@mastra/factory 0.8.0-alpha.8 → 0.8.0

package/dist/routes/work-items.js.map

@@ -1 +1 @@
-{"version":3,"file":"work-items.js","names":["#resolveTenant","#resolveProject","#auditWorkItemPatch","#proposalRoute"],"sources":["../../src/routes/work-items.ts"],"sourcesContent":["/**\n * Mastra `apiRoutes` for Factory work items (the kanban board).\n *\n * Registered alongside the other `/web/*` routes behind the host auth gate.\n * The board is org-wide: every route re-resolves the caller's `(orgId, userId)`\n * tenant and scopes reads/writes by `orgId`, so any org member sees and moves\n * the same cards while `created_by` / stage history record who acted.\n */\n\nimport type { ApiRoute } from '@mastra/core/server';\nimport { registerApiRoute } from '@mastra/core/server';\nimport type { Context } from 'hono';\n\nimport type {\n  FactoryStartCoordinator,\n  FactoryStartPreparedResult,\n  FactoryStartRequest,\n} from '../rules/start-coordinator.js';\nimport { FactoryStartTransitionError } from '../rules/start-coordinator.js';\nimport type { FactoryTransitionRequest, FactoryTransitionService } from '../rules/transition-service.js';\nimport type { FactoryRuleBoard } from '../rules/types.js';\nimport { FACTORY_RULE_BOARDS, isFactoryRuleStage } from '../rules/types.js';\nimport type { LiveSessions } from '../session/live-sessions.js';\nimport type { AuditEmitter } from '../storage/domains/audit/domain.js';\nimport type { FactoryProjectsStorage } from '../storage/domains/projects/base.js';\nimport type { QueueHealthStorage } from '../storage/domains/queue-health/base.js';\nimport { thresholdsOrDefault } from '../storage/domains/queue-health/base.js';\nimport type {\n  CreateWorkItemInput,\n  ExternalWorkItemSource,\n  FactoryDeferredDecisionRecord,\n  FactoryDispatchStatus,\n  UpdateWorkItemInput,\n  WorkItemPriorState,\n  WorkItemRow,\n  WorkItemSessionInput,\n  WorkItemStage,\n  WorkItemsStorage,\n} from '../storage/domains/work-items/base.js';\nimport { WorkItemRelationError } from '../storage/domains/work-items/base.js';\nimport { computeFactoryMetrics, parseMetricsRange } from '../storage/domains/work-items/metrics.js';\nimport type { RouteDependencies } from './route.js';\nimport { Route } from './route.js';\n\nexport interface WorkItemRoutesDeps extends RouteDependencies {\n  audit: AuditEmitter;\n  /** Factory projects domain — validates the `:id` project belongs to the caller's org. */\n  projects: FactoryProjectsStorage;\n  /** Work-items domain backing the kanban board. */\n  workItems: WorkItemsStorage;\n  /** Per-project queue-health threshold config. */\n  queueHealth: QueueHealthStorage;\n  /** Governed stage-transition service. Stage moves 503 when absent. */\n  transitionService?: Pick<FactoryTransitionService, 'transition' | 'ruleSetVersion'>;\n  /** Coordinator that binds a Factory run before dispatching its kickoff. */\n  startCoordinator?: Pick<FactoryStartCoordinator, 'prepare'>;\n  /** Materialized sessions, read to report which of the listed cards are being worked. */\n  liveSessions: Pick<LiveSessions, 'isRunning'>;\n}\n\n/** Session ids of the listed cards whose agent run is in flight. */\nfunction runningSessionIds(items: WorkItemRow[], liveSessions: Pick<LiveSessions, 'isRunning'>): string[] {\n  const running = new Set<string>();\n  for (const item of items) {\n    for (const { sessionId } of Object.values(item.sessions)) {\n      if (liveSessions.isRunning(sessionId)) running.add(sessionId);\n    }\n  }\n  return [...running];\n}\n\nfunction loose(c: unknown): Context {\n  return c as Context;\n}\n\nconst UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;\n\nconst MAX_STAGES = 16;\nconst MAX_STAGE_LENGTH = 64;\nconst MAX_METADATA_BYTES = 16 * 1024;\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === 'object' && value !== null && !Array.isArray(value);\n}\n\nfunction validStages(value: unknown): value is WorkItemStage[] {\n  return (\n    Array.isArray(value) &&\n    value.length > 0 &&\n    value.length <= MAX_STAGES &&\n    value.every(\n      stage => typeof stage === 'string' && stage.length <= MAX_STAGE_LENGTH && /^[a-z0-9][a-z0-9_-]*$/i.test(stage),\n    ) &&\n    new Set(value).size === value.length\n  );\n}\n\nfunction validMetadata(value: unknown): value is Record<string, unknown> | null {\n  if (value === null) return true;\n  if (!isRecord(value)) return false;\n  try {\n    return JSON.stringify(value).length <= MAX_METADATA_BYTES;\n  } catch {\n    return false;\n  }\n}\n\nfunction parseExternalSource(value: unknown): ExternalWorkItemSource | null | undefined {\n  if (value === undefined || value === null) return value;\n  if (!isRecord(value)) return undefined;\n  const { integrationId, type, externalId, url } = value;\n  if (typeof integrationId !== 'string' || integrationId.length === 0 || integrationId.length > 128) return undefined;\n  if (typeof type !== 'string' || type.length === 0 || type.length > 128) return undefined;\n  if (typeof externalId !== 'string' || externalId.length === 0 || externalId.length > 512) return undefined;\n  if (url !== undefined && (typeof url !== 'string' || url.length > 2048)) return undefined;\n  return { integrationId, type, externalId, ...(url !== undefined ? { url } : {}) };\n}\n\nfunction parseParentWorkItemId(value: unknown): string | null | undefined {\n  if (value === null) return null;\n  if (typeof value !== 'string' || !UUID_RE.test(value)) return undefined;\n  return value;\n}\n\nfunction parseSessions(value: unknown): Record<string, WorkItemSessionInput> | undefined {\n  if (!isRecord(value)) return undefined;\n  const out: Record<string, WorkItemSessionInput> = {};\n  for (const [role, session] of Object.entries(value)) {\n    if (!role || role.length > 64 || !isRecord(session)) return undefined;\n    const { sessionId, branch, threadId } = session;\n    if (typeof sessionId !== 'string' || sessionId.length === 0 || sessionId.length > 512) return undefined;\n    if (typeof branch !== 'string' || branch.length === 0 || branch.length > 512) return undefined;\n    if (typeof threadId !== 'string' || threadId.length === 0 || threadId.length > 512) return undefined;\n    out[role] = { sessionId, branch, threadId };\n  }\n  return out;\n}\n\n/** Validate an untrusted create body. Unknown keys are dropped. */\nexport function parseCreateWorkItem(body: unknown): CreateWorkItemInput | null {\n  if (!isRecord(body)) return null;\n  const { externalSource, title, stages, sessions, metadata } = body;\n  if (typeof title !== 'string' || title.trim().length === 0 || title.length > 500) return null;\n\n  const hasParentWorkItemId = 'parentWorkItemId' in body;\n  const parentWorkItemId = hasParentWorkItemId ? parseParentWorkItemId(body.parentWorkItemId) : undefined;\n  if (hasParentWorkItemId && parentWorkItemId === undefined) return null;\n  const parsedSource = parseExternalSource(externalSource);\n  if (externalSource !== undefined && parsedSource === undefined) return null;\n  if (stages !== undefined && !validStages(stages)) return null;\n  const parsedSessions = sessions === undefined ? undefined : parseSessions(sessions);\n  if (sessions !== undefined && parsedSessions === undefined) return null;\n  if (metadata !== undefined && !validMetadata(metadata)) return null;\n\n  return {\n    title: title.trim(),\n    ...(parsedSource !== undefined ? { externalSource: parsedSource } : {}),\n    ...(hasParentWorkItemId ? { parentWorkItemId: parentWorkItemId ?? null } : {}),\n    ...(stages !== undefined ? { stages } : {}),\n    ...(parsedSessions !== undefined ? { sessions: parsedSessions } : {}),\n    ...(metadata !== undefined ? { metadata } : {}),\n  };\n}\n\n/** Validate an untrusted patch body. Unknown keys are dropped. */\nexport function parseUpdateWorkItem(body: unknown): UpdateWorkItemInput | null {\n  if (!isRecord(body)) return null;\n  const { title, stages, sessions, metadata } = body;\n  const hasParentWorkItemId = 'parentWorkItemId' in body;\n  if (\n    title === undefined &&\n    stages === undefined &&\n    sessions === undefined &&\n    metadata === undefined &&\n    !hasParentWorkItemId\n  )\n    return null;\n  const parentWorkItemId = hasParentWorkItemId ? parseParentWorkItemId(body.parentWorkItemId) : undefined;\n  if (hasParentWorkItemId && parentWorkItemId === undefined) return null;\n  if (title !== undefined && (typeof title !== 'string' || title.trim().length === 0 || title.length > 500))\n    return null;\n  if (stages !== undefined && !validStages(stages)) return null;\n  const parsedSessions = sessions === undefined ? undefined : parseSessions(sessions);\n  if (sessions !== undefined && parsedSessions === undefined) return null;\n  if (metadata !== undefined && !validMetadata(metadata)) return null;\n\n  return {\n    ...(hasParentWorkItemId ? { parentWorkItemId: parentWorkItemId ?? null } : {}),\n    ...(title !== undefined ? { title: title.trim() } : {}),\n    ...(stages !== undefined ? { stages } : {}),\n    ...(parsedSessions !== undefined ? { sessions: parsedSessions } : {}),\n    ...(metadata !== undefined ? { metadata } : {}),\n  };\n}\n\nasync function readJson(c: Context): Promise<unknown | undefined> {\n  try {\n    return await c.req.json();\n  } catch {\n    return undefined;\n  }\n}\n\n/** Fields a PATCH touched, for the bounded `updated` event summary. */\nfunction patchedFields(patch: Record<string, unknown>): string[] {\n  return Object.keys(patch).filter(key => patch[key] !== undefined);\n}\n\nfunction boundedText(value: unknown, max: number): string | undefined {\n  if (typeof value !== 'string') return undefined;\n  const normalized = value.trim();\n  return normalized.length > 0 && normalized.length <= max ? normalized : undefined;\n}\n\nfunction parseTransitionBody(\n  body: unknown,\n): Omit<FactoryTransitionRequest, 'orgId' | 'factoryProjectId' | 'workItemId' | 'actor'> | null {\n  if (!isRecord(body)) return null;\n  const board = FACTORY_RULE_BOARDS.includes(body.board as FactoryRuleBoard)\n    ? (body.board as FactoryRuleBoard)\n    : undefined;\n  const stage = isFactoryRuleStage(body.stage) ? body.stage : undefined;\n  const requestId = boundedText(body.requestId, 256);\n  const cause = boundedText(body.cause, 256);\n  if (\n    !board ||\n    !stage ||\n    !requestId ||\n    !UUID_RE.test(requestId) ||\n    !cause ||\n    !Number.isInteger(body.expectedRevision) ||\n    Number(body.expectedRevision) < 1\n  ) {\n    return null;\n  }\n  return {\n    board,\n    stage,\n    expectedRevision: Number(body.expectedRevision),\n    ingress: { type: 'human', identity: requestId },\n    cause,\n  };\n}\n\nfunction parseInvocation(value: unknown): FactoryStartRequest['invocation'] | undefined | null {\n  if (value === undefined) return undefined;\n  if (!isRecord(value)) return null;\n  if (value.type === 'prompt') {\n    const prompt = boundedText(value.prompt, 16_384);\n    return prompt ? { type: 'prompt', prompt } : null;\n  }\n  if (value.type === 'skill') {\n    const skillName = boundedText(value.skillName, 64);\n    const args = typeof value.arguments === 'string' && value.arguments.length <= 16_384 ? value.arguments : undefined;\n    return skillName && args !== undefined ? { type: 'skill', skillName, arguments: args } : null;\n  }\n  return null;\n}\n\nfunction parseStartBody(\n  body: unknown,\n  tenant: { orgId: string; userId: string },\n  factoryProjectId: string,\n): FactoryStartRequest | null {\n  if (!isRecord(body) || !isRecord(body.workItem)) return null;\n  const input = parseCreateWorkItem(body.workItem.input);\n  const sessionId = boundedText(body.sessionId, 256);\n  const threadTitle = boundedText(body.threadTitle, 512);\n  const kickoffKey = boundedText(body.kickoffKey, 256);\n  const invocation = parseInvocation(body.invocation);\n  const destinationStage = isFactoryRuleStage(body.destinationStage) ? body.destinationStage : undefined;\n  const role = boundedText(body.workItem.role, 32);\n  const id = body.workItem.id === undefined ? undefined : boundedText(body.workItem.id, 64);\n  if (body.workItem.id !== undefined && (!id || !UUID_RE.test(id))) return null;\n  if (\n    !input ||\n    !sessionId ||\n    !UUID_RE.test(sessionId) ||\n    !threadTitle ||\n    !kickoffKey ||\n    !UUID_RE.test(kickoffKey) ||\n    invocation === null ||\n    !destinationStage ||\n    !role\n  ) {\n    return null;\n  }\n  const threadTags = isRecord(body.threadTags)\n    ? Object.fromEntries(\n        Object.entries(body.threadTags)\n          .filter(\n            (entry): entry is [string, string] =>\n              boundedText(entry[0], 64) !== undefined && boundedText(entry[1], 256) !== undefined,\n          )\n          .map(([key, value]) => [key, value.trim()]),\n      )\n    : undefined;\n  return {\n    ...tenant,\n    factoryProjectId,\n    sessionId,\n    threadTitle,\n    threadTags,\n    kickoffKey,\n    invocation,\n    destinationStage,\n    workItem: { id, role, input },\n  };\n}\n\nconst DECISION_STATUSES = new Set<FactoryDispatchStatus>([\n  'pending',\n  'proposed',\n  'dismissed',\n  'leased',\n  'retry',\n  'succeeded',\n  'failed',\n]);\nconst DEFAULT_DECISION_PAGE_SIZE = 25;\nconst MAX_DECISION_PAGE_SIZE = 50;\n\nfunction parseDecisionStatuses(raw: string | undefined): FactoryDispatchStatus[] | undefined {\n  if (!raw) return undefined;\n  const statuses = [...new Set(raw.split(',').map(status => status.trim()))].filter(\n    (status): status is FactoryDispatchStatus => DECISION_STATUSES.has(status as FactoryDispatchStatus),\n  );\n  return statuses.length > 0 ? statuses : undefined;\n}\n\nfunction parseDecisionLimit(raw: string | undefined): number {\n  const parsed = raw ? Number.parseInt(raw, 10) : DEFAULT_DECISION_PAGE_SIZE;\n  if (!Number.isFinite(parsed)) return DEFAULT_DECISION_PAGE_SIZE;\n  return Math.max(1, Math.min(MAX_DECISION_PAGE_SIZE, parsed));\n}\n\nfunction encodeDecisionCursor(decision: FactoryDeferredDecisionRecord): string {\n  return Buffer.from(JSON.stringify([decision.createdAt.toISOString(), decision.id]), 'utf8').toString('base64url');\n}\n\nfunction parseDecisionCursor(raw: string | undefined): { createdAt: Date; id: string } | undefined {\n  if (!raw) return undefined;\n  try {\n    const decoded = JSON.parse(Buffer.from(raw, 'base64url').toString('utf8')) as unknown;\n    if (\n      !Array.isArray(decoded) ||\n      decoded.length !== 2 ||\n      typeof decoded[0] !== 'string' ||\n      typeof decoded[1] !== 'string'\n    ) {\n      return undefined;\n    }\n    const createdAt = new Date(decoded[0]);\n    if (Number.isNaN(createdAt.getTime()) || !UUID_RE.test(decoded[1])) return undefined;\n    return { createdAt, id: decoded[1] };\n  } catch {\n    return undefined;\n  }\n}\n\nfunction decisionType(decision: FactoryDeferredDecisionRecord): string {\n  return typeof decision.decision.type === 'string' ? decision.decision.type.slice(0, 64) : 'unknown';\n}\n\nfunction decisionSummary(decision: FactoryDeferredDecisionRecord) {\n  return {\n    id: decision.id,\n    evaluationId: decision.evaluationId,\n    workItemId: decision.workItemId,\n    type: decisionType(decision),\n    role: typeof decision.decision.role === 'string' ? decision.decision.role.slice(0, 32) : null,\n    status: decision.status,\n    attempts: decision.attempts,\n    lastError: decision.lastError?.slice(0, 512) ?? null,\n    createdAt: decision.createdAt.toISOString(),\n    updatedAt: decision.updatedAt.toISOString(),\n    completedAt: decision.completedAt?.toISOString() ?? null,\n  };\n}\n\nexport class WorkItemRoutes extends Route<WorkItemRoutesDeps> {\n  /** Resolve the `(orgId, userId)` tenant or a ready-to-return error response. */\n  async #resolveTenant(c: Context): Promise<{ orgId: string; userId: string } | { response: Response }> {\n    await this.deps.auth.ensureUser(c);\n    const tenant = this.deps.auth.tenant(c);\n    if (!tenant) return { response: c.json({ error: 'unauthorized' }, 401) };\n    if (!tenant.orgId) {\n      return {\n        response: c.json(\n          { error: 'organization_required', message: 'The Factory board requires an organization.' },\n          403,\n        ),\n      };\n    }\n    return { orgId: tenant.orgId, userId: tenant.userId };\n  }\n\n  /**\n   * Resolve the tenant AND the org-owned project from the `:id` param. Work\n   * items hang off a project, so listing/creating requires the project to\n   * exist in the caller's org.\n   */\n  async #resolveProject(\n    c: Context,\n  ): Promise<\n    { orgId: string; userId: string; factoryProjectId: string; defaultModelId: string | null } | { response: Response }\n  > {\n    const tenant = await this.#resolveTenant(c);\n    if ('response' in tenant) return tenant;\n\n    const projectId = c.req.param('id');\n    if (!projectId || !UUID_RE.test(projectId)) {\n      return { response: c.json({ error: 'Project not found' }, 404) };\n    }\n    const { projects } = this.deps;\n    await projects.ensureReady();\n    const project = await projects.get({ orgId: tenant.orgId, id: projectId });\n    if (!project) {\n      return { response: c.json({ error: 'Project not found' }, 404) };\n    }\n    return { ...tenant, factoryProjectId: projectId, defaultModelId: project.defaultModelId };\n  }\n\n  /**\n   * Emit the audit events a successful work-item PATCH implies: always\n   * `updated`, plus `stage_moved` when the stages actually changed and one\n   * `run.started` per session role the patch introduced.\n   */\n  async #auditWorkItemPatch({\n    context,\n    item,\n    previous,\n    patch,\n  }: {\n    context: Context;\n    item: WorkItemRow;\n    previous: WorkItemPriorState;\n    patch: Record<string, unknown>;\n  }): Promise<void> {\n    const { audit } = this.deps;\n    const target = { type: 'work_item', id: item.id, name: item.title };\n    await audit.emit({\n      context,\n      input: {\n        action: 'factory.work_item.updated',\n        factoryProjectId: item.factoryProjectId,\n        targets: [target],\n        metadata: { fields: patchedFields(patch) },\n      },\n    });\n\n    const stagesChanged =\n      patch.stages !== undefined &&\n      (previous.stages.length !== item.stages.length || previous.stages.some((s, i) => s !== item.stages[i]));\n    if (stagesChanged) {\n      await audit.emit({\n        context,\n        input: {\n          action: 'factory.work_item.stage_moved',\n          factoryProjectId: item.factoryProjectId,\n          targets: [target],\n          metadata: { from: previous.stages, to: item.stages },\n        },\n      });\n    }\n\n    const newRoles = Object.keys(item.sessions).filter(role => !previous.sessionRoles.includes(role));\n    for (const role of newRoles) {\n      const session = item.sessions[role];\n      await audit.emit({\n        context,\n        input: {\n          action: 'factory.run.started',\n          factoryProjectId: item.factoryProjectId,\n          targets: [target],\n          metadata: {\n            role,\n            branch: session?.branch,\n            threadId: session?.threadId,\n            sessionId: session?.sessionId,\n          },\n        },\n      });\n    }\n  }\n\n  /** Releasing a parked run and dropping it: same request, opposite outcomes, both audited as consent. */\n  #proposalRoute({\n    verb,\n    settle,\n  }: {\n    verb: 'approve' | 'dismiss';\n    settle: (\n      orgId: string,\n      factoryProjectId: string,\n      decisionId: string,\n      now: Date,\n    ) => Promise<FactoryDeferredDecisionRecord | null>;\n  }): ApiRoute {\n    const { audit, workItems } = this.deps;\n    return registerApiRoute(`/web/factory/projects/:id/decisions/:decisionId/${verb}`, {\n      method: 'POST',\n      requiresAuth: false,\n      handler: async c => {\n        const context = loose(c);\n        const resolved = await this.#resolveProject(context);\n        if ('response' in resolved) return resolved.response;\n        const decisionId = context.req.param('decisionId');\n        if (!decisionId || !UUID_RE.test(decisionId)) return c.json({ error: 'invalid_decision_id' }, 422);\n        await workItems.ensureReady();\n        const decision = await settle(resolved.orgId, resolved.factoryProjectId, decisionId, new Date());\n        if (!decision) return c.json({ error: 'decision_not_proposed' }, 409);\n        await audit.emit({\n          context,\n          input: {\n            action: verb === 'approve' ? 'factory.run.approved' : 'factory.run.dismissed',\n            factoryProjectId: resolved.factoryProjectId,\n            targets: decision.workItemId\n              ? [{ type: 'work_item', id: decision.workItemId }]\n              : [{ type: 'rule_decision', id: decision.id }],\n            metadata: { decisionId: decision.id, effect: decisionType(decision) },\n          },\n        });\n        return c.json({ decision: decisionSummary(decision) });\n      },\n    });\n  }\n\n  /** Build the Factory work-item routes as Mastra `apiRoutes`. */\n  routes(): ApiRoute[] {\n    const { audit, workItems, queueHealth, transitionService, startCoordinator, liveSessions } = this.deps;\n    return [\n      // ── List the org's work items for a project, and which are being worked ─\n      registerApiRoute('/web/factory/projects/:id/work-items', {\n        method: 'GET',\n        requiresAuth: false,\n        handler: async c => {\n          const resolved = await this.#resolveProject(loose(c));\n          if ('response' in resolved) return resolved.response;\n          await workItems.ensureReady();\n          const items = await workItems.list({\n            orgId: resolved.orgId,\n            factoryProjectId: resolved.factoryProjectId,\n          });\n          return c.json({ workItems: items, runningSessionIds: runningSessionIds(items, liveSessions) });\n        },\n      }),\n\n      // ── Flow metrics aggregated over the project's work items ───────────────\n      registerApiRoute('/web/factory/projects/:id/metrics', {\n        method: 'GET',\n        requiresAuth: false,\n        handler: async c => {\n          const resolved = await this.#resolveProject(loose(c));\n          if ('response' in resolved) return resolved.response;\n          const { windowStart, windowEnd } = parseMetricsRange(\n            loose(c).req.query('from'),\n            loose(c).req.query('to'),\n            new Date(),\n          );\n          await workItems.ensureReady();\n          const items = await workItems.list({\n            orgId: resolved.orgId,\n            factoryProjectId: resolved.factoryProjectId,\n          });\n          return c.json({ metrics: computeFactoryMetrics(items, { windowStart, windowEnd }) });\n        },\n      }),\n\n      // ── Per-project queue-health age-threshold config (seconds) ─────────────\n      registerApiRoute('/web/factory/projects/:id/health/thresholds', {\n        method: 'GET',\n        requiresAuth: false,\n        handler: async c => {\n          const resolved = await this.#resolveProject(loose(c));\n          if ('response' in resolved) return resolved.response;\n          await queueHealth.ensureReady();\n          const stored = await queueHealth.getConfig(resolved.orgId, resolved.factoryProjectId);\n          // Validate at the read choke point: `getConfig` round-trips a stored\n          // JSONB row, and only `saveConfig` validates on write — a corrupted or\n          // hand-edited row (empty / non-ascending) would otherwise flow to the\n          // chart and invert bucket colors. Fall back to the default on invalid.\n          return c.json({ thresholds: thresholdsOrDefault(stored) });\n        },\n      }),\n\n      // ── Bounded durable rule-decision status ────────────────────────────────\n      registerApiRoute('/web/factory/projects/:id/decisions', {\n        method: 'GET',\n        requiresAuth: false,\n        handler: async c => {\n          const context = loose(c);\n          const resolved = await this.#resolveProject(context);\n          if ('response' in resolved) return resolved.response;\n\n          const cursorRaw = context.req.query('before');\n          const before = parseDecisionCursor(cursorRaw);\n          if (cursorRaw && !before) return c.json({ error: 'invalid_cursor' }, 400);\n          await workItems.ensureReady();\n          const page = await workItems.listDeferredDecisionPage({\n            orgId: resolved.orgId,\n            factoryProjectId: resolved.factoryProjectId,\n            statuses: parseDecisionStatuses(context.req.query('statuses')),\n            before,\n            limit: parseDecisionLimit(context.req.query('limit')),\n          });\n          const last = page.decisions.at(-1);\n          return c.json({\n            decisions: page.decisions.map(decisionSummary),\n            ...(page.hasMore && last ? { nextCursor: encodeDecisionCursor(last) } : {}),\n          });\n        },\n      }),\n\n      this.#proposalRoute({ verb: 'approve', settle: workItems.approveDeferredDecision.bind(workItems) }),\n      this.#proposalRoute({ verb: 'dismiss', settle: workItems.dismissDeferredDecision.bind(workItems) }),\n\n      registerApiRoute('/web/factory/projects/:id/decisions/:decisionId/retry', {\n        method: 'POST',\n        requiresAuth: false,\n        handler: async c => {\n          const context = loose(c);\n          const resolved = await this.#resolveProject(context);\n          if ('response' in resolved) return resolved.response;\n          const decisionId = context.req.param('decisionId');\n          if (!decisionId || !UUID_RE.test(decisionId)) return c.json({ error: 'invalid_decision_id' }, 422);\n          await workItems.ensureReady();\n          const decision = await workItems.retryDeferredDecision(\n            resolved.orgId,\n            resolved.factoryProjectId,\n            decisionId,\n            new Date(),\n          );\n          if (!decision) return c.json({ error: 'decision_not_retryable' }, 409);\n          return c.json({ decision: decisionSummary(decision) });\n        },\n      }),\n\n      // ── Create (upsert on sourceKey) a work item ─────────────────────────────\n      registerApiRoute('/web/factory/projects/:id/work-items', {\n        method: 'POST',\n        requiresAuth: false,\n        handler: async c => {\n          const resolved = await this.#resolveProject(loose(c));\n          if ('response' in resolved) return resolved.response;\n\n          const body = await readJson(loose(c));\n          if (body === undefined) return c.json({ error: 'Invalid JSON body' }, 400);\n          const input = parseCreateWorkItem(body);\n          if (!input) return c.json({ error: 'invalid_work_item' }, 400);\n          if ((input.stages ?? ['intake']).length !== 1 || (input.stages ?? ['intake'])[0] !== 'intake') {\n            return c.json(\n              { error: 'governed_transition_required', message: 'New work items must enter through Factory intake.' },\n              409,\n            );\n          }\n\n          await workItems.ensureReady();\n          try {\n            const result = await workItems.upsert({\n              orgId: resolved.orgId,\n              userId: resolved.userId,\n              factoryProjectId: resolved.factoryProjectId,\n              input,\n              reuseMode: 'non-stage',\n            });\n            let item = result.item;\n            if (result.created) {\n              if (!transitionService) {\n                await workItems.delete({ orgId: resolved.orgId, id: item.id });\n                return c.json({ error: 'factory_transitions_unavailable' }, 503);\n              }\n              const entered = await transitionService.transition({\n                orgId: resolved.orgId,\n                factoryProjectId: resolved.factoryProjectId,\n                workItemId: item.id,\n                board: item.externalSource?.type === 'pull-request' ? 'review' : 'work',\n                stage: 'intake',\n                expectedRevision: item.revision,\n                actor: { type: 'human', id: resolved.userId },\n                ingress: { type: 'human', identity: `work-item:${item.id}:initial-entry` },\n                cause: 'work_item_created',\n                initialEntry: true,\n              });\n              if (entered.status === 'rejected') {\n                await workItems.delete({ orgId: resolved.orgId, id: item.id });\n                return c.json({ status: 'rejected', code: entered.code, reason: entered.reason }, 422);\n              }\n              item = (await workItems.getForProject(resolved.orgId, resolved.factoryProjectId, item.id)) ?? item;\n              await audit.emit({\n                context: loose(c),\n                input: {\n                  action: 'factory.work_item.created',\n                  factoryProjectId: resolved.factoryProjectId,\n                  targets: [{ type: 'work_item', id: item.id, name: item.title }],\n                  metadata: { externalSource: item.externalSource, stages: item.stages },\n                },\n              });\n            } else {\n              // Source-key reuse: the POST updated an existing card, so audit it\n              // as an update (plus stage/run events) instead of a false creation.\n              const { stages: _stages, sessions: _sessions, ...boundedPatch } = input;\n              await this.#auditWorkItemPatch({\n                context: loose(c),\n                item,\n                previous: result.previous,\n                patch: boundedPatch as unknown as Record<string, unknown>,\n              });\n            }\n            return c.json({ workItem: item });\n          } catch (error) {\n            if (error instanceof WorkItemRelationError) {\n              return c.json({ error: error.code, message: error.message }, 400);\n            }\n            throw error;\n          }\n        },\n      }),\n\n      // ── Authoritative stage transition ──────────────────────────────────────\n      registerApiRoute('/web/factory/projects/:id/work-items/:workItemId/transition', {\n        method: 'POST',\n        requiresAuth: false,\n        handler: async c => {\n          const resolved = await this.#resolveProject(loose(c));\n          if ('response' in resolved) return resolved.response;\n          const workItemId = loose(c).req.param('workItemId');\n          if (!workItemId || !UUID_RE.test(workItemId)) return c.json({ error: 'Work item not found' }, 404);\n          const parsed = parseTransitionBody(await readJson(loose(c)));\n          if (!parsed) return c.json({ error: 'invalid_transition_request' }, 400);\n          if (!transitionService) {\n            return c.json({ error: 'factory_transition_unavailable' }, 503);\n          }\n          await workItems.ensureReady();\n          const result = await transitionService.transition({\n            ...parsed,\n            orgId: resolved.orgId,\n            factoryProjectId: resolved.factoryProjectId,\n            workItemId,\n            actor: { type: 'human', id: resolved.userId },\n            ingress: {\n              ...parsed.ingress,\n              identity: `human:${resolved.userId}:${parsed.ingress.identity}`,\n            },\n          });\n          await audit.emit({\n            context: loose(c),\n            input: {\n              action:\n                result.status === 'accepted'\n                  ? 'factory.work_item.stage_moved'\n                  : 'factory.work_item.transition_rejected',\n              factoryProjectId: resolved.factoryProjectId,\n              targets: [{ type: 'work_item', id: workItemId }],\n              metadata: {\n                transitionId: result.transitionId,\n                ingressType: parsed.ingress.type,\n                ruleSetVersion: transitionService.ruleSetVersion,\n                ...(result.status === 'accepted'\n                  ? { to: result.stage, revision: result.revision }\n                  : { code: result.code, reason: result.reason }),\n              },\n            },\n          });\n          if (result.status === 'accepted') return c.json({ result });\n          return c.json({ result }, result.code === 'stale' ? 409 : 422);\n        },\n      }),\n\n      // ── Bind a Factory run before dispatching its kickoff ────────────────────\n      registerApiRoute('/web/factory/projects/:id/runs/start', {\n        method: 'POST',\n        requiresAuth: false,\n        handler: async c => {\n          const resolved = await this.#resolveProject(loose(c));\n          if ('response' in resolved) return resolved.response;\n          if (!startCoordinator) {\n            return c.json({ error: 'factory_start_unavailable' }, 503);\n          }\n          const input = parseStartBody(await readJson(loose(c)), resolved, resolved.factoryProjectId);\n          if (!input) return c.json({ error: 'invalid_factory_start' }, 400);\n          input.requestContext = loose(c).get('requestContext');\n          input.defaultModelId = resolved.defaultModelId ?? undefined;\n          if (\n            !input.workItem.id &&\n            ((input.workItem.input.stages ?? ['intake']).length !== 1 ||\n              (input.workItem.input.stages ?? ['intake'])[0] !== 'intake')\n          ) {\n            return c.json(\n              { error: 'governed_transition_required', message: 'Create the work item in Intake before starting it.' },\n              409,\n            );\n          }\n          await workItems.ensureReady();\n          let prepared: FactoryStartPreparedResult;\n          try {\n            prepared = await startCoordinator.prepare(input);\n          } catch (error) {\n            if (error instanceof FactoryStartTransitionError) {\n              return c.json({ result: error.result }, error.result.code === 'stale' ? 409 : 422);\n            }\n            throw error;\n          }\n          await audit.emit({\n            context: loose(c),\n            input: {\n              action: 'factory.run.started',\n              factoryProjectId: resolved.factoryProjectId,\n              targets: [{ type: 'work_item', id: prepared.workItemId }],\n              metadata: {\n                role: input.workItem.role,\n                branch: prepared.branch,\n                threadId: prepared.threadId,\n                sessionId: prepared.sessionId,\n                bindingId: prepared.bindingId,\n              },\n            },\n          });\n          return c.json({ prepared }, 202);\n        },\n      }),\n\n      // ── Patch non-stage metadata / sessions / title ──────────────────────────\n      registerApiRoute('/web/factory/work-items/:id', {\n        method: 'PATCH',\n        requiresAuth: false,\n        handler: async c => {\n          const tenant = await this.#resolveTenant(loose(c));\n          if ('response' in tenant) return tenant.response;\n\n          const id = loose(c).req.param('id');\n          if (!id || !UUID_RE.test(id)) return c.json({ error: 'Work item not found' }, 404);\n\n          const body = await readJson(loose(c));\n          if (body === undefined) return c.json({ error: 'Invalid JSON body' }, 400);\n          const patch = parseUpdateWorkItem(body);\n          if (!patch) return c.json({ error: 'invalid_work_item_patch' }, 400);\n          if (patch.stages !== undefined) {\n            return c.json(\n              { error: 'governed_transition_required', message: 'Use the Factory transition endpoint to move stages.' },\n              409,\n            );\n          }\n\n          await workItems.ensureReady();\n          try {\n            const updated = await workItems.update({ orgId: tenant.orgId, id, userId: tenant.userId, patch });\n            if (!updated) return c.json({ error: 'Work item not found' }, 404);\n            await this.#auditWorkItemPatch({\n              context: loose(c),\n              item: updated.item,\n              previous: updated.previous,\n              patch: patch as Record<string, unknown>,\n            });\n            return c.json({ workItem: updated.item });\n          } catch (error) {\n            if (error instanceof WorkItemRelationError) {\n              return c.json({ error: error.code, message: error.message }, 400);\n            }\n            throw error;\n          }\n        },\n      }),\n\n      // ── Remove a work item ───────────────────────────────────────────────────\n      registerApiRoute('/web/factory/work-items/:id', {\n        method: 'DELETE',\n        requiresAuth: false,\n        handler: async c => {\n          const tenant = await this.#resolveTenant(loose(c));\n          if ('response' in tenant) return tenant.response;\n\n          const id = loose(c).req.param('id');\n          if (!id || !UUID_RE.test(id)) return c.json({ error: 'Work item not found' }, 404);\n\n          await workItems.ensureReady();\n          const deleted = await workItems.delete({ orgId: tenant.orgId, id });\n          if (!deleted) return c.json({ error: 'Work item not found' }, 404);\n          await audit.emit({\n            context: loose(c),\n            input: {\n              action: 'factory.work_item.deleted',\n              factoryProjectId: deleted.factoryProjectId,\n              targets: [{ type: 'work_item', id: deleted.id, name: deleted.title }],\n            },\n          });\n          return c.json({ ok: true });\n        },\n      }),\n    ];\n  }\n}\n"],"mappings":";;;;;;;;;AA6DA,SAAS,kBAAkB,OAAsB,cAAyD;CACxG,MAAM,0BAAU,IAAI,IAAY;CAChC,KAAK,MAAM,QAAQ,OACjB,KAAK,MAAM,EAAE,eAAe,OAAO,OAAO,KAAK,QAAQ,GACrD,IAAI,aAAa,UAAU,SAAS,GAAG,QAAQ,IAAI,SAAS;CAGhE,OAAO,CAAC,GAAG,OAAO;AACpB;AAEA,SAAS,MAAM,GAAqB;CAClC,OAAO;AACT;AAEA,MAAM,UAAU;AAEhB,MAAM,aAAa;AACnB,MAAM,mBAAmB;AACzB,MAAM,qBAAqB,KAAK;AAEhC,SAAS,SAAS,OAAkD;CAClE,OAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAC5E;AAEA,SAAS,YAAY,OAA0C;CAC7D,OACE,MAAM,QAAQ,KAAK,KACnB,MAAM,SAAS,KACf,MAAM,UAAU,cAChB,MAAM,OACJ,UAAS,OAAO,UAAU,YAAY,MAAM,UAAU,oBAAoB,yBAAyB,KAAK,KAAK,CAC/G,KACA,IAAI,IAAI,KAAK,CAAC,CAAC,SAAS,MAAM;AAElC;AAEA,SAAS,cAAc,OAAyD;CAC9E,IAAI,UAAU,MAAM,OAAO;CAC3B,IAAI,CAAC,SAAS,KAAK,GAAG,OAAO;CAC7B,IAAI;EACF,OAAO,KAAK,UAAU,KAAK,CAAC,CAAC,UAAU;CACzC,QAAQ;EACN,OAAO;CACT;AACF;AAEA,SAAS,oBAAoB,OAA2D;CACtF,IAAI,UAAU,KAAA,KAAa,UAAU,MAAM,OAAO;CAClD,IAAI,CAAC,SAAS,KAAK,GAAG,OAAO,KAAA;CAC7B,MAAM,EAAE,eAAe,MAAM,YAAY,QAAQ;CACjD,IAAI,OAAO,kBAAkB,YAAY,cAAc,WAAW,KAAK,cAAc,SAAS,KAAK,OAAO,KAAA;CAC1G,IAAI,OAAO,SAAS,YAAY,KAAK,WAAW,KAAK,KAAK,SAAS,KAAK,OAAO,KAAA;CAC/E,IAAI,OAAO,eAAe,YAAY,WAAW,WAAW,KAAK,WAAW,SAAS,KAAK,OAAO,KAAA;CACjG,IAAI,QAAQ,KAAA,MAAc,OAAO,QAAQ,YAAY,IAAI,SAAS,OAAO,OAAO,KAAA;CAChF,OAAO;EAAE;EAAe;EAAM;EAAY,GAAI,QAAQ,KAAA,IAAY,EAAE,IAAI,IAAI,CAAC;CAAG;AAClF;AAEA,SAAS,sBAAsB,OAA2C;CACxE,IAAI,UAAU,MAAM,OAAO;CAC3B,IAAI,OAAO,UAAU,YAAY,CAAC,QAAQ,KAAK,KAAK,GAAG,OAAO,KAAA;CAC9D,OAAO;AACT;AAEA,SAAS,cAAc,OAAkE;CACvF,IAAI,CAAC,SAAS,KAAK,GAAG,OAAO,KAAA;CAC7B,MAAM,MAA4C,CAAC;CACnD,KAAK,MAAM,CAAC,MAAM,YAAY,OAAO,QAAQ,KAAK,GAAG;EACnD,IAAI,CAAC,QAAQ,KAAK,SAAS,MAAM,CAAC,SAAS,OAAO,GAAG,OAAO,KAAA;EAC5D,MAAM,EAAE,WAAW,QAAQ,aAAa;EACxC,IAAI,OAAO,cAAc,YAAY,UAAU,WAAW,KAAK,UAAU,SAAS,KAAK,OAAO,KAAA;EAC9F,IAAI,OAAO,WAAW,YAAY,OAAO,WAAW,KAAK,OAAO,SAAS,KAAK,OAAO,KAAA;EACrF,IAAI,OAAO,aAAa,YAAY,SAAS,WAAW,KAAK,SAAS,SAAS,KAAK,OAAO,KAAA;EAC3F,IAAI,QAAQ;GAAE;GAAW;GAAQ;EAAS;CAC5C;CACA,OAAO;AACT;;AAGA,SAAgB,oBAAoB,MAA2C;CAC7E,IAAI,CAAC,SAAS,IAAI,GAAG,OAAO;CAC5B,MAAM,EAAE,gBAAgB,OAAO,QAAQ,UAAU,aAAa;CAC9D,IAAI,OAAO,UAAU,YAAY,MAAM,KAAK,CAAC,CAAC,WAAW,KAAK,MAAM,SAAS,KAAK,OAAO;CAEzF,MAAM,sBAAsB,sBAAsB;CAClD,MAAM,mBAAmB,sBAAsB,sBAAsB,KAAK,gBAAgB,IAAI,KAAA;CAC9F,IAAI,uBAAuB,qBAAqB,KAAA,GAAW,OAAO;CAClE,MAAM,eAAe,oBAAoB,cAAc;CACvD,IAAI,mBAAmB,KAAA,KAAa,iBAAiB,KAAA,GAAW,OAAO;CACvE,IAAI,WAAW,KAAA,KAAa,CAAC,YAAY,MAAM,GAAG,OAAO;CACzD,MAAM,iBAAiB,aAAa,KAAA,IAAY,KAAA,IAAY,cAAc,QAAQ;CAClF,IAAI,aAAa,KAAA,KAAa,mBAAmB,KAAA,GAAW,OAAO;CACnE,IAAI,aAAa,KAAA,KAAa,CAAC,cAAc,QAAQ,GAAG,OAAO;CAE/D,OAAO;EACL,OAAO,MAAM,KAAK;EAClB,GAAI,iBAAiB,KAAA,IAAY,EAAE,gBAAgB,aAAa,IAAI,CAAC;EACrE,GAAI,sBAAsB,EAAE,kBAAkB,oBAAoB,KAAK,IAAI,CAAC;EAC5E,GAAI,WAAW,KAAA,IAAY,EAAE,OAAO,IAAI,CAAC;EACzC,GAAI,mBAAmB,KAAA,IAAY,EAAE,UAAU,eAAe,IAAI,CAAC;EACnE,GAAI,aAAa,KAAA,IAAY,EAAE,SAAS,IAAI,CAAC;CAC/C;AACF;;AAGA,SAAgB,oBAAoB,MAA2C;CAC7E,IAAI,CAAC,SAAS,IAAI,GAAG,OAAO;CAC5B,MAAM,EAAE,OAAO,QAAQ,UAAU,aAAa;CAC9C,MAAM,sBAAsB,sBAAsB;CAClD,IACE,UAAU,KAAA,KACV,WAAW,KAAA,KACX,aAAa,KAAA,KACb,aAAa,KAAA,KACb,CAAC,qBAED,OAAO;CACT,MAAM,mBAAmB,sBAAsB,sBAAsB,KAAK,gBAAgB,IAAI,KAAA;CAC9F,IAAI,uBAAuB,qBAAqB,KAAA,GAAW,OAAO;CAClE,IAAI,UAAU,KAAA,MAAc,OAAO,UAAU,YAAY,MAAM,KAAK,CAAC,CAAC,WAAW,KAAK,MAAM,SAAS,MACnG,OAAO;CACT,IAAI,WAAW,KAAA,KAAa,CAAC,YAAY,MAAM,GAAG,OAAO;CACzD,MAAM,iBAAiB,aAAa,KAAA,IAAY,KAAA,IAAY,cAAc,QAAQ;CAClF,IAAI,aAAa,KAAA,KAAa,mBAAmB,KAAA,GAAW,OAAO;CACnE,IAAI,aAAa,KAAA,KAAa,CAAC,cAAc,QAAQ,GAAG,OAAO;CAE/D,OAAO;EACL,GAAI,sBAAsB,EAAE,kBAAkB,oBAAoB,KAAK,IAAI,CAAC;EAC5E,GAAI,UAAU,KAAA,IAAY,EAAE,OAAO,MAAM,KAAK,EAAE,IAAI,CAAC;EACrD,GAAI,WAAW,KAAA,IAAY,EAAE,OAAO,IAAI,CAAC;EACzC,GAAI,mBAAmB,KAAA,IAAY,EAAE,UAAU,eAAe,IAAI,CAAC;EACnE,GAAI,aAAa,KAAA,IAAY,EAAE,SAAS,IAAI,CAAC;CAC/C;AACF;AAEA,eAAe,SAAS,GAA0C;CAChE,IAAI;EACF,OAAO,MAAM,EAAE,IAAI,KAAK;CAC1B,QAAQ;EACN;CACF;AACF;;AAGA,SAAS,cAAc,OAA0C;CAC/D,OAAO,OAAO,KAAK,KAAK,CAAC,CAAC,QAAO,QAAO,MAAM,SAAS,KAAA,CAAS;AAClE;AAEA,SAAS,YAAY,OAAgB,KAAiC;CACpE,IAAI,OAAO,UAAU,UAAU,OAAO,KAAA;CACtC,MAAM,aAAa,MAAM,KAAK;CAC9B,OAAO,WAAW,SAAS,KAAK,WAAW,UAAU,MAAM,aAAa,KAAA;AAC1E;AAEA,SAAS,oBACP,MAC8F;CAC9F,IAAI,CAAC,SAAS,IAAI,GAAG,OAAO;CAC5B,MAAM,QAAQ,oBAAoB,SAAS,KAAK,KAAyB,IACpE,KAAK,QACN,KAAA;CACJ,MAAM,QAAQ,mBAAmB,KAAK,KAAK,IAAI,KAAK,QAAQ,KAAA;CAC5D,MAAM,YAAY,YAAY,KAAK,WAAW,GAAG;CACjD,MAAM,QAAQ,YAAY,KAAK,OAAO,GAAG;CACzC,IACE,CAAC,SACD,CAAC,SACD,CAAC,aACD,CAAC,QAAQ,KAAK,SAAS,KACvB,CAAC,SACD,CAAC,OAAO,UAAU,KAAK,gBAAgB,KACvC,OAAO,KAAK,gBAAgB,IAAI,GAEhC,OAAO;CAET,OAAO;EACL;EACA;EACA,kBAAkB,OAAO,KAAK,gBAAgB;EAC9C,SAAS;GAAE,MAAM;GAAS,UAAU;EAAU;EAC9C;CACF;AACF;AAEA,SAAS,gBAAgB,OAAsE;CAC7F,IAAI,UAAU,KAAA,GAAW,OAAO,KAAA;CAChC,IAAI,CAAC,SAAS,KAAK,GAAG,OAAO;CAC7B,IAAI,MAAM,SAAS,UAAU;EAC3B,MAAM,SAAS,YAAY,MAAM,QAAQ,KAAM;EAC/C,OAAO,SAAS;GAAE,MAAM;GAAU;EAAO,IAAI;CAC/C;CACA,IAAI,MAAM,SAAS,SAAS;EAC1B,MAAM,YAAY,YAAY,MAAM,WAAW,EAAE;EACjD,MAAM,OAAO,OAAO,MAAM,cAAc,YAAY,MAAM,UAAU,UAAU,QAAS,MAAM,YAAY,KAAA;EACzG,OAAO,aAAa,SAAS,KAAA,IAAY;GAAE,MAAM;GAAS;GAAW,WAAW;EAAK,IAAI;CAC3F;CACA,OAAO;AACT;AAEA,SAAS,eACP,MACA,QACA,kBAC4B;CAC5B,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS,KAAK,QAAQ,GAAG,OAAO;CACxD,MAAM,QAAQ,oBAAoB,KAAK,SAAS,KAAK;CACrD,MAAM,YAAY,YAAY,KAAK,WAAW,GAAG;CACjD,MAAM,cAAc,YAAY,KAAK,aAAa,GAAG;CACrD,MAAM,aAAa,YAAY,KAAK,YAAY,GAAG;CACnD,MAAM,aAAa,gBAAgB,KAAK,UAAU;CAClD,MAAM,mBAAmB,mBAAmB,KAAK,gBAAgB,IAAI,KAAK,mBAAmB,KAAA;CAC7F,MAAM,OAAO,YAAY,KAAK,SAAS,MAAM,EAAE;CAC/C,MAAM,KAAK,KAAK,SAAS,OAAO,KAAA,IAAY,KAAA,IAAY,YAAY,KAAK,SAAS,IAAI,EAAE;CACxF,IAAI,KAAK,SAAS,OAAO,KAAA,MAAc,CAAC,MAAM,CAAC,QAAQ,KAAK,EAAE,IAAI,OAAO;CACzE,IACE,CAAC,SACD,CAAC,aACD,CAAC,QAAQ,KAAK,SAAS,KACvB,CAAC,eACD,CAAC,cACD,CAAC,QAAQ,KAAK,UAAU,KACxB,eAAe,QACf,CAAC,oBACD,CAAC,MAED,OAAO;CAET,MAAM,aAAa,SAAS,KAAK,UAAU,IACvC,OAAO,YACL,OAAO,QAAQ,KAAK,UAAU,CAAC,CAC5B,QACE,UACC,YAAY,MAAM,IAAI,EAAE,MAAM,KAAA,KAAa,YAAY,MAAM,IAAI,GAAG,MAAM,KAAA,CAC9E,CAAC,CACA,KAAK,CAAC,KAAK,WAAW,CAAC,KAAK,MAAM,KAAK,CAAC,CAAC,CAC9C,IACA,KAAA;CACJ,OAAO;EACL,GAAG;EACH;EACA;EACA;EACA;EACA;EACA;EACA;EACA,UAAU;GAAE;GAAI;GAAM;EAAM;CAC9B;AACF;AAEA,MAAM,oCAAoB,IAAI,IAA2B;CACvD;CACA;CACA;CACA;CACA;CACA;CACA;AACF,CAAC;AACD,MAAM,6BAA6B;AACnC,MAAM,yBAAyB;AAE/B,SAAS,sBAAsB,KAA8D;CAC3F,IAAI,CAAC,KAAK,OAAO,KAAA;CACjB,MAAM,WAAW,CAAC,GAAG,IAAI,IAAI,IAAI,MAAM,GAAG,CAAC,CAAC,KAAI,WAAU,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,QACxE,WAA4C,kBAAkB,IAAI,MAA+B,CACpG;CACA,OAAO,SAAS,SAAS,IAAI,WAAW,KAAA;AAC1C;AAEA,SAAS,mBAAmB,KAAiC;CAC3D,MAAM,SAAS,MAAM,OAAO,SAAS,KAAK,EAAE,IAAI;CAChD,IAAI,CAAC,OAAO,SAAS,MAAM,GAAG,OAAO;CACrC,OAAO,KAAK,IAAI,GAAG,KAAK,IAAI,wBAAwB,MAAM,CAAC;AAC7D;AAEA,SAAS,qBAAqB,UAAiD;CAC7E,OAAO,OAAO,KAAK,KAAK,UAAU,CAAC,SAAS,UAAU,YAAY,GAAG,SAAS,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,SAAS,WAAW;AAClH;AAEA,SAAS,oBAAoB,KAAsE;CACjG,IAAI,CAAC,KAAK,OAAO,KAAA;CACjB,IAAI;EACF,MAAM,UAAU,KAAK,MAAM,OAAO,KAAK,KAAK,WAAW,CAAC,CAAC,SAAS,MAAM,CAAC;EACzE,IACE,CAAC,MAAM,QAAQ,OAAO,KACtB,QAAQ,WAAW,KACnB,OAAO,QAAQ,OAAO,YACtB,OAAO,QAAQ,OAAO,UAEtB;EAEF,MAAM,YAAY,IAAI,KAAK,QAAQ,EAAE;EACrC,IAAI,OAAO,MAAM,UAAU,QAAQ,CAAC,KAAK,CAAC,QAAQ,KAAK,QAAQ,EAAE,GAAG,OAAO,KAAA;EAC3E,OAAO;GAAE;GAAW,IAAI,QAAQ;EAAG;CACrC,QAAQ;EACN;CACF;AACF;AAEA,SAAS,aAAa,UAAiD;CACrE,OAAO,OAAO,SAAS,SAAS,SAAS,WAAW,SAAS,SAAS,KAAK,MAAM,GAAG,EAAE,IAAI;AAC5F;AAEA,SAAS,gBAAgB,UAAyC;CAChE,OAAO;EACL,IAAI,SAAS;EACb,cAAc,SAAS;EACvB,YAAY,SAAS;EACrB,MAAM,aAAa,QAAQ;EAC3B,MAAM,OAAO,SAAS,SAAS,SAAS,WAAW,SAAS,SAAS,KAAK,MAAM,GAAG,EAAE,IAAI;EACzF,QAAQ,SAAS;EACjB,UAAU,SAAS;EACnB,WAAW,SAAS,WAAW,MAAM,GAAG,GAAG,KAAK;EAChD,WAAW,SAAS,UAAU,YAAY;EAC1C,WAAW,SAAS,UAAU,YAAY;EAC1C,aAAa,SAAS,aAAa,YAAY,KAAK;CACtD;AACF;AAEA,IAAa,iBAAb,cAAoC,MAA0B;;CAE5D,MAAMA,eAAe,GAAiF;EACpG,MAAM,KAAK,KAAK,KAAK,WAAW,CAAC;EACjC,MAAM,SAAS,KAAK,KAAK,KAAK,OAAO,CAAC;EACtC,IAAI,CAAC,QAAQ,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,eAAe,GAAG,GAAG,EAAE;EACvE,IAAI,CAAC,OAAO,OACV,OAAO,EACL,UAAU,EAAE,KACV;GAAE,OAAO;GAAyB,SAAS;EAA8C,GACzF,GACF,EACF;EAEF,OAAO;GAAE,OAAO,OAAO;GAAO,QAAQ,OAAO;EAAO;CACtD;;;;;;CAOA,MAAMC,gBACJ,GAGA;EACA,MAAM,SAAS,MAAM,KAAKD,eAAe,CAAC;EAC1C,IAAI,cAAc,QAAQ,OAAO;EAEjC,MAAM,YAAY,EAAE,IAAI,MAAM,IAAI;EAClC,IAAI,CAAC,aAAa,CAAC,QAAQ,KAAK,SAAS,GACvC,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG,EAAE;EAEjE,MAAM,EAAE,aAAa,KAAK;EAC1B,MAAM,SAAS,YAAY;EAC3B,MAAM,UAAU,MAAM,SAAS,IAAI;GAAE,OAAO,OAAO;GAAO,IAAI;EAAU,CAAC;EACzE,IAAI,CAAC,SACH,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG,EAAE;EAEjE,OAAO;GAAE,GAAG;GAAQ,kBAAkB;GAAW,gBAAgB,QAAQ;EAAe;CAC1F;;;;;;CAOA,MAAME,oBAAoB,EACxB,SACA,MACA,UACA,SAMgB;EAChB,MAAM,EAAE,UAAU,KAAK;EACvB,MAAM,SAAS;GAAE,MAAM;GAAa,IAAI,KAAK;GAAI,MAAM,KAAK;EAAM;EAClE,MAAM,MAAM,KAAK;GACf;GACA,OAAO;IACL,QAAQ;IACR,kBAAkB,KAAK;IACvB,SAAS,CAAC,MAAM;IAChB,UAAU,EAAE,QAAQ,cAAc,KAAK,EAAE;GAC3C;EACF,CAAC;EAKD,IAFE,MAAM,WAAW,KAAA,MAChB,SAAS,OAAO,WAAW,KAAK,OAAO,UAAU,SAAS,OAAO,MAAM,GAAG,MAAM,MAAM,KAAK,OAAO,EAAE,IAErG,MAAM,MAAM,KAAK;GACf;GACA,OAAO;IACL,QAAQ;IACR,kBAAkB,KAAK;IACvB,SAAS,CAAC,MAAM;IAChB,UAAU;KAAE,MAAM,SAAS;KAAQ,IAAI,KAAK;IAAO;GACrD;EACF,CAAC;EAGH,MAAM,WAAW,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,QAAO,SAAQ,CAAC,SAAS,aAAa,SAAS,IAAI,CAAC;EAChG,KAAK,MAAM,QAAQ,UAAU;GAC3B,MAAM,UAAU,KAAK,SAAS;GAC9B,MAAM,MAAM,KAAK;IACf;IACA,OAAO;KACL,QAAQ;KACR,kBAAkB,KAAK;KACvB,SAAS,CAAC,MAAM;KAChB,UAAU;MACR;MACA,QAAQ,SAAS;MACjB,UAAU,SAAS;MACnB,WAAW,SAAS;KACtB;IACF;GACF,CAAC;EACH;CACF;;CAGA,eAAe,EACb,MACA,UASW;EACX,MAAM,EAAE,OAAO,cAAc,KAAK;EAClC,OAAO,iBAAiB,mDAAmD,QAAQ;GACjF,QAAQ;GACR,cAAc;GACd,SAAS,OAAM,MAAK;IAClB,MAAM,UAAU,MAAM,CAAC;IACvB,MAAM,WAAW,MAAM,KAAKD,gBAAgB,OAAO;IACnD,IAAI,cAAc,UAAU,OAAO,SAAS;IAC5C,MAAM,aAAa,QAAQ,IAAI,MAAM,YAAY;IACjD,IAAI,CAAC,cAAc,CAAC,QAAQ,KAAK,UAAU,GAAG,OAAO,EAAE,KAAK,EAAE,OAAO,sBAAsB,GAAG,GAAG;IACjG,MAAM,UAAU,YAAY;IAC5B,MAAM,WAAW,MAAM,OAAO,SAAS,OAAO,SAAS,kBAAkB,4BAAY,IAAI,KAAK,CAAC;IAC/F,IAAI,CAAC,UAAU,OAAO,EAAE,KAAK,EAAE,OAAO,wBAAwB,GAAG,GAAG;IACpE,MAAM,MAAM,KAAK;KACf;KACA,OAAO;MACL,QAAQ,SAAS,YAAY,yBAAyB;MACtD,kBAAkB,SAAS;MAC3B,SAAS,SAAS,aACd,CAAC;OAAE,MAAM;OAAa,IAAI,SAAS;MAAW,CAAC,IAC/C,CAAC;OAAE,MAAM;OAAiB,IAAI,SAAS;MAAG,CAAC;MAC/C,UAAU;OAAE,YAAY,SAAS;OAAI,QAAQ,aAAa,QAAQ;MAAE;KACtE;IACF,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,UAAU,gBAAgB,QAAQ,EAAE,CAAC;GACvD;EACF,CAAC;CACH;;CAGA,SAAqB;EACnB,MAAM,EAAE,OAAO,WAAW,aAAa,mBAAmB,kBAAkB,iBAAiB,KAAK;EAClG,OAAO;GAEL,iBAAiB,wCAAwC;IACvD,QAAQ;IACR,cAAc;IACd,SAAS,OAAM,MAAK;KAClB,MAAM,WAAW,MAAM,KAAKA,gBAAgB,MAAM,CAAC,CAAC;KACpD,IAAI,cAAc,UAAU,OAAO,SAAS;KAC5C,MAAM,UAAU,YAAY;KAC5B,MAAM,QAAQ,MAAM,UAAU,KAAK;MACjC,OAAO,SAAS;MAChB,kBAAkB,SAAS;KAC7B,CAAC;KACD,OAAO,EAAE,KAAK;MAAE,WAAW;MAAO,mBAAmB,kBAAkB,OAAO,YAAY;KAAE,CAAC;IAC/F;GACF,CAAC;GAGD,iBAAiB,qCAAqC;IACpD,QAAQ;IACR,cAAc;IACd,SAAS,OAAM,MAAK;KAClB,MAAM,WAAW,MAAM,KAAKA,gBAAgB,MAAM,CAAC,CAAC;KACpD,IAAI,cAAc,UAAU,OAAO,SAAS;KAC5C,MAAM,EAAE,aAAa,cAAc,kBACjC,MAAM,CAAC,CAAC,CAAC,IAAI,MAAM,MAAM,GACzB,MAAM,CAAC,CAAC,CAAC,IAAI,MAAM,IAAI,mBACvB,IAAI,KAAK,CACX;KACA,MAAM,UAAU,YAAY;KAC5B,MAAM,QAAQ,MAAM,UAAU,KAAK;MACjC,OAAO,SAAS;MAChB,kBAAkB,SAAS;KAC7B,CAAC;KACD,OAAO,EAAE,KAAK,EAAE,SAAS,sBAAsB,OAAO;MAAE;MAAa;KAAU,CAAC,EAAE,CAAC;IACrF;GACF,CAAC;GAGD,iBAAiB,+CAA+C;IAC9D,QAAQ;IACR,cAAc;IACd,SAAS,OAAM,MAAK;KAClB,MAAM,WAAW,MAAM,KAAKA,gBAAgB,MAAM,CAAC,CAAC;KACpD,IAAI,cAAc,UAAU,OAAO,SAAS;KAC5C,MAAM,YAAY,YAAY;KAC9B,MAAM,SAAS,MAAM,YAAY,UAAU,SAAS,OAAO,SAAS,gBAAgB;KAKpF,OAAO,EAAE,KAAK,EAAE,YAAY,oBAAoB,MAAM,EAAE,CAAC;IAC3D;GACF,CAAC;GAGD,iBAAiB,uCAAuC;IACtD,QAAQ;IACR,cAAc;IACd,SAAS,OAAM,MAAK;KAClB,MAAM,UAAU,MAAM,CAAC;KACvB,MAAM,WAAW,MAAM,KAAKA,gBAAgB,OAAO;KACnD,IAAI,cAAc,UAAU,OAAO,SAAS;KAE5C,MAAM,YAAY,QAAQ,IAAI,MAAM,QAAQ;KAC5C,MAAM,SAAS,oBAAoB,SAAS;KAC5C,IAAI,aAAa,CAAC,QAAQ,OAAO,EAAE,KAAK,EAAE,OAAO,iBAAiB,GAAG,GAAG;KACxE,MAAM,UAAU,YAAY;KAC5B,MAAM,OAAO,MAAM,UAAU,yBAAyB;MACpD,OAAO,SAAS;MAChB,kBAAkB,SAAS;MAC3B,UAAU,sBAAsB,QAAQ,IAAI,MAAM,UAAU,CAAC;MAC7D;MACA,OAAO,mBAAmB,QAAQ,IAAI,MAAM,OAAO,CAAC;KACtD,CAAC;KACD,MAAM,OAAO,KAAK,UAAU,GAAG,EAAE;KACjC,OAAO,EAAE,KAAK;MACZ,WAAW,KAAK,UAAU,IAAI,eAAe;MAC7C,GAAI,KAAK,WAAW,OAAO,EAAE,YAAY,qBAAqB,IAAI,EAAE,IAAI,CAAC;KAC3E,CAAC;IACH;GACF,CAAC;GAED,KAAKE,eAAe;IAAE,MAAM;IAAW,QAAQ,UAAU,wBAAwB,KAAK,SAAS;GAAE,CAAC;GAClG,KAAKA,eAAe;IAAE,MAAM;IAAW,QAAQ,UAAU,wBAAwB,KAAK,SAAS;GAAE,CAAC;GAElG,iBAAiB,yDAAyD;IACxE,QAAQ;IACR,cAAc;IACd,SAAS,OAAM,MAAK;KAClB,MAAM,UAAU,MAAM,CAAC;KACvB,MAAM,WAAW,MAAM,KAAKF,gBAAgB,OAAO;KACnD,IAAI,cAAc,UAAU,OAAO,SAAS;KAC5C,MAAM,aAAa,QAAQ,IAAI,MAAM,YAAY;KACjD,IAAI,CAAC,cAAc,CAAC,QAAQ,KAAK,UAAU,GAAG,OAAO,EAAE,KAAK,EAAE,OAAO,sBAAsB,GAAG,GAAG;KACjG,MAAM,UAAU,YAAY;KAC5B,MAAM,WAAW,MAAM,UAAU,sBAC/B,SAAS,OACT,SAAS,kBACT,4BACA,IAAI,KAAK,CACX;KACA,IAAI,CAAC,UAAU,OAAO,EAAE,KAAK,EAAE,OAAO,yBAAyB,GAAG,GAAG;KACrE,OAAO,EAAE,KAAK,EAAE,UAAU,gBAAgB,QAAQ,EAAE,CAAC;IACvD;GACF,CAAC;GAGD,iBAAiB,wCAAwC;IACvD,QAAQ;IACR,cAAc;IACd,SAAS,OAAM,MAAK;KAClB,MAAM,WAAW,MAAM,KAAKA,gBAAgB,MAAM,CAAC,CAAC;KACpD,IAAI,cAAc,UAAU,OAAO,SAAS;KAE5C,MAAM,OAAO,MAAM,SAAS,MAAM,CAAC,CAAC;KACpC,IAAI,SAAS,KAAA,GAAW,OAAO,EAAE,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;KACzE,MAAM,QAAQ,oBAAoB,IAAI;KACtC,IAAI,CAAC,OAAO,OAAO,EAAE,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;KAC7D,KAAK,MAAM,UAAU,CAAC,QAAQ,EAAA,CAAG,WAAW,MAAM,MAAM,UAAU,CAAC,QAAQ,EAAA,CAAG,OAAO,UACnF,OAAO,EAAE,KACP;MAAE,OAAO;MAAgC,SAAS;KAAoD,GACtG,GACF;KAGF,MAAM,UAAU,YAAY;KAC5B,IAAI;MACF,MAAM,SAAS,MAAM,UAAU,OAAO;OACpC,OAAO,SAAS;OAChB,QAAQ,SAAS;OACjB,kBAAkB,SAAS;OAC3B;OACA,WAAW;MACb,CAAC;MACD,IAAI,OAAO,OAAO;MAClB,IAAI,OAAO,SAAS;OAClB,IAAI,CAAC,mBAAmB;QACtB,MAAM,UAAU,OAAO;SAAE,OAAO,SAAS;SAAO,IAAI,KAAK;QAAG,CAAC;QAC7D,OAAO,EAAE,KAAK,EAAE,OAAO,kCAAkC,GAAG,GAAG;OACjE;OACA,MAAM,UAAU,MAAM,kBAAkB,WAAW;QACjD,OAAO,SAAS;QAChB,kBAAkB,SAAS;QAC3B,YAAY,KAAK;QACjB,OAAO,KAAK,gBAAgB,SAAS,iBAAiB,WAAW;QACjE,OAAO;QACP,kBAAkB,KAAK;QACvB,OAAO;SAAE,MAAM;SAAS,IAAI,SAAS;QAAO;QAC5C,SAAS;SAAE,MAAM;SAAS,UAAU,aAAa,KAAK,GAAG;QAAgB;QACzE,OAAO;QACP,cAAc;OAChB,CAAC;OACD,IAAI,QAAQ,WAAW,YAAY;QACjC,MAAM,UAAU,OAAO;SAAE,OAAO,SAAS;SAAO,IAAI,KAAK;QAAG,CAAC;QAC7D,OAAO,EAAE,KAAK;SAAE,QAAQ;SAAY,MAAM,QAAQ;SAAM,QAAQ,QAAQ;QAAO,GAAG,GAAG;OACvF;OACA,OAAQ,MAAM,UAAU,cAAc,SAAS,OAAO,SAAS,kBAAkB,KAAK,EAAE,KAAM;OAC9F,MAAM,MAAM,KAAK;QACf,SAAS,MAAM,CAAC;QAChB,OAAO;SACL,QAAQ;SACR,kBAAkB,SAAS;SAC3B,SAAS,CAAC;UAAE,MAAM;UAAa,IAAI,KAAK;UAAI,MAAM,KAAK;SAAM,CAAC;SAC9D,UAAU;UAAE,gBAAgB,KAAK;UAAgB,QAAQ,KAAK;SAAO;QACvE;OACF,CAAC;MACH,OAAO;OAGL,MAAM,EAAE,QAAQ,SAAS,UAAU,WAAW,GAAG,iBAAiB;OAClE,MAAM,KAAKC,oBAAoB;QAC7B,SAAS,MAAM,CAAC;QAChB;QACA,UAAU,OAAO;QACjB,OAAO;OACT,CAAC;MACH;MACA,OAAO,EAAE,KAAK,EAAE,UAAU,KAAK,CAAC;KAClC,SAAS,OAAO;MACd,IAAI,iBAAiB,uBACnB,OAAO,EAAE,KAAK;OAAE,OAAO,MAAM;OAAM,SAAS,MAAM;MAAQ,GAAG,GAAG;MAElE,MAAM;KACR;IACF;GACF,CAAC;GAGD,iBAAiB,+DAA+D;IAC9E,QAAQ;IACR,cAAc;IACd,SAAS,OAAM,MAAK;KAClB,MAAM,WAAW,MAAM,KAAKD,gBAAgB,MAAM,CAAC,CAAC;KACpD,IAAI,cAAc,UAAU,OAAO,SAAS;KAC5C,MAAM,aAAa,MAAM,CAAC,CAAC,CAAC,IAAI,MAAM,YAAY;KAClD,IAAI,CAAC,cAAc,CAAC,QAAQ,KAAK,UAAU,GAAG,OAAO,EAAE,KAAK,EAAE,OAAO,sBAAsB,GAAG,GAAG;KACjG,MAAM,SAAS,oBAAoB,MAAM,SAAS,MAAM,CAAC,CAAC,CAAC;KAC3D,IAAI,CAAC,QAAQ,OAAO,EAAE,KAAK,EAAE,OAAO,6BAA6B,GAAG,GAAG;KACvE,IAAI,CAAC,mBACH,OAAO,EAAE,KAAK,EAAE,OAAO,iCAAiC,GAAG,GAAG;KAEhE,MAAM,UAAU,YAAY;KAC5B,MAAM,SAAS,MAAM,kBAAkB,WAAW;MAChD,GAAG;MACH,OAAO,SAAS;MAChB,kBAAkB,SAAS;MAC3B;MACA,OAAO;OAAE,MAAM;OAAS,IAAI,SAAS;MAAO;MAC5C,SAAS;OACP,GAAG,OAAO;OACV,UAAU,SAAS,SAAS,OAAO,GAAG,OAAO,QAAQ;MACvD;KACF,CAAC;KACD,MAAM,MAAM,KAAK;MACf,SAAS,MAAM,CAAC;MAChB,OAAO;OACL,QACE,OAAO,WAAW,aACd,kCACA;OACN,kBAAkB,SAAS;OAC3B,SAAS,CAAC;QAAE,MAAM;QAAa,IAAI;OAAW,CAAC;OAC/C,UAAU;QACR,cAAc,OAAO;QACrB,aAAa,OAAO,QAAQ;QAC5B,gBAAgB,kBAAkB;QAClC,GAAI,OAAO,WAAW,aAClB;SAAE,IAAI,OAAO;SAAO,UAAU,OAAO;QAAS,IAC9C;SAAE,MAAM,OAAO;SAAM,QAAQ,OAAO;QAAO;OACjD;MACF;KACF,CAAC;KACD,IAAI,OAAO,WAAW,YAAY,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC;KAC1D,OAAO,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,SAAS,UAAU,MAAM,GAAG;IAC/D;GACF,CAAC;GAGD,iBAAiB,wCAAwC;IACvD,QAAQ;IACR,cAAc;IACd,SAAS,OAAM,MAAK;KAClB,MAAM,WAAW,MAAM,KAAKA,gBAAgB,MAAM,CAAC,CAAC;KACpD,IAAI,cAAc,UAAU,OAAO,SAAS;KAC5C,IAAI,CAAC,kBACH,OAAO,EAAE,KAAK,EAAE,OAAO,4BAA4B,GAAG,GAAG;KAE3D,MAAM,QAAQ,eAAe,MAAM,SAAS,MAAM,CAAC,CAAC,GAAG,UAAU,SAAS,gBAAgB;KAC1F,IAAI,CAAC,OAAO,OAAO,EAAE,KAAK,EAAE,OAAO,wBAAwB,GAAG,GAAG;KACjE,MAAM,iBAAiB,MAAM,CAAC,CAAC,CAAC,IAAI,gBAAgB;KACpD,MAAM,iBAAiB,SAAS,kBAAkB,KAAA;KAClD,IACE,CAAC,MAAM,SAAS,QACd,MAAM,SAAS,MAAM,UAAU,CAAC,QAAQ,EAAA,CAAG,WAAW,MACrD,MAAM,SAAS,MAAM,UAAU,CAAC,QAAQ,EAAA,CAAG,OAAO,WAErD,OAAO,EAAE,KACP;MAAE,OAAO;MAAgC,SAAS;KAAqD,GACvG,GACF;KAEF,MAAM,UAAU,YAAY;KAC5B,IAAI;KACJ,IAAI;MACF,WAAW,MAAM,iBAAiB,QAAQ,KAAK;KACjD,SAAS,OAAO;MACd,IAAI,iBAAiB,6BACnB,OAAO,EAAE,KAAK,EAAE,QAAQ,MAAM,OAAO,GAAG,MAAM,OAAO,SAAS,UAAU,MAAM,GAAG;MAEnF,MAAM;KACR;KACA,MAAM,MAAM,KAAK;MACf,SAAS,MAAM,CAAC;MAChB,OAAO;OACL,QAAQ;OACR,kBAAkB,SAAS;OAC3B,SAAS,CAAC;QAAE,MAAM;QAAa,IAAI,SAAS;OAAW,CAAC;OACxD,UAAU;QACR,MAAM,MAAM,SAAS;QACrB,QAAQ,SAAS;QACjB,UAAU,SAAS;QACnB,WAAW,SAAS;QACpB,WAAW,SAAS;OACtB;MACF;KACF,CAAC;KACD,OAAO,EAAE,KAAK,EAAE,SAAS,GAAG,GAAG;IACjC;GACF,CAAC;GAGD,iBAAiB,+BAA+B;IAC9C,QAAQ;IACR,cAAc;IACd,SAAS,OAAM,MAAK;KAClB,MAAM,SAAS,MAAM,KAAKD,eAAe,MAAM,CAAC,CAAC;KACjD,IAAI,cAAc,QAAQ,OAAO,OAAO;KAExC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,MAAM,IAAI;KAClC,IAAI,CAAC,MAAM,CAAC,QAAQ,KAAK,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,OAAO,sBAAsB,GAAG,GAAG;KAEjF,MAAM,OAAO,MAAM,SAAS,MAAM,CAAC,CAAC;KACpC,IAAI,SAAS,KAAA,GAAW,OAAO,EAAE,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;KACzE,MAAM,QAAQ,oBAAoB,IAAI;KACtC,IAAI,CAAC,OAAO,OAAO,EAAE,KAAK,EAAE,OAAO,0BAA0B,GAAG,GAAG;KACnE,IAAI,MAAM,WAAW,KAAA,GACnB,OAAO,EAAE,KACP;MAAE,OAAO;MAAgC,SAAS;KAAsD,GACxG,GACF;KAGF,MAAM,UAAU,YAAY;KAC5B,IAAI;MACF,MAAM,UAAU,MAAM,UAAU,OAAO;OAAE,OAAO,OAAO;OAAO;OAAI,QAAQ,OAAO;OAAQ;MAAM,CAAC;MAChG,IAAI,CAAC,SAAS,OAAO,EAAE,KAAK,EAAE,OAAO,sBAAsB,GAAG,GAAG;MACjE,MAAM,KAAKE,oBAAoB;OAC7B,SAAS,MAAM,CAAC;OAChB,MAAM,QAAQ;OACd,UAAU,QAAQ;OACX;MACT,CAAC;MACD,OAAO,EAAE,KAAK,EAAE,UAAU,QAAQ,KAAK,CAAC;KAC1C,SAAS,OAAO;MACd,IAAI,iBAAiB,uBACnB,OAAO,EAAE,KAAK;OAAE,OAAO,MAAM;OAAM,SAAS,MAAM;MAAQ,GAAG,GAAG;MAElE,MAAM;KACR;IACF;GACF,CAAC;GAGD,iBAAiB,+BAA+B;IAC9C,QAAQ;IACR,cAAc;IACd,SAAS,OAAM,MAAK;KAClB,MAAM,SAAS,MAAM,KAAKF,eAAe,MAAM,CAAC,CAAC;KACjD,IAAI,cAAc,QAAQ,OAAO,OAAO;KAExC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,MAAM,IAAI;KAClC,IAAI,CAAC,MAAM,CAAC,QAAQ,KAAK,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,OAAO,sBAAsB,GAAG,GAAG;KAEjF,MAAM,UAAU,YAAY;KAC5B,MAAM,UAAU,MAAM,UAAU,OAAO;MAAE,OAAO,OAAO;MAAO;KAAG,CAAC;KAClE,IAAI,CAAC,SAAS,OAAO,EAAE,KAAK,EAAE,OAAO,sBAAsB,GAAG,GAAG;KACjE,MAAM,MAAM,KAAK;MACf,SAAS,MAAM,CAAC;MAChB,OAAO;OACL,QAAQ;OACR,kBAAkB,QAAQ;OAC1B,SAAS,CAAC;QAAE,MAAM;QAAa,IAAI,QAAQ;QAAI,MAAM,QAAQ;OAAM,CAAC;MACtE;KACF,CAAC;KACD,OAAO,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC;IAC5B;GACF,CAAC;EACH;CACF;AACF"}
+{"version":3,"file":"work-items.js","names":["#resolveTenant","#resolveProject","#auditWorkItemPatch","#proposalRoute"],"sources":["../../src/routes/work-items.ts"],"sourcesContent":["/**\n * Mastra `apiRoutes` for Factory work items (the kanban board).\n *\n * Registered alongside the other `/web/*` routes behind the host auth gate.\n * The board is org-wide: every route re-resolves the caller's `(orgId, userId)`\n * tenant and scopes reads/writes by `orgId`, so any org member sees and moves\n * the same cards while `created_by` / stage history record who acted.\n */\n\nimport type { ApiRoute } from '@mastra/core/server';\nimport { registerApiRoute } from '@mastra/core/server';\nimport type { Context } from 'hono';\n\nimport type {\n  FactoryStartCoordinator,\n  FactoryStartPreparedResult,\n  FactoryStartRequest,\n} from '../rules/start-coordinator.js';\nimport { FactoryStartTransitionError } from '../rules/start-coordinator.js';\nimport type { FactoryTransitionRequest, FactoryTransitionService } from '../rules/transition-service.js';\nimport type { FactoryRuleBoard } from '../rules/types.js';\nimport { FACTORY_RULE_BOARDS, isFactoryRuleStage } from '../rules/types.js';\nimport type { LiveSessions } from '../session/live-sessions.js';\nimport type { AuditEmitter } from '../storage/domains/audit/domain.js';\nimport type { FactoryProjectsStorage } from '../storage/domains/projects/base.js';\nimport type { QueueHealthStorage } from '../storage/domains/queue-health/base.js';\nimport { thresholdsOrDefault } from '../storage/domains/queue-health/base.js';\nimport type {\n  CreateWorkItemInput,\n  ExternalWorkItemSource,\n  FactoryDeferredDecisionRecord,\n  FactoryDispatchStatus,\n  UpdateWorkItemInput,\n  WorkItemPriorState,\n  WorkItemRow,\n  WorkItemSessionInput,\n  WorkItemStage,\n  WorkItemsStorage,\n} from '../storage/domains/work-items/base.js';\nimport { WorkItemRelationError } from '../storage/domains/work-items/base.js';\nimport { computeFactoryMetrics, parseMetricsRange } from '../storage/domains/work-items/metrics.js';\nimport type { RouteDependencies } from './route.js';\nimport { Route } from './route.js';\n\nexport interface WorkItemRoutesDeps extends RouteDependencies {\n  audit: AuditEmitter;\n  /** Factory projects domain — validates the `:id` project belongs to the caller's org. */\n  projects: FactoryProjectsStorage;\n  /** Work-items domain backing the kanban board. */\n  workItems: WorkItemsStorage;\n  /** Per-project queue-health threshold config. */\n  queueHealth: QueueHealthStorage;\n  /** Governed stage-transition service. Stage moves 503 when absent. */\n  transitionService?: Pick<FactoryTransitionService, 'transition' | 'ruleSetVersion'>;\n  /** Coordinator that binds a Factory run before dispatching its kickoff. */\n  startCoordinator?: Pick<FactoryStartCoordinator, 'prepare'>;\n  /** Materialized sessions, read to report which of the listed cards are being worked. */\n  liveSessions: Pick<LiveSessions, 'isRunning'>;\n}\n\n/** Session ids of the listed cards whose agent run is in flight. */\nfunction runningSessionIds(items: WorkItemRow[], liveSessions: Pick<LiveSessions, 'isRunning'>): string[] {\n  const running = new Set<string>();\n  for (const item of items) {\n    for (const { sessionId } of Object.values(item.sessions)) {\n      if (liveSessions.isRunning(sessionId)) running.add(sessionId);\n    }\n  }\n  return [...running];\n}\n\nfunction loose(c: unknown): Context {\n  return c as Context;\n}\n\nconst UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;\n\nconst MAX_STAGES = 16;\nconst MAX_STAGE_LENGTH = 64;\nconst MAX_METADATA_BYTES = 16 * 1024;\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === 'object' && value !== null && !Array.isArray(value);\n}\n\nfunction validStages(value: unknown): value is WorkItemStage[] {\n  return (\n    Array.isArray(value) &&\n    value.length > 0 &&\n    value.length <= MAX_STAGES &&\n    value.every(\n      stage => typeof stage === 'string' && stage.length <= MAX_STAGE_LENGTH && /^[a-z0-9][a-z0-9_-]*$/i.test(stage),\n    ) &&\n    new Set(value).size === value.length\n  );\n}\n\nfunction validMetadata(value: unknown): value is Record<string, unknown> | null {\n  if (value === null) return true;\n  if (!isRecord(value)) return false;\n  try {\n    return JSON.stringify(value).length <= MAX_METADATA_BYTES;\n  } catch {\n    return false;\n  }\n}\n\nfunction parseExternalSource(value: unknown): ExternalWorkItemSource | null | undefined {\n  if (value === undefined || value === null) return value;\n  if (!isRecord(value)) return undefined;\n  const { integrationId, type, externalId, url } = value;\n  if (typeof integrationId !== 'string' || integrationId.length === 0 || integrationId.length > 128) return undefined;\n  if (typeof type !== 'string' || type.length === 0 || type.length > 128) return undefined;\n  if (typeof externalId !== 'string' || externalId.length === 0 || externalId.length > 512) return undefined;\n  if (url !== undefined && (typeof url !== 'string' || url.length > 2048)) return undefined;\n  return { integrationId, type, externalId, ...(url !== undefined ? { url } : {}) };\n}\n\nfunction parseParentWorkItemId(value: unknown): string | null | undefined {\n  if (value === null) return null;\n  if (typeof value !== 'string' || !UUID_RE.test(value)) return undefined;\n  return value;\n}\n\nfunction parseSessions(value: unknown): Record<string, WorkItemSessionInput> | undefined {\n  if (!isRecord(value)) return undefined;\n  const out: Record<string, WorkItemSessionInput> = {};\n  for (const [role, session] of Object.entries(value)) {\n    if (!role || role.length > 64 || !isRecord(session)) return undefined;\n    const { sessionId, branch, threadId } = session;\n    if (typeof sessionId !== 'string' || sessionId.length === 0 || sessionId.length > 512) return undefined;\n    if (typeof branch !== 'string' || branch.length === 0 || branch.length > 512) return undefined;\n    if (typeof threadId !== 'string' || threadId.length === 0 || threadId.length > 512) return undefined;\n    out[role] = { sessionId, branch, threadId };\n  }\n  return out;\n}\n\n/** Validate an untrusted create body. Unknown keys are dropped. */\nexport function parseCreateWorkItem(body: unknown): CreateWorkItemInput | null {\n  if (!isRecord(body)) return null;\n  const { externalSource, title, stages, sessions, metadata } = body;\n  if (typeof title !== 'string' || title.trim().length === 0 || title.length > 500) return null;\n\n  const hasParentWorkItemId = 'parentWorkItemId' in body;\n  const parentWorkItemId = hasParentWorkItemId ? parseParentWorkItemId(body.parentWorkItemId) : undefined;\n  if (hasParentWorkItemId && parentWorkItemId === undefined) return null;\n  const parsedSource = parseExternalSource(externalSource);\n  if (externalSource !== undefined && parsedSource === undefined) return null;\n  if (stages !== undefined && !validStages(stages)) return null;\n  const parsedSessions = sessions === undefined ? undefined : parseSessions(sessions);\n  if (sessions !== undefined && parsedSessions === undefined) return null;\n  if (metadata !== undefined && !validMetadata(metadata)) return null;\n\n  return {\n    title: title.trim(),\n    ...(parsedSource !== undefined ? { externalSource: parsedSource } : {}),\n    ...(hasParentWorkItemId ? { parentWorkItemId: parentWorkItemId ?? null } : {}),\n    ...(stages !== undefined ? { stages } : {}),\n    ...(parsedSessions !== undefined ? { sessions: parsedSessions } : {}),\n    ...(metadata !== undefined ? { metadata } : {}),\n  };\n}\n\n/** Validate an untrusted patch body. Unknown keys are dropped. */\nexport function parseUpdateWorkItem(body: unknown): UpdateWorkItemInput | null {\n  if (!isRecord(body)) return null;\n  const { title, stages, sessions, metadata } = body;\n  const hasParentWorkItemId = 'parentWorkItemId' in body;\n  if (\n    title === undefined &&\n    stages === undefined &&\n    sessions === undefined &&\n    metadata === undefined &&\n    !hasParentWorkItemId\n  )\n    return null;\n  const parentWorkItemId = hasParentWorkItemId ? parseParentWorkItemId(body.parentWorkItemId) : undefined;\n  if (hasParentWorkItemId && parentWorkItemId === undefined) return null;\n  if (title !== undefined && (typeof title !== 'string' || title.trim().length === 0 || title.length > 500))\n    return null;\n  if (stages !== undefined && !validStages(stages)) return null;\n  const parsedSessions = sessions === undefined ? undefined : parseSessions(sessions);\n  if (sessions !== undefined && parsedSessions === undefined) return null;\n  if (metadata !== undefined && !validMetadata(metadata)) return null;\n\n  return {\n    ...(hasParentWorkItemId ? { parentWorkItemId: parentWorkItemId ?? null } : {}),\n    ...(title !== undefined ? { title: title.trim() } : {}),\n    ...(stages !== undefined ? { stages } : {}),\n    ...(parsedSessions !== undefined ? { sessions: parsedSessions } : {}),\n    ...(metadata !== undefined ? { metadata } : {}),\n  };\n}\n\nasync function readJson(c: Context): Promise<unknown | undefined> {\n  try {\n    return await c.req.json();\n  } catch {\n    return undefined;\n  }\n}\n\n/** Fields a PATCH touched, for the bounded `updated` event summary. */\nfunction patchedFields(patch: Record<string, unknown>): string[] {\n  return Object.keys(patch).filter(key => patch[key] !== undefined);\n}\n\nfunction boundedText(value: unknown, max: number): string | undefined {\n  if (typeof value !== 'string') return undefined;\n  const normalized = value.trim();\n  return normalized.length > 0 && normalized.length <= max ? normalized : undefined;\n}\n\nfunction parseTransitionBody(\n  body: unknown,\n): Omit<FactoryTransitionRequest, 'orgId' | 'factoryProjectId' | 'workItemId' | 'actor'> | null {\n  if (!isRecord(body)) return null;\n  const board = FACTORY_RULE_BOARDS.includes(body.board as FactoryRuleBoard)\n    ? (body.board as FactoryRuleBoard)\n    : undefined;\n  const stage = isFactoryRuleStage(body.stage) ? body.stage : undefined;\n  const requestId = boundedText(body.requestId, 256);\n  const cause = boundedText(body.cause, 256);\n  if (\n    !board ||\n    !stage ||\n    !requestId ||\n    !UUID_RE.test(requestId) ||\n    !cause ||\n    !Number.isInteger(body.expectedRevision) ||\n    Number(body.expectedRevision) < 1\n  ) {\n    return null;\n  }\n  return {\n    board,\n    stage,\n    expectedRevision: Number(body.expectedRevision),\n    ingress: { type: 'human', identity: requestId },\n    cause,\n  };\n}\n\nfunction parseInvocation(value: unknown): FactoryStartRequest['invocation'] | undefined | null {\n  if (value === undefined) return undefined;\n  if (!isRecord(value)) return null;\n  if (value.type === 'prompt') {\n    const prompt = boundedText(value.prompt, 16_384);\n    return prompt ? { type: 'prompt', prompt } : null;\n  }\n  if (value.type === 'skill') {\n    const skillName = boundedText(value.skillName, 64);\n    const args = typeof value.arguments === 'string' && value.arguments.length <= 16_384 ? value.arguments : undefined;\n    return skillName && args !== undefined ? { type: 'skill', skillName, arguments: args } : null;\n  }\n  return null;\n}\n\nfunction parseStartBody(\n  body: unknown,\n  tenant: { orgId: string; userId: string },\n  factoryProjectId: string,\n): FactoryStartRequest | null {\n  if (!isRecord(body) || !isRecord(body.workItem)) return null;\n  const input = parseCreateWorkItem(body.workItem.input);\n  const sessionId = boundedText(body.sessionId, 256);\n  const threadTitle = boundedText(body.threadTitle, 512);\n  const kickoffKey = boundedText(body.kickoffKey, 256);\n  const invocation = parseInvocation(body.invocation);\n  const destinationStage = isFactoryRuleStage(body.destinationStage) ? body.destinationStage : undefined;\n  const role = boundedText(body.workItem.role, 32);\n  const id = body.workItem.id === undefined ? undefined : boundedText(body.workItem.id, 64);\n  if (body.workItem.id !== undefined && (!id || !UUID_RE.test(id))) return null;\n  if (\n    !input ||\n    !sessionId ||\n    !UUID_RE.test(sessionId) ||\n    !threadTitle ||\n    !kickoffKey ||\n    !UUID_RE.test(kickoffKey) ||\n    invocation === null ||\n    !destinationStage ||\n    !role\n  ) {\n    return null;\n  }\n  const threadTags = isRecord(body.threadTags)\n    ? Object.fromEntries(\n        Object.entries(body.threadTags)\n          .filter(\n            (entry): entry is [string, string] =>\n              boundedText(entry[0], 64) !== undefined && boundedText(entry[1], 256) !== undefined,\n          )\n          .map(([key, value]) => [key, value.trim()]),\n      )\n    : undefined;\n  return {\n    ...tenant,\n    factoryProjectId,\n    sessionId,\n    threadTitle,\n    threadTags,\n    kickoffKey,\n    invocation,\n    destinationStage,\n    workItem: { id, role, input },\n  };\n}\n\nconst DECISION_STATUSES = new Set<FactoryDispatchStatus>([\n  'pending',\n  'proposed',\n  'dismissed',\n  'leased',\n  'retry',\n  'succeeded',\n  'failed',\n]);\nconst DEFAULT_DECISION_PAGE_SIZE = 25;\nconst MAX_DECISION_PAGE_SIZE = 50;\n\nfunction parseDecisionStatuses(raw: string | undefined): FactoryDispatchStatus[] | undefined {\n  if (!raw) return undefined;\n  const statuses = [...new Set(raw.split(',').map(status => status.trim()))].filter(\n    (status): status is FactoryDispatchStatus => DECISION_STATUSES.has(status as FactoryDispatchStatus),\n  );\n  return statuses.length > 0 ? statuses : undefined;\n}\n\nfunction parseDecisionLimit(raw: string | undefined): number {\n  const parsed = raw ? Number.parseInt(raw, 10) : DEFAULT_DECISION_PAGE_SIZE;\n  if (!Number.isFinite(parsed)) return DEFAULT_DECISION_PAGE_SIZE;\n  return Math.max(1, Math.min(MAX_DECISION_PAGE_SIZE, parsed));\n}\n\nfunction encodeDecisionCursor(decision: FactoryDeferredDecisionRecord): string {\n  return Buffer.from(JSON.stringify([decision.createdAt.toISOString(), decision.id]), 'utf8').toString('base64url');\n}\n\nfunction parseDecisionCursor(raw: string | undefined): { createdAt: Date; id: string } | undefined {\n  if (!raw) return undefined;\n  try {\n    const decoded = JSON.parse(Buffer.from(raw, 'base64url').toString('utf8')) as unknown;\n    if (\n      !Array.isArray(decoded) ||\n      decoded.length !== 2 ||\n      typeof decoded[0] !== 'string' ||\n      typeof decoded[1] !== 'string'\n    ) {\n      return undefined;\n    }\n    const createdAt = new Date(decoded[0]);\n    if (Number.isNaN(createdAt.getTime()) || !UUID_RE.test(decoded[1])) return undefined;\n    return { createdAt, id: decoded[1] };\n  } catch {\n    return undefined;\n  }\n}\n\nfunction decisionType(decision: FactoryDeferredDecisionRecord): string {\n  return typeof decision.decision.type === 'string' ? decision.decision.type.slice(0, 64) : 'unknown';\n}\n\nfunction decisionSummary(decision: FactoryDeferredDecisionRecord) {\n  return {\n    id: decision.id,\n    evaluationId: decision.evaluationId,\n    workItemId: decision.workItemId,\n    type: decisionType(decision),\n    role: typeof decision.decision.role === 'string' ? decision.decision.role.slice(0, 32) : null,\n    status: decision.status,\n    attempts: decision.attempts,\n    lastError: decision.lastError?.slice(0, 512) ?? null,\n    createdAt: decision.createdAt.toISOString(),\n    updatedAt: decision.updatedAt.toISOString(),\n    completedAt: decision.completedAt?.toISOString() ?? null,\n  };\n}\n\nexport class WorkItemRoutes extends Route<WorkItemRoutesDeps> {\n  /** Resolve the `(orgId, userId)` tenant or a ready-to-return error response. */\n  async #resolveTenant(c: Context): Promise<{ orgId: string; userId: string } | { response: Response }> {\n    await this.deps.auth.ensureUser(c);\n    const tenant = this.deps.auth.tenant(c);\n    if (!tenant) return { response: c.json({ error: 'unauthorized' }, 401) };\n    if (!tenant.orgId) {\n      return {\n        response: c.json(\n          { error: 'organization_required', message: 'The Factory board requires an organization.' },\n          403,\n        ),\n      };\n    }\n    return { orgId: tenant.orgId, userId: tenant.userId };\n  }\n\n  /**\n   * Resolve the tenant AND the org-owned project from the `:id` param. Work\n   * items hang off a project, so listing/creating requires the project to\n   * exist in the caller's org.\n   */\n  async #resolveProject(\n    c: Context,\n  ): Promise<\n    { orgId: string; userId: string; factoryProjectId: string; defaultModelId: string | null } | { response: Response }\n  > {\n    const tenant = await this.#resolveTenant(c);\n    if ('response' in tenant) return tenant;\n\n    const projectId = c.req.param('id');\n    if (!projectId || !UUID_RE.test(projectId)) {\n      return { response: c.json({ error: 'Project not found' }, 404) };\n    }\n    const { projects } = this.deps;\n    await projects.ensureReady();\n    const project = await projects.get({ orgId: tenant.orgId, id: projectId });\n    if (!project) {\n      return { response: c.json({ error: 'Project not found' }, 404) };\n    }\n    return { ...tenant, factoryProjectId: projectId, defaultModelId: project.defaultModelId };\n  }\n\n  /**\n   * Emit the audit events a successful work-item PATCH implies: always\n   * `updated`, plus `stage_moved` when the stages actually changed and one\n   * `run.started` per session role the patch introduced.\n   */\n  async #auditWorkItemPatch({\n    context,\n    item,\n    previous,\n    patch,\n  }: {\n    context: Context;\n    item: WorkItemRow;\n    previous: WorkItemPriorState;\n    patch: Record<string, unknown>;\n  }): Promise<void> {\n    const { audit } = this.deps;\n    const target = { type: 'work_item', id: item.id, name: item.title };\n    await audit.emit({\n      context,\n      input: {\n        action: 'factory.work_item.updated',\n        factoryProjectId: item.factoryProjectId,\n        targets: [target],\n        metadata: { fields: patchedFields(patch) },\n      },\n    });\n\n    const stagesChanged =\n      patch.stages !== undefined &&\n      (previous.stages.length !== item.stages.length || previous.stages.some((s, i) => s !== item.stages[i]));\n    if (stagesChanged) {\n      await audit.emit({\n        context,\n        input: {\n          action: 'factory.work_item.stage_moved',\n          factoryProjectId: item.factoryProjectId,\n          targets: [target],\n          metadata: { from: previous.stages, to: item.stages },\n        },\n      });\n    }\n\n    const newRoles = Object.keys(item.sessions).filter(role => !previous.sessionRoles.includes(role));\n    for (const role of newRoles) {\n      const session = item.sessions[role];\n      await audit.emit({\n        context,\n        input: {\n          action: 'factory.run.started',\n          factoryProjectId: item.factoryProjectId,\n          targets: [target],\n          metadata: {\n            role,\n            branch: session?.branch,\n            threadId: session?.threadId,\n            sessionId: session?.sessionId,\n          },\n        },\n      });\n    }\n  }\n\n  /** Releasing a parked run and dropping it: same request, opposite outcomes, both audited as consent. */\n  #proposalRoute({\n    verb,\n    settle,\n  }: {\n    verb: 'approve' | 'dismiss';\n    settle: (\n      orgId: string,\n      factoryProjectId: string,\n      decisionId: string,\n      now: Date,\n    ) => Promise<FactoryDeferredDecisionRecord | null>;\n  }): ApiRoute {\n    const { audit, workItems } = this.deps;\n    return registerApiRoute(`/web/factory/projects/:id/decisions/:decisionId/${verb}`, {\n      method: 'POST',\n      requiresAuth: false,\n      handler: async c => {\n        const context = loose(c);\n        const resolved = await this.#resolveProject(context);\n        if ('response' in resolved) return resolved.response;\n        const decisionId = context.req.param('decisionId');\n        if (!decisionId || !UUID_RE.test(decisionId)) return c.json({ error: 'invalid_decision_id' }, 422);\n        await workItems.ensureReady();\n        const now = new Date();\n        const decision = await settle(resolved.orgId, resolved.factoryProjectId, decisionId, now);\n        if (!decision) return c.json({ error: 'decision_not_proposed' }, 409);\n        // Releasing a proposal is a person taking the item on. Approval arms the\n        // item's autonomy inside the same storage transaction (see\n        // approveDeferredDecision), so follow-up runs no longer wait for approval.\n        await audit.emit({\n          context,\n          input: {\n            action: verb === 'approve' ? 'factory.run.approved' : 'factory.run.dismissed',\n            factoryProjectId: resolved.factoryProjectId,\n            targets: decision.workItemId\n              ? [{ type: 'work_item', id: decision.workItemId }]\n              : [{ type: 'rule_decision', id: decision.id }],\n            metadata: { decisionId: decision.id, effect: decisionType(decision) },\n          },\n        });\n        return c.json({ decision: decisionSummary(decision) });\n      },\n    });\n  }\n\n  /** Build the Factory work-item routes as Mastra `apiRoutes`. */\n  routes(): ApiRoute[] {\n    const { audit, workItems, queueHealth, transitionService, startCoordinator, liveSessions } = this.deps;\n    return [\n      // ── List the org's work items for a project, and which are being worked ─\n      registerApiRoute('/web/factory/projects/:id/work-items', {\n        method: 'GET',\n        requiresAuth: false,\n        handler: async c => {\n          const resolved = await this.#resolveProject(loose(c));\n          if ('response' in resolved) return resolved.response;\n          await workItems.ensureReady();\n          const items = await workItems.list({\n            orgId: resolved.orgId,\n            factoryProjectId: resolved.factoryProjectId,\n          });\n          return c.json({ workItems: items, runningSessionIds: runningSessionIds(items, liveSessions) });\n        },\n      }),\n\n      // ── Flow metrics aggregated over the project's work items ───────────────\n      registerApiRoute('/web/factory/projects/:id/metrics', {\n        method: 'GET',\n        requiresAuth: false,\n        handler: async c => {\n          const resolved = await this.#resolveProject(loose(c));\n          if ('response' in resolved) return resolved.response;\n          const { windowStart, windowEnd } = parseMetricsRange(\n            loose(c).req.query('from'),\n            loose(c).req.query('to'),\n            new Date(),\n          );\n          await workItems.ensureReady();\n          const items = await workItems.list({\n            orgId: resolved.orgId,\n            factoryProjectId: resolved.factoryProjectId,\n          });\n          return c.json({ metrics: computeFactoryMetrics(items, { windowStart, windowEnd }) });\n        },\n      }),\n\n      // ── Per-project queue-health age-threshold config (seconds) ─────────────\n      registerApiRoute('/web/factory/projects/:id/health/thresholds', {\n        method: 'GET',\n        requiresAuth: false,\n        handler: async c => {\n          const resolved = await this.#resolveProject(loose(c));\n          if ('response' in resolved) return resolved.response;\n          await queueHealth.ensureReady();\n          const stored = await queueHealth.getConfig(resolved.orgId, resolved.factoryProjectId);\n          // Validate at the read choke point: `getConfig` round-trips a stored\n          // JSONB row, and only `saveConfig` validates on write — a corrupted or\n          // hand-edited row (empty / non-ascending) would otherwise flow to the\n          // chart and invert bucket colors. Fall back to the default on invalid.\n          return c.json({ thresholds: thresholdsOrDefault(stored) });\n        },\n      }),\n\n      // ── Bounded durable rule-decision status ────────────────────────────────\n      registerApiRoute('/web/factory/projects/:id/decisions', {\n        method: 'GET',\n        requiresAuth: false,\n        handler: async c => {\n          const context = loose(c);\n          const resolved = await this.#resolveProject(context);\n          if ('response' in resolved) return resolved.response;\n\n          const cursorRaw = context.req.query('before');\n          const before = parseDecisionCursor(cursorRaw);\n          if (cursorRaw && !before) return c.json({ error: 'invalid_cursor' }, 400);\n          await workItems.ensureReady();\n          const page = await workItems.listDeferredDecisionPage({\n            orgId: resolved.orgId,\n            factoryProjectId: resolved.factoryProjectId,\n            statuses: parseDecisionStatuses(context.req.query('statuses')),\n            before,\n            limit: parseDecisionLimit(context.req.query('limit')),\n          });\n          const last = page.decisions.at(-1);\n          return c.json({\n            decisions: page.decisions.map(decisionSummary),\n            ...(page.hasMore && last ? { nextCursor: encodeDecisionCursor(last) } : {}),\n          });\n        },\n      }),\n\n      this.#proposalRoute({ verb: 'approve', settle: workItems.approveDeferredDecision.bind(workItems) }),\n      this.#proposalRoute({ verb: 'dismiss', settle: workItems.dismissDeferredDecision.bind(workItems) }),\n\n      registerApiRoute('/web/factory/projects/:id/decisions/:decisionId/retry', {\n        method: 'POST',\n        requiresAuth: false,\n        handler: async c => {\n          const context = loose(c);\n          const resolved = await this.#resolveProject(context);\n          if ('response' in resolved) return resolved.response;\n          const decisionId = context.req.param('decisionId');\n          if (!decisionId || !UUID_RE.test(decisionId)) return c.json({ error: 'invalid_decision_id' }, 422);\n          await workItems.ensureReady();\n          const decision = await workItems.retryDeferredDecision(\n            resolved.orgId,\n            resolved.factoryProjectId,\n            decisionId,\n            new Date(),\n          );\n          if (!decision) return c.json({ error: 'decision_not_retryable' }, 409);\n          return c.json({ decision: decisionSummary(decision) });\n        },\n      }),\n\n      // ── Create (upsert on sourceKey) a work item ─────────────────────────────\n      registerApiRoute('/web/factory/projects/:id/work-items', {\n        method: 'POST',\n        requiresAuth: false,\n        handler: async c => {\n          const resolved = await this.#resolveProject(loose(c));\n          if ('response' in resolved) return resolved.response;\n\n          const body = await readJson(loose(c));\n          if (body === undefined) return c.json({ error: 'Invalid JSON body' }, 400);\n          const input = parseCreateWorkItem(body);\n          if (!input) return c.json({ error: 'invalid_work_item' }, 400);\n          if ((input.stages ?? ['intake']).length !== 1 || (input.stages ?? ['intake'])[0] !== 'intake') {\n            return c.json(\n              { error: 'governed_transition_required', message: 'New work items must enter through Factory intake.' },\n              409,\n            );\n          }\n\n          await workItems.ensureReady();\n          try {\n            const result = await workItems.upsert({\n              orgId: resolved.orgId,\n              userId: resolved.userId,\n              factoryProjectId: resolved.factoryProjectId,\n              input,\n              reuseMode: 'non-stage',\n            });\n            let item = result.item;\n            if (result.created) {\n              if (!transitionService) {\n                await workItems.delete({ orgId: resolved.orgId, id: item.id });\n                return c.json({ error: 'factory_transitions_unavailable' }, 503);\n              }\n              const entered = await transitionService.transition({\n                orgId: resolved.orgId,\n                factoryProjectId: resolved.factoryProjectId,\n                workItemId: item.id,\n                board: item.externalSource?.type === 'pull-request' ? 'review' : 'work',\n                stage: 'intake',\n                expectedRevision: item.revision,\n                actor: { type: 'human', id: resolved.userId },\n                ingress: { type: 'human', identity: `work-item:${item.id}:initial-entry` },\n                cause: 'work_item_created',\n                initialEntry: true,\n              });\n              if (entered.status === 'rejected') {\n                await workItems.delete({ orgId: resolved.orgId, id: item.id });\n                return c.json({ status: 'rejected', code: entered.code, reason: entered.reason }, 422);\n              }\n              item = (await workItems.getForProject(resolved.orgId, resolved.factoryProjectId, item.id)) ?? item;\n              await audit.emit({\n                context: loose(c),\n                input: {\n                  action: 'factory.work_item.created',\n                  factoryProjectId: resolved.factoryProjectId,\n                  targets: [{ type: 'work_item', id: item.id, name: item.title }],\n                  metadata: { externalSource: item.externalSource, stages: item.stages },\n                },\n              });\n            } else {\n              // Source-key reuse: the POST updated an existing card, so audit it\n              // as an update (plus stage/run events) instead of a false creation.\n              const { stages: _stages, sessions: _sessions, ...boundedPatch } = input;\n              await this.#auditWorkItemPatch({\n                context: loose(c),\n                item,\n                previous: result.previous,\n                patch: boundedPatch as unknown as Record<string, unknown>,\n              });\n            }\n            return c.json({ workItem: item });\n          } catch (error) {\n            if (error instanceof WorkItemRelationError) {\n              return c.json({ error: error.code, message: error.message }, 400);\n            }\n            throw error;\n          }\n        },\n      }),\n\n      // ── Authoritative stage transition ──────────────────────────────────────\n      registerApiRoute('/web/factory/projects/:id/work-items/:workItemId/transition', {\n        method: 'POST',\n        requiresAuth: false,\n        handler: async c => {\n          const resolved = await this.#resolveProject(loose(c));\n          if ('response' in resolved) return resolved.response;\n          const workItemId = loose(c).req.param('workItemId');\n          if (!workItemId || !UUID_RE.test(workItemId)) return c.json({ error: 'Work item not found' }, 404);\n          const parsed = parseTransitionBody(await readJson(loose(c)));\n          if (!parsed) return c.json({ error: 'invalid_transition_request' }, 400);\n          if (!transitionService) {\n            return c.json({ error: 'factory_transition_unavailable' }, 503);\n          }\n          await workItems.ensureReady();\n          const result = await transitionService.transition({\n            ...parsed,\n            orgId: resolved.orgId,\n            factoryProjectId: resolved.factoryProjectId,\n            workItemId,\n            actor: { type: 'human', id: resolved.userId },\n            ingress: {\n              ...parsed.ingress,\n              identity: `human:${resolved.userId}:${parsed.ingress.identity}`,\n            },\n          });\n          await audit.emit({\n            context: loose(c),\n            input: {\n              action:\n                result.status === 'accepted'\n                  ? 'factory.work_item.stage_moved'\n                  : 'factory.work_item.transition_rejected',\n              factoryProjectId: resolved.factoryProjectId,\n              targets: [{ type: 'work_item', id: workItemId }],\n              metadata: {\n                transitionId: result.transitionId,\n                ingressType: parsed.ingress.type,\n                ruleSetVersion: transitionService.ruleSetVersion,\n                ...(result.status === 'accepted'\n                  ? { to: result.stage, revision: result.revision }\n                  : { code: result.code, reason: result.reason }),\n              },\n            },\n          });\n          if (result.status === 'accepted') return c.json({ result });\n          return c.json({ result }, result.code === 'stale' ? 409 : 422);\n        },\n      }),\n\n      // ── Bind a Factory run before dispatching its kickoff ────────────────────\n      registerApiRoute('/web/factory/projects/:id/runs/start', {\n        method: 'POST',\n        requiresAuth: false,\n        handler: async c => {\n          const resolved = await this.#resolveProject(loose(c));\n          if ('response' in resolved) return resolved.response;\n          if (!startCoordinator) {\n            return c.json({ error: 'factory_start_unavailable' }, 503);\n          }\n          const input = parseStartBody(await readJson(loose(c)), resolved, resolved.factoryProjectId);\n          if (!input) return c.json({ error: 'invalid_factory_start' }, 400);\n          input.requestContext = loose(c).get('requestContext');\n          input.defaultModelId = resolved.defaultModelId ?? undefined;\n          // This route is only reached by a person pressing a run action, so\n          // reaching it is the commitment the approval gate is asking for.\n          // Arming rides inside prepareRunStart's transaction so a crash can't\n          // start the run while leaving its follow-up work waiting on approval.\n          input.armAutonomy = true;\n          if (\n            !input.workItem.id &&\n            ((input.workItem.input.stages ?? ['intake']).length !== 1 ||\n              (input.workItem.input.stages ?? ['intake'])[0] !== 'intake')\n          ) {\n            return c.json(\n              { error: 'governed_transition_required', message: 'Create the work item in Intake before starting it.' },\n              409,\n            );\n          }\n          await workItems.ensureReady();\n          let prepared: FactoryStartPreparedResult;\n          try {\n            prepared = await startCoordinator.prepare(input);\n          } catch (error) {\n            if (error instanceof FactoryStartTransitionError) {\n              return c.json({ result: error.result }, error.result.code === 'stale' ? 409 : 422);\n            }\n            throw error;\n          }\n          await audit.emit({\n            context: loose(c),\n            input: {\n              action: 'factory.run.started',\n              factoryProjectId: resolved.factoryProjectId,\n              targets: [{ type: 'work_item', id: prepared.workItemId }],\n              metadata: {\n                role: input.workItem.role,\n                branch: prepared.branch,\n                threadId: prepared.threadId,\n                sessionId: prepared.sessionId,\n                bindingId: prepared.bindingId,\n              },\n            },\n          });\n          return c.json({ prepared }, 202);\n        },\n      }),\n\n      // ── Patch non-stage metadata / sessions / title ──────────────────────────\n      registerApiRoute('/web/factory/work-items/:id', {\n        method: 'PATCH',\n        requiresAuth: false,\n        handler: async c => {\n          const tenant = await this.#resolveTenant(loose(c));\n          if ('response' in tenant) return tenant.response;\n\n          const id = loose(c).req.param('id');\n          if (!id || !UUID_RE.test(id)) return c.json({ error: 'Work item not found' }, 404);\n\n          const body = await readJson(loose(c));\n          if (body === undefined) return c.json({ error: 'Invalid JSON body' }, 400);\n          const patch = parseUpdateWorkItem(body);\n          if (!patch) return c.json({ error: 'invalid_work_item_patch' }, 400);\n          if (patch.stages !== undefined) {\n            return c.json(\n              { error: 'governed_transition_required', message: 'Use the Factory transition endpoint to move stages.' },\n              409,\n            );\n          }\n\n          await workItems.ensureReady();\n          try {\n            const updated = await workItems.update({ orgId: tenant.orgId, id, userId: tenant.userId, patch });\n            if (!updated) return c.json({ error: 'Work item not found' }, 404);\n            await this.#auditWorkItemPatch({\n              context: loose(c),\n              item: updated.item,\n              previous: updated.previous,\n              patch: patch as Record<string, unknown>,\n            });\n            return c.json({ workItem: updated.item });\n          } catch (error) {\n            if (error instanceof WorkItemRelationError) {\n              return c.json({ error: error.code, message: error.message }, 400);\n            }\n            throw error;\n          }\n        },\n      }),\n\n      // ── Remove a work item ───────────────────────────────────────────────────\n      registerApiRoute('/web/factory/work-items/:id', {\n        method: 'DELETE',\n        requiresAuth: false,\n        handler: async c => {\n          const tenant = await this.#resolveTenant(loose(c));\n          if ('response' in tenant) return tenant.response;\n\n          const id = loose(c).req.param('id');\n          if (!id || !UUID_RE.test(id)) return c.json({ error: 'Work item not found' }, 404);\n\n          await workItems.ensureReady();\n          const deleted = await workItems.delete({ orgId: tenant.orgId, id });\n          if (!deleted) return c.json({ error: 'Work item not found' }, 404);\n          await audit.emit({\n            context: loose(c),\n            input: {\n              action: 'factory.work_item.deleted',\n              factoryProjectId: deleted.factoryProjectId,\n              targets: [{ type: 'work_item', id: deleted.id, name: deleted.title }],\n            },\n          });\n          return c.json({ ok: true });\n        },\n      }),\n    ];\n  }\n}\n"],"mappings":";;;;;;;;;AA6DA,SAAS,kBAAkB,OAAsB,cAAyD;CACxG,MAAM,0BAAU,IAAI,IAAY;CAChC,KAAK,MAAM,QAAQ,OACjB,KAAK,MAAM,EAAE,eAAe,OAAO,OAAO,KAAK,QAAQ,GACrD,IAAI,aAAa,UAAU,SAAS,GAAG,QAAQ,IAAI,SAAS;CAGhE,OAAO,CAAC,GAAG,OAAO;AACpB;AAEA,SAAS,MAAM,GAAqB;CAClC,OAAO;AACT;AAEA,MAAM,UAAU;AAEhB,MAAM,aAAa;AACnB,MAAM,mBAAmB;AACzB,MAAM,qBAAqB,KAAK;AAEhC,SAAS,SAAS,OAAkD;CAClE,OAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAC5E;AAEA,SAAS,YAAY,OAA0C;CAC7D,OACE,MAAM,QAAQ,KAAK,KACnB,MAAM,SAAS,KACf,MAAM,UAAU,cAChB,MAAM,OACJ,UAAS,OAAO,UAAU,YAAY,MAAM,UAAU,oBAAoB,yBAAyB,KAAK,KAAK,CAC/G,KACA,IAAI,IAAI,KAAK,CAAC,CAAC,SAAS,MAAM;AAElC;AAEA,SAAS,cAAc,OAAyD;CAC9E,IAAI,UAAU,MAAM,OAAO;CAC3B,IAAI,CAAC,SAAS,KAAK,GAAG,OAAO;CAC7B,IAAI;EACF,OAAO,KAAK,UAAU,KAAK,CAAC,CAAC,UAAU;CACzC,QAAQ;EACN,OAAO;CACT;AACF;AAEA,SAAS,oBAAoB,OAA2D;CACtF,IAAI,UAAU,KAAA,KAAa,UAAU,MAAM,OAAO;CAClD,IAAI,CAAC,SAAS,KAAK,GAAG,OAAO,KAAA;CAC7B,MAAM,EAAE,eAAe,MAAM,YAAY,QAAQ;CACjD,IAAI,OAAO,kBAAkB,YAAY,cAAc,WAAW,KAAK,cAAc,SAAS,KAAK,OAAO,KAAA;CAC1G,IAAI,OAAO,SAAS,YAAY,KAAK,WAAW,KAAK,KAAK,SAAS,KAAK,OAAO,KAAA;CAC/E,IAAI,OAAO,eAAe,YAAY,WAAW,WAAW,KAAK,WAAW,SAAS,KAAK,OAAO,KAAA;CACjG,IAAI,QAAQ,KAAA,MAAc,OAAO,QAAQ,YAAY,IAAI,SAAS,OAAO,OAAO,KAAA;CAChF,OAAO;EAAE;EAAe;EAAM;EAAY,GAAI,QAAQ,KAAA,IAAY,EAAE,IAAI,IAAI,CAAC;CAAG;AAClF;AAEA,SAAS,sBAAsB,OAA2C;CACxE,IAAI,UAAU,MAAM,OAAO;CAC3B,IAAI,OAAO,UAAU,YAAY,CAAC,QAAQ,KAAK,KAAK,GAAG,OAAO,KAAA;CAC9D,OAAO;AACT;AAEA,SAAS,cAAc,OAAkE;CACvF,IAAI,CAAC,SAAS,KAAK,GAAG,OAAO,KAAA;CAC7B,MAAM,MAA4C,CAAC;CACnD,KAAK,MAAM,CAAC,MAAM,YAAY,OAAO,QAAQ,KAAK,GAAG;EACnD,IAAI,CAAC,QAAQ,KAAK,SAAS,MAAM,CAAC,SAAS,OAAO,GAAG,OAAO,KAAA;EAC5D,MAAM,EAAE,WAAW,QAAQ,aAAa;EACxC,IAAI,OAAO,cAAc,YAAY,UAAU,WAAW,KAAK,UAAU,SAAS,KAAK,OAAO,KAAA;EAC9F,IAAI,OAAO,WAAW,YAAY,OAAO,WAAW,KAAK,OAAO,SAAS,KAAK,OAAO,KAAA;EACrF,IAAI,OAAO,aAAa,YAAY,SAAS,WAAW,KAAK,SAAS,SAAS,KAAK,OAAO,KAAA;EAC3F,IAAI,QAAQ;GAAE;GAAW;GAAQ;EAAS;CAC5C;CACA,OAAO;AACT;;AAGA,SAAgB,oBAAoB,MAA2C;CAC7E,IAAI,CAAC,SAAS,IAAI,GAAG,OAAO;CAC5B,MAAM,EAAE,gBAAgB,OAAO,QAAQ,UAAU,aAAa;CAC9D,IAAI,OAAO,UAAU,YAAY,MAAM,KAAK,CAAC,CAAC,WAAW,KAAK,MAAM,SAAS,KAAK,OAAO;CAEzF,MAAM,sBAAsB,sBAAsB;CAClD,MAAM,mBAAmB,sBAAsB,sBAAsB,KAAK,gBAAgB,IAAI,KAAA;CAC9F,IAAI,uBAAuB,qBAAqB,KAAA,GAAW,OAAO;CAClE,MAAM,eAAe,oBAAoB,cAAc;CACvD,IAAI,mBAAmB,KAAA,KAAa,iBAAiB,KAAA,GAAW,OAAO;CACvE,IAAI,WAAW,KAAA,KAAa,CAAC,YAAY,MAAM,GAAG,OAAO;CACzD,MAAM,iBAAiB,aAAa,KAAA,IAAY,KAAA,IAAY,cAAc,QAAQ;CAClF,IAAI,aAAa,KAAA,KAAa,mBAAmB,KAAA,GAAW,OAAO;CACnE,IAAI,aAAa,KAAA,KAAa,CAAC,cAAc,QAAQ,GAAG,OAAO;CAE/D,OAAO;EACL,OAAO,MAAM,KAAK;EAClB,GAAI,iBAAiB,KAAA,IAAY,EAAE,gBAAgB,aAAa,IAAI,CAAC;EACrE,GAAI,sBAAsB,EAAE,kBAAkB,oBAAoB,KAAK,IAAI,CAAC;EAC5E,GAAI,WAAW,KAAA,IAAY,EAAE,OAAO,IAAI,CAAC;EACzC,GAAI,mBAAmB,KAAA,IAAY,EAAE,UAAU,eAAe,IAAI,CAAC;EACnE,GAAI,aAAa,KAAA,IAAY,EAAE,SAAS,IAAI,CAAC;CAC/C;AACF;;AAGA,SAAgB,oBAAoB,MAA2C;CAC7E,IAAI,CAAC,SAAS,IAAI,GAAG,OAAO;CAC5B,MAAM,EAAE,OAAO,QAAQ,UAAU,aAAa;CAC9C,MAAM,sBAAsB,sBAAsB;CAClD,IACE,UAAU,KAAA,KACV,WAAW,KAAA,KACX,aAAa,KAAA,KACb,aAAa,KAAA,KACb,CAAC,qBAED,OAAO;CACT,MAAM,mBAAmB,sBAAsB,sBAAsB,KAAK,gBAAgB,IAAI,KAAA;CAC9F,IAAI,uBAAuB,qBAAqB,KAAA,GAAW,OAAO;CAClE,IAAI,UAAU,KAAA,MAAc,OAAO,UAAU,YAAY,MAAM,KAAK,CAAC,CAAC,WAAW,KAAK,MAAM,SAAS,MACnG,OAAO;CACT,IAAI,WAAW,KAAA,KAAa,CAAC,YAAY,MAAM,GAAG,OAAO;CACzD,MAAM,iBAAiB,aAAa,KAAA,IAAY,KAAA,IAAY,cAAc,QAAQ;CAClF,IAAI,aAAa,KAAA,KAAa,mBAAmB,KAAA,GAAW,OAAO;CACnE,IAAI,aAAa,KAAA,KAAa,CAAC,cAAc,QAAQ,GAAG,OAAO;CAE/D,OAAO;EACL,GAAI,sBAAsB,EAAE,kBAAkB,oBAAoB,KAAK,IAAI,CAAC;EAC5E,GAAI,UAAU,KAAA,IAAY,EAAE,OAAO,MAAM,KAAK,EAAE,IAAI,CAAC;EACrD,GAAI,WAAW,KAAA,IAAY,EAAE,OAAO,IAAI,CAAC;EACzC,GAAI,mBAAmB,KAAA,IAAY,EAAE,UAAU,eAAe,IAAI,CAAC;EACnE,GAAI,aAAa,KAAA,IAAY,EAAE,SAAS,IAAI,CAAC;CAC/C;AACF;AAEA,eAAe,SAAS,GAA0C;CAChE,IAAI;EACF,OAAO,MAAM,EAAE,IAAI,KAAK;CAC1B,QAAQ;EACN;CACF;AACF;;AAGA,SAAS,cAAc,OAA0C;CAC/D,OAAO,OAAO,KAAK,KAAK,CAAC,CAAC,QAAO,QAAO,MAAM,SAAS,KAAA,CAAS;AAClE;AAEA,SAAS,YAAY,OAAgB,KAAiC;CACpE,IAAI,OAAO,UAAU,UAAU,OAAO,KAAA;CACtC,MAAM,aAAa,MAAM,KAAK;CAC9B,OAAO,WAAW,SAAS,KAAK,WAAW,UAAU,MAAM,aAAa,KAAA;AAC1E;AAEA,SAAS,oBACP,MAC8F;CAC9F,IAAI,CAAC,SAAS,IAAI,GAAG,OAAO;CAC5B,MAAM,QAAQ,oBAAoB,SAAS,KAAK,KAAyB,IACpE,KAAK,QACN,KAAA;CACJ,MAAM,QAAQ,mBAAmB,KAAK,KAAK,IAAI,KAAK,QAAQ,KAAA;CAC5D,MAAM,YAAY,YAAY,KAAK,WAAW,GAAG;CACjD,MAAM,QAAQ,YAAY,KAAK,OAAO,GAAG;CACzC,IACE,CAAC,SACD,CAAC,SACD,CAAC,aACD,CAAC,QAAQ,KAAK,SAAS,KACvB,CAAC,SACD,CAAC,OAAO,UAAU,KAAK,gBAAgB,KACvC,OAAO,KAAK,gBAAgB,IAAI,GAEhC,OAAO;CAET,OAAO;EACL;EACA;EACA,kBAAkB,OAAO,KAAK,gBAAgB;EAC9C,SAAS;GAAE,MAAM;GAAS,UAAU;EAAU;EAC9C;CACF;AACF;AAEA,SAAS,gBAAgB,OAAsE;CAC7F,IAAI,UAAU,KAAA,GAAW,OAAO,KAAA;CAChC,IAAI,CAAC,SAAS,KAAK,GAAG,OAAO;CAC7B,IAAI,MAAM,SAAS,UAAU;EAC3B,MAAM,SAAS,YAAY,MAAM,QAAQ,KAAM;EAC/C,OAAO,SAAS;GAAE,MAAM;GAAU;EAAO,IAAI;CAC/C;CACA,IAAI,MAAM,SAAS,SAAS;EAC1B,MAAM,YAAY,YAAY,MAAM,WAAW,EAAE;EACjD,MAAM,OAAO,OAAO,MAAM,cAAc,YAAY,MAAM,UAAU,UAAU,QAAS,MAAM,YAAY,KAAA;EACzG,OAAO,aAAa,SAAS,KAAA,IAAY;GAAE,MAAM;GAAS;GAAW,WAAW;EAAK,IAAI;CAC3F;CACA,OAAO;AACT;AAEA,SAAS,eACP,MACA,QACA,kBAC4B;CAC5B,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS,KAAK,QAAQ,GAAG,OAAO;CACxD,MAAM,QAAQ,oBAAoB,KAAK,SAAS,KAAK;CACrD,MAAM,YAAY,YAAY,KAAK,WAAW,GAAG;CACjD,MAAM,cAAc,YAAY,KAAK,aAAa,GAAG;CACrD,MAAM,aAAa,YAAY,KAAK,YAAY,GAAG;CACnD,MAAM,aAAa,gBAAgB,KAAK,UAAU;CAClD,MAAM,mBAAmB,mBAAmB,KAAK,gBAAgB,IAAI,KAAK,mBAAmB,KAAA;CAC7F,MAAM,OAAO,YAAY,KAAK,SAAS,MAAM,EAAE;CAC/C,MAAM,KAAK,KAAK,SAAS,OAAO,KAAA,IAAY,KAAA,IAAY,YAAY,KAAK,SAAS,IAAI,EAAE;CACxF,IAAI,KAAK,SAAS,OAAO,KAAA,MAAc,CAAC,MAAM,CAAC,QAAQ,KAAK,EAAE,IAAI,OAAO;CACzE,IACE,CAAC,SACD,CAAC,aACD,CAAC,QAAQ,KAAK,SAAS,KACvB,CAAC,eACD,CAAC,cACD,CAAC,QAAQ,KAAK,UAAU,KACxB,eAAe,QACf,CAAC,oBACD,CAAC,MAED,OAAO;CAET,MAAM,aAAa,SAAS,KAAK,UAAU,IACvC,OAAO,YACL,OAAO,QAAQ,KAAK,UAAU,CAAC,CAC5B,QACE,UACC,YAAY,MAAM,IAAI,EAAE,MAAM,KAAA,KAAa,YAAY,MAAM,IAAI,GAAG,MAAM,KAAA,CAC9E,CAAC,CACA,KAAK,CAAC,KAAK,WAAW,CAAC,KAAK,MAAM,KAAK,CAAC,CAAC,CAC9C,IACA,KAAA;CACJ,OAAO;EACL,GAAG;EACH;EACA;EACA;EACA;EACA;EACA;EACA;EACA,UAAU;GAAE;GAAI;GAAM;EAAM;CAC9B;AACF;AAEA,MAAM,oCAAoB,IAAI,IAA2B;CACvD;CACA;CACA;CACA;CACA;CACA;CACA;AACF,CAAC;AACD,MAAM,6BAA6B;AACnC,MAAM,yBAAyB;AAE/B,SAAS,sBAAsB,KAA8D;CAC3F,IAAI,CAAC,KAAK,OAAO,KAAA;CACjB,MAAM,WAAW,CAAC,GAAG,IAAI,IAAI,IAAI,MAAM,GAAG,CAAC,CAAC,KAAI,WAAU,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,QACxE,WAA4C,kBAAkB,IAAI,MAA+B,CACpG;CACA,OAAO,SAAS,SAAS,IAAI,WAAW,KAAA;AAC1C;AAEA,SAAS,mBAAmB,KAAiC;CAC3D,MAAM,SAAS,MAAM,OAAO,SAAS,KAAK,EAAE,IAAI;CAChD,IAAI,CAAC,OAAO,SAAS,MAAM,GAAG,OAAO;CACrC,OAAO,KAAK,IAAI,GAAG,KAAK,IAAI,wBAAwB,MAAM,CAAC;AAC7D;AAEA,SAAS,qBAAqB,UAAiD;CAC7E,OAAO,OAAO,KAAK,KAAK,UAAU,CAAC,SAAS,UAAU,YAAY,GAAG,SAAS,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,SAAS,WAAW;AAClH;AAEA,SAAS,oBAAoB,KAAsE;CACjG,IAAI,CAAC,KAAK,OAAO,KAAA;CACjB,IAAI;EACF,MAAM,UAAU,KAAK,MAAM,OAAO,KAAK,KAAK,WAAW,CAAC,CAAC,SAAS,MAAM,CAAC;EACzE,IACE,CAAC,MAAM,QAAQ,OAAO,KACtB,QAAQ,WAAW,KACnB,OAAO,QAAQ,OAAO,YACtB,OAAO,QAAQ,OAAO,UAEtB;EAEF,MAAM,YAAY,IAAI,KAAK,QAAQ,EAAE;EACrC,IAAI,OAAO,MAAM,UAAU,QAAQ,CAAC,KAAK,CAAC,QAAQ,KAAK,QAAQ,EAAE,GAAG,OAAO,KAAA;EAC3E,OAAO;GAAE;GAAW,IAAI,QAAQ;EAAG;CACrC,QAAQ;EACN;CACF;AACF;AAEA,SAAS,aAAa,UAAiD;CACrE,OAAO,OAAO,SAAS,SAAS,SAAS,WAAW,SAAS,SAAS,KAAK,MAAM,GAAG,EAAE,IAAI;AAC5F;AAEA,SAAS,gBAAgB,UAAyC;CAChE,OAAO;EACL,IAAI,SAAS;EACb,cAAc,SAAS;EACvB,YAAY,SAAS;EACrB,MAAM,aAAa,QAAQ;EAC3B,MAAM,OAAO,SAAS,SAAS,SAAS,WAAW,SAAS,SAAS,KAAK,MAAM,GAAG,EAAE,IAAI;EACzF,QAAQ,SAAS;EACjB,UAAU,SAAS;EACnB,WAAW,SAAS,WAAW,MAAM,GAAG,GAAG,KAAK;EAChD,WAAW,SAAS,UAAU,YAAY;EAC1C,WAAW,SAAS,UAAU,YAAY;EAC1C,aAAa,SAAS,aAAa,YAAY,KAAK;CACtD;AACF;AAEA,IAAa,iBAAb,cAAoC,MAA0B;;CAE5D,MAAMA,eAAe,GAAiF;EACpG,MAAM,KAAK,KAAK,KAAK,WAAW,CAAC;EACjC,MAAM,SAAS,KAAK,KAAK,KAAK,OAAO,CAAC;EACtC,IAAI,CAAC,QAAQ,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,eAAe,GAAG,GAAG,EAAE;EACvE,IAAI,CAAC,OAAO,OACV,OAAO,EACL,UAAU,EAAE,KACV;GAAE,OAAO;GAAyB,SAAS;EAA8C,GACzF,GACF,EACF;EAEF,OAAO;GAAE,OAAO,OAAO;GAAO,QAAQ,OAAO;EAAO;CACtD;;;;;;CAOA,MAAMC,gBACJ,GAGA;EACA,MAAM,SAAS,MAAM,KAAKD,eAAe,CAAC;EAC1C,IAAI,cAAc,QAAQ,OAAO;EAEjC,MAAM,YAAY,EAAE,IAAI,MAAM,IAAI;EAClC,IAAI,CAAC,aAAa,CAAC,QAAQ,KAAK,SAAS,GACvC,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG,EAAE;EAEjE,MAAM,EAAE,aAAa,KAAK;EAC1B,MAAM,SAAS,YAAY;EAC3B,MAAM,UAAU,MAAM,SAAS,IAAI;GAAE,OAAO,OAAO;GAAO,IAAI;EAAU,CAAC;EACzE,IAAI,CAAC,SACH,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG,EAAE;EAEjE,OAAO;GAAE,GAAG;GAAQ,kBAAkB;GAAW,gBAAgB,QAAQ;EAAe;CAC1F;;;;;;CAOA,MAAME,oBAAoB,EACxB,SACA,MACA,UACA,SAMgB;EAChB,MAAM,EAAE,UAAU,KAAK;EACvB,MAAM,SAAS;GAAE,MAAM;GAAa,IAAI,KAAK;GAAI,MAAM,KAAK;EAAM;EAClE,MAAM,MAAM,KAAK;GACf;GACA,OAAO;IACL,QAAQ;IACR,kBAAkB,KAAK;IACvB,SAAS,CAAC,MAAM;IAChB,UAAU,EAAE,QAAQ,cAAc,KAAK,EAAE;GAC3C;EACF,CAAC;EAKD,IAFE,MAAM,WAAW,KAAA,MAChB,SAAS,OAAO,WAAW,KAAK,OAAO,UAAU,SAAS,OAAO,MAAM,GAAG,MAAM,MAAM,KAAK,OAAO,EAAE,IAErG,MAAM,MAAM,KAAK;GACf;GACA,OAAO;IACL,QAAQ;IACR,kBAAkB,KAAK;IACvB,SAAS,CAAC,MAAM;IAChB,UAAU;KAAE,MAAM,SAAS;KAAQ,IAAI,KAAK;IAAO;GACrD;EACF,CAAC;EAGH,MAAM,WAAW,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,QAAO,SAAQ,CAAC,SAAS,aAAa,SAAS,IAAI,CAAC;EAChG,KAAK,MAAM,QAAQ,UAAU;GAC3B,MAAM,UAAU,KAAK,SAAS;GAC9B,MAAM,MAAM,KAAK;IACf;IACA,OAAO;KACL,QAAQ;KACR,kBAAkB,KAAK;KACvB,SAAS,CAAC,MAAM;KAChB,UAAU;MACR;MACA,QAAQ,SAAS;MACjB,UAAU,SAAS;MACnB,WAAW,SAAS;KACtB;IACF;GACF,CAAC;EACH;CACF;;CAGA,eAAe,EACb,MACA,UASW;EACX,MAAM,EAAE,OAAO,cAAc,KAAK;EAClC,OAAO,iBAAiB,mDAAmD,QAAQ;GACjF,QAAQ;GACR,cAAc;GACd,SAAS,OAAM,MAAK;IAClB,MAAM,UAAU,MAAM,CAAC;IACvB,MAAM,WAAW,MAAM,KAAKD,gBAAgB,OAAO;IACnD,IAAI,cAAc,UAAU,OAAO,SAAS;IAC5C,MAAM,aAAa,QAAQ,IAAI,MAAM,YAAY;IACjD,IAAI,CAAC,cAAc,CAAC,QAAQ,KAAK,UAAU,GAAG,OAAO,EAAE,KAAK,EAAE,OAAO,sBAAsB,GAAG,GAAG;IACjG,MAAM,UAAU,YAAY;IAC5B,MAAM,sBAAM,IAAI,KAAK;IACrB,MAAM,WAAW,MAAM,OAAO,SAAS,OAAO,SAAS,kBAAkB,YAAY,GAAG;IACxF,IAAI,CAAC,UAAU,OAAO,EAAE,KAAK,EAAE,OAAO,wBAAwB,GAAG,GAAG;IAIpE,MAAM,MAAM,KAAK;KACf;KACA,OAAO;MACL,QAAQ,SAAS,YAAY,yBAAyB;MACtD,kBAAkB,SAAS;MAC3B,SAAS,SAAS,aACd,CAAC;OAAE,MAAM;OAAa,IAAI,SAAS;MAAW,CAAC,IAC/C,CAAC;OAAE,MAAM;OAAiB,IAAI,SAAS;MAAG,CAAC;MAC/C,UAAU;OAAE,YAAY,SAAS;OAAI,QAAQ,aAAa,QAAQ;MAAE;KACtE;IACF,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,UAAU,gBAAgB,QAAQ,EAAE,CAAC;GACvD;EACF,CAAC;CACH;;CAGA,SAAqB;EACnB,MAAM,EAAE,OAAO,WAAW,aAAa,mBAAmB,kBAAkB,iBAAiB,KAAK;EAClG,OAAO;GAEL,iBAAiB,wCAAwC;IACvD,QAAQ;IACR,cAAc;IACd,SAAS,OAAM,MAAK;KAClB,MAAM,WAAW,MAAM,KAAKA,gBAAgB,MAAM,CAAC,CAAC;KACpD,IAAI,cAAc,UAAU,OAAO,SAAS;KAC5C,MAAM,UAAU,YAAY;KAC5B,MAAM,QAAQ,MAAM,UAAU,KAAK;MACjC,OAAO,SAAS;MAChB,kBAAkB,SAAS;KAC7B,CAAC;KACD,OAAO,EAAE,KAAK;MAAE,WAAW;MAAO,mBAAmB,kBAAkB,OAAO,YAAY;KAAE,CAAC;IAC/F;GACF,CAAC;GAGD,iBAAiB,qCAAqC;IACpD,QAAQ;IACR,cAAc;IACd,SAAS,OAAM,MAAK;KAClB,MAAM,WAAW,MAAM,KAAKA,gBAAgB,MAAM,CAAC,CAAC;KACpD,IAAI,cAAc,UAAU,OAAO,SAAS;KAC5C,MAAM,EAAE,aAAa,cAAc,kBACjC,MAAM,CAAC,CAAC,CAAC,IAAI,MAAM,MAAM,GACzB,MAAM,CAAC,CAAC,CAAC,IAAI,MAAM,IAAI,mBACvB,IAAI,KAAK,CACX;KACA,MAAM,UAAU,YAAY;KAC5B,MAAM,QAAQ,MAAM,UAAU,KAAK;MACjC,OAAO,SAAS;MAChB,kBAAkB,SAAS;KAC7B,CAAC;KACD,OAAO,EAAE,KAAK,EAAE,SAAS,sBAAsB,OAAO;MAAE;MAAa;KAAU,CAAC,EAAE,CAAC;IACrF;GACF,CAAC;GAGD,iBAAiB,+CAA+C;IAC9D,QAAQ;IACR,cAAc;IACd,SAAS,OAAM,MAAK;KAClB,MAAM,WAAW,MAAM,KAAKA,gBAAgB,MAAM,CAAC,CAAC;KACpD,IAAI,cAAc,UAAU,OAAO,SAAS;KAC5C,MAAM,YAAY,YAAY;KAC9B,MAAM,SAAS,MAAM,YAAY,UAAU,SAAS,OAAO,SAAS,gBAAgB;KAKpF,OAAO,EAAE,KAAK,EAAE,YAAY,oBAAoB,MAAM,EAAE,CAAC;IAC3D;GACF,CAAC;GAGD,iBAAiB,uCAAuC;IACtD,QAAQ;IACR,cAAc;IACd,SAAS,OAAM,MAAK;KAClB,MAAM,UAAU,MAAM,CAAC;KACvB,MAAM,WAAW,MAAM,KAAKA,gBAAgB,OAAO;KACnD,IAAI,cAAc,UAAU,OAAO,SAAS;KAE5C,MAAM,YAAY,QAAQ,IAAI,MAAM,QAAQ;KAC5C,MAAM,SAAS,oBAAoB,SAAS;KAC5C,IAAI,aAAa,CAAC,QAAQ,OAAO,EAAE,KAAK,EAAE,OAAO,iBAAiB,GAAG,GAAG;KACxE,MAAM,UAAU,YAAY;KAC5B,MAAM,OAAO,MAAM,UAAU,yBAAyB;MACpD,OAAO,SAAS;MAChB,kBAAkB,SAAS;MAC3B,UAAU,sBAAsB,QAAQ,IAAI,MAAM,UAAU,CAAC;MAC7D;MACA,OAAO,mBAAmB,QAAQ,IAAI,MAAM,OAAO,CAAC;KACtD,CAAC;KACD,MAAM,OAAO,KAAK,UAAU,GAAG,EAAE;KACjC,OAAO,EAAE,KAAK;MACZ,WAAW,KAAK,UAAU,IAAI,eAAe;MAC7C,GAAI,KAAK,WAAW,OAAO,EAAE,YAAY,qBAAqB,IAAI,EAAE,IAAI,CAAC;KAC3E,CAAC;IACH;GACF,CAAC;GAED,KAAKE,eAAe;IAAE,MAAM;IAAW,QAAQ,UAAU,wBAAwB,KAAK,SAAS;GAAE,CAAC;GAClG,KAAKA,eAAe;IAAE,MAAM;IAAW,QAAQ,UAAU,wBAAwB,KAAK,SAAS;GAAE,CAAC;GAElG,iBAAiB,yDAAyD;IACxE,QAAQ;IACR,cAAc;IACd,SAAS,OAAM,MAAK;KAClB,MAAM,UAAU,MAAM,CAAC;KACvB,MAAM,WAAW,MAAM,KAAKF,gBAAgB,OAAO;KACnD,IAAI,cAAc,UAAU,OAAO,SAAS;KAC5C,MAAM,aAAa,QAAQ,IAAI,MAAM,YAAY;KACjD,IAAI,CAAC,cAAc,CAAC,QAAQ,KAAK,UAAU,GAAG,OAAO,EAAE,KAAK,EAAE,OAAO,sBAAsB,GAAG,GAAG;KACjG,MAAM,UAAU,YAAY;KAC5B,MAAM,WAAW,MAAM,UAAU,sBAC/B,SAAS,OACT,SAAS,kBACT,4BACA,IAAI,KAAK,CACX;KACA,IAAI,CAAC,UAAU,OAAO,EAAE,KAAK,EAAE,OAAO,yBAAyB,GAAG,GAAG;KACrE,OAAO,EAAE,KAAK,EAAE,UAAU,gBAAgB,QAAQ,EAAE,CAAC;IACvD;GACF,CAAC;GAGD,iBAAiB,wCAAwC;IACvD,QAAQ;IACR,cAAc;IACd,SAAS,OAAM,MAAK;KAClB,MAAM,WAAW,MAAM,KAAKA,gBAAgB,MAAM,CAAC,CAAC;KACpD,IAAI,cAAc,UAAU,OAAO,SAAS;KAE5C,MAAM,OAAO,MAAM,SAAS,MAAM,CAAC,CAAC;KACpC,IAAI,SAAS,KAAA,GAAW,OAAO,EAAE,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;KACzE,MAAM,QAAQ,oBAAoB,IAAI;KACtC,IAAI,CAAC,OAAO,OAAO,EAAE,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;KAC7D,KAAK,MAAM,UAAU,CAAC,QAAQ,EAAA,CAAG,WAAW,MAAM,MAAM,UAAU,CAAC,QAAQ,EAAA,CAAG,OAAO,UACnF,OAAO,EAAE,KACP;MAAE,OAAO;MAAgC,SAAS;KAAoD,GACtG,GACF;KAGF,MAAM,UAAU,YAAY;KAC5B,IAAI;MACF,MAAM,SAAS,MAAM,UAAU,OAAO;OACpC,OAAO,SAAS;OAChB,QAAQ,SAAS;OACjB,kBAAkB,SAAS;OAC3B;OACA,WAAW;MACb,CAAC;MACD,IAAI,OAAO,OAAO;MAClB,IAAI,OAAO,SAAS;OAClB,IAAI,CAAC,mBAAmB;QACtB,MAAM,UAAU,OAAO;SAAE,OAAO,SAAS;SAAO,IAAI,KAAK;QAAG,CAAC;QAC7D,OAAO,EAAE,KAAK,EAAE,OAAO,kCAAkC,GAAG,GAAG;OACjE;OACA,MAAM,UAAU,MAAM,kBAAkB,WAAW;QACjD,OAAO,SAAS;QAChB,kBAAkB,SAAS;QAC3B,YAAY,KAAK;QACjB,OAAO,KAAK,gBAAgB,SAAS,iBAAiB,WAAW;QACjE,OAAO;QACP,kBAAkB,KAAK;QACvB,OAAO;SAAE,MAAM;SAAS,IAAI,SAAS;QAAO;QAC5C,SAAS;SAAE,MAAM;SAAS,UAAU,aAAa,KAAK,GAAG;QAAgB;QACzE,OAAO;QACP,cAAc;OAChB,CAAC;OACD,IAAI,QAAQ,WAAW,YAAY;QACjC,MAAM,UAAU,OAAO;SAAE,OAAO,SAAS;SAAO,IAAI,KAAK;QAAG,CAAC;QAC7D,OAAO,EAAE,KAAK;SAAE,QAAQ;SAAY,MAAM,QAAQ;SAAM,QAAQ,QAAQ;QAAO,GAAG,GAAG;OACvF;OACA,OAAQ,MAAM,UAAU,cAAc,SAAS,OAAO,SAAS,kBAAkB,KAAK,EAAE,KAAM;OAC9F,MAAM,MAAM,KAAK;QACf,SAAS,MAAM,CAAC;QAChB,OAAO;SACL,QAAQ;SACR,kBAAkB,SAAS;SAC3B,SAAS,CAAC;UAAE,MAAM;UAAa,IAAI,KAAK;UAAI,MAAM,KAAK;SAAM,CAAC;SAC9D,UAAU;UAAE,gBAAgB,KAAK;UAAgB,QAAQ,KAAK;SAAO;QACvE;OACF,CAAC;MACH,OAAO;OAGL,MAAM,EAAE,QAAQ,SAAS,UAAU,WAAW,GAAG,iBAAiB;OAClE,MAAM,KAAKC,oBAAoB;QAC7B,SAAS,MAAM,CAAC;QAChB;QACA,UAAU,OAAO;QACjB,OAAO;OACT,CAAC;MACH;MACA,OAAO,EAAE,KAAK,EAAE,UAAU,KAAK,CAAC;KAClC,SAAS,OAAO;MACd,IAAI,iBAAiB,uBACnB,OAAO,EAAE,KAAK;OAAE,OAAO,MAAM;OAAM,SAAS,MAAM;MAAQ,GAAG,GAAG;MAElE,MAAM;KACR;IACF;GACF,CAAC;GAGD,iBAAiB,+DAA+D;IAC9E,QAAQ;IACR,cAAc;IACd,SAAS,OAAM,MAAK;KAClB,MAAM,WAAW,MAAM,KAAKD,gBAAgB,MAAM,CAAC,CAAC;KACpD,IAAI,cAAc,UAAU,OAAO,SAAS;KAC5C,MAAM,aAAa,MAAM,CAAC,CAAC,CAAC,IAAI,MAAM,YAAY;KAClD,IAAI,CAAC,cAAc,CAAC,QAAQ,KAAK,UAAU,GAAG,OAAO,EAAE,KAAK,EAAE,OAAO,sBAAsB,GAAG,GAAG;KACjG,MAAM,SAAS,oBAAoB,MAAM,SAAS,MAAM,CAAC,CAAC,CAAC;KAC3D,IAAI,CAAC,QAAQ,OAAO,EAAE,KAAK,EAAE,OAAO,6BAA6B,GAAG,GAAG;KACvE,IAAI,CAAC,mBACH,OAAO,EAAE,KAAK,EAAE,OAAO,iCAAiC,GAAG,GAAG;KAEhE,MAAM,UAAU,YAAY;KAC5B,MAAM,SAAS,MAAM,kBAAkB,WAAW;MAChD,GAAG;MACH,OAAO,SAAS;MAChB,kBAAkB,SAAS;MAC3B;MACA,OAAO;OAAE,MAAM;OAAS,IAAI,SAAS;MAAO;MAC5C,SAAS;OACP,GAAG,OAAO;OACV,UAAU,SAAS,SAAS,OAAO,GAAG,OAAO,QAAQ;MACvD;KACF,CAAC;KACD,MAAM,MAAM,KAAK;MACf,SAAS,MAAM,CAAC;MAChB,OAAO;OACL,QACE,OAAO,WAAW,aACd,kCACA;OACN,kBAAkB,SAAS;OAC3B,SAAS,CAAC;QAAE,MAAM;QAAa,IAAI;OAAW,CAAC;OAC/C,UAAU;QACR,cAAc,OAAO;QACrB,aAAa,OAAO,QAAQ;QAC5B,gBAAgB,kBAAkB;QAClC,GAAI,OAAO,WAAW,aAClB;SAAE,IAAI,OAAO;SAAO,UAAU,OAAO;QAAS,IAC9C;SAAE,MAAM,OAAO;SAAM,QAAQ,OAAO;QAAO;OACjD;MACF;KACF,CAAC;KACD,IAAI,OAAO,WAAW,YAAY,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC;KAC1D,OAAO,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,SAAS,UAAU,MAAM,GAAG;IAC/D;GACF,CAAC;GAGD,iBAAiB,wCAAwC;IACvD,QAAQ;IACR,cAAc;IACd,SAAS,OAAM,MAAK;KAClB,MAAM,WAAW,MAAM,KAAKA,gBAAgB,MAAM,CAAC,CAAC;KACpD,IAAI,cAAc,UAAU,OAAO,SAAS;KAC5C,IAAI,CAAC,kBACH,OAAO,EAAE,KAAK,EAAE,OAAO,4BAA4B,GAAG,GAAG;KAE3D,MAAM,QAAQ,eAAe,MAAM,SAAS,MAAM,CAAC,CAAC,GAAG,UAAU,SAAS,gBAAgB;KAC1F,IAAI,CAAC,OAAO,OAAO,EAAE,KAAK,EAAE,OAAO,wBAAwB,GAAG,GAAG;KACjE,MAAM,iBAAiB,MAAM,CAAC,CAAC,CAAC,IAAI,gBAAgB;KACpD,MAAM,iBAAiB,SAAS,kBAAkB,KAAA;KAKlD,MAAM,cAAc;KACpB,IACE,CAAC,MAAM,SAAS,QACd,MAAM,SAAS,MAAM,UAAU,CAAC,QAAQ,EAAA,CAAG,WAAW,MACrD,MAAM,SAAS,MAAM,UAAU,CAAC,QAAQ,EAAA,CAAG,OAAO,WAErD,OAAO,EAAE,KACP;MAAE,OAAO;MAAgC,SAAS;KAAqD,GACvG,GACF;KAEF,MAAM,UAAU,YAAY;KAC5B,IAAI;KACJ,IAAI;MACF,WAAW,MAAM,iBAAiB,QAAQ,KAAK;KACjD,SAAS,OAAO;MACd,IAAI,iBAAiB,6BACnB,OAAO,EAAE,KAAK,EAAE,QAAQ,MAAM,OAAO,GAAG,MAAM,OAAO,SAAS,UAAU,MAAM,GAAG;MAEnF,MAAM;KACR;KACA,MAAM,MAAM,KAAK;MACf,SAAS,MAAM,CAAC;MAChB,OAAO;OACL,QAAQ;OACR,kBAAkB,SAAS;OAC3B,SAAS,CAAC;QAAE,MAAM;QAAa,IAAI,SAAS;OAAW,CAAC;OACxD,UAAU;QACR,MAAM,MAAM,SAAS;QACrB,QAAQ,SAAS;QACjB,UAAU,SAAS;QACnB,WAAW,SAAS;QACpB,WAAW,SAAS;OACtB;MACF;KACF,CAAC;KACD,OAAO,EAAE,KAAK,EAAE,SAAS,GAAG,GAAG;IACjC;GACF,CAAC;GAGD,iBAAiB,+BAA+B;IAC9C,QAAQ;IACR,cAAc;IACd,SAAS,OAAM,MAAK;KAClB,MAAM,SAAS,MAAM,KAAKD,eAAe,MAAM,CAAC,CAAC;KACjD,IAAI,cAAc,QAAQ,OAAO,OAAO;KAExC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,MAAM,IAAI;KAClC,IAAI,CAAC,MAAM,CAAC,QAAQ,KAAK,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,OAAO,sBAAsB,GAAG,GAAG;KAEjF,MAAM,OAAO,MAAM,SAAS,MAAM,CAAC,CAAC;KACpC,IAAI,SAAS,KAAA,GAAW,OAAO,EAAE,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;KACzE,MAAM,QAAQ,oBAAoB,IAAI;KACtC,IAAI,CAAC,OAAO,OAAO,EAAE,KAAK,EAAE,OAAO,0BAA0B,GAAG,GAAG;KACnE,IAAI,MAAM,WAAW,KAAA,GACnB,OAAO,EAAE,KACP;MAAE,OAAO;MAAgC,SAAS;KAAsD,GACxG,GACF;KAGF,MAAM,UAAU,YAAY;KAC5B,IAAI;MACF,MAAM,UAAU,MAAM,UAAU,OAAO;OAAE,OAAO,OAAO;OAAO;OAAI,QAAQ,OAAO;OAAQ;MAAM,CAAC;MAChG,IAAI,CAAC,SAAS,OAAO,EAAE,KAAK,EAAE,OAAO,sBAAsB,GAAG,GAAG;MACjE,MAAM,KAAKE,oBAAoB;OAC7B,SAAS,MAAM,CAAC;OAChB,MAAM,QAAQ;OACd,UAAU,QAAQ;OACX;MACT,CAAC;MACD,OAAO,EAAE,KAAK,EAAE,UAAU,QAAQ,KAAK,CAAC;KAC1C,SAAS,OAAO;MACd,IAAI,iBAAiB,uBACnB,OAAO,EAAE,KAAK;OAAE,OAAO,MAAM;OAAM,SAAS,MAAM;MAAQ,GAAG,GAAG;MAElE,MAAM;KACR;IACF;GACF,CAAC;GAGD,iBAAiB,+BAA+B;IAC9C,QAAQ;IACR,cAAc;IACd,SAAS,OAAM,MAAK;KAClB,MAAM,SAAS,MAAM,KAAKF,eAAe,MAAM,CAAC,CAAC;KACjD,IAAI,cAAc,QAAQ,OAAO,OAAO;KAExC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,MAAM,IAAI;KAClC,IAAI,CAAC,MAAM,CAAC,QAAQ,KAAK,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,OAAO,sBAAsB,GAAG,GAAG;KAEjF,MAAM,UAAU,YAAY;KAC5B,MAAM,UAAU,MAAM,UAAU,OAAO;MAAE,OAAO,OAAO;MAAO;KAAG,CAAC;KAClE,IAAI,CAAC,SAAS,OAAO,EAAE,KAAK,EAAE,OAAO,sBAAsB,GAAG,GAAG;KACjE,MAAM,MAAM,KAAK;MACf,SAAS,MAAM,CAAC;MAChB,OAAO;OACL,QAAQ;OACR,kBAAkB,QAAQ;OAC1B,SAAS,CAAC;QAAE,MAAM;QAAa,IAAI,QAAQ;QAAI,MAAM,QAAQ;OAAM,CAAC;MACtE;KACF,CAAC;KACD,OAAO,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC;IAC5B;GACF,CAAC;EACH;CACF;AACF"}

package/dist/rules/binding-context.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"binding-context.d.ts","sourceRoot":"","sources":["../../src/rules/binding-context.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAGnE,OAAO,KAAK,EACV,wBAAwB,EACxB,uBAAuB,EACvB,+BAA+B,EAC/B,gBAAgB,EACjB,MAAM,uCAAuC,CAAC;AAW/C,kFAAkF;AAClF,MAAM,WAAW,0BAA0B;IACzC,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,mBAAmB,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC,CAAC;CACvH;AAED,wBAAgB,4BAA4B,CAC1C,cAAc,EAAE,cAAc,GAAG,SAAS,GACzC,+BAA+B,GAAG,IAAI,CAWxC;AAED,wBAAgB,wBAAwB,CAAC,cAAc,EAAE,cAAc,GAAG,SAAS,GAAG,wBAAwB,GAAG,IAAI,CAOpH;AAED,MAAM,WAAW,+BAA+B;IAC9C,OAAO,EAAE,wBAAwB,CAAC;IAClC,0EAA0E;IAC1E,OAAO,CAAC,EAAE,uBAAuB,CAAC;CACnC;AAED;;;;;;;;GAQG;AACH,wBAAsB,4BAA4B,CAAC,OAAO,EAAE;IAC1D,cAAc,EAAE,cAAc,GAAG,SAAS,CAAC;IAC3C,OAAO,EAAE,IAAI,CAAC,gBAAgB,EAAE,8BAA8B,GAAG,KAAK,CAAC,CAAC;IACxE,QAAQ,CAAC,EAAE,0BAA0B,CAAC;CACvC,GAAG,OAAO,CAAC,+BAA+B,GAAG,IAAI,CAAC,CAgClD"}
+{"version":3,"file":"binding-context.d.ts","sourceRoot":"","sources":["../../src/rules/binding-context.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAGnE,OAAO,KAAK,EACV,wBAAwB,EACxB,uBAAuB,EACvB,+BAA+B,EAC/B,gBAAgB,EACjB,MAAM,uCAAuC,CAAC;AAY/C,kFAAkF;AAClF,MAAM,WAAW,0BAA0B;IACzC,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,mBAAmB,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC,CAAC;CACvH;AAED,wBAAgB,4BAA4B,CAC1C,cAAc,EAAE,cAAc,GAAG,SAAS,GACzC,+BAA+B,GAAG,IAAI,CAWxC;AAED,wBAAgB,wBAAwB,CAAC,cAAc,EAAE,cAAc,GAAG,SAAS,GAAG,wBAAwB,GAAG,IAAI,CAOpH;AAED,MAAM,WAAW,+BAA+B;IAC9C,OAAO,EAAE,wBAAwB,CAAC;IAClC,0EAA0E;IAC1E,OAAO,CAAC,EAAE,uBAAuB,CAAC;CACnC;AAED;;;;;;;;GAQG;AACH,wBAAsB,4BAA4B,CAAC,OAAO,EAAE;IAC1D,cAAc,EAAE,cAAc,GAAG,SAAS,CAAC;IAC3C,OAAO,EAAE,IAAI,CAAC,gBAAgB,EAAE,8BAA8B,GAAG,KAAK,CAAC,CAAC;IACxE,QAAQ,CAAC,EAAE,0BAA0B,CAAC;CACvC,GAAG,OAAO,CAAC,+BAA+B,GAAG,IAAI,CAAC,CAgClD"}

package/dist/rules/binding-context.js

@@ -66,7 +66,10 @@ async function resolveFactorySessionAddress(options) {
 }
 async function healRecoveredSessionState(options) {
 	const { binding } = options;
-	const updates = { factoryProjectId: binding.factoryProjectId };
+	const updates = {
+		factoryProjectId: binding.factoryProjectId,
+		factoryOrgId: binding.orgId
+	};
 	if (binding.role === "review") updates.untrustedCheckout = true;
 	try {
 		const item = await options.storage.get({

package/dist/rules/binding-context.js.map

@@ -1 +1 @@
-{"version":3,"file":"binding-context.js","names":[],"sources":["../../src/rules/binding-context.ts"],"sourcesContent":["import type { AgentControllerRequestContext } from '@mastra/core/agent-controller';\nimport type { RequestContext } from '@mastra/core/request-context';\n\nimport { getFactoryAuthOrgId, getFactoryAuthUserFromContext } from '../auth.js';\nimport type {\n  FactoryRunBindingAddress,\n  FactoryRunBindingRecord,\n  FactoryRunBindingSessionAddress,\n  WorkItemsStorage,\n} from '../storage/domains/work-items/base.js';\n\ninterface FactorySessionState {\n  factoryProjectId?: string;\n  projectRepositoryId?: string;\n  untrustedCheckout?: boolean;\n  baseRef?: string;\n}\n\ntype FactorySessionControllerContext = AgentControllerRequestContext<FactorySessionState>;\n\n/** Minimal source-control session lookup used to heal recovered session state. */\nexport interface FactorySessionSourceLookup {\n  getBySessionId(sessionId: string): Promise<{ orgId: string; projectRepositoryId: string; baseBranch: string } | null>;\n}\n\nexport function getFactorySessionCoordinates(\n  requestContext: RequestContext | undefined,\n): FactoryRunBindingSessionAddress | null {\n  if (!requestContext || typeof requestContext.get !== 'function') return null;\n  const context = requestContext.get('controller') as FactorySessionControllerContext | undefined;\n  const factoryProjectId = context?.getState().factoryProjectId;\n  if (!context?.threadId || !context.resourceId || !factoryProjectId) return null;\n  return {\n    factoryProjectId,\n    threadId: context.threadId,\n    resourceId: context.resourceId,\n    sessionId: context.resourceId,\n  };\n}\n\nexport function getFactorySessionAddress(requestContext: RequestContext | undefined): FactoryRunBindingAddress | null {\n  const coordinates = getFactorySessionCoordinates(requestContext);\n  if (!coordinates || !requestContext || typeof requestContext.get !== 'function') return null;\n  const user = getFactoryAuthUserFromContext(requestContext);\n  const orgId = getFactoryAuthOrgId(user);\n  if (!orgId) return null;\n  return { orgId, ...coordinates };\n}\n\nexport interface FactorySessionAddressResolution {\n  address: FactoryRunBindingAddress;\n  /** Present only when the address was recovered from the binding table. */\n  binding?: FactoryRunBindingRecord;\n}\n\n/**\n * Resolve the bound session address, falling back to the active binding row\n * when the in-memory session state is missing `factoryProjectId` — a server\n * crash drops controller sessions, and a resumed session (\"Continue\") is\n * recreated with empty state, which silently unregistered the transition\n * tool. On recovery the lost state is healed back onto the session (including\n * the `untrustedCheckout`/`baseRef` security posture the start coordinator\n * originally seeded) so later reads resolve directly.\n */\nexport async function resolveFactorySessionAddress(options: {\n  requestContext: RequestContext | undefined;\n  storage: Pick<WorkItemsStorage, 'findActiveRunBindingByThread' | 'get'>;\n  sessions?: FactorySessionSourceLookup;\n}): Promise<FactorySessionAddressResolution | null> {\n  const direct = getFactorySessionAddress(options.requestContext);\n  if (direct) return { address: direct };\n\n  const requestContext = options.requestContext;\n  if (!requestContext || typeof requestContext.get !== 'function') return null;\n  const context = requestContext.get('controller') as FactorySessionControllerContext | undefined;\n  if (!context?.threadId || !context.resourceId) return null;\n  const user = getFactoryAuthUserFromContext(requestContext);\n  const orgId = getFactoryAuthOrgId(user);\n  if (!orgId) return null;\n\n  const binding = await options.storage.findActiveRunBindingByThread({\n    orgId,\n    threadId: context.threadId,\n    resourceId: context.resourceId,\n    sessionId: context.resourceId,\n  });\n  if (!binding) return null;\n\n  await healRecoveredSessionState({ context, binding, storage: options.storage, sessions: options.sessions });\n\n  return {\n    address: {\n      orgId,\n      factoryProjectId: binding.factoryProjectId,\n      threadId: context.threadId,\n      resourceId: context.resourceId,\n      sessionId: context.resourceId,\n    },\n    binding,\n  };\n}\n\nasync function healRecoveredSessionState(options: {\n  context: FactorySessionControllerContext;\n  binding: FactoryRunBindingRecord;\n  storage: Pick<WorkItemsStorage, 'get'>;\n  sessions?: FactorySessionSourceLookup;\n}): Promise<void> {\n  const { binding } = options;\n  const updates: FactorySessionState = { factoryProjectId: binding.factoryProjectId };\n  // Security posture first, from the binding row alone (no I/O): review-bound\n  // sessions run against attacker-writable checkouts, so `untrustedCheckout`\n  // must survive even if the enrichment lookups below fail transiently.\n  if (binding.role === 'review') {\n    updates.untrustedCheckout = true;\n  }\n  // Best-effort enrichment mirroring the start coordinator's original seed:\n  // PR-sourced work items are untrusted regardless of role, and `baseRef`\n  // restores the trusted instruction source for untrusted checkouts.\n  try {\n    const item = await options.storage.get({ orgId: binding.orgId, id: binding.workItemId });\n    const foundSession = (await options.sessions?.getBySessionId(binding.sessionId)) ?? null;\n    const sourceSession = foundSession?.orgId === binding.orgId ? foundSession : null;\n    if (sourceSession) {\n      updates.projectRepositoryId = sourceSession.projectRepositoryId;\n    }\n    const untrusted = updates.untrustedCheckout === true || item?.externalSource?.type === 'pull-request';\n    if (untrusted) {\n      updates.untrustedCheckout = true;\n      const metadataBaseBranch = item?.metadata?.baseBranch;\n      const baseRef =\n        sourceSession?.baseBranch ||\n        (typeof metadataBaseBranch === 'string' && metadataBaseBranch ? metadataBaseBranch : undefined);\n      if (baseRef) updates.baseRef = baseRef;\n    }\n  } catch {\n    // Enrichment is best-effort; the address itself only needs the binding.\n  }\n  try {\n    await options.context.setState(updates);\n  } catch {\n    // State healing must never block tool registration on the recovered address.\n  }\n}\n"],"mappings":";;AAyBA,SAAgB,6BACd,gBACwC;CACxC,IAAI,CAAC,kBAAkB,OAAO,eAAe,QAAQ,YAAY,OAAO;CACxE,MAAM,UAAU,eAAe,IAAI,YAAY;CAC/C,MAAM,mBAAmB,SAAS,SAAS,CAAC,CAAC;CAC7C,IAAI,CAAC,SAAS,YAAY,CAAC,QAAQ,cAAc,CAAC,kBAAkB,OAAO;CAC3E,OAAO;EACL;EACA,UAAU,QAAQ;EAClB,YAAY,QAAQ;EACpB,WAAW,QAAQ;CACrB;AACF;AAEA,SAAgB,yBAAyB,gBAA6E;CACpH,MAAM,cAAc,6BAA6B,cAAc;CAC/D,IAAI,CAAC,eAAe,CAAC,kBAAkB,OAAO,eAAe,QAAQ,YAAY,OAAO;CAExF,MAAM,QAAQ,oBADD,8BAA8B,cACN,CAAC;CACtC,IAAI,CAAC,OAAO,OAAO;CACnB,OAAO;EAAE;EAAO,GAAG;CAAY;AACjC;;;;;;;;;;AAiBA,eAAsB,6BAA6B,SAIC;CAClD,MAAM,SAAS,yBAAyB,QAAQ,cAAc;CAC9D,IAAI,QAAQ,OAAO,EAAE,SAAS,OAAO;CAErC,MAAM,iBAAiB,QAAQ;CAC/B,IAAI,CAAC,kBAAkB,OAAO,eAAe,QAAQ,YAAY,OAAO;CACxE,MAAM,UAAU,eAAe,IAAI,YAAY;CAC/C,IAAI,CAAC,SAAS,YAAY,CAAC,QAAQ,YAAY,OAAO;CAEtD,MAAM,QAAQ,oBADD,8BAA8B,cACN,CAAC;CACtC,IAAI,CAAC,OAAO,OAAO;CAEnB,MAAM,UAAU,MAAM,QAAQ,QAAQ,6BAA6B;EACjE;EACA,UAAU,QAAQ;EAClB,YAAY,QAAQ;EACpB,WAAW,QAAQ;CACrB,CAAC;CACD,IAAI,CAAC,SAAS,OAAO;CAErB,MAAM,0BAA0B;EAAE;EAAS;EAAS,SAAS,QAAQ;EAAS,UAAU,QAAQ;CAAS,CAAC;CAE1G,OAAO;EACL,SAAS;GACP;GACA,kBAAkB,QAAQ;GAC1B,UAAU,QAAQ;GAClB,YAAY,QAAQ;GACpB,WAAW,QAAQ;EACrB;EACA;CACF;AACF;AAEA,eAAe,0BAA0B,SAKvB;CAChB,MAAM,EAAE,YAAY;CACpB,MAAM,UAA+B,EAAE,kBAAkB,QAAQ,iBAAiB;CAIlF,IAAI,QAAQ,SAAS,UACnB,QAAQ,oBAAoB;CAK9B,IAAI;EACF,MAAM,OAAO,MAAM,QAAQ,QAAQ,IAAI;GAAE,OAAO,QAAQ;GAAO,IAAI,QAAQ;EAAW,CAAC;EACvF,MAAM,eAAgB,MAAM,QAAQ,UAAU,eAAe,QAAQ,SAAS,KAAM;EACpF,MAAM,gBAAgB,cAAc,UAAU,QAAQ,QAAQ,eAAe;EAC7E,IAAI,eACF,QAAQ,sBAAsB,cAAc;EAG9C,IADkB,QAAQ,sBAAsB,QAAQ,MAAM,gBAAgB,SAAS,gBACxE;GACb,QAAQ,oBAAoB;GAC5B,MAAM,qBAAqB,MAAM,UAAU;GAC3C,MAAM,UACJ,eAAe,eACd,OAAO,uBAAuB,YAAY,qBAAqB,qBAAqB,KAAA;GACvF,IAAI,SAAS,QAAQ,UAAU;EACjC;CACF,QAAQ,CAER;CACA,IAAI;EACF,MAAM,QAAQ,QAAQ,SAAS,OAAO;CACxC,QAAQ,CAER;AACF"}
+{"version":3,"file":"binding-context.js","names":[],"sources":["../../src/rules/binding-context.ts"],"sourcesContent":["import type { AgentControllerRequestContext } from '@mastra/core/agent-controller';\nimport type { RequestContext } from '@mastra/core/request-context';\n\nimport { getFactoryAuthOrgId, getFactoryAuthUserFromContext } from '../auth.js';\nimport type {\n  FactoryRunBindingAddress,\n  FactoryRunBindingRecord,\n  FactoryRunBindingSessionAddress,\n  WorkItemsStorage,\n} from '../storage/domains/work-items/base.js';\n\ninterface FactorySessionState {\n  factoryProjectId?: string;\n  factoryOrgId?: string;\n  projectRepositoryId?: string;\n  untrustedCheckout?: boolean;\n  baseRef?: string;\n}\n\ntype FactorySessionControllerContext = AgentControllerRequestContext<FactorySessionState>;\n\n/** Minimal source-control session lookup used to heal recovered session state. */\nexport interface FactorySessionSourceLookup {\n  getBySessionId(sessionId: string): Promise<{ orgId: string; projectRepositoryId: string; baseBranch: string } | null>;\n}\n\nexport function getFactorySessionCoordinates(\n  requestContext: RequestContext | undefined,\n): FactoryRunBindingSessionAddress | null {\n  if (!requestContext || typeof requestContext.get !== 'function') return null;\n  const context = requestContext.get('controller') as FactorySessionControllerContext | undefined;\n  const factoryProjectId = context?.getState().factoryProjectId;\n  if (!context?.threadId || !context.resourceId || !factoryProjectId) return null;\n  return {\n    factoryProjectId,\n    threadId: context.threadId,\n    resourceId: context.resourceId,\n    sessionId: context.resourceId,\n  };\n}\n\nexport function getFactorySessionAddress(requestContext: RequestContext | undefined): FactoryRunBindingAddress | null {\n  const coordinates = getFactorySessionCoordinates(requestContext);\n  if (!coordinates || !requestContext || typeof requestContext.get !== 'function') return null;\n  const user = getFactoryAuthUserFromContext(requestContext);\n  const orgId = getFactoryAuthOrgId(user);\n  if (!orgId) return null;\n  return { orgId, ...coordinates };\n}\n\nexport interface FactorySessionAddressResolution {\n  address: FactoryRunBindingAddress;\n  /** Present only when the address was recovered from the binding table. */\n  binding?: FactoryRunBindingRecord;\n}\n\n/**\n * Resolve the bound session address, falling back to the active binding row\n * when the in-memory session state is missing `factoryProjectId` — a server\n * crash drops controller sessions, and a resumed session (\"Continue\") is\n * recreated with empty state, which silently unregistered the transition\n * tool. On recovery the lost state is healed back onto the session (including\n * the `untrustedCheckout`/`baseRef` security posture the start coordinator\n * originally seeded) so later reads resolve directly.\n */\nexport async function resolveFactorySessionAddress(options: {\n  requestContext: RequestContext | undefined;\n  storage: Pick<WorkItemsStorage, 'findActiveRunBindingByThread' | 'get'>;\n  sessions?: FactorySessionSourceLookup;\n}): Promise<FactorySessionAddressResolution | null> {\n  const direct = getFactorySessionAddress(options.requestContext);\n  if (direct) return { address: direct };\n\n  const requestContext = options.requestContext;\n  if (!requestContext || typeof requestContext.get !== 'function') return null;\n  const context = requestContext.get('controller') as FactorySessionControllerContext | undefined;\n  if (!context?.threadId || !context.resourceId) return null;\n  const user = getFactoryAuthUserFromContext(requestContext);\n  const orgId = getFactoryAuthOrgId(user);\n  if (!orgId) return null;\n\n  const binding = await options.storage.findActiveRunBindingByThread({\n    orgId,\n    threadId: context.threadId,\n    resourceId: context.resourceId,\n    sessionId: context.resourceId,\n  });\n  if (!binding) return null;\n\n  await healRecoveredSessionState({ context, binding, storage: options.storage, sessions: options.sessions });\n\n  return {\n    address: {\n      orgId,\n      factoryProjectId: binding.factoryProjectId,\n      threadId: context.threadId,\n      resourceId: context.resourceId,\n      sessionId: context.resourceId,\n    },\n    binding,\n  };\n}\n\nasync function healRecoveredSessionState(options: {\n  context: FactorySessionControllerContext;\n  binding: FactoryRunBindingRecord;\n  storage: Pick<WorkItemsStorage, 'get'>;\n  sessions?: FactorySessionSourceLookup;\n}): Promise<void> {\n  const { binding } = options;\n  // `factoryOrgId` mirrors the start coordinator's seed: the binding row holds\n  // the authoritative org id, so crash-recovered sessions heal it for free.\n  const updates: FactorySessionState = { factoryProjectId: binding.factoryProjectId, factoryOrgId: binding.orgId };\n  // Security posture first, from the binding row alone (no I/O): review-bound\n  // sessions run against attacker-writable checkouts, so `untrustedCheckout`\n  // must survive even if the enrichment lookups below fail transiently.\n  if (binding.role === 'review') {\n    updates.untrustedCheckout = true;\n  }\n  // Best-effort enrichment mirroring the start coordinator's original seed:\n  // PR-sourced work items are untrusted regardless of role, and `baseRef`\n  // restores the trusted instruction source for untrusted checkouts.\n  try {\n    const item = await options.storage.get({ orgId: binding.orgId, id: binding.workItemId });\n    const foundSession = (await options.sessions?.getBySessionId(binding.sessionId)) ?? null;\n    const sourceSession = foundSession?.orgId === binding.orgId ? foundSession : null;\n    if (sourceSession) {\n      updates.projectRepositoryId = sourceSession.projectRepositoryId;\n    }\n    const untrusted = updates.untrustedCheckout === true || item?.externalSource?.type === 'pull-request';\n    if (untrusted) {\n      updates.untrustedCheckout = true;\n      const metadataBaseBranch = item?.metadata?.baseBranch;\n      const baseRef =\n        sourceSession?.baseBranch ||\n        (typeof metadataBaseBranch === 'string' && metadataBaseBranch ? metadataBaseBranch : undefined);\n      if (baseRef) updates.baseRef = baseRef;\n    }\n  } catch {\n    // Enrichment is best-effort; the address itself only needs the binding.\n  }\n  try {\n    await options.context.setState(updates);\n  } catch {\n    // State healing must never block tool registration on the recovered address.\n  }\n}\n"],"mappings":";;AA0BA,SAAgB,6BACd,gBACwC;CACxC,IAAI,CAAC,kBAAkB,OAAO,eAAe,QAAQ,YAAY,OAAO;CACxE,MAAM,UAAU,eAAe,IAAI,YAAY;CAC/C,MAAM,mBAAmB,SAAS,SAAS,CAAC,CAAC;CAC7C,IAAI,CAAC,SAAS,YAAY,CAAC,QAAQ,cAAc,CAAC,kBAAkB,OAAO;CAC3E,OAAO;EACL;EACA,UAAU,QAAQ;EAClB,YAAY,QAAQ;EACpB,WAAW,QAAQ;CACrB;AACF;AAEA,SAAgB,yBAAyB,gBAA6E;CACpH,MAAM,cAAc,6BAA6B,cAAc;CAC/D,IAAI,CAAC,eAAe,CAAC,kBAAkB,OAAO,eAAe,QAAQ,YAAY,OAAO;CAExF,MAAM,QAAQ,oBADD,8BAA8B,cACN,CAAC;CACtC,IAAI,CAAC,OAAO,OAAO;CACnB,OAAO;EAAE;EAAO,GAAG;CAAY;AACjC;;;;;;;;;;AAiBA,eAAsB,6BAA6B,SAIC;CAClD,MAAM,SAAS,yBAAyB,QAAQ,cAAc;CAC9D,IAAI,QAAQ,OAAO,EAAE,SAAS,OAAO;CAErC,MAAM,iBAAiB,QAAQ;CAC/B,IAAI,CAAC,kBAAkB,OAAO,eAAe,QAAQ,YAAY,OAAO;CACxE,MAAM,UAAU,eAAe,IAAI,YAAY;CAC/C,IAAI,CAAC,SAAS,YAAY,CAAC,QAAQ,YAAY,OAAO;CAEtD,MAAM,QAAQ,oBADD,8BAA8B,cACN,CAAC;CACtC,IAAI,CAAC,OAAO,OAAO;CAEnB,MAAM,UAAU,MAAM,QAAQ,QAAQ,6BAA6B;EACjE;EACA,UAAU,QAAQ;EAClB,YAAY,QAAQ;EACpB,WAAW,QAAQ;CACrB,CAAC;CACD,IAAI,CAAC,SAAS,OAAO;CAErB,MAAM,0BAA0B;EAAE;EAAS;EAAS,SAAS,QAAQ;EAAS,UAAU,QAAQ;CAAS,CAAC;CAE1G,OAAO;EACL,SAAS;GACP;GACA,kBAAkB,QAAQ;GAC1B,UAAU,QAAQ;GAClB,YAAY,QAAQ;GACpB,WAAW,QAAQ;EACrB;EACA;CACF;AACF;AAEA,eAAe,0BAA0B,SAKvB;CAChB,MAAM,EAAE,YAAY;CAGpB,MAAM,UAA+B;EAAE,kBAAkB,QAAQ;EAAkB,cAAc,QAAQ;CAAM;CAI/G,IAAI,QAAQ,SAAS,UACnB,QAAQ,oBAAoB;CAK9B,IAAI;EACF,MAAM,OAAO,MAAM,QAAQ,QAAQ,IAAI;GAAE,OAAO,QAAQ;GAAO,IAAI,QAAQ;EAAW,CAAC;EACvF,MAAM,eAAgB,MAAM,QAAQ,UAAU,eAAe,QAAQ,SAAS,KAAM;EACpF,MAAM,gBAAgB,cAAc,UAAU,QAAQ,QAAQ,eAAe;EAC7E,IAAI,eACF,QAAQ,sBAAsB,cAAc;EAG9C,IADkB,QAAQ,sBAAsB,QAAQ,MAAM,gBAAgB,SAAS,gBACxE;GACb,QAAQ,oBAAoB;GAC5B,MAAM,qBAAqB,MAAM,UAAU;GAC3C,MAAM,UACJ,eAAe,eACd,OAAO,uBAAuB,YAAY,qBAAqB,qBAAqB,KAAA;GACvF,IAAI,SAAS,QAAQ,UAAU;EACjC;CACF,QAAQ,CAER;CACA,IAAI;EACF,MAAM,QAAQ,QAAQ,SAAS,OAAO;CACxC,QAAQ,CAER;AACF"}

package/dist/rules/defaults.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"defaults.d.ts","sourceRoot":"","sources":["../../src/rules/defaults.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EASV,YAAY,EACZ,qBAAqB,EAMtB,MAAM,YAAY,CAAC;AAGpB,eAAO,MAAM,4BAA4B,uBAAuB,CAAC;AAkdjE,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,qBAAqB,EAC3B,SAAS,GAAE,qBAA0B,GACpC,IAAI,CAAC,YAAY,EAAE,SAAS,CAAC,CAQ/B;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,qBAAqB,CAAA;CAAE,GAAG,YAAY,CAW/G;AAED,wBAAgB,mBAAmB,IAAI,YAAY,CAElD"}
+{"version":3,"file":"defaults.d.ts","sourceRoot":"","sources":["../../src/rules/defaults.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EASV,YAAY,EACZ,qBAAqB,EAMtB,MAAM,YAAY,CAAC;AAGpB,eAAO,MAAM,4BAA4B,uBAAuB,CAAC;AA0mBjE,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,qBAAqB,EAC3B,SAAS,GAAE,qBAA0B,GACpC,IAAI,CAAC,YAAY,EAAE,SAAS,CAAC,CAQ/B;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,qBAAqB,CAAA;CAAE,GAAG,YAAY,CAW/G;AAED,wBAAgB,mBAAmB,IAAI,YAAY,CAElD"}

package/dist/rules/defaults.js

@@ -51,6 +51,37 @@ function planWorkItem(context) {
 		arguments: context.item.url ? `Work item (${context.item.url})` : context.item.title
 	};
 }
+const GITHUB_LOGIN = /^[a-zA-Z0-9](?:[a-zA-Z0-9]|-(?=[a-zA-Z0-9])){0,38}$/;
+/**
+* The reporter earns a `Co-Authored-By` trailer on the work their report caused.
+* Only a GitHub issue qualifies: Linear stamps a display name and a manual card
+* stamps nothing, and neither resolves to the GitHub identity a trailer needs.
+* Factory's own reports are skipped — crediting ourselves is noise.
+*/
+function reporterCoAuthor(context) {
+	if (context.source !== "issue") return void 0;
+	const author = context.item.metadata?.author;
+	if (typeof author !== "string" || !author) return void 0;
+	if (author.endsWith("[bot]") || !GITHUB_LOGIN.test(author)) return void 0;
+	return author;
+}
+/**
+* Building carries a prompt rather than a skill. The approved plan is already
+* the specification, so there is nothing for a skill document to add, and the
+* handoff a skill would define is unnecessary here: Building ends by opening a
+* pull request, which arrives as its own event and raises the Review card.
+*/
+function buildWorkItem(context) {
+	const subject = context.item.url ? `the approved plan for ${context.item.url}` : "the approved plan";
+	const reporter = reporterCoAuthor(context);
+	const credit = reporter ? ` The work was reported by @${reporter}: credit them on every commit with a \`Co-Authored-By: ${reporter} <ID+${reporter}@users.noreply.github.com>\` trailer, resolving ID with \`gh api users/${reporter} --jq .id\`.` : "";
+	return {
+		type: "invokeSkill",
+		idempotencyKey: `${context.ingress.id}:build`,
+		role: "work",
+		prompt: `Implement ${subject}. Open a pull request when the work is ready for review.${credit}`
+	};
+}
 function completeIssue(context) {
 	return {
 		type: "invokeSkill",
@@ -128,6 +159,7 @@ function issueClosed(context) {
 }
 function pullRequestOpened(context) {
 	if (!context.pullRequest) return;
+	const factoryAuthored = context.actor.type === "github" && context.actor.factoryAuthored;
 	return {
 		type: "upsertLinkedWorkItem",
 		idempotencyKey: `${context.ingress.id}:pull-request-intake`,
@@ -136,11 +168,11 @@ function pullRequestOpened(context) {
 		sourceKey: `github-pr:${context.pullRequest.number}`,
 		title: context.pullRequest.title,
 		url: context.pullRequest.url,
-		stage: trustedGithubActor(context) && createdAfterFactory(context.pullRequest.createdAt, context.factory.createdAt) ? "review" : "intake",
+		stage: (trustedGithubActor(context) || factoryAuthored) && createdAfterFactory(context.pullRequest.createdAt, context.factory.createdAt) ? "review" : "intake",
 		metadata: {
 			githubRepositoryId: context.repository.id,
 			githubPullRequestNumber: context.pullRequest.number,
-			factoryAuthored: context.actor.type === "github" && context.actor.factoryAuthored,
+			factoryAuthored,
 			state: context.pullRequest.state,
 			draft: context.pullRequest.draft,
 			merged: context.pullRequest.merged,
@@ -169,6 +201,48 @@ function pullRequestMerged(context) {
 		message: `Pull request #${context.pullRequest.number} merged. Assess whether the linked Work item is complete. Do not mark it Done solely because this PR merged; use factory_transition_work_item only after verifying the work.`
 	};
 }
+function addressReviewFeedback(context) {
+	if (!context.item || !context.pullRequest || !context.review) return;
+	if (context.board !== "work") return;
+	if (context.pullRequest.state !== "open" || context.pullRequest.merged) return;
+	if (context.review.state.toLowerCase() !== "changes_requested") return;
+	return {
+		type: "sendMessage",
+		idempotencyKey: `${context.ingress.id}:address-review-feedback`,
+		role: "work",
+		priority: "high",
+		message: `Changes were requested on pull request #${context.pullRequest.number} (${context.review.url}). Read the review comments on this PR, address the ones you agree with, and push the fixes to the PR branch. Reply on GitHub to anything you are deliberately not changing, explaining why.`
+	};
+}
+/**
+* Detects the `factory-review` handoff verdict in a comment body.
+*
+* GitHub forbids an app from reviewing a pull request it authored, so on
+* Factory-authored PRs the review skill falls back to posting its verdict as a
+* plain comment. That comment is the only signal the authoring agent gets, so
+* it has to be readable back out. The skill's handoff contract puts the verdict
+* on the first line (`Verdict: request changes`), so only that line is
+* inspected — a verdict quoted later in the findings must not count.
+*/
+function requestsChangesVerdict(body) {
+	const firstLine = body?.split("\n").map((line) => line.trim()).find((line) => line.length > 0);
+	if (!firstLine) return false;
+	const normalized = firstLine.replaceAll(/[*_`#>\s]+/g, " ").trim().toLowerCase();
+	return /^verdict: ?(request changes|changes requested)$/.test(normalized);
+}
+function addressPullRequestComment(context) {
+	if (!context.item || !context.pullRequest || !context.issueComment) return;
+	if (context.board !== "work") return;
+	if (context.pullRequest.state !== "open" || context.pullRequest.merged) return;
+	if (context.actor.type === "github" && context.actor.factoryAuthored && !requestsChangesVerdict(context.issueComment.body)) return;
+	return {
+		type: "sendMessage",
+		idempotencyKey: `${context.ingress.id}:address-pull-request-comment`,
+		role: "work",
+		priority: "high",
+		message: `${context.issueComment.author ?? "Someone"} commented on pull request #${context.pullRequest.number} (${context.issueComment.url ?? context.pullRequest.url}). Read the comment, address it if you agree, and push the fixes to the PR branch. Reply on GitHub to anything you are deliberately not changing, explaining why.`
+	};
+}
 function pullRequestClosed(context) {
 	if (!context.item || !context.pullRequest || context.pullRequest.merged) return;
 	if (context.board !== "review") return;
@@ -196,12 +270,14 @@ function reReviewRequestedPullRequest(context) {
 function reReviewUpdatedPullRequest(context) {
 	if (!context.item || context.board !== "review") return;
 	if (!context.pullRequest || context.pullRequest.state !== "open" || context.pullRequest.merged) return;
-	if (context.item.stages.some((stage) => stage === "intake" || stage === "review")) return;
+	if (context.item.stages.some((stage) => stage === "intake")) return;
+	const alreadyReviewing = context.item.stages.some((stage) => stage === "review");
 	return {
 		type: "transition",
 		idempotencyKey: `${context.ingress.id}:re-review-updated`,
 		board: "review",
-		stage: "review"
+		stage: "review",
+		...alreadyReviewing ? { reenter: true } : {}
 	};
 }
 function linearIssueObserved(context) {
@@ -259,6 +335,11 @@ const BUILT_IN_DEFAULTS = {
 			linearIssue: { onEnter: planWorkItem },
 			manual: { onEnter: planWorkItem }
 		},
+		execute: {
+			issue: { onEnter: buildWorkItem },
+			linearIssue: { onEnter: buildWorkItem },
+			manual: { onEnter: buildWorkItem }
+		},
 		done: { issue: { onEnter: completeIssue } }
 	},
 	review: { review: { pullRequest: { onEnter: reviewPullRequest } } },
@@ -272,7 +353,9 @@ const BUILT_IN_DEFAULTS = {
 		issueCommentDeleted: { onEvent: retriageGithubIssue },
 		pullRequestOpened: { onEvent: pullRequestOpened },
 		pullRequestUpdated: { onEvent: reReviewUpdatedPullRequest },
+		pullRequestCommentCreated: { onEvent: addressPullRequestComment },
 		pullRequestReviewRequested: { onEvent: reReviewRequestedPullRequest },
+		pullRequestReviewSubmitted: { onEvent: addressReviewFeedback },
 		pullRequestMerged: { onEvent: pullRequestMerged },
 		pullRequestClosed: { onEvent: pullRequestClosed }
 	},