@mastra/factory 0.0.0-aggregate-trace-20261015182851

package/dist/storage/domains/audit/domain.js

@@ -0,0 +1,248 @@
+import { getFactoryAuthUser } from "../../../auth.js";
+import { auditActionsInNamespaces, isAuditNamespace } from "./actions.js";
+import { isHumanActorId } from "./actors.js";
+import { ACTOR_PROFILE_METADATA_KEY, auditActorProfile } from "./base.js";
+import { toWireAuditEvent } from "./wire.js";
+import { registerApiRoute } from "@mastra/core/server";
+//#region src/storage/domains/audit/domain.ts
+function readStoredActorProfile(metadata) {
+	if (!metadata) return void 0;
+	const raw = metadata[ACTOR_PROFILE_METADATA_KEY];
+	if (!raw || typeof raw !== "object") return void 0;
+	const profile = raw;
+	const name = typeof profile.name === "string" && profile.name.trim() ? profile.name.trim() : void 0;
+	const avatarUrl = typeof profile.avatarUrl === "string" && profile.avatarUrl.trim() ? profile.avatarUrl.trim() : void 0;
+	if (!name && !avatarUrl) return void 0;
+	return {
+		...name ? { name } : {},
+		...avatarUrl ? { avatarUrl } : {}
+	};
+}
+const UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+const MAX_ACTOR_PROFILES = 100;
+function loose(c) {
+	return c;
+}
+/** The actions a `namespaces=` query names: none when it names only unknown ones, `undefined` when it names nothing. */
+function actionsInRequestedNamespaces(raw) {
+	if (!raw) return void 0;
+	return auditActionsInNamespaces(raw.split(",").map((namespace) => namespace.trim()).filter(isAuditNamespace));
+}
+function parseActorIdsParam(raw) {
+	if (!raw) return [];
+	return [...new Set(raw.split(",").map((actorId) => actorId.trim()).filter(isHumanActorId))].slice(0, MAX_ACTOR_PROFILES);
+}
+function parseLimitParam(raw) {
+	if (!raw) return void 0;
+	const limit = Number.parseInt(raw, 10);
+	return Number.isFinite(limit) ? limit : void 0;
+}
+function auditRequestContext(c) {
+	const location = c.req.header("x-forwarded-for")?.split(",")[0]?.trim();
+	const userAgent = c.req.header("user-agent");
+	return {
+		...location ? { location } : {},
+		...userAgent ? { userAgent } : {}
+	};
+}
+/** Who a browser request is and where it came from: the pair every funnel row carries. */
+function auditRequestOrigin(c) {
+	return {
+		actorProfile: auditActorProfile(getFactoryAuthUser(c)),
+		context: auditRequestContext(c)
+	};
+}
+/** Factory-owned audit behavior backed by the audit storage domain. */
+var AuditDomain = class {
+	#auth;
+	#audit;
+	#projects;
+	#users;
+	#sinks;
+	#agentTenant;
+	constructor({ auth, audit, projects, users, sinks = [], agentTenant }) {
+		this.#auth = auth;
+		this.#audit = audit;
+		this.#projects = projects;
+		this.#users = users;
+		this.#sinks = sinks;
+		this.#agentTenant = agentTenant;
+		const ids = /* @__PURE__ */ new Set();
+		for (const sink of this.#sinks) {
+			if (!sink.id) throw new Error("Audit integration id must not be empty");
+			if (ids.has(sink.id)) throw new Error(`Duplicate audit integration id '${sink.id}'`);
+			ids.add(sink.id);
+		}
+	}
+	async record(input) {
+		try {
+			await this.#audit.ensureReady();
+			const { event: row, created } = input.idempotencyKey ? await this.#audit.recordOnce(input) : {
+				event: await this.#audit.record(input),
+				created: true
+			};
+			if (!created) return row;
+			for (const sink of this.#sinks) {
+				if (!sink.audit) continue;
+				Promise.resolve().then(() => sink.audit?.({ event: row })).catch((err) => {
+					console.warn("[Audit] Audit integration failed", {
+						integration: sink.id,
+						action: row.action,
+						error: err instanceof Error ? err.message : String(err)
+					});
+				});
+			}
+			return row;
+		} catch (err) {
+			console.warn("[Audit] Failed to record audit event", {
+				action: input.action,
+				error: err instanceof Error ? err.message : String(err)
+			});
+			return null;
+		}
+	}
+	async list(input) {
+		await this.#audit.ensureReady();
+		return this.#audit.list(input);
+	}
+	async emit({ context, input }) {
+		try {
+			const tenant = this.#auth.tenant(context);
+			if (!tenant?.orgId) return;
+			await this.record({
+				orgId: tenant.orgId,
+				actorId: tenant.userId,
+				actorProfile: auditActorProfile(getFactoryAuthUser(context)),
+				action: input.action,
+				targets: input.targets,
+				metadata: input.metadata,
+				factoryProjectId: input.factoryProjectId,
+				projectRepositoryId: input.projectRepositoryId,
+				context: auditRequestContext(context)
+			});
+		} catch (err) {
+			console.warn("[Audit] Failed to emit audit event", {
+				action: input.action,
+				error: err instanceof Error ? err.message : String(err)
+			});
+		}
+	}
+	async emitAgent({ requestContext, input }) {
+		try {
+			const context = requestContext.get("controller");
+			const tenant = this.#agentTenant?.(requestContext);
+			const orgId = tenant?.orgId;
+			const userId = tenant?.userId;
+			const threadId = context?.threadId;
+			const state = context?.getState();
+			if (!orgId || !userId || !threadId || !state?.factoryProjectId) return;
+			const modelId = context.session.modelId?.trim();
+			await this.record({
+				orgId,
+				actorId: `agent:${threadId}`,
+				actorType: "agent",
+				action: input.action,
+				targets: input.targets,
+				metadata: {
+					...input.metadata,
+					startedBy: userId,
+					...modelId ? { modelId } : {}
+				},
+				factoryProjectId: state.factoryProjectId,
+				projectRepositoryId: state.projectRepositoryId,
+				context: {}
+			});
+		} catch (err) {
+			console.warn("[Audit] Failed to emit agent audit event", {
+				action: input.action,
+				error: err instanceof Error ? err.message : String(err)
+			});
+		}
+	}
+	async #resolveActorProfiles(events, requestedActorIds = []) {
+		const humanActorIds = [...new Set([...requestedActorIds, ...events.filter((event) => event.actorType === "human").map((event) => event.actorId)].filter(isHumanActorId))].slice(0, MAX_ACTOR_PROFILES);
+		if (humanActorIds.length === 0) return {};
+		const profiles = {};
+		for (const event of events) {
+			if (event.actorType !== "human") continue;
+			if (!isHumanActorId(event.actorId)) continue;
+			if (profiles[event.actorId]) continue;
+			const stored = readStoredActorProfile(event.metadata);
+			if (!stored?.name) continue;
+			profiles[event.actorId] = {
+				id: event.actorId,
+				name: stored.name,
+				...stored.avatarUrl ? { avatarUrl: stored.avatarUrl } : {}
+			};
+		}
+		const unresolved = humanActorIds.filter((actorId) => !profiles[actorId]);
+		if (unresolved.length === 0 || !this.#users) return profiles;
+		try {
+			const users = this.#users.getUsers ? await this.#users.getUsers(unresolved) : await Promise.all(unresolved.map((actorId) => this.#users?.getUser(actorId) ?? null));
+			for (const [index, user] of users.entries()) {
+				if (!user) continue;
+				const name = user.name?.trim() || user.email?.trim() || user.id;
+				const actorId = unresolved[index] ?? user.id;
+				profiles[actorId] = {
+					id: user.id,
+					name,
+					...user.avatarUrl ? { avatarUrl: user.avatarUrl } : {}
+				};
+			}
+		} catch (err) {
+			console.warn("[Audit] Failed to resolve audit actor profiles", { error: err instanceof Error ? err.message : String(err) });
+		}
+		return profiles;
+	}
+	routes() {
+		return [registerApiRoute("/web/factory/projects/:id/audit", {
+			method: "GET",
+			handler: async (cc) => {
+				const c = loose(cc);
+				const tenant = await this.#resolveTenant(c);
+				if ("response" in tenant) return tenant.response;
+				const projectId = c.req.param("id");
+				if (!projectId || !UUID_RE.test(projectId)) return c.json({ error: "Project not found" }, 404);
+				await this.#projects.ensureReady();
+				if (!await this.#projects.get({
+					orgId: tenant.orgId,
+					id: projectId
+				})) return c.json({ error: "Project not found" }, 404);
+				const actions = actionsInRequestedNamespaces(c.req.query("namespaces"));
+				if (actions?.length === 0) return c.json({ error: "unknown_namespaces" }, 400);
+				const page = await this.list({
+					orgId: tenant.orgId,
+					factoryProjectId: projectId,
+					actions,
+					actorId: c.req.query("actor") || void 0,
+					before: c.req.query("before") || void 0,
+					limit: parseLimitParam(c.req.query("limit"))
+				});
+				const actors = await this.#resolveActorProfiles(page.events, parseActorIdsParam(c.req.query("actorIds")));
+				const body = {
+					events: page.events.map(toWireAuditEvent),
+					actors,
+					...page.nextCursor ? { nextCursor: page.nextCursor } : {}
+				};
+				return c.json(body);
+			}
+		})];
+	}
+	async #resolveTenant(c) {
+		await this.#auth.ensureUser(c);
+		const tenant = this.#auth.tenant(c);
+		if (!tenant) return { response: c.json({ error: "unauthorized" }, 401) };
+		if (!tenant.orgId) return { response: c.json({
+			error: "organization_required",
+			message: "The audit trail requires an organization."
+		}, 403) };
+		return {
+			orgId: tenant.orgId,
+			userId: tenant.userId
+		};
+	}
+};
+//#endregion
+export { AuditDomain, auditRequestContext, auditRequestOrigin };
+
+//# sourceMappingURL=domain.js.map

package/dist/storage/domains/audit/domain.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"domain.js","names":["#auth","#audit","#projects","#users","#sinks","#agentTenant","#resolveActorProfiles","#resolveTenant"],"sources":["../../../../src/storage/domains/audit/domain.ts"],"sourcesContent":["import type { AgentControllerRequestContext } from '@mastra/core/agent-controller';\nimport type { RequestContext } from '@mastra/core/request-context';\nimport type { ApiRoute, IUserProvider } from '@mastra/core/server';\nimport { registerApiRoute } from '@mastra/core/server';\nimport type { Context } from 'hono';\n\nimport { getFactoryAuthUser } from '../../../auth.js';\nimport type { RouteAuth } from '../../../routes/route.js';\nimport type { FactoryProjectsStorage } from '../projects/base.js';\nimport { auditActionsInNamespaces, isAuditNamespace } from './actions.js';\nimport type { AuditAction } from './actions.js';\nimport { isHumanActorId } from './actors.js';\nimport { ACTOR_PROFILE_METADATA_KEY, auditActorProfile } from './base.js';\nimport type {\n  AuditActorProfileInput,\n  AuditContext,\n  AuditEventPage,\n  AuditEventRow,\n  AuditStorage,\n  AuditTarget,\n  ListAuditEventsInput,\n  RecordAuditEventInput,\n} from './base.js';\nimport { toWireAuditEvent } from './wire.js';\nimport type { WireAuditActor, WireAuditPage } from './wire.js';\n\nexport interface EmitAuditInput {\n  action: AuditAction;\n  factoryProjectId?: string;\n  projectRepositoryId?: string;\n  targets: AuditTarget[];\n  metadata?: Record<string, unknown>;\n}\n\nexport interface EmitAgentAuditInput {\n  action: AuditAction;\n  targets: AuditTarget[];\n  metadata?: Record<string, unknown>;\n}\n\nexport interface AuditEmitter {\n  emit(args: { context: Context; input: EmitAuditInput }): Promise<void>;\n}\n\nexport interface AuditAgentEmitter {\n  emitAgent(args: { requestContext: RequestContext; input: EmitAgentAuditInput }): Promise<void>;\n}\n\n/** Records with an explicit actor, for the paths that have no request: rule transitions, run starts, run ends, supervisor tools. */\nexport type AuditRecorder = Pick<AuditDomain, 'record'>;\n\n/** Best-effort destination for locally persisted audit events (e.g. an integration's audit log). */\nexport interface AuditSink {\n  id: string;\n  audit?(args: { event: AuditEventRow }): Promise<void>;\n}\n\ninterface FactorySessionState {\n  factoryProjectId?: string;\n  projectRepositoryId?: string;\n}\n\nfunction readStoredActorProfile(metadata: Record<string, unknown> | undefined): AuditActorProfileInput | undefined {\n  if (!metadata) return undefined;\n  const raw = metadata[ACTOR_PROFILE_METADATA_KEY];\n  if (!raw || typeof raw !== 'object') return undefined;\n  const profile = raw as Record<string, unknown>;\n  const name = typeof profile.name === 'string' && profile.name.trim() ? profile.name.trim() : undefined;\n  const avatarUrl =\n    typeof profile.avatarUrl === 'string' && profile.avatarUrl.trim() ? profile.avatarUrl.trim() : undefined;\n  if (!name && !avatarUrl) return undefined;\n  return { ...(name ? { name } : {}), ...(avatarUrl ? { avatarUrl } : {}) };\n}\n\nexport interface AuditDomainOptions {\n  auth: RouteAuth;\n  /** Audit storage domain handle. */\n  audit: AuditStorage;\n  /** Projects domain handle, used to scope the audit trail route. */\n  projects: FactoryProjectsStorage;\n  /** Resolve persisted human actor ids to display names and profile images. */\n  users?: Pick<IUserProvider, 'getUser' | 'getUsers'>;\n  /** Best-effort fan-out destinations notified after each recorded event. */\n  sinks?: AuditSink[];\n  /** Resolve the acting tenant for agent-emitted events from the request context. */\n  agentTenant?: (requestContext: RequestContext) => { orgId?: string; userId?: string } | undefined;\n}\n\nconst UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;\nconst MAX_ACTOR_PROFILES = 100;\n\nfunction loose(c: unknown): Context {\n  return c as Context;\n}\n\n/** The actions a `namespaces=` query names: none when it names only unknown ones, `undefined` when it names nothing. */\nfunction actionsInRequestedNamespaces(raw: string | undefined): string[] | undefined {\n  if (!raw) return undefined;\n  return auditActionsInNamespaces(\n    raw\n      .split(',')\n      .map(namespace => namespace.trim())\n      .filter(isAuditNamespace),\n  );\n}\n\nfunction parseActorIdsParam(raw: string | undefined): string[] {\n  if (!raw) return [];\n  return [\n    ...new Set(\n      raw\n        .split(',')\n        .map(actorId => actorId.trim())\n        .filter(isHumanActorId),\n    ),\n  ].slice(0, MAX_ACTOR_PROFILES);\n}\n\nfunction parseLimitParam(raw: string | undefined): number | undefined {\n  if (!raw) return undefined;\n  const limit = Number.parseInt(raw, 10);\n  return Number.isFinite(limit) ? limit : undefined;\n}\n\nexport function auditRequestContext(c: Context): AuditContext {\n  const location = c.req.header('x-forwarded-for')?.split(',')[0]?.trim();\n  const userAgent = c.req.header('user-agent');\n  return {\n    ...(location ? { location } : {}),\n    ...(userAgent ? { userAgent } : {}),\n  };\n}\n\n/** Who a browser request is and where it came from: the pair every funnel row carries. */\nexport function auditRequestOrigin(c: Context): {\n  actorProfile: AuditActorProfileInput | undefined;\n  context: AuditContext;\n} {\n  return { actorProfile: auditActorProfile(getFactoryAuthUser(c)), context: auditRequestContext(c) };\n}\n\n/** Factory-owned audit behavior backed by the audit storage domain. */\nexport class AuditDomain implements AuditEmitter, AuditAgentEmitter {\n  readonly #auth: RouteAuth;\n  readonly #audit: AuditStorage;\n  readonly #projects: FactoryProjectsStorage;\n  readonly #users: AuditDomainOptions['users'];\n  readonly #sinks: AuditSink[];\n  readonly #agentTenant: AuditDomainOptions['agentTenant'];\n\n  constructor({ auth, audit, projects, users, sinks = [], agentTenant }: AuditDomainOptions) {\n    this.#auth = auth;\n    this.#audit = audit;\n    this.#projects = projects;\n    this.#users = users;\n    this.#sinks = sinks;\n    this.#agentTenant = agentTenant;\n\n    const ids = new Set<string>();\n    for (const sink of this.#sinks) {\n      if (!sink.id) throw new Error('Audit integration id must not be empty');\n      if (ids.has(sink.id)) throw new Error(`Duplicate audit integration id '${sink.id}'`);\n      ids.add(sink.id);\n    }\n  }\n\n  async record(input: RecordAuditEventInput<AuditAction>): Promise<AuditEventRow | null> {\n    try {\n      await this.#audit.ensureReady();\n      const { event: row, created } = input.idempotencyKey\n        ? await this.#audit.recordOnce(input)\n        : { event: await this.#audit.record(input), created: true };\n      if (!created) return row;\n      for (const sink of this.#sinks) {\n        if (!sink.audit) continue;\n        void Promise.resolve()\n          .then(() => sink.audit?.({ event: row }))\n          .catch(err => {\n            console.warn('[Audit] Audit integration failed', {\n              integration: sink.id,\n              action: row.action,\n              error: err instanceof Error ? err.message : String(err),\n            });\n          });\n      }\n      return row;\n    } catch (err) {\n      console.warn('[Audit] Failed to record audit event', {\n        action: input.action,\n        error: err instanceof Error ? err.message : String(err),\n      });\n      return null;\n    }\n  }\n\n  async list(input: ListAuditEventsInput): Promise<AuditEventPage> {\n    await this.#audit.ensureReady();\n    return this.#audit.list(input);\n  }\n\n  async emit({ context, input }: { context: Context; input: EmitAuditInput }): Promise<void> {\n    try {\n      const tenant = this.#auth.tenant(context);\n      if (!tenant?.orgId) return;\n      await this.record({\n        orgId: tenant.orgId,\n        actorId: tenant.userId,\n        actorProfile: auditActorProfile(getFactoryAuthUser(context)),\n        action: input.action,\n        targets: input.targets,\n        metadata: input.metadata,\n        factoryProjectId: input.factoryProjectId,\n        projectRepositoryId: input.projectRepositoryId,\n        context: auditRequestContext(context),\n      });\n    } catch (err) {\n      console.warn('[Audit] Failed to emit audit event', {\n        action: input.action,\n        error: err instanceof Error ? err.message : String(err),\n      });\n    }\n  }\n\n  async emitAgent({\n    requestContext,\n    input,\n  }: {\n    requestContext: RequestContext;\n    input: EmitAgentAuditInput;\n  }): Promise<void> {\n    try {\n      const context = requestContext.get('controller') as\n        | AgentControllerRequestContext<FactorySessionState>\n        | undefined;\n      const tenant = this.#agentTenant?.(requestContext);\n      const orgId = tenant?.orgId;\n      const userId = tenant?.userId;\n      const threadId = context?.threadId;\n      const state = context?.getState();\n      if (!orgId || !userId || !threadId || !state?.factoryProjectId) return;\n\n      const modelId = context.session.modelId?.trim();\n      await this.record({\n        orgId,\n        actorId: `agent:${threadId}`,\n        actorType: 'agent',\n        action: input.action,\n        targets: input.targets,\n        metadata: {\n          ...input.metadata,\n          startedBy: userId,\n          ...(modelId ? { modelId } : {}),\n        },\n        factoryProjectId: state.factoryProjectId,\n        projectRepositoryId: state.projectRepositoryId,\n        context: {},\n      });\n    } catch (err) {\n      console.warn('[Audit] Failed to emit agent audit event', {\n        action: input.action,\n        error: err instanceof Error ? err.message : String(err),\n      });\n    }\n  }\n\n  async #resolveActorProfiles(\n    events: AuditEventRow[],\n    requestedActorIds: string[] = [],\n  ): Promise<Record<string, WireAuditActor>> {\n    const humanActorIds = [\n      ...new Set(\n        [\n          ...requestedActorIds,\n          ...events.filter(event => event.actorType === 'human').map(event => event.actorId),\n        ].filter(isHumanActorId),\n      ),\n    ].slice(0, MAX_ACTOR_PROFILES);\n    if (humanActorIds.length === 0) return {};\n\n    // Prefer the profile stamped into event metadata at record time: it works\n    // regardless of the auth provider's ability to resolve a user by id\n    // (MastraAuthStudio's getUser() always returns null, WorkOS looks up by\n    // id but every provider stamps here uniformly).\n    const profiles: Record<string, WireAuditActor> = {};\n    for (const event of events) {\n      if (event.actorType !== 'human') continue;\n      if (!isHumanActorId(event.actorId)) continue;\n      if (profiles[event.actorId]) continue;\n      const stored = readStoredActorProfile(event.metadata);\n      if (!stored?.name) continue;\n      profiles[event.actorId] = {\n        id: event.actorId,\n        name: stored.name,\n        ...(stored.avatarUrl ? { avatarUrl: stored.avatarUrl } : {}),\n      };\n    }\n\n    const unresolved = humanActorIds.filter(actorId => !profiles[actorId]);\n    if (unresolved.length === 0 || !this.#users) return profiles;\n\n    try {\n      const users = this.#users.getUsers\n        ? await this.#users.getUsers(unresolved)\n        : await Promise.all(unresolved.map(actorId => this.#users?.getUser(actorId) ?? null));\n      for (const [index, user] of users.entries()) {\n        if (!user) continue;\n        const name = user.name?.trim() || user.email?.trim() || user.id;\n        const actorId = unresolved[index] ?? user.id;\n        profiles[actorId] = {\n          id: user.id,\n          name,\n          ...(user.avatarUrl ? { avatarUrl: user.avatarUrl } : {}),\n        };\n      }\n    } catch (err) {\n      console.warn('[Audit] Failed to resolve audit actor profiles', {\n        error: err instanceof Error ? err.message : String(err),\n      });\n    }\n    return profiles;\n  }\n\n  routes(): ApiRoute[] {\n    return [\n      registerApiRoute('/web/factory/projects/:id/audit', {\n        method: 'GET',\n        handler: async cc => {\n          const c = loose(cc);\n          const tenant = await this.#resolveTenant(c);\n          if ('response' in tenant) return tenant.response;\n\n          const projectId = c.req.param('id');\n          if (!projectId || !UUID_RE.test(projectId)) return c.json({ error: 'Project not found' }, 404);\n          await this.#projects.ensureReady();\n          const project = await this.#projects.get({ orgId: tenant.orgId, id: projectId });\n          if (!project) return c.json({ error: 'Project not found' }, 404);\n\n          const actions = actionsInRequestedNamespaces(c.req.query('namespaces'));\n          if (actions?.length === 0) return c.json({ error: 'unknown_namespaces' }, 400);\n\n          const page = await this.list({\n            orgId: tenant.orgId,\n            factoryProjectId: projectId,\n            actions,\n            actorId: c.req.query('actor') || undefined,\n            before: c.req.query('before') || undefined,\n            limit: parseLimitParam(c.req.query('limit')),\n          });\n          const actors = await this.#resolveActorProfiles(page.events, parseActorIdsParam(c.req.query('actorIds')));\n          const body: WireAuditPage = {\n            events: page.events.map(toWireAuditEvent),\n            actors,\n            ...(page.nextCursor ? { nextCursor: page.nextCursor } : {}),\n          };\n          return c.json(body);\n        },\n      }),\n    ];\n  }\n\n  async #resolveTenant(c: Context): Promise<{ orgId: string; userId: string } | { response: Response }> {\n    await this.#auth.ensureUser(c);\n    const tenant = this.#auth.tenant(c);\n    if (!tenant) return { response: c.json({ error: 'unauthorized' }, 401) };\n    if (!tenant.orgId) {\n      return {\n        response: c.json({ error: 'organization_required', message: 'The audit trail requires an organization.' }, 403),\n      };\n    }\n    return { orgId: tenant.orgId, userId: tenant.userId };\n  }\n}\n"],"mappings":";;;;;;;AA8DA,SAAS,uBAAuB,UAAmF;CACjH,IAAI,CAAC,UAAU,OAAO,KAAA;CACtB,MAAM,MAAM,SAAS;CACrB,IAAI,CAAC,OAAO,OAAO,QAAQ,UAAU,OAAO,KAAA;CAC5C,MAAM,UAAU;CAChB,MAAM,OAAO,OAAO,QAAQ,SAAS,YAAY,QAAQ,KAAK,KAAK,IAAI,QAAQ,KAAK,KAAK,IAAI,KAAA;CAC7F,MAAM,YACJ,OAAO,QAAQ,cAAc,YAAY,QAAQ,UAAU,KAAK,IAAI,QAAQ,UAAU,KAAK,IAAI,KAAA;CACjG,IAAI,CAAC,QAAQ,CAAC,WAAW,OAAO,KAAA;CAChC,OAAO;EAAE,GAAI,OAAO,EAAE,KAAK,IAAI,CAAC;EAAI,GAAI,YAAY,EAAE,UAAU,IAAI,CAAC;CAAG;AAC1E;AAgBA,MAAM,UAAU;AAChB,MAAM,qBAAqB;AAE3B,SAAS,MAAM,GAAqB;CAClC,OAAO;AACT;;AAGA,SAAS,6BAA6B,KAA+C;CACnF,IAAI,CAAC,KAAK,OAAO,KAAA;CACjB,OAAO,yBACL,IACG,MAAM,GAAG,CAAC,CACV,KAAI,cAAa,UAAU,KAAK,CAAC,CAAC,CAClC,OAAO,gBAAgB,CAC5B;AACF;AAEA,SAAS,mBAAmB,KAAmC;CAC7D,IAAI,CAAC,KAAK,OAAO,CAAC;CAClB,OAAO,CACL,GAAG,IAAI,IACL,IACG,MAAM,GAAG,CAAC,CACV,KAAI,YAAW,QAAQ,KAAK,CAAC,CAAC,CAC9B,OAAO,cAAc,CAC1B,CACF,CAAC,CAAC,MAAM,GAAG,kBAAkB;AAC/B;AAEA,SAAS,gBAAgB,KAA6C;CACpE,IAAI,CAAC,KAAK,OAAO,KAAA;CACjB,MAAM,QAAQ,OAAO,SAAS,KAAK,EAAE;CACrC,OAAO,OAAO,SAAS,KAAK,IAAI,QAAQ,KAAA;AAC1C;AAEA,SAAgB,oBAAoB,GAA0B;CAC5D,MAAM,WAAW,EAAE,IAAI,OAAO,iBAAiB,CAAC,EAAE,MAAM,GAAG,CAAC,CAAC,EAAE,EAAE,KAAK;CACtE,MAAM,YAAY,EAAE,IAAI,OAAO,YAAY;CAC3C,OAAO;EACL,GAAI,WAAW,EAAE,SAAS,IAAI,CAAC;EAC/B,GAAI,YAAY,EAAE,UAAU,IAAI,CAAC;CACnC;AACF;;AAGA,SAAgB,mBAAmB,GAGjC;CACA,OAAO;EAAE,cAAc,kBAAkB,mBAAmB,CAAC,CAAC;EAAG,SAAS,oBAAoB,CAAC;CAAE;AACnG;;AAGA,IAAa,cAAb,MAAoE;CAClE;CACA;CACA;CACA;CACA;CACA;CAEA,YAAY,EAAE,MAAM,OAAO,UAAU,OAAO,QAAQ,CAAC,GAAG,eAAmC;EACzF,KAAKA,QAAQ;EACb,KAAKC,SAAS;EACd,KAAKC,YAAY;EACjB,KAAKC,SAAS;EACd,KAAKC,SAAS;EACd,KAAKC,eAAe;EAEpB,MAAM,sBAAM,IAAI,IAAY;EAC5B,KAAK,MAAM,QAAQ,KAAKD,QAAQ;GAC9B,IAAI,CAAC,KAAK,IAAI,MAAM,IAAI,MAAM,wCAAwC;GACtE,IAAI,IAAI,IAAI,KAAK,EAAE,GAAG,MAAM,IAAI,MAAM,mCAAmC,KAAK,GAAG,EAAE;GACnF,IAAI,IAAI,KAAK,EAAE;EACjB;CACF;CAEA,MAAM,OAAO,OAA0E;EACrF,IAAI;GACF,MAAM,KAAKH,OAAO,YAAY;GAC9B,MAAM,EAAE,OAAO,KAAK,YAAY,MAAM,iBAClC,MAAM,KAAKA,OAAO,WAAW,KAAK,IAClC;IAAE,OAAO,MAAM,KAAKA,OAAO,OAAO,KAAK;IAAG,SAAS;GAAK;GAC5D,IAAI,CAAC,SAAS,OAAO;GACrB,KAAK,MAAM,QAAQ,KAAKG,QAAQ;IAC9B,IAAI,CAAC,KAAK,OAAO;IACjB,QAAa,QAAQ,CAAC,CACnB,WAAW,KAAK,QAAQ,EAAE,OAAO,IAAI,CAAC,CAAC,CAAC,CACxC,OAAM,QAAO;KACZ,QAAQ,KAAK,oCAAoC;MAC/C,aAAa,KAAK;MAClB,QAAQ,IAAI;MACZ,OAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;KACxD,CAAC;IACH,CAAC;GACL;GACA,OAAO;EACT,SAAS,KAAK;GACZ,QAAQ,KAAK,wCAAwC;IACnD,QAAQ,MAAM;IACd,OAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;GACxD,CAAC;GACD,OAAO;EACT;CACF;CAEA,MAAM,KAAK,OAAsD;EAC/D,MAAM,KAAKH,OAAO,YAAY;EAC9B,OAAO,KAAKA,OAAO,KAAK,KAAK;CAC/B;CAEA,MAAM,KAAK,EAAE,SAAS,SAAqE;EACzF,IAAI;GACF,MAAM,SAAS,KAAKD,MAAM,OAAO,OAAO;GACxC,IAAI,CAAC,QAAQ,OAAO;GACpB,MAAM,KAAK,OAAO;IAChB,OAAO,OAAO;IACd,SAAS,OAAO;IAChB,cAAc,kBAAkB,mBAAmB,OAAO,CAAC;IAC3D,QAAQ,MAAM;IACd,SAAS,MAAM;IACf,UAAU,MAAM;IAChB,kBAAkB,MAAM;IACxB,qBAAqB,MAAM;IAC3B,SAAS,oBAAoB,OAAO;GACtC,CAAC;EACH,SAAS,KAAK;GACZ,QAAQ,KAAK,sCAAsC;IACjD,QAAQ,MAAM;IACd,OAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;GACxD,CAAC;EACH;CACF;CAEA,MAAM,UAAU,EACd,gBACA,SAIgB;EAChB,IAAI;GACF,MAAM,UAAU,eAAe,IAAI,YAAY;GAG/C,MAAM,SAAS,KAAKK,eAAe,cAAc;GACjD,MAAM,QAAQ,QAAQ;GACtB,MAAM,SAAS,QAAQ;GACvB,MAAM,WAAW,SAAS;GAC1B,MAAM,QAAQ,SAAS,SAAS;GAChC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,YAAY,CAAC,OAAO,kBAAkB;GAEhE,MAAM,UAAU,QAAQ,QAAQ,SAAS,KAAK;GAC9C,MAAM,KAAK,OAAO;IAChB;IACA,SAAS,SAAS;IAClB,WAAW;IACX,QAAQ,MAAM;IACd,SAAS,MAAM;IACf,UAAU;KACR,GAAG,MAAM;KACT,WAAW;KACX,GAAI,UAAU,EAAE,QAAQ,IAAI,CAAC;IAC/B;IACA,kBAAkB,MAAM;IACxB,qBAAqB,MAAM;IAC3B,SAAS,CAAC;GACZ,CAAC;EACH,SAAS,KAAK;GACZ,QAAQ,KAAK,4CAA4C;IACvD,QAAQ,MAAM;IACd,OAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;GACxD,CAAC;EACH;CACF;CAEA,MAAMC,sBACJ,QACA,oBAA8B,CAAC,GACU;EACzC,MAAM,gBAAgB,CACpB,GAAG,IAAI,IACL,CACE,GAAG,mBACH,GAAG,OAAO,QAAO,UAAS,MAAM,cAAc,OAAO,CAAC,CAAC,KAAI,UAAS,MAAM,OAAO,CACnF,CAAC,CAAC,OAAO,cAAc,CACzB,CACF,CAAC,CAAC,MAAM,GAAG,kBAAkB;EAC7B,IAAI,cAAc,WAAW,GAAG,OAAO,CAAC;EAMxC,MAAM,WAA2C,CAAC;EAClD,KAAK,MAAM,SAAS,QAAQ;GAC1B,IAAI,MAAM,cAAc,SAAS;GACjC,IAAI,CAAC,eAAe,MAAM,OAAO,GAAG;GACpC,IAAI,SAAS,MAAM,UAAU;GAC7B,MAAM,SAAS,uBAAuB,MAAM,QAAQ;GACpD,IAAI,CAAC,QAAQ,MAAM;GACnB,SAAS,MAAM,WAAW;IACxB,IAAI,MAAM;IACV,MAAM,OAAO;IACb,GAAI,OAAO,YAAY,EAAE,WAAW,OAAO,UAAU,IAAI,CAAC;GAC5D;EACF;EAEA,MAAM,aAAa,cAAc,QAAO,YAAW,CAAC,SAAS,QAAQ;EACrE,IAAI,WAAW,WAAW,KAAK,CAAC,KAAKH,QAAQ,OAAO;EAEpD,IAAI;GACF,MAAM,QAAQ,KAAKA,OAAO,WACtB,MAAM,KAAKA,OAAO,SAAS,UAAU,IACrC,MAAM,QAAQ,IAAI,WAAW,KAAI,YAAW,KAAKA,QAAQ,QAAQ,OAAO,KAAK,IAAI,CAAC;GACtF,KAAK,MAAM,CAAC,OAAO,SAAS,MAAM,QAAQ,GAAG;IAC3C,IAAI,CAAC,MAAM;IACX,MAAM,OAAO,KAAK,MAAM,KAAK,KAAK,KAAK,OAAO,KAAK,KAAK,KAAK;IAC7D,MAAM,UAAU,WAAW,UAAU,KAAK;IAC1C,SAAS,WAAW;KAClB,IAAI,KAAK;KACT;KACA,GAAI,KAAK,YAAY,EAAE,WAAW,KAAK,UAAU,IAAI,CAAC;IACxD;GACF;EACF,SAAS,KAAK;GACZ,QAAQ,KAAK,kDAAkD,EAC7D,OAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,EACxD,CAAC;EACH;EACA,OAAO;CACT;CAEA,SAAqB;EACnB,OAAO,CACL,iBAAiB,mCAAmC;GAClD,QAAQ;GACR,SAAS,OAAM,OAAM;IACnB,MAAM,IAAI,MAAM,EAAE;IAClB,MAAM,SAAS,MAAM,KAAKI,eAAe,CAAC;IAC1C,IAAI,cAAc,QAAQ,OAAO,OAAO;IAExC,MAAM,YAAY,EAAE,IAAI,MAAM,IAAI;IAClC,IAAI,CAAC,aAAa,CAAC,QAAQ,KAAK,SAAS,GAAG,OAAO,EAAE,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;IAC7F,MAAM,KAAKL,UAAU,YAAY;IAEjC,IAAI,CAAC,MADiB,KAAKA,UAAU,IAAI;KAAE,OAAO,OAAO;KAAO,IAAI;IAAU,CAAC,GACjE,OAAO,EAAE,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;IAE/D,MAAM,UAAU,6BAA6B,EAAE,IAAI,MAAM,YAAY,CAAC;IACtE,IAAI,SAAS,WAAW,GAAG,OAAO,EAAE,KAAK,EAAE,OAAO,qBAAqB,GAAG,GAAG;IAE7E,MAAM,OAAO,MAAM,KAAK,KAAK;KAC3B,OAAO,OAAO;KACd,kBAAkB;KAClB;KACA,SAAS,EAAE,IAAI,MAAM,OAAO,KAAK,KAAA;KACjC,QAAQ,EAAE,IAAI,MAAM,QAAQ,KAAK,KAAA;KACjC,OAAO,gBAAgB,EAAE,IAAI,MAAM,OAAO,CAAC;IAC7C,CAAC;IACD,MAAM,SAAS,MAAM,KAAKI,sBAAsB,KAAK,QAAQ,mBAAmB,EAAE,IAAI,MAAM,UAAU,CAAC,CAAC;IACxG,MAAM,OAAsB;KAC1B,QAAQ,KAAK,OAAO,IAAI,gBAAgB;KACxC;KACA,GAAI,KAAK,aAAa,EAAE,YAAY,KAAK,WAAW,IAAI,CAAC;IAC3D;IACA,OAAO,EAAE,KAAK,IAAI;GACpB;EACF,CAAC,CACH;CACF;CAEA,MAAMC,eAAe,GAAiF;EACpG,MAAM,KAAKP,MAAM,WAAW,CAAC;EAC7B,MAAM,SAAS,KAAKA,MAAM,OAAO,CAAC;EAClC,IAAI,CAAC,QAAQ,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,eAAe,GAAG,GAAG,EAAE;EACvE,IAAI,CAAC,OAAO,OACV,OAAO,EACL,UAAU,EAAE,KAAK;GAAE,OAAO;GAAyB,SAAS;EAA4C,GAAG,GAAG,EAChH;EAEF,OAAO;GAAE,OAAO,OAAO;GAAO,QAAQ,OAAO;EAAO;CACtD;AACF"}

package/dist/storage/domains/audit/wire.d.ts

@@ -0,0 +1,24 @@
+import type { AuditActorType } from './actors.js';
+import type { AuditEventRow, AuditTarget } from './base.js';
+export interface WireAuditActor {
+    id: string;
+    name: string;
+    avatarUrl?: string;
+}
+/** An `AuditEventRow` as the list route sends it: the date as ISO text, tenancy and request context left behind. */
+export interface WireAuditEvent {
+    id: string;
+    actorId: string;
+    actorType: AuditActorType;
+    action: string;
+    targets: AuditTarget[];
+    metadata: Record<string, unknown>;
+    occurredAt: string;
+}
+export interface WireAuditPage {
+    events: WireAuditEvent[];
+    actors: Record<string, WireAuditActor>;
+    nextCursor?: string;
+}
+export declare function toWireAuditEvent(row: AuditEventRow): WireAuditEvent;
+//# sourceMappingURL=wire.d.ts.map

package/dist/storage/domains/audit/wire.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wire.d.ts","sourceRoot":"","sources":["../../../../src/storage/domains/audit/wire.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,KAAK,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAE5D,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,oHAAoH;AACpH,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,cAAc,CAAC;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,WAAW,EAAE,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,cAAc,EAAE,CAAC;IACzB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IACvC,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,aAAa,GAAG,cAAc,CAUnE"}

package/dist/storage/domains/audit/wire.js

@@ -0,0 +1,16 @@
+//#region src/storage/domains/audit/wire.ts
+function toWireAuditEvent(row) {
+	return {
+		id: row.id,
+		actorId: row.actorId,
+		actorType: row.actorType,
+		action: row.action,
+		targets: row.targets,
+		metadata: row.metadata,
+		occurredAt: row.occurredAt.toISOString()
+	};
+}
+//#endregion
+export { toWireAuditEvent };
+
+//# sourceMappingURL=wire.js.map

package/dist/storage/domains/audit/wire.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wire.js","names":[],"sources":["../../../../src/storage/domains/audit/wire.ts"],"sourcesContent":["import type { AuditActorType } from './actors.js';\nimport type { AuditEventRow, AuditTarget } from './base.js';\n\nexport interface WireAuditActor {\n  id: string;\n  name: string;\n  avatarUrl?: string;\n}\n\n/** An `AuditEventRow` as the list route sends it: the date as ISO text, tenancy and request context left behind. */\nexport interface WireAuditEvent {\n  id: string;\n  actorId: string;\n  actorType: AuditActorType;\n  action: string;\n  targets: AuditTarget[];\n  metadata: Record<string, unknown>;\n  occurredAt: string;\n}\n\nexport interface WireAuditPage {\n  events: WireAuditEvent[];\n  actors: Record<string, WireAuditActor>;\n  nextCursor?: string;\n}\n\nexport function toWireAuditEvent(row: AuditEventRow): WireAuditEvent {\n  return {\n    id: row.id,\n    actorId: row.actorId,\n    actorType: row.actorType,\n    action: row.action,\n    targets: row.targets,\n    metadata: row.metadata,\n    occurredAt: row.occurredAt.toISOString(),\n  };\n}\n"],"mappings":";AA0BA,SAAgB,iBAAiB,KAAoC;CACnE,OAAO;EACL,IAAI,IAAI;EACR,SAAS,IAAI;EACb,WAAW,IAAI;EACf,QAAQ,IAAI;EACZ,SAAS,IAAI;EACb,UAAU,IAAI;EACd,YAAY,IAAI,WAAW,YAAY;CACzC;AACF"}

package/dist/storage/domains/channel-identity/base.d.ts

@@ -0,0 +1,100 @@
+import { FactoryStorageDomain } from '@mastra/core/storage';
+import type { CollectionSchema } from '@mastra/core/storage';
+/**
+ * A reverse index from a platform sender identity to a Mastra tenant.
+ *
+ * Inbound channel events (a Slack DM, a Discord mention, ...) carry only the
+ * platform-side sender ids — there is no Mastra `(orgId, userId)` on the event.
+ * Model credentials, however, resolve **per-tenant**, so a channel run cannot
+ * load the sender's stored model credentials until we know which tenant the
+ * sender is. This domain holds that mapping: an authenticated web user links
+ * their platform account, and the dispatch seam reads it back to stamp the
+ * tenant onto the run's request context.
+ *
+ * One row per `(platform, external_team_id, external_user_id)` — the same
+ * platform user in two workspaces (two team ids) is two independent links, so
+ * multi-workspace falls out of the key. `platform` is generic (`'slack'` today,
+ * reusable for Discord/Telegram later). The `external_` prefix disambiguates
+ * the platform-side ids from the tenant ids (`org_id` / `user_id`) that cohabit
+ * the row.
+ */
+export interface ChannelAccountLink {
+    /** Undefined for personal accounts (no organization). */
+    orgId?: string;
+    userId: string;
+    /**
+     * Which Factory project this sender's channel runs route to. Unset until
+     * the user picks one (or the dispatch path auto-stamps their only factory).
+     */
+    defaultFactoryProjectId?: string;
+    linkedAt: Date;
+}
+/** The reverse-lookup key: a platform sender identity. */
+export interface ChannelAccountLinkKey {
+    platform: string;
+    externalTeamId: string;
+    externalUserId: string;
+}
+/**
+ * Human-readable labels for a linked identity, captured at link time (e.g.
+ * from Slack OIDC id_token claims). Display-only — never part of the key.
+ */
+export interface ChannelAccountLinkNames {
+    externalTeamName?: string;
+    externalUserName?: string;
+}
+export declare const CHANNEL_ACCOUNT_LINKS_SCHEMA: CollectionSchema;
+/** A link row with its platform sender key, as listed for a tenant user. */
+export interface ChannelAccountLinkEntry extends ChannelAccountLink, ChannelAccountLinkKey, ChannelAccountLinkNames {
+}
+export declare class ChannelIdentityStorage extends FactoryStorageDomain {
+    #private;
+    constructor();
+    init(): Promise<void>;
+    dangerouslyClearAll(): Promise<void>;
+    /**
+     * Bind a platform sender identity to a Mastra tenant. Last-write-wins: a
+     * re-link (e.g. the same Slack user connecting a different tenant) replaces
+     * the stored tenant and refreshes `linkedAt`.
+     */
+    saveAccountLink({ platform, externalTeamId, externalUserId, orgId, userId, externalTeamName, externalUserName, }: ChannelAccountLinkKey & ChannelAccountLinkNames & {
+        orgId?: string;
+        userId: string;
+    }): Promise<ChannelAccountLink>;
+    /**
+     * Set (or clear, with `null`) which Factory project a link's channel runs
+     * route to. The `userId` guard makes this self-service only — a caller can
+     * never repoint another tenant's link. Returns whether a row was updated.
+     *
+     * Note: `saveAccountLink` deliberately omits this column from its upsert
+     * row, so a re-link keeps the stored default.
+     */
+    setDefaultFactory({ platform, externalTeamId, externalUserId, userId, factoryProjectId, }: ChannelAccountLinkKey & {
+        userId: string;
+        factoryProjectId: string | null;
+    }): Promise<boolean>;
+    /** Resolve the tenant a platform sender is linked to, or `null` if unlinked. */
+    getAccountLink({ platform, externalTeamId, externalUserId, }: ChannelAccountLinkKey): Promise<ChannelAccountLink | null>;
+    /** Remove a platform sender's link. Returns whether a row was deleted. */
+    deleteAccountLink({ platform, externalTeamId, externalUserId }: ChannelAccountLinkKey): Promise<boolean>;
+    /**
+     * All platform identities linked to a tenant user, for the "Connected
+     * accounts" settings surface. Keyed by the tenant `userId` alone — a link
+     * belongs to the person, and their personal/org context at link time does
+     * not change who may see or sever it.
+     */
+    listAccountLinksForUser(userId: string): Promise<ChannelAccountLinkEntry[]>;
+    /** All links bound to an organization, for the mention-roster fallback. */
+    listAccountLinksForOrg(orgId: string, { limit }?: {
+        limit?: number;
+    }): Promise<ChannelAccountLinkEntry[]>;
+    /**
+     * Remove one of the tenant user's own links, addressed by its sender key.
+     * The `userId` guard makes the delete self-service only: a caller can never
+     * sever another tenant's link even with a known sender key.
+     */
+    deleteAccountLinkForUser({ userId, platform, externalTeamId, externalUserId, }: ChannelAccountLinkKey & {
+        userId: string;
+    }): Promise<boolean>;
+}
+//# sourceMappingURL=base.d.ts.map

package/dist/storage/domains/channel-identity/base.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"base.d.ts","sourceRoot":"","sources":["../../../../src/storage/domains/channel-identity/base.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,KAAK,EAAE,gBAAgB,EAAqB,MAAM,sBAAsB,CAAC;AAEhF;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,WAAW,kBAAkB;IACjC,yDAAyD;IACzD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf;;;OAGG;IACH,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,EAAE,IAAI,CAAC;CAChB;AAED,0DAA0D;AAC1D,MAAM,WAAW,qBAAqB;IACpC,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED;;;GAGG;AACH,MAAM,WAAW,uBAAuB;IACtC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,eAAO,MAAM,4BAA4B,EAAE,gBA0B1C,CAAC;AAwBF,4EAA4E;AAC5E,MAAM,WAAW,uBAAwB,SAAQ,kBAAkB,EAAE,qBAAqB,EAAE,uBAAuB;CAAG;AAatH,qBAAa,sBAAuB,SAAQ,oBAAoB;;;IAKxD,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAIrB,mBAAmB,IAAI,OAAO,CAAC,IAAI,CAAC;IAQ1C;;;;OAIG;IACG,eAAe,CAAC,EACpB,QAAQ,EACR,cAAc,EACd,cAAc,EACd,KAAK,EACL,MAAM,EACN,gBAAgB,EAChB,gBAAgB,GACjB,EAAE,qBAAqB,GACtB,uBAAuB,GAAG;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAkB5F;;;;;;;OAOG;IACG,iBAAiB,CAAC,EACtB,QAAQ,EACR,cAAc,EACd,cAAc,EACd,MAAM,EACN,gBAAgB,GACjB,EAAE,qBAAqB,GAAG;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC;IAcjG,gFAAgF;IAC1E,cAAc,CAAC,EACnB,QAAQ,EACR,cAAc,EACd,cAAc,GACf,EAAE,qBAAqB,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;IAS7D,0EAA0E;IACpE,iBAAiB,CAAC,EAAE,QAAQ,EAAE,cAAc,EAAE,cAAc,EAAE,EAAE,qBAAqB,GAAG,OAAO,CAAC,OAAO,CAAC;IAS9G;;;;;OAKG;IACG,uBAAuB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,uBAAuB,EAAE,CAAC;IAKjF,2EAA2E;IACrE,sBAAsB,CAC1B,KAAK,EAAE,MAAM,EACb,EAAE,KAAW,EAAE,GAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAA;KAAO,GACvC,OAAO,CAAC,uBAAuB,EAAE,CAAC;IAerC;;;;OAIG;IACG,wBAAwB,CAAC,EAC7B,MAAM,EACN,QAAQ,EACR,cAAc,EACd,cAAc,GACf,EAAE,qBAAqB,GAAG;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC;CASjE"}

package/dist/storage/domains/channel-identity/base.js

@@ -0,0 +1,164 @@
+import { FactoryStorageDomain } from "@mastra/core/storage";
+//#region src/storage/domains/channel-identity/base.ts
+const CHANNEL_ACCOUNT_LINKS_SCHEMA = {
+	name: "channel_account_links",
+	columns: {
+		id: { type: "uuid-pk" },
+		platform: { type: "text" },
+		external_team_id: { type: "text" },
+		external_user_id: { type: "text" },
+		org_id: {
+			type: "text",
+			nullable: true
+		},
+		user_id: { type: "text" },
+		external_team_name: {
+			type: "text",
+			nullable: true
+		},
+		external_user_name: {
+			type: "text",
+			nullable: true
+		},
+		default_factory_project_id: {
+			type: "text",
+			nullable: true
+		},
+		linked_at: { type: "timestamp" }
+	},
+	uniqueIndexes: [{
+		name: "channel_account_links_sender_key",
+		columns: [
+			"platform",
+			"external_team_id",
+			"external_user_id"
+		]
+	}],
+	indexes: [{
+		name: "channel_account_links_org_linked_at_id_idx",
+		columns: [
+			"org_id",
+			"linked_at",
+			"id"
+		]
+	}]
+};
+function toLink(row) {
+	return {
+		...row.org_id ? { orgId: row.org_id } : {},
+		userId: row.user_id,
+		...row.default_factory_project_id ? { defaultFactoryProjectId: row.default_factory_project_id } : {},
+		linkedAt: row.linked_at
+	};
+}
+function toEntry(row) {
+	return {
+		...toLink(row),
+		platform: row.platform,
+		externalTeamId: row.external_team_id,
+		externalUserId: row.external_user_id,
+		...row.external_team_name ? { externalTeamName: row.external_team_name } : {},
+		...row.external_user_name ? { externalUserName: row.external_user_name } : {}
+	};
+}
+var ChannelIdentityStorage = class extends FactoryStorageDomain {
+	constructor() {
+		super("channel-identity");
+	}
+	async init() {
+		await this.ensureCollections([CHANNEL_ACCOUNT_LINKS_SCHEMA]);
+	}
+	async dangerouslyClearAll() {
+		await this.ops.deleteMany("channel_account_links", {});
+	}
+	get #db() {
+		return this.ops;
+	}
+	/**
+	* Bind a platform sender identity to a Mastra tenant. Last-write-wins: a
+	* re-link (e.g. the same Slack user connecting a different tenant) replaces
+	* the stored tenant and refreshes `linkedAt`.
+	*/
+	async saveAccountLink({ platform, externalTeamId, externalUserId, orgId, userId, externalTeamName, externalUserName }) {
+		return toLink(await this.#db.upsertOne("channel_account_links", [
+			"platform",
+			"external_team_id",
+			"external_user_id"
+		], {
+			platform,
+			external_team_id: externalTeamId,
+			external_user_id: externalUserId,
+			org_id: orgId ?? null,
+			user_id: userId,
+			external_team_name: externalTeamName ?? null,
+			external_user_name: externalUserName ?? null,
+			linked_at: /* @__PURE__ */ new Date()
+		}));
+	}
+	/**
+	* Set (or clear, with `null`) which Factory project a link's channel runs
+	* route to. The `userId` guard makes this self-service only — a caller can
+	* never repoint another tenant's link. Returns whether a row was updated.
+	*
+	* Note: `saveAccountLink` deliberately omits this column from its upsert
+	* row, so a re-link keeps the stored default.
+	*/
+	async setDefaultFactory({ platform, externalTeamId, externalUserId, userId, factoryProjectId }) {
+		return await this.#db.updateMany("channel_account_links", {
+			user_id: userId,
+			platform,
+			external_team_id: externalTeamId,
+			external_user_id: externalUserId
+		}, { default_factory_project_id: factoryProjectId }) > 0;
+	}
+	/** Resolve the tenant a platform sender is linked to, or `null` if unlinked. */
+	async getAccountLink({ platform, externalTeamId, externalUserId }) {
+		const row = await this.#db.findOne("channel_account_links", {
+			platform,
+			external_team_id: externalTeamId,
+			external_user_id: externalUserId
+		});
+		return row ? toLink(row) : null;
+	}
+	/** Remove a platform sender's link. Returns whether a row was deleted. */
+	async deleteAccountLink({ platform, externalTeamId, externalUserId }) {
+		return await this.#db.deleteMany("channel_account_links", {
+			platform,
+			external_team_id: externalTeamId,
+			external_user_id: externalUserId
+		}) > 0;
+	}
+	/**
+	* All platform identities linked to a tenant user, for the "Connected
+	* accounts" settings surface. Keyed by the tenant `userId` alone — a link
+	* belongs to the person, and their personal/org context at link time does
+	* not change who may see or sever it.
+	*/
+	async listAccountLinksForUser(userId) {
+		return (await this.#db.findMany("channel_account_links", { user_id: userId })).map(toEntry);
+	}
+	/** All links bound to an organization, for the mention-roster fallback. */
+	async listAccountLinksForOrg(orgId, { limit = 200 } = {}) {
+		return (await this.#db.findMany("channel_account_links", { org_id: orgId }, {
+			orderBy: [["linked_at", "desc"], ["id", "desc"]],
+			limit
+		})).map(toEntry);
+	}
+	/**
+	* Remove one of the tenant user's own links, addressed by its sender key.
+	* The `userId` guard makes the delete self-service only: a caller can never
+	* sever another tenant's link even with a known sender key.
+	*/
+	async deleteAccountLinkForUser({ userId, platform, externalTeamId, externalUserId }) {
+		return await this.#db.deleteMany("channel_account_links", {
+			user_id: userId,
+			platform,
+			external_team_id: externalTeamId,
+			external_user_id: externalUserId
+		}) > 0;
+	}
+};
+//#endregion
+export { CHANNEL_ACCOUNT_LINKS_SCHEMA, ChannelIdentityStorage };
+
+//# sourceMappingURL=base.js.map

package/dist/storage/domains/channel-identity/base.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"base.js","names":["#db"],"sources":["../../../../src/storage/domains/channel-identity/base.ts"],"sourcesContent":["import { FactoryStorageDomain } from '@mastra/core/storage';\nimport type { CollectionSchema, FactoryStorageOps } from '@mastra/core/storage';\n\n/**\n * A reverse index from a platform sender identity to a Mastra tenant.\n *\n * Inbound channel events (a Slack DM, a Discord mention, ...) carry only the\n * platform-side sender ids — there is no Mastra `(orgId, userId)` on the event.\n * Model credentials, however, resolve **per-tenant**, so a channel run cannot\n * load the sender's stored model credentials until we know which tenant the\n * sender is. This domain holds that mapping: an authenticated web user links\n * their platform account, and the dispatch seam reads it back to stamp the\n * tenant onto the run's request context.\n *\n * One row per `(platform, external_team_id, external_user_id)` — the same\n * platform user in two workspaces (two team ids) is two independent links, so\n * multi-workspace falls out of the key. `platform` is generic (`'slack'` today,\n * reusable for Discord/Telegram later). The `external_` prefix disambiguates\n * the platform-side ids from the tenant ids (`org_id` / `user_id`) that cohabit\n * the row.\n */\nexport interface ChannelAccountLink {\n  /** Undefined for personal accounts (no organization). */\n  orgId?: string;\n  userId: string;\n  /**\n   * Which Factory project this sender's channel runs route to. Unset until\n   * the user picks one (or the dispatch path auto-stamps their only factory).\n   */\n  defaultFactoryProjectId?: string;\n  linkedAt: Date;\n}\n\n/** The reverse-lookup key: a platform sender identity. */\nexport interface ChannelAccountLinkKey {\n  platform: string;\n  externalTeamId: string;\n  externalUserId: string;\n}\n\n/**\n * Human-readable labels for a linked identity, captured at link time (e.g.\n * from Slack OIDC id_token claims). Display-only — never part of the key.\n */\nexport interface ChannelAccountLinkNames {\n  externalTeamName?: string;\n  externalUserName?: string;\n}\n\nexport const CHANNEL_ACCOUNT_LINKS_SCHEMA: CollectionSchema = {\n  name: 'channel_account_links',\n  columns: {\n    id: { type: 'uuid-pk' },\n    platform: { type: 'text' },\n    external_team_id: { type: 'text' },\n    external_user_id: { type: 'text' },\n    org_id: { type: 'text', nullable: true },\n    user_id: { type: 'text' },\n    external_team_name: { type: 'text', nullable: true },\n    external_user_name: { type: 'text', nullable: true },\n    default_factory_project_id: { type: 'text', nullable: true },\n    linked_at: { type: 'timestamp' },\n  },\n  uniqueIndexes: [\n    {\n      name: 'channel_account_links_sender_key',\n      columns: ['platform', 'external_team_id', 'external_user_id'],\n    },\n  ],\n  indexes: [\n    {\n      name: 'channel_account_links_org_linked_at_id_idx',\n      columns: ['org_id', 'linked_at', 'id'],\n    },\n  ],\n};\n\ninterface ChannelAccountLinkDbRow extends Record<string, unknown> {\n  id: string;\n  platform: string;\n  external_team_id: string;\n  external_user_id: string;\n  org_id: string | null;\n  user_id: string;\n  external_team_name: string | null;\n  external_user_name: string | null;\n  default_factory_project_id: string | null;\n  linked_at: Date;\n}\n\nfunction toLink(row: ChannelAccountLinkDbRow): ChannelAccountLink {\n  return {\n    ...(row.org_id ? { orgId: row.org_id } : {}),\n    userId: row.user_id,\n    ...(row.default_factory_project_id ? { defaultFactoryProjectId: row.default_factory_project_id } : {}),\n    linkedAt: row.linked_at,\n  };\n}\n\n/** A link row with its platform sender key, as listed for a tenant user. */\nexport interface ChannelAccountLinkEntry extends ChannelAccountLink, ChannelAccountLinkKey, ChannelAccountLinkNames {}\n\nfunction toEntry(row: ChannelAccountLinkDbRow): ChannelAccountLinkEntry {\n  return {\n    ...toLink(row),\n    platform: row.platform,\n    externalTeamId: row.external_team_id,\n    externalUserId: row.external_user_id,\n    ...(row.external_team_name ? { externalTeamName: row.external_team_name } : {}),\n    ...(row.external_user_name ? { externalUserName: row.external_user_name } : {}),\n  };\n}\n\nexport class ChannelIdentityStorage extends FactoryStorageDomain {\n  constructor() {\n    super('channel-identity');\n  }\n\n  async init(): Promise<void> {\n    await this.ensureCollections([CHANNEL_ACCOUNT_LINKS_SCHEMA]);\n  }\n\n  async dangerouslyClearAll(): Promise<void> {\n    await this.ops.deleteMany('channel_account_links', {});\n  }\n\n  get #db(): FactoryStorageOps {\n    return this.ops;\n  }\n\n  /**\n   * Bind a platform sender identity to a Mastra tenant. Last-write-wins: a\n   * re-link (e.g. the same Slack user connecting a different tenant) replaces\n   * the stored tenant and refreshes `linkedAt`.\n   */\n  async saveAccountLink({\n    platform,\n    externalTeamId,\n    externalUserId,\n    orgId,\n    userId,\n    externalTeamName,\n    externalUserName,\n  }: ChannelAccountLinkKey &\n    ChannelAccountLinkNames & { orgId?: string; userId: string }): Promise<ChannelAccountLink> {\n    const row = await this.#db.upsertOne<ChannelAccountLinkDbRow>(\n      'channel_account_links',\n      ['platform', 'external_team_id', 'external_user_id'],\n      {\n        platform,\n        external_team_id: externalTeamId,\n        external_user_id: externalUserId,\n        org_id: orgId ?? null,\n        user_id: userId,\n        external_team_name: externalTeamName ?? null,\n        external_user_name: externalUserName ?? null,\n        linked_at: new Date(),\n      },\n    );\n    return toLink(row);\n  }\n\n  /**\n   * Set (or clear, with `null`) which Factory project a link's channel runs\n   * route to. The `userId` guard makes this self-service only — a caller can\n   * never repoint another tenant's link. Returns whether a row was updated.\n   *\n   * Note: `saveAccountLink` deliberately omits this column from its upsert\n   * row, so a re-link keeps the stored default.\n   */\n  async setDefaultFactory({\n    platform,\n    externalTeamId,\n    externalUserId,\n    userId,\n    factoryProjectId,\n  }: ChannelAccountLinkKey & { userId: string; factoryProjectId: string | null }): Promise<boolean> {\n    const updated = await this.#db.updateMany(\n      'channel_account_links',\n      {\n        user_id: userId,\n        platform,\n        external_team_id: externalTeamId,\n        external_user_id: externalUserId,\n      },\n      { default_factory_project_id: factoryProjectId },\n    );\n    return updated > 0;\n  }\n\n  /** Resolve the tenant a platform sender is linked to, or `null` if unlinked. */\n  async getAccountLink({\n    platform,\n    externalTeamId,\n    externalUserId,\n  }: ChannelAccountLinkKey): Promise<ChannelAccountLink | null> {\n    const row = await this.#db.findOne<ChannelAccountLinkDbRow>('channel_account_links', {\n      platform,\n      external_team_id: externalTeamId,\n      external_user_id: externalUserId,\n    });\n    return row ? toLink(row) : null;\n  }\n\n  /** Remove a platform sender's link. Returns whether a row was deleted. */\n  async deleteAccountLink({ platform, externalTeamId, externalUserId }: ChannelAccountLinkKey): Promise<boolean> {\n    const deleted = await this.#db.deleteMany('channel_account_links', {\n      platform,\n      external_team_id: externalTeamId,\n      external_user_id: externalUserId,\n    });\n    return deleted > 0;\n  }\n\n  /**\n   * All platform identities linked to a tenant user, for the \"Connected\n   * accounts\" settings surface. Keyed by the tenant `userId` alone — a link\n   * belongs to the person, and their personal/org context at link time does\n   * not change who may see or sever it.\n   */\n  async listAccountLinksForUser(userId: string): Promise<ChannelAccountLinkEntry[]> {\n    const rows = await this.#db.findMany<ChannelAccountLinkDbRow>('channel_account_links', { user_id: userId });\n    return rows.map(toEntry);\n  }\n\n  /** All links bound to an organization, for the mention-roster fallback. */\n  async listAccountLinksForOrg(\n    orgId: string,\n    { limit = 200 }: { limit?: number } = {},\n  ): Promise<ChannelAccountLinkEntry[]> {\n    const rows = await this.#db.findMany<ChannelAccountLinkDbRow>(\n      'channel_account_links',\n      { org_id: orgId },\n      {\n        orderBy: [\n          ['linked_at', 'desc'],\n          ['id', 'desc'],\n        ],\n        limit,\n      },\n    );\n    return rows.map(toEntry);\n  }\n\n  /**\n   * Remove one of the tenant user's own links, addressed by its sender key.\n   * The `userId` guard makes the delete self-service only: a caller can never\n   * sever another tenant's link even with a known sender key.\n   */\n  async deleteAccountLinkForUser({\n    userId,\n    platform,\n    externalTeamId,\n    externalUserId,\n  }: ChannelAccountLinkKey & { userId: string }): Promise<boolean> {\n    const deleted = await this.#db.deleteMany('channel_account_links', {\n      user_id: userId,\n      platform,\n      external_team_id: externalTeamId,\n      external_user_id: externalUserId,\n    });\n    return deleted > 0;\n  }\n}\n"],"mappings":";;AAiDA,MAAa,+BAAiD;CAC5D,MAAM;CACN,SAAS;EACP,IAAI,EAAE,MAAM,UAAU;EACtB,UAAU,EAAE,MAAM,OAAO;EACzB,kBAAkB,EAAE,MAAM,OAAO;EACjC,kBAAkB,EAAE,MAAM,OAAO;EACjC,QAAQ;GAAE,MAAM;GAAQ,UAAU;EAAK;EACvC,SAAS,EAAE,MAAM,OAAO;EACxB,oBAAoB;GAAE,MAAM;GAAQ,UAAU;EAAK;EACnD,oBAAoB;GAAE,MAAM;GAAQ,UAAU;EAAK;EACnD,4BAA4B;GAAE,MAAM;GAAQ,UAAU;EAAK;EAC3D,WAAW,EAAE,MAAM,YAAY;CACjC;CACA,eAAe,CACb;EACE,MAAM;EACN,SAAS;GAAC;GAAY;GAAoB;EAAkB;CAC9D,CACF;CACA,SAAS,CACP;EACE,MAAM;EACN,SAAS;GAAC;GAAU;GAAa;EAAI;CACvC,CACF;AACF;AAeA,SAAS,OAAO,KAAkD;CAChE,OAAO;EACL,GAAI,IAAI,SAAS,EAAE,OAAO,IAAI,OAAO,IAAI,CAAC;EAC1C,QAAQ,IAAI;EACZ,GAAI,IAAI,6BAA6B,EAAE,yBAAyB,IAAI,2BAA2B,IAAI,CAAC;EACpG,UAAU,IAAI;CAChB;AACF;AAKA,SAAS,QAAQ,KAAuD;CACtE,OAAO;EACL,GAAG,OAAO,GAAG;EACb,UAAU,IAAI;EACd,gBAAgB,IAAI;EACpB,gBAAgB,IAAI;EACpB,GAAI,IAAI,qBAAqB,EAAE,kBAAkB,IAAI,mBAAmB,IAAI,CAAC;EAC7E,GAAI,IAAI,qBAAqB,EAAE,kBAAkB,IAAI,mBAAmB,IAAI,CAAC;CAC/E;AACF;AAEA,IAAa,yBAAb,cAA4C,qBAAqB;CAC/D,cAAc;EACZ,MAAM,kBAAkB;CAC1B;CAEA,MAAM,OAAsB;EAC1B,MAAM,KAAK,kBAAkB,CAAC,4BAA4B,CAAC;CAC7D;CAEA,MAAM,sBAAqC;EACzC,MAAM,KAAK,IAAI,WAAW,yBAAyB,CAAC,CAAC;CACvD;CAEA,IAAIA,MAAyB;EAC3B,OAAO,KAAK;CACd;;;;;;CAOA,MAAM,gBAAgB,EACpB,UACA,gBACA,gBACA,OACA,QACA,kBACA,oBAE2F;EAe3F,OAAO,OAAO,MAdI,KAAKA,IAAI,UACzB,yBACA;GAAC;GAAY;GAAoB;EAAkB,GACnD;GACE;GACA,kBAAkB;GAClB,kBAAkB;GAClB,QAAQ,SAAS;GACjB,SAAS;GACT,oBAAoB,oBAAoB;GACxC,oBAAoB,oBAAoB;GACxC,2BAAW,IAAI,KAAK;EACtB,CACF,CACiB;CACnB;;;;;;;;;CAUA,MAAM,kBAAkB,EACtB,UACA,gBACA,gBACA,QACA,oBACgG;EAWhG,OAAO,MAVe,KAAKA,IAAI,WAC7B,yBACA;GACE,SAAS;GACT;GACA,kBAAkB;GAClB,kBAAkB;EACpB,GACA,EAAE,4BAA4B,iBAAiB,CACjD,IACiB;CACnB;;CAGA,MAAM,eAAe,EACnB,UACA,gBACA,kBAC4D;EAC5D,MAAM,MAAM,MAAM,KAAKA,IAAI,QAAiC,yBAAyB;GACnF;GACA,kBAAkB;GAClB,kBAAkB;EACpB,CAAC;EACD,OAAO,MAAM,OAAO,GAAG,IAAI;CAC7B;;CAGA,MAAM,kBAAkB,EAAE,UAAU,gBAAgB,kBAA2D;EAM7G,OAAO,MALe,KAAKA,IAAI,WAAW,yBAAyB;GACjE;GACA,kBAAkB;GAClB,kBAAkB;EACpB,CAAC,IACgB;CACnB;;;;;;;CAQA,MAAM,wBAAwB,QAAoD;EAEhF,QAAO,MADY,KAAKA,IAAI,SAAkC,yBAAyB,EAAE,SAAS,OAAO,CAAC,EAAA,CAC9F,IAAI,OAAO;CACzB;;CAGA,MAAM,uBACJ,OACA,EAAE,QAAQ,QAA4B,CAAC,GACH;EAYpC,QAAO,MAXY,KAAKA,IAAI,SAC1B,yBACA,EAAE,QAAQ,MAAM,GAChB;GACE,SAAS,CACP,CAAC,aAAa,MAAM,GACpB,CAAC,MAAM,MAAM,CACf;GACA;EACF,CACF,EAAA,CACY,IAAI,OAAO;CACzB;;;;;;CAOA,MAAM,yBAAyB,EAC7B,QACA,UACA,gBACA,kBAC+D;EAO/D,OAAO,MANe,KAAKA,IAAI,WAAW,yBAAyB;GACjE,SAAS;GACT;GACA,kBAAkB;GAClB,kBAAkB;EACpB,CAAC,IACgB;CACnB;AACF"}