@mastra/factory 0.14.0-alpha.2 → 0.14.0-alpha.4

package/dist/rules/transition-service.js.map

@@ -1 +1 @@
-{"version":3,"file":"transition-service.js","names":["#configVersion","#boards","#storage","#timeoutMs","#onTerminalStage","#terminalCleanupTimeoutMs","#onAccepted","#commitRejection","#commit"],"sources":["../../src/rules/transition-service.ts"],"sourcesContent":["import { randomUUID } from 'node:crypto';\n\nimport { createBoardRegistry } from '../boards/index.js';\nimport type { BoardRegistry } from '../boards/index.js';\nimport { boardTransitionPolicyResultSchema, immutablePolicySnapshot } from '../boards/transition-policy.js';\nimport type { WorkItemRow, WorkItemsStorage } from '../storage/domains/work-items/base.js';\nimport { resolveFactoryStageRules } from './resolve.js';\nimport type {\n  FactoryCommitDecision,\n  FactoryRuleActor,\n  FactoryRuleBoard,\n  FactoryRuleCausalEntry,\n  FactoryRuleRejectionCode,\n  FactoryRuleStage,\n  FactoryTriageType,\n  FactoryStageRuleContext,\n  FactoryTransitionResult,\n} from './types.js';\nimport {\n  externallyAuthoredWorkItem,\n  factoryRuleSourceForWorkItem,\n  isFactoryRuleStage,\n  workItemSource,\n} from './types.js';\nimport {\n  MAX_FACTORY_RULE_CAUSAL_DEPTH,\n  assertFactoryDecisionTarget,\n  validateFactoryRuleDecision,\n  validateFactoryRuleDecisions,\n} from './validation.js';\n\nconst RULE_TIMEOUT_MS = 5_000;\nconst MAX_REJECTION_REASON = 512;\n/** Longest a committed transition waits for terminal resource cleanup. Cleanup\n * reattaches remote sandboxes, so a hung provider call must not leave the\n * already-committed transition request pending; past this bound the cleanup\n * keeps running in the background as pure best-effort. */\nconst TERMINAL_CLEANUP_TIMEOUT_MS = 30_000;\n\nexport interface FactoryTransitionRequest {\n  orgId: string;\n  factoryProjectId: string;\n  workItemId: string;\n  /** Installed board id; the service rejects boards that are not installed. */\n  board: string;\n  stage: FactoryRuleStage;\n  expectedRevision: number;\n  actor: FactoryRuleActor;\n  ingress: { type: 'human' | 'agent' | 'toolResult' | 'github' | 'rule'; identity: string; transitionId?: string };\n  cause: string;\n  causalChain?: readonly FactoryRuleCausalEntry[];\n  /** Internal materialization path: evaluate only the destination onEnter leaf even when already at that stage. */\n  initialEntry?: boolean;\n  /** Re-runs the stage's entry rules when the item already holds that stage, to restart work the entry invalidated. */\n  reenter?: boolean;\n  /** Structured verdict required from a bound triage-agent terminal request. */\n  triageType?: FactoryTriageType;\n}\n\nexport interface FactoryTransitionServiceOptions {\n  configVersion: string;\n  storage: WorkItemsStorage;\n  boards?: BoardRegistry;\n  timeoutMs?: number;\n  /**\n   * Called after a transition commits into a phase the board declares\n   * terminal — the point where the item's sessions stop receiving runs, so\n   * resources they hold (e.g. sandboxes) can be released for reuse. Awaited,\n   * but failures are swallowed: releasing resources must never break or roll\n   * back the committed transition.\n   */\n  onTerminalStage?: (args: {\n    orgId: string;\n    factoryProjectId: string;\n    workItemId: string;\n    stage: FactoryRuleStage;\n    revision: number;\n  }) => Promise<void> | void;\n  /** Upper bound on how long a committed transition waits for\n   * `onTerminalStage` before returning (default 30s). The cleanup continues\n   * in the background past the bound. */\n  terminalCleanupTimeoutMs?: number;\n  /**\n   * Called after a transition first records a person's acceptance of a\n   * non-bug item (see `WorkItemRow.acceptedAt`). Fire-and-forget: failures\n   * are swallowed, the committed transition never depends on it.\n   */\n  onAccepted?: (args: {\n    orgId: string;\n    factoryProjectId: string;\n    workItemId: string;\n    item: WorkItemRow;\n  }) => Promise<void> | void;\n}\n\nfunction rejection(\n  transitionId: string,\n  itemId: string,\n  code: FactoryRuleRejectionCode,\n  reason: string,\n): FactoryTransitionResult {\n  return { status: 'rejected', transitionId, itemId, code, reason: reason.slice(0, MAX_REJECTION_REASON) };\n}\n\nfunction actorId(actor: FactoryRuleActor): string {\n  switch (actor.type) {\n    case 'human':\n    case 'system':\n      return actor.id;\n    case 'agent':\n      return `agent:${actor.bindingId}`;\n    case 'github':\n      return `github:${actor.login}`;\n  }\n}\n\nexport function currentStage(stages: readonly string[]): FactoryRuleStage | undefined {\n  if (stages.length !== 1) return undefined;\n  const stage = stages[0];\n  return isFactoryRuleStage(stage) ? stage : undefined;\n}\n\ninterface TransitionConsentOptions {\n  autonomy?: 'arm' | 'disarm';\n  consentedBy?: string;\n  accept?: boolean;\n  triageType?: FactoryTriageType;\n}\n\n// Entering a resting lane disarms whoever rests it; only a person's move into a working lane arms.\nfunction transitionConsent(working: boolean, humanMove: boolean): 'arm' | 'disarm' | undefined {\n  if (!working) return 'disarm';\n  return humanMove ? 'arm' : undefined;\n}\n\n// An event arriving as data (GitHub, sweeps) never pre-approves the runs its transition queues.\nfunction bearsConsent(actor: FactoryRuleActor): boolean {\n  return actor.type === 'human' || actor.type === 'agent';\n}\n\n// Rides the transition's own revision-checked commit, so a stale or rejected commit flips nothing.\nfunction consentEffect(\n  request: FactoryTransitionRequest,\n  working: boolean,\n  humanMove: boolean,\n): TransitionConsentOptions {\n  const autonomy = transitionConsent(working, humanMove);\n  return bearsConsent(request.actor) ? { autonomy, consentedBy: actorId(request.actor) } : { autonomy };\n}\n\ntype RunStartDecision = Extract<FactoryCommitDecision, { type: 'invokeSkill' | 'sendMessage' }>;\n\nfunction startsRun(decision: FactoryCommitDecision): decision is RunStartDecision {\n  return decision.type === 'invokeSkill' || (decision.type === 'sendMessage' && decision.prepareBinding === true);\n}\n\n// Answering a recorded run start, or the role's own mid-run agent, with a run would start a second one.\nfunction runAlreadyUnderway(request: FactoryTransitionRequest, decision: RunStartDecision): boolean {\n  if (request.cause === 'run_start') return true;\n  return request.actor.type === 'agent' && request.actor.role === decision.role;\n}\n\nfunction stageTransitionMessage(fromStage: FactoryRuleStage, toStage: FactoryRuleStage): string {\n  return `This work was moved from the ${fromStage} stage to the ${toStage} stage.`;\n}\n\nfunction isTriageAgent(actor: FactoryRuleActor): actor is Extract<FactoryRuleActor, { type: 'agent' }> {\n  return actor.type === 'agent' && actor.role === 'triage';\n}\n\nfunction isHumanTransition(request: FactoryTransitionRequest): boolean {\n  return request.actor.type === 'human' && request.ingress.type === 'human';\n}\n\nfunction ruleFailure(error: unknown): { code: FactoryRuleRejectionCode; reason: string } {\n  return {\n    code: 'rule_error',\n    reason: error instanceof Error ? `Factory rule failed: ${error.message}` : 'Factory rule failed.',\n  };\n}\n\nasync function withRuleTimeout<T>(operation: Promise<T>, timeoutMs: number): Promise<T> {\n  let timer: ReturnType<typeof setTimeout> | undefined;\n  const timeout = new Promise<never>((_, reject) => {\n    timer = setTimeout(() => reject(new Error('FACTORY_RULE_TIMEOUT')), timeoutMs);\n  });\n  try {\n    return await Promise.race([operation, timeout]);\n  } finally {\n    if (timer) clearTimeout(timer);\n  }\n}\n\nexport class FactoryTransitionService {\n  readonly #configVersion: string;\n  readonly #boards: BoardRegistry;\n  readonly #storage: WorkItemsStorage;\n  readonly #timeoutMs: number;\n  readonly #onTerminalStage: FactoryTransitionServiceOptions['onTerminalStage'];\n  readonly #terminalCleanupTimeoutMs: number;\n  readonly #onAccepted: FactoryTransitionServiceOptions['onAccepted'];\n\n  constructor(options: FactoryTransitionServiceOptions) {\n    this.#configVersion = options.configVersion;\n    this.#boards = options.boards ?? createBoardRegistry();\n    this.#storage = options.storage;\n    this.#timeoutMs = options.timeoutMs ?? RULE_TIMEOUT_MS;\n    this.#onTerminalStage = options.onTerminalStage;\n    this.#onAccepted = options.onAccepted;\n    this.#terminalCleanupTimeoutMs = options.terminalCleanupTimeoutMs ?? TERMINAL_CLEANUP_TIMEOUT_MS;\n  }\n\n  get configVersion(): string {\n    return this.#configVersion;\n  }\n\n  async transition(request: FactoryTransitionRequest): Promise<FactoryTransitionResult> {\n    const replay = await this.#storage.getTransitionResultByIngress(\n      request.orgId,\n      request.factoryProjectId,\n      request.ingress.identity,\n    );\n    if (replay) return replay as unknown as FactoryTransitionResult;\n\n    const transitionId = request.ingress.transitionId ?? randomUUID();\n    const item = await this.#storage.get({ orgId: request.orgId, id: request.workItemId });\n    if (!item) {\n      return this.#commitRejection(request, transitionId, 'invalid_transition', 'Work item not found.');\n    }\n\n    if (request.causalChain && request.causalChain.length > MAX_FACTORY_RULE_CAUSAL_DEPTH) {\n      return this.#commitRejection(\n        request,\n        transitionId,\n        'causal_depth_exceeded',\n        'Factory rule causal depth exceeded.',\n      );\n    }\n    const itemSource = workItemSource(item.externalSource);\n    const source = factoryRuleSourceForWorkItem(itemSource);\n    const legacyBoard = source === 'pullRequest' ? 'review' : 'work';\n    if (item.board === null && !this.#boards.has(legacyBoard)) {\n      return this.#commitRejection(\n        request,\n        transitionId,\n        'invalid_transition',\n        'This legacy work item has no assigned board. Assign an installed board and phase through the work-item PATCH endpoint before transitioning it.',\n      );\n    }\n    const itemBoard = item.board ?? legacyBoard;\n    if (request.board !== itemBoard) {\n      return this.#commitRejection(\n        request,\n        transitionId,\n        'invalid_transition',\n        `The work item belongs to board \"${itemBoard}\", not \"${request.board}\".`,\n      );\n    }\n    if ((itemBoard === 'review' && source !== 'pullRequest') || (itemBoard === 'work' && source === 'pullRequest')) {\n      return this.#commitRejection(\n        request,\n        transitionId,\n        'invalid_transition',\n        'The work item does not belong to the requested board.',\n      );\n    }\n    const board = this.#boards.get(request.board);\n    if (!board) {\n      return this.#commitRejection(\n        request,\n        transitionId,\n        'invalid_transition',\n        `Board \"${request.board}\" is not installed.`,\n      );\n    }\n    const fromStage = item.stages.length === 1 ? item.stages[0] : undefined;\n    if (!fromStage || !Object.prototype.hasOwnProperty.call(board.phases, fromStage)) {\n      return this.#commitRejection(\n        request,\n        transitionId,\n        'invalid_transition',\n        'The work item does not have one canonical phase on the requested board.',\n      );\n    }\n    if (\n      !Object.prototype.hasOwnProperty.call(board.phases, request.stage) ||\n      !board.allowsTransition(fromStage, request.stage)\n    ) {\n      return this.#commitRejection(\n        request,\n        transitionId,\n        'invalid_transition',\n        `The ${board.title} board does not allow moving from ${fromStage} to ${request.stage}.`,\n      );\n    }\n\n    // The coordinator's own self-move at run start would otherwise inject a second run's kickoff.\n    const humanMove = request.actor.type === 'human' && fromStage !== request.stage && request.cause !== 'run_start';\n    // The board, not the phase name, says whether a seat is engaged on either side of this move.\n    const entersWorking = board.isWorking(request.stage);\n    const seatRole = board.roleForPhase(request.stage);\n\n    const contextBase = {\n      tenant: { orgId: request.orgId, projectId: request.factoryProjectId },\n      actor: request.actor,\n      ingress: { type: request.ingress.type, id: request.ingress.identity },\n      cause: request.cause,\n      causalChain: request.causalChain ?? [],\n      configVersion: this.#configVersion,\n      item: {\n        id: item.id,\n        source: itemSource,\n        sourceKey: item.externalSource\n          ? `${item.externalSource.integrationId}:${item.externalSource.type}:${item.externalSource.externalId}`\n          : null,\n        parentWorkItemId: item.parentWorkItemId,\n        title: item.title,\n        url: item.externalSource?.url ?? null,\n        stages: [...item.stages],\n        acceptedAt: item.acceptedAt,\n        metadata: item.metadata,\n      },\n      board: request.board,\n      itemRevision: item.revision,\n      source,\n      fromStage,\n      toStage: request.stage,\n    } satisfies Omit<FactoryStageRuleContext, 'stage'>;\n\n    let evaluation:\n      | { outcome: 'accepted'; decisions: Record<string, unknown>[]; intents: TransitionConsentOptions }\n      | { outcome: 'rejected'; code: string; reason: string };\n    try {\n      evaluation = await withRuleTimeout(\n        (async () => {\n          const policy = boardTransitionPolicyResultSchema.parse(\n            await board.transitionPolicy?.(\n              immutablePolicySnapshot({\n                ...contextBase,\n                item: { ...contextBase.item, triageType: item.triageType },\n                initialEntry: request.initialEntry ?? false,\n                reenter: request.reenter ?? false,\n                isHumanTransition: isHumanTransition(request),\n                requestedTriageType: request.triageType,\n              }),\n            ),\n          );\n          if (policy?.type === 'reject') {\n            return { outcome: 'rejected' as const, code: policy.code, reason: policy.reason };\n          }\n          if (\n            policy?.triageType !== undefined &&\n            (!isTriageAgent(request.actor) ||\n              policy.triageType !== request.triageType ||\n              (item.triageType !== null && item.triageType !== policy.triageType))\n          ) {\n            throw new Error('Board policy requested an unauthorized classification.');\n          }\n          if (policy?.accept && !isHumanTransition(request)) {\n            throw new Error('Board policy requested unauthorized acceptance.');\n          }\n          // External content can steer a bound agent; board allowance cannot bypass this guard.\n          if (\n            request.actor.type === 'agent' &&\n            !board.isWorking(fromStage) &&\n            entersWorking &&\n            externallyAuthoredWorkItem(item)\n          ) {\n            return {\n              outcome: 'rejected' as const,\n              code: 'approval_required',\n              reason:\n                'This card comes from outside the write-access circle; a person must resume it from the Factory board.',\n            };\n          }\n          const decisions: FactoryCommitDecision[] = [];\n          for (const rule of resolveFactoryStageRules(this.#boards, {\n            board: request.board,\n            source,\n            fromStage,\n            toStage: request.stage,\n            initialEntry: request.initialEntry,\n            reenter: request.reenter,\n          })) {\n            const context: FactoryStageRuleContext = Object.freeze({\n              ...contextBase,\n              stage: rule.phase === 'exit' ? fromStage : request.stage,\n            });\n            const raw = await rule.handler(context);\n            if (raw === undefined) continue;\n            const decision = validateFactoryRuleDecision(raw, context.causalChain.length);\n            if (decision.type === 'reject') {\n              return { outcome: 'rejected' as const, code: decision.code, reason: decision.reason };\n            }\n            assertFactoryDecisionTarget(decision, this.#boards, itemBoard);\n            if (startsRun(decision) && runAlreadyUnderway(request, decision)) continue;\n            decisions.push(decision);\n          }\n          const validated = validateFactoryRuleDecisions(decisions);\n          if (humanMove) {\n            const message = stageTransitionMessage(fromStage, request.stage);\n            const skill = validated.find(decision => decision.type === 'invokeSkill');\n            if (skill) {\n              skill.precedingMessage = message;\n            } else {\n              validated.unshift({\n                type: 'sendMessage',\n                idempotencyKey: `factory-stage:${transitionId}`,\n                message,\n                priority: 'urgent',\n                idleBehavior: 'wake',\n                // Parking a card says stop: no seat is right by construction, so\n                // the notice goes to whichever session is live — or nobody.\n                ...(entersWorking && seatRole !== undefined ? { role: seatRole, prepareBinding: true } : {}),\n              });\n            }\n          }\n          return {\n            outcome: 'accepted' as const,\n            intents: { triageType: policy?.triageType, accept: policy?.accept === true && !item.acceptedAt },\n            decisions: validateFactoryRuleDecisions(validated) as unknown as Record<string, unknown>[],\n          };\n        })(),\n        this.#timeoutMs,\n      );\n    } catch (error) {\n      const failed =\n        error instanceof Error && error.message === 'FACTORY_RULE_TIMEOUT'\n          ? { code: 'timeout' as const, reason: 'Factory rule evaluation timed out.' }\n          : ruleFailure(error);\n      evaluation = { outcome: 'rejected', ...failed };\n    }\n    return this.#commit(\n      request,\n      transitionId,\n      evaluation,\n      evaluation.outcome === 'accepted'\n        ? { ...consentEffect(request, entersWorking, humanMove), ...evaluation.intents }\n        : {},\n    );\n  }\n\n  async #commitRejection(\n    request: FactoryTransitionRequest,\n    transitionId: string,\n    code: FactoryRuleRejectionCode,\n    reason: string,\n  ): Promise<FactoryTransitionResult> {\n    return this.#commit(request, transitionId, { outcome: 'rejected', code, reason });\n  }\n\n  async #commit(\n    request: FactoryTransitionRequest,\n    transitionId: string,\n    evaluation:\n      | { outcome: 'accepted'; decisions: Record<string, unknown>[] }\n      | { outcome: 'rejected'; code: string; reason: string },\n    options: TransitionConsentOptions = {},\n  ): Promise<FactoryTransitionResult> {\n    const committed = await this.#storage.commitTransition({\n      autonomy: options.autonomy,\n      consentedBy: options.consentedBy,\n      ...(options.accept ? { accept: true } : {}),\n      orgId: request.orgId,\n      factoryProjectId: request.factoryProjectId,\n      workItemId: request.workItemId,\n      expectedRevision: request.expectedRevision,\n      destinationStage: request.stage,\n      actorId: actorId(request.actor),\n      ingress: { identity: request.ingress.identity, triggerType: request.ingress.type, transitionId },\n      configVersion: this.#configVersion,\n      causalChain: [...(request.causalChain ?? [])],\n      evaluation,\n      ...(options.triageType ? { triageType: options.triageType } : {}),\n    });\n    if (committed.status === 'missing') {\n      return rejection(transitionId, request.workItemId, 'invalid_transition', 'Work item not found.');\n    }\n    const result = committed.result as unknown as FactoryTransitionResult;\n    if (\n      this.#onAccepted &&\n      options.accept &&\n      committed.status === 'committed' &&\n      result.status === 'accepted' &&\n      committed.item?.acceptedAt\n    ) {\n      const item = committed.item;\n      void Promise.resolve(\n        this.#onAccepted({\n          orgId: request.orgId,\n          factoryProjectId: request.factoryProjectId,\n          workItemId: request.workItemId,\n          item,\n        }),\n      ).catch(error => {\n        console.warn(`[factory] acceptance hook failed for work item ${request.workItemId}:`, error);\n      });\n    }\n    // Only an installed board's declaration releases resources; an unknown board or phase never does.\n    if (\n      this.#onTerminalStage &&\n      result.status === 'accepted' &&\n      this.#boards.get(request.board)?.isTerminal(result.stage) === true\n    ) {\n      let timer: ReturnType<typeof setTimeout> | undefined;\n      try {\n        const cleanup = Promise.resolve(\n          this.#onTerminalStage({\n            orgId: request.orgId,\n            factoryProjectId: request.factoryProjectId,\n            workItemId: request.workItemId,\n            stage: result.stage,\n            revision: result.revision,\n          }),\n        );\n        // A late rejection after the timeout wins the race must not surface\n        // as an unhandled rejection.\n        cleanup.catch(() => {});\n        await Promise.race([\n          cleanup,\n          new Promise<void>(resolve => {\n            timer = setTimeout(resolve, this.#terminalCleanupTimeoutMs);\n          }),\n        ]);\n      } catch {\n        // Resource release is best-effort — never fail a committed transition.\n      } finally {\n        clearTimeout(timer);\n      }\n    }\n    return result;\n  }\n}\n"],"mappings":";;;;;;;;AA+BA,MAAM,kBAAkB;AACxB,MAAM,uBAAuB;;;;;AAK7B,MAAM,8BAA8B;AA0DpC,SAAS,UACP,cACA,QACA,MACA,QACyB;CACzB,OAAO;EAAE,QAAQ;EAAY;EAAc;EAAQ;EAAM,QAAQ,OAAO,MAAM,GAAG,oBAAoB;CAAE;AACzG;AAEA,SAAS,QAAQ,OAAiC;CAChD,QAAQ,MAAM,MAAd;EACE,KAAK;EACL,KAAK,UACH,OAAO,MAAM;EACf,KAAK,SACH,OAAO,SAAS,MAAM;EACxB,KAAK,UACH,OAAO,UAAU,MAAM;CAC3B;AACF;AAEA,SAAgB,aAAa,QAAyD;CACpF,IAAI,OAAO,WAAW,GAAG,OAAO,KAAA;CAChC,MAAM,QAAQ,OAAO;CACrB,OAAO,mBAAmB,KAAK,IAAI,QAAQ,KAAA;AAC7C;AAUA,SAAS,kBAAkB,SAAkB,WAAkD;CAC7F,IAAI,CAAC,SAAS,OAAO;CACrB,OAAO,YAAY,QAAQ,KAAA;AAC7B;AAGA,SAAS,aAAa,OAAkC;CACtD,OAAO,MAAM,SAAS,WAAW,MAAM,SAAS;AAClD;AAGA,SAAS,cACP,SACA,SACA,WAC0B;CAC1B,MAAM,WAAW,kBAAkB,SAAS,SAAS;CACrD,OAAO,aAAa,QAAQ,KAAK,IAAI;EAAE;EAAU,aAAa,QAAQ,QAAQ,KAAK;CAAE,IAAI,EAAE,SAAS;AACtG;AAIA,SAAS,UAAU,UAA+D;CAChF,OAAO,SAAS,SAAS,iBAAkB,SAAS,SAAS,iBAAiB,SAAS,mBAAmB;AAC5G;AAGA,SAAS,mBAAmB,SAAmC,UAAqC;CAClG,IAAI,QAAQ,UAAU,aAAa,OAAO;CAC1C,OAAO,QAAQ,MAAM,SAAS,WAAW,QAAQ,MAAM,SAAS,SAAS;AAC3E;AAEA,SAAS,uBAAuB,WAA6B,SAAmC;CAC9F,OAAO,gCAAgC,UAAU,gBAAgB,QAAQ;AAC3E;AAEA,SAAS,cAAc,OAAgF;CACrG,OAAO,MAAM,SAAS,WAAW,MAAM,SAAS;AAClD;AAEA,SAAS,kBAAkB,SAA4C;CACrE,OAAO,QAAQ,MAAM,SAAS,WAAW,QAAQ,QAAQ,SAAS;AACpE;AAEA,SAAS,YAAY,OAAoE;CACvF,OAAO;EACL,MAAM;EACN,QAAQ,iBAAiB,QAAQ,wBAAwB,MAAM,YAAY;CAC7E;AACF;AAEA,eAAe,gBAAmB,WAAuB,WAA+B;CACtF,IAAI;CACJ,MAAM,UAAU,IAAI,SAAgB,GAAG,WAAW;EAChD,QAAQ,iBAAiB,uBAAO,IAAI,MAAM,sBAAsB,CAAC,GAAG,SAAS;CAC/E,CAAC;CACD,IAAI;EACF,OAAO,MAAM,QAAQ,KAAK,CAAC,WAAW,OAAO,CAAC;CAChD,UAAU;EACR,IAAI,OAAO,aAAa,KAAK;CAC/B;AACF;AAEA,IAAa,2BAAb,MAAsC;CACpC;CACA;CACA;CACA;CACA;CACA;CACA;CAEA,YAAY,SAA0C;EACpD,KAAKA,iBAAiB,QAAQ;EAC9B,KAAKC,UAAU,QAAQ,UAAU,oBAAoB;EACrD,KAAKC,WAAW,QAAQ;EACxB,KAAKC,aAAa,QAAQ,aAAa;EACvC,KAAKC,mBAAmB,QAAQ;EAChC,KAAKE,cAAc,QAAQ;EAC3B,KAAKD,4BAA4B,QAAQ,4BAA4B;CACvE;CAEA,IAAI,gBAAwB;EAC1B,OAAO,KAAKL;CACd;CAEA,MAAM,WAAW,SAAqE;EACpF,MAAM,SAAS,MAAM,KAAKE,SAAS,6BACjC,QAAQ,OACR,QAAQ,kBACR,QAAQ,QAAQ,QAClB;EACA,IAAI,QAAQ,OAAO;EAEnB,MAAM,eAAe,QAAQ,QAAQ,gBAAgB,WAAW;EAChE,MAAM,OAAO,MAAM,KAAKA,SAAS,IAAI;GAAE,OAAO,QAAQ;GAAO,IAAI,QAAQ;EAAW,CAAC;EACrF,IAAI,CAAC,MACH,OAAO,KAAKK,iBAAiB,SAAS,cAAc,sBAAsB,sBAAsB;EAGlG,IAAI,QAAQ,eAAe,QAAQ,YAAY,SAAA,GAC7C,OAAO,KAAKA,iBACV,SACA,cACA,yBACA,qCACF;EAEF,MAAM,aAAa,eAAe,KAAK,cAAc;EACrD,MAAM,SAAS,6BAA6B,UAAU;EACtD,MAAM,cAAc,WAAW,gBAAgB,WAAW;EAC1D,IAAI,KAAK,UAAU,QAAQ,CAAC,KAAKN,QAAQ,IAAI,WAAW,GACtD,OAAO,KAAKM,iBACV,SACA,cACA,sBACA,gJACF;EAEF,MAAM,YAAY,KAAK,SAAS;EAChC,IAAI,QAAQ,UAAU,WACpB,OAAO,KAAKA,iBACV,SACA,cACA,sBACA,mCAAmC,UAAU,UAAU,QAAQ,MAAM,GACvE;EAEF,IAAK,cAAc,YAAY,WAAW,iBAAmB,cAAc,UAAU,WAAW,eAC9F,OAAO,KAAKA,iBACV,SACA,cACA,sBACA,uDACF;EAEF,MAAM,QAAQ,KAAKN,QAAQ,IAAI,QAAQ,KAAK;EAC5C,IAAI,CAAC,OACH,OAAO,KAAKM,iBACV,SACA,cACA,sBACA,UAAU,QAAQ,MAAM,oBAC1B;EAEF,MAAM,YAAY,KAAK,OAAO,WAAW,IAAI,KAAK,OAAO,KAAK,KAAA;EAC9D,IAAI,CAAC,aAAa,CAAC,OAAO,UAAU,eAAe,KAAK,MAAM,QAAQ,SAAS,GAC7E,OAAO,KAAKA,iBACV,SACA,cACA,sBACA,yEACF;EAEF,IACE,CAAC,OAAO,UAAU,eAAe,KAAK,MAAM,QAAQ,QAAQ,KAAK,KACjE,CAAC,MAAM,iBAAiB,WAAW,QAAQ,KAAK,GAEhD,OAAO,KAAKA,iBACV,SACA,cACA,sBACA,OAAO,MAAM,MAAM,oCAAoC,UAAU,MAAM,QAAQ,MAAM,EACvF;EAIF,MAAM,YAAY,QAAQ,MAAM,SAAS,WAAW,cAAc,QAAQ,SAAS,QAAQ,UAAU;EAErG,MAAM,gBAAgB,MAAM,UAAU,QAAQ,KAAK;EACnD,MAAM,WAAW,MAAM,aAAa,QAAQ,KAAK;EAEjD,MAAM,cAAc;GAClB,QAAQ;IAAE,OAAO,QAAQ;IAAO,WAAW,QAAQ;GAAiB;GACpE,OAAO,QAAQ;GACf,SAAS;IAAE,MAAM,QAAQ,QAAQ;IAAM,IAAI,QAAQ,QAAQ;GAAS;GACpE,OAAO,QAAQ;GACf,aAAa,QAAQ,eAAe,CAAC;GACrC,eAAe,KAAKP;GACpB,MAAM;IACJ,IAAI,KAAK;IACT,QAAQ;IACR,WAAW,KAAK,iBACZ,GAAG,KAAK,eAAe,cAAc,GAAG,KAAK,eAAe,KAAK,GAAG,KAAK,eAAe,eACxF;IACJ,kBAAkB,KAAK;IACvB,OAAO,KAAK;IACZ,KAAK,KAAK,gBAAgB,OAAO;IACjC,QAAQ,CAAC,GAAG,KAAK,MAAM;IACvB,YAAY,KAAK;IACjB,UAAU,KAAK;GACjB;GACA,OAAO,QAAQ;GACf,cAAc,KAAK;GACnB;GACA;GACA,SAAS,QAAQ;EACnB;EAEA,IAAI;EAGJ,IAAI;GACF,aAAa,MAAM,iBAChB,YAAY;IACX,MAAM,SAAS,kCAAkC,MAC/C,MAAM,MAAM,mBACV,wBAAwB;KACtB,GAAG;KACH,MAAM;MAAE,GAAG,YAAY;MAAM,YAAY,KAAK;KAAW;KACzD,cAAc,QAAQ,gBAAgB;KACtC,SAAS,QAAQ,WAAW;KAC5B,mBAAmB,kBAAkB,OAAO;KAC5C,qBAAqB,QAAQ;IAC/B,CAAC,CACH,CACF;IACA,IAAI,QAAQ,SAAS,UACnB,OAAO;KAAE,SAAS;KAAqB,MAAM,OAAO;KAAM,QAAQ,OAAO;IAAO;IAElF,IACE,QAAQ,eAAe,KAAA,MACtB,CAAC,cAAc,QAAQ,KAAK,KAC3B,OAAO,eAAe,QAAQ,cAC7B,KAAK,eAAe,QAAQ,KAAK,eAAe,OAAO,aAE1D,MAAM,IAAI,MAAM,wDAAwD;IAE1E,IAAI,QAAQ,UAAU,CAAC,kBAAkB,OAAO,GAC9C,MAAM,IAAI,MAAM,iDAAiD;IAGnE,IACE,QAAQ,MAAM,SAAS,WACvB,CAAC,MAAM,UAAU,SAAS,KAC1B,iBACA,2BAA2B,IAAI,GAE/B,OAAO;KACL,SAAS;KACT,MAAM;KACN,QACE;IACJ;IAEF,MAAM,YAAqC,CAAC;IAC5C,KAAK,MAAM,QAAQ,yBAAyB,KAAKC,SAAS;KACxD,OAAO,QAAQ;KACf;KACA;KACA,SAAS,QAAQ;KACjB,cAAc,QAAQ;KACtB,SAAS,QAAQ;IACnB,CAAC,GAAG;KACF,MAAM,UAAmC,OAAO,OAAO;MACrD,GAAG;MACH,OAAO,KAAK,UAAU,SAAS,YAAY,QAAQ;KACrD,CAAC;KACD,MAAM,MAAM,MAAM,KAAK,QAAQ,OAAO;KACtC,IAAI,QAAQ,KAAA,GAAW;KACvB,MAAM,WAAW,4BAA4B,KAAK,QAAQ,YAAY,MAAM;KAC5E,IAAI,SAAS,SAAS,UACpB,OAAO;MAAE,SAAS;MAAqB,MAAM,SAAS;MAAM,QAAQ,SAAS;KAAO;KAEtF,4BAA4B,UAAU,KAAKA,SAAS,SAAS;KAC7D,IAAI,UAAU,QAAQ,KAAK,mBAAmB,SAAS,QAAQ,GAAG;KAClE,UAAU,KAAK,QAAQ;IACzB;IACA,MAAM,YAAY,6BAA6B,SAAS;IACxD,IAAI,WAAW;KACb,MAAM,UAAU,uBAAuB,WAAW,QAAQ,KAAK;KAC/D,MAAM,QAAQ,UAAU,MAAK,aAAY,SAAS,SAAS,aAAa;KACxE,IAAI,OACF,MAAM,mBAAmB;UAEzB,UAAU,QAAQ;MAChB,MAAM;MACN,gBAAgB,iBAAiB;MACjC;MACA,UAAU;MACV,cAAc;MAGd,GAAI,iBAAiB,aAAa,KAAA,IAAY;OAAE,MAAM;OAAU,gBAAgB;MAAK,IAAI,CAAC;KAC5F,CAAC;IAEL;IACA,OAAO;KACL,SAAS;KACT,SAAS;MAAE,YAAY,QAAQ;MAAY,QAAQ,QAAQ,WAAW,QAAQ,CAAC,KAAK;KAAW;KAC/F,WAAW,6BAA6B,SAAS;IACnD;GACF,EAAA,CAAG,GACH,KAAKE,UACP;EACF,SAAS,OAAO;GAKd,aAAa;IAAE,SAAS;IAAY,GAHlC,iBAAiB,SAAS,MAAM,YAAY,yBACxC;KAAE,MAAM;KAAoB,QAAQ;IAAqC,IACzE,YAAY,KAAK;GACuB;EAChD;EACA,OAAO,KAAKK,QACV,SACA,cACA,YACA,WAAW,YAAY,aACnB;GAAE,GAAG,cAAc,SAAS,eAAe,SAAS;GAAG,GAAG,WAAW;EAAQ,IAC7E,CAAC,CACP;CACF;CAEA,MAAMD,iBACJ,SACA,cACA,MACA,QACkC;EAClC,OAAO,KAAKC,QAAQ,SAAS,cAAc;GAAE,SAAS;GAAY;GAAM;EAAO,CAAC;CAClF;CAEA,MAAMA,QACJ,SACA,cACA,YAGA,UAAoC,CAAC,GACH;EAClC,MAAM,YAAY,MAAM,KAAKN,SAAS,iBAAiB;GACrD,UAAU,QAAQ;GAClB,aAAa,QAAQ;GACrB,GAAI,QAAQ,SAAS,EAAE,QAAQ,KAAK,IAAI,CAAC;GACzC,OAAO,QAAQ;GACf,kBAAkB,QAAQ;GAC1B,YAAY,QAAQ;GACpB,kBAAkB,QAAQ;GAC1B,kBAAkB,QAAQ;GAC1B,SAAS,QAAQ,QAAQ,KAAK;GAC9B,SAAS;IAAE,UAAU,QAAQ,QAAQ;IAAU,aAAa,QAAQ,QAAQ;IAAM;GAAa;GAC/F,eAAe,KAAKF;GACpB,aAAa,CAAC,GAAI,QAAQ,eAAe,CAAC,CAAE;GAC5C;GACA,GAAI,QAAQ,aAAa,EAAE,YAAY,QAAQ,WAAW,IAAI,CAAC;EACjE,CAAC;EACD,IAAI,UAAU,WAAW,WACvB,OAAO,UAAU,cAAc,QAAQ,YAAY,sBAAsB,sBAAsB;EAEjG,MAAM,SAAS,UAAU;EACzB,IACE,KAAKM,eACL,QAAQ,UACR,UAAU,WAAW,eACrB,OAAO,WAAW,cAClB,UAAU,MAAM,YAChB;GACA,MAAM,OAAO,UAAU;GACvB,QAAa,QACX,KAAKA,YAAY;IACf,OAAO,QAAQ;IACf,kBAAkB,QAAQ;IAC1B,YAAY,QAAQ;IACpB;GACF,CAAC,CACH,CAAC,CAAC,OAAM,UAAS;IACf,QAAQ,KAAK,kDAAkD,QAAQ,WAAW,IAAI,KAAK;GAC7F,CAAC;EACH;EAEA,IACE,KAAKF,oBACL,OAAO,WAAW,cAClB,KAAKH,QAAQ,IAAI,QAAQ,KAAK,CAAC,EAAE,WAAW,OAAO,KAAK,MAAM,MAC9D;GACA,IAAI;GACJ,IAAI;IACF,MAAM,UAAU,QAAQ,QACtB,KAAKG,iBAAiB;KACpB,OAAO,QAAQ;KACf,kBAAkB,QAAQ;KAC1B,YAAY,QAAQ;KACpB,OAAO,OAAO;KACd,UAAU,OAAO;IACnB,CAAC,CACH;IAGA,QAAQ,YAAY,CAAC,CAAC;IACtB,MAAM,QAAQ,KAAK,CACjB,SACA,IAAI,SAAc,YAAW;KAC3B,QAAQ,WAAW,SAAS,KAAKC,yBAAyB;IAC5D,CAAC,CACH,CAAC;GACH,QAAQ,CAER,UAAU;IACR,aAAa,KAAK;GACpB;EACF;EACA,OAAO;CACT;AACF"}
+{"version":3,"file":"transition-service.js","names":["#configVersion","#boards","#storage","#timeoutMs","#onTerminalStage","#terminalCleanupTimeoutMs","#onAccepted","#audit","#commitRejection","#recordTransition","#evaluateAndCommit","#commit"],"sources":["../../src/rules/transition-service.ts"],"sourcesContent":["import { randomUUID } from 'node:crypto';\n\nimport { createBoardRegistry } from '../boards/index.js';\nimport type { BoardRegistry } from '../boards/index.js';\nimport { boardTransitionPolicyResultSchema, immutablePolicySnapshot } from '../boards/transition-policy.js';\nimport type { AuditActorProfileInput, AuditActorType, AuditContext } from '../storage/domains/audit/base.js';\nimport type { AuditRecorder } from '../storage/domains/audit/domain.js';\nimport { isAgentActor } from '../storage/domains/work-items/base.js';\nimport type { WorkItemRow, WorkItemsStorage } from '../storage/domains/work-items/base.js';\nimport { resolveFactoryStageRules } from './resolve.js';\nimport type {\n  FactoryCommitDecision,\n  FactoryRuleActor,\n  FactoryRuleBoard,\n  FactoryRuleCausalEntry,\n  FactoryRuleRejectionCode,\n  FactoryRuleStage,\n  FactoryTriageType,\n  FactoryStageRuleContext,\n  FactoryTransitionResult,\n} from './types.js';\nimport {\n  externallyAuthoredWorkItem,\n  factoryRuleSourceForWorkItem,\n  isFactoryRuleStage,\n  workItemSource,\n} from './types.js';\nimport {\n  MAX_FACTORY_RULE_CAUSAL_DEPTH,\n  assertFactoryDecisionTarget,\n  validateFactoryRuleDecision,\n  validateFactoryRuleDecisions,\n} from './validation.js';\n\nconst RULE_TIMEOUT_MS = 5_000;\nconst MAX_REJECTION_REASON = 512;\n/** Longest a committed transition waits for terminal resource cleanup. Cleanup\n * reattaches remote sandboxes, so a hung provider call must not leave the\n * already-committed transition request pending; past this bound the cleanup\n * keeps running in the background as pure best-effort. */\nconst TERMINAL_CLEANUP_TIMEOUT_MS = 30_000;\n\nexport interface FactoryTransitionRequest {\n  orgId: string;\n  factoryProjectId: string;\n  workItemId: string;\n  /** Installed board id; the service rejects boards that are not installed. */\n  board: string;\n  stage: FactoryRuleStage;\n  expectedRevision: number;\n  actor: FactoryRuleActor;\n  actorProfile?: AuditActorProfileInput;\n  /** Where a browser request came from; rules and agents carry none. */\n  context?: AuditContext;\n  ingress: { type: 'human' | 'agent' | 'toolResult' | 'github' | 'rule'; identity: string; transitionId?: string };\n  cause: string;\n  causalChain?: readonly FactoryRuleCausalEntry[];\n  /** Internal materialization path: evaluate only the destination onEnter leaf even when already at that stage. */\n  initialEntry?: boolean;\n  /** Re-runs the stage's entry rules when the item already holds that stage, to restart work the entry invalidated. */\n  reenter?: boolean;\n  /** Structured verdict required from a bound triage-agent terminal request. */\n  triageType?: FactoryTriageType;\n}\n\nexport interface FactoryTransitionServiceOptions {\n  configVersion: string;\n  storage: WorkItemsStorage;\n  boards?: BoardRegistry;\n  /** Every commit, accepted or rejected, lands here as `stage_moved` / `transition_rejected` under the request's actor. */\n  audit?: AuditRecorder;\n  timeoutMs?: number;\n  /**\n   * Called after a transition commits into a phase the board declares\n   * terminal — the point where the item's sessions stop receiving runs, so\n   * resources they hold (e.g. sandboxes) can be released for reuse. Awaited,\n   * but failures are swallowed: releasing resources must never break or roll\n   * back the committed transition.\n   */\n  onTerminalStage?: (args: {\n    orgId: string;\n    factoryProjectId: string;\n    workItemId: string;\n    stage: FactoryRuleStage;\n    revision: number;\n  }) => Promise<void> | void;\n  /** Upper bound on how long a committed transition waits for\n   * `onTerminalStage` before returning (default 30s). The cleanup continues\n   * in the background past the bound. */\n  terminalCleanupTimeoutMs?: number;\n  /**\n   * Called after a transition first records a person's acceptance of a\n   * non-bug item (see `WorkItemRow.acceptedAt`). Fire-and-forget: failures\n   * are swallowed, the committed transition never depends on it.\n   */\n  onAccepted?: (args: {\n    orgId: string;\n    factoryProjectId: string;\n    workItemId: string;\n    item: WorkItemRow;\n  }) => Promise<void> | void;\n}\n\nfunction rejection(\n  transitionId: string,\n  itemId: string,\n  code: FactoryRuleRejectionCode,\n  reason: string,\n): FactoryTransitionResult {\n  return { status: 'rejected', transitionId, itemId, code, reason: reason.slice(0, MAX_REJECTION_REASON) };\n}\n\nfunction actorId(actor: FactoryRuleActor): string {\n  switch (actor.type) {\n    case 'human':\n    case 'system':\n      return actor.id;\n    case 'agent':\n      return `agent:${actor.bindingId}`;\n    case 'github':\n      return `github:${actor.login}`;\n  }\n}\n\n// The dispatcher executes an agent-approved decision as a human actor so its consent carries; the trail still names the agent.\nexport function auditActorOf(actor: FactoryRuleActor): { actorId: string; actorType: AuditActorType } {\n  const id = actorId(actor);\n  switch (actor.type) {\n    case 'github':\n      return { actorId: id, actorType: 'human' };\n    case 'human':\n      return { actorId: id, actorType: isAgentActor(id) ? 'agent' : 'human' };\n    default:\n      return { actorId: id, actorType: actor.type };\n  }\n}\n\nexport function currentStage(stages: readonly string[]): FactoryRuleStage | undefined {\n  if (stages.length !== 1) return undefined;\n  const stage = stages[0];\n  return isFactoryRuleStage(stage) ? stage : undefined;\n}\n\ninterface TransitionConsentOptions {\n  autonomy?: 'arm' | 'disarm';\n  consentedBy?: string;\n  accept?: boolean;\n  triageType?: FactoryTriageType;\n}\n\n// Entering a resting lane disarms whoever rests it; only a person's move into a working lane arms.\nfunction transitionConsent(working: boolean, humanMove: boolean): 'arm' | 'disarm' | undefined {\n  if (!working) return 'disarm';\n  return humanMove ? 'arm' : undefined;\n}\n\n// An event arriving as data (GitHub, sweeps) never pre-approves the runs its transition queues.\nfunction bearsConsent(actor: FactoryRuleActor): boolean {\n  return actor.type === 'human' || actor.type === 'agent';\n}\n\n// Rides the transition's own revision-checked commit, so a stale or rejected commit flips nothing.\nfunction consentEffect(\n  request: FactoryTransitionRequest,\n  working: boolean,\n  humanMove: boolean,\n): TransitionConsentOptions {\n  const autonomy = transitionConsent(working, humanMove);\n  return bearsConsent(request.actor) ? { autonomy, consentedBy: actorId(request.actor) } : { autonomy };\n}\n\ntype RunStartDecision = Extract<FactoryCommitDecision, { type: 'invokeSkill' | 'sendMessage' }>;\n\nfunction startsRun(decision: FactoryCommitDecision): decision is RunStartDecision {\n  return decision.type === 'invokeSkill' || (decision.type === 'sendMessage' && decision.prepareBinding === true);\n}\n\n// Answering a recorded run start, or the role's own mid-run agent, with a run would start a second one.\nfunction runAlreadyUnderway(request: FactoryTransitionRequest, decision: RunStartDecision): boolean {\n  if (request.cause === 'run_start') return true;\n  return request.actor.type === 'agent' && request.actor.role === decision.role;\n}\n\nfunction stageTransitionMessage(fromStage: FactoryRuleStage, toStage: FactoryRuleStage): string {\n  return `This work was moved from the ${fromStage} stage to the ${toStage} stage.`;\n}\n\nfunction isTriageAgent(actor: FactoryRuleActor): actor is Extract<FactoryRuleActor, { type: 'agent' }> {\n  return actor.type === 'agent' && actor.role === 'triage';\n}\n\nfunction isHumanTransition(request: FactoryTransitionRequest): boolean {\n  return request.actor.type === 'human' && request.ingress.type === 'human';\n}\n\nfunction ruleFailure(error: unknown): { code: FactoryRuleRejectionCode; reason: string } {\n  return {\n    code: 'rule_error',\n    reason: error instanceof Error ? `Factory rule failed: ${error.message}` : 'Factory rule failed.',\n  };\n}\n\nasync function withRuleTimeout<T>(operation: Promise<T>, timeoutMs: number): Promise<T> {\n  let timer: ReturnType<typeof setTimeout> | undefined;\n  const timeout = new Promise<never>((_, reject) => {\n    timer = setTimeout(() => reject(new Error('FACTORY_RULE_TIMEOUT')), timeoutMs);\n  });\n  try {\n    return await Promise.race([operation, timeout]);\n  } finally {\n    if (timer) clearTimeout(timer);\n  }\n}\n\nexport class FactoryTransitionService {\n  readonly #configVersion: string;\n  readonly #boards: BoardRegistry;\n  readonly #storage: WorkItemsStorage;\n  readonly #timeoutMs: number;\n  readonly #onTerminalStage: FactoryTransitionServiceOptions['onTerminalStage'];\n  readonly #terminalCleanupTimeoutMs: number;\n  readonly #onAccepted: FactoryTransitionServiceOptions['onAccepted'];\n  readonly #audit: AuditRecorder | undefined;\n\n  constructor(options: FactoryTransitionServiceOptions) {\n    this.#configVersion = options.configVersion;\n    this.#boards = options.boards ?? createBoardRegistry();\n    this.#storage = options.storage;\n    this.#audit = options.audit;\n    this.#timeoutMs = options.timeoutMs ?? RULE_TIMEOUT_MS;\n    this.#onTerminalStage = options.onTerminalStage;\n    this.#onAccepted = options.onAccepted;\n    this.#terminalCleanupTimeoutMs = options.terminalCleanupTimeoutMs ?? TERMINAL_CLEANUP_TIMEOUT_MS;\n  }\n\n  get configVersion(): string {\n    return this.#configVersion;\n  }\n\n  async transition(request: FactoryTransitionRequest): Promise<FactoryTransitionResult> {\n    const replay = await this.#storage.getTransitionResultByIngress(\n      request.orgId,\n      request.factoryProjectId,\n      request.ingress.identity,\n    );\n    if (replay) return replay as unknown as FactoryTransitionResult;\n\n    const transitionId = request.ingress.transitionId ?? randomUUID();\n    const item = await this.#storage.get({ orgId: request.orgId, id: request.workItemId });\n    if (!item) {\n      const rejection = await this.#commitRejection(\n        request,\n        transitionId,\n        'invalid_transition',\n        'Work item not found.',\n      );\n      await this.#recordTransition(request, undefined, rejection);\n      return rejection;\n    }\n    const result = await this.#evaluateAndCommit(request, transitionId, item);\n    await this.#recordTransition(request, item, result);\n    return result;\n  }\n\n  /** A rejection can outlive its work item: the row still names the id the caller asked for. */\n  async #recordTransition(\n    request: FactoryTransitionRequest,\n    item: WorkItemRow | undefined,\n    result: FactoryTransitionResult,\n  ): Promise<void> {\n    if (!this.#audit) return;\n    const from = item ? currentStage(item.stages) : undefined;\n    if (result.status === 'accepted' && result.stage === from && !request.reenter) return;\n    const outcome =\n      result.status === 'accepted'\n        ? { action: 'factory.work_item.stage_moved' as const, to: result.stage, revision: result.revision }\n        : {\n            action: 'factory.work_item.transition_rejected' as const,\n            to: request.stage,\n            code: result.code,\n            reason: result.reason,\n          };\n    const { action, ...detail } = outcome;\n    await this.#audit\n      .record({\n        orgId: request.orgId,\n        factoryProjectId: request.factoryProjectId,\n        ...auditActorOf(request.actor),\n        actorProfile: request.actorProfile,\n        ...(request.context ? { context: request.context } : {}),\n        action,\n        idempotencyKey: result.transitionId,\n        targets: [{ type: 'work_item', id: item?.id ?? request.workItemId, ...(item ? { name: item.title } : {}) }],\n        metadata: {\n          transitionId: result.transitionId,\n          ingressType: request.ingress.type,\n          cause: request.cause,\n          configVersion: this.#configVersion,\n          ...(from ? { from } : {}),\n          ...(request.reenter ? { reenter: true } : {}),\n          ...detail,\n        },\n      })\n      .catch(error => {\n        console.warn(`[factory] audit failed for transition ${result.transitionId}:`, error);\n      });\n  }\n\n  async #evaluateAndCommit(\n    request: FactoryTransitionRequest,\n    transitionId: string,\n    item: WorkItemRow,\n  ): Promise<FactoryTransitionResult> {\n    if (request.causalChain && request.causalChain.length > MAX_FACTORY_RULE_CAUSAL_DEPTH) {\n      return this.#commitRejection(\n        request,\n        transitionId,\n        'causal_depth_exceeded',\n        'Factory rule causal depth exceeded.',\n      );\n    }\n    const itemSource = workItemSource(item.externalSource);\n    const source = factoryRuleSourceForWorkItem(itemSource);\n    const legacyBoard = source === 'pullRequest' ? 'review' : 'work';\n    if (item.board === null && !this.#boards.has(legacyBoard)) {\n      return this.#commitRejection(\n        request,\n        transitionId,\n        'invalid_transition',\n        'This legacy work item has no assigned board. Assign an installed board and phase through the work-item PATCH endpoint before transitioning it.',\n      );\n    }\n    const itemBoard = item.board ?? legacyBoard;\n    if (request.board !== itemBoard) {\n      return this.#commitRejection(\n        request,\n        transitionId,\n        'invalid_transition',\n        `The work item belongs to board \"${itemBoard}\", not \"${request.board}\".`,\n      );\n    }\n    if ((itemBoard === 'review' && source !== 'pullRequest') || (itemBoard === 'work' && source === 'pullRequest')) {\n      return this.#commitRejection(\n        request,\n        transitionId,\n        'invalid_transition',\n        'The work item does not belong to the requested board.',\n      );\n    }\n    const board = this.#boards.get(request.board);\n    if (!board) {\n      return this.#commitRejection(\n        request,\n        transitionId,\n        'invalid_transition',\n        `Board \"${request.board}\" is not installed.`,\n      );\n    }\n    const fromStage = item.stages.length === 1 ? item.stages[0] : undefined;\n    if (!fromStage || !Object.prototype.hasOwnProperty.call(board.phases, fromStage)) {\n      return this.#commitRejection(\n        request,\n        transitionId,\n        'invalid_transition',\n        'The work item does not have one canonical phase on the requested board.',\n      );\n    }\n    if (\n      !Object.prototype.hasOwnProperty.call(board.phases, request.stage) ||\n      !board.allowsTransition(fromStage, request.stage)\n    ) {\n      return this.#commitRejection(\n        request,\n        transitionId,\n        'invalid_transition',\n        `The ${board.title} board does not allow moving from ${fromStage} to ${request.stage}.`,\n      );\n    }\n\n    // The coordinator's own self-move at run start would otherwise inject a second run's kickoff.\n    const humanMove = request.actor.type === 'human' && fromStage !== request.stage && request.cause !== 'run_start';\n    // The board, not the phase name, says whether a seat is engaged on either side of this move.\n    const entersWorking = board.isWorking(request.stage);\n    const seatRole = board.roleForPhase(request.stage);\n\n    const contextBase = {\n      tenant: { orgId: request.orgId, projectId: request.factoryProjectId },\n      actor: request.actor,\n      ingress: { type: request.ingress.type, id: request.ingress.identity },\n      cause: request.cause,\n      causalChain: request.causalChain ?? [],\n      configVersion: this.#configVersion,\n      item: {\n        id: item.id,\n        source: itemSource,\n        sourceKey: item.externalSource\n          ? `${item.externalSource.integrationId}:${item.externalSource.type}:${item.externalSource.externalId}`\n          : null,\n        parentWorkItemId: item.parentWorkItemId,\n        title: item.title,\n        url: item.externalSource?.url ?? null,\n        stages: [...item.stages],\n        acceptedAt: item.acceptedAt,\n        metadata: item.metadata,\n      },\n      board: request.board,\n      itemRevision: item.revision,\n      source,\n      fromStage,\n      toStage: request.stage,\n    } satisfies Omit<FactoryStageRuleContext, 'stage'>;\n\n    let evaluation:\n      | { outcome: 'accepted'; decisions: Record<string, unknown>[]; intents: TransitionConsentOptions }\n      | { outcome: 'rejected'; code: string; reason: string };\n    try {\n      evaluation = await withRuleTimeout(\n        (async () => {\n          const policy = boardTransitionPolicyResultSchema.parse(\n            await board.transitionPolicy?.(\n              immutablePolicySnapshot({\n                ...contextBase,\n                item: { ...contextBase.item, triageType: item.triageType },\n                initialEntry: request.initialEntry ?? false,\n                reenter: request.reenter ?? false,\n                isHumanTransition: isHumanTransition(request),\n                requestedTriageType: request.triageType,\n              }),\n            ),\n          );\n          if (policy?.type === 'reject') {\n            return { outcome: 'rejected' as const, code: policy.code, reason: policy.reason };\n          }\n          if (\n            policy?.triageType !== undefined &&\n            (!isTriageAgent(request.actor) ||\n              policy.triageType !== request.triageType ||\n              (item.triageType !== null && item.triageType !== policy.triageType))\n          ) {\n            throw new Error('Board policy requested an unauthorized classification.');\n          }\n          if (policy?.accept && !isHumanTransition(request)) {\n            throw new Error('Board policy requested unauthorized acceptance.');\n          }\n          // External content can steer a bound agent; board allowance cannot bypass this guard.\n          if (\n            request.actor.type === 'agent' &&\n            !board.isWorking(fromStage) &&\n            entersWorking &&\n            externallyAuthoredWorkItem(item)\n          ) {\n            return {\n              outcome: 'rejected' as const,\n              code: 'approval_required',\n              reason:\n                'This card comes from outside the write-access circle; a person must resume it from the Factory board.',\n            };\n          }\n          const decisions: FactoryCommitDecision[] = [];\n          for (const rule of resolveFactoryStageRules(this.#boards, {\n            board: request.board,\n            source,\n            fromStage,\n            toStage: request.stage,\n            initialEntry: request.initialEntry,\n            reenter: request.reenter,\n          })) {\n            const context: FactoryStageRuleContext = Object.freeze({\n              ...contextBase,\n              stage: rule.phase === 'exit' ? fromStage : request.stage,\n            });\n            const raw = await rule.handler(context);\n            if (raw === undefined) continue;\n            const decision = validateFactoryRuleDecision(raw, context.causalChain.length);\n            if (decision.type === 'reject') {\n              return { outcome: 'rejected' as const, code: decision.code, reason: decision.reason };\n            }\n            assertFactoryDecisionTarget(decision, this.#boards, itemBoard);\n            if (startsRun(decision) && runAlreadyUnderway(request, decision)) continue;\n            decisions.push(decision);\n          }\n          const validated = validateFactoryRuleDecisions(decisions);\n          if (humanMove) {\n            const message = stageTransitionMessage(fromStage, request.stage);\n            const skill = validated.find(decision => decision.type === 'invokeSkill');\n            if (skill) {\n              skill.precedingMessage = message;\n            } else {\n              validated.unshift({\n                type: 'sendMessage',\n                idempotencyKey: `factory-stage:${transitionId}`,\n                message,\n                priority: 'urgent',\n                idleBehavior: 'wake',\n                // Parking a card says stop: no seat is right by construction, so\n                // the notice goes to whichever session is live — or nobody.\n                ...(entersWorking && seatRole !== undefined ? { role: seatRole, prepareBinding: true } : {}),\n              });\n            }\n          }\n          return {\n            outcome: 'accepted' as const,\n            intents: { triageType: policy?.triageType, accept: policy?.accept === true && !item.acceptedAt },\n            decisions: validateFactoryRuleDecisions(validated) as unknown as Record<string, unknown>[],\n          };\n        })(),\n        this.#timeoutMs,\n      );\n    } catch (error) {\n      const failed =\n        error instanceof Error && error.message === 'FACTORY_RULE_TIMEOUT'\n          ? { code: 'timeout' as const, reason: 'Factory rule evaluation timed out.' }\n          : ruleFailure(error);\n      evaluation = { outcome: 'rejected', ...failed };\n    }\n    return this.#commit(\n      request,\n      transitionId,\n      evaluation,\n      evaluation.outcome === 'accepted'\n        ? { ...consentEffect(request, entersWorking, humanMove), ...evaluation.intents }\n        : {},\n    );\n  }\n\n  async #commitRejection(\n    request: FactoryTransitionRequest,\n    transitionId: string,\n    code: FactoryRuleRejectionCode,\n    reason: string,\n  ): Promise<FactoryTransitionResult> {\n    return this.#commit(request, transitionId, { outcome: 'rejected', code, reason });\n  }\n\n  async #commit(\n    request: FactoryTransitionRequest,\n    transitionId: string,\n    evaluation:\n      | { outcome: 'accepted'; decisions: Record<string, unknown>[] }\n      | { outcome: 'rejected'; code: string; reason: string },\n    options: TransitionConsentOptions = {},\n  ): Promise<FactoryTransitionResult> {\n    const committed = await this.#storage.commitTransition({\n      autonomy: options.autonomy,\n      consentedBy: options.consentedBy,\n      ...(options.accept ? { accept: true } : {}),\n      orgId: request.orgId,\n      factoryProjectId: request.factoryProjectId,\n      workItemId: request.workItemId,\n      expectedRevision: request.expectedRevision,\n      destinationStage: request.stage,\n      actorId: actorId(request.actor),\n      ingress: { identity: request.ingress.identity, triggerType: request.ingress.type, transitionId },\n      configVersion: this.#configVersion,\n      causalChain: [...(request.causalChain ?? [])],\n      evaluation,\n      ...(options.triageType ? { triageType: options.triageType } : {}),\n    });\n    if (committed.status === 'missing') {\n      return rejection(transitionId, request.workItemId, 'invalid_transition', 'Work item not found.');\n    }\n    const result = committed.result as unknown as FactoryTransitionResult;\n    if (\n      this.#onAccepted &&\n      options.accept &&\n      committed.status === 'committed' &&\n      result.status === 'accepted' &&\n      committed.item?.acceptedAt\n    ) {\n      const item = committed.item;\n      void Promise.resolve(\n        this.#onAccepted({\n          orgId: request.orgId,\n          factoryProjectId: request.factoryProjectId,\n          workItemId: request.workItemId,\n          item,\n        }),\n      ).catch(error => {\n        console.warn(`[factory] acceptance hook failed for work item ${request.workItemId}:`, error);\n      });\n    }\n    // Only an installed board's declaration releases resources; an unknown board or phase never does.\n    if (\n      this.#onTerminalStage &&\n      result.status === 'accepted' &&\n      this.#boards.get(request.board)?.isTerminal(result.stage) === true\n    ) {\n      let timer: ReturnType<typeof setTimeout> | undefined;\n      try {\n        const cleanup = Promise.resolve(\n          this.#onTerminalStage({\n            orgId: request.orgId,\n            factoryProjectId: request.factoryProjectId,\n            workItemId: request.workItemId,\n            stage: result.stage,\n            revision: result.revision,\n          }),\n        );\n        // A late rejection after the timeout wins the race must not surface\n        // as an unhandled rejection.\n        cleanup.catch(() => {});\n        await Promise.race([\n          cleanup,\n          new Promise<void>(resolve => {\n            timer = setTimeout(resolve, this.#terminalCleanupTimeoutMs);\n          }),\n        ]);\n      } catch {\n        // Resource release is best-effort — never fail a committed transition.\n      } finally {\n        clearTimeout(timer);\n      }\n    }\n    return result;\n  }\n}\n"],"mappings":";;;;;;;;;AAkCA,MAAM,kBAAkB;AACxB,MAAM,uBAAuB;;;;;AAK7B,MAAM,8BAA8B;AA+DpC,SAAS,UACP,cACA,QACA,MACA,QACyB;CACzB,OAAO;EAAE,QAAQ;EAAY;EAAc;EAAQ;EAAM,QAAQ,OAAO,MAAM,GAAG,oBAAoB;CAAE;AACzG;AAEA,SAAS,QAAQ,OAAiC;CAChD,QAAQ,MAAM,MAAd;EACE,KAAK;EACL,KAAK,UACH,OAAO,MAAM;EACf,KAAK,SACH,OAAO,SAAS,MAAM;EACxB,KAAK,UACH,OAAO,UAAU,MAAM;CAC3B;AACF;AAGA,SAAgB,aAAa,OAAyE;CACpG,MAAM,KAAK,QAAQ,KAAK;CACxB,QAAQ,MAAM,MAAd;EACE,KAAK,UACH,OAAO;GAAE,SAAS;GAAI,WAAW;EAAQ;EAC3C,KAAK,SACH,OAAO;GAAE,SAAS;GAAI,WAAW,aAAa,EAAE,IAAI,UAAU;EAAQ;EACxE,SACE,OAAO;GAAE,SAAS;GAAI,WAAW,MAAM;EAAK;CAChD;AACF;AAEA,SAAgB,aAAa,QAAyD;CACpF,IAAI,OAAO,WAAW,GAAG,OAAO,KAAA;CAChC,MAAM,QAAQ,OAAO;CACrB,OAAO,mBAAmB,KAAK,IAAI,QAAQ,KAAA;AAC7C;AAUA,SAAS,kBAAkB,SAAkB,WAAkD;CAC7F,IAAI,CAAC,SAAS,OAAO;CACrB,OAAO,YAAY,QAAQ,KAAA;AAC7B;AAGA,SAAS,aAAa,OAAkC;CACtD,OAAO,MAAM,SAAS,WAAW,MAAM,SAAS;AAClD;AAGA,SAAS,cACP,SACA,SACA,WAC0B;CAC1B,MAAM,WAAW,kBAAkB,SAAS,SAAS;CACrD,OAAO,aAAa,QAAQ,KAAK,IAAI;EAAE;EAAU,aAAa,QAAQ,QAAQ,KAAK;CAAE,IAAI,EAAE,SAAS;AACtG;AAIA,SAAS,UAAU,UAA+D;CAChF,OAAO,SAAS,SAAS,iBAAkB,SAAS,SAAS,iBAAiB,SAAS,mBAAmB;AAC5G;AAGA,SAAS,mBAAmB,SAAmC,UAAqC;CAClG,IAAI,QAAQ,UAAU,aAAa,OAAO;CAC1C,OAAO,QAAQ,MAAM,SAAS,WAAW,QAAQ,MAAM,SAAS,SAAS;AAC3E;AAEA,SAAS,uBAAuB,WAA6B,SAAmC;CAC9F,OAAO,gCAAgC,UAAU,gBAAgB,QAAQ;AAC3E;AAEA,SAAS,cAAc,OAAgF;CACrG,OAAO,MAAM,SAAS,WAAW,MAAM,SAAS;AAClD;AAEA,SAAS,kBAAkB,SAA4C;CACrE,OAAO,QAAQ,MAAM,SAAS,WAAW,QAAQ,QAAQ,SAAS;AACpE;AAEA,SAAS,YAAY,OAAoE;CACvF,OAAO;EACL,MAAM;EACN,QAAQ,iBAAiB,QAAQ,wBAAwB,MAAM,YAAY;CAC7E;AACF;AAEA,eAAe,gBAAmB,WAAuB,WAA+B;CACtF,IAAI;CACJ,MAAM,UAAU,IAAI,SAAgB,GAAG,WAAW;EAChD,QAAQ,iBAAiB,uBAAO,IAAI,MAAM,sBAAsB,CAAC,GAAG,SAAS;CAC/E,CAAC;CACD,IAAI;EACF,OAAO,MAAM,QAAQ,KAAK,CAAC,WAAW,OAAO,CAAC;CAChD,UAAU;EACR,IAAI,OAAO,aAAa,KAAK;CAC/B;AACF;AAEA,IAAa,2BAAb,MAAsC;CACpC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CAEA,YAAY,SAA0C;EACpD,KAAKA,iBAAiB,QAAQ;EAC9B,KAAKC,UAAU,QAAQ,UAAU,oBAAoB;EACrD,KAAKC,WAAW,QAAQ;EACxB,KAAKK,SAAS,QAAQ;EACtB,KAAKJ,aAAa,QAAQ,aAAa;EACvC,KAAKC,mBAAmB,QAAQ;EAChC,KAAKE,cAAc,QAAQ;EAC3B,KAAKD,4BAA4B,QAAQ,4BAA4B;CACvE;CAEA,IAAI,gBAAwB;EAC1B,OAAO,KAAKL;CACd;CAEA,MAAM,WAAW,SAAqE;EACpF,MAAM,SAAS,MAAM,KAAKE,SAAS,6BACjC,QAAQ,OACR,QAAQ,kBACR,QAAQ,QAAQ,QAClB;EACA,IAAI,QAAQ,OAAO;EAEnB,MAAM,eAAe,QAAQ,QAAQ,gBAAgB,WAAW;EAChE,MAAM,OAAO,MAAM,KAAKA,SAAS,IAAI;GAAE,OAAO,QAAQ;GAAO,IAAI,QAAQ;EAAW,CAAC;EACrF,IAAI,CAAC,MAAM;GACT,MAAM,YAAY,MAAM,KAAKM,iBAC3B,SACA,cACA,sBACA,sBACF;GACA,MAAM,KAAKC,kBAAkB,SAAS,KAAA,GAAW,SAAS;GAC1D,OAAO;EACT;EACA,MAAM,SAAS,MAAM,KAAKC,mBAAmB,SAAS,cAAc,IAAI;EACxE,MAAM,KAAKD,kBAAkB,SAAS,MAAM,MAAM;EAClD,OAAO;CACT;;CAGA,MAAMA,kBACJ,SACA,MACA,QACe;EACf,IAAI,CAAC,KAAKF,QAAQ;EAClB,MAAM,OAAO,OAAO,aAAa,KAAK,MAAM,IAAI,KAAA;EAChD,IAAI,OAAO,WAAW,cAAc,OAAO,UAAU,QAAQ,CAAC,QAAQ,SAAS;EAU/E,MAAM,EAAE,QAAQ,GAAG,WARjB,OAAO,WAAW,aACd;GAAE,QAAQ;GAA0C,IAAI,OAAO;GAAO,UAAU,OAAO;EAAS,IAChG;GACE,QAAQ;GACR,IAAI,QAAQ;GACZ,MAAM,OAAO;GACb,QAAQ,OAAO;EACjB;EAEN,MAAM,KAAKA,OACR,OAAO;GACN,OAAO,QAAQ;GACf,kBAAkB,QAAQ;GAC1B,GAAG,aAAa,QAAQ,KAAK;GAC7B,cAAc,QAAQ;GACtB,GAAI,QAAQ,UAAU,EAAE,SAAS,QAAQ,QAAQ,IAAI,CAAC;GACtD;GACA,gBAAgB,OAAO;GACvB,SAAS,CAAC;IAAE,MAAM;IAAa,IAAI,MAAM,MAAM,QAAQ;IAAY,GAAI,OAAO,EAAE,MAAM,KAAK,MAAM,IAAI,CAAC;GAAG,CAAC;GAC1G,UAAU;IACR,cAAc,OAAO;IACrB,aAAa,QAAQ,QAAQ;IAC7B,OAAO,QAAQ;IACf,eAAe,KAAKP;IACpB,GAAI,OAAO,EAAE,KAAK,IAAI,CAAC;IACvB,GAAI,QAAQ,UAAU,EAAE,SAAS,KAAK,IAAI,CAAC;IAC3C,GAAG;GACL;EACF,CAAC,CAAC,CACD,OAAM,UAAS;GACd,QAAQ,KAAK,yCAAyC,OAAO,aAAa,IAAI,KAAK;EACrF,CAAC;CACL;CAEA,MAAMU,mBACJ,SACA,cACA,MACkC;EAClC,IAAI,QAAQ,eAAe,QAAQ,YAAY,SAAA,GAC7C,OAAO,KAAKF,iBACV,SACA,cACA,yBACA,qCACF;EAEF,MAAM,aAAa,eAAe,KAAK,cAAc;EACrD,MAAM,SAAS,6BAA6B,UAAU;EACtD,MAAM,cAAc,WAAW,gBAAgB,WAAW;EAC1D,IAAI,KAAK,UAAU,QAAQ,CAAC,KAAKP,QAAQ,IAAI,WAAW,GACtD,OAAO,KAAKO,iBACV,SACA,cACA,sBACA,gJACF;EAEF,MAAM,YAAY,KAAK,SAAS;EAChC,IAAI,QAAQ,UAAU,WACpB,OAAO,KAAKA,iBACV,SACA,cACA,sBACA,mCAAmC,UAAU,UAAU,QAAQ,MAAM,GACvE;EAEF,IAAK,cAAc,YAAY,WAAW,iBAAmB,cAAc,UAAU,WAAW,eAC9F,OAAO,KAAKA,iBACV,SACA,cACA,sBACA,uDACF;EAEF,MAAM,QAAQ,KAAKP,QAAQ,IAAI,QAAQ,KAAK;EAC5C,IAAI,CAAC,OACH,OAAO,KAAKO,iBACV,SACA,cACA,sBACA,UAAU,QAAQ,MAAM,oBAC1B;EAEF,MAAM,YAAY,KAAK,OAAO,WAAW,IAAI,KAAK,OAAO,KAAK,KAAA;EAC9D,IAAI,CAAC,aAAa,CAAC,OAAO,UAAU,eAAe,KAAK,MAAM,QAAQ,SAAS,GAC7E,OAAO,KAAKA,iBACV,SACA,cACA,sBACA,yEACF;EAEF,IACE,CAAC,OAAO,UAAU,eAAe,KAAK,MAAM,QAAQ,QAAQ,KAAK,KACjE,CAAC,MAAM,iBAAiB,WAAW,QAAQ,KAAK,GAEhD,OAAO,KAAKA,iBACV,SACA,cACA,sBACA,OAAO,MAAM,MAAM,oCAAoC,UAAU,MAAM,QAAQ,MAAM,EACvF;EAIF,MAAM,YAAY,QAAQ,MAAM,SAAS,WAAW,cAAc,QAAQ,SAAS,QAAQ,UAAU;EAErG,MAAM,gBAAgB,MAAM,UAAU,QAAQ,KAAK;EACnD,MAAM,WAAW,MAAM,aAAa,QAAQ,KAAK;EAEjD,MAAM,cAAc;GAClB,QAAQ;IAAE,OAAO,QAAQ;IAAO,WAAW,QAAQ;GAAiB;GACpE,OAAO,QAAQ;GACf,SAAS;IAAE,MAAM,QAAQ,QAAQ;IAAM,IAAI,QAAQ,QAAQ;GAAS;GACpE,OAAO,QAAQ;GACf,aAAa,QAAQ,eAAe,CAAC;GACrC,eAAe,KAAKR;GACpB,MAAM;IACJ,IAAI,KAAK;IACT,QAAQ;IACR,WAAW,KAAK,iBACZ,GAAG,KAAK,eAAe,cAAc,GAAG,KAAK,eAAe,KAAK,GAAG,KAAK,eAAe,eACxF;IACJ,kBAAkB,KAAK;IACvB,OAAO,KAAK;IACZ,KAAK,KAAK,gBAAgB,OAAO;IACjC,QAAQ,CAAC,GAAG,KAAK,MAAM;IACvB,YAAY,KAAK;IACjB,UAAU,KAAK;GACjB;GACA,OAAO,QAAQ;GACf,cAAc,KAAK;GACnB;GACA;GACA,SAAS,QAAQ;EACnB;EAEA,IAAI;EAGJ,IAAI;GACF,aAAa,MAAM,iBAChB,YAAY;IACX,MAAM,SAAS,kCAAkC,MAC/C,MAAM,MAAM,mBACV,wBAAwB;KACtB,GAAG;KACH,MAAM;MAAE,GAAG,YAAY;MAAM,YAAY,KAAK;KAAW;KACzD,cAAc,QAAQ,gBAAgB;KACtC,SAAS,QAAQ,WAAW;KAC5B,mBAAmB,kBAAkB,OAAO;KAC5C,qBAAqB,QAAQ;IAC/B,CAAC,CACH,CACF;IACA,IAAI,QAAQ,SAAS,UACnB,OAAO;KAAE,SAAS;KAAqB,MAAM,OAAO;KAAM,QAAQ,OAAO;IAAO;IAElF,IACE,QAAQ,eAAe,KAAA,MACtB,CAAC,cAAc,QAAQ,KAAK,KAC3B,OAAO,eAAe,QAAQ,cAC7B,KAAK,eAAe,QAAQ,KAAK,eAAe,OAAO,aAE1D,MAAM,IAAI,MAAM,wDAAwD;IAE1E,IAAI,QAAQ,UAAU,CAAC,kBAAkB,OAAO,GAC9C,MAAM,IAAI,MAAM,iDAAiD;IAGnE,IACE,QAAQ,MAAM,SAAS,WACvB,CAAC,MAAM,UAAU,SAAS,KAC1B,iBACA,2BAA2B,IAAI,GAE/B,OAAO;KACL,SAAS;KACT,MAAM;KACN,QACE;IACJ;IAEF,MAAM,YAAqC,CAAC;IAC5C,KAAK,MAAM,QAAQ,yBAAyB,KAAKC,SAAS;KACxD,OAAO,QAAQ;KACf;KACA;KACA,SAAS,QAAQ;KACjB,cAAc,QAAQ;KACtB,SAAS,QAAQ;IACnB,CAAC,GAAG;KACF,MAAM,UAAmC,OAAO,OAAO;MACrD,GAAG;MACH,OAAO,KAAK,UAAU,SAAS,YAAY,QAAQ;KACrD,CAAC;KACD,MAAM,MAAM,MAAM,KAAK,QAAQ,OAAO;KACtC,IAAI,QAAQ,KAAA,GAAW;KACvB,MAAM,WAAW,4BAA4B,KAAK,QAAQ,YAAY,MAAM;KAC5E,IAAI,SAAS,SAAS,UACpB,OAAO;MAAE,SAAS;MAAqB,MAAM,SAAS;MAAM,QAAQ,SAAS;KAAO;KAEtF,4BAA4B,UAAU,KAAKA,SAAS,SAAS;KAC7D,IAAI,UAAU,QAAQ,KAAK,mBAAmB,SAAS,QAAQ,GAAG;KAClE,UAAU,KAAK,QAAQ;IACzB;IACA,MAAM,YAAY,6BAA6B,SAAS;IACxD,IAAI,WAAW;KACb,MAAM,UAAU,uBAAuB,WAAW,QAAQ,KAAK;KAC/D,MAAM,QAAQ,UAAU,MAAK,aAAY,SAAS,SAAS,aAAa;KACxE,IAAI,OACF,MAAM,mBAAmB;UAEzB,UAAU,QAAQ;MAChB,MAAM;MACN,gBAAgB,iBAAiB;MACjC;MACA,UAAU;MACV,cAAc;MAGd,GAAI,iBAAiB,aAAa,KAAA,IAAY;OAAE,MAAM;OAAU,gBAAgB;MAAK,IAAI,CAAC;KAC5F,CAAC;IAEL;IACA,OAAO;KACL,SAAS;KACT,SAAS;MAAE,YAAY,QAAQ;MAAY,QAAQ,QAAQ,WAAW,QAAQ,CAAC,KAAK;KAAW;KAC/F,WAAW,6BAA6B,SAAS;IACnD;GACF,EAAA,CAAG,GACH,KAAKE,UACP;EACF,SAAS,OAAO;GAKd,aAAa;IAAE,SAAS;IAAY,GAHlC,iBAAiB,SAAS,MAAM,YAAY,yBACxC;KAAE,MAAM;KAAoB,QAAQ;IAAqC,IACzE,YAAY,KAAK;GACuB;EAChD;EACA,OAAO,KAAKQ,QACV,SACA,cACA,YACA,WAAW,YAAY,aACnB;GAAE,GAAG,cAAc,SAAS,eAAe,SAAS;GAAG,GAAG,WAAW;EAAQ,IAC7E,CAAC,CACP;CACF;CAEA,MAAMH,iBACJ,SACA,cACA,MACA,QACkC;EAClC,OAAO,KAAKG,QAAQ,SAAS,cAAc;GAAE,SAAS;GAAY;GAAM;EAAO,CAAC;CAClF;CAEA,MAAMA,QACJ,SACA,cACA,YAGA,UAAoC,CAAC,GACH;EAClC,MAAM,YAAY,MAAM,KAAKT,SAAS,iBAAiB;GACrD,UAAU,QAAQ;GAClB,aAAa,QAAQ;GACrB,GAAI,QAAQ,SAAS,EAAE,QAAQ,KAAK,IAAI,CAAC;GACzC,OAAO,QAAQ;GACf,kBAAkB,QAAQ;GAC1B,YAAY,QAAQ;GACpB,kBAAkB,QAAQ;GAC1B,kBAAkB,QAAQ;GAC1B,SAAS,QAAQ,QAAQ,KAAK;GAC9B,SAAS;IAAE,UAAU,QAAQ,QAAQ;IAAU,aAAa,QAAQ,QAAQ;IAAM;GAAa;GAC/F,eAAe,KAAKF;GACpB,aAAa,CAAC,GAAI,QAAQ,eAAe,CAAC,CAAE;GAC5C;GACA,GAAI,QAAQ,aAAa,EAAE,YAAY,QAAQ,WAAW,IAAI,CAAC;EACjE,CAAC;EACD,IAAI,UAAU,WAAW,WACvB,OAAO,UAAU,cAAc,QAAQ,YAAY,sBAAsB,sBAAsB;EAEjG,MAAM,SAAS,UAAU;EACzB,IACE,KAAKM,eACL,QAAQ,UACR,UAAU,WAAW,eACrB,OAAO,WAAW,cAClB,UAAU,MAAM,YAChB;GACA,MAAM,OAAO,UAAU;GACvB,QAAa,QACX,KAAKA,YAAY;IACf,OAAO,QAAQ;IACf,kBAAkB,QAAQ;IAC1B,YAAY,QAAQ;IACpB;GACF,CAAC,CACH,CAAC,CAAC,OAAM,UAAS;IACf,QAAQ,KAAK,kDAAkD,QAAQ,WAAW,IAAI,KAAK;GAC7F,CAAC;EACH;EAEA,IACE,KAAKF,oBACL,OAAO,WAAW,cAClB,KAAKH,QAAQ,IAAI,QAAQ,KAAK,CAAC,EAAE,WAAW,OAAO,KAAK,MAAM,MAC9D;GACA,IAAI;GACJ,IAAI;IACF,MAAM,UAAU,QAAQ,QACtB,KAAKG,iBAAiB;KACpB,OAAO,QAAQ;KACf,kBAAkB,QAAQ;KAC1B,YAAY,QAAQ;KACpB,OAAO,OAAO;KACd,UAAU,OAAO;IACnB,CAAC,CACH;IAGA,QAAQ,YAAY,CAAC,CAAC;IACtB,MAAM,QAAQ,KAAK,CACjB,SACA,IAAI,SAAc,YAAW;KAC3B,QAAQ,WAAW,SAAS,KAAKC,yBAAyB;IAC5D,CAAC,CACH,CAAC;GACH,QAAQ,CAER,UAAU;IACR,aAAa,KAAK;GACpB;EACF;EACA,OAAO;CACT;AACF"}

package/dist/session/run-audit.d.ts

@@ -0,0 +1,49 @@
+import type { AgentControllerEvent } from '@mastra/core/agent-controller';
+import { z } from 'zod';
+import type { AuditActorType } from '../storage/domains/audit/base.js';
+import type { AuditRecorder } from '../storage/domains/audit/domain.js';
+export declare const FACTORY_OPEN_RUNS_SETTING = "factoryOpenRuns";
+declare const factoryOpenRunSchema: z.ZodObject<{
+    kickoffId: z.ZodString;
+    bindingId: z.ZodString;
+    role: z.ZodString;
+    startedBy: z.ZodString;
+    orgId: z.ZodString;
+    factoryProjectId: z.ZodString;
+    workItemId: z.ZodString;
+    workItemName: z.ZodOptional<z.ZodString>;
+    sessionId: z.ZodString;
+    threadId: z.ZodString;
+    branch: z.ZodString;
+    agentName: z.ZodString;
+}, z.core.$strip>;
+export type FactoryOpenRun = z.infer<typeof factoryOpenRunSchema>;
+export interface RunEndCaptureSession {
+    readonly thread: {
+        getSetting(args: {
+            key: string;
+        }): Promise<unknown>;
+        setSetting(args: {
+            key: string;
+            value: unknown;
+        }): Promise<void>;
+    };
+    readonly mode: {
+        get(): string;
+    };
+    subscribe(listener: (event: AgentControllerEvent) => void): () => void;
+}
+type RunEndReason = Extract<AgentControllerEvent, {
+    type: 'agent_end';
+}>['reason'];
+export declare function recordSessionRunStart(session: RunEndCaptureSession, { audit, run, actorType, observedEnd, }: {
+    audit: AuditRecorder;
+    run: Omit<FactoryOpenRun, 'agentName'>;
+    actorType: AuditActorType;
+    observedEnd: () => RunEndReason;
+}): Promise<void>;
+export declare function observeSessionRunEnd(session: RunEndCaptureSession, { audit }: {
+    audit: AuditRecorder;
+}): () => void;
+export {};
+//# sourceMappingURL=run-audit.d.ts.map

package/dist/session/run-audit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-audit.d.ts","sourceRoot":"","sources":["../../src/session/run-audit.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAC1E,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AACvE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oCAAoC,CAAC;AAExE,eAAO,MAAM,yBAAyB,oBAAoB,CAAC;AAE3D,QAAA,MAAM,oBAAoB;;;;;;;;;;;;;iBAaxB,CAAC;AAEH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,MAAM,EAAE;QACf,UAAU,CAAC,IAAI,EAAE;YAAE,GAAG,EAAE,MAAM,CAAA;SAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QACpD,UAAU,CAAC,IAAI,EAAE;YAAE,GAAG,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,OAAO,CAAA;SAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;KAClE,CAAC;IACF,QAAQ,CAAC,IAAI,EAAE;QAAE,GAAG,IAAI,MAAM,CAAA;KAAE,CAAC;IACjC,SAAS,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,oBAAoB,KAAK,IAAI,GAAG,MAAM,IAAI,CAAC;CACxE;AAED,KAAK,YAAY,GAAG,OAAO,CAAC,oBAAoB,EAAE;IAAE,IAAI,EAAE,WAAW,CAAA;CAAE,CAAC,CAAC,QAAQ,CAAC,CAAC;AAuDnF,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,oBAAoB,EAC7B,EACE,KAAK,EACL,GAAG,EACH,SAAS,EACT,WAAW,GACZ,EAAE;IACD,KAAK,EAAE,aAAa,CAAC;IACrB,GAAG,EAAE,IAAI,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;IACvC,SAAS,EAAE,cAAc,CAAC;IAC1B,WAAW,EAAE,MAAM,YAAY,CAAC;CACjC,GACA,OAAO,CAAC,IAAI,CAAC,CAef;AAED,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,oBAAoB,EAAE,EAAE,KAAK,EAAE,EAAE;IAAE,KAAK,EAAE,aAAa,CAAA;CAAE,GAAG,MAAM,IAAI,CAKnH"}

package/dist/session/run-audit.js

@@ -0,0 +1,99 @@
+import { auditAgentName } from "../storage/domains/audit/base.js";
+import { z } from "zod";
+//#region src/session/run-audit.ts
+const FACTORY_OPEN_RUNS_SETTING = "factoryOpenRuns";
+const factoryOpenRunSchema = z.object({
+	kickoffId: z.string(),
+	bindingId: z.string(),
+	role: z.string(),
+	startedBy: z.string(),
+	orgId: z.string(),
+	factoryProjectId: z.string(),
+	workItemId: z.string(),
+	workItemName: z.string().optional(),
+	sessionId: z.string(),
+	threadId: z.string(),
+	branch: z.string(),
+	agentName: z.string()
+});
+const pendingWrites = /* @__PURE__ */ new WeakMap();
+function serializeRunAudit(session, write) {
+	const pending = (pendingWrites.get(session) ?? Promise.resolve()).then(write).catch((error) => console.warn("[Factory run audit] Unable to record run lifecycle.", error));
+	pendingWrites.set(session, pending);
+	return pending;
+}
+async function readOpenRuns(session) {
+	const stored = await session.thread.getSetting({ key: FACTORY_OPEN_RUNS_SETTING });
+	return z.array(factoryOpenRunSchema).parse(stored ?? []);
+}
+function runAuditInput(run) {
+	const { orgId, factoryProjectId, workItemId, workItemName, ...metadata } = run;
+	return {
+		orgId,
+		factoryProjectId,
+		idempotencyKey: run.kickoffId,
+		targets: [{
+			type: "work_item",
+			id: workItemId,
+			...workItemName ? { name: workItemName } : {}
+		}],
+		metadata
+	};
+}
+async function recordRunEnds(session, audit, reason, kickoffId) {
+	if (!reason || reason === "suspended") return;
+	const runs = await readOpenRuns(session);
+	if (runs.length === 0) return;
+	const remaining = [];
+	for (const run of runs) {
+		if (kickoffId && run.kickoffId !== kickoffId) {
+			remaining.push(run);
+			continue;
+		}
+		const input = runAuditInput(run);
+		if (!await audit.record({
+			...input,
+			actorId: `agent:${run.threadId}`,
+			actorType: "agent",
+			action: "factory.run.ended",
+			metadata: {
+				...input.metadata,
+				reason
+			}
+		})) remaining.push(run);
+	}
+	await session.thread.setSetting({
+		key: FACTORY_OPEN_RUNS_SETTING,
+		value: remaining
+	});
+}
+function recordSessionRunStart(session, { audit, run, actorType, observedEnd }) {
+	const openRun = {
+		...run,
+		agentName: auditAgentName(session.mode.get())
+	};
+	return serializeRunAudit(session, async () => {
+		const runs = await readOpenRuns(session);
+		if (!runs.some((existing) => existing.kickoffId === run.kickoffId)) await session.thread.setSetting({
+			key: FACTORY_OPEN_RUNS_SETTING,
+			value: [...runs, openRun]
+		});
+		await audit.record({
+			...runAuditInput(openRun),
+			actorId: run.startedBy,
+			actorType,
+			action: "factory.run.started"
+		});
+		await recordRunEnds(session, audit, observedEnd(), run.kickoffId);
+	});
+}
+function observeSessionRunEnd(session, { audit }) {
+	return session.subscribe((event) => {
+		if (event.type !== "agent_end" || !event.reason || event.reason === "suspended") return;
+		serializeRunAudit(session, () => recordRunEnds(session, audit, event.reason));
+	});
+}
+//#endregion
+export { FACTORY_OPEN_RUNS_SETTING, observeSessionRunEnd, recordSessionRunStart };
+
+//# sourceMappingURL=run-audit.js.map

package/dist/session/run-audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-audit.js","names":[],"sources":["../../src/session/run-audit.ts"],"sourcesContent":["import type { AgentControllerEvent } from '@mastra/core/agent-controller';\nimport { z } from 'zod';\n\nimport { auditAgentName } from '../storage/domains/audit/base.js';\nimport type { AuditActorType } from '../storage/domains/audit/base.js';\nimport type { AuditRecorder } from '../storage/domains/audit/domain.js';\n\nexport const FACTORY_OPEN_RUNS_SETTING = 'factoryOpenRuns';\n\nconst factoryOpenRunSchema = z.object({\n  kickoffId: z.string(),\n  bindingId: z.string(),\n  role: z.string(),\n  startedBy: z.string(),\n  orgId: z.string(),\n  factoryProjectId: z.string(),\n  workItemId: z.string(),\n  workItemName: z.string().optional(),\n  sessionId: z.string(),\n  threadId: z.string(),\n  branch: z.string(),\n  agentName: z.string(),\n});\n\nexport type FactoryOpenRun = z.infer<typeof factoryOpenRunSchema>;\n\nexport interface RunEndCaptureSession {\n  readonly thread: {\n    getSetting(args: { key: string }): Promise<unknown>;\n    setSetting(args: { key: string; value: unknown }): Promise<void>;\n  };\n  readonly mode: { get(): string };\n  subscribe(listener: (event: AgentControllerEvent) => void): () => void;\n}\n\ntype RunEndReason = Extract<AgentControllerEvent, { type: 'agent_end' }>['reason'];\nconst pendingWrites = new WeakMap<RunEndCaptureSession, Promise<void>>();\n\nfunction serializeRunAudit(session: RunEndCaptureSession, write: () => Promise<void>): Promise<void> {\n  const pending = (pendingWrites.get(session) ?? Promise.resolve())\n    .then(write)\n    .catch(error => console.warn('[Factory run audit] Unable to record run lifecycle.', error));\n  pendingWrites.set(session, pending);\n  return pending;\n}\n\nasync function readOpenRuns(session: RunEndCaptureSession): Promise<FactoryOpenRun[]> {\n  const stored = await session.thread.getSetting({ key: FACTORY_OPEN_RUNS_SETTING });\n  return z.array(factoryOpenRunSchema).parse(stored ?? []);\n}\n\nfunction runAuditInput(run: FactoryOpenRun) {\n  const { orgId, factoryProjectId, workItemId, workItemName, ...metadata } = run;\n  return {\n    orgId,\n    factoryProjectId,\n    idempotencyKey: run.kickoffId,\n    targets: [{ type: 'work_item', id: workItemId, ...(workItemName ? { name: workItemName } : {}) }],\n    metadata,\n  };\n}\n\nasync function recordRunEnds(\n  session: RunEndCaptureSession,\n  audit: AuditRecorder,\n  reason: RunEndReason,\n  kickoffId?: string,\n): Promise<void> {\n  if (!reason || reason === 'suspended') return;\n  const runs = await readOpenRuns(session);\n  if (runs.length === 0) return;\n  const remaining = [];\n  for (const run of runs) {\n    if (kickoffId && run.kickoffId !== kickoffId) {\n      remaining.push(run);\n      continue;\n    }\n    const input = runAuditInput(run);\n    const recorded = await audit.record({\n      ...input,\n      actorId: `agent:${run.threadId}`,\n      actorType: 'agent',\n      action: 'factory.run.ended',\n      metadata: { ...input.metadata, reason },\n    });\n    if (!recorded) remaining.push(run);\n  }\n  await session.thread.setSetting({ key: FACTORY_OPEN_RUNS_SETTING, value: remaining });\n}\n\nexport function recordSessionRunStart(\n  session: RunEndCaptureSession,\n  {\n    audit,\n    run,\n    actorType,\n    observedEnd,\n  }: {\n    audit: AuditRecorder;\n    run: Omit<FactoryOpenRun, 'agentName'>;\n    actorType: AuditActorType;\n    observedEnd: () => RunEndReason;\n  },\n): Promise<void> {\n  const openRun = { ...run, agentName: auditAgentName(session.mode.get()) };\n  return serializeRunAudit(session, async () => {\n    const runs = await readOpenRuns(session);\n    if (!runs.some(existing => existing.kickoffId === run.kickoffId)) {\n      await session.thread.setSetting({ key: FACTORY_OPEN_RUNS_SETTING, value: [...runs, openRun] });\n    }\n    await audit.record({\n      ...runAuditInput(openRun),\n      actorId: run.startedBy,\n      actorType,\n      action: 'factory.run.started',\n    });\n    await recordRunEnds(session, audit, observedEnd(), run.kickoffId);\n  });\n}\n\nexport function observeSessionRunEnd(session: RunEndCaptureSession, { audit }: { audit: AuditRecorder }): () => void {\n  return session.subscribe(event => {\n    if (event.type !== 'agent_end' || !event.reason || event.reason === 'suspended') return;\n    void serializeRunAudit(session, () => recordRunEnds(session, audit, event.reason));\n  });\n}\n"],"mappings":";;;AAOA,MAAa,4BAA4B;AAEzC,MAAM,uBAAuB,EAAE,OAAO;CACpC,WAAW,EAAE,OAAO;CACpB,WAAW,EAAE,OAAO;CACpB,MAAM,EAAE,OAAO;CACf,WAAW,EAAE,OAAO;CACpB,OAAO,EAAE,OAAO;CAChB,kBAAkB,EAAE,OAAO;CAC3B,YAAY,EAAE,OAAO;CACrB,cAAc,EAAE,OAAO,CAAC,CAAC,SAAS;CAClC,WAAW,EAAE,OAAO;CACpB,UAAU,EAAE,OAAO;CACnB,QAAQ,EAAE,OAAO;CACjB,WAAW,EAAE,OAAO;AACtB,CAAC;AAcD,MAAM,gCAAgB,IAAI,QAA6C;AAEvE,SAAS,kBAAkB,SAA+B,OAA2C;CACnG,MAAM,WAAW,cAAc,IAAI,OAAO,KAAK,QAAQ,QAAQ,EAAA,CAC5D,KAAK,KAAK,CAAC,CACX,OAAM,UAAS,QAAQ,KAAK,uDAAuD,KAAK,CAAC;CAC5F,cAAc,IAAI,SAAS,OAAO;CAClC,OAAO;AACT;AAEA,eAAe,aAAa,SAA0D;CACpF,MAAM,SAAS,MAAM,QAAQ,OAAO,WAAW,EAAE,KAAK,0BAA0B,CAAC;CACjF,OAAO,EAAE,MAAM,oBAAoB,CAAC,CAAC,MAAM,UAAU,CAAC,CAAC;AACzD;AAEA,SAAS,cAAc,KAAqB;CAC1C,MAAM,EAAE,OAAO,kBAAkB,YAAY,cAAc,GAAG,aAAa;CAC3E,OAAO;EACL;EACA;EACA,gBAAgB,IAAI;EACpB,SAAS,CAAC;GAAE,MAAM;GAAa,IAAI;GAAY,GAAI,eAAe,EAAE,MAAM,aAAa,IAAI,CAAC;EAAG,CAAC;EAChG;CACF;AACF;AAEA,eAAe,cACb,SACA,OACA,QACA,WACe;CACf,IAAI,CAAC,UAAU,WAAW,aAAa;CACvC,MAAM,OAAO,MAAM,aAAa,OAAO;CACvC,IAAI,KAAK,WAAW,GAAG;CACvB,MAAM,YAAY,CAAC;CACnB,KAAK,MAAM,OAAO,MAAM;EACtB,IAAI,aAAa,IAAI,cAAc,WAAW;GAC5C,UAAU,KAAK,GAAG;GAClB;EACF;EACA,MAAM,QAAQ,cAAc,GAAG;EAQ/B,IAAI,CAAC,MAPkB,MAAM,OAAO;GAClC,GAAG;GACH,SAAS,SAAS,IAAI;GACtB,WAAW;GACX,QAAQ;GACR,UAAU;IAAE,GAAG,MAAM;IAAU;GAAO;EACxC,CAAC,GACc,UAAU,KAAK,GAAG;CACnC;CACA,MAAM,QAAQ,OAAO,WAAW;EAAE,KAAK;EAA2B,OAAO;CAAU,CAAC;AACtF;AAEA,SAAgB,sBACd,SACA,EACE,OACA,KACA,WACA,eAOa;CACf,MAAM,UAAU;EAAE,GAAG;EAAK,WAAW,eAAe,QAAQ,KAAK,IAAI,CAAC;CAAE;CACxE,OAAO,kBAAkB,SAAS,YAAY;EAC5C,MAAM,OAAO,MAAM,aAAa,OAAO;EACvC,IAAI,CAAC,KAAK,MAAK,aAAY,SAAS,cAAc,IAAI,SAAS,GAC7D,MAAM,QAAQ,OAAO,WAAW;GAAE,KAAK;GAA2B,OAAO,CAAC,GAAG,MAAM,OAAO;EAAE,CAAC;EAE/F,MAAM,MAAM,OAAO;GACjB,GAAG,cAAc,OAAO;GACxB,SAAS,IAAI;GACb;GACA,QAAQ;EACV,CAAC;EACD,MAAM,cAAc,SAAS,OAAO,YAAY,GAAG,IAAI,SAAS;CAClE,CAAC;AACH;AAEA,SAAgB,qBAAqB,SAA+B,EAAE,SAA+C;CACnH,OAAO,QAAQ,WAAU,UAAS;EAChC,IAAI,MAAM,SAAS,eAAe,CAAC,MAAM,UAAU,MAAM,WAAW,aAAa;EACjF,kBAAuB,eAAe,cAAc,SAAS,OAAO,MAAM,MAAM,CAAC;CACnF,CAAC;AACH"}

package/dist/session/shell-commands.d.ts

@@ -0,0 +1,5 @@
+/** Two tool observers read the same `gh pr create`, so the reading lives here rather than once per observer. */
+/** Heredoc bodies dropped, so prose inside a document never reads as a command. */
+export declare function executableCommand(command: string): string;
+export declare function runsPullRequestCreate(command: string): boolean;
+//# sourceMappingURL=shell-commands.d.ts.map

package/dist/session/shell-commands.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shell-commands.d.ts","sourceRoot":"","sources":["../../src/session/shell-commands.ts"],"names":[],"mappings":"AAAA,gHAAgH;AAIhH,mFAAmF;AACnF,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAgBzD;AAED,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAE9D"}

package/dist/session/shell-commands.js

@@ -0,0 +1,25 @@
+//#region src/session/shell-commands.ts
+/** Two tool observers read the same `gh pr create`, so the reading lives here rather than once per observer. */
+const GH_PR_CREATE_RE = /(?:^|\n|;|&&|\|\|)\s*gh\s+pr\s+create(?:\s|$)/;
+/** Heredoc bodies dropped, so prose inside a document never reads as a command. */
+function executableCommand(command) {
+	const lines = command.split("\n");
+	const executableLines = [];
+	let delimiter;
+	for (const line of lines) {
+		if (delimiter) {
+			if (line.trim() === delimiter) delimiter = void 0;
+			continue;
+		}
+		executableLines.push(line);
+		delimiter = line.match(/<<-?\s*(['"]?)([A-Za-z_][A-Za-z0-9_]*)\1/)?.[2];
+	}
+	return executableLines.join("\n");
+}
+function runsPullRequestCreate(command) {
+	return GH_PR_CREATE_RE.test(executableCommand(command));
+}
+//#endregion
+export { executableCommand, runsPullRequestCreate };
+
+//# sourceMappingURL=shell-commands.js.map

package/dist/session/shell-commands.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shell-commands.js","names":[],"sources":["../../src/session/shell-commands.ts"],"sourcesContent":["/** Two tool observers read the same `gh pr create`, so the reading lives here rather than once per observer. */\n\nconst GH_PR_CREATE_RE = /(?:^|\\n|;|&&|\\|\\|)\\s*gh\\s+pr\\s+create(?:\\s|$)/;\n\n/** Heredoc bodies dropped, so prose inside a document never reads as a command. */\nexport function executableCommand(command: string): string {\n  const lines = command.split('\\n');\n  const executableLines: string[] = [];\n  let delimiter: string | undefined;\n\n  for (const line of lines) {\n    if (delimiter) {\n      if (line.trim() === delimiter) delimiter = undefined;\n      continue;\n    }\n    executableLines.push(line);\n    const heredoc = line.match(/<<-?\\s*(['\"]?)([A-Za-z_][A-Za-z0-9_]*)\\1/);\n    delimiter = heredoc?.[2];\n  }\n\n  return executableLines.join('\\n');\n}\n\nexport function runsPullRequestCreate(command: string): boolean {\n  return GH_PR_CREATE_RE.test(executableCommand(command));\n}\n"],"mappings":";;AAEA,MAAM,kBAAkB;;AAGxB,SAAgB,kBAAkB,SAAyB;CACzD,MAAM,QAAQ,QAAQ,MAAM,IAAI;CAChC,MAAM,kBAA4B,CAAC;CACnC,IAAI;CAEJ,KAAK,MAAM,QAAQ,OAAO;EACxB,IAAI,WAAW;GACb,IAAI,KAAK,KAAK,MAAM,WAAW,YAAY,KAAA;GAC3C;EACF;EACA,gBAAgB,KAAK,IAAI;EAEzB,YADgB,KAAK,MAAM,0CACT,CAAC,GAAG;CACxB;CAEA,OAAO,gBAAgB,KAAK,IAAI;AAClC;AAEA,SAAgB,sBAAsB,SAA0B;CAC9D,OAAO,gBAAgB,KAAK,kBAAkB,OAAO,CAAC;AACxD"}

package/dist/storage/domains/audit/actions.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Every action the trail can hold, by namespace. Register new ones in the
+ * WorkOS dashboard under Audit Logs → Events before the mirror accepts them.
+ */
+export declare const AUDIT_ACTIONS: {
+    readonly work_item: readonly ["created", "updated", "deleted", "stage_moved", "transition_rejected", "comment_created", "comment_edited", "comment_deleted", "comment_mentioned", "labels_reconciled"];
+    readonly run: readonly ["started", "ended", "approved", "dismissed", "retry"];
+    readonly git: readonly ["commit", "push", "pr_opened"];
+    readonly agent: readonly ["commit", "push", "pr_opened", "signaled"];
+    readonly intake: readonly ["config_updated", "binding_updated", "label_route_updated"];
+};
+export type AuditNamespace = keyof typeof AUDIT_ACTIONS;
+export type AuditAction = {
+    [Namespace in AuditNamespace]: `factory.${Namespace}.${(typeof AUDIT_ACTIONS)[Namespace][number]}`;
+}[AuditNamespace];
+export declare function isAuditNamespace(value: string): value is AuditNamespace;
+export declare function auditNamespaces(): AuditNamespace[];
+export declare function parseAuditAction(action: string): {
+    namespace: AuditNamespace;
+    leaf: string;
+} | undefined;
+export declare function isAuditAction(value: string): value is AuditAction;
+export declare function auditActionsInNamespaces(namespaces: readonly AuditNamespace[]): string[];
+//# sourceMappingURL=actions.d.ts.map

package/dist/storage/domains/audit/actions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"actions.d.ts","sourceRoot":"","sources":["../../../../src/storage/domains/audit/actions.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,eAAO,MAAM,aAAa;;;;;;CAiBhB,CAAC;AAEX,MAAM,MAAM,cAAc,GAAG,MAAM,OAAO,aAAa,CAAC;AAExD,MAAM,MAAM,WAAW,GAAG;KACvB,SAAS,IAAI,cAAc,GAAG,WAAW,SAAS,IAAI,CAAC,OAAO,aAAa,CAAC,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,EAAE;CACnG,CAAC,cAAc,CAAC,CAAC;AAElB,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,cAAc,CAEvE;AAED,wBAAgB,eAAe,IAAI,cAAc,EAAE,CAElD;AAED,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG;IAAE,SAAS,EAAE,cAAc,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAIxG;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,WAAW,CAGjE;AAED,wBAAgB,wBAAwB,CAAC,UAAU,EAAE,SAAS,cAAc,EAAE,GAAG,MAAM,EAAE,CAExF"}

package/dist/storage/domains/audit/actions.js

@@ -0,0 +1,67 @@
+//#region src/storage/domains/audit/actions.ts
+/**
+* Every action the trail can hold, by namespace. Register new ones in the
+* WorkOS dashboard under Audit Logs → Events before the mirror accepts them.
+*/
+const AUDIT_ACTIONS = {
+	work_item: [
+		"created",
+		"updated",
+		"deleted",
+		"stage_moved",
+		"transition_rejected",
+		"comment_created",
+		"comment_edited",
+		"comment_deleted",
+		"comment_mentioned",
+		"labels_reconciled"
+	],
+	run: [
+		"started",
+		"ended",
+		"approved",
+		"dismissed",
+		"retry"
+	],
+	git: [
+		"commit",
+		"push",
+		"pr_opened"
+	],
+	agent: [
+		"commit",
+		"push",
+		"pr_opened",
+		"signaled"
+	],
+	intake: [
+		"config_updated",
+		"binding_updated",
+		"label_route_updated"
+	]
+};
+function isAuditNamespace(value) {
+	return Object.hasOwn(AUDIT_ACTIONS, value);
+}
+function auditNamespaces() {
+	return Object.keys(AUDIT_ACTIONS).filter(isAuditNamespace);
+}
+function parseAuditAction(action) {
+	const [prefix, namespace, leaf, ...rest] = action.split(".");
+	if (prefix !== "factory" || namespace === void 0 || leaf === void 0 || rest.length > 0) return void 0;
+	return isAuditNamespace(namespace) ? {
+		namespace,
+		leaf
+	} : void 0;
+}
+function isAuditAction(value) {
+	const parsed = parseAuditAction(value);
+	return parsed !== void 0 && AUDIT_ACTIONS[parsed.namespace].some((leaf) => leaf === parsed.leaf);
+}
+function auditActionsInNamespaces(namespaces) {
+	return namespaces.flatMap((namespace) => AUDIT_ACTIONS[namespace].map((leaf) => `factory.${namespace}.${leaf}`));
+}
+//#endregion
+export { AUDIT_ACTIONS, auditActionsInNamespaces, auditNamespaces, isAuditAction, isAuditNamespace, parseAuditAction };
+
+//# sourceMappingURL=actions.js.map

package/dist/storage/domains/audit/actions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"actions.js","names":[],"sources":["../../../../src/storage/domains/audit/actions.ts"],"sourcesContent":["/**\n * Every action the trail can hold, by namespace. Register new ones in the\n * WorkOS dashboard under Audit Logs → Events before the mirror accepts them.\n */\nexport const AUDIT_ACTIONS = {\n  work_item: [\n    'created',\n    'updated',\n    'deleted',\n    'stage_moved',\n    'transition_rejected',\n    'comment_created',\n    'comment_edited',\n    'comment_deleted',\n    'comment_mentioned',\n    'labels_reconciled',\n  ],\n  run: ['started', 'ended', 'approved', 'dismissed', 'retry'],\n  git: ['commit', 'push', 'pr_opened'],\n  agent: ['commit', 'push', 'pr_opened', 'signaled'],\n  intake: ['config_updated', 'binding_updated', 'label_route_updated'],\n} as const;\n\nexport type AuditNamespace = keyof typeof AUDIT_ACTIONS;\n\nexport type AuditAction = {\n  [Namespace in AuditNamespace]: `factory.${Namespace}.${(typeof AUDIT_ACTIONS)[Namespace][number]}`;\n}[AuditNamespace];\n\nexport function isAuditNamespace(value: string): value is AuditNamespace {\n  return Object.hasOwn(AUDIT_ACTIONS, value);\n}\n\nexport function auditNamespaces(): AuditNamespace[] {\n  return Object.keys(AUDIT_ACTIONS).filter(isAuditNamespace);\n}\n\nexport function parseAuditAction(action: string): { namespace: AuditNamespace; leaf: string } | undefined {\n  const [prefix, namespace, leaf, ...rest] = action.split('.');\n  if (prefix !== 'factory' || namespace === undefined || leaf === undefined || rest.length > 0) return undefined;\n  return isAuditNamespace(namespace) ? { namespace, leaf } : undefined;\n}\n\nexport function isAuditAction(value: string): value is AuditAction {\n  const parsed = parseAuditAction(value);\n  return parsed !== undefined && AUDIT_ACTIONS[parsed.namespace].some(leaf => leaf === parsed.leaf);\n}\n\nexport function auditActionsInNamespaces(namespaces: readonly AuditNamespace[]): string[] {\n  return namespaces.flatMap(namespace => AUDIT_ACTIONS[namespace].map(leaf => `factory.${namespace}.${leaf}`));\n}\n"],"mappings":";;;;;AAIA,MAAa,gBAAgB;CAC3B,WAAW;EACT;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;CACF;CACA,KAAK;EAAC;EAAW;EAAS;EAAY;EAAa;CAAO;CAC1D,KAAK;EAAC;EAAU;EAAQ;CAAW;CACnC,OAAO;EAAC;EAAU;EAAQ;EAAa;CAAU;CACjD,QAAQ;EAAC;EAAkB;EAAmB;CAAqB;AACrE;AAQA,SAAgB,iBAAiB,OAAwC;CACvE,OAAO,OAAO,OAAO,eAAe,KAAK;AAC3C;AAEA,SAAgB,kBAAoC;CAClD,OAAO,OAAO,KAAK,aAAa,CAAC,CAAC,OAAO,gBAAgB;AAC3D;AAEA,SAAgB,iBAAiB,QAAyE;CACxG,MAAM,CAAC,QAAQ,WAAW,MAAM,GAAG,QAAQ,OAAO,MAAM,GAAG;CAC3D,IAAI,WAAW,aAAa,cAAc,KAAA,KAAa,SAAS,KAAA,KAAa,KAAK,SAAS,GAAG,OAAO,KAAA;CACrG,OAAO,iBAAiB,SAAS,IAAI;EAAE;EAAW;CAAK,IAAI,KAAA;AAC7D;AAEA,SAAgB,cAAc,OAAqC;CACjE,MAAM,SAAS,iBAAiB,KAAK;CACrC,OAAO,WAAW,KAAA,KAAa,cAAc,OAAO,UAAU,CAAC,MAAK,SAAQ,SAAS,OAAO,IAAI;AAClG;AAEA,SAAgB,yBAAyB,YAAiD;CACxF,OAAO,WAAW,SAAQ,cAAa,cAAc,UAAU,CAAC,KAAI,SAAQ,WAAW,UAAU,GAAG,MAAM,CAAC;AAC7G"}

package/dist/storage/domains/audit/actors.d.ts

@@ -0,0 +1,5 @@
+export declare const AUDIT_ACTOR_TYPES: readonly ["human", "agent", "system"];
+export type AuditActorType = (typeof AUDIT_ACTOR_TYPES)[number];
+export declare function isAuditActorType(value: unknown): value is AuditActorType;
+export declare function isHumanActorId(actorId: string | undefined): actorId is string;
+//# sourceMappingURL=actors.d.ts.map

package/dist/storage/domains/audit/actors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"actors.d.ts","sourceRoot":"","sources":["../../../../src/storage/domains/audit/actors.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,iBAAiB,uCAAwC,CAAC;AAEvE,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEhE,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,cAAc,CAExE;AAWD,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,IAAI,MAAM,CAG7E"}

package/dist/storage/domains/audit/actors.js

@@ -0,0 +1,25 @@
+//#region src/storage/domains/audit/actors.ts
+const AUDIT_ACTOR_TYPES = [
+	"human",
+	"agent",
+	"system"
+];
+function isAuditActorType(value) {
+	return AUDIT_ACTOR_TYPES.some((type) => type === value);
+}
+/** Ids the factory writes for itself: never a person, so never a profile lookup. */
+const AUTOMATION_ACTORS = /* @__PURE__ */ new Set([
+	"factory",
+	"system",
+	"automation",
+	"factory-rule-dispatcher",
+	"factory-tool-result-rule"
+]);
+function isHumanActorId(actorId) {
+	if (!actorId) return false;
+	return !AUTOMATION_ACTORS.has(actorId) && !actorId.startsWith("agent:") && !actorId.startsWith("github:");
+}
+//#endregion
+export { AUDIT_ACTOR_TYPES, isAuditActorType, isHumanActorId };
+
+//# sourceMappingURL=actors.js.map

package/dist/storage/domains/audit/actors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"actors.js","names":[],"sources":["../../../../src/storage/domains/audit/actors.ts"],"sourcesContent":["export const AUDIT_ACTOR_TYPES = ['human', 'agent', 'system'] as const;\n\nexport type AuditActorType = (typeof AUDIT_ACTOR_TYPES)[number];\n\nexport function isAuditActorType(value: unknown): value is AuditActorType {\n  return AUDIT_ACTOR_TYPES.some(type => type === value);\n}\n\n/** Ids the factory writes for itself: never a person, so never a profile lookup. */\nconst AUTOMATION_ACTORS = new Set([\n  'factory',\n  'system',\n  'automation',\n  'factory-rule-dispatcher',\n  'factory-tool-result-rule',\n]);\n\nexport function isHumanActorId(actorId: string | undefined): actorId is string {\n  if (!actorId) return false;\n  return !AUTOMATION_ACTORS.has(actorId) && !actorId.startsWith('agent:') && !actorId.startsWith('github:');\n}\n"],"mappings":";AAAA,MAAa,oBAAoB;CAAC;CAAS;CAAS;AAAQ;AAI5D,SAAgB,iBAAiB,OAAyC;CACxE,OAAO,kBAAkB,MAAK,SAAQ,SAAS,KAAK;AACtD;;AAGA,MAAM,oCAAoB,IAAI,IAAI;CAChC;CACA;CACA;CACA;CACA;AACF,CAAC;AAED,SAAgB,eAAe,SAAgD;CAC7E,IAAI,CAAC,SAAS,OAAO;CACrB,OAAO,CAAC,kBAAkB,IAAI,OAAO,KAAK,CAAC,QAAQ,WAAW,QAAQ,KAAK,CAAC,QAAQ,WAAW,SAAS;AAC1G"}

package/dist/storage/domains/audit/agent-audit.d.ts

@@ -1,9 +1,7 @@
 /**
- * Agent-level audit event detection (Audit v1.1).
- *
- * Git actions performed by agents inside runs never touch web routes, so this
- * observer detects externally-visible git side effects and delegates recording
- * to the factory-owned audit domain.
+ * Git and GitHub actions performed by agents inside runs never touch web routes,
+ * so this observer detects their externally-visible side effects in the command
+ * and delegates recording to the factory-owned audit domain.
  */
 import type { RequestContext } from '@mastra/core/request-context';
 import type { AuditAgentEmitter } from './domain.js';
@@ -15,8 +13,8 @@ interface ToolObserverContext {
     context: RequestContext;
 }
 /**
- * Detect externally-visible git side effects in a completed tool call and
- * record `factory.agent.*` audit events for them. One command can emit
+ * Detect externally-visible git and GitHub side effects in a completed tool
+ * call and record `factory.agent.*` audit events for them. One command can emit
  * multiple events (`git commit && git push` emits both). Never throws.
  */
 export declare function observeAgentGitAction({ audit, toolContext, }: {

package/dist/storage/domains/audit/agent-audit.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agent-audit.d.ts","sourceRoot":"","sources":["../../../../src/storage/domains/audit/agent-audit.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAEnE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAIrD,UAAU,mBAAmB;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,OAAO,EAAE,cAAc,CAAC;CACzB;AAgCD;;;;GAIG;AACH,wBAAsB,qBAAqB,CAAC,EAC1C,KAAK,EACL,WAAW,GACZ,EAAE;IACD,KAAK,EAAE,iBAAiB,CAAC;IACzB,WAAW,EAAE,mBAAmB,CAAC;CAClC,GAAG,OAAO,CAAC,IAAI,CAAC,CAsChB"}
+{"version":3,"file":"agent-audit.d.ts","sourceRoot":"","sources":["../../../../src/storage/domains/audit/agent-audit.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAGnE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAIrD,UAAU,mBAAmB;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,OAAO,EAAE,cAAc,CAAC;CACzB;AA2BD;;;;GAIG;AACH,wBAAsB,qBAAqB,CAAC,EAC1C,KAAK,EACL,WAAW,GACZ,EAAE;IACD,KAAK,EAAE,iBAAiB,CAAC;IACzB,WAAW,EAAE,mBAAmB,CAAC;CAClC,GAAG,OAAO,CAAC,IAAI,CAAC,CA4ChB"}