charness 0.0.0-stage → 3.1.0

package/dist/connectors/jira/sessionKeyCodec.js

@@ -0,0 +1,106 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.jiraSessionKeyCodec = void 0;
+exports.getJiraIssueProjectKey = getJiraIssueProjectKey;
+exports.checkIsJiraProjectKey = checkIsJiraProjectKey;
+exports.makeJiraKey = makeJiraKey;
+const sessionKey_1 = require("../../sessionKey");
+/** The platform id this connector answers to. */
+const jiraPlatform = 'jira';
+/** What the serialized key joins its parts with; a slug swaps it for its own separator. */
+const keySeparator = ':';
+/**
+ * @description A Jira conversation is one issue: `space` is the project key,
+ * `thread` the issue key, spelled `jira:<PROJECT>:<ISSUE-KEY>` (`jira:PROJ:PROJ-12`).
+ * The `jira:` prefix keeps it apart from Telegram's all-numeric shape.
+ *
+ * A project key is an upper-case letter followed by upper-case letters, digits
+ * or `_`; the issue key must be that SAME project key, `-` and a number without
+ * leading zeros (the back-reference `\1`; Jira numbers issues from 1, so
+ * `PROJ-012` would be a second spelling of `PROJ-12`). The back-reference is
+ * also what makes the slug readable: with `_` as the separator
+ * `jira_MY_PROJ_MY_PROJ-12` has several candidate split points, and only the one
+ * where both halves name the same project matches.
+ */
+const projectKeyPattern = '[A-Z][A-Z0-9_]*';
+const issueNumberPattern = '[1-9]\\d*';
+const issueKeyRe = new RegExp(`^(${projectKeyPattern})-${issueNumberPattern}$`);
+const projectKeyRe = new RegExp(`^${projectKeyPattern}$`);
+/** @description The project key of an issue key (`PROJ-12` → `PROJ`), or `null` for a string that is not an issue key. */
+function getJiraIssueProjectKey(issueKey) {
+    return issueKeyRe.exec(issueKey)?.[1] ?? null;
+}
+/** @description Whether `projectKey` is spelled like a Jira project key (`PROJ`, `MY_PROJ`). */
+function checkIsJiraProjectKey(projectKey) {
+    return projectKeyRe.test(projectKey);
+}
+/** Escape a slug separator for use inside a regular expression. */
+function escapeRegExp(text) {
+    return text.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
+}
+/** The key's shape with `separator` between its parts — `:` for the key itself. */
+function createJiraKeyRe(separator) {
+    const escaped = escapeRegExp(separator);
+    return new RegExp(`^${jiraPlatform}${escaped}(${projectKeyPattern})${escaped}(\\1-${issueNumberPattern})$`);
+}
+const jiraKeyRe = createJiraKeyRe(keySeparator);
+/** Slug separators are a handful of fixed characters (tmux `-`, directory `_`). */
+const slugKeyRes = new Map();
+function getSlugKeyRe(separator) {
+    let keyRe = slugKeyRes.get(separator);
+    if (!keyRe) {
+        keyRe = createJiraKeyRe(separator);
+        slugKeyRes.set(separator, keyRe);
+    }
+    return keyRe;
+}
+function getJiraKeyFromMatch(match) {
+    return match ? { platform: jiraPlatform, space: match[1], thread: match[2] } : null;
+}
+/**
+ * @description Jira's {@link SessionKeyCodec}, including the slug inverse: a
+ * key with two `:` cannot be read back from a tmux session or directory name by
+ * splitting on one position (D5 of the Jira connector plan).
+ */
+exports.jiraSessionKeyCodec = {
+    platform: jiraPlatform,
+    // Refuses a key it could not decode again: `state.json` would otherwise drop
+    // its fields silently at the next load, and its tmux session would be neither
+    // re-adopted nor reaped.
+    encode(key) {
+        const serialized = [jiraPlatform, key.space, key.thread].join(keySeparator);
+        if (!jiraKeyRe.test(serialized))
+            throw new Error(`Invalid Jira SessionKey: "${serialized}"`);
+        return serialized;
+    },
+    decode(serialized) {
+        const key = getJiraKeyFromMatch(jiraKeyRe.exec(serialized));
+        if (!key)
+            throw new Error(`Invalid Jira SessionKey string: "${serialized}"`);
+        return key;
+    },
+    matches(serialized) {
+        return jiraKeyRe.test(serialized);
+    },
+    decodeSlug(slug, separator) {
+        return getJiraKeyFromMatch(getSlugKeyRe(separator).exec(slug));
+    },
+};
+/**
+ * Self-registering on import, like the Telegram codec; the composition roots
+ * (`bot.ts`, the test bootstrap) import it so a Jira key read back from
+ * `state.json` or a tmux name decodes even before any Jira module loads.
+ */
+(0, sessionKey_1.registerSessionKeyCodec)(exports.jiraSessionKeyCodec);
+/**
+ * @description Build a Jira {@link SessionKey} for an issue. The project key is
+ * the issue key's own prefix, so it is derived rather than passed separately.
+ * Throws for a string that is not an issue key.
+ */
+function makeJiraKey(issueKey) {
+    const match = issueKeyRe.exec(issueKey);
+    if (!match)
+        throw new Error(`Invalid Jira issue key: "${issueKey}"`);
+    return { platform: jiraPlatform, space: match[1], thread: issueKey };
+}
+//# sourceMappingURL=sessionKeyCodec.js.map

package/dist/connectors/jira/sessionKeyCodec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sessionKeyCodec.js","sourceRoot":"","sources":["../../../src/connectors/jira/sessionKeyCodec.ts"],"names":[],"mappings":";;;AAgCA,wDAEC;AAGD,sDAEC;AA2ED,kCAIC;AAtHD,iDAK0B;AAE1B,iDAAiD;AACjD,MAAM,YAAY,GAAe,MAAM,CAAC;AAExC,2FAA2F;AAC3F,MAAM,YAAY,GAAG,GAAG,CAAC;AAEzB;;;;;;;;;;;;GAYG;AACH,MAAM,iBAAiB,GAAG,iBAAiB,CAAC;AAC5C,MAAM,kBAAkB,GAAG,WAAW,CAAC;AACvC,MAAM,UAAU,GAAG,IAAI,MAAM,CAAC,KAAK,iBAAiB,KAAK,kBAAkB,GAAG,CAAC,CAAC;AAChF,MAAM,YAAY,GAAG,IAAI,MAAM,CAAC,IAAI,iBAAiB,GAAG,CAAC,CAAC;AAE1D,0HAA0H;AAC1H,SAAgB,sBAAsB,CAAC,QAAgB;IACrD,OAAO,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;AAChD,CAAC;AAED,gGAAgG;AAChG,SAAgB,qBAAqB,CAAC,UAAkB;IACtD,OAAO,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;AACvC,CAAC;AAED,mEAAmE;AACnE,SAAS,YAAY,CAAC,IAAY;IAChC,OAAO,IAAI,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;AACrD,CAAC;AAED,mFAAmF;AACnF,SAAS,eAAe,CAAC,SAAiB;IACxC,MAAM,OAAO,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;IACxC,OAAO,IAAI,MAAM,CAAC,IAAI,YAAY,GAAG,OAAO,IAAI,iBAAiB,IAAI,OAAO,QAAQ,kBAAkB,IAAI,CAAC,CAAC;AAC9G,CAAC;AAED,MAAM,SAAS,GAAG,eAAe,CAAC,YAAY,CAAC,CAAC;AAEhD,mFAAmF;AACnF,MAAM,UAAU,GAAG,IAAI,GAAG,EAAkB,CAAC;AAE7C,SAAS,YAAY,CAAC,SAAiB;IACrC,IAAI,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACtC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,KAAK,GAAG,eAAe,CAAC,SAAS,CAAC,CAAC;QACnC,UAAU,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IACnC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,mBAAmB,CAAC,KAA6B;IACxD,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,YAAY,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACtF,CAAC;AAED;;;;GAIG;AACU,QAAA,mBAAmB,GAAoB;IAClD,QAAQ,EAAE,YAAY;IAEtB,6EAA6E;IAC7E,8EAA8E;IAC9E,yBAAyB;IACzB,MAAM,CAAC,GAAe;QACpB,MAAM,UAAU,GAAG,CAAC,YAAY,EAAE,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC5E,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,UAAU,GAAG,CAAC,CAAC;QAC7F,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,MAAM,CAAC,UAAkB;QACvB,MAAM,GAAG,GAAG,mBAAmB,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAC5D,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,UAAU,GAAG,CAAC,CAAC;QAC7E,OAAO,GAAG,CAAC;IACb,CAAC;IAED,OAAO,CAAC,UAAkB;QACxB,OAAO,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACpC,CAAC;IAED,UAAU,CAAC,IAAY,EAAE,SAAiB;QACxC,OAAO,mBAAmB,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACjE,CAAC;CACF,CAAC;AAEF;;;;GAIG;AACH,IAAA,oCAAuB,EAAC,2BAAmB,CAAC,CAAC;AAE7C;;;;GAIG;AACH,SAAgB,WAAW,CAAC,QAAgB;IAC1C,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACxC,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,QAAQ,GAAG,CAAC,CAAC;IACrE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AACvE,CAAC"}

package/dist/connectors/jira/trigger.d.ts

@@ -0,0 +1,54 @@
+import type { JiraAccount, JiraChangelogHistory } from './client';
+/**
+ * @description Which change made an issue a request (Jira connector plan J5,
+ * D11–D12): the newest changelog entry that set the assignee to the AI account
+ * or moved the status into the trigger set. An issue created already matching
+ * has no such entry; its trigger is the creation itself. And who asked (J5b,
+ * R24): the person behind that change, or — when an app or automation made it —
+ * the nearest person before it, else the reporter. Pure: the poller hands in the
+ * changelog entries it read, newest pages first.
+ */
+/** The trigger id of an issue that matched from its creation. */
+export declare const createdTriggerId = "created";
+export type JiraTriggerKind = 'assigned' | 'statusChanged' | 'created';
+/** @name JiraIssueTrigger @description `author` is `null` when Jira names no one (an automation without an actor). */
+export interface JiraIssueTrigger {
+    /** The changelog history id, or {@link createdTriggerId}. */
+    triggerId: string;
+    kind: JiraTriggerKind;
+    author: JiraAccount | null;
+}
+export interface JiraTriggerMatch {
+    aiAccountId: string;
+    triggerStatusIds: ReadonlySet<string>;
+}
+/** A changelog item names its field by `fieldId` (stable) or, on older entries, only by `field`. */
+export declare function getItemField(item: JiraChangelogHistory['items'][number]): string;
+/**
+ * @description The newest entry among `histories` that matches, or `null`. When
+ * `histories` are the NEWEST entries of the changelog (any number of its last
+ * pages), a match among them is the newest of the whole changelog — what lets
+ * the poller stop reading at the first page that holds one.
+ */
+export declare function findNewestTrigger(histories: readonly JiraChangelogHistory[], match: JiraTriggerMatch): JiraIssueTrigger | null;
+/** The trigger over a WHOLE changelog: its newest matching entry, else the creation. */
+export declare function getIssueTrigger(histories: readonly JiraChangelogHistory[], match: JiraTriggerMatch, creator: JiraAccount | null): JiraIssueTrigger;
+/** A person, as opposed to an app or automation; a missing type is read as a person. */
+export declare function checkIsPersonAccount(account: JiraAccount): boolean;
+/** An app or automation (a Jira rule, an integration), as opposed to a person or a service-desk customer. */
+export declare function checkIsAppAccount(account: JiraAccount): boolean;
+/**
+ * @description R24: the nearest person BEFORE the trigger in `histories` — the
+ * author of the newest older entry who is a person other than the AI account —
+ * or `null` when none of these entries has one (the caller may read older pages).
+ * Nothing comes before a creation trigger.
+ */
+export declare function findEarlierPerson(histories: readonly JiraChangelogHistory[], trigger: JiraIssueTrigger, aiAccountId: string): JiraAccount | null;
+/**
+ * @description The requester ("sender") an answer goes back to: the trigger's
+ * author when a person made the change; when an app or automation made it (or
+ * Jira names no one), the nearest earlier person in the changelog (R24), else the
+ * issue's reporter — an app cannot read a comment or take the issue back.
+ */
+export declare function getRequester(trigger: JiraIssueTrigger, histories: readonly JiraChangelogHistory[], reporter: JiraAccount | null, aiAccountId: string): JiraAccount | null;
+//# sourceMappingURL=trigger.d.ts.map

package/dist/connectors/jira/trigger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"trigger.d.ts","sourceRoot":"","sources":["../../../src/connectors/jira/trigger.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,oBAAoB,EAAE,MAAM,UAAU,CAAC;AAElE;;;;;;;;GAQG;AAEH,iEAAiE;AACjE,eAAO,MAAM,gBAAgB,YAAY,CAAC;AAM1C,MAAM,MAAM,eAAe,GAAG,UAAU,GAAG,eAAe,GAAG,SAAS,CAAC;AAEvE,sHAAsH;AACtH,MAAM,WAAW,gBAAgB;IAC/B,6DAA6D;IAC7D,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,eAAe,CAAC;IACtB,MAAM,EAAE,WAAW,GAAG,IAAI,CAAC;CAC5B;AAED,MAAM,WAAW,gBAAgB;IAC/B,WAAW,EAAE,MAAM,CAAC;IACpB,gBAAgB,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;CACvC;AAED,oGAAoG;AACpG,wBAAgB,YAAY,CAAC,IAAI,EAAE,oBAAoB,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,GAAG,MAAM,CAEhF;AAiBD;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,SAAS,oBAAoB,EAAE,EAAE,KAAK,EAAE,gBAAgB,GAAG,gBAAgB,GAAG,IAAI,CAM9H;AAED,wFAAwF;AACxF,wBAAgB,eAAe,CAC7B,SAAS,EAAE,SAAS,oBAAoB,EAAE,EAC1C,KAAK,EAAE,gBAAgB,EACvB,OAAO,EAAE,WAAW,GAAG,IAAI,GAC1B,gBAAgB,CAElB;AAED,wFAAwF;AACxF,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAElE;AAED,6GAA6G;AAC7G,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAE/D;AAOD;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAC/B,SAAS,EAAE,SAAS,oBAAoB,EAAE,EAC1C,OAAO,EAAE,gBAAgB,EACzB,WAAW,EAAE,MAAM,GAClB,WAAW,GAAG,IAAI,CAMpB;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAC1B,OAAO,EAAE,gBAAgB,EACzB,SAAS,EAAE,SAAS,oBAAoB,EAAE,EAC1C,QAAQ,EAAE,WAAW,GAAG,IAAI,EAC5B,WAAW,EAAE,MAAM,GAClB,WAAW,GAAG,IAAI,CAGpB"}

package/dist/connectors/jira/trigger.js

@@ -0,0 +1,101 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createdTriggerId = void 0;
+exports.getItemField = getItemField;
+exports.findNewestTrigger = findNewestTrigger;
+exports.getIssueTrigger = getIssueTrigger;
+exports.checkIsPersonAccount = checkIsPersonAccount;
+exports.checkIsAppAccount = checkIsAppAccount;
+exports.findEarlierPerson = findEarlierPerson;
+exports.getRequester = getRequester;
+/**
+ * @description Which change made an issue a request (Jira connector plan J5,
+ * D11–D12): the newest changelog entry that set the assignee to the AI account
+ * or moved the status into the trigger set. An issue created already matching
+ * has no such entry; its trigger is the creation itself. And who asked (J5b,
+ * R24): the person behind that change, or — when an app or automation made it —
+ * the nearest person before it, else the reporter. Pure: the poller hands in the
+ * changelog entries it read, newest pages first.
+ */
+/** The trigger id of an issue that matched from its creation. */
+exports.createdTriggerId = 'created';
+/** Jira's `accountType` of a person. */
+const personAccountType = 'atlassian';
+/** Jira's `accountType` of an app or automation. */
+const appAccountType = 'app';
+/** A changelog item names its field by `fieldId` (stable) or, on older entries, only by `field`. */
+function getItemField(item) {
+    return item.fieldId ?? item.field;
+}
+function getHistoryKind(history, match) {
+    for (const item of history.items) {
+        const field = getItemField(item);
+        if (field === 'assignee' && item.to === match.aiAccountId)
+            return 'assigned';
+        if (field === 'status' && item.to !== null && item.to !== undefined && match.triggerStatusIds.has(item.to))
+            return 'statusChanged';
+    }
+    return null;
+}
+/** Newest first: by creation time, then by id (Jira's ids grow). */
+function compareHistoriesNewestFirst(left, right) {
+    const byTime = Date.parse(right.created) - Date.parse(left.created);
+    return byTime !== 0 && Number.isFinite(byTime) ? byTime : Number(right.id) - Number(left.id);
+}
+/**
+ * @description The newest entry among `histories` that matches, or `null`. When
+ * `histories` are the NEWEST entries of the changelog (any number of its last
+ * pages), a match among them is the newest of the whole changelog — what lets
+ * the poller stop reading at the first page that holds one.
+ */
+function findNewestTrigger(histories, match) {
+    for (const history of [...histories].sort(compareHistoriesNewestFirst)) {
+        const kind = getHistoryKind(history, match);
+        if (kind)
+            return { triggerId: history.id, kind, author: history.author ?? null };
+    }
+    return null;
+}
+/** The trigger over a WHOLE changelog: its newest matching entry, else the creation. */
+function getIssueTrigger(histories, match, creator) {
+    return findNewestTrigger(histories, match) ?? { triggerId: exports.createdTriggerId, kind: 'created', author: creator };
+}
+/** A person, as opposed to an app or automation; a missing type is read as a person. */
+function checkIsPersonAccount(account) {
+    return account.accountType === undefined || account.accountType === personAccountType;
+}
+/** An app or automation (a Jira rule, an integration), as opposed to a person or a service-desk customer. */
+function checkIsAppAccount(account) {
+    return account.accountType === appAccountType;
+}
+/** A person who may be handed an issue back: not an app, not the AI account itself. */
+function checkIsRequesterCandidate(account, aiAccountId) {
+    return account !== null && account !== undefined && checkIsPersonAccount(account) && account.accountId !== aiAccountId;
+}
+/**
+ * @description R24: the nearest person BEFORE the trigger in `histories` — the
+ * author of the newest older entry who is a person other than the AI account —
+ * or `null` when none of these entries has one (the caller may read older pages).
+ * Nothing comes before a creation trigger.
+ */
+function findEarlierPerson(histories, trigger, aiAccountId) {
+    if (trigger.kind === 'created')
+        return null;
+    const newestFirst = [...histories].sort(compareHistoriesNewestFirst);
+    const triggerIndex = newestFirst.findIndex((history) => history.id === trigger.triggerId);
+    if (triggerIndex < 0)
+        return null;
+    return newestFirst.slice(triggerIndex + 1).find((history) => checkIsRequesterCandidate(history.author, aiAccountId))?.author ?? null;
+}
+/**
+ * @description The requester ("sender") an answer goes back to: the trigger's
+ * author when a person made the change; when an app or automation made it (or
+ * Jira names no one), the nearest earlier person in the changelog (R24), else the
+ * issue's reporter — an app cannot read a comment or take the issue back.
+ */
+function getRequester(trigger, histories, reporter, aiAccountId) {
+    if (checkIsRequesterCandidate(trigger.author, aiAccountId))
+        return trigger.author;
+    return findEarlierPerson(histories, trigger, aiAccountId) ?? reporter;
+}
+//# sourceMappingURL=trigger.js.map

package/dist/connectors/jira/trigger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trigger.js","sourceRoot":"","sources":["../../../src/connectors/jira/trigger.ts"],"names":[],"mappings":";;;AAmCA,oCAEC;AAuBD,8CAMC;AAGD,0CAMC;AAGD,oDAEC;AAGD,8CAEC;AAaD,8CAUC;AAQD,oCAQC;AA1HD;;;;;;;;GAQG;AAEH,iEAAiE;AACpD,QAAA,gBAAgB,GAAG,SAAS,CAAC;AAC1C,wCAAwC;AACxC,MAAM,iBAAiB,GAAG,WAAW,CAAC;AACtC,oDAAoD;AACpD,MAAM,cAAc,GAAG,KAAK,CAAC;AAiB7B,oGAAoG;AACpG,SAAgB,YAAY,CAAC,IAA2C;IACtE,OAAO,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC;AACpC,CAAC;AAED,SAAS,cAAc,CAAC,OAA6B,EAAE,KAAuB;IAC5E,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QACjC,IAAI,KAAK,KAAK,UAAU,IAAI,IAAI,CAAC,EAAE,KAAK,KAAK,CAAC,WAAW;YAAE,OAAO,UAAU,CAAC;QAC7E,IAAI,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,EAAE,KAAK,IAAI,IAAI,IAAI,CAAC,EAAE,KAAK,SAAS,IAAI,KAAK,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAAE,OAAO,eAAe,CAAC;IACrI,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,oEAAoE;AACpE,SAAS,2BAA2B,CAAC,IAA0B,EAAE,KAA2B;IAC1F,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACpE,OAAO,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAC/F,CAAC;AAED;;;;;GAKG;AACH,SAAgB,iBAAiB,CAAC,SAA0C,EAAE,KAAuB;IACnG,KAAK,MAAM,OAAO,IAAI,CAAC,GAAG,SAAS,CAAC,CAAC,IAAI,CAAC,2BAA2B,CAAC,EAAE,CAAC;QACvE,MAAM,IAAI,GAAG,cAAc,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC5C,IAAI,IAAI;YAAE,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC;IACnF,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,wFAAwF;AACxF,SAAgB,eAAe,CAC7B,SAA0C,EAC1C,KAAuB,EACvB,OAA2B;IAE3B,OAAO,iBAAiB,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,EAAE,SAAS,EAAE,wBAAgB,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AAClH,CAAC;AAED,wFAAwF;AACxF,SAAgB,oBAAoB,CAAC,OAAoB;IACvD,OAAO,OAAO,CAAC,WAAW,KAAK,SAAS,IAAI,OAAO,CAAC,WAAW,KAAK,iBAAiB,CAAC;AACxF,CAAC;AAED,6GAA6G;AAC7G,SAAgB,iBAAiB,CAAC,OAAoB;IACpD,OAAO,OAAO,CAAC,WAAW,KAAK,cAAc,CAAC;AAChD,CAAC;AAED,uFAAuF;AACvF,SAAS,yBAAyB,CAAC,OAAuC,EAAE,WAAmB;IAC7F,OAAO,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,SAAS,IAAI,oBAAoB,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,SAAS,KAAK,WAAW,CAAC;AACzH,CAAC;AAED;;;;;GAKG;AACH,SAAgB,iBAAiB,CAC/B,SAA0C,EAC1C,OAAyB,EACzB,WAAmB;IAEnB,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAC5C,MAAM,WAAW,GAAG,CAAC,GAAG,SAAS,CAAC,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IACrE,MAAM,YAAY,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,KAAK,OAAO,CAAC,SAAS,CAAC,CAAC;IAC1F,IAAI,YAAY,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAClC,OAAO,WAAW,CAAC,KAAK,CAAC,YAAY,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,yBAAyB,CAAC,OAAO,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,EAAE,MAAM,IAAI,IAAI,CAAC;AACvI,CAAC;AAED;;;;;GAKG;AACH,SAAgB,YAAY,CAC1B,OAAyB,EACzB,SAA0C,EAC1C,QAA4B,EAC5B,WAAmB;IAEnB,IAAI,yBAAyB,CAAC,OAAO,CAAC,MAAM,EAAE,WAAW,CAAC;QAAE,OAAO,OAAO,CAAC,MAAM,CAAC;IAClF,OAAO,iBAAiB,CAAC,SAAS,EAAE,OAAO,EAAE,WAAW,CAAC,IAAI,QAAQ,CAAC;AACxE,CAAC"}

package/dist/connectors/jira/triggerLog.d.ts

@@ -0,0 +1,53 @@
+import { z } from 'zod';
+import { RotatingJsonlFile } from '../../utils/rotatingJsonlFile';
+/**
+ * @description The Jira connector's trigger log (plan J5, D12):
+ * `DATA_DIR/jira-triggers.jsonl`, one line per trigger the poller decided on,
+ * indexed in memory at boot. It is what keeps a trigger from becoming a second
+ * request — after a restart too — and what the run budget counts. Connector-
+ * owned, so the core request ledger stays platform-agnostic.
+ */
+export declare const jiraTriggerLogFileName = "jira-triggers.jsonl";
+/**
+ * @name JiraTriggerOutcome
+ * @description `request` — a request was opened; `selfAuthored` — the AI account
+ * made the change itself; `parked` — the issue was over its run budget;
+ * `untrusted` — the hand-over was made by someone the trusted group does not back.
+ */
+export type JiraTriggerOutcome = 'request' | 'selfAuthored' | 'parked' | 'untrusted';
+declare const triggerRecordSchema: z.ZodObject<{
+    issueKey: z.ZodString;
+    triggerId: z.ZodString;
+    outcome: z.ZodEnum<{
+        request: "request";
+        untrusted: "untrusted";
+        selfAuthored: "selfAuthored";
+        parked: "parked";
+    }>;
+    at: z.ZodNumber;
+    requestId: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type JiraTriggerRecord = z.infer<typeof triggerRecordSchema>;
+export declare class JiraTriggerLog {
+    private readonly file;
+    private readonly seen;
+    private readonly requestTimesByIssue;
+    constructor(file: RotatingJsonlFile<JiraTriggerRecord>);
+    static createForDataDir(filePath: string): JiraTriggerLog;
+    /** @description Index the file. A line that does not parse is skipped with a warning (never fatal). */
+    load(): Promise<void>;
+    private index;
+    checkIsSeen(issueKey: string, triggerId: string): boolean;
+    /** @description Requests opened for the issue in the rolling 24 h before `nowMs`. */
+    getRequestCountLastDay(issueKey: string, nowMs: number): number;
+    /** @description Persist a decision; `false` when the line could not be written (then nothing is indexed). */
+    record(record: JiraTriggerRecord): boolean;
+    /**
+     * @description Index a decision whose line could not be written, for this
+     * process only: a request already posted is never posted again before a
+     * restart (after one, its trigger reads as new).
+     */
+    remember(record: JiraTriggerRecord): void;
+}
+export {};
+//# sourceMappingURL=triggerLog.d.ts.map

package/dist/connectors/jira/triggerLog.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"triggerLog.d.ts","sourceRoot":"","sources":["../../../src/connectors/jira/triggerLog.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAElE;;;;;;GAMG;AAEH,eAAO,MAAM,sBAAsB,wBAAwB,CAAC;AAK5D;;;;;GAKG;AACH,MAAM,MAAM,kBAAkB,GAAG,SAAS,GAAG,cAAc,GAAG,QAAQ,GAAG,WAAW,CAAC;AAErF,QAAA,MAAM,mBAAmB;;;;;;;;;;;iBAOvB,CAAC;AAEH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAMpE,qBAAa,cAAc;IAIb,OAAO,CAAC,QAAQ,CAAC,IAAI;IAHjC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAqB;IAC1C,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAA+B;gBAEtC,IAAI,EAAE,iBAAiB,CAAC,iBAAiB,CAAC;IAEvE,MAAM,CAAC,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,cAAc;IAIzD,uGAAuG;IACjG,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAM3B,OAAO,CAAC,KAAK;IAQb,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO;IAIzD,qFAAqF;IACrF,sBAAsB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM;IAI/D,6GAA6G;IAC7G,MAAM,CAAC,MAAM,EAAE,iBAAiB,GAAG,OAAO;IAM1C;;;;OAIG;IACH,QAAQ,CAAC,MAAM,EAAE,iBAAiB,GAAG,IAAI;CAG1C"}

package/dist/connectors/jira/triggerLog.js

@@ -0,0 +1,78 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.JiraTriggerLog = exports.jiraTriggerLogFileName = void 0;
+const zod_1 = require("zod");
+const rotatingJsonlFile_1 = require("../../utils/rotatingJsonlFile");
+/**
+ * @description The Jira connector's trigger log (plan J5, D12):
+ * `DATA_DIR/jira-triggers.jsonl`, one line per trigger the poller decided on,
+ * indexed in memory at boot. It is what keeps a trigger from becoming a second
+ * request — after a restart too — and what the run budget counts. Connector-
+ * owned, so the core request ledger stays platform-agnostic.
+ */
+exports.jiraTriggerLogFileName = 'jira-triggers.jsonl';
+/** Ample for years of triggers; the one `.1` backup is read too. */
+const jiraTriggerLogMaxBytes = 10 * 1024 * 1024;
+const msPerDay = 24 * 60 * 60 * 1000;
+const triggerRecordSchema = zod_1.z.object({
+    issueKey: zod_1.z.string().min(1),
+    triggerId: zod_1.z.string().min(1),
+    outcome: zod_1.z.enum(['request', 'selfAuthored', 'parked', 'untrusted']),
+    /** Epoch ms. */
+    at: zod_1.z.number(),
+    requestId: zod_1.z.string().optional(),
+});
+function getTriggerIdentity(issueKey, triggerId) {
+    return `${issueKey}\u0000${triggerId}`;
+}
+class JiraTriggerLog {
+    file;
+    seen = new Set();
+    requestTimesByIssue = new Map();
+    constructor(file) {
+        this.file = file;
+    }
+    static createForDataDir(filePath) {
+        return new JiraTriggerLog(new rotatingJsonlFile_1.RotatingJsonlFile(filePath, jiraTriggerLogMaxBytes));
+    }
+    /** @description Index the file. A line that does not parse is skipped with a warning (never fatal). */
+    async load() {
+        const { records, skippedCount } = await this.file.readRecords(triggerRecordSchema);
+        for (const record of records)
+            this.index(record);
+        if (skippedCount > 0)
+            console.warn(`[jira] trigger log: ${skippedCount} unreadable line(s) skipped`);
+    }
+    index(record) {
+        this.seen.add(getTriggerIdentity(record.issueKey, record.triggerId));
+        if (record.outcome !== 'request')
+            return;
+        const times = this.requestTimesByIssue.get(record.issueKey) ?? [];
+        times.push(record.at);
+        this.requestTimesByIssue.set(record.issueKey, times);
+    }
+    checkIsSeen(issueKey, triggerId) {
+        return this.seen.has(getTriggerIdentity(issueKey, triggerId));
+    }
+    /** @description Requests opened for the issue in the rolling 24 h before `nowMs`. */
+    getRequestCountLastDay(issueKey, nowMs) {
+        return (this.requestTimesByIssue.get(issueKey) ?? []).filter((at) => at > nowMs - msPerDay).length;
+    }
+    /** @description Persist a decision; `false` when the line could not be written (then nothing is indexed). */
+    record(record) {
+        if (!this.file.append(record))
+            return false;
+        this.index(record);
+        return true;
+    }
+    /**
+     * @description Index a decision whose line could not be written, for this
+     * process only: a request already posted is never posted again before a
+     * restart (after one, its trigger reads as new).
+     */
+    remember(record) {
+        this.index(record);
+    }
+}
+exports.JiraTriggerLog = JiraTriggerLog;
+//# sourceMappingURL=triggerLog.js.map

package/dist/connectors/jira/triggerLog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"triggerLog.js","sourceRoot":"","sources":["../../../src/connectors/jira/triggerLog.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AACxB,qEAAkE;AAElE;;;;;;GAMG;AAEU,QAAA,sBAAsB,GAAG,qBAAqB,CAAC;AAC5D,oEAAoE;AACpE,MAAM,sBAAsB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAChD,MAAM,QAAQ,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAUrC,MAAM,mBAAmB,GAAG,OAAC,CAAC,MAAM,CAAC;IACnC,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,OAAO,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,cAAc,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;IACnE,gBAAgB;IAChB,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE;IACd,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACjC,CAAC,CAAC;AAIH,SAAS,kBAAkB,CAAC,QAAgB,EAAE,SAAiB;IAC7D,OAAO,GAAG,QAAQ,SAAS,SAAS,EAAE,CAAC;AACzC,CAAC;AAED,MAAa,cAAc;IAII;IAHZ,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IACzB,mBAAmB,GAAG,IAAI,GAAG,EAAoB,CAAC;IAEnE,YAA6B,IAA0C;QAA1C,SAAI,GAAJ,IAAI,CAAsC;IAAG,CAAC;IAE3E,MAAM,CAAC,gBAAgB,CAAC,QAAgB;QACtC,OAAO,IAAI,cAAc,CAAC,IAAI,qCAAiB,CAAoB,QAAQ,EAAE,sBAAsB,CAAC,CAAC,CAAC;IACxG,CAAC;IAED,uGAAuG;IACvG,KAAK,CAAC,IAAI;QACR,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAAC,CAAC;QACnF,KAAK,MAAM,MAAM,IAAI,OAAO;YAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACjD,IAAI,YAAY,GAAG,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,uBAAuB,YAAY,6BAA6B,CAAC,CAAC;IACvG,CAAC;IAEO,KAAK,CAAC,MAAyB;QACrC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,kBAAkB,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;QACrE,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS;YAAE,OAAO;QACzC,MAAM,KAAK,GAAG,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QAClE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACtB,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IACvD,CAAC;IAED,WAAW,CAAC,QAAgB,EAAE,SAAiB;QAC7C,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,kBAAkB,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC;IAChE,CAAC;IAED,qFAAqF;IACrF,sBAAsB,CAAC,QAAgB,EAAE,KAAa;QACpD,OAAO,CAAC,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,GAAG,KAAK,GAAG,QAAQ,CAAC,CAAC,MAAM,CAAC;IACrG,CAAC;IAED,6GAA6G;IAC7G,MAAM,CAAC,MAAyB;QAC9B,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;YAAE,OAAO,KAAK,CAAC;QAC5C,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACnB,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;OAIG;IACH,QAAQ,CAAC,MAAyB;QAChC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACrB,CAAC;CACF;AAjDD,wCAiDC"}

package/dist/connectors/jira/trustedGroup.d.ts

@@ -0,0 +1,54 @@
+import { type JiraAccount, type JiraClient } from './client';
+/**
+ * @description The trusted group of the Jira connector: whose text may steer an
+ * agent. With `jira.json` `trustedGroup` set, trusted are the active members of
+ * that ONE Jira group, the AI account itself, and every app or automation
+ * (`accountType` `app`) — what they write reaches the agent and what they hand
+ * over starts it; anyone else's text is withheld and anyone else's hand-over is
+ * not acted on.
+ *
+ * The config names the group, the site is asked once for its id (a rename keeps
+ * working), and its members are read at boot and again whenever the last read is
+ * older than {@link jiraTrustedGroupMaxAgeMs}. A read that fails leaves the old
+ * list in place but never serves it past its age: the caller's
+ * {@link JiraTrust.refreshIfStale} rejects, so nothing is decided on a stale
+ * list (fail closed).
+ */
+/** A member removed from the group loses trust within this plus one poll. */
+export declare const jiraTrustedGroupMaxAgeMs: number;
+/** The group is gone from the site: a setup fault that does not fix itself, so polling stops. */
+export declare class JiraTrustedGroupGoneError extends Error {
+    readonly groupName: string;
+    constructor(groupName: string);
+}
+/** The group as one read of the site saw it. */
+export interface JiraTrustedGroupSnapshot {
+    /** The name `jira.json` gives; what the notice to a requester says. */
+    groupName: string;
+    groupId: string;
+    memberAccountIds: ReadonlySet<string>;
+    /** Epoch ms the read started at. */
+    readAtMs: number;
+}
+export interface JiraTrust {
+    readonly groupName: string;
+    /** Reads the members again when the last read is older than {@link jiraTrustedGroupMaxAgeMs}; rejects when it cannot (the list stays stale). */
+    refreshIfStale(): Promise<void>;
+    /** Against the list as of the last read; call {@link refreshIfStale} first. A missing account is never trusted. */
+    checkIsTrusted(account: JiraAccount | null | undefined): boolean;
+}
+export type JiraTrustClient = Pick<JiraClient, 'getGroupByName' | 'getGroupMembers'>;
+/**
+ * @description Resolve the group named `groupName` and read its members, for
+ * the setup check. `null` — the site has no such group. A failed call
+ * (unreachable, refused) rejects as the client raised it.
+ */
+export declare function readJiraTrustedGroup(client: JiraTrustClient, groupName: string, now: () => number): Promise<JiraTrustedGroupSnapshot | null>;
+/** @description The trust over `snapshot` (the setup check's own read), following the group by its id. */
+export declare function createJiraTrust(options: {
+    client: JiraTrustClient;
+    snapshot: JiraTrustedGroupSnapshot;
+    aiAccountId: string;
+    now: () => number;
+}): JiraTrust;
+//# sourceMappingURL=trustedGroup.d.ts.map

package/dist/connectors/jira/trustedGroup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"trustedGroup.d.ts","sourceRoot":"","sources":["../../../src/connectors/jira/trustedGroup.ts"],"names":[],"mappings":"AAAA,OAAO,EAAiB,KAAK,WAAW,EAAE,KAAK,UAAU,EAAE,MAAM,UAAU,CAAC;AAG5E;;;;;;;;;;;;;;GAcG;AAEH,6EAA6E;AAC7E,eAAO,MAAM,wBAAwB,QAAgB,CAAC;AAItD,iGAAiG;AACjG,qBAAa,yBAA0B,SAAQ,KAAK;IACtC,QAAQ,CAAC,SAAS,EAAE,MAAM;gBAAjB,SAAS,EAAE,MAAM;CAIvC;AAED,gDAAgD;AAChD,MAAM,WAAW,wBAAwB;IACvC,uEAAuE;IACvE,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,gBAAgB,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACtC,oCAAoC;IACpC,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,gJAAgJ;IAChJ,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAChC,mHAAmH;IACnH,cAAc,CAAC,OAAO,EAAE,WAAW,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO,CAAC;CAClE;AAED,MAAM,MAAM,eAAe,GAAG,IAAI,CAAC,UAAU,EAAE,gBAAgB,GAAG,iBAAiB,CAAC,CAAC;AAYrF;;;;GAIG;AACH,wBAAsB,oBAAoB,CAAC,MAAM,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,MAAM,GAAG,OAAO,CAAC,wBAAwB,GAAG,IAAI,CAAC,CAWlJ;AAED,0GAA0G;AAC1G,wBAAgB,eAAe,CAAC,OAAO,EAAE;IACvC,MAAM,EAAE,eAAe,CAAC;IACxB,QAAQ,EAAE,wBAAwB,CAAC;IACnC,WAAW,EAAE,MAAM,CAAC;IACpB,GAAG,EAAE,MAAM,MAAM,CAAC;CACnB,GAAG,SAAS,CA4BZ"}

package/dist/connectors/jira/trustedGroup.js

@@ -0,0 +1,98 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.JiraTrustedGroupGoneError = exports.jiraTrustedGroupMaxAgeMs = void 0;
+exports.readJiraTrustedGroup = readJiraTrustedGroup;
+exports.createJiraTrust = createJiraTrust;
+const client_1 = require("./client");
+const trigger_1 = require("./trigger");
+/**
+ * @description The trusted group of the Jira connector: whose text may steer an
+ * agent. With `jira.json` `trustedGroup` set, trusted are the active members of
+ * that ONE Jira group, the AI account itself, and every app or automation
+ * (`accountType` `app`) — what they write reaches the agent and what they hand
+ * over starts it; anyone else's text is withheld and anyone else's hand-over is
+ * not acted on.
+ *
+ * The config names the group, the site is asked once for its id (a rename keeps
+ * working), and its members are read at boot and again whenever the last read is
+ * older than {@link jiraTrustedGroupMaxAgeMs}. A read that fails leaves the old
+ * list in place but never serves it past its age: the caller's
+ * {@link JiraTrust.refreshIfStale} rejects, so nothing is decided on a stale
+ * list (fail closed).
+ */
+/** A member removed from the group loses trust within this plus one poll. */
+exports.jiraTrustedGroupMaxAgeMs = 5 * 60 * 1000;
+/** What a `group/member` read answers for a group that no longer exists. */
+const groupNotFoundStatus = 404;
+/** The group is gone from the site: a setup fault that does not fix itself, so polling stops. */
+class JiraTrustedGroupGoneError extends Error {
+    groupName;
+    constructor(groupName) {
+        super(`the trusted group "${groupName}" no longer exists on the site`);
+        this.groupName = groupName;
+        this.name = 'JiraTrustedGroupGoneError';
+    }
+}
+exports.JiraTrustedGroupGoneError = JiraTrustedGroupGoneError;
+/** The account ids of the group's members; a 404 is {@link JiraTrustedGroupGoneError}. */
+async function readMemberAccountIds(client, groupId, groupName) {
+    try {
+        return new Set((await client.getGroupMembers(groupId)).map((member) => member.accountId));
+    }
+    catch (error) {
+        if (error instanceof client_1.JiraHttpError && error.status === groupNotFoundStatus)
+            throw new JiraTrustedGroupGoneError(groupName);
+        throw error;
+    }
+}
+/**
+ * @description Resolve the group named `groupName` and read its members, for
+ * the setup check. `null` — the site has no such group. A failed call
+ * (unreachable, refused) rejects as the client raised it.
+ */
+async function readJiraTrustedGroup(client, groupName, now) {
+    const readAtMs = now();
+    const group = await client.getGroupByName(groupName);
+    if (!group)
+        return null;
+    try {
+        return { groupName, groupId: group.groupId, memberAccountIds: await readMemberAccountIds(client, group.groupId, groupName), readAtMs };
+    }
+    catch (error) {
+        // Removed between the two calls.
+        if (error instanceof JiraTrustedGroupGoneError)
+            return null;
+        throw error;
+    }
+}
+/** @description The trust over `snapshot` (the setup check's own read), following the group by its id. */
+function createJiraTrust(options) {
+    const { client, aiAccountId, now } = options;
+    const { groupName, groupId } = options.snapshot;
+    let memberAccountIds = options.snapshot.memberAccountIds;
+    let readAtMs = options.snapshot.readAtMs;
+    /** One read at a time: the poll and the attachment tool may both find the list stale. */
+    let refreshInFlight = null;
+    async function refresh() {
+        const startedAtMs = now();
+        memberAccountIds = await readMemberAccountIds(client, groupId, groupName);
+        readAtMs = startedAtMs;
+    }
+    return {
+        groupName,
+        refreshIfStale: async () => {
+            if (now() - readAtMs < exports.jiraTrustedGroupMaxAgeMs)
+                return;
+            refreshInFlight ??= refresh().finally(() => {
+                refreshInFlight = null;
+            });
+            await refreshInFlight;
+        },
+        checkIsTrusted: (account) => {
+            if (!account)
+                return false;
+            return account.accountId === aiAccountId || (0, trigger_1.checkIsAppAccount)(account) || memberAccountIds.has(account.accountId);
+        },
+    };
+}
+//# sourceMappingURL=trustedGroup.js.map

package/dist/connectors/jira/trustedGroup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trustedGroup.js","sourceRoot":"","sources":["../../../src/connectors/jira/trustedGroup.ts"],"names":[],"mappings":";;;AAmEA,oDAWC;AAGD,0CAiCC;AAlHD,qCAA4E;AAC5E,uCAA8C;AAE9C;;;;;;;;;;;;;;GAcG;AAEH,6EAA6E;AAChE,QAAA,wBAAwB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AACtD,4EAA4E;AAC5E,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAEhC,iGAAiG;AACjG,MAAa,yBAA0B,SAAQ,KAAK;IAC7B;IAArB,YAAqB,SAAiB;QACpC,KAAK,CAAC,sBAAsB,SAAS,gCAAgC,CAAC,CAAC;QADpD,cAAS,GAAT,SAAS,CAAQ;QAEpC,IAAI,CAAC,IAAI,GAAG,2BAA2B,CAAC;IAC1C,CAAC;CACF;AALD,8DAKC;AAsBD,0FAA0F;AAC1F,KAAK,UAAU,oBAAoB,CAAC,MAAuB,EAAE,OAAe,EAAE,SAAiB;IAC7F,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,CAAC,MAAM,MAAM,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;IAC5F,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,sBAAa,IAAI,KAAK,CAAC,MAAM,KAAK,mBAAmB;YAAE,MAAM,IAAI,yBAAyB,CAAC,SAAS,CAAC,CAAC;QAC3H,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;GAIG;AACI,KAAK,UAAU,oBAAoB,CAAC,MAAuB,EAAE,SAAiB,EAAE,GAAiB;IACtG,MAAM,QAAQ,GAAG,GAAG,EAAE,CAAC;IACvB,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;IACrD,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,IAAI,CAAC;QACH,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC,MAAM,EAAE,KAAK,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE,QAAQ,EAAE,CAAC;IACzI,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,iCAAiC;QACjC,IAAI,KAAK,YAAY,yBAAyB;YAAE,OAAO,IAAI,CAAC;QAC5D,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,0GAA0G;AAC1G,SAAgB,eAAe,CAAC,OAK/B;IACC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC;IAC7C,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,QAAQ,CAAC;IAChD,IAAI,gBAAgB,GAAG,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC;IACzD,IAAI,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;IACzC,yFAAyF;IACzF,IAAI,eAAe,GAAyB,IAAI,CAAC;IAEjD,KAAK,UAAU,OAAO;QACpB,MAAM,WAAW,GAAG,GAAG,EAAE,CAAC;QAC1B,gBAAgB,GAAG,MAAM,oBAAoB,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;QAC1E,QAAQ,GAAG,WAAW,CAAC;IACzB,CAAC;IAED,OAAO;QACL,SAAS;QACT,cAAc,EAAE,KAAK,IAAI,EAAE;YACzB,IAAI,GAAG,EAAE,GAAG,QAAQ,GAAG,gCAAwB;gBAAE,OAAO;YACxD,eAAe,KAAK,OAAO,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE;gBACzC,eAAe,GAAG,IAAI,CAAC;YACzB,CAAC,CAAC,CAAC;YACH,MAAM,eAAe,CAAC;QACxB,CAAC;QACD,cAAc,EAAE,CAAC,OAAO,EAAE,EAAE;YAC1B,IAAI,CAAC,OAAO;gBAAE,OAAO,KAAK,CAAC;YAC3B,OAAO,OAAO,CAAC,SAAS,KAAK,WAAW,IAAI,IAAA,2BAAiB,EAAC,OAAO,CAAC,IAAI,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACpH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/connectors/jira/unconfirmedPosts.d.ts

@@ -0,0 +1,58 @@
+import { z } from 'zod';
+import { RotatingJsonlFile } from '../../utils/rotatingJsonlFile';
+/**
+ * @description The comments of a request the answer sink posted without Jira
+ * confirming them (plan R29): `DATA_DIR/jira-unconfirmed-posts.jsonl`, one line
+ * per post that ended unconfirmed and one per entry settled later. When the
+ * agent sends the same text again for the same request, the sink reads the
+ * issue first and skips a comment that did land — after a restart too — so an
+ * answer is posted at most once. An entry older than a day is forgotten: the
+ * agent resends within minutes, not days.
+ */
+export declare const jiraUnconfirmedPostsFileName = "jira-unconfirmed-posts.jsonl";
+export declare const unconfirmedPostMaxAgeMs: number;
+declare const unconfirmedPostLineSchema: z.ZodObject<{
+    requestId: z.ZodString;
+    bodyHash: z.ZodString;
+    state: z.ZodEnum<{
+        unconfirmed: "unconfirmed";
+        settled: "settled";
+    }>;
+    at: z.ZodNumber;
+}, z.core.$strip>;
+type UnconfirmedPostLine = z.infer<typeof unconfirmedPostLineSchema>;
+/** @description The hash a comment's comparable text is remembered by — the text itself stays out of the file. */
+export declare function getCommentBodyHash(comparableText: string): string;
+export declare class JiraUnconfirmedPosts {
+    private readonly file;
+    private readonly now;
+    /** Post start time of every open entry, by request and body hash. */
+    private readonly postedAtByIdentity;
+    constructor(file: RotatingJsonlFile<UnconfirmedPostLine>, now: () => number);
+    static createForDataDir(filePath: string, now: () => number): JiraUnconfirmedPosts;
+    /**
+     * @description Replay the file, keeping only the entries still young enough to
+     * matter. A line that does not parse is skipped with a warning (never fatal).
+     */
+    load(): Promise<void>;
+    private apply;
+    /** @description When the unconfirmed post of this body started, or `null` when there is none (or it is too old to matter). */
+    getPostedAt(requestId: string, bodyHash: string): number | null;
+    /**
+     * An entry past {@link unconfirmedPostMaxAgeMs} is dropped: most are never
+     * resent (the request closed, the agent sent other text), and kept they would
+     * only grow the map for the life of the process.
+     */
+    private forgetExpired;
+    /**
+     * @description Remember a post Jira did not confirm. A line that cannot be
+     * written is still remembered for this process (a warning): the resend right
+     * after it is the one that matters most.
+     */
+    recordUnconfirmed(requestId: string, bodyHash: string, postedAt: number): void;
+    /** @description The post landed, or a check found it did not: nothing to check on a resend any more. */
+    settle(requestId: string, bodyHash: string): void;
+    private write;
+}
+export {};
+//# sourceMappingURL=unconfirmedPosts.d.ts.map