@mastra/factory 0.24.0-alpha.1 → 0.24.0-alpha.11

package/dist/rules/processor.js.map

@@ -1 +1 @@
-{"version":3,"file":"processor.js","names":[],"sources":["../../src/rules/processor.ts"],"sourcesContent":["import { resolveRequestThinkingLevel } from '@mastra/code-sdk/agents/model';\nimport type { ThinkingLevel } from '@mastra/code-sdk/providers/openai-codex';\nimport type { MastraCodeState } from '@mastra/code-sdk/schema';\nimport type { MastraDBMessage, MessageList } from '@mastra/core/agent/message-list';\nimport type { AgentControllerRequestContext } from '@mastra/core/agent-controller';\nimport type {\n  ComputeStateSignalArgs,\n  ComputeStateSignalResult,\n  ProcessInputArgs,\n  ProcessInputStepArgs,\n  Processor,\n} from '@mastra/core/processors';\n\nimport { boardForWorkItem, resolveBoardToolRule, workItemPhaseSemantics } from '../boards/index.js';\nimport type { BoardRegistry } from '../boards/index.js';\nimport type { FactoryRunBindingRecord, WorkItemsStorage, WorkItemRow } from '../storage/domains/work-items/base.js';\nimport { findSessionRunBinding, getFactorySessionCoordinates } from './binding-context.js';\nimport type { FactoryTransitionService } from './transition-service.js';\nimport { workItemSource } from './types.js';\nimport type {\n  FactoryCommitDecision,\n  FactoryRuleDecision,\n  FactoryRuleJsonValue,\n  FactoryRuleStage,\n  FactoryToolResultRuleContext,\n} from './types.js';\nimport {\n  assertFactoryDecisionTarget,\n  normalizeFactoryRuleJsonValue,\n  validateFactoryRuleDecisions,\n} from './validation.js';\n\nconst STATE_ID = 'factory-phase';\nconst RULE_TIMEOUT_MS = 5_000;\nconst TRANSCRIPT_PAGE_SIZE = 50;\nconst MAX_LINKED_ITEMS = 5;\nfunction ruleStage(boards: BoardRegistry, item: WorkItemRow | null | undefined): string | undefined {\n  return item && workItemPhaseSemantics(boards, item) ? item.stages[0] : undefined;\n}\n\nfunction itemInRuleStage(boards: BoardRegistry, item: WorkItemRow | null | undefined): item is WorkItemRow {\n  return ruleStage(boards, item) !== undefined;\n}\n\ntype PersistedMessageReader = {\n  listMessages(input: {\n    threadId: string;\n    resourceId?: string;\n    page: number;\n    perPage: number;\n    filter?: { dateRange?: { start?: Date } };\n    orderBy: { field: 'createdAt'; direction: 'ASC' };\n  }): Promise<{ messages: MastraDBMessage[]; hasMore: boolean }>;\n};\n\ntype CompletedToolResult = {\n  assistantMessageId: string;\n  messageCreatedAt: Date;\n  toolCallId: string;\n  toolName: string;\n  input: FactoryRuleJsonValue;\n  status: 'success' | 'error';\n  value: FactoryRuleJsonValue;\n};\n\nfunction isApprovedPlanResult(result: CompletedToolResult): boolean {\n  if (result.toolName !== 'submit_plan' || result.status !== 'success') return false;\n  if (typeof result.value === 'string') return result.value.startsWith('Plan approved.');\n  if (!result.value || typeof result.value !== 'object' || Array.isArray(result.value)) return false;\n  const content = result.value.content;\n  return typeof content === 'string' && content.startsWith('Plan approved.');\n}\n\ntype RuntimeSnapshot = {\n  modelId: string;\n  thinkingLevel: ThinkingLevel;\n};\n\ntype ActivePhaseSnapshotBase = {\n  bindingId: string;\n  itemId: string;\n  revision: number;\n  stage: FactoryRuleStage;\n  role: string;\n  configVersion: string;\n  status: 'active';\n};\n\ntype ActivePhaseSnapshotValue = ActivePhaseSnapshotBase & {\n  board: string;\n  modelId?: string;\n  thinkingLevel?: ThinkingLevel;\n};\n\ntype PhaseSnapshotValue = ActivePhaseSnapshotValue | { bindingId?: string; status: 'none' };\n\nfunction reviewRuntimeFromRequestContext(\n  requestContext: ComputeStateSignalArgs['requestContext'],\n  factoryThinkingLevel: ThinkingLevel | undefined,\n): RuntimeSnapshot {\n  if (!requestContext || typeof requestContext.get !== 'function') {\n    throw new Error('Factory review phase requires a controller request context.');\n  }\n  const context = requestContext.get<'controller', AgentControllerRequestContext<MastraCodeState>>('controller');\n  const modelId = context?.session?.modelId.trim();\n  if (!modelId) {\n    throw new Error('Factory review phase requires a selected session model.');\n  }\n  return {\n    modelId,\n    thinkingLevel: resolveRequestThinkingLevel({ state: context?.state }, undefined, factoryThinkingLevel),\n  };\n}\n\nfunction workItemSourceKey(item: WorkItemRow): string | null {\n  const source = item.externalSource;\n  return source ? `${source.integrationId}:${source.type}:${source.externalId}` : null;\n}\n\nfunction boundedError(value: unknown): FactoryRuleJsonValue {\n  const message = value instanceof Error ? value.message : typeof value === 'string' ? value : 'Tool execution failed.';\n  return { message: message.slice(0, 2_000) };\n}\n\nfunction boundedResult(value: unknown): FactoryRuleJsonValue {\n  try {\n    return normalizeFactoryRuleJsonValue(value);\n  } catch {\n    return { message: 'Tool result was not serializable.' };\n  }\n}\n\nfunction messageParts(message: MastraDBMessage): unknown[] {\n  const content = message.content as { parts?: unknown[]; toolInvocations?: unknown[] } | unknown[] | undefined;\n  if (Array.isArray(content)) return content;\n  if (Array.isArray(content?.parts)) return content.parts;\n  return Array.isArray(content?.toolInvocations) ? content.toolInvocations : [];\n}\n\nfunction completedStepToolCallIds(steps: unknown[]): Set<string> {\n  const ids = new Set<string>();\n  for (const rawStep of steps) {\n    if (!rawStep || typeof rawStep !== 'object') continue;\n    const toolResults = (rawStep as { toolResults?: unknown[] }).toolResults;\n    if (!Array.isArray(toolResults)) continue;\n    for (const rawResult of toolResults) {\n      if (!rawResult || typeof rawResult !== 'object') continue;\n      const toolCallId = (rawResult as { toolCallId?: unknown }).toolCallId;\n      if (typeof toolCallId === 'string') ids.add(toolCallId);\n    }\n  }\n  return ids;\n}\n\nfunction completedToolResults(message: MastraDBMessage): CompletedToolResult[] {\n  if (message.role !== 'assistant') return [];\n  const createdAt = message.createdAt instanceof Date ? message.createdAt : new Date(message.createdAt);\n  const completed: CompletedToolResult[] = [];\n  for (const rawPart of messageParts(message)) {\n    if (!rawPart || typeof rawPart !== 'object') continue;\n    const part = rawPart as Record<string, unknown>;\n    const invocation =\n      part.type === 'tool-invocation' && part.toolInvocation && typeof part.toolInvocation === 'object'\n        ? (part.toolInvocation as Record<string, unknown>)\n        : part;\n    const state = invocation.state;\n    if (state !== 'result' && state !== 'error') continue;\n    const toolCallId = invocation.toolCallId;\n    const toolName = invocation.toolName ?? invocation.name;\n    if (typeof toolCallId !== 'string' || typeof toolName !== 'string') continue;\n    completed.push({\n      assistantMessageId: message.id,\n      messageCreatedAt: createdAt,\n      toolCallId,\n      toolName: toolName.slice(0, 256),\n      input: boundedResult(invocation.args ?? {}),\n      status: state === 'error' ? 'error' : 'success',\n      value: state === 'error' ? boundedError(invocation.result ?? invocation.error) : boundedResult(invocation.result),\n    });\n  }\n  return completed;\n}\n\nfunction currentCompletedToolMessage(\n  messages: MastraDBMessage[],\n  toolCallIds: ReadonlySet<string>,\n): MastraDBMessage | undefined {\n  for (let index = messages.length - 1; index >= 0; index -= 1) {\n    const message = messages[index]!;\n    if (completedToolResults(message).some(result => toolCallIds.has(result.toolCallId))) return message;\n  }\n  return undefined;\n}\n\nasync function phaseCacheKey(value: ActivePhaseSnapshotValue, linked: WorkItemRow[]): Promise<string> {\n  const serialized = JSON.stringify({\n    ...value,\n    linked: linked.map(item => [item.id, item.revision, item.stages[0]]),\n  });\n  return Buffer.from(await globalThis.crypto.subtle.digest('SHA-256', new TextEncoder().encode(serialized))).toString(\n    'hex',\n  );\n}\n\nfunction escapeText(value: string): string {\n  return value.replaceAll('&', '&amp;').replaceAll('<', '&lt;').replaceAll('>', '&gt;');\n}\n\nfunction phaseFromSignal(signal: { metadata?: Record<string, unknown> } | undefined): PhaseSnapshotValue | undefined {\n  return (signal?.metadata?.value as { phase?: PhaseSnapshotValue } | undefined)?.phase;\n}\n\nfunction latestPhase(args: ComputeStateSignalArgs): PhaseSnapshotValue | undefined {\n  for (const signal of [...args.activeStateSignals].reverse()) {\n    const phase = phaseFromSignal(signal);\n    if (phase) return phase;\n  }\n  return phaseFromSignal(args.lastSnapshot);\n}\n\nasync function withRuleTimeout<T>(operation: Promise<T>): Promise<T> {\n  let timer: ReturnType<typeof setTimeout> | undefined;\n  try {\n    return await Promise.race([\n      operation,\n      new Promise<never>((_, reject) => {\n        timer = setTimeout(() => reject(new Error('FACTORY_RULE_TIMEOUT')), RULE_TIMEOUT_MS);\n      }),\n    ]);\n  } finally {\n    if (timer) clearTimeout(timer);\n  }\n}\n\nconst reportedUnavailableMemorySettings = new WeakSet<object>();\n\n/**\n * Marks this run's Factory memory settings as unavailable so memory falls back\n * to auto, and tells the thread once per request that saved choices were not\n * applied. The reserved request-context key keeps clients from spoofing it.\n */\nexport function reportMemorySettingsUnavailable(\n  requestContext: NonNullable<ProcessInputArgs['requestContext']>,\n  reason: string,\n): void {\n  requestContext.set('mastra__factoryMemorySettings', { status: 'unavailable', reason });\n  console.warn('[Factory Memory Settings] Failed to load settings for run', { error: reason });\n  if (reportedUnavailableMemorySettings.has(requestContext)) return;\n  reportedUnavailableMemorySettings.add(requestContext);\n  const controller = requestContext.get('controller') as\n    | Pick<AgentControllerRequestContext<MastraCodeState>, 'emitEvent'>\n    | undefined;\n  controller?.emitEvent?.({\n    type: 'error',\n    error: new Error(\n      'Memory settings could not be loaded for this run, so observational memory is using Auto models and default thresholds.',\n    ),\n    errorType: 'factory_memory_settings_unavailable',\n    retryable: false,\n  });\n}\n\nexport class FactoryPhaseStateProcessor implements Processor<'factory-phase'> {\n  readonly id = STATE_ID;\n  readonly stateId = STATE_ID;\n  /** Request contexts whose caller row is already resolved for this request. */\n  private readonly loadedMemorySettings = new WeakSet<object>();\n\n  constructor(\n    private readonly options: {\n      configVersion: string;\n      storage: WorkItemsStorage;\n      boards: BoardRegistry;\n      loadMemorySettings?: (args: {\n        requestContext: ProcessInputStepArgs['requestContext'];\n        binding: FactoryRunBindingRecord | null;\n      }) => Promise<void>;\n      /** The Factory's stored thinking default, used when the session has not picked a level. */\n      factoryThinkingLevel?: (factoryProjectId: string) => Promise<ThinkingLevel>;\n      transitionService?: Pick<FactoryTransitionService, 'transition'>;\n      messageReader?: PersistedMessageReader;\n      recordPullRequestProvenance?: (input: {\n        binding: FactoryRunBindingRecord;\n        item: WorkItemRow;\n        assistantMessageId: string;\n        toolCallId: string;\n        toolName: string;\n        toolInput: FactoryRuleJsonValue;\n        toolResult: FactoryRuleJsonValue;\n        status: 'success' | 'error';\n      }) => Promise<void>;\n    },\n  ) {}\n\n  /**\n   * Memory settings are caller state, not run state. Factory invokes this while\n   * resolving its configured processor list, before Agent resolves dynamic\n   * Memory and enumerates Memory's processors. This guarantees both the Memory\n   * options and its model callbacks see the authoritative row for this\n   * invocation. Doing this in `processInputStep` would be too late: Memory's\n   * input-step hook runs before configured processors.\n   */\n  async prepareMemorySettings(requestContext: ProcessInputArgs['requestContext']): Promise<void> {\n    await this.loadCallerMemorySettings(requestContext, undefined, true);\n  }\n\n  async processInput(args: ProcessInputArgs): Promise<MessageList> {\n    await this.loadCallerMemorySettings(args.requestContext);\n    return args.messageList;\n  }\n\n  async processInputStep(args: ProcessInputStepArgs): Promise<MessageList | undefined> {\n    const address = getFactorySessionCoordinates(args.requestContext);\n    let binding: FactoryRunBindingRecord | null | undefined;\n    try {\n      binding = address ? await this.options.storage.findRunBindingBySession(address) : undefined;\n    } catch {\n      await this.loadCallerMemorySettings(args.requestContext, undefined);\n      return;\n    }\n    // Resumed runs skip the input-processor phase, so re-check here: it is a\n    // no-op once `processInput` already placed the row for this request. Passing\n    // `undefined` (not `null`) keeps the recovery lookup inside the loader, so a\n    // recovered session reaches its project row from this hook too.\n    await this.loadCallerMemorySettings(args.requestContext, binding);\n    if (!binding || binding.status !== 'active') return;\n    const completedToolCallIds = completedStepToolCallIds(args.steps);\n    const completedMessage = currentCompletedToolMessage(args.messages, completedToolCallIds);\n    if (completedMessage) {\n      await this.ingestMessages(binding, [completedMessage], completedToolCallIds);\n    }\n  }\n\n  /**\n   * Loads the caller's row once per invocation. The input hook always refreshes\n   * it in case the controller reused a request context; later step hooks reuse\n   * that value (`undefined` means it has not been loaded yet; `null` means an\n   * empty row).\n   *\n   * The WeakSet covers loaders that do not set the context key themselves, so a\n   * request is still loaded once. A failed load records an unavailable sentinel\n   * (memory then runs both roles on auto with default thresholds) and is not\n   * marked loaded so the next step can retry.\n   */\n  private async loadCallerMemorySettings(\n    requestContext: ProcessInputStepArgs['requestContext'] | ProcessInputArgs['requestContext'],\n    binding?: FactoryRunBindingRecord | null,\n    force = false,\n  ): Promise<void> {\n    if (!requestContext || !this.options.loadMemorySettings) return;\n    const currentSettings = requestContext.get('mastra__factoryMemorySettings') as\n      | { status?: unknown }\n      | null\n      | undefined;\n    if (force) this.loadedMemorySettings.delete(requestContext);\n    if (!force && currentSettings !== undefined && currentSettings?.status !== 'unavailable') return;\n    if (!force && this.loadedMemorySettings.has(requestContext)) return;\n    try {\n      let runBinding = binding ?? null;\n      if (binding === undefined) {\n        const address = getFactorySessionCoordinates(requestContext);\n        runBinding = address\n          ? await this.options.storage.findRunBindingBySession(address)\n          : // Crash-recovered sessions come back with empty state, so the binding\n            // table is the last source of the project whose row applies. Without\n            // this the run would silently read the caller's personal row.\n            await findSessionRunBinding(requestContext, this.options.storage);\n      }\n      await this.options.loadMemorySettings({ requestContext, binding: runBinding });\n      this.loadedMemorySettings.add(requestContext);\n    } catch (error) {\n      reportMemorySettingsUnavailable(requestContext, error instanceof Error ? error.message : String(error));\n    }\n  }\n\n  async computeStateSignal(args: ComputeStateSignalArgs): Promise<ComputeStateSignalResult> {\n    const address = getFactorySessionCoordinates(args.requestContext);\n    if (!address) return;\n    const binding = await this.options.storage.findRunBindingBySession(address);\n    const prior = latestPhase(args);\n    const hasBase = Boolean(args.lastSnapshot) && args.contextWindow.hasSnapshot;\n\n    if (!binding) return;\n    if (binding.status !== 'active') {\n      if (!hasBase || prior?.status !== 'active') return;\n      return {\n        id: STATE_ID,\n        cacheKey: `factory:none:${prior.bindingId ?? 'revoked'}`,\n        mode: 'snapshot',\n        tagName: 'factory-phase',\n        contents: '\\n',\n        value: { phase: { status: 'none' } },\n        attributes: { status: 'none' },\n        metadata: { value: { phase: { status: 'none' } } },\n      };\n    }\n\n    const item = await this.options.storage.get({ orgId: binding.orgId, id: binding.workItemId });\n    const stage = ruleStage(this.options.boards, item);\n    if (!item || !stage) return;\n    const allItems = await this.options.storage.list({\n      orgId: binding.orgId,\n      factoryProjectId: binding.factoryProjectId,\n    });\n    const linked = allItems\n      .filter(candidate => candidate.parentWorkItemId === item.id || item.parentWorkItemId === candidate.id)\n      .slice(0, MAX_LINKED_ITEMS);\n    const board = boardForWorkItem(item);\n    const baseValue: ActivePhaseSnapshotBase = {\n      status: 'active',\n      bindingId: binding.id,\n      itemId: item.id,\n      revision: item.revision,\n      stage,\n      role: binding.role,\n      configVersion: this.options.configVersion,\n    };\n    const value: ActivePhaseSnapshotValue =\n      board === 'review'\n        ? {\n            ...baseValue,\n            board,\n            ...reviewRuntimeFromRequestContext(\n              args.requestContext,\n              await this.options.factoryThinkingLevel?.(binding.factoryProjectId),\n            ),\n          }\n        : { ...baseValue, board };\n    const cacheKey = await phaseCacheKey(value, linked);\n    if (hasBase && (args.tracking?.currentCacheKey ?? args.lastSnapshot?.metadata?.state?.cacheKey) === cacheKey)\n      return;\n\n    const linkedText = linked.length\n      ? `\\nLinked items: ${linked.map(candidate => `${workItemSource(candidate.externalSource)} ${candidate.title}`).join('; ')}`\n      : '';\n    const phaseLabel = this.options.boards.get(board)?.phases[stage]?.title ?? stage;\n    const runtime =\n      value.modelId && value.thinkingLevel ? { modelId: value.modelId, thinkingLevel: value.thinkingLevel } : null;\n    const snapshotContents =\n      `Factory ${board} phase: ${escapeText(phaseLabel)} (${escapeText(stage)})\\n` +\n      `Work item: ${escapeText(item.title)} (${item.id})\\n` +\n      `Role: ${escapeText(binding.role)}\\nRevision: ${item.revision}\\nConfig: ${escapeText(this.options.configVersion)}\\n` +\n      (runtime\n        ? `Runtime: model=${escapeText(runtime.modelId)}, reasoning-setting=${escapeText(runtime.thinkingLevel)}\\n`\n        : '') +\n      ((board === 'work' || board === 'review') && stage === 'intake'\n        ? 'This card rests in Intake: its work is paused. Answer questions without moving it; when the user asks to resume, request the transition into the working stage first, then continue the work in this session.\\n'\n        : '') +\n      `Use factory_transition_work_item with expectedRevision ${item.revision} to request a phase change.${escapeText(linkedText)}`;\n    const isDelta = hasBase && prior?.status === 'active';\n    return {\n      id: STATE_ID,\n      cacheKey,\n      mode: isDelta ? 'delta' : 'snapshot',\n      tagName: 'factory-phase',\n      contents: isDelta ? `Factory phase update:\\n${snapshotContents}` : snapshotContents,\n      value: { phase: value },\n      ...(isDelta ? { delta: { phase: value } } : {}),\n      attributes: {\n        status: 'active',\n        board,\n        stage,\n        role: binding.role,\n        revision: item.revision,\n        ...(runtime ?? {}),\n      },\n      metadata: { value: { phase: value } },\n    };\n  }\n\n  async reconcileAllBoundThreads(): Promise<void> {\n    if (!this.options.messageReader) return;\n    const bindings = await this.options.storage.listActiveRunBindings();\n    for (const binding of bindings) await this.reconcileBinding(binding);\n  }\n\n  async reconcileBinding(binding: FactoryRunBindingRecord): Promise<void> {\n    const reader = this.options.messageReader;\n    if (!reader || binding.status !== 'active') return;\n    // One keyed read up front: a binding whose item is gone or no longer in a\n    // single rule stage would ingest nothing, so skip the cursor and message\n    // reads entirely instead of paying them on every walk.\n    const item = await this.options.storage.get({ orgId: binding.orgId, id: binding.workItemId });\n    if (!itemInRuleStage(this.options.boards, item)) return;\n    const cursor = await this.options.storage.getToolResultCursor(binding.orgId, binding.factoryProjectId, binding.id);\n    let page = 0;\n    while (true) {\n      const result = await reader.listMessages({\n        threadId: binding.threadId,\n        resourceId: binding.resourceId,\n        page,\n        perPage: TRANSCRIPT_PAGE_SIZE,\n        ...(cursor ? { filter: { dateRange: { start: cursor.lastMessageCreatedAt } } } : {}),\n        orderBy: { field: 'createdAt', direction: 'ASC' },\n      });\n      await this.ingestMessages(binding, result.messages, undefined, item);\n      const last = result.messages.at(-1);\n      if (last) {\n        await this.options.storage.advanceToolResultCursor({\n          bindingId: binding.id,\n          orgId: binding.orgId,\n          factoryProjectId: binding.factoryProjectId,\n          lastMessageId: last.id,\n          lastMessageCreatedAt: last.createdAt instanceof Date ? last.createdAt : new Date(last.createdAt),\n          updatedAt: new Date(),\n        });\n      }\n      if (!result.hasMore) break;\n      page += 1;\n    }\n  }\n\n  private async ingestMessages(\n    binding: FactoryRunBindingRecord,\n    messages: MastraDBMessage[],\n    toolCallIds?: ReadonlySet<string>,\n    preloadedItem?: WorkItemRow,\n  ): Promise<void> {\n    const item = preloadedItem ?? (await this.options.storage.get({ orgId: binding.orgId, id: binding.workItemId }));\n    if (!itemInRuleStage(this.options.boards, item)) return;\n    for (const message of messages) {\n      for (const toolResult of completedToolResults(message)) {\n        if (toolCallIds && !toolCallIds.has(toolResult.toolCallId)) continue;\n        try {\n          await this.options.recordPullRequestProvenance?.({\n            binding,\n            item,\n            assistantMessageId: toolResult.assistantMessageId,\n            toolCallId: toolResult.toolCallId,\n            toolName: toolResult.toolName,\n            toolInput: toolResult.input,\n            toolResult: toolResult.value,\n            status: toolResult.status,\n          });\n        } catch {\n          // Provenance is supporting evidence and must not block authoritative rule ingress.\n        }\n        await this.ingestToolResult(binding, item, toolResult);\n      }\n    }\n  }\n\n  private async ingestToolResult(\n    binding: FactoryRunBindingRecord,\n    item: WorkItemRow,\n    toolResult: CompletedToolResult,\n  ): Promise<void> {\n    const board = boardForWorkItem(item);\n    const rule = resolveBoardToolRule(this.options.boards, board, toolResult.toolName);\n    if (!rule) return;\n    const ingressId = JSON.stringify([\n      binding.id,\n      binding.threadId,\n      toolResult.assistantMessageId,\n      toolResult.toolCallId,\n    ]);\n    const prior = await this.options.storage.getTransitionResultByIngress(\n      binding.orgId,\n      binding.factoryProjectId,\n      ingressId,\n    );\n    if (prior) return;\n    const context: FactoryToolResultRuleContext = {\n      tenant: { orgId: binding.orgId, projectId: binding.factoryProjectId },\n      actor: { type: 'agent', bindingId: binding.id, role: binding.role },\n      ingress: { type: 'toolResult', id: ingressId },\n      cause: `Completed ${toolResult.toolName}`,\n      causalChain: [],\n      configVersion: this.options.configVersion,\n      item: {\n        id: item.id,\n        source: workItemSource(item.externalSource),\n        sourceKey: workItemSourceKey(item),\n        parentWorkItemId: item.parentWorkItemId,\n        title: item.title,\n        url: item.externalSource?.url ?? null,\n        stages: item.stages,\n        acceptedAt: item.acceptedAt,\n        metadata: item.metadata,\n      },\n      board,\n      itemRevision: item.revision,\n      toolName: toolResult.toolName,\n      threadId: binding.threadId,\n      assistantMessageId: toolResult.assistantMessageId,\n      toolCallId: toolResult.toolCallId,\n      result: { status: toolResult.status, value: toolResult.value },\n    };\n\n    let decision: FactoryRuleDecision | void = undefined;\n    let decisions: FactoryCommitDecision[] = [];\n    let outcome: { status: 'accepted' | 'rejected'; code?: string; reason?: string } = { status: 'accepted' };\n    try {\n      decision = await withRuleTimeout(Promise.resolve(rule(Object.freeze(context))));\n      if (decision?.type === 'reject') {\n        outcome = { status: 'rejected', code: decision.code, reason: decision.reason };\n      } else if (decision) {\n        const validated = validateFactoryRuleDecisions([decision]);\n        for (const entry of validated) assertFactoryDecisionTarget(entry, this.options.boards, board);\n        decisions = validated;\n      }\n    } catch (error) {\n      const timedOut = error instanceof Error && error.message === 'FACTORY_RULE_TIMEOUT';\n      outcome = {\n        status: 'rejected',\n        code: timedOut ? 'timeout' : 'rule_error',\n        reason: timedOut\n          ? 'Factory rule evaluation timed out.'\n          : error instanceof Error\n            ? error.message.slice(0, 2_000)\n            : 'Factory tool-result rule failed.',\n      };\n    }\n    const committed = await this.options.storage.commitRuleEvaluation({\n      orgId: binding.orgId,\n      factoryProjectId: binding.factoryProjectId,\n      workItemId: item.id,\n      ingress: { identity: ingressId, triggerType: 'tool.result' },\n      configVersion: this.options.configVersion,\n      expectedRevision: item.revision,\n      actor: { ...context.actor },\n      outcome,\n      decisions: decisions.map(entry => ({ ...entry })),\n      causalChain: [],\n      now: new Date(),\n    });\n    if (committed.status !== 'committed' || !this.options.transitionService) return;\n    for (const entry of decisions) {\n      if (entry.type !== 'transition') continue;\n      await this.options.transitionService.transition({\n        orgId: binding.orgId,\n        factoryProjectId: binding.factoryProjectId,\n        workItemId: item.id,\n        board: entry.board,\n        stage: entry.stage,\n        expectedRevision: item.revision,\n        actor: { type: 'system', id: 'factory-tool-result-rule' },\n        ingress: { type: 'rule', identity: `decision:${entry.idempotencyKey}` },\n        cause: 'tool_result_rule',\n        causalChain: [{ ingressId, decisionType: entry.type }],\n        ...(isApprovedPlanResult(toolResult) ? { planApproved: true } : {}),\n      });\n    }\n  }\n}\n"],"mappings":";;;;;;;AAgCA,MAAM,WAAW;AACjB,MAAM,kBAAkB;AACxB,MAAM,uBAAuB;AAC7B,MAAM,mBAAmB;AACzB,SAAS,UAAU,QAAuB,MAA0D;CAClG,OAAO,QAAQ,uBAAuB,QAAQ,IAAI,IAAI,KAAK,OAAO,KAAK,KAAA;AACzE;AAEA,SAAS,gBAAgB,QAAuB,MAA2D;CACzG,OAAO,UAAU,QAAQ,IAAI,MAAM,KAAA;AACrC;AAuBA,SAAS,qBAAqB,QAAsC;CAClE,IAAI,OAAO,aAAa,iBAAiB,OAAO,WAAW,WAAW,OAAO;CAC7E,IAAI,OAAO,OAAO,UAAU,UAAU,OAAO,OAAO,MAAM,WAAW,gBAAgB;CACrF,IAAI,CAAC,OAAO,SAAS,OAAO,OAAO,UAAU,YAAY,MAAM,QAAQ,OAAO,KAAK,GAAG,OAAO;CAC7F,MAAM,UAAU,OAAO,MAAM;CAC7B,OAAO,OAAO,YAAY,YAAY,QAAQ,WAAW,gBAAgB;AAC3E;AAyBA,SAAS,gCACP,gBACA,sBACiB;CACjB,IAAI,CAAC,kBAAkB,OAAO,eAAe,QAAQ,YACnD,MAAM,IAAI,MAAM,6DAA6D;CAE/E,MAAM,UAAU,eAAe,IAAkE,YAAY;CAC7G,MAAM,UAAU,SAAS,SAAS,QAAQ,KAAK;CAC/C,IAAI,CAAC,SACH,MAAM,IAAI,MAAM,yDAAyD;CAE3E,OAAO;EACL;EACA,eAAe,4BAA4B,EAAE,OAAO,SAAS,MAAM,GAAG,KAAA,GAAW,oBAAoB;CACvG;AACF;AAEA,SAAS,kBAAkB,MAAkC;CAC3D,MAAM,SAAS,KAAK;CACpB,OAAO,SAAS,GAAG,OAAO,cAAc,GAAG,OAAO,KAAK,GAAG,OAAO,eAAe;AAClF;AAEA,SAAS,aAAa,OAAsC;CAE1D,OAAO,EAAE,UADO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,UAAU,WAAW,QAAQ,yBAAA,CACnE,MAAM,GAAG,GAAK,EAAE;AAC5C;AAEA,SAAS,cAAc,OAAsC;CAC3D,IAAI;EACF,OAAO,8BAA8B,KAAK;CAC5C,QAAQ;EACN,OAAO,EAAE,SAAS,oCAAoC;CACxD;AACF;AAEA,SAAS,aAAa,SAAqC;CACzD,MAAM,UAAU,QAAQ;CACxB,IAAI,MAAM,QAAQ,OAAO,GAAG,OAAO;CACnC,IAAI,MAAM,QAAQ,SAAS,KAAK,GAAG,OAAO,QAAQ;CAClD,OAAO,MAAM,QAAQ,SAAS,eAAe,IAAI,QAAQ,kBAAkB,CAAC;AAC9E;AAEA,SAAS,yBAAyB,OAA+B;CAC/D,MAAM,sBAAM,IAAI,IAAY;CAC5B,KAAK,MAAM,WAAW,OAAO;EAC3B,IAAI,CAAC,WAAW,OAAO,YAAY,UAAU;EAC7C,MAAM,cAAe,QAAwC;EAC7D,IAAI,CAAC,MAAM,QAAQ,WAAW,GAAG;EACjC,KAAK,MAAM,aAAa,aAAa;GACnC,IAAI,CAAC,aAAa,OAAO,cAAc,UAAU;GACjD,MAAM,aAAc,UAAuC;GAC3D,IAAI,OAAO,eAAe,UAAU,IAAI,IAAI,UAAU;EACxD;CACF;CACA,OAAO;AACT;AAEA,SAAS,qBAAqB,SAAiD;CAC7E,IAAI,QAAQ,SAAS,aAAa,OAAO,CAAC;CAC1C,MAAM,YAAY,QAAQ,qBAAqB,OAAO,QAAQ,YAAY,IAAI,KAAK,QAAQ,SAAS;CACpG,MAAM,YAAmC,CAAC;CAC1C,KAAK,MAAM,WAAW,aAAa,OAAO,GAAG;EAC3C,IAAI,CAAC,WAAW,OAAO,YAAY,UAAU;EAC7C,MAAM,OAAO;EACb,MAAM,aACJ,KAAK,SAAS,qBAAqB,KAAK,kBAAkB,OAAO,KAAK,mBAAmB,WACpF,KAAK,iBACN;EACN,MAAM,QAAQ,WAAW;EACzB,IAAI,UAAU,YAAY,UAAU,SAAS;EAC7C,MAAM,aAAa,WAAW;EAC9B,MAAM,WAAW,WAAW,YAAY,WAAW;EACnD,IAAI,OAAO,eAAe,YAAY,OAAO,aAAa,UAAU;EACpE,UAAU,KAAK;GACb,oBAAoB,QAAQ;GAC5B,kBAAkB;GAClB;GACA,UAAU,SAAS,MAAM,GAAG,GAAG;GAC/B,OAAO,cAAc,WAAW,QAAQ,CAAC,CAAC;GAC1C,QAAQ,UAAU,UAAU,UAAU;GACtC,OAAO,UAAU,UAAU,aAAa,WAAW,UAAU,WAAW,KAAK,IAAI,cAAc,WAAW,MAAM;EAClH,CAAC;CACH;CACA,OAAO;AACT;AAEA,SAAS,4BACP,UACA,aAC6B;CAC7B,KAAK,IAAI,QAAQ,SAAS,SAAS,GAAG,SAAS,GAAG,SAAS,GAAG;EAC5D,MAAM,UAAU,SAAS;EACzB,IAAI,qBAAqB,OAAO,CAAC,CAAC,MAAK,WAAU,YAAY,IAAI,OAAO,UAAU,CAAC,GAAG,OAAO;CAC/F;AAEF;AAEA,eAAe,cAAc,OAAiC,QAAwC;CACpG,MAAM,aAAa,KAAK,UAAU;EAChC,GAAG;EACH,QAAQ,OAAO,KAAI,SAAQ;GAAC,KAAK;GAAI,KAAK;GAAU,KAAK,OAAO;EAAE,CAAC;CACrE,CAAC;CACD,OAAO,OAAO,KAAK,MAAM,WAAW,OAAO,OAAO,OAAO,WAAW,IAAI,YAAY,CAAC,CAAC,OAAO,UAAU,CAAC,CAAC,CAAC,CAAC,SACzG,KACF;AACF;AAEA,SAAS,WAAW,OAAuB;CACzC,OAAO,MAAM,WAAW,KAAK,OAAO,CAAC,CAAC,WAAW,KAAK,MAAM,CAAC,CAAC,WAAW,KAAK,MAAM;AACtF;AAEA,SAAS,gBAAgB,QAA4F;CACnH,QAAQ,QAAQ,UAAU,MAAA,EAAsD;AAClF;AAEA,SAAS,YAAY,MAA8D;CACjF,KAAK,MAAM,UAAU,CAAC,GAAG,KAAK,kBAAkB,CAAC,CAAC,QAAQ,GAAG;EAC3D,MAAM,QAAQ,gBAAgB,MAAM;EACpC,IAAI,OAAO,OAAO;CACpB;CACA,OAAO,gBAAgB,KAAK,YAAY;AAC1C;AAEA,eAAe,gBAAmB,WAAmC;CACnE,IAAI;CACJ,IAAI;EACF,OAAO,MAAM,QAAQ,KAAK,CACxB,WACA,IAAI,SAAgB,GAAG,WAAW;GAChC,QAAQ,iBAAiB,uBAAO,IAAI,MAAM,sBAAsB,CAAC,GAAG,eAAe;EACrF,CAAC,CACH,CAAC;CACH,UAAU;EACR,IAAI,OAAO,aAAa,KAAK;CAC/B;AACF;AAEA,MAAM,oDAAoC,IAAI,QAAgB;;;;;;AAO9D,SAAgB,gCACd,gBACA,QACM;CACN,eAAe,IAAI,iCAAiC;EAAE,QAAQ;EAAe;CAAO,CAAC;CACrF,QAAQ,KAAK,6DAA6D,EAAE,OAAO,OAAO,CAAC;CAC3F,IAAI,kCAAkC,IAAI,cAAc,GAAG;CAC3D,kCAAkC,IAAI,cAAc;CAIpD,eAHkC,IAAI,YAG7B,CAAC,EAAE,YAAY;EACtB,MAAM;EACN,uBAAO,IAAI,MACT,wHACF;EACA,WAAW;EACX,WAAW;CACb,CAAC;AACH;AAEA,IAAa,6BAAb,MAA8E;CAOzD;CANnB,KAAc;CACd,UAAmB;;CAEnB,uCAAwC,IAAI,QAAgB;CAE5D,YACE,SAuBA;EAvBiB,KAAA,UAAA;CAuBhB;;;;;;;;;CAUH,MAAM,sBAAsB,gBAAmE;EAC7F,MAAM,KAAK,yBAAyB,gBAAgB,KAAA,GAAW,IAAI;CACrE;CAEA,MAAM,aAAa,MAA8C;EAC/D,MAAM,KAAK,yBAAyB,KAAK,cAAc;EACvD,OAAO,KAAK;CACd;CAEA,MAAM,iBAAiB,MAA8D;EACnF,MAAM,UAAU,6BAA6B,KAAK,cAAc;EAChE,IAAI;EACJ,IAAI;GACF,UAAU,UAAU,MAAM,KAAK,QAAQ,QAAQ,wBAAwB,OAAO,IAAI,KAAA;EACpF,QAAQ;GACN,MAAM,KAAK,yBAAyB,KAAK,gBAAgB,KAAA,CAAS;GAClE;EACF;EAKA,MAAM,KAAK,yBAAyB,KAAK,gBAAgB,OAAO;EAChE,IAAI,CAAC,WAAW,QAAQ,WAAW,UAAU;EAC7C,MAAM,uBAAuB,yBAAyB,KAAK,KAAK;EAChE,MAAM,mBAAmB,4BAA4B,KAAK,UAAU,oBAAoB;EACxF,IAAI,kBACF,MAAM,KAAK,eAAe,SAAS,CAAC,gBAAgB,GAAG,oBAAoB;CAE/E;;;;;;;;;;;;CAaA,MAAc,yBACZ,gBACA,SACA,QAAQ,OACO;EACf,IAAI,CAAC,kBAAkB,CAAC,KAAK,QAAQ,oBAAoB;EACzD,MAAM,kBAAkB,eAAe,IAAI,+BAA+B;EAI1E,IAAI,OAAO,KAAK,qBAAqB,OAAO,cAAc;EAC1D,IAAI,CAAC,SAAS,oBAAoB,KAAA,KAAa,iBAAiB,WAAW,eAAe;EAC1F,IAAI,CAAC,SAAS,KAAK,qBAAqB,IAAI,cAAc,GAAG;EAC7D,IAAI;GACF,IAAI,aAAa,WAAW;GAC5B,IAAI,YAAY,KAAA,GAAW;IACzB,MAAM,UAAU,6BAA6B,cAAc;IAC3D,aAAa,UACT,MAAM,KAAK,QAAQ,QAAQ,wBAAwB,OAAO,IAI1D,MAAM,sBAAsB,gBAAgB,KAAK,QAAQ,OAAO;GACtE;GACA,MAAM,KAAK,QAAQ,mBAAmB;IAAE;IAAgB,SAAS;GAAW,CAAC;GAC7E,KAAK,qBAAqB,IAAI,cAAc;EAC9C,SAAS,OAAO;GACd,gCAAgC,gBAAgB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;EACxG;CACF;CAEA,MAAM,mBAAmB,MAAiE;EACxF,MAAM,UAAU,6BAA6B,KAAK,cAAc;EAChE,IAAI,CAAC,SAAS;EACd,MAAM,UAAU,MAAM,KAAK,QAAQ,QAAQ,wBAAwB,OAAO;EAC1E,MAAM,QAAQ,YAAY,IAAI;EAC9B,MAAM,UAAU,QAAQ,KAAK,YAAY,KAAK,KAAK,cAAc;EAEjE,IAAI,CAAC,SAAS;EACd,IAAI,QAAQ,WAAW,UAAU;GAC/B,IAAI,CAAC,WAAW,OAAO,WAAW,UAAU;GAC5C,OAAO;IACL,IAAI;IACJ,UAAU,gBAAgB,MAAM,aAAa;IAC7C,MAAM;IACN,SAAS;IACT,UAAU;IACV,OAAO,EAAE,OAAO,EAAE,QAAQ,OAAO,EAAE;IACnC,YAAY,EAAE,QAAQ,OAAO;IAC7B,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,OAAO,EAAE,EAAE;GACnD;EACF;EAEA,MAAM,OAAO,MAAM,KAAK,QAAQ,QAAQ,IAAI;GAAE,OAAO,QAAQ;GAAO,IAAI,QAAQ;EAAW,CAAC;EAC5F,MAAM,QAAQ,UAAU,KAAK,QAAQ,QAAQ,IAAI;EACjD,IAAI,CAAC,QAAQ,CAAC,OAAO;EAKrB,MAAM,UAAS,MAJQ,KAAK,QAAQ,QAAQ,KAAK;GAC/C,OAAO,QAAQ;GACf,kBAAkB,QAAQ;EAC5B,CAAC,EAAA,CAEE,QAAO,cAAa,UAAU,qBAAqB,KAAK,MAAM,KAAK,qBAAqB,UAAU,EAAE,CAAC,CACrG,MAAM,GAAG,gBAAgB;EAC5B,MAAM,QAAQ,iBAAiB,IAAI;EACnC,MAAM,YAAqC;GACzC,QAAQ;GACR,WAAW,QAAQ;GACnB,QAAQ,KAAK;GACb,UAAU,KAAK;GACf;GACA,MAAM,QAAQ;GACd,eAAe,KAAK,QAAQ;EAC9B;EACA,MAAM,QACJ,UAAU,WACN;GACE,GAAG;GACH;GACA,GAAG,gCACD,KAAK,gBACL,MAAM,KAAK,QAAQ,uBAAuB,QAAQ,gBAAgB,CACpE;EACF,IACA;GAAE,GAAG;GAAW;EAAM;EAC5B,MAAM,WAAW,MAAM,cAAc,OAAO,MAAM;EAClD,IAAI,YAAY,KAAK,UAAU,mBAAmB,KAAK,cAAc,UAAU,OAAO,cAAc,UAClG;EAEF,MAAM,aAAa,OAAO,SACtB,mBAAmB,OAAO,KAAI,cAAa,GAAG,eAAe,UAAU,cAAc,EAAE,GAAG,UAAU,OAAO,CAAC,CAAC,KAAK,IAAI,MACtH;EACJ,MAAM,aAAa,KAAK,QAAQ,OAAO,IAAI,KAAK,CAAC,EAAE,OAAO,MAAM,EAAE,SAAS;EAC3E,MAAM,UACJ,MAAM,WAAW,MAAM,gBAAgB;GAAE,SAAS,MAAM;GAAS,eAAe,MAAM;EAAc,IAAI;EAC1G,MAAM,mBACJ,WAAW,MAAM,UAAU,WAAW,UAAU,EAAE,IAAI,WAAW,KAAK,EAAE,gBAC1D,WAAW,KAAK,KAAK,EAAE,IAAI,KAAK,GAAG,WACxC,WAAW,QAAQ,IAAI,EAAE,cAAc,KAAK,SAAS,YAAY,WAAW,KAAK,QAAQ,aAAa,EAAE,OAChH,UACG,kBAAkB,WAAW,QAAQ,OAAO,EAAE,sBAAsB,WAAW,QAAQ,aAAa,EAAE,MACtG,QACF,UAAU,UAAU,UAAU,aAAa,UAAU,WACnD,oNACA,MACJ,0DAA0D,KAAK,SAAS,6BAA6B,WAAW,UAAU;EAC5H,MAAM,UAAU,WAAW,OAAO,WAAW;EAC7C,OAAO;GACL,IAAI;GACJ;GACA,MAAM,UAAU,UAAU;GAC1B,SAAS;GACT,UAAU,UAAU,0BAA0B,qBAAqB;GACnE,OAAO,EAAE,OAAO,MAAM;GACtB,GAAI,UAAU,EAAE,OAAO,EAAE,OAAO,MAAM,EAAE,IAAI,CAAC;GAC7C,YAAY;IACV,QAAQ;IACR;IACA;IACA,MAAM,QAAQ;IACd,UAAU,KAAK;IACf,GAAI,WAAW,CAAC;GAClB;GACA,UAAU,EAAE,OAAO,EAAE,OAAO,MAAM,EAAE;EACtC;CACF;CAEA,MAAM,2BAA0C;EAC9C,IAAI,CAAC,KAAK,QAAQ,eAAe;EACjC,MAAM,WAAW,MAAM,KAAK,QAAQ,QAAQ,sBAAsB;EAClE,KAAK,MAAM,WAAW,UAAU,MAAM,KAAK,iBAAiB,OAAO;CACrE;CAEA,MAAM,iBAAiB,SAAiD;EACtE,MAAM,SAAS,KAAK,QAAQ;EAC5B,IAAI,CAAC,UAAU,QAAQ,WAAW,UAAU;EAI5C,MAAM,OAAO,MAAM,KAAK,QAAQ,QAAQ,IAAI;GAAE,OAAO,QAAQ;GAAO,IAAI,QAAQ;EAAW,CAAC;EAC5F,IAAI,CAAC,gBAAgB,KAAK,QAAQ,QAAQ,IAAI,GAAG;EACjD,MAAM,SAAS,MAAM,KAAK,QAAQ,QAAQ,oBAAoB,QAAQ,OAAO,QAAQ,kBAAkB,QAAQ,EAAE;EACjH,IAAI,OAAO;EACX,OAAO,MAAM;GACX,MAAM,SAAS,MAAM,OAAO,aAAa;IACvC,UAAU,QAAQ;IAClB,YAAY,QAAQ;IACpB;IACA,SAAS;IACT,GAAI,SAAS,EAAE,QAAQ,EAAE,WAAW,EAAE,OAAO,OAAO,qBAAqB,EAAE,EAAE,IAAI,CAAC;IAClF,SAAS;KAAE,OAAO;KAAa,WAAW;IAAM;GAClD,CAAC;GACD,MAAM,KAAK,eAAe,SAAS,OAAO,UAAU,KAAA,GAAW,IAAI;GACnE,MAAM,OAAO,OAAO,SAAS,GAAG,EAAE;GAClC,IAAI,MACF,MAAM,KAAK,QAAQ,QAAQ,wBAAwB;IACjD,WAAW,QAAQ;IACnB,OAAO,QAAQ;IACf,kBAAkB,QAAQ;IAC1B,eAAe,KAAK;IACpB,sBAAsB,KAAK,qBAAqB,OAAO,KAAK,YAAY,IAAI,KAAK,KAAK,SAAS;IAC/F,2BAAW,IAAI,KAAK;GACtB,CAAC;GAEH,IAAI,CAAC,OAAO,SAAS;GACrB,QAAQ;EACV;CACF;CAEA,MAAc,eACZ,SACA,UACA,aACA,eACe;EACf,MAAM,OAAO,iBAAkB,MAAM,KAAK,QAAQ,QAAQ,IAAI;GAAE,OAAO,QAAQ;GAAO,IAAI,QAAQ;EAAW,CAAC;EAC9G,IAAI,CAAC,gBAAgB,KAAK,QAAQ,QAAQ,IAAI,GAAG;EACjD,KAAK,MAAM,WAAW,UACpB,KAAK,MAAM,cAAc,qBAAqB,OAAO,GAAG;GACtD,IAAI,eAAe,CAAC,YAAY,IAAI,WAAW,UAAU,GAAG;GAC5D,IAAI;IACF,MAAM,KAAK,QAAQ,8BAA8B;KAC/C;KACA;KACA,oBAAoB,WAAW;KAC/B,YAAY,WAAW;KACvB,UAAU,WAAW;KACrB,WAAW,WAAW;KACtB,YAAY,WAAW;KACvB,QAAQ,WAAW;IACrB,CAAC;GACH,QAAQ,CAER;GACA,MAAM,KAAK,iBAAiB,SAAS,MAAM,UAAU;EACvD;CAEJ;CAEA,MAAc,iBACZ,SACA,MACA,YACe;EACf,MAAM,QAAQ,iBAAiB,IAAI;EACnC,MAAM,OAAO,qBAAqB,KAAK,QAAQ,QAAQ,OAAO,WAAW,QAAQ;EACjF,IAAI,CAAC,MAAM;EACX,MAAM,YAAY,KAAK,UAAU;GAC/B,QAAQ;GACR,QAAQ;GACR,WAAW;GACX,WAAW;EACb,CAAC;EAMD,IAAI,MALgB,KAAK,QAAQ,QAAQ,6BACvC,QAAQ,OACR,QAAQ,kBACR,SACF,GACW;EACX,MAAM,UAAwC;GAC5C,QAAQ;IAAE,OAAO,QAAQ;IAAO,WAAW,QAAQ;GAAiB;GACpE,OAAO;IAAE,MAAM;IAAS,WAAW,QAAQ;IAAI,MAAM,QAAQ;GAAK;GAClE,SAAS;IAAE,MAAM;IAAc,IAAI;GAAU;GAC7C,OAAO,aAAa,WAAW;GAC/B,aAAa,CAAC;GACd,eAAe,KAAK,QAAQ;GAC5B,MAAM;IACJ,IAAI,KAAK;IACT,QAAQ,eAAe,KAAK,cAAc;IAC1C,WAAW,kBAAkB,IAAI;IACjC,kBAAkB,KAAK;IACvB,OAAO,KAAK;IACZ,KAAK,KAAK,gBAAgB,OAAO;IACjC,QAAQ,KAAK;IACb,YAAY,KAAK;IACjB,UAAU,KAAK;GACjB;GACA;GACA,cAAc,KAAK;GACnB,UAAU,WAAW;GACrB,UAAU,QAAQ;GAClB,oBAAoB,WAAW;GAC/B,YAAY,WAAW;GACvB,QAAQ;IAAE,QAAQ,WAAW;IAAQ,OAAO,WAAW;GAAM;EAC/D;EAEA,IAAI,WAAuC,KAAA;EAC3C,IAAI,YAAqC,CAAC;EAC1C,IAAI,UAA+E,EAAE,QAAQ,WAAW;EACxG,IAAI;GACF,WAAW,MAAM,gBAAgB,QAAQ,QAAQ,KAAK,OAAO,OAAO,OAAO,CAAC,CAAC,CAAC;GAC9E,IAAI,UAAU,SAAS,UACrB,UAAU;IAAE,QAAQ;IAAY,MAAM,SAAS;IAAM,QAAQ,SAAS;GAAO;QACxE,IAAI,UAAU;IACnB,MAAM,YAAY,6BAA6B,CAAC,QAAQ,CAAC;IACzD,KAAK,MAAM,SAAS,WAAW,4BAA4B,OAAO,KAAK,QAAQ,QAAQ,KAAK;IAC5F,YAAY;GACd;EACF,SAAS,OAAO;GACd,MAAM,WAAW,iBAAiB,SAAS,MAAM,YAAY;GAC7D,UAAU;IACR,QAAQ;IACR,MAAM,WAAW,YAAY;IAC7B,QAAQ,WACJ,uCACA,iBAAiB,QACf,MAAM,QAAQ,MAAM,GAAG,GAAK,IAC5B;GACR;EACF;EAcA,KAAI,MAboB,KAAK,QAAQ,QAAQ,qBAAqB;GAChE,OAAO,QAAQ;GACf,kBAAkB,QAAQ;GAC1B,YAAY,KAAK;GACjB,SAAS;IAAE,UAAU;IAAW,aAAa;GAAc;GAC3D,eAAe,KAAK,QAAQ;GAC5B,kBAAkB,KAAK;GACvB,OAAO,EAAE,GAAG,QAAQ,MAAM;GAC1B;GACA,WAAW,UAAU,KAAI,WAAU,EAAE,GAAG,MAAM,EAAE;GAChD,aAAa,CAAC;GACd,qBAAK,IAAI,KAAK;EAChB,CAAC,EAAA,CACa,WAAW,eAAe,CAAC,KAAK,QAAQ,mBAAmB;EACzE,KAAK,MAAM,SAAS,WAAW;GAC7B,IAAI,MAAM,SAAS,cAAc;GACjC,MAAM,KAAK,QAAQ,kBAAkB,WAAW;IAC9C,OAAO,QAAQ;IACf,kBAAkB,QAAQ;IAC1B,YAAY,KAAK;IACjB,OAAO,MAAM;IACb,OAAO,MAAM;IACb,kBAAkB,KAAK;IACvB,OAAO;KAAE,MAAM;KAAU,IAAI;IAA2B;IACxD,SAAS;KAAE,MAAM;KAAQ,UAAU,YAAY,MAAM;IAAiB;IACtE,OAAO;IACP,aAAa,CAAC;KAAE;KAAW,cAAc,MAAM;IAAK,CAAC;IACrD,GAAI,qBAAqB,UAAU,IAAI,EAAE,cAAc,KAAK,IAAI,CAAC;GACnE,CAAC;EACH;CACF;AACF"}
+{"version":3,"file":"processor.js","names":[],"sources":["../../src/rules/processor.ts"],"sourcesContent":["import { resolveRequestThinkingLevel } from '@mastra/code-sdk/agents/model';\nimport type { ThinkingLevel } from '@mastra/code-sdk/providers/openai-codex';\nimport type { MastraCodeState } from '@mastra/code-sdk/schema';\nimport type { MastraDBMessage, MessageList } from '@mastra/core/agent/message-list';\nimport type { AgentControllerRequestContext } from '@mastra/core/agent-controller';\nimport type {\n  ComputeStateSignalArgs,\n  ComputeStateSignalResult,\n  ProcessInputArgs,\n  ProcessInputStepArgs,\n  Processor,\n} from '@mastra/core/processors';\n\nimport { boardForWorkItem, resolveBoardToolRule, workItemPhaseSemantics } from '../boards/index.js';\nimport type { BoardRegistry } from '../boards/index.js';\nimport type { FactoryRunBindingRecord, WorkItemsStorage, WorkItemRow } from '../storage/domains/work-items/base.js';\nimport { findSessionRunBinding, getFactorySessionCoordinates } from './binding-context.js';\nimport type { FactoryTransitionService } from './transition-service.js';\nimport { workItemSource } from './types.js';\nimport type {\n  FactoryCommitDecision,\n  FactoryRuleDecision,\n  FactoryRuleJsonValue,\n  FactoryRuleStage,\n  FactoryToolResultRuleContext,\n} from './types.js';\nimport {\n  assertFactoryDecisionTarget,\n  normalizeFactoryRuleJsonValue,\n  validateFactoryRuleDecisions,\n} from './validation.js';\n\nconst STATE_ID = 'factory-phase';\nconst RULE_TIMEOUT_MS = 5_000;\nconst TRANSCRIPT_PAGE_SIZE = 50;\nconst MAX_LINKED_ITEMS = 5;\nfunction ruleStage(boards: BoardRegistry, item: WorkItemRow | null | undefined): string | undefined {\n  return item && workItemPhaseSemantics(boards, item) ? item.stages[0] : undefined;\n}\n\nfunction itemInRuleStage(boards: BoardRegistry, item: WorkItemRow | null | undefined): item is WorkItemRow {\n  return ruleStage(boards, item) !== undefined;\n}\n\ntype PersistedMessageReader = {\n  listMessages(input: {\n    threadId: string;\n    resourceId?: string;\n    page: number;\n    perPage: number;\n    filter?: { dateRange?: { start?: Date } };\n    orderBy: { field: 'createdAt'; direction: 'ASC' };\n  }): Promise<{ messages: MastraDBMessage[]; hasMore: boolean }>;\n};\n\ntype CompletedToolResult = {\n  assistantMessageId: string;\n  messageCreatedAt: Date;\n  toolCallId: string;\n  toolName: string;\n  input: FactoryRuleJsonValue;\n  status: 'success' | 'error';\n  value: FactoryRuleJsonValue;\n};\n\nfunction isApprovedPlanResult(result: CompletedToolResult): boolean {\n  if (result.toolName !== 'submit_plan' || result.status !== 'success') return false;\n  if (typeof result.value === 'string') return result.value.startsWith('Plan approved.');\n  if (!result.value || typeof result.value !== 'object' || Array.isArray(result.value)) return false;\n  const content = result.value.content;\n  return typeof content === 'string' && content.startsWith('Plan approved.');\n}\n\ntype RuntimeSnapshot = {\n  modelId: string;\n  thinkingLevel: ThinkingLevel;\n};\n\ntype ActivePhaseSnapshotBase = {\n  bindingId: string;\n  itemId: string;\n  revision: number;\n  stage: FactoryRuleStage;\n  role: string;\n  configVersion: string;\n  status: 'active';\n};\n\ntype ActivePhaseSnapshotValue = ActivePhaseSnapshotBase & {\n  board: string;\n  modelId?: string;\n  thinkingLevel?: ThinkingLevel;\n};\n\ntype PhaseSnapshotValue = ActivePhaseSnapshotValue | { bindingId?: string; status: 'none' };\n\nfunction reviewRuntimeFromRequestContext(\n  requestContext: ComputeStateSignalArgs['requestContext'],\n  factoryThinkingLevel: ThinkingLevel | undefined,\n): RuntimeSnapshot {\n  if (!requestContext || typeof requestContext.get !== 'function') {\n    throw new Error('Factory review phase requires a controller request context.');\n  }\n  const context = requestContext.get<'controller', AgentControllerRequestContext<MastraCodeState>>('controller');\n  const modelId = context?.session?.modelId.trim();\n  if (!modelId) {\n    throw new Error('Factory review phase requires a selected session model.');\n  }\n  return {\n    modelId,\n    thinkingLevel: resolveRequestThinkingLevel({ state: context?.state }, undefined, factoryThinkingLevel),\n  };\n}\n\nfunction workItemSourceKey(item: WorkItemRow): string | null {\n  const source = item.externalSource;\n  return source ? `${source.integrationId}:${source.type}:${source.externalId}` : null;\n}\n\nfunction boundedError(value: unknown): FactoryRuleJsonValue {\n  const message = value instanceof Error ? value.message : typeof value === 'string' ? value : 'Tool execution failed.';\n  return { message: message.slice(0, 2_000) };\n}\n\nfunction boundedResult(value: unknown): FactoryRuleJsonValue {\n  try {\n    return normalizeFactoryRuleJsonValue(value);\n  } catch {\n    return { message: 'Tool result was not serializable.' };\n  }\n}\n\nfunction messageParts(message: MastraDBMessage): unknown[] {\n  const content = message.content as { parts?: unknown[]; toolInvocations?: unknown[] } | unknown[] | undefined;\n  if (Array.isArray(content)) return content;\n  if (Array.isArray(content?.parts)) return content.parts;\n  return Array.isArray(content?.toolInvocations) ? content.toolInvocations : [];\n}\n\nfunction completedStepToolCallIds(steps: unknown[]): Set<string> {\n  const ids = new Set<string>();\n  for (const rawStep of steps) {\n    if (!rawStep || typeof rawStep !== 'object') continue;\n    const toolResults = (rawStep as { toolResults?: unknown[] }).toolResults;\n    if (!Array.isArray(toolResults)) continue;\n    for (const rawResult of toolResults) {\n      if (!rawResult || typeof rawResult !== 'object') continue;\n      const toolCallId = (rawResult as { toolCallId?: unknown }).toolCallId;\n      if (typeof toolCallId === 'string') ids.add(toolCallId);\n    }\n  }\n  return ids;\n}\n\nfunction completedToolResults(message: MastraDBMessage): CompletedToolResult[] {\n  if (message.role !== 'assistant') return [];\n  const createdAt = message.createdAt instanceof Date ? message.createdAt : new Date(message.createdAt);\n  const completed: CompletedToolResult[] = [];\n  for (const rawPart of messageParts(message)) {\n    if (!rawPart || typeof rawPart !== 'object') continue;\n    const part = rawPart as Record<string, unknown>;\n    const invocation =\n      part.type === 'tool-invocation' && part.toolInvocation && typeof part.toolInvocation === 'object'\n        ? (part.toolInvocation as Record<string, unknown>)\n        : part;\n    const state = invocation.state;\n    if (state !== 'result' && state !== 'error') continue;\n    const toolCallId = invocation.toolCallId;\n    const toolName = invocation.toolName ?? invocation.name;\n    if (typeof toolCallId !== 'string' || typeof toolName !== 'string') continue;\n    completed.push({\n      assistantMessageId: message.id,\n      messageCreatedAt: createdAt,\n      toolCallId,\n      toolName: toolName.slice(0, 256),\n      input: boundedResult(invocation.args ?? {}),\n      status: state === 'error' ? 'error' : 'success',\n      value: state === 'error' ? boundedError(invocation.result ?? invocation.error) : boundedResult(invocation.result),\n    });\n  }\n  return completed;\n}\n\nfunction currentCompletedToolMessage(\n  messages: MastraDBMessage[],\n  toolCallIds: ReadonlySet<string>,\n): MastraDBMessage | undefined {\n  for (let index = messages.length - 1; index >= 0; index -= 1) {\n    const message = messages[index]!;\n    if (completedToolResults(message).some(result => toolCallIds.has(result.toolCallId))) return message;\n  }\n  return undefined;\n}\n\nasync function phaseCacheKey(value: ActivePhaseSnapshotValue, linked: WorkItemRow[]): Promise<string> {\n  const serialized = JSON.stringify({\n    ...value,\n    linked: linked.map(item => [item.id, item.revision, item.stages[0]]),\n  });\n  return Buffer.from(await globalThis.crypto.subtle.digest('SHA-256', new TextEncoder().encode(serialized))).toString(\n    'hex',\n  );\n}\n\nfunction escapeText(value: string): string {\n  return value.replaceAll('&', '&amp;').replaceAll('<', '&lt;').replaceAll('>', '&gt;');\n}\n\nfunction phaseFromSignal(signal: { metadata?: Record<string, unknown> } | undefined): PhaseSnapshotValue | undefined {\n  return (signal?.metadata?.value as { phase?: PhaseSnapshotValue } | undefined)?.phase;\n}\n\nfunction latestPhase(args: ComputeStateSignalArgs): PhaseSnapshotValue | undefined {\n  for (const signal of [...args.activeStateSignals].reverse()) {\n    const phase = phaseFromSignal(signal);\n    if (phase) return phase;\n  }\n  return phaseFromSignal(args.lastSnapshot);\n}\n\nasync function withRuleTimeout<T>(operation: Promise<T>): Promise<T> {\n  let timer: ReturnType<typeof setTimeout> | undefined;\n  try {\n    return await Promise.race([\n      operation,\n      new Promise<never>((_, reject) => {\n        timer = setTimeout(() => reject(new Error('FACTORY_RULE_TIMEOUT')), RULE_TIMEOUT_MS);\n      }),\n    ]);\n  } finally {\n    if (timer) clearTimeout(timer);\n  }\n}\n\nconst reportedUnavailableMemorySettings = new WeakSet<object>();\n\n/**\n * Marks this run's Factory memory settings as unavailable so memory falls back\n * to auto, and tells the thread once per request that saved choices were not\n * applied. The reserved request-context key keeps clients from spoofing it.\n */\nexport function reportMemorySettingsUnavailable(\n  requestContext: NonNullable<ProcessInputArgs['requestContext']>,\n  reason: string,\n): void {\n  requestContext.set('mastra__factoryMemorySettings', { status: 'unavailable', reason });\n  console.warn('[Factory Memory Settings] Failed to load settings for run', { error: reason });\n  if (reportedUnavailableMemorySettings.has(requestContext)) return;\n  reportedUnavailableMemorySettings.add(requestContext);\n  const controller = requestContext.get('controller') as\n    | Pick<AgentControllerRequestContext<MastraCodeState>, 'emitEvent'>\n    | undefined;\n  controller?.emitEvent?.({\n    type: 'error',\n    error: new Error(\n      'Memory settings could not be loaded for this run, so observational memory is using Auto models and default thresholds.',\n    ),\n    errorType: 'factory_memory_settings_unavailable',\n    retryable: false,\n  });\n}\n\nexport class FactoryPhaseStateProcessor implements Processor<'factory-phase'> {\n  readonly id = STATE_ID;\n  readonly stateId = STATE_ID;\n  /** Request contexts whose caller row is already resolved for this request. */\n  private readonly loadedMemorySettings = new WeakSet<object>();\n\n  constructor(\n    private readonly options: {\n      configVersion: string;\n      storage: WorkItemsStorage;\n      boards: BoardRegistry;\n      loadMemorySettings?: (args: {\n        requestContext: ProcessInputStepArgs['requestContext'];\n        binding: FactoryRunBindingRecord | null;\n      }) => Promise<void>;\n      /** The Factory's stored thinking default, used when the session has not picked a level. */\n      factoryThinkingLevel?: (factoryProjectId: string) => Promise<ThinkingLevel>;\n      transitionService?: Pick<FactoryTransitionService, 'transition'>;\n      messageReader?: PersistedMessageReader;\n      recordPullRequestProvenance?: (input: {\n        binding: FactoryRunBindingRecord;\n        item: WorkItemRow;\n        assistantMessageId: string;\n        toolCallId: string;\n        toolName: string;\n        toolInput: FactoryRuleJsonValue;\n        toolResult: FactoryRuleJsonValue;\n        status: 'success' | 'error';\n      }) => Promise<void>;\n    },\n  ) {}\n\n  /**\n   * Memory settings are caller state, not run state. Factory invokes this while\n   * resolving its configured processor list, before Agent resolves dynamic\n   * Memory and enumerates Memory's processors. This guarantees both the Memory\n   * options and its model callbacks see the authoritative row for this\n   * invocation. Doing this in `processInputStep` would be too late: Memory's\n   * input-step hook runs before configured processors.\n   */\n  async prepareMemorySettings(requestContext: ProcessInputArgs['requestContext']): Promise<void> {\n    await this.loadCallerMemorySettings(requestContext, undefined, true);\n  }\n\n  async processInput(args: ProcessInputArgs): Promise<MessageList> {\n    await this.loadCallerMemorySettings(args.requestContext);\n    return args.messageList;\n  }\n\n  async processInputStep(args: ProcessInputStepArgs): Promise<MessageList | undefined> {\n    const address = getFactorySessionCoordinates(args.requestContext);\n    let binding: FactoryRunBindingRecord | null | undefined;\n    try {\n      binding = address ? await this.options.storage.findRunBindingBySession(address) : undefined;\n    } catch {\n      await this.loadCallerMemorySettings(args.requestContext, undefined);\n      return;\n    }\n    // Resumed runs skip the input-processor phase, so re-check here: it is a\n    // no-op once `processInput` already placed the row for this request. Passing\n    // `undefined` (not `null`) keeps the recovery lookup inside the loader, so a\n    // recovered session reaches its project row from this hook too.\n    await this.loadCallerMemorySettings(args.requestContext, binding);\n    if (!binding || binding.status !== 'active') return;\n    const completedToolCallIds = completedStepToolCallIds(args.steps);\n    const completedMessage = currentCompletedToolMessage(args.messages, completedToolCallIds);\n    if (completedMessage) {\n      await this.ingestMessages(binding, [completedMessage], completedToolCallIds);\n    }\n  }\n\n  /**\n   * Loads the caller's row once per invocation. The input hook always refreshes\n   * it in case the controller reused a request context; later step hooks reuse\n   * that value (`undefined` means it has not been loaded yet; `null` means an\n   * empty row).\n   *\n   * The WeakSet covers loaders that do not set the context key themselves, so a\n   * request is still loaded once. A failed load records an unavailable sentinel\n   * (memory then runs both roles on auto with default thresholds) and is not\n   * marked loaded so the next step can retry.\n   */\n  private async loadCallerMemorySettings(\n    requestContext: ProcessInputStepArgs['requestContext'] | ProcessInputArgs['requestContext'],\n    binding?: FactoryRunBindingRecord | null,\n    force = false,\n  ): Promise<void> {\n    if (!requestContext || !this.options.loadMemorySettings) return;\n    const currentSettings = requestContext.get('mastra__factoryMemorySettings') as\n      | { status?: unknown }\n      | null\n      | undefined;\n    if (force) this.loadedMemorySettings.delete(requestContext);\n    if (!force && currentSettings !== undefined && currentSettings?.status !== 'unavailable') return;\n    if (!force && this.loadedMemorySettings.has(requestContext)) return;\n    try {\n      let runBinding = binding ?? null;\n      if (binding === undefined) {\n        const address = getFactorySessionCoordinates(requestContext);\n        runBinding = address\n          ? await this.options.storage.findRunBindingBySession(address)\n          : // Crash-recovered sessions come back with empty state, so the binding\n            // table is the last source of the project whose row applies. Without\n            // this the run would silently read the caller's personal row.\n            await findSessionRunBinding(requestContext, this.options.storage);\n      }\n      await this.options.loadMemorySettings({ requestContext, binding: runBinding });\n      this.loadedMemorySettings.add(requestContext);\n    } catch (error) {\n      reportMemorySettingsUnavailable(requestContext, error instanceof Error ? error.message : String(error));\n    }\n  }\n\n  async computeStateSignal(args: ComputeStateSignalArgs): Promise<ComputeStateSignalResult> {\n    const address = getFactorySessionCoordinates(args.requestContext);\n    if (!address) return;\n    const binding = await this.options.storage.findRunBindingBySession(address);\n    const prior = latestPhase(args);\n    const hasBase = Boolean(args.lastSnapshot) && args.contextWindow.hasSnapshot;\n\n    if (!binding) return;\n    if (binding.status !== 'active') {\n      if (!hasBase || prior?.status !== 'active') return;\n      return {\n        id: STATE_ID,\n        cacheKey: `factory:none:${prior.bindingId ?? 'revoked'}`,\n        mode: 'snapshot',\n        tagName: 'factory-phase',\n        contents: '\\n',\n        value: { phase: { status: 'none' } },\n        attributes: { status: 'none' },\n        metadata: { value: { phase: { status: 'none' } } },\n      };\n    }\n\n    const item = await this.options.storage.get({ orgId: binding.orgId, id: binding.workItemId });\n    const stage = ruleStage(this.options.boards, item);\n    if (!item || !stage) return;\n    const allItems = await this.options.storage.list({\n      orgId: binding.orgId,\n      factoryProjectId: binding.factoryProjectId,\n    });\n    const linked = allItems\n      .filter(candidate => candidate.parentWorkItemId === item.id || item.parentWorkItemId === candidate.id)\n      .slice(0, MAX_LINKED_ITEMS);\n    const board = boardForWorkItem(item);\n    const baseValue: ActivePhaseSnapshotBase = {\n      status: 'active',\n      bindingId: binding.id,\n      itemId: item.id,\n      revision: item.revision,\n      stage,\n      role: binding.role,\n      configVersion: this.options.configVersion,\n    };\n    const value: ActivePhaseSnapshotValue =\n      board === 'review'\n        ? {\n            ...baseValue,\n            board,\n            ...reviewRuntimeFromRequestContext(\n              args.requestContext,\n              await this.options.factoryThinkingLevel?.(binding.factoryProjectId),\n            ),\n          }\n        : { ...baseValue, board };\n    const cacheKey = await phaseCacheKey(value, linked);\n    if (hasBase && (args.tracking?.currentCacheKey ?? args.lastSnapshot?.metadata?.state?.cacheKey) === cacheKey)\n      return;\n\n    const linkedText = linked.length\n      ? `\\nLinked items: ${linked.map(candidate => `${workItemSource(candidate.externalSource)} ${candidate.title}`).join('; ')}`\n      : '';\n    const phaseLabel = this.options.boards.get(board)?.phases[stage]?.title ?? stage;\n    const runtime =\n      value.modelId && value.thinkingLevel ? { modelId: value.modelId, thinkingLevel: value.thinkingLevel } : null;\n    const snapshotContents =\n      `Factory ${board} phase: ${escapeText(phaseLabel)} (${escapeText(stage)})\\n` +\n      `Work item: ${escapeText(item.title)} (${item.id})\\n` +\n      `Role: ${escapeText(binding.role)}\\nRevision: ${item.revision}\\nConfig: ${escapeText(this.options.configVersion)}\\n` +\n      (runtime\n        ? `Runtime: model=${escapeText(runtime.modelId)}, reasoning-setting=${escapeText(runtime.thinkingLevel)}\\n`\n        : '') +\n      ((board === 'work' || board === 'review') && stage === 'intake'\n        ? 'This card rests in Intake: its work is paused. Answer questions without moving it; when the user asks to resume, request the transition into the working stage first, then continue the work in this session.\\n'\n        : '') +\n      `Use factory_transition_work_item with expectedRevision ${item.revision} to request a phase change.${escapeText(linkedText)}`;\n    const isDelta = hasBase && prior?.status === 'active';\n    return {\n      id: STATE_ID,\n      cacheKey,\n      mode: isDelta ? 'delta' : 'snapshot',\n      tagName: 'factory-phase',\n      contents: isDelta ? `Factory phase update:\\n${snapshotContents}` : snapshotContents,\n      value: { phase: value },\n      ...(isDelta ? { delta: { phase: value } } : {}),\n      attributes: {\n        status: 'active',\n        board,\n        stage,\n        role: binding.role,\n        revision: item.revision,\n        ...(runtime ?? {}),\n      },\n      metadata: { value: { phase: value } },\n    };\n  }\n\n  async reconcileAllBoundThreads(): Promise<void> {\n    if (!this.options.messageReader) return;\n    const bindings = await this.options.storage.listActiveRunBindings();\n    for (const binding of bindings) await this.reconcileBinding(binding);\n  }\n\n  async reconcileBinding(binding: FactoryRunBindingRecord): Promise<void> {\n    const reader = this.options.messageReader;\n    if (!reader || binding.status !== 'active') return;\n    // One keyed read up front: a binding whose item is gone or no longer in a\n    // single rule stage would ingest nothing, so skip the cursor and message\n    // reads entirely instead of paying them on every walk.\n    const item = await this.options.storage.get({ orgId: binding.orgId, id: binding.workItemId });\n    if (!itemInRuleStage(this.options.boards, item)) return;\n    const cursor = await this.options.storage.getToolResultCursor(binding.orgId, binding.factoryProjectId, binding.id);\n    let page = 0;\n    while (true) {\n      const result = await reader.listMessages({\n        threadId: binding.threadId,\n        resourceId: binding.resourceId,\n        page,\n        perPage: TRANSCRIPT_PAGE_SIZE,\n        ...(cursor ? { filter: { dateRange: { start: cursor.lastMessageCreatedAt } } } : {}),\n        orderBy: { field: 'createdAt', direction: 'ASC' },\n      });\n      await this.ingestMessages(binding, result.messages, undefined, item);\n      const last = result.messages.at(-1);\n      if (last) {\n        await this.options.storage.advanceToolResultCursor({\n          bindingId: binding.id,\n          orgId: binding.orgId,\n          factoryProjectId: binding.factoryProjectId,\n          lastMessageId: last.id,\n          lastMessageCreatedAt: last.createdAt instanceof Date ? last.createdAt : new Date(last.createdAt),\n          updatedAt: new Date(),\n        });\n      }\n      if (!result.hasMore) break;\n      page += 1;\n    }\n  }\n\n  private async ingestMessages(\n    binding: FactoryRunBindingRecord,\n    messages: MastraDBMessage[],\n    toolCallIds?: ReadonlySet<string>,\n    preloadedItem?: WorkItemRow,\n  ): Promise<void> {\n    const item = preloadedItem ?? (await this.options.storage.get({ orgId: binding.orgId, id: binding.workItemId }));\n    if (!itemInRuleStage(this.options.boards, item)) return;\n    for (const message of messages) {\n      for (const toolResult of completedToolResults(message)) {\n        if (toolCallIds && !toolCallIds.has(toolResult.toolCallId)) continue;\n        try {\n          await this.options.recordPullRequestProvenance?.({\n            binding,\n            item,\n            assistantMessageId: toolResult.assistantMessageId,\n            toolCallId: toolResult.toolCallId,\n            toolName: toolResult.toolName,\n            toolInput: toolResult.input,\n            toolResult: toolResult.value,\n            status: toolResult.status,\n          });\n        } catch {\n          // Provenance is supporting evidence and must not block authoritative rule ingress.\n        }\n        await this.ingestToolResult(binding, item, toolResult);\n      }\n    }\n  }\n\n  private async ingestToolResult(\n    binding: FactoryRunBindingRecord,\n    item: WorkItemRow,\n    toolResult: CompletedToolResult,\n  ): Promise<void> {\n    const board = boardForWorkItem(item);\n    const rule = resolveBoardToolRule(this.options.boards, board, toolResult.toolName);\n    if (!rule) return;\n    const ingressId = JSON.stringify([\n      binding.id,\n      binding.threadId,\n      toolResult.assistantMessageId,\n      toolResult.toolCallId,\n    ]);\n    const prior = await this.options.storage.getTransitionResultByIngress(\n      binding.orgId,\n      binding.factoryProjectId,\n      ingressId,\n    );\n    if (prior) return;\n    const context: FactoryToolResultRuleContext = {\n      tenant: { orgId: binding.orgId, projectId: binding.factoryProjectId },\n      actor: { type: 'agent', bindingId: binding.id, role: binding.role },\n      ingress: { type: 'toolResult', id: ingressId },\n      cause: `Completed ${toolResult.toolName}`,\n      causalChain: [],\n      configVersion: this.options.configVersion,\n      item: {\n        id: item.id,\n        source: workItemSource(item.externalSource),\n        sourceKey: workItemSourceKey(item),\n        parentWorkItemId: item.parentWorkItemId,\n        title: item.title,\n        url: item.externalSource?.url ?? null,\n        stages: item.stages,\n        acceptedAt: item.acceptedAt,\n        metadata: item.metadata,\n      },\n      board,\n      itemRevision: item.revision,\n      toolName: toolResult.toolName,\n      threadId: binding.threadId,\n      assistantMessageId: toolResult.assistantMessageId,\n      toolCallId: toolResult.toolCallId,\n      result: { status: toolResult.status, value: toolResult.value },\n    };\n\n    let decision: FactoryRuleDecision | void = undefined;\n    let decisions: FactoryCommitDecision[] = [];\n    let outcome: { status: 'accepted' | 'rejected'; code?: string; reason?: string } = { status: 'accepted' };\n    try {\n      decision = await withRuleTimeout(Promise.resolve(rule(Object.freeze(context))));\n      if (decision?.type === 'reject') {\n        outcome = { status: 'rejected', code: decision.code, reason: decision.reason };\n      } else if (decision) {\n        const validated = validateFactoryRuleDecisions([decision]);\n        for (const entry of validated) assertFactoryDecisionTarget(entry, this.options.boards, board);\n        decisions = validated;\n      }\n    } catch (error) {\n      const timedOut = error instanceof Error && error.message === 'FACTORY_RULE_TIMEOUT';\n      outcome = {\n        status: 'rejected',\n        code: timedOut ? 'timeout' : 'rule_error',\n        reason: timedOut\n          ? 'Factory rule evaluation timed out.'\n          : error instanceof Error\n            ? error.message.slice(0, 2_000)\n            : 'Factory tool-result rule failed.',\n      };\n    }\n    const committed = await this.options.storage.commitRuleEvaluation({\n      orgId: binding.orgId,\n      factoryProjectId: binding.factoryProjectId,\n      workItemId: item.id,\n      ingress: { identity: ingressId, triggerType: 'tool.result' },\n      configVersion: this.options.configVersion,\n      expectedRevision: item.revision,\n      actor: { ...context.actor },\n      outcome,\n      decisions: decisions.map(entry => ({ ...entry })),\n      causalChain: [],\n      now: new Date(),\n      // The bound agent's own tool call carries the same consent as its governed moves.\n      consentedBy: `agent:${binding.id}`,\n    });\n    if (committed.status !== 'committed' || !this.options.transitionService) return;\n    for (const entry of decisions) {\n      if (entry.type !== 'transition') continue;\n      await this.options.transitionService.transition({\n        orgId: binding.orgId,\n        factoryProjectId: binding.factoryProjectId,\n        workItemId: item.id,\n        board: entry.board,\n        stage: entry.stage,\n        expectedRevision: item.revision,\n        actor: { type: 'system', id: 'factory-tool-result-rule' },\n        ingress: { type: 'rule', identity: `decision:${entry.idempotencyKey}` },\n        cause: 'tool_result_rule',\n        causalChain: [{ ingressId, decisionType: entry.type }],\n        ...(isApprovedPlanResult(toolResult) ? { planApproved: true } : {}),\n      });\n    }\n  }\n}\n"],"mappings":";;;;;;;AAgCA,MAAM,WAAW;AACjB,MAAM,kBAAkB;AACxB,MAAM,uBAAuB;AAC7B,MAAM,mBAAmB;AACzB,SAAS,UAAU,QAAuB,MAA0D;CAClG,OAAO,QAAQ,uBAAuB,QAAQ,IAAI,IAAI,KAAK,OAAO,KAAK,KAAA;AACzE;AAEA,SAAS,gBAAgB,QAAuB,MAA2D;CACzG,OAAO,UAAU,QAAQ,IAAI,MAAM,KAAA;AACrC;AAuBA,SAAS,qBAAqB,QAAsC;CAClE,IAAI,OAAO,aAAa,iBAAiB,OAAO,WAAW,WAAW,OAAO;CAC7E,IAAI,OAAO,OAAO,UAAU,UAAU,OAAO,OAAO,MAAM,WAAW,gBAAgB;CACrF,IAAI,CAAC,OAAO,SAAS,OAAO,OAAO,UAAU,YAAY,MAAM,QAAQ,OAAO,KAAK,GAAG,OAAO;CAC7F,MAAM,UAAU,OAAO,MAAM;CAC7B,OAAO,OAAO,YAAY,YAAY,QAAQ,WAAW,gBAAgB;AAC3E;AAyBA,SAAS,gCACP,gBACA,sBACiB;CACjB,IAAI,CAAC,kBAAkB,OAAO,eAAe,QAAQ,YACnD,MAAM,IAAI,MAAM,6DAA6D;CAE/E,MAAM,UAAU,eAAe,IAAkE,YAAY;CAC7G,MAAM,UAAU,SAAS,SAAS,QAAQ,KAAK;CAC/C,IAAI,CAAC,SACH,MAAM,IAAI,MAAM,yDAAyD;CAE3E,OAAO;EACL;EACA,eAAe,4BAA4B,EAAE,OAAO,SAAS,MAAM,GAAG,KAAA,GAAW,oBAAoB;CACvG;AACF;AAEA,SAAS,kBAAkB,MAAkC;CAC3D,MAAM,SAAS,KAAK;CACpB,OAAO,SAAS,GAAG,OAAO,cAAc,GAAG,OAAO,KAAK,GAAG,OAAO,eAAe;AAClF;AAEA,SAAS,aAAa,OAAsC;CAE1D,OAAO,EAAE,UADO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,UAAU,WAAW,QAAQ,yBAAA,CACnE,MAAM,GAAG,GAAK,EAAE;AAC5C;AAEA,SAAS,cAAc,OAAsC;CAC3D,IAAI;EACF,OAAO,8BAA8B,KAAK;CAC5C,QAAQ;EACN,OAAO,EAAE,SAAS,oCAAoC;CACxD;AACF;AAEA,SAAS,aAAa,SAAqC;CACzD,MAAM,UAAU,QAAQ;CACxB,IAAI,MAAM,QAAQ,OAAO,GAAG,OAAO;CACnC,IAAI,MAAM,QAAQ,SAAS,KAAK,GAAG,OAAO,QAAQ;CAClD,OAAO,MAAM,QAAQ,SAAS,eAAe,IAAI,QAAQ,kBAAkB,CAAC;AAC9E;AAEA,SAAS,yBAAyB,OAA+B;CAC/D,MAAM,sBAAM,IAAI,IAAY;CAC5B,KAAK,MAAM,WAAW,OAAO;EAC3B,IAAI,CAAC,WAAW,OAAO,YAAY,UAAU;EAC7C,MAAM,cAAe,QAAwC;EAC7D,IAAI,CAAC,MAAM,QAAQ,WAAW,GAAG;EACjC,KAAK,MAAM,aAAa,aAAa;GACnC,IAAI,CAAC,aAAa,OAAO,cAAc,UAAU;GACjD,MAAM,aAAc,UAAuC;GAC3D,IAAI,OAAO,eAAe,UAAU,IAAI,IAAI,UAAU;EACxD;CACF;CACA,OAAO;AACT;AAEA,SAAS,qBAAqB,SAAiD;CAC7E,IAAI,QAAQ,SAAS,aAAa,OAAO,CAAC;CAC1C,MAAM,YAAY,QAAQ,qBAAqB,OAAO,QAAQ,YAAY,IAAI,KAAK,QAAQ,SAAS;CACpG,MAAM,YAAmC,CAAC;CAC1C,KAAK,MAAM,WAAW,aAAa,OAAO,GAAG;EAC3C,IAAI,CAAC,WAAW,OAAO,YAAY,UAAU;EAC7C,MAAM,OAAO;EACb,MAAM,aACJ,KAAK,SAAS,qBAAqB,KAAK,kBAAkB,OAAO,KAAK,mBAAmB,WACpF,KAAK,iBACN;EACN,MAAM,QAAQ,WAAW;EACzB,IAAI,UAAU,YAAY,UAAU,SAAS;EAC7C,MAAM,aAAa,WAAW;EAC9B,MAAM,WAAW,WAAW,YAAY,WAAW;EACnD,IAAI,OAAO,eAAe,YAAY,OAAO,aAAa,UAAU;EACpE,UAAU,KAAK;GACb,oBAAoB,QAAQ;GAC5B,kBAAkB;GAClB;GACA,UAAU,SAAS,MAAM,GAAG,GAAG;GAC/B,OAAO,cAAc,WAAW,QAAQ,CAAC,CAAC;GAC1C,QAAQ,UAAU,UAAU,UAAU;GACtC,OAAO,UAAU,UAAU,aAAa,WAAW,UAAU,WAAW,KAAK,IAAI,cAAc,WAAW,MAAM;EAClH,CAAC;CACH;CACA,OAAO;AACT;AAEA,SAAS,4BACP,UACA,aAC6B;CAC7B,KAAK,IAAI,QAAQ,SAAS,SAAS,GAAG,SAAS,GAAG,SAAS,GAAG;EAC5D,MAAM,UAAU,SAAS;EACzB,IAAI,qBAAqB,OAAO,CAAC,CAAC,MAAK,WAAU,YAAY,IAAI,OAAO,UAAU,CAAC,GAAG,OAAO;CAC/F;AAEF;AAEA,eAAe,cAAc,OAAiC,QAAwC;CACpG,MAAM,aAAa,KAAK,UAAU;EAChC,GAAG;EACH,QAAQ,OAAO,KAAI,SAAQ;GAAC,KAAK;GAAI,KAAK;GAAU,KAAK,OAAO;EAAE,CAAC;CACrE,CAAC;CACD,OAAO,OAAO,KAAK,MAAM,WAAW,OAAO,OAAO,OAAO,WAAW,IAAI,YAAY,CAAC,CAAC,OAAO,UAAU,CAAC,CAAC,CAAC,CAAC,SACzG,KACF;AACF;AAEA,SAAS,WAAW,OAAuB;CACzC,OAAO,MAAM,WAAW,KAAK,OAAO,CAAC,CAAC,WAAW,KAAK,MAAM,CAAC,CAAC,WAAW,KAAK,MAAM;AACtF;AAEA,SAAS,gBAAgB,QAA4F;CACnH,QAAQ,QAAQ,UAAU,MAAA,EAAsD;AAClF;AAEA,SAAS,YAAY,MAA8D;CACjF,KAAK,MAAM,UAAU,CAAC,GAAG,KAAK,kBAAkB,CAAC,CAAC,QAAQ,GAAG;EAC3D,MAAM,QAAQ,gBAAgB,MAAM;EACpC,IAAI,OAAO,OAAO;CACpB;CACA,OAAO,gBAAgB,KAAK,YAAY;AAC1C;AAEA,eAAe,gBAAmB,WAAmC;CACnE,IAAI;CACJ,IAAI;EACF,OAAO,MAAM,QAAQ,KAAK,CACxB,WACA,IAAI,SAAgB,GAAG,WAAW;GAChC,QAAQ,iBAAiB,uBAAO,IAAI,MAAM,sBAAsB,CAAC,GAAG,eAAe;EACrF,CAAC,CACH,CAAC;CACH,UAAU;EACR,IAAI,OAAO,aAAa,KAAK;CAC/B;AACF;AAEA,MAAM,oDAAoC,IAAI,QAAgB;;;;;;AAO9D,SAAgB,gCACd,gBACA,QACM;CACN,eAAe,IAAI,iCAAiC;EAAE,QAAQ;EAAe;CAAO,CAAC;CACrF,QAAQ,KAAK,6DAA6D,EAAE,OAAO,OAAO,CAAC;CAC3F,IAAI,kCAAkC,IAAI,cAAc,GAAG;CAC3D,kCAAkC,IAAI,cAAc;CAIpD,eAHkC,IAAI,YAG7B,CAAC,EAAE,YAAY;EACtB,MAAM;EACN,uBAAO,IAAI,MACT,wHACF;EACA,WAAW;EACX,WAAW;CACb,CAAC;AACH;AAEA,IAAa,6BAAb,MAA8E;CAOzD;CANnB,KAAc;CACd,UAAmB;;CAEnB,uCAAwC,IAAI,QAAgB;CAE5D,YACE,SAuBA;EAvBiB,KAAA,UAAA;CAuBhB;;;;;;;;;CAUH,MAAM,sBAAsB,gBAAmE;EAC7F,MAAM,KAAK,yBAAyB,gBAAgB,KAAA,GAAW,IAAI;CACrE;CAEA,MAAM,aAAa,MAA8C;EAC/D,MAAM,KAAK,yBAAyB,KAAK,cAAc;EACvD,OAAO,KAAK;CACd;CAEA,MAAM,iBAAiB,MAA8D;EACnF,MAAM,UAAU,6BAA6B,KAAK,cAAc;EAChE,IAAI;EACJ,IAAI;GACF,UAAU,UAAU,MAAM,KAAK,QAAQ,QAAQ,wBAAwB,OAAO,IAAI,KAAA;EACpF,QAAQ;GACN,MAAM,KAAK,yBAAyB,KAAK,gBAAgB,KAAA,CAAS;GAClE;EACF;EAKA,MAAM,KAAK,yBAAyB,KAAK,gBAAgB,OAAO;EAChE,IAAI,CAAC,WAAW,QAAQ,WAAW,UAAU;EAC7C,MAAM,uBAAuB,yBAAyB,KAAK,KAAK;EAChE,MAAM,mBAAmB,4BAA4B,KAAK,UAAU,oBAAoB;EACxF,IAAI,kBACF,MAAM,KAAK,eAAe,SAAS,CAAC,gBAAgB,GAAG,oBAAoB;CAE/E;;;;;;;;;;;;CAaA,MAAc,yBACZ,gBACA,SACA,QAAQ,OACO;EACf,IAAI,CAAC,kBAAkB,CAAC,KAAK,QAAQ,oBAAoB;EACzD,MAAM,kBAAkB,eAAe,IAAI,+BAA+B;EAI1E,IAAI,OAAO,KAAK,qBAAqB,OAAO,cAAc;EAC1D,IAAI,CAAC,SAAS,oBAAoB,KAAA,KAAa,iBAAiB,WAAW,eAAe;EAC1F,IAAI,CAAC,SAAS,KAAK,qBAAqB,IAAI,cAAc,GAAG;EAC7D,IAAI;GACF,IAAI,aAAa,WAAW;GAC5B,IAAI,YAAY,KAAA,GAAW;IACzB,MAAM,UAAU,6BAA6B,cAAc;IAC3D,aAAa,UACT,MAAM,KAAK,QAAQ,QAAQ,wBAAwB,OAAO,IAI1D,MAAM,sBAAsB,gBAAgB,KAAK,QAAQ,OAAO;GACtE;GACA,MAAM,KAAK,QAAQ,mBAAmB;IAAE;IAAgB,SAAS;GAAW,CAAC;GAC7E,KAAK,qBAAqB,IAAI,cAAc;EAC9C,SAAS,OAAO;GACd,gCAAgC,gBAAgB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;EACxG;CACF;CAEA,MAAM,mBAAmB,MAAiE;EACxF,MAAM,UAAU,6BAA6B,KAAK,cAAc;EAChE,IAAI,CAAC,SAAS;EACd,MAAM,UAAU,MAAM,KAAK,QAAQ,QAAQ,wBAAwB,OAAO;EAC1E,MAAM,QAAQ,YAAY,IAAI;EAC9B,MAAM,UAAU,QAAQ,KAAK,YAAY,KAAK,KAAK,cAAc;EAEjE,IAAI,CAAC,SAAS;EACd,IAAI,QAAQ,WAAW,UAAU;GAC/B,IAAI,CAAC,WAAW,OAAO,WAAW,UAAU;GAC5C,OAAO;IACL,IAAI;IACJ,UAAU,gBAAgB,MAAM,aAAa;IAC7C,MAAM;IACN,SAAS;IACT,UAAU;IACV,OAAO,EAAE,OAAO,EAAE,QAAQ,OAAO,EAAE;IACnC,YAAY,EAAE,QAAQ,OAAO;IAC7B,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,OAAO,EAAE,EAAE;GACnD;EACF;EAEA,MAAM,OAAO,MAAM,KAAK,QAAQ,QAAQ,IAAI;GAAE,OAAO,QAAQ;GAAO,IAAI,QAAQ;EAAW,CAAC;EAC5F,MAAM,QAAQ,UAAU,KAAK,QAAQ,QAAQ,IAAI;EACjD,IAAI,CAAC,QAAQ,CAAC,OAAO;EAKrB,MAAM,UAAS,MAJQ,KAAK,QAAQ,QAAQ,KAAK;GAC/C,OAAO,QAAQ;GACf,kBAAkB,QAAQ;EAC5B,CAAC,EAAA,CAEE,QAAO,cAAa,UAAU,qBAAqB,KAAK,MAAM,KAAK,qBAAqB,UAAU,EAAE,CAAC,CACrG,MAAM,GAAG,gBAAgB;EAC5B,MAAM,QAAQ,iBAAiB,IAAI;EACnC,MAAM,YAAqC;GACzC,QAAQ;GACR,WAAW,QAAQ;GACnB,QAAQ,KAAK;GACb,UAAU,KAAK;GACf;GACA,MAAM,QAAQ;GACd,eAAe,KAAK,QAAQ;EAC9B;EACA,MAAM,QACJ,UAAU,WACN;GACE,GAAG;GACH;GACA,GAAG,gCACD,KAAK,gBACL,MAAM,KAAK,QAAQ,uBAAuB,QAAQ,gBAAgB,CACpE;EACF,IACA;GAAE,GAAG;GAAW;EAAM;EAC5B,MAAM,WAAW,MAAM,cAAc,OAAO,MAAM;EAClD,IAAI,YAAY,KAAK,UAAU,mBAAmB,KAAK,cAAc,UAAU,OAAO,cAAc,UAClG;EAEF,MAAM,aAAa,OAAO,SACtB,mBAAmB,OAAO,KAAI,cAAa,GAAG,eAAe,UAAU,cAAc,EAAE,GAAG,UAAU,OAAO,CAAC,CAAC,KAAK,IAAI,MACtH;EACJ,MAAM,aAAa,KAAK,QAAQ,OAAO,IAAI,KAAK,CAAC,EAAE,OAAO,MAAM,EAAE,SAAS;EAC3E,MAAM,UACJ,MAAM,WAAW,MAAM,gBAAgB;GAAE,SAAS,MAAM;GAAS,eAAe,MAAM;EAAc,IAAI;EAC1G,MAAM,mBACJ,WAAW,MAAM,UAAU,WAAW,UAAU,EAAE,IAAI,WAAW,KAAK,EAAE,gBAC1D,WAAW,KAAK,KAAK,EAAE,IAAI,KAAK,GAAG,WACxC,WAAW,QAAQ,IAAI,EAAE,cAAc,KAAK,SAAS,YAAY,WAAW,KAAK,QAAQ,aAAa,EAAE,OAChH,UACG,kBAAkB,WAAW,QAAQ,OAAO,EAAE,sBAAsB,WAAW,QAAQ,aAAa,EAAE,MACtG,QACF,UAAU,UAAU,UAAU,aAAa,UAAU,WACnD,oNACA,MACJ,0DAA0D,KAAK,SAAS,6BAA6B,WAAW,UAAU;EAC5H,MAAM,UAAU,WAAW,OAAO,WAAW;EAC7C,OAAO;GACL,IAAI;GACJ;GACA,MAAM,UAAU,UAAU;GAC1B,SAAS;GACT,UAAU,UAAU,0BAA0B,qBAAqB;GACnE,OAAO,EAAE,OAAO,MAAM;GACtB,GAAI,UAAU,EAAE,OAAO,EAAE,OAAO,MAAM,EAAE,IAAI,CAAC;GAC7C,YAAY;IACV,QAAQ;IACR;IACA;IACA,MAAM,QAAQ;IACd,UAAU,KAAK;IACf,GAAI,WAAW,CAAC;GAClB;GACA,UAAU,EAAE,OAAO,EAAE,OAAO,MAAM,EAAE;EACtC;CACF;CAEA,MAAM,2BAA0C;EAC9C,IAAI,CAAC,KAAK,QAAQ,eAAe;EACjC,MAAM,WAAW,MAAM,KAAK,QAAQ,QAAQ,sBAAsB;EAClE,KAAK,MAAM,WAAW,UAAU,MAAM,KAAK,iBAAiB,OAAO;CACrE;CAEA,MAAM,iBAAiB,SAAiD;EACtE,MAAM,SAAS,KAAK,QAAQ;EAC5B,IAAI,CAAC,UAAU,QAAQ,WAAW,UAAU;EAI5C,MAAM,OAAO,MAAM,KAAK,QAAQ,QAAQ,IAAI;GAAE,OAAO,QAAQ;GAAO,IAAI,QAAQ;EAAW,CAAC;EAC5F,IAAI,CAAC,gBAAgB,KAAK,QAAQ,QAAQ,IAAI,GAAG;EACjD,MAAM,SAAS,MAAM,KAAK,QAAQ,QAAQ,oBAAoB,QAAQ,OAAO,QAAQ,kBAAkB,QAAQ,EAAE;EACjH,IAAI,OAAO;EACX,OAAO,MAAM;GACX,MAAM,SAAS,MAAM,OAAO,aAAa;IACvC,UAAU,QAAQ;IAClB,YAAY,QAAQ;IACpB;IACA,SAAS;IACT,GAAI,SAAS,EAAE,QAAQ,EAAE,WAAW,EAAE,OAAO,OAAO,qBAAqB,EAAE,EAAE,IAAI,CAAC;IAClF,SAAS;KAAE,OAAO;KAAa,WAAW;IAAM;GAClD,CAAC;GACD,MAAM,KAAK,eAAe,SAAS,OAAO,UAAU,KAAA,GAAW,IAAI;GACnE,MAAM,OAAO,OAAO,SAAS,GAAG,EAAE;GAClC,IAAI,MACF,MAAM,KAAK,QAAQ,QAAQ,wBAAwB;IACjD,WAAW,QAAQ;IACnB,OAAO,QAAQ;IACf,kBAAkB,QAAQ;IAC1B,eAAe,KAAK;IACpB,sBAAsB,KAAK,qBAAqB,OAAO,KAAK,YAAY,IAAI,KAAK,KAAK,SAAS;IAC/F,2BAAW,IAAI,KAAK;GACtB,CAAC;GAEH,IAAI,CAAC,OAAO,SAAS;GACrB,QAAQ;EACV;CACF;CAEA,MAAc,eACZ,SACA,UACA,aACA,eACe;EACf,MAAM,OAAO,iBAAkB,MAAM,KAAK,QAAQ,QAAQ,IAAI;GAAE,OAAO,QAAQ;GAAO,IAAI,QAAQ;EAAW,CAAC;EAC9G,IAAI,CAAC,gBAAgB,KAAK,QAAQ,QAAQ,IAAI,GAAG;EACjD,KAAK,MAAM,WAAW,UACpB,KAAK,MAAM,cAAc,qBAAqB,OAAO,GAAG;GACtD,IAAI,eAAe,CAAC,YAAY,IAAI,WAAW,UAAU,GAAG;GAC5D,IAAI;IACF,MAAM,KAAK,QAAQ,8BAA8B;KAC/C;KACA;KACA,oBAAoB,WAAW;KAC/B,YAAY,WAAW;KACvB,UAAU,WAAW;KACrB,WAAW,WAAW;KACtB,YAAY,WAAW;KACvB,QAAQ,WAAW;IACrB,CAAC;GACH,QAAQ,CAER;GACA,MAAM,KAAK,iBAAiB,SAAS,MAAM,UAAU;EACvD;CAEJ;CAEA,MAAc,iBACZ,SACA,MACA,YACe;EACf,MAAM,QAAQ,iBAAiB,IAAI;EACnC,MAAM,OAAO,qBAAqB,KAAK,QAAQ,QAAQ,OAAO,WAAW,QAAQ;EACjF,IAAI,CAAC,MAAM;EACX,MAAM,YAAY,KAAK,UAAU;GAC/B,QAAQ;GACR,QAAQ;GACR,WAAW;GACX,WAAW;EACb,CAAC;EAMD,IAAI,MALgB,KAAK,QAAQ,QAAQ,6BACvC,QAAQ,OACR,QAAQ,kBACR,SACF,GACW;EACX,MAAM,UAAwC;GAC5C,QAAQ;IAAE,OAAO,QAAQ;IAAO,WAAW,QAAQ;GAAiB;GACpE,OAAO;IAAE,MAAM;IAAS,WAAW,QAAQ;IAAI,MAAM,QAAQ;GAAK;GAClE,SAAS;IAAE,MAAM;IAAc,IAAI;GAAU;GAC7C,OAAO,aAAa,WAAW;GAC/B,aAAa,CAAC;GACd,eAAe,KAAK,QAAQ;GAC5B,MAAM;IACJ,IAAI,KAAK;IACT,QAAQ,eAAe,KAAK,cAAc;IAC1C,WAAW,kBAAkB,IAAI;IACjC,kBAAkB,KAAK;IACvB,OAAO,KAAK;IACZ,KAAK,KAAK,gBAAgB,OAAO;IACjC,QAAQ,KAAK;IACb,YAAY,KAAK;IACjB,UAAU,KAAK;GACjB;GACA;GACA,cAAc,KAAK;GACnB,UAAU,WAAW;GACrB,UAAU,QAAQ;GAClB,oBAAoB,WAAW;GAC/B,YAAY,WAAW;GACvB,QAAQ;IAAE,QAAQ,WAAW;IAAQ,OAAO,WAAW;GAAM;EAC/D;EAEA,IAAI,WAAuC,KAAA;EAC3C,IAAI,YAAqC,CAAC;EAC1C,IAAI,UAA+E,EAAE,QAAQ,WAAW;EACxG,IAAI;GACF,WAAW,MAAM,gBAAgB,QAAQ,QAAQ,KAAK,OAAO,OAAO,OAAO,CAAC,CAAC,CAAC;GAC9E,IAAI,UAAU,SAAS,UACrB,UAAU;IAAE,QAAQ;IAAY,MAAM,SAAS;IAAM,QAAQ,SAAS;GAAO;QACxE,IAAI,UAAU;IACnB,MAAM,YAAY,6BAA6B,CAAC,QAAQ,CAAC;IACzD,KAAK,MAAM,SAAS,WAAW,4BAA4B,OAAO,KAAK,QAAQ,QAAQ,KAAK;IAC5F,YAAY;GACd;EACF,SAAS,OAAO;GACd,MAAM,WAAW,iBAAiB,SAAS,MAAM,YAAY;GAC7D,UAAU;IACR,QAAQ;IACR,MAAM,WAAW,YAAY;IAC7B,QAAQ,WACJ,uCACA,iBAAiB,QACf,MAAM,QAAQ,MAAM,GAAG,GAAK,IAC5B;GACR;EACF;EAgBA,KAAI,MAfoB,KAAK,QAAQ,QAAQ,qBAAqB;GAChE,OAAO,QAAQ;GACf,kBAAkB,QAAQ;GAC1B,YAAY,KAAK;GACjB,SAAS;IAAE,UAAU;IAAW,aAAa;GAAc;GAC3D,eAAe,KAAK,QAAQ;GAC5B,kBAAkB,KAAK;GACvB,OAAO,EAAE,GAAG,QAAQ,MAAM;GAC1B;GACA,WAAW,UAAU,KAAI,WAAU,EAAE,GAAG,MAAM,EAAE;GAChD,aAAa,CAAC;GACd,qBAAK,IAAI,KAAK;GAEd,aAAa,SAAS,QAAQ;EAChC,CAAC,EAAA,CACa,WAAW,eAAe,CAAC,KAAK,QAAQ,mBAAmB;EACzE,KAAK,MAAM,SAAS,WAAW;GAC7B,IAAI,MAAM,SAAS,cAAc;GACjC,MAAM,KAAK,QAAQ,kBAAkB,WAAW;IAC9C,OAAO,QAAQ;IACf,kBAAkB,QAAQ;IAC1B,YAAY,KAAK;IACjB,OAAO,MAAM;IACb,OAAO,MAAM;IACb,kBAAkB,KAAK;IACvB,OAAO;KAAE,MAAM;KAAU,IAAI;IAA2B;IACxD,SAAS;KAAE,MAAM;KAAQ,UAAU,YAAY,MAAM;IAAiB;IACtE,OAAO;IACP,aAAa,CAAC;KAAE;KAAW,cAAc,MAAM;IAAK,CAAC;IACrD,GAAI,qBAAqB,UAAU,IAAI,EAAE,cAAc,KAAK,IAAI,CAAC;GACnE,CAAC;EACH;CACF;AACF"}

package/dist/rules/start-coordinator.d.ts

@@ -27,6 +27,10 @@ export interface FactoryStartRequest {
     };
     requestContext?: RequestContext;
 }
+export declare class UntrustedSharedSessionError extends Error {
+    readonly sessionId: string;
+    constructor(sessionId: string);
+}
 export declare class WorkItemRepositoryError extends Error {
     readonly code: 'repository_mismatch' | 'repository_ambiguous' | 'repository_unlinked';
     readonly candidates: string[];

package/dist/rules/start-coordinator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"start-coordinator.d.ts","sourceRoot":"","sources":["../../src/rules/start-coordinator.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAM9D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAC;AACvE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACtF,OAAO,KAAK,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AACvG,OAAO,KAAK,EAAwB,0BAA0B,EAAE,MAAM,2CAA2C,CAAC;AAClH,OAAO,KAAK,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,uCAAuC,CAAC;AACnG,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AACxE,OAAO,KAAK,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,MAAM,YAAY,CAAC;AAE5E,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,gBAAgB,EAAE,MAAM,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,8FAA8F;IAC9F,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC,kGAAkG;IAClG,UAAU,EAAE,mBAAmB,CAAC;IAChC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE;QACR,EAAE,CAAC,EAAE,MAAM,CAAC;QACZ,IAAI,EAAE,MAAM,CAAC;QACb,KAAK,EAAE,mBAAmB,CAAC;KAC5B,CAAC;IACF,cAAc,CAAC,EAAE,cAAc,CAAC;CACjC;AAED,qBAAa,uBAAwB,SAAQ,KAAK;IAE9C,QAAQ,CAAC,IAAI,EAAE,qBAAqB,GAAG,sBAAsB,GAAG,qBAAqB;IAErF,QAAQ,CAAC,UAAU,EAAE,MAAM,EAAE;gBAFpB,IAAI,EAAE,qBAAqB,GAAG,sBAAsB,GAAG,qBAAqB,EACrF,OAAO,EAAE,MAAM,EACN,UAAU,GAAE,MAAM,EAAO;CAKrC;AAED,qBAAa,2BAA4B,SAAQ,KAAK;IACpD,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,uBAAuB,EAAE;QAAE,MAAM,EAAE,UAAU,CAAA;KAAE,CAAC,CAAC;gBAE9D,MAAM,EAAE,OAAO,CAAC,uBAAuB,EAAE;QAAE,MAAM,EAAE,UAAU,CAAA;KAAE,CAAC;CAK7E;AAED,MAAM,WAAW,0BAA0B;IACzC,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,SAAS,GAAG,QAAQ,GAAG,OAAO,GAAG,MAAM,GAAG,QAAQ,CAAC;IAClE,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,KAAK,iBAAiB,GAAG,eAAe,CAAC,eAAe,CAAC,CAAC;AA+B1D,qBAAa,uBAAuB;;gBAchC,UAAU,EAAE,iBAAiB,EAC7B,OAAO,EAAE,gBAAgB,EACzB,iBAAiB,CAAC,EAAE,IAAI,CAAC,wBAAwB,EAAE,YAAY,CAAC,EAChE,aAAa,CAAC,EACV,0BAA0B,GAC1B,CAAC,CACC,OAAO,EAAE,mBAAmB,KACzB,0BAA0B,GAAG,SAAS,GAAG,OAAO,CAAC,0BAA0B,GAAG,SAAS,CAAC,CAAC,EAClG,MAAM,CAAC,EAAE,aAAa,EACtB,YAAY,CAAC,EAAE;QAAE,QAAQ,EAAE,sBAAsB,CAAC;QAAC,aAAa,EAAE,oBAAoB,CAAA;KAAE;IAWpF,OAAO,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,0BAA0B,CAAC;CAiMjF"}
+{"version":3,"file":"start-coordinator.d.ts","sourceRoot":"","sources":["../../src/rules/start-coordinator.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAM9D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAC;AACvE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACtF,OAAO,KAAK,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AACvG,OAAO,KAAK,EAAwB,0BAA0B,EAAE,MAAM,2CAA2C,CAAC;AAClH,OAAO,KAAK,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,uCAAuC,CAAC;AACnG,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AAExE,OAAO,KAAK,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,MAAM,YAAY,CAAC;AAE5E,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,gBAAgB,EAAE,MAAM,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,8FAA8F;IAC9F,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC,kGAAkG;IAClG,UAAU,EAAE,mBAAmB,CAAC;IAChC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE;QACR,EAAE,CAAC,EAAE,MAAM,CAAC;QACZ,IAAI,EAAE,MAAM,CAAC;QACb,KAAK,EAAE,mBAAmB,CAAC;KAC5B,CAAC;IACF,cAAc,CAAC,EAAE,cAAc,CAAC;CACjC;AAED,qBAAa,2BAA4B,SAAQ,KAAK;IACxC,QAAQ,CAAC,SAAS,EAAE,MAAM;gBAAjB,SAAS,EAAE,MAAM;CAMvC;AAqBD,qBAAa,uBAAwB,SAAQ,KAAK;IAE9C,QAAQ,CAAC,IAAI,EAAE,qBAAqB,GAAG,sBAAsB,GAAG,qBAAqB;IAErF,QAAQ,CAAC,UAAU,EAAE,MAAM,EAAE;gBAFpB,IAAI,EAAE,qBAAqB,GAAG,sBAAsB,GAAG,qBAAqB,EACrF,OAAO,EAAE,MAAM,EACN,UAAU,GAAE,MAAM,EAAO;CAKrC;AAED,qBAAa,2BAA4B,SAAQ,KAAK;IACpD,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,uBAAuB,EAAE;QAAE,MAAM,EAAE,UAAU,CAAA;KAAE,CAAC,CAAC;gBAE9D,MAAM,EAAE,OAAO,CAAC,uBAAuB,EAAE;QAAE,MAAM,EAAE,UAAU,CAAA;KAAE,CAAC;CAK7E;AAED,MAAM,WAAW,0BAA0B;IACzC,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,SAAS,GAAG,QAAQ,GAAG,OAAO,GAAG,MAAM,GAAG,QAAQ,CAAC;IAClE,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,KAAK,iBAAiB,GAAG,eAAe,CAAC,eAAe,CAAC,CAAC;AA+B1D,qBAAa,uBAAuB;;gBAchC,UAAU,EAAE,iBAAiB,EAC7B,OAAO,EAAE,gBAAgB,EACzB,iBAAiB,CAAC,EAAE,IAAI,CAAC,wBAAwB,EAAE,YAAY,CAAC,EAChE,aAAa,CAAC,EACV,0BAA0B,GAC1B,CAAC,CACC,OAAO,EAAE,mBAAmB,KACzB,0BAA0B,GAAG,SAAS,GAAG,OAAO,CAAC,0BAA0B,GAAG,SAAS,CAAC,CAAC,EAClG,MAAM,CAAC,EAAE,aAAa,EACtB,YAAY,CAAC,EAAE;QAAE,QAAQ,EAAE,sBAAsB,CAAC;QAAC,aAAa,EAAE,oBAAoB,CAAA;KAAE;IAWpF,OAAO,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,0BAA0B,CAAC;CA+MjF"}

package/dist/rules/start-coordinator.js

@@ -1,3 +1,4 @@
+import { externallyAuthoredWorkItem } from "./types.js";
 import { boardForWorkItem } from "../boards/semantics.js";
 import "../boards/index.js";
 import { primeTenantCredentialsForTenant } from "../routes/tenant-credentials.js";
@@ -5,6 +6,29 @@ import { hydrateFactorySession, resolveFactorySessionModel } from "../session/fa
 import { resolveWorkItemRepository } from "../session/work-item-repository.js";
 import { RequestContext } from "@mastra/core/request-context";
 //#region src/rules/start-coordinator.ts
+var UntrustedSharedSessionError = class extends Error {
+	sessionId;
+	constructor(sessionId) {
+		super(`Session ${sessionId} already shares memory with this Factory, so it cannot run untrusted content. Start the run in a new session.`);
+		this.sessionId = sessionId;
+		this.name = "UntrustedSharedSessionError";
+	}
+};
+/**
+* The memory resource a run works on. Trusted runs share the Factory's resource.
+* A run that reads attacker-controllable content (a pull request checkout, or a
+* card written outside the write-access circle) keeps its own resource, so it can
+* neither plant observations that trusted runs read nor read what they observed.
+* A session that was isolated stays isolated; one already sharing memory refuses
+* untrusted work instead of carrying that memory into it.
+*/
+async function runMemoryResource(controller, input) {
+	const existing = await controller.queryThreadById({ threadId: input.sessionId });
+	if (existing?.resourceId === input.sessionId) return input.sessionId;
+	if (!input.untrusted) return existing?.resourceId ?? input.factoryProjectId;
+	if (existing) throw new UntrustedSharedSessionError(input.sessionId);
+	return input.sessionId;
+}
 var WorkItemRepositoryError = class extends Error {
 	code;
 	candidates;
@@ -135,6 +159,14 @@ var FactoryStartCoordinator = class {
 		const untrustedCheckout = request.workItem.input.externalSource?.type === "pull-request";
 		const metadataBaseBranch = request.workItem.input.metadata?.baseBranch;
 		const baseRef = (sourceSession.baseBranch || void 0) ?? (typeof metadataBaseBranch === "string" && metadataBaseBranch ? metadataBaseBranch : void 0);
+		const memoryResourceId = await runMemoryResource(this.#controller, {
+			sessionId: sourceSession.sessionId,
+			factoryProjectId: request.factoryProjectId,
+			untrusted: untrustedCheckout || externallyAuthoredWorkItem(storedItem ?? {
+				externalSource: request.workItem.input.externalSource ?? null,
+				metadata: request.workItem.input.metadata ?? null
+			})
+		});
 		const sessionTags = {
 			factoryProjectId: request.factoryProjectId,
 			projectRepositoryId: sourceSession.projectRepositoryId
@@ -142,7 +174,7 @@ var FactoryStartCoordinator = class {
 		const session = await this.#controller.createSession({
 			id: sourceSession.sessionId,
 			ownerId: request.userId,
-			resourceId: sourceSession.sessionId,
+			resourceId: memoryResourceId,
 			threadId: sourceSession.sessionId,
 			requestContext,
 			tags: sessionTags
@@ -190,7 +222,7 @@ var FactoryStartCoordinator = class {
 				branch: sourceSession.branch,
 				threadId
 			},
-			resourceId: sourceSession.sessionId,
+			resourceId: memoryResourceId,
 			kickoffKey: request.kickoffKey,
 			kickoffMessage: null
 		});
@@ -231,7 +263,7 @@ var FactoryStartCoordinator = class {
 			workItemId: prepared.item.id,
 			bindingId: prepared.binding.id,
 			threadId,
-			resourceId: sourceSession.sessionId,
+			resourceId: memoryResourceId,
 			sessionId: sourceSession.sessionId,
 			branch: sourceSession.branch,
 			revision,
@@ -241,6 +273,6 @@ var FactoryStartCoordinator = class {
 	}
 };
 //#endregion
-export { FactoryStartCoordinator, FactoryStartTransitionError, WorkItemRepositoryError };
+export { FactoryStartCoordinator, FactoryStartTransitionError, UntrustedSharedSessionError, WorkItemRepositoryError };
 
 //# sourceMappingURL=start-coordinator.js.map

package/dist/rules/start-coordinator.js.map

@@ -1 +1 @@
-{"version":3,"file":"start-coordinator.js","names":["#controller","#storage","#transitionService","#sourceControl","#intake","#projects","#modelDefaults"],"sources":["../../src/rules/start-coordinator.ts"],"sourcesContent":["import type { MastraCodeState } from '@mastra/code-sdk/schema';\nimport type { AgentController } from '@mastra/core/agent-controller';\nimport { RequestContext } from '@mastra/core/request-context';\n\nimport { boardForWorkItem } from '../boards/index.js';\nimport { primeTenantCredentialsForTenant } from '../routes/tenant-credentials.js';\nimport { hydrateFactorySession, resolveFactorySessionModel } from '../session/factory-session.js';\nimport { resolveWorkItemRepository } from '../session/work-item-repository.js';\nimport type { IntakeStorage } from '../storage/domains/intake/base.js';\nimport type { ModelDefaultsStorage } from '../storage/domains/model-defaults/base.js';\nimport type { EffectiveModelScope, FactoryProjectsStorage } from '../storage/domains/projects/base.js';\nimport type { SourceControlSession, SourceControlStorageHandle } from '../storage/domains/source-control/base.js';\nimport type { CreateWorkItemInput, WorkItemsStorage } from '../storage/domains/work-items/base.js';\nimport type { FactoryTransitionService } from './transition-service.js';\nimport type { FactoryRuleStage, FactoryTransitionResult } from './types.js';\n\nexport interface FactoryStartRequest {\n  orgId: string;\n  userId: string;\n  factoryProjectId: string;\n  sessionId: string;\n  threadTitle: string;\n  kickoffKey: string;\n  /** Where the arrival path lands the card; a session opened on an existing card names none. */\n  destinationStage?: FactoryRuleStage;\n  /** The run's effective scope; a hybrid Factory's runs use the Factory's model and credentials. */\n  modelScope: EffectiveModelScope;\n  defaultModelId?: string;\n  workItem: {\n    id?: string;\n    role: string;\n    input: CreateWorkItemInput;\n  };\n  requestContext?: RequestContext;\n}\n\nexport class WorkItemRepositoryError extends Error {\n  constructor(\n    readonly code: 'repository_mismatch' | 'repository_ambiguous' | 'repository_unlinked',\n    message: string,\n    readonly candidates: string[] = [],\n  ) {\n    super(message);\n    this.name = 'WorkItemRepositoryError';\n  }\n}\n\nexport class FactoryStartTransitionError extends Error {\n  readonly result: Extract<FactoryTransitionResult, { status: 'rejected' }>;\n\n  constructor(result: Extract<FactoryTransitionResult, { status: 'rejected' }>) {\n    super(result.reason);\n    this.name = 'FactoryStartTransitionError';\n    this.result = result;\n  }\n}\n\nexport interface FactoryStartPreparedResult {\n  workItemId: string;\n  bindingId: string;\n  threadId: string;\n  resourceId: string;\n  sessionId: string;\n  branch: string;\n  revision: number;\n  kickoffStatus: 'pending' | 'leased' | 'retry' | 'sent' | 'failed';\n  replayed: boolean;\n}\n\ntype FactoryController = AgentController<MastraCodeState>;\ntype FactorySession = Awaited<ReturnType<FactoryController['createSession']>>;\n\nasync function resolveSourceSession(\n  storage: SourceControlStorageHandle,\n  request: FactoryStartRequest,\n): Promise<SourceControlSession & { projectRepositoryId: string }> {\n  const session = await storage.sessions.getBySessionId(request.sessionId);\n  if (!session || session.orgId !== request.orgId || session.userId !== request.userId) {\n    throw new Error('Factory session not found');\n  }\n  const projectRepositoryId = session.projectRepositoryId;\n  if (!projectRepositoryId) throw new Error('Factory session repository not found');\n  const projectRepository = await storage.projectRepositories.get({ orgId: request.orgId, id: projectRepositoryId });\n  if (!projectRepository) throw new Error('Factory session repository not found');\n  const connection = await storage.connections.get({ orgId: request.orgId, id: projectRepository.connectionId });\n  if (!connection || connection.factoryProjectId !== request.factoryProjectId) {\n    throw new Error('Factory session does not belong to this project');\n  }\n  return { ...session, projectRepositoryId };\n}\n\nasync function configureThread(session: FactorySession, request: FactoryStartRequest): Promise<string> {\n  const threadId = session.thread.requireId();\n  // Derived from the work item, not a user rename, so leave the title\n  // unpinned and let auto-naming keep refining it.\n  await session.thread.rename({ title: request.threadTitle, pin: false });\n  await session.thread.setSetting({ key: 'factorySessionId', value: request.sessionId });\n  return threadId;\n}\n\nexport class FactoryStartCoordinator {\n  readonly #controller: FactoryController;\n  readonly #storage: WorkItemsStorage;\n  readonly #transitionService?: Pick<FactoryTransitionService, 'transition'>;\n  readonly #sourceControl?:\n    | SourceControlStorageHandle\n    | ((\n        request: FactoryStartRequest,\n      ) => SourceControlStorageHandle | undefined | Promise<SourceControlStorageHandle | undefined>);\n  readonly #intake?: IntakeStorage;\n  readonly #projects?: FactoryProjectsStorage;\n  readonly #modelDefaults?: ModelDefaultsStorage;\n\n  constructor(\n    controller: FactoryController,\n    storage: WorkItemsStorage,\n    transitionService?: Pick<FactoryTransitionService, 'transition'>,\n    sourceControl?:\n      | SourceControlStorageHandle\n      | ((\n          request: FactoryStartRequest,\n        ) => SourceControlStorageHandle | undefined | Promise<SourceControlStorageHandle | undefined>),\n    intake?: IntakeStorage,\n    sessionModel?: { projects: FactoryProjectsStorage; modelDefaults: ModelDefaultsStorage },\n  ) {\n    this.#controller = controller;\n    this.#storage = storage;\n    this.#transitionService = transitionService;\n    this.#sourceControl = sourceControl;\n    this.#intake = intake;\n    this.#projects = sessionModel?.projects;\n    this.#modelDefaults = sessionModel?.modelDefaults;\n  }\n\n  async prepare(request: FactoryStartRequest): Promise<FactoryStartPreparedResult> {\n    const storage = this.#storage;\n    const sourceControl =\n      typeof this.#sourceControl === 'function' ? await this.#sourceControl(request) : this.#sourceControl;\n    if (!sourceControl) throw new Error('Factory source control storage is unavailable');\n    const sourceSession = await resolveSourceSession(sourceControl, request);\n    const sessionModel =\n      this.#projects && this.#modelDefaults\n        ? await resolveFactorySessionModel({\n            projects: this.#projects,\n            modelDefaults: this.#modelDefaults,\n            factoryProjectId: request.factoryProjectId,\n            orgId: request.orgId,\n            ownerUserId: sourceSession.userId,\n            context: 'run',\n          })\n        : { modelScope: request.modelScope, modelId: request.defaultModelId };\n    const storedItem = request.workItem.id\n      ? await storage.get({ orgId: request.orgId, id: request.workItem.id })\n      : null;\n    const intakeConfig = await this.#intake?.getConfig({ orgId: request.orgId, integrationIds: ['linear'] });\n    let repository = await resolveWorkItemRepository({\n      sourceControl,\n      orgId: request.orgId,\n      factoryProjectId: request.factoryProjectId,\n      item: storedItem ?? { metadata: request.workItem.input.metadata ?? null },\n      linearRepositoryMap: intakeConfig?.linear?.repositoryByLinearProject,\n    });\n    if (repository.status === 'ambiguous') {\n      // A retry of this role's existing session keeps its already-chosen\n      // repository; a newly minted session must not choose for the card.\n      if (storedItem?.sessions[request.workItem.role]?.sessionId !== sourceSession.sessionId) {\n        throw new WorkItemRepositoryError(\n          'repository_ambiguous',\n          `Choose a repository for this work item: ${repository.candidates.join(', ')}.`,\n          repository.candidates,\n        );\n      }\n      const link = await sourceControl.projectRepositories.get({\n        orgId: request.orgId,\n        id: sourceSession.projectRepositoryId,\n      });\n      const linked = link && (await sourceControl.repositories.get({ orgId: request.orgId, id: link.repositoryId }));\n      const currentLinks = link\n        ? await sourceControl.projectRepositories.list({ orgId: request.orgId, connectionId: link.connectionId })\n        : [];\n      if (\n        !linked ||\n        !repository.candidates.includes(linked.slug) ||\n        !currentLinks.some(candidate => candidate.id === sourceSession.projectRepositoryId)\n      ) {\n        throw new WorkItemRepositoryError(\n          'repository_unlinked',\n          'The existing session repository is not linked to this Factory.',\n        );\n      }\n      repository = { status: 'resolved', slug: linked.slug, projectRepositoryId: sourceSession.projectRepositoryId };\n    }\n    if (repository.status === 'unlinked') {\n      throw new WorkItemRepositoryError('repository_unlinked', repository.hint);\n    }\n    if (repository.projectRepositoryId !== sourceSession.projectRepositoryId) {\n      throw new WorkItemRepositoryError(\n        'repository_mismatch',\n        `This run session is bound to a different repository than ${repository.slug}.`,\n      );\n    }\n    const requestContext = request.requestContext ?? new RequestContext();\n    // Preserve an authenticated caller when present. Autonomous starts still\n    // need a principal so deployed credential resolution can authenticate the\n    // request before selecting the stamped session owner's exclusive scope.\n    const existingUser = requestContext.get('user');\n    if (!existingUser || typeof existingUser !== 'object') {\n      requestContext.set('user', {\n        workosId: request.userId,\n        organizationId: request.orgId,\n      });\n    }\n    // Sessions kicked off against third-party content (a PR under review, or\n    // any pull-request-sourced work item) get `untrustedCheckout` so the SDK\n    // never ingests the checkout's AGENTS.md/CLAUDE.md into the system prompt\n    // or reminders — those files are attacker-writable in a PR branch.\n    const untrustedCheckout = request.workItem.input.externalSource?.type === 'pull-request';\n    // The trusted ref the SDK may serve project instruction files from on an\n    // untrusted checkout (the PR's base branch). Prefer the session record's\n    // base branch; fall back to the intake metadata captured from the PR.\n    const metadataBaseBranch = request.workItem.input.metadata?.baseBranch;\n    const baseRef =\n      (sourceSession.baseBranch || undefined) ??\n      (typeof metadataBaseBranch === 'string' && metadataBaseBranch ? metadataBaseBranch : undefined);\n    const sessionTags = {\n      factoryProjectId: request.factoryProjectId,\n      projectRepositoryId: sourceSession.projectRepositoryId,\n    };\n    const session = await this.#controller.createSession({\n      id: sourceSession.sessionId,\n      ownerId: request.userId,\n      resourceId: sourceSession.sessionId,\n      threadId: sourceSession.sessionId,\n      requestContext,\n      tags: sessionTags,\n    });\n    // Bound-agent authority gates (the transition tool, the factory-phase\n    // processor, workspace token selection) resolve the session address from\n    // controller state. Seed it server-side — `tags` covers fresh creation,\n    // the explicit setState covers get-or-create returning a session another\n    // caller created without them — so autonomous runs never depend on a\n    // browser connecting to populate the state. `untrustedCheckout` is a\n    // boolean so it rides only on state (tags are string-valued).\n    const targetRepositoryInstruction = `Target repository: ${repository.slug}. Before editing files or creating a pull request, verify this session's checkout matches the target repository.`;\n    const existingPluginInstructions = session.state.get()?.pluginInstructions ?? [];\n    await session.state.set({\n      ...sessionTags,\n      // The authoritative org id for every downstream identity read (the\n      // memory seam's organizationId): the session owner is a USER id, not an\n      // org, so it must never be improvised from ownerId.\n      factoryOrgId: request.orgId,\n      factoryModelScope: sessionModel.modelScope,\n      factoryOwnerUserId: sourceSession.userId,\n      pluginInstructions: [\n        ...existingPluginInstructions.filter(instruction => instruction !== targetRepositoryInstruction),\n        targetRepositoryInstruction,\n      ],\n      ...(untrustedCheckout ? { untrustedCheckout: true, ...(baseRef ? { baseRef } : {}) } : {}),\n    });\n    await primeTenantCredentialsForTenant({\n      orgId: request.orgId,\n      userId: sourceSession.userId,\n      credentialScope: sessionModel.modelScope,\n    });\n    // Apply the factory's main model before any model-dependent run work.\n    // Observational-memory settings are loaded per invocation by the input processor.\n    await hydrateFactorySession(session, {\n      orgId: request.orgId,\n      modelScope: sessionModel.modelScope,\n      ownerUserId: sourceSession.userId,\n      defaultModelId: sessionModel.modelId,\n    });\n    // The tool is `requireApproval`, and that prompt parks the run whether or not\n    // someone pressed Start — a person is reading the plan, not an approval queue.\n    // Starting the run was already the say-so; the rules engine still governs.\n    await session.permissions.setForTool({ toolName: 'factory_transition_work_item', policy: 'allow' });\n    const threadId = await configureThread(session, request);\n    const prepared = await storage.prepareRunStart({\n      orgId: request.orgId,\n      userId: request.userId,\n      factoryProjectId: request.factoryProjectId,\n      workItem: { id: request.workItem.id, input: request.workItem.input },\n      role: request.workItem.role,\n      session: { sessionId: sourceSession.sessionId, branch: sourceSession.branch, threadId },\n      resourceId: sourceSession.sessionId,\n      kickoffKey: request.kickoffKey,\n      kickoffMessage: null,\n    });\n    await session.thread.setSetting({ key: 'factoryWorkItemId', value: prepared.item.id });\n\n    let revision = prepared.item.revision;\n    const destinationStage = request.destinationStage;\n    if (destinationStage && (prepared.item.stages.length !== 1 || prepared.item.stages[0] !== destinationStage)) {\n      if (!this.#transitionService) throw new Error('Factory transition service is unavailable.');\n      const transition = await this.#transitionService.transition({\n        orgId: request.orgId,\n        factoryProjectId: request.factoryProjectId,\n        workItemId: prepared.item.id,\n        board: boardForWorkItem(prepared.item),\n        stage: destinationStage,\n        expectedRevision: prepared.item.revision,\n        actor: { type: 'human', id: request.userId },\n        ingress: { type: 'human', identity: `start:${request.kickoffKey}:transition` },\n        cause: 'run_start',\n      });\n      if (transition.status === 'rejected') {\n        await storage.markPendingStart(prepared.binding.id, 'failed', transition.reason);\n        throw new FactoryStartTransitionError(transition);\n      }\n      revision = transition.revision;\n    }\n\n    await storage.markPendingStart(prepared.binding.id, 'sent');\n    prepared.pendingStart.status = 'sent';\n\n    return {\n      workItemId: prepared.item.id,\n      bindingId: prepared.binding.id,\n      threadId,\n      resourceId: sourceSession.sessionId,\n      sessionId: sourceSession.sessionId,\n      branch: sourceSession.branch,\n      revision,\n      kickoffStatus: prepared.pendingStart.status,\n      replayed: prepared.replayed,\n    };\n  }\n}\n"],"mappings":";;;;;;;AAoCA,IAAa,0BAAb,cAA6C,MAAM;CAEtC;CAEA;CAHX,YACE,MACA,SACA,aAAgC,CAAC,GACjC;EACA,MAAM,OAAO;EAJJ,KAAA,OAAA;EAEA,KAAA,aAAA;EAGT,KAAK,OAAO;CACd;AACF;AAEA,IAAa,8BAAb,cAAiD,MAAM;CACrD;CAEA,YAAY,QAAkE;EAC5E,MAAM,OAAO,MAAM;EACnB,KAAK,OAAO;EACZ,KAAK,SAAS;CAChB;AACF;AAiBA,eAAe,qBACb,SACA,SACiE;CACjE,MAAM,UAAU,MAAM,QAAQ,SAAS,eAAe,QAAQ,SAAS;CACvE,IAAI,CAAC,WAAW,QAAQ,UAAU,QAAQ,SAAS,QAAQ,WAAW,QAAQ,QAC5E,MAAM,IAAI,MAAM,2BAA2B;CAE7C,MAAM,sBAAsB,QAAQ;CACpC,IAAI,CAAC,qBAAqB,MAAM,IAAI,MAAM,sCAAsC;CAChF,MAAM,oBAAoB,MAAM,QAAQ,oBAAoB,IAAI;EAAE,OAAO,QAAQ;EAAO,IAAI;CAAoB,CAAC;CACjH,IAAI,CAAC,mBAAmB,MAAM,IAAI,MAAM,sCAAsC;CAC9E,MAAM,aAAa,MAAM,QAAQ,YAAY,IAAI;EAAE,OAAO,QAAQ;EAAO,IAAI,kBAAkB;CAAa,CAAC;CAC7G,IAAI,CAAC,cAAc,WAAW,qBAAqB,QAAQ,kBACzD,MAAM,IAAI,MAAM,iDAAiD;CAEnE,OAAO;EAAE,GAAG;EAAS;CAAoB;AAC3C;AAEA,eAAe,gBAAgB,SAAyB,SAA+C;CACrG,MAAM,WAAW,QAAQ,OAAO,UAAU;CAG1C,MAAM,QAAQ,OAAO,OAAO;EAAE,OAAO,QAAQ;EAAa,KAAK;CAAM,CAAC;CACtE,MAAM,QAAQ,OAAO,WAAW;EAAE,KAAK;EAAoB,OAAO,QAAQ;CAAU,CAAC;CACrF,OAAO;AACT;AAEA,IAAa,0BAAb,MAAqC;CACnC;CACA;CACA;CACA;CAKA;CACA;CACA;CAEA,YACE,YACA,SACA,mBACA,eAKA,QACA,cACA;EACA,KAAKA,cAAc;EACnB,KAAKC,WAAW;EAChB,KAAKC,qBAAqB;EAC1B,KAAKC,iBAAiB;EACtB,KAAKC,UAAU;EACf,KAAKC,YAAY,cAAc;EAC/B,KAAKC,iBAAiB,cAAc;CACtC;CAEA,MAAM,QAAQ,SAAmE;EAC/E,MAAM,UAAU,KAAKL;EACrB,MAAM,gBACJ,OAAO,KAAKE,mBAAmB,aAAa,MAAM,KAAKA,eAAe,OAAO,IAAI,KAAKA;EACxF,IAAI,CAAC,eAAe,MAAM,IAAI,MAAM,+CAA+C;EACnF,MAAM,gBAAgB,MAAM,qBAAqB,eAAe,OAAO;EACvE,MAAM,eACJ,KAAKE,aAAa,KAAKC,iBACnB,MAAM,2BAA2B;GAC/B,UAAU,KAAKD;GACf,eAAe,KAAKC;GACpB,kBAAkB,QAAQ;GAC1B,OAAO,QAAQ;GACf,aAAa,cAAc;GAC3B,SAAS;EACX,CAAC,IACD;GAAE,YAAY,QAAQ;GAAY,SAAS,QAAQ;EAAe;EACxE,MAAM,aAAa,QAAQ,SAAS,KAChC,MAAM,QAAQ,IAAI;GAAE,OAAO,QAAQ;GAAO,IAAI,QAAQ,SAAS;EAAG,CAAC,IACnE;EACJ,MAAM,eAAe,MAAM,KAAKF,SAAS,UAAU;GAAE,OAAO,QAAQ;GAAO,gBAAgB,CAAC,QAAQ;EAAE,CAAC;EACvG,IAAI,aAAa,MAAM,0BAA0B;GAC/C;GACA,OAAO,QAAQ;GACf,kBAAkB,QAAQ;GAC1B,MAAM,cAAc,EAAE,UAAU,QAAQ,SAAS,MAAM,YAAY,KAAK;GACxE,qBAAqB,cAAc,QAAQ;EAC7C,CAAC;EACD,IAAI,WAAW,WAAW,aAAa;GAGrC,IAAI,YAAY,SAAS,QAAQ,SAAS,KAAK,EAAE,cAAc,cAAc,WAC3E,MAAM,IAAI,wBACR,wBACA,2CAA2C,WAAW,WAAW,KAAK,IAAI,EAAE,IAC5E,WAAW,UACb;GAEF,MAAM,OAAO,MAAM,cAAc,oBAAoB,IAAI;IACvD,OAAO,QAAQ;IACf,IAAI,cAAc;GACpB,CAAC;GACD,MAAM,SAAS,QAAS,MAAM,cAAc,aAAa,IAAI;IAAE,OAAO,QAAQ;IAAO,IAAI,KAAK;GAAa,CAAC;GAC5G,MAAM,eAAe,OACjB,MAAM,cAAc,oBAAoB,KAAK;IAAE,OAAO,QAAQ;IAAO,cAAc,KAAK;GAAa,CAAC,IACtG,CAAC;GACL,IACE,CAAC,UACD,CAAC,WAAW,WAAW,SAAS,OAAO,IAAI,KAC3C,CAAC,aAAa,MAAK,cAAa,UAAU,OAAO,cAAc,mBAAmB,GAElF,MAAM,IAAI,wBACR,uBACA,gEACF;GAEF,aAAa;IAAE,QAAQ;IAAY,MAAM,OAAO;IAAM,qBAAqB,cAAc;GAAoB;EAC/G;EACA,IAAI,WAAW,WAAW,YACxB,MAAM,IAAI,wBAAwB,uBAAuB,WAAW,IAAI;EAE1E,IAAI,WAAW,wBAAwB,cAAc,qBACnD,MAAM,IAAI,wBACR,uBACA,4DAA4D,WAAW,KAAK,EAC9E;EAEF,MAAM,iBAAiB,QAAQ,kBAAkB,IAAI,eAAe;EAIpE,MAAM,eAAe,eAAe,IAAI,MAAM;EAC9C,IAAI,CAAC,gBAAgB,OAAO,iBAAiB,UAC3C,eAAe,IAAI,QAAQ;GACzB,UAAU,QAAQ;GAClB,gBAAgB,QAAQ;EAC1B,CAAC;EAMH,MAAM,oBAAoB,QAAQ,SAAS,MAAM,gBAAgB,SAAS;EAI1E,MAAM,qBAAqB,QAAQ,SAAS,MAAM,UAAU;EAC5D,MAAM,WACH,cAAc,cAAc,KAAA,OAC5B,OAAO,uBAAuB,YAAY,qBAAqB,qBAAqB,KAAA;EACvF,MAAM,cAAc;GAClB,kBAAkB,QAAQ;GAC1B,qBAAqB,cAAc;EACrC;EACA,MAAM,UAAU,MAAM,KAAKJ,YAAY,cAAc;GACnD,IAAI,cAAc;GAClB,SAAS,QAAQ;GACjB,YAAY,cAAc;GAC1B,UAAU,cAAc;GACxB;GACA,MAAM;EACR,CAAC;EAQD,MAAM,8BAA8B,sBAAsB,WAAW,KAAK;EAC1E,MAAM,6BAA6B,QAAQ,MAAM,IAAI,CAAC,EAAE,sBAAsB,CAAC;EAC/E,MAAM,QAAQ,MAAM,IAAI;GACtB,GAAG;GAIH,cAAc,QAAQ;GACtB,mBAAmB,aAAa;GAChC,oBAAoB,cAAc;GAClC,oBAAoB,CAClB,GAAG,2BAA2B,QAAO,gBAAe,gBAAgB,2BAA2B,GAC/F,2BACF;GACA,GAAI,oBAAoB;IAAE,mBAAmB;IAAM,GAAI,UAAU,EAAE,QAAQ,IAAI,CAAC;GAAG,IAAI,CAAC;EAC1F,CAAC;EACD,MAAM,gCAAgC;GACpC,OAAO,QAAQ;GACf,QAAQ,cAAc;GACtB,iBAAiB,aAAa;EAChC,CAAC;EAGD,MAAM,sBAAsB,SAAS;GACnC,OAAO,QAAQ;GACf,YAAY,aAAa;GACzB,aAAa,cAAc;GAC3B,gBAAgB,aAAa;EAC/B,CAAC;EAID,MAAM,QAAQ,YAAY,WAAW;GAAE,UAAU;GAAgC,QAAQ;EAAQ,CAAC;EAClG,MAAM,WAAW,MAAM,gBAAgB,SAAS,OAAO;EACvD,MAAM,WAAW,MAAM,QAAQ,gBAAgB;GAC7C,OAAO,QAAQ;GACf,QAAQ,QAAQ;GAChB,kBAAkB,QAAQ;GAC1B,UAAU;IAAE,IAAI,QAAQ,SAAS;IAAI,OAAO,QAAQ,SAAS;GAAM;GACnE,MAAM,QAAQ,SAAS;GACvB,SAAS;IAAE,WAAW,cAAc;IAAW,QAAQ,cAAc;IAAQ;GAAS;GACtF,YAAY,cAAc;GAC1B,YAAY,QAAQ;GACpB,gBAAgB;EAClB,CAAC;EACD,MAAM,QAAQ,OAAO,WAAW;GAAE,KAAK;GAAqB,OAAO,SAAS,KAAK;EAAG,CAAC;EAErF,IAAI,WAAW,SAAS,KAAK;EAC7B,MAAM,mBAAmB,QAAQ;EACjC,IAAI,qBAAqB,SAAS,KAAK,OAAO,WAAW,KAAK,SAAS,KAAK,OAAO,OAAO,mBAAmB;GAC3G,IAAI,CAAC,KAAKE,oBAAoB,MAAM,IAAI,MAAM,4CAA4C;GAC1F,MAAM,aAAa,MAAM,KAAKA,mBAAmB,WAAW;IAC1D,OAAO,QAAQ;IACf,kBAAkB,QAAQ;IAC1B,YAAY,SAAS,KAAK;IAC1B,OAAO,iBAAiB,SAAS,IAAI;IACrC,OAAO;IACP,kBAAkB,SAAS,KAAK;IAChC,OAAO;KAAE,MAAM;KAAS,IAAI,QAAQ;IAAO;IAC3C,SAAS;KAAE,MAAM;KAAS,UAAU,SAAS,QAAQ,WAAW;IAAa;IAC7E,OAAO;GACT,CAAC;GACD,IAAI,WAAW,WAAW,YAAY;IACpC,MAAM,QAAQ,iBAAiB,SAAS,QAAQ,IAAI,UAAU,WAAW,MAAM;IAC/E,MAAM,IAAI,4BAA4B,UAAU;GAClD;GACA,WAAW,WAAW;EACxB;EAEA,MAAM,QAAQ,iBAAiB,SAAS,QAAQ,IAAI,MAAM;EAC1D,SAAS,aAAa,SAAS;EAE/B,OAAO;GACL,YAAY,SAAS,KAAK;GAC1B,WAAW,SAAS,QAAQ;GAC5B;GACA,YAAY,cAAc;GAC1B,WAAW,cAAc;GACzB,QAAQ,cAAc;GACtB;GACA,eAAe,SAAS,aAAa;GACrC,UAAU,SAAS;EACrB;CACF;AACF"}
+{"version":3,"file":"start-coordinator.js","names":["#controller","#storage","#transitionService","#sourceControl","#intake","#projects","#modelDefaults"],"sources":["../../src/rules/start-coordinator.ts"],"sourcesContent":["import type { MastraCodeState } from '@mastra/code-sdk/schema';\nimport type { AgentController } from '@mastra/core/agent-controller';\nimport { RequestContext } from '@mastra/core/request-context';\n\nimport { boardForWorkItem } from '../boards/index.js';\nimport { primeTenantCredentialsForTenant } from '../routes/tenant-credentials.js';\nimport { hydrateFactorySession, resolveFactorySessionModel } from '../session/factory-session.js';\nimport { resolveWorkItemRepository } from '../session/work-item-repository.js';\nimport type { IntakeStorage } from '../storage/domains/intake/base.js';\nimport type { ModelDefaultsStorage } from '../storage/domains/model-defaults/base.js';\nimport type { EffectiveModelScope, FactoryProjectsStorage } from '../storage/domains/projects/base.js';\nimport type { SourceControlSession, SourceControlStorageHandle } from '../storage/domains/source-control/base.js';\nimport type { CreateWorkItemInput, WorkItemsStorage } from '../storage/domains/work-items/base.js';\nimport type { FactoryTransitionService } from './transition-service.js';\nimport { externallyAuthoredWorkItem } from './types.js';\nimport type { FactoryRuleStage, FactoryTransitionResult } from './types.js';\n\nexport interface FactoryStartRequest {\n  orgId: string;\n  userId: string;\n  factoryProjectId: string;\n  sessionId: string;\n  threadTitle: string;\n  kickoffKey: string;\n  /** Where the arrival path lands the card; a session opened on an existing card names none. */\n  destinationStage?: FactoryRuleStage;\n  /** The run's effective scope; a hybrid Factory's runs use the Factory's model and credentials. */\n  modelScope: EffectiveModelScope;\n  defaultModelId?: string;\n  workItem: {\n    id?: string;\n    role: string;\n    input: CreateWorkItemInput;\n  };\n  requestContext?: RequestContext;\n}\n\nexport class UntrustedSharedSessionError extends Error {\n  constructor(readonly sessionId: string) {\n    super(\n      `Session ${sessionId} already shares memory with this Factory, so it cannot run untrusted content. Start the run in a new session.`,\n    );\n    this.name = 'UntrustedSharedSessionError';\n  }\n}\n\n/**\n * The memory resource a run works on. Trusted runs share the Factory's resource.\n * A run that reads attacker-controllable content (a pull request checkout, or a\n * card written outside the write-access circle) keeps its own resource, so it can\n * neither plant observations that trusted runs read nor read what they observed.\n * A session that was isolated stays isolated; one already sharing memory refuses\n * untrusted work instead of carrying that memory into it.\n */\nasync function runMemoryResource(\n  controller: Pick<FactoryController, 'queryThreadById'>,\n  input: { sessionId: string; factoryProjectId: string; untrusted: boolean },\n): Promise<string> {\n  const existing = await controller.queryThreadById({ threadId: input.sessionId });\n  if (existing?.resourceId === input.sessionId) return input.sessionId;\n  if (!input.untrusted) return existing?.resourceId ?? input.factoryProjectId;\n  if (existing) throw new UntrustedSharedSessionError(input.sessionId);\n  return input.sessionId;\n}\n\nexport class WorkItemRepositoryError extends Error {\n  constructor(\n    readonly code: 'repository_mismatch' | 'repository_ambiguous' | 'repository_unlinked',\n    message: string,\n    readonly candidates: string[] = [],\n  ) {\n    super(message);\n    this.name = 'WorkItemRepositoryError';\n  }\n}\n\nexport class FactoryStartTransitionError extends Error {\n  readonly result: Extract<FactoryTransitionResult, { status: 'rejected' }>;\n\n  constructor(result: Extract<FactoryTransitionResult, { status: 'rejected' }>) {\n    super(result.reason);\n    this.name = 'FactoryStartTransitionError';\n    this.result = result;\n  }\n}\n\nexport interface FactoryStartPreparedResult {\n  workItemId: string;\n  bindingId: string;\n  threadId: string;\n  resourceId: string;\n  sessionId: string;\n  branch: string;\n  revision: number;\n  kickoffStatus: 'pending' | 'leased' | 'retry' | 'sent' | 'failed';\n  replayed: boolean;\n}\n\ntype FactoryController = AgentController<MastraCodeState>;\ntype FactorySession = Awaited<ReturnType<FactoryController['createSession']>>;\n\nasync function resolveSourceSession(\n  storage: SourceControlStorageHandle,\n  request: FactoryStartRequest,\n): Promise<SourceControlSession & { projectRepositoryId: string }> {\n  const session = await storage.sessions.getBySessionId(request.sessionId);\n  if (!session || session.orgId !== request.orgId || session.userId !== request.userId) {\n    throw new Error('Factory session not found');\n  }\n  const projectRepositoryId = session.projectRepositoryId;\n  if (!projectRepositoryId) throw new Error('Factory session repository not found');\n  const projectRepository = await storage.projectRepositories.get({ orgId: request.orgId, id: projectRepositoryId });\n  if (!projectRepository) throw new Error('Factory session repository not found');\n  const connection = await storage.connections.get({ orgId: request.orgId, id: projectRepository.connectionId });\n  if (!connection || connection.factoryProjectId !== request.factoryProjectId) {\n    throw new Error('Factory session does not belong to this project');\n  }\n  return { ...session, projectRepositoryId };\n}\n\nasync function configureThread(session: FactorySession, request: FactoryStartRequest): Promise<string> {\n  const threadId = session.thread.requireId();\n  // Derived from the work item, not a user rename, so leave the title\n  // unpinned and let auto-naming keep refining it.\n  await session.thread.rename({ title: request.threadTitle, pin: false });\n  await session.thread.setSetting({ key: 'factorySessionId', value: request.sessionId });\n  return threadId;\n}\n\nexport class FactoryStartCoordinator {\n  readonly #controller: FactoryController;\n  readonly #storage: WorkItemsStorage;\n  readonly #transitionService?: Pick<FactoryTransitionService, 'transition'>;\n  readonly #sourceControl?:\n    | SourceControlStorageHandle\n    | ((\n        request: FactoryStartRequest,\n      ) => SourceControlStorageHandle | undefined | Promise<SourceControlStorageHandle | undefined>);\n  readonly #intake?: IntakeStorage;\n  readonly #projects?: FactoryProjectsStorage;\n  readonly #modelDefaults?: ModelDefaultsStorage;\n\n  constructor(\n    controller: FactoryController,\n    storage: WorkItemsStorage,\n    transitionService?: Pick<FactoryTransitionService, 'transition'>,\n    sourceControl?:\n      | SourceControlStorageHandle\n      | ((\n          request: FactoryStartRequest,\n        ) => SourceControlStorageHandle | undefined | Promise<SourceControlStorageHandle | undefined>),\n    intake?: IntakeStorage,\n    sessionModel?: { projects: FactoryProjectsStorage; modelDefaults: ModelDefaultsStorage },\n  ) {\n    this.#controller = controller;\n    this.#storage = storage;\n    this.#transitionService = transitionService;\n    this.#sourceControl = sourceControl;\n    this.#intake = intake;\n    this.#projects = sessionModel?.projects;\n    this.#modelDefaults = sessionModel?.modelDefaults;\n  }\n\n  async prepare(request: FactoryStartRequest): Promise<FactoryStartPreparedResult> {\n    const storage = this.#storage;\n    const sourceControl =\n      typeof this.#sourceControl === 'function' ? await this.#sourceControl(request) : this.#sourceControl;\n    if (!sourceControl) throw new Error('Factory source control storage is unavailable');\n    const sourceSession = await resolveSourceSession(sourceControl, request);\n    const sessionModel =\n      this.#projects && this.#modelDefaults\n        ? await resolveFactorySessionModel({\n            projects: this.#projects,\n            modelDefaults: this.#modelDefaults,\n            factoryProjectId: request.factoryProjectId,\n            orgId: request.orgId,\n            ownerUserId: sourceSession.userId,\n            context: 'run',\n          })\n        : { modelScope: request.modelScope, modelId: request.defaultModelId };\n    const storedItem = request.workItem.id\n      ? await storage.get({ orgId: request.orgId, id: request.workItem.id })\n      : null;\n    const intakeConfig = await this.#intake?.getConfig({ orgId: request.orgId, integrationIds: ['linear'] });\n    let repository = await resolveWorkItemRepository({\n      sourceControl,\n      orgId: request.orgId,\n      factoryProjectId: request.factoryProjectId,\n      item: storedItem ?? { metadata: request.workItem.input.metadata ?? null },\n      linearRepositoryMap: intakeConfig?.linear?.repositoryByLinearProject,\n    });\n    if (repository.status === 'ambiguous') {\n      // A retry of this role's existing session keeps its already-chosen\n      // repository; a newly minted session must not choose for the card.\n      if (storedItem?.sessions[request.workItem.role]?.sessionId !== sourceSession.sessionId) {\n        throw new WorkItemRepositoryError(\n          'repository_ambiguous',\n          `Choose a repository for this work item: ${repository.candidates.join(', ')}.`,\n          repository.candidates,\n        );\n      }\n      const link = await sourceControl.projectRepositories.get({\n        orgId: request.orgId,\n        id: sourceSession.projectRepositoryId,\n      });\n      const linked = link && (await sourceControl.repositories.get({ orgId: request.orgId, id: link.repositoryId }));\n      const currentLinks = link\n        ? await sourceControl.projectRepositories.list({ orgId: request.orgId, connectionId: link.connectionId })\n        : [];\n      if (\n        !linked ||\n        !repository.candidates.includes(linked.slug) ||\n        !currentLinks.some(candidate => candidate.id === sourceSession.projectRepositoryId)\n      ) {\n        throw new WorkItemRepositoryError(\n          'repository_unlinked',\n          'The existing session repository is not linked to this Factory.',\n        );\n      }\n      repository = { status: 'resolved', slug: linked.slug, projectRepositoryId: sourceSession.projectRepositoryId };\n    }\n    if (repository.status === 'unlinked') {\n      throw new WorkItemRepositoryError('repository_unlinked', repository.hint);\n    }\n    if (repository.projectRepositoryId !== sourceSession.projectRepositoryId) {\n      throw new WorkItemRepositoryError(\n        'repository_mismatch',\n        `This run session is bound to a different repository than ${repository.slug}.`,\n      );\n    }\n    const requestContext = request.requestContext ?? new RequestContext();\n    // Preserve an authenticated caller when present. Autonomous starts still\n    // need a principal so deployed credential resolution can authenticate the\n    // request before selecting the stamped session owner's exclusive scope.\n    const existingUser = requestContext.get('user');\n    if (!existingUser || typeof existingUser !== 'object') {\n      requestContext.set('user', {\n        workosId: request.userId,\n        organizationId: request.orgId,\n      });\n    }\n    // Sessions kicked off against third-party content (a PR under review, or\n    // any pull-request-sourced work item) get `untrustedCheckout` so the SDK\n    // never ingests the checkout's AGENTS.md/CLAUDE.md into the system prompt\n    // or reminders — those files are attacker-writable in a PR branch.\n    const untrustedCheckout = request.workItem.input.externalSource?.type === 'pull-request';\n    // The trusted ref the SDK may serve project instruction files from on an\n    // untrusted checkout (the PR's base branch). Prefer the session record's\n    // base branch; fall back to the intake metadata captured from the PR.\n    const metadataBaseBranch = request.workItem.input.metadata?.baseBranch;\n    const baseRef =\n      (sourceSession.baseBranch || undefined) ??\n      (typeof metadataBaseBranch === 'string' && metadataBaseBranch ? metadataBaseBranch : undefined);\n    const memoryResourceId = await runMemoryResource(this.#controller, {\n      sessionId: sourceSession.sessionId,\n      factoryProjectId: request.factoryProjectId,\n      untrusted:\n        untrustedCheckout ||\n        externallyAuthoredWorkItem(\n          storedItem ?? {\n            externalSource: request.workItem.input.externalSource ?? null,\n            metadata: request.workItem.input.metadata ?? null,\n          },\n        ),\n    });\n    const sessionTags = {\n      factoryProjectId: request.factoryProjectId,\n      projectRepositoryId: sourceSession.projectRepositoryId,\n    };\n    // The run is addressed by its session id; its threads and memory belong to\n    // the Factory, so concurrent runs share one memory resource.\n    const session = await this.#controller.createSession({\n      id: sourceSession.sessionId,\n      ownerId: request.userId,\n      resourceId: memoryResourceId,\n      threadId: sourceSession.sessionId,\n      requestContext,\n      tags: sessionTags,\n    });\n    // Bound-agent authority gates (the transition tool, the factory-phase\n    // processor, workspace token selection) resolve the session address from\n    // controller state. Seed it server-side — `tags` covers fresh creation,\n    // the explicit setState covers get-or-create returning a session another\n    // caller created without them — so autonomous runs never depend on a\n    // browser connecting to populate the state. `untrustedCheckout` is a\n    // boolean so it rides only on state (tags are string-valued).\n    const targetRepositoryInstruction = `Target repository: ${repository.slug}. Before editing files or creating a pull request, verify this session's checkout matches the target repository.`;\n    const existingPluginInstructions = session.state.get()?.pluginInstructions ?? [];\n    await session.state.set({\n      ...sessionTags,\n      // The authoritative org id for every downstream identity read (the\n      // memory seam's organizationId): the session owner is a USER id, not an\n      // org, so it must never be improvised from ownerId.\n      factoryOrgId: request.orgId,\n      factoryModelScope: sessionModel.modelScope,\n      factoryOwnerUserId: sourceSession.userId,\n      pluginInstructions: [\n        ...existingPluginInstructions.filter(instruction => instruction !== targetRepositoryInstruction),\n        targetRepositoryInstruction,\n      ],\n      ...(untrustedCheckout ? { untrustedCheckout: true, ...(baseRef ? { baseRef } : {}) } : {}),\n    });\n    await primeTenantCredentialsForTenant({\n      orgId: request.orgId,\n      userId: sourceSession.userId,\n      credentialScope: sessionModel.modelScope,\n    });\n    // Apply the factory's main model before any model-dependent run work.\n    // Observational-memory settings are loaded per invocation by the input processor.\n    await hydrateFactorySession(session, {\n      orgId: request.orgId,\n      modelScope: sessionModel.modelScope,\n      ownerUserId: sourceSession.userId,\n      defaultModelId: sessionModel.modelId,\n    });\n    // The tool is `requireApproval`, and that prompt parks the run whether or not\n    // someone pressed Start — a person is reading the plan, not an approval queue.\n    // Starting the run was already the say-so; the rules engine still governs.\n    await session.permissions.setForTool({ toolName: 'factory_transition_work_item', policy: 'allow' });\n    const threadId = await configureThread(session, request);\n    const prepared = await storage.prepareRunStart({\n      orgId: request.orgId,\n      userId: request.userId,\n      factoryProjectId: request.factoryProjectId,\n      workItem: { id: request.workItem.id, input: request.workItem.input },\n      role: request.workItem.role,\n      session: { sessionId: sourceSession.sessionId, branch: sourceSession.branch, threadId },\n      resourceId: memoryResourceId,\n      kickoffKey: request.kickoffKey,\n      kickoffMessage: null,\n    });\n    await session.thread.setSetting({ key: 'factoryWorkItemId', value: prepared.item.id });\n\n    let revision = prepared.item.revision;\n    const destinationStage = request.destinationStage;\n    if (destinationStage && (prepared.item.stages.length !== 1 || prepared.item.stages[0] !== destinationStage)) {\n      if (!this.#transitionService) throw new Error('Factory transition service is unavailable.');\n      const transition = await this.#transitionService.transition({\n        orgId: request.orgId,\n        factoryProjectId: request.factoryProjectId,\n        workItemId: prepared.item.id,\n        board: boardForWorkItem(prepared.item),\n        stage: destinationStage,\n        expectedRevision: prepared.item.revision,\n        actor: { type: 'human', id: request.userId },\n        ingress: { type: 'human', identity: `start:${request.kickoffKey}:transition` },\n        cause: 'run_start',\n      });\n      if (transition.status === 'rejected') {\n        await storage.markPendingStart(prepared.binding.id, 'failed', transition.reason);\n        throw new FactoryStartTransitionError(transition);\n      }\n      revision = transition.revision;\n    }\n\n    await storage.markPendingStart(prepared.binding.id, 'sent');\n    prepared.pendingStart.status = 'sent';\n\n    return {\n      workItemId: prepared.item.id,\n      bindingId: prepared.binding.id,\n      threadId,\n      resourceId: memoryResourceId,\n      sessionId: sourceSession.sessionId,\n      branch: sourceSession.branch,\n      revision,\n      kickoffStatus: prepared.pendingStart.status,\n      replayed: prepared.replayed,\n    };\n  }\n}\n"],"mappings":";;;;;;;;AAqCA,IAAa,8BAAb,cAAiD,MAAM;CAChC;CAArB,YAAY,WAA4B;EACtC,MACE,WAAW,UAAU,8GACvB;EAHmB,KAAA,YAAA;EAInB,KAAK,OAAO;CACd;AACF;;;;;;;;;AAUA,eAAe,kBACb,YACA,OACiB;CACjB,MAAM,WAAW,MAAM,WAAW,gBAAgB,EAAE,UAAU,MAAM,UAAU,CAAC;CAC/E,IAAI,UAAU,eAAe,MAAM,WAAW,OAAO,MAAM;CAC3D,IAAI,CAAC,MAAM,WAAW,OAAO,UAAU,cAAc,MAAM;CAC3D,IAAI,UAAU,MAAM,IAAI,4BAA4B,MAAM,SAAS;CACnE,OAAO,MAAM;AACf;AAEA,IAAa,0BAAb,cAA6C,MAAM;CAEtC;CAEA;CAHX,YACE,MACA,SACA,aAAgC,CAAC,GACjC;EACA,MAAM,OAAO;EAJJ,KAAA,OAAA;EAEA,KAAA,aAAA;EAGT,KAAK,OAAO;CACd;AACF;AAEA,IAAa,8BAAb,cAAiD,MAAM;CACrD;CAEA,YAAY,QAAkE;EAC5E,MAAM,OAAO,MAAM;EACnB,KAAK,OAAO;EACZ,KAAK,SAAS;CAChB;AACF;AAiBA,eAAe,qBACb,SACA,SACiE;CACjE,MAAM,UAAU,MAAM,QAAQ,SAAS,eAAe,QAAQ,SAAS;CACvE,IAAI,CAAC,WAAW,QAAQ,UAAU,QAAQ,SAAS,QAAQ,WAAW,QAAQ,QAC5E,MAAM,IAAI,MAAM,2BAA2B;CAE7C,MAAM,sBAAsB,QAAQ;CACpC,IAAI,CAAC,qBAAqB,MAAM,IAAI,MAAM,sCAAsC;CAChF,MAAM,oBAAoB,MAAM,QAAQ,oBAAoB,IAAI;EAAE,OAAO,QAAQ;EAAO,IAAI;CAAoB,CAAC;CACjH,IAAI,CAAC,mBAAmB,MAAM,IAAI,MAAM,sCAAsC;CAC9E,MAAM,aAAa,MAAM,QAAQ,YAAY,IAAI;EAAE,OAAO,QAAQ;EAAO,IAAI,kBAAkB;CAAa,CAAC;CAC7G,IAAI,CAAC,cAAc,WAAW,qBAAqB,QAAQ,kBACzD,MAAM,IAAI,MAAM,iDAAiD;CAEnE,OAAO;EAAE,GAAG;EAAS;CAAoB;AAC3C;AAEA,eAAe,gBAAgB,SAAyB,SAA+C;CACrG,MAAM,WAAW,QAAQ,OAAO,UAAU;CAG1C,MAAM,QAAQ,OAAO,OAAO;EAAE,OAAO,QAAQ;EAAa,KAAK;CAAM,CAAC;CACtE,MAAM,QAAQ,OAAO,WAAW;EAAE,KAAK;EAAoB,OAAO,QAAQ;CAAU,CAAC;CACrF,OAAO;AACT;AAEA,IAAa,0BAAb,MAAqC;CACnC;CACA;CACA;CACA;CAKA;CACA;CACA;CAEA,YACE,YACA,SACA,mBACA,eAKA,QACA,cACA;EACA,KAAKA,cAAc;EACnB,KAAKC,WAAW;EAChB,KAAKC,qBAAqB;EAC1B,KAAKC,iBAAiB;EACtB,KAAKC,UAAU;EACf,KAAKC,YAAY,cAAc;EAC/B,KAAKC,iBAAiB,cAAc;CACtC;CAEA,MAAM,QAAQ,SAAmE;EAC/E,MAAM,UAAU,KAAKL;EACrB,MAAM,gBACJ,OAAO,KAAKE,mBAAmB,aAAa,MAAM,KAAKA,eAAe,OAAO,IAAI,KAAKA;EACxF,IAAI,CAAC,eAAe,MAAM,IAAI,MAAM,+CAA+C;EACnF,MAAM,gBAAgB,MAAM,qBAAqB,eAAe,OAAO;EACvE,MAAM,eACJ,KAAKE,aAAa,KAAKC,iBACnB,MAAM,2BAA2B;GAC/B,UAAU,KAAKD;GACf,eAAe,KAAKC;GACpB,kBAAkB,QAAQ;GAC1B,OAAO,QAAQ;GACf,aAAa,cAAc;GAC3B,SAAS;EACX,CAAC,IACD;GAAE,YAAY,QAAQ;GAAY,SAAS,QAAQ;EAAe;EACxE,MAAM,aAAa,QAAQ,SAAS,KAChC,MAAM,QAAQ,IAAI;GAAE,OAAO,QAAQ;GAAO,IAAI,QAAQ,SAAS;EAAG,CAAC,IACnE;EACJ,MAAM,eAAe,MAAM,KAAKF,SAAS,UAAU;GAAE,OAAO,QAAQ;GAAO,gBAAgB,CAAC,QAAQ;EAAE,CAAC;EACvG,IAAI,aAAa,MAAM,0BAA0B;GAC/C;GACA,OAAO,QAAQ;GACf,kBAAkB,QAAQ;GAC1B,MAAM,cAAc,EAAE,UAAU,QAAQ,SAAS,MAAM,YAAY,KAAK;GACxE,qBAAqB,cAAc,QAAQ;EAC7C,CAAC;EACD,IAAI,WAAW,WAAW,aAAa;GAGrC,IAAI,YAAY,SAAS,QAAQ,SAAS,KAAK,EAAE,cAAc,cAAc,WAC3E,MAAM,IAAI,wBACR,wBACA,2CAA2C,WAAW,WAAW,KAAK,IAAI,EAAE,IAC5E,WAAW,UACb;GAEF,MAAM,OAAO,MAAM,cAAc,oBAAoB,IAAI;IACvD,OAAO,QAAQ;IACf,IAAI,cAAc;GACpB,CAAC;GACD,MAAM,SAAS,QAAS,MAAM,cAAc,aAAa,IAAI;IAAE,OAAO,QAAQ;IAAO,IAAI,KAAK;GAAa,CAAC;GAC5G,MAAM,eAAe,OACjB,MAAM,cAAc,oBAAoB,KAAK;IAAE,OAAO,QAAQ;IAAO,cAAc,KAAK;GAAa,CAAC,IACtG,CAAC;GACL,IACE,CAAC,UACD,CAAC,WAAW,WAAW,SAAS,OAAO,IAAI,KAC3C,CAAC,aAAa,MAAK,cAAa,UAAU,OAAO,cAAc,mBAAmB,GAElF,MAAM,IAAI,wBACR,uBACA,gEACF;GAEF,aAAa;IAAE,QAAQ;IAAY,MAAM,OAAO;IAAM,qBAAqB,cAAc;GAAoB;EAC/G;EACA,IAAI,WAAW,WAAW,YACxB,MAAM,IAAI,wBAAwB,uBAAuB,WAAW,IAAI;EAE1E,IAAI,WAAW,wBAAwB,cAAc,qBACnD,MAAM,IAAI,wBACR,uBACA,4DAA4D,WAAW,KAAK,EAC9E;EAEF,MAAM,iBAAiB,QAAQ,kBAAkB,IAAI,eAAe;EAIpE,MAAM,eAAe,eAAe,IAAI,MAAM;EAC9C,IAAI,CAAC,gBAAgB,OAAO,iBAAiB,UAC3C,eAAe,IAAI,QAAQ;GACzB,UAAU,QAAQ;GAClB,gBAAgB,QAAQ;EAC1B,CAAC;EAMH,MAAM,oBAAoB,QAAQ,SAAS,MAAM,gBAAgB,SAAS;EAI1E,MAAM,qBAAqB,QAAQ,SAAS,MAAM,UAAU;EAC5D,MAAM,WACH,cAAc,cAAc,KAAA,OAC5B,OAAO,uBAAuB,YAAY,qBAAqB,qBAAqB,KAAA;EACvF,MAAM,mBAAmB,MAAM,kBAAkB,KAAKJ,aAAa;GACjE,WAAW,cAAc;GACzB,kBAAkB,QAAQ;GAC1B,WACE,qBACA,2BACE,cAAc;IACZ,gBAAgB,QAAQ,SAAS,MAAM,kBAAkB;IACzD,UAAU,QAAQ,SAAS,MAAM,YAAY;GAC/C,CACF;EACJ,CAAC;EACD,MAAM,cAAc;GAClB,kBAAkB,QAAQ;GAC1B,qBAAqB,cAAc;EACrC;EAGA,MAAM,UAAU,MAAM,KAAKA,YAAY,cAAc;GACnD,IAAI,cAAc;GAClB,SAAS,QAAQ;GACjB,YAAY;GACZ,UAAU,cAAc;GACxB;GACA,MAAM;EACR,CAAC;EAQD,MAAM,8BAA8B,sBAAsB,WAAW,KAAK;EAC1E,MAAM,6BAA6B,QAAQ,MAAM,IAAI,CAAC,EAAE,sBAAsB,CAAC;EAC/E,MAAM,QAAQ,MAAM,IAAI;GACtB,GAAG;GAIH,cAAc,QAAQ;GACtB,mBAAmB,aAAa;GAChC,oBAAoB,cAAc;GAClC,oBAAoB,CAClB,GAAG,2BAA2B,QAAO,gBAAe,gBAAgB,2BAA2B,GAC/F,2BACF;GACA,GAAI,oBAAoB;IAAE,mBAAmB;IAAM,GAAI,UAAU,EAAE,QAAQ,IAAI,CAAC;GAAG,IAAI,CAAC;EAC1F,CAAC;EACD,MAAM,gCAAgC;GACpC,OAAO,QAAQ;GACf,QAAQ,cAAc;GACtB,iBAAiB,aAAa;EAChC,CAAC;EAGD,MAAM,sBAAsB,SAAS;GACnC,OAAO,QAAQ;GACf,YAAY,aAAa;GACzB,aAAa,cAAc;GAC3B,gBAAgB,aAAa;EAC/B,CAAC;EAID,MAAM,QAAQ,YAAY,WAAW;GAAE,UAAU;GAAgC,QAAQ;EAAQ,CAAC;EAClG,MAAM,WAAW,MAAM,gBAAgB,SAAS,OAAO;EACvD,MAAM,WAAW,MAAM,QAAQ,gBAAgB;GAC7C,OAAO,QAAQ;GACf,QAAQ,QAAQ;GAChB,kBAAkB,QAAQ;GAC1B,UAAU;IAAE,IAAI,QAAQ,SAAS;IAAI,OAAO,QAAQ,SAAS;GAAM;GACnE,MAAM,QAAQ,SAAS;GACvB,SAAS;IAAE,WAAW,cAAc;IAAW,QAAQ,cAAc;IAAQ;GAAS;GACtF,YAAY;GACZ,YAAY,QAAQ;GACpB,gBAAgB;EAClB,CAAC;EACD,MAAM,QAAQ,OAAO,WAAW;GAAE,KAAK;GAAqB,OAAO,SAAS,KAAK;EAAG,CAAC;EAErF,IAAI,WAAW,SAAS,KAAK;EAC7B,MAAM,mBAAmB,QAAQ;EACjC,IAAI,qBAAqB,SAAS,KAAK,OAAO,WAAW,KAAK,SAAS,KAAK,OAAO,OAAO,mBAAmB;GAC3G,IAAI,CAAC,KAAKE,oBAAoB,MAAM,IAAI,MAAM,4CAA4C;GAC1F,MAAM,aAAa,MAAM,KAAKA,mBAAmB,WAAW;IAC1D,OAAO,QAAQ;IACf,kBAAkB,QAAQ;IAC1B,YAAY,SAAS,KAAK;IAC1B,OAAO,iBAAiB,SAAS,IAAI;IACrC,OAAO;IACP,kBAAkB,SAAS,KAAK;IAChC,OAAO;KAAE,MAAM;KAAS,IAAI,QAAQ;IAAO;IAC3C,SAAS;KAAE,MAAM;KAAS,UAAU,SAAS,QAAQ,WAAW;IAAa;IAC7E,OAAO;GACT,CAAC;GACD,IAAI,WAAW,WAAW,YAAY;IACpC,MAAM,QAAQ,iBAAiB,SAAS,QAAQ,IAAI,UAAU,WAAW,MAAM;IAC/E,MAAM,IAAI,4BAA4B,UAAU;GAClD;GACA,WAAW,WAAW;EACxB;EAEA,MAAM,QAAQ,iBAAiB,SAAS,QAAQ,IAAI,MAAM;EAC1D,SAAS,aAAa,SAAS;EAE/B,OAAO;GACL,YAAY,SAAS,KAAK;GAC1B,WAAW,SAAS,QAAQ;GAC5B;GACA,YAAY;GACZ,WAAW,cAAc;GACzB,QAAQ,cAAc;GACtB;GACA,eAAe,SAAS,aAAa;GACrC,UAAU,SAAS;EACrB;CACF;AACF"}

package/dist/rules/tools.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tools.d.ts","sourceRoot":"","sources":["../../src/rules/tools.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAKnE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAEhE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uCAAuC,CAAC;AAC9E,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,sBAAsB,CAAC;AAEvE,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AA8BxE,wBAAsB,4BAA4B,CAAC,OAAO,EAAE;IAC1D,cAAc,EAAE,cAAc,CAAC;IAC/B,OAAO,EAAE,gBAAgB,CAAC;IAC1B,iBAAiB,EAAE,IAAI,CAAC,wBAAwB,EAAE,YAAY,CAAC,CAAC;IAChE,QAAQ,CAAC,EAAE,0BAA0B,CAAC;IACtC,MAAM,CAAC,EAAE,aAAa,CAAC;CACxB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAqF5B;AAED,eAAO,MAAM,eAAe,yCAA0C,CAAC"}
+{"version":3,"file":"tools.d.ts","sourceRoot":"","sources":["../../src/rules/tools.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAKnE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAExD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAEhE,OAAO,KAAK,EAAe,gBAAgB,EAAE,MAAM,uCAAuC,CAAC;AAC3F,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,sBAAsB,CAAC;AAEvE,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AA8BxE,wBAAsB,4BAA4B,CAAC,OAAO,EAAE;IAC1D,cAAc,EAAE,cAAc,CAAC;IAC/B,OAAO,EAAE,gBAAgB,CAAC;IAC1B,iBAAiB,EAAE,IAAI,CAAC,wBAAwB,EAAE,YAAY,CAAC,CAAC;IAChE,QAAQ,CAAC,EAAE,0BAA0B,CAAC;IACtC,MAAM,CAAC,EAAE,aAAa,CAAC;CACxB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAqF5B;AAED,eAAO,MAAM,eAAe,yCAA0C,CAAC"}

package/dist/rules/tools.js

@@ -1,6 +1,7 @@
 import { FACTORY_TRIAGE_TYPES } from "./types.js";
 import { BOARD_IDENTIFIER_RE } from "./validation.js";
 import { boardForWorkItem, workItemPhaseSemantics } from "../boards/semantics.js";
+import "../boards/work.js";
 import "../boards/index.js";
 import { WorkItemUpdateConflictError } from "../storage/domains/work-items/base.js";
 import { resolveFactorySessionAddress } from "./binding-context.js";
@@ -91,9 +92,11 @@ async function createFactoryTransitionTools(options) {
 	};
 }
 const REVIEW_VERDICTS = ["approve", "request changes"];
+const MAX_SELF_REVIEW_FINDINGS_LENGTH = 2e4;
 const reviewVerdictInputSchema = z.object({
 	verdict: z.enum(REVIEW_VERDICTS),
-	reviewedHeadSha: z.string().regex(/^(?:[0-9a-f]{40}|[0-9a-f]{64})$/i, "Use the full commit SHA of the reviewed head.")
+	reviewedHeadSha: z.string().regex(/^(?:[0-9a-f]{40}|[0-9a-f]{64})$/i, "Use the full commit SHA of the reviewed head."),
+	findings: z.string().trim().min(1).transform((value) => value.length <= MAX_SELF_REVIEW_FINDINGS_LENGTH ? value : `${value.slice(0, MAX_SELF_REVIEW_FINDINGS_LENGTH - 1)}…`).optional().describe("Self-review only: the findings and test report, in Markdown. On request changes the builder receives them; on approve they go in the change request body.")
 });
 /**
 * A review pass ends by recording its verdict on the card, which stays in
@@ -103,10 +106,10 @@ const reviewVerdictInputSchema = z.object({
 function createReviewVerdictTool(options, boundWorkItemId) {
 	return { factory_record_review_verdict: createTool({
 		id: "factory_record_review_verdict",
-		description: "Record the published review verdict and the PR head SHA it covers on the Review card bound to this thread. The card stays in Reviewing; this ends the review pass.",
+		description: "Record the review verdict and the head SHA it covers on the card bound to this thread, ending the review pass. On a Review card it records the published PR verdict and the card stays in Reviewing. On a Work card in Review with no change request open yet (self-review), approve keeps the card in Review and wakes the builder to open the change request; request changes sends it back to Building with your findings.",
 		inputSchema: reviewVerdictInputSchema,
 		requireApproval: false,
-		execute: async ({ verdict, reviewedHeadSha }, execution) => {
+		execute: async ({ verdict, reviewedHeadSha, findings }, execution) => {
 			const resolution = await resolveFactorySessionAddress({
 				requestContext: execution.requestContext,
 				storage: options.storage,
@@ -119,6 +122,16 @@ function createReviewVerdictTool(options, boundWorkItemId) {
 				id: binding.workItemId
 			});
 			if (!item) throw new Error("Bound Factory work item not found.");
+			if (boardForWorkItem(item) === "work" && item.stages[0] === "review" && typeof item.metadata?.openPullRequestNumber !== "number") return recordSelfReviewVerdict({
+				storage: options.storage,
+				transitionService: options.transitionService,
+				binding,
+				item,
+				verdict,
+				reviewedHeadSha: reviewedHeadSha.toLowerCase(),
+				findings,
+				toolCallId: execution.agent?.toolCallId
+			});
 			if (boardForWorkItem(item) !== "review" || item.stages[0] !== "review") throw new Error(`Only a card in Reviewing records a verdict; this one is in ${item.stages.join(", ")}.`);
 			const reviewedAt = (/* @__PURE__ */ new Date()).toISOString();
 			try {
@@ -162,6 +175,72 @@ function createReviewVerdictTool(options, boundWorkItemId) {
 	}) };
 }
 /**
+* Self-review ends the same way a PR review does, but on the Work card before
+* any change request exists, and it moves the card itself: the verdict is the
+* only thing that decides where the work goes next.
+*/
+async function recordSelfReviewVerdict(input) {
+	const { storage, binding, item, verdict, reviewedHeadSha, findings } = input;
+	if (!input.toolCallId) throw new Error("Self-review verdicts require an authenticated bound agent tool call.");
+	const reviewedAt = (/* @__PURE__ */ new Date()).toISOString();
+	const previousRounds = typeof item.metadata?.selfReviewRounds === "number" ? item.metadata.selfReviewRounds : 0;
+	const rounds = verdict === "request changes" ? previousRounds + 1 : previousRounds;
+	const parked = verdict === "request changes" && rounds % 3 === 0;
+	let updated;
+	try {
+		updated = await storage.update({
+			orgId: binding.orgId,
+			id: item.id,
+			userId: `agent:${binding.id}`,
+			expectedRevision: item.revision,
+			patch: { metadata: {
+				selfReviewVerdict: verdict,
+				selfReviewedHeadSha: reviewedHeadSha,
+				selfReviewedAt: reviewedAt,
+				selfReviewFindings: findings ?? null,
+				selfReviewRounds: rounds,
+				selfReviewNeedsHuman: parked
+			} }
+		});
+	} catch (error) {
+		if (!(error instanceof WorkItemUpdateConflictError)) throw error;
+		throw new Error("The Work card changed while recording the verdict; call again to record it on the current card.");
+	}
+	if (!updated) throw new Error("Bound Factory work item not found.");
+	if (verdict === "approve") return {
+		status: "recorded",
+		verdict,
+		reviewedHeadSha,
+		reviewedAt,
+		selfReviewRounds: rounds
+	};
+	return {
+		status: "recorded",
+		verdict,
+		reviewedHeadSha,
+		reviewedAt,
+		selfReviewRounds: rounds,
+		transition: await input.transitionService.transition({
+			orgId: binding.orgId,
+			factoryProjectId: binding.factoryProjectId,
+			workItemId: binding.workItemId,
+			board: "work",
+			stage: parked ? "intake" : "execute",
+			expectedRevision: updated.item.revision,
+			actor: {
+				type: "agent",
+				bindingId: binding.id,
+				role: binding.role
+			},
+			ingress: {
+				type: "agent",
+				identity: `${binding.id}:${input.toolCallId}`
+			},
+			cause: parked ? `Self-review requested changes ${rounds} times; parked for a person to decide how to proceed.` : `Self-review requested changes on ${reviewedHeadSha} (round ${rounds}).`
+		})
+	};
+}
+/**
 * A retired session's transition tool: it exists only to fail loudly. The run's
 * binding was revoked when its work item settled at a terminal stage, so there
 * is nothing to transition. Registering it (instead of dropping the tool) stops