@mastra/factory 0.0.0-aggregate-trace-20261015182851

package/dist/rules/types.js

@@ -0,0 +1,154 @@
+//#region src/rules/types.ts
+function externalSourceForWorkItem(source, sourceKey, url) {
+	const [integrationId, type] = source === "github-pr" ? ["github", "pull-request"] : source === "github-issue" ? ["github", "issue"] : source === "gitlab-pr" ? ["gitlab", "pull-request"] : source === "gitlab-issue" ? ["gitlab", "issue"] : source === "linear-issue" ? ["linear", "issue"] : source === "jira-issue" ? ["jira", "issue"] : source === "incidentio-follow-up" ? ["incidentio", "issue"] : ["factory", "manual"];
+	return {
+		integrationId,
+		type,
+		externalId: sourceKey,
+		...url ? { url } : {}
+	};
+}
+/** The source label that holds an issue at rest until a maintainer decides; compared lowercased. */
+const NEEDS_APPROVAL_LABEL = "status: needs approval";
+const AUTO_TRIAGED_LABEL = "status: auto-triaged";
+function needsApproval(item) {
+	const labels = item.metadata?.labels;
+	if (!Array.isArray(labels)) return false;
+	return labels.some((label) => typeof label === "string" && label.toLowerCase() === "status: needs approval") && !item.acceptedAt && (item.stages ?? ["intake"]).every((stage) => stage === "intake" || stage === "triage");
+}
+function workItemSource(source) {
+	if (!source) return "manual";
+	if (source.integrationId === "linear") return "linear-issue";
+	if (source.integrationId === "gitlab") return source.type === "pull-request" ? "gitlab-pr" : "gitlab-issue";
+	if (source.integrationId === "jira") return "jira-issue";
+	if (source.integrationId === "incidentio") return "incidentio-follow-up";
+	if (source.integrationId !== "github") return "manual";
+	return source.type === "pull-request" ? "github-pr" : "github-issue";
+}
+function externallyAuthored(item) {
+	if (![
+		"github-pr",
+		"github-issue",
+		"gitlab-pr",
+		"gitlab-issue"
+	].includes(item.source)) return false;
+	if (item.metadata?.factoryAuthored === true) return false;
+	return item.metadata?.authorTrusted !== true;
+}
+function knownExternalAuthor(item) {
+	return externallyAuthored(item) && item.metadata?.authorTrusted === false;
+}
+function externallyAuthoredWorkItem(item) {
+	return externallyAuthored({
+		source: workItemSource(item.externalSource),
+		metadata: item.metadata
+	});
+}
+const FACTORY_RULE_STAGES = [
+	"intake",
+	"triage",
+	"planning",
+	"execute",
+	"review",
+	"done",
+	"canceled"
+];
+const FACTORY_ROLE_STAGES = {
+	triage: "triage",
+	plan: "planning",
+	work: "execute",
+	review: "review"
+};
+function isFactoryRole(value) {
+	return value in FACTORY_ROLE_STAGES;
+}
+const FACTORY_TRIAGE_TYPES = [
+	"bug",
+	"feature request",
+	"docs",
+	"question/support",
+	"maintenance",
+	"duplicate",
+	"resolved",
+	"invalid",
+	"spam",
+	"out-of-scope",
+	"other"
+];
+function isFactoryTriageType(value) {
+	return typeof value === "string" && FACTORY_TRIAGE_TYPES.some((type) => type === value);
+}
+function isFactoryRuleStage(value) {
+	return typeof value === "string" && FACTORY_RULE_STAGES.some((stage) => stage === value);
+}
+function factoryRuleStage(stages) {
+	const stage = stages.length === 1 ? stages[0] : void 0;
+	return typeof stage === "string" && stage.length > 0 ? stage : void 0;
+}
+function isTerminalFactoryRuleStage(stages) {
+	const stage = factoryRuleStage(stages);
+	return stage === "done" || stage === "canceled";
+}
+/** Working lanes hold cards with a seat engaged; Intake, Done and Canceled rest them. */
+function isWorkingFactoryRuleStage(stage) {
+	return stage !== "intake" && !isTerminalFactoryRuleStage([stage]);
+}
+function factoryLaneForRole(role) {
+	return isFactoryRole(role) ? FACTORY_ROLE_STAGES[role] : void 0;
+}
+const FACTORY_RULE_BOARDS = ["work", "review"];
+const FACTORY_RULE_SOURCES = [
+	"issue",
+	"pullRequest",
+	"gitlabIssue",
+	"gitlabPullRequest",
+	"linearIssue",
+	"jiraIssue",
+	"incidentioFollowUp",
+	"manual"
+];
+const FACTORY_GITHUB_EVENTS = [
+	"issueOpened",
+	"issueEdited",
+	"issueClosed",
+	"issueCommentCreated",
+	"issueCommentEdited",
+	"issueCommentDeleted",
+	"pullRequestOpened",
+	"pullRequestUpdated",
+	"pullRequestCommentCreated",
+	"pullRequestReviewRequested",
+	"pullRequestReviewSubmitted",
+	"pullRequestMerged",
+	"pullRequestClosed"
+];
+const FACTORY_GITLAB_EVENTS = [
+	"issueOpened",
+	"issueUpdated",
+	"issueClosed",
+	"issueCommented",
+	"mergeRequestOpened",
+	"mergeRequestUpdated",
+	"mergeRequestCommented",
+	"mergeRequestMerged",
+	"mergeRequestClosed"
+];
+const FACTORY_LINEAR_EVENTS = ["issueObserved", "issueClosed"];
+const FACTORY_JIRA_EVENTS = ["issueObserved", "issueClosed"];
+const FACTORY_INCIDENTIO_EVENTS = ["followUpObserved", "followUpClosed"];
+function factoryRuleSourceForWorkItem(source) {
+	switch (source) {
+		case "github-issue": return "issue";
+		case "github-pr": return "pullRequest";
+		case "gitlab-issue": return "gitlabIssue";
+		case "gitlab-pr": return "gitlabPullRequest";
+		case "linear-issue": return "linearIssue";
+		case "jira-issue": return "jiraIssue";
+		case "incidentio-follow-up": return "incidentioFollowUp";
+		case "manual": return "manual";
+	}
+}
+//#endregion
+export { AUTO_TRIAGED_LABEL, FACTORY_GITHUB_EVENTS, FACTORY_GITLAB_EVENTS, FACTORY_INCIDENTIO_EVENTS, FACTORY_JIRA_EVENTS, FACTORY_LINEAR_EVENTS, FACTORY_ROLE_STAGES, FACTORY_RULE_BOARDS, FACTORY_RULE_SOURCES, FACTORY_RULE_STAGES, FACTORY_TRIAGE_TYPES, NEEDS_APPROVAL_LABEL, externalSourceForWorkItem, externallyAuthored, externallyAuthoredWorkItem, factoryLaneForRole, factoryRuleSourceForWorkItem, factoryRuleStage, isFactoryRole, isFactoryRuleStage, isFactoryTriageType, isTerminalFactoryRuleStage, isWorkingFactoryRuleStage, knownExternalAuthor, needsApproval, workItemSource };
+
+//# sourceMappingURL=types.js.map

package/dist/rules/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","names":[],"sources":["../../src/rules/types.ts"],"sourcesContent":["import type { ExternalWorkItemSource } from '../storage/domains/work-items/base.js';\n\nexport type WorkItemSource =\n  | 'github-issue'\n  | 'github-pr'\n  | 'gitlab-issue'\n  | 'gitlab-pr'\n  | 'linear-issue'\n  | 'jira-issue'\n  | 'incidentio-follow-up'\n  | 'manual';\n\nexport function externalSourceForWorkItem(\n  source: WorkItemSource,\n  sourceKey: string,\n  url?: string,\n): ExternalWorkItemSource {\n  const [integrationId, type] =\n    source === 'github-pr'\n      ? ['github', 'pull-request']\n      : source === 'github-issue'\n        ? ['github', 'issue']\n        : source === 'gitlab-pr'\n          ? ['gitlab', 'pull-request']\n          : source === 'gitlab-issue'\n            ? ['gitlab', 'issue']\n            : source === 'linear-issue'\n              ? ['linear', 'issue']\n              : source === 'jira-issue'\n                ? ['jira', 'issue']\n                : source === 'incidentio-follow-up'\n                  ? ['incidentio', 'issue']\n                  : ['factory', 'manual'];\n  return { integrationId, type, externalId: sourceKey, ...(url ? { url } : {}) };\n}\n\n/** The source label that holds an issue at rest until a maintainer decides; compared lowercased. */\nexport const NEEDS_APPROVAL_LABEL = 'status: needs approval';\nexport const AUTO_TRIAGED_LABEL = 'status: auto-triaged';\n\n// The label only holds a card at rest: once a person accepted it, or it sits in a working\n// lane only a person could have moved it into, the label is stale until the source catches up.\nexport function needsApproval(item: {\n  metadata: Record<string, unknown> | null;\n  stages?: readonly string[];\n  acceptedAt?: Date | string | null;\n}): boolean {\n  const labels = item.metadata?.labels;\n  if (!Array.isArray(labels)) return false;\n  return (\n    labels.some(label => typeof label === 'string' && label.toLowerCase() === NEEDS_APPROVAL_LABEL) &&\n    !item.acceptedAt &&\n    (item.stages ?? ['intake']).every(stage => stage === 'intake' || stage === 'triage')\n  );\n}\n\nexport function workItemSource(source: ExternalWorkItemSource | null): WorkItemSource {\n  if (!source) return 'manual';\n  if (source.integrationId === 'linear') return 'linear-issue';\n  if (source.integrationId === 'gitlab') return source.type === 'pull-request' ? 'gitlab-pr' : 'gitlab-issue';\n  if (source.integrationId === 'jira') return 'jira-issue';\n  if (source.integrationId === 'incidentio') return 'incidentio-follow-up';\n  // Only GitHub, GitLab, Linear, Jira, and incident.io have provider-specific\n  // rules; anything else (a Slack thread, say) is a plain work item, not a\n  // mislabeled GitHub issue.\n  if (source.integrationId !== 'github') return 'manual';\n  return source.type === 'pull-request' ? 'github-pr' : 'github-issue';\n}\n\n// Authored outside the write-access circle: a missing trust stamp fails closed until\n// the reconcile sweep backfills it, and Factory's own PRs pass through `factoryAuthored`.\nexport function externallyAuthored(item: { source: string; metadata: Record<string, unknown> | null }): boolean {\n  if (!['github-pr', 'github-issue', 'gitlab-pr', 'gitlab-issue'].includes(item.source)) return false;\n  if (item.metadata?.factoryAuthored === true) return false;\n  return item.metadata?.authorTrusted !== true;\n}\n\n// The board mark claims only what GitHub answered: a missing stamp is silence, not an outside contribution.\nexport function knownExternalAuthor(item: { source: string; metadata: Record<string, unknown> | null }): boolean {\n  return externallyAuthored(item) && item.metadata?.authorTrusted === false;\n}\n\nexport function externallyAuthoredWorkItem(item: {\n  externalSource: ExternalWorkItemSource | null;\n  metadata: Record<string, unknown> | null;\n}): boolean {\n  return externallyAuthored({ source: workItemSource(item.externalSource), metadata: item.metadata });\n}\n\nexport const FACTORY_RULE_STAGES = ['intake', 'triage', 'planning', 'execute', 'review', 'done', 'canceled'] as const;\nexport type FactoryRuleStage = (typeof FACTORY_RULE_STAGES)[number] | (string & {});\n\n// Each role and the working stage its run holds the card in. Key order is the\n// seat pipeline order — Resume depth derives from it.\nexport const FACTORY_ROLE_STAGES = {\n  triage: 'triage',\n  plan: 'planning',\n  work: 'execute',\n  review: 'review',\n} as const satisfies Record<string, FactoryRuleStage>;\nexport type FactoryRole = keyof typeof FACTORY_ROLE_STAGES;\n\nexport function isFactoryRole(value: string): value is FactoryRole {\n  return value in FACTORY_ROLE_STAGES;\n}\n\nexport const FACTORY_TRIAGE_TYPES = [\n  'bug',\n  'feature request',\n  'docs',\n  'question/support',\n  'maintenance',\n  'duplicate',\n  'resolved',\n  'invalid',\n  'spam',\n  'out-of-scope',\n  'other',\n] as const;\nexport type FactoryTriageType = (typeof FACTORY_TRIAGE_TYPES)[number];\n\nexport function isFactoryTriageType(value: unknown): value is FactoryTriageType {\n  return typeof value === 'string' && FACTORY_TRIAGE_TYPES.some(type => type === value);\n}\n\nexport function isFactoryRuleStage(value: unknown): value is FactoryRuleStage {\n  return typeof value === 'string' && FACTORY_RULE_STAGES.some(stage => stage === value);\n}\n\nexport function factoryRuleStage(stages: readonly string[]): FactoryRuleStage | undefined {\n  const stage = stages.length === 1 ? stages[0] : undefined;\n  return typeof stage === 'string' && stage.length > 0 ? stage : undefined;\n}\n\nexport function isTerminalFactoryRuleStage(stages: readonly string[]): boolean {\n  const stage = factoryRuleStage(stages);\n  return stage === 'done' || stage === 'canceled';\n}\n\n/** Working lanes hold cards with a seat engaged; Intake, Done and Canceled rest them. */\nexport function isWorkingFactoryRuleStage(stage: FactoryRuleStage): boolean {\n  return stage !== 'intake' && !isTerminalFactoryRuleStage([stage]);\n}\n\n// Consulted only for the Intake exit: roles don't own lanes, so a card already\n// in a working or terminal lane stays put when a run starts.\nexport function factoryLaneForRole(role: string): FactoryRuleStage | undefined {\n  return isFactoryRole(role) ? FACTORY_ROLE_STAGES[role] : undefined;\n}\n\nexport const FACTORY_RULE_BOARDS = ['work', 'review'] as const;\nexport type FactoryRuleBoard = (typeof FACTORY_RULE_BOARDS)[number] | (string & {});\n\nexport const FACTORY_RULE_SOURCES = [\n  'issue',\n  'pullRequest',\n  'gitlabIssue',\n  'gitlabPullRequest',\n  'linearIssue',\n  'jiraIssue',\n  'incidentioFollowUp',\n  'manual',\n] as const;\nexport type FactoryRuleSource = (typeof FACTORY_RULE_SOURCES)[number];\n\nexport const FACTORY_GITHUB_EVENTS = [\n  'issueOpened',\n  'issueEdited',\n  'issueClosed',\n  'issueCommentCreated',\n  'issueCommentEdited',\n  'issueCommentDeleted',\n  'pullRequestOpened',\n  'pullRequestUpdated',\n  'pullRequestCommentCreated',\n  'pullRequestReviewRequested',\n  'pullRequestReviewSubmitted',\n  'pullRequestMerged',\n  'pullRequestClosed',\n] as const;\nexport type FactoryGithubEventName = (typeof FACTORY_GITHUB_EVENTS)[number];\n\nexport const FACTORY_GITLAB_EVENTS = [\n  'issueOpened',\n  'issueUpdated',\n  'issueClosed',\n  'issueCommented',\n  'mergeRequestOpened',\n  'mergeRequestUpdated',\n  'mergeRequestCommented',\n  'mergeRequestMerged',\n  'mergeRequestClosed',\n] as const;\nexport type FactoryGitLabEventName = (typeof FACTORY_GITLAB_EVENTS)[number];\n\nexport const FACTORY_LINEAR_EVENTS = ['issueObserved', 'issueClosed'] as const;\nexport type FactoryLinearEventName = (typeof FACTORY_LINEAR_EVENTS)[number];\n\nexport const FACTORY_JIRA_EVENTS = ['issueObserved', 'issueClosed'] as const;\nexport type FactoryJiraEventName = (typeof FACTORY_JIRA_EVENTS)[number];\n\nexport const FACTORY_INCIDENTIO_EVENTS = ['followUpObserved', 'followUpClosed'] as const;\nexport type FactoryIncidentioEventName = (typeof FACTORY_INCIDENTIO_EVENTS)[number];\n\nexport type FactoryRuleJsonValue =\n  | null\n  | boolean\n  | number\n  | string\n  | FactoryRuleJsonValue[]\n  | { [key: string]: FactoryRuleJsonValue };\n\nexport interface FactoryRuleItemContext {\n  id: string;\n  source: WorkItemSource;\n  sourceKey: string | null;\n  parentWorkItemId: string | null;\n  title: string;\n  url: string | null;\n  stages: readonly string[];\n  acceptedAt: Date | null;\n  /** Intake-stamped facts about the source — repository id, reporter login, labels. */\n  metadata: Record<string, unknown> | null;\n}\n\nexport type FactoryRuleActor =\n  | { type: 'human'; id: string }\n  | { type: 'agent'; bindingId: string; role: string }\n  | { type: 'github'; login: string; trusted: boolean; factoryAuthored: boolean }\n  | { type: 'gitlab'; username: string; trusted: boolean; factoryAuthored: boolean }\n  | { type: 'system'; id: string };\n\nexport interface FactoryRuleIngressIdentity {\n  type: 'human' | 'agent' | 'toolResult' | 'github' | 'gitlab' | 'linear' | 'jira' | 'incidentio' | 'rule';\n  id: string;\n}\n\nexport interface FactoryRuleCausalEntry {\n  ingressId: string;\n  decisionType: FactoryCommitDecision['type'];\n}\n\n/** The phase a card sits in, as its board declares it. */\nexport interface FactoryRulePhaseContext {\n  id: string;\n  kind: 'resting' | 'working' | 'terminal';\n  /** Seat carrying a working phase; absent for resting and terminal phases. */\n  role?: string;\n  /** Outcome names the phase declares, e.g. `approved` or `canceled`; empty when it declares none. */\n  outcomes: readonly string[];\n}\n\nexport interface FactoryRuleContextBase {\n  tenant: { orgId: string; projectId: string };\n  actor: FactoryRuleActor;\n  ingress: FactoryRuleIngressIdentity;\n  cause: string;\n  causalChain: readonly FactoryRuleCausalEntry[];\n  configVersion: string;\n}\n\nexport interface FactoryBoundRuleContext extends FactoryRuleContextBase {\n  item: FactoryRuleItemContext;\n  board: FactoryRuleBoard;\n  itemRevision: number;\n}\n\nexport interface FactoryStageRuleContext extends FactoryBoundRuleContext {\n  source: FactoryRuleSource;\n  stage: FactoryRuleStage;\n  fromStage: FactoryRuleStage;\n  toStage: FactoryRuleStage;\n}\n\nexport interface FactoryToolResultRuleContext extends FactoryBoundRuleContext {\n  toolName: string;\n  threadId: string;\n  assistantMessageId: string;\n  toolCallId: string;\n  result: {\n    status: 'success' | 'error';\n    value: FactoryRuleJsonValue;\n  };\n}\n\nexport interface FactoryGithubRuleContext extends FactoryRuleContextBase {\n  item?: FactoryRuleItemContext;\n  board?: FactoryRuleBoard;\n  itemRevision?: number;\n  /** Where the card's board sends it when its tracked source closes. */\n  boardClosure?: FactoryRuleBoardClosure;\n  /** What the card's current phase means on its board; absent without a card or when the board does not declare the phase. */\n  phase?: FactoryRulePhaseContext;\n  /**\n   * Board an issue's labels route it to, when the project has a matching label route and that board\n   * is installed. Absent for pull requests and for issues whose labels select nothing.\n   */\n  intake?: FactoryRuleIntakeTarget;\n  /**\n   * Set on the one evaluation per pull request delivery that files the pull\n   * request's own Review card. Opening a pull request concerns two cards — that\n   * Review card and the Work item that authored the pull request — so the rule\n   * answers for the two separately: the arrival carries this flag and is\n   * committed against the authoring item when resolution found one, which is\n   * what links the new card to it, while the authoring item's own evaluation\n   * leaves the flag unset.\n   */\n  pullRequestIntake?: boolean;\n  event: FactoryGithubEventName;\n  deliveryId: string;\n  factory: { createdAt: string };\n  /** `installationId` is the GitHub App installation the delivery arrived through. */\n  repository: { id: number; fullName: string; installationId?: number };\n  issue?: {\n    number: number;\n    title: string;\n    url: string;\n    createdAt?: string;\n    updatedAt?: string;\n    assignees?: string[];\n    labels?: string[];\n    state?: 'open' | 'closed';\n    /** GitHub close reason: `completed`, `not_planned`, or `duplicate`. */\n    stateReason?: string;\n  };\n  issueChange?: { title: boolean; body: boolean };\n  issueComment?: {\n    id: number;\n    body?: string;\n    url?: string;\n    author?: string;\n    authorType?: string;\n    createdAt?: string;\n    updatedAt?: string;\n  };\n  pullRequest?: {\n    number: number;\n    title: string;\n    url: string;\n    createdAt?: string;\n    state: 'open' | 'closed';\n    draft: boolean;\n    merged: boolean;\n    assignees?: string[];\n    requestedReviewers?: string[];\n    labels?: string[];\n    author?: string;\n    factoryAuthored: boolean;\n    headBranch: string;\n    baseBranch: string;\n  };\n  /** Present on `pullRequestReviewRequested`: who review was (re-)requested from. */\n  reviewRequest?: { reviewer: string; factoryReviewer: boolean };\n  /** Present when a PR comment uses Factory's exact review command. */\n  reviewCommand?: { command: 'review' | 're-review'; target: string };\n  /** Present on `pullRequestReviewSubmitted`: the review that was just posted. */\n  review?: { id: number; state: string; url: string; author?: string; body?: string };\n}\n\n/**\n * Where an intake source binding says new items from this source should land.\n * Absent when the source is unbound or bound without a board (built-in routing).\n */\nexport interface FactoryRuleIntakeTarget {\n  board: string;\n  initialPhase: string;\n}\n\n/**\n * Where a source-closed rule moves the card, from the `sourceClosed` mapping its installed board\n * declares. Absent when the card's board is not installed or declares no mapping.\n */\nexport interface FactoryRuleBoardClosure {\n  /** Title of the card's board, for messages. */\n  boardTitle: string;\n  /** Terminal phase for a source that was completed. */\n  completed: FactoryRuleBoardClosurePhase;\n  /** Terminal phase for a source that was canceled or not planned. */\n  canceled: FactoryRuleBoardClosurePhase;\n  /** Whether the card already sits in a terminal phase of its board. */\n  itemTerminal: boolean;\n}\n\nexport interface FactoryRuleBoardClosurePhase {\n  phase: string;\n  title: string;\n}\n\nexport interface FactoryGitLabRuleContext extends FactoryRuleContextBase {\n  item?: FactoryRuleItemContext;\n  board?: FactoryRuleBoard;\n  itemRevision?: number;\n  /** Where the card's board sends it when its tracked source closes. */\n  boardClosure?: FactoryRuleBoardClosure;\n  /** What the card's current phase means on its board; absent without a card or when the board does not declare the phase. */\n  phase?: FactoryRulePhaseContext;\n  intake?: FactoryRuleIntakeTarget;\n  event: FactoryGitLabEventName;\n  deliveryId: string;\n  factory: { createdAt: string };\n  repository: { id: number; fullName: string; host: string };\n  issue?: {\n    number: number;\n    sourceKey: string;\n    title: string;\n    url: string;\n    createdAt?: string;\n    updatedAt?: string;\n    assignees?: string[];\n    labels?: string[];\n    labelColors?: Record<string, string>;\n    state?: 'open' | 'closed';\n    author?: string;\n    authorTrusted: boolean;\n  };\n  note?: {\n    id: number;\n    body?: string;\n    url?: string;\n    author?: string;\n    createdAt?: string;\n    updatedAt?: string;\n  };\n  mergeRequest?: {\n    number: number;\n    sourceKey: string;\n    title: string;\n    url: string;\n    createdAt?: string;\n    state: 'open' | 'closed';\n    draft: boolean;\n    merged: boolean;\n    assignees?: string[];\n    reviewers?: string[];\n    labels?: string[];\n    labelColors?: Record<string, string>;\n    author?: string;\n    authorTrusted: boolean;\n    factoryAuthored: boolean;\n    headBranch: string;\n    baseBranch: string;\n  };\n}\n\nexport interface FactoryLinearRuleContext extends FactoryRuleContextBase {\n  item?: FactoryRuleItemContext;\n  board?: FactoryRuleBoard;\n  itemRevision?: number;\n  /** Where the card's board sends it when its tracked source closes. */\n  boardClosure?: FactoryRuleBoardClosure;\n  /** What the card's current phase means on its board; absent without a card or when the board does not declare the phase. */\n  phase?: FactoryRulePhaseContext;\n  /** Bound board for the source this issue came from, when one is configured and installed. */\n  intake?: FactoryRuleIntakeTarget;\n  event: FactoryLinearEventName;\n  issue: {\n    id: string;\n    identifier: string;\n    title: string;\n    url: string;\n    state: string;\n    stateType: string;\n    priorityLabel: string;\n    assignee: string | null;\n    creator: string | null;\n    team: string | null;\n    labels: readonly string[];\n    createdAt: string;\n    updatedAt: string;\n    sourceId?: string | null;\n    projectId?: string | null;\n  };\n}\n\nexport interface FactoryJiraRuleContext extends FactoryRuleContextBase {\n  item?: FactoryRuleItemContext;\n  board?: FactoryRuleBoard;\n  itemRevision?: number;\n  /** Where the card's board sends it when its tracked source closes. */\n  boardClosure?: FactoryRuleBoardClosure;\n  /** What the card's current phase means on its board; absent without a card or when the board does not declare the phase. */\n  phase?: FactoryRulePhaseContext;\n  /** Bound board for the source this issue came from, when one is configured and installed. */\n  intake?: FactoryRuleIntakeTarget;\n  event: FactoryJiraEventName;\n  issue: {\n    /** Stable issue reference — the direct integration's Jira id or the Platform-encoded issue reference. */\n    id: string;\n    identifier: string;\n    title: string;\n    url: string;\n    state: string;\n    stateType: string;\n    priorityLabel: string;\n    assignee: string | null;\n    author: string | null;\n    project: string | null;\n    site: string | null;\n    labels: readonly string[];\n    createdAt: string;\n    updatedAt: string;\n  };\n}\n\nexport interface FactoryIncidentioRuleContext extends FactoryRuleContextBase {\n  item?: FactoryRuleItemContext;\n  board?: FactoryRuleBoard;\n  itemRevision?: number;\n  /** Where the card's board sends it when its tracked source closes. */\n  boardClosure?: FactoryRuleBoardClosure;\n  /** What the card's current phase means on its board; absent without a card or when the board does not declare the phase. */\n  phase?: FactoryRulePhaseContext;\n  /** Bound board for the source this follow-up came from, when one is configured and installed. */\n  intake?: FactoryRuleIntakeTarget;\n  event: FactoryIncidentioEventName;\n  issue: {\n    /** Stable item reference — the prefixed incident.io follow-up id the intake feed serves as `id`. */\n    id: string;\n    identifier: string;\n    title: string;\n    url: string;\n    state: string;\n    stateType: string;\n    priorityLabel: string;\n    assignee: string | null;\n    author: string | null;\n    /** Reference of the incident this follow-up belongs to, when available. */\n    incident: string | null;\n    labels: readonly string[];\n    createdAt: string;\n    updatedAt: string;\n  };\n}\n\nexport type FactoryRuleHandler<TContext> = (\n  context: Readonly<TContext>,\n) => FactoryRuleDecision | void | Promise<FactoryRuleDecision | void>;\n\nexport interface FactoryBoardRuleLeaf {\n  onEnter?: FactoryRuleHandler<FactoryStageRuleContext>;\n  onExit?: FactoryRuleHandler<FactoryStageRuleContext>;\n}\n\nexport type FactoryRuleRejectionCode =\n  | 'forbidden'\n  | 'invalid_transition'\n  | 'missing_binding'\n  | 'stale'\n  | 'timeout'\n  | 'rule_error'\n  | 'causal_depth_exceeded'\n  | 'repeated_transition'\n  | 'approval_required';\n\nexport interface FactoryRuleRejectDecision {\n  type: 'reject';\n  code: FactoryRuleRejectionCode;\n  reason: string;\n}\n\ninterface FactoryCommitDecisionBase {\n  idempotencyKey: string;\n}\n\nexport interface FactoryTransitionDecision extends FactoryCommitDecisionBase {\n  type: 'transition';\n  board: FactoryRuleBoard;\n  stage: FactoryRuleStage;\n  /**\n   * Delivered to the item's active session (waking it if idle) after the\n   * transition commits. Skipped when the item has no active run binding, so\n   * informational messages never fail the transition.\n   */\n  message?: { text: string; role?: string };\n  /**\n   * Runs the stage's entry rules even when the item is already in that stage.\n   * A transition to the current stage is normally inert, because most callers\n   * are correcting a board into a state it already holds. Re-entry is for the\n   * opposite case: the stage's work is in flight and has been invalidated, so\n   * it has to start over.\n   */\n  reenter?: boolean;\n}\n\nexport interface FactoryUpsertLinkedWorkItemDecision extends FactoryCommitDecisionBase {\n  type: 'upsertLinkedWorkItem';\n  board: FactoryRuleBoard;\n  source: WorkItemSource;\n  sourceKey: string;\n  /**\n   * Org-wide ownership key for the external record, when one Factory at a time\n   * may hold a live card for it (a stable Linear issue id, for instance). The\n   * store enforces it with a unique index, so a second project's materialization\n   * is refused rather than duplicated.\n   */\n  claimKey?: string;\n  title: string;\n  url: string | null;\n  stage: FactoryRuleStage;\n  /**\n   * File the card at `stage` as its first entry and run none of the board's\n   * phase rules for it — no arrival, no destination entry. The card is filed\n   * (or, if it already exists, moved) and left parked for a person; nothing is\n   * started for it. For external records that arrive already past the board's\n   * first step: a GitHub issue whose triage is already recorded, for instance.\n   *\n   * Placement is the whole decision. An existing card it reaches is moved to\n   * that stage through the same relocation the label routes use, and its\n   * metadata is left alone.\n   */\n  skipRules?: boolean;\n  metadata?: Record<string, FactoryRuleJsonValue>;\n}\n\ninterface FactoryInvokeSkillDecisionBase extends FactoryCommitDecisionBase {\n  type: 'invokeSkill';\n  role: string;\n  arguments?: string;\n  precedingMessage?: string;\n  cancelInFlight?: boolean;\n}\n\n/**\n * Starting an agent run. Most runs activate a skill, because the skill carries\n * the handoff contract later rules match on. A run whose completion is already\n * signalled some other way — Building finishes by opening a pull request, which\n * arrives as its own event — needs no contract, so it can carry a plain prompt\n * instead of an otherwise empty skill.\n */\nexport type FactoryInvokeSkillDecision = FactoryInvokeSkillDecisionBase &\n  (\n    | {\n        skillName: string;\n        prompt?: never;\n        /**\n         * Same-stage re-entry: the skill is already active in the card's live session,\n         * so deliver a compact continuation that references it by name and carries only\n         * the fresh arguments, instead of re-pasting the whole skill document. Only valid\n         * for named-skill decisions — a plain prompt run has no active skill to resume.\n         */\n        resume?: boolean;\n      }\n    | { prompt: string; skillName?: never; resume?: never }\n  );\n\nexport interface FactorySendMessageDecision extends FactoryCommitDecisionBase {\n  type: 'sendMessage';\n  /** Omitted: the card's live session, whichever seat holds it. Required with `prepareBinding`. */\n  role?: string;\n  message: string;\n  priority?: 'medium' | 'high' | 'urgent';\n  idleBehavior?: 'persist' | 'wake';\n  prepareBinding?: boolean;\n}\n\nexport interface FactoryNotifyDecision extends FactoryCommitDecisionBase {\n  type: 'notify';\n  title: string;\n  body?: string;\n  level?: 'info' | 'warning' | 'error';\n}\n\n/**\n * Dismisses Factory change requests an approval has superseded on a GitHub\n * pull request. Only reviews carrying Factory's `Verdict: request changes`\n * marker from an identity other than the approving one are dismissed.\n */\nexport interface FactoryDismissStaleReviewsDecision extends FactoryCommitDecisionBase {\n  type: 'dismissStaleReviews';\n  installationId: number;\n  repository: string;\n  pullRequestNumber: number;\n  approvingReviewId: string;\n  approvingAuthor: string;\n}\n\nexport type FactoryCommitDecision =\n  | FactoryTransitionDecision\n  | FactoryDismissStaleReviewsDecision\n  | FactoryUpsertLinkedWorkItemDecision\n  | FactoryInvokeSkillDecision\n  | FactorySendMessageDecision\n  | FactoryNotifyDecision;\n\nexport type FactoryRuleDecision = FactoryRuleRejectDecision | FactoryCommitDecision;\n\nexport interface FactoryTransitionResultAccepted {\n  status: 'accepted';\n  transitionId: string;\n  itemId: string;\n  revision: number;\n  stage: FactoryRuleStage;\n  decisions: FactoryCommitDecision[];\n}\n\nexport interface FactoryTransitionResultRejected {\n  status: 'rejected';\n  transitionId: string;\n  itemId: string;\n  code: FactoryRuleRejectionCode;\n  reason: string;\n}\n\nexport type FactoryTransitionResult = FactoryTransitionResultAccepted | FactoryTransitionResultRejected;\n\nexport function factoryRuleSourceForWorkItem(source: WorkItemSource): FactoryRuleSource {\n  switch (source) {\n    case 'github-issue':\n      return 'issue';\n    case 'github-pr':\n      return 'pullRequest';\n    case 'gitlab-issue':\n      return 'gitlabIssue';\n    case 'gitlab-pr':\n      return 'gitlabPullRequest';\n    case 'linear-issue':\n      return 'linearIssue';\n    case 'jira-issue':\n      return 'jiraIssue';\n    case 'incidentio-follow-up':\n      return 'incidentioFollowUp';\n    case 'manual':\n      return 'manual';\n  }\n}\n"],"mappings":";AAYA,SAAgB,0BACd,QACA,WACA,KACwB;CACxB,MAAM,CAAC,eAAe,QACpB,WAAW,cACP,CAAC,UAAU,cAAc,IACzB,WAAW,iBACT,CAAC,UAAU,OAAO,IAClB,WAAW,cACT,CAAC,UAAU,cAAc,IACzB,WAAW,iBACT,CAAC,UAAU,OAAO,IAClB,WAAW,iBACT,CAAC,UAAU,OAAO,IAClB,WAAW,eACT,CAAC,QAAQ,OAAO,IAChB,WAAW,yBACT,CAAC,cAAc,OAAO,IACtB,CAAC,WAAW,QAAQ;CACtC,OAAO;EAAE;EAAe;EAAM,YAAY;EAAW,GAAI,MAAM,EAAE,IAAI,IAAI,CAAC;CAAG;AAC/E;;AAGA,MAAa,uBAAuB;AACpC,MAAa,qBAAqB;AAIlC,SAAgB,cAAc,MAIlB;CACV,MAAM,SAAS,KAAK,UAAU;CAC9B,IAAI,CAAC,MAAM,QAAQ,MAAM,GAAG,OAAO;CACnC,OACE,OAAO,MAAK,UAAS,OAAO,UAAU,YAAY,MAAM,YAAY,MAAA,wBAA0B,KAC9F,CAAC,KAAK,eACL,KAAK,UAAU,CAAC,QAAQ,EAAA,CAAG,OAAM,UAAS,UAAU,YAAY,UAAU,QAAQ;AAEvF;AAEA,SAAgB,eAAe,QAAuD;CACpF,IAAI,CAAC,QAAQ,OAAO;CACpB,IAAI,OAAO,kBAAkB,UAAU,OAAO;CAC9C,IAAI,OAAO,kBAAkB,UAAU,OAAO,OAAO,SAAS,iBAAiB,cAAc;CAC7F,IAAI,OAAO,kBAAkB,QAAQ,OAAO;CAC5C,IAAI,OAAO,kBAAkB,cAAc,OAAO;CAIlD,IAAI,OAAO,kBAAkB,UAAU,OAAO;CAC9C,OAAO,OAAO,SAAS,iBAAiB,cAAc;AACxD;AAIA,SAAgB,mBAAmB,MAA6E;CAC9G,IAAI,CAAC;EAAC;EAAa;EAAgB;EAAa;CAAc,CAAC,CAAC,SAAS,KAAK,MAAM,GAAG,OAAO;CAC9F,IAAI,KAAK,UAAU,oBAAoB,MAAM,OAAO;CACpD,OAAO,KAAK,UAAU,kBAAkB;AAC1C;AAGA,SAAgB,oBAAoB,MAA6E;CAC/G,OAAO,mBAAmB,IAAI,KAAK,KAAK,UAAU,kBAAkB;AACtE;AAEA,SAAgB,2BAA2B,MAG/B;CACV,OAAO,mBAAmB;EAAE,QAAQ,eAAe,KAAK,cAAc;EAAG,UAAU,KAAK;CAAS,CAAC;AACpG;AAEA,MAAa,sBAAsB;CAAC;CAAU;CAAU;CAAY;CAAW;CAAU;CAAQ;AAAU;AAK3G,MAAa,sBAAsB;CACjC,QAAQ;CACR,MAAM;CACN,MAAM;CACN,QAAQ;AACV;AAGA,SAAgB,cAAc,OAAqC;CACjE,OAAO,SAAS;AAClB;AAEA,MAAa,uBAAuB;CAClC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;AAGA,SAAgB,oBAAoB,OAA4C;CAC9E,OAAO,OAAO,UAAU,YAAY,qBAAqB,MAAK,SAAQ,SAAS,KAAK;AACtF;AAEA,SAAgB,mBAAmB,OAA2C;CAC5E,OAAO,OAAO,UAAU,YAAY,oBAAoB,MAAK,UAAS,UAAU,KAAK;AACvF;AAEA,SAAgB,iBAAiB,QAAyD;CACxF,MAAM,QAAQ,OAAO,WAAW,IAAI,OAAO,KAAK,KAAA;CAChD,OAAO,OAAO,UAAU,YAAY,MAAM,SAAS,IAAI,QAAQ,KAAA;AACjE;AAEA,SAAgB,2BAA2B,QAAoC;CAC7E,MAAM,QAAQ,iBAAiB,MAAM;CACrC,OAAO,UAAU,UAAU,UAAU;AACvC;;AAGA,SAAgB,0BAA0B,OAAkC;CAC1E,OAAO,UAAU,YAAY,CAAC,2BAA2B,CAAC,KAAK,CAAC;AAClE;AAIA,SAAgB,mBAAmB,MAA4C;CAC7E,OAAO,cAAc,IAAI,IAAI,oBAAoB,QAAQ,KAAA;AAC3D;AAEA,MAAa,sBAAsB,CAAC,QAAQ,QAAQ;AAGpD,MAAa,uBAAuB;CAClC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;AAGA,MAAa,wBAAwB;CACnC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;AAGA,MAAa,wBAAwB;CACnC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;AAGA,MAAa,wBAAwB,CAAC,iBAAiB,aAAa;AAGpE,MAAa,sBAAsB,CAAC,iBAAiB,aAAa;AAGlE,MAAa,4BAA4B,CAAC,oBAAoB,gBAAgB;AAwf9E,SAAgB,6BAA6B,QAA2C;CACtF,QAAQ,QAAR;EACE,KAAK,gBACH,OAAO;EACT,KAAK,aACH,OAAO;EACT,KAAK,gBACH,OAAO;EACT,KAAK,aACH,OAAO;EACT,KAAK,gBACH,OAAO;EACT,KAAK,cACH,OAAO;EACT,KAAK,wBACH,OAAO;EACT,KAAK,UACH,OAAO;CACX;AACF"}

package/dist/rules/validation.d.ts

@@ -0,0 +1,21 @@
+import type { BoardRegistry } from '../boards/registry.js';
+import type { FactoryCommitDecision, FactoryRuleDecision, FactoryRuleJsonValue } from './types.js';
+export declare const MAX_FACTORY_RULE_CAUSAL_DEPTH = 8;
+export declare const MAX_ROLE_LENGTH = 32;
+export declare const MAX_TOOL_NAME_LENGTH = 128;
+export declare const MAX_BOARD_IDENTIFIER_LENGTH = 128;
+export declare const IDENTIFIER_RE: RegExp;
+export declare const BOARD_IDENTIFIER_RE: RegExp;
+export declare class FactoryRuleValidationError extends Error {
+    readonly code = "invalid_factory_rule";
+    constructor(message: string);
+}
+export declare function isBoardIdentifier(value: unknown): value is string;
+export declare function assertFactoryDecisionTarget(decision: FactoryRuleDecision, boards: BoardRegistry, itemBoard?: string | null): void;
+export declare function normalizeFactoryRuleJsonValue(value: unknown, depth?: number, seen?: Set<object>): FactoryRuleJsonValue;
+export declare const DEFAULT_FACTORY_CONFIG_VERSION = "factory-config-v1";
+/** Operator-maintained provenance label stamped on transition audit and deferred-decision rows. */
+export declare function assertFactoryConfigVersion(value: unknown): string;
+export declare function validateFactoryRuleDecision(value: unknown, causalDepth?: number): FactoryRuleDecision;
+export declare function validateFactoryRuleDecisions(values: readonly unknown[], causalDepth?: number): FactoryCommitDecision[];
+//# sourceMappingURL=validation.d.ts.map

package/dist/rules/validation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../../src/rules/validation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,KAAK,EACV,qBAAqB,EACrB,mBAAmB,EACnB,oBAAoB,EAGrB,MAAM,YAAY,CAAC;AAEpB,eAAO,MAAM,6BAA6B,IAAI,CAAC;AAQ/C,eAAO,MAAM,eAAe,KAAK,CAAC;AAClC,eAAO,MAAM,oBAAoB,MAAM,CAAC;AAQxC,eAAO,MAAM,2BAA2B,MAAM,CAAC;AAC/C,eAAO,MAAM,aAAa,QAA2B,CAAC;AACtD,eAAO,MAAM,mBAAmB,QAAgB,CAAC;AAwBjD,qBAAa,0BAA2B,SAAQ,KAAK;IACnD,QAAQ,CAAC,IAAI,0BAA0B;gBAE3B,OAAO,EAAE,MAAM;CAI5B;AAwBD,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAEjE;AASD,wBAAgB,2BAA2B,CACzC,QAAQ,EAAE,mBAAmB,EAC7B,MAAM,EAAE,aAAa,EACrB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GACxB,IAAI,CAUN;AAcD,wBAAgB,6BAA6B,CAC3C,KAAK,EAAE,OAAO,EACd,KAAK,SAAI,EACT,IAAI,cAAoB,GACvB,oBAAoB,CAkCtB;AAYD,eAAO,MAAM,8BAA8B,sBAAsB,CAAC;AAElE,mGAAmG;AACnG,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAEjE;AAQD,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,SAAI,GAAG,mBAAmB,CAsOhG;AAED,wBAAgB,4BAA4B,CAAC,MAAM,EAAE,SAAS,OAAO,EAAE,EAAE,WAAW,SAAI,GAAG,qBAAqB,EAAE,CAiBjH"}

package/dist/rules/validation.js

@@ -0,0 +1,327 @@
+//#region src/rules/validation.ts
+const MAX_FACTORY_RULE_CAUSAL_DEPTH = 8;
+const MAX_VERSION_LENGTH = 128;
+const MAX_IDEMPOTENCY_KEY_LENGTH = 256;
+const MAX_REASON_LENGTH = 512;
+const MAX_TITLE_LENGTH = 512;
+const MAX_MESSAGE_LENGTH = 8192;
+const MAX_ARGUMENTS_LENGTH = 4096;
+const MAX_ROLE_LENGTH = 32;
+const MAX_TOOL_NAME_LENGTH = 128;
+const MAX_SKILL_NAME_LENGTH = 128;
+const MAX_SOURCE_KEY_LENGTH = 256;
+const MAX_URL_LENGTH = 2048;
+const MAX_METADATA_JSON_LENGTH = 16384;
+const MAX_JSON_DEPTH = 8;
+const MAX_JSON_COLLECTION_SIZE = 100;
+const MAX_BOARD_IDENTIFIER_LENGTH = 128;
+const IDENTIFIER_RE = /^[a-z0-9][a-z0-9_-]*$/i;
+const BOARD_IDENTIFIER_RE = IDENTIFIER_RE;
+const SKILL_NAME_RE = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
+const SENSITIVE_KEY_RE = /(?:authorization|cookie|credential|password|secret|token)/i;
+const WORK_ITEM_SOURCES = [
+	"github-issue",
+	"github-pr",
+	"gitlab-issue",
+	"gitlab-pr",
+	"linear-issue",
+	"jira-issue",
+	"incidentio-follow-up",
+	"manual"
+];
+const REJECTION_CODES = [
+	"forbidden",
+	"invalid_transition",
+	"missing_binding",
+	"stale",
+	"timeout",
+	"rule_error",
+	"causal_depth_exceeded",
+	"repeated_transition"
+];
+var FactoryRuleValidationError = class extends Error {
+	code = "invalid_factory_rule";
+	constructor(message) {
+		super(message);
+		this.name = "FactoryRuleValidationError";
+	}
+};
+function isPlainObject(value) {
+	if (typeof value !== "object" || value === null || Array.isArray(value)) return false;
+	const prototype = Object.getPrototypeOf(value);
+	return prototype === Object.prototype || prototype === null;
+}
+function assertExactKeys(value, keys, label) {
+	const allowed = new Set(keys);
+	if (Object.keys(value).some((key) => !allowed.has(key))) throw new FactoryRuleValidationError(`${label} contains an unsupported field.`);
+}
+function boundedString(value, label, max, pattern) {
+	if (typeof value !== "string") throw new FactoryRuleValidationError(`${label} must be a string.`);
+	const normalized = value.trim();
+	if (normalized.length === 0 || normalized.length > max || pattern && !pattern.test(normalized)) throw new FactoryRuleValidationError(`${label} is invalid.`);
+	return normalized;
+}
+function isBoardIdentifier(value) {
+	return typeof value === "string" && value.length <= 128 && BOARD_IDENTIFIER_RE.test(value);
+}
+function boardIdentifier(value, label) {
+	if (!isBoardIdentifier(value)) throw new FactoryRuleValidationError(`${label} is invalid.`);
+	return value;
+}
+function assertFactoryDecisionTarget(decision, boards, itemBoard) {
+	if (decision.type !== "transition" && decision.type !== "upsertLinkedWorkItem") return;
+	const board = boards.get(decision.board);
+	if (!board) throw new FactoryRuleValidationError("Factory decision target board is not installed.");
+	if (!Object.hasOwn(board.phases, decision.stage)) throw new FactoryRuleValidationError("Factory decision target phase is not defined on its board.");
+	if (decision.type === "transition" && itemBoard !== void 0 && itemBoard !== decision.board) throw new FactoryRuleValidationError("Factory transition cannot change the item board.");
+}
+function optionalBoundedString(value, label, max) {
+	if (value === void 0) return void 0;
+	return boundedString(value, label, max);
+}
+function enumValue(value, allowed, label) {
+	if (typeof value !== "string" || !allowed.includes(value)) throw new FactoryRuleValidationError(`${label} is invalid.`);
+	return value;
+}
+function normalizeFactoryRuleJsonValue(value, depth = 0, seen = /* @__PURE__ */ new Set()) {
+	if (value === null || typeof value === "boolean" || typeof value === "string") return value;
+	if (typeof value === "number") {
+		if (!Number.isFinite(value)) throw new FactoryRuleValidationError("Rule metadata must contain finite numbers.");
+		return value;
+	}
+	if (depth >= MAX_JSON_DEPTH || typeof value !== "object" && !Array.isArray(value)) throw new FactoryRuleValidationError("Rule metadata is not bounded JSON.");
+	if (seen.has(value)) throw new FactoryRuleValidationError("Rule metadata must not contain cycles.");
+	seen.add(value);
+	try {
+		if (Array.isArray(value)) {
+			if (value.length > MAX_JSON_COLLECTION_SIZE) throw new FactoryRuleValidationError("Rule metadata contains too many entries.");
+			return value.map((entry) => normalizeFactoryRuleJsonValue(entry, depth + 1, seen));
+		}
+		if (!isPlainObject(value)) throw new FactoryRuleValidationError("Rule metadata must use plain objects.");
+		const entries = Object.entries(value);
+		if (entries.length > MAX_JSON_COLLECTION_SIZE) throw new FactoryRuleValidationError("Rule metadata contains too many fields.");
+		const sanitized = {};
+		for (const [key, entry] of entries) {
+			const normalizedKey = boundedString(key, "Rule metadata key", 128, IDENTIFIER_RE);
+			sanitized[normalizedKey] = SENSITIVE_KEY_RE.test(normalizedKey) ? "[REDACTED]" : normalizeFactoryRuleJsonValue(entry, depth + 1, seen);
+		}
+		return sanitized;
+	} finally {
+		seen.delete(value);
+	}
+}
+function sanitizeMetadata(value) {
+	if (value === void 0) return void 0;
+	const sanitized = normalizeFactoryRuleJsonValue(value);
+	if (!isPlainObject(sanitized)) throw new FactoryRuleValidationError("Rule metadata must be an object.");
+	if (JSON.stringify(sanitized).length > MAX_METADATA_JSON_LENGTH) throw new FactoryRuleValidationError("Rule metadata is too large.");
+	return sanitized;
+}
+const DEFAULT_FACTORY_CONFIG_VERSION = "factory-config-v1";
+/** Operator-maintained provenance label stamped on transition audit and deferred-decision rows. */
+function assertFactoryConfigVersion(value) {
+	return boundedString(value, "Factory configVersion", MAX_VERSION_LENGTH);
+}
+function commonCommitFields(value) {
+	return { idempotencyKey: boundedString(value.idempotencyKey, "Factory decision idempotencyKey", MAX_IDEMPOTENCY_KEY_LENGTH) };
+}
+function validateFactoryRuleDecision(value, causalDepth = 0) {
+	if (causalDepth > 8) throw new FactoryRuleValidationError("Factory rule causal depth exceeded.");
+	if (!isPlainObject(value)) throw new FactoryRuleValidationError("Factory rule decision must be an object.");
+	const type = value.type;
+	if (typeof type !== "string") throw new FactoryRuleValidationError("Factory rule decision type is required.");
+	switch (type) {
+		case "reject":
+			assertExactKeys(value, [
+				"type",
+				"code",
+				"reason"
+			], "Factory reject decision");
+			return {
+				type,
+				code: enumValue(value.code, REJECTION_CODES, "Factory rejection code"),
+				reason: boundedString(value.reason, "Factory rejection reason", MAX_REASON_LENGTH)
+			};
+		case "transition": {
+			assertExactKeys(value, [
+				"type",
+				"idempotencyKey",
+				"board",
+				"stage",
+				"message",
+				"reenter"
+			], "Factory transition decision");
+			if (value.reenter !== void 0 && typeof value.reenter !== "boolean") throw new FactoryRuleValidationError("Factory transition reenter must be a boolean.");
+			let message;
+			if (value.message !== void 0) {
+				if (!isPlainObject(value.message)) throw new FactoryRuleValidationError("Factory transition message must be an object.");
+				assertExactKeys(value.message, ["text", "role"], "Factory transition message");
+				const role = value.message.role === void 0 ? void 0 : boundedString(value.message.role, "Factory transition message role", 32, IDENTIFIER_RE);
+				message = {
+					text: boundedString(value.message.text, "Factory transition message text", MAX_MESSAGE_LENGTH),
+					...role ? { role } : {}
+				};
+			}
+			return {
+				type,
+				...commonCommitFields(value),
+				board: boardIdentifier(value.board, "Factory transition board"),
+				stage: boardIdentifier(value.stage, "Factory transition stage"),
+				...message ? { message } : {},
+				...value.reenter === true ? { reenter: true } : {}
+			};
+		}
+		case "upsertLinkedWorkItem": {
+			assertExactKeys(value, [
+				"type",
+				"idempotencyKey",
+				"board",
+				"source",
+				"sourceKey",
+				"claimKey",
+				"title",
+				"url",
+				"stage",
+				"skipRules",
+				"metadata"
+			], "Factory linked work item decision");
+			if (value.skipRules !== void 0 && typeof value.skipRules !== "boolean") throw new FactoryRuleValidationError("Factory linked work item skipRules must be a boolean.");
+			const claimKey = optionalBoundedString(value.claimKey, "Factory linked work item claimKey", MAX_SOURCE_KEY_LENGTH);
+			const url = value.url;
+			if (url !== null && (typeof url !== "string" || url.length > MAX_URL_LENGTH || !/^https?:\/\//.test(url))) throw new FactoryRuleValidationError("Factory linked work item URL is invalid.");
+			const metadata = sanitizeMetadata(value.metadata);
+			return {
+				type,
+				...commonCommitFields(value),
+				board: boardIdentifier(value.board, "Factory linked work item board"),
+				source: enumValue(value.source, WORK_ITEM_SOURCES, "Factory linked work item source"),
+				sourceKey: boundedString(value.sourceKey, "Factory linked work item sourceKey", MAX_SOURCE_KEY_LENGTH),
+				...claimKey ? { claimKey } : {},
+				title: boundedString(value.title, "Factory linked work item title", MAX_TITLE_LENGTH),
+				url,
+				stage: boardIdentifier(value.stage, "Factory linked work item stage"),
+				...value.skipRules === true ? { skipRules: true } : {},
+				...metadata ? { metadata } : {}
+			};
+		}
+		case "invokeSkill": {
+			assertExactKeys(value, [
+				"type",
+				"idempotencyKey",
+				"role",
+				"skillName",
+				"prompt",
+				"arguments",
+				"precedingMessage",
+				"cancelInFlight",
+				"resume"
+			], "Factory invoke skill decision");
+			if (value.skillName === void 0 === (value.prompt === void 0)) throw new FactoryRuleValidationError("Factory skill invocation needs exactly one of skillName or prompt.");
+			const args = optionalBoundedString(value.arguments, "Factory skill arguments", MAX_ARGUMENTS_LENGTH);
+			const precedingMessage = optionalBoundedString(value.precedingMessage, "Factory skill preceding message", MAX_MESSAGE_LENGTH);
+			if (value.cancelInFlight !== void 0 && typeof value.cancelInFlight !== "boolean") throw new FactoryRuleValidationError("Factory skill cancelInFlight must be a boolean.");
+			if (value.resume !== void 0 && typeof value.resume !== "boolean") throw new FactoryRuleValidationError("Factory skill resume must be a boolean.");
+			if (value.resume === true && value.skillName === void 0) throw new FactoryRuleValidationError("Factory skill resume requires skillName.");
+			return {
+				type,
+				...commonCommitFields(value),
+				role: boundedString(value.role, "Factory skill role", 32, IDENTIFIER_RE),
+				...value.skillName === void 0 ? { prompt: boundedString(value.prompt, "Factory skill prompt", MAX_MESSAGE_LENGTH) } : {
+					skillName: boundedString(value.skillName, "Factory skill name", MAX_SKILL_NAME_LENGTH, SKILL_NAME_RE),
+					...value.resume === true ? { resume: true } : {}
+				},
+				...args ? { arguments: args } : {},
+				...precedingMessage ? { precedingMessage } : {},
+				...value.cancelInFlight === true ? { cancelInFlight: true } : {}
+			};
+		}
+		case "sendMessage": {
+			assertExactKeys(value, [
+				"type",
+				"idempotencyKey",
+				"role",
+				"message",
+				"priority",
+				"idleBehavior",
+				"prepareBinding"
+			], "Factory send message decision");
+			const priority = value.priority === void 0 ? void 0 : enumValue(value.priority, [
+				"medium",
+				"high",
+				"urgent"
+			], "Factory message priority");
+			const idleBehavior = value.idleBehavior === void 0 ? void 0 : enumValue(value.idleBehavior, ["persist", "wake"], "Factory message idle behavior");
+			if (value.prepareBinding !== void 0 && typeof value.prepareBinding !== "boolean") throw new FactoryRuleValidationError("Factory message prepareBinding must be a boolean.");
+			if (value.prepareBinding === true && value.role === void 0) throw new FactoryRuleValidationError("Factory message prepareBinding requires a role.");
+			const role = value.role === void 0 ? void 0 : boundedString(value.role, "Factory message role", 32, IDENTIFIER_RE);
+			return {
+				type,
+				...commonCommitFields(value),
+				...role ? { role } : {},
+				message: boundedString(value.message, "Factory message", MAX_MESSAGE_LENGTH),
+				...priority ? { priority } : {},
+				...idleBehavior ? { idleBehavior } : {},
+				...value.prepareBinding === true ? { prepareBinding: true } : {}
+			};
+		}
+		case "notify": {
+			assertExactKeys(value, [
+				"type",
+				"idempotencyKey",
+				"title",
+				"body",
+				"level"
+			], "Factory notify decision");
+			const body = optionalBoundedString(value.body, "Factory notification body", MAX_MESSAGE_LENGTH);
+			const level = value.level === void 0 ? void 0 : enumValue(value.level, [
+				"info",
+				"warning",
+				"error"
+			], "Factory notification level");
+			return {
+				type,
+				...commonCommitFields(value),
+				title: boundedString(value.title, "Factory notification title", MAX_TITLE_LENGTH),
+				...body ? { body } : {},
+				...level ? { level } : {}
+			};
+		}
+		case "dismissStaleReviews":
+			assertExactKeys(value, [
+				"type",
+				"idempotencyKey",
+				"installationId",
+				"repository",
+				"pullRequestNumber",
+				"approvingReviewId",
+				"approvingAuthor"
+			], "Factory dismiss stale reviews decision");
+			for (const key of ["installationId", "pullRequestNumber"]) if (!Number.isSafeInteger(value[key]) || value[key] <= 0) throw new FactoryRuleValidationError(`Factory dismiss stale reviews ${key} must be a positive integer.`);
+			return {
+				type,
+				...commonCommitFields(value),
+				installationId: value.installationId,
+				repository: boundedString(value.repository, "Factory dismiss stale reviews repository", MAX_TITLE_LENGTH),
+				pullRequestNumber: value.pullRequestNumber,
+				approvingReviewId: boundedString(value.approvingReviewId, "Factory approving review id", MAX_TITLE_LENGTH),
+				approvingAuthor: boundedString(value.approvingAuthor, "Factory approving review author", MAX_TITLE_LENGTH)
+			};
+		default: throw new FactoryRuleValidationError("Factory rule decision type is unsupported.");
+	}
+}
+function validateFactoryRuleDecisions(values, causalDepth = 0) {
+	if (values.length > MAX_JSON_COLLECTION_SIZE) throw new FactoryRuleValidationError("Factory rule produced too many decisions.");
+	const decisions = [];
+	for (const value of values) {
+		const decision = validateFactoryRuleDecision(value, causalDepth);
+		if (decision.type === "reject") throw new FactoryRuleValidationError("A rejection cannot be persisted with commit decisions.");
+		decisions.push(decision);
+	}
+	const keys = decisions.map((decision) => decision.idempotencyKey);
+	if (new Set(keys).size !== keys.length) throw new FactoryRuleValidationError("Factory decisions require unique idempotency keys.");
+	return decisions;
+}
+//#endregion
+export { BOARD_IDENTIFIER_RE, DEFAULT_FACTORY_CONFIG_VERSION, FactoryRuleValidationError, IDENTIFIER_RE, MAX_BOARD_IDENTIFIER_LENGTH, MAX_FACTORY_RULE_CAUSAL_DEPTH, MAX_ROLE_LENGTH, MAX_TOOL_NAME_LENGTH, assertFactoryConfigVersion, assertFactoryDecisionTarget, isBoardIdentifier, normalizeFactoryRuleJsonValue, validateFactoryRuleDecision, validateFactoryRuleDecisions };
+
+//# sourceMappingURL=validation.js.map

package/dist/rules/validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.js","names":[],"sources":["../../src/rules/validation.ts"],"sourcesContent":["import type { BoardRegistry } from '../boards/registry.js';\nimport type {\n  FactoryCommitDecision,\n  FactoryRuleDecision,\n  FactoryRuleJsonValue,\n  FactoryRuleRejectionCode,\n  WorkItemSource,\n} from './types.js';\n\nexport const MAX_FACTORY_RULE_CAUSAL_DEPTH = 8;\n\nconst MAX_VERSION_LENGTH = 128;\nconst MAX_IDEMPOTENCY_KEY_LENGTH = 256;\nconst MAX_REASON_LENGTH = 512;\nconst MAX_TITLE_LENGTH = 512;\nconst MAX_MESSAGE_LENGTH = 8_192;\nconst MAX_ARGUMENTS_LENGTH = 4_096;\nexport const MAX_ROLE_LENGTH = 32;\nexport const MAX_TOOL_NAME_LENGTH = 128;\nconst MAX_SKILL_NAME_LENGTH = 128;\nconst MAX_SOURCE_KEY_LENGTH = 256;\nconst MAX_URL_LENGTH = 2_048;\nconst MAX_METADATA_JSON_LENGTH = 16_384;\nconst MAX_JSON_DEPTH = 8;\nconst MAX_JSON_COLLECTION_SIZE = 100;\n\nexport const MAX_BOARD_IDENTIFIER_LENGTH = 128;\nexport const IDENTIFIER_RE = /^[a-z0-9][a-z0-9_-]*$/i;\nexport const BOARD_IDENTIFIER_RE = IDENTIFIER_RE;\nconst SKILL_NAME_RE = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;\nconst SENSITIVE_KEY_RE = /(?:authorization|cookie|credential|password|secret|token)/i;\nconst WORK_ITEM_SOURCES: readonly WorkItemSource[] = [\n  'github-issue',\n  'github-pr',\n  'gitlab-issue',\n  'gitlab-pr',\n  'linear-issue',\n  'jira-issue',\n  'incidentio-follow-up',\n  'manual',\n];\nconst REJECTION_CODES: readonly FactoryRuleRejectionCode[] = [\n  'forbidden',\n  'invalid_transition',\n  'missing_binding',\n  'stale',\n  'timeout',\n  'rule_error',\n  'causal_depth_exceeded',\n  'repeated_transition',\n];\n\nexport class FactoryRuleValidationError extends Error {\n  readonly code = 'invalid_factory_rule';\n\n  constructor(message: string) {\n    super(message);\n    this.name = 'FactoryRuleValidationError';\n  }\n}\n\nfunction isPlainObject(value: unknown): value is Record<string, unknown> {\n  if (typeof value !== 'object' || value === null || Array.isArray(value)) return false;\n  const prototype = Object.getPrototypeOf(value);\n  return prototype === Object.prototype || prototype === null;\n}\n\nfunction assertExactKeys(value: Record<string, unknown>, keys: readonly string[], label: string): void {\n  const allowed = new Set(keys);\n  if (Object.keys(value).some(key => !allowed.has(key))) {\n    throw new FactoryRuleValidationError(`${label} contains an unsupported field.`);\n  }\n}\n\nfunction boundedString(value: unknown, label: string, max: number, pattern?: RegExp): string {\n  if (typeof value !== 'string') throw new FactoryRuleValidationError(`${label} must be a string.`);\n  const normalized = value.trim();\n  if (normalized.length === 0 || normalized.length > max || (pattern && !pattern.test(normalized))) {\n    throw new FactoryRuleValidationError(`${label} is invalid.`);\n  }\n  return normalized;\n}\n\nexport function isBoardIdentifier(value: unknown): value is string {\n  return typeof value === 'string' && value.length <= MAX_BOARD_IDENTIFIER_LENGTH && BOARD_IDENTIFIER_RE.test(value);\n}\n\nfunction boardIdentifier(value: unknown, label: string): string {\n  if (!isBoardIdentifier(value)) {\n    throw new FactoryRuleValidationError(`${label} is invalid.`);\n  }\n  return value;\n}\n\nexport function assertFactoryDecisionTarget(\n  decision: FactoryRuleDecision,\n  boards: BoardRegistry,\n  itemBoard?: string | null,\n): void {\n  if (decision.type !== 'transition' && decision.type !== 'upsertLinkedWorkItem') return;\n  const board = boards.get(decision.board);\n  if (!board) throw new FactoryRuleValidationError('Factory decision target board is not installed.');\n  if (!Object.hasOwn(board.phases, decision.stage)) {\n    throw new FactoryRuleValidationError('Factory decision target phase is not defined on its board.');\n  }\n  if (decision.type === 'transition' && itemBoard !== undefined && itemBoard !== decision.board) {\n    throw new FactoryRuleValidationError('Factory transition cannot change the item board.');\n  }\n}\n\nfunction optionalBoundedString(value: unknown, label: string, max: number): string | undefined {\n  if (value === undefined) return undefined;\n  return boundedString(value, label, max);\n}\n\nfunction enumValue<T extends string>(value: unknown, allowed: readonly T[], label: string): T {\n  if (typeof value !== 'string' || !allowed.includes(value as T)) {\n    throw new FactoryRuleValidationError(`${label} is invalid.`);\n  }\n  return value as T;\n}\n\nexport function normalizeFactoryRuleJsonValue(\n  value: unknown,\n  depth = 0,\n  seen = new Set<object>(),\n): FactoryRuleJsonValue {\n  if (value === null || typeof value === 'boolean' || typeof value === 'string') return value;\n  if (typeof value === 'number') {\n    if (!Number.isFinite(value)) throw new FactoryRuleValidationError('Rule metadata must contain finite numbers.');\n    return value;\n  }\n  if (depth >= MAX_JSON_DEPTH || (typeof value !== 'object' && !Array.isArray(value))) {\n    throw new FactoryRuleValidationError('Rule metadata is not bounded JSON.');\n  }\n  if (seen.has(value as object)) throw new FactoryRuleValidationError('Rule metadata must not contain cycles.');\n  seen.add(value as object);\n  try {\n    if (Array.isArray(value)) {\n      if (value.length > MAX_JSON_COLLECTION_SIZE) {\n        throw new FactoryRuleValidationError('Rule metadata contains too many entries.');\n      }\n      return value.map(entry => normalizeFactoryRuleJsonValue(entry, depth + 1, seen));\n    }\n    if (!isPlainObject(value)) throw new FactoryRuleValidationError('Rule metadata must use plain objects.');\n    const entries = Object.entries(value);\n    if (entries.length > MAX_JSON_COLLECTION_SIZE) {\n      throw new FactoryRuleValidationError('Rule metadata contains too many fields.');\n    }\n    const sanitized: Record<string, FactoryRuleJsonValue> = {};\n    for (const [key, entry] of entries) {\n      const normalizedKey = boundedString(key, 'Rule metadata key', 128, IDENTIFIER_RE);\n      sanitized[normalizedKey] = SENSITIVE_KEY_RE.test(normalizedKey)\n        ? '[REDACTED]'\n        : normalizeFactoryRuleJsonValue(entry, depth + 1, seen);\n    }\n    return sanitized;\n  } finally {\n    seen.delete(value as object);\n  }\n}\n\nfunction sanitizeMetadata(value: unknown): Record<string, FactoryRuleJsonValue> | undefined {\n  if (value === undefined) return undefined;\n  const sanitized = normalizeFactoryRuleJsonValue(value);\n  if (!isPlainObject(sanitized)) throw new FactoryRuleValidationError('Rule metadata must be an object.');\n  if (JSON.stringify(sanitized).length > MAX_METADATA_JSON_LENGTH) {\n    throw new FactoryRuleValidationError('Rule metadata is too large.');\n  }\n  return sanitized;\n}\n\nexport const DEFAULT_FACTORY_CONFIG_VERSION = 'factory-config-v1';\n\n/** Operator-maintained provenance label stamped on transition audit and deferred-decision rows. */\nexport function assertFactoryConfigVersion(value: unknown): string {\n  return boundedString(value, 'Factory configVersion', MAX_VERSION_LENGTH);\n}\n\nfunction commonCommitFields(value: Record<string, unknown>): { idempotencyKey: string } {\n  return {\n    idempotencyKey: boundedString(value.idempotencyKey, 'Factory decision idempotencyKey', MAX_IDEMPOTENCY_KEY_LENGTH),\n  };\n}\n\nexport function validateFactoryRuleDecision(value: unknown, causalDepth = 0): FactoryRuleDecision {\n  if (causalDepth > MAX_FACTORY_RULE_CAUSAL_DEPTH) {\n    throw new FactoryRuleValidationError('Factory rule causal depth exceeded.');\n  }\n  if (!isPlainObject(value)) throw new FactoryRuleValidationError('Factory rule decision must be an object.');\n  const type = value.type;\n  if (typeof type !== 'string') throw new FactoryRuleValidationError('Factory rule decision type is required.');\n\n  switch (type) {\n    case 'reject': {\n      assertExactKeys(value, ['type', 'code', 'reason'], 'Factory reject decision');\n      return {\n        type,\n        code: enumValue(value.code, REJECTION_CODES, 'Factory rejection code'),\n        reason: boundedString(value.reason, 'Factory rejection reason', MAX_REASON_LENGTH),\n      };\n    }\n    case 'transition': {\n      assertExactKeys(\n        value,\n        ['type', 'idempotencyKey', 'board', 'stage', 'message', 'reenter'],\n        'Factory transition decision',\n      );\n      if (value.reenter !== undefined && typeof value.reenter !== 'boolean') {\n        throw new FactoryRuleValidationError('Factory transition reenter must be a boolean.');\n      }\n      let message: { text: string; role?: string } | undefined;\n      if (value.message !== undefined) {\n        if (!isPlainObject(value.message)) {\n          throw new FactoryRuleValidationError('Factory transition message must be an object.');\n        }\n        assertExactKeys(value.message, ['text', 'role'], 'Factory transition message');\n        const role =\n          value.message.role === undefined\n            ? undefined\n            : boundedString(value.message.role, 'Factory transition message role', MAX_ROLE_LENGTH, IDENTIFIER_RE);\n        message = {\n          text: boundedString(value.message.text, 'Factory transition message text', MAX_MESSAGE_LENGTH),\n          ...(role ? { role } : {}),\n        };\n      }\n      return {\n        type,\n        ...commonCommitFields(value),\n        board: boardIdentifier(value.board, 'Factory transition board'),\n        stage: boardIdentifier(value.stage, 'Factory transition stage'),\n        ...(message ? { message } : {}),\n        ...(value.reenter === true ? { reenter: true } : {}),\n      };\n    }\n    case 'upsertLinkedWorkItem': {\n      assertExactKeys(\n        value,\n        [\n          'type',\n          'idempotencyKey',\n          'board',\n          'source',\n          'sourceKey',\n          'claimKey',\n          'title',\n          'url',\n          'stage',\n          'skipRules',\n          'metadata',\n        ],\n        'Factory linked work item decision',\n      );\n      if (value.skipRules !== undefined && typeof value.skipRules !== 'boolean') {\n        throw new FactoryRuleValidationError('Factory linked work item skipRules must be a boolean.');\n      }\n      const claimKey = optionalBoundedString(\n        value.claimKey,\n        'Factory linked work item claimKey',\n        MAX_SOURCE_KEY_LENGTH,\n      );\n      const url = value.url;\n      if (url !== null && (typeof url !== 'string' || url.length > MAX_URL_LENGTH || !/^https?:\\/\\//.test(url))) {\n        throw new FactoryRuleValidationError('Factory linked work item URL is invalid.');\n      }\n      const metadata = sanitizeMetadata(value.metadata);\n      return {\n        type,\n        ...commonCommitFields(value),\n        board: boardIdentifier(value.board, 'Factory linked work item board'),\n        source: enumValue(value.source, WORK_ITEM_SOURCES, 'Factory linked work item source'),\n        sourceKey: boundedString(value.sourceKey, 'Factory linked work item sourceKey', MAX_SOURCE_KEY_LENGTH),\n        ...(claimKey ? { claimKey } : {}),\n        title: boundedString(value.title, 'Factory linked work item title', MAX_TITLE_LENGTH),\n        url,\n        stage: boardIdentifier(value.stage, 'Factory linked work item stage'),\n        ...(value.skipRules === true ? { skipRules: true } : {}),\n        ...(metadata ? { metadata } : {}),\n      };\n    }\n    case 'invokeSkill': {\n      assertExactKeys(\n        value,\n        [\n          'type',\n          'idempotencyKey',\n          'role',\n          'skillName',\n          'prompt',\n          'arguments',\n          'precedingMessage',\n          'cancelInFlight',\n          'resume',\n        ],\n        'Factory invoke skill decision',\n      );\n      // A run activates a skill or carries a prompt, never both: they are two\n      // ways to author the same kickoff message, so accepting both would leave\n      // the dispatcher picking a winner.\n      if ((value.skillName === undefined) === (value.prompt === undefined)) {\n        throw new FactoryRuleValidationError('Factory skill invocation needs exactly one of skillName or prompt.');\n      }\n      const args = optionalBoundedString(value.arguments, 'Factory skill arguments', MAX_ARGUMENTS_LENGTH);\n      const precedingMessage = optionalBoundedString(\n        value.precedingMessage,\n        'Factory skill preceding message',\n        MAX_MESSAGE_LENGTH,\n      );\n      if (value.cancelInFlight !== undefined && typeof value.cancelInFlight !== 'boolean') {\n        throw new FactoryRuleValidationError('Factory skill cancelInFlight must be a boolean.');\n      }\n      if (value.resume !== undefined && typeof value.resume !== 'boolean') {\n        throw new FactoryRuleValidationError('Factory skill resume must be a boolean.');\n      }\n      // Resume continues an already-active skill by name; a plain prompt run has no\n      // skill to resume, so the dispatcher would silently ignore the flag.\n      if (value.resume === true && value.skillName === undefined) {\n        throw new FactoryRuleValidationError('Factory skill resume requires skillName.');\n      }\n      return {\n        type,\n        ...commonCommitFields(value),\n        role: boundedString(value.role, 'Factory skill role', MAX_ROLE_LENGTH, IDENTIFIER_RE),\n        ...(value.skillName === undefined\n          ? { prompt: boundedString(value.prompt, 'Factory skill prompt', MAX_MESSAGE_LENGTH) }\n          : {\n              skillName: boundedString(value.skillName, 'Factory skill name', MAX_SKILL_NAME_LENGTH, SKILL_NAME_RE),\n              ...(value.resume === true ? { resume: true } : {}),\n            }),\n        ...(args ? { arguments: args } : {}),\n        ...(precedingMessage ? { precedingMessage } : {}),\n        ...(value.cancelInFlight === true ? { cancelInFlight: true } : {}),\n      };\n    }\n    case 'sendMessage': {\n      assertExactKeys(\n        value,\n        ['type', 'idempotencyKey', 'role', 'message', 'priority', 'idleBehavior', 'prepareBinding'],\n        'Factory send message decision',\n      );\n      const priority =\n        value.priority === undefined\n          ? undefined\n          : enumValue(value.priority, ['medium', 'high', 'urgent'] as const, 'Factory message priority');\n      const idleBehavior =\n        value.idleBehavior === undefined\n          ? undefined\n          : enumValue(value.idleBehavior, ['persist', 'wake'] as const, 'Factory message idle behavior');\n      if (value.prepareBinding !== undefined && typeof value.prepareBinding !== 'boolean') {\n        throw new FactoryRuleValidationError('Factory message prepareBinding must be a boolean.');\n      }\n      if (value.prepareBinding === true && value.role === undefined) {\n        throw new FactoryRuleValidationError('Factory message prepareBinding requires a role.');\n      }\n      const role =\n        value.role === undefined\n          ? undefined\n          : boundedString(value.role, 'Factory message role', MAX_ROLE_LENGTH, IDENTIFIER_RE);\n      return {\n        type,\n        ...commonCommitFields(value),\n        ...(role ? { role } : {}),\n        message: boundedString(value.message, 'Factory message', MAX_MESSAGE_LENGTH),\n        ...(priority ? { priority } : {}),\n        ...(idleBehavior ? { idleBehavior } : {}),\n        ...(value.prepareBinding === true ? { prepareBinding: true } : {}),\n      };\n    }\n    case 'notify': {\n      assertExactKeys(value, ['type', 'idempotencyKey', 'title', 'body', 'level'], 'Factory notify decision');\n      const body = optionalBoundedString(value.body, 'Factory notification body', MAX_MESSAGE_LENGTH);\n      const level =\n        value.level === undefined\n          ? undefined\n          : enumValue(value.level, ['info', 'warning', 'error'] as const, 'Factory notification level');\n      return {\n        type,\n        ...commonCommitFields(value),\n        title: boundedString(value.title, 'Factory notification title', MAX_TITLE_LENGTH),\n        ...(body ? { body } : {}),\n        ...(level ? { level } : {}),\n      };\n    }\n    case 'dismissStaleReviews': {\n      assertExactKeys(\n        value,\n        [\n          'type',\n          'idempotencyKey',\n          'installationId',\n          'repository',\n          'pullRequestNumber',\n          'approvingReviewId',\n          'approvingAuthor',\n        ],\n        'Factory dismiss stale reviews decision',\n      );\n      for (const key of ['installationId', 'pullRequestNumber'] as const) {\n        if (!Number.isSafeInteger(value[key]) || (value[key] as number) <= 0) {\n          throw new FactoryRuleValidationError(`Factory dismiss stale reviews ${key} must be a positive integer.`);\n        }\n      }\n      return {\n        type,\n        ...commonCommitFields(value),\n        installationId: value.installationId as number,\n        repository: boundedString(value.repository, 'Factory dismiss stale reviews repository', MAX_TITLE_LENGTH),\n        pullRequestNumber: value.pullRequestNumber as number,\n        approvingReviewId: boundedString(value.approvingReviewId, 'Factory approving review id', MAX_TITLE_LENGTH),\n        approvingAuthor: boundedString(value.approvingAuthor, 'Factory approving review author', MAX_TITLE_LENGTH),\n      };\n    }\n    default:\n      throw new FactoryRuleValidationError('Factory rule decision type is unsupported.');\n  }\n}\n\nexport function validateFactoryRuleDecisions(values: readonly unknown[], causalDepth = 0): FactoryCommitDecision[] {\n  if (values.length > MAX_JSON_COLLECTION_SIZE) {\n    throw new FactoryRuleValidationError('Factory rule produced too many decisions.');\n  }\n  const decisions: FactoryCommitDecision[] = [];\n  for (const value of values) {\n    const decision = validateFactoryRuleDecision(value, causalDepth);\n    if (decision.type === 'reject') {\n      throw new FactoryRuleValidationError('A rejection cannot be persisted with commit decisions.');\n    }\n    decisions.push(decision);\n  }\n  const keys = decisions.map(decision => decision.idempotencyKey);\n  if (new Set(keys).size !== keys.length) {\n    throw new FactoryRuleValidationError('Factory decisions require unique idempotency keys.');\n  }\n  return decisions;\n}\n"],"mappings":";AASA,MAAa,gCAAgC;AAE7C,MAAM,qBAAqB;AAC3B,MAAM,6BAA6B;AACnC,MAAM,oBAAoB;AAC1B,MAAM,mBAAmB;AACzB,MAAM,qBAAqB;AAC3B,MAAM,uBAAuB;AAC7B,MAAa,kBAAkB;AAC/B,MAAa,uBAAuB;AACpC,MAAM,wBAAwB;AAC9B,MAAM,wBAAwB;AAC9B,MAAM,iBAAiB;AACvB,MAAM,2BAA2B;AACjC,MAAM,iBAAiB;AACvB,MAAM,2BAA2B;AAEjC,MAAa,8BAA8B;AAC3C,MAAa,gBAAgB;AAC7B,MAAa,sBAAsB;AACnC,MAAM,gBAAgB;AACtB,MAAM,mBAAmB;AACzB,MAAM,oBAA+C;CACnD;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;AACA,MAAM,kBAAuD;CAC3D;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;AAEA,IAAa,6BAAb,cAAgD,MAAM;CACpD,OAAgB;CAEhB,YAAY,SAAiB;EAC3B,MAAM,OAAO;EACb,KAAK,OAAO;CACd;AACF;AAEA,SAAS,cAAc,OAAkD;CACvE,IAAI,OAAO,UAAU,YAAY,UAAU,QAAQ,MAAM,QAAQ,KAAK,GAAG,OAAO;CAChF,MAAM,YAAY,OAAO,eAAe,KAAK;CAC7C,OAAO,cAAc,OAAO,aAAa,cAAc;AACzD;AAEA,SAAS,gBAAgB,OAAgC,MAAyB,OAAqB;CACrG,MAAM,UAAU,IAAI,IAAI,IAAI;CAC5B,IAAI,OAAO,KAAK,KAAK,CAAC,CAAC,MAAK,QAAO,CAAC,QAAQ,IAAI,GAAG,CAAC,GAClD,MAAM,IAAI,2BAA2B,GAAG,MAAM,gCAAgC;AAElF;AAEA,SAAS,cAAc,OAAgB,OAAe,KAAa,SAA0B;CAC3F,IAAI,OAAO,UAAU,UAAU,MAAM,IAAI,2BAA2B,GAAG,MAAM,mBAAmB;CAChG,MAAM,aAAa,MAAM,KAAK;CAC9B,IAAI,WAAW,WAAW,KAAK,WAAW,SAAS,OAAQ,WAAW,CAAC,QAAQ,KAAK,UAAU,GAC5F,MAAM,IAAI,2BAA2B,GAAG,MAAM,aAAa;CAE7D,OAAO;AACT;AAEA,SAAgB,kBAAkB,OAAiC;CACjE,OAAO,OAAO,UAAU,YAAY,MAAM,UAAA,OAAyC,oBAAoB,KAAK,KAAK;AACnH;AAEA,SAAS,gBAAgB,OAAgB,OAAuB;CAC9D,IAAI,CAAC,kBAAkB,KAAK,GAC1B,MAAM,IAAI,2BAA2B,GAAG,MAAM,aAAa;CAE7D,OAAO;AACT;AAEA,SAAgB,4BACd,UACA,QACA,WACM;CACN,IAAI,SAAS,SAAS,gBAAgB,SAAS,SAAS,wBAAwB;CAChF,MAAM,QAAQ,OAAO,IAAI,SAAS,KAAK;CACvC,IAAI,CAAC,OAAO,MAAM,IAAI,2BAA2B,iDAAiD;CAClG,IAAI,CAAC,OAAO,OAAO,MAAM,QAAQ,SAAS,KAAK,GAC7C,MAAM,IAAI,2BAA2B,4DAA4D;CAEnG,IAAI,SAAS,SAAS,gBAAgB,cAAc,KAAA,KAAa,cAAc,SAAS,OACtF,MAAM,IAAI,2BAA2B,kDAAkD;AAE3F;AAEA,SAAS,sBAAsB,OAAgB,OAAe,KAAiC;CAC7F,IAAI,UAAU,KAAA,GAAW,OAAO,KAAA;CAChC,OAAO,cAAc,OAAO,OAAO,GAAG;AACxC;AAEA,SAAS,UAA4B,OAAgB,SAAuB,OAAkB;CAC5F,IAAI,OAAO,UAAU,YAAY,CAAC,QAAQ,SAAS,KAAU,GAC3D,MAAM,IAAI,2BAA2B,GAAG,MAAM,aAAa;CAE7D,OAAO;AACT;AAEA,SAAgB,8BACd,OACA,QAAQ,GACR,uBAAO,IAAI,IAAY,GACD;CACtB,IAAI,UAAU,QAAQ,OAAO,UAAU,aAAa,OAAO,UAAU,UAAU,OAAO;CACtF,IAAI,OAAO,UAAU,UAAU;EAC7B,IAAI,CAAC,OAAO,SAAS,KAAK,GAAG,MAAM,IAAI,2BAA2B,4CAA4C;EAC9G,OAAO;CACT;CACA,IAAI,SAAS,kBAAmB,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,KAAK,GAC/E,MAAM,IAAI,2BAA2B,oCAAoC;CAE3E,IAAI,KAAK,IAAI,KAAe,GAAG,MAAM,IAAI,2BAA2B,wCAAwC;CAC5G,KAAK,IAAI,KAAe;CACxB,IAAI;EACF,IAAI,MAAM,QAAQ,KAAK,GAAG;GACxB,IAAI,MAAM,SAAS,0BACjB,MAAM,IAAI,2BAA2B,0CAA0C;GAEjF,OAAO,MAAM,KAAI,UAAS,8BAA8B,OAAO,QAAQ,GAAG,IAAI,CAAC;EACjF;EACA,IAAI,CAAC,cAAc,KAAK,GAAG,MAAM,IAAI,2BAA2B,uCAAuC;EACvG,MAAM,UAAU,OAAO,QAAQ,KAAK;EACpC,IAAI,QAAQ,SAAS,0BACnB,MAAM,IAAI,2BAA2B,yCAAyC;EAEhF,MAAM,YAAkD,CAAC;EACzD,KAAK,MAAM,CAAC,KAAK,UAAU,SAAS;GAClC,MAAM,gBAAgB,cAAc,KAAK,qBAAqB,KAAK,aAAa;GAChF,UAAU,iBAAiB,iBAAiB,KAAK,aAAa,IAC1D,eACA,8BAA8B,OAAO,QAAQ,GAAG,IAAI;EAC1D;EACA,OAAO;CACT,UAAU;EACR,KAAK,OAAO,KAAe;CAC7B;AACF;AAEA,SAAS,iBAAiB,OAAkE;CAC1F,IAAI,UAAU,KAAA,GAAW,OAAO,KAAA;CAChC,MAAM,YAAY,8BAA8B,KAAK;CACrD,IAAI,CAAC,cAAc,SAAS,GAAG,MAAM,IAAI,2BAA2B,kCAAkC;CACtG,IAAI,KAAK,UAAU,SAAS,CAAC,CAAC,SAAS,0BACrC,MAAM,IAAI,2BAA2B,6BAA6B;CAEpE,OAAO;AACT;AAEA,MAAa,iCAAiC;;AAG9C,SAAgB,2BAA2B,OAAwB;CACjE,OAAO,cAAc,OAAO,yBAAyB,kBAAkB;AACzE;AAEA,SAAS,mBAAmB,OAA4D;CACtF,OAAO,EACL,gBAAgB,cAAc,MAAM,gBAAgB,mCAAmC,0BAA0B,EACnH;AACF;AAEA,SAAgB,4BAA4B,OAAgB,cAAc,GAAwB;CAChG,IAAI,cAAA,GACF,MAAM,IAAI,2BAA2B,qCAAqC;CAE5E,IAAI,CAAC,cAAc,KAAK,GAAG,MAAM,IAAI,2BAA2B,0CAA0C;CAC1G,MAAM,OAAO,MAAM;CACnB,IAAI,OAAO,SAAS,UAAU,MAAM,IAAI,2BAA2B,yCAAyC;CAE5G,QAAQ,MAAR;EACE,KAAK;GACH,gBAAgB,OAAO;IAAC;IAAQ;IAAQ;GAAQ,GAAG,yBAAyB;GAC5E,OAAO;IACL;IACA,MAAM,UAAU,MAAM,MAAM,iBAAiB,wBAAwB;IACrE,QAAQ,cAAc,MAAM,QAAQ,4BAA4B,iBAAiB;GACnF;EAEF,KAAK,cAAc;GACjB,gBACE,OACA;IAAC;IAAQ;IAAkB;IAAS;IAAS;IAAW;GAAS,GACjE,6BACF;GACA,IAAI,MAAM,YAAY,KAAA,KAAa,OAAO,MAAM,YAAY,WAC1D,MAAM,IAAI,2BAA2B,+CAA+C;GAEtF,IAAI;GACJ,IAAI,MAAM,YAAY,KAAA,GAAW;IAC/B,IAAI,CAAC,cAAc,MAAM,OAAO,GAC9B,MAAM,IAAI,2BAA2B,+CAA+C;IAEtF,gBAAgB,MAAM,SAAS,CAAC,QAAQ,MAAM,GAAG,4BAA4B;IAC7E,MAAM,OACJ,MAAM,QAAQ,SAAS,KAAA,IACnB,KAAA,IACA,cAAc,MAAM,QAAQ,MAAM,mCAAA,IAAoD,aAAa;IACzG,UAAU;KACR,MAAM,cAAc,MAAM,QAAQ,MAAM,mCAAmC,kBAAkB;KAC7F,GAAI,OAAO,EAAE,KAAK,IAAI,CAAC;IACzB;GACF;GACA,OAAO;IACL;IACA,GAAG,mBAAmB,KAAK;IAC3B,OAAO,gBAAgB,MAAM,OAAO,0BAA0B;IAC9D,OAAO,gBAAgB,MAAM,OAAO,0BAA0B;IAC9D,GAAI,UAAU,EAAE,QAAQ,IAAI,CAAC;IAC7B,GAAI,MAAM,YAAY,OAAO,EAAE,SAAS,KAAK,IAAI,CAAC;GACpD;EACF;EACA,KAAK,wBAAwB;GAC3B,gBACE,OACA;IACE;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;GACF,GACA,mCACF;GACA,IAAI,MAAM,cAAc,KAAA,KAAa,OAAO,MAAM,cAAc,WAC9D,MAAM,IAAI,2BAA2B,uDAAuD;GAE9F,MAAM,WAAW,sBACf,MAAM,UACN,qCACA,qBACF;GACA,MAAM,MAAM,MAAM;GAClB,IAAI,QAAQ,SAAS,OAAO,QAAQ,YAAY,IAAI,SAAS,kBAAkB,CAAC,eAAe,KAAK,GAAG,IACrG,MAAM,IAAI,2BAA2B,0CAA0C;GAEjF,MAAM,WAAW,iBAAiB,MAAM,QAAQ;GAChD,OAAO;IACL;IACA,GAAG,mBAAmB,KAAK;IAC3B,OAAO,gBAAgB,MAAM,OAAO,gCAAgC;IACpE,QAAQ,UAAU,MAAM,QAAQ,mBAAmB,iCAAiC;IACpF,WAAW,cAAc,MAAM,WAAW,sCAAsC,qBAAqB;IACrG,GAAI,WAAW,EAAE,SAAS,IAAI,CAAC;IAC/B,OAAO,cAAc,MAAM,OAAO,kCAAkC,gBAAgB;IACpF;IACA,OAAO,gBAAgB,MAAM,OAAO,gCAAgC;IACpE,GAAI,MAAM,cAAc,OAAO,EAAE,WAAW,KAAK,IAAI,CAAC;IACtD,GAAI,WAAW,EAAE,SAAS,IAAI,CAAC;GACjC;EACF;EACA,KAAK,eAAe;GAClB,gBACE,OACA;IACE;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;GACF,GACA,+BACF;GAIA,IAAK,MAAM,cAAc,KAAA,OAAgB,MAAM,WAAW,KAAA,IACxD,MAAM,IAAI,2BAA2B,oEAAoE;GAE3G,MAAM,OAAO,sBAAsB,MAAM,WAAW,2BAA2B,oBAAoB;GACnG,MAAM,mBAAmB,sBACvB,MAAM,kBACN,mCACA,kBACF;GACA,IAAI,MAAM,mBAAmB,KAAA,KAAa,OAAO,MAAM,mBAAmB,WACxE,MAAM,IAAI,2BAA2B,iDAAiD;GAExF,IAAI,MAAM,WAAW,KAAA,KAAa,OAAO,MAAM,WAAW,WACxD,MAAM,IAAI,2BAA2B,yCAAyC;GAIhF,IAAI,MAAM,WAAW,QAAQ,MAAM,cAAc,KAAA,GAC/C,MAAM,IAAI,2BAA2B,0CAA0C;GAEjF,OAAO;IACL;IACA,GAAG,mBAAmB,KAAK;IAC3B,MAAM,cAAc,MAAM,MAAM,sBAAA,IAAuC,aAAa;IACpF,GAAI,MAAM,cAAc,KAAA,IACpB,EAAE,QAAQ,cAAc,MAAM,QAAQ,wBAAwB,kBAAkB,EAAE,IAClF;KACE,WAAW,cAAc,MAAM,WAAW,sBAAsB,uBAAuB,aAAa;KACpG,GAAI,MAAM,WAAW,OAAO,EAAE,QAAQ,KAAK,IAAI,CAAC;IAClD;IACJ,GAAI,OAAO,EAAE,WAAW,KAAK,IAAI,CAAC;IAClC,GAAI,mBAAmB,EAAE,iBAAiB,IAAI,CAAC;IAC/C,GAAI,MAAM,mBAAmB,OAAO,EAAE,gBAAgB,KAAK,IAAI,CAAC;GAClE;EACF;EACA,KAAK,eAAe;GAClB,gBACE,OACA;IAAC;IAAQ;IAAkB;IAAQ;IAAW;IAAY;IAAgB;GAAgB,GAC1F,+BACF;GACA,MAAM,WACJ,MAAM,aAAa,KAAA,IACf,KAAA,IACA,UAAU,MAAM,UAAU;IAAC;IAAU;IAAQ;GAAQ,GAAY,0BAA0B;GACjG,MAAM,eACJ,MAAM,iBAAiB,KAAA,IACnB,KAAA,IACA,UAAU,MAAM,cAAc,CAAC,WAAW,MAAM,GAAY,+BAA+B;GACjG,IAAI,MAAM,mBAAmB,KAAA,KAAa,OAAO,MAAM,mBAAmB,WACxE,MAAM,IAAI,2BAA2B,mDAAmD;GAE1F,IAAI,MAAM,mBAAmB,QAAQ,MAAM,SAAS,KAAA,GAClD,MAAM,IAAI,2BAA2B,iDAAiD;GAExF,MAAM,OACJ,MAAM,SAAS,KAAA,IACX,KAAA,IACA,cAAc,MAAM,MAAM,wBAAA,IAAyC,aAAa;GACtF,OAAO;IACL;IACA,GAAG,mBAAmB,KAAK;IAC3B,GAAI,OAAO,EAAE,KAAK,IAAI,CAAC;IACvB,SAAS,cAAc,MAAM,SAAS,mBAAmB,kBAAkB;IAC3E,GAAI,WAAW,EAAE,SAAS,IAAI,CAAC;IAC/B,GAAI,eAAe,EAAE,aAAa,IAAI,CAAC;IACvC,GAAI,MAAM,mBAAmB,OAAO,EAAE,gBAAgB,KAAK,IAAI,CAAC;GAClE;EACF;EACA,KAAK,UAAU;GACb,gBAAgB,OAAO;IAAC;IAAQ;IAAkB;IAAS;IAAQ;GAAO,GAAG,yBAAyB;GACtG,MAAM,OAAO,sBAAsB,MAAM,MAAM,6BAA6B,kBAAkB;GAC9F,MAAM,QACJ,MAAM,UAAU,KAAA,IACZ,KAAA,IACA,UAAU,MAAM,OAAO;IAAC;IAAQ;IAAW;GAAO,GAAY,4BAA4B;GAChG,OAAO;IACL;IACA,GAAG,mBAAmB,KAAK;IAC3B,OAAO,cAAc,MAAM,OAAO,8BAA8B,gBAAgB;IAChF,GAAI,OAAO,EAAE,KAAK,IAAI,CAAC;IACvB,GAAI,QAAQ,EAAE,MAAM,IAAI,CAAC;GAC3B;EACF;EACA,KAAK;GACH,gBACE,OACA;IACE;IACA;IACA;IACA;IACA;IACA;IACA;GACF,GACA,wCACF;GACA,KAAK,MAAM,OAAO,CAAC,kBAAkB,mBAAmB,GACtD,IAAI,CAAC,OAAO,cAAc,MAAM,IAAI,KAAM,MAAM,QAAmB,GACjE,MAAM,IAAI,2BAA2B,iCAAiC,IAAI,6BAA6B;GAG3G,OAAO;IACL;IACA,GAAG,mBAAmB,KAAK;IAC3B,gBAAgB,MAAM;IACtB,YAAY,cAAc,MAAM,YAAY,4CAA4C,gBAAgB;IACxG,mBAAmB,MAAM;IACzB,mBAAmB,cAAc,MAAM,mBAAmB,+BAA+B,gBAAgB;IACzG,iBAAiB,cAAc,MAAM,iBAAiB,mCAAmC,gBAAgB;GAC3G;EAEF,SACE,MAAM,IAAI,2BAA2B,4CAA4C;CACrF;AACF;AAEA,SAAgB,6BAA6B,QAA4B,cAAc,GAA4B;CACjH,IAAI,OAAO,SAAS,0BAClB,MAAM,IAAI,2BAA2B,2CAA2C;CAElF,MAAM,YAAqC,CAAC;CAC5C,KAAK,MAAM,SAAS,QAAQ;EAC1B,MAAM,WAAW,4BAA4B,OAAO,WAAW;EAC/D,IAAI,SAAS,SAAS,UACpB,MAAM,IAAI,2BAA2B,wDAAwD;EAE/F,UAAU,KAAK,QAAQ;CACzB;CACA,MAAM,OAAO,UAAU,KAAI,aAAY,SAAS,cAAc;CAC9D,IAAI,IAAI,IAAI,IAAI,CAAC,CAAC,SAAS,KAAK,QAC9B,MAAM,IAAI,2BAA2B,oDAAoD;CAE3F,OAAO;AACT"}