@mastra/factory 0.24.0 → 0.25.0-alpha.1

package/dist/routes/source-control-sessions.js

@@ -1,14 +1,16 @@
 import { isValidGitRef } from "../sandbox/git-ref.js";
-import { canReadSessionResource, canViewSourceControlSession } from "./session-access.js";
+import { canReadSessionResource, canSwitchSessionModel, canViewSourceControlSession } from "./session-access.js";
 import { waitForPendingFilesystemCapture } from "../session/filesystem-capture.js";
-import { listFactorySessionThreads, sessionMemoryResourceId, sessionThreadsToMove, userSessionResourceFor } from "../session/session-threads.js";
+import { isRunBound, isWorkerSession, listFactorySessionThreads, sessionMemoryResourceId, sessionThreadsToMove, userSessionResourceFor } from "../session/session-threads.js";
 import { normalizeSessionTitle } from "../session/session-title.js";
 import { reclaimDeletedSessionSandbox } from "../integrations/github/sandbox-release.js";
 import { seedSessionOrg } from "../session/org-seed.js";
+import { SESSION_OWNER_SIGNAL_TAG } from "../session-owner-signal.js";
 import { RequestContext } from "@mastra/core/request-context";
 import { registerApiRoute } from "@mastra/core/server";
 import { UniqueViolationError } from "@mastra/core/storage";
 import { resolveModel } from "@mastra/code-sdk/agents/model";
+import { createSignal } from "@mastra/core/signals";
 //#region src/routes/source-control-sessions.ts
 function loose(c) {
 	return c;
@@ -36,12 +38,45 @@ async function sessionManagePermission(c, auth, tenant, session) {
 function canRecreateSandbox(options) {
 	return Boolean(options.sessionRetirement) && options.sandboxRecreateSupported === true;
 }
-function withCapabilities(session, recreateSandbox) {
+function withCapabilities(session, capabilities) {
 	return {
 		...session,
-		capabilities: { recreateSandbox }
+		capabilities
 	};
 }
+async function ownershipRefusal(session, options) {
+	if (!session.factoryProjectId) return {
+		status: 409,
+		error: "This session isn't linked to a Factory, so it can't change owner."
+	};
+	if (!options.workItems) return {
+		status: 503,
+		error: "Session ownership can't change yet: Factory storage is still starting up. Try again in a moment."
+	};
+	if (session.branch.startsWith(SLACK_SESSION_BRANCH_PREFIX) || await isWorkerSession(session, options.workItems)) return {
+		status: 409,
+		error: "Only user sessions can change owner"
+	};
+	return null;
+}
+/** Marks the takeover in every thread of the session: the transcript draws it as a divider and the model reads it as context. */
+async function markOwnerChange(options, session, newOwner) {
+	const { controller } = options;
+	const memory = await controller?.getMastra()?.getStorage()?.getStore("memory");
+	if (!controller || !memory) return;
+	const threads = await listFactorySessionThreads(controller, session, options.workItems);
+	if (threads.length === 0) return;
+	const contents = `${newOwner.name ?? "A teammate"} took ownership`;
+	await memory.saveMessages({ messages: threads.map((thread) => createSignal({
+		type: "reactive",
+		tagName: SESSION_OWNER_SIGNAL_TAG,
+		contents,
+		author: newOwner
+	}).toDBMessage({
+		threadId: thread.id,
+		resourceId: thread.resourceId
+	})) });
+}
 /** Abort the session's active run and wait (bounded) for it to stop. Returns whether a run was aborted. */
 async function abortActiveRun(controller, sessionId, settleTimeoutMs) {
 	if (!controller) return false;
@@ -51,10 +86,10 @@ async function abortActiveRun(controller, sessionId, settleTimeoutMs) {
 		live.abort();
 		const deadline = Date.now() + settleTimeoutMs;
 		while (live.stream.isActive() && Date.now() < deadline) await new Promise((resolve) => setTimeout(resolve, ABORT_SETTLE_POLL_MS));
-		if (live.stream.isActive()) console.warn("[Factory Sessions] Aborted run did not settle before sandbox recreate", { sessionId });
+		if (live.stream.isActive()) console.warn("[Factory Sessions] Aborted run did not settle in time", { sessionId });
 		return true;
 	} catch (error) {
-		console.warn("[Factory Sessions] Failed to abort the active run before sandbox recreate", {
+		console.warn("[Factory Sessions] Failed to abort the active run", {
 			sessionId,
 			error
 		});
@@ -112,6 +147,16 @@ async function resolveSession(sourceControls, sessionId) {
 	if (matches.length > 1) throw new Error("Factory session exists in multiple source-control providers.");
 	return matches[0] ?? null;
 }
+async function resolveReadableSession(options, sessionId, viewer) {
+	const match = await resolveSession(options.sourceControls, sessionId);
+	if (!match || !canViewSourceControlSession(match.session, viewer)) return null;
+	const resourceId = await sessionMemoryResourceId(options.controller, match.session, options.workItems);
+	if (!canReadSessionResource(match.session, resourceId, viewer)) return null;
+	return {
+		...match,
+		resourceId
+	};
+}
 /**
 * Start the live conversation for a user session on its own thread (thread id === session id), under the resource
 * its visibility gives it. Agent-controller
@@ -153,6 +198,10 @@ function createSessionNaming() {
 		return started;
 	};
 }
+const OWNER_CONFLICT_MESSAGES = {
+	stale_owner: "Someone else owns this session now",
+	branch_owned: "You already have a session on this branch"
+};
 function titleModel(modelId) {
 	return ({ requestContext }) => resolveModel(modelId, {
 		remapForCodexOAuth: true,
@@ -270,7 +319,11 @@ function projectSessionRoutes(path, options, resolveOwnerProfiles) {
 				if (existing) {
 					if (existing.projectRepositoryId !== project.project.id || existing.orgId !== orgId || existing.userId !== userId || existing.branch !== branch) return c.json({ error: "Session ID conflict" }, 409);
 					await startUserSessionConversation(options.controller, existing);
-					return c.json({ session: withCapabilities(existing, canRecreateSandbox(options)) });
+					return c.json({ session: withCapabilities(existing, {
+						recreateSandbox: canRecreateSandbox(options),
+						takeOwnership: false,
+						switchModel: true
+					}) });
 				}
 			}
 			const session = await project.sourceControl.sessions.create({
@@ -291,7 +344,11 @@ function projectSessionRoutes(path, options, resolveOwnerProfiles) {
 			});
 			if (requestedSessionId && (session.sessionId !== sessionId || session.projectRepositoryId !== project.project.id || session.orgId !== orgId || session.userId !== userId || session.branch !== branch)) return c.json({ error: "Session ID conflict" }, 409);
 			await startUserSessionConversation(options.controller, session);
-			return c.json({ session: withCapabilities(session, canRecreateSandbox(options)) });
+			return c.json({ session: withCapabilities(session, {
+				recreateSandbox: canRecreateSandbox(options),
+				takeOwnership: false,
+				switchModel: true
+			}) });
 		}
 	})];
 }
@@ -329,14 +386,18 @@ function buildSourceControlSessionRoutes(options) {
 			handler: async (c) => {
 				const resolved = await resolveOrgTenant(loose(c), options.auth);
 				if ("response" in resolved) return resolved.response;
-				const session = (await resolveSession(options.sourceControls, c.req.param("sessionId")))?.session;
-				if (!session || !canViewSourceControlSession(session, resolved.tenant)) return c.json({ error: "Session not found" }, 404);
-				const resourceId = await sessionMemoryResourceId(options.controller, session, options.workItems);
-				if (!canReadSessionResource(session, resourceId, resolved.tenant)) return c.json({ error: "Session not found" }, 404);
+				const readable = await resolveReadableSession(options, c.req.param("sessionId"), resolved.tenant);
+				if (!readable) return c.json({ error: "Session not found" }, 404);
+				const { session, resourceId } = readable;
 				const owners = await resolveOwnerProfiles([session.userId]);
 				const recreateSandbox = canRecreateSandbox(options) && await sessionManagePermission(loose(c), options.auth, resolved.tenant, session) === "allowed";
+				const takeOwnership = session.userId !== resolved.tenant.userId && await ownershipRefusal(session, options) === null;
 				return c.json({ session: {
-					...withCapabilities(withOwnerProfile(session, owners), recreateSandbox),
+					...withCapabilities(withOwnerProfile(session, owners), {
+						recreateSandbox,
+						takeOwnership,
+						switchModel: canSwitchSessionModel(session, resolved.tenant)
+					}),
 					resourceId
 				} });
 			}
@@ -414,6 +475,82 @@ function buildSourceControlSessionRoutes(options) {
 				}
 			}
 		}),
+		registerApiRoute("/web/user-sessions/:sessionId/owner", {
+			method: "POST",
+			requiresAuth: false,
+			handler: async (c) => {
+				const resolved = await resolveOrgTenant(loose(c), options.auth);
+				if ("response" in resolved) return resolved.response;
+				const { orgId, userId } = resolved.tenant;
+				const sessionId = c.req.param("sessionId");
+				const readable = await resolveReadableSession(options, sessionId, resolved.tenant);
+				if (!readable) return c.json({ error: "Session not found" }, 404);
+				const { sourceControl, session } = readable;
+				let body;
+				try {
+					body = await c.req.json();
+				} catch {
+					return c.json({ error: "Invalid JSON body" }, 400);
+				}
+				if (!isJsonObject(body) || typeof body.expectedOwnerId !== "string" || !body.expectedOwnerId.trim()) return c.json({ error: "Invalid expectedOwnerId" }, 400);
+				const expectedOwnerId = body.expectedOwnerId;
+				if (session.userId === userId) return c.json({ session });
+				const refusal = await ownershipRefusal(session, options);
+				if (refusal) return c.json({ error: refusal.error }, refusal.status);
+				const transferred = await sourceControl.sessions.transferOwner({
+					sessionId,
+					expectedUserId: expectedOwnerId,
+					toUserId: userId
+				});
+				if (transferred.status === "conflict") {
+					const current = transferred.session;
+					if (!current || !canViewSourceControlSession(current, resolved.tenant)) return c.json({ error: "Session not found" }, 404);
+					if (current.userId === userId) return c.json({ session: current });
+					return c.json({
+						error: OWNER_CONFLICT_MESSAGES[transferred.reason],
+						reason: transferred.reason,
+						currentOwnerId: current.userId
+					}, 409);
+				}
+				const controller = options.controller;
+				await abortActiveRun(controller, sessionId, options.abortSettleTimeoutMs ?? ABORT_SETTLE_TIMEOUT_MS);
+				if (controller && await controller.getSession(sessionId)) await controller.deleteSession({ sessionId }).catch((error) => {
+					console.error("[Factory Sessions] Failed to recycle transferred live session", {
+						sessionId,
+						error
+					});
+				});
+				const newOwner = (await resolveOwnerProfiles([userId])).get(userId) ?? { id: userId };
+				await markOwnerChange(options, transferred.session, newOwner).catch((error) => {
+					console.error("[Factory Sessions] Failed to mark the ownership change in the transcript", {
+						sessionId,
+						error
+					});
+				});
+				await options.audit?.record({
+					orgId,
+					actorId: userId,
+					action: "factory.session.owner_transferred",
+					targets: [{
+						type: "session",
+						id: session.id,
+						name: session.title ?? session.branch
+					}],
+					metadata: {
+						fromOwnerId: expectedOwnerId,
+						toOwnerId: userId
+					},
+					factoryProjectId: session.factoryProjectId ?? void 0,
+					projectRepositoryId: session.projectRepositoryId ?? void 0
+				}).catch((error) => {
+					console.error("[Factory Sessions] Failed to record ownership transfer audit event", {
+						sessionId,
+						error
+					});
+				});
+				return c.json({ session: transferred.session });
+			}
+		}),
 		registerApiRoute("/web/user-sessions/:sessionId", {
 			method: "DELETE",
 			requiresAuth: false,
@@ -474,30 +611,30 @@ function buildSourceControlSessionRoutes(options) {
 				const row = match?.session;
 				if (!match || !row || row.orgId !== resolved.tenant.orgId || row.userId !== resolved.tenant.userId) return c.json({ error: "Session not found" }, 404);
 				if (!options.workItems) return c.json({ error: "Session visibility can't be changed yet: Factory storage is still starting up. Try again in a moment." }, 503);
-				if (row.branch.startsWith(SLACK_SESSION_BRANCH_PREFIX) || row.factoryProjectId !== null && await options.workItems.hasRunBindingForSession({
-					orgId: row.orgId,
-					factoryProjectId: row.factoryProjectId,
-					sessionId
-				})) return c.json({ error: "Only user sessions can change visibility" }, 409);
+				if (row.branch.startsWith(SLACK_SESSION_BRANCH_PREFIX) || await isRunBound(row, options.workItems)) return c.json({ error: "Only user sessions can change visibility" }, 409);
 				if (visibility === "org" && !row.factoryProjectId) return c.json({ error: "This session isn't linked to a Factory, so it can't be shared." }, 409);
 				const resourceId = userSessionResourceFor(row, visibility);
 				const controller = options.controller;
 				const threadIds = controller ? await sessionThreadsToMove(controller, row, resourceId) : [];
 				if (threadIds.length > 0 && !options.moveThread) return c.json({ error: "Changing session visibility is not available on this server." }, 503);
 				if (controller?.listActiveThreadRuns().some((run) => threadIds.includes(run.threadId))) return c.json({ error: "Wait for the session to finish its run before changing visibility" }, 409);
-				const moveThreads = async () => {
+				const moveThreads = async (to) => {
 					for (const threadId of threadIds) await options.moveThread({
 						threadId,
-						resourceId
+						resourceId: to
 					});
 				};
-				if (visibility === "private") await moveThreads();
+				if (visibility === "private") await moveThreads(resourceId);
 				const updated = await match.sourceControl.sessions.setVisibility({
 					sessionId,
-					visibility
+					visibility,
+					expectedUserId: row.userId
 				});
-				if (!updated) return c.json({ error: "Session not found" }, 404);
-				if (visibility === "org") await moveThreads();
+				if (!updated) {
+					if (visibility === "private") await moveThreads(userSessionResourceFor(row, "org"));
+					return c.json({ error: "Session not found" }, 404);
+				}
+				if (visibility === "org") await moveThreads(resourceId);
 				const live = await controller?.getSession(sessionId);
 				if (live && threadIds.length > 0) await controller.deleteSession({ sessionId });
 				else if (live) await controller.setResourceId(live, { resourceId });

package/dist/routes/source-control-sessions.js.map

@@ -1 +1 @@
-{"version":3,"file":"source-control-sessions.js","names":[],"sources":["../../src/routes/source-control-sessions.ts"],"sourcesContent":["import type { MountedMastraCode } from '@mastra/code-sdk';\nimport { resolveModel } from '@mastra/code-sdk/agents/model';\nimport { RequestContext } from '@mastra/core/request-context';\nimport type { ApiRoute, IUserProvider } from '@mastra/core/server';\nimport { registerApiRoute } from '@mastra/core/server';\nimport { UniqueViolationError } from '@mastra/core/storage';\nimport type { Context } from 'hono';\n\nimport { reclaimDeletedSessionSandbox } from '../integrations/github/sandbox-release.js';\nimport { isValidGitRef } from '../sandbox/git-ref.js';\nimport type { SessionRetirementCoordinator } from '../sandbox/session-retirement.js';\nimport { waitForPendingFilesystemCapture } from '../session/filesystem-capture.js';\nimport { seedSessionOrg } from '../session/org-seed.js';\nimport {\n  sessionMemoryResourceId,\n  listFactorySessionThreads,\n  sessionThreadsToMove,\n  userSessionResourceFor,\n} from '../session/session-threads.js';\nimport { normalizeSessionTitle } from '../session/session-title.js';\nimport type { FilesystemStorage } from '../storage/domains/filesystem/base.js';\nimport type { MemorySettingsStorage } from '../storage/domains/memory-settings/base.js';\nimport type { FactoryProjectsStorage } from '../storage/domains/projects/base.js';\nimport type {\n  ProjectRepository,\n  SourceControlSession,\n  SourceControlStorageHandle,\n} from '../storage/domains/source-control/base.js';\nimport type { WorkItemsStorage } from '../storage/domains/work-items/base.js';\nimport type { RouteAuth } from './route.js';\nimport { canReadSessionResource, canViewSourceControlSession } from './session-access.js';\n\ntype RouteContext = Context;\n\nfunction loose(c: unknown): RouteContext {\n  return c as RouteContext;\n}\n\nexport const USER_SESSION_BRANCH_PREFIX = 'user/session-';\n// Slack thread sessions live on `slack/<thread>` branches (integrations/slack/slack.ts threadBranch).\nconst SLACK_SESSION_BRANCH_PREFIX = 'slack/';\nconst UUID_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/;\nconst MAX_SESSION_OWNER_PROFILES = 100;\nconst MAX_SESSION_OWNER_PROFILE_CACHE_ENTRIES = 500;\nconst SESSION_OWNER_PROFILE_TTL_MS = 5 * 60_000;\n\ninterface SessionOwnerProfile {\n  id: string;\n  name: string;\n  avatarUrl?: string;\n}\n\ntype SessionOwnerUserProvider = Pick<IUserProvider, 'getUser'> & Partial<Pick<IUserProvider, 'getUsers'>>;\n\nexport interface SourceControlSessionRoutesOptions {\n  auth: RouteAuth;\n  sourceControls: readonly SourceControlStorageHandle[];\n  projects: Pick<FactoryProjectsStorage, 'get'>;\n  users?: SessionOwnerUserProvider;\n  controller?: MountedMastraCode['controller'];\n  memorySettings: Pick<MemorySettingsStorage, 'get'>;\n  sessionRetirement?: SessionRetirementCoordinator;\n  /** Whether the host sandbox can recreate a session's sandbox (false for local). */\n  sandboxRecreateSupported?: boolean;\n  /** Turn-end file listings, cleared on recreate so the panel stops showing the old sandbox's files. */\n  filesystem?: Pick<FilesystemStorage, 'deleteResourceFiles'>;\n  /** How long recreate waits for an aborted run to settle before destroying. */\n  abortSettleTimeoutMs?: number;\n  workItems?: Pick<WorkItemsStorage, 'clearSessionReferences' | 'hasRunBindingForSession'>;\n  /** Moves a thread, with everything keyed by its resource, when a session's visibility changes. */\n  moveThread?: (input: { threadId: string; resourceId: string }) => Promise<unknown>;\n}\n\nconst ABORT_SETTLE_TIMEOUT_MS = 5_000;\nconst ABORT_SETTLE_POLL_MS = 50;\n\ntype SessionManagePermission = 'allowed' | 'forbidden' | 'not-found';\n\n/**\n * Who may manage a session's sandbox: its owner, or an org admin. Private\n * sessions stay owner-only and look missing to everyone else, matching the\n * session GET. The admin check is a provider call, so owners skip it.\n */\nasync function sessionManagePermission(\n  c: RouteContext,\n  auth: RouteAuth,\n  tenant: { orgId: string; userId: string },\n  session: SourceControlSession,\n): Promise<SessionManagePermission> {\n  if (session.orgId !== tenant.orgId) return 'not-found';\n  const isOwner = session.userId === tenant.userId;\n  if (session.visibility === 'private' && !isOwner) return 'not-found';\n  if (isOwner) return 'allowed';\n  return (await auth.isOrganizationAdmin(c, session.orgId)) ? 'allowed' : 'forbidden';\n}\n\nfunction canRecreateSandbox(options: SourceControlSessionRoutesOptions): boolean {\n  return Boolean(options.sessionRetirement) && options.sandboxRecreateSupported === true;\n}\n\nfunction withCapabilities<T extends object>(session: T, recreateSandbox: boolean) {\n  return { ...session, capabilities: { recreateSandbox } };\n}\n\n/** Abort the session's active run and wait (bounded) for it to stop. Returns whether a run was aborted. */\nasync function abortActiveRun(\n  controller: MountedMastraCode['controller'] | undefined,\n  sessionId: string,\n  settleTimeoutMs: number,\n): Promise<boolean> {\n  if (!controller) return false;\n  try {\n    const live = await controller.getSession(sessionId);\n    if (!live?.stream.isActive()) return false;\n    live.abort();\n    const deadline = Date.now() + settleTimeoutMs;\n    while (live.stream.isActive() && Date.now() < deadline) {\n      await new Promise(resolve => setTimeout(resolve, ABORT_SETTLE_POLL_MS));\n    }\n    if (live.stream.isActive()) {\n      console.warn('[Factory Sessions] Aborted run did not settle before sandbox recreate', { sessionId });\n    }\n    return true;\n  } catch (error) {\n    console.warn('[Factory Sessions] Failed to abort the active run before sandbox recreate', { sessionId, error });\n    return false;\n  }\n}\n\ninterface ResolvedProjectRepository {\n  sourceControl: SourceControlStorageHandle;\n  project: ProjectRepository;\n  factoryProjectId: string;\n  defaultBranch: string;\n}\n\nasync function resolveOrgTenant(\n  c: RouteContext,\n  auth: RouteAuth,\n): Promise<{ tenant: { orgId: string; userId: string } } | { response: Response }> {\n  await auth.ensureUser(c);\n  const tenant = auth.tenant(c);\n  if (!tenant) return { response: c.json({ error: 'unauthorized', reason: 'auth_required' }, 401) };\n  if (!tenant.orgId) {\n    return {\n      response: c.json(\n        {\n          error: 'organization_required',\n          message: 'Source-control sessions require an organization.',\n        },\n        403,\n      ),\n    };\n  }\n  return { tenant: { orgId: tenant.orgId, userId: tenant.userId } };\n}\n\nasync function resolveProjectRepository(\n  sourceControls: readonly SourceControlStorageHandle[],\n  orgId: string,\n  projectRepositoryId: string,\n): Promise<ResolvedProjectRepository | null> {\n  const matches = (\n    await Promise.all(\n      sourceControls.map(async sourceControl => {\n        const project = await sourceControl.projectRepositories.get({ orgId, id: projectRepositoryId });\n        if (!project) return null;\n        const repository = await sourceControl.repositories.get({ orgId, id: project.repositoryId });\n        if (!repository) return null;\n        const connection = await sourceControl.connections.get({ orgId, id: project.connectionId });\n        if (!connection) return null;\n        return {\n          sourceControl,\n          project,\n          factoryProjectId: connection.factoryProjectId,\n          defaultBranch: project.branch ?? repository.defaultBranch,\n        };\n      }),\n    )\n  ).filter((match): match is ResolvedProjectRepository => match !== null);\n  if (matches.length > 1) {\n    throw new Error('Factory project repository exists in multiple source-control providers.');\n  }\n  return matches[0] ?? null;\n}\n\nasync function resolveSession(\n  sourceControls: readonly SourceControlStorageHandle[],\n  sessionId: string,\n): Promise<{ sourceControl: SourceControlStorageHandle; session: SourceControlSession } | null> {\n  const matches = (\n    await Promise.all(\n      sourceControls.map(async sourceControl => ({\n        sourceControl,\n        session: await sourceControl.sessions.getBySessionId(sessionId),\n      })),\n    )\n  ).filter(\n    (match): match is { sourceControl: SourceControlStorageHandle; session: SourceControlSession } =>\n      match.session !== null,\n  );\n  if (matches.length > 1) throw new Error('Factory session exists in multiple source-control providers.');\n  return matches[0] ?? null;\n}\n\n/**\n * Start the live conversation for a user session on its own thread (thread id === session id), under the resource\n * its visibility gives it. Agent-controller\n * routes only act on started sessions, so the first prompt the page sends right after creation always lands on the\n * thread the page reads, with the org and Factory address already in state. Get-or-create, so retried or repeated\n * creates are safe.\n */\nasync function startUserSessionConversation(\n  controller: SourceControlSessionRoutesOptions['controller'],\n  session: SourceControlSession,\n  // Its owner's resource while private, its Factory's when created shared (a run from a board card).\n  resourceId: string = userSessionResourceFor(session, session.visibility === 'org' ? 'org' : 'private'),\n) {\n  if (!controller) return undefined;\n  const requestContext = new RequestContext();\n  requestContext.set('user', { workosId: session.userId, organizationId: session.orgId });\n  const live = await controller.createSession({\n    id: session.sessionId,\n    resourceId,\n    threadId: session.sessionId,\n    ownerId: session.userId,\n    requestContext,\n  });\n  await seedSessionOrg(live, session.orgId);\n  // Server-side gates (the transition tool, factory-phase processor) resolve the session address from state, so\n  // seed it here rather than waiting for the page to connect.\n  if (session.factoryProjectId) {\n    await live.state.set({\n      factoryProjectId: session.factoryProjectId,\n      ...(session.projectRepositoryId ? { projectRepositoryId: session.projectRepositoryId } : {}),\n    });\n  }\n  return live;\n}\n\nfunction isJsonObject(value: unknown): value is Record<string, unknown> {\n  return typeof value === 'object' && value !== null && !Array.isArray(value);\n}\n\nfunction createSessionNaming() {\n  const inFlight = new Map<string, Promise<string | null>>();\n  return (sessionId: string, run: () => Promise<string | null>) => {\n    const pending = inFlight.get(sessionId);\n    if (pending) return pending;\n    const started = run().finally(() => inFlight.delete(sessionId));\n    inFlight.set(sessionId, started);\n    return started;\n  };\n}\n\nfunction titleModel(modelId: string) {\n  return ({ requestContext }: { requestContext: RequestContext }) =>\n    resolveModel(modelId, { remapForCodexOAuth: true, requestContext });\n}\n\nfunction createSessionOwnerProfileResolver(users: SessionOwnerUserProvider | undefined) {\n  const cache = new Map<string, { profile?: SessionOwnerProfile; expiresAt: number }>();\n  const cacheProfile = (userId: string, profile: SessionOwnerProfile | undefined, expiresAt: number) => {\n    cache.delete(userId);\n    cache.set(userId, { profile, expiresAt });\n    if (cache.size > MAX_SESSION_OWNER_PROFILE_CACHE_ENTRIES) {\n      const oldestUserId = cache.keys().next().value;\n      if (oldestUserId !== undefined) cache.delete(oldestUserId);\n    }\n  };\n\n  return async (userIds: string[]): Promise<Map<string, SessionOwnerProfile>> => {\n    if (!users) return new Map();\n    const requestedUserIds = [...new Set(userIds)].slice(0, MAX_SESSION_OWNER_PROFILES);\n    const profiles = new Map<string, SessionOwnerProfile>();\n    const unresolvedUserIds: string[] = [];\n    const now = Date.now();\n\n    for (const userId of requestedUserIds) {\n      const cached = cache.get(userId);\n      if (!cached || cached.expiresAt <= now) {\n        cache.delete(userId);\n        unresolvedUserIds.push(userId);\n      } else if (cached.profile) {\n        profiles.set(userId, cached.profile);\n      }\n    }\n    if (unresolvedUserIds.length === 0) return profiles;\n\n    let resolvedUsers: Array<Awaited<ReturnType<SessionOwnerUserProvider['getUser']>>>;\n    if (users.getUsers) {\n      try {\n        resolvedUsers = await users.getUsers(unresolvedUserIds);\n      } catch (error) {\n        console.warn('[Factory Sessions] Bulk owner profile lookup failed; falling back to individual lookups', {\n          error: error instanceof Error ? error.message : String(error),\n        });\n        resolvedUsers = (await Promise.allSettled(unresolvedUserIds.map(userId => users.getUser(userId))))\n          .filter(result => result.status === 'fulfilled')\n          .map(result => result.value);\n      }\n    } else {\n      resolvedUsers = (await Promise.allSettled(unresolvedUserIds.map(userId => users.getUser(userId))))\n        .filter(result => result.status === 'fulfilled')\n        .map(result => result.value);\n    }\n\n    for (const user of resolvedUsers) {\n      if (!user) continue;\n      const name = user.name?.trim() || user.email?.trim();\n      if (!name) continue;\n      profiles.set(user.id, {\n        id: user.id,\n        name,\n        ...(user.avatarUrl ? { avatarUrl: user.avatarUrl } : {}),\n      });\n    }\n    const expiresAt = now + SESSION_OWNER_PROFILE_TTL_MS;\n    for (const userId of unresolvedUserIds) cacheProfile(userId, profiles.get(userId), expiresAt);\n    return profiles;\n  };\n}\n\nfunction withOwnerProfile(session: SourceControlSession, owners: Map<string, SessionOwnerProfile>) {\n  const owner = owners.get(session.userId);\n  return owner ? { ...session, owner } : session;\n}\n\nfunction projectSessionRoutes(\n  path: '/web/source-control/projects/:id/sessions' | '/web/github/projects/:id/sessions',\n  options: SourceControlSessionRoutesOptions,\n  resolveOwnerProfiles: ReturnType<typeof createSessionOwnerProfileResolver>,\n): ApiRoute[] {\n  return [\n    registerApiRoute(path, {\n      method: 'GET',\n      requiresAuth: false,\n      handler: async c => {\n        const resolved = await resolveOrgTenant(loose(c), options.auth);\n        if ('response' in resolved) return resolved.response;\n        const { orgId, userId } = resolved.tenant;\n        const projectRepositoryId = c.req.param('id');\n        const project = projectRepositoryId\n          ? await resolveProjectRepository(options.sourceControls, orgId, projectRepositoryId)\n          : null;\n        if (!project) return c.json({ error: 'Project repository not found' }, 404);\n        const sessions = await project.sourceControl.sessions.list({\n          projectRepositoryId: project.project.id,\n          viewerUserId: userId,\n        });\n        const owners = await resolveOwnerProfiles(sessions.map(session => session.userId));\n        return c.json({ sessions: sessions.map(session => withOwnerProfile(session, owners)) });\n      },\n    }),\n    registerApiRoute(path, {\n      method: 'POST',\n      requiresAuth: false,\n      handler: async c => {\n        const resolved = await resolveOrgTenant(loose(c), options.auth);\n        if ('response' in resolved) return resolved.response;\n        const { orgId, userId } = resolved.tenant;\n        const projectRepositoryId = c.req.param('id');\n        const project = projectRepositoryId\n          ? await resolveProjectRepository(options.sourceControls, orgId, projectRepositoryId)\n          : null;\n        if (!project) return c.json({ error: 'Project repository not found' }, 404);\n        let body: unknown;\n        try {\n          body = await c.req.json();\n        } catch {\n          return c.json({ error: 'Invalid JSON body' }, 400);\n        }\n        if (!isJsonObject(body)) return c.json({ error: 'Invalid JSON body' }, 400);\n        if (body.baseBranch !== undefined && typeof body.baseBranch !== 'string') {\n          return c.json({ error: 'Invalid baseBranch' }, 400);\n        }\n        const baseBranch = body.baseBranch ?? project.defaultBranch;\n        if (!isValidGitRef(baseBranch)) return c.json({ error: 'Invalid baseBranch' }, 400);\n        if (\n          body.sessionId !== undefined &&\n          (typeof body.sessionId !== 'string' || !UUID_PATTERN.test(body.sessionId))\n        ) {\n          return c.json({ error: 'Invalid sessionId' }, 400);\n        }\n        const requestedSessionId = body.sessionId;\n        const sessionId = requestedSessionId ?? globalThis.crypto.randomUUID();\n        if (body.title !== undefined && typeof body.title !== 'string') {\n          return c.json({ error: 'Invalid title' }, 400);\n        }\n        const normalizedTitle = body.title === undefined ? null : normalizeSessionTitle(body.title);\n        // Sessions start shared on the Factory. Only a session someone opens for themselves (New session) asks for\n        // `private`.\n        if (body.visibility !== undefined && body.visibility !== 'private' && body.visibility !== 'org') {\n          return c.json({ error: \"visibility must be 'private' or 'org'\" }, 400);\n        }\n        const visibility = body.visibility ?? 'org';\n        let branch: string;\n        if (body.branch === undefined) branch = `${USER_SESSION_BRANCH_PREFIX}${sessionId}`;\n        else if (isValidGitRef(body.branch)) branch = body.branch;\n        else return c.json({ error: 'Invalid branch' }, 400);\n\n        if (requestedSessionId) {\n          const existing = await project.sourceControl.sessions.getBySessionId(sessionId);\n          if (existing) {\n            if (\n              existing.projectRepositoryId !== project.project.id ||\n              existing.orgId !== orgId ||\n              existing.userId !== userId ||\n              existing.branch !== branch\n            ) {\n              return c.json({ error: 'Session ID conflict' }, 409);\n            }\n            await startUserSessionConversation(options.controller, existing);\n            return c.json({ session: withCapabilities(existing, canRecreateSandbox(options)) });\n          }\n        }\n\n        const session = await project.sourceControl.sessions\n          .create({\n            sessionId,\n            projectRepositoryId: project.project.id,\n            factoryProjectId: project.factoryProjectId,\n            orgId,\n            userId,\n            branch,\n            baseBranch,\n            title: normalizedTitle,\n            visibility,\n          })\n          .catch(async error => {\n            if (!(error instanceof UniqueViolationError) || !requestedSessionId) throw error;\n            const conflict = await project.sourceControl.sessions.getBySessionId(sessionId);\n            if (!conflict) throw error;\n            return conflict;\n          });\n        if (\n          requestedSessionId &&\n          (session.sessionId !== sessionId ||\n            session.projectRepositoryId !== project.project.id ||\n            session.orgId !== orgId ||\n            session.userId !== userId ||\n            session.branch !== branch)\n        ) {\n          return c.json({ error: 'Session ID conflict' }, 409);\n        }\n        await startUserSessionConversation(options.controller, session);\n        // The creator owns the session, so no admin check is needed.\n        return c.json({ session: withCapabilities(session, canRecreateSandbox(options)) });\n      },\n    }),\n  ];\n}\n\nexport function buildSourceControlSessionRoutes(options: SourceControlSessionRoutesOptions): ApiRoute[] {\n  const nameSession = createSessionNaming();\n  const resolveOwnerProfiles = createSessionOwnerProfileResolver(options.users);\n  return [\n    registerApiRoute('/web/factory/projects/:id/sessions', {\n      method: 'GET',\n      requiresAuth: false,\n      handler: async c => {\n        const resolved = await resolveOrgTenant(loose(c), options.auth);\n        if ('response' in resolved) return resolved.response;\n        const { orgId, userId } = resolved.tenant;\n        const factoryProjectId = c.req.param('id');\n        const project = factoryProjectId ? await options.projects.get({ orgId, id: factoryProjectId }) : null;\n        if (!project) return c.json({ error: 'Factory not found' }, 404);\n        // Storage is partitioned per provider; a Factory's sessions can live in any of them.\n        const sessions = (\n          await Promise.all(\n            options.sourceControls.map(sourceControl =>\n              sourceControl.sessions.listByProject({ orgId, factoryProjectId: project.id, viewerUserId: userId }),\n            ),\n          )\n        ).flat();\n        const owners = await resolveOwnerProfiles(sessions.map(session => session.userId));\n        return c.json({ sessions: sessions.map(session => withOwnerProfile(session, owners)) });\n      },\n    }),\n    ...projectSessionRoutes('/web/source-control/projects/:id/sessions', options, resolveOwnerProfiles),\n    // Compatibility for existing clients; new code uses the provider-neutral path.\n    ...projectSessionRoutes('/web/github/projects/:id/sessions', options, resolveOwnerProfiles),\n    registerApiRoute('/web/user-sessions/:sessionId', {\n      method: 'GET',\n      requiresAuth: false,\n      handler: async c => {\n        const resolved = await resolveOrgTenant(loose(c), options.auth);\n        if ('response' in resolved) return resolved.response;\n        const match = await resolveSession(options.sourceControls, c.req.param('sessionId'));\n        const session = match?.session;\n        if (!session || !canViewSourceControlSession(session, resolved.tenant)) {\n          return c.json({ error: 'Session not found' }, 404);\n        }\n        // The client opens the session by its id and creates it under this resource.\n        const resourceId = await sessionMemoryResourceId(options.controller, session, options.workItems);\n        if (!canReadSessionResource(session, resourceId, resolved.tenant)) {\n          return c.json({ error: 'Session not found' }, 404);\n        }\n        const owners = await resolveOwnerProfiles([session.userId]);\n        const recreateSandbox =\n          canRecreateSandbox(options) &&\n          (await sessionManagePermission(loose(c), options.auth, resolved.tenant, session)) === 'allowed';\n        return c.json({\n          session: { ...withCapabilities(withOwnerProfile(session, owners), recreateSandbox), resourceId },\n        });\n      },\n    }),\n    // Start a session's sandbox without sending it a message, for the Files tab.\n    // Brings the controller session online as the row's owner, as a delivered\n    // message would, then starts its sandbox; a running sandbox returns at once.\n    registerApiRoute('/web/user-sessions/:sessionId/sandbox/start', {\n      method: 'POST',\n      requiresAuth: false,\n      handler: async c => {\n        const resolved = await resolveOrgTenant(loose(c), options.auth);\n        if ('response' in resolved) return resolved.response;\n        const match = await resolveSession(options.sourceControls, c.req.param('sessionId'));\n        const session = match?.session;\n        if (!session) return c.json({ error: 'Session not found' }, 404);\n        const permission = await sessionManagePermission(loose(c), options.auth, resolved.tenant, session);\n        if (permission === 'not-found') return c.json({ error: 'Session not found' }, 404);\n        if (permission === 'forbidden') {\n          return c.json({ error: \"Only the session's owner or an organization admin can start its sandbox.\" }, 403);\n        }\n        const controller = options.controller;\n        if (!controller) return c.json({ error: 'Sessions are not available on this server.' }, 503);\n\n        try {\n          const live =\n            (await controller.getSession(session.sessionId)) ??\n            (await startUserSessionConversation(\n              controller,\n              session,\n              await sessionMemoryResourceId(controller, session, options.workItems),\n            ));\n          const sandbox = live?.getWorkspace()?.sandbox;\n          if (!sandbox?.start) return c.json({ error: 'This session has no sandbox to start.' }, 409);\n          await sandbox.start();\n          return c.json({ started: true });\n        } catch (error) {\n          console.error('[Factory Sessions] Failed to start session sandbox', { sessionId: session.sessionId, error });\n          return c.json({ error: error instanceof Error ? error.message : String(error) }, 500);\n        }\n      },\n    }),\n    registerApiRoute('/web/user-sessions/:sessionId/sandbox/recreate', {\n      method: 'POST',\n      requiresAuth: false,\n      handler: async c => {\n        const resolved = await resolveOrgTenant(loose(c), options.auth);\n        if ('response' in resolved) return resolved.response;\n        const match = await resolveSession(options.sourceControls, c.req.param('sessionId'));\n        const session = match?.session;\n        if (!match || !session) return c.json({ error: 'Session not found' }, 404);\n        const permission = await sessionManagePermission(loose(c), options.auth, resolved.tenant, session);\n        if (permission === 'not-found') return c.json({ error: 'Session not found' }, 404);\n        if (permission === 'forbidden') {\n          return c.json({ error: \"Only the session's owner or an organization admin can recreate its sandbox.\" }, 403);\n        }\n        const sessionRetirement = options.sessionRetirement;\n        if (!sessionRetirement || !canRecreateSandbox(options)) {\n          return c.json({ error: 'Recreating sandboxes is not available on this server.' }, 503);\n        }\n\n        const aborted = await abortActiveRun(\n          options.controller,\n          session.sessionId,\n          options.abortSettleTimeoutMs ?? ABORT_SETTLE_TIMEOUT_MS,\n        );\n        await waitForPendingFilesystemCapture(session.sessionId).catch(error => {\n          console.warn('[Factory Sessions] Failed to drain filesystem capture before sandbox recreate', {\n            sessionId: session.sessionId,\n            error,\n          });\n        });\n        try {\n          const outcome = await sessionRetirement.recreateSessionSandbox({\n            sourceControl: match.sourceControl,\n            orgId: session.orgId,\n            sessionId: session.sessionId,\n          });\n          if (outcome === 'not-found') return c.json({ error: 'Session not found' }, 404);\n          // The captured listings describe the destroyed sandbox; the next turn re-captures.\n          await options.filesystem?.deleteResourceFiles({ resourceId: session.sessionId }).catch(error => {\n            console.warn('[Factory Sessions] Failed to clear file listings after sandbox recreate', {\n              sessionId: session.sessionId,\n              error,\n            });\n          });\n          return c.json({ recreated: true, aborted });\n        } catch (error) {\n          console.error('[Factory Sessions] Failed to recreate session sandbox', {\n            sessionId: session.sessionId,\n            error,\n          });\n          return c.json({ error: error instanceof Error ? error.message : String(error) }, 500);\n        }\n      },\n    }),\n    registerApiRoute('/web/user-sessions/:sessionId', {\n      method: 'DELETE',\n      requiresAuth: false,\n      handler: async c => {\n        const resolved = await resolveOrgTenant(loose(c), options.auth);\n        if ('response' in resolved) return resolved.response;\n        const match = await resolveSession(options.sourceControls, c.req.param('sessionId'));\n        const session = match?.session;\n        if (\n          !match ||\n          !session ||\n          session.orgId !== resolved.tenant.orgId ||\n          session.userId !== resolved.tenant.userId\n        ) {\n          return c.json({ error: 'Session not found' }, 404);\n        }\n        try {\n          // Drain the turn's queued filesystem capture while the thread and sandbox still exist.\n          // A failed drain only costs the snapshot; it must not block teardown.\n          await waitForPendingFilesystemCapture(session.sessionId).catch(error => {\n            console.warn('[Factory Sessions] Failed to drain filesystem capture before delete', {\n              sessionId: session.sessionId,\n              error,\n            });\n          });\n          await options.controller?.deleteSession({ sessionId: session.sessionId });\n        } catch (error) {\n          console.error('[Factory Sessions] Failed to tear down live controller session', {\n            sessionId: session.sessionId,\n            error,\n          });\n        }\n        if (options.sessionRetirement) {\n          await options.sessionRetirement.retireSession({\n            sourceControl: match.sourceControl,\n            ...(options.workItems ? { workItems: options.workItems } : {}),\n            orgId: session.orgId,\n            sessionId: session.sessionId,\n            deleteSession: true,\n          });\n        } else {\n          await options.workItems?.clearSessionReferences({ orgId: session.orgId, sessionId: session.sessionId });\n          await match.sourceControl.sessions.delete(session.id);\n          void reclaimDeletedSessionSandbox({ session }).catch((error: unknown) => {\n            console.error('[Factory Sessions] Failed to reclaim sandbox for deleted session', {\n              sessionId: session.sessionId,\n              sandboxId: session.sandboxId,\n              error,\n            });\n          });\n        }\n        return c.json({ removed: true });\n      },\n    }),\n    registerApiRoute('/web/user-sessions/:sessionId/visibility', {\n      method: 'PUT',\n      requiresAuth: false,\n      handler: async c => {\n        const resolved = await resolveOrgTenant(loose(c), options.auth);\n        if ('response' in resolved) return resolved.response;\n        const body = (await c.req.json().catch(() => undefined)) as { visibility?: unknown } | undefined;\n        const visibility = body?.visibility;\n        if (visibility !== 'private' && visibility !== 'org') {\n          return c.json({ error: \"visibility must be 'private' or 'org'\" }, 400);\n        }\n        const sessionId = c.req.param('sessionId');\n        const match = await resolveSession(options.sourceControls, sessionId);\n        const row = match?.session;\n        // Only the owner may share or unshare; everyone else gets the same 404\n        // as a missing session so org-visible ids are not confirmed either.\n        if (!match || !row || row.orgId !== resolved.tenant.orgId || row.userId !== resolved.tenant.userId) {\n          return c.json({ error: 'Session not found' }, 404);\n        }\n        // Without work-item storage there's no telling whether this is a Factory\n        // run, so refuse rather than let a run be made private.\n        if (!options.workItems) {\n          return c.json(\n            {\n              error:\n                \"Session visibility can't be changed yet: Factory storage is still starting up. Try again in a moment.\",\n            },\n            503,\n          );\n        }\n        // Only sessions a person started in the UI can change. Factory runs and\n        // Slack threads keep the visibility they were created with: runs and\n        // channel threads stay with the team, Slack DMs stay private.\n        if (\n          row.branch.startsWith(SLACK_SESSION_BRANCH_PREFIX) ||\n          (row.factoryProjectId !== null &&\n            (await options.workItems.hasRunBindingForSession({\n              orgId: row.orgId,\n              factoryProjectId: row.factoryProjectId,\n              sessionId,\n            })))\n        ) {\n          return c.json({ error: 'Only user sessions can change visibility' }, 409);\n        }\n        // Sharing puts the session on its Factory's memory; without a Factory there is nowhere to share it to.\n        if (visibility === 'org' && !row.factoryProjectId) {\n          return c.json({ error: \"This session isn't linked to a Factory, so it can't be shared.\" }, 409);\n        }\n        const resourceId = userSessionResourceFor(row, visibility);\n        const controller = options.controller;\n        // The resource says who may read a session, so its threads move with it.\n        const threadIds = controller ? await sessionThreadsToMove(controller, row, resourceId) : [];\n        if (threadIds.length > 0 && !options.moveThread) {\n          return c.json({ error: 'Changing session visibility is not available on this server.' }, 503);\n        }\n        if (controller?.listActiveThreadRuns().some(run => threadIds.includes(run.threadId))) {\n          return c.json({ error: 'Wait for the session to finish its run before changing visibility' }, 409);\n        }\n        // Write in the order that fails closed: threads leave the Factory before the\n        // row says private, and the row says shared before threads reach the Factory.\n        // A failed move then leaves the session less visible, never more, and a retry\n        // moves what is left.\n        const moveThreads = async () => {\n          for (const threadId of threadIds) await options.moveThread!({ threadId, resourceId });\n        };\n        if (visibility === 'private') await moveThreads();\n        const updated = await match.sourceControl.sessions.setVisibility({ sessionId, visibility });\n        if (!updated) return c.json({ error: 'Session not found' }, 404);\n        if (visibility === 'org') await moveThreads();\n        // A live session keeps the resource it started on. Drop it so the next\n        // request resumes on its moved thread, or point it at the new resource\n        // when it has no thread to resume from yet.\n        const live = await controller?.getSession(sessionId);\n        if (live && threadIds.length > 0) await controller!.deleteSession({ sessionId });\n        else if (live) await controller!.setResourceId(live, { resourceId });\n        const owners = await resolveOwnerProfiles([updated.userId]);\n        return c.json({ session: withOwnerProfile(updated, owners) });\n      },\n    }),\n    registerApiRoute('/web/user-sessions/:sessionId/title', {\n      method: 'POST',\n      requiresAuth: false,\n      handler: async c => {\n        const resolved = await resolveOrgTenant(loose(c), options.auth);\n        if ('response' in resolved) return resolved.response;\n        const sessionId = c.req.param('sessionId');\n        const match = await resolveSession(options.sourceControls, sessionId);\n        const row = match?.session;\n        if (!match || !row || row.orgId !== resolved.tenant.orgId || row.userId !== resolved.tenant.userId) {\n          return c.json({ error: 'Session not found' }, 404);\n        }\n        if (!options.controller) return c.json({ error: 'Sessions are not available on this server.' }, 503);\n        const threads = await listFactorySessionThreads(options.controller, row, options.workItems);\n        const thread = threads.sort((a, b) => b.updatedAt.getTime() - a.updatedAt.getTime())[0];\n        if (!thread) return c.json({ error: 'This session has no conversation to name yet.' }, 409);\n        const stored = await options.memorySettings.get({ orgId: row.orgId, userId: row.userId });\n        const requestContext = new RequestContext();\n        requestContext.set('user', { workosId: row.userId, organizationId: row.orgId });\n        try {\n          const title = await nameSession(sessionId, async () => {\n            const generated = await options.controller!.generateThreadTitle({\n              threadId: thread.id,\n              sessionId,\n              requestContext,\n              ...(stored?.observerModelId ? { model: titleModel(stored.observerModelId) } : {}),\n            });\n            const named = generated ? normalizeSessionTitle(generated) : null;\n            if (named) await match.sourceControl.sessions.rename({ sessionId, title: named });\n            return named;\n          });\n          if (!title) return c.json({ error: 'The model returned an empty title. Try again.' }, 502);\n          return c.json({ title });\n        } catch (error) {\n          return c.json({ error: error instanceof Error ? error.message : String(error) }, 500);\n        }\n      },\n    }),\n  ];\n}\n"],"mappings":";;;;;;;;;;;;AAkCA,SAAS,MAAM,GAA0B;CACvC,OAAO;AACT;AAEA,MAAa,6BAA6B;AAE1C,MAAM,8BAA8B;AACpC,MAAM,eAAe;AACrB,MAAM,6BAA6B;AACnC,MAAM,0CAA0C;AAChD,MAAM,+BAA+B;AA6BrC,MAAM,0BAA0B;AAChC,MAAM,uBAAuB;;;;;;AAS7B,eAAe,wBACb,GACA,MACA,QACA,SACkC;CAClC,IAAI,QAAQ,UAAU,OAAO,OAAO,OAAO;CAC3C,MAAM,UAAU,QAAQ,WAAW,OAAO;CAC1C,IAAI,QAAQ,eAAe,aAAa,CAAC,SAAS,OAAO;CACzD,IAAI,SAAS,OAAO;CACpB,OAAQ,MAAM,KAAK,oBAAoB,GAAG,QAAQ,KAAK,IAAK,YAAY;AAC1E;AAEA,SAAS,mBAAmB,SAAqD;CAC/E,OAAO,QAAQ,QAAQ,iBAAiB,KAAK,QAAQ,6BAA6B;AACpF;AAEA,SAAS,iBAAmC,SAAY,iBAA0B;CAChF,OAAO;EAAE,GAAG;EAAS,cAAc,EAAE,gBAAgB;CAAE;AACzD;;AAGA,eAAe,eACb,YACA,WACA,iBACkB;CAClB,IAAI,CAAC,YAAY,OAAO;CACxB,IAAI;EACF,MAAM,OAAO,MAAM,WAAW,WAAW,SAAS;EAClD,IAAI,CAAC,MAAM,OAAO,SAAS,GAAG,OAAO;EACrC,KAAK,MAAM;EACX,MAAM,WAAW,KAAK,IAAI,IAAI;EAC9B,OAAO,KAAK,OAAO,SAAS,KAAK,KAAK,IAAI,IAAI,UAC5C,MAAM,IAAI,SAAQ,YAAW,WAAW,SAAS,oBAAoB,CAAC;EAExE,IAAI,KAAK,OAAO,SAAS,GACvB,QAAQ,KAAK,yEAAyE,EAAE,UAAU,CAAC;EAErG,OAAO;CACT,SAAS,OAAO;EACd,QAAQ,KAAK,6EAA6E;GAAE;GAAW;EAAM,CAAC;EAC9G,OAAO;CACT;AACF;AASA,eAAe,iBACb,GACA,MACiF;CACjF,MAAM,KAAK,WAAW,CAAC;CACvB,MAAM,SAAS,KAAK,OAAO,CAAC;CAC5B,IAAI,CAAC,QAAQ,OAAO,EAAE,UAAU,EAAE,KAAK;EAAE,OAAO;EAAgB,QAAQ;CAAgB,GAAG,GAAG,EAAE;CAChG,IAAI,CAAC,OAAO,OACV,OAAO,EACL,UAAU,EAAE,KACV;EACE,OAAO;EACP,SAAS;CACX,GACA,GACF,EACF;CAEF,OAAO,EAAE,QAAQ;EAAE,OAAO,OAAO;EAAO,QAAQ,OAAO;CAAO,EAAE;AAClE;AAEA,eAAe,yBACb,gBACA,OACA,qBAC2C;CAC3C,MAAM,WACJ,MAAM,QAAQ,IACZ,eAAe,IAAI,OAAM,kBAAiB;EACxC,MAAM,UAAU,MAAM,cAAc,oBAAoB,IAAI;GAAE;GAAO,IAAI;EAAoB,CAAC;EAC9F,IAAI,CAAC,SAAS,OAAO;EACrB,MAAM,aAAa,MAAM,cAAc,aAAa,IAAI;GAAE;GAAO,IAAI,QAAQ;EAAa,CAAC;EAC3F,IAAI,CAAC,YAAY,OAAO;EACxB,MAAM,aAAa,MAAM,cAAc,YAAY,IAAI;GAAE;GAAO,IAAI,QAAQ;EAAa,CAAC;EAC1F,IAAI,CAAC,YAAY,OAAO;EACxB,OAAO;GACL;GACA;GACA,kBAAkB,WAAW;GAC7B,eAAe,QAAQ,UAAU,WAAW;EAC9C;CACF,CAAC,CACH,EAAA,CACA,QAAQ,UAA8C,UAAU,IAAI;CACtE,IAAI,QAAQ,SAAS,GACnB,MAAM,IAAI,MAAM,yEAAyE;CAE3F,OAAO,QAAQ,MAAM;AACvB;AAEA,eAAe,eACb,gBACA,WAC8F;CAC9F,MAAM,WACJ,MAAM,QAAQ,IACZ,eAAe,IAAI,OAAM,mBAAkB;EACzC;EACA,SAAS,MAAM,cAAc,SAAS,eAAe,SAAS;CAChE,EAAE,CACJ,EAAA,CACA,QACC,UACC,MAAM,YAAY,IACtB;CACA,IAAI,QAAQ,SAAS,GAAG,MAAM,IAAI,MAAM,8DAA8D;CACtG,OAAO,QAAQ,MAAM;AACvB;;;;;;;;AASA,eAAe,6BACb,YACA,SAEA,aAAqB,uBAAuB,SAAS,QAAQ,eAAe,QAAQ,QAAQ,SAAS,GACrG;CACA,IAAI,CAAC,YAAY,OAAO,KAAA;CACxB,MAAM,iBAAiB,IAAI,eAAe;CAC1C,eAAe,IAAI,QAAQ;EAAE,UAAU,QAAQ;EAAQ,gBAAgB,QAAQ;CAAM,CAAC;CACtF,MAAM,OAAO,MAAM,WAAW,cAAc;EAC1C,IAAI,QAAQ;EACZ;EACA,UAAU,QAAQ;EAClB,SAAS,QAAQ;EACjB;CACF,CAAC;CACD,MAAM,eAAe,MAAM,QAAQ,KAAK;CAGxC,IAAI,QAAQ,kBACV,MAAM,KAAK,MAAM,IAAI;EACnB,kBAAkB,QAAQ;EAC1B,GAAI,QAAQ,sBAAsB,EAAE,qBAAqB,QAAQ,oBAAoB,IAAI,CAAC;CAC5F,CAAC;CAEH,OAAO;AACT;AAEA,SAAS,aAAa,OAAkD;CACtE,OAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAC5E;AAEA,SAAS,sBAAsB;CAC7B,MAAM,2BAAW,IAAI,IAAoC;CACzD,QAAQ,WAAmB,QAAsC;EAC/D,MAAM,UAAU,SAAS,IAAI,SAAS;EACtC,IAAI,SAAS,OAAO;EACpB,MAAM,UAAU,IAAI,CAAC,CAAC,cAAc,SAAS,OAAO,SAAS,CAAC;EAC9D,SAAS,IAAI,WAAW,OAAO;EAC/B,OAAO;CACT;AACF;AAEA,SAAS,WAAW,SAAiB;CACnC,QAAQ,EAAE,qBACR,aAAa,SAAS;EAAE,oBAAoB;EAAM;CAAe,CAAC;AACtE;AAEA,SAAS,kCAAkC,OAA6C;CACtF,MAAM,wBAAQ,IAAI,IAAkE;CACpF,MAAM,gBAAgB,QAAgB,SAA0C,cAAsB;EACpG,MAAM,OAAO,MAAM;EACnB,MAAM,IAAI,QAAQ;GAAE;GAAS;EAAU,CAAC;EACxC,IAAI,MAAM,OAAO,yCAAyC;GACxD,MAAM,eAAe,MAAM,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC;GACzC,IAAI,iBAAiB,KAAA,GAAW,MAAM,OAAO,YAAY;EAC3D;CACF;CAEA,OAAO,OAAO,YAAiE;EAC7E,IAAI,CAAC,OAAO,uBAAO,IAAI,IAAI;EAC3B,MAAM,mBAAmB,CAAC,GAAG,IAAI,IAAI,OAAO,CAAC,CAAC,CAAC,MAAM,GAAG,0BAA0B;EAClF,MAAM,2BAAW,IAAI,IAAiC;EACtD,MAAM,oBAA8B,CAAC;EACrC,MAAM,MAAM,KAAK,IAAI;EAErB,KAAK,MAAM,UAAU,kBAAkB;GACrC,MAAM,SAAS,MAAM,IAAI,MAAM;GAC/B,IAAI,CAAC,UAAU,OAAO,aAAa,KAAK;IACtC,MAAM,OAAO,MAAM;IACnB,kBAAkB,KAAK,MAAM;GAC/B,OAAO,IAAI,OAAO,SAChB,SAAS,IAAI,QAAQ,OAAO,OAAO;EAEvC;EACA,IAAI,kBAAkB,WAAW,GAAG,OAAO;EAE3C,IAAI;EACJ,IAAI,MAAM,UACR,IAAI;GACF,gBAAgB,MAAM,MAAM,SAAS,iBAAiB;EACxD,SAAS,OAAO;GACd,QAAQ,KAAK,2FAA2F,EACtG,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAC9D,CAAC;GACD,iBAAiB,MAAM,QAAQ,WAAW,kBAAkB,KAAI,WAAU,MAAM,QAAQ,MAAM,CAAC,CAAC,EAAA,CAC7F,QAAO,WAAU,OAAO,WAAW,WAAW,CAAC,CAC/C,KAAI,WAAU,OAAO,KAAK;EAC/B;OAEA,iBAAiB,MAAM,QAAQ,WAAW,kBAAkB,KAAI,WAAU,MAAM,QAAQ,MAAM,CAAC,CAAC,EAAA,CAC7F,QAAO,WAAU,OAAO,WAAW,WAAW,CAAC,CAC/C,KAAI,WAAU,OAAO,KAAK;EAG/B,KAAK,MAAM,QAAQ,eAAe;GAChC,IAAI,CAAC,MAAM;GACX,MAAM,OAAO,KAAK,MAAM,KAAK,KAAK,KAAK,OAAO,KAAK;GACnD,IAAI,CAAC,MAAM;GACX,SAAS,IAAI,KAAK,IAAI;IACpB,IAAI,KAAK;IACT;IACA,GAAI,KAAK,YAAY,EAAE,WAAW,KAAK,UAAU,IAAI,CAAC;GACxD,CAAC;EACH;EACA,MAAM,YAAY,MAAM;EACxB,KAAK,MAAM,UAAU,mBAAmB,aAAa,QAAQ,SAAS,IAAI,MAAM,GAAG,SAAS;EAC5F,OAAO;CACT;AACF;AAEA,SAAS,iBAAiB,SAA+B,QAA0C;CACjG,MAAM,QAAQ,OAAO,IAAI,QAAQ,MAAM;CACvC,OAAO,QAAQ;EAAE,GAAG;EAAS;CAAM,IAAI;AACzC;AAEA,SAAS,qBACP,MACA,SACA,sBACY;CACZ,OAAO,CACL,iBAAiB,MAAM;EACrB,QAAQ;EACR,cAAc;EACd,SAAS,OAAM,MAAK;GAClB,MAAM,WAAW,MAAM,iBAAiB,MAAM,CAAC,GAAG,QAAQ,IAAI;GAC9D,IAAI,cAAc,UAAU,OAAO,SAAS;GAC5C,MAAM,EAAE,OAAO,WAAW,SAAS;GACnC,MAAM,sBAAsB,EAAE,IAAI,MAAM,IAAI;GAC5C,MAAM,UAAU,sBACZ,MAAM,yBAAyB,QAAQ,gBAAgB,OAAO,mBAAmB,IACjF;GACJ,IAAI,CAAC,SAAS,OAAO,EAAE,KAAK,EAAE,OAAO,+BAA+B,GAAG,GAAG;GAC1E,MAAM,WAAW,MAAM,QAAQ,cAAc,SAAS,KAAK;IACzD,qBAAqB,QAAQ,QAAQ;IACrC,cAAc;GAChB,CAAC;GACD,MAAM,SAAS,MAAM,qBAAqB,SAAS,KAAI,YAAW,QAAQ,MAAM,CAAC;GACjF,OAAO,EAAE,KAAK,EAAE,UAAU,SAAS,KAAI,YAAW,iBAAiB,SAAS,MAAM,CAAC,EAAE,CAAC;EACxF;CACF,CAAC,GACD,iBAAiB,MAAM;EACrB,QAAQ;EACR,cAAc;EACd,SAAS,OAAM,MAAK;GAClB,MAAM,WAAW,MAAM,iBAAiB,MAAM,CAAC,GAAG,QAAQ,IAAI;GAC9D,IAAI,cAAc,UAAU,OAAO,SAAS;GAC5C,MAAM,EAAE,OAAO,WAAW,SAAS;GACnC,MAAM,sBAAsB,EAAE,IAAI,MAAM,IAAI;GAC5C,MAAM,UAAU,sBACZ,MAAM,yBAAyB,QAAQ,gBAAgB,OAAO,mBAAmB,IACjF;GACJ,IAAI,CAAC,SAAS,OAAO,EAAE,KAAK,EAAE,OAAO,+BAA+B,GAAG,GAAG;GAC1E,IAAI;GACJ,IAAI;IACF,OAAO,MAAM,EAAE,IAAI,KAAK;GAC1B,QAAQ;IACN,OAAO,EAAE,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;GACnD;GACA,IAAI,CAAC,aAAa,IAAI,GAAG,OAAO,EAAE,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;GAC1E,IAAI,KAAK,eAAe,KAAA,KAAa,OAAO,KAAK,eAAe,UAC9D,OAAO,EAAE,KAAK,EAAE,OAAO,qBAAqB,GAAG,GAAG;GAEpD,MAAM,aAAa,KAAK,cAAc,QAAQ;GAC9C,IAAI,CAAC,cAAc,UAAU,GAAG,OAAO,EAAE,KAAK,EAAE,OAAO,qBAAqB,GAAG,GAAG;GAClF,IACE,KAAK,cAAc,KAAA,MAClB,OAAO,KAAK,cAAc,YAAY,CAAC,aAAa,KAAK,KAAK,SAAS,IAExE,OAAO,EAAE,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;GAEnD,MAAM,qBAAqB,KAAK;GAChC,MAAM,YAAY,sBAAsB,WAAW,OAAO,WAAW;GACrE,IAAI,KAAK,UAAU,KAAA,KAAa,OAAO,KAAK,UAAU,UACpD,OAAO,EAAE,KAAK,EAAE,OAAO,gBAAgB,GAAG,GAAG;GAE/C,MAAM,kBAAkB,KAAK,UAAU,KAAA,IAAY,OAAO,sBAAsB,KAAK,KAAK;GAG1F,IAAI,KAAK,eAAe,KAAA,KAAa,KAAK,eAAe,aAAa,KAAK,eAAe,OACxF,OAAO,EAAE,KAAK,EAAE,OAAO,wCAAwC,GAAG,GAAG;GAEvE,MAAM,aAAa,KAAK,cAAc;GACtC,IAAI;GACJ,IAAI,KAAK,WAAW,KAAA,GAAW,SAAS,GAAG,6BAA6B;QACnE,IAAI,cAAc,KAAK,MAAM,GAAG,SAAS,KAAK;QAC9C,OAAO,EAAE,KAAK,EAAE,OAAO,iBAAiB,GAAG,GAAG;GAEnD,IAAI,oBAAoB;IACtB,MAAM,WAAW,MAAM,QAAQ,cAAc,SAAS,eAAe,SAAS;IAC9E,IAAI,UAAU;KACZ,IACE,SAAS,wBAAwB,QAAQ,QAAQ,MACjD,SAAS,UAAU,SACnB,SAAS,WAAW,UACpB,SAAS,WAAW,QAEpB,OAAO,EAAE,KAAK,EAAE,OAAO,sBAAsB,GAAG,GAAG;KAErD,MAAM,6BAA6B,QAAQ,YAAY,QAAQ;KAC/D,OAAO,EAAE,KAAK,EAAE,SAAS,iBAAiB,UAAU,mBAAmB,OAAO,CAAC,EAAE,CAAC;IACpF;GACF;GAEA,MAAM,UAAU,MAAM,QAAQ,cAAc,SACzC,OAAO;IACN;IACA,qBAAqB,QAAQ,QAAQ;IACrC,kBAAkB,QAAQ;IAC1B;IACA;IACA;IACA;IACA,OAAO;IACP;GACF,CAAC,CAAC,CACD,MAAM,OAAM,UAAS;IACpB,IAAI,EAAE,iBAAiB,yBAAyB,CAAC,oBAAoB,MAAM;IAC3E,MAAM,WAAW,MAAM,QAAQ,cAAc,SAAS,eAAe,SAAS;IAC9E,IAAI,CAAC,UAAU,MAAM;IACrB,OAAO;GACT,CAAC;GACH,IACE,uBACC,QAAQ,cAAc,aACrB,QAAQ,wBAAwB,QAAQ,QAAQ,MAChD,QAAQ,UAAU,SAClB,QAAQ,WAAW,UACnB,QAAQ,WAAW,SAErB,OAAO,EAAE,KAAK,EAAE,OAAO,sBAAsB,GAAG,GAAG;GAErD,MAAM,6BAA6B,QAAQ,YAAY,OAAO;GAE9D,OAAO,EAAE,KAAK,EAAE,SAAS,iBAAiB,SAAS,mBAAmB,OAAO,CAAC,EAAE,CAAC;EACnF;CACF,CAAC,CACH;AACF;AAEA,SAAgB,gCAAgC,SAAwD;CACtG,MAAM,cAAc,oBAAoB;CACxC,MAAM,uBAAuB,kCAAkC,QAAQ,KAAK;CAC5E,OAAO;EACL,iBAAiB,sCAAsC;GACrD,QAAQ;GACR,cAAc;GACd,SAAS,OAAM,MAAK;IAClB,MAAM,WAAW,MAAM,iBAAiB,MAAM,CAAC,GAAG,QAAQ,IAAI;IAC9D,IAAI,cAAc,UAAU,OAAO,SAAS;IAC5C,MAAM,EAAE,OAAO,WAAW,SAAS;IACnC,MAAM,mBAAmB,EAAE,IAAI,MAAM,IAAI;IACzC,MAAM,UAAU,mBAAmB,MAAM,QAAQ,SAAS,IAAI;KAAE;KAAO,IAAI;IAAiB,CAAC,IAAI;IACjG,IAAI,CAAC,SAAS,OAAO,EAAE,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;IAE/D,MAAM,YACJ,MAAM,QAAQ,IACZ,QAAQ,eAAe,KAAI,kBACzB,cAAc,SAAS,cAAc;KAAE;KAAO,kBAAkB,QAAQ;KAAI,cAAc;IAAO,CAAC,CACpG,CACF,EAAA,CACA,KAAK;IACP,MAAM,SAAS,MAAM,qBAAqB,SAAS,KAAI,YAAW,QAAQ,MAAM,CAAC;IACjF,OAAO,EAAE,KAAK,EAAE,UAAU,SAAS,KAAI,YAAW,iBAAiB,SAAS,MAAM,CAAC,EAAE,CAAC;GACxF;EACF,CAAC;EACD,GAAG,qBAAqB,6CAA6C,SAAS,oBAAoB;EAElG,GAAG,qBAAqB,qCAAqC,SAAS,oBAAoB;EAC1F,iBAAiB,iCAAiC;GAChD,QAAQ;GACR,cAAc;GACd,SAAS,OAAM,MAAK;IAClB,MAAM,WAAW,MAAM,iBAAiB,MAAM,CAAC,GAAG,QAAQ,IAAI;IAC9D,IAAI,cAAc,UAAU,OAAO,SAAS;IAE5C,MAAM,WAAU,MADI,eAAe,QAAQ,gBAAgB,EAAE,IAAI,MAAM,WAAW,CAAC,EAAA,EAC5D;IACvB,IAAI,CAAC,WAAW,CAAC,4BAA4B,SAAS,SAAS,MAAM,GACnE,OAAO,EAAE,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;IAGnD,MAAM,aAAa,MAAM,wBAAwB,QAAQ,YAAY,SAAS,QAAQ,SAAS;IAC/F,IAAI,CAAC,uBAAuB,SAAS,YAAY,SAAS,MAAM,GAC9D,OAAO,EAAE,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;IAEnD,MAAM,SAAS,MAAM,qBAAqB,CAAC,QAAQ,MAAM,CAAC;IAC1D,MAAM,kBACJ,mBAAmB,OAAO,KACzB,MAAM,wBAAwB,MAAM,CAAC,GAAG,QAAQ,MAAM,SAAS,QAAQ,OAAO,MAAO;IACxF,OAAO,EAAE,KAAK,EACZ,SAAS;KAAE,GAAG,iBAAiB,iBAAiB,SAAS,MAAM,GAAG,eAAe;KAAG;IAAW,EACjG,CAAC;GACH;EACF,CAAC;EAID,iBAAiB,+CAA+C;GAC9D,QAAQ;GACR,cAAc;GACd,SAAS,OAAM,MAAK;IAClB,MAAM,WAAW,MAAM,iBAAiB,MAAM,CAAC,GAAG,QAAQ,IAAI;IAC9D,IAAI,cAAc,UAAU,OAAO,SAAS;IAE5C,MAAM,WAAU,MADI,eAAe,QAAQ,gBAAgB,EAAE,IAAI,MAAM,WAAW,CAAC,EAAA,EAC5D;IACvB,IAAI,CAAC,SAAS,OAAO,EAAE,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;IAC/D,MAAM,aAAa,MAAM,wBAAwB,MAAM,CAAC,GAAG,QAAQ,MAAM,SAAS,QAAQ,OAAO;IACjG,IAAI,eAAe,aAAa,OAAO,EAAE,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;IACjF,IAAI,eAAe,aACjB,OAAO,EAAE,KAAK,EAAE,OAAO,2EAA2E,GAAG,GAAG;IAE1G,MAAM,aAAa,QAAQ;IAC3B,IAAI,CAAC,YAAY,OAAO,EAAE,KAAK,EAAE,OAAO,6CAA6C,GAAG,GAAG;IAE3F,IAAI;KAQF,MAAM,WANH,MAAM,WAAW,WAAW,QAAQ,SAAS,KAC7C,MAAM,6BACL,YACA,SACA,MAAM,wBAAwB,YAAY,SAAS,QAAQ,SAAS,CACtE,EAAA,EACoB,aAAa,CAAC,EAAE;KACtC,IAAI,CAAC,SAAS,OAAO,OAAO,EAAE,KAAK,EAAE,OAAO,wCAAwC,GAAG,GAAG;KAC1F,MAAM,QAAQ,MAAM;KACpB,OAAO,EAAE,KAAK,EAAE,SAAS,KAAK,CAAC;IACjC,SAAS,OAAO;KACd,QAAQ,MAAM,sDAAsD;MAAE,WAAW,QAAQ;MAAW;KAAM,CAAC;KAC3G,OAAO,EAAE,KAAK,EAAE,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,GAAG,GAAG;IACtF;GACF;EACF,CAAC;EACD,iBAAiB,kDAAkD;GACjE,QAAQ;GACR,cAAc;GACd,SAAS,OAAM,MAAK;IAClB,MAAM,WAAW,MAAM,iBAAiB,MAAM,CAAC,GAAG,QAAQ,IAAI;IAC9D,IAAI,cAAc,UAAU,OAAO,SAAS;IAC5C,MAAM,QAAQ,MAAM,eAAe,QAAQ,gBAAgB,EAAE,IAAI,MAAM,WAAW,CAAC;IACnF,MAAM,UAAU,OAAO;IACvB,IAAI,CAAC,SAAS,CAAC,SAAS,OAAO,EAAE,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;IACzE,MAAM,aAAa,MAAM,wBAAwB,MAAM,CAAC,GAAG,QAAQ,MAAM,SAAS,QAAQ,OAAO;IACjG,IAAI,eAAe,aAAa,OAAO,EAAE,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;IACjF,IAAI,eAAe,aACjB,OAAO,EAAE,KAAK,EAAE,OAAO,8EAA8E,GAAG,GAAG;IAE7G,MAAM,oBAAoB,QAAQ;IAClC,IAAI,CAAC,qBAAqB,CAAC,mBAAmB,OAAO,GACnD,OAAO,EAAE,KAAK,EAAE,OAAO,wDAAwD,GAAG,GAAG;IAGvF,MAAM,UAAU,MAAM,eACpB,QAAQ,YACR,QAAQ,WACR,QAAQ,wBAAwB,uBAClC;IACA,MAAM,gCAAgC,QAAQ,SAAS,CAAC,CAAC,OAAM,UAAS;KACtE,QAAQ,KAAK,iFAAiF;MAC5F,WAAW,QAAQ;MACnB;KACF,CAAC;IACH,CAAC;IACD,IAAI;KAMF,IAAI,MALkB,kBAAkB,uBAAuB;MAC7D,eAAe,MAAM;MACrB,OAAO,QAAQ;MACf,WAAW,QAAQ;KACrB,CAAC,MACe,aAAa,OAAO,EAAE,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;KAE9E,MAAM,QAAQ,YAAY,oBAAoB,EAAE,YAAY,QAAQ,UAAU,CAAC,CAAC,CAAC,OAAM,UAAS;MAC9F,QAAQ,KAAK,2EAA2E;OACtF,WAAW,QAAQ;OACnB;MACF,CAAC;KACH,CAAC;KACD,OAAO,EAAE,KAAK;MAAE,WAAW;MAAM;KAAQ,CAAC;IAC5C,SAAS,OAAO;KACd,QAAQ,MAAM,yDAAyD;MACrE,WAAW,QAAQ;MACnB;KACF,CAAC;KACD,OAAO,EAAE,KAAK,EAAE,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,GAAG,GAAG;IACtF;GACF;EACF,CAAC;EACD,iBAAiB,iCAAiC;GAChD,QAAQ;GACR,cAAc;GACd,SAAS,OAAM,MAAK;IAClB,MAAM,WAAW,MAAM,iBAAiB,MAAM,CAAC,GAAG,QAAQ,IAAI;IAC9D,IAAI,cAAc,UAAU,OAAO,SAAS;IAC5C,MAAM,QAAQ,MAAM,eAAe,QAAQ,gBAAgB,EAAE,IAAI,MAAM,WAAW,CAAC;IACnF,MAAM,UAAU,OAAO;IACvB,IACE,CAAC,SACD,CAAC,WACD,QAAQ,UAAU,SAAS,OAAO,SAClC,QAAQ,WAAW,SAAS,OAAO,QAEnC,OAAO,EAAE,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;IAEnD,IAAI;KAGF,MAAM,gCAAgC,QAAQ,SAAS,CAAC,CAAC,OAAM,UAAS;MACtE,QAAQ,KAAK,uEAAuE;OAClF,WAAW,QAAQ;OACnB;MACF,CAAC;KACH,CAAC;KACD,MAAM,QAAQ,YAAY,cAAc,EAAE,WAAW,QAAQ,UAAU,CAAC;IAC1E,SAAS,OAAO;KACd,QAAQ,MAAM,kEAAkE;MAC9E,WAAW,QAAQ;MACnB;KACF,CAAC;IACH;IACA,IAAI,QAAQ,mBACV,MAAM,QAAQ,kBAAkB,cAAc;KAC5C,eAAe,MAAM;KACrB,GAAI,QAAQ,YAAY,EAAE,WAAW,QAAQ,UAAU,IAAI,CAAC;KAC5D,OAAO,QAAQ;KACf,WAAW,QAAQ;KACnB,eAAe;IACjB,CAAC;SACI;KACL,MAAM,QAAQ,WAAW,uBAAuB;MAAE,OAAO,QAAQ;MAAO,WAAW,QAAQ;KAAU,CAAC;KACtG,MAAM,MAAM,cAAc,SAAS,OAAO,QAAQ,EAAE;KACpD,6BAAkC,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,UAAmB;MACvE,QAAQ,MAAM,oEAAoE;OAChF,WAAW,QAAQ;OACnB,WAAW,QAAQ;OACnB;MACF,CAAC;KACH,CAAC;IACH;IACA,OAAO,EAAE,KAAK,EAAE,SAAS,KAAK,CAAC;GACjC;EACF,CAAC;EACD,iBAAiB,4CAA4C;GAC3D,QAAQ;GACR,cAAc;GACd,SAAS,OAAM,MAAK;IAClB,MAAM,WAAW,MAAM,iBAAiB,MAAM,CAAC,GAAG,QAAQ,IAAI;IAC9D,IAAI,cAAc,UAAU,OAAO,SAAS;IAE5C,MAAM,cAAa,MADC,EAAE,IAAI,KAAK,CAAC,CAAC,YAAY,KAAA,CAAS,EAAA,EAC7B;IACzB,IAAI,eAAe,aAAa,eAAe,OAC7C,OAAO,EAAE,KAAK,EAAE,OAAO,wCAAwC,GAAG,GAAG;IAEvE,MAAM,YAAY,EAAE,IAAI,MAAM,WAAW;IACzC,MAAM,QAAQ,MAAM,eAAe,QAAQ,gBAAgB,SAAS;IACpE,MAAM,MAAM,OAAO;IAGnB,IAAI,CAAC,SAAS,CAAC,OAAO,IAAI,UAAU,SAAS,OAAO,SAAS,IAAI,WAAW,SAAS,OAAO,QAC1F,OAAO,EAAE,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;IAInD,IAAI,CAAC,QAAQ,WACX,OAAO,EAAE,KACP,EACE,OACE,wGACJ,GACA,GACF;IAKF,IACE,IAAI,OAAO,WAAW,2BAA2B,KAChD,IAAI,qBAAqB,QACvB,MAAM,QAAQ,UAAU,wBAAwB;KAC/C,OAAO,IAAI;KACX,kBAAkB,IAAI;KACtB;IACF,CAAC,GAEH,OAAO,EAAE,KAAK,EAAE,OAAO,2CAA2C,GAAG,GAAG;IAG1E,IAAI,eAAe,SAAS,CAAC,IAAI,kBAC/B,OAAO,EAAE,KAAK,EAAE,OAAO,iEAAiE,GAAG,GAAG;IAEhG,MAAM,aAAa,uBAAuB,KAAK,UAAU;IACzD,MAAM,aAAa,QAAQ;IAE3B,MAAM,YAAY,aAAa,MAAM,qBAAqB,YAAY,KAAK,UAAU,IAAI,CAAC;IAC1F,IAAI,UAAU,SAAS,KAAK,CAAC,QAAQ,YACnC,OAAO,EAAE,KAAK,EAAE,OAAO,+DAA+D,GAAG,GAAG;IAE9F,IAAI,YAAY,qBAAqB,CAAC,CAAC,MAAK,QAAO,UAAU,SAAS,IAAI,QAAQ,CAAC,GACjF,OAAO,EAAE,KAAK,EAAE,OAAO,oEAAoE,GAAG,GAAG;IAMnG,MAAM,cAAc,YAAY;KAC9B,KAAK,MAAM,YAAY,WAAW,MAAM,QAAQ,WAAY;MAAE;MAAU;KAAW,CAAC;IACtF;IACA,IAAI,eAAe,WAAW,MAAM,YAAY;IAChD,MAAM,UAAU,MAAM,MAAM,cAAc,SAAS,cAAc;KAAE;KAAW;IAAW,CAAC;IAC1F,IAAI,CAAC,SAAS,OAAO,EAAE,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;IAC/D,IAAI,eAAe,OAAO,MAAM,YAAY;IAI5C,MAAM,OAAO,MAAM,YAAY,WAAW,SAAS;IACnD,IAAI,QAAQ,UAAU,SAAS,GAAG,MAAM,WAAY,cAAc,EAAE,UAAU,CAAC;SAC1E,IAAI,MAAM,MAAM,WAAY,cAAc,MAAM,EAAE,WAAW,CAAC;IACnE,MAAM,SAAS,MAAM,qBAAqB,CAAC,QAAQ,MAAM,CAAC;IAC1D,OAAO,EAAE,KAAK,EAAE,SAAS,iBAAiB,SAAS,MAAM,EAAE,CAAC;GAC9D;EACF,CAAC;EACD,iBAAiB,uCAAuC;GACtD,QAAQ;GACR,cAAc;GACd,SAAS,OAAM,MAAK;IAClB,MAAM,WAAW,MAAM,iBAAiB,MAAM,CAAC,GAAG,QAAQ,IAAI;IAC9D,IAAI,cAAc,UAAU,OAAO,SAAS;IAC5C,MAAM,YAAY,EAAE,IAAI,MAAM,WAAW;IACzC,MAAM,QAAQ,MAAM,eAAe,QAAQ,gBAAgB,SAAS;IACpE,MAAM,MAAM,OAAO;IACnB,IAAI,CAAC,SAAS,CAAC,OAAO,IAAI,UAAU,SAAS,OAAO,SAAS,IAAI,WAAW,SAAS,OAAO,QAC1F,OAAO,EAAE,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;IAEnD,IAAI,CAAC,QAAQ,YAAY,OAAO,EAAE,KAAK,EAAE,OAAO,6CAA6C,GAAG,GAAG;IAEnG,MAAM,UAAS,MADO,0BAA0B,QAAQ,YAAY,KAAK,QAAQ,SAAS,EAAA,CACnE,MAAM,GAAG,MAAM,EAAE,UAAU,QAAQ,IAAI,EAAE,UAAU,QAAQ,CAAC,CAAC,CAAC;IACrF,IAAI,CAAC,QAAQ,OAAO,EAAE,KAAK,EAAE,OAAO,gDAAgD,GAAG,GAAG;IAC1F,MAAM,SAAS,MAAM,QAAQ,eAAe,IAAI;KAAE,OAAO,IAAI;KAAO,QAAQ,IAAI;IAAO,CAAC;IACxF,MAAM,iBAAiB,IAAI,eAAe;IAC1C,eAAe,IAAI,QAAQ;KAAE,UAAU,IAAI;KAAQ,gBAAgB,IAAI;IAAM,CAAC;IAC9E,IAAI;KACF,MAAM,QAAQ,MAAM,YAAY,WAAW,YAAY;MACrD,MAAM,YAAY,MAAM,QAAQ,WAAY,oBAAoB;OAC9D,UAAU,OAAO;OACjB;OACA;OACA,GAAI,QAAQ,kBAAkB,EAAE,OAAO,WAAW,OAAO,eAAe,EAAE,IAAI,CAAC;MACjF,CAAC;MACD,MAAM,QAAQ,YAAY,sBAAsB,SAAS,IAAI;MAC7D,IAAI,OAAO,MAAM,MAAM,cAAc,SAAS,OAAO;OAAE;OAAW,OAAO;MAAM,CAAC;MAChF,OAAO;KACT,CAAC;KACD,IAAI,CAAC,OAAO,OAAO,EAAE,KAAK,EAAE,OAAO,gDAAgD,GAAG,GAAG;KACzF,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC;IACzB,SAAS,OAAO;KACd,OAAO,EAAE,KAAK,EAAE,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,GAAG,GAAG;IACtF;GACF;EACF,CAAC;CACH;AACF"}
+{"version":3,"file":"source-control-sessions.js","names":[],"sources":["../../src/routes/source-control-sessions.ts"],"sourcesContent":["import type { MountedMastraCode } from '@mastra/code-sdk';\nimport { resolveModel } from '@mastra/code-sdk/agents/model';\nimport { RequestContext } from '@mastra/core/request-context';\nimport type { ApiRoute, IUserProvider } from '@mastra/core/server';\nimport { registerApiRoute } from '@mastra/core/server';\nimport { createSignal } from '@mastra/core/signals';\nimport { UniqueViolationError } from '@mastra/core/storage';\nimport type { Context } from 'hono';\n\nimport { reclaimDeletedSessionSandbox } from '../integrations/github/sandbox-release.js';\nimport { isValidGitRef } from '../sandbox/git-ref.js';\nimport type { SessionRetirementCoordinator } from '../sandbox/session-retirement.js';\nimport { waitForPendingFilesystemCapture } from '../session/filesystem-capture.js';\nimport { seedSessionOrg } from '../session/org-seed.js';\nimport {\n  isRunBound,\n  isWorkerSession,\n  sessionMemoryResourceId,\n  listFactorySessionThreads,\n  sessionThreadsToMove,\n  userSessionResourceFor,\n} from '../session/session-threads.js';\nimport { normalizeSessionTitle } from '../session/session-title.js';\nimport { SESSION_OWNER_SIGNAL_TAG } from '../session-owner-signal.js';\nimport type { AuditRecorder } from '../storage/domains/audit/domain.js';\nimport type { FilesystemStorage } from '../storage/domains/filesystem/base.js';\nimport type { MemorySettingsStorage } from '../storage/domains/memory-settings/base.js';\nimport type { FactoryProjectsStorage } from '../storage/domains/projects/base.js';\nimport type {\n  ProjectRepository,\n  SourceControlSession,\n  SourceControlStorageHandle,\n} from '../storage/domains/source-control/base.js';\nimport type { WorkItemsStorage } from '../storage/domains/work-items/base.js';\nimport type { RouteAuth } from './route.js';\nimport { canReadSessionResource, canSwitchSessionModel, canViewSourceControlSession } from './session-access.js';\n\ntype RouteContext = Context;\n\nfunction loose(c: unknown): RouteContext {\n  return c as RouteContext;\n}\n\nexport const USER_SESSION_BRANCH_PREFIX = 'user/session-';\n// Slack thread sessions live on `slack/<thread>` branches (integrations/slack/slack.ts threadBranch).\nconst SLACK_SESSION_BRANCH_PREFIX = 'slack/';\nconst UUID_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/;\nconst MAX_SESSION_OWNER_PROFILES = 100;\nconst MAX_SESSION_OWNER_PROFILE_CACHE_ENTRIES = 500;\nconst SESSION_OWNER_PROFILE_TTL_MS = 5 * 60_000;\n\ninterface SessionOwnerProfile {\n  id: string;\n  name: string;\n  avatarUrl?: string;\n}\n\ntype SessionOwnerUserProvider = Pick<IUserProvider, 'getUser'> & Partial<Pick<IUserProvider, 'getUsers'>>;\n\nexport interface SourceControlSessionRoutesOptions {\n  auth: RouteAuth;\n  sourceControls: readonly SourceControlStorageHandle[];\n  projects: Pick<FactoryProjectsStorage, 'get'>;\n  users?: SessionOwnerUserProvider;\n  controller?: MountedMastraCode['controller'];\n  audit?: AuditRecorder;\n  memorySettings: Pick<MemorySettingsStorage, 'get'>;\n  sessionRetirement?: SessionRetirementCoordinator;\n  /** Whether the host sandbox can recreate a session's sandbox (false for local). */\n  sandboxRecreateSupported?: boolean;\n  /** Turn-end file listings, cleared on recreate so the panel stops showing the old sandbox's files. */\n  filesystem?: Pick<FilesystemStorage, 'deleteResourceFiles'>;\n  /** How long recreate waits for an aborted run to settle before destroying. */\n  abortSettleTimeoutMs?: number;\n  workItems?: Pick<WorkItemsStorage, 'clearSessionReferences' | 'hasRunBindingForSession'>;\n  /** Moves a thread, with everything keyed by its resource, when a session's visibility changes. */\n  moveThread?: (input: { threadId: string; resourceId: string }) => Promise<unknown>;\n}\n\nconst ABORT_SETTLE_TIMEOUT_MS = 5_000;\nconst ABORT_SETTLE_POLL_MS = 50;\n\ntype SessionManagePermission = 'allowed' | 'forbidden' | 'not-found';\n\n/**\n * Who may manage a session's sandbox: its owner, or an org admin. Private\n * sessions stay owner-only and look missing to everyone else, matching the\n * session GET. The admin check is a provider call, so owners skip it.\n */\nasync function sessionManagePermission(\n  c: RouteContext,\n  auth: RouteAuth,\n  tenant: { orgId: string; userId: string },\n  session: SourceControlSession,\n): Promise<SessionManagePermission> {\n  if (session.orgId !== tenant.orgId) return 'not-found';\n  const isOwner = session.userId === tenant.userId;\n  if (session.visibility === 'private' && !isOwner) return 'not-found';\n  if (isOwner) return 'allowed';\n  return (await auth.isOrganizationAdmin(c, session.orgId)) ? 'allowed' : 'forbidden';\n}\n\nfunction canRecreateSandbox(options: SourceControlSessionRoutesOptions): boolean {\n  return Boolean(options.sessionRetirement) && options.sandboxRecreateSupported === true;\n}\n\ntype SessionCapabilities = { recreateSandbox: boolean; takeOwnership: boolean; switchModel: boolean };\n\nfunction withCapabilities<T extends object>(session: T, capabilities: SessionCapabilities) {\n  return { ...session, capabilities };\n}\n\ntype OwnershipRefusal = { status: 409 | 503; error: string };\n\nasync function ownershipRefusal(\n  session: SourceControlSession,\n  options: SourceControlSessionRoutesOptions,\n): Promise<OwnershipRefusal | null> {\n  // Shared threads live on the Factory's memory resource, which an owner change keeps; without one they sit on the owner's.\n  if (!session.factoryProjectId) {\n    return { status: 409, error: \"This session isn't linked to a Factory, so it can't change owner.\" };\n  }\n  if (!options.workItems) {\n    return {\n      status: 503,\n      error: \"Session ownership can't change yet: Factory storage is still starting up. Try again in a moment.\",\n    };\n  }\n  // Slack finds a thread's session by its sender, a Factory run's session follows its work item,\n  // and a side session acts for the session that started it.\n  if (session.branch.startsWith(SLACK_SESSION_BRANCH_PREFIX) || (await isWorkerSession(session, options.workItems))) {\n    return { status: 409, error: 'Only user sessions can change owner' };\n  }\n  return null;\n}\n\n/** Marks the takeover in every thread of the session: the transcript draws it as a divider and the model reads it as context. */\nasync function markOwnerChange(\n  options: SourceControlSessionRoutesOptions,\n  session: SourceControlSession,\n  newOwner: { id: string; name?: string },\n) {\n  const { controller } = options;\n  const memory = await controller?.getMastra()?.getStorage()?.getStore('memory');\n  if (!controller || !memory) return;\n  const threads = await listFactorySessionThreads(controller, session, options.workItems);\n  if (threads.length === 0) return;\n  const contents = `${newOwner.name ?? 'A teammate'} took ownership`;\n  await memory.saveMessages({\n    messages: threads.map(thread =>\n      createSignal({ type: 'reactive', tagName: SESSION_OWNER_SIGNAL_TAG, contents, author: newOwner }).toDBMessage({\n        threadId: thread.id,\n        resourceId: thread.resourceId,\n      }),\n    ),\n  });\n}\n\n/** Abort the session's active run and wait (bounded) for it to stop. Returns whether a run was aborted. */\nasync function abortActiveRun(\n  controller: MountedMastraCode['controller'] | undefined,\n  sessionId: string,\n  settleTimeoutMs: number,\n): Promise<boolean> {\n  if (!controller) return false;\n  try {\n    const live = await controller.getSession(sessionId);\n    if (!live?.stream.isActive()) return false;\n    live.abort();\n    const deadline = Date.now() + settleTimeoutMs;\n    while (live.stream.isActive() && Date.now() < deadline) {\n      await new Promise(resolve => setTimeout(resolve, ABORT_SETTLE_POLL_MS));\n    }\n    if (live.stream.isActive()) {\n      console.warn('[Factory Sessions] Aborted run did not settle in time', { sessionId });\n    }\n    return true;\n  } catch (error) {\n    console.warn('[Factory Sessions] Failed to abort the active run', { sessionId, error });\n    return false;\n  }\n}\n\ninterface ResolvedProjectRepository {\n  sourceControl: SourceControlStorageHandle;\n  project: ProjectRepository;\n  factoryProjectId: string;\n  defaultBranch: string;\n}\n\nasync function resolveOrgTenant(\n  c: RouteContext,\n  auth: RouteAuth,\n): Promise<{ tenant: { orgId: string; userId: string } } | { response: Response }> {\n  await auth.ensureUser(c);\n  const tenant = auth.tenant(c);\n  if (!tenant) return { response: c.json({ error: 'unauthorized', reason: 'auth_required' }, 401) };\n  if (!tenant.orgId) {\n    return {\n      response: c.json(\n        {\n          error: 'organization_required',\n          message: 'Source-control sessions require an organization.',\n        },\n        403,\n      ),\n    };\n  }\n  return { tenant: { orgId: tenant.orgId, userId: tenant.userId } };\n}\n\nasync function resolveProjectRepository(\n  sourceControls: readonly SourceControlStorageHandle[],\n  orgId: string,\n  projectRepositoryId: string,\n): Promise<ResolvedProjectRepository | null> {\n  const matches = (\n    await Promise.all(\n      sourceControls.map(async sourceControl => {\n        const project = await sourceControl.projectRepositories.get({ orgId, id: projectRepositoryId });\n        if (!project) return null;\n        const repository = await sourceControl.repositories.get({ orgId, id: project.repositoryId });\n        if (!repository) return null;\n        const connection = await sourceControl.connections.get({ orgId, id: project.connectionId });\n        if (!connection) return null;\n        return {\n          sourceControl,\n          project,\n          factoryProjectId: connection.factoryProjectId,\n          defaultBranch: project.branch ?? repository.defaultBranch,\n        };\n      }),\n    )\n  ).filter((match): match is ResolvedProjectRepository => match !== null);\n  if (matches.length > 1) {\n    throw new Error('Factory project repository exists in multiple source-control providers.');\n  }\n  return matches[0] ?? null;\n}\n\nasync function resolveSession(\n  sourceControls: readonly SourceControlStorageHandle[],\n  sessionId: string,\n): Promise<{ sourceControl: SourceControlStorageHandle; session: SourceControlSession } | null> {\n  const matches = (\n    await Promise.all(\n      sourceControls.map(async sourceControl => ({\n        sourceControl,\n        session: await sourceControl.sessions.getBySessionId(sessionId),\n      })),\n    )\n  ).filter(\n    (match): match is { sourceControl: SourceControlStorageHandle; session: SourceControlSession } =>\n      match.session !== null,\n  );\n  if (matches.length > 1) throw new Error('Factory session exists in multiple source-control providers.');\n  return matches[0] ?? null;\n}\n\nasync function resolveReadableSession(\n  options: SourceControlSessionRoutesOptions,\n  sessionId: string,\n  viewer: { orgId: string; userId: string },\n) {\n  const match = await resolveSession(options.sourceControls, sessionId);\n  if (!match || !canViewSourceControlSession(match.session, viewer)) return null;\n  const resourceId = await sessionMemoryResourceId(options.controller, match.session, options.workItems);\n  if (!canReadSessionResource(match.session, resourceId, viewer)) return null;\n  return { ...match, resourceId };\n}\n\n/**\n * Start the live conversation for a user session on its own thread (thread id === session id), under the resource\n * its visibility gives it. Agent-controller\n * routes only act on started sessions, so the first prompt the page sends right after creation always lands on the\n * thread the page reads, with the org and Factory address already in state. Get-or-create, so retried or repeated\n * creates are safe.\n */\nasync function startUserSessionConversation(\n  controller: SourceControlSessionRoutesOptions['controller'],\n  session: SourceControlSession,\n  // Its owner's resource while private, its Factory's when created shared (a run from a board card).\n  resourceId: string = userSessionResourceFor(session, session.visibility === 'org' ? 'org' : 'private'),\n) {\n  if (!controller) return undefined;\n  const requestContext = new RequestContext();\n  requestContext.set('user', { workosId: session.userId, organizationId: session.orgId });\n  const live = await controller.createSession({\n    id: session.sessionId,\n    resourceId,\n    threadId: session.sessionId,\n    ownerId: session.userId,\n    requestContext,\n  });\n  await seedSessionOrg(live, session.orgId);\n  // Server-side gates (the transition tool, factory-phase processor) resolve the session address from state, so\n  // seed it here rather than waiting for the page to connect.\n  if (session.factoryProjectId) {\n    await live.state.set({\n      factoryProjectId: session.factoryProjectId,\n      ...(session.projectRepositoryId ? { projectRepositoryId: session.projectRepositoryId } : {}),\n    });\n  }\n  return live;\n}\n\nfunction isJsonObject(value: unknown): value is Record<string, unknown> {\n  return typeof value === 'object' && value !== null && !Array.isArray(value);\n}\n\nfunction createSessionNaming() {\n  const inFlight = new Map<string, Promise<string | null>>();\n  return (sessionId: string, run: () => Promise<string | null>) => {\n    const pending = inFlight.get(sessionId);\n    if (pending) return pending;\n    const started = run().finally(() => inFlight.delete(sessionId));\n    inFlight.set(sessionId, started);\n    return started;\n  };\n}\n\nconst OWNER_CONFLICT_MESSAGES = {\n  stale_owner: 'Someone else owns this session now',\n  branch_owned: 'You already have a session on this branch',\n} as const;\n\nfunction titleModel(modelId: string) {\n  return ({ requestContext }: { requestContext: RequestContext }) =>\n    resolveModel(modelId, { remapForCodexOAuth: true, requestContext });\n}\n\nfunction createSessionOwnerProfileResolver(users: SessionOwnerUserProvider | undefined) {\n  const cache = new Map<string, { profile?: SessionOwnerProfile; expiresAt: number }>();\n  const cacheProfile = (userId: string, profile: SessionOwnerProfile | undefined, expiresAt: number) => {\n    cache.delete(userId);\n    cache.set(userId, { profile, expiresAt });\n    if (cache.size > MAX_SESSION_OWNER_PROFILE_CACHE_ENTRIES) {\n      const oldestUserId = cache.keys().next().value;\n      if (oldestUserId !== undefined) cache.delete(oldestUserId);\n    }\n  };\n\n  return async (userIds: string[]): Promise<Map<string, SessionOwnerProfile>> => {\n    if (!users) return new Map();\n    const requestedUserIds = [...new Set(userIds)].slice(0, MAX_SESSION_OWNER_PROFILES);\n    const profiles = new Map<string, SessionOwnerProfile>();\n    const unresolvedUserIds: string[] = [];\n    const now = Date.now();\n\n    for (const userId of requestedUserIds) {\n      const cached = cache.get(userId);\n      if (!cached || cached.expiresAt <= now) {\n        cache.delete(userId);\n        unresolvedUserIds.push(userId);\n      } else if (cached.profile) {\n        profiles.set(userId, cached.profile);\n      }\n    }\n    if (unresolvedUserIds.length === 0) return profiles;\n\n    let resolvedUsers: Array<Awaited<ReturnType<SessionOwnerUserProvider['getUser']>>>;\n    if (users.getUsers) {\n      try {\n        resolvedUsers = await users.getUsers(unresolvedUserIds);\n      } catch (error) {\n        console.warn('[Factory Sessions] Bulk owner profile lookup failed; falling back to individual lookups', {\n          error: error instanceof Error ? error.message : String(error),\n        });\n        resolvedUsers = (await Promise.allSettled(unresolvedUserIds.map(userId => users.getUser(userId))))\n          .filter(result => result.status === 'fulfilled')\n          .map(result => result.value);\n      }\n    } else {\n      resolvedUsers = (await Promise.allSettled(unresolvedUserIds.map(userId => users.getUser(userId))))\n        .filter(result => result.status === 'fulfilled')\n        .map(result => result.value);\n    }\n\n    for (const user of resolvedUsers) {\n      if (!user) continue;\n      const name = user.name?.trim() || user.email?.trim();\n      if (!name) continue;\n      profiles.set(user.id, {\n        id: user.id,\n        name,\n        ...(user.avatarUrl ? { avatarUrl: user.avatarUrl } : {}),\n      });\n    }\n    const expiresAt = now + SESSION_OWNER_PROFILE_TTL_MS;\n    for (const userId of unresolvedUserIds) cacheProfile(userId, profiles.get(userId), expiresAt);\n    return profiles;\n  };\n}\n\nfunction withOwnerProfile(session: SourceControlSession, owners: Map<string, SessionOwnerProfile>) {\n  const owner = owners.get(session.userId);\n  return owner ? { ...session, owner } : session;\n}\n\nfunction projectSessionRoutes(\n  path: '/web/source-control/projects/:id/sessions' | '/web/github/projects/:id/sessions',\n  options: SourceControlSessionRoutesOptions,\n  resolveOwnerProfiles: ReturnType<typeof createSessionOwnerProfileResolver>,\n): ApiRoute[] {\n  return [\n    registerApiRoute(path, {\n      method: 'GET',\n      requiresAuth: false,\n      handler: async c => {\n        const resolved = await resolveOrgTenant(loose(c), options.auth);\n        if ('response' in resolved) return resolved.response;\n        const { orgId, userId } = resolved.tenant;\n        const projectRepositoryId = c.req.param('id');\n        const project = projectRepositoryId\n          ? await resolveProjectRepository(options.sourceControls, orgId, projectRepositoryId)\n          : null;\n        if (!project) return c.json({ error: 'Project repository not found' }, 404);\n        const sessions = await project.sourceControl.sessions.list({\n          projectRepositoryId: project.project.id,\n          viewerUserId: userId,\n        });\n        const owners = await resolveOwnerProfiles(sessions.map(session => session.userId));\n        return c.json({ sessions: sessions.map(session => withOwnerProfile(session, owners)) });\n      },\n    }),\n    registerApiRoute(path, {\n      method: 'POST',\n      requiresAuth: false,\n      handler: async c => {\n        const resolved = await resolveOrgTenant(loose(c), options.auth);\n        if ('response' in resolved) return resolved.response;\n        const { orgId, userId } = resolved.tenant;\n        const projectRepositoryId = c.req.param('id');\n        const project = projectRepositoryId\n          ? await resolveProjectRepository(options.sourceControls, orgId, projectRepositoryId)\n          : null;\n        if (!project) return c.json({ error: 'Project repository not found' }, 404);\n        let body: unknown;\n        try {\n          body = await c.req.json();\n        } catch {\n          return c.json({ error: 'Invalid JSON body' }, 400);\n        }\n        if (!isJsonObject(body)) return c.json({ error: 'Invalid JSON body' }, 400);\n        if (body.baseBranch !== undefined && typeof body.baseBranch !== 'string') {\n          return c.json({ error: 'Invalid baseBranch' }, 400);\n        }\n        const baseBranch = body.baseBranch ?? project.defaultBranch;\n        if (!isValidGitRef(baseBranch)) return c.json({ error: 'Invalid baseBranch' }, 400);\n        if (\n          body.sessionId !== undefined &&\n          (typeof body.sessionId !== 'string' || !UUID_PATTERN.test(body.sessionId))\n        ) {\n          return c.json({ error: 'Invalid sessionId' }, 400);\n        }\n        const requestedSessionId = body.sessionId;\n        const sessionId = requestedSessionId ?? globalThis.crypto.randomUUID();\n        if (body.title !== undefined && typeof body.title !== 'string') {\n          return c.json({ error: 'Invalid title' }, 400);\n        }\n        const normalizedTitle = body.title === undefined ? null : normalizeSessionTitle(body.title);\n        // Sessions start shared on the Factory. Only a session someone opens for themselves (New session) asks for\n        // `private`.\n        if (body.visibility !== undefined && body.visibility !== 'private' && body.visibility !== 'org') {\n          return c.json({ error: \"visibility must be 'private' or 'org'\" }, 400);\n        }\n        const visibility = body.visibility ?? 'org';\n        let branch: string;\n        if (body.branch === undefined) branch = `${USER_SESSION_BRANCH_PREFIX}${sessionId}`;\n        else if (isValidGitRef(body.branch)) branch = body.branch;\n        else return c.json({ error: 'Invalid branch' }, 400);\n\n        if (requestedSessionId) {\n          const existing = await project.sourceControl.sessions.getBySessionId(sessionId);\n          if (existing) {\n            if (\n              existing.projectRepositoryId !== project.project.id ||\n              existing.orgId !== orgId ||\n              existing.userId !== userId ||\n              existing.branch !== branch\n            ) {\n              return c.json({ error: 'Session ID conflict' }, 409);\n            }\n            await startUserSessionConversation(options.controller, existing);\n            return c.json({\n              session: withCapabilities(existing, {\n                recreateSandbox: canRecreateSandbox(options),\n                takeOwnership: false,\n                switchModel: true,\n              }),\n            });\n          }\n        }\n\n        const session = await project.sourceControl.sessions\n          .create({\n            sessionId,\n            projectRepositoryId: project.project.id,\n            factoryProjectId: project.factoryProjectId,\n            orgId,\n            userId,\n            branch,\n            baseBranch,\n            title: normalizedTitle,\n            visibility,\n          })\n          .catch(async error => {\n            if (!(error instanceof UniqueViolationError) || !requestedSessionId) throw error;\n            const conflict = await project.sourceControl.sessions.getBySessionId(sessionId);\n            if (!conflict) throw error;\n            return conflict;\n          });\n        if (\n          requestedSessionId &&\n          (session.sessionId !== sessionId ||\n            session.projectRepositoryId !== project.project.id ||\n            session.orgId !== orgId ||\n            session.userId !== userId ||\n            session.branch !== branch)\n        ) {\n          return c.json({ error: 'Session ID conflict' }, 409);\n        }\n        await startUserSessionConversation(options.controller, session);\n        // The creator owns the session, so no admin check is needed.\n        return c.json({\n          session: withCapabilities(session, {\n            recreateSandbox: canRecreateSandbox(options),\n            takeOwnership: false,\n            switchModel: true,\n          }),\n        });\n      },\n    }),\n  ];\n}\n\nexport function buildSourceControlSessionRoutes(options: SourceControlSessionRoutesOptions): ApiRoute[] {\n  const nameSession = createSessionNaming();\n  const resolveOwnerProfiles = createSessionOwnerProfileResolver(options.users);\n  return [\n    registerApiRoute('/web/factory/projects/:id/sessions', {\n      method: 'GET',\n      requiresAuth: false,\n      handler: async c => {\n        const resolved = await resolveOrgTenant(loose(c), options.auth);\n        if ('response' in resolved) return resolved.response;\n        const { orgId, userId } = resolved.tenant;\n        const factoryProjectId = c.req.param('id');\n        const project = factoryProjectId ? await options.projects.get({ orgId, id: factoryProjectId }) : null;\n        if (!project) return c.json({ error: 'Factory not found' }, 404);\n        // Storage is partitioned per provider; a Factory's sessions can live in any of them.\n        const sessions = (\n          await Promise.all(\n            options.sourceControls.map(sourceControl =>\n              sourceControl.sessions.listByProject({ orgId, factoryProjectId: project.id, viewerUserId: userId }),\n            ),\n          )\n        ).flat();\n        const owners = await resolveOwnerProfiles(sessions.map(session => session.userId));\n        return c.json({ sessions: sessions.map(session => withOwnerProfile(session, owners)) });\n      },\n    }),\n    ...projectSessionRoutes('/web/source-control/projects/:id/sessions', options, resolveOwnerProfiles),\n    // Compatibility for existing clients; new code uses the provider-neutral path.\n    ...projectSessionRoutes('/web/github/projects/:id/sessions', options, resolveOwnerProfiles),\n    registerApiRoute('/web/user-sessions/:sessionId', {\n      method: 'GET',\n      requiresAuth: false,\n      handler: async c => {\n        const resolved = await resolveOrgTenant(loose(c), options.auth);\n        if ('response' in resolved) return resolved.response;\n        const readable = await resolveReadableSession(options, c.req.param('sessionId'), resolved.tenant);\n        if (!readable) return c.json({ error: 'Session not found' }, 404);\n        const { session, resourceId } = readable;\n        const owners = await resolveOwnerProfiles([session.userId]);\n        const recreateSandbox =\n          canRecreateSandbox(options) &&\n          (await sessionManagePermission(loose(c), options.auth, resolved.tenant, session)) === 'allowed';\n        const takeOwnership =\n          session.userId !== resolved.tenant.userId && (await ownershipRefusal(session, options)) === null;\n        return c.json({\n          session: {\n            ...withCapabilities(withOwnerProfile(session, owners), {\n              recreateSandbox,\n              takeOwnership,\n              switchModel: canSwitchSessionModel(session, resolved.tenant),\n            }),\n            // The client opens the session by its id and creates it under this resource.\n            resourceId,\n          },\n        });\n      },\n    }),\n    // Start a session's sandbox without sending it a message, for the Files tab.\n    // Brings the controller session online as the row's owner, as a delivered\n    // message would, then starts its sandbox; a running sandbox returns at once.\n    registerApiRoute('/web/user-sessions/:sessionId/sandbox/start', {\n      method: 'POST',\n      requiresAuth: false,\n      handler: async c => {\n        const resolved = await resolveOrgTenant(loose(c), options.auth);\n        if ('response' in resolved) return resolved.response;\n        const match = await resolveSession(options.sourceControls, c.req.param('sessionId'));\n        const session = match?.session;\n        if (!session) return c.json({ error: 'Session not found' }, 404);\n        const permission = await sessionManagePermission(loose(c), options.auth, resolved.tenant, session);\n        if (permission === 'not-found') return c.json({ error: 'Session not found' }, 404);\n        if (permission === 'forbidden') {\n          return c.json({ error: \"Only the session's owner or an organization admin can start its sandbox.\" }, 403);\n        }\n        const controller = options.controller;\n        if (!controller) return c.json({ error: 'Sessions are not available on this server.' }, 503);\n\n        try {\n          const live =\n            (await controller.getSession(session.sessionId)) ??\n            (await startUserSessionConversation(\n              controller,\n              session,\n              await sessionMemoryResourceId(controller, session, options.workItems),\n            ));\n          const sandbox = live?.getWorkspace()?.sandbox;\n          if (!sandbox?.start) return c.json({ error: 'This session has no sandbox to start.' }, 409);\n          await sandbox.start();\n          return c.json({ started: true });\n        } catch (error) {\n          console.error('[Factory Sessions] Failed to start session sandbox', { sessionId: session.sessionId, error });\n          return c.json({ error: error instanceof Error ? error.message : String(error) }, 500);\n        }\n      },\n    }),\n    registerApiRoute('/web/user-sessions/:sessionId/sandbox/recreate', {\n      method: 'POST',\n      requiresAuth: false,\n      handler: async c => {\n        const resolved = await resolveOrgTenant(loose(c), options.auth);\n        if ('response' in resolved) return resolved.response;\n        const match = await resolveSession(options.sourceControls, c.req.param('sessionId'));\n        const session = match?.session;\n        if (!match || !session) return c.json({ error: 'Session not found' }, 404);\n        const permission = await sessionManagePermission(loose(c), options.auth, resolved.tenant, session);\n        if (permission === 'not-found') return c.json({ error: 'Session not found' }, 404);\n        if (permission === 'forbidden') {\n          return c.json({ error: \"Only the session's owner or an organization admin can recreate its sandbox.\" }, 403);\n        }\n        const sessionRetirement = options.sessionRetirement;\n        if (!sessionRetirement || !canRecreateSandbox(options)) {\n          return c.json({ error: 'Recreating sandboxes is not available on this server.' }, 503);\n        }\n\n        const aborted = await abortActiveRun(\n          options.controller,\n          session.sessionId,\n          options.abortSettleTimeoutMs ?? ABORT_SETTLE_TIMEOUT_MS,\n        );\n        await waitForPendingFilesystemCapture(session.sessionId).catch(error => {\n          console.warn('[Factory Sessions] Failed to drain filesystem capture before sandbox recreate', {\n            sessionId: session.sessionId,\n            error,\n          });\n        });\n        try {\n          const outcome = await sessionRetirement.recreateSessionSandbox({\n            sourceControl: match.sourceControl,\n            orgId: session.orgId,\n            sessionId: session.sessionId,\n          });\n          if (outcome === 'not-found') return c.json({ error: 'Session not found' }, 404);\n          // The captured listings describe the destroyed sandbox; the next turn re-captures.\n          await options.filesystem?.deleteResourceFiles({ resourceId: session.sessionId }).catch(error => {\n            console.warn('[Factory Sessions] Failed to clear file listings after sandbox recreate', {\n              sessionId: session.sessionId,\n              error,\n            });\n          });\n          return c.json({ recreated: true, aborted });\n        } catch (error) {\n          console.error('[Factory Sessions] Failed to recreate session sandbox', {\n            sessionId: session.sessionId,\n            error,\n          });\n          return c.json({ error: error instanceof Error ? error.message : String(error) }, 500);\n        }\n      },\n    }),\n    registerApiRoute('/web/user-sessions/:sessionId/owner', {\n      method: 'POST',\n      requiresAuth: false,\n      handler: async c => {\n        const resolved = await resolveOrgTenant(loose(c), options.auth);\n        if ('response' in resolved) return resolved.response;\n        const { orgId, userId } = resolved.tenant;\n        const sessionId = c.req.param('sessionId');\n        const readable = await resolveReadableSession(options, sessionId, resolved.tenant);\n        if (!readable) return c.json({ error: 'Session not found' }, 404);\n        const { sourceControl, session } = readable;\n        let body: unknown;\n        try {\n          body = await c.req.json();\n        } catch {\n          return c.json({ error: 'Invalid JSON body' }, 400);\n        }\n        if (!isJsonObject(body) || typeof body.expectedOwnerId !== 'string' || !body.expectedOwnerId.trim()) {\n          return c.json({ error: 'Invalid expectedOwnerId' }, 400);\n        }\n        const expectedOwnerId = body.expectedOwnerId;\n        if (session.userId === userId) return c.json({ session });\n        const refusal = await ownershipRefusal(session, options);\n        if (refusal) return c.json({ error: refusal.error }, refusal.status);\n        const transferred = await sourceControl.sessions.transferOwner({\n          sessionId,\n          expectedUserId: expectedOwnerId,\n          toUserId: userId,\n        });\n        if (transferred.status === 'conflict') {\n          const current = transferred.session;\n          if (!current || !canViewSourceControlSession(current, resolved.tenant)) {\n            return c.json({ error: 'Session not found' }, 404);\n          }\n          if (current.userId === userId) return c.json({ session: current });\n          return c.json(\n            {\n              error: OWNER_CONFLICT_MESSAGES[transferred.reason],\n              reason: transferred.reason,\n              currentOwnerId: current.userId,\n            },\n            409,\n          );\n        }\n        const controller = options.controller;\n        // Model calls now bill the taker, so stop the turn; only after the CAS, so a lost race never kills it.\n        await abortActiveRun(controller, sessionId, options.abortSettleTimeoutMs ?? ABORT_SETTLE_TIMEOUT_MS);\n        // The live host acts as the old owner; the next message starts one as the new.\n        if (controller && (await controller.getSession(sessionId))) {\n          await controller.deleteSession({ sessionId }).catch(error => {\n            console.error('[Factory Sessions] Failed to recycle transferred live session', { sessionId, error });\n          });\n        }\n        const newOwner = (await resolveOwnerProfiles([userId])).get(userId) ?? { id: userId };\n        await markOwnerChange(options, transferred.session, newOwner).catch(error => {\n          console.error('[Factory Sessions] Failed to mark the ownership change in the transcript', {\n            sessionId,\n            error,\n          });\n        });\n        await options.audit\n          ?.record({\n            orgId,\n            actorId: userId,\n            action: 'factory.session.owner_transferred',\n            targets: [{ type: 'session', id: session.id, name: session.title ?? session.branch }],\n            metadata: { fromOwnerId: expectedOwnerId, toOwnerId: userId },\n            factoryProjectId: session.factoryProjectId ?? undefined,\n            projectRepositoryId: session.projectRepositoryId ?? undefined,\n          })\n          .catch(error => {\n            console.error('[Factory Sessions] Failed to record ownership transfer audit event', { sessionId, error });\n          });\n        return c.json({ session: transferred.session });\n      },\n    }),\n    registerApiRoute('/web/user-sessions/:sessionId', {\n      method: 'DELETE',\n      requiresAuth: false,\n      handler: async c => {\n        const resolved = await resolveOrgTenant(loose(c), options.auth);\n        if ('response' in resolved) return resolved.response;\n        const match = await resolveSession(options.sourceControls, c.req.param('sessionId'));\n        const session = match?.session;\n        if (\n          !match ||\n          !session ||\n          session.orgId !== resolved.tenant.orgId ||\n          session.userId !== resolved.tenant.userId\n        ) {\n          return c.json({ error: 'Session not found' }, 404);\n        }\n        try {\n          // Drain the turn's queued filesystem capture while the thread and sandbox still exist.\n          // A failed drain only costs the snapshot; it must not block teardown.\n          await waitForPendingFilesystemCapture(session.sessionId).catch(error => {\n            console.warn('[Factory Sessions] Failed to drain filesystem capture before delete', {\n              sessionId: session.sessionId,\n              error,\n            });\n          });\n          await options.controller?.deleteSession({ sessionId: session.sessionId });\n        } catch (error) {\n          console.error('[Factory Sessions] Failed to tear down live controller session', {\n            sessionId: session.sessionId,\n            error,\n          });\n        }\n        if (options.sessionRetirement) {\n          await options.sessionRetirement.retireSession({\n            sourceControl: match.sourceControl,\n            ...(options.workItems ? { workItems: options.workItems } : {}),\n            orgId: session.orgId,\n            sessionId: session.sessionId,\n            deleteSession: true,\n          });\n        } else {\n          await options.workItems?.clearSessionReferences({ orgId: session.orgId, sessionId: session.sessionId });\n          await match.sourceControl.sessions.delete(session.id);\n          void reclaimDeletedSessionSandbox({ session }).catch((error: unknown) => {\n            console.error('[Factory Sessions] Failed to reclaim sandbox for deleted session', {\n              sessionId: session.sessionId,\n              sandboxId: session.sandboxId,\n              error,\n            });\n          });\n        }\n        return c.json({ removed: true });\n      },\n    }),\n    registerApiRoute('/web/user-sessions/:sessionId/visibility', {\n      method: 'PUT',\n      requiresAuth: false,\n      handler: async c => {\n        const resolved = await resolveOrgTenant(loose(c), options.auth);\n        if ('response' in resolved) return resolved.response;\n        const body = (await c.req.json().catch(() => undefined)) as { visibility?: unknown } | undefined;\n        const visibility = body?.visibility;\n        if (visibility !== 'private' && visibility !== 'org') {\n          return c.json({ error: \"visibility must be 'private' or 'org'\" }, 400);\n        }\n        const sessionId = c.req.param('sessionId');\n        const match = await resolveSession(options.sourceControls, sessionId);\n        const row = match?.session;\n        // Only the owner may share or unshare; everyone else gets the same 404\n        // as a missing session so org-visible ids are not confirmed either.\n        if (!match || !row || row.orgId !== resolved.tenant.orgId || row.userId !== resolved.tenant.userId) {\n          return c.json({ error: 'Session not found' }, 404);\n        }\n        // Without work-item storage there's no telling whether this is a Factory\n        // run, so refuse rather than let a run be made private.\n        if (!options.workItems) {\n          return c.json(\n            {\n              error:\n                \"Session visibility can't be changed yet: Factory storage is still starting up. Try again in a moment.\",\n            },\n            503,\n          );\n        }\n        // Only sessions a person started in the UI can change. Factory runs and\n        // Slack threads keep the visibility they were created with: runs and\n        // channel threads stay with the team, Slack DMs stay private.\n        if (row.branch.startsWith(SLACK_SESSION_BRANCH_PREFIX) || (await isRunBound(row, options.workItems))) {\n          return c.json({ error: 'Only user sessions can change visibility' }, 409);\n        }\n        // Sharing puts the session on its Factory's memory; without a Factory there is nowhere to share it to.\n        if (visibility === 'org' && !row.factoryProjectId) {\n          return c.json({ error: \"This session isn't linked to a Factory, so it can't be shared.\" }, 409);\n        }\n        const resourceId = userSessionResourceFor(row, visibility);\n        const controller = options.controller;\n        // The resource says who may read a session, so its threads move with it.\n        const threadIds = controller ? await sessionThreadsToMove(controller, row, resourceId) : [];\n        if (threadIds.length > 0 && !options.moveThread) {\n          return c.json({ error: 'Changing session visibility is not available on this server.' }, 503);\n        }\n        if (controller?.listActiveThreadRuns().some(run => threadIds.includes(run.threadId))) {\n          return c.json({ error: 'Wait for the session to finish its run before changing visibility' }, 409);\n        }\n        // Write in the order that fails closed: threads leave the Factory before the\n        // row says private, and the row says shared before threads reach the Factory.\n        // A failed move then leaves the session less visible, never more, and a retry\n        // moves what is left.\n        const moveThreads = async (to: string) => {\n          for (const threadId of threadIds) await options.moveThread!({ threadId, resourceId: to });\n        };\n        if (visibility === 'private') await moveThreads(resourceId);\n        const updated = await match.sourceControl.sessions.setVisibility({\n          sessionId,\n          visibility,\n          expectedUserId: row.userId,\n        });\n        if (!updated) {\n          // A teammate took the shared session after the read: its threads go back to the Factory.\n          if (visibility === 'private') await moveThreads(userSessionResourceFor(row, 'org'));\n          return c.json({ error: 'Session not found' }, 404);\n        }\n        if (visibility === 'org') await moveThreads(resourceId);\n        // A live session keeps the resource it started on. Drop it so the next\n        // request resumes on its moved thread, or point it at the new resource\n        // when it has no thread to resume from yet.\n        const live = await controller?.getSession(sessionId);\n        if (live && threadIds.length > 0) await controller!.deleteSession({ sessionId });\n        else if (live) await controller!.setResourceId(live, { resourceId });\n        const owners = await resolveOwnerProfiles([updated.userId]);\n        return c.json({ session: withOwnerProfile(updated, owners) });\n      },\n    }),\n    registerApiRoute('/web/user-sessions/:sessionId/title', {\n      method: 'POST',\n      requiresAuth: false,\n      handler: async c => {\n        const resolved = await resolveOrgTenant(loose(c), options.auth);\n        if ('response' in resolved) return resolved.response;\n        const sessionId = c.req.param('sessionId');\n        const match = await resolveSession(options.sourceControls, sessionId);\n        const row = match?.session;\n        if (!match || !row || row.orgId !== resolved.tenant.orgId || row.userId !== resolved.tenant.userId) {\n          return c.json({ error: 'Session not found' }, 404);\n        }\n        if (!options.controller) return c.json({ error: 'Sessions are not available on this server.' }, 503);\n        const threads = await listFactorySessionThreads(options.controller, row, options.workItems);\n        const thread = threads.sort((a, b) => b.updatedAt.getTime() - a.updatedAt.getTime())[0];\n        if (!thread) return c.json({ error: 'This session has no conversation to name yet.' }, 409);\n        const stored = await options.memorySettings.get({ orgId: row.orgId, userId: row.userId });\n        const requestContext = new RequestContext();\n        requestContext.set('user', { workosId: row.userId, organizationId: row.orgId });\n        try {\n          const title = await nameSession(sessionId, async () => {\n            const generated = await options.controller!.generateThreadTitle({\n              threadId: thread.id,\n              sessionId,\n              requestContext,\n              ...(stored?.observerModelId ? { model: titleModel(stored.observerModelId) } : {}),\n            });\n            const named = generated ? normalizeSessionTitle(generated) : null;\n            if (named) await match.sourceControl.sessions.rename({ sessionId, title: named });\n            return named;\n          });\n          if (!title) return c.json({ error: 'The model returned an empty title. Try again.' }, 502);\n          return c.json({ title });\n        } catch (error) {\n          return c.json({ error: error instanceof Error ? error.message : String(error) }, 500);\n        }\n      },\n    }),\n  ];\n}\n"],"mappings":";;;;;;;;;;;;;;AAuCA,SAAS,MAAM,GAA0B;CACvC,OAAO;AACT;AAEA,MAAa,6BAA6B;AAE1C,MAAM,8BAA8B;AACpC,MAAM,eAAe;AACrB,MAAM,6BAA6B;AACnC,MAAM,0CAA0C;AAChD,MAAM,+BAA+B;AA8BrC,MAAM,0BAA0B;AAChC,MAAM,uBAAuB;;;;;;AAS7B,eAAe,wBACb,GACA,MACA,QACA,SACkC;CAClC,IAAI,QAAQ,UAAU,OAAO,OAAO,OAAO;CAC3C,MAAM,UAAU,QAAQ,WAAW,OAAO;CAC1C,IAAI,QAAQ,eAAe,aAAa,CAAC,SAAS,OAAO;CACzD,IAAI,SAAS,OAAO;CACpB,OAAQ,MAAM,KAAK,oBAAoB,GAAG,QAAQ,KAAK,IAAK,YAAY;AAC1E;AAEA,SAAS,mBAAmB,SAAqD;CAC/E,OAAO,QAAQ,QAAQ,iBAAiB,KAAK,QAAQ,6BAA6B;AACpF;AAIA,SAAS,iBAAmC,SAAY,cAAmC;CACzF,OAAO;EAAE,GAAG;EAAS;CAAa;AACpC;AAIA,eAAe,iBACb,SACA,SACkC;CAElC,IAAI,CAAC,QAAQ,kBACX,OAAO;EAAE,QAAQ;EAAK,OAAO;CAAoE;CAEnG,IAAI,CAAC,QAAQ,WACX,OAAO;EACL,QAAQ;EACR,OAAO;CACT;CAIF,IAAI,QAAQ,OAAO,WAAW,2BAA2B,KAAM,MAAM,gBAAgB,SAAS,QAAQ,SAAS,GAC7G,OAAO;EAAE,QAAQ;EAAK,OAAO;CAAsC;CAErE,OAAO;AACT;;AAGA,eAAe,gBACb,SACA,SACA,UACA;CACA,MAAM,EAAE,eAAe;CACvB,MAAM,SAAS,MAAM,YAAY,UAAU,CAAC,EAAE,WAAW,CAAC,EAAE,SAAS,QAAQ;CAC7E,IAAI,CAAC,cAAc,CAAC,QAAQ;CAC5B,MAAM,UAAU,MAAM,0BAA0B,YAAY,SAAS,QAAQ,SAAS;CACtF,IAAI,QAAQ,WAAW,GAAG;CAC1B,MAAM,WAAW,GAAG,SAAS,QAAQ,aAAa;CAClD,MAAM,OAAO,aAAa,EACxB,UAAU,QAAQ,KAAI,WACpB,aAAa;EAAE,MAAM;EAAY,SAAS;EAA0B;EAAU,QAAQ;CAAS,CAAC,CAAC,CAAC,YAAY;EAC5G,UAAU,OAAO;EACjB,YAAY,OAAO;CACrB,CAAC,CACH,EACF,CAAC;AACH;;AAGA,eAAe,eACb,YACA,WACA,iBACkB;CAClB,IAAI,CAAC,YAAY,OAAO;CACxB,IAAI;EACF,MAAM,OAAO,MAAM,WAAW,WAAW,SAAS;EAClD,IAAI,CAAC,MAAM,OAAO,SAAS,GAAG,OAAO;EACrC,KAAK,MAAM;EACX,MAAM,WAAW,KAAK,IAAI,IAAI;EAC9B,OAAO,KAAK,OAAO,SAAS,KAAK,KAAK,IAAI,IAAI,UAC5C,MAAM,IAAI,SAAQ,YAAW,WAAW,SAAS,oBAAoB,CAAC;EAExE,IAAI,KAAK,OAAO,SAAS,GACvB,QAAQ,KAAK,yDAAyD,EAAE,UAAU,CAAC;EAErF,OAAO;CACT,SAAS,OAAO;EACd,QAAQ,KAAK,qDAAqD;GAAE;GAAW;EAAM,CAAC;EACtF,OAAO;CACT;AACF;AASA,eAAe,iBACb,GACA,MACiF;CACjF,MAAM,KAAK,WAAW,CAAC;CACvB,MAAM,SAAS,KAAK,OAAO,CAAC;CAC5B,IAAI,CAAC,QAAQ,OAAO,EAAE,UAAU,EAAE,KAAK;EAAE,OAAO;EAAgB,QAAQ;CAAgB,GAAG,GAAG,EAAE;CAChG,IAAI,CAAC,OAAO,OACV,OAAO,EACL,UAAU,EAAE,KACV;EACE,OAAO;EACP,SAAS;CACX,GACA,GACF,EACF;CAEF,OAAO,EAAE,QAAQ;EAAE,OAAO,OAAO;EAAO,QAAQ,OAAO;CAAO,EAAE;AAClE;AAEA,eAAe,yBACb,gBACA,OACA,qBAC2C;CAC3C,MAAM,WACJ,MAAM,QAAQ,IACZ,eAAe,IAAI,OAAM,kBAAiB;EACxC,MAAM,UAAU,MAAM,cAAc,oBAAoB,IAAI;GAAE;GAAO,IAAI;EAAoB,CAAC;EAC9F,IAAI,CAAC,SAAS,OAAO;EACrB,MAAM,aAAa,MAAM,cAAc,aAAa,IAAI;GAAE;GAAO,IAAI,QAAQ;EAAa,CAAC;EAC3F,IAAI,CAAC,YAAY,OAAO;EACxB,MAAM,aAAa,MAAM,cAAc,YAAY,IAAI;GAAE;GAAO,IAAI,QAAQ;EAAa,CAAC;EAC1F,IAAI,CAAC,YAAY,OAAO;EACxB,OAAO;GACL;GACA;GACA,kBAAkB,WAAW;GAC7B,eAAe,QAAQ,UAAU,WAAW;EAC9C;CACF,CAAC,CACH,EAAA,CACA,QAAQ,UAA8C,UAAU,IAAI;CACtE,IAAI,QAAQ,SAAS,GACnB,MAAM,IAAI,MAAM,yEAAyE;CAE3F,OAAO,QAAQ,MAAM;AACvB;AAEA,eAAe,eACb,gBACA,WAC8F;CAC9F,MAAM,WACJ,MAAM,QAAQ,IACZ,eAAe,IAAI,OAAM,mBAAkB;EACzC;EACA,SAAS,MAAM,cAAc,SAAS,eAAe,SAAS;CAChE,EAAE,CACJ,EAAA,CACA,QACC,UACC,MAAM,YAAY,IACtB;CACA,IAAI,QAAQ,SAAS,GAAG,MAAM,IAAI,MAAM,8DAA8D;CACtG,OAAO,QAAQ,MAAM;AACvB;AAEA,eAAe,uBACb,SACA,WACA,QACA;CACA,MAAM,QAAQ,MAAM,eAAe,QAAQ,gBAAgB,SAAS;CACpE,IAAI,CAAC,SAAS,CAAC,4BAA4B,MAAM,SAAS,MAAM,GAAG,OAAO;CAC1E,MAAM,aAAa,MAAM,wBAAwB,QAAQ,YAAY,MAAM,SAAS,QAAQ,SAAS;CACrG,IAAI,CAAC,uBAAuB,MAAM,SAAS,YAAY,MAAM,GAAG,OAAO;CACvE,OAAO;EAAE,GAAG;EAAO;CAAW;AAChC;;;;;;;;AASA,eAAe,6BACb,YACA,SAEA,aAAqB,uBAAuB,SAAS,QAAQ,eAAe,QAAQ,QAAQ,SAAS,GACrG;CACA,IAAI,CAAC,YAAY,OAAO,KAAA;CACxB,MAAM,iBAAiB,IAAI,eAAe;CAC1C,eAAe,IAAI,QAAQ;EAAE,UAAU,QAAQ;EAAQ,gBAAgB,QAAQ;CAAM,CAAC;CACtF,MAAM,OAAO,MAAM,WAAW,cAAc;EAC1C,IAAI,QAAQ;EACZ;EACA,UAAU,QAAQ;EAClB,SAAS,QAAQ;EACjB;CACF,CAAC;CACD,MAAM,eAAe,MAAM,QAAQ,KAAK;CAGxC,IAAI,QAAQ,kBACV,MAAM,KAAK,MAAM,IAAI;EACnB,kBAAkB,QAAQ;EAC1B,GAAI,QAAQ,sBAAsB,EAAE,qBAAqB,QAAQ,oBAAoB,IAAI,CAAC;CAC5F,CAAC;CAEH,OAAO;AACT;AAEA,SAAS,aAAa,OAAkD;CACtE,OAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAC5E;AAEA,SAAS,sBAAsB;CAC7B,MAAM,2BAAW,IAAI,IAAoC;CACzD,QAAQ,WAAmB,QAAsC;EAC/D,MAAM,UAAU,SAAS,IAAI,SAAS;EACtC,IAAI,SAAS,OAAO;EACpB,MAAM,UAAU,IAAI,CAAC,CAAC,cAAc,SAAS,OAAO,SAAS,CAAC;EAC9D,SAAS,IAAI,WAAW,OAAO;EAC/B,OAAO;CACT;AACF;AAEA,MAAM,0BAA0B;CAC9B,aAAa;CACb,cAAc;AAChB;AAEA,SAAS,WAAW,SAAiB;CACnC,QAAQ,EAAE,qBACR,aAAa,SAAS;EAAE,oBAAoB;EAAM;CAAe,CAAC;AACtE;AAEA,SAAS,kCAAkC,OAA6C;CACtF,MAAM,wBAAQ,IAAI,IAAkE;CACpF,MAAM,gBAAgB,QAAgB,SAA0C,cAAsB;EACpG,MAAM,OAAO,MAAM;EACnB,MAAM,IAAI,QAAQ;GAAE;GAAS;EAAU,CAAC;EACxC,IAAI,MAAM,OAAO,yCAAyC;GACxD,MAAM,eAAe,MAAM,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC;GACzC,IAAI,iBAAiB,KAAA,GAAW,MAAM,OAAO,YAAY;EAC3D;CACF;CAEA,OAAO,OAAO,YAAiE;EAC7E,IAAI,CAAC,OAAO,uBAAO,IAAI,IAAI;EAC3B,MAAM,mBAAmB,CAAC,GAAG,IAAI,IAAI,OAAO,CAAC,CAAC,CAAC,MAAM,GAAG,0BAA0B;EAClF,MAAM,2BAAW,IAAI,IAAiC;EACtD,MAAM,oBAA8B,CAAC;EACrC,MAAM,MAAM,KAAK,IAAI;EAErB,KAAK,MAAM,UAAU,kBAAkB;GACrC,MAAM,SAAS,MAAM,IAAI,MAAM;GAC/B,IAAI,CAAC,UAAU,OAAO,aAAa,KAAK;IACtC,MAAM,OAAO,MAAM;IACnB,kBAAkB,KAAK,MAAM;GAC/B,OAAO,IAAI,OAAO,SAChB,SAAS,IAAI,QAAQ,OAAO,OAAO;EAEvC;EACA,IAAI,kBAAkB,WAAW,GAAG,OAAO;EAE3C,IAAI;EACJ,IAAI,MAAM,UACR,IAAI;GACF,gBAAgB,MAAM,MAAM,SAAS,iBAAiB;EACxD,SAAS,OAAO;GACd,QAAQ,KAAK,2FAA2F,EACtG,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAC9D,CAAC;GACD,iBAAiB,MAAM,QAAQ,WAAW,kBAAkB,KAAI,WAAU,MAAM,QAAQ,MAAM,CAAC,CAAC,EAAA,CAC7F,QAAO,WAAU,OAAO,WAAW,WAAW,CAAC,CAC/C,KAAI,WAAU,OAAO,KAAK;EAC/B;OAEA,iBAAiB,MAAM,QAAQ,WAAW,kBAAkB,KAAI,WAAU,MAAM,QAAQ,MAAM,CAAC,CAAC,EAAA,CAC7F,QAAO,WAAU,OAAO,WAAW,WAAW,CAAC,CAC/C,KAAI,WAAU,OAAO,KAAK;EAG/B,KAAK,MAAM,QAAQ,eAAe;GAChC,IAAI,CAAC,MAAM;GACX,MAAM,OAAO,KAAK,MAAM,KAAK,KAAK,KAAK,OAAO,KAAK;GACnD,IAAI,CAAC,MAAM;GACX,SAAS,IAAI,KAAK,IAAI;IACpB,IAAI,KAAK;IACT;IACA,GAAI,KAAK,YAAY,EAAE,WAAW,KAAK,UAAU,IAAI,CAAC;GACxD,CAAC;EACH;EACA,MAAM,YAAY,MAAM;EACxB,KAAK,MAAM,UAAU,mBAAmB,aAAa,QAAQ,SAAS,IAAI,MAAM,GAAG,SAAS;EAC5F,OAAO;CACT;AACF;AAEA,SAAS,iBAAiB,SAA+B,QAA0C;CACjG,MAAM,QAAQ,OAAO,IAAI,QAAQ,MAAM;CACvC,OAAO,QAAQ;EAAE,GAAG;EAAS;CAAM,IAAI;AACzC;AAEA,SAAS,qBACP,MACA,SACA,sBACY;CACZ,OAAO,CACL,iBAAiB,MAAM;EACrB,QAAQ;EACR,cAAc;EACd,SAAS,OAAM,MAAK;GAClB,MAAM,WAAW,MAAM,iBAAiB,MAAM,CAAC,GAAG,QAAQ,IAAI;GAC9D,IAAI,cAAc,UAAU,OAAO,SAAS;GAC5C,MAAM,EAAE,OAAO,WAAW,SAAS;GACnC,MAAM,sBAAsB,EAAE,IAAI,MAAM,IAAI;GAC5C,MAAM,UAAU,sBACZ,MAAM,yBAAyB,QAAQ,gBAAgB,OAAO,mBAAmB,IACjF;GACJ,IAAI,CAAC,SAAS,OAAO,EAAE,KAAK,EAAE,OAAO,+BAA+B,GAAG,GAAG;GAC1E,MAAM,WAAW,MAAM,QAAQ,cAAc,SAAS,KAAK;IACzD,qBAAqB,QAAQ,QAAQ;IACrC,cAAc;GAChB,CAAC;GACD,MAAM,SAAS,MAAM,qBAAqB,SAAS,KAAI,YAAW,QAAQ,MAAM,CAAC;GACjF,OAAO,EAAE,KAAK,EAAE,UAAU,SAAS,KAAI,YAAW,iBAAiB,SAAS,MAAM,CAAC,EAAE,CAAC;EACxF;CACF,CAAC,GACD,iBAAiB,MAAM;EACrB,QAAQ;EACR,cAAc;EACd,SAAS,OAAM,MAAK;GAClB,MAAM,WAAW,MAAM,iBAAiB,MAAM,CAAC,GAAG,QAAQ,IAAI;GAC9D,IAAI,cAAc,UAAU,OAAO,SAAS;GAC5C,MAAM,EAAE,OAAO,WAAW,SAAS;GACnC,MAAM,sBAAsB,EAAE,IAAI,MAAM,IAAI;GAC5C,MAAM,UAAU,sBACZ,MAAM,yBAAyB,QAAQ,gBAAgB,OAAO,mBAAmB,IACjF;GACJ,IAAI,CAAC,SAAS,OAAO,EAAE,KAAK,EAAE,OAAO,+BAA+B,GAAG,GAAG;GAC1E,IAAI;GACJ,IAAI;IACF,OAAO,MAAM,EAAE,IAAI,KAAK;GAC1B,QAAQ;IACN,OAAO,EAAE,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;GACnD;GACA,IAAI,CAAC,aAAa,IAAI,GAAG,OAAO,EAAE,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;GAC1E,IAAI,KAAK,eAAe,KAAA,KAAa,OAAO,KAAK,eAAe,UAC9D,OAAO,EAAE,KAAK,EAAE,OAAO,qBAAqB,GAAG,GAAG;GAEpD,MAAM,aAAa,KAAK,cAAc,QAAQ;GAC9C,IAAI,CAAC,cAAc,UAAU,GAAG,OAAO,EAAE,KAAK,EAAE,OAAO,qBAAqB,GAAG,GAAG;GAClF,IACE,KAAK,cAAc,KAAA,MAClB,OAAO,KAAK,cAAc,YAAY,CAAC,aAAa,KAAK,KAAK,SAAS,IAExE,OAAO,EAAE,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;GAEnD,MAAM,qBAAqB,KAAK;GAChC,MAAM,YAAY,sBAAsB,WAAW,OAAO,WAAW;GACrE,IAAI,KAAK,UAAU,KAAA,KAAa,OAAO,KAAK,UAAU,UACpD,OAAO,EAAE,KAAK,EAAE,OAAO,gBAAgB,GAAG,GAAG;GAE/C,MAAM,kBAAkB,KAAK,UAAU,KAAA,IAAY,OAAO,sBAAsB,KAAK,KAAK;GAG1F,IAAI,KAAK,eAAe,KAAA,KAAa,KAAK,eAAe,aAAa,KAAK,eAAe,OACxF,OAAO,EAAE,KAAK,EAAE,OAAO,wCAAwC,GAAG,GAAG;GAEvE,MAAM,aAAa,KAAK,cAAc;GACtC,IAAI;GACJ,IAAI,KAAK,WAAW,KAAA,GAAW,SAAS,GAAG,6BAA6B;QACnE,IAAI,cAAc,KAAK,MAAM,GAAG,SAAS,KAAK;QAC9C,OAAO,EAAE,KAAK,EAAE,OAAO,iBAAiB,GAAG,GAAG;GAEnD,IAAI,oBAAoB;IACtB,MAAM,WAAW,MAAM,QAAQ,cAAc,SAAS,eAAe,SAAS;IAC9E,IAAI,UAAU;KACZ,IACE,SAAS,wBAAwB,QAAQ,QAAQ,MACjD,SAAS,UAAU,SACnB,SAAS,WAAW,UACpB,SAAS,WAAW,QAEpB,OAAO,EAAE,KAAK,EAAE,OAAO,sBAAsB,GAAG,GAAG;KAErD,MAAM,6BAA6B,QAAQ,YAAY,QAAQ;KAC/D,OAAO,EAAE,KAAK,EACZ,SAAS,iBAAiB,UAAU;MAClC,iBAAiB,mBAAmB,OAAO;MAC3C,eAAe;MACf,aAAa;KACf,CAAC,EACH,CAAC;IACH;GACF;GAEA,MAAM,UAAU,MAAM,QAAQ,cAAc,SACzC,OAAO;IACN;IACA,qBAAqB,QAAQ,QAAQ;IACrC,kBAAkB,QAAQ;IAC1B;IACA;IACA;IACA;IACA,OAAO;IACP;GACF,CAAC,CAAC,CACD,MAAM,OAAM,UAAS;IACpB,IAAI,EAAE,iBAAiB,yBAAyB,CAAC,oBAAoB,MAAM;IAC3E,MAAM,WAAW,MAAM,QAAQ,cAAc,SAAS,eAAe,SAAS;IAC9E,IAAI,CAAC,UAAU,MAAM;IACrB,OAAO;GACT,CAAC;GACH,IACE,uBACC,QAAQ,cAAc,aACrB,QAAQ,wBAAwB,QAAQ,QAAQ,MAChD,QAAQ,UAAU,SAClB,QAAQ,WAAW,UACnB,QAAQ,WAAW,SAErB,OAAO,EAAE,KAAK,EAAE,OAAO,sBAAsB,GAAG,GAAG;GAErD,MAAM,6BAA6B,QAAQ,YAAY,OAAO;GAE9D,OAAO,EAAE,KAAK,EACZ,SAAS,iBAAiB,SAAS;IACjC,iBAAiB,mBAAmB,OAAO;IAC3C,eAAe;IACf,aAAa;GACf,CAAC,EACH,CAAC;EACH;CACF,CAAC,CACH;AACF;AAEA,SAAgB,gCAAgC,SAAwD;CACtG,MAAM,cAAc,oBAAoB;CACxC,MAAM,uBAAuB,kCAAkC,QAAQ,KAAK;CAC5E,OAAO;EACL,iBAAiB,sCAAsC;GACrD,QAAQ;GACR,cAAc;GACd,SAAS,OAAM,MAAK;IAClB,MAAM,WAAW,MAAM,iBAAiB,MAAM,CAAC,GAAG,QAAQ,IAAI;IAC9D,IAAI,cAAc,UAAU,OAAO,SAAS;IAC5C,MAAM,EAAE,OAAO,WAAW,SAAS;IACnC,MAAM,mBAAmB,EAAE,IAAI,MAAM,IAAI;IACzC,MAAM,UAAU,mBAAmB,MAAM,QAAQ,SAAS,IAAI;KAAE;KAAO,IAAI;IAAiB,CAAC,IAAI;IACjG,IAAI,CAAC,SAAS,OAAO,EAAE,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;IAE/D,MAAM,YACJ,MAAM,QAAQ,IACZ,QAAQ,eAAe,KAAI,kBACzB,cAAc,SAAS,cAAc;KAAE;KAAO,kBAAkB,QAAQ;KAAI,cAAc;IAAO,CAAC,CACpG,CACF,EAAA,CACA,KAAK;IACP,MAAM,SAAS,MAAM,qBAAqB,SAAS,KAAI,YAAW,QAAQ,MAAM,CAAC;IACjF,OAAO,EAAE,KAAK,EAAE,UAAU,SAAS,KAAI,YAAW,iBAAiB,SAAS,MAAM,CAAC,EAAE,CAAC;GACxF;EACF,CAAC;EACD,GAAG,qBAAqB,6CAA6C,SAAS,oBAAoB;EAElG,GAAG,qBAAqB,qCAAqC,SAAS,oBAAoB;EAC1F,iBAAiB,iCAAiC;GAChD,QAAQ;GACR,cAAc;GACd,SAAS,OAAM,MAAK;IAClB,MAAM,WAAW,MAAM,iBAAiB,MAAM,CAAC,GAAG,QAAQ,IAAI;IAC9D,IAAI,cAAc,UAAU,OAAO,SAAS;IAC5C,MAAM,WAAW,MAAM,uBAAuB,SAAS,EAAE,IAAI,MAAM,WAAW,GAAG,SAAS,MAAM;IAChG,IAAI,CAAC,UAAU,OAAO,EAAE,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;IAChE,MAAM,EAAE,SAAS,eAAe;IAChC,MAAM,SAAS,MAAM,qBAAqB,CAAC,QAAQ,MAAM,CAAC;IAC1D,MAAM,kBACJ,mBAAmB,OAAO,KACzB,MAAM,wBAAwB,MAAM,CAAC,GAAG,QAAQ,MAAM,SAAS,QAAQ,OAAO,MAAO;IACxF,MAAM,gBACJ,QAAQ,WAAW,SAAS,OAAO,UAAW,MAAM,iBAAiB,SAAS,OAAO,MAAO;IAC9F,OAAO,EAAE,KAAK,EACZ,SAAS;KACP,GAAG,iBAAiB,iBAAiB,SAAS,MAAM,GAAG;MACrD;MACA;MACA,aAAa,sBAAsB,SAAS,SAAS,MAAM;KAC7D,CAAC;KAED;IACF,EACF,CAAC;GACH;EACF,CAAC;EAID,iBAAiB,+CAA+C;GAC9D,QAAQ;GACR,cAAc;GACd,SAAS,OAAM,MAAK;IAClB,MAAM,WAAW,MAAM,iBAAiB,MAAM,CAAC,GAAG,QAAQ,IAAI;IAC9D,IAAI,cAAc,UAAU,OAAO,SAAS;IAE5C,MAAM,WAAU,MADI,eAAe,QAAQ,gBAAgB,EAAE,IAAI,MAAM,WAAW,CAAC,EAAA,EAC5D;IACvB,IAAI,CAAC,SAAS,OAAO,EAAE,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;IAC/D,MAAM,aAAa,MAAM,wBAAwB,MAAM,CAAC,GAAG,QAAQ,MAAM,SAAS,QAAQ,OAAO;IACjG,IAAI,eAAe,aAAa,OAAO,EAAE,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;IACjF,IAAI,eAAe,aACjB,OAAO,EAAE,KAAK,EAAE,OAAO,2EAA2E,GAAG,GAAG;IAE1G,MAAM,aAAa,QAAQ;IAC3B,IAAI,CAAC,YAAY,OAAO,EAAE,KAAK,EAAE,OAAO,6CAA6C,GAAG,GAAG;IAE3F,IAAI;KAQF,MAAM,WANH,MAAM,WAAW,WAAW,QAAQ,SAAS,KAC7C,MAAM,6BACL,YACA,SACA,MAAM,wBAAwB,YAAY,SAAS,QAAQ,SAAS,CACtE,EAAA,EACoB,aAAa,CAAC,EAAE;KACtC,IAAI,CAAC,SAAS,OAAO,OAAO,EAAE,KAAK,EAAE,OAAO,wCAAwC,GAAG,GAAG;KAC1F,MAAM,QAAQ,MAAM;KACpB,OAAO,EAAE,KAAK,EAAE,SAAS,KAAK,CAAC;IACjC,SAAS,OAAO;KACd,QAAQ,MAAM,sDAAsD;MAAE,WAAW,QAAQ;MAAW;KAAM,CAAC;KAC3G,OAAO,EAAE,KAAK,EAAE,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,GAAG,GAAG;IACtF;GACF;EACF,CAAC;EACD,iBAAiB,kDAAkD;GACjE,QAAQ;GACR,cAAc;GACd,SAAS,OAAM,MAAK;IAClB,MAAM,WAAW,MAAM,iBAAiB,MAAM,CAAC,GAAG,QAAQ,IAAI;IAC9D,IAAI,cAAc,UAAU,OAAO,SAAS;IAC5C,MAAM,QAAQ,MAAM,eAAe,QAAQ,gBAAgB,EAAE,IAAI,MAAM,WAAW,CAAC;IACnF,MAAM,UAAU,OAAO;IACvB,IAAI,CAAC,SAAS,CAAC,SAAS,OAAO,EAAE,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;IACzE,MAAM,aAAa,MAAM,wBAAwB,MAAM,CAAC,GAAG,QAAQ,MAAM,SAAS,QAAQ,OAAO;IACjG,IAAI,eAAe,aAAa,OAAO,EAAE,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;IACjF,IAAI,eAAe,aACjB,OAAO,EAAE,KAAK,EAAE,OAAO,8EAA8E,GAAG,GAAG;IAE7G,MAAM,oBAAoB,QAAQ;IAClC,IAAI,CAAC,qBAAqB,CAAC,mBAAmB,OAAO,GACnD,OAAO,EAAE,KAAK,EAAE,OAAO,wDAAwD,GAAG,GAAG;IAGvF,MAAM,UAAU,MAAM,eACpB,QAAQ,YACR,QAAQ,WACR,QAAQ,wBAAwB,uBAClC;IACA,MAAM,gCAAgC,QAAQ,SAAS,CAAC,CAAC,OAAM,UAAS;KACtE,QAAQ,KAAK,iFAAiF;MAC5F,WAAW,QAAQ;MACnB;KACF,CAAC;IACH,CAAC;IACD,IAAI;KAMF,IAAI,MALkB,kBAAkB,uBAAuB;MAC7D,eAAe,MAAM;MACrB,OAAO,QAAQ;MACf,WAAW,QAAQ;KACrB,CAAC,MACe,aAAa,OAAO,EAAE,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;KAE9E,MAAM,QAAQ,YAAY,oBAAoB,EAAE,YAAY,QAAQ,UAAU,CAAC,CAAC,CAAC,OAAM,UAAS;MAC9F,QAAQ,KAAK,2EAA2E;OACtF,WAAW,QAAQ;OACnB;MACF,CAAC;KACH,CAAC;KACD,OAAO,EAAE,KAAK;MAAE,WAAW;MAAM;KAAQ,CAAC;IAC5C,SAAS,OAAO;KACd,QAAQ,MAAM,yDAAyD;MACrE,WAAW,QAAQ;MACnB;KACF,CAAC;KACD,OAAO,EAAE,KAAK,EAAE,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,GAAG,GAAG;IACtF;GACF;EACF,CAAC;EACD,iBAAiB,uCAAuC;GACtD,QAAQ;GACR,cAAc;GACd,SAAS,OAAM,MAAK;IAClB,MAAM,WAAW,MAAM,iBAAiB,MAAM,CAAC,GAAG,QAAQ,IAAI;IAC9D,IAAI,cAAc,UAAU,OAAO,SAAS;IAC5C,MAAM,EAAE,OAAO,WAAW,SAAS;IACnC,MAAM,YAAY,EAAE,IAAI,MAAM,WAAW;IACzC,MAAM,WAAW,MAAM,uBAAuB,SAAS,WAAW,SAAS,MAAM;IACjF,IAAI,CAAC,UAAU,OAAO,EAAE,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;IAChE,MAAM,EAAE,eAAe,YAAY;IACnC,IAAI;IACJ,IAAI;KACF,OAAO,MAAM,EAAE,IAAI,KAAK;IAC1B,QAAQ;KACN,OAAO,EAAE,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;IACnD;IACA,IAAI,CAAC,aAAa,IAAI,KAAK,OAAO,KAAK,oBAAoB,YAAY,CAAC,KAAK,gBAAgB,KAAK,GAChG,OAAO,EAAE,KAAK,EAAE,OAAO,0BAA0B,GAAG,GAAG;IAEzD,MAAM,kBAAkB,KAAK;IAC7B,IAAI,QAAQ,WAAW,QAAQ,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC;IACxD,MAAM,UAAU,MAAM,iBAAiB,SAAS,OAAO;IACvD,IAAI,SAAS,OAAO,EAAE,KAAK,EAAE,OAAO,QAAQ,MAAM,GAAG,QAAQ,MAAM;IACnE,MAAM,cAAc,MAAM,cAAc,SAAS,cAAc;KAC7D;KACA,gBAAgB;KAChB,UAAU;IACZ,CAAC;IACD,IAAI,YAAY,WAAW,YAAY;KACrC,MAAM,UAAU,YAAY;KAC5B,IAAI,CAAC,WAAW,CAAC,4BAA4B,SAAS,SAAS,MAAM,GACnE,OAAO,EAAE,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;KAEnD,IAAI,QAAQ,WAAW,QAAQ,OAAO,EAAE,KAAK,EAAE,SAAS,QAAQ,CAAC;KACjE,OAAO,EAAE,KACP;MACE,OAAO,wBAAwB,YAAY;MAC3C,QAAQ,YAAY;MACpB,gBAAgB,QAAQ;KAC1B,GACA,GACF;IACF;IACA,MAAM,aAAa,QAAQ;IAE3B,MAAM,eAAe,YAAY,WAAW,QAAQ,wBAAwB,uBAAuB;IAEnG,IAAI,cAAe,MAAM,WAAW,WAAW,SAAS,GACtD,MAAM,WAAW,cAAc,EAAE,UAAU,CAAC,CAAC,CAAC,OAAM,UAAS;KAC3D,QAAQ,MAAM,iEAAiE;MAAE;MAAW;KAAM,CAAC;IACrG,CAAC;IAEH,MAAM,YAAY,MAAM,qBAAqB,CAAC,MAAM,CAAC,EAAA,CAAG,IAAI,MAAM,KAAK,EAAE,IAAI,OAAO;IACpF,MAAM,gBAAgB,SAAS,YAAY,SAAS,QAAQ,CAAC,CAAC,OAAM,UAAS;KAC3E,QAAQ,MAAM,4EAA4E;MACxF;MACA;KACF,CAAC;IACH,CAAC;IACD,MAAM,QAAQ,OACV,OAAO;KACP;KACA,SAAS;KACT,QAAQ;KACR,SAAS,CAAC;MAAE,MAAM;MAAW,IAAI,QAAQ;MAAI,MAAM,QAAQ,SAAS,QAAQ;KAAO,CAAC;KACpF,UAAU;MAAE,aAAa;MAAiB,WAAW;KAAO;KAC5D,kBAAkB,QAAQ,oBAAoB,KAAA;KAC9C,qBAAqB,QAAQ,uBAAuB,KAAA;IACtD,CAAC,CAAC,CACD,OAAM,UAAS;KACd,QAAQ,MAAM,sEAAsE;MAAE;MAAW;KAAM,CAAC;IAC1G,CAAC;IACH,OAAO,EAAE,KAAK,EAAE,SAAS,YAAY,QAAQ,CAAC;GAChD;EACF,CAAC;EACD,iBAAiB,iCAAiC;GAChD,QAAQ;GACR,cAAc;GACd,SAAS,OAAM,MAAK;IAClB,MAAM,WAAW,MAAM,iBAAiB,MAAM,CAAC,GAAG,QAAQ,IAAI;IAC9D,IAAI,cAAc,UAAU,OAAO,SAAS;IAC5C,MAAM,QAAQ,MAAM,eAAe,QAAQ,gBAAgB,EAAE,IAAI,MAAM,WAAW,CAAC;IACnF,MAAM,UAAU,OAAO;IACvB,IACE,CAAC,SACD,CAAC,WACD,QAAQ,UAAU,SAAS,OAAO,SAClC,QAAQ,WAAW,SAAS,OAAO,QAEnC,OAAO,EAAE,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;IAEnD,IAAI;KAGF,MAAM,gCAAgC,QAAQ,SAAS,CAAC,CAAC,OAAM,UAAS;MACtE,QAAQ,KAAK,uEAAuE;OAClF,WAAW,QAAQ;OACnB;MACF,CAAC;KACH,CAAC;KACD,MAAM,QAAQ,YAAY,cAAc,EAAE,WAAW,QAAQ,UAAU,CAAC;IAC1E,SAAS,OAAO;KACd,QAAQ,MAAM,kEAAkE;MAC9E,WAAW,QAAQ;MACnB;KACF,CAAC;IACH;IACA,IAAI,QAAQ,mBACV,MAAM,QAAQ,kBAAkB,cAAc;KAC5C,eAAe,MAAM;KACrB,GAAI,QAAQ,YAAY,EAAE,WAAW,QAAQ,UAAU,IAAI,CAAC;KAC5D,OAAO,QAAQ;KACf,WAAW,QAAQ;KACnB,eAAe;IACjB,CAAC;SACI;KACL,MAAM,QAAQ,WAAW,uBAAuB;MAAE,OAAO,QAAQ;MAAO,WAAW,QAAQ;KAAU,CAAC;KACtG,MAAM,MAAM,cAAc,SAAS,OAAO,QAAQ,EAAE;KACpD,6BAAkC,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,UAAmB;MACvE,QAAQ,MAAM,oEAAoE;OAChF,WAAW,QAAQ;OACnB,WAAW,QAAQ;OACnB;MACF,CAAC;KACH,CAAC;IACH;IACA,OAAO,EAAE,KAAK,EAAE,SAAS,KAAK,CAAC;GACjC;EACF,CAAC;EACD,iBAAiB,4CAA4C;GAC3D,QAAQ;GACR,cAAc;GACd,SAAS,OAAM,MAAK;IAClB,MAAM,WAAW,MAAM,iBAAiB,MAAM,CAAC,GAAG,QAAQ,IAAI;IAC9D,IAAI,cAAc,UAAU,OAAO,SAAS;IAE5C,MAAM,cAAa,MADC,EAAE,IAAI,KAAK,CAAC,CAAC,YAAY,KAAA,CAAS,EAAA,EAC7B;IACzB,IAAI,eAAe,aAAa,eAAe,OAC7C,OAAO,EAAE,KAAK,EAAE,OAAO,wCAAwC,GAAG,GAAG;IAEvE,MAAM,YAAY,EAAE,IAAI,MAAM,WAAW;IACzC,MAAM,QAAQ,MAAM,eAAe,QAAQ,gBAAgB,SAAS;IACpE,MAAM,MAAM,OAAO;IAGnB,IAAI,CAAC,SAAS,CAAC,OAAO,IAAI,UAAU,SAAS,OAAO,SAAS,IAAI,WAAW,SAAS,OAAO,QAC1F,OAAO,EAAE,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;IAInD,IAAI,CAAC,QAAQ,WACX,OAAO,EAAE,KACP,EACE,OACE,wGACJ,GACA,GACF;IAKF,IAAI,IAAI,OAAO,WAAW,2BAA2B,KAAM,MAAM,WAAW,KAAK,QAAQ,SAAS,GAChG,OAAO,EAAE,KAAK,EAAE,OAAO,2CAA2C,GAAG,GAAG;IAG1E,IAAI,eAAe,SAAS,CAAC,IAAI,kBAC/B,OAAO,EAAE,KAAK,EAAE,OAAO,iEAAiE,GAAG,GAAG;IAEhG,MAAM,aAAa,uBAAuB,KAAK,UAAU;IACzD,MAAM,aAAa,QAAQ;IAE3B,MAAM,YAAY,aAAa,MAAM,qBAAqB,YAAY,KAAK,UAAU,IAAI,CAAC;IAC1F,IAAI,UAAU,SAAS,KAAK,CAAC,QAAQ,YACnC,OAAO,EAAE,KAAK,EAAE,OAAO,+DAA+D,GAAG,GAAG;IAE9F,IAAI,YAAY,qBAAqB,CAAC,CAAC,MAAK,QAAO,UAAU,SAAS,IAAI,QAAQ,CAAC,GACjF,OAAO,EAAE,KAAK,EAAE,OAAO,oEAAoE,GAAG,GAAG;IAMnG,MAAM,cAAc,OAAO,OAAe;KACxC,KAAK,MAAM,YAAY,WAAW,MAAM,QAAQ,WAAY;MAAE;MAAU,YAAY;KAAG,CAAC;IAC1F;IACA,IAAI,eAAe,WAAW,MAAM,YAAY,UAAU;IAC1D,MAAM,UAAU,MAAM,MAAM,cAAc,SAAS,cAAc;KAC/D;KACA;KACA,gBAAgB,IAAI;IACtB,CAAC;IACD,IAAI,CAAC,SAAS;KAEZ,IAAI,eAAe,WAAW,MAAM,YAAY,uBAAuB,KAAK,KAAK,CAAC;KAClF,OAAO,EAAE,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;IACnD;IACA,IAAI,eAAe,OAAO,MAAM,YAAY,UAAU;IAItD,MAAM,OAAO,MAAM,YAAY,WAAW,SAAS;IACnD,IAAI,QAAQ,UAAU,SAAS,GAAG,MAAM,WAAY,cAAc,EAAE,UAAU,CAAC;SAC1E,IAAI,MAAM,MAAM,WAAY,cAAc,MAAM,EAAE,WAAW,CAAC;IACnE,MAAM,SAAS,MAAM,qBAAqB,CAAC,QAAQ,MAAM,CAAC;IAC1D,OAAO,EAAE,KAAK,EAAE,SAAS,iBAAiB,SAAS,MAAM,EAAE,CAAC;GAC9D;EACF,CAAC;EACD,iBAAiB,uCAAuC;GACtD,QAAQ;GACR,cAAc;GACd,SAAS,OAAM,MAAK;IAClB,MAAM,WAAW,MAAM,iBAAiB,MAAM,CAAC,GAAG,QAAQ,IAAI;IAC9D,IAAI,cAAc,UAAU,OAAO,SAAS;IAC5C,MAAM,YAAY,EAAE,IAAI,MAAM,WAAW;IACzC,MAAM,QAAQ,MAAM,eAAe,QAAQ,gBAAgB,SAAS;IACpE,MAAM,MAAM,OAAO;IACnB,IAAI,CAAC,SAAS,CAAC,OAAO,IAAI,UAAU,SAAS,OAAO,SAAS,IAAI,WAAW,SAAS,OAAO,QAC1F,OAAO,EAAE,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;IAEnD,IAAI,CAAC,QAAQ,YAAY,OAAO,EAAE,KAAK,EAAE,OAAO,6CAA6C,GAAG,GAAG;IAEnG,MAAM,UAAS,MADO,0BAA0B,QAAQ,YAAY,KAAK,QAAQ,SAAS,EAAA,CACnE,MAAM,GAAG,MAAM,EAAE,UAAU,QAAQ,IAAI,EAAE,UAAU,QAAQ,CAAC,CAAC,CAAC;IACrF,IAAI,CAAC,QAAQ,OAAO,EAAE,KAAK,EAAE,OAAO,gDAAgD,GAAG,GAAG;IAC1F,MAAM,SAAS,MAAM,QAAQ,eAAe,IAAI;KAAE,OAAO,IAAI;KAAO,QAAQ,IAAI;IAAO,CAAC;IACxF,MAAM,iBAAiB,IAAI,eAAe;IAC1C,eAAe,IAAI,QAAQ;KAAE,UAAU,IAAI;KAAQ,gBAAgB,IAAI;IAAM,CAAC;IAC9E,IAAI;KACF,MAAM,QAAQ,MAAM,YAAY,WAAW,YAAY;MACrD,MAAM,YAAY,MAAM,QAAQ,WAAY,oBAAoB;OAC9D,UAAU,OAAO;OACjB;OACA;OACA,GAAI,QAAQ,kBAAkB,EAAE,OAAO,WAAW,OAAO,eAAe,EAAE,IAAI,CAAC;MACjF,CAAC;MACD,MAAM,QAAQ,YAAY,sBAAsB,SAAS,IAAI;MAC7D,IAAI,OAAO,MAAM,MAAM,cAAc,SAAS,OAAO;OAAE;OAAW,OAAO;MAAM,CAAC;MAChF,OAAO;KACT,CAAC;KACD,IAAI,CAAC,OAAO,OAAO,EAAE,KAAK,EAAE,OAAO,gDAAgD,GAAG,GAAG;KACzF,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC;IACzB,SAAS,OAAO;KACd,OAAO,EAAE,KAAK,EAAE,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,GAAG,GAAG;IACtF;GACF;EACF,CAAC;CACH;AACF"}

package/dist/routes/surface.d.ts

@@ -73,6 +73,8 @@ export interface FactoryApiRoutesDeps {
     intakeReady: boolean;
     factoryReady: boolean;
     knowledgeEnabled: boolean;
+    /** The Factory MCP endpoint is mounted; surfaced so the UI can show its URL. */
+    mcpEnabled: boolean;
     /** Providers the operator opted in to run on the server process's own credentials. */
     deploymentModelProviders?: ReadonlySet<string>;
     knowledgeKey?: string;

package/dist/routes/surface.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"surface.d.ts","sourceRoot":"","sources":["../../src/routes/surface.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AACjE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,KAAK,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEnE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAG7D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,KAAK,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAExG,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAC;AAG/E,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,wBAAwB,CAAC;AAC7E,OAAO,EAAE,uBAAuB,EAAE,MAAM,+BAA+B,CAAC;AACxE,OAAO,EAAE,wBAAwB,EAAE,MAAM,gCAAgC,CAAC;AAQ1E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAEhE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,KAAK,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,oCAAoC,CAAC;AACtF,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,6CAA6C,CAAC;AAC1F,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,qCAAqC,CAAC;AACnF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uCAAuC,CAAC;AAC5E,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAC;AACtF,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,6CAA6C,CAAC;AAC1F,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAC;AAC/E,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAC;AACvE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,yCAAyC,CAAC;AAClF,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,4CAA4C,CAAC;AACxF,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AAEtF,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAClF,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,yCAAyC,CAAC;AAKlF,OAAO,KAAK,EAAE,oBAAoB,EAAE,0BAA0B,EAAE,MAAM,2CAA2C,CAAC;AAElH,OAAO,KAAK,EAA8B,gBAAgB,EAAE,MAAM,uCAAuC,CAAC;AAS1G,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAiB5C,MAAM,WAAW,uBAAuB;IACtC,WAAW,EAAE,kBAAkB,CAAC;IAChC,KAAK,EAAE,OAAO,CAAC;IACf,WAAW,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,oBAAoB;IACnC,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,eAAe,CAAC,eAAe,CAAC,CAAC;IAC7C,+FAA+F;IAC/F,YAAY,EAAE,YAAY,CAAC;IAC3B,qEAAqE;IACrE,IAAI,EAAE,SAAS,CAAC;IAChB,kFAAkF;IAClF,KAAK,CAAC,EAAE,IAAI,CAAC,aAAa,EAAE,SAAS,GAAG,UAAU,CAAC,CAAC;IACpD,WAAW,EAAE,WAAW,CAAC;IACzB,KAAK,EAAE,YAAY,GAAG,aAAa,CAAC;IACpC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,qEAAqE;IACrE,OAAO,CAAC,EAAE,cAAc,CAAC;IACzB,0FAA0F;IAC1F,gBAAgB,CAAC,EAAE,gBAAgB,CAAC,kBAAkB,CAAC,CAAC;IACxD,4EAA4E;IAC5E,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,kBAAkB,EAAE,kBAAkB,CAAC;IACvC,oBAAoB,EAAE,oBAAoB,CAAC;IAC3C,mFAAmF;IACnF,OAAO,EAAE;QACP,MAAM,EAAE,aAAa,CAAC;QACtB,gBAAgB,EAAE,uBAAuB,CAAC;QAC1C,cAAc,EAAE,qBAAqB,CAAC;QACtC,eAAe,EAAE,sBAAsB,CAAC;QACxC,UAAU,EAAE,iBAAiB,CAAC;QAC9B,aAAa,EAAE,oBAAoB,CAAC;QACpC,QAAQ,EAAE,sBAAsB,CAAC;QACjC,WAAW,EAAE,kBAAkB,CAAC;QAChC,SAAS,EAAE,gBAAgB,CAAC;QAC5B,eAAe,EAAE,sBAAsB,CAAC;QACxC,QAAQ,EAAE,uBAAuB,CAAC;KACnC,CAAC;IACF,YAAY,CAAC,EAAE,uBAAuB,EAAE,CAAC;IACzC,WAAW,EAAE,OAAO,CAAC;IACrB,YAAY,EAAE,OAAO,CAAC;IACtB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,sFAAsF;IACtF,wBAAwB,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAC/C,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,8EAA8E;IAC9E,aAAa,EAAE,MAAM,CAAC;IACtB,kDAAkD;IAClD,aAAa,EAAE,aAAa,CAAC;IAC7B,oFAAoF;IACpF,IAAI,EAAE,cAAc,CAAC;IACrB,wBAAwB,CAAC,EAAE,wBAAwB,CAAC;IACpD,iBAAiB,CAAC,EAAE,OAAO,kCAAkC,EAAE,4BAA4B,CAAC;IAC5F,gFAAgF;IAChF,UAAU,CAAC,EAAE,CAAC,KAAK,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACnF,gBAAgB,CAAC,EAAE,CAAC,OAAO,EAAE;QAC3B,iBAAiB,EAAE,wBAAwB,CAAC;QAC5C,gBAAgB,EAAE,uBAAuB,CAAC;QAC1C,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE,8BAA8B,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;KAC3E,KAAK,IAAI,CAAC;CACZ;AAqHD;;;;;;GAMG;AACH,wBAAsB,yBAAyB,CAC7C,qBAAqB,EAAE,0BAA0B,GAAG,IAAI,CAAC,iBAAiB,EAAE,sBAAsB,CAAC,EACnG,WAAW,EAAE,IAAI,CAAC,uBAAuB,EAAE,SAAS,CAAC,EACrD,QAAQ,EAAE,sBAAsB,EAChC,MAAM,EAAE,aAAa,EACrB,KAAK,EAAE,8BAA8B,EACrC,MAAM,CAAC,EAAE,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC,GACxC,OAAO,CAAC,IAAI,CAAC,CAuJf;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,IAAI,CACR,oBAAoB,EAClB,YAAY,GACZ,cAAc,GACd,MAAM,GACN,SAAS,GACT,OAAO,GACP,gBAAgB,GAChB,oBAAoB,GACpB,sBAAsB,GACtB,cAAc,CACjB,GAAG;IACF,WAAW,EAAE,WAAW,CAAC;IACzB,SAAS,CAAC,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC;IACjC,gBAAgB,CAAC,EAAE,gBAAgB,CAAC,kBAAkB,CAAC,CAAC;IACxD,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,aAAa,CAAC;IAC7B,YAAY,EAAE,OAAO,CAAC;IACtB,qFAAqF;IACrF,IAAI,EAAE,cAAc,CAAC;IACrB,OAAO,EAAE,IAAI,CACX,oBAAoB,CAAC,SAAS,CAAC,EAC/B,UAAU,GAAG,QAAQ,GAAG,WAAW,GAAG,iBAAiB,GAAG,gBAAgB,GAAG,eAAe,CAC7F,CAAC;IACF;;;;OAIG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC/B,EACD,aAAa,EAAE,MAAM,GACpB,kBAAkB,CAuCpB;AAiGD;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,oBAAoB,GAAG,QAAQ,EAAE,CA2N/E"}
+{"version":3,"file":"surface.d.ts","sourceRoot":"","sources":["../../src/routes/surface.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AACjE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,KAAK,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEnE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAG7D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,KAAK,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAExG,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAC;AAG/E,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,wBAAwB,CAAC;AAC7E,OAAO,EAAE,uBAAuB,EAAE,MAAM,+BAA+B,CAAC;AACxE,OAAO,EAAE,wBAAwB,EAAE,MAAM,gCAAgC,CAAC;AAQ1E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAEhE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,KAAK,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,oCAAoC,CAAC;AACtF,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,6CAA6C,CAAC;AAC1F,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,qCAAqC,CAAC;AACnF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uCAAuC,CAAC;AAC5E,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAC;AACtF,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,6CAA6C,CAAC;AAC1F,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAC;AAC/E,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAC;AACvE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,yCAAyC,CAAC;AAClF,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,4CAA4C,CAAC;AACxF,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AAEtF,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAClF,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,yCAAyC,CAAC;AAMlF,OAAO,KAAK,EAAE,oBAAoB,EAAE,0BAA0B,EAAE,MAAM,2CAA2C,CAAC;AAElH,OAAO,KAAK,EAA8B,gBAAgB,EAAE,MAAM,uCAAuC,CAAC;AAc1G,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAiB5C,MAAM,WAAW,uBAAuB;IACtC,WAAW,EAAE,kBAAkB,CAAC;IAChC,KAAK,EAAE,OAAO,CAAC;IACf,WAAW,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,oBAAoB;IACnC,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,eAAe,CAAC,eAAe,CAAC,CAAC;IAC7C,+FAA+F;IAC/F,YAAY,EAAE,YAAY,CAAC;IAC3B,qEAAqE;IACrE,IAAI,EAAE,SAAS,CAAC;IAChB,kFAAkF;IAClF,KAAK,CAAC,EAAE,IAAI,CAAC,aAAa,EAAE,SAAS,GAAG,UAAU,CAAC,CAAC;IACpD,WAAW,EAAE,WAAW,CAAC;IACzB,KAAK,EAAE,YAAY,GAAG,aAAa,CAAC;IACpC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,qEAAqE;IACrE,OAAO,CAAC,EAAE,cAAc,CAAC;IACzB,0FAA0F;IAC1F,gBAAgB,CAAC,EAAE,gBAAgB,CAAC,kBAAkB,CAAC,CAAC;IACxD,4EAA4E;IAC5E,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,kBAAkB,EAAE,kBAAkB,CAAC;IACvC,oBAAoB,EAAE,oBAAoB,CAAC;IAC3C,mFAAmF;IACnF,OAAO,EAAE;QACP,MAAM,EAAE,aAAa,CAAC;QACtB,gBAAgB,EAAE,uBAAuB,CAAC;QAC1C,cAAc,EAAE,qBAAqB,CAAC;QACtC,eAAe,EAAE,sBAAsB,CAAC;QACxC,UAAU,EAAE,iBAAiB,CAAC;QAC9B,aAAa,EAAE,oBAAoB,CAAC;QACpC,QAAQ,EAAE,sBAAsB,CAAC;QACjC,WAAW,EAAE,kBAAkB,CAAC;QAChC,SAAS,EAAE,gBAAgB,CAAC;QAC5B,eAAe,EAAE,sBAAsB,CAAC;QACxC,QAAQ,EAAE,uBAAuB,CAAC;KACnC,CAAC;IACF,YAAY,CAAC,EAAE,uBAAuB,EAAE,CAAC;IACzC,WAAW,EAAE,OAAO,CAAC;IACrB,YAAY,EAAE,OAAO,CAAC;IACtB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,gFAAgF;IAChF,UAAU,EAAE,OAAO,CAAC;IACpB,sFAAsF;IACtF,wBAAwB,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAC/C,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,8EAA8E;IAC9E,aAAa,EAAE,MAAM,CAAC;IACtB,kDAAkD;IAClD,aAAa,EAAE,aAAa,CAAC;IAC7B,oFAAoF;IACpF,IAAI,EAAE,cAAc,CAAC;IACrB,wBAAwB,CAAC,EAAE,wBAAwB,CAAC;IACpD,iBAAiB,CAAC,EAAE,OAAO,kCAAkC,EAAE,4BAA4B,CAAC;IAC5F,gFAAgF;IAChF,UAAU,CAAC,EAAE,CAAC,KAAK,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACnF,gBAAgB,CAAC,EAAE,CAAC,OAAO,EAAE;QAC3B,iBAAiB,EAAE,wBAAwB,CAAC;QAC5C,gBAAgB,EAAE,uBAAuB,CAAC;QAC1C,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE,8BAA8B,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;KAC3E,KAAK,IAAI,CAAC;CACZ;AAyHD;;;;;;GAMG;AACH,wBAAsB,yBAAyB,CAC7C,qBAAqB,EAAE,0BAA0B,GAAG,IAAI,CAAC,iBAAiB,EAAE,sBAAsB,CAAC,EACnG,WAAW,EAAE,IAAI,CAAC,uBAAuB,EAAE,SAAS,CAAC,EACrD,QAAQ,EAAE,sBAAsB,EAChC,MAAM,EAAE,aAAa,EACrB,KAAK,EAAE,8BAA8B,EACrC,MAAM,CAAC,EAAE,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC,GACxC,OAAO,CAAC,IAAI,CAAC,CA8Jf;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,IAAI,CACR,oBAAoB,EAClB,YAAY,GACZ,cAAc,GACd,MAAM,GACN,SAAS,GACT,OAAO,GACP,gBAAgB,GAChB,oBAAoB,GACpB,sBAAsB,GACtB,cAAc,CACjB,GAAG;IACF,WAAW,EAAE,WAAW,CAAC;IACzB,SAAS,CAAC,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC;IACjC,gBAAgB,CAAC,EAAE,gBAAgB,CAAC,kBAAkB,CAAC,CAAC;IACxD,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,aAAa,CAAC;IAC7B,YAAY,EAAE,OAAO,CAAC;IACtB,qFAAqF;IACrF,IAAI,EAAE,cAAc,CAAC;IACrB,OAAO,EAAE,IAAI,CACX,oBAAoB,CAAC,SAAS,CAAC,EAC/B,UAAU,GAAG,QAAQ,GAAG,WAAW,GAAG,iBAAiB,GAAG,gBAAgB,GAAG,eAAe,CAC7F,CAAC;IACF;;;;OAIG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC/B,EACD,aAAa,EAAE,MAAM,GACpB,kBAAkB,CAuCpB;AAiGD;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,oBAAoB,GAAG,QAAQ,EAAE,CA6N/E"}