@mastra/factory 0.2.3-alpha.0 → 0.3.0-alpha.2

package/dist/rules/dispatcher.js

@@ -10,6 +10,7 @@ const BATCH_SIZE = 10;
 const MAX_ATTEMPTS = 5;
 const MAX_ERROR_LENGTH = 512;
 const MAX_BACKOFF_MS = 6e4;
+const MAX_IN_FLIGHT = 25;
 function sanitizeDispatchError(error) {
 	return (error instanceof Error ? error.message : String(error)).replace(/\b(?:bearer|token|api[-_ ]?key|authorization)\s*[:=]?\s*[^\s,;]+/gi, "[redacted]").slice(0, MAX_ERROR_LENGTH);
 }
@@ -68,8 +69,10 @@ var FactoryDecisionDispatcher = class {
 	#reconcileToolResults;
 	#prepareBinding;
 	#primeCredentials;
+	#maxInFlight;
 	#timer;
-	#activeRun;
+	#activeClaim;
+	#inFlight = /* @__PURE__ */ new Set();
 	constructor(options) {
 		this.#controller = options.controller;
 		this.#transitionService = options.transitionService;
@@ -78,6 +81,8 @@ var FactoryDecisionDispatcher = class {
 		this.#reconcileToolResults = options.reconcileToolResults;
 		this.#prepareBinding = options.prepareBinding;
 		this.#primeCredentials = options.primeCredentials;
+		const maxInFlight = options.maxInFlight ?? MAX_IN_FLIGHT;
+		this.#maxInFlight = Number.isFinite(maxInFlight) && maxInFlight > 0 ? Math.floor(maxInFlight) : MAX_IN_FLIGHT;
 	}
 	start() {
 		if (this.#timer) return;
@@ -88,33 +93,58 @@ var FactoryDecisionDispatcher = class {
 	async stop() {
 		if (this.#timer) clearInterval(this.#timer);
 		this.#timer = void 0;
-		await this.#activeRun;
+		await this.#activeClaim;
+		await Promise.allSettled([...this.#inFlight]);
 	}
 	async runOnce(now = /* @__PURE__ */ new Date()) {
+		await Promise.all(await this.#claimAndStart(now));
+	}
+	/**
+	* Claims a batch and starts dispatches without awaiting their completion.
+	* Dispatches can legitimately take minutes (skill kickoffs consume the
+	* agent's run stream; binding preparation provisions sandboxes), so awaiting
+	* them here would freeze the poll loop and starve every other queued
+	* decision. In-flight records stay protected from re-claim by lease renewal.
+	*/
+	async #claimAndStart(now) {
 		await this.#reconcileToolResults?.();
+		const capacity = this.#maxInFlight - this.#inFlight.size;
+		if (capacity <= 0) return [];
+		const limit = Math.min(BATCH_SIZE, capacity);
 		const leaseExpiresAt = new Date(now.getTime() + LEASE_MS);
-		const [decisions, starts] = await Promise.all([this.#storage.claimDeferredDecisions({
+		const decisions = await this.#storage.claimDeferredDecisions({
 			ownerId: this.#ownerId,
 			now,
 			leaseExpiresAt,
-			limit: BATCH_SIZE
-		}), this.#storage.claimPendingStarts({
+			limit
+		});
+		const startsLimit = limit - decisions.length;
+		const starts = startsLimit > 0 ? await this.#storage.claimPendingStarts({
 			ownerId: this.#ownerId,
 			now,
 			leaseExpiresAt,
-			limit: BATCH_SIZE
-		})]);
-		await Promise.all([...decisions.map((decision) => this.#dispatchDecision(decision, now)), ...starts.map((start) => this.#dispatchPendingStart(start, now))]);
+			limit: startsLimit
+		}) : [];
+		return [...decisions.map((decision) => this.#track(this.#dispatchDecision(decision, now))), ...starts.map((start) => this.#track(this.#dispatchPendingStart(start, now)))];
+	}
+	#track(dispatch) {
+		this.#inFlight.add(dispatch);
+		dispatch.catch(() => {}).then(() => this.#inFlight.delete(dispatch));
+		return dispatch;
 	}
 	async #tick() {
-		if (this.#activeRun) return;
-		this.#activeRun = this.runOnce().catch((error) => {
+		if (this.#activeClaim) return;
+		this.#activeClaim = this.#claimAndStart(/* @__PURE__ */ new Date()).then((dispatches) => {
+			for (const dispatch of dispatches) dispatch.catch((error) => {
+				console.error("Factory decision dispatch failed", sanitizeDispatchError(error));
+			});
+		}, (error) => {
 			console.error("Factory decision dispatch cycle failed", sanitizeDispatchError(error));
 		});
 		try {
-			await this.#activeRun;
+			await this.#activeClaim;
 		} finally {
-			this.#activeRun = void 0;
+			this.#activeClaim = void 0;
 		}
 	}
 	async #dispatchDecision(record, now) {
@@ -479,6 +509,7 @@ const FACTORY_DISPATCH_CONSTANTS = {
 	maxAttempts: MAX_ATTEMPTS,
 	maxErrorLength: MAX_ERROR_LENGTH,
 	maxBackoffMs: MAX_BACKOFF_MS,
+	maxInFlight: MAX_IN_FLIGHT,
 	stages: FACTORY_RULE_STAGES
 };
 //#endregion

package/dist/rules/dispatcher.js.map

@@ -1 +1 @@
-{"version":3,"file":"dispatcher.js","names":["#controller","#transitionService","#storage","#ownerId","#reconcileToolResults","#prepareBinding","#primeCredentials","#timer","#tick","#activeRun","#dispatchDecision","#dispatchPendingStart","#withLease","#executeDecision","#requireItem","#findBinding","#requireSession","#upsertLinkedItem","#requireOrPrepareBinding","#switchThread","#requireBinding"],"sources":["../../src/rules/dispatcher.ts"],"sourcesContent":["import { randomUUID } from 'node:crypto';\n\nimport type { MastraCodeState } from '@mastra/code-sdk/schema';\nimport type { AgentController } from '@mastra/core/agent-controller';\nimport { RequestContext } from '@mastra/core/request-context';\n\nimport { resolveSkillInvocation } from '../skills/service.js';\nimport type { SkillSession } from '../skills/service.js';\nimport type {\n  FactoryDeferredDecisionRecord,\n  FactoryPendingStartRecord,\n  FactoryRunBindingRecord,\n  WorkItemRow,\n  WorkItemsStorage,\n} from '../storage/domains/work-items/base.js';\nimport type { FactoryTransitionService } from './transition-service.js';\nimport type { FactoryCommitDecision, FactoryRuleActor, FactoryRuleCausalEntry } from './types.js';\nimport { FACTORY_RULE_STAGES } from './types.js';\nimport { MAX_FACTORY_RULE_CAUSAL_DEPTH, validateFactoryRuleDecision } from './validation.js';\n\nconst LEASE_MS = 30_000;\nconst POLL_MS = 1_000;\nconst BATCH_SIZE = 10;\nconst MAX_ATTEMPTS = 5;\nconst MAX_ERROR_LENGTH = 512;\nconst MAX_BACKOFF_MS = 60_000;\n\ninterface DispatcherSession extends SkillSession {\n  thread: {\n    switch(input: { threadId: string }): Promise<unknown>;\n    listActiveMessages(): Promise<Array<{ id: string }>>;\n  };\n  sendSignal(\n    input: { id: string; type: 'user'; tagName: 'user'; contents: string },\n    options: { requestContext: RequestContext; requireDelivery?: boolean },\n  ): { accepted: Promise<{ accepted: true; runId?: string; action?: string }> };\n}\n\ntype FactoryController = Pick<AgentController<MastraCodeState>, 'getSessionByResource'>;\n\nexport interface FactoryBindingPreparationInput {\n  record: FactoryDeferredDecisionRecord;\n  item: WorkItemRow;\n  role: string;\n}\n\nexport interface FactoryDecisionDispatcherOptions {\n  controller: FactoryController;\n  transitionService: Pick<FactoryTransitionService, 'transition'>;\n  storage: WorkItemsStorage;\n  ownerId?: string;\n  reconcileToolResults?: () => Promise<void>;\n  prepareBinding?: (input: FactoryBindingPreparationInput) => Promise<void>;\n  primeCredentials?: (tenant: { orgId: string; userId: string }) => Promise<void>;\n}\n\nfunction sanitizeDispatchError(error: unknown): string {\n  const message = error instanceof Error ? error.message : String(error);\n  return message\n    .replace(/\\b(?:bearer|token|api[-_ ]?key|authorization)\\s*[:=]?\\s*[^\\s,;]+/gi, '[redacted]')\n    .slice(0, MAX_ERROR_LENGTH);\n}\n\nfunction retryAt(now: Date, attempts: number): Date {\n  return new Date(now.getTime() + Math.min(1_000 * 2 ** Math.max(0, attempts - 1), MAX_BACKOFF_MS));\n}\n\nfunction externalSourceForDecision(decision: Extract<FactoryCommitDecision, { type: 'upsertLinkedWorkItem' }>) {\n  const [integrationId, type] =\n    decision.source === 'github-pr'\n      ? ['github', 'pull-request']\n      : decision.source === 'github-issue'\n        ? ['github', 'issue']\n        : decision.source === 'linear-issue'\n          ? ['linear', 'issue']\n          : ['factory', 'manual'];\n  return { integrationId, type, externalId: decision.sourceKey, url: decision.url ?? undefined };\n}\n\nfunction deferredActor(record: FactoryDeferredDecisionRecord): FactoryRuleActor {\n  const actor = record.actor;\n  if (\n    actor?.type === 'github' &&\n    typeof actor.login === 'string' &&\n    typeof actor.trusted === 'boolean' &&\n    typeof actor.factoryAuthored === 'boolean'\n  ) {\n    return {\n      type: 'github',\n      login: actor.login,\n      trusted: actor.trusted,\n      factoryAuthored: actor.factoryAuthored,\n    };\n  }\n  return { type: 'system', id: 'factory-rule-dispatcher' };\n}\n\nfunction leaseIdentity(\n  record: Pick<FactoryDeferredDecisionRecord | FactoryPendingStartRecord, 'id' | 'orgId' | 'factoryProjectId'>,\n  ownerId: string,\n) {\n  return { id: record.id, orgId: record.orgId, factoryProjectId: record.factoryProjectId, ownerId };\n}\n\nasync function awaitNotification(\n  result: Awaited<ReturnType<SkillSession['sendNotificationSignal']>>,\n  requireDelivery = false,\n): Promise<void> {\n  await result.persisted;\n  if (!result.accepted) {\n    if (requireDelivery) throw new Error('Factory notification was persisted without agent delivery.');\n    return;\n  }\n  const accepted = await result.accepted;\n  if (!requireDelivery) return;\n  if (accepted.action === 'wake') {\n    await accepted.output.consumeStream();\n    return;\n  }\n  if (accepted.action !== 'deliver') {\n    throw new Error(`Factory notification did not reach the agent (${String(accepted.action)}).`);\n  }\n}\n\nexport class FactoryDecisionDispatcher {\n  readonly #controller: FactoryController;\n  readonly #transitionService: Pick<FactoryTransitionService, 'transition'>;\n  readonly #storage: WorkItemsStorage;\n  readonly #ownerId: string;\n  readonly #reconcileToolResults?: () => Promise<void>;\n  readonly #prepareBinding?: (input: FactoryBindingPreparationInput) => Promise<void>;\n  readonly #primeCredentials?: (tenant: { orgId: string; userId: string }) => Promise<void>;\n  #timer?: ReturnType<typeof setInterval>;\n  #activeRun?: Promise<void>;\n\n  constructor(options: FactoryDecisionDispatcherOptions) {\n    this.#controller = options.controller;\n    this.#transitionService = options.transitionService;\n    this.#storage = options.storage;\n    this.#ownerId = options.ownerId ?? `factory-dispatcher:${randomUUID()}`;\n    this.#reconcileToolResults = options.reconcileToolResults;\n    this.#prepareBinding = options.prepareBinding;\n    this.#primeCredentials = options.primeCredentials;\n  }\n\n  start(): void {\n    if (this.#timer) return;\n    void this.#tick();\n    this.#timer = setInterval(() => void this.#tick(), POLL_MS);\n    this.#timer.unref?.();\n  }\n\n  async stop(): Promise<void> {\n    if (this.#timer) clearInterval(this.#timer);\n    this.#timer = undefined;\n    await this.#activeRun;\n  }\n\n  async runOnce(now = new Date()): Promise<void> {\n    await this.#reconcileToolResults?.();\n    const leaseExpiresAt = new Date(now.getTime() + LEASE_MS);\n    const [decisions, starts] = await Promise.all([\n      this.#storage.claimDeferredDecisions({\n        ownerId: this.#ownerId,\n        now,\n        leaseExpiresAt,\n        limit: BATCH_SIZE,\n      }),\n      this.#storage.claimPendingStarts({\n        ownerId: this.#ownerId,\n        now,\n        leaseExpiresAt,\n        limit: BATCH_SIZE,\n      }),\n    ]);\n    await Promise.all([\n      ...decisions.map(decision => this.#dispatchDecision(decision, now)),\n      ...starts.map(start => this.#dispatchPendingStart(start, now)),\n    ]);\n  }\n\n  async #tick(): Promise<void> {\n    if (this.#activeRun) return;\n    this.#activeRun = this.runOnce().catch(error => {\n      console.error('Factory decision dispatch cycle failed', sanitizeDispatchError(error));\n    });\n    try {\n      await this.#activeRun;\n    } finally {\n      this.#activeRun = undefined;\n    }\n  }\n\n  async #dispatchDecision(record: FactoryDeferredDecisionRecord, now: Date): Promise<void> {\n    try {\n      const decision = validateFactoryRuleDecision(record.decision, record.causalChain.length);\n      if (decision.type === 'reject') throw new Error('Deferred Factory decisions cannot reject.');\n      await this.#withLease(\n        async leaseExpiresAt =>\n          this.#storage.renewDeferredDecisionLease(leaseIdentity(record, this.#ownerId), leaseExpiresAt),\n        async () => this.#executeDecision(record, decision),\n      );\n      const completed = await this.#storage.completeDeferredDecision(leaseIdentity(record, this.#ownerId), new Date());\n      if (!completed) throw new Error('Factory decision lease was lost before completion.');\n    } catch (error) {\n      const terminal = record.attempts >= MAX_ATTEMPTS;\n      await this.#storage.failDeferredDecision({\n        ...leaseIdentity(record, this.#ownerId),\n        now: new Date(),\n        availableAt: retryAt(now, record.attempts),\n        lastError: sanitizeDispatchError(error),\n        terminal,\n      });\n    }\n  }\n\n  async #executeDecision(record: FactoryDeferredDecisionRecord, decision: FactoryCommitDecision): Promise<void> {\n    const nextChain: FactoryRuleCausalEntry[] = [\n      ...(record.causalChain as FactoryRuleCausalEntry[]),\n      { ingressId: record.idempotencyKey, decisionType: decision.type },\n    ];\n    if (nextChain.length > MAX_FACTORY_RULE_CAUSAL_DEPTH) throw new Error('Factory rule causal depth exceeded.');\n\n    switch (decision.type) {\n      case 'transition': {\n        const item = await this.#requireItem(record);\n        const result = await this.#transitionService.transition({\n          orgId: record.orgId,\n          factoryProjectId: record.factoryProjectId,\n          workItemId: item.id,\n          board: decision.board,\n          stage: decision.stage,\n          expectedRevision: item.revision,\n          actor: { type: 'system', id: 'factory-rule-dispatcher' },\n          ingress: { type: 'rule', identity: `decision:${record.idempotencyKey}` },\n          cause: 'rule_decision',\n          causalChain: nextChain,\n        });\n        if (result.status === 'rejected') throw new Error(`${result.code}: ${result.reason}`);\n        if (!decision.message) return;\n        // Best-effort recipient lookup: no active binding (or no authenticated\n        // session owner) means nobody is engaged with this item, so the\n        // transition itself is the whole effect. A retry after a delivery\n        // failure is safe because the transition replays by ingress identity.\n        const binding = await this.#findBinding(record, decision.message.role);\n        if (!binding) return;\n        const startedBy = item.sessions[binding.role]?.startedBy;\n        if (!startedBy) return;\n        await this.#primeCredentials?.({ orgId: record.orgId, userId: startedBy });\n        const requestContext = new RequestContext();\n        requestContext.set('user', { workosId: startedBy, organizationId: record.orgId });\n        const session = await this.#requireSession(binding);\n        await awaitNotification(\n          await session.sendNotificationSignal(\n            {\n              source: 'factory',\n              kind: 'rule-message',\n              summary: decision.message.text,\n              priority: 'high',\n              payload: { message: decision.message.text },\n              sourceId: record.id,\n              dedupeKey: record.idempotencyKey,\n            },\n            {\n              ifActive: { behavior: 'deliver' },\n              ifIdle: { behavior: 'wake' },\n              requestContext,\n            },\n          ),\n          true,\n        );\n        return;\n      }\n      case 'upsertLinkedWorkItem': {\n        await this.#upsertLinkedItem(record, decision, nextChain);\n        return;\n      }\n      case 'invokeSkill': {\n        const binding = await this.#requireOrPrepareBinding(record, decision.role);\n        const item = record.workItemId ? await this.#storage.get({ orgId: record.orgId, id: record.workItemId }) : null;\n        const startedBy = item?.sessions[binding.role]?.startedBy;\n        if (!startedBy) throw new Error(`Factory binding ${binding.id} has no authenticated session owner.`);\n        await this.#primeCredentials?.({ orgId: record.orgId, userId: startedBy });\n        const requestContext = new RequestContext();\n        requestContext.set('user', { workosId: startedBy, organizationId: record.orgId });\n        const resolved = await resolveSkillInvocation(this.#controller, {\n          resourceId: binding.resourceId,\n          name: decision.skillName,\n          arguments: decision.arguments,\n        });\n        const session = resolved.session as DispatcherSession;\n        await this.#switchThread(session, binding);\n        const delivered = await session.thread.listActiveMessages();\n        if (delivered.some(message => message.id === record.id)) return;\n        if (decision.precedingMessage) {\n          await awaitNotification(\n            await session.sendNotificationSignal(\n              {\n                source: 'factory',\n                kind: 'stage-transition',\n                summary: decision.precedingMessage,\n                priority: 'medium',\n                payload: { message: decision.precedingMessage },\n                sourceId: `${record.id}:stage-transition`,\n                dedupeKey: `${record.idempotencyKey}:stage-transition`,\n              },\n              {\n                ifActive: { behavior: 'deliver' },\n                ifIdle: { behavior: 'persist' },\n                requestContext,\n              },\n            ),\n          );\n        }\n        const result = session.sendSignal(\n          {\n            id: record.id,\n            type: 'user',\n            tagName: 'user',\n            contents: resolved.message,\n          },\n          // Without `requireDelivery` the session resolves `accepted` on the\n          // next tick and swallows wake failures, so a kickoff that never\n          // reached the agent would be marked succeeded and the thread would\n          // stay empty forever.\n          { requestContext, requireDelivery: true },\n        );\n        const settled = await result.accepted;\n        if (settled.action !== 'wake' && settled.action !== 'deliver') {\n          // An undefined action means the session did not verify delivery at\n          // all — with `requireDelivery` set that is a contract violation, not\n          // a success.\n          throw new Error(`Factory skill invocation signal did not reach the agent (${String(settled.action)}).`);\n        }\n        return;\n      }\n      case 'sendMessage': {\n        const binding = decision.prepareBinding\n          ? await this.#requireOrPrepareBinding(record, decision.role)\n          : await this.#requireBinding(record, decision.role);\n        const item = record.workItemId ? await this.#storage.get({ orgId: record.orgId, id: record.workItemId }) : null;\n        const startedBy = item?.sessions[binding.role]?.startedBy;\n        if (!startedBy) throw new Error(`Factory binding ${binding.id} has no authenticated session owner.`);\n        await this.#primeCredentials?.({ orgId: record.orgId, userId: startedBy });\n        const requestContext = new RequestContext();\n        requestContext.set('user', { workosId: startedBy, organizationId: record.orgId });\n        const session = await this.#requireSession(binding);\n        await awaitNotification(\n          await session.sendNotificationSignal(\n            {\n              source: 'factory',\n              kind: 'rule-message',\n              summary: decision.message,\n              priority: decision.priority ?? 'high',\n              payload: { message: decision.message },\n              sourceId: record.id,\n              dedupeKey: record.idempotencyKey,\n            },\n            {\n              ifActive: { behavior: 'deliver' },\n              ifIdle: { behavior: decision.idleBehavior ?? 'wake' },\n              requestContext,\n            },\n          ),\n          true,\n        );\n        return;\n      }\n      case 'notify': {\n        const binding = await this.#requireBinding(record);\n        const session = await this.#requireSession(binding);\n        await awaitNotification(\n          await session.sendNotificationSignal({\n            source: 'factory',\n            kind: 'rule-notification',\n            summary: decision.title,\n            payload: { body: decision.body, level: decision.level },\n            sourceId: record.id,\n            dedupeKey: record.idempotencyKey,\n          }),\n        );\n      }\n    }\n  }\n\n  async #upsertLinkedItem(\n    record: FactoryDeferredDecisionRecord,\n    decision: Extract<FactoryCommitDecision, { type: 'upsertLinkedWorkItem' }>,\n    causalChain: FactoryRuleCausalEntry[],\n  ): Promise<void> {\n    const result = await this.#storage.upsert({\n      orgId: record.orgId,\n      userId: 'factory-rule-dispatcher',\n      factoryProjectId: record.factoryProjectId,\n      input: {\n        externalSource: externalSourceForDecision(decision),\n        parentWorkItemId: record.workItemId,\n        title: decision.title,\n        stages: ['intake'],\n        sessions: {},\n        metadata: { ...decision.metadata, factoryRuleMaterializationKey: record.idempotencyKey },\n      },\n      reuseMode: 'preserve',\n    });\n    const materializedByDecision = result.item.metadata?.factoryRuleMaterializationKey === record.idempotencyKey;\n    if (!materializedByDecision && (decision.stage === 'intake' || !result.item.stages.includes('intake'))) return;\n\n    const board = decision.board;\n    let expectedRevision = result.item.revision;\n    if (materializedByDecision) {\n      const initial = await this.#transitionService.transition({\n        orgId: record.orgId,\n        factoryProjectId: record.factoryProjectId,\n        workItemId: result.item.id,\n        board,\n        stage: 'intake',\n        expectedRevision,\n        actor: deferredActor(record),\n        ingress: { type: 'rule', identity: `decision:${record.idempotencyKey}:${result.item.id}:initial-entry` },\n        cause: 'linked_item_materialized',\n        causalChain,\n        initialEntry: true,\n      });\n      if (initial.status === 'rejected') {\n        if (result.created) await this.#storage.delete({ orgId: record.orgId, id: result.item.id });\n        throw new Error(`${initial.code}: ${initial.reason}`);\n      }\n      expectedRevision = initial.revision;\n    }\n    if (decision.stage === 'intake') return;\n\n    const moved = await this.#transitionService.transition({\n      orgId: record.orgId,\n      factoryProjectId: record.factoryProjectId,\n      workItemId: result.item.id,\n      board,\n      stage: decision.stage,\n      expectedRevision,\n      actor: { type: 'system', id: 'factory-rule-dispatcher' },\n      ingress: { type: 'rule', identity: `decision:${record.idempotencyKey}:${result.item.id}:destination` },\n      cause: materializedByDecision ? 'linked_item_materialized' : 'linked_item_reconciled',\n      causalChain,\n    });\n    if (moved.status === 'rejected') throw new Error(`${moved.code}: ${moved.reason}`);\n  }\n\n  async #requireItem(record: FactoryDeferredDecisionRecord) {\n    if (!record.workItemId) throw new Error('Factory decision is not linked to a work item.');\n    const item = await this.#storage.get({ orgId: record.orgId, id: record.workItemId });\n    if (!item) throw new Error('Factory work item not found.');\n    return item;\n  }\n\n  async #findBinding(\n    record: FactoryDeferredDecisionRecord,\n    role?: string,\n  ): Promise<FactoryRunBindingRecord | undefined> {\n    if (!record.workItemId) throw new Error('Factory decision is not linked to a work item.');\n    const bindings = await this.#storage.listRunBindings(record.orgId, record.factoryProjectId, record.workItemId);\n    return bindings\n      .filter(candidate => candidate.status === 'active' && (role === undefined || candidate.role === role))\n      .sort((left, right) => {\n        if (role === undefined && left.role === 'work' && right.role !== 'work') return -1;\n        if (role === undefined && right.role === 'work' && left.role !== 'work') return 1;\n        return right.createdAt.getTime() - left.createdAt.getTime() || left.id.localeCompare(right.id);\n      })[0];\n  }\n\n  async #requireBinding(record: FactoryDeferredDecisionRecord, role?: string): Promise<FactoryRunBindingRecord> {\n    const binding = await this.#findBinding(record, role);\n    if (!binding) throw new Error(role ? `No active Factory binding for role ${role}.` : 'No active Factory binding.');\n    return binding;\n  }\n\n  async #requireOrPrepareBinding(\n    record: FactoryDeferredDecisionRecord,\n    role: string,\n  ): Promise<FactoryRunBindingRecord> {\n    const binding = await this.#findBinding(record, role);\n    if (binding) {\n      const session = await this.#controller.getSessionByResource(binding.resourceId);\n      if (session) return binding;\n    }\n    if (!this.#prepareBinding) {\n      throw new Error(binding ? 'Bound Factory session not found.' : `No active Factory binding for role ${role}.`);\n    }\n    const item = await this.#requireItem(record);\n    await this.#prepareBinding({ record, item, role });\n    return this.#requireBinding(record, role);\n  }\n\n  async #requireSession(binding: FactoryRunBindingRecord): Promise<DispatcherSession> {\n    const session = (await this.#controller.getSessionByResource(binding.resourceId)) as DispatcherSession | undefined;\n    if (!session) throw new Error('Bound Factory session not found.');\n    await this.#switchThread(session, binding);\n    return session;\n  }\n\n  async #switchThread(session: SkillSession, binding: FactoryRunBindingRecord): Promise<void> {\n    await (session as DispatcherSession).thread.switch({ threadId: binding.threadId });\n  }\n\n  async #withLease(\n    renew: (leaseExpiresAt: Date) => Promise<unknown | null>,\n    effect: () => Promise<void>,\n  ): Promise<void> {\n    let renewalFailure: unknown;\n    let renewal = Promise.resolve();\n    const timer = setInterval(\n      () => {\n        renewal = renewal.then(async () => {\n          try {\n            const renewed = await renew(new Date(Date.now() + LEASE_MS));\n            if (!renewed) renewalFailure = new Error('Factory dispatch lease was lost during execution.');\n          } catch (error) {\n            renewalFailure = error;\n          }\n        });\n      },\n      Math.floor(LEASE_MS / 3),\n    );\n    timer.unref?.();\n    try {\n      await effect();\n      await renewal;\n      if (renewalFailure) throw renewalFailure;\n    } finally {\n      clearInterval(timer);\n      await renewal;\n    }\n  }\n\n  async #dispatchPendingStart(record: FactoryPendingStartRecord, now: Date): Promise<void> {\n    try {\n      await this.#withLease(\n        async leaseExpiresAt =>\n          this.#storage.renewPendingStartLease(leaseIdentity(record, this.#ownerId), leaseExpiresAt),\n        async () => {\n          if (record.message === null) return;\n          const bindings = await this.#storage.listRunBindings(record.orgId, record.factoryProjectId);\n          const binding = bindings.find(\n            candidate => candidate.id === record.bindingId && candidate.status === 'active',\n          );\n          if (!binding) throw new Error('Prepared Factory binding is unavailable or revoked.');\n          // Wake runs build the Factory workspace, which requires the\n          // authenticated session owner on the request context.\n          const item = await this.#storage.get({ orgId: record.orgId, id: binding.workItemId });\n          const startedBy = item?.sessions[binding.role]?.startedBy;\n          if (!startedBy) throw new Error(`Factory binding ${binding.id} has no authenticated session owner.`);\n          await this.#primeCredentials?.({ orgId: record.orgId, userId: startedBy });\n          const requestContext = new RequestContext();\n          requestContext.set('user', { workosId: startedBy, organizationId: record.orgId });\n          const session = await this.#requireSession(binding);\n          await awaitNotification(\n            await session.sendNotificationSignal(\n              {\n                source: 'factory',\n                kind: 'run-kickoff',\n                summary: record.message!,\n                priority: 'high',\n                payload: { message: record.message },\n                sourceId: record.id,\n                dedupeKey: `factory-kickoff:${record.kickoffKey}`,\n              },\n              { ifActive: { behavior: 'deliver' }, ifIdle: { behavior: 'wake' }, requestContext },\n            ),\n            true,\n          );\n        },\n      );\n      const completed = await this.#storage.completePendingStart(leaseIdentity(record, this.#ownerId), new Date());\n      if (!completed) throw new Error('Factory kickoff lease was lost before completion.');\n    } catch (error) {\n      await this.#storage.failPendingStart({\n        ...leaseIdentity(record, this.#ownerId),\n        now: new Date(),\n        availableAt: retryAt(now, record.attempts),\n        lastError: sanitizeDispatchError(error),\n        terminal: record.attempts >= MAX_ATTEMPTS,\n      });\n    }\n  }\n}\n\nexport const FACTORY_DISPATCH_CONSTANTS = {\n  leaseMs: LEASE_MS,\n  pollMs: POLL_MS,\n  batchSize: BATCH_SIZE,\n  maxAttempts: MAX_ATTEMPTS,\n  maxErrorLength: MAX_ERROR_LENGTH,\n  maxBackoffMs: MAX_BACKOFF_MS,\n  stages: FACTORY_RULE_STAGES,\n} as const;\n"],"mappings":";;;;;;AAoBA,MAAM,WAAW;AACjB,MAAM,UAAU;AAChB,MAAM,aAAa;AACnB,MAAM,eAAe;AACrB,MAAM,mBAAmB;AACzB,MAAM,iBAAiB;AA+BvB,SAAS,sBAAsB,OAAwB;CAErD,QADgB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAA,CAElE,QAAQ,sEAAsE,YAAY,CAAC,CAC3F,MAAM,GAAG,gBAAgB;AAC9B;AAEA,SAAS,QAAQ,KAAW,UAAwB;CAClD,OAAO,IAAI,KAAK,IAAI,QAAQ,IAAI,KAAK,IAAI,MAAQ,KAAK,KAAK,IAAI,GAAG,WAAW,CAAC,GAAG,cAAc,CAAC;AAClG;AAEA,SAAS,0BAA0B,UAA4E;CAC7G,MAAM,CAAC,eAAe,QACpB,SAAS,WAAW,cAChB,CAAC,UAAU,cAAc,IACzB,SAAS,WAAW,iBAClB,CAAC,UAAU,OAAO,IAClB,SAAS,WAAW,iBAClB,CAAC,UAAU,OAAO,IAClB,CAAC,WAAW,QAAQ;CAC9B,OAAO;EAAE;EAAe;EAAM,YAAY,SAAS;EAAW,KAAK,SAAS,OAAO,KAAA;CAAU;AAC/F;AAEA,SAAS,cAAc,QAAyD;CAC9E,MAAM,QAAQ,OAAO;CACrB,IACE,OAAO,SAAS,YAChB,OAAO,MAAM,UAAU,YACvB,OAAO,MAAM,YAAY,aACzB,OAAO,MAAM,oBAAoB,WAEjC,OAAO;EACL,MAAM;EACN,OAAO,MAAM;EACb,SAAS,MAAM;EACf,iBAAiB,MAAM;CACzB;CAEF,OAAO;EAAE,MAAM;EAAU,IAAI;CAA0B;AACzD;AAEA,SAAS,cACP,QACA,SACA;CACA,OAAO;EAAE,IAAI,OAAO;EAAI,OAAO,OAAO;EAAO,kBAAkB,OAAO;EAAkB;CAAQ;AAClG;AAEA,eAAe,kBACb,QACA,kBAAkB,OACH;CACf,MAAM,OAAO;CACb,IAAI,CAAC,OAAO,UAAU;EACpB,IAAI,iBAAiB,MAAM,IAAI,MAAM,4DAA4D;EACjG;CACF;CACA,MAAM,WAAW,MAAM,OAAO;CAC9B,IAAI,CAAC,iBAAiB;CACtB,IAAI,SAAS,WAAW,QAAQ;EAC9B,MAAM,SAAS,OAAO,cAAc;EACpC;CACF;CACA,IAAI,SAAS,WAAW,WACtB,MAAM,IAAI,MAAM,iDAAiD,OAAO,SAAS,MAAM,EAAE,GAAG;AAEhG;AAEA,IAAa,4BAAb,MAAuC;CACrC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CAEA,YAAY,SAA2C;EACrD,KAAKA,cAAc,QAAQ;EAC3B,KAAKC,qBAAqB,QAAQ;EAClC,KAAKC,WAAW,QAAQ;EACxB,KAAKC,WAAW,QAAQ,WAAW,sBAAsB,WAAW;EACpE,KAAKC,wBAAwB,QAAQ;EACrC,KAAKC,kBAAkB,QAAQ;EAC/B,KAAKC,oBAAoB,QAAQ;CACnC;CAEA,QAAc;EACZ,IAAI,KAAKC,QAAQ;EACjB,KAAUC,MAAM;EAChB,KAAKD,SAAS,kBAAkB,KAAK,KAAKC,MAAM,GAAG,OAAO;EAC1D,KAAKD,OAAO,QAAQ;CACtB;CAEA,MAAM,OAAsB;EAC1B,IAAI,KAAKA,QAAQ,cAAc,KAAKA,MAAM;EAC1C,KAAKA,SAAS,KAAA;EACd,MAAM,KAAKE;CACb;CAEA,MAAM,QAAQ,sBAAM,IAAI,KAAK,GAAkB;EAC7C,MAAM,KAAKL,wBAAwB;EACnC,MAAM,iBAAiB,IAAI,KAAK,IAAI,QAAQ,IAAI,QAAQ;EACxD,MAAM,CAAC,WAAW,UAAU,MAAM,QAAQ,IAAI,CAC5C,KAAKF,SAAS,uBAAuB;GACnC,SAAS,KAAKC;GACd;GACA;GACA,OAAO;EACT,CAAC,GACD,KAAKD,SAAS,mBAAmB;GAC/B,SAAS,KAAKC;GACd;GACA;GACA,OAAO;EACT,CAAC,CACH,CAAC;EACD,MAAM,QAAQ,IAAI,CAChB,GAAG,UAAU,KAAI,aAAY,KAAKO,kBAAkB,UAAU,GAAG,CAAC,GAClE,GAAG,OAAO,KAAI,UAAS,KAAKC,sBAAsB,OAAO,GAAG,CAAC,CAC/D,CAAC;CACH;CAEA,MAAMH,QAAuB;EAC3B,IAAI,KAAKC,YAAY;EACrB,KAAKA,aAAa,KAAK,QAAQ,CAAC,CAAC,OAAM,UAAS;GAC9C,QAAQ,MAAM,0CAA0C,sBAAsB,KAAK,CAAC;EACtF,CAAC;EACD,IAAI;GACF,MAAM,KAAKA;EACb,UAAU;GACR,KAAKA,aAAa,KAAA;EACpB;CACF;CAEA,MAAMC,kBAAkB,QAAuC,KAA0B;EACvF,IAAI;GACF,MAAM,WAAW,4BAA4B,OAAO,UAAU,OAAO,YAAY,MAAM;GACvF,IAAI,SAAS,SAAS,UAAU,MAAM,IAAI,MAAM,2CAA2C;GAC3F,MAAM,KAAKE,WACT,OAAM,mBACJ,KAAKV,SAAS,2BAA2B,cAAc,QAAQ,KAAKC,QAAQ,GAAG,cAAc,GAC/F,YAAY,KAAKU,iBAAiB,QAAQ,QAAQ,CACpD;GAEA,IAAI,CAAC,MADmB,KAAKX,SAAS,yBAAyB,cAAc,QAAQ,KAAKC,QAAQ,mBAAG,IAAI,KAAK,CAAC,GAC/F,MAAM,IAAI,MAAM,oDAAoD;EACtF,SAAS,OAAO;GACd,MAAM,WAAW,OAAO,YAAY;GACpC,MAAM,KAAKD,SAAS,qBAAqB;IACvC,GAAG,cAAc,QAAQ,KAAKC,QAAQ;IACtC,qBAAK,IAAI,KAAK;IACd,aAAa,QAAQ,KAAK,OAAO,QAAQ;IACzC,WAAW,sBAAsB,KAAK;IACtC;GACF,CAAC;EACH;CACF;CAEA,MAAMU,iBAAiB,QAAuC,UAAgD;EAC5G,MAAM,YAAsC,CAC1C,GAAI,OAAO,aACX;GAAE,WAAW,OAAO;GAAgB,cAAc,SAAS;EAAK,CAClE;EACA,IAAI,UAAU,SAAA,GAAwC,MAAM,IAAI,MAAM,qCAAqC;EAE3G,QAAQ,SAAS,MAAjB;GACE,KAAK,cAAc;IACjB,MAAM,OAAO,MAAM,KAAKC,aAAa,MAAM;IAC3C,MAAM,SAAS,MAAM,KAAKb,mBAAmB,WAAW;KACtD,OAAO,OAAO;KACd,kBAAkB,OAAO;KACzB,YAAY,KAAK;KACjB,OAAO,SAAS;KAChB,OAAO,SAAS;KAChB,kBAAkB,KAAK;KACvB,OAAO;MAAE,MAAM;MAAU,IAAI;KAA0B;KACvD,SAAS;MAAE,MAAM;MAAQ,UAAU,YAAY,OAAO;KAAiB;KACvE,OAAO;KACP,aAAa;IACf,CAAC;IACD,IAAI,OAAO,WAAW,YAAY,MAAM,IAAI,MAAM,GAAG,OAAO,KAAK,IAAI,OAAO,QAAQ;IACpF,IAAI,CAAC,SAAS,SAAS;IAKvB,MAAM,UAAU,MAAM,KAAKc,aAAa,QAAQ,SAAS,QAAQ,IAAI;IACrE,IAAI,CAAC,SAAS;IACd,MAAM,YAAY,KAAK,SAAS,QAAQ,KAAK,EAAE;IAC/C,IAAI,CAAC,WAAW;IAChB,MAAM,KAAKT,oBAAoB;KAAE,OAAO,OAAO;KAAO,QAAQ;IAAU,CAAC;IACzE,MAAM,iBAAiB,IAAI,eAAe;IAC1C,eAAe,IAAI,QAAQ;KAAE,UAAU;KAAW,gBAAgB,OAAO;IAAM,CAAC;IAEhF,MAAM,kBACJ,OAAM,MAFc,KAAKU,gBAAgB,OAAO,EAAA,CAElC,uBACZ;KACE,QAAQ;KACR,MAAM;KACN,SAAS,SAAS,QAAQ;KAC1B,UAAU;KACV,SAAS,EAAE,SAAS,SAAS,QAAQ,KAAK;KAC1C,UAAU,OAAO;KACjB,WAAW,OAAO;IACpB,GACA;KACE,UAAU,EAAE,UAAU,UAAU;KAChC,QAAQ,EAAE,UAAU,OAAO;KAC3B;IACF,CACF,GACA,IACF;IACA;GACF;GACA,KAAK;IACH,MAAM,KAAKC,kBAAkB,QAAQ,UAAU,SAAS;IACxD;GAEF,KAAK,eAAe;IAClB,MAAM,UAAU,MAAM,KAAKC,yBAAyB,QAAQ,SAAS,IAAI;IAEzE,MAAM,aADO,OAAO,aAAa,MAAM,KAAKhB,SAAS,IAAI;KAAE,OAAO,OAAO;KAAO,IAAI,OAAO;IAAW,CAAC,IAAI,KAAA,EACnF,SAAS,QAAQ,KAAK,EAAE;IAChD,IAAI,CAAC,WAAW,MAAM,IAAI,MAAM,mBAAmB,QAAQ,GAAG,qCAAqC;IACnG,MAAM,KAAKI,oBAAoB;KAAE,OAAO,OAAO;KAAO,QAAQ;IAAU,CAAC;IACzE,MAAM,iBAAiB,IAAI,eAAe;IAC1C,eAAe,IAAI,QAAQ;KAAE,UAAU;KAAW,gBAAgB,OAAO;IAAM,CAAC;IAChF,MAAM,WAAW,MAAM,uBAAuB,KAAKN,aAAa;KAC9D,YAAY,QAAQ;KACpB,MAAM,SAAS;KACf,WAAW,SAAS;IACtB,CAAC;IACD,MAAM,UAAU,SAAS;IACzB,MAAM,KAAKmB,cAAc,SAAS,OAAO;IAEzC,KAAI,MADoB,QAAQ,OAAO,mBAAmB,EAAA,CAC5C,MAAK,YAAW,QAAQ,OAAO,OAAO,EAAE,GAAG;IACzD,IAAI,SAAS,kBACX,MAAM,kBACJ,MAAM,QAAQ,uBACZ;KACE,QAAQ;KACR,MAAM;KACN,SAAS,SAAS;KAClB,UAAU;KACV,SAAS,EAAE,SAAS,SAAS,iBAAiB;KAC9C,UAAU,GAAG,OAAO,GAAG;KACvB,WAAW,GAAG,OAAO,eAAe;IACtC,GACA;KACE,UAAU,EAAE,UAAU,UAAU;KAChC,QAAQ,EAAE,UAAU,UAAU;KAC9B;IACF,CACF,CACF;IAeF,MAAM,UAAU,MAbD,QAAQ,WACrB;KACE,IAAI,OAAO;KACX,MAAM;KACN,SAAS;KACT,UAAU,SAAS;IACrB,GAKA;KAAE;KAAgB,iBAAiB;IAAK,CAEf,CAAC,CAAC;IAC7B,IAAI,QAAQ,WAAW,UAAU,QAAQ,WAAW,WAIlD,MAAM,IAAI,MAAM,4DAA4D,OAAO,QAAQ,MAAM,EAAE,GAAG;IAExG;GACF;GACA,KAAK,eAAe;IAClB,MAAM,UAAU,SAAS,iBACrB,MAAM,KAAKD,yBAAyB,QAAQ,SAAS,IAAI,IACzD,MAAM,KAAKE,gBAAgB,QAAQ,SAAS,IAAI;IAEpD,MAAM,aADO,OAAO,aAAa,MAAM,KAAKlB,SAAS,IAAI;KAAE,OAAO,OAAO;KAAO,IAAI,OAAO;IAAW,CAAC,IAAI,KAAA,EACnF,SAAS,QAAQ,KAAK,EAAE;IAChD,IAAI,CAAC,WAAW,MAAM,IAAI,MAAM,mBAAmB,QAAQ,GAAG,qCAAqC;IACnG,MAAM,KAAKI,oBAAoB;KAAE,OAAO,OAAO;KAAO,QAAQ;IAAU,CAAC;IACzE,MAAM,iBAAiB,IAAI,eAAe;IAC1C,eAAe,IAAI,QAAQ;KAAE,UAAU;KAAW,gBAAgB,OAAO;IAAM,CAAC;IAEhF,MAAM,kBACJ,OAAM,MAFc,KAAKU,gBAAgB,OAAO,EAAA,CAElC,uBACZ;KACE,QAAQ;KACR,MAAM;KACN,SAAS,SAAS;KAClB,UAAU,SAAS,YAAY;KAC/B,SAAS,EAAE,SAAS,SAAS,QAAQ;KACrC,UAAU,OAAO;KACjB,WAAW,OAAO;IACpB,GACA;KACE,UAAU,EAAE,UAAU,UAAU;KAChC,QAAQ,EAAE,UAAU,SAAS,gBAAgB,OAAO;KACpD;IACF,CACF,GACA,IACF;IACA;GACF;GACA,KAAK,UAAU;IACb,MAAM,UAAU,MAAM,KAAKI,gBAAgB,MAAM;IAEjD,MAAM,kBACJ,OAAM,MAFc,KAAKJ,gBAAgB,OAAO,EAAA,CAElC,uBAAuB;KACnC,QAAQ;KACR,MAAM;KACN,SAAS,SAAS;KAClB,SAAS;MAAE,MAAM,SAAS;MAAM,OAAO,SAAS;KAAM;KACtD,UAAU,OAAO;KACjB,WAAW,OAAO;IACpB,CAAC,CACH;GACF;EACF;CACF;CAEA,MAAMC,kBACJ,QACA,UACA,aACe;EACf,MAAM,SAAS,MAAM,KAAKf,SAAS,OAAO;GACxC,OAAO,OAAO;GACd,QAAQ;GACR,kBAAkB,OAAO;GACzB,OAAO;IACL,gBAAgB,0BAA0B,QAAQ;IAClD,kBAAkB,OAAO;IACzB,OAAO,SAAS;IAChB,QAAQ,CAAC,QAAQ;IACjB,UAAU,CAAC;IACX,UAAU;KAAE,GAAG,SAAS;KAAU,+BAA+B,OAAO;IAAe;GACzF;GACA,WAAW;EACb,CAAC;EACD,MAAM,yBAAyB,OAAO,KAAK,UAAU,kCAAkC,OAAO;EAC9F,IAAI,CAAC,2BAA2B,SAAS,UAAU,YAAY,CAAC,OAAO,KAAK,OAAO,SAAS,QAAQ,IAAI;EAExG,MAAM,QAAQ,SAAS;EACvB,IAAI,mBAAmB,OAAO,KAAK;EACnC,IAAI,wBAAwB;GAC1B,MAAM,UAAU,MAAM,KAAKD,mBAAmB,WAAW;IACvD,OAAO,OAAO;IACd,kBAAkB,OAAO;IACzB,YAAY,OAAO,KAAK;IACxB;IACA,OAAO;IACP;IACA,OAAO,cAAc,MAAM;IAC3B,SAAS;KAAE,MAAM;KAAQ,UAAU,YAAY,OAAO,eAAe,GAAG,OAAO,KAAK,GAAG;IAAgB;IACvG,OAAO;IACP;IACA,cAAc;GAChB,CAAC;GACD,IAAI,QAAQ,WAAW,YAAY;IACjC,IAAI,OAAO,SAAS,MAAM,KAAKC,SAAS,OAAO;KAAE,OAAO,OAAO;KAAO,IAAI,OAAO,KAAK;IAAG,CAAC;IAC1F,MAAM,IAAI,MAAM,GAAG,QAAQ,KAAK,IAAI,QAAQ,QAAQ;GACtD;GACA,mBAAmB,QAAQ;EAC7B;EACA,IAAI,SAAS,UAAU,UAAU;EAEjC,MAAM,QAAQ,MAAM,KAAKD,mBAAmB,WAAW;GACrD,OAAO,OAAO;GACd,kBAAkB,OAAO;GACzB,YAAY,OAAO,KAAK;GACxB;GACA,OAAO,SAAS;GAChB;GACA,OAAO;IAAE,MAAM;IAAU,IAAI;GAA0B;GACvD,SAAS;IAAE,MAAM;IAAQ,UAAU,YAAY,OAAO,eAAe,GAAG,OAAO,KAAK,GAAG;GAAc;GACrG,OAAO,yBAAyB,6BAA6B;GAC7D;EACF,CAAC;EACD,IAAI,MAAM,WAAW,YAAY,MAAM,IAAI,MAAM,GAAG,MAAM,KAAK,IAAI,MAAM,QAAQ;CACnF;CAEA,MAAMa,aAAa,QAAuC;EACxD,IAAI,CAAC,OAAO,YAAY,MAAM,IAAI,MAAM,gDAAgD;EACxF,MAAM,OAAO,MAAM,KAAKZ,SAAS,IAAI;GAAE,OAAO,OAAO;GAAO,IAAI,OAAO;EAAW,CAAC;EACnF,IAAI,CAAC,MAAM,MAAM,IAAI,MAAM,8BAA8B;EACzD,OAAO;CACT;CAEA,MAAMa,aACJ,QACA,MAC8C;EAC9C,IAAI,CAAC,OAAO,YAAY,MAAM,IAAI,MAAM,gDAAgD;EAExF,QAAO,MADgB,KAAKb,SAAS,gBAAgB,OAAO,OAAO,OAAO,kBAAkB,OAAO,UAAU,EAAA,CAE1G,QAAO,cAAa,UAAU,WAAW,aAAa,SAAS,KAAA,KAAa,UAAU,SAAS,KAAK,CAAC,CACrG,MAAM,MAAM,UAAU;GACrB,IAAI,SAAS,KAAA,KAAa,KAAK,SAAS,UAAU,MAAM,SAAS,QAAQ,OAAO;GAChF,IAAI,SAAS,KAAA,KAAa,MAAM,SAAS,UAAU,KAAK,SAAS,QAAQ,OAAO;GAChF,OAAO,MAAM,UAAU,QAAQ,IAAI,KAAK,UAAU,QAAQ,KAAK,KAAK,GAAG,cAAc,MAAM,EAAE;EAC/F,CAAC,CAAC,CAAC;CACP;CAEA,MAAMkB,gBAAgB,QAAuC,MAAiD;EAC5G,MAAM,UAAU,MAAM,KAAKL,aAAa,QAAQ,IAAI;EACpD,IAAI,CAAC,SAAS,MAAM,IAAI,MAAM,OAAO,sCAAsC,KAAK,KAAK,4BAA4B;EACjH,OAAO;CACT;CAEA,MAAMG,yBACJ,QACA,MACkC;EAClC,MAAM,UAAU,MAAM,KAAKH,aAAa,QAAQ,IAAI;EACpD,IAAI,SAEE;OAAA,MADkB,KAAKf,YAAY,qBAAqB,QAAQ,UAAU,GACjE,OAAO;EAAA;EAEtB,IAAI,CAAC,KAAKK,iBACR,MAAM,IAAI,MAAM,UAAU,qCAAqC,sCAAsC,KAAK,EAAE;EAE9G,MAAM,OAAO,MAAM,KAAKS,aAAa,MAAM;EAC3C,MAAM,KAAKT,gBAAgB;GAAE;GAAQ;GAAM;EAAK,CAAC;EACjD,OAAO,KAAKe,gBAAgB,QAAQ,IAAI;CAC1C;CAEA,MAAMJ,gBAAgB,SAA8D;EAClF,MAAM,UAAW,MAAM,KAAKhB,YAAY,qBAAqB,QAAQ,UAAU;EAC/E,IAAI,CAAC,SAAS,MAAM,IAAI,MAAM,kCAAkC;EAChE,MAAM,KAAKmB,cAAc,SAAS,OAAO;EACzC,OAAO;CACT;CAEA,MAAMA,cAAc,SAAuB,SAAiD;EAC1F,MAAO,QAA8B,OAAO,OAAO,EAAE,UAAU,QAAQ,SAAS,CAAC;CACnF;CAEA,MAAMP,WACJ,OACA,QACe;EACf,IAAI;EACJ,IAAI,UAAU,QAAQ,QAAQ;EAC9B,MAAM,QAAQ,kBACN;GACJ,UAAU,QAAQ,KAAK,YAAY;IACjC,IAAI;KAEF,IAAI,CAAC,MADiB,MAAM,IAAI,KAAK,KAAK,IAAI,IAAI,QAAQ,CAAC,GAC7C,iCAAiB,IAAI,MAAM,mDAAmD;IAC9F,SAAS,OAAO;KACd,iBAAiB;IACnB;GACF,CAAC;EACH,GACA,KAAK,MAAM,WAAW,CAAC,CACzB;EACA,MAAM,QAAQ;EACd,IAAI;GACF,MAAM,OAAO;GACb,MAAM;GACN,IAAI,gBAAgB,MAAM;EAC5B,UAAU;GACR,cAAc,KAAK;GACnB,MAAM;EACR;CACF;CAEA,MAAMD,sBAAsB,QAAmC,KAA0B;EACvF,IAAI;GACF,MAAM,KAAKC,WACT,OAAM,mBACJ,KAAKV,SAAS,uBAAuB,cAAc,QAAQ,KAAKC,QAAQ,GAAG,cAAc,GAC3F,YAAY;IACV,IAAI,OAAO,YAAY,MAAM;IAE7B,MAAM,WAAU,MADO,KAAKD,SAAS,gBAAgB,OAAO,OAAO,OAAO,gBAAgB,EAAA,CACjE,MACvB,cAAa,UAAU,OAAO,OAAO,aAAa,UAAU,WAAW,QACzE;IACA,IAAI,CAAC,SAAS,MAAM,IAAI,MAAM,qDAAqD;IAInF,MAAM,aAAY,MADC,KAAKA,SAAS,IAAI;KAAE,OAAO,OAAO;KAAO,IAAI,QAAQ;IAAW,CAAC,EAAA,EAC5D,SAAS,QAAQ,KAAK,EAAE;IAChD,IAAI,CAAC,WAAW,MAAM,IAAI,MAAM,mBAAmB,QAAQ,GAAG,qCAAqC;IACnG,MAAM,KAAKI,oBAAoB;KAAE,OAAO,OAAO;KAAO,QAAQ;IAAU,CAAC;IACzE,MAAM,iBAAiB,IAAI,eAAe;IAC1C,eAAe,IAAI,QAAQ;KAAE,UAAU;KAAW,gBAAgB,OAAO;IAAM,CAAC;IAEhF,MAAM,kBACJ,OAAM,MAFc,KAAKU,gBAAgB,OAAO,EAAA,CAElC,uBACZ;KACE,QAAQ;KACR,MAAM;KACN,SAAS,OAAO;KAChB,UAAU;KACV,SAAS,EAAE,SAAS,OAAO,QAAQ;KACnC,UAAU,OAAO;KACjB,WAAW,mBAAmB,OAAO;IACvC,GACA;KAAE,UAAU,EAAE,UAAU,UAAU;KAAG,QAAQ,EAAE,UAAU,OAAO;KAAG;IAAe,CACpF,GACA,IACF;GACF,CACF;GAEA,IAAI,CAAC,MADmB,KAAKd,SAAS,qBAAqB,cAAc,QAAQ,KAAKC,QAAQ,mBAAG,IAAI,KAAK,CAAC,GAC3F,MAAM,IAAI,MAAM,mDAAmD;EACrF,SAAS,OAAO;GACd,MAAM,KAAKD,SAAS,iBAAiB;IACnC,GAAG,cAAc,QAAQ,KAAKC,QAAQ;IACtC,qBAAK,IAAI,KAAK;IACd,aAAa,QAAQ,KAAK,OAAO,QAAQ;IACzC,WAAW,sBAAsB,KAAK;IACtC,UAAU,OAAO,YAAY;GAC/B,CAAC;EACH;CACF;AACF;AAEA,MAAa,6BAA6B;CACxC,SAAS;CACT,QAAQ;CACR,WAAW;CACX,aAAa;CACb,gBAAgB;CAChB,cAAc;CACd,QAAQ;AACV"}
+{"version":3,"file":"dispatcher.js","names":["#controller","#transitionService","#storage","#ownerId","#reconcileToolResults","#prepareBinding","#primeCredentials","#maxInFlight","#inFlight","#timer","#tick","#activeClaim","#claimAndStart","#track","#dispatchDecision","#dispatchPendingStart","#withLease","#executeDecision","#requireItem","#findBinding","#requireSession","#upsertLinkedItem","#requireOrPrepareBinding","#switchThread","#requireBinding"],"sources":["../../src/rules/dispatcher.ts"],"sourcesContent":["import { randomUUID } from 'node:crypto';\n\nimport type { MastraCodeState } from '@mastra/code-sdk/schema';\nimport type { AgentController } from '@mastra/core/agent-controller';\nimport { RequestContext } from '@mastra/core/request-context';\n\nimport { resolveSkillInvocation } from '../skills/service.js';\nimport type { SkillSession } from '../skills/service.js';\nimport type {\n  FactoryDeferredDecisionRecord,\n  FactoryPendingStartRecord,\n  FactoryRunBindingRecord,\n  WorkItemRow,\n  WorkItemsStorage,\n} from '../storage/domains/work-items/base.js';\nimport type { FactoryTransitionService } from './transition-service.js';\nimport type { FactoryCommitDecision, FactoryRuleActor, FactoryRuleCausalEntry } from './types.js';\nimport { FACTORY_RULE_STAGES } from './types.js';\nimport { MAX_FACTORY_RULE_CAUSAL_DEPTH, validateFactoryRuleDecision } from './validation.js';\n\nconst LEASE_MS = 30_000;\nconst POLL_MS = 1_000;\nconst BATCH_SIZE = 10;\nconst MAX_ATTEMPTS = 5;\nconst MAX_ERROR_LENGTH = 512;\nconst MAX_BACKOFF_MS = 60_000;\n// Dispatches can legitimately run for minutes (skill kickoffs consume the\n// agent's run stream; binding preparation clones repositories), so they run\n// detached from the poll loop under this concurrency cap.\nconst MAX_IN_FLIGHT = 25;\n\ninterface DispatcherSession extends SkillSession {\n  thread: {\n    switch(input: { threadId: string }): Promise<unknown>;\n    listActiveMessages(): Promise<Array<{ id: string }>>;\n  };\n  sendSignal(\n    input: { id: string; type: 'user'; tagName: 'user'; contents: string },\n    options: { requestContext: RequestContext; requireDelivery?: boolean },\n  ): { accepted: Promise<{ accepted: true; runId?: string; action?: string }> };\n}\n\ntype FactoryController = Pick<AgentController<MastraCodeState>, 'getSessionByResource'>;\n\nexport interface FactoryBindingPreparationInput {\n  record: FactoryDeferredDecisionRecord;\n  item: WorkItemRow;\n  role: string;\n}\n\nexport interface FactoryDecisionDispatcherOptions {\n  controller: FactoryController;\n  transitionService: Pick<FactoryTransitionService, 'transition'>;\n  storage: WorkItemsStorage;\n  ownerId?: string;\n  reconcileToolResults?: () => Promise<void>;\n  prepareBinding?: (input: FactoryBindingPreparationInput) => Promise<void>;\n  primeCredentials?: (tenant: { orgId: string; userId: string }) => Promise<void>;\n  maxInFlight?: number;\n}\n\nfunction sanitizeDispatchError(error: unknown): string {\n  const message = error instanceof Error ? error.message : String(error);\n  return message\n    .replace(/\\b(?:bearer|token|api[-_ ]?key|authorization)\\s*[:=]?\\s*[^\\s,;]+/gi, '[redacted]')\n    .slice(0, MAX_ERROR_LENGTH);\n}\n\nfunction retryAt(now: Date, attempts: number): Date {\n  return new Date(now.getTime() + Math.min(1_000 * 2 ** Math.max(0, attempts - 1), MAX_BACKOFF_MS));\n}\n\nfunction externalSourceForDecision(decision: Extract<FactoryCommitDecision, { type: 'upsertLinkedWorkItem' }>) {\n  const [integrationId, type] =\n    decision.source === 'github-pr'\n      ? ['github', 'pull-request']\n      : decision.source === 'github-issue'\n        ? ['github', 'issue']\n        : decision.source === 'linear-issue'\n          ? ['linear', 'issue']\n          : ['factory', 'manual'];\n  return { integrationId, type, externalId: decision.sourceKey, url: decision.url ?? undefined };\n}\n\nfunction deferredActor(record: FactoryDeferredDecisionRecord): FactoryRuleActor {\n  const actor = record.actor;\n  if (\n    actor?.type === 'github' &&\n    typeof actor.login === 'string' &&\n    typeof actor.trusted === 'boolean' &&\n    typeof actor.factoryAuthored === 'boolean'\n  ) {\n    return {\n      type: 'github',\n      login: actor.login,\n      trusted: actor.trusted,\n      factoryAuthored: actor.factoryAuthored,\n    };\n  }\n  return { type: 'system', id: 'factory-rule-dispatcher' };\n}\n\nfunction leaseIdentity(\n  record: Pick<FactoryDeferredDecisionRecord | FactoryPendingStartRecord, 'id' | 'orgId' | 'factoryProjectId'>,\n  ownerId: string,\n) {\n  return { id: record.id, orgId: record.orgId, factoryProjectId: record.factoryProjectId, ownerId };\n}\n\nasync function awaitNotification(\n  result: Awaited<ReturnType<SkillSession['sendNotificationSignal']>>,\n  requireDelivery = false,\n): Promise<void> {\n  await result.persisted;\n  if (!result.accepted) {\n    if (requireDelivery) throw new Error('Factory notification was persisted without agent delivery.');\n    return;\n  }\n  const accepted = await result.accepted;\n  if (!requireDelivery) return;\n  if (accepted.action === 'wake') {\n    await accepted.output.consumeStream();\n    return;\n  }\n  if (accepted.action !== 'deliver') {\n    throw new Error(`Factory notification did not reach the agent (${String(accepted.action)}).`);\n  }\n}\n\nexport class FactoryDecisionDispatcher {\n  readonly #controller: FactoryController;\n  readonly #transitionService: Pick<FactoryTransitionService, 'transition'>;\n  readonly #storage: WorkItemsStorage;\n  readonly #ownerId: string;\n  readonly #reconcileToolResults?: () => Promise<void>;\n  readonly #prepareBinding?: (input: FactoryBindingPreparationInput) => Promise<void>;\n  readonly #primeCredentials?: (tenant: { orgId: string; userId: string }) => Promise<void>;\n  readonly #maxInFlight: number;\n  #timer?: ReturnType<typeof setInterval>;\n  #activeClaim?: Promise<void>;\n  readonly #inFlight = new Set<Promise<void>>();\n\n  constructor(options: FactoryDecisionDispatcherOptions) {\n    this.#controller = options.controller;\n    this.#transitionService = options.transitionService;\n    this.#storage = options.storage;\n    this.#ownerId = options.ownerId ?? `factory-dispatcher:${randomUUID()}`;\n    this.#reconcileToolResults = options.reconcileToolResults;\n    this.#prepareBinding = options.prepareBinding;\n    this.#primeCredentials = options.primeCredentials;\n    const maxInFlight = options.maxInFlight ?? MAX_IN_FLIGHT;\n    this.#maxInFlight = Number.isFinite(maxInFlight) && maxInFlight > 0 ? Math.floor(maxInFlight) : MAX_IN_FLIGHT;\n  }\n\n  start(): void {\n    if (this.#timer) return;\n    void this.#tick();\n    this.#timer = setInterval(() => void this.#tick(), POLL_MS);\n    this.#timer.unref?.();\n  }\n\n  async stop(): Promise<void> {\n    if (this.#timer) clearInterval(this.#timer);\n    this.#timer = undefined;\n    await this.#activeClaim;\n    await Promise.allSettled([...this.#inFlight]);\n  }\n\n  async runOnce(now = new Date()): Promise<void> {\n    await Promise.all(await this.#claimAndStart(now));\n  }\n\n  /**\n   * Claims a batch and starts dispatches without awaiting their completion.\n   * Dispatches can legitimately take minutes (skill kickoffs consume the\n   * agent's run stream; binding preparation provisions sandboxes), so awaiting\n   * them here would freeze the poll loop and starve every other queued\n   * decision. In-flight records stay protected from re-claim by lease renewal.\n   */\n  async #claimAndStart(now: Date): Promise<Array<Promise<void>>> {\n    await this.#reconcileToolResults?.();\n    const capacity = this.#maxInFlight - this.#inFlight.size;\n    if (capacity <= 0) return [];\n    const limit = Math.min(BATCH_SIZE, capacity);\n    const leaseExpiresAt = new Date(now.getTime() + LEASE_MS);\n    const decisions = await this.#storage.claimDeferredDecisions({\n      ownerId: this.#ownerId,\n      now,\n      leaseExpiresAt,\n      limit,\n    });\n    const startsLimit = limit - decisions.length;\n    const starts =\n      startsLimit > 0\n        ? await this.#storage.claimPendingStarts({\n            ownerId: this.#ownerId,\n            now,\n            leaseExpiresAt,\n            limit: startsLimit,\n          })\n        : [];\n    return [\n      ...decisions.map(decision => this.#track(this.#dispatchDecision(decision, now))),\n      ...starts.map(start => this.#track(this.#dispatchPendingStart(start, now))),\n    ];\n  }\n\n  #track(dispatch: Promise<void>): Promise<void> {\n    this.#inFlight.add(dispatch);\n    void dispatch.catch(() => {}).then(() => this.#inFlight.delete(dispatch));\n    return dispatch;\n  }\n\n  async #tick(): Promise<void> {\n    if (this.#activeClaim) return;\n    this.#activeClaim = this.#claimAndStart(new Date()).then(\n      dispatches => {\n        for (const dispatch of dispatches) {\n          dispatch.catch(error => {\n            console.error('Factory decision dispatch failed', sanitizeDispatchError(error));\n          });\n        }\n      },\n      error => {\n        console.error('Factory decision dispatch cycle failed', sanitizeDispatchError(error));\n      },\n    );\n    try {\n      await this.#activeClaim;\n    } finally {\n      this.#activeClaim = undefined;\n    }\n  }\n\n  async #dispatchDecision(record: FactoryDeferredDecisionRecord, now: Date): Promise<void> {\n    try {\n      const decision = validateFactoryRuleDecision(record.decision, record.causalChain.length);\n      if (decision.type === 'reject') throw new Error('Deferred Factory decisions cannot reject.');\n      await this.#withLease(\n        async leaseExpiresAt =>\n          this.#storage.renewDeferredDecisionLease(leaseIdentity(record, this.#ownerId), leaseExpiresAt),\n        async () => this.#executeDecision(record, decision),\n      );\n      const completed = await this.#storage.completeDeferredDecision(leaseIdentity(record, this.#ownerId), new Date());\n      if (!completed) throw new Error('Factory decision lease was lost before completion.');\n    } catch (error) {\n      const terminal = record.attempts >= MAX_ATTEMPTS;\n      await this.#storage.failDeferredDecision({\n        ...leaseIdentity(record, this.#ownerId),\n        now: new Date(),\n        availableAt: retryAt(now, record.attempts),\n        lastError: sanitizeDispatchError(error),\n        terminal,\n      });\n    }\n  }\n\n  async #executeDecision(record: FactoryDeferredDecisionRecord, decision: FactoryCommitDecision): Promise<void> {\n    const nextChain: FactoryRuleCausalEntry[] = [\n      ...(record.causalChain as FactoryRuleCausalEntry[]),\n      { ingressId: record.idempotencyKey, decisionType: decision.type },\n    ];\n    if (nextChain.length > MAX_FACTORY_RULE_CAUSAL_DEPTH) throw new Error('Factory rule causal depth exceeded.');\n\n    switch (decision.type) {\n      case 'transition': {\n        const item = await this.#requireItem(record);\n        const result = await this.#transitionService.transition({\n          orgId: record.orgId,\n          factoryProjectId: record.factoryProjectId,\n          workItemId: item.id,\n          board: decision.board,\n          stage: decision.stage,\n          expectedRevision: item.revision,\n          actor: { type: 'system', id: 'factory-rule-dispatcher' },\n          ingress: { type: 'rule', identity: `decision:${record.idempotencyKey}` },\n          cause: 'rule_decision',\n          causalChain: nextChain,\n        });\n        if (result.status === 'rejected') throw new Error(`${result.code}: ${result.reason}`);\n        if (!decision.message) return;\n        // Best-effort recipient lookup: no active binding (or no authenticated\n        // session owner) means nobody is engaged with this item, so the\n        // transition itself is the whole effect. A retry after a delivery\n        // failure is safe because the transition replays by ingress identity.\n        const binding = await this.#findBinding(record, decision.message.role);\n        if (!binding) return;\n        const startedBy = item.sessions[binding.role]?.startedBy;\n        if (!startedBy) return;\n        await this.#primeCredentials?.({ orgId: record.orgId, userId: startedBy });\n        const requestContext = new RequestContext();\n        requestContext.set('user', { workosId: startedBy, organizationId: record.orgId });\n        const session = await this.#requireSession(binding);\n        await awaitNotification(\n          await session.sendNotificationSignal(\n            {\n              source: 'factory',\n              kind: 'rule-message',\n              summary: decision.message.text,\n              priority: 'high',\n              payload: { message: decision.message.text },\n              sourceId: record.id,\n              dedupeKey: record.idempotencyKey,\n            },\n            {\n              ifActive: { behavior: 'deliver' },\n              ifIdle: { behavior: 'wake' },\n              requestContext,\n            },\n          ),\n          true,\n        );\n        return;\n      }\n      case 'upsertLinkedWorkItem': {\n        await this.#upsertLinkedItem(record, decision, nextChain);\n        return;\n      }\n      case 'invokeSkill': {\n        const binding = await this.#requireOrPrepareBinding(record, decision.role);\n        const item = record.workItemId ? await this.#storage.get({ orgId: record.orgId, id: record.workItemId }) : null;\n        const startedBy = item?.sessions[binding.role]?.startedBy;\n        if (!startedBy) throw new Error(`Factory binding ${binding.id} has no authenticated session owner.`);\n        await this.#primeCredentials?.({ orgId: record.orgId, userId: startedBy });\n        const requestContext = new RequestContext();\n        requestContext.set('user', { workosId: startedBy, organizationId: record.orgId });\n        const resolved = await resolveSkillInvocation(this.#controller, {\n          resourceId: binding.resourceId,\n          name: decision.skillName,\n          arguments: decision.arguments,\n        });\n        const session = resolved.session as DispatcherSession;\n        await this.#switchThread(session, binding);\n        const delivered = await session.thread.listActiveMessages();\n        if (delivered.some(message => message.id === record.id)) return;\n        if (decision.precedingMessage) {\n          await awaitNotification(\n            await session.sendNotificationSignal(\n              {\n                source: 'factory',\n                kind: 'stage-transition',\n                summary: decision.precedingMessage,\n                priority: 'medium',\n                payload: { message: decision.precedingMessage },\n                sourceId: `${record.id}:stage-transition`,\n                dedupeKey: `${record.idempotencyKey}:stage-transition`,\n              },\n              {\n                ifActive: { behavior: 'deliver' },\n                ifIdle: { behavior: 'persist' },\n                requestContext,\n              },\n            ),\n          );\n        }\n        const result = session.sendSignal(\n          {\n            id: record.id,\n            type: 'user',\n            tagName: 'user',\n            contents: resolved.message,\n          },\n          // Without `requireDelivery` the session resolves `accepted` on the\n          // next tick and swallows wake failures, so a kickoff that never\n          // reached the agent would be marked succeeded and the thread would\n          // stay empty forever.\n          { requestContext, requireDelivery: true },\n        );\n        const settled = await result.accepted;\n        if (settled.action !== 'wake' && settled.action !== 'deliver') {\n          // An undefined action means the session did not verify delivery at\n          // all — with `requireDelivery` set that is a contract violation, not\n          // a success.\n          throw new Error(`Factory skill invocation signal did not reach the agent (${String(settled.action)}).`);\n        }\n        return;\n      }\n      case 'sendMessage': {\n        const binding = decision.prepareBinding\n          ? await this.#requireOrPrepareBinding(record, decision.role)\n          : await this.#requireBinding(record, decision.role);\n        const item = record.workItemId ? await this.#storage.get({ orgId: record.orgId, id: record.workItemId }) : null;\n        const startedBy = item?.sessions[binding.role]?.startedBy;\n        if (!startedBy) throw new Error(`Factory binding ${binding.id} has no authenticated session owner.`);\n        await this.#primeCredentials?.({ orgId: record.orgId, userId: startedBy });\n        const requestContext = new RequestContext();\n        requestContext.set('user', { workosId: startedBy, organizationId: record.orgId });\n        const session = await this.#requireSession(binding);\n        await awaitNotification(\n          await session.sendNotificationSignal(\n            {\n              source: 'factory',\n              kind: 'rule-message',\n              summary: decision.message,\n              priority: decision.priority ?? 'high',\n              payload: { message: decision.message },\n              sourceId: record.id,\n              dedupeKey: record.idempotencyKey,\n            },\n            {\n              ifActive: { behavior: 'deliver' },\n              ifIdle: { behavior: decision.idleBehavior ?? 'wake' },\n              requestContext,\n            },\n          ),\n          true,\n        );\n        return;\n      }\n      case 'notify': {\n        const binding = await this.#requireBinding(record);\n        const session = await this.#requireSession(binding);\n        await awaitNotification(\n          await session.sendNotificationSignal({\n            source: 'factory',\n            kind: 'rule-notification',\n            summary: decision.title,\n            payload: { body: decision.body, level: decision.level },\n            sourceId: record.id,\n            dedupeKey: record.idempotencyKey,\n          }),\n        );\n      }\n    }\n  }\n\n  async #upsertLinkedItem(\n    record: FactoryDeferredDecisionRecord,\n    decision: Extract<FactoryCommitDecision, { type: 'upsertLinkedWorkItem' }>,\n    causalChain: FactoryRuleCausalEntry[],\n  ): Promise<void> {\n    const result = await this.#storage.upsert({\n      orgId: record.orgId,\n      userId: 'factory-rule-dispatcher',\n      factoryProjectId: record.factoryProjectId,\n      input: {\n        externalSource: externalSourceForDecision(decision),\n        parentWorkItemId: record.workItemId,\n        title: decision.title,\n        stages: ['intake'],\n        sessions: {},\n        metadata: { ...decision.metadata, factoryRuleMaterializationKey: record.idempotencyKey },\n      },\n      reuseMode: 'preserve',\n    });\n    const materializedByDecision = result.item.metadata?.factoryRuleMaterializationKey === record.idempotencyKey;\n    if (!materializedByDecision && (decision.stage === 'intake' || !result.item.stages.includes('intake'))) return;\n\n    const board = decision.board;\n    let expectedRevision = result.item.revision;\n    if (materializedByDecision) {\n      const initial = await this.#transitionService.transition({\n        orgId: record.orgId,\n        factoryProjectId: record.factoryProjectId,\n        workItemId: result.item.id,\n        board,\n        stage: 'intake',\n        expectedRevision,\n        actor: deferredActor(record),\n        ingress: { type: 'rule', identity: `decision:${record.idempotencyKey}:${result.item.id}:initial-entry` },\n        cause: 'linked_item_materialized',\n        causalChain,\n        initialEntry: true,\n      });\n      if (initial.status === 'rejected') {\n        if (result.created) await this.#storage.delete({ orgId: record.orgId, id: result.item.id });\n        throw new Error(`${initial.code}: ${initial.reason}`);\n      }\n      expectedRevision = initial.revision;\n    }\n    if (decision.stage === 'intake') return;\n\n    const moved = await this.#transitionService.transition({\n      orgId: record.orgId,\n      factoryProjectId: record.factoryProjectId,\n      workItemId: result.item.id,\n      board,\n      stage: decision.stage,\n      expectedRevision,\n      actor: { type: 'system', id: 'factory-rule-dispatcher' },\n      ingress: { type: 'rule', identity: `decision:${record.idempotencyKey}:${result.item.id}:destination` },\n      cause: materializedByDecision ? 'linked_item_materialized' : 'linked_item_reconciled',\n      causalChain,\n    });\n    if (moved.status === 'rejected') throw new Error(`${moved.code}: ${moved.reason}`);\n  }\n\n  async #requireItem(record: FactoryDeferredDecisionRecord) {\n    if (!record.workItemId) throw new Error('Factory decision is not linked to a work item.');\n    const item = await this.#storage.get({ orgId: record.orgId, id: record.workItemId });\n    if (!item) throw new Error('Factory work item not found.');\n    return item;\n  }\n\n  async #findBinding(\n    record: FactoryDeferredDecisionRecord,\n    role?: string,\n  ): Promise<FactoryRunBindingRecord | undefined> {\n    if (!record.workItemId) throw new Error('Factory decision is not linked to a work item.');\n    const bindings = await this.#storage.listRunBindings(record.orgId, record.factoryProjectId, record.workItemId);\n    return bindings\n      .filter(candidate => candidate.status === 'active' && (role === undefined || candidate.role === role))\n      .sort((left, right) => {\n        if (role === undefined && left.role === 'work' && right.role !== 'work') return -1;\n        if (role === undefined && right.role === 'work' && left.role !== 'work') return 1;\n        return right.createdAt.getTime() - left.createdAt.getTime() || left.id.localeCompare(right.id);\n      })[0];\n  }\n\n  async #requireBinding(record: FactoryDeferredDecisionRecord, role?: string): Promise<FactoryRunBindingRecord> {\n    const binding = await this.#findBinding(record, role);\n    if (!binding) throw new Error(role ? `No active Factory binding for role ${role}.` : 'No active Factory binding.');\n    return binding;\n  }\n\n  async #requireOrPrepareBinding(\n    record: FactoryDeferredDecisionRecord,\n    role: string,\n  ): Promise<FactoryRunBindingRecord> {\n    const binding = await this.#findBinding(record, role);\n    if (binding) {\n      const session = await this.#controller.getSessionByResource(binding.resourceId);\n      if (session) return binding;\n    }\n    if (!this.#prepareBinding) {\n      throw new Error(binding ? 'Bound Factory session not found.' : `No active Factory binding for role ${role}.`);\n    }\n    const item = await this.#requireItem(record);\n    await this.#prepareBinding({ record, item, role });\n    return this.#requireBinding(record, role);\n  }\n\n  async #requireSession(binding: FactoryRunBindingRecord): Promise<DispatcherSession> {\n    const session = (await this.#controller.getSessionByResource(binding.resourceId)) as DispatcherSession | undefined;\n    if (!session) throw new Error('Bound Factory session not found.');\n    await this.#switchThread(session, binding);\n    return session;\n  }\n\n  async #switchThread(session: SkillSession, binding: FactoryRunBindingRecord): Promise<void> {\n    await (session as DispatcherSession).thread.switch({ threadId: binding.threadId });\n  }\n\n  async #withLease(\n    renew: (leaseExpiresAt: Date) => Promise<unknown | null>,\n    effect: () => Promise<void>,\n  ): Promise<void> {\n    let renewalFailure: unknown;\n    let renewal = Promise.resolve();\n    const timer = setInterval(\n      () => {\n        renewal = renewal.then(async () => {\n          try {\n            const renewed = await renew(new Date(Date.now() + LEASE_MS));\n            if (!renewed) renewalFailure = new Error('Factory dispatch lease was lost during execution.');\n          } catch (error) {\n            renewalFailure = error;\n          }\n        });\n      },\n      Math.floor(LEASE_MS / 3),\n    );\n    timer.unref?.();\n    try {\n      await effect();\n      await renewal;\n      if (renewalFailure) throw renewalFailure;\n    } finally {\n      clearInterval(timer);\n      await renewal;\n    }\n  }\n\n  async #dispatchPendingStart(record: FactoryPendingStartRecord, now: Date): Promise<void> {\n    try {\n      await this.#withLease(\n        async leaseExpiresAt =>\n          this.#storage.renewPendingStartLease(leaseIdentity(record, this.#ownerId), leaseExpiresAt),\n        async () => {\n          if (record.message === null) return;\n          const bindings = await this.#storage.listRunBindings(record.orgId, record.factoryProjectId);\n          const binding = bindings.find(\n            candidate => candidate.id === record.bindingId && candidate.status === 'active',\n          );\n          if (!binding) throw new Error('Prepared Factory binding is unavailable or revoked.');\n          // Wake runs build the Factory workspace, which requires the\n          // authenticated session owner on the request context.\n          const item = await this.#storage.get({ orgId: record.orgId, id: binding.workItemId });\n          const startedBy = item?.sessions[binding.role]?.startedBy;\n          if (!startedBy) throw new Error(`Factory binding ${binding.id} has no authenticated session owner.`);\n          await this.#primeCredentials?.({ orgId: record.orgId, userId: startedBy });\n          const requestContext = new RequestContext();\n          requestContext.set('user', { workosId: startedBy, organizationId: record.orgId });\n          const session = await this.#requireSession(binding);\n          await awaitNotification(\n            await session.sendNotificationSignal(\n              {\n                source: 'factory',\n                kind: 'run-kickoff',\n                summary: record.message!,\n                priority: 'high',\n                payload: { message: record.message },\n                sourceId: record.id,\n                dedupeKey: `factory-kickoff:${record.kickoffKey}`,\n              },\n              { ifActive: { behavior: 'deliver' }, ifIdle: { behavior: 'wake' }, requestContext },\n            ),\n            true,\n          );\n        },\n      );\n      const completed = await this.#storage.completePendingStart(leaseIdentity(record, this.#ownerId), new Date());\n      if (!completed) throw new Error('Factory kickoff lease was lost before completion.');\n    } catch (error) {\n      await this.#storage.failPendingStart({\n        ...leaseIdentity(record, this.#ownerId),\n        now: new Date(),\n        availableAt: retryAt(now, record.attempts),\n        lastError: sanitizeDispatchError(error),\n        terminal: record.attempts >= MAX_ATTEMPTS,\n      });\n    }\n  }\n}\n\nexport const FACTORY_DISPATCH_CONSTANTS = {\n  leaseMs: LEASE_MS,\n  pollMs: POLL_MS,\n  batchSize: BATCH_SIZE,\n  maxAttempts: MAX_ATTEMPTS,\n  maxErrorLength: MAX_ERROR_LENGTH,\n  maxBackoffMs: MAX_BACKOFF_MS,\n  maxInFlight: MAX_IN_FLIGHT,\n  stages: FACTORY_RULE_STAGES,\n} as const;\n"],"mappings":";;;;;;AAoBA,MAAM,WAAW;AACjB,MAAM,UAAU;AAChB,MAAM,aAAa;AACnB,MAAM,eAAe;AACrB,MAAM,mBAAmB;AACzB,MAAM,iBAAiB;AAIvB,MAAM,gBAAgB;AAgCtB,SAAS,sBAAsB,OAAwB;CAErD,QADgB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAA,CAElE,QAAQ,sEAAsE,YAAY,CAAC,CAC3F,MAAM,GAAG,gBAAgB;AAC9B;AAEA,SAAS,QAAQ,KAAW,UAAwB;CAClD,OAAO,IAAI,KAAK,IAAI,QAAQ,IAAI,KAAK,IAAI,MAAQ,KAAK,KAAK,IAAI,GAAG,WAAW,CAAC,GAAG,cAAc,CAAC;AAClG;AAEA,SAAS,0BAA0B,UAA4E;CAC7G,MAAM,CAAC,eAAe,QACpB,SAAS,WAAW,cAChB,CAAC,UAAU,cAAc,IACzB,SAAS,WAAW,iBAClB,CAAC,UAAU,OAAO,IAClB,SAAS,WAAW,iBAClB,CAAC,UAAU,OAAO,IAClB,CAAC,WAAW,QAAQ;CAC9B,OAAO;EAAE;EAAe;EAAM,YAAY,SAAS;EAAW,KAAK,SAAS,OAAO,KAAA;CAAU;AAC/F;AAEA,SAAS,cAAc,QAAyD;CAC9E,MAAM,QAAQ,OAAO;CACrB,IACE,OAAO,SAAS,YAChB,OAAO,MAAM,UAAU,YACvB,OAAO,MAAM,YAAY,aACzB,OAAO,MAAM,oBAAoB,WAEjC,OAAO;EACL,MAAM;EACN,OAAO,MAAM;EACb,SAAS,MAAM;EACf,iBAAiB,MAAM;CACzB;CAEF,OAAO;EAAE,MAAM;EAAU,IAAI;CAA0B;AACzD;AAEA,SAAS,cACP,QACA,SACA;CACA,OAAO;EAAE,IAAI,OAAO;EAAI,OAAO,OAAO;EAAO,kBAAkB,OAAO;EAAkB;CAAQ;AAClG;AAEA,eAAe,kBACb,QACA,kBAAkB,OACH;CACf,MAAM,OAAO;CACb,IAAI,CAAC,OAAO,UAAU;EACpB,IAAI,iBAAiB,MAAM,IAAI,MAAM,4DAA4D;EACjG;CACF;CACA,MAAM,WAAW,MAAM,OAAO;CAC9B,IAAI,CAAC,iBAAiB;CACtB,IAAI,SAAS,WAAW,QAAQ;EAC9B,MAAM,SAAS,OAAO,cAAc;EACpC;CACF;CACA,IAAI,SAAS,WAAW,WACtB,MAAM,IAAI,MAAM,iDAAiD,OAAO,SAAS,MAAM,EAAE,GAAG;AAEhG;AAEA,IAAa,4BAAb,MAAuC;CACrC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA,4BAAqB,IAAI,IAAmB;CAE5C,YAAY,SAA2C;EACrD,KAAKA,cAAc,QAAQ;EAC3B,KAAKC,qBAAqB,QAAQ;EAClC,KAAKC,WAAW,QAAQ;EACxB,KAAKC,WAAW,QAAQ,WAAW,sBAAsB,WAAW;EACpE,KAAKC,wBAAwB,QAAQ;EACrC,KAAKC,kBAAkB,QAAQ;EAC/B,KAAKC,oBAAoB,QAAQ;EACjC,MAAM,cAAc,QAAQ,eAAe;EAC3C,KAAKC,eAAe,OAAO,SAAS,WAAW,KAAK,cAAc,IAAI,KAAK,MAAM,WAAW,IAAI;CAClG;CAEA,QAAc;EACZ,IAAI,KAAKE,QAAQ;EACjB,KAAUC,MAAM;EAChB,KAAKD,SAAS,kBAAkB,KAAK,KAAKC,MAAM,GAAG,OAAO;EAC1D,KAAKD,OAAO,QAAQ;CACtB;CAEA,MAAM,OAAsB;EAC1B,IAAI,KAAKA,QAAQ,cAAc,KAAKA,MAAM;EAC1C,KAAKA,SAAS,KAAA;EACd,MAAM,KAAKE;EACX,MAAM,QAAQ,WAAW,CAAC,GAAG,KAAKH,SAAS,CAAC;CAC9C;CAEA,MAAM,QAAQ,sBAAM,IAAI,KAAK,GAAkB;EAC7C,MAAM,QAAQ,IAAI,MAAM,KAAKI,eAAe,GAAG,CAAC;CAClD;;;;;;;;CASA,MAAMA,eAAe,KAA0C;EAC7D,MAAM,KAAKR,wBAAwB;EACnC,MAAM,WAAW,KAAKG,eAAe,KAAKC,UAAU;EACpD,IAAI,YAAY,GAAG,OAAO,CAAC;EAC3B,MAAM,QAAQ,KAAK,IAAI,YAAY,QAAQ;EAC3C,MAAM,iBAAiB,IAAI,KAAK,IAAI,QAAQ,IAAI,QAAQ;EACxD,MAAM,YAAY,MAAM,KAAKN,SAAS,uBAAuB;GAC3D,SAAS,KAAKC;GACd;GACA;GACA;EACF,CAAC;EACD,MAAM,cAAc,QAAQ,UAAU;EACtC,MAAM,SACJ,cAAc,IACV,MAAM,KAAKD,SAAS,mBAAmB;GACrC,SAAS,KAAKC;GACd;GACA;GACA,OAAO;EACT,CAAC,IACD,CAAC;EACP,OAAO,CACL,GAAG,UAAU,KAAI,aAAY,KAAKU,OAAO,KAAKC,kBAAkB,UAAU,GAAG,CAAC,CAAC,GAC/E,GAAG,OAAO,KAAI,UAAS,KAAKD,OAAO,KAAKE,sBAAsB,OAAO,GAAG,CAAC,CAAC,CAC5E;CACF;CAEA,OAAO,UAAwC;EAC7C,KAAKP,UAAU,IAAI,QAAQ;EAC3B,SAAc,YAAY,CAAC,CAAC,CAAC,CAAC,WAAW,KAAKA,UAAU,OAAO,QAAQ,CAAC;EACxE,OAAO;CACT;CAEA,MAAME,QAAuB;EAC3B,IAAI,KAAKC,cAAc;EACvB,KAAKA,eAAe,KAAKC,+BAAe,IAAI,KAAK,CAAC,CAAC,CAAC,MAClD,eAAc;GACZ,KAAK,MAAM,YAAY,YACrB,SAAS,OAAM,UAAS;IACtB,QAAQ,MAAM,oCAAoC,sBAAsB,KAAK,CAAC;GAChF,CAAC;EAEL,IACA,UAAS;GACP,QAAQ,MAAM,0CAA0C,sBAAsB,KAAK,CAAC;EACtF,CACF;EACA,IAAI;GACF,MAAM,KAAKD;EACb,UAAU;GACR,KAAKA,eAAe,KAAA;EACtB;CACF;CAEA,MAAMG,kBAAkB,QAAuC,KAA0B;EACvF,IAAI;GACF,MAAM,WAAW,4BAA4B,OAAO,UAAU,OAAO,YAAY,MAAM;GACvF,IAAI,SAAS,SAAS,UAAU,MAAM,IAAI,MAAM,2CAA2C;GAC3F,MAAM,KAAKE,WACT,OAAM,mBACJ,KAAKd,SAAS,2BAA2B,cAAc,QAAQ,KAAKC,QAAQ,GAAG,cAAc,GAC/F,YAAY,KAAKc,iBAAiB,QAAQ,QAAQ,CACpD;GAEA,IAAI,CAAC,MADmB,KAAKf,SAAS,yBAAyB,cAAc,QAAQ,KAAKC,QAAQ,mBAAG,IAAI,KAAK,CAAC,GAC/F,MAAM,IAAI,MAAM,oDAAoD;EACtF,SAAS,OAAO;GACd,MAAM,WAAW,OAAO,YAAY;GACpC,MAAM,KAAKD,SAAS,qBAAqB;IACvC,GAAG,cAAc,QAAQ,KAAKC,QAAQ;IACtC,qBAAK,IAAI,KAAK;IACd,aAAa,QAAQ,KAAK,OAAO,QAAQ;IACzC,WAAW,sBAAsB,KAAK;IACtC;GACF,CAAC;EACH;CACF;CAEA,MAAMc,iBAAiB,QAAuC,UAAgD;EAC5G,MAAM,YAAsC,CAC1C,GAAI,OAAO,aACX;GAAE,WAAW,OAAO;GAAgB,cAAc,SAAS;EAAK,CAClE;EACA,IAAI,UAAU,SAAA,GAAwC,MAAM,IAAI,MAAM,qCAAqC;EAE3G,QAAQ,SAAS,MAAjB;GACE,KAAK,cAAc;IACjB,MAAM,OAAO,MAAM,KAAKC,aAAa,MAAM;IAC3C,MAAM,SAAS,MAAM,KAAKjB,mBAAmB,WAAW;KACtD,OAAO,OAAO;KACd,kBAAkB,OAAO;KACzB,YAAY,KAAK;KACjB,OAAO,SAAS;KAChB,OAAO,SAAS;KAChB,kBAAkB,KAAK;KACvB,OAAO;MAAE,MAAM;MAAU,IAAI;KAA0B;KACvD,SAAS;MAAE,MAAM;MAAQ,UAAU,YAAY,OAAO;KAAiB;KACvE,OAAO;KACP,aAAa;IACf,CAAC;IACD,IAAI,OAAO,WAAW,YAAY,MAAM,IAAI,MAAM,GAAG,OAAO,KAAK,IAAI,OAAO,QAAQ;IACpF,IAAI,CAAC,SAAS,SAAS;IAKvB,MAAM,UAAU,MAAM,KAAKkB,aAAa,QAAQ,SAAS,QAAQ,IAAI;IACrE,IAAI,CAAC,SAAS;IACd,MAAM,YAAY,KAAK,SAAS,QAAQ,KAAK,EAAE;IAC/C,IAAI,CAAC,WAAW;IAChB,MAAM,KAAKb,oBAAoB;KAAE,OAAO,OAAO;KAAO,QAAQ;IAAU,CAAC;IACzE,MAAM,iBAAiB,IAAI,eAAe;IAC1C,eAAe,IAAI,QAAQ;KAAE,UAAU;KAAW,gBAAgB,OAAO;IAAM,CAAC;IAEhF,MAAM,kBACJ,OAAM,MAFc,KAAKc,gBAAgB,OAAO,EAAA,CAElC,uBACZ;KACE,QAAQ;KACR,MAAM;KACN,SAAS,SAAS,QAAQ;KAC1B,UAAU;KACV,SAAS,EAAE,SAAS,SAAS,QAAQ,KAAK;KAC1C,UAAU,OAAO;KACjB,WAAW,OAAO;IACpB,GACA;KACE,UAAU,EAAE,UAAU,UAAU;KAChC,QAAQ,EAAE,UAAU,OAAO;KAC3B;IACF,CACF,GACA,IACF;IACA;GACF;GACA,KAAK;IACH,MAAM,KAAKC,kBAAkB,QAAQ,UAAU,SAAS;IACxD;GAEF,KAAK,eAAe;IAClB,MAAM,UAAU,MAAM,KAAKC,yBAAyB,QAAQ,SAAS,IAAI;IAEzE,MAAM,aADO,OAAO,aAAa,MAAM,KAAKpB,SAAS,IAAI;KAAE,OAAO,OAAO;KAAO,IAAI,OAAO;IAAW,CAAC,IAAI,KAAA,EACnF,SAAS,QAAQ,KAAK,EAAE;IAChD,IAAI,CAAC,WAAW,MAAM,IAAI,MAAM,mBAAmB,QAAQ,GAAG,qCAAqC;IACnG,MAAM,KAAKI,oBAAoB;KAAE,OAAO,OAAO;KAAO,QAAQ;IAAU,CAAC;IACzE,MAAM,iBAAiB,IAAI,eAAe;IAC1C,eAAe,IAAI,QAAQ;KAAE,UAAU;KAAW,gBAAgB,OAAO;IAAM,CAAC;IAChF,MAAM,WAAW,MAAM,uBAAuB,KAAKN,aAAa;KAC9D,YAAY,QAAQ;KACpB,MAAM,SAAS;KACf,WAAW,SAAS;IACtB,CAAC;IACD,MAAM,UAAU,SAAS;IACzB,MAAM,KAAKuB,cAAc,SAAS,OAAO;IAEzC,KAAI,MADoB,QAAQ,OAAO,mBAAmB,EAAA,CAC5C,MAAK,YAAW,QAAQ,OAAO,OAAO,EAAE,GAAG;IACzD,IAAI,SAAS,kBACX,MAAM,kBACJ,MAAM,QAAQ,uBACZ;KACE,QAAQ;KACR,MAAM;KACN,SAAS,SAAS;KAClB,UAAU;KACV,SAAS,EAAE,SAAS,SAAS,iBAAiB;KAC9C,UAAU,GAAG,OAAO,GAAG;KACvB,WAAW,GAAG,OAAO,eAAe;IACtC,GACA;KACE,UAAU,EAAE,UAAU,UAAU;KAChC,QAAQ,EAAE,UAAU,UAAU;KAC9B;IACF,CACF,CACF;IAeF,MAAM,UAAU,MAbD,QAAQ,WACrB;KACE,IAAI,OAAO;KACX,MAAM;KACN,SAAS;KACT,UAAU,SAAS;IACrB,GAKA;KAAE;KAAgB,iBAAiB;IAAK,CAEf,CAAC,CAAC;IAC7B,IAAI,QAAQ,WAAW,UAAU,QAAQ,WAAW,WAIlD,MAAM,IAAI,MAAM,4DAA4D,OAAO,QAAQ,MAAM,EAAE,GAAG;IAExG;GACF;GACA,KAAK,eAAe;IAClB,MAAM,UAAU,SAAS,iBACrB,MAAM,KAAKD,yBAAyB,QAAQ,SAAS,IAAI,IACzD,MAAM,KAAKE,gBAAgB,QAAQ,SAAS,IAAI;IAEpD,MAAM,aADO,OAAO,aAAa,MAAM,KAAKtB,SAAS,IAAI;KAAE,OAAO,OAAO;KAAO,IAAI,OAAO;IAAW,CAAC,IAAI,KAAA,EACnF,SAAS,QAAQ,KAAK,EAAE;IAChD,IAAI,CAAC,WAAW,MAAM,IAAI,MAAM,mBAAmB,QAAQ,GAAG,qCAAqC;IACnG,MAAM,KAAKI,oBAAoB;KAAE,OAAO,OAAO;KAAO,QAAQ;IAAU,CAAC;IACzE,MAAM,iBAAiB,IAAI,eAAe;IAC1C,eAAe,IAAI,QAAQ;KAAE,UAAU;KAAW,gBAAgB,OAAO;IAAM,CAAC;IAEhF,MAAM,kBACJ,OAAM,MAFc,KAAKc,gBAAgB,OAAO,EAAA,CAElC,uBACZ;KACE,QAAQ;KACR,MAAM;KACN,SAAS,SAAS;KAClB,UAAU,SAAS,YAAY;KAC/B,SAAS,EAAE,SAAS,SAAS,QAAQ;KACrC,UAAU,OAAO;KACjB,WAAW,OAAO;IACpB,GACA;KACE,UAAU,EAAE,UAAU,UAAU;KAChC,QAAQ,EAAE,UAAU,SAAS,gBAAgB,OAAO;KACpD;IACF,CACF,GACA,IACF;IACA;GACF;GACA,KAAK,UAAU;IACb,MAAM,UAAU,MAAM,KAAKI,gBAAgB,MAAM;IAEjD,MAAM,kBACJ,OAAM,MAFc,KAAKJ,gBAAgB,OAAO,EAAA,CAElC,uBAAuB;KACnC,QAAQ;KACR,MAAM;KACN,SAAS,SAAS;KAClB,SAAS;MAAE,MAAM,SAAS;MAAM,OAAO,SAAS;KAAM;KACtD,UAAU,OAAO;KACjB,WAAW,OAAO;IACpB,CAAC,CACH;GACF;EACF;CACF;CAEA,MAAMC,kBACJ,QACA,UACA,aACe;EACf,MAAM,SAAS,MAAM,KAAKnB,SAAS,OAAO;GACxC,OAAO,OAAO;GACd,QAAQ;GACR,kBAAkB,OAAO;GACzB,OAAO;IACL,gBAAgB,0BAA0B,QAAQ;IAClD,kBAAkB,OAAO;IACzB,OAAO,SAAS;IAChB,QAAQ,CAAC,QAAQ;IACjB,UAAU,CAAC;IACX,UAAU;KAAE,GAAG,SAAS;KAAU,+BAA+B,OAAO;IAAe;GACzF;GACA,WAAW;EACb,CAAC;EACD,MAAM,yBAAyB,OAAO,KAAK,UAAU,kCAAkC,OAAO;EAC9F,IAAI,CAAC,2BAA2B,SAAS,UAAU,YAAY,CAAC,OAAO,KAAK,OAAO,SAAS,QAAQ,IAAI;EAExG,MAAM,QAAQ,SAAS;EACvB,IAAI,mBAAmB,OAAO,KAAK;EACnC,IAAI,wBAAwB;GAC1B,MAAM,UAAU,MAAM,KAAKD,mBAAmB,WAAW;IACvD,OAAO,OAAO;IACd,kBAAkB,OAAO;IACzB,YAAY,OAAO,KAAK;IACxB;IACA,OAAO;IACP;IACA,OAAO,cAAc,MAAM;IAC3B,SAAS;KAAE,MAAM;KAAQ,UAAU,YAAY,OAAO,eAAe,GAAG,OAAO,KAAK,GAAG;IAAgB;IACvG,OAAO;IACP;IACA,cAAc;GAChB,CAAC;GACD,IAAI,QAAQ,WAAW,YAAY;IACjC,IAAI,OAAO,SAAS,MAAM,KAAKC,SAAS,OAAO;KAAE,OAAO,OAAO;KAAO,IAAI,OAAO,KAAK;IAAG,CAAC;IAC1F,MAAM,IAAI,MAAM,GAAG,QAAQ,KAAK,IAAI,QAAQ,QAAQ;GACtD;GACA,mBAAmB,QAAQ;EAC7B;EACA,IAAI,SAAS,UAAU,UAAU;EAEjC,MAAM,QAAQ,MAAM,KAAKD,mBAAmB,WAAW;GACrD,OAAO,OAAO;GACd,kBAAkB,OAAO;GACzB,YAAY,OAAO,KAAK;GACxB;GACA,OAAO,SAAS;GAChB;GACA,OAAO;IAAE,MAAM;IAAU,IAAI;GAA0B;GACvD,SAAS;IAAE,MAAM;IAAQ,UAAU,YAAY,OAAO,eAAe,GAAG,OAAO,KAAK,GAAG;GAAc;GACrG,OAAO,yBAAyB,6BAA6B;GAC7D;EACF,CAAC;EACD,IAAI,MAAM,WAAW,YAAY,MAAM,IAAI,MAAM,GAAG,MAAM,KAAK,IAAI,MAAM,QAAQ;CACnF;CAEA,MAAMiB,aAAa,QAAuC;EACxD,IAAI,CAAC,OAAO,YAAY,MAAM,IAAI,MAAM,gDAAgD;EACxF,MAAM,OAAO,MAAM,KAAKhB,SAAS,IAAI;GAAE,OAAO,OAAO;GAAO,IAAI,OAAO;EAAW,CAAC;EACnF,IAAI,CAAC,MAAM,MAAM,IAAI,MAAM,8BAA8B;EACzD,OAAO;CACT;CAEA,MAAMiB,aACJ,QACA,MAC8C;EAC9C,IAAI,CAAC,OAAO,YAAY,MAAM,IAAI,MAAM,gDAAgD;EAExF,QAAO,MADgB,KAAKjB,SAAS,gBAAgB,OAAO,OAAO,OAAO,kBAAkB,OAAO,UAAU,EAAA,CAE1G,QAAO,cAAa,UAAU,WAAW,aAAa,SAAS,KAAA,KAAa,UAAU,SAAS,KAAK,CAAC,CACrG,MAAM,MAAM,UAAU;GACrB,IAAI,SAAS,KAAA,KAAa,KAAK,SAAS,UAAU,MAAM,SAAS,QAAQ,OAAO;GAChF,IAAI,SAAS,KAAA,KAAa,MAAM,SAAS,UAAU,KAAK,SAAS,QAAQ,OAAO;GAChF,OAAO,MAAM,UAAU,QAAQ,IAAI,KAAK,UAAU,QAAQ,KAAK,KAAK,GAAG,cAAc,MAAM,EAAE;EAC/F,CAAC,CAAC,CAAC;CACP;CAEA,MAAMsB,gBAAgB,QAAuC,MAAiD;EAC5G,MAAM,UAAU,MAAM,KAAKL,aAAa,QAAQ,IAAI;EACpD,IAAI,CAAC,SAAS,MAAM,IAAI,MAAM,OAAO,sCAAsC,KAAK,KAAK,4BAA4B;EACjH,OAAO;CACT;CAEA,MAAMG,yBACJ,QACA,MACkC;EAClC,MAAM,UAAU,MAAM,KAAKH,aAAa,QAAQ,IAAI;EACpD,IAAI,SAEE;OAAA,MADkB,KAAKnB,YAAY,qBAAqB,QAAQ,UAAU,GACjE,OAAO;EAAA;EAEtB,IAAI,CAAC,KAAKK,iBACR,MAAM,IAAI,MAAM,UAAU,qCAAqC,sCAAsC,KAAK,EAAE;EAE9G,MAAM,OAAO,MAAM,KAAKa,aAAa,MAAM;EAC3C,MAAM,KAAKb,gBAAgB;GAAE;GAAQ;GAAM;EAAK,CAAC;EACjD,OAAO,KAAKmB,gBAAgB,QAAQ,IAAI;CAC1C;CAEA,MAAMJ,gBAAgB,SAA8D;EAClF,MAAM,UAAW,MAAM,KAAKpB,YAAY,qBAAqB,QAAQ,UAAU;EAC/E,IAAI,CAAC,SAAS,MAAM,IAAI,MAAM,kCAAkC;EAChE,MAAM,KAAKuB,cAAc,SAAS,OAAO;EACzC,OAAO;CACT;CAEA,MAAMA,cAAc,SAAuB,SAAiD;EAC1F,MAAO,QAA8B,OAAO,OAAO,EAAE,UAAU,QAAQ,SAAS,CAAC;CACnF;CAEA,MAAMP,WACJ,OACA,QACe;EACf,IAAI;EACJ,IAAI,UAAU,QAAQ,QAAQ;EAC9B,MAAM,QAAQ,kBACN;GACJ,UAAU,QAAQ,KAAK,YAAY;IACjC,IAAI;KAEF,IAAI,CAAC,MADiB,MAAM,IAAI,KAAK,KAAK,IAAI,IAAI,QAAQ,CAAC,GAC7C,iCAAiB,IAAI,MAAM,mDAAmD;IAC9F,SAAS,OAAO;KACd,iBAAiB;IACnB;GACF,CAAC;EACH,GACA,KAAK,MAAM,WAAW,CAAC,CACzB;EACA,MAAM,QAAQ;EACd,IAAI;GACF,MAAM,OAAO;GACb,MAAM;GACN,IAAI,gBAAgB,MAAM;EAC5B,UAAU;GACR,cAAc,KAAK;GACnB,MAAM;EACR;CACF;CAEA,MAAMD,sBAAsB,QAAmC,KAA0B;EACvF,IAAI;GACF,MAAM,KAAKC,WACT,OAAM,mBACJ,KAAKd,SAAS,uBAAuB,cAAc,QAAQ,KAAKC,QAAQ,GAAG,cAAc,GAC3F,YAAY;IACV,IAAI,OAAO,YAAY,MAAM;IAE7B,MAAM,WAAU,MADO,KAAKD,SAAS,gBAAgB,OAAO,OAAO,OAAO,gBAAgB,EAAA,CACjE,MACvB,cAAa,UAAU,OAAO,OAAO,aAAa,UAAU,WAAW,QACzE;IACA,IAAI,CAAC,SAAS,MAAM,IAAI,MAAM,qDAAqD;IAInF,MAAM,aAAY,MADC,KAAKA,SAAS,IAAI;KAAE,OAAO,OAAO;KAAO,IAAI,QAAQ;IAAW,CAAC,EAAA,EAC5D,SAAS,QAAQ,KAAK,EAAE;IAChD,IAAI,CAAC,WAAW,MAAM,IAAI,MAAM,mBAAmB,QAAQ,GAAG,qCAAqC;IACnG,MAAM,KAAKI,oBAAoB;KAAE,OAAO,OAAO;KAAO,QAAQ;IAAU,CAAC;IACzE,MAAM,iBAAiB,IAAI,eAAe;IAC1C,eAAe,IAAI,QAAQ;KAAE,UAAU;KAAW,gBAAgB,OAAO;IAAM,CAAC;IAEhF,MAAM,kBACJ,OAAM,MAFc,KAAKc,gBAAgB,OAAO,EAAA,CAElC,uBACZ;KACE,QAAQ;KACR,MAAM;KACN,SAAS,OAAO;KAChB,UAAU;KACV,SAAS,EAAE,SAAS,OAAO,QAAQ;KACnC,UAAU,OAAO;KACjB,WAAW,mBAAmB,OAAO;IACvC,GACA;KAAE,UAAU,EAAE,UAAU,UAAU;KAAG,QAAQ,EAAE,UAAU,OAAO;KAAG;IAAe,CACpF,GACA,IACF;GACF,CACF;GAEA,IAAI,CAAC,MADmB,KAAKlB,SAAS,qBAAqB,cAAc,QAAQ,KAAKC,QAAQ,mBAAG,IAAI,KAAK,CAAC,GAC3F,MAAM,IAAI,MAAM,mDAAmD;EACrF,SAAS,OAAO;GACd,MAAM,KAAKD,SAAS,iBAAiB;IACnC,GAAG,cAAc,QAAQ,KAAKC,QAAQ;IACtC,qBAAK,IAAI,KAAK;IACd,aAAa,QAAQ,KAAK,OAAO,QAAQ;IACzC,WAAW,sBAAsB,KAAK;IACtC,UAAU,OAAO,YAAY;GAC/B,CAAC;EACH;CACF;AACF;AAEA,MAAa,6BAA6B;CACxC,SAAS;CACT,QAAQ;CACR,WAAW;CACX,aAAa;CACb,gBAAgB;CAChB,cAAc;CACd,aAAa;CACb,QAAQ;AACV"}

package/dist/rules/start-coordinator.js

@@ -1,5 +1,5 @@
-import { RequestContext } from "@mastra/core/request-context";
 import { formatSkillActivation } from "@mastra/core/workspace";
+import { RequestContext } from "@mastra/core/request-context";
 //#region src/rules/start-coordinator.ts
 var FactoryStartTransitionError = class extends Error {
 	result;

package/dist/rules/transition-service.d.ts

@@ -22,6 +22,23 @@ export interface FactoryTransitionServiceOptions {
     rules: FactoryRules;
     storage: WorkItemsStorage;
     timeoutMs?: number;
+    /**
+     * Called after a transition commits into a terminal stage (`done` /
+     * `canceled`) — the point where the item's sessions stop receiving runs, so
+     * resources they hold (e.g. sandboxes) can be released for reuse. Awaited,
+     * but failures are swallowed: releasing resources must never break or roll
+     * back the committed transition.
+     */
+    onTerminalStage?: (args: {
+        orgId: string;
+        factoryProjectId: string;
+        workItemId: string;
+        stage: FactoryRuleStage;
+    }) => Promise<void> | void;
+    /** Upper bound on how long a committed transition waits for
+     * `onTerminalStage` before returning (default 30s). The cleanup continues
+     * in the background past the bound. */
+    terminalCleanupTimeoutMs?: number;
 }
 export declare class FactoryTransitionService {
     #private;

package/dist/rules/transition-service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"transition-service.d.ts","sourceRoot":"","sources":["../../src/rules/transition-service.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAA0B,gBAAgB,EAAE,MAAM,uCAAuC,CAAC;AAEtG,OAAO,KAAK,EAEV,gBAAgB,EAChB,gBAAgB,EAChB,sBAAsB,EAEtB,gBAAgB,EAChB,YAAY,EAEZ,uBAAuB,EACxB,MAAM,YAAY,CAAC;AAWpB,MAAM,WAAW,wBAAwB;IACvC,KAAK,EAAE,MAAM,CAAC;IACd,gBAAgB,EAAE,MAAM,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,gBAAgB,CAAC;IACxB,KAAK,EAAE,gBAAgB,CAAC;IACxB,gBAAgB,EAAE,MAAM,CAAC;IACzB,KAAK,EAAE,gBAAgB,CAAC;IACxB,OAAO,EAAE;QAAE,IAAI,EAAE,OAAO,GAAG,OAAO,GAAG,YAAY,GAAG,QAAQ,GAAG,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACjH,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,SAAS,sBAAsB,EAAE,CAAC;IAChD,iHAAiH;IACjH,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,+BAA+B;IAC9C,KAAK,EAAE,YAAY,CAAC;IACpB,OAAO,EAAE,gBAAgB,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAiED,qBAAa,wBAAwB;;gBAKvB,OAAO,EAAE,+BAA+B;IAMpD,IAAI,cAAc,IAAI,MAAM,CAE3B;IAEK,UAAU,CAAC,OAAO,EAAE,wBAAwB,GAAG,OAAO,CAAC,uBAAuB,CAAC;CAiKtF"}
+{"version":3,"file":"transition-service.d.ts","sourceRoot":"","sources":["../../src/rules/transition-service.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAA0B,gBAAgB,EAAE,MAAM,uCAAuC,CAAC;AAEtG,OAAO,KAAK,EAEV,gBAAgB,EAChB,gBAAgB,EAChB,sBAAsB,EAEtB,gBAAgB,EAChB,YAAY,EAEZ,uBAAuB,EACxB,MAAM,YAAY,CAAC;AAiBpB,MAAM,WAAW,wBAAwB;IACvC,KAAK,EAAE,MAAM,CAAC;IACd,gBAAgB,EAAE,MAAM,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,gBAAgB,CAAC;IACxB,KAAK,EAAE,gBAAgB,CAAC;IACxB,gBAAgB,EAAE,MAAM,CAAC;IACzB,KAAK,EAAE,gBAAgB,CAAC;IACxB,OAAO,EAAE;QAAE,IAAI,EAAE,OAAO,GAAG,OAAO,GAAG,YAAY,GAAG,QAAQ,GAAG,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACjH,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,SAAS,sBAAsB,EAAE,CAAC;IAChD,iHAAiH;IACjH,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,+BAA+B;IAC9C,KAAK,EAAE,YAAY,CAAC;IACpB,OAAO,EAAE,gBAAgB,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;;OAMG;IACH,eAAe,CAAC,EAAE,CAAC,IAAI,EAAE;QACvB,KAAK,EAAE,MAAM,CAAC;QACd,gBAAgB,EAAE,MAAM,CAAC;QACzB,UAAU,EAAE,MAAM,CAAC;QACnB,KAAK,EAAE,gBAAgB,CAAC;KACzB,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAC3B;;2CAEuC;IACvC,wBAAwB,CAAC,EAAE,MAAM,CAAC;CACnC;AAiED,qBAAa,wBAAwB;;gBAOvB,OAAO,EAAE,+BAA+B;IAQpD,IAAI,cAAc,IAAI,MAAM,CAE3B;IAEK,UAAU,CAAC,OAAO,EAAE,wBAAwB,GAAG,OAAO,CAAC,uBAAuB,CAAC;CA4LtF"}

package/dist/rules/transition-service.js

@@ -5,6 +5,12 @@ import { randomUUID } from "crypto";
 //#region src/rules/transition-service.ts
 const RULE_TIMEOUT_MS = 5e3;
 const MAX_REJECTION_REASON = 512;
+const TERMINAL_STAGES = /* @__PURE__ */ new Set(["done", "canceled"]);
+/** Longest a committed transition waits for terminal resource cleanup. Cleanup
+* reattaches remote sandboxes, so a hung provider call must not leave the
+* already-committed transition request pending; past this bound the cleanup
+* keeps running in the background as pure best-effort. */
+const TERMINAL_CLEANUP_TIMEOUT_MS = 3e4;
 function rejection(transitionId, itemId, code, reason) {
 	return {
 		status: "rejected",
@@ -62,10 +68,14 @@ var FactoryTransitionService = class {
 	#rules;
 	#storage;
 	#timeoutMs;
+	#onTerminalStage;
+	#terminalCleanupTimeoutMs;
 	constructor(options) {
 		this.#rules = options.rules;
 		this.#storage = options.storage;
 		this.#timeoutMs = options.timeoutMs ?? RULE_TIMEOUT_MS;
+		this.#onTerminalStage = options.onTerminalStage;
+		this.#terminalCleanupTimeoutMs = options.terminalCleanupTimeoutMs ?? TERMINAL_CLEANUP_TIMEOUT_MS;
 	}
 	get ruleSetVersion() {
 		return this.#rules.version;
@@ -194,7 +204,25 @@ var FactoryTransitionService = class {
 			evaluation
 		});
 		if (committed.status === "missing") return rejection(transitionId, request.workItemId, "invalid_transition", "Work item not found.");
-		return committed.result;
+		const result = committed.result;
+		if (this.#onTerminalStage && result.status === "accepted" && TERMINAL_STAGES.has(result.stage)) {
+			let timer;
+			try {
+				const cleanup = Promise.resolve(this.#onTerminalStage({
+					orgId: request.orgId,
+					factoryProjectId: request.factoryProjectId,
+					workItemId: request.workItemId,
+					stage: result.stage
+				}));
+				cleanup.catch(() => {});
+				await Promise.race([cleanup, new Promise((resolve) => {
+					timer = setTimeout(resolve, this.#terminalCleanupTimeoutMs);
+				})]);
+			} catch {} finally {
+				clearTimeout(timer);
+			}
+		}
+		return result;
 	}
 };
 //#endregion

package/dist/rules/transition-service.js.map

@@ -1 +1 @@
-{"version":3,"file":"transition-service.js","names":["#rules","#storage","#timeoutMs","#commitRejection","#commit"],"sources":["../../src/rules/transition-service.ts"],"sourcesContent":["import { randomUUID } from 'node:crypto';\n\nimport type { ExternalWorkItemSource, WorkItemsStorage } from '../storage/domains/work-items/base.js';\nimport { resolveFactoryStageRules } from './resolve.js';\nimport type {\n  FactoryCommitDecision,\n  FactoryRuleActor,\n  FactoryRuleBoard,\n  FactoryRuleCausalEntry,\n  FactoryRuleRejectionCode,\n  FactoryRuleStage,\n  FactoryRules,\n  FactoryStageRuleContext,\n  FactoryTransitionResult,\n} from './types.js';\nimport { FACTORY_RULE_STAGES, factoryRuleSourceForWorkItem } from './types.js';\nimport {\n  MAX_FACTORY_RULE_CAUSAL_DEPTH,\n  validateFactoryRuleDecision,\n  validateFactoryRuleDecisions,\n} from './validation.js';\n\nconst RULE_TIMEOUT_MS = 5_000;\nconst MAX_REJECTION_REASON = 512;\n\nexport interface FactoryTransitionRequest {\n  orgId: string;\n  factoryProjectId: string;\n  workItemId: string;\n  board: FactoryRuleBoard;\n  stage: FactoryRuleStage;\n  expectedRevision: number;\n  actor: FactoryRuleActor;\n  ingress: { type: 'human' | 'agent' | 'toolResult' | 'github' | 'rule'; identity: string; transitionId?: string };\n  cause: string;\n  causalChain?: readonly FactoryRuleCausalEntry[];\n  /** Internal materialization path: evaluate only the destination onEnter leaf even when already at that stage. */\n  initialEntry?: boolean;\n}\n\nexport interface FactoryTransitionServiceOptions {\n  rules: FactoryRules;\n  storage: WorkItemsStorage;\n  timeoutMs?: number;\n}\n\nfunction rejection(\n  transitionId: string,\n  itemId: string,\n  code: FactoryRuleRejectionCode,\n  reason: string,\n): FactoryTransitionResult {\n  return { status: 'rejected', transitionId, itemId, code, reason: reason.slice(0, MAX_REJECTION_REASON) };\n}\n\nfunction actorId(actor: FactoryRuleActor): string {\n  switch (actor.type) {\n    case 'human':\n    case 'system':\n      return actor.id;\n    case 'agent':\n      return `agent:${actor.bindingId}`;\n    case 'github':\n      return `github:${actor.login}`;\n  }\n}\n\nfunction currentStage(stages: readonly string[]): FactoryRuleStage | undefined {\n  if (stages.length !== 1) return undefined;\n  const stage = stages[0];\n  return FACTORY_RULE_STAGES.includes(stage as FactoryRuleStage) ? (stage as FactoryRuleStage) : undefined;\n}\n\nfunction workItemSource(source: ExternalWorkItemSource | null) {\n  if (!source) return 'manual' as const;\n  if (source.integrationId === 'linear') return 'linear-issue' as const;\n  return source.type === 'pull-request' ? ('github-pr' as const) : ('github-issue' as const);\n}\n\nfunction roleForStage(board: FactoryRuleBoard, stage: FactoryRuleStage): string {\n  if (board === 'review') return 'review';\n  if (stage === 'triage') return 'triage';\n  if (stage === 'planning') return 'plan';\n  return 'work';\n}\n\nfunction stageTransitionMessage(fromStage: FactoryRuleStage, toStage: FactoryRuleStage): string {\n  return `This work was moved from the ${fromStage} stage to the ${toStage} stage.`;\n}\n\nfunction ruleFailure(error: unknown): { code: FactoryRuleRejectionCode; reason: string } {\n  return {\n    code: 'rule_error',\n    reason: error instanceof Error ? `Factory rule failed: ${error.message}` : 'Factory rule failed.',\n  };\n}\n\nasync function withRuleTimeout<T>(operation: Promise<T>, timeoutMs: number): Promise<T> {\n  let timer: ReturnType<typeof setTimeout> | undefined;\n  const timeout = new Promise<never>((_, reject) => {\n    timer = setTimeout(() => reject(new Error('FACTORY_RULE_TIMEOUT')), timeoutMs);\n  });\n  try {\n    return await Promise.race([operation, timeout]);\n  } finally {\n    if (timer) clearTimeout(timer);\n  }\n}\n\nexport class FactoryTransitionService {\n  readonly #rules: FactoryRules;\n  readonly #storage: WorkItemsStorage;\n  readonly #timeoutMs: number;\n\n  constructor(options: FactoryTransitionServiceOptions) {\n    this.#rules = options.rules;\n    this.#storage = options.storage;\n    this.#timeoutMs = options.timeoutMs ?? RULE_TIMEOUT_MS;\n  }\n\n  get ruleSetVersion(): string {\n    return this.#rules.version;\n  }\n\n  async transition(request: FactoryTransitionRequest): Promise<FactoryTransitionResult> {\n    const replay = await this.#storage.getTransitionResultByIngress(\n      request.orgId,\n      request.factoryProjectId,\n      request.ingress.identity,\n    );\n    if (replay) return replay as unknown as FactoryTransitionResult;\n\n    const transitionId = request.ingress.transitionId ?? randomUUID();\n    const item = await this.#storage.get({ orgId: request.orgId, id: request.workItemId });\n    if (!item) {\n      return this.#commitRejection(request, transitionId, 'invalid_transition', 'Work item not found.');\n    }\n\n    if (request.causalChain && request.causalChain.length > MAX_FACTORY_RULE_CAUSAL_DEPTH) {\n      return this.#commitRejection(\n        request,\n        transitionId,\n        'causal_depth_exceeded',\n        'Factory rule causal depth exceeded.',\n      );\n    }\n    const itemSource = workItemSource(item.externalSource);\n    const source = factoryRuleSourceForWorkItem(itemSource);\n    if ((request.board === 'review') !== (source === 'pullRequest')) {\n      return this.#commitRejection(\n        request,\n        transitionId,\n        'invalid_transition',\n        'The work item does not belong to the requested board.',\n      );\n    }\n    const fromStage = currentStage(item.stages);\n    if (!fromStage) {\n      return this.#commitRejection(\n        request,\n        transitionId,\n        'invalid_transition',\n        'The work item does not have one canonical Factory stage.',\n      );\n    }\n\n    const contextBase = {\n      tenant: { orgId: request.orgId, projectId: request.factoryProjectId },\n      actor: request.actor,\n      ingress: { type: request.ingress.type, id: request.ingress.identity },\n      cause: request.cause,\n      causalChain: request.causalChain ?? [],\n      ruleSetVersion: this.#rules.version,\n      item: {\n        id: item.id,\n        source: itemSource,\n        sourceKey: item.externalSource\n          ? `${item.externalSource.integrationId}:${item.externalSource.type}:${item.externalSource.externalId}`\n          : null,\n        parentWorkItemId: item.parentWorkItemId,\n        title: item.title,\n        url: item.externalSource?.url ?? null,\n        stages: [...item.stages],\n      },\n      board: request.board,\n      itemRevision: item.revision,\n      source,\n      fromStage,\n      toStage: request.stage,\n    } satisfies Omit<FactoryStageRuleContext, 'stage'>;\n\n    let evaluation:\n      | { outcome: 'accepted'; decisions: Record<string, unknown>[] }\n      | { outcome: 'rejected'; code: string; reason: string };\n    try {\n      evaluation = await withRuleTimeout(\n        (async () => {\n          const decisions: FactoryCommitDecision[] = [];\n          for (const rule of resolveFactoryStageRules(this.#rules, {\n            board: request.board,\n            source,\n            fromStage,\n            toStage: request.stage,\n            initialEntry: request.initialEntry,\n          })) {\n            const context: FactoryStageRuleContext = Object.freeze({\n              ...contextBase,\n              stage: rule.phase === 'exit' ? fromStage : request.stage,\n            });\n            const raw = await rule.handler(context);\n            if (raw === undefined) continue;\n            const decision = validateFactoryRuleDecision(raw, context.causalChain.length);\n            if (decision.type === 'reject') {\n              return { outcome: 'rejected' as const, code: decision.code, reason: decision.reason };\n            }\n            decisions.push(decision);\n          }\n          const validated = validateFactoryRuleDecisions(decisions);\n          if (request.actor.type === 'human' && request.cause === 'board_drag' && fromStage !== request.stage) {\n            const message = stageTransitionMessage(fromStage, request.stage);\n            const skill = validated.find(decision => decision.type === 'invokeSkill');\n            if (skill) {\n              skill.precedingMessage = message;\n            } else {\n              validated.unshift({\n                type: 'sendMessage',\n                idempotencyKey: `factory-stage:${transitionId}`,\n                role: roleForStage(request.board, request.stage),\n                message,\n                priority: 'urgent',\n                idleBehavior: 'wake',\n                prepareBinding: true,\n              });\n            }\n          }\n          return {\n            outcome: 'accepted' as const,\n            decisions: validateFactoryRuleDecisions(validated) as unknown as Record<string, unknown>[],\n          };\n        })(),\n        this.#timeoutMs,\n      );\n    } catch (error) {\n      const failed =\n        error instanceof Error && error.message === 'FACTORY_RULE_TIMEOUT'\n          ? { code: 'timeout' as const, reason: 'Factory rule evaluation timed out.' }\n          : ruleFailure(error);\n      evaluation = { outcome: 'rejected', ...failed };\n    }\n    return this.#commit(request, transitionId, evaluation);\n  }\n\n  async #commitRejection(\n    request: FactoryTransitionRequest,\n    transitionId: string,\n    code: FactoryRuleRejectionCode,\n    reason: string,\n  ): Promise<FactoryTransitionResult> {\n    return this.#commit(request, transitionId, { outcome: 'rejected', code, reason });\n  }\n\n  async #commit(\n    request: FactoryTransitionRequest,\n    transitionId: string,\n    evaluation:\n      | { outcome: 'accepted'; decisions: Record<string, unknown>[] }\n      | { outcome: 'rejected'; code: string; reason: string },\n  ): Promise<FactoryTransitionResult> {\n    const committed = await this.#storage.commitTransition({\n      orgId: request.orgId,\n      factoryProjectId: request.factoryProjectId,\n      workItemId: request.workItemId,\n      expectedRevision: request.expectedRevision,\n      destinationStage: request.stage,\n      actorId: actorId(request.actor),\n      ingress: { identity: request.ingress.identity, triggerType: request.ingress.type, transitionId },\n      ruleSetVersion: this.#rules.version,\n      causalChain: [...(request.causalChain ?? [])],\n      evaluation,\n    });\n    if (committed.status === 'missing') {\n      return rejection(transitionId, request.workItemId, 'invalid_transition', 'Work item not found.');\n    }\n    return committed.result as unknown as FactoryTransitionResult;\n  }\n}\n"],"mappings":";;;;;AAsBA,MAAM,kBAAkB;AACxB,MAAM,uBAAuB;AAuB7B,SAAS,UACP,cACA,QACA,MACA,QACyB;CACzB,OAAO;EAAE,QAAQ;EAAY;EAAc;EAAQ;EAAM,QAAQ,OAAO,MAAM,GAAG,oBAAoB;CAAE;AACzG;AAEA,SAAS,QAAQ,OAAiC;CAChD,QAAQ,MAAM,MAAd;EACE,KAAK;EACL,KAAK,UACH,OAAO,MAAM;EACf,KAAK,SACH,OAAO,SAAS,MAAM;EACxB,KAAK,UACH,OAAO,UAAU,MAAM;CAC3B;AACF;AAEA,SAAS,aAAa,QAAyD;CAC7E,IAAI,OAAO,WAAW,GAAG,OAAO,KAAA;CAChC,MAAM,QAAQ,OAAO;CACrB,OAAO,oBAAoB,SAAS,KAAyB,IAAK,QAA6B,KAAA;AACjG;AAEA,SAAS,eAAe,QAAuC;CAC7D,IAAI,CAAC,QAAQ,OAAO;CACpB,IAAI,OAAO,kBAAkB,UAAU,OAAO;CAC9C,OAAO,OAAO,SAAS,iBAAkB,cAAyB;AACpE;AAEA,SAAS,aAAa,OAAyB,OAAiC;CAC9E,IAAI,UAAU,UAAU,OAAO;CAC/B,IAAI,UAAU,UAAU,OAAO;CAC/B,IAAI,UAAU,YAAY,OAAO;CACjC,OAAO;AACT;AAEA,SAAS,uBAAuB,WAA6B,SAAmC;CAC9F,OAAO,gCAAgC,UAAU,gBAAgB,QAAQ;AAC3E;AAEA,SAAS,YAAY,OAAoE;CACvF,OAAO;EACL,MAAM;EACN,QAAQ,iBAAiB,QAAQ,wBAAwB,MAAM,YAAY;CAC7E;AACF;AAEA,eAAe,gBAAmB,WAAuB,WAA+B;CACtF,IAAI;CACJ,MAAM,UAAU,IAAI,SAAgB,GAAG,WAAW;EAChD,QAAQ,iBAAiB,uBAAO,IAAI,MAAM,sBAAsB,CAAC,GAAG,SAAS;CAC/E,CAAC;CACD,IAAI;EACF,OAAO,MAAM,QAAQ,KAAK,CAAC,WAAW,OAAO,CAAC;CAChD,UAAU;EACR,IAAI,OAAO,aAAa,KAAK;CAC/B;AACF;AAEA,IAAa,2BAAb,MAAsC;CACpC;CACA;CACA;CAEA,YAAY,SAA0C;EACpD,KAAKA,SAAS,QAAQ;EACtB,KAAKC,WAAW,QAAQ;EACxB,KAAKC,aAAa,QAAQ,aAAa;CACzC;CAEA,IAAI,iBAAyB;EAC3B,OAAO,KAAKF,OAAO;CACrB;CAEA,MAAM,WAAW,SAAqE;EACpF,MAAM,SAAS,MAAM,KAAKC,SAAS,6BACjC,QAAQ,OACR,QAAQ,kBACR,QAAQ,QAAQ,QAClB;EACA,IAAI,QAAQ,OAAO;EAEnB,MAAM,eAAe,QAAQ,QAAQ,gBAAgB,WAAW;EAChE,MAAM,OAAO,MAAM,KAAKA,SAAS,IAAI;GAAE,OAAO,QAAQ;GAAO,IAAI,QAAQ;EAAW,CAAC;EACrF,IAAI,CAAC,MACH,OAAO,KAAKE,iBAAiB,SAAS,cAAc,sBAAsB,sBAAsB;EAGlG,IAAI,QAAQ,eAAe,QAAQ,YAAY,SAAA,GAC7C,OAAO,KAAKA,iBACV,SACA,cACA,yBACA,qCACF;EAEF,MAAM,aAAa,eAAe,KAAK,cAAc;EACrD,MAAM,SAAS,6BAA6B,UAAU;EACtD,IAAK,QAAQ,UAAU,cAAe,WAAW,gBAC/C,OAAO,KAAKA,iBACV,SACA,cACA,sBACA,uDACF;EAEF,MAAM,YAAY,aAAa,KAAK,MAAM;EAC1C,IAAI,CAAC,WACH,OAAO,KAAKA,iBACV,SACA,cACA,sBACA,0DACF;EAGF,MAAM,cAAc;GAClB,QAAQ;IAAE,OAAO,QAAQ;IAAO,WAAW,QAAQ;GAAiB;GACpE,OAAO,QAAQ;GACf,SAAS;IAAE,MAAM,QAAQ,QAAQ;IAAM,IAAI,QAAQ,QAAQ;GAAS;GACpE,OAAO,QAAQ;GACf,aAAa,QAAQ,eAAe,CAAC;GACrC,gBAAgB,KAAKH,OAAO;GAC5B,MAAM;IACJ,IAAI,KAAK;IACT,QAAQ;IACR,WAAW,KAAK,iBACZ,GAAG,KAAK,eAAe,cAAc,GAAG,KAAK,eAAe,KAAK,GAAG,KAAK,eAAe,eACxF;IACJ,kBAAkB,KAAK;IACvB,OAAO,KAAK;IACZ,KAAK,KAAK,gBAAgB,OAAO;IACjC,QAAQ,CAAC,GAAG,KAAK,MAAM;GACzB;GACA,OAAO,QAAQ;GACf,cAAc,KAAK;GACnB;GACA;GACA,SAAS,QAAQ;EACnB;EAEA,IAAI;EAGJ,IAAI;GACF,aAAa,MAAM,iBAChB,YAAY;IACX,MAAM,YAAqC,CAAC;IAC5C,KAAK,MAAM,QAAQ,yBAAyB,KAAKA,QAAQ;KACvD,OAAO,QAAQ;KACf;KACA;KACA,SAAS,QAAQ;KACjB,cAAc,QAAQ;IACxB,CAAC,GAAG;KACF,MAAM,UAAmC,OAAO,OAAO;MACrD,GAAG;MACH,OAAO,KAAK,UAAU,SAAS,YAAY,QAAQ;KACrD,CAAC;KACD,MAAM,MAAM,MAAM,KAAK,QAAQ,OAAO;KACtC,IAAI,QAAQ,KAAA,GAAW;KACvB,MAAM,WAAW,4BAA4B,KAAK,QAAQ,YAAY,MAAM;KAC5E,IAAI,SAAS,SAAS,UACpB,OAAO;MAAE,SAAS;MAAqB,MAAM,SAAS;MAAM,QAAQ,SAAS;KAAO;KAEtF,UAAU,KAAK,QAAQ;IACzB;IACA,MAAM,YAAY,6BAA6B,SAAS;IACxD,IAAI,QAAQ,MAAM,SAAS,WAAW,QAAQ,UAAU,gBAAgB,cAAc,QAAQ,OAAO;KACnG,MAAM,UAAU,uBAAuB,WAAW,QAAQ,KAAK;KAC/D,MAAM,QAAQ,UAAU,MAAK,aAAY,SAAS,SAAS,aAAa;KACxE,IAAI,OACF,MAAM,mBAAmB;UAEzB,UAAU,QAAQ;MAChB,MAAM;MACN,gBAAgB,iBAAiB;MACjC,MAAM,aAAa,QAAQ,OAAO,QAAQ,KAAK;MAC/C;MACA,UAAU;MACV,cAAc;MACd,gBAAgB;KAClB,CAAC;IAEL;IACA,OAAO;KACL,SAAS;KACT,WAAW,6BAA6B,SAAS;IACnD;GACF,EAAA,CAAG,GACH,KAAKE,UACP;EACF,SAAS,OAAO;GAKd,aAAa;IAAE,SAAS;IAAY,GAHlC,iBAAiB,SAAS,MAAM,YAAY,yBACxC;KAAE,MAAM;KAAoB,QAAQ;IAAqC,IACzE,YAAY,KAAK;GACuB;EAChD;EACA,OAAO,KAAKE,QAAQ,SAAS,cAAc,UAAU;CACvD;CAEA,MAAMD,iBACJ,SACA,cACA,MACA,QACkC;EAClC,OAAO,KAAKC,QAAQ,SAAS,cAAc;GAAE,SAAS;GAAY;GAAM;EAAO,CAAC;CAClF;CAEA,MAAMA,QACJ,SACA,cACA,YAGkC;EAClC,MAAM,YAAY,MAAM,KAAKH,SAAS,iBAAiB;GACrD,OAAO,QAAQ;GACf,kBAAkB,QAAQ;GAC1B,YAAY,QAAQ;GACpB,kBAAkB,QAAQ;GAC1B,kBAAkB,QAAQ;GAC1B,SAAS,QAAQ,QAAQ,KAAK;GAC9B,SAAS;IAAE,UAAU,QAAQ,QAAQ;IAAU,aAAa,QAAQ,QAAQ;IAAM;GAAa;GAC/F,gBAAgB,KAAKD,OAAO;GAC5B,aAAa,CAAC,GAAI,QAAQ,eAAe,CAAC,CAAE;GAC5C;EACF,CAAC;EACD,IAAI,UAAU,WAAW,WACvB,OAAO,UAAU,cAAc,QAAQ,YAAY,sBAAsB,sBAAsB;EAEjG,OAAO,UAAU;CACnB;AACF"}
+{"version":3,"file":"transition-service.js","names":["#rules","#storage","#timeoutMs","#onTerminalStage","#terminalCleanupTimeoutMs","#commitRejection","#commit"],"sources":["../../src/rules/transition-service.ts"],"sourcesContent":["import { randomUUID } from 'node:crypto';\n\nimport type { ExternalWorkItemSource, WorkItemsStorage } from '../storage/domains/work-items/base.js';\nimport { resolveFactoryStageRules } from './resolve.js';\nimport type {\n  FactoryCommitDecision,\n  FactoryRuleActor,\n  FactoryRuleBoard,\n  FactoryRuleCausalEntry,\n  FactoryRuleRejectionCode,\n  FactoryRuleStage,\n  FactoryRules,\n  FactoryStageRuleContext,\n  FactoryTransitionResult,\n} from './types.js';\nimport { FACTORY_RULE_STAGES, factoryRuleSourceForWorkItem } from './types.js';\nimport {\n  MAX_FACTORY_RULE_CAUSAL_DEPTH,\n  validateFactoryRuleDecision,\n  validateFactoryRuleDecisions,\n} from './validation.js';\n\nconst RULE_TIMEOUT_MS = 5_000;\nconst MAX_REJECTION_REASON = 512;\nconst TERMINAL_STAGES: ReadonlySet<FactoryRuleStage> = new Set(['done', 'canceled']);\n/** Longest a committed transition waits for terminal resource cleanup. Cleanup\n * reattaches remote sandboxes, so a hung provider call must not leave the\n * already-committed transition request pending; past this bound the cleanup\n * keeps running in the background as pure best-effort. */\nconst TERMINAL_CLEANUP_TIMEOUT_MS = 30_000;\n\nexport interface FactoryTransitionRequest {\n  orgId: string;\n  factoryProjectId: string;\n  workItemId: string;\n  board: FactoryRuleBoard;\n  stage: FactoryRuleStage;\n  expectedRevision: number;\n  actor: FactoryRuleActor;\n  ingress: { type: 'human' | 'agent' | 'toolResult' | 'github' | 'rule'; identity: string; transitionId?: string };\n  cause: string;\n  causalChain?: readonly FactoryRuleCausalEntry[];\n  /** Internal materialization path: evaluate only the destination onEnter leaf even when already at that stage. */\n  initialEntry?: boolean;\n}\n\nexport interface FactoryTransitionServiceOptions {\n  rules: FactoryRules;\n  storage: WorkItemsStorage;\n  timeoutMs?: number;\n  /**\n   * Called after a transition commits into a terminal stage (`done` /\n   * `canceled`) — the point where the item's sessions stop receiving runs, so\n   * resources they hold (e.g. sandboxes) can be released for reuse. Awaited,\n   * but failures are swallowed: releasing resources must never break or roll\n   * back the committed transition.\n   */\n  onTerminalStage?: (args: {\n    orgId: string;\n    factoryProjectId: string;\n    workItemId: string;\n    stage: FactoryRuleStage;\n  }) => Promise<void> | void;\n  /** Upper bound on how long a committed transition waits for\n   * `onTerminalStage` before returning (default 30s). The cleanup continues\n   * in the background past the bound. */\n  terminalCleanupTimeoutMs?: number;\n}\n\nfunction rejection(\n  transitionId: string,\n  itemId: string,\n  code: FactoryRuleRejectionCode,\n  reason: string,\n): FactoryTransitionResult {\n  return { status: 'rejected', transitionId, itemId, code, reason: reason.slice(0, MAX_REJECTION_REASON) };\n}\n\nfunction actorId(actor: FactoryRuleActor): string {\n  switch (actor.type) {\n    case 'human':\n    case 'system':\n      return actor.id;\n    case 'agent':\n      return `agent:${actor.bindingId}`;\n    case 'github':\n      return `github:${actor.login}`;\n  }\n}\n\nfunction currentStage(stages: readonly string[]): FactoryRuleStage | undefined {\n  if (stages.length !== 1) return undefined;\n  const stage = stages[0];\n  return FACTORY_RULE_STAGES.includes(stage as FactoryRuleStage) ? (stage as FactoryRuleStage) : undefined;\n}\n\nfunction workItemSource(source: ExternalWorkItemSource | null) {\n  if (!source) return 'manual' as const;\n  if (source.integrationId === 'linear') return 'linear-issue' as const;\n  return source.type === 'pull-request' ? ('github-pr' as const) : ('github-issue' as const);\n}\n\nfunction roleForStage(board: FactoryRuleBoard, stage: FactoryRuleStage): string {\n  if (board === 'review') return 'review';\n  if (stage === 'triage') return 'triage';\n  if (stage === 'planning') return 'plan';\n  return 'work';\n}\n\nfunction stageTransitionMessage(fromStage: FactoryRuleStage, toStage: FactoryRuleStage): string {\n  return `This work was moved from the ${fromStage} stage to the ${toStage} stage.`;\n}\n\nfunction ruleFailure(error: unknown): { code: FactoryRuleRejectionCode; reason: string } {\n  return {\n    code: 'rule_error',\n    reason: error instanceof Error ? `Factory rule failed: ${error.message}` : 'Factory rule failed.',\n  };\n}\n\nasync function withRuleTimeout<T>(operation: Promise<T>, timeoutMs: number): Promise<T> {\n  let timer: ReturnType<typeof setTimeout> | undefined;\n  const timeout = new Promise<never>((_, reject) => {\n    timer = setTimeout(() => reject(new Error('FACTORY_RULE_TIMEOUT')), timeoutMs);\n  });\n  try {\n    return await Promise.race([operation, timeout]);\n  } finally {\n    if (timer) clearTimeout(timer);\n  }\n}\n\nexport class FactoryTransitionService {\n  readonly #rules: FactoryRules;\n  readonly #storage: WorkItemsStorage;\n  readonly #timeoutMs: number;\n  readonly #onTerminalStage: FactoryTransitionServiceOptions['onTerminalStage'];\n  readonly #terminalCleanupTimeoutMs: number;\n\n  constructor(options: FactoryTransitionServiceOptions) {\n    this.#rules = options.rules;\n    this.#storage = options.storage;\n    this.#timeoutMs = options.timeoutMs ?? RULE_TIMEOUT_MS;\n    this.#onTerminalStage = options.onTerminalStage;\n    this.#terminalCleanupTimeoutMs = options.terminalCleanupTimeoutMs ?? TERMINAL_CLEANUP_TIMEOUT_MS;\n  }\n\n  get ruleSetVersion(): string {\n    return this.#rules.version;\n  }\n\n  async transition(request: FactoryTransitionRequest): Promise<FactoryTransitionResult> {\n    const replay = await this.#storage.getTransitionResultByIngress(\n      request.orgId,\n      request.factoryProjectId,\n      request.ingress.identity,\n    );\n    if (replay) return replay as unknown as FactoryTransitionResult;\n\n    const transitionId = request.ingress.transitionId ?? randomUUID();\n    const item = await this.#storage.get({ orgId: request.orgId, id: request.workItemId });\n    if (!item) {\n      return this.#commitRejection(request, transitionId, 'invalid_transition', 'Work item not found.');\n    }\n\n    if (request.causalChain && request.causalChain.length > MAX_FACTORY_RULE_CAUSAL_DEPTH) {\n      return this.#commitRejection(\n        request,\n        transitionId,\n        'causal_depth_exceeded',\n        'Factory rule causal depth exceeded.',\n      );\n    }\n    const itemSource = workItemSource(item.externalSource);\n    const source = factoryRuleSourceForWorkItem(itemSource);\n    if ((request.board === 'review') !== (source === 'pullRequest')) {\n      return this.#commitRejection(\n        request,\n        transitionId,\n        'invalid_transition',\n        'The work item does not belong to the requested board.',\n      );\n    }\n    const fromStage = currentStage(item.stages);\n    if (!fromStage) {\n      return this.#commitRejection(\n        request,\n        transitionId,\n        'invalid_transition',\n        'The work item does not have one canonical Factory stage.',\n      );\n    }\n\n    const contextBase = {\n      tenant: { orgId: request.orgId, projectId: request.factoryProjectId },\n      actor: request.actor,\n      ingress: { type: request.ingress.type, id: request.ingress.identity },\n      cause: request.cause,\n      causalChain: request.causalChain ?? [],\n      ruleSetVersion: this.#rules.version,\n      item: {\n        id: item.id,\n        source: itemSource,\n        sourceKey: item.externalSource\n          ? `${item.externalSource.integrationId}:${item.externalSource.type}:${item.externalSource.externalId}`\n          : null,\n        parentWorkItemId: item.parentWorkItemId,\n        title: item.title,\n        url: item.externalSource?.url ?? null,\n        stages: [...item.stages],\n      },\n      board: request.board,\n      itemRevision: item.revision,\n      source,\n      fromStage,\n      toStage: request.stage,\n    } satisfies Omit<FactoryStageRuleContext, 'stage'>;\n\n    let evaluation:\n      | { outcome: 'accepted'; decisions: Record<string, unknown>[] }\n      | { outcome: 'rejected'; code: string; reason: string };\n    try {\n      evaluation = await withRuleTimeout(\n        (async () => {\n          const decisions: FactoryCommitDecision[] = [];\n          for (const rule of resolveFactoryStageRules(this.#rules, {\n            board: request.board,\n            source,\n            fromStage,\n            toStage: request.stage,\n            initialEntry: request.initialEntry,\n          })) {\n            const context: FactoryStageRuleContext = Object.freeze({\n              ...contextBase,\n              stage: rule.phase === 'exit' ? fromStage : request.stage,\n            });\n            const raw = await rule.handler(context);\n            if (raw === undefined) continue;\n            const decision = validateFactoryRuleDecision(raw, context.causalChain.length);\n            if (decision.type === 'reject') {\n              return { outcome: 'rejected' as const, code: decision.code, reason: decision.reason };\n            }\n            decisions.push(decision);\n          }\n          const validated = validateFactoryRuleDecisions(decisions);\n          if (request.actor.type === 'human' && request.cause === 'board_drag' && fromStage !== request.stage) {\n            const message = stageTransitionMessage(fromStage, request.stage);\n            const skill = validated.find(decision => decision.type === 'invokeSkill');\n            if (skill) {\n              skill.precedingMessage = message;\n            } else {\n              validated.unshift({\n                type: 'sendMessage',\n                idempotencyKey: `factory-stage:${transitionId}`,\n                role: roleForStage(request.board, request.stage),\n                message,\n                priority: 'urgent',\n                idleBehavior: 'wake',\n                prepareBinding: true,\n              });\n            }\n          }\n          return {\n            outcome: 'accepted' as const,\n            decisions: validateFactoryRuleDecisions(validated) as unknown as Record<string, unknown>[],\n          };\n        })(),\n        this.#timeoutMs,\n      );\n    } catch (error) {\n      const failed =\n        error instanceof Error && error.message === 'FACTORY_RULE_TIMEOUT'\n          ? { code: 'timeout' as const, reason: 'Factory rule evaluation timed out.' }\n          : ruleFailure(error);\n      evaluation = { outcome: 'rejected', ...failed };\n    }\n    return this.#commit(request, transitionId, evaluation);\n  }\n\n  async #commitRejection(\n    request: FactoryTransitionRequest,\n    transitionId: string,\n    code: FactoryRuleRejectionCode,\n    reason: string,\n  ): Promise<FactoryTransitionResult> {\n    return this.#commit(request, transitionId, { outcome: 'rejected', code, reason });\n  }\n\n  async #commit(\n    request: FactoryTransitionRequest,\n    transitionId: string,\n    evaluation:\n      | { outcome: 'accepted'; decisions: Record<string, unknown>[] }\n      | { outcome: 'rejected'; code: string; reason: string },\n  ): Promise<FactoryTransitionResult> {\n    const committed = await this.#storage.commitTransition({\n      orgId: request.orgId,\n      factoryProjectId: request.factoryProjectId,\n      workItemId: request.workItemId,\n      expectedRevision: request.expectedRevision,\n      destinationStage: request.stage,\n      actorId: actorId(request.actor),\n      ingress: { identity: request.ingress.identity, triggerType: request.ingress.type, transitionId },\n      ruleSetVersion: this.#rules.version,\n      causalChain: [...(request.causalChain ?? [])],\n      evaluation,\n    });\n    if (committed.status === 'missing') {\n      return rejection(transitionId, request.workItemId, 'invalid_transition', 'Work item not found.');\n    }\n    const result = committed.result as unknown as FactoryTransitionResult;\n    if (this.#onTerminalStage && result.status === 'accepted' && TERMINAL_STAGES.has(result.stage)) {\n      let timer: ReturnType<typeof setTimeout> | undefined;\n      try {\n        const cleanup = Promise.resolve(\n          this.#onTerminalStage({\n            orgId: request.orgId,\n            factoryProjectId: request.factoryProjectId,\n            workItemId: request.workItemId,\n            stage: result.stage,\n          }),\n        );\n        // A late rejection after the timeout wins the race must not surface\n        // as an unhandled rejection.\n        cleanup.catch(() => {});\n        await Promise.race([\n          cleanup,\n          new Promise<void>(resolve => {\n            timer = setTimeout(resolve, this.#terminalCleanupTimeoutMs);\n          }),\n        ]);\n      } catch {\n        // Resource release is best-effort — never fail a committed transition.\n      } finally {\n        clearTimeout(timer);\n      }\n    }\n    return result;\n  }\n}\n"],"mappings":";;;;;AAsBA,MAAM,kBAAkB;AACxB,MAAM,uBAAuB;AAC7B,MAAM,kCAAiD,IAAI,IAAI,CAAC,QAAQ,UAAU,CAAC;;;;;AAKnF,MAAM,8BAA8B;AAwCpC,SAAS,UACP,cACA,QACA,MACA,QACyB;CACzB,OAAO;EAAE,QAAQ;EAAY;EAAc;EAAQ;EAAM,QAAQ,OAAO,MAAM,GAAG,oBAAoB;CAAE;AACzG;AAEA,SAAS,QAAQ,OAAiC;CAChD,QAAQ,MAAM,MAAd;EACE,KAAK;EACL,KAAK,UACH,OAAO,MAAM;EACf,KAAK,SACH,OAAO,SAAS,MAAM;EACxB,KAAK,UACH,OAAO,UAAU,MAAM;CAC3B;AACF;AAEA,SAAS,aAAa,QAAyD;CAC7E,IAAI,OAAO,WAAW,GAAG,OAAO,KAAA;CAChC,MAAM,QAAQ,OAAO;CACrB,OAAO,oBAAoB,SAAS,KAAyB,IAAK,QAA6B,KAAA;AACjG;AAEA,SAAS,eAAe,QAAuC;CAC7D,IAAI,CAAC,QAAQ,OAAO;CACpB,IAAI,OAAO,kBAAkB,UAAU,OAAO;CAC9C,OAAO,OAAO,SAAS,iBAAkB,cAAyB;AACpE;AAEA,SAAS,aAAa,OAAyB,OAAiC;CAC9E,IAAI,UAAU,UAAU,OAAO;CAC/B,IAAI,UAAU,UAAU,OAAO;CAC/B,IAAI,UAAU,YAAY,OAAO;CACjC,OAAO;AACT;AAEA,SAAS,uBAAuB,WAA6B,SAAmC;CAC9F,OAAO,gCAAgC,UAAU,gBAAgB,QAAQ;AAC3E;AAEA,SAAS,YAAY,OAAoE;CACvF,OAAO;EACL,MAAM;EACN,QAAQ,iBAAiB,QAAQ,wBAAwB,MAAM,YAAY;CAC7E;AACF;AAEA,eAAe,gBAAmB,WAAuB,WAA+B;CACtF,IAAI;CACJ,MAAM,UAAU,IAAI,SAAgB,GAAG,WAAW;EAChD,QAAQ,iBAAiB,uBAAO,IAAI,MAAM,sBAAsB,CAAC,GAAG,SAAS;CAC/E,CAAC;CACD,IAAI;EACF,OAAO,MAAM,QAAQ,KAAK,CAAC,WAAW,OAAO,CAAC;CAChD,UAAU;EACR,IAAI,OAAO,aAAa,KAAK;CAC/B;AACF;AAEA,IAAa,2BAAb,MAAsC;CACpC;CACA;CACA;CACA;CACA;CAEA,YAAY,SAA0C;EACpD,KAAKA,SAAS,QAAQ;EACtB,KAAKC,WAAW,QAAQ;EACxB,KAAKC,aAAa,QAAQ,aAAa;EACvC,KAAKC,mBAAmB,QAAQ;EAChC,KAAKC,4BAA4B,QAAQ,4BAA4B;CACvE;CAEA,IAAI,iBAAyB;EAC3B,OAAO,KAAKJ,OAAO;CACrB;CAEA,MAAM,WAAW,SAAqE;EACpF,MAAM,SAAS,MAAM,KAAKC,SAAS,6BACjC,QAAQ,OACR,QAAQ,kBACR,QAAQ,QAAQ,QAClB;EACA,IAAI,QAAQ,OAAO;EAEnB,MAAM,eAAe,QAAQ,QAAQ,gBAAgB,WAAW;EAChE,MAAM,OAAO,MAAM,KAAKA,SAAS,IAAI;GAAE,OAAO,QAAQ;GAAO,IAAI,QAAQ;EAAW,CAAC;EACrF,IAAI,CAAC,MACH,OAAO,KAAKI,iBAAiB,SAAS,cAAc,sBAAsB,sBAAsB;EAGlG,IAAI,QAAQ,eAAe,QAAQ,YAAY,SAAA,GAC7C,OAAO,KAAKA,iBACV,SACA,cACA,yBACA,qCACF;EAEF,MAAM,aAAa,eAAe,KAAK,cAAc;EACrD,MAAM,SAAS,6BAA6B,UAAU;EACtD,IAAK,QAAQ,UAAU,cAAe,WAAW,gBAC/C,OAAO,KAAKA,iBACV,SACA,cACA,sBACA,uDACF;EAEF,MAAM,YAAY,aAAa,KAAK,MAAM;EAC1C,IAAI,CAAC,WACH,OAAO,KAAKA,iBACV,SACA,cACA,sBACA,0DACF;EAGF,MAAM,cAAc;GAClB,QAAQ;IAAE,OAAO,QAAQ;IAAO,WAAW,QAAQ;GAAiB;GACpE,OAAO,QAAQ;GACf,SAAS;IAAE,MAAM,QAAQ,QAAQ;IAAM,IAAI,QAAQ,QAAQ;GAAS;GACpE,OAAO,QAAQ;GACf,aAAa,QAAQ,eAAe,CAAC;GACrC,gBAAgB,KAAKL,OAAO;GAC5B,MAAM;IACJ,IAAI,KAAK;IACT,QAAQ;IACR,WAAW,KAAK,iBACZ,GAAG,KAAK,eAAe,cAAc,GAAG,KAAK,eAAe,KAAK,GAAG,KAAK,eAAe,eACxF;IACJ,kBAAkB,KAAK;IACvB,OAAO,KAAK;IACZ,KAAK,KAAK,gBAAgB,OAAO;IACjC,QAAQ,CAAC,GAAG,KAAK,MAAM;GACzB;GACA,OAAO,QAAQ;GACf,cAAc,KAAK;GACnB;GACA;GACA,SAAS,QAAQ;EACnB;EAEA,IAAI;EAGJ,IAAI;GACF,aAAa,MAAM,iBAChB,YAAY;IACX,MAAM,YAAqC,CAAC;IAC5C,KAAK,MAAM,QAAQ,yBAAyB,KAAKA,QAAQ;KACvD,OAAO,QAAQ;KACf;KACA;KACA,SAAS,QAAQ;KACjB,cAAc,QAAQ;IACxB,CAAC,GAAG;KACF,MAAM,UAAmC,OAAO,OAAO;MACrD,GAAG;MACH,OAAO,KAAK,UAAU,SAAS,YAAY,QAAQ;KACrD,CAAC;KACD,MAAM,MAAM,MAAM,KAAK,QAAQ,OAAO;KACtC,IAAI,QAAQ,KAAA,GAAW;KACvB,MAAM,WAAW,4BAA4B,KAAK,QAAQ,YAAY,MAAM;KAC5E,IAAI,SAAS,SAAS,UACpB,OAAO;MAAE,SAAS;MAAqB,MAAM,SAAS;MAAM,QAAQ,SAAS;KAAO;KAEtF,UAAU,KAAK,QAAQ;IACzB;IACA,MAAM,YAAY,6BAA6B,SAAS;IACxD,IAAI,QAAQ,MAAM,SAAS,WAAW,QAAQ,UAAU,gBAAgB,cAAc,QAAQ,OAAO;KACnG,MAAM,UAAU,uBAAuB,WAAW,QAAQ,KAAK;KAC/D,MAAM,QAAQ,UAAU,MAAK,aAAY,SAAS,SAAS,aAAa;KACxE,IAAI,OACF,MAAM,mBAAmB;UAEzB,UAAU,QAAQ;MAChB,MAAM;MACN,gBAAgB,iBAAiB;MACjC,MAAM,aAAa,QAAQ,OAAO,QAAQ,KAAK;MAC/C;MACA,UAAU;MACV,cAAc;MACd,gBAAgB;KAClB,CAAC;IAEL;IACA,OAAO;KACL,SAAS;KACT,WAAW,6BAA6B,SAAS;IACnD;GACF,EAAA,CAAG,GACH,KAAKE,UACP;EACF,SAAS,OAAO;GAKd,aAAa;IAAE,SAAS;IAAY,GAHlC,iBAAiB,SAAS,MAAM,YAAY,yBACxC;KAAE,MAAM;KAAoB,QAAQ;IAAqC,IACzE,YAAY,KAAK;GACuB;EAChD;EACA,OAAO,KAAKI,QAAQ,SAAS,cAAc,UAAU;CACvD;CAEA,MAAMD,iBACJ,SACA,cACA,MACA,QACkC;EAClC,OAAO,KAAKC,QAAQ,SAAS,cAAc;GAAE,SAAS;GAAY;GAAM;EAAO,CAAC;CAClF;CAEA,MAAMA,QACJ,SACA,cACA,YAGkC;EAClC,MAAM,YAAY,MAAM,KAAKL,SAAS,iBAAiB;GACrD,OAAO,QAAQ;GACf,kBAAkB,QAAQ;GAC1B,YAAY,QAAQ;GACpB,kBAAkB,QAAQ;GAC1B,kBAAkB,QAAQ;GAC1B,SAAS,QAAQ,QAAQ,KAAK;GAC9B,SAAS;IAAE,UAAU,QAAQ,QAAQ;IAAU,aAAa,QAAQ,QAAQ;IAAM;GAAa;GAC/F,gBAAgB,KAAKD,OAAO;GAC5B,aAAa,CAAC,GAAI,QAAQ,eAAe,CAAC,CAAE;GAC5C;EACF,CAAC;EACD,IAAI,UAAU,WAAW,WACvB,OAAO,UAAU,cAAc,QAAQ,YAAY,sBAAsB,sBAAsB;EAEjG,MAAM,SAAS,UAAU;EACzB,IAAI,KAAKG,oBAAoB,OAAO,WAAW,cAAc,gBAAgB,IAAI,OAAO,KAAK,GAAG;GAC9F,IAAI;GACJ,IAAI;IACF,MAAM,UAAU,QAAQ,QACtB,KAAKA,iBAAiB;KACpB,OAAO,QAAQ;KACf,kBAAkB,QAAQ;KAC1B,YAAY,QAAQ;KACpB,OAAO,OAAO;IAChB,CAAC,CACH;IAGA,QAAQ,YAAY,CAAC,CAAC;IACtB,MAAM,QAAQ,KAAK,CACjB,SACA,IAAI,SAAc,YAAW;KAC3B,QAAQ,WAAW,SAAS,KAAKC,yBAAyB;IAC5D,CAAC,CACH,CAAC;GACH,QAAQ,CAER,UAAU;IACR,aAAa,KAAK;GACpB;EACF;EACA,OAAO;CACT;AACF"}

package/dist/sandbox/fleet.d.ts

@@ -46,7 +46,11 @@ export interface MaterializationSandbox {
 export interface SandboxCreateOptions {
     /** Reattach to this existing provider VM instead of provisioning a new one. */
     providerSandboxId?: string;
-    /** Environment variables baked into the sandbox. */
+    /**
+     * Environment variables for commands run in the sandbox. Adapter-level
+     * only: merged into every `executeCommand`, never baked into the provider
+     * VM (see `SandboxFleet.#build`).
+     */
     env?: Record<string, string>;
     /** Provider working directory for this sandbox. */
     workingDirectory?: string;
@@ -188,6 +192,13 @@ export declare class SandboxFleet {
     /**
      * Provision a new sandbox (persisting its provider id on first open) or
      * reattach to the stored one. Returns a started, live sandbox.
+     *
+     * Concurrent calls for the same binding coalesce onto one in-flight
+     * provision/reattach and share its sandbox handle — N simultaneous requests
+     * for one cold session (e.g. several browser tabs polling right after boot)
+     * must not each fire their own `POST /sandbox` against the provider.
+     * Failures are not cached: once the shared attempt settles, the next call
+     * starts fresh.
      */
     ensureSandbox(store: SandboxBindingStore, onProgress?: ProgressFn): Promise<MaterializationSandbox>;
     ensureSandbox(store: SandboxBindingStore, env?: Record<string, string>, onProgress?: ProgressFn, options?: EnsureSandboxOptions): Promise<MaterializationSandbox>;

package/dist/sandbox/fleet.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"fleet.d.ts","sourceRoot":"","sources":["../../src/sandbox/fleet.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAIH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAE/D,gEAAgE;AAChE,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;GAGG;AACH,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,OAAO,IAAI,OAAO,CAAC;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAC,CAAC;IAC3D,cAAc,CACZ,OAAO,EAAE,MAAM,EACf,IAAI,CAAC,EAAE,MAAM,EAAE,EACf,OAAO,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAA;KAAE,GACvE,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACjC,0EAA0E;IAC1E,sBAAsB,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3D,8EAA8E;IAC9E,IAAI,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAED,yDAAyD;AACzD,MAAM,WAAW,oBAAoB;IACnC,+EAA+E;IAC/E,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,oDAAoD;IACpD,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,mDAAmD;IACnD,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,wFAAwF;IACxF,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,+EAA+E;IAC/E,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;;;;GAKG;AACH,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,aAAa,GAAG,cAAc,GAAG,qBAAqB,GAAG,SAAS,GAAG,SAAS,GAAG,YAAY,GAAG,MAAM,CAAC;IAC9G,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,8EAA8E;AAC9E,MAAM,MAAM,UAAU,GAAG,CAAC,KAAK,EAAE,eAAe,KAAK,IAAI,CAAC;AAE1D,2EAA2E;AAC3E,wBAAgB,cAAc,CAAC,UAAU,EAAE,UAAU,GAAG,SAAS,EAAE,KAAK,EAAE,eAAe,GAAG,IAAI,CAO/F;AAED;;;;GAIG;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,IAAI,EAAE,oBAAoB,KAAK,sBAAsB,CAAC;AAEpF,4EAA4E;AAC5E,qBAAa,kBAAmB,SAAQ,KAAK;IAE/B,QAAQ,CAAC,GAAG,EAAE,MAAM;IADhC,QAAQ,CAAC,IAAI,EAAG,yBAAyB,CAAU;gBAC9B,GAAG,EAAE,MAAM;CAOjC;AAED,+DAA+D;AAC/D,MAAM,WAAW,oBAAoB;IACnC,mDAAmD;IACnD,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,wEAAwE;IACxE,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,+EAA+E;IAC/E,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,mFAAmF;IACnF,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/C,uFAAuF;IACvF,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAyDD,0FAA0F;AAC1F,wBAAgB,4BAA4B,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,QAAQ,EAAE,MAAM,EAAE,GAAG,MAAM,CAKxF;AAED;;;;GAIG;AACH,MAAM,WAAW,kBAAkB;IACjC;;;;OAIG;IACH,OAAO,EAAE,gBAAgB,CAAC;IAC1B,2EAA2E;IAC3E,WAAW,EAAE,MAAM,CAAC;IACpB,4EAA4E;IAC5E,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;;;;GAKG;AACH,qBAAa,YAAY;;gBAKX,MAAM,CAAC,EAAE,kBAAkB;IAIvC;;;;OAIG;IACH,IAAI,OAAO,IAAI,OAAO,CAErB;IAED;;;;;OAKG;IACH,IAAI,QAAQ,IAAI,MAAM,CAErB;IAED;;;;;;;OAOG;IACH,IAAI,WAAW,IAAI,MAAM,CAIxB;IAED;;;;;OAKG;IACH,IAAI,YAAY,IAAI,MAAM,CAEzB;IAED;;;;OAIG;IACH,IAAI,SAAS,IAAI,MAAM,CAEtB;IAED,kEAAkE;IAClE,gBAAgB,CAAC,KAAK,SAAI,GAAG,IAAI;IAIjC,4CAA4C;IAC5C,UAAU,CAAC,OAAO,EAAE,cAAc,GAAG,IAAI;IAIzC,oDAAoD;IACpD,YAAY,IAAI,IAAI;IAIpB;;;;;;;OAOG;IACH,cAAc,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM;IAM5C;;;;OAIG;IACH,0BAA0B,CAAC,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM;IAyC3E;;;OAGG;IACG,aAAa,CAAC,KAAK,EAAE,mBAAmB,EAAE,UAAU,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC,sBAAsB,CAAC;IACnG,aAAa,CACjB,KAAK,EAAE,mBAAmB,EAC1B,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC5B,UAAU,CAAC,EAAE,UAAU,EACvB,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,sBAAsB,CAAC;IA+DlC;;;;;;;OAOG;IACG,eAAe,CAAC,KAAK,EAAE,mBAAmB,EAAE,OAAO,CAAC,EAAE,sBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC;IAclG;;;;;OAKG;IACG,eAAe,CACnB,iBAAiB,EAAE,MAAM,EACzB,OAAO,GAAE,oBAAyB,GACjC,OAAO,CAAC,sBAAsB,CAAC;CASnC"}
+{"version":3,"file":"fleet.d.ts","sourceRoot":"","sources":["../../src/sandbox/fleet.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAIH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAE/D,gEAAgE;AAChE,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;GAGG;AACH,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,OAAO,IAAI,OAAO,CAAC;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAC,CAAC;IAC3D,cAAc,CACZ,OAAO,EAAE,MAAM,EACf,IAAI,CAAC,EAAE,MAAM,EAAE,EACf,OAAO,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAA;KAAE,GACvE,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACjC,0EAA0E;IAC1E,sBAAsB,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3D,8EAA8E;IAC9E,IAAI,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAED,yDAAyD;AACzD,MAAM,WAAW,oBAAoB;IACnC,+EAA+E;IAC/E,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B;;;;OAIG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,mDAAmD;IACnD,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,wFAAwF;IACxF,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,+EAA+E;IAC/E,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;;;;GAKG;AACH,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,aAAa,GAAG,cAAc,GAAG,qBAAqB,GAAG,SAAS,GAAG,SAAS,GAAG,YAAY,GAAG,MAAM,CAAC;IAC9G,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,8EAA8E;AAC9E,MAAM,MAAM,UAAU,GAAG,CAAC,KAAK,EAAE,eAAe,KAAK,IAAI,CAAC;AAE1D,2EAA2E;AAC3E,wBAAgB,cAAc,CAAC,UAAU,EAAE,UAAU,GAAG,SAAS,EAAE,KAAK,EAAE,eAAe,GAAG,IAAI,CAO/F;AAED;;;;GAIG;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,IAAI,EAAE,oBAAoB,KAAK,sBAAsB,CAAC;AAEpF,4EAA4E;AAC5E,qBAAa,kBAAmB,SAAQ,KAAK;IAE/B,QAAQ,CAAC,GAAG,EAAE,MAAM;IADhC,QAAQ,CAAC,IAAI,EAAG,yBAAyB,CAAU;gBAC9B,GAAG,EAAE,MAAM;CAOjC;AAED,+DAA+D;AAC/D,MAAM,WAAW,oBAAoB;IACnC,mDAAmD;IACnD,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,wEAAwE;IACxE,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,+EAA+E;IAC/E,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,mFAAmF;IACnF,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/C,uFAAuF;IACvF,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAwED,0FAA0F;AAC1F,wBAAgB,4BAA4B,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,QAAQ,EAAE,MAAM,EAAE,GAAG,MAAM,CAKxF;AAED;;;;GAIG;AACH,MAAM,WAAW,kBAAkB;IACjC;;;;OAIG;IACH,OAAO,EAAE,gBAAgB,CAAC;IAC1B,2EAA2E;IAC3E,WAAW,EAAE,MAAM,CAAC;IACpB,4EAA4E;IAC5E,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;;;;GAKG;AACH,qBAAa,YAAY;;gBAOX,MAAM,CAAC,EAAE,kBAAkB;IAIvC;;;;OAIG;IACH,IAAI,OAAO,IAAI,OAAO,CAErB;IAED;;;;;OAKG;IACH,IAAI,QAAQ,IAAI,MAAM,CAErB;IAED;;;;;;;OAOG;IACH,IAAI,WAAW,IAAI,MAAM,CAIxB;IAED;;;;;OAKG;IACH,IAAI,YAAY,IAAI,MAAM,CAEzB;IAED;;;;OAIG;IACH,IAAI,SAAS,IAAI,MAAM,CAEtB;IAED,kEAAkE;IAClE,gBAAgB,CAAC,KAAK,SAAI,GAAG,IAAI;IAIjC,4CAA4C;IAC5C,UAAU,CAAC,OAAO,EAAE,cAAc,GAAG,IAAI;IAIzC,oDAAoD;IACpD,YAAY,IAAI,IAAI;IAIpB;;;;;;;OAOG;IACH,cAAc,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM;IAM5C;;;;OAIG;IACH,0BAA0B,CAAC,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM;IAgD3E;;;;;;;;;;OAUG;IACG,aAAa,CAAC,KAAK,EAAE,mBAAmB,EAAE,UAAU,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC,sBAAsB,CAAC;IACnG,aAAa,CACjB,KAAK,EAAE,mBAAmB,EAC1B,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC5B,UAAU,CAAC,EAAE,UAAU,EACvB,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,sBAAsB,CAAC;IAqFlC;;;;;;;OAOG;IACG,eAAe,CAAC,KAAK,EAAE,mBAAmB,EAAE,OAAO,CAAC,EAAE,sBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC;IAclG;;;;;OAKG;IACG,eAAe,CACnB,iBAAiB,EAAE,MAAM,EACzB,OAAO,GAAE,oBAAyB,GACjC,OAAO,CAAC,sBAAsB,CAAC;CASnC"}

package/dist/sandbox/fleet.js

@@ -36,6 +36,19 @@ var SandboxBudgetError = class extends Error {
 	}
 };
 /**
+* Stable identity for one binding's in-flight provision work, used to coalesce
+* concurrent `ensureSandbox` calls. Prefer `checkpointName` — it is a pure
+* function of the owning session and is set before the first provision, which
+* is exactly when the herd forms (the stored `sandboxId` is still null then).
+* Fall back to the stored provider id, and skip coalescing entirely for
+* bindings with neither: keying those on a shared constant would wrongly
+* funnel *different* bindings onto one sandbox.
+*/
+function coalesceKey(store) {
+	if (store.checkpointName) return `checkpoint:${store.checkpointName}`;
+	if (store.sandboxId) return `sandbox:${store.sandboxId}`;
+}
+/**
 * Adapt a cloned `WorkspaceSandbox` to the minimal surface this module needs.
 * Lifecycle goes through the `_`-prefixed wrappers when present (they add
 * status tracking and concurrency safety on `MastraSandbox` subclasses),
@@ -98,6 +111,8 @@ var SandboxFleet = class {
 	#config;
 	#factory;
 	#liveCount = 0;
+	/** In-flight `ensureSandbox` work, keyed per binding so concurrent callers coalesce. */
+	#inflight = /* @__PURE__ */ new Map();
 	constructor(config) {
 		this.#config = config;
 	}
@@ -191,6 +206,14 @@ var SandboxFleet = class {
 	* passed both as the logical `id` (providers that reattach by construction
 	* id, e.g. local) and as the provider-native `sandboxId` hint (Railway) so
 	* reattach works across the provider matrix.
+	*
+	* `env` is deliberately NOT forwarded to the provider clone: remote
+	* providers bake creation-time env into the VM for its whole lifetime
+	* (`POST /sandbox`), which would persist credentials like `GH_TOKEN` inside
+	* a VM that can outlive the session and be reused by another user via the
+	* sandbox pool. Instead the env lives only on the adapter, which merges it
+	* into every `executeCommand` — commands see the (refreshable) token, but
+	* the VM itself never stores it.
 	*/
 	#build(opts) {
 		if (this.#factory) return this.#factory(opts);
@@ -200,7 +223,6 @@ var SandboxFleet = class {
 				id: opts.providerSandboxId,
 				sandboxId: opts.providerSandboxId
 			} : {},
-			...opts.env ? { env: opts.env } : {},
 			...opts.workingDirectory ? { workingDirectory: opts.workingDirectory } : {},
 			...opts.idleTimeoutMinutes !== void 0 ? { idleTimeoutMinutes: opts.idleTimeoutMinutes } : {},
 			...opts.checkpointName ? { checkpointName: opts.checkpointName } : {}
@@ -210,6 +232,18 @@ var SandboxFleet = class {
 		const env = typeof envOrProgress === "function" ? void 0 : envOrProgress;
 		const onProgress = typeof envOrProgress === "function" ? envOrProgress : progressOrOptions;
 		const options = typeof envOrProgress === "function" ? progressOrOptions ?? {} : maybeOptions;
+		const key = coalesceKey(store);
+		if (!key) return this.#ensureSandboxUncoalesced(store, env, onProgress, options);
+		const existing = this.#inflight.get(key);
+		if (existing) return existing;
+		const promise = this.#ensureSandboxUncoalesced(store, env, onProgress, options).finally(() => {
+			if (this.#inflight.get(key) === promise) this.#inflight.delete(key);
+		});
+		this.#inflight.set(key, promise);
+		return promise;
+	}
+	/** The single provision/reattach attempt behind {@link ensureSandbox}. */
+	async #ensureSandboxUncoalesced(store, env, onProgress, options) {
 		const idleTimeoutMinutes = this.idleMinutes;
 		const checkpointName = store.checkpointName;
 		if (store.sandboxId) {