@mastra/factory 0.12.1-alpha.0 → 0.13.0-alpha.10

package/dist/integrations/github/routes.js

@@ -1,5 +1,7 @@
+import { AUTO_TRIAGED_LABEL, NEEDS_APPROVAL_LABEL } from "../../rules/types.js";
 import { clearGithubPat, getGithubPatStatus, setGithubPat } from "./pat.js";
 import { listPullRequestSubscriptionsForThread, subscribeToPullRequest } from "./subscriptions.js";
+import { MaterializeError, SetupCommandError, commitAll, isValidGitRef, pushBranch } from "./sandbox.js";
 import { requireExec } from "../../sandbox/materialization.js";
 import { sanitizeSegment } from "../../sandbox/workdir.js";
 import { peekSessionSandbox } from "../../sandbox/session-sandbox.js";
@@ -7,13 +9,12 @@ import { normalizeSessionTitle } from "../../session/session-title.js";
 import { listRepositoryCommits } from "./commits.js";
 import { getGithubFeatureDiagnostics, isGithubFeatureEnabled } from "./config.js";
 import { reclaimDeletedSessionSandbox } from "./sandbox-release.js";
-import { MaterializeError, SetupCommandError, commitAll, isValidGitRef as isValidGitRef$1, pushBranch } from "./sandbox.js";
 import { handleGithubWebhook } from "./webhook.js";
+import { RequestContext } from "@mastra/core/request-context";
 import { registerApiRoute } from "@mastra/core/server";
 import { randomUUID } from "crypto";
 import { UniqueViolationError } from "@mastra/core/storage";
 import { resolveModel } from "@mastra/code-sdk/agents/model";
-import { RequestContext } from "@mastra/core/request-context";
 //#region src/integrations/github/routes.ts
 /**
 * Mastra `apiRoutes` for the GitHub App project feature.
@@ -60,15 +61,6 @@ function pullRequestNumberFromUrl(value, expectedRepo) {
 		return;
 	}
 }
-/**
-* Validate a git branch/ref name against a strict whitelist. The value is later
-* interpolated into a shell `git clone --branch` command, so it must never
-* contain shell metacharacters. We accept only git-ref-safe characters and
-* reject anything else rather than relying on shell quoting alone.
-*/
-function isValidGitRef(value) {
-	return typeof value === "string" && value.length > 0 && value.length <= 255 && /^[A-Za-z0-9_./-]+$/.test(value);
-}
 function isJsonObject(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
@@ -113,7 +105,7 @@ function parseResourceNumber(raw) {
 	const parsed = Number(raw);
 	return parsed > 0 ? parsed : null;
 }
-const VALID_ISSUE_LABEL_FILTERS = /* @__PURE__ */ new Set(["status: auto-triaged", "status: needs approval"]);
+const VALID_ISSUE_LABEL_FILTERS = /* @__PURE__ */ new Set([AUTO_TRIAGED_LABEL, NEEDS_APPROVAL_LABEL]);
 function parseIssueLabelFilter(raw) {
 	if (raw === void 0 || raw === "") return void 0;
 	if (VALID_ISSUE_LABEL_FILTERS.has(raw)) return raw;
@@ -404,29 +396,11 @@ function buildGithubRoutes(options) {
 					repo
 				});
 			}
-			const repos = new Array(matches.length);
-			const upsertConcurrency = 10;
-			for (let start = 0; start < matches.length; start += upsertConcurrency) await Promise.all(matches.slice(start, start + upsertConcurrency).map(async ({ inst, repo }, offset) => {
-				const repository = await github.sourceControlStorage.repositories.upsert({
-					orgId,
-					input: {
-						installationId: inst.id,
-						externalId: repo.id.toString(),
-						slug: repo.fullName,
-						defaultBranch: isValidGitRef(repo.defaultBranch) ? repo.defaultBranch : "main",
-						providerMetadata: {
-							private: repo.private,
-							owner: repo.owner
-						}
-					}
-				});
-				repos[start + offset] = {
-					...repo,
-					installationStorageId: inst.id,
-					repositoryStorageId: repository.id,
-					sandboxProvider: sandbox ? "custom" : "none",
-					sandboxWorkdir: `~/${sanitizeSegment(repo.fullName.split("/", 2)[1] || "repo")}`
-				};
+			const repos = matches.map(({ inst, repo }) => ({
+				...repo,
+				installationStorageId: inst.id,
+				sandboxProvider: sandbox ? "custom" : "none",
+				sandboxWorkdir: `~/${sanitizeSegment(repo.fullName.split("/", 2)[1] || "repo")}`
 			}));
 			return c.json({ repos });
 		}
@@ -944,7 +918,7 @@ function buildProjectGitRoutes({ github, auth, sandbox, users, controller, memor
 				const requestedBaseBranch = body.baseBranch;
 				if (requestedBaseBranch !== void 0 && typeof requestedBaseBranch !== "string") return c.json({ error: "Invalid baseBranch" }, 400);
 				const baseBranch = requestedBaseBranch ?? project.defaultBranch;
-				if (!isValidGitRef$1(baseBranch)) return c.json({ error: "Invalid baseBranch" }, 400);
+				if (!isValidGitRef(baseBranch)) return c.json({ error: "Invalid baseBranch" }, 400);
 				const requestedSessionId = body.sessionId;
 				if (requestedSessionId !== void 0 && (typeof requestedSessionId !== "string" || !UUID_PATTERN.test(requestedSessionId))) return c.json({ error: "Invalid sessionId" }, 400);
 				const sessionId = requestedSessionId ?? randomUUID();
@@ -954,7 +928,7 @@ function buildProjectGitRoutes({ github, auth, sandbox, users, controller, memor
 				const requestedBranch = body.branch;
 				let branch;
 				if (requestedBranch === void 0) branch = `${USER_SESSION_BRANCH_PREFIX}${sessionId}`;
-				else if (typeof requestedBranch === "string" && isValidGitRef$1(requestedBranch)) branch = requestedBranch;
+				else if (typeof requestedBranch === "string" && isValidGitRef(requestedBranch)) branch = requestedBranch;
 				else return c.json({ error: "Invalid branch" }, 400);
 				if (requestedSessionId !== void 0) {
 					const existing = await github.sourceControlStorage.sessions.getBySessionId(sessionId);
@@ -1133,7 +1107,7 @@ function buildProjectGitRoutes({ github, auth, sandbox, users, controller, memor
 				if ("response" in loaded) return loaded.response;
 				const { orgId, project } = loaded;
 				const branch = c.req.query("branch") ?? project.defaultBranch;
-				if (!isValidGitRef$1(branch)) return c.json({ error: "Invalid branch" }, 400);
+				if (!isValidGitRef(branch)) return c.json({ error: "Invalid branch" }, 400);
 				const limit = Math.min(Math.max(Math.floor(Number(c.req.query("limit") ?? DEFAULT_COMMIT_PAGE)) || DEFAULT_COMMIT_PAGE, 1), MAX_COMMIT_PAGE);
 				try {
 					const commits = await listRepositoryCommits(github, {
@@ -1169,7 +1143,7 @@ function buildProjectGitRoutes({ github, auth, sandbox, users, controller, memor
 				} catch {
 					return c.json({ error: "Invalid JSON body" }, 400);
 				}
-				if (!isValidGitRef$1(body.branch)) return c.json({ error: "Invalid branch" }, 400);
+				if (!isValidGitRef(body.branch)) return c.json({ error: "Invalid branch" }, 400);
 				const branch = body.branch;
 				const sessionWorkspace = await resolveSessionWorkspace(github, project.id, userId, body.sessionId);
 				if (!sessionWorkspace) return c.json({ error: "Invalid sessionId" }, 400);
@@ -1226,9 +1200,9 @@ function buildProjectGitRoutes({ github, auth, sandbox, users, controller, memor
 				} catch {
 					return c.json({ error: "Invalid JSON body" }, 400);
 				}
-				if (!isValidGitRef$1(body.branch)) return c.json({ error: "Invalid branch" }, 400);
+				if (!isValidGitRef(body.branch)) return c.json({ error: "Invalid branch" }, 400);
 				const base = body.base === void 0 ? project.defaultBranch : body.base;
-				if (!isValidGitRef$1(base)) return c.json({ error: "Invalid base" }, 400);
+				if (!isValidGitRef(base)) return c.json({ error: "Invalid base" }, 400);
 				if (typeof body.title !== "string" || body.title.trim().length === 0 || body.title.length > 256) return c.json({ error: "Invalid title" }, 400);
 				if (body.body !== void 0 && (typeof body.body !== "string" || body.body.length > 65536)) return c.json({ error: "Invalid body" }, 400);
 				const head = body.branch;