factory-factory 0.3.21 → 0.4.0

package/dist/src/backend/trpc/workspace/init.trpc.js

@@ -6,7 +6,7 @@ import { executeStartupScriptPipeline } from '../../../backend/orchestration/wor
 import { FactoryConfigService } from '../../../backend/services/factory-config.service.js';
 import { createLogger } from '../../../backend/services/logger.service.js';
 import { getWorkspaceInitPolicy, workspaceDataService, workspaceStateMachine, worktreeLifecycleService, } from '../../../backend/services/workspace/index.js';
-import { publicProcedure, router } from '../../../backend/trpc/trpc.js';
+import { publicProcedure, router, trustedLocalProcedure } from '../../../backend/trpc/trpc.js';
 const logger = createLogger('workspace-init-trpc');
 function maxRetriesExceededError(maxRetries) {
     return new TRPCError({
@@ -52,7 +52,7 @@ export const workspaceInitRouter = router({
             hasWorktreePath: !!workspace.worktreePath,
         };
     }),
-    retryInit: publicProcedure
+    retryInit: trustedLocalProcedure
         .input(z.object({ id: z.string(), useExistingBranch: z.boolean().optional() }))
         .mutation(async ({ input }) => {
         const workspace = await workspaceDataService.findByIdWithProject(input.id);

package/dist/src/backend/trpc/workspace/init.trpc.js.map

@@ -1 +1 @@
-{"version":3,"file":"init.trpc.js","sourceRoot":"","sources":["../../../../../src/backend/trpc/workspace/init.trpc.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,OAAO,EAAE,MAAM,2BAA2B,CAAC;AAEpD,OAAO,EACL,2BAA2B,EAC3B,sCAAsC,GACvC,MAAM,qDAAqD,CAAC;AAC7D,OAAO,EAAE,4BAA4B,EAAE,MAAM,wDAAwD,CAAC;AACtG,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,YAAY,EAAE,MAAM,mCAAmC,CAAC;AACjE,OAAO,EACL,sBAAsB,EACtB,oBAAoB,EACpB,qBAAqB,EACrB,wBAAwB,GACzB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAE9D,MAAM,MAAM,GAAG,YAAY,CAAC,qBAAqB,CAAC,CAAC;AAEnD,SAAS,uBAAuB,CAAC,UAAkB;IACjD,OAAO,IAAI,SAAS,CAAC;QACnB,IAAI,EAAE,mBAAmB;QACzB,OAAO,EAAE,2BAA2B,UAAU,YAAY;KAC3D,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,wCAAwC,CACrD,SAA+B,EAC/B,UAAkB;IAElB,MAAM,gBAAgB,GAAG,MAAM,qBAAqB,CAAC,iBAAiB,CAAC,SAAS,CAAC,EAAE,EAAE;QACnF,UAAU;KACX,CAAC,CAAC;IACH,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,MAAM,uBAAuB,CAAC,UAAU,CAAC,CAAC;IAC5C,CAAC;IAKD,2BAA2B,CAAC,SAAS,CAAC,EAAE,EAAE;QACxC,UAAU,EAAE,SAAS,CAAC,UAAU,IAAI,SAAS;QAC7C,0BAA0B,EAAE,IAAI;KACjC,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;QACjB,MAAM,CAAC,KAAK,CACV,mEAAmE,EACnE,OAAO,CAAC,KAAK,CAAC,EACd;YACE,WAAW,EAAE,SAAS,CAAC,EAAE;SAC1B,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAMD,MAAM,CAAC,MAAM,mBAAmB,GAAG,MAAM,CAAC;IAExC,aAAa,EAAE,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;QAC3F,MAAM,SAAS,GAAG,MAAM,oBAAoB,CAAC,mBAAmB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC3E,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,SAAS,CAAC;gBAClB,IAAI,EAAE,WAAW;gBACjB,OAAO,EAAE,wBAAwB,KAAK,CAAC,EAAE,EAAE;aAC5C,CAAC,CAAC;QACL,CAAC;QAED,MAAM,UAAU,GAAG,sBAAsB,CAAC,SAAS,CAAC,CAAC;QAErD,OAAO;YACL,MAAM,EAAE,SAAS,CAAC,MAAM;YACxB,gBAAgB,EAAE,SAAS,CAAC,gBAAgB;YAC5C,UAAU,EAAE,SAAS,CAAC,UAAU;YAChC,aAAa,EAAE,SAAS,CAAC,aAAa;YACtC,eAAe,EAAE,SAAS,CAAC,eAAe;YAC1C,KAAK,EAAE,UAAU,CAAC,KAAK;YACvB,UAAU,EAAE,UAAU,CAAC,MAAM;YAC7B,gBAAgB,EAAE,CAAC,CAAC,CAClB,SAAS,CAAC,OAAO,EAAE,oBAAoB,IAAI,SAAS,CAAC,OAAO,EAAE,iBAAiB,CAChF;YACD,eAAe,EAAE,CAAC,CAAC,SAAS,CAAC,YAAY;SAC1C,CAAC;IACJ,CAAC,CAAC;IAGF,SAAS,EAAE,eAAe;SACvB,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,iBAAiB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;SAC9E,QAAQ,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;QAC5B,MAAM,SAAS,GAAG,MAAM,oBAAoB,CAAC,mBAAmB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC3E,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,CAAC;YACxB,MAAM,IAAI,SAAS,CAAC;gBAClB,IAAI,EAAE,WAAW;gBACjB,OAAO,EAAE,wBAAwB,KAAK,CAAC,EAAE,EAAE;aAC5C,CAAC,CAAC;QACL,CAAC;QAED,MAAM,qBAAqB,GAAG,SAAS,CAAC,MAAM,KAAK,QAAQ,CAAC;QAC5D,MAAM,2BAA2B,GAC/B,SAAS,CAAC,MAAM,KAAK,OAAO,IAAI,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC;QAE/D,IAAI,CAAC,CAAC,qBAAqB,IAAI,2BAA2B,CAAC,EAAE,CAAC;YAC5D,MAAM,IAAI,SAAS,CAAC;gBAClB,IAAI,EAAE,aAAa;gBACnB,OAAO,EAAE,wDAAwD;aAClE,CAAC,CAAC;QACL,CAAC;QAED,MAAM,UAAU,GAAG,CAAC,CAAC;QAGrB,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,CAAC;YAE5B,MAAM,WAAW,GAAG,MAAM,qBAAqB,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;YACrF,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,MAAM,uBAAuB,CAAC,UAAU,CAAC,CAAC;YAC5C,CAAC;YACD,MAAM,UAAU,GACd,KAAK,CAAC,iBAAiB,IAAI,CAAC,MAAM,wBAAwB,CAAC,WAAW,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;YACxF,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;gBAC7B,MAAM,wBAAwB,CAAC,WAAW,CAAC,SAAS,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;YACvE,CAAC;YAED,2BAA2B,CAAC,SAAS,CAAC,EAAE,EAAE;gBACxC,UAAU,EAAE,SAAS,CAAC,UAAU,IAAI,SAAS;gBAC7C,iBAAiB,EAAE,UAAU;aAC9B,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;gBACjB,MAAM,CAAC,KAAK,CACV,6DAA6D,EAC7D,OAAO,CAAC,KAAK,CAAC,EACd;oBACE,WAAW,EAAE,SAAS,CAAC,EAAE;iBAC1B,CACF,CAAC;YACJ,CAAC,CAAC,CAAC;YACH,OAAO,oBAAoB,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACjD,CAAC;QAID,IAAI,2BAA2B,EAAE,CAAC;YAGhC,MAAM,YAAY,GAAG,SAAS,CAAC,YAAY,CAAC;YAC5C,MAAM,aAAa,GAAG,MAAM,oBAAoB,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;YAE1E,MAAM,gBAAgB,GAAG,MAAM,qBAAqB,CAAC,0BAA0B,CAC7E,SAAS,CAAC,EAAE,EACZ,UAAU,CACX,CAAC;YACF,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBACtB,MAAM,uBAAuB,CAAC,UAAU,CAAC,CAAC;YAC5C,CAAC;YAED,MAAM,4BAA4B,CAAC;gBACjC,WAAW,EAAE,SAAS,CAAC,EAAE;gBACzB,oBAAoB,EAAE,SAAiC;gBACvD,YAAY;gBACZ,aAAa;aACd,CAAC,CAAC;YAEH,MAAM,sCAAsC,CAAC,SAAS,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;YAEjE,OAAO,oBAAoB,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACjD,CAAC;QAED,MAAM,wCAAwC,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;QAEtE,OAAO,oBAAoB,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACjD,CAAC,CAAC;CACL,CAAC,CAAC"}
+{"version":3,"file":"init.trpc.js","sourceRoot":"","sources":["../../../../../src/backend/trpc/workspace/init.trpc.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,OAAO,EAAE,MAAM,2BAA2B,CAAC;AAEpD,OAAO,EACL,2BAA2B,EAC3B,sCAAsC,GACvC,MAAM,qDAAqD,CAAC;AAC7D,OAAO,EAAE,4BAA4B,EAAE,MAAM,wDAAwD,CAAC;AACtG,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,YAAY,EAAE,MAAM,mCAAmC,CAAC;AACjE,OAAO,EACL,sBAAsB,EACtB,oBAAoB,EACpB,qBAAqB,EACrB,wBAAwB,GACzB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,eAAe,EAAE,MAAM,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAErF,MAAM,MAAM,GAAG,YAAY,CAAC,qBAAqB,CAAC,CAAC;AAEnD,SAAS,uBAAuB,CAAC,UAAkB;IACjD,OAAO,IAAI,SAAS,CAAC;QACnB,IAAI,EAAE,mBAAmB;QACzB,OAAO,EAAE,2BAA2B,UAAU,YAAY;KAC3D,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,wCAAwC,CACrD,SAA+B,EAC/B,UAAkB;IAElB,MAAM,gBAAgB,GAAG,MAAM,qBAAqB,CAAC,iBAAiB,CAAC,SAAS,CAAC,EAAE,EAAE;QACnF,UAAU;KACX,CAAC,CAAC;IACH,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,MAAM,uBAAuB,CAAC,UAAU,CAAC,CAAC;IAC5C,CAAC;IAKD,2BAA2B,CAAC,SAAS,CAAC,EAAE,EAAE;QACxC,UAAU,EAAE,SAAS,CAAC,UAAU,IAAI,SAAS;QAC7C,0BAA0B,EAAE,IAAI;KACjC,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;QACjB,MAAM,CAAC,KAAK,CACV,mEAAmE,EACnE,OAAO,CAAC,KAAK,CAAC,EACd;YACE,WAAW,EAAE,SAAS,CAAC,EAAE;SAC1B,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAMD,MAAM,CAAC,MAAM,mBAAmB,GAAG,MAAM,CAAC;IAExC,aAAa,EAAE,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;QAC3F,MAAM,SAAS,GAAG,MAAM,oBAAoB,CAAC,mBAAmB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC3E,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,SAAS,CAAC;gBAClB,IAAI,EAAE,WAAW;gBACjB,OAAO,EAAE,wBAAwB,KAAK,CAAC,EAAE,EAAE;aAC5C,CAAC,CAAC;QACL,CAAC;QAED,MAAM,UAAU,GAAG,sBAAsB,CAAC,SAAS,CAAC,CAAC;QAErD,OAAO;YACL,MAAM,EAAE,SAAS,CAAC,MAAM;YACxB,gBAAgB,EAAE,SAAS,CAAC,gBAAgB;YAC5C,UAAU,EAAE,SAAS,CAAC,UAAU;YAChC,aAAa,EAAE,SAAS,CAAC,aAAa;YACtC,eAAe,EAAE,SAAS,CAAC,eAAe;YAC1C,KAAK,EAAE,UAAU,CAAC,KAAK;YACvB,UAAU,EAAE,UAAU,CAAC,MAAM;YAC7B,gBAAgB,EAAE,CAAC,CAAC,CAClB,SAAS,CAAC,OAAO,EAAE,oBAAoB,IAAI,SAAS,CAAC,OAAO,EAAE,iBAAiB,CAChF;YACD,eAAe,EAAE,CAAC,CAAC,SAAS,CAAC,YAAY;SAC1C,CAAC;IACJ,CAAC,CAAC;IAGF,SAAS,EAAE,qBAAqB;SAC7B,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,iBAAiB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;SAC9E,QAAQ,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;QAC5B,MAAM,SAAS,GAAG,MAAM,oBAAoB,CAAC,mBAAmB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC3E,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,CAAC;YACxB,MAAM,IAAI,SAAS,CAAC;gBAClB,IAAI,EAAE,WAAW;gBACjB,OAAO,EAAE,wBAAwB,KAAK,CAAC,EAAE,EAAE;aAC5C,CAAC,CAAC;QACL,CAAC;QAED,MAAM,qBAAqB,GAAG,SAAS,CAAC,MAAM,KAAK,QAAQ,CAAC;QAC5D,MAAM,2BAA2B,GAC/B,SAAS,CAAC,MAAM,KAAK,OAAO,IAAI,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC;QAE/D,IAAI,CAAC,CAAC,qBAAqB,IAAI,2BAA2B,CAAC,EAAE,CAAC;YAC5D,MAAM,IAAI,SAAS,CAAC;gBAClB,IAAI,EAAE,aAAa;gBACnB,OAAO,EAAE,wDAAwD;aAClE,CAAC,CAAC;QACL,CAAC;QAED,MAAM,UAAU,GAAG,CAAC,CAAC;QAGrB,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,CAAC;YAE5B,MAAM,WAAW,GAAG,MAAM,qBAAqB,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;YACrF,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,MAAM,uBAAuB,CAAC,UAAU,CAAC,CAAC;YAC5C,CAAC;YACD,MAAM,UAAU,GACd,KAAK,CAAC,iBAAiB,IAAI,CAAC,MAAM,wBAAwB,CAAC,WAAW,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;YACxF,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;gBAC7B,MAAM,wBAAwB,CAAC,WAAW,CAAC,SAAS,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;YACvE,CAAC;YAED,2BAA2B,CAAC,SAAS,CAAC,EAAE,EAAE;gBACxC,UAAU,EAAE,SAAS,CAAC,UAAU,IAAI,SAAS;gBAC7C,iBAAiB,EAAE,UAAU;aAC9B,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;gBACjB,MAAM,CAAC,KAAK,CACV,6DAA6D,EAC7D,OAAO,CAAC,KAAK,CAAC,EACd;oBACE,WAAW,EAAE,SAAS,CAAC,EAAE;iBAC1B,CACF,CAAC;YACJ,CAAC,CAAC,CAAC;YACH,OAAO,oBAAoB,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACjD,CAAC;QAID,IAAI,2BAA2B,EAAE,CAAC;YAGhC,MAAM,YAAY,GAAG,SAAS,CAAC,YAAY,CAAC;YAC5C,MAAM,aAAa,GAAG,MAAM,oBAAoB,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;YAE1E,MAAM,gBAAgB,GAAG,MAAM,qBAAqB,CAAC,0BAA0B,CAC7E,SAAS,CAAC,EAAE,EACZ,UAAU,CACX,CAAC;YACF,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBACtB,MAAM,uBAAuB,CAAC,UAAU,CAAC,CAAC;YAC5C,CAAC;YAED,MAAM,4BAA4B,CAAC;gBACjC,WAAW,EAAE,SAAS,CAAC,EAAE;gBACzB,oBAAoB,EAAE,SAAiC;gBACvD,YAAY;gBACZ,aAAa;aACd,CAAC,CAAC;YAEH,MAAM,sCAAsC,CAAC,SAAS,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;YAEjE,OAAO,oBAAoB,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACjD,CAAC;QAED,MAAM,wCAAwC,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;QAEtE,OAAO,oBAAoB,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACjD,CAAC,CAAC;CACL,CAAC,CAAC"}

package/dist/src/backend/trpc/workspace/run-script.router.test.js

@@ -15,10 +15,16 @@ vi.mock('@/backend/services/run-script-config-persistence.service', () => ({
     },
 }));
 import { workspaceRunScriptRouter } from './run-script.trpc.js';
-function createCaller(runScriptService) {
+function createCaller(runScriptService, requestTrust) {
     return workspaceRunScriptRouter.createCaller({
+        requestTrust,
         appContext: {
             services: {
+                configService: {
+                    getCorsConfig: () => ({
+                        allowedOrigins: ['http://localhost:3000', 'http://localhost:3001'],
+                    }),
+                },
                 runScriptService: {
                     startRunScript: runScriptService?.startRunScript ?? (async () => ({ success: true })),
                     stopRunScript: runScriptService?.stopRunScript ?? (async () => ({ success: true })),
@@ -117,6 +123,22 @@ describe('workspaceRunScriptRouter', () => {
         expect(stopRunScript).toHaveBeenCalledWith('w1');
         expect(getRunScriptStatus).toHaveBeenCalledWith('w1');
     });
+    it('rejects privileged run-script mutations from untrusted requests', async () => {
+        const startRunScript = vi.fn(async () => ({ success: true }));
+        const stopRunScript = vi.fn(async () => ({ success: true }));
+        const caller = createCaller({ startRunScript, stopRunScript }, {
+            remoteAddress: '203.0.113.10',
+            origin: 'https://attacker.example',
+            isLocal: false,
+        });
+        await expect(caller.createFactoryConfig({ workspaceId: 'w1', config: { scripts: {} } })).rejects.toThrow('trusted local Factory Factory client');
+        await expect(caller.startRunScript({ workspaceId: 'w1' })).rejects.toThrow('trusted local Factory Factory client');
+        await expect(caller.stopRunScript({ workspaceId: 'w1' })).rejects.toThrow('trusted local Factory Factory client');
+        expect(mockFindByIdWithProject).not.toHaveBeenCalled();
+        expect(mockWriteFactoryConfigAndSyncWorkspace).not.toHaveBeenCalled();
+        expect(startRunScript).not.toHaveBeenCalled();
+        expect(stopRunScript).not.toHaveBeenCalled();
+    });
     it('returns trpc error when start/stop run script fails', async () => {
         const caller = createCaller({
             startRunScript: async () => ({ success: false, error: 'start failed' }),

package/dist/src/backend/trpc/workspace/run-script.router.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"run-script.router.test.js","sourceRoot":"","sources":["../../../../../src/backend/trpc/workspace/run-script.router.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC3E,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAEzE,MAAM,uBAAuB,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;AAC1D,MAAM,sCAAsC,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;AAEzE,EAAE,CAAC,IAAI,CAAC,8BAA8B,EAAE,GAAG,EAAE,CAAC,CAAC;IAC7C,oBAAoB,EAAE;QACpB,mBAAmB,EAAE,CAAC,GAAG,IAAe,EAAE,EAAE,CAAC,uBAAuB,CAAC,GAAG,IAAI,CAAC;KAC9E;CACF,CAAC,CAAC,CAAC;AAEJ,EAAE,CAAC,IAAI,CAAC,0DAA0D,EAAE,GAAG,EAAE,CAAC,CAAC;IACzE,iCAAiC,EAAE;QACjC,kCAAkC,EAAE,CAAC,GAAG,IAAe,EAAE,EAAE,CACzD,sCAAsC,CAAC,GAAG,IAAI,CAAC;KAClD;CACF,CAAC,CAAC,CAAC;AAEJ,OAAO,EAAE,wBAAwB,EAAE,MAAM,mBAAmB,CAAC;AAE7D,SAAS,YAAY,CAAC,gBAUrB;IACC,OAAO,wBAAwB,CAAC,YAAY,CAAC;QAC3C,UAAU,EAAE;YACV,QAAQ,EAAE;gBACR,gBAAgB,EAAE;oBAChB,cAAc,EAAE,gBAAgB,EAAE,cAAc,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;oBACrF,aAAa,EAAE,gBAAgB,EAAE,aAAa,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;oBACnF,kBAAkB,EAChB,gBAAgB,EAAE,kBAAkB;wBACpC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,CAAC;iBAC7D;aACF;SACF;KACO,CAAC,CAAC;AACd,CAAC;AAED,QAAQ,CAAC,0BAA0B,EAAE,GAAG,EAAE;IACxC,IAAI,YAAoB,CAAC;IACzB,IAAI,OAAe,CAAC;IAEpB,UAAU,CAAC,GAAG,EAAE;QACd,EAAE,CAAC,aAAa,EAAE,CAAC;QACnB,YAAY,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC;QACrD,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,UAAU,CAAC,CAAC,CAAC;QAClD,sCAAsC,CAAC,kBAAkB,CACvD,CAAC,KAWA,EAAE,EAAE;YACH,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YAC5D,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,sBAAsB,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC;YACvF,IAAI,KAAK,CAAC,eAAe,EAAE,CAAC;gBAC1B,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,eAAe,EAAE,sBAAsB,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC;YAC5F,CAAC;YACD,OAAO;gBACL,gBAAgB,EAAE,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,IAAI,IAAI;gBAClD,uBAAuB,EAAE,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,IAAI,IAAI;gBAC7D,uBAAuB,EAAE,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,IAAI,IAAI;aAC9D,CAAC;QACJ,CAAC,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,MAAM,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACvD,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;QACvE,uBAAuB,CAAC,iBAAiB,CAAC;YACxC,EAAE,EAAE,IAAI;YACR,YAAY,EAAE,YAAY;YAC1B,OAAO,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE;SAC/B,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;QAC9B,MAAM,MAAM,CACV,MAAM,CAAC,mBAAmB,CAAC;YACzB,WAAW,EAAE,IAAI;YACjB,MAAM,EAAE;gBACN,OAAO,EAAE;oBACP,GAAG,EAAE,UAAU;oBACf,OAAO,EAAE,YAAY;iBACtB;aACF;SACF,CAAC,CACH,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAEtC,MAAM,eAAe,GAAG,YAAY,CAAC,IAAI,CAAC,YAAY,EAAE,sBAAsB,CAAC,EAAE,MAAM,CAAC,CAAC;QACzF,MAAM,UAAU,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,sBAAsB,CAAC,EAAE,MAAM,CAAC,CAAC;QAC/E,MAAM,CAAC,eAAe,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QAC9C,MAAM,CAAC,UAAU,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QACzC,MAAM,CAAC,sCAAsC,CAAC,CAAC,oBAAoB,CAAC;YAClE,WAAW,EAAE,IAAI;YACjB,YAAY,EAAE,YAAY;YAC1B,eAAe,EAAE,OAAO;YACxB,MAAM,EAAE;gBACN,OAAO,EAAE;oBACP,GAAG,EAAE,UAAU;oBACf,OAAO,EAAE,YAAY;iBACtB;aACF;YACD,wBAAwB,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;SAC/C,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;QACrE,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;QAE9B,uBAAuB,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;QAChD,MAAM,MAAM,CACV,MAAM,CAAC,mBAAmB,CAAC,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,CAAC,CAChF,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;QAE/C,uBAAuB,CAAC,iBAAiB,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3F,MAAM,MAAM,CACV,MAAM,CAAC,mBAAmB,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,CAAC,CAC3E,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;QAC/D,MAAM,cAAc,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;YACxC,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,IAAI;YACV,GAAG,EAAE,MAAM;YACX,QAAQ,EAAE,uBAAuB;SAClC,CAAC,CAAC,CAAC;QACJ,MAAM,aAAa,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAC7D,MAAM,kBAAkB,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;QAEtE,MAAM,MAAM,GAAG,YAAY,CAAC,EAAE,cAAc,EAAE,aAAa,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAEnF,MAAM,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;YAC1E,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,IAAI;YACV,GAAG,EAAE,MAAM;YACX,QAAQ,EAAE,uBAAuB;SAClC,CAAC,CAAC;QACH,MAAM,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9F,MAAM,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;YAC9E,MAAM,EAAE,SAAS;SAClB,CAAC,CAAC;QAEH,MAAM,CAAC,cAAc,CAAC,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC;QAClD,MAAM,CAAC,aAAa,CAAC,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC;QACjD,MAAM,CAAC,kBAAkB,CAAC,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACnE,MAAM,MAAM,GAAG,YAAY,CAAC;YAC1B,cAAc,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;YACvE,aAAa,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC;SACtE,CAAC,CAAC;QAEH,MAAM,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;YAC/E,IAAI,EAAE,uBAAuB;SAC9B,CAAC,CAAC;QACH,MAAM,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;YAC9E,IAAI,EAAE,uBAAuB;SAC9B,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
+{"version":3,"file":"run-script.router.test.js","sourceRoot":"","sources":["../../../../../src/backend/trpc/workspace/run-script.router.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC3E,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAEzE,MAAM,uBAAuB,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;AAC1D,MAAM,sCAAsC,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;AAEzE,EAAE,CAAC,IAAI,CAAC,8BAA8B,EAAE,GAAG,EAAE,CAAC,CAAC;IAC7C,oBAAoB,EAAE;QACpB,mBAAmB,EAAE,CAAC,GAAG,IAAe,EAAE,EAAE,CAAC,uBAAuB,CAAC,GAAG,IAAI,CAAC;KAC9E;CACF,CAAC,CAAC,CAAC;AAEJ,EAAE,CAAC,IAAI,CAAC,0DAA0D,EAAE,GAAG,EAAE,CAAC,CAAC;IACzE,iCAAiC,EAAE;QACjC,kCAAkC,EAAE,CAAC,GAAG,IAAe,EAAE,EAAE,CACzD,sCAAsC,CAAC,GAAG,IAAI,CAAC;KAClD;CACF,CAAC,CAAC,CAAC;AAEJ,OAAO,EAAE,wBAAwB,EAAE,MAAM,mBAAmB,CAAC;AAE7D,SAAS,YAAY,CACnB,gBAUC,EACD,YAA4E;IAE5E,OAAO,wBAAwB,CAAC,YAAY,CAAC;QAC3C,YAAY;QACZ,UAAU,EAAE;YACV,QAAQ,EAAE;gBACR,aAAa,EAAE;oBACb,aAAa,EAAE,GAAG,EAAE,CAAC,CAAC;wBACpB,cAAc,EAAE,CAAC,uBAAuB,EAAE,uBAAuB,CAAC;qBACnE,CAAC;iBACH;gBACD,gBAAgB,EAAE;oBAChB,cAAc,EAAE,gBAAgB,EAAE,cAAc,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;oBACrF,aAAa,EAAE,gBAAgB,EAAE,aAAa,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;oBACnF,kBAAkB,EAChB,gBAAgB,EAAE,kBAAkB;wBACpC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,CAAC;iBAC7D;aACF;SACF;KACO,CAAC,CAAC;AACd,CAAC;AAED,QAAQ,CAAC,0BAA0B,EAAE,GAAG,EAAE;IACxC,IAAI,YAAoB,CAAC;IACzB,IAAI,OAAe,CAAC;IAEpB,UAAU,CAAC,GAAG,EAAE;QACd,EAAE,CAAC,aAAa,EAAE,CAAC;QACnB,YAAY,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC;QACrD,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,UAAU,CAAC,CAAC,CAAC;QAClD,sCAAsC,CAAC,kBAAkB,CACvD,CAAC,KAWA,EAAE,EAAE;YACH,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YAC5D,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,sBAAsB,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC;YACvF,IAAI,KAAK,CAAC,eAAe,EAAE,CAAC;gBAC1B,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,eAAe,EAAE,sBAAsB,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC;YAC5F,CAAC;YACD,OAAO;gBACL,gBAAgB,EAAE,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,IAAI,IAAI;gBAClD,uBAAuB,EAAE,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,IAAI,IAAI;gBAC7D,uBAAuB,EAAE,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,IAAI,IAAI;aAC9D,CAAC;QACJ,CAAC,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,MAAM,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACvD,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;QACvE,uBAAuB,CAAC,iBAAiB,CAAC;YACxC,EAAE,EAAE,IAAI;YACR,YAAY,EAAE,YAAY;YAC1B,OAAO,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE;SAC/B,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;QAC9B,MAAM,MAAM,CACV,MAAM,CAAC,mBAAmB,CAAC;YACzB,WAAW,EAAE,IAAI;YACjB,MAAM,EAAE;gBACN,OAAO,EAAE;oBACP,GAAG,EAAE,UAAU;oBACf,OAAO,EAAE,YAAY;iBACtB;aACF;SACF,CAAC,CACH,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAEtC,MAAM,eAAe,GAAG,YAAY,CAAC,IAAI,CAAC,YAAY,EAAE,sBAAsB,CAAC,EAAE,MAAM,CAAC,CAAC;QACzF,MAAM,UAAU,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,sBAAsB,CAAC,EAAE,MAAM,CAAC,CAAC;QAC/E,MAAM,CAAC,eAAe,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QAC9C,MAAM,CAAC,UAAU,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QACzC,MAAM,CAAC,sCAAsC,CAAC,CAAC,oBAAoB,CAAC;YAClE,WAAW,EAAE,IAAI;YACjB,YAAY,EAAE,YAAY;YAC1B,eAAe,EAAE,OAAO;YACxB,MAAM,EAAE;gBACN,OAAO,EAAE;oBACP,GAAG,EAAE,UAAU;oBACf,OAAO,EAAE,YAAY;iBACtB;aACF;YACD,wBAAwB,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;SAC/C,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;QACrE,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;QAE9B,uBAAuB,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;QAChD,MAAM,MAAM,CACV,MAAM,CAAC,mBAAmB,CAAC,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,CAAC,CAChF,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;QAE/C,uBAAuB,CAAC,iBAAiB,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3F,MAAM,MAAM,CACV,MAAM,CAAC,mBAAmB,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,CAAC,CAC3E,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;QAC/D,MAAM,cAAc,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;YACxC,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,IAAI;YACV,GAAG,EAAE,MAAM;YACX,QAAQ,EAAE,uBAAuB;SAClC,CAAC,CAAC,CAAC;QACJ,MAAM,aAAa,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAC7D,MAAM,kBAAkB,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;QAEtE,MAAM,MAAM,GAAG,YAAY,CAAC,EAAE,cAAc,EAAE,aAAa,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAEnF,MAAM,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;YAC1E,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,IAAI;YACV,GAAG,EAAE,MAAM;YACX,QAAQ,EAAE,uBAAuB;SAClC,CAAC,CAAC;QACH,MAAM,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9F,MAAM,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;YAC9E,MAAM,EAAE,SAAS;SAClB,CAAC,CAAC;QAEH,MAAM,CAAC,cAAc,CAAC,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC;QAClD,MAAM,CAAC,aAAa,CAAC,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC;QACjD,MAAM,CAAC,kBAAkB,CAAC,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iEAAiE,EAAE,KAAK,IAAI,EAAE;QAC/E,MAAM,cAAc,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAC9D,MAAM,aAAa,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAC7D,MAAM,MAAM,GAAG,YAAY,CACzB,EAAE,cAAc,EAAE,aAAa,EAAE,EACjC;YACE,aAAa,EAAE,cAAc;YAC7B,MAAM,EAAE,0BAA0B;YAClC,OAAO,EAAE,KAAK;SACf,CACF,CAAC;QAEF,MAAM,MAAM,CACV,MAAM,CAAC,mBAAmB,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,CAAC,CAC3E,CAAC,OAAO,CAAC,OAAO,CAAC,sCAAsC,CAAC,CAAC;QAC1D,MAAM,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CACxE,sCAAsC,CACvC,CAAC;QACF,MAAM,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CACvE,sCAAsC,CACvC,CAAC;QAEF,MAAM,CAAC,uBAAuB,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACvD,MAAM,CAAC,sCAAsC,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACtE,MAAM,CAAC,cAAc,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QAC9C,MAAM,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACnE,MAAM,MAAM,GAAG,YAAY,CAAC;YAC1B,cAAc,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;YACvE,aAAa,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC;SACtE,CAAC,CAAC;QAEH,MAAM,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;YAC/E,IAAI,EAAE,uBAAuB;SAC9B,CAAC,CAAC;QACH,MAAM,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;YAC9E,IAAI,EAAE,uBAAuB;SAC9B,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/src/backend/trpc/workspace/run-script.trpc.js

@@ -2,10 +2,10 @@ import { TRPCError } from '@trpc/server';
 import { z } from 'zod';
 import { runScriptConfigPersistenceService } from '../../../backend/services/run-script-config-persistence.service.js';
 import { workspaceDataService } from '../../../backend/services/workspace/index.js';
-import { publicProcedure, router } from '../../../backend/trpc/trpc.js';
+import { publicProcedure, router, trustedLocalProcedure } from '../../../backend/trpc/trpc.js';
 import { FactoryConfigSchema } from '../../../shared/schemas/factory-config.schema.js';
 export const workspaceRunScriptRouter = router({
-    createFactoryConfig: publicProcedure
+    createFactoryConfig: trustedLocalProcedure
         .input(z.object({
         workspaceId: z.string(),
         config: FactoryConfigSchema,
@@ -41,7 +41,7 @@ export const workspaceRunScriptRouter = router({
             });
         }
     }),
-    startRunScript: publicProcedure
+    startRunScript: trustedLocalProcedure
         .input(z.object({ workspaceId: z.string() }))
         .mutation(async ({ ctx, input }) => {
         const result = await ctx.appContext.services.runScriptService.startRunScript(input.workspaceId);
@@ -58,7 +58,7 @@ export const workspaceRunScriptRouter = router({
             proxyUrl: result.proxyUrl ?? null,
         };
     }),
-    stopRunScript: publicProcedure
+    stopRunScript: trustedLocalProcedure
         .input(z.object({ workspaceId: z.string() }))
         .mutation(async ({ ctx, input }) => {
         const result = await ctx.appContext.services.runScriptService.stopRunScript(input.workspaceId);

package/dist/src/backend/trpc/workspace/run-script.trpc.js.map

@@ -1 +1 @@
-{"version":3,"file":"run-script.trpc.js","sourceRoot":"","sources":["../../../../../src/backend/trpc/workspace/run-script.trpc.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,iCAAiC,EAAE,MAAM,0DAA0D,CAAC;AAC7G,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAC9D,OAAO,EAAE,mBAAmB,EAAE,MAAM,wCAAwC,CAAC;AAE7E,MAAM,CAAC,MAAM,wBAAwB,GAAG,MAAM,CAAC;IAE7C,mBAAmB,EAAE,eAAe;SACjC,KAAK,CACJ,CAAC,CAAC,MAAM,CAAC;QACP,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;QACvB,MAAM,EAAE,mBAAmB;KAC5B,CAAC,CACH;SACA,QAAQ,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;QAC5B,MAAM,SAAS,GAAG,MAAM,oBAAoB,CAAC,mBAAmB,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAEpF,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,SAAS,CAAC;gBAClB,IAAI,EAAE,WAAW;gBACjB,OAAO,EAAE,qBAAqB;aAC/B,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,CAAC;YAC5B,MAAM,IAAI,SAAS,CAAC;gBAClB,IAAI,EAAE,qBAAqB;gBAC3B,OAAO,EAAE,oCAAoC;aAC9C,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC;YACH,MAAM,iCAAiC,CAAC,kCAAkC,CAAC;gBACzE,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,YAAY,EAAE,SAAS,CAAC,YAAY;gBACpC,eAAe,EAAE,SAAS,CAAC,OAAO,EAAE,QAAQ;gBAC5C,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,wBAAwB,EAAE,CAAC,EAAE,EAAE,QAAQ,EAAE,EAAE,CACzC,oBAAoB,CAAC,oBAAoB,CACvC,EAAE,EACF,QAAQ,CAAC,gBAAgB,EACzB,QAAQ,CAAC,uBAAuB,EAChC,QAAQ,CAAC,uBAAuB,CACjC;aACJ,CAAC,CAAC;YAEH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,SAAS,CAAC;gBAClB,IAAI,EAAE,uBAAuB;gBAC7B,OAAO,EAAE,0CAA0C,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE;aAC9G,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC;IAEJ,cAAc,EAAE,eAAe;SAC5B,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;SAC5C,QAAQ,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE;QACjC,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,gBAAgB,CAAC,cAAc,CAC1E,KAAK,CAAC,WAAW,CAClB,CAAC;QAEF,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,IAAI,SAAS,CAAC;gBAClB,IAAI,EAAE,uBAAuB;gBAC7B,OAAO,EAAE,MAAM,CAAC,KAAK,IAAI,4BAA4B;aACtD,CAAC,CAAC;QACL,CAAC;QAED,OAAO;YACL,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,IAAI;SAClC,CAAC;IACJ,CAAC,CAAC;IAGJ,aAAa,EAAE,eAAe;SAC3B,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;SAC5C,QAAQ,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE;QACjC,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,gBAAgB,CAAC,aAAa,CACzE,KAAK,CAAC,WAAW,CAClB,CAAC;QAEF,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,IAAI,SAAS,CAAC;gBAClB,IAAI,EAAE,uBAAuB;gBAC7B,OAAO,EAAE,MAAM,CAAC,KAAK,IAAI,2BAA2B;aACrD,CAAC,CAAC;QACL,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC,CAAC;IAGJ,kBAAkB,EAAE,eAAe;SAChC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;SAC5C,KAAK,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,CACxB,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,gBAAgB,CAAC,kBAAkB,CAAC,KAAK,CAAC,WAAW,CAAC,CAC/E;CACJ,CAAC,CAAC"}
+{"version":3,"file":"run-script.trpc.js","sourceRoot":"","sources":["../../../../../src/backend/trpc/workspace/run-script.trpc.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,iCAAiC,EAAE,MAAM,0DAA0D,CAAC;AAC7G,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,EAAE,eAAe,EAAE,MAAM,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AACrF,OAAO,EAAE,mBAAmB,EAAE,MAAM,wCAAwC,CAAC;AAE7E,MAAM,CAAC,MAAM,wBAAwB,GAAG,MAAM,CAAC;IAE7C,mBAAmB,EAAE,qBAAqB;SACvC,KAAK,CACJ,CAAC,CAAC,MAAM,CAAC;QACP,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;QACvB,MAAM,EAAE,mBAAmB;KAC5B,CAAC,CACH;SACA,QAAQ,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;QAC5B,MAAM,SAAS,GAAG,MAAM,oBAAoB,CAAC,mBAAmB,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAEpF,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,SAAS,CAAC;gBAClB,IAAI,EAAE,WAAW;gBACjB,OAAO,EAAE,qBAAqB;aAC/B,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,CAAC;YAC5B,MAAM,IAAI,SAAS,CAAC;gBAClB,IAAI,EAAE,qBAAqB;gBAC3B,OAAO,EAAE,oCAAoC;aAC9C,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC;YACH,MAAM,iCAAiC,CAAC,kCAAkC,CAAC;gBACzE,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,YAAY,EAAE,SAAS,CAAC,YAAY;gBACpC,eAAe,EAAE,SAAS,CAAC,OAAO,EAAE,QAAQ;gBAC5C,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,wBAAwB,EAAE,CAAC,EAAE,EAAE,QAAQ,EAAE,EAAE,CACzC,oBAAoB,CAAC,oBAAoB,CACvC,EAAE,EACF,QAAQ,CAAC,gBAAgB,EACzB,QAAQ,CAAC,uBAAuB,EAChC,QAAQ,CAAC,uBAAuB,CACjC;aACJ,CAAC,CAAC;YAEH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,SAAS,CAAC;gBAClB,IAAI,EAAE,uBAAuB;gBAC7B,OAAO,EAAE,0CAA0C,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE;aAC9G,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC;IAEJ,cAAc,EAAE,qBAAqB;SAClC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;SAC5C,QAAQ,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE;QACjC,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,gBAAgB,CAAC,cAAc,CAC1E,KAAK,CAAC,WAAW,CAClB,CAAC;QAEF,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,IAAI,SAAS,CAAC;gBAClB,IAAI,EAAE,uBAAuB;gBAC7B,OAAO,EAAE,MAAM,CAAC,KAAK,IAAI,4BAA4B;aACtD,CAAC,CAAC;QACL,CAAC;QAED,OAAO;YACL,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,IAAI;SAClC,CAAC;IACJ,CAAC,CAAC;IAGJ,aAAa,EAAE,qBAAqB;SACjC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;SAC5C,QAAQ,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE;QACjC,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,gBAAgB,CAAC,aAAa,CACzE,KAAK,CAAC,WAAW,CAClB,CAAC;QAEF,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,IAAI,SAAS,CAAC;gBAClB,IAAI,EAAE,uBAAuB;gBAC7B,OAAO,EAAE,MAAM,CAAC,KAAK,IAAI,2BAA2B;aACrD,CAAC,CAAC;QACL,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC,CAAC;IAGJ,kBAAkB,EAAE,eAAe;SAChC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;SAC5C,KAAK,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,CACxB,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,gBAAgB,CAAC,kBAAkB,CAAC,KAAK,CAAC,WAAW,CAAC,CAC/E;CACJ,CAAC,CAAC"}

package/dist/src/backend/trpc/workspace/workspace-helpers.d.ts

@@ -72,12 +72,15 @@ export declare function getWorkspaceOrThrow(workspaceId: string): Promise<{
     ratchetLastCheckedAt: Date | null;
     ratchetActiveSessionId: string | null;
     ratchetLastCiRunId: string | null;
+    ratchetDispatchOutcome: import("../../../../prisma/generated/enums.js").RatchetDispatchOutcome | null;
+    ratchetDispatchRetryCount: number;
     mode: import("../../../../prisma/generated/enums.js").WorkspaceMode;
     autoIterationStatus: import("../../../../prisma/generated/enums.js").AutoIterationStatus | null;
     autoIterationConfig: import("@prisma/client/runtime/client").JsonValue | null;
     autoIterationProgress: import("@prisma/client/runtime/client").JsonValue | null;
     autoIterationSessionId: string | null;
     periodicTaskId: string | null;
+    parentWorkspaceId: string | null;
     hasHadSessions: boolean;
     cachedKanbanColumn: import("../../../../prisma/generated/enums.js").KanbanColumn;
     stateComputedAt: Date | null;
@@ -149,12 +152,15 @@ export declare function getWorkspaceWithProjectOrThrow(workspaceId: string): Pro
     ratchetLastCheckedAt: Date | null;
     ratchetActiveSessionId: string | null;
     ratchetLastCiRunId: string | null;
+    ratchetDispatchOutcome: import("../../../../prisma/generated/enums.js").RatchetDispatchOutcome | null;
+    ratchetDispatchRetryCount: number;
     mode: import("../../../../prisma/generated/enums.js").WorkspaceMode;
     autoIterationStatus: import("../../../../prisma/generated/enums.js").AutoIterationStatus | null;
     autoIterationConfig: import("@prisma/client/runtime/client").JsonValue | null;
     autoIterationProgress: import("@prisma/client/runtime/client").JsonValue | null;
     autoIterationSessionId: string | null;
     periodicTaskId: string | null;
+    parentWorkspaceId: string | null;
     hasHadSessions: boolean;
     cachedKanbanColumn: import("../../../../prisma/generated/enums.js").KanbanColumn;
     stateComputedAt: Date | null;

package/dist/src/backend/trpc/workspace/workspace-helpers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"workspace-helpers.d.ts","sourceRoot":"","sources":["../../../../../src/backend/trpc/workspace/workspace-helpers.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AAOpE,wBAAsB,mBAAmB,CAAC,WAAW,EAAE,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAS5D;AAOD,wBAAsB,8BAA8B,CAAC,WAAW,EAAE,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GASvE;AAKD,MAAM,WAAW,qBAAqB;IACpC,SAAS,EAAE,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,oBAAoB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IAClF,YAAY,EAAE,MAAM,CAAC;CACtB;AAQD,wBAAsB,wBAAwB,CAC5C,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC,CAQvC;AAQD,wBAAsB,+BAA+B,CACnD,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,qBAAqB,CAAC,CAWhC;AAKD,MAAM,WAAW,+BAA+B;IAC9C,SAAS,EAAE,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,oBAAoB,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC;IAC7F,YAAY,EAAE,MAAM,CAAC;CACtB;AAQD,wBAAsB,yCAAyC,CAC7D,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,+BAA+B,CAAC,CAiB1C"}
+{"version":3,"file":"workspace-helpers.d.ts","sourceRoot":"","sources":["../../../../../src/backend/trpc/workspace/workspace-helpers.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AAOpE,wBAAsB,mBAAmB,CAAC,WAAW,EAAE,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAS5D;AAOD,wBAAsB,8BAA8B,CAAC,WAAW,EAAE,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GASvE;AAKD,MAAM,WAAW,qBAAqB;IACpC,SAAS,EAAE,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,oBAAoB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IAClF,YAAY,EAAE,MAAM,CAAC;CACtB;AAQD,wBAAsB,wBAAwB,CAC5C,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC,CAQvC;AAQD,wBAAsB,+BAA+B,CACnD,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,qBAAqB,CAAC,CAWhC;AAKD,MAAM,WAAW,+BAA+B;IAC9C,SAAS,EAAE,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,oBAAoB,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC;IAC7F,YAAY,EAAE,MAAM,CAAC;CACtB;AAQD,wBAAsB,yCAAyC,CAC7D,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,+BAA+B,CAAC,CAiB1C"}

package/dist/src/backend/trpc/workspace.router.test.js

@@ -18,7 +18,9 @@ const mockWorkspaceQueryService = vi.hoisted(() => ({
 }));
 const mockDeriveFlowState = vi.hoisted(() => vi.fn());
 const mockWorkspaceCreationCreate = vi.hoisted(() => vi.fn());
+const mockClearWorkspaceActivity = vi.hoisted(() => vi.fn());
 const mockArchiveWorkspace = vi.hoisted(() => vi.fn());
+const mockCleanupWorkspaceRuntimeResources = vi.hoisted(() => vi.fn());
 const mockInitializeWorkspaceWorktree = vi.hoisted(() => vi.fn());
 const mockBuildSessionSummaries = vi.hoisted(() => vi.fn());
 const mockHasWorkingSessionSummary = vi.hoisted(() => vi.fn());
@@ -30,9 +32,24 @@ const mockCheckWorkspaceById = vi.hoisted(() => vi.fn());
 const mockSessionRuntimeSnapshot = vi.hoisted(() => vi.fn());
 const mockCreateAgentSession = vi.hoisted(() => vi.fn());
 const mockResolveProviderForWorkspaceCreation = vi.hoisted(() => vi.fn(async (_explicitProvider) => 'CLAUDE'));
+const mockFindByIdWithProject = vi.hoisted(() => vi.fn());
+const mockFindSessionsByWorkspaceId = vi.hoisted(() => vi.fn());
+const mockAppendClaudeEvent = vi.hoisted(() => vi.fn());
+const mockEmitDelta = vi.hoisted(() => vi.fn());
+const mockEnqueue = vi.hoisted(() => vi.fn());
+const mockHasQueuedMessage = vi.hoisted(() => vi.fn());
+const mockTryDispatchNextMessage = vi.hoisted(() => vi.fn());
+const mockPersistChildNotification = vi.hoisted(() => vi.fn());
+const mockPersistParentNotification = vi.hoisted(() => vi.fn());
 vi.mock('@/backend/services/workspace', () => ({
     workspaceDataService: mockWorkspaceDataService,
     workspaceQueryService: mockWorkspaceQueryService,
+    workspaceAccessor: {
+        findByIdWithProject: (...args) => mockFindByIdWithProject(...args),
+    },
+    workspaceActivityService: {
+        clearWorkspace: (...args) => mockClearWorkspaceActivity(...args),
+    },
     deriveWorkspaceFlowStateFromWorkspace: (...args) => mockDeriveFlowState(...args),
     computeKanbanColumn: (...args) => mockComputeKanbanColumn(...args),
     computePendingRequestType: (...args) => mockComputePendingRequestType(...args),
@@ -46,6 +63,10 @@ vi.mock('@/backend/services/session', () => ({
     },
     sessionDomainService: {
         getAllPendingRequests: () => new Map(),
+        appendClaudeEvent: (...args) => mockAppendClaudeEvent(...args),
+        emitDelta: (...args) => mockEmitDelta(...args),
+        enqueue: (...args) => mockEnqueue(...args),
+        hasQueuedMessage: (...args) => mockHasQueuedMessage(...args),
     },
     sessionDataService: {
         createAgentSession: (...args) => mockCreateAgentSession(...args),
@@ -53,6 +74,12 @@ vi.mock('@/backend/services/session', () => ({
     sessionProviderResolverService: {
         resolveProviderForWorkspaceCreation: (explicitProvider) => mockResolveProviderForWorkspaceCreation(explicitProvider),
     },
+    agentSessionAccessor: {
+        findByWorkspaceId: (...args) => mockFindSessionsByWorkspaceId(...args),
+    },
+    chatMessageHandlerService: {
+        tryDispatchNextMessage: (...args) => mockTryDispatchNextMessage(...args),
+    },
 }));
 vi.mock('@/backend/services/ratchet', () => ({
     ratchetService: {
@@ -69,10 +96,17 @@ vi.mock('@/shared/workspace-sidebar-status', () => ({
 }));
 vi.mock('@/backend/orchestration/workspace-archive.orchestrator', () => ({
     archiveWorkspace: (...args) => mockArchiveWorkspace(...args),
+    cleanupWorkspaceRuntimeResources: (...args) => mockCleanupWorkspaceRuntimeResources(...args),
 }));
 vi.mock('@/backend/orchestration/workspace-init.orchestrator', () => ({
     initializeWorkspaceWorktree: (...args) => mockInitializeWorkspaceWorktree(...args),
 }));
+vi.mock('@/backend/orchestration/workspace-children.orchestrator', () => ({
+    createChildWorkspace: vi.fn(),
+    fireLifecycleNotification: vi.fn(),
+    persistChildNotification: (...args) => mockPersistChildNotification(...args),
+    persistParentNotification: (...args) => mockPersistParentNotification(...args),
+}));
 vi.mock('./workspace/workspace-helpers', () => ({
     getWorkspaceWithProjectOrThrow: vi.fn(async (id) => ({
         id,
@@ -95,12 +129,13 @@ vi.mock('./workspace/run-script.trpc', () => ({
     workspaceRunScriptRouter: { _def: { procedures: {} } },
 }));
 import { workspaceRouter } from './workspace.trpc.js';
-function createCaller() {
+function createCaller(requestTrust) {
     const sessionService = {
         stopWorkspaceSessions: vi.fn(async () => undefined),
     };
     const runScriptService = {
-        stopRunScript: vi.fn(async () => undefined),
+        stopRunScript: vi.fn(async () => ({ success: true })),
+        evictWorkspaceBuffers: vi.fn(),
     };
     const terminalService = {
         destroyWorkspaceTerminals: vi.fn(),
@@ -114,11 +149,15 @@ function createCaller() {
         })),
     };
     const caller = workspaceRouter.createCaller({
+        requestTrust,
         appContext: {
             services: {
                 configService: {
                     getWorktreeBaseDir: () => '/tmp/worktrees',
                     getMaxSessionsPerWorkspace: () => 2,
+                    getCorsConfig: () => ({
+                        allowedOrigins: ['http://localhost:3000', 'http://localhost:3001'],
+                    }),
                 },
                 cliHealthService,
                 createLogger: () => ({
@@ -153,6 +192,23 @@ describe('workspaceRouter', () => {
         mockComputeKanbanColumn.mockReturnValue('WAITING');
         mockComputePendingRequestType.mockReturnValue(null);
         mockCreateAgentSession.mockResolvedValue({ id: 'session-1' });
+        mockCleanupWorkspaceRuntimeResources.mockImplementation(async (workspaceId, services, operation) => {
+            const cleanupResults = await Promise.allSettled([
+                services.sessionService.stopWorkspaceSessions(workspaceId),
+                (async () => {
+                    const result = await services.runScriptService.stopRunScript(workspaceId);
+                    if (!result.success) {
+                        throw new Error(result.error ?? 'Unknown run script stop failure');
+                    }
+                })(),
+                Promise.resolve().then(() => {
+                    services.terminalService.destroyWorkspaceTerminals(workspaceId);
+                }),
+            ]);
+            if (cleanupResults.some((result) => result.status === 'rejected')) {
+                throw new Error(`Failed to cleanup workspace resources before ${operation}`);
+            }
+        });
     });
     it('lists workspaces and returns enriched workspace details', async () => {
         const workspace = {
@@ -210,6 +266,27 @@ describe('workspaceRouter', () => {
         expect(mockCheckWorkspaceById).toHaveBeenCalledWith('w-created');
         await expect(caller.archive({ id: 'w-created' })).resolves.toEqual({ archived: true });
     });
+    it('rejects privileged workspace mutations from untrusted requests', async () => {
+        const { caller } = createCaller({
+            remoteAddress: '203.0.113.10',
+            origin: 'https://attacker.example',
+            isLocal: false,
+        });
+        await expect(caller.create({
+            type: 'MANUAL',
+            projectId: 'p1',
+            name: 'New Workspace',
+        })).rejects.toThrow('trusted local Factory Factory client');
+        await expect(caller.createChild({
+            parentWorkspaceId: 'parent-1',
+            projectId: 'p1',
+            name: 'Child Workspace',
+        })).rejects.toThrow('trusted local Factory Factory client');
+        expect(mockResolveProviderForWorkspaceCreation).not.toHaveBeenCalled();
+        expect(mockWorkspaceCreationCreate).not.toHaveBeenCalled();
+        expect(mockCreateAgentSession).not.toHaveBeenCalled();
+        expect(mockInitializeWorkspaceWorktree).not.toHaveBeenCalled();
+    });
     it('passes initial attachments through manual workspace creation', async () => {
         const { caller } = createCaller();
         mockWorkspaceCreationCreate.mockResolvedValue({ id: 'w-created' });
@@ -393,9 +470,22 @@ describe('workspaceRouter', () => {
         mockWorkspaceQueryService.hasChanges.mockResolvedValue({ hasChanges: true });
         const { caller, sessionService, runScriptService, terminalService } = createCaller();
         await expect(caller.delete({ id: 'w1' })).resolves.toEqual({ deleted: true });
+        expect(mockCleanupWorkspaceRuntimeResources).toHaveBeenCalledWith('w1', expect.objectContaining({
+            sessionService,
+            runScriptService,
+            terminalService,
+        }), 'delete');
         expect(sessionService.stopWorkspaceSessions).toHaveBeenCalledWith('w1');
         expect(runScriptService.stopRunScript).toHaveBeenCalledWith('w1');
+        expect(runScriptService.evictWorkspaceBuffers).toHaveBeenCalledWith('w1');
+        const evictionCallOrder = runScriptService.evictWorkspaceBuffers.mock.invocationCallOrder[0];
+        const deleteCallOrder = mockWorkspaceDataService.delete.mock.invocationCallOrder[0];
+        if (evictionCallOrder === undefined || deleteCallOrder === undefined) {
+            throw new Error('Expected buffer eviction and workspace deletion to be called');
+        }
+        expect(evictionCallOrder).toBeLessThan(deleteCallOrder);
         expect(terminalService.destroyWorkspaceTerminals).toHaveBeenCalledWith('w1');
+        expect(mockClearWorkspaceActivity).toHaveBeenCalledWith('w1');
         await expect(caller.refreshFactoryConfigs({ projectId: 'p1' })).resolves.toEqual({
             refreshed: 3,
         });
@@ -406,5 +496,191 @@ describe('workspaceRouter', () => {
         await expect(caller.syncAllPRStatuses({ projectId: 'p1' })).resolves.toEqual({ synced: 10 });
         await expect(caller.hasChanges({ workspaceId: 'w1' })).resolves.toEqual({ hasChanges: true });
     });
+    it('does not delete when run script cleanup reports failure', async () => {
+        const { caller, sessionService, runScriptService, terminalService } = createCaller();
+        runScriptService.stopRunScript.mockResolvedValue({ success: false, error: 'stop failed' });
+        await expect(caller.delete({ id: 'w1' })).rejects.toThrow('Failed to cleanup workspace resources before delete');
+        expect(sessionService.stopWorkspaceSessions).toHaveBeenCalledWith('w1');
+        expect(runScriptService.stopRunScript).toHaveBeenCalledWith('w1');
+        expect(runScriptService.evictWorkspaceBuffers).not.toHaveBeenCalled();
+        expect(terminalService.destroyWorkspaceTerminals).toHaveBeenCalledWith('w1');
+        expect(mockWorkspaceDataService.delete).not.toHaveBeenCalled();
+    });
+    it('does not delete when workspace session cleanup throws', async () => {
+        const { caller, sessionService, runScriptService, terminalService } = createCaller();
+        sessionService.stopWorkspaceSessions.mockRejectedValue(new Error('session cleanup failed'));
+        await expect(caller.delete({ id: 'w1' })).rejects.toThrow('Failed to cleanup workspace resources before delete');
+        expect(sessionService.stopWorkspaceSessions).toHaveBeenCalledWith('w1');
+        expect(runScriptService.stopRunScript).toHaveBeenCalledWith('w1');
+        expect(runScriptService.evictWorkspaceBuffers).not.toHaveBeenCalled();
+        expect(terminalService.destroyWorkspaceTerminals).toHaveBeenCalledWith('w1');
+        expect(mockWorkspaceDataService.delete).not.toHaveBeenCalled();
+    });
+    it('does not delete when terminal cleanup throws', async () => {
+        const { caller, sessionService, runScriptService, terminalService } = createCaller();
+        terminalService.destroyWorkspaceTerminals.mockImplementation(() => {
+            throw new Error('terminal cleanup failed');
+        });
+        await expect(caller.delete({ id: 'w1' })).rejects.toThrow('Failed to cleanup workspace resources before delete');
+        expect(sessionService.stopWorkspaceSessions).toHaveBeenCalledWith('w1');
+        expect(runScriptService.stopRunScript).toHaveBeenCalledWith('w1');
+        expect(runScriptService.evictWorkspaceBuffers).not.toHaveBeenCalled();
+        expect(terminalService.destroyWorkspaceTerminals).toHaveBeenCalledWith('w1');
+        expect(mockWorkspaceDataService.delete).not.toHaveBeenCalled();
+    });
+    describe('sendMessageToParent', () => {
+        const child = {
+            id: 'child-1',
+            name: 'Child WS',
+            parentWorkspaceId: 'parent-1',
+            project: { name: 'Child Project' },
+        };
+        beforeEach(() => {
+            mockFindByIdWithProject.mockResolvedValue(child);
+            mockPersistChildNotification.mockResolvedValue({
+                id: 'notif-1',
+                direction: 'CHILD_TO_PARENT',
+                sourceWorkspaceName: 'Child WS',
+                message: 'hello',
+            });
+            mockAppendClaudeEvent.mockReturnValue(1);
+            mockEnqueue.mockReturnValue({ position: 0 });
+            mockHasQueuedMessage.mockReturnValue(false);
+            mockTryDispatchNextMessage.mockResolvedValue(undefined);
+        });
+        it('persists the notification before live delivery to an active session', async () => {
+            mockFindSessionsByWorkspaceId.mockResolvedValue([{ id: 'sess-1', status: 'RUNNING' }]);
+            const { caller } = createCaller();
+            await expect(caller.sendMessageToParent({ childWorkspaceId: 'child-1', message: 'hello' })).resolves.toEqual({ delivered: true });
+            expect(mockPersistChildNotification).toHaveBeenCalledWith({
+                parentWorkspaceId: 'parent-1',
+                sourceWorkspaceId: 'child-1',
+                message: 'hello',
+            });
+            expect(mockEnqueue).toHaveBeenCalledWith('sess-1', expect.objectContaining({
+                id: 'workspace-notification-notif-1',
+                text: `[Message from child workspace "Child WS"]: hello\n\n<!-- factory-factory-workspace-notification:notif-1 -->`,
+            }));
+            expect(mockTryDispatchNextMessage).toHaveBeenCalledWith('sess-1');
+            const persistOrder = mockPersistChildNotification.mock.invocationCallOrder[0];
+            const enqueueOrder = mockEnqueue.mock.invocationCallOrder[0];
+            if (persistOrder === undefined || enqueueOrder === undefined) {
+                throw new Error('Expected both persist and enqueue to be called');
+            }
+            expect(persistOrder).toBeLessThan(enqueueOrder);
+        });
+        it('persists the notification and skips live delivery when no active session', async () => {
+            mockFindSessionsByWorkspaceId.mockResolvedValue([{ id: 'sess-1', status: 'STOPPED' }]);
+            const { caller } = createCaller();
+            await expect(caller.sendMessageToParent({ childWorkspaceId: 'child-1', message: 'hello' })).resolves.toEqual({ delivered: false });
+            expect(mockPersistChildNotification).toHaveBeenCalledWith({
+                parentWorkspaceId: 'parent-1',
+                sourceWorkspaceId: 'child-1',
+                message: 'hello',
+            });
+            expect(mockEnqueue).not.toHaveBeenCalled();
+            expect(mockTryDispatchNextMessage).not.toHaveBeenCalled();
+        });
+        it('leaves the notification pending when live enqueue fails', async () => {
+            mockFindSessionsByWorkspaceId.mockResolvedValue([{ id: 'sess-1', status: 'RUNNING' }]);
+            mockEnqueue.mockReturnValue({ error: 'queue full' });
+            const { caller } = createCaller();
+            await expect(caller.sendMessageToParent({ childWorkspaceId: 'child-1', message: 'hello' })).resolves.toEqual({ delivered: false });
+            expect(mockPersistChildNotification).toHaveBeenCalled();
+            expect(mockTryDispatchNextMessage).not.toHaveBeenCalled();
+        });
+        it('skips enqueue when session startup already queued the notification', async () => {
+            mockFindSessionsByWorkspaceId.mockResolvedValue([{ id: 'sess-1', status: 'RUNNING' }]);
+            mockHasQueuedMessage.mockReturnValue(true);
+            const { caller } = createCaller();
+            await expect(caller.sendMessageToParent({ childWorkspaceId: 'child-1', message: 'hello' })).resolves.toEqual({ delivered: true });
+            expect(mockHasQueuedMessage).toHaveBeenCalledWith('sess-1', 'workspace-notification-notif-1');
+            expect(mockEnqueue).not.toHaveBeenCalled();
+            expect(mockAppendClaudeEvent).not.toHaveBeenCalled();
+            expect(mockEmitDelta).not.toHaveBeenCalled();
+        });
+    });
+    describe('sendMessageToChild', () => {
+        const child = {
+            id: 'child-1',
+            name: 'Child WS',
+            parentWorkspaceId: 'parent-1',
+            project: { name: 'Child Project' },
+        };
+        const parent = {
+            id: 'parent-1',
+            name: 'Parent WS',
+            parentWorkspaceId: null,
+            project: { name: 'Parent Project' },
+        };
+        beforeEach(() => {
+            mockFindByIdWithProject.mockImplementation(async (id) => id === 'child-1' ? child : parent);
+            mockPersistParentNotification.mockResolvedValue({
+                id: 'notif-2',
+                direction: 'PARENT_TO_CHILD',
+                sourceWorkspaceName: 'Parent WS',
+                message: 'do this',
+            });
+            mockAppendClaudeEvent.mockReturnValue(1);
+            mockEnqueue.mockReturnValue({ position: 0 });
+            mockHasQueuedMessage.mockReturnValue(false);
+            mockTryDispatchNextMessage.mockResolvedValue(undefined);
+        });
+        it('persists the notification before live delivery to an active session', async () => {
+            mockFindSessionsByWorkspaceId.mockResolvedValue([{ id: 'sess-2', status: 'IDLE' }]);
+            const { caller } = createCaller();
+            await expect(caller.sendMessageToChild({
+                parentWorkspaceId: 'parent-1',
+                childWorkspaceId: 'child-1',
+                message: 'do this',
+            })).resolves.toEqual({ delivered: true });
+            expect(mockPersistParentNotification).toHaveBeenCalledWith({
+                parentWorkspaceId: 'parent-1',
+                targetChildWorkspaceId: 'child-1',
+                message: 'do this',
+            });
+            expect(mockEnqueue).toHaveBeenCalledWith('sess-2', expect.objectContaining({
+                id: 'workspace-notification-notif-2',
+                text: `[Message from parent workspace "Parent WS"]: do this\n\n<!-- factory-factory-workspace-notification:notif-2 -->`,
+            }));
+            expect(mockTryDispatchNextMessage).toHaveBeenCalledWith('sess-2');
+            const persistOrder = mockPersistParentNotification.mock.invocationCallOrder[0];
+            const enqueueOrder = mockEnqueue.mock.invocationCallOrder[0];
+            if (persistOrder === undefined || enqueueOrder === undefined) {
+                throw new Error('Expected both persist and enqueue to be called');
+            }
+            expect(persistOrder).toBeLessThan(enqueueOrder);
+        });
+        it('persists the notification and skips live delivery when no active session', async () => {
+            mockFindSessionsByWorkspaceId.mockResolvedValue([]);
+            const { caller } = createCaller();
+            await expect(caller.sendMessageToChild({
+                parentWorkspaceId: 'parent-1',
+                childWorkspaceId: 'child-1',
+                message: 'do this',
+            })).resolves.toEqual({ delivered: false });
+            expect(mockPersistParentNotification).toHaveBeenCalledWith({
+                parentWorkspaceId: 'parent-1',
+                targetChildWorkspaceId: 'child-1',
+                message: 'do this',
+            });
+            expect(mockEnqueue).not.toHaveBeenCalled();
+            expect(mockTryDispatchNextMessage).not.toHaveBeenCalled();
+        });
+        it('skips enqueue when session startup already queued the notification', async () => {
+            mockFindSessionsByWorkspaceId.mockResolvedValue([{ id: 'sess-2', status: 'IDLE' }]);
+            mockHasQueuedMessage.mockReturnValue(true);
+            const { caller } = createCaller();
+            await expect(caller.sendMessageToChild({
+                parentWorkspaceId: 'parent-1',
+                childWorkspaceId: 'child-1',
+                message: 'do this',
+            })).resolves.toEqual({ delivered: true });
+            expect(mockHasQueuedMessage).toHaveBeenCalledWith('sess-2', 'workspace-notification-notif-2');
+            expect(mockEnqueue).not.toHaveBeenCalled();
+            expect(mockAppendClaudeEvent).not.toHaveBeenCalled();
+            expect(mockEmitDelta).not.toHaveBeenCalled();
+        });
+    });
 });
 //# sourceMappingURL=workspace.router.test.js.map