@mastra/factory 0.0.0-aggregate-trace-20261015182851

package/dist/integrations/github/provenance.js

@@ -0,0 +1,91 @@
+import { cardBelongsToRepository } from "./rules.js";
+import { parseCreatedPullRequest } from "./session-subscriptions.js";
+//#region src/integrations/github/provenance.ts
+async function resolveFactoryPullRequestParentWorkItemId(integrationStorage, input) {
+	const targetKey = `factory-pr-provenance:${input.repositoryId}:${input.pullRequestNumber}`;
+	return (await integrationStorage.subscriptions.listByTarget(targetKey, { status: "active" })).find((row) => row.orgId === input.orgId && row.data?.kind === "factory-pr-provenance" && row.data.factoryProjectId === input.factoryProjectId)?.data?.workItemId ?? null;
+}
+async function recordFactoryPullRequestProvenance(github, sourceControl, integrationStorage, workItems, input) {
+	if (input.status !== "success" || input.item.externalSource?.type === "pull-request") return;
+	const url = parseCreatedPullRequest({
+		toolName: input.toolName,
+		input: input.toolInput,
+		output: input.toolResult
+	});
+	if (!url) return;
+	try {
+		const match = url.match(/^https:\/\/github\.com\/([^/]+\/[^/]+)\/pull\/(\d+)\/?$/i);
+		if (!match) return;
+		const repositorySlug = match[1];
+		let repositoryId;
+		let installationId;
+		for (const connection of await sourceControl.connections.list({
+			orgId: input.binding.orgId,
+			factoryProjectId: input.binding.factoryProjectId
+		})) {
+			const installation = await sourceControl.installations.get({
+				orgId: input.binding.orgId,
+				id: connection.installationId
+			});
+			if (!installation) continue;
+			for (const link of await sourceControl.projectRepositories.list({
+				orgId: input.binding.orgId,
+				connectionId: connection.id
+			})) {
+				const repository = await sourceControl.repositories.get({
+					orgId: input.binding.orgId,
+					id: link.repositoryId
+				});
+				if (!repository || repository.slug.toLowerCase() !== repositorySlug.toLowerCase()) continue;
+				repositoryId = Number(repository.externalId);
+				installationId = Number(installation.externalId);
+				break;
+			}
+			if (repositoryId !== void 0) break;
+		}
+		const pullRequestNumber = Number(match[2]);
+		const [owner, repo] = repositorySlug.split("/");
+		if (!owner || !repo || repositoryId === void 0 || installationId === void 0 || !Number.isInteger(repositoryId) || !Number.isInteger(installationId) || !Number.isInteger(pullRequestNumber) || pullRequestNumber < 1) return;
+		const targetKey = `factory-pr-provenance:${repositoryId}:${pullRequestNumber}`;
+		if ((await integrationStorage.subscriptions.listByTarget(targetKey)).some((row) => row.orgId === input.binding.orgId && row.data?.factoryProjectId === input.binding.factoryProjectId)) return;
+		const { data } = await github.getInstallationOctokit(installationId).pulls.get({
+			owner,
+			repo,
+			pull_number: pullRequestNumber
+		});
+		if (data.base.repo.id !== repositoryId || data.number !== pullRequestNumber || data.html_url !== url) return;
+		await integrationStorage.subscriptions.create({
+			orgId: input.binding.orgId,
+			targetKey,
+			threadId: input.binding.threadId,
+			status: "active",
+			data: {
+				kind: "factory-pr-provenance",
+				bindingId: input.binding.id,
+				workItemId: input.item.id,
+				factoryProjectId: input.binding.factoryProjectId,
+				repositoryId,
+				pullRequestNumber,
+				pullRequestUrl: url,
+				assistantMessageId: input.assistantMessageId,
+				toolCallId: input.toolCallId
+			}
+		});
+		const reviewItem = (await workItems.list({
+			orgId: input.binding.orgId,
+			factoryProjectId: input.binding.factoryProjectId
+		})).find((item) => item.externalSource?.integrationId === "github" && item.externalSource.type === "pull-request" && (item.externalSource.externalId === `github:${repositoryId}:pull-request:${pullRequestNumber}` || item.externalSource.externalId === `github-pr:${pullRequestNumber}` && cardBelongsToRepository(item, repositoryId, repositorySlug)));
+		if (reviewItem) await workItems.setParentWorkItemIfMissing({
+			orgId: input.binding.orgId,
+			id: reviewItem.id,
+			userId: "factory-pr-provenance",
+			parentWorkItemId: input.item.id
+		});
+	} catch {
+		return;
+	}
+}
+//#endregion
+export { recordFactoryPullRequestProvenance, resolveFactoryPullRequestParentWorkItemId };
+
+//# sourceMappingURL=provenance.js.map

package/dist/integrations/github/provenance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provenance.js","names":[],"sources":["../../../src/integrations/github/provenance.ts"],"sourcesContent":["import type { FactoryRuleJsonValue } from '../../rules/types.js';\nimport type { IntegrationStorageHandle } from '../../storage/domains/integrations/base.js';\nimport type { SourceControlStorageHandle } from '../../storage/domains/source-control/base.js';\nimport type { FactoryRunBindingRecord, WorkItemRow, WorkItemsStorage } from '../../storage/domains/work-items/base.js';\nimport type { GithubIntegration } from './integration.js';\nimport { cardBelongsToRepository } from './rules.js';\nimport { parseCreatedPullRequest } from './session-subscriptions.js';\n\nexport interface RecordFactoryPullRequestProvenanceInput {\n  binding: FactoryRunBindingRecord;\n  item: WorkItemRow;\n  assistantMessageId: string;\n  toolCallId: string;\n  toolName: string;\n  toolInput: FactoryRuleJsonValue;\n  toolResult: FactoryRuleJsonValue;\n  status: 'success' | 'error';\n}\n\nexport interface FactoryPullRequestProvenanceData {\n  kind: 'factory-pr-provenance';\n  bindingId: string;\n  workItemId: string;\n  factoryProjectId: string;\n  repositoryId: number;\n  pullRequestNumber: number;\n  pullRequestUrl: string;\n  assistantMessageId: string;\n  toolCallId: string;\n}\n\nexport async function resolveFactoryPullRequestParentWorkItemId(\n  integrationStorage: IntegrationStorageHandle<\n    Record<string, unknown>,\n    Record<string, unknown>,\n    FactoryPullRequestProvenanceData\n  >,\n  input: { orgId: string; factoryProjectId: string; repositoryId: number; pullRequestNumber: number },\n): Promise<string | null> {\n  const targetKey = `factory-pr-provenance:${input.repositoryId}:${input.pullRequestNumber}`;\n  // Provenance is scoped to the Factory project whose run authored the PR.\n  // Rows from a sibling project in the same org — or legacy rows without the\n  // project stamp — fail closed rather than linking another project's card.\n  const provenance = (await integrationStorage.subscriptions.listByTarget(targetKey, { status: 'active' })).find(\n    row =>\n      row.orgId === input.orgId &&\n      row.data?.kind === 'factory-pr-provenance' &&\n      row.data.factoryProjectId === input.factoryProjectId,\n  );\n  return provenance?.data?.workItemId ?? null;\n}\n\nexport async function recordFactoryPullRequestProvenance(\n  github: GithubIntegration,\n  sourceControl: SourceControlStorageHandle,\n  integrationStorage: IntegrationStorageHandle<\n    Record<string, unknown>,\n    Record<string, unknown>,\n    FactoryPullRequestProvenanceData\n  >,\n  workItems: WorkItemsStorage,\n  input: RecordFactoryPullRequestProvenanceInput,\n): Promise<void> {\n  if (input.status !== 'success' || input.item.externalSource?.type === 'pull-request') return;\n  const url = parseCreatedPullRequest({\n    toolName: input.toolName,\n    input: input.toolInput,\n    output: input.toolResult,\n  });\n  if (!url) return;\n\n  try {\n    const match = url.match(/^https:\\/\\/github\\.com\\/([^/]+\\/[^/]+)\\/pull\\/(\\d+)\\/?$/i);\n    if (!match) return;\n    const repositorySlug = match[1]!;\n    let repositoryId: number | undefined;\n    let installationId: number | undefined;\n    for (const connection of await sourceControl.connections.list({\n      orgId: input.binding.orgId,\n      factoryProjectId: input.binding.factoryProjectId,\n    })) {\n      const installation = await sourceControl.installations.get({\n        orgId: input.binding.orgId,\n        id: connection.installationId,\n      });\n      if (!installation) continue;\n      for (const link of await sourceControl.projectRepositories.list({\n        orgId: input.binding.orgId,\n        connectionId: connection.id,\n      })) {\n        const repository = await sourceControl.repositories.get({ orgId: input.binding.orgId, id: link.repositoryId });\n        if (!repository || repository.slug.toLowerCase() !== repositorySlug.toLowerCase()) continue;\n        repositoryId = Number(repository.externalId);\n        installationId = Number(installation.externalId);\n        break;\n      }\n      if (repositoryId !== undefined) break;\n    }\n    const pullRequestNumber = Number(match[2]);\n    const [owner, repo] = repositorySlug.split('/');\n    if (\n      !owner ||\n      !repo ||\n      repositoryId === undefined ||\n      installationId === undefined ||\n      !Number.isInteger(repositoryId) ||\n      !Number.isInteger(installationId) ||\n      !Number.isInteger(pullRequestNumber) ||\n      pullRequestNumber < 1\n    )\n      return;\n    const targetKey = `factory-pr-provenance:${repositoryId}:${pullRequestNumber}`;\n    // Dedupe within the authoring project only: a sibling project's row must\n    // not block this project from recording its own provenance.\n    if (\n      (await integrationStorage.subscriptions.listByTarget(targetKey)).some(\n        row => row.orgId === input.binding.orgId && row.data?.factoryProjectId === input.binding.factoryProjectId,\n      )\n    ) {\n      return;\n    }\n\n    const { data } = await github\n      .getInstallationOctokit(installationId)\n      .pulls.get({ owner, repo, pull_number: pullRequestNumber });\n    if (data.base.repo.id !== repositoryId || data.number !== pullRequestNumber || data.html_url !== url) return;\n\n    await integrationStorage.subscriptions.create({\n      orgId: input.binding.orgId,\n      targetKey,\n      threadId: input.binding.threadId,\n      status: 'active',\n      data: {\n        kind: 'factory-pr-provenance',\n        bindingId: input.binding.id,\n        workItemId: input.item.id,\n        factoryProjectId: input.binding.factoryProjectId,\n        repositoryId,\n        pullRequestNumber,\n        pullRequestUrl: url,\n        assistantMessageId: input.assistantMessageId,\n        toolCallId: input.toolCallId,\n      },\n    });\n\n    const reviewItem = (\n      await workItems.list({\n        orgId: input.binding.orgId,\n        factoryProjectId: input.binding.factoryProjectId,\n      })\n    ).find(\n      item =>\n        item.externalSource?.integrationId === 'github' &&\n        item.externalSource.type === 'pull-request' &&\n        (item.externalSource.externalId === `github:${repositoryId}:pull-request:${pullRequestNumber}` ||\n          (item.externalSource.externalId === `github-pr:${pullRequestNumber}` &&\n            cardBelongsToRepository(item, repositoryId, repositorySlug))),\n    );\n    if (reviewItem) {\n      await workItems.setParentWorkItemIfMissing({\n        orgId: input.binding.orgId,\n        id: reviewItem.id,\n        userId: 'factory-pr-provenance',\n        parentWorkItemId: input.item.id,\n      });\n    }\n  } catch {\n    return;\n  }\n}\n"],"mappings":";;;AA+BA,eAAsB,0CACpB,oBAKA,OACwB;CACxB,MAAM,YAAY,yBAAyB,MAAM,aAAa,GAAG,MAAM;CAUvE,QANoB,MAAM,mBAAmB,cAAc,aAAa,WAAW,EAAE,QAAQ,SAAS,CAAC,EAAA,CAAG,MACxG,QACE,IAAI,UAAU,MAAM,SACpB,IAAI,MAAM,SAAS,2BACnB,IAAI,KAAK,qBAAqB,MAAM,gBAExB,CAAC,EAAE,MAAM,cAAc;AACzC;AAEA,eAAsB,mCACpB,QACA,eACA,oBAKA,WACA,OACe;CACf,IAAI,MAAM,WAAW,aAAa,MAAM,KAAK,gBAAgB,SAAS,gBAAgB;CACtF,MAAM,MAAM,wBAAwB;EAClC,UAAU,MAAM;EAChB,OAAO,MAAM;EACb,QAAQ,MAAM;CAChB,CAAC;CACD,IAAI,CAAC,KAAK;CAEV,IAAI;EACF,MAAM,QAAQ,IAAI,MAAM,0DAA0D;EAClF,IAAI,CAAC,OAAO;EACZ,MAAM,iBAAiB,MAAM;EAC7B,IAAI;EACJ,IAAI;EACJ,KAAK,MAAM,cAAc,MAAM,cAAc,YAAY,KAAK;GAC5D,OAAO,MAAM,QAAQ;GACrB,kBAAkB,MAAM,QAAQ;EAClC,CAAC,GAAG;GACF,MAAM,eAAe,MAAM,cAAc,cAAc,IAAI;IACzD,OAAO,MAAM,QAAQ;IACrB,IAAI,WAAW;GACjB,CAAC;GACD,IAAI,CAAC,cAAc;GACnB,KAAK,MAAM,QAAQ,MAAM,cAAc,oBAAoB,KAAK;IAC9D,OAAO,MAAM,QAAQ;IACrB,cAAc,WAAW;GAC3B,CAAC,GAAG;IACF,MAAM,aAAa,MAAM,cAAc,aAAa,IAAI;KAAE,OAAO,MAAM,QAAQ;KAAO,IAAI,KAAK;IAAa,CAAC;IAC7G,IAAI,CAAC,cAAc,WAAW,KAAK,YAAY,MAAM,eAAe,YAAY,GAAG;IACnF,eAAe,OAAO,WAAW,UAAU;IAC3C,iBAAiB,OAAO,aAAa,UAAU;IAC/C;GACF;GACA,IAAI,iBAAiB,KAAA,GAAW;EAClC;EACA,MAAM,oBAAoB,OAAO,MAAM,EAAE;EACzC,MAAM,CAAC,OAAO,QAAQ,eAAe,MAAM,GAAG;EAC9C,IACE,CAAC,SACD,CAAC,QACD,iBAAiB,KAAA,KACjB,mBAAmB,KAAA,KACnB,CAAC,OAAO,UAAU,YAAY,KAC9B,CAAC,OAAO,UAAU,cAAc,KAChC,CAAC,OAAO,UAAU,iBAAiB,KACnC,oBAAoB,GAEpB;EACF,MAAM,YAAY,yBAAyB,aAAa,GAAG;EAG3D,KACG,MAAM,mBAAmB,cAAc,aAAa,SAAS,EAAA,CAAG,MAC/D,QAAO,IAAI,UAAU,MAAM,QAAQ,SAAS,IAAI,MAAM,qBAAqB,MAAM,QAAQ,gBAC3F,GAEA;EAGF,MAAM,EAAE,SAAS,MAAM,OACpB,uBAAuB,cAAc,CAAC,CACtC,MAAM,IAAI;GAAE;GAAO;GAAM,aAAa;EAAkB,CAAC;EAC5D,IAAI,KAAK,KAAK,KAAK,OAAO,gBAAgB,KAAK,WAAW,qBAAqB,KAAK,aAAa,KAAK;EAEtG,MAAM,mBAAmB,cAAc,OAAO;GAC5C,OAAO,MAAM,QAAQ;GACrB;GACA,UAAU,MAAM,QAAQ;GACxB,QAAQ;GACR,MAAM;IACJ,MAAM;IACN,WAAW,MAAM,QAAQ;IACzB,YAAY,MAAM,KAAK;IACvB,kBAAkB,MAAM,QAAQ;IAChC;IACA;IACA,gBAAgB;IAChB,oBAAoB,MAAM;IAC1B,YAAY,MAAM;GACpB;EACF,CAAC;EAED,MAAM,cACJ,MAAM,UAAU,KAAK;GACnB,OAAO,MAAM,QAAQ;GACrB,kBAAkB,MAAM,QAAQ;EAClC,CAAC,EAAA,CACD,MACA,SACE,KAAK,gBAAgB,kBAAkB,YACvC,KAAK,eAAe,SAAS,mBAC5B,KAAK,eAAe,eAAe,UAAU,aAAa,gBAAgB,uBACxE,KAAK,eAAe,eAAe,aAAa,uBAC/C,wBAAwB,MAAM,cAAc,cAAc,EAClE;EACA,IAAI,YACF,MAAM,UAAU,2BAA2B;GACzC,OAAO,MAAM,QAAQ;GACrB,IAAI,WAAW;GACf,QAAQ;GACR,kBAAkB,MAAM,KAAK;EAC/B,CAAC;CAEL,QAAQ;EACN;CACF;AACF"}

package/dist/integrations/github/reconcile-worker.d.ts

@@ -0,0 +1,45 @@
+import { MastraWorker } from '@mastra/core/worker';
+import type { WorkerDeps } from '@mastra/core/worker';
+import type { ConfiguredExternalRepositoryKey, ExternalRepositoryProjectTarget, SourceControlRepository } from '../../storage/domains/source-control/base.js';
+import type { GithubIssueReconciler } from './issue-reconciler.js';
+import type { GithubPullRequestReconciler } from './rules.js';
+export declare const DEFAULT_GITHUB_RECONCILE_INTERVAL_MS: number;
+/** Storage slice the sweep needs to turn configured repositories into targets. */
+export interface GithubReconcileRepositorySource {
+    projectRepositories: {
+        listConfiguredExternalKeys(): Promise<ConfiguredExternalRepositoryKey[]>;
+        listByExternalRepository(args: {
+            installationExternalId: string;
+            repositoryExternalId: string;
+        }): Promise<ExternalRepositoryProjectTarget[]>;
+    };
+    repositories: {
+        findByExternalId(args: {
+            orgId: string;
+            externalId: string;
+        }): Promise<SourceControlRepository | null>;
+    };
+}
+export interface GithubReconcileWorkerConfig {
+    reconcile?: GithubPullRequestReconciler;
+    reconcileIssues?: GithubIssueReconciler;
+    sourceControl: GithubReconcileRepositorySource;
+    intervalMs?: number;
+    issueIntervalMs?: number;
+    now?: () => number;
+}
+/**
+ * Periodic GitHub state sweeps for the self-hosted integration. Pull requests
+ * drive review cards and issues drive work cards, but both share discovery and
+ * a lease so replicas never sweep the same configured repositories together.
+ */
+export declare class GithubReconcileWorker extends MastraWorker {
+    #private;
+    readonly name = "github-pull-request-reconcile";
+    constructor(config: GithubReconcileWorkerConfig);
+    init(deps: WorkerDeps): Promise<void>;
+    start(): Promise<void>;
+    stop(): Promise<void>;
+    get isRunning(): boolean;
+}
+//# sourceMappingURL=reconcile-worker.d.ts.map

package/dist/integrations/github/reconcile-worker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reconcile-worker.d.ts","sourceRoot":"","sources":["../../../src/integrations/github/reconcile-worker.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAEtD,OAAO,KAAK,EACV,+BAA+B,EAC/B,+BAA+B,EAC/B,uBAAuB,EACxB,MAAM,8CAA8C,CAAC;AACtD,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AACnE,OAAO,KAAK,EAAE,2BAA2B,EAAuB,MAAM,YAAY,CAAC;AAGnF,eAAO,MAAM,oCAAoC,QAAc,CAAC;AAIhE,kFAAkF;AAClF,MAAM,WAAW,+BAA+B;IAC9C,mBAAmB,EAAE;QACnB,0BAA0B,IAAI,OAAO,CAAC,+BAA+B,EAAE,CAAC,CAAC;QACzE,wBAAwB,CAAC,IAAI,EAAE;YAC7B,sBAAsB,EAAE,MAAM,CAAC;YAC/B,oBAAoB,EAAE,MAAM,CAAC;SAC9B,GAAG,OAAO,CAAC,+BAA+B,EAAE,CAAC,CAAC;KAChD,CAAC;IACF,YAAY,EAAE;QACZ,gBAAgB,CAAC,IAAI,EAAE;YAAE,KAAK,EAAE,MAAM,CAAC;YAAC,UAAU,EAAE,MAAM,CAAA;SAAE,GAAG,OAAO,CAAC,uBAAuB,GAAG,IAAI,CAAC,CAAC;KACxG,CAAC;CACH;AAED,MAAM,WAAW,2BAA2B;IAC1C,SAAS,CAAC,EAAE,2BAA2B,CAAC;IACxC,eAAe,CAAC,EAAE,qBAAqB,CAAC;IACxC,aAAa,EAAE,+BAA+B,CAAC;IAC/C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AAED;;;;GAIG;AACH,qBAAa,qBAAsB,SAAQ,YAAY;;IACrD,QAAQ,CAAC,IAAI,mCAAmC;gBAkBpC,MAAM,EAAE,2BAA2B;IAoBzC,IAAI,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAKrC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAYtB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAQ3B,IAAI,SAAS,IAAI,OAAO,CAEvB;CAiJF"}

package/dist/integrations/github/reconcile-worker.js

@@ -0,0 +1,189 @@
+import { NoopLeaseProvider, isLeaseProvider } from "@mastra/core/events";
+import { MastraWorker } from "@mastra/core/worker";
+//#region src/integrations/github/reconcile-worker.ts
+const DEFAULT_GITHUB_RECONCILE_INTERVAL_MS = 60 * 6e4;
+const MIN_LEASE_TTL_MS = 3e4;
+const LEASE_KEY = "github:pull-request-reconcile";
+/**
+* Periodic GitHub state sweeps for the self-hosted integration. Pull requests
+* drive review cards and issues drive work cards, but both share discovery and
+* a lease so replicas never sweep the same configured repositories together.
+*/
+var GithubReconcileWorker = class extends MastraWorker {
+	name = "github-pull-request-reconcile";
+	#reconcile;
+	#reconcileIssues;
+	#sourceControl;
+	#intervalMs;
+	#issueIntervalMs;
+	#leaseTtlMs;
+	#leaseOwner = globalThis.crypto.randomUUID();
+	#now;
+	#running = false;
+	#timer;
+	#inFlight;
+	#leaseProvider = NoopLeaseProvider;
+	#nextPullRequestReconcileAt = 0;
+	#nextIssueReconcileAt = 0;
+	constructor(config) {
+		super();
+		if (!config.reconcile && !config.reconcileIssues) throw new Error("GitHub reconcile worker requires a pull request or issue reconciler.");
+		this.#reconcile = config.reconcile;
+		this.#reconcileIssues = config.reconcileIssues;
+		this.#sourceControl = config.sourceControl;
+		this.#intervalMs = config.intervalMs ?? 36e5;
+		this.#issueIntervalMs = config.issueIntervalMs ?? this.#intervalMs;
+		if (!Number.isFinite(this.#intervalMs) || this.#intervalMs <= 0) throw new Error("GitHub pull request reconcile interval must be a positive number.");
+		if (!Number.isFinite(this.#issueIntervalMs) || this.#issueIntervalMs <= 0) throw new Error("GitHub issue reconcile interval must be a positive number.");
+		this.#leaseTtlMs = Math.max(MIN_LEASE_TTL_MS, Math.min(this.#intervalMs, this.#issueIntervalMs) * 3);
+		this.#now = config.now ?? Date.now;
+	}
+	async init(deps) {
+		await super.init(deps);
+		this.#leaseProvider = getLeaseProvider(deps.pubsub);
+	}
+	async start() {
+		if (this.#running) return;
+		if (!this.deps) throw new Error("GithubReconcileWorker: call init() before start()");
+		this.#running = true;
+		this.deps.logger.info("GitHub reconcile worker started", {
+			pullRequestIntervalMs: this.#reconcile ? this.#intervalMs : void 0,
+			issueIntervalMs: this.#reconcileIssues ? this.#issueIntervalMs : void 0
+		});
+		this.#schedule(0);
+	}
+	async stop() {
+		if (!this.#running) return;
+		this.#running = false;
+		if (this.#timer) clearTimeout(this.#timer);
+		this.#timer = void 0;
+		await this.#inFlight;
+	}
+	get isRunning() {
+		return this.#running;
+	}
+	#schedule(delayMs) {
+		if (!this.#running) return;
+		this.#timer = setTimeout(() => {
+			this.#timer = void 0;
+			const run = this.#tick().finally(() => {
+				this.#inFlight = void 0;
+				this.#schedule(this.#nextDelay());
+			});
+			this.#inFlight = run;
+		}, delayMs);
+		this.#timer.unref?.();
+	}
+	#nextDelay() {
+		const now = this.#now();
+		const due = [this.#reconcile ? this.#nextPullRequestReconcileAt : void 0, this.#reconcileIssues ? this.#nextIssueReconcileAt : void 0].filter((at) => at !== void 0);
+		return Math.max(0, Math.min(...due) - now);
+	}
+	async #tick() {
+		const now = this.#now();
+		const reconcilePullRequests = Boolean(this.#reconcile && now >= this.#nextPullRequestReconcileAt);
+		const reconcileIssues = Boolean(this.#reconcileIssues && now >= this.#nextIssueReconcileAt);
+		if (!reconcilePullRequests && !reconcileIssues) return;
+		if (reconcilePullRequests) this.#nextPullRequestReconcileAt = now + this.#intervalMs;
+		if (reconcileIssues) this.#nextIssueReconcileAt = now + this.#issueIntervalMs;
+		if (!(await this.#leaseProvider.acquireLease(LEASE_KEY, this.#leaseOwner, this.#leaseTtlMs).catch(() => ({ acquired: false }))).acquired) return;
+		let hasLease = true;
+		const renewalTimer = setInterval(() => {
+			this.#leaseProvider.renewLease(LEASE_KEY, this.#leaseOwner, this.#leaseTtlMs).then((renewed) => {
+				if (!renewed) {
+					hasLease = false;
+					clearInterval(renewalTimer);
+					this.deps?.logger.warn("GitHub reconcile lease was lost mid-sweep; aborting further writes");
+				}
+			}).catch((error) => {
+				hasLease = false;
+				clearInterval(renewalTimer);
+				this.deps?.logger.warn("GitHub reconcile lease renewal failed; aborting further writes", { error: error instanceof Error ? error.message : String(error) });
+			});
+		}, Math.max(1e3, Math.floor(this.#leaseTtlMs / 3)));
+		renewalTimer.unref?.();
+		try {
+			const targets = await this.#targets();
+			if (targets.length === 0) return;
+			if (reconcilePullRequests && this.#reconcile) {
+				const startedAt = Date.now();
+				try {
+					const { errors, ...counts } = await this.#reconcile(targets);
+					const context = {
+						...counts,
+						candidateRepositories: targets.length,
+						durationMs: Date.now() - startedAt
+					};
+					if (counts.failed > 0) this.deps?.logger.warn("GitHub pull request reconcile sweep completed with failures", {
+						...context,
+						errors
+					});
+					else if (counts.merged > 0 || counts.closed > 0) this.deps?.logger.info("GitHub pull request reconcile replayed missed merges/closes", context);
+					else this.deps?.logger.debug("GitHub pull request reconcile sweep completed", context);
+				} catch (error) {
+					this.deps?.logger.warn("GitHub pull request reconcile sweep failed", { error: error instanceof Error ? error.message : String(error) });
+				}
+			}
+			if (reconcileIssues && this.#reconcileIssues && hasLease) {
+				const startedAt = Date.now();
+				try {
+					const { errors, ...counts } = await this.#reconcileIssues(targets);
+					const context = {
+						...counts,
+						candidateRepositories: targets.length,
+						durationMs: Date.now() - startedAt
+					};
+					if (counts.failed > 0) this.deps?.logger.warn("GitHub issue reconcile sweep completed with failures", {
+						...context,
+						errors
+					});
+					else if (counts.closed > 0) this.deps?.logger.info("GitHub issue reconcile replayed closed work items", context);
+					else if (counts.relabeled > 0) this.deps?.logger.info("GitHub issue reconcile re-applied label routing", context);
+					else if (counts.updated > 0) this.deps?.logger.info("GitHub issue reconcile patched stale metadata", context);
+					else this.deps?.logger.debug("GitHub issue reconcile sweep completed", context);
+				} catch (error) {
+					this.deps?.logger.warn("GitHub issue reconcile sweep failed", { error: error instanceof Error ? error.message : String(error) });
+				}
+			} else if (reconcileIssues && this.#reconcileIssues && !hasLease) this.deps?.logger.debug("GitHub issue reconcile skipped: lease lost during pull-request sweep");
+		} finally {
+			clearInterval(renewalTimer);
+			if (hasLease) await this.#leaseProvider.releaseLease(LEASE_KEY, this.#leaseOwner).catch(() => void 0);
+		}
+	}
+	/**
+	* Configured (installation, repository) pairs resolved to the numeric ids and
+	* slug the sweep addresses GitHub with. A pair whose repository row is gone
+	* is skipped rather than failing the sweep for the others.
+	*/
+	async #targets() {
+		const keys = await this.#sourceControl.projectRepositories.listConfiguredExternalKeys();
+		const targets = [];
+		for (const key of keys) {
+			const installationId = Number(key.installationExternalId);
+			const repositoryId = Number(key.repositoryExternalId);
+			if (!Number.isSafeInteger(installationId) || !Number.isSafeInteger(repositoryId)) continue;
+			const orgId = (await this.#sourceControl.projectRepositories.listByExternalRepository(key))[0]?.orgId;
+			if (!orgId) continue;
+			const repository = await this.#sourceControl.repositories.findByExternalId({
+				orgId,
+				externalId: key.repositoryExternalId
+			});
+			if (!repository?.slug) continue;
+			targets.push({
+				id: repositoryId,
+				fullName: repository.slug,
+				installationId
+			});
+		}
+		return targets;
+	}
+};
+function getLeaseProvider(pubsub) {
+	const getProvider = pubsub.getLeaseProvider;
+	if (typeof getProvider === "function") return getProvider.call(pubsub) ?? NoopLeaseProvider;
+	return isLeaseProvider(pubsub) ? pubsub : NoopLeaseProvider;
+}
+//#endregion
+export { DEFAULT_GITHUB_RECONCILE_INTERVAL_MS, GithubReconcileWorker };
+
+//# sourceMappingURL=reconcile-worker.js.map

package/dist/integrations/github/reconcile-worker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reconcile-worker.js","names":["#reconcile","#reconcileIssues","#sourceControl","#intervalMs","#issueIntervalMs","#leaseTtlMs","#leaseOwner","#now","#leaseProvider","#running","#schedule","#timer","#inFlight","#tick","#nextDelay","#nextPullRequestReconcileAt","#nextIssueReconcileAt","#targets"],"sources":["../../../src/integrations/github/reconcile-worker.ts"],"sourcesContent":["import { isLeaseProvider, NoopLeaseProvider } from '@mastra/core/events';\nimport type { LeaseProvider, PubSub } from '@mastra/core/events';\nimport { MastraWorker } from '@mastra/core/worker';\nimport type { WorkerDeps } from '@mastra/core/worker';\n\nimport type {\n  ConfiguredExternalRepositoryKey,\n  ExternalRepositoryProjectTarget,\n  SourceControlRepository,\n} from '../../storage/domains/source-control/base.js';\nimport type { GithubIssueReconciler } from './issue-reconciler.js';\nimport type { GithubPullRequestReconciler, ReconcileRepository } from './rules.js';\n\n// Webhooks are the primary sync; the sweeps only catch drift, so hourly.\nexport const DEFAULT_GITHUB_RECONCILE_INTERVAL_MS = 60 * 60_000;\nconst MIN_LEASE_TTL_MS = 30_000;\nconst LEASE_KEY = 'github:pull-request-reconcile';\n\n/** Storage slice the sweep needs to turn configured repositories into targets. */\nexport interface GithubReconcileRepositorySource {\n  projectRepositories: {\n    listConfiguredExternalKeys(): Promise<ConfiguredExternalRepositoryKey[]>;\n    listByExternalRepository(args: {\n      installationExternalId: string;\n      repositoryExternalId: string;\n    }): Promise<ExternalRepositoryProjectTarget[]>;\n  };\n  repositories: {\n    findByExternalId(args: { orgId: string; externalId: string }): Promise<SourceControlRepository | null>;\n  };\n}\n\nexport interface GithubReconcileWorkerConfig {\n  reconcile?: GithubPullRequestReconciler;\n  reconcileIssues?: GithubIssueReconciler;\n  sourceControl: GithubReconcileRepositorySource;\n  intervalMs?: number;\n  issueIntervalMs?: number;\n  now?: () => number;\n}\n\n/**\n * Periodic GitHub state sweeps for the self-hosted integration. Pull requests\n * drive review cards and issues drive work cards, but both share discovery and\n * a lease so replicas never sweep the same configured repositories together.\n */\nexport class GithubReconcileWorker extends MastraWorker {\n  readonly name = 'github-pull-request-reconcile';\n\n  readonly #reconcile: GithubPullRequestReconciler | undefined;\n  readonly #reconcileIssues: GithubIssueReconciler | undefined;\n  readonly #sourceControl: GithubReconcileRepositorySource;\n  readonly #intervalMs: number;\n  readonly #issueIntervalMs: number;\n  readonly #leaseTtlMs: number;\n  readonly #leaseOwner = globalThis.crypto.randomUUID();\n  readonly #now: () => number;\n\n  #running = false;\n  #timer: ReturnType<typeof setTimeout> | undefined;\n  #inFlight: Promise<void> | undefined;\n  #leaseProvider: LeaseProvider = NoopLeaseProvider;\n  #nextPullRequestReconcileAt = 0;\n  #nextIssueReconcileAt = 0;\n\n  constructor(config: GithubReconcileWorkerConfig) {\n    super();\n    if (!config.reconcile && !config.reconcileIssues) {\n      throw new Error('GitHub reconcile worker requires a pull request or issue reconciler.');\n    }\n    this.#reconcile = config.reconcile;\n    this.#reconcileIssues = config.reconcileIssues;\n    this.#sourceControl = config.sourceControl;\n    this.#intervalMs = config.intervalMs ?? DEFAULT_GITHUB_RECONCILE_INTERVAL_MS;\n    this.#issueIntervalMs = config.issueIntervalMs ?? this.#intervalMs;\n    if (!Number.isFinite(this.#intervalMs) || this.#intervalMs <= 0) {\n      throw new Error('GitHub pull request reconcile interval must be a positive number.');\n    }\n    if (!Number.isFinite(this.#issueIntervalMs) || this.#issueIntervalMs <= 0) {\n      throw new Error('GitHub issue reconcile interval must be a positive number.');\n    }\n    this.#leaseTtlMs = Math.max(MIN_LEASE_TTL_MS, Math.min(this.#intervalMs, this.#issueIntervalMs) * 3);\n    this.#now = config.now ?? Date.now;\n  }\n\n  async init(deps: WorkerDeps): Promise<void> {\n    await super.init(deps);\n    this.#leaseProvider = getLeaseProvider(deps.pubsub);\n  }\n\n  async start(): Promise<void> {\n    if (this.#running) return;\n    if (!this.deps) throw new Error('GithubReconcileWorker: call init() before start()');\n    this.#running = true;\n    this.deps.logger.info('GitHub reconcile worker started', {\n      pullRequestIntervalMs: this.#reconcile ? this.#intervalMs : undefined,\n      issueIntervalMs: this.#reconcileIssues ? this.#issueIntervalMs : undefined,\n    });\n    // Sweep on boot: a restart is exactly when webhooks were most likely missed.\n    this.#schedule(0);\n  }\n\n  async stop(): Promise<void> {\n    if (!this.#running) return;\n    this.#running = false;\n    if (this.#timer) clearTimeout(this.#timer);\n    this.#timer = undefined;\n    await this.#inFlight;\n  }\n\n  get isRunning(): boolean {\n    return this.#running;\n  }\n\n  #schedule(delayMs: number): void {\n    if (!this.#running) return;\n    this.#timer = setTimeout(() => {\n      this.#timer = undefined;\n      const run = this.#tick().finally(() => {\n        this.#inFlight = undefined;\n        this.#schedule(this.#nextDelay());\n      });\n      this.#inFlight = run;\n    }, delayMs);\n    this.#timer.unref?.();\n  }\n\n  #nextDelay(): number {\n    const now = this.#now();\n    const due = [\n      this.#reconcile ? this.#nextPullRequestReconcileAt : undefined,\n      this.#reconcileIssues ? this.#nextIssueReconcileAt : undefined,\n    ].filter((at): at is number => at !== undefined);\n    return Math.max(0, Math.min(...due) - now);\n  }\n\n  async #tick(): Promise<void> {\n    const now = this.#now();\n    const reconcilePullRequests = Boolean(this.#reconcile && now >= this.#nextPullRequestReconcileAt);\n    const reconcileIssues = Boolean(this.#reconcileIssues && now >= this.#nextIssueReconcileAt);\n    if (!reconcilePullRequests && !reconcileIssues) return;\n    if (reconcilePullRequests) this.#nextPullRequestReconcileAt = now + this.#intervalMs;\n    if (reconcileIssues) this.#nextIssueReconcileAt = now + this.#issueIntervalMs;\n\n    // Replicas share one sweep: the ingress dedupes duplicate writes, but the\n    // reads still burn the installation's rate limit.\n    const lease = await this.#leaseProvider\n      .acquireLease(LEASE_KEY, this.#leaseOwner, this.#leaseTtlMs)\n      .catch(() => ({ acquired: false }));\n    if (!lease.acquired) return;\n\n    let hasLease = true;\n    const renewalTimer = setInterval(\n      () => {\n        void this.#leaseProvider\n          .renewLease(LEASE_KEY, this.#leaseOwner, this.#leaseTtlMs)\n          .then(renewed => {\n            if (!renewed) {\n              hasLease = false;\n              clearInterval(renewalTimer);\n              this.deps?.logger.warn('GitHub reconcile lease was lost mid-sweep; aborting further writes');\n            }\n          })\n          .catch(error => {\n            hasLease = false;\n            clearInterval(renewalTimer);\n            this.deps?.logger.warn('GitHub reconcile lease renewal failed; aborting further writes', {\n              error: error instanceof Error ? error.message : String(error),\n            });\n          });\n      },\n      Math.max(1_000, Math.floor(this.#leaseTtlMs / 3)),\n    );\n    renewalTimer.unref?.();\n\n    try {\n      const targets = await this.#targets();\n      if (targets.length === 0) return;\n\n      if (reconcilePullRequests && this.#reconcile) {\n        const startedAt = Date.now();\n        try {\n          const { errors, ...counts } = await this.#reconcile(targets);\n          const context = { ...counts, candidateRepositories: targets.length, durationMs: Date.now() - startedAt };\n          if (counts.failed > 0) {\n            this.deps?.logger.warn('GitHub pull request reconcile sweep completed with failures', {\n              ...context,\n              errors,\n            });\n          } else if (counts.merged > 0 || counts.closed > 0) {\n            this.deps?.logger.info('GitHub pull request reconcile replayed missed merges/closes', context);\n          } else {\n            this.deps?.logger.debug('GitHub pull request reconcile sweep completed', context);\n          }\n        } catch (error) {\n          this.deps?.logger.warn('GitHub pull request reconcile sweep failed', {\n            error: error instanceof Error ? error.message : String(error),\n          });\n        }\n      }\n\n      if (reconcileIssues && this.#reconcileIssues && hasLease) {\n        const startedAt = Date.now();\n        try {\n          const { errors, ...counts } = await this.#reconcileIssues(targets);\n          const context = { ...counts, candidateRepositories: targets.length, durationMs: Date.now() - startedAt };\n          if (counts.failed > 0) {\n            this.deps?.logger.warn('GitHub issue reconcile sweep completed with failures', { ...context, errors });\n          } else if (counts.closed > 0) {\n            this.deps?.logger.info('GitHub issue reconcile replayed closed work items', context);\n          } else if (counts.relabeled > 0) {\n            this.deps?.logger.info('GitHub issue reconcile re-applied label routing', context);\n          } else if (counts.updated > 0) {\n            this.deps?.logger.info('GitHub issue reconcile patched stale metadata', context);\n          } else {\n            this.deps?.logger.debug('GitHub issue reconcile sweep completed', context);\n          }\n        } catch (error) {\n          this.deps?.logger.warn('GitHub issue reconcile sweep failed', {\n            error: error instanceof Error ? error.message : String(error),\n          });\n        }\n      } else if (reconcileIssues && this.#reconcileIssues && !hasLease) {\n        this.deps?.logger.debug('GitHub issue reconcile skipped: lease lost during pull-request sweep');\n      }\n    } finally {\n      clearInterval(renewalTimer);\n      if (hasLease) {\n        await this.#leaseProvider.releaseLease(LEASE_KEY, this.#leaseOwner).catch(() => undefined);\n      }\n    }\n  }\n\n  /**\n   * Configured (installation, repository) pairs resolved to the numeric ids and\n   * slug the sweep addresses GitHub with. A pair whose repository row is gone\n   * is skipped rather than failing the sweep for the others.\n   */\n  async #targets(): Promise<ReconcileRepository[]> {\n    const keys = await this.#sourceControl.projectRepositories.listConfiguredExternalKeys();\n    const targets: ReconcileRepository[] = [];\n    for (const key of keys) {\n      const installationId = Number(key.installationExternalId);\n      const repositoryId = Number(key.repositoryExternalId);\n      if (!Number.isSafeInteger(installationId) || !Number.isSafeInteger(repositoryId)) continue;\n      const projects = await this.#sourceControl.projectRepositories.listByExternalRepository(key);\n      const orgId = projects[0]?.orgId;\n      if (!orgId) continue;\n      const repository = await this.#sourceControl.repositories.findByExternalId({\n        orgId,\n        externalId: key.repositoryExternalId,\n      });\n      if (!repository?.slug) continue;\n      targets.push({ id: repositoryId, fullName: repository.slug, installationId });\n    }\n    return targets;\n  }\n}\n\nfunction getLeaseProvider(pubsub: PubSub): LeaseProvider {\n  const getProvider = (pubsub as PubSub & { getLeaseProvider?: () => LeaseProvider | undefined }).getLeaseProvider;\n  if (typeof getProvider === 'function') return getProvider.call(pubsub) ?? NoopLeaseProvider;\n  return isLeaseProvider(pubsub) ? pubsub : NoopLeaseProvider;\n}\n"],"mappings":";;;AAcA,MAAa,uCAAuC,KAAK;AACzD,MAAM,mBAAmB;AACzB,MAAM,YAAY;;;;;;AA8BlB,IAAa,wBAAb,cAA2C,aAAa;CACtD,OAAgB;CAEhB;CACA;CACA;CACA;CACA;CACA;CACA,cAAuB,WAAW,OAAO,WAAW;CACpD;CAEA,WAAW;CACX;CACA;CACA,iBAAgC;CAChC,8BAA8B;CAC9B,wBAAwB;CAExB,YAAY,QAAqC;EAC/C,MAAM;EACN,IAAI,CAAC,OAAO,aAAa,CAAC,OAAO,iBAC/B,MAAM,IAAI,MAAM,sEAAsE;EAExF,KAAKA,aAAa,OAAO;EACzB,KAAKC,mBAAmB,OAAO;EAC/B,KAAKC,iBAAiB,OAAO;EAC7B,KAAKC,cAAc,OAAO,cAAA;EAC1B,KAAKC,mBAAmB,OAAO,mBAAmB,KAAKD;EACvD,IAAI,CAAC,OAAO,SAAS,KAAKA,WAAW,KAAK,KAAKA,eAAe,GAC5D,MAAM,IAAI,MAAM,mEAAmE;EAErF,IAAI,CAAC,OAAO,SAAS,KAAKC,gBAAgB,KAAK,KAAKA,oBAAoB,GACtE,MAAM,IAAI,MAAM,4DAA4D;EAE9E,KAAKC,cAAc,KAAK,IAAI,kBAAkB,KAAK,IAAI,KAAKF,aAAa,KAAKC,gBAAgB,IAAI,CAAC;EACnG,KAAKG,OAAO,OAAO,OAAO,KAAK;CACjC;CAEA,MAAM,KAAK,MAAiC;EAC1C,MAAM,MAAM,KAAK,IAAI;EACrB,KAAKC,iBAAiB,iBAAiB,KAAK,MAAM;CACpD;CAEA,MAAM,QAAuB;EAC3B,IAAI,KAAKC,UAAU;EACnB,IAAI,CAAC,KAAK,MAAM,MAAM,IAAI,MAAM,mDAAmD;EACnF,KAAKA,WAAW;EAChB,KAAK,KAAK,OAAO,KAAK,mCAAmC;GACvD,uBAAuB,KAAKT,aAAa,KAAKG,cAAc,KAAA;GAC5D,iBAAiB,KAAKF,mBAAmB,KAAKG,mBAAmB,KAAA;EACnE,CAAC;EAED,KAAKM,UAAU,CAAC;CAClB;CAEA,MAAM,OAAsB;EAC1B,IAAI,CAAC,KAAKD,UAAU;EACpB,KAAKA,WAAW;EAChB,IAAI,KAAKE,QAAQ,aAAa,KAAKA,MAAM;EACzC,KAAKA,SAAS,KAAA;EACd,MAAM,KAAKC;CACb;CAEA,IAAI,YAAqB;EACvB,OAAO,KAAKH;CACd;CAEA,UAAU,SAAuB;EAC/B,IAAI,CAAC,KAAKA,UAAU;EACpB,KAAKE,SAAS,iBAAiB;GAC7B,KAAKA,SAAS,KAAA;GACd,MAAM,MAAM,KAAKE,MAAM,CAAC,CAAC,cAAc;IACrC,KAAKD,YAAY,KAAA;IACjB,KAAKF,UAAU,KAAKI,WAAW,CAAC;GAClC,CAAC;GACD,KAAKF,YAAY;EACnB,GAAG,OAAO;EACV,KAAKD,OAAO,QAAQ;CACtB;CAEA,aAAqB;EACnB,MAAM,MAAM,KAAKJ,KAAK;EACtB,MAAM,MAAM,CACV,KAAKP,aAAa,KAAKe,8BAA8B,KAAA,GACrD,KAAKd,mBAAmB,KAAKe,wBAAwB,KAAA,CACvD,CAAC,CAAC,QAAQ,OAAqB,OAAO,KAAA,CAAS;EAC/C,OAAO,KAAK,IAAI,GAAG,KAAK,IAAI,GAAG,GAAG,IAAI,GAAG;CAC3C;CAEA,MAAMH,QAAuB;EAC3B,MAAM,MAAM,KAAKN,KAAK;EACtB,MAAM,wBAAwB,QAAQ,KAAKP,cAAc,OAAO,KAAKe,2BAA2B;EAChG,MAAM,kBAAkB,QAAQ,KAAKd,oBAAoB,OAAO,KAAKe,qBAAqB;EAC1F,IAAI,CAAC,yBAAyB,CAAC,iBAAiB;EAChD,IAAI,uBAAuB,KAAKD,8BAA8B,MAAM,KAAKZ;EACzE,IAAI,iBAAiB,KAAKa,wBAAwB,MAAM,KAAKZ;EAO7D,IAAI,EAAC,MAHe,KAAKI,eACtB,aAAa,WAAW,KAAKF,aAAa,KAAKD,WAAW,CAAC,CAC3D,aAAa,EAAE,UAAU,MAAM,EAAE,EAAA,CACzB,UAAU;EAErB,IAAI,WAAW;EACf,MAAM,eAAe,kBACb;GACJ,KAAUG,eACP,WAAW,WAAW,KAAKF,aAAa,KAAKD,WAAW,CAAC,CACzD,MAAK,YAAW;IACf,IAAI,CAAC,SAAS;KACZ,WAAW;KACX,cAAc,YAAY;KAC1B,KAAK,MAAM,OAAO,KAAK,oEAAoE;IAC7F;GACF,CAAC,CAAC,CACD,OAAM,UAAS;IACd,WAAW;IACX,cAAc,YAAY;IAC1B,KAAK,MAAM,OAAO,KAAK,kEAAkE,EACvF,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAC9D,CAAC;GACH,CAAC;EACL,GACA,KAAK,IAAI,KAAO,KAAK,MAAM,KAAKA,cAAc,CAAC,CAAC,CAClD;EACA,aAAa,QAAQ;EAErB,IAAI;GACF,MAAM,UAAU,MAAM,KAAKY,SAAS;GACpC,IAAI,QAAQ,WAAW,GAAG;GAE1B,IAAI,yBAAyB,KAAKjB,YAAY;IAC5C,MAAM,YAAY,KAAK,IAAI;IAC3B,IAAI;KACF,MAAM,EAAE,QAAQ,GAAG,WAAW,MAAM,KAAKA,WAAW,OAAO;KAC3D,MAAM,UAAU;MAAE,GAAG;MAAQ,uBAAuB,QAAQ;MAAQ,YAAY,KAAK,IAAI,IAAI;KAAU;KACvG,IAAI,OAAO,SAAS,GAClB,KAAK,MAAM,OAAO,KAAK,+DAA+D;MACpF,GAAG;MACH;KACF,CAAC;UACI,IAAI,OAAO,SAAS,KAAK,OAAO,SAAS,GAC9C,KAAK,MAAM,OAAO,KAAK,+DAA+D,OAAO;UAE7F,KAAK,MAAM,OAAO,MAAM,iDAAiD,OAAO;IAEpF,SAAS,OAAO;KACd,KAAK,MAAM,OAAO,KAAK,8CAA8C,EACnE,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAC9D,CAAC;IACH;GACF;GAEA,IAAI,mBAAmB,KAAKC,oBAAoB,UAAU;IACxD,MAAM,YAAY,KAAK,IAAI;IAC3B,IAAI;KACF,MAAM,EAAE,QAAQ,GAAG,WAAW,MAAM,KAAKA,iBAAiB,OAAO;KACjE,MAAM,UAAU;MAAE,GAAG;MAAQ,uBAAuB,QAAQ;MAAQ,YAAY,KAAK,IAAI,IAAI;KAAU;KACvG,IAAI,OAAO,SAAS,GAClB,KAAK,MAAM,OAAO,KAAK,wDAAwD;MAAE,GAAG;MAAS;KAAO,CAAC;UAChG,IAAI,OAAO,SAAS,GACzB,KAAK,MAAM,OAAO,KAAK,qDAAqD,OAAO;UAC9E,IAAI,OAAO,YAAY,GAC5B,KAAK,MAAM,OAAO,KAAK,mDAAmD,OAAO;UAC5E,IAAI,OAAO,UAAU,GAC1B,KAAK,MAAM,OAAO,KAAK,iDAAiD,OAAO;UAE/E,KAAK,MAAM,OAAO,MAAM,0CAA0C,OAAO;IAE7E,SAAS,OAAO;KACd,KAAK,MAAM,OAAO,KAAK,uCAAuC,EAC5D,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAC9D,CAAC;IACH;GACF,OAAO,IAAI,mBAAmB,KAAKA,oBAAoB,CAAC,UACtD,KAAK,MAAM,OAAO,MAAM,sEAAsE;EAElG,UAAU;GACR,cAAc,YAAY;GAC1B,IAAI,UACF,MAAM,KAAKO,eAAe,aAAa,WAAW,KAAKF,WAAW,CAAC,CAAC,YAAY,KAAA,CAAS;EAE7F;CACF;;;;;;CAOA,MAAMW,WAA2C;EAC/C,MAAM,OAAO,MAAM,KAAKf,eAAe,oBAAoB,2BAA2B;EACtF,MAAM,UAAiC,CAAC;EACxC,KAAK,MAAM,OAAO,MAAM;GACtB,MAAM,iBAAiB,OAAO,IAAI,sBAAsB;GACxD,MAAM,eAAe,OAAO,IAAI,oBAAoB;GACpD,IAAI,CAAC,OAAO,cAAc,cAAc,KAAK,CAAC,OAAO,cAAc,YAAY,GAAG;GAElF,MAAM,SAAQ,MADS,KAAKA,eAAe,oBAAoB,yBAAyB,GAAG,EAAA,CACpE,EAAE,EAAE;GAC3B,IAAI,CAAC,OAAO;GACZ,MAAM,aAAa,MAAM,KAAKA,eAAe,aAAa,iBAAiB;IACzE;IACA,YAAY,IAAI;GAClB,CAAC;GACD,IAAI,CAAC,YAAY,MAAM;GACvB,QAAQ,KAAK;IAAE,IAAI;IAAc,UAAU,WAAW;IAAM;GAAe,CAAC;EAC9E;EACA,OAAO;CACT;AACF;AAEA,SAAS,iBAAiB,QAA+B;CACvD,MAAM,cAAe,OAA2E;CAChG,IAAI,OAAO,gBAAgB,YAAY,OAAO,YAAY,KAAK,MAAM,KAAK;CAC1E,OAAO,gBAAgB,MAAM,IAAI,SAAS;AAC5C"}

package/dist/integrations/github/reconciliation-config.d.ts

@@ -0,0 +1,3 @@
+export declare function reconciliationEnabled(child: string | undefined, legacy: string | undefined): boolean;
+export declare function reconcileInterval(value: string | undefined): number | undefined;
+//# sourceMappingURL=reconciliation-config.d.ts.map

package/dist/integrations/github/reconciliation-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reconciliation-config.d.ts","sourceRoot":"","sources":["../../../src/integrations/github/reconciliation-config.ts"],"names":[],"mappings":"AAEA,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,EAAE,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAEpG;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAE/E"}

package/dist/integrations/github/reconciliation-config.js

@@ -0,0 +1,19 @@
+import { optionalPositiveInteger } from "../reconciliation-config.js";
+//#region src/integrations/github/reconciliation-config.ts
+function reconciliationEnabled(child, legacy) {
+	return parseOptionalBoolean(child) ?? parseOptionalBoolean(legacy) ?? true;
+}
+function reconcileInterval(value) {
+	return optionalPositiveInteger(value);
+}
+function parseOptionalBoolean(value) {
+	switch (value?.trim().toLowerCase()) {
+		case "true": return true;
+		case "false": return false;
+		default: return;
+	}
+}
+//#endregion
+export { reconcileInterval, reconciliationEnabled };
+
+//# sourceMappingURL=reconciliation-config.js.map

package/dist/integrations/github/reconciliation-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reconciliation-config.js","names":[],"sources":["../../../src/integrations/github/reconciliation-config.ts"],"sourcesContent":["import { optionalPositiveInteger } from '../reconciliation-config.js';\n\nexport function reconciliationEnabled(child: string | undefined, legacy: string | undefined): boolean {\n  return parseOptionalBoolean(child) ?? parseOptionalBoolean(legacy) ?? true;\n}\n\nexport function reconcileInterval(value: string | undefined): number | undefined {\n  return optionalPositiveInteger(value);\n}\n\nfunction parseOptionalBoolean(value: string | undefined): boolean | undefined {\n  switch (value?.trim().toLowerCase()) {\n    case 'true':\n      return true;\n    case 'false':\n      return false;\n    default:\n      return undefined;\n  }\n}\n"],"mappings":";;AAEA,SAAgB,sBAAsB,OAA2B,QAAqC;CACpG,OAAO,qBAAqB,KAAK,KAAK,qBAAqB,MAAM,KAAK;AACxE;AAEA,SAAgB,kBAAkB,OAA+C;CAC/E,OAAO,wBAAwB,KAAK;AACtC;AAEA,SAAS,qBAAqB,OAAgD;CAC5E,QAAQ,OAAO,KAAK,CAAC,CAAC,YAAY,GAAlC;EACE,KAAK,QACH,OAAO;EACT,KAAK,SACH,OAAO;EACT,SACE;CACJ;AACF"}

package/dist/integrations/github/routes.d.ts

@@ -0,0 +1,90 @@
+/**
+ * Mastra `apiRoutes` for the GitHub App project feature.
+ *
+ * Registered alongside the other `/web/*` routes, behind the host auth gate.
+ * Every route additionally re-checks the authenticated user via the injected
+ * `RouteAuth` seam and scopes all rows by that user's stable id, so a user can
+ * only ever see and operate on their own installations and projects.
+ *
+ * When the feature is disabled (`isGithubFeatureEnabled()` false), `buildGithubRoutes`
+ * returns only `GET /web/github/status`, which reports `enabled:false`
+ * so the SPA can cleanly hide all GitHub UI.
+ */
+import type { MountedMastraCode } from '@mastra/code-sdk';
+import type { ApiRoute, IUserProvider } from '@mastra/core/server';
+import type { FactoryStorage } from '@mastra/core/storage';
+import type { FactorySandbox } from '@mastra/core/workspace';
+import type { RouteAuth } from '../../routes/route.js';
+import type { StateSigner } from '../../state-signing.js';
+import type { AuditEmitter } from '../../storage/domains/audit/domain.js';
+import type { MemorySettingsStorage } from '../../storage/domains/memory-settings/base.js';
+import type { FactoryProjectsStorage } from '../../storage/domains/projects/base.js';
+import type { GithubIntegration } from './integration.js';
+import type { ParsedGithubWebhook } from './webhook.js';
+export interface MountGithubRoutesOptions {
+    /** Host auth seam — resolves the signed-in user/tenant for each request. */
+    auth: RouteAuth;
+    /** Optional user directory used to resolve session-owner display profiles. */
+    users?: SessionOwnerUserProvider;
+    /**
+     * The host's session-sandbox callback. Routes only read whether it is
+     * configured: without one, `/web/github/status` reports
+     * `sandboxEnabled: false` and sandbox-backed routes respond 503. Sandboxes
+     * themselves are constructed per session and started lazily elsewhere.
+     */
+    sandbox?: FactorySandbox;
+    /** Factory storage backend used for the `appDbConfigured` diagnostic. */
+    storage?: FactoryStorage;
+    /**
+     * The GitHub App integration the handlers operate on (Octokit access, token
+     * minting, OAuth URLs). Normally supplied by `GithubIntegration.routes()`;
+     * when absent, only the disabled `status` route is served.
+     */
+    github?: GithubIntegration;
+    /**
+     * Shared OAuth/install `state` signer (created once per boot by the
+     * factory). Required for the OAuth/install flow; when absent, only the
+     * disabled `status` route is served.
+     */
+    stateSigner?: StateSigner;
+    /**
+     * Absolute base URL of the web server (e.g. `http://localhost:4111`), used to
+     * build the OAuth/install redirect URI when one isn't explicitly configured.
+     */
+    baseUrl?: string;
+    /** Explicit OAuth callback URI; defaults to `<baseUrl>/auth/github/callback`. */
+    redirectUri?: string;
+    /** Controller used to route verified webhook notifications to exact subscribed sessions. */
+    controller?: MountedMastraCode['controller'];
+    /** Owner-scoped observational-memory settings — the source of the model that names a thread. */
+    memorySettings: Pick<MemorySettingsStorage, 'get'>;
+    /** Best-effort audit emission supplied by the factory-owned audit domain. */
+    emitAudit?: AuditEmitter['emit'];
+    /** Factory projects domain — resolves a project's default triage model. */
+    projects?: FactoryProjectsStorage;
+    sessionRetirement?: import('../../sandbox/session-retirement.js').SessionRetirementCoordinator;
+    /** Work-items domain — session deletion strips the refs work items hold on it. */
+    workItems?: Pick<import('../../storage/domains/work-items/base.js').WorkItemsStorage, 'clearSessionReferences'>;
+    /** Authoritative Factory rule ingress for normalized, signature-verified GitHub deliveries. */
+    ingestFactoryEvent?: (event: ParsedGithubWebhook) => Promise<unknown>;
+}
+/**
+ * Feed a just-linked repository's open issues and pull requests through the
+ * same rules ingress the list routes use, so its backlog reaches the board
+ * without anyone browsing it. Rows owned by another integration don't resolve
+ * through this integration's storage handle and are skipped.
+ */
+export declare function ingestLinkedRepositoryBacklog(args: {
+    github: GithubIntegration;
+    orgId: string;
+    projectRepositoryId: string;
+    ingestFactoryEvent: MountGithubRoutesOptions['ingestFactoryEvent'];
+}): Promise<void>;
+/**
+ * Build the GitHub routes as Mastra `apiRoutes`. When the feature is disabled,
+ * returns only the `status` route so the SPA can detect the disabled state.
+ */
+export declare function buildGithubRoutes(options: MountGithubRoutesOptions): ApiRoute[];
+type SessionOwnerUserProvider = Pick<IUserProvider, 'getUser'> & Partial<Pick<IUserProvider, 'getUsers'>>;
+export {};
+//# sourceMappingURL=routes.d.ts.map

package/dist/integrations/github/routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../../../src/integrations/github/routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAG1D,OAAO,KAAK,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAGnE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAE7D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAQvD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,+CAA+C,CAAC;AAC3F,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,wCAAwC,CAAC;AASrF,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAyC1D,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAgBxD,MAAM,WAAW,wBAAwB;IACvC,4EAA4E;IAC5E,IAAI,EAAE,SAAS,CAAC;IAChB,8EAA8E;IAC9E,KAAK,CAAC,EAAE,wBAAwB,CAAC;IACjC;;;;;OAKG;IACH,OAAO,CAAC,EAAE,cAAc,CAAC;IACzB,yEAAyE;IACzE,OAAO,CAAC,EAAE,cAAc,CAAC;IACzB;;;;OAIG;IACH,MAAM,CAAC,EAAE,iBAAiB,CAAC;IAC3B;;;;OAIG;IACH,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,iFAAiF;IACjF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,4FAA4F;IAC5F,UAAU,CAAC,EAAE,iBAAiB,CAAC,YAAY,CAAC,CAAC;IAC7C,gGAAgG;IAChG,cAAc,EAAE,IAAI,CAAC,qBAAqB,EAAE,KAAK,CAAC,CAAC;IACnD,6EAA6E;IAC7E,SAAS,CAAC,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC;IACjC,2EAA2E;IAC3E,QAAQ,CAAC,EAAE,sBAAsB,CAAC;IAClC,iBAAiB,CAAC,EAAE,OAAO,qCAAqC,EAAE,4BAA4B,CAAC;IAC/F,kFAAkF;IAClF,SAAS,CAAC,EAAE,IAAI,CAAC,OAAO,0CAA0C,EAAE,gBAAgB,EAAE,wBAAwB,CAAC,CAAC;IAChH,+FAA+F;IAC/F,kBAAkB,CAAC,EAAE,CAAC,KAAK,EAAE,mBAAmB,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CACvE;AAyQD;;;;;GAKG;AACH,wBAAsB,6BAA6B,CAAC,IAAI,EAAE;IACxD,MAAM,EAAE,iBAAiB,CAAC;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,mBAAmB,EAAE,MAAM,CAAC;IAC5B,kBAAkB,EAAE,wBAAwB,CAAC,oBAAoB,CAAC,CAAC;CACpE,GAAG,OAAO,CAAC,IAAI,CAAC,CAgChB;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,wBAAwB,GAAG,QAAQ,EAAE,CAgpB/E;AA+GD,KAAK,wBAAwB,GAAG,IAAI,CAAC,aAAa,EAAE,SAAS,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC,CAAC"}