@mastra/factory 0.12.1-alpha.0 → 0.13.0-alpha.2

package/dist/integrations/github/provenance.js.map

@@ -1 +1 @@
-{"version":3,"file":"provenance.js","names":[],"sources":["../../../src/integrations/github/provenance.ts"],"sourcesContent":["import type { FactoryRuleJsonValue } from '../../rules/types.js';\nimport type { IntegrationStorageHandle } from '../../storage/domains/integrations/base.js';\nimport type { SourceControlStorageHandle } from '../../storage/domains/source-control/base.js';\nimport type { FactoryRunBindingRecord, WorkItemRow, WorkItemsStorage } from '../../storage/domains/work-items/base.js';\nimport type { GithubIntegration } from './integration.js';\nimport { parseCreatedPullRequest } from './session-subscriptions.js';\n\nexport interface RecordFactoryPullRequestProvenanceInput {\n  binding: FactoryRunBindingRecord;\n  item: WorkItemRow;\n  assistantMessageId: string;\n  toolCallId: string;\n  toolName: string;\n  toolInput: FactoryRuleJsonValue;\n  toolResult: FactoryRuleJsonValue;\n  status: 'success' | 'error';\n}\n\nexport interface FactoryPullRequestProvenanceData {\n  kind: 'factory-pr-provenance';\n  bindingId: string;\n  workItemId: string;\n  repositoryId: number;\n  pullRequestNumber: number;\n  pullRequestUrl: string;\n  assistantMessageId: string;\n  toolCallId: string;\n}\n\nexport async function resolveFactoryPullRequestParentWorkItemId(\n  integrationStorage: IntegrationStorageHandle<\n    Record<string, unknown>,\n    Record<string, unknown>,\n    FactoryPullRequestProvenanceData\n  >,\n  input: { orgId: string; repositoryId: number; pullRequestNumber: number },\n): Promise<string | null> {\n  const targetKey = `factory-pr-provenance:${input.repositoryId}:${input.pullRequestNumber}`;\n  const provenance = (await integrationStorage.subscriptions.listByTarget(targetKey, { status: 'active' })).find(\n    row => row.orgId === input.orgId && row.data?.kind === 'factory-pr-provenance',\n  );\n  return provenance?.data?.workItemId ?? null;\n}\n\nexport async function recordFactoryPullRequestProvenance(\n  github: GithubIntegration,\n  sourceControl: SourceControlStorageHandle,\n  integrationStorage: IntegrationStorageHandle<\n    Record<string, unknown>,\n    Record<string, unknown>,\n    FactoryPullRequestProvenanceData\n  >,\n  workItems: WorkItemsStorage,\n  input: RecordFactoryPullRequestProvenanceInput,\n): Promise<void> {\n  if (input.status !== 'success' || input.item.externalSource?.type === 'pull-request') return;\n  const url = parseCreatedPullRequest({\n    toolName: input.toolName,\n    input: input.toolInput,\n    output: input.toolResult,\n  });\n  if (!url) return;\n\n  try {\n    const match = url.match(/^https:\\/\\/github\\.com\\/([^/]+\\/[^/]+)\\/pull\\/(\\d+)\\/?$/i);\n    if (!match) return;\n    const repositorySlug = match[1]!;\n    let repositoryId: number | undefined;\n    let installationId: number | undefined;\n    for (const connection of await sourceControl.connections.list({\n      orgId: input.binding.orgId,\n      factoryProjectId: input.binding.factoryProjectId,\n    })) {\n      const installation = await sourceControl.installations.get({\n        orgId: input.binding.orgId,\n        id: connection.installationId,\n      });\n      if (!installation) continue;\n      for (const link of await sourceControl.projectRepositories.list({\n        orgId: input.binding.orgId,\n        connectionId: connection.id,\n      })) {\n        const repository = await sourceControl.repositories.get({ orgId: input.binding.orgId, id: link.repositoryId });\n        if (!repository || repository.slug.toLowerCase() !== repositorySlug.toLowerCase()) continue;\n        repositoryId = Number(repository.externalId);\n        installationId = Number(installation.externalId);\n        break;\n      }\n      if (repositoryId !== undefined) break;\n    }\n    const pullRequestNumber = Number(match[2]);\n    const [owner, repo] = repositorySlug.split('/');\n    if (\n      !owner ||\n      !repo ||\n      repositoryId === undefined ||\n      installationId === undefined ||\n      !Number.isInteger(repositoryId) ||\n      !Number.isInteger(installationId) ||\n      !Number.isInteger(pullRequestNumber) ||\n      pullRequestNumber < 1\n    )\n      return;\n    const targetKey = `factory-pr-provenance:${repositoryId}:${pullRequestNumber}`;\n    if (\n      (await integrationStorage.subscriptions.listByTarget(targetKey)).some(row => row.orgId === input.binding.orgId)\n    ) {\n      return;\n    }\n\n    const { data } = await github\n      .getInstallationOctokit(installationId)\n      .pulls.get({ owner, repo, pull_number: pullRequestNumber });\n    if (data.base.repo.id !== repositoryId || data.number !== pullRequestNumber || data.html_url !== url) return;\n\n    await integrationStorage.subscriptions.create({\n      orgId: input.binding.orgId,\n      targetKey,\n      threadId: input.binding.threadId,\n      status: 'active',\n      data: {\n        kind: 'factory-pr-provenance',\n        bindingId: input.binding.id,\n        workItemId: input.item.id,\n        repositoryId,\n        pullRequestNumber,\n        pullRequestUrl: url,\n        assistantMessageId: input.assistantMessageId,\n        toolCallId: input.toolCallId,\n      },\n    });\n\n    const reviewItem = (\n      await workItems.list({\n        orgId: input.binding.orgId,\n        factoryProjectId: input.binding.factoryProjectId,\n      })\n    ).find(\n      item =>\n        item.externalSource?.integrationId === 'github' &&\n        item.externalSource.type === 'pull-request' &&\n        (item.externalSource.externalId === `github-pr:${pullRequestNumber}` ||\n          item.externalSource.externalId === `github:${repositoryId}:pull-request:${pullRequestNumber}`),\n    );\n    if (reviewItem) {\n      await workItems.setParentWorkItemIfMissing({\n        orgId: input.binding.orgId,\n        id: reviewItem.id,\n        userId: 'factory-pr-provenance',\n        parentWorkItemId: input.item.id,\n      });\n    }\n  } catch {\n    return;\n  }\n}\n"],"mappings":";;AA6BA,eAAsB,0CACpB,oBAKA,OACwB;CACxB,MAAM,YAAY,yBAAyB,MAAM,aAAa,GAAG,MAAM;CAIvE,QAHoB,MAAM,mBAAmB,cAAc,aAAa,WAAW,EAAE,QAAQ,SAAS,CAAC,EAAA,CAAG,MACxG,QAAO,IAAI,UAAU,MAAM,SAAS,IAAI,MAAM,SAAS,uBAEzC,CAAC,EAAE,MAAM,cAAc;AACzC;AAEA,eAAsB,mCACpB,QACA,eACA,oBAKA,WACA,OACe;CACf,IAAI,MAAM,WAAW,aAAa,MAAM,KAAK,gBAAgB,SAAS,gBAAgB;CACtF,MAAM,MAAM,wBAAwB;EAClC,UAAU,MAAM;EAChB,OAAO,MAAM;EACb,QAAQ,MAAM;CAChB,CAAC;CACD,IAAI,CAAC,KAAK;CAEV,IAAI;EACF,MAAM,QAAQ,IAAI,MAAM,0DAA0D;EAClF,IAAI,CAAC,OAAO;EACZ,MAAM,iBAAiB,MAAM;EAC7B,IAAI;EACJ,IAAI;EACJ,KAAK,MAAM,cAAc,MAAM,cAAc,YAAY,KAAK;GAC5D,OAAO,MAAM,QAAQ;GACrB,kBAAkB,MAAM,QAAQ;EAClC,CAAC,GAAG;GACF,MAAM,eAAe,MAAM,cAAc,cAAc,IAAI;IACzD,OAAO,MAAM,QAAQ;IACrB,IAAI,WAAW;GACjB,CAAC;GACD,IAAI,CAAC,cAAc;GACnB,KAAK,MAAM,QAAQ,MAAM,cAAc,oBAAoB,KAAK;IAC9D,OAAO,MAAM,QAAQ;IACrB,cAAc,WAAW;GAC3B,CAAC,GAAG;IACF,MAAM,aAAa,MAAM,cAAc,aAAa,IAAI;KAAE,OAAO,MAAM,QAAQ;KAAO,IAAI,KAAK;IAAa,CAAC;IAC7G,IAAI,CAAC,cAAc,WAAW,KAAK,YAAY,MAAM,eAAe,YAAY,GAAG;IACnF,eAAe,OAAO,WAAW,UAAU;IAC3C,iBAAiB,OAAO,aAAa,UAAU;IAC/C;GACF;GACA,IAAI,iBAAiB,KAAA,GAAW;EAClC;EACA,MAAM,oBAAoB,OAAO,MAAM,EAAE;EACzC,MAAM,CAAC,OAAO,QAAQ,eAAe,MAAM,GAAG;EAC9C,IACE,CAAC,SACD,CAAC,QACD,iBAAiB,KAAA,KACjB,mBAAmB,KAAA,KACnB,CAAC,OAAO,UAAU,YAAY,KAC9B,CAAC,OAAO,UAAU,cAAc,KAChC,CAAC,OAAO,UAAU,iBAAiB,KACnC,oBAAoB,GAEpB;EACF,MAAM,YAAY,yBAAyB,aAAa,GAAG;EAC3D,KACG,MAAM,mBAAmB,cAAc,aAAa,SAAS,EAAA,CAAG,MAAK,QAAO,IAAI,UAAU,MAAM,QAAQ,KAAK,GAE9G;EAGF,MAAM,EAAE,SAAS,MAAM,OACpB,uBAAuB,cAAc,CAAC,CACtC,MAAM,IAAI;GAAE;GAAO;GAAM,aAAa;EAAkB,CAAC;EAC5D,IAAI,KAAK,KAAK,KAAK,OAAO,gBAAgB,KAAK,WAAW,qBAAqB,KAAK,aAAa,KAAK;EAEtG,MAAM,mBAAmB,cAAc,OAAO;GAC5C,OAAO,MAAM,QAAQ;GACrB;GACA,UAAU,MAAM,QAAQ;GACxB,QAAQ;GACR,MAAM;IACJ,MAAM;IACN,WAAW,MAAM,QAAQ;IACzB,YAAY,MAAM,KAAK;IACvB;IACA;IACA,gBAAgB;IAChB,oBAAoB,MAAM;IAC1B,YAAY,MAAM;GACpB;EACF,CAAC;EAED,MAAM,cACJ,MAAM,UAAU,KAAK;GACnB,OAAO,MAAM,QAAQ;GACrB,kBAAkB,MAAM,QAAQ;EAClC,CAAC,EAAA,CACD,MACA,SACE,KAAK,gBAAgB,kBAAkB,YACvC,KAAK,eAAe,SAAS,mBAC5B,KAAK,eAAe,eAAe,aAAa,uBAC/C,KAAK,eAAe,eAAe,UAAU,aAAa,gBAAgB,oBAChF;EACA,IAAI,YACF,MAAM,UAAU,2BAA2B;GACzC,OAAO,MAAM,QAAQ;GACrB,IAAI,WAAW;GACf,QAAQ;GACR,kBAAkB,MAAM,KAAK;EAC/B,CAAC;CAEL,QAAQ;EACN;CACF;AACF"}
+{"version":3,"file":"provenance.js","names":[],"sources":["../../../src/integrations/github/provenance.ts"],"sourcesContent":["import type { FactoryRuleJsonValue } from '../../rules/types.js';\nimport type { IntegrationStorageHandle } from '../../storage/domains/integrations/base.js';\nimport type { SourceControlStorageHandle } from '../../storage/domains/source-control/base.js';\nimport type { FactoryRunBindingRecord, WorkItemRow, WorkItemsStorage } from '../../storage/domains/work-items/base.js';\nimport type { GithubIntegration } from './integration.js';\nimport { parseCreatedPullRequest } from './session-subscriptions.js';\n\nexport interface RecordFactoryPullRequestProvenanceInput {\n  binding: FactoryRunBindingRecord;\n  item: WorkItemRow;\n  assistantMessageId: string;\n  toolCallId: string;\n  toolName: string;\n  toolInput: FactoryRuleJsonValue;\n  toolResult: FactoryRuleJsonValue;\n  status: 'success' | 'error';\n}\n\nexport interface FactoryPullRequestProvenanceData {\n  kind: 'factory-pr-provenance';\n  bindingId: string;\n  workItemId: string;\n  factoryProjectId: string;\n  repositoryId: number;\n  pullRequestNumber: number;\n  pullRequestUrl: string;\n  assistantMessageId: string;\n  toolCallId: string;\n}\n\nexport async function resolveFactoryPullRequestParentWorkItemId(\n  integrationStorage: IntegrationStorageHandle<\n    Record<string, unknown>,\n    Record<string, unknown>,\n    FactoryPullRequestProvenanceData\n  >,\n  input: { orgId: string; factoryProjectId: string; repositoryId: number; pullRequestNumber: number },\n): Promise<string | null> {\n  const targetKey = `factory-pr-provenance:${input.repositoryId}:${input.pullRequestNumber}`;\n  // Provenance is scoped to the Factory project whose run authored the PR.\n  // Rows from a sibling project in the same org — or legacy rows without the\n  // project stamp — fail closed rather than linking another project's card.\n  const provenance = (await integrationStorage.subscriptions.listByTarget(targetKey, { status: 'active' })).find(\n    row =>\n      row.orgId === input.orgId &&\n      row.data?.kind === 'factory-pr-provenance' &&\n      row.data.factoryProjectId === input.factoryProjectId,\n  );\n  return provenance?.data?.workItemId ?? null;\n}\n\nexport async function recordFactoryPullRequestProvenance(\n  github: GithubIntegration,\n  sourceControl: SourceControlStorageHandle,\n  integrationStorage: IntegrationStorageHandle<\n    Record<string, unknown>,\n    Record<string, unknown>,\n    FactoryPullRequestProvenanceData\n  >,\n  workItems: WorkItemsStorage,\n  input: RecordFactoryPullRequestProvenanceInput,\n): Promise<void> {\n  if (input.status !== 'success' || input.item.externalSource?.type === 'pull-request') return;\n  const url = parseCreatedPullRequest({\n    toolName: input.toolName,\n    input: input.toolInput,\n    output: input.toolResult,\n  });\n  if (!url) return;\n\n  try {\n    const match = url.match(/^https:\\/\\/github\\.com\\/([^/]+\\/[^/]+)\\/pull\\/(\\d+)\\/?$/i);\n    if (!match) return;\n    const repositorySlug = match[1]!;\n    let repositoryId: number | undefined;\n    let installationId: number | undefined;\n    for (const connection of await sourceControl.connections.list({\n      orgId: input.binding.orgId,\n      factoryProjectId: input.binding.factoryProjectId,\n    })) {\n      const installation = await sourceControl.installations.get({\n        orgId: input.binding.orgId,\n        id: connection.installationId,\n      });\n      if (!installation) continue;\n      for (const link of await sourceControl.projectRepositories.list({\n        orgId: input.binding.orgId,\n        connectionId: connection.id,\n      })) {\n        const repository = await sourceControl.repositories.get({ orgId: input.binding.orgId, id: link.repositoryId });\n        if (!repository || repository.slug.toLowerCase() !== repositorySlug.toLowerCase()) continue;\n        repositoryId = Number(repository.externalId);\n        installationId = Number(installation.externalId);\n        break;\n      }\n      if (repositoryId !== undefined) break;\n    }\n    const pullRequestNumber = Number(match[2]);\n    const [owner, repo] = repositorySlug.split('/');\n    if (\n      !owner ||\n      !repo ||\n      repositoryId === undefined ||\n      installationId === undefined ||\n      !Number.isInteger(repositoryId) ||\n      !Number.isInteger(installationId) ||\n      !Number.isInteger(pullRequestNumber) ||\n      pullRequestNumber < 1\n    )\n      return;\n    const targetKey = `factory-pr-provenance:${repositoryId}:${pullRequestNumber}`;\n    // Dedupe within the authoring project only: a sibling project's row must\n    // not block this project from recording its own provenance.\n    if (\n      (await integrationStorage.subscriptions.listByTarget(targetKey)).some(\n        row => row.orgId === input.binding.orgId && row.data?.factoryProjectId === input.binding.factoryProjectId,\n      )\n    ) {\n      return;\n    }\n\n    const { data } = await github\n      .getInstallationOctokit(installationId)\n      .pulls.get({ owner, repo, pull_number: pullRequestNumber });\n    if (data.base.repo.id !== repositoryId || data.number !== pullRequestNumber || data.html_url !== url) return;\n\n    await integrationStorage.subscriptions.create({\n      orgId: input.binding.orgId,\n      targetKey,\n      threadId: input.binding.threadId,\n      status: 'active',\n      data: {\n        kind: 'factory-pr-provenance',\n        bindingId: input.binding.id,\n        workItemId: input.item.id,\n        factoryProjectId: input.binding.factoryProjectId,\n        repositoryId,\n        pullRequestNumber,\n        pullRequestUrl: url,\n        assistantMessageId: input.assistantMessageId,\n        toolCallId: input.toolCallId,\n      },\n    });\n\n    const reviewItem = (\n      await workItems.list({\n        orgId: input.binding.orgId,\n        factoryProjectId: input.binding.factoryProjectId,\n      })\n    ).find(\n      item =>\n        item.externalSource?.integrationId === 'github' &&\n        item.externalSource.type === 'pull-request' &&\n        (item.externalSource.externalId === `github-pr:${pullRequestNumber}` ||\n          item.externalSource.externalId === `github:${repositoryId}:pull-request:${pullRequestNumber}`),\n    );\n    if (reviewItem) {\n      await workItems.setParentWorkItemIfMissing({\n        orgId: input.binding.orgId,\n        id: reviewItem.id,\n        userId: 'factory-pr-provenance',\n        parentWorkItemId: input.item.id,\n      });\n    }\n  } catch {\n    return;\n  }\n}\n"],"mappings":";;AA8BA,eAAsB,0CACpB,oBAKA,OACwB;CACxB,MAAM,YAAY,yBAAyB,MAAM,aAAa,GAAG,MAAM;CAUvE,QANoB,MAAM,mBAAmB,cAAc,aAAa,WAAW,EAAE,QAAQ,SAAS,CAAC,EAAA,CAAG,MACxG,QACE,IAAI,UAAU,MAAM,SACpB,IAAI,MAAM,SAAS,2BACnB,IAAI,KAAK,qBAAqB,MAAM,gBAExB,CAAC,EAAE,MAAM,cAAc;AACzC;AAEA,eAAsB,mCACpB,QACA,eACA,oBAKA,WACA,OACe;CACf,IAAI,MAAM,WAAW,aAAa,MAAM,KAAK,gBAAgB,SAAS,gBAAgB;CACtF,MAAM,MAAM,wBAAwB;EAClC,UAAU,MAAM;EAChB,OAAO,MAAM;EACb,QAAQ,MAAM;CAChB,CAAC;CACD,IAAI,CAAC,KAAK;CAEV,IAAI;EACF,MAAM,QAAQ,IAAI,MAAM,0DAA0D;EAClF,IAAI,CAAC,OAAO;EACZ,MAAM,iBAAiB,MAAM;EAC7B,IAAI;EACJ,IAAI;EACJ,KAAK,MAAM,cAAc,MAAM,cAAc,YAAY,KAAK;GAC5D,OAAO,MAAM,QAAQ;GACrB,kBAAkB,MAAM,QAAQ;EAClC,CAAC,GAAG;GACF,MAAM,eAAe,MAAM,cAAc,cAAc,IAAI;IACzD,OAAO,MAAM,QAAQ;IACrB,IAAI,WAAW;GACjB,CAAC;GACD,IAAI,CAAC,cAAc;GACnB,KAAK,MAAM,QAAQ,MAAM,cAAc,oBAAoB,KAAK;IAC9D,OAAO,MAAM,QAAQ;IACrB,cAAc,WAAW;GAC3B,CAAC,GAAG;IACF,MAAM,aAAa,MAAM,cAAc,aAAa,IAAI;KAAE,OAAO,MAAM,QAAQ;KAAO,IAAI,KAAK;IAAa,CAAC;IAC7G,IAAI,CAAC,cAAc,WAAW,KAAK,YAAY,MAAM,eAAe,YAAY,GAAG;IACnF,eAAe,OAAO,WAAW,UAAU;IAC3C,iBAAiB,OAAO,aAAa,UAAU;IAC/C;GACF;GACA,IAAI,iBAAiB,KAAA,GAAW;EAClC;EACA,MAAM,oBAAoB,OAAO,MAAM,EAAE;EACzC,MAAM,CAAC,OAAO,QAAQ,eAAe,MAAM,GAAG;EAC9C,IACE,CAAC,SACD,CAAC,QACD,iBAAiB,KAAA,KACjB,mBAAmB,KAAA,KACnB,CAAC,OAAO,UAAU,YAAY,KAC9B,CAAC,OAAO,UAAU,cAAc,KAChC,CAAC,OAAO,UAAU,iBAAiB,KACnC,oBAAoB,GAEpB;EACF,MAAM,YAAY,yBAAyB,aAAa,GAAG;EAG3D,KACG,MAAM,mBAAmB,cAAc,aAAa,SAAS,EAAA,CAAG,MAC/D,QAAO,IAAI,UAAU,MAAM,QAAQ,SAAS,IAAI,MAAM,qBAAqB,MAAM,QAAQ,gBAC3F,GAEA;EAGF,MAAM,EAAE,SAAS,MAAM,OACpB,uBAAuB,cAAc,CAAC,CACtC,MAAM,IAAI;GAAE;GAAO;GAAM,aAAa;EAAkB,CAAC;EAC5D,IAAI,KAAK,KAAK,KAAK,OAAO,gBAAgB,KAAK,WAAW,qBAAqB,KAAK,aAAa,KAAK;EAEtG,MAAM,mBAAmB,cAAc,OAAO;GAC5C,OAAO,MAAM,QAAQ;GACrB;GACA,UAAU,MAAM,QAAQ;GACxB,QAAQ;GACR,MAAM;IACJ,MAAM;IACN,WAAW,MAAM,QAAQ;IACzB,YAAY,MAAM,KAAK;IACvB,kBAAkB,MAAM,QAAQ;IAChC;IACA;IACA,gBAAgB;IAChB,oBAAoB,MAAM;IAC1B,YAAY,MAAM;GACpB;EACF,CAAC;EAED,MAAM,cACJ,MAAM,UAAU,KAAK;GACnB,OAAO,MAAM,QAAQ;GACrB,kBAAkB,MAAM,QAAQ;EAClC,CAAC,EAAA,CACD,MACA,SACE,KAAK,gBAAgB,kBAAkB,YACvC,KAAK,eAAe,SAAS,mBAC5B,KAAK,eAAe,eAAe,aAAa,uBAC/C,KAAK,eAAe,eAAe,UAAU,aAAa,gBAAgB,oBAChF;EACA,IAAI,YACF,MAAM,UAAU,2BAA2B;GACzC,OAAO,MAAM,QAAQ;GACrB,IAAI,WAAW;GACf,QAAQ;GACR,kBAAkB,MAAM,KAAK;EAC/B,CAAC;CAEL,QAAQ;EACN;CACF;AACF"}

package/dist/integrations/github/routes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../../../src/integrations/github/routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAGH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAG1D,OAAO,KAAK,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAGnE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAE3D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAGvD,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,kCAAkC,CAAC;AAInF,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,+CAA+C,CAAC;AAC3F,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,wCAAwC,CAAC;AASrF,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAuC1D,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAgBxD,MAAM,WAAW,wBAAwB;IACvC,4EAA4E;IAC5E,IAAI,EAAE,SAAS,CAAC;IAChB,8EAA8E;IAC9E,KAAK,CAAC,EAAE,wBAAwB,CAAC;IACjC;;;;;OAKG;IACH,OAAO,CAAC,EAAE,0BAA0B,CAAC;IACrC,yEAAyE;IACzE,OAAO,CAAC,EAAE,cAAc,CAAC;IACzB;;;;OAIG;IACH,MAAM,CAAC,EAAE,iBAAiB,CAAC;IAC3B;;;;OAIG;IACH,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,iFAAiF;IACjF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,4FAA4F;IAC5F,UAAU,CAAC,EAAE,iBAAiB,CAAC,YAAY,CAAC,CAAC;IAC7C,gGAAgG;IAChG,cAAc,EAAE,IAAI,CAAC,qBAAqB,EAAE,KAAK,CAAC,CAAC;IACnD,6EAA6E;IAC7E,SAAS,CAAC,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC;IACjC,2EAA2E;IAC3E,QAAQ,CAAC,EAAE,sBAAsB,CAAC;IAClC,iBAAiB,CAAC,EAAE,OAAO,qCAAqC,EAAE,4BAA4B,CAAC;IAC/F,kFAAkF;IAClF,SAAS,CAAC,EAAE,IAAI,CAAC,OAAO,0CAA0C,EAAE,gBAAgB,EAAE,wBAAwB,CAAC,CAAC;IAChH,+FAA+F;IAC/F,kBAAkB,CAAC,EAAE,CAAC,KAAK,EAAE,mBAAmB,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CACvE;AA4ND;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,wBAAwB,GAAG,QAAQ,EAAE,CAypB/E;AAiHD,KAAK,wBAAwB,GAAG,IAAI,CAAC,aAAa,EAAE,SAAS,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC,CAAC"}
+{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../../../src/integrations/github/routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAGH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAG1D,OAAO,KAAK,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAGnE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAE3D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAGvD,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,kCAAkC,CAAC;AAInF,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,+CAA+C,CAAC;AAC3F,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,wCAAwC,CAAC;AASrF,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAuC1D,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAgBxD,MAAM,WAAW,wBAAwB;IACvC,4EAA4E;IAC5E,IAAI,EAAE,SAAS,CAAC;IAChB,8EAA8E;IAC9E,KAAK,CAAC,EAAE,wBAAwB,CAAC;IACjC;;;;;OAKG;IACH,OAAO,CAAC,EAAE,0BAA0B,CAAC;IACrC,yEAAyE;IACzE,OAAO,CAAC,EAAE,cAAc,CAAC;IACzB;;;;OAIG;IACH,MAAM,CAAC,EAAE,iBAAiB,CAAC;IAC3B;;;;OAIG;IACH,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,iFAAiF;IACjF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,4FAA4F;IAC5F,UAAU,CAAC,EAAE,iBAAiB,CAAC,YAAY,CAAC,CAAC;IAC7C,gGAAgG;IAChG,cAAc,EAAE,IAAI,CAAC,qBAAqB,EAAE,KAAK,CAAC,CAAC;IACnD,6EAA6E;IAC7E,SAAS,CAAC,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC;IACjC,2EAA2E;IAC3E,QAAQ,CAAC,EAAE,sBAAsB,CAAC;IAClC,iBAAiB,CAAC,EAAE,OAAO,qCAAqC,EAAE,4BAA4B,CAAC;IAC/F,kFAAkF;IAClF,SAAS,CAAC,EAAE,IAAI,CAAC,OAAO,0CAA0C,EAAE,gBAAgB,EAAE,wBAAwB,CAAC,CAAC;IAChH,+FAA+F;IAC/F,kBAAkB,CAAC,EAAE,CAAC,KAAK,EAAE,mBAAmB,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CACvE;AA4ND;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,wBAAwB,GAAG,QAAQ,EAAE,CAmoB/E;AA+GD,KAAK,wBAAwB,GAAG,IAAI,CAAC,aAAa,EAAE,SAAS,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC,CAAC"}

package/dist/integrations/github/routes.js

@@ -1,5 +1,6 @@
 import { clearGithubPat, getGithubPatStatus, setGithubPat } from "./pat.js";
 import { listPullRequestSubscriptionsForThread, subscribeToPullRequest } from "./subscriptions.js";
+import { MaterializeError, SetupCommandError, commitAll, isValidGitRef, pushBranch } from "./sandbox.js";
 import { requireExec } from "../../sandbox/materialization.js";
 import { sanitizeSegment } from "../../sandbox/workdir.js";
 import { peekSessionSandbox } from "../../sandbox/session-sandbox.js";
@@ -7,7 +8,6 @@ import { normalizeSessionTitle } from "../../session/session-title.js";
 import { listRepositoryCommits } from "./commits.js";
 import { getGithubFeatureDiagnostics, isGithubFeatureEnabled } from "./config.js";
 import { reclaimDeletedSessionSandbox } from "./sandbox-release.js";
-import { MaterializeError, SetupCommandError, commitAll, isValidGitRef as isValidGitRef$1, pushBranch } from "./sandbox.js";
 import { handleGithubWebhook } from "./webhook.js";
 import { registerApiRoute } from "@mastra/core/server";
 import { randomUUID } from "crypto";
@@ -60,15 +60,6 @@ function pullRequestNumberFromUrl(value, expectedRepo) {
 		return;
 	}
 }
-/**
-* Validate a git branch/ref name against a strict whitelist. The value is later
-* interpolated into a shell `git clone --branch` command, so it must never
-* contain shell metacharacters. We accept only git-ref-safe characters and
-* reject anything else rather than relying on shell quoting alone.
-*/
-function isValidGitRef(value) {
-	return typeof value === "string" && value.length > 0 && value.length <= 255 && /^[A-Za-z0-9_./-]+$/.test(value);
-}
 function isJsonObject(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
@@ -404,29 +395,11 @@ function buildGithubRoutes(options) {
 					repo
 				});
 			}
-			const repos = new Array(matches.length);
-			const upsertConcurrency = 10;
-			for (let start = 0; start < matches.length; start += upsertConcurrency) await Promise.all(matches.slice(start, start + upsertConcurrency).map(async ({ inst, repo }, offset) => {
-				const repository = await github.sourceControlStorage.repositories.upsert({
-					orgId,
-					input: {
-						installationId: inst.id,
-						externalId: repo.id.toString(),
-						slug: repo.fullName,
-						defaultBranch: isValidGitRef(repo.defaultBranch) ? repo.defaultBranch : "main",
-						providerMetadata: {
-							private: repo.private,
-							owner: repo.owner
-						}
-					}
-				});
-				repos[start + offset] = {
-					...repo,
-					installationStorageId: inst.id,
-					repositoryStorageId: repository.id,
-					sandboxProvider: sandbox ? "custom" : "none",
-					sandboxWorkdir: `~/${sanitizeSegment(repo.fullName.split("/", 2)[1] || "repo")}`
-				};
+			const repos = matches.map(({ inst, repo }) => ({
+				...repo,
+				installationStorageId: inst.id,
+				sandboxProvider: sandbox ? "custom" : "none",
+				sandboxWorkdir: `~/${sanitizeSegment(repo.fullName.split("/", 2)[1] || "repo")}`
 			}));
 			return c.json({ repos });
 		}
@@ -944,7 +917,7 @@ function buildProjectGitRoutes({ github, auth, sandbox, users, controller, memor
 				const requestedBaseBranch = body.baseBranch;
 				if (requestedBaseBranch !== void 0 && typeof requestedBaseBranch !== "string") return c.json({ error: "Invalid baseBranch" }, 400);
 				const baseBranch = requestedBaseBranch ?? project.defaultBranch;
-				if (!isValidGitRef$1(baseBranch)) return c.json({ error: "Invalid baseBranch" }, 400);
+				if (!isValidGitRef(baseBranch)) return c.json({ error: "Invalid baseBranch" }, 400);
 				const requestedSessionId = body.sessionId;
 				if (requestedSessionId !== void 0 && (typeof requestedSessionId !== "string" || !UUID_PATTERN.test(requestedSessionId))) return c.json({ error: "Invalid sessionId" }, 400);
 				const sessionId = requestedSessionId ?? randomUUID();
@@ -954,7 +927,7 @@ function buildProjectGitRoutes({ github, auth, sandbox, users, controller, memor
 				const requestedBranch = body.branch;
 				let branch;
 				if (requestedBranch === void 0) branch = `${USER_SESSION_BRANCH_PREFIX}${sessionId}`;
-				else if (typeof requestedBranch === "string" && isValidGitRef$1(requestedBranch)) branch = requestedBranch;
+				else if (typeof requestedBranch === "string" && isValidGitRef(requestedBranch)) branch = requestedBranch;
 				else return c.json({ error: "Invalid branch" }, 400);
 				if (requestedSessionId !== void 0) {
 					const existing = await github.sourceControlStorage.sessions.getBySessionId(sessionId);
@@ -1133,7 +1106,7 @@ function buildProjectGitRoutes({ github, auth, sandbox, users, controller, memor
 				if ("response" in loaded) return loaded.response;
 				const { orgId, project } = loaded;
 				const branch = c.req.query("branch") ?? project.defaultBranch;
-				if (!isValidGitRef$1(branch)) return c.json({ error: "Invalid branch" }, 400);
+				if (!isValidGitRef(branch)) return c.json({ error: "Invalid branch" }, 400);
 				const limit = Math.min(Math.max(Math.floor(Number(c.req.query("limit") ?? DEFAULT_COMMIT_PAGE)) || DEFAULT_COMMIT_PAGE, 1), MAX_COMMIT_PAGE);
 				try {
 					const commits = await listRepositoryCommits(github, {
@@ -1169,7 +1142,7 @@ function buildProjectGitRoutes({ github, auth, sandbox, users, controller, memor
 				} catch {
 					return c.json({ error: "Invalid JSON body" }, 400);
 				}
-				if (!isValidGitRef$1(body.branch)) return c.json({ error: "Invalid branch" }, 400);
+				if (!isValidGitRef(body.branch)) return c.json({ error: "Invalid branch" }, 400);
 				const branch = body.branch;
 				const sessionWorkspace = await resolveSessionWorkspace(github, project.id, userId, body.sessionId);
 				if (!sessionWorkspace) return c.json({ error: "Invalid sessionId" }, 400);
@@ -1226,9 +1199,9 @@ function buildProjectGitRoutes({ github, auth, sandbox, users, controller, memor
 				} catch {
 					return c.json({ error: "Invalid JSON body" }, 400);
 				}
-				if (!isValidGitRef$1(body.branch)) return c.json({ error: "Invalid branch" }, 400);
+				if (!isValidGitRef(body.branch)) return c.json({ error: "Invalid branch" }, 400);
 				const base = body.base === void 0 ? project.defaultBranch : body.base;
-				if (!isValidGitRef$1(base)) return c.json({ error: "Invalid base" }, 400);
+				if (!isValidGitRef(base)) return c.json({ error: "Invalid base" }, 400);
 				if (typeof body.title !== "string" || body.title.trim().length === 0 || body.title.length > 256) return c.json({ error: "Invalid title" }, 400);
 				if (body.body !== void 0 && (typeof body.body !== "string" || body.body.length > 65536)) return c.json({ error: "Invalid body" }, 400);
 				const head = body.branch;