@mastra/factory 0.18.0 → 0.18.1-alpha.0

package/dist/integrations/github/default-rules.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"default-rules.d.ts","sourceRoot":"","sources":["../../../src/integrations/github/default-rules.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAEjH,MAAM,MAAM,mBAAmB,GAAG,OAAO,CACvC,MAAM,CAAC,sBAAsB,EAAE,kBAAkB,CAAC,wBAAwB,CAAC,GAAG,IAAI,GAAG,SAAS,CAAC,CAChG,CAAC;AACF,MAAM,MAAM,gBAAgB,GAAG,QAAQ,CACrC,MAAM,CAAC,sBAAsB,EAAE,kBAAkB,CAAC,wBAAwB,CAAC,GAAG,IAAI,CAAC,CACpF,CAAC;AAUF,iBAAS,mBAAmB,CAAC,OAAO,EAAE,wBAAwB;;;;;;cA4B7D;AASD,iBAAS,WAAW,CAAC,OAAO,EAAE,wBAAwB;;;;;;;;;;;;;;;;;;;cA0BrD;AAED,iBAAS,WAAW,CAAC,OAAO,EAAE,wBAAwB;;;;;;;;cAqBrD;AAwCD,iBAAS,iBAAiB,CAAC,OAAO,EAAE,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;cA8B3D;AAED,iBAAS,iBAAiB,CAAC,OAAO,EAAE,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;cAwC3D;AAED,iBAAS,qBAAqB,CAAC,OAAO,EAAE,wBAAwB;;;;;;cA0B/D;AA4BD,iBAAS,yBAAyB,CAAC,OAAO,EAAE,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;cAkCnE;AAED,iBAAS,iBAAiB,CAAC,OAAO,EAAE,wBAAwB;;;;;;;;cAgB3D;AAED,iBAAS,4BAA4B,CAAC,OAAO,EAAE,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;cAiCtE;AAED,iBAAS,0BAA0B,CAAC,OAAO,EAAE,wBAAwB;;;;;;cAuBpE;AAED,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;EAcF,CAAC;AAE9B,wBAAgB,kBAAkB,CAAC,SAAS,CAAC,EAAE,mBAAmB,GAAG,gBAAgB,CAgBpF"}
+{"version":3,"file":"default-rules.d.ts","sourceRoot":"","sources":["../../../src/integrations/github/default-rules.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAEjH,MAAM,MAAM,mBAAmB,GAAG,OAAO,CACvC,MAAM,CAAC,sBAAsB,EAAE,kBAAkB,CAAC,wBAAwB,CAAC,GAAG,IAAI,GAAG,SAAS,CAAC,CAChG,CAAC;AACF,MAAM,MAAM,gBAAgB,GAAG,QAAQ,CACrC,MAAM,CAAC,sBAAsB,EAAE,kBAAkB,CAAC,wBAAwB,CAAC,GAAG,IAAI,CAAC,CACpF,CAAC;AAUF,iBAAS,mBAAmB,CAAC,OAAO,EAAE,wBAAwB;;;;;;cA4B7D;AASD,iBAAS,WAAW,CAAC,OAAO,EAAE,wBAAwB;;;;;;;;;;;;;;;;;;;cA0BrD;AAED,iBAAS,WAAW,CAAC,OAAO,EAAE,wBAAwB;;;;;;;;cAqBrD;AAwCD,iBAAS,iBAAiB,CAAC,OAAO,EAAE,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;cA8B3D;AAED,iBAAS,iBAAiB,CAAC,OAAO,EAAE,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;cAwC3D;AAED,iBAAS,qBAAqB,CAAC,OAAO,EAAE,wBAAwB;;;;;;cA0B/D;AAqBD,iBAAS,yBAAyB,CAAC,OAAO,EAAE,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;cAkCnE;AAED,iBAAS,iBAAiB,CAAC,OAAO,EAAE,wBAAwB;;;;;;;;cAgB3D;AAED,iBAAS,4BAA4B,CAAC,OAAO,EAAE,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;cAiCtE;AAED,iBAAS,0BAA0B,CAAC,OAAO,EAAE,wBAAwB;;;;;;cAuBpE;AAED,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;EAcF,CAAC;AAE9B,wBAAgB,kBAAkB,CAAC,SAAS,CAAC,EAAE,mBAAmB,GAAG,gBAAgB,CAgBpF"}

package/dist/integrations/github/default-rules.js

@@ -1,5 +1,6 @@
 import { hasRecordedVerdict } from "../../boards/review.js";
 import { isTerminalFactoryRuleStage } from "../../rules/types.js";
+import { normalizedVerdictLine } from "../../review-verdict.js";
 //#region src/integrations/github/default-rules.ts
 function trustedGithubActor(context) {
 	return context.actor.type === "github" && context.actor.trusted;
@@ -161,9 +162,8 @@ function addressReviewFeedback(context) {
 * inspected — a verdict quoted later in the findings must not count.
 */
 function requestsChangesVerdict(body) {
-	const firstLine = body?.split("\n").map((line) => line.trim()).find((line) => line.length > 0);
-	if (!firstLine) return false;
-	const normalized = firstLine.replaceAll(/[*_`#>\s]+/g, " ").trim().toLowerCase();
+	const normalized = normalizedVerdictLine(body);
+	if (!normalized) return false;
 	return /^verdict: ?(request changes|changes requested)$/.test(normalized);
 }
 function addressPullRequestComment(context) {

package/dist/integrations/github/default-rules.js.map

@@ -1 +1 @@
-{"version":3,"file":"default-rules.js","names":[],"sources":["../../../src/integrations/github/default-rules.ts"],"sourcesContent":["import { hasRecordedVerdict } from '../../boards/review.js';\nimport { isTerminalFactoryRuleStage } from '../../rules/types.js';\nimport type { FactoryGithubEventName, FactoryGithubRuleContext, FactoryRuleHandler } from '../../rules/types.js';\n\nexport type GithubRuleOverrides = Partial<\n  Record<FactoryGithubEventName, FactoryRuleHandler<FactoryGithubRuleContext> | null | undefined>\n>;\nexport type GithubEventRules = Readonly<\n  Record<FactoryGithubEventName, FactoryRuleHandler<FactoryGithubRuleContext> | null>\n>;\n\nfunction trustedGithubActor(context: Pick<FactoryGithubRuleContext, 'actor'>): boolean {\n  return context.actor.type === 'github' && context.actor.trusted;\n}\n\nfunction githubActorLogin(context: Pick<FactoryGithubRuleContext, 'actor'>): string | undefined {\n  return context.actor.type === 'github' ? context.actor.login : undefined;\n}\n\nfunction retriageGithubIssue(context: FactoryGithubRuleContext) {\n  if (!context.item || context.item.source !== 'github-issue' || !context.item.url) return;\n  if (context.actor.type === 'github' && context.actor.factoryAuthored) return;\n  // Re-triage would take over a card that is being built or reviewed.\n  const stage = context.item.stages?.length === 1 ? context.item.stages[0] : undefined;\n  if (stage === 'execute' || stage === 'review') return;\n  // A finished card has nothing left to triage; talk on a closed issue must not park a run on it.\n  if (isTerminalFactoryRuleStage(context.item.stages)) return;\n\n  const reason =\n    context.event === 'issueEdited'\n      ? context.issueChange?.title && context.issueChange.body\n        ? 'issue title and body edited'\n        : context.issueChange?.title\n          ? 'issue title edited'\n          : 'issue body edited'\n      : context.event === 'issueCommentDeleted'\n        ? 'comment deleted'\n        : context.event === 'issueCommentEdited'\n          ? 'comment edited'\n          : 'comment created';\n  return {\n    type: 'invokeSkill',\n    idempotencyKey: `${context.ingress.id}:factory-triage`,\n    role: 'triage',\n    skillName: 'factory-triage',\n    arguments: `Re-triage GitHub issue (${context.item.url}) after ${reason}.`,\n  } as const;\n}\n\nfunction createdAfterFactory(createdAt: string | undefined, factoryCreatedAt: string): boolean {\n  if (!createdAt) return false;\n  const sourceCreatedAt = Date.parse(createdAt);\n  const projectCreatedAt = Date.parse(factoryCreatedAt);\n  return Number.isFinite(sourceCreatedAt) && Number.isFinite(projectCreatedAt) && sourceCreatedAt > projectCreatedAt;\n}\n\nfunction issueOpened(context: FactoryGithubRuleContext) {\n  if (!context.issue) return;\n  // Everything arrives on the routed board's initial phase (Work › Intake when\n  // no label route selects another board). Trust/timing stamps remain available\n  // to custom board rules.\n  return {\n    type: 'upsertLinkedWorkItem',\n    idempotencyKey: `${context.ingress.id}:issue-intake`,\n    board: context.intake?.board ?? 'work',\n    source: 'github-issue',\n    sourceKey: `github-issue:${context.issue.number}`,\n    title: context.issue.title,\n    url: context.issue.url,\n    stage: context.intake?.initialPhase ?? 'intake',\n    metadata: {\n      githubRepositoryId: context.repository.id,\n      githubIssueNumber: context.issue.number,\n      ...(context.issue.createdAt ? { sourceCreatedAt: context.issue.createdAt } : {}),\n      ...(githubActorLogin(context) ? { author: githubActorLogin(context) } : {}),\n      authorTrusted: trustedGithubActor(context),\n      autoStartCandidate:\n        trustedGithubActor(context) && createdAfterFactory(context.issue.createdAt, context.factory.createdAt),\n      assignees: context.issue.assignees ?? [],\n      labels: context.issue.labels ?? [],\n    },\n  } as const;\n}\n\nfunction issueClosed(context: FactoryGithubRuleContext) {\n  if (!context.item || context.item.source !== 'github-issue' || !context.issue) return;\n  if (context.board !== 'work') return;\n  // Already off the board: nothing to reconcile.\n  if (context.item.stages.some(stage => stage === 'done' || stage === 'canceled')) return;\n  // Issue closure is a repository fact, not third-party input — no actor trust\n  // gate. `not_planned` (and `duplicate`) means abandoned, everything else is\n  // completed work.\n  const canceled = context.issue.stateReason === 'not_planned' || context.issue.stateReason === 'duplicate';\n  return {\n    type: 'transition',\n    idempotencyKey: `${context.ingress.id}:issue-closed`,\n    board: 'work',\n    stage: canceled ? 'canceled' : 'done',\n    message: {\n      text:\n        `GitHub issue #${context.issue.number} was closed` +\n        `${context.issue.stateReason ? ` (${context.issue.stateReason})` : ''}; ` +\n        `this Work card was moved to ${canceled ? 'Canceled' : 'Done'}.`,\n    },\n  } as const;\n}\n\nfunction materializePullRequestIntake(\n  context: FactoryGithubRuleContext,\n  {\n    idempotencyKey,\n    autoStartCandidate,\n    stage = 'intake',\n  }: { idempotencyKey: string; autoStartCandidate: boolean; stage?: 'intake' | 'review' },\n) {\n  if (!context.pullRequest) return;\n  return {\n    type: 'upsertLinkedWorkItem',\n    idempotencyKey,\n    board: 'review',\n    source: 'github-pr',\n    sourceKey: `github-pr:${context.pullRequest.number}`,\n    title: context.pullRequest.title,\n    url: context.pullRequest.url,\n    stage,\n    metadata: {\n      githubRepositoryId: context.repository.id,\n      githubPullRequestNumber: context.pullRequest.number,\n      ...(context.pullRequest.createdAt ? { sourceCreatedAt: context.pullRequest.createdAt } : {}),\n      factoryAuthored: context.pullRequest.factoryAuthored,\n      authorTrusted: trustedGithubActor(context),\n      autoStartCandidate,\n      state: context.pullRequest.state,\n      draft: context.pullRequest.draft,\n      merged: context.pullRequest.merged,\n      assignees: context.pullRequest.assignees ?? [],\n      requestedReviewers: context.pullRequest.requestedReviewers ?? [],\n      labels: context.pullRequest.labels ?? [],\n      headBranch: context.pullRequest.headBranch,\n      baseBranch: context.pullRequest.baseBranch,\n      ...(context.pullRequest.author ? { author: context.pullRequest.author } : {}),\n    },\n  } as const;\n}\n\nfunction pullRequestOpened(context: FactoryGithubRuleContext) {\n  if (!context.pullRequest) return;\n  // Opening a pull request is evaluated once per card it concerns. This rule\n  // files the pull request's own Review card, which is the arrival — the\n  // evaluation carrying `pullRequestIntake` — so the authoring Work item's own\n  // evaluation only moves it out for review: Building means \"no pull request\n  // yet\", Review means one is open. The card rests there through every round of\n  // feedback — the builder is woken in place — until the merge closes it.\n  if (context.item && context.pullRequestIntake !== true) {\n    if (context.board !== 'work' || context.pullRequest.state !== 'open') return;\n    if (!context.item.stages.includes('execute')) return;\n    // Resolution can match a Work item by branch alone, so a fork's pull\n    // request must not be able to move it: same bar as auto-starting a review.\n    if (!trustedGithubActor(context) && !context.pullRequest.factoryAuthored) return;\n    return {\n      type: 'transition',\n      idempotencyKey: `${context.ingress.id}:out-for-review`,\n      board: 'work',\n      stage: 'review',\n    } as const;\n  }\n  // A GitHub App bot is never a collaborator, so Factory's own PRs score\n  // untrusted; their authorship is the trust signal.\n  const autoStartCandidate =\n    (trustedGithubActor(context) || context.pullRequest.factoryAuthored) &&\n    createdAfterFactory(context.pullRequest.createdAt, context.factory.createdAt);\n  return materializePullRequestIntake(context, {\n    idempotencyKey: `${context.ingress.id}:pull-request-intake`,\n    autoStartCandidate,\n  });\n}\n\nfunction pullRequestMerged(context: FactoryGithubRuleContext) {\n  if (!context.item || !context.pullRequest?.merged) return;\n  if (context.board === 'review') {\n    // The event is bound to the PR's own Review card: a merged PR is finished\n    // review work, so always move the card to Done. The message only reaches\n    // an active session (if any) — cards without one just move, instead of\n    // failing retries against a binding that never existed.\n    return {\n      type: 'transition',\n      idempotencyKey: `${context.ingress.id}:pull-request-merged`,\n      board: 'review',\n      stage: 'done',\n      message: {\n        text:\n          `Pull request #${context.pullRequest.number} merged; this Review card was moved to Done. ` +\n          'No further review is needed unless follow-up work was requested.',\n      },\n    } as const;\n  }\n  // Provenance bound the event to the originating Work item instead: the merge\n  // is what finishes the work, so it closes the Work card alongside its Review card —\n  // unless the card has since opened another pull request, which is still out.\n  const openPullRequestNumber = context.item.metadata?.openPullRequestNumber;\n  if (typeof openPullRequestNumber === 'number' && openPullRequestNumber !== context.pullRequest.number) {\n    return {\n      type: 'sendMessage',\n      idempotencyKey: `${context.ingress.id}:work-merged`,\n      role: 'work',\n      message:\n        `Pull request #${context.pullRequest.number} merged. Pull request #${openPullRequestNumber} is still open, ` +\n        'so this Work card stays in Review until it merges.',\n    } as const;\n  }\n  return {\n    type: 'transition',\n    idempotencyKey: `${context.ingress.id}:work-merged`,\n    board: 'work',\n    stage: 'done',\n    message: { text: `Pull request #${context.pullRequest.number} merged; this Work card was moved to Done.` },\n  } as const;\n}\n\nfunction addressReviewFeedback(context: FactoryGithubRuleContext) {\n  if (!context.item || !context.pullRequest || !context.review) return;\n  // Only the Work item that authored the PR can act on the feedback. Provenance\n  // binds the event there; a Review card seeing its own posted review must not\n  // react to it (that would loop the reviewer against itself).\n  if (context.board !== 'work') return;\n  // A closed or merged pull request has no branch left to push fixes to.\n  if (context.pullRequest.state !== 'open' || context.pullRequest.merged) return;\n  // `approved` needs no work, and `commented` (a review body with no verdict)\n  // is how a reviewer leaves notes without blocking — only a verdict that asks\n  // for changes should pull the author back in.\n  if (context.review.state.toLowerCase() !== 'changes_requested') return;\n  // The authoring thread is already subscribed to this PR (`gh pr create`\n  // subscribes automatically), so it can read the individual line comments\n  // from its own notification inbox — the message only has to wake it and\n  // point at the review.\n  return {\n    type: 'sendMessage',\n    idempotencyKey: `${context.ingress.id}:address-review-feedback`,\n    role: 'work',\n    priority: 'high',\n    message:\n      `Changes were requested on pull request #${context.pullRequest.number} (${context.review.url}). ` +\n      'Read the review comments on this PR, address the ones you agree with, and push the fixes to the PR branch. ' +\n      'Reply on GitHub to anything you are deliberately not changing, explaining why.',\n  } as const;\n}\n\n/**\n * Detects the `factory-review` handoff verdict in a comment body.\n *\n * GitHub forbids an app from reviewing a pull request it authored, so on\n * Factory-authored PRs the review skill falls back to posting its verdict as a\n * plain comment. That comment is the only signal the authoring agent gets, so\n * it has to be readable back out. The skill's handoff contract puts the verdict\n * on the first line (`Verdict: request changes`), so only that line is\n * inspected — a verdict quoted later in the findings must not count.\n */\nfunction requestsChangesVerdict(body: string | undefined): boolean {\n  const firstLine = body\n    ?.split('\\n')\n    .map(line => line.trim())\n    .find(line => line.length > 0);\n  if (!firstLine) return false;\n  // Tolerate the markdown the skill wraps the line in (`**Verdict: ...**`).\n  const normalized = firstLine\n    .replaceAll(/[*_`#>\\s]+/g, ' ')\n    .trim()\n    .toLowerCase();\n  // Match the verdict exactly so negated phrasings (\"Verdict: do not request\n  // changes\") cannot wake the author.\n  return /^verdict: ?(request changes|changes requested)$/.test(normalized);\n}\n\nfunction addressPullRequestComment(context: FactoryGithubRuleContext) {\n  // A validated Factory mention is a review-entry request, not feedback for the\n  // authoring Work session. Invalid or unrecognized comments retain the normal\n  // feedback route below.\n  if (context.reviewCommand) return reReviewRequestedPullRequest(context);\n  if (!context.item || !context.pullRequest || !context.issueComment) return;\n  // Provenance binds the comment to the Work item that authored the PR — the\n  // only session that can act on it. A Review card must not react to comments\n  // on the PR it is reviewing.\n  if (context.board !== 'work') return;\n  if (context.pullRequest.state !== 'open' || context.pullRequest.merged) return;\n  // `factoryAuthored` is one bit for the whole Factory, so Factory's own\n  // comments are indistinguishable between roles — waking on all of them would\n  // let the Work agent's own progress comments wake itself in a loop. The one\n  // exception is the review verdict the Review run had to post as a comment\n  // because GitHub refused a self-review: that is the handoff, and it only ever\n  // asks for changes once per review, so it cannot sustain a loop.\n  if (\n    context.actor.type === 'github' &&\n    context.actor.factoryAuthored &&\n    !requestsChangesVerdict(context.issueComment.body)\n  ) {\n    return;\n  }\n  return {\n    type: 'sendMessage',\n    idempotencyKey: `${context.ingress.id}:address-pull-request-comment`,\n    role: 'work',\n    priority: 'high',\n    message:\n      `${context.issueComment.author ?? 'Someone'} commented on pull request #${context.pullRequest.number} ` +\n      `(${context.issueComment.url ?? context.pullRequest.url}). Read the comment, address it if you agree, and push ` +\n      'the fixes to the PR branch. Reply on GitHub to anything you are deliberately not changing, explaining why.',\n  } as const;\n}\n\nfunction pullRequestClosed(context: FactoryGithubRuleContext) {\n  if (!context.item || !context.pullRequest || context.pullRequest.merged) return;\n  if (context.board !== 'review') return;\n  // A PR closed without merging is abandoned review work: clear the card off\n  // the board instead of leaving it in Reviewing forever.\n  return {\n    type: 'transition',\n    idempotencyKey: `${context.ingress.id}:pull-request-closed`,\n    board: 'review',\n    stage: 'canceled',\n    message: {\n      text:\n        `Pull request #${context.pullRequest.number} was closed without merging; ` +\n        'this Review card was moved to Canceled.',\n    },\n  } as const;\n}\n\nfunction reReviewRequestedPullRequest(context: FactoryGithubRuleContext) {\n  // GitHub reviewer requests and Factory's exact mention command are both\n  // explicit requests to enter the same Review lifecycle.\n  const factoryReviewEntry = context.reviewRequest?.factoryReviewer || context.reviewCommand !== undefined;\n  if ((context.item && context.board !== 'review') || !factoryReviewEntry) return;\n  if (!context.pullRequest || context.pullRequest.state !== 'open' || context.pullRequest.merged) return;\n  // Trusted (write/admin) requesters only: creating or re-entering review checks\n  // out and executes PR code, the same bar pullRequestOpened applies to auto-review.\n  if (!trustedGithubActor(context)) return;\n  if (context.actor.type === 'github' && context.actor.factoryAuthored) return;\n  if (!context.item) {\n    // On this path the actor is the *requester*, so the materialized\n    // `authorTrusted` stamp records their trust (always true past the gate\n    // above), not the PR author's: a trusted maintainer requesting a Factory\n    // review vouches for the PR.\n    return materializePullRequestIntake(context, {\n      idempotencyKey: `${context.ingress.id}:pull-request-review-requested-intake`,\n      autoStartCandidate: true,\n      stage: 'review',\n    });\n  }\n  // Already in Reviewing with no verdict yet: a pass is pending or running.\n  // Once a verdict is recorded the card rests in Reviewing, so a fresh request\n  // re-enters the stage to start another pass.\n  const reviewing = context.item.stages.length === 1 && context.item.stages[0] === 'review';\n  if (reviewing && !hasRecordedVerdict(context.item)) return;\n  return {\n    type: 'transition',\n    idempotencyKey: `${context.ingress.id}:re-review-requested`,\n    board: 'review',\n    stage: 'review',\n    ...(reviewing ? { reenter: true } : {}),\n  } as const;\n}\n\nfunction reReviewUpdatedPullRequest(context: FactoryGithubRuleContext) {\n  if (!context.item || context.board !== 'review') return;\n  if (!context.pullRequest || context.pullRequest.state !== 'open' || context.pullRequest.merged) return;\n  // Intake has not started a review pass yet, so a push there is just more of\n  // the code the first pass will read. A push to a card sitting in Reviewing is\n  // different: it invalidates whatever that pass is reading, so re-enter the\n  // stage to supersede it. `reviewPullRequest` cancels the stale run and picks\n  // the right skill for the entry it sees.\n  if (context.item.stages.some(stage => stage === 'intake')) return;\n  // A fork's author controls its head branch, so an untrusted push must not be\n  // able to start review passes on demand; a maintainer can still request one.\n  if (!trustedGithubActor(context) && !context.pullRequest.factoryAuthored) return;\n  const alreadyReviewing = context.item.stages.some(stage => stage === 'review');\n  return {\n    type: 'transition',\n    idempotencyKey: `${context.ingress.id}:re-review-updated`,\n    board: 'review',\n    stage: 'review',\n    // Re-entry is the point when the card is already Reviewing: the stage's\n    // entry rule is what cancels the superseded pass and starts one on the code\n    // that just landed.\n    ...(alreadyReviewing ? { reenter: true } : {}),\n  } as const;\n}\n\nexport const defaultGithubRules = Object.freeze({\n  issueOpened: issueOpened,\n  issueEdited: retriageGithubIssue,\n  issueClosed: issueClosed,\n  issueCommentCreated: retriageGithubIssue,\n  issueCommentEdited: retriageGithubIssue,\n  issueCommentDeleted: retriageGithubIssue,\n  pullRequestOpened: pullRequestOpened,\n  pullRequestUpdated: reReviewUpdatedPullRequest,\n  pullRequestCommentCreated: addressPullRequestComment,\n  pullRequestReviewRequested: reReviewRequestedPullRequest,\n  pullRequestReviewSubmitted: addressReviewFeedback,\n  pullRequestMerged: pullRequestMerged,\n  pullRequestClosed: pullRequestClosed,\n} satisfies GithubEventRules);\n\nexport function resolveGithubRules(overrides?: GithubRuleOverrides): GithubEventRules {\n  if (overrides !== undefined && (overrides === null || typeof overrides !== 'object' || Array.isArray(overrides))) {\n    throw new Error('GitHub rules must be an object.');\n  }\n  const rules: Record<string, FactoryRuleHandler<FactoryGithubRuleContext> | null> = { ...defaultGithubRules };\n  for (const key of Reflect.ownKeys(overrides ?? {})) {\n    if (typeof key !== 'string' || !Object.hasOwn(defaultGithubRules, key)) {\n      throw new Error(`Unknown GitHub rule event: ${String(key)}.`);\n    }\n    const handler = overrides?.[key as FactoryGithubEventName];\n    if (handler !== undefined && handler !== null && typeof handler !== 'function') {\n      throw new Error(`GitHub rule ${key} must be a function, null, or undefined.`);\n    }\n    if (handler !== undefined) rules[key] = handler;\n  }\n  return Object.freeze(rules) as GithubEventRules;\n}\n"],"mappings":";;;AAWA,SAAS,mBAAmB,SAA2D;CACrF,OAAO,QAAQ,MAAM,SAAS,YAAY,QAAQ,MAAM;AAC1D;AAEA,SAAS,iBAAiB,SAAsE;CAC9F,OAAO,QAAQ,MAAM,SAAS,WAAW,QAAQ,MAAM,QAAQ,KAAA;AACjE;AAEA,SAAS,oBAAoB,SAAmC;CAC9D,IAAI,CAAC,QAAQ,QAAQ,QAAQ,KAAK,WAAW,kBAAkB,CAAC,QAAQ,KAAK,KAAK;CAClF,IAAI,QAAQ,MAAM,SAAS,YAAY,QAAQ,MAAM,iBAAiB;CAEtE,MAAM,QAAQ,QAAQ,KAAK,QAAQ,WAAW,IAAI,QAAQ,KAAK,OAAO,KAAK,KAAA;CAC3E,IAAI,UAAU,aAAa,UAAU,UAAU;CAE/C,IAAI,2BAA2B,QAAQ,KAAK,MAAM,GAAG;CAErD,MAAM,SACJ,QAAQ,UAAU,gBACd,QAAQ,aAAa,SAAS,QAAQ,YAAY,OAChD,gCACA,QAAQ,aAAa,QACnB,uBACA,sBACJ,QAAQ,UAAU,wBAChB,oBACA,QAAQ,UAAU,uBAChB,mBACA;CACV,OAAO;EACL,MAAM;EACN,gBAAgB,GAAG,QAAQ,QAAQ,GAAG;EACtC,MAAM;EACN,WAAW;EACX,WAAW,2BAA2B,QAAQ,KAAK,IAAI,UAAU,OAAO;CAC1E;AACF;AAEA,SAAS,oBAAoB,WAA+B,kBAAmC;CAC7F,IAAI,CAAC,WAAW,OAAO;CACvB,MAAM,kBAAkB,KAAK,MAAM,SAAS;CAC5C,MAAM,mBAAmB,KAAK,MAAM,gBAAgB;CACpD,OAAO,OAAO,SAAS,eAAe,KAAK,OAAO,SAAS,gBAAgB,KAAK,kBAAkB;AACpG;AAEA,SAAS,YAAY,SAAmC;CACtD,IAAI,CAAC,QAAQ,OAAO;CAIpB,OAAO;EACL,MAAM;EACN,gBAAgB,GAAG,QAAQ,QAAQ,GAAG;EACtC,OAAO,QAAQ,QAAQ,SAAS;EAChC,QAAQ;EACR,WAAW,gBAAgB,QAAQ,MAAM;EACzC,OAAO,QAAQ,MAAM;EACrB,KAAK,QAAQ,MAAM;EACnB,OAAO,QAAQ,QAAQ,gBAAgB;EACvC,UAAU;GACR,oBAAoB,QAAQ,WAAW;GACvC,mBAAmB,QAAQ,MAAM;GACjC,GAAI,QAAQ,MAAM,YAAY,EAAE,iBAAiB,QAAQ,MAAM,UAAU,IAAI,CAAC;GAC9E,GAAI,iBAAiB,OAAO,IAAI,EAAE,QAAQ,iBAAiB,OAAO,EAAE,IAAI,CAAC;GACzE,eAAe,mBAAmB,OAAO;GACzC,oBACE,mBAAmB,OAAO,KAAK,oBAAoB,QAAQ,MAAM,WAAW,QAAQ,QAAQ,SAAS;GACvG,WAAW,QAAQ,MAAM,aAAa,CAAC;GACvC,QAAQ,QAAQ,MAAM,UAAU,CAAC;EACnC;CACF;AACF;AAEA,SAAS,YAAY,SAAmC;CACtD,IAAI,CAAC,QAAQ,QAAQ,QAAQ,KAAK,WAAW,kBAAkB,CAAC,QAAQ,OAAO;CAC/E,IAAI,QAAQ,UAAU,QAAQ;CAE9B,IAAI,QAAQ,KAAK,OAAO,MAAK,UAAS,UAAU,UAAU,UAAU,UAAU,GAAG;CAIjF,MAAM,WAAW,QAAQ,MAAM,gBAAgB,iBAAiB,QAAQ,MAAM,gBAAgB;CAC9F,OAAO;EACL,MAAM;EACN,gBAAgB,GAAG,QAAQ,QAAQ,GAAG;EACtC,OAAO;EACP,OAAO,WAAW,aAAa;EAC/B,SAAS,EACP,MACE,iBAAiB,QAAQ,MAAM,OAAO,aACnC,QAAQ,MAAM,cAAc,KAAK,QAAQ,MAAM,YAAY,KAAK,GAAG,gCACvC,WAAW,aAAa,OAAO,GAClE;CACF;AACF;AAEA,SAAS,6BACP,SACA,EACE,gBACA,oBACA,QAAQ,YAEV;CACA,IAAI,CAAC,QAAQ,aAAa;CAC1B,OAAO;EACL,MAAM;EACN;EACA,OAAO;EACP,QAAQ;EACR,WAAW,aAAa,QAAQ,YAAY;EAC5C,OAAO,QAAQ,YAAY;EAC3B,KAAK,QAAQ,YAAY;EACzB;EACA,UAAU;GACR,oBAAoB,QAAQ,WAAW;GACvC,yBAAyB,QAAQ,YAAY;GAC7C,GAAI,QAAQ,YAAY,YAAY,EAAE,iBAAiB,QAAQ,YAAY,UAAU,IAAI,CAAC;GAC1F,iBAAiB,QAAQ,YAAY;GACrC,eAAe,mBAAmB,OAAO;GACzC;GACA,OAAO,QAAQ,YAAY;GAC3B,OAAO,QAAQ,YAAY;GAC3B,QAAQ,QAAQ,YAAY;GAC5B,WAAW,QAAQ,YAAY,aAAa,CAAC;GAC7C,oBAAoB,QAAQ,YAAY,sBAAsB,CAAC;GAC/D,QAAQ,QAAQ,YAAY,UAAU,CAAC;GACvC,YAAY,QAAQ,YAAY;GAChC,YAAY,QAAQ,YAAY;GAChC,GAAI,QAAQ,YAAY,SAAS,EAAE,QAAQ,QAAQ,YAAY,OAAO,IAAI,CAAC;EAC7E;CACF;AACF;AAEA,SAAS,kBAAkB,SAAmC;CAC5D,IAAI,CAAC,QAAQ,aAAa;CAO1B,IAAI,QAAQ,QAAQ,QAAQ,sBAAsB,MAAM;EACtD,IAAI,QAAQ,UAAU,UAAU,QAAQ,YAAY,UAAU,QAAQ;EACtE,IAAI,CAAC,QAAQ,KAAK,OAAO,SAAS,SAAS,GAAG;EAG9C,IAAI,CAAC,mBAAmB,OAAO,KAAK,CAAC,QAAQ,YAAY,iBAAiB;EAC1E,OAAO;GACL,MAAM;GACN,gBAAgB,GAAG,QAAQ,QAAQ,GAAG;GACtC,OAAO;GACP,OAAO;EACT;CACF;CAGA,MAAM,sBACH,mBAAmB,OAAO,KAAK,QAAQ,YAAY,oBACpD,oBAAoB,QAAQ,YAAY,WAAW,QAAQ,QAAQ,SAAS;CAC9E,OAAO,6BAA6B,SAAS;EAC3C,gBAAgB,GAAG,QAAQ,QAAQ,GAAG;EACtC;CACF,CAAC;AACH;AAEA,SAAS,kBAAkB,SAAmC;CAC5D,IAAI,CAAC,QAAQ,QAAQ,CAAC,QAAQ,aAAa,QAAQ;CACnD,IAAI,QAAQ,UAAU,UAKpB,OAAO;EACL,MAAM;EACN,gBAAgB,GAAG,QAAQ,QAAQ,GAAG;EACtC,OAAO;EACP,OAAO;EACP,SAAS,EACP,MACE,iBAAiB,QAAQ,YAAY,OAAO,+GAEhD;CACF;CAKF,MAAM,wBAAwB,QAAQ,KAAK,UAAU;CACrD,IAAI,OAAO,0BAA0B,YAAY,0BAA0B,QAAQ,YAAY,QAC7F,OAAO;EACL,MAAM;EACN,gBAAgB,GAAG,QAAQ,QAAQ,GAAG;EACtC,MAAM;EACN,SACE,iBAAiB,QAAQ,YAAY,OAAO,yBAAyB,sBAAsB;CAE/F;CAEF,OAAO;EACL,MAAM;EACN,gBAAgB,GAAG,QAAQ,QAAQ,GAAG;EACtC,OAAO;EACP,OAAO;EACP,SAAS,EAAE,MAAM,iBAAiB,QAAQ,YAAY,OAAO,4CAA4C;CAC3G;AACF;AAEA,SAAS,sBAAsB,SAAmC;CAChE,IAAI,CAAC,QAAQ,QAAQ,CAAC,QAAQ,eAAe,CAAC,QAAQ,QAAQ;CAI9D,IAAI,QAAQ,UAAU,QAAQ;CAE9B,IAAI,QAAQ,YAAY,UAAU,UAAU,QAAQ,YAAY,QAAQ;CAIxE,IAAI,QAAQ,OAAO,MAAM,YAAY,MAAM,qBAAqB;CAKhE,OAAO;EACL,MAAM;EACN,gBAAgB,GAAG,QAAQ,QAAQ,GAAG;EACtC,MAAM;EACN,UAAU;EACV,SACE,2CAA2C,QAAQ,YAAY,OAAO,IAAI,QAAQ,OAAO,IAAI;CAGjG;AACF;;;;;;;;;;;AAYA,SAAS,uBAAuB,MAAmC;CACjE,MAAM,YAAY,MACd,MAAM,IAAI,CAAC,CACZ,KAAI,SAAQ,KAAK,KAAK,CAAC,CAAC,CACxB,MAAK,SAAQ,KAAK,SAAS,CAAC;CAC/B,IAAI,CAAC,WAAW,OAAO;CAEvB,MAAM,aAAa,UAChB,WAAW,eAAe,GAAG,CAAC,CAC9B,KAAK,CAAC,CACN,YAAY;CAGf,OAAO,kDAAkD,KAAK,UAAU;AAC1E;AAEA,SAAS,0BAA0B,SAAmC;CAIpE,IAAI,QAAQ,eAAe,OAAO,6BAA6B,OAAO;CACtE,IAAI,CAAC,QAAQ,QAAQ,CAAC,QAAQ,eAAe,CAAC,QAAQ,cAAc;CAIpE,IAAI,QAAQ,UAAU,QAAQ;CAC9B,IAAI,QAAQ,YAAY,UAAU,UAAU,QAAQ,YAAY,QAAQ;CAOxE,IACE,QAAQ,MAAM,SAAS,YACvB,QAAQ,MAAM,mBACd,CAAC,uBAAuB,QAAQ,aAAa,IAAI,GAEjD;CAEF,OAAO;EACL,MAAM;EACN,gBAAgB,GAAG,QAAQ,QAAQ,GAAG;EACtC,MAAM;EACN,UAAU;EACV,SACE,GAAG,QAAQ,aAAa,UAAU,UAAU,8BAA8B,QAAQ,YAAY,OAAO,IACjG,QAAQ,aAAa,OAAO,QAAQ,YAAY,IAAI;CAE5D;AACF;AAEA,SAAS,kBAAkB,SAAmC;CAC5D,IAAI,CAAC,QAAQ,QAAQ,CAAC,QAAQ,eAAe,QAAQ,YAAY,QAAQ;CACzE,IAAI,QAAQ,UAAU,UAAU;CAGhC,OAAO;EACL,MAAM;EACN,gBAAgB,GAAG,QAAQ,QAAQ,GAAG;EACtC,OAAO;EACP,OAAO;EACP,SAAS,EACP,MACE,iBAAiB,QAAQ,YAAY,OAAO,sEAEhD;CACF;AACF;AAEA,SAAS,6BAA6B,SAAmC;CAGvE,MAAM,qBAAqB,QAAQ,eAAe,mBAAmB,QAAQ,kBAAkB,KAAA;CAC/F,IAAK,QAAQ,QAAQ,QAAQ,UAAU,YAAa,CAAC,oBAAoB;CACzE,IAAI,CAAC,QAAQ,eAAe,QAAQ,YAAY,UAAU,UAAU,QAAQ,YAAY,QAAQ;CAGhG,IAAI,CAAC,mBAAmB,OAAO,GAAG;CAClC,IAAI,QAAQ,MAAM,SAAS,YAAY,QAAQ,MAAM,iBAAiB;CACtE,IAAI,CAAC,QAAQ,MAKX,OAAO,6BAA6B,SAAS;EAC3C,gBAAgB,GAAG,QAAQ,QAAQ,GAAG;EACtC,oBAAoB;EACpB,OAAO;CACT,CAAC;CAKH,MAAM,YAAY,QAAQ,KAAK,OAAO,WAAW,KAAK,QAAQ,KAAK,OAAO,OAAO;CACjF,IAAI,aAAa,CAAC,mBAAmB,QAAQ,IAAI,GAAG;CACpD,OAAO;EACL,MAAM;EACN,gBAAgB,GAAG,QAAQ,QAAQ,GAAG;EACtC,OAAO;EACP,OAAO;EACP,GAAI,YAAY,EAAE,SAAS,KAAK,IAAI,CAAC;CACvC;AACF;AAEA,SAAS,2BAA2B,SAAmC;CACrE,IAAI,CAAC,QAAQ,QAAQ,QAAQ,UAAU,UAAU;CACjD,IAAI,CAAC,QAAQ,eAAe,QAAQ,YAAY,UAAU,UAAU,QAAQ,YAAY,QAAQ;CAMhG,IAAI,QAAQ,KAAK,OAAO,MAAK,UAAS,UAAU,QAAQ,GAAG;CAG3D,IAAI,CAAC,mBAAmB,OAAO,KAAK,CAAC,QAAQ,YAAY,iBAAiB;CAC1E,MAAM,mBAAmB,QAAQ,KAAK,OAAO,MAAK,UAAS,UAAU,QAAQ;CAC7E,OAAO;EACL,MAAM;EACN,gBAAgB,GAAG,QAAQ,QAAQ,GAAG;EACtC,OAAO;EACP,OAAO;EAIP,GAAI,mBAAmB,EAAE,SAAS,KAAK,IAAI,CAAC;CAC9C;AACF;AAEA,MAAa,qBAAqB,OAAO,OAAO;CACjC;CACb,aAAa;CACA;CACb,qBAAqB;CACrB,oBAAoB;CACpB,qBAAqB;CACF;CACnB,oBAAoB;CACpB,2BAA2B;CAC3B,4BAA4B;CAC5B,4BAA4B;CACT;CACA;AACrB,CAA4B;AAE5B,SAAgB,mBAAmB,WAAmD;CACpF,IAAI,cAAc,KAAA,MAAc,cAAc,QAAQ,OAAO,cAAc,YAAY,MAAM,QAAQ,SAAS,IAC5G,MAAM,IAAI,MAAM,iCAAiC;CAEnD,MAAM,QAA6E,EAAE,GAAG,mBAAmB;CAC3G,KAAK,MAAM,OAAO,QAAQ,QAAQ,aAAa,CAAC,CAAC,GAAG;EAClD,IAAI,OAAO,QAAQ,YAAY,CAAC,OAAO,OAAO,oBAAoB,GAAG,GACnE,MAAM,IAAI,MAAM,8BAA8B,OAAO,GAAG,EAAE,EAAE;EAE9D,MAAM,UAAU,YAAY;EAC5B,IAAI,YAAY,KAAA,KAAa,YAAY,QAAQ,OAAO,YAAY,YAClE,MAAM,IAAI,MAAM,eAAe,IAAI,yCAAyC;EAE9E,IAAI,YAAY,KAAA,GAAW,MAAM,OAAO;CAC1C;CACA,OAAO,OAAO,OAAO,KAAK;AAC5B"}
+{"version":3,"file":"default-rules.js","names":[],"sources":["../../../src/integrations/github/default-rules.ts"],"sourcesContent":["import { hasRecordedVerdict } from '../../boards/review.js';\nimport { normalizedVerdictLine } from '../../review-verdict.js';\nimport { isTerminalFactoryRuleStage } from '../../rules/types.js';\nimport type { FactoryGithubEventName, FactoryGithubRuleContext, FactoryRuleHandler } from '../../rules/types.js';\n\nexport type GithubRuleOverrides = Partial<\n  Record<FactoryGithubEventName, FactoryRuleHandler<FactoryGithubRuleContext> | null | undefined>\n>;\nexport type GithubEventRules = Readonly<\n  Record<FactoryGithubEventName, FactoryRuleHandler<FactoryGithubRuleContext> | null>\n>;\n\nfunction trustedGithubActor(context: Pick<FactoryGithubRuleContext, 'actor'>): boolean {\n  return context.actor.type === 'github' && context.actor.trusted;\n}\n\nfunction githubActorLogin(context: Pick<FactoryGithubRuleContext, 'actor'>): string | undefined {\n  return context.actor.type === 'github' ? context.actor.login : undefined;\n}\n\nfunction retriageGithubIssue(context: FactoryGithubRuleContext) {\n  if (!context.item || context.item.source !== 'github-issue' || !context.item.url) return;\n  if (context.actor.type === 'github' && context.actor.factoryAuthored) return;\n  // Re-triage would take over a card that is being built or reviewed.\n  const stage = context.item.stages?.length === 1 ? context.item.stages[0] : undefined;\n  if (stage === 'execute' || stage === 'review') return;\n  // A finished card has nothing left to triage; talk on a closed issue must not park a run on it.\n  if (isTerminalFactoryRuleStage(context.item.stages)) return;\n\n  const reason =\n    context.event === 'issueEdited'\n      ? context.issueChange?.title && context.issueChange.body\n        ? 'issue title and body edited'\n        : context.issueChange?.title\n          ? 'issue title edited'\n          : 'issue body edited'\n      : context.event === 'issueCommentDeleted'\n        ? 'comment deleted'\n        : context.event === 'issueCommentEdited'\n          ? 'comment edited'\n          : 'comment created';\n  return {\n    type: 'invokeSkill',\n    idempotencyKey: `${context.ingress.id}:factory-triage`,\n    role: 'triage',\n    skillName: 'factory-triage',\n    arguments: `Re-triage GitHub issue (${context.item.url}) after ${reason}.`,\n  } as const;\n}\n\nfunction createdAfterFactory(createdAt: string | undefined, factoryCreatedAt: string): boolean {\n  if (!createdAt) return false;\n  const sourceCreatedAt = Date.parse(createdAt);\n  const projectCreatedAt = Date.parse(factoryCreatedAt);\n  return Number.isFinite(sourceCreatedAt) && Number.isFinite(projectCreatedAt) && sourceCreatedAt > projectCreatedAt;\n}\n\nfunction issueOpened(context: FactoryGithubRuleContext) {\n  if (!context.issue) return;\n  // Everything arrives on the routed board's initial phase (Work › Intake when\n  // no label route selects another board). Trust/timing stamps remain available\n  // to custom board rules.\n  return {\n    type: 'upsertLinkedWorkItem',\n    idempotencyKey: `${context.ingress.id}:issue-intake`,\n    board: context.intake?.board ?? 'work',\n    source: 'github-issue',\n    sourceKey: `github-issue:${context.issue.number}`,\n    title: context.issue.title,\n    url: context.issue.url,\n    stage: context.intake?.initialPhase ?? 'intake',\n    metadata: {\n      githubRepositoryId: context.repository.id,\n      githubIssueNumber: context.issue.number,\n      ...(context.issue.createdAt ? { sourceCreatedAt: context.issue.createdAt } : {}),\n      ...(githubActorLogin(context) ? { author: githubActorLogin(context) } : {}),\n      authorTrusted: trustedGithubActor(context),\n      autoStartCandidate:\n        trustedGithubActor(context) && createdAfterFactory(context.issue.createdAt, context.factory.createdAt),\n      assignees: context.issue.assignees ?? [],\n      labels: context.issue.labels ?? [],\n    },\n  } as const;\n}\n\nfunction issueClosed(context: FactoryGithubRuleContext) {\n  if (!context.item || context.item.source !== 'github-issue' || !context.issue) return;\n  if (context.board !== 'work') return;\n  // Already off the board: nothing to reconcile.\n  if (context.item.stages.some(stage => stage === 'done' || stage === 'canceled')) return;\n  // Issue closure is a repository fact, not third-party input — no actor trust\n  // gate. `not_planned` (and `duplicate`) means abandoned, everything else is\n  // completed work.\n  const canceled = context.issue.stateReason === 'not_planned' || context.issue.stateReason === 'duplicate';\n  return {\n    type: 'transition',\n    idempotencyKey: `${context.ingress.id}:issue-closed`,\n    board: 'work',\n    stage: canceled ? 'canceled' : 'done',\n    message: {\n      text:\n        `GitHub issue #${context.issue.number} was closed` +\n        `${context.issue.stateReason ? ` (${context.issue.stateReason})` : ''}; ` +\n        `this Work card was moved to ${canceled ? 'Canceled' : 'Done'}.`,\n    },\n  } as const;\n}\n\nfunction materializePullRequestIntake(\n  context: FactoryGithubRuleContext,\n  {\n    idempotencyKey,\n    autoStartCandidate,\n    stage = 'intake',\n  }: { idempotencyKey: string; autoStartCandidate: boolean; stage?: 'intake' | 'review' },\n) {\n  if (!context.pullRequest) return;\n  return {\n    type: 'upsertLinkedWorkItem',\n    idempotencyKey,\n    board: 'review',\n    source: 'github-pr',\n    sourceKey: `github-pr:${context.pullRequest.number}`,\n    title: context.pullRequest.title,\n    url: context.pullRequest.url,\n    stage,\n    metadata: {\n      githubRepositoryId: context.repository.id,\n      githubPullRequestNumber: context.pullRequest.number,\n      ...(context.pullRequest.createdAt ? { sourceCreatedAt: context.pullRequest.createdAt } : {}),\n      factoryAuthored: context.pullRequest.factoryAuthored,\n      authorTrusted: trustedGithubActor(context),\n      autoStartCandidate,\n      state: context.pullRequest.state,\n      draft: context.pullRequest.draft,\n      merged: context.pullRequest.merged,\n      assignees: context.pullRequest.assignees ?? [],\n      requestedReviewers: context.pullRequest.requestedReviewers ?? [],\n      labels: context.pullRequest.labels ?? [],\n      headBranch: context.pullRequest.headBranch,\n      baseBranch: context.pullRequest.baseBranch,\n      ...(context.pullRequest.author ? { author: context.pullRequest.author } : {}),\n    },\n  } as const;\n}\n\nfunction pullRequestOpened(context: FactoryGithubRuleContext) {\n  if (!context.pullRequest) return;\n  // Opening a pull request is evaluated once per card it concerns. This rule\n  // files the pull request's own Review card, which is the arrival — the\n  // evaluation carrying `pullRequestIntake` — so the authoring Work item's own\n  // evaluation only moves it out for review: Building means \"no pull request\n  // yet\", Review means one is open. The card rests there through every round of\n  // feedback — the builder is woken in place — until the merge closes it.\n  if (context.item && context.pullRequestIntake !== true) {\n    if (context.board !== 'work' || context.pullRequest.state !== 'open') return;\n    if (!context.item.stages.includes('execute')) return;\n    // Resolution can match a Work item by branch alone, so a fork's pull\n    // request must not be able to move it: same bar as auto-starting a review.\n    if (!trustedGithubActor(context) && !context.pullRequest.factoryAuthored) return;\n    return {\n      type: 'transition',\n      idempotencyKey: `${context.ingress.id}:out-for-review`,\n      board: 'work',\n      stage: 'review',\n    } as const;\n  }\n  // A GitHub App bot is never a collaborator, so Factory's own PRs score\n  // untrusted; their authorship is the trust signal.\n  const autoStartCandidate =\n    (trustedGithubActor(context) || context.pullRequest.factoryAuthored) &&\n    createdAfterFactory(context.pullRequest.createdAt, context.factory.createdAt);\n  return materializePullRequestIntake(context, {\n    idempotencyKey: `${context.ingress.id}:pull-request-intake`,\n    autoStartCandidate,\n  });\n}\n\nfunction pullRequestMerged(context: FactoryGithubRuleContext) {\n  if (!context.item || !context.pullRequest?.merged) return;\n  if (context.board === 'review') {\n    // The event is bound to the PR's own Review card: a merged PR is finished\n    // review work, so always move the card to Done. The message only reaches\n    // an active session (if any) — cards without one just move, instead of\n    // failing retries against a binding that never existed.\n    return {\n      type: 'transition',\n      idempotencyKey: `${context.ingress.id}:pull-request-merged`,\n      board: 'review',\n      stage: 'done',\n      message: {\n        text:\n          `Pull request #${context.pullRequest.number} merged; this Review card was moved to Done. ` +\n          'No further review is needed unless follow-up work was requested.',\n      },\n    } as const;\n  }\n  // Provenance bound the event to the originating Work item instead: the merge\n  // is what finishes the work, so it closes the Work card alongside its Review card —\n  // unless the card has since opened another pull request, which is still out.\n  const openPullRequestNumber = context.item.metadata?.openPullRequestNumber;\n  if (typeof openPullRequestNumber === 'number' && openPullRequestNumber !== context.pullRequest.number) {\n    return {\n      type: 'sendMessage',\n      idempotencyKey: `${context.ingress.id}:work-merged`,\n      role: 'work',\n      message:\n        `Pull request #${context.pullRequest.number} merged. Pull request #${openPullRequestNumber} is still open, ` +\n        'so this Work card stays in Review until it merges.',\n    } as const;\n  }\n  return {\n    type: 'transition',\n    idempotencyKey: `${context.ingress.id}:work-merged`,\n    board: 'work',\n    stage: 'done',\n    message: { text: `Pull request #${context.pullRequest.number} merged; this Work card was moved to Done.` },\n  } as const;\n}\n\nfunction addressReviewFeedback(context: FactoryGithubRuleContext) {\n  if (!context.item || !context.pullRequest || !context.review) return;\n  // Only the Work item that authored the PR can act on the feedback. Provenance\n  // binds the event there; a Review card seeing its own posted review must not\n  // react to it (that would loop the reviewer against itself).\n  if (context.board !== 'work') return;\n  // A closed or merged pull request has no branch left to push fixes to.\n  if (context.pullRequest.state !== 'open' || context.pullRequest.merged) return;\n  // `approved` needs no work, and `commented` (a review body with no verdict)\n  // is how a reviewer leaves notes without blocking — only a verdict that asks\n  // for changes should pull the author back in.\n  if (context.review.state.toLowerCase() !== 'changes_requested') return;\n  // The authoring thread is already subscribed to this PR (`gh pr create`\n  // subscribes automatically), so it can read the individual line comments\n  // from its own notification inbox — the message only has to wake it and\n  // point at the review.\n  return {\n    type: 'sendMessage',\n    idempotencyKey: `${context.ingress.id}:address-review-feedback`,\n    role: 'work',\n    priority: 'high',\n    message:\n      `Changes were requested on pull request #${context.pullRequest.number} (${context.review.url}). ` +\n      'Read the review comments on this PR, address the ones you agree with, and push the fixes to the PR branch. ' +\n      'Reply on GitHub to anything you are deliberately not changing, explaining why.',\n  } as const;\n}\n\n/**\n * Detects the `factory-review` handoff verdict in a comment body.\n *\n * GitHub forbids an app from reviewing a pull request it authored, so on\n * Factory-authored PRs the review skill falls back to posting its verdict as a\n * plain comment. That comment is the only signal the authoring agent gets, so\n * it has to be readable back out. The skill's handoff contract puts the verdict\n * on the first line (`Verdict: request changes`), so only that line is\n * inspected — a verdict quoted later in the findings must not count.\n */\nfunction requestsChangesVerdict(body: string | undefined): boolean {\n  // Tolerate the markdown the skill wraps the line in (`**Verdict: ...**`).\n  const normalized = normalizedVerdictLine(body);\n  if (!normalized) return false;\n  // Match the verdict exactly so negated phrasings (\"Verdict: do not request\n  // changes\") cannot wake the author.\n  return /^verdict: ?(request changes|changes requested)$/.test(normalized);\n}\n\nfunction addressPullRequestComment(context: FactoryGithubRuleContext) {\n  // A validated Factory mention is a review-entry request, not feedback for the\n  // authoring Work session. Invalid or unrecognized comments retain the normal\n  // feedback route below.\n  if (context.reviewCommand) return reReviewRequestedPullRequest(context);\n  if (!context.item || !context.pullRequest || !context.issueComment) return;\n  // Provenance binds the comment to the Work item that authored the PR — the\n  // only session that can act on it. A Review card must not react to comments\n  // on the PR it is reviewing.\n  if (context.board !== 'work') return;\n  if (context.pullRequest.state !== 'open' || context.pullRequest.merged) return;\n  // `factoryAuthored` is one bit for the whole Factory, so Factory's own\n  // comments are indistinguishable between roles — waking on all of them would\n  // let the Work agent's own progress comments wake itself in a loop. The one\n  // exception is the review verdict the Review run had to post as a comment\n  // because GitHub refused a self-review: that is the handoff, and it only ever\n  // asks for changes once per review, so it cannot sustain a loop.\n  if (\n    context.actor.type === 'github' &&\n    context.actor.factoryAuthored &&\n    !requestsChangesVerdict(context.issueComment.body)\n  ) {\n    return;\n  }\n  return {\n    type: 'sendMessage',\n    idempotencyKey: `${context.ingress.id}:address-pull-request-comment`,\n    role: 'work',\n    priority: 'high',\n    message:\n      `${context.issueComment.author ?? 'Someone'} commented on pull request #${context.pullRequest.number} ` +\n      `(${context.issueComment.url ?? context.pullRequest.url}). Read the comment, address it if you agree, and push ` +\n      'the fixes to the PR branch. Reply on GitHub to anything you are deliberately not changing, explaining why.',\n  } as const;\n}\n\nfunction pullRequestClosed(context: FactoryGithubRuleContext) {\n  if (!context.item || !context.pullRequest || context.pullRequest.merged) return;\n  if (context.board !== 'review') return;\n  // A PR closed without merging is abandoned review work: clear the card off\n  // the board instead of leaving it in Reviewing forever.\n  return {\n    type: 'transition',\n    idempotencyKey: `${context.ingress.id}:pull-request-closed`,\n    board: 'review',\n    stage: 'canceled',\n    message: {\n      text:\n        `Pull request #${context.pullRequest.number} was closed without merging; ` +\n        'this Review card was moved to Canceled.',\n    },\n  } as const;\n}\n\nfunction reReviewRequestedPullRequest(context: FactoryGithubRuleContext) {\n  // GitHub reviewer requests and Factory's exact mention command are both\n  // explicit requests to enter the same Review lifecycle.\n  const factoryReviewEntry = context.reviewRequest?.factoryReviewer || context.reviewCommand !== undefined;\n  if ((context.item && context.board !== 'review') || !factoryReviewEntry) return;\n  if (!context.pullRequest || context.pullRequest.state !== 'open' || context.pullRequest.merged) return;\n  // Trusted (write/admin) requesters only: creating or re-entering review checks\n  // out and executes PR code, the same bar pullRequestOpened applies to auto-review.\n  if (!trustedGithubActor(context)) return;\n  if (context.actor.type === 'github' && context.actor.factoryAuthored) return;\n  if (!context.item) {\n    // On this path the actor is the *requester*, so the materialized\n    // `authorTrusted` stamp records their trust (always true past the gate\n    // above), not the PR author's: a trusted maintainer requesting a Factory\n    // review vouches for the PR.\n    return materializePullRequestIntake(context, {\n      idempotencyKey: `${context.ingress.id}:pull-request-review-requested-intake`,\n      autoStartCandidate: true,\n      stage: 'review',\n    });\n  }\n  // Already in Reviewing with no verdict yet: a pass is pending or running.\n  // Once a verdict is recorded the card rests in Reviewing, so a fresh request\n  // re-enters the stage to start another pass.\n  const reviewing = context.item.stages.length === 1 && context.item.stages[0] === 'review';\n  if (reviewing && !hasRecordedVerdict(context.item)) return;\n  return {\n    type: 'transition',\n    idempotencyKey: `${context.ingress.id}:re-review-requested`,\n    board: 'review',\n    stage: 'review',\n    ...(reviewing ? { reenter: true } : {}),\n  } as const;\n}\n\nfunction reReviewUpdatedPullRequest(context: FactoryGithubRuleContext) {\n  if (!context.item || context.board !== 'review') return;\n  if (!context.pullRequest || context.pullRequest.state !== 'open' || context.pullRequest.merged) return;\n  // Intake has not started a review pass yet, so a push there is just more of\n  // the code the first pass will read. A push to a card sitting in Reviewing is\n  // different: it invalidates whatever that pass is reading, so re-enter the\n  // stage to supersede it. `reviewPullRequest` cancels the stale run and picks\n  // the right skill for the entry it sees.\n  if (context.item.stages.some(stage => stage === 'intake')) return;\n  // A fork's author controls its head branch, so an untrusted push must not be\n  // able to start review passes on demand; a maintainer can still request one.\n  if (!trustedGithubActor(context) && !context.pullRequest.factoryAuthored) return;\n  const alreadyReviewing = context.item.stages.some(stage => stage === 'review');\n  return {\n    type: 'transition',\n    idempotencyKey: `${context.ingress.id}:re-review-updated`,\n    board: 'review',\n    stage: 'review',\n    // Re-entry is the point when the card is already Reviewing: the stage's\n    // entry rule is what cancels the superseded pass and starts one on the code\n    // that just landed.\n    ...(alreadyReviewing ? { reenter: true } : {}),\n  } as const;\n}\n\nexport const defaultGithubRules = Object.freeze({\n  issueOpened: issueOpened,\n  issueEdited: retriageGithubIssue,\n  issueClosed: issueClosed,\n  issueCommentCreated: retriageGithubIssue,\n  issueCommentEdited: retriageGithubIssue,\n  issueCommentDeleted: retriageGithubIssue,\n  pullRequestOpened: pullRequestOpened,\n  pullRequestUpdated: reReviewUpdatedPullRequest,\n  pullRequestCommentCreated: addressPullRequestComment,\n  pullRequestReviewRequested: reReviewRequestedPullRequest,\n  pullRequestReviewSubmitted: addressReviewFeedback,\n  pullRequestMerged: pullRequestMerged,\n  pullRequestClosed: pullRequestClosed,\n} satisfies GithubEventRules);\n\nexport function resolveGithubRules(overrides?: GithubRuleOverrides): GithubEventRules {\n  if (overrides !== undefined && (overrides === null || typeof overrides !== 'object' || Array.isArray(overrides))) {\n    throw new Error('GitHub rules must be an object.');\n  }\n  const rules: Record<string, FactoryRuleHandler<FactoryGithubRuleContext> | null> = { ...defaultGithubRules };\n  for (const key of Reflect.ownKeys(overrides ?? {})) {\n    if (typeof key !== 'string' || !Object.hasOwn(defaultGithubRules, key)) {\n      throw new Error(`Unknown GitHub rule event: ${String(key)}.`);\n    }\n    const handler = overrides?.[key as FactoryGithubEventName];\n    if (handler !== undefined && handler !== null && typeof handler !== 'function') {\n      throw new Error(`GitHub rule ${key} must be a function, null, or undefined.`);\n    }\n    if (handler !== undefined) rules[key] = handler;\n  }\n  return Object.freeze(rules) as GithubEventRules;\n}\n"],"mappings":";;;;AAYA,SAAS,mBAAmB,SAA2D;CACrF,OAAO,QAAQ,MAAM,SAAS,YAAY,QAAQ,MAAM;AAC1D;AAEA,SAAS,iBAAiB,SAAsE;CAC9F,OAAO,QAAQ,MAAM,SAAS,WAAW,QAAQ,MAAM,QAAQ,KAAA;AACjE;AAEA,SAAS,oBAAoB,SAAmC;CAC9D,IAAI,CAAC,QAAQ,QAAQ,QAAQ,KAAK,WAAW,kBAAkB,CAAC,QAAQ,KAAK,KAAK;CAClF,IAAI,QAAQ,MAAM,SAAS,YAAY,QAAQ,MAAM,iBAAiB;CAEtE,MAAM,QAAQ,QAAQ,KAAK,QAAQ,WAAW,IAAI,QAAQ,KAAK,OAAO,KAAK,KAAA;CAC3E,IAAI,UAAU,aAAa,UAAU,UAAU;CAE/C,IAAI,2BAA2B,QAAQ,KAAK,MAAM,GAAG;CAErD,MAAM,SACJ,QAAQ,UAAU,gBACd,QAAQ,aAAa,SAAS,QAAQ,YAAY,OAChD,gCACA,QAAQ,aAAa,QACnB,uBACA,sBACJ,QAAQ,UAAU,wBAChB,oBACA,QAAQ,UAAU,uBAChB,mBACA;CACV,OAAO;EACL,MAAM;EACN,gBAAgB,GAAG,QAAQ,QAAQ,GAAG;EACtC,MAAM;EACN,WAAW;EACX,WAAW,2BAA2B,QAAQ,KAAK,IAAI,UAAU,OAAO;CAC1E;AACF;AAEA,SAAS,oBAAoB,WAA+B,kBAAmC;CAC7F,IAAI,CAAC,WAAW,OAAO;CACvB,MAAM,kBAAkB,KAAK,MAAM,SAAS;CAC5C,MAAM,mBAAmB,KAAK,MAAM,gBAAgB;CACpD,OAAO,OAAO,SAAS,eAAe,KAAK,OAAO,SAAS,gBAAgB,KAAK,kBAAkB;AACpG;AAEA,SAAS,YAAY,SAAmC;CACtD,IAAI,CAAC,QAAQ,OAAO;CAIpB,OAAO;EACL,MAAM;EACN,gBAAgB,GAAG,QAAQ,QAAQ,GAAG;EACtC,OAAO,QAAQ,QAAQ,SAAS;EAChC,QAAQ;EACR,WAAW,gBAAgB,QAAQ,MAAM;EACzC,OAAO,QAAQ,MAAM;EACrB,KAAK,QAAQ,MAAM;EACnB,OAAO,QAAQ,QAAQ,gBAAgB;EACvC,UAAU;GACR,oBAAoB,QAAQ,WAAW;GACvC,mBAAmB,QAAQ,MAAM;GACjC,GAAI,QAAQ,MAAM,YAAY,EAAE,iBAAiB,QAAQ,MAAM,UAAU,IAAI,CAAC;GAC9E,GAAI,iBAAiB,OAAO,IAAI,EAAE,QAAQ,iBAAiB,OAAO,EAAE,IAAI,CAAC;GACzE,eAAe,mBAAmB,OAAO;GACzC,oBACE,mBAAmB,OAAO,KAAK,oBAAoB,QAAQ,MAAM,WAAW,QAAQ,QAAQ,SAAS;GACvG,WAAW,QAAQ,MAAM,aAAa,CAAC;GACvC,QAAQ,QAAQ,MAAM,UAAU,CAAC;EACnC;CACF;AACF;AAEA,SAAS,YAAY,SAAmC;CACtD,IAAI,CAAC,QAAQ,QAAQ,QAAQ,KAAK,WAAW,kBAAkB,CAAC,QAAQ,OAAO;CAC/E,IAAI,QAAQ,UAAU,QAAQ;CAE9B,IAAI,QAAQ,KAAK,OAAO,MAAK,UAAS,UAAU,UAAU,UAAU,UAAU,GAAG;CAIjF,MAAM,WAAW,QAAQ,MAAM,gBAAgB,iBAAiB,QAAQ,MAAM,gBAAgB;CAC9F,OAAO;EACL,MAAM;EACN,gBAAgB,GAAG,QAAQ,QAAQ,GAAG;EACtC,OAAO;EACP,OAAO,WAAW,aAAa;EAC/B,SAAS,EACP,MACE,iBAAiB,QAAQ,MAAM,OAAO,aACnC,QAAQ,MAAM,cAAc,KAAK,QAAQ,MAAM,YAAY,KAAK,GAAG,gCACvC,WAAW,aAAa,OAAO,GAClE;CACF;AACF;AAEA,SAAS,6BACP,SACA,EACE,gBACA,oBACA,QAAQ,YAEV;CACA,IAAI,CAAC,QAAQ,aAAa;CAC1B,OAAO;EACL,MAAM;EACN;EACA,OAAO;EACP,QAAQ;EACR,WAAW,aAAa,QAAQ,YAAY;EAC5C,OAAO,QAAQ,YAAY;EAC3B,KAAK,QAAQ,YAAY;EACzB;EACA,UAAU;GACR,oBAAoB,QAAQ,WAAW;GACvC,yBAAyB,QAAQ,YAAY;GAC7C,GAAI,QAAQ,YAAY,YAAY,EAAE,iBAAiB,QAAQ,YAAY,UAAU,IAAI,CAAC;GAC1F,iBAAiB,QAAQ,YAAY;GACrC,eAAe,mBAAmB,OAAO;GACzC;GACA,OAAO,QAAQ,YAAY;GAC3B,OAAO,QAAQ,YAAY;GAC3B,QAAQ,QAAQ,YAAY;GAC5B,WAAW,QAAQ,YAAY,aAAa,CAAC;GAC7C,oBAAoB,QAAQ,YAAY,sBAAsB,CAAC;GAC/D,QAAQ,QAAQ,YAAY,UAAU,CAAC;GACvC,YAAY,QAAQ,YAAY;GAChC,YAAY,QAAQ,YAAY;GAChC,GAAI,QAAQ,YAAY,SAAS,EAAE,QAAQ,QAAQ,YAAY,OAAO,IAAI,CAAC;EAC7E;CACF;AACF;AAEA,SAAS,kBAAkB,SAAmC;CAC5D,IAAI,CAAC,QAAQ,aAAa;CAO1B,IAAI,QAAQ,QAAQ,QAAQ,sBAAsB,MAAM;EACtD,IAAI,QAAQ,UAAU,UAAU,QAAQ,YAAY,UAAU,QAAQ;EACtE,IAAI,CAAC,QAAQ,KAAK,OAAO,SAAS,SAAS,GAAG;EAG9C,IAAI,CAAC,mBAAmB,OAAO,KAAK,CAAC,QAAQ,YAAY,iBAAiB;EAC1E,OAAO;GACL,MAAM;GACN,gBAAgB,GAAG,QAAQ,QAAQ,GAAG;GACtC,OAAO;GACP,OAAO;EACT;CACF;CAGA,MAAM,sBACH,mBAAmB,OAAO,KAAK,QAAQ,YAAY,oBACpD,oBAAoB,QAAQ,YAAY,WAAW,QAAQ,QAAQ,SAAS;CAC9E,OAAO,6BAA6B,SAAS;EAC3C,gBAAgB,GAAG,QAAQ,QAAQ,GAAG;EACtC;CACF,CAAC;AACH;AAEA,SAAS,kBAAkB,SAAmC;CAC5D,IAAI,CAAC,QAAQ,QAAQ,CAAC,QAAQ,aAAa,QAAQ;CACnD,IAAI,QAAQ,UAAU,UAKpB,OAAO;EACL,MAAM;EACN,gBAAgB,GAAG,QAAQ,QAAQ,GAAG;EACtC,OAAO;EACP,OAAO;EACP,SAAS,EACP,MACE,iBAAiB,QAAQ,YAAY,OAAO,+GAEhD;CACF;CAKF,MAAM,wBAAwB,QAAQ,KAAK,UAAU;CACrD,IAAI,OAAO,0BAA0B,YAAY,0BAA0B,QAAQ,YAAY,QAC7F,OAAO;EACL,MAAM;EACN,gBAAgB,GAAG,QAAQ,QAAQ,GAAG;EACtC,MAAM;EACN,SACE,iBAAiB,QAAQ,YAAY,OAAO,yBAAyB,sBAAsB;CAE/F;CAEF,OAAO;EACL,MAAM;EACN,gBAAgB,GAAG,QAAQ,QAAQ,GAAG;EACtC,OAAO;EACP,OAAO;EACP,SAAS,EAAE,MAAM,iBAAiB,QAAQ,YAAY,OAAO,4CAA4C;CAC3G;AACF;AAEA,SAAS,sBAAsB,SAAmC;CAChE,IAAI,CAAC,QAAQ,QAAQ,CAAC,QAAQ,eAAe,CAAC,QAAQ,QAAQ;CAI9D,IAAI,QAAQ,UAAU,QAAQ;CAE9B,IAAI,QAAQ,YAAY,UAAU,UAAU,QAAQ,YAAY,QAAQ;CAIxE,IAAI,QAAQ,OAAO,MAAM,YAAY,MAAM,qBAAqB;CAKhE,OAAO;EACL,MAAM;EACN,gBAAgB,GAAG,QAAQ,QAAQ,GAAG;EACtC,MAAM;EACN,UAAU;EACV,SACE,2CAA2C,QAAQ,YAAY,OAAO,IAAI,QAAQ,OAAO,IAAI;CAGjG;AACF;;;;;;;;;;;AAYA,SAAS,uBAAuB,MAAmC;CAEjE,MAAM,aAAa,sBAAsB,IAAI;CAC7C,IAAI,CAAC,YAAY,OAAO;CAGxB,OAAO,kDAAkD,KAAK,UAAU;AAC1E;AAEA,SAAS,0BAA0B,SAAmC;CAIpE,IAAI,QAAQ,eAAe,OAAO,6BAA6B,OAAO;CACtE,IAAI,CAAC,QAAQ,QAAQ,CAAC,QAAQ,eAAe,CAAC,QAAQ,cAAc;CAIpE,IAAI,QAAQ,UAAU,QAAQ;CAC9B,IAAI,QAAQ,YAAY,UAAU,UAAU,QAAQ,YAAY,QAAQ;CAOxE,IACE,QAAQ,MAAM,SAAS,YACvB,QAAQ,MAAM,mBACd,CAAC,uBAAuB,QAAQ,aAAa,IAAI,GAEjD;CAEF,OAAO;EACL,MAAM;EACN,gBAAgB,GAAG,QAAQ,QAAQ,GAAG;EACtC,MAAM;EACN,UAAU;EACV,SACE,GAAG,QAAQ,aAAa,UAAU,UAAU,8BAA8B,QAAQ,YAAY,OAAO,IACjG,QAAQ,aAAa,OAAO,QAAQ,YAAY,IAAI;CAE5D;AACF;AAEA,SAAS,kBAAkB,SAAmC;CAC5D,IAAI,CAAC,QAAQ,QAAQ,CAAC,QAAQ,eAAe,QAAQ,YAAY,QAAQ;CACzE,IAAI,QAAQ,UAAU,UAAU;CAGhC,OAAO;EACL,MAAM;EACN,gBAAgB,GAAG,QAAQ,QAAQ,GAAG;EACtC,OAAO;EACP,OAAO;EACP,SAAS,EACP,MACE,iBAAiB,QAAQ,YAAY,OAAO,sEAEhD;CACF;AACF;AAEA,SAAS,6BAA6B,SAAmC;CAGvE,MAAM,qBAAqB,QAAQ,eAAe,mBAAmB,QAAQ,kBAAkB,KAAA;CAC/F,IAAK,QAAQ,QAAQ,QAAQ,UAAU,YAAa,CAAC,oBAAoB;CACzE,IAAI,CAAC,QAAQ,eAAe,QAAQ,YAAY,UAAU,UAAU,QAAQ,YAAY,QAAQ;CAGhG,IAAI,CAAC,mBAAmB,OAAO,GAAG;CAClC,IAAI,QAAQ,MAAM,SAAS,YAAY,QAAQ,MAAM,iBAAiB;CACtE,IAAI,CAAC,QAAQ,MAKX,OAAO,6BAA6B,SAAS;EAC3C,gBAAgB,GAAG,QAAQ,QAAQ,GAAG;EACtC,oBAAoB;EACpB,OAAO;CACT,CAAC;CAKH,MAAM,YAAY,QAAQ,KAAK,OAAO,WAAW,KAAK,QAAQ,KAAK,OAAO,OAAO;CACjF,IAAI,aAAa,CAAC,mBAAmB,QAAQ,IAAI,GAAG;CACpD,OAAO;EACL,MAAM;EACN,gBAAgB,GAAG,QAAQ,QAAQ,GAAG;EACtC,OAAO;EACP,OAAO;EACP,GAAI,YAAY,EAAE,SAAS,KAAK,IAAI,CAAC;CACvC;AACF;AAEA,SAAS,2BAA2B,SAAmC;CACrE,IAAI,CAAC,QAAQ,QAAQ,QAAQ,UAAU,UAAU;CACjD,IAAI,CAAC,QAAQ,eAAe,QAAQ,YAAY,UAAU,UAAU,QAAQ,YAAY,QAAQ;CAMhG,IAAI,QAAQ,KAAK,OAAO,MAAK,UAAS,UAAU,QAAQ,GAAG;CAG3D,IAAI,CAAC,mBAAmB,OAAO,KAAK,CAAC,QAAQ,YAAY,iBAAiB;CAC1E,MAAM,mBAAmB,QAAQ,KAAK,OAAO,MAAK,UAAS,UAAU,QAAQ;CAC7E,OAAO;EACL,MAAM;EACN,gBAAgB,GAAG,QAAQ,QAAQ,GAAG;EACtC,OAAO;EACP,OAAO;EAIP,GAAI,mBAAmB,EAAE,SAAS,KAAK,IAAI,CAAC;CAC9C;AACF;AAEA,MAAa,qBAAqB,OAAO,OAAO;CACjC;CACb,aAAa;CACA;CACb,qBAAqB;CACrB,oBAAoB;CACpB,qBAAqB;CACF;CACnB,oBAAoB;CACpB,2BAA2B;CAC3B,4BAA4B;CAC5B,4BAA4B;CACT;CACA;AACrB,CAA4B;AAE5B,SAAgB,mBAAmB,WAAmD;CACpF,IAAI,cAAc,KAAA,MAAc,cAAc,QAAQ,OAAO,cAAc,YAAY,MAAM,QAAQ,SAAS,IAC5G,MAAM,IAAI,MAAM,iCAAiC;CAEnD,MAAM,QAA6E,EAAE,GAAG,mBAAmB;CAC3G,KAAK,MAAM,OAAO,QAAQ,QAAQ,aAAa,CAAC,CAAC,GAAG;EAClD,IAAI,OAAO,QAAQ,YAAY,CAAC,OAAO,OAAO,oBAAoB,GAAG,GACnE,MAAM,IAAI,MAAM,8BAA8B,OAAO,GAAG,EAAE,EAAE;EAE9D,MAAM,UAAU,YAAY;EAC5B,IAAI,YAAY,KAAA,KAAa,YAAY,QAAQ,OAAO,YAAY,YAClE,MAAM,IAAI,MAAM,eAAe,IAAI,yCAAyC;EAE9E,IAAI,YAAY,KAAA,GAAW,MAAM,OAAO;CAC1C;CACA,OAAO,OAAO,OAAO,KAAK;AAC5B"}

package/dist/integrations/github/reconcile-worker.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"reconcile-worker.d.ts","sourceRoot":"","sources":["../../../src/integrations/github/reconcile-worker.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAEtD,OAAO,KAAK,EACV,+BAA+B,EAC/B,+BAA+B,EAC/B,uBAAuB,EACxB,MAAM,8CAA8C,CAAC;AACtD,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AACnE,OAAO,KAAK,EAAE,2BAA2B,EAAuB,MAAM,YAAY,CAAC;AAGnF,eAAO,MAAM,oCAAoC,QAAc,CAAC;AAIhE,kFAAkF;AAClF,MAAM,WAAW,+BAA+B;IAC9C,mBAAmB,EAAE;QACnB,0BAA0B,IAAI,OAAO,CAAC,+BAA+B,EAAE,CAAC,CAAC;QACzE,wBAAwB,CAAC,IAAI,EAAE;YAC7B,sBAAsB,EAAE,MAAM,CAAC;YAC/B,oBAAoB,EAAE,MAAM,CAAC;SAC9B,GAAG,OAAO,CAAC,+BAA+B,EAAE,CAAC,CAAC;KAChD,CAAC;IACF,YAAY,EAAE;QACZ,gBAAgB,CAAC,IAAI,EAAE;YAAE,KAAK,EAAE,MAAM,CAAC;YAAC,UAAU,EAAE,MAAM,CAAA;SAAE,GAAG,OAAO,CAAC,uBAAuB,GAAG,IAAI,CAAC,CAAC;KACxG,CAAC;CACH;AAED,MAAM,WAAW,2BAA2B;IAC1C,SAAS,CAAC,EAAE,2BAA2B,CAAC;IACxC,eAAe,CAAC,EAAE,qBAAqB,CAAC;IACxC,aAAa,EAAE,+BAA+B,CAAC;IAC/C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AAED;;;;GAIG;AACH,qBAAa,qBAAsB,SAAQ,YAAY;;IACrD,QAAQ,CAAC,IAAI,mCAAmC;gBAkBpC,MAAM,EAAE,2BAA2B;IAoBzC,IAAI,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAKrC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAYtB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAQ3B,IAAI,SAAS,IAAI,OAAO,CAEvB;CAiJF"}
+{"version":3,"file":"reconcile-worker.d.ts","sourceRoot":"","sources":["../../../src/integrations/github/reconcile-worker.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAEtD,OAAO,KAAK,EACV,+BAA+B,EAC/B,+BAA+B,EAC/B,uBAAuB,EACxB,MAAM,8CAA8C,CAAC;AACtD,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AACnE,OAAO,KAAK,EAAE,2BAA2B,EAAuB,MAAM,YAAY,CAAC;AAGnF,eAAO,MAAM,oCAAoC,QAAc,CAAC;AAIhE,kFAAkF;AAClF,MAAM,WAAW,+BAA+B;IAC9C,mBAAmB,EAAE;QACnB,0BAA0B,IAAI,OAAO,CAAC,+BAA+B,EAAE,CAAC,CAAC;QACzE,wBAAwB,CAAC,IAAI,EAAE;YAC7B,sBAAsB,EAAE,MAAM,CAAC;YAC/B,oBAAoB,EAAE,MAAM,CAAC;SAC9B,GAAG,OAAO,CAAC,+BAA+B,EAAE,CAAC,CAAC;KAChD,CAAC;IACF,YAAY,EAAE;QACZ,gBAAgB,CAAC,IAAI,EAAE;YAAE,KAAK,EAAE,MAAM,CAAC;YAAC,UAAU,EAAE,MAAM,CAAA;SAAE,GAAG,OAAO,CAAC,uBAAuB,GAAG,IAAI,CAAC,CAAC;KACxG,CAAC;CACH;AAED,MAAM,WAAW,2BAA2B;IAC1C,SAAS,CAAC,EAAE,2BAA2B,CAAC;IACxC,eAAe,CAAC,EAAE,qBAAqB,CAAC;IACxC,aAAa,EAAE,+BAA+B,CAAC;IAC/C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AAED;;;;GAIG;AACH,qBAAa,qBAAsB,SAAQ,YAAY;;IACrD,QAAQ,CAAC,IAAI,mCAAmC;gBAkBpC,MAAM,EAAE,2BAA2B;IAoBzC,IAAI,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAKrC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAYtB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAQ3B,IAAI,SAAS,IAAI,OAAO,CAEvB;CAiJF"}

package/dist/integrations/github/reconcile-worker.js

@@ -1,5 +1,4 @@
 import { NoopLeaseProvider, isLeaseProvider } from "@mastra/core/events";
-import { randomUUID } from "crypto";
 import { MastraWorker } from "@mastra/core/worker";
 //#region src/integrations/github/reconcile-worker.ts
 const DEFAULT_GITHUB_RECONCILE_INTERVAL_MS = 60 * 6e4;
@@ -18,7 +17,7 @@ var GithubReconcileWorker = class extends MastraWorker {
 	#intervalMs;
 	#issueIntervalMs;
 	#leaseTtlMs;
-	#leaseOwner = randomUUID();
+	#leaseOwner = globalThis.crypto.randomUUID();
 	#now;
 	#running = false;
 	#timer;

package/dist/integrations/github/reconcile-worker.js.map

@@ -1 +1 @@
-{"version":3,"file":"reconcile-worker.js","names":["#reconcile","#reconcileIssues","#sourceControl","#intervalMs","#issueIntervalMs","#leaseTtlMs","#leaseOwner","#now","#leaseProvider","#running","#schedule","#timer","#inFlight","#tick","#nextDelay","#nextPullRequestReconcileAt","#nextIssueReconcileAt","#targets"],"sources":["../../../src/integrations/github/reconcile-worker.ts"],"sourcesContent":["import { randomUUID } from 'node:crypto';\n\nimport { isLeaseProvider, NoopLeaseProvider } from '@mastra/core/events';\nimport type { LeaseProvider, PubSub } from '@mastra/core/events';\nimport { MastraWorker } from '@mastra/core/worker';\nimport type { WorkerDeps } from '@mastra/core/worker';\n\nimport type {\n  ConfiguredExternalRepositoryKey,\n  ExternalRepositoryProjectTarget,\n  SourceControlRepository,\n} from '../../storage/domains/source-control/base.js';\nimport type { GithubIssueReconciler } from './issue-reconciler.js';\nimport type { GithubPullRequestReconciler, ReconcileRepository } from './rules.js';\n\n// Webhooks are the primary sync; the sweeps only catch drift, so hourly.\nexport const DEFAULT_GITHUB_RECONCILE_INTERVAL_MS = 60 * 60_000;\nconst MIN_LEASE_TTL_MS = 30_000;\nconst LEASE_KEY = 'github:pull-request-reconcile';\n\n/** Storage slice the sweep needs to turn configured repositories into targets. */\nexport interface GithubReconcileRepositorySource {\n  projectRepositories: {\n    listConfiguredExternalKeys(): Promise<ConfiguredExternalRepositoryKey[]>;\n    listByExternalRepository(args: {\n      installationExternalId: string;\n      repositoryExternalId: string;\n    }): Promise<ExternalRepositoryProjectTarget[]>;\n  };\n  repositories: {\n    findByExternalId(args: { orgId: string; externalId: string }): Promise<SourceControlRepository | null>;\n  };\n}\n\nexport interface GithubReconcileWorkerConfig {\n  reconcile?: GithubPullRequestReconciler;\n  reconcileIssues?: GithubIssueReconciler;\n  sourceControl: GithubReconcileRepositorySource;\n  intervalMs?: number;\n  issueIntervalMs?: number;\n  now?: () => number;\n}\n\n/**\n * Periodic GitHub state sweeps for the self-hosted integration. Pull requests\n * drive review cards and issues drive work cards, but both share discovery and\n * a lease so replicas never sweep the same configured repositories together.\n */\nexport class GithubReconcileWorker extends MastraWorker {\n  readonly name = 'github-pull-request-reconcile';\n\n  readonly #reconcile: GithubPullRequestReconciler | undefined;\n  readonly #reconcileIssues: GithubIssueReconciler | undefined;\n  readonly #sourceControl: GithubReconcileRepositorySource;\n  readonly #intervalMs: number;\n  readonly #issueIntervalMs: number;\n  readonly #leaseTtlMs: number;\n  readonly #leaseOwner = randomUUID();\n  readonly #now: () => number;\n\n  #running = false;\n  #timer: ReturnType<typeof setTimeout> | undefined;\n  #inFlight: Promise<void> | undefined;\n  #leaseProvider: LeaseProvider = NoopLeaseProvider;\n  #nextPullRequestReconcileAt = 0;\n  #nextIssueReconcileAt = 0;\n\n  constructor(config: GithubReconcileWorkerConfig) {\n    super();\n    if (!config.reconcile && !config.reconcileIssues) {\n      throw new Error('GitHub reconcile worker requires a pull request or issue reconciler.');\n    }\n    this.#reconcile = config.reconcile;\n    this.#reconcileIssues = config.reconcileIssues;\n    this.#sourceControl = config.sourceControl;\n    this.#intervalMs = config.intervalMs ?? DEFAULT_GITHUB_RECONCILE_INTERVAL_MS;\n    this.#issueIntervalMs = config.issueIntervalMs ?? this.#intervalMs;\n    if (!Number.isFinite(this.#intervalMs) || this.#intervalMs <= 0) {\n      throw new Error('GitHub pull request reconcile interval must be a positive number.');\n    }\n    if (!Number.isFinite(this.#issueIntervalMs) || this.#issueIntervalMs <= 0) {\n      throw new Error('GitHub issue reconcile interval must be a positive number.');\n    }\n    this.#leaseTtlMs = Math.max(MIN_LEASE_TTL_MS, Math.min(this.#intervalMs, this.#issueIntervalMs) * 3);\n    this.#now = config.now ?? Date.now;\n  }\n\n  async init(deps: WorkerDeps): Promise<void> {\n    await super.init(deps);\n    this.#leaseProvider = getLeaseProvider(deps.pubsub);\n  }\n\n  async start(): Promise<void> {\n    if (this.#running) return;\n    if (!this.deps) throw new Error('GithubReconcileWorker: call init() before start()');\n    this.#running = true;\n    this.deps.logger.info('GitHub reconcile worker started', {\n      pullRequestIntervalMs: this.#reconcile ? this.#intervalMs : undefined,\n      issueIntervalMs: this.#reconcileIssues ? this.#issueIntervalMs : undefined,\n    });\n    // Sweep on boot: a restart is exactly when webhooks were most likely missed.\n    this.#schedule(0);\n  }\n\n  async stop(): Promise<void> {\n    if (!this.#running) return;\n    this.#running = false;\n    if (this.#timer) clearTimeout(this.#timer);\n    this.#timer = undefined;\n    await this.#inFlight;\n  }\n\n  get isRunning(): boolean {\n    return this.#running;\n  }\n\n  #schedule(delayMs: number): void {\n    if (!this.#running) return;\n    this.#timer = setTimeout(() => {\n      this.#timer = undefined;\n      const run = this.#tick().finally(() => {\n        this.#inFlight = undefined;\n        this.#schedule(this.#nextDelay());\n      });\n      this.#inFlight = run;\n    }, delayMs);\n    this.#timer.unref?.();\n  }\n\n  #nextDelay(): number {\n    const now = this.#now();\n    const due = [\n      this.#reconcile ? this.#nextPullRequestReconcileAt : undefined,\n      this.#reconcileIssues ? this.#nextIssueReconcileAt : undefined,\n    ].filter((at): at is number => at !== undefined);\n    return Math.max(0, Math.min(...due) - now);\n  }\n\n  async #tick(): Promise<void> {\n    const now = this.#now();\n    const reconcilePullRequests = Boolean(this.#reconcile && now >= this.#nextPullRequestReconcileAt);\n    const reconcileIssues = Boolean(this.#reconcileIssues && now >= this.#nextIssueReconcileAt);\n    if (!reconcilePullRequests && !reconcileIssues) return;\n    if (reconcilePullRequests) this.#nextPullRequestReconcileAt = now + this.#intervalMs;\n    if (reconcileIssues) this.#nextIssueReconcileAt = now + this.#issueIntervalMs;\n\n    // Replicas share one sweep: the ingress dedupes duplicate writes, but the\n    // reads still burn the installation's rate limit.\n    const lease = await this.#leaseProvider\n      .acquireLease(LEASE_KEY, this.#leaseOwner, this.#leaseTtlMs)\n      .catch(() => ({ acquired: false }));\n    if (!lease.acquired) return;\n\n    let hasLease = true;\n    const renewalTimer = setInterval(\n      () => {\n        void this.#leaseProvider\n          .renewLease(LEASE_KEY, this.#leaseOwner, this.#leaseTtlMs)\n          .then(renewed => {\n            if (!renewed) {\n              hasLease = false;\n              clearInterval(renewalTimer);\n              this.deps?.logger.warn('GitHub reconcile lease was lost mid-sweep; aborting further writes');\n            }\n          })\n          .catch(error => {\n            hasLease = false;\n            clearInterval(renewalTimer);\n            this.deps?.logger.warn('GitHub reconcile lease renewal failed; aborting further writes', {\n              error: error instanceof Error ? error.message : String(error),\n            });\n          });\n      },\n      Math.max(1_000, Math.floor(this.#leaseTtlMs / 3)),\n    );\n    renewalTimer.unref?.();\n\n    try {\n      const targets = await this.#targets();\n      if (targets.length === 0) return;\n\n      if (reconcilePullRequests && this.#reconcile) {\n        const startedAt = Date.now();\n        try {\n          const { errors, ...counts } = await this.#reconcile(targets);\n          const context = { ...counts, candidateRepositories: targets.length, durationMs: Date.now() - startedAt };\n          if (counts.failed > 0) {\n            this.deps?.logger.warn('GitHub pull request reconcile sweep completed with failures', {\n              ...context,\n              errors,\n            });\n          } else if (counts.merged > 0 || counts.closed > 0) {\n            this.deps?.logger.info('GitHub pull request reconcile replayed missed merges/closes', context);\n          } else {\n            this.deps?.logger.debug('GitHub pull request reconcile sweep completed', context);\n          }\n        } catch (error) {\n          this.deps?.logger.warn('GitHub pull request reconcile sweep failed', {\n            error: error instanceof Error ? error.message : String(error),\n          });\n        }\n      }\n\n      if (reconcileIssues && this.#reconcileIssues && hasLease) {\n        const startedAt = Date.now();\n        try {\n          const { errors, ...counts } = await this.#reconcileIssues(targets);\n          const context = { ...counts, candidateRepositories: targets.length, durationMs: Date.now() - startedAt };\n          if (counts.failed > 0) {\n            this.deps?.logger.warn('GitHub issue reconcile sweep completed with failures', { ...context, errors });\n          } else if (counts.closed > 0) {\n            this.deps?.logger.info('GitHub issue reconcile replayed closed work items', context);\n          } else if (counts.relabeled > 0) {\n            this.deps?.logger.info('GitHub issue reconcile re-applied label routing', context);\n          } else if (counts.updated > 0) {\n            this.deps?.logger.info('GitHub issue reconcile patched stale metadata', context);\n          } else {\n            this.deps?.logger.debug('GitHub issue reconcile sweep completed', context);\n          }\n        } catch (error) {\n          this.deps?.logger.warn('GitHub issue reconcile sweep failed', {\n            error: error instanceof Error ? error.message : String(error),\n          });\n        }\n      } else if (reconcileIssues && this.#reconcileIssues && !hasLease) {\n        this.deps?.logger.debug('GitHub issue reconcile skipped: lease lost during pull-request sweep');\n      }\n    } finally {\n      clearInterval(renewalTimer);\n      if (hasLease) {\n        await this.#leaseProvider.releaseLease(LEASE_KEY, this.#leaseOwner).catch(() => undefined);\n      }\n    }\n  }\n\n  /**\n   * Configured (installation, repository) pairs resolved to the numeric ids and\n   * slug the sweep addresses GitHub with. A pair whose repository row is gone\n   * is skipped rather than failing the sweep for the others.\n   */\n  async #targets(): Promise<ReconcileRepository[]> {\n    const keys = await this.#sourceControl.projectRepositories.listConfiguredExternalKeys();\n    const targets: ReconcileRepository[] = [];\n    for (const key of keys) {\n      const installationId = Number(key.installationExternalId);\n      const repositoryId = Number(key.repositoryExternalId);\n      if (!Number.isSafeInteger(installationId) || !Number.isSafeInteger(repositoryId)) continue;\n      const projects = await this.#sourceControl.projectRepositories.listByExternalRepository(key);\n      const orgId = projects[0]?.orgId;\n      if (!orgId) continue;\n      const repository = await this.#sourceControl.repositories.findByExternalId({\n        orgId,\n        externalId: key.repositoryExternalId,\n      });\n      if (!repository?.slug) continue;\n      targets.push({ id: repositoryId, fullName: repository.slug, installationId });\n    }\n    return targets;\n  }\n}\n\nfunction getLeaseProvider(pubsub: PubSub): LeaseProvider {\n  const getProvider = (pubsub as PubSub & { getLeaseProvider?: () => LeaseProvider | undefined }).getLeaseProvider;\n  if (typeof getProvider === 'function') return getProvider.call(pubsub) ?? NoopLeaseProvider;\n  return isLeaseProvider(pubsub) ? pubsub : NoopLeaseProvider;\n}\n"],"mappings":";;;;AAgBA,MAAa,uCAAuC,KAAK;AACzD,MAAM,mBAAmB;AACzB,MAAM,YAAY;;;;;;AA8BlB,IAAa,wBAAb,cAA2C,aAAa;CACtD,OAAgB;CAEhB;CACA;CACA;CACA;CACA;CACA;CACA,cAAuB,WAAW;CAClC;CAEA,WAAW;CACX;CACA;CACA,iBAAgC;CAChC,8BAA8B;CAC9B,wBAAwB;CAExB,YAAY,QAAqC;EAC/C,MAAM;EACN,IAAI,CAAC,OAAO,aAAa,CAAC,OAAO,iBAC/B,MAAM,IAAI,MAAM,sEAAsE;EAExF,KAAKA,aAAa,OAAO;EACzB,KAAKC,mBAAmB,OAAO;EAC/B,KAAKC,iBAAiB,OAAO;EAC7B,KAAKC,cAAc,OAAO,cAAA;EAC1B,KAAKC,mBAAmB,OAAO,mBAAmB,KAAKD;EACvD,IAAI,CAAC,OAAO,SAAS,KAAKA,WAAW,KAAK,KAAKA,eAAe,GAC5D,MAAM,IAAI,MAAM,mEAAmE;EAErF,IAAI,CAAC,OAAO,SAAS,KAAKC,gBAAgB,KAAK,KAAKA,oBAAoB,GACtE,MAAM,IAAI,MAAM,4DAA4D;EAE9E,KAAKC,cAAc,KAAK,IAAI,kBAAkB,KAAK,IAAI,KAAKF,aAAa,KAAKC,gBAAgB,IAAI,CAAC;EACnG,KAAKG,OAAO,OAAO,OAAO,KAAK;CACjC;CAEA,MAAM,KAAK,MAAiC;EAC1C,MAAM,MAAM,KAAK,IAAI;EACrB,KAAKC,iBAAiB,iBAAiB,KAAK,MAAM;CACpD;CAEA,MAAM,QAAuB;EAC3B,IAAI,KAAKC,UAAU;EACnB,IAAI,CAAC,KAAK,MAAM,MAAM,IAAI,MAAM,mDAAmD;EACnF,KAAKA,WAAW;EAChB,KAAK,KAAK,OAAO,KAAK,mCAAmC;GACvD,uBAAuB,KAAKT,aAAa,KAAKG,cAAc,KAAA;GAC5D,iBAAiB,KAAKF,mBAAmB,KAAKG,mBAAmB,KAAA;EACnE,CAAC;EAED,KAAKM,UAAU,CAAC;CAClB;CAEA,MAAM,OAAsB;EAC1B,IAAI,CAAC,KAAKD,UAAU;EACpB,KAAKA,WAAW;EAChB,IAAI,KAAKE,QAAQ,aAAa,KAAKA,MAAM;EACzC,KAAKA,SAAS,KAAA;EACd,MAAM,KAAKC;CACb;CAEA,IAAI,YAAqB;EACvB,OAAO,KAAKH;CACd;CAEA,UAAU,SAAuB;EAC/B,IAAI,CAAC,KAAKA,UAAU;EACpB,KAAKE,SAAS,iBAAiB;GAC7B,KAAKA,SAAS,KAAA;GACd,MAAM,MAAM,KAAKE,MAAM,CAAC,CAAC,cAAc;IACrC,KAAKD,YAAY,KAAA;IACjB,KAAKF,UAAU,KAAKI,WAAW,CAAC;GAClC,CAAC;GACD,KAAKF,YAAY;EACnB,GAAG,OAAO;EACV,KAAKD,OAAO,QAAQ;CACtB;CAEA,aAAqB;EACnB,MAAM,MAAM,KAAKJ,KAAK;EACtB,MAAM,MAAM,CACV,KAAKP,aAAa,KAAKe,8BAA8B,KAAA,GACrD,KAAKd,mBAAmB,KAAKe,wBAAwB,KAAA,CACvD,CAAC,CAAC,QAAQ,OAAqB,OAAO,KAAA,CAAS;EAC/C,OAAO,KAAK,IAAI,GAAG,KAAK,IAAI,GAAG,GAAG,IAAI,GAAG;CAC3C;CAEA,MAAMH,QAAuB;EAC3B,MAAM,MAAM,KAAKN,KAAK;EACtB,MAAM,wBAAwB,QAAQ,KAAKP,cAAc,OAAO,KAAKe,2BAA2B;EAChG,MAAM,kBAAkB,QAAQ,KAAKd,oBAAoB,OAAO,KAAKe,qBAAqB;EAC1F,IAAI,CAAC,yBAAyB,CAAC,iBAAiB;EAChD,IAAI,uBAAuB,KAAKD,8BAA8B,MAAM,KAAKZ;EACzE,IAAI,iBAAiB,KAAKa,wBAAwB,MAAM,KAAKZ;EAO7D,IAAI,EAAC,MAHe,KAAKI,eACtB,aAAa,WAAW,KAAKF,aAAa,KAAKD,WAAW,CAAC,CAC3D,aAAa,EAAE,UAAU,MAAM,EAAE,EAAA,CACzB,UAAU;EAErB,IAAI,WAAW;EACf,MAAM,eAAe,kBACb;GACJ,KAAUG,eACP,WAAW,WAAW,KAAKF,aAAa,KAAKD,WAAW,CAAC,CACzD,MAAK,YAAW;IACf,IAAI,CAAC,SAAS;KACZ,WAAW;KACX,cAAc,YAAY;KAC1B,KAAK,MAAM,OAAO,KAAK,oEAAoE;IAC7F;GACF,CAAC,CAAC,CACD,OAAM,UAAS;IACd,WAAW;IACX,cAAc,YAAY;IAC1B,KAAK,MAAM,OAAO,KAAK,kEAAkE,EACvF,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAC9D,CAAC;GACH,CAAC;EACL,GACA,KAAK,IAAI,KAAO,KAAK,MAAM,KAAKA,cAAc,CAAC,CAAC,CAClD;EACA,aAAa,QAAQ;EAErB,IAAI;GACF,MAAM,UAAU,MAAM,KAAKY,SAAS;GACpC,IAAI,QAAQ,WAAW,GAAG;GAE1B,IAAI,yBAAyB,KAAKjB,YAAY;IAC5C,MAAM,YAAY,KAAK,IAAI;IAC3B,IAAI;KACF,MAAM,EAAE,QAAQ,GAAG,WAAW,MAAM,KAAKA,WAAW,OAAO;KAC3D,MAAM,UAAU;MAAE,GAAG;MAAQ,uBAAuB,QAAQ;MAAQ,YAAY,KAAK,IAAI,IAAI;KAAU;KACvG,IAAI,OAAO,SAAS,GAClB,KAAK,MAAM,OAAO,KAAK,+DAA+D;MACpF,GAAG;MACH;KACF,CAAC;UACI,IAAI,OAAO,SAAS,KAAK,OAAO,SAAS,GAC9C,KAAK,MAAM,OAAO,KAAK,+DAA+D,OAAO;UAE7F,KAAK,MAAM,OAAO,MAAM,iDAAiD,OAAO;IAEpF,SAAS,OAAO;KACd,KAAK,MAAM,OAAO,KAAK,8CAA8C,EACnE,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAC9D,CAAC;IACH;GACF;GAEA,IAAI,mBAAmB,KAAKC,oBAAoB,UAAU;IACxD,MAAM,YAAY,KAAK,IAAI;IAC3B,IAAI;KACF,MAAM,EAAE,QAAQ,GAAG,WAAW,MAAM,KAAKA,iBAAiB,OAAO;KACjE,MAAM,UAAU;MAAE,GAAG;MAAQ,uBAAuB,QAAQ;MAAQ,YAAY,KAAK,IAAI,IAAI;KAAU;KACvG,IAAI,OAAO,SAAS,GAClB,KAAK,MAAM,OAAO,KAAK,wDAAwD;MAAE,GAAG;MAAS;KAAO,CAAC;UAChG,IAAI,OAAO,SAAS,GACzB,KAAK,MAAM,OAAO,KAAK,qDAAqD,OAAO;UAC9E,IAAI,OAAO,YAAY,GAC5B,KAAK,MAAM,OAAO,KAAK,mDAAmD,OAAO;UAC5E,IAAI,OAAO,UAAU,GAC1B,KAAK,MAAM,OAAO,KAAK,iDAAiD,OAAO;UAE/E,KAAK,MAAM,OAAO,MAAM,0CAA0C,OAAO;IAE7E,SAAS,OAAO;KACd,KAAK,MAAM,OAAO,KAAK,uCAAuC,EAC5D,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAC9D,CAAC;IACH;GACF,OAAO,IAAI,mBAAmB,KAAKA,oBAAoB,CAAC,UACtD,KAAK,MAAM,OAAO,MAAM,sEAAsE;EAElG,UAAU;GACR,cAAc,YAAY;GAC1B,IAAI,UACF,MAAM,KAAKO,eAAe,aAAa,WAAW,KAAKF,WAAW,CAAC,CAAC,YAAY,KAAA,CAAS;EAE7F;CACF;;;;;;CAOA,MAAMW,WAA2C;EAC/C,MAAM,OAAO,MAAM,KAAKf,eAAe,oBAAoB,2BAA2B;EACtF,MAAM,UAAiC,CAAC;EACxC,KAAK,MAAM,OAAO,MAAM;GACtB,MAAM,iBAAiB,OAAO,IAAI,sBAAsB;GACxD,MAAM,eAAe,OAAO,IAAI,oBAAoB;GACpD,IAAI,CAAC,OAAO,cAAc,cAAc,KAAK,CAAC,OAAO,cAAc,YAAY,GAAG;GAElF,MAAM,SAAQ,MADS,KAAKA,eAAe,oBAAoB,yBAAyB,GAAG,EAAA,CACpE,EAAE,EAAE;GAC3B,IAAI,CAAC,OAAO;GACZ,MAAM,aAAa,MAAM,KAAKA,eAAe,aAAa,iBAAiB;IACzE;IACA,YAAY,IAAI;GAClB,CAAC;GACD,IAAI,CAAC,YAAY,MAAM;GACvB,QAAQ,KAAK;IAAE,IAAI;IAAc,UAAU,WAAW;IAAM;GAAe,CAAC;EAC9E;EACA,OAAO;CACT;AACF;AAEA,SAAS,iBAAiB,QAA+B;CACvD,MAAM,cAAe,OAA2E;CAChG,IAAI,OAAO,gBAAgB,YAAY,OAAO,YAAY,KAAK,MAAM,KAAK;CAC1E,OAAO,gBAAgB,MAAM,IAAI,SAAS;AAC5C"}
+{"version":3,"file":"reconcile-worker.js","names":["#reconcile","#reconcileIssues","#sourceControl","#intervalMs","#issueIntervalMs","#leaseTtlMs","#leaseOwner","#now","#leaseProvider","#running","#schedule","#timer","#inFlight","#tick","#nextDelay","#nextPullRequestReconcileAt","#nextIssueReconcileAt","#targets"],"sources":["../../../src/integrations/github/reconcile-worker.ts"],"sourcesContent":["import { isLeaseProvider, NoopLeaseProvider } from '@mastra/core/events';\nimport type { LeaseProvider, PubSub } from '@mastra/core/events';\nimport { MastraWorker } from '@mastra/core/worker';\nimport type { WorkerDeps } from '@mastra/core/worker';\n\nimport type {\n  ConfiguredExternalRepositoryKey,\n  ExternalRepositoryProjectTarget,\n  SourceControlRepository,\n} from '../../storage/domains/source-control/base.js';\nimport type { GithubIssueReconciler } from './issue-reconciler.js';\nimport type { GithubPullRequestReconciler, ReconcileRepository } from './rules.js';\n\n// Webhooks are the primary sync; the sweeps only catch drift, so hourly.\nexport const DEFAULT_GITHUB_RECONCILE_INTERVAL_MS = 60 * 60_000;\nconst MIN_LEASE_TTL_MS = 30_000;\nconst LEASE_KEY = 'github:pull-request-reconcile';\n\n/** Storage slice the sweep needs to turn configured repositories into targets. */\nexport interface GithubReconcileRepositorySource {\n  projectRepositories: {\n    listConfiguredExternalKeys(): Promise<ConfiguredExternalRepositoryKey[]>;\n    listByExternalRepository(args: {\n      installationExternalId: string;\n      repositoryExternalId: string;\n    }): Promise<ExternalRepositoryProjectTarget[]>;\n  };\n  repositories: {\n    findByExternalId(args: { orgId: string; externalId: string }): Promise<SourceControlRepository | null>;\n  };\n}\n\nexport interface GithubReconcileWorkerConfig {\n  reconcile?: GithubPullRequestReconciler;\n  reconcileIssues?: GithubIssueReconciler;\n  sourceControl: GithubReconcileRepositorySource;\n  intervalMs?: number;\n  issueIntervalMs?: number;\n  now?: () => number;\n}\n\n/**\n * Periodic GitHub state sweeps for the self-hosted integration. Pull requests\n * drive review cards and issues drive work cards, but both share discovery and\n * a lease so replicas never sweep the same configured repositories together.\n */\nexport class GithubReconcileWorker extends MastraWorker {\n  readonly name = 'github-pull-request-reconcile';\n\n  readonly #reconcile: GithubPullRequestReconciler | undefined;\n  readonly #reconcileIssues: GithubIssueReconciler | undefined;\n  readonly #sourceControl: GithubReconcileRepositorySource;\n  readonly #intervalMs: number;\n  readonly #issueIntervalMs: number;\n  readonly #leaseTtlMs: number;\n  readonly #leaseOwner = globalThis.crypto.randomUUID();\n  readonly #now: () => number;\n\n  #running = false;\n  #timer: ReturnType<typeof setTimeout> | undefined;\n  #inFlight: Promise<void> | undefined;\n  #leaseProvider: LeaseProvider = NoopLeaseProvider;\n  #nextPullRequestReconcileAt = 0;\n  #nextIssueReconcileAt = 0;\n\n  constructor(config: GithubReconcileWorkerConfig) {\n    super();\n    if (!config.reconcile && !config.reconcileIssues) {\n      throw new Error('GitHub reconcile worker requires a pull request or issue reconciler.');\n    }\n    this.#reconcile = config.reconcile;\n    this.#reconcileIssues = config.reconcileIssues;\n    this.#sourceControl = config.sourceControl;\n    this.#intervalMs = config.intervalMs ?? DEFAULT_GITHUB_RECONCILE_INTERVAL_MS;\n    this.#issueIntervalMs = config.issueIntervalMs ?? this.#intervalMs;\n    if (!Number.isFinite(this.#intervalMs) || this.#intervalMs <= 0) {\n      throw new Error('GitHub pull request reconcile interval must be a positive number.');\n    }\n    if (!Number.isFinite(this.#issueIntervalMs) || this.#issueIntervalMs <= 0) {\n      throw new Error('GitHub issue reconcile interval must be a positive number.');\n    }\n    this.#leaseTtlMs = Math.max(MIN_LEASE_TTL_MS, Math.min(this.#intervalMs, this.#issueIntervalMs) * 3);\n    this.#now = config.now ?? Date.now;\n  }\n\n  async init(deps: WorkerDeps): Promise<void> {\n    await super.init(deps);\n    this.#leaseProvider = getLeaseProvider(deps.pubsub);\n  }\n\n  async start(): Promise<void> {\n    if (this.#running) return;\n    if (!this.deps) throw new Error('GithubReconcileWorker: call init() before start()');\n    this.#running = true;\n    this.deps.logger.info('GitHub reconcile worker started', {\n      pullRequestIntervalMs: this.#reconcile ? this.#intervalMs : undefined,\n      issueIntervalMs: this.#reconcileIssues ? this.#issueIntervalMs : undefined,\n    });\n    // Sweep on boot: a restart is exactly when webhooks were most likely missed.\n    this.#schedule(0);\n  }\n\n  async stop(): Promise<void> {\n    if (!this.#running) return;\n    this.#running = false;\n    if (this.#timer) clearTimeout(this.#timer);\n    this.#timer = undefined;\n    await this.#inFlight;\n  }\n\n  get isRunning(): boolean {\n    return this.#running;\n  }\n\n  #schedule(delayMs: number): void {\n    if (!this.#running) return;\n    this.#timer = setTimeout(() => {\n      this.#timer = undefined;\n      const run = this.#tick().finally(() => {\n        this.#inFlight = undefined;\n        this.#schedule(this.#nextDelay());\n      });\n      this.#inFlight = run;\n    }, delayMs);\n    this.#timer.unref?.();\n  }\n\n  #nextDelay(): number {\n    const now = this.#now();\n    const due = [\n      this.#reconcile ? this.#nextPullRequestReconcileAt : undefined,\n      this.#reconcileIssues ? this.#nextIssueReconcileAt : undefined,\n    ].filter((at): at is number => at !== undefined);\n    return Math.max(0, Math.min(...due) - now);\n  }\n\n  async #tick(): Promise<void> {\n    const now = this.#now();\n    const reconcilePullRequests = Boolean(this.#reconcile && now >= this.#nextPullRequestReconcileAt);\n    const reconcileIssues = Boolean(this.#reconcileIssues && now >= this.#nextIssueReconcileAt);\n    if (!reconcilePullRequests && !reconcileIssues) return;\n    if (reconcilePullRequests) this.#nextPullRequestReconcileAt = now + this.#intervalMs;\n    if (reconcileIssues) this.#nextIssueReconcileAt = now + this.#issueIntervalMs;\n\n    // Replicas share one sweep: the ingress dedupes duplicate writes, but the\n    // reads still burn the installation's rate limit.\n    const lease = await this.#leaseProvider\n      .acquireLease(LEASE_KEY, this.#leaseOwner, this.#leaseTtlMs)\n      .catch(() => ({ acquired: false }));\n    if (!lease.acquired) return;\n\n    let hasLease = true;\n    const renewalTimer = setInterval(\n      () => {\n        void this.#leaseProvider\n          .renewLease(LEASE_KEY, this.#leaseOwner, this.#leaseTtlMs)\n          .then(renewed => {\n            if (!renewed) {\n              hasLease = false;\n              clearInterval(renewalTimer);\n              this.deps?.logger.warn('GitHub reconcile lease was lost mid-sweep; aborting further writes');\n            }\n          })\n          .catch(error => {\n            hasLease = false;\n            clearInterval(renewalTimer);\n            this.deps?.logger.warn('GitHub reconcile lease renewal failed; aborting further writes', {\n              error: error instanceof Error ? error.message : String(error),\n            });\n          });\n      },\n      Math.max(1_000, Math.floor(this.#leaseTtlMs / 3)),\n    );\n    renewalTimer.unref?.();\n\n    try {\n      const targets = await this.#targets();\n      if (targets.length === 0) return;\n\n      if (reconcilePullRequests && this.#reconcile) {\n        const startedAt = Date.now();\n        try {\n          const { errors, ...counts } = await this.#reconcile(targets);\n          const context = { ...counts, candidateRepositories: targets.length, durationMs: Date.now() - startedAt };\n          if (counts.failed > 0) {\n            this.deps?.logger.warn('GitHub pull request reconcile sweep completed with failures', {\n              ...context,\n              errors,\n            });\n          } else if (counts.merged > 0 || counts.closed > 0) {\n            this.deps?.logger.info('GitHub pull request reconcile replayed missed merges/closes', context);\n          } else {\n            this.deps?.logger.debug('GitHub pull request reconcile sweep completed', context);\n          }\n        } catch (error) {\n          this.deps?.logger.warn('GitHub pull request reconcile sweep failed', {\n            error: error instanceof Error ? error.message : String(error),\n          });\n        }\n      }\n\n      if (reconcileIssues && this.#reconcileIssues && hasLease) {\n        const startedAt = Date.now();\n        try {\n          const { errors, ...counts } = await this.#reconcileIssues(targets);\n          const context = { ...counts, candidateRepositories: targets.length, durationMs: Date.now() - startedAt };\n          if (counts.failed > 0) {\n            this.deps?.logger.warn('GitHub issue reconcile sweep completed with failures', { ...context, errors });\n          } else if (counts.closed > 0) {\n            this.deps?.logger.info('GitHub issue reconcile replayed closed work items', context);\n          } else if (counts.relabeled > 0) {\n            this.deps?.logger.info('GitHub issue reconcile re-applied label routing', context);\n          } else if (counts.updated > 0) {\n            this.deps?.logger.info('GitHub issue reconcile patched stale metadata', context);\n          } else {\n            this.deps?.logger.debug('GitHub issue reconcile sweep completed', context);\n          }\n        } catch (error) {\n          this.deps?.logger.warn('GitHub issue reconcile sweep failed', {\n            error: error instanceof Error ? error.message : String(error),\n          });\n        }\n      } else if (reconcileIssues && this.#reconcileIssues && !hasLease) {\n        this.deps?.logger.debug('GitHub issue reconcile skipped: lease lost during pull-request sweep');\n      }\n    } finally {\n      clearInterval(renewalTimer);\n      if (hasLease) {\n        await this.#leaseProvider.releaseLease(LEASE_KEY, this.#leaseOwner).catch(() => undefined);\n      }\n    }\n  }\n\n  /**\n   * Configured (installation, repository) pairs resolved to the numeric ids and\n   * slug the sweep addresses GitHub with. A pair whose repository row is gone\n   * is skipped rather than failing the sweep for the others.\n   */\n  async #targets(): Promise<ReconcileRepository[]> {\n    const keys = await this.#sourceControl.projectRepositories.listConfiguredExternalKeys();\n    const targets: ReconcileRepository[] = [];\n    for (const key of keys) {\n      const installationId = Number(key.installationExternalId);\n      const repositoryId = Number(key.repositoryExternalId);\n      if (!Number.isSafeInteger(installationId) || !Number.isSafeInteger(repositoryId)) continue;\n      const projects = await this.#sourceControl.projectRepositories.listByExternalRepository(key);\n      const orgId = projects[0]?.orgId;\n      if (!orgId) continue;\n      const repository = await this.#sourceControl.repositories.findByExternalId({\n        orgId,\n        externalId: key.repositoryExternalId,\n      });\n      if (!repository?.slug) continue;\n      targets.push({ id: repositoryId, fullName: repository.slug, installationId });\n    }\n    return targets;\n  }\n}\n\nfunction getLeaseProvider(pubsub: PubSub): LeaseProvider {\n  const getProvider = (pubsub as PubSub & { getLeaseProvider?: () => LeaseProvider | undefined }).getLeaseProvider;\n  if (typeof getProvider === 'function') return getProvider.call(pubsub) ?? NoopLeaseProvider;\n  return isLeaseProvider(pubsub) ? pubsub : NoopLeaseProvider;\n}\n"],"mappings":";;;AAcA,MAAa,uCAAuC,KAAK;AACzD,MAAM,mBAAmB;AACzB,MAAM,YAAY;;;;;;AA8BlB,IAAa,wBAAb,cAA2C,aAAa;CACtD,OAAgB;CAEhB;CACA;CACA;CACA;CACA;CACA;CACA,cAAuB,WAAW,OAAO,WAAW;CACpD;CAEA,WAAW;CACX;CACA;CACA,iBAAgC;CAChC,8BAA8B;CAC9B,wBAAwB;CAExB,YAAY,QAAqC;EAC/C,MAAM;EACN,IAAI,CAAC,OAAO,aAAa,CAAC,OAAO,iBAC/B,MAAM,IAAI,MAAM,sEAAsE;EAExF,KAAKA,aAAa,OAAO;EACzB,KAAKC,mBAAmB,OAAO;EAC/B,KAAKC,iBAAiB,OAAO;EAC7B,KAAKC,cAAc,OAAO,cAAA;EAC1B,KAAKC,mBAAmB,OAAO,mBAAmB,KAAKD;EACvD,IAAI,CAAC,OAAO,SAAS,KAAKA,WAAW,KAAK,KAAKA,eAAe,GAC5D,MAAM,IAAI,MAAM,mEAAmE;EAErF,IAAI,CAAC,OAAO,SAAS,KAAKC,gBAAgB,KAAK,KAAKA,oBAAoB,GACtE,MAAM,IAAI,MAAM,4DAA4D;EAE9E,KAAKC,cAAc,KAAK,IAAI,kBAAkB,KAAK,IAAI,KAAKF,aAAa,KAAKC,gBAAgB,IAAI,CAAC;EACnG,KAAKG,OAAO,OAAO,OAAO,KAAK;CACjC;CAEA,MAAM,KAAK,MAAiC;EAC1C,MAAM,MAAM,KAAK,IAAI;EACrB,KAAKC,iBAAiB,iBAAiB,KAAK,MAAM;CACpD;CAEA,MAAM,QAAuB;EAC3B,IAAI,KAAKC,UAAU;EACnB,IAAI,CAAC,KAAK,MAAM,MAAM,IAAI,MAAM,mDAAmD;EACnF,KAAKA,WAAW;EAChB,KAAK,KAAK,OAAO,KAAK,mCAAmC;GACvD,uBAAuB,KAAKT,aAAa,KAAKG,cAAc,KAAA;GAC5D,iBAAiB,KAAKF,mBAAmB,KAAKG,mBAAmB,KAAA;EACnE,CAAC;EAED,KAAKM,UAAU,CAAC;CAClB;CAEA,MAAM,OAAsB;EAC1B,IAAI,CAAC,KAAKD,UAAU;EACpB,KAAKA,WAAW;EAChB,IAAI,KAAKE,QAAQ,aAAa,KAAKA,MAAM;EACzC,KAAKA,SAAS,KAAA;EACd,MAAM,KAAKC;CACb;CAEA,IAAI,YAAqB;EACvB,OAAO,KAAKH;CACd;CAEA,UAAU,SAAuB;EAC/B,IAAI,CAAC,KAAKA,UAAU;EACpB,KAAKE,SAAS,iBAAiB;GAC7B,KAAKA,SAAS,KAAA;GACd,MAAM,MAAM,KAAKE,MAAM,CAAC,CAAC,cAAc;IACrC,KAAKD,YAAY,KAAA;IACjB,KAAKF,UAAU,KAAKI,WAAW,CAAC;GAClC,CAAC;GACD,KAAKF,YAAY;EACnB,GAAG,OAAO;EACV,KAAKD,OAAO,QAAQ;CACtB;CAEA,aAAqB;EACnB,MAAM,MAAM,KAAKJ,KAAK;EACtB,MAAM,MAAM,CACV,KAAKP,aAAa,KAAKe,8BAA8B,KAAA,GACrD,KAAKd,mBAAmB,KAAKe,wBAAwB,KAAA,CACvD,CAAC,CAAC,QAAQ,OAAqB,OAAO,KAAA,CAAS;EAC/C,OAAO,KAAK,IAAI,GAAG,KAAK,IAAI,GAAG,GAAG,IAAI,GAAG;CAC3C;CAEA,MAAMH,QAAuB;EAC3B,MAAM,MAAM,KAAKN,KAAK;EACtB,MAAM,wBAAwB,QAAQ,KAAKP,cAAc,OAAO,KAAKe,2BAA2B;EAChG,MAAM,kBAAkB,QAAQ,KAAKd,oBAAoB,OAAO,KAAKe,qBAAqB;EAC1F,IAAI,CAAC,yBAAyB,CAAC,iBAAiB;EAChD,IAAI,uBAAuB,KAAKD,8BAA8B,MAAM,KAAKZ;EACzE,IAAI,iBAAiB,KAAKa,wBAAwB,MAAM,KAAKZ;EAO7D,IAAI,EAAC,MAHe,KAAKI,eACtB,aAAa,WAAW,KAAKF,aAAa,KAAKD,WAAW,CAAC,CAC3D,aAAa,EAAE,UAAU,MAAM,EAAE,EAAA,CACzB,UAAU;EAErB,IAAI,WAAW;EACf,MAAM,eAAe,kBACb;GACJ,KAAUG,eACP,WAAW,WAAW,KAAKF,aAAa,KAAKD,WAAW,CAAC,CACzD,MAAK,YAAW;IACf,IAAI,CAAC,SAAS;KACZ,WAAW;KACX,cAAc,YAAY;KAC1B,KAAK,MAAM,OAAO,KAAK,oEAAoE;IAC7F;GACF,CAAC,CAAC,CACD,OAAM,UAAS;IACd,WAAW;IACX,cAAc,YAAY;IAC1B,KAAK,MAAM,OAAO,KAAK,kEAAkE,EACvF,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAC9D,CAAC;GACH,CAAC;EACL,GACA,KAAK,IAAI,KAAO,KAAK,MAAM,KAAKA,cAAc,CAAC,CAAC,CAClD;EACA,aAAa,QAAQ;EAErB,IAAI;GACF,MAAM,UAAU,MAAM,KAAKY,SAAS;GACpC,IAAI,QAAQ,WAAW,GAAG;GAE1B,IAAI,yBAAyB,KAAKjB,YAAY;IAC5C,MAAM,YAAY,KAAK,IAAI;IAC3B,IAAI;KACF,MAAM,EAAE,QAAQ,GAAG,WAAW,MAAM,KAAKA,WAAW,OAAO;KAC3D,MAAM,UAAU;MAAE,GAAG;MAAQ,uBAAuB,QAAQ;MAAQ,YAAY,KAAK,IAAI,IAAI;KAAU;KACvG,IAAI,OAAO,SAAS,GAClB,KAAK,MAAM,OAAO,KAAK,+DAA+D;MACpF,GAAG;MACH;KACF,CAAC;UACI,IAAI,OAAO,SAAS,KAAK,OAAO,SAAS,GAC9C,KAAK,MAAM,OAAO,KAAK,+DAA+D,OAAO;UAE7F,KAAK,MAAM,OAAO,MAAM,iDAAiD,OAAO;IAEpF,SAAS,OAAO;KACd,KAAK,MAAM,OAAO,KAAK,8CAA8C,EACnE,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAC9D,CAAC;IACH;GACF;GAEA,IAAI,mBAAmB,KAAKC,oBAAoB,UAAU;IACxD,MAAM,YAAY,KAAK,IAAI;IAC3B,IAAI;KACF,MAAM,EAAE,QAAQ,GAAG,WAAW,MAAM,KAAKA,iBAAiB,OAAO;KACjE,MAAM,UAAU;MAAE,GAAG;MAAQ,uBAAuB,QAAQ;MAAQ,YAAY,KAAK,IAAI,IAAI;KAAU;KACvG,IAAI,OAAO,SAAS,GAClB,KAAK,MAAM,OAAO,KAAK,wDAAwD;MAAE,GAAG;MAAS;KAAO,CAAC;UAChG,IAAI,OAAO,SAAS,GACzB,KAAK,MAAM,OAAO,KAAK,qDAAqD,OAAO;UAC9E,IAAI,OAAO,YAAY,GAC5B,KAAK,MAAM,OAAO,KAAK,mDAAmD,OAAO;UAC5E,IAAI,OAAO,UAAU,GAC1B,KAAK,MAAM,OAAO,KAAK,iDAAiD,OAAO;UAE/E,KAAK,MAAM,OAAO,MAAM,0CAA0C,OAAO;IAE7E,SAAS,OAAO;KACd,KAAK,MAAM,OAAO,KAAK,uCAAuC,EAC5D,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAC9D,CAAC;IACH;GACF,OAAO,IAAI,mBAAmB,KAAKA,oBAAoB,CAAC,UACtD,KAAK,MAAM,OAAO,MAAM,sEAAsE;EAElG,UAAU;GACR,cAAc,YAAY;GAC1B,IAAI,UACF,MAAM,KAAKO,eAAe,aAAa,WAAW,KAAKF,WAAW,CAAC,CAAC,YAAY,KAAA,CAAS;EAE7F;CACF;;;;;;CAOA,MAAMW,WAA2C;EAC/C,MAAM,OAAO,MAAM,KAAKf,eAAe,oBAAoB,2BAA2B;EACtF,MAAM,UAAiC,CAAC;EACxC,KAAK,MAAM,OAAO,MAAM;GACtB,MAAM,iBAAiB,OAAO,IAAI,sBAAsB;GACxD,MAAM,eAAe,OAAO,IAAI,oBAAoB;GACpD,IAAI,CAAC,OAAO,cAAc,cAAc,KAAK,CAAC,OAAO,cAAc,YAAY,GAAG;GAElF,MAAM,SAAQ,MADS,KAAKA,eAAe,oBAAoB,yBAAyB,GAAG,EAAA,CACpE,EAAE,EAAE;GAC3B,IAAI,CAAC,OAAO;GACZ,MAAM,aAAa,MAAM,KAAKA,eAAe,aAAa,iBAAiB;IACzE;IACA,YAAY,IAAI;GAClB,CAAC;GACD,IAAI,CAAC,YAAY,MAAM;GACvB,QAAQ,KAAK;IAAE,IAAI;IAAc,UAAU,WAAW;IAAM;GAAe,CAAC;EAC9E;EACA,OAAO;CACT;AACF;AAEA,SAAS,iBAAiB,QAA+B;CACvD,MAAM,cAAe,OAA2E;CAChG,IAAI,OAAO,gBAAgB,YAAY,OAAO,YAAY,KAAK,MAAM,KAAK;CAC1E,OAAO,gBAAgB,MAAM,IAAI,SAAS;AAC5C"}

package/dist/integrations/github/routes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../../../src/integrations/github/routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAGH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAG1D,OAAO,KAAK,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAGnE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAE3D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAIvD,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,kCAAkC,CAAC;AAKnF,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,+CAA+C,CAAC;AAC3F,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,wCAAwC,CAAC;AASrF,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAuC1D,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAgBxD,MAAM,WAAW,wBAAwB;IACvC,4EAA4E;IAC5E,IAAI,EAAE,SAAS,CAAC;IAChB,8EAA8E;IAC9E,KAAK,CAAC,EAAE,wBAAwB,CAAC;IACjC;;;;;OAKG;IACH,OAAO,CAAC,EAAE,0BAA0B,CAAC;IACrC,yEAAyE;IACzE,OAAO,CAAC,EAAE,cAAc,CAAC;IACzB;;;;OAIG;IACH,MAAM,CAAC,EAAE,iBAAiB,CAAC;IAC3B;;;;OAIG;IACH,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,iFAAiF;IACjF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,4FAA4F;IAC5F,UAAU,CAAC,EAAE,iBAAiB,CAAC,YAAY,CAAC,CAAC;IAC7C,gGAAgG;IAChG,cAAc,EAAE,IAAI,CAAC,qBAAqB,EAAE,KAAK,CAAC,CAAC;IACnD,6EAA6E;IAC7E,SAAS,CAAC,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC;IACjC,2EAA2E;IAC3E,QAAQ,CAAC,EAAE,sBAAsB,CAAC;IAClC,iBAAiB,CAAC,EAAE,OAAO,qCAAqC,EAAE,4BAA4B,CAAC;IAC/F,kFAAkF;IAClF,SAAS,CAAC,EAAE,IAAI,CAAC,OAAO,0CAA0C,EAAE,gBAAgB,EAAE,wBAAwB,CAAC,CAAC;IAChH,+FAA+F;IAC/F,kBAAkB,CAAC,EAAE,CAAC,KAAK,EAAE,mBAAmB,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CACvE;AA4ND;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,wBAAwB,GAAG,QAAQ,EAAE,CAooB/E;AA+GD,KAAK,wBAAwB,GAAG,IAAI,CAAC,aAAa,EAAE,SAAS,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC,CAAC"}
+{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../../../src/integrations/github/routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAG1D,OAAO,KAAK,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAGnE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAE3D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAIvD,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,kCAAkC,CAAC;AAKnF,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,+CAA+C,CAAC;AAC3F,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,wCAAwC,CAAC;AASrF,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAuC1D,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAgBxD,MAAM,WAAW,wBAAwB;IACvC,4EAA4E;IAC5E,IAAI,EAAE,SAAS,CAAC;IAChB,8EAA8E;IAC9E,KAAK,CAAC,EAAE,wBAAwB,CAAC;IACjC;;;;;OAKG;IACH,OAAO,CAAC,EAAE,0BAA0B,CAAC;IACrC,yEAAyE;IACzE,OAAO,CAAC,EAAE,cAAc,CAAC;IACzB;;;;OAIG;IACH,MAAM,CAAC,EAAE,iBAAiB,CAAC;IAC3B;;;;OAIG;IACH,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,iFAAiF;IACjF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,4FAA4F;IAC5F,UAAU,CAAC,EAAE,iBAAiB,CAAC,YAAY,CAAC,CAAC;IAC7C,gGAAgG;IAChG,cAAc,EAAE,IAAI,CAAC,qBAAqB,EAAE,KAAK,CAAC,CAAC;IACnD,6EAA6E;IAC7E,SAAS,CAAC,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC;IACjC,2EAA2E;IAC3E,QAAQ,CAAC,EAAE,sBAAsB,CAAC;IAClC,iBAAiB,CAAC,EAAE,OAAO,qCAAqC,EAAE,4BAA4B,CAAC;IAC/F,kFAAkF;IAClF,SAAS,CAAC,EAAE,IAAI,CAAC,OAAO,0CAA0C,EAAE,gBAAgB,EAAE,wBAAwB,CAAC,CAAC;IAChH,+FAA+F;IAC/F,kBAAkB,CAAC,EAAE,CAAC,KAAK,EAAE,mBAAmB,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CACvE;AA4ND;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,wBAAwB,GAAG,QAAQ,EAAE,CAooB/E;AA+GD,KAAK,wBAAwB,GAAG,IAAI,CAAC,aAAa,EAAE,SAAS,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC,CAAC"}

package/dist/integrations/github/routes.js

@@ -14,22 +14,9 @@ import { MaterializeError, SetupCommandError, commitAll, pushBranch } from "./sa
 import { handleGithubWebhook } from "./webhook.js";
 import { RequestContext } from "@mastra/core/request-context";
 import { registerApiRoute } from "@mastra/core/server";
-import { randomUUID } from "crypto";
 import { UniqueViolationError } from "@mastra/core/storage";
 import { resolveModel } from "@mastra/code-sdk/agents/model";
 //#region src/integrations/github/routes.ts
-/**
-* Mastra `apiRoutes` for the GitHub App project feature.
-*
-* Registered alongside the other `/web/*` routes, behind the host auth gate.
-* Every route additionally re-checks the authenticated user via the injected
-* `RouteAuth` seam and scopes all rows by that user's stable id, so a user can
-* only ever see and operate on their own installations and projects.
-*
-* When the feature is disabled (`isGithubFeatureEnabled()` false), `buildGithubRoutes`
-* returns only `GET /web/github/status`, which reports `enabled:false`
-* so the SPA can cleanly hide all GitHub UI.
-*/
 const sessionOperationLocks = /* @__PURE__ */ new Map();
 const USER_SESSION_BRANCH_PREFIX = "user/session-";
 const UUID_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/;
@@ -924,7 +911,7 @@ function buildProjectGitRoutes({ github, auth, sandbox, users, controller, memor
 				if (!isValidGitRef(baseBranch)) return c.json({ error: "Invalid baseBranch" }, 400);
 				const requestedSessionId = body.sessionId;
 				if (requestedSessionId !== void 0 && (typeof requestedSessionId !== "string" || !UUID_PATTERN.test(requestedSessionId))) return c.json({ error: "Invalid sessionId" }, 400);
-				const sessionId = requestedSessionId ?? randomUUID();
+				const sessionId = requestedSessionId ?? globalThis.crypto.randomUUID();
 				const requestedTitle = body.title;
 				if (requestedTitle !== void 0 && typeof requestedTitle !== "string") return c.json({ error: "Invalid title" }, 400);
 				const normalizedTitle = requestedTitle === void 0 ? null : normalizeSessionTitle(requestedTitle);