@mastra/factory 0.10.0-alpha.1 → 0.10.0-alpha.13

package/dist/rules/tools.js

@@ -1,4 +1,4 @@
-import { FACTORY_RULE_STAGES } from "./types.js";
+import { FACTORY_RULE_STAGES, FACTORY_TRIAGE_TYPES, isFactoryTriageType } from "./types.js";
 import { currentStage } from "./transition-service.js";
 import { resolveFactorySessionAddress } from "./binding-context.js";
 import { createTool } from "@mastra/core/tools";
@@ -10,6 +10,7 @@ const transitionInputSchema = z.object({
 	expectedRevision: z.number().int().positive(),
 	rationale: z.string().trim().min(1).transform((value) => value.length <= MAX_RATIONALE_LENGTH ? value : `${value.slice(0, MAX_RATIONALE_LENGTH - 1)}…`)
 }).strict();
+const triageTransitionInputSchema = transitionInputSchema.extend({ triageType: z.enum(FACTORY_TRIAGE_TYPES) });
 function boardForSource(type) {
 	return type === "pull-request" ? "review" : "work";
 }
@@ -22,12 +23,13 @@ async function createFactoryTransitionTools(options) {
 	if (!resolution) return {};
 	const availableBinding = resolution.binding ?? await options.storage.findActiveRunBinding(resolution.address);
 	if (!availableBinding) return {};
+	const isTriage = availableBinding.role === "triage";
 	return { factory_transition_work_item: createTool({
 		id: "factory_transition_work_item",
-		description: "Request a governed stage transition for the Factory work item exactly bound to this thread. Use the current revision from the factory-phase signal and explain why the transition is appropriate.",
-		inputSchema: transitionInputSchema,
+		description: isTriage ? "Report the triage classification and request a governed stage transition for the Factory work item exactly bound to this thread. Only bugs may request Planning autonomously; closure outcomes may request a terminal stage. Feature requests and other non-bug classifications that remain open must stay in their current Intake or Triage stage for maintainer approval." : "Request a governed stage transition for the Factory work item exactly bound to this thread. Use the current revision from the factory-phase signal and explain why the transition is appropriate.",
+		inputSchema: isTriage ? triageTransitionInputSchema : transitionInputSchema,
 		requireApproval: true,
-		execute: async ({ stage, expectedRevision, rationale }, execution) => {
+		execute: async ({ stage, expectedRevision, rationale, ...input }, execution) => {
 			const currentAddress = (await resolveFactorySessionAddress({
 				requestContext: execution.requestContext,
 				storage: options.storage,
@@ -42,6 +44,7 @@ async function createFactoryTransitionTools(options) {
 				id: binding.workItemId
 			});
 			if (!item) throw new Error("Bound Factory work item not found.");
+			const triageType = "triageType" in input && isFactoryTriageType(input.triageType) ? input.triageType : void 0;
 			const result = await options.transitionService.transition({
 				orgId: binding.orgId,
 				factoryProjectId: binding.factoryProjectId,
@@ -58,7 +61,8 @@ async function createFactoryTransitionTools(options) {
 					type: "agent",
 					identity: `${binding.id}:${toolCallId}`
 				},
-				cause: rationale
+				cause: rationale,
+				...triageType ? { triageType } : {}
 			});
 			const memory = execution.memory;
 			if (memory?.runCuration && result.status === "accepted") {

package/dist/rules/tools.js.map

@@ -1 +1 @@
-{"version":3,"file":"tools.js","names":[],"sources":["../../src/rules/tools.ts"],"sourcesContent":["import type { RequestContext } from '@mastra/core/request-context';\nimport { createTool } from '@mastra/core/tools';\nimport { z } from 'zod';\n\nimport type { IntegrationTools } from '../integrations/base.js';\nimport type { WorkItemsStorage } from '../storage/domains/work-items/base.js';\nimport type { FactorySessionSourceLookup } from './binding-context.js';\nimport { resolveFactorySessionAddress } from './binding-context.js';\nimport type { FactoryTransitionService } from './transition-service.js';\nimport { currentStage } from './transition-service.js';\nimport { FACTORY_RULE_STAGES } from './types.js';\nimport type { FactoryRuleBoard } from './types.js';\n\nconst MAX_RATIONALE_LENGTH = 1_000;\n\nconst transitionInputSchema = z\n  .object({\n    stage: z.enum(FACTORY_RULE_STAGES),\n    expectedRevision: z.number().int().positive(),\n    // Providers strip maxLength from the JSON schema and models can't count characters, so a\n    // hard cap invites overshoot-retry loops at the end of every run. Accept and clamp instead.\n    rationale: z\n      .string()\n      .trim()\n      .min(1)\n      .transform(value =>\n        value.length <= MAX_RATIONALE_LENGTH ? value : `${value.slice(0, MAX_RATIONALE_LENGTH - 1)}…`,\n      ),\n  })\n  .strict();\n\nfunction boardForSource(type: string | undefined): FactoryRuleBoard {\n  return type === 'pull-request' ? 'review' : 'work';\n}\n\nexport async function createFactoryTransitionTools(options: {\n  requestContext: RequestContext;\n  storage: WorkItemsStorage;\n  transitionService: Pick<FactoryTransitionService, 'transition'>;\n  sessions?: FactorySessionSourceLookup;\n}): Promise<IntegrationTools> {\n  const resolution = await resolveFactorySessionAddress({\n    requestContext: options.requestContext,\n    storage: options.storage,\n    sessions: options.sessions,\n  });\n  if (!resolution) return {};\n  const availableBinding = resolution.binding ?? (await options.storage.findActiveRunBinding(resolution.address));\n  if (!availableBinding) return {};\n\n  return {\n    factory_transition_work_item: createTool({\n      id: 'factory_transition_work_item',\n      description:\n        'Request a governed stage transition for the Factory work item exactly bound to this thread. Use the current revision from the factory-phase signal and explain why the transition is appropriate.',\n      inputSchema: transitionInputSchema,\n      requireApproval: true,\n      execute: async ({ stage, expectedRevision, rationale }, execution) => {\n        const currentResolution = await resolveFactorySessionAddress({\n          requestContext: execution.requestContext,\n          storage: options.storage,\n          sessions: options.sessions,\n        });\n        const currentAddress = currentResolution?.address ?? null;\n        const toolCallId = execution.agent?.toolCallId;\n        if (!currentAddress || !toolCallId) {\n          throw new Error('Factory transitions require an authenticated bound agent tool call.');\n        }\n        const binding = await options.storage.findActiveRunBinding(currentAddress);\n        // Authority is the work item this session is bound to, not the individual\n        // binding row. Handing the next role its turn in an existing session\n        // rotates the binding, and tools built for the previous role stay live\n        // across that rotation; keying on row identity would strand the run that\n        // the rotation exists to start. Re-pointing a session at a different item\n        // is the hijack this guards against.\n        if (!binding || binding.workItemId !== availableBinding.workItemId) {\n          throw new Error('Factory agent binding is unavailable, revoked, or no longer matches this session.');\n        }\n        const item = await options.storage.get({ orgId: binding.orgId, id: binding.workItemId });\n        if (!item) throw new Error('Bound Factory work item not found.');\n\n        const result = await options.transitionService.transition({\n          orgId: binding.orgId,\n          factoryProjectId: binding.factoryProjectId,\n          workItemId: binding.workItemId,\n          board: boardForSource(item.externalSource?.type),\n          stage,\n          expectedRevision,\n          actor: { type: 'agent', bindingId: binding.id, role: binding.role },\n          ingress: { type: 'agent', identity: `${binding.id}:${toolCallId}` },\n          cause: rationale,\n        });\n\n        // A phase EXIT is the natural moment to ask what was worth keeping:\n        // run the subconscious curator directly on the session's thread.\n        // Fire-and-forget with contained errors — a curation failure must\n        // never fail or delay the transition. Empty phases report no-op.\n        // Cast because `memory` is runtime-present but absent from the public\n        // tool execution context type; @mastra/memory is not a factory dep.\n        const memory = (\n          execution as {\n            memory?: {\n              runCuration?: (options: {\n                threadId: string;\n                resourceId: string;\n                requestContext?: RequestContext;\n                prompt?: string;\n              }) => Promise<{ outcome: string }>;\n            };\n          }\n        ).memory;\n        if (memory?.runCuration && result.status === 'accepted') {\n          // `stage` is the destination; the phase being LEFT is the item's stage\n          // before the transition (captured from the pre-transition read above).\n          const exitedStage = currentStage(item.stages) ?? stage;\n          void (async () => {\n            try {\n              const threadId = execution.agent?.threadId;\n              const resourceId = execution.agent?.resourceId;\n              if (!threadId) return;\n              const { outcome } = await memory.runCuration!({\n                threadId,\n                resourceId: resourceId ?? threadId,\n                requestContext: execution.requestContext,\n                prompt: `Now that the work item has left the ${exitedStage} phase: is there anything from this phase worth remembering — a durable project memory, or something worth pinning?`,\n              });\n              // Outcomes: ran | no-op (empty worklist) | skipped (in flight) | no-model.\n              console.debug(\n                `[factory:transition-curate] thread=${threadId} from=${exitedStage} to=${stage} outcome=${outcome}`,\n              );\n            } catch (error) {\n              console.debug(\n                `[factory:transition-curate] thread=${execution.agent?.threadId ?? 'unknown'} from=${exitedStage} to=${stage} failed: ${error instanceof Error ? error.message : String(error)}`,\n              );\n            }\n          })();\n        }\n\n        return result;\n      },\n    }),\n  };\n}\n"],"mappings":";;;;;;AAaA,MAAM,uBAAuB;AAE7B,MAAM,wBAAwB,EAC3B,OAAO;CACN,OAAO,EAAE,KAAK,mBAAmB;CACjC,kBAAkB,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS;CAG5C,WAAW,EACR,OAAO,CAAC,CACR,KAAK,CAAC,CACN,IAAI,CAAC,CAAC,CACN,WAAU,UACT,MAAM,UAAU,uBAAuB,QAAQ,GAAG,MAAM,MAAM,GAAG,uBAAuB,CAAC,EAAE,EAC7F;AACJ,CAAC,CAAC,CACD,OAAO;AAEV,SAAS,eAAe,MAA4C;CAClE,OAAO,SAAS,iBAAiB,WAAW;AAC9C;AAEA,eAAsB,6BAA6B,SAKrB;CAC5B,MAAM,aAAa,MAAM,6BAA6B;EACpD,gBAAgB,QAAQ;EACxB,SAAS,QAAQ;EACjB,UAAU,QAAQ;CACpB,CAAC;CACD,IAAI,CAAC,YAAY,OAAO,CAAC;CACzB,MAAM,mBAAmB,WAAW,WAAY,MAAM,QAAQ,QAAQ,qBAAqB,WAAW,OAAO;CAC7G,IAAI,CAAC,kBAAkB,OAAO,CAAC;CAE/B,OAAO,EACL,8BAA8B,WAAW;EACvC,IAAI;EACJ,aACE;EACF,aAAa;EACb,iBAAiB;EACjB,SAAS,OAAO,EAAE,OAAO,kBAAkB,aAAa,cAAc;GAMpE,MAAM,kBAAiB,MALS,6BAA6B;IAC3D,gBAAgB,UAAU;IAC1B,SAAS,QAAQ;IACjB,UAAU,QAAQ;GACpB,CAAC,EAAA,EACyC,WAAW;GACrD,MAAM,aAAa,UAAU,OAAO;GACpC,IAAI,CAAC,kBAAkB,CAAC,YACtB,MAAM,IAAI,MAAM,qEAAqE;GAEvF,MAAM,UAAU,MAAM,QAAQ,QAAQ,qBAAqB,cAAc;GAOzE,IAAI,CAAC,WAAW,QAAQ,eAAe,iBAAiB,YACtD,MAAM,IAAI,MAAM,mFAAmF;GAErG,MAAM,OAAO,MAAM,QAAQ,QAAQ,IAAI;IAAE,OAAO,QAAQ;IAAO,IAAI,QAAQ;GAAW,CAAC;GACvF,IAAI,CAAC,MAAM,MAAM,IAAI,MAAM,oCAAoC;GAE/D,MAAM,SAAS,MAAM,QAAQ,kBAAkB,WAAW;IACxD,OAAO,QAAQ;IACf,kBAAkB,QAAQ;IAC1B,YAAY,QAAQ;IACpB,OAAO,eAAe,KAAK,gBAAgB,IAAI;IAC/C;IACA;IACA,OAAO;KAAE,MAAM;KAAS,WAAW,QAAQ;KAAI,MAAM,QAAQ;IAAK;IAClE,SAAS;KAAE,MAAM;KAAS,UAAU,GAAG,QAAQ,GAAG,GAAG;IAAa;IAClE,OAAO;GACT,CAAC;GAQD,MAAM,SACJ,UAUA;GACF,IAAI,QAAQ,eAAe,OAAO,WAAW,YAAY;IAGvD,MAAM,cAAc,aAAa,KAAK,MAAM,KAAK;IACjD,CAAM,YAAY;KAChB,IAAI;MACF,MAAM,WAAW,UAAU,OAAO;MAClC,MAAM,aAAa,UAAU,OAAO;MACpC,IAAI,CAAC,UAAU;MACf,MAAM,EAAE,YAAY,MAAM,OAAO,YAAa;OAC5C;OACA,YAAY,cAAc;OAC1B,gBAAgB,UAAU;OAC1B,QAAQ,uCAAuC,YAAY;MAC7D,CAAC;MAED,QAAQ,MACN,sCAAsC,SAAS,QAAQ,YAAY,MAAM,MAAM,WAAW,SAC5F;KACF,SAAS,OAAO;MACd,QAAQ,MACN,sCAAsC,UAAU,OAAO,YAAY,UAAU,QAAQ,YAAY,MAAM,MAAM,WAAW,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,GAC/K;KACF;IACF,EAAA,CAAG;GACL;GAEA,OAAO;EACT;CACF,CAAC,EACH;AACF"}
+{"version":3,"file":"tools.js","names":[],"sources":["../../src/rules/tools.ts"],"sourcesContent":["import type { RequestContext } from '@mastra/core/request-context';\nimport { createTool } from '@mastra/core/tools';\nimport { z } from 'zod';\n\nimport type { IntegrationTools } from '../integrations/base.js';\nimport type { WorkItemsStorage } from '../storage/domains/work-items/base.js';\nimport type { FactorySessionSourceLookup } from './binding-context.js';\nimport { resolveFactorySessionAddress } from './binding-context.js';\nimport type { FactoryTransitionService } from './transition-service.js';\nimport { currentStage } from './transition-service.js';\nimport { FACTORY_RULE_STAGES, FACTORY_TRIAGE_TYPES, isFactoryTriageType } from './types.js';\nimport type { FactoryRuleBoard } from './types.js';\n\nconst MAX_RATIONALE_LENGTH = 1_000;\n\nconst transitionInputSchema = z\n  .object({\n    stage: z.enum(FACTORY_RULE_STAGES),\n    expectedRevision: z.number().int().positive(),\n    // Providers strip maxLength from the JSON schema and models can't count characters, so a\n    // hard cap invites overshoot-retry loops at the end of every run. Accept and clamp instead.\n    rationale: z\n      .string()\n      .trim()\n      .min(1)\n      .transform(value =>\n        value.length <= MAX_RATIONALE_LENGTH ? value : `${value.slice(0, MAX_RATIONALE_LENGTH - 1)}…`,\n      ),\n  })\n  .strict();\n\nconst triageTransitionInputSchema = transitionInputSchema.extend({\n  triageType: z.enum(FACTORY_TRIAGE_TYPES),\n});\n\nfunction boardForSource(type: string | undefined): FactoryRuleBoard {\n  return type === 'pull-request' ? 'review' : 'work';\n}\n\nexport async function createFactoryTransitionTools(options: {\n  requestContext: RequestContext;\n  storage: WorkItemsStorage;\n  transitionService: Pick<FactoryTransitionService, 'transition'>;\n  sessions?: FactorySessionSourceLookup;\n}): Promise<IntegrationTools> {\n  const resolution = await resolveFactorySessionAddress({\n    requestContext: options.requestContext,\n    storage: options.storage,\n    sessions: options.sessions,\n  });\n  if (!resolution) return {};\n  const availableBinding = resolution.binding ?? (await options.storage.findActiveRunBinding(resolution.address));\n  if (!availableBinding) return {};\n  const isTriage = availableBinding.role === 'triage';\n\n  return {\n    factory_transition_work_item: createTool({\n      id: 'factory_transition_work_item',\n      description: isTriage\n        ? 'Report the triage classification and request a governed stage transition for the Factory work item exactly bound to this thread. Only bugs may request Planning autonomously; closure outcomes may request a terminal stage. Feature requests and other non-bug classifications that remain open must stay in their current Intake or Triage stage for maintainer approval.'\n        : 'Request a governed stage transition for the Factory work item exactly bound to this thread. Use the current revision from the factory-phase signal and explain why the transition is appropriate.',\n      inputSchema: isTriage ? triageTransitionInputSchema : transitionInputSchema,\n      requireApproval: true,\n      execute: async ({ stage, expectedRevision, rationale, ...input }, execution) => {\n        const currentResolution = await resolveFactorySessionAddress({\n          requestContext: execution.requestContext,\n          storage: options.storage,\n          sessions: options.sessions,\n        });\n        const currentAddress = currentResolution?.address ?? null;\n        const toolCallId = execution.agent?.toolCallId;\n        if (!currentAddress || !toolCallId) {\n          throw new Error('Factory transitions require an authenticated bound agent tool call.');\n        }\n        const binding = await options.storage.findActiveRunBinding(currentAddress);\n        // Authority is the work item this session is bound to, not the individual\n        // binding row. Handing the next role its turn in an existing session\n        // rotates the binding, and tools built for the previous role stay live\n        // across that rotation; keying on row identity would strand the run that\n        // the rotation exists to start. Re-pointing a session at a different item\n        // is the hijack this guards against.\n        if (!binding || binding.workItemId !== availableBinding.workItemId) {\n          throw new Error('Factory agent binding is unavailable, revoked, or no longer matches this session.');\n        }\n        const item = await options.storage.get({ orgId: binding.orgId, id: binding.workItemId });\n        if (!item) throw new Error('Bound Factory work item not found.');\n        const triageType =\n          'triageType' in input && isFactoryTriageType(input.triageType) ? input.triageType : undefined;\n\n        const result = await options.transitionService.transition({\n          orgId: binding.orgId,\n          factoryProjectId: binding.factoryProjectId,\n          workItemId: binding.workItemId,\n          board: boardForSource(item.externalSource?.type),\n          stage,\n          expectedRevision,\n          actor: { type: 'agent', bindingId: binding.id, role: binding.role },\n          ingress: { type: 'agent', identity: `${binding.id}:${toolCallId}` },\n          cause: rationale,\n          ...(triageType ? { triageType } : {}),\n        });\n\n        // A phase EXIT is the natural moment to ask what was worth keeping:\n        // run the subconscious curator directly on the session's thread.\n        // Fire-and-forget with contained errors — a curation failure must\n        // never fail or delay the transition. Empty phases report no-op.\n        // Cast because `memory` is runtime-present but absent from the public\n        // tool execution context type; @mastra/memory is not a factory dep.\n        const memory = (\n          execution as {\n            memory?: {\n              runCuration?: (options: {\n                threadId: string;\n                resourceId: string;\n                requestContext?: RequestContext;\n                prompt?: string;\n              }) => Promise<{ outcome: string }>;\n            };\n          }\n        ).memory;\n        if (memory?.runCuration && result.status === 'accepted') {\n          // `stage` is the destination; the phase being LEFT is the item's stage\n          // before the transition (captured from the pre-transition read above).\n          const exitedStage = currentStage(item.stages) ?? stage;\n          void (async () => {\n            try {\n              const threadId = execution.agent?.threadId;\n              const resourceId = execution.agent?.resourceId;\n              if (!threadId) return;\n              const { outcome } = await memory.runCuration!({\n                threadId,\n                resourceId: resourceId ?? threadId,\n                requestContext: execution.requestContext,\n                prompt: `Now that the work item has left the ${exitedStage} phase: is there anything from this phase worth remembering — a durable project memory, or something worth pinning?`,\n              });\n              // Outcomes: ran | no-op (empty worklist) | skipped (in flight) | no-model.\n              console.debug(\n                `[factory:transition-curate] thread=${threadId} from=${exitedStage} to=${stage} outcome=${outcome}`,\n              );\n            } catch (error) {\n              console.debug(\n                `[factory:transition-curate] thread=${execution.agent?.threadId ?? 'unknown'} from=${exitedStage} to=${stage} failed: ${error instanceof Error ? error.message : String(error)}`,\n              );\n            }\n          })();\n        }\n\n        return result;\n      },\n    }),\n  };\n}\n"],"mappings":";;;;;;AAaA,MAAM,uBAAuB;AAE7B,MAAM,wBAAwB,EAC3B,OAAO;CACN,OAAO,EAAE,KAAK,mBAAmB;CACjC,kBAAkB,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS;CAG5C,WAAW,EACR,OAAO,CAAC,CACR,KAAK,CAAC,CACN,IAAI,CAAC,CAAC,CACN,WAAU,UACT,MAAM,UAAU,uBAAuB,QAAQ,GAAG,MAAM,MAAM,GAAG,uBAAuB,CAAC,EAAE,EAC7F;AACJ,CAAC,CAAC,CACD,OAAO;AAEV,MAAM,8BAA8B,sBAAsB,OAAO,EAC/D,YAAY,EAAE,KAAK,oBAAoB,EACzC,CAAC;AAED,SAAS,eAAe,MAA4C;CAClE,OAAO,SAAS,iBAAiB,WAAW;AAC9C;AAEA,eAAsB,6BAA6B,SAKrB;CAC5B,MAAM,aAAa,MAAM,6BAA6B;EACpD,gBAAgB,QAAQ;EACxB,SAAS,QAAQ;EACjB,UAAU,QAAQ;CACpB,CAAC;CACD,IAAI,CAAC,YAAY,OAAO,CAAC;CACzB,MAAM,mBAAmB,WAAW,WAAY,MAAM,QAAQ,QAAQ,qBAAqB,WAAW,OAAO;CAC7G,IAAI,CAAC,kBAAkB,OAAO,CAAC;CAC/B,MAAM,WAAW,iBAAiB,SAAS;CAE3C,OAAO,EACL,8BAA8B,WAAW;EACvC,IAAI;EACJ,aAAa,WACT,gXACA;EACJ,aAAa,WAAW,8BAA8B;EACtD,iBAAiB;EACjB,SAAS,OAAO,EAAE,OAAO,kBAAkB,WAAW,GAAG,SAAS,cAAc;GAM9E,MAAM,kBAAiB,MALS,6BAA6B;IAC3D,gBAAgB,UAAU;IAC1B,SAAS,QAAQ;IACjB,UAAU,QAAQ;GACpB,CAAC,EAAA,EACyC,WAAW;GACrD,MAAM,aAAa,UAAU,OAAO;GACpC,IAAI,CAAC,kBAAkB,CAAC,YACtB,MAAM,IAAI,MAAM,qEAAqE;GAEvF,MAAM,UAAU,MAAM,QAAQ,QAAQ,qBAAqB,cAAc;GAOzE,IAAI,CAAC,WAAW,QAAQ,eAAe,iBAAiB,YACtD,MAAM,IAAI,MAAM,mFAAmF;GAErG,MAAM,OAAO,MAAM,QAAQ,QAAQ,IAAI;IAAE,OAAO,QAAQ;IAAO,IAAI,QAAQ;GAAW,CAAC;GACvF,IAAI,CAAC,MAAM,MAAM,IAAI,MAAM,oCAAoC;GAC/D,MAAM,aACJ,gBAAgB,SAAS,oBAAoB,MAAM,UAAU,IAAI,MAAM,aAAa,KAAA;GAEtF,MAAM,SAAS,MAAM,QAAQ,kBAAkB,WAAW;IACxD,OAAO,QAAQ;IACf,kBAAkB,QAAQ;IAC1B,YAAY,QAAQ;IACpB,OAAO,eAAe,KAAK,gBAAgB,IAAI;IAC/C;IACA;IACA,OAAO;KAAE,MAAM;KAAS,WAAW,QAAQ;KAAI,MAAM,QAAQ;IAAK;IAClE,SAAS;KAAE,MAAM;KAAS,UAAU,GAAG,QAAQ,GAAG,GAAG;IAAa;IAClE,OAAO;IACP,GAAI,aAAa,EAAE,WAAW,IAAI,CAAC;GACrC,CAAC;GAQD,MAAM,SACJ,UAUA;GACF,IAAI,QAAQ,eAAe,OAAO,WAAW,YAAY;IAGvD,MAAM,cAAc,aAAa,KAAK,MAAM,KAAK;IACjD,CAAM,YAAY;KAChB,IAAI;MACF,MAAM,WAAW,UAAU,OAAO;MAClC,MAAM,aAAa,UAAU,OAAO;MACpC,IAAI,CAAC,UAAU;MACf,MAAM,EAAE,YAAY,MAAM,OAAO,YAAa;OAC5C;OACA,YAAY,cAAc;OAC1B,gBAAgB,UAAU;OAC1B,QAAQ,uCAAuC,YAAY;MAC7D,CAAC;MAED,QAAQ,MACN,sCAAsC,SAAS,QAAQ,YAAY,MAAM,MAAM,WAAW,SAC5F;KACF,SAAS,OAAO;MACd,QAAQ,MACN,sCAAsC,UAAU,OAAO,YAAY,UAAU,QAAQ,YAAY,MAAM,MAAM,WAAW,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,GAC/K;KACF;IACF,EAAA,CAAG;GACL;GAEA,OAAO;EACT;CACF,CAAC,EACH;AACF"}

package/dist/rules/transition-service.d.ts

@@ -1,5 +1,5 @@
-import type { WorkItemsStorage } from '../storage/domains/work-items/base.js';
-import type { FactoryRuleActor, FactoryRuleBoard, FactoryRuleCausalEntry, FactoryRuleStage, FactoryRules, FactoryTransitionResult } from './types.js';
+import type { ExternalWorkItemSource, WorkItemsStorage } from '../storage/domains/work-items/base.js';
+import type { FactoryRuleActor, FactoryRuleBoard, FactoryRuleCausalEntry, FactoryRuleStage, FactoryTriageType, FactoryRules, FactoryTransitionResult } from './types.js';
 export interface FactoryTransitionRequest {
     orgId: string;
     factoryProjectId: string;
@@ -19,6 +19,8 @@ export interface FactoryTransitionRequest {
     initialEntry?: boolean;
     /** Re-runs the stage's entry rules when the item already holds that stage, to restart work the entry invalidated. */
     reenter?: boolean;
+    /** Structured verdict required from a bound triage-agent terminal request. */
+    triageType?: FactoryTriageType;
 }
 export interface FactoryTransitionServiceOptions {
     rules: FactoryRules;
@@ -43,6 +45,7 @@ export interface FactoryTransitionServiceOptions {
     terminalCleanupTimeoutMs?: number;
 }
 export declare function currentStage(stages: readonly string[]): FactoryRuleStage | undefined;
+export declare function workItemSource(source: ExternalWorkItemSource | null): "manual" | "linear-issue" | "github-pr" | "github-issue";
 export declare class FactoryTransitionService {
     #private;
     constructor(options: FactoryTransitionServiceOptions);

package/dist/rules/transition-service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"transition-service.d.ts","sourceRoot":"","sources":["../../src/rules/transition-service.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAA0B,gBAAgB,EAAE,MAAM,uCAAuC,CAAC;AAEtG,OAAO,KAAK,EAEV,gBAAgB,EAChB,gBAAgB,EAChB,sBAAsB,EAEtB,gBAAgB,EAChB,YAAY,EAEZ,uBAAuB,EACxB,MAAM,YAAY,CAAC;AAiBpB,MAAM,WAAW,wBAAwB;IACvC,KAAK,EAAE,MAAM,CAAC;IACd,gBAAgB,EAAE,MAAM,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,gBAAgB,CAAC;IACxB,KAAK,EAAE,gBAAgB,CAAC;IACxB,gBAAgB,EAAE,MAAM,CAAC;IACzB,KAAK,EAAE,gBAAgB,CAAC;IACxB,OAAO,EAAE;QAAE,IAAI,EAAE,OAAO,GAAG,OAAO,GAAG,YAAY,GAAG,QAAQ,GAAG,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACjH,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,SAAS,sBAAsB,EAAE,CAAC;IAChD,iHAAiH;IACjH,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,qHAAqH;IACrH,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,+BAA+B;IAC9C,KAAK,EAAE,YAAY,CAAC;IACpB,OAAO,EAAE,gBAAgB,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;;OAMG;IACH,eAAe,CAAC,EAAE,CAAC,IAAI,EAAE;QACvB,KAAK,EAAE,MAAM,CAAC;QACd,gBAAgB,EAAE,MAAM,CAAC;QACzB,UAAU,EAAE,MAAM,CAAC;QACnB,KAAK,EAAE,gBAAgB,CAAC;KACzB,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAC3B;;2CAEuC;IACvC,wBAAwB,CAAC,EAAE,MAAM,CAAC;CACnC;AAuBD,wBAAgB,YAAY,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,GAAG,gBAAgB,GAAG,SAAS,CAIpF;AA0CD,qBAAa,wBAAwB;;gBAOvB,OAAO,EAAE,+BAA+B;IAQpD,IAAI,cAAc,IAAI,MAAM,CAE3B;IAEK,UAAU,CAAC,OAAO,EAAE,wBAAwB,GAAG,OAAO,CAAC,uBAAuB,CAAC;CAyMtF"}
+{"version":3,"file":"transition-service.d.ts","sourceRoot":"","sources":["../../src/rules/transition-service.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,MAAM,uCAAuC,CAAC;AAEtG,OAAO,KAAK,EAEV,gBAAgB,EAChB,gBAAgB,EAChB,sBAAsB,EAEtB,gBAAgB,EAChB,iBAAiB,EACjB,YAAY,EAEZ,uBAAuB,EACxB,MAAM,YAAY,CAAC;AAiBpB,MAAM,WAAW,wBAAwB;IACvC,KAAK,EAAE,MAAM,CAAC;IACd,gBAAgB,EAAE,MAAM,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,gBAAgB,CAAC;IACxB,KAAK,EAAE,gBAAgB,CAAC;IACxB,gBAAgB,EAAE,MAAM,CAAC;IACzB,KAAK,EAAE,gBAAgB,CAAC;IACxB,OAAO,EAAE;QAAE,IAAI,EAAE,OAAO,GAAG,OAAO,GAAG,YAAY,GAAG,QAAQ,GAAG,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACjH,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,SAAS,sBAAsB,EAAE,CAAC;IAChD,iHAAiH;IACjH,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,qHAAqH;IACrH,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,8EAA8E;IAC9E,UAAU,CAAC,EAAE,iBAAiB,CAAC;CAChC;AAED,MAAM,WAAW,+BAA+B;IAC9C,KAAK,EAAE,YAAY,CAAC;IACpB,OAAO,EAAE,gBAAgB,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;;OAMG;IACH,eAAe,CAAC,EAAE,CAAC,IAAI,EAAE;QACvB,KAAK,EAAE,MAAM,CAAC;QACd,gBAAgB,EAAE,MAAM,CAAC;QACzB,UAAU,EAAE,MAAM,CAAC;QACnB,KAAK,EAAE,gBAAgB,CAAC;KACzB,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAC3B;;2CAEuC;IACvC,wBAAwB,CAAC,EAAE,MAAM,CAAC;CACnC;AAuBD,wBAAgB,YAAY,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,GAAG,gBAAgB,GAAG,SAAS,CAIpF;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,sBAAsB,GAAG,IAAI,4DAQnE;AA4CD,qBAAa,wBAAwB;;gBAOvB,OAAO,EAAE,+BAA+B;IAQpD,IAAI,cAAc,IAAI,MAAM,CAE3B;IAEK,UAAU,CAAC,OAAO,EAAE,wBAAwB,GAAG,OAAO,CAAC,uBAAuB,CAAC;CAwOtF"}

package/dist/rules/transition-service.js

@@ -48,6 +48,15 @@ function roleForStage(board, stage) {
 function stageTransitionMessage(fromStage, toStage) {
 	return `This work was moved from the ${fromStage} stage to the ${toStage} stage.`;
 }
+function isTriageAgent(actor) {
+	return actor.type === "agent" && actor.role === "triage";
+}
+function isHumanTransition(request) {
+	return request.actor.type === "human" && request.ingress.type === "human";
+}
+function requiresHumanApproval(triageType) {
+	return triageType !== void 0 && triageType !== null && triageType !== "bug";
+}
 function ruleFailure(error) {
 	return {
 		code: "rule_error",
@@ -96,6 +105,9 @@ var FactoryTransitionService = class {
 		if (request.board === "review" !== (source === "pullRequest")) return this.#commitRejection(request, transitionId, "invalid_transition", "The work item does not belong to the requested board.");
 		const fromStage = currentStage(item.stages);
 		if (!fromStage) return this.#commitRejection(request, transitionId, "invalid_transition", "The work item does not have one canonical Factory stage.");
+		if (isTriageAgent(request.actor) && request.triageType === void 0) return this.#commitRejection(request, transitionId, "invalid_transition", "Triage transitions must report a structured triage classification.");
+		if (item.triageType && request.triageType && item.triageType !== request.triageType) return this.#commitRejection(request, transitionId, "forbidden", "The persisted triage classification cannot be changed by a later transition.");
+		if (requiresHumanApproval(item.triageType ?? request.triageType) && (request.stage === "planning" || request.stage === "execute") && !isHumanTransition(request)) return this.#commitRejection(request, transitionId, "approval_required", "A maintainer must move this non-bug work item into Planning or Execute from the Factory UI.");
 		const humanBoardDrag = request.actor.type === "human" && request.cause === "board_drag" && fromStage !== request.stage;
 		const contextBase = {
 			tenant: {
@@ -206,7 +218,8 @@ var FactoryTransitionService = class {
 			},
 			ruleSetVersion: this.#rules.version,
 			causalChain: [...request.causalChain ?? []],
-			evaluation
+			evaluation,
+			...isTriageAgent(request.actor) && request.triageType ? { triageType: request.triageType } : {}
 		});
 		if (committed.status === "missing") return rejection(transitionId, request.workItemId, "invalid_transition", "Work item not found.");
 		const result = committed.result;
@@ -231,6 +244,6 @@ var FactoryTransitionService = class {
 	}
 };
 //#endregion
-export { FactoryTransitionService, currentStage };
+export { FactoryTransitionService, currentStage, workItemSource };
 
 //# sourceMappingURL=transition-service.js.map

package/dist/rules/transition-service.js.map

@@ -1 +1 @@
-{"version":3,"file":"transition-service.js","names":["#rules","#storage","#timeoutMs","#onTerminalStage","#terminalCleanupTimeoutMs","#commitRejection","#commit"],"sources":["../../src/rules/transition-service.ts"],"sourcesContent":["import { randomUUID } from 'node:crypto';\n\nimport type { ExternalWorkItemSource, WorkItemsStorage } from '../storage/domains/work-items/base.js';\nimport { resolveFactoryStageRules } from './resolve.js';\nimport type {\n  FactoryCommitDecision,\n  FactoryRuleActor,\n  FactoryRuleBoard,\n  FactoryRuleCausalEntry,\n  FactoryRuleRejectionCode,\n  FactoryRuleStage,\n  FactoryRules,\n  FactoryStageRuleContext,\n  FactoryTransitionResult,\n} from './types.js';\nimport { factoryRuleSourceForWorkItem, isFactoryRuleStage } from './types.js';\nimport {\n  MAX_FACTORY_RULE_CAUSAL_DEPTH,\n  validateFactoryRuleDecision,\n  validateFactoryRuleDecisions,\n} from './validation.js';\n\nconst RULE_TIMEOUT_MS = 5_000;\nconst MAX_REJECTION_REASON = 512;\nconst TERMINAL_STAGES: ReadonlySet<FactoryRuleStage> = new Set(['done', 'canceled']);\n/** Longest a committed transition waits for terminal resource cleanup. Cleanup\n * reattaches remote sandboxes, so a hung provider call must not leave the\n * already-committed transition request pending; past this bound the cleanup\n * keeps running in the background as pure best-effort. */\nconst TERMINAL_CLEANUP_TIMEOUT_MS = 30_000;\n\nexport interface FactoryTransitionRequest {\n  orgId: string;\n  factoryProjectId: string;\n  workItemId: string;\n  board: FactoryRuleBoard;\n  stage: FactoryRuleStage;\n  expectedRevision: number;\n  actor: FactoryRuleActor;\n  ingress: { type: 'human' | 'agent' | 'toolResult' | 'github' | 'rule'; identity: string; transitionId?: string };\n  cause: string;\n  causalChain?: readonly FactoryRuleCausalEntry[];\n  /** Internal materialization path: evaluate only the destination onEnter leaf even when already at that stage. */\n  initialEntry?: boolean;\n  /** Re-runs the stage's entry rules when the item already holds that stage, to restart work the entry invalidated. */\n  reenter?: boolean;\n}\n\nexport interface FactoryTransitionServiceOptions {\n  rules: FactoryRules;\n  storage: WorkItemsStorage;\n  timeoutMs?: number;\n  /**\n   * Called after a transition commits into a terminal stage (`done` /\n   * `canceled`) — the point where the item's sessions stop receiving runs, so\n   * resources they hold (e.g. sandboxes) can be released for reuse. Awaited,\n   * but failures are swallowed: releasing resources must never break or roll\n   * back the committed transition.\n   */\n  onTerminalStage?: (args: {\n    orgId: string;\n    factoryProjectId: string;\n    workItemId: string;\n    stage: FactoryRuleStage;\n  }) => Promise<void> | void;\n  /** Upper bound on how long a committed transition waits for\n   * `onTerminalStage` before returning (default 30s). The cleanup continues\n   * in the background past the bound. */\n  terminalCleanupTimeoutMs?: number;\n}\n\nfunction rejection(\n  transitionId: string,\n  itemId: string,\n  code: FactoryRuleRejectionCode,\n  reason: string,\n): FactoryTransitionResult {\n  return { status: 'rejected', transitionId, itemId, code, reason: reason.slice(0, MAX_REJECTION_REASON) };\n}\n\nfunction actorId(actor: FactoryRuleActor): string {\n  switch (actor.type) {\n    case 'human':\n    case 'system':\n      return actor.id;\n    case 'agent':\n      return `agent:${actor.bindingId}`;\n    case 'github':\n      return `github:${actor.login}`;\n  }\n}\n\nexport function currentStage(stages: readonly string[]): FactoryRuleStage | undefined {\n  if (stages.length !== 1) return undefined;\n  const stage = stages[0];\n  return isFactoryRuleStage(stage) ? stage : undefined;\n}\n\nfunction workItemSource(source: ExternalWorkItemSource | null) {\n  if (!source) return 'manual' as const;\n  if (source.integrationId === 'linear') return 'linear-issue' as const;\n  // Only GitHub and Linear have provider-specific rules. Anything else (a Slack\n  // thread, say) is treated as a plain work item rather than mislabeled as a\n  // GitHub issue, which would hand its rules a non-GitHub url.\n  if (source.integrationId !== 'github') return 'manual' as const;\n  return source.type === 'pull-request' ? ('github-pr' as const) : ('github-issue' as const);\n}\n\nfunction roleForStage(board: FactoryRuleBoard, stage: FactoryRuleStage): string {\n  if (board === 'review') return 'review';\n  if (stage === 'triage') return 'triage';\n  if (stage === 'planning') return 'plan';\n  return 'work';\n}\n\nfunction stageTransitionMessage(fromStage: FactoryRuleStage, toStage: FactoryRuleStage): string {\n  return `This work was moved from the ${fromStage} stage to the ${toStage} stage.`;\n}\n\nfunction ruleFailure(error: unknown): { code: FactoryRuleRejectionCode; reason: string } {\n  return {\n    code: 'rule_error',\n    reason: error instanceof Error ? `Factory rule failed: ${error.message}` : 'Factory rule failed.',\n  };\n}\n\nasync function withRuleTimeout<T>(operation: Promise<T>, timeoutMs: number): Promise<T> {\n  let timer: ReturnType<typeof setTimeout> | undefined;\n  const timeout = new Promise<never>((_, reject) => {\n    timer = setTimeout(() => reject(new Error('FACTORY_RULE_TIMEOUT')), timeoutMs);\n  });\n  try {\n    return await Promise.race([operation, timeout]);\n  } finally {\n    if (timer) clearTimeout(timer);\n  }\n}\n\nexport class FactoryTransitionService {\n  readonly #rules: FactoryRules;\n  readonly #storage: WorkItemsStorage;\n  readonly #timeoutMs: number;\n  readonly #onTerminalStage: FactoryTransitionServiceOptions['onTerminalStage'];\n  readonly #terminalCleanupTimeoutMs: number;\n\n  constructor(options: FactoryTransitionServiceOptions) {\n    this.#rules = options.rules;\n    this.#storage = options.storage;\n    this.#timeoutMs = options.timeoutMs ?? RULE_TIMEOUT_MS;\n    this.#onTerminalStage = options.onTerminalStage;\n    this.#terminalCleanupTimeoutMs = options.terminalCleanupTimeoutMs ?? TERMINAL_CLEANUP_TIMEOUT_MS;\n  }\n\n  get ruleSetVersion(): string {\n    return this.#rules.version;\n  }\n\n  async transition(request: FactoryTransitionRequest): Promise<FactoryTransitionResult> {\n    const replay = await this.#storage.getTransitionResultByIngress(\n      request.orgId,\n      request.factoryProjectId,\n      request.ingress.identity,\n    );\n    if (replay) return replay as unknown as FactoryTransitionResult;\n\n    const transitionId = request.ingress.transitionId ?? randomUUID();\n    const item = await this.#storage.get({ orgId: request.orgId, id: request.workItemId });\n    if (!item) {\n      return this.#commitRejection(request, transitionId, 'invalid_transition', 'Work item not found.');\n    }\n\n    if (request.causalChain && request.causalChain.length > MAX_FACTORY_RULE_CAUSAL_DEPTH) {\n      return this.#commitRejection(\n        request,\n        transitionId,\n        'causal_depth_exceeded',\n        'Factory rule causal depth exceeded.',\n      );\n    }\n    const itemSource = workItemSource(item.externalSource);\n    const source = factoryRuleSourceForWorkItem(itemSource);\n    if ((request.board === 'review') !== (source === 'pullRequest')) {\n      return this.#commitRejection(\n        request,\n        transitionId,\n        'invalid_transition',\n        'The work item does not belong to the requested board.',\n      );\n    }\n    const fromStage = currentStage(item.stages);\n    if (!fromStage) {\n      return this.#commitRejection(\n        request,\n        transitionId,\n        'invalid_transition',\n        'The work item does not have one canonical Factory stage.',\n      );\n    }\n\n    const humanBoardDrag =\n      request.actor.type === 'human' && request.cause === 'board_drag' && fromStage !== request.stage;\n\n    const contextBase = {\n      tenant: { orgId: request.orgId, projectId: request.factoryProjectId },\n      actor: request.actor,\n      ingress: { type: request.ingress.type, id: request.ingress.identity },\n      cause: request.cause,\n      causalChain: request.causalChain ?? [],\n      ruleSetVersion: this.#rules.version,\n      item: {\n        id: item.id,\n        source: itemSource,\n        sourceKey: item.externalSource\n          ? `${item.externalSource.integrationId}:${item.externalSource.type}:${item.externalSource.externalId}`\n          : null,\n        parentWorkItemId: item.parentWorkItemId,\n        title: item.title,\n        url: item.externalSource?.url ?? null,\n        stages: [...item.stages],\n        metadata: item.metadata,\n      },\n      board: request.board,\n      itemRevision: item.revision,\n      source,\n      fromStage,\n      toStage: request.stage,\n    } satisfies Omit<FactoryStageRuleContext, 'stage'>;\n\n    let evaluation:\n      | { outcome: 'accepted'; decisions: Record<string, unknown>[] }\n      | { outcome: 'rejected'; code: string; reason: string };\n    try {\n      evaluation = await withRuleTimeout(\n        (async () => {\n          const decisions: FactoryCommitDecision[] = [];\n          for (const rule of resolveFactoryStageRules(this.#rules, {\n            board: request.board,\n            source,\n            fromStage,\n            toStage: request.stage,\n            initialEntry: request.initialEntry,\n            reenter: request.reenter,\n          })) {\n            const context: FactoryStageRuleContext = Object.freeze({\n              ...contextBase,\n              stage: rule.phase === 'exit' ? fromStage : request.stage,\n            });\n            const raw = await rule.handler(context);\n            if (raw === undefined) continue;\n            const decision = validateFactoryRuleDecision(raw, context.causalChain.length);\n            if (decision.type === 'reject') {\n              return { outcome: 'rejected' as const, code: decision.code, reason: decision.reason };\n            }\n            decisions.push(decision);\n          }\n          const validated = validateFactoryRuleDecisions(decisions);\n          if (humanBoardDrag) {\n            const message = stageTransitionMessage(fromStage, request.stage);\n            const skill = validated.find(decision => decision.type === 'invokeSkill');\n            if (skill) {\n              skill.precedingMessage = message;\n            } else {\n              validated.unshift({\n                type: 'sendMessage',\n                idempotencyKey: `factory-stage:${transitionId}`,\n                role: roleForStage(request.board, request.stage),\n                message,\n                priority: 'urgent',\n                idleBehavior: 'wake',\n                prepareBinding: true,\n              });\n            }\n          }\n          return {\n            outcome: 'accepted' as const,\n            decisions: validateFactoryRuleDecisions(validated) as unknown as Record<string, unknown>[],\n          };\n        })(),\n        this.#timeoutMs,\n      );\n    } catch (error) {\n      const failed =\n        error instanceof Error && error.message === 'FACTORY_RULE_TIMEOUT'\n          ? { code: 'timeout' as const, reason: 'Factory rule evaluation timed out.' }\n          : ruleFailure(error);\n      evaluation = { outcome: 'rejected', ...failed };\n    }\n    // Moving a card by hand is itself the request to do the work. Arm the item\n    // inside the same revision-checked update that commits the transition, so\n    // the decisions it emits run instead of parking as proposals — and so a\n    // stale or rejected commit does not leave the item spuriously armed.\n    return this.#commit(request, transitionId, evaluation, {\n      armAutonomy: evaluation.outcome === 'accepted' && humanBoardDrag,\n    });\n  }\n\n  async #commitRejection(\n    request: FactoryTransitionRequest,\n    transitionId: string,\n    code: FactoryRuleRejectionCode,\n    reason: string,\n  ): Promise<FactoryTransitionResult> {\n    return this.#commit(request, transitionId, { outcome: 'rejected', code, reason });\n  }\n\n  async #commit(\n    request: FactoryTransitionRequest,\n    transitionId: string,\n    evaluation:\n      | { outcome: 'accepted'; decisions: Record<string, unknown>[] }\n      | { outcome: 'rejected'; code: string; reason: string },\n    options: { armAutonomy?: boolean } = {},\n  ): Promise<FactoryTransitionResult> {\n    const committed = await this.#storage.commitTransition({\n      armAutonomy: options.armAutonomy === true,\n      orgId: request.orgId,\n      factoryProjectId: request.factoryProjectId,\n      workItemId: request.workItemId,\n      expectedRevision: request.expectedRevision,\n      destinationStage: request.stage,\n      actorId: actorId(request.actor),\n      ingress: { identity: request.ingress.identity, triggerType: request.ingress.type, transitionId },\n      ruleSetVersion: this.#rules.version,\n      causalChain: [...(request.causalChain ?? [])],\n      evaluation,\n    });\n    if (committed.status === 'missing') {\n      return rejection(transitionId, request.workItemId, 'invalid_transition', 'Work item not found.');\n    }\n    const result = committed.result as unknown as FactoryTransitionResult;\n    if (this.#onTerminalStage && result.status === 'accepted' && TERMINAL_STAGES.has(result.stage)) {\n      let timer: ReturnType<typeof setTimeout> | undefined;\n      try {\n        const cleanup = Promise.resolve(\n          this.#onTerminalStage({\n            orgId: request.orgId,\n            factoryProjectId: request.factoryProjectId,\n            workItemId: request.workItemId,\n            stage: result.stage,\n          }),\n        );\n        // A late rejection after the timeout wins the race must not surface\n        // as an unhandled rejection.\n        cleanup.catch(() => {});\n        await Promise.race([\n          cleanup,\n          new Promise<void>(resolve => {\n            timer = setTimeout(resolve, this.#terminalCleanupTimeoutMs);\n          }),\n        ]);\n      } catch {\n        // Resource release is best-effort — never fail a committed transition.\n      } finally {\n        clearTimeout(timer);\n      }\n    }\n    return result;\n  }\n}\n"],"mappings":";;;;;AAsBA,MAAM,kBAAkB;AACxB,MAAM,uBAAuB;AAC7B,MAAM,kCAAiD,IAAI,IAAI,CAAC,QAAQ,UAAU,CAAC;;;;;AAKnF,MAAM,8BAA8B;AA0CpC,SAAS,UACP,cACA,QACA,MACA,QACyB;CACzB,OAAO;EAAE,QAAQ;EAAY;EAAc;EAAQ;EAAM,QAAQ,OAAO,MAAM,GAAG,oBAAoB;CAAE;AACzG;AAEA,SAAS,QAAQ,OAAiC;CAChD,QAAQ,MAAM,MAAd;EACE,KAAK;EACL,KAAK,UACH,OAAO,MAAM;EACf,KAAK,SACH,OAAO,SAAS,MAAM;EACxB,KAAK,UACH,OAAO,UAAU,MAAM;CAC3B;AACF;AAEA,SAAgB,aAAa,QAAyD;CACpF,IAAI,OAAO,WAAW,GAAG,OAAO,KAAA;CAChC,MAAM,QAAQ,OAAO;CACrB,OAAO,mBAAmB,KAAK,IAAI,QAAQ,KAAA;AAC7C;AAEA,SAAS,eAAe,QAAuC;CAC7D,IAAI,CAAC,QAAQ,OAAO;CACpB,IAAI,OAAO,kBAAkB,UAAU,OAAO;CAI9C,IAAI,OAAO,kBAAkB,UAAU,OAAO;CAC9C,OAAO,OAAO,SAAS,iBAAkB,cAAyB;AACpE;AAEA,SAAS,aAAa,OAAyB,OAAiC;CAC9E,IAAI,UAAU,UAAU,OAAO;CAC/B,IAAI,UAAU,UAAU,OAAO;CAC/B,IAAI,UAAU,YAAY,OAAO;CACjC,OAAO;AACT;AAEA,SAAS,uBAAuB,WAA6B,SAAmC;CAC9F,OAAO,gCAAgC,UAAU,gBAAgB,QAAQ;AAC3E;AAEA,SAAS,YAAY,OAAoE;CACvF,OAAO;EACL,MAAM;EACN,QAAQ,iBAAiB,QAAQ,wBAAwB,MAAM,YAAY;CAC7E;AACF;AAEA,eAAe,gBAAmB,WAAuB,WAA+B;CACtF,IAAI;CACJ,MAAM,UAAU,IAAI,SAAgB,GAAG,WAAW;EAChD,QAAQ,iBAAiB,uBAAO,IAAI,MAAM,sBAAsB,CAAC,GAAG,SAAS;CAC/E,CAAC;CACD,IAAI;EACF,OAAO,MAAM,QAAQ,KAAK,CAAC,WAAW,OAAO,CAAC;CAChD,UAAU;EACR,IAAI,OAAO,aAAa,KAAK;CAC/B;AACF;AAEA,IAAa,2BAAb,MAAsC;CACpC;CACA;CACA;CACA;CACA;CAEA,YAAY,SAA0C;EACpD,KAAKA,SAAS,QAAQ;EACtB,KAAKC,WAAW,QAAQ;EACxB,KAAKC,aAAa,QAAQ,aAAa;EACvC,KAAKC,mBAAmB,QAAQ;EAChC,KAAKC,4BAA4B,QAAQ,4BAA4B;CACvE;CAEA,IAAI,iBAAyB;EAC3B,OAAO,KAAKJ,OAAO;CACrB;CAEA,MAAM,WAAW,SAAqE;EACpF,MAAM,SAAS,MAAM,KAAKC,SAAS,6BACjC,QAAQ,OACR,QAAQ,kBACR,QAAQ,QAAQ,QAClB;EACA,IAAI,QAAQ,OAAO;EAEnB,MAAM,eAAe,QAAQ,QAAQ,gBAAgB,WAAW;EAChE,MAAM,OAAO,MAAM,KAAKA,SAAS,IAAI;GAAE,OAAO,QAAQ;GAAO,IAAI,QAAQ;EAAW,CAAC;EACrF,IAAI,CAAC,MACH,OAAO,KAAKI,iBAAiB,SAAS,cAAc,sBAAsB,sBAAsB;EAGlG,IAAI,QAAQ,eAAe,QAAQ,YAAY,SAAA,GAC7C,OAAO,KAAKA,iBACV,SACA,cACA,yBACA,qCACF;EAEF,MAAM,aAAa,eAAe,KAAK,cAAc;EACrD,MAAM,SAAS,6BAA6B,UAAU;EACtD,IAAK,QAAQ,UAAU,cAAe,WAAW,gBAC/C,OAAO,KAAKA,iBACV,SACA,cACA,sBACA,uDACF;EAEF,MAAM,YAAY,aAAa,KAAK,MAAM;EAC1C,IAAI,CAAC,WACH,OAAO,KAAKA,iBACV,SACA,cACA,sBACA,0DACF;EAGF,MAAM,iBACJ,QAAQ,MAAM,SAAS,WAAW,QAAQ,UAAU,gBAAgB,cAAc,QAAQ;EAE5F,MAAM,cAAc;GAClB,QAAQ;IAAE,OAAO,QAAQ;IAAO,WAAW,QAAQ;GAAiB;GACpE,OAAO,QAAQ;GACf,SAAS;IAAE,MAAM,QAAQ,QAAQ;IAAM,IAAI,QAAQ,QAAQ;GAAS;GACpE,OAAO,QAAQ;GACf,aAAa,QAAQ,eAAe,CAAC;GACrC,gBAAgB,KAAKL,OAAO;GAC5B,MAAM;IACJ,IAAI,KAAK;IACT,QAAQ;IACR,WAAW,KAAK,iBACZ,GAAG,KAAK,eAAe,cAAc,GAAG,KAAK,eAAe,KAAK,GAAG,KAAK,eAAe,eACxF;IACJ,kBAAkB,KAAK;IACvB,OAAO,KAAK;IACZ,KAAK,KAAK,gBAAgB,OAAO;IACjC,QAAQ,CAAC,GAAG,KAAK,MAAM;IACvB,UAAU,KAAK;GACjB;GACA,OAAO,QAAQ;GACf,cAAc,KAAK;GACnB;GACA;GACA,SAAS,QAAQ;EACnB;EAEA,IAAI;EAGJ,IAAI;GACF,aAAa,MAAM,iBAChB,YAAY;IACX,MAAM,YAAqC,CAAC;IAC5C,KAAK,MAAM,QAAQ,yBAAyB,KAAKA,QAAQ;KACvD,OAAO,QAAQ;KACf;KACA;KACA,SAAS,QAAQ;KACjB,cAAc,QAAQ;KACtB,SAAS,QAAQ;IACnB,CAAC,GAAG;KACF,MAAM,UAAmC,OAAO,OAAO;MACrD,GAAG;MACH,OAAO,KAAK,UAAU,SAAS,YAAY,QAAQ;KACrD,CAAC;KACD,MAAM,MAAM,MAAM,KAAK,QAAQ,OAAO;KACtC,IAAI,QAAQ,KAAA,GAAW;KACvB,MAAM,WAAW,4BAA4B,KAAK,QAAQ,YAAY,MAAM;KAC5E,IAAI,SAAS,SAAS,UACpB,OAAO;MAAE,SAAS;MAAqB,MAAM,SAAS;MAAM,QAAQ,SAAS;KAAO;KAEtF,UAAU,KAAK,QAAQ;IACzB;IACA,MAAM,YAAY,6BAA6B,SAAS;IACxD,IAAI,gBAAgB;KAClB,MAAM,UAAU,uBAAuB,WAAW,QAAQ,KAAK;KAC/D,MAAM,QAAQ,UAAU,MAAK,aAAY,SAAS,SAAS,aAAa;KACxE,IAAI,OACF,MAAM,mBAAmB;UAEzB,UAAU,QAAQ;MAChB,MAAM;MACN,gBAAgB,iBAAiB;MACjC,MAAM,aAAa,QAAQ,OAAO,QAAQ,KAAK;MAC/C;MACA,UAAU;MACV,cAAc;MACd,gBAAgB;KAClB,CAAC;IAEL;IACA,OAAO;KACL,SAAS;KACT,WAAW,6BAA6B,SAAS;IACnD;GACF,EAAA,CAAG,GACH,KAAKE,UACP;EACF,SAAS,OAAO;GAKd,aAAa;IAAE,SAAS;IAAY,GAHlC,iBAAiB,SAAS,MAAM,YAAY,yBACxC;KAAE,MAAM;KAAoB,QAAQ;IAAqC,IACzE,YAAY,KAAK;GACuB;EAChD;EAKA,OAAO,KAAKI,QAAQ,SAAS,cAAc,YAAY,EACrD,aAAa,WAAW,YAAY,cAAc,eACpD,CAAC;CACH;CAEA,MAAMD,iBACJ,SACA,cACA,MACA,QACkC;EAClC,OAAO,KAAKC,QAAQ,SAAS,cAAc;GAAE,SAAS;GAAY;GAAM;EAAO,CAAC;CAClF;CAEA,MAAMA,QACJ,SACA,cACA,YAGA,UAAqC,CAAC,GACJ;EAClC,MAAM,YAAY,MAAM,KAAKL,SAAS,iBAAiB;GACrD,aAAa,QAAQ,gBAAgB;GACrC,OAAO,QAAQ;GACf,kBAAkB,QAAQ;GAC1B,YAAY,QAAQ;GACpB,kBAAkB,QAAQ;GAC1B,kBAAkB,QAAQ;GAC1B,SAAS,QAAQ,QAAQ,KAAK;GAC9B,SAAS;IAAE,UAAU,QAAQ,QAAQ;IAAU,aAAa,QAAQ,QAAQ;IAAM;GAAa;GAC/F,gBAAgB,KAAKD,OAAO;GAC5B,aAAa,CAAC,GAAI,QAAQ,eAAe,CAAC,CAAE;GAC5C;EACF,CAAC;EACD,IAAI,UAAU,WAAW,WACvB,OAAO,UAAU,cAAc,QAAQ,YAAY,sBAAsB,sBAAsB;EAEjG,MAAM,SAAS,UAAU;EACzB,IAAI,KAAKG,oBAAoB,OAAO,WAAW,cAAc,gBAAgB,IAAI,OAAO,KAAK,GAAG;GAC9F,IAAI;GACJ,IAAI;IACF,MAAM,UAAU,QAAQ,QACtB,KAAKA,iBAAiB;KACpB,OAAO,QAAQ;KACf,kBAAkB,QAAQ;KAC1B,YAAY,QAAQ;KACpB,OAAO,OAAO;IAChB,CAAC,CACH;IAGA,QAAQ,YAAY,CAAC,CAAC;IACtB,MAAM,QAAQ,KAAK,CACjB,SACA,IAAI,SAAc,YAAW;KAC3B,QAAQ,WAAW,SAAS,KAAKC,yBAAyB;IAC5D,CAAC,CACH,CAAC;GACH,QAAQ,CAER,UAAU;IACR,aAAa,KAAK;GACpB;EACF;EACA,OAAO;CACT;AACF"}
+{"version":3,"file":"transition-service.js","names":["#rules","#storage","#timeoutMs","#onTerminalStage","#terminalCleanupTimeoutMs","#commitRejection","#commit"],"sources":["../../src/rules/transition-service.ts"],"sourcesContent":["import { randomUUID } from 'node:crypto';\n\nimport type { ExternalWorkItemSource, WorkItemsStorage } from '../storage/domains/work-items/base.js';\nimport { resolveFactoryStageRules } from './resolve.js';\nimport type {\n  FactoryCommitDecision,\n  FactoryRuleActor,\n  FactoryRuleBoard,\n  FactoryRuleCausalEntry,\n  FactoryRuleRejectionCode,\n  FactoryRuleStage,\n  FactoryTriageType,\n  FactoryRules,\n  FactoryStageRuleContext,\n  FactoryTransitionResult,\n} from './types.js';\nimport { factoryRuleSourceForWorkItem, isFactoryRuleStage } from './types.js';\nimport {\n  MAX_FACTORY_RULE_CAUSAL_DEPTH,\n  validateFactoryRuleDecision,\n  validateFactoryRuleDecisions,\n} from './validation.js';\n\nconst RULE_TIMEOUT_MS = 5_000;\nconst MAX_REJECTION_REASON = 512;\nconst TERMINAL_STAGES: ReadonlySet<FactoryRuleStage> = new Set(['done', 'canceled']);\n/** Longest a committed transition waits for terminal resource cleanup. Cleanup\n * reattaches remote sandboxes, so a hung provider call must not leave the\n * already-committed transition request pending; past this bound the cleanup\n * keeps running in the background as pure best-effort. */\nconst TERMINAL_CLEANUP_TIMEOUT_MS = 30_000;\n\nexport interface FactoryTransitionRequest {\n  orgId: string;\n  factoryProjectId: string;\n  workItemId: string;\n  board: FactoryRuleBoard;\n  stage: FactoryRuleStage;\n  expectedRevision: number;\n  actor: FactoryRuleActor;\n  ingress: { type: 'human' | 'agent' | 'toolResult' | 'github' | 'rule'; identity: string; transitionId?: string };\n  cause: string;\n  causalChain?: readonly FactoryRuleCausalEntry[];\n  /** Internal materialization path: evaluate only the destination onEnter leaf even when already at that stage. */\n  initialEntry?: boolean;\n  /** Re-runs the stage's entry rules when the item already holds that stage, to restart work the entry invalidated. */\n  reenter?: boolean;\n  /** Structured verdict required from a bound triage-agent terminal request. */\n  triageType?: FactoryTriageType;\n}\n\nexport interface FactoryTransitionServiceOptions {\n  rules: FactoryRules;\n  storage: WorkItemsStorage;\n  timeoutMs?: number;\n  /**\n   * Called after a transition commits into a terminal stage (`done` /\n   * `canceled`) — the point where the item's sessions stop receiving runs, so\n   * resources they hold (e.g. sandboxes) can be released for reuse. Awaited,\n   * but failures are swallowed: releasing resources must never break or roll\n   * back the committed transition.\n   */\n  onTerminalStage?: (args: {\n    orgId: string;\n    factoryProjectId: string;\n    workItemId: string;\n    stage: FactoryRuleStage;\n  }) => Promise<void> | void;\n  /** Upper bound on how long a committed transition waits for\n   * `onTerminalStage` before returning (default 30s). The cleanup continues\n   * in the background past the bound. */\n  terminalCleanupTimeoutMs?: number;\n}\n\nfunction rejection(\n  transitionId: string,\n  itemId: string,\n  code: FactoryRuleRejectionCode,\n  reason: string,\n): FactoryTransitionResult {\n  return { status: 'rejected', transitionId, itemId, code, reason: reason.slice(0, MAX_REJECTION_REASON) };\n}\n\nfunction actorId(actor: FactoryRuleActor): string {\n  switch (actor.type) {\n    case 'human':\n    case 'system':\n      return actor.id;\n    case 'agent':\n      return `agent:${actor.bindingId}`;\n    case 'github':\n      return `github:${actor.login}`;\n  }\n}\n\nexport function currentStage(stages: readonly string[]): FactoryRuleStage | undefined {\n  if (stages.length !== 1) return undefined;\n  const stage = stages[0];\n  return isFactoryRuleStage(stage) ? stage : undefined;\n}\n\nexport function workItemSource(source: ExternalWorkItemSource | null) {\n  if (!source) return 'manual' as const;\n  if (source.integrationId === 'linear') return 'linear-issue' as const;\n  // Only GitHub and Linear have provider-specific rules. Anything else (a Slack\n  // thread, say) is treated as a plain work item rather than mislabeled as a\n  // GitHub issue, which would hand its rules a non-GitHub url.\n  if (source.integrationId !== 'github') return 'manual' as const;\n  return source.type === 'pull-request' ? ('github-pr' as const) : ('github-issue' as const);\n}\n\nfunction roleForStage(board: FactoryRuleBoard, stage: FactoryRuleStage): string {\n  if (board === 'review') return 'review';\n  if (stage === 'triage') return 'triage';\n  if (stage === 'planning') return 'plan';\n  return 'work';\n}\n\nfunction stageTransitionMessage(fromStage: FactoryRuleStage, toStage: FactoryRuleStage): string {\n  return `This work was moved from the ${fromStage} stage to the ${toStage} stage.`;\n}\n\nfunction isTriageAgent(actor: FactoryRuleActor): actor is Extract<FactoryRuleActor, { type: 'agent' }> {\n  return actor.type === 'agent' && actor.role === 'triage';\n}\n\nfunction isHumanTransition(request: FactoryTransitionRequest): boolean {\n  return request.actor.type === 'human' && request.ingress.type === 'human';\n}\n\nfunction requiresHumanApproval(triageType: FactoryTriageType | null | undefined): boolean {\n  return triageType !== undefined && triageType !== null && triageType !== 'bug';\n}\n\nfunction ruleFailure(error: unknown): { code: FactoryRuleRejectionCode; reason: string } {\n  return {\n    code: 'rule_error',\n    reason: error instanceof Error ? `Factory rule failed: ${error.message}` : 'Factory rule failed.',\n  };\n}\n\nasync function withRuleTimeout<T>(operation: Promise<T>, timeoutMs: number): Promise<T> {\n  let timer: ReturnType<typeof setTimeout> | undefined;\n  const timeout = new Promise<never>((_, reject) => {\n    timer = setTimeout(() => reject(new Error('FACTORY_RULE_TIMEOUT')), timeoutMs);\n  });\n  try {\n    return await Promise.race([operation, timeout]);\n  } finally {\n    if (timer) clearTimeout(timer);\n  }\n}\n\nexport class FactoryTransitionService {\n  readonly #rules: FactoryRules;\n  readonly #storage: WorkItemsStorage;\n  readonly #timeoutMs: number;\n  readonly #onTerminalStage: FactoryTransitionServiceOptions['onTerminalStage'];\n  readonly #terminalCleanupTimeoutMs: number;\n\n  constructor(options: FactoryTransitionServiceOptions) {\n    this.#rules = options.rules;\n    this.#storage = options.storage;\n    this.#timeoutMs = options.timeoutMs ?? RULE_TIMEOUT_MS;\n    this.#onTerminalStage = options.onTerminalStage;\n    this.#terminalCleanupTimeoutMs = options.terminalCleanupTimeoutMs ?? TERMINAL_CLEANUP_TIMEOUT_MS;\n  }\n\n  get ruleSetVersion(): string {\n    return this.#rules.version;\n  }\n\n  async transition(request: FactoryTransitionRequest): Promise<FactoryTransitionResult> {\n    const replay = await this.#storage.getTransitionResultByIngress(\n      request.orgId,\n      request.factoryProjectId,\n      request.ingress.identity,\n    );\n    if (replay) return replay as unknown as FactoryTransitionResult;\n\n    const transitionId = request.ingress.transitionId ?? randomUUID();\n    const item = await this.#storage.get({ orgId: request.orgId, id: request.workItemId });\n    if (!item) {\n      return this.#commitRejection(request, transitionId, 'invalid_transition', 'Work item not found.');\n    }\n\n    if (request.causalChain && request.causalChain.length > MAX_FACTORY_RULE_CAUSAL_DEPTH) {\n      return this.#commitRejection(\n        request,\n        transitionId,\n        'causal_depth_exceeded',\n        'Factory rule causal depth exceeded.',\n      );\n    }\n    const itemSource = workItemSource(item.externalSource);\n    const source = factoryRuleSourceForWorkItem(itemSource);\n    if ((request.board === 'review') !== (source === 'pullRequest')) {\n      return this.#commitRejection(\n        request,\n        transitionId,\n        'invalid_transition',\n        'The work item does not belong to the requested board.',\n      );\n    }\n    const fromStage = currentStage(item.stages);\n    if (!fromStage) {\n      return this.#commitRejection(\n        request,\n        transitionId,\n        'invalid_transition',\n        'The work item does not have one canonical Factory stage.',\n      );\n    }\n\n    if (isTriageAgent(request.actor) && request.triageType === undefined) {\n      return this.#commitRejection(\n        request,\n        transitionId,\n        'invalid_transition',\n        'Triage transitions must report a structured triage classification.',\n      );\n    }\n    if (item.triageType && request.triageType && item.triageType !== request.triageType) {\n      return this.#commitRejection(\n        request,\n        transitionId,\n        'forbidden',\n        'The persisted triage classification cannot be changed by a later transition.',\n      );\n    }\n    const triageType = item.triageType ?? request.triageType;\n    if (\n      requiresHumanApproval(triageType) &&\n      (request.stage === 'planning' || request.stage === 'execute') &&\n      !isHumanTransition(request)\n    ) {\n      return this.#commitRejection(\n        request,\n        transitionId,\n        'approval_required',\n        'A maintainer must move this non-bug work item into Planning or Execute from the Factory UI.',\n      );\n    }\n\n    const humanBoardDrag =\n      request.actor.type === 'human' && request.cause === 'board_drag' && fromStage !== request.stage;\n\n    const contextBase = {\n      tenant: { orgId: request.orgId, projectId: request.factoryProjectId },\n      actor: request.actor,\n      ingress: { type: request.ingress.type, id: request.ingress.identity },\n      cause: request.cause,\n      causalChain: request.causalChain ?? [],\n      ruleSetVersion: this.#rules.version,\n      item: {\n        id: item.id,\n        source: itemSource,\n        sourceKey: item.externalSource\n          ? `${item.externalSource.integrationId}:${item.externalSource.type}:${item.externalSource.externalId}`\n          : null,\n        parentWorkItemId: item.parentWorkItemId,\n        title: item.title,\n        url: item.externalSource?.url ?? null,\n        stages: [...item.stages],\n        metadata: item.metadata,\n      },\n      board: request.board,\n      itemRevision: item.revision,\n      source,\n      fromStage,\n      toStage: request.stage,\n    } satisfies Omit<FactoryStageRuleContext, 'stage'>;\n\n    let evaluation:\n      | { outcome: 'accepted'; decisions: Record<string, unknown>[] }\n      | { outcome: 'rejected'; code: string; reason: string };\n    try {\n      evaluation = await withRuleTimeout(\n        (async () => {\n          const decisions: FactoryCommitDecision[] = [];\n          for (const rule of resolveFactoryStageRules(this.#rules, {\n            board: request.board,\n            source,\n            fromStage,\n            toStage: request.stage,\n            initialEntry: request.initialEntry,\n            reenter: request.reenter,\n          })) {\n            const context: FactoryStageRuleContext = Object.freeze({\n              ...contextBase,\n              stage: rule.phase === 'exit' ? fromStage : request.stage,\n            });\n            const raw = await rule.handler(context);\n            if (raw === undefined) continue;\n            const decision = validateFactoryRuleDecision(raw, context.causalChain.length);\n            if (decision.type === 'reject') {\n              return { outcome: 'rejected' as const, code: decision.code, reason: decision.reason };\n            }\n            decisions.push(decision);\n          }\n          const validated = validateFactoryRuleDecisions(decisions);\n          if (humanBoardDrag) {\n            const message = stageTransitionMessage(fromStage, request.stage);\n            const skill = validated.find(decision => decision.type === 'invokeSkill');\n            if (skill) {\n              skill.precedingMessage = message;\n            } else {\n              validated.unshift({\n                type: 'sendMessage',\n                idempotencyKey: `factory-stage:${transitionId}`,\n                role: roleForStage(request.board, request.stage),\n                message,\n                priority: 'urgent',\n                idleBehavior: 'wake',\n                prepareBinding: true,\n              });\n            }\n          }\n          return {\n            outcome: 'accepted' as const,\n            decisions: validateFactoryRuleDecisions(validated) as unknown as Record<string, unknown>[],\n          };\n        })(),\n        this.#timeoutMs,\n      );\n    } catch (error) {\n      const failed =\n        error instanceof Error && error.message === 'FACTORY_RULE_TIMEOUT'\n          ? { code: 'timeout' as const, reason: 'Factory rule evaluation timed out.' }\n          : ruleFailure(error);\n      evaluation = { outcome: 'rejected', ...failed };\n    }\n    // Moving a card by hand is itself the request to do the work. Arm the item\n    // inside the same revision-checked update that commits the transition, so\n    // the decisions it emits run instead of parking as proposals — and so a\n    // stale or rejected commit does not leave the item spuriously armed.\n    return this.#commit(request, transitionId, evaluation, {\n      armAutonomy: evaluation.outcome === 'accepted' && humanBoardDrag,\n    });\n  }\n\n  async #commitRejection(\n    request: FactoryTransitionRequest,\n    transitionId: string,\n    code: FactoryRuleRejectionCode,\n    reason: string,\n  ): Promise<FactoryTransitionResult> {\n    return this.#commit(request, transitionId, { outcome: 'rejected', code, reason });\n  }\n\n  async #commit(\n    request: FactoryTransitionRequest,\n    transitionId: string,\n    evaluation:\n      | { outcome: 'accepted'; decisions: Record<string, unknown>[] }\n      | { outcome: 'rejected'; code: string; reason: string },\n    options: { armAutonomy?: boolean } = {},\n  ): Promise<FactoryTransitionResult> {\n    const committed = await this.#storage.commitTransition({\n      armAutonomy: options.armAutonomy === true,\n      orgId: request.orgId,\n      factoryProjectId: request.factoryProjectId,\n      workItemId: request.workItemId,\n      expectedRevision: request.expectedRevision,\n      destinationStage: request.stage,\n      actorId: actorId(request.actor),\n      ingress: { identity: request.ingress.identity, triggerType: request.ingress.type, transitionId },\n      ruleSetVersion: this.#rules.version,\n      causalChain: [...(request.causalChain ?? [])],\n      evaluation,\n      ...(isTriageAgent(request.actor) && request.triageType ? { triageType: request.triageType } : {}),\n    });\n    if (committed.status === 'missing') {\n      return rejection(transitionId, request.workItemId, 'invalid_transition', 'Work item not found.');\n    }\n    const result = committed.result as unknown as FactoryTransitionResult;\n    if (this.#onTerminalStage && result.status === 'accepted' && TERMINAL_STAGES.has(result.stage)) {\n      let timer: ReturnType<typeof setTimeout> | undefined;\n      try {\n        const cleanup = Promise.resolve(\n          this.#onTerminalStage({\n            orgId: request.orgId,\n            factoryProjectId: request.factoryProjectId,\n            workItemId: request.workItemId,\n            stage: result.stage,\n          }),\n        );\n        // A late rejection after the timeout wins the race must not surface\n        // as an unhandled rejection.\n        cleanup.catch(() => {});\n        await Promise.race([\n          cleanup,\n          new Promise<void>(resolve => {\n            timer = setTimeout(resolve, this.#terminalCleanupTimeoutMs);\n          }),\n        ]);\n      } catch {\n        // Resource release is best-effort — never fail a committed transition.\n      } finally {\n        clearTimeout(timer);\n      }\n    }\n    return result;\n  }\n}\n"],"mappings":";;;;;AAuBA,MAAM,kBAAkB;AACxB,MAAM,uBAAuB;AAC7B,MAAM,kCAAiD,IAAI,IAAI,CAAC,QAAQ,UAAU,CAAC;;;;;AAKnF,MAAM,8BAA8B;AA4CpC,SAAS,UACP,cACA,QACA,MACA,QACyB;CACzB,OAAO;EAAE,QAAQ;EAAY;EAAc;EAAQ;EAAM,QAAQ,OAAO,MAAM,GAAG,oBAAoB;CAAE;AACzG;AAEA,SAAS,QAAQ,OAAiC;CAChD,QAAQ,MAAM,MAAd;EACE,KAAK;EACL,KAAK,UACH,OAAO,MAAM;EACf,KAAK,SACH,OAAO,SAAS,MAAM;EACxB,KAAK,UACH,OAAO,UAAU,MAAM;CAC3B;AACF;AAEA,SAAgB,aAAa,QAAyD;CACpF,IAAI,OAAO,WAAW,GAAG,OAAO,KAAA;CAChC,MAAM,QAAQ,OAAO;CACrB,OAAO,mBAAmB,KAAK,IAAI,QAAQ,KAAA;AAC7C;AAEA,SAAgB,eAAe,QAAuC;CACpE,IAAI,CAAC,QAAQ,OAAO;CACpB,IAAI,OAAO,kBAAkB,UAAU,OAAO;CAI9C,IAAI,OAAO,kBAAkB,UAAU,OAAO;CAC9C,OAAO,OAAO,SAAS,iBAAkB,cAAyB;AACpE;AAEA,SAAS,aAAa,OAAyB,OAAiC;CAC9E,IAAI,UAAU,UAAU,OAAO;CAC/B,IAAI,UAAU,UAAU,OAAO;CAC/B,IAAI,UAAU,YAAY,OAAO;CACjC,OAAO;AACT;AAEA,SAAS,uBAAuB,WAA6B,SAAmC;CAC9F,OAAO,gCAAgC,UAAU,gBAAgB,QAAQ;AAC3E;AAEA,SAAS,cAAc,OAAgF;CACrG,OAAO,MAAM,SAAS,WAAW,MAAM,SAAS;AAClD;AAEA,SAAS,kBAAkB,SAA4C;CACrE,OAAO,QAAQ,MAAM,SAAS,WAAW,QAAQ,QAAQ,SAAS;AACpE;AAEA,SAAS,sBAAsB,YAA2D;CACxF,OAAO,eAAe,KAAA,KAAa,eAAe,QAAQ,eAAe;AAC3E;AAEA,SAAS,YAAY,OAAoE;CACvF,OAAO;EACL,MAAM;EACN,QAAQ,iBAAiB,QAAQ,wBAAwB,MAAM,YAAY;CAC7E;AACF;AAEA,eAAe,gBAAmB,WAAuB,WAA+B;CACtF,IAAI;CACJ,MAAM,UAAU,IAAI,SAAgB,GAAG,WAAW;EAChD,QAAQ,iBAAiB,uBAAO,IAAI,MAAM,sBAAsB,CAAC,GAAG,SAAS;CAC/E,CAAC;CACD,IAAI;EACF,OAAO,MAAM,QAAQ,KAAK,CAAC,WAAW,OAAO,CAAC;CAChD,UAAU;EACR,IAAI,OAAO,aAAa,KAAK;CAC/B;AACF;AAEA,IAAa,2BAAb,MAAsC;CACpC;CACA;CACA;CACA;CACA;CAEA,YAAY,SAA0C;EACpD,KAAKA,SAAS,QAAQ;EACtB,KAAKC,WAAW,QAAQ;EACxB,KAAKC,aAAa,QAAQ,aAAa;EACvC,KAAKC,mBAAmB,QAAQ;EAChC,KAAKC,4BAA4B,QAAQ,4BAA4B;CACvE;CAEA,IAAI,iBAAyB;EAC3B,OAAO,KAAKJ,OAAO;CACrB;CAEA,MAAM,WAAW,SAAqE;EACpF,MAAM,SAAS,MAAM,KAAKC,SAAS,6BACjC,QAAQ,OACR,QAAQ,kBACR,QAAQ,QAAQ,QAClB;EACA,IAAI,QAAQ,OAAO;EAEnB,MAAM,eAAe,QAAQ,QAAQ,gBAAgB,WAAW;EAChE,MAAM,OAAO,MAAM,KAAKA,SAAS,IAAI;GAAE,OAAO,QAAQ;GAAO,IAAI,QAAQ;EAAW,CAAC;EACrF,IAAI,CAAC,MACH,OAAO,KAAKI,iBAAiB,SAAS,cAAc,sBAAsB,sBAAsB;EAGlG,IAAI,QAAQ,eAAe,QAAQ,YAAY,SAAA,GAC7C,OAAO,KAAKA,iBACV,SACA,cACA,yBACA,qCACF;EAEF,MAAM,aAAa,eAAe,KAAK,cAAc;EACrD,MAAM,SAAS,6BAA6B,UAAU;EACtD,IAAK,QAAQ,UAAU,cAAe,WAAW,gBAC/C,OAAO,KAAKA,iBACV,SACA,cACA,sBACA,uDACF;EAEF,MAAM,YAAY,aAAa,KAAK,MAAM;EAC1C,IAAI,CAAC,WACH,OAAO,KAAKA,iBACV,SACA,cACA,sBACA,0DACF;EAGF,IAAI,cAAc,QAAQ,KAAK,KAAK,QAAQ,eAAe,KAAA,GACzD,OAAO,KAAKA,iBACV,SACA,cACA,sBACA,oEACF;EAEF,IAAI,KAAK,cAAc,QAAQ,cAAc,KAAK,eAAe,QAAQ,YACvE,OAAO,KAAKA,iBACV,SACA,cACA,aACA,8EACF;EAGF,IACE,sBAFiB,KAAK,cAAc,QAAQ,UAEZ,MAC/B,QAAQ,UAAU,cAAc,QAAQ,UAAU,cACnD,CAAC,kBAAkB,OAAO,GAE1B,OAAO,KAAKA,iBACV,SACA,cACA,qBACA,6FACF;EAGF,MAAM,iBACJ,QAAQ,MAAM,SAAS,WAAW,QAAQ,UAAU,gBAAgB,cAAc,QAAQ;EAE5F,MAAM,cAAc;GAClB,QAAQ;IAAE,OAAO,QAAQ;IAAO,WAAW,QAAQ;GAAiB;GACpE,OAAO,QAAQ;GACf,SAAS;IAAE,MAAM,QAAQ,QAAQ;IAAM,IAAI,QAAQ,QAAQ;GAAS;GACpE,OAAO,QAAQ;GACf,aAAa,QAAQ,eAAe,CAAC;GACrC,gBAAgB,KAAKL,OAAO;GAC5B,MAAM;IACJ,IAAI,KAAK;IACT,QAAQ;IACR,WAAW,KAAK,iBACZ,GAAG,KAAK,eAAe,cAAc,GAAG,KAAK,eAAe,KAAK,GAAG,KAAK,eAAe,eACxF;IACJ,kBAAkB,KAAK;IACvB,OAAO,KAAK;IACZ,KAAK,KAAK,gBAAgB,OAAO;IACjC,QAAQ,CAAC,GAAG,KAAK,MAAM;IACvB,UAAU,KAAK;GACjB;GACA,OAAO,QAAQ;GACf,cAAc,KAAK;GACnB;GACA;GACA,SAAS,QAAQ;EACnB;EAEA,IAAI;EAGJ,IAAI;GACF,aAAa,MAAM,iBAChB,YAAY;IACX,MAAM,YAAqC,CAAC;IAC5C,KAAK,MAAM,QAAQ,yBAAyB,KAAKA,QAAQ;KACvD,OAAO,QAAQ;KACf;KACA;KACA,SAAS,QAAQ;KACjB,cAAc,QAAQ;KACtB,SAAS,QAAQ;IACnB,CAAC,GAAG;KACF,MAAM,UAAmC,OAAO,OAAO;MACrD,GAAG;MACH,OAAO,KAAK,UAAU,SAAS,YAAY,QAAQ;KACrD,CAAC;KACD,MAAM,MAAM,MAAM,KAAK,QAAQ,OAAO;KACtC,IAAI,QAAQ,KAAA,GAAW;KACvB,MAAM,WAAW,4BAA4B,KAAK,QAAQ,YAAY,MAAM;KAC5E,IAAI,SAAS,SAAS,UACpB,OAAO;MAAE,SAAS;MAAqB,MAAM,SAAS;MAAM,QAAQ,SAAS;KAAO;KAEtF,UAAU,KAAK,QAAQ;IACzB;IACA,MAAM,YAAY,6BAA6B,SAAS;IACxD,IAAI,gBAAgB;KAClB,MAAM,UAAU,uBAAuB,WAAW,QAAQ,KAAK;KAC/D,MAAM,QAAQ,UAAU,MAAK,aAAY,SAAS,SAAS,aAAa;KACxE,IAAI,OACF,MAAM,mBAAmB;UAEzB,UAAU,QAAQ;MAChB,MAAM;MACN,gBAAgB,iBAAiB;MACjC,MAAM,aAAa,QAAQ,OAAO,QAAQ,KAAK;MAC/C;MACA,UAAU;MACV,cAAc;MACd,gBAAgB;KAClB,CAAC;IAEL;IACA,OAAO;KACL,SAAS;KACT,WAAW,6BAA6B,SAAS;IACnD;GACF,EAAA,CAAG,GACH,KAAKE,UACP;EACF,SAAS,OAAO;GAKd,aAAa;IAAE,SAAS;IAAY,GAHlC,iBAAiB,SAAS,MAAM,YAAY,yBACxC;KAAE,MAAM;KAAoB,QAAQ;IAAqC,IACzE,YAAY,KAAK;GACuB;EAChD;EAKA,OAAO,KAAKI,QAAQ,SAAS,cAAc,YAAY,EACrD,aAAa,WAAW,YAAY,cAAc,eACpD,CAAC;CACH;CAEA,MAAMD,iBACJ,SACA,cACA,MACA,QACkC;EAClC,OAAO,KAAKC,QAAQ,SAAS,cAAc;GAAE,SAAS;GAAY;GAAM;EAAO,CAAC;CAClF;CAEA,MAAMA,QACJ,SACA,cACA,YAGA,UAAqC,CAAC,GACJ;EAClC,MAAM,YAAY,MAAM,KAAKL,SAAS,iBAAiB;GACrD,aAAa,QAAQ,gBAAgB;GACrC,OAAO,QAAQ;GACf,kBAAkB,QAAQ;GAC1B,YAAY,QAAQ;GACpB,kBAAkB,QAAQ;GAC1B,kBAAkB,QAAQ;GAC1B,SAAS,QAAQ,QAAQ,KAAK;GAC9B,SAAS;IAAE,UAAU,QAAQ,QAAQ;IAAU,aAAa,QAAQ,QAAQ;IAAM;GAAa;GAC/F,gBAAgB,KAAKD,OAAO;GAC5B,aAAa,CAAC,GAAI,QAAQ,eAAe,CAAC,CAAE;GAC5C;GACA,GAAI,cAAc,QAAQ,KAAK,KAAK,QAAQ,aAAa,EAAE,YAAY,QAAQ,WAAW,IAAI,CAAC;EACjG,CAAC;EACD,IAAI,UAAU,WAAW,WACvB,OAAO,UAAU,cAAc,QAAQ,YAAY,sBAAsB,sBAAsB;EAEjG,MAAM,SAAS,UAAU;EACzB,IAAI,KAAKG,oBAAoB,OAAO,WAAW,cAAc,gBAAgB,IAAI,OAAO,KAAK,GAAG;GAC9F,IAAI;GACJ,IAAI;IACF,MAAM,UAAU,QAAQ,QACtB,KAAKA,iBAAiB;KACpB,OAAO,QAAQ;KACf,kBAAkB,QAAQ;KAC1B,YAAY,QAAQ;KACpB,OAAO,OAAO;IAChB,CAAC,CACH;IAGA,QAAQ,YAAY,CAAC,CAAC;IACtB,MAAM,QAAQ,KAAK,CACjB,SACA,IAAI,SAAc,YAAW;KAC3B,QAAQ,WAAW,SAAS,KAAKC,yBAAyB;IAC5D,CAAC,CACH,CAAC;GACH,QAAQ,CAER,UAAU;IACR,aAAa,KAAK;GACpB;EACF;EACA,OAAO;CACT;AACF"}

package/dist/rules/types.d.ts

@@ -1,7 +1,12 @@
 export type WorkItemSource = 'github-issue' | 'github-pr' | 'linear-issue' | 'manual';
 export declare const FACTORY_RULE_STAGES: readonly ["intake", "triage", "planning", "execute", "review", "done", "canceled"];
 export type FactoryRuleStage = (typeof FACTORY_RULE_STAGES)[number];
+export declare const FACTORY_TRIAGE_TYPES: readonly ["bug", "feature request", "docs", "question/support", "maintenance", "duplicate", "resolved", "invalid", "spam", "out-of-scope", "other"];
+export type FactoryTriageType = (typeof FACTORY_TRIAGE_TYPES)[number];
+export declare function isFactoryTriageType(value: unknown): value is FactoryTriageType;
 export declare function isFactoryRuleStage(value: unknown): value is FactoryRuleStage;
+export declare function factoryRuleStage(stages: readonly string[]): FactoryRuleStage | undefined;
+export declare function isTerminalFactoryRuleStage(stages: readonly string[]): boolean;
 export declare const FACTORY_RULE_BOARDS: readonly ["work", "review"];
 export type FactoryRuleBoard = (typeof FACTORY_RULE_BOARDS)[number];
 export declare const FACTORY_RULE_SOURCES: readonly ["issue", "pullRequest", "linearIssue", "manual"];
@@ -195,7 +200,7 @@ export interface FactoryRulesOverrides {
     github?: Partial<Record<FactoryGithubEventName, FactoryGithubRuleLeaf>>;
     linear?: Partial<Record<FactoryLinearEventName, FactoryLinearRuleLeaf>>;
 }
-export type FactoryRuleRejectionCode = 'forbidden' | 'invalid_transition' | 'missing_binding' | 'stale' | 'timeout' | 'rule_error' | 'causal_depth_exceeded' | 'repeated_transition';
+export type FactoryRuleRejectionCode = 'forbidden' | 'invalid_transition' | 'missing_binding' | 'stale' | 'timeout' | 'rule_error' | 'causal_depth_exceeded' | 'repeated_transition' | 'approval_required';
 export interface FactoryRuleRejectDecision {
     type: 'reject';
     code: FactoryRuleRejectionCode;

package/dist/rules/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/rules/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,cAAc,GAAG,cAAc,GAAG,WAAW,GAAG,cAAc,GAAG,QAAQ,CAAC;AAEtF,eAAO,MAAM,mBAAmB,oFAAqF,CAAC;AACtH,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEpE,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,gBAAgB,CAE5E;AAED,eAAO,MAAM,mBAAmB,6BAA8B,CAAC;AAC/D,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEpE,eAAO,MAAM,oBAAoB,4DAA6D,CAAC;AAC/F,MAAM,MAAM,iBAAiB,GAAG,CAAC,OAAO,oBAAoB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEtE,eAAO,MAAM,qBAAqB,0SAcxB,CAAC;AACX,MAAM,MAAM,sBAAsB,GAAG,CAAC,OAAO,qBAAqB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE5E,eAAO,MAAM,qBAAqB,2CAA4C,CAAC;AAC/E,MAAM,MAAM,sBAAsB,GAAG,CAAC,OAAO,qBAAqB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE5E,MAAM,MAAM,oBAAoB,GAC5B,IAAI,GACJ,OAAO,GACP,MAAM,GACN,MAAM,GACN,oBAAoB,EAAE,GACtB;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,oBAAoB,CAAA;CAAE,CAAC;AAE5C,MAAM,WAAW,sBAAsB;IACrC,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,cAAc,CAAC;IACvB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1B,qFAAqF;IACrF,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;CAC1C;AAED,MAAM,MAAM,gBAAgB,GACxB;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GAC7B;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAClD;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,CAAC;IAAC,eAAe,EAAE,OAAO,CAAA;CAAE,GAC7E;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,CAAC;AAEnC,MAAM,WAAW,0BAA0B;IACzC,IAAI,EAAE,OAAO,GAAG,OAAO,GAAG,YAAY,GAAG,QAAQ,GAAG,QAAQ,GAAG,MAAM,CAAC;IACtE,EAAE,EAAE,MAAM,CAAC;CACZ;AAED,MAAM,WAAW,sBAAsB;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,qBAAqB,CAAC,MAAM,CAAC,CAAC;CAC7C;AAED,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;IAC7C,KAAK,EAAE,gBAAgB,CAAC;IACxB,OAAO,EAAE,0BAA0B,CAAC;IACpC,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,SAAS,sBAAsB,EAAE,CAAC;IAC/C,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,uBAAwB,SAAQ,sBAAsB;IACrE,IAAI,EAAE,sBAAsB,CAAC;IAC7B,KAAK,EAAE,gBAAgB,CAAC;IACxB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,uBAAwB,SAAQ,uBAAuB;IACtE,MAAM,EAAE,iBAAiB,CAAC;IAC1B,KAAK,EAAE,gBAAgB,CAAC;IACxB,SAAS,EAAE,gBAAgB,CAAC;IAC5B,OAAO,EAAE,gBAAgB,CAAC;CAC3B;AAED,MAAM,WAAW,4BAA6B,SAAQ,uBAAuB;IAC3E,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE;QACN,MAAM,EAAE,SAAS,GAAG,OAAO,CAAC;QAC5B,KAAK,EAAE,oBAAoB,CAAC;KAC7B,CAAC;CACH;AAED,MAAM,WAAW,wBAAyB,SAAQ,sBAAsB;IACtE,IAAI,CAAC,EAAE,sBAAsB,CAAC;IAC9B,KAAK,CAAC,EAAE,gBAAgB,CAAC;IACzB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,sBAAsB,CAAC;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;IAC/B,UAAU,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IAC7C,KAAK,CAAC,EAAE;QACN,MAAM,EAAE,MAAM,CAAC;QACf,KAAK,EAAE,MAAM,CAAC;QACd,GAAG,EAAE,MAAM,CAAC;QACZ,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;QACrB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;QAClB,KAAK,CAAC,EAAE,MAAM,GAAG,QAAQ,CAAC;QAC1B,uEAAuE;QACvE,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,CAAC;IACF,WAAW,CAAC,EAAE;QAAE,KAAK,EAAE,OAAO,CAAC;QAAC,IAAI,EAAE,OAAO,CAAA;KAAE,CAAC;IAChD,YAAY,CAAC,EAAE;QACb,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,CAAC;IACF,WAAW,CAAC,EAAE;QACZ,MAAM,EAAE,MAAM,CAAC;QACf,KAAK,EAAE,MAAM,CAAC;QACd,GAAG,EAAE,MAAM,CAAC;QACZ,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,KAAK,EAAE,MAAM,GAAG,QAAQ,CAAC;QACzB,KAAK,EAAE,OAAO,CAAC;QACf,MAAM,EAAE,OAAO,CAAC;QAChB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;QACrB,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;QAC9B,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;QAClB,UAAU,EAAE,MAAM,CAAC;QACnB,UAAU,EAAE,MAAM,CAAC;KACpB,CAAC;IACF,mFAAmF;IACnF,aAAa,CAAC,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,eAAe,EAAE,OAAO,CAAA;KAAE,CAAC;IAC/D,gFAAgF;IAChF,MAAM,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;CACrD;AAED,MAAM,WAAW,wBAAyB,SAAQ,sBAAsB;IACtE,IAAI,CAAC,EAAE,sBAAsB,CAAC;IAC9B,KAAK,CAAC,EAAE,gBAAgB,CAAC;IACzB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,sBAAsB,CAAC;IAC9B,KAAK,EAAE;QACL,EAAE,EAAE,MAAM,CAAC;QACX,UAAU,EAAE,MAAM,CAAC;QACnB,KAAK,EAAE,MAAM,CAAC;QACd,GAAG,EAAE,MAAM,CAAC;QACZ,KAAK,EAAE,MAAM,CAAC;QACd,SAAS,EAAE,MAAM,CAAC;QAClB,aAAa,EAAE,MAAM,CAAC;QACtB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;QACxB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;QACvB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;QACpB,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;QAC1B,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;CACH;AAED,MAAM,MAAM,kBAAkB,CAAC,QAAQ,IAAI,CACzC,OAAO,EAAE,QAAQ,CAAC,QAAQ,CAAC,KACxB,mBAAmB,GAAG,IAAI,GAAG,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC,CAAC;AAEtE,MAAM,WAAW,oBAAoB;IACnC,OAAO,CAAC,EAAE,kBAAkB,CAAC,uBAAuB,CAAC,CAAC;IACtD,MAAM,CAAC,EAAE,kBAAkB,CAAC,uBAAuB,CAAC,CAAC;CACtD;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,EAAE,kBAAkB,CAAC,4BAA4B,CAAC,CAAC;CAC7D;AAED,MAAM,WAAW,qBAAqB;IACpC,OAAO,CAAC,EAAE,kBAAkB,CAAC,wBAAwB,CAAC,CAAC;CACxD;AAED,MAAM,WAAW,qBAAqB;IACpC,OAAO,CAAC,EAAE,kBAAkB,CAAC,wBAAwB,CAAC,CAAC;CACxD;AAED,MAAM,MAAM,iBAAiB,GAAG,OAAO,CACrC,MAAM,CAAC,gBAAgB,EAAE,OAAO,CAAC,MAAM,CAAC,iBAAiB,EAAE,oBAAoB,CAAC,CAAC,CAAC,CACnF,CAAC;AAEF,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,iBAAiB,CAAC;IACxB,MAAM,EAAE,iBAAiB,CAAC;IAC1B,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;IAC3C,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,sBAAsB,EAAE,qBAAqB,CAAC,CAAC,CAAC;IACvE,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,sBAAsB,EAAE,qBAAqB,CAAC,CAAC,CAAC;CACxE;AAED,MAAM,WAAW,qBAAqB;IACpC,IAAI,CAAC,EAAE,iBAAiB,CAAC;IACzB,MAAM,CAAC,EAAE,iBAAiB,CAAC;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;IAC5C,MAAM,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,sBAAsB,EAAE,qBAAqB,CAAC,CAAC,CAAC;IACxE,MAAM,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,sBAAsB,EAAE,qBAAqB,CAAC,CAAC,CAAC;CACzE;AAED,MAAM,MAAM,wBAAwB,GAChC,WAAW,GACX,oBAAoB,GACpB,iBAAiB,GACjB,OAAO,GACP,SAAS,GACT,YAAY,GACZ,uBAAuB,GACvB,qBAAqB,CAAC;AAE1B,MAAM,WAAW,yBAAyB;IACxC,IAAI,EAAE,QAAQ,CAAC;IACf,IAAI,EAAE,wBAAwB,CAAC;IAC/B,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,UAAU,yBAAyB;IACjC,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,yBAA0B,SAAQ,yBAAyB;IAC1E,IAAI,EAAE,YAAY,CAAC;IACnB,KAAK,EAAE,gBAAgB,CAAC;IACxB,KAAK,EAAE,gBAAgB,CAAC;IACxB;;;;OAIG;IACH,OAAO,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC1C;;;;;;OAMG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,mCAAoC,SAAQ,yBAAyB;IACpF,IAAI,EAAE,sBAAsB,CAAC;IAC7B,KAAK,EAAE,gBAAgB,CAAC;IACxB,MAAM,EAAE,cAAc,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,KAAK,EAAE,gBAAgB,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC;CACjD;AAED,UAAU,8BAA+B,SAAQ,yBAAyB;IACxE,IAAI,EAAE,aAAa,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED;;;;;;GAMG;AACH,MAAM,MAAM,0BAA0B,GAAG,8BAA8B,GACrE,CAAC;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,KAAK,CAAA;CAAE,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,KAAK,CAAA;CAAE,CAAC,CAAC;AAElF,MAAM,WAAW,0BAA2B,SAAQ,yBAAyB;IAC3E,IAAI,EAAE,aAAa,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,QAAQ,GAAG,MAAM,GAAG,QAAQ,CAAC;IACxC,YAAY,CAAC,EAAE,SAAS,GAAG,MAAM,CAAC;IAClC,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,qBAAsB,SAAQ,yBAAyB;IACtE,IAAI,EAAE,QAAQ,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC;CACtC;AAED,MAAM,MAAM,qBAAqB,GAC7B,yBAAyB,GACzB,mCAAmC,GACnC,0BAA0B,GAC1B,0BAA0B,GAC1B,qBAAqB,CAAC;AAE1B,MAAM,MAAM,mBAAmB,GAAG,yBAAyB,GAAG,qBAAqB,CAAC;AAEpF,MAAM,WAAW,+BAA+B;IAC9C,MAAM,EAAE,UAAU,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,gBAAgB,CAAC;IACxB,SAAS,EAAE,qBAAqB,EAAE,CAAC;CACpC;AAED,MAAM,WAAW,+BAA+B;IAC9C,MAAM,EAAE,UAAU,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,wBAAwB,CAAC;IAC/B,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,MAAM,uBAAuB,GAAG,+BAA+B,GAAG,+BAA+B,CAAC;AAExG,wBAAgB,4BAA4B,CAAC,MAAM,EAAE,cAAc,GAAG,iBAAiB,CAWtF"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/rules/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,cAAc,GAAG,cAAc,GAAG,WAAW,GAAG,cAAc,GAAG,QAAQ,CAAC;AAEtF,eAAO,MAAM,mBAAmB,oFAAqF,CAAC;AACtH,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEpE,eAAO,MAAM,oBAAoB,qJAYvB,CAAC;AACX,MAAM,MAAM,iBAAiB,GAAG,CAAC,OAAO,oBAAoB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEtE,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,iBAAiB,CAE9E;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,gBAAgB,CAE5E;AAED,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,GAAG,gBAAgB,GAAG,SAAS,CAGxF;AAED,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAG7E;AAED,eAAO,MAAM,mBAAmB,6BAA8B,CAAC;AAC/D,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEpE,eAAO,MAAM,oBAAoB,4DAA6D,CAAC;AAC/F,MAAM,MAAM,iBAAiB,GAAG,CAAC,OAAO,oBAAoB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEtE,eAAO,MAAM,qBAAqB,0SAcxB,CAAC;AACX,MAAM,MAAM,sBAAsB,GAAG,CAAC,OAAO,qBAAqB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE5E,eAAO,MAAM,qBAAqB,2CAA4C,CAAC;AAC/E,MAAM,MAAM,sBAAsB,GAAG,CAAC,OAAO,qBAAqB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE5E,MAAM,MAAM,oBAAoB,GAC5B,IAAI,GACJ,OAAO,GACP,MAAM,GACN,MAAM,GACN,oBAAoB,EAAE,GACtB;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,oBAAoB,CAAA;CAAE,CAAC;AAE5C,MAAM,WAAW,sBAAsB;IACrC,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,cAAc,CAAC;IACvB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1B,qFAAqF;IACrF,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;CAC1C;AAED,MAAM,MAAM,gBAAgB,GACxB;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GAC7B;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAClD;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,CAAC;IAAC,eAAe,EAAE,OAAO,CAAA;CAAE,GAC7E;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,CAAC;AAEnC,MAAM,WAAW,0BAA0B;IACzC,IAAI,EAAE,OAAO,GAAG,OAAO,GAAG,YAAY,GAAG,QAAQ,GAAG,QAAQ,GAAG,MAAM,CAAC;IACtE,EAAE,EAAE,MAAM,CAAC;CACZ;AAED,MAAM,WAAW,sBAAsB;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,qBAAqB,CAAC,MAAM,CAAC,CAAC;CAC7C;AAED,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;IAC7C,KAAK,EAAE,gBAAgB,CAAC;IACxB,OAAO,EAAE,0BAA0B,CAAC;IACpC,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,SAAS,sBAAsB,EAAE,CAAC;IAC/C,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,uBAAwB,SAAQ,sBAAsB;IACrE,IAAI,EAAE,sBAAsB,CAAC;IAC7B,KAAK,EAAE,gBAAgB,CAAC;IACxB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,uBAAwB,SAAQ,uBAAuB;IACtE,MAAM,EAAE,iBAAiB,CAAC;IAC1B,KAAK,EAAE,gBAAgB,CAAC;IACxB,SAAS,EAAE,gBAAgB,CAAC;IAC5B,OAAO,EAAE,gBAAgB,CAAC;CAC3B;AAED,MAAM,WAAW,4BAA6B,SAAQ,uBAAuB;IAC3E,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE;QACN,MAAM,EAAE,SAAS,GAAG,OAAO,CAAC;QAC5B,KAAK,EAAE,oBAAoB,CAAC;KAC7B,CAAC;CACH;AAED,MAAM,WAAW,wBAAyB,SAAQ,sBAAsB;IACtE,IAAI,CAAC,EAAE,sBAAsB,CAAC;IAC9B,KAAK,CAAC,EAAE,gBAAgB,CAAC;IACzB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,sBAAsB,CAAC;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;IAC/B,UAAU,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IAC7C,KAAK,CAAC,EAAE;QACN,MAAM,EAAE,MAAM,CAAC;QACf,KAAK,EAAE,MAAM,CAAC;QACd,GAAG,EAAE,MAAM,CAAC;QACZ,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;QACrB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;QAClB,KAAK,CAAC,EAAE,MAAM,GAAG,QAAQ,CAAC;QAC1B,uEAAuE;QACvE,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,CAAC;IACF,WAAW,CAAC,EAAE;QAAE,KAAK,EAAE,OAAO,CAAC;QAAC,IAAI,EAAE,OAAO,CAAA;KAAE,CAAC;IAChD,YAAY,CAAC,EAAE;QACb,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,CAAC;IACF,WAAW,CAAC,EAAE;QACZ,MAAM,EAAE,MAAM,CAAC;QACf,KAAK,EAAE,MAAM,CAAC;QACd,GAAG,EAAE,MAAM,CAAC;QACZ,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,KAAK,EAAE,MAAM,GAAG,QAAQ,CAAC;QACzB,KAAK,EAAE,OAAO,CAAC;QACf,MAAM,EAAE,OAAO,CAAC;QAChB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;QACrB,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;QAC9B,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;QAClB,UAAU,EAAE,MAAM,CAAC;QACnB,UAAU,EAAE,MAAM,CAAC;KACpB,CAAC;IACF,mFAAmF;IACnF,aAAa,CAAC,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,eAAe,EAAE,OAAO,CAAA;KAAE,CAAC;IAC/D,gFAAgF;IAChF,MAAM,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;CACrD;AAED,MAAM,WAAW,wBAAyB,SAAQ,sBAAsB;IACtE,IAAI,CAAC,EAAE,sBAAsB,CAAC;IAC9B,KAAK,CAAC,EAAE,gBAAgB,CAAC;IACzB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,sBAAsB,CAAC;IAC9B,KAAK,EAAE;QACL,EAAE,EAAE,MAAM,CAAC;QACX,UAAU,EAAE,MAAM,CAAC;QACnB,KAAK,EAAE,MAAM,CAAC;QACd,GAAG,EAAE,MAAM,CAAC;QACZ,KAAK,EAAE,MAAM,CAAC;QACd,SAAS,EAAE,MAAM,CAAC;QAClB,aAAa,EAAE,MAAM,CAAC;QACtB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;QACxB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;QACvB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;QACpB,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;QAC1B,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;CACH;AAED,MAAM,MAAM,kBAAkB,CAAC,QAAQ,IAAI,CACzC,OAAO,EAAE,QAAQ,CAAC,QAAQ,CAAC,KACxB,mBAAmB,GAAG,IAAI,GAAG,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC,CAAC;AAEtE,MAAM,WAAW,oBAAoB;IACnC,OAAO,CAAC,EAAE,kBAAkB,CAAC,uBAAuB,CAAC,CAAC;IACtD,MAAM,CAAC,EAAE,kBAAkB,CAAC,uBAAuB,CAAC,CAAC;CACtD;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,EAAE,kBAAkB,CAAC,4BAA4B,CAAC,CAAC;CAC7D;AAED,MAAM,WAAW,qBAAqB;IACpC,OAAO,CAAC,EAAE,kBAAkB,CAAC,wBAAwB,CAAC,CAAC;CACxD;AAED,MAAM,WAAW,qBAAqB;IACpC,OAAO,CAAC,EAAE,kBAAkB,CAAC,wBAAwB,CAAC,CAAC;CACxD;AAED,MAAM,MAAM,iBAAiB,GAAG,OAAO,CACrC,MAAM,CAAC,gBAAgB,EAAE,OAAO,CAAC,MAAM,CAAC,iBAAiB,EAAE,oBAAoB,CAAC,CAAC,CAAC,CACnF,CAAC;AAEF,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,iBAAiB,CAAC;IACxB,MAAM,EAAE,iBAAiB,CAAC;IAC1B,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;IAC3C,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,sBAAsB,EAAE,qBAAqB,CAAC,CAAC,CAAC;IACvE,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,sBAAsB,EAAE,qBAAqB,CAAC,CAAC,CAAC;CACxE;AAED,MAAM,WAAW,qBAAqB;IACpC,IAAI,CAAC,EAAE,iBAAiB,CAAC;IACzB,MAAM,CAAC,EAAE,iBAAiB,CAAC;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;IAC5C,MAAM,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,sBAAsB,EAAE,qBAAqB,CAAC,CAAC,CAAC;IACxE,MAAM,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,sBAAsB,EAAE,qBAAqB,CAAC,CAAC,CAAC;CACzE;AAED,MAAM,MAAM,wBAAwB,GAChC,WAAW,GACX,oBAAoB,GACpB,iBAAiB,GACjB,OAAO,GACP,SAAS,GACT,YAAY,GACZ,uBAAuB,GACvB,qBAAqB,GACrB,mBAAmB,CAAC;AAExB,MAAM,WAAW,yBAAyB;IACxC,IAAI,EAAE,QAAQ,CAAC;IACf,IAAI,EAAE,wBAAwB,CAAC;IAC/B,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,UAAU,yBAAyB;IACjC,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,yBAA0B,SAAQ,yBAAyB;IAC1E,IAAI,EAAE,YAAY,CAAC;IACnB,KAAK,EAAE,gBAAgB,CAAC;IACxB,KAAK,EAAE,gBAAgB,CAAC;IACxB;;;;OAIG;IACH,OAAO,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC1C;;;;;;OAMG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,mCAAoC,SAAQ,yBAAyB;IACpF,IAAI,EAAE,sBAAsB,CAAC;IAC7B,KAAK,EAAE,gBAAgB,CAAC;IACxB,MAAM,EAAE,cAAc,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,KAAK,EAAE,gBAAgB,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC;CACjD;AAED,UAAU,8BAA+B,SAAQ,yBAAyB;IACxE,IAAI,EAAE,aAAa,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED;;;;;;GAMG;AACH,MAAM,MAAM,0BAA0B,GAAG,8BAA8B,GACrE,CAAC;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,KAAK,CAAA;CAAE,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,KAAK,CAAA;CAAE,CAAC,CAAC;AAElF,MAAM,WAAW,0BAA2B,SAAQ,yBAAyB;IAC3E,IAAI,EAAE,aAAa,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,QAAQ,GAAG,MAAM,GAAG,QAAQ,CAAC;IACxC,YAAY,CAAC,EAAE,SAAS,GAAG,MAAM,CAAC;IAClC,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,qBAAsB,SAAQ,yBAAyB;IACtE,IAAI,EAAE,QAAQ,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC;CACtC;AAED,MAAM,MAAM,qBAAqB,GAC7B,yBAAyB,GACzB,mCAAmC,GACnC,0BAA0B,GAC1B,0BAA0B,GAC1B,qBAAqB,CAAC;AAE1B,MAAM,MAAM,mBAAmB,GAAG,yBAAyB,GAAG,qBAAqB,CAAC;AAEpF,MAAM,WAAW,+BAA+B;IAC9C,MAAM,EAAE,UAAU,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,gBAAgB,CAAC;IACxB,SAAS,EAAE,qBAAqB,EAAE,CAAC;CACpC;AAED,MAAM,WAAW,+BAA+B;IAC9C,MAAM,EAAE,UAAU,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,wBAAwB,CAAC;IAC/B,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,MAAM,uBAAuB,GAAG,+BAA+B,GAAG,+BAA+B,CAAC;AAExG,wBAAgB,4BAA4B,CAAC,MAAM,EAAE,cAAc,GAAG,iBAAiB,CAWtF"}

package/dist/rules/types.js

@@ -8,9 +8,33 @@ const FACTORY_RULE_STAGES = [
 	"done",
 	"canceled"
 ];
+const FACTORY_TRIAGE_TYPES = [
+	"bug",
+	"feature request",
+	"docs",
+	"question/support",
+	"maintenance",
+	"duplicate",
+	"resolved",
+	"invalid",
+	"spam",
+	"out-of-scope",
+	"other"
+];
+function isFactoryTriageType(value) {
+	return typeof value === "string" && FACTORY_TRIAGE_TYPES.some((type) => type === value);
+}
 function isFactoryRuleStage(value) {
 	return typeof value === "string" && FACTORY_RULE_STAGES.some((stage) => stage === value);
 }
+function factoryRuleStage(stages) {
+	const stage = stages.length === 1 ? stages[0] : void 0;
+	return isFactoryRuleStage(stage) ? stage : void 0;
+}
+function isTerminalFactoryRuleStage(stages) {
+	const stage = factoryRuleStage(stages);
+	return stage === "done" || stage === "canceled";
+}
 const FACTORY_RULE_BOARDS = ["work", "review"];
 const FACTORY_RULE_SOURCES = [
 	"issue",
@@ -43,6 +67,6 @@ function factoryRuleSourceForWorkItem(source) {
 	}
 }
 //#endregion
-export { FACTORY_GITHUB_EVENTS, FACTORY_LINEAR_EVENTS, FACTORY_RULE_BOARDS, FACTORY_RULE_SOURCES, FACTORY_RULE_STAGES, factoryRuleSourceForWorkItem, isFactoryRuleStage };
+export { FACTORY_GITHUB_EVENTS, FACTORY_LINEAR_EVENTS, FACTORY_RULE_BOARDS, FACTORY_RULE_SOURCES, FACTORY_RULE_STAGES, FACTORY_TRIAGE_TYPES, factoryRuleSourceForWorkItem, factoryRuleStage, isFactoryRuleStage, isFactoryTriageType, isTerminalFactoryRuleStage };
 
 //# sourceMappingURL=types.js.map

package/dist/rules/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","names":[],"sources":["../../src/rules/types.ts"],"sourcesContent":["export type WorkItemSource = 'github-issue' | 'github-pr' | 'linear-issue' | 'manual';\n\nexport const FACTORY_RULE_STAGES = ['intake', 'triage', 'planning', 'execute', 'review', 'done', 'canceled'] as const;\nexport type FactoryRuleStage = (typeof FACTORY_RULE_STAGES)[number];\n\nexport function isFactoryRuleStage(value: unknown): value is FactoryRuleStage {\n  return typeof value === 'string' && FACTORY_RULE_STAGES.some(stage => stage === value);\n}\n\nexport const FACTORY_RULE_BOARDS = ['work', 'review'] as const;\nexport type FactoryRuleBoard = (typeof FACTORY_RULE_BOARDS)[number];\n\nexport const FACTORY_RULE_SOURCES = ['issue', 'pullRequest', 'linearIssue', 'manual'] as const;\nexport type FactoryRuleSource = (typeof FACTORY_RULE_SOURCES)[number];\n\nexport const FACTORY_GITHUB_EVENTS = [\n  'issueOpened',\n  'issueEdited',\n  'issueClosed',\n  'issueCommentCreated',\n  'issueCommentEdited',\n  'issueCommentDeleted',\n  'pullRequestOpened',\n  'pullRequestUpdated',\n  'pullRequestCommentCreated',\n  'pullRequestReviewRequested',\n  'pullRequestReviewSubmitted',\n  'pullRequestMerged',\n  'pullRequestClosed',\n] as const;\nexport type FactoryGithubEventName = (typeof FACTORY_GITHUB_EVENTS)[number];\n\nexport const FACTORY_LINEAR_EVENTS = ['issueObserved', 'issueClosed'] as const;\nexport type FactoryLinearEventName = (typeof FACTORY_LINEAR_EVENTS)[number];\n\nexport type FactoryRuleJsonValue =\n  | null\n  | boolean\n  | number\n  | string\n  | FactoryRuleJsonValue[]\n  | { [key: string]: FactoryRuleJsonValue };\n\nexport interface FactoryRuleItemContext {\n  id: string;\n  source: WorkItemSource;\n  sourceKey: string | null;\n  parentWorkItemId: string | null;\n  title: string;\n  url: string | null;\n  stages: readonly string[];\n  /** Intake-stamped facts about the source — repository id, reporter login, labels. */\n  metadata: Record<string, unknown> | null;\n}\n\nexport type FactoryRuleActor =\n  | { type: 'human'; id: string }\n  | { type: 'agent'; bindingId: string; role: string }\n  | { type: 'github'; login: string; trusted: boolean; factoryAuthored: boolean }\n  | { type: 'system'; id: string };\n\nexport interface FactoryRuleIngressIdentity {\n  type: 'human' | 'agent' | 'toolResult' | 'github' | 'linear' | 'rule';\n  id: string;\n}\n\nexport interface FactoryRuleCausalEntry {\n  ingressId: string;\n  decisionType: FactoryCommitDecision['type'];\n}\n\nexport interface FactoryRuleContextBase {\n  tenant: { orgId: string; projectId: string };\n  actor: FactoryRuleActor;\n  ingress: FactoryRuleIngressIdentity;\n  cause: string;\n  causalChain: readonly FactoryRuleCausalEntry[];\n  ruleSetVersion: string;\n}\n\nexport interface FactoryBoundRuleContext extends FactoryRuleContextBase {\n  item: FactoryRuleItemContext;\n  board: FactoryRuleBoard;\n  itemRevision: number;\n}\n\nexport interface FactoryStageRuleContext extends FactoryBoundRuleContext {\n  source: FactoryRuleSource;\n  stage: FactoryRuleStage;\n  fromStage: FactoryRuleStage;\n  toStage: FactoryRuleStage;\n}\n\nexport interface FactoryToolResultRuleContext extends FactoryBoundRuleContext {\n  toolName: string;\n  threadId: string;\n  assistantMessageId: string;\n  toolCallId: string;\n  result: {\n    status: 'success' | 'error';\n    value: FactoryRuleJsonValue;\n  };\n}\n\nexport interface FactoryGithubRuleContext extends FactoryRuleContextBase {\n  item?: FactoryRuleItemContext;\n  board?: FactoryRuleBoard;\n  itemRevision?: number;\n  event: FactoryGithubEventName;\n  deliveryId: string;\n  factory: { createdAt: string };\n  repository: { id: number; fullName: string };\n  issue?: {\n    number: number;\n    title: string;\n    url: string;\n    createdAt?: string;\n    updatedAt?: string;\n    assignees?: string[];\n    labels?: string[];\n    state?: 'open' | 'closed';\n    /** GitHub close reason: `completed`, `not_planned`, or `duplicate`. */\n    stateReason?: string;\n  };\n  issueChange?: { title: boolean; body: boolean };\n  issueComment?: {\n    id: number;\n    body?: string;\n    url?: string;\n    author?: string;\n    authorType?: string;\n    createdAt?: string;\n    updatedAt?: string;\n  };\n  pullRequest?: {\n    number: number;\n    title: string;\n    url: string;\n    createdAt?: string;\n    state: 'open' | 'closed';\n    draft: boolean;\n    merged: boolean;\n    assignees?: string[];\n    requestedReviewers?: string[];\n    labels?: string[];\n    headBranch: string;\n    baseBranch: string;\n  };\n  /** Present on `pullRequestReviewRequested`: who review was (re-)requested from. */\n  reviewRequest?: { reviewer: string; factoryReviewer: boolean };\n  /** Present on `pullRequestReviewSubmitted`: the review that was just posted. */\n  review?: { id: number; state: string; url: string };\n}\n\nexport interface FactoryLinearRuleContext extends FactoryRuleContextBase {\n  item?: FactoryRuleItemContext;\n  board?: FactoryRuleBoard;\n  itemRevision?: number;\n  event: FactoryLinearEventName;\n  issue: {\n    id: string;\n    identifier: string;\n    title: string;\n    url: string;\n    state: string;\n    stateType: string;\n    priorityLabel: string;\n    assignee: string | null;\n    creator: string | null;\n    team: string | null;\n    labels: readonly string[];\n    createdAt: string;\n    updatedAt: string;\n  };\n}\n\nexport type FactoryRuleHandler<TContext> = (\n  context: Readonly<TContext>,\n) => FactoryRuleDecision | void | Promise<FactoryRuleDecision | void>;\n\nexport interface FactoryBoardRuleLeaf {\n  onEnter?: FactoryRuleHandler<FactoryStageRuleContext>;\n  onExit?: FactoryRuleHandler<FactoryStageRuleContext>;\n}\n\nexport interface FactoryToolRuleLeaf {\n  onResult?: FactoryRuleHandler<FactoryToolResultRuleContext>;\n}\n\nexport interface FactoryGithubRuleLeaf {\n  onEvent?: FactoryRuleHandler<FactoryGithubRuleContext>;\n}\n\nexport interface FactoryLinearRuleLeaf {\n  onEvent?: FactoryRuleHandler<FactoryLinearRuleContext>;\n}\n\nexport type FactoryBoardRules = Partial<\n  Record<FactoryRuleStage, Partial<Record<FactoryRuleSource, FactoryBoardRuleLeaf>>>\n>;\n\nexport interface FactoryRules {\n  version: string;\n  work: FactoryBoardRules;\n  review: FactoryBoardRules;\n  tools: Record<string, FactoryToolRuleLeaf>;\n  github: Partial<Record<FactoryGithubEventName, FactoryGithubRuleLeaf>>;\n  linear: Partial<Record<FactoryLinearEventName, FactoryLinearRuleLeaf>>;\n}\n\nexport interface FactoryRulesOverrides {\n  work?: FactoryBoardRules;\n  review?: FactoryBoardRules;\n  tools?: Record<string, FactoryToolRuleLeaf>;\n  github?: Partial<Record<FactoryGithubEventName, FactoryGithubRuleLeaf>>;\n  linear?: Partial<Record<FactoryLinearEventName, FactoryLinearRuleLeaf>>;\n}\n\nexport type FactoryRuleRejectionCode =\n  | 'forbidden'\n  | 'invalid_transition'\n  | 'missing_binding'\n  | 'stale'\n  | 'timeout'\n  | 'rule_error'\n  | 'causal_depth_exceeded'\n  | 'repeated_transition';\n\nexport interface FactoryRuleRejectDecision {\n  type: 'reject';\n  code: FactoryRuleRejectionCode;\n  reason: string;\n}\n\ninterface FactoryCommitDecisionBase {\n  idempotencyKey: string;\n}\n\nexport interface FactoryTransitionDecision extends FactoryCommitDecisionBase {\n  type: 'transition';\n  board: FactoryRuleBoard;\n  stage: FactoryRuleStage;\n  /**\n   * Delivered to the item's active session (waking it if idle) after the\n   * transition commits. Skipped when the item has no active run binding, so\n   * informational messages never fail the transition.\n   */\n  message?: { text: string; role?: string };\n  /**\n   * Runs the stage's entry rules even when the item is already in that stage.\n   * A transition to the current stage is normally inert, because most callers\n   * are correcting a board into a state it already holds. Re-entry is for the\n   * opposite case: the stage's work is in flight and has been invalidated, so\n   * it has to start over.\n   */\n  reenter?: boolean;\n}\n\nexport interface FactoryUpsertLinkedWorkItemDecision extends FactoryCommitDecisionBase {\n  type: 'upsertLinkedWorkItem';\n  board: FactoryRuleBoard;\n  source: WorkItemSource;\n  sourceKey: string;\n  title: string;\n  url: string | null;\n  stage: FactoryRuleStage;\n  metadata?: Record<string, FactoryRuleJsonValue>;\n}\n\ninterface FactoryInvokeSkillDecisionBase extends FactoryCommitDecisionBase {\n  type: 'invokeSkill';\n  role: string;\n  arguments?: string;\n  precedingMessage?: string;\n  cancelInFlight?: boolean;\n}\n\n/**\n * Starting an agent run. Most runs activate a skill, because the skill carries\n * the handoff contract later rules match on. A run whose completion is already\n * signalled some other way — Building finishes by opening a pull request, which\n * arrives as its own event — needs no contract, so it can carry a plain prompt\n * instead of an otherwise empty skill.\n */\nexport type FactoryInvokeSkillDecision = FactoryInvokeSkillDecisionBase &\n  ({ skillName: string; prompt?: never } | { prompt: string; skillName?: never });\n\nexport interface FactorySendMessageDecision extends FactoryCommitDecisionBase {\n  type: 'sendMessage';\n  role: string;\n  message: string;\n  priority?: 'medium' | 'high' | 'urgent';\n  idleBehavior?: 'persist' | 'wake';\n  prepareBinding?: boolean;\n}\n\nexport interface FactoryNotifyDecision extends FactoryCommitDecisionBase {\n  type: 'notify';\n  title: string;\n  body?: string;\n  level?: 'info' | 'warning' | 'error';\n}\n\nexport type FactoryCommitDecision =\n  | FactoryTransitionDecision\n  | FactoryUpsertLinkedWorkItemDecision\n  | FactoryInvokeSkillDecision\n  | FactorySendMessageDecision\n  | FactoryNotifyDecision;\n\nexport type FactoryRuleDecision = FactoryRuleRejectDecision | FactoryCommitDecision;\n\nexport interface FactoryTransitionResultAccepted {\n  status: 'accepted';\n  transitionId: string;\n  itemId: string;\n  revision: number;\n  stage: FactoryRuleStage;\n  decisions: FactoryCommitDecision[];\n}\n\nexport interface FactoryTransitionResultRejected {\n  status: 'rejected';\n  transitionId: string;\n  itemId: string;\n  code: FactoryRuleRejectionCode;\n  reason: string;\n}\n\nexport type FactoryTransitionResult = FactoryTransitionResultAccepted | FactoryTransitionResultRejected;\n\nexport function factoryRuleSourceForWorkItem(source: WorkItemSource): FactoryRuleSource {\n  switch (source) {\n    case 'github-issue':\n      return 'issue';\n    case 'github-pr':\n      return 'pullRequest';\n    case 'linear-issue':\n      return 'linearIssue';\n    case 'manual':\n      return 'manual';\n  }\n}\n"],"mappings":";AAEA,MAAa,sBAAsB;CAAC;CAAU;CAAU;CAAY;CAAW;CAAU;CAAQ;AAAU;AAG3G,SAAgB,mBAAmB,OAA2C;CAC5E,OAAO,OAAO,UAAU,YAAY,oBAAoB,MAAK,UAAS,UAAU,KAAK;AACvF;AAEA,MAAa,sBAAsB,CAAC,QAAQ,QAAQ;AAGpD,MAAa,uBAAuB;CAAC;CAAS;CAAe;CAAe;AAAQ;AAGpF,MAAa,wBAAwB;CACnC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;AAGA,MAAa,wBAAwB,CAAC,iBAAiB,aAAa;AA2SpE,SAAgB,6BAA6B,QAA2C;CACtF,QAAQ,QAAR;EACE,KAAK,gBACH,OAAO;EACT,KAAK,aACH,OAAO;EACT,KAAK,gBACH,OAAO;EACT,KAAK,UACH,OAAO;CACX;AACF"}
+{"version":3,"file":"types.js","names":[],"sources":["../../src/rules/types.ts"],"sourcesContent":["export type WorkItemSource = 'github-issue' | 'github-pr' | 'linear-issue' | 'manual';\n\nexport const FACTORY_RULE_STAGES = ['intake', 'triage', 'planning', 'execute', 'review', 'done', 'canceled'] as const;\nexport type FactoryRuleStage = (typeof FACTORY_RULE_STAGES)[number];\n\nexport const FACTORY_TRIAGE_TYPES = [\n  'bug',\n  'feature request',\n  'docs',\n  'question/support',\n  'maintenance',\n  'duplicate',\n  'resolved',\n  'invalid',\n  'spam',\n  'out-of-scope',\n  'other',\n] as const;\nexport type FactoryTriageType = (typeof FACTORY_TRIAGE_TYPES)[number];\n\nexport function isFactoryTriageType(value: unknown): value is FactoryTriageType {\n  return typeof value === 'string' && FACTORY_TRIAGE_TYPES.some(type => type === value);\n}\n\nexport function isFactoryRuleStage(value: unknown): value is FactoryRuleStage {\n  return typeof value === 'string' && FACTORY_RULE_STAGES.some(stage => stage === value);\n}\n\nexport function factoryRuleStage(stages: readonly string[]): FactoryRuleStage | undefined {\n  const stage = stages.length === 1 ? stages[0] : undefined;\n  return isFactoryRuleStage(stage) ? stage : undefined;\n}\n\nexport function isTerminalFactoryRuleStage(stages: readonly string[]): boolean {\n  const stage = factoryRuleStage(stages);\n  return stage === 'done' || stage === 'canceled';\n}\n\nexport const FACTORY_RULE_BOARDS = ['work', 'review'] as const;\nexport type FactoryRuleBoard = (typeof FACTORY_RULE_BOARDS)[number];\n\nexport const FACTORY_RULE_SOURCES = ['issue', 'pullRequest', 'linearIssue', 'manual'] as const;\nexport type FactoryRuleSource = (typeof FACTORY_RULE_SOURCES)[number];\n\nexport const FACTORY_GITHUB_EVENTS = [\n  'issueOpened',\n  'issueEdited',\n  'issueClosed',\n  'issueCommentCreated',\n  'issueCommentEdited',\n  'issueCommentDeleted',\n  'pullRequestOpened',\n  'pullRequestUpdated',\n  'pullRequestCommentCreated',\n  'pullRequestReviewRequested',\n  'pullRequestReviewSubmitted',\n  'pullRequestMerged',\n  'pullRequestClosed',\n] as const;\nexport type FactoryGithubEventName = (typeof FACTORY_GITHUB_EVENTS)[number];\n\nexport const FACTORY_LINEAR_EVENTS = ['issueObserved', 'issueClosed'] as const;\nexport type FactoryLinearEventName = (typeof FACTORY_LINEAR_EVENTS)[number];\n\nexport type FactoryRuleJsonValue =\n  | null\n  | boolean\n  | number\n  | string\n  | FactoryRuleJsonValue[]\n  | { [key: string]: FactoryRuleJsonValue };\n\nexport interface FactoryRuleItemContext {\n  id: string;\n  source: WorkItemSource;\n  sourceKey: string | null;\n  parentWorkItemId: string | null;\n  title: string;\n  url: string | null;\n  stages: readonly string[];\n  /** Intake-stamped facts about the source — repository id, reporter login, labels. */\n  metadata: Record<string, unknown> | null;\n}\n\nexport type FactoryRuleActor =\n  | { type: 'human'; id: string }\n  | { type: 'agent'; bindingId: string; role: string }\n  | { type: 'github'; login: string; trusted: boolean; factoryAuthored: boolean }\n  | { type: 'system'; id: string };\n\nexport interface FactoryRuleIngressIdentity {\n  type: 'human' | 'agent' | 'toolResult' | 'github' | 'linear' | 'rule';\n  id: string;\n}\n\nexport interface FactoryRuleCausalEntry {\n  ingressId: string;\n  decisionType: FactoryCommitDecision['type'];\n}\n\nexport interface FactoryRuleContextBase {\n  tenant: { orgId: string; projectId: string };\n  actor: FactoryRuleActor;\n  ingress: FactoryRuleIngressIdentity;\n  cause: string;\n  causalChain: readonly FactoryRuleCausalEntry[];\n  ruleSetVersion: string;\n}\n\nexport interface FactoryBoundRuleContext extends FactoryRuleContextBase {\n  item: FactoryRuleItemContext;\n  board: FactoryRuleBoard;\n  itemRevision: number;\n}\n\nexport interface FactoryStageRuleContext extends FactoryBoundRuleContext {\n  source: FactoryRuleSource;\n  stage: FactoryRuleStage;\n  fromStage: FactoryRuleStage;\n  toStage: FactoryRuleStage;\n}\n\nexport interface FactoryToolResultRuleContext extends FactoryBoundRuleContext {\n  toolName: string;\n  threadId: string;\n  assistantMessageId: string;\n  toolCallId: string;\n  result: {\n    status: 'success' | 'error';\n    value: FactoryRuleJsonValue;\n  };\n}\n\nexport interface FactoryGithubRuleContext extends FactoryRuleContextBase {\n  item?: FactoryRuleItemContext;\n  board?: FactoryRuleBoard;\n  itemRevision?: number;\n  event: FactoryGithubEventName;\n  deliveryId: string;\n  factory: { createdAt: string };\n  repository: { id: number; fullName: string };\n  issue?: {\n    number: number;\n    title: string;\n    url: string;\n    createdAt?: string;\n    updatedAt?: string;\n    assignees?: string[];\n    labels?: string[];\n    state?: 'open' | 'closed';\n    /** GitHub close reason: `completed`, `not_planned`, or `duplicate`. */\n    stateReason?: string;\n  };\n  issueChange?: { title: boolean; body: boolean };\n  issueComment?: {\n    id: number;\n    body?: string;\n    url?: string;\n    author?: string;\n    authorType?: string;\n    createdAt?: string;\n    updatedAt?: string;\n  };\n  pullRequest?: {\n    number: number;\n    title: string;\n    url: string;\n    createdAt?: string;\n    state: 'open' | 'closed';\n    draft: boolean;\n    merged: boolean;\n    assignees?: string[];\n    requestedReviewers?: string[];\n    labels?: string[];\n    headBranch: string;\n    baseBranch: string;\n  };\n  /** Present on `pullRequestReviewRequested`: who review was (re-)requested from. */\n  reviewRequest?: { reviewer: string; factoryReviewer: boolean };\n  /** Present on `pullRequestReviewSubmitted`: the review that was just posted. */\n  review?: { id: number; state: string; url: string };\n}\n\nexport interface FactoryLinearRuleContext extends FactoryRuleContextBase {\n  item?: FactoryRuleItemContext;\n  board?: FactoryRuleBoard;\n  itemRevision?: number;\n  event: FactoryLinearEventName;\n  issue: {\n    id: string;\n    identifier: string;\n    title: string;\n    url: string;\n    state: string;\n    stateType: string;\n    priorityLabel: string;\n    assignee: string | null;\n    creator: string | null;\n    team: string | null;\n    labels: readonly string[];\n    createdAt: string;\n    updatedAt: string;\n  };\n}\n\nexport type FactoryRuleHandler<TContext> = (\n  context: Readonly<TContext>,\n) => FactoryRuleDecision | void | Promise<FactoryRuleDecision | void>;\n\nexport interface FactoryBoardRuleLeaf {\n  onEnter?: FactoryRuleHandler<FactoryStageRuleContext>;\n  onExit?: FactoryRuleHandler<FactoryStageRuleContext>;\n}\n\nexport interface FactoryToolRuleLeaf {\n  onResult?: FactoryRuleHandler<FactoryToolResultRuleContext>;\n}\n\nexport interface FactoryGithubRuleLeaf {\n  onEvent?: FactoryRuleHandler<FactoryGithubRuleContext>;\n}\n\nexport interface FactoryLinearRuleLeaf {\n  onEvent?: FactoryRuleHandler<FactoryLinearRuleContext>;\n}\n\nexport type FactoryBoardRules = Partial<\n  Record<FactoryRuleStage, Partial<Record<FactoryRuleSource, FactoryBoardRuleLeaf>>>\n>;\n\nexport interface FactoryRules {\n  version: string;\n  work: FactoryBoardRules;\n  review: FactoryBoardRules;\n  tools: Record<string, FactoryToolRuleLeaf>;\n  github: Partial<Record<FactoryGithubEventName, FactoryGithubRuleLeaf>>;\n  linear: Partial<Record<FactoryLinearEventName, FactoryLinearRuleLeaf>>;\n}\n\nexport interface FactoryRulesOverrides {\n  work?: FactoryBoardRules;\n  review?: FactoryBoardRules;\n  tools?: Record<string, FactoryToolRuleLeaf>;\n  github?: Partial<Record<FactoryGithubEventName, FactoryGithubRuleLeaf>>;\n  linear?: Partial<Record<FactoryLinearEventName, FactoryLinearRuleLeaf>>;\n}\n\nexport type FactoryRuleRejectionCode =\n  | 'forbidden'\n  | 'invalid_transition'\n  | 'missing_binding'\n  | 'stale'\n  | 'timeout'\n  | 'rule_error'\n  | 'causal_depth_exceeded'\n  | 'repeated_transition'\n  | 'approval_required';\n\nexport interface FactoryRuleRejectDecision {\n  type: 'reject';\n  code: FactoryRuleRejectionCode;\n  reason: string;\n}\n\ninterface FactoryCommitDecisionBase {\n  idempotencyKey: string;\n}\n\nexport interface FactoryTransitionDecision extends FactoryCommitDecisionBase {\n  type: 'transition';\n  board: FactoryRuleBoard;\n  stage: FactoryRuleStage;\n  /**\n   * Delivered to the item's active session (waking it if idle) after the\n   * transition commits. Skipped when the item has no active run binding, so\n   * informational messages never fail the transition.\n   */\n  message?: { text: string; role?: string };\n  /**\n   * Runs the stage's entry rules even when the item is already in that stage.\n   * A transition to the current stage is normally inert, because most callers\n   * are correcting a board into a state it already holds. Re-entry is for the\n   * opposite case: the stage's work is in flight and has been invalidated, so\n   * it has to start over.\n   */\n  reenter?: boolean;\n}\n\nexport interface FactoryUpsertLinkedWorkItemDecision extends FactoryCommitDecisionBase {\n  type: 'upsertLinkedWorkItem';\n  board: FactoryRuleBoard;\n  source: WorkItemSource;\n  sourceKey: string;\n  title: string;\n  url: string | null;\n  stage: FactoryRuleStage;\n  metadata?: Record<string, FactoryRuleJsonValue>;\n}\n\ninterface FactoryInvokeSkillDecisionBase extends FactoryCommitDecisionBase {\n  type: 'invokeSkill';\n  role: string;\n  arguments?: string;\n  precedingMessage?: string;\n  cancelInFlight?: boolean;\n}\n\n/**\n * Starting an agent run. Most runs activate a skill, because the skill carries\n * the handoff contract later rules match on. A run whose completion is already\n * signalled some other way — Building finishes by opening a pull request, which\n * arrives as its own event — needs no contract, so it can carry a plain prompt\n * instead of an otherwise empty skill.\n */\nexport type FactoryInvokeSkillDecision = FactoryInvokeSkillDecisionBase &\n  ({ skillName: string; prompt?: never } | { prompt: string; skillName?: never });\n\nexport interface FactorySendMessageDecision extends FactoryCommitDecisionBase {\n  type: 'sendMessage';\n  role: string;\n  message: string;\n  priority?: 'medium' | 'high' | 'urgent';\n  idleBehavior?: 'persist' | 'wake';\n  prepareBinding?: boolean;\n}\n\nexport interface FactoryNotifyDecision extends FactoryCommitDecisionBase {\n  type: 'notify';\n  title: string;\n  body?: string;\n  level?: 'info' | 'warning' | 'error';\n}\n\nexport type FactoryCommitDecision =\n  | FactoryTransitionDecision\n  | FactoryUpsertLinkedWorkItemDecision\n  | FactoryInvokeSkillDecision\n  | FactorySendMessageDecision\n  | FactoryNotifyDecision;\n\nexport type FactoryRuleDecision = FactoryRuleRejectDecision | FactoryCommitDecision;\n\nexport interface FactoryTransitionResultAccepted {\n  status: 'accepted';\n  transitionId: string;\n  itemId: string;\n  revision: number;\n  stage: FactoryRuleStage;\n  decisions: FactoryCommitDecision[];\n}\n\nexport interface FactoryTransitionResultRejected {\n  status: 'rejected';\n  transitionId: string;\n  itemId: string;\n  code: FactoryRuleRejectionCode;\n  reason: string;\n}\n\nexport type FactoryTransitionResult = FactoryTransitionResultAccepted | FactoryTransitionResultRejected;\n\nexport function factoryRuleSourceForWorkItem(source: WorkItemSource): FactoryRuleSource {\n  switch (source) {\n    case 'github-issue':\n      return 'issue';\n    case 'github-pr':\n      return 'pullRequest';\n    case 'linear-issue':\n      return 'linearIssue';\n    case 'manual':\n      return 'manual';\n  }\n}\n"],"mappings":";AAEA,MAAa,sBAAsB;CAAC;CAAU;CAAU;CAAY;CAAW;CAAU;CAAQ;AAAU;AAG3G,MAAa,uBAAuB;CAClC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;AAGA,SAAgB,oBAAoB,OAA4C;CAC9E,OAAO,OAAO,UAAU,YAAY,qBAAqB,MAAK,SAAQ,SAAS,KAAK;AACtF;AAEA,SAAgB,mBAAmB,OAA2C;CAC5E,OAAO,OAAO,UAAU,YAAY,oBAAoB,MAAK,UAAS,UAAU,KAAK;AACvF;AAEA,SAAgB,iBAAiB,QAAyD;CACxF,MAAM,QAAQ,OAAO,WAAW,IAAI,OAAO,KAAK,KAAA;CAChD,OAAO,mBAAmB,KAAK,IAAI,QAAQ,KAAA;AAC7C;AAEA,SAAgB,2BAA2B,QAAoC;CAC7E,MAAM,QAAQ,iBAAiB,MAAM;CACrC,OAAO,UAAU,UAAU,UAAU;AACvC;AAEA,MAAa,sBAAsB,CAAC,QAAQ,QAAQ;AAGpD,MAAa,uBAAuB;CAAC;CAAS;CAAe;CAAe;AAAQ;AAGpF,MAAa,wBAAwB;CACnC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;AAGA,MAAa,wBAAwB,CAAC,iBAAiB,aAAa;AA4SpE,SAAgB,6BAA6B,QAA2C;CACtF,QAAQ,QAAR;EACE,KAAK,gBACH,OAAO;EACT,KAAK,aACH,OAAO;EACT,KAAK,gBACH,OAAO;EACT,KAAK,UACH,OAAO;CACX;AACF"}

package/dist/secret-encryption.d.ts

@@ -0,0 +1,25 @@
+export interface DecryptedFactorySecret<T> {
+    value: T;
+    needsReencryption: boolean;
+}
+/** Encrypts opaque JSON values before they cross the Factory storage boundary. */
+export interface FactorySecretEncryption {
+    encrypt<T>(value: T): Promise<string>;
+    decrypt<T>(value: unknown): Promise<DecryptedFactorySecret<T>>;
+}
+export interface FactorySecretEncryptionKey {
+    id: string;
+    key: Uint8Array;
+}
+export interface FactorySecretEncryptionConfig {
+    primary: FactorySecretEncryptionKey;
+    previous?: FactorySecretEncryptionKey[];
+}
+/**
+ * Creates a versioned AES-256-GCM encryptor. The primary key is used for new
+ * writes; previous keys remain decrypt-only until stored values are rotated.
+ */
+export declare function createFactorySecretEncryption(config: FactorySecretEncryptionConfig): FactorySecretEncryption;
+/** Explicit plaintext compatibility for local, no-auth Factory development. */
+export declare function createPlaintextFactorySecretEncryption(): FactorySecretEncryption;
+//# sourceMappingURL=secret-encryption.d.ts.map

package/dist/secret-encryption.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-encryption.d.ts","sourceRoot":"","sources":["../src/secret-encryption.ts"],"names":[],"mappings":"AAaA,MAAM,WAAW,sBAAsB,CAAC,CAAC;IACvC,KAAK,EAAE,CAAC,CAAC;IACT,iBAAiB,EAAE,OAAO,CAAC;CAC5B;AAED,kFAAkF;AAClF,MAAM,WAAW,uBAAuB;IACtC,OAAO,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACtC,OAAO,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,CAAC;CAChE;AAED,MAAM,WAAW,0BAA0B;IACzC,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,EAAE,UAAU,CAAC;CACjB;AAED,MAAM,WAAW,6BAA6B;IAC5C,OAAO,EAAE,0BAA0B,CAAC;IACpC,QAAQ,CAAC,EAAE,0BAA0B,EAAE,CAAC;CACzC;AAgCD;;;GAGG;AACH,wBAAgB,6BAA6B,CAAC,MAAM,EAAE,6BAA6B,GAAG,uBAAuB,CA+C5G;AAED,+EAA+E;AAC/E,wBAAgB,sCAAsC,IAAI,uBAAuB,CAiBhF"}

package/dist/secret-encryption.js

@@ -0,0 +1,96 @@
+import { createCipheriv, createDecipheriv, randomBytes } from "crypto";
+//#region src/secret-encryption.ts
+const ENVELOPE_PREFIX = "mastra:factory-secret:v1:";
+const ALGORITHM = "aes-256-gcm";
+const IV_BYTES = 12;
+function validateKey({ id, key }) {
+	if (!id) throw new Error("[FactorySecretEncryption] Key id is required.");
+	const buffer = Buffer.from(key);
+	if (buffer.byteLength !== 32) throw new Error(`[FactorySecretEncryption] Key "${id}" must be exactly 32 bytes.`);
+	return buffer;
+}
+function parseEnvelope(value) {
+	let parsed;
+	try {
+		parsed = JSON.parse(Buffer.from(value.slice(25), "base64url").toString("utf8"));
+	} catch {
+		throw new Error("[FactorySecretEncryption] Invalid encrypted value.");
+	}
+	if (!parsed || typeof parsed !== "object" || typeof parsed.keyId !== "string" || typeof parsed.iv !== "string" || typeof parsed.ciphertext !== "string" || typeof parsed.tag !== "string") throw new Error("[FactorySecretEncryption] Invalid encrypted value.");
+	return parsed;
+}
+/**
+* Creates a versioned AES-256-GCM encryptor. The primary key is used for new
+* writes; previous keys remain decrypt-only until stored values are rotated.
+*/
+function createFactorySecretEncryption(config) {
+	const primaryKey = validateKey(config.primary);
+	const keys = /* @__PURE__ */ new Map([[config.primary.id, primaryKey]]);
+	for (const previous of config.previous ?? []) {
+		if (keys.has(previous.id)) throw new Error(`[FactorySecretEncryption] Duplicate key id "${previous.id}".`);
+		keys.set(previous.id, validateKey(previous));
+	}
+	return {
+		async encrypt(value) {
+			const iv = randomBytes(IV_BYTES);
+			const cipher = createCipheriv(ALGORITHM, primaryKey, iv);
+			const ciphertext = Buffer.concat([cipher.update(JSON.stringify(value), "utf8"), cipher.final()]);
+			const envelope = {
+				keyId: config.primary.id,
+				iv: iv.toString("base64url"),
+				ciphertext: ciphertext.toString("base64url"),
+				tag: cipher.getAuthTag().toString("base64url")
+			};
+			return `${ENVELOPE_PREFIX}${Buffer.from(JSON.stringify(envelope), "utf8").toString("base64url")}`;
+		},
+		async decrypt(value) {
+			if (typeof value !== "string" || !value.startsWith(ENVELOPE_PREFIX)) return {
+				value: structuredClone(value),
+				needsReencryption: true
+			};
+			const envelope = parseEnvelope(value);
+			const key = keys.get(envelope.keyId);
+			if (!key) throw new Error(`[FactorySecretEncryption] Unknown key id "${envelope.keyId}".`);
+			try {
+				const decipher = createDecipheriv(ALGORITHM, key, Buffer.from(envelope.iv, "base64url"));
+				decipher.setAuthTag(Buffer.from(envelope.tag, "base64url"));
+				const plaintext = Buffer.concat([decipher.update(Buffer.from(envelope.ciphertext, "base64url")), decipher.final()]).toString("utf8");
+				return {
+					value: JSON.parse(plaintext),
+					needsReencryption: envelope.keyId !== config.primary.id
+				};
+			} catch {
+				throw new Error("[FactorySecretEncryption] Unable to decrypt encrypted value.");
+			}
+		}
+	};
+}
+/** Explicit plaintext compatibility for local, no-auth Factory development. */
+function createPlaintextFactorySecretEncryption() {
+	return {
+		async encrypt(value) {
+			return JSON.stringify(value);
+		},
+		async decrypt(value) {
+			if (typeof value !== "string") return {
+				value: structuredClone(value),
+				needsReencryption: false
+			};
+			try {
+				return {
+					value: JSON.parse(value),
+					needsReencryption: false
+				};
+			} catch {
+				return {
+					value,
+					needsReencryption: true
+				};
+			}
+		}
+	};
+}
+//#endregion
+export { createFactorySecretEncryption, createPlaintextFactorySecretEncryption };
+
+//# sourceMappingURL=secret-encryption.js.map

package/dist/secret-encryption.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-encryption.js","names":[],"sources":["../src/secret-encryption.ts"],"sourcesContent":["import { createCipheriv, createDecipheriv, randomBytes } from 'node:crypto';\n\nconst ENVELOPE_PREFIX = 'mastra:factory-secret:v1:';\nconst ALGORITHM = 'aes-256-gcm';\nconst IV_BYTES = 12;\n\ninterface SecretEnvelopeV1 {\n  keyId: string;\n  iv: string;\n  ciphertext: string;\n  tag: string;\n}\n\nexport interface DecryptedFactorySecret<T> {\n  value: T;\n  needsReencryption: boolean;\n}\n\n/** Encrypts opaque JSON values before they cross the Factory storage boundary. */\nexport interface FactorySecretEncryption {\n  encrypt<T>(value: T): Promise<string>;\n  decrypt<T>(value: unknown): Promise<DecryptedFactorySecret<T>>;\n}\n\nexport interface FactorySecretEncryptionKey {\n  id: string;\n  key: Uint8Array;\n}\n\nexport interface FactorySecretEncryptionConfig {\n  primary: FactorySecretEncryptionKey;\n  previous?: FactorySecretEncryptionKey[];\n}\n\nfunction validateKey({ id, key }: FactorySecretEncryptionKey): Buffer {\n  if (!id) throw new Error('[FactorySecretEncryption] Key id is required.');\n  const buffer = Buffer.from(key);\n  if (buffer.byteLength !== 32) {\n    throw new Error(`[FactorySecretEncryption] Key \"${id}\" must be exactly 32 bytes.`);\n  }\n  return buffer;\n}\n\nfunction parseEnvelope(value: string): SecretEnvelopeV1 {\n  let parsed: unknown;\n  try {\n    parsed = JSON.parse(Buffer.from(value.slice(ENVELOPE_PREFIX.length), 'base64url').toString('utf8'));\n  } catch {\n    throw new Error('[FactorySecretEncryption] Invalid encrypted value.');\n  }\n\n  if (\n    !parsed ||\n    typeof parsed !== 'object' ||\n    typeof (parsed as SecretEnvelopeV1).keyId !== 'string' ||\n    typeof (parsed as SecretEnvelopeV1).iv !== 'string' ||\n    typeof (parsed as SecretEnvelopeV1).ciphertext !== 'string' ||\n    typeof (parsed as SecretEnvelopeV1).tag !== 'string'\n  ) {\n    throw new Error('[FactorySecretEncryption] Invalid encrypted value.');\n  }\n  return parsed as SecretEnvelopeV1;\n}\n\n/**\n * Creates a versioned AES-256-GCM encryptor. The primary key is used for new\n * writes; previous keys remain decrypt-only until stored values are rotated.\n */\nexport function createFactorySecretEncryption(config: FactorySecretEncryptionConfig): FactorySecretEncryption {\n  const primaryKey = validateKey(config.primary);\n  const keys = new Map<string, Buffer>([[config.primary.id, primaryKey]]);\n  for (const previous of config.previous ?? []) {\n    if (keys.has(previous.id)) throw new Error(`[FactorySecretEncryption] Duplicate key id \"${previous.id}\".`);\n    keys.set(previous.id, validateKey(previous));\n  }\n\n  return {\n    async encrypt<T>(value: T): Promise<string> {\n      const iv = randomBytes(IV_BYTES);\n      const cipher = createCipheriv(ALGORITHM, primaryKey, iv);\n      const ciphertext = Buffer.concat([cipher.update(JSON.stringify(value), 'utf8'), cipher.final()]);\n      const envelope: SecretEnvelopeV1 = {\n        keyId: config.primary.id,\n        iv: iv.toString('base64url'),\n        ciphertext: ciphertext.toString('base64url'),\n        tag: cipher.getAuthTag().toString('base64url'),\n      };\n      return `${ENVELOPE_PREFIX}${Buffer.from(JSON.stringify(envelope), 'utf8').toString('base64url')}`;\n    },\n\n    async decrypt<T>(value: unknown): Promise<DecryptedFactorySecret<T>> {\n      if (typeof value !== 'string' || !value.startsWith(ENVELOPE_PREFIX)) {\n        return { value: structuredClone(value) as T, needsReencryption: true };\n      }\n\n      const envelope = parseEnvelope(value);\n      const key = keys.get(envelope.keyId);\n      if (!key) throw new Error(`[FactorySecretEncryption] Unknown key id \"${envelope.keyId}\".`);\n\n      try {\n        const decipher = createDecipheriv(ALGORITHM, key, Buffer.from(envelope.iv, 'base64url'));\n        decipher.setAuthTag(Buffer.from(envelope.tag, 'base64url'));\n        const plaintext = Buffer.concat([\n          decipher.update(Buffer.from(envelope.ciphertext, 'base64url')),\n          decipher.final(),\n        ]).toString('utf8');\n        return {\n          value: JSON.parse(plaintext) as T,\n          needsReencryption: envelope.keyId !== config.primary.id,\n        };\n      } catch {\n        throw new Error('[FactorySecretEncryption] Unable to decrypt encrypted value.');\n      }\n    },\n  };\n}\n\n/** Explicit plaintext compatibility for local, no-auth Factory development. */\nexport function createPlaintextFactorySecretEncryption(): FactorySecretEncryption {\n  return {\n    async encrypt<T>(value: T): Promise<string> {\n      return JSON.stringify(value);\n    },\n    async decrypt<T>(value: unknown): Promise<DecryptedFactorySecret<T>> {\n      if (typeof value !== 'string') return { value: structuredClone(value) as T, needsReencryption: false };\n      try {\n        return { value: JSON.parse(value) as T, needsReencryption: false };\n      } catch {\n        // Pre-encryption rows stored raw secret strings (e.g. a bare\n        // `custom_providers.api_key`), not JSON. Treat the raw string as the\n        // value and flag it so migration rewrites it in the current format.\n        return { value: value as T, needsReencryption: true };\n      }\n    },\n  };\n}\n"],"mappings":";;AAEA,MAAM,kBAAkB;AACxB,MAAM,YAAY;AAClB,MAAM,WAAW;AA8BjB,SAAS,YAAY,EAAE,IAAI,OAA2C;CACpE,IAAI,CAAC,IAAI,MAAM,IAAI,MAAM,+CAA+C;CACxE,MAAM,SAAS,OAAO,KAAK,GAAG;CAC9B,IAAI,OAAO,eAAe,IACxB,MAAM,IAAI,MAAM,kCAAkC,GAAG,4BAA4B;CAEnF,OAAO;AACT;AAEA,SAAS,cAAc,OAAiC;CACtD,IAAI;CACJ,IAAI;EACF,SAAS,KAAK,MAAM,OAAO,KAAK,MAAM,MAAM,EAAsB,GAAG,WAAW,CAAC,CAAC,SAAS,MAAM,CAAC;CACpG,QAAQ;EACN,MAAM,IAAI,MAAM,oDAAoD;CACtE;CAEA,IACE,CAAC,UACD,OAAO,WAAW,YAClB,OAAQ,OAA4B,UAAU,YAC9C,OAAQ,OAA4B,OAAO,YAC3C,OAAQ,OAA4B,eAAe,YACnD,OAAQ,OAA4B,QAAQ,UAE5C,MAAM,IAAI,MAAM,oDAAoD;CAEtE,OAAO;AACT;;;;;AAMA,SAAgB,8BAA8B,QAAgE;CAC5G,MAAM,aAAa,YAAY,OAAO,OAAO;CAC7C,MAAM,uBAAO,IAAI,IAAoB,CAAC,CAAC,OAAO,QAAQ,IAAI,UAAU,CAAC,CAAC;CACtE,KAAK,MAAM,YAAY,OAAO,YAAY,CAAC,GAAG;EAC5C,IAAI,KAAK,IAAI,SAAS,EAAE,GAAG,MAAM,IAAI,MAAM,+CAA+C,SAAS,GAAG,GAAG;EACzG,KAAK,IAAI,SAAS,IAAI,YAAY,QAAQ,CAAC;CAC7C;CAEA,OAAO;EACL,MAAM,QAAW,OAA2B;GAC1C,MAAM,KAAK,YAAY,QAAQ;GAC/B,MAAM,SAAS,eAAe,WAAW,YAAY,EAAE;GACvD,MAAM,aAAa,OAAO,OAAO,CAAC,OAAO,OAAO,KAAK,UAAU,KAAK,GAAG,MAAM,GAAG,OAAO,MAAM,CAAC,CAAC;GAC/F,MAAM,WAA6B;IACjC,OAAO,OAAO,QAAQ;IACtB,IAAI,GAAG,SAAS,WAAW;IAC3B,YAAY,WAAW,SAAS,WAAW;IAC3C,KAAK,OAAO,WAAW,CAAC,CAAC,SAAS,WAAW;GAC/C;GACA,OAAO,GAAG,kBAAkB,OAAO,KAAK,KAAK,UAAU,QAAQ,GAAG,MAAM,CAAC,CAAC,SAAS,WAAW;EAChG;EAEA,MAAM,QAAW,OAAoD;GACnE,IAAI,OAAO,UAAU,YAAY,CAAC,MAAM,WAAW,eAAe,GAChE,OAAO;IAAE,OAAO,gBAAgB,KAAK;IAAQ,mBAAmB;GAAK;GAGvE,MAAM,WAAW,cAAc,KAAK;GACpC,MAAM,MAAM,KAAK,IAAI,SAAS,KAAK;GACnC,IAAI,CAAC,KAAK,MAAM,IAAI,MAAM,6CAA6C,SAAS,MAAM,GAAG;GAEzF,IAAI;IACF,MAAM,WAAW,iBAAiB,WAAW,KAAK,OAAO,KAAK,SAAS,IAAI,WAAW,CAAC;IACvF,SAAS,WAAW,OAAO,KAAK,SAAS,KAAK,WAAW,CAAC;IAC1D,MAAM,YAAY,OAAO,OAAO,CAC9B,SAAS,OAAO,OAAO,KAAK,SAAS,YAAY,WAAW,CAAC,GAC7D,SAAS,MAAM,CACjB,CAAC,CAAC,CAAC,SAAS,MAAM;IAClB,OAAO;KACL,OAAO,KAAK,MAAM,SAAS;KAC3B,mBAAmB,SAAS,UAAU,OAAO,QAAQ;IACvD;GACF,QAAQ;IACN,MAAM,IAAI,MAAM,8DAA8D;GAChF;EACF;CACF;AACF;;AAGA,SAAgB,yCAAkE;CAChF,OAAO;EACL,MAAM,QAAW,OAA2B;GAC1C,OAAO,KAAK,UAAU,KAAK;EAC7B;EACA,MAAM,QAAW,OAAoD;GACnE,IAAI,OAAO,UAAU,UAAU,OAAO;IAAE,OAAO,gBAAgB,KAAK;IAAQ,mBAAmB;GAAM;GACrG,IAAI;IACF,OAAO;KAAE,OAAO,KAAK,MAAM,KAAK;KAAQ,mBAAmB;IAAM;GACnE,QAAQ;IAIN,OAAO;KAAS;KAAY,mBAAmB;IAAK;GACtD;EACF;CACF;AACF"}