You're using a skill that configures Factory (GitHub App code automation) through the LaunchDarkly MCP, or explains why a PR was not classified. Factory can open and change pull requests (auto-flagging) and can drive auto-releasing. Treat every write as production automation with a blast radius.
Prerequisites
This skill requires the remotely hosted LaunchDarkly MCP server.
Required MCP tools:
get-factory-settings/update-factory-settingslist-factory-github-repos(GitHub App install — mappable repos)list-factory-repo-settings(already mapped)update-factory-repo-settings/get-factory-repo-settings/delete-factory-repo-settings
If these tools are missing, stop. Do not invent REST calls, numeric GitHub ids, or "fixes" by guessing settings.
Factory settings are in alpha: the underlying endpoints are gated by the enable-factory-settings flag. If every Factory tool returns 404, the account is not in the alpha — tell the user rather than retrying or falling back to REST.
Core Principles
- Fail closed. Diagnosis is read-only. Never change settings to "make classification work" unless the user confirmed that exact write after seeing current vs proposed state.
- Account settings are the master gate. A mapped repo cannot enable a capability the account has off. Turning a capability off at the account level turns it off for every mapped repo. Turning it on at the account level allows every mapped repo that inherits (no override off) to start automating PRs.
- Confirm before every Factory write. Account PATCH, mapping, repo overrides, and unmap all use Confirm before write. Only touch repos the user named.
- Least privilege. Never enable auto-releasing unless the user explicitly asked to auto-release (that can ship code). Never turn
approvalRequiredoff unless they explicitly asked to drop the approval gate. Never map or unmap repos they did not name. Never iterate the install list and map everything. - Discover, then map. Pass
owner/name. Never ask for a numeric GitHub id. Prefergit remoteof the current workspace when they say "this repo" / "this PR"; if remotes disagree (fork vs upstream), ask which one.owner/nameresolves against the GitHub App install list only — a repo outside the install cannot be resolved or acted on, because Factory works through the App. A 404 saying the repo is not on the install, or that the App is not installed, is the answer; do not retry with other spellings or look the repo up elsewhere. projectKeyon first map. Required when creating a mapping; later updates can omit it.- Omit
autoCleanup. Not part of Factory settings yet. Never send it; never copy it from a response into a PATCH. - GitHub connect is a browser link. If
list-factory-github-reposreturnsgithubConnectUrl, give the user that exact URL and wait until they say they finished. Then calllist-factory-github-reposagain. Do not install or authorize GitHub yourself.flow=installis Install GitHub App.flow=authorizeis Authorize GitHub. Both are the same pages as the integration drawer. The user must already be logged into LaunchDarkly in that browser.
Confirm before write
STOP. Do not call update-factory-settings, update-factory-repo-settings, or delete-factory-repo-settings until the user has answered yes to the proposal in this turn. A yes from an earlier turn, or a vague "fix it" / "go ahead" that does not name the setting, is not enough.
- Read current state first (
get-factory-settings, and repo get/list if the change is repo-scoped). - State now vs proposed, in one or two sentences. Include blast radius. For a map, state inherited auto-flagging and auto-releasing from the account (read
get-factory-settingsfirst). - Wait. Do not batch the write in the same tool round as the question.
Account change (any field on update-factory-settings, including turning things on):
Auto-flagging is ON for this account. Turn it OFF for all mapped repos? Auto-flagging pull requests will stop until it is turned back on.
Auto-flagging is OFF for this account. Turn it ON for the account? Mapped repos that inherit this setting can start getting auto-flagging pull requests.
Auto-flagging approvalRequired is ON. Turn it OFF? Auto-flagging PRs would no longer require that approval gate.
Same pattern for auto-releasing, and say that auto-releasing can ship.
Map or change one repo (update-factory-repo-settings):
Always name both inherited account capabilities in the proposal. Omitted overrides inherit auto-flagging and auto-releasing; do not confirm a map that only mentions auto-flagging.
launchdarkly/gonfalonis not mapped. Map it to projectdefault, inheriting account auto-flagging (ON) and auto-releasing (OFF)? Factory can start classifying and opening auto-flagging PRs in that repo. Auto-releasing will stay off unless the account (or a repo override) turns it on.
launchdarkly/gonfalonis not mapped. Map it to projectdefault, inheriting account auto-flagging (ON) and auto-releasing (ON)? Factory can start auto-flagging PRs in that repo and auto-releasing, which can ship.
launchdarkly/gonfalonis mapped todefaultwith auto-flagging effective ON and auto-releasing effective OFF. Set a repo override turning auto-flagging OFF for this repo only? Auto-releasing stays inherited (OFF).
Unmap (delete-factory-repo-settings):
launchdarkly/gonfalonis mapped to projectdefaultwith auto-flagging effective ON and auto-releasing effective OFF. Unmap it? Factory will stop auto-flagging and auto-releasing that repo until it is mapped again.
After they confirm, apply only the fields in the proposal. Then verify (do not use verify as the safety check).
Choose a workflow
- "Why didn't Factory classify / auto-flag my PR?" (or similar) → Why didn't my PR get classified? first. Do not write settings in that workflow.
- Configure / map / turn on / unmap → Configure settings.
Why didn't my PR get classified?
Use this when the user asks why a PR was not classified, not auto-flagged, or Factory ignored the PR. Read-only. Check in this order. Stop at the first failure and tell them how to fix it (then Confirm before write if they ask you to apply the fix).
Identify the GitHub repo (owner/name) from the PR URL, git remote, or the name they gave. If you cannot identify one repo, ask. Do not diagnose a different repo.
-
Is auto-flagging on for the account?
get-factory-settings. IfautoFlagging.enabledis false, that is the answer: account gate is off, so no repo can auto-flag. Stop. -
Is this repo mapped to a project?
get-factory-repo-settingswithrepo: "owner/name"(orlist-factory-repo-settingsand find it). If the error orlist-factory-github-reposincludesgithubConnectUrl, readflow:flow=install: the GitHub App is not installed, so Factory never sees the PR. That is the answer. Give the user the link and stop.flow=authorize: this member has not authorized GitHub, soowner/namecannot be looked up. That is not why Factory skipped the PR. Say so, give the user the link, and resume at this step after they finish. Do not report it as the fix.
A repo that is on the install but unmapped is a different answer. Unmapped install repos do not run Factory. Stop.
-
Does this repo override auto-flagging off? On the repo payload, if auto-flagging
enabledis false, orenabledOverrideis true whileenabledis false, the repo is opted out even if the account is on. Stop.
If all three look fine (account on, repo mapped, repo auto-flagging effective on):
- Do not flip settings to "try something."
- Point them at the Factory runbooks. These are internal LaunchDarkly Confluence pages (PD space) while Factory is in alpha; there is no public docs URL yet. Classification can still fail for reasons this MCP surface cannot see (GitHub App install on the wrong org, PR not in an installed repo, workflow/app permissions, classifier skip rules).
- Flag Classification (ODD) Runbook — the classifier itself: verdicts (
not-suited,already-flagged), escalations, and the per-PR ledger that records why a PR got the verdict it did. - GitHub App Runbook — the PR event never reaching Factory: install scope, permissions, webhooks.
- Flag Classification (ODD) Runbook — the classifier itself: verdicts (
- Optional reads:
list-factory-github-reposto confirm the repo is on the install list;autoFlagging.approvalRequiredif they expected a PR and one exists but is waiting on approval.
Configure settings
Step 1: Read current settings
get-factory-settingslist-factory-repo-settingslist-factory-github-repos(optionalprojectKey; install is account-wide)
If githubConnectUrl is present, give the user that link and stop this turn. Do not map until a later call omits the URL.
Step 2: Account defaults (if needed)
If an account PATCH is needed, follow Confirm before write, then update-factory-settings with only the confirmed fields:
autoFlagging.enabled/autoFlagging.approvalRequired(approval is only valid here)autoReleasing.enabled
Do not send autoCleanup. Requires updateFactorySettings.
Step 3: Map or override a repository
Only for repos the user named. Follow Confirm before write, then update-factory-repo-settings:
- Prefer
repo: "owner/name". - Include
projectKeywhen creating a mapping. - Optional repo-level
autoFlagging/autoReleasingoverrides. Omitted capabilities inherit the account setting. A repo cannot enable a capability the account has off.
Requires updateFactoryRepoSettings on the mapped project.
Step 4: Verify (after a confirmed write)
get-factory-repo-settings/get-factory-settingsas appropriate.- Effective
enabledmust match the proposal (account off ⇒ repo cannot be on). - Mapped repos appear in
list-factory-repo-settings.
To unmap: Confirm before write, then delete-factory-repo-settings.
Out of scope
- Auto-cleanup
- Completing GitHub OAuth inside the tool. Hand the user
githubConnectUrlinstead. - Vega BYOK
- Observability MCP (
github_repositories) — do not require a second MCP server just to map a Factory repo - Changing classification rules, GitHub App permissions, or org install scope via this skill