kantban-cli 0.1.45 → 0.1.46

package/dist/{chunk-MKKHLFA5.js → chunk-SDMNXFPV.js}

@@ -13,20 +13,21 @@ async function runGate(gate, options = {}) {
   const start = Date.now();
   return new Promise((resolve) => {
     const [shell, shellPrefix] = shellArgs();
+    let timedOut = false;
+    let timer;
     const child = execFile(shell, [...shellPrefix, gate.run], {
-      timeout: timeoutMs,
       cwd: options.cwd,
       env: { ...process.env, ...options.env },
       maxBuffer: options.maxBuffer ?? 1024 * 1024
       // 1MB output cap
     }, (error, stdout, stderr) => {
+      if (timer) clearTimeout(timer);
       const duration_ms = Date.now() - start;
       const output = normalizeEol((stdout + stderr).trim());
-      const timed_out = error?.killed === true;
       const buffer_exceeded = error?.code === "ERR_CHILD_PROCESS_STDIO_MAXBUFFER";
-      if (error) {
+      if (error || timedOut) {
         let annotation = "";
-        if (timed_out) annotation = `
+        if (timedOut) annotation = `
 [TIMED OUT after ${timeoutMs}ms]`;
         else if (buffer_exceeded) annotation = `
 [OUTPUT TRUNCATED \u2014 buffer limit exceeded]`;
@@ -37,8 +38,8 @@ async function runGate(gate, options = {}) {
           duration_ms,
           output: output + annotation,
           stderr: normalizeEol(stderr.trim()),
-          exit_code: child.exitCode ?? (typeof error.code === "number" ? error.code : 1),
-          timed_out: timed_out || buffer_exceeded
+          exit_code: child.exitCode ?? (typeof error?.code === "number" ? error.code : timedOut ? 124 : 1),
+          timed_out: timedOut || buffer_exceeded
         });
         return;
       }
@@ -53,6 +54,21 @@ async function runGate(gate, options = {}) {
         timed_out: false
       });
     });
+    timer = setTimeout(() => {
+      timedOut = true;
+      try {
+        child.kill("SIGKILL");
+      } catch {
+      }
+      try {
+        child.stdout?.destroy();
+      } catch {
+      }
+      try {
+        child.stderr?.destroy();
+      } catch {
+      }
+    }, timeoutMs);
   });
 }
 function formatGateErrors(results) {
@@ -104,4 +120,4 @@ export {
   formatGateErrors,
   runGates
 };
-//# sourceMappingURL=chunk-MKKHLFA5.js.map
+//# sourceMappingURL=chunk-SDMNXFPV.js.map

package/dist/chunk-SDMNXFPV.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/lib/gate-runner.ts"],"sourcesContent":["import { execFile } from 'node:child_process';\nimport { parseTimeout } from './gate-config.js';\nimport { shellArgs, normalizeEol } from './platform.js';\nimport type { GateDefinition, GateResult } from '@kantban/types';\n\nexport interface RunOptions {\n  timeoutMs?: number;\n  totalTimeoutMs?: number;\n  cwd?: string;\n  env?: Record<string, string>;\n  maxBuffer?: number;\n}\n\nexport async function runGate(\n  gate: GateDefinition,\n  options: RunOptions = {},\n): Promise<GateResult> {\n  const timeoutMs = gate.timeout ? parseTimeout(gate.timeout) : (options.timeoutMs ?? 60_000);\n  const start = Date.now();\n\n  return new Promise<GateResult>((resolve) => {\n    // SECURITY: gate.run is an operator-authored shell command from pipeline.gates.yaml.\n    // It is executed with full process privileges via `sh -c`. This is intentional —\n    // gates are trusted operator code, not user input. If gate config sources are ever\n    // extended to accept user-supplied values, sanitization must be added here.\n    const [shell, shellPrefix] = shellArgs();\n\n    // We deliberately do NOT pass execFile's `timeout` option. Node's built-in\n    // timeout sends SIGTERM to the child but keeps the callback pending until\n    // stdio pipes close. If the gate forks a grandchild that inherits\n    // stdout/stderr (e.g. `npm run dev:pipeline &`, a stray browser, a vite\n    // dev server), those pipes never close and the callback never fires. We\n    // manage the timeout ourselves and force-destroy the pipes on expiration\n    // so the promise always resolves — which is what keeps the gate-proxy\n    // MCP message queue from deadlocking behind a hung gate.\n    let timedOut = false;\n    let timer: NodeJS.Timeout | undefined;\n\n    const child = execFile(shell, [...shellPrefix, gate.run], {\n      cwd: options.cwd,\n      env: { ...process.env, ...options.env },\n      maxBuffer: options.maxBuffer ?? 1024 * 1024, // 1MB output cap\n    }, (error, stdout, stderr) => {\n      if (timer) clearTimeout(timer);\n      const duration_ms = Date.now() - start;\n      const output = normalizeEol((stdout + stderr).trim());\n      const buffer_exceeded = (error as NodeJS.ErrnoException)?.code === 'ERR_CHILD_PROCESS_STDIO_MAXBUFFER';\n\n      if (error || timedOut) {\n        let annotation = '';\n        if (timedOut) annotation = `\\n[TIMED OUT after ${timeoutMs}ms]`;\n        else if (buffer_exceeded) annotation = `\\n[OUTPUT TRUNCATED — buffer limit exceeded]`;\n\n        resolve({\n          name: gate.name,\n          passed: false,\n          required: gate.required ?? true,\n          duration_ms,\n          output: output + annotation,\n          stderr: normalizeEol(stderr.trim()),\n          exit_code:\n            child.exitCode\n            ?? (typeof error?.code === 'number' ? error.code : timedOut ? 124 : 1),\n          timed_out: timedOut || buffer_exceeded,\n        });\n        return;\n      }\n\n      resolve({\n        name: gate.name,\n        passed: true,\n        required: gate.required ?? true,\n        duration_ms,\n        output,\n        stderr: normalizeEol(stderr.trim()),\n        exit_code: 0,\n        timed_out: false,\n      });\n    });\n\n    timer = setTimeout(() => {\n      timedOut = true;\n      try { child.kill('SIGKILL'); } catch { /* already exited */ }\n      try { child.stdout?.destroy(); } catch { /* already destroyed */ }\n      try { child.stderr?.destroy(); } catch { /* already destroyed */ }\n    }, timeoutMs);\n  });\n}\n\n/** Format gate failures into a structured error string for agent/CLI display. */\nexport function formatGateErrors(results: GateResult[]): string {\n  const failures = results.filter((r) => !r.passed);\n  if (failures.length === 0) return 'All gates passed.';\n\n  return failures\n    .map((r) => {\n      const lines = [`Gate \"${r.name}\" (${r.required ? 'required' : 'advisory'}): FAILED`];\n      lines.push(`  Exit code: ${r.exit_code}`);\n      if (r.timed_out) lines.push('  Timed out: yes');\n      if (r.output) {\n        const stderr = normalizeEol(r.output).split('\\n').slice(-20).join('\\n');\n        lines.push(`  Output:\\n    ${stderr.replace(/\\n/g, '\\n    ')}`);\n      }\n      return lines.join('\\n');\n    })\n    .join('\\n\\n');\n}\n\nexport async function runGates(\n  gates: GateDefinition[],\n  options: RunOptions = {},\n): Promise<GateResult[]> {\n  const results: GateResult[] = [];\n  const totalStart = Date.now();\n\n  for (const gate of gates) {\n    // Check total timeout\n    if (options.totalTimeoutMs) {\n      const elapsed = Date.now() - totalStart;\n      if (elapsed >= options.totalTimeoutMs) {\n        // Remaining gates get timed-out results\n        results.push({\n          name: gate.name,\n          passed: false,\n          required: gate.required ?? true,\n          duration_ms: 0,\n          output: '[SKIPPED — total timeout exceeded]',\n          stderr: '',\n          exit_code: -1,\n          timed_out: true,\n        });\n        continue;\n      }\n      // Reduce per-gate timeout by elapsed time\n      const remainingMs = options.totalTimeoutMs - elapsed;\n      const gateTimeout = gate.timeout ? parseTimeout(gate.timeout) : (options.timeoutMs ?? 60_000);\n      const effectiveTimeout = Math.min(gateTimeout, remainingMs);\n      results.push(await runGate(gate, { ...options, timeoutMs: effectiveTimeout }));\n    } else {\n      results.push(await runGate(gate, options));\n    }\n  }\n\n  return results;\n}\n"],"mappings":";;;;;;;;;AAAA,SAAS,gBAAgB;AAazB,eAAsB,QACpB,MACA,UAAsB,CAAC,GACF;AACrB,QAAM,YAAY,KAAK,UAAU,aAAa,KAAK,OAAO,IAAK,QAAQ,aAAa;AACpF,QAAM,QAAQ,KAAK,IAAI;AAEvB,SAAO,IAAI,QAAoB,CAAC,YAAY;AAK1C,UAAM,CAAC,OAAO,WAAW,IAAI,UAAU;AAUvC,QAAI,WAAW;AACf,QAAI;AAEJ,UAAM,QAAQ,SAAS,OAAO,CAAC,GAAG,aAAa,KAAK,GAAG,GAAG;AAAA,MACxD,KAAK,QAAQ;AAAA,MACb,KAAK,EAAE,GAAG,QAAQ,KAAK,GAAG,QAAQ,IAAI;AAAA,MACtC,WAAW,QAAQ,aAAa,OAAO;AAAA;AAAA,IACzC,GAAG,CAAC,OAAO,QAAQ,WAAW;AAC5B,UAAI,MAAO,cAAa,KAAK;AAC7B,YAAM,cAAc,KAAK,IAAI,IAAI;AACjC,YAAM,SAAS,cAAc,SAAS,QAAQ,KAAK,CAAC;AACpD,YAAM,kBAAmB,OAAiC,SAAS;AAEnE,UAAI,SAAS,UAAU;AACrB,YAAI,aAAa;AACjB,YAAI,SAAU,cAAa;AAAA,mBAAsB,SAAS;AAAA,iBACjD,gBAAiB,cAAa;AAAA;AAEvC,gBAAQ;AAAA,UACN,MAAM,KAAK;AAAA,UACX,QAAQ;AAAA,UACR,UAAU,KAAK,YAAY;AAAA,UAC3B;AAAA,UACA,QAAQ,SAAS;AAAA,UACjB,QAAQ,aAAa,OAAO,KAAK,CAAC;AAAA,UAClC,WACE,MAAM,aACF,OAAO,OAAO,SAAS,WAAW,MAAM,OAAO,WAAW,MAAM;AAAA,UACtE,WAAW,YAAY;AAAA,QACzB,CAAC;AACD;AAAA,MACF;AAEA,cAAQ;AAAA,QACN,MAAM,KAAK;AAAA,QACX,QAAQ;AAAA,QACR,UAAU,KAAK,YAAY;AAAA,QAC3B;AAAA,QACA;AAAA,QACA,QAAQ,aAAa,OAAO,KAAK,CAAC;AAAA,QAClC,WAAW;AAAA,QACX,WAAW;AAAA,MACb,CAAC;AAAA,IACH,CAAC;AAED,YAAQ,WAAW,MAAM;AACvB,iBAAW;AACX,UAAI;AAAE,cAAM,KAAK,SAAS;AAAA,MAAG,QAAQ;AAAA,MAAuB;AAC5D,UAAI;AAAE,cAAM,QAAQ,QAAQ;AAAA,MAAG,QAAQ;AAAA,MAA0B;AACjE,UAAI;AAAE,cAAM,QAAQ,QAAQ;AAAA,MAAG,QAAQ;AAAA,MAA0B;AAAA,IACnE,GAAG,SAAS;AAAA,EACd,CAAC;AACH;AAGO,SAAS,iBAAiB,SAA+B;AAC9D,QAAM,WAAW,QAAQ,OAAO,CAAC,MAAM,CAAC,EAAE,MAAM;AAChD,MAAI,SAAS,WAAW,EAAG,QAAO;AAElC,SAAO,SACJ,IAAI,CAAC,MAAM;AACV,UAAM,QAAQ,CAAC,SAAS,EAAE,IAAI,MAAM,EAAE,WAAW,aAAa,UAAU,WAAW;AACnF,UAAM,KAAK,gBAAgB,EAAE,SAAS,EAAE;AACxC,QAAI,EAAE,UAAW,OAAM,KAAK,kBAAkB;AAC9C,QAAI,EAAE,QAAQ;AACZ,YAAM,SAAS,aAAa,EAAE,MAAM,EAAE,MAAM,IAAI,EAAE,MAAM,GAAG,EAAE,KAAK,IAAI;AACtE,YAAM,KAAK;AAAA,MAAkB,OAAO,QAAQ,OAAO,QAAQ,CAAC,EAAE;AAAA,IAChE;AACA,WAAO,MAAM,KAAK,IAAI;AAAA,EACxB,CAAC,EACA,KAAK,MAAM;AAChB;AAEA,eAAsB,SACpB,OACA,UAAsB,CAAC,GACA;AACvB,QAAM,UAAwB,CAAC;AAC/B,QAAM,aAAa,KAAK,IAAI;AAE5B,aAAW,QAAQ,OAAO;AAExB,QAAI,QAAQ,gBAAgB;AAC1B,YAAM,UAAU,KAAK,IAAI,IAAI;AAC7B,UAAI,WAAW,QAAQ,gBAAgB;AAErC,gBAAQ,KAAK;AAAA,UACX,MAAM,KAAK;AAAA,UACX,QAAQ;AAAA,UACR,UAAU,KAAK,YAAY;AAAA,UAC3B,aAAa;AAAA,UACb,QAAQ;AAAA,UACR,QAAQ;AAAA,UACR,WAAW;AAAA,UACX,WAAW;AAAA,QACb,CAAC;AACD;AAAA,MACF;AAEA,YAAM,cAAc,QAAQ,iBAAiB;AAC7C,YAAM,cAAc,KAAK,UAAU,aAAa,KAAK,OAAO,IAAK,QAAQ,aAAa;AACtF,YAAM,mBAAmB,KAAK,IAAI,aAAa,WAAW;AAC1D,cAAQ,KAAK,MAAM,QAAQ,MAAM,EAAE,GAAG,SAAS,WAAW,iBAAiB,CAAC,CAAC;AAAA,IAC/E,OAAO;AACL,cAAQ,KAAK,MAAM,QAAQ,MAAM,OAAO,CAAC;AAAA,IAC3C;AAAA,EACF;AAEA,SAAO;AACT;","names":[]}

package/dist/index.js

@@ -31,10 +31,10 @@ async function main() {
     }
     case "pipeline": {
       if (args[0] === "stop") {
-        const { stopPipeline } = await import("./pipeline-GOM4OKNV.js");
+        const { stopPipeline } = await import("./pipeline-IT7LJXKA.js");
         await stopPipeline(args.slice(1));
       } else {
-        const { runPipeline } = await import("./pipeline-GOM4OKNV.js");
+        const { runPipeline } = await import("./pipeline-IT7LJXKA.js");
         await runPipeline(client, args);
       }
       break;

package/dist/lib/gate-proxy-server.js

@@ -5,7 +5,7 @@ import {
 import {
   formatGateErrors,
   runGates
-} from "../chunk-MKKHLFA5.js";
+} from "../chunk-SDMNXFPV.js";
 import {
   parseGateConfig,
   parseTimeout,
@@ -493,6 +493,7 @@ async function handleMessage(msg) {
 }
 var rl = createInterface({ input: process.stdin });
 var messageQueue = Promise.resolve();
+var HANDLER_TIMEOUT_MS = 15 * 60 * 1e3;
 rl.on("line", (line) => {
   const trimmed = line.trim();
   if (!trimmed) return;
@@ -507,9 +508,38 @@ rl.on("line", (line) => {
     });
     return;
   }
-  messageQueue = messageQueue.then(() => handleMessage(msg)).catch((err) => {
-    process.stderr.write(`gate-proxy-server: unhandled error in message handler: ${err instanceof Error ? err.message : String(err)}
+  messageQueue = messageQueue.then(() => {
+    let timer;
+    const timeout = new Promise((_, reject) => {
+      timer = setTimeout(
+        () => reject(new Error(`handler timed out after ${HANDLER_TIMEOUT_MS}ms`)),
+        HANDLER_TIMEOUT_MS
+      );
+    });
+    return Promise.race([handleMessage(msg), timeout]).finally(() => {
+      if (timer) clearTimeout(timer);
+    });
+  }).catch((err) => {
+    const message = err instanceof Error ? err.message : String(err);
+    process.stderr.write(`gate-proxy-server: handler failed: ${message}
 `);
+    if (msg.id !== void 0 && msg.id !== null) {
+      try {
+        sendResponse({
+          jsonrpc: "2.0",
+          id: msg.id,
+          error: {
+            code: -32603,
+            message: `gate-proxy handler error: ${message}`
+          }
+        });
+      } catch (sendErr) {
+        process.stderr.write(
+          `gate-proxy-server: failed to send error response: ${sendErr instanceof Error ? sendErr.message : String(sendErr)}
+`
+        );
+      }
+    }
   });
 });
 rl.on("close", () => {

package/dist/lib/gate-proxy-server.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/lib/gate-proxy-server.ts","../../src/lib/gate-proxy.ts"],"sourcesContent":["#!/usr/bin/env node\n\n/**\n * gate-proxy-server.ts — MCP stdio server for gate enforcement.\n *\n * Spawned by the pipeline orchestrator as a child process.  Reads gate config\n * from env vars, instantiates GateProxy, and exposes three MCP tools over\n * JSON-RPC on stdin/stdout:\n *\n *   - kantban_run_gates   — Run column gates and report results\n *   - kantban_move_ticket — Run gates then forward move to KantBan API\n *   - kantban_complete_task — Run gates then forward complete to KantBan API\n *\n * Uses raw JSON-RPC (no @modelcontextprotocol/sdk dependency).\n */\n\nimport { readFileSync } from 'node:fs';\nimport { createInterface } from 'node:readline';\nimport { parseGateConfig } from './gate-config.js';\nimport { runGates, formatGateErrors } from './gate-runner.js';\nimport { GateProxy } from './gate-proxy.js';\nimport { fetchWithRetry } from '../client.js';\nimport type { GateProxyDeps } from './gate-proxy.js';\n\n// ── UUID validation ──────────────────────────────────────────────────────\n\nconst UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;\n\nfunction validateUuid(value: unknown, name: string): string {\n  if (typeof value !== 'string' || !UUID_RE.test(value)) {\n    throw new Error(`Invalid ${name}: expected UUID, got \"${String(value)}\"`);\n  }\n  return value;\n}\n\n// ── env ──────────────────────────────────────────────────────────────────\n\nconst GATE_CONFIG_PATH = process.env['GATE_CONFIG_PATH'];\nconst COLUMN_ID = process.env['COLUMN_ID'];\nconst COLUMN_NAME = process.env['COLUMN_NAME'];\nconst PROJECT_ID = process.env['PROJECT_ID'];\nconst API_TOKEN = process.env['KANTBAN_API_TOKEN'];\nconst API_URL = process.env['KANTBAN_API_URL'];\n\nfunction requireEnv(name: string, value: string | undefined): string {\n  if (!value) {\n    process.stderr.write(`gate-proxy-server: missing required env var ${name}\\n`);\n    process.exit(1);\n  }\n  return value;\n}\n\nconst gateConfigPath = requireEnv('GATE_CONFIG_PATH', GATE_CONFIG_PATH);\nconst columnId = requireEnv('COLUMN_ID', COLUMN_ID);\nconst columnName = requireEnv('COLUMN_NAME', COLUMN_NAME);\nconst projectId = requireEnv('PROJECT_ID', PROJECT_ID);\nconst apiToken = requireEnv('KANTBAN_API_TOKEN', API_TOKEN);\nconst apiUrl = requireEnv('KANTBAN_API_URL', API_URL);\n\n// ── gate config ──────────────────────────────────────────────────────────\n\nconst yamlContent = readFileSync(gateConfigPath, 'utf-8');\nconst gateConfig = parseGateConfig(yamlContent);\n\n// GATE_CWD overrides the YAML settings.cwd — set by the orchestrator to the\n// agent's worktree path so gates run against the agent's checked-out code,\n// not the root repo.\nconst GATE_CWD = process.env['GATE_CWD'];\nif (GATE_CWD) {\n  if (!gateConfig.settings) gateConfig.settings = {};\n  gateConfig.settings.cwd = GATE_CWD;\n}\n\n// ── API helpers ──────────────────────────────────────────────────────────\n\nfunction apiHeaders(): Record<string, string> {\n  return {\n    'Authorization': `Bearer ${apiToken}`,\n    'Content-Type': 'application/json',\n    'X-KantBan-Via': 'cli-gate-proxy',\n  };\n}\n\nasync function apiPost(path: string, body: Record<string, unknown>): Promise<unknown> {\n  const url = new URL(path, apiUrl);\n  const res = await fetchWithRetry(url.toString(), {\n    method: 'POST',\n    headers: apiHeaders(),\n    body: JSON.stringify(body),\n  });\n  if (!res.ok) {\n    const text = await res.text();\n    throw new Error(`API error ${res.status}: ${text}`);\n  }\n  const json = (await res.json()) as { success: boolean; data: unknown };\n  if (!json.success) throw new Error('API responded with success: false');\n  return json.data;\n}\n\nasync function apiPatch(path: string, body: Record<string, unknown>): Promise<unknown> {\n  const url = new URL(path, apiUrl);\n  const res = await fetchWithRetry(url.toString(), {\n    method: 'PATCH',\n    headers: apiHeaders(),\n    body: JSON.stringify(body),\n  });\n  if (!res.ok) {\n    const text = await res.text();\n    throw new Error(`API error ${res.status}: ${text}`);\n  }\n  const json = (await res.json()) as { success: boolean; data: unknown };\n  if (!json.success) throw new Error('API responded with success: false');\n  return json.data;\n}\n\nasync function apiGet(path: string, params?: Record<string, string>): Promise<unknown> {\n  const url = new URL(path, apiUrl);\n  if (params) {\n    for (const [k, v] of Object.entries(params)) {\n      url.searchParams.set(k, v);\n    }\n  }\n  const res = await fetchWithRetry(url.toString(), {\n    headers: apiHeaders(),\n  });\n  if (!res.ok) {\n    const text = await res.text();\n    throw new Error(`API error ${res.status}: ${text}`);\n  }\n  const json = (await res.json()) as { success: boolean; data: unknown };\n  if (!json.success) throw new Error('API responded with success: false');\n  return json.data;\n}\n\n// ── GateProxy deps ──────────────────────────────────────────────────────\n\nconst deps: GateProxyDeps = {\n  runGates,\n\n  async forwardMoveTicket(args: Record<string, unknown>): Promise<unknown> {\n    const ticketProjectId = validateUuid(args['projectId'], 'projectId');\n    const ticketId = validateUuid(args['ticketId'], 'ticketId');\n    const body = { ...args };\n    delete body['projectId'];\n    delete body['ticketId'];\n    return apiPatch(`/projects/${ticketProjectId}/tickets/${ticketId}/move`, body);\n  },\n\n  async forwardCompleteTask(args: Record<string, unknown>): Promise<unknown> {\n    const projectId = validateUuid(args['projectId'], 'projectId');\n    const ticketId = validateUuid(args['ticketId'], 'ticketId');\n    const body = { ...args };\n    delete body['projectId'];\n    delete body['ticketId'];\n    return apiPost(`/projects/${projectId}/tickets/${ticketId}/complete`, body);\n  },\n\n  async getTicketGateWaivers(ticketId: string): Promise<string[]> {\n    try {\n      // Field values require both projectId and ticketId in the path.\n      // projectId is injected as an env var (PROJECT_ID) at server startup.\n      validateUuid(ticketId, 'ticketId');\n      const data = (await apiGet(`/projects/${projectId}/tickets/${ticketId}/field-values`)) as\n        Array<{ field_name: string; value: unknown }>;\n      const waiver = data.find((fv) => fv.field_name === 'gate_waiver');\n      if (!waiver) return [];\n      if (Array.isArray(waiver.value)) {\n        return waiver.value.filter((v): v is string => typeof v === 'string' && v.length > 0);\n      }\n      return [];\n    } catch (err) {\n      process.stderr.write(`gate-proxy-server: waiver fetch failed (running all gates): ${err instanceof Error ? err.message : String(err)}\\n`);\n      return [];\n    }\n  },\n\n  async getTicketDetails(ticketId: string): Promise<{ title: string; description: string }> {\n    try {\n      validateUuid(ticketId, 'ticketId');\n      const data = (await apiGet(`/projects/${projectId}/tickets/${ticketId}`)) as {\n        title?: string;\n        description?: string;\n      };\n      return {\n        title: data.title ?? '',\n        description: data.description ?? '',\n      };\n    } catch (err) {\n      process.stderr.write(\n        `gate-proxy-server: ticket details fetch failed: ${err instanceof Error ? err.message : String(err)}\\n`,\n      );\n      return { title: '', description: '' };\n    }\n  },\n\n  async getColumnType(columnIdArg: string): Promise<string | null> {\n    try {\n      validateUuid(columnIdArg, 'columnId');\n      const data = (await apiGet(`/projects/${projectId}/columns/${columnIdArg}`)) as {\n        type?: string;\n      };\n      return data.type ?? null;\n    } catch (err) {\n      process.stderr.write(\n        `gate-proxy-server: column type fetch failed for ${columnIdArg}: ${err instanceof Error ? err.message : String(err)}\\n`,\n      );\n      return null;\n    }\n  },\n};\n\nconst proxy = new GateProxy(gateConfig, deps);\n\n// ── JSON-RPC types ──────────────────────────────────────────────────────\n\ninterface JsonRpcRequest {\n  jsonrpc: '2.0';\n  id: number | string;\n  method: string;\n  params?: Record<string, unknown>;\n}\n\ninterface JsonRpcResponse {\n  jsonrpc: '2.0';\n  id: number | string | null;\n  result?: unknown;\n  error?: { code: number; message: string; data?: unknown };\n}\n\n// ── Tool definitions ────────────────────────────────────────────────────\n\nconst TOOLS = [\n  {\n    name: 'kantban_run_gates',\n    description:\n      'Run all configured gates for the current column and report results. ' +\n      'Use this to check gate status before attempting to move a ticket. ' +\n      'Pass ticketId to filter out waived gates for that ticket.',\n    inputSchema: {\n      type: 'object' as const,\n      properties: {\n        ticketId: { type: 'string', description: 'Ticket ID (UUID) — filters out waived gates for this ticket' },\n      },\n      required: [] as string[],\n    },\n  },\n  {\n    name: 'kantban_move_ticket',\n    description:\n      'Move a ticket to a different column. Gates are automatically enforced — ' +\n      'if any required gate fails, the move is blocked and failure details are returned.',\n    inputSchema: {\n      type: 'object' as const,\n      properties: {\n        projectId: { type: 'string', description: 'Project ID (UUID)' },\n        ticketId: { type: 'string', description: 'Ticket ID (UUID)' },\n        columnId: { type: 'string', description: 'Target column ID (UUID)' },\n        currentColumnName: { type: 'string', description: 'Current column name' },\n        handoff: {\n          type: 'object',\n          description: 'Structured handoff data for the next pipeline stage',\n          additionalProperties: true,\n        },\n      },\n      required: ['projectId', 'ticketId', 'columnId'],\n    },\n  },\n  {\n    name: 'kantban_complete_task',\n    description:\n      'Mark a ticket as complete. Gates are automatically enforced — ' +\n      'if any required gate fails, the completion is blocked and failure details are returned.',\n    inputSchema: {\n      type: 'object' as const,\n      properties: {\n        projectId: { type: 'string', description: 'Project ID (UUID)' },\n        ticketId: { type: 'string', description: 'Ticket ID (UUID)' },\n        currentColumnName: { type: 'string', description: 'Current column name' },\n        moveToColumn: { type: 'string', description: 'Column name to move the ticket to (e.g. \"Done\")' },\n        completionComment: { type: 'string', description: 'Comment to add upon completion' },\n        handoff: {\n          type: 'object',\n          description: 'Structured handoff data for the next pipeline stage',\n          additionalProperties: true,\n        },\n      },\n      required: ['projectId', 'ticketId'],\n    },\n  },\n];\n\n// ── Tool handlers ───────────────────────────────────────────────────────\n\nasync function handleToolCall(\n  name: string,\n  args: Record<string, unknown>,\n): Promise<{ content: Array<{ type: 'text'; text: string }>; isError?: boolean }> {\n  try {\n    switch (name) {\n      case 'kantban_run_gates': {\n        const ticketIdArg = args['ticketId'] as string | undefined;\n        if (ticketIdArg) validateUuid(ticketIdArg, 'ticketId');\n        const result = await proxy.handleRunGates(columnName, ticketIdArg);\n        return {\n          content: [{ type: 'text', text: JSON.stringify(result, null, 2) }],\n        };\n      }\n\n      case 'kantban_move_ticket': {\n        const moveProjectId = validateUuid(args['projectId'], 'projectId');\n        const moveTicketId = validateUuid(args['ticketId'], 'ticketId');\n        const moveColumnId = validateUuid(args['columnId'], 'columnId');\n        const result = await proxy.handleMoveTicket({\n          projectId: moveProjectId,\n          ticketId: moveTicketId,\n          columnId: moveColumnId,\n          currentColumnName: (args['currentColumnName'] as string | undefined) ?? columnName,\n          args: {\n            ...(args['handoff'] !== undefined ? { handoff: args['handoff'] } : {}),\n            ...(args['column_id'] !== undefined ? { column_id: args['column_id'] } : {}),\n          },\n        });\n        const isError = result.error === 'GATE_FAILURE';\n        if (isError && result.results) {\n          process.stderr.write(`gate-proxy-server: move blocked\\n${formatGateErrors(result.results)}`);\n        }\n        return {\n          content: [{ type: 'text', text: JSON.stringify(result, null, 2) }],\n          ...(isError ? { isError: true } : {}),\n        };\n      }\n\n      case 'kantban_complete_task': {\n        const completeProjectId = validateUuid(args['projectId'], 'projectId');\n        const completeTicketId = validateUuid(args['ticketId'], 'ticketId');\n        const result = await proxy.handleCompleteTask({\n          projectId: completeProjectId,\n          ticketId: completeTicketId,\n          currentColumnName: (args['currentColumnName'] as string | undefined) ?? columnName,\n          args: {\n            ...(args['moveToColumn'] !== undefined ? { moveToColumn: args['moveToColumn'] } : {}),\n            ...(args['completionComment'] !== undefined ? { completionComment: args['completionComment'] } : {}),\n            ...(args['handoff'] !== undefined ? { handoff: args['handoff'] } : {}),\n          },\n        });\n        const isError = result.error === 'GATE_FAILURE';\n        if (isError && result.results) {\n          process.stderr.write(`gate-proxy-server: complete blocked\\n${formatGateErrors(result.results)}`);\n        }\n        return {\n          content: [{ type: 'text', text: JSON.stringify(result, null, 2) }],\n          ...(isError ? { isError: true } : {}),\n        };\n      }\n\n      default:\n        return {\n          content: [{ type: 'text', text: `Unknown tool: ${name}` }],\n          isError: true,\n        };\n    }\n  } catch (err) {\n    const message = err instanceof Error ? err.message : String(err);\n    return {\n      content: [{ type: 'text', text: `Error: ${message}` }],\n      isError: true,\n    };\n  }\n}\n\n// ── JSON-RPC dispatch ───────────────────────────────────────────────────\n\nfunction sendResponse(response: JsonRpcResponse): void {\n  const json = JSON.stringify(response);\n  process.stdout.write(json + '\\n');\n}\n\nasync function handleMessage(msg: JsonRpcRequest): Promise<void> {\n  const { id, method, params } = msg;\n\n  switch (method) {\n    case 'initialize': {\n      sendResponse({\n        jsonrpc: '2.0',\n        id,\n        result: {\n          protocolVersion: '2024-11-05',\n          capabilities: { tools: {} },\n          serverInfo: {\n            name: 'kantban-gates',\n            version: '0.1.0',\n          },\n        },\n      });\n      return;\n    }\n\n    case 'notifications/initialized': {\n      // Client acknowledgement — no response needed for notifications\n      return;\n    }\n\n    case 'tools/list': {\n      sendResponse({\n        jsonrpc: '2.0',\n        id,\n        result: { tools: TOOLS },\n      });\n      return;\n    }\n\n    case 'tools/call': {\n      const toolName = params?.['name'] as string | undefined;\n      const toolArgs = (params?.['arguments'] as Record<string, unknown> | undefined) ?? {};\n\n      if (!toolName) {\n        sendResponse({\n          jsonrpc: '2.0',\n          id,\n          error: { code: -32602, message: 'Missing tool name' },\n        });\n        return;\n      }\n\n      const result = await handleToolCall(toolName, toolArgs);\n      sendResponse({\n        jsonrpc: '2.0',\n        id,\n        result,\n      });\n      return;\n    }\n\n    case 'ping': {\n      sendResponse({ jsonrpc: '2.0', id, result: {} });\n      return;\n    }\n\n    default: {\n      // Unknown method — return method not found per JSON-RPC spec\n      if (method.startsWith('notifications/')) {\n        // Notifications don't get responses\n        return;\n      }\n      sendResponse({\n        jsonrpc: '2.0',\n        id,\n        error: { code: -32601, message: `Method not found: ${method}` },\n      });\n    }\n  }\n}\n\n// ── stdin reader ────────────────────────────────────────────────────────\n\nconst rl = createInterface({ input: process.stdin });\n\n// Serialize message processing to prevent concurrent double-moves\nlet messageQueue: Promise<void> = Promise.resolve();\n\nrl.on('line', (line: string) => {\n  const trimmed = line.trim();\n  if (!trimmed) return;\n\n  let msg: JsonRpcRequest;\n  try {\n    msg = JSON.parse(trimmed) as JsonRpcRequest;\n  } catch {\n    sendResponse({\n      jsonrpc: '2.0',\n      id: null as unknown as number,\n      error: { code: -32700, message: 'Parse error' },\n    });\n    return;\n  }\n\n  messageQueue = messageQueue.then(() => handleMessage(msg)).catch((err) => {\n    process.stderr.write(`gate-proxy-server: unhandled error in message handler: ${err instanceof Error ? err.message : String(err)}\\n`);\n  });\n});\n\nrl.on('close', () => {\n  process.exit(0);\n});\n\n// Suppress unhandled rejection crashes — log to stderr and continue\nprocess.on('unhandledRejection', (err) => {\n  process.stderr.write(\n    `gate-proxy-server: unhandled rejection: ${err instanceof Error ? err.message : String(err)}\\n`,\n  );\n});\n\nprocess.stderr.write(`gate-proxy-server: started (column=\"${columnName}\", gates=${gateConfig.default.length})\\n`);\n","import { resolveGatesForColumn, parseTimeout } from './gate-config.js';\nimport { formatGateErrors } from './gate-runner.js';\nimport type { GateConfig, GateDefinition, GateResult } from '@kantban/types';\n\nexport interface GateProxyDeps {\n  runGates: (gates: GateDefinition[], options?: { cwd?: string; env?: Record<string, string>; totalTimeoutMs?: number }) => Promise<GateResult[]>;\n  forwardMoveTicket: (args: Record<string, unknown>) => Promise<unknown>;\n  forwardCompleteTask: (args: Record<string, unknown>) => Promise<unknown>;\n  getTicketGateWaivers: (ticketId: string) => Promise<string[]>;\n  getTicketDetails: (ticketId: string) => Promise<{ title: string; description: string }>;\n  /**\n   * Fetch the type of a column (`start`, `in_progress`, `done`, `default`).\n   * Used to bypass gates on moves into terminal columns — gates enforce\n   * \"work in the source column is complete\", but entering a `done` column\n   * is by definition post-work cleanup, and running source-column gates at\n   * that point can strand tickets in Escalation when main is transiently\n   * broken (the merge commit has already been pushed; the ticket just\n   * needs to follow).\n   */\n  getColumnType: (columnId: string) => Promise<string | null>;\n}\n\nexport interface RunGatesResult {\n  passed: boolean;\n  results: GateResult[];\n}\n\nexport interface MoveArgs {\n  projectId: string;\n  ticketId: string;\n  columnId: string;\n  currentColumnName: string;\n  args: Record<string, unknown>;\n}\n\nexport interface CompleteArgs {\n  projectId: string;\n  ticketId: string;\n  currentColumnName: string;\n  args: Record<string, unknown>;\n}\n\nexport interface InterceptResult {\n  error?: 'GATE_FAILURE';\n  message?: string;\n  formatted?: string;\n  results?: GateResult[];\n  hint?: string;\n  forwardResult?: unknown;\n}\n\nexport class GateProxy {\n  private config: GateConfig;\n  private deps: GateProxyDeps;\n\n  constructor(config: GateConfig, deps: GateProxyDeps) {\n    this.config = config;\n    this.deps = deps;\n  }\n\n  private async buildTicketEnv(\n    ticketId: string,\n    projectId: string,\n    columnName: string,\n  ): Promise<Record<string, string>> {\n    const details = await this.deps.getTicketDetails(ticketId);\n    return {\n      KANTBAN_TICKET_ID: ticketId,\n      KANTBAN_TICKET_TITLE: details.title,\n      KANTBAN_TICKET_DESCRIPTION: details.description,\n      KANTBAN_TICKET_COLUMN: columnName,\n      KANTBAN_PROJECT_ID: projectId,\n    };\n  }\n\n  private buildRunOptions(): { cwd?: string; env?: Record<string, string>; totalTimeoutMs?: number } {\n    const opts: { cwd?: string; env?: Record<string, string>; totalTimeoutMs?: number } = {};\n    if (this.config.settings?.cwd !== undefined) opts.cwd = this.config.settings.cwd;\n    if (this.config.settings?.env !== undefined) opts.env = this.config.settings.env;\n    if (this.config.settings?.total_timeout !== undefined) {\n      opts.totalTimeoutMs = parseTimeout(this.config.settings.total_timeout);\n    }\n    return opts;\n  }\n\n  async handleRunGates(columnName: string, ticketId?: string): Promise<RunGatesResult> {\n    const allGates = resolveGatesForColumn(this.config, columnName);\n\n    let gates = allGates;\n    if (ticketId) {\n      const waivers = await this.deps.getTicketGateWaivers(ticketId);\n      const waiverSet = new Set(waivers);\n      gates = allGates.filter((g) => !waiverSet.has(g.name));\n    }\n\n    const results = await this.deps.runGates(gates, this.buildRunOptions());\n    return {\n      passed: results.filter((r) => r.required).every((r) => r.passed),\n      results,\n    };\n  }\n\n  async handleMoveTicket(move: MoveArgs): Promise<InterceptResult> {\n    // Terminal-column bypass: moves INTO a `done`-type column are post-work\n    // cleanup, not work-in-progress. Running source-column gates at this\n    // point can strand tickets (classic scenario: Merge agent successfully\n    // pushes feature branch to main, then this move-to-Done runs the merge\n    // column's gates against a transiently-broken main and fails — but the\n    // push already happened, so the ticket MUST follow to Done). Gates\n    // enforce entry criteria when work arrives at a column; terminal\n    // columns have no further work to gate.\n    try {\n      const targetType = await this.deps.getColumnType(move.columnId);\n      if (targetType === 'done') {\n        const forwardResult = await this.deps.forwardMoveTicket({\n          ...move.args,\n          projectId: move.projectId,\n          ticketId: move.ticketId,\n          column_id: move.columnId,\n        });\n        return { forwardResult };\n      }\n    } catch {\n      // If the type lookup fails, fall through to the normal gate path so\n      // behavior stays conservative (gates enforced by default).\n    }\n\n    const allGates = resolveGatesForColumn(this.config, move.currentColumnName);\n\n    // Filter out waived gates\n    const waivers = await this.deps.getTicketGateWaivers(move.ticketId);\n    const waiverSet = new Set(waivers);\n    const gates = allGates.filter((g) => !waiverSet.has(g.name));\n\n    let results: GateResult[];\n    try {\n      const opts = this.buildRunOptions();\n      const ticketEnv = await this.buildTicketEnv(move.ticketId, move.projectId, move.currentColumnName);\n      opts.env = { ...opts.env, ...ticketEnv };\n      results = await this.deps.runGates(gates, opts);\n    } catch (err) {\n      return {\n        error: 'GATE_FAILURE',\n        message: `Gate evaluation error: ${err instanceof Error ? err.message : String(err)}`,\n        hint: 'Fix the gate environment and retry',\n      };\n    }\n\n    const requiredFailures = results.filter((r) => r.required && !r.passed);\n    if (requiredFailures.length > 0) {\n      return {\n        error: 'GATE_FAILURE',\n        message: `Cannot move ticket — ${requiredFailures.length} required gate(s) failed`,\n        formatted: formatGateErrors(results.filter((r) => r.required)),\n        results,\n        hint: 'Fix the failing gate(s) and try move_ticket again',\n      };\n    }\n\n    const forwardResult = await this.deps.forwardMoveTicket({\n      ...move.args,\n      projectId: move.projectId,\n      ticketId: move.ticketId,\n      column_id: move.columnId,\n    });\n\n    return { forwardResult };\n  }\n\n  async handleCompleteTask(complete: CompleteArgs): Promise<InterceptResult> {\n    const allGates = resolveGatesForColumn(this.config, complete.currentColumnName);\n    const waivers = await this.deps.getTicketGateWaivers(complete.ticketId);\n    const waiverSet = new Set(waivers);\n    const gates = allGates.filter((g) => !waiverSet.has(g.name));\n\n    let results: GateResult[];\n    try {\n      const opts = this.buildRunOptions();\n      const ticketEnv = await this.buildTicketEnv(complete.ticketId, complete.projectId, complete.currentColumnName);\n      opts.env = { ...opts.env, ...ticketEnv };\n      results = await this.deps.runGates(gates, opts);\n    } catch (err) {\n      return {\n        error: 'GATE_FAILURE',\n        message: `Gate evaluation error: ${err instanceof Error ? err.message : String(err)}`,\n        hint: 'Fix the gate environment and retry',\n      };\n    }\n\n    const requiredFailures = results.filter((r) => r.required && !r.passed);\n    if (requiredFailures.length > 0) {\n      return {\n        error: 'GATE_FAILURE',\n        message: `Cannot complete task — ${requiredFailures.length} required gate(s) failed`,\n        formatted: formatGateErrors(results.filter((r) => r.required)),\n        results,\n        hint: 'Fix the failing gate(s) and try complete_task again',\n      };\n    }\n\n    const forwardResult = await this.deps.forwardCompleteTask({\n      ...complete.args,\n      projectId: complete.projectId,\n      ticketId: complete.ticketId,\n    });\n\n    return { forwardResult };\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;AAgBA,SAAS,oBAAoB;AAC7B,SAAS,uBAAuB;;;ACkCzB,IAAM,YAAN,MAAgB;AAAA,EACb;AAAA,EACA;AAAA,EAER,YAAY,QAAoBA,OAAqB;AACnD,SAAK,SAAS;AACd,SAAK,OAAOA;AAAA,EACd;AAAA,EAEA,MAAc,eACZ,UACAC,YACAC,aACiC;AACjC,UAAM,UAAU,MAAM,KAAK,KAAK,iBAAiB,QAAQ;AACzD,WAAO;AAAA,MACL,mBAAmB;AAAA,MACnB,sBAAsB,QAAQ;AAAA,MAC9B,4BAA4B,QAAQ;AAAA,MACpC,uBAAuBA;AAAA,MACvB,oBAAoBD;AAAA,IACtB;AAAA,EACF;AAAA,EAEQ,kBAA2F;AACjG,UAAM,OAAgF,CAAC;AACvF,QAAI,KAAK,OAAO,UAAU,QAAQ,OAAW,MAAK,MAAM,KAAK,OAAO,SAAS;AAC7E,QAAI,KAAK,OAAO,UAAU,QAAQ,OAAW,MAAK,MAAM,KAAK,OAAO,SAAS;AAC7E,QAAI,KAAK,OAAO,UAAU,kBAAkB,QAAW;AACrD,WAAK,iBAAiB,aAAa,KAAK,OAAO,SAAS,aAAa;AAAA,IACvE;AACA,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,eAAeC,aAAoB,UAA4C;AACnF,UAAM,WAAW,sBAAsB,KAAK,QAAQA,WAAU;AAE9D,QAAI,QAAQ;AACZ,QAAI,UAAU;AACZ,YAAM,UAAU,MAAM,KAAK,KAAK,qBAAqB,QAAQ;AAC7D,YAAM,YAAY,IAAI,IAAI,OAAO;AACjC,cAAQ,SAAS,OAAO,CAAC,MAAM,CAAC,UAAU,IAAI,EAAE,IAAI,CAAC;AAAA,IACvD;AAEA,UAAM,UAAU,MAAM,KAAK,KAAK,SAAS,OAAO,KAAK,gBAAgB,CAAC;AACtE,WAAO;AAAA,MACL,QAAQ,QAAQ,OAAO,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM;AAAA,MAC/D;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,iBAAiB,MAA0C;AAS/D,QAAI;AACF,YAAM,aAAa,MAAM,KAAK,KAAK,cAAc,KAAK,QAAQ;AAC9D,UAAI,eAAe,QAAQ;AACzB,cAAMC,iBAAgB,MAAM,KAAK,KAAK,kBAAkB;AAAA,UACtD,GAAG,KAAK;AAAA,UACR,WAAW,KAAK;AAAA,UAChB,UAAU,KAAK;AAAA,UACf,WAAW,KAAK;AAAA,QAClB,CAAC;AACD,eAAO,EAAE,eAAAA,eAAc;AAAA,MACzB;AAAA,IACF,QAAQ;AAAA,IAGR;AAEA,UAAM,WAAW,sBAAsB,KAAK,QAAQ,KAAK,iBAAiB;AAG1E,UAAM,UAAU,MAAM,KAAK,KAAK,qBAAqB,KAAK,QAAQ;AAClE,UAAM,YAAY,IAAI,IAAI,OAAO;AACjC,UAAM,QAAQ,SAAS,OAAO,CAAC,MAAM,CAAC,UAAU,IAAI,EAAE,IAAI,CAAC;AAE3D,QAAI;AACJ,QAAI;AACF,YAAM,OAAO,KAAK,gBAAgB;AAClC,YAAM,YAAY,MAAM,KAAK,eAAe,KAAK,UAAU,KAAK,WAAW,KAAK,iBAAiB;AACjG,WAAK,MAAM,EAAE,GAAG,KAAK,KAAK,GAAG,UAAU;AACvC,gBAAU,MAAM,KAAK,KAAK,SAAS,OAAO,IAAI;AAAA,IAChD,SAAS,KAAK;AACZ,aAAO;AAAA,QACL,OAAO;AAAA,QACP,SAAS,0BAA0B,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC;AAAA,QACnF,MAAM;AAAA,MACR;AAAA,IACF;AAEA,UAAM,mBAAmB,QAAQ,OAAO,CAAC,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM;AACtE,QAAI,iBAAiB,SAAS,GAAG;AAC/B,aAAO;AAAA,QACL,OAAO;AAAA,QACP,SAAS,6BAAwB,iBAAiB,MAAM;AAAA,QACxD,WAAW,iBAAiB,QAAQ,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC;AAAA,QAC7D;AAAA,QACA,MAAM;AAAA,MACR;AAAA,IACF;AAEA,UAAM,gBAAgB,MAAM,KAAK,KAAK,kBAAkB;AAAA,MACtD,GAAG,KAAK;AAAA,MACR,WAAW,KAAK;AAAA,MAChB,UAAU,KAAK;AAAA,MACf,WAAW,KAAK;AAAA,IAClB,CAAC;AAED,WAAO,EAAE,cAAc;AAAA,EACzB;AAAA,EAEA,MAAM,mBAAmB,UAAkD;AACzE,UAAM,WAAW,sBAAsB,KAAK,QAAQ,SAAS,iBAAiB;AAC9E,UAAM,UAAU,MAAM,KAAK,KAAK,qBAAqB,SAAS,QAAQ;AACtE,UAAM,YAAY,IAAI,IAAI,OAAO;AACjC,UAAM,QAAQ,SAAS,OAAO,CAAC,MAAM,CAAC,UAAU,IAAI,EAAE,IAAI,CAAC;AAE3D,QAAI;AACJ,QAAI;AACF,YAAM,OAAO,KAAK,gBAAgB;AAClC,YAAM,YAAY,MAAM,KAAK,eAAe,SAAS,UAAU,SAAS,WAAW,SAAS,iBAAiB;AAC7G,WAAK,MAAM,EAAE,GAAG,KAAK,KAAK,GAAG,UAAU;AACvC,gBAAU,MAAM,KAAK,KAAK,SAAS,OAAO,IAAI;AAAA,IAChD,SAAS,KAAK;AACZ,aAAO;AAAA,QACL,OAAO;AAAA,QACP,SAAS,0BAA0B,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC;AAAA,QACnF,MAAM;AAAA,MACR;AAAA,IACF;AAEA,UAAM,mBAAmB,QAAQ,OAAO,CAAC,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM;AACtE,QAAI,iBAAiB,SAAS,GAAG;AAC/B,aAAO;AAAA,QACL,OAAO;AAAA,QACP,SAAS,+BAA0B,iBAAiB,MAAM;AAAA,QAC1D,WAAW,iBAAiB,QAAQ,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC;AAAA,QAC7D;AAAA,QACA,MAAM;AAAA,MACR;AAAA,IACF;AAEA,UAAM,gBAAgB,MAAM,KAAK,KAAK,oBAAoB;AAAA,MACxD,GAAG,SAAS;AAAA,MACZ,WAAW,SAAS;AAAA,MACpB,UAAU,SAAS;AAAA,IACrB,CAAC;AAED,WAAO,EAAE,cAAc;AAAA,EACzB;AACF;;;ADtLA,IAAM,UAAU;AAEhB,SAAS,aAAa,OAAgB,MAAsB;AAC1D,MAAI,OAAO,UAAU,YAAY,CAAC,QAAQ,KAAK,KAAK,GAAG;AACrD,UAAM,IAAI,MAAM,WAAW,IAAI,yBAAyB,OAAO,KAAK,CAAC,GAAG;AAAA,EAC1E;AACA,SAAO;AACT;AAIA,IAAM,mBAAmB,QAAQ,IAAI,kBAAkB;AACvD,IAAM,YAAY,QAAQ,IAAI,WAAW;AACzC,IAAM,cAAc,QAAQ,IAAI,aAAa;AAC7C,IAAM,aAAa,QAAQ,IAAI,YAAY;AAC3C,IAAM,YAAY,QAAQ,IAAI,mBAAmB;AACjD,IAAM,UAAU,QAAQ,IAAI,iBAAiB;AAE7C,SAAS,WAAW,MAAc,OAAmC;AACnE,MAAI,CAAC,OAAO;AACV,YAAQ,OAAO,MAAM,+CAA+C,IAAI;AAAA,CAAI;AAC5E,YAAQ,KAAK,CAAC;AAAA,EAChB;AACA,SAAO;AACT;AAEA,IAAM,iBAAiB,WAAW,oBAAoB,gBAAgB;AACtE,IAAM,WAAW,WAAW,aAAa,SAAS;AAClD,IAAM,aAAa,WAAW,eAAe,WAAW;AACxD,IAAM,YAAY,WAAW,cAAc,UAAU;AACrD,IAAM,WAAW,WAAW,qBAAqB,SAAS;AAC1D,IAAM,SAAS,WAAW,mBAAmB,OAAO;AAIpD,IAAM,cAAc,aAAa,gBAAgB,OAAO;AACxD,IAAM,aAAa,gBAAgB,WAAW;AAK9C,IAAM,WAAW,QAAQ,IAAI,UAAU;AACvC,IAAI,UAAU;AACZ,MAAI,CAAC,WAAW,SAAU,YAAW,WAAW,CAAC;AACjD,aAAW,SAAS,MAAM;AAC5B;AAIA,SAAS,aAAqC;AAC5C,SAAO;AAAA,IACL,iBAAiB,UAAU,QAAQ;AAAA,IACnC,gBAAgB;AAAA,IAChB,iBAAiB;AAAA,EACnB;AACF;AAEA,eAAe,QAAQ,MAAc,MAAiD;AACpF,QAAM,MAAM,IAAI,IAAI,MAAM,MAAM;AAChC,QAAM,MAAM,MAAM,eAAe,IAAI,SAAS,GAAG;AAAA,IAC/C,QAAQ;AAAA,IACR,SAAS,WAAW;AAAA,IACpB,MAAM,KAAK,UAAU,IAAI;AAAA,EAC3B,CAAC;AACD,MAAI,CAAC,IAAI,IAAI;AACX,UAAM,OAAO,MAAM,IAAI,KAAK;AAC5B,UAAM,IAAI,MAAM,aAAa,IAAI,MAAM,KAAK,IAAI,EAAE;AAAA,EACpD;AACA,QAAM,OAAQ,MAAM,IAAI,KAAK;AAC7B,MAAI,CAAC,KAAK,QAAS,OAAM,IAAI,MAAM,mCAAmC;AACtE,SAAO,KAAK;AACd;AAEA,eAAe,SAAS,MAAc,MAAiD;AACrF,QAAM,MAAM,IAAI,IAAI,MAAM,MAAM;AAChC,QAAM,MAAM,MAAM,eAAe,IAAI,SAAS,GAAG;AAAA,IAC/C,QAAQ;AAAA,IACR,SAAS,WAAW;AAAA,IACpB,MAAM,KAAK,UAAU,IAAI;AAAA,EAC3B,CAAC;AACD,MAAI,CAAC,IAAI,IAAI;AACX,UAAM,OAAO,MAAM,IAAI,KAAK;AAC5B,UAAM,IAAI,MAAM,aAAa,IAAI,MAAM,KAAK,IAAI,EAAE;AAAA,EACpD;AACA,QAAM,OAAQ,MAAM,IAAI,KAAK;AAC7B,MAAI,CAAC,KAAK,QAAS,OAAM,IAAI,MAAM,mCAAmC;AACtE,SAAO,KAAK;AACd;AAEA,eAAe,OAAO,MAAc,QAAmD;AACrF,QAAM,MAAM,IAAI,IAAI,MAAM,MAAM;AAChC,MAAI,QAAQ;AACV,eAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,MAAM,GAAG;AAC3C,UAAI,aAAa,IAAI,GAAG,CAAC;AAAA,IAC3B;AAAA,EACF;AACA,QAAM,MAAM,MAAM,eAAe,IAAI,SAAS,GAAG;AAAA,IAC/C,SAAS,WAAW;AAAA,EACtB,CAAC;AACD,MAAI,CAAC,IAAI,IAAI;AACX,UAAM,OAAO,MAAM,IAAI,KAAK;AAC5B,UAAM,IAAI,MAAM,aAAa,IAAI,MAAM,KAAK,IAAI,EAAE;AAAA,EACpD;AACA,QAAM,OAAQ,MAAM,IAAI,KAAK;AAC7B,MAAI,CAAC,KAAK,QAAS,OAAM,IAAI,MAAM,mCAAmC;AACtE,SAAO,KAAK;AACd;AAIA,IAAM,OAAsB;AAAA,EAC1B;AAAA,EAEA,MAAM,kBAAkB,MAAiD;AACvE,UAAM,kBAAkB,aAAa,KAAK,WAAW,GAAG,WAAW;AACnE,UAAM,WAAW,aAAa,KAAK,UAAU,GAAG,UAAU;AAC1D,UAAM,OAAO,EAAE,GAAG,KAAK;AACvB,WAAO,KAAK,WAAW;AACvB,WAAO,KAAK,UAAU;AACtB,WAAO,SAAS,aAAa,eAAe,YAAY,QAAQ,SAAS,IAAI;AAAA,EAC/E;AAAA,EAEA,MAAM,oBAAoB,MAAiD;AACzE,UAAMC,aAAY,aAAa,KAAK,WAAW,GAAG,WAAW;AAC7D,UAAM,WAAW,aAAa,KAAK,UAAU,GAAG,UAAU;AAC1D,UAAM,OAAO,EAAE,GAAG,KAAK;AACvB,WAAO,KAAK,WAAW;AACvB,WAAO,KAAK,UAAU;AACtB,WAAO,QAAQ,aAAaA,UAAS,YAAY,QAAQ,aAAa,IAAI;AAAA,EAC5E;AAAA,EAEA,MAAM,qBAAqB,UAAqC;AAC9D,QAAI;AAGF,mBAAa,UAAU,UAAU;AACjC,YAAM,OAAQ,MAAM,OAAO,aAAa,SAAS,YAAY,QAAQ,eAAe;AAEpF,YAAM,SAAS,KAAK,KAAK,CAAC,OAAO,GAAG,eAAe,aAAa;AAChE,UAAI,CAAC,OAAQ,QAAO,CAAC;AACrB,UAAI,MAAM,QAAQ,OAAO,KAAK,GAAG;AAC/B,eAAO,OAAO,MAAM,OAAO,CAAC,MAAmB,OAAO,MAAM,YAAY,EAAE,SAAS,CAAC;AAAA,MACtF;AACA,aAAO,CAAC;AAAA,IACV,SAAS,KAAK;AACZ,cAAQ,OAAO,MAAM,+DAA+D,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC;AAAA,CAAI;AACxI,aAAO,CAAC;AAAA,IACV;AAAA,EACF;AAAA,EAEA,MAAM,iBAAiB,UAAmE;AACxF,QAAI;AACF,mBAAa,UAAU,UAAU;AACjC,YAAM,OAAQ,MAAM,OAAO,aAAa,SAAS,YAAY,QAAQ,EAAE;AAIvE,aAAO;AAAA,QACL,OAAO,KAAK,SAAS;AAAA,QACrB,aAAa,KAAK,eAAe;AAAA,MACnC;AAAA,IACF,SAAS,KAAK;AACZ,cAAQ,OAAO;AAAA,QACb,mDAAmD,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC;AAAA;AAAA,MACrG;AACA,aAAO,EAAE,OAAO,IAAI,aAAa,GAAG;AAAA,IACtC;AAAA,EACF;AAAA,EAEA,MAAM,cAAc,aAA6C;AAC/D,QAAI;AACF,mBAAa,aAAa,UAAU;AACpC,YAAM,OAAQ,MAAM,OAAO,aAAa,SAAS,YAAY,WAAW,EAAE;AAG1E,aAAO,KAAK,QAAQ;AAAA,IACtB,SAAS,KAAK;AACZ,cAAQ,OAAO;AAAA,QACb,mDAAmD,WAAW,KAAK,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC;AAAA;AAAA,MACrH;AACA,aAAO;AAAA,IACT;AAAA,EACF;AACF;AAEA,IAAM,QAAQ,IAAI,UAAU,YAAY,IAAI;AAoB5C,IAAM,QAAQ;AAAA,EACZ;AAAA,IACE,MAAM;AAAA,IACN,aACE;AAAA,IAGF,aAAa;AAAA,MACX,MAAM;AAAA,MACN,YAAY;AAAA,QACV,UAAU,EAAE,MAAM,UAAU,aAAa,mEAA8D;AAAA,MACzG;AAAA,MACA,UAAU,CAAC;AAAA,IACb;AAAA,EACF;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,aACE;AAAA,IAEF,aAAa;AAAA,MACX,MAAM;AAAA,MACN,YAAY;AAAA,QACV,WAAW,EAAE,MAAM,UAAU,aAAa,oBAAoB;AAAA,QAC9D,UAAU,EAAE,MAAM,UAAU,aAAa,mBAAmB;AAAA,QAC5D,UAAU,EAAE,MAAM,UAAU,aAAa,0BAA0B;AAAA,QACnE,mBAAmB,EAAE,MAAM,UAAU,aAAa,sBAAsB;AAAA,QACxE,SAAS;AAAA,UACP,MAAM;AAAA,UACN,aAAa;AAAA,UACb,sBAAsB;AAAA,QACxB;AAAA,MACF;AAAA,MACA,UAAU,CAAC,aAAa,YAAY,UAAU;AAAA,IAChD;AAAA,EACF;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,aACE;AAAA,IAEF,aAAa;AAAA,MACX,MAAM;AAAA,MACN,YAAY;AAAA,QACV,WAAW,EAAE,MAAM,UAAU,aAAa,oBAAoB;AAAA,QAC9D,UAAU,EAAE,MAAM,UAAU,aAAa,mBAAmB;AAAA,QAC5D,mBAAmB,EAAE,MAAM,UAAU,aAAa,sBAAsB;AAAA,QACxE,cAAc,EAAE,MAAM,UAAU,aAAa,kDAAkD;AAAA,QAC/F,mBAAmB,EAAE,MAAM,UAAU,aAAa,iCAAiC;AAAA,QACnF,SAAS;AAAA,UACP,MAAM;AAAA,UACN,aAAa;AAAA,UACb,sBAAsB;AAAA,QACxB;AAAA,MACF;AAAA,MACA,UAAU,CAAC,aAAa,UAAU;AAAA,IACpC;AAAA,EACF;AACF;AAIA,eAAe,eACb,MACA,MACgF;AAChF,MAAI;AACF,YAAQ,MAAM;AAAA,MACZ,KAAK,qBAAqB;AACxB,cAAM,cAAc,KAAK,UAAU;AACnC,YAAI,YAAa,cAAa,aAAa,UAAU;AACrD,cAAM,SAAS,MAAM,MAAM,eAAe,YAAY,WAAW;AACjE,eAAO;AAAA,UACL,SAAS,CAAC,EAAE,MAAM,QAAQ,MAAM,KAAK,UAAU,QAAQ,MAAM,CAAC,EAAE,CAAC;AAAA,QACnE;AAAA,MACF;AAAA,MAEA,KAAK,uBAAuB;AAC1B,cAAM,gBAAgB,aAAa,KAAK,WAAW,GAAG,WAAW;AACjE,cAAM,eAAe,aAAa,KAAK,UAAU,GAAG,UAAU;AAC9D,cAAM,eAAe,aAAa,KAAK,UAAU,GAAG,UAAU;AAC9D,cAAM,SAAS,MAAM,MAAM,iBAAiB;AAAA,UAC1C,WAAW;AAAA,UACX,UAAU;AAAA,UACV,UAAU;AAAA,UACV,mBAAoB,KAAK,mBAAmB,KAA4B;AAAA,UACxE,MAAM;AAAA,YACJ,GAAI,KAAK,SAAS,MAAM,SAAY,EAAE,SAAS,KAAK,SAAS,EAAE,IAAI,CAAC;AAAA,YACpE,GAAI,KAAK,WAAW,MAAM,SAAY,EAAE,WAAW,KAAK,WAAW,EAAE,IAAI,CAAC;AAAA,UAC5E;AAAA,QACF,CAAC;AACD,cAAM,UAAU,OAAO,UAAU;AACjC,YAAI,WAAW,OAAO,SAAS;AAC7B,kBAAQ,OAAO,MAAM;AAAA,EAAoC,iBAAiB,OAAO,OAAO,CAAC,EAAE;AAAA,QAC7F;AACA,eAAO;AAAA,UACL,SAAS,CAAC,EAAE,MAAM,QAAQ,MAAM,KAAK,UAAU,QAAQ,MAAM,CAAC,EAAE,CAAC;AAAA,UACjE,GAAI,UAAU,EAAE,SAAS,KAAK,IAAI,CAAC;AAAA,QACrC;AAAA,MACF;AAAA,MAEA,KAAK,yBAAyB;AAC5B,cAAM,oBAAoB,aAAa,KAAK,WAAW,GAAG,WAAW;AACrE,cAAM,mBAAmB,aAAa,KAAK,UAAU,GAAG,UAAU;AAClE,cAAM,SAAS,MAAM,MAAM,mBAAmB;AAAA,UAC5C,WAAW;AAAA,UACX,UAAU;AAAA,UACV,mBAAoB,KAAK,mBAAmB,KAA4B;AAAA,UACxE,MAAM;AAAA,YACJ,GAAI,KAAK,cAAc,MAAM,SAAY,EAAE,cAAc,KAAK,cAAc,EAAE,IAAI,CAAC;AAAA,YACnF,GAAI,KAAK,mBAAmB,MAAM,SAAY,EAAE,mBAAmB,KAAK,mBAAmB,EAAE,IAAI,CAAC;AAAA,YAClG,GAAI,KAAK,SAAS,MAAM,SAAY,EAAE,SAAS,KAAK,SAAS,EAAE,IAAI,CAAC;AAAA,UACtE;AAAA,QACF,CAAC;AACD,cAAM,UAAU,OAAO,UAAU;AACjC,YAAI,WAAW,OAAO,SAAS;AAC7B,kBAAQ,OAAO,MAAM;AAAA,EAAwC,iBAAiB,OAAO,OAAO,CAAC,EAAE;AAAA,QACjG;AACA,eAAO;AAAA,UACL,SAAS,CAAC,EAAE,MAAM,QAAQ,MAAM,KAAK,UAAU,QAAQ,MAAM,CAAC,EAAE,CAAC;AAAA,UACjE,GAAI,UAAU,EAAE,SAAS,KAAK,IAAI,CAAC;AAAA,QACrC;AAAA,MACF;AAAA,MAEA;AACE,eAAO;AAAA,UACL,SAAS,CAAC,EAAE,MAAM,QAAQ,MAAM,iBAAiB,IAAI,GAAG,CAAC;AAAA,UACzD,SAAS;AAAA,QACX;AAAA,IACJ;AAAA,EACF,SAAS,KAAK;AACZ,UAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC/D,WAAO;AAAA,MACL,SAAS,CAAC,EAAE,MAAM,QAAQ,MAAM,UAAU,OAAO,GAAG,CAAC;AAAA,MACrD,SAAS;AAAA,IACX;AAAA,EACF;AACF;AAIA,SAAS,aAAa,UAAiC;AACrD,QAAM,OAAO,KAAK,UAAU,QAAQ;AACpC,UAAQ,OAAO,MAAM,OAAO,IAAI;AAClC;AAEA,eAAe,cAAc,KAAoC;AAC/D,QAAM,EAAE,IAAI,QAAQ,OAAO,IAAI;AAE/B,UAAQ,QAAQ;AAAA,IACd,KAAK,cAAc;AACjB,mBAAa;AAAA,QACX,SAAS;AAAA,QACT;AAAA,QACA,QAAQ;AAAA,UACN,iBAAiB;AAAA,UACjB,cAAc,EAAE,OAAO,CAAC,EAAE;AAAA,UAC1B,YAAY;AAAA,YACV,MAAM;AAAA,YACN,SAAS;AAAA,UACX;AAAA,QACF;AAAA,MACF,CAAC;AACD;AAAA,IACF;AAAA,IAEA,KAAK,6BAA6B;AAEhC;AAAA,IACF;AAAA,IAEA,KAAK,cAAc;AACjB,mBAAa;AAAA,QACX,SAAS;AAAA,QACT;AAAA,QACA,QAAQ,EAAE,OAAO,MAAM;AAAA,MACzB,CAAC;AACD;AAAA,IACF;AAAA,IAEA,KAAK,cAAc;AACjB,YAAM,WAAW,SAAS,MAAM;AAChC,YAAM,WAAY,SAAS,WAAW,KAA6C,CAAC;AAEpF,UAAI,CAAC,UAAU;AACb,qBAAa;AAAA,UACX,SAAS;AAAA,UACT;AAAA,UACA,OAAO,EAAE,MAAM,QAAQ,SAAS,oBAAoB;AAAA,QACtD,CAAC;AACD;AAAA,MACF;AAEA,YAAM,SAAS,MAAM,eAAe,UAAU,QAAQ;AACtD,mBAAa;AAAA,QACX,SAAS;AAAA,QACT;AAAA,QACA;AAAA,MACF,CAAC;AACD;AAAA,IACF;AAAA,IAEA,KAAK,QAAQ;AACX,mBAAa,EAAE,SAAS,OAAO,IAAI,QAAQ,CAAC,EAAE,CAAC;AAC/C;AAAA,IACF;AAAA,IAEA,SAAS;AAEP,UAAI,OAAO,WAAW,gBAAgB,GAAG;AAEvC;AAAA,MACF;AACA,mBAAa;AAAA,QACX,SAAS;AAAA,QACT;AAAA,QACA,OAAO,EAAE,MAAM,QAAQ,SAAS,qBAAqB,MAAM,GAAG;AAAA,MAChE,CAAC;AAAA,IACH;AAAA,EACF;AACF;AAIA,IAAM,KAAK,gBAAgB,EAAE,OAAO,QAAQ,MAAM,CAAC;AAGnD,IAAI,eAA8B,QAAQ,QAAQ;AAElD,GAAG,GAAG,QAAQ,CAAC,SAAiB;AAC9B,QAAM,UAAU,KAAK,KAAK;AAC1B,MAAI,CAAC,QAAS;AAEd,MAAI;AACJ,MAAI;AACF,UAAM,KAAK,MAAM,OAAO;AAAA,EAC1B,QAAQ;AACN,iBAAa;AAAA,MACX,SAAS;AAAA,MACT,IAAI;AAAA,MACJ,OAAO,EAAE,MAAM,QAAQ,SAAS,cAAc;AAAA,IAChD,CAAC;AACD;AAAA,EACF;AAEA,iBAAe,aAAa,KAAK,MAAM,cAAc,GAAG,CAAC,EAAE,MAAM,CAAC,QAAQ;AACxE,YAAQ,OAAO,MAAM,0DAA0D,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC;AAAA,CAAI;AAAA,EACrI,CAAC;AACH,CAAC;AAED,GAAG,GAAG,SAAS,MAAM;AACnB,UAAQ,KAAK,CAAC;AAChB,CAAC;AAGD,QAAQ,GAAG,sBAAsB,CAAC,QAAQ;AACxC,UAAQ,OAAO;AAAA,IACb,2CAA2C,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC;AAAA;AAAA,EAC7F;AACF,CAAC;AAED,QAAQ,OAAO,MAAM,uCAAuC,UAAU,YAAY,WAAW,QAAQ,MAAM;AAAA,CAAK;","names":["deps","projectId","columnName","forwardResult","projectId"]}
+{"version":3,"sources":["../../src/lib/gate-proxy-server.ts","../../src/lib/gate-proxy.ts"],"sourcesContent":["#!/usr/bin/env node\n\n/**\n * gate-proxy-server.ts — MCP stdio server for gate enforcement.\n *\n * Spawned by the pipeline orchestrator as a child process.  Reads gate config\n * from env vars, instantiates GateProxy, and exposes three MCP tools over\n * JSON-RPC on stdin/stdout:\n *\n *   - kantban_run_gates   — Run column gates and report results\n *   - kantban_move_ticket — Run gates then forward move to KantBan API\n *   - kantban_complete_task — Run gates then forward complete to KantBan API\n *\n * Uses raw JSON-RPC (no @modelcontextprotocol/sdk dependency).\n */\n\nimport { readFileSync } from 'node:fs';\nimport { createInterface } from 'node:readline';\nimport { parseGateConfig } from './gate-config.js';\nimport { runGates, formatGateErrors } from './gate-runner.js';\nimport { GateProxy } from './gate-proxy.js';\nimport { fetchWithRetry } from '../client.js';\nimport type { GateProxyDeps } from './gate-proxy.js';\n\n// ── UUID validation ──────────────────────────────────────────────────────\n\nconst UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;\n\nfunction validateUuid(value: unknown, name: string): string {\n  if (typeof value !== 'string' || !UUID_RE.test(value)) {\n    throw new Error(`Invalid ${name}: expected UUID, got \"${String(value)}\"`);\n  }\n  return value;\n}\n\n// ── env ──────────────────────────────────────────────────────────────────\n\nconst GATE_CONFIG_PATH = process.env['GATE_CONFIG_PATH'];\nconst COLUMN_ID = process.env['COLUMN_ID'];\nconst COLUMN_NAME = process.env['COLUMN_NAME'];\nconst PROJECT_ID = process.env['PROJECT_ID'];\nconst API_TOKEN = process.env['KANTBAN_API_TOKEN'];\nconst API_URL = process.env['KANTBAN_API_URL'];\n\nfunction requireEnv(name: string, value: string | undefined): string {\n  if (!value) {\n    process.stderr.write(`gate-proxy-server: missing required env var ${name}\\n`);\n    process.exit(1);\n  }\n  return value;\n}\n\nconst gateConfigPath = requireEnv('GATE_CONFIG_PATH', GATE_CONFIG_PATH);\nconst columnId = requireEnv('COLUMN_ID', COLUMN_ID);\nconst columnName = requireEnv('COLUMN_NAME', COLUMN_NAME);\nconst projectId = requireEnv('PROJECT_ID', PROJECT_ID);\nconst apiToken = requireEnv('KANTBAN_API_TOKEN', API_TOKEN);\nconst apiUrl = requireEnv('KANTBAN_API_URL', API_URL);\n\n// ── gate config ──────────────────────────────────────────────────────────\n\nconst yamlContent = readFileSync(gateConfigPath, 'utf-8');\nconst gateConfig = parseGateConfig(yamlContent);\n\n// GATE_CWD overrides the YAML settings.cwd — set by the orchestrator to the\n// agent's worktree path so gates run against the agent's checked-out code,\n// not the root repo.\nconst GATE_CWD = process.env['GATE_CWD'];\nif (GATE_CWD) {\n  if (!gateConfig.settings) gateConfig.settings = {};\n  gateConfig.settings.cwd = GATE_CWD;\n}\n\n// ── API helpers ──────────────────────────────────────────────────────────\n\nfunction apiHeaders(): Record<string, string> {\n  return {\n    'Authorization': `Bearer ${apiToken}`,\n    'Content-Type': 'application/json',\n    'X-KantBan-Via': 'cli-gate-proxy',\n  };\n}\n\nasync function apiPost(path: string, body: Record<string, unknown>): Promise<unknown> {\n  const url = new URL(path, apiUrl);\n  const res = await fetchWithRetry(url.toString(), {\n    method: 'POST',\n    headers: apiHeaders(),\n    body: JSON.stringify(body),\n  });\n  if (!res.ok) {\n    const text = await res.text();\n    throw new Error(`API error ${res.status}: ${text}`);\n  }\n  const json = (await res.json()) as { success: boolean; data: unknown };\n  if (!json.success) throw new Error('API responded with success: false');\n  return json.data;\n}\n\nasync function apiPatch(path: string, body: Record<string, unknown>): Promise<unknown> {\n  const url = new URL(path, apiUrl);\n  const res = await fetchWithRetry(url.toString(), {\n    method: 'PATCH',\n    headers: apiHeaders(),\n    body: JSON.stringify(body),\n  });\n  if (!res.ok) {\n    const text = await res.text();\n    throw new Error(`API error ${res.status}: ${text}`);\n  }\n  const json = (await res.json()) as { success: boolean; data: unknown };\n  if (!json.success) throw new Error('API responded with success: false');\n  return json.data;\n}\n\nasync function apiGet(path: string, params?: Record<string, string>): Promise<unknown> {\n  const url = new URL(path, apiUrl);\n  if (params) {\n    for (const [k, v] of Object.entries(params)) {\n      url.searchParams.set(k, v);\n    }\n  }\n  const res = await fetchWithRetry(url.toString(), {\n    headers: apiHeaders(),\n  });\n  if (!res.ok) {\n    const text = await res.text();\n    throw new Error(`API error ${res.status}: ${text}`);\n  }\n  const json = (await res.json()) as { success: boolean; data: unknown };\n  if (!json.success) throw new Error('API responded with success: false');\n  return json.data;\n}\n\n// ── GateProxy deps ──────────────────────────────────────────────────────\n\nconst deps: GateProxyDeps = {\n  runGates,\n\n  async forwardMoveTicket(args: Record<string, unknown>): Promise<unknown> {\n    const ticketProjectId = validateUuid(args['projectId'], 'projectId');\n    const ticketId = validateUuid(args['ticketId'], 'ticketId');\n    const body = { ...args };\n    delete body['projectId'];\n    delete body['ticketId'];\n    return apiPatch(`/projects/${ticketProjectId}/tickets/${ticketId}/move`, body);\n  },\n\n  async forwardCompleteTask(args: Record<string, unknown>): Promise<unknown> {\n    const projectId = validateUuid(args['projectId'], 'projectId');\n    const ticketId = validateUuid(args['ticketId'], 'ticketId');\n    const body = { ...args };\n    delete body['projectId'];\n    delete body['ticketId'];\n    return apiPost(`/projects/${projectId}/tickets/${ticketId}/complete`, body);\n  },\n\n  async getTicketGateWaivers(ticketId: string): Promise<string[]> {\n    try {\n      // Field values require both projectId and ticketId in the path.\n      // projectId is injected as an env var (PROJECT_ID) at server startup.\n      validateUuid(ticketId, 'ticketId');\n      const data = (await apiGet(`/projects/${projectId}/tickets/${ticketId}/field-values`)) as\n        Array<{ field_name: string; value: unknown }>;\n      const waiver = data.find((fv) => fv.field_name === 'gate_waiver');\n      if (!waiver) return [];\n      if (Array.isArray(waiver.value)) {\n        return waiver.value.filter((v): v is string => typeof v === 'string' && v.length > 0);\n      }\n      return [];\n    } catch (err) {\n      process.stderr.write(`gate-proxy-server: waiver fetch failed (running all gates): ${err instanceof Error ? err.message : String(err)}\\n`);\n      return [];\n    }\n  },\n\n  async getTicketDetails(ticketId: string): Promise<{ title: string; description: string }> {\n    try {\n      validateUuid(ticketId, 'ticketId');\n      const data = (await apiGet(`/projects/${projectId}/tickets/${ticketId}`)) as {\n        title?: string;\n        description?: string;\n      };\n      return {\n        title: data.title ?? '',\n        description: data.description ?? '',\n      };\n    } catch (err) {\n      process.stderr.write(\n        `gate-proxy-server: ticket details fetch failed: ${err instanceof Error ? err.message : String(err)}\\n`,\n      );\n      return { title: '', description: '' };\n    }\n  },\n\n  async getColumnType(columnIdArg: string): Promise<string | null> {\n    try {\n      validateUuid(columnIdArg, 'columnId');\n      const data = (await apiGet(`/projects/${projectId}/columns/${columnIdArg}`)) as {\n        type?: string;\n      };\n      return data.type ?? null;\n    } catch (err) {\n      process.stderr.write(\n        `gate-proxy-server: column type fetch failed for ${columnIdArg}: ${err instanceof Error ? err.message : String(err)}\\n`,\n      );\n      return null;\n    }\n  },\n};\n\nconst proxy = new GateProxy(gateConfig, deps);\n\n// ── JSON-RPC types ──────────────────────────────────────────────────────\n\ninterface JsonRpcRequest {\n  jsonrpc: '2.0';\n  id: number | string;\n  method: string;\n  params?: Record<string, unknown>;\n}\n\ninterface JsonRpcResponse {\n  jsonrpc: '2.0';\n  id: number | string | null;\n  result?: unknown;\n  error?: { code: number; message: string; data?: unknown };\n}\n\n// ── Tool definitions ────────────────────────────────────────────────────\n\nconst TOOLS = [\n  {\n    name: 'kantban_run_gates',\n    description:\n      'Run all configured gates for the current column and report results. ' +\n      'Use this to check gate status before attempting to move a ticket. ' +\n      'Pass ticketId to filter out waived gates for that ticket.',\n    inputSchema: {\n      type: 'object' as const,\n      properties: {\n        ticketId: { type: 'string', description: 'Ticket ID (UUID) — filters out waived gates for this ticket' },\n      },\n      required: [] as string[],\n    },\n  },\n  {\n    name: 'kantban_move_ticket',\n    description:\n      'Move a ticket to a different column. Gates are automatically enforced — ' +\n      'if any required gate fails, the move is blocked and failure details are returned.',\n    inputSchema: {\n      type: 'object' as const,\n      properties: {\n        projectId: { type: 'string', description: 'Project ID (UUID)' },\n        ticketId: { type: 'string', description: 'Ticket ID (UUID)' },\n        columnId: { type: 'string', description: 'Target column ID (UUID)' },\n        currentColumnName: { type: 'string', description: 'Current column name' },\n        handoff: {\n          type: 'object',\n          description: 'Structured handoff data for the next pipeline stage',\n          additionalProperties: true,\n        },\n      },\n      required: ['projectId', 'ticketId', 'columnId'],\n    },\n  },\n  {\n    name: 'kantban_complete_task',\n    description:\n      'Mark a ticket as complete. Gates are automatically enforced — ' +\n      'if any required gate fails, the completion is blocked and failure details are returned.',\n    inputSchema: {\n      type: 'object' as const,\n      properties: {\n        projectId: { type: 'string', description: 'Project ID (UUID)' },\n        ticketId: { type: 'string', description: 'Ticket ID (UUID)' },\n        currentColumnName: { type: 'string', description: 'Current column name' },\n        moveToColumn: { type: 'string', description: 'Column name to move the ticket to (e.g. \"Done\")' },\n        completionComment: { type: 'string', description: 'Comment to add upon completion' },\n        handoff: {\n          type: 'object',\n          description: 'Structured handoff data for the next pipeline stage',\n          additionalProperties: true,\n        },\n      },\n      required: ['projectId', 'ticketId'],\n    },\n  },\n];\n\n// ── Tool handlers ───────────────────────────────────────────────────────\n\nasync function handleToolCall(\n  name: string,\n  args: Record<string, unknown>,\n): Promise<{ content: Array<{ type: 'text'; text: string }>; isError?: boolean }> {\n  try {\n    switch (name) {\n      case 'kantban_run_gates': {\n        const ticketIdArg = args['ticketId'] as string | undefined;\n        if (ticketIdArg) validateUuid(ticketIdArg, 'ticketId');\n        const result = await proxy.handleRunGates(columnName, ticketIdArg);\n        return {\n          content: [{ type: 'text', text: JSON.stringify(result, null, 2) }],\n        };\n      }\n\n      case 'kantban_move_ticket': {\n        const moveProjectId = validateUuid(args['projectId'], 'projectId');\n        const moveTicketId = validateUuid(args['ticketId'], 'ticketId');\n        const moveColumnId = validateUuid(args['columnId'], 'columnId');\n        const result = await proxy.handleMoveTicket({\n          projectId: moveProjectId,\n          ticketId: moveTicketId,\n          columnId: moveColumnId,\n          currentColumnName: (args['currentColumnName'] as string | undefined) ?? columnName,\n          args: {\n            ...(args['handoff'] !== undefined ? { handoff: args['handoff'] } : {}),\n            ...(args['column_id'] !== undefined ? { column_id: args['column_id'] } : {}),\n          },\n        });\n        const isError = result.error === 'GATE_FAILURE';\n        if (isError && result.results) {\n          process.stderr.write(`gate-proxy-server: move blocked\\n${formatGateErrors(result.results)}`);\n        }\n        return {\n          content: [{ type: 'text', text: JSON.stringify(result, null, 2) }],\n          ...(isError ? { isError: true } : {}),\n        };\n      }\n\n      case 'kantban_complete_task': {\n        const completeProjectId = validateUuid(args['projectId'], 'projectId');\n        const completeTicketId = validateUuid(args['ticketId'], 'ticketId');\n        const result = await proxy.handleCompleteTask({\n          projectId: completeProjectId,\n          ticketId: completeTicketId,\n          currentColumnName: (args['currentColumnName'] as string | undefined) ?? columnName,\n          args: {\n            ...(args['moveToColumn'] !== undefined ? { moveToColumn: args['moveToColumn'] } : {}),\n            ...(args['completionComment'] !== undefined ? { completionComment: args['completionComment'] } : {}),\n            ...(args['handoff'] !== undefined ? { handoff: args['handoff'] } : {}),\n          },\n        });\n        const isError = result.error === 'GATE_FAILURE';\n        if (isError && result.results) {\n          process.stderr.write(`gate-proxy-server: complete blocked\\n${formatGateErrors(result.results)}`);\n        }\n        return {\n          content: [{ type: 'text', text: JSON.stringify(result, null, 2) }],\n          ...(isError ? { isError: true } : {}),\n        };\n      }\n\n      default:\n        return {\n          content: [{ type: 'text', text: `Unknown tool: ${name}` }],\n          isError: true,\n        };\n    }\n  } catch (err) {\n    const message = err instanceof Error ? err.message : String(err);\n    return {\n      content: [{ type: 'text', text: `Error: ${message}` }],\n      isError: true,\n    };\n  }\n}\n\n// ── JSON-RPC dispatch ───────────────────────────────────────────────────\n\nfunction sendResponse(response: JsonRpcResponse): void {\n  const json = JSON.stringify(response);\n  process.stdout.write(json + '\\n');\n}\n\nasync function handleMessage(msg: JsonRpcRequest): Promise<void> {\n  const { id, method, params } = msg;\n\n  switch (method) {\n    case 'initialize': {\n      sendResponse({\n        jsonrpc: '2.0',\n        id,\n        result: {\n          protocolVersion: '2024-11-05',\n          capabilities: { tools: {} },\n          serverInfo: {\n            name: 'kantban-gates',\n            version: '0.1.0',\n          },\n        },\n      });\n      return;\n    }\n\n    case 'notifications/initialized': {\n      // Client acknowledgement — no response needed for notifications\n      return;\n    }\n\n    case 'tools/list': {\n      sendResponse({\n        jsonrpc: '2.0',\n        id,\n        result: { tools: TOOLS },\n      });\n      return;\n    }\n\n    case 'tools/call': {\n      const toolName = params?.['name'] as string | undefined;\n      const toolArgs = (params?.['arguments'] as Record<string, unknown> | undefined) ?? {};\n\n      if (!toolName) {\n        sendResponse({\n          jsonrpc: '2.0',\n          id,\n          error: { code: -32602, message: 'Missing tool name' },\n        });\n        return;\n      }\n\n      const result = await handleToolCall(toolName, toolArgs);\n      sendResponse({\n        jsonrpc: '2.0',\n        id,\n        result,\n      });\n      return;\n    }\n\n    case 'ping': {\n      sendResponse({ jsonrpc: '2.0', id, result: {} });\n      return;\n    }\n\n    default: {\n      // Unknown method — return method not found per JSON-RPC spec\n      if (method.startsWith('notifications/')) {\n        // Notifications don't get responses\n        return;\n      }\n      sendResponse({\n        jsonrpc: '2.0',\n        id,\n        error: { code: -32601, message: `Method not found: ${method}` },\n      });\n    }\n  }\n}\n\n// ── stdin reader ────────────────────────────────────────────────────────\n\nconst rl = createInterface({ input: process.stdin });\n\n// Serialize message processing to prevent concurrent double-moves\nlet messageQueue: Promise<void> = Promise.resolve();\n\n/**\n * Per-message handler timeout. Bounds the serialized queue so one hung handler\n * cannot block every subsequent tool call forever (classic symptom: a gate's\n * child process leaves grandchildren holding stdio pipes open past execFile's\n * SIGTERM, the gate promise never resolves, and the next kantban_move_ticket\n * waits behind it in `messageQueue` indefinitely).\n *\n * 15 min is longer than any realistic single gate suite but short enough that\n * a true deadlock surfaces as an error response instead of an infinite wait.\n */\nconst HANDLER_TIMEOUT_MS = 15 * 60 * 1000;\n\nrl.on('line', (line: string) => {\n  const trimmed = line.trim();\n  if (!trimmed) return;\n\n  let msg: JsonRpcRequest;\n  try {\n    msg = JSON.parse(trimmed) as JsonRpcRequest;\n  } catch {\n    sendResponse({\n      jsonrpc: '2.0',\n      id: null as unknown as number,\n      error: { code: -32700, message: 'Parse error' },\n    });\n    return;\n  }\n\n  messageQueue = messageQueue\n    .then(() => {\n      let timer: NodeJS.Timeout | undefined;\n      const timeout = new Promise<never>((_, reject) => {\n        timer = setTimeout(\n          () => reject(new Error(`handler timed out after ${HANDLER_TIMEOUT_MS}ms`)),\n          HANDLER_TIMEOUT_MS,\n        );\n      });\n      return Promise.race([handleMessage(msg), timeout]).finally(() => {\n        if (timer) clearTimeout(timer);\n      });\n    })\n    .catch((err) => {\n      const message = err instanceof Error ? err.message : String(err);\n      process.stderr.write(`gate-proxy-server: handler failed: ${message}\\n`);\n      // Send an error response so the client doesn't wait forever. Requests\n      // (with an id) expect a response; notifications (id === undefined)\n      // legitimately don't.\n      if (msg.id !== undefined && msg.id !== null) {\n        try {\n          sendResponse({\n            jsonrpc: '2.0',\n            id: msg.id,\n            error: {\n              code: -32603,\n              message: `gate-proxy handler error: ${message}`,\n            },\n          });\n        } catch (sendErr) {\n          process.stderr.write(\n            `gate-proxy-server: failed to send error response: ${sendErr instanceof Error ? sendErr.message : String(sendErr)}\\n`,\n          );\n        }\n      }\n    });\n});\n\nrl.on('close', () => {\n  process.exit(0);\n});\n\n// Suppress unhandled rejection crashes — log to stderr and continue\nprocess.on('unhandledRejection', (err) => {\n  process.stderr.write(\n    `gate-proxy-server: unhandled rejection: ${err instanceof Error ? err.message : String(err)}\\n`,\n  );\n});\n\nprocess.stderr.write(`gate-proxy-server: started (column=\"${columnName}\", gates=${gateConfig.default.length})\\n`);\n","import { resolveGatesForColumn, parseTimeout } from './gate-config.js';\nimport { formatGateErrors } from './gate-runner.js';\nimport type { GateConfig, GateDefinition, GateResult } from '@kantban/types';\n\nexport interface GateProxyDeps {\n  runGates: (gates: GateDefinition[], options?: { cwd?: string; env?: Record<string, string>; totalTimeoutMs?: number }) => Promise<GateResult[]>;\n  forwardMoveTicket: (args: Record<string, unknown>) => Promise<unknown>;\n  forwardCompleteTask: (args: Record<string, unknown>) => Promise<unknown>;\n  getTicketGateWaivers: (ticketId: string) => Promise<string[]>;\n  getTicketDetails: (ticketId: string) => Promise<{ title: string; description: string }>;\n  /**\n   * Fetch the type of a column (`start`, `in_progress`, `done`, `default`).\n   * Used to bypass gates on moves into terminal columns — gates enforce\n   * \"work in the source column is complete\", but entering a `done` column\n   * is by definition post-work cleanup, and running source-column gates at\n   * that point can strand tickets in Escalation when main is transiently\n   * broken (the merge commit has already been pushed; the ticket just\n   * needs to follow).\n   */\n  getColumnType: (columnId: string) => Promise<string | null>;\n}\n\nexport interface RunGatesResult {\n  passed: boolean;\n  results: GateResult[];\n}\n\nexport interface MoveArgs {\n  projectId: string;\n  ticketId: string;\n  columnId: string;\n  currentColumnName: string;\n  args: Record<string, unknown>;\n}\n\nexport interface CompleteArgs {\n  projectId: string;\n  ticketId: string;\n  currentColumnName: string;\n  args: Record<string, unknown>;\n}\n\nexport interface InterceptResult {\n  error?: 'GATE_FAILURE';\n  message?: string;\n  formatted?: string;\n  results?: GateResult[];\n  hint?: string;\n  forwardResult?: unknown;\n}\n\nexport class GateProxy {\n  private config: GateConfig;\n  private deps: GateProxyDeps;\n\n  constructor(config: GateConfig, deps: GateProxyDeps) {\n    this.config = config;\n    this.deps = deps;\n  }\n\n  private async buildTicketEnv(\n    ticketId: string,\n    projectId: string,\n    columnName: string,\n  ): Promise<Record<string, string>> {\n    const details = await this.deps.getTicketDetails(ticketId);\n    return {\n      KANTBAN_TICKET_ID: ticketId,\n      KANTBAN_TICKET_TITLE: details.title,\n      KANTBAN_TICKET_DESCRIPTION: details.description,\n      KANTBAN_TICKET_COLUMN: columnName,\n      KANTBAN_PROJECT_ID: projectId,\n    };\n  }\n\n  private buildRunOptions(): { cwd?: string; env?: Record<string, string>; totalTimeoutMs?: number } {\n    const opts: { cwd?: string; env?: Record<string, string>; totalTimeoutMs?: number } = {};\n    if (this.config.settings?.cwd !== undefined) opts.cwd = this.config.settings.cwd;\n    if (this.config.settings?.env !== undefined) opts.env = this.config.settings.env;\n    if (this.config.settings?.total_timeout !== undefined) {\n      opts.totalTimeoutMs = parseTimeout(this.config.settings.total_timeout);\n    }\n    return opts;\n  }\n\n  async handleRunGates(columnName: string, ticketId?: string): Promise<RunGatesResult> {\n    const allGates = resolveGatesForColumn(this.config, columnName);\n\n    let gates = allGates;\n    if (ticketId) {\n      const waivers = await this.deps.getTicketGateWaivers(ticketId);\n      const waiverSet = new Set(waivers);\n      gates = allGates.filter((g) => !waiverSet.has(g.name));\n    }\n\n    const results = await this.deps.runGates(gates, this.buildRunOptions());\n    return {\n      passed: results.filter((r) => r.required).every((r) => r.passed),\n      results,\n    };\n  }\n\n  async handleMoveTicket(move: MoveArgs): Promise<InterceptResult> {\n    // Terminal-column bypass: moves INTO a `done`-type column are post-work\n    // cleanup, not work-in-progress. Running source-column gates at this\n    // point can strand tickets (classic scenario: Merge agent successfully\n    // pushes feature branch to main, then this move-to-Done runs the merge\n    // column's gates against a transiently-broken main and fails — but the\n    // push already happened, so the ticket MUST follow to Done). Gates\n    // enforce entry criteria when work arrives at a column; terminal\n    // columns have no further work to gate.\n    try {\n      const targetType = await this.deps.getColumnType(move.columnId);\n      if (targetType === 'done') {\n        const forwardResult = await this.deps.forwardMoveTicket({\n          ...move.args,\n          projectId: move.projectId,\n          ticketId: move.ticketId,\n          column_id: move.columnId,\n        });\n        return { forwardResult };\n      }\n    } catch {\n      // If the type lookup fails, fall through to the normal gate path so\n      // behavior stays conservative (gates enforced by default).\n    }\n\n    const allGates = resolveGatesForColumn(this.config, move.currentColumnName);\n\n    // Filter out waived gates\n    const waivers = await this.deps.getTicketGateWaivers(move.ticketId);\n    const waiverSet = new Set(waivers);\n    const gates = allGates.filter((g) => !waiverSet.has(g.name));\n\n    let results: GateResult[];\n    try {\n      const opts = this.buildRunOptions();\n      const ticketEnv = await this.buildTicketEnv(move.ticketId, move.projectId, move.currentColumnName);\n      opts.env = { ...opts.env, ...ticketEnv };\n      results = await this.deps.runGates(gates, opts);\n    } catch (err) {\n      return {\n        error: 'GATE_FAILURE',\n        message: `Gate evaluation error: ${err instanceof Error ? err.message : String(err)}`,\n        hint: 'Fix the gate environment and retry',\n      };\n    }\n\n    const requiredFailures = results.filter((r) => r.required && !r.passed);\n    if (requiredFailures.length > 0) {\n      return {\n        error: 'GATE_FAILURE',\n        message: `Cannot move ticket — ${requiredFailures.length} required gate(s) failed`,\n        formatted: formatGateErrors(results.filter((r) => r.required)),\n        results,\n        hint: 'Fix the failing gate(s) and try move_ticket again',\n      };\n    }\n\n    const forwardResult = await this.deps.forwardMoveTicket({\n      ...move.args,\n      projectId: move.projectId,\n      ticketId: move.ticketId,\n      column_id: move.columnId,\n    });\n\n    return { forwardResult };\n  }\n\n  async handleCompleteTask(complete: CompleteArgs): Promise<InterceptResult> {\n    const allGates = resolveGatesForColumn(this.config, complete.currentColumnName);\n    const waivers = await this.deps.getTicketGateWaivers(complete.ticketId);\n    const waiverSet = new Set(waivers);\n    const gates = allGates.filter((g) => !waiverSet.has(g.name));\n\n    let results: GateResult[];\n    try {\n      const opts = this.buildRunOptions();\n      const ticketEnv = await this.buildTicketEnv(complete.ticketId, complete.projectId, complete.currentColumnName);\n      opts.env = { ...opts.env, ...ticketEnv };\n      results = await this.deps.runGates(gates, opts);\n    } catch (err) {\n      return {\n        error: 'GATE_FAILURE',\n        message: `Gate evaluation error: ${err instanceof Error ? err.message : String(err)}`,\n        hint: 'Fix the gate environment and retry',\n      };\n    }\n\n    const requiredFailures = results.filter((r) => r.required && !r.passed);\n    if (requiredFailures.length > 0) {\n      return {\n        error: 'GATE_FAILURE',\n        message: `Cannot complete task — ${requiredFailures.length} required gate(s) failed`,\n        formatted: formatGateErrors(results.filter((r) => r.required)),\n        results,\n        hint: 'Fix the failing gate(s) and try complete_task again',\n      };\n    }\n\n    const forwardResult = await this.deps.forwardCompleteTask({\n      ...complete.args,\n      projectId: complete.projectId,\n      ticketId: complete.ticketId,\n    });\n\n    return { forwardResult };\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;AAgBA,SAAS,oBAAoB;AAC7B,SAAS,uBAAuB;;;ACkCzB,IAAM,YAAN,MAAgB;AAAA,EACb;AAAA,EACA;AAAA,EAER,YAAY,QAAoBA,OAAqB;AACnD,SAAK,SAAS;AACd,SAAK,OAAOA;AAAA,EACd;AAAA,EAEA,MAAc,eACZ,UACAC,YACAC,aACiC;AACjC,UAAM,UAAU,MAAM,KAAK,KAAK,iBAAiB,QAAQ;AACzD,WAAO;AAAA,MACL,mBAAmB;AAAA,MACnB,sBAAsB,QAAQ;AAAA,MAC9B,4BAA4B,QAAQ;AAAA,MACpC,uBAAuBA;AAAA,MACvB,oBAAoBD;AAAA,IACtB;AAAA,EACF;AAAA,EAEQ,kBAA2F;AACjG,UAAM,OAAgF,CAAC;AACvF,QAAI,KAAK,OAAO,UAAU,QAAQ,OAAW,MAAK,MAAM,KAAK,OAAO,SAAS;AAC7E,QAAI,KAAK,OAAO,UAAU,QAAQ,OAAW,MAAK,MAAM,KAAK,OAAO,SAAS;AAC7E,QAAI,KAAK,OAAO,UAAU,kBAAkB,QAAW;AACrD,WAAK,iBAAiB,aAAa,KAAK,OAAO,SAAS,aAAa;AAAA,IACvE;AACA,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,eAAeC,aAAoB,UAA4C;AACnF,UAAM,WAAW,sBAAsB,KAAK,QAAQA,WAAU;AAE9D,QAAI,QAAQ;AACZ,QAAI,UAAU;AACZ,YAAM,UAAU,MAAM,KAAK,KAAK,qBAAqB,QAAQ;AAC7D,YAAM,YAAY,IAAI,IAAI,OAAO;AACjC,cAAQ,SAAS,OAAO,CAAC,MAAM,CAAC,UAAU,IAAI,EAAE,IAAI,CAAC;AAAA,IACvD;AAEA,UAAM,UAAU,MAAM,KAAK,KAAK,SAAS,OAAO,KAAK,gBAAgB,CAAC;AACtE,WAAO;AAAA,MACL,QAAQ,QAAQ,OAAO,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM;AAAA,MAC/D;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,iBAAiB,MAA0C;AAS/D,QAAI;AACF,YAAM,aAAa,MAAM,KAAK,KAAK,cAAc,KAAK,QAAQ;AAC9D,UAAI,eAAe,QAAQ;AACzB,cAAMC,iBAAgB,MAAM,KAAK,KAAK,kBAAkB;AAAA,UACtD,GAAG,KAAK;AAAA,UACR,WAAW,KAAK;AAAA,UAChB,UAAU,KAAK;AAAA,UACf,WAAW,KAAK;AAAA,QAClB,CAAC;AACD,eAAO,EAAE,eAAAA,eAAc;AAAA,MACzB;AAAA,IACF,QAAQ;AAAA,IAGR;AAEA,UAAM,WAAW,sBAAsB,KAAK,QAAQ,KAAK,iBAAiB;AAG1E,UAAM,UAAU,MAAM,KAAK,KAAK,qBAAqB,KAAK,QAAQ;AAClE,UAAM,YAAY,IAAI,IAAI,OAAO;AACjC,UAAM,QAAQ,SAAS,OAAO,CAAC,MAAM,CAAC,UAAU,IAAI,EAAE,IAAI,CAAC;AAE3D,QAAI;AACJ,QAAI;AACF,YAAM,OAAO,KAAK,gBAAgB;AAClC,YAAM,YAAY,MAAM,KAAK,eAAe,KAAK,UAAU,KAAK,WAAW,KAAK,iBAAiB;AACjG,WAAK,MAAM,EAAE,GAAG,KAAK,KAAK,GAAG,UAAU;AACvC,gBAAU,MAAM,KAAK,KAAK,SAAS,OAAO,IAAI;AAAA,IAChD,SAAS,KAAK;AACZ,aAAO;AAAA,QACL,OAAO;AAAA,QACP,SAAS,0BAA0B,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC;AAAA,QACnF,MAAM;AAAA,MACR;AAAA,IACF;AAEA,UAAM,mBAAmB,QAAQ,OAAO,CAAC,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM;AACtE,QAAI,iBAAiB,SAAS,GAAG;AAC/B,aAAO;AAAA,QACL,OAAO;AAAA,QACP,SAAS,6BAAwB,iBAAiB,MAAM;AAAA,QACxD,WAAW,iBAAiB,QAAQ,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC;AAAA,QAC7D;AAAA,QACA,MAAM;AAAA,MACR;AAAA,IACF;AAEA,UAAM,gBAAgB,MAAM,KAAK,KAAK,kBAAkB;AAAA,MACtD,GAAG,KAAK;AAAA,MACR,WAAW,KAAK;AAAA,MAChB,UAAU,KAAK;AAAA,MACf,WAAW,KAAK;AAAA,IAClB,CAAC;AAED,WAAO,EAAE,cAAc;AAAA,EACzB;AAAA,EAEA,MAAM,mBAAmB,UAAkD;AACzE,UAAM,WAAW,sBAAsB,KAAK,QAAQ,SAAS,iBAAiB;AAC9E,UAAM,UAAU,MAAM,KAAK,KAAK,qBAAqB,SAAS,QAAQ;AACtE,UAAM,YAAY,IAAI,IAAI,OAAO;AACjC,UAAM,QAAQ,SAAS,OAAO,CAAC,MAAM,CAAC,UAAU,IAAI,EAAE,IAAI,CAAC;AAE3D,QAAI;AACJ,QAAI;AACF,YAAM,OAAO,KAAK,gBAAgB;AAClC,YAAM,YAAY,MAAM,KAAK,eAAe,SAAS,UAAU,SAAS,WAAW,SAAS,iBAAiB;AAC7G,WAAK,MAAM,EAAE,GAAG,KAAK,KAAK,GAAG,UAAU;AACvC,gBAAU,MAAM,KAAK,KAAK,SAAS,OAAO,IAAI;AAAA,IAChD,SAAS,KAAK;AACZ,aAAO;AAAA,QACL,OAAO;AAAA,QACP,SAAS,0BAA0B,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC;AAAA,QACnF,MAAM;AAAA,MACR;AAAA,IACF;AAEA,UAAM,mBAAmB,QAAQ,OAAO,CAAC,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM;AACtE,QAAI,iBAAiB,SAAS,GAAG;AAC/B,aAAO;AAAA,QACL,OAAO;AAAA,QACP,SAAS,+BAA0B,iBAAiB,MAAM;AAAA,QAC1D,WAAW,iBAAiB,QAAQ,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC;AAAA,QAC7D;AAAA,QACA,MAAM;AAAA,MACR;AAAA,IACF;AAEA,UAAM,gBAAgB,MAAM,KAAK,KAAK,oBAAoB;AAAA,MACxD,GAAG,SAAS;AAAA,MACZ,WAAW,SAAS;AAAA,MACpB,UAAU,SAAS;AAAA,IACrB,CAAC;AAED,WAAO,EAAE,cAAc;AAAA,EACzB;AACF;;;ADtLA,IAAM,UAAU;AAEhB,SAAS,aAAa,OAAgB,MAAsB;AAC1D,MAAI,OAAO,UAAU,YAAY,CAAC,QAAQ,KAAK,KAAK,GAAG;AACrD,UAAM,IAAI,MAAM,WAAW,IAAI,yBAAyB,OAAO,KAAK,CAAC,GAAG;AAAA,EAC1E;AACA,SAAO;AACT;AAIA,IAAM,mBAAmB,QAAQ,IAAI,kBAAkB;AACvD,IAAM,YAAY,QAAQ,IAAI,WAAW;AACzC,IAAM,cAAc,QAAQ,IAAI,aAAa;AAC7C,IAAM,aAAa,QAAQ,IAAI,YAAY;AAC3C,IAAM,YAAY,QAAQ,IAAI,mBAAmB;AACjD,IAAM,UAAU,QAAQ,IAAI,iBAAiB;AAE7C,SAAS,WAAW,MAAc,OAAmC;AACnE,MAAI,CAAC,OAAO;AACV,YAAQ,OAAO,MAAM,+CAA+C,IAAI;AAAA,CAAI;AAC5E,YAAQ,KAAK,CAAC;AAAA,EAChB;AACA,SAAO;AACT;AAEA,IAAM,iBAAiB,WAAW,oBAAoB,gBAAgB;AACtE,IAAM,WAAW,WAAW,aAAa,SAAS;AAClD,IAAM,aAAa,WAAW,eAAe,WAAW;AACxD,IAAM,YAAY,WAAW,cAAc,UAAU;AACrD,IAAM,WAAW,WAAW,qBAAqB,SAAS;AAC1D,IAAM,SAAS,WAAW,mBAAmB,OAAO;AAIpD,IAAM,cAAc,aAAa,gBAAgB,OAAO;AACxD,IAAM,aAAa,gBAAgB,WAAW;AAK9C,IAAM,WAAW,QAAQ,IAAI,UAAU;AACvC,IAAI,UAAU;AACZ,MAAI,CAAC,WAAW,SAAU,YAAW,WAAW,CAAC;AACjD,aAAW,SAAS,MAAM;AAC5B;AAIA,SAAS,aAAqC;AAC5C,SAAO;AAAA,IACL,iBAAiB,UAAU,QAAQ;AAAA,IACnC,gBAAgB;AAAA,IAChB,iBAAiB;AAAA,EACnB;AACF;AAEA,eAAe,QAAQ,MAAc,MAAiD;AACpF,QAAM,MAAM,IAAI,IAAI,MAAM,MAAM;AAChC,QAAM,MAAM,MAAM,eAAe,IAAI,SAAS,GAAG;AAAA,IAC/C,QAAQ;AAAA,IACR,SAAS,WAAW;AAAA,IACpB,MAAM,KAAK,UAAU,IAAI;AAAA,EAC3B,CAAC;AACD,MAAI,CAAC,IAAI,IAAI;AACX,UAAM,OAAO,MAAM,IAAI,KAAK;AAC5B,UAAM,IAAI,MAAM,aAAa,IAAI,MAAM,KAAK,IAAI,EAAE;AAAA,EACpD;AACA,QAAM,OAAQ,MAAM,IAAI,KAAK;AAC7B,MAAI,CAAC,KAAK,QAAS,OAAM,IAAI,MAAM,mCAAmC;AACtE,SAAO,KAAK;AACd;AAEA,eAAe,SAAS,MAAc,MAAiD;AACrF,QAAM,MAAM,IAAI,IAAI,MAAM,MAAM;AAChC,QAAM,MAAM,MAAM,eAAe,IAAI,SAAS,GAAG;AAAA,IAC/C,QAAQ;AAAA,IACR,SAAS,WAAW;AAAA,IACpB,MAAM,KAAK,UAAU,IAAI;AAAA,EAC3B,CAAC;AACD,MAAI,CAAC,IAAI,IAAI;AACX,UAAM,OAAO,MAAM,IAAI,KAAK;AAC5B,UAAM,IAAI,MAAM,aAAa,IAAI,MAAM,KAAK,IAAI,EAAE;AAAA,EACpD;AACA,QAAM,OAAQ,MAAM,IAAI,KAAK;AAC7B,MAAI,CAAC,KAAK,QAAS,OAAM,IAAI,MAAM,mCAAmC;AACtE,SAAO,KAAK;AACd;AAEA,eAAe,OAAO,MAAc,QAAmD;AACrF,QAAM,MAAM,IAAI,IAAI,MAAM,MAAM;AAChC,MAAI,QAAQ;AACV,eAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,MAAM,GAAG;AAC3C,UAAI,aAAa,IAAI,GAAG,CAAC;AAAA,IAC3B;AAAA,EACF;AACA,QAAM,MAAM,MAAM,eAAe,IAAI,SAAS,GAAG;AAAA,IAC/C,SAAS,WAAW;AAAA,EACtB,CAAC;AACD,MAAI,CAAC,IAAI,IAAI;AACX,UAAM,OAAO,MAAM,IAAI,KAAK;AAC5B,UAAM,IAAI,MAAM,aAAa,IAAI,MAAM,KAAK,IAAI,EAAE;AAAA,EACpD;AACA,QAAM,OAAQ,MAAM,IAAI,KAAK;AAC7B,MAAI,CAAC,KAAK,QAAS,OAAM,IAAI,MAAM,mCAAmC;AACtE,SAAO,KAAK;AACd;AAIA,IAAM,OAAsB;AAAA,EAC1B;AAAA,EAEA,MAAM,kBAAkB,MAAiD;AACvE,UAAM,kBAAkB,aAAa,KAAK,WAAW,GAAG,WAAW;AACnE,UAAM,WAAW,aAAa,KAAK,UAAU,GAAG,UAAU;AAC1D,UAAM,OAAO,EAAE,GAAG,KAAK;AACvB,WAAO,KAAK,WAAW;AACvB,WAAO,KAAK,UAAU;AACtB,WAAO,SAAS,aAAa,eAAe,YAAY,QAAQ,SAAS,IAAI;AAAA,EAC/E;AAAA,EAEA,MAAM,oBAAoB,MAAiD;AACzE,UAAMC,aAAY,aAAa,KAAK,WAAW,GAAG,WAAW;AAC7D,UAAM,WAAW,aAAa,KAAK,UAAU,GAAG,UAAU;AAC1D,UAAM,OAAO,EAAE,GAAG,KAAK;AACvB,WAAO,KAAK,WAAW;AACvB,WAAO,KAAK,UAAU;AACtB,WAAO,QAAQ,aAAaA,UAAS,YAAY,QAAQ,aAAa,IAAI;AAAA,EAC5E;AAAA,EAEA,MAAM,qBAAqB,UAAqC;AAC9D,QAAI;AAGF,mBAAa,UAAU,UAAU;AACjC,YAAM,OAAQ,MAAM,OAAO,aAAa,SAAS,YAAY,QAAQ,eAAe;AAEpF,YAAM,SAAS,KAAK,KAAK,CAAC,OAAO,GAAG,eAAe,aAAa;AAChE,UAAI,CAAC,OAAQ,QAAO,CAAC;AACrB,UAAI,MAAM,QAAQ,OAAO,KAAK,GAAG;AAC/B,eAAO,OAAO,MAAM,OAAO,CAAC,MAAmB,OAAO,MAAM,YAAY,EAAE,SAAS,CAAC;AAAA,MACtF;AACA,aAAO,CAAC;AAAA,IACV,SAAS,KAAK;AACZ,cAAQ,OAAO,MAAM,+DAA+D,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC;AAAA,CAAI;AACxI,aAAO,CAAC;AAAA,IACV;AAAA,EACF;AAAA,EAEA,MAAM,iBAAiB,UAAmE;AACxF,QAAI;AACF,mBAAa,UAAU,UAAU;AACjC,YAAM,OAAQ,MAAM,OAAO,aAAa,SAAS,YAAY,QAAQ,EAAE;AAIvE,aAAO;AAAA,QACL,OAAO,KAAK,SAAS;AAAA,QACrB,aAAa,KAAK,eAAe;AAAA,MACnC;AAAA,IACF,SAAS,KAAK;AACZ,cAAQ,OAAO;AAAA,QACb,mDAAmD,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC;AAAA;AAAA,MACrG;AACA,aAAO,EAAE,OAAO,IAAI,aAAa,GAAG;AAAA,IACtC;AAAA,EACF;AAAA,EAEA,MAAM,cAAc,aAA6C;AAC/D,QAAI;AACF,mBAAa,aAAa,UAAU;AACpC,YAAM,OAAQ,MAAM,OAAO,aAAa,SAAS,YAAY,WAAW,EAAE;AAG1E,aAAO,KAAK,QAAQ;AAAA,IACtB,SAAS,KAAK;AACZ,cAAQ,OAAO;AAAA,QACb,mDAAmD,WAAW,KAAK,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC;AAAA;AAAA,MACrH;AACA,aAAO;AAAA,IACT;AAAA,EACF;AACF;AAEA,IAAM,QAAQ,IAAI,UAAU,YAAY,IAAI;AAoB5C,IAAM,QAAQ;AAAA,EACZ;AAAA,IACE,MAAM;AAAA,IACN,aACE;AAAA,IAGF,aAAa;AAAA,MACX,MAAM;AAAA,MACN,YAAY;AAAA,QACV,UAAU,EAAE,MAAM,UAAU,aAAa,mEAA8D;AAAA,MACzG;AAAA,MACA,UAAU,CAAC;AAAA,IACb;AAAA,EACF;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,aACE;AAAA,IAEF,aAAa;AAAA,MACX,MAAM;AAAA,MACN,YAAY;AAAA,QACV,WAAW,EAAE,MAAM,UAAU,aAAa,oBAAoB;AAAA,QAC9D,UAAU,EAAE,MAAM,UAAU,aAAa,mBAAmB;AAAA,QAC5D,UAAU,EAAE,MAAM,UAAU,aAAa,0BAA0B;AAAA,QACnE,mBAAmB,EAAE,MAAM,UAAU,aAAa,sBAAsB;AAAA,QACxE,SAAS;AAAA,UACP,MAAM;AAAA,UACN,aAAa;AAAA,UACb,sBAAsB;AAAA,QACxB;AAAA,MACF;AAAA,MACA,UAAU,CAAC,aAAa,YAAY,UAAU;AAAA,IAChD;AAAA,EACF;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,aACE;AAAA,IAEF,aAAa;AAAA,MACX,MAAM;AAAA,MACN,YAAY;AAAA,QACV,WAAW,EAAE,MAAM,UAAU,aAAa,oBAAoB;AAAA,QAC9D,UAAU,EAAE,MAAM,UAAU,aAAa,mBAAmB;AAAA,QAC5D,mBAAmB,EAAE,MAAM,UAAU,aAAa,sBAAsB;AAAA,QACxE,cAAc,EAAE,MAAM,UAAU,aAAa,kDAAkD;AAAA,QAC/F,mBAAmB,EAAE,MAAM,UAAU,aAAa,iCAAiC;AAAA,QACnF,SAAS;AAAA,UACP,MAAM;AAAA,UACN,aAAa;AAAA,UACb,sBAAsB;AAAA,QACxB;AAAA,MACF;AAAA,MACA,UAAU,CAAC,aAAa,UAAU;AAAA,IACpC;AAAA,EACF;AACF;AAIA,eAAe,eACb,MACA,MACgF;AAChF,MAAI;AACF,YAAQ,MAAM;AAAA,MACZ,KAAK,qBAAqB;AACxB,cAAM,cAAc,KAAK,UAAU;AACnC,YAAI,YAAa,cAAa,aAAa,UAAU;AACrD,cAAM,SAAS,MAAM,MAAM,eAAe,YAAY,WAAW;AACjE,eAAO;AAAA,UACL,SAAS,CAAC,EAAE,MAAM,QAAQ,MAAM,KAAK,UAAU,QAAQ,MAAM,CAAC,EAAE,CAAC;AAAA,QACnE;AAAA,MACF;AAAA,MAEA,KAAK,uBAAuB;AAC1B,cAAM,gBAAgB,aAAa,KAAK,WAAW,GAAG,WAAW;AACjE,cAAM,eAAe,aAAa,KAAK,UAAU,GAAG,UAAU;AAC9D,cAAM,eAAe,aAAa,KAAK,UAAU,GAAG,UAAU;AAC9D,cAAM,SAAS,MAAM,MAAM,iBAAiB;AAAA,UAC1C,WAAW;AAAA,UACX,UAAU;AAAA,UACV,UAAU;AAAA,UACV,mBAAoB,KAAK,mBAAmB,KAA4B;AAAA,UACxE,MAAM;AAAA,YACJ,GAAI,KAAK,SAAS,MAAM,SAAY,EAAE,SAAS,KAAK,SAAS,EAAE,IAAI,CAAC;AAAA,YACpE,GAAI,KAAK,WAAW,MAAM,SAAY,EAAE,WAAW,KAAK,WAAW,EAAE,IAAI,CAAC;AAAA,UAC5E;AAAA,QACF,CAAC;AACD,cAAM,UAAU,OAAO,UAAU;AACjC,YAAI,WAAW,OAAO,SAAS;AAC7B,kBAAQ,OAAO,MAAM;AAAA,EAAoC,iBAAiB,OAAO,OAAO,CAAC,EAAE;AAAA,QAC7F;AACA,eAAO;AAAA,UACL,SAAS,CAAC,EAAE,MAAM,QAAQ,MAAM,KAAK,UAAU,QAAQ,MAAM,CAAC,EAAE,CAAC;AAAA,UACjE,GAAI,UAAU,EAAE,SAAS,KAAK,IAAI,CAAC;AAAA,QACrC;AAAA,MACF;AAAA,MAEA,KAAK,yBAAyB;AAC5B,cAAM,oBAAoB,aAAa,KAAK,WAAW,GAAG,WAAW;AACrE,cAAM,mBAAmB,aAAa,KAAK,UAAU,GAAG,UAAU;AAClE,cAAM,SAAS,MAAM,MAAM,mBAAmB;AAAA,UAC5C,WAAW;AAAA,UACX,UAAU;AAAA,UACV,mBAAoB,KAAK,mBAAmB,KAA4B;AAAA,UACxE,MAAM;AAAA,YACJ,GAAI,KAAK,cAAc,MAAM,SAAY,EAAE,cAAc,KAAK,cAAc,EAAE,IAAI,CAAC;AAAA,YACnF,GAAI,KAAK,mBAAmB,MAAM,SAAY,EAAE,mBAAmB,KAAK,mBAAmB,EAAE,IAAI,CAAC;AAAA,YAClG,GAAI,KAAK,SAAS,MAAM,SAAY,EAAE,SAAS,KAAK,SAAS,EAAE,IAAI,CAAC;AAAA,UACtE;AAAA,QACF,CAAC;AACD,cAAM,UAAU,OAAO,UAAU;AACjC,YAAI,WAAW,OAAO,SAAS;AAC7B,kBAAQ,OAAO,MAAM;AAAA,EAAwC,iBAAiB,OAAO,OAAO,CAAC,EAAE;AAAA,QACjG;AACA,eAAO;AAAA,UACL,SAAS,CAAC,EAAE,MAAM,QAAQ,MAAM,KAAK,UAAU,QAAQ,MAAM,CAAC,EAAE,CAAC;AAAA,UACjE,GAAI,UAAU,EAAE,SAAS,KAAK,IAAI,CAAC;AAAA,QACrC;AAAA,MACF;AAAA,MAEA;AACE,eAAO;AAAA,UACL,SAAS,CAAC,EAAE,MAAM,QAAQ,MAAM,iBAAiB,IAAI,GAAG,CAAC;AAAA,UACzD,SAAS;AAAA,QACX;AAAA,IACJ;AAAA,EACF,SAAS,KAAK;AACZ,UAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC/D,WAAO;AAAA,MACL,SAAS,CAAC,EAAE,MAAM,QAAQ,MAAM,UAAU,OAAO,GAAG,CAAC;AAAA,MACrD,SAAS;AAAA,IACX;AAAA,EACF;AACF;AAIA,SAAS,aAAa,UAAiC;AACrD,QAAM,OAAO,KAAK,UAAU,QAAQ;AACpC,UAAQ,OAAO,MAAM,OAAO,IAAI;AAClC;AAEA,eAAe,cAAc,KAAoC;AAC/D,QAAM,EAAE,IAAI,QAAQ,OAAO,IAAI;AAE/B,UAAQ,QAAQ;AAAA,IACd,KAAK,cAAc;AACjB,mBAAa;AAAA,QACX,SAAS;AAAA,QACT;AAAA,QACA,QAAQ;AAAA,UACN,iBAAiB;AAAA,UACjB,cAAc,EAAE,OAAO,CAAC,EAAE;AAAA,UAC1B,YAAY;AAAA,YACV,MAAM;AAAA,YACN,SAAS;AAAA,UACX;AAAA,QACF;AAAA,MACF,CAAC;AACD;AAAA,IACF;AAAA,IAEA,KAAK,6BAA6B;AAEhC;AAAA,IACF;AAAA,IAEA,KAAK,cAAc;AACjB,mBAAa;AAAA,QACX,SAAS;AAAA,QACT;AAAA,QACA,QAAQ,EAAE,OAAO,MAAM;AAAA,MACzB,CAAC;AACD;AAAA,IACF;AAAA,IAEA,KAAK,cAAc;AACjB,YAAM,WAAW,SAAS,MAAM;AAChC,YAAM,WAAY,SAAS,WAAW,KAA6C,CAAC;AAEpF,UAAI,CAAC,UAAU;AACb,qBAAa;AAAA,UACX,SAAS;AAAA,UACT;AAAA,UACA,OAAO,EAAE,MAAM,QAAQ,SAAS,oBAAoB;AAAA,QACtD,CAAC;AACD;AAAA,MACF;AAEA,YAAM,SAAS,MAAM,eAAe,UAAU,QAAQ;AACtD,mBAAa;AAAA,QACX,SAAS;AAAA,QACT;AAAA,QACA;AAAA,MACF,CAAC;AACD;AAAA,IACF;AAAA,IAEA,KAAK,QAAQ;AACX,mBAAa,EAAE,SAAS,OAAO,IAAI,QAAQ,CAAC,EAAE,CAAC;AAC/C;AAAA,IACF;AAAA,IAEA,SAAS;AAEP,UAAI,OAAO,WAAW,gBAAgB,GAAG;AAEvC;AAAA,MACF;AACA,mBAAa;AAAA,QACX,SAAS;AAAA,QACT;AAAA,QACA,OAAO,EAAE,MAAM,QAAQ,SAAS,qBAAqB,MAAM,GAAG;AAAA,MAChE,CAAC;AAAA,IACH;AAAA,EACF;AACF;AAIA,IAAM,KAAK,gBAAgB,EAAE,OAAO,QAAQ,MAAM,CAAC;AAGnD,IAAI,eAA8B,QAAQ,QAAQ;AAYlD,IAAM,qBAAqB,KAAK,KAAK;AAErC,GAAG,GAAG,QAAQ,CAAC,SAAiB;AAC9B,QAAM,UAAU,KAAK,KAAK;AAC1B,MAAI,CAAC,QAAS;AAEd,MAAI;AACJ,MAAI;AACF,UAAM,KAAK,MAAM,OAAO;AAAA,EAC1B,QAAQ;AACN,iBAAa;AAAA,MACX,SAAS;AAAA,MACT,IAAI;AAAA,MACJ,OAAO,EAAE,MAAM,QAAQ,SAAS,cAAc;AAAA,IAChD,CAAC;AACD;AAAA,EACF;AAEA,iBAAe,aACZ,KAAK,MAAM;AACV,QAAI;AACJ,UAAM,UAAU,IAAI,QAAe,CAAC,GAAG,WAAW;AAChD,cAAQ;AAAA,QACN,MAAM,OAAO,IAAI,MAAM,2BAA2B,kBAAkB,IAAI,CAAC;AAAA,QACzE;AAAA,MACF;AAAA,IACF,CAAC;AACD,WAAO,QAAQ,KAAK,CAAC,cAAc,GAAG,GAAG,OAAO,CAAC,EAAE,QAAQ,MAAM;AAC/D,UAAI,MAAO,cAAa,KAAK;AAAA,IAC/B,CAAC;AAAA,EACH,CAAC,EACA,MAAM,CAAC,QAAQ;AACd,UAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC/D,YAAQ,OAAO,MAAM,sCAAsC,OAAO;AAAA,CAAI;AAItE,QAAI,IAAI,OAAO,UAAa,IAAI,OAAO,MAAM;AAC3C,UAAI;AACF,qBAAa;AAAA,UACX,SAAS;AAAA,UACT,IAAI,IAAI;AAAA,UACR,OAAO;AAAA,YACL,MAAM;AAAA,YACN,SAAS,6BAA6B,OAAO;AAAA,UAC/C;AAAA,QACF,CAAC;AAAA,MACH,SAAS,SAAS;AAChB,gBAAQ,OAAO;AAAA,UACb,qDAAqD,mBAAmB,QAAQ,QAAQ,UAAU,OAAO,OAAO,CAAC;AAAA;AAAA,QACnH;AAAA,MACF;AAAA,IACF;AAAA,EACF,CAAC;AACL,CAAC;AAED,GAAG,GAAG,SAAS,MAAM;AACnB,UAAQ,KAAK,CAAC;AAChB,CAAC;AAGD,QAAQ,GAAG,sBAAsB,CAAC,QAAQ;AACxC,UAAQ,OAAO;AAAA,IACb,2CAA2C,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC;AAAA;AAAA,EAC7F;AACF,CAAC;AAED,QAAQ,OAAO,MAAM,uCAAuC,UAAU,YAAY,WAAW,QAAQ,MAAM;AAAA,CAAK;","names":["deps","projectId","columnName","forwardResult","projectId"]}

package/dist/{pipeline-GOM4OKNV.js → pipeline-IT7LJXKA.js}

@@ -1,6 +1,6 @@
 import {
   runGates
-} from "./chunk-MKKHLFA5.js";
+} from "./chunk-SDMNXFPV.js";
 import {
   ClaudeProvider,
   RalphLoop,
@@ -4984,4 +4984,4 @@ export {
   runPipeline,
   stopPipeline
 };
-//# sourceMappingURL=pipeline-GOM4OKNV.js.map
+//# sourceMappingURL=pipeline-IT7LJXKA.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "kantban-cli",
-  "version": "0.1.45",
+  "version": "0.1.46",
   "description": "CLI for KantBan pipeline orchestration — bridges KantBan boards to local Claude Code sessions",
   "type": "module",
   "license": "UNLICENSED",

package/dist/chunk-MKKHLFA5.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/lib/gate-runner.ts"],"sourcesContent":["import { execFile } from 'node:child_process';\nimport { parseTimeout } from './gate-config.js';\nimport { shellArgs, normalizeEol } from './platform.js';\nimport type { GateDefinition, GateResult } from '@kantban/types';\n\nexport interface RunOptions {\n  timeoutMs?: number;\n  totalTimeoutMs?: number;\n  cwd?: string;\n  env?: Record<string, string>;\n  maxBuffer?: number;\n}\n\nexport async function runGate(\n  gate: GateDefinition,\n  options: RunOptions = {},\n): Promise<GateResult> {\n  const timeoutMs = gate.timeout ? parseTimeout(gate.timeout) : (options.timeoutMs ?? 60_000);\n  const start = Date.now();\n\n  return new Promise<GateResult>((resolve) => {\n    // SECURITY: gate.run is an operator-authored shell command from pipeline.gates.yaml.\n    // It is executed with full process privileges via `sh -c`. This is intentional —\n    // gates are trusted operator code, not user input. If gate config sources are ever\n    // extended to accept user-supplied values, sanitization must be added here.\n    const [shell, shellPrefix] = shellArgs();\n    const child = execFile(shell, [...shellPrefix, gate.run], {\n      timeout: timeoutMs,\n      cwd: options.cwd,\n      env: { ...process.env, ...options.env },\n      maxBuffer: options.maxBuffer ?? 1024 * 1024, // 1MB output cap\n    }, (error, stdout, stderr) => {\n      const duration_ms = Date.now() - start;\n      const output = normalizeEol((stdout + stderr).trim());\n      const timed_out = error?.killed === true;\n      const buffer_exceeded = (error as NodeJS.ErrnoException)?.code === 'ERR_CHILD_PROCESS_STDIO_MAXBUFFER';\n\n      if (error) {\n        let annotation = '';\n        if (timed_out) annotation = `\\n[TIMED OUT after ${timeoutMs}ms]`;\n        else if (buffer_exceeded) annotation = `\\n[OUTPUT TRUNCATED — buffer limit exceeded]`;\n\n        resolve({\n          name: gate.name,\n          passed: false,\n          required: gate.required ?? true,\n          duration_ms,\n          output: output + annotation,\n          stderr: normalizeEol(stderr.trim()),\n          exit_code: child.exitCode ?? (typeof error.code === 'number' ? error.code : 1),\n          timed_out: timed_out || buffer_exceeded,\n        });\n        return;\n      }\n\n      resolve({\n        name: gate.name,\n        passed: true,\n        required: gate.required ?? true,\n        duration_ms,\n        output,\n        stderr: normalizeEol(stderr.trim()),\n        exit_code: 0,\n        timed_out: false,\n      });\n    });\n  });\n}\n\n/** Format gate failures into a structured error string for agent/CLI display. */\nexport function formatGateErrors(results: GateResult[]): string {\n  const failures = results.filter((r) => !r.passed);\n  if (failures.length === 0) return 'All gates passed.';\n\n  return failures\n    .map((r) => {\n      const lines = [`Gate \"${r.name}\" (${r.required ? 'required' : 'advisory'}): FAILED`];\n      lines.push(`  Exit code: ${r.exit_code}`);\n      if (r.timed_out) lines.push('  Timed out: yes');\n      if (r.output) {\n        const stderr = normalizeEol(r.output).split('\\n').slice(-20).join('\\n');\n        lines.push(`  Output:\\n    ${stderr.replace(/\\n/g, '\\n    ')}`);\n      }\n      return lines.join('\\n');\n    })\n    .join('\\n\\n');\n}\n\nexport async function runGates(\n  gates: GateDefinition[],\n  options: RunOptions = {},\n): Promise<GateResult[]> {\n  const results: GateResult[] = [];\n  const totalStart = Date.now();\n\n  for (const gate of gates) {\n    // Check total timeout\n    if (options.totalTimeoutMs) {\n      const elapsed = Date.now() - totalStart;\n      if (elapsed >= options.totalTimeoutMs) {\n        // Remaining gates get timed-out results\n        results.push({\n          name: gate.name,\n          passed: false,\n          required: gate.required ?? true,\n          duration_ms: 0,\n          output: '[SKIPPED — total timeout exceeded]',\n          stderr: '',\n          exit_code: -1,\n          timed_out: true,\n        });\n        continue;\n      }\n      // Reduce per-gate timeout by elapsed time\n      const remainingMs = options.totalTimeoutMs - elapsed;\n      const gateTimeout = gate.timeout ? parseTimeout(gate.timeout) : (options.timeoutMs ?? 60_000);\n      const effectiveTimeout = Math.min(gateTimeout, remainingMs);\n      results.push(await runGate(gate, { ...options, timeoutMs: effectiveTimeout }));\n    } else {\n      results.push(await runGate(gate, options));\n    }\n  }\n\n  return results;\n}\n"],"mappings":";;;;;;;;;AAAA,SAAS,gBAAgB;AAazB,eAAsB,QACpB,MACA,UAAsB,CAAC,GACF;AACrB,QAAM,YAAY,KAAK,UAAU,aAAa,KAAK,OAAO,IAAK,QAAQ,aAAa;AACpF,QAAM,QAAQ,KAAK,IAAI;AAEvB,SAAO,IAAI,QAAoB,CAAC,YAAY;AAK1C,UAAM,CAAC,OAAO,WAAW,IAAI,UAAU;AACvC,UAAM,QAAQ,SAAS,OAAO,CAAC,GAAG,aAAa,KAAK,GAAG,GAAG;AAAA,MACxD,SAAS;AAAA,MACT,KAAK,QAAQ;AAAA,MACb,KAAK,EAAE,GAAG,QAAQ,KAAK,GAAG,QAAQ,IAAI;AAAA,MACtC,WAAW,QAAQ,aAAa,OAAO;AAAA;AAAA,IACzC,GAAG,CAAC,OAAO,QAAQ,WAAW;AAC5B,YAAM,cAAc,KAAK,IAAI,IAAI;AACjC,YAAM,SAAS,cAAc,SAAS,QAAQ,KAAK,CAAC;AACpD,YAAM,YAAY,OAAO,WAAW;AACpC,YAAM,kBAAmB,OAAiC,SAAS;AAEnE,UAAI,OAAO;AACT,YAAI,aAAa;AACjB,YAAI,UAAW,cAAa;AAAA,mBAAsB,SAAS;AAAA,iBAClD,gBAAiB,cAAa;AAAA;AAEvC,gBAAQ;AAAA,UACN,MAAM,KAAK;AAAA,UACX,QAAQ;AAAA,UACR,UAAU,KAAK,YAAY;AAAA,UAC3B;AAAA,UACA,QAAQ,SAAS;AAAA,UACjB,QAAQ,aAAa,OAAO,KAAK,CAAC;AAAA,UAClC,WAAW,MAAM,aAAa,OAAO,MAAM,SAAS,WAAW,MAAM,OAAO;AAAA,UAC5E,WAAW,aAAa;AAAA,QAC1B,CAAC;AACD;AAAA,MACF;AAEA,cAAQ;AAAA,QACN,MAAM,KAAK;AAAA,QACX,QAAQ;AAAA,QACR,UAAU,KAAK,YAAY;AAAA,QAC3B;AAAA,QACA;AAAA,QACA,QAAQ,aAAa,OAAO,KAAK,CAAC;AAAA,QAClC,WAAW;AAAA,QACX,WAAW;AAAA,MACb,CAAC;AAAA,IACH,CAAC;AAAA,EACH,CAAC;AACH;AAGO,SAAS,iBAAiB,SAA+B;AAC9D,QAAM,WAAW,QAAQ,OAAO,CAAC,MAAM,CAAC,EAAE,MAAM;AAChD,MAAI,SAAS,WAAW,EAAG,QAAO;AAElC,SAAO,SACJ,IAAI,CAAC,MAAM;AACV,UAAM,QAAQ,CAAC,SAAS,EAAE,IAAI,MAAM,EAAE,WAAW,aAAa,UAAU,WAAW;AACnF,UAAM,KAAK,gBAAgB,EAAE,SAAS,EAAE;AACxC,QAAI,EAAE,UAAW,OAAM,KAAK,kBAAkB;AAC9C,QAAI,EAAE,QAAQ;AACZ,YAAM,SAAS,aAAa,EAAE,MAAM,EAAE,MAAM,IAAI,EAAE,MAAM,GAAG,EAAE,KAAK,IAAI;AACtE,YAAM,KAAK;AAAA,MAAkB,OAAO,QAAQ,OAAO,QAAQ,CAAC,EAAE;AAAA,IAChE;AACA,WAAO,MAAM,KAAK,IAAI;AAAA,EACxB,CAAC,EACA,KAAK,MAAM;AAChB;AAEA,eAAsB,SACpB,OACA,UAAsB,CAAC,GACA;AACvB,QAAM,UAAwB,CAAC;AAC/B,QAAM,aAAa,KAAK,IAAI;AAE5B,aAAW,QAAQ,OAAO;AAExB,QAAI,QAAQ,gBAAgB;AAC1B,YAAM,UAAU,KAAK,IAAI,IAAI;AAC7B,UAAI,WAAW,QAAQ,gBAAgB;AAErC,gBAAQ,KAAK;AAAA,UACX,MAAM,KAAK;AAAA,UACX,QAAQ;AAAA,UACR,UAAU,KAAK,YAAY;AAAA,UAC3B,aAAa;AAAA,UACb,QAAQ;AAAA,UACR,QAAQ;AAAA,UACR,WAAW;AAAA,UACX,WAAW;AAAA,QACb,CAAC;AACD;AAAA,MACF;AAEA,YAAM,cAAc,QAAQ,iBAAiB;AAC7C,YAAM,cAAc,KAAK,UAAU,aAAa,KAAK,OAAO,IAAK,QAAQ,aAAa;AACtF,YAAM,mBAAmB,KAAK,IAAI,aAAa,WAAW;AAC1D,cAAQ,KAAK,MAAM,QAAQ,MAAM,EAAE,GAAG,SAAS,WAAW,iBAAiB,CAAC,CAAC;AAAA,IAC/E,OAAO;AACL,cAAQ,KAAK,MAAM,QAAQ,MAAM,OAAO,CAAC;AAAA,IAC3C;AAAA,EACF;AAEA,SAAO;AACT;","names":[]}