@mastra/factory 0.24.0 → 0.25.0-alpha.0

package/dist/routes/contracts.js.map

@@ -1 +1 @@
-{"version":3,"file":"contracts.js","names":[],"sources":["../../src/routes/contracts.ts"],"sourcesContent":["import { THINKING_LEVEL_VALUES } from '@mastra/code-sdk/thinking';\nimport type { ThinkingLevelSetting } from '@mastra/code-sdk/thinking';\nimport { z } from 'zod';\n\nimport { FACTORY_ROLE_STAGES } from '../rules/types.js';\nimport { BOARD_IDENTIFIER_RE, MAX_BOARD_IDENTIFIER_LENGTH } from '../rules/validation.js';\nimport { FACTORY_MODEL_SCOPES } from '../storage/domains/projects/base.js';\n\nconst FACTORY_ROLE_VALUES = Object.keys(FACTORY_ROLE_STAGES) as [string, ...string[]];\nconst THINKING_LEVELS = THINKING_LEVEL_VALUES as [ThinkingLevelSetting, ...ThinkingLevelSetting[]];\n\nexport type FactoryRouteContract = {\n  method: 'GET' | 'POST' | 'PATCH' | 'DELETE';\n  path: string;\n  description: string;\n  pathSchema?: z.ZodType;\n  querySchema?: z.ZodType;\n  bodySchema?: z.ZodType;\n  responseSchema: z.ZodType;\n};\n\nexport const UUID_PATTERN = '^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$';\nconst uuidSchema = z.string().regex(new RegExp(UUID_PATTERN));\nconst entitySchema = z.record(z.string(), z.unknown());\nconst nonEmptyTrimmed = (max: number) => z.string().trim().min(1).max(max);\nconst rawBoundedTrimmed = (max: number) =>\n  z\n    .string()\n    .max(max)\n    .transform(value => value.trim())\n    .pipe(z.string().min(1));\nconst trimmedUuidSchema = z.string().trim().regex(new RegExp(UUID_PATTERN));\nconst nullableTrimmed = (max: number) =>\n  z.union([\n    z\n      .string()\n      .trim()\n      .max(max)\n      .transform(value => value || null),\n    z.null(),\n  ]);\nconst projectPathSchema = z.object({ id: uuidSchema });\nconst projectDecisionPathSchema = z.object({ id: uuidSchema, decisionId: uuidSchema });\nconst workItemPathSchema = z.object({ id: uuidSchema });\nconst transitionPathSchema = z.object({ id: uuidSchema, workItemId: uuidSchema });\n\nconst projectSchema = entitySchema;\nconst projectResponseSchema = z.object({ project: projectSchema });\nconst workItemResponseSchema = z.object({ workItem: entitySchema });\nconst decisionResponseSchema = z.object({ decision: entitySchema });\n\nexport const createProjectBodySchema = z.object({\n  name: nonEmptyTrimmed(200),\n  description: nullableTrimmed(2_000).optional().default(null),\n  modelScope: z.enum(FACTORY_MODEL_SCOPES).optional(),\n});\n\nexport const updateProjectBodySchema = z\n  .object({\n    name: nonEmptyTrimmed(200).optional(),\n    description: nullableTrimmed(2_000).optional(),\n    defaultModelId: nullableTrimmed(200).optional(),\n    modelScope: z.enum(FACTORY_MODEL_SCOPES).optional(),\n    defaultThinkingLevel: z.enum(THINKING_LEVELS).optional(),\n    autoRunEnabled: z.boolean().optional(),\n    autoApprovePlans: z.boolean().optional(),\n    reviewTestChecksEnabled: z.boolean().optional(),\n    selfReviewEnabled: z.boolean().optional(),\n  })\n  .refine(input => Object.keys(input).length > 0, { message: 'At least one project field is required' });\n\nconst environmentRepositorySchema = z.object({\n  projectRepositoryId: z.string(),\n  connectionId: z.string(),\n  repositoryId: z.string(),\n  // Null when the repository row behind the link is missing.\n  slug: z.string().nullable(),\n  defaultBranch: z.string().nullable(),\n  position: z.number().int(),\n  inEnvironment: z.boolean(),\n  setupCommand: z.string().nullable(),\n  teardownCommand: z.string().nullable(),\n  lastBuildStatus: z.enum(['unbuilt', 'configured', 'failed']),\n  lastBuildError: z.string().nullable(),\n  lastBuiltAt: z.string().nullable(),\n});\n\n/** The configured FactorySandbox as factory describes it: provider id, JSON Schema of its settings, capabilities. */\nexport const environmentSandboxSchema = z.object({\n  provider: z.string(),\n  settingsSchema: z.record(z.string(), z.unknown()),\n  capabilities: z.object({\n    template: z.boolean(),\n    builds: z.object({ available: z.boolean(), history: z.boolean() }),\n  }),\n});\n\n/** When the environment builds on its own; present only when the sandbox can build. */\nexport const environmentBuildTriggersSchema = z.object({\n  schedule: z.object({\n    enabled: z.boolean(),\n    cron: z.string().nullable(),\n    timezone: z.string().nullable(),\n    /** False when the host's storage has no schedules domain; the cron trigger cannot be enabled then. */\n    scheduleAvailable: z.boolean(),\n  }),\n  push: z.object({ enabled: z.boolean(), debounceMinutes: z.number().int() }),\n});\n\n/** The last build factory asked the provider for, from the project row only; status is read live. */\nexport const environmentLastBuildSchema = z.object({ buildId: z.string(), attemptedAt: z.string().nullable() });\n\nexport const projectEnvironmentResponseSchema = z.object({\n  environment: z.object({\n    sandbox: environmentSandboxSchema,\n    /** The stored settings document; only keys the user set. */\n    settings: z.record(z.string(), z.unknown()),\n    sandboxWorkingDirectory: z.string().nullable(),\n    workspaceSetupCommand: z.string().nullable(),\n    activeTemplateId: z.string().nullable(),\n    activeTemplateHeads: z.record(z.string(), z.string()).nullable(),\n    repositories: z.array(environmentRepositorySchema),\n    buildTriggers: environmentBuildTriggersSchema.optional(),\n    build: environmentLastBuildSchema.nullable().optional(),\n  }),\n});\n\nconst environmentBuildStatusSchema = z.enum(['pending', 'building', 'ready', 'failed', 'unknown']);\n\nexport const environmentBuildStartResponseSchema = z.object({\n  outcome: z.enum(['started', 'skipped', 'unavailable', 'failed']),\n  buildId: z.string().optional(),\n  templateId: z.string().optional(),\n  reason: z.string().optional(),\n});\n\nexport const environmentBuildSchema = z.object({\n  buildId: z.string(),\n  status: environmentBuildStatusSchema,\n  templateId: z.string().optional(),\n  startedAt: z.string().optional(),\n  finishedAt: z.string().optional(),\n  error: z.string().optional(),\n  logs: z.array(z.string()).optional(),\n});\n\nexport const environmentBuildsResponseSchema = z.object({ builds: z.array(environmentBuildSchema) });\nexport const environmentBuildResponseSchema = z.object({ build: environmentBuildSchema });\n\nconst buildPathSchema = projectPathSchema.extend({ buildId: z.string().min(1) });\n\nconst environmentRepositoryPatchSchema = z.object({\n  projectRepositoryId: uuidSchema,\n  position: z.number().int().min(1).optional(),\n  inEnvironment: z.boolean().optional(),\n  setupCommand: nullableTrimmed(2_000).optional(),\n  teardownCommand: nullableTrimmed(2_000).optional(),\n});\n\nexport const updateProjectEnvironmentBodySchema = z\n  .object({\n    sandboxWorkingDirectory: nullableTrimmed(1_000)\n      .refine(value => value === null || value.startsWith('/'), {\n        message: 'sandboxWorkingDirectory must be absolute',\n      })\n      .optional(),\n    /** Partial settings merged onto the stored document; null removes a key. Validated by the FactorySandbox. */\n    settings: z.record(z.string(), z.unknown().nullable()).optional(),\n    workspaceSetupCommand: nullableTrimmed(2_000).optional(),\n    /** Build triggers; only accepted when the sandbox can build. */\n    buildTriggers: z\n      .object({\n        schedule: z\n          .object({\n            enabled: z.boolean(),\n            cron: z.string().trim().min(1).max(100).optional(),\n            timezone: z.string().trim().min(1).max(100).optional(),\n          })\n          .optional(),\n        push: z\n          .object({\n            enabled: z.boolean().optional(),\n            debounceMinutes: z.number().int().min(0).max(1_440).optional(),\n          })\n          .optional(),\n      })\n      .optional(),\n    repositories: z\n      .array(environmentRepositoryPatchSchema)\n      .max(100)\n      .superRefine((entries, ctx) => {\n        const ids = new Set(entries.map(entry => entry.projectRepositoryId));\n        if (ids.size !== entries.length) {\n          ctx.addIssue({ code: 'custom', message: 'Each repository may be listed once' });\n        }\n        const positions = entries.flatMap(entry => (entry.position === undefined ? [] : [entry.position]));\n        if (positions.length === 0) return;\n        const expected = Array.from({ length: entries.length }, (_, index) => index + 1);\n        if (\n          positions.length !== entries.length ||\n          [...positions].sort((a, b) => a - b).some((p, i) => p !== expected[i])\n        ) {\n          ctx.addIssue({\n            code: 'custom',\n            message: 'Positions must be a permutation of 1..n over the listed repositories',\n          });\n        }\n      })\n      .optional(),\n  })\n  .refine(input => Object.keys(input).length > 0, { message: 'At least one environment field is required' });\n\nconst stagesSchema = z\n  .array(\n    z\n      .string()\n      .max(64)\n      .regex(/^[a-z0-9][a-z0-9_-]*$/i),\n  )\n  .min(1)\n  .max(16)\n  .refine(stages => new Set(stages).size === stages.length, { message: 'Stages must be unique' });\n\nconst externalSourceSchema = z\n  .object({\n    integrationId: z.string().min(1).max(128),\n    type: z.string().min(1).max(128),\n    externalId: z.string().min(1).max(512),\n    url: z.string().max(2_048).optional(),\n  })\n  .nullable();\n\nconst sessionSchema = z.object({\n  sessionId: z.string().min(1).max(512),\n  branch: z.string().min(1).max(512),\n  threadId: z.string().min(1).max(512),\n});\n\nconst sessionsSchema = z.record(z.string().min(1).max(64), sessionSchema);\nconst metadataSchema = z\n  .union([z.record(z.string(), z.unknown()), z.null()])\n  .refine(value => {\n    try {\n      return JSON.stringify(value).length <= 16 * 1024;\n    } catch {\n      return false;\n    }\n  }, 'Metadata exceeds 16 KiB')\n  .transform(value => {\n    if (value === null) return null;\n    const {\n      factoryRuleMaterializationKey: _materialization,\n      factoryPullRequestReconciliation: _reconciliation,\n      externalSourceMissingAt: _externalSourceMissingAt,\n      ...metadata\n    } = value;\n    return metadata;\n  });\n\nexport const createWorkItemBodySchema = z.object({\n  title: rawBoundedTrimmed(500),\n  board: z.string().min(1).max(128).optional(),\n  externalSource: externalSourceSchema.optional(),\n  parentWorkItemId: uuidSchema.nullable().optional(),\n  stages: stagesSchema.optional(),\n  sessions: sessionsSchema.optional(),\n  metadata: metadataSchema.optional(),\n});\n\nexport const updateWorkItemBodySchema = z\n  .object({\n    title: rawBoundedTrimmed(500).optional(),\n    board: z.string().min(1).max(128).optional(),\n    parentWorkItemId: uuidSchema.nullable().optional(),\n    stages: stagesSchema.optional(),\n    sessions: sessionsSchema.optional(),\n    metadata: metadataSchema.optional(),\n    plansPreapproved: z.literal(true).optional(),\n  })\n  .refine(input => Object.keys(input).length > 0, { message: 'At least one work-item field is required' });\n\nexport const transitionBodySchema = z\n  .object({\n    board: z.string().max(MAX_BOARD_IDENTIFIER_LENGTH).regex(BOARD_IDENTIFIER_RE),\n    stage: z.string().max(MAX_BOARD_IDENTIFIER_LENGTH).regex(BOARD_IDENTIFIER_RE),\n    expectedRevision: z.number().int().min(1),\n    requestId: trimmedUuidSchema,\n    cause: nonEmptyTrimmed(256),\n    reenter: z.unknown().optional(),\n  })\n  .transform(input => ({\n    board: input.board,\n    stage: input.stage,\n    expectedRevision: input.expectedRevision,\n    ingress: { type: 'human' as const, identity: input.requestId },\n    cause: input.cause,\n    ...(input.reenter === true ? { reenter: true } : {}),\n  }));\n\nexport const startWorkItemBodySchema = z.object({\n  sessionId: trimmedUuidSchema,\n  threadTitle: nonEmptyTrimmed(512),\n  kickoffKey: trimmedUuidSchema,\n  workItem: z.object({\n    id: trimmedUuidSchema,\n    role: nonEmptyTrimmed(32),\n    input: createWorkItemBodySchema,\n  }),\n});\n\nexport const automationRunStartBodySchema = z\n  .object({\n    requestId: trimmedUuidSchema,\n    expectedRevision: z.number().int().min(1),\n    role: z.enum(FACTORY_ROLE_VALUES),\n    skillName: nonEmptyTrimmed(128),\n    arguments: nonEmptyTrimmed(4_096).optional(),\n  })\n  .strict();\n\nexport const metricsQuerySchema = z.object({\n  from: z.string().optional(),\n  to: z.string().optional(),\n});\n\nconst decisionStatusSchema = z.enum([\n  'pending',\n  'proposed',\n  'dismissed',\n  'superseded',\n  'leased',\n  'retry',\n  'succeeded',\n  'failed',\n]);\nconst boundedLimitSchema = (defaultValue: number, max: number) =>\n  z\n    .string()\n    .optional()\n    .transform(value => {\n      const parsed = value ? Number.parseInt(value, 10) : defaultValue;\n      return Number.isFinite(parsed) ? Math.max(1, Math.min(max, parsed)) : defaultValue;\n    });\nconst decisionCursorSchema = z\n  .string()\n  .optional()\n  .transform((value, context) => {\n    if (!value) return undefined;\n    try {\n      const decoded = JSON.parse(Buffer.from(value, 'base64url').toString('utf8')) as unknown;\n      if (\n        !Array.isArray(decoded) ||\n        decoded.length !== 2 ||\n        typeof decoded[0] !== 'string' ||\n        typeof decoded[1] !== 'string'\n      ) {\n        throw new Error('invalid cursor');\n      }\n      const createdAt = new Date(decoded[0]);\n      if (Number.isNaN(createdAt.getTime()) || !new RegExp(UUID_PATTERN).test(decoded[1])) {\n        throw new Error('invalid cursor');\n      }\n      return { createdAt, id: decoded[1] };\n    } catch {\n      context.addIssue({ code: 'custom', message: 'Invalid cursor' });\n      return z.NEVER;\n    }\n  });\n\nexport const decisionQuerySchema = z.object({\n  statuses: z\n    .string()\n    .optional()\n    .transform(value => {\n      if (!value) return undefined;\n      const statuses = [...new Set(value.split(',').map(status => status.trim()))].filter(\n        status => decisionStatusSchema.safeParse(status).success,\n      ) as Array<z.infer<typeof decisionStatusSchema>>;\n      return statuses.length > 0 ? statuses : undefined;\n    }),\n  before: decisionCursorSchema,\n  limit: boundedLimitSchema(25, 50),\n});\n\nconst attentionKindSchema = z.enum([\n  'automation-failed',\n  'automation-proposed',\n  'mention',\n  'activity',\n  'agent-waiting',\n]);\ntype AttentionKind = z.infer<typeof attentionKindSchema>;\ntype AttentionStreamPosition = { occurredAt: Date; id: string };\ntype AttentionCursorMap = Map<AttentionKind, AttentionStreamPosition | undefined>;\n\nfunction parseAttentionStreamPosition(value: unknown): AttentionStreamPosition | undefined {\n  if (!Array.isArray(value) || value.length !== 2 || typeof value[0] !== 'string' || typeof value[1] !== 'string') {\n    return undefined;\n  }\n  const occurredAt = new Date(value[0]);\n  if (Number.isNaN(occurredAt.getTime()) || !new RegExp(UUID_PATTERN).test(value[1])) return undefined;\n  return { occurredAt, id: value[1] };\n}\n\nconst attentionCursorSchema = z\n  .string()\n  .optional()\n  .transform((value, context) => {\n    if (!value) return undefined;\n    try {\n      const decoded: unknown = JSON.parse(Buffer.from(value, 'base64url').toString('utf8'));\n      if (Array.isArray(decoded)) {\n        const legacy = parseAttentionStreamPosition(decoded);\n        if (!legacy) throw new Error('invalid cursor');\n        return new Map<AttentionKind, AttentionStreamPosition | undefined>([['automation-failed', legacy]]);\n      }\n      if (!decoded || typeof decoded !== 'object') throw new Error('invalid cursor');\n      const cursors: AttentionCursorMap = new Map();\n      for (const [kind, positionValue] of Object.entries(decoded)) {\n        const parsedKind = attentionKindSchema.safeParse(kind);\n        if (!parsedKind.success) throw new Error('invalid cursor');\n        if (positionValue === null) {\n          cursors.set(parsedKind.data, undefined);\n          continue;\n        }\n        const position = parseAttentionStreamPosition(positionValue);\n        if (!position) throw new Error('invalid cursor');\n        cursors.set(parsedKind.data, position);\n      }\n      if (cursors.size === 0) throw new Error('invalid cursor');\n      return cursors;\n    } catch {\n      context.addIssue({ code: 'custom', message: 'Invalid cursor' });\n      return z.NEVER;\n    }\n  });\n\nexport const attentionQuerySchema = z.object({\n  view: z.enum(['open', 'unread', 'archived']).optional().default('open'),\n  kind: z.array(attentionKindSchema).optional(),\n  before: attentionCursorSchema,\n  limit: boundedLimitSchema(25, 50),\n  search: z\n    .string()\n    .optional()\n    .transform(value => value?.trim().toLowerCase().slice(0, 200) || undefined),\n});\n\nconst attentionActionPathSchema = z\n  .object({\n    id: uuidSchema,\n    kind: attentionKindSchema,\n    sourceId: z.string().min(1).max(256),\n    occurrence: z\n      .string()\n      .regex(/^(0|[1-9]\\d*)$/)\n      .transform((value, context) => {\n        const occurrence = Number(value);\n        if (Number.isSafeInteger(occurrence)) return occurrence;\n        context.addIssue({ code: 'custom', message: 'Invalid occurrence' });\n        return z.NEVER;\n      }),\n  })\n  .refine(input => new RegExp(UUID_PATTERN).test(input.sourceId), {\n    message: 'Invalid attention source id',\n    path: ['sourceId'],\n  });\n\nexport const FACTORY_ROUTE_CONTRACTS = {\n  projectList: {\n    method: 'GET',\n    path: '/web/factory/projects',\n    description: 'List Factory projects for the current organization',\n    responseSchema: z.object({ projects: z.array(projectSchema) }),\n  },\n  projectCreate: {\n    method: 'POST',\n    path: '/web/factory/projects',\n    description: 'Create a Factory project',\n    bodySchema: createProjectBodySchema,\n    responseSchema: projectResponseSchema,\n  },\n  projectGet: {\n    method: 'GET',\n    path: '/web/factory/projects/:id',\n    description: 'Get a Factory project',\n    pathSchema: projectPathSchema,\n    responseSchema: projectResponseSchema,\n  },\n  projectUpdate: {\n    method: 'PATCH',\n    path: '/web/factory/projects/:id',\n    description: 'Update a Factory project',\n    pathSchema: projectPathSchema,\n    bodySchema: updateProjectBodySchema,\n    responseSchema: projectResponseSchema,\n  },\n  projectEnvironmentGet: {\n    method: 'GET',\n    path: '/web/factory/projects/:id/environment',\n    description: 'Get the sandbox environment of a Factory project: provider settings and its repositories in order',\n    pathSchema: projectPathSchema,\n    responseSchema: projectEnvironmentResponseSchema,\n  },\n  projectEnvironmentUpdate: {\n    method: 'PATCH',\n    path: '/web/factory/projects/:id/environment',\n    description: 'Update the sandbox environment of a Factory project: provider settings, repository order and setup',\n    pathSchema: projectPathSchema,\n    bodySchema: updateProjectEnvironmentBodySchema,\n    responseSchema: projectEnvironmentResponseSchema,\n  },\n  projectEnvironmentBuild: {\n    method: 'POST',\n    path: '/web/factory/projects/:id/environment/build',\n    description: 'Build the sandbox environment template of a Factory project now',\n    pathSchema: projectPathSchema,\n    responseSchema: environmentBuildStartResponseSchema,\n  },\n  projectEnvironmentBuilds: {\n    method: 'GET',\n    path: '/web/factory/projects/:id/environment/builds',\n    description:\n      'List the environment template builds of a Factory project, newest first, when the provider keeps history',\n    pathSchema: projectPathSchema,\n    responseSchema: environmentBuildsResponseSchema,\n  },\n  projectEnvironmentBuildGet: {\n    method: 'GET',\n    path: '/web/factory/projects/:id/environment/builds/:buildId',\n    description: 'Get the live status of one environment template build of a Factory project',\n    pathSchema: buildPathSchema,\n    responseSchema: environmentBuildResponseSchema,\n  },\n  projectApplyDefaultModel: {\n    method: 'POST',\n    path: '/web/factory/projects/:id/apply-default-model',\n    description: 'Apply the Factory default model to running work and review threads',\n    pathSchema: projectPathSchema,\n    responseSchema: z.object({\n      modelId: z.string(),\n      applied: z.array(z.string()),\n      skipped: z.array(\n        z.object({\n          threadId: z.string(),\n          reason: z.enum([\n            'not-running',\n            'work-item-missing',\n            'stage-inactive',\n            'thread-missing',\n            'mode-unknown',\n            'apply-failed',\n          ]),\n        }),\n      ),\n    }),\n  },\n  projectDelete: {\n    method: 'DELETE',\n    path: '/web/factory/projects/:id',\n    description: 'Delete a Factory project',\n    pathSchema: projectPathSchema,\n    responseSchema: z.null(),\n  },\n  metricsGet: {\n    method: 'GET',\n    path: '/web/factory/projects/:id/metrics',\n    description: 'Get Factory project metrics',\n    pathSchema: projectPathSchema,\n    querySchema: metricsQuerySchema,\n    responseSchema: z.object({ metrics: entitySchema }),\n  },\n  healthThresholdsGet: {\n    method: 'GET',\n    path: '/web/factory/projects/:id/health/thresholds',\n    description: 'Get queue-health thresholds',\n    pathSchema: projectPathSchema,\n    responseSchema: z.object({ thresholds: z.array(z.number().finite()) }),\n  },\n  boardCatalog: {\n    method: 'GET',\n    path: '/web/factory/projects/:id/boards',\n    description: 'List installed Factory boards',\n    pathSchema: projectPathSchema,\n    responseSchema: z.object({\n      boards: z.array(\n        z.object({\n          id: z.string(),\n          title: z.string(),\n          initialPhase: z.string(),\n          phases: z.array(\n            z.object({\n              id: z.string(),\n              title: z.string(),\n              kind: z.enum(['resting', 'working', 'terminal']),\n              role: z.string().optional(),\n              transitions: z.array(z.object({ outcome: z.string().nullable(), to: z.string() })),\n            }),\n          ),\n        }),\n      ),\n    }),\n  },\n  workItemList: {\n    method: 'GET',\n    path: '/web/factory/projects/:id/work-items',\n    description: 'List Factory work items and running sessions',\n    pathSchema: projectPathSchema,\n    responseSchema: z.object({\n      workItems: z.array(entitySchema),\n      runningSessionIds: z.array(z.string()),\n      parkedSessionIds: z.array(z.string()),\n    }),\n  },\n  workItemCreate: {\n    method: 'POST',\n    path: '/web/factory/projects/:id/work-items',\n    description: 'Create a work item in Intake',\n    pathSchema: projectPathSchema,\n    bodySchema: createWorkItemBodySchema,\n    responseSchema: workItemResponseSchema,\n  },\n  workItemUpdate: {\n    method: 'PATCH',\n    path: '/web/factory/work-items/:id',\n    description: 'Update non-stage work-item fields',\n    pathSchema: workItemPathSchema,\n    bodySchema: updateWorkItemBodySchema,\n    responseSchema: workItemResponseSchema,\n  },\n  workItemDelete: {\n    method: 'DELETE',\n    path: '/web/factory/work-items/:id',\n    description: 'Delete a Factory work item',\n    pathSchema: workItemPathSchema,\n    responseSchema: z.object({ ok: z.literal(true) }),\n  },\n  workItemTransition: {\n    method: 'POST',\n    path: '/web/factory/projects/:id/work-items/:workItemId/transition',\n    description: 'Transition a work item with its expected revision',\n    pathSchema: transitionPathSchema,\n    bodySchema: transitionBodySchema,\n    responseSchema: entitySchema,\n  },\n  workItemStart: {\n    method: 'POST',\n    path: '/web/factory/projects/:id/runs/start',\n    description: 'Explicitly start a Factory work-item run',\n    pathSchema: projectPathSchema,\n    bodySchema: startWorkItemBodySchema,\n    responseSchema: entitySchema,\n  },\n  workItemAutomationRun: {\n    method: 'POST',\n    path: '/web/factory/projects/:id/work-items/:workItemId/automation-runs',\n    description: 'Enqueue an idempotent deferred skill dispatch for a trusted external orchestrator',\n    pathSchema: transitionPathSchema,\n    bodySchema: automationRunStartBodySchema,\n    responseSchema: entitySchema,\n  },\n  decisionList: {\n    method: 'GET',\n    path: '/web/factory/projects/:id/decisions',\n    description: 'List Factory decisions',\n    pathSchema: projectPathSchema,\n    querySchema: decisionQuerySchema,\n    responseSchema: z.object({ decisions: z.array(entitySchema), nextCursor: z.string().optional() }),\n  },\n  decisionApprove: {\n    method: 'POST',\n    path: '/web/factory/projects/:id/decisions/:decisionId/approve',\n    description: 'Approve a proposed Factory decision',\n    pathSchema: projectDecisionPathSchema,\n    responseSchema: decisionResponseSchema,\n  },\n  decisionDismiss: {\n    method: 'POST',\n    path: '/web/factory/projects/:id/decisions/:decisionId/dismiss',\n    description: 'Dismiss a proposed Factory decision',\n    pathSchema: projectDecisionPathSchema,\n    responseSchema: decisionResponseSchema,\n  },\n  decisionRetry: {\n    method: 'POST',\n    path: '/web/factory/projects/:id/decisions/:decisionId/retry',\n    description: 'Retry a failed retryable Factory decision',\n    pathSchema: projectDecisionPathSchema,\n    responseSchema: decisionResponseSchema,\n  },\n  attentionList: {\n    method: 'GET',\n    path: '/web/factory/projects/:id/attention',\n    description: 'List the Factory attention inbox',\n    pathSchema: projectPathSchema,\n    querySchema: attentionQuerySchema,\n    responseSchema: z.object({\n      items: z.array(entitySchema),\n      kinds: z.record(\n        attentionKindSchema,\n        z.object({\n          open: z.number(),\n          unread: z.number(),\n          latest: z.object({ key: z.string(), at: z.string(), unread: z.boolean() }).nullable(),\n        }),\n      ),\n      hasMore: z.boolean(),\n      nextCursor: z.string().optional(),\n    }),\n  },\n  attentionReadAll: {\n    method: 'POST',\n    path: '/web/factory/projects/:id/attention/read-all',\n    description: 'Mark all Factory attention as read',\n    pathSchema: projectPathSchema,\n    querySchema: z.object({ before: attentionCursorSchema }),\n    responseSchema: z.object({ ok: z.literal(true), hasMore: z.boolean(), nextCursor: z.string().optional() }),\n  },\n  attentionRead: {\n    method: 'POST',\n    path: '/web/factory/projects/:id/attention/:kind/:sourceId/:occurrence/read',\n    description: 'Mark a Factory attention receipt as read',\n    pathSchema: attentionActionPathSchema,\n    responseSchema: z.object({ receipt: entitySchema }),\n  },\n  attentionArchive: {\n    method: 'POST',\n    path: '/web/factory/projects/:id/attention/:kind/:sourceId/:occurrence/archive',\n    description: 'Archive a Factory attention receipt',\n    pathSchema: attentionActionPathSchema,\n    responseSchema: z.object({ receipt: entitySchema }),\n  },\n  attentionRestore: {\n    method: 'POST',\n    path: '/web/factory/projects/:id/attention/:kind/:sourceId/:occurrence/restore',\n    description: 'Restore an archived Factory attention receipt',\n    pathSchema: attentionActionPathSchema,\n    responseSchema: z.object({ receipt: entitySchema }),\n  },\n} as const satisfies Record<string, FactoryRouteContract>;\n\nexport type FactoryRouteContractKey = keyof typeof FACTORY_ROUTE_CONTRACTS;\n"],"mappings":";;;;;;AAQA,MAAM,sBAAsB,OAAO,KAAK,mBAAmB;AAC3D,MAAM,kBAAkB;AAYxB,MAAa,eAAe;AAC5B,MAAM,aAAa,EAAE,OAAO,CAAC,CAAC,MAAM,IAAI,OAAO,YAAY,CAAC;AAC5D,MAAM,eAAe,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC;AACrD,MAAM,mBAAmB,QAAgB,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG;AACzE,MAAM,qBAAqB,QACzB,EACG,OAAO,CAAC,CACR,IAAI,GAAG,CAAC,CACR,WAAU,UAAS,MAAM,KAAK,CAAC,CAAC,CAChC,KAAK,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC;AAC3B,MAAM,oBAAoB,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,IAAI,OAAO,YAAY,CAAC;AAC1E,MAAM,mBAAmB,QACvB,EAAE,MAAM,CACN,EACG,OAAO,CAAC,CACR,KAAK,CAAC,CACN,IAAI,GAAG,CAAC,CACR,WAAU,UAAS,SAAS,IAAI,GACnC,EAAE,KAAK,CACT,CAAC;AACH,MAAM,oBAAoB,EAAE,OAAO,EAAE,IAAI,WAAW,CAAC;AACrD,MAAM,4BAA4B,EAAE,OAAO;CAAE,IAAI;CAAY,YAAY;AAAW,CAAC;AACrF,MAAM,qBAAqB,EAAE,OAAO,EAAE,IAAI,WAAW,CAAC;AACtD,MAAM,uBAAuB,EAAE,OAAO;CAAE,IAAI;CAAY,YAAY;AAAW,CAAC;AAEhF,MAAM,gBAAgB;AACtB,MAAM,wBAAwB,EAAE,OAAO,EAAE,SAAS,cAAc,CAAC;AACjE,MAAM,yBAAyB,EAAE,OAAO,EAAE,UAAU,aAAa,CAAC;AAClE,MAAM,yBAAyB,EAAE,OAAO,EAAE,UAAU,aAAa,CAAC;AAElE,MAAa,0BAA0B,EAAE,OAAO;CAC9C,MAAM,gBAAgB,GAAG;CACzB,aAAa,gBAAgB,GAAK,CAAC,CAAC,SAAS,CAAC,CAAC,QAAQ,IAAI;CAC3D,YAAY,EAAE,KAAK,oBAAoB,CAAC,CAAC,SAAS;AACpD,CAAC;AAED,MAAa,0BAA0B,EACpC,OAAO;CACN,MAAM,gBAAgB,GAAG,CAAC,CAAC,SAAS;CACpC,aAAa,gBAAgB,GAAK,CAAC,CAAC,SAAS;CAC7C,gBAAgB,gBAAgB,GAAG,CAAC,CAAC,SAAS;CAC9C,YAAY,EAAE,KAAK,oBAAoB,CAAC,CAAC,SAAS;CAClD,sBAAsB,EAAE,KAAK,eAAe,CAAC,CAAC,SAAS;CACvD,gBAAgB,EAAE,QAAQ,CAAC,CAAC,SAAS;CACrC,kBAAkB,EAAE,QAAQ,CAAC,CAAC,SAAS;CACvC,yBAAyB,EAAE,QAAQ,CAAC,CAAC,SAAS;CAC9C,mBAAmB,EAAE,QAAQ,CAAC,CAAC,SAAS;AAC1C,CAAC,CAAC,CACD,QAAO,UAAS,OAAO,KAAK,KAAK,CAAC,CAAC,SAAS,GAAG,EAAE,SAAS,yCAAyC,CAAC;AAEvG,MAAM,8BAA8B,EAAE,OAAO;CAC3C,qBAAqB,EAAE,OAAO;CAC9B,cAAc,EAAE,OAAO;CACvB,cAAc,EAAE,OAAO;CAEvB,MAAM,EAAE,OAAO,CAAC,CAAC,SAAS;CAC1B,eAAe,EAAE,OAAO,CAAC,CAAC,SAAS;CACnC,UAAU,EAAE,OAAO,CAAC,CAAC,IAAI;CACzB,eAAe,EAAE,QAAQ;CACzB,cAAc,EAAE,OAAO,CAAC,CAAC,SAAS;CAClC,iBAAiB,EAAE,OAAO,CAAC,CAAC,SAAS;CACrC,iBAAiB,EAAE,KAAK;EAAC;EAAW;EAAc;CAAQ,CAAC;CAC3D,gBAAgB,EAAE,OAAO,CAAC,CAAC,SAAS;CACpC,aAAa,EAAE,OAAO,CAAC,CAAC,SAAS;AACnC,CAAC;;AAGD,MAAa,2BAA2B,EAAE,OAAO;CAC/C,UAAU,EAAE,OAAO;CACnB,gBAAgB,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC;CAChD,cAAc,EAAE,OAAO;EACrB,UAAU,EAAE,QAAQ;EACpB,QAAQ,EAAE,OAAO;GAAE,WAAW,EAAE,QAAQ;GAAG,SAAS,EAAE,QAAQ;EAAE,CAAC;CACnE,CAAC;AACH,CAAC;;AAGD,MAAa,iCAAiC,EAAE,OAAO;CACrD,UAAU,EAAE,OAAO;EACjB,SAAS,EAAE,QAAQ;EACnB,MAAM,EAAE,OAAO,CAAC,CAAC,SAAS;EAC1B,UAAU,EAAE,OAAO,CAAC,CAAC,SAAS;;EAE9B,mBAAmB,EAAE,QAAQ;CAC/B,CAAC;CACD,MAAM,EAAE,OAAO;EAAE,SAAS,EAAE,QAAQ;EAAG,iBAAiB,EAAE,OAAO,CAAC,CAAC,IAAI;CAAE,CAAC;AAC5E,CAAC;;AAGD,MAAa,6BAA6B,EAAE,OAAO;CAAE,SAAS,EAAE,OAAO;CAAG,aAAa,EAAE,OAAO,CAAC,CAAC,SAAS;AAAE,CAAC;AAE9G,MAAa,mCAAmC,EAAE,OAAO,EACvD,aAAa,EAAE,OAAO;CACpB,SAAS;;CAET,UAAU,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC;CAC1C,yBAAyB,EAAE,OAAO,CAAC,CAAC,SAAS;CAC7C,uBAAuB,EAAE,OAAO,CAAC,CAAC,SAAS;CAC3C,kBAAkB,EAAE,OAAO,CAAC,CAAC,SAAS;CACtC,qBAAqB,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS;CAC/D,cAAc,EAAE,MAAM,2BAA2B;CACjD,eAAe,+BAA+B,SAAS;CACvD,OAAO,2BAA2B,SAAS,CAAC,CAAC,SAAS;AACxD,CAAC,EACH,CAAC;AAED,MAAM,+BAA+B,EAAE,KAAK;CAAC;CAAW;CAAY;CAAS;CAAU;AAAS,CAAC;AAEjG,MAAa,sCAAsC,EAAE,OAAO;CAC1D,SAAS,EAAE,KAAK;EAAC;EAAW;EAAW;EAAe;CAAQ,CAAC;CAC/D,SAAS,EAAE,OAAO,CAAC,CAAC,SAAS;CAC7B,YAAY,EAAE,OAAO,CAAC,CAAC,SAAS;CAChC,QAAQ,EAAE,OAAO,CAAC,CAAC,SAAS;AAC9B,CAAC;AAED,MAAa,yBAAyB,EAAE,OAAO;CAC7C,SAAS,EAAE,OAAO;CAClB,QAAQ;CACR,YAAY,EAAE,OAAO,CAAC,CAAC,SAAS;CAChC,WAAW,EAAE,OAAO,CAAC,CAAC,SAAS;CAC/B,YAAY,EAAE,OAAO,CAAC,CAAC,SAAS;CAChC,OAAO,EAAE,OAAO,CAAC,CAAC,SAAS;CAC3B,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS;AACrC,CAAC;AAED,MAAa,kCAAkC,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,EAAE,CAAC;AACnG,MAAa,iCAAiC,EAAE,OAAO,EAAE,OAAO,uBAAuB,CAAC;AAExF,MAAM,kBAAkB,kBAAkB,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;AAE/E,MAAM,mCAAmC,EAAE,OAAO;CAChD,qBAAqB;CACrB,UAAU,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;CAC3C,eAAe,EAAE,QAAQ,CAAC,CAAC,SAAS;CACpC,cAAc,gBAAgB,GAAK,CAAC,CAAC,SAAS;CAC9C,iBAAiB,gBAAgB,GAAK,CAAC,CAAC,SAAS;AACnD,CAAC;AAED,MAAa,qCAAqC,EAC/C,OAAO;CACN,yBAAyB,gBAAgB,GAAK,CAAC,CAC5C,QAAO,UAAS,UAAU,QAAQ,MAAM,WAAW,GAAG,GAAG,EACxD,SAAS,2CACX,CAAC,CAAC,CACD,SAAS;;CAEZ,UAAU,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;CAChE,uBAAuB,gBAAgB,GAAK,CAAC,CAAC,SAAS;;CAEvD,eAAe,EACZ,OAAO;EACN,UAAU,EACP,OAAO;GACN,SAAS,EAAE,QAAQ;GACnB,MAAM,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,SAAS;GACjD,UAAU,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,SAAS;EACvD,CAAC,CAAC,CACD,SAAS;EACZ,MAAM,EACH,OAAO;GACN,SAAS,EAAE,QAAQ,CAAC,CAAC,SAAS;GAC9B,iBAAiB,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAK,CAAC,CAAC,SAAS;EAC/D,CAAC,CAAC,CACD,SAAS;CACd,CAAC,CAAC,CACD,SAAS;CACZ,cAAc,EACX,MAAM,gCAAgC,CAAC,CACvC,IAAI,GAAG,CAAC,CACR,aAAa,SAAS,QAAQ;EAE7B,IAAI,IADY,IAAI,QAAQ,KAAI,UAAS,MAAM,mBAAmB,CAC5D,CAAC,CAAC,SAAS,QAAQ,QACvB,IAAI,SAAS;GAAE,MAAM;GAAU,SAAS;EAAqC,CAAC;EAEhF,MAAM,YAAY,QAAQ,SAAQ,UAAU,MAAM,aAAa,KAAA,IAAY,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAE;EACjG,IAAI,UAAU,WAAW,GAAG;EAC5B,MAAM,WAAW,MAAM,KAAK,EAAE,QAAQ,QAAQ,OAAO,IAAI,GAAG,UAAU,QAAQ,CAAC;EAC/E,IACE,UAAU,WAAW,QAAQ,UAC7B,CAAC,GAAG,SAAS,CAAC,CAAC,MAAM,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,MAAM,GAAG,MAAM,MAAM,SAAS,EAAE,GAErE,IAAI,SAAS;GACX,MAAM;GACN,SAAS;EACX,CAAC;CAEL,CAAC,CAAC,CACD,SAAS;AACd,CAAC,CAAC,CACD,QAAO,UAAS,OAAO,KAAK,KAAK,CAAC,CAAC,SAAS,GAAG,EAAE,SAAS,6CAA6C,CAAC;AAE3G,MAAM,eAAe,EAClB,MACC,EACG,OAAO,CAAC,CACR,IAAI,EAAE,CAAC,CACP,MAAM,wBAAwB,CACnC,CAAC,CACA,IAAI,CAAC,CAAC,CACN,IAAI,EAAE,CAAC,CACP,QAAO,WAAU,IAAI,IAAI,MAAM,CAAC,CAAC,SAAS,OAAO,QAAQ,EAAE,SAAS,wBAAwB,CAAC;AAEhG,MAAM,uBAAuB,EAC1B,OAAO;CACN,eAAe,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG;CACxC,MAAM,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG;CAC/B,YAAY,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG;CACrC,KAAK,EAAE,OAAO,CAAC,CAAC,IAAI,IAAK,CAAC,CAAC,SAAS;AACtC,CAAC,CAAC,CACD,SAAS;AAEZ,MAAM,gBAAgB,EAAE,OAAO;CAC7B,WAAW,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG;CACpC,QAAQ,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG;CACjC,UAAU,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG;AACrC,CAAC;AAED,MAAM,iBAAiB,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,aAAa;AACxE,MAAM,iBAAiB,EACpB,MAAM,CAAC,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CACpD,QAAO,UAAS;CACf,IAAI;EACF,OAAO,KAAK,UAAU,KAAK,CAAC,CAAC,UAAU;CACzC,QAAQ;EACN,OAAO;CACT;AACF,GAAG,yBAAyB,CAAC,CAC5B,WAAU,UAAS;CAClB,IAAI,UAAU,MAAM,OAAO;CAC3B,MAAM,EACJ,+BAA+B,kBAC/B,kCAAkC,iBAClC,yBAAyB,0BACzB,GAAG,aACD;CACJ,OAAO;AACT,CAAC;AAEH,MAAa,2BAA2B,EAAE,OAAO;CAC/C,OAAO,kBAAkB,GAAG;CAC5B,OAAO,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,SAAS;CAC3C,gBAAgB,qBAAqB,SAAS;CAC9C,kBAAkB,WAAW,SAAS,CAAC,CAAC,SAAS;CACjD,QAAQ,aAAa,SAAS;CAC9B,UAAU,eAAe,SAAS;CAClC,UAAU,eAAe,SAAS;AACpC,CAAC;AAED,MAAa,2BAA2B,EACrC,OAAO;CACN,OAAO,kBAAkB,GAAG,CAAC,CAAC,SAAS;CACvC,OAAO,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,SAAS;CAC3C,kBAAkB,WAAW,SAAS,CAAC,CAAC,SAAS;CACjD,QAAQ,aAAa,SAAS;CAC9B,UAAU,eAAe,SAAS;CAClC,UAAU,eAAe,SAAS;CAClC,kBAAkB,EAAE,QAAQ,IAAI,CAAC,CAAC,SAAS;AAC7C,CAAC,CAAC,CACD,QAAO,UAAS,OAAO,KAAK,KAAK,CAAC,CAAC,SAAS,GAAG,EAAE,SAAS,2CAA2C,CAAC;AAEzG,MAAa,uBAAuB,EACjC,OAAO;CACN,OAAO,EAAE,OAAO,CAAC,CAAC,IAAA,GAA+B,CAAC,CAAC,MAAM,mBAAmB;CAC5E,OAAO,EAAE,OAAO,CAAC,CAAC,IAAA,GAA+B,CAAC,CAAC,MAAM,mBAAmB;CAC5E,kBAAkB,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC;CACxC,WAAW;CACX,OAAO,gBAAgB,GAAG;CAC1B,SAAS,EAAE,QAAQ,CAAC,CAAC,SAAS;AAChC,CAAC,CAAC,CACD,WAAU,WAAU;CACnB,OAAO,MAAM;CACb,OAAO,MAAM;CACb,kBAAkB,MAAM;CACxB,SAAS;EAAE,MAAM;EAAkB,UAAU,MAAM;CAAU;CAC7D,OAAO,MAAM;CACb,GAAI,MAAM,YAAY,OAAO,EAAE,SAAS,KAAK,IAAI,CAAC;AACpD,EAAE;AAEJ,MAAa,0BAA0B,EAAE,OAAO;CAC9C,WAAW;CACX,aAAa,gBAAgB,GAAG;CAChC,YAAY;CACZ,UAAU,EAAE,OAAO;EACjB,IAAI;EACJ,MAAM,gBAAgB,EAAE;EACxB,OAAO;CACT,CAAC;AACH,CAAC;AAED,MAAa,+BAA+B,EACzC,OAAO;CACN,WAAW;CACX,kBAAkB,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC;CACxC,MAAM,EAAE,KAAK,mBAAmB;CAChC,WAAW,gBAAgB,GAAG;CAC9B,WAAW,gBAAgB,IAAK,CAAC,CAAC,SAAS;AAC7C,CAAC,CAAC,CACD,OAAO;AAEV,MAAa,qBAAqB,EAAE,OAAO;CACzC,MAAM,EAAE,OAAO,CAAC,CAAC,SAAS;CAC1B,IAAI,EAAE,OAAO,CAAC,CAAC,SAAS;AAC1B,CAAC;AAED,MAAM,uBAAuB,EAAE,KAAK;CAClC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF,CAAC;AACD,MAAM,sBAAsB,cAAsB,QAChD,EACG,OAAO,CAAC,CACR,SAAS,CAAC,CACV,WAAU,UAAS;CAClB,MAAM,SAAS,QAAQ,OAAO,SAAS,OAAO,EAAE,IAAI;CACpD,OAAO,OAAO,SAAS,MAAM,IAAI,KAAK,IAAI,GAAG,KAAK,IAAI,KAAK,MAAM,CAAC,IAAI;AACxE,CAAC;AACL,MAAM,uBAAuB,EAC1B,OAAO,CAAC,CACR,SAAS,CAAC,CACV,WAAW,OAAO,YAAY;CAC7B,IAAI,CAAC,OAAO,OAAO,KAAA;CACnB,IAAI;EACF,MAAM,UAAU,KAAK,MAAM,OAAO,KAAK,OAAO,WAAW,CAAC,CAAC,SAAS,MAAM,CAAC;EAC3E,IACE,CAAC,MAAM,QAAQ,OAAO,KACtB,QAAQ,WAAW,KACnB,OAAO,QAAQ,OAAO,YACtB,OAAO,QAAQ,OAAO,UAEtB,MAAM,IAAI,MAAM,gBAAgB;EAElC,MAAM,YAAY,IAAI,KAAK,QAAQ,EAAE;EACrC,IAAI,OAAO,MAAM,UAAU,QAAQ,CAAC,KAAK,kBAAC,IAAI,OAAA,+EAAmB,EAAC,CAAC,KAAK,QAAQ,EAAE,GAChF,MAAM,IAAI,MAAM,gBAAgB;EAElC,OAAO;GAAE;GAAW,IAAI,QAAQ;EAAG;CACrC,QAAQ;EACN,QAAQ,SAAS;GAAE,MAAM;GAAU,SAAS;EAAiB,CAAC;EAC9D,OAAO,EAAE;CACX;AACF,CAAC;AAEH,MAAa,sBAAsB,EAAE,OAAO;CAC1C,UAAU,EACP,OAAO,CAAC,CACR,SAAS,CAAC,CACV,WAAU,UAAS;EAClB,IAAI,CAAC,OAAO,OAAO,KAAA;EACnB,MAAM,WAAW,CAAC,GAAG,IAAI,IAAI,MAAM,MAAM,GAAG,CAAC,CAAC,KAAI,WAAU,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,QAC3E,WAAU,qBAAqB,UAAU,MAAM,CAAC,CAAC,OACnD;EACA,OAAO,SAAS,SAAS,IAAI,WAAW,KAAA;CAC1C,CAAC;CACH,QAAQ;CACR,OAAO,mBAAmB,IAAI,EAAE;AAClC,CAAC;AAED,MAAM,sBAAsB,EAAE,KAAK;CACjC;CACA;CACA;CACA;CACA;AACF,CAAC;AAKD,SAAS,6BAA6B,OAAqD;CACzF,IAAI,CAAC,MAAM,QAAQ,KAAK,KAAK,MAAM,WAAW,KAAK,OAAO,MAAM,OAAO,YAAY,OAAO,MAAM,OAAO,UACrG;CAEF,MAAM,aAAa,IAAI,KAAK,MAAM,EAAE;CACpC,IAAI,OAAO,MAAM,WAAW,QAAQ,CAAC,KAAK,kBAAC,IAAI,OAAA,+EAAmB,EAAC,CAAC,KAAK,MAAM,EAAE,GAAG,OAAO,KAAA;CAC3F,OAAO;EAAE;EAAY,IAAI,MAAM;CAAG;AACpC;AAEA,MAAM,wBAAwB,EAC3B,OAAO,CAAC,CACR,SAAS,CAAC,CACV,WAAW,OAAO,YAAY;CAC7B,IAAI,CAAC,OAAO,OAAO,KAAA;CACnB,IAAI;EACF,MAAM,UAAmB,KAAK,MAAM,OAAO,KAAK,OAAO,WAAW,CAAC,CAAC,SAAS,MAAM,CAAC;EACpF,IAAI,MAAM,QAAQ,OAAO,GAAG;GAC1B,MAAM,SAAS,6BAA6B,OAAO;GACnD,IAAI,CAAC,QAAQ,MAAM,IAAI,MAAM,gBAAgB;GAC7C,uBAAO,IAAI,IAAwD,CAAC,CAAC,qBAAqB,MAAM,CAAC,CAAC;EACpG;EACA,IAAI,CAAC,WAAW,OAAO,YAAY,UAAU,MAAM,IAAI,MAAM,gBAAgB;EAC7E,MAAM,0BAA8B,IAAI,IAAI;EAC5C,KAAK,MAAM,CAAC,MAAM,kBAAkB,OAAO,QAAQ,OAAO,GAAG;GAC3D,MAAM,aAAa,oBAAoB,UAAU,IAAI;GACrD,IAAI,CAAC,WAAW,SAAS,MAAM,IAAI,MAAM,gBAAgB;GACzD,IAAI,kBAAkB,MAAM;IAC1B,QAAQ,IAAI,WAAW,MAAM,KAAA,CAAS;IACtC;GACF;GACA,MAAM,WAAW,6BAA6B,aAAa;GAC3D,IAAI,CAAC,UAAU,MAAM,IAAI,MAAM,gBAAgB;GAC/C,QAAQ,IAAI,WAAW,MAAM,QAAQ;EACvC;EACA,IAAI,QAAQ,SAAS,GAAG,MAAM,IAAI,MAAM,gBAAgB;EACxD,OAAO;CACT,QAAQ;EACN,QAAQ,SAAS;GAAE,MAAM;GAAU,SAAS;EAAiB,CAAC;EAC9D,OAAO,EAAE;CACX;AACF,CAAC;AAEH,MAAa,uBAAuB,EAAE,OAAO;CAC3C,MAAM,EAAE,KAAK;EAAC;EAAQ;EAAU;CAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,QAAQ,MAAM;CACtE,MAAM,EAAE,MAAM,mBAAmB,CAAC,CAAC,SAAS;CAC5C,QAAQ;CACR,OAAO,mBAAmB,IAAI,EAAE;CAChC,QAAQ,EACL,OAAO,CAAC,CACR,SAAS,CAAC,CACV,WAAU,UAAS,OAAO,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,MAAM,GAAG,GAAG,KAAK,KAAA,CAAS;AAC9E,CAAC;AAED,MAAM,4BAA4B,EAC/B,OAAO;CACN,IAAI;CACJ,MAAM;CACN,UAAU,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG;CACnC,YAAY,EACT,OAAO,CAAC,CACR,MAAM,gBAAgB,CAAC,CACvB,WAAW,OAAO,YAAY;EAC7B,MAAM,aAAa,OAAO,KAAK;EAC/B,IAAI,OAAO,cAAc,UAAU,GAAG,OAAO;EAC7C,QAAQ,SAAS;GAAE,MAAM;GAAU,SAAS;EAAqB,CAAC;EAClE,OAAO,EAAE;CACX,CAAC;AACL,CAAC,CAAC,CACD,QAAO,UAAS,IAAI,OAAO,YAAY,CAAC,CAAC,KAAK,MAAM,QAAQ,GAAG;CAC9D,SAAS;CACT,MAAM,CAAC,UAAU;AACnB,CAAC;AAEH,MAAa,0BAA0B;CACrC,aAAa;EACX,QAAQ;EACR,MAAM;EACN,aAAa;EACb,gBAAgB,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,EAAE,CAAC;CAC/D;CACA,eAAe;EACb,QAAQ;EACR,MAAM;EACN,aAAa;EACb,YAAY;EACZ,gBAAgB;CAClB;CACA,YAAY;EACV,QAAQ;EACR,MAAM;EACN,aAAa;EACb,YAAY;EACZ,gBAAgB;CAClB;CACA,eAAe;EACb,QAAQ;EACR,MAAM;EACN,aAAa;EACb,YAAY;EACZ,YAAY;EACZ,gBAAgB;CAClB;CACA,uBAAuB;EACrB,QAAQ;EACR,MAAM;EACN,aAAa;EACb,YAAY;EACZ,gBAAgB;CAClB;CACA,0BAA0B;EACxB,QAAQ;EACR,MAAM;EACN,aAAa;EACb,YAAY;EACZ,YAAY;EACZ,gBAAgB;CAClB;CACA,yBAAyB;EACvB,QAAQ;EACR,MAAM;EACN,aAAa;EACb,YAAY;EACZ,gBAAgB;CAClB;CACA,0BAA0B;EACxB,QAAQ;EACR,MAAM;EACN,aACE;EACF,YAAY;EACZ,gBAAgB;CAClB;CACA,4BAA4B;EAC1B,QAAQ;EACR,MAAM;EACN,aAAa;EACb,YAAY;EACZ,gBAAgB;CAClB;CACA,0BAA0B;EACxB,QAAQ;EACR,MAAM;EACN,aAAa;EACb,YAAY;EACZ,gBAAgB,EAAE,OAAO;GACvB,SAAS,EAAE,OAAO;GAClB,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC;GAC3B,SAAS,EAAE,MACT,EAAE,OAAO;IACP,UAAU,EAAE,OAAO;IACnB,QAAQ,EAAE,KAAK;KACb;KACA;KACA;KACA;KACA;KACA;IACF,CAAC;GACH,CAAC,CACH;EACF,CAAC;CACH;CACA,eAAe;EACb,QAAQ;EACR,MAAM;EACN,aAAa;EACb,YAAY;EACZ,gBAAgB,EAAE,KAAK;CACzB;CACA,YAAY;EACV,QAAQ;EACR,MAAM;EACN,aAAa;EACb,YAAY;EACZ,aAAa;EACb,gBAAgB,EAAE,OAAO,EAAE,SAAS,aAAa,CAAC;CACpD;CACA,qBAAqB;EACnB,QAAQ;EACR,MAAM;EACN,aAAa;EACb,YAAY;EACZ,gBAAgB,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CACvE;CACA,cAAc;EACZ,QAAQ;EACR,MAAM;EACN,aAAa;EACb,YAAY;EACZ,gBAAgB,EAAE,OAAO,EACvB,QAAQ,EAAE,MACR,EAAE,OAAO;GACP,IAAI,EAAE,OAAO;GACb,OAAO,EAAE,OAAO;GAChB,cAAc,EAAE,OAAO;GACvB,QAAQ,EAAE,MACR,EAAE,OAAO;IACP,IAAI,EAAE,OAAO;IACb,OAAO,EAAE,OAAO;IAChB,MAAM,EAAE,KAAK;KAAC;KAAW;KAAW;IAAU,CAAC;IAC/C,MAAM,EAAE,OAAO,CAAC,CAAC,SAAS;IAC1B,aAAa,EAAE,MAAM,EAAE,OAAO;KAAE,SAAS,EAAE,OAAO,CAAC,CAAC,SAAS;KAAG,IAAI,EAAE,OAAO;IAAE,CAAC,CAAC;GACnF,CAAC,CACH;EACF,CAAC,CACH,EACF,CAAC;CACH;CACA,cAAc;EACZ,QAAQ;EACR,MAAM;EACN,aAAa;EACb,YAAY;EACZ,gBAAgB,EAAE,OAAO;GACvB,WAAW,EAAE,MAAM,YAAY;GAC/B,mBAAmB,EAAE,MAAM,EAAE,OAAO,CAAC;GACrC,kBAAkB,EAAE,MAAM,EAAE,OAAO,CAAC;EACtC,CAAC;CACH;CACA,gBAAgB;EACd,QAAQ;EACR,MAAM;EACN,aAAa;EACb,YAAY;EACZ,YAAY;EACZ,gBAAgB;CAClB;CACA,gBAAgB;EACd,QAAQ;EACR,MAAM;EACN,aAAa;EACb,YAAY;EACZ,YAAY;EACZ,gBAAgB;CAClB;CACA,gBAAgB;EACd,QAAQ;EACR,MAAM;EACN,aAAa;EACb,YAAY;EACZ,gBAAgB,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,IAAI,EAAE,CAAC;CAClD;CACA,oBAAoB;EAClB,QAAQ;EACR,MAAM;EACN,aAAa;EACb,YAAY;EACZ,YAAY;EACZ,gBAAgB;CAClB;CACA,eAAe;EACb,QAAQ;EACR,MAAM;EACN,aAAa;EACb,YAAY;EACZ,YAAY;EACZ,gBAAgB;CAClB;CACA,uBAAuB;EACrB,QAAQ;EACR,MAAM;EACN,aAAa;EACb,YAAY;EACZ,YAAY;EACZ,gBAAgB;CAClB;CACA,cAAc;EACZ,QAAQ;EACR,MAAM;EACN,aAAa;EACb,YAAY;EACZ,aAAa;EACb,gBAAgB,EAAE,OAAO;GAAE,WAAW,EAAE,MAAM,YAAY;GAAG,YAAY,EAAE,OAAO,CAAC,CAAC,SAAS;EAAE,CAAC;CAClG;CACA,iBAAiB;EACf,QAAQ;EACR,MAAM;EACN,aAAa;EACb,YAAY;EACZ,gBAAgB;CAClB;CACA,iBAAiB;EACf,QAAQ;EACR,MAAM;EACN,aAAa;EACb,YAAY;EACZ,gBAAgB;CAClB;CACA,eAAe;EACb,QAAQ;EACR,MAAM;EACN,aAAa;EACb,YAAY;EACZ,gBAAgB;CAClB;CACA,eAAe;EACb,QAAQ;EACR,MAAM;EACN,aAAa;EACb,YAAY;EACZ,aAAa;EACb,gBAAgB,EAAE,OAAO;GACvB,OAAO,EAAE,MAAM,YAAY;GAC3B,OAAO,EAAE,OACP,qBACA,EAAE,OAAO;IACP,MAAM,EAAE,OAAO;IACf,QAAQ,EAAE,OAAO;IACjB,QAAQ,EAAE,OAAO;KAAE,KAAK,EAAE,OAAO;KAAG,IAAI,EAAE,OAAO;KAAG,QAAQ,EAAE,QAAQ;IAAE,CAAC,CAAC,CAAC,SAAS;GACtF,CAAC,CACH;GACA,SAAS,EAAE,QAAQ;GACnB,YAAY,EAAE,OAAO,CAAC,CAAC,SAAS;EAClC,CAAC;CACH;CACA,kBAAkB;EAChB,QAAQ;EACR,MAAM;EACN,aAAa;EACb,YAAY;EACZ,aAAa,EAAE,OAAO,EAAE,QAAQ,sBAAsB,CAAC;EACvD,gBAAgB,EAAE,OAAO;GAAE,IAAI,EAAE,QAAQ,IAAI;GAAG,SAAS,EAAE,QAAQ;GAAG,YAAY,EAAE,OAAO,CAAC,CAAC,SAAS;EAAE,CAAC;CAC3G;CACA,eAAe;EACb,QAAQ;EACR,MAAM;EACN,aAAa;EACb,YAAY;EACZ,gBAAgB,EAAE,OAAO,EAAE,SAAS,aAAa,CAAC;CACpD;CACA,kBAAkB;EAChB,QAAQ;EACR,MAAM;EACN,aAAa;EACb,YAAY;EACZ,gBAAgB,EAAE,OAAO,EAAE,SAAS,aAAa,CAAC;CACpD;CACA,kBAAkB;EAChB,QAAQ;EACR,MAAM;EACN,aAAa;EACb,YAAY;EACZ,gBAAgB,EAAE,OAAO,EAAE,SAAS,aAAa,CAAC;CACpD;AACF"}
+{"version":3,"file":"contracts.js","names":[],"sources":["../../src/routes/contracts.ts"],"sourcesContent":["import { THINKING_LEVEL_VALUES } from '@mastra/code-sdk/thinking';\nimport type { ThinkingLevelSetting } from '@mastra/code-sdk/thinking';\nimport { z } from 'zod';\n\nimport { FACTORY_ROLE_STAGES } from '../rules/types.js';\nimport { BOARD_IDENTIFIER_RE, MAX_BOARD_IDENTIFIER_LENGTH } from '../rules/validation.js';\nimport { FACTORY_MODEL_SCOPES } from '../storage/domains/projects/base.js';\n\nconst FACTORY_ROLE_VALUES = Object.keys(FACTORY_ROLE_STAGES) as [string, ...string[]];\nexport const THINKING_LEVELS = THINKING_LEVEL_VALUES as [ThinkingLevelSetting, ...ThinkingLevelSetting[]];\n\nexport type FactoryRouteContract = {\n  method: 'GET' | 'POST' | 'PATCH' | 'DELETE';\n  path: string;\n  description: string;\n  pathSchema?: z.ZodType;\n  querySchema?: z.ZodType;\n  bodySchema?: z.ZodType;\n  responseSchema: z.ZodType;\n};\n\nexport const UUID_PATTERN = '^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$';\nconst uuidSchema = z.string().regex(new RegExp(UUID_PATTERN));\nconst entitySchema = z.record(z.string(), z.unknown());\nconst nonEmptyTrimmed = (max: number) => z.string().trim().min(1).max(max);\nconst rawBoundedTrimmed = (max: number) =>\n  z\n    .string()\n    .max(max)\n    .transform(value => value.trim())\n    .pipe(z.string().min(1));\nconst trimmedUuidSchema = z.string().trim().regex(new RegExp(UUID_PATTERN));\nconst nullableTrimmed = (max: number) =>\n  z.union([\n    z\n      .string()\n      .trim()\n      .max(max)\n      .transform(value => value || null),\n    z.null(),\n  ]);\nconst projectPathSchema = z.object({ id: uuidSchema });\nconst projectDecisionPathSchema = z.object({ id: uuidSchema, decisionId: uuidSchema });\nconst workItemPathSchema = z.object({ id: uuidSchema });\nconst transitionPathSchema = z.object({ id: uuidSchema, workItemId: uuidSchema });\n\nconst projectSchema = entitySchema;\nconst projectResponseSchema = z.object({ project: projectSchema });\nconst workItemResponseSchema = z.object({ workItem: entitySchema });\nconst decisionResponseSchema = z.object({ decision: entitySchema });\n\nexport const createProjectBodySchema = z.object({\n  name: nonEmptyTrimmed(200),\n  description: nullableTrimmed(2_000).optional().default(null),\n  modelScope: z.enum(FACTORY_MODEL_SCOPES).optional(),\n});\n\nexport const updateProjectBodySchema = z\n  .object({\n    name: nonEmptyTrimmed(200).optional(),\n    description: nullableTrimmed(2_000).optional(),\n    defaultModelId: nullableTrimmed(200).optional(),\n    modelScope: z.enum(FACTORY_MODEL_SCOPES).optional(),\n    defaultThinkingLevel: z.enum(THINKING_LEVELS).optional(),\n    autoRunEnabled: z.boolean().optional(),\n    autoApprovePlans: z.boolean().optional(),\n    reviewTestChecksEnabled: z.boolean().optional(),\n    selfReviewEnabled: z.boolean().optional(),\n  })\n  .refine(input => Object.keys(input).length > 0, { message: 'At least one project field is required' });\n\nconst environmentRepositorySchema = z.object({\n  projectRepositoryId: z.string(),\n  connectionId: z.string(),\n  repositoryId: z.string(),\n  // Null when the repository row behind the link is missing.\n  slug: z.string().nullable(),\n  defaultBranch: z.string().nullable(),\n  position: z.number().int(),\n  inEnvironment: z.boolean(),\n  setupCommand: z.string().nullable(),\n  teardownCommand: z.string().nullable(),\n  lastBuildStatus: z.enum(['unbuilt', 'configured', 'failed']),\n  lastBuildError: z.string().nullable(),\n  lastBuiltAt: z.string().nullable(),\n});\n\n/** The configured FactorySandbox as factory describes it: provider id, JSON Schema of its settings, capabilities. */\nexport const environmentSandboxSchema = z.object({\n  provider: z.string(),\n  settingsSchema: z.record(z.string(), z.unknown()),\n  capabilities: z.object({\n    template: z.boolean(),\n    builds: z.object({ available: z.boolean(), history: z.boolean() }),\n  }),\n});\n\n/** When the environment builds on its own; present only when the sandbox can build. */\nexport const environmentBuildTriggersSchema = z.object({\n  schedule: z.object({\n    enabled: z.boolean(),\n    cron: z.string().nullable(),\n    timezone: z.string().nullable(),\n    /** False when the host's storage has no schedules domain; the cron trigger cannot be enabled then. */\n    scheduleAvailable: z.boolean(),\n  }),\n  push: z.object({ enabled: z.boolean(), debounceMinutes: z.number().int() }),\n});\n\n/** The last build factory asked the provider for, from the project row only; status is read live. */\nexport const environmentLastBuildSchema = z.object({ buildId: z.string(), attemptedAt: z.string().nullable() });\n\nexport const projectEnvironmentResponseSchema = z.object({\n  environment: z.object({\n    sandbox: environmentSandboxSchema,\n    /** The stored settings document; only keys the user set. */\n    settings: z.record(z.string(), z.unknown()),\n    sandboxWorkingDirectory: z.string().nullable(),\n    workspaceSetupCommand: z.string().nullable(),\n    activeTemplateId: z.string().nullable(),\n    activeTemplateHeads: z.record(z.string(), z.string()).nullable(),\n    repositories: z.array(environmentRepositorySchema),\n    buildTriggers: environmentBuildTriggersSchema.optional(),\n    build: environmentLastBuildSchema.nullable().optional(),\n  }),\n});\n\nconst environmentBuildStatusSchema = z.enum(['pending', 'building', 'ready', 'failed', 'unknown']);\n\nexport const environmentBuildStartResponseSchema = z.object({\n  outcome: z.enum(['started', 'skipped', 'unavailable', 'failed']),\n  buildId: z.string().optional(),\n  templateId: z.string().optional(),\n  reason: z.string().optional(),\n});\n\nexport const environmentBuildSchema = z.object({\n  buildId: z.string(),\n  status: environmentBuildStatusSchema,\n  templateId: z.string().optional(),\n  startedAt: z.string().optional(),\n  finishedAt: z.string().optional(),\n  error: z.string().optional(),\n  logs: z.array(z.string()).optional(),\n});\n\nexport const environmentBuildsResponseSchema = z.object({ builds: z.array(environmentBuildSchema) });\nexport const environmentBuildResponseSchema = z.object({ build: environmentBuildSchema });\n\nconst buildPathSchema = projectPathSchema.extend({ buildId: z.string().min(1) });\n\nconst environmentRepositoryPatchSchema = z.object({\n  projectRepositoryId: uuidSchema,\n  position: z.number().int().min(1).optional(),\n  inEnvironment: z.boolean().optional(),\n  setupCommand: nullableTrimmed(2_000).optional(),\n  teardownCommand: nullableTrimmed(2_000).optional(),\n});\n\nexport const updateProjectEnvironmentBodySchema = z\n  .object({\n    sandboxWorkingDirectory: nullableTrimmed(1_000)\n      .refine(value => value === null || value.startsWith('/'), {\n        message: 'sandboxWorkingDirectory must be absolute',\n      })\n      .optional(),\n    /** Partial settings merged onto the stored document; null removes a key. Validated by the FactorySandbox. */\n    settings: z.record(z.string(), z.unknown().nullable()).optional(),\n    workspaceSetupCommand: nullableTrimmed(2_000).optional(),\n    /** Build triggers; only accepted when the sandbox can build. */\n    buildTriggers: z\n      .object({\n        schedule: z\n          .object({\n            enabled: z.boolean(),\n            cron: z.string().trim().min(1).max(100).optional(),\n            timezone: z.string().trim().min(1).max(100).optional(),\n          })\n          .optional(),\n        push: z\n          .object({\n            enabled: z.boolean().optional(),\n            debounceMinutes: z.number().int().min(0).max(1_440).optional(),\n          })\n          .optional(),\n      })\n      .optional(),\n    repositories: z\n      .array(environmentRepositoryPatchSchema)\n      .max(100)\n      .superRefine((entries, ctx) => {\n        const ids = new Set(entries.map(entry => entry.projectRepositoryId));\n        if (ids.size !== entries.length) {\n          ctx.addIssue({ code: 'custom', message: 'Each repository may be listed once' });\n        }\n        const positions = entries.flatMap(entry => (entry.position === undefined ? [] : [entry.position]));\n        if (positions.length === 0) return;\n        const expected = Array.from({ length: entries.length }, (_, index) => index + 1);\n        if (\n          positions.length !== entries.length ||\n          [...positions].sort((a, b) => a - b).some((p, i) => p !== expected[i])\n        ) {\n          ctx.addIssue({\n            code: 'custom',\n            message: 'Positions must be a permutation of 1..n over the listed repositories',\n          });\n        }\n      })\n      .optional(),\n  })\n  .refine(input => Object.keys(input).length > 0, { message: 'At least one environment field is required' });\n\nconst stagesSchema = z\n  .array(\n    z\n      .string()\n      .max(64)\n      .regex(/^[a-z0-9][a-z0-9_-]*$/i),\n  )\n  .min(1)\n  .max(16)\n  .refine(stages => new Set(stages).size === stages.length, { message: 'Stages must be unique' });\n\nconst externalSourceSchema = z\n  .object({\n    integrationId: z.string().min(1).max(128),\n    type: z.string().min(1).max(128),\n    externalId: z.string().min(1).max(512),\n    url: z.string().max(2_048).optional(),\n  })\n  .nullable();\n\nconst sessionSchema = z.object({\n  sessionId: z.string().min(1).max(512),\n  branch: z.string().min(1).max(512),\n  threadId: z.string().min(1).max(512),\n});\n\nconst sessionsSchema = z.record(z.string().min(1).max(64), sessionSchema);\nconst metadataSchema = z\n  .union([z.record(z.string(), z.unknown()), z.null()])\n  .refine(value => {\n    try {\n      return JSON.stringify(value).length <= 16 * 1024;\n    } catch {\n      return false;\n    }\n  }, 'Metadata exceeds 16 KiB')\n  .transform(value => {\n    if (value === null) return null;\n    const {\n      factoryRuleMaterializationKey: _materialization,\n      factoryPullRequestReconciliation: _reconciliation,\n      externalSourceMissingAt: _externalSourceMissingAt,\n      ...metadata\n    } = value;\n    return metadata;\n  });\n\nexport const createWorkItemBodySchema = z.object({\n  title: rawBoundedTrimmed(500),\n  board: z.string().min(1).max(128).optional(),\n  externalSource: externalSourceSchema.optional(),\n  parentWorkItemId: uuidSchema.nullable().optional(),\n  stages: stagesSchema.optional(),\n  sessions: sessionsSchema.optional(),\n  metadata: metadataSchema.optional(),\n});\n\nexport const updateWorkItemBodySchema = z\n  .object({\n    title: rawBoundedTrimmed(500).optional(),\n    board: z.string().min(1).max(128).optional(),\n    parentWorkItemId: uuidSchema.nullable().optional(),\n    stages: stagesSchema.optional(),\n    sessions: sessionsSchema.optional(),\n    metadata: metadataSchema.optional(),\n    plansPreapproved: z.literal(true).optional(),\n  })\n  .refine(input => Object.keys(input).length > 0, { message: 'At least one work-item field is required' });\n\nexport const transitionBodySchema = z\n  .object({\n    board: z.string().max(MAX_BOARD_IDENTIFIER_LENGTH).regex(BOARD_IDENTIFIER_RE),\n    stage: z.string().max(MAX_BOARD_IDENTIFIER_LENGTH).regex(BOARD_IDENTIFIER_RE),\n    expectedRevision: z.number().int().min(1),\n    requestId: trimmedUuidSchema,\n    cause: nonEmptyTrimmed(256),\n    reenter: z.unknown().optional(),\n  })\n  .transform(input => ({\n    board: input.board,\n    stage: input.stage,\n    expectedRevision: input.expectedRevision,\n    ingress: { type: 'human' as const, identity: input.requestId },\n    cause: input.cause,\n    ...(input.reenter === true ? { reenter: true } : {}),\n  }));\n\nexport const startWorkItemBodySchema = z.object({\n  sessionId: trimmedUuidSchema,\n  threadTitle: nonEmptyTrimmed(512),\n  kickoffKey: trimmedUuidSchema,\n  workItem: z.object({\n    id: trimmedUuidSchema,\n    role: nonEmptyTrimmed(32),\n    input: createWorkItemBodySchema,\n  }),\n});\n\nexport const automationRunStartBodySchema = z\n  .object({\n    requestId: trimmedUuidSchema,\n    expectedRevision: z.number().int().min(1),\n    role: z.enum(FACTORY_ROLE_VALUES),\n    skillName: nonEmptyTrimmed(128),\n    arguments: nonEmptyTrimmed(4_096).optional(),\n  })\n  .strict();\n\nexport const metricsQuerySchema = z.object({\n  from: z.string().optional(),\n  to: z.string().optional(),\n});\n\nconst decisionStatusSchema = z.enum([\n  'pending',\n  'proposed',\n  'dismissed',\n  'superseded',\n  'leased',\n  'retry',\n  'succeeded',\n  'failed',\n]);\nconst boundedLimitSchema = (defaultValue: number, max: number) =>\n  z\n    .string()\n    .optional()\n    .transform(value => {\n      const parsed = value ? Number.parseInt(value, 10) : defaultValue;\n      return Number.isFinite(parsed) ? Math.max(1, Math.min(max, parsed)) : defaultValue;\n    });\nconst decisionCursorSchema = z\n  .string()\n  .optional()\n  .transform((value, context) => {\n    if (!value) return undefined;\n    try {\n      const decoded = JSON.parse(Buffer.from(value, 'base64url').toString('utf8')) as unknown;\n      if (\n        !Array.isArray(decoded) ||\n        decoded.length !== 2 ||\n        typeof decoded[0] !== 'string' ||\n        typeof decoded[1] !== 'string'\n      ) {\n        throw new Error('invalid cursor');\n      }\n      const createdAt = new Date(decoded[0]);\n      if (Number.isNaN(createdAt.getTime()) || !new RegExp(UUID_PATTERN).test(decoded[1])) {\n        throw new Error('invalid cursor');\n      }\n      return { createdAt, id: decoded[1] };\n    } catch {\n      context.addIssue({ code: 'custom', message: 'Invalid cursor' });\n      return z.NEVER;\n    }\n  });\n\nexport const decisionQuerySchema = z.object({\n  statuses: z\n    .string()\n    .optional()\n    .transform(value => {\n      if (!value) return undefined;\n      const statuses = [...new Set(value.split(',').map(status => status.trim()))].filter(\n        status => decisionStatusSchema.safeParse(status).success,\n      ) as Array<z.infer<typeof decisionStatusSchema>>;\n      return statuses.length > 0 ? statuses : undefined;\n    }),\n  before: decisionCursorSchema,\n  limit: boundedLimitSchema(25, 50),\n});\n\nconst attentionKindSchema = z.enum([\n  'automation-failed',\n  'automation-proposed',\n  'mention',\n  'activity',\n  'agent-waiting',\n]);\ntype AttentionKind = z.infer<typeof attentionKindSchema>;\ntype AttentionStreamPosition = { occurredAt: Date; id: string };\ntype AttentionCursorMap = Map<AttentionKind, AttentionStreamPosition | undefined>;\n\nfunction parseAttentionStreamPosition(value: unknown): AttentionStreamPosition | undefined {\n  if (!Array.isArray(value) || value.length !== 2 || typeof value[0] !== 'string' || typeof value[1] !== 'string') {\n    return undefined;\n  }\n  const occurredAt = new Date(value[0]);\n  if (Number.isNaN(occurredAt.getTime()) || !new RegExp(UUID_PATTERN).test(value[1])) return undefined;\n  return { occurredAt, id: value[1] };\n}\n\nconst attentionCursorSchema = z\n  .string()\n  .optional()\n  .transform((value, context) => {\n    if (!value) return undefined;\n    try {\n      const decoded: unknown = JSON.parse(Buffer.from(value, 'base64url').toString('utf8'));\n      if (Array.isArray(decoded)) {\n        const legacy = parseAttentionStreamPosition(decoded);\n        if (!legacy) throw new Error('invalid cursor');\n        return new Map<AttentionKind, AttentionStreamPosition | undefined>([['automation-failed', legacy]]);\n      }\n      if (!decoded || typeof decoded !== 'object') throw new Error('invalid cursor');\n      const cursors: AttentionCursorMap = new Map();\n      for (const [kind, positionValue] of Object.entries(decoded)) {\n        const parsedKind = attentionKindSchema.safeParse(kind);\n        if (!parsedKind.success) throw new Error('invalid cursor');\n        if (positionValue === null) {\n          cursors.set(parsedKind.data, undefined);\n          continue;\n        }\n        const position = parseAttentionStreamPosition(positionValue);\n        if (!position) throw new Error('invalid cursor');\n        cursors.set(parsedKind.data, position);\n      }\n      if (cursors.size === 0) throw new Error('invalid cursor');\n      return cursors;\n    } catch {\n      context.addIssue({ code: 'custom', message: 'Invalid cursor' });\n      return z.NEVER;\n    }\n  });\n\nexport const attentionQuerySchema = z.object({\n  view: z.enum(['open', 'unread', 'archived']).optional().default('open'),\n  kind: z.array(attentionKindSchema).optional(),\n  before: attentionCursorSchema,\n  limit: boundedLimitSchema(25, 50),\n  search: z\n    .string()\n    .optional()\n    .transform(value => value?.trim().toLowerCase().slice(0, 200) || undefined),\n});\n\nconst attentionActionPathSchema = z\n  .object({\n    id: uuidSchema,\n    kind: attentionKindSchema,\n    sourceId: z.string().min(1).max(256),\n    occurrence: z\n      .string()\n      .regex(/^(0|[1-9]\\d*)$/)\n      .transform((value, context) => {\n        const occurrence = Number(value);\n        if (Number.isSafeInteger(occurrence)) return occurrence;\n        context.addIssue({ code: 'custom', message: 'Invalid occurrence' });\n        return z.NEVER;\n      }),\n  })\n  .refine(input => new RegExp(UUID_PATTERN).test(input.sourceId), {\n    message: 'Invalid attention source id',\n    path: ['sourceId'],\n  });\n\nexport const FACTORY_ROUTE_CONTRACTS = {\n  projectList: {\n    method: 'GET',\n    path: '/web/factory/projects',\n    description: 'List Factory projects for the current organization',\n    responseSchema: z.object({ projects: z.array(projectSchema) }),\n  },\n  projectCreate: {\n    method: 'POST',\n    path: '/web/factory/projects',\n    description: 'Create a Factory project',\n    bodySchema: createProjectBodySchema,\n    responseSchema: projectResponseSchema,\n  },\n  projectGet: {\n    method: 'GET',\n    path: '/web/factory/projects/:id',\n    description: 'Get a Factory project',\n    pathSchema: projectPathSchema,\n    responseSchema: projectResponseSchema,\n  },\n  projectUpdate: {\n    method: 'PATCH',\n    path: '/web/factory/projects/:id',\n    description: 'Update a Factory project',\n    pathSchema: projectPathSchema,\n    bodySchema: updateProjectBodySchema,\n    responseSchema: projectResponseSchema,\n  },\n  projectEnvironmentGet: {\n    method: 'GET',\n    path: '/web/factory/projects/:id/environment',\n    description: 'Get the sandbox environment of a Factory project: provider settings and its repositories in order',\n    pathSchema: projectPathSchema,\n    responseSchema: projectEnvironmentResponseSchema,\n  },\n  projectEnvironmentUpdate: {\n    method: 'PATCH',\n    path: '/web/factory/projects/:id/environment',\n    description: 'Update the sandbox environment of a Factory project: provider settings, repository order and setup',\n    pathSchema: projectPathSchema,\n    bodySchema: updateProjectEnvironmentBodySchema,\n    responseSchema: projectEnvironmentResponseSchema,\n  },\n  projectEnvironmentBuild: {\n    method: 'POST',\n    path: '/web/factory/projects/:id/environment/build',\n    description: 'Build the sandbox environment template of a Factory project now',\n    pathSchema: projectPathSchema,\n    responseSchema: environmentBuildStartResponseSchema,\n  },\n  projectEnvironmentBuilds: {\n    method: 'GET',\n    path: '/web/factory/projects/:id/environment/builds',\n    description:\n      'List the environment template builds of a Factory project, newest first, when the provider keeps history',\n    pathSchema: projectPathSchema,\n    responseSchema: environmentBuildsResponseSchema,\n  },\n  projectEnvironmentBuildGet: {\n    method: 'GET',\n    path: '/web/factory/projects/:id/environment/builds/:buildId',\n    description: 'Get the live status of one environment template build of a Factory project',\n    pathSchema: buildPathSchema,\n    responseSchema: environmentBuildResponseSchema,\n  },\n  projectApplyDefaultModel: {\n    method: 'POST',\n    path: '/web/factory/projects/:id/apply-default-model',\n    description: 'Apply the Factory default model to running work and review threads',\n    pathSchema: projectPathSchema,\n    responseSchema: z.object({\n      modelId: z.string(),\n      applied: z.array(z.string()),\n      skipped: z.array(\n        z.object({\n          threadId: z.string(),\n          reason: z.enum([\n            'not-running',\n            'work-item-missing',\n            'stage-inactive',\n            'thread-missing',\n            'mode-unknown',\n            'apply-failed',\n          ]),\n        }),\n      ),\n    }),\n  },\n  projectDelete: {\n    method: 'DELETE',\n    path: '/web/factory/projects/:id',\n    description: 'Delete a Factory project',\n    pathSchema: projectPathSchema,\n    responseSchema: z.null(),\n  },\n  metricsGet: {\n    method: 'GET',\n    path: '/web/factory/projects/:id/metrics',\n    description: 'Get Factory project metrics',\n    pathSchema: projectPathSchema,\n    querySchema: metricsQuerySchema,\n    responseSchema: z.object({ metrics: entitySchema }),\n  },\n  healthThresholdsGet: {\n    method: 'GET',\n    path: '/web/factory/projects/:id/health/thresholds',\n    description: 'Get queue-health thresholds',\n    pathSchema: projectPathSchema,\n    responseSchema: z.object({ thresholds: z.array(z.number().finite()) }),\n  },\n  boardCatalog: {\n    method: 'GET',\n    path: '/web/factory/projects/:id/boards',\n    description: 'List installed Factory boards',\n    pathSchema: projectPathSchema,\n    responseSchema: z.object({\n      boards: z.array(\n        z.object({\n          id: z.string(),\n          title: z.string(),\n          initialPhase: z.string(),\n          phases: z.array(\n            z.object({\n              id: z.string(),\n              title: z.string(),\n              kind: z.enum(['resting', 'working', 'terminal']),\n              role: z.string().optional(),\n              transitions: z.array(z.object({ outcome: z.string().nullable(), to: z.string() })),\n            }),\n          ),\n        }),\n      ),\n    }),\n  },\n  workItemList: {\n    method: 'GET',\n    path: '/web/factory/projects/:id/work-items',\n    description: 'List Factory work items and running sessions',\n    pathSchema: projectPathSchema,\n    responseSchema: z.object({\n      workItems: z.array(entitySchema),\n      runningSessionIds: z.array(z.string()),\n      parkedSessionIds: z.array(z.string()),\n    }),\n  },\n  workItemCreate: {\n    method: 'POST',\n    path: '/web/factory/projects/:id/work-items',\n    description: 'Create a work item in Intake',\n    pathSchema: projectPathSchema,\n    bodySchema: createWorkItemBodySchema,\n    responseSchema: workItemResponseSchema,\n  },\n  workItemUpdate: {\n    method: 'PATCH',\n    path: '/web/factory/work-items/:id',\n    description: 'Update non-stage work-item fields',\n    pathSchema: workItemPathSchema,\n    bodySchema: updateWorkItemBodySchema,\n    responseSchema: workItemResponseSchema,\n  },\n  workItemDelete: {\n    method: 'DELETE',\n    path: '/web/factory/work-items/:id',\n    description: 'Delete a Factory work item',\n    pathSchema: workItemPathSchema,\n    responseSchema: z.object({ ok: z.literal(true) }),\n  },\n  workItemTransition: {\n    method: 'POST',\n    path: '/web/factory/projects/:id/work-items/:workItemId/transition',\n    description: 'Transition a work item with its expected revision',\n    pathSchema: transitionPathSchema,\n    bodySchema: transitionBodySchema,\n    responseSchema: entitySchema,\n  },\n  workItemStart: {\n    method: 'POST',\n    path: '/web/factory/projects/:id/runs/start',\n    description: 'Explicitly start a Factory work-item run',\n    pathSchema: projectPathSchema,\n    bodySchema: startWorkItemBodySchema,\n    responseSchema: entitySchema,\n  },\n  workItemAutomationRun: {\n    method: 'POST',\n    path: '/web/factory/projects/:id/work-items/:workItemId/automation-runs',\n    description: 'Enqueue an idempotent deferred skill dispatch for a trusted external orchestrator',\n    pathSchema: transitionPathSchema,\n    bodySchema: automationRunStartBodySchema,\n    responseSchema: entitySchema,\n  },\n  decisionList: {\n    method: 'GET',\n    path: '/web/factory/projects/:id/decisions',\n    description: 'List Factory decisions',\n    pathSchema: projectPathSchema,\n    querySchema: decisionQuerySchema,\n    responseSchema: z.object({ decisions: z.array(entitySchema), nextCursor: z.string().optional() }),\n  },\n  decisionApprove: {\n    method: 'POST',\n    path: '/web/factory/projects/:id/decisions/:decisionId/approve',\n    description: 'Approve a proposed Factory decision',\n    pathSchema: projectDecisionPathSchema,\n    responseSchema: decisionResponseSchema,\n  },\n  decisionDismiss: {\n    method: 'POST',\n    path: '/web/factory/projects/:id/decisions/:decisionId/dismiss',\n    description: 'Dismiss a proposed Factory decision',\n    pathSchema: projectDecisionPathSchema,\n    responseSchema: decisionResponseSchema,\n  },\n  decisionRetry: {\n    method: 'POST',\n    path: '/web/factory/projects/:id/decisions/:decisionId/retry',\n    description: 'Retry a failed retryable Factory decision',\n    pathSchema: projectDecisionPathSchema,\n    responseSchema: decisionResponseSchema,\n  },\n  attentionList: {\n    method: 'GET',\n    path: '/web/factory/projects/:id/attention',\n    description: 'List the Factory attention inbox',\n    pathSchema: projectPathSchema,\n    querySchema: attentionQuerySchema,\n    responseSchema: z.object({\n      items: z.array(entitySchema),\n      kinds: z.record(\n        attentionKindSchema,\n        z.object({\n          open: z.number(),\n          unread: z.number(),\n          latest: z.object({ key: z.string(), at: z.string(), unread: z.boolean() }).nullable(),\n        }),\n      ),\n      hasMore: z.boolean(),\n      nextCursor: z.string().optional(),\n    }),\n  },\n  attentionReadAll: {\n    method: 'POST',\n    path: '/web/factory/projects/:id/attention/read-all',\n    description: 'Mark all Factory attention as read',\n    pathSchema: projectPathSchema,\n    querySchema: z.object({ before: attentionCursorSchema }),\n    responseSchema: z.object({ ok: z.literal(true), hasMore: z.boolean(), nextCursor: z.string().optional() }),\n  },\n  attentionRead: {\n    method: 'POST',\n    path: '/web/factory/projects/:id/attention/:kind/:sourceId/:occurrence/read',\n    description: 'Mark a Factory attention receipt as read',\n    pathSchema: attentionActionPathSchema,\n    responseSchema: z.object({ receipt: entitySchema }),\n  },\n  attentionArchive: {\n    method: 'POST',\n    path: '/web/factory/projects/:id/attention/:kind/:sourceId/:occurrence/archive',\n    description: 'Archive a Factory attention receipt',\n    pathSchema: attentionActionPathSchema,\n    responseSchema: z.object({ receipt: entitySchema }),\n  },\n  attentionRestore: {\n    method: 'POST',\n    path: '/web/factory/projects/:id/attention/:kind/:sourceId/:occurrence/restore',\n    description: 'Restore an archived Factory attention receipt',\n    pathSchema: attentionActionPathSchema,\n    responseSchema: z.object({ receipt: entitySchema }),\n  },\n} as const satisfies Record<string, FactoryRouteContract>;\n\nexport type FactoryRouteContractKey = keyof typeof FACTORY_ROUTE_CONTRACTS;\n"],"mappings":";;;;;;AAQA,MAAM,sBAAsB,OAAO,KAAK,mBAAmB;AAC3D,MAAa,kBAAkB;AAY/B,MAAa,eAAe;AAC5B,MAAM,aAAa,EAAE,OAAO,CAAC,CAAC,MAAM,IAAI,OAAO,YAAY,CAAC;AAC5D,MAAM,eAAe,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC;AACrD,MAAM,mBAAmB,QAAgB,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG;AACzE,MAAM,qBAAqB,QACzB,EACG,OAAO,CAAC,CACR,IAAI,GAAG,CAAC,CACR,WAAU,UAAS,MAAM,KAAK,CAAC,CAAC,CAChC,KAAK,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC;AAC3B,MAAM,oBAAoB,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,IAAI,OAAO,YAAY,CAAC;AAC1E,MAAM,mBAAmB,QACvB,EAAE,MAAM,CACN,EACG,OAAO,CAAC,CACR,KAAK,CAAC,CACN,IAAI,GAAG,CAAC,CACR,WAAU,UAAS,SAAS,IAAI,GACnC,EAAE,KAAK,CACT,CAAC;AACH,MAAM,oBAAoB,EAAE,OAAO,EAAE,IAAI,WAAW,CAAC;AACrD,MAAM,4BAA4B,EAAE,OAAO;CAAE,IAAI;CAAY,YAAY;AAAW,CAAC;AACrF,MAAM,qBAAqB,EAAE,OAAO,EAAE,IAAI,WAAW,CAAC;AACtD,MAAM,uBAAuB,EAAE,OAAO;CAAE,IAAI;CAAY,YAAY;AAAW,CAAC;AAEhF,MAAM,gBAAgB;AACtB,MAAM,wBAAwB,EAAE,OAAO,EAAE,SAAS,cAAc,CAAC;AACjE,MAAM,yBAAyB,EAAE,OAAO,EAAE,UAAU,aAAa,CAAC;AAClE,MAAM,yBAAyB,EAAE,OAAO,EAAE,UAAU,aAAa,CAAC;AAElE,MAAa,0BAA0B,EAAE,OAAO;CAC9C,MAAM,gBAAgB,GAAG;CACzB,aAAa,gBAAgB,GAAK,CAAC,CAAC,SAAS,CAAC,CAAC,QAAQ,IAAI;CAC3D,YAAY,EAAE,KAAK,oBAAoB,CAAC,CAAC,SAAS;AACpD,CAAC;AAED,MAAa,0BAA0B,EACpC,OAAO;CACN,MAAM,gBAAgB,GAAG,CAAC,CAAC,SAAS;CACpC,aAAa,gBAAgB,GAAK,CAAC,CAAC,SAAS;CAC7C,gBAAgB,gBAAgB,GAAG,CAAC,CAAC,SAAS;CAC9C,YAAY,EAAE,KAAK,oBAAoB,CAAC,CAAC,SAAS;CAClD,sBAAsB,EAAE,KAAK,eAAe,CAAC,CAAC,SAAS;CACvD,gBAAgB,EAAE,QAAQ,CAAC,CAAC,SAAS;CACrC,kBAAkB,EAAE,QAAQ,CAAC,CAAC,SAAS;CACvC,yBAAyB,EAAE,QAAQ,CAAC,CAAC,SAAS;CAC9C,mBAAmB,EAAE,QAAQ,CAAC,CAAC,SAAS;AAC1C,CAAC,CAAC,CACD,QAAO,UAAS,OAAO,KAAK,KAAK,CAAC,CAAC,SAAS,GAAG,EAAE,SAAS,yCAAyC,CAAC;AAEvG,MAAM,8BAA8B,EAAE,OAAO;CAC3C,qBAAqB,EAAE,OAAO;CAC9B,cAAc,EAAE,OAAO;CACvB,cAAc,EAAE,OAAO;CAEvB,MAAM,EAAE,OAAO,CAAC,CAAC,SAAS;CAC1B,eAAe,EAAE,OAAO,CAAC,CAAC,SAAS;CACnC,UAAU,EAAE,OAAO,CAAC,CAAC,IAAI;CACzB,eAAe,EAAE,QAAQ;CACzB,cAAc,EAAE,OAAO,CAAC,CAAC,SAAS;CAClC,iBAAiB,EAAE,OAAO,CAAC,CAAC,SAAS;CACrC,iBAAiB,EAAE,KAAK;EAAC;EAAW;EAAc;CAAQ,CAAC;CAC3D,gBAAgB,EAAE,OAAO,CAAC,CAAC,SAAS;CACpC,aAAa,EAAE,OAAO,CAAC,CAAC,SAAS;AACnC,CAAC;;AAGD,MAAa,2BAA2B,EAAE,OAAO;CAC/C,UAAU,EAAE,OAAO;CACnB,gBAAgB,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC;CAChD,cAAc,EAAE,OAAO;EACrB,UAAU,EAAE,QAAQ;EACpB,QAAQ,EAAE,OAAO;GAAE,WAAW,EAAE,QAAQ;GAAG,SAAS,EAAE,QAAQ;EAAE,CAAC;CACnE,CAAC;AACH,CAAC;;AAGD,MAAa,iCAAiC,EAAE,OAAO;CACrD,UAAU,EAAE,OAAO;EACjB,SAAS,EAAE,QAAQ;EACnB,MAAM,EAAE,OAAO,CAAC,CAAC,SAAS;EAC1B,UAAU,EAAE,OAAO,CAAC,CAAC,SAAS;;EAE9B,mBAAmB,EAAE,QAAQ;CAC/B,CAAC;CACD,MAAM,EAAE,OAAO;EAAE,SAAS,EAAE,QAAQ;EAAG,iBAAiB,EAAE,OAAO,CAAC,CAAC,IAAI;CAAE,CAAC;AAC5E,CAAC;;AAGD,MAAa,6BAA6B,EAAE,OAAO;CAAE,SAAS,EAAE,OAAO;CAAG,aAAa,EAAE,OAAO,CAAC,CAAC,SAAS;AAAE,CAAC;AAE9G,MAAa,mCAAmC,EAAE,OAAO,EACvD,aAAa,EAAE,OAAO;CACpB,SAAS;;CAET,UAAU,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC;CAC1C,yBAAyB,EAAE,OAAO,CAAC,CAAC,SAAS;CAC7C,uBAAuB,EAAE,OAAO,CAAC,CAAC,SAAS;CAC3C,kBAAkB,EAAE,OAAO,CAAC,CAAC,SAAS;CACtC,qBAAqB,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS;CAC/D,cAAc,EAAE,MAAM,2BAA2B;CACjD,eAAe,+BAA+B,SAAS;CACvD,OAAO,2BAA2B,SAAS,CAAC,CAAC,SAAS;AACxD,CAAC,EACH,CAAC;AAED,MAAM,+BAA+B,EAAE,KAAK;CAAC;CAAW;CAAY;CAAS;CAAU;AAAS,CAAC;AAEjG,MAAa,sCAAsC,EAAE,OAAO;CAC1D,SAAS,EAAE,KAAK;EAAC;EAAW;EAAW;EAAe;CAAQ,CAAC;CAC/D,SAAS,EAAE,OAAO,CAAC,CAAC,SAAS;CAC7B,YAAY,EAAE,OAAO,CAAC,CAAC,SAAS;CAChC,QAAQ,EAAE,OAAO,CAAC,CAAC,SAAS;AAC9B,CAAC;AAED,MAAa,yBAAyB,EAAE,OAAO;CAC7C,SAAS,EAAE,OAAO;CAClB,QAAQ;CACR,YAAY,EAAE,OAAO,CAAC,CAAC,SAAS;CAChC,WAAW,EAAE,OAAO,CAAC,CAAC,SAAS;CAC/B,YAAY,EAAE,OAAO,CAAC,CAAC,SAAS;CAChC,OAAO,EAAE,OAAO,CAAC,CAAC,SAAS;CAC3B,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS;AACrC,CAAC;AAED,MAAa,kCAAkC,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,EAAE,CAAC;AACnG,MAAa,iCAAiC,EAAE,OAAO,EAAE,OAAO,uBAAuB,CAAC;AAExF,MAAM,kBAAkB,kBAAkB,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;AAE/E,MAAM,mCAAmC,EAAE,OAAO;CAChD,qBAAqB;CACrB,UAAU,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;CAC3C,eAAe,EAAE,QAAQ,CAAC,CAAC,SAAS;CACpC,cAAc,gBAAgB,GAAK,CAAC,CAAC,SAAS;CAC9C,iBAAiB,gBAAgB,GAAK,CAAC,CAAC,SAAS;AACnD,CAAC;AAED,MAAa,qCAAqC,EAC/C,OAAO;CACN,yBAAyB,gBAAgB,GAAK,CAAC,CAC5C,QAAO,UAAS,UAAU,QAAQ,MAAM,WAAW,GAAG,GAAG,EACxD,SAAS,2CACX,CAAC,CAAC,CACD,SAAS;;CAEZ,UAAU,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;CAChE,uBAAuB,gBAAgB,GAAK,CAAC,CAAC,SAAS;;CAEvD,eAAe,EACZ,OAAO;EACN,UAAU,EACP,OAAO;GACN,SAAS,EAAE,QAAQ;GACnB,MAAM,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,SAAS;GACjD,UAAU,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,SAAS;EACvD,CAAC,CAAC,CACD,SAAS;EACZ,MAAM,EACH,OAAO;GACN,SAAS,EAAE,QAAQ,CAAC,CAAC,SAAS;GAC9B,iBAAiB,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAK,CAAC,CAAC,SAAS;EAC/D,CAAC,CAAC,CACD,SAAS;CACd,CAAC,CAAC,CACD,SAAS;CACZ,cAAc,EACX,MAAM,gCAAgC,CAAC,CACvC,IAAI,GAAG,CAAC,CACR,aAAa,SAAS,QAAQ;EAE7B,IAAI,IADY,IAAI,QAAQ,KAAI,UAAS,MAAM,mBAAmB,CAC5D,CAAC,CAAC,SAAS,QAAQ,QACvB,IAAI,SAAS;GAAE,MAAM;GAAU,SAAS;EAAqC,CAAC;EAEhF,MAAM,YAAY,QAAQ,SAAQ,UAAU,MAAM,aAAa,KAAA,IAAY,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAE;EACjG,IAAI,UAAU,WAAW,GAAG;EAC5B,MAAM,WAAW,MAAM,KAAK,EAAE,QAAQ,QAAQ,OAAO,IAAI,GAAG,UAAU,QAAQ,CAAC;EAC/E,IACE,UAAU,WAAW,QAAQ,UAC7B,CAAC,GAAG,SAAS,CAAC,CAAC,MAAM,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,MAAM,GAAG,MAAM,MAAM,SAAS,EAAE,GAErE,IAAI,SAAS;GACX,MAAM;GACN,SAAS;EACX,CAAC;CAEL,CAAC,CAAC,CACD,SAAS;AACd,CAAC,CAAC,CACD,QAAO,UAAS,OAAO,KAAK,KAAK,CAAC,CAAC,SAAS,GAAG,EAAE,SAAS,6CAA6C,CAAC;AAE3G,MAAM,eAAe,EAClB,MACC,EACG,OAAO,CAAC,CACR,IAAI,EAAE,CAAC,CACP,MAAM,wBAAwB,CACnC,CAAC,CACA,IAAI,CAAC,CAAC,CACN,IAAI,EAAE,CAAC,CACP,QAAO,WAAU,IAAI,IAAI,MAAM,CAAC,CAAC,SAAS,OAAO,QAAQ,EAAE,SAAS,wBAAwB,CAAC;AAEhG,MAAM,uBAAuB,EAC1B,OAAO;CACN,eAAe,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG;CACxC,MAAM,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG;CAC/B,YAAY,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG;CACrC,KAAK,EAAE,OAAO,CAAC,CAAC,IAAI,IAAK,CAAC,CAAC,SAAS;AACtC,CAAC,CAAC,CACD,SAAS;AAEZ,MAAM,gBAAgB,EAAE,OAAO;CAC7B,WAAW,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG;CACpC,QAAQ,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG;CACjC,UAAU,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG;AACrC,CAAC;AAED,MAAM,iBAAiB,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,aAAa;AACxE,MAAM,iBAAiB,EACpB,MAAM,CAAC,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CACpD,QAAO,UAAS;CACf,IAAI;EACF,OAAO,KAAK,UAAU,KAAK,CAAC,CAAC,UAAU;CACzC,QAAQ;EACN,OAAO;CACT;AACF,GAAG,yBAAyB,CAAC,CAC5B,WAAU,UAAS;CAClB,IAAI,UAAU,MAAM,OAAO;CAC3B,MAAM,EACJ,+BAA+B,kBAC/B,kCAAkC,iBAClC,yBAAyB,0BACzB,GAAG,aACD;CACJ,OAAO;AACT,CAAC;AAEH,MAAa,2BAA2B,EAAE,OAAO;CAC/C,OAAO,kBAAkB,GAAG;CAC5B,OAAO,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,SAAS;CAC3C,gBAAgB,qBAAqB,SAAS;CAC9C,kBAAkB,WAAW,SAAS,CAAC,CAAC,SAAS;CACjD,QAAQ,aAAa,SAAS;CAC9B,UAAU,eAAe,SAAS;CAClC,UAAU,eAAe,SAAS;AACpC,CAAC;AAED,MAAa,2BAA2B,EACrC,OAAO;CACN,OAAO,kBAAkB,GAAG,CAAC,CAAC,SAAS;CACvC,OAAO,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,SAAS;CAC3C,kBAAkB,WAAW,SAAS,CAAC,CAAC,SAAS;CACjD,QAAQ,aAAa,SAAS;CAC9B,UAAU,eAAe,SAAS;CAClC,UAAU,eAAe,SAAS;CAClC,kBAAkB,EAAE,QAAQ,IAAI,CAAC,CAAC,SAAS;AAC7C,CAAC,CAAC,CACD,QAAO,UAAS,OAAO,KAAK,KAAK,CAAC,CAAC,SAAS,GAAG,EAAE,SAAS,2CAA2C,CAAC;AAEzG,MAAa,uBAAuB,EACjC,OAAO;CACN,OAAO,EAAE,OAAO,CAAC,CAAC,IAAA,GAA+B,CAAC,CAAC,MAAM,mBAAmB;CAC5E,OAAO,EAAE,OAAO,CAAC,CAAC,IAAA,GAA+B,CAAC,CAAC,MAAM,mBAAmB;CAC5E,kBAAkB,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC;CACxC,WAAW;CACX,OAAO,gBAAgB,GAAG;CAC1B,SAAS,EAAE,QAAQ,CAAC,CAAC,SAAS;AAChC,CAAC,CAAC,CACD,WAAU,WAAU;CACnB,OAAO,MAAM;CACb,OAAO,MAAM;CACb,kBAAkB,MAAM;CACxB,SAAS;EAAE,MAAM;EAAkB,UAAU,MAAM;CAAU;CAC7D,OAAO,MAAM;CACb,GAAI,MAAM,YAAY,OAAO,EAAE,SAAS,KAAK,IAAI,CAAC;AACpD,EAAE;AAEJ,MAAa,0BAA0B,EAAE,OAAO;CAC9C,WAAW;CACX,aAAa,gBAAgB,GAAG;CAChC,YAAY;CACZ,UAAU,EAAE,OAAO;EACjB,IAAI;EACJ,MAAM,gBAAgB,EAAE;EACxB,OAAO;CACT,CAAC;AACH,CAAC;AAED,MAAa,+BAA+B,EACzC,OAAO;CACN,WAAW;CACX,kBAAkB,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC;CACxC,MAAM,EAAE,KAAK,mBAAmB;CAChC,WAAW,gBAAgB,GAAG;CAC9B,WAAW,gBAAgB,IAAK,CAAC,CAAC,SAAS;AAC7C,CAAC,CAAC,CACD,OAAO;AAEV,MAAa,qBAAqB,EAAE,OAAO;CACzC,MAAM,EAAE,OAAO,CAAC,CAAC,SAAS;CAC1B,IAAI,EAAE,OAAO,CAAC,CAAC,SAAS;AAC1B,CAAC;AAED,MAAM,uBAAuB,EAAE,KAAK;CAClC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF,CAAC;AACD,MAAM,sBAAsB,cAAsB,QAChD,EACG,OAAO,CAAC,CACR,SAAS,CAAC,CACV,WAAU,UAAS;CAClB,MAAM,SAAS,QAAQ,OAAO,SAAS,OAAO,EAAE,IAAI;CACpD,OAAO,OAAO,SAAS,MAAM,IAAI,KAAK,IAAI,GAAG,KAAK,IAAI,KAAK,MAAM,CAAC,IAAI;AACxE,CAAC;AACL,MAAM,uBAAuB,EAC1B,OAAO,CAAC,CACR,SAAS,CAAC,CACV,WAAW,OAAO,YAAY;CAC7B,IAAI,CAAC,OAAO,OAAO,KAAA;CACnB,IAAI;EACF,MAAM,UAAU,KAAK,MAAM,OAAO,KAAK,OAAO,WAAW,CAAC,CAAC,SAAS,MAAM,CAAC;EAC3E,IACE,CAAC,MAAM,QAAQ,OAAO,KACtB,QAAQ,WAAW,KACnB,OAAO,QAAQ,OAAO,YACtB,OAAO,QAAQ,OAAO,UAEtB,MAAM,IAAI,MAAM,gBAAgB;EAElC,MAAM,YAAY,IAAI,KAAK,QAAQ,EAAE;EACrC,IAAI,OAAO,MAAM,UAAU,QAAQ,CAAC,KAAK,kBAAC,IAAI,OAAA,+EAAmB,EAAC,CAAC,KAAK,QAAQ,EAAE,GAChF,MAAM,IAAI,MAAM,gBAAgB;EAElC,OAAO;GAAE;GAAW,IAAI,QAAQ;EAAG;CACrC,QAAQ;EACN,QAAQ,SAAS;GAAE,MAAM;GAAU,SAAS;EAAiB,CAAC;EAC9D,OAAO,EAAE;CACX;AACF,CAAC;AAEH,MAAa,sBAAsB,EAAE,OAAO;CAC1C,UAAU,EACP,OAAO,CAAC,CACR,SAAS,CAAC,CACV,WAAU,UAAS;EAClB,IAAI,CAAC,OAAO,OAAO,KAAA;EACnB,MAAM,WAAW,CAAC,GAAG,IAAI,IAAI,MAAM,MAAM,GAAG,CAAC,CAAC,KAAI,WAAU,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,QAC3E,WAAU,qBAAqB,UAAU,MAAM,CAAC,CAAC,OACnD;EACA,OAAO,SAAS,SAAS,IAAI,WAAW,KAAA;CAC1C,CAAC;CACH,QAAQ;CACR,OAAO,mBAAmB,IAAI,EAAE;AAClC,CAAC;AAED,MAAM,sBAAsB,EAAE,KAAK;CACjC;CACA;CACA;CACA;CACA;AACF,CAAC;AAKD,SAAS,6BAA6B,OAAqD;CACzF,IAAI,CAAC,MAAM,QAAQ,KAAK,KAAK,MAAM,WAAW,KAAK,OAAO,MAAM,OAAO,YAAY,OAAO,MAAM,OAAO,UACrG;CAEF,MAAM,aAAa,IAAI,KAAK,MAAM,EAAE;CACpC,IAAI,OAAO,MAAM,WAAW,QAAQ,CAAC,KAAK,kBAAC,IAAI,OAAA,+EAAmB,EAAC,CAAC,KAAK,MAAM,EAAE,GAAG,OAAO,KAAA;CAC3F,OAAO;EAAE;EAAY,IAAI,MAAM;CAAG;AACpC;AAEA,MAAM,wBAAwB,EAC3B,OAAO,CAAC,CACR,SAAS,CAAC,CACV,WAAW,OAAO,YAAY;CAC7B,IAAI,CAAC,OAAO,OAAO,KAAA;CACnB,IAAI;EACF,MAAM,UAAmB,KAAK,MAAM,OAAO,KAAK,OAAO,WAAW,CAAC,CAAC,SAAS,MAAM,CAAC;EACpF,IAAI,MAAM,QAAQ,OAAO,GAAG;GAC1B,MAAM,SAAS,6BAA6B,OAAO;GACnD,IAAI,CAAC,QAAQ,MAAM,IAAI,MAAM,gBAAgB;GAC7C,uBAAO,IAAI,IAAwD,CAAC,CAAC,qBAAqB,MAAM,CAAC,CAAC;EACpG;EACA,IAAI,CAAC,WAAW,OAAO,YAAY,UAAU,MAAM,IAAI,MAAM,gBAAgB;EAC7E,MAAM,0BAA8B,IAAI,IAAI;EAC5C,KAAK,MAAM,CAAC,MAAM,kBAAkB,OAAO,QAAQ,OAAO,GAAG;GAC3D,MAAM,aAAa,oBAAoB,UAAU,IAAI;GACrD,IAAI,CAAC,WAAW,SAAS,MAAM,IAAI,MAAM,gBAAgB;GACzD,IAAI,kBAAkB,MAAM;IAC1B,QAAQ,IAAI,WAAW,MAAM,KAAA,CAAS;IACtC;GACF;GACA,MAAM,WAAW,6BAA6B,aAAa;GAC3D,IAAI,CAAC,UAAU,MAAM,IAAI,MAAM,gBAAgB;GAC/C,QAAQ,IAAI,WAAW,MAAM,QAAQ;EACvC;EACA,IAAI,QAAQ,SAAS,GAAG,MAAM,IAAI,MAAM,gBAAgB;EACxD,OAAO;CACT,QAAQ;EACN,QAAQ,SAAS;GAAE,MAAM;GAAU,SAAS;EAAiB,CAAC;EAC9D,OAAO,EAAE;CACX;AACF,CAAC;AAEH,MAAa,uBAAuB,EAAE,OAAO;CAC3C,MAAM,EAAE,KAAK;EAAC;EAAQ;EAAU;CAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,QAAQ,MAAM;CACtE,MAAM,EAAE,MAAM,mBAAmB,CAAC,CAAC,SAAS;CAC5C,QAAQ;CACR,OAAO,mBAAmB,IAAI,EAAE;CAChC,QAAQ,EACL,OAAO,CAAC,CACR,SAAS,CAAC,CACV,WAAU,UAAS,OAAO,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,MAAM,GAAG,GAAG,KAAK,KAAA,CAAS;AAC9E,CAAC;AAED,MAAM,4BAA4B,EAC/B,OAAO;CACN,IAAI;CACJ,MAAM;CACN,UAAU,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG;CACnC,YAAY,EACT,OAAO,CAAC,CACR,MAAM,gBAAgB,CAAC,CACvB,WAAW,OAAO,YAAY;EAC7B,MAAM,aAAa,OAAO,KAAK;EAC/B,IAAI,OAAO,cAAc,UAAU,GAAG,OAAO;EAC7C,QAAQ,SAAS;GAAE,MAAM;GAAU,SAAS;EAAqB,CAAC;EAClE,OAAO,EAAE;CACX,CAAC;AACL,CAAC,CAAC,CACD,QAAO,UAAS,IAAI,OAAO,YAAY,CAAC,CAAC,KAAK,MAAM,QAAQ,GAAG;CAC9D,SAAS;CACT,MAAM,CAAC,UAAU;AACnB,CAAC;AAEH,MAAa,0BAA0B;CACrC,aAAa;EACX,QAAQ;EACR,MAAM;EACN,aAAa;EACb,gBAAgB,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,EAAE,CAAC;CAC/D;CACA,eAAe;EACb,QAAQ;EACR,MAAM;EACN,aAAa;EACb,YAAY;EACZ,gBAAgB;CAClB;CACA,YAAY;EACV,QAAQ;EACR,MAAM;EACN,aAAa;EACb,YAAY;EACZ,gBAAgB;CAClB;CACA,eAAe;EACb,QAAQ;EACR,MAAM;EACN,aAAa;EACb,YAAY;EACZ,YAAY;EACZ,gBAAgB;CAClB;CACA,uBAAuB;EACrB,QAAQ;EACR,MAAM;EACN,aAAa;EACb,YAAY;EACZ,gBAAgB;CAClB;CACA,0BAA0B;EACxB,QAAQ;EACR,MAAM;EACN,aAAa;EACb,YAAY;EACZ,YAAY;EACZ,gBAAgB;CAClB;CACA,yBAAyB;EACvB,QAAQ;EACR,MAAM;EACN,aAAa;EACb,YAAY;EACZ,gBAAgB;CAClB;CACA,0BAA0B;EACxB,QAAQ;EACR,MAAM;EACN,aACE;EACF,YAAY;EACZ,gBAAgB;CAClB;CACA,4BAA4B;EAC1B,QAAQ;EACR,MAAM;EACN,aAAa;EACb,YAAY;EACZ,gBAAgB;CAClB;CACA,0BAA0B;EACxB,QAAQ;EACR,MAAM;EACN,aAAa;EACb,YAAY;EACZ,gBAAgB,EAAE,OAAO;GACvB,SAAS,EAAE,OAAO;GAClB,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC;GAC3B,SAAS,EAAE,MACT,EAAE,OAAO;IACP,UAAU,EAAE,OAAO;IACnB,QAAQ,EAAE,KAAK;KACb;KACA;KACA;KACA;KACA;KACA;IACF,CAAC;GACH,CAAC,CACH;EACF,CAAC;CACH;CACA,eAAe;EACb,QAAQ;EACR,MAAM;EACN,aAAa;EACb,YAAY;EACZ,gBAAgB,EAAE,KAAK;CACzB;CACA,YAAY;EACV,QAAQ;EACR,MAAM;EACN,aAAa;EACb,YAAY;EACZ,aAAa;EACb,gBAAgB,EAAE,OAAO,EAAE,SAAS,aAAa,CAAC;CACpD;CACA,qBAAqB;EACnB,QAAQ;EACR,MAAM;EACN,aAAa;EACb,YAAY;EACZ,gBAAgB,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CACvE;CACA,cAAc;EACZ,QAAQ;EACR,MAAM;EACN,aAAa;EACb,YAAY;EACZ,gBAAgB,EAAE,OAAO,EACvB,QAAQ,EAAE,MACR,EAAE,OAAO;GACP,IAAI,EAAE,OAAO;GACb,OAAO,EAAE,OAAO;GAChB,cAAc,EAAE,OAAO;GACvB,QAAQ,EAAE,MACR,EAAE,OAAO;IACP,IAAI,EAAE,OAAO;IACb,OAAO,EAAE,OAAO;IAChB,MAAM,EAAE,KAAK;KAAC;KAAW;KAAW;IAAU,CAAC;IAC/C,MAAM,EAAE,OAAO,CAAC,CAAC,SAAS;IAC1B,aAAa,EAAE,MAAM,EAAE,OAAO;KAAE,SAAS,EAAE,OAAO,CAAC,CAAC,SAAS;KAAG,IAAI,EAAE,OAAO;IAAE,CAAC,CAAC;GACnF,CAAC,CACH;EACF,CAAC,CACH,EACF,CAAC;CACH;CACA,cAAc;EACZ,QAAQ;EACR,MAAM;EACN,aAAa;EACb,YAAY;EACZ,gBAAgB,EAAE,OAAO;GACvB,WAAW,EAAE,MAAM,YAAY;GAC/B,mBAAmB,EAAE,MAAM,EAAE,OAAO,CAAC;GACrC,kBAAkB,EAAE,MAAM,EAAE,OAAO,CAAC;EACtC,CAAC;CACH;CACA,gBAAgB;EACd,QAAQ;EACR,MAAM;EACN,aAAa;EACb,YAAY;EACZ,YAAY;EACZ,gBAAgB;CAClB;CACA,gBAAgB;EACd,QAAQ;EACR,MAAM;EACN,aAAa;EACb,YAAY;EACZ,YAAY;EACZ,gBAAgB;CAClB;CACA,gBAAgB;EACd,QAAQ;EACR,MAAM;EACN,aAAa;EACb,YAAY;EACZ,gBAAgB,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,IAAI,EAAE,CAAC;CAClD;CACA,oBAAoB;EAClB,QAAQ;EACR,MAAM;EACN,aAAa;EACb,YAAY;EACZ,YAAY;EACZ,gBAAgB;CAClB;CACA,eAAe;EACb,QAAQ;EACR,MAAM;EACN,aAAa;EACb,YAAY;EACZ,YAAY;EACZ,gBAAgB;CAClB;CACA,uBAAuB;EACrB,QAAQ;EACR,MAAM;EACN,aAAa;EACb,YAAY;EACZ,YAAY;EACZ,gBAAgB;CAClB;CACA,cAAc;EACZ,QAAQ;EACR,MAAM;EACN,aAAa;EACb,YAAY;EACZ,aAAa;EACb,gBAAgB,EAAE,OAAO;GAAE,WAAW,EAAE,MAAM,YAAY;GAAG,YAAY,EAAE,OAAO,CAAC,CAAC,SAAS;EAAE,CAAC;CAClG;CACA,iBAAiB;EACf,QAAQ;EACR,MAAM;EACN,aAAa;EACb,YAAY;EACZ,gBAAgB;CAClB;CACA,iBAAiB;EACf,QAAQ;EACR,MAAM;EACN,aAAa;EACb,YAAY;EACZ,gBAAgB;CAClB;CACA,eAAe;EACb,QAAQ;EACR,MAAM;EACN,aAAa;EACb,YAAY;EACZ,gBAAgB;CAClB;CACA,eAAe;EACb,QAAQ;EACR,MAAM;EACN,aAAa;EACb,YAAY;EACZ,aAAa;EACb,gBAAgB,EAAE,OAAO;GACvB,OAAO,EAAE,MAAM,YAAY;GAC3B,OAAO,EAAE,OACP,qBACA,EAAE,OAAO;IACP,MAAM,EAAE,OAAO;IACf,QAAQ,EAAE,OAAO;IACjB,QAAQ,EAAE,OAAO;KAAE,KAAK,EAAE,OAAO;KAAG,IAAI,EAAE,OAAO;KAAG,QAAQ,EAAE,QAAQ;IAAE,CAAC,CAAC,CAAC,SAAS;GACtF,CAAC,CACH;GACA,SAAS,EAAE,QAAQ;GACnB,YAAY,EAAE,OAAO,CAAC,CAAC,SAAS;EAClC,CAAC;CACH;CACA,kBAAkB;EAChB,QAAQ;EACR,MAAM;EACN,aAAa;EACb,YAAY;EACZ,aAAa,EAAE,OAAO,EAAE,QAAQ,sBAAsB,CAAC;EACvD,gBAAgB,EAAE,OAAO;GAAE,IAAI,EAAE,QAAQ,IAAI;GAAG,SAAS,EAAE,QAAQ;GAAG,YAAY,EAAE,OAAO,CAAC,CAAC,SAAS;EAAE,CAAC;CAC3G;CACA,eAAe;EACb,QAAQ;EACR,MAAM;EACN,aAAa;EACb,YAAY;EACZ,gBAAgB,EAAE,OAAO,EAAE,SAAS,aAAa,CAAC;CACpD;CACA,kBAAkB;EAChB,QAAQ;EACR,MAAM;EACN,aAAa;EACb,YAAY;EACZ,gBAAgB,EAAE,OAAO,EAAE,SAAS,aAAa,CAAC;CACpD;CACA,kBAAkB;EAChB,QAAQ;EACR,MAAM;EACN,aAAa;EACb,YAAY;EACZ,gBAAgB,EAAE,OAAO,EAAE,SAAS,aAAa,CAAC;CACpD;AACF"}

package/dist/routes/session-access.d.ts

@@ -15,6 +15,10 @@ export declare function canViewSourceControlSession(session: Pick<SourceControlS
     orgId?: string;
     userId: string;
 }): boolean;
+/** A teammate steers a shared session; only its owner changes the model and thinking level its turns run on. */
+export declare function canSwitchSessionModel(session: Pick<SourceControlSession, 'userId'>, viewer: {
+    userId: string;
+}): boolean;
 /** The controller reads the guard needs to find which resource a session runs on. */
 export interface SessionResourceLookup {
     getSession(sessionId: string): Promise<{
@@ -42,8 +46,9 @@ export interface SessionResourceLookup {
  * routes trust a client-supplied resourceId or threadId, so they are bound to
  * the authorized resource, or the caller's own user id when none is named. The
  * controller-wide active-runs list drops runs on unreachable resources.
- * Denials answer 404 so ids do not leak existence. With auth disabled there is
- * no tenant to protect and everything passes through.
+ * Denials answer 404 so ids do not leak existence. A teammate who can see a
+ * session but tries to change its model or thinking level gets 403. With auth
+ * disabled there is no tenant to protect and everything passes through.
  */
 export declare function createSessionAccessGuard({ auth, sessions, projects, controller, }: {
     auth: RouteAuth;

package/dist/routes/session-access.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"session-access.d.ts","sourceRoot":"","sources":["../../src/routes/session-access.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAW,iBAAiB,EAAE,MAAM,MAAM,CAAC;AAEvD,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,+BAA+B,CAAC;AAChF,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAClF,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACtF,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAE5C;;;GAGG;AACH,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,IAAI,CAAC,oBAAoB,EAAE,QAAQ,CAAC,EAC7C,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,GACzB,OAAO,CAET;AAED,gGAAgG;AAChG,wBAAgB,2BAA2B,CACzC,OAAO,EAAE,IAAI,CAAC,oBAAoB,EAAE,OAAO,GAAG,QAAQ,GAAG,YAAY,CAAC,EACtE,MAAM,EAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACzC,OAAO,CAGT;AAED,qFAAqF;AACrF,MAAM,WAAW,qBAAqB;IACpC,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,QAAQ,EAAE;YAAE,aAAa,IAAI,MAAM,CAAA;SAAE,CAAA;KAAE,GAAG,SAAS,CAAC,CAAC;IAC9F,eAAe,CAAC,KAAK,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,UAAU,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC,CAAC;CACtF;AAoED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,wBAAwB,CAAC,EACvC,IAAI,EACJ,QAAQ,EACR,QAAQ,EACR,UAAU,GACX,EAAE;IACD,IAAI,EAAE,SAAS,CAAC;IAChB,QAAQ,EAAE,IAAI,CAAC,0BAA0B,EAAE,gBAAgB,CAAC,CAAC;IAC7D,QAAQ,EAAE,IAAI,CAAC,sBAAsB,EAAE,KAAK,CAAC,CAAC;IAC9C,6EAA6E;IAC7E,UAAU,EAAE,MAAM,qBAAqB,GAAG,SAAS,CAAC;CACrD,GAAG,iBAAiB,CAwDpB"}
+{"version":3,"file":"session-access.d.ts","sourceRoot":"","sources":["../../src/routes/session-access.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAW,iBAAiB,EAAE,MAAM,MAAM,CAAC;AAEvD,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,+BAA+B,CAAC;AAChF,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAClF,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACtF,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAE5C;;;GAGG;AACH,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,IAAI,CAAC,oBAAoB,EAAE,QAAQ,CAAC,EAC7C,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,GACzB,OAAO,CAET;AAED,gGAAgG;AAChG,wBAAgB,2BAA2B,CACzC,OAAO,EAAE,IAAI,CAAC,oBAAoB,EAAE,OAAO,GAAG,QAAQ,GAAG,YAAY,CAAC,EACtE,MAAM,EAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACzC,OAAO,CAGT;AAED,gHAAgH;AAChH,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,IAAI,CAAC,oBAAoB,EAAE,QAAQ,CAAC,EAC7C,MAAM,EAAE;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,GACzB,OAAO,CAET;AAED,qFAAqF;AACrF,MAAM,WAAW,qBAAqB;IACpC,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,QAAQ,EAAE;YAAE,aAAa,IAAI,MAAM,CAAA;SAAE,CAAA;KAAE,GAAG,SAAS,CAAC,CAAC;IAC9F,eAAe,CAAC,KAAK,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,UAAU,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC,CAAC;CACtF;AAmGD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,wBAAwB,CAAC,EACvC,IAAI,EACJ,QAAQ,EACR,QAAQ,EACR,UAAU,GACX,EAAE;IACD,IAAI,EAAE,SAAS,CAAC;IAChB,QAAQ,EAAE,IAAI,CAAC,0BAA0B,EAAE,gBAAgB,CAAC,CAAC;IAC7D,QAAQ,EAAE,IAAI,CAAC,sBAAsB,EAAE,KAAK,CAAC,CAAC;IAC9C,6EAA6E;IAC7E,UAAU,EAAE,MAAM,qBAAqB,GAAG,SAAS,CAAC;CACrD,GAAG,iBAAiB,CAgEpB"}

package/dist/routes/session-access.js

@@ -12,16 +12,48 @@ function canViewSourceControlSession(session, viewer) {
 	if (session.orgId !== viewer.orgId) return false;
 	return session.visibility !== "private" || session.userId === viewer.userId;
 }
+/** A teammate steers a shared session; only its owner changes the model and thinking level its turns run on. */
+function canSwitchSessionModel(session, viewer) {
+	return session.userId === viewer.userId;
+}
 const SESSION_PATH = /\/agent-controller\/[^/]+\/sessions\/([^/]+)/;
 const CREATE_SESSION_PATH = /\/agent-controller\/[^/]+\/sessions\/?$/;
 const SET_RESOURCE_PATH = /\/agent-controller\/[^/]+\/sessions\/[^/]+\/resource\/?$/;
 const OM_CONFIG_PATH = /^\/web\/config\/om(\/|$)/;
 const MEMORY_PATH = /^\/api\/memory(\/|$)/;
 const ACTIVE_RUNS_PATH = /\/agent-controller\/[^/]+\/active-runs\/?$/;
+const SWITCH_MODEL_PATH = /\/agent-controller\/[^/]+\/sessions\/[^/]+\/model\/?$/;
+const SET_STATE_PATH = /\/agent-controller\/[^/]+\/sessions\/[^/]+\/state\/?$/;
+/** A form field as the server adapter reads it: JSON when it parses, else the raw text. */
+function parseFormField(value) {
+	try {
+		return JSON.parse(value);
+	} catch {
+		return value;
+	}
+}
+/** The body a handler can see: a multipart form parsed field by field as the server adapter does, else JSON. */
+async function requestBody(c) {
+	const request = c.req.raw.clone();
+	if (!c.req.header("content-type")?.includes("multipart/form-data")) return request.json().catch(() => void 0);
+	const form = await request.formData().catch(() => void 0);
+	if (!form) return void 0;
+	return Object.fromEntries([...form].map(([name, value]) => [name, typeof value === "string" ? parseFormField(value) : value]));
+}
+async function bodyValue(c, field) {
+	return (await requestBody(c))?.[field];
+}
 async function bodyField(c, field) {
-	const value = (await c.req.raw.clone().json().catch(() => void 0))?.[field];
+	const value = await bodyValue(c, field);
 	return typeof value === "string" && value ? value : void 0;
 }
+async function switchesModel(c) {
+	const { method, path } = c.req;
+	if (method === "POST" && SWITCH_MODEL_PATH.test(path)) return true;
+	if (method !== "PUT" || !SET_STATE_PATH.test(path)) return false;
+	const state = await bodyValue(c, "state");
+	return typeof state === "object" && state !== null && "thinkingLevel" in state;
+}
 function decodeSegment(segment) {
 	try {
 		return decodeURIComponent(segment);
@@ -92,8 +124,9 @@ async function addressed(c) {
 * routes trust a client-supplied resourceId or threadId, so they are bound to
 * the authorized resource, or the caller's own user id when none is named. The
 * controller-wide active-runs list drops runs on unreachable resources.
-* Denials answer 404 so ids do not leak existence. With auth disabled there is
-* no tenant to protect and everything passes through.
+* Denials answer 404 so ids do not leak existence. A teammate who can see a
+* session but tries to change its model or thinking level gets 403. With auth
+* disabled there is no tenant to protect and everything passes through.
 */
 function createSessionAccessGuard({ auth, sessions, projects, controller }) {
 	const canReachResource = async (resourceId, viewer) => {
@@ -133,6 +166,10 @@ function createSessionAccessGuard({ auth, sessions, projects, controller }) {
 		if (!viewer) return c.json({ error: "Session not found" }, 404);
 		for (const sessionId of target.sessionIds) if (!await canReachSession(sessionId, viewer)) return c.json({ error: "Session not found" }, 404);
 		for (const resourceId of target.resourceIds) if (!await canReachResource(resourceId, viewer)) return c.json({ error: "Session not found" }, 404);
+		if (await switchesModel(ctx)) for (const sessionId of target.sessionIds) {
+			const session = await sessions.getBySessionId(sessionId);
+			if (session && !canSwitchSessionModel(session, viewer)) return c.json({ error: "Only the session’s owner can change its model" }, 403);
+		}
 		if (isMemory) ctx.get("requestContext")?.set(MASTRA_RESOURCE_ID_KEY, target.resourceIds[0] ?? viewer.userId);
 		if (!isActiveRuns) return next();
 		await next();
@@ -160,6 +197,6 @@ async function filterActiveRuns(c, canReach) {
 	});
 }
 //#endregion
-export { canReadSessionResource, canViewSourceControlSession, createSessionAccessGuard };
+export { canReadSessionResource, canSwitchSessionModel, canViewSourceControlSession, createSessionAccessGuard };
 
 //# sourceMappingURL=session-access.js.map

package/dist/routes/session-access.js.map

@@ -1 +1 @@
-{"version":3,"file":"session-access.js","names":[],"sources":["../../src/routes/session-access.ts"],"sourcesContent":["import { MASTRA_RESOURCE_ID_KEY } from '@mastra/core/request-context';\nimport type { RequestContext } from '@mastra/core/request-context';\nimport type { Context, MiddlewareHandler } from 'hono';\n\nimport type { SourceControlSessionLookup } from '../session/factory-session.js';\nimport type { FactoryProjectsStorage } from '../storage/domains/projects/base.js';\nimport type { SourceControlSession } from '../storage/domains/source-control/base.js';\nimport type { RouteAuth } from './route.js';\n\n/**\n * Whether the viewer may read a visible session's conversation. A session on its owner's memory is\n * the owner's alone, whatever its row says.\n */\nexport function canReadSessionResource(\n  session: Pick<SourceControlSession, 'userId'>,\n  resourceId: string,\n  viewer: { userId: string },\n): boolean {\n  return viewer.userId === session.userId || resourceId !== session.userId;\n}\n\n/** Whether a viewer may read or drive a session: same org, and the owner when it is private. */\nexport function canViewSourceControlSession(\n  session: Pick<SourceControlSession, 'orgId' | 'userId' | 'visibility'>,\n  viewer: { orgId?: string; userId: string },\n): boolean {\n  if (session.orgId !== viewer.orgId) return false;\n  return session.visibility !== 'private' || session.userId === viewer.userId;\n}\n\n/** The controller reads the guard needs to find which resource a session runs on. */\nexport interface SessionResourceLookup {\n  getSession(sessionId: string): Promise<{ identity: { getResourceId(): string } } | undefined>;\n  queryThreadById(input: { threadId: string }): Promise<{ resourceId: string } | null>;\n}\n\ntype Viewer = { orgId?: string; userId: string };\n\nconst SESSION_PATH = /\\/agent-controller\\/[^/]+\\/sessions\\/([^/]+)/;\nconst CREATE_SESSION_PATH = /\\/agent-controller\\/[^/]+\\/sessions\\/?$/;\nconst SET_RESOURCE_PATH = /\\/agent-controller\\/[^/]+\\/sessions\\/[^/]+\\/resource\\/?$/;\nconst OM_CONFIG_PATH = /^\\/web\\/config\\/om(\\/|$)/;\nconst MEMORY_PATH = /^\\/api\\/memory(\\/|$)/;\nconst ACTIVE_RUNS_PATH = /\\/agent-controller\\/[^/]+\\/active-runs\\/?$/;\n\nasync function bodyField(c: Context, field: string): Promise<string | undefined> {\n  // Read a clone: the Mastra adapter clones `c.req.raw` again to parse params,\n  // which throws once anything has consumed the original body.\n  const body = await c.req.raw\n    .clone()\n    .json()\n    .catch(() => undefined);\n  const value = (body as Record<string, unknown> | undefined)?.[field];\n  return typeof value === 'string' && value ? value : undefined;\n}\n\nfunction decodeSegment(segment: string): string {\n  try {\n    return decodeURIComponent(segment);\n  } catch {\n    return segment;\n  }\n}\n\n/** The value of `field` from the query or the body; `null` when they differ, since handlers read one or the other. */\nasync function queryOrBody(c: Context, field: string): Promise<string | undefined | null> {\n  const fromQuery = c.req.query(field) || undefined;\n  const fromBody = c.req.method === 'GET' ? undefined : await bodyField(c, field);\n  if (fromQuery && fromBody && fromQuery !== fromBody) return null;\n  return fromQuery ?? fromBody;\n}\n\n/** The sessions and memory resources a request addresses. `null` when it names one ambiguously. */\nasync function addressed(c: Context): Promise<{ sessionIds: string[]; resourceIds: string[] } | null> {\n  const path = c.req.path;\n  const method = c.req.method;\n  const sessionMatch = SESSION_PATH.exec(path);\n  if (sessionMatch) {\n    const sessionId = decodeSegment(sessionMatch[1]!);\n    // Re-keying moves the session onto `newResourceId`, so that resource must be reachable too.\n    const target = method === 'POST' && SET_RESOURCE_PATH.test(path) ? await bodyField(c, 'newResourceId') : undefined;\n    return { sessionIds: [sessionId], resourceIds: target ? [target] : [] };\n  }\n  if (method === 'POST' && CREATE_SESSION_PATH.test(path)) {\n    // Get-or-create: without a `sessionId` the session is addressed by its resourceId.\n    const [sessionId, resourceId] = await Promise.all([bodyField(c, 'sessionId'), bodyField(c, 'resourceId')]);\n    const id = sessionId ?? resourceId;\n    return { sessionIds: id ? [id] : [], resourceIds: resourceId ? [resourceId] : [] };\n  }\n  if (OM_CONFIG_PATH.test(path)) {\n    const sessionId = await queryOrBody(c, 'sessionId');\n    if (sessionId === null) return null;\n    return { sessionIds: sessionId ? [sessionId] : [], resourceIds: [] };\n  }\n  if (MEMORY_PATH.test(path)) {\n    const resourceId = await queryOrBody(c, 'resourceId');\n    if (resourceId === null) return null;\n    return { sessionIds: [], resourceIds: resourceId ? [resourceId] : [] };\n  }\n  return { sessionIds: [], resourceIds: [] };\n}\n\n/**\n * Keeps private sessions private. A memory resource says who may read it: a\n * private session runs on its owner's user id, a shared one on its Factory's\n * id, and a session from before resources were shared on its own id. So a\n * caller reaches a resource only when it is their own user id, a Factory in\n * their organization, or a session id whose session they can view; any other\n * resource (another person's user id) answers 404.\n *\n * Session routes (stream, messages, threads, state, OM settings) resolve the\n * session from an in-memory map or its stored thread with no ownership check,\n * so both the session row and the resource it runs on are checked. Memory\n * routes trust a client-supplied resourceId or threadId, so they are bound to\n * the authorized resource, or the caller's own user id when none is named. The\n * controller-wide active-runs list drops runs on unreachable resources.\n * Denials answer 404 so ids do not leak existence. With auth disabled there is\n * no tenant to protect and everything passes through.\n */\nexport function createSessionAccessGuard({\n  auth,\n  sessions,\n  projects,\n  controller,\n}: {\n  auth: RouteAuth;\n  sessions: Pick<SourceControlSessionLookup, 'getBySessionId'>;\n  projects: Pick<FactoryProjectsStorage, 'get'>;\n  /** Resolved per request: the controller is built after the server config. */\n  controller: () => SessionResourceLookup | undefined;\n}): MiddlewareHandler {\n  const canReachResource = async (resourceId: string, viewer: Viewer): Promise<boolean> => {\n    if (resourceId === viewer.userId) return true;\n    const session = await sessions.getBySessionId(resourceId);\n    if (session) return canViewSourceControlSession(session, viewer);\n    if (!viewer.orgId) return false;\n    return (await projects.get({ orgId: viewer.orgId, id: resourceId })) !== null;\n  };\n\n  const sessionResourceId = async (sessionId: string): Promise<string> => {\n    const lookup = controller();\n    if (!lookup) return sessionId;\n    const live = await lookup.getSession(sessionId);\n    if (live) return live.identity.getResourceId();\n    return (await lookup.queryThreadById({ threadId: sessionId }))?.resourceId ?? sessionId;\n  };\n\n  const canReachSession = async (sessionId: string, viewer: Viewer): Promise<boolean> => {\n    const session = await sessions.getBySessionId(sessionId);\n    if (session && !canViewSourceControlSession(session, viewer)) return false;\n    const resourceId = await sessionResourceId(sessionId);\n    // A session on its own id was just checked by its row; one without a row is nobody's private session.\n    if (resourceId === sessionId) return true;\n    return canReachResource(resourceId, viewer);\n  };\n\n  return async (c, next) => {\n    if (!auth.enabled()) return next();\n    const ctx = c as unknown as Context;\n    const target = await addressed(ctx);\n    if (!target) return c.json({ error: 'The query and body must name the same session' }, 400);\n    const isMemory = MEMORY_PATH.test(ctx.req.path);\n    const isActiveRuns = ctx.req.method === 'GET' && ACTIVE_RUNS_PATH.test(ctx.req.path);\n    if (!target.sessionIds.length && !target.resourceIds.length && !isMemory && !isActiveRuns) return next();\n\n    await auth.ensureUser(ctx);\n    const viewer = auth.tenant(ctx);\n    if (!viewer) return c.json({ error: 'Session not found' }, 404);\n    for (const sessionId of target.sessionIds) {\n      if (!(await canReachSession(sessionId, viewer))) return c.json({ error: 'Session not found' }, 404);\n    }\n    for (const resourceId of target.resourceIds) {\n      if (!(await canReachResource(resourceId, viewer))) return c.json({ error: 'Session not found' }, 404);\n    }\n\n    if (isMemory) {\n      // Memory routes only check that a thread belongs to the request's resource\n      // when one is bound server-side. Bind the resource just authorized, or the\n      // caller's own user id, so a threadId cannot reach another resource's thread.\n      const requestContext = ctx.get('requestContext') as RequestContext | undefined;\n      requestContext?.set(MASTRA_RESOURCE_ID_KEY, target.resourceIds[0] ?? viewer.userId);\n    }\n    if (!isActiveRuns) return next();\n    await next();\n    await filterActiveRuns(ctx, resourceId => canReachResource(resourceId, viewer));\n  };\n}\n\n/** Drops runs on resources the caller cannot reach from the controller-wide active-runs list. */\nasync function filterActiveRuns(c: Context, canReach: (resourceId: string) => Promise<boolean>): Promise<void> {\n  if (!c.res.ok) return;\n  const body = (await c.res\n    .clone()\n    .json()\n    .catch(() => undefined)) as { runs?: Array<{ resourceId?: unknown }> } | undefined;\n  if (!body || !Array.isArray(body.runs)) return;\n  const resourceIds = [\n    ...new Set(body.runs.flatMap(run => (typeof run.resourceId === 'string' ? [run.resourceId] : []))),\n  ];\n  const reachable = new Map(await Promise.all(resourceIds.map(async id => [id, await canReach(id)] as const)));\n  const runs = body.runs.filter(run => typeof run.resourceId !== 'string' || reachable.get(run.resourceId));\n  if (runs.length === body.runs.length) return;\n  const headers = new Headers(c.res.headers);\n  headers.delete('content-length');\n  c.res.headers.delete('content-length');\n  c.res = new Response(JSON.stringify({ ...body, runs }), { status: c.res.status, headers });\n}\n"],"mappings":";;;;;;AAaA,SAAgB,uBACd,SACA,YACA,QACS;CACT,OAAO,OAAO,WAAW,QAAQ,UAAU,eAAe,QAAQ;AACpE;;AAGA,SAAgB,4BACd,SACA,QACS;CACT,IAAI,QAAQ,UAAU,OAAO,OAAO,OAAO;CAC3C,OAAO,QAAQ,eAAe,aAAa,QAAQ,WAAW,OAAO;AACvE;AAUA,MAAM,eAAe;AACrB,MAAM,sBAAsB;AAC5B,MAAM,oBAAoB;AAC1B,MAAM,iBAAiB;AACvB,MAAM,cAAc;AACpB,MAAM,mBAAmB;AAEzB,eAAe,UAAU,GAAY,OAA4C;CAO/E,MAAM,SAAS,MAJI,EAAE,IAAI,IACtB,MAAM,CAAC,CACP,KAAK,CAAC,CACN,YAAY,KAAA,CAAS,EAAA,GACsC;CAC9D,OAAO,OAAO,UAAU,YAAY,QAAQ,QAAQ,KAAA;AACtD;AAEA,SAAS,cAAc,SAAyB;CAC9C,IAAI;EACF,OAAO,mBAAmB,OAAO;CACnC,QAAQ;EACN,OAAO;CACT;AACF;;AAGA,eAAe,YAAY,GAAY,OAAmD;CACxF,MAAM,YAAY,EAAE,IAAI,MAAM,KAAK,KAAK,KAAA;CACxC,MAAM,WAAW,EAAE,IAAI,WAAW,QAAQ,KAAA,IAAY,MAAM,UAAU,GAAG,KAAK;CAC9E,IAAI,aAAa,YAAY,cAAc,UAAU,OAAO;CAC5D,OAAO,aAAa;AACtB;;AAGA,eAAe,UAAU,GAA6E;CACpG,MAAM,OAAO,EAAE,IAAI;CACnB,MAAM,SAAS,EAAE,IAAI;CACrB,MAAM,eAAe,aAAa,KAAK,IAAI;CAC3C,IAAI,cAAc;EAChB,MAAM,YAAY,cAAc,aAAa,EAAG;EAEhD,MAAM,SAAS,WAAW,UAAU,kBAAkB,KAAK,IAAI,IAAI,MAAM,UAAU,GAAG,eAAe,IAAI,KAAA;EACzG,OAAO;GAAE,YAAY,CAAC,SAAS;GAAG,aAAa,SAAS,CAAC,MAAM,IAAI,CAAC;EAAE;CACxE;CACA,IAAI,WAAW,UAAU,oBAAoB,KAAK,IAAI,GAAG;EAEvD,MAAM,CAAC,WAAW,cAAc,MAAM,QAAQ,IAAI,CAAC,UAAU,GAAG,WAAW,GAAG,UAAU,GAAG,YAAY,CAAC,CAAC;EACzG,MAAM,KAAK,aAAa;EACxB,OAAO;GAAE,YAAY,KAAK,CAAC,EAAE,IAAI,CAAC;GAAG,aAAa,aAAa,CAAC,UAAU,IAAI,CAAC;EAAE;CACnF;CACA,IAAI,eAAe,KAAK,IAAI,GAAG;EAC7B,MAAM,YAAY,MAAM,YAAY,GAAG,WAAW;EAClD,IAAI,cAAc,MAAM,OAAO;EAC/B,OAAO;GAAE,YAAY,YAAY,CAAC,SAAS,IAAI,CAAC;GAAG,aAAa,CAAC;EAAE;CACrE;CACA,IAAI,YAAY,KAAK,IAAI,GAAG;EAC1B,MAAM,aAAa,MAAM,YAAY,GAAG,YAAY;EACpD,IAAI,eAAe,MAAM,OAAO;EAChC,OAAO;GAAE,YAAY,CAAC;GAAG,aAAa,aAAa,CAAC,UAAU,IAAI,CAAC;EAAE;CACvE;CACA,OAAO;EAAE,YAAY,CAAC;EAAG,aAAa,CAAC;CAAE;AAC3C;;;;;;;;;;;;;;;;;;AAmBA,SAAgB,yBAAyB,EACvC,MACA,UACA,UACA,cAOoB;CACpB,MAAM,mBAAmB,OAAO,YAAoB,WAAqC;EACvF,IAAI,eAAe,OAAO,QAAQ,OAAO;EACzC,MAAM,UAAU,MAAM,SAAS,eAAe,UAAU;EACxD,IAAI,SAAS,OAAO,4BAA4B,SAAS,MAAM;EAC/D,IAAI,CAAC,OAAO,OAAO,OAAO;EAC1B,OAAQ,MAAM,SAAS,IAAI;GAAE,OAAO,OAAO;GAAO,IAAI;EAAW,CAAC,MAAO;CAC3E;CAEA,MAAM,oBAAoB,OAAO,cAAuC;EACtE,MAAM,SAAS,WAAW;EAC1B,IAAI,CAAC,QAAQ,OAAO;EACpB,MAAM,OAAO,MAAM,OAAO,WAAW,SAAS;EAC9C,IAAI,MAAM,OAAO,KAAK,SAAS,cAAc;EAC7C,QAAQ,MAAM,OAAO,gBAAgB,EAAE,UAAU,UAAU,CAAC,EAAA,EAAI,cAAc;CAChF;CAEA,MAAM,kBAAkB,OAAO,WAAmB,WAAqC;EACrF,MAAM,UAAU,MAAM,SAAS,eAAe,SAAS;EACvD,IAAI,WAAW,CAAC,4BAA4B,SAAS,MAAM,GAAG,OAAO;EACrE,MAAM,aAAa,MAAM,kBAAkB,SAAS;EAEpD,IAAI,eAAe,WAAW,OAAO;EACrC,OAAO,iBAAiB,YAAY,MAAM;CAC5C;CAEA,OAAO,OAAO,GAAG,SAAS;EACxB,IAAI,CAAC,KAAK,QAAQ,GAAG,OAAO,KAAK;EACjC,MAAM,MAAM;EACZ,MAAM,SAAS,MAAM,UAAU,GAAG;EAClC,IAAI,CAAC,QAAQ,OAAO,EAAE,KAAK,EAAE,OAAO,gDAAgD,GAAG,GAAG;EAC1F,MAAM,WAAW,YAAY,KAAK,IAAI,IAAI,IAAI;EAC9C,MAAM,eAAe,IAAI,IAAI,WAAW,SAAS,iBAAiB,KAAK,IAAI,IAAI,IAAI;EACnF,IAAI,CAAC,OAAO,WAAW,UAAU,CAAC,OAAO,YAAY,UAAU,CAAC,YAAY,CAAC,cAAc,OAAO,KAAK;EAEvG,MAAM,KAAK,WAAW,GAAG;EACzB,MAAM,SAAS,KAAK,OAAO,GAAG;EAC9B,IAAI,CAAC,QAAQ,OAAO,EAAE,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;EAC9D,KAAK,MAAM,aAAa,OAAO,YAC7B,IAAI,CAAE,MAAM,gBAAgB,WAAW,MAAM,GAAI,OAAO,EAAE,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;EAEpG,KAAK,MAAM,cAAc,OAAO,aAC9B,IAAI,CAAE,MAAM,iBAAiB,YAAY,MAAM,GAAI,OAAO,EAAE,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;EAGtG,IAAI,UAKF,IAD2B,IAAI,gBAClB,CAAC,EAAE,IAAI,wBAAwB,OAAO,YAAY,MAAM,OAAO,MAAM;EAEpF,IAAI,CAAC,cAAc,OAAO,KAAK;EAC/B,MAAM,KAAK;EACX,MAAM,iBAAiB,MAAK,eAAc,iBAAiB,YAAY,MAAM,CAAC;CAChF;AACF;;AAGA,eAAe,iBAAiB,GAAY,UAAmE;CAC7G,IAAI,CAAC,EAAE,IAAI,IAAI;CACf,MAAM,OAAQ,MAAM,EAAE,IACnB,MAAM,CAAC,CACP,KAAK,CAAC,CACN,YAAY,KAAA,CAAS;CACxB,IAAI,CAAC,QAAQ,CAAC,MAAM,QAAQ,KAAK,IAAI,GAAG;CACxC,MAAM,cAAc,CAClB,GAAG,IAAI,IAAI,KAAK,KAAK,SAAQ,QAAQ,OAAO,IAAI,eAAe,WAAW,CAAC,IAAI,UAAU,IAAI,CAAC,CAAE,CAAC,CACnG;CACA,MAAM,YAAY,IAAI,IAAI,MAAM,QAAQ,IAAI,YAAY,IAAI,OAAM,OAAM,CAAC,IAAI,MAAM,SAAS,EAAE,CAAC,CAAU,CAAC,CAAC;CAC3G,MAAM,OAAO,KAAK,KAAK,QAAO,QAAO,OAAO,IAAI,eAAe,YAAY,UAAU,IAAI,IAAI,UAAU,CAAC;CACxG,IAAI,KAAK,WAAW,KAAK,KAAK,QAAQ;CACtC,MAAM,UAAU,IAAI,QAAQ,EAAE,IAAI,OAAO;CACzC,QAAQ,OAAO,gBAAgB;CAC/B,EAAE,IAAI,QAAQ,OAAO,gBAAgB;CACrC,EAAE,MAAM,IAAI,SAAS,KAAK,UAAU;EAAE,GAAG;EAAM;CAAK,CAAC,GAAG;EAAE,QAAQ,EAAE,IAAI;EAAQ;CAAQ,CAAC;AAC3F"}
+{"version":3,"file":"session-access.js","names":[],"sources":["../../src/routes/session-access.ts"],"sourcesContent":["import { MASTRA_RESOURCE_ID_KEY } from '@mastra/core/request-context';\nimport type { RequestContext } from '@mastra/core/request-context';\nimport type { Context, MiddlewareHandler } from 'hono';\n\nimport type { SourceControlSessionLookup } from '../session/factory-session.js';\nimport type { FactoryProjectsStorage } from '../storage/domains/projects/base.js';\nimport type { SourceControlSession } from '../storage/domains/source-control/base.js';\nimport type { RouteAuth } from './route.js';\n\n/**\n * Whether the viewer may read a visible session's conversation. A session on its owner's memory is\n * the owner's alone, whatever its row says.\n */\nexport function canReadSessionResource(\n  session: Pick<SourceControlSession, 'userId'>,\n  resourceId: string,\n  viewer: { userId: string },\n): boolean {\n  return viewer.userId === session.userId || resourceId !== session.userId;\n}\n\n/** Whether a viewer may read or drive a session: same org, and the owner when it is private. */\nexport function canViewSourceControlSession(\n  session: Pick<SourceControlSession, 'orgId' | 'userId' | 'visibility'>,\n  viewer: { orgId?: string; userId: string },\n): boolean {\n  if (session.orgId !== viewer.orgId) return false;\n  return session.visibility !== 'private' || session.userId === viewer.userId;\n}\n\n/** A teammate steers a shared session; only its owner changes the model and thinking level its turns run on. */\nexport function canSwitchSessionModel(\n  session: Pick<SourceControlSession, 'userId'>,\n  viewer: { userId: string },\n): boolean {\n  return session.userId === viewer.userId;\n}\n\n/** The controller reads the guard needs to find which resource a session runs on. */\nexport interface SessionResourceLookup {\n  getSession(sessionId: string): Promise<{ identity: { getResourceId(): string } } | undefined>;\n  queryThreadById(input: { threadId: string }): Promise<{ resourceId: string } | null>;\n}\n\ntype Viewer = { orgId?: string; userId: string };\n\nconst SESSION_PATH = /\\/agent-controller\\/[^/]+\\/sessions\\/([^/]+)/;\nconst CREATE_SESSION_PATH = /\\/agent-controller\\/[^/]+\\/sessions\\/?$/;\nconst SET_RESOURCE_PATH = /\\/agent-controller\\/[^/]+\\/sessions\\/[^/]+\\/resource\\/?$/;\nconst OM_CONFIG_PATH = /^\\/web\\/config\\/om(\\/|$)/;\nconst MEMORY_PATH = /^\\/api\\/memory(\\/|$)/;\nconst ACTIVE_RUNS_PATH = /\\/agent-controller\\/[^/]+\\/active-runs\\/?$/;\nconst SWITCH_MODEL_PATH = /\\/agent-controller\\/[^/]+\\/sessions\\/[^/]+\\/model\\/?$/;\nconst SET_STATE_PATH = /\\/agent-controller\\/[^/]+\\/sessions\\/[^/]+\\/state\\/?$/;\n\n/** A form field as the server adapter reads it: JSON when it parses, else the raw text. */\nfunction parseFormField(value: string): unknown {\n  try {\n    return JSON.parse(value);\n  } catch {\n    return value;\n  }\n}\n\n/** The body a handler can see: a multipart form parsed field by field as the server adapter does, else JSON. */\nasync function requestBody(c: Context): Promise<unknown> {\n  // Read a clone: the Mastra adapter clones `c.req.raw` again to parse params,\n  // which throws once anything has consumed the original body.\n  const request = c.req.raw.clone();\n  if (!c.req.header('content-type')?.includes('multipart/form-data')) return request.json().catch(() => undefined);\n  const form = await request.formData().catch(() => undefined);\n  if (!form) return undefined;\n  return Object.fromEntries(\n    [...form].map(([name, value]) => [name, typeof value === 'string' ? parseFormField(value) : value]),\n  );\n}\n\nasync function bodyValue(c: Context, field: string): Promise<unknown> {\n  const body = await requestBody(c);\n  return (body as Record<string, unknown> | undefined)?.[field];\n}\n\nasync function bodyField(c: Context, field: string): Promise<string | undefined> {\n  const value = await bodyValue(c, field);\n  return typeof value === 'string' && value ? value : undefined;\n}\n\nasync function switchesModel(c: Context): Promise<boolean> {\n  const { method, path } = c.req;\n  if (method === 'POST' && SWITCH_MODEL_PATH.test(path)) return true;\n  if (method !== 'PUT' || !SET_STATE_PATH.test(path)) return false;\n  const state = await bodyValue(c, 'state');\n  return typeof state === 'object' && state !== null && 'thinkingLevel' in state;\n}\n\nfunction decodeSegment(segment: string): string {\n  try {\n    return decodeURIComponent(segment);\n  } catch {\n    return segment;\n  }\n}\n\n/** The value of `field` from the query or the body; `null` when they differ, since handlers read one or the other. */\nasync function queryOrBody(c: Context, field: string): Promise<string | undefined | null> {\n  const fromQuery = c.req.query(field) || undefined;\n  const fromBody = c.req.method === 'GET' ? undefined : await bodyField(c, field);\n  if (fromQuery && fromBody && fromQuery !== fromBody) return null;\n  return fromQuery ?? fromBody;\n}\n\n/** The sessions and memory resources a request addresses. `null` when it names one ambiguously. */\nasync function addressed(c: Context): Promise<{ sessionIds: string[]; resourceIds: string[] } | null> {\n  const path = c.req.path;\n  const method = c.req.method;\n  const sessionMatch = SESSION_PATH.exec(path);\n  if (sessionMatch) {\n    const sessionId = decodeSegment(sessionMatch[1]!);\n    // Re-keying moves the session onto `newResourceId`, so that resource must be reachable too.\n    const target = method === 'POST' && SET_RESOURCE_PATH.test(path) ? await bodyField(c, 'newResourceId') : undefined;\n    return { sessionIds: [sessionId], resourceIds: target ? [target] : [] };\n  }\n  if (method === 'POST' && CREATE_SESSION_PATH.test(path)) {\n    // Get-or-create: without a `sessionId` the session is addressed by its resourceId.\n    const [sessionId, resourceId] = await Promise.all([bodyField(c, 'sessionId'), bodyField(c, 'resourceId')]);\n    const id = sessionId ?? resourceId;\n    return { sessionIds: id ? [id] : [], resourceIds: resourceId ? [resourceId] : [] };\n  }\n  if (OM_CONFIG_PATH.test(path)) {\n    const sessionId = await queryOrBody(c, 'sessionId');\n    if (sessionId === null) return null;\n    return { sessionIds: sessionId ? [sessionId] : [], resourceIds: [] };\n  }\n  if (MEMORY_PATH.test(path)) {\n    const resourceId = await queryOrBody(c, 'resourceId');\n    if (resourceId === null) return null;\n    return { sessionIds: [], resourceIds: resourceId ? [resourceId] : [] };\n  }\n  return { sessionIds: [], resourceIds: [] };\n}\n\n/**\n * Keeps private sessions private. A memory resource says who may read it: a\n * private session runs on its owner's user id, a shared one on its Factory's\n * id, and a session from before resources were shared on its own id. So a\n * caller reaches a resource only when it is their own user id, a Factory in\n * their organization, or a session id whose session they can view; any other\n * resource (another person's user id) answers 404.\n *\n * Session routes (stream, messages, threads, state, OM settings) resolve the\n * session from an in-memory map or its stored thread with no ownership check,\n * so both the session row and the resource it runs on are checked. Memory\n * routes trust a client-supplied resourceId or threadId, so they are bound to\n * the authorized resource, or the caller's own user id when none is named. The\n * controller-wide active-runs list drops runs on unreachable resources.\n * Denials answer 404 so ids do not leak existence. A teammate who can see a\n * session but tries to change its model or thinking level gets 403. With auth\n * disabled there is no tenant to protect and everything passes through.\n */\nexport function createSessionAccessGuard({\n  auth,\n  sessions,\n  projects,\n  controller,\n}: {\n  auth: RouteAuth;\n  sessions: Pick<SourceControlSessionLookup, 'getBySessionId'>;\n  projects: Pick<FactoryProjectsStorage, 'get'>;\n  /** Resolved per request: the controller is built after the server config. */\n  controller: () => SessionResourceLookup | undefined;\n}): MiddlewareHandler {\n  const canReachResource = async (resourceId: string, viewer: Viewer): Promise<boolean> => {\n    if (resourceId === viewer.userId) return true;\n    const session = await sessions.getBySessionId(resourceId);\n    if (session) return canViewSourceControlSession(session, viewer);\n    if (!viewer.orgId) return false;\n    return (await projects.get({ orgId: viewer.orgId, id: resourceId })) !== null;\n  };\n\n  const sessionResourceId = async (sessionId: string): Promise<string> => {\n    const lookup = controller();\n    if (!lookup) return sessionId;\n    const live = await lookup.getSession(sessionId);\n    if (live) return live.identity.getResourceId();\n    return (await lookup.queryThreadById({ threadId: sessionId }))?.resourceId ?? sessionId;\n  };\n\n  const canReachSession = async (sessionId: string, viewer: Viewer): Promise<boolean> => {\n    const session = await sessions.getBySessionId(sessionId);\n    if (session && !canViewSourceControlSession(session, viewer)) return false;\n    const resourceId = await sessionResourceId(sessionId);\n    // A session on its own id was just checked by its row; one without a row is nobody's private session.\n    if (resourceId === sessionId) return true;\n    return canReachResource(resourceId, viewer);\n  };\n\n  return async (c, next) => {\n    if (!auth.enabled()) return next();\n    const ctx = c as unknown as Context;\n    const target = await addressed(ctx);\n    if (!target) return c.json({ error: 'The query and body must name the same session' }, 400);\n    const isMemory = MEMORY_PATH.test(ctx.req.path);\n    const isActiveRuns = ctx.req.method === 'GET' && ACTIVE_RUNS_PATH.test(ctx.req.path);\n    if (!target.sessionIds.length && !target.resourceIds.length && !isMemory && !isActiveRuns) return next();\n\n    await auth.ensureUser(ctx);\n    const viewer = auth.tenant(ctx);\n    if (!viewer) return c.json({ error: 'Session not found' }, 404);\n    for (const sessionId of target.sessionIds) {\n      if (!(await canReachSession(sessionId, viewer))) return c.json({ error: 'Session not found' }, 404);\n    }\n    for (const resourceId of target.resourceIds) {\n      if (!(await canReachResource(resourceId, viewer))) return c.json({ error: 'Session not found' }, 404);\n    }\n    if (await switchesModel(ctx)) {\n      for (const sessionId of target.sessionIds) {\n        const session = await sessions.getBySessionId(sessionId);\n        if (session && !canSwitchSessionModel(session, viewer)) {\n          return c.json({ error: 'Only the session’s owner can change its model' }, 403);\n        }\n      }\n    }\n\n    if (isMemory) {\n      // Memory routes only check that a thread belongs to the request's resource\n      // when one is bound server-side. Bind the resource just authorized, or the\n      // caller's own user id, so a threadId cannot reach another resource's thread.\n      const requestContext = ctx.get('requestContext') as RequestContext | undefined;\n      requestContext?.set(MASTRA_RESOURCE_ID_KEY, target.resourceIds[0] ?? viewer.userId);\n    }\n    if (!isActiveRuns) return next();\n    await next();\n    await filterActiveRuns(ctx, resourceId => canReachResource(resourceId, viewer));\n  };\n}\n\n/** Drops runs on resources the caller cannot reach from the controller-wide active-runs list. */\nasync function filterActiveRuns(c: Context, canReach: (resourceId: string) => Promise<boolean>): Promise<void> {\n  if (!c.res.ok) return;\n  const body = (await c.res\n    .clone()\n    .json()\n    .catch(() => undefined)) as { runs?: Array<{ resourceId?: unknown }> } | undefined;\n  if (!body || !Array.isArray(body.runs)) return;\n  const resourceIds = [\n    ...new Set(body.runs.flatMap(run => (typeof run.resourceId === 'string' ? [run.resourceId] : []))),\n  ];\n  const reachable = new Map(await Promise.all(resourceIds.map(async id => [id, await canReach(id)] as const)));\n  const runs = body.runs.filter(run => typeof run.resourceId !== 'string' || reachable.get(run.resourceId));\n  if (runs.length === body.runs.length) return;\n  const headers = new Headers(c.res.headers);\n  headers.delete('content-length');\n  c.res.headers.delete('content-length');\n  c.res = new Response(JSON.stringify({ ...body, runs }), { status: c.res.status, headers });\n}\n"],"mappings":";;;;;;AAaA,SAAgB,uBACd,SACA,YACA,QACS;CACT,OAAO,OAAO,WAAW,QAAQ,UAAU,eAAe,QAAQ;AACpE;;AAGA,SAAgB,4BACd,SACA,QACS;CACT,IAAI,QAAQ,UAAU,OAAO,OAAO,OAAO;CAC3C,OAAO,QAAQ,eAAe,aAAa,QAAQ,WAAW,OAAO;AACvE;;AAGA,SAAgB,sBACd,SACA,QACS;CACT,OAAO,QAAQ,WAAW,OAAO;AACnC;AAUA,MAAM,eAAe;AACrB,MAAM,sBAAsB;AAC5B,MAAM,oBAAoB;AAC1B,MAAM,iBAAiB;AACvB,MAAM,cAAc;AACpB,MAAM,mBAAmB;AACzB,MAAM,oBAAoB;AAC1B,MAAM,iBAAiB;;AAGvB,SAAS,eAAe,OAAwB;CAC9C,IAAI;EACF,OAAO,KAAK,MAAM,KAAK;CACzB,QAAQ;EACN,OAAO;CACT;AACF;;AAGA,eAAe,YAAY,GAA8B;CAGvD,MAAM,UAAU,EAAE,IAAI,IAAI,MAAM;CAChC,IAAI,CAAC,EAAE,IAAI,OAAO,cAAc,CAAC,EAAE,SAAS,qBAAqB,GAAG,OAAO,QAAQ,KAAK,CAAC,CAAC,YAAY,KAAA,CAAS;CAC/G,MAAM,OAAO,MAAM,QAAQ,SAAS,CAAC,CAAC,YAAY,KAAA,CAAS;CAC3D,IAAI,CAAC,MAAM,OAAO,KAAA;CAClB,OAAO,OAAO,YACZ,CAAC,GAAG,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,WAAW,CAAC,MAAM,OAAO,UAAU,WAAW,eAAe,KAAK,IAAI,KAAK,CAAC,CACpG;AACF;AAEA,eAAe,UAAU,GAAY,OAAiC;CAEpE,QAAQ,MADW,YAAY,CAAC,EAAA,GACuB;AACzD;AAEA,eAAe,UAAU,GAAY,OAA4C;CAC/E,MAAM,QAAQ,MAAM,UAAU,GAAG,KAAK;CACtC,OAAO,OAAO,UAAU,YAAY,QAAQ,QAAQ,KAAA;AACtD;AAEA,eAAe,cAAc,GAA8B;CACzD,MAAM,EAAE,QAAQ,SAAS,EAAE;CAC3B,IAAI,WAAW,UAAU,kBAAkB,KAAK,IAAI,GAAG,OAAO;CAC9D,IAAI,WAAW,SAAS,CAAC,eAAe,KAAK,IAAI,GAAG,OAAO;CAC3D,MAAM,QAAQ,MAAM,UAAU,GAAG,OAAO;CACxC,OAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,mBAAmB;AAC3E;AAEA,SAAS,cAAc,SAAyB;CAC9C,IAAI;EACF,OAAO,mBAAmB,OAAO;CACnC,QAAQ;EACN,OAAO;CACT;AACF;;AAGA,eAAe,YAAY,GAAY,OAAmD;CACxF,MAAM,YAAY,EAAE,IAAI,MAAM,KAAK,KAAK,KAAA;CACxC,MAAM,WAAW,EAAE,IAAI,WAAW,QAAQ,KAAA,IAAY,MAAM,UAAU,GAAG,KAAK;CAC9E,IAAI,aAAa,YAAY,cAAc,UAAU,OAAO;CAC5D,OAAO,aAAa;AACtB;;AAGA,eAAe,UAAU,GAA6E;CACpG,MAAM,OAAO,EAAE,IAAI;CACnB,MAAM,SAAS,EAAE,IAAI;CACrB,MAAM,eAAe,aAAa,KAAK,IAAI;CAC3C,IAAI,cAAc;EAChB,MAAM,YAAY,cAAc,aAAa,EAAG;EAEhD,MAAM,SAAS,WAAW,UAAU,kBAAkB,KAAK,IAAI,IAAI,MAAM,UAAU,GAAG,eAAe,IAAI,KAAA;EACzG,OAAO;GAAE,YAAY,CAAC,SAAS;GAAG,aAAa,SAAS,CAAC,MAAM,IAAI,CAAC;EAAE;CACxE;CACA,IAAI,WAAW,UAAU,oBAAoB,KAAK,IAAI,GAAG;EAEvD,MAAM,CAAC,WAAW,cAAc,MAAM,QAAQ,IAAI,CAAC,UAAU,GAAG,WAAW,GAAG,UAAU,GAAG,YAAY,CAAC,CAAC;EACzG,MAAM,KAAK,aAAa;EACxB,OAAO;GAAE,YAAY,KAAK,CAAC,EAAE,IAAI,CAAC;GAAG,aAAa,aAAa,CAAC,UAAU,IAAI,CAAC;EAAE;CACnF;CACA,IAAI,eAAe,KAAK,IAAI,GAAG;EAC7B,MAAM,YAAY,MAAM,YAAY,GAAG,WAAW;EAClD,IAAI,cAAc,MAAM,OAAO;EAC/B,OAAO;GAAE,YAAY,YAAY,CAAC,SAAS,IAAI,CAAC;GAAG,aAAa,CAAC;EAAE;CACrE;CACA,IAAI,YAAY,KAAK,IAAI,GAAG;EAC1B,MAAM,aAAa,MAAM,YAAY,GAAG,YAAY;EACpD,IAAI,eAAe,MAAM,OAAO;EAChC,OAAO;GAAE,YAAY,CAAC;GAAG,aAAa,aAAa,CAAC,UAAU,IAAI,CAAC;EAAE;CACvE;CACA,OAAO;EAAE,YAAY,CAAC;EAAG,aAAa,CAAC;CAAE;AAC3C;;;;;;;;;;;;;;;;;;;AAoBA,SAAgB,yBAAyB,EACvC,MACA,UACA,UACA,cAOoB;CACpB,MAAM,mBAAmB,OAAO,YAAoB,WAAqC;EACvF,IAAI,eAAe,OAAO,QAAQ,OAAO;EACzC,MAAM,UAAU,MAAM,SAAS,eAAe,UAAU;EACxD,IAAI,SAAS,OAAO,4BAA4B,SAAS,MAAM;EAC/D,IAAI,CAAC,OAAO,OAAO,OAAO;EAC1B,OAAQ,MAAM,SAAS,IAAI;GAAE,OAAO,OAAO;GAAO,IAAI;EAAW,CAAC,MAAO;CAC3E;CAEA,MAAM,oBAAoB,OAAO,cAAuC;EACtE,MAAM,SAAS,WAAW;EAC1B,IAAI,CAAC,QAAQ,OAAO;EACpB,MAAM,OAAO,MAAM,OAAO,WAAW,SAAS;EAC9C,IAAI,MAAM,OAAO,KAAK,SAAS,cAAc;EAC7C,QAAQ,MAAM,OAAO,gBAAgB,EAAE,UAAU,UAAU,CAAC,EAAA,EAAI,cAAc;CAChF;CAEA,MAAM,kBAAkB,OAAO,WAAmB,WAAqC;EACrF,MAAM,UAAU,MAAM,SAAS,eAAe,SAAS;EACvD,IAAI,WAAW,CAAC,4BAA4B,SAAS,MAAM,GAAG,OAAO;EACrE,MAAM,aAAa,MAAM,kBAAkB,SAAS;EAEpD,IAAI,eAAe,WAAW,OAAO;EACrC,OAAO,iBAAiB,YAAY,MAAM;CAC5C;CAEA,OAAO,OAAO,GAAG,SAAS;EACxB,IAAI,CAAC,KAAK,QAAQ,GAAG,OAAO,KAAK;EACjC,MAAM,MAAM;EACZ,MAAM,SAAS,MAAM,UAAU,GAAG;EAClC,IAAI,CAAC,QAAQ,OAAO,EAAE,KAAK,EAAE,OAAO,gDAAgD,GAAG,GAAG;EAC1F,MAAM,WAAW,YAAY,KAAK,IAAI,IAAI,IAAI;EAC9C,MAAM,eAAe,IAAI,IAAI,WAAW,SAAS,iBAAiB,KAAK,IAAI,IAAI,IAAI;EACnF,IAAI,CAAC,OAAO,WAAW,UAAU,CAAC,OAAO,YAAY,UAAU,CAAC,YAAY,CAAC,cAAc,OAAO,KAAK;EAEvG,MAAM,KAAK,WAAW,GAAG;EACzB,MAAM,SAAS,KAAK,OAAO,GAAG;EAC9B,IAAI,CAAC,QAAQ,OAAO,EAAE,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;EAC9D,KAAK,MAAM,aAAa,OAAO,YAC7B,IAAI,CAAE,MAAM,gBAAgB,WAAW,MAAM,GAAI,OAAO,EAAE,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;EAEpG,KAAK,MAAM,cAAc,OAAO,aAC9B,IAAI,CAAE,MAAM,iBAAiB,YAAY,MAAM,GAAI,OAAO,EAAE,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;EAEtG,IAAI,MAAM,cAAc,GAAG,GACzB,KAAK,MAAM,aAAa,OAAO,YAAY;GACzC,MAAM,UAAU,MAAM,SAAS,eAAe,SAAS;GACvD,IAAI,WAAW,CAAC,sBAAsB,SAAS,MAAM,GACnD,OAAO,EAAE,KAAK,EAAE,OAAO,gDAAgD,GAAG,GAAG;EAEjF;EAGF,IAAI,UAKF,IAD2B,IAAI,gBAClB,CAAC,EAAE,IAAI,wBAAwB,OAAO,YAAY,MAAM,OAAO,MAAM;EAEpF,IAAI,CAAC,cAAc,OAAO,KAAK;EAC/B,MAAM,KAAK;EACX,MAAM,iBAAiB,MAAK,eAAc,iBAAiB,YAAY,MAAM,CAAC;CAChF;AACF;;AAGA,eAAe,iBAAiB,GAAY,UAAmE;CAC7G,IAAI,CAAC,EAAE,IAAI,IAAI;CACf,MAAM,OAAQ,MAAM,EAAE,IACnB,MAAM,CAAC,CACP,KAAK,CAAC,CACN,YAAY,KAAA,CAAS;CACxB,IAAI,CAAC,QAAQ,CAAC,MAAM,QAAQ,KAAK,IAAI,GAAG;CACxC,MAAM,cAAc,CAClB,GAAG,IAAI,IAAI,KAAK,KAAK,SAAQ,QAAQ,OAAO,IAAI,eAAe,WAAW,CAAC,IAAI,UAAU,IAAI,CAAC,CAAE,CAAC,CACnG;CACA,MAAM,YAAY,IAAI,IAAI,MAAM,QAAQ,IAAI,YAAY,IAAI,OAAM,OAAM,CAAC,IAAI,MAAM,SAAS,EAAE,CAAC,CAAU,CAAC,CAAC;CAC3G,MAAM,OAAO,KAAK,KAAK,QAAO,QAAO,OAAO,IAAI,eAAe,YAAY,UAAU,IAAI,IAAI,UAAU,CAAC;CACxG,IAAI,KAAK,WAAW,KAAK,KAAK,QAAQ;CACtC,MAAM,UAAU,IAAI,QAAQ,EAAE,IAAI,OAAO;CACzC,QAAQ,OAAO,gBAAgB;CAC/B,EAAE,IAAI,QAAQ,OAAO,gBAAgB;CACrC,EAAE,MAAM,IAAI,SAAS,KAAK,UAAU;EAAE,GAAG;EAAM;CAAK,CAAC,GAAG;EAAE,QAAQ,EAAE,IAAI;EAAQ;CAAQ,CAAC;AAC3F"}

package/dist/routes/skills.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"skills.d.ts","sourceRoot":"","sources":["../../src/routes/skills.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAErE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAEpD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAIpC,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,2CAA2C,CAAC;AAC5F,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AACpD,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAanC,UAAU,0BAA0B;IAClC,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,GAAG,GAAG,GAAG,GAAG,GAAG,CAAC;IACzB,IAAI,CAAC,EAAE,iBAAiB,GAAG,cAAc,GAAG,mBAAmB,CAAC;IAChE,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,eAAgB,SAAQ,iBAAiB;IACxD,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,IAAI,CAAC,eAAe,CAAC,eAAe,CAAC,EAAE,YAAY,CAAC,CAAC;IACjE,oBAAoB,CAAC,EAAE,0BAA0B,CAAC;IAClD,wBAAwB,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/C,uBAAuB,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,0BAA0B,CAAC,CAAC;CACrH;AA6BD,qBAAa,WAAY,SAAQ,KAAK,CAAC,eAAe,CAAC;;IAwCrD,MAAM,IAAI,QAAQ,EAAE;CA4ErB"}
+{"version":3,"file":"skills.d.ts","sourceRoot":"","sources":["../../src/routes/skills.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAErE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAEpD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAIpC,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,2CAA2C,CAAC;AAC5F,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AACpD,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAanC,UAAU,0BAA0B;IAClC,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,GAAG,GAAG,GAAG,GAAG,GAAG,CAAC;IACzB,IAAI,CAAC,EAAE,iBAAiB,GAAG,cAAc,GAAG,mBAAmB,CAAC;IAChE,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,eAAgB,SAAQ,iBAAiB;IACxD,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,IAAI,CAAC,eAAe,CAAC,eAAe,CAAC,EAAE,YAAY,CAAC,CAAC;IACjE,oBAAoB,CAAC,EAAE,0BAA0B,CAAC;IAClD,wBAAwB,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/C,uBAAuB,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,0BAA0B,CAAC,CAAC;CACrH;AA6BD,qBAAa,WAAY,SAAQ,KAAK,CAAC,eAAe,CAAC;;IAwCrD,MAAM,IAAI,QAAQ,EAAE;CA6ErB"}

package/dist/routes/skills.js

@@ -1,6 +1,6 @@
 import { Route } from "./route.js";
 import { listFactorySkills } from "../skills/catalog.js";
-import { SkillInvocationError, resolveSkillInvocation } from "../skills/service.js";
+import { SkillInvocationError, formatSkillMessage, resolveSkillInvocation } from "../skills/service.js";
 import { registerApiRoute } from "@mastra/core/server";
 //#region src/routes/skills.ts
 const MAX_SESSION_ID_LENGTH = 512;
@@ -93,10 +93,11 @@ var SkillRoutes = class extends Route {
 			}, authorization.status ?? 403);
 			try {
 				const resolved = await resolveSkillInvocation(controller, body);
+				const message = formatSkillMessage(resolved.skillName, resolved.contents);
 				if (dispatch) {
 					const requestContext = c.get("requestContext");
 					resolved.session.sendMessage({
-						content: resolved.message,
+						content: message,
 						...requestContext ? { requestContext } : {}
 					}).catch((error) => {
 						console.error("Workspace skill dispatch failed after acceptance", error);
@@ -105,7 +106,7 @@ var SkillRoutes = class extends Route {
 				return c.json({
 					ok: true,
 					skill: resolved.skillName,
-					message: resolved.message
+					message
 				});
 			} catch (error) {
 				if (error instanceof SkillInvocationError) return c.json({

package/dist/routes/skills.js.map

@@ -1 +1 @@
-{"version":3,"file":"skills.js","names":[],"sources":["../../src/routes/skills.ts"],"sourcesContent":["import type { MastraCodeState } from '@mastra/code-sdk/schema';\nimport type { AgentController } from '@mastra/core/agent-controller';\nimport type { RequestContext } from '@mastra/core/request-context';\nimport type { ApiRoute } from '@mastra/core/server';\nimport { registerApiRoute } from '@mastra/core/server';\nimport type { Context } from 'hono';\n\nimport { listFactorySkills } from '../skills/catalog.js';\nimport { resolveSkillInvocation, SkillInvocationError } from '../skills/service.js';\nimport type { SourceControlStorageHandle } from '../storage/domains/source-control/base.js';\nimport type { RouteDependencies } from './route.js';\nimport { Route } from './route.js';\n\nconst MAX_SESSION_ID_LENGTH = 512;\nconst MAX_ARGUMENTS_LENGTH = 16_384;\nconst SKILL_NAME_RE = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;\nconst UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;\n\ninterface SkillInvocationBody {\n  sessionId: string;\n  name: string;\n  arguments?: string;\n}\n\ninterface SessionAuthorizationResult {\n  allowed: boolean;\n  status?: 400 | 401 | 403;\n  code?: 'invalid_request' | 'unauthorized' | 'session_forbidden';\n  message?: string;\n}\n\nexport interface SkillRoutesDeps extends RouteDependencies {\n  controllerId: string;\n  controller: Pick<AgentController<MastraCodeState>, 'getSession'>;\n  sourceControlStorage?: SourceControlStorageHandle;\n  ensureSourceControlReady?: () => Promise<void>;\n  authorizeSessionAddress?: (context: Context, address: { sessionId: string }) => Promise<SessionAuthorizationResult>;\n}\n\nfunction loose(context: unknown): Context {\n  return context as Context;\n}\n\nfunction parseBody(value: unknown): SkillInvocationBody | undefined {\n  if (!value || typeof value !== 'object') return undefined;\n  const input = value as Record<string, unknown>;\n  if (typeof input.sessionId !== 'string' || input.sessionId.length === 0) return undefined;\n  if (input.sessionId.length > MAX_SESSION_ID_LENGTH) return undefined;\n  if (typeof input.name !== 'string' || input.name.length > 64 || !SKILL_NAME_RE.test(input.name)) return undefined;\n  if (input.arguments !== undefined) {\n    if (typeof input.arguments !== 'string' || input.arguments.length > MAX_ARGUMENTS_LENGTH) return undefined;\n  }\n  return {\n    sessionId: input.sessionId,\n    name: input.name,\n    ...(input.arguments !== undefined ? { arguments: input.arguments } : {}),\n  };\n}\n\nconst SESSION_FORBIDDEN: SessionAuthorizationResult = {\n  allowed: false,\n  status: 403,\n  code: 'session_forbidden',\n  message: 'Session access denied.',\n};\n\nexport class SkillRoutes extends Route<SkillRoutesDeps> {\n  async #authorizeSessionAddress(\n    context: Context,\n    address: { sessionId: string },\n  ): Promise<SessionAuthorizationResult> {\n    const { auth, sourceControlStorage: storage, ensureSourceControlReady } = this.deps;\n    if (!auth.enabled()) return { allowed: true };\n\n    await auth.ensureUser(context);\n    const tenant = auth.tenant(context);\n    if (!tenant) {\n      return { allowed: false, status: 401, code: 'unauthorized', message: 'Authentication required.' };\n    }\n\n    // Personal sessions created without a session id are addressed by the\n    // authenticated WorkOS user id and need no app DB.\n    if (address.sessionId === tenant.userId) return { allowed: true };\n\n    // Factory sessions are addressed by their source-control session id.\n    if (!UUID_RE.test(address.sessionId)) {\n      return { allowed: false, status: 400, code: 'invalid_request', message: 'Invalid skill invocation request.' };\n    }\n    if (!tenant.orgId || !storage) return SESSION_FORBIDDEN;\n    if (ensureSourceControlReady) {\n      try {\n        await ensureSourceControlReady();\n      } catch {\n        return SESSION_FORBIDDEN;\n      }\n    }\n    const row = await storage.sessions.getBySessionId(address.sessionId);\n    if (!row || row.orgId !== tenant.orgId || !row.projectRepositoryId) return SESSION_FORBIDDEN;\n    // The session must be one the viewer can see under its repository.\n    const visible = await storage.sessions.list({\n      projectRepositoryId: row.projectRepositoryId,\n      viewerUserId: tenant.userId,\n    });\n    return visible.some(session => session.sessionId === address.sessionId) ? { allowed: true } : SESSION_FORBIDDEN;\n  }\n\n  routes(): ApiRoute[] {\n    const { controllerId, controller, authorizeSessionAddress: customAuthorize } = this.deps;\n    const authorize =\n      customAuthorize ??\n      ((context: Context, address: { sessionId: string }) => this.#authorizeSessionAddress(context, address));\n    const handleSkillRequest = async (context: unknown, dispatch: boolean) => {\n      const c = loose(context);\n      if (c.req.param('controllerId') !== controllerId) {\n        return c.json({ error: 'controller_not_found', message: 'Agent controller not found.' }, 404);\n      }\n\n      let rawBody: unknown;\n      try {\n        rawBody = await c.req.json();\n      } catch {\n        return c.json({ error: 'invalid_request', message: 'Invalid JSON body.' }, 400);\n      }\n      const body = parseBody(rawBody);\n      if (!body) {\n        return c.json({ error: 'invalid_request', message: 'Invalid skill invocation request.' }, 400);\n      }\n\n      const authorization = await authorize(c, { sessionId: body.sessionId });\n      if (!authorization.allowed) {\n        return c.json({ error: authorization.code, message: authorization.message }, authorization.status ?? 403);\n      }\n\n      try {\n        const resolved = await resolveSkillInvocation(controller, body);\n        if (dispatch) {\n          const requestContext = c.get('requestContext' as never) as RequestContext | undefined;\n          void resolved.session\n            .sendMessage({ content: resolved.message, ...(requestContext ? { requestContext } : {}) })\n            .catch((error: unknown) => {\n              console.error('Workspace skill dispatch failed after acceptance', error);\n            });\n        }\n        return c.json({ ok: true, skill: resolved.skillName, message: resolved.message });\n      } catch (error) {\n        if (error instanceof SkillInvocationError) {\n          return c.json({ error: error.code, message: error.message }, 404);\n        }\n        throw error;\n      }\n    };\n\n    const handleFactorySkillsList = async (context: unknown) => {\n      const c = loose(context);\n      const { auth } = this.deps;\n      if (auth.enabled()) {\n        await auth.ensureUser(c);\n        if (!auth.tenant(c)) {\n          return c.json({ error: 'unauthorized', message: 'Authentication required.' }, 401);\n        }\n      }\n      return c.json({ skills: await listFactorySkills() });\n    };\n\n    return [\n      registerApiRoute('/web/factory/skills', {\n        method: 'GET',\n        requiresAuth: false,\n        handler: context => handleFactorySkillsList(context),\n      }),\n      registerApiRoute('/web/agent-controller/:controllerId/skills/prepare', {\n        method: 'POST',\n        requiresAuth: false,\n        handler: context => handleSkillRequest(context, false),\n      }),\n      registerApiRoute('/web/agent-controller/:controllerId/skills/invoke', {\n        method: 'POST',\n        requiresAuth: false,\n        handler: context => handleSkillRequest(context, true),\n      }),\n    ];\n  }\n}\n"],"mappings":";;;;;AAaA,MAAM,wBAAwB;AAC9B,MAAM,uBAAuB;AAC7B,MAAM,gBAAgB;AACtB,MAAM,UAAU;AAuBhB,SAAS,MAAM,SAA2B;CACxC,OAAO;AACT;AAEA,SAAS,UAAU,OAAiD;CAClE,IAAI,CAAC,SAAS,OAAO,UAAU,UAAU,OAAO,KAAA;CAChD,MAAM,QAAQ;CACd,IAAI,OAAO,MAAM,cAAc,YAAY,MAAM,UAAU,WAAW,GAAG,OAAO,KAAA;CAChF,IAAI,MAAM,UAAU,SAAS,uBAAuB,OAAO,KAAA;CAC3D,IAAI,OAAO,MAAM,SAAS,YAAY,MAAM,KAAK,SAAS,MAAM,CAAC,cAAc,KAAK,MAAM,IAAI,GAAG,OAAO,KAAA;CACxG,IAAI,MAAM,cAAc,KAAA,GAClB;MAAA,OAAO,MAAM,cAAc,YAAY,MAAM,UAAU,SAAS,sBAAsB,OAAO,KAAA;CAAA;CAEnG,OAAO;EACL,WAAW,MAAM;EACjB,MAAM,MAAM;EACZ,GAAI,MAAM,cAAc,KAAA,IAAY,EAAE,WAAW,MAAM,UAAU,IAAI,CAAC;CACxE;AACF;AAEA,MAAM,oBAAgD;CACpD,SAAS;CACT,QAAQ;CACR,MAAM;CACN,SAAS;AACX;AAEA,IAAa,cAAb,cAAiC,MAAuB;CACtD,MAAM,yBACJ,SACA,SACqC;EACrC,MAAM,EAAE,MAAM,sBAAsB,SAAS,6BAA6B,KAAK;EAC/E,IAAI,CAAC,KAAK,QAAQ,GAAG,OAAO,EAAE,SAAS,KAAK;EAE5C,MAAM,KAAK,WAAW,OAAO;EAC7B,MAAM,SAAS,KAAK,OAAO,OAAO;EAClC,IAAI,CAAC,QACH,OAAO;GAAE,SAAS;GAAO,QAAQ;GAAK,MAAM;GAAgB,SAAS;EAA2B;EAKlG,IAAI,QAAQ,cAAc,OAAO,QAAQ,OAAO,EAAE,SAAS,KAAK;EAGhE,IAAI,CAAC,QAAQ,KAAK,QAAQ,SAAS,GACjC,OAAO;GAAE,SAAS;GAAO,QAAQ;GAAK,MAAM;GAAmB,SAAS;EAAoC;EAE9G,IAAI,CAAC,OAAO,SAAS,CAAC,SAAS,OAAO;EACtC,IAAI,0BACF,IAAI;GACF,MAAM,yBAAyB;EACjC,QAAQ;GACN,OAAO;EACT;EAEF,MAAM,MAAM,MAAM,QAAQ,SAAS,eAAe,QAAQ,SAAS;EACnE,IAAI,CAAC,OAAO,IAAI,UAAU,OAAO,SAAS,CAAC,IAAI,qBAAqB,OAAO;EAM3E,QAAO,MAJe,QAAQ,SAAS,KAAK;GAC1C,qBAAqB,IAAI;GACzB,cAAc,OAAO;EACvB,CAAC,EAAA,CACc,MAAK,YAAW,QAAQ,cAAc,QAAQ,SAAS,IAAI,EAAE,SAAS,KAAK,IAAI;CAChG;CAEA,SAAqB;EACnB,MAAM,EAAE,cAAc,YAAY,yBAAyB,oBAAoB,KAAK;EACpF,MAAM,YACJ,qBACE,SAAkB,YAAmC,KAAK,yBAAyB,SAAS,OAAO;EACvG,MAAM,qBAAqB,OAAO,SAAkB,aAAsB;GACxE,MAAM,IAAI,MAAM,OAAO;GACvB,IAAI,EAAE,IAAI,MAAM,cAAc,MAAM,cAClC,OAAO,EAAE,KAAK;IAAE,OAAO;IAAwB,SAAS;GAA8B,GAAG,GAAG;GAG9F,IAAI;GACJ,IAAI;IACF,UAAU,MAAM,EAAE,IAAI,KAAK;GAC7B,QAAQ;IACN,OAAO,EAAE,KAAK;KAAE,OAAO;KAAmB,SAAS;IAAqB,GAAG,GAAG;GAChF;GACA,MAAM,OAAO,UAAU,OAAO;GAC9B,IAAI,CAAC,MACH,OAAO,EAAE,KAAK;IAAE,OAAO;IAAmB,SAAS;GAAoC,GAAG,GAAG;GAG/F,MAAM,gBAAgB,MAAM,UAAU,GAAG,EAAE,WAAW,KAAK,UAAU,CAAC;GACtE,IAAI,CAAC,cAAc,SACjB,OAAO,EAAE,KAAK;IAAE,OAAO,cAAc;IAAM,SAAS,cAAc;GAAQ,GAAG,cAAc,UAAU,GAAG;GAG1G,IAAI;IACF,MAAM,WAAW,MAAM,uBAAuB,YAAY,IAAI;IAC9D,IAAI,UAAU;KACZ,MAAM,iBAAiB,EAAE,IAAI,gBAAyB;KACtD,SAAc,QACX,YAAY;MAAE,SAAS,SAAS;MAAS,GAAI,iBAAiB,EAAE,eAAe,IAAI,CAAC;KAAG,CAAC,CAAC,CACzF,OAAO,UAAmB;MACzB,QAAQ,MAAM,oDAAoD,KAAK;KACzE,CAAC;IACL;IACA,OAAO,EAAE,KAAK;KAAE,IAAI;KAAM,OAAO,SAAS;KAAW,SAAS,SAAS;IAAQ,CAAC;GAClF,SAAS,OAAO;IACd,IAAI,iBAAiB,sBACnB,OAAO,EAAE,KAAK;KAAE,OAAO,MAAM;KAAM,SAAS,MAAM;IAAQ,GAAG,GAAG;IAElE,MAAM;GACR;EACF;EAEA,MAAM,0BAA0B,OAAO,YAAqB;GAC1D,MAAM,IAAI,MAAM,OAAO;GACvB,MAAM,EAAE,SAAS,KAAK;GACtB,IAAI,KAAK,QAAQ,GAAG;IAClB,MAAM,KAAK,WAAW,CAAC;IACvB,IAAI,CAAC,KAAK,OAAO,CAAC,GAChB,OAAO,EAAE,KAAK;KAAE,OAAO;KAAgB,SAAS;IAA2B,GAAG,GAAG;GAErF;GACA,OAAO,EAAE,KAAK,EAAE,QAAQ,MAAM,kBAAkB,EAAE,CAAC;EACrD;EAEA,OAAO;GACL,iBAAiB,uBAAuB;IACtC,QAAQ;IACR,cAAc;IACd,UAAS,YAAW,wBAAwB,OAAO;GACrD,CAAC;GACD,iBAAiB,sDAAsD;IACrE,QAAQ;IACR,cAAc;IACd,UAAS,YAAW,mBAAmB,SAAS,KAAK;GACvD,CAAC;GACD,iBAAiB,qDAAqD;IACpE,QAAQ;IACR,cAAc;IACd,UAAS,YAAW,mBAAmB,SAAS,IAAI;GACtD,CAAC;EACH;CACF;AACF"}
+{"version":3,"file":"skills.js","names":[],"sources":["../../src/routes/skills.ts"],"sourcesContent":["import type { MastraCodeState } from '@mastra/code-sdk/schema';\nimport type { AgentController } from '@mastra/core/agent-controller';\nimport type { RequestContext } from '@mastra/core/request-context';\nimport type { ApiRoute } from '@mastra/core/server';\nimport { registerApiRoute } from '@mastra/core/server';\nimport type { Context } from 'hono';\n\nimport { listFactorySkills } from '../skills/catalog.js';\nimport { formatSkillMessage, resolveSkillInvocation, SkillInvocationError } from '../skills/service.js';\nimport type { SourceControlStorageHandle } from '../storage/domains/source-control/base.js';\nimport type { RouteDependencies } from './route.js';\nimport { Route } from './route.js';\n\nconst MAX_SESSION_ID_LENGTH = 512;\nconst MAX_ARGUMENTS_LENGTH = 16_384;\nconst SKILL_NAME_RE = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;\nconst UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;\n\ninterface SkillInvocationBody {\n  sessionId: string;\n  name: string;\n  arguments?: string;\n}\n\ninterface SessionAuthorizationResult {\n  allowed: boolean;\n  status?: 400 | 401 | 403;\n  code?: 'invalid_request' | 'unauthorized' | 'session_forbidden';\n  message?: string;\n}\n\nexport interface SkillRoutesDeps extends RouteDependencies {\n  controllerId: string;\n  controller: Pick<AgentController<MastraCodeState>, 'getSession'>;\n  sourceControlStorage?: SourceControlStorageHandle;\n  ensureSourceControlReady?: () => Promise<void>;\n  authorizeSessionAddress?: (context: Context, address: { sessionId: string }) => Promise<SessionAuthorizationResult>;\n}\n\nfunction loose(context: unknown): Context {\n  return context as Context;\n}\n\nfunction parseBody(value: unknown): SkillInvocationBody | undefined {\n  if (!value || typeof value !== 'object') return undefined;\n  const input = value as Record<string, unknown>;\n  if (typeof input.sessionId !== 'string' || input.sessionId.length === 0) return undefined;\n  if (input.sessionId.length > MAX_SESSION_ID_LENGTH) return undefined;\n  if (typeof input.name !== 'string' || input.name.length > 64 || !SKILL_NAME_RE.test(input.name)) return undefined;\n  if (input.arguments !== undefined) {\n    if (typeof input.arguments !== 'string' || input.arguments.length > MAX_ARGUMENTS_LENGTH) return undefined;\n  }\n  return {\n    sessionId: input.sessionId,\n    name: input.name,\n    ...(input.arguments !== undefined ? { arguments: input.arguments } : {}),\n  };\n}\n\nconst SESSION_FORBIDDEN: SessionAuthorizationResult = {\n  allowed: false,\n  status: 403,\n  code: 'session_forbidden',\n  message: 'Session access denied.',\n};\n\nexport class SkillRoutes extends Route<SkillRoutesDeps> {\n  async #authorizeSessionAddress(\n    context: Context,\n    address: { sessionId: string },\n  ): Promise<SessionAuthorizationResult> {\n    const { auth, sourceControlStorage: storage, ensureSourceControlReady } = this.deps;\n    if (!auth.enabled()) return { allowed: true };\n\n    await auth.ensureUser(context);\n    const tenant = auth.tenant(context);\n    if (!tenant) {\n      return { allowed: false, status: 401, code: 'unauthorized', message: 'Authentication required.' };\n    }\n\n    // Personal sessions created without a session id are addressed by the\n    // authenticated WorkOS user id and need no app DB.\n    if (address.sessionId === tenant.userId) return { allowed: true };\n\n    // Factory sessions are addressed by their source-control session id.\n    if (!UUID_RE.test(address.sessionId)) {\n      return { allowed: false, status: 400, code: 'invalid_request', message: 'Invalid skill invocation request.' };\n    }\n    if (!tenant.orgId || !storage) return SESSION_FORBIDDEN;\n    if (ensureSourceControlReady) {\n      try {\n        await ensureSourceControlReady();\n      } catch {\n        return SESSION_FORBIDDEN;\n      }\n    }\n    const row = await storage.sessions.getBySessionId(address.sessionId);\n    if (!row || row.orgId !== tenant.orgId || !row.projectRepositoryId) return SESSION_FORBIDDEN;\n    // The session must be one the viewer can see under its repository.\n    const visible = await storage.sessions.list({\n      projectRepositoryId: row.projectRepositoryId,\n      viewerUserId: tenant.userId,\n    });\n    return visible.some(session => session.sessionId === address.sessionId) ? { allowed: true } : SESSION_FORBIDDEN;\n  }\n\n  routes(): ApiRoute[] {\n    const { controllerId, controller, authorizeSessionAddress: customAuthorize } = this.deps;\n    const authorize =\n      customAuthorize ??\n      ((context: Context, address: { sessionId: string }) => this.#authorizeSessionAddress(context, address));\n    const handleSkillRequest = async (context: unknown, dispatch: boolean) => {\n      const c = loose(context);\n      if (c.req.param('controllerId') !== controllerId) {\n        return c.json({ error: 'controller_not_found', message: 'Agent controller not found.' }, 404);\n      }\n\n      let rawBody: unknown;\n      try {\n        rawBody = await c.req.json();\n      } catch {\n        return c.json({ error: 'invalid_request', message: 'Invalid JSON body.' }, 400);\n      }\n      const body = parseBody(rawBody);\n      if (!body) {\n        return c.json({ error: 'invalid_request', message: 'Invalid skill invocation request.' }, 400);\n      }\n\n      const authorization = await authorize(c, { sessionId: body.sessionId });\n      if (!authorization.allowed) {\n        return c.json({ error: authorization.code, message: authorization.message }, authorization.status ?? 403);\n      }\n\n      try {\n        const resolved = await resolveSkillInvocation(controller, body);\n        const message = formatSkillMessage(resolved.skillName, resolved.contents);\n        if (dispatch) {\n          const requestContext = c.get('requestContext' as never) as RequestContext | undefined;\n          void resolved.session\n            .sendMessage({ content: message, ...(requestContext ? { requestContext } : {}) })\n            .catch((error: unknown) => {\n              console.error('Workspace skill dispatch failed after acceptance', error);\n            });\n        }\n        return c.json({ ok: true, skill: resolved.skillName, message });\n      } catch (error) {\n        if (error instanceof SkillInvocationError) {\n          return c.json({ error: error.code, message: error.message }, 404);\n        }\n        throw error;\n      }\n    };\n\n    const handleFactorySkillsList = async (context: unknown) => {\n      const c = loose(context);\n      const { auth } = this.deps;\n      if (auth.enabled()) {\n        await auth.ensureUser(c);\n        if (!auth.tenant(c)) {\n          return c.json({ error: 'unauthorized', message: 'Authentication required.' }, 401);\n        }\n      }\n      return c.json({ skills: await listFactorySkills() });\n    };\n\n    return [\n      registerApiRoute('/web/factory/skills', {\n        method: 'GET',\n        requiresAuth: false,\n        handler: context => handleFactorySkillsList(context),\n      }),\n      registerApiRoute('/web/agent-controller/:controllerId/skills/prepare', {\n        method: 'POST',\n        requiresAuth: false,\n        handler: context => handleSkillRequest(context, false),\n      }),\n      registerApiRoute('/web/agent-controller/:controllerId/skills/invoke', {\n        method: 'POST',\n        requiresAuth: false,\n        handler: context => handleSkillRequest(context, true),\n      }),\n    ];\n  }\n}\n"],"mappings":";;;;;AAaA,MAAM,wBAAwB;AAC9B,MAAM,uBAAuB;AAC7B,MAAM,gBAAgB;AACtB,MAAM,UAAU;AAuBhB,SAAS,MAAM,SAA2B;CACxC,OAAO;AACT;AAEA,SAAS,UAAU,OAAiD;CAClE,IAAI,CAAC,SAAS,OAAO,UAAU,UAAU,OAAO,KAAA;CAChD,MAAM,QAAQ;CACd,IAAI,OAAO,MAAM,cAAc,YAAY,MAAM,UAAU,WAAW,GAAG,OAAO,KAAA;CAChF,IAAI,MAAM,UAAU,SAAS,uBAAuB,OAAO,KAAA;CAC3D,IAAI,OAAO,MAAM,SAAS,YAAY,MAAM,KAAK,SAAS,MAAM,CAAC,cAAc,KAAK,MAAM,IAAI,GAAG,OAAO,KAAA;CACxG,IAAI,MAAM,cAAc,KAAA,GAClB;MAAA,OAAO,MAAM,cAAc,YAAY,MAAM,UAAU,SAAS,sBAAsB,OAAO,KAAA;CAAA;CAEnG,OAAO;EACL,WAAW,MAAM;EACjB,MAAM,MAAM;EACZ,GAAI,MAAM,cAAc,KAAA,IAAY,EAAE,WAAW,MAAM,UAAU,IAAI,CAAC;CACxE;AACF;AAEA,MAAM,oBAAgD;CACpD,SAAS;CACT,QAAQ;CACR,MAAM;CACN,SAAS;AACX;AAEA,IAAa,cAAb,cAAiC,MAAuB;CACtD,MAAM,yBACJ,SACA,SACqC;EACrC,MAAM,EAAE,MAAM,sBAAsB,SAAS,6BAA6B,KAAK;EAC/E,IAAI,CAAC,KAAK,QAAQ,GAAG,OAAO,EAAE,SAAS,KAAK;EAE5C,MAAM,KAAK,WAAW,OAAO;EAC7B,MAAM,SAAS,KAAK,OAAO,OAAO;EAClC,IAAI,CAAC,QACH,OAAO;GAAE,SAAS;GAAO,QAAQ;GAAK,MAAM;GAAgB,SAAS;EAA2B;EAKlG,IAAI,QAAQ,cAAc,OAAO,QAAQ,OAAO,EAAE,SAAS,KAAK;EAGhE,IAAI,CAAC,QAAQ,KAAK,QAAQ,SAAS,GACjC,OAAO;GAAE,SAAS;GAAO,QAAQ;GAAK,MAAM;GAAmB,SAAS;EAAoC;EAE9G,IAAI,CAAC,OAAO,SAAS,CAAC,SAAS,OAAO;EACtC,IAAI,0BACF,IAAI;GACF,MAAM,yBAAyB;EACjC,QAAQ;GACN,OAAO;EACT;EAEF,MAAM,MAAM,MAAM,QAAQ,SAAS,eAAe,QAAQ,SAAS;EACnE,IAAI,CAAC,OAAO,IAAI,UAAU,OAAO,SAAS,CAAC,IAAI,qBAAqB,OAAO;EAM3E,QAAO,MAJe,QAAQ,SAAS,KAAK;GAC1C,qBAAqB,IAAI;GACzB,cAAc,OAAO;EACvB,CAAC,EAAA,CACc,MAAK,YAAW,QAAQ,cAAc,QAAQ,SAAS,IAAI,EAAE,SAAS,KAAK,IAAI;CAChG;CAEA,SAAqB;EACnB,MAAM,EAAE,cAAc,YAAY,yBAAyB,oBAAoB,KAAK;EACpF,MAAM,YACJ,qBACE,SAAkB,YAAmC,KAAK,yBAAyB,SAAS,OAAO;EACvG,MAAM,qBAAqB,OAAO,SAAkB,aAAsB;GACxE,MAAM,IAAI,MAAM,OAAO;GACvB,IAAI,EAAE,IAAI,MAAM,cAAc,MAAM,cAClC,OAAO,EAAE,KAAK;IAAE,OAAO;IAAwB,SAAS;GAA8B,GAAG,GAAG;GAG9F,IAAI;GACJ,IAAI;IACF,UAAU,MAAM,EAAE,IAAI,KAAK;GAC7B,QAAQ;IACN,OAAO,EAAE,KAAK;KAAE,OAAO;KAAmB,SAAS;IAAqB,GAAG,GAAG;GAChF;GACA,MAAM,OAAO,UAAU,OAAO;GAC9B,IAAI,CAAC,MACH,OAAO,EAAE,KAAK;IAAE,OAAO;IAAmB,SAAS;GAAoC,GAAG,GAAG;GAG/F,MAAM,gBAAgB,MAAM,UAAU,GAAG,EAAE,WAAW,KAAK,UAAU,CAAC;GACtE,IAAI,CAAC,cAAc,SACjB,OAAO,EAAE,KAAK;IAAE,OAAO,cAAc;IAAM,SAAS,cAAc;GAAQ,GAAG,cAAc,UAAU,GAAG;GAG1G,IAAI;IACF,MAAM,WAAW,MAAM,uBAAuB,YAAY,IAAI;IAC9D,MAAM,UAAU,mBAAmB,SAAS,WAAW,SAAS,QAAQ;IACxE,IAAI,UAAU;KACZ,MAAM,iBAAiB,EAAE,IAAI,gBAAyB;KACtD,SAAc,QACX,YAAY;MAAE,SAAS;MAAS,GAAI,iBAAiB,EAAE,eAAe,IAAI,CAAC;KAAG,CAAC,CAAC,CAChF,OAAO,UAAmB;MACzB,QAAQ,MAAM,oDAAoD,KAAK;KACzE,CAAC;IACL;IACA,OAAO,EAAE,KAAK;KAAE,IAAI;KAAM,OAAO,SAAS;KAAW;IAAQ,CAAC;GAChE,SAAS,OAAO;IACd,IAAI,iBAAiB,sBACnB,OAAO,EAAE,KAAK;KAAE,OAAO,MAAM;KAAM,SAAS,MAAM;IAAQ,GAAG,GAAG;IAElE,MAAM;GACR;EACF;EAEA,MAAM,0BAA0B,OAAO,YAAqB;GAC1D,MAAM,IAAI,MAAM,OAAO;GACvB,MAAM,EAAE,SAAS,KAAK;GACtB,IAAI,KAAK,QAAQ,GAAG;IAClB,MAAM,KAAK,WAAW,CAAC;IACvB,IAAI,CAAC,KAAK,OAAO,CAAC,GAChB,OAAO,EAAE,KAAK;KAAE,OAAO;KAAgB,SAAS;IAA2B,GAAG,GAAG;GAErF;GACA,OAAO,EAAE,KAAK,EAAE,QAAQ,MAAM,kBAAkB,EAAE,CAAC;EACrD;EAEA,OAAO;GACL,iBAAiB,uBAAuB;IACtC,QAAQ;IACR,cAAc;IACd,UAAS,YAAW,wBAAwB,OAAO;GACrD,CAAC;GACD,iBAAiB,sDAAsD;IACrE,QAAQ;IACR,cAAc;IACd,UAAS,YAAW,mBAAmB,SAAS,KAAK;GACvD,CAAC;GACD,iBAAiB,qDAAqD;IACpE,QAAQ;IACR,cAAc;IACd,UAAS,YAAW,mBAAmB,SAAS,IAAI;GACtD,CAAC;EACH;CACF;AACF"}

package/dist/routes/source-control-sessions.d.ts

@@ -1,6 +1,7 @@
 import type { MountedMastraCode } from '@mastra/code-sdk';
 import type { ApiRoute, IUserProvider } from '@mastra/core/server';
 import type { SessionRetirementCoordinator } from '../sandbox/session-retirement.js';
+import type { AuditRecorder } from '../storage/domains/audit/domain.js';
 import type { FilesystemStorage } from '../storage/domains/filesystem/base.js';
 import type { MemorySettingsStorage } from '../storage/domains/memory-settings/base.js';
 import type { FactoryProjectsStorage } from '../storage/domains/projects/base.js';
@@ -15,6 +16,7 @@ export interface SourceControlSessionRoutesOptions {
     projects: Pick<FactoryProjectsStorage, 'get'>;
     users?: SessionOwnerUserProvider;
     controller?: MountedMastraCode['controller'];
+    audit?: AuditRecorder;
     memorySettings: Pick<MemorySettingsStorage, 'get'>;
     sessionRetirement?: SessionRetirementCoordinator;
     /** Whether the host sandbox can recreate a session's sandbox (false for local). */

package/dist/routes/source-control-sessions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"source-control-sessions.d.ts","sourceRoot":"","sources":["../../src/routes/source-control-sessions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAG1D,OAAO,KAAK,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAOnE,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,kCAAkC,CAAC;AAUrF,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAC;AAC/E,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,4CAA4C,CAAC;AACxF,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAClF,OAAO,KAAK,EAGV,0BAA0B,EAC3B,MAAM,2CAA2C,CAAC;AACnD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uCAAuC,CAAC;AAC9E,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAS5C,eAAO,MAAM,0BAA0B,kBAAkB,CAAC;AAc1D,KAAK,wBAAwB,GAAG,IAAI,CAAC,aAAa,EAAE,SAAS,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC,CAAC;AAE1G,MAAM,WAAW,iCAAiC;IAChD,IAAI,EAAE,SAAS,CAAC;IAChB,cAAc,EAAE,SAAS,0BAA0B,EAAE,CAAC;IACtD,QAAQ,EAAE,IAAI,CAAC,sBAAsB,EAAE,KAAK,CAAC,CAAC;IAC9C,KAAK,CAAC,EAAE,wBAAwB,CAAC;IACjC,UAAU,CAAC,EAAE,iBAAiB,CAAC,YAAY,CAAC,CAAC;IAC7C,cAAc,EAAE,IAAI,CAAC,qBAAqB,EAAE,KAAK,CAAC,CAAC;IACnD,iBAAiB,CAAC,EAAE,4BAA4B,CAAC;IACjD,mFAAmF;IACnF,wBAAwB,CAAC,EAAE,OAAO,CAAC;IACnC,sGAAsG;IACtG,UAAU,CAAC,EAAE,IAAI,CAAC,iBAAiB,EAAE,qBAAqB,CAAC,CAAC;IAC5D,8EAA8E;IAC9E,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,SAAS,CAAC,EAAE,IAAI,CAAC,gBAAgB,EAAE,wBAAwB,GAAG,yBAAyB,CAAC,CAAC;IACzF,kGAAkG;IAClG,UAAU,CAAC,EAAE,CAAC,KAAK,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CACpF;AA8XD,wBAAgB,+BAA+B,CAAC,OAAO,EAAE,iCAAiC,GAAG,QAAQ,EAAE,CA8TtG"}
+{"version":3,"file":"source-control-sessions.d.ts","sourceRoot":"","sources":["../../src/routes/source-control-sessions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAG1D,OAAO,KAAK,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAQnE,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,kCAAkC,CAAC;AAarF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oCAAoC,CAAC;AACxE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAC;AAC/E,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,4CAA4C,CAAC;AACxF,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAClF,OAAO,KAAK,EAGV,0BAA0B,EAC3B,MAAM,2CAA2C,CAAC;AACnD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uCAAuC,CAAC;AAC9E,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAS5C,eAAO,MAAM,0BAA0B,kBAAkB,CAAC;AAc1D,KAAK,wBAAwB,GAAG,IAAI,CAAC,aAAa,EAAE,SAAS,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC,CAAC;AAE1G,MAAM,WAAW,iCAAiC;IAChD,IAAI,EAAE,SAAS,CAAC;IAChB,cAAc,EAAE,SAAS,0BAA0B,EAAE,CAAC;IACtD,QAAQ,EAAE,IAAI,CAAC,sBAAsB,EAAE,KAAK,CAAC,CAAC;IAC9C,KAAK,CAAC,EAAE,wBAAwB,CAAC;IACjC,UAAU,CAAC,EAAE,iBAAiB,CAAC,YAAY,CAAC,CAAC;IAC7C,KAAK,CAAC,EAAE,aAAa,CAAC;IACtB,cAAc,EAAE,IAAI,CAAC,qBAAqB,EAAE,KAAK,CAAC,CAAC;IACnD,iBAAiB,CAAC,EAAE,4BAA4B,CAAC;IACjD,mFAAmF;IACnF,wBAAwB,CAAC,EAAE,OAAO,CAAC;IACnC,sGAAsG;IACtG,UAAU,CAAC,EAAE,IAAI,CAAC,iBAAiB,EAAE,qBAAqB,CAAC,CAAC;IAC5D,8EAA8E;IAC9E,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,SAAS,CAAC,EAAE,IAAI,CAAC,gBAAgB,EAAE,wBAAwB,GAAG,yBAAyB,CAAC,CAAC;IACzF,kGAAkG;IAClG,UAAU,CAAC,EAAE,CAAC,KAAK,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CACpF;AA2cD,wBAAgB,+BAA+B,CAAC,OAAO,EAAE,iCAAiC,GAAG,QAAQ,EAAE,CA6YtG"}