@mastra/factory 0.15.0 → 0.16.0-alpha.10

package/dist/integrations/jira/routes.js

@@ -0,0 +1,260 @@
+import { JiraApiError } from "./api.js";
+import { DEPLOYMENT_CONNECTION } from "./integration.js";
+import { registerApiRoute } from "@mastra/core/server";
+//#region src/integrations/jira/routes.ts
+const UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+const ISSUE_KEY_RE = /^[A-Za-z][A-Za-z0-9_]*-\d+$/;
+/** Erase a route handler's path-parameterized context to a plain `Context`. */
+function loose(c) {
+	return c;
+}
+/**
+* Narrow the caller's selected Jira projects to the ones that feed this
+* Factory project.
+*
+* A Jira issue carries no Factory project of its own, so without a binding
+* every board view would ingest every selected project's issues into whichever
+* Factory happened to be on screen. Routing is explicit: a project feeds this
+* Factory only when its binding names both the Factory project and a board.
+* Returns the bound board per source so consumers can land cards where the
+* user asked. Mirrors the Linear routes' scoping semantics locally — the
+* generic binding storage is provider-neutral.
+*/
+async function scopeSourceIdsToProject({ intake, orgId, factoryProjectId, selectedIds }) {
+	const selected = new Set(selectedIds);
+	const intakeBoards = {};
+	for (const binding of await intake.listBindings({
+		orgId,
+		integrationId: "jira"
+	})) if (binding.factoryProjectId === factoryProjectId && binding.board && selected.has(binding.sourceId)) intakeBoards[binding.sourceId] = binding.board;
+	return intakeBoards;
+}
+/**
+* Resolve the org-scoped tenant for a Jira request. Intake selections are
+* org-owned, so it requires both a signed-in user and an organization — same
+* tenancy rules as the Linear routes.
+*/
+async function resolveOrgTenant(c, auth) {
+	await auth.ensureUser(c);
+	const tenant = auth.tenant(c);
+	if (!tenant) return { response: c.json({ error: "unauthorized" }, 401) };
+	if (!tenant.orgId) return { response: c.json({
+		error: "organization_required",
+		message: "Jira intake requires an organization. Personal accounts cannot use Jira intake."
+	}, 403) };
+	return { tenant: {
+		orgId: tenant.orgId,
+		userId: tenant.userId
+	} };
+}
+/**
+* Validate an opaque Jira pagination cursor from the query string. Cursors are
+* server-issued (`nextPageToken`), so anything outside a conservative
+* charset/length is rejected rather than forwarded to Jira.
+*/
+function parseAfterCursor(raw) {
+	if (raw === void 0 || raw === "") return void 0;
+	if (raw.length > 512 || !/^[\w+/=.:-]+$/.test(raw)) return null;
+	return raw;
+}
+/** Map a Jira read failure to the API response for the SPA. */
+function jiraFetchError(c, err) {
+	if (err instanceof JiraApiError && err.code === "jira_auth_failed") return c.json({
+		error: "jira_auth_failed",
+		message: "Jira rejected the configured credentials. Check JIRA_EMAIL and JIRA_API_TOKEN."
+	}, 409);
+	return c.json({
+		error: "jira_fetch_failed",
+		message: err instanceof Error ? err.message : String(err)
+	}, 502);
+}
+/**
+* Build the Jira routes as Mastra `apiRoutes`. When the feature is disabled,
+* returns only the `status` route so the SPA can detect the disabled state.
+*/
+function buildJiraRoutes(options) {
+	const routes = [];
+	const { jira, auth, intake } = options;
+	const enabled = Boolean(jira) && auth.enabled();
+	const diagnostics = () => ({
+		jiraConfigured: Boolean(jira),
+		factoryAuthEnabled: auth.enabled(),
+		appDbConfigured: true
+	});
+	routes.push(registerApiRoute("/web/jira/status", {
+		method: "GET",
+		requiresAuth: false,
+		handler: async (c) => {
+			if (!enabled || !jira || !intake) return c.json({
+				enabled: false,
+				configured: Boolean(jira),
+				mode: "direct",
+				site: null,
+				reason: "missing_config",
+				diagnostics: diagnostics()
+			});
+			await auth.ensureUser(loose(c));
+			const tenant = auth.tenant(loose(c));
+			if (!tenant) return c.json({
+				error: "unauthorized",
+				reason: "auth_required"
+			}, 401);
+			const site = new URL(jira.baseUrl).host;
+			if (!tenant.orgId) return c.json({
+				enabled: true,
+				configured: true,
+				mode: "direct",
+				organizationRequired: true,
+				site,
+				reason: "organization_required",
+				diagnostics: diagnostics()
+			});
+			return c.json({
+				enabled: true,
+				configured: true,
+				mode: "direct",
+				site,
+				reason: "ready",
+				diagnostics: diagnostics()
+			});
+		}
+	}));
+	if (!enabled || !jira || !intake) return routes;
+	routes.push(registerApiRoute("/web/jira/projects", {
+		method: "GET",
+		requiresAuth: false,
+		handler: async (c) => {
+			const resolved = await resolveOrgTenant(loose(c), auth);
+			if ("response" in resolved) return resolved.response;
+			try {
+				const sources = await jira.intake.listSources(resolved.tenant);
+				return c.json({ projects: sources.map((source) => ({
+					id: source.id,
+					name: source.name,
+					key: typeof source.metadata?.key === "string" ? source.metadata.key : null
+				})) });
+			} catch (err) {
+				return jiraFetchError(loose(c), err);
+			}
+		}
+	}));
+	routes.push(registerApiRoute("/web/jira/issues", {
+		method: "GET",
+		requiresAuth: false,
+		handler: async (c) => {
+			const resolved = await resolveOrgTenant(loose(c), auth);
+			if ("response" in resolved) return resolved.response;
+			const after = parseAfterCursor(c.req.query("after"));
+			if (after === null) return c.json({ error: "invalid_cursor" }, 400);
+			const factoryProjectId = c.req.query("factoryProjectId");
+			if (factoryProjectId && !UUID_RE.test(factoryProjectId)) return c.json({ error: "invalid_factory_project_id" }, 400);
+			await intake.ensureReady();
+			const selection = (await intake.getConfig({
+				orgId: resolved.tenant.orgId,
+				integrationIds: ["jira"]
+			})).jira;
+			if (!selection.enabled) return c.json({
+				error: "jira_intake_disabled",
+				message: "Jira intake is turned off in Settings."
+			}, 404);
+			const selectedIds = selection.sourceIds ?? [];
+			const intakeBoards = factoryProjectId ? await scopeSourceIdsToProject({
+				intake,
+				orgId: resolved.tenant.orgId,
+				factoryProjectId,
+				selectedIds
+			}) : null;
+			const projectIds = intakeBoards ? Object.keys(intakeBoards) : selectedIds;
+			if (projectIds.length === 0) return c.json({
+				issues: [],
+				nextCursor: null
+			});
+			try {
+				const { issues, nextCursor } = await jira.listActiveIssues(after, projectIds);
+				const issuePayload = issues.map((issue) => ({
+					id: issue.id,
+					identifier: issue.identifier,
+					title: issue.title,
+					url: issue.url,
+					author: issue.author,
+					state: issue.state ?? "",
+					stateType: issue.stateType ?? "",
+					priorityLabel: issue.priority ?? "",
+					assignee: issue.assignee,
+					project: issue.source,
+					labels: issue.labels,
+					createdAt: issue.createdAt,
+					updatedAt: issue.updatedAt,
+					sourceId: issue.sourceId || null
+				}));
+				if (factoryProjectId && intakeBoards && options.ingestFactoryIssues) await options.ingestFactoryIssues({
+					orgId: resolved.tenant.orgId,
+					userId: resolved.tenant.userId,
+					factoryProjectId,
+					issues: issuePayload.map((issue) => ({
+						...issue,
+						site: null
+					})),
+					intakeBoards
+				});
+				return c.json({
+					issues: issuePayload,
+					nextCursor
+				});
+			} catch (err) {
+				return jiraFetchError(loose(c), err);
+			}
+		}
+	}));
+	routes.push(registerApiRoute("/web/jira/issues/:identifier", {
+		method: "GET",
+		requiresAuth: false,
+		handler: async (c) => {
+			const resolved = await resolveOrgTenant(loose(c), auth);
+			if ("response" in resolved) return resolved.response;
+			const identifier = c.req.param("identifier");
+			const factoryProjectId = c.req.query("factoryProjectId");
+			const issueRef = c.req.query("issueRef");
+			if (!ISSUE_KEY_RE.test(identifier)) return c.json({ error: "invalid_issue_identifier" }, 400);
+			if (!factoryProjectId || !UUID_RE.test(factoryProjectId)) return c.json({ error: "invalid_factory_project_id" }, 400);
+			if (!issueRef || issueRef.length > 2048) return c.json({ error: "invalid_issue_ref" }, 400);
+			await intake.ensureReady();
+			const selection = (await intake.getConfig({
+				orgId: resolved.tenant.orgId,
+				integrationIds: ["jira"]
+			})).jira;
+			if (!selection.enabled) return c.json({
+				error: "jira_intake_disabled",
+				message: "Jira intake is turned off in Settings."
+			}, 404);
+			const intakeBoards = await scopeSourceIdsToProject({
+				intake,
+				orgId: resolved.tenant.orgId,
+				factoryProjectId,
+				selectedIds: selection.sourceIds ?? []
+			});
+			if (Object.keys(intakeBoards).length === 0) return c.json({ error: "issue_not_found" }, 404);
+			try {
+				const issue = await jira.intake.getIssue({
+					connection: DEPLOYMENT_CONNECTION,
+					issueId: issueRef
+				});
+				const routed = issue?.sourceId != null && issue.sourceId in intakeBoards;
+				if (!issue || issue.identifier.toUpperCase() !== identifier.toUpperCase() || !routed) return c.json({ error: "issue_not_found" }, 404);
+				return c.json({
+					identifier: issue.identifier,
+					title: issue.title,
+					url: issue.url,
+					description: issue.description
+				});
+			} catch (err) {
+				return jiraFetchError(loose(c), err);
+			}
+		}
+	}));
+	return routes;
+}
+//#endregion
+export { buildJiraRoutes };
+
+//# sourceMappingURL=routes.js.map

package/dist/integrations/jira/routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.js","names":[],"sources":["../../../src/integrations/jira/routes.ts"],"sourcesContent":["/**\n * Mastra `apiRoutes` for the Jira intake feature.\n *\n * Registered alongside the other `/web/*` routes, behind the host auth gate.\n * Mirrors the Linear module minus everything OAuth: there is no\n * connect/callback flow, no state signer, and no per-org connection storage —\n * Jira credentials are deployment-global constructor config on the\n * integration instance. Every route still re-resolves the authenticated user\n * from the request and scopes intake selections by the caller's org.\n *\n * When the feature is disabled (no auth, or no intake storage),\n * `buildJiraRoutes` returns only `GET /web/jira/status`, which reports\n * `enabled:false` so the SPA can cleanly hide all Jira UI.\n */\n\nimport type { ApiRoute } from '@mastra/core/server';\nimport { registerApiRoute } from '@mastra/core/server';\nimport type { Context } from 'hono';\n\nimport type { RouteAuth } from '../../routes/route.js';\nimport type { IntakeStorage } from '../../storage/domains/intake/base.js';\nimport { JiraApiError } from './api.js';\nimport { DEPLOYMENT_CONNECTION } from './integration.js';\nimport type { JiraIntegration } from './integration.js';\nimport type { JiraRulesIngress } from './rules.js';\n\ntype RouteContext = Context;\n\nconst UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;\nconst ISSUE_KEY_RE = /^[A-Za-z][A-Za-z0-9_]*-\\d+$/;\n\n/** Erase a route handler's path-parameterized context to a plain `Context`. */\nfunction loose(c: unknown): RouteContext {\n  return c as RouteContext;\n}\n\n/**\n * Non-secret diagnostic snapshot of every Jira feature gate, mirroring the\n * Linear diagnostics shape. Only booleans — never values.\n */\nexport interface JiraFeatureDiagnostics {\n  jiraConfigured: boolean;\n  factoryAuthEnabled: boolean;\n  appDbConfigured: boolean;\n}\n\nexport interface MountJiraRoutesOptions {\n  /**\n   * The integration instance providing REST access. Required for everything\n   * beyond the disabled `status` route.\n   */\n  jira?: JiraIntegration;\n  /** Host auth seam. Intake selections are org-owned, so the feature is inert without it. */\n  auth: RouteAuth;\n  /**\n   * Cross-integration intake selection domain. Required for the issues route's\n   * project filter; when absent, only the disabled `status` route is served.\n   */\n  intake?: IntakeStorage;\n  /**\n   * Factory rules ingress for observed issues. When present, a board-scoped\n   * issue listing also materializes new cards through the Jira event rules —\n   * the same automatic intake Linear has.\n   */\n  ingestFactoryIssues?: (input: JiraRulesIngress) => Promise<unknown>;\n}\n\n/**\n * Narrow the caller's selected Jira projects to the ones that feed this\n * Factory project.\n *\n * A Jira issue carries no Factory project of its own, so without a binding\n * every board view would ingest every selected project's issues into whichever\n * Factory happened to be on screen. Routing is explicit: a project feeds this\n * Factory only when its binding names both the Factory project and a board.\n * Returns the bound board per source so consumers can land cards where the\n * user asked. Mirrors the Linear routes' scoping semantics locally — the\n * generic binding storage is provider-neutral.\n */\nasync function scopeSourceIdsToProject({\n  intake,\n  orgId,\n  factoryProjectId,\n  selectedIds,\n}: {\n  intake: IntakeStorage;\n  orgId: string;\n  factoryProjectId: string;\n  selectedIds: string[];\n}): Promise<Record<string, string>> {\n  const selected = new Set(selectedIds);\n  const intakeBoards: Record<string, string> = {};\n  for (const binding of await intake.listBindings({ orgId, integrationId: 'jira' })) {\n    if (binding.factoryProjectId === factoryProjectId && binding.board && selected.has(binding.sourceId)) {\n      intakeBoards[binding.sourceId] = binding.board;\n    }\n  }\n  return intakeBoards;\n}\n\n/**\n * Resolve the org-scoped tenant for a Jira request. Intake selections are\n * org-owned, so it requires both a signed-in user and an organization — same\n * tenancy rules as the Linear routes.\n */\nasync function resolveOrgTenant(\n  c: RouteContext,\n  auth: RouteAuth,\n): Promise<{ tenant: { orgId: string; userId: string } } | { response: Response }> {\n  await auth.ensureUser(c);\n  const tenant = auth.tenant(c);\n  if (!tenant) return { response: c.json({ error: 'unauthorized' }, 401) };\n  if (!tenant.orgId) {\n    return {\n      response: c.json(\n        {\n          error: 'organization_required',\n          message: 'Jira intake requires an organization. Personal accounts cannot use Jira intake.',\n        },\n        403,\n      ),\n    };\n  }\n  return { tenant: { orgId: tenant.orgId, userId: tenant.userId } };\n}\n\n/**\n * Validate an opaque Jira pagination cursor from the query string. Cursors are\n * server-issued (`nextPageToken`), so anything outside a conservative\n * charset/length is rejected rather than forwarded to Jira.\n */\nfunction parseAfterCursor(raw: string | undefined): string | undefined | null {\n  if (raw === undefined || raw === '') return undefined;\n  if (raw.length > 512 || !/^[\\w+/=.:-]+$/.test(raw)) return null;\n  return raw;\n}\n\n/** Map a Jira read failure to the API response for the SPA. */\nfunction jiraFetchError(c: RouteContext, err: unknown) {\n  if (err instanceof JiraApiError && err.code === 'jira_auth_failed') {\n    return c.json(\n      {\n        error: 'jira_auth_failed',\n        message: 'Jira rejected the configured credentials. Check JIRA_EMAIL and JIRA_API_TOKEN.',\n      },\n      409,\n    );\n  }\n  return c.json({ error: 'jira_fetch_failed', message: err instanceof Error ? err.message : String(err) }, 502);\n}\n\n/**\n * Build the Jira routes as Mastra `apiRoutes`. When the feature is disabled,\n * returns only the `status` route so the SPA can detect the disabled state.\n */\nexport function buildJiraRoutes(options: MountJiraRoutesOptions): ApiRoute[] {\n  const routes: ApiRoute[] = [];\n  const { jira, auth, intake } = options;\n  const enabled = Boolean(jira) && auth.enabled();\n  const diagnostics = (): JiraFeatureDiagnostics => ({\n    jiraConfigured: Boolean(jira),\n    factoryAuthEnabled: auth.enabled(),\n    appDbConfigured: true,\n  });\n\n  // The status route is always registered so the SPA can detect the disabled state.\n  routes.push(\n    registerApiRoute('/web/jira/status', {\n      method: 'GET',\n      requiresAuth: false,\n      handler: async c => {\n        if (!enabled || !jira || !intake) {\n          return c.json({\n            enabled: false,\n            configured: Boolean(jira),\n            mode: 'direct',\n            site: null,\n            reason: 'missing_config',\n            diagnostics: diagnostics(),\n          });\n        }\n        await auth.ensureUser(loose(c));\n        const tenant = auth.tenant(loose(c));\n        if (!tenant) return c.json({ error: 'unauthorized', reason: 'auth_required' }, 401);\n\n        const site = new URL(jira.baseUrl).host;\n        if (!tenant.orgId) {\n          return c.json({\n            enabled: true,\n            configured: true,\n            mode: 'direct',\n            organizationRequired: true,\n            site,\n            reason: 'organization_required',\n            diagnostics: diagnostics(),\n          });\n        }\n\n        // Deployment-global credentials: configured means ready — there is no\n        // per-org connection step like Linear's OAuth.\n        return c.json({\n          enabled: true,\n          configured: true,\n          mode: 'direct',\n          site,\n          reason: 'ready',\n          diagnostics: diagnostics(),\n        });\n      },\n    }),\n  );\n\n  // Without the integration instance or the intake domain the feature can't\n  // serve org-scoped data — serve only the disabled `status` route.\n  if (!enabled || !jira || !intake) {\n    return routes;\n  }\n\n  // ── List the site's projects (Settings intake-source picker) ────────────\n  routes.push(\n    registerApiRoute('/web/jira/projects', {\n      method: 'GET',\n      requiresAuth: false,\n      handler: async c => {\n        const resolved = await resolveOrgTenant(loose(c), auth);\n        if ('response' in resolved) return resolved.response;\n\n        try {\n          const sources = await jira.intake.listSources(resolved.tenant);\n          return c.json({\n            projects: sources.map(source => ({\n              id: source.id,\n              name: source.name,\n              key: typeof source.metadata?.key === 'string' ? source.metadata.key : null,\n            })),\n          });\n        } catch (err) {\n          return jiraFetchError(loose(c), err);\n        }\n      },\n    }),\n  );\n\n  // ── List the site's active issues (cursor-paged) ────────────────────────\n  // Respects the caller's intake config: disabled Jira intake 404s the\n  // source, and an explicit project selection narrows the issue filter.\n  routes.push(\n    registerApiRoute('/web/jira/issues', {\n      method: 'GET',\n      requiresAuth: false,\n      handler: async c => {\n        const resolved = await resolveOrgTenant(loose(c), auth);\n        if ('response' in resolved) return resolved.response;\n\n        const after = parseAfterCursor(c.req.query('after'));\n        if (after === null) return c.json({ error: 'invalid_cursor' }, 400);\n        const factoryProjectId = c.req.query('factoryProjectId');\n        if (factoryProjectId && !UUID_RE.test(factoryProjectId)) {\n          return c.json({ error: 'invalid_factory_project_id' }, 400);\n        }\n\n        await intake.ensureReady();\n        const config = await intake.getConfig({ orgId: resolved.tenant.orgId, integrationIds: ['jira'] });\n        const selection = config.jira!;\n        if (!selection.enabled) {\n          return c.json({ error: 'jira_intake_disabled', message: 'Jira intake is turned off in Settings.' }, 404);\n        }\n\n        // No projects selected means nothing is synced — don't fan out to Jira.\n        const selectedIds = selection.sourceIds ?? [];\n        // A board request only ever sees the projects routed to a board of\n        // that Factory project; unscoped listing stays available to callers\n        // that don't view a specific board.\n        const intakeBoards = factoryProjectId\n          ? await scopeSourceIdsToProject({\n              intake,\n              orgId: resolved.tenant.orgId,\n              factoryProjectId,\n              selectedIds,\n            })\n          : null;\n        const projectIds = intakeBoards ? Object.keys(intakeBoards) : selectedIds;\n        if (projectIds.length === 0) {\n          return c.json({ issues: [], nextCursor: null });\n        }\n\n        try {\n          const { issues, nextCursor } = await jira.listActiveIssues(after, projectIds);\n          const issuePayload = issues.map(issue => ({\n            id: issue.id,\n            identifier: issue.identifier,\n            title: issue.title,\n            url: issue.url,\n            author: issue.author,\n            state: issue.state ?? '',\n            stateType: issue.stateType ?? '',\n            priorityLabel: issue.priority ?? '',\n            assignee: issue.assignee,\n            project: issue.source,\n            labels: issue.labels,\n            createdAt: issue.createdAt,\n            updatedAt: issue.updatedAt,\n            sourceId: issue.sourceId || null,\n          }));\n          if (factoryProjectId && intakeBoards && options.ingestFactoryIssues) {\n            await options.ingestFactoryIssues({\n              orgId: resolved.tenant.orgId,\n              userId: resolved.tenant.userId,\n              factoryProjectId,\n              issues: issuePayload.map(issue => ({ ...issue, site: null })),\n              intakeBoards,\n            });\n          }\n          return c.json({ issues: issuePayload, nextCursor });\n        } catch (err) {\n          return jiraFetchError(loose(c), err);\n        }\n      },\n    }),\n  );\n\n  routes.push(\n    registerApiRoute('/web/jira/issues/:identifier', {\n      method: 'GET',\n      requiresAuth: false,\n      handler: async c => {\n        const resolved = await resolveOrgTenant(loose(c), auth);\n        if ('response' in resolved) return resolved.response;\n\n        const identifier = c.req.param('identifier');\n        const factoryProjectId = c.req.query('factoryProjectId');\n        const issueRef = c.req.query('issueRef');\n        if (!ISSUE_KEY_RE.test(identifier)) return c.json({ error: 'invalid_issue_identifier' }, 400);\n        if (!factoryProjectId || !UUID_RE.test(factoryProjectId)) {\n          return c.json({ error: 'invalid_factory_project_id' }, 400);\n        }\n        if (!issueRef || issueRef.length > 2_048) return c.json({ error: 'invalid_issue_ref' }, 400);\n\n        await intake.ensureReady();\n        const config = await intake.getConfig({ orgId: resolved.tenant.orgId, integrationIds: ['jira'] });\n        const selection = config.jira!;\n        if (!selection.enabled) {\n          return c.json({ error: 'jira_intake_disabled', message: 'Jira intake is turned off in Settings.' }, 404);\n        }\n        const intakeBoards = await scopeSourceIdsToProject({\n          intake,\n          orgId: resolved.tenant.orgId,\n          factoryProjectId,\n          selectedIds: selection.sourceIds ?? [],\n        });\n        if (Object.keys(intakeBoards).length === 0) return c.json({ error: 'issue_not_found' }, 404);\n\n        try {\n          const issue = await jira.intake.getIssue({ connection: DEPLOYMENT_CONNECTION, issueId: issueRef });\n          // The issue's project must be a source routed to this Factory — an\n          // issue from an unbound project reads exactly like one that doesn't\n          // exist (same stance as the Linear detail route).\n          const routed = issue?.sourceId != null && issue.sourceId in intakeBoards;\n          if (!issue || issue.identifier.toUpperCase() !== identifier.toUpperCase() || !routed) {\n            return c.json({ error: 'issue_not_found' }, 404);\n          }\n          return c.json({\n            identifier: issue.identifier,\n            title: issue.title,\n            url: issue.url,\n            description: issue.description,\n          });\n        } catch (err) {\n          return jiraFetchError(loose(c), err);\n        }\n      },\n    }),\n  );\n\n  return routes;\n}\n"],"mappings":";;;;AA4BA,MAAM,UAAU;AAChB,MAAM,eAAe;;AAGrB,SAAS,MAAM,GAA0B;CACvC,OAAO;AACT;;;;;;;;;;;;;AA6CA,eAAe,wBAAwB,EACrC,QACA,OACA,kBACA,eAMkC;CAClC,MAAM,WAAW,IAAI,IAAI,WAAW;CACpC,MAAM,eAAuC,CAAC;CAC9C,KAAK,MAAM,WAAW,MAAM,OAAO,aAAa;EAAE;EAAO,eAAe;CAAO,CAAC,GAC9E,IAAI,QAAQ,qBAAqB,oBAAoB,QAAQ,SAAS,SAAS,IAAI,QAAQ,QAAQ,GACjG,aAAa,QAAQ,YAAY,QAAQ;CAG7C,OAAO;AACT;;;;;;AAOA,eAAe,iBACb,GACA,MACiF;CACjF,MAAM,KAAK,WAAW,CAAC;CACvB,MAAM,SAAS,KAAK,OAAO,CAAC;CAC5B,IAAI,CAAC,QAAQ,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,eAAe,GAAG,GAAG,EAAE;CACvE,IAAI,CAAC,OAAO,OACV,OAAO,EACL,UAAU,EAAE,KACV;EACE,OAAO;EACP,SAAS;CACX,GACA,GACF,EACF;CAEF,OAAO,EAAE,QAAQ;EAAE,OAAO,OAAO;EAAO,QAAQ,OAAO;CAAO,EAAE;AAClE;;;;;;AAOA,SAAS,iBAAiB,KAAoD;CAC5E,IAAI,QAAQ,KAAA,KAAa,QAAQ,IAAI,OAAO,KAAA;CAC5C,IAAI,IAAI,SAAS,OAAO,CAAC,gBAAgB,KAAK,GAAG,GAAG,OAAO;CAC3D,OAAO;AACT;;AAGA,SAAS,eAAe,GAAiB,KAAc;CACrD,IAAI,eAAe,gBAAgB,IAAI,SAAS,oBAC9C,OAAO,EAAE,KACP;EACE,OAAO;EACP,SAAS;CACX,GACA,GACF;CAEF,OAAO,EAAE,KAAK;EAAE,OAAO;EAAqB,SAAS,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;CAAE,GAAG,GAAG;AAC9G;;;;;AAMA,SAAgB,gBAAgB,SAA6C;CAC3E,MAAM,SAAqB,CAAC;CAC5B,MAAM,EAAE,MAAM,MAAM,WAAW;CAC/B,MAAM,UAAU,QAAQ,IAAI,KAAK,KAAK,QAAQ;CAC9C,MAAM,qBAA6C;EACjD,gBAAgB,QAAQ,IAAI;EAC5B,oBAAoB,KAAK,QAAQ;EACjC,iBAAiB;CACnB;CAGA,OAAO,KACL,iBAAiB,oBAAoB;EACnC,QAAQ;EACR,cAAc;EACd,SAAS,OAAM,MAAK;GAClB,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,QACxB,OAAO,EAAE,KAAK;IACZ,SAAS;IACT,YAAY,QAAQ,IAAI;IACxB,MAAM;IACN,MAAM;IACN,QAAQ;IACR,aAAa,YAAY;GAC3B,CAAC;GAEH,MAAM,KAAK,WAAW,MAAM,CAAC,CAAC;GAC9B,MAAM,SAAS,KAAK,OAAO,MAAM,CAAC,CAAC;GACnC,IAAI,CAAC,QAAQ,OAAO,EAAE,KAAK;IAAE,OAAO;IAAgB,QAAQ;GAAgB,GAAG,GAAG;GAElF,MAAM,OAAO,IAAI,IAAI,KAAK,OAAO,CAAC,CAAC;GACnC,IAAI,CAAC,OAAO,OACV,OAAO,EAAE,KAAK;IACZ,SAAS;IACT,YAAY;IACZ,MAAM;IACN,sBAAsB;IACtB;IACA,QAAQ;IACR,aAAa,YAAY;GAC3B,CAAC;GAKH,OAAO,EAAE,KAAK;IACZ,SAAS;IACT,YAAY;IACZ,MAAM;IACN;IACA,QAAQ;IACR,aAAa,YAAY;GAC3B,CAAC;EACH;CACF,CAAC,CACH;CAIA,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,QACxB,OAAO;CAIT,OAAO,KACL,iBAAiB,sBAAsB;EACrC,QAAQ;EACR,cAAc;EACd,SAAS,OAAM,MAAK;GAClB,MAAM,WAAW,MAAM,iBAAiB,MAAM,CAAC,GAAG,IAAI;GACtD,IAAI,cAAc,UAAU,OAAO,SAAS;GAE5C,IAAI;IACF,MAAM,UAAU,MAAM,KAAK,OAAO,YAAY,SAAS,MAAM;IAC7D,OAAO,EAAE,KAAK,EACZ,UAAU,QAAQ,KAAI,YAAW;KAC/B,IAAI,OAAO;KACX,MAAM,OAAO;KACb,KAAK,OAAO,OAAO,UAAU,QAAQ,WAAW,OAAO,SAAS,MAAM;IACxE,EAAE,EACJ,CAAC;GACH,SAAS,KAAK;IACZ,OAAO,eAAe,MAAM,CAAC,GAAG,GAAG;GACrC;EACF;CACF,CAAC,CACH;CAKA,OAAO,KACL,iBAAiB,oBAAoB;EACnC,QAAQ;EACR,cAAc;EACd,SAAS,OAAM,MAAK;GAClB,MAAM,WAAW,MAAM,iBAAiB,MAAM,CAAC,GAAG,IAAI;GACtD,IAAI,cAAc,UAAU,OAAO,SAAS;GAE5C,MAAM,QAAQ,iBAAiB,EAAE,IAAI,MAAM,OAAO,CAAC;GACnD,IAAI,UAAU,MAAM,OAAO,EAAE,KAAK,EAAE,OAAO,iBAAiB,GAAG,GAAG;GAClE,MAAM,mBAAmB,EAAE,IAAI,MAAM,kBAAkB;GACvD,IAAI,oBAAoB,CAAC,QAAQ,KAAK,gBAAgB,GACpD,OAAO,EAAE,KAAK,EAAE,OAAO,6BAA6B,GAAG,GAAG;GAG5D,MAAM,OAAO,YAAY;GAEzB,MAAM,aAAY,MADG,OAAO,UAAU;IAAE,OAAO,SAAS,OAAO;IAAO,gBAAgB,CAAC,MAAM;GAAE,CAAC,EAAA,CACvE;GACzB,IAAI,CAAC,UAAU,SACb,OAAO,EAAE,KAAK;IAAE,OAAO;IAAwB,SAAS;GAAyC,GAAG,GAAG;GAIzG,MAAM,cAAc,UAAU,aAAa,CAAC;GAI5C,MAAM,eAAe,mBACjB,MAAM,wBAAwB;IAC5B;IACA,OAAO,SAAS,OAAO;IACvB;IACA;GACF,CAAC,IACD;GACJ,MAAM,aAAa,eAAe,OAAO,KAAK,YAAY,IAAI;GAC9D,IAAI,WAAW,WAAW,GACxB,OAAO,EAAE,KAAK;IAAE,QAAQ,CAAC;IAAG,YAAY;GAAK,CAAC;GAGhD,IAAI;IACF,MAAM,EAAE,QAAQ,eAAe,MAAM,KAAK,iBAAiB,OAAO,UAAU;IAC5E,MAAM,eAAe,OAAO,KAAI,WAAU;KACxC,IAAI,MAAM;KACV,YAAY,MAAM;KAClB,OAAO,MAAM;KACb,KAAK,MAAM;KACX,QAAQ,MAAM;KACd,OAAO,MAAM,SAAS;KACtB,WAAW,MAAM,aAAa;KAC9B,eAAe,MAAM,YAAY;KACjC,UAAU,MAAM;KAChB,SAAS,MAAM;KACf,QAAQ,MAAM;KACd,WAAW,MAAM;KACjB,WAAW,MAAM;KACjB,UAAU,MAAM,YAAY;IAC9B,EAAE;IACF,IAAI,oBAAoB,gBAAgB,QAAQ,qBAC9C,MAAM,QAAQ,oBAAoB;KAChC,OAAO,SAAS,OAAO;KACvB,QAAQ,SAAS,OAAO;KACxB;KACA,QAAQ,aAAa,KAAI,WAAU;MAAE,GAAG;MAAO,MAAM;KAAK,EAAE;KAC5D;IACF,CAAC;IAEH,OAAO,EAAE,KAAK;KAAE,QAAQ;KAAc;IAAW,CAAC;GACpD,SAAS,KAAK;IACZ,OAAO,eAAe,MAAM,CAAC,GAAG,GAAG;GACrC;EACF;CACF,CAAC,CACH;CAEA,OAAO,KACL,iBAAiB,gCAAgC;EAC/C,QAAQ;EACR,cAAc;EACd,SAAS,OAAM,MAAK;GAClB,MAAM,WAAW,MAAM,iBAAiB,MAAM,CAAC,GAAG,IAAI;GACtD,IAAI,cAAc,UAAU,OAAO,SAAS;GAE5C,MAAM,aAAa,EAAE,IAAI,MAAM,YAAY;GAC3C,MAAM,mBAAmB,EAAE,IAAI,MAAM,kBAAkB;GACvD,MAAM,WAAW,EAAE,IAAI,MAAM,UAAU;GACvC,IAAI,CAAC,aAAa,KAAK,UAAU,GAAG,OAAO,EAAE,KAAK,EAAE,OAAO,2BAA2B,GAAG,GAAG;GAC5F,IAAI,CAAC,oBAAoB,CAAC,QAAQ,KAAK,gBAAgB,GACrD,OAAO,EAAE,KAAK,EAAE,OAAO,6BAA6B,GAAG,GAAG;GAE5D,IAAI,CAAC,YAAY,SAAS,SAAS,MAAO,OAAO,EAAE,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;GAE3F,MAAM,OAAO,YAAY;GAEzB,MAAM,aAAY,MADG,OAAO,UAAU;IAAE,OAAO,SAAS,OAAO;IAAO,gBAAgB,CAAC,MAAM;GAAE,CAAC,EAAA,CACvE;GACzB,IAAI,CAAC,UAAU,SACb,OAAO,EAAE,KAAK;IAAE,OAAO;IAAwB,SAAS;GAAyC,GAAG,GAAG;GAEzG,MAAM,eAAe,MAAM,wBAAwB;IACjD;IACA,OAAO,SAAS,OAAO;IACvB;IACA,aAAa,UAAU,aAAa,CAAC;GACvC,CAAC;GACD,IAAI,OAAO,KAAK,YAAY,CAAC,CAAC,WAAW,GAAG,OAAO,EAAE,KAAK,EAAE,OAAO,kBAAkB,GAAG,GAAG;GAE3F,IAAI;IACF,MAAM,QAAQ,MAAM,KAAK,OAAO,SAAS;KAAE,YAAY;KAAuB,SAAS;IAAS,CAAC;IAIjG,MAAM,SAAS,OAAO,YAAY,QAAQ,MAAM,YAAY;IAC5D,IAAI,CAAC,SAAS,MAAM,WAAW,YAAY,MAAM,WAAW,YAAY,KAAK,CAAC,QAC5E,OAAO,EAAE,KAAK,EAAE,OAAO,kBAAkB,GAAG,GAAG;IAEjD,OAAO,EAAE,KAAK;KACZ,YAAY,MAAM;KAClB,OAAO,MAAM;KACb,KAAK,MAAM;KACX,aAAa,MAAM;IACrB,CAAC;GACH,SAAS,KAAK;IACZ,OAAO,eAAe,MAAM,CAAC,GAAG,GAAG;GACrC;EACF;CACF,CAAC,CACH;CAEA,OAAO;AACT"}

package/dist/integrations/jira/rules.d.ts

@@ -0,0 +1,57 @@
+import type { BoardRegistry } from '../../boards/index.js';
+import type { FactoryProjectsStorage } from '../../storage/domains/projects/base.js';
+import type { WorkItemsStorage } from '../../storage/domains/work-items/base.js';
+import type { IntegrationContext } from '../base.js';
+import type { JiraEventRules } from './default-rules.js';
+export interface JiraIssueIngress {
+    /** Stable issue reference — direct Jira id or the Platform-encoded issue reference. */
+    id: string;
+    identifier: string;
+    title: string;
+    url: string;
+    state: string;
+    stateType: string;
+    priorityLabel: string;
+    assignee: string | null;
+    /** Display name of the Jira reporter, when available. */
+    author: string | null;
+    /** Jira project key the issue belongs to, when available. */
+    project: string | null;
+    /** Jira site host the issue was read from, when available. */
+    site: string | null;
+    labels: string[];
+    createdAt: string;
+    updatedAt: string;
+    /** Jira source the issue was read from; resolves the bound board via `intakeBoards`. */
+    sourceId?: string | null;
+}
+export interface JiraRulesOptions {
+    projects: Pick<FactoryProjectsStorage, 'get'>;
+    storage: WorkItemsStorage;
+    configVersion: string;
+    boards: BoardRegistry;
+    jiraRules: JiraEventRules;
+}
+export interface JiraRulesIngress {
+    orgId: string;
+    userId: string;
+    factoryProjectId: string;
+    issues: JiraIssueIngress[];
+    /** Board id per bound Jira source id, from the project's intake bindings. */
+    intakeBoards?: Readonly<Record<string, string>>;
+}
+type IngressStatus = 'committed' | 'replayed' | 'missing';
+export declare class JiraRules {
+    #private;
+    private readonly options;
+    constructor(options: JiraRulesOptions);
+    ingest(input: JiraRulesIngress): Promise<{
+        status: IngressStatus;
+        ingested: number;
+    }>;
+}
+export declare function attachJiraRules(jira: {
+    readonly rules: JiraEventRules;
+}, context: IntegrationContext): ((input: JiraRulesIngress) => Promise<unknown>) | undefined;
+export {};
+//# sourceMappingURL=rules.d.ts.map

package/dist/integrations/jira/rules.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rules.d.ts","sourceRoot":"","sources":["../../../src/integrations/jira/rules.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAG3D,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,wCAAwC,CAAC;AACrF,OAAO,KAAK,EAAe,gBAAgB,EAAE,MAAM,0CAA0C,CAAC;AAC9F,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAErD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAkBzD,MAAM,WAAW,gBAAgB;IAC/B,uFAAuF;IACvF,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,yDAAyD;IACzD,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,6DAA6D;IAC7D,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,8DAA8D;IAC9D,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,wFAAwF;IACxF,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,IAAI,CAAC,sBAAsB,EAAE,KAAK,CAAC,CAAC;IAC9C,OAAO,EAAE,gBAAgB,CAAC;IAC1B,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,aAAa,CAAC;IACtB,SAAS,EAAE,cAAc,CAAC;CAC3B;AAED,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,gBAAgB,EAAE,MAAM,CAAC;IACzB,MAAM,EAAE,gBAAgB,EAAE,CAAC;IAC3B,6EAA6E;IAC7E,YAAY,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CACjD;AAED,KAAK,aAAa,GAAG,WAAW,GAAG,UAAU,GAAG,SAAS,CAAC;AAE1D,qBAAa,SAAS;;IACR,OAAO,CAAC,QAAQ,CAAC,OAAO;gBAAP,OAAO,EAAE,gBAAgB;IAEhD,MAAM,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,aAAa,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;CAqI5F;AAED,wBAAgB,eAAe,CAC7B,IAAI,EAAE;IAAE,QAAQ,CAAC,KAAK,EAAE,cAAc,CAAA;CAAE,EACxC,OAAO,EAAE,kBAAkB,GAC1B,CAAC,CAAC,KAAK,EAAE,gBAAgB,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,SAAS,CAU7D"}

package/dist/integrations/jira/rules.js

@@ -0,0 +1,175 @@
+import { assertFactoryDecisionTarget, validateFactoryRuleDecisions } from "../../rules/validation.js";
+import { boardForWorkItem, isTerminalWorkItem } from "../../boards/semantics.js";
+import "../../boards/index.js";
+import { jiraClaimKey } from "./claim.js";
+//#region src/integrations/jira/rules.ts
+const RULE_TIMEOUT_MS = 5e3;
+async function withRuleTimeout(promise) {
+	let timeout;
+	try {
+		return await Promise.race([promise, new Promise((_, reject) => {
+			timeout = setTimeout(() => reject(/* @__PURE__ */ new Error("FACTORY_RULE_TIMEOUT")), RULE_TIMEOUT_MS);
+		})]);
+	} finally {
+		if (timeout) clearTimeout(timeout);
+	}
+}
+var JiraRules = class {
+	options;
+	constructor(options) {
+		this.options = options;
+	}
+	async ingest(input) {
+		if (!await this.options.projects.get({
+			orgId: input.orgId,
+			id: input.factoryProjectId
+		})) return {
+			status: "missing",
+			ingested: 0
+		};
+		const items = await this.options.storage.list({
+			orgId: input.orgId,
+			factoryProjectId: input.factoryProjectId
+		});
+		const itemsBySourceKey = new Map(items.map((item) => [item.externalSource?.externalId, item]));
+		const itemsByClaimKey = new Map(items.filter((item) => item.claimKey).map((item) => [item.claimKey, item]));
+		const statuses = [];
+		for (const issue of input.issues) {
+			const relatedItem = itemsByClaimKey.get(jiraClaimKey(issue.id)) ?? itemsBySourceKey.get(issue.id);
+			if (!relatedItem && await this.#heldElsewhere(input, issue)) {
+				statuses.push("missing");
+				continue;
+			}
+			statuses.push(await this.#ingestIssue(input, issue, relatedItem));
+		}
+		if (statuses.some((status) => status === "committed")) return {
+			status: "committed",
+			ingested: statuses.length
+		};
+		if (statuses.some((status) => status === "replayed")) return {
+			status: "replayed",
+			ingested: statuses.length
+		};
+		return {
+			status: "missing",
+			ingested: statuses.length
+		};
+	}
+	async #heldElsewhere(input, issue) {
+		const heldLive = (row) => row.factoryProjectId !== input.factoryProjectId && !isTerminalWorkItem(this.options.boards, row);
+		const claimant = await this.options.storage.getByClaimKey({
+			orgId: input.orgId,
+			claimKey: jiraClaimKey(issue.id)
+		});
+		if (claimant && heldLive(claimant)) return true;
+		return (await this.options.storage.listBySource({
+			orgId: input.orgId,
+			source: {
+				integrationId: "jira",
+				type: "issue",
+				externalId: issue.id
+			}
+		})).some(heldLive);
+	}
+	async #ingestIssue(input, issue, relatedItem) {
+		const ingressId = `jira:${issue.id}:${issue.updatedAt}`;
+		const actor = {
+			type: "human",
+			id: input.userId
+		};
+		const isClosed = issue.stateType === "completed" || issue.stateType === "canceled";
+		if (isClosed && !relatedItem) return "missing";
+		const event = isClosed ? "issueClosed" : "issueObserved";
+		const boundBoardId = issue.sourceId ? input.intakeBoards?.[issue.sourceId] : void 0;
+		const boundBoard = boundBoardId ? this.options.boards.get(boundBoardId) : void 0;
+		const context = {
+			tenant: {
+				orgId: input.orgId,
+				projectId: input.factoryProjectId
+			},
+			actor,
+			ingress: {
+				type: "jira",
+				id: ingressId
+			},
+			cause: `jira.${event}`,
+			causalChain: [],
+			configVersion: this.options.configVersion,
+			...relatedItem ? {
+				item: {
+					id: relatedItem.id,
+					source: "jira-issue",
+					sourceKey: relatedItem.externalSource?.externalId ?? null,
+					parentWorkItemId: relatedItem.parentWorkItemId,
+					title: relatedItem.title,
+					url: relatedItem.externalSource?.url ?? null,
+					stages: relatedItem.stages,
+					acceptedAt: relatedItem.acceptedAt,
+					metadata: relatedItem.metadata
+				},
+				board: boardForWorkItem(relatedItem),
+				itemRevision: relatedItem.revision
+			} : {},
+			...boundBoard ? { intake: {
+				board: boundBoard.id,
+				initialPhase: boundBoard.initialPhase
+			} } : {},
+			event,
+			issue
+		};
+		const rule = this.options.jiraRules[context.event];
+		let decision;
+		let decisions = [];
+		let outcome = { status: "accepted" };
+		try {
+			decision = rule ? await withRuleTimeout(Promise.resolve(rule(Object.freeze(context)))) : void 0;
+			if (decision?.type === "reject") outcome = {
+				status: "rejected",
+				code: decision.code,
+				reason: decision.reason
+			};
+			else if (decision) decisions = validateFactoryRuleDecisions([decision]).map((entry) => {
+				assertFactoryDecisionTarget(entry, this.options.boards, relatedItem ? boardForWorkItem(relatedItem) : void 0);
+				return { ...entry };
+			});
+		} catch (error) {
+			const timedOut = error instanceof Error && error.message === "FACTORY_RULE_TIMEOUT";
+			outcome = {
+				status: "rejected",
+				code: timedOut ? "timeout" : "rule_error",
+				reason: timedOut ? "Factory rule evaluation timed out." : error instanceof Error ? error.message.slice(0, 2e3) : "Factory Jira rule failed."
+			};
+		}
+		return (await this.options.storage.commitRuleEvaluation({
+			orgId: input.orgId,
+			factoryProjectId: input.factoryProjectId,
+			workItemId: relatedItem?.id ?? null,
+			ingress: {
+				identity: ingressId,
+				triggerType: "jira.issueObserved"
+			},
+			configVersion: this.options.configVersion,
+			expectedRevision: relatedItem?.revision ?? null,
+			actor,
+			outcome,
+			decisions,
+			causalChain: [],
+			now: /* @__PURE__ */ new Date()
+		})).status;
+	}
+};
+function attachJiraRules(jira, context) {
+	if (!context.runtime) return void 0;
+	const rules = new JiraRules({
+		projects: context.storage.projects,
+		storage: context.runtime.workItems,
+		configVersion: context.runtime.configVersion,
+		boards: context.runtime.boards,
+		jiraRules: jira.rules
+	});
+	return (input) => rules.ingest(input);
+}
+//#endregion
+export { JiraRules, attachJiraRules };
+
+//# sourceMappingURL=rules.js.map

package/dist/integrations/jira/rules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rules.js","names":["#heldElsewhere","#ingestIssue"],"sources":["../../../src/integrations/jira/rules.ts"],"sourcesContent":["import { boardForWorkItem, isTerminalWorkItem } from '../../boards/index.js';\nimport type { BoardRegistry } from '../../boards/index.js';\nimport type { FactoryJiraRuleContext, FactoryRuleDecision } from '../../rules/types.js';\nimport { assertFactoryDecisionTarget, validateFactoryRuleDecisions } from '../../rules/validation.js';\nimport type { FactoryProjectsStorage } from '../../storage/domains/projects/base.js';\nimport type { WorkItemRow, WorkItemsStorage } from '../../storage/domains/work-items/base.js';\nimport type { IntegrationContext } from '../base.js';\nimport { jiraClaimKey } from './claim.js';\nimport type { JiraEventRules } from './default-rules.js';\n\nconst RULE_TIMEOUT_MS = 5_000;\n\nasync function withRuleTimeout<T>(promise: Promise<T>): Promise<T> {\n  let timeout: ReturnType<typeof setTimeout> | undefined;\n  try {\n    return await Promise.race([\n      promise,\n      new Promise<never>((_, reject) => {\n        timeout = setTimeout(() => reject(new Error('FACTORY_RULE_TIMEOUT')), RULE_TIMEOUT_MS);\n      }),\n    ]);\n  } finally {\n    if (timeout) clearTimeout(timeout);\n  }\n}\n\nexport interface JiraIssueIngress {\n  /** Stable issue reference — direct Jira id or the Platform-encoded issue reference. */\n  id: string;\n  identifier: string;\n  title: string;\n  url: string;\n  state: string;\n  stateType: string;\n  priorityLabel: string;\n  assignee: string | null;\n  /** Display name of the Jira reporter, when available. */\n  author: string | null;\n  /** Jira project key the issue belongs to, when available. */\n  project: string | null;\n  /** Jira site host the issue was read from, when available. */\n  site: string | null;\n  labels: string[];\n  createdAt: string;\n  updatedAt: string;\n  /** Jira source the issue was read from; resolves the bound board via `intakeBoards`. */\n  sourceId?: string | null;\n}\n\nexport interface JiraRulesOptions {\n  projects: Pick<FactoryProjectsStorage, 'get'>;\n  storage: WorkItemsStorage;\n  configVersion: string;\n  boards: BoardRegistry;\n  jiraRules: JiraEventRules;\n}\n\nexport interface JiraRulesIngress {\n  orgId: string;\n  userId: string;\n  factoryProjectId: string;\n  issues: JiraIssueIngress[];\n  /** Board id per bound Jira source id, from the project's intake bindings. */\n  intakeBoards?: Readonly<Record<string, string>>;\n}\n\ntype IngressStatus = 'committed' | 'replayed' | 'missing';\n\nexport class JiraRules {\n  constructor(private readonly options: JiraRulesOptions) {}\n\n  async ingest(input: JiraRulesIngress): Promise<{ status: IngressStatus; ingested: number }> {\n    const project = await this.options.projects.get({ orgId: input.orgId, id: input.factoryProjectId });\n    if (!project) return { status: 'missing', ingested: 0 };\n\n    const items = await this.options.storage.list({ orgId: input.orgId, factoryProjectId: input.factoryProjectId });\n    const itemsBySourceKey = new Map(items.map(item => [item.externalSource?.externalId, item]));\n    const itemsByClaimKey = new Map(items.filter(item => item.claimKey).map(item => [item.claimKey, item]));\n    const statuses: IngressStatus[] = [];\n    for (const issue of input.issues) {\n      // The claim finds the card even after a metadata drift; the raw issue\n      // reference covers cards filed before claims existed.\n      const relatedItem = itemsByClaimKey.get(jiraClaimKey(issue.id)) ?? itemsBySourceKey.get(issue.id);\n      // One live card per Jira issue per org. The store's claim index is the\n      // guarantee; this check spares the dispatcher a refused upsert.\n      if (!relatedItem && (await this.#heldElsewhere(input, issue))) {\n        statuses.push('missing');\n        continue;\n      }\n      statuses.push(await this.#ingestIssue(input, issue, relatedItem));\n    }\n    if (statuses.some(status => status === 'committed')) return { status: 'committed', ingested: statuses.length };\n    if (statuses.some(status => status === 'replayed')) return { status: 'replayed', ingested: statuses.length };\n    return { status: 'missing', ingested: statuses.length };\n  }\n\n  async #heldElsewhere(input: JiraRulesIngress, issue: JiraIssueIngress): Promise<boolean> {\n    const heldLive = (row: WorkItemRow) =>\n      row.factoryProjectId !== input.factoryProjectId && !isTerminalWorkItem(this.options.boards, row);\n    const claimant = await this.options.storage.getByClaimKey({\n      orgId: input.orgId,\n      claimKey: jiraClaimKey(issue.id),\n    });\n    if (claimant && heldLive(claimant)) return true;\n    // Cards filed before claims existed carry only the issue reference.\n    const legacy = await this.options.storage.listBySource({\n      orgId: input.orgId,\n      source: { integrationId: 'jira', type: 'issue', externalId: issue.id },\n    });\n    return legacy.some(heldLive);\n  }\n\n  async #ingestIssue(\n    input: JiraRulesIngress,\n    issue: JiraIssueIngress,\n    relatedItem: WorkItemRow | undefined,\n  ): Promise<IngressStatus> {\n    const ingressId = `jira:${issue.id}:${issue.updatedAt}`;\n    const actor = { type: 'human' as const, id: input.userId };\n\n    // Closed issues without existing work items should not create new ones.\n    const isClosed = issue.stateType === 'completed' || issue.stateType === 'canceled';\n    if (isClosed && !relatedItem) {\n      return 'missing';\n    }\n\n    const event = isClosed ? 'issueClosed' : 'issueObserved';\n    const boundBoardId = issue.sourceId ? input.intakeBoards?.[issue.sourceId] : undefined;\n    const boundBoard = boundBoardId ? this.options.boards.get(boundBoardId) : undefined;\n    const context: FactoryJiraRuleContext = {\n      tenant: { orgId: input.orgId, projectId: input.factoryProjectId },\n      actor,\n      ingress: { type: 'jira', id: ingressId },\n      cause: `jira.${event}`,\n      causalChain: [],\n      configVersion: this.options.configVersion,\n      ...(relatedItem\n        ? {\n            item: {\n              id: relatedItem.id,\n              source: 'jira-issue',\n              sourceKey: relatedItem.externalSource?.externalId ?? null,\n              parentWorkItemId: relatedItem.parentWorkItemId,\n              title: relatedItem.title,\n              url: relatedItem.externalSource?.url ?? null,\n              stages: relatedItem.stages,\n              acceptedAt: relatedItem.acceptedAt,\n              metadata: relatedItem.metadata,\n            },\n            board: boardForWorkItem(relatedItem),\n            itemRevision: relatedItem.revision,\n          }\n        : {}),\n      ...(boundBoard ? { intake: { board: boundBoard.id, initialPhase: boundBoard.initialPhase } } : {}),\n      event,\n      issue,\n    };\n\n    const rule = this.options.jiraRules[context.event];\n    let decision: FactoryRuleDecision | void;\n    let decisions: Record<string, unknown>[] = [];\n    let outcome: { status: 'accepted' | 'rejected'; code?: string; reason?: string } = { status: 'accepted' };\n    try {\n      decision = rule ? await withRuleTimeout(Promise.resolve(rule(Object.freeze(context)))) : undefined;\n      if (decision?.type === 'reject') {\n        outcome = { status: 'rejected', code: decision.code, reason: decision.reason };\n      } else if (decision) {\n        decisions = validateFactoryRuleDecisions([decision]).map(entry => {\n          assertFactoryDecisionTarget(\n            entry,\n            this.options.boards,\n            relatedItem ? boardForWorkItem(relatedItem) : undefined,\n          );\n          return { ...entry };\n        });\n      }\n    } catch (error) {\n      const timedOut = error instanceof Error && error.message === 'FACTORY_RULE_TIMEOUT';\n      outcome = {\n        status: 'rejected',\n        code: timedOut ? 'timeout' : 'rule_error',\n        reason: timedOut\n          ? 'Factory rule evaluation timed out.'\n          : error instanceof Error\n            ? error.message.slice(0, 2_000)\n            : 'Factory Jira rule failed.',\n      };\n    }\n\n    const committed = await this.options.storage.commitRuleEvaluation({\n      orgId: input.orgId,\n      factoryProjectId: input.factoryProjectId,\n      workItemId: relatedItem?.id ?? null,\n      ingress: { identity: ingressId, triggerType: 'jira.issueObserved' },\n      configVersion: this.options.configVersion,\n      expectedRevision: relatedItem?.revision ?? null,\n      actor,\n      outcome,\n      decisions,\n      causalChain: [],\n      now: new Date(),\n    });\n    return committed.status;\n  }\n}\n\nexport function attachJiraRules(\n  jira: { readonly rules: JiraEventRules },\n  context: IntegrationContext,\n): ((input: JiraRulesIngress) => Promise<unknown>) | undefined {\n  if (!context.runtime) return undefined;\n  const rules = new JiraRules({\n    projects: context.storage.projects,\n    storage: context.runtime.workItems,\n    configVersion: context.runtime.configVersion,\n    boards: context.runtime.boards,\n    jiraRules: jira.rules,\n  });\n  return input => rules.ingest(input);\n}\n"],"mappings":";;;;;AAUA,MAAM,kBAAkB;AAExB,eAAe,gBAAmB,SAAiC;CACjE,IAAI;CACJ,IAAI;EACF,OAAO,MAAM,QAAQ,KAAK,CACxB,SACA,IAAI,SAAgB,GAAG,WAAW;GAChC,UAAU,iBAAiB,uBAAO,IAAI,MAAM,sBAAsB,CAAC,GAAG,eAAe;EACvF,CAAC,CACH,CAAC;CACH,UAAU;EACR,IAAI,SAAS,aAAa,OAAO;CACnC;AACF;AA4CA,IAAa,YAAb,MAAuB;CACQ;CAA7B,YAAY,SAA4C;EAA3B,KAAA,UAAA;CAA4B;CAEzD,MAAM,OAAO,OAA+E;EAE1F,IAAI,CAAC,MADiB,KAAK,QAAQ,SAAS,IAAI;GAAE,OAAO,MAAM;GAAO,IAAI,MAAM;EAAiB,CAAC,GACpF,OAAO;GAAE,QAAQ;GAAW,UAAU;EAAE;EAEtD,MAAM,QAAQ,MAAM,KAAK,QAAQ,QAAQ,KAAK;GAAE,OAAO,MAAM;GAAO,kBAAkB,MAAM;EAAiB,CAAC;EAC9G,MAAM,mBAAmB,IAAI,IAAI,MAAM,KAAI,SAAQ,CAAC,KAAK,gBAAgB,YAAY,IAAI,CAAC,CAAC;EAC3F,MAAM,kBAAkB,IAAI,IAAI,MAAM,QAAO,SAAQ,KAAK,QAAQ,CAAC,CAAC,KAAI,SAAQ,CAAC,KAAK,UAAU,IAAI,CAAC,CAAC;EACtG,MAAM,WAA4B,CAAC;EACnC,KAAK,MAAM,SAAS,MAAM,QAAQ;GAGhC,MAAM,cAAc,gBAAgB,IAAI,aAAa,MAAM,EAAE,CAAC,KAAK,iBAAiB,IAAI,MAAM,EAAE;GAGhG,IAAI,CAAC,eAAgB,MAAM,KAAKA,eAAe,OAAO,KAAK,GAAI;IAC7D,SAAS,KAAK,SAAS;IACvB;GACF;GACA,SAAS,KAAK,MAAM,KAAKC,aAAa,OAAO,OAAO,WAAW,CAAC;EAClE;EACA,IAAI,SAAS,MAAK,WAAU,WAAW,WAAW,GAAG,OAAO;GAAE,QAAQ;GAAa,UAAU,SAAS;EAAO;EAC7G,IAAI,SAAS,MAAK,WAAU,WAAW,UAAU,GAAG,OAAO;GAAE,QAAQ;GAAY,UAAU,SAAS;EAAO;EAC3G,OAAO;GAAE,QAAQ;GAAW,UAAU,SAAS;EAAO;CACxD;CAEA,MAAMD,eAAe,OAAyB,OAA2C;EACvF,MAAM,YAAY,QAChB,IAAI,qBAAqB,MAAM,oBAAoB,CAAC,mBAAmB,KAAK,QAAQ,QAAQ,GAAG;EACjG,MAAM,WAAW,MAAM,KAAK,QAAQ,QAAQ,cAAc;GACxD,OAAO,MAAM;GACb,UAAU,aAAa,MAAM,EAAE;EACjC,CAAC;EACD,IAAI,YAAY,SAAS,QAAQ,GAAG,OAAO;EAM3C,QAAO,MAJc,KAAK,QAAQ,QAAQ,aAAa;GACrD,OAAO,MAAM;GACb,QAAQ;IAAE,eAAe;IAAQ,MAAM;IAAS,YAAY,MAAM;GAAG;EACvE,CAAC,EAAA,CACa,KAAK,QAAQ;CAC7B;CAEA,MAAMC,aACJ,OACA,OACA,aACwB;EACxB,MAAM,YAAY,QAAQ,MAAM,GAAG,GAAG,MAAM;EAC5C,MAAM,QAAQ;GAAE,MAAM;GAAkB,IAAI,MAAM;EAAO;EAGzD,MAAM,WAAW,MAAM,cAAc,eAAe,MAAM,cAAc;EACxE,IAAI,YAAY,CAAC,aACf,OAAO;EAGT,MAAM,QAAQ,WAAW,gBAAgB;EACzC,MAAM,eAAe,MAAM,WAAW,MAAM,eAAe,MAAM,YAAY,KAAA;EAC7E,MAAM,aAAa,eAAe,KAAK,QAAQ,OAAO,IAAI,YAAY,IAAI,KAAA;EAC1E,MAAM,UAAkC;GACtC,QAAQ;IAAE,OAAO,MAAM;IAAO,WAAW,MAAM;GAAiB;GAChE;GACA,SAAS;IAAE,MAAM;IAAQ,IAAI;GAAU;GACvC,OAAO,QAAQ;GACf,aAAa,CAAC;GACd,eAAe,KAAK,QAAQ;GAC5B,GAAI,cACA;IACE,MAAM;KACJ,IAAI,YAAY;KAChB,QAAQ;KACR,WAAW,YAAY,gBAAgB,cAAc;KACrD,kBAAkB,YAAY;KAC9B,OAAO,YAAY;KACnB,KAAK,YAAY,gBAAgB,OAAO;KACxC,QAAQ,YAAY;KACpB,YAAY,YAAY;KACxB,UAAU,YAAY;IACxB;IACA,OAAO,iBAAiB,WAAW;IACnC,cAAc,YAAY;GAC5B,IACA,CAAC;GACL,GAAI,aAAa,EAAE,QAAQ;IAAE,OAAO,WAAW;IAAI,cAAc,WAAW;GAAa,EAAE,IAAI,CAAC;GAChG;GACA;EACF;EAEA,MAAM,OAAO,KAAK,QAAQ,UAAU,QAAQ;EAC5C,IAAI;EACJ,IAAI,YAAuC,CAAC;EAC5C,IAAI,UAA+E,EAAE,QAAQ,WAAW;EACxG,IAAI;GACF,WAAW,OAAO,MAAM,gBAAgB,QAAQ,QAAQ,KAAK,OAAO,OAAO,OAAO,CAAC,CAAC,CAAC,IAAI,KAAA;GACzF,IAAI,UAAU,SAAS,UACrB,UAAU;IAAE,QAAQ;IAAY,MAAM,SAAS;IAAM,QAAQ,SAAS;GAAO;QACxE,IAAI,UACT,YAAY,6BAA6B,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAI,UAAS;IAChE,4BACE,OACA,KAAK,QAAQ,QACb,cAAc,iBAAiB,WAAW,IAAI,KAAA,CAChD;IACA,OAAO,EAAE,GAAG,MAAM;GACpB,CAAC;EAEL,SAAS,OAAO;GACd,MAAM,WAAW,iBAAiB,SAAS,MAAM,YAAY;GAC7D,UAAU;IACR,QAAQ;IACR,MAAM,WAAW,YAAY;IAC7B,QAAQ,WACJ,uCACA,iBAAiB,QACf,MAAM,QAAQ,MAAM,GAAG,GAAK,IAC5B;GACR;EACF;EAeA,QAAO,MAbiB,KAAK,QAAQ,QAAQ,qBAAqB;GAChE,OAAO,MAAM;GACb,kBAAkB,MAAM;GACxB,YAAY,aAAa,MAAM;GAC/B,SAAS;IAAE,UAAU;IAAW,aAAa;GAAqB;GAClE,eAAe,KAAK,QAAQ;GAC5B,kBAAkB,aAAa,YAAY;GAC3C;GACA;GACA;GACA,aAAa,CAAC;GACd,qBAAK,IAAI,KAAK;EAChB,CAAC,EAAA,CACgB;CACnB;AACF;AAEA,SAAgB,gBACd,MACA,SAC6D;CAC7D,IAAI,CAAC,QAAQ,SAAS,OAAO,KAAA;CAC7B,MAAM,QAAQ,IAAI,UAAU;EAC1B,UAAU,QAAQ,QAAQ;EAC1B,SAAS,QAAQ,QAAQ;EACzB,eAAe,QAAQ,QAAQ;EAC/B,QAAQ,QAAQ,QAAQ;EACxB,WAAW,KAAK;CAClB,CAAC;CACD,QAAO,UAAS,MAAM,OAAO,KAAK;AACpC"}

package/dist/integrations/linear/claim.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Org-wide ownership key for a Linear issue's Factory card. Keyed by the issue's
+ * stable UUID, never its human identifier: identifiers change when an issue
+ * moves between teams, and the UUID is unique across every Linear workspace, so
+ * one key names one issue no matter which workspace or source it was read from.
+ */
+export declare function linearClaimKey(issueId: string): string;
+//# sourceMappingURL=claim.d.ts.map

package/dist/integrations/linear/claim.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"claim.d.ts","sourceRoot":"","sources":["../../../src/integrations/linear/claim.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAEtD"}

package/dist/integrations/linear/claim.js

@@ -0,0 +1,14 @@
+//#region src/integrations/linear/claim.ts
+/**
+* Org-wide ownership key for a Linear issue's Factory card. Keyed by the issue's
+* stable UUID, never its human identifier: identifiers change when an issue
+* moves between teams, and the UUID is unique across every Linear workspace, so
+* one key names one issue no matter which workspace or source it was read from.
+*/
+function linearClaimKey(issueId) {
+	return `linear:issue:${issueId}`;
+}
+//#endregion
+export { linearClaimKey };
+
+//# sourceMappingURL=claim.js.map

package/dist/integrations/linear/claim.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claim.js","names":[],"sources":["../../../src/integrations/linear/claim.ts"],"sourcesContent":["/**\n * Org-wide ownership key for a Linear issue's Factory card. Keyed by the issue's\n * stable UUID, never its human identifier: identifiers change when an issue\n * moves between teams, and the UUID is unique across every Linear workspace, so\n * one key names one issue no matter which workspace or source it was read from.\n */\nexport function linearClaimKey(issueId: string): string {\n  return `linear:issue:${issueId}`;\n}\n"],"mappings":";;;;;;;AAMA,SAAgB,eAAe,SAAyB;CACtD,OAAO,gBAAgB;AACzB"}

package/dist/integrations/linear/default-rules.d.ts

@@ -7,6 +7,7 @@ declare function linearIssueObserved(context: FactoryLinearRuleContext): {
     readonly board: string;
     readonly source: "linear-issue";
     readonly sourceKey: `linear:${string}`;
+    readonly claimKey: string;
     readonly title: `${string}: ${string}`;
     readonly url: string;
     readonly stage: string;

package/dist/integrations/linear/default-rules.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"default-rules.d.ts","sourceRoot":"","sources":["../../../src/integrations/linear/default-rules.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAEjH,MAAM,MAAM,mBAAmB,GAAG,OAAO,CACvC,MAAM,CAAC,sBAAsB,EAAE,kBAAkB,CAAC,wBAAwB,CAAC,GAAG,IAAI,GAAG,SAAS,CAAC,CAChG,CAAC;AACF,MAAM,MAAM,gBAAgB,GAAG,QAAQ,CACrC,MAAM,CAAC,sBAAsB,EAAE,kBAAkB,CAAC,wBAAwB,CAAC,GAAG,IAAI,CAAC,CACpF,CAAC;AAEF,iBAAS,mBAAmB,CAAC,OAAO,EAAE,wBAAwB;;;;;;;;;;;;;;;;;;;;;;yBAuBnB,MAAM,EAAE;;cAKlD;AAED,iBAAS,iBAAiB,CAAC,OAAO,EAAE,wBAAwB;;;;;;;;cAkB3D;AAED,eAAO,MAAM,kBAAkB;;;EAGF,CAAC;AAE9B,wBAAgB,kBAAkB,CAAC,SAAS,CAAC,EAAE,mBAAmB,GAAG,gBAAgB,CAsBpF"}
+{"version":3,"file":"default-rules.d.ts","sourceRoot":"","sources":["../../../src/integrations/linear/default-rules.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAGjH,MAAM,MAAM,mBAAmB,GAAG,OAAO,CACvC,MAAM,CAAC,sBAAsB,EAAE,kBAAkB,CAAC,wBAAwB,CAAC,GAAG,IAAI,GAAG,SAAS,CAAC,CAChG,CAAC;AACF,MAAM,MAAM,gBAAgB,GAAG,QAAQ,CACrC,MAAM,CAAC,sBAAsB,EAAE,kBAAkB,CAAC,wBAAwB,CAAC,GAAG,IAAI,CAAC,CACpF,CAAC;AAEF,iBAAS,mBAAmB,CAAC,OAAO,EAAE,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;yBAwBnB,MAAM,EAAE;;cAKlD;AAED,iBAAS,iBAAiB,CAAC,OAAO,EAAE,wBAAwB;;;;;;;;cAkB3D;AAED,eAAO,MAAM,kBAAkB;;;EAGF,CAAC;AAE9B,wBAAgB,kBAAkB,CAAC,SAAS,CAAC,EAAE,mBAAmB,GAAG,gBAAgB,CAsBpF"}

package/dist/integrations/linear/default-rules.js

@@ -1,3 +1,4 @@
+import { linearClaimKey } from "./claim.js";
 //#region src/integrations/linear/default-rules.ts
 function linearIssueObserved(context) {
 	if (context.item) return;
@@ -7,6 +8,7 @@ function linearIssueObserved(context) {
 		board: context.intake?.board ?? "work",
 		source: "linear-issue",
 		sourceKey: `linear:${context.issue.identifier}`,
+		claimKey: linearClaimKey(context.issue.id),
 		title: `${context.issue.identifier}: ${context.issue.title}`,
 		url: context.issue.url,
 		stage: context.intake?.initialPhase ?? "triage",