagentModelKey = (agentType: string) => `slackSubagentModelId_${agentType}`;\n\n/** Best-effort: a subagent model that can't be applied must not fail the message. */\nasync function applySubagentModel(\n  session: Parameters<ChannelSessionStart>[0]['session'],\n  agentType: (typeof SUBAGENT_TYPES)[number],\n  modelId: string,\n): Promise<boolean> {\n  try {\n    await session.subagents.model.set({ modelId, agentType });\n    return true;\n  } catch (error) {\n    console.warn('[slack] Failed to apply the subagent model', {\n      agentType,\n      modelId,\n      error: error instanceof Error ? error.message : String(error),\n    });\n    return false;\n  }\n}\n\n/**\n * The internal Mastra thread the framework created for a channel conversation.\n * The handler's `thread.id` is the platform thread id (e.g. `slack:C123:ts`),\n * NOT the internal UUID — the mapping lives in the stored thread's channel\n * metadata.\n */\nasync function findInternalThread(mastra: Mastra | undefined, thread: HandlerThread) {\n  const store = await mastra?.getStorage()?.getStore('memory');\n  const { threads } = (await store?.listThreads({\n    filter: {\n      metadata: {\n        channel_platform: thread.adapter.name,\n        channel_externalThreadId: thread.id,\n        channel_externalChannelId: thread.channelId,\n      },\n    },\n    perPage: 1,\n  })) ?? { threads: [] };\n  return threads[0] ?? null;\n}\n\ntype InternalThread = Awaited<ReturnType<typeof findInternalThread>>;\n\nasync function prepareExistingSessionOwnerContext(\n  thread: HandlerThread,\n  deps: SlackChannelDeps,\n  ctx: ChannelHandlerContext,\n  options: {\n    expectedOrgId?: string;\n    senderUserId?: string;\n    requireInternalThread: boolean;\n    /** Already looked up by the caller; `null` means it doesn't exist. */\n    internalThread?: InternalThread;\n  },\n): Promise<'ready' | 'organization-mismatch' | 'access-denied'> {\n  const sourceControls = configuredSourceControls(deps);\n  if (sourceControls.length === 0 && !options.requireInternalThread) return 'ready';\n\n  const internalThread =\n    options.internalThread !== undefined ? options.internalThread : await findInternalThread(ctx.mastra, thread);\n  if (!internalThread) {\n    if (options.requireInternalThread) {\n      throw new Error(`Could not resolve the internal Slack thread for ${thread.id}.`);\n    }\n    return 'ready';\n  }\n  if (sourceControls.length === 0 || internalThread.resourceId.startsWith('channel:')) return 'ready';\n  const sessions = createSourceControlSessionLookup(sourceControls);\n  const memory = await ctx.mastra?.getStorage()?.getStore('memory');\n  const resolved = await slackThreadSessionId(\n    sessions,\n    internalThread,\n    async threadId => memory?.getThreadById({ threadId }),\n    deps.workItems,\n  );\n  if (resolved === UNCLAIMED_SESSION) return 'access-denied';\n  const sessionId = resolved ?? internalThread.resourceId;\n  const sessionRow = await sessions.getBySessionId(sessionId);\n  if (\n    sessionRow &&\n    sessionRow.orgId === options.expectedOrgId &&\n    sessionRow.visibility === 'private' &&\n    sessionRow.userId !== options.senderUserId\n  ) {\n    return 'access-denied';\n  }\n  if (!options.expectedOrgId) {\n    throw new Error(\n      `Could not authorize the owner of Slack Factory session ${sessionId}: the sender's account link has no organization.`,\n    );\n  }\n\n  const preparation = await prepareSessionRunContext(\n    ctx.requestContext,\n    sessionId,\n    { sessions },\n    { expectedOrgId: options.expectedOrgId },\n  );\n  if (preparation === 'organization-mismatch') return preparation;\n  if (preparation !== 'prepared') {\n    const reason =\n      preparation === 'session-not-found'\n        ? 'no source-control session row exists for it, or its project repository row is missing'\n        : 'its source-control session row has no organization';\n    throw new Error(`Could not authorize the owner of Slack Factory session ${sessionId}: ${reason}.`);\n  }\n  return 'ready';\n}\n\n/**\n * Build the \"new session\" handler for mention / direct-message events. A mention or\n * DM on a not-yet-subscribed thread starts a NEW session; once subscribed, later\n * events are follow-ups and don't re-announce.\n */\n/**\n * Run the account-link + factory-routing gates for one inbound message.\n * Returns `null` when the run must not dispatch (a prompt card was posted\n * where possible); otherwise the dispatch context — with `routed` present\n * only when a linked sender resolved to a factory.\n */\nasync function gateDispatch(\n  thread: HandlerThread,\n  message: HandlerMessage,\n  deps: SlackChannelDeps,\n  ctx: ChannelHandlerContext,\n  options: { requireInternalThread: boolean; internalThread?: InternalThread } = { requireInternalThread: false },\n): Promise<{\n  routed?: { link: ChannelAccountLink; factoryProjectId: string };\n} | null> {\n  const { accountLinks, projects } = deps;\n  const sender = await resolveLinkedSender({ thread, message, accountLinks });\n  if (sender.status === 'blocked') return null;\n  // Linked senders must also route to a Factory project before a run starts.\n  if (sender.status === 'linked' && accountLinks) {\n    // Stamp the tenant on the run's request context — the single seam\n    // `resolveCredentialStore` reads to load this sender's model credentials.\n    // This belongs to the link, not to the routing: a linked sender whose\n    // factory routing comes back `ungated` still exits below and dispatches, so\n    // stamping only in the routed branch would silently run them on default\n    // credentials.\n    ctx.requestContext.set('user', { id: sender.link.userId, organizationId: sender.link.orgId });\n    const ownerContext = await prepareExistingSessionOwnerContext(thread, deps, ctx, {\n      expectedOrgId: sender.link.orgId,\n      senderUserId: sender.link.userId,\n      requireInternalThread: options.requireInternalThread,\n      internalThread: options.internalThread,\n    });\n    if (ownerContext === 'access-denied') {\n      await thread.post('This private Factory session belongs to another user.');\n      return null;\n    }\n    if (ownerContext === 'organization-mismatch') {\n      await thread.post('This thread belongs to a Factory session in another organization.');\n      return null;\n    }\n    // Credential resolution reads an in-memory snapshot that only priming\n    // fills, so prime whichever tenant now owns the run (the sender, or the\n    // existing session's owner) — otherwise a cold snapshot after a restart\n    // fails the run until that user happens to hit the web UI.\n    await primeTenantCredentialsForRequestContext(ctx.requestContext);\n\n    const route = await resolveFactoryForLink({ thread, ...sender, accountLinks, projects });\n    if (route.status === 'blocked') return null;\n    if (route.status === 'resolved') {\n      // The model runs with the session owner's credentials, but Factory tools\n      // must act as the authenticated Slack sender, not the session owner.\n      if (sender.link.orgId) {\n        ctx.requestContext.set(FACTORY_SLACK_SENDER_KEY, { userId: sender.link.userId, orgId: sender.link.orgId });\n        ctx.requestContext.set(FACTORY_INTERACTIVE_KEY, true);\n      }\n      return { routed: { link: sender.link, factoryProjectId: route.factoryProjectId } };\n    }\n  }\n  return {};\n}\n\n/**\n * A channel id and a `ts` name a thread only inside the workspace that issued\n * them, so the team scopes the card's key — without it two workspaces could\n * hold one key and an aside would land on another tenant's card.\n */\nexport function slackThreadSource(thread: HandlerThread, teamId?: string): ExternalWorkItemSource {\n  return {\n    integrationId: thread.adapter.name,\n    type: 'slack-thread',\n    ...(teamId ? { workspaceId: teamId } : {}),\n    externalId: thread.id,\n  };\n}\n\n/** Cards written before the key carried a team are still keyed bare. */\nasync function findThreadWorkItem(\n  workItems: WorkItemsStorage,\n  thread: HandlerThread,\n  teamId?: string,\n): Promise<WorkItemRow | null> {\n  const scoped = await workItems.getBySource(slackThreadSource(thread, teamId));\n  if (scoped || !teamId) return scoped;\n  return workItems.getBySource(slackThreadSource(thread));\n}\n\nfunction preDispatchErrorDetails(error: unknown): { message: string; cause?: { message: string } } {\n  const readMessage = (value: unknown) => {\n    const message =\n      typeof value === 'string'\n        ? value\n        : value && typeof value === 'object' && 'message' in value\n          ? value.message\n          : undefined;\n    return typeof message === 'string' && message.length > 0 ? message : undefined;\n  };\n  try {\n    const message = readMessage(error) ?? 'Unknown error';\n    const cause = error && typeof error === 'object' && 'cause' in error ? readMessage(error.cause) : undefined;\n    return { message, ...(cause ? { cause: { message: cause } } : {}) };\n  } catch {\n    return { message: 'Error details unavailable' };\n  }\n}\n\nasync function reportPreDispatchError(\n  thread: HandlerThread,\n  message: HandlerMessage,\n  ctx: ChannelHandlerContext,\n  error: unknown,\n): Promise<void> {\n  try {\n    if (error instanceof ChannelSessionRejectedError) return;\n  } catch {\n    // A thrown proxy can fail even the refusal check; still report the failure.\n  }\n  const correlation = {\n    platform: thread.adapter.name,\n    threadId: thread.id,\n    messageId: message.id,\n    authorId: message.author.userId,\n  };\n  const logger = typeof ctx.mastra?.getLogger === 'function' ? ctx.mastra.getLogger() : undefined;\n  const logError = (line: string) => (logger ? logger.error(line) : console.error(line));\n  logError(`[slack] Pre-dispatch failure ${JSON.stringify({ ...correlation, error: preDispatchErrorDetails(error) })}`);\n  try {\n    // The message id is the lookup key for the diagnostic above.\n    await thread.post(`Couldn’t start processing your message. Please try again.\\n\\`messageId: ${message.id}\\``);\n  } catch (deliveryError) {\n    logError(\n      `[slack] Failed to deliver pre-dispatch error reply ${JSON.stringify({ ...correlation, error: preDispatchErrorDetails(deliveryError) })}`,\n    );\n  }\n}\n\n/**\n * What the sender sees while nothing has been posted yet. Core's typing\n * wrapper only sets a status once the agent stream yields its first chunk,\n * and everything before that — credential priming, session rows, the\n * controller start hook, model time-to-first-token — is silent. Pin the same\n * status Factory's `typingStatus` uses for reasoning so the bot visibly\n * \"picks up\" as soon as the gate passes, and the stream's own status replaces\n * it without a visual change. Slack clears it on the first post; core clears\n * it when a run ends without posting.\n */\nconst EARLY_TYPING_STATUS = 'is thinking...';\n\nfunction acknowledgeReceipt(thread: HandlerThread, deps: SlackChannelDeps): void {\n  if (deps.adapterOptions?.typingStatus === false) return;\n  // Best-effort like every other status call: a failed status must not\n  // keep the run from starting.\n  void thread.startTyping(EARLY_TYPING_STATUS).catch(error => {\n    console.warn('[slack] early typing status failed', { thread: thread.id, error });\n  });\n}\n\nfunction createNewSessionChatHandler(deps: SlackChannelDeps): ChannelHandler {\n  return async (thread, message, defaultHandler, ctx) => {\n    // Gate on the sender having linked their Slack account to a Mastra tenant.\n    // Unlinked → post the ephemeral Connect card and stop; no session/run is\n    // created (which would otherwise be tenant-less and fail credential\n    // resolution). This handler is the only gate — core dispatches whatever\n    // reaches it — so every slot that can start a run must call it.\n    try {\n      if (!(await gateDispatch(thread, message, deps, ctx))) return;\n      // A mention on a not-yet-subscribed thread is a NEW session. The default\n      // handler auto-subscribes, so once subscribed this is a follow-up — the\n      // thread already carries its link. Factory posts nothing of its own:\n      // FactoryChannelSessionLinkProcessor emits the `Open session ↗` link right\n      // after the agent's first reply.\n      if (!(await thread.isSubscribed())) markNewChannelSession(ctx.requestContext);\n      acknowledgeReceipt(thread, deps);\n    } catch (error) {\n      await reportPreDispatchError(thread, message, ctx, error);\n      return;\n    }\n    await defaultHandler(thread, message);\n  };\n}\n\n/**\n * An `aside` never reaches the agent, but it is still part of the conversation:\n * record it on the card the thread already has. The link is resolved here rather\n * than through `gateDispatch`, which posts a Connect card an aside must not\n * trigger. Best-effort — nothing here may surface in the Slack thread.\n */\nasync function ingestAside(\n  thread: HandlerThread,\n  message: HandlerMessage,\n  { feed, workItems, accountLinks }: SlackChannelDeps,\n): Promise<void> {\n  if (!feed || !workItems) return;\n  const body = resolveEmojiShortcodes(message.text.replace(/^aside\\b[,:]?\\s*/i, '').trim());\n  if (!body) return;\n  try {\n    const teamId = slackTeamId(message);\n    const workItem = await findThreadWorkItem(workItems, thread, teamId);\n    if (!workItem) return;\n\n    const external: FactoryActorExternalIdentity = {\n      platform: thread.adapter.name,\n      ...(teamId ? { teamId } : {}),\n      messageId: message.id,\n      userId: message.author.userId,\n      userName: message.author.userName,\n      fullName: message.author.fullName,\n      isBot: message.author.isBot,\n    };\n    const link =\n      accountLinks && teamId\n        ? await accountLinks.getAccountLink({\n            platform: external.platform,\n            externalTeamId: teamId,\n            externalUserId: external.userId,\n          })\n        : null;\n\n    const result = await feed.createComment({\n      orgId: workItem.orgId,\n      workItemId: workItem.id,\n      author: actorFromChannelAuthor(external, link),\n      body,\n      occurredAt: message.metadata.dateSent,\n      externalSource: slackCommentSource(thread.id, message.id, teamId),\n    });\n    if (result.status !== 'created') {\n      console.warn('[slack] aside not ingested', { thread: thread.id, messageTs: message.id, status: result.status });\n    }\n  } catch (error) {\n    // Slack was acked before this handler ran, so a lost aside is never redelivered.\n    console.warn('[slack] aside ingest failed', { thread: thread.id, messageTs: message.id, error });\n  }\n}\n\nexport const createHandlers = (deps: SlackChannelDeps): ChannelHandlers => {\n  const newSessionChatHandler = createNewSessionChatHandler(deps);\n\n  return {\n    onSubscribedMessage: async (thread, message, defaultHandler, ctx) => {\n      // `aside` as its own leading word lets humans talk in a subscribed\n      // thread without the bot replying. Word boundary so messages that\n      // merely start with \"aside...\" (e.g. \"asides can wait\") still route.\n      if (/^aside\\b/i.test(message.text)) return ingestAside(thread, message, deps);\n      // Looked up once here for the mute check and the access gate below.\n      const internalThread = await findInternalThread(ctx.mastra, thread);\n      // A muted thread ignores everything that doesn't tag the bot, and the\n      // skipped messages never reach the session.\n      if (!message.isMention && internalThread?.metadata?.[MUTED_KEY] === 'true') return;\n      // A subscribed follow-up from an unlinked sender must not run either\n      // (e.g. the link was removed mid-conversation), and it must still\n      // resolve a factory (e.g. the default was cleared or its factory\n      // deleted mid-conversation). Mute and unmute pass the same gate, so only\n      // someone allowed to prompt this session can change what it listens to.\n      try {\n        const gate = await gateDispatch(thread, message, deps, ctx, { requireInternalThread: true, internalThread });\n        if (!gate) return;\n      } catch (error) {\n        await reportPreDispatchError(thread, message, ctx, error);\n        return;\n      }\n      const command = message.isMention ? muteCommand(message) : undefined;\n      if (command && internalThread) return setThreadMuted(thread, internalThread, message, ctx, command === 'mute');\n      acknowledgeReceipt(thread, deps);\n      await defaultHandler(thread, message);\n    },\n    onMention: async (thread, message, defaultHandler, ctx) => {\n      // `@bot mute` in a thread the bot never joined has nothing to mute, and\n      // must not start a session about the word \"mute\".\n      if (muteCommand(message)) return;\n      await newSessionChatHandler(thread, message, defaultHandler, ctx);\n    },\n    onDirectMessage: newSessionChatHandler,\n  };\n};\n\n/** Thread metadata key; one Factory runs one Slack app, so this is per bot. */\nconst MUTED_KEY = 'factory_muted';\n\n/**\n * `mute` or `unmute` when that word, with the mentions taken out, is the whole\n * message. Reads Slack's raw text, where a mention is still `<@U…>`: the\n * normalized `message.text` spells it as the bot's display name, which can\n * hold spaces and punctuation (`@Mastra Factory(Caleb)`).\n */\nfunction muteCommand(message: HandlerMessage): 'mute' | 'unmute' | undefined {\n  const raw = message.raw as { text?: unknown } | undefined;\n  const text = typeof raw?.text === 'string' ? raw.text : message.text;\n  const rest = text\n    .replace(/<@[^>]+>/g, ' ')\n    .replace(/(?<!\\w)@[\\w.-]+/g, ' ')\n    .trim()\n    .replace(/[.!]+$/, '')\n    .toLowerCase();\n  return rest === 'mute' || rest === 'unmute' ? rest : undefined;\n}\n\n/**\n * Stored on the Mastra thread next to `channel_subscribed`, so a mute holds\n * across deploys and replicas. Callers run the sender's link and session\n * access gate first. A reaction confirms it without posting.\n */\nasync function setThreadMuted(\n  thread: HandlerThread,\n  internal: NonNullable<InternalThread>,\n  message: HandlerMessage,\n  ctx: ChannelHandlerContext,\n  muted: boolean,\n): Promise<void> {\n  const store = await ctx.mastra?.getStorage()?.getStore('memory');\n  if (!store) return;\n  await store.patchThread({ id: internal.id, metadata: { ...internal.metadata, [MUTED_KEY]: String(muted) } });\n  try {\n    await thread.adapter.addReaction(thread.id, message.id, muted ? 'mute' : 'loud_sound');\n  } catch (error) {\n    console.warn('[slack] mute reaction failed', { thread: thread.id, error });\n  }\n}\n\n/** Slack app credentials, passed in explicitly rather than read from env here. */\ninterface SlackCredentials {\n  clientId?: string;\n  clientSecret?: string;\n  signingSecret: string;\n  botToken?: string;\n}\n\nexport function createSlackChannelsConfig(deps: SlackChannelDeps & { slack: SlackCredentials }): FactoryChannelsConfig {\n  // Per HTTP attempt, not per call: the WebClient's own retry policy still\n  // waits out a 429. Without it a dead socket hangs a post forever.\n  const adapter = createSlackAdapter({ ...deps.slack, webClientOptions: { timeout: SLACK_REQUEST_TIMEOUT_MS } });\n  const slack =\n    deps.adapterOptions?.streaming === false\n      ? { adapter, ...deps.adapterOptions }\n      : { adapter, ...deps.adapterOptions, streaming: deps.adapterOptions?.streaming ?? true };\n\n  const startedSessions: SlackStartedSessions = new WeakMap();\n  return {\n    adapters: { slack },\n    handlers: createHandlers(deps),\n    // New linked+repo-backed threads belong to the Factory and are named after\n    // the Factory session they start, which makes the controller session repo-backed.\n    resolveResourceId: createChannelResourceIdResolver(deps, startedSessions),\n    resolveThreadId: createChannelThreadIdResolver(startedSessions),\n    resolveSession: createChannelSessionResolver(deps),\n    // Those sessions are created by the channel machinery, not the web kickoff,\n    // so this is where they pick up the factory's configuration.\n    onSessionStart: createChannelSessionStartHook(deps),\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;AA4DA,MAAM,2BAA2B;AAEjC,IAAM,yBAAN,cAAqC,MAAM,CAAC;AAwD5C,SAAS,yBAAyB,MAA+D;CAC/F,OAAO,KAAK,mBAAmB,KAAK,gBAAgB,CAAC,KAAK,aAAa,IAAI,CAAC;AAC9E;;;;;;AAOA,SAAS,UAAU,YAAyC;CAC1D,IAAI,CAAC,cAAc,OAAO,eAAe,UAAU,OAAO,KAAA;CAC1D,MAAM,MAAM;CACZ,IAAI,OAAO,IAAI,YAAY,YAAY,IAAI,SAAS,OAAO,IAAI;CAC/D,IAAI,OAAO,IAAI,SAAS,YAAY,IAAI,MAAM,OAAO,IAAI;CACzD,IAAI,IAAI,QAAQ,OAAO,IAAI,SAAS,UAAU;EAC5C,MAAM,KAAM,IAAI,KAA0B;EAC1C,IAAI,OAAO,OAAO,YAAY,IAAI,OAAO;CAC3C;AAEF;;;;;AAMA,SAAS,YAAY,SAA6C;CAChE,OAAO,UAAU,QAAQ,GAAG;AAC9B;;;;;;;AAQA,SAAS,eAAmC;CAC1C,OAAO,QAAQ,IAAI,yBAAyB,QAAQ,IAAI;AAC1D;;;;;;AAgBA,eAAsB,oBAAoB,EACxC,QACA,SACA,gBAK8B;CAC9B,IAAI,CAAC,cAAc,OAAO,EAAE,QAAQ,UAAU;CAC9C,MAAM,WAAW,OAAO,QAAQ;CAChC,MAAM,iBAAiB,QAAQ,OAAO;CACtC,MAAM,iBAAiB,YAAY,OAAO;CAG1C,MAAM,MAAM,iBAAiB;EAAE;EAAU;EAAgB;CAAe,IAAI,KAAA;CAC5E,MAAM,OAAO,MAAM,MAAM,aAAa,eAAe,GAAG,IAAI;CAC5D,IAAI,QAAQ,KAAK,OAAO;EAAE,QAAQ;EAAU;EAAM;CAAI;CAEtD,MAAM,YAAY,aAAa;CAI/B,IAAI,WACF,MAAM,OAAO,cAAc,QAAQ,QAAQ,iBAAiB,WAAW,MAAM,GAAG,EAAE,cAAc,KAAK,CAAC;CAExG,OAAO,EAAE,QAAQ,UAAU;AAC7B;AAEA,MAAM,aAAa,WAA2B,OAAO,OAAO,qBAAqB;;;;;;AAOjF,SAAS,iBAAiB,WAAmB,QAAuB;CAClE,OAAO,KAAK;EACV,OAAO;EACP,UAAU,CACR,SAAS,gDAAgD,UAAU,MAAM,EAAE,EAAE,GAC7E,QAAQ,CACN,WAAW;GACT,KAAK,GAAG,UAAU;GAClB,OAAO;EACT,CAAC,CACH,CAAC,CACH;CACF,CAAC;AACH;;;;;;;;;;;;AAsBA,eAAsB,sBAAsB,EAC1C,QACA,MACA,KACA,cACA,YAO8B;CAC9B,IAAI,CAAC,UAAU,OAAO,EAAE,QAAQ,UAAU;CAG1C,MAAM,QAAQ,KAAK,SAAS;CAE5B,IAAI,KAAK,yBAAyB;EAChC,MAAM,WAAW,MAAM,SAAS,IAAI;GAAE;GAAO,IAAI,KAAK;EAAwB,CAAC;EAC/E,IAAI,UACF,OAAO;GAAE,QAAQ;GAAY,kBAAkB,SAAS;EAAG;CAE/D;CAEA,MAAM,YAAY,QAAQ,MAAM,SAAS,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC;CAC5D,IAAI,UAAU,WAAW,GAAG;EAC1B,MAAM,OAAO,UAAU;EACvB,MAAM,aAAa,kBAAkB;GAAE,GAAG;GAAK,QAAQ,KAAK;GAAQ,kBAAkB,KAAK;EAAG,CAAC;EAC/F,OAAO;GAAE,QAAQ;GAAY,kBAAkB,KAAK;EAAG;CACzD;CAEA,MAAM,YAAY,aAAa;CAC/B,IAAI,WACF,MAAM,OAAO,KACX,KAAK;EACH,OAAO;EACP,UAAU,CACR,SACE,UAAU,WAAW,IACjB,oEAAoE,UAAU,MAAM,EAAE,KACtF,wFAAwF,UAAU,MAAM,EAAE,EAChH,GACA,QAAQ,CACN,WAAW;GACT,KAAK,GAAG,UAAU;GAClB,OAAO;EACT,CAAC,CACH,CAAC,CACH;CACF,CAAC,CACH;CAEF,OAAO,EAAE,QAAQ,UAAU;AAC7B;;;;;;;;;;;;AAaA,SAAS,aAAa,UAA0B;CAG9C,OAAO,UAFU,SAAS,MAAM,GACZ,CAAC,CAAC,UAAS,YAAW,QAAQ,SAAS,CAAC,KAAK,SAAA,CAC5C,QAAQ,oBAAoB,GAAG;AACtD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAwCA,SAAgB,gCACd,MACA,kCAAwC,IAAI,QAAQ,GACjC;CACnB,MAAM,EAAE,cAAc,aAAa;CACnC,MAAM,iBAAiB,yBAAyB,IAAI;CACpD,OAAO,OAAO,EAAE,UAAU,QAAQ,cAAc;EAM9C,MAAM,qBAAqB,WAAW,OAAO;EAK7C,IAAI,CAAC,gBAAgB,CAAC,YAAY,eAAe,WAAW,GAAG,OAAO;EAGtE,IAAI,CAAC,QAAQ,OAAO,QAAQ,OAAO;EAEnC,MAAM,iBAAiB,UAAU,QAAQ,GAAG;EAC5C,IAAI,CAAC,gBACH,MAAM,IAAI,4BAA4B,wEAAwE;EAEhH,IAAI;GACF,MAAM,OAAO,MAAM,aAAa,eAAe;IAC7C;IACA;IACA,gBAAgB,QAAQ,OAAO;GACjC,CAAC;GACD,IAAI,CAAC,MACH,MAAM,IAAI,4BACR,gBAAgB,QAAQ,OAAO,OAAO,oCACxC;GAMF,MAAM,QAAQ,KAAK,SAAS;GAC5B,IAAI;GACJ,IAAI,KAAK,2BAA4B,MAAM,SAAS,IAAI;IAAE;IAAO,IAAI,KAAK;GAAwB,CAAC,GACjG,mBAAmB,KAAK;QACnB,IAAI,OAAO;IAChB,MAAM,YAAY,MAAM,SAAS,KAAK,EAAE,MAAM,CAAC;IAC/C,IAAI,UAAU,WAAW,GAAG,mBAAmB,UAAU,EAAE,CAAE;GAC/D;GACA,IAAI,CAAC,kBACH,MAAM,IAAI,4BAA4B,uBAAuB,QAAQ,OAAO,OAAO,wBAAwB;GAO7G,MAAM,gBAAgB,MAAM,4BAA4B;IAAE;IAAgB;IAAO;GAAiB,CAAC;GACnG,IAAI,CAAC,eAIH,MAAM,IAAI,wBACR,MAJwB,QAAQ,IAChC,eAAe,KAAI,kBAAiB,cAAc,YAAY,KAAK;IAAE;IAAO;GAAiB,CAAC,CAAC,CACjG,EAEE,CAAY,MAAK,SAAQ,KAAK,SAAS,CAAC,IACpC,0EACA,4EACN;GAIF,MAAM,OAAO,MAAM,oCAAoC;IAAE;IAAe;IAAO;GAAiB,CAAC;GACjG,IAAI,CAAC,KAAK,OACR,MAAM,IAAI,uBACR,KAAK,WAAW,eACZ,+EACA,uEACN;GAGF,MAAM,SAAS,aAAa,OAAO,EAAE;GACrC,MAAM,mBAAmB,OAAO,OAAO,KAAK,SAAS;GAKrD,MAAM,WAAW,MAAM,cAAc,SAAS,aAAa;IACzD;IACA,QAAQ,KAAK;IACb;GACF,CAAC;GACD,IAAI,UAAU;IACZ,gBAAgB,IAAI,SAAS,SAAS,SAAS;IAC/C,OAAO;GACT;GACA,MAAM,UAAU,MAAM,cAAc,SAAS,OAAO;IAClD,WAAW,WAAW,OAAO,WAAW;IACxC,qBAAqB,KAAK;IAC1B;IACA;IACA,QAAQ,KAAK;IACb;IACA,YAAY,KAAK;IAEjB,YAAY,OAAO,OAAO,YAAY;GACxC,CAAC;GACD,gBAAgB,IAAI,SAAS,QAAQ,SAAS;GAC9C,OAAO;EACT,SAAS,OAAO;GACd,IAAI,iBAAiB,+BAA+B,iBAAiB,wBAAwB,MAAM;GACnG,IAAI,iBAAiB,mCACnB,MAAM,IAAI,uBACR,gHACA,EAAE,OAAO,MAAM,CACjB;GAEF,QAAQ,MAAM,0DAA0D,OAAO,IAAI,KAAK;GACxF,MAAM,IAAI,uBAAuB,gEAAgE,EAC/F,OAAO,MACT,CAAC;EACH;CACF;AACF;;;;;;;;;;AAWA,SAAgB,8BAA8B,iBAAwD;CACpG,QAAQ,EAAE,SAAS,sBAAsB,gBAAgB,IAAI,OAAO,KAAK;AAC3E;;;;;;;;;;;AAYA,MAAM,oBAAoB,OAAO,mBAAmB;AAEpD,eAAe,qBACb,UACA,QACA,YACA,MACmD;CACnD,IAAI,OAAO,WAAW,WAAW,UAAU,GAAG,OAAO;CAGrD,MAAM,SAAS,OAAO,cAAsB;EAC1C,MAAM,MAAM,MAAM,SAAS,eAAe,SAAS;EACnD,IAAI,CAAC,KAAK,OAAO;EAEjB,IAAI,cAAc,OAAO,MAAM,CAAC,mBAAmB,KAAK,OAAO,UAAU,GAAG,OAAO;EACnF,MAAM,MAAM,cAAc,OAAO,KAAK,SAAS,MAAM,WAAW,SAAS;EACzE,OAAO,OAAO,eAAe,iBAAiB,KAAK,KAAK,MAAM,WAAW,KAAK,IAAI,CAAC;CACrF;CACA,MAAM,UAAU,OAAO,UAAU;CACjC,IAAI,OAAO,YAAY,YAAY,WAAY,MAAM,OAAO,OAAO,GAAI,OAAO;CAC9E,IAAI,MAAM,SAAS,4BAA4B,OAAO,UAAU,GAAG,OAAO,OAAO;CACjF,IAAI,MAAM,OAAO,OAAO,EAAE,GAAG,OAAO,OAAO;CAC3C,IAAI,MAAM,SAAS,eAAe,OAAO,EAAE,GAAG,OAAO;CAIrD,OAAO,OAAO;AAChB;;AAGA,SAAgB,6BAA6B,MAA+C;CAC1F,MAAM,wBAAwB,iCAAiC,yBAAyB,IAAI,CAAC;CAC7F,OAAO,OAAO,EAAE,YAAY,QAAQ,qBAAqB;EAQvD,MAAM,SADW,OAAkD,UAAU,oBAEhE,OAAO,WAAW,WAAW,UAAU,IAC9C,SACE,MAAM,WAAW,gBAAgB,EAAE,UAAU,OAAO,GAAG,CAAC,KAAM;EACtE,MAAM,WAAW,MAAM,qBACrB,uBACA,SACA,aAAY,WAAW,gBAAgB,EAAE,SAAS,CAAC,GACnD,KAAK,SACP;EACA,IAAI,aAAa,mBACf,MAAM,IAAI,MAAM,gBAAgB,OAAO,GAAG,wDAAwD;EAEpG,MAAM,YAAY,YAAY,OAAO;EACrC,MAAM,gBAAgB,UAAU,WAAW,UAAU,IACjD,OACA,MAAM,sBAAsB,4BAA4B,SAAS;EACrE,MAAM,UAAU,gBAAgB,MAAM,cAAc,SAAS,eAAe,SAAS,IAAI;EACzF,OAAO,WAAW,cAAc;GAC9B,IAAI;GACJ,SAAS,WAAW;GACpB,YAAY,OAAO;GAGnB,UAAU,OAAO;GACjB;GACA,GAAI,SAAS,mBAAmB,EAAE,MAAM,EAAE,kBAAkB,QAAQ,iBAAiB,EAAE,IAAI,CAAC;EAC9F,CAAC;CACH;AACF;;;;;;;;;;;;;;;;;;;;;;;;AAyBA,SAAgB,8BAA8B,MAA6C;CACzF,MAAM,EAAE,UAAU,kBAAkB;CACpC,MAAM,wBAAwB,iCAAiC,yBAAyB,IAAI,CAAC;CAC7F,OAAO,OAAO,EAAE,SAAS,QAAQ,qBAAqB;EAOpD,MAAM,eAAe,SAAS,wBAAwB,cAAc,CAAC;EAErE,IAAI,CAAC,UAAU;EACf,IAAI,OAAO,WAAW,WAAW,UAAU,GAAG;EAE9C,MAAM,YAAY,QAAQ,SAAS,MAAM;EACzC,MAAM,gBAAgB,MAAM,sBAAsB,4BAA4B,SAAS;EACvF,IAAI,CAAC,eAAe;EACpB,MAAM,gBAAgB,MAAM,cAAc,SAAS,eAAe,SAAS;EAC3E,IAAI,CAAC,eAAe,kBAAkB;EACtC,MAAM,WAAW,QAAQ,OAAO,MAAM;EACtC,MAAM,UACJ,YAAY,KAAK,YACb,MAAM,KAAK,UAAU,uBAAuB;GAC1C,OAAO,cAAc;GACrB,YAAY,QAAQ,SAAS,cAAc;GAC3C;GACA;GACA,iBAAiB;EACnB,CAAC,IACD;EACN,MAAM,QAAQ;GACZ,kBAAkB,SAAS,oBAAoB,cAAc;GAC7D,OAAO,cAAc;GACrB,QAAQ,cAAc;EACxB;EAEA,MAAM,eAAe,MAAM,2BAA2B;GACpD;GACA;GACA,kBAAkB,MAAM;GACxB,OAAO,MAAM;GACb,aAAa,MAAM;GACnB,SAAS,UAAU,QAAQ;EAC7B,CAAC;EAID,MAAM,QAAQ,MAAM,IAAI;GACtB,kBAAkB,MAAM;GACxB,mBAAmB,aAAa;GAChC,oBAAoB,MAAM;EAC5B,CAAC;EAID,MAAM,eAAe,SAAS,MAAM,KAAK;EACzC,MAAM,gCAAgC;GACpC,OAAO,MAAM;GACb,QAAQ,MAAM;GACd,iBAAiB,aAAa;EAChC,CAAC;EAED,MAAM,iBAAiB,QAAQ,OAAO,MAAM;EAE5C,IAAI,gBACF,MAAM,QAAQ,OAAO,aAAa;GAAE,UAAU;GAAgB,KAAK;GAAoB,OAAO;EAAU,CAAC;EAE3G,MAAM,SAAS,QAAQ,KAAK,IAAI;EAYhC,IAAI,MAX2B,+BAA+B;GAC5D,aAAa,YACX,kBACO,MAAM,QAAQ,OAAO,QAAQ,EAAE,UAAU,eAAe,CAAC,EAAA,EAAI,YACtB,CAAC,IAC3C,CAAC;GACP;GACA,MAAM,KAAa,UACjB,iBAAiB,QAAQ,OAAO,aAAa;IAAE,UAAU;IAAgB;IAAK;GAAM,CAAC,IAAI,QAAQ,QAAQ;GAC3G,UAAU,kBAAkB,KAAA;EAC9B,CAAC,GAIC,KAAK,MAAM,aAAa,gBAAgB;GACtC,MAAM,UAAU,MAAM,QAAQ,OAAO,WAAW,EAAE,KAAK,uBAAuB,SAAS,EAAE,CAAC;GAC1F,IAAI,OAAO,YAAY,UAAU,MAAM,mBAAmB,SAAS,WAAW,OAAO;EACvF;OACK;GAGL,MAAM,kBACH,MAAM,sBAAsB,SAAS;IACpC,OAAO,MAAM;IACb,YAAY,aAAa;IACzB,aAAa,MAAM;IACnB,gBAAgB,aAAa;GAC/B,CAAC,KAAM,QAAQ,MAAM,IAAI;GAI3B,KAAK,MAAM,aAAa,gBAAgB;IACtC,IAAI,CAAC,iBAAiB;IACtB,IAAI,MAAM,mBAAmB,SAAS,WAAW,eAAe,GAC9D,MAAM,QAAQ,OAAO,WAAW;KAAE,KAAK,uBAAuB,SAAS;KAAG,OAAO;IAAgB,CAAC;GAEtG;EACF;CACF;AACF;AAEA,MAAM,iBAAiB;CAAC;CAAW;CAAQ;AAAS;AACpD,MAAM,0BAA0B,cAAsB,wBAAwB;;AAG9E,eAAe,mBACb,SACA,WACA,SACkB;CAClB,IAAI;EACF,MAAM,QAAQ,UAAU,MAAM,IAAI;GAAE;GAAS;EAAU,CAAC;EACxD,OAAO;CACT,SAAS,OAAO;EACd,QAAQ,KAAK,8CAA8C;GACzD;GACA;GACA,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;EAC9D,CAAC;EACD,OAAO;CACT;AACF;;;;;;;AAQA,eAAe,mBAAmB,QAA4B,QAAuB;CAEnF,MAAM,EAAE,YAAa,OAAM,MADP,QAAQ,WAAW,CAAC,EAAE,SAAS,QAAQ,EAAA,EACzB,YAAY;EAC5C,QAAQ,EACN,UAAU;GACR,kBAAkB,OAAO,QAAQ;GACjC,0BAA0B,OAAO;GACjC,2BAA2B,OAAO;EACpC,EACF;EACA,SAAS;CACX,CAAC,KAAM,EAAE,SAAS,CAAC,EAAE;CACrB,OAAO,QAAQ,MAAM;AACvB;AAIA,eAAe,mCACb,QACA,MACA,KACA,SAO8D;CAC9D,MAAM,iBAAiB,yBAAyB,IAAI;CACpD,IAAI,eAAe,WAAW,KAAK,CAAC,QAAQ,uBAAuB,OAAO;CAE1E,MAAM,iBACJ,QAAQ,mBAAmB,KAAA,IAAY,QAAQ,iBAAiB,MAAM,mBAAmB,IAAI,QAAQ,MAAM;CAC7G,IAAI,CAAC,gBAAgB;EACnB,IAAI,QAAQ,uBACV,MAAM,IAAI,MAAM,mDAAmD,OAAO,GAAG,EAAE;EAEjF,OAAO;CACT;CACA,IAAI,eAAe,WAAW,KAAK,eAAe,WAAW,WAAW,UAAU,GAAG,OAAO;CAC5F,MAAM,WAAW,iCAAiC,cAAc;CAChE,MAAM,SAAS,MAAM,IAAI,QAAQ,WAAW,CAAC,EAAE,SAAS,QAAQ;CAChE,MAAM,WAAW,MAAM,qBACrB,UACA,gBACA,OAAM,aAAY,QAAQ,cAAc,EAAE,SAAS,CAAC,GACpD,KAAK,SACP;CACA,IAAI,aAAa,mBAAmB,OAAO;CAC3C,MAAM,YAAY,YAAY,eAAe;CAC7C,MAAM,aAAa,MAAM,SAAS,eAAe,SAAS;CAC1D,IACE,cACA,WAAW,UAAU,QAAQ,iBAC7B,WAAW,eAAe,aAC1B,WAAW,WAAW,QAAQ,cAE9B,OAAO;CAET,IAAI,CAAC,QAAQ,eACX,MAAM,IAAI,MACR,0DAA0D,UAAU,iDACtE;CAGF,MAAM,cAAc,MAAM,yBACxB,IAAI,gBACJ,WACA,EAAE,SAAS,GACX,EAAE,eAAe,QAAQ,cAAc,CACzC;CACA,IAAI,gBAAgB,yBAAyB,OAAO;CACpD,IAAI,gBAAgB,YAKlB,MAAM,IAAI,MAAM,0DAA0D,UAAU,IAHlF,gBAAgB,sBACZ,0FACA,qDACyF,EAAE;CAEnG,OAAO;AACT;;;;;;;;;;;;AAaA,eAAe,aACb,QACA,SACA,MACA,KACA,UAA+E,EAAE,uBAAuB,MAAM,GAGtG;CACR,MAAM,EAAE,cAAc,aAAa;CACnC,MAAM,SAAS,MAAM,oBAAoB;EAAE;EAAQ;EAAS;CAAa,CAAC;CAC1E,IAAI,OAAO,WAAW,WAAW,OAAO;CAExC,IAAI,OAAO,WAAW,YAAY,cAAc;EAO9C,IAAI,eAAe,IAAI,QAAQ;GAAE,IAAI,OAAO,KAAK;GAAQ,gBAAgB,OAAO,KAAK;EAAM,CAAC;EAC5F,MAAM,eAAe,MAAM,mCAAmC,QAAQ,MAAM,KAAK;GAC/E,eAAe,OAAO,KAAK;GAC3B,cAAc,OAAO,KAAK;GAC1B,uBAAuB,QAAQ;GAC/B,gBAAgB,QAAQ;EAC1B,CAAC;EACD,IAAI,iBAAiB,iBAAiB;GACpC,MAAM,OAAO,KAAK,uDAAuD;GACzE,OAAO;EACT;EACA,IAAI,iBAAiB,yBAAyB;GAC5C,MAAM,OAAO,KAAK,mEAAmE;GACrF,OAAO;EACT;EAKA,MAAM,wCAAwC,IAAI,cAAc;EAEhE,MAAM,QAAQ,MAAM,sBAAsB;GAAE;GAAQ,GAAG;GAAQ;GAAc;EAAS,CAAC;EACvF,IAAI,MAAM,WAAW,WAAW,OAAO;EACvC,IAAI,MAAM,WAAW,YAAY;GAG/B,IAAI,OAAO,KAAK,OAAO;IACrB,IAAI,eAAe,IAAI,0BAA0B;KAAE,QAAQ,OAAO,KAAK;KAAQ,OAAO,OAAO,KAAK;IAAM,CAAC;IACzG,IAAI,eAAe,IAAI,yBAAyB,IAAI;GACtD;GACA,OAAO,EAAE,QAAQ;IAAE,MAAM,OAAO;IAAM,kBAAkB,MAAM;GAAiB,EAAE;EACnF;CACF;CACA,OAAO,CAAC;AACV;;;;;;AAOA,SAAgB,kBAAkB,QAAuB,QAAyC;CAChG,OAAO;EACL,eAAe,OAAO,QAAQ;EAC9B,MAAM;EACN,GAAI,SAAS,EAAE,aAAa,OAAO,IAAI,CAAC;EACxC,YAAY,OAAO;CACrB;AACF;;AAGA,eAAe,mBACb,WACA,QACA,QAC6B;CAC7B,MAAM,SAAS,MAAM,UAAU,YAAY,kBAAkB,QAAQ,MAAM,CAAC;CAC5E,IAAI,UAAU,CAAC,QAAQ,OAAO;CAC9B,OAAO,UAAU,YAAY,kBAAkB,MAAM,CAAC;AACxD;AAEA,SAAS,wBAAwB,OAAkE;CACjG,MAAM,eAAe,UAAmB;EACtC,MAAM,UACJ,OAAO,UAAU,WACb,QACA,SAAS,OAAO,UAAU,YAAY,aAAa,QACjD,MAAM,UACN,KAAA;EACR,OAAO,OAAO,YAAY,YAAY,QAAQ,SAAS,IAAI,UAAU,KAAA;CACvE;CACA,IAAI;EACF,MAAM,UAAU,YAAY,KAAK,KAAK;EACtC,MAAM,QAAQ,SAAS,OAAO,UAAU,YAAY,WAAW,QAAQ,YAAY,MAAM,KAAK,IAAI,KAAA;EAClG,OAAO;GAAE;GAAS,GAAI,QAAQ,EAAE,OAAO,EAAE,SAAS,MAAM,EAAE,IAAI,CAAC;EAAG;CACpE,QAAQ;EACN,OAAO,EAAE,SAAS,4BAA4B;CAChD;AACF;AAEA,eAAe,uBACb,QACA,SACA,KACA,OACe;CACf,IAAI;EACF,IAAI,iBAAiB,6BAA6B;CACpD,QAAQ,CAER;CACA,MAAM,cAAc;EAClB,UAAU,OAAO,QAAQ;EACzB,UAAU,OAAO;EACjB,WAAW,QAAQ;EACnB,UAAU,QAAQ,OAAO;CAC3B;CACA,MAAM,SAAS,OAAO,IAAI,QAAQ,cAAc,aAAa,IAAI,OAAO,UAAU,IAAI,KAAA;CACtF,MAAM,YAAY,SAAkB,SAAS,OAAO,MAAM,IAAI,IAAI,QAAQ,MAAM,IAAI;CACpF,SAAS,gCAAgC,KAAK,UAAU;EAAE,GAAG;EAAa,OAAO,wBAAwB,KAAK;CAAE,CAAC,GAAG;CACpH,IAAI;EAEF,MAAM,OAAO,KAAK,2EAA2E,QAAQ,GAAG,GAAG;CAC7G,SAAS,eAAe;EACtB,SACE,sDAAsD,KAAK,UAAU;GAAE,GAAG;GAAa,OAAO,wBAAwB,aAAa;EAAE,CAAC,GACxI;CACF;AACF;;;;;;;;;;;AAYA,MAAM,sBAAsB;AAE5B,SAAS,mBAAmB,QAAuB,MAA8B;CAC/E,IAAI,KAAK,gBAAgB,iBAAiB,OAAO;CAGjD,OAAY,YAAY,mBAAmB,CAAC,CAAC,OAAM,UAAS;EAC1D,QAAQ,KAAK,sCAAsC;GAAE,QAAQ,OAAO;GAAI;EAAM,CAAC;CACjF,CAAC;AACH;AAEA,SAAS,4BAA4B,MAAwC;CAC3E,OAAO,OAAO,QAAQ,SAAS,gBAAgB,QAAQ;EAMrD,IAAI;GACF,IAAI,CAAE,MAAM,aAAa,QAAQ,SAAS,MAAM,GAAG,GAAI;GAMvD,IAAI,CAAE,MAAM,OAAO,aAAa,GAAI,sBAAsB,IAAI,cAAc;GAC5E,mBAAmB,QAAQ,IAAI;EACjC,SAAS,OAAO;GACd,MAAM,uBAAuB,QAAQ,SAAS,KAAK,KAAK;GACxD;EACF;EACA,MAAM,eAAe,QAAQ,OAAO;CACtC;AACF;;;;;;;AAQA,eAAe,YACb,QACA,SACA,EAAE,MAAM,WAAW,gBACJ;CACf,IAAI,CAAC,QAAQ,CAAC,WAAW;CACzB,MAAM,OAAO,uBAAuB,QAAQ,KAAK,QAAQ,qBAAqB,EAAE,CAAC,CAAC,KAAK,CAAC;CACxF,IAAI,CAAC,MAAM;CACX,IAAI;EACF,MAAM,SAAS,YAAY,OAAO;EAClC,MAAM,WAAW,MAAM,mBAAmB,WAAW,QAAQ,MAAM;EACnE,IAAI,CAAC,UAAU;EAEf,MAAM,WAAyC;GAC7C,UAAU,OAAO,QAAQ;GACzB,GAAI,SAAS,EAAE,OAAO,IAAI,CAAC;GAC3B,WAAW,QAAQ;GACnB,QAAQ,QAAQ,OAAO;GACvB,UAAU,QAAQ,OAAO;GACzB,UAAU,QAAQ,OAAO;GACzB,OAAO,QAAQ,OAAO;EACxB;EACA,MAAM,OACJ,gBAAgB,SACZ,MAAM,aAAa,eAAe;GAChC,UAAU,SAAS;GACnB,gBAAgB;GAChB,gBAAgB,SAAS;EAC3B,CAAC,IACD;EAEN,MAAM,SAAS,MAAM,KAAK,cAAc;GACtC,OAAO,SAAS;GAChB,YAAY,SAAS;GACrB,QAAQ,uBAAuB,UAAU,IAAI;GAC7C;GACA,YAAY,QAAQ,SAAS;GAC7B,gBAAgB,mBAAmB,OAAO,IAAI,QAAQ,IAAI,MAAM;EAClE,CAAC;EACD,IAAI,OAAO,WAAW,WACpB,QAAQ,KAAK,8BAA8B;GAAE,QAAQ,OAAO;GAAI,WAAW,QAAQ;GAAI,QAAQ,OAAO;EAAO,CAAC;CAElH,SAAS,OAAO;EAEd,QAAQ,KAAK,+BAA+B;GAAE,QAAQ,OAAO;GAAI,WAAW,QAAQ;GAAI;EAAM,CAAC;CACjG;AACF;AAEA,MAAa,kBAAkB,SAA4C;CACzE,MAAM,wBAAwB,4BAA4B,IAAI;CAE9D,OAAO;EACL,qBAAqB,OAAO,QAAQ,SAAS,gBAAgB,QAAQ;GAInE,IAAI,YAAY,KAAK,QAAQ,IAAI,GAAG,OAAO,YAAY,QAAQ,SAAS,IAAI;GAE5E,MAAM,iBAAiB,MAAM,mBAAmB,IAAI,QAAQ,MAAM;GAGlE,IAAI,CAAC,QAAQ,aAAa,gBAAgB,WAAW,eAAe,QAAQ;GAM5E,IAAI;IAEF,IAAI,CAAC,MADc,aAAa,QAAQ,SAAS,MAAM,KAAK;KAAE,uBAAuB;KAAM;IAAe,CAAC,GAChG;GACb,SAAS,OAAO;IACd,MAAM,uBAAuB,QAAQ,SAAS,KAAK,KAAK;IACxD;GACF;GACA,MAAM,UAAU,QAAQ,YAAY,YAAY,OAAO,IAAI,KAAA;GAC3D,IAAI,WAAW,gBAAgB,OAAO,eAAe,QAAQ,gBAAgB,SAAS,KAAK,YAAY,MAAM;GAC7G,mBAAmB,QAAQ,IAAI;GAC/B,MAAM,eAAe,QAAQ,OAAO;EACtC;EACA,WAAW,OAAO,QAAQ,SAAS,gBAAgB,QAAQ;GAGzD,IAAI,YAAY,OAAO,GAAG;GAC1B,MAAM,sBAAsB,QAAQ,SAAS,gBAAgB,GAAG;EAClE;EACA,iBAAiB;CACnB;AACF;;AAGA,MAAM,YAAY;;;;;;;AAQlB,SAAS,YAAY,SAAwD;CAC3E,MAAM,MAAM,QAAQ;CAEpB,MAAM,QADO,OAAO,KAAK,SAAS,WAAW,IAAI,OAAO,QAAQ,KAAA,CAE7D,QAAQ,aAAa,GAAG,CAAC,CACzB,QAAQ,oBAAoB,GAAG,CAAC,CAChC,KAAK,CAAC,CACN,QAAQ,UAAU,EAAE,CAAC,CACrB,YAAY;CACf,OAAO,SAAS,UAAU,SAAS,WAAW,OAAO,KAAA;AACvD;;;;;;AAOA,eAAe,eACb,QACA,UACA,SACA,KACA,OACe;CACf,MAAM,QAAQ,MAAM,IAAI,QAAQ,WAAW,CAAC,EAAE,SAAS,QAAQ;CAC/D,IAAI,CAAC,OAAO;CACZ,MAAM,MAAM,YAAY;EAAE,IAAI,SAAS;EAAI,UAAU;GAAE,GAAG,SAAS;IAAW,YAAY,OAAO,KAAK;EAAE;CAAE,CAAC;CAC3G,IAAI;EACF,MAAM,OAAO,QAAQ,YAAY,OAAO,IAAI,QAAQ,IAAI,QAAQ,SAAS,YAAY;CACvF,SAAS,OAAO;EACd,QAAQ,KAAK,gCAAgC;GAAE,QAAQ,OAAO;GAAI;EAAM,CAAC;CAC3E;AACF;AAUA,SAAgB,0BAA0B,MAA6E;CAGrH,MAAM,UAAU,mBAAmB;EAAE,GAAG,KAAK;EAAO,kBAAkB,EAAE,SAAS,yBAAyB;CAAE,CAAC;CAC7G,MAAM,QACJ,KAAK,gBAAgB,cAAc,QAC/B;EAAE;EAAS,GAAG,KAAK;CAAe,IAClC;EAAE;EAAS,GAAG,KAAK;EAAgB,WAAW,KAAK,gBAAgB,aAAa;CAAK;CAE3F,MAAM,kCAAwC,IAAI,QAAQ;CAC1D,OAAO;EACL,UAAU,EAAE,MAAM;EAClB,UAAU,eAAe,IAAI;EAG7B,mBAAmB,gCAAgC,MAAM,eAAe;EACxE,iBAAiB,8BAA8B,eAAe;EAC9D,gBAAgB,6BAA6B,IAAI;EAGjD,gBAAgB,8BAA8B,IAAI;CACpD;AACF"}