@mastra/factory 0.1.0-alpha.4 → 0.1.0-alpha.5

package/dist/integrations/platform/github/integration.js

@@ -1729,7 +1729,8 @@ function buildProjectGitRoutes({
                 baseBranch: base,
                 headBranch: head,
                 title,
-                body: prBody
+                body: prBody,
+                actingUserId: userId
               });
               await emitAudit?.({
                 context: loose(c),
@@ -2088,6 +2089,9 @@ var PlatformApiClient = class {
       accept: "application/json",
       authorization: `Bearer ${this.#accessToken}`
     };
+    if (options?.actingUserId) {
+      headers["x-acting-user-id"] = options.actingUserId;
+    }
     const timeoutSignal = AbortSignal.timeout(15e3);
     const init = {
       method,
@@ -2139,6 +2143,9 @@ function redact(message, accessToken) {
 function logPlatformInfo(message, fields) {
   writePlatformLog("info", message, fields);
 }
+function logPlatformWarn(message, fields) {
+  writePlatformLog("warn", message, fields);
+}
 function logPlatformError(message, fields) {
   writePlatformLog("error", message, fields);
 }
@@ -2457,6 +2464,11 @@ function retryDelay(error, fallbackMs) {
 // src/integrations/platform/github/integration.ts
 var PAGE_SIZE = 30;
 var API_PREFIX2 = "/v1/server";
+var REPOSITORY_TOKEN_PERMISSIONS = {
+  contents: "write",
+  issues: "write",
+  pull_requests: "write"
+};
 function loose2(c) {
   return c;
 }
@@ -2570,7 +2582,7 @@ var PlatformGithubIntegration = class {
       return this.#listIssues(input.connection, sourceId, parsePositiveCursor(input.cursor), input.labels);
     },
     getIssue: (input) => this.#getIssue(input.connection, input.sourceId, input.issueId),
-    createComment: (input) => this.#createIssueComment(input.connection, input.sourceId, input.issueId, input.body)
+    createComment: (input) => this.#createIssueComment(input)
   };
   versionControl = {
     initialize: ({ storage }) => {
@@ -2609,7 +2621,7 @@ var PlatformGithubIntegration = class {
       const token = await this.#client.request(
         "POST",
         `${API_PREFIX2}/github-app/installations/${installationId}/token`,
-        { repositories: [repositoryName], permissions: { contents: "write" } }
+        { repositories: [repositoryName], permissions: REPOSITORY_TOKEN_PERMISSIONS }
       );
       return {
         cloneUrl: `https://github.com/${repository.slug}.git`,
@@ -2673,6 +2685,7 @@ var PlatformGithubIntegration = class {
     return [
       this.#statusRoute(ctx),
       this.#connectRoute(ctx),
+      this.#connectUserRoute(ctx),
       ...buildGithubRoutes({
         auth: ctx.auth,
         fleet: ctx.fleet,
@@ -2704,11 +2717,16 @@ var PlatformGithubIntegration = class {
             organizationRequired: true,
             connected: false,
             installations: [],
+            userConnected: false,
+            userGithubUsername: null,
             reason: "organization_required",
             diagnostics: this.diagnostics()
           });
         }
-        const installations = await this.#syncInstallations(tenant.orgId, tenant.userId);
+        const [installations, userConnection] = await Promise.all([
+          this.#syncInstallations(tenant.orgId, tenant.userId),
+          this.#fetchUserConnection(tenant.userId)
+        ]);
         return c.json({
           enabled: true,
           sandboxEnabled: ctx.fleet.enabled,
@@ -2718,6 +2736,8 @@ var PlatformGithubIntegration = class {
             accountLogin: installation.accountName,
             accountType: installation.accountType
           })),
+          userConnected: userConnection.connected,
+          userGithubUsername: userConnection.githubUsername,
           reason: installations.length > 0 ? "ready" : "not_connected",
           diagnostics: this.diagnostics()
         });
@@ -2752,6 +2772,55 @@ var PlatformGithubIntegration = class {
       }
     });
   }
+  #connectUserRoute(ctx) {
+    return registerApiRoute2("/auth/github/connect-user", {
+      method: "GET",
+      requiresAuth: false,
+      handler: async (c) => {
+        await ctx.auth.ensureUser(loose2(c));
+        const tenant = ctx.auth.tenant(loose2(c));
+        if (!tenant?.orgId) return c.json({ error: "unauthorized" }, 401);
+        const redirectTo = c.req.query("redirectTo") || c.req.query("return_to") || "/";
+        const originator = routeBaseUrl(ctx, c.req.url);
+        logPlatformInfo("Starting Platform GitHub user authorization flow", {
+          orgId: tenant.orgId,
+          redirectTo,
+          originator
+        });
+        const query = new URLSearchParams({
+          userId: tenant.userId,
+          redirectTo,
+          originator
+        });
+        const { url } = await this.#client.request(
+          "GET",
+          `${API_PREFIX2}/github-app/authenticate?${query}`
+        );
+        return c.redirect(url);
+      }
+    });
+  }
+  /**
+   * Personal GitHub connection status for the acting user. Returns
+   * not-connected when the platform predates the user-connection endpoint.
+   */
+  async #fetchUserConnection(userId) {
+    try {
+      const connection = await this.#client.request(
+        "GET",
+        `${API_PREFIX2}/github-app/user-connection?${new URLSearchParams({ userId })}`
+      );
+      if (!connection.connected && connection.reason) {
+        logPlatformWarn("Platform GitHub user connection verification failed", {
+          userId,
+          reason: connection.reason
+        });
+      }
+      return connection;
+    } catch {
+      return { connected: false, githubUsername: null };
+    }
+  }
   async #syncInstallations(orgId, userId) {
     const result = await this.#client.request(
       "GET",
@@ -2847,7 +2916,7 @@ var PlatformGithubIntegration = class {
     const result = await this.#client.request(
       "POST",
       `${API_PREFIX2}/github-app/installations/${installationId}/token`,
-      { repositories: repositories.map((repository) => repository.name), permissions: { contents: "write" } }
+      { repositories: repositories.map((repository) => repository.name), permissions: REPOSITORY_TOKEN_PERMISSIONS }
     );
     return result.token;
   }
@@ -2902,15 +2971,16 @@ var PlatformGithubIntegration = class {
       throw error;
     }
   }
-  async #createIssueComment(connection, sourceId, issueId, body) {
-    requireGithubConnection(connection);
-    const repository = requireSource(sourceId, "GitHub Intake requires a repository source.");
-    const issueNumber = requirePositiveId(issueId, "issue");
+  async #createIssueComment(input) {
+    requireGithubConnection(input.connection);
+    const repository = requireSource(input.sourceId, "GitHub Intake requires a repository source.");
+    const issueNumber = requirePositiveId(input.issueId, "issue");
     try {
       const comment = await this.#client.request(
         "POST",
         repositoryPath(repository, `issues/${issueNumber}/comments`),
-        { body }
+        { body: input.body },
+        { actingUserId: input.actingUserId }
       );
       return { id: String(comment.id), url: comment.htmlUrl };
     } catch (error) {
@@ -2947,29 +3017,40 @@ var PlatformGithubIntegration = class {
   }
   async #createPullRequest(input) {
     requireGithubConnection(input.connection);
-    const result = await this.#client.request("POST", repositoryPath(input.sourceId, "pulls"), {
-      head: input.headBranch,
-      base: input.baseBranch,
-      title: input.title,
-      body: input.body,
-      draft: input.draft
-    });
+    const result = await this.#client.request(
+      "POST",
+      repositoryPath(input.sourceId, "pulls"),
+      {
+        head: input.headBranch,
+        base: input.baseBranch,
+        title: input.title,
+        body: input.body,
+        draft: input.draft
+      },
+      { actingUserId: input.actingUserId }
+    );
     return parsePullRequest2(result);
   }
   async #updatePullRequest(input) {
-    const result = await this.#client.request("PATCH", pullRequestPath(input, input.pullRequestId), {
-      title: input.title,
-      body: input.body === null ? "" : input.body,
-      base: input.baseBranch,
-      state: input.state
-    });
+    const result = await this.#client.request(
+      "PATCH",
+      pullRequestPath(input, input.pullRequestId),
+      {
+        title: input.title,
+        body: input.body === null ? "" : input.body,
+        base: input.baseBranch,
+        state: input.state
+      },
+      { actingUserId: input.actingUserId }
+    );
     return parsePullRequest2(result);
   }
   #mergePullRequest(input) {
     return this.#client.request(
       "PUT",
       `${pullRequestPath(input, input.pullRequestId)}/merge`,
-      { commitTitle: input.commitTitle, commitMessage: input.commitMessage, method: input.method }
+      { commitTitle: input.commitTitle, commitMessage: input.commitMessage, method: input.method },
+      { actingUserId: input.actingUserId }
     );
   }
   async #listComments(input) {
@@ -2987,7 +3068,8 @@ var PlatformGithubIntegration = class {
     const comment = await this.#client.request(
       "POST",
       repositoryPath(input.sourceId, `issues/${requirePositiveId(input.pullRequestId, "pull request")}/comments`),
-      { body: input.body }
+      { body: input.body },
+      { actingUserId: input.actingUserId }
     );
     return parseComment(comment);
   }
@@ -2996,7 +3078,8 @@ var PlatformGithubIntegration = class {
     const comment = await this.#client.request(
       "PATCH",
       repositoryPath(input.sourceId, `issues/comments/${requirePositiveId(input.commentId, "comment")}`),
-      { body: input.body }
+      { body: input.body },
+      { actingUserId: input.actingUserId }
     );
     return parseComment(comment);
   }
@@ -3004,7 +3087,9 @@ var PlatformGithubIntegration = class {
     requireGithubConnection(input.connection);
     await this.#client.request(
       "DELETE",
-      repositoryPath(input.sourceId, `issues/comments/${requirePositiveId(input.commentId, "comment")}`)
+      repositoryPath(input.sourceId, `issues/comments/${requirePositiveId(input.commentId, "comment")}`),
+      void 0,
+      { actingUserId: input.actingUserId }
     );
   }
   async #listReviews(input) {
@@ -3035,7 +3120,8 @@ var PlatformGithubIntegration = class {
     const review = await this.#client.request(
       "POST",
       `${pullRequestPath(input, input.pullRequestId)}/reviews`,
-      { body: input.body, commitId: input.commitId, event: input.event ? reviewEvent(input.event) : void 0 }
+      { body: input.body, commitId: input.commitId, event: input.event ? reviewEvent(input.event) : void 0 },
+      { actingUserId: input.actingUserId }
     );
     return parseReview(review);
   }
@@ -3043,7 +3129,8 @@ var PlatformGithubIntegration = class {
     const review = await this.#client.request(
       "PUT",
       `${pullRequestPath(input, input.pullRequestId)}/reviews/${requirePositiveId(input.reviewId, "review")}`,
-      { body: input.body }
+      { body: input.body },
+      { actingUserId: input.actingUserId }
     );
     return parseReview(review);
   }
@@ -3051,7 +3138,8 @@ var PlatformGithubIntegration = class {
     const review = await this.#client.request(
       "POST",
       `${pullRequestPath(input, input.pullRequestId)}/reviews/${requirePositiveId(input.reviewId, "review")}/events`,
-      { body: input.body, event: reviewEvent(input.event) }
+      { body: input.body, event: reviewEvent(input.event) },
+      { actingUserId: input.actingUserId }
     );
     return parseReview(review);
   }
@@ -3059,14 +3147,17 @@ var PlatformGithubIntegration = class {
     const review = await this.#client.request(
       "PUT",
       `${pullRequestPath(input, input.pullRequestId)}/reviews/${requirePositiveId(input.reviewId, "review")}/dismissals`,
-      { message: input.message }
+      { message: input.message },
+      { actingUserId: input.actingUserId }
     );
     return parseReview(review);
   }
   async #deletePendingReview(input) {
     await this.#client.request(
       "DELETE",
-      `${pullRequestPath(input, input.pullRequestId)}/reviews/${requirePositiveId(input.reviewId, "review")}`
+      `${pullRequestPath(input, input.pullRequestId)}/reviews/${requirePositiveId(input.reviewId, "review")}`,
+      void 0,
+      { actingUserId: input.actingUserId }
     );
   }
   async #listReviewComments(input) {
@@ -3102,7 +3193,8 @@ var PlatformGithubIntegration = class {
       await this.#client.request(
         "POST",
         `${pullRequestPath(input, input.pullRequestId)}/comments`,
-        body
+        body,
+        { actingUserId: input.actingUserId }
       )
     );
   }
@@ -3112,7 +3204,8 @@ var PlatformGithubIntegration = class {
       await this.#client.request(
         "PATCH",
         repositoryPath(input.sourceId, `pulls/comments/${requirePositiveId(input.commentId, "review comment")}`),
-        { body: input.body }
+        { body: input.body },
+        { actingUserId: input.actingUserId }
       )
     );
   }
@@ -3120,7 +3213,9 @@ var PlatformGithubIntegration = class {
     requireGithubConnection(input.connection);
     await this.#client.request(
       "DELETE",
-      repositoryPath(input.sourceId, `pulls/comments/${requirePositiveId(input.commentId, "review comment")}`)
+      repositoryPath(input.sourceId, `pulls/comments/${requirePositiveId(input.commentId, "review comment")}`),
+      void 0,
+      { actingUserId: input.actingUserId }
     );
   }
   #requestedReviewers(method, input) {
@@ -3128,7 +3223,8 @@ var PlatformGithubIntegration = class {
     return this.#client.request(
       method,
       `${pullRequestPath(input, input.pullRequestId)}/requested-reviewers`,
-      method === "GET" ? void 0 : { users: input.users, teams: input.teams }
+      method === "GET" ? void 0 : { users: input.users, teams: input.teams },
+      method === "GET" ? void 0 : { actingUserId: input.actingUserId }
     );
   }
 };