@mastra/factory 0.0.0 → 0.1.0-alpha.3

package/dist/integrations/github/webhook.d.ts

@@ -0,0 +1,87 @@
+import type { MountedMastraCode } from '@mastra/code-sdk';
+import type { NotificationPriority } from '@mastra/core/notifications';
+import type { Context } from 'hono';
+import type { GithubIntegration } from './integration.js';
+import type { GithubIssueTriageInput, GithubIssueTriageResult } from './issue-triage.js';
+import type { GithubSignalSubscriptionRow, GithubWebhookPullRequestTarget } from './subscriptions.js';
+export type GithubIssueTriageRunInput = GithubIssueTriageInput;
+export type GithubIssueTriageRunResult = GithubIssueTriageResult;
+export interface GithubWebhookHandlerOptions {
+    /** Integration providing webhook-secret verification + collaborator permission checks. */
+    github: GithubIntegration;
+    runIssueTriage?: (input: GithubIssueTriageRunInput) => Promise<GithubIssueTriageRunResult>;
+    ingestFactoryEvent?: (event: ParsedGithubWebhook) => Promise<unknown>;
+}
+export interface GithubWebhookMetadata {
+    event: string;
+    action?: string;
+    deliveryId: string;
+    repository?: string;
+    repositoryId?: number;
+    issueNumber?: number;
+    pullRequestNumber?: number;
+    sender?: string;
+    senderType?: string;
+    installationId?: number;
+}
+export interface ParsedGithubWebhook {
+    event: string;
+    deliveryId: string;
+    payload: Record<string, unknown>;
+}
+export type GithubWebhookResult = {
+    status: 202;
+    body: {
+        ok: true;
+        ignored?: true;
+    };
+} | {
+    status: 400;
+    body: {
+        error: 'bad_request';
+        message: string;
+    };
+} | {
+    status: 401;
+    body: {
+        error: 'unauthorized';
+        message: string;
+    };
+};
+export interface GithubWebhookNotification {
+    action: string;
+    kind: string;
+    priority: NotificationPriority;
+    summary: string;
+    terminal: boolean;
+    metadata: GithubWebhookMetadata & {
+        pullRequestNumber: number;
+        repositoryId: number;
+        installationId: number;
+    };
+    payload: Record<string, unknown>;
+}
+export interface GithubWebhookDispatchDependencies {
+    controller: MountedMastraCode['controller'];
+    /**
+     * Integration used by the default sender-authorization check (collaborator
+     * permission lookup). Author-gated notifications fail closed when neither
+     * this nor an `isAuthorizedSender` override is supplied.
+     */
+    github?: GithubIntegration;
+    listSubscriptions?: (target: GithubWebhookPullRequestTarget, options?: {
+        includeTerminal?: boolean;
+    }) => Promise<GithubSignalSubscriptionRow[]>;
+    retireSubscription?: (id: string, status: 'open' | 'closed' | 'merged') => Promise<void>;
+    isAuthorizedSender?: (notification: GithubWebhookNotification) => Promise<boolean>;
+    onTargetError?: (subscription: GithubSignalSubscriptionRow, error: unknown) => void;
+}
+export declare function normalizeGithubWebhookMetadata(parsed: ParsedGithubWebhook): GithubWebhookMetadata;
+export declare function classifyGithubWebhook(parsed: ParsedGithubWebhook): GithubWebhookNotification | undefined;
+export declare function dispatchGithubWebhook(parsed: ParsedGithubWebhook, dependencies: GithubWebhookDispatchDependencies): Promise<{
+    delivered: number;
+    failed: number;
+    ignored: boolean;
+}>;
+export declare function handleGithubWebhook(c: Context, options: GithubWebhookHandlerOptions & Partial<Omit<GithubWebhookDispatchDependencies, 'github'>>): Promise<GithubWebhookResult>;
+//# sourceMappingURL=webhook.d.ts.map

package/dist/integrations/github/webhook.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook.d.ts","sourceRoot":"","sources":["../../../src/integrations/github/webhook.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAC1D,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AACvE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AACpC,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAC1D,OAAO,KAAK,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AAEzF,OAAO,KAAK,EAAE,2BAA2B,EAAE,8BAA8B,EAAE,MAAM,oBAAoB,CAAC;AAEtG,MAAM,MAAM,yBAAyB,GAAG,sBAAsB,CAAC;AAC/D,MAAM,MAAM,0BAA0B,GAAG,uBAAuB,CAAC;AAEjE,MAAM,WAAW,2BAA2B;IAC1C,0FAA0F;IAC1F,MAAM,EAAE,iBAAiB,CAAC;IAC1B,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE,yBAAyB,KAAK,OAAO,CAAC,0BAA0B,CAAC,CAAC;IAC3F,kBAAkB,CAAC,EAAE,CAAC,KAAK,EAAE,mBAAmB,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CACvE;AAUD,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAED,MAAM,MAAM,mBAAmB,GAC3B;IAAE,MAAM,EAAE,GAAG,CAAC;IAAC,IAAI,EAAE;QAAE,EAAE,EAAE,IAAI,CAAC;QAAC,OAAO,CAAC,EAAE,IAAI,CAAA;KAAE,CAAA;CAAE,GACnD;IAAE,MAAM,EAAE,GAAG,CAAC;IAAC,IAAI,EAAE;QAAE,KAAK,EAAE,aAAa,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,GAChE;IAAE,MAAM,EAAE,GAAG,CAAC;IAAC,IAAI,EAAE;QAAE,KAAK,EAAE,cAAc,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,CAAC;AAEtE,MAAM,WAAW,yBAAyB;IACxC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,oBAAoB,CAAC;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,OAAO,CAAC;IAClB,QAAQ,EAAE,qBAAqB,GAAG;QAAE,iBAAiB,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,MAAM,CAAA;KAAE,CAAC;IAC9G,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,iCAAiC;IAChD,UAAU,EAAE,iBAAiB,CAAC,YAAY,CAAC,CAAC;IAC5C;;;;OAIG;IACH,MAAM,CAAC,EAAE,iBAAiB,CAAC;IAC3B,iBAAiB,CAAC,EAAE,CAClB,MAAM,EAAE,8BAA8B,EACtC,OAAO,CAAC,EAAE;QAAE,eAAe,CAAC,EAAE,OAAO,CAAA;KAAE,KACpC,OAAO,CAAC,2BAA2B,EAAE,CAAC,CAAC;IAC5C,kBAAkB,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,QAAQ,GAAG,QAAQ,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACzF,kBAAkB,CAAC,EAAE,CAAC,YAAY,EAAE,yBAAyB,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACnF,aAAa,CAAC,EAAE,CAAC,YAAY,EAAE,2BAA2B,EAAE,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC;CACrF;AAmGD,wBAAgB,8BAA8B,CAAC,MAAM,EAAE,mBAAmB,GAAG,qBAAqB,CAuBjG;AAiBD,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,mBAAmB,GAAG,yBAAyB,GAAG,SAAS,CAgGxG;AAqFD,wBAAsB,qBAAqB,CACzC,MAAM,EAAE,mBAAmB,EAC3B,YAAY,EAAE,iCAAiC,GAC9C,OAAO,CAAC;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,CAAC,CAuElE;AAED,wBAAsB,mBAAmB,CACvC,CAAC,EAAE,OAAO,EACV,OAAO,EAAE,2BAA2B,GAAG,OAAO,CAAC,IAAI,CAAC,iCAAiC,EAAE,QAAQ,CAAC,CAAC,GAChG,OAAO,CAAC,mBAAmB,CAAC,CAoC9B"}

package/dist/integrations/github/webhook.js

@@ -0,0 +1,381 @@
+// src/integrations/github/webhook.ts
+import { createHmac, timingSafeEqual } from "crypto";
+
+// src/integrations/github/subscriptions.ts
+function changeRequestTargetKey(input) {
+  return `change-request:${input.installationExternalId}:${input.repositoryExternalId}:${input.changeRequestId}`;
+}
+async function listPullRequestSubscriptionsForWebhook(input, options, storage) {
+  const rows = await storage.subscriptions.listByTarget(changeRequestTargetKey(input));
+  return options?.includeTerminal ? rows : rows.filter((row) => row.status === "open");
+}
+function retirePullRequestSubscription(id, status, storage) {
+  return storage.subscriptions.updateStatus(id, status);
+}
+
+// src/integrations/github/webhook.ts
+var SUPPORTED_GITHUB_WEBHOOK_EVENTS = /* @__PURE__ */ new Set([
+  "issues",
+  "issue_comment",
+  "pull_request",
+  "pull_request_review",
+  "pull_request_review_comment"
+]);
+function normalizeHeader(value) {
+  if (!value) return null;
+  const trimmed = value.trim();
+  return trimmed.length > 0 ? trimmed : null;
+}
+function verifySignature(rawBody, signature, secret) {
+  if (!signature.startsWith("sha256=")) return false;
+  const signatureHex = signature.slice("sha256=".length);
+  if (!/^[a-fA-F0-9]{64}$/.test(signatureHex)) return false;
+  const expectedHex = createHmac("sha256", secret).update(rawBody).digest("hex");
+  const received = Buffer.from(signatureHex, "hex");
+  const expected = Buffer.from(expectedHex, "hex");
+  return received.length === expected.length && timingSafeEqual(received, expected);
+}
+async function parseGithubWebhook(c, secret) {
+  if (!secret) {
+    return { status: 401, body: { error: "unauthorized", message: "GitHub webhook secret is not configured" } };
+  }
+  const event = normalizeHeader(c.req.header("x-github-event"));
+  const deliveryId = normalizeHeader(c.req.header("x-github-delivery"));
+  const signature = normalizeHeader(c.req.header("x-hub-signature-256"));
+  if (!event) return { status: 400, body: { error: "bad_request", message: "Missing x-github-event header" } };
+  if (!deliveryId) return { status: 400, body: { error: "bad_request", message: "Missing x-github-delivery header" } };
+  if (!signature)
+    return { status: 401, body: { error: "unauthorized", message: "Missing x-hub-signature-256 header" } };
+  const rawBody = await c.req.text();
+  if (!verifySignature(rawBody, signature, secret)) {
+    return { status: 401, body: { error: "unauthorized", message: "Invalid GitHub webhook signature" } };
+  }
+  let payload;
+  try {
+    payload = JSON.parse(rawBody);
+  } catch {
+    return { status: 400, body: { error: "bad_request", message: "Malformed JSON payload" } };
+  }
+  if (!payload || typeof payload !== "object" || Array.isArray(payload)) {
+    return { status: 400, body: { error: "bad_request", message: "Payload must be a JSON object" } };
+  }
+  return { event, deliveryId, payload };
+}
+function getObject(value) {
+  return value && typeof value === "object" && !Array.isArray(value) ? value : void 0;
+}
+function getString(value) {
+  return typeof value === "string" && value.length > 0 ? value : void 0;
+}
+function getNumber(value) {
+  return typeof value === "number" && Number.isFinite(value) ? value : void 0;
+}
+function getBoolean(value) {
+  return typeof value === "boolean" ? value : void 0;
+}
+function getLabels(value) {
+  if (!Array.isArray(value)) return [];
+  return value.map((label) => typeof label === "string" ? label : getString(getObject(label)?.name)).filter((label) => Boolean(label));
+}
+function getIssueTriageRunInput(parsed) {
+  if (parsed.event !== "issues" || getString(parsed.payload.action) !== "opened") return null;
+  const repository = getString(getObject(parsed.payload.repository)?.full_name);
+  const issue = getObject(parsed.payload.issue);
+  const sender = getString(getObject(parsed.payload.sender)?.login);
+  const installationId = getNumber(getObject(parsed.payload.installation)?.id);
+  const issueNumber = getNumber(issue?.number);
+  const issueTitle = getString(issue?.title);
+  const issueUrl = getString(issue?.html_url);
+  if (!repository || !installationId || !issueNumber || !issueTitle || !issueUrl) return null;
+  return {
+    repository,
+    issueNumber,
+    issueTitle,
+    issueUrl,
+    labels: getLabels(issue?.labels),
+    sender,
+    installationId
+  };
+}
+function normalizeGithubWebhookMetadata(parsed) {
+  const { event, deliveryId, payload } = parsed;
+  const repository = getObject(payload.repository);
+  const issue = getObject(payload.issue);
+  const pullRequest = getObject(payload.pull_request);
+  const sender = getObject(payload.sender);
+  const installation = getObject(payload.installation);
+  const issuePullRequest = getObject(issue?.pull_request);
+  return {
+    event,
+    action: getString(payload.action),
+    deliveryId,
+    repository: getString(repository?.full_name),
+    repositoryId: getNumber(repository?.id),
+    issueNumber: getNumber(issue?.number),
+    pullRequestNumber: getNumber(pullRequest?.number) ?? (event === "issue_comment" && issuePullRequest ? getNumber(issue?.number) : void 0),
+    sender: getString(sender?.login),
+    senderType: getString(sender?.type),
+    installationId: getNumber(installation?.id)
+  };
+}
+function notificationSummary(metadata, label) {
+  const actor = metadata.sender ? `${metadata.sender} ` : "";
+  return `${actor}${label} on ${metadata.repository}#${metadata.pullRequestNumber}`;
+}
+function notificationTargetUrl(event, payload) {
+  if (event === "issue_comment" || event === "pull_request_review_comment") {
+    return getString(getObject(payload.comment)?.html_url);
+  }
+  if (event === "pull_request_review") {
+    return getString(getObject(payload.review)?.html_url);
+  }
+  return getString(getObject(payload.pull_request)?.html_url);
+}
+function classifyGithubWebhook(parsed) {
+  const metadata = normalizeGithubWebhookMetadata(parsed);
+  const { event, payload } = parsed;
+  const action = metadata.action;
+  if (!action || !metadata.repositoryId || !metadata.installationId || !metadata.pullRequestNumber || !metadata.repository) {
+    return void 0;
+  }
+  let priority;
+  let kind;
+  let label;
+  let terminal = false;
+  if (event === "pull_request_review" && action === "submitted") {
+    const state = getString(getObject(payload.review)?.state)?.toLowerCase().replaceAll("_", "-");
+    priority = state === "approved" || state === "changes-requested" ? "urgent" : "high";
+    kind = state === "approved" ? "review-approved" : state === "changes-requested" ? "review-changes-requested" : "review-submitted";
+    label = state === "approved" ? "approved the pull request" : state === "changes-requested" ? "requested changes" : "submitted a review";
+  } else if (event === "pull_request" && action === "closed") {
+    const merged = getBoolean(getObject(payload.pull_request)?.merged) === true;
+    priority = "urgent";
+    kind = merged ? "pull-request-merged" : "pull-request-closed";
+    label = merged ? "merged the pull request" : "closed the pull request";
+    terminal = true;
+  } else if (event === "issue_comment" && action === "created") {
+    priority = "high";
+    kind = "issue-comment-created";
+    label = "commented";
+  } else if (event === "pull_request_review_comment" && action === "created") {
+    priority = "high";
+    kind = "review-comment-created";
+    label = "left a review comment";
+  } else if (event === "pull_request" && action === "reopened") {
+    priority = "high";
+    kind = "pull-request-reopened";
+    label = "reopened the pull request";
+  } else if (event === "pull_request_review" && action === "dismissed") {
+    priority = "high";
+    kind = "review-dismissed";
+    label = "dismissed a review";
+  } else if (event === "pull_request" && [
+    "synchronize",
+    "ready_for_review",
+    "converted_to_draft",
+    "assigned",
+    "unassigned",
+    "review_requested",
+    "review_request_removed"
+  ].includes(action)) {
+    priority = "medium";
+    kind = `pull-request-${action.replaceAll("_", "-")}`;
+    label = action.replaceAll("_", " ");
+  } else if (event === "pull_request" && ["edited", "labeled", "unlabeled", "milestoned", "demilestoned"].includes(action)) {
+    priority = "low";
+    kind = `pull-request-${action.replaceAll("_", "-")}`;
+    label = action.replaceAll("_", " ");
+  } else {
+    return void 0;
+  }
+  return {
+    action,
+    kind,
+    priority,
+    summary: notificationSummary(metadata, label),
+    terminal,
+    metadata: {
+      ...metadata,
+      pullRequestNumber: metadata.pullRequestNumber,
+      repositoryId: metadata.repositoryId,
+      installationId: metadata.installationId
+    },
+    payload
+  };
+}
+async function resolveSubscriptionSession(controller, subscription) {
+  const { sessionId, resourceId, threadId } = subscription;
+  if (!sessionId || !resourceId || !threadId) {
+    throw new Error(`GitHub subscription ${subscription.id} is missing its session binding.`);
+  }
+  const scope = subscription.sessionScope || void 0;
+  let session = await controller.getSessionByResource(resourceId, scope);
+  if (!session) {
+    const tags = {
+      factoryProjectId: resourceId,
+      projectRepositoryId: subscription.data.projectRepositoryId,
+      ...scope ? { worktreePath: scope } : {}
+    };
+    session = await controller.createSession({
+      id: sessionId,
+      ownerId: subscription.data.ownerId,
+      resourceId,
+      scope,
+      tags
+    });
+  }
+  if (session.thread.getId() !== threadId) {
+    await session.thread.switch({ threadId, emitEvent: false });
+  }
+  if (session.thread.getId() !== threadId) {
+    throw new Error(`Session ${sessionId} did not bind thread ${threadId}.`);
+  }
+  return session;
+}
+var AUTHORIZED_BOTS = /* @__PURE__ */ new Set(["coderabbitai[bot]", "devin-ai-integration[bot]"]);
+var AUTHORIZED_PERMISSIONS = /* @__PURE__ */ new Set(["admin", "maintain", "write"]);
+var PERMISSION_CHECK_TIMEOUT_MS = 5e3;
+var AUTHOR_GATED_KINDS = /* @__PURE__ */ new Set([
+  "issue-comment-created",
+  "review-comment-created",
+  "review-submitted",
+  "review-approved",
+  "review-changes-requested",
+  "review-dismissed"
+]);
+async function isAuthorizedGithubSender(notification, github) {
+  if (!AUTHOR_GATED_KINDS.has(notification.kind)) return true;
+  const sender = notification.metadata.sender;
+  const repository = notification.metadata.repository;
+  if (!sender || !repository) return false;
+  const normalizedSender = sender.toLowerCase();
+  if (notification.metadata.senderType?.toLowerCase() === "bot" || normalizedSender.endsWith("[bot]")) {
+    return AUTHORIZED_BOTS.has(normalizedSender);
+  }
+  if (!github) return false;
+  const abortController = new AbortController();
+  let timeout;
+  try {
+    const permission = await Promise.race([
+      github.getRepositoryCollaboratorPermission(
+        notification.metadata.installationId,
+        repository,
+        sender,
+        abortController.signal
+      ),
+      new Promise((resolve) => {
+        timeout = setTimeout(() => {
+          abortController.abort();
+          resolve(void 0);
+        }, PERMISSION_CHECK_TIMEOUT_MS);
+      })
+    ]);
+    return permission !== void 0 && AUTHORIZED_PERMISSIONS.has(permission);
+  } catch {
+    return false;
+  } finally {
+    if (timeout) clearTimeout(timeout);
+  }
+}
+async function dispatchGithubWebhook(parsed, dependencies) {
+  const notification = classifyGithubWebhook(parsed);
+  if (!notification) return { delivered: 0, failed: 0, ignored: true };
+  const isAuthorizedSender = dependencies.isAuthorizedSender ?? ((n) => isAuthorizedGithubSender(n, dependencies.github));
+  if (!await isAuthorizedSender(notification)) {
+    return { delivered: 0, failed: 0, ignored: true };
+  }
+  const target = {
+    installationExternalId: notification.metadata.installationId.toString(),
+    repositoryExternalId: notification.metadata.repositoryId.toString(),
+    changeRequestId: notification.metadata.pullRequestNumber.toString()
+  };
+  const listSubscriptions = dependencies.listSubscriptions ?? ((subscriptionTarget, options) => {
+    if (!dependencies.github) throw new Error("GitHub integration is required to load webhook subscriptions.");
+    return listPullRequestSubscriptionsForWebhook(
+      subscriptionTarget,
+      options,
+      dependencies.github.integrationStorage
+    );
+  });
+  const retireSubscription = dependencies.retireSubscription ?? ((id, status) => {
+    if (!dependencies.github) throw new Error("GitHub integration is required to retire webhook subscriptions.");
+    return retirePullRequestSubscription(id, status, dependencies.github.integrationStorage);
+  });
+  const subscriptions = await listSubscriptions(target, { includeTerminal: notification.action === "reopened" });
+  let delivered = 0;
+  let failed = 0;
+  for (const subscription of subscriptions) {
+    try {
+      const session = await resolveSubscriptionSession(dependencies.controller, subscription);
+      const result = await session.sendNotificationSignal({
+        source: "github",
+        kind: notification.kind,
+        summary: notification.summary,
+        priority: notification.priority,
+        payload: notification.payload,
+        sourceId: parsed.deliveryId,
+        dedupeKey: `${parsed.deliveryId}:${subscription.sessionId}:${subscription.threadId}`,
+        coalesceKey: `github:${subscription.data.repositoryExternalId}:pull-request:${subscription.data.changeRequestId}`,
+        metadata: {
+          event: notification.metadata.event,
+          action: notification.action,
+          repository: notification.metadata.repository,
+          issueNumber: notification.metadata.issueNumber,
+          pullRequestNumber: notification.metadata.pullRequestNumber,
+          targetUrl: notificationTargetUrl(parsed.event, parsed.payload),
+          deliveryId: parsed.deliveryId
+        }
+      });
+      await Promise.all([result.persisted, result.accepted].filter(Boolean));
+      if (notification.terminal) {
+        await retireSubscription(subscription.id, notification.kind === "pull-request-merged" ? "merged" : "closed");
+      } else if (notification.action === "reopened") {
+        await retireSubscription(subscription.id, "open");
+      }
+      delivered += 1;
+    } catch (error) {
+      failed += 1;
+      dependencies.onTargetError?.(subscription, error);
+    }
+  }
+  return { delivered, failed, ignored: false };
+}
+async function handleGithubWebhook(c, options) {
+  const parsed = await parseGithubWebhook(c, options.github.webhookSecret);
+  if ("status" in parsed) return parsed;
+  if (!SUPPORTED_GITHUB_WEBHOOK_EVENTS.has(parsed.event)) {
+    return { status: 202, body: { ok: true, ignored: true } };
+  }
+  const metadata = normalizeGithubWebhookMetadata(parsed);
+  console.info("[GitHub Webhook]", metadata);
+  if (options.ingestFactoryEvent) {
+    await options.ingestFactoryEvent(parsed);
+  } else {
+    const issueTriageRun = getIssueTriageRunInput(parsed);
+    if (issueTriageRun && options.runIssueTriage) {
+      void options.runIssueTriage(issueTriageRun).catch((error) => {
+        console.error("[GitHub Webhook] Failed to run issue triage", {
+          deliveryId: metadata.deliveryId,
+          repository: metadata.repository,
+          issueNumber: metadata.issueNumber,
+          error: error instanceof Error ? error.message : String(error)
+        });
+      });
+    }
+  }
+  if (!options.controller) {
+    return { status: 202, body: { ok: true } };
+  }
+  const result = await dispatchGithubWebhook(parsed, options);
+  if (result.failed > 0) {
+    console.warn(`[GitHub Webhook] ${result.failed} subscribed target(s) failed for delivery ${parsed.deliveryId}.`);
+  }
+  return { status: 202, body: { ok: true, ...result.ignored ? { ignored: true } : {} } };
+}
+export {
+  classifyGithubWebhook,
+  dispatchGithubWebhook,
+  handleGithubWebhook,
+  normalizeGithubWebhookMetadata
+};
+//# sourceMappingURL=webhook.js.map

package/dist/integrations/github/webhook.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/integrations/github/webhook.ts","../../../src/integrations/github/subscriptions.ts"],"sourcesContent":["import { createHmac, timingSafeEqual } from 'node:crypto';\nimport type { MountedMastraCode } from '@mastra/code-sdk';\nimport type { NotificationPriority } from '@mastra/core/notifications';\nimport type { Context } from 'hono';\nimport type { GithubIntegration } from './integration.js';\nimport type { GithubIssueTriageInput, GithubIssueTriageResult } from './issue-triage.js';\nimport { listPullRequestSubscriptionsForWebhook, retirePullRequestSubscription } from './subscriptions.js';\nimport type { GithubSignalSubscriptionRow, GithubWebhookPullRequestTarget } from './subscriptions.js';\n\nexport type GithubIssueTriageRunInput = GithubIssueTriageInput;\nexport type GithubIssueTriageRunResult = GithubIssueTriageResult;\n\nexport interface GithubWebhookHandlerOptions {\n  /** Integration providing webhook-secret verification + collaborator permission checks. */\n  github: GithubIntegration;\n  runIssueTriage?: (input: GithubIssueTriageRunInput) => Promise<GithubIssueTriageRunResult>;\n  ingestFactoryEvent?: (event: ParsedGithubWebhook) => Promise<unknown>;\n}\n\nconst SUPPORTED_GITHUB_WEBHOOK_EVENTS = new Set([\n  'issues',\n  'issue_comment',\n  'pull_request',\n  'pull_request_review',\n  'pull_request_review_comment',\n]);\n\nexport interface GithubWebhookMetadata {\n  event: string;\n  action?: string;\n  deliveryId: string;\n  repository?: string;\n  repositoryId?: number;\n  issueNumber?: number;\n  pullRequestNumber?: number;\n  sender?: string;\n  senderType?: string;\n  installationId?: number;\n}\n\nexport interface ParsedGithubWebhook {\n  event: string;\n  deliveryId: string;\n  payload: Record<string, unknown>;\n}\n\nexport type GithubWebhookResult =\n  | { status: 202; body: { ok: true; ignored?: true } }\n  | { status: 400; body: { error: 'bad_request'; message: string } }\n  | { status: 401; body: { error: 'unauthorized'; message: string } };\n\nexport interface GithubWebhookNotification {\n  action: string;\n  kind: string;\n  priority: NotificationPriority;\n  summary: string;\n  terminal: boolean;\n  metadata: GithubWebhookMetadata & { pullRequestNumber: number; repositoryId: number; installationId: number };\n  payload: Record<string, unknown>;\n}\n\nexport interface GithubWebhookDispatchDependencies {\n  controller: MountedMastraCode['controller'];\n  /**\n   * Integration used by the default sender-authorization check (collaborator\n   * permission lookup). Author-gated notifications fail closed when neither\n   * this nor an `isAuthorizedSender` override is supplied.\n   */\n  github?: GithubIntegration;\n  listSubscriptions?: (\n    target: GithubWebhookPullRequestTarget,\n    options?: { includeTerminal?: boolean },\n  ) => Promise<GithubSignalSubscriptionRow[]>;\n  retireSubscription?: (id: string, status: 'open' | 'closed' | 'merged') => Promise<void>;\n  isAuthorizedSender?: (notification: GithubWebhookNotification) => Promise<boolean>;\n  onTargetError?: (subscription: GithubSignalSubscriptionRow, error: unknown) => void;\n}\n\nfunction normalizeHeader(value: string | undefined | null): string | null {\n  if (!value) return null;\n  const trimmed = value.trim();\n  return trimmed.length > 0 ? trimmed : null;\n}\n\nfunction verifySignature(rawBody: string, signature: string, secret: string): boolean {\n  if (!signature.startsWith('sha256=')) return false;\n  const signatureHex = signature.slice('sha256='.length);\n  if (!/^[a-fA-F0-9]{64}$/.test(signatureHex)) return false;\n\n  const expectedHex = createHmac('sha256', secret).update(rawBody).digest('hex');\n  const received = Buffer.from(signatureHex, 'hex');\n  const expected = Buffer.from(expectedHex, 'hex');\n  return received.length === expected.length && timingSafeEqual(received, expected);\n}\n\nasync function parseGithubWebhook(\n  c: Context,\n  secret: string | undefined,\n): Promise<ParsedGithubWebhook | GithubWebhookResult> {\n  if (!secret) {\n    return { status: 401, body: { error: 'unauthorized', message: 'GitHub webhook secret is not configured' } };\n  }\n\n  const event = normalizeHeader(c.req.header('x-github-event'));\n  const deliveryId = normalizeHeader(c.req.header('x-github-delivery'));\n  const signature = normalizeHeader(c.req.header('x-hub-signature-256'));\n\n  if (!event) return { status: 400, body: { error: 'bad_request', message: 'Missing x-github-event header' } };\n  if (!deliveryId) return { status: 400, body: { error: 'bad_request', message: 'Missing x-github-delivery header' } };\n  if (!signature)\n    return { status: 401, body: { error: 'unauthorized', message: 'Missing x-hub-signature-256 header' } };\n\n  const rawBody = await c.req.text();\n  if (!verifySignature(rawBody, signature, secret)) {\n    return { status: 401, body: { error: 'unauthorized', message: 'Invalid GitHub webhook signature' } };\n  }\n\n  let payload: unknown;\n  try {\n    payload = JSON.parse(rawBody);\n  } catch {\n    return { status: 400, body: { error: 'bad_request', message: 'Malformed JSON payload' } };\n  }\n\n  if (!payload || typeof payload !== 'object' || Array.isArray(payload)) {\n    return { status: 400, body: { error: 'bad_request', message: 'Payload must be a JSON object' } };\n  }\n\n  return { event, deliveryId, payload: payload as Record<string, unknown> };\n}\n\nfunction getObject(value: unknown): Record<string, unknown> | undefined {\n  return value && typeof value === 'object' && !Array.isArray(value) ? (value as Record<string, unknown>) : undefined;\n}\n\nfunction getString(value: unknown): string | undefined {\n  return typeof value === 'string' && value.length > 0 ? value : undefined;\n}\n\nfunction getNumber(value: unknown): number | undefined {\n  return typeof value === 'number' && Number.isFinite(value) ? value : undefined;\n}\n\nfunction getBoolean(value: unknown): boolean | undefined {\n  return typeof value === 'boolean' ? value : undefined;\n}\n\nfunction getLabels(value: unknown): string[] {\n  if (!Array.isArray(value)) return [];\n  return value\n    .map(label => (typeof label === 'string' ? label : getString(getObject(label)?.name)))\n    .filter((label): label is string => Boolean(label));\n}\n\nfunction getIssueTriageRunInput(parsed: ParsedGithubWebhook): GithubIssueTriageRunInput | null {\n  if (parsed.event !== 'issues' || getString(parsed.payload.action) !== 'opened') return null;\n  const repository = getString(getObject(parsed.payload.repository)?.full_name);\n  const issue = getObject(parsed.payload.issue);\n  const sender = getString(getObject(parsed.payload.sender)?.login);\n  const installationId = getNumber(getObject(parsed.payload.installation)?.id);\n  const issueNumber = getNumber(issue?.number);\n  const issueTitle = getString(issue?.title);\n  const issueUrl = getString(issue?.html_url);\n  if (!repository || !installationId || !issueNumber || !issueTitle || !issueUrl) return null;\n  return {\n    repository,\n    issueNumber,\n    issueTitle,\n    issueUrl,\n    labels: getLabels(issue?.labels),\n    sender,\n    installationId,\n  };\n}\n\nexport function normalizeGithubWebhookMetadata(parsed: ParsedGithubWebhook): GithubWebhookMetadata {\n  const { event, deliveryId, payload } = parsed;\n  const repository = getObject(payload.repository);\n  const issue = getObject(payload.issue);\n  const pullRequest = getObject(payload.pull_request);\n  const sender = getObject(payload.sender);\n  const installation = getObject(payload.installation);\n  const issuePullRequest = getObject(issue?.pull_request);\n\n  return {\n    event,\n    action: getString(payload.action),\n    deliveryId,\n    repository: getString(repository?.full_name),\n    repositoryId: getNumber(repository?.id),\n    issueNumber: getNumber(issue?.number),\n    pullRequestNumber:\n      getNumber(pullRequest?.number) ??\n      (event === 'issue_comment' && issuePullRequest ? getNumber(issue?.number) : undefined),\n    sender: getString(sender?.login),\n    senderType: getString(sender?.type),\n    installationId: getNumber(installation?.id),\n  };\n}\n\nfunction notificationSummary(metadata: GithubWebhookMetadata, label: string): string {\n  const actor = metadata.sender ? `${metadata.sender} ` : '';\n  return `${actor}${label} on ${metadata.repository}#${metadata.pullRequestNumber}`;\n}\n\nfunction notificationTargetUrl(event: string, payload: Record<string, unknown>): string | undefined {\n  if (event === 'issue_comment' || event === 'pull_request_review_comment') {\n    return getString(getObject(payload.comment)?.html_url);\n  }\n  if (event === 'pull_request_review') {\n    return getString(getObject(payload.review)?.html_url);\n  }\n  return getString(getObject(payload.pull_request)?.html_url);\n}\n\nexport function classifyGithubWebhook(parsed: ParsedGithubWebhook): GithubWebhookNotification | undefined {\n  const metadata = normalizeGithubWebhookMetadata(parsed);\n  const { event, payload } = parsed;\n  const action = metadata.action;\n  if (\n    !action ||\n    !metadata.repositoryId ||\n    !metadata.installationId ||\n    !metadata.pullRequestNumber ||\n    !metadata.repository\n  ) {\n    return undefined;\n  }\n\n  let priority: NotificationPriority;\n  let kind: string;\n  let label: string;\n  let terminal = false;\n\n  if (event === 'pull_request_review' && action === 'submitted') {\n    const state = getString(getObject(payload.review)?.state)?.toLowerCase().replaceAll('_', '-');\n    priority = state === 'approved' || state === 'changes-requested' ? 'urgent' : 'high';\n    kind =\n      state === 'approved'\n        ? 'review-approved'\n        : state === 'changes-requested'\n          ? 'review-changes-requested'\n          : 'review-submitted';\n    label =\n      state === 'approved'\n        ? 'approved the pull request'\n        : state === 'changes-requested'\n          ? 'requested changes'\n          : 'submitted a review';\n  } else if (event === 'pull_request' && action === 'closed') {\n    const merged = getBoolean(getObject(payload.pull_request)?.merged) === true;\n    priority = 'urgent';\n    kind = merged ? 'pull-request-merged' : 'pull-request-closed';\n    label = merged ? 'merged the pull request' : 'closed the pull request';\n    terminal = true;\n  } else if (event === 'issue_comment' && action === 'created') {\n    priority = 'high';\n    kind = 'issue-comment-created';\n    label = 'commented';\n  } else if (event === 'pull_request_review_comment' && action === 'created') {\n    priority = 'high';\n    kind = 'review-comment-created';\n    label = 'left a review comment';\n  } else if (event === 'pull_request' && action === 'reopened') {\n    priority = 'high';\n    kind = 'pull-request-reopened';\n    label = 'reopened the pull request';\n  } else if (event === 'pull_request_review' && action === 'dismissed') {\n    priority = 'high';\n    kind = 'review-dismissed';\n    label = 'dismissed a review';\n  } else if (\n    event === 'pull_request' &&\n    [\n      'synchronize',\n      'ready_for_review',\n      'converted_to_draft',\n      'assigned',\n      'unassigned',\n      'review_requested',\n      'review_request_removed',\n    ].includes(action)\n  ) {\n    priority = 'medium';\n    kind = `pull-request-${action.replaceAll('_', '-')}`;\n    label = action.replaceAll('_', ' ');\n  } else if (\n    event === 'pull_request' &&\n    ['edited', 'labeled', 'unlabeled', 'milestoned', 'demilestoned'].includes(action)\n  ) {\n    priority = 'low';\n    kind = `pull-request-${action.replaceAll('_', '-')}`;\n    label = action.replaceAll('_', ' ');\n  } else {\n    return undefined;\n  }\n\n  return {\n    action,\n    kind,\n    priority,\n    summary: notificationSummary(metadata, label),\n    terminal,\n    metadata: {\n      ...metadata,\n      pullRequestNumber: metadata.pullRequestNumber,\n      repositoryId: metadata.repositoryId,\n      installationId: metadata.installationId,\n    },\n    payload,\n  };\n}\n\nasync function resolveSubscriptionSession(\n  controller: MountedMastraCode['controller'],\n  subscription: GithubSignalSubscriptionRow,\n) {\n  const { sessionId, resourceId, threadId } = subscription;\n  if (!sessionId || !resourceId || !threadId) {\n    throw new Error(`GitHub subscription ${subscription.id} is missing its session binding.`);\n  }\n  const scope = subscription.sessionScope || undefined;\n  let session = await controller.getSessionByResource(resourceId, scope);\n  if (!session) {\n    const tags = {\n      factoryProjectId: resourceId,\n      projectRepositoryId: subscription.data.projectRepositoryId,\n      ...(scope ? { worktreePath: scope } : {}),\n    };\n    session = await controller.createSession({\n      id: sessionId,\n      ownerId: subscription.data.ownerId,\n      resourceId,\n      scope,\n      tags,\n    });\n  }\n  if (session.thread.getId() !== threadId) {\n    await session.thread.switch({ threadId, emitEvent: false });\n  }\n  if (session.thread.getId() !== threadId) {\n    throw new Error(`Session ${sessionId} did not bind thread ${threadId}.`);\n  }\n  return session;\n}\n\nconst AUTHORIZED_BOTS = new Set(['coderabbitai[bot]', 'devin-ai-integration[bot]']);\nconst AUTHORIZED_PERMISSIONS = new Set(['admin', 'maintain', 'write']);\nconst PERMISSION_CHECK_TIMEOUT_MS = 5_000;\nconst AUTHOR_GATED_KINDS = new Set([\n  'issue-comment-created',\n  'review-comment-created',\n  'review-submitted',\n  'review-approved',\n  'review-changes-requested',\n  'review-dismissed',\n]);\n\nasync function isAuthorizedGithubSender(\n  notification: GithubWebhookNotification,\n  github: GithubIntegration | undefined,\n): Promise<boolean> {\n  if (!AUTHOR_GATED_KINDS.has(notification.kind)) return true;\n  const sender = notification.metadata.sender;\n  const repository = notification.metadata.repository;\n  if (!sender || !repository) return false;\n  const normalizedSender = sender.toLowerCase();\n  if (notification.metadata.senderType?.toLowerCase() === 'bot' || normalizedSender.endsWith('[bot]')) {\n    return AUTHORIZED_BOTS.has(normalizedSender);\n  }\n  if (!github) return false;\n  const abortController = new AbortController();\n  let timeout: ReturnType<typeof setTimeout> | undefined;\n  try {\n    const permission = await Promise.race([\n      github.getRepositoryCollaboratorPermission(\n        notification.metadata.installationId,\n        repository,\n        sender,\n        abortController.signal,\n      ),\n      new Promise<undefined>(resolve => {\n        timeout = setTimeout(() => {\n          abortController.abort();\n          resolve(undefined);\n        }, PERMISSION_CHECK_TIMEOUT_MS);\n      }),\n    ]);\n    return permission !== undefined && AUTHORIZED_PERMISSIONS.has(permission);\n  } catch {\n    return false;\n  } finally {\n    if (timeout) clearTimeout(timeout);\n  }\n}\n\nexport async function dispatchGithubWebhook(\n  parsed: ParsedGithubWebhook,\n  dependencies: GithubWebhookDispatchDependencies,\n): Promise<{ delivered: number; failed: number; ignored: boolean }> {\n  const notification = classifyGithubWebhook(parsed);\n  if (!notification) return { delivered: 0, failed: 0, ignored: true };\n  const isAuthorizedSender =\n    dependencies.isAuthorizedSender ??\n    ((n: GithubWebhookNotification) => isAuthorizedGithubSender(n, dependencies.github));\n  if (!(await isAuthorizedSender(notification))) {\n    return { delivered: 0, failed: 0, ignored: true };\n  }\n\n  const target = {\n    installationExternalId: notification.metadata.installationId.toString(),\n    repositoryExternalId: notification.metadata.repositoryId.toString(),\n    changeRequestId: notification.metadata.pullRequestNumber.toString(),\n  };\n  const listSubscriptions =\n    dependencies.listSubscriptions ??\n    ((subscriptionTarget: GithubWebhookPullRequestTarget, options?: { includeTerminal?: boolean }) => {\n      if (!dependencies.github) throw new Error('GitHub integration is required to load webhook subscriptions.');\n      return listPullRequestSubscriptionsForWebhook(\n        subscriptionTarget,\n        options,\n        dependencies.github.integrationStorage,\n      );\n    });\n  const retireSubscription =\n    dependencies.retireSubscription ??\n    ((id: string, status: 'open' | 'closed' | 'merged') => {\n      if (!dependencies.github) throw new Error('GitHub integration is required to retire webhook subscriptions.');\n      return retirePullRequestSubscription(id, status, dependencies.github.integrationStorage);\n    });\n  const subscriptions = await listSubscriptions(target, { includeTerminal: notification.action === 'reopened' });\n  let delivered = 0;\n  let failed = 0;\n\n  for (const subscription of subscriptions) {\n    try {\n      const session = await resolveSubscriptionSession(dependencies.controller, subscription);\n      const result = await session.sendNotificationSignal({\n        source: 'github',\n        kind: notification.kind,\n        summary: notification.summary,\n        priority: notification.priority,\n        payload: notification.payload,\n        sourceId: parsed.deliveryId,\n        dedupeKey: `${parsed.deliveryId}:${subscription.sessionId}:${subscription.threadId}`,\n        coalesceKey: `github:${subscription.data.repositoryExternalId}:pull-request:${subscription.data.changeRequestId}`,\n        metadata: {\n          event: notification.metadata.event,\n          action: notification.action,\n          repository: notification.metadata.repository,\n          issueNumber: notification.metadata.issueNumber,\n          pullRequestNumber: notification.metadata.pullRequestNumber,\n          targetUrl: notificationTargetUrl(parsed.event, parsed.payload),\n          deliveryId: parsed.deliveryId,\n        },\n      });\n      await Promise.all([result.persisted, result.accepted].filter(Boolean));\n      if (notification.terminal) {\n        await retireSubscription(subscription.id, notification.kind === 'pull-request-merged' ? 'merged' : 'closed');\n      } else if (notification.action === 'reopened') {\n        await retireSubscription(subscription.id, 'open');\n      }\n      delivered += 1;\n    } catch (error) {\n      failed += 1;\n      dependencies.onTargetError?.(subscription, error);\n    }\n  }\n\n  return { delivered, failed, ignored: false };\n}\n\nexport async function handleGithubWebhook(\n  c: Context,\n  options: GithubWebhookHandlerOptions & Partial<Omit<GithubWebhookDispatchDependencies, 'github'>>,\n): Promise<GithubWebhookResult> {\n  const parsed = await parseGithubWebhook(c, options.github.webhookSecret);\n  if ('status' in parsed) return parsed;\n\n  if (!SUPPORTED_GITHUB_WEBHOOK_EVENTS.has(parsed.event)) {\n    return { status: 202, body: { ok: true, ignored: true } };\n  }\n\n  const metadata = normalizeGithubWebhookMetadata(parsed);\n  console.info('[GitHub Webhook]', metadata);\n\n  if (options.ingestFactoryEvent) {\n    await options.ingestFactoryEvent(parsed);\n  } else {\n    const issueTriageRun = getIssueTriageRunInput(parsed);\n    if (issueTriageRun && options.runIssueTriage) {\n      void options.runIssueTriage(issueTriageRun).catch((error: unknown) => {\n        console.error('[GitHub Webhook] Failed to run issue triage', {\n          deliveryId: metadata.deliveryId,\n          repository: metadata.repository,\n          issueNumber: metadata.issueNumber,\n          error: error instanceof Error ? error.message : String(error),\n        });\n      });\n    }\n  }\n\n  if (!options.controller) {\n    return { status: 202, body: { ok: true } };\n  }\n\n  const result = await dispatchGithubWebhook(parsed, options as GithubWebhookDispatchDependencies);\n  if (result.failed > 0) {\n    console.warn(`[GitHub Webhook] ${result.failed} subscribed target(s) failed for delivery ${parsed.deliveryId}.`);\n  }\n  return { status: 202, body: { ok: true, ...(result.ignored ? { ignored: true as const } : {}) } };\n}\n","import type { IntegrationStorageHandle, IntegrationSubscription } from '../../storage/domains/integrations/base.js';\n\nexport type GithubSignalSubscriptionSource = 'auto-gh-pr-create' | 'factory-pr-create' | 'explicit-tool';\nexport type GithubSignalSubscriptionStatus = 'open' | 'closed' | 'merged';\n\nexport interface GithubSignalSubscriptionData {\n  installationExternalId: string;\n  projectRepositoryId: string;\n  repositoryExternalId: string;\n  repositorySlug: string;\n  changeRequestId: string;\n  ownerId: string;\n  source: GithubSignalSubscriptionSource;\n  subscribedByUserId: string | null;\n}\n\nexport type GithubSignalSubscriptionRow = IntegrationSubscription<GithubSignalSubscriptionData>;\nexport type GithubSubscriptionStorage = IntegrationStorageHandle<\n  Record<string, unknown>,\n  Record<string, unknown>,\n  GithubSignalSubscriptionData\n>;\n\nexport interface SubscribeToPullRequestInput {\n  orgId: string;\n  installationExternalId: string;\n  projectRepositoryId: string;\n  repositoryExternalId: string;\n  repositorySlug: string;\n  changeRequestId: string;\n  sessionId: string;\n  ownerId: string;\n  resourceId: string;\n  threadId: string;\n  sessionScope?: string;\n  source: GithubSignalSubscriptionSource;\n  subscribedByUserId?: string;\n}\n\nexport interface ThreadSubscriptionTarget {\n  orgId: string;\n  resourceId: string;\n  threadId: string;\n  sessionScope?: string;\n}\n\nexport interface PullRequestSubscriptionTarget {\n  orgId: string;\n  installationExternalId: string;\n  repositoryExternalId: string;\n  changeRequestId: string;\n}\n\nexport type GithubWebhookPullRequestTarget = Omit<PullRequestSubscriptionTarget, 'orgId'>;\n\nexport function changeRequestTargetKey(input: GithubWebhookPullRequestTarget): string {\n  return `change-request:${input.installationExternalId}:${input.repositoryExternalId}:${input.changeRequestId}`;\n}\n\nfunction sameSession(row: GithubSignalSubscriptionRow, input: SubscribeToPullRequestInput): boolean {\n  return (\n    row.orgId === input.orgId &&\n    row.sessionId === input.sessionId &&\n    row.resourceId === input.resourceId &&\n    row.threadId === input.threadId &&\n    (row.sessionScope ?? '') === (input.sessionScope ?? '')\n  );\n}\n\nexport async function subscribeToPullRequest(\n  input: SubscribeToPullRequestInput,\n  storage: GithubSubscriptionStorage,\n): Promise<GithubSignalSubscriptionRow> {\n  const targetKey = changeRequestTargetKey(input);\n  const existing = (await storage.subscriptions.listByTarget(targetKey)).find(row => sameSession(row, input));\n  if (existing) {\n    if (existing.status !== 'open') await storage.subscriptions.updateStatus(existing.id, 'open');\n    return { ...existing, status: 'open' };\n  }\n\n  return storage.subscriptions.create({\n    orgId: input.orgId,\n    targetKey,\n    sessionId: input.sessionId,\n    resourceId: input.resourceId,\n    threadId: input.threadId,\n    sessionScope: input.sessionScope ?? '',\n    status: 'open',\n    data: {\n      installationExternalId: input.installationExternalId,\n      projectRepositoryId: input.projectRepositoryId,\n      repositoryExternalId: input.repositoryExternalId,\n      repositorySlug: input.repositorySlug,\n      changeRequestId: input.changeRequestId,\n      ownerId: input.ownerId,\n      source: input.source,\n      subscribedByUserId: input.subscribedByUserId ?? null,\n    },\n  });\n}\n\nexport async function unsubscribeFromPullRequest(\n  input: SubscribeToPullRequestInput,\n  storage: GithubSubscriptionStorage,\n): Promise<void> {\n  const rows = await storage.subscriptions.listByTarget(changeRequestTargetKey(input));\n  await Promise.all(rows.filter(row => sameSession(row, input)).map(row => storage.subscriptions.delete(row.id)));\n}\n\nexport async function listPullRequestSubscriptionsForThread(\n  input: ThreadSubscriptionTarget,\n  storage: GithubSubscriptionStorage,\n): Promise<GithubSignalSubscriptionRow[]> {\n  const rows = await storage.subscriptions.listByThread(input.resourceId, input.threadId);\n  return rows.filter(\n    row =>\n      row.orgId === input.orgId &&\n      row.resourceId === input.resourceId &&\n      row.threadId === input.threadId &&\n      (row.sessionScope ?? '') === (input.sessionScope ?? ''),\n  );\n}\n\nexport async function listPullRequestSubscriptions(\n  input: PullRequestSubscriptionTarget,\n  storage: GithubSubscriptionStorage,\n): Promise<GithubSignalSubscriptionRow[]> {\n  const rows = await storage.subscriptions.listByTarget(changeRequestTargetKey(input));\n  return rows.filter(row => row.orgId === input.orgId && row.status === 'open');\n}\n\nexport async function listPullRequestSubscriptionsForWebhook(\n  input: GithubWebhookPullRequestTarget,\n  options: { includeTerminal?: boolean } | undefined,\n  storage: GithubSubscriptionStorage,\n): Promise<GithubSignalSubscriptionRow[]> {\n  const rows = await storage.subscriptions.listByTarget(changeRequestTargetKey(input));\n  return options?.includeTerminal ? rows : rows.filter(row => row.status === 'open');\n}\n\nexport function retirePullRequestSubscription(\n  id: string,\n  status: GithubSignalSubscriptionStatus,\n  storage: GithubSubscriptionStorage,\n): Promise<void> {\n  return storage.subscriptions.updateStatus(id, status);\n}\n\nexport async function retirePullRequestSubscriptions(\n  input: PullRequestSubscriptionTarget,\n  storage: GithubSubscriptionStorage,\n): Promise<void> {\n  const rows = await listPullRequestSubscriptions(input, storage);\n  await Promise.all(rows.map(row => storage.subscriptions.updateStatus(row.id, 'closed')));\n}\n"],"mappings":";AAAA,SAAS,YAAY,uBAAuB;;;ACuDrC,SAAS,uBAAuB,OAA+C;AACpF,SAAO,kBAAkB,MAAM,sBAAsB,IAAI,MAAM,oBAAoB,IAAI,MAAM,eAAe;AAC9G;AA0EA,eAAsB,uCACpB,OACA,SACA,SACwC;AACxC,QAAM,OAAO,MAAM,QAAQ,cAAc,aAAa,uBAAuB,KAAK,CAAC;AACnF,SAAO,SAAS,kBAAkB,OAAO,KAAK,OAAO,SAAO,IAAI,WAAW,MAAM;AACnF;AAEO,SAAS,8BACd,IACA,QACA,SACe;AACf,SAAO,QAAQ,cAAc,aAAa,IAAI,MAAM;AACtD;;;AD/HA,IAAM,kCAAkC,oBAAI,IAAI;AAAA,EAC9C;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAqDD,SAAS,gBAAgB,OAAiD;AACxE,MAAI,CAAC,MAAO,QAAO;AACnB,QAAM,UAAU,MAAM,KAAK;AAC3B,SAAO,QAAQ,SAAS,IAAI,UAAU;AACxC;AAEA,SAAS,gBAAgB,SAAiB,WAAmB,QAAyB;AACpF,MAAI,CAAC,UAAU,WAAW,SAAS,EAAG,QAAO;AAC7C,QAAM,eAAe,UAAU,MAAM,UAAU,MAAM;AACrD,MAAI,CAAC,oBAAoB,KAAK,YAAY,EAAG,QAAO;AAEpD,QAAM,cAAc,WAAW,UAAU,MAAM,EAAE,OAAO,OAAO,EAAE,OAAO,KAAK;AAC7E,QAAM,WAAW,OAAO,KAAK,cAAc,KAAK;AAChD,QAAM,WAAW,OAAO,KAAK,aAAa,KAAK;AAC/C,SAAO,SAAS,WAAW,SAAS,UAAU,gBAAgB,UAAU,QAAQ;AAClF;AAEA,eAAe,mBACb,GACA,QACoD;AACpD,MAAI,CAAC,QAAQ;AACX,WAAO,EAAE,QAAQ,KAAK,MAAM,EAAE,OAAO,gBAAgB,SAAS,0CAA0C,EAAE;AAAA,EAC5G;AAEA,QAAM,QAAQ,gBAAgB,EAAE,IAAI,OAAO,gBAAgB,CAAC;AAC5D,QAAM,aAAa,gBAAgB,EAAE,IAAI,OAAO,mBAAmB,CAAC;AACpE,QAAM,YAAY,gBAAgB,EAAE,IAAI,OAAO,qBAAqB,CAAC;AAErE,MAAI,CAAC,MAAO,QAAO,EAAE,QAAQ,KAAK,MAAM,EAAE,OAAO,eAAe,SAAS,gCAAgC,EAAE;AAC3G,MAAI,CAAC,WAAY,QAAO,EAAE,QAAQ,KAAK,MAAM,EAAE,OAAO,eAAe,SAAS,mCAAmC,EAAE;AACnH,MAAI,CAAC;AACH,WAAO,EAAE,QAAQ,KAAK,MAAM,EAAE,OAAO,gBAAgB,SAAS,qCAAqC,EAAE;AAEvG,QAAM,UAAU,MAAM,EAAE,IAAI,KAAK;AACjC,MAAI,CAAC,gBAAgB,SAAS,WAAW,MAAM,GAAG;AAChD,WAAO,EAAE,QAAQ,KAAK,MAAM,EAAE,OAAO,gBAAgB,SAAS,mCAAmC,EAAE;AAAA,EACrG;AAEA,MAAI;AACJ,MAAI;AACF,cAAU,KAAK,MAAM,OAAO;AAAA,EAC9B,QAAQ;AACN,WAAO,EAAE,QAAQ,KAAK,MAAM,EAAE,OAAO,eAAe,SAAS,yBAAyB,EAAE;AAAA,EAC1F;AAEA,MAAI,CAAC,WAAW,OAAO,YAAY,YAAY,MAAM,QAAQ,OAAO,GAAG;AACrE,WAAO,EAAE,QAAQ,KAAK,MAAM,EAAE,OAAO,eAAe,SAAS,gCAAgC,EAAE;AAAA,EACjG;AAEA,SAAO,EAAE,OAAO,YAAY,QAA4C;AAC1E;AAEA,SAAS,UAAU,OAAqD;AACtE,SAAO,SAAS,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,KAAK,IAAK,QAAoC;AAC5G;AAEA,SAAS,UAAU,OAAoC;AACrD,SAAO,OAAO,UAAU,YAAY,MAAM,SAAS,IAAI,QAAQ;AACjE;AAEA,SAAS,UAAU,OAAoC;AACrD,SAAO,OAAO,UAAU,YAAY,OAAO,SAAS,KAAK,IAAI,QAAQ;AACvE;AAEA,SAAS,WAAW,OAAqC;AACvD,SAAO,OAAO,UAAU,YAAY,QAAQ;AAC9C;AAEA,SAAS,UAAU,OAA0B;AAC3C,MAAI,CAAC,MAAM,QAAQ,KAAK,EAAG,QAAO,CAAC;AACnC,SAAO,MACJ,IAAI,WAAU,OAAO,UAAU,WAAW,QAAQ,UAAU,UAAU,KAAK,GAAG,IAAI,CAAE,EACpF,OAAO,CAAC,UAA2B,QAAQ,KAAK,CAAC;AACtD;AAEA,SAAS,uBAAuB,QAA+D;AAC7F,MAAI,OAAO,UAAU,YAAY,UAAU,OAAO,QAAQ,MAAM,MAAM,SAAU,QAAO;AACvF,QAAM,aAAa,UAAU,UAAU,OAAO,QAAQ,UAAU,GAAG,SAAS;AAC5E,QAAM,QAAQ,UAAU,OAAO,QAAQ,KAAK;AAC5C,QAAM,SAAS,UAAU,UAAU,OAAO,QAAQ,MAAM,GAAG,KAAK;AAChE,QAAM,iBAAiB,UAAU,UAAU,OAAO,QAAQ,YAAY,GAAG,EAAE;AAC3E,QAAM,cAAc,UAAU,OAAO,MAAM;AAC3C,QAAM,aAAa,UAAU,OAAO,KAAK;AACzC,QAAM,WAAW,UAAU,OAAO,QAAQ;AAC1C,MAAI,CAAC,cAAc,CAAC,kBAAkB,CAAC,eAAe,CAAC,cAAc,CAAC,SAAU,QAAO;AACvF,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,QAAQ,UAAU,OAAO,MAAM;AAAA,IAC/B;AAAA,IACA;AAAA,EACF;AACF;AAEO,SAAS,+BAA+B,QAAoD;AACjG,QAAM,EAAE,OAAO,YAAY,QAAQ,IAAI;AACvC,QAAM,aAAa,UAAU,QAAQ,UAAU;AAC/C,QAAM,QAAQ,UAAU,QAAQ,KAAK;AACrC,QAAM,cAAc,UAAU,QAAQ,YAAY;AAClD,QAAM,SAAS,UAAU,QAAQ,MAAM;AACvC,QAAM,eAAe,UAAU,QAAQ,YAAY;AACnD,QAAM,mBAAmB,UAAU,OAAO,YAAY;AAEtD,SAAO;AAAA,IACL;AAAA,IACA,QAAQ,UAAU,QAAQ,MAAM;AAAA,IAChC;AAAA,IACA,YAAY,UAAU,YAAY,SAAS;AAAA,IAC3C,cAAc,UAAU,YAAY,EAAE;AAAA,IACtC,aAAa,UAAU,OAAO,MAAM;AAAA,IACpC,mBACE,UAAU,aAAa,MAAM,MAC5B,UAAU,mBAAmB,mBAAmB,UAAU,OAAO,MAAM,IAAI;AAAA,IAC9E,QAAQ,UAAU,QAAQ,KAAK;AAAA,IAC/B,YAAY,UAAU,QAAQ,IAAI;AAAA,IAClC,gBAAgB,UAAU,cAAc,EAAE;AAAA,EAC5C;AACF;AAEA,SAAS,oBAAoB,UAAiC,OAAuB;AACnF,QAAM,QAAQ,SAAS,SAAS,GAAG,SAAS,MAAM,MAAM;AACxD,SAAO,GAAG,KAAK,GAAG,KAAK,OAAO,SAAS,UAAU,IAAI,SAAS,iBAAiB;AACjF;AAEA,SAAS,sBAAsB,OAAe,SAAsD;AAClG,MAAI,UAAU,mBAAmB,UAAU,+BAA+B;AACxE,WAAO,UAAU,UAAU,QAAQ,OAAO,GAAG,QAAQ;AAAA,EACvD;AACA,MAAI,UAAU,uBAAuB;AACnC,WAAO,UAAU,UAAU,QAAQ,MAAM,GAAG,QAAQ;AAAA,EACtD;AACA,SAAO,UAAU,UAAU,QAAQ,YAAY,GAAG,QAAQ;AAC5D;AAEO,SAAS,sBAAsB,QAAoE;AACxG,QAAM,WAAW,+BAA+B,MAAM;AACtD,QAAM,EAAE,OAAO,QAAQ,IAAI;AAC3B,QAAM,SAAS,SAAS;AACxB,MACE,CAAC,UACD,CAAC,SAAS,gBACV,CAAC,SAAS,kBACV,CAAC,SAAS,qBACV,CAAC,SAAS,YACV;AACA,WAAO;AAAA,EACT;AAEA,MAAI;AACJ,MAAI;AACJ,MAAI;AACJ,MAAI,WAAW;AAEf,MAAI,UAAU,yBAAyB,WAAW,aAAa;AAC7D,UAAM,QAAQ,UAAU,UAAU,QAAQ,MAAM,GAAG,KAAK,GAAG,YAAY,EAAE,WAAW,KAAK,GAAG;AAC5F,eAAW,UAAU,cAAc,UAAU,sBAAsB,WAAW;AAC9E,WACE,UAAU,aACN,oBACA,UAAU,sBACR,6BACA;AACR,YACE,UAAU,aACN,8BACA,UAAU,sBACR,sBACA;AAAA,EACV,WAAW,UAAU,kBAAkB,WAAW,UAAU;AAC1D,UAAM,SAAS,WAAW,UAAU,QAAQ,YAAY,GAAG,MAAM,MAAM;AACvE,eAAW;AACX,WAAO,SAAS,wBAAwB;AACxC,YAAQ,SAAS,4BAA4B;AAC7C,eAAW;AAAA,EACb,WAAW,UAAU,mBAAmB,WAAW,WAAW;AAC5D,eAAW;AACX,WAAO;AACP,YAAQ;AAAA,EACV,WAAW,UAAU,iCAAiC,WAAW,WAAW;AAC1E,eAAW;AACX,WAAO;AACP,YAAQ;AAAA,EACV,WAAW,UAAU,kBAAkB,WAAW,YAAY;AAC5D,eAAW;AACX,WAAO;AACP,YAAQ;AAAA,EACV,WAAW,UAAU,yBAAyB,WAAW,aAAa;AACpE,eAAW;AACX,WAAO;AACP,YAAQ;AAAA,EACV,WACE,UAAU,kBACV;AAAA,IACE;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,EAAE,SAAS,MAAM,GACjB;AACA,eAAW;AACX,WAAO,gBAAgB,OAAO,WAAW,KAAK,GAAG,CAAC;AAClD,YAAQ,OAAO,WAAW,KAAK,GAAG;AAAA,EACpC,WACE,UAAU,kBACV,CAAC,UAAU,WAAW,aAAa,cAAc,cAAc,EAAE,SAAS,MAAM,GAChF;AACA,eAAW;AACX,WAAO,gBAAgB,OAAO,WAAW,KAAK,GAAG,CAAC;AAClD,YAAQ,OAAO,WAAW,KAAK,GAAG;AAAA,EACpC,OAAO;AACL,WAAO;AAAA,EACT;AAEA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA,SAAS,oBAAoB,UAAU,KAAK;AAAA,IAC5C;AAAA,IACA,UAAU;AAAA,MACR,GAAG;AAAA,MACH,mBAAmB,SAAS;AAAA,MAC5B,cAAc,SAAS;AAAA,MACvB,gBAAgB,SAAS;AAAA,IAC3B;AAAA,IACA;AAAA,EACF;AACF;AAEA,eAAe,2BACb,YACA,cACA;AACA,QAAM,EAAE,WAAW,YAAY,SAAS,IAAI;AAC5C,MAAI,CAAC,aAAa,CAAC,cAAc,CAAC,UAAU;AAC1C,UAAM,IAAI,MAAM,uBAAuB,aAAa,EAAE,kCAAkC;AAAA,EAC1F;AACA,QAAM,QAAQ,aAAa,gBAAgB;AAC3C,MAAI,UAAU,MAAM,WAAW,qBAAqB,YAAY,KAAK;AACrE,MAAI,CAAC,SAAS;AACZ,UAAM,OAAO;AAAA,MACX,kBAAkB;AAAA,MAClB,qBAAqB,aAAa,KAAK;AAAA,MACvC,GAAI,QAAQ,EAAE,cAAc,MAAM,IAAI,CAAC;AAAA,IACzC;AACA,cAAU,MAAM,WAAW,cAAc;AAAA,MACvC,IAAI;AAAA,MACJ,SAAS,aAAa,KAAK;AAAA,MAC3B;AAAA,MACA;AAAA,MACA;AAAA,IACF,CAAC;AAAA,EACH;AACA,MAAI,QAAQ,OAAO,MAAM,MAAM,UAAU;AACvC,UAAM,QAAQ,OAAO,OAAO,EAAE,UAAU,WAAW,MAAM,CAAC;AAAA,EAC5D;AACA,MAAI,QAAQ,OAAO,MAAM,MAAM,UAAU;AACvC,UAAM,IAAI,MAAM,WAAW,SAAS,wBAAwB,QAAQ,GAAG;AAAA,EACzE;AACA,SAAO;AACT;AAEA,IAAM,kBAAkB,oBAAI,IAAI,CAAC,qBAAqB,2BAA2B,CAAC;AAClF,IAAM,yBAAyB,oBAAI,IAAI,CAAC,SAAS,YAAY,OAAO,CAAC;AACrE,IAAM,8BAA8B;AACpC,IAAM,qBAAqB,oBAAI,IAAI;AAAA,EACjC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAED,eAAe,yBACb,cACA,QACkB;AAClB,MAAI,CAAC,mBAAmB,IAAI,aAAa,IAAI,EAAG,QAAO;AACvD,QAAM,SAAS,aAAa,SAAS;AACrC,QAAM,aAAa,aAAa,SAAS;AACzC,MAAI,CAAC,UAAU,CAAC,WAAY,QAAO;AACnC,QAAM,mBAAmB,OAAO,YAAY;AAC5C,MAAI,aAAa,SAAS,YAAY,YAAY,MAAM,SAAS,iBAAiB,SAAS,OAAO,GAAG;AACnG,WAAO,gBAAgB,IAAI,gBAAgB;AAAA,EAC7C;AACA,MAAI,CAAC,OAAQ,QAAO;AACpB,QAAM,kBAAkB,IAAI,gBAAgB;AAC5C,MAAI;AACJ,MAAI;AACF,UAAM,aAAa,MAAM,QAAQ,KAAK;AAAA,MACpC,OAAO;AAAA,QACL,aAAa,SAAS;AAAA,QACtB;AAAA,QACA;AAAA,QACA,gBAAgB;AAAA,MAClB;AAAA,MACA,IAAI,QAAmB,aAAW;AAChC,kBAAU,WAAW,MAAM;AACzB,0BAAgB,MAAM;AACtB,kBAAQ,MAAS;AAAA,QACnB,GAAG,2BAA2B;AAAA,MAChC,CAAC;AAAA,IACH,CAAC;AACD,WAAO,eAAe,UAAa,uBAAuB,IAAI,UAAU;AAAA,EAC1E,QAAQ;AACN,WAAO;AAAA,EACT,UAAE;AACA,QAAI,QAAS,cAAa,OAAO;AAAA,EACnC;AACF;AAEA,eAAsB,sBACpB,QACA,cACkE;AAClE,QAAM,eAAe,sBAAsB,MAAM;AACjD,MAAI,CAAC,aAAc,QAAO,EAAE,WAAW,GAAG,QAAQ,GAAG,SAAS,KAAK;AACnE,QAAM,qBACJ,aAAa,uBACZ,CAAC,MAAiC,yBAAyB,GAAG,aAAa,MAAM;AACpF,MAAI,CAAE,MAAM,mBAAmB,YAAY,GAAI;AAC7C,WAAO,EAAE,WAAW,GAAG,QAAQ,GAAG,SAAS,KAAK;AAAA,EAClD;AAEA,QAAM,SAAS;AAAA,IACb,wBAAwB,aAAa,SAAS,eAAe,SAAS;AAAA,IACtE,sBAAsB,aAAa,SAAS,aAAa,SAAS;AAAA,IAClE,iBAAiB,aAAa,SAAS,kBAAkB,SAAS;AAAA,EACpE;AACA,QAAM,oBACJ,aAAa,sBACZ,CAAC,oBAAoD,YAA4C;AAChG,QAAI,CAAC,aAAa,OAAQ,OAAM,IAAI,MAAM,+DAA+D;AACzG,WAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA,aAAa,OAAO;AAAA,IACtB;AAAA,EACF;AACF,QAAM,qBACJ,aAAa,uBACZ,CAAC,IAAY,WAAyC;AACrD,QAAI,CAAC,aAAa,OAAQ,OAAM,IAAI,MAAM,iEAAiE;AAC3G,WAAO,8BAA8B,IAAI,QAAQ,aAAa,OAAO,kBAAkB;AAAA,EACzF;AACF,QAAM,gBAAgB,MAAM,kBAAkB,QAAQ,EAAE,iBAAiB,aAAa,WAAW,WAAW,CAAC;AAC7G,MAAI,YAAY;AAChB,MAAI,SAAS;AAEb,aAAW,gBAAgB,eAAe;AACxC,QAAI;AACF,YAAM,UAAU,MAAM,2BAA2B,aAAa,YAAY,YAAY;AACtF,YAAM,SAAS,MAAM,QAAQ,uBAAuB;AAAA,QAClD,QAAQ;AAAA,QACR,MAAM,aAAa;AAAA,QACnB,SAAS,aAAa;AAAA,QACtB,UAAU,aAAa;AAAA,QACvB,SAAS,aAAa;AAAA,QACtB,UAAU,OAAO;AAAA,QACjB,WAAW,GAAG,OAAO,UAAU,IAAI,aAAa,SAAS,IAAI,aAAa,QAAQ;AAAA,QAClF,aAAa,UAAU,aAAa,KAAK,oBAAoB,iBAAiB,aAAa,KAAK,eAAe;AAAA,QAC/G,UAAU;AAAA,UACR,OAAO,aAAa,SAAS;AAAA,UAC7B,QAAQ,aAAa;AAAA,UACrB,YAAY,aAAa,SAAS;AAAA,UAClC,aAAa,aAAa,SAAS;AAAA,UACnC,mBAAmB,aAAa,SAAS;AAAA,UACzC,WAAW,sBAAsB,OAAO,OAAO,OAAO,OAAO;AAAA,UAC7D,YAAY,OAAO;AAAA,QACrB;AAAA,MACF,CAAC;AACD,YAAM,QAAQ,IAAI,CAAC,OAAO,WAAW,OAAO,QAAQ,EAAE,OAAO,OAAO,CAAC;AACrE,UAAI,aAAa,UAAU;AACzB,cAAM,mBAAmB,aAAa,IAAI,aAAa,SAAS,wBAAwB,WAAW,QAAQ;AAAA,MAC7G,WAAW,aAAa,WAAW,YAAY;AAC7C,cAAM,mBAAmB,aAAa,IAAI,MAAM;AAAA,MAClD;AACA,mBAAa;AAAA,IACf,SAAS,OAAO;AACd,gBAAU;AACV,mBAAa,gBAAgB,cAAc,KAAK;AAAA,IAClD;AAAA,EACF;AAEA,SAAO,EAAE,WAAW,QAAQ,SAAS,MAAM;AAC7C;AAEA,eAAsB,oBACpB,GACA,SAC8B;AAC9B,QAAM,SAAS,MAAM,mBAAmB,GAAG,QAAQ,OAAO,aAAa;AACvE,MAAI,YAAY,OAAQ,QAAO;AAE/B,MAAI,CAAC,gCAAgC,IAAI,OAAO,KAAK,GAAG;AACtD,WAAO,EAAE,QAAQ,KAAK,MAAM,EAAE,IAAI,MAAM,SAAS,KAAK,EAAE;AAAA,EAC1D;AAEA,QAAM,WAAW,+BAA+B,MAAM;AACtD,UAAQ,KAAK,oBAAoB,QAAQ;AAEzC,MAAI,QAAQ,oBAAoB;AAC9B,UAAM,QAAQ,mBAAmB,MAAM;AAAA,EACzC,OAAO;AACL,UAAM,iBAAiB,uBAAuB,MAAM;AACpD,QAAI,kBAAkB,QAAQ,gBAAgB;AAC5C,WAAK,QAAQ,eAAe,cAAc,EAAE,MAAM,CAAC,UAAmB;AACpE,gBAAQ,MAAM,+CAA+C;AAAA,UAC3D,YAAY,SAAS;AAAA,UACrB,YAAY,SAAS;AAAA,UACrB,aAAa,SAAS;AAAA,UACtB,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAAA,QAC9D,CAAC;AAAA,MACH,CAAC;AAAA,IACH;AAAA,EACF;AAEA,MAAI,CAAC,QAAQ,YAAY;AACvB,WAAO,EAAE,QAAQ,KAAK,MAAM,EAAE,IAAI,KAAK,EAAE;AAAA,EAC3C;AAEA,QAAM,SAAS,MAAM,sBAAsB,QAAQ,OAA4C;AAC/F,MAAI,OAAO,SAAS,GAAG;AACrB,YAAQ,KAAK,oBAAoB,OAAO,MAAM,6CAA6C,OAAO,UAAU,GAAG;AAAA,EACjH;AACA,SAAO,EAAE,QAAQ,KAAK,MAAM,EAAE,IAAI,MAAM,GAAI,OAAO,UAAU,EAAE,SAAS,KAAc,IAAI,CAAC,EAAG,EAAE;AAClG;","names":[]}

package/dist/integrations/linear/agent-tools.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Linear tools exposed to the coding agent.
+ *
+ * Wired into the agent through the SDK's async `extraTools` provider: on each
+ * tool-set resolution we map the session's resourceId (the factory project id)
+ * to its owning org and only expose the Linear tools when that org has a
+ * Linear connection. Projects whose org never connected Linear (or when the
+ * feature is disabled) see no Linear tools at all — the model is never shown
+ * tools it can't use.
+ *
+ * Tenancy mirrors the Linear API routes: everything is scoped by the org that
+ * owns the project, and tokens are refreshed through the integration's shared
+ * connection lifecycle.
+ */
+import type { RequestContext } from '@mastra/core/request-context';
+import type { LinearIntegration } from './integration.js';
+declare function createLinearGetIssueTool(linear: LinearIntegration, orgId: string): import("@mastra/core/tools").Tool<{
+    issue: string;
+}, unknown, unknown, unknown, import("@mastra/core/tools").ToolExecutionContext<unknown, unknown, unknown>, "linear_get_issue", unknown>;
+declare function createLinearCommentTool(linear: LinearIntegration, orgId: string): import("@mastra/core/tools").Tool<{
+    issue: string;
+    body: string;
+}, unknown, unknown, unknown, import("@mastra/core/tools").ToolExecutionContext<unknown, unknown, unknown>, "linear_create_comment", unknown>;
+/**
+ * Async `extraTools` provider: expose Linear tools only when the session's
+ * project belongs to an org with an active Linear connection.
+ */
+export declare function buildLinearAgentTools({ requestContext, linear, }: {
+    requestContext: RequestContext;
+    /** The integration instance providing the Linear API client. */
+    linear: LinearIntegration;
+}): Promise<Record<string, ReturnType<typeof createLinearGetIssueTool> | ReturnType<typeof createLinearCommentTool>>>;
+export {};
+//# sourceMappingURL=agent-tools.d.ts.map

package/dist/integrations/linear/agent-tools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-tools.d.ts","sourceRoot":"","sources":["../../../src/integrations/linear/agent-tools.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAGH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAInE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAG1D,iBAAS,wBAAwB,CAAC,MAAM,EAAE,iBAAiB,EAAE,KAAK,EAAE,MAAM;;yIA+BzE;AAED,iBAAS,uBAAuB,CAAC,MAAM,EAAE,iBAAiB,EAAE,KAAK,EAAE,MAAM;;;8IAsCxE;AAED;;;GAGG;AACH,wBAAsB,qBAAqB,CAAC,EAC1C,cAAc,EACd,MAAM,GACP,EAAE;IACD,cAAc,EAAE,cAAc,CAAC;IAC/B,gEAAgE;IAChE,MAAM,EAAE,iBAAiB,CAAC;CAC3B,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,OAAO,wBAAwB,CAAC,GAAG,UAAU,CAAC,OAAO,uBAAuB,CAAC,CAAC,CAAC,CAmBpH"}