@mastra/factory 0.0.0-aggregate-trace-20261015182851

package/dist/integrations/platform/gitlab/event-worker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"event-worker.js","names":["#client","#controller","#gitlab","#storage","#listConnections","#ingestFactoryEvent","#intervalMs","#now","#process","#leaseOwner","#leaseTtlMs","#leaseProvider","#running","#startedAt","#settings","#schedule","#timer","#stopLeaseRenewal","#inFlight","#hasLease","#leaseKey","#tick","#ensureLease","#poll","#startLeaseRenewal","#leaseRenewalTimer","#pollConnection","#saveSettings","#processEvent"],"sources":["../../../../src/integrations/platform/gitlab/event-worker.ts"],"sourcesContent":["import type { MountedMastraCode } from '@mastra/code-sdk';\nimport { isLeaseProvider, NoopLeaseProvider } from '@mastra/core/events';\nimport type { LeaseProvider, PubSub } from '@mastra/core/events';\nimport { MastraWorker } from '@mastra/core/worker';\nimport type { WorkerDeps } from '@mastra/core/worker';\n\nimport type { IntegrationStorageHandle } from '../../../storage/domains/integrations/base.js';\nimport type { GitLabWebhookDispatchIntegration } from '../../gitlab/webhook-dispatch.js';\nimport { parseGitLabWebhookBody, processGitLabWebhook } from '../../gitlab/webhook.js';\nimport type { ParsedGitLabWebhook } from '../../gitlab/webhook.js';\nimport type { PlatformApiClient } from '../api-client.js';\nimport { PlatformApiError } from '../api-client.js';\n\nconst DEFAULT_POLL_INTERVAL_MS = 20_000;\nconst EVENT_PAGE_SIZE = 500;\n/**\n * Pages drained per connection per cycle. A connection that never runs dry\n * (a busy group webhook, or a backlog after downtime) hands over to the next\n * connection after this many pages and resumes from its saved cursor next tick.\n */\nconst MAX_PAGES_PER_CONNECTION_PER_CYCLE = 10;\nconst MIN_LEASE_TTL_MS = 30_000;\nconst CURSOR_ORG_ID = '__platform_gitlab_event_worker__';\nconst CURSOR_USER_ID = 'worker';\nconst DELIVERY_ID_PREFIX = 'platform';\n\ntype PlatformGitLabEventWorkerSettings = {\n  version: 1;\n  connections: Record<string, { afterEventId: string }>;\n};\n\nexport type PlatformGitLabEventStorage = IntegrationStorageHandle<\n  Record<string, unknown>,\n  PlatformGitLabEventWorkerSettings,\n  Record<string, unknown>\n>;\n\n/** One row of the Platform integration event log. */\nexport interface IntegrationEventEntry {\n  id: string;\n  timestamp: number;\n  integrationId: string;\n  eventType: string;\n  sourceEventId: string | null;\n  payload: unknown;\n}\n\nexport interface PlatformGitLabEventConnection {\n  id: string;\n  status: 'active' | 'needs_reauth';\n}\n\nexport type PlatformGitLabEventDispatchIntegration = GitLabWebhookDispatchIntegration;\n\nexport interface PlatformGitLabEventWorkerConfig {\n  client: PlatformApiClient;\n  controller: MountedMastraCode['controller'];\n  gitlab: PlatformGitLabEventDispatchIntegration;\n  storage: PlatformGitLabEventStorage;\n  /** Platform connections to tail; only `active` ones are polled. */\n  listConnections: () => Promise<PlatformGitLabEventConnection[]>;\n  ingestFactoryEvent?: (event: ParsedGitLabWebhook) => Promise<unknown>;\n  intervalMs?: number;\n  now?: () => number;\n  process?: typeof processGitLabWebhook;\n}\n\n/**\n * Tails the Platform event log for every active GitLab connection and feeds\n * each stored webhook body through the same ingress the direct\n * `/web/gitlab/webhook` route uses. A Platform-managed connection has no\n * project webhook pointing at Factory, so this is how issue, note, merge\n * request and push events reach the rules engine and subscribed sessions.\n *\n * One replica polls at a time (lease). Each connection keeps its own cursor,\n * persisted only after a whole page has been processed, so a crash mid-page\n * replays the page rather than losing it; replay handling in the rules ingress\n * and the delivery-id dedupe keys make that safe.\n */\nexport class PlatformGitLabEventWorker extends MastraWorker {\n  readonly name = 'platform-gitlab-events';\n\n  readonly #client: PlatformApiClient;\n  readonly #controller: MountedMastraCode['controller'];\n  readonly #gitlab: PlatformGitLabEventDispatchIntegration;\n  readonly #storage: PlatformGitLabEventStorage;\n  readonly #listConnections: () => Promise<PlatformGitLabEventConnection[]>;\n  readonly #ingestFactoryEvent: ((event: ParsedGitLabWebhook) => Promise<unknown>) | undefined;\n  readonly #intervalMs: number;\n  readonly #now: () => number;\n  readonly #process: typeof processGitLabWebhook;\n  readonly #leaseOwner = globalThis.crypto.randomUUID();\n\n  #running = false;\n  #timer: ReturnType<typeof setTimeout> | undefined;\n  #leaseRenewalTimer: ReturnType<typeof setInterval> | undefined;\n  #inFlight: Promise<void> | undefined;\n  #leaseProvider: LeaseProvider = NoopLeaseProvider;\n  #leaseTtlMs: number;\n  #hasLease = false;\n  #startedAt = 0;\n  #settings: PlatformGitLabEventWorkerSettings = { version: 1, connections: {} };\n\n  constructor(config: PlatformGitLabEventWorkerConfig) {\n    super();\n    this.#client = config.client;\n    this.#controller = config.controller;\n    this.#gitlab = config.gitlab;\n    this.#storage = config.storage;\n    this.#listConnections = config.listConnections;\n    this.#ingestFactoryEvent = config.ingestFactoryEvent;\n    this.#intervalMs = config.intervalMs ?? DEFAULT_POLL_INTERVAL_MS;\n    if (!Number.isFinite(this.#intervalMs) || this.#intervalMs <= 0) {\n      throw new Error('Platform GitLab event polling interval must be a positive number.');\n    }\n    this.#leaseTtlMs = Math.max(MIN_LEASE_TTL_MS, this.#intervalMs * 3);\n    this.#now = config.now ?? Date.now;\n    this.#process = config.process ?? processGitLabWebhook;\n  }\n\n  async init(deps: WorkerDeps): Promise<void> {\n    await super.init(deps);\n    this.#leaseProvider = getLeaseProvider(deps.pubsub);\n  }\n\n  async start(): Promise<void> {\n    if (this.#running) return;\n    if (!this.deps) throw new Error('PlatformGitLabEventWorker: call init() before start()');\n\n    this.#startedAt = this.#now() - 1;\n    this.#settings = normalizeSettings(await this.#storage.settings.get(CURSOR_ORG_ID, CURSOR_USER_ID));\n    this.#running = true;\n    this.deps.logger.info('Platform GitLab event polling started', {\n      intervalMs: this.#intervalMs,\n      leaseTtlMs: this.#leaseTtlMs,\n    });\n    this.#schedule(0);\n  }\n\n  async stop(): Promise<void> {\n    if (!this.#running) return;\n    this.#running = false;\n    if (this.#timer) clearTimeout(this.#timer);\n    this.#timer = undefined;\n    this.#stopLeaseRenewal();\n    await this.#inFlight;\n    if (this.#hasLease) {\n      await this.#leaseProvider.releaseLease(this.#leaseKey(), this.#leaseOwner).catch(() => undefined);\n      this.#hasLease = false;\n    }\n  }\n\n  get isRunning(): boolean {\n    return this.#running;\n  }\n\n  #schedule(delayMs: number): void {\n    if (!this.#running) return;\n    this.#timer = setTimeout(() => {\n      this.#timer = undefined;\n      const run = this.#tick();\n      this.#inFlight = run;\n      void run.finally(() => {\n        if (this.#inFlight === run) this.#inFlight = undefined;\n      });\n    }, delayMs);\n    this.#timer.unref?.();\n  }\n\n  async #tick(): Promise<void> {\n    let nextDelay = this.#intervalMs;\n    try {\n      if (!(await this.#ensureLease())) return;\n      nextDelay = await this.#poll();\n    } catch (error) {\n      nextDelay = retryDelay(error, this.#intervalMs);\n      this.deps?.logger.error('Platform GitLab event polling cycle failed', {\n        error: error instanceof Error ? error.message : String(error),\n        retryInMs: nextDelay,\n      });\n    } finally {\n      this.#schedule(nextDelay);\n    }\n  }\n\n  async #ensureLease(): Promise<boolean> {\n    if (this.#hasLease) return true;\n    const result = await this.#leaseProvider.acquireLease(this.#leaseKey(), this.#leaseOwner, this.#leaseTtlMs);\n    this.#hasLease = result.acquired;\n    if (this.#hasLease) this.#startLeaseRenewal();\n    return this.#hasLease;\n  }\n\n  #startLeaseRenewal(): void {\n    if (this.#leaseRenewalTimer) return;\n    this.#leaseRenewalTimer = setInterval(\n      () => {\n        void this.#leaseProvider\n          .renewLease(this.#leaseKey(), this.#leaseOwner, this.#leaseTtlMs)\n          .then(renewed => {\n            if (!renewed) {\n              this.#hasLease = false;\n              this.#stopLeaseRenewal();\n            }\n          })\n          .catch(error => {\n            this.#hasLease = false;\n            this.#stopLeaseRenewal();\n            this.deps?.logger.warn('Platform GitLab event polling lease renewal failed', {\n              error: error instanceof Error ? error.message : String(error),\n            });\n          });\n      },\n      Math.floor(this.#leaseTtlMs / 3),\n    );\n    this.#leaseRenewalTimer.unref?.();\n  }\n\n  #stopLeaseRenewal(): void {\n    if (this.#leaseRenewalTimer) clearInterval(this.#leaseRenewalTimer);\n    this.#leaseRenewalTimer = undefined;\n  }\n\n  async #poll(): Promise<number> {\n    const connections = (await this.#listConnections()).filter(connection => connection.status === 'active');\n    let retryInMs = this.#intervalMs;\n\n    for (const connection of connections) {\n      if (!this.#running || !this.#hasLease) break;\n      try {\n        await this.#pollConnection(connection.id);\n      } catch (error) {\n        if (error instanceof PlatformApiError && (error.status === 401 || error.status === 404)) {\n          // Platform no longer serves this connection (revoked, expired or\n          // deleted). Its status will read needs_reauth on the next listing;\n          // nothing to retry here, so the other connections keep flowing.\n          this.deps?.logger.warn('Platform GitLab connection needs reauthorization; skipped this cycle', {\n            connectionId: connection.id,\n            status: error.status,\n          });\n          continue;\n        }\n        const delay = retryDelay(error, this.#intervalMs);\n        retryInMs = Math.max(retryInMs, delay);\n        this.deps?.logger.error('Platform GitLab connection event polling failed', {\n          connectionId: connection.id,\n          error: error instanceof Error ? error.message : String(error),\n          retryInMs: delay,\n        });\n        if (error instanceof PlatformApiError && error.status === 429) break;\n      }\n    }\n    return retryInMs;\n  }\n\n  async #pollConnection(connectionId: string): Promise<void> {\n    if (!this.#settings.connections[connectionId]) {\n      // Event ids are Redis stream ids (`<unix ms>-<sequence>`), so a\n      // synthesized id at start time skips history the same way the GitHub\n      // worker's start timestamp does. Events that arrived before Factory was\n      // deployed are not work Factory was asked to do.\n      this.#settings.connections[connectionId] = { afterEventId: `${this.#startedAt}-0` };\n      await this.#saveSettings();\n    }\n\n    for (let pageIndex = 0; this.#running && this.#hasLease; pageIndex += 1) {\n      if (pageIndex >= MAX_PAGES_PER_CONNECTION_PER_CYCLE) {\n        this.deps?.logger.debug('Platform GitLab connection page budget reached; resuming next cycle', {\n          connectionId,\n          pages: pageIndex,\n        });\n        return;\n      }\n      const cursor: { afterEventId: string } = this.#settings.connections[connectionId]!;\n      const query = new URLSearchParams({ afterEventId: cursor.afterEventId, limit: String(EVENT_PAGE_SIZE) });\n      const pollStartedAt = performance.now();\n      const page = await this.#client.request<{ events: IntegrationEventEntry[]; nextCursor: string | null }>(\n        'GET',\n        `/v2/connections/${encodeURIComponent(connectionId)}/events?${query}`,\n      );\n      this.deps?.logger.debug('Platform GitLab connection event poll completed', {\n        connectionId,\n        eventCount: page.events.length,\n        latencyMs: Math.round(performance.now() - pollStartedAt),\n      });\n      if (page.events.length === 0 || !page.nextCursor) return;\n\n      for (const event of page.events) {\n        if (!this.#running || !this.#hasLease) return;\n        await this.#processEvent(connectionId, event);\n      }\n\n      if (page.nextCursor === cursor.afterEventId) return;\n      // A replica that lost its lease while processing this page must not\n      // write a cursor over one the new holder has already advanced. The\n      // page is replayed there; delivery is deduplicated by delivery id.\n      if (!this.#hasLease) return;\n      this.#settings.connections[connectionId] = { afterEventId: page.nextCursor };\n      await this.#saveSettings();\n    }\n  }\n\n  async #processEvent(connectionId: string, event: IntegrationEventEntry): Promise<void> {\n    if (!event.id) {\n      this.deps?.logger.warn('Platform GitLab event log returned an event without an id', { connectionId });\n      return;\n    }\n    const deliveryId = `${DELIVERY_ID_PREFIX}:${connectionId}:${event.id}`;\n    const parsed = parseGitLabWebhookBody(event.payload, deliveryId);\n    if (!parsed) {\n      // Pipelines, deployments, wiki edits and the like: acknowledged and\n      // dropped, exactly as the direct route treats an unsupported event header.\n      this.deps?.logger.debug('Platform GitLab event ignored: unsupported or malformed body', {\n        connectionId,\n        eventId: event.id,\n        eventType: event.eventType,\n      });\n      return;\n    }\n\n    const result = await this.#process(parsed, {\n      ingestFactoryEvent: this.#ingestFactoryEvent,\n      controller: this.#controller,\n      // The integration supplies subscription storage and the project-member\n      // trust check, so the dispatcher's default author gate applies unchanged.\n      gitlab: this.#gitlab,\n      sourceConnectionId: connectionId,\n      onConnectionMismatch: subscription => {\n        // Expected whenever two connections reach the same project: the\n        // event is delivered by the connection that created the subscription.\n        this.deps?.logger.debug('Platform GitLab event skipped: subscription belongs to another connection', {\n          deliveryId,\n          subscriptionId: subscription.id,\n          subscriptionConnectionId: subscription.data.installationExternalId,\n        });\n      },\n      onTargetSkipped: subscription => {\n        // Routine when a subscription's thread belongs to another deployment,\n        // so this stays at debug rather than warning on a loop.\n        this.deps?.logger.debug('Platform GitLab event skipped: thread is not held here', {\n          deliveryId,\n          subscriptionId: subscription.id,\n          threadId: subscription.threadId,\n        });\n      },\n      onSenderRejected: notification => {\n        this.deps?.logger.debug('Platform GitLab event dropped: sender not authorized', {\n          deliveryId,\n          repository: notification.metadata.projectPath,\n          sender: notification.metadata.sender,\n          kind: notification.kind,\n        });\n      },\n      onTargetError: (subscription, error) => {\n        this.deps?.logger.error('Platform GitLab event delivery failed for a subscription', {\n          deliveryId,\n          subscriptionId: subscription.id,\n          resourceId: subscription.resourceId,\n          threadId: subscription.threadId,\n          error: error instanceof Error ? error.message : String(error),\n        });\n      },\n    });\n    if (result.status !== 202) {\n      this.deps?.logger.warn('Platform GitLab event was not accepted by the webhook processor', {\n        connectionId,\n        deliveryId,\n        status: result.status,\n      });\n    }\n  }\n\n  async #saveSettings(): Promise<void> {\n    await this.#storage.settings.save(CURSOR_ORG_ID, CURSOR_USER_ID, this.#settings);\n  }\n\n  #leaseKey(): string {\n    return `${this.name}:${this.#storage.integrationId}`;\n  }\n}\n\nfunction getLeaseProvider(pubsub: PubSub): LeaseProvider {\n  const getProvider = (pubsub as PubSub & { getLeaseProvider?: () => LeaseProvider | undefined }).getLeaseProvider;\n  if (typeof getProvider === 'function') return getProvider.call(pubsub) ?? NoopLeaseProvider;\n  return isLeaseProvider(pubsub) ? pubsub : NoopLeaseProvider;\n}\n\nfunction normalizeSettings(value: PlatformGitLabEventWorkerSettings | null): PlatformGitLabEventWorkerSettings {\n  if (!value || value.version !== 1 || !value.connections || typeof value.connections !== 'object') {\n    return { version: 1, connections: {} };\n  }\n  const connections: PlatformGitLabEventWorkerSettings['connections'] = {};\n  for (const [connectionId, cursor] of Object.entries(value.connections)) {\n    if (typeof cursor?.afterEventId === 'string' && cursor.afterEventId.length > 0) {\n      connections[connectionId] = { afterEventId: cursor.afterEventId };\n    }\n  }\n  return { version: 1, connections };\n}\n\nfunction retryDelay(error: unknown, fallbackMs: number): number {\n  if (error instanceof PlatformApiError && error.status === 429 && error.retryAfterSeconds !== null) {\n    return Math.max(fallbackMs, error.retryAfterSeconds * 1_000);\n  }\n  return fallbackMs;\n}\n"],"mappings":";;;;;AAaA,MAAM,2BAA2B;AACjC,MAAM,kBAAkB;;;;;;AAMxB,MAAM,qCAAqC;AAC3C,MAAM,mBAAmB;AACzB,MAAM,gBAAgB;AACtB,MAAM,iBAAiB;AACvB,MAAM,qBAAqB;;;;;;;;;;;;;AAuD3B,IAAa,4BAAb,cAA+C,aAAa;CAC1D,OAAgB;CAEhB;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA,cAAuB,WAAW,OAAO,WAAW;CAEpD,WAAW;CACX;CACA;CACA;CACA,iBAAgC;CAChC;CACA,YAAY;CACZ,aAAa;CACb,YAA+C;EAAE,SAAS;EAAG,aAAa,CAAC;CAAE;CAE7E,YAAY,QAAyC;EACnD,MAAM;EACN,KAAKA,UAAU,OAAO;EACtB,KAAKC,cAAc,OAAO;EAC1B,KAAKC,UAAU,OAAO;EACtB,KAAKC,WAAW,OAAO;EACvB,KAAKC,mBAAmB,OAAO;EAC/B,KAAKC,sBAAsB,OAAO;EAClC,KAAKC,cAAc,OAAO,cAAc;EACxC,IAAI,CAAC,OAAO,SAAS,KAAKA,WAAW,KAAK,KAAKA,eAAe,GAC5D,MAAM,IAAI,MAAM,mEAAmE;EAErF,KAAKI,cAAc,KAAK,IAAI,kBAAkB,KAAKJ,cAAc,CAAC;EAClE,KAAKC,OAAO,OAAO,OAAO,KAAK;EAC/B,KAAKC,WAAW,OAAO,WAAW;CACpC;CAEA,MAAM,KAAK,MAAiC;EAC1C,MAAM,MAAM,KAAK,IAAI;EACrB,KAAKG,iBAAiB,iBAAiB,KAAK,MAAM;CACpD;CAEA,MAAM,QAAuB;EAC3B,IAAI,KAAKC,UAAU;EACnB,IAAI,CAAC,KAAK,MAAM,MAAM,IAAI,MAAM,uDAAuD;EAEvF,KAAKC,aAAa,KAAKN,KAAK,IAAI;EAChC,KAAKO,YAAY,kBAAkB,MAAM,KAAKX,SAAS,SAAS,IAAI,eAAe,cAAc,CAAC;EAClG,KAAKS,WAAW;EAChB,KAAK,KAAK,OAAO,KAAK,yCAAyC;GAC7D,YAAY,KAAKN;GACjB,YAAY,KAAKI;EACnB,CAAC;EACD,KAAKK,UAAU,CAAC;CAClB;CAEA,MAAM,OAAsB;EAC1B,IAAI,CAAC,KAAKH,UAAU;EACpB,KAAKA,WAAW;EAChB,IAAI,KAAKI,QAAQ,aAAa,KAAKA,MAAM;EACzC,KAAKA,SAAS,KAAA;EACd,KAAKC,kBAAkB;EACvB,MAAM,KAAKC;EACX,IAAI,KAAKC,WAAW;GAClB,MAAM,KAAKR,eAAe,aAAa,KAAKS,UAAU,GAAG,KAAKX,WAAW,CAAC,CAAC,YAAY,KAAA,CAAS;GAChG,KAAKU,YAAY;EACnB;CACF;CAEA,IAAI,YAAqB;EACvB,OAAO,KAAKP;CACd;CAEA,UAAU,SAAuB;EAC/B,IAAI,CAAC,KAAKA,UAAU;EACpB,KAAKI,SAAS,iBAAiB;GAC7B,KAAKA,SAAS,KAAA;GACd,MAAM,MAAM,KAAKK,MAAM;GACvB,KAAKH,YAAY;GACjB,IAAS,cAAc;IACrB,IAAI,KAAKA,cAAc,KAAK,KAAKA,YAAY,KAAA;GAC/C,CAAC;EACH,GAAG,OAAO;EACV,KAAKF,OAAO,QAAQ;CACtB;CAEA,MAAMK,QAAuB;EAC3B,IAAI,YAAY,KAAKf;EACrB,IAAI;GACF,IAAI,CAAE,MAAM,KAAKgB,aAAa,GAAI;GAClC,YAAY,MAAM,KAAKC,MAAM;EAC/B,SAAS,OAAO;GACd,YAAY,WAAW,OAAO,KAAKjB,WAAW;GAC9C,KAAK,MAAM,OAAO,MAAM,8CAA8C;IACpE,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;IAC5D,WAAW;GACb,CAAC;EACH,UAAU;GACR,KAAKS,UAAU,SAAS;EAC1B;CACF;CAEA,MAAMO,eAAiC;EACrC,IAAI,KAAKH,WAAW,OAAO;EAC3B,MAAM,SAAS,MAAM,KAAKR,eAAe,aAAa,KAAKS,UAAU,GAAG,KAAKX,aAAa,KAAKC,WAAW;EAC1G,KAAKS,YAAY,OAAO;EACxB,IAAI,KAAKA,WAAW,KAAKK,mBAAmB;EAC5C,OAAO,KAAKL;CACd;CAEA,qBAA2B;EACzB,IAAI,KAAKM,oBAAoB;EAC7B,KAAKA,qBAAqB,kBAClB;GACJ,KAAUd,eACP,WAAW,KAAKS,UAAU,GAAG,KAAKX,aAAa,KAAKC,WAAW,CAAC,CAChE,MAAK,YAAW;IACf,IAAI,CAAC,SAAS;KACZ,KAAKS,YAAY;KACjB,KAAKF,kBAAkB;IACzB;GACF,CAAC,CAAC,CACD,OAAM,UAAS;IACd,KAAKE,YAAY;IACjB,KAAKF,kBAAkB;IACvB,KAAK,MAAM,OAAO,KAAK,sDAAsD,EAC3E,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAC9D,CAAC;GACH,CAAC;EACL,GACA,KAAK,MAAM,KAAKP,cAAc,CAAC,CACjC;EACA,KAAKe,mBAAmB,QAAQ;CAClC;CAEA,oBAA0B;EACxB,IAAI,KAAKA,oBAAoB,cAAc,KAAKA,kBAAkB;EAClE,KAAKA,qBAAqB,KAAA;CAC5B;CAEA,MAAMF,QAAyB;EAC7B,MAAM,eAAe,MAAM,KAAKnB,iBAAiB,EAAA,CAAG,QAAO,eAAc,WAAW,WAAW,QAAQ;EACvG,IAAI,YAAY,KAAKE;EAErB,KAAK,MAAM,cAAc,aAAa;GACpC,IAAI,CAAC,KAAKM,YAAY,CAAC,KAAKO,WAAW;GACvC,IAAI;IACF,MAAM,KAAKO,gBAAgB,WAAW,EAAE;GAC1C,SAAS,OAAO;IACd,IAAI,iBAAiB,qBAAqB,MAAM,WAAW,OAAO,MAAM,WAAW,MAAM;KAIvF,KAAK,MAAM,OAAO,KAAK,wEAAwE;MAC7F,cAAc,WAAW;MACzB,QAAQ,MAAM;KAChB,CAAC;KACD;IACF;IACA,MAAM,QAAQ,WAAW,OAAO,KAAKpB,WAAW;IAChD,YAAY,KAAK,IAAI,WAAW,KAAK;IACrC,KAAK,MAAM,OAAO,MAAM,mDAAmD;KACzE,cAAc,WAAW;KACzB,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;KAC5D,WAAW;IACb,CAAC;IACD,IAAI,iBAAiB,oBAAoB,MAAM,WAAW,KAAK;GACjE;EACF;EACA,OAAO;CACT;CAEA,MAAMoB,gBAAgB,cAAqC;EACzD,IAAI,CAAC,KAAKZ,UAAU,YAAY,eAAe;GAK7C,KAAKA,UAAU,YAAY,gBAAgB,EAAE,cAAc,GAAG,KAAKD,WAAW,IAAI;GAClF,MAAM,KAAKc,cAAc;EAC3B;EAEA,KAAK,IAAI,YAAY,GAAG,KAAKf,YAAY,KAAKO,WAAW,aAAa,GAAG;GACvE,IAAI,aAAa,oCAAoC;IACnD,KAAK,MAAM,OAAO,MAAM,uEAAuE;KAC7F;KACA,OAAO;IACT,CAAC;IACD;GACF;GACA,MAAM,SAAmC,KAAKL,UAAU,YAAY;GACpE,MAAM,QAAQ,IAAI,gBAAgB;IAAE,cAAc,OAAO;IAAc,OAAO,OAAO,eAAe;GAAE,CAAC;GACvG,MAAM,gBAAgB,YAAY,IAAI;GACtC,MAAM,OAAO,MAAM,KAAKd,QAAQ,QAC9B,OACA,mBAAmB,mBAAmB,YAAY,EAAE,UAAU,OAChE;GACA,KAAK,MAAM,OAAO,MAAM,mDAAmD;IACzE;IACA,YAAY,KAAK,OAAO;IACxB,WAAW,KAAK,MAAM,YAAY,IAAI,IAAI,aAAa;GACzD,CAAC;GACD,IAAI,KAAK,OAAO,WAAW,KAAK,CAAC,KAAK,YAAY;GAElD,KAAK,MAAM,SAAS,KAAK,QAAQ;IAC/B,IAAI,CAAC,KAAKY,YAAY,CAAC,KAAKO,WAAW;IACvC,MAAM,KAAKS,cAAc,cAAc,KAAK;GAC9C;GAEA,IAAI,KAAK,eAAe,OAAO,cAAc;GAI7C,IAAI,CAAC,KAAKT,WAAW;GACrB,KAAKL,UAAU,YAAY,gBAAgB,EAAE,cAAc,KAAK,WAAW;GAC3E,MAAM,KAAKa,cAAc;EAC3B;CACF;CAEA,MAAMC,cAAc,cAAsB,OAA6C;EACrF,IAAI,CAAC,MAAM,IAAI;GACb,KAAK,MAAM,OAAO,KAAK,6DAA6D,EAAE,aAAa,CAAC;GACpG;EACF;EACA,MAAM,aAAa,GAAG,mBAAmB,GAAG,aAAa,GAAG,MAAM;EAClE,MAAM,SAAS,uBAAuB,MAAM,SAAS,UAAU;EAC/D,IAAI,CAAC,QAAQ;GAGX,KAAK,MAAM,OAAO,MAAM,gEAAgE;IACtF;IACA,SAAS,MAAM;IACf,WAAW,MAAM;GACnB,CAAC;GACD;EACF;EAEA,MAAM,SAAS,MAAM,KAAKpB,SAAS,QAAQ;GACzC,oBAAoB,KAAKH;GACzB,YAAY,KAAKJ;GAGjB,QAAQ,KAAKC;GACb,oBAAoB;GACpB,uBAAsB,iBAAgB;IAGpC,KAAK,MAAM,OAAO,MAAM,6EAA6E;KACnG;KACA,gBAAgB,aAAa;KAC7B,0BAA0B,aAAa,KAAK;IAC9C,CAAC;GACH;GACA,kBAAiB,iBAAgB;IAG/B,KAAK,MAAM,OAAO,MAAM,0DAA0D;KAChF;KACA,gBAAgB,aAAa;KAC7B,UAAU,aAAa;IACzB,CAAC;GACH;GACA,mBAAkB,iBAAgB;IAChC,KAAK,MAAM,OAAO,MAAM,wDAAwD;KAC9E;KACA,YAAY,aAAa,SAAS;KAClC,QAAQ,aAAa,SAAS;KAC9B,MAAM,aAAa;IACrB,CAAC;GACH;GACA,gBAAgB,cAAc,UAAU;IACtC,KAAK,MAAM,OAAO,MAAM,4DAA4D;KAClF;KACA,gBAAgB,aAAa;KAC7B,YAAY,aAAa;KACzB,UAAU,aAAa;KACvB,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;IAC9D,CAAC;GACH;EACF,CAAC;EACD,IAAI,OAAO,WAAW,KACpB,KAAK,MAAM,OAAO,KAAK,mEAAmE;GACxF;GACA;GACA,QAAQ,OAAO;EACjB,CAAC;CAEL;CAEA,MAAMyB,gBAA+B;EACnC,MAAM,KAAKxB,SAAS,SAAS,KAAK,eAAe,gBAAgB,KAAKW,SAAS;CACjF;CAEA,YAAoB;EAClB,OAAO,GAAG,KAAK,KAAK,GAAG,KAAKX,SAAS;CACvC;AACF;AAEA,SAAS,iBAAiB,QAA+B;CACvD,MAAM,cAAe,OAA2E;CAChG,IAAI,OAAO,gBAAgB,YAAY,OAAO,YAAY,KAAK,MAAM,KAAK;CAC1E,OAAO,gBAAgB,MAAM,IAAI,SAAS;AAC5C;AAEA,SAAS,kBAAkB,OAAoF;CAC7G,IAAI,CAAC,SAAS,MAAM,YAAY,KAAK,CAAC,MAAM,eAAe,OAAO,MAAM,gBAAgB,UACtF,OAAO;EAAE,SAAS;EAAG,aAAa,CAAC;CAAE;CAEvC,MAAM,cAAgE,CAAC;CACvE,KAAK,MAAM,CAAC,cAAc,WAAW,OAAO,QAAQ,MAAM,WAAW,GACnE,IAAI,OAAO,QAAQ,iBAAiB,YAAY,OAAO,aAAa,SAAS,GAC3E,YAAY,gBAAgB,EAAE,cAAc,OAAO,aAAa;CAGpE,OAAO;EAAE,SAAS;EAAG;CAAY;AACnC;AAEA,SAAS,WAAW,OAAgB,YAA4B;CAC9D,IAAI,iBAAiB,oBAAoB,MAAM,WAAW,OAAO,MAAM,sBAAsB,MAC3F,OAAO,KAAK,IAAI,YAAY,MAAM,oBAAoB,GAAK;CAE7D,OAAO;AACT"}

package/dist/integrations/platform/gitlab/integration.d.ts

@@ -0,0 +1,57 @@
+import type { MastraWorker } from '@mastra/core/worker';
+import type { IntegrationConnection } from '../../../capabilities/connection.js';
+import type { IntegrationContext } from '../../base.js';
+import { GitLabApiClient } from '../../gitlab/api.js';
+import type { GitLabRuleOverrides } from '../../gitlab/default-rules.js';
+import { GitLabIntegrationBase } from '../../gitlab/integration.js';
+import type { GitLabStatusConnection } from '../../gitlab/integration.js';
+import type { PlatformApiClientConfig } from '../api-client.js';
+interface PlatformIntegrationConnection {
+    id: string;
+    integrationId: string;
+    status: 'active' | 'needs_reauth';
+    accountLabel: string | null;
+}
+interface PlatformGitLabContext {
+    id: string;
+    label: string | null;
+    api: GitLabApiClient;
+    connection: IntegrationConnection;
+    host: string;
+    repositoryAccessToken: () => Promise<string>;
+}
+export interface PlatformGitLabIntegrationConfig {
+    rules?: GitLabRuleOverrides;
+    clientConfig?: PlatformApiClientConfig;
+    connectionId?: string;
+    /**
+     * Optional. Only a direct project webhook to `/web/gitlab/webhook` needs it;
+     * a Platform-connected deployment receives events by polling instead.
+     */
+    webhookSecret?: string;
+    /** Defaults to `MASTRA_PLATFORM_GITLAB_POLLING_ENABLED`, and to true when that is unset. */
+    pollingEnabled?: boolean;
+    /** Defaults to `MASTRA_PLATFORM_GITLAB_POLLING_INTERVAL_MS`, and to the worker's 20 s when unset. */
+    pollingIntervalMs?: number;
+}
+export declare class PlatformGitLabIntegration extends GitLabIntegrationBase {
+    #private;
+    constructor(config?: PlatformGitLabIntegrationConfig);
+    listConnections(): Promise<PlatformIntegrationConnection[]>;
+    statusConnections(): Promise<GitLabStatusConnection[]>;
+    hasActiveConnections(): Promise<boolean>;
+    authFailureMessage(): string;
+    protected get webhookSecret(): string | undefined;
+    protected activeContexts(): Promise<PlatformGitLabContext[]>;
+    protected contextById(connectionId: string): Promise<PlatformGitLabContext>;
+    /**
+     * The reconcile sweeps from the base class plus, when polling is on, the
+     * Platform event poller. Polling replaces the direct project webhook: the
+     * webhook route stays mounted for deployments that also configured a secret,
+     * but nothing in Platform mode requires one.
+     */
+    workers(ctx: IntegrationContext): MastraWorker[];
+    diagnostics(): Record<string, unknown>;
+}
+export {};
+//# sourceMappingURL=integration.d.ts.map

package/dist/integrations/platform/gitlab/integration.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"integration.d.ts","sourceRoot":"","sources":["../../../../src/integrations/platform/gitlab/integration.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAExD,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAC;AACjF,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACxD,OAAO,EAAE,eAAe,EAAkB,MAAM,qBAAqB,CAAC;AACtE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAC;AACzE,OAAO,EAAoB,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AACtF,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AAG1E,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAIhE,UAAU,6BAA6B;IACrC,EAAE,EAAE,MAAM,CAAC;IACX,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,QAAQ,GAAG,cAAc,CAAC;IAClC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B;AAED,UAAU,qBAAqB;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,GAAG,EAAE,eAAe,CAAC;IACrB,UAAU,EAAE,qBAAqB,CAAC;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,qBAAqB,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;CAC9C;AAQD,MAAM,WAAW,+BAA+B;IAC9C,KAAK,CAAC,EAAE,mBAAmB,CAAC;IAC5B,YAAY,CAAC,EAAE,uBAAuB,CAAC;IACvC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;OAGG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,4FAA4F;IAC5F,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,qGAAqG;IACrG,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,qBAAa,yBAA0B,SAAQ,qBAAqB;;gBAQtD,MAAM,GAAE,+BAAoC;IAclD,eAAe,IAAI,OAAO,CAAC,6BAA6B,EAAE,CAAC;IAclD,iBAAiB,IAAI,OAAO,CAAC,sBAAsB,EAAE,CAAC;IAI/D,oBAAoB,IAAI,OAAO,CAAC,OAAO,CAAC;IAI9C,kBAAkB,IAAI,MAAM;IAI5B,cAAuB,aAAa,IAAI,MAAM,GAAG,SAAS,CAEzD;cAEe,cAAc,IAAI,OAAO,CAAC,qBAAqB,EAAE,CAAC;cAIlD,WAAW,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAMjF;;;;;OAKG;IACM,OAAO,CAAC,GAAG,EAAE,kBAAkB,GAAG,YAAY,EAAE;IAoBzD,WAAW,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CA4CvC"}

package/dist/integrations/platform/gitlab/integration.js

@@ -0,0 +1,113 @@
+import { PlatformApiClient, platformApiClientConfigFromEnv } from "../api-client.js";
+import { GitLabApiClient, GitLabApiError } from "../../gitlab/api.js";
+import { attachGitLabRules } from "../../gitlab/rules.js";
+import { GitLabIntegrationBase, gitlabConnection } from "../../gitlab/integration.js";
+import { PlatformGitLabEventWorker } from "./event-worker.js";
+//#region src/integrations/platform/gitlab/integration.ts
+/** The Platform's GitLab (OAuth) integration. It is the only GitLab credential flow Factory discovers. */
+const GITLAB_INTEGRATION_ID = "gitlab";
+var PlatformGitLabIntegration = class extends GitLabIntegrationBase {
+	#client;
+	#connectionId;
+	#endpointHost;
+	#webhookSecret;
+	#pollingEnabled;
+	#pollingIntervalMs;
+	constructor(config = {}) {
+		super(config.rules);
+		const connectionId = config.connectionId?.trim() || process.env.MASTRA_GITLAB_CONNECTION_ID?.trim() || void 0;
+		const clientConfig = config.clientConfig ?? platformApiClientConfigFromEnv();
+		this.#client = new PlatformApiClient(clientConfig);
+		this.#connectionId = connectionId;
+		this.#endpointHost = new URL(clientConfig.baseUrl).host;
+		this.#webhookSecret = config.webhookSecret?.trim() || process.env.MASTRA_GITLAB_WEBHOOK_SECRET?.trim() || void 0;
+		this.#pollingEnabled = config.pollingEnabled ?? process.env.MASTRA_PLATFORM_GITLAB_POLLING_ENABLED?.trim().toLowerCase() !== "false";
+		this.#pollingIntervalMs = config.pollingIntervalMs ?? optionalPositiveIntegerEnv("MASTRA_PLATFORM_GITLAB_POLLING_INTERVAL_MS");
+	}
+	async listConnections() {
+		return (await this.#client.request("GET", `/v2/connections?providerKey=${encodeURIComponent(GITLAB_INTEGRATION_ID)}`)).connections.filter((connection) => connection.integrationId === GITLAB_INTEGRATION_ID && (!this.#connectionId || connection.id === this.#connectionId));
+	}
+	async statusConnections() {
+		return this.listConnections();
+	}
+	async hasActiveConnections() {
+		return (await this.#activeConnections()).length > 0;
+	}
+	authFailureMessage() {
+		return "GitLab rejected the connected account. Reconnect it in Mastra Platform.";
+	}
+	get webhookSecret() {
+		return this.#webhookSecret;
+	}
+	async activeContexts() {
+		return (await this.#activeConnections()).map((connection) => this.#context(connection));
+	}
+	async contextById(connectionId) {
+		const connection = (await this.#activeConnections()).find((candidate) => candidate.id === connectionId);
+		if (!connection) throw new GitLabApiError("GitLab connection is unavailable or requires reauthentication.", 401);
+		return this.#context(connection);
+	}
+	/**
+	* The reconcile sweeps from the base class plus, when polling is on, the
+	* Platform event poller. Polling replaces the direct project webhook: the
+	* webhook route stays mounted for deployments that also configured a secret,
+	* but nothing in Platform mode requires one.
+	*/
+	workers(ctx) {
+		const workers = super.workers(ctx);
+		if (!this.#pollingEnabled) return workers;
+		if (!ctx.controller) throw new Error("Platform GitLab event polling requires the mounted Mastra Code controller.");
+		return [...workers, new PlatformGitLabEventWorker({
+			client: this.#client,
+			controller: ctx.controller,
+			gitlab: this,
+			storage: ctx.storage.generic,
+			listConnections: () => this.listConnections(),
+			ingestFactoryEvent: attachGitLabRules(this, ctx),
+			intervalMs: this.#pollingIntervalMs
+		})];
+	}
+	diagnostics() {
+		return {
+			configured: true,
+			mode: "platform",
+			endpointHost: this.#endpointHost,
+			connectionFilterConfigured: Boolean(this.#connectionId),
+			webhookConfigured: Boolean(this.#webhookSecret),
+			pollingEnabled: this.#pollingEnabled,
+			...this.#pollingIntervalMs === void 0 ? {} : { pollingIntervalMs: this.#pollingIntervalMs }
+		};
+	}
+	async #activeConnections() {
+		return (await this.listConnections()).filter((connection) => connection.status === "active");
+	}
+	#context(connection) {
+		return {
+			id: connection.id,
+			label: connection.accountLabel,
+			api: new GitLabApiClient({
+				client: this.#client,
+				connectionId: connection.id
+			}),
+			connection: gitlabConnection(connection.id),
+			host: "gitlab.com",
+			repositoryAccessToken: async () => {
+				const credential = await this.#client.request("GET", `/v2/connections/${encodeURIComponent(connection.id)}/credentials`);
+				const token = credential?.type === "oauth2" ? credential.accessToken : credential?.type === "api_key" ? credential.apiKey : void 0;
+				if (typeof token !== "string" || !token.trim()) throw new GitLabApiError("GitLab connection did not provide a repository credential.", 502);
+				return token;
+			}
+		};
+	}
+};
+function optionalPositiveIntegerEnv(name) {
+	const value = process.env[name]?.trim();
+	if (!value) return void 0;
+	const parsed = Number(value);
+	if (!/^[1-9]\d*$/.test(value) || !Number.isSafeInteger(parsed)) throw new Error(`${name} must be a positive integer.`);
+	return parsed;
+}
+//#endregion
+export { PlatformGitLabIntegration };
+
+//# sourceMappingURL=integration.js.map

package/dist/integrations/platform/gitlab/integration.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"integration.js","names":["#client","#connectionId","#endpointHost","#webhookSecret","#pollingEnabled","#pollingIntervalMs","#activeConnections","#context"],"sources":["../../../../src/integrations/platform/gitlab/integration.ts"],"sourcesContent":["import type { MastraWorker } from '@mastra/core/worker';\n\nimport type { IntegrationConnection } from '../../../capabilities/connection.js';\nimport type { IntegrationContext } from '../../base.js';\nimport { GitLabApiClient, GitLabApiError } from '../../gitlab/api.js';\nimport type { GitLabRuleOverrides } from '../../gitlab/default-rules.js';\nimport { gitlabConnection, GitLabIntegrationBase } from '../../gitlab/integration.js';\nimport type { GitLabStatusConnection } from '../../gitlab/integration.js';\nimport { attachGitLabRules } from '../../gitlab/rules.js';\nimport { PlatformApiClient, platformApiClientConfigFromEnv } from '../api-client.js';\nimport type { PlatformApiClientConfig } from '../api-client.js';\nimport { PlatformGitLabEventWorker } from './event-worker.js';\nimport type { PlatformGitLabEventStorage } from './event-worker.js';\n\ninterface PlatformIntegrationConnection {\n  id: string;\n  integrationId: string;\n  status: 'active' | 'needs_reauth';\n  accountLabel: string | null;\n}\n\ninterface PlatformGitLabContext {\n  id: string;\n  label: string | null;\n  api: GitLabApiClient;\n  connection: IntegrationConnection;\n  host: string;\n  repositoryAccessToken: () => Promise<string>;\n}\n\ntype PlatformGitLabCredential =\n  { type: 'oauth2'; accessToken: string; expiresAt: string | null } | { type: 'api_key'; apiKey: string };\n\n/** The Platform's GitLab (OAuth) integration. It is the only GitLab credential flow Factory discovers. */\nconst GITLAB_INTEGRATION_ID = 'gitlab';\n\nexport interface PlatformGitLabIntegrationConfig {\n  rules?: GitLabRuleOverrides;\n  clientConfig?: PlatformApiClientConfig;\n  connectionId?: string;\n  /**\n   * Optional. Only a direct project webhook to `/web/gitlab/webhook` needs it;\n   * a Platform-connected deployment receives events by polling instead.\n   */\n  webhookSecret?: string;\n  /** Defaults to `MASTRA_PLATFORM_GITLAB_POLLING_ENABLED`, and to true when that is unset. */\n  pollingEnabled?: boolean;\n  /** Defaults to `MASTRA_PLATFORM_GITLAB_POLLING_INTERVAL_MS`, and to the worker's 20 s when unset. */\n  pollingIntervalMs?: number;\n}\n\nexport class PlatformGitLabIntegration extends GitLabIntegrationBase {\n  readonly #client: PlatformApiClient;\n  readonly #connectionId: string | undefined;\n  readonly #endpointHost: string;\n  readonly #webhookSecret: string | undefined;\n  readonly #pollingEnabled: boolean;\n  readonly #pollingIntervalMs: number | undefined;\n\n  constructor(config: PlatformGitLabIntegrationConfig = {}) {\n    super(config.rules);\n    const connectionId = config.connectionId?.trim() || process.env.MASTRA_GITLAB_CONNECTION_ID?.trim() || undefined;\n    const clientConfig = config.clientConfig ?? platformApiClientConfigFromEnv();\n    this.#client = new PlatformApiClient(clientConfig);\n    this.#connectionId = connectionId;\n    this.#endpointHost = new URL(clientConfig.baseUrl).host;\n    this.#webhookSecret = config.webhookSecret?.trim() || process.env.MASTRA_GITLAB_WEBHOOK_SECRET?.trim() || undefined;\n    this.#pollingEnabled =\n      config.pollingEnabled ?? process.env.MASTRA_PLATFORM_GITLAB_POLLING_ENABLED?.trim().toLowerCase() !== 'false';\n    this.#pollingIntervalMs =\n      config.pollingIntervalMs ?? optionalPositiveIntegerEnv('MASTRA_PLATFORM_GITLAB_POLLING_INTERVAL_MS');\n  }\n\n  async listConnections(): Promise<PlatformIntegrationConnection[]> {\n    const result = await this.#client.request<{ connections: PlatformIntegrationConnection[] }>(\n      'GET',\n      `/v2/connections?providerKey=${encodeURIComponent(GITLAB_INTEGRATION_ID)}`,\n    );\n    // The providerKey filter is applied server side; the exact ID check guards\n    // against a server that answers more loosely than asked.\n    return result.connections.filter(\n      connection =>\n        connection.integrationId === GITLAB_INTEGRATION_ID &&\n        (!this.#connectionId || connection.id === this.#connectionId),\n    );\n  }\n\n  override async statusConnections(): Promise<GitLabStatusConnection[]> {\n    return this.listConnections();\n  }\n\n  async hasActiveConnections(): Promise<boolean> {\n    return (await this.#activeConnections()).length > 0;\n  }\n\n  authFailureMessage(): string {\n    return 'GitLab rejected the connected account. Reconnect it in Mastra Platform.';\n  }\n\n  protected override get webhookSecret(): string | undefined {\n    return this.#webhookSecret;\n  }\n\n  protected async activeContexts(): Promise<PlatformGitLabContext[]> {\n    return (await this.#activeConnections()).map(connection => this.#context(connection));\n  }\n\n  protected async contextById(connectionId: string): Promise<PlatformGitLabContext> {\n    const connection = (await this.#activeConnections()).find(candidate => candidate.id === connectionId);\n    if (!connection) throw new GitLabApiError('GitLab connection is unavailable or requires reauthentication.', 401);\n    return this.#context(connection);\n  }\n\n  /**\n   * The reconcile sweeps from the base class plus, when polling is on, the\n   * Platform event poller. Polling replaces the direct project webhook: the\n   * webhook route stays mounted for deployments that also configured a secret,\n   * but nothing in Platform mode requires one.\n   */\n  override workers(ctx: IntegrationContext): MastraWorker[] {\n    const workers = super.workers(ctx);\n    if (!this.#pollingEnabled) return workers;\n    if (!ctx.controller) {\n      throw new Error('Platform GitLab event polling requires the mounted Mastra Code controller.');\n    }\n    return [\n      ...workers,\n      new PlatformGitLabEventWorker({\n        client: this.#client,\n        controller: ctx.controller,\n        gitlab: this,\n        storage: ctx.storage.generic as unknown as PlatformGitLabEventStorage,\n        listConnections: () => this.listConnections(),\n        ingestFactoryEvent: attachGitLabRules(this, ctx),\n        intervalMs: this.#pollingIntervalMs,\n      }),\n    ];\n  }\n\n  diagnostics(): Record<string, unknown> {\n    return {\n      configured: true,\n      mode: 'platform',\n      endpointHost: this.#endpointHost,\n      connectionFilterConfigured: Boolean(this.#connectionId),\n      webhookConfigured: Boolean(this.#webhookSecret),\n      pollingEnabled: this.#pollingEnabled,\n      ...(this.#pollingIntervalMs === undefined ? {} : { pollingIntervalMs: this.#pollingIntervalMs }),\n    };\n  }\n\n  async #activeConnections(): Promise<PlatformIntegrationConnection[]> {\n    return (await this.listConnections()).filter(connection => connection.status === 'active');\n  }\n\n  #context(connection: PlatformIntegrationConnection): PlatformGitLabContext {\n    return {\n      id: connection.id,\n      label: connection.accountLabel,\n      api: new GitLabApiClient({ client: this.#client, connectionId: connection.id }),\n      connection: gitlabConnection(connection.id),\n      // Platform does not currently expose the connected GitLab instance host.\n      host: 'gitlab.com',\n      repositoryAccessToken: async () => {\n        // Fetch for each git operation so an expiring OAuth token is refreshed by Platform.\n        // Never persist or log the returned credential.\n        const credential = await this.#client.request<PlatformGitLabCredential>(\n          'GET',\n          `/v2/connections/${encodeURIComponent(connection.id)}/credentials`,\n        );\n        const token =\n          credential?.type === 'oauth2'\n            ? credential.accessToken\n            : credential?.type === 'api_key'\n              ? credential.apiKey\n              : undefined;\n        if (typeof token !== 'string' || !token.trim()) {\n          throw new GitLabApiError('GitLab connection did not provide a repository credential.', 502);\n        }\n        return token;\n      },\n    };\n  }\n}\n\nfunction optionalPositiveIntegerEnv(name: 'MASTRA_PLATFORM_GITLAB_POLLING_INTERVAL_MS'): number | undefined {\n  const value = process.env[name]?.trim();\n  if (!value) return undefined;\n  const parsed = Number(value);\n  if (!/^[1-9]\\d*$/.test(value) || !Number.isSafeInteger(parsed)) {\n    throw new Error(`${name} must be a positive integer.`);\n  }\n  return parsed;\n}\n"],"mappings":";;;;;;;AAkCA,MAAM,wBAAwB;AAiB9B,IAAa,4BAAb,cAA+C,sBAAsB;CACnE;CACA;CACA;CACA;CACA;CACA;CAEA,YAAY,SAA0C,CAAC,GAAG;EACxD,MAAM,OAAO,KAAK;EAClB,MAAM,eAAe,OAAO,cAAc,KAAK,KAAK,QAAQ,IAAI,6BAA6B,KAAK,KAAK,KAAA;EACvG,MAAM,eAAe,OAAO,gBAAgB,+BAA+B;EAC3E,KAAKA,UAAU,IAAI,kBAAkB,YAAY;EACjD,KAAKC,gBAAgB;EACrB,KAAKC,gBAAgB,IAAI,IAAI,aAAa,OAAO,CAAC,CAAC;EACnD,KAAKC,iBAAiB,OAAO,eAAe,KAAK,KAAK,QAAQ,IAAI,8BAA8B,KAAK,KAAK,KAAA;EAC1G,KAAKC,kBACH,OAAO,kBAAkB,QAAQ,IAAI,wCAAwC,KAAK,CAAC,CAAC,YAAY,MAAM;EACxG,KAAKC,qBACH,OAAO,qBAAqB,2BAA2B,4CAA4C;CACvG;CAEA,MAAM,kBAA4D;EAOhE,QAAO,MANc,KAAKL,QAAQ,QAChC,OACA,+BAA+B,mBAAmB,qBAAqB,GACzE,EAAA,CAGc,YAAY,QACxB,eACE,WAAW,kBAAkB,0BAC5B,CAAC,KAAKC,iBAAiB,WAAW,OAAO,KAAKA,cACnD;CACF;CAEA,MAAe,oBAAuD;EACpE,OAAO,KAAK,gBAAgB;CAC9B;CAEA,MAAM,uBAAyC;EAC7C,QAAQ,MAAM,KAAKK,mBAAmB,EAAA,CAAG,SAAS;CACpD;CAEA,qBAA6B;EAC3B,OAAO;CACT;CAEA,IAAuB,gBAAoC;EACzD,OAAO,KAAKH;CACd;CAEA,MAAgB,iBAAmD;EACjE,QAAQ,MAAM,KAAKG,mBAAmB,EAAA,CAAG,KAAI,eAAc,KAAKC,SAAS,UAAU,CAAC;CACtF;CAEA,MAAgB,YAAY,cAAsD;EAChF,MAAM,cAAc,MAAM,KAAKD,mBAAmB,EAAA,CAAG,MAAK,cAAa,UAAU,OAAO,YAAY;EACpG,IAAI,CAAC,YAAY,MAAM,IAAI,eAAe,kEAAkE,GAAG;EAC/G,OAAO,KAAKC,SAAS,UAAU;CACjC;;;;;;;CAQA,QAAiB,KAAyC;EACxD,MAAM,UAAU,MAAM,QAAQ,GAAG;EACjC,IAAI,CAAC,KAAKH,iBAAiB,OAAO;EAClC,IAAI,CAAC,IAAI,YACP,MAAM,IAAI,MAAM,4EAA4E;EAE9F,OAAO,CACL,GAAG,SACH,IAAI,0BAA0B;GAC5B,QAAQ,KAAKJ;GACb,YAAY,IAAI;GAChB,QAAQ;GACR,SAAS,IAAI,QAAQ;GACrB,uBAAuB,KAAK,gBAAgB;GAC5C,oBAAoB,kBAAkB,MAAM,GAAG;GAC/C,YAAY,KAAKK;EACnB,CAAC,CACH;CACF;CAEA,cAAuC;EACrC,OAAO;GACL,YAAY;GACZ,MAAM;GACN,cAAc,KAAKH;GACnB,4BAA4B,QAAQ,KAAKD,aAAa;GACtD,mBAAmB,QAAQ,KAAKE,cAAc;GAC9C,gBAAgB,KAAKC;GACrB,GAAI,KAAKC,uBAAuB,KAAA,IAAY,CAAC,IAAI,EAAE,mBAAmB,KAAKA,mBAAmB;EAChG;CACF;CAEA,MAAMC,qBAA+D;EACnE,QAAQ,MAAM,KAAK,gBAAgB,EAAA,CAAG,QAAO,eAAc,WAAW,WAAW,QAAQ;CAC3F;CAEA,SAAS,YAAkE;EACzE,OAAO;GACL,IAAI,WAAW;GACf,OAAO,WAAW;GAClB,KAAK,IAAI,gBAAgB;IAAE,QAAQ,KAAKN;IAAS,cAAc,WAAW;GAAG,CAAC;GAC9E,YAAY,iBAAiB,WAAW,EAAE;GAE1C,MAAM;GACN,uBAAuB,YAAY;IAGjC,MAAM,aAAa,MAAM,KAAKA,QAAQ,QACpC,OACA,mBAAmB,mBAAmB,WAAW,EAAE,EAAE,aACvD;IACA,MAAM,QACJ,YAAY,SAAS,WACjB,WAAW,cACX,YAAY,SAAS,YACnB,WAAW,SACX,KAAA;IACR,IAAI,OAAO,UAAU,YAAY,CAAC,MAAM,KAAK,GAC3C,MAAM,IAAI,eAAe,8DAA8D,GAAG;IAE5F,OAAO;GACT;EACF;CACF;AACF;AAEA,SAAS,2BAA2B,MAAwE;CAC1G,MAAM,QAAQ,QAAQ,IAAI,KAAK,EAAE,KAAK;CACtC,IAAI,CAAC,OAAO,OAAO,KAAA;CACnB,MAAM,SAAS,OAAO,KAAK;CAC3B,IAAI,CAAC,aAAa,KAAK,KAAK,KAAK,CAAC,OAAO,cAAc,MAAM,GAC3D,MAAM,IAAI,MAAM,GAAG,KAAK,6BAA6B;CAEvD,OAAO;AACT"}

package/dist/integrations/platform/incidentio/integration.d.ts

@@ -0,0 +1,74 @@
+import type { RequestContext } from '@mastra/core/request-context';
+import type { ApiRoute } from '@mastra/core/server';
+import type { MastraWorker } from '@mastra/core/worker';
+import type { Intake } from '../../../capabilities/intake.js';
+import type { RouteAuth } from '../../../routes/route.js';
+import type { IntakeStorage } from '../../../storage/domains/intake/base.js';
+import type { FactoryProjectsStorage } from '../../../storage/domains/projects/base.js';
+import type { FactoryIntegration, IntegrationContext, IntegrationTools } from '../../base.js';
+import type { IncidentioEventRules, IncidentioRuleOverrides } from '../../incidentio/default-rules.js';
+import { type PlatformApiClientConfig } from '../api-client.js';
+export interface PlatformIncidentioIntegrationConfig {
+    clientConfig?: PlatformApiClientConfig;
+    /** Per-event replacements for the default Factory incident.io rules. */
+    rules?: IncidentioRuleOverrides;
+}
+interface PlatformIntegrationConnection {
+    id: string;
+    integrationId: string;
+    status: 'active' | 'needs_reauth';
+    accountLabel: string | null;
+}
+interface ScopedSourceId {
+    connectionId: string;
+    sourceId: string;
+}
+export declare function encodeScopedSourceId(connectionId: string, sourceId: string): string;
+export declare function decodeScopedSourceId(value: string): ScopedSourceId | null;
+export declare class PlatformIncidentioIntegration implements FactoryIntegration {
+    #private;
+    readonly id = "incidentio";
+    constructor(config?: PlatformIncidentioIntegrationConfig);
+    /** Event rules driving automatic follow-up materialization and close handling. */
+    get rules(): IncidentioEventRules;
+    initialize({ projects, auth, intake, }: {
+        projects: FactoryProjectsStorage;
+        auth: RouteAuth;
+        intake: IntakeStorage;
+    }): void;
+    /** Cross-integration intake selection/binding domain — agent-tool authorization. */
+    get intakeStorage(): IntakeStorage;
+    /** Factory projects domain — maps a session's resourceId to its owning org. */
+    get projects(): FactoryProjectsStorage;
+    /** Whether the host runs with web auth enabled; every surface is inert without it. */
+    get authEnabled(): boolean;
+    /**
+     * Map a session's resourceId (the factory project id) to its owning org.
+     * Same caching semantics as the Jira integration: definitive misses are
+     * cached, transient database failures are not.
+     */
+    resolveOrgId(resourceId: string): Promise<string | null>;
+    /**
+     * Org-scoped agent tools: the read-only follow-up detail tool for sessions
+     * whose resource is a factory project with an active Platform-managed
+     * incident.io connection.
+     */
+    agentTools(args: {
+        requestContext: RequestContext;
+    }): Promise<IntegrationTools>;
+    listConnections(): Promise<PlatformIntegrationConnection[]>;
+    hasActiveConnections(): Promise<boolean>;
+    clearCaches(): void;
+    readonly intake: Intake;
+    workers(ctx: IntegrationContext): MastraWorker[];
+    /**
+     * The integration's HTTP surface: `/web/incidentio/*` Mastra `apiRoutes`
+     * (status + follow-up listing/detail for Intake), aggregated across every
+     * discovered Platform connection. A board-scoped listing also feeds the
+     * incident.io event rules.
+     */
+    routes(ctx: IntegrationContext): ApiRoute[];
+    diagnostics(): Record<string, unknown>;
+}
+export {};
+//# sourceMappingURL=integration.d.ts.map

package/dist/integrations/platform/incidentio/integration.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"integration.d.ts","sourceRoot":"","sources":["../../../../src/integrations/platform/incidentio/integration.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAGxD,OAAO,KAAK,EAIV,MAAM,EAUP,MAAM,iCAAiC,CAAC;AACzC,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,yCAAyC,CAAC;AAC7E,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,2CAA2C,CAAC;AACxF,OAAO,KAAK,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAI9F,OAAO,KAAK,EAAE,oBAAoB,EAAE,uBAAuB,EAAE,MAAM,mCAAmC,CAAC;AAcvG,OAAO,EAAqD,KAAK,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAEnH,MAAM,WAAW,mCAAmC;IAClD,YAAY,CAAC,EAAE,uBAAuB,CAAC;IACvC,wEAAwE;IACxE,KAAK,CAAC,EAAE,uBAAuB,CAAC;CACjC;AAaD,UAAU,6BAA6B;IACrC,EAAE,EAAE,MAAM,CAAC;IACX,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,QAAQ,GAAG,cAAc,CAAC;IAClC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B;AAED,UAAU,cAAc;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAcD,wBAAgB,oBAAoB,CAAC,YAAY,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAEnF;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI,CAYzE;AAoDD,qBAAa,6BAA8B,YAAW,kBAAkB;;IACtE,QAAQ,CAAC,EAAE,gBAAgB;gBAaf,MAAM,GAAE,mCAAwC;IAO5D,kFAAkF;IAClF,IAAI,KAAK,IAAI,oBAAoB,CAEhC;IAED,UAAU,CAAC,EACT,QAAQ,EACR,IAAI,EACJ,MAAM,GACP,EAAE;QACD,QAAQ,EAAE,sBAAsB,CAAC;QACjC,IAAI,EAAE,SAAS,CAAC;QAChB,MAAM,EAAE,aAAa,CAAC;KACvB,GAAG,IAAI;IAMR,oFAAoF;IACpF,IAAI,aAAa,IAAI,aAAa,CAKjC;IAED,+EAA+E;IAC/E,IAAI,QAAQ,IAAI,sBAAsB,CAKrC;IAED,sFAAsF;IACtF,IAAI,WAAW,IAAI,OAAO,CAEzB;IAED;;;;OAIG;IACG,YAAY,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAqB9D;;;;OAIG;IACG,UAAU,CAAC,IAAI,EAAE;QAAE,cAAc,EAAE,cAAc,CAAA;KAAE,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAK/E,eAAe,IAAI,OAAO,CAAC,6BAA6B,EAAE,CAAC;IAS3D,oBAAoB,IAAI,OAAO,CAAC,OAAO,CAAC;IAI9C,WAAW,IAAI,IAAI;IAiEnB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAQrB;IA4JF,OAAO,CAAC,GAAG,EAAE,kBAAkB,GAAG,YAAY,EAAE;IAchD;;;;;OAKG;IACH,MAAM,CAAC,GAAG,EAAE,kBAAkB,GAAG,QAAQ,EAAE;IAU3C,WAAW,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAGvC"}