@noodleseed/one 0.17.0 → 0.18.0

package/node_modules/@noodle-borg/service/dist/store/github-runs-json-file.js

@@ -0,0 +1,116 @@
+import { randomUUID } from 'node:crypto';
+import { mkdir, readdir, readFile, rename, writeFile } from 'node:fs/promises';
+import { join } from 'node:path';
+import { DEFAULT_DEPLOY_RUN_LIST_LIMIT, findCreateDuplicate, matchesCancelFilter, shapeDeployRunList, supersedesQueued, validateCancelFilter, validateCreateDeployRunInput, } from './github-runs.js';
+import { validateSlug } from './validate.js';
+/**
+ * JSON-file {@link GithubDeployRunStore}: one file per run at
+ * `<dataDir>/github-runs/<runId>.json`, written atomically (temp file + `rename`, matching
+ * `JsonFileGithubConnectionStore`). `runId` is service-minted (`run-` + hex), so it is always a safe
+ * filename component. Every read-check-write mutation runs through the same mutation queue the
+ * connections store uses — the json-file analogue of the Postgres transaction, so concurrent webhook
+ * deliveries cannot both pass the idempotency checks.
+ */
+export class JsonFileGithubDeployRunStore {
+    #dir;
+    #now;
+    #mutationQueue = Promise.resolve();
+    constructor(dataDir, options = {}) {
+        this.#dir = join(dataDir, 'github-runs');
+        this.#now = options.now ?? (() => new Date());
+    }
+    #withMutation(operation) {
+        const run = this.#mutationQueue.then(operation, operation);
+        this.#mutationQueue = run.then(() => undefined, () => undefined);
+        return run;
+    }
+    createDeployRun(input) {
+        return this.#withMutation(async () => {
+            const safe = validateCreateDeployRunInput(input);
+            const all = await this.#loadAll();
+            const duplicate = findCreateDuplicate(all, safe);
+            if (duplicate !== undefined)
+                return { ok: false, ...duplicate };
+            const nowIso = this.#now().toISOString();
+            const superseded = [];
+            for (const record of all) {
+                if (!supersedesQueued(record, safe))
+                    continue;
+                await this.#writeRecord({ ...record, status: 'superseded', finishedAt: nowIso });
+                superseded.push(record.runId);
+            }
+            const record = { ...safe, status: 'queued', createdAt: nowIso };
+            await this.#writeRecord(record);
+            return { ok: true, record, superseded };
+        });
+    }
+    async getDeployRun(org, runId) {
+        const safeOrg = validateSlug('org', org);
+        const record = await this.#readRecord(runId);
+        return record?.orgSlug === safeOrg ? record : undefined;
+    }
+    async listDeployRuns(org, app, opts = {}) {
+        const safeOrg = validateSlug('org', org);
+        const safeApp = validateSlug('app', app);
+        const matching = (await this.#loadAll()).filter((record) => record.orgSlug === safeOrg && record.appSlug === safeApp);
+        return shapeDeployRunList(matching, opts.limit ?? DEFAULT_DEPLOY_RUN_LIST_LIMIT);
+    }
+    cancelQueuedDeployRuns(filter) {
+        return this.#withMutation(async () => {
+            const safe = validateCancelFilter(filter);
+            const nowIso = this.#now().toISOString();
+            const canceled = [];
+            for (const record of await this.#loadAll()) {
+                if (!matchesCancelFilter(record, safe))
+                    continue;
+                await this.#writeRecord({ ...record, status: 'canceled', finishedAt: nowIso });
+                canceled.push(record.runId);
+            }
+            return canceled;
+        });
+    }
+    async #readRecord(runId) {
+        // runId is service-minted, but never trust it as a path segment anyway.
+        if (!/^[A-Za-z0-9_-]+$/.test(runId))
+            return undefined;
+        try {
+            const text = await readFile(join(this.#dir, `${runId}.json`), 'utf8');
+            return JSON.parse(text);
+        }
+        catch {
+            return undefined;
+        }
+    }
+    async #loadAll() {
+        let names;
+        try {
+            names = await readdir(this.#dir);
+        }
+        catch (error) {
+            if (error.code === 'ENOENT')
+                return [];
+            throw error;
+        }
+        const records = [];
+        for (const name of names) {
+            if (!name.endsWith('.json'))
+                continue; // skip in-flight *.tmp files
+            try {
+                const text = await readFile(join(this.#dir, name), 'utf8');
+                records.push(JSON.parse(text));
+            }
+            catch {
+                // Fail-soft: a corrupt/unreadable record must not crash the caller — skip it.
+            }
+        }
+        return records;
+    }
+    async #writeRecord(record) {
+        await mkdir(this.#dir, { recursive: true });
+        const target = join(this.#dir, `${record.runId}.json`);
+        const tmp = `${target}.${randomUUID()}.tmp`;
+        await writeFile(tmp, `${JSON.stringify(record, null, 2)}\n`, 'utf8');
+        await rename(tmp, target);
+    }
+}
+//# sourceMappingURL=github-runs-json-file.js.map

package/node_modules/@noodle-borg/service/dist/store/github-runs-json-file.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"github-runs-json-file.js","sourceRoot":"","sources":["../../src/store/github-runs-json-file.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC/E,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AASjC,OAAO,EACL,6BAA6B,EAC7B,mBAAmB,EACnB,mBAAmB,EACnB,kBAAkB,EAClB,gBAAgB,EAChB,oBAAoB,EACpB,4BAA4B,GAC7B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAE7C;;;;;;;GAOG;AACH,MAAM,OAAO,4BAA4B;IAC9B,IAAI,CAAS;IACb,IAAI,CAAa;IAC1B,cAAc,GAAqB,OAAO,CAAC,OAAO,EAAE,CAAC;IAErD,YAAY,OAAe,EAAE,UAAgC,EAAE;QAC7D,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;QACzC,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;IAED,aAAa,CAAI,SAA2B;QAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QAC3D,IAAI,CAAC,cAAc,GAAG,GAAG,CAAC,IAAI,CAC5B,GAAG,EAAE,CAAC,SAAS,EACf,GAAG,EAAE,CAAC,SAAS,CAChB,CAAC;QACF,OAAO,GAAG,CAAC;IACb,CAAC;IAED,eAAe,CAAC,KAA2B;QACzC,OAAO,IAAI,CAAC,aAAa,CAAC,KAAK,IAAI,EAAE;YACnC,MAAM,IAAI,GAAG,4BAA4B,CAAC,KAAK,CAAC,CAAC;YACjD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClC,MAAM,SAAS,GAAG,mBAAmB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YACjD,IAAI,SAAS,KAAK,SAAS;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAc,EAAE,GAAG,SAAS,EAAE,CAAC;YACzE,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YACzC,MAAM,UAAU,GAAa,EAAE,CAAC;YAChC,KAAK,MAAM,MAAM,IAAI,GAAG,EAAE,CAAC;gBACzB,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,IAAI,CAAC;oBAAE,SAAS;gBAC9C,MAAM,IAAI,CAAC,YAAY,CAAC,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC;gBACjF,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAChC,CAAC;YACD,MAAM,MAAM,GAAoB,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;YACjF,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;YAChC,OAAO,EAAE,EAAE,EAAE,IAAa,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;QACnD,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,GAAW,EAAE,KAAa;QAC3C,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACzC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QAC7C,OAAO,MAAM,EAAE,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IAC1D,CAAC;IAED,KAAK,CAAC,cAAc,CAClB,GAAW,EACX,GAAW,EACX,OAAoC,EAAE;QAEtC,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACzC,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACzC,MAAM,QAAQ,GAAG,CAAC,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,MAAM,CAC7C,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,KAAK,OAAO,IAAI,MAAM,CAAC,OAAO,KAAK,OAAO,CACrE,CAAC;QACF,OAAO,kBAAkB,CAAC,QAAQ,EAAE,IAAI,CAAC,KAAK,IAAI,6BAA6B,CAAC,CAAC;IACnF,CAAC;IAED,sBAAsB,CAAC,MAAoC;QACzD,OAAO,IAAI,CAAC,aAAa,CAAC,KAAK,IAAI,EAAE;YACnC,MAAM,IAAI,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;YAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YACzC,MAAM,QAAQ,GAAa,EAAE,CAAC;YAC9B,KAAK,MAAM,MAAM,IAAI,MAAM,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC;gBAC3C,IAAI,CAAC,mBAAmB,CAAC,MAAM,EAAE,IAAI,CAAC;oBAAE,SAAS;gBACjD,MAAM,IAAI,CAAC,YAAY,CAAC,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC;gBAC/E,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC9B,CAAC;YACD,OAAO,QAAQ,CAAC;QAClB,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,KAAa;QAC7B,wEAAwE;QACxE,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QACtD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,KAAK,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC;YACtE,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAoB,CAAC;QAC7C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,IAAI,KAAe,CAAC;QACpB,IAAI,CAAC;YACH,KAAK,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,EAAE,CAAC;YAClE,MAAM,KAAK,CAAC;QACd,CAAC;QACD,MAAM,OAAO,GAAsB,EAAE,CAAC;QACtC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;gBAAE,SAAS,CAAC,6BAA6B;YACpE,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;gBAC3D,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAoB,CAAC,CAAC;YACpD,CAAC;YAAC,MAAM,CAAC;gBACP,8EAA8E;YAChF,CAAC;QACH,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,MAAuB;QACxC,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,MAAM,CAAC,KAAK,OAAO,CAAC,CAAC;QACvD,MAAM,GAAG,GAAG,GAAG,MAAM,IAAI,UAAU,EAAE,MAAM,CAAC;QAC5C,MAAM,SAAS,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACrE,MAAM,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAC5B,CAAC;CACF"}

package/node_modules/@noodle-borg/service/dist/store/github-runs.d.ts

@@ -0,0 +1,51 @@
+import type { CancelQueuedDeployRunsFilter, CreateDeployRunDuplicateReason, CreateDeployRunInput, CreateDeployRunResult, DeployRunRecord, DeployRunStatus, GithubDeployRunStore, ListDeployRunsResult } from '../store.js';
+/**
+ * In-memory {@link GithubDeployRunStore} plus the shared pure helpers every backend reuses
+ * (validation, duplicate detection, the pinned state machine, list shaping). Mirrors
+ * `github-connections.ts`: the Map backend is the non-persistent default and the test double; the
+ * exported helpers keep the json-file backend byte-equivalent in semantics.
+ */
+/** Newest-first list cap when the caller doesn't pass one — mirrors the runs-feed page size. */
+export declare const DEFAULT_DEPLOY_RUN_LIST_LIMIT = 50;
+/**
+ * The pinned state machine as data (see `DeployRunStatus` in `../store.ts`). The
+ * `failed|canceled|superseded → queued` retry edge is deliberately ABSENT — it is reserved for
+ * `runs retry` (GHD-4) and must not be walkable until that slice adds it.
+ */
+export declare const DEPLOY_RUN_TRANSITIONS: Readonly<Record<DeployRunStatus, readonly DeployRunStatus[]>>;
+export declare function canTransitionDeployRun(from: DeployRunStatus, to: DeployRunStatus): boolean;
+/** Shared input validation, reused by the json-file backend. */
+export declare function validateCreateDeployRunInput(input: CreateDeployRunInput): CreateDeployRunInput;
+/**
+ * Shared duplicate detection over an already-loaded record set (json-file + in-memory; Postgres does
+ * the same checks inside its transaction). The idempotency contract lives on the interface doc:
+ * delivery ids are globally unique, and only a CANCELED run frees its `{repo, sha, env}` slot.
+ */
+export declare function findCreateDuplicate(records: readonly DeployRunRecord[], input: CreateDeployRunInput): {
+    reason: CreateDeployRunDuplicateReason;
+    existing: DeployRunRecord;
+} | undefined;
+/**
+ * Every backend refuses an unfiltered cancel: no webhook outcome ever means "cancel everything
+ * queued for the app" — a missing filter is a caller bug, not a mass cancelation.
+ */
+export declare function validateCancelFilter(filter: CancelQueuedDeployRunsFilter): CancelQueuedDeployRunsFilter;
+/** A queued run for the same `(orgSlug, appSlug, envName)` that a new creation supersedes. */
+export declare function supersedesQueued(record: DeployRunRecord, input: CreateDeployRunInput): boolean;
+/** A queued run the cancel filter targets — org+app always, env and/or ref narrow it further. */
+export declare function matchesCancelFilter(record: DeployRunRecord, filter: CancelQueuedDeployRunsFilter): boolean;
+/** Newest-first (createdAt desc, runId desc tiebreak for same-millisecond rows), cap + flag. */
+export declare function shapeDeployRunList(records: readonly DeployRunRecord[], limit: number): ListDeployRunsResult;
+export declare class InMemoryGithubDeployRunStore implements GithubDeployRunStore {
+    #private;
+    constructor(options?: {
+        now?: () => Date;
+    });
+    createDeployRun(input: CreateDeployRunInput): Promise<CreateDeployRunResult>;
+    getDeployRun(org: string, runId: string): Promise<DeployRunRecord | undefined>;
+    listDeployRuns(org: string, app: string, opts?: {
+        readonly limit?: number;
+    }): Promise<ListDeployRunsResult>;
+    cancelQueuedDeployRuns(filter: CancelQueuedDeployRunsFilter): Promise<readonly string[]>;
+}
+//# sourceMappingURL=github-runs.d.ts.map

package/node_modules/@noodle-borg/service/dist/store/github-runs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"github-runs.d.ts","sourceRoot":"","sources":["../../src/store/github-runs.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,4BAA4B,EAC5B,8BAA8B,EAC9B,oBAAoB,EACpB,qBAAqB,EACrB,eAAe,EACf,eAAe,EACf,oBAAoB,EACpB,oBAAoB,EACrB,MAAM,aAAa,CAAC;AAGrB;;;;;GAKG;AAEH,gGAAgG;AAChG,eAAO,MAAM,6BAA6B,KAAK,CAAC;AAEhD;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,EAAE,QAAQ,CAAC,MAAM,CAAC,eAAe,EAAE,SAAS,eAAe,EAAE,CAAC,CAS9F,CAAC;AAEJ,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,eAAe,EAAE,EAAE,EAAE,eAAe,GAAG,OAAO,CAE1F;AAED,gEAAgE;AAChE,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,oBAAoB,GAAG,oBAAoB,CAoB9F;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,SAAS,eAAe,EAAE,EACnC,KAAK,EAAE,oBAAoB,GAC1B;IAAE,MAAM,EAAE,8BAA8B,CAAC;IAAC,QAAQ,EAAE,eAAe,CAAA;CAAE,GAAG,SAAS,CAYnF;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,4BAA4B,GACnC,4BAA4B,CAU9B;AAED,8FAA8F;AAC9F,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,eAAe,EAAE,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAO9F;AAED,iGAAiG;AACjG,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,eAAe,EACvB,MAAM,EAAE,4BAA4B,GACnC,OAAO,CAMT;AAED,gGAAgG;AAChG,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,SAAS,eAAe,EAAE,EACnC,KAAK,EAAE,MAAM,GACZ,oBAAoB,CAKtB;AAED,qBAAa,4BAA6B,YAAW,oBAAoB;;gBAI3D,OAAO,GAAE;QAAE,GAAG,CAAC,EAAE,MAAM,IAAI,CAAA;KAAO;IAMxC,eAAe,CAAC,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAiB5E,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC;IAM9E,cAAc,CAClB,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,MAAM,EACX,IAAI,GAAE;QAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAO,GACrC,OAAO,CAAC,oBAAoB,CAAC;IAS1B,sBAAsB,CAAC,MAAM,EAAE,4BAA4B,GAAG,OAAO,CAAC,SAAS,MAAM,EAAE,CAAC;CAW/F"}

package/node_modules/@noodle-borg/service/dist/store/github-runs.js

@@ -0,0 +1,158 @@
+import { validatePositiveInteger, validateSlug } from './validate.js';
+/**
+ * In-memory {@link GithubDeployRunStore} plus the shared pure helpers every backend reuses
+ * (validation, duplicate detection, the pinned state machine, list shaping). Mirrors
+ * `github-connections.ts`: the Map backend is the non-persistent default and the test double; the
+ * exported helpers keep the json-file backend byte-equivalent in semantics.
+ */
+/** Newest-first list cap when the caller doesn't pass one — mirrors the runs-feed page size. */
+export const DEFAULT_DEPLOY_RUN_LIST_LIMIT = 50;
+/**
+ * The pinned state machine as data (see `DeployRunStatus` in `../store.ts`). The
+ * `failed|canceled|superseded → queued` retry edge is deliberately ABSENT — it is reserved for
+ * `runs retry` (GHD-4) and must not be walkable until that slice adds it.
+ */
+export const DEPLOY_RUN_TRANSITIONS = {
+    queued: ['building', 'canceled', 'superseded'],
+    building: ['deploying', 'failed', 'canceled'],
+    deploying: ['deployed', 'failed'],
+    deployed: [],
+    failed: [],
+    canceled: [],
+    superseded: [],
+};
+export function canTransitionDeployRun(from, to) {
+    return DEPLOY_RUN_TRANSITIONS[from].includes(to);
+}
+/** Shared input validation, reused by the json-file backend. */
+export function validateCreateDeployRunInput(input) {
+    if (input.runId.length === 0)
+        throw new Error('runId must not be empty');
+    if (input.deliveryId.length === 0)
+        throw new Error('deliveryId must not be empty');
+    if (input.commitSha.length === 0)
+        throw new Error('commitSha must not be empty');
+    return {
+        runId: input.runId,
+        orgSlug: validateSlug('org', input.orgSlug),
+        appSlug: validateSlug('app', input.appSlug),
+        envName: input.envName,
+        sourceEvent: input.sourceEvent,
+        deliveryId: input.deliveryId,
+        githubRepositoryId: validatePositiveInteger('githubRepositoryId', input.githubRepositoryId),
+        commitSha: input.commitSha,
+        ref: input.ref,
+        ...(input.prNumber !== undefined
+            ? { prNumber: validatePositiveInteger('prNumber', input.prNumber) }
+            : {}),
+        actorLogin: input.actorLogin,
+        ...(input.blockedReason !== undefined ? { blockedReason: input.blockedReason } : {}),
+    };
+}
+/**
+ * Shared duplicate detection over an already-loaded record set (json-file + in-memory; Postgres does
+ * the same checks inside its transaction). The idempotency contract lives on the interface doc:
+ * delivery ids are globally unique, and only a CANCELED run frees its `{repo, sha, env}` slot.
+ */
+export function findCreateDuplicate(records, input) {
+    const sameDelivery = records.find((record) => record.deliveryId === input.deliveryId);
+    if (sameDelivery !== undefined)
+        return { reason: 'duplicate_delivery', existing: sameDelivery };
+    const sameTarget = records.find((record) => record.status !== 'canceled' &&
+        record.githubRepositoryId === input.githubRepositoryId &&
+        record.commitSha === input.commitSha &&
+        record.envName === input.envName);
+    if (sameTarget !== undefined)
+        return { reason: 'duplicate_target', existing: sameTarget };
+    return undefined;
+}
+/**
+ * Every backend refuses an unfiltered cancel: no webhook outcome ever means "cancel everything
+ * queued for the app" — a missing filter is a caller bug, not a mass cancelation.
+ */
+export function validateCancelFilter(filter) {
+    if (filter.envName === undefined && filter.ref === undefined) {
+        throw new Error('cancelQueuedDeployRuns requires envName or ref');
+    }
+    return {
+        orgSlug: validateSlug('org', filter.orgSlug),
+        appSlug: validateSlug('app', filter.appSlug),
+        ...(filter.envName !== undefined ? { envName: filter.envName } : {}),
+        ...(filter.ref !== undefined ? { ref: filter.ref } : {}),
+    };
+}
+/** A queued run for the same `(orgSlug, appSlug, envName)` that a new creation supersedes. */
+export function supersedesQueued(record, input) {
+    return (record.status === 'queued' &&
+        record.orgSlug === input.orgSlug &&
+        record.appSlug === input.appSlug &&
+        record.envName === input.envName);
+}
+/** A queued run the cancel filter targets — org+app always, env and/or ref narrow it further. */
+export function matchesCancelFilter(record, filter) {
+    if (record.status !== 'queued')
+        return false;
+    if (record.orgSlug !== filter.orgSlug || record.appSlug !== filter.appSlug)
+        return false;
+    if (filter.envName !== undefined && record.envName !== filter.envName)
+        return false;
+    if (filter.ref !== undefined && record.ref !== filter.ref)
+        return false;
+    return true;
+}
+/** Newest-first (createdAt desc, runId desc tiebreak for same-millisecond rows), cap + flag. */
+export function shapeDeployRunList(records, limit) {
+    const sorted = [...records].sort((a, b) => b.createdAt.localeCompare(a.createdAt) || b.runId.localeCompare(a.runId));
+    return { runs: sorted.slice(0, limit), truncated: sorted.length > limit };
+}
+export class InMemoryGithubDeployRunStore {
+    #records = new Map();
+    #now;
+    constructor(options = {}) {
+        this.#now = options.now ?? (() => new Date());
+    }
+    // All four methods are `async` so validation failures reject (matching the other backends)
+    // instead of throwing synchronously out of a Promise-returning signature.
+    async createDeployRun(input) {
+        const safe = validateCreateDeployRunInput(input);
+        const all = [...this.#records.values()];
+        const duplicate = findCreateDuplicate(all, safe);
+        if (duplicate !== undefined)
+            return { ok: false, ...duplicate };
+        const nowIso = this.#now().toISOString();
+        const superseded = [];
+        for (const record of all) {
+            if (!supersedesQueued(record, safe))
+                continue;
+            this.#records.set(record.runId, { ...record, status: 'superseded', finishedAt: nowIso });
+            superseded.push(record.runId);
+        }
+        const record = { ...safe, status: 'queued', createdAt: nowIso };
+        this.#records.set(record.runId, record);
+        return { ok: true, record, superseded };
+    }
+    async getDeployRun(org, runId) {
+        const safeOrg = validateSlug('org', org);
+        const record = this.#records.get(runId);
+        return record?.orgSlug === safeOrg ? record : undefined;
+    }
+    async listDeployRuns(org, app, opts = {}) {
+        const safeOrg = validateSlug('org', org);
+        const safeApp = validateSlug('app', app);
+        const matching = [...this.#records.values()].filter((record) => record.orgSlug === safeOrg && record.appSlug === safeApp);
+        return shapeDeployRunList(matching, opts.limit ?? DEFAULT_DEPLOY_RUN_LIST_LIMIT);
+    }
+    async cancelQueuedDeployRuns(filter) {
+        const safe = validateCancelFilter(filter);
+        const nowIso = this.#now().toISOString();
+        const canceled = [];
+        for (const record of this.#records.values()) {
+            if (!matchesCancelFilter(record, safe))
+                continue;
+            this.#records.set(record.runId, { ...record, status: 'canceled', finishedAt: nowIso });
+            canceled.push(record.runId);
+        }
+        return canceled;
+    }
+}
+//# sourceMappingURL=github-runs.js.map

package/node_modules/@noodle-borg/service/dist/store/github-runs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"github-runs.js","sourceRoot":"","sources":["../../src/store/github-runs.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,uBAAuB,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAEtE;;;;;GAKG;AAEH,gGAAgG;AAChG,MAAM,CAAC,MAAM,6BAA6B,GAAG,EAAE,CAAC;AAEhD;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GACjC;IACE,MAAM,EAAE,CAAC,UAAU,EAAE,UAAU,EAAE,YAAY,CAAC;IAC9C,QAAQ,EAAE,CAAC,WAAW,EAAE,QAAQ,EAAE,UAAU,CAAC;IAC7C,SAAS,EAAE,CAAC,UAAU,EAAE,QAAQ,CAAC;IACjC,QAAQ,EAAE,EAAE;IACZ,MAAM,EAAE,EAAE;IACV,QAAQ,EAAE,EAAE;IACZ,UAAU,EAAE,EAAE;CACf,CAAC;AAEJ,MAAM,UAAU,sBAAsB,CAAC,IAAqB,EAAE,EAAmB;IAC/E,OAAO,sBAAsB,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;AACnD,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,4BAA4B,CAAC,KAA2B;IACtE,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IACzE,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IACnF,IAAI,KAAK,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACjF,OAAO;QACL,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,OAAO,EAAE,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC;QAC3C,OAAO,EAAE,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC;QAC3C,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,kBAAkB,EAAE,uBAAuB,CAAC,oBAAoB,EAAE,KAAK,CAAC,kBAAkB,CAAC;QAC3F,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS;YAC9B,CAAC,CAAC,EAAE,QAAQ,EAAE,uBAAuB,CAAC,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE;YACnE,CAAC,CAAC,EAAE,CAAC;QACP,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,GAAG,CAAC,KAAK,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACrF,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CACjC,OAAmC,EACnC,KAA2B;IAE3B,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU,CAAC,CAAC;IACtF,IAAI,YAAY,KAAK,SAAS;QAAE,OAAO,EAAE,MAAM,EAAE,oBAAoB,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;IAChG,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAC7B,CAAC,MAAM,EAAE,EAAE,CACT,MAAM,CAAC,MAAM,KAAK,UAAU;QAC5B,MAAM,CAAC,kBAAkB,KAAK,KAAK,CAAC,kBAAkB;QACtD,MAAM,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS;QACpC,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,CACnC,CAAC;IACF,IAAI,UAAU,KAAK,SAAS;QAAE,OAAO,EAAE,MAAM,EAAE,kBAAkB,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;IAC1F,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAClC,MAAoC;IAEpC,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;QAC7D,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IACD,OAAO;QACL,OAAO,EAAE,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC;QAC5C,OAAO,EAAE,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC;QAC5C,GAAG,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,GAAG,CAAC,MAAM,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACzD,CAAC;AACJ,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,gBAAgB,CAAC,MAAuB,EAAE,KAA2B;IACnF,OAAO,CACL,MAAM,CAAC,MAAM,KAAK,QAAQ;QAC1B,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO;QAChC,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO;QAChC,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,CACjC,CAAC;AACJ,CAAC;AAED,iGAAiG;AACjG,MAAM,UAAU,mBAAmB,CACjC,MAAuB,EACvB,MAAoC;IAEpC,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC7C,IAAI,MAAM,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IACzF,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,IAAI,MAAM,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IACpF,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS,IAAI,MAAM,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG;QAAE,OAAO,KAAK,CAAC;IACxE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,gGAAgG;AAChG,MAAM,UAAU,kBAAkB,CAChC,OAAmC,EACnC,KAAa;IAEb,MAAM,MAAM,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,CAC9B,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,CACnF,CAAC;IACF,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,GAAG,KAAK,EAAE,CAAC;AAC5E,CAAC;AAED,MAAM,OAAO,4BAA4B;IAC9B,QAAQ,GAAG,IAAI,GAAG,EAA2B,CAAC;IAC9C,IAAI,CAAa;IAE1B,YAAY,UAAgC,EAAE;QAC5C,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;IAED,2FAA2F;IAC3F,0EAA0E;IAC1E,KAAK,CAAC,eAAe,CAAC,KAA2B;QAC/C,MAAM,IAAI,GAAG,4BAA4B,CAAC,KAAK,CAAC,CAAC;QACjD,MAAM,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QACxC,MAAM,SAAS,GAAG,mBAAmB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACjD,IAAI,SAAS,KAAK,SAAS;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,SAAS,EAAE,CAAC;QAChE,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACzC,MAAM,UAAU,GAAa,EAAE,CAAC;QAChC,KAAK,MAAM,MAAM,IAAI,GAAG,EAAE,CAAC;YACzB,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,IAAI,CAAC;gBAAE,SAAS;YAC9C,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC;YACzF,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAChC,CAAC;QACD,MAAM,MAAM,GAAoB,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;QACjF,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACxC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IAC1C,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,GAAW,EAAE,KAAa;QAC3C,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACzC,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACxC,OAAO,MAAM,EAAE,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IAC1D,CAAC;IAED,KAAK,CAAC,cAAc,CAClB,GAAW,EACX,GAAW,EACX,OAAoC,EAAE;QAEtC,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACzC,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACzC,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CACjD,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,KAAK,OAAO,IAAI,MAAM,CAAC,OAAO,KAAK,OAAO,CACrE,CAAC;QACF,OAAO,kBAAkB,CAAC,QAAQ,EAAE,IAAI,CAAC,KAAK,IAAI,6BAA6B,CAAC,CAAC;IACnF,CAAC;IAED,KAAK,CAAC,sBAAsB,CAAC,MAAoC;QAC/D,MAAM,IAAI,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACzC,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;YAC5C,IAAI,CAAC,mBAAmB,CAAC,MAAM,EAAE,IAAI,CAAC;gBAAE,SAAS;YACjD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC;YACvF,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC9B,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF"}

package/node_modules/@noodle-borg/service/dist/store/pending-installations-postgres.d.ts

@@ -0,0 +1,19 @@
+import type { Pool } from 'pg';
+import { type PendingGithubInstallationStore } from '../github/pending-installations.js';
+/**
+ * Postgres {@link PendingGithubInstallationStore} (GHD-2): the multi-instance backing for the GitHub
+ * install hand-off — the setup redirect and the CLI poll can land on different instances, so the
+ * correlation must live in the shared store (closes the gap documented in GHD-1 / ADR 0111). A tiny,
+ * self-pruning table: `ON CONFLICT DO NOTHING` IS the first-write-wins rule, expired rows are dropped
+ * opportunistically on every write and treated as absent on read. Mirrors `PostgresStateHandleStore`'s
+ * shape: pool injected, schema ensured by `ensureArtifactSchema`.
+ */
+export declare class PostgresPendingGithubInstallationStore implements PendingGithubInstallationStore {
+    #private;
+    constructor(pool: Pool, options?: {
+        now?: () => Date;
+    });
+    put(state: string, installationId: number): Promise<void>;
+    get(state: string): Promise<number | undefined>;
+}
+//# sourceMappingURL=pending-installations-postgres.d.ts.map

package/node_modules/@noodle-borg/service/dist/store/pending-installations-postgres.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pending-installations-postgres.d.ts","sourceRoot":"","sources":["../../src/store/pending-installations-postgres.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC;AAC/B,OAAO,EAEL,KAAK,8BAA8B,EACpC,MAAM,oCAAoC,CAAC;AAE5C;;;;;;;GAOG;AACH,qBAAa,sCAAuC,YAAW,8BAA8B;;gBAI/E,IAAI,EAAE,IAAI,EAAE,OAAO,GAAE;QAAE,GAAG,CAAC,EAAE,MAAM,IAAI,CAAA;KAAO;IASpD,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAazD,GAAG,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;CAqBtD"}

package/node_modules/@noodle-borg/service/dist/store/pending-installations-postgres.js

@@ -0,0 +1,46 @@
+import { PENDING_GITHUB_INSTALLATION_TTL_MS, } from '../github/pending-installations.js';
+/**
+ * Postgres {@link PendingGithubInstallationStore} (GHD-2): the multi-instance backing for the GitHub
+ * install hand-off — the setup redirect and the CLI poll can land on different instances, so the
+ * correlation must live in the shared store (closes the gap documented in GHD-1 / ADR 0111). A tiny,
+ * self-pruning table: `ON CONFLICT DO NOTHING` IS the first-write-wins rule, expired rows are dropped
+ * opportunistically on every write and treated as absent on read. Mirrors `PostgresStateHandleStore`'s
+ * shape: pool injected, schema ensured by `ensureArtifactSchema`.
+ */
+export class PostgresPendingGithubInstallationStore {
+    #pool;
+    #now;
+    constructor(pool, options = {}) {
+        this.#pool = pool;
+        this.#now = options.now ?? (() => new Date());
+    }
+    #expiryCutoff() {
+        return new Date(this.#now().getTime() - PENDING_GITHUB_INSTALLATION_TTL_MS);
+    }
+    async put(state, installationId) {
+        // Opportunistic hygiene first: never let an expired row satisfy the conflict check below.
+        await this.#pool.query('DELETE FROM pending_github_installations WHERE created_at < $1', [
+            this.#expiryCutoff(),
+        ]);
+        await this.#pool.query(`INSERT INTO pending_github_installations (state, installation_id, created_at)
+       VALUES ($1, $2, $3)
+       ON CONFLICT (state) DO NOTHING`, [state, installationId, this.#now()]);
+    }
+    async get(state) {
+        const { rows } = await this.#pool.query('SELECT installation_id, created_at FROM pending_github_installations WHERE state = $1', [
+            state,
+        ]);
+        const row = rows[0];
+        if (row === undefined)
+            return undefined;
+        const cutoff = this.#expiryCutoff();
+        if (new Date(row.created_at).getTime() < cutoff.getTime()) {
+            // Scope the cleanup to the expired row: another instance may have pruned it and landed a
+            // FRESH row for the same state between our SELECT and this DELETE.
+            await this.#pool.query('DELETE FROM pending_github_installations WHERE state = $1 AND created_at < $2', [state, cutoff]);
+            return undefined;
+        }
+        return Number(row.installation_id);
+    }
+}
+//# sourceMappingURL=pending-installations-postgres.js.map

package/node_modules/@noodle-borg/service/dist/store/pending-installations-postgres.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pending-installations-postgres.js","sourceRoot":"","sources":["../../src/store/pending-installations-postgres.ts"],"names":[],"mappings":"AACA,OAAO,EACL,kCAAkC,GAEnC,MAAM,oCAAoC,CAAC;AAE5C;;;;;;;GAOG;AACH,MAAM,OAAO,sCAAsC;IACxC,KAAK,CAAO;IACZ,IAAI,CAAa;IAE1B,YAAY,IAAU,EAAE,UAAgC,EAAE;QACxD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;IAED,aAAa;QACX,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,GAAG,kCAAkC,CAAC,CAAC;IAC9E,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,KAAa,EAAE,cAAsB;QAC7C,0FAA0F;QAC1F,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,gEAAgE,EAAE;YACvF,IAAI,CAAC,aAAa,EAAE;SACrB,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CACpB;;sCAEgC,EAChC,CAAC,KAAK,EAAE,cAAc,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CACrC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,KAAa;QACrB,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAGpC,uFAAuF,EAAE;YAC1F,KAAK;SACN,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,GAAG,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QACxC,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QACpC,IAAI,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;YAC1D,yFAAyF;YACzF,mEAAmE;YACnE,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CACpB,+EAA+E,EAC/E,CAAC,KAAK,EAAE,MAAM,CAAC,CAChB,CAAC;YACF,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IACrC,CAAC;CACF"}

package/node_modules/@noodle-borg/service/dist/store/postgres-alerts.d.ts

@@ -0,0 +1,26 @@
+import type { Pool } from 'pg';
+import type { TenantRef } from '../store.js';
+import { type AlertFiringState, type AlertRuleRecord, type AlertRuleStore, type CreateAlertRuleInput } from './alert-rules.js';
+/**
+ * Relational {@link AlertRuleStore} backend (analytics alerting E2), a standalone pool-injected
+ * class mirroring `PostgresRequestEventStore` (the analytics-family precedent) rather than another
+ * facet of `PostgresArtifactStore` — alert rules belong to the analytics surface and this keeps
+ * `postgres.ts` under the size gate. Pure SQL; unit-testable against any local Postgres
+ * (`DATABASE_URL_TEST`).
+ */
+/** Create the `alert_rules` table if absent (idempotent; run once at startup). */
+export declare function ensureAlertRuleSchema(pool: Pool): Promise<void>;
+export declare class PostgresAlertRuleStore implements AlertRuleStore {
+    #private;
+    constructor(pool: Pool, options?: {
+        now?: () => Date;
+    });
+    ensureSchema(): Promise<void>;
+    createAlertRule(input: CreateAlertRuleInput): Promise<AlertRuleRecord>;
+    listAlertRules(ref: TenantRef): Promise<readonly AlertRuleRecord[]>;
+    getAlertRule(ref: TenantRef, id: string): Promise<AlertRuleRecord | undefined>;
+    deleteAlertRule(ref: TenantRef, id: string): Promise<boolean>;
+    listEnabledAlertRules(): Promise<readonly AlertRuleRecord[]>;
+    updateAlertFiringState(id: string, state: AlertFiringState): Promise<AlertRuleRecord | undefined>;
+}
+//# sourceMappingURL=postgres-alerts.d.ts.map

package/node_modules/@noodle-borg/service/dist/store/postgres-alerts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"postgres-alerts.d.ts","sourceRoot":"","sources":["../../src/store/postgres-alerts.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC;AAC/B,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EACL,KAAK,gBAAgB,EAErB,KAAK,eAAe,EACpB,KAAK,cAAc,EAEnB,KAAK,oBAAoB,EAG1B,MAAM,kBAAkB,CAAC;AAG1B;;;;;;GAMG;AAEH,kFAAkF;AAClF,wBAAsB,qBAAqB,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAgCrE;AAgDD,qBAAa,sBAAuB,YAAW,cAAc;;gBAI/C,IAAI,EAAE,IAAI,EAAE,OAAO,GAAE;QAAE,GAAG,CAAC,EAAE,MAAM,IAAI,CAAA;KAAO;IAKpD,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC;IAI7B,eAAe,CAAC,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,eAAe,CAAC;IA4BtE,cAAc,CAAC,GAAG,EAAE,SAAS,GAAG,OAAO,CAAC,SAAS,eAAe,EAAE,CAAC;IAUnE,YAAY,CAAC,GAAG,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC;IAc9E,eAAe,CAAC,GAAG,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAc7D,qBAAqB,IAAI,OAAO,CAAC,SAAS,eAAe,EAAE,CAAC;IAO5D,sBAAsB,CAC1B,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,gBAAgB,GACtB,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC;CAYxC"}

package/node_modules/@noodle-borg/service/dist/store/postgres-alerts.js

@@ -0,0 +1,142 @@
+import { newAlertRuleRecord, validateAlertRuleId, } from './alert-rules.js';
+import { validateSlug } from './validate.js';
+/**
+ * Relational {@link AlertRuleStore} backend (analytics alerting E2), a standalone pool-injected
+ * class mirroring `PostgresRequestEventStore` (the analytics-family precedent) rather than another
+ * facet of `PostgresArtifactStore` — alert rules belong to the analytics surface and this keeps
+ * `postgres.ts` under the size gate. Pure SQL; unit-testable against any local Postgres
+ * (`DATABASE_URL_TEST`).
+ */
+/** Create the `alert_rules` table if absent (idempotent; run once at startup). */
+export async function ensureAlertRuleSchema(pool) {
+    await pool.query(`
+    CREATE TABLE IF NOT EXISTS alert_rules (
+      id                 uuid PRIMARY KEY,
+      org_slug           text NOT NULL,
+      app_slug           text NOT NULL,
+      environment        text NOT NULL,
+      name               text,
+      metric             text NOT NULL,
+      threshold          double precision NOT NULL,
+      window_minutes     int NOT NULL,
+      comparison         text NOT NULL DEFAULT '>=',
+      webhook_url        text NOT NULL,
+      enabled            boolean NOT NULL DEFAULT true,
+      cooldown_minutes   int NOT NULL,
+      breaching          boolean NOT NULL DEFAULT false,
+      last_observed      double precision,
+      last_fired_at      timestamptz,
+      created_by_subject text,
+      created_at         timestamptz NOT NULL,
+      updated_at         timestamptz NOT NULL
+    )
+  `);
+    await pool.query(`
+    CREATE INDEX IF NOT EXISTS alert_rules_tenant_idx
+      ON alert_rules (org_slug, app_slug, environment)
+  `);
+    await pool.query(`
+    CREATE INDEX IF NOT EXISTS alert_rules_enabled_idx
+      ON alert_rules (enabled)
+      WHERE enabled
+  `);
+}
+function rowToRecord(row) {
+    return {
+        id: row.id,
+        orgSlug: row.org_slug,
+        appSlug: row.app_slug,
+        environment: row.environment,
+        ...(row.name !== null ? { name: row.name } : {}),
+        metric: row.metric,
+        threshold: Number(row.threshold),
+        windowMinutes: Number(row.window_minutes),
+        comparison: '>=',
+        webhookUrl: row.webhook_url,
+        enabled: row.enabled,
+        cooldownMinutes: Number(row.cooldown_minutes),
+        breaching: row.breaching,
+        ...(row.last_observed !== null ? { lastObserved: Number(row.last_observed) } : {}),
+        ...(row.last_fired_at !== null
+            ? { lastFiredAt: new Date(row.last_fired_at).toISOString() }
+            : {}),
+        ...(row.created_by_subject !== null ? { createdBySubject: row.created_by_subject } : {}),
+        createdAt: new Date(row.created_at).toISOString(),
+        updatedAt: new Date(row.updated_at).toISOString(),
+    };
+}
+export class PostgresAlertRuleStore {
+    #pool;
+    #now;
+    constructor(pool, options = {}) {
+        this.#pool = pool;
+        this.#now = options.now ?? (() => new Date());
+    }
+    async ensureSchema() {
+        await ensureAlertRuleSchema(this.#pool);
+    }
+    async createAlertRule(input) {
+        const record = newAlertRuleRecord(input, this.#now);
+        await this.#pool.query(`INSERT INTO alert_rules
+         (id, org_slug, app_slug, environment, name, metric, threshold, window_minutes,
+          comparison, webhook_url, enabled, cooldown_minutes, breaching,
+          created_by_subject, created_at, updated_at)
+       VALUES ($1, $2, $3, $4, $5, $6, $7, $8, $9, $10, $11, $12, false, $13, $14, $14)`, [
+            record.id,
+            record.orgSlug,
+            record.appSlug,
+            record.environment,
+            record.name ?? null,
+            record.metric,
+            record.threshold,
+            record.windowMinutes,
+            record.comparison,
+            record.webhookUrl,
+            record.enabled,
+            record.cooldownMinutes,
+            record.createdBySubject ?? null,
+            record.createdAt,
+        ]);
+        return record;
+    }
+    async listAlertRules(ref) {
+        const { rows } = await this.#pool.query(`SELECT * FROM alert_rules
+       WHERE org_slug = $1 AND app_slug = $2 AND environment = $3
+       ORDER BY created_at ASC, id ASC`, [validateSlug('org', ref.org), validateSlug('app', ref.app), validateSlug('env', ref.env)]);
+        return rows.map(rowToRecord);
+    }
+    async getAlertRule(ref, id) {
+        const { rows } = await this.#pool.query(`SELECT * FROM alert_rules
+       WHERE id = $1 AND org_slug = $2 AND app_slug = $3 AND environment = $4`, [
+            validateAlertRuleId(id),
+            validateSlug('org', ref.org),
+            validateSlug('app', ref.app),
+            validateSlug('env', ref.env),
+        ]);
+        return rows[0] ? rowToRecord(rows[0]) : undefined;
+    }
+    async deleteAlertRule(ref, id) {
+        const { rowCount } = await this.#pool.query(`DELETE FROM alert_rules
+       WHERE id = $1 AND org_slug = $2 AND app_slug = $3 AND environment = $4`, [
+            validateAlertRuleId(id),
+            validateSlug('org', ref.org),
+            validateSlug('app', ref.app),
+            validateSlug('env', ref.env),
+        ]);
+        return (rowCount ?? 0) > 0;
+    }
+    async listEnabledAlertRules() {
+        const { rows } = await this.#pool.query('SELECT * FROM alert_rules WHERE enabled ORDER BY created_at ASC, id ASC');
+        return rows.map(rowToRecord);
+    }
+    async updateAlertFiringState(id, state) {
+        const { rows } = await this.#pool.query(`UPDATE alert_rules
+       SET breaching = $2,
+           last_observed = $3,
+           last_fired_at = COALESCE($4, last_fired_at)
+       WHERE id = $1
+       RETURNING *`, [validateAlertRuleId(id), state.breaching, state.lastObserved, state.lastFiredAt ?? null]);
+        return rows[0] ? rowToRecord(rows[0]) : undefined;
+    }
+}
+//# sourceMappingURL=postgres-alerts.js.map

package/node_modules/@noodle-borg/service/dist/store/postgres-alerts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"postgres-alerts.js","sourceRoot":"","sources":["../../src/store/postgres-alerts.ts"],"names":[],"mappings":"AAEA,OAAO,EAOL,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAE7C;;;;;;GAMG;AAEH,kFAAkF;AAClF,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,IAAU;IACpD,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;;;;;;;GAqBhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;GAGhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;GAIhB,CAAC,CAAC;AACL,CAAC;AAuBD,SAAS,WAAW,CAAC,GAAiB;IACpC,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,OAAO,EAAE,GAAG,CAAC,QAAQ;QACrB,OAAO,EAAE,GAAG,CAAC,QAAQ;QACrB,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,GAAG,CAAC,GAAG,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChD,MAAM,EAAE,GAAG,CAAC,MAAqB;QACjC,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC;QAChC,aAAa,EAAE,MAAM,CAAC,GAAG,CAAC,cAAc,CAAuB;QAC/D,UAAU,EAAE,IAAI;QAChB,UAAU,EAAE,GAAG,CAAC,WAAW;QAC3B,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,eAAe,EAAE,MAAM,CAAC,GAAG,CAAC,gBAAgB,CAAC;QAC7C,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,GAAG,CAAC,GAAG,CAAC,aAAa,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClF,GAAG,CAAC,GAAG,CAAC,aAAa,KAAK,IAAI;YAC5B,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,WAAW,EAAE,EAAE;YAC5D,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,GAAG,CAAC,kBAAkB,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,GAAG,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxF,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE;QACjD,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE;KAClD,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,sBAAsB;IACxB,KAAK,CAAO;IACZ,IAAI,CAAa;IAE1B,YAAY,IAAU,EAAE,UAAgC,EAAE;QACxD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;IAED,KAAK,CAAC,YAAY;QAChB,MAAM,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1C,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,KAA2B;QAC/C,MAAM,MAAM,GAAG,kBAAkB,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QACpD,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CACpB;;;;wFAIkF,EAClF;YACE,MAAM,CAAC,EAAE;YACT,MAAM,CAAC,OAAO;YACd,MAAM,CAAC,OAAO;YACd,MAAM,CAAC,WAAW;YAClB,MAAM,CAAC,IAAI,IAAI,IAAI;YACnB,MAAM,CAAC,MAAM;YACb,MAAM,CAAC,SAAS;YAChB,MAAM,CAAC,aAAa;YACpB,MAAM,CAAC,UAAU;YACjB,MAAM,CAAC,UAAU;YACjB,MAAM,CAAC,OAAO;YACd,MAAM,CAAC,eAAe;YACtB,MAAM,CAAC,gBAAgB,IAAI,IAAI;YAC/B,MAAM,CAAC,SAAS;SACjB,CACF,CAAC;QACF,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,GAAc;QACjC,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CACrC;;uCAEiC,EACjC,CAAC,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAC3F,CAAC;QACF,OAAO,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,GAAc,EAAE,EAAU;QAC3C,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CACrC;8EACwE,EACxE;YACE,mBAAmB,CAAC,EAAE,CAAC;YACvB,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC;YAC5B,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC;YAC5B,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC;SAC7B,CACF,CAAC;QACF,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACpD,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,GAAc,EAAE,EAAU;QAC9C,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CACzC;8EACwE,EACxE;YACE,mBAAmB,CAAC,EAAE,CAAC;YACvB,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC;YAC5B,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC;YAC5B,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC;SAC7B,CACF,CAAC;QACF,OAAO,CAAC,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,qBAAqB;QACzB,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CACrC,yEAAyE,CAC1E,CAAC;QACF,OAAO,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,sBAAsB,CAC1B,EAAU,EACV,KAAuB;QAEvB,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CACrC;;;;;mBAKa,EACb,CAAC,mBAAmB,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,WAAW,IAAI,IAAI,CAAC,CAC1F,CAAC;QACF,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACpD,CAAC;CACF"}

package/node_modules/@noodle-borg/service/dist/store/postgres-github-runs.d.ts

@@ -0,0 +1,9 @@
+import type { Pool } from 'pg';
+import type { CancelQueuedDeployRunsFilter, CreateDeployRunInput, CreateDeployRunResult, DeployRunRecord, ListDeployRunsResult } from '../store.js';
+export declare function createDeployRunRow(pool: Pool, now: () => Date, input: CreateDeployRunInput): Promise<CreateDeployRunResult>;
+export declare function getDeployRunRow(pool: Pool, org: string, runId: string): Promise<DeployRunRecord | undefined>;
+export declare function listDeployRunRows(pool: Pool, org: string, app: string, opts?: {
+    readonly limit?: number;
+}): Promise<ListDeployRunsResult>;
+export declare function cancelQueuedDeployRunRows(pool: Pool, now: () => Date, filter: CancelQueuedDeployRunsFilter): Promise<readonly string[]>;
+//# sourceMappingURL=postgres-github-runs.d.ts.map

package/node_modules/@noodle-borg/service/dist/store/postgres-github-runs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"postgres-github-runs.d.ts","sourceRoot":"","sources":["../../src/store/postgres-github-runs.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAc,MAAM,IAAI,CAAC;AAC3C,OAAO,KAAK,EACV,4BAA4B,EAC5B,oBAAoB,EACpB,qBAAqB,EACrB,eAAe,EACf,oBAAoB,EACrB,MAAM,aAAa,CAAC;AA6DrB,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,IAAI,EACV,GAAG,EAAE,MAAM,IAAI,EACf,KAAK,EAAE,oBAAoB,GAC1B,OAAO,CAAC,qBAAqB,CAAC,CAkEhC;AAED,wBAAsB,eAAe,CACnC,IAAI,EAAE,IAAI,EACV,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC,CAMtC;AAED,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,IAAI,EACV,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,MAAM,EACX,IAAI,GAAE;IAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAO,GACrC,OAAO,CAAC,oBAAoB,CAAC,CAW/B;AAED,wBAAsB,yBAAyB,CAC7C,IAAI,EAAE,IAAI,EACV,GAAG,EAAE,MAAM,IAAI,EACf,MAAM,EAAE,4BAA4B,GACnC,OAAO,CAAC,SAAS,MAAM,EAAE,CAAC,CAoB5B"}