@mastra/factory 0.24.0-alpha.1 → 0.24.0-alpha.11

package/dist/session/run-audit.js.map

@@ -1 +1 @@
-{"version":3,"file":"run-audit.js","names":[],"sources":["../../src/session/run-audit.ts"],"sourcesContent":["import type { AgentControllerEvent } from '@mastra/core/agent-controller';\nimport { z } from 'zod';\n\nimport type { AuditActorType } from '../storage/domains/audit/base.js';\nimport type { AuditRecorder } from '../storage/domains/audit/domain.js';\n\nexport const FACTORY_OPEN_RUNS_SETTING = 'factoryOpenRuns';\n\nconst factoryOpenRunSchema = z.object({\n  kickoffId: z.string(),\n  bindingId: z.string(),\n  role: z.string(),\n  startedBy: z.string(),\n  orgId: z.string(),\n  factoryProjectId: z.string(),\n  workItemId: z.string(),\n  workItemName: z.string().optional(),\n  sessionId: z.string(),\n  threadId: z.string(),\n  branch: z.string(),\n  /**\n   * Which dispatcher process is watching this run, and when it last said so\n   * (epoch ms). The ledger is a thread setting shared by every replica, so a\n   * remote reader needs these to tell a run that is live elsewhere from one\n   * that died with its process. Absent on entries written before ownership\n   * was recorded; those read as stale.\n   */\n  ownerId: z.string().optional(),\n  heartbeatAt: z.number().optional(),\n});\n\nexport type FactoryOpenRun = z.infer<typeof factoryOpenRunSchema>;\n\n/** A heartbeat older than this means the owner is gone; nothing renews it once the run's dispatcher dies. */\nexport const FACTORY_OPEN_RUN_STALE_MS = 30_000;\n\nexport function isOpenRunLiveElsewhere(run: FactoryOpenRun, ownerId: string, now = Date.now()): boolean {\n  return (\n    run.ownerId !== undefined &&\n    run.ownerId !== ownerId &&\n    run.heartbeatAt !== undefined &&\n    now - run.heartbeatAt < FACTORY_OPEN_RUN_STALE_MS\n  );\n}\n\nexport interface RunEndCaptureSession {\n  readonly thread: {\n    getSetting(args: { key: string }): Promise<unknown>;\n    setSetting(args: { key: string; value: unknown }): Promise<void>;\n  };\n  subscribe(listener: (event: AgentControllerEvent) => void): () => void;\n}\n\ntype RunEndReason = Extract<AgentControllerEvent, { type: 'agent_end' }>['reason'];\nconst pendingWrites = new WeakMap<RunEndCaptureSession, Promise<void>>();\n\nfunction serializeRunAudit(session: RunEndCaptureSession, write: () => Promise<void>): Promise<void> {\n  const pending = (pendingWrites.get(session) ?? Promise.resolve())\n    .then(write)\n    .catch(error => console.warn('[Factory run audit] Unable to record run lifecycle.', error));\n  pendingWrites.set(session, pending);\n  return pending;\n}\n\nexport async function listSessionOpenRuns(session: RunEndCaptureSession): Promise<FactoryOpenRun[]> {\n  const stored = await session.thread.getSetting({ key: FACTORY_OPEN_RUNS_SETTING });\n  return z.array(factoryOpenRunSchema).parse(stored ?? []);\n}\n\nexport async function waitForSessionRunAudit(session: RunEndCaptureSession): Promise<void> {\n  await (pendingWrites.get(session) ?? Promise.resolve());\n}\n\nfunction runAuditInput(run: FactoryOpenRun) {\n  // Ownership fields are dispatcher bookkeeping, not part of the run's audit record.\n  const { orgId, factoryProjectId, workItemId, workItemName, ownerId, heartbeatAt, ...metadata } = run;\n  void ownerId;\n  void heartbeatAt;\n  return {\n    orgId,\n    factoryProjectId,\n    idempotencyKey: run.kickoffId,\n    targets: [{ type: 'work_item', id: workItemId, ...(workItemName ? { name: workItemName } : {}) }],\n    metadata,\n  };\n}\n\nasync function recordRunEnds(\n  session: RunEndCaptureSession,\n  audit: AuditRecorder,\n  reason: RunEndReason,\n  kickoffId?: string,\n): Promise<void> {\n  if (!reason || reason === 'suspended') return;\n  const runs = await listSessionOpenRuns(session);\n  if (runs.length === 0) return;\n  const remaining = [];\n  for (const run of runs) {\n    if (kickoffId && run.kickoffId !== kickoffId) {\n      remaining.push(run);\n      continue;\n    }\n    const input = runAuditInput(run);\n    const recorded = await audit.record({\n      ...input,\n      actorId: `agent:${run.threadId}`,\n      actorType: 'agent',\n      action: 'factory.run.ended',\n      metadata: { ...input.metadata, reason },\n    });\n    if (!recorded) remaining.push(run);\n  }\n  await session.thread.setSetting({ key: FACTORY_OPEN_RUNS_SETTING, value: remaining });\n}\n\nexport function recordSessionRunStart(\n  session: RunEndCaptureSession,\n  {\n    audit,\n    run,\n    actorType,\n    observedEnd,\n  }: {\n    audit: AuditRecorder;\n    run: FactoryOpenRun;\n    actorType: AuditActorType;\n    observedEnd: () => RunEndReason;\n  },\n): Promise<void> {\n  return serializeRunAudit(session, async () => {\n    const runs = await listSessionOpenRuns(session);\n    if (!runs.some(existing => existing.kickoffId === run.kickoffId)) {\n      await session.thread.setSetting({ key: FACTORY_OPEN_RUNS_SETTING, value: [...runs, run] });\n    }\n    await audit.record({\n      ...runAuditInput(run),\n      actorId: run.startedBy,\n      actorType,\n      action: 'factory.run.started',\n    });\n    await recordRunEnds(session, audit, observedEnd(), run.kickoffId);\n  });\n}\n\n/** Renew this process's claim on an open run so other replicas keep treating it as live. */\nexport function heartbeatSessionOpenRun(\n  session: RunEndCaptureSession,\n  kickoffId: string,\n  at = Date.now(),\n): Promise<void> {\n  return serializeRunAudit(session, async () => {\n    const runs = await listSessionOpenRuns(session);\n    if (!runs.some(run => run.kickoffId === kickoffId)) return;\n    await session.thread.setSetting({\n      key: FACTORY_OPEN_RUNS_SETTING,\n      value: runs.map(run => (run.kickoffId === kickoffId ? { ...run, heartbeatAt: at } : run)),\n    });\n  });\n}\n\nexport function observeSessionRunEnd(session: RunEndCaptureSession, { audit }: { audit: AuditRecorder }): () => void {\n  return session.subscribe(event => {\n    if (event.type !== 'agent_end' || !event.reason || event.reason === 'suspended') return;\n    void serializeRunAudit(session, () => recordRunEnds(session, audit, event.reason));\n  });\n}\n"],"mappings":";;AAMA,MAAa,4BAA4B;AAEzC,MAAM,uBAAuB,EAAE,OAAO;CACpC,WAAW,EAAE,OAAO;CACpB,WAAW,EAAE,OAAO;CACpB,MAAM,EAAE,OAAO;CACf,WAAW,EAAE,OAAO;CACpB,OAAO,EAAE,OAAO;CAChB,kBAAkB,EAAE,OAAO;CAC3B,YAAY,EAAE,OAAO;CACrB,cAAc,EAAE,OAAO,CAAC,CAAC,SAAS;CAClC,WAAW,EAAE,OAAO;CACpB,UAAU,EAAE,OAAO;CACnB,QAAQ,EAAE,OAAO;;;;;;;;CAQjB,SAAS,EAAE,OAAO,CAAC,CAAC,SAAS;CAC7B,aAAa,EAAE,OAAO,CAAC,CAAC,SAAS;AACnC,CAAC;;AAKD,MAAa,4BAA4B;AAEzC,SAAgB,uBAAuB,KAAqB,SAAiB,MAAM,KAAK,IAAI,GAAY;CACtG,OACE,IAAI,YAAY,KAAA,KAChB,IAAI,YAAY,WAChB,IAAI,gBAAgB,KAAA,KACpB,MAAM,IAAI,cAAA;AAEd;AAWA,MAAM,gCAAgB,IAAI,QAA6C;AAEvE,SAAS,kBAAkB,SAA+B,OAA2C;CACnG,MAAM,WAAW,cAAc,IAAI,OAAO,KAAK,QAAQ,QAAQ,EAAA,CAC5D,KAAK,KAAK,CAAC,CACX,OAAM,UAAS,QAAQ,KAAK,uDAAuD,KAAK,CAAC;CAC5F,cAAc,IAAI,SAAS,OAAO;CAClC,OAAO;AACT;AAEA,eAAsB,oBAAoB,SAA0D;CAClG,MAAM,SAAS,MAAM,QAAQ,OAAO,WAAW,EAAE,KAAK,0BAA0B,CAAC;CACjF,OAAO,EAAE,MAAM,oBAAoB,CAAC,CAAC,MAAM,UAAU,CAAC,CAAC;AACzD;AAEA,eAAsB,uBAAuB,SAA8C;CACzF,OAAO,cAAc,IAAI,OAAO,KAAK,QAAQ,QAAQ;AACvD;AAEA,SAAS,cAAc,KAAqB;CAE1C,MAAM,EAAE,OAAO,kBAAkB,YAAY,cAAc,SAAS,aAAa,GAAG,aAAa;CAGjG,OAAO;EACL;EACA;EACA,gBAAgB,IAAI;EACpB,SAAS,CAAC;GAAE,MAAM;GAAa,IAAI;GAAY,GAAI,eAAe,EAAE,MAAM,aAAa,IAAI,CAAC;EAAG,CAAC;EAChG;CACF;AACF;AAEA,eAAe,cACb,SACA,OACA,QACA,WACe;CACf,IAAI,CAAC,UAAU,WAAW,aAAa;CACvC,MAAM,OAAO,MAAM,oBAAoB,OAAO;CAC9C,IAAI,KAAK,WAAW,GAAG;CACvB,MAAM,YAAY,CAAC;CACnB,KAAK,MAAM,OAAO,MAAM;EACtB,IAAI,aAAa,IAAI,cAAc,WAAW;GAC5C,UAAU,KAAK,GAAG;GAClB;EACF;EACA,MAAM,QAAQ,cAAc,GAAG;EAQ/B,IAAI,CAAC,MAPkB,MAAM,OAAO;GAClC,GAAG;GACH,SAAS,SAAS,IAAI;GACtB,WAAW;GACX,QAAQ;GACR,UAAU;IAAE,GAAG,MAAM;IAAU;GAAO;EACxC,CAAC,GACc,UAAU,KAAK,GAAG;CACnC;CACA,MAAM,QAAQ,OAAO,WAAW;EAAE,KAAK;EAA2B,OAAO;CAAU,CAAC;AACtF;AAEA,SAAgB,sBACd,SACA,EACE,OACA,KACA,WACA,eAOa;CACf,OAAO,kBAAkB,SAAS,YAAY;EAC5C,MAAM,OAAO,MAAM,oBAAoB,OAAO;EAC9C,IAAI,CAAC,KAAK,MAAK,aAAY,SAAS,cAAc,IAAI,SAAS,GAC7D,MAAM,QAAQ,OAAO,WAAW;GAAE,KAAK;GAA2B,OAAO,CAAC,GAAG,MAAM,GAAG;EAAE,CAAC;EAE3F,MAAM,MAAM,OAAO;GACjB,GAAG,cAAc,GAAG;GACpB,SAAS,IAAI;GACb;GACA,QAAQ;EACV,CAAC;EACD,MAAM,cAAc,SAAS,OAAO,YAAY,GAAG,IAAI,SAAS;CAClE,CAAC;AACH;;AAGA,SAAgB,wBACd,SACA,WACA,KAAK,KAAK,IAAI,GACC;CACf,OAAO,kBAAkB,SAAS,YAAY;EAC5C,MAAM,OAAO,MAAM,oBAAoB,OAAO;EAC9C,IAAI,CAAC,KAAK,MAAK,QAAO,IAAI,cAAc,SAAS,GAAG;EACpD,MAAM,QAAQ,OAAO,WAAW;GAC9B,KAAK;GACL,OAAO,KAAK,KAAI,QAAQ,IAAI,cAAc,YAAY;IAAE,GAAG;IAAK,aAAa;GAAG,IAAI,GAAI;EAC1F,CAAC;CACH,CAAC;AACH;AAEA,SAAgB,qBAAqB,SAA+B,EAAE,SAA+C;CACnH,OAAO,QAAQ,WAAU,UAAS;EAChC,IAAI,MAAM,SAAS,eAAe,CAAC,MAAM,UAAU,MAAM,WAAW,aAAa;EACjF,kBAAuB,eAAe,cAAc,SAAS,OAAO,MAAM,MAAM,CAAC;CACnF,CAAC;AACH"}
+{"version":3,"file":"run-audit.js","names":[],"sources":["../../src/session/run-audit.ts"],"sourcesContent":["import type { AgentControllerEvent } from '@mastra/core/agent-controller';\nimport { z } from 'zod';\n\nimport type { AuditActorType } from '../storage/domains/audit/base.js';\nimport type { AuditRecorder } from '../storage/domains/audit/domain.js';\n\nexport const FACTORY_OPEN_RUNS_SETTING = 'factoryOpenRuns';\n\nconst factoryOpenRunSchema = z.object({\n  kickoffId: z.string(),\n  bindingId: z.string(),\n  role: z.string(),\n  startedBy: z.string(),\n  orgId: z.string(),\n  factoryProjectId: z.string(),\n  workItemId: z.string(),\n  workItemName: z.string().optional(),\n  sessionId: z.string(),\n  threadId: z.string(),\n  branch: z.string(),\n  /**\n   * Which dispatcher process is watching this run, and when it last said so\n   * (epoch ms). The ledger is a thread setting shared by every replica, so a\n   * remote reader needs these to tell a run that is live elsewhere from one\n   * that died with its process. Absent on entries written before ownership\n   * was recorded; those read as stale.\n   */\n  ownerId: z.string().optional(),\n  heartbeatAt: z.number().optional(),\n});\n\nexport type FactoryOpenRun = z.infer<typeof factoryOpenRunSchema>;\n\n/** A heartbeat older than this means the owner is gone; nothing renews it once the run's dispatcher dies. */\nexport const FACTORY_OPEN_RUN_STALE_MS = 30_000;\n\nexport function isOpenRunLiveElsewhere(run: FactoryOpenRun, ownerId: string, now = Date.now()): boolean {\n  return (\n    run.ownerId !== undefined &&\n    run.ownerId !== ownerId &&\n    run.heartbeatAt !== undefined &&\n    now - run.heartbeatAt < FACTORY_OPEN_RUN_STALE_MS\n  );\n}\n\nexport interface RunEndCaptureSession {\n  readonly thread: {\n    getSetting(args: { key: string }): Promise<unknown>;\n    setSetting(args: { key: string; value: unknown }): Promise<void>;\n  };\n  subscribe(listener: (event: AgentControllerEvent) => void): () => void;\n}\n\ntype RunEndReason = Extract<AgentControllerEvent, { type: 'agent_end' }>['reason'];\ntype StepUsage = Extract<AgentControllerEvent, { type: 'usage_update' }>['usage'];\nconst pendingWrites = new WeakMap<RunEndCaptureSession, Promise<void>>();\n\n/**\n * JSON budget for the per-step entries on a run's audit record. Audit metadata\n * is capped at 4 KB as a whole and an oversized record loses all of it, so\n * later steps are dropped (and counted) instead; totals always cover every step.\n */\nexport const FACTORY_RUN_USAGE_STEPS_JSON_BUDGET = 2400;\n\nconst USAGE_FIELDS = [\n  'promptTokens',\n  'completionTokens',\n  'totalTokens',\n  'reasoningTokens',\n  'cachedInputTokens',\n  'cacheCreationInputTokens',\n  'cacheCreationInputTokens5m',\n  'cacheCreationInputTokens1h',\n] as const;\n\ntype UsageCounts = Partial<Record<(typeof USAGE_FIELDS)[number], number>>;\n\n/**\n * Token usage attached to a run's `factory.run.ended` audit record.\n * `unreported` means this process saw no usage for the run (it ran elsewhere,\n * the process restarted, or the model reported none). It is never zero spend.\n */\nexport type FactoryRunUsage =\n  | {\n      status: 'recorded';\n      stepCount: number;\n      totals: UsageCounts;\n      steps: UsageCounts[];\n      stepsTruncated?: number;\n      /** Other runs that ended in the same agent turn; the turn's usage can't be split between them. */\n      sharedWithKickoffIds?: string[];\n    }\n  | { status: 'unreported' };\n\nfunction usageCounts(usage: StepUsage): UsageCounts {\n  const counts: UsageCounts = {};\n  for (const field of USAGE_FIELDS) {\n    const value = usage[field];\n    if (typeof value === 'number') counts[field] = value;\n  }\n  return counts;\n}\n\nfunction runUsage(steps: UsageCounts[]): FactoryRunUsage {\n  if (steps.length === 0) return { status: 'unreported' };\n  const totals: UsageCounts = {};\n  for (const step of steps) {\n    for (const field of USAGE_FIELDS) {\n      if (step[field] !== undefined) totals[field] = (totals[field] ?? 0) + step[field];\n    }\n  }\n  const kept: UsageCounts[] = [];\n  let length = 2;\n  for (const step of steps) {\n    length += JSON.stringify(step).length + 1;\n    if (length > FACTORY_RUN_USAGE_STEPS_JSON_BUDGET) break;\n    kept.push(step);\n  }\n  return {\n    status: 'recorded',\n    stepCount: steps.length,\n    totals,\n    steps: kept,\n    ...(steps.length > kept.length ? { stepsTruncated: steps.length - kept.length } : {}),\n  };\n}\n\ninterface EndedTurn {\n  steps: UsageCounts[];\n  claimed: boolean;\n}\n\ninterface SessionUsage {\n  /** Steps of the turn in progress; a suspended turn keeps accumulating into its resume. */\n  current: UsageCounts[];\n  /** The most recently ended turn, which a run whose ledger entry lands after that end may still claim. */\n  lastTurn?: EndedTurn;\n  /** Usage of runs whose end record failed to persist, kept for the retry. */\n  held: Map<string, FactoryRunUsage>;\n}\n\nconst sessionUsage = new WeakMap<RunEndCaptureSession, SessionUsage>();\n\nfunction usageFor(session: RunEndCaptureSession): SessionUsage {\n  let usage = sessionUsage.get(session);\n  if (!usage) {\n    usage = { current: [], held: new Map() };\n    sessionUsage.set(session, usage);\n  }\n  return usage;\n}\n\nfunction serializeRunAudit(session: RunEndCaptureSession, write: () => Promise<void>): Promise<void> {\n  const pending = (pendingWrites.get(session) ?? Promise.resolve())\n    .then(write)\n    .catch(error => console.warn('[Factory run audit] Unable to record run lifecycle.', error));\n  pendingWrites.set(session, pending);\n  return pending;\n}\n\nexport async function listSessionOpenRuns(session: RunEndCaptureSession): Promise<FactoryOpenRun[]> {\n  const stored = await session.thread.getSetting({ key: FACTORY_OPEN_RUNS_SETTING });\n  return z.array(factoryOpenRunSchema).parse(stored ?? []);\n}\n\nexport async function waitForSessionRunAudit(session: RunEndCaptureSession): Promise<void> {\n  await (pendingWrites.get(session) ?? Promise.resolve());\n}\n\nfunction runAuditInput(run: FactoryOpenRun) {\n  // Ownership fields are dispatcher bookkeeping, not part of the run's audit record.\n  const { orgId, factoryProjectId, workItemId, workItemName, ownerId, heartbeatAt, ...metadata } = run;\n  void ownerId;\n  void heartbeatAt;\n  return {\n    orgId,\n    factoryProjectId,\n    idempotencyKey: run.kickoffId,\n    targets: [{ type: 'work_item', id: workItemId, ...(workItemName ? { name: workItemName } : {}) }],\n    metadata,\n  };\n}\n\nasync function recordRunEnds(\n  session: RunEndCaptureSession,\n  audit: AuditRecorder,\n  reason: RunEndReason,\n  kickoffId?: string,\n  endedTurn?: EndedTurn,\n): Promise<void> {\n  if (!reason || reason === 'suspended') return;\n  const usage = usageFor(session);\n  const runs = await listSessionOpenRuns(session);\n  if (runs.length === 0) return;\n  const ending = runs.filter(run => !kickoffId || run.kickoffId === kickoffId);\n  // An end event bills the turn it closed. A run whose ledger entry lands after its turn ended\n  // bills the latest ended turn, unless an open run already claimed it.\n  const turn = endedTurn ?? usage.lastTurn;\n  const steps = turn && !turn.claimed ? turn.steps : [];\n  if (turn && ending.length > 0) turn.claimed = true;\n  const turnUsage = runUsage(steps);\n  const remaining = [];\n  for (const run of runs) {\n    if (!ending.includes(run)) {\n      remaining.push(run);\n      continue;\n    }\n    let runUsageRecord = usage.held.get(run.kickoffId);\n    if (!runUsageRecord) {\n      const shared = ending.filter(other => other !== run).map(other => other.kickoffId);\n      runUsageRecord =\n        turnUsage.status === 'recorded' && shared.length > 0\n          ? { ...turnUsage, sharedWithKickoffIds: shared }\n          : turnUsage;\n      usage.held.set(run.kickoffId, runUsageRecord);\n    }\n    const input = runAuditInput(run);\n    const recorded = await audit.record({\n      ...input,\n      actorId: `agent:${run.threadId}`,\n      actorType: 'agent',\n      action: 'factory.run.ended',\n      metadata: { ...input.metadata, reason, usage: runUsageRecord },\n    });\n    if (recorded) {\n      usage.held.delete(run.kickoffId);\n    } else {\n      console.warn(\n        `[Factory run audit] Token usage for run ${run.kickoffId} (${run.role}) was not persisted; keeping it for the next attempt.`,\n        runUsageRecord,\n      );\n      remaining.push(run);\n    }\n  }\n  await session.thread.setSetting({ key: FACTORY_OPEN_RUNS_SETTING, value: remaining });\n}\n\nexport function recordSessionRunStart(\n  session: RunEndCaptureSession,\n  {\n    audit,\n    run,\n    actorType,\n    observedEnd,\n  }: {\n    audit: AuditRecorder;\n    run: FactoryOpenRun;\n    actorType: AuditActorType;\n    observedEnd: () => RunEndReason;\n  },\n): Promise<void> {\n  return serializeRunAudit(session, async () => {\n    const runs = await listSessionOpenRuns(session);\n    if (!runs.some(existing => existing.kickoffId === run.kickoffId)) {\n      await session.thread.setSetting({ key: FACTORY_OPEN_RUNS_SETTING, value: [...runs, run] });\n    }\n    await audit.record({\n      ...runAuditInput(run),\n      actorId: run.startedBy,\n      actorType,\n      action: 'factory.run.started',\n    });\n    await recordRunEnds(session, audit, observedEnd(), run.kickoffId);\n  });\n}\n\n/** Renew this process's claim on an open run so other replicas keep treating it as live. */\nexport function heartbeatSessionOpenRun(\n  session: RunEndCaptureSession,\n  kickoffId: string,\n  at = Date.now(),\n): Promise<void> {\n  return serializeRunAudit(session, async () => {\n    const runs = await listSessionOpenRuns(session);\n    if (!runs.some(run => run.kickoffId === kickoffId)) return;\n    await session.thread.setSetting({\n      key: FACTORY_OPEN_RUNS_SETTING,\n      value: runs.map(run => (run.kickoffId === kickoffId ? { ...run, heartbeatAt: at } : run)),\n    });\n  });\n}\n\nexport function observeSessionRunEnd(session: RunEndCaptureSession, { audit }: { audit: AuditRecorder }): () => void {\n  const usage = usageFor(session);\n  return session.subscribe(event => {\n    if (event.type === 'usage_update') {\n      usage.current.push(usageCounts(event.usage));\n      return;\n    }\n    if (event.type !== 'agent_end' || !event.reason || event.reason === 'suspended') return;\n    // Close the turn now so a following turn's steps never land in this run.\n    const turn: EndedTurn = { steps: usage.current, claimed: false };\n    usage.current = [];\n    usage.lastTurn = turn;\n    void serializeRunAudit(session, () => recordRunEnds(session, audit, event.reason, undefined, turn));\n  });\n}\n"],"mappings":";;AAMA,MAAa,4BAA4B;AAEzC,MAAM,uBAAuB,EAAE,OAAO;CACpC,WAAW,EAAE,OAAO;CACpB,WAAW,EAAE,OAAO;CACpB,MAAM,EAAE,OAAO;CACf,WAAW,EAAE,OAAO;CACpB,OAAO,EAAE,OAAO;CAChB,kBAAkB,EAAE,OAAO;CAC3B,YAAY,EAAE,OAAO;CACrB,cAAc,EAAE,OAAO,CAAC,CAAC,SAAS;CAClC,WAAW,EAAE,OAAO;CACpB,UAAU,EAAE,OAAO;CACnB,QAAQ,EAAE,OAAO;;;;;;;;CAQjB,SAAS,EAAE,OAAO,CAAC,CAAC,SAAS;CAC7B,aAAa,EAAE,OAAO,CAAC,CAAC,SAAS;AACnC,CAAC;;AAKD,MAAa,4BAA4B;AAEzC,SAAgB,uBAAuB,KAAqB,SAAiB,MAAM,KAAK,IAAI,GAAY;CACtG,OACE,IAAI,YAAY,KAAA,KAChB,IAAI,YAAY,WAChB,IAAI,gBAAgB,KAAA,KACpB,MAAM,IAAI,cAAA;AAEd;AAYA,MAAM,gCAAgB,IAAI,QAA6C;;;;;;AAOvE,MAAa,sCAAsC;AAEnD,MAAM,eAAe;CACnB;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;AAqBA,SAAS,YAAY,OAA+B;CAClD,MAAM,SAAsB,CAAC;CAC7B,KAAK,MAAM,SAAS,cAAc;EAChC,MAAM,QAAQ,MAAM;EACpB,IAAI,OAAO,UAAU,UAAU,OAAO,SAAS;CACjD;CACA,OAAO;AACT;AAEA,SAAS,SAAS,OAAuC;CACvD,IAAI,MAAM,WAAW,GAAG,OAAO,EAAE,QAAQ,aAAa;CACtD,MAAM,SAAsB,CAAC;CAC7B,KAAK,MAAM,QAAQ,OACjB,KAAK,MAAM,SAAS,cAClB,IAAI,KAAK,WAAW,KAAA,GAAW,OAAO,UAAU,OAAO,UAAU,KAAK,KAAK;CAG/E,MAAM,OAAsB,CAAC;CAC7B,IAAI,SAAS;CACb,KAAK,MAAM,QAAQ,OAAO;EACxB,UAAU,KAAK,UAAU,IAAI,CAAC,CAAC,SAAS;EACxC,IAAI,SAAA,MAA8C;EAClD,KAAK,KAAK,IAAI;CAChB;CACA,OAAO;EACL,QAAQ;EACR,WAAW,MAAM;EACjB;EACA,OAAO;EACP,GAAI,MAAM,SAAS,KAAK,SAAS,EAAE,gBAAgB,MAAM,SAAS,KAAK,OAAO,IAAI,CAAC;CACrF;AACF;AAgBA,MAAM,+BAAe,IAAI,QAA4C;AAErE,SAAS,SAAS,SAA6C;CAC7D,IAAI,QAAQ,aAAa,IAAI,OAAO;CACpC,IAAI,CAAC,OAAO;EACV,QAAQ;GAAE,SAAS,CAAC;GAAG,sBAAM,IAAI,IAAI;EAAE;EACvC,aAAa,IAAI,SAAS,KAAK;CACjC;CACA,OAAO;AACT;AAEA,SAAS,kBAAkB,SAA+B,OAA2C;CACnG,MAAM,WAAW,cAAc,IAAI,OAAO,KAAK,QAAQ,QAAQ,EAAA,CAC5D,KAAK,KAAK,CAAC,CACX,OAAM,UAAS,QAAQ,KAAK,uDAAuD,KAAK,CAAC;CAC5F,cAAc,IAAI,SAAS,OAAO;CAClC,OAAO;AACT;AAEA,eAAsB,oBAAoB,SAA0D;CAClG,MAAM,SAAS,MAAM,QAAQ,OAAO,WAAW,EAAE,KAAK,0BAA0B,CAAC;CACjF,OAAO,EAAE,MAAM,oBAAoB,CAAC,CAAC,MAAM,UAAU,CAAC,CAAC;AACzD;AAEA,eAAsB,uBAAuB,SAA8C;CACzF,OAAO,cAAc,IAAI,OAAO,KAAK,QAAQ,QAAQ;AACvD;AAEA,SAAS,cAAc,KAAqB;CAE1C,MAAM,EAAE,OAAO,kBAAkB,YAAY,cAAc,SAAS,aAAa,GAAG,aAAa;CAGjG,OAAO;EACL;EACA;EACA,gBAAgB,IAAI;EACpB,SAAS,CAAC;GAAE,MAAM;GAAa,IAAI;GAAY,GAAI,eAAe,EAAE,MAAM,aAAa,IAAI,CAAC;EAAG,CAAC;EAChG;CACF;AACF;AAEA,eAAe,cACb,SACA,OACA,QACA,WACA,WACe;CACf,IAAI,CAAC,UAAU,WAAW,aAAa;CACvC,MAAM,QAAQ,SAAS,OAAO;CAC9B,MAAM,OAAO,MAAM,oBAAoB,OAAO;CAC9C,IAAI,KAAK,WAAW,GAAG;CACvB,MAAM,SAAS,KAAK,QAAO,QAAO,CAAC,aAAa,IAAI,cAAc,SAAS;CAG3E,MAAM,OAAO,aAAa,MAAM;CAChC,MAAM,QAAQ,QAAQ,CAAC,KAAK,UAAU,KAAK,QAAQ,CAAC;CACpD,IAAI,QAAQ,OAAO,SAAS,GAAG,KAAK,UAAU;CAC9C,MAAM,YAAY,SAAS,KAAK;CAChC,MAAM,YAAY,CAAC;CACnB,KAAK,MAAM,OAAO,MAAM;EACtB,IAAI,CAAC,OAAO,SAAS,GAAG,GAAG;GACzB,UAAU,KAAK,GAAG;GAClB;EACF;EACA,IAAI,iBAAiB,MAAM,KAAK,IAAI,IAAI,SAAS;EACjD,IAAI,CAAC,gBAAgB;GACnB,MAAM,SAAS,OAAO,QAAO,UAAS,UAAU,GAAG,CAAC,CAAC,KAAI,UAAS,MAAM,SAAS;GACjF,iBACE,UAAU,WAAW,cAAc,OAAO,SAAS,IAC/C;IAAE,GAAG;IAAW,sBAAsB;GAAO,IAC7C;GACN,MAAM,KAAK,IAAI,IAAI,WAAW,cAAc;EAC9C;EACA,MAAM,QAAQ,cAAc,GAAG;EAQ/B,IAAI,MAPmB,MAAM,OAAO;GAClC,GAAG;GACH,SAAS,SAAS,IAAI;GACtB,WAAW;GACX,QAAQ;GACR,UAAU;IAAE,GAAG,MAAM;IAAU;IAAQ,OAAO;GAAe;EAC/D,CAAC,GAEC,MAAM,KAAK,OAAO,IAAI,SAAS;OAC1B;GACL,QAAQ,KACN,2CAA2C,IAAI,UAAU,IAAI,IAAI,KAAK,wDACtE,cACF;GACA,UAAU,KAAK,GAAG;EACpB;CACF;CACA,MAAM,QAAQ,OAAO,WAAW;EAAE,KAAK;EAA2B,OAAO;CAAU,CAAC;AACtF;AAEA,SAAgB,sBACd,SACA,EACE,OACA,KACA,WACA,eAOa;CACf,OAAO,kBAAkB,SAAS,YAAY;EAC5C,MAAM,OAAO,MAAM,oBAAoB,OAAO;EAC9C,IAAI,CAAC,KAAK,MAAK,aAAY,SAAS,cAAc,IAAI,SAAS,GAC7D,MAAM,QAAQ,OAAO,WAAW;GAAE,KAAK;GAA2B,OAAO,CAAC,GAAG,MAAM,GAAG;EAAE,CAAC;EAE3F,MAAM,MAAM,OAAO;GACjB,GAAG,cAAc,GAAG;GACpB,SAAS,IAAI;GACb;GACA,QAAQ;EACV,CAAC;EACD,MAAM,cAAc,SAAS,OAAO,YAAY,GAAG,IAAI,SAAS;CAClE,CAAC;AACH;;AAGA,SAAgB,wBACd,SACA,WACA,KAAK,KAAK,IAAI,GACC;CACf,OAAO,kBAAkB,SAAS,YAAY;EAC5C,MAAM,OAAO,MAAM,oBAAoB,OAAO;EAC9C,IAAI,CAAC,KAAK,MAAK,QAAO,IAAI,cAAc,SAAS,GAAG;EACpD,MAAM,QAAQ,OAAO,WAAW;GAC9B,KAAK;GACL,OAAO,KAAK,KAAI,QAAQ,IAAI,cAAc,YAAY;IAAE,GAAG;IAAK,aAAa;GAAG,IAAI,GAAI;EAC1F,CAAC;CACH,CAAC;AACH;AAEA,SAAgB,qBAAqB,SAA+B,EAAE,SAA+C;CACnH,MAAM,QAAQ,SAAS,OAAO;CAC9B,OAAO,QAAQ,WAAU,UAAS;EAChC,IAAI,MAAM,SAAS,gBAAgB;GACjC,MAAM,QAAQ,KAAK,YAAY,MAAM,KAAK,CAAC;GAC3C;EACF;EACA,IAAI,MAAM,SAAS,eAAe,CAAC,MAAM,UAAU,MAAM,WAAW,aAAa;EAEjF,MAAM,OAAkB;GAAE,OAAO,MAAM;GAAS,SAAS;EAAM;EAC/D,MAAM,UAAU,CAAC;EACjB,MAAM,WAAW;EACjB,kBAAuB,eAAe,cAAc,SAAS,OAAO,MAAM,QAAQ,KAAA,GAAW,IAAI,CAAC;CACpG,CAAC;AACH"}

package/dist/session/session-threads.d.ts

@@ -0,0 +1,49 @@
+import type { AgentController, AgentControllerThread } from '@mastra/core/agent-controller';
+import type { WorkItemsStorage } from '../storage/domains/work-items/base.js';
+/** The Factory session row fields that say which memory resource it uses. */
+export interface FactorySessionOwnership {
+    sessionId: string;
+    userId: string;
+    orgId?: string;
+    factoryProjectId?: string | null;
+    branch?: string;
+    visibility?: string;
+    originSessionId?: string | null;
+}
+/** Run bindings: the server-side record that a session runs work for its Factory. */
+export type SessionRunBindings = Pick<WorkItemsStorage, 'hasRunBindingForSession'>;
+type ThreadLookup = Pick<AgentController<any>, 'queryThreadById'>;
+/**
+ * The one memory resource a Factory session runs under. A Slack session uses
+ * its Factory's, or its sender's for a DM; a side session uses its Factory's,
+ * or its owner's when private; any other session uses its owner's. A session's own thread can say otherwise
+ * only within what the server recorded for it: its own id (created before
+ * resources were shared, or a run kept on its own resource), and the Factory's
+ * only for a session with a run binding. A client can create a thread under the
+ * session's id, so the thread alone never makes a session the Factory's.
+ */
+export declare function sessionMemoryResourceId(controller: ThreadLookup | undefined, session: FactorySessionOwnership, runs: SessionRunBindings | undefined): Promise<string>;
+export declare function isRunBound(session: FactorySessionOwnership, runs: SessionRunBindings | undefined): Promise<boolean>;
+/** {@link sessionMemoryResourceId} for a caller that already loaded the session's own thread. */
+export declare function memoryResourceOf(session: FactorySessionOwnership, own: {
+    resourceId?: string | null;
+} | null | undefined, runBound: boolean): string;
+/**
+ * Whether a `factorySessionId` stamp naming this session counts on a thread
+ * under `resourceId`. Any org member can write a stamped thread under the
+ * Factory's resource, so a private session's stamp never counts there: only
+ * its own thread (`thread.id === sessionId`) does.
+ */
+export declare function sessionStampCounts(session: FactorySessionOwnership, resourceId: string | null | undefined): boolean;
+/**
+ * The threads of one Factory session. Sessions share their Factory's or user's
+ * resource, so listing by resource would return every session's threads. A
+ * session's own thread carries its id, threads it opens are stamped with
+ * `factorySessionId`, and a session created before resources were shared keeps
+ * its threads under its own id as the resource. Thread ids and stamps are
+ * client-writable, so the own and stamped threads only count under the
+ * session's memory resource.
+ */
+export declare function listFactorySessionThreads(controller: Pick<AgentController<any>, 'queryThreads' | 'queryThreadById'>, session: FactorySessionOwnership, runs: SessionRunBindings | undefined): Promise<AgentControllerThread[]>;
+export {};
+//# sourceMappingURL=session-threads.d.ts.map

package/dist/session/session-threads.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-threads.d.ts","sourceRoot":"","sources":["../../src/session/session-threads.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AAE5F,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uCAAuC,CAAC;AAE9E,6EAA6E;AAC7E,MAAM,WAAW,uBAAuB;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACjC;AAED,qFAAqF;AACrF,MAAM,MAAM,kBAAkB,GAAG,IAAI,CAAC,gBAAgB,EAAE,yBAAyB,CAAC,CAAC;AAEnF,KAAK,YAAY,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,iBAAiB,CAAC,CAAC;AAElE;;;;;;;;GAQG;AACH,wBAAsB,uBAAuB,CAC3C,UAAU,EAAE,YAAY,GAAG,SAAS,EACpC,OAAO,EAAE,uBAAuB,EAChC,IAAI,EAAE,kBAAkB,GAAG,SAAS,GACnC,OAAO,CAAC,MAAM,CAAC,CAMjB;AAED,wBAAsB,UAAU,CAAC,OAAO,EAAE,uBAAuB,EAAE,IAAI,EAAE,kBAAkB,GAAG,SAAS,oBAOtG;AAED,iGAAiG;AACjG,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,uBAAuB,EAChC,GAAG,EAAE;IAAE,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GAAG,IAAI,GAAG,SAAS,EACtD,QAAQ,EAAE,OAAO,UAgBlB;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,uBAAuB,EAAE,UAAU,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO,CAEnH;AAED;;;;;;;;GAQG;AACH,wBAAsB,yBAAyB,CAC7C,UAAU,EAAE,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,cAAc,GAAG,iBAAiB,CAAC,EAC1E,OAAO,EAAE,uBAAuB,EAChC,IAAI,EAAE,kBAAkB,GAAG,SAAS,GACnC,OAAO,CAAC,qBAAqB,EAAE,CAAC,CAgBlC"}

package/dist/session/session-threads.js

@@ -0,0 +1,70 @@
+//#region src/session/session-threads.ts
+/**
+* The one memory resource a Factory session runs under. A Slack session uses
+* its Factory's, or its sender's for a DM; a side session uses its Factory's,
+* or its owner's when private; any other session uses its owner's. A session's own thread can say otherwise
+* only within what the server recorded for it: its own id (created before
+* resources were shared, or a run kept on its own resource), and the Factory's
+* only for a session with a run binding. A client can create a thread under the
+* session's id, so the thread alone never makes a session the Factory's.
+*/
+async function sessionMemoryResourceId(controller, session, runs) {
+	const [own, runBound] = await Promise.all([controller?.queryThreadById({ threadId: session.sessionId }), isRunBound(session, runs)]);
+	return memoryResourceOf(session, own, runBound);
+}
+async function isRunBound(session, runs) {
+	if (!runs || !session.orgId || !session.factoryProjectId) return false;
+	return runs.hasRunBindingForSession({
+		orgId: session.orgId,
+		factoryProjectId: session.factoryProjectId,
+		sessionId: session.sessionId
+	});
+}
+/** {@link sessionMemoryResourceId} for a caller that already loaded the session's own thread. */
+function memoryResourceOf(session, own, runBound) {
+	const factoryProjectId = session.factoryProjectId ?? void 0;
+	const shared = (session.branch?.startsWith("slack/") ?? false) || session.originSessionId ? session.visibility === "private" ? session.userId : factoryProjectId : void 0;
+	const allowed = shared ? [session.sessionId, shared] : [
+		session.sessionId,
+		session.userId,
+		...runBound && factoryProjectId ? [factoryProjectId] : []
+	];
+	if (own?.resourceId && allowed.includes(own.resourceId)) return own.resourceId;
+	return shared ?? session.userId;
+}
+/**
+* Whether a `factorySessionId` stamp naming this session counts on a thread
+* under `resourceId`. Any org member can write a stamped thread under the
+* Factory's resource, so a private session's stamp never counts there: only
+* its own thread (`thread.id === sessionId`) does.
+*/
+function sessionStampCounts(session, resourceId) {
+	return !(session.visibility === "private" && !!session.factoryProjectId && resourceId === session.factoryProjectId);
+}
+/**
+* The threads of one Factory session. Sessions share their Factory's or user's
+* resource, so listing by resource would return every session's threads. A
+* session's own thread carries its id, threads it opens are stamped with
+* `factorySessionId`, and a session created before resources were shared keeps
+* its threads under its own id as the resource. Thread ids and stamps are
+* client-writable, so the own and stamped threads only count under the
+* session's memory resource.
+*/
+async function listFactorySessionThreads(controller, session, runs) {
+	const { sessionId } = session;
+	const [own, runBound, stamped, legacy] = await Promise.all([
+		controller.queryThreadById({ threadId: sessionId }),
+		isRunBound(session, runs),
+		controller.queryThreads({ metadata: { factorySessionId: sessionId } }),
+		controller.queryThreads({ resourceId: sessionId })
+	]);
+	const resourceId = memoryResourceOf(session, own, runBound);
+	const threads = /* @__PURE__ */ new Map();
+	const owned = [...own?.resourceId === resourceId ? [own] : [], ...sessionStampCounts(session, resourceId) ? stamped.filter((thread) => thread.resourceId === resourceId) : []];
+	for (const thread of [...owned, ...legacy]) threads.set(thread.id, thread);
+	return [...threads.values()];
+}
+//#endregion
+export { isRunBound, listFactorySessionThreads, memoryResourceOf, sessionMemoryResourceId, sessionStampCounts };
+
+//# sourceMappingURL=session-threads.js.map

package/dist/session/session-threads.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-threads.js","names":[],"sources":["../../src/session/session-threads.ts"],"sourcesContent":["import type { AgentController, AgentControllerThread } from '@mastra/core/agent-controller';\n\nimport type { WorkItemsStorage } from '../storage/domains/work-items/base.js';\n\n/** The Factory session row fields that say which memory resource it uses. */\nexport interface FactorySessionOwnership {\n  sessionId: string;\n  userId: string;\n  orgId?: string;\n  factoryProjectId?: string | null;\n  branch?: string;\n  visibility?: string;\n  originSessionId?: string | null;\n}\n\n/** Run bindings: the server-side record that a session runs work for its Factory. */\nexport type SessionRunBindings = Pick<WorkItemsStorage, 'hasRunBindingForSession'>;\n\ntype ThreadLookup = Pick<AgentController<any>, 'queryThreadById'>;\n\n/**\n * The one memory resource a Factory session runs under. A Slack session uses\n * its Factory's, or its sender's for a DM; a side session uses its Factory's,\n * or its owner's when private; any other session uses its owner's. A session's own thread can say otherwise\n * only within what the server recorded for it: its own id (created before\n * resources were shared, or a run kept on its own resource), and the Factory's\n * only for a session with a run binding. A client can create a thread under the\n * session's id, so the thread alone never makes a session the Factory's.\n */\nexport async function sessionMemoryResourceId(\n  controller: ThreadLookup | undefined,\n  session: FactorySessionOwnership,\n  runs: SessionRunBindings | undefined,\n): Promise<string> {\n  const [own, runBound] = await Promise.all([\n    controller?.queryThreadById({ threadId: session.sessionId }),\n    isRunBound(session, runs),\n  ]);\n  return memoryResourceOf(session, own, runBound);\n}\n\nexport async function isRunBound(session: FactorySessionOwnership, runs: SessionRunBindings | undefined) {\n  if (!runs || !session.orgId || !session.factoryProjectId) return false;\n  return runs.hasRunBindingForSession({\n    orgId: session.orgId,\n    factoryProjectId: session.factoryProjectId,\n    sessionId: session.sessionId,\n  });\n}\n\n/** {@link sessionMemoryResourceId} for a caller that already loaded the session's own thread. */\nexport function memoryResourceOf(\n  session: FactorySessionOwnership,\n  own: { resourceId?: string | null } | null | undefined,\n  runBound: boolean,\n) {\n  const factoryProjectId = session.factoryProjectId ?? undefined;\n  const slack = session.branch?.startsWith('slack/') ?? false;\n  // A private Slack DM or side session stays with its owner.\n  const shared =\n    slack || session.originSessionId\n      ? session.visibility === 'private'\n        ? session.userId\n        : factoryProjectId\n      : undefined;\n  const allowed = shared\n    ? [session.sessionId, shared]\n    : [session.sessionId, session.userId, ...(runBound && factoryProjectId ? [factoryProjectId] : [])];\n  if (own?.resourceId && allowed.includes(own.resourceId)) return own.resourceId;\n  return shared ?? session.userId;\n}\n\n/**\n * Whether a `factorySessionId` stamp naming this session counts on a thread\n * under `resourceId`. Any org member can write a stamped thread under the\n * Factory's resource, so a private session's stamp never counts there: only\n * its own thread (`thread.id === sessionId`) does.\n */\nexport function sessionStampCounts(session: FactorySessionOwnership, resourceId: string | null | undefined): boolean {\n  return !(session.visibility === 'private' && !!session.factoryProjectId && resourceId === session.factoryProjectId);\n}\n\n/**\n * The threads of one Factory session. Sessions share their Factory's or user's\n * resource, so listing by resource would return every session's threads. A\n * session's own thread carries its id, threads it opens are stamped with\n * `factorySessionId`, and a session created before resources were shared keeps\n * its threads under its own id as the resource. Thread ids and stamps are\n * client-writable, so the own and stamped threads only count under the\n * session's memory resource.\n */\nexport async function listFactorySessionThreads(\n  controller: Pick<AgentController<any>, 'queryThreads' | 'queryThreadById'>,\n  session: FactorySessionOwnership,\n  runs: SessionRunBindings | undefined,\n): Promise<AgentControllerThread[]> {\n  const { sessionId } = session;\n  const [own, runBound, stamped, legacy] = await Promise.all([\n    controller.queryThreadById({ threadId: sessionId }),\n    isRunBound(session, runs),\n    controller.queryThreads({ metadata: { factorySessionId: sessionId } }),\n    controller.queryThreads({ resourceId: sessionId }),\n  ]);\n  const resourceId = memoryResourceOf(session, own, runBound);\n  const threads = new Map<string, AgentControllerThread>();\n  const owned = [\n    ...(own?.resourceId === resourceId ? [own] : []),\n    ...(sessionStampCounts(session, resourceId) ? stamped.filter(thread => thread.resourceId === resourceId) : []),\n  ];\n  for (const thread of [...owned, ...legacy]) threads.set(thread.id, thread);\n  return [...threads.values()];\n}\n"],"mappings":";;;;;;;;;;AA6BA,eAAsB,wBACpB,YACA,SACA,MACiB;CACjB,MAAM,CAAC,KAAK,YAAY,MAAM,QAAQ,IAAI,CACxC,YAAY,gBAAgB,EAAE,UAAU,QAAQ,UAAU,CAAC,GAC3D,WAAW,SAAS,IAAI,CAC1B,CAAC;CACD,OAAO,iBAAiB,SAAS,KAAK,QAAQ;AAChD;AAEA,eAAsB,WAAW,SAAkC,MAAsC;CACvG,IAAI,CAAC,QAAQ,CAAC,QAAQ,SAAS,CAAC,QAAQ,kBAAkB,OAAO;CACjE,OAAO,KAAK,wBAAwB;EAClC,OAAO,QAAQ;EACf,kBAAkB,QAAQ;EAC1B,WAAW,QAAQ;CACrB,CAAC;AACH;;AAGA,SAAgB,iBACd,SACA,KACA,UACA;CACA,MAAM,mBAAmB,QAAQ,oBAAoB,KAAA;CAGrD,MAAM,UAFQ,QAAQ,QAAQ,WAAW,QAAQ,KAAK,UAG3C,QAAQ,kBACb,QAAQ,eAAe,YACrB,QAAQ,SACR,mBACF,KAAA;CACN,MAAM,UAAU,SACZ,CAAC,QAAQ,WAAW,MAAM,IAC1B;EAAC,QAAQ;EAAW,QAAQ;EAAQ,GAAI,YAAY,mBAAmB,CAAC,gBAAgB,IAAI,CAAC;CAAE;CACnG,IAAI,KAAK,cAAc,QAAQ,SAAS,IAAI,UAAU,GAAG,OAAO,IAAI;CACpE,OAAO,UAAU,QAAQ;AAC3B;;;;;;;AAQA,SAAgB,mBAAmB,SAAkC,YAAgD;CACnH,OAAO,EAAE,QAAQ,eAAe,aAAa,CAAC,CAAC,QAAQ,oBAAoB,eAAe,QAAQ;AACpG;;;;;;;;;;AAWA,eAAsB,0BACpB,YACA,SACA,MACkC;CAClC,MAAM,EAAE,cAAc;CACtB,MAAM,CAAC,KAAK,UAAU,SAAS,UAAU,MAAM,QAAQ,IAAI;EACzD,WAAW,gBAAgB,EAAE,UAAU,UAAU,CAAC;EAClD,WAAW,SAAS,IAAI;EACxB,WAAW,aAAa,EAAE,UAAU,EAAE,kBAAkB,UAAU,EAAE,CAAC;EACrE,WAAW,aAAa,EAAE,YAAY,UAAU,CAAC;CACnD,CAAC;CACD,MAAM,aAAa,iBAAiB,SAAS,KAAK,QAAQ;CAC1D,MAAM,0BAAU,IAAI,IAAmC;CACvD,MAAM,QAAQ,CACZ,GAAI,KAAK,eAAe,aAAa,CAAC,GAAG,IAAI,CAAC,GAC9C,GAAI,mBAAmB,SAAS,UAAU,IAAI,QAAQ,QAAO,WAAU,OAAO,eAAe,UAAU,IAAI,CAAC,CAC9G;CACA,KAAK,MAAM,UAAU,CAAC,GAAG,OAAO,GAAG,MAAM,GAAG,QAAQ,IAAI,OAAO,IAAI,MAAM;CACzE,OAAO,CAAC,GAAG,QAAQ,OAAO,CAAC;AAC7B"}

package/dist/session/source-control-tools.d.ts

@@ -16,10 +16,28 @@ export declare function verdictEventMismatch(event: ReviewEvent, body: string |
  * disagree, or `undefined` when absent.
  */
 export declare function reviewedHeadFromBody(body: string | undefined): string | null | undefined;
-export declare function createSourceControlTools({ requestContext, providers, audit, }: {
+/** Fixed server-side so an agent cannot publish under, and impersonate, another required check. */
+export declare const FACTORY_TEST_CHECK_NAME = "Factory Review / tests";
+export declare function createSourceControlTools({ requestContext, providers, audit, testChecksEnabled, selfReviewApprovedHead, boundChangeRequestId, }: {
     requestContext: RequestContext;
     providers: readonly SourceControlToolProvider[];
     audit: AuditAgentEmitter;
+    /** Per-project switch for `source_control_publish_test_check`. The host decides the default; Factory projects default to off. */
+    testChecksEnabled?: (input: {
+        orgId: string;
+        factoryProjectId: string;
+    }) => Promise<boolean>;
+    /**
+     * Self-review gate for opening a change request. `undefined` means the session
+     * is not gated (no Work item, or its change request predates Self-review);
+     * `null` means Self-review has not approved; a SHA is the approved head.
+     */
+    selfReviewApprovedHead?: () => Promise<string | null | undefined>;
+    /**
+     * The change request a Review-bound session reviews; test checks may only target it.
+     * When provided, sessions that are not Review-bound (it resolves `undefined`) cannot publish.
+     */
+    boundChangeRequestId?: () => Promise<string | undefined>;
 }): Promise<IntegrationTools>;
 export {};
 //# sourceMappingURL=source-control-tools.d.ts.map

package/dist/session/source-control-tools.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"source-control-tools.d.ts","sourceRoot":"","sources":["../../src/session/source-control-tools.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAMnE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAC;AACzE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAUhE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AAC5E,OAAO,KAAK,EAIV,0BAA0B,EAC3B,MAAM,2CAA2C,CAAC;AAUnD,MAAM,WAAW,yBAAyB;IACxC,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,0BAA0B,CAAC;IACpC,cAAc,EAAE,cAAc,CAAC;CAChC;AAcD,KAAK,WAAW,GAAG,SAAS,GAAG,iBAAiB,GAAG,SAAS,CAAC;AAE7D,kGAAkG;AAClG,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAUrG;AAKD;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,IAAI,GAAG,SAAS,CASxF;AAuJD,wBAAsB,wBAAwB,CAAC,EAC7C,cAAc,EACd,SAAS,EACT,KAAK,GACN,EAAE;IACD,cAAc,EAAE,cAAc,CAAC;IAC/B,SAAS,EAAE,SAAS,yBAAyB,EAAE,CAAC;IAChD,KAAK,EAAE,iBAAiB,CAAC;CAC1B,GAAG,OAAO,CAAC,gBAAgB,CAAC,CA8c5B"}
+{"version":3,"file":"source-control-tools.d.ts","sourceRoot":"","sources":["../../src/session/source-control-tools.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAMnE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAC;AACzE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAUhE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AAC5E,OAAO,KAAK,EAIV,0BAA0B,EAC3B,MAAM,2CAA2C,CAAC;AAUnD,MAAM,WAAW,yBAAyB;IACxC,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,0BAA0B,CAAC;IACpC,cAAc,EAAE,cAAc,CAAC;CAChC;AAcD,KAAK,WAAW,GAAG,SAAS,GAAG,iBAAiB,GAAG,SAAS,CAAC;AAE7D,kGAAkG;AAClG,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAUrG;AAKD;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,IAAI,GAAG,SAAS,CASxF;AAkJD,mGAAmG;AACnG,eAAO,MAAM,uBAAuB,2BAA2B,CAAC;AAOhE,wBAAsB,wBAAwB,CAAC,EAC7C,cAAc,EACd,SAAS,EACT,KAAK,EACL,iBAAiB,EACjB,sBAAsB,EACtB,oBAAoB,GACrB,EAAE;IACD,cAAc,EAAE,cAAc,CAAC;IAC/B,SAAS,EAAE,SAAS,yBAAyB,EAAE,CAAC;IAChD,KAAK,EAAE,iBAAiB,CAAC;IACzB,iIAAiI;IACjI,iBAAiB,CAAC,EAAE,CAAC,KAAK,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,gBAAgB,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC7F;;;;OAIG;IACH,sBAAsB,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,CAAC;IAClE;;;OAGG;IACH,oBAAoB,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;CAC1D,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAoiB5B"}

package/dist/session/source-control-tools.js

@@ -36,10 +36,10 @@ function authIdentity(requestContext) {
 		userId: getFactoryAuthUserId(user)
 	};
 }
-async function resolveProviderSession(resourceId, providers) {
+async function resolveProviderSession(sessionId, providers) {
 	const matches = (await Promise.all(providers.map(async (provider) => ({
 		provider,
-		session: await provider.storage.sessions.getBySessionId(resourceId)
+		session: await provider.storage.sessions.getBySessionId(sessionId)
 	})))).filter((match) => match.session !== null);
 	if (matches.length !== 1) throw new Error(matches.length === 0 ? "The active session is not backed by a source-control repository." : "The active session is ambiguous across source-control providers.");
 	return matches[0];
@@ -47,8 +47,8 @@ async function resolveProviderSession(resourceId, providers) {
 async function resolveSessionTarget(requestContext, providers, options = {}) {
 	const context = requestContext.get("controller");
 	const { orgId, userId } = authIdentity(requestContext);
-	if (!context?.resourceId || !orgId || !userId) throw new Error("Source-control tools require an authenticated repository session.");
-	const { provider, session } = await resolveProviderSession(context.resourceId, providers);
+	if (!context?.sessionId || !orgId || !userId) throw new Error("Source-control tools require an authenticated repository session.");
+	const { provider, session } = await resolveProviderSession(context.sessionId, providers);
 	if (session.orgId !== orgId || session.visibility === "private" && session.userId !== userId) throw new Error("The active source-control session is not available to the authenticated user.");
 	const ownRepository = session.projectRepositoryId ? await provider.storage.projectRepositories.get({
 		orgId,
@@ -102,9 +102,9 @@ async function resolveSessionTarget(requestContext, providers, options = {}) {
 * descriptions. `undefined` when the session cannot be resolved; the tools
 * then describe the default without naming it.
 */
-async function describeSessionRepositories(resourceId, providers) {
+async function describeSessionRepositories(sessionId, providers) {
 	try {
-		const { provider, session } = await resolveProviderSession(resourceId, providers);
+		const { provider, session } = await resolveProviderSession(sessionId, providers);
 		const repositories = await resolveSessionRepositories({
 			sourceControl: provider.storage,
 			session
@@ -144,14 +144,16 @@ async function emitAgentAudit(audit, requestContext, input) {
 		});
 	}
 }
+/** Fixed server-side so an agent cannot publish under, and impersonate, another required check. */
+const FACTORY_TEST_CHECK_NAME = "Factory Review / tests";
 const repositorySchema = z.object({ repository: z.string().trim().min(1).optional() });
 const changeRequestSchema = repositorySchema.extend({ changeRequestId: z.union([z.string().trim().min(1), z.number().int().positive()]) });
-async function createSourceControlTools({ requestContext, providers, audit }) {
+async function createSourceControlTools({ requestContext, providers, audit, testChecksEnabled, selfReviewApprovedHead, boundChangeRequestId }) {
 	if (!requestContext || typeof requestContext.get !== "function") return {};
 	const controller = requestContext.get("controller");
 	const identity = authIdentity(requestContext);
-	if (!controller?.resourceId || !identity.orgId || !identity.userId || providers.length === 0) return {};
-	const repositoryArgument = repositoryArgumentDescription(await describeSessionRepositories(controller.resourceId, providers));
+	if (!controller?.sessionId || !identity.orgId || !identity.userId || providers.length === 0) return {};
+	const repositoryArgument = repositoryArgumentDescription(await describeSessionRepositories(controller.sessionId, providers));
 	const withTarget = (options) => resolveSessionTarget(requestContext, providers, options);
 	const targetFor = (input) => withTarget(input.repository !== void 0 ? { repository: input.repository } : void 0);
 	const reference = async (target) => ({
@@ -264,8 +266,10 @@ async function createSourceControlTools({ requestContext, providers, audit }) {
 				body: z.string().optional(),
 				draft: z.boolean().optional()
 			}),
-			execute: async (input) => {
+			execute: async (input, execution) => {
 				const target = await targetFor(input);
+				const approvedHead = target.ownRepository ? await selfReviewApprovedHead?.() : void 0;
+				if (approvedHead === null) throw new Error("Self-review has not approved this branch. Move the work item to Self-review; the change request opens after it approves.");
 				const baseBranch = target.ownRepository ? target.session.baseBranch : target.projectRepository.branch ?? target.repository.defaultBranch;
 				const created = await target.provider.versionControl.createPullRequest({
 					...await reference(target),
@@ -275,6 +279,13 @@ async function createSourceControlTools({ requestContext, providers, audit }) {
 					headBranch: target.session.branch,
 					...input.draft !== void 0 ? { draft: input.draft } : {}
 				});
+				if (approvedHead !== void 0 && created.headSha.toLowerCase() !== approvedHead.toLowerCase()) {
+					await target.provider.versionControl.closePullRequest({
+						...await reference(target),
+						pullRequestId: created.id
+					});
+					throw new Error(`Self-review approved ${approvedHead}, but the pushed branch is at ${created.headSha}; the change request was closed. Push the approved head, or move the work item back to Self-review to review the new commits.`);
+				}
 				await target.provider.storage.sessionRepositories.upsert({
 					sessionId: target.session.sessionId,
 					projectRepositoryId: target.projectRepository.id,
@@ -546,6 +557,62 @@ async function createSourceControlTools({ requestContext, providers, audit }) {
 				});
 			}
 		}),
+		source_control_publish_test_check: createTool({
+			id: "source_control_publish_test_check",
+			description: `Publish the Factory review test result as a "${FACTORY_TEST_CHECK_NAME}" commit check on the change request's current head. Publish "in-progress" before running the test plan and a final status after. Refused when headSha is not the current head. ${repositoryArgument}`,
+			inputSchema: changeRequestSchema.extend({
+				headSha: z.string().trim().regex(/^([0-9a-f]{40}|[0-9a-f]{64})$/i, "headSha must be a full 40- or 64-character commit SHA."),
+				status: z.enum([
+					"in-progress",
+					"success",
+					"failure",
+					"neutral",
+					"cancelled",
+					"skipped"
+				]),
+				title: z.string().trim().min(1),
+				summary: z.string().trim().min(1),
+				details: z.string().optional()
+			}),
+			execute: async (input) => {
+				const target = await targetFor(input);
+				if (testChecksEnabled) {
+					const connection = await target.provider.storage.connections.get({
+						orgId: target.orgId,
+						id: target.projectRepository.connectionId
+					});
+					if (connection?.factoryProjectId && !await testChecksEnabled({
+						orgId: target.orgId,
+						factoryProjectId: connection.factoryProjectId
+					})) throw new Error("Test check publishing is turned off for this Factory project; nothing was published. Report the test results in the test report comment instead.");
+				}
+				const publishCommitCheck = target.provider.versionControl.publishCommitCheck;
+				if (!publishCommitCheck) throw new Error(`${target.provider.id} does not support publishing commit checks; nothing was published.`);
+				const bound = boundChangeRequestId ? await boundChangeRequestId() : void 0;
+				if (bound === void 0) throw new Error("Only a Review session bound to this change request can publish test checks; nothing was published.");
+				if (bound !== changeRequestId(input.changeRequestId)) throw new Error(`This session reviews change request ${bound}, not ${input.changeRequestId}; nothing was published.`);
+				const ref = await reference(target);
+				const pullRequest = await target.provider.versionControl.getPullRequest({
+					...ref,
+					pullRequestId: changeRequestId(input.changeRequestId)
+				});
+				if (!pullRequest || pullRequest.state !== "open") throw new Error(`Change request ${input.changeRequestId} is not open; nothing was published.`);
+				const headSha = input.headSha.toLowerCase();
+				if (pullRequest.headSha.toLowerCase() !== headSha) throw new Error(`headSha ${headSha} is not the current change-request head ${pullRequest.headSha}. Nothing was published. Re-run the test plan on the current head.`);
+				return publishCommitCheck({
+					connection: ref.connection,
+					sourceId: ref.sourceId,
+					actingUserId: ref.actingUserId,
+					headSha,
+					ref: pullRequest.headBranch,
+					name: FACTORY_TEST_CHECK_NAME,
+					status: input.status,
+					title: input.title,
+					summary: input.summary,
+					...input.details !== void 0 ? { details: input.details } : {}
+				});
+			}
+		}),
 		source_control_request_reviewers: createTool({
 			id: "source_control_request_reviewers",
 			description: `Request individual or team reviewers on a pull request or merge request. Provider limitations are returned explicitly. ${repositoryArgument}`,
@@ -589,6 +656,6 @@ async function createSourceControlTools({ requestContext, providers, audit }) {
 	};
 }
 //#endregion
-export { createSourceControlTools, reviewedHeadFromBody, verdictEventMismatch };
+export { FACTORY_TEST_CHECK_NAME, createSourceControlTools, reviewedHeadFromBody, verdictEventMismatch };
 
 //# sourceMappingURL=source-control-tools.js.map