@mastra/factory 0.0.0-aggregate-trace-20261015182851

package/dist/integrations/linear/routes.js

@@ -0,0 +1,380 @@
+import { isTerminalFactoryRuleStage } from "../../rules/types.js";
+import { isTerminalWorkItem } from "../../boards/semantics.js";
+import "../../boards/index.js";
+import { linearClaimKey } from "./claim.js";
+import { LinearReauthRequiredError } from "./integration.js";
+import { registerApiRoute } from "@mastra/core/server";
+//#region src/integrations/linear/routes.ts
+const UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+/** Erase a route handler's path-parameterized context to a plain `Context`. */
+function loose(c) {
+	return c;
+}
+/**
+* Narrow the caller's selected Linear sources to the ones that feed this
+* Factory project.
+*
+* A Linear issue carries no Factory project of its own, so without a binding
+* every board view would ingest every selected source's issues into whichever
+* project happened to be on screen. Routing is explicit: a source feeds this
+* project only when its binding names both the project and a board. Returns
+* the bound board per source so the ingest lands cards where the user asked.
+*/
+async function scopeSourceIdsToProject({ intake, orgId, factoryProjectId, selectedIds }) {
+	const selected = new Set(selectedIds);
+	const intakeBoards = {};
+	for (const binding of await intake.listBindings({
+		orgId,
+		integrationId: "linear"
+	})) if (binding.factoryProjectId === factoryProjectId && binding.board && selected.has(binding.sourceId)) intakeBoards[binding.sourceId] = binding.board;
+	return intakeBoards;
+}
+/**
+* Resolve the org-scoped tenant for a Linear request. The connection is
+* org-owned, so it requires both a signed-in user and an organization — same
+* tenancy rules as the GitHub routes.
+*/
+async function resolveOrgTenant(c, auth) {
+	await auth.ensureUser(c);
+	const tenant = auth.tenant(c);
+	if (!tenant) return { response: c.json({ error: "unauthorized" }, 401) };
+	if (!tenant.orgId) return { response: c.json({
+		error: "organization_required",
+		message: "Linear intake requires an organization. Personal accounts cannot connect Linear."
+	}, 403) };
+	return { tenant: {
+		orgId: tenant.orgId,
+		userId: tenant.userId
+	} };
+}
+/**
+* Validate an opaque Linear pagination cursor from the query string. Cursors
+* are server-issued (`pageInfo.endCursor`), so anything outside a conservative
+* charset/length is rejected rather than forwarded to Linear.
+*/
+function parseAfterCursor(raw) {
+	if (raw === void 0 || raw === "") return void 0;
+	if (raw.length > 8192 || !/^[\w+/=.:-]+$/.test(raw)) return null;
+	return raw;
+}
+/** Human issue key as it appears on a card (`ENG-123`). */
+const ISSUE_IDENTIFIER_RE = /^[A-Za-z][A-Za-z0-9]{0,9}-\d{1,7}$/;
+/** Project sources are more specific than their team and win every routed read. */
+function winningLinearSourceId(linear, sourceIds, issue) {
+	const matching = sourceIds.filter((sourceId) => linear.sourceMatchesIssue(sourceId, issue));
+	return matching.find((sourceId) => !sourceId.startsWith("linear-team:")) ?? matching[0] ?? null;
+}
+/**
+* The card this Factory holds for an issue, if any: by the stable issue id when
+* the SPA sent one, else by the identifier the card was filed under.
+*/
+async function findHeldCard(options, orgId, factoryProjectId, identifier, issueId) {
+	if (!options.workItems) return null;
+	if (issueId) {
+		const claimant = await options.workItems.getByClaimKey({
+			orgId,
+			claimKey: linearClaimKey(issueId)
+		});
+		if (claimant) return claimant.factoryProjectId === factoryProjectId ? claimant : null;
+	}
+	return options.workItems.getByProjectSource({
+		orgId,
+		factoryProjectId,
+		source: {
+			integrationId: "linear",
+			type: "issue",
+			externalId: `linear:${identifier}`
+		}
+	});
+}
+/** Map a Linear read failure to the API response for the SPA. */
+function linearFetchError(c, err) {
+	if (err.code === "invalid_cursor") return c.json({ error: "invalid_cursor" }, 400);
+	if (err instanceof LinearReauthRequiredError || err.status === 401) return c.json({
+		error: "linear_reauth_required",
+		message: new LinearReauthRequiredError().message
+	}, 409);
+	return c.json({
+		error: "linear_fetch_failed",
+		message: err instanceof Error ? err.message : String(err)
+	}, 502);
+}
+/**
+* Build the Linear routes as Mastra `apiRoutes`. When the feature is disabled,
+* returns only the `status` route so the SPA can detect the disabled state.
+*/
+function buildLinearRoutes(options) {
+	const routes = [];
+	const { linear, auth, stateSigner, intake } = options;
+	const enabled = Boolean(linear) && auth.enabled();
+	const diagnostics = () => ({
+		linearAppConfigured: Boolean(linear),
+		factoryAuthEnabled: auth.enabled(),
+		appDbConfigured: true
+	});
+	routes.push(registerApiRoute("/web/linear/status", {
+		method: "GET",
+		requiresAuth: false,
+		handler: async (c) => {
+			if (!enabled || !linear || !stateSigner) return c.json({
+				enabled: false,
+				connected: false,
+				workspace: null,
+				reason: "missing_config",
+				diagnostics: diagnostics()
+			});
+			await auth.ensureUser(loose(c));
+			const tenant = auth.tenant(loose(c));
+			if (!tenant) return c.json({
+				error: "unauthorized",
+				reason: "auth_required"
+			}, 401);
+			if (!tenant.orgId) return c.json({
+				enabled: true,
+				organizationRequired: true,
+				connected: false,
+				workspace: null,
+				reason: "organization_required",
+				diagnostics: diagnostics()
+			});
+			const connection = await linear.loadConnection(tenant.orgId);
+			return c.json({
+				enabled: true,
+				connected: Boolean(connection),
+				workspace: connection ? {
+					name: connection.workspaceName,
+					urlKey: connection.workspaceUrlKey
+				} : null,
+				reason: connection ? "ready" : "not_connected",
+				diagnostics: diagnostics()
+			});
+		}
+	}));
+	if (!enabled || !linear || !stateSigner || !intake) return routes;
+	const redirectUri = options.redirectUri ?? `${(options.baseUrl ?? "").replace(/\/$/, "")}/auth/linear/callback`;
+	routes.push(registerApiRoute("/auth/linear/connect", {
+		method: "GET",
+		requiresAuth: false,
+		handler: async (c) => {
+			const resolved = await resolveOrgTenant(loose(c), auth);
+			if ("response" in resolved) return resolved.response;
+			const state = stateSigner.sign(resolved.tenant.orgId, resolved.tenant.userId);
+			return c.redirect(linear.buildAuthorizeUrl(state, redirectUri));
+		}
+	}));
+	routes.push(registerApiRoute("/auth/linear/callback", {
+		method: "GET",
+		requiresAuth: false,
+		handler: async (c) => {
+			const resolved = await resolveOrgTenant(loose(c), auth);
+			if ("response" in resolved) return resolved.response;
+			const { orgId, userId } = resolved.tenant;
+			const stateTenant = stateSigner.verify(c.req.query("state"));
+			if (!stateTenant || stateTenant.userId !== userId || stateTenant.orgId !== orgId) {
+				console.warn("[Linear] OAuth callback rejected: state/tenant mismatch.");
+				return c.redirect("/?linear=error");
+			}
+			const code = c.req.query("code");
+			if (!code) return c.redirect("/?linear=error");
+			try {
+				const tokens = await linear.exchangeOAuthCode(code, redirectUri);
+				const workspace = await linear.fetchWorkspace(tokens.accessToken);
+				await linear.upsertConnection({
+					orgId,
+					userId,
+					accessToken: tokens.accessToken,
+					refreshToken: tokens.refreshToken,
+					expiresAt: tokens.expiresAt,
+					scope: tokens.scope,
+					workspaceName: workspace.name,
+					workspaceUrlKey: workspace.urlKey
+				});
+			} catch (error) {
+				console.warn(`[Linear] OAuth callback failed to persist connection for org ${orgId}.`, error);
+				return c.redirect("/?linear=error");
+			}
+			return c.redirect("/?linear=connected");
+		}
+	}));
+	routes.push(registerApiRoute("/web/linear/projects", {
+		method: "GET",
+		requiresAuth: false,
+		handler: async (c) => {
+			const resolved = await resolveOrgTenant(loose(c), auth);
+			if ("response" in resolved) return resolved.response;
+			const connection = await linear.loadConnection(resolved.tenant.orgId);
+			if (!connection) return c.json({
+				error: "linear_not_connected",
+				message: "Connect Linear to list Linear projects."
+			}, 409);
+			try {
+				const accessToken = await linear.getFreshAccessToken(connection);
+				const projects = await linear.listProjects(accessToken);
+				return c.json({ projects });
+			} catch (err) {
+				return linearFetchError(loose(c), err);
+			}
+		}
+	}));
+	routes.push(registerApiRoute("/web/linear/teams", {
+		method: "GET",
+		requiresAuth: false,
+		handler: async (c) => {
+			const resolved = await resolveOrgTenant(loose(c), auth);
+			if ("response" in resolved) return resolved.response;
+			const connection = await linear.loadConnection(resolved.tenant.orgId);
+			if (!connection) return c.json({
+				error: "linear_not_connected",
+				message: "Connect Linear to list Linear teams."
+			}, 409);
+			try {
+				const accessToken = await linear.getFreshAccessToken(connection);
+				const teams = await linear.listTeams(accessToken);
+				return c.json({ teams });
+			} catch (err) {
+				return linearFetchError(loose(c), err);
+			}
+		}
+	}));
+	routes.push(registerApiRoute("/web/linear/issues", {
+		method: "GET",
+		requiresAuth: false,
+		handler: async (c) => {
+			const resolved = await resolveOrgTenant(loose(c), auth);
+			if ("response" in resolved) return resolved.response;
+			const after = parseAfterCursor(c.req.query("after"));
+			if (after === null) return c.json({ error: "invalid_cursor" }, 400);
+			const factoryProjectId = c.req.query("factoryProjectId");
+			if (factoryProjectId && !UUID_RE.test(factoryProjectId)) return c.json({ error: "invalid_factory_project_id" }, 400);
+			const connection = await linear.loadConnection(resolved.tenant.orgId);
+			if (!connection) return c.json({
+				error: "linear_not_connected",
+				message: "Connect Linear to see intake issues."
+			}, 409);
+			await intake.ensureReady();
+			const selection = (await intake.getConfig({
+				orgId: resolved.tenant.orgId,
+				integrationIds: ["linear"]
+			})).linear;
+			if (!selection.enabled) return c.json({
+				error: "linear_intake_disabled",
+				message: "Linear intake is turned off in Settings."
+			}, 404);
+			const selectedIds = selection.sourceIds ?? [];
+			const intakeBoards = factoryProjectId ? await scopeSourceIdsToProject({
+				intake,
+				orgId: resolved.tenant.orgId,
+				factoryProjectId,
+				selectedIds
+			}) : null;
+			const routedSourceIds = intakeBoards ? Object.keys(intakeBoards) : selectedIds;
+			if (routedSourceIds.length === 0) return c.json({
+				issues: [],
+				nextCursor: null
+			});
+			try {
+				const accessToken = await linear.getFreshAccessToken(connection);
+				const { issues, nextCursor } = await linear.intake.listIssues({
+					connection: {
+						type: "oauth",
+						accessToken
+					},
+					sourceIds: routedSourceIds,
+					attributionSourceIds: selectedIds,
+					cursor: after
+				});
+				const issuePayload = (intakeBoards ? issues.filter((issue) => issue.sourceId != null && routedSourceIds.includes(issue.sourceId)) : issues).map((issue) => ({
+					id: issue.id,
+					identifier: issue.identifier,
+					title: issue.title,
+					url: issue.url,
+					state: issue.state ?? "",
+					stateType: issue.stateType ?? "",
+					priorityLabel: issue.priority ?? "",
+					assignee: issue.assignee,
+					creator: issue.author,
+					team: issue.source,
+					labels: issue.labels,
+					createdAt: issue.createdAt,
+					updatedAt: issue.updatedAt,
+					sourceId: issue.sourceId ?? null,
+					projectId: issue.projectId ?? null
+				}));
+				if (factoryProjectId && intakeBoards && options.ingestFactoryIssues) await options.ingestFactoryIssues({
+					orgId: resolved.tenant.orgId,
+					userId: resolved.tenant.userId,
+					factoryProjectId,
+					issues: issuePayload,
+					intakeBoards
+				});
+				return c.json({
+					issues: issuePayload,
+					nextCursor
+				});
+			} catch (err) {
+				return linearFetchError(loose(c), err);
+			}
+		}
+	}));
+	routes.push(registerApiRoute("/web/linear/issues/:identifier", {
+		method: "GET",
+		requiresAuth: false,
+		handler: async (c) => {
+			const resolved = await resolveOrgTenant(loose(c), auth);
+			if ("response" in resolved) return resolved.response;
+			const identifier = c.req.param("identifier");
+			if (!ISSUE_IDENTIFIER_RE.test(identifier)) return c.json({ error: "invalid_identifier" }, 400);
+			const issueId = c.req.query("issueId");
+			if (issueId !== void 0 && (issueId.length === 0 || issueId.length > 512)) return c.json({ error: "invalid_issue_id" }, 400);
+			const issueReference = issueId ?? identifier;
+			const factoryProjectId = c.req.query("factoryProjectId");
+			if (!factoryProjectId || !UUID_RE.test(factoryProjectId)) return c.json({ error: "invalid_factory_project_id" }, 400);
+			const connection = await linear.loadConnection(resolved.tenant.orgId);
+			if (!connection) return c.json({
+				error: "linear_not_connected",
+				message: "Connect Linear to see intake issues."
+			}, 409);
+			await intake.ensureReady();
+			const selection = (await intake.getConfig({
+				orgId: resolved.tenant.orgId,
+				integrationIds: ["linear"]
+			})).linear;
+			if (!selection.enabled) return c.json({
+				error: "linear_intake_disabled",
+				message: "Linear intake is turned off in Settings."
+			}, 404);
+			const selectedIds = selection.sourceIds ?? [];
+			const routedSourceIds = Object.keys(await scopeSourceIdsToProject({
+				intake,
+				orgId: resolved.tenant.orgId,
+				factoryProjectId,
+				selectedIds
+			}));
+			const held = await findHeldCard(options, resolved.tenant.orgId, factoryProjectId, identifier, issueId);
+			const holdsLiveCard = held != null && !(options.boards ? isTerminalWorkItem(options.boards, held) : isTerminalFactoryRuleStage(held.stages));
+			if (routedSourceIds.length === 0 && !holdsLiveCard) return c.json({ error: "issue_not_found" }, 404);
+			const fetchSourceIds = holdsLiveCard ? selectedIds : routedSourceIds;
+			try {
+				const accessToken = await linear.getFreshAccessToken(connection);
+				const issue = await linear.fetchIssueDetail(accessToken, issueReference, selectedIds, fetchSourceIds);
+				const matchesReference = issueId !== void 0 ? issue?.id === issueId : issue?.identifier === identifier;
+				const winningSourceId = issue ? winningLinearSourceId(linear, selectedIds, issue) : null;
+				const isRouted = winningSourceId != null && (holdsLiveCard || routedSourceIds.includes(winningSourceId));
+				if (!issue || !matchesReference || !isRouted) return c.json({ error: "issue_not_found" }, 404);
+				return c.json({
+					identifier: issue.identifier,
+					title: issue.title,
+					url: issue.url,
+					description: issue.description
+				});
+			} catch (err) {
+				return linearFetchError(loose(c), err);
+			}
+		}
+	}));
+	return routes;
+}
+//#endregion
+export { buildLinearRoutes };
+
+//# sourceMappingURL=routes.js.map

package/dist/integrations/linear/routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.js","names":[],"sources":["../../../src/integrations/linear/routes.ts"],"sourcesContent":["/**\n * Mastra `apiRoutes` for the Linear intake feature.\n *\n * Registered alongside the other `/web/*` routes, behind the WorkOS auth gate.\n * Mirrors the GitHub module: every route re-resolves the authenticated user\n * from the request cookie and scopes all rows by the caller's WorkOS org, so an\n * org can only ever see its own Linear connection and issues.\n *\n * When the feature is disabled (`isLinearFeatureEnabled()` false),\n * `buildLinearRoutes` returns only `GET /web/linear/status`, which reports\n * `enabled:false` so the SPA can cleanly hide all Linear UI.\n */\n\nimport type { ApiRoute } from '@mastra/core/server';\nimport { registerApiRoute } from '@mastra/core/server';\nimport type { Context } from 'hono';\n\nimport { isTerminalWorkItem } from '../../boards/index.js';\nimport type { BoardRegistry } from '../../boards/index.js';\nimport type { RouteAuth } from '../../routes/route.js';\nimport { isTerminalFactoryRuleStage } from '../../rules/types.js';\nimport type { StateSigner } from '../../state-signing.js';\nimport type { IntakeStorage } from '../../storage/domains/intake/base.js';\nimport type { WorkItemsStorage } from '../../storage/domains/work-items/base.js';\nimport { linearClaimKey } from './claim.js';\nimport type { LinearIntegration } from './integration.js';\nimport { LinearReauthRequiredError } from './integration.js';\nimport type { LinearRulesIngress } from './rules.js';\n\ntype RouteContext = Context;\n\nconst UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;\n\n/** Erase a route handler's path-parameterized context to a plain `Context`. */\nfunction loose(c: unknown): RouteContext {\n  return c as RouteContext;\n}\n\n/**\n * Non-secret diagnostic snapshot of every Linear feature gate, mirroring the\n * GitHub diagnostics shape. Only booleans — never values.\n */\nexport interface LinearFeatureDiagnostics {\n  linearAppConfigured: boolean;\n  factoryAuthEnabled: boolean;\n  appDbConfigured: boolean;\n}\n\nexport interface MountLinearRoutesOptions {\n  /**\n   * The integration instance providing OAuth + GraphQL access. Required for\n   * everything beyond the disabled `status` route.\n   */\n  linear?: LinearIntegration;\n  /** Host auth seam. Linear connections are org-owned, so the feature is inert without it. */\n  auth: RouteAuth;\n  /**\n   * Absolute base URL of the web server (e.g. `http://localhost:4111`), used to\n   * build the OAuth redirect URI when one isn't explicitly configured.\n   */\n  baseUrl?: string;\n  /** Explicit OAuth callback URI; defaults to `<baseUrl>/auth/linear/callback`. */\n  redirectUri?: string;\n  /**\n   * Shared OAuth `state` signer (created once per boot by the factory).\n   * Required for the connect/callback flow; when absent, only the disabled\n   * `status` route is served.\n   */\n  stateSigner?: StateSigner;\n  /**\n   * Cross-integration intake selection domain. Required for the issues route's\n   * project filter; when absent, only the disabled `status` route is served.\n   */\n  intake?: IntakeStorage;\n  /**\n   * Factory project domain, used to keep single-project installs working\n   * without any source binding. When absent, unbound sources are treated as\n   * belonging to no project.\n   */\n  projects?: { list(input: { orgId: string }): Promise<unknown[]> };\n  ingestFactoryIssues?: (input: LinearRulesIngress) => Promise<unknown>;\n  /**\n   * Work-item lookup so the detail route can keep serving a card this Factory\n   * already holds after the issue's winning source was routed elsewhere. When\n   * absent, details resolve only through sources routed to the Factory.\n   */\n  workItems?: Pick<WorkItemsStorage, 'getByProjectSource' | 'getByClaimKey'>;\n  /** Installed boards, so a held card's terminal status follows its own board. */\n  boards?: BoardRegistry;\n}\n\n/**\n * Narrow the caller's selected Linear sources to the ones that feed this\n * Factory project.\n *\n * A Linear issue carries no Factory project of its own, so without a binding\n * every board view would ingest every selected source's issues into whichever\n * project happened to be on screen. Routing is explicit: a source feeds this\n * project only when its binding names both the project and a board. Returns\n * the bound board per source so the ingest lands cards where the user asked.\n */\nasync function scopeSourceIdsToProject({\n  intake,\n  orgId,\n  factoryProjectId,\n  selectedIds,\n}: {\n  intake: IntakeStorage;\n  orgId: string;\n  factoryProjectId: string;\n  selectedIds: string[];\n}): Promise<Record<string, string>> {\n  const selected = new Set(selectedIds);\n  const intakeBoards: Record<string, string> = {};\n  for (const binding of await intake.listBindings({ orgId, integrationId: 'linear' })) {\n    if (binding.factoryProjectId === factoryProjectId && binding.board && selected.has(binding.sourceId)) {\n      intakeBoards[binding.sourceId] = binding.board;\n    }\n  }\n  return intakeBoards;\n}\n\n/**\n * Resolve the org-scoped tenant for a Linear request. The connection is\n * org-owned, so it requires both a signed-in user and an organization — same\n * tenancy rules as the GitHub routes.\n */\nasync function resolveOrgTenant(\n  c: RouteContext,\n  auth: RouteAuth,\n): Promise<{ tenant: { orgId: string; userId: string } } | { response: Response }> {\n  await auth.ensureUser(c);\n  const tenant = auth.tenant(c);\n  if (!tenant) return { response: c.json({ error: 'unauthorized' }, 401) };\n  if (!tenant.orgId) {\n    return {\n      response: c.json(\n        {\n          error: 'organization_required',\n          message: 'Linear intake requires an organization. Personal accounts cannot connect Linear.',\n        },\n        403,\n      ),\n    };\n  }\n  return { tenant: { orgId: tenant.orgId, userId: tenant.userId } };\n}\n\n/**\n * Validate an opaque Linear pagination cursor from the query string. Cursors\n * are server-issued (`pageInfo.endCursor`), so anything outside a conservative\n * charset/length is rejected rather than forwarded to Linear.\n */\nfunction parseAfterCursor(raw: string | undefined): string | undefined | null {\n  if (raw === undefined || raw === '') return undefined;\n  if (raw.length > 8192 || !/^[\\w+/=.:-]+$/.test(raw)) return null;\n  return raw;\n}\n\n/** Human issue key as it appears on a card (`ENG-123`). */\nconst ISSUE_IDENTIFIER_RE = /^[A-Za-z][A-Za-z0-9]{0,9}-\\d{1,7}$/;\n/** Project sources are more specific than their team and win every routed read. */\nfunction winningLinearSourceId(\n  linear: LinearIntegration,\n  sourceIds: string[],\n  issue: Parameters<LinearIntegration['sourceMatchesIssue']>[1],\n): string | null {\n  const matching = sourceIds.filter(sourceId => linear.sourceMatchesIssue(sourceId, issue));\n  return matching.find(sourceId => !sourceId.startsWith('linear-team:')) ?? matching[0] ?? null;\n}\n\n/**\n * The card this Factory holds for an issue, if any: by the stable issue id when\n * the SPA sent one, else by the identifier the card was filed under.\n */\nasync function findHeldCard(\n  options: MountLinearRoutesOptions,\n  orgId: string,\n  factoryProjectId: string,\n  identifier: string,\n  issueId: string | undefined,\n) {\n  if (!options.workItems) return null;\n  if (issueId) {\n    const claimant = await options.workItems.getByClaimKey({ orgId, claimKey: linearClaimKey(issueId) });\n    if (claimant) return claimant.factoryProjectId === factoryProjectId ? claimant : null;\n  }\n  return options.workItems.getByProjectSource({\n    orgId,\n    factoryProjectId,\n    source: { integrationId: 'linear', type: 'issue', externalId: `linear:${identifier}` },\n  });\n}\n\n/** Map a Linear read failure to the API response for the SPA. */\nfunction linearFetchError(c: RouteContext, err: unknown) {\n  if ((err as { code?: unknown }).code === 'invalid_cursor') {\n    return c.json({ error: 'invalid_cursor' }, 400);\n  }\n  if (err instanceof LinearReauthRequiredError || (err as { status?: number }).status === 401) {\n    return c.json({ error: 'linear_reauth_required', message: new LinearReauthRequiredError().message }, 409);\n  }\n  return c.json({ error: 'linear_fetch_failed', message: err instanceof Error ? err.message : String(err) }, 502);\n}\n\n/**\n * Build the Linear routes as Mastra `apiRoutes`. When the feature is disabled,\n * returns only the `status` route so the SPA can detect the disabled state.\n */\nexport function buildLinearRoutes(options: MountLinearRoutesOptions): ApiRoute[] {\n  const routes: ApiRoute[] = [];\n  const { linear, auth, stateSigner, intake } = options;\n  const enabled = Boolean(linear) && auth.enabled();\n  const diagnostics = (): LinearFeatureDiagnostics => ({\n    linearAppConfigured: Boolean(linear),\n    factoryAuthEnabled: auth.enabled(),\n    appDbConfigured: true,\n  });\n\n  // The status route is always registered so the SPA can detect the disabled state.\n  routes.push(\n    registerApiRoute('/web/linear/status', {\n      method: 'GET',\n      requiresAuth: false,\n      handler: async c => {\n        if (!enabled || !linear || !stateSigner) {\n          return c.json({\n            enabled: false,\n            connected: false,\n            workspace: null,\n            reason: 'missing_config',\n            diagnostics: diagnostics(),\n          });\n        }\n        await auth.ensureUser(loose(c));\n        const tenant = auth.tenant(loose(c));\n        if (!tenant) return c.json({ error: 'unauthorized', reason: 'auth_required' }, 401);\n\n        if (!tenant.orgId) {\n          return c.json({\n            enabled: true,\n            organizationRequired: true,\n            connected: false,\n            workspace: null,\n            reason: 'organization_required',\n            diagnostics: diagnostics(),\n          });\n        }\n\n        const connection = await linear.loadConnection(tenant.orgId);\n        return c.json({\n          enabled: true,\n          connected: Boolean(connection),\n          workspace: connection ? { name: connection.workspaceName, urlKey: connection.workspaceUrlKey } : null,\n          reason: connection ? 'ready' : 'not_connected',\n          diagnostics: diagnostics(),\n        });\n      },\n    }),\n  );\n\n  // Without the integration instance or a state signer the connect/callback\n  // flow cannot talk to Linear or bind the OAuth round-trip to a tenant —\n  // serve only the disabled `status` route (mirrors the feature gate).\n  if (!enabled || !linear || !stateSigner || !intake) {\n    return routes;\n  }\n\n  const redirectUri = options.redirectUri ?? `${(options.baseUrl ?? '').replace(/\\/$/, '')}/auth/linear/callback`;\n\n  // ── Connect: send the user to Linear's OAuth consent screen ─────────────\n  routes.push(\n    registerApiRoute('/auth/linear/connect', {\n      method: 'GET',\n      requiresAuth: false,\n      handler: async c => {\n        const resolved = await resolveOrgTenant(loose(c), auth);\n        if ('response' in resolved) return resolved.response;\n        const state = stateSigner.sign(resolved.tenant.orgId, resolved.tenant.userId);\n        return c.redirect(linear.buildAuthorizeUrl(state, redirectUri));\n      },\n    }),\n  );\n\n  // ── Callback: exchange the code, persist the connection for the org ─────\n  routes.push(\n    registerApiRoute('/auth/linear/callback', {\n      method: 'GET',\n      requiresAuth: false,\n      handler: async c => {\n        const resolved = await resolveOrgTenant(loose(c), auth);\n        if ('response' in resolved) return resolved.response;\n        const { orgId, userId } = resolved.tenant;\n\n        // CSRF / cross-tenant linking protection: the signed state must belong\n        // to the same logged-in user *and* their current org.\n        const stateTenant = stateSigner.verify(c.req.query('state'));\n        if (!stateTenant || stateTenant.userId !== userId || stateTenant.orgId !== orgId) {\n          console.warn('[Linear] OAuth callback rejected: state/tenant mismatch.');\n          return c.redirect('/?linear=error');\n        }\n\n        const code = c.req.query('code');\n        if (!code) {\n          // User denied consent (or Linear returned an error).\n          return c.redirect('/?linear=error');\n        }\n\n        try {\n          const tokens = await linear.exchangeOAuthCode(code, redirectUri);\n          const workspace = await linear.fetchWorkspace(tokens.accessToken);\n          await linear.upsertConnection({\n            orgId,\n            userId,\n            accessToken: tokens.accessToken,\n            refreshToken: tokens.refreshToken,\n            expiresAt: tokens.expiresAt,\n            scope: tokens.scope,\n            workspaceName: workspace.name,\n            workspaceUrlKey: workspace.urlKey,\n          });\n        } catch (error) {\n          console.warn(`[Linear] OAuth callback failed to persist connection for org ${orgId}.`, error);\n          return c.redirect('/?linear=error');\n        }\n\n        return c.redirect('/?linear=connected');\n      },\n    }),\n  );\n\n  // ── List the workspace's projects (Settings intake-source picker) ───────\n  routes.push(\n    registerApiRoute('/web/linear/projects', {\n      method: 'GET',\n      requiresAuth: false,\n      handler: async c => {\n        const resolved = await resolveOrgTenant(loose(c), auth);\n        if ('response' in resolved) return resolved.response;\n\n        const connection = await linear.loadConnection(resolved.tenant.orgId);\n        if (!connection) {\n          return c.json({ error: 'linear_not_connected', message: 'Connect Linear to list Linear projects.' }, 409);\n        }\n\n        try {\n          const accessToken = await linear.getFreshAccessToken(connection);\n          const projects = await linear.listProjects(accessToken);\n          return c.json({ projects });\n        } catch (err) {\n          return linearFetchError(loose(c), err);\n        }\n      },\n    }),\n  );\n\n  // ── List the workspace's teams (Settings intake-source picker) ──────────\n  routes.push(\n    registerApiRoute('/web/linear/teams', {\n      method: 'GET',\n      requiresAuth: false,\n      handler: async c => {\n        const resolved = await resolveOrgTenant(loose(c), auth);\n        if ('response' in resolved) return resolved.response;\n\n        const connection = await linear.loadConnection(resolved.tenant.orgId);\n        if (!connection) {\n          return c.json({ error: 'linear_not_connected', message: 'Connect Linear to list Linear teams.' }, 409);\n        }\n\n        try {\n          const accessToken = await linear.getFreshAccessToken(connection);\n          const teams = await linear.listTeams(accessToken);\n          return c.json({ teams });\n        } catch (err) {\n          return linearFetchError(loose(c), err);\n        }\n      },\n    }),\n  );\n\n  // ── List the workspace's active issues (cursor-paged) ───────────────────\n  // Respects the org's intake config: disabled Linear intake 404s the\n  // source, and an explicit project selection narrows the issue filter.\n  routes.push(\n    registerApiRoute('/web/linear/issues', {\n      method: 'GET',\n      requiresAuth: false,\n      handler: async c => {\n        const resolved = await resolveOrgTenant(loose(c), auth);\n        if ('response' in resolved) return resolved.response;\n\n        const after = parseAfterCursor(c.req.query('after'));\n        if (after === null) return c.json({ error: 'invalid_cursor' }, 400);\n        const factoryProjectId = c.req.query('factoryProjectId');\n        if (factoryProjectId && !UUID_RE.test(factoryProjectId)) {\n          return c.json({ error: 'invalid_factory_project_id' }, 400);\n        }\n\n        const connection = await linear.loadConnection(resolved.tenant.orgId);\n        if (!connection) {\n          return c.json({ error: 'linear_not_connected', message: 'Connect Linear to see intake issues.' }, 409);\n        }\n\n        await intake.ensureReady();\n        const config = await intake.getConfig({ orgId: resolved.tenant.orgId, integrationIds: ['linear'] });\n        const selection = config.linear!;\n        if (!selection.enabled) {\n          return c.json({ error: 'linear_intake_disabled', message: 'Linear intake is turned off in Settings.' }, 404);\n        }\n\n        // No sources selected means nothing is synced — don't fan out to Linear.\n        const selectedIds = selection.sourceIds ?? [];\n        // A board request is also an ingest, so it only ever sees the sources\n        // routed to a board of that Factory project. Sources may be projects or\n        // whole teams; both are keyed by their opaque source id.\n        const intakeBoards = factoryProjectId\n          ? await scopeSourceIdsToProject({\n              intake,\n              orgId: resolved.tenant.orgId,\n              factoryProjectId,\n              selectedIds,\n            })\n          : null;\n        const routedSourceIds = intakeBoards ? Object.keys(intakeBoards) : selectedIds;\n        if (routedSourceIds.length === 0) {\n          return c.json({ issues: [], nextCursor: null });\n        }\n\n        try {\n          const accessToken = await linear.getFreshAccessToken(connection);\n          const { issues, nextCursor } = await linear.intake.listIssues({\n            connection: { type: 'oauth', accessToken },\n            sourceIds: routedSourceIds,\n            attributionSourceIds: selectedIds,\n            cursor: after,\n          });\n          // Source precedence must be resolved against the complete selection,\n          // then the winning issues can be narrowed to this Factory project.\n          const routedIssues = intakeBoards\n            ? issues.filter(issue => issue.sourceId != null && routedSourceIds.includes(issue.sourceId))\n            : issues;\n          const issuePayload = routedIssues.map(issue => ({\n            id: issue.id,\n            identifier: issue.identifier,\n            title: issue.title,\n            url: issue.url,\n            state: issue.state ?? '',\n            stateType: issue.stateType ?? '',\n            priorityLabel: issue.priority ?? '',\n            assignee: issue.assignee,\n            creator: issue.author,\n            team: issue.source,\n            labels: issue.labels,\n            createdAt: issue.createdAt,\n            updatedAt: issue.updatedAt,\n            sourceId: issue.sourceId ?? null,\n            projectId: issue.projectId ?? null,\n          }));\n          if (factoryProjectId && intakeBoards && options.ingestFactoryIssues) {\n            await options.ingestFactoryIssues({\n              orgId: resolved.tenant.orgId,\n              userId: resolved.tenant.userId,\n              factoryProjectId,\n              issues: issuePayload,\n              intakeBoards,\n            });\n          }\n          return c.json({ issues: issuePayload, nextCursor });\n        } catch (err) {\n          return linearFetchError(loose(c), err);\n        }\n      },\n    }),\n  );\n\n  routes.push(\n    registerApiRoute('/web/linear/issues/:identifier', {\n      method: 'GET',\n      requiresAuth: false,\n      handler: async c => {\n        const resolved = await resolveOrgTenant(loose(c), auth);\n        if ('response' in resolved) return resolved.response;\n\n        const identifier = c.req.param('identifier');\n        if (!ISSUE_IDENTIFIER_RE.test(identifier)) return c.json({ error: 'invalid_identifier' }, 400);\n        const issueId = c.req.query('issueId');\n        if (issueId !== undefined && (issueId.length === 0 || issueId.length > 512)) {\n          return c.json({ error: 'invalid_issue_id' }, 400);\n        }\n        const issueReference = issueId ?? identifier;\n        const factoryProjectId = c.req.query('factoryProjectId');\n        if (!factoryProjectId || !UUID_RE.test(factoryProjectId)) {\n          return c.json({ error: 'invalid_factory_project_id' }, 400);\n        }\n\n        const connection = await linear.loadConnection(resolved.tenant.orgId);\n        if (!connection) {\n          return c.json({ error: 'linear_not_connected', message: 'Connect Linear to see intake issues.' }, 409);\n        }\n\n        await intake.ensureReady();\n        const config = await intake.getConfig({ orgId: resolved.tenant.orgId, integrationIds: ['linear'] });\n        const selection = config.linear!;\n        if (!selection.enabled) {\n          return c.json({ error: 'linear_intake_disabled', message: 'Linear intake is turned off in Settings.' }, 404);\n        }\n        const selectedIds = selection.sourceIds ?? [];\n        const routedSourceIds = Object.keys(\n          await scopeSourceIdsToProject({\n            intake,\n            orgId: resolved.tenant.orgId,\n            factoryProjectId,\n            selectedIds,\n          }),\n        );\n        // A card this Factory already ingested stays readable after its issue's\n        // winning source moved to a source routed elsewhere: the fetch widens to\n        // every selected source (never beyond the selection), and the routing\n        // check is waived for that card alone. Without a live card, the strict\n        // routed-source rule applies.\n        const held = await findHeldCard(options, resolved.tenant.orgId, factoryProjectId, identifier, issueId);\n        const holdsLiveCard =\n          held != null &&\n          !(options.boards ? isTerminalWorkItem(options.boards, held) : isTerminalFactoryRuleStage(held.stages));\n        if (routedSourceIds.length === 0 && !holdsLiveCard) return c.json({ error: 'issue_not_found' }, 404);\n        const fetchSourceIds = holdsLiveCard ? selectedIds : routedSourceIds;\n\n        try {\n          const accessToken = await linear.getFreshAccessToken(connection);\n          const issue = await linear.fetchIssueDetail(accessToken, issueReference, selectedIds, fetchSourceIds);\n          const matchesReference = issueId !== undefined ? issue?.id === issueId : issue?.identifier === identifier;\n          const winningSourceId = issue ? winningLinearSourceId(linear, selectedIds, issue) : null;\n          const isRouted = winningSourceId != null && (holdsLiveCard || routedSourceIds.includes(winningSourceId));\n          // Reads exactly like an issue that doesn't exist.\n          if (!issue || !matchesReference || !isRouted) {\n            return c.json({ error: 'issue_not_found' }, 404);\n          }\n          return c.json({\n            identifier: issue.identifier,\n            title: issue.title,\n            url: issue.url,\n            description: issue.description,\n          });\n        } catch (err) {\n          return linearFetchError(loose(c), err);\n        }\n      },\n    }),\n  );\n\n  return routes;\n}\n"],"mappings":";;;;;;;AA+BA,MAAM,UAAU;;AAGhB,SAAS,MAAM,GAA0B;CACvC,OAAO;AACT;;;;;;;;;;;AAiEA,eAAe,wBAAwB,EACrC,QACA,OACA,kBACA,eAMkC;CAClC,MAAM,WAAW,IAAI,IAAI,WAAW;CACpC,MAAM,eAAuC,CAAC;CAC9C,KAAK,MAAM,WAAW,MAAM,OAAO,aAAa;EAAE;EAAO,eAAe;CAAS,CAAC,GAChF,IAAI,QAAQ,qBAAqB,oBAAoB,QAAQ,SAAS,SAAS,IAAI,QAAQ,QAAQ,GACjG,aAAa,QAAQ,YAAY,QAAQ;CAG7C,OAAO;AACT;;;;;;AAOA,eAAe,iBACb,GACA,MACiF;CACjF,MAAM,KAAK,WAAW,CAAC;CACvB,MAAM,SAAS,KAAK,OAAO,CAAC;CAC5B,IAAI,CAAC,QAAQ,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,eAAe,GAAG,GAAG,EAAE;CACvE,IAAI,CAAC,OAAO,OACV,OAAO,EACL,UAAU,EAAE,KACV;EACE,OAAO;EACP,SAAS;CACX,GACA,GACF,EACF;CAEF,OAAO,EAAE,QAAQ;EAAE,OAAO,OAAO;EAAO,QAAQ,OAAO;CAAO,EAAE;AAClE;;;;;;AAOA,SAAS,iBAAiB,KAAoD;CAC5E,IAAI,QAAQ,KAAA,KAAa,QAAQ,IAAI,OAAO,KAAA;CAC5C,IAAI,IAAI,SAAS,QAAQ,CAAC,gBAAgB,KAAK,GAAG,GAAG,OAAO;CAC5D,OAAO;AACT;;AAGA,MAAM,sBAAsB;;AAE5B,SAAS,sBACP,QACA,WACA,OACe;CACf,MAAM,WAAW,UAAU,QAAO,aAAY,OAAO,mBAAmB,UAAU,KAAK,CAAC;CACxF,OAAO,SAAS,MAAK,aAAY,CAAC,SAAS,WAAW,cAAc,CAAC,KAAK,SAAS,MAAM;AAC3F;;;;;AAMA,eAAe,aACb,SACA,OACA,kBACA,YACA,SACA;CACA,IAAI,CAAC,QAAQ,WAAW,OAAO;CAC/B,IAAI,SAAS;EACX,MAAM,WAAW,MAAM,QAAQ,UAAU,cAAc;GAAE;GAAO,UAAU,eAAe,OAAO;EAAE,CAAC;EACnG,IAAI,UAAU,OAAO,SAAS,qBAAqB,mBAAmB,WAAW;CACnF;CACA,OAAO,QAAQ,UAAU,mBAAmB;EAC1C;EACA;EACA,QAAQ;GAAE,eAAe;GAAU,MAAM;GAAS,YAAY,UAAU;EAAa;CACvF,CAAC;AACH;;AAGA,SAAS,iBAAiB,GAAiB,KAAc;CACvD,IAAK,IAA2B,SAAS,kBACvC,OAAO,EAAE,KAAK,EAAE,OAAO,iBAAiB,GAAG,GAAG;CAEhD,IAAI,eAAe,6BAA8B,IAA4B,WAAW,KACtF,OAAO,EAAE,KAAK;EAAE,OAAO;EAA0B,SAAS,IAAI,0BAA0B,CAAC,CAAC;CAAQ,GAAG,GAAG;CAE1G,OAAO,EAAE,KAAK;EAAE,OAAO;EAAuB,SAAS,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;CAAE,GAAG,GAAG;AAChH;;;;;AAMA,SAAgB,kBAAkB,SAA+C;CAC/E,MAAM,SAAqB,CAAC;CAC5B,MAAM,EAAE,QAAQ,MAAM,aAAa,WAAW;CAC9C,MAAM,UAAU,QAAQ,MAAM,KAAK,KAAK,QAAQ;CAChD,MAAM,qBAA+C;EACnD,qBAAqB,QAAQ,MAAM;EACnC,oBAAoB,KAAK,QAAQ;EACjC,iBAAiB;CACnB;CAGA,OAAO,KACL,iBAAiB,sBAAsB;EACrC,QAAQ;EACR,cAAc;EACd,SAAS,OAAM,MAAK;GAClB,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,aAC1B,OAAO,EAAE,KAAK;IACZ,SAAS;IACT,WAAW;IACX,WAAW;IACX,QAAQ;IACR,aAAa,YAAY;GAC3B,CAAC;GAEH,MAAM,KAAK,WAAW,MAAM,CAAC,CAAC;GAC9B,MAAM,SAAS,KAAK,OAAO,MAAM,CAAC,CAAC;GACnC,IAAI,CAAC,QAAQ,OAAO,EAAE,KAAK;IAAE,OAAO;IAAgB,QAAQ;GAAgB,GAAG,GAAG;GAElF,IAAI,CAAC,OAAO,OACV,OAAO,EAAE,KAAK;IACZ,SAAS;IACT,sBAAsB;IACtB,WAAW;IACX,WAAW;IACX,QAAQ;IACR,aAAa,YAAY;GAC3B,CAAC;GAGH,MAAM,aAAa,MAAM,OAAO,eAAe,OAAO,KAAK;GAC3D,OAAO,EAAE,KAAK;IACZ,SAAS;IACT,WAAW,QAAQ,UAAU;IAC7B,WAAW,aAAa;KAAE,MAAM,WAAW;KAAe,QAAQ,WAAW;IAAgB,IAAI;IACjG,QAAQ,aAAa,UAAU;IAC/B,aAAa,YAAY;GAC3B,CAAC;EACH;CACF,CAAC,CACH;CAKA,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,eAAe,CAAC,QAC1C,OAAO;CAGT,MAAM,cAAc,QAAQ,eAAe,IAAI,QAAQ,WAAW,GAAA,CAAI,QAAQ,OAAO,EAAE,EAAE;CAGzF,OAAO,KACL,iBAAiB,wBAAwB;EACvC,QAAQ;EACR,cAAc;EACd,SAAS,OAAM,MAAK;GAClB,MAAM,WAAW,MAAM,iBAAiB,MAAM,CAAC,GAAG,IAAI;GACtD,IAAI,cAAc,UAAU,OAAO,SAAS;GAC5C,MAAM,QAAQ,YAAY,KAAK,SAAS,OAAO,OAAO,SAAS,OAAO,MAAM;GAC5E,OAAO,EAAE,SAAS,OAAO,kBAAkB,OAAO,WAAW,CAAC;EAChE;CACF,CAAC,CACH;CAGA,OAAO,KACL,iBAAiB,yBAAyB;EACxC,QAAQ;EACR,cAAc;EACd,SAAS,OAAM,MAAK;GAClB,MAAM,WAAW,MAAM,iBAAiB,MAAM,CAAC,GAAG,IAAI;GACtD,IAAI,cAAc,UAAU,OAAO,SAAS;GAC5C,MAAM,EAAE,OAAO,WAAW,SAAS;GAInC,MAAM,cAAc,YAAY,OAAO,EAAE,IAAI,MAAM,OAAO,CAAC;GAC3D,IAAI,CAAC,eAAe,YAAY,WAAW,UAAU,YAAY,UAAU,OAAO;IAChF,QAAQ,KAAK,0DAA0D;IACvE,OAAO,EAAE,SAAS,gBAAgB;GACpC;GAEA,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM;GAC/B,IAAI,CAAC,MAEH,OAAO,EAAE,SAAS,gBAAgB;GAGpC,IAAI;IACF,MAAM,SAAS,MAAM,OAAO,kBAAkB,MAAM,WAAW;IAC/D,MAAM,YAAY,MAAM,OAAO,eAAe,OAAO,WAAW;IAChE,MAAM,OAAO,iBAAiB;KAC5B;KACA;KACA,aAAa,OAAO;KACpB,cAAc,OAAO;KACrB,WAAW,OAAO;KAClB,OAAO,OAAO;KACd,eAAe,UAAU;KACzB,iBAAiB,UAAU;IAC7B,CAAC;GACH,SAAS,OAAO;IACd,QAAQ,KAAK,gEAAgE,MAAM,IAAI,KAAK;IAC5F,OAAO,EAAE,SAAS,gBAAgB;GACpC;GAEA,OAAO,EAAE,SAAS,oBAAoB;EACxC;CACF,CAAC,CACH;CAGA,OAAO,KACL,iBAAiB,wBAAwB;EACvC,QAAQ;EACR,cAAc;EACd,SAAS,OAAM,MAAK;GAClB,MAAM,WAAW,MAAM,iBAAiB,MAAM,CAAC,GAAG,IAAI;GACtD,IAAI,cAAc,UAAU,OAAO,SAAS;GAE5C,MAAM,aAAa,MAAM,OAAO,eAAe,SAAS,OAAO,KAAK;GACpE,IAAI,CAAC,YACH,OAAO,EAAE,KAAK;IAAE,OAAO;IAAwB,SAAS;GAA0C,GAAG,GAAG;GAG1G,IAAI;IACF,MAAM,cAAc,MAAM,OAAO,oBAAoB,UAAU;IAC/D,MAAM,WAAW,MAAM,OAAO,aAAa,WAAW;IACtD,OAAO,EAAE,KAAK,EAAE,SAAS,CAAC;GAC5B,SAAS,KAAK;IACZ,OAAO,iBAAiB,MAAM,CAAC,GAAG,GAAG;GACvC;EACF;CACF,CAAC,CACH;CAGA,OAAO,KACL,iBAAiB,qBAAqB;EACpC,QAAQ;EACR,cAAc;EACd,SAAS,OAAM,MAAK;GAClB,MAAM,WAAW,MAAM,iBAAiB,MAAM,CAAC,GAAG,IAAI;GACtD,IAAI,cAAc,UAAU,OAAO,SAAS;GAE5C,MAAM,aAAa,MAAM,OAAO,eAAe,SAAS,OAAO,KAAK;GACpE,IAAI,CAAC,YACH,OAAO,EAAE,KAAK;IAAE,OAAO;IAAwB,SAAS;GAAuC,GAAG,GAAG;GAGvG,IAAI;IACF,MAAM,cAAc,MAAM,OAAO,oBAAoB,UAAU;IAC/D,MAAM,QAAQ,MAAM,OAAO,UAAU,WAAW;IAChD,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC;GACzB,SAAS,KAAK;IACZ,OAAO,iBAAiB,MAAM,CAAC,GAAG,GAAG;GACvC;EACF;CACF,CAAC,CACH;CAKA,OAAO,KACL,iBAAiB,sBAAsB;EACrC,QAAQ;EACR,cAAc;EACd,SAAS,OAAM,MAAK;GAClB,MAAM,WAAW,MAAM,iBAAiB,MAAM,CAAC,GAAG,IAAI;GACtD,IAAI,cAAc,UAAU,OAAO,SAAS;GAE5C,MAAM,QAAQ,iBAAiB,EAAE,IAAI,MAAM,OAAO,CAAC;GACnD,IAAI,UAAU,MAAM,OAAO,EAAE,KAAK,EAAE,OAAO,iBAAiB,GAAG,GAAG;GAClE,MAAM,mBAAmB,EAAE,IAAI,MAAM,kBAAkB;GACvD,IAAI,oBAAoB,CAAC,QAAQ,KAAK,gBAAgB,GACpD,OAAO,EAAE,KAAK,EAAE,OAAO,6BAA6B,GAAG,GAAG;GAG5D,MAAM,aAAa,MAAM,OAAO,eAAe,SAAS,OAAO,KAAK;GACpE,IAAI,CAAC,YACH,OAAO,EAAE,KAAK;IAAE,OAAO;IAAwB,SAAS;GAAuC,GAAG,GAAG;GAGvG,MAAM,OAAO,YAAY;GAEzB,MAAM,aAAY,MADG,OAAO,UAAU;IAAE,OAAO,SAAS,OAAO;IAAO,gBAAgB,CAAC,QAAQ;GAAE,CAAC,EAAA,CACzE;GACzB,IAAI,CAAC,UAAU,SACb,OAAO,EAAE,KAAK;IAAE,OAAO;IAA0B,SAAS;GAA2C,GAAG,GAAG;GAI7G,MAAM,cAAc,UAAU,aAAa,CAAC;GAI5C,MAAM,eAAe,mBACjB,MAAM,wBAAwB;IAC5B;IACA,OAAO,SAAS,OAAO;IACvB;IACA;GACF,CAAC,IACD;GACJ,MAAM,kBAAkB,eAAe,OAAO,KAAK,YAAY,IAAI;GACnE,IAAI,gBAAgB,WAAW,GAC7B,OAAO,EAAE,KAAK;IAAE,QAAQ,CAAC;IAAG,YAAY;GAAK,CAAC;GAGhD,IAAI;IACF,MAAM,cAAc,MAAM,OAAO,oBAAoB,UAAU;IAC/D,MAAM,EAAE,QAAQ,eAAe,MAAM,OAAO,OAAO,WAAW;KAC5D,YAAY;MAAE,MAAM;MAAS;KAAY;KACzC,WAAW;KACX,sBAAsB;KACtB,QAAQ;IACV,CAAC;IAMD,MAAM,gBAHe,eACjB,OAAO,QAAO,UAAS,MAAM,YAAY,QAAQ,gBAAgB,SAAS,MAAM,QAAQ,CAAC,IACzF,OAAA,CAC8B,KAAI,WAAU;KAC9C,IAAI,MAAM;KACV,YAAY,MAAM;KAClB,OAAO,MAAM;KACb,KAAK,MAAM;KACX,OAAO,MAAM,SAAS;KACtB,WAAW,MAAM,aAAa;KAC9B,eAAe,MAAM,YAAY;KACjC,UAAU,MAAM;KAChB,SAAS,MAAM;KACf,MAAM,MAAM;KACZ,QAAQ,MAAM;KACd,WAAW,MAAM;KACjB,WAAW,MAAM;KACjB,UAAU,MAAM,YAAY;KAC5B,WAAW,MAAM,aAAa;IAChC,EAAE;IACF,IAAI,oBAAoB,gBAAgB,QAAQ,qBAC9C,MAAM,QAAQ,oBAAoB;KAChC,OAAO,SAAS,OAAO;KACvB,QAAQ,SAAS,OAAO;KACxB;KACA,QAAQ;KACR;IACF,CAAC;IAEH,OAAO,EAAE,KAAK;KAAE,QAAQ;KAAc;IAAW,CAAC;GACpD,SAAS,KAAK;IACZ,OAAO,iBAAiB,MAAM,CAAC,GAAG,GAAG;GACvC;EACF;CACF,CAAC,CACH;CAEA,OAAO,KACL,iBAAiB,kCAAkC;EACjD,QAAQ;EACR,cAAc;EACd,SAAS,OAAM,MAAK;GAClB,MAAM,WAAW,MAAM,iBAAiB,MAAM,CAAC,GAAG,IAAI;GACtD,IAAI,cAAc,UAAU,OAAO,SAAS;GAE5C,MAAM,aAAa,EAAE,IAAI,MAAM,YAAY;GAC3C,IAAI,CAAC,oBAAoB,KAAK,UAAU,GAAG,OAAO,EAAE,KAAK,EAAE,OAAO,qBAAqB,GAAG,GAAG;GAC7F,MAAM,UAAU,EAAE,IAAI,MAAM,SAAS;GACrC,IAAI,YAAY,KAAA,MAAc,QAAQ,WAAW,KAAK,QAAQ,SAAS,MACrE,OAAO,EAAE,KAAK,EAAE,OAAO,mBAAmB,GAAG,GAAG;GAElD,MAAM,iBAAiB,WAAW;GAClC,MAAM,mBAAmB,EAAE,IAAI,MAAM,kBAAkB;GACvD,IAAI,CAAC,oBAAoB,CAAC,QAAQ,KAAK,gBAAgB,GACrD,OAAO,EAAE,KAAK,EAAE,OAAO,6BAA6B,GAAG,GAAG;GAG5D,MAAM,aAAa,MAAM,OAAO,eAAe,SAAS,OAAO,KAAK;GACpE,IAAI,CAAC,YACH,OAAO,EAAE,KAAK;IAAE,OAAO;IAAwB,SAAS;GAAuC,GAAG,GAAG;GAGvG,MAAM,OAAO,YAAY;GAEzB,MAAM,aAAY,MADG,OAAO,UAAU;IAAE,OAAO,SAAS,OAAO;IAAO,gBAAgB,CAAC,QAAQ;GAAE,CAAC,EAAA,CACzE;GACzB,IAAI,CAAC,UAAU,SACb,OAAO,EAAE,KAAK;IAAE,OAAO;IAA0B,SAAS;GAA2C,GAAG,GAAG;GAE7G,MAAM,cAAc,UAAU,aAAa,CAAC;GAC5C,MAAM,kBAAkB,OAAO,KAC7B,MAAM,wBAAwB;IAC5B;IACA,OAAO,SAAS,OAAO;IACvB;IACA;GACF,CAAC,CACH;GAMA,MAAM,OAAO,MAAM,aAAa,SAAS,SAAS,OAAO,OAAO,kBAAkB,YAAY,OAAO;GACrG,MAAM,gBACJ,QAAQ,QACR,EAAE,QAAQ,SAAS,mBAAmB,QAAQ,QAAQ,IAAI,IAAI,2BAA2B,KAAK,MAAM;GACtG,IAAI,gBAAgB,WAAW,KAAK,CAAC,eAAe,OAAO,EAAE,KAAK,EAAE,OAAO,kBAAkB,GAAG,GAAG;GACnG,MAAM,iBAAiB,gBAAgB,cAAc;GAErD,IAAI;IACF,MAAM,cAAc,MAAM,OAAO,oBAAoB,UAAU;IAC/D,MAAM,QAAQ,MAAM,OAAO,iBAAiB,aAAa,gBAAgB,aAAa,cAAc;IACpG,MAAM,mBAAmB,YAAY,KAAA,IAAY,OAAO,OAAO,UAAU,OAAO,eAAe;IAC/F,MAAM,kBAAkB,QAAQ,sBAAsB,QAAQ,aAAa,KAAK,IAAI;IACpF,MAAM,WAAW,mBAAmB,SAAS,iBAAiB,gBAAgB,SAAS,eAAe;IAEtG,IAAI,CAAC,SAAS,CAAC,oBAAoB,CAAC,UAClC,OAAO,EAAE,KAAK,EAAE,OAAO,kBAAkB,GAAG,GAAG;IAEjD,OAAO,EAAE,KAAK;KACZ,YAAY,MAAM;KAClB,OAAO,MAAM;KACb,KAAK,MAAM;KACX,aAAa,MAAM;IACrB,CAAC;GACH,SAAS,KAAK;IACZ,OAAO,iBAAiB,MAAM,CAAC,GAAG,GAAG;GACvC;EACF;CACF,CAAC,CACH;CAEA,OAAO;AACT"}

package/dist/integrations/linear/rules.d.ts

@@ -0,0 +1,54 @@
+import type { BoardRegistry } from '../../boards/index.js';
+import type { FactoryProjectsStorage } from '../../storage/domains/projects/base.js';
+import type { WorkItemsStorage } from '../../storage/domains/work-items/base.js';
+import type { IntegrationContext } from '../base.js';
+import type { LinearEventRules } from './default-rules.js';
+export interface LinearIssueIngress {
+    id: string;
+    identifier: string;
+    title: string;
+    url: string;
+    state: string;
+    stateType: string;
+    priorityLabel: string;
+    assignee: string | null;
+    /** Display name of the Linear user who created the issue, when available. */
+    creator: string | null;
+    team: string | null;
+    labels: string[];
+    createdAt: string;
+    updatedAt: string;
+    /** Linear source the issue was read from (project or team); resolves the bound board via `intakeBoards`. */
+    sourceId?: string | null;
+    projectId?: string | null;
+}
+export interface LinearRulesOptions {
+    projects: Pick<FactoryProjectsStorage, 'get'>;
+    storage: WorkItemsStorage;
+    configVersion: string;
+    boards: BoardRegistry;
+    linearRules: LinearEventRules;
+}
+export interface LinearRulesIngress {
+    orgId: string;
+    userId: string;
+    factoryProjectId: string;
+    issues: LinearIssueIngress[];
+    /** Board id per bound Linear source id, from the project's intake bindings. */
+    intakeBoards?: Readonly<Record<string, string>>;
+}
+type IngressStatus = 'committed' | 'replayed' | 'missing';
+export declare class LinearRules {
+    #private;
+    private readonly options;
+    constructor(options: LinearRulesOptions);
+    ingest(input: LinearRulesIngress): Promise<{
+        status: IngressStatus;
+        ingested: number;
+    }>;
+}
+export declare function attachLinearRules(linear: {
+    readonly rules: LinearEventRules;
+}, context: IntegrationContext): ((input: LinearRulesIngress) => Promise<unknown>) | undefined;
+export {};
+//# sourceMappingURL=rules.d.ts.map

package/dist/integrations/linear/rules.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rules.d.ts","sourceRoot":"","sources":["../../../src/integrations/linear/rules.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAI3D,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,wCAAwC,CAAC;AACrF,OAAO,KAAK,EAAe,gBAAgB,EAAE,MAAM,0CAA0C,CAAC;AAC9F,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAErD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAoB3D,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,6EAA6E;IAC7E,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,4GAA4G;IAC5G,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,IAAI,CAAC,sBAAsB,EAAE,KAAK,CAAC,CAAC;IAC9C,OAAO,EAAE,gBAAgB,CAAC;IAC1B,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,aAAa,CAAC;IACtB,WAAW,EAAE,gBAAgB,CAAC;CAC/B;AAED,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,gBAAgB,EAAE,MAAM,CAAC;IACzB,MAAM,EAAE,kBAAkB,EAAE,CAAC;IAC7B,+EAA+E;IAC/E,YAAY,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CACjD;AAED,KAAK,aAAa,GAAG,WAAW,GAAG,UAAU,GAAG,SAAS,CAAC;AAE1D,qBAAa,WAAW;;IACV,OAAO,CAAC,QAAQ,CAAC,OAAO;gBAAP,OAAO,EAAE,kBAAkB;IAElD,MAAM,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,aAAa,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;CAyJ9F;AAED,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE;IAAE,QAAQ,CAAC,KAAK,EAAE,gBAAgB,CAAA;CAAE,EAC5C,OAAO,EAAE,kBAAkB,GAC1B,CAAC,CAAC,KAAK,EAAE,kBAAkB,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,SAAS,CAU/D"}