charness 0.0.0-stage → 3.1.0

package/dist/connectors/jira/contextPreamble.js

@@ -0,0 +1,31 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.jiraContextPreambleHeader = void 0;
+exports.buildJiraContextPreamble = buildJiraContextPreamble;
+/**
+ * @description The Jira issue's context preamble (Jira connector plan J5, R5):
+ * what `[Telegram thread context]` is for a topic — where the agent works and
+ * for whom — glued ahead of a prompt by the bot's one choke point, re-sent only
+ * when it changes. Agent-facing, so English. Kept free of the connector's
+ * heavier modules: `bot.ts` imports it statically (R20).
+ */
+exports.jiraContextPreambleHeader = '[Jira issue context]';
+function buildJiraContextPreamble(input) {
+    const placeParts = [`issue: ${input.key.thread}`, `project: ${input.key.space}`, `folder: ${input.subdir}`];
+    if (input.timezone)
+        placeParts.push(`timezone: ${input.timezone}`);
+    return [
+        exports.jiraContextPreambleHeader,
+        placeParts.join(' | '),
+        'You work on this issue for its requester — the person who assigned it to you. ' +
+            'They see none of your plain output: each answer_request answer becomes a comment on the issue, ' +
+            'and a question or a final answer hands the issue back to them.',
+        // C12: restricted and internal comments are given to the agent, marked; what they say stays among those who may read them.
+        'A comment marked [restricted to …] or [internal] is not for everyone who can read this issue: ' +
+            'never quote or paraphrase it, or what it says, in an answer.',
+        // C10: the original of a file the issue lists.
+        'The issue\'s files are listed under Attachments and shown where they sit, e.g. "[image: shot.png — attachment 10234]": ' +
+            'fetch an original with the jira_get_attachment tool (the attachment id) and read the file at the path it returns.',
+    ].join('\n');
+}
+//# sourceMappingURL=contextPreamble.js.map

package/dist/connectors/jira/contextPreamble.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contextPreamble.js","sourceRoot":"","sources":["../../../src/connectors/jira/contextPreamble.ts"],"names":[],"mappings":";;;AAoBA,4DAgBC;AAlCD;;;;;;GAMG;AAEU,QAAA,yBAAyB,GAAG,sBAAsB,CAAC;AAUhE,SAAgB,wBAAwB,CAAC,KAA+B;IACtE,MAAM,UAAU,GAAG,CAAC,UAAU,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,YAAY,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,WAAW,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IAC5G,IAAI,KAAK,CAAC,QAAQ;QAAE,UAAU,CAAC,IAAI,CAAC,aAAa,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;IACnE,OAAO;QACL,iCAAyB;QACzB,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC;QACtB,gFAAgF;YAC9E,iGAAiG;YACjG,gEAAgE;QAClE,2HAA2H;QAC3H,gGAAgG;YAC9F,8DAA8D;QAChE,+CAA+C;QAC/C,yHAAyH;YACvH,mHAAmH;KACtH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC"}

package/dist/connectors/jira/inbound.d.ts

@@ -0,0 +1,141 @@
+import type { SessionKey } from '../../sessionKey';
+import type { OpenRequestState, RequestOrigin } from '../../requests/types';
+import { type JiraAccount, type JiraClient } from './client';
+import type { JiraTriggerLog } from './triggerLog';
+import { type JiraExtraField } from './issueBlocks';
+import type { JiraContextLedger } from './contextLedger';
+import type { SessionPromptText } from '../../postToSession';
+import { type JiraTrust } from './trustedGroup';
+/**
+ * @description The Jira connector's inbound side (plan J5, D12/D13/D15/D21): a
+ * poll loop, one search per cycle, and per issue the decision chain
+ *
+ *   allowlist → still matching → no post in flight → trigger (newest changelog pages first) → seen before → self-authored
+ *     → hand-over backed by the trusted group (only with `trustedGroup`) → run budget → fetch the issue → bind
+ *     → open a request → post (not awaited)
+ *     → RECORD the trigger once the post settled
+ *
+ * The trigger is recorded only once its post SETTLED: a restart while the prompt
+ * has not reached the session yet (a session start, a busy turn the post waits
+ * out) leaves the trigger unrecorded and its request open, so the next poll opens
+ * a fresh request — which supersedes the old one — and posts it, instead of
+ * leaving a request the agent never saw. Only a crash in the instant between a
+ * finished post and its record can post a trigger twice. While a post is in
+ * flight the issue is skipped, so one process never posts two requests of an
+ * issue at once. A Jira event never cancels an armed usage-limit wait — the
+ * ledger's create hook tells the new request about it (core S5).
+ */
+export declare const jiraSearchPageSize = 50;
+/** The longest wait between two attempts while Jira keeps failing (R22). */
+export declare const jiraRetryBackoffCapMs: number;
+/**
+ * @description R22: the wait before the next attempt after `failureCount`
+ * failures in a row — the base interval doubled per failure, up to
+ * {@link jiraRetryBackoffCapMs} (never below the base interval).
+ */
+export declare function getJiraRetryDelayMs(baseMs: number, failureCount: number): number;
+/** Enough of each issue to decide; the prompt's fields are fetched only for a new request. */
+export declare const jiraSearchFields: string[];
+/** @name JiraProjectTrigger @description One allowlisted project as the poller uses it. */
+export interface JiraProjectTrigger {
+    folder: string;
+    triggerStatusIds: ReadonlySet<string>;
+    /** The project's `extraFields` the site knows, named (an unknown id was dropped at boot). */
+    extraFields: readonly JiraExtraField[];
+}
+/**
+ * @name JiraIssueDecision
+ * @description What the poller did with one returned issue.
+ *  - `notAllowed`  — its project is not in the allowlist (dropped).
+ *  - `notMatching` — no longer assigned to the AI account, or not in a trigger status.
+ *  - `posting`     — the post of its last request has not settled yet (skipped).
+ *  - `seen`        — its trigger was decided before.
+ *  - `selfAuthored`, `parked`, `untrusted`, `request` — the recorded outcomes; `untrusted` — the hand-over was
+ *    made by someone the trusted group does not back (a notice and the hand-back, no request).
+ *  - `failed`      — an error stopped it; the next poll tries again.
+ */
+export type JiraIssueDecision = 'notAllowed' | 'notMatching' | 'posting' | 'seen' | 'selfAuthored' | 'parked' | 'untrusted' | 'request' | 'failed';
+export interface JiraInboundDeps {
+    client: Pick<JiraClient, 'searchIssues' | 'getChangelogPage' | 'getIssue' | 'getComments' | 'getRemoteLinks'>;
+    aiAccountId: string;
+    /** `https://<site>` (or the test-only loopback base) — issue links are `<siteUrl>/browse/<KEY>`. */
+    siteUrl: string;
+    projects: ReadonlyMap<string, JiraProjectTrigger>;
+    runBudgetPer24h: number;
+    pollIntervalMs: number;
+    /** Where a conversation's text too long for its prompt is written whole (`promptSpill.ts`). */
+    getSpillDir: (key: SessionKey) => string;
+    triggerLog: JiraTriggerLog;
+    /** The trusted group (`trustedGroup.ts`); `null` without `trustedGroup` in `jira.json`: no filter. */
+    trust: JiraTrust | null;
+    now: () => number;
+    /** Bind the issue's conversation to its project's folder. */
+    bindConversation: (key: SessionKey, folder: string) => Promise<void>;
+    /**
+     * Open the request; `createPrompt` builds its prompt — kept by the request for a re-post (R21) — from
+     * its id and the ids of the same requester's open requests it replaced, which the header names (R34).
+     */
+    createRequest: (key: SessionKey, origin: RequestOrigin, createPrompt: (requestId: string, supersededRequestIds: readonly string[]) => string) => Promise<Pick<OpenRequestState, 'id' | 'supersededRequestIds'>>;
+    /**
+     * Post the request's prompt to the issue's session (and start watching its turn): `fullText` is the whole
+     * issue (the request keeps it for a re-post, a hold keeps it); `buildText` runs right before the forward and
+     * makes the delta for a session that already knows the issue (C5).
+     */
+    postRequest: (key: SessionKey, requestId: string, prompt: SessionPromptText) => Promise<void>;
+    /** What each issue's conversation was already told (C4). */
+    contextLedger: Pick<JiraContextLedger, 'getSnapshot' | 'recordBuild'>;
+    /** Over the run budget: the park notice and the hand-back (the answer side, J6). */
+    parkIssue: (issueKey: string, requester: JiraAccount | null) => Promise<void>;
+    /** A hand-over the trusted group `groupName` does not back: the fixed notice and the hand-back (the answer side). */
+    refuseUntrusted: (issueKey: string, requester: JiraAccount | null, groupName: string) => Promise<void>;
+}
+/** @description The poll's JQL (D13): the allowlist, assigned to the AI account, in a trigger status. */
+export declare function buildJiraTriggerJql(projects: ReadonlyMap<string, JiraProjectTrigger>): string;
+export declare class JiraInbound {
+    private readonly deps;
+    private timer;
+    private isRunning;
+    /** Polls in a row that failed — the backoff's exponent (R22). */
+    private failureCount;
+    /** Issues whose last request's post has not settled yet. */
+    private readonly postingIssueKeys;
+    constructor(deps: JiraInboundDeps);
+    /** @description Poll now, then every `pollIntervalMs` after each poll ENDS (never two at once). */
+    start(): void;
+    stop(): void;
+    private scheduleNext;
+    private runScheduledPoll;
+    /**
+     * @description One poll: every matching issue, each decided once. A {@link JiraAuthError} and a
+     * {@link JiraTrustedGroupGoneError} propagate, and so does a failed membership read: nothing is decided on a
+     * trusted-group list older than its age.
+     */
+    pollOnce(): Promise<Map<string, JiraIssueDecision>>;
+    private getDecisionSafely;
+    private getDecision;
+    private openRequest;
+    /**
+     * @description Post the request, then record its trigger — also when the post
+     * failed: the request stays open and the wake-up engine takes it from there
+     * (its backstop resumes the session, or alerts when nothing can be resumed).
+     * A record that cannot be written is still remembered for this process, so the
+     * posted request is never posted again before a restart. Never rejects.
+     */
+    private postAndRecord;
+    private recordOrWarn;
+    /**
+     * @description The issue's trigger and its requester, reading the changelog
+     * newest pages first and only as far as needed (D13, J5b): the first page with
+     * a matching entry holds the newest one — already seen, the read stops there,
+     * so a long-lived issue costs one page a poll — and older pages are read only
+     * while an app's trigger still needs the nearest earlier person (R24).
+     */
+    private findTrigger;
+    /**
+     * The changelog in pages, NEWEST first: the search's own copy when complete,
+     * else read backwards from its end through its endpoint (which lists oldest
+     * first), never fetching an entry twice.
+     */
+    private getChangelogNewestPagesFirst;
+}
+//# sourceMappingURL=inbound.d.ts.map

package/dist/connectors/jira/inbound.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"inbound.d.ts","sourceRoot":"","sources":["../../../src/connectors/jira/inbound.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,KAAK,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAE5E,OAAO,EAAwC,KAAK,WAAW,EAA6B,KAAK,UAAU,EAAkB,MAAM,UAAU,CAAC;AAG9I,OAAO,KAAK,EAAE,cAAc,EAAqB,MAAM,cAAc,CAAC;AACtE,OAAO,EAAyC,KAAK,cAAc,EAAE,MAAM,eAAe,CAAC;AAI3F,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACzD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAE7D,OAAO,EAA6B,KAAK,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAE3E;;;;;;;;;;;;;;;;;;GAkBG;AAEH,eAAO,MAAM,kBAAkB,KAAK,CAAC;AACrC,4EAA4E;AAC5E,eAAO,MAAM,qBAAqB,QAAiB,CAAC;AAEpD;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,MAAM,CAEhF;AACD,8FAA8F;AAC9F,eAAO,MAAM,gBAAgB,UAAgD,CAAC;AAE9E,2FAA2F;AAC3F,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,gBAAgB,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACtC,6FAA6F;IAC7F,WAAW,EAAE,SAAS,cAAc,EAAE,CAAC;CACxC;AAED;;;;;;;;;;GAUG;AACH,MAAM,MAAM,iBAAiB,GACzB,YAAY,GAAG,aAAa,GAAG,SAAS,GAAG,MAAM,GAAG,cAAc,GAAG,QAAQ,GAAG,WAAW,GAAG,SAAS,GAAG,QAAQ,CAAC;AAKvH,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE,cAAc,GAAG,kBAAkB,GAAG,UAAU,GAAG,aAAa,GAAG,gBAAgB,CAAC,CAAC;IAC9G,WAAW,EAAE,MAAM,CAAC;IACpB,oGAAoG;IACpG,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,WAAW,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;IAClD,eAAe,EAAE,MAAM,CAAC;IACxB,cAAc,EAAE,MAAM,CAAC;IACvB,+FAA+F;IAC/F,WAAW,EAAE,CAAC,GAAG,EAAE,UAAU,KAAK,MAAM,CAAC;IACzC,UAAU,EAAE,cAAc,CAAC;IAC3B,sGAAsG;IACtG,KAAK,EAAE,SAAS,GAAG,IAAI,CAAC;IACxB,GAAG,EAAE,MAAM,MAAM,CAAC;IAClB,6DAA6D;IAC7D,gBAAgB,EAAE,CAAC,GAAG,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACrE;;;OAGG;IACH,aAAa,EAAE,CACb,GAAG,EAAE,UAAU,EACf,MAAM,EAAE,aAAa,EACrB,YAAY,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,oBAAoB,EAAE,SAAS,MAAM,EAAE,KAAK,MAAM,KACjF,OAAO,CAAC,IAAI,CAAC,gBAAgB,EAAE,IAAI,GAAG,sBAAsB,CAAC,CAAC,CAAC;IACpE;;;;OAIG;IACH,WAAW,EAAE,CAAC,GAAG,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,iBAAiB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9F,4DAA4D;IAC5D,aAAa,EAAE,IAAI,CAAC,iBAAiB,EAAE,aAAa,GAAG,aAAa,CAAC,CAAC;IACtE,oFAAoF;IACpF,SAAS,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,GAAG,IAAI,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9E,qHAAqH;IACrH,eAAe,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,GAAG,IAAI,EAAE,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACxG;AAED,yGAAyG;AACzG,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,WAAW,CAAC,MAAM,EAAE,kBAAkB,CAAC,GAAG,MAAM,CAM7F;AAED,qBAAa,WAAW;IAQV,OAAO,CAAC,QAAQ,CAAC,IAAI;IAPjC,OAAO,CAAC,KAAK,CAA+B;IAC5C,OAAO,CAAC,SAAS,CAAS;IAC1B,iEAAiE;IACjE,OAAO,CAAC,YAAY,CAAK;IACzB,4DAA4D;IAC5D,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAqB;gBAEzB,IAAI,EAAE,eAAe;IAElD,mGAAmG;IACnG,KAAK,IAAI,IAAI;IAMb,IAAI,IAAI,IAAI;IAMZ,OAAO,CAAC,YAAY;YAON,gBAAgB;IAmB9B;;;;OAIG;IACG,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;YAsB3C,iBAAiB;YAUjB,WAAW;YAqCX,WAAW;IAkEzB;;;;;;OAMG;YACW,aAAa;IAU3B,OAAO,CAAC,YAAY;IAMpB;;;;;;OAMG;YACW,WAAW;IAmBzB;;;;OAIG;YACY,4BAA4B;CAuB5C"}

package/dist/connectors/jira/inbound.js

@@ -0,0 +1,331 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.JiraInbound = exports.jiraSearchFields = exports.jiraRetryBackoffCapMs = exports.jiraSearchPageSize = void 0;
+exports.getJiraRetryDelayMs = getJiraRetryDelayMs;
+exports.buildJiraTriggerJql = buildJiraTriggerJql;
+const requestGroup_1 = require("../../requests/requestGroup");
+const client_1 = require("./client");
+const sessionKeyCodec_1 = require("./sessionKeyCodec");
+const trigger_1 = require("./trigger");
+const issueBlocks_1 = require("./issueBlocks");
+const issueContext_1 = require("./issueContext");
+const prompt_1 = require("./prompt");
+const issueDelta_1 = require("./issueDelta");
+const promptSpill_1 = require("./promptSpill");
+const trustedGroup_1 = require("./trustedGroup");
+/**
+ * @description The Jira connector's inbound side (plan J5, D12/D13/D15/D21): a
+ * poll loop, one search per cycle, and per issue the decision chain
+ *
+ *   allowlist → still matching → no post in flight → trigger (newest changelog pages first) → seen before → self-authored
+ *     → hand-over backed by the trusted group (only with `trustedGroup`) → run budget → fetch the issue → bind
+ *     → open a request → post (not awaited)
+ *     → RECORD the trigger once the post settled
+ *
+ * The trigger is recorded only once its post SETTLED: a restart while the prompt
+ * has not reached the session yet (a session start, a busy turn the post waits
+ * out) leaves the trigger unrecorded and its request open, so the next poll opens
+ * a fresh request — which supersedes the old one — and posts it, instead of
+ * leaving a request the agent never saw. Only a crash in the instant between a
+ * finished post and its record can post a trigger twice. While a post is in
+ * flight the issue is skipped, so one process never posts two requests of an
+ * issue at once. A Jira event never cancels an armed usage-limit wait — the
+ * ledger's create hook tells the new request about it (core S5).
+ */
+exports.jiraSearchPageSize = 50;
+/** The longest wait between two attempts while Jira keeps failing (R22). */
+exports.jiraRetryBackoffCapMs = 15 * 60 * 1000;
+/**
+ * @description R22: the wait before the next attempt after `failureCount`
+ * failures in a row — the base interval doubled per failure, up to
+ * {@link jiraRetryBackoffCapMs} (never below the base interval).
+ */
+function getJiraRetryDelayMs(baseMs, failureCount) {
+    return Math.min(baseMs * 2 ** failureCount, Math.max(baseMs, exports.jiraRetryBackoffCapMs));
+}
+/** Enough of each issue to decide; the prompt's fields are fetched only for a new request. */
+exports.jiraSearchFields = ['status', 'assignee', 'reporter', 'creator'];
+/** Decisions that change nothing, left out of the poll's log line. */
+const quietDecisions = new Set(['notMatching', 'posting', 'seen']);
+/** @description The poll's JQL (D13): the allowlist, assigned to the AI account, in a trigger status. */
+function buildJiraTriggerJql(projects) {
+    const projectKeys = [...projects.keys()].map((projectKey) => `"${projectKey}"`).join(', ');
+    const statusIds = [...new Set([...projects.values()].flatMap((project) => [...project.triggerStatusIds]))]
+        .map((statusId) => `"${statusId}"`)
+        .join(', ');
+    return `project in (${projectKeys}) AND assignee = currentUser() AND status in (${statusIds}) ORDER BY created ASC`;
+}
+class JiraInbound {
+    deps;
+    timer = null;
+    isRunning = false;
+    /** Polls in a row that failed — the backoff's exponent (R22). */
+    failureCount = 0;
+    /** Issues whose last request's post has not settled yet. */
+    postingIssueKeys = new Set();
+    constructor(deps) {
+        this.deps = deps;
+    }
+    /** @description Poll now, then every `pollIntervalMs` after each poll ENDS (never two at once). */
+    start() {
+        if (this.isRunning)
+            return;
+        this.isRunning = true;
+        this.scheduleNext(0);
+    }
+    stop() {
+        this.isRunning = false;
+        if (this.timer)
+            clearTimeout(this.timer);
+        this.timer = null;
+    }
+    scheduleNext(delayMs) {
+        // Not unref'd on purpose: in a Jira-only instance this timer is what keeps the process alive (D9).
+        this.timer = setTimeout(() => {
+            void this.runScheduledPoll();
+        }, delayMs);
+    }
+    async runScheduledPoll() {
+        try {
+            await this.pollOnce();
+            this.failureCount = 0;
+        }
+        catch (error) {
+            if (error instanceof client_1.JiraAuthError || error instanceof trustedGroup_1.JiraTrustedGroupGoneError) {
+                // D14: wrong or revoked credentials, or a trusted group deleted from the site, do not fix themselves;
+                // one loud line, then stop.
+                console.error(`[jira] polling STOPPED: ${error.message}`);
+                this.stop();
+                return;
+            }
+            // R22: a Jira outage never stops polling — the next attempt just waits longer.
+            this.failureCount += 1;
+            console.warn(`[jira] poll failed (${this.failureCount} in a row): ${error instanceof Error ? error.message : String(error)}`);
+        }
+        if (this.isRunning)
+            this.scheduleNext(getJiraRetryDelayMs(this.deps.pollIntervalMs, this.failureCount));
+    }
+    /**
+     * @description One poll: every matching issue, each decided once. A {@link JiraAuthError} and a
+     * {@link JiraTrustedGroupGoneError} propagate, and so does a failed membership read: nothing is decided on a
+     * trusted-group list older than its age.
+     */
+    async pollOnce() {
+        const decisions = new Map();
+        const jql = buildJiraTriggerJql(this.deps.projects);
+        let nextPageToken;
+        do {
+            // Before every page, not only the first: deciding a long page takes time, and the list must not age out under it.
+            await this.deps.trust?.refreshIfStale();
+            const page = await this.deps.client.searchIssues({
+                jql,
+                fields: exports.jiraSearchFields,
+                isChangelogExpanded: true,
+                maxResults: exports.jiraSearchPageSize,
+                nextPageToken,
+            });
+            for (const issue of page.issues)
+                decisions.set(issue.key, await this.getDecisionSafely(issue));
+            nextPageToken = page.isLast ? undefined : (page.nextPageToken ?? undefined);
+        } while (nextPageToken);
+        const acted = [...decisions].filter(([, decision]) => !quietDecisions.has(decision));
+        if (acted.length > 0)
+            console.log(`[jira] poll: ${acted.map(([issueKey, decision]) => `${issueKey} ${decision}`).join(', ')}`);
+        return decisions;
+    }
+    async getDecisionSafely(issue) {
+        try {
+            return await this.getDecision(issue);
+        }
+        catch (error) {
+            if (error instanceof client_1.JiraAuthError)
+                throw error;
+            console.warn(`[jira] ${issue.key}: ${error instanceof Error ? error.message : String(error)}`);
+            return 'failed';
+        }
+    }
+    async getDecision(issue) {
+        const { deps } = this;
+        const projectKey = (0, sessionKeyCodec_1.getJiraIssueProjectKey)(issue.key);
+        const project = projectKey === null ? undefined : deps.projects.get(projectKey);
+        // D13: the JQL names only the allowlist, but every returned issue is checked again.
+        if (!project)
+            return 'notAllowed';
+        const statusId = issue.fields.status?.id;
+        if (issue.fields.assignee?.accountId !== deps.aiAccountId || statusId === undefined || !project.triggerStatusIds.has(statusId)) {
+            return 'notMatching';
+        }
+        if (this.postingIssueKeys.has(issue.key))
+            return 'posting';
+        const found = await this.findTrigger(issue, project);
+        if (found === 'seen')
+            return 'seen';
+        const { trigger, requester } = found;
+        const at = deps.now();
+        if (trigger.author?.accountId === deps.aiAccountId) {
+            this.recordOrWarn({ issueKey: issue.key, triggerId: trigger.triggerId, outcome: 'selfAuthored', at });
+            return 'selfAuthored';
+        }
+        // The HAND-OVER decides: the account that made the change — an app or automation is trusted, so what it hands
+        // over starts the agent whoever the requester turns out to be. A change Jira names no one for falls back to the
+        // requester, and no account at all is untrusted (fail closed).
+        if (deps.trust && !deps.trust.checkIsTrusted(trigger.author ?? requester)) {
+            // Recorded first, as a park: the notice is posted at most once per trigger, never again by a failed or repeated poll.
+            if (!this.recordOrWarn({ issueKey: issue.key, triggerId: trigger.triggerId, outcome: 'untrusted', at }))
+                return 'failed';
+            await deps.refuseUntrusted(issue.key, requester, deps.trust.groupName);
+            return 'untrusted';
+        }
+        if (deps.triggerLog.getRequestCountLastDay(issue.key, at) >= deps.runBudgetPer24h) {
+            // Recorded first: a failed notice is not repeated on every poll (at most one per trigger).
+            if (!this.recordOrWarn({ issueKey: issue.key, triggerId: trigger.triggerId, outcome: 'parked', at }))
+                return 'failed';
+            await deps.parkIssue(issue.key, requester);
+            return 'parked';
+        }
+        return this.openRequest(issue, project, trigger, requester, at);
+    }
+    async openRequest(issue, project, trigger, requester, at) {
+        const { deps } = this;
+        const { trust } = deps;
+        // Fetched before the request opens: a request is never left without its prompt. The whole changelog is read
+        // only with a trusted group — it says who wrote each field — and once per request, never per poll.
+        const context = await (0, issueContext_1.fetchJiraIssueContext)(deps.client, issue.key, project.extraFields.map((extraField) => extraField.id), trust !== null);
+        const blockTrust = trust && {
+            checkIsTrusted: (account) => trust.checkIsTrusted(account),
+            allowlistedProjectKeys: new Set(deps.projects.keys()),
+        };
+        const blocks = (0, issueBlocks_1.buildIssueBlocks)(context, project.extraFields, deps.aiAccountId, blockTrust);
+        const key = (0, sessionKeyCodec_1.makeJiraKey)(issue.key);
+        const promptInput = {
+            issueKey: issue.key,
+            statusName: context.issue.fields.status?.name,
+            issueUrl: `${deps.siteUrl.replace(/\/+$/, '')}/browse/${issue.key}`,
+            trigger,
+            requester,
+            isTextFiltered: trust !== null,
+        };
+        // Rendered and written BEFORE the request opens: the ledger builds the prompt inside its own synchronous update.
+        const fitted = await (0, promptSpill_1.fitBlocksToPrompt)({
+            blocks,
+            textDir: deps.getSpillDir(key),
+            measure: (candidate) => (0, prompt_1.buildJiraRequestPrompt)({ ...promptInput, requestId: promptSpill_1.standInRequestId, ...candidate }).length,
+        });
+        await deps.bindConversation(key, project.folder);
+        const createPrompt = (requestId, supersededRequestIds) => (0, prompt_1.buildJiraRequestPrompt)({
+            ...promptInput,
+            requestId,
+            ...fitted,
+            supersededRequestIds,
+        });
+        // R34: the requester is part of the request's group key — a second person's trigger on the same
+        // issue opens a request of its own instead of superseding the first (`requests/requestGroup.ts`).
+        const request = await deps.createRequest(key, {
+            kind: 'trackerEvent',
+            attributes: { issueKey: issue.key, triggerId: trigger.triggerId, [requestGroup_1.requestRequesterAttribute]: requester?.accountId ?? requestGroup_1.emptyRequester },
+        }, createPrompt);
+        const supersededRequestIds = request.supersededRequestIds ?? [];
+        const fullText = createPrompt(request.id, supersededRequestIds);
+        const prompt = {
+            fullText,
+            // C5: built only once the post knows whether the session is fresh — right before the forward.
+            buildText: ({ isFresh }) => {
+                const snapshot = deps.contextLedger.getSnapshot(issue.key);
+                const isWhole = isFresh || Object.keys(snapshot.sent).length === 0;
+                const delta = (0, issueDelta_1.getIssueDelta)(fitted.blocks, isWhole ? {} : snapshot.sent);
+                // Counted as sent only once the agent takes it in (C4): the connector commits it then.
+                deps.contextLedger.recordBuild(issue.key, request.id, snapshot.generation, delta.sent);
+                return isWhole ? fullText : (0, prompt_1.buildJiraDeltaPrompt)({ ...promptInput, requestId: request.id, supersededRequestIds, delta });
+            },
+        };
+        // Not awaited: a busy session may take minutes to take the prompt, and the rest of
+        // the poll must not wait for it; until the post settles, the issue is skipped.
+        this.postingIssueKeys.add(issue.key);
+        void this.postAndRecord(key, request.id, prompt, { issueKey: issue.key, triggerId: trigger.triggerId, outcome: 'request', at, requestId: request.id });
+        return 'request';
+    }
+    /**
+     * @description Post the request, then record its trigger — also when the post
+     * failed: the request stays open and the wake-up engine takes it from there
+     * (its backstop resumes the session, or alerts when nothing can be resumed).
+     * A record that cannot be written is still remembered for this process, so the
+     * posted request is never posted again before a restart. Never rejects.
+     */
+    async postAndRecord(key, requestId, prompt, record) {
+        try {
+            await this.deps.postRequest(key, requestId, prompt);
+        }
+        catch (error) {
+            console.warn(`[jira] ${record.issueKey}: request ${requestId} not posted: ${error instanceof Error ? error.message : String(error)}`);
+        }
+        if (!this.recordOrWarn(record))
+            this.deps.triggerLog.remember(record);
+        this.postingIssueKeys.delete(record.issueKey);
+    }
+    recordOrWarn(record) {
+        const isRecorded = this.deps.triggerLog.record(record);
+        if (!isRecorded)
+            console.warn(`[jira] ${record.issueKey}: trigger ${record.triggerId} (${record.outcome}) could not be recorded`);
+        return isRecorded;
+    }
+    /**
+     * @description The issue's trigger and its requester, reading the changelog
+     * newest pages first and only as far as needed (D13, J5b): the first page with
+     * a matching entry holds the newest one — already seen, the read stops there,
+     * so a long-lived issue costs one page a poll — and older pages are read only
+     * while an app's trigger still needs the nearest earlier person (R24).
+     */
+    async findTrigger(issue, project) {
+        const { deps } = this;
+        const match = { aiAccountId: deps.aiAccountId, triggerStatusIds: project.triggerStatusIds };
+        const reporter = issue.fields.reporter ?? null;
+        const histories = [];
+        for await (const page of this.getChangelogNewestPagesFirst(issue)) {
+            histories.push(...page);
+            const trigger = (0, trigger_1.findNewestTrigger)(histories, match);
+            if (!trigger)
+                continue;
+            if (deps.triggerLog.checkIsSeen(issue.key, trigger.triggerId))
+                return 'seen';
+            const isRequesterKnown = trigger.author?.accountId === deps.aiAccountId
+                || (0, trigger_1.getRequester)(trigger, histories, null, deps.aiAccountId) !== null;
+            if (isRequesterKnown)
+                return { trigger, requester: (0, trigger_1.getRequester)(trigger, histories, reporter, deps.aiAccountId) };
+        }
+        const trigger = (0, trigger_1.getIssueTrigger)(histories, match, issue.fields.creator ?? reporter);
+        if (deps.triggerLog.checkIsSeen(issue.key, trigger.triggerId))
+            return 'seen';
+        return { trigger, requester: (0, trigger_1.getRequester)(trigger, histories, reporter, deps.aiAccountId) };
+    }
+    /**
+     * The changelog in pages, NEWEST first: the search's own copy when complete,
+     * else read backwards from its end through its endpoint (which lists oldest
+     * first), never fetching an entry twice.
+     */
+    async *getChangelogNewestPagesFirst(issue) {
+        const { changelog } = issue;
+        if (changelog && changelog.total <= changelog.histories.length) {
+            yield changelog.histories;
+            return;
+        }
+        let total = changelog?.total;
+        if (total === undefined) {
+            const first = await this.deps.client.getChangelogPage(issue.key, 0, client_1.jiraChangelogPageSize);
+            if (first.total <= first.values.length) {
+                yield first.values;
+                return;
+            }
+            total = first.total;
+        }
+        for (let end = total; end > 0;) {
+            const startAt = Math.max(0, end - client_1.jiraChangelogPageSize);
+            const page = await this.deps.client.getChangelogPage(issue.key, startAt, end - startAt);
+            if (page.values.length === 0)
+                return;
+            yield page.values;
+            end = startAt;
+        }
+    }
+}
+exports.JiraInbound = JiraInbound;
+//# sourceMappingURL=inbound.js.map

package/dist/connectors/jira/inbound.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inbound.js","sourceRoot":"","sources":["../../../src/connectors/jira/inbound.ts"],"names":[],"mappings":";;;AA6CA,kDAEC;AAqED,kDAMC;AAxHD,8DAAwF;AACxF,qCAA8I;AAC9I,uDAAwE;AACxE,uCAAoG;AAEpG,+CAA2F;AAC3F,iDAAuD;AACvD,qCAAwE;AACxE,6CAA6C;AAG7C,+CAAoE;AACpE,iDAA2E;AAE3E;;;;;;;;;;;;;;;;;;GAkBG;AAEU,QAAA,kBAAkB,GAAG,EAAE,CAAC;AACrC,4EAA4E;AAC/D,QAAA,qBAAqB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAEpD;;;;GAIG;AACH,SAAgB,mBAAmB,CAAC,MAAc,EAAE,YAAoB;IACtE,OAAO,IAAI,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,YAAY,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,6BAAqB,CAAC,CAAC,CAAC;AACvF,CAAC;AACD,8FAA8F;AACjF,QAAA,gBAAgB,GAAG,CAAC,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC;AAwB9E,sEAAsE;AACtE,MAAM,cAAc,GAAmC,IAAI,GAAG,CAAC,CAAC,aAAa,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;AAyCnG,yGAAyG;AACzG,SAAgB,mBAAmB,CAAC,QAAiD;IACnF,MAAM,WAAW,GAAG,CAAC,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,IAAI,UAAU,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3F,MAAM,SAAS,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;SACvG,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,IAAI,QAAQ,GAAG,CAAC;SAClC,IAAI,CAAC,IAAI,CAAC,CAAC;IACd,OAAO,eAAe,WAAW,iDAAiD,SAAS,wBAAwB,CAAC;AACtH,CAAC;AAED,MAAa,WAAW;IAQO;IAPrB,KAAK,GAA0B,IAAI,CAAC;IACpC,SAAS,GAAG,KAAK,CAAC;IAC1B,iEAAiE;IACzD,YAAY,GAAG,CAAC,CAAC;IACzB,4DAA4D;IAC3C,gBAAgB,GAAG,IAAI,GAAG,EAAU,CAAC;IAEtD,YAA6B,IAAqB;QAArB,SAAI,GAAJ,IAAI,CAAiB;IAAG,CAAC;IAEtD,mGAAmG;IACnG,KAAK;QACH,IAAI,IAAI,CAAC,SAAS;YAAE,OAAO;QAC3B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACtB,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACvB,CAAC;IAED,IAAI;QACF,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;QACvB,IAAI,IAAI,CAAC,KAAK;YAAE,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACpB,CAAC;IAEO,YAAY,CAAC,OAAe;QAClC,mGAAmG;QACnG,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC3B,KAAK,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC/B,CAAC,EAAE,OAAO,CAAC,CAAC;IACd,CAAC;IAEO,KAAK,CAAC,gBAAgB;QAC5B,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;YACtB,IAAI,CAAC,YAAY,GAAG,CAAC,CAAC;QACxB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,sBAAa,IAAI,KAAK,YAAY,wCAAyB,EAAE,CAAC;gBACjF,sGAAsG;gBACtG,4BAA4B;gBAC5B,OAAO,CAAC,KAAK,CAAC,2BAA2B,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;gBAC1D,IAAI,CAAC,IAAI,EAAE,CAAC;gBACZ,OAAO;YACT,CAAC;YACD,+EAA+E;YAC/E,IAAI,CAAC,YAAY,IAAI,CAAC,CAAC;YACvB,OAAO,CAAC,IAAI,CAAC,uBAAuB,IAAI,CAAC,YAAY,eAAe,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAChI,CAAC;QACD,IAAI,IAAI,CAAC,SAAS;YAAE,IAAI,CAAC,YAAY,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;IAC1G,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,QAAQ;QACZ,MAAM,SAAS,GAAG,IAAI,GAAG,EAA6B,CAAC;QACvD,MAAM,GAAG,GAAG,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACpD,IAAI,aAAiC,CAAC;QACtC,GAAG,CAAC;YACF,kHAAkH;YAClH,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,cAAc,EAAE,CAAC;YACxC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC;gBAC/C,GAAG;gBACH,MAAM,EAAE,wBAAgB;gBACxB,mBAAmB,EAAE,IAAI;gBACzB,UAAU,EAAE,0BAAkB;gBAC9B,aAAa;aACd,CAAC,CAAC;YACH,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM;gBAAE,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC;YAC/F,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,IAAI,SAAS,CAAC,CAAC;QAC9E,CAAC,QAAQ,aAAa,EAAE;QACxB,MAAM,KAAK,GAAG,CAAC,GAAG,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;QACrF,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,GAAG,QAAQ,IAAI,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC/H,OAAO,SAAS,CAAC;IACnB,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAAC,KAAgB;QAC9C,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QACvC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,sBAAa;gBAAE,MAAM,KAAK,CAAC;YAChD,OAAO,CAAC,IAAI,CAAC,UAAU,KAAK,CAAC,GAAG,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAC/F,OAAO,QAAQ,CAAC;QAClB,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,KAAgB;QACxC,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;QACtB,MAAM,UAAU,GAAG,IAAA,wCAAsB,EAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACrD,MAAM,OAAO,GAAG,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAChF,oFAAoF;QACpF,IAAI,CAAC,OAAO;YAAE,OAAO,YAAY,CAAC;QAClC,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;QACzC,IAAI,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,SAAS,KAAK,IAAI,CAAC,WAAW,IAAI,QAAQ,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC/H,OAAO,aAAa,CAAC;QACvB,CAAC;QACD,IAAI,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC;YAAE,OAAO,SAAS,CAAC;QAC3D,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACrD,IAAI,KAAK,KAAK,MAAM;YAAE,OAAO,MAAM,CAAC;QACpC,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC;QACrC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACtB,IAAI,OAAO,CAAC,MAAM,EAAE,SAAS,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC;YACnD,IAAI,CAAC,YAAY,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,GAAG,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,OAAO,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC,CAAC;YACtG,OAAO,cAAc,CAAC;QACxB,CAAC;QACD,8GAA8G;QAC9G,gHAAgH;QAChH,+DAA+D;QAC/D,IAAI,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,OAAO,CAAC,MAAM,IAAI,SAAS,CAAC,EAAE,CAAC;YAC1E,sHAAsH;YACtH,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,GAAG,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,OAAO,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;gBAAE,OAAO,QAAQ,CAAC;YACzH,MAAM,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,GAAG,EAAE,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YACvE,OAAO,WAAW,CAAC;QACrB,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,CAAC,sBAAsB,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YAClF,2FAA2F;YAC3F,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,GAAG,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;gBAAE,OAAO,QAAQ,CAAC;YACtH,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;YAC3C,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,OAAO,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;IAClE,CAAC;IAEO,KAAK,CAAC,WAAW,CACvB,KAAgB,EAChB,OAA2B,EAC3B,OAAyB,EACzB,SAA6B,EAC7B,EAAU;QAEV,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;QACtB,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;QACvB,4GAA4G;QAC5G,mGAAmG;QACnG,MAAM,OAAO,GAAG,MAAM,IAAA,oCAAqB,EAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,EAAE,KAAK,KAAK,IAAI,CAAC,CAAC;QAC5I,MAAM,UAAU,GAA0B,KAAK,IAAI;YACjD,cAAc,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,OAAO,CAAC;YAC1D,sBAAsB,EAAE,IAAI,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;SACtD,CAAC;QACF,MAAM,MAAM,GAAG,IAAA,8BAAgB,EAAC,OAAO,EAAE,OAAO,CAAC,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;QAC5F,MAAM,GAAG,GAAG,IAAA,6BAAW,EAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACnC,MAAM,WAAW,GAAG;YAClB,QAAQ,EAAE,KAAK,CAAC,GAAG;YACnB,UAAU,EAAE,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI;YAC7C,QAAQ,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,WAAW,KAAK,CAAC,GAAG,EAAE;YACnE,OAAO;YACP,SAAS;YACT,cAAc,EAAE,KAAK,KAAK,IAAI;SAC/B,CAAC;QACF,iHAAiH;QACjH,MAAM,MAAM,GAAG,MAAM,IAAA,+BAAiB,EAAC;YACrC,MAAM;YACN,OAAO,EAAE,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC;YAC9B,OAAO,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,IAAA,+BAAsB,EAAC,EAAE,GAAG,WAAW,EAAE,SAAS,EAAE,8BAAgB,EAAE,GAAG,SAAS,EAAE,CAAC,CAAC,MAAM;SACrH,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QACjD,MAAM,YAAY,GAAG,CAAC,SAAiB,EAAE,oBAAuC,EAAU,EAAE,CAAC,IAAA,+BAAsB,EAAC;YAClH,GAAG,WAAW;YACd,SAAS;YACT,GAAG,MAAM;YACT,oBAAoB;SACrB,CAAC,CAAC;QACH,gGAAgG;QAChG,kGAAkG;QAClG,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE;YAC5C,IAAI,EAAE,cAAc;YACpB,UAAU,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,GAAG,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,wCAAyB,CAAC,EAAE,SAAS,EAAE,SAAS,IAAI,6BAAc,EAAE;SACvI,EAAE,YAAY,CAAC,CAAC;QACjB,MAAM,oBAAoB,GAAG,OAAO,CAAC,oBAAoB,IAAI,EAAE,CAAC;QAChE,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,CAAC,EAAE,EAAE,oBAAoB,CAAC,CAAC;QAChE,MAAM,MAAM,GAAsB;YAChC,QAAQ;YACR,8FAA8F;YAC9F,SAAS,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE;gBACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBAC3D,MAAM,OAAO,GAAG,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC;gBACnE,MAAM,KAAK,GAAG,IAAA,0BAAa,EAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;gBACzE,uFAAuF;gBACvF,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,EAAE,QAAQ,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;gBACvF,OAAO,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAA,6BAAoB,EAAC,EAAE,GAAG,WAAW,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAAC,CAAC;YAC3H,CAAC;SACF,CAAC;QACF,mFAAmF;QACnF,+EAA+E;QAC/E,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACrC,KAAK,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,GAAG,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;QACvJ,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;;;;;OAMG;IACK,KAAK,CAAC,aAAa,CAAC,GAAe,EAAE,SAAiB,EAAE,MAAyB,EAAE,MAAyB;QAClH,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;QACtD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,IAAI,CAAC,UAAU,MAAM,CAAC,QAAQ,aAAa,SAAS,gBAAgB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACxI,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC;YAAE,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACtE,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAChD,CAAC;IAEO,YAAY,CAAC,MAAyB;QAC5C,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACvD,IAAI,CAAC,UAAU;YAAE,OAAO,CAAC,IAAI,CAAC,UAAU,MAAM,CAAC,QAAQ,aAAa,MAAM,CAAC,SAAS,KAAK,MAAM,CAAC,OAAO,yBAAyB,CAAC,CAAC;QAClI,OAAO,UAAU,CAAC;IACpB,CAAC;IAED;;;;;;OAMG;IACK,KAAK,CAAC,WAAW,CAAC,KAAgB,EAAE,OAA2B;QACrE,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;QACtB,MAAM,KAAK,GAAG,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,EAAE,CAAC;QAC5F,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,QAAQ,IAAI,IAAI,CAAC;QAC/C,MAAM,SAAS,GAA2B,EAAE,CAAC;QAC7C,IAAI,KAAK,EAAE,MAAM,IAAI,IAAI,IAAI,CAAC,4BAA4B,CAAC,KAAK,CAAC,EAAE,CAAC;YAClE,SAAS,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;YACxB,MAAM,OAAO,GAAG,IAAA,2BAAiB,EAAC,SAAS,EAAE,KAAK,CAAC,CAAC;YACpD,IAAI,CAAC,OAAO;gBAAE,SAAS;YACvB,IAAI,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC,SAAS,CAAC;gBAAE,OAAO,MAAM,CAAC;YAC7E,MAAM,gBAAgB,GAAG,OAAO,CAAC,MAAM,EAAE,SAAS,KAAK,IAAI,CAAC,WAAW;mBAClE,IAAA,sBAAY,EAAC,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,KAAK,IAAI,CAAC;YACvE,IAAI,gBAAgB;gBAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,IAAA,sBAAY,EAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QACpH,CAAC;QACD,MAAM,OAAO,GAAG,IAAA,yBAAe,EAAC,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,OAAO,IAAI,QAAQ,CAAC,CAAC;QACpF,IAAI,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC,SAAS,CAAC;YAAE,OAAO,MAAM,CAAC;QAC7E,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,IAAA,sBAAY,EAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;IAC9F,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,CAAC,4BAA4B,CAAC,KAAgB;QAC1D,MAAM,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC;QAC5B,IAAI,SAAS,IAAI,SAAS,CAAC,KAAK,IAAI,SAAS,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC;YAC/D,MAAM,SAAS,CAAC,SAAS,CAAC;YAC1B,OAAO;QACT,CAAC;QACD,IAAI,KAAK,GAAG,SAAS,EAAE,KAAK,CAAC;QAC7B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,8BAAqB,CAAC,CAAC;YAC3F,IAAI,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;gBACvC,MAAM,KAAK,CAAC,MAAM,CAAC;gBACnB,OAAO;YACT,CAAC;YACD,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;QACtB,CAAC;QACD,KAAK,IAAI,GAAG,GAAG,KAAK,EAAE,GAAG,GAAG,CAAC,GAAG,CAAC;YAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,GAAG,8BAAqB,CAAC,CAAC;YACzD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,GAAG,OAAO,CAAC,CAAC;YACxF,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO;YACrC,MAAM,IAAI,CAAC,MAAM,CAAC;YAClB,GAAG,GAAG,OAAO,CAAC;QAChB,CAAC;IACH,CAAC;CACF;AA1QD,kCA0QC"}

package/dist/connectors/jira/issueBlocks.d.ts

@@ -0,0 +1,74 @@
+import type { JiraAccount } from './client';
+import type { JiraIssueContext } from './issueContext';
+/**
+ * @description An issue as the ordered list of blocks its prompt is made of
+ * (plan C3): `fields`, `description`, `hierarchy`, `links`, `attachments`, then
+ * one `comment:<id>` per comment, oldest first. Each block is rendered to text
+ * once and hashed, so a later request can tell a block that changed from one the
+ * agent already has. Every name and title is kept to one line and every body
+ * quoted line by line (`promptText.ts`): all of it is written by people who can
+ * edit the issue, or a linked one.
+ *
+ * With a trusted group (`trust` set) a piece of the issue's own text reaches the
+ * agent only when EVERYONE who wrote it is trusted — a member, the AI account or
+ * an app; an author Jira does not name counts as untrusted. Text that does not
+ * is replaced IN PLACE by a marker (`[withheld: …]`) before the blocks are
+ * hashed, fitted or spilled, so it never reaches a prompt, a delta or a file.
+ */
+export type IssueBlockKind = 'fields' | 'description' | 'hierarchy' | 'links' | 'attachments' | 'comment';
+export interface IssueBlock {
+    /** Stable across requests: the kind, or `comment:<id>`. */
+    key: string;
+    kind: IssueBlockKind;
+    /** The block's first line, without its colon and without any state note. */
+    heading: string;
+    /** The lines under the heading, already single-line or quoted. A spilled block's is a pointer to its file. */
+    body: string;
+    /** What the block says, whole and unquoted: a comment's or the description's own text, else the body. A spill file holds exactly this. */
+    fullText: string;
+    /** sha256 of what the block says. A comment's covers its text and visibility marker only, so a no-op save never changes it. Spilling does not change it. */
+    hash: string;
+    /** Set once the block was moved to a file (`promptSpill.ts`): where. */
+    spilledTo?: string;
+    /** A comment block's own facts; absent for the other kinds. */
+    comment?: IssueBlockComment;
+    /** The whole text was written or edited by someone outside the trusted group: the block is a marker, on the heading's own line. */
+    isWithheld?: boolean;
+}
+/** What a delta says about a comment beyond its text (prompt context C4–C7). */
+export interface IssueBlockComment {
+    /** `comment <id> by <name> from <date>`: what the line of a deleted comment names. */
+    label: string;
+    /** `edited <date> by <name>`: the note of a comment that changed since it was sent. */
+    editNote: string;
+    /** Written by the AI account and edited by nobody else: the agent's own answer, never sent back in a delta (C7). */
+    isOwn: boolean;
+}
+/** A project's extra field as the site names it (resolved from `jira.json` `extraFields` at boot). */
+export interface JiraExtraField {
+    id: string;
+    name: string;
+}
+/**
+ * @name JiraBlockTrust
+ * @description The trusted group as the blocks need it: who is trusted, and which projects the operator listed —
+ * another issue's summary is shown only from those (the agent may read them through its own tools anyway).
+ */
+export interface JiraBlockTrust {
+    checkIsTrusted: (account: JiraAccount | null | undefined) => boolean;
+    allowlistedProjectKeys: ReadonlySet<string>;
+}
+/**
+ * @description The block as the prompt prints it; `stateNote` (`new`, `changed since your last prompt`, …) follows
+ * the heading. A withheld block is one line: its marker follows the heading's colon.
+ */
+export declare function getIssueBlockText(block: IssueBlock, stateNote?: string): string;
+/**
+ * @description The issue as blocks, in prompt order. Media in the description
+ * and the comments become placeholders naming their attachment (C9); the
+ * attachments block then says where each file is referenced. With `trust` set,
+ * text outside the trusted group is replaced by markers (see the file header);
+ * `null` is the unfiltered issue, as it always was.
+ */
+export declare function buildIssueBlocks(context: JiraIssueContext, extraFields: readonly JiraExtraField[], aiAccountId: string, trust?: JiraBlockTrust | null): IssueBlock[];
+//# sourceMappingURL=issueBlocks.d.ts.map

package/dist/connectors/jira/issueBlocks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"issueBlocks.d.ts","sourceRoot":"","sources":["../../../src/connectors/jira/issueBlocks.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,WAAW,EAAkE,MAAM,UAAU,CAAC;AAC5G,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAOvD;;;;;;;;;;;;;;GAcG;AAEH,MAAM,MAAM,cAAc,GAAG,QAAQ,GAAG,aAAa,GAAG,WAAW,GAAG,OAAO,GAAG,aAAa,GAAG,SAAS,CAAC;AAE1G,MAAM,WAAW,UAAU;IACzB,2DAA2D;IAC3D,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,cAAc,CAAC;IACrB,4EAA4E;IAC5E,OAAO,EAAE,MAAM,CAAC;IAChB,8GAA8G;IAC9G,IAAI,EAAE,MAAM,CAAC;IACb,0IAA0I;IAC1I,QAAQ,EAAE,MAAM,CAAC;IACjB,4JAA4J;IAC5J,IAAI,EAAE,MAAM,CAAC;IACb,wEAAwE;IACxE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,+DAA+D;IAC/D,OAAO,CAAC,EAAE,iBAAiB,CAAC;IAC5B,mIAAmI;IACnI,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED,gFAAgF;AAChF,MAAM,WAAW,iBAAiB;IAChC,sFAAsF;IACtF,KAAK,EAAE,MAAM,CAAC;IACd,uFAAuF;IACvF,QAAQ,EAAE,MAAM,CAAC;IACjB,oHAAoH;IACpH,KAAK,EAAE,OAAO,CAAC;CAChB;AAED,sGAAsG;AACtG,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;;;GAIG;AACH,MAAM,WAAW,cAAc;IAC7B,cAAc,EAAE,CAAC,OAAO,EAAE,WAAW,GAAG,IAAI,GAAG,SAAS,KAAK,OAAO,CAAC;IACrE,sBAAsB,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;CAC7C;AAeD;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,UAAU,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,CAE/E;AAkMD;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,gBAAgB,EACzB,WAAW,EAAE,SAAS,cAAc,EAAE,EACtC,WAAW,EAAE,MAAM,EACnB,KAAK,GAAE,cAAc,GAAG,IAAW,GAClC,UAAU,EAAE,CAgDd"}