@mastra/factory 0.13.0-alpha.9 → 0.13.0

package/dist/integrations/linear/integration.js.map

@@ -1 +1 @@
-{"version":3,"file":"integration.js","names":["#storage","#projects","#auth","#updateTokens","#inflightRefreshes","#connectionChecks","#orgIdByResourceId","#resolveIntakeDispatch","#listIntakeIssues","#getIntakeIssue","#createIntakeComment","#updateIntakeIssue","#clientId","#clientSecret","#rules","#requestTokens","#listTeamWorkflowStates","#fetchRemainingIssueComments"],"sources":["../../../src/integrations/linear/integration.ts"],"sourcesContent":["/**\n * `LinearIntegration` — the self-contained Linear integration.\n *\n * Implements the system-wide `FactoryIntegration` contract\n * (`../factory-integration.ts`): the deploy entry reads the Linear OAuth env\n * vars ONCE, constructs an instance with explicit credentials, and passes it\n * to `MastraFactory`. Everything Linear-flavored the system does — the OAuth\n * connect/callback flow, workspace/project/issue reads for Intake, and the\n * agent's issue tools — flows through this instance. No other module reads\n * `LINEAR_*` env vars.\n *\n * The class owns:\n *  - OAuth: the user-facing authorize URL, code exchange, and refresh-token\n *    rotation against Linear's `/oauth/token` endpoint.\n *  - GraphQL reads/writes: viewer workspace, projects, active issues for\n *    Intake, full issue detail (description + discussion), issue comments.\n *  - The HTTP surface (`routes()`) and per-request agent tools\n *    (`agentTools()`), delegating to `./routes.ts` / `./agent-tools.ts` with\n *    `this` as the API client.\n */\n\nimport type { RequestContext } from '@mastra/core/request-context';\nimport type { ApiRoute } from '@mastra/core/server';\nimport type { MastraWorker } from '@mastra/core/worker';\nimport type { IntegrationConnection } from '../../capabilities/connection.js';\nimport type {\n  CreateIntakeCommentInput,\n  GetIntakeIssueInput,\n  Intake,\n  IntakeIssue,\n  IntakeIssueDetail,\n  ListIntakeIssuesInput,\n  UpdateIntakeIssueInput,\n} from '../../capabilities/intake.js';\nimport type { RouteAuth } from '../../routes/route.js';\nimport type { IntegrationStorageHandle } from '../../storage/domains/integrations/base.js';\nimport type { FactoryProjectsStorage } from '../../storage/domains/projects/base.js';\nimport type { FactoryIntegration, IntegrationContext, IntegrationTools } from '../base.js';\nimport { IssueReconcileWorker } from '../issue-reconcile-worker.js';\nimport { buildLinearAgentTools } from './agent-tools.js';\nimport type { LinearEventRules, LinearRuleOverrides } from './default-rules.js';\nimport { resolveLinearRules } from './default-rules.js';\nimport { attachLinearIssueReconciler } from './issue-reconciler.js';\nimport { linearIssueReconciliationEnabled, linearIssueReconciliationInterval } from './reconciliation-config.js';\nimport { buildLinearRoutes } from './routes.js';\nimport { attachLinearRules } from './rules.js';\nimport type { LinearConnectionRow, LinearStorageHandle, UpsertLinearConnectionInput } from './storage.js';\n\nconst LINEAR_GRAPHQL_URL = 'https://api.linear.app/graphql';\nconst LINEAR_TOKEN_URL = 'https://api.linear.app/oauth/token';\nconst LINEAR_AUTHORIZE_URL = 'https://linear.app/oauth/authorize';\n\n/** Credentials and optional event rules for the Linear OAuth application. */\nexport interface LinearIntegrationConfig {\n  /** Per-event replacements; omitted events retain defaults, null disables. */\n  rules?: LinearRuleOverrides;\n  /** OAuth client id of the Linear application. */\n  clientId: string;\n  /** OAuth client secret of the Linear application. */\n  clientSecret: string;\n}\n\n/**\n * Tokens minted by Linear's `/oauth/token` endpoint. Linear access tokens\n * expire (24h) and refresh tokens rotate: every refresh invalidates the old\n * pair, so callers must persist the whole set after each exchange.\n */\nexport interface LinearTokenSet {\n  accessToken: string;\n  /** Null when Linear issued no refresh token (legacy non-expiring apps). */\n  refreshToken: string | null;\n  /** Null when Linear reported no `expires_in`. */\n  expiresAt: Date | null;\n  /** Scopes granted to the token as reported by Linear; null when omitted. */\n  scope: string | null;\n}\n\nexport interface LinearWorkspace {\n  name: string;\n  urlKey: string;\n}\n\nexport interface LinearIssue {\n  id: string;\n  projectId: string;\n  /** Human key like `ENG-123`. */\n  identifier: string;\n  title: string;\n  url: string;\n  /** Workflow state name, e.g. `In Progress`. */\n  state: string;\n  /** Workflow state type, e.g. `backlog` / `unstarted` / `started` / `triage`. */\n  stateType: string;\n  priorityLabel: string;\n  assignee: string | null;\n  /** Display name of the Linear user who created the issue, when Linear returns one. */\n  creator: string | null;\n  team: string | null;\n  labels: string[];\n  createdAt: string;\n  updatedAt: string;\n}\n\nexport interface LinearIssuePage {\n  issues: LinearIssue[];\n  /** Opaque cursor for the next page, or `null` on the last page. */\n  nextCursor: string | null;\n}\n\nexport interface LinearProjectTeam {\n  id: string;\n  /** Short team key, e.g. `ENG`. */\n  key: string;\n  name: string;\n}\n\nexport interface LinearProject {\n  id: string;\n  name: string;\n  /** Project state, e.g. `planned` / `started` / `paused` / `completed`. */\n  state: string;\n  /** Teams the project belongs to (the Settings picker groups by these). */\n  teams: LinearProjectTeam[];\n}\n\nexport interface LinearIssueComment {\n  author: string | null;\n  body: string;\n  createdAt: string;\n}\n\n/** Full issue payload for agent context: everything in {@link LinearIssue} plus description and discussion. */\nexport interface LinearIssueDetail extends Omit<LinearIssue, 'projectId'> {\n  projectId: string | null;\n  /** Markdown body of the issue, or `null` when empty. */\n  description: string | null;\n  /** Discussion comments, oldest first. */\n  comments: LinearIssueComment[];\n}\n\n/** The comment created by {@link LinearIntegration.createIssueComment}. */\nexport interface LinearCreatedComment {\n  id: string;\n  url: string;\n}\n\nconst LINEAR_ISSUES_PAGE_SIZE = 30;\nconst ISSUE_COMMENTS_PAGE_SIZE = 50;\n/** Hard stop for comment pagination so a misbehaving cursor can't loop forever. */\nconst ISSUE_COMMENTS_MAX_PAGES = 20;\n\n/** Refresh this many ms before the recorded expiry to absorb clock skew. */\nconst TOKEN_REFRESH_SKEW_MS = 60_000;\n\n/** Re-check an org's Linear connection (and its scopes) at most this often. */\nconst CONNECTION_TTL_MS = 60_000;\n\nconst UUID_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;\n\n/** Thrown when the org's Linear authorization can no longer be renewed. */\nexport class LinearReauthRequiredError extends Error {\n  constructor() {\n    super('Linear authorization expired. Reconnect Linear to keep syncing intake issues.');\n  }\n}\n\n/** Cached result of {@link LinearIntegration.checkConnection}. */\nexport interface LinearConnectionCheck {\n  connected: boolean;\n  /** Whether the granted OAuth scope allows posting issue comments. */\n  canComment: boolean;\n  checkedAt: number;\n}\n\ninterface IssuesQueryData {\n  issues: {\n    nodes: Array<{\n      id: string;\n      identifier: string;\n      title: string;\n      url: string;\n      priorityLabel: string;\n      createdAt: string;\n      updatedAt: string;\n      state: { name: string; type: string };\n      project: { id: string };\n      assignee: { name: string } | null;\n      creator: { name: string } | null;\n      team: { key: string } | null;\n      labels: { nodes: Array<{ name: string }> };\n    }>;\n    pageInfo: { hasNextPage: boolean; endCursor: string | null };\n  };\n}\n\ninterface IssueCommentNode {\n  body: string;\n  createdAt: string;\n  user: { name: string } | null;\n}\n\ninterface IssueCommentsPage {\n  nodes: IssueCommentNode[];\n  pageInfo: { hasNextPage: boolean; endCursor: string | null };\n}\n\ninterface IssueDetailQueryData {\n  issue: {\n    id: string;\n    identifier: string;\n    title: string;\n    description: string | null;\n    url: string;\n    priorityLabel: string;\n    createdAt: string;\n    updatedAt: string;\n    state: { name: string; type: string };\n    project: { id: string } | null;\n    assignee: { name: string } | null;\n    creator: { name: string } | null;\n    team: { key: string } | null;\n    labels: { nodes: Array<{ name: string }> };\n    comments: IssueCommentsPage;\n  } | null;\n}\n\ninterface IssueCommentsQueryData {\n  issue: { comments: IssueCommentsPage } | null;\n}\n\ninterface IssueIdQueryData {\n  issue: { id: string } | null;\n}\n\ninterface CommentCreateMutationData {\n  commentCreate: { success: boolean; comment: { id: string; url: string } | null };\n}\n\n/** POST a GraphQL query to Linear with the given OAuth access token. */\nasync function linearGraphql<T>(accessToken: string, query: string, variables?: Record<string, unknown>): Promise<T> {\n  const res = await fetch(LINEAR_GRAPHQL_URL, {\n    method: 'POST',\n    signal: AbortSignal.timeout(15_000),\n    headers: {\n      'content-type': 'application/json',\n      authorization: `Bearer ${accessToken}`,\n    },\n    body: JSON.stringify({ query, variables }),\n  });\n  if (!res.ok) {\n    // Linear returns GraphQL errors (validation, missing scopes, …) with a\n    // 400 status — surface the actual message instead of just the code.\n    let detail: string | null = null;\n    try {\n      const errBody = (await res.json()) as { errors?: Array<{ message?: string }> };\n      detail = errBody.errors?.[0]?.message ?? null;\n    } catch {\n      // Non-JSON error body; fall back to the status code alone.\n    }\n    const err = new Error(`Linear API request failed (${res.status})${detail ? `: ${detail}` : ''}`);\n    (err as { status?: number }).status = res.status;\n    throw err;\n  }\n  const body = (await res.json()) as { data?: T; errors?: Array<{ message?: string }> };\n  if (body.errors?.length) {\n    throw new Error(`Linear API error: ${body.errors[0]?.message ?? 'unknown error'}`);\n  }\n  if (!body.data) {\n    throw new Error('Linear API returned no data.');\n  }\n  return body.data;\n}\n\nexport class LinearIntegration implements FactoryIntegration {\n  /** Stable integration identifier (see `../base.ts`). */\n  readonly id = 'linear';\n  /** Bound once by the factory via `initialize()` before any surface is used. */\n  #storage: LinearStorageHandle | undefined;\n  #projects: FactoryProjectsStorage | undefined;\n  #auth: RouteAuth | undefined;\n\n  /** Bind Linear's slice of the generic integration storage, the projects domain, and the host auth seam. */\n  initialize({\n    storage,\n    projects,\n    auth,\n  }: {\n    storage: IntegrationStorageHandle;\n    projects: FactoryProjectsStorage;\n    auth: RouteAuth;\n  }): void {\n    this.#storage = storage as unknown as LinearStorageHandle;\n    this.#projects = projects;\n    this.#auth = auth;\n  }\n\n  get storage(): LinearStorageHandle {\n    if (!this.#storage) {\n      throw new Error('LinearIntegration is not initialized — the factory binds storage during prepare().');\n    }\n    return this.#storage;\n  }\n\n  /** Factory projects domain — maps a session's resourceId to its owning org. */\n  get projects(): FactoryProjectsStorage {\n    if (!this.#projects) {\n      throw new Error('LinearIntegration is not initialized — the factory binds storage during prepare().');\n    }\n    return this.#projects;\n  }\n\n  /**\n   * Whether the host runs with web auth enabled. Linear connections are\n   * org-owned, so every Linear surface is inert without a tenant auth seam.\n   */\n  get authEnabled(): boolean {\n    return this.#auth?.enabled() ?? false;\n  }\n\n  // ── Connection + OAuth token lifecycle ───────────────────────────────────\n\n  /** Load the org's Linear connection, or `null` when not connected. */\n  async loadConnection(orgId: string): Promise<LinearConnectionRow | null> {\n    const connection = await this.storage.connections.get(orgId);\n    if (!connection) return null;\n    const { data } = connection;\n    return {\n      id: connection.id,\n      orgId: connection.orgId,\n      userId: connection.userId,\n      accessToken: data.accessToken,\n      scope: data.scope ?? null,\n      refreshToken: data.refreshToken ?? null,\n      expiresAt: data.expiresAtMs === null || data.expiresAtMs === undefined ? null : new Date(data.expiresAtMs),\n      workspaceName: data.workspaceName ?? null,\n      workspaceUrlKey: data.workspaceUrlKey ?? null,\n      createdAt: connection.createdAt,\n      updatedAt: connection.updatedAt,\n    };\n  }\n\n  /** Insert or replace the org's connection (one per org). */\n  async upsertConnection(input: UpsertLinearConnectionInput): Promise<void> {\n    await this.storage.connections.upsert(input.orgId, {\n      userId: input.userId,\n      data: {\n        accessToken: input.accessToken,\n        refreshToken: input.refreshToken,\n        expiresAtMs: input.expiresAt?.getTime() ?? null,\n        scope: input.scope,\n        workspaceName: input.workspaceName,\n        workspaceUrlKey: input.workspaceUrlKey,\n      },\n    });\n    // Let the agent tools see the new connection immediately.\n    this.invalidateConnectionCache(input.orgId);\n  }\n\n  /** Persist a rotated token set on the org's existing connection row. */\n  async #updateTokens(orgId: string, tokens: LinearTokenSet): Promise<void> {\n    await this.storage.connections.update(orgId, data => ({\n      ...data,\n      accessToken: tokens.accessToken,\n      refreshToken: tokens.refreshToken,\n      expiresAtMs: tokens.expiresAt?.getTime() ?? null,\n      // Refresh responses may omit scope; keep the recorded grant.\n      scope: tokens.scope ?? data.scope,\n    }));\n  }\n\n  /**\n   * Whether the connection's token can post issue comments. Legacy rows\n   * without a recorded scope were minted with `read` only, so they count as\n   * read-only until the org reconnects Linear.\n   */\n  canPostComments(connection: LinearConnectionRow): boolean {\n    const scopes = (connection.scope ?? '').split(/[\\s,]+/).filter(Boolean);\n    return scopes.some(scope => scope === 'comments:create' || scope === 'write' || scope === 'admin');\n  }\n\n  /**\n   * In-flight refreshes keyed by org. Linear rotates refresh tokens, so two\n   * concurrent refreshes with the same token would invalidate each other —\n   * single-flight ensures one exchange per org and shares the result.\n   */\n  readonly #inflightRefreshes = new Map<string, Promise<string>>();\n\n  /**\n   * Return a usable access token for the connection, proactively refreshing\n   * it when the recorded expiry is past (or imminent). Throws\n   * `LinearReauthRequiredError` when the token is expired and cannot be\n   * refreshed — the org has to go through the OAuth flow again.\n   */\n  async getFreshAccessToken(connection: LinearConnectionRow): Promise<string> {\n    const expired =\n      connection.expiresAt !== null && connection.expiresAt.getTime() - TOKEN_REFRESH_SKEW_MS <= Date.now();\n    if (!expired) return connection.accessToken;\n\n    if (!connection.refreshToken) {\n      // Legacy row from before refresh-token support: nothing to renew with.\n      throw new LinearReauthRequiredError();\n    }\n\n    const existing = this.#inflightRefreshes.get(connection.orgId);\n    if (existing) return existing;\n\n    // The caller may hold a stale row: another request could have refreshed\n    // and rotated the refresh token since this row was loaded. Reload before\n    // refreshing so we don't burn the rotated token and force a false reauth.\n    const latest = await this.loadConnection(connection.orgId);\n    if (!latest) throw new LinearReauthRequiredError();\n\n    const concurrent = this.#inflightRefreshes.get(connection.orgId);\n    if (concurrent) return concurrent;\n\n    const latestExpired = latest.expiresAt !== null && latest.expiresAt.getTime() - TOKEN_REFRESH_SKEW_MS <= Date.now();\n    if (!latestExpired) return latest.accessToken;\n    if (!latest.refreshToken) throw new LinearReauthRequiredError();\n\n    const refreshToken = latest.refreshToken;\n    const refresh = (async () => {\n      try {\n        const tokens = await this.refreshAccessToken(refreshToken);\n        await this.#updateTokens(connection.orgId, tokens);\n        return tokens.accessToken;\n      } catch (err) {\n        const status = (err as { status?: number }).status;\n        // invalid_grant surfaces as 400/401: the refresh token was revoked or\n        // already rotated away. Terminal for this connection.\n        if (status === 400 || status === 401) throw new LinearReauthRequiredError();\n        throw err;\n      } finally {\n        this.#inflightRefreshes.delete(connection.orgId);\n      }\n    })();\n    this.#inflightRefreshes.set(connection.orgId, refresh);\n    return refresh;\n  }\n\n  // ── Connection checks for agent tools ────────────────────────────────────\n\n  /** Re-check an org's Linear connection (and its scopes) at most this often. */\n  readonly #connectionChecks = new Map<string, LinearConnectionCheck>();\n\n  /**\n   * Whether the org has an active connection and whether its granted scope\n   * allows posting comments. Cached per org with a short TTL — tool-set\n   * resolution runs on every request.\n   */\n  async checkConnection(orgId: string): Promise<LinearConnectionCheck> {\n    const cached = this.#connectionChecks.get(orgId);\n    if (cached && Date.now() - cached.checkedAt < CONNECTION_TTL_MS) return cached;\n    const connection = await this.loadConnection(orgId);\n    const check: LinearConnectionCheck = {\n      connected: connection !== null,\n      canComment: connection !== null && this.canPostComments(connection),\n      checkedAt: Date.now(),\n    };\n    this.#connectionChecks.set(orgId, check);\n    return check;\n  }\n\n  /**\n   * Drop the cached connection check for an org. Called after a connection is\n   * persisted so the tools show up on the very next run instead of after the\n   * TTL lapses.\n   */\n  invalidateConnectionCache(orgId: string): void {\n    this.#connectionChecks.delete(orgId);\n  }\n\n  /**\n   * A project's org never changes, so the resourceId → orgId mapping is\n   * cached forever. `null` marks resource ids that aren't factory projects\n   * (e.g. local default resources) so we don't re-query them on every\n   * tool-set resolution.\n   */\n  readonly #orgIdByResourceId = new Map<string, string | null>();\n\n  /** Map a session's resourceId to its owning org, or `null` when it isn't a project. */\n  async resolveOrgId(resourceId: string): Promise<string | null> {\n    const cached = this.#orgIdByResourceId.get(resourceId);\n    if (cached !== undefined) return cached;\n    // Non-UUID resource ids (local/dev resources) would make the uuid column\n    // comparison throw — they're definitively \"not a project\", so cache that.\n    if (!UUID_PATTERN.test(resourceId)) {\n      this.#orgIdByResourceId.set(resourceId, null);\n      return null;\n    }\n    let orgId: string | null;\n    try {\n      await this.projects.ensureReady();\n      const project = await this.projects.getById({ id: resourceId });\n      orgId = project?.orgId ?? null;\n    } catch {\n      // Transient database failure: skip the tools for this request but don't\n      // cache the miss, so the next request retries the lookup.\n      return null;\n    }\n    this.#orgIdByResourceId.set(resourceId, orgId);\n    return orgId;\n  }\n\n  /** Test hook: clear the org/connection caches between specs. */\n  clearCaches(): void {\n    this.#orgIdByResourceId.clear();\n    this.#connectionChecks.clear();\n  }\n\n  readonly intake: Intake = {\n    resolveIntakeDispatch: input => this.#resolveIntakeDispatch(input),\n    listSources: async ({ orgId }) => {\n      const connection = await this.loadConnection(orgId);\n      if (!connection) return [];\n      const accessToken = await this.getFreshAccessToken(connection);\n      const projects = await this.listProjects(accessToken);\n      return projects.map(project => ({\n        id: project.id,\n        name: project.name,\n        type: 'project',\n      }));\n    },\n    listItems: async ({ orgId, sourceIds, cursor }) => {\n      if (sourceIds.length === 0) return { items: [], nextCursor: null };\n      const connection = await this.loadConnection(orgId);\n      if (!connection) return { items: [], nextCursor: null };\n      const accessToken = await this.getFreshAccessToken(connection);\n      const page = await this.listActiveIssues(accessToken, cursor, sourceIds);\n      return {\n        items: page.issues.map(issue => ({\n          source: { type: 'issue', externalId: issue.id, url: issue.url },\n          sourceId: issue.projectId,\n          title: `${issue.identifier}: ${issue.title}`,\n          status: issue.state,\n          labels: issue.labels,\n          assignee: issue.assignee,\n          createdAt: issue.createdAt,\n          updatedAt: issue.updatedAt,\n          metadata: {\n            identifier: issue.identifier,\n            stateType: issue.stateType,\n            priority: issue.priorityLabel,\n            team: issue.team,\n          },\n        })),\n        nextCursor: page.nextCursor,\n      };\n    },\n    listIssues: input => this.#listIntakeIssues(input),\n    getIssue: input => this.#getIntakeIssue(input),\n    createComment: input => this.#createIntakeComment(input),\n    updateIssue: input => this.#updateIntakeIssue(input),\n  };\n\n  /**\n   * Background-dispatch context: the org's OAuth connection with a fresh\n   * token. Linear work items store the issue UUID directly as `externalId`.\n   */\n  async #resolveIntakeDispatch({\n    orgId,\n    externalSource,\n  }: {\n    orgId: string;\n    externalSource: { type: string; externalId: string };\n  }): Promise<{ connection: IntegrationConnection; issueId: string } | null> {\n    if (externalSource.type !== 'issue') return null;\n    const connection = await this.loadConnection(orgId);\n    if (!connection) return null;\n    const accessToken = await this.getFreshAccessToken(connection);\n    return { connection: { type: 'oauth', accessToken }, issueId: externalSource.externalId };\n  }\n  /**\n   * The OAuth connect/callback flow round-trips a signed `state` through\n   * Linear, so a multi-replica deploy needs a deployment-stable state secret.\n   */\n  readonly requiresStableStateSigner = true;\n\n  readonly #clientId: string;\n  readonly #clientSecret: string;\n\n  readonly #rules: LinearEventRules;\n\n  get rules(): LinearEventRules {\n    return this.#rules;\n  }\n\n  constructor(config: LinearIntegrationConfig) {\n    this.#rules = resolveLinearRules(config.rules);\n    const missing = (['clientId', 'clientSecret'] as const).filter(key => !config[key]);\n    if (missing.length > 0) {\n      throw new Error(`LinearIntegration is missing required config: ${missing.join(', ')}.`);\n    }\n    this.#clientId = config.clientId;\n    this.#clientSecret = config.clientSecret;\n  }\n\n  // ── OAuth ────────────────────────────────────────────────────────────────\n\n  /**\n   * Build the OAuth authorize URL. `prompt=consent` forces the workspace\n   * picker even for an already-authorized user, so \"reconnect\" can switch\n   * workspaces.\n   */\n  buildAuthorizeUrl(state: string, redirectUri: string): string {\n    const url = new URL(LINEAR_AUTHORIZE_URL);\n    url.searchParams.set('client_id', this.#clientId);\n    url.searchParams.set('redirect_uri', redirectUri);\n    url.searchParams.set('response_type', 'code');\n    // `comments:create` lets the agent's linear_create_comment tool post\n    // comments; everything else the integration does is read-only.\n    url.searchParams.set('scope', 'read,comments:create');\n    url.searchParams.set('state', state);\n    url.searchParams.set('prompt', 'consent');\n    return url.toString();\n  }\n\n  /** Exchange an OAuth `code` for a workspace-scoped token set. */\n  async exchangeOAuthCode(code: string, redirectUri: string): Promise<LinearTokenSet> {\n    return this.#requestTokens({ grant_type: 'authorization_code', code, redirect_uri: redirectUri }, 'token exchange');\n  }\n\n  /**\n   * Exchange a refresh token for a new token set. Linear rotates refresh\n   * tokens, so the returned set replaces the stored one entirely. A 400/401\n   * here means the refresh token is invalid/revoked and the org must\n   * re-authorize.\n   */\n  async refreshAccessToken(refreshToken: string): Promise<LinearTokenSet> {\n    return this.#requestTokens({ grant_type: 'refresh_token', refresh_token: refreshToken }, 'token refresh');\n  }\n\n  /** POST to Linear's token endpoint and normalize the response. */\n  async #requestTokens(params: Record<string, string>, label: string): Promise<LinearTokenSet> {\n    const res = await fetch(LINEAR_TOKEN_URL, {\n      method: 'POST',\n      signal: AbortSignal.timeout(10_000),\n      headers: { 'content-type': 'application/x-www-form-urlencoded' },\n      body: new URLSearchParams({\n        ...params,\n        client_id: this.#clientId,\n        client_secret: this.#clientSecret,\n      }),\n    });\n    if (!res.ok) {\n      const err = new Error(`Linear ${label} failed (${res.status})`);\n      (err as { status?: number }).status = res.status;\n      throw err;\n    }\n    const body = (await res.json()) as {\n      access_token?: string;\n      refresh_token?: string;\n      expires_in?: number;\n      scope?: string;\n    };\n    if (!body.access_token) {\n      throw new Error(`Linear ${label} returned no access token.`);\n    }\n    return {\n      accessToken: body.access_token,\n      refreshToken: body.refresh_token ?? null,\n      expiresAt: typeof body.expires_in === 'number' ? new Date(Date.now() + body.expires_in * 1000) : null,\n      scope: body.scope ?? null,\n    };\n  }\n\n  // ── GraphQL reads/writes ─────────────────────────────────────────────────\n\n  /** Fetch the workspace (organization) the access token is scoped to. */\n  async fetchWorkspace(accessToken: string): Promise<LinearWorkspace> {\n    const data = await linearGraphql<{ organization: { name: string; urlKey: string } }>(\n      accessToken,\n      `query { organization { name urlKey } }`,\n    );\n    return { name: data.organization.name, urlKey: data.organization.urlKey };\n  }\n\n  async #listIntakeIssues(input: ListIntakeIssuesInput): Promise<{ issues: IntakeIssue[]; nextCursor: string | null }> {\n    const accessToken = getLinearAccessToken(input.connection);\n    const result = await this.listActiveIssues(accessToken, input.cursor, input.sourceIds, input.labels);\n    return {\n      issues: result.issues.map(issue => linearIssueToIntakeIssue(issue)),\n      nextCursor: result.nextCursor,\n    };\n  }\n\n  async #getIntakeIssue(input: GetIntakeIssueInput): Promise<IntakeIssueDetail | null> {\n    const accessToken = getLinearAccessToken(input.connection);\n    const issue = await this.fetchIssueDetail(accessToken, input.issueId);\n    if (!issue) return null;\n    return {\n      ...linearIssueToIntakeIssue(issue),\n      description: issue.description,\n      commentCount: issue.comments.length,\n      comments: issue.comments,\n    };\n  }\n\n  async #createIntakeComment(input: CreateIntakeCommentInput): Promise<{ id: string; url: string } | null> {\n    const accessToken = getLinearAccessToken(input.connection);\n    return this.createIssueComment(accessToken, input.issueId, input.body);\n  }\n\n  async #updateIntakeIssue(input: UpdateIntakeIssueInput): Promise<IntakeIssue | null> {\n    const accessToken = getLinearAccessToken(input.connection);\n    const issue = await this.fetchIssueDetail(accessToken, input.issueId);\n    if (!issue) return null;\n    const teamKey = issue.team;\n    if (!teamKey) return null;\n    const states = await this.#listTeamWorkflowStates(accessToken, teamKey);\n    let targetState: { id: string; name: string; type: string } | null = null;\n    if (input.state.kind === 'byType') {\n      const wantedType = input.state.stateType;\n      targetState = states.find(state => state.type === wantedType) ?? null;\n    } else {\n      const wanted = input.state.name.toLowerCase();\n      targetState = states.find(state => state.name.toLowerCase() === wanted) ?? null;\n    }\n    if (!targetState) return null;\n    if (targetState.name === issue.state) {\n      return linearIssueToIntakeIssue(issue);\n    }\n    const data = await linearGraphql<{ issueUpdate: { success: boolean } }>(\n      accessToken,\n      `mutation UpdateIssueState($id: String!, $stateId: String!) {\n        issueUpdate(id: $id, input: { stateId: $stateId }) { success }\n      }`,\n      { id: issue.id, stateId: targetState.id },\n    );\n    if (!data.issueUpdate.success) {\n      throw new Error('Linear did not accept the issue update.');\n    }\n    const fresh = await this.fetchIssueDetail(accessToken, issue.id);\n    if (!fresh) return null;\n    return linearIssueToIntakeIssue(fresh);\n  }\n\n  async #listTeamWorkflowStates(\n    accessToken: string,\n    teamKey: string,\n  ): Promise<Array<{ id: string; name: string; type: string }>> {\n    const data = await linearGraphql<{\n      team: { states: { nodes: Array<{ id: string; name: string; type: string }> } } | null;\n    }>(\n      accessToken,\n      `query TeamStates($key: String!) {\n        team(id: $key) { states(first: 100) { nodes { id name type } } }\n      }`,\n      { key: teamKey },\n    );\n    return data.team?.states.nodes ?? [];\n  }\n\n  /** List the workspace's projects (for the Settings intake-source picker). */\n  async listProjects(accessToken: string): Promise<LinearProject[]> {\n    const data = await linearGraphql<{\n      projects: {\n        nodes: Array<{\n          id: string;\n          name: string;\n          state: string;\n          teams: { nodes: Array<{ id: string; key: string; name: string }> };\n        }>;\n      };\n    }>(\n      accessToken,\n      `query { projects(first: 100) { nodes { id name state teams(first: 10) { nodes { id key name } } } } }`,\n    );\n    return data.projects.nodes.map(node => ({\n      id: node.id,\n      name: node.name,\n      state: node.state,\n      teams: node.teams.nodes.map(team => ({ id: team.id, key: team.key, name: team.name })),\n    }));\n  }\n\n  /**\n   * List one page of the workspace's active issues (triage/backlog/unstarted/\n   * started — completed and canceled are excluded), most recently updated\n   * first. When `projectIds` is provided, only issues from those projects are\n   * returned.\n   */\n  async listActiveIssues(\n    accessToken: string,\n    after?: string,\n    projectIds?: string[],\n    labels?: string[],\n  ): Promise<LinearIssuePage> {\n    const normalizedLabels = [...new Set((labels ?? []).map(label => label.trim()).filter(Boolean))];\n    const projectFilter = projectIds?.length ? ', project: { id: { in: $projectIds } }' : '';\n    const projectVar = projectIds?.length ? ', $projectIds: [ID!]' : '';\n    const labelFilter = normalizedLabels.length > 0 ? ', labels: { name: { in: $labels } }' : '';\n    const labelVar = normalizedLabels.length > 0 ? ', $labels: [String!]' : '';\n    const data = await linearGraphql<IssuesQueryData>(\n      accessToken,\n      `query Intake($first: Int!, $after: String${projectVar}${labelVar}) {\n        issues(\n          first: $first\n          after: $after\n          orderBy: updatedAt\n          filter: { state: { type: { in: [\"triage\", \"backlog\", \"unstarted\", \"started\"] } }${projectFilter}${labelFilter} }\n        ) {\n          nodes {\n            id\n            identifier\n            title\n            url\n            priorityLabel\n            createdAt\n            updatedAt\n            state { name type }\n            project { id }\n            assignee { name }\n            creator { name }\n            team { key }\n            labels { nodes { name } }\n          }\n          pageInfo { hasNextPage endCursor }\n        }\n      }`,\n      {\n        first: LINEAR_ISSUES_PAGE_SIZE,\n        after: after ?? null,\n        ...(projectIds?.length ? { projectIds } : {}),\n        ...(normalizedLabels.length > 0 ? { labels: normalizedLabels } : {}),\n      },\n    );\n    const { nodes, pageInfo } = data.issues;\n    return {\n      issues: nodes.map(node => ({\n        id: node.id,\n        projectId: node.project.id,\n        identifier: node.identifier,\n        title: node.title,\n        url: node.url,\n        state: node.state.name,\n        stateType: node.state.type,\n        priorityLabel: node.priorityLabel,\n        assignee: node.assignee?.name ?? null,\n        creator: node.creator?.name ?? null,\n        team: node.team?.key ?? null,\n        labels: node.labels.nodes.map(label => label.name),\n        createdAt: node.createdAt,\n        updatedAt: node.updatedAt,\n      })),\n      nextCursor: pageInfo.hasNextPage ? pageInfo.endCursor : null,\n    };\n  }\n\n  /** Follow `comments.pageInfo` until exhausted so long discussions aren't truncated. */\n  async #fetchRemainingIssueComments(\n    accessToken: string,\n    issueId: string,\n    firstPage: IssueCommentsPage,\n  ): Promise<IssueCommentNode[]> {\n    const nodes = [...firstPage.nodes];\n    let { hasNextPage, endCursor } = firstPage.pageInfo;\n    for (let page = 1; hasNextPage && endCursor && page < ISSUE_COMMENTS_MAX_PAGES; page++) {\n      const data = await linearGraphql<IssueCommentsQueryData>(\n        accessToken,\n        `query IssueComments($id: String!, $first: Int!, $after: String!) {\n          issue(id: $id) {\n            comments(first: $first, after: $after) {\n              nodes { body createdAt user { name } }\n              pageInfo { hasNextPage endCursor }\n            }\n          }\n        }`,\n        { id: issueId, first: ISSUE_COMMENTS_PAGE_SIZE, after: endCursor },\n      );\n      const comments = data.issue?.comments;\n      if (!comments) break;\n      nodes.push(...comments.nodes);\n      ({ hasNextPage, endCursor } = comments.pageInfo);\n    }\n    return nodes;\n  }\n\n  /**\n   * Fetch one issue with its description and comments. `idOrIdentifier`\n   * accepts both the Linear UUID and the human key (`ENG-123`). Returns\n   * `null` when the issue doesn't exist (Linear reports it as an \"Entity not\n   * found\" error).\n   */\n  async fetchIssueDetail(accessToken: string, idOrIdentifier: string): Promise<LinearIssueDetail | null> {\n    let data: IssueDetailQueryData;\n    try {\n      data = await linearGraphql<IssueDetailQueryData>(\n        accessToken,\n        `query IssueDetail($id: String!, $commentsFirst: Int!) {\n          issue(id: $id) {\n            id\n            identifier\n            title\n            description\n            url\n            priorityLabel\n            createdAt\n            updatedAt\n            state { name type }\n            project { id }\n            assignee { name }\n            creator { name }\n            team { key }\n            labels { nodes { name } }\n            comments(first: $commentsFirst) {\n              nodes { body createdAt user { name } }\n              pageInfo { hasNextPage endCursor }\n            }\n          }\n        }`,\n        { id: idOrIdentifier, commentsFirst: ISSUE_COMMENTS_PAGE_SIZE },\n      );\n    } catch (err) {\n      // Linear surfaces unknown ids/identifiers as a GraphQL \"Entity not\n      // found\" error rather than a null node — map that to \"issue doesn't\n      // exist\".\n      if (err instanceof Error && /entity not found/i.test(err.message)) return null;\n      throw err;\n    }\n    const issue = data.issue;\n    if (!issue) return null;\n    const allComments = await this.#fetchRemainingIssueComments(accessToken, issue.id, issue.comments);\n    const comments = allComments.sort((a, b) => new Date(a.createdAt).getTime() - new Date(b.createdAt).getTime());\n    return {\n      id: issue.id,\n      projectId: issue.project?.id ?? null,\n      identifier: issue.identifier,\n      title: issue.title,\n      description: issue.description?.trim() ? issue.description : null,\n      url: issue.url,\n      state: issue.state.name,\n      stateType: issue.state.type,\n      priorityLabel: issue.priorityLabel,\n      assignee: issue.assignee?.name ?? null,\n      creator: issue.creator?.name ?? null,\n      team: issue.team?.key ?? null,\n      labels: issue.labels.nodes.map(label => label.name),\n      createdAt: issue.createdAt,\n      updatedAt: issue.updatedAt,\n      comments: comments.map(comment => ({\n        author: comment.user?.name ?? null,\n        body: comment.body,\n        createdAt: comment.createdAt,\n      })),\n    };\n  }\n\n  /**\n   * Post a comment on an issue. `idOrIdentifier` accepts both the Linear UUID\n   * and the human key (`ENG-123`) — the identifier is resolved to a UUID\n   * first because `commentCreate` only accepts UUIDs. Returns `null` when the\n   * issue doesn't exist.\n   */\n  async createIssueComment(\n    accessToken: string,\n    idOrIdentifier: string,\n    body: string,\n  ): Promise<LinearCreatedComment | null> {\n    let issueId: string;\n    try {\n      const data = await linearGraphql<IssueIdQueryData>(\n        accessToken,\n        `query IssueId($id: String!) { issue(id: $id) { id } }`,\n        { id: idOrIdentifier },\n      );\n      if (!data.issue) return null;\n      issueId = data.issue.id;\n    } catch (err) {\n      if (err instanceof Error && /entity not found/i.test(err.message)) return null;\n      throw err;\n    }\n    const data = await linearGraphql<CommentCreateMutationData>(\n      accessToken,\n      `mutation CommentCreate($input: CommentCreateInput!) {\n        commentCreate(input: $input) { success comment { id url } }\n      }`,\n      { input: { issueId, body } },\n    );\n    if (!data.commentCreate.success || !data.commentCreate.comment) {\n      throw new Error('Linear did not accept the comment.');\n    }\n    return data.commentCreate.comment;\n  }\n\n  // ── FactoryIntegration surface ───────────────────────────────────────────\n\n  workers(ctx: IntegrationContext): MastraWorker[] {\n    if (!linearIssueReconciliationEnabled()) return [];\n    const reconcile = attachLinearIssueReconciler(this, ctx);\n    if (!reconcile) return [];\n    const intervalMs = linearIssueReconciliationInterval();\n    return [\n      new IssueReconcileWorker({\n        integrationId: this.id,\n        reconcile,\n        ...(intervalMs ? { intervalMs } : {}),\n      }),\n    ];\n  }\n\n  /**\n   * The integration's HTTP surface: `/web/linear/*` + `/auth/linear/*` Mastra\n   * `apiRoutes` (status, OAuth connect/callback, projects + issues for\n   * Intake). Handlers operate on this instance.\n   */\n  routes(ctx: IntegrationContext): ApiRoute[] {\n    return buildLinearRoutes({\n      linear: this,\n      auth: ctx.auth,\n      stateSigner: ctx.stateSigner,\n      baseUrl: ctx.baseUrl,\n      intake: ctx.storage.intake,\n      projects: ctx.storage.projects,\n      ingestFactoryIssues: attachLinearRules(this, ctx),\n    });\n  }\n\n  /**\n   * Org-scoped agent tools: issue detail + comment tools for sessions whose\n   * project belongs to an org with an active Linear connection.\n   */\n  async agentTools(args: { requestContext: RequestContext }): Promise<IntegrationTools> {\n    return buildLinearAgentTools({ requestContext: args.requestContext, linear: this });\n  }\n\n  /** Non-secret config snapshot for system diagnostics/startup logs. */\n  diagnostics(): Record<string, unknown> {\n    return {\n      oauthAppConfigured: true,\n    };\n  }\n}\n\nfunction getLinearAccessToken(connection: IntegrationConnection): string {\n  if (connection.type !== 'oauth') {\n    throw new Error('Linear capabilities require an OAuth connection.');\n  }\n  return connection.accessToken;\n}\n\nfunction linearIssueToIntakeIssue(issue: Omit<LinearIssue, 'projectId'>): IntakeIssue {\n  return {\n    id: issue.id,\n    identifier: issue.identifier,\n    title: issue.title,\n    url: issue.url,\n    author: issue.creator,\n    state: issue.state,\n    stateType: issue.stateType,\n    priority: issue.priorityLabel,\n    assignee: issue.assignee,\n    source: issue.team,\n    labels: issue.labels,\n    commentCount: null,\n    createdAt: issue.createdAt,\n    updatedAt: issue.updatedAt,\n  };\n}\n"],"mappings":";;;;;;;;AAgDA,MAAM,qBAAqB;AAC3B,MAAM,mBAAmB;AACzB,MAAM,uBAAuB;AAgG7B,MAAM,0BAA0B;AAChC,MAAM,2BAA2B;;AAEjC,MAAM,2BAA2B;;AAGjC,MAAM,wBAAwB;;AAG9B,MAAM,oBAAoB;AAE1B,MAAM,eAAe;;AAGrB,IAAa,4BAAb,cAA+C,MAAM;CACnD,cAAc;EACZ,MAAM,+EAA+E;CACvF;AACF;;AA2EA,eAAe,cAAiB,aAAqB,OAAe,WAAiD;CACnH,MAAM,MAAM,MAAM,MAAM,oBAAoB;EAC1C,QAAQ;EACR,QAAQ,YAAY,QAAQ,IAAM;EAClC,SAAS;GACP,gBAAgB;GAChB,eAAe,UAAU;EAC3B;EACA,MAAM,KAAK,UAAU;GAAE;GAAO;EAAU,CAAC;CAC3C,CAAC;CACD,IAAI,CAAC,IAAI,IAAI;EAGX,IAAI,SAAwB;EAC5B,IAAI;GAEF,UAAS,MADc,IAAI,KAAK,EAAA,CACf,SAAS,EAAE,EAAE,WAAW;EAC3C,QAAQ,CAER;EACA,MAAM,sBAAM,IAAI,MAAM,8BAA8B,IAAI,OAAO,GAAG,SAAS,KAAK,WAAW,IAAI;EAC/F,IAA6B,SAAS,IAAI;EAC1C,MAAM;CACR;CACA,MAAM,OAAQ,MAAM,IAAI,KAAK;CAC7B,IAAI,KAAK,QAAQ,QACf,MAAM,IAAI,MAAM,qBAAqB,KAAK,OAAO,EAAE,EAAE,WAAW,iBAAiB;CAEnF,IAAI,CAAC,KAAK,MACR,MAAM,IAAI,MAAM,8BAA8B;CAEhD,OAAO,KAAK;AACd;AAEA,IAAa,oBAAb,MAA6D;;CAE3D,KAAc;;CAEd;CACA;CACA;;CAGA,WAAW,EACT,SACA,UACA,QAKO;EACP,KAAKA,WAAW;EAChB,KAAKC,YAAY;EACjB,KAAKC,QAAQ;CACf;CAEA,IAAI,UAA+B;EACjC,IAAI,CAAC,KAAKF,UACR,MAAM,IAAI,MAAM,oFAAoF;EAEtG,OAAO,KAAKA;CACd;;CAGA,IAAI,WAAmC;EACrC,IAAI,CAAC,KAAKC,WACR,MAAM,IAAI,MAAM,oFAAoF;EAEtG,OAAO,KAAKA;CACd;;;;;CAMA,IAAI,cAAuB;EACzB,OAAO,KAAKC,OAAO,QAAQ,KAAK;CAClC;;CAKA,MAAM,eAAe,OAAoD;EACvE,MAAM,aAAa,MAAM,KAAK,QAAQ,YAAY,IAAI,KAAK;EAC3D,IAAI,CAAC,YAAY,OAAO;EACxB,MAAM,EAAE,SAAS;EACjB,OAAO;GACL,IAAI,WAAW;GACf,OAAO,WAAW;GAClB,QAAQ,WAAW;GACnB,aAAa,KAAK;GAClB,OAAO,KAAK,SAAS;GACrB,cAAc,KAAK,gBAAgB;GACnC,WAAW,KAAK,gBAAgB,QAAQ,KAAK,gBAAgB,KAAA,IAAY,OAAO,IAAI,KAAK,KAAK,WAAW;GACzG,eAAe,KAAK,iBAAiB;GACrC,iBAAiB,KAAK,mBAAmB;GACzC,WAAW,WAAW;GACtB,WAAW,WAAW;EACxB;CACF;;CAGA,MAAM,iBAAiB,OAAmD;EACxE,MAAM,KAAK,QAAQ,YAAY,OAAO,MAAM,OAAO;GACjD,QAAQ,MAAM;GACd,MAAM;IACJ,aAAa,MAAM;IACnB,cAAc,MAAM;IACpB,aAAa,MAAM,WAAW,QAAQ,KAAK;IAC3C,OAAO,MAAM;IACb,eAAe,MAAM;IACrB,iBAAiB,MAAM;GACzB;EACF,CAAC;EAED,KAAK,0BAA0B,MAAM,KAAK;CAC5C;;CAGA,MAAMC,cAAc,OAAe,QAAuC;EACxE,MAAM,KAAK,QAAQ,YAAY,OAAO,QAAO,UAAS;GACpD,GAAG;GACH,aAAa,OAAO;GACpB,cAAc,OAAO;GACrB,aAAa,OAAO,WAAW,QAAQ,KAAK;GAE5C,OAAO,OAAO,SAAS,KAAK;EAC9B,EAAE;CACJ;;;;;;CAOA,gBAAgB,YAA0C;EAExD,QADgB,WAAW,SAAS,GAAA,CAAI,MAAM,QAAQ,CAAC,CAAC,OAAO,OACnD,CAAC,CAAC,MAAK,UAAS,UAAU,qBAAqB,UAAU,WAAW,UAAU,OAAO;CACnG;;;;;;CAOA,qCAA8B,IAAI,IAA6B;;;;;;;CAQ/D,MAAM,oBAAoB,YAAkD;EAG1E,IAAI,EADF,WAAW,cAAc,QAAQ,WAAW,UAAU,QAAQ,IAAI,yBAAyB,KAAK,IAAI,IACxF,OAAO,WAAW;EAEhC,IAAI,CAAC,WAAW,cAEd,MAAM,IAAI,0BAA0B;EAGtC,MAAM,WAAW,KAAKC,mBAAmB,IAAI,WAAW,KAAK;EAC7D,IAAI,UAAU,OAAO;EAKrB,MAAM,SAAS,MAAM,KAAK,eAAe,WAAW,KAAK;EACzD,IAAI,CAAC,QAAQ,MAAM,IAAI,0BAA0B;EAEjD,MAAM,aAAa,KAAKA,mBAAmB,IAAI,WAAW,KAAK;EAC/D,IAAI,YAAY,OAAO;EAGvB,IAAI,EADkB,OAAO,cAAc,QAAQ,OAAO,UAAU,QAAQ,IAAI,yBAAyB,KAAK,IAAI,IAC9F,OAAO,OAAO;EAClC,IAAI,CAAC,OAAO,cAAc,MAAM,IAAI,0BAA0B;EAE9D,MAAM,eAAe,OAAO;EAC5B,MAAM,WAAW,YAAY;GAC3B,IAAI;IACF,MAAM,SAAS,MAAM,KAAK,mBAAmB,YAAY;IACzD,MAAM,KAAKD,cAAc,WAAW,OAAO,MAAM;IACjD,OAAO,OAAO;GAChB,SAAS,KAAK;IACZ,MAAM,SAAU,IAA4B;IAG5C,IAAI,WAAW,OAAO,WAAW,KAAK,MAAM,IAAI,0BAA0B;IAC1E,MAAM;GACR,UAAU;IACR,KAAKC,mBAAmB,OAAO,WAAW,KAAK;GACjD;EACF,EAAA,CAAG;EACH,KAAKA,mBAAmB,IAAI,WAAW,OAAO,OAAO;EACrD,OAAO;CACT;;CAKA,oCAA6B,IAAI,IAAmC;;;;;;CAOpE,MAAM,gBAAgB,OAA+C;EACnE,MAAM,SAAS,KAAKC,kBAAkB,IAAI,KAAK;EAC/C,IAAI,UAAU,KAAK,IAAI,IAAI,OAAO,YAAY,mBAAmB,OAAO;EACxE,MAAM,aAAa,MAAM,KAAK,eAAe,KAAK;EAClD,MAAM,QAA+B;GACnC,WAAW,eAAe;GAC1B,YAAY,eAAe,QAAQ,KAAK,gBAAgB,UAAU;GAClE,WAAW,KAAK,IAAI;EACtB;EACA,KAAKA,kBAAkB,IAAI,OAAO,KAAK;EACvC,OAAO;CACT;;;;;;CAOA,0BAA0B,OAAqB;EAC7C,KAAKA,kBAAkB,OAAO,KAAK;CACrC;;;;;;;CAQA,qCAA8B,IAAI,IAA2B;;CAG7D,MAAM,aAAa,YAA4C;EAC7D,MAAM,SAAS,KAAKC,mBAAmB,IAAI,UAAU;EACrD,IAAI,WAAW,KAAA,GAAW,OAAO;EAGjC,IAAI,CAAC,aAAa,KAAK,UAAU,GAAG;GAClC,KAAKA,mBAAmB,IAAI,YAAY,IAAI;GAC5C,OAAO;EACT;EACA,IAAI;EACJ,IAAI;GACF,MAAM,KAAK,SAAS,YAAY;GAEhC,SAAQ,MADc,KAAK,SAAS,QAAQ,EAAE,IAAI,WAAW,CAAC,EAAA,EAC7C,SAAS;EAC5B,QAAQ;GAGN,OAAO;EACT;EACA,KAAKA,mBAAmB,IAAI,YAAY,KAAK;EAC7C,OAAO;CACT;;CAGA,cAAoB;EAClB,KAAKA,mBAAmB,MAAM;EAC9B,KAAKD,kBAAkB,MAAM;CAC/B;CAEA,SAA0B;EACxB,wBAAuB,UAAS,KAAKE,uBAAuB,KAAK;EACjE,aAAa,OAAO,EAAE,YAAY;GAChC,MAAM,aAAa,MAAM,KAAK,eAAe,KAAK;GAClD,IAAI,CAAC,YAAY,OAAO,CAAC;GACzB,MAAM,cAAc,MAAM,KAAK,oBAAoB,UAAU;GAE7D,QAAO,MADgB,KAAK,aAAa,WAAW,EAAA,CACpC,KAAI,aAAY;IAC9B,IAAI,QAAQ;IACZ,MAAM,QAAQ;IACd,MAAM;GACR,EAAE;EACJ;EACA,WAAW,OAAO,EAAE,OAAO,WAAW,aAAa;GACjD,IAAI,UAAU,WAAW,GAAG,OAAO;IAAE,OAAO,CAAC;IAAG,YAAY;GAAK;GACjE,MAAM,aAAa,MAAM,KAAK,eAAe,KAAK;GAClD,IAAI,CAAC,YAAY,OAAO;IAAE,OAAO,CAAC;IAAG,YAAY;GAAK;GACtD,MAAM,cAAc,MAAM,KAAK,oBAAoB,UAAU;GAC7D,MAAM,OAAO,MAAM,KAAK,iBAAiB,aAAa,QAAQ,SAAS;GACvE,OAAO;IACL,OAAO,KAAK,OAAO,KAAI,WAAU;KAC/B,QAAQ;MAAE,MAAM;MAAS,YAAY,MAAM;MAAI,KAAK,MAAM;KAAI;KAC9D,UAAU,MAAM;KAChB,OAAO,GAAG,MAAM,WAAW,IAAI,MAAM;KACrC,QAAQ,MAAM;KACd,QAAQ,MAAM;KACd,UAAU,MAAM;KAChB,WAAW,MAAM;KACjB,WAAW,MAAM;KACjB,UAAU;MACR,YAAY,MAAM;MAClB,WAAW,MAAM;MACjB,UAAU,MAAM;MAChB,MAAM,MAAM;KACd;IACF,EAAE;IACF,YAAY,KAAK;GACnB;EACF;EACA,aAAY,UAAS,KAAKC,kBAAkB,KAAK;EACjD,WAAU,UAAS,KAAKC,gBAAgB,KAAK;EAC7C,gBAAe,UAAS,KAAKC,qBAAqB,KAAK;EACvD,cAAa,UAAS,KAAKC,mBAAmB,KAAK;CACrD;;;;;CAMA,MAAMJ,uBAAuB,EAC3B,OACA,kBAIyE;EACzE,IAAI,eAAe,SAAS,SAAS,OAAO;EAC5C,MAAM,aAAa,MAAM,KAAK,eAAe,KAAK;EAClD,IAAI,CAAC,YAAY,OAAO;EAExB,OAAO;GAAE,YAAY;IAAE,MAAM;IAAS,aAAA,MADZ,KAAK,oBAAoB,UAAU;GACX;GAAG,SAAS,eAAe;EAAW;CAC1F;;;;;CAKA,4BAAqC;CAErC;CACA;CAEA;CAEA,IAAI,QAA0B;EAC5B,OAAO,KAAKO;CACd;CAEA,YAAY,QAAiC;EAC3C,KAAKA,SAAS,mBAAmB,OAAO,KAAK;EAC7C,MAAM,UAAW,CAAC,YAAY,cAAc,CAAC,CAAW,QAAO,QAAO,CAAC,OAAO,IAAI;EAClF,IAAI,QAAQ,SAAS,GACnB,MAAM,IAAI,MAAM,iDAAiD,QAAQ,KAAK,IAAI,EAAE,EAAE;EAExF,KAAKF,YAAY,OAAO;EACxB,KAAKC,gBAAgB,OAAO;CAC9B;;;;;;CASA,kBAAkB,OAAe,aAA6B;EAC5D,MAAM,MAAM,IAAI,IAAI,oBAAoB;EACxC,IAAI,aAAa,IAAI,aAAa,KAAKD,SAAS;EAChD,IAAI,aAAa,IAAI,gBAAgB,WAAW;EAChD,IAAI,aAAa,IAAI,iBAAiB,MAAM;EAG5C,IAAI,aAAa,IAAI,SAAS,sBAAsB;EACpD,IAAI,aAAa,IAAI,SAAS,KAAK;EACnC,IAAI,aAAa,IAAI,UAAU,SAAS;EACxC,OAAO,IAAI,SAAS;CACtB;;CAGA,MAAM,kBAAkB,MAAc,aAA8C;EAClF,OAAO,KAAKG,eAAe;GAAE,YAAY;GAAsB;GAAM,cAAc;EAAY,GAAG,gBAAgB;CACpH;;;;;;;CAQA,MAAM,mBAAmB,cAA+C;EACtE,OAAO,KAAKA,eAAe;GAAE,YAAY;GAAiB,eAAe;EAAa,GAAG,eAAe;CAC1G;;CAGA,MAAMA,eAAe,QAAgC,OAAwC;EAC3F,MAAM,MAAM,MAAM,MAAM,kBAAkB;GACxC,QAAQ;GACR,QAAQ,YAAY,QAAQ,GAAM;GAClC,SAAS,EAAE,gBAAgB,oCAAoC;GAC/D,MAAM,IAAI,gBAAgB;IACxB,GAAG;IACH,WAAW,KAAKH;IAChB,eAAe,KAAKC;GACtB,CAAC;EACH,CAAC;EACD,IAAI,CAAC,IAAI,IAAI;GACX,MAAM,sBAAM,IAAI,MAAM,UAAU,MAAM,WAAW,IAAI,OAAO,EAAE;GAC9D,IAA6B,SAAS,IAAI;GAC1C,MAAM;EACR;EACA,MAAM,OAAQ,MAAM,IAAI,KAAK;EAM7B,IAAI,CAAC,KAAK,cACR,MAAM,IAAI,MAAM,UAAU,MAAM,2BAA2B;EAE7D,OAAO;GACL,aAAa,KAAK;GAClB,cAAc,KAAK,iBAAiB;GACpC,WAAW,OAAO,KAAK,eAAe,WAAW,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,aAAa,GAAI,IAAI;GACjG,OAAO,KAAK,SAAS;EACvB;CACF;;CAKA,MAAM,eAAe,aAA+C;EAClE,MAAM,OAAO,MAAM,cACjB,aACA,wCACF;EACA,OAAO;GAAE,MAAM,KAAK,aAAa;GAAM,QAAQ,KAAK,aAAa;EAAO;CAC1E;CAEA,MAAML,kBAAkB,OAA6F;EACnH,MAAM,cAAc,qBAAqB,MAAM,UAAU;EACzD,MAAM,SAAS,MAAM,KAAK,iBAAiB,aAAa,MAAM,QAAQ,MAAM,WAAW,MAAM,MAAM;EACnG,OAAO;GACL,QAAQ,OAAO,OAAO,KAAI,UAAS,yBAAyB,KAAK,CAAC;GAClE,YAAY,OAAO;EACrB;CACF;CAEA,MAAMC,gBAAgB,OAA+D;EACnF,MAAM,cAAc,qBAAqB,MAAM,UAAU;EACzD,MAAM,QAAQ,MAAM,KAAK,iBAAiB,aAAa,MAAM,OAAO;EACpE,IAAI,CAAC,OAAO,OAAO;EACnB,OAAO;GACL,GAAG,yBAAyB,KAAK;GACjC,aAAa,MAAM;GACnB,cAAc,MAAM,SAAS;GAC7B,UAAU,MAAM;EAClB;CACF;CAEA,MAAMC,qBAAqB,OAA8E;EACvG,MAAM,cAAc,qBAAqB,MAAM,UAAU;EACzD,OAAO,KAAK,mBAAmB,aAAa,MAAM,SAAS,MAAM,IAAI;CACvE;CAEA,MAAMC,mBAAmB,OAA4D;EACnF,MAAM,cAAc,qBAAqB,MAAM,UAAU;EACzD,MAAM,QAAQ,MAAM,KAAK,iBAAiB,aAAa,MAAM,OAAO;EACpE,IAAI,CAAC,OAAO,OAAO;EACnB,MAAM,UAAU,MAAM;EACtB,IAAI,CAAC,SAAS,OAAO;EACrB,MAAM,SAAS,MAAM,KAAKK,wBAAwB,aAAa,OAAO;EACtE,IAAI,cAAiE;EACrE,IAAI,MAAM,MAAM,SAAS,UAAU;GACjC,MAAM,aAAa,MAAM,MAAM;GAC/B,cAAc,OAAO,MAAK,UAAS,MAAM,SAAS,UAAU,KAAK;EACnE,OAAO;GACL,MAAM,SAAS,MAAM,MAAM,KAAK,YAAY;GAC5C,cAAc,OAAO,MAAK,UAAS,MAAM,KAAK,YAAY,MAAM,MAAM,KAAK;EAC7E;EACA,IAAI,CAAC,aAAa,OAAO;EACzB,IAAI,YAAY,SAAS,MAAM,OAC7B,OAAO,yBAAyB,KAAK;EASvC,IAAI,EAAC,MAPc,cACjB,aACA;;UAGA;GAAE,IAAI,MAAM;GAAI,SAAS,YAAY;EAAG,CAC1C,EAAA,CACU,YAAY,SACpB,MAAM,IAAI,MAAM,yCAAyC;EAE3D,MAAM,QAAQ,MAAM,KAAK,iBAAiB,aAAa,MAAM,EAAE;EAC/D,IAAI,CAAC,OAAO,OAAO;EACnB,OAAO,yBAAyB,KAAK;CACvC;CAEA,MAAMA,wBACJ,aACA,SAC4D;EAU5D,QAAO,MATY,cAGjB,aACA;;UAGA,EAAE,KAAK,QAAQ,CACjB,EAAA,CACY,MAAM,OAAO,SAAS,CAAC;CACrC;;CAGA,MAAM,aAAa,aAA+C;EAchE,QAAO,MAbY,cAUjB,aACA,uGACF,EAAA,CACY,SAAS,MAAM,KAAI,UAAS;GACtC,IAAI,KAAK;GACT,MAAM,KAAK;GACX,OAAO,KAAK;GACZ,OAAO,KAAK,MAAM,MAAM,KAAI,UAAS;IAAE,IAAI,KAAK;IAAI,KAAK,KAAK;IAAK,MAAM,KAAK;GAAK,EAAE;EACvF,EAAE;CACJ;;;;;;;CAQA,MAAM,iBACJ,aACA,OACA,YACA,QAC0B;EAC1B,MAAM,mBAAmB,CAAC,GAAG,IAAI,KAAK,UAAU,CAAC,EAAA,CAAG,KAAI,UAAS,MAAM,KAAK,CAAC,CAAC,CAAC,OAAO,OAAO,CAAC,CAAC;EAC/F,MAAM,gBAAgB,YAAY,SAAS,2CAA2C;EACtF,MAAM,aAAa,YAAY,SAAS,yBAAyB;EACjE,MAAM,cAAc,iBAAiB,SAAS,IAAI,wCAAwC;EAoC1F,MAAM,EAAE,OAAO,cAAa,MAlCT,cACjB,aACA,4CAA4C,aAH7B,iBAAiB,SAAS,IAAI,yBAAyB,GAGJ;;;;;4FAKoB,gBAAgB,YAAY;;;;;;;;;;;;;;;;;;;UAoBlH;GACE,OAAO;GACP,OAAO,SAAS;GAChB,GAAI,YAAY,SAAS,EAAE,WAAW,IAAI,CAAC;GAC3C,GAAI,iBAAiB,SAAS,IAAI,EAAE,QAAQ,iBAAiB,IAAI,CAAC;EACpE,CACF,EAAA,CACiC;EACjC,OAAO;GACL,QAAQ,MAAM,KAAI,UAAS;IACzB,IAAI,KAAK;IACT,WAAW,KAAK,QAAQ;IACxB,YAAY,KAAK;IACjB,OAAO,KAAK;IACZ,KAAK,KAAK;IACV,OAAO,KAAK,MAAM;IAClB,WAAW,KAAK,MAAM;IACtB,eAAe,KAAK;IACpB,UAAU,KAAK,UAAU,QAAQ;IACjC,SAAS,KAAK,SAAS,QAAQ;IAC/B,MAAM,KAAK,MAAM,OAAO;IACxB,QAAQ,KAAK,OAAO,MAAM,KAAI,UAAS,MAAM,IAAI;IACjD,WAAW,KAAK;IAChB,WAAW,KAAK;GAClB,EAAE;GACF,YAAY,SAAS,cAAc,SAAS,YAAY;EAC1D;CACF;;CAGA,MAAMC,6BACJ,aACA,SACA,WAC6B;EAC7B,MAAM,QAAQ,CAAC,GAAG,UAAU,KAAK;EACjC,IAAI,EAAE,aAAa,cAAc,UAAU;EAC3C,KAAK,IAAI,OAAO,GAAG,eAAe,aAAa,OAAO,0BAA0B,QAAQ;GAatF,MAAM,YAAW,MAZE,cACjB,aACA;;;;;;;YAQA;IAAE,IAAI;IAAS,OAAO;IAA0B,OAAO;GAAU,CACnE,EAAA,CACsB,OAAO;GAC7B,IAAI,CAAC,UAAU;GACf,MAAM,KAAK,GAAG,SAAS,KAAK;GAC5B,CAAC,CAAE,aAAa,aAAc,SAAS;EACzC;EACA,OAAO;CACT;;;;;;;CAQA,MAAM,iBAAiB,aAAqB,gBAA2D;EACrG,IAAI;EACJ,IAAI;GACF,OAAO,MAAM,cACX,aACA;;;;;;;;;;;;;;;;;;;;;YAsBA;IAAE,IAAI;IAAgB,eAAe;GAAyB,CAChE;EACF,SAAS,KAAK;GAIZ,IAAI,eAAe,SAAS,oBAAoB,KAAK,IAAI,OAAO,GAAG,OAAO;GAC1E,MAAM;EACR;EACA,MAAM,QAAQ,KAAK;EACnB,IAAI,CAAC,OAAO,OAAO;EAEnB,MAAM,YAAW,MADS,KAAKA,6BAA6B,aAAa,MAAM,IAAI,MAAM,QAAQ,EAAA,CACpE,MAAM,GAAG,MAAM,IAAI,KAAK,EAAE,SAAS,CAAC,CAAC,QAAQ,IAAI,IAAI,KAAK,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC;EAC7G,OAAO;GACL,IAAI,MAAM;GACV,WAAW,MAAM,SAAS,MAAM;GAChC,YAAY,MAAM;GAClB,OAAO,MAAM;GACb,aAAa,MAAM,aAAa,KAAK,IAAI,MAAM,cAAc;GAC7D,KAAK,MAAM;GACX,OAAO,MAAM,MAAM;GACnB,WAAW,MAAM,MAAM;GACvB,eAAe,MAAM;GACrB,UAAU,MAAM,UAAU,QAAQ;GAClC,SAAS,MAAM,SAAS,QAAQ;GAChC,MAAM,MAAM,MAAM,OAAO;GACzB,QAAQ,MAAM,OAAO,MAAM,KAAI,UAAS,MAAM,IAAI;GAClD,WAAW,MAAM;GACjB,WAAW,MAAM;GACjB,UAAU,SAAS,KAAI,aAAY;IACjC,QAAQ,QAAQ,MAAM,QAAQ;IAC9B,MAAM,QAAQ;IACd,WAAW,QAAQ;GACrB,EAAE;EACJ;CACF;;;;;;;CAQA,MAAM,mBACJ,aACA,gBACA,MACsC;EACtC,IAAI;EACJ,IAAI;GACF,MAAM,OAAO,MAAM,cACjB,aACA,yDACA,EAAE,IAAI,eAAe,CACvB;GACA,IAAI,CAAC,KAAK,OAAO,OAAO;GACxB,UAAU,KAAK,MAAM;EACvB,SAAS,KAAK;GACZ,IAAI,eAAe,SAAS,oBAAoB,KAAK,IAAI,OAAO,GAAG,OAAO;GAC1E,MAAM;EACR;EACA,MAAM,OAAO,MAAM,cACjB,aACA;;UAGA,EAAE,OAAO;GAAE;GAAS;EAAK,EAAE,CAC7B;EACA,IAAI,CAAC,KAAK,cAAc,WAAW,CAAC,KAAK,cAAc,SACrD,MAAM,IAAI,MAAM,oCAAoC;EAEtD,OAAO,KAAK,cAAc;CAC5B;CAIA,QAAQ,KAAyC;EAC/C,IAAI,CAAC,iCAAiC,GAAG,OAAO,CAAC;EACjD,MAAM,YAAY,4BAA4B,MAAM,GAAG;EACvD,IAAI,CAAC,WAAW,OAAO,CAAC;EACxB,MAAM,aAAa,kCAAkC;EACrD,OAAO,CACL,IAAI,qBAAqB;GACvB,eAAe,KAAK;GACpB;GACA,GAAI,aAAa,EAAE,WAAW,IAAI,CAAC;EACrC,CAAC,CACH;CACF;;;;;;CAOA,OAAO,KAAqC;EAC1C,OAAO,kBAAkB;GACvB,QAAQ;GACR,MAAM,IAAI;GACV,aAAa,IAAI;GACjB,SAAS,IAAI;GACb,QAAQ,IAAI,QAAQ;GACpB,UAAU,IAAI,QAAQ;GACtB,qBAAqB,kBAAkB,MAAM,GAAG;EAClD,CAAC;CACH;;;;;CAMA,MAAM,WAAW,MAAqE;EACpF,OAAO,sBAAsB;GAAE,gBAAgB,KAAK;GAAgB,QAAQ;EAAK,CAAC;CACpF;;CAGA,cAAuC;EACrC,OAAO,EACL,oBAAoB,KACtB;CACF;AACF;AAEA,SAAS,qBAAqB,YAA2C;CACvE,IAAI,WAAW,SAAS,SACtB,MAAM,IAAI,MAAM,kDAAkD;CAEpE,OAAO,WAAW;AACpB;AAEA,SAAS,yBAAyB,OAAoD;CACpF,OAAO;EACL,IAAI,MAAM;EACV,YAAY,MAAM;EAClB,OAAO,MAAM;EACb,KAAK,MAAM;EACX,QAAQ,MAAM;EACd,OAAO,MAAM;EACb,WAAW,MAAM;EACjB,UAAU,MAAM;EAChB,UAAU,MAAM;EAChB,QAAQ,MAAM;EACd,QAAQ,MAAM;EACd,cAAc;EACd,WAAW,MAAM;EACjB,WAAW,MAAM;CACnB;AACF"}
+{"version":3,"file":"integration.js","names":["#storage","#projects","#auth","#updateTokens","#inflightRefreshes","#connectionChecks","#orgIdByResourceId","#resolveIntakeDispatch","#listIntakeIssues","#getIntakeIssue","#createIntakeComment","#updateIntakeIssue","#clientId","#clientSecret","#rules","#requestTokens","#listTeamWorkflowStates","#fetchRemainingIssueComments"],"sources":["../../../src/integrations/linear/integration.ts"],"sourcesContent":["/**\n * `LinearIntegration` — the self-contained Linear integration.\n *\n * Implements the system-wide `FactoryIntegration` contract\n * (`../factory-integration.ts`): the deploy entry reads the Linear OAuth env\n * vars ONCE, constructs an instance with explicit credentials, and passes it\n * to `MastraFactory`. Everything Linear-flavored the system does — the OAuth\n * connect/callback flow, workspace/project/issue reads for Intake, and the\n * agent's issue tools — flows through this instance. No other module reads\n * `LINEAR_*` env vars.\n *\n * The class owns:\n *  - OAuth: the user-facing authorize URL, code exchange, and refresh-token\n *    rotation against Linear's `/oauth/token` endpoint.\n *  - GraphQL reads/writes: viewer workspace, projects, active issues for\n *    Intake, full issue detail (description + discussion), issue comments.\n *  - The HTTP surface (`routes()`) and per-request agent tools\n *    (`agentTools()`), delegating to `./routes.ts` / `./agent-tools.ts` with\n *    `this` as the API client.\n */\n\nimport type { RequestContext } from '@mastra/core/request-context';\nimport type { ApiRoute } from '@mastra/core/server';\nimport type { MastraWorker } from '@mastra/core/worker';\nimport type { IntegrationConnection } from '../../capabilities/connection.js';\nimport type {\n  CreateIntakeCommentInput,\n  GetIntakeIssueInput,\n  Intake,\n  IntakeIssue,\n  IntakeIssueDetail,\n  ListIntakeIssuesInput,\n  UpdateIntakeIssueInput,\n} from '../../capabilities/intake.js';\nimport type { RouteAuth } from '../../routes/route.js';\nimport type { IntegrationStorageHandle } from '../../storage/domains/integrations/base.js';\nimport type { FactoryProjectsStorage } from '../../storage/domains/projects/base.js';\nimport type { FactoryIntegration, IntegrationContext, IntegrationTools } from '../base.js';\nimport { IssueReconcileWorker } from '../issue-reconcile-worker.js';\nimport { buildLinearAgentTools } from './agent-tools.js';\nimport type { LinearEventRules, LinearRuleOverrides } from './default-rules.js';\nimport { resolveLinearRules } from './default-rules.js';\nimport { attachLinearIssueReconciler } from './issue-reconciler.js';\nimport { linearIssueReconciliationEnabled, linearIssueReconciliationInterval } from './reconciliation-config.js';\nimport { buildLinearRoutes } from './routes.js';\nimport { attachLinearRules } from './rules.js';\nimport type { LinearConnectionRow, LinearStorageHandle, UpsertLinearConnectionInput } from './storage.js';\n\nconst LINEAR_GRAPHQL_URL = 'https://api.linear.app/graphql';\nconst LINEAR_TOKEN_URL = 'https://api.linear.app/oauth/token';\nconst LINEAR_AUTHORIZE_URL = 'https://linear.app/oauth/authorize';\n\n/** Credentials and optional event rules for the Linear OAuth application. */\nexport interface LinearIntegrationConfig {\n  /** Per-event replacements; omitted events retain defaults, null disables. */\n  rules?: LinearRuleOverrides;\n  /** OAuth client id of the Linear application. */\n  clientId: string;\n  /** OAuth client secret of the Linear application. */\n  clientSecret: string;\n}\n\n/**\n * Tokens minted by Linear's `/oauth/token` endpoint. Linear access tokens\n * expire (24h) and refresh tokens rotate: every refresh invalidates the old\n * pair, so callers must persist the whole set after each exchange.\n */\nexport interface LinearTokenSet {\n  accessToken: string;\n  /** Null when Linear issued no refresh token (legacy non-expiring apps). */\n  refreshToken: string | null;\n  /** Null when Linear reported no `expires_in`. */\n  expiresAt: Date | null;\n  /** Scopes granted to the token as reported by Linear; null when omitted. */\n  scope: string | null;\n}\n\nexport interface LinearWorkspace {\n  name: string;\n  urlKey: string;\n}\n\nexport interface LinearIssue {\n  id: string;\n  projectId: string;\n  /** Human key like `ENG-123`. */\n  identifier: string;\n  title: string;\n  url: string;\n  /** Workflow state name, e.g. `In Progress`. */\n  state: string;\n  /** Workflow state type, e.g. `backlog` / `unstarted` / `started` / `triage`. */\n  stateType: string;\n  priorityLabel: string;\n  assignee: string | null;\n  /** Display name of the Linear user who created the issue, when Linear returns one. */\n  creator: string | null;\n  team: string | null;\n  labels: string[];\n  createdAt: string;\n  updatedAt: string;\n}\n\nexport interface LinearIssuePage {\n  issues: LinearIssue[];\n  /** Opaque cursor for the next page, or `null` on the last page. */\n  nextCursor: string | null;\n}\n\nexport interface LinearProjectTeam {\n  id: string;\n  /** Short team key, e.g. `ENG`. */\n  key: string;\n  name: string;\n}\n\nexport interface LinearProject {\n  id: string;\n  name: string;\n  /** Project state, e.g. `planned` / `started` / `paused` / `completed`. */\n  state: string;\n  /** Teams the project belongs to (the Settings picker groups by these). */\n  teams: LinearProjectTeam[];\n}\n\nexport interface LinearIssueComment {\n  author: string | null;\n  body: string;\n  createdAt: string;\n}\n\n/** Full issue payload for agent context: everything in {@link LinearIssue} plus description and discussion. */\nexport interface LinearIssueDetail extends Omit<LinearIssue, 'projectId'> {\n  projectId: string | null;\n  /** Markdown body of the issue, or `null` when empty. */\n  description: string | null;\n  /** Discussion comments, oldest first. */\n  comments: LinearIssueComment[];\n}\n\n/** The comment created by {@link LinearIntegration.createIssueComment}. */\nexport interface LinearCreatedComment {\n  id: string;\n  url: string;\n}\n\nconst LINEAR_ISSUES_PAGE_SIZE = 30;\nconst ISSUE_COMMENTS_PAGE_SIZE = 50;\n/** Hard stop for comment pagination so a misbehaving cursor can't loop forever. */\nconst ISSUE_COMMENTS_MAX_PAGES = 20;\n\n/** Refresh this many ms before the recorded expiry to absorb clock skew. */\nconst TOKEN_REFRESH_SKEW_MS = 60_000;\n\n/** Re-check an org's Linear connection (and its scopes) at most this often. */\nconst CONNECTION_TTL_MS = 60_000;\n\nconst UUID_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;\n\n/** Thrown when the org's Linear authorization can no longer be renewed. */\nexport class LinearReauthRequiredError extends Error {\n  constructor() {\n    super('Linear authorization expired. Reconnect Linear to keep syncing intake issues.');\n  }\n}\n\n/** Cached result of {@link LinearIntegration.checkConnection}. */\nexport interface LinearConnectionCheck {\n  connected: boolean;\n  /** Whether the granted OAuth scope allows posting issue comments. */\n  canComment: boolean;\n  checkedAt: number;\n}\n\ninterface IssuesQueryData {\n  issues: {\n    nodes: Array<{\n      id: string;\n      identifier: string;\n      title: string;\n      url: string;\n      priorityLabel: string;\n      createdAt: string;\n      updatedAt: string;\n      state: { name: string; type: string };\n      project: { id: string };\n      assignee: { name: string } | null;\n      creator: { name: string } | null;\n      team: { key: string } | null;\n      labels: { nodes: Array<{ name: string }> };\n    }>;\n    pageInfo: { hasNextPage: boolean; endCursor: string | null };\n  };\n}\n\ninterface IssueCommentNode {\n  body: string;\n  createdAt: string;\n  user: { name: string } | null;\n}\n\ninterface IssueCommentsPage {\n  nodes: IssueCommentNode[];\n  pageInfo: { hasNextPage: boolean; endCursor: string | null };\n}\n\ninterface IssueDetailQueryData {\n  issue: {\n    id: string;\n    identifier: string;\n    title: string;\n    description: string | null;\n    url: string;\n    priorityLabel: string;\n    createdAt: string;\n    updatedAt: string;\n    state: { name: string; type: string };\n    project: { id: string } | null;\n    assignee: { name: string } | null;\n    creator: { name: string } | null;\n    team: { key: string } | null;\n    labels: { nodes: Array<{ name: string }> };\n    comments: IssueCommentsPage;\n  } | null;\n}\n\ninterface IssueCommentsQueryData {\n  issue: { comments: IssueCommentsPage } | null;\n}\n\ninterface IssueIdQueryData {\n  issue: { id: string } | null;\n}\n\ninterface CommentCreateMutationData {\n  commentCreate: { success: boolean; comment: { id: string; url: string } | null };\n}\n\n/** POST a GraphQL query to Linear with the given OAuth access token. */\nasync function linearGraphql<T>(accessToken: string, query: string, variables?: Record<string, unknown>): Promise<T> {\n  const res = await fetch(LINEAR_GRAPHQL_URL, {\n    method: 'POST',\n    signal: AbortSignal.timeout(15_000),\n    headers: {\n      'content-type': 'application/json',\n      authorization: `Bearer ${accessToken}`,\n    },\n    body: JSON.stringify({ query, variables }),\n  });\n  if (!res.ok) {\n    // Linear returns GraphQL errors (validation, missing scopes, …) with a\n    // 400 status — surface the actual message instead of just the code.\n    let detail: string | null = null;\n    try {\n      const errBody = (await res.json()) as { errors?: Array<{ message?: string }> };\n      detail = errBody.errors?.[0]?.message ?? null;\n    } catch {\n      // Non-JSON error body; fall back to the status code alone.\n    }\n    const err = new Error(`Linear API request failed (${res.status})${detail ? `: ${detail}` : ''}`);\n    (err as { status?: number }).status = res.status;\n    throw err;\n  }\n  const body = (await res.json()) as { data?: T; errors?: Array<{ message?: string }> };\n  if (body.errors?.length) {\n    throw new Error(`Linear API error: ${body.errors[0]?.message ?? 'unknown error'}`);\n  }\n  if (!body.data) {\n    throw new Error('Linear API returned no data.');\n  }\n  return body.data;\n}\n\nexport class LinearIntegration implements FactoryIntegration {\n  /** Stable integration identifier (see `../base.ts`). */\n  readonly id = 'linear';\n  /** Bound once by the factory via `initialize()` before any surface is used. */\n  #storage: LinearStorageHandle | undefined;\n  #projects: FactoryProjectsStorage | undefined;\n  #auth: RouteAuth | undefined;\n\n  /** Bind Linear's slice of the generic integration storage, the projects domain, and the host auth seam. */\n  initialize({\n    storage,\n    projects,\n    auth,\n  }: {\n    storage: IntegrationStorageHandle;\n    projects: FactoryProjectsStorage;\n    auth: RouteAuth;\n  }): void {\n    this.#storage = storage as unknown as LinearStorageHandle;\n    this.#projects = projects;\n    this.#auth = auth;\n  }\n\n  get storage(): LinearStorageHandle {\n    if (!this.#storage) {\n      throw new Error('LinearIntegration is not initialized — the factory binds storage during prepare().');\n    }\n    return this.#storage;\n  }\n\n  /** Factory projects domain — maps a session's resourceId to its owning org. */\n  get projects(): FactoryProjectsStorage {\n    if (!this.#projects) {\n      throw new Error('LinearIntegration is not initialized — the factory binds storage during prepare().');\n    }\n    return this.#projects;\n  }\n\n  /**\n   * Whether the host runs with web auth enabled. Linear connections are\n   * org-owned, so every Linear surface is inert without a tenant auth seam.\n   */\n  get authEnabled(): boolean {\n    return this.#auth?.enabled() ?? false;\n  }\n\n  // ── Connection + OAuth token lifecycle ───────────────────────────────────\n\n  /** Load the org's Linear connection, or `null` when not connected. */\n  async loadConnection(orgId: string): Promise<LinearConnectionRow | null> {\n    const connection = await this.storage.connections.get(orgId);\n    if (!connection) return null;\n    const { data } = connection;\n    return {\n      id: connection.id,\n      orgId: connection.orgId,\n      userId: connection.userId,\n      accessToken: data.accessToken,\n      scope: data.scope ?? null,\n      refreshToken: data.refreshToken ?? null,\n      expiresAt: data.expiresAtMs === null || data.expiresAtMs === undefined ? null : new Date(data.expiresAtMs),\n      workspaceName: data.workspaceName ?? null,\n      workspaceUrlKey: data.workspaceUrlKey ?? null,\n      createdAt: connection.createdAt,\n      updatedAt: connection.updatedAt,\n    };\n  }\n\n  /** Insert or replace the org's connection (one per org). */\n  async upsertConnection(input: UpsertLinearConnectionInput): Promise<void> {\n    await this.storage.connections.upsert(input.orgId, {\n      userId: input.userId,\n      data: {\n        accessToken: input.accessToken,\n        refreshToken: input.refreshToken,\n        expiresAtMs: input.expiresAt?.getTime() ?? null,\n        scope: input.scope,\n        workspaceName: input.workspaceName,\n        workspaceUrlKey: input.workspaceUrlKey,\n      },\n    });\n    // Let the agent tools see the new connection immediately.\n    this.invalidateConnectionCache(input.orgId);\n  }\n\n  /** Persist a rotated token set on the org's existing connection row. */\n  async #updateTokens(orgId: string, tokens: LinearTokenSet): Promise<void> {\n    await this.storage.connections.update(orgId, data => ({\n      ...data,\n      accessToken: tokens.accessToken,\n      refreshToken: tokens.refreshToken,\n      expiresAtMs: tokens.expiresAt?.getTime() ?? null,\n      // Refresh responses may omit scope; keep the recorded grant.\n      scope: tokens.scope ?? data.scope,\n    }));\n  }\n\n  /**\n   * Whether the connection's token can post issue comments. Legacy rows\n   * without a recorded scope were minted with `read` only, so they count as\n   * read-only until the org reconnects Linear.\n   */\n  canPostComments(connection: LinearConnectionRow): boolean {\n    const scopes = (connection.scope ?? '').split(/[\\s,]+/).filter(Boolean);\n    return scopes.some(scope => scope === 'comments:create' || scope === 'write' || scope === 'admin');\n  }\n\n  /**\n   * In-flight refreshes keyed by org. Linear rotates refresh tokens, so two\n   * concurrent refreshes with the same token would invalidate each other —\n   * single-flight ensures one exchange per org and shares the result.\n   */\n  readonly #inflightRefreshes = new Map<string, Promise<string>>();\n\n  /**\n   * Return a usable access token for the connection, proactively refreshing\n   * it when the recorded expiry is past (or imminent). Throws\n   * `LinearReauthRequiredError` when the token is expired and cannot be\n   * refreshed — the org has to go through the OAuth flow again.\n   */\n  async getFreshAccessToken(connection: LinearConnectionRow): Promise<string> {\n    const expired =\n      connection.expiresAt !== null && connection.expiresAt.getTime() - TOKEN_REFRESH_SKEW_MS <= Date.now();\n    if (!expired) return connection.accessToken;\n\n    if (!connection.refreshToken) {\n      // Legacy row from before refresh-token support: nothing to renew with.\n      throw new LinearReauthRequiredError();\n    }\n\n    const existing = this.#inflightRefreshes.get(connection.orgId);\n    if (existing) return existing;\n\n    // The caller may hold a stale row: another request could have refreshed\n    // and rotated the refresh token since this row was loaded. Reload before\n    // refreshing so we don't burn the rotated token and force a false reauth.\n    const latest = await this.loadConnection(connection.orgId);\n    if (!latest) throw new LinearReauthRequiredError();\n\n    const concurrent = this.#inflightRefreshes.get(connection.orgId);\n    if (concurrent) return concurrent;\n\n    const latestExpired = latest.expiresAt !== null && latest.expiresAt.getTime() - TOKEN_REFRESH_SKEW_MS <= Date.now();\n    if (!latestExpired) return latest.accessToken;\n    if (!latest.refreshToken) throw new LinearReauthRequiredError();\n\n    const refreshToken = latest.refreshToken;\n    const refresh = (async () => {\n      try {\n        const tokens = await this.refreshAccessToken(refreshToken);\n        await this.#updateTokens(connection.orgId, tokens);\n        return tokens.accessToken;\n      } catch (err) {\n        const status = (err as { status?: number }).status;\n        // invalid_grant surfaces as 400/401: the refresh token was revoked or\n        // already rotated away. Terminal for this connection.\n        if (status === 400 || status === 401) throw new LinearReauthRequiredError();\n        throw err;\n      } finally {\n        this.#inflightRefreshes.delete(connection.orgId);\n      }\n    })();\n    this.#inflightRefreshes.set(connection.orgId, refresh);\n    return refresh;\n  }\n\n  // ── Connection checks for agent tools ────────────────────────────────────\n\n  /** Re-check an org's Linear connection (and its scopes) at most this often. */\n  readonly #connectionChecks = new Map<string, LinearConnectionCheck>();\n\n  /**\n   * Whether the org has an active connection and whether its granted scope\n   * allows posting comments. Cached per org with a short TTL — tool-set\n   * resolution runs on every request.\n   */\n  async checkConnection(orgId: string): Promise<LinearConnectionCheck> {\n    const cached = this.#connectionChecks.get(orgId);\n    if (cached && Date.now() - cached.checkedAt < CONNECTION_TTL_MS) return cached;\n    const connection = await this.loadConnection(orgId);\n    const check: LinearConnectionCheck = {\n      connected: connection !== null,\n      canComment: connection !== null && this.canPostComments(connection),\n      checkedAt: Date.now(),\n    };\n    this.#connectionChecks.set(orgId, check);\n    return check;\n  }\n\n  /**\n   * Drop the cached connection check for an org. Called after a connection is\n   * persisted so the tools show up on the very next run instead of after the\n   * TTL lapses.\n   */\n  invalidateConnectionCache(orgId: string): void {\n    this.#connectionChecks.delete(orgId);\n  }\n\n  /**\n   * A project's org never changes, so the resourceId → orgId mapping is\n   * cached forever. `null` marks resource ids that aren't factory projects\n   * (e.g. local default resources) so we don't re-query them on every\n   * tool-set resolution.\n   */\n  readonly #orgIdByResourceId = new Map<string, string | null>();\n\n  /** Map a session's resourceId to its owning org, or `null` when it isn't a project. */\n  async resolveOrgId(resourceId: string): Promise<string | null> {\n    const cached = this.#orgIdByResourceId.get(resourceId);\n    if (cached !== undefined) return cached;\n    // Non-UUID resource ids (local/dev resources) would make the uuid column\n    // comparison throw — they're definitively \"not a project\", so cache that.\n    if (!UUID_PATTERN.test(resourceId)) {\n      this.#orgIdByResourceId.set(resourceId, null);\n      return null;\n    }\n    let orgId: string | null;\n    try {\n      await this.projects.ensureReady();\n      const project = await this.projects.getById({ id: resourceId });\n      orgId = project?.orgId ?? null;\n    } catch {\n      // Transient database failure: skip the tools for this request but don't\n      // cache the miss, so the next request retries the lookup.\n      return null;\n    }\n    this.#orgIdByResourceId.set(resourceId, orgId);\n    return orgId;\n  }\n\n  /** Test hook: clear the org/connection caches between specs. */\n  clearCaches(): void {\n    this.#orgIdByResourceId.clear();\n    this.#connectionChecks.clear();\n  }\n\n  readonly intake: Intake = {\n    resolveIntakeDispatch: input => this.#resolveIntakeDispatch(input),\n    listSources: async ({ orgId }) => {\n      const connection = await this.loadConnection(orgId);\n      if (!connection) return [];\n      const accessToken = await this.getFreshAccessToken(connection);\n      const projects = await this.listProjects(accessToken);\n      return projects.map(project => ({\n        id: project.id,\n        name: project.name,\n        type: 'project',\n      }));\n    },\n    listItems: async ({ orgId, sourceIds, cursor }) => {\n      if (sourceIds.length === 0) return { items: [], nextCursor: null };\n      const connection = await this.loadConnection(orgId);\n      if (!connection) return { items: [], nextCursor: null };\n      const accessToken = await this.getFreshAccessToken(connection);\n      const page = await this.listActiveIssues(accessToken, cursor, sourceIds);\n      return {\n        items: page.issues.map(issue => ({\n          source: { type: 'issue', externalId: issue.id, url: issue.url },\n          sourceId: issue.projectId,\n          title: `${issue.identifier}: ${issue.title}`,\n          status: issue.state,\n          labels: issue.labels,\n          assignee: issue.assignee,\n          createdAt: issue.createdAt,\n          updatedAt: issue.updatedAt,\n          metadata: {\n            identifier: issue.identifier,\n            stateType: issue.stateType,\n            priority: issue.priorityLabel,\n            team: issue.team,\n          },\n        })),\n        nextCursor: page.nextCursor,\n      };\n    },\n    listIssues: input => this.#listIntakeIssues(input),\n    getIssue: input => this.#getIntakeIssue(input),\n    createComment: input => this.#createIntakeComment(input),\n    updateIssue: input => this.#updateIntakeIssue(input),\n  };\n\n  /**\n   * Background-dispatch context: the org's OAuth connection with a fresh\n   * token. Linear work items store the issue UUID directly as `externalId`.\n   */\n  async #resolveIntakeDispatch({\n    orgId,\n    externalSource,\n  }: {\n    orgId: string;\n    externalSource: { type: string; externalId: string };\n  }): Promise<{ connection: IntegrationConnection; issueId: string } | null> {\n    if (externalSource.type !== 'issue') return null;\n    const connection = await this.loadConnection(orgId);\n    if (!connection) return null;\n    const accessToken = await this.getFreshAccessToken(connection);\n    return { connection: { type: 'oauth', accessToken }, issueId: externalSource.externalId };\n  }\n  /**\n   * The OAuth connect/callback flow round-trips a signed `state` through\n   * Linear, so a multi-replica deploy needs a deployment-stable state secret.\n   */\n  readonly requiresStableStateSigner = true;\n\n  readonly #clientId: string;\n  readonly #clientSecret: string;\n\n  readonly #rules: LinearEventRules;\n\n  get rules(): LinearEventRules {\n    return this.#rules;\n  }\n\n  constructor(config: LinearIntegrationConfig) {\n    this.#rules = resolveLinearRules(config.rules);\n    const missing = (['clientId', 'clientSecret'] as const).filter(key => !config[key]);\n    if (missing.length > 0) {\n      throw new Error(`LinearIntegration is missing required config: ${missing.join(', ')}.`);\n    }\n    this.#clientId = config.clientId;\n    this.#clientSecret = config.clientSecret;\n  }\n\n  // ── OAuth ────────────────────────────────────────────────────────────────\n\n  /**\n   * Build the OAuth authorize URL. `prompt=consent` forces the workspace\n   * picker even for an already-authorized user, so \"reconnect\" can switch\n   * workspaces.\n   */\n  buildAuthorizeUrl(state: string, redirectUri: string): string {\n    const url = new URL(LINEAR_AUTHORIZE_URL);\n    url.searchParams.set('client_id', this.#clientId);\n    url.searchParams.set('redirect_uri', redirectUri);\n    url.searchParams.set('response_type', 'code');\n    // `comments:create` lets the agent's linear_create_comment tool post\n    // comments; everything else the integration does is read-only.\n    url.searchParams.set('scope', 'read,comments:create');\n    url.searchParams.set('state', state);\n    url.searchParams.set('prompt', 'consent');\n    return url.toString();\n  }\n\n  /** Exchange an OAuth `code` for a workspace-scoped token set. */\n  async exchangeOAuthCode(code: string, redirectUri: string): Promise<LinearTokenSet> {\n    return this.#requestTokens({ grant_type: 'authorization_code', code, redirect_uri: redirectUri }, 'token exchange');\n  }\n\n  /**\n   * Exchange a refresh token for a new token set. Linear rotates refresh\n   * tokens, so the returned set replaces the stored one entirely. A 400/401\n   * here means the refresh token is invalid/revoked and the org must\n   * re-authorize.\n   */\n  async refreshAccessToken(refreshToken: string): Promise<LinearTokenSet> {\n    return this.#requestTokens({ grant_type: 'refresh_token', refresh_token: refreshToken }, 'token refresh');\n  }\n\n  /** POST to Linear's token endpoint and normalize the response. */\n  async #requestTokens(params: Record<string, string>, label: string): Promise<LinearTokenSet> {\n    const res = await fetch(LINEAR_TOKEN_URL, {\n      method: 'POST',\n      signal: AbortSignal.timeout(10_000),\n      headers: { 'content-type': 'application/x-www-form-urlencoded' },\n      body: new URLSearchParams({\n        ...params,\n        client_id: this.#clientId,\n        client_secret: this.#clientSecret,\n      }),\n    });\n    if (!res.ok) {\n      const err = new Error(`Linear ${label} failed (${res.status})`);\n      (err as { status?: number }).status = res.status;\n      throw err;\n    }\n    const body = (await res.json()) as {\n      access_token?: string;\n      refresh_token?: string;\n      expires_in?: number;\n      scope?: string;\n    };\n    if (!body.access_token) {\n      throw new Error(`Linear ${label} returned no access token.`);\n    }\n    return {\n      accessToken: body.access_token,\n      refreshToken: body.refresh_token ?? null,\n      expiresAt: typeof body.expires_in === 'number' ? new Date(Date.now() + body.expires_in * 1000) : null,\n      scope: body.scope ?? null,\n    };\n  }\n\n  // ── GraphQL reads/writes ─────────────────────────────────────────────────\n\n  /** Fetch the workspace (organization) the access token is scoped to. */\n  async fetchWorkspace(accessToken: string): Promise<LinearWorkspace> {\n    const data = await linearGraphql<{ organization: { name: string; urlKey: string } }>(\n      accessToken,\n      `query { organization { name urlKey } }`,\n    );\n    return { name: data.organization.name, urlKey: data.organization.urlKey };\n  }\n\n  async #listIntakeIssues(input: ListIntakeIssuesInput): Promise<{ issues: IntakeIssue[]; nextCursor: string | null }> {\n    const accessToken = getLinearAccessToken(input.connection);\n    const result = await this.listActiveIssues(accessToken, input.cursor, input.sourceIds, input.labels);\n    return {\n      issues: result.issues.map(issue => linearIssueToIntakeIssue(issue)),\n      nextCursor: result.nextCursor,\n    };\n  }\n\n  async #getIntakeIssue(input: GetIntakeIssueInput): Promise<IntakeIssueDetail | null> {\n    const accessToken = getLinearAccessToken(input.connection);\n    const issue = await this.fetchIssueDetail(accessToken, input.issueId);\n    if (!issue) return null;\n    return {\n      ...linearIssueToIntakeIssue(issue),\n      description: issue.description,\n      commentCount: issue.comments.length,\n      comments: issue.comments,\n    };\n  }\n\n  async #createIntakeComment(input: CreateIntakeCommentInput): Promise<{ id: string; url: string } | null> {\n    const accessToken = getLinearAccessToken(input.connection);\n    return this.createIssueComment(accessToken, input.issueId, input.body);\n  }\n\n  async #updateIntakeIssue(input: UpdateIntakeIssueInput): Promise<IntakeIssue | null> {\n    const accessToken = getLinearAccessToken(input.connection);\n    const issue = await this.fetchIssueDetail(accessToken, input.issueId);\n    if (!issue) return null;\n    const teamKey = issue.team;\n    if (!teamKey) return null;\n    const states = await this.#listTeamWorkflowStates(accessToken, teamKey);\n    let targetState: { id: string; name: string; type: string } | null = null;\n    if (input.state.kind === 'byType') {\n      const wantedType = input.state.stateType;\n      targetState = states.find(state => state.type === wantedType) ?? null;\n    } else {\n      const wanted = input.state.name.toLowerCase();\n      targetState = states.find(state => state.name.toLowerCase() === wanted) ?? null;\n    }\n    if (!targetState) return null;\n    if (targetState.name === issue.state) {\n      return linearIssueToIntakeIssue(issue);\n    }\n    const data = await linearGraphql<{ issueUpdate: { success: boolean } }>(\n      accessToken,\n      `mutation UpdateIssueState($id: String!, $stateId: String!) {\n        issueUpdate(id: $id, input: { stateId: $stateId }) { success }\n      }`,\n      { id: issue.id, stateId: targetState.id },\n    );\n    if (!data.issueUpdate.success) {\n      throw new Error('Linear did not accept the issue update.');\n    }\n    const fresh = await this.fetchIssueDetail(accessToken, issue.id);\n    if (!fresh) return null;\n    return linearIssueToIntakeIssue(fresh);\n  }\n\n  async #listTeamWorkflowStates(\n    accessToken: string,\n    teamKey: string,\n  ): Promise<Array<{ id: string; name: string; type: string }>> {\n    const data = await linearGraphql<{\n      team: { states: { nodes: Array<{ id: string; name: string; type: string }> } } | null;\n    }>(\n      accessToken,\n      `query TeamStates($key: String!) {\n        team(id: $key) { states(first: 100) { nodes { id name type } } }\n      }`,\n      { key: teamKey },\n    );\n    return data.team?.states.nodes ?? [];\n  }\n\n  /** List the workspace's projects (for the Settings intake-source picker). */\n  async listProjects(accessToken: string): Promise<LinearProject[]> {\n    const data = await linearGraphql<{\n      projects: {\n        nodes: Array<{\n          id: string;\n          name: string;\n          state: string;\n          teams: { nodes: Array<{ id: string; key: string; name: string }> };\n        }>;\n      };\n    }>(\n      accessToken,\n      `query { projects(first: 100) { nodes { id name state teams(first: 10) { nodes { id key name } } } } }`,\n    );\n    return data.projects.nodes.map(node => ({\n      id: node.id,\n      name: node.name,\n      state: node.state,\n      teams: node.teams.nodes.map(team => ({ id: team.id, key: team.key, name: team.name })),\n    }));\n  }\n\n  /**\n   * List one page of the workspace's active issues (triage/backlog/unstarted/\n   * started — completed and canceled are excluded), most recently updated\n   * first. When `projectIds` is provided, only issues from those projects are\n   * returned.\n   */\n  async listActiveIssues(\n    accessToken: string,\n    after?: string,\n    projectIds?: string[],\n    labels?: string[],\n  ): Promise<LinearIssuePage> {\n    const normalizedLabels = [...new Set((labels ?? []).map(label => label.trim()).filter(Boolean))];\n    const projectFilter = projectIds?.length ? ', project: { id: { in: $projectIds } }' : '';\n    const projectVar = projectIds?.length ? ', $projectIds: [ID!]' : '';\n    const labelFilter = normalizedLabels.length > 0 ? ', labels: { name: { in: $labels } }' : '';\n    const labelVar = normalizedLabels.length > 0 ? ', $labels: [String!]' : '';\n    const data = await linearGraphql<IssuesQueryData>(\n      accessToken,\n      `query Intake($first: Int!, $after: String${projectVar}${labelVar}) {\n        issues(\n          first: $first\n          after: $after\n          orderBy: updatedAt\n          filter: { state: { type: { in: [\"triage\", \"backlog\", \"unstarted\", \"started\"] } }${projectFilter}${labelFilter} }\n        ) {\n          nodes {\n            id\n            identifier\n            title\n            url\n            priorityLabel\n            createdAt\n            updatedAt\n            state { name type }\n            project { id }\n            assignee { name }\n            creator { name }\n            team { key }\n            labels { nodes { name } }\n          }\n          pageInfo { hasNextPage endCursor }\n        }\n      }`,\n      {\n        first: LINEAR_ISSUES_PAGE_SIZE,\n        after: after ?? null,\n        ...(projectIds?.length ? { projectIds } : {}),\n        ...(normalizedLabels.length > 0 ? { labels: normalizedLabels } : {}),\n      },\n    );\n    const { nodes, pageInfo } = data.issues;\n    return {\n      issues: nodes.map(node => ({\n        id: node.id,\n        projectId: node.project.id,\n        identifier: node.identifier,\n        title: node.title,\n        url: node.url,\n        state: node.state.name,\n        stateType: node.state.type,\n        priorityLabel: node.priorityLabel,\n        assignee: node.assignee?.name ?? null,\n        creator: node.creator?.name ?? null,\n        team: node.team?.key ?? null,\n        labels: node.labels.nodes.map(label => label.name),\n        createdAt: node.createdAt,\n        updatedAt: node.updatedAt,\n      })),\n      nextCursor: pageInfo.hasNextPage ? pageInfo.endCursor : null,\n    };\n  }\n\n  /** Follow `comments.pageInfo` until exhausted so long discussions aren't truncated. */\n  async #fetchRemainingIssueComments(\n    accessToken: string,\n    issueId: string,\n    firstPage: IssueCommentsPage,\n  ): Promise<IssueCommentNode[]> {\n    const nodes = [...firstPage.nodes];\n    let { hasNextPage, endCursor } = firstPage.pageInfo;\n    for (let page = 1; hasNextPage && endCursor && page < ISSUE_COMMENTS_MAX_PAGES; page++) {\n      const data = await linearGraphql<IssueCommentsQueryData>(\n        accessToken,\n        `query IssueComments($id: String!, $first: Int!, $after: String!) {\n          issue(id: $id) {\n            comments(first: $first, after: $after) {\n              nodes { body createdAt user { name } }\n              pageInfo { hasNextPage endCursor }\n            }\n          }\n        }`,\n        { id: issueId, first: ISSUE_COMMENTS_PAGE_SIZE, after: endCursor },\n      );\n      const comments = data.issue?.comments;\n      if (!comments) break;\n      nodes.push(...comments.nodes);\n      ({ hasNextPage, endCursor } = comments.pageInfo);\n    }\n    return nodes;\n  }\n\n  /**\n   * Fetch one issue with its description and comments. `idOrIdentifier`\n   * accepts both the Linear UUID and the human key (`ENG-123`). Returns\n   * `null` when the issue doesn't exist (Linear reports it as an \"Entity not\n   * found\" error).\n   */\n  async fetchIssueDetail(accessToken: string, idOrIdentifier: string): Promise<LinearIssueDetail | null> {\n    let data: IssueDetailQueryData;\n    try {\n      data = await linearGraphql<IssueDetailQueryData>(\n        accessToken,\n        `query IssueDetail($id: String!, $commentsFirst: Int!) {\n          issue(id: $id) {\n            id\n            identifier\n            title\n            description\n            url\n            priorityLabel\n            createdAt\n            updatedAt\n            state { name type }\n            project { id }\n            assignee { name }\n            creator { name }\n            team { key }\n            labels { nodes { name } }\n            comments(first: $commentsFirst) {\n              nodes { body createdAt user { name } }\n              pageInfo { hasNextPage endCursor }\n            }\n          }\n        }`,\n        { id: idOrIdentifier, commentsFirst: ISSUE_COMMENTS_PAGE_SIZE },\n      );\n    } catch (err) {\n      // Linear surfaces unknown ids/identifiers as a GraphQL \"Entity not\n      // found\" error rather than a null node — map that to \"issue doesn't\n      // exist\".\n      if (err instanceof Error && /entity not found/i.test(err.message)) return null;\n      throw err;\n    }\n    const issue = data.issue;\n    if (!issue) return null;\n    const allComments = await this.#fetchRemainingIssueComments(accessToken, issue.id, issue.comments);\n    const comments = allComments.sort((a, b) => new Date(a.createdAt).getTime() - new Date(b.createdAt).getTime());\n    return {\n      id: issue.id,\n      projectId: issue.project?.id ?? null,\n      identifier: issue.identifier,\n      title: issue.title,\n      description: issue.description?.trim() ? issue.description : null,\n      url: issue.url,\n      state: issue.state.name,\n      stateType: issue.state.type,\n      priorityLabel: issue.priorityLabel,\n      assignee: issue.assignee?.name ?? null,\n      creator: issue.creator?.name ?? null,\n      team: issue.team?.key ?? null,\n      labels: issue.labels.nodes.map(label => label.name),\n      createdAt: issue.createdAt,\n      updatedAt: issue.updatedAt,\n      comments: comments.map(comment => ({\n        author: comment.user?.name ?? null,\n        body: comment.body,\n        createdAt: comment.createdAt,\n      })),\n    };\n  }\n\n  /**\n   * Post a comment on an issue. `idOrIdentifier` accepts both the Linear UUID\n   * and the human key (`ENG-123`) — the identifier is resolved to a UUID\n   * first because `commentCreate` only accepts UUIDs. Returns `null` when the\n   * issue doesn't exist.\n   */\n  async createIssueComment(\n    accessToken: string,\n    idOrIdentifier: string,\n    body: string,\n  ): Promise<LinearCreatedComment | null> {\n    let issueId: string;\n    try {\n      const data = await linearGraphql<IssueIdQueryData>(\n        accessToken,\n        `query IssueId($id: String!) { issue(id: $id) { id } }`,\n        { id: idOrIdentifier },\n      );\n      if (!data.issue) return null;\n      issueId = data.issue.id;\n    } catch (err) {\n      if (err instanceof Error && /entity not found/i.test(err.message)) return null;\n      throw err;\n    }\n    const data = await linearGraphql<CommentCreateMutationData>(\n      accessToken,\n      `mutation CommentCreate($input: CommentCreateInput!) {\n        commentCreate(input: $input) { success comment { id url } }\n      }`,\n      { input: { issueId, body } },\n    );\n    if (!data.commentCreate.success || !data.commentCreate.comment) {\n      throw new Error('Linear did not accept the comment.');\n    }\n    return data.commentCreate.comment;\n  }\n\n  // ── FactoryIntegration surface ───────────────────────────────────────────\n\n  workers(ctx: IntegrationContext): MastraWorker[] {\n    if (!linearIssueReconciliationEnabled()) return [];\n    const reconcile = attachLinearIssueReconciler(this, ctx);\n    if (!reconcile) return [];\n    const intervalMs = linearIssueReconciliationInterval();\n    return [\n      new IssueReconcileWorker({\n        integrationId: this.id,\n        reconcile,\n        ...(intervalMs ? { intervalMs } : {}),\n      }),\n    ];\n  }\n\n  /**\n   * The integration's HTTP surface: `/web/linear/*` + `/auth/linear/*` Mastra\n   * `apiRoutes` (status, OAuth connect/callback, projects + issues for\n   * Intake). Handlers operate on this instance.\n   */\n  routes(ctx: IntegrationContext): ApiRoute[] {\n    return buildLinearRoutes({\n      linear: this,\n      auth: ctx.auth,\n      stateSigner: ctx.stateSigner,\n      baseUrl: ctx.baseUrl,\n      intake: ctx.storage.intake,\n      projects: ctx.storage.projects,\n      ingestFactoryIssues: attachLinearRules(this, ctx),\n    });\n  }\n\n  /**\n   * Org-scoped agent tools: issue detail + comment tools for sessions whose\n   * project belongs to an org with an active Linear connection.\n   */\n  async agentTools(args: { requestContext: RequestContext }): Promise<IntegrationTools> {\n    return buildLinearAgentTools({ requestContext: args.requestContext, linear: this });\n  }\n\n  /** Non-secret config snapshot for system diagnostics/startup logs. */\n  diagnostics(): Record<string, unknown> {\n    return {\n      oauthAppConfigured: true,\n    };\n  }\n}\n\nfunction getLinearAccessToken(connection: IntegrationConnection): string {\n  if (connection.type !== 'oauth') {\n    throw new Error('Linear capabilities require an OAuth connection.');\n  }\n  return connection.accessToken;\n}\n\nfunction linearIssueToIntakeIssue(issue: Omit<LinearIssue, 'projectId'> & { projectId?: string | null }): IntakeIssue {\n  return {\n    id: issue.id,\n    sourceId: issue.projectId ?? null,\n    identifier: issue.identifier,\n    title: issue.title,\n    url: issue.url,\n    author: issue.creator,\n    state: issue.state,\n    stateType: issue.stateType,\n    priority: issue.priorityLabel,\n    assignee: issue.assignee,\n    source: issue.team,\n    labels: issue.labels,\n    commentCount: null,\n    createdAt: issue.createdAt,\n    updatedAt: issue.updatedAt,\n  };\n}\n"],"mappings":";;;;;;;;AAgDA,MAAM,qBAAqB;AAC3B,MAAM,mBAAmB;AACzB,MAAM,uBAAuB;AAgG7B,MAAM,0BAA0B;AAChC,MAAM,2BAA2B;;AAEjC,MAAM,2BAA2B;;AAGjC,MAAM,wBAAwB;;AAG9B,MAAM,oBAAoB;AAE1B,MAAM,eAAe;;AAGrB,IAAa,4BAAb,cAA+C,MAAM;CACnD,cAAc;EACZ,MAAM,+EAA+E;CACvF;AACF;;AA2EA,eAAe,cAAiB,aAAqB,OAAe,WAAiD;CACnH,MAAM,MAAM,MAAM,MAAM,oBAAoB;EAC1C,QAAQ;EACR,QAAQ,YAAY,QAAQ,IAAM;EAClC,SAAS;GACP,gBAAgB;GAChB,eAAe,UAAU;EAC3B;EACA,MAAM,KAAK,UAAU;GAAE;GAAO;EAAU,CAAC;CAC3C,CAAC;CACD,IAAI,CAAC,IAAI,IAAI;EAGX,IAAI,SAAwB;EAC5B,IAAI;GAEF,UAAS,MADc,IAAI,KAAK,EAAA,CACf,SAAS,EAAE,EAAE,WAAW;EAC3C,QAAQ,CAER;EACA,MAAM,sBAAM,IAAI,MAAM,8BAA8B,IAAI,OAAO,GAAG,SAAS,KAAK,WAAW,IAAI;EAC/F,IAA6B,SAAS,IAAI;EAC1C,MAAM;CACR;CACA,MAAM,OAAQ,MAAM,IAAI,KAAK;CAC7B,IAAI,KAAK,QAAQ,QACf,MAAM,IAAI,MAAM,qBAAqB,KAAK,OAAO,EAAE,EAAE,WAAW,iBAAiB;CAEnF,IAAI,CAAC,KAAK,MACR,MAAM,IAAI,MAAM,8BAA8B;CAEhD,OAAO,KAAK;AACd;AAEA,IAAa,oBAAb,MAA6D;;CAE3D,KAAc;;CAEd;CACA;CACA;;CAGA,WAAW,EACT,SACA,UACA,QAKO;EACP,KAAKA,WAAW;EAChB,KAAKC,YAAY;EACjB,KAAKC,QAAQ;CACf;CAEA,IAAI,UAA+B;EACjC,IAAI,CAAC,KAAKF,UACR,MAAM,IAAI,MAAM,oFAAoF;EAEtG,OAAO,KAAKA;CACd;;CAGA,IAAI,WAAmC;EACrC,IAAI,CAAC,KAAKC,WACR,MAAM,IAAI,MAAM,oFAAoF;EAEtG,OAAO,KAAKA;CACd;;;;;CAMA,IAAI,cAAuB;EACzB,OAAO,KAAKC,OAAO,QAAQ,KAAK;CAClC;;CAKA,MAAM,eAAe,OAAoD;EACvE,MAAM,aAAa,MAAM,KAAK,QAAQ,YAAY,IAAI,KAAK;EAC3D,IAAI,CAAC,YAAY,OAAO;EACxB,MAAM,EAAE,SAAS;EACjB,OAAO;GACL,IAAI,WAAW;GACf,OAAO,WAAW;GAClB,QAAQ,WAAW;GACnB,aAAa,KAAK;GAClB,OAAO,KAAK,SAAS;GACrB,cAAc,KAAK,gBAAgB;GACnC,WAAW,KAAK,gBAAgB,QAAQ,KAAK,gBAAgB,KAAA,IAAY,OAAO,IAAI,KAAK,KAAK,WAAW;GACzG,eAAe,KAAK,iBAAiB;GACrC,iBAAiB,KAAK,mBAAmB;GACzC,WAAW,WAAW;GACtB,WAAW,WAAW;EACxB;CACF;;CAGA,MAAM,iBAAiB,OAAmD;EACxE,MAAM,KAAK,QAAQ,YAAY,OAAO,MAAM,OAAO;GACjD,QAAQ,MAAM;GACd,MAAM;IACJ,aAAa,MAAM;IACnB,cAAc,MAAM;IACpB,aAAa,MAAM,WAAW,QAAQ,KAAK;IAC3C,OAAO,MAAM;IACb,eAAe,MAAM;IACrB,iBAAiB,MAAM;GACzB;EACF,CAAC;EAED,KAAK,0BAA0B,MAAM,KAAK;CAC5C;;CAGA,MAAMC,cAAc,OAAe,QAAuC;EACxE,MAAM,KAAK,QAAQ,YAAY,OAAO,QAAO,UAAS;GACpD,GAAG;GACH,aAAa,OAAO;GACpB,cAAc,OAAO;GACrB,aAAa,OAAO,WAAW,QAAQ,KAAK;GAE5C,OAAO,OAAO,SAAS,KAAK;EAC9B,EAAE;CACJ;;;;;;CAOA,gBAAgB,YAA0C;EAExD,QADgB,WAAW,SAAS,GAAA,CAAI,MAAM,QAAQ,CAAC,CAAC,OAAO,OACnD,CAAC,CAAC,MAAK,UAAS,UAAU,qBAAqB,UAAU,WAAW,UAAU,OAAO;CACnG;;;;;;CAOA,qCAA8B,IAAI,IAA6B;;;;;;;CAQ/D,MAAM,oBAAoB,YAAkD;EAG1E,IAAI,EADF,WAAW,cAAc,QAAQ,WAAW,UAAU,QAAQ,IAAI,yBAAyB,KAAK,IAAI,IACxF,OAAO,WAAW;EAEhC,IAAI,CAAC,WAAW,cAEd,MAAM,IAAI,0BAA0B;EAGtC,MAAM,WAAW,KAAKC,mBAAmB,IAAI,WAAW,KAAK;EAC7D,IAAI,UAAU,OAAO;EAKrB,MAAM,SAAS,MAAM,KAAK,eAAe,WAAW,KAAK;EACzD,IAAI,CAAC,QAAQ,MAAM,IAAI,0BAA0B;EAEjD,MAAM,aAAa,KAAKA,mBAAmB,IAAI,WAAW,KAAK;EAC/D,IAAI,YAAY,OAAO;EAGvB,IAAI,EADkB,OAAO,cAAc,QAAQ,OAAO,UAAU,QAAQ,IAAI,yBAAyB,KAAK,IAAI,IAC9F,OAAO,OAAO;EAClC,IAAI,CAAC,OAAO,cAAc,MAAM,IAAI,0BAA0B;EAE9D,MAAM,eAAe,OAAO;EAC5B,MAAM,WAAW,YAAY;GAC3B,IAAI;IACF,MAAM,SAAS,MAAM,KAAK,mBAAmB,YAAY;IACzD,MAAM,KAAKD,cAAc,WAAW,OAAO,MAAM;IACjD,OAAO,OAAO;GAChB,SAAS,KAAK;IACZ,MAAM,SAAU,IAA4B;IAG5C,IAAI,WAAW,OAAO,WAAW,KAAK,MAAM,IAAI,0BAA0B;IAC1E,MAAM;GACR,UAAU;IACR,KAAKC,mBAAmB,OAAO,WAAW,KAAK;GACjD;EACF,EAAA,CAAG;EACH,KAAKA,mBAAmB,IAAI,WAAW,OAAO,OAAO;EACrD,OAAO;CACT;;CAKA,oCAA6B,IAAI,IAAmC;;;;;;CAOpE,MAAM,gBAAgB,OAA+C;EACnE,MAAM,SAAS,KAAKC,kBAAkB,IAAI,KAAK;EAC/C,IAAI,UAAU,KAAK,IAAI,IAAI,OAAO,YAAY,mBAAmB,OAAO;EACxE,MAAM,aAAa,MAAM,KAAK,eAAe,KAAK;EAClD,MAAM,QAA+B;GACnC,WAAW,eAAe;GAC1B,YAAY,eAAe,QAAQ,KAAK,gBAAgB,UAAU;GAClE,WAAW,KAAK,IAAI;EACtB;EACA,KAAKA,kBAAkB,IAAI,OAAO,KAAK;EACvC,OAAO;CACT;;;;;;CAOA,0BAA0B,OAAqB;EAC7C,KAAKA,kBAAkB,OAAO,KAAK;CACrC;;;;;;;CAQA,qCAA8B,IAAI,IAA2B;;CAG7D,MAAM,aAAa,YAA4C;EAC7D,MAAM,SAAS,KAAKC,mBAAmB,IAAI,UAAU;EACrD,IAAI,WAAW,KAAA,GAAW,OAAO;EAGjC,IAAI,CAAC,aAAa,KAAK,UAAU,GAAG;GAClC,KAAKA,mBAAmB,IAAI,YAAY,IAAI;GAC5C,OAAO;EACT;EACA,IAAI;EACJ,IAAI;GACF,MAAM,KAAK,SAAS,YAAY;GAEhC,SAAQ,MADc,KAAK,SAAS,QAAQ,EAAE,IAAI,WAAW,CAAC,EAAA,EAC7C,SAAS;EAC5B,QAAQ;GAGN,OAAO;EACT;EACA,KAAKA,mBAAmB,IAAI,YAAY,KAAK;EAC7C,OAAO;CACT;;CAGA,cAAoB;EAClB,KAAKA,mBAAmB,MAAM;EAC9B,KAAKD,kBAAkB,MAAM;CAC/B;CAEA,SAA0B;EACxB,wBAAuB,UAAS,KAAKE,uBAAuB,KAAK;EACjE,aAAa,OAAO,EAAE,YAAY;GAChC,MAAM,aAAa,MAAM,KAAK,eAAe,KAAK;GAClD,IAAI,CAAC,YAAY,OAAO,CAAC;GACzB,MAAM,cAAc,MAAM,KAAK,oBAAoB,UAAU;GAE7D,QAAO,MADgB,KAAK,aAAa,WAAW,EAAA,CACpC,KAAI,aAAY;IAC9B,IAAI,QAAQ;IACZ,MAAM,QAAQ;IACd,MAAM;GACR,EAAE;EACJ;EACA,WAAW,OAAO,EAAE,OAAO,WAAW,aAAa;GACjD,IAAI,UAAU,WAAW,GAAG,OAAO;IAAE,OAAO,CAAC;IAAG,YAAY;GAAK;GACjE,MAAM,aAAa,MAAM,KAAK,eAAe,KAAK;GAClD,IAAI,CAAC,YAAY,OAAO;IAAE,OAAO,CAAC;IAAG,YAAY;GAAK;GACtD,MAAM,cAAc,MAAM,KAAK,oBAAoB,UAAU;GAC7D,MAAM,OAAO,MAAM,KAAK,iBAAiB,aAAa,QAAQ,SAAS;GACvE,OAAO;IACL,OAAO,KAAK,OAAO,KAAI,WAAU;KAC/B,QAAQ;MAAE,MAAM;MAAS,YAAY,MAAM;MAAI,KAAK,MAAM;KAAI;KAC9D,UAAU,MAAM;KAChB,OAAO,GAAG,MAAM,WAAW,IAAI,MAAM;KACrC,QAAQ,MAAM;KACd,QAAQ,MAAM;KACd,UAAU,MAAM;KAChB,WAAW,MAAM;KACjB,WAAW,MAAM;KACjB,UAAU;MACR,YAAY,MAAM;MAClB,WAAW,MAAM;MACjB,UAAU,MAAM;MAChB,MAAM,MAAM;KACd;IACF,EAAE;IACF,YAAY,KAAK;GACnB;EACF;EACA,aAAY,UAAS,KAAKC,kBAAkB,KAAK;EACjD,WAAU,UAAS,KAAKC,gBAAgB,KAAK;EAC7C,gBAAe,UAAS,KAAKC,qBAAqB,KAAK;EACvD,cAAa,UAAS,KAAKC,mBAAmB,KAAK;CACrD;;;;;CAMA,MAAMJ,uBAAuB,EAC3B,OACA,kBAIyE;EACzE,IAAI,eAAe,SAAS,SAAS,OAAO;EAC5C,MAAM,aAAa,MAAM,KAAK,eAAe,KAAK;EAClD,IAAI,CAAC,YAAY,OAAO;EAExB,OAAO;GAAE,YAAY;IAAE,MAAM;IAAS,aAAA,MADZ,KAAK,oBAAoB,UAAU;GACX;GAAG,SAAS,eAAe;EAAW;CAC1F;;;;;CAKA,4BAAqC;CAErC;CACA;CAEA;CAEA,IAAI,QAA0B;EAC5B,OAAO,KAAKO;CACd;CAEA,YAAY,QAAiC;EAC3C,KAAKA,SAAS,mBAAmB,OAAO,KAAK;EAC7C,MAAM,UAAW,CAAC,YAAY,cAAc,CAAC,CAAW,QAAO,QAAO,CAAC,OAAO,IAAI;EAClF,IAAI,QAAQ,SAAS,GACnB,MAAM,IAAI,MAAM,iDAAiD,QAAQ,KAAK,IAAI,EAAE,EAAE;EAExF,KAAKF,YAAY,OAAO;EACxB,KAAKC,gBAAgB,OAAO;CAC9B;;;;;;CASA,kBAAkB,OAAe,aAA6B;EAC5D,MAAM,MAAM,IAAI,IAAI,oBAAoB;EACxC,IAAI,aAAa,IAAI,aAAa,KAAKD,SAAS;EAChD,IAAI,aAAa,IAAI,gBAAgB,WAAW;EAChD,IAAI,aAAa,IAAI,iBAAiB,MAAM;EAG5C,IAAI,aAAa,IAAI,SAAS,sBAAsB;EACpD,IAAI,aAAa,IAAI,SAAS,KAAK;EACnC,IAAI,aAAa,IAAI,UAAU,SAAS;EACxC,OAAO,IAAI,SAAS;CACtB;;CAGA,MAAM,kBAAkB,MAAc,aAA8C;EAClF,OAAO,KAAKG,eAAe;GAAE,YAAY;GAAsB;GAAM,cAAc;EAAY,GAAG,gBAAgB;CACpH;;;;;;;CAQA,MAAM,mBAAmB,cAA+C;EACtE,OAAO,KAAKA,eAAe;GAAE,YAAY;GAAiB,eAAe;EAAa,GAAG,eAAe;CAC1G;;CAGA,MAAMA,eAAe,QAAgC,OAAwC;EAC3F,MAAM,MAAM,MAAM,MAAM,kBAAkB;GACxC,QAAQ;GACR,QAAQ,YAAY,QAAQ,GAAM;GAClC,SAAS,EAAE,gBAAgB,oCAAoC;GAC/D,MAAM,IAAI,gBAAgB;IACxB,GAAG;IACH,WAAW,KAAKH;IAChB,eAAe,KAAKC;GACtB,CAAC;EACH,CAAC;EACD,IAAI,CAAC,IAAI,IAAI;GACX,MAAM,sBAAM,IAAI,MAAM,UAAU,MAAM,WAAW,IAAI,OAAO,EAAE;GAC9D,IAA6B,SAAS,IAAI;GAC1C,MAAM;EACR;EACA,MAAM,OAAQ,MAAM,IAAI,KAAK;EAM7B,IAAI,CAAC,KAAK,cACR,MAAM,IAAI,MAAM,UAAU,MAAM,2BAA2B;EAE7D,OAAO;GACL,aAAa,KAAK;GAClB,cAAc,KAAK,iBAAiB;GACpC,WAAW,OAAO,KAAK,eAAe,WAAW,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,aAAa,GAAI,IAAI;GACjG,OAAO,KAAK,SAAS;EACvB;CACF;;CAKA,MAAM,eAAe,aAA+C;EAClE,MAAM,OAAO,MAAM,cACjB,aACA,wCACF;EACA,OAAO;GAAE,MAAM,KAAK,aAAa;GAAM,QAAQ,KAAK,aAAa;EAAO;CAC1E;CAEA,MAAML,kBAAkB,OAA6F;EACnH,MAAM,cAAc,qBAAqB,MAAM,UAAU;EACzD,MAAM,SAAS,MAAM,KAAK,iBAAiB,aAAa,MAAM,QAAQ,MAAM,WAAW,MAAM,MAAM;EACnG,OAAO;GACL,QAAQ,OAAO,OAAO,KAAI,UAAS,yBAAyB,KAAK,CAAC;GAClE,YAAY,OAAO;EACrB;CACF;CAEA,MAAMC,gBAAgB,OAA+D;EACnF,MAAM,cAAc,qBAAqB,MAAM,UAAU;EACzD,MAAM,QAAQ,MAAM,KAAK,iBAAiB,aAAa,MAAM,OAAO;EACpE,IAAI,CAAC,OAAO,OAAO;EACnB,OAAO;GACL,GAAG,yBAAyB,KAAK;GACjC,aAAa,MAAM;GACnB,cAAc,MAAM,SAAS;GAC7B,UAAU,MAAM;EAClB;CACF;CAEA,MAAMC,qBAAqB,OAA8E;EACvG,MAAM,cAAc,qBAAqB,MAAM,UAAU;EACzD,OAAO,KAAK,mBAAmB,aAAa,MAAM,SAAS,MAAM,IAAI;CACvE;CAEA,MAAMC,mBAAmB,OAA4D;EACnF,MAAM,cAAc,qBAAqB,MAAM,UAAU;EACzD,MAAM,QAAQ,MAAM,KAAK,iBAAiB,aAAa,MAAM,OAAO;EACpE,IAAI,CAAC,OAAO,OAAO;EACnB,MAAM,UAAU,MAAM;EACtB,IAAI,CAAC,SAAS,OAAO;EACrB,MAAM,SAAS,MAAM,KAAKK,wBAAwB,aAAa,OAAO;EACtE,IAAI,cAAiE;EACrE,IAAI,MAAM,MAAM,SAAS,UAAU;GACjC,MAAM,aAAa,MAAM,MAAM;GAC/B,cAAc,OAAO,MAAK,UAAS,MAAM,SAAS,UAAU,KAAK;EACnE,OAAO;GACL,MAAM,SAAS,MAAM,MAAM,KAAK,YAAY;GAC5C,cAAc,OAAO,MAAK,UAAS,MAAM,KAAK,YAAY,MAAM,MAAM,KAAK;EAC7E;EACA,IAAI,CAAC,aAAa,OAAO;EACzB,IAAI,YAAY,SAAS,MAAM,OAC7B,OAAO,yBAAyB,KAAK;EASvC,IAAI,EAAC,MAPc,cACjB,aACA;;UAGA;GAAE,IAAI,MAAM;GAAI,SAAS,YAAY;EAAG,CAC1C,EAAA,CACU,YAAY,SACpB,MAAM,IAAI,MAAM,yCAAyC;EAE3D,MAAM,QAAQ,MAAM,KAAK,iBAAiB,aAAa,MAAM,EAAE;EAC/D,IAAI,CAAC,OAAO,OAAO;EACnB,OAAO,yBAAyB,KAAK;CACvC;CAEA,MAAMA,wBACJ,aACA,SAC4D;EAU5D,QAAO,MATY,cAGjB,aACA;;UAGA,EAAE,KAAK,QAAQ,CACjB,EAAA,CACY,MAAM,OAAO,SAAS,CAAC;CACrC;;CAGA,MAAM,aAAa,aAA+C;EAchE,QAAO,MAbY,cAUjB,aACA,uGACF,EAAA,CACY,SAAS,MAAM,KAAI,UAAS;GACtC,IAAI,KAAK;GACT,MAAM,KAAK;GACX,OAAO,KAAK;GACZ,OAAO,KAAK,MAAM,MAAM,KAAI,UAAS;IAAE,IAAI,KAAK;IAAI,KAAK,KAAK;IAAK,MAAM,KAAK;GAAK,EAAE;EACvF,EAAE;CACJ;;;;;;;CAQA,MAAM,iBACJ,aACA,OACA,YACA,QAC0B;EAC1B,MAAM,mBAAmB,CAAC,GAAG,IAAI,KAAK,UAAU,CAAC,EAAA,CAAG,KAAI,UAAS,MAAM,KAAK,CAAC,CAAC,CAAC,OAAO,OAAO,CAAC,CAAC;EAC/F,MAAM,gBAAgB,YAAY,SAAS,2CAA2C;EACtF,MAAM,aAAa,YAAY,SAAS,yBAAyB;EACjE,MAAM,cAAc,iBAAiB,SAAS,IAAI,wCAAwC;EAoC1F,MAAM,EAAE,OAAO,cAAa,MAlCT,cACjB,aACA,4CAA4C,aAH7B,iBAAiB,SAAS,IAAI,yBAAyB,GAGJ;;;;;4FAKoB,gBAAgB,YAAY;;;;;;;;;;;;;;;;;;;UAoBlH;GACE,OAAO;GACP,OAAO,SAAS;GAChB,GAAI,YAAY,SAAS,EAAE,WAAW,IAAI,CAAC;GAC3C,GAAI,iBAAiB,SAAS,IAAI,EAAE,QAAQ,iBAAiB,IAAI,CAAC;EACpE,CACF,EAAA,CACiC;EACjC,OAAO;GACL,QAAQ,MAAM,KAAI,UAAS;IACzB,IAAI,KAAK;IACT,WAAW,KAAK,QAAQ;IACxB,YAAY,KAAK;IACjB,OAAO,KAAK;IACZ,KAAK,KAAK;IACV,OAAO,KAAK,MAAM;IAClB,WAAW,KAAK,MAAM;IACtB,eAAe,KAAK;IACpB,UAAU,KAAK,UAAU,QAAQ;IACjC,SAAS,KAAK,SAAS,QAAQ;IAC/B,MAAM,KAAK,MAAM,OAAO;IACxB,QAAQ,KAAK,OAAO,MAAM,KAAI,UAAS,MAAM,IAAI;IACjD,WAAW,KAAK;IAChB,WAAW,KAAK;GAClB,EAAE;GACF,YAAY,SAAS,cAAc,SAAS,YAAY;EAC1D;CACF;;CAGA,MAAMC,6BACJ,aACA,SACA,WAC6B;EAC7B,MAAM,QAAQ,CAAC,GAAG,UAAU,KAAK;EACjC,IAAI,EAAE,aAAa,cAAc,UAAU;EAC3C,KAAK,IAAI,OAAO,GAAG,eAAe,aAAa,OAAO,0BAA0B,QAAQ;GAatF,MAAM,YAAW,MAZE,cACjB,aACA;;;;;;;YAQA;IAAE,IAAI;IAAS,OAAO;IAA0B,OAAO;GAAU,CACnE,EAAA,CACsB,OAAO;GAC7B,IAAI,CAAC,UAAU;GACf,MAAM,KAAK,GAAG,SAAS,KAAK;GAC5B,CAAC,CAAE,aAAa,aAAc,SAAS;EACzC;EACA,OAAO;CACT;;;;;;;CAQA,MAAM,iBAAiB,aAAqB,gBAA2D;EACrG,IAAI;EACJ,IAAI;GACF,OAAO,MAAM,cACX,aACA;;;;;;;;;;;;;;;;;;;;;YAsBA;IAAE,IAAI;IAAgB,eAAe;GAAyB,CAChE;EACF,SAAS,KAAK;GAIZ,IAAI,eAAe,SAAS,oBAAoB,KAAK,IAAI,OAAO,GAAG,OAAO;GAC1E,MAAM;EACR;EACA,MAAM,QAAQ,KAAK;EACnB,IAAI,CAAC,OAAO,OAAO;EAEnB,MAAM,YAAW,MADS,KAAKA,6BAA6B,aAAa,MAAM,IAAI,MAAM,QAAQ,EAAA,CACpE,MAAM,GAAG,MAAM,IAAI,KAAK,EAAE,SAAS,CAAC,CAAC,QAAQ,IAAI,IAAI,KAAK,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC;EAC7G,OAAO;GACL,IAAI,MAAM;GACV,WAAW,MAAM,SAAS,MAAM;GAChC,YAAY,MAAM;GAClB,OAAO,MAAM;GACb,aAAa,MAAM,aAAa,KAAK,IAAI,MAAM,cAAc;GAC7D,KAAK,MAAM;GACX,OAAO,MAAM,MAAM;GACnB,WAAW,MAAM,MAAM;GACvB,eAAe,MAAM;GACrB,UAAU,MAAM,UAAU,QAAQ;GAClC,SAAS,MAAM,SAAS,QAAQ;GAChC,MAAM,MAAM,MAAM,OAAO;GACzB,QAAQ,MAAM,OAAO,MAAM,KAAI,UAAS,MAAM,IAAI;GAClD,WAAW,MAAM;GACjB,WAAW,MAAM;GACjB,UAAU,SAAS,KAAI,aAAY;IACjC,QAAQ,QAAQ,MAAM,QAAQ;IAC9B,MAAM,QAAQ;IACd,WAAW,QAAQ;GACrB,EAAE;EACJ;CACF;;;;;;;CAQA,MAAM,mBACJ,aACA,gBACA,MACsC;EACtC,IAAI;EACJ,IAAI;GACF,MAAM,OAAO,MAAM,cACjB,aACA,yDACA,EAAE,IAAI,eAAe,CACvB;GACA,IAAI,CAAC,KAAK,OAAO,OAAO;GACxB,UAAU,KAAK,MAAM;EACvB,SAAS,KAAK;GACZ,IAAI,eAAe,SAAS,oBAAoB,KAAK,IAAI,OAAO,GAAG,OAAO;GAC1E,MAAM;EACR;EACA,MAAM,OAAO,MAAM,cACjB,aACA;;UAGA,EAAE,OAAO;GAAE;GAAS;EAAK,EAAE,CAC7B;EACA,IAAI,CAAC,KAAK,cAAc,WAAW,CAAC,KAAK,cAAc,SACrD,MAAM,IAAI,MAAM,oCAAoC;EAEtD,OAAO,KAAK,cAAc;CAC5B;CAIA,QAAQ,KAAyC;EAC/C,IAAI,CAAC,iCAAiC,GAAG,OAAO,CAAC;EACjD,MAAM,YAAY,4BAA4B,MAAM,GAAG;EACvD,IAAI,CAAC,WAAW,OAAO,CAAC;EACxB,MAAM,aAAa,kCAAkC;EACrD,OAAO,CACL,IAAI,qBAAqB;GACvB,eAAe,KAAK;GACpB;GACA,GAAI,aAAa,EAAE,WAAW,IAAI,CAAC;EACrC,CAAC,CACH;CACF;;;;;;CAOA,OAAO,KAAqC;EAC1C,OAAO,kBAAkB;GACvB,QAAQ;GACR,MAAM,IAAI;GACV,aAAa,IAAI;GACjB,SAAS,IAAI;GACb,QAAQ,IAAI,QAAQ;GACpB,UAAU,IAAI,QAAQ;GACtB,qBAAqB,kBAAkB,MAAM,GAAG;EAClD,CAAC;CACH;;;;;CAMA,MAAM,WAAW,MAAqE;EACpF,OAAO,sBAAsB;GAAE,gBAAgB,KAAK;GAAgB,QAAQ;EAAK,CAAC;CACpF;;CAGA,cAAuC;EACrC,OAAO,EACL,oBAAoB,KACtB;CACF;AACF;AAEA,SAAS,qBAAqB,YAA2C;CACvE,IAAI,WAAW,SAAS,SACtB,MAAM,IAAI,MAAM,kDAAkD;CAEpE,OAAO,WAAW;AACpB;AAEA,SAAS,yBAAyB,OAAoF;CACpH,OAAO;EACL,IAAI,MAAM;EACV,UAAU,MAAM,aAAa;EAC7B,YAAY,MAAM;EAClB,OAAO,MAAM;EACb,KAAK,MAAM;EACX,QAAQ,MAAM;EACd,OAAO,MAAM;EACb,WAAW,MAAM;EACjB,UAAU,MAAM;EAChB,UAAU,MAAM;EAChB,QAAQ,MAAM;EACd,QAAQ,MAAM;EACd,cAAc;EACd,WAAW,MAAM;EACjB,WAAW,MAAM;CACnB;AACF"}

package/dist/integrations/linear/issue-reconciler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"issue-reconciler.d.ts","sourceRoot":"","sources":["../../../src/integrations/linear/issue-reconciler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAErD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAI1D,MAAM,MAAM,qBAAqB,GAAG,eAAe,CAAC;AAoBpD,wBAAgB,2BAA2B,CACzC,MAAM,EAAE,IAAI,CAAC,iBAAiB,EAAE,QAAQ,GAAG,OAAO,CAAC,EACnD,OAAO,EAAE,kBAAkB,GAC1B,qBAAqB,GAAG,SAAS,CA0CnC"}
+{"version":3,"file":"issue-reconciler.d.ts","sourceRoot":"","sources":["../../../src/integrations/linear/issue-reconciler.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAErD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAI1D,MAAM,MAAM,qBAAqB,GAAG,eAAe,CAAC;AAoBpD,wBAAgB,2BAA2B,CACzC,MAAM,EAAE,IAAI,CAAC,iBAAiB,EAAE,QAAQ,GAAG,OAAO,CAAC,EACnD,OAAO,EAAE,kBAAkB,GAC1B,qBAAqB,GAAG,SAAS,CA6CnC"}

package/dist/integrations/linear/issue-reconciler.js

@@ -1,3 +1,5 @@
+import { workItemPhaseSemantics } from "../../boards/semantics.js";
+import "../../boards/index.js";
 import { createIssueReconciler } from "../issue-reconciler.js";
 import { LinearRules } from "./rules.js";
 //#region src/integrations/linear/issue-reconciler.ts
@@ -19,18 +21,21 @@ function issueToIngress(issue) {
 	};
 }
 function attachLinearIssueReconciler(linear, context) {
-	if (!context.rules || !linear.intake.resolveIntakeDispatch) return void 0;
+	if (!context.runtime || !linear.intake.resolveIntakeDispatch) return void 0;
+	const boards = context.runtime.boards;
 	const rules = new LinearRules({
 		projects: context.storage.projects,
-		storage: context.rules.workItems,
-		rules: context.rules.config,
+		storage: context.runtime.workItems,
+		configVersion: context.runtime.configVersion,
+		boards,
 		linearRules: linear.rules
 	});
 	return createIssueReconciler({
 		integrationId: "linear",
 		intake: linear.intake,
 		projects: context.storage.projects,
-		storage: context.rules.workItems,
+		storage: context.runtime.workItems,
+		isTerminal: (item) => workItemPhaseSemantics(boards, item)?.kind === "terminal",
 		issueId: (item) => {
 			const issueId = item.metadata?.linearIssueId;
 			return typeof issueId === "string" && issueId.length > 0 ? issueId : void 0;

package/dist/integrations/linear/issue-reconciler.js.map

@@ -1 +1 @@
-{"version":3,"file":"issue-reconciler.js","names":[],"sources":["../../../src/integrations/linear/issue-reconciler.ts"],"sourcesContent":["import type { IntegrationContext } from '../base.js';\nimport { createIssueReconciler } from '../issue-reconciler.js';\nimport type { IssueReconciler } from '../issue-reconciler.js';\nimport type { LinearIntegration } from './integration.js';\nimport { LinearRules } from './rules.js';\nimport type { LinearIssueIngress } from './rules.js';\n\nexport type LinearIssueReconciler = IssueReconciler;\n\nfunction issueToIngress(issue: import('../../capabilities/intake.js').IntakeIssue): LinearIssueIngress {\n  return {\n    id: issue.id,\n    identifier: issue.identifier,\n    title: issue.title,\n    url: issue.url,\n    state: issue.state ?? '',\n    stateType: issue.stateType ?? '',\n    priorityLabel: issue.priority ?? '',\n    assignee: issue.assignee ?? null,\n    creator: issue.author ?? null,\n    team: issue.source ?? null,\n    labels: [...(issue.labels ?? [])],\n    createdAt: issue.createdAt,\n    updatedAt: issue.updatedAt,\n  };\n}\n\nexport function attachLinearIssueReconciler(\n  linear: Pick<LinearIntegration, 'intake' | 'rules'>,\n  context: IntegrationContext,\n): LinearIssueReconciler | undefined {\n  if (!context.rules || !linear.intake.resolveIntakeDispatch) return undefined;\n\n  const rules = new LinearRules({\n    projects: context.storage.projects,\n    storage: context.rules.workItems,\n    rules: context.rules.config,\n    linearRules: linear.rules,\n  });\n\n  return createIssueReconciler({\n    integrationId: 'linear',\n    intake: linear.intake,\n    projects: context.storage.projects,\n    storage: context.rules.workItems,\n    issueId: item => {\n      const issueId = item.metadata?.linearIssueId;\n      return typeof issueId === 'string' && issueId.length > 0 ? issueId : undefined;\n    },\n    metadata: (_item, issue) => ({\n      linearIssueId: issue.id,\n      identifier: issue.identifier,\n      linearState: issue.state,\n      linearStateType: issue.stateType,\n      linearPriority: issue.priority,\n      linearAssignee: issue.assignee,\n      linearCreator: issue.author,\n      linearTeam: issue.source,\n      assignee: issue.assignee,\n      creator: issue.author,\n      author: issue.author,\n      labels: issue.labels ?? [],\n    }),\n    onClosed: async (item, issue, project) => {\n      await rules.ingest({\n        orgId: project.orgId,\n        userId: 'factory-rule-dispatcher',\n        factoryProjectId: project.id,\n        issues: [issueToIngress(issue)],\n      });\n    },\n  });\n}\n"],"mappings":";;;AASA,SAAS,eAAe,OAA+E;CACrG,OAAO;EACL,IAAI,MAAM;EACV,YAAY,MAAM;EAClB,OAAO,MAAM;EACb,KAAK,MAAM;EACX,OAAO,MAAM,SAAS;EACtB,WAAW,MAAM,aAAa;EAC9B,eAAe,MAAM,YAAY;EACjC,UAAU,MAAM,YAAY;EAC5B,SAAS,MAAM,UAAU;EACzB,MAAM,MAAM,UAAU;EACtB,QAAQ,CAAC,GAAI,MAAM,UAAU,CAAC,CAAE;EAChC,WAAW,MAAM;EACjB,WAAW,MAAM;CACnB;AACF;AAEA,SAAgB,4BACd,QACA,SACmC;CACnC,IAAI,CAAC,QAAQ,SAAS,CAAC,OAAO,OAAO,uBAAuB,OAAO,KAAA;CAEnE,MAAM,QAAQ,IAAI,YAAY;EAC5B,UAAU,QAAQ,QAAQ;EAC1B,SAAS,QAAQ,MAAM;EACvB,OAAO,QAAQ,MAAM;EACrB,aAAa,OAAO;CACtB,CAAC;CAED,OAAO,sBAAsB;EAC3B,eAAe;EACf,QAAQ,OAAO;EACf,UAAU,QAAQ,QAAQ;EAC1B,SAAS,QAAQ,MAAM;EACvB,UAAS,SAAQ;GACf,MAAM,UAAU,KAAK,UAAU;GAC/B,OAAO,OAAO,YAAY,YAAY,QAAQ,SAAS,IAAI,UAAU,KAAA;EACvE;EACA,WAAW,OAAO,WAAW;GAC3B,eAAe,MAAM;GACrB,YAAY,MAAM;GAClB,aAAa,MAAM;GACnB,iBAAiB,MAAM;GACvB,gBAAgB,MAAM;GACtB,gBAAgB,MAAM;GACtB,eAAe,MAAM;GACrB,YAAY,MAAM;GAClB,UAAU,MAAM;GAChB,SAAS,MAAM;GACf,QAAQ,MAAM;GACd,QAAQ,MAAM,UAAU,CAAC;EAC3B;EACA,UAAU,OAAO,MAAM,OAAO,YAAY;GACxC,MAAM,MAAM,OAAO;IACjB,OAAO,QAAQ;IACf,QAAQ;IACR,kBAAkB,QAAQ;IAC1B,QAAQ,CAAC,eAAe,KAAK,CAAC;GAChC,CAAC;EACH;CACF,CAAC;AACH"}
+{"version":3,"file":"issue-reconciler.js","names":[],"sources":["../../../src/integrations/linear/issue-reconciler.ts"],"sourcesContent":["import { workItemPhaseSemantics } from '../../boards/index.js';\nimport type { IntegrationContext } from '../base.js';\nimport { createIssueReconciler } from '../issue-reconciler.js';\nimport type { IssueReconciler } from '../issue-reconciler.js';\nimport type { LinearIntegration } from './integration.js';\nimport { LinearRules } from './rules.js';\nimport type { LinearIssueIngress } from './rules.js';\n\nexport type LinearIssueReconciler = IssueReconciler;\n\nfunction issueToIngress(issue: import('../../capabilities/intake.js').IntakeIssue): LinearIssueIngress {\n  return {\n    id: issue.id,\n    identifier: issue.identifier,\n    title: issue.title,\n    url: issue.url,\n    state: issue.state ?? '',\n    stateType: issue.stateType ?? '',\n    priorityLabel: issue.priority ?? '',\n    assignee: issue.assignee ?? null,\n    creator: issue.author ?? null,\n    team: issue.source ?? null,\n    labels: [...(issue.labels ?? [])],\n    createdAt: issue.createdAt,\n    updatedAt: issue.updatedAt,\n  };\n}\n\nexport function attachLinearIssueReconciler(\n  linear: Pick<LinearIntegration, 'intake' | 'rules'>,\n  context: IntegrationContext,\n): LinearIssueReconciler | undefined {\n  if (!context.runtime || !linear.intake.resolveIntakeDispatch) return undefined;\n  const boards = context.runtime.boards;\n\n  const rules = new LinearRules({\n    projects: context.storage.projects,\n    storage: context.runtime.workItems,\n    configVersion: context.runtime.configVersion,\n    boards,\n    linearRules: linear.rules,\n  });\n\n  return createIssueReconciler({\n    integrationId: 'linear',\n    intake: linear.intake,\n    projects: context.storage.projects,\n    storage: context.runtime.workItems,\n    isTerminal: item => workItemPhaseSemantics(boards, item)?.kind === 'terminal',\n    issueId: item => {\n      const issueId = item.metadata?.linearIssueId;\n      return typeof issueId === 'string' && issueId.length > 0 ? issueId : undefined;\n    },\n    metadata: (_item, issue) => ({\n      linearIssueId: issue.id,\n      identifier: issue.identifier,\n      linearState: issue.state,\n      linearStateType: issue.stateType,\n      linearPriority: issue.priority,\n      linearAssignee: issue.assignee,\n      linearCreator: issue.author,\n      linearTeam: issue.source,\n      assignee: issue.assignee,\n      creator: issue.author,\n      author: issue.author,\n      labels: issue.labels ?? [],\n    }),\n    onClosed: async (item, issue, project) => {\n      await rules.ingest({\n        orgId: project.orgId,\n        userId: 'factory-rule-dispatcher',\n        factoryProjectId: project.id,\n        issues: [issueToIngress(issue)],\n      });\n    },\n  });\n}\n"],"mappings":";;;;;AAUA,SAAS,eAAe,OAA+E;CACrG,OAAO;EACL,IAAI,MAAM;EACV,YAAY,MAAM;EAClB,OAAO,MAAM;EACb,KAAK,MAAM;EACX,OAAO,MAAM,SAAS;EACtB,WAAW,MAAM,aAAa;EAC9B,eAAe,MAAM,YAAY;EACjC,UAAU,MAAM,YAAY;EAC5B,SAAS,MAAM,UAAU;EACzB,MAAM,MAAM,UAAU;EACtB,QAAQ,CAAC,GAAI,MAAM,UAAU,CAAC,CAAE;EAChC,WAAW,MAAM;EACjB,WAAW,MAAM;CACnB;AACF;AAEA,SAAgB,4BACd,QACA,SACmC;CACnC,IAAI,CAAC,QAAQ,WAAW,CAAC,OAAO,OAAO,uBAAuB,OAAO,KAAA;CACrE,MAAM,SAAS,QAAQ,QAAQ;CAE/B,MAAM,QAAQ,IAAI,YAAY;EAC5B,UAAU,QAAQ,QAAQ;EAC1B,SAAS,QAAQ,QAAQ;EACzB,eAAe,QAAQ,QAAQ;EAC/B;EACA,aAAa,OAAO;CACtB,CAAC;CAED,OAAO,sBAAsB;EAC3B,eAAe;EACf,QAAQ,OAAO;EACf,UAAU,QAAQ,QAAQ;EAC1B,SAAS,QAAQ,QAAQ;EACzB,aAAY,SAAQ,uBAAuB,QAAQ,IAAI,CAAC,EAAE,SAAS;EACnE,UAAS,SAAQ;GACf,MAAM,UAAU,KAAK,UAAU;GAC/B,OAAO,OAAO,YAAY,YAAY,QAAQ,SAAS,IAAI,UAAU,KAAA;EACvE;EACA,WAAW,OAAO,WAAW;GAC3B,eAAe,MAAM;GACrB,YAAY,MAAM;GAClB,aAAa,MAAM;GACnB,iBAAiB,MAAM;GACvB,gBAAgB,MAAM;GACtB,gBAAgB,MAAM;GACtB,eAAe,MAAM;GACrB,YAAY,MAAM;GAClB,UAAU,MAAM;GAChB,SAAS,MAAM;GACf,QAAQ,MAAM;GACd,QAAQ,MAAM,UAAU,CAAC;EAC3B;EACA,UAAU,OAAO,MAAM,OAAO,YAAY;GACxC,MAAM,MAAM,OAAO;IACjB,OAAO,QAAQ;IACf,QAAQ;IACR,kBAAkB,QAAQ;IAC1B,QAAQ,CAAC,eAAe,KAAK,CAAC;GAChC,CAAC;EACH;CACF,CAAC;AACH"}

package/dist/integrations/linear/reconciliation-config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"reconciliation-config.d.ts","sourceRoot":"","sources":["../../../src/integrations/linear/reconciliation-config.ts"],"names":[],"mappings":"AA4BA,wBAAgB,gCAAgC,IAAI,OAAO,CAO1D;AAED,wBAAgB,iCAAiC,IAAI,MAAM,GAAG,SAAS,CAQtE"}
+{"version":3,"file":"reconciliation-config.d.ts","sourceRoot":"","sources":["../../../src/integrations/linear/reconciliation-config.ts"],"names":[],"mappings":"AA4BA,wBAAgB,gCAAgC,IAAI,OAAO,CAO1D;AAED,wBAAgB,iCAAiC,IAAI,MAAM,GAAG,SAAS,CAWtE"}

package/dist/integrations/linear/reconciliation-config.js.map

@@ -1 +1 @@
-{"version":3,"file":"reconciliation-config.js","names":[],"sources":["../../../src/integrations/linear/reconciliation-config.ts"],"sourcesContent":["import { optionalPositiveInteger } from '../reconciliation-config.js';\n\nfunction reconciliationEnabled(\n  childName: string,\n  childValue: string | undefined,\n  legacyName: string,\n  legacyValue: string | undefined,\n): boolean {\n  return parseBoolean(childName, childValue) ?? parseBoolean(legacyName, legacyValue) ?? true;\n}\n\nfunction optionalPositiveInterval(name: string, value: string | undefined): number | undefined {\n  const interval = optionalPositiveInteger(value);\n  if (value?.trim() && interval === undefined) {\n    console.warn(`[Linear reconciliation] ${name} must be a positive integer; received ${JSON.stringify(value)}.`);\n  }\n  return interval;\n}\n\nfunction parseBoolean(name: string, value: string | undefined): boolean | undefined {\n  const normalized = value?.trim().toLowerCase();\n  if (!normalized) return undefined;\n  if (normalized === 'true') return true;\n  if (normalized === 'false') return false;\n  console.warn(`[Linear reconciliation] ${name} must be true or false; received ${JSON.stringify(value)}.`);\n  return undefined;\n}\n\nexport function linearIssueReconciliationEnabled(): boolean {\n  return reconciliationEnabled(\n    'MASTRACODE_LINEAR_ISSUE_RECONCILE_ENABLED',\n    process.env.MASTRACODE_LINEAR_ISSUE_RECONCILE_ENABLED,\n    'MASTRACODE_LINEAR_RECONCILE_ENABLED',\n    process.env.MASTRACODE_LINEAR_RECONCILE_ENABLED,\n  );\n}\n\nexport function linearIssueReconciliationInterval(): number | undefined {\n  return (\n    optionalPositiveInterval(\n      'MASTRACODE_LINEAR_ISSUE_RECONCILE_INTERVAL_MS',\n      process.env.MASTRACODE_LINEAR_ISSUE_RECONCILE_INTERVAL_MS,\n    ) ??\n    optionalPositiveInterval('MASTRACODE_LINEAR_RECONCILE_INTERVAL_MS', process.env.MASTRACODE_LINEAR_RECONCILE_INTERVAL_MS)\n  );\n}\n"],"mappings":";;AAEA,SAAS,sBACP,WACA,YACA,YACA,aACS;CACT,OAAO,aAAa,WAAW,UAAU,KAAK,aAAa,YAAY,WAAW,KAAK;AACzF;AAEA,SAAS,yBAAyB,MAAc,OAA+C;CAC7F,MAAM,WAAW,wBAAwB,KAAK;CAC9C,IAAI,OAAO,KAAK,KAAK,aAAa,KAAA,GAChC,QAAQ,KAAK,2BAA2B,KAAK,wCAAwC,KAAK,UAAU,KAAK,EAAE,EAAE;CAE/G,OAAO;AACT;AAEA,SAAS,aAAa,MAAc,OAAgD;CAClF,MAAM,aAAa,OAAO,KAAK,CAAC,CAAC,YAAY;CAC7C,IAAI,CAAC,YAAY,OAAO,KAAA;CACxB,IAAI,eAAe,QAAQ,OAAO;CAClC,IAAI,eAAe,SAAS,OAAO;CACnC,QAAQ,KAAK,2BAA2B,KAAK,mCAAmC,KAAK,UAAU,KAAK,EAAE,EAAE;AAE1G;AAEA,SAAgB,mCAA4C;CAC1D,OAAO,sBACL,6CACA,QAAQ,IAAI,2CACZ,uCACA,QAAQ,IAAI,mCACd;AACF;AAEA,SAAgB,oCAAwD;CACtE,OACE,yBACE,iDACA,QAAQ,IAAI,6CACd,KACA,yBAAyB,2CAA2C,QAAQ,IAAI,uCAAuC;AAE3H"}
+{"version":3,"file":"reconciliation-config.js","names":[],"sources":["../../../src/integrations/linear/reconciliation-config.ts"],"sourcesContent":["import { optionalPositiveInteger } from '../reconciliation-config.js';\n\nfunction reconciliationEnabled(\n  childName: string,\n  childValue: string | undefined,\n  legacyName: string,\n  legacyValue: string | undefined,\n): boolean {\n  return parseBoolean(childName, childValue) ?? parseBoolean(legacyName, legacyValue) ?? true;\n}\n\nfunction optionalPositiveInterval(name: string, value: string | undefined): number | undefined {\n  const interval = optionalPositiveInteger(value);\n  if (value?.trim() && interval === undefined) {\n    console.warn(`[Linear reconciliation] ${name} must be a positive integer; received ${JSON.stringify(value)}.`);\n  }\n  return interval;\n}\n\nfunction parseBoolean(name: string, value: string | undefined): boolean | undefined {\n  const normalized = value?.trim().toLowerCase();\n  if (!normalized) return undefined;\n  if (normalized === 'true') return true;\n  if (normalized === 'false') return false;\n  console.warn(`[Linear reconciliation] ${name} must be true or false; received ${JSON.stringify(value)}.`);\n  return undefined;\n}\n\nexport function linearIssueReconciliationEnabled(): boolean {\n  return reconciliationEnabled(\n    'MASTRACODE_LINEAR_ISSUE_RECONCILE_ENABLED',\n    process.env.MASTRACODE_LINEAR_ISSUE_RECONCILE_ENABLED,\n    'MASTRACODE_LINEAR_RECONCILE_ENABLED',\n    process.env.MASTRACODE_LINEAR_RECONCILE_ENABLED,\n  );\n}\n\nexport function linearIssueReconciliationInterval(): number | undefined {\n  return (\n    optionalPositiveInterval(\n      'MASTRACODE_LINEAR_ISSUE_RECONCILE_INTERVAL_MS',\n      process.env.MASTRACODE_LINEAR_ISSUE_RECONCILE_INTERVAL_MS,\n    ) ??\n    optionalPositiveInterval(\n      'MASTRACODE_LINEAR_RECONCILE_INTERVAL_MS',\n      process.env.MASTRACODE_LINEAR_RECONCILE_INTERVAL_MS,\n    )\n  );\n}\n"],"mappings":";;AAEA,SAAS,sBACP,WACA,YACA,YACA,aACS;CACT,OAAO,aAAa,WAAW,UAAU,KAAK,aAAa,YAAY,WAAW,KAAK;AACzF;AAEA,SAAS,yBAAyB,MAAc,OAA+C;CAC7F,MAAM,WAAW,wBAAwB,KAAK;CAC9C,IAAI,OAAO,KAAK,KAAK,aAAa,KAAA,GAChC,QAAQ,KAAK,2BAA2B,KAAK,wCAAwC,KAAK,UAAU,KAAK,EAAE,EAAE;CAE/G,OAAO;AACT;AAEA,SAAS,aAAa,MAAc,OAAgD;CAClF,MAAM,aAAa,OAAO,KAAK,CAAC,CAAC,YAAY;CAC7C,IAAI,CAAC,YAAY,OAAO,KAAA;CACxB,IAAI,eAAe,QAAQ,OAAO;CAClC,IAAI,eAAe,SAAS,OAAO;CACnC,QAAQ,KAAK,2BAA2B,KAAK,mCAAmC,KAAK,UAAU,KAAK,EAAE,EAAE;AAE1G;AAEA,SAAgB,mCAA4C;CAC1D,OAAO,sBACL,6CACA,QAAQ,IAAI,2CACZ,uCACA,QAAQ,IAAI,mCACd;AACF;AAEA,SAAgB,oCAAwD;CACtE,OACE,yBACE,iDACA,QAAQ,IAAI,6CACd,KACA,yBACE,2CACA,QAAQ,IAAI,uCACd;AAEJ"}

package/dist/integrations/linear/routes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../../../src/integrations/linear/routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAIpD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sCAAsC,CAAC;AAC1E,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAE1D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAWrD;;;GAGG;AACH,MAAM,WAAW,wBAAwB;IACvC,mBAAmB,EAAE,OAAO,CAAC;IAC7B,kBAAkB,EAAE,OAAO,CAAC;IAC5B,eAAe,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,wBAAwB;IACvC;;;OAGG;IACH,MAAM,CAAC,EAAE,iBAAiB,CAAC;IAC3B,4FAA4F;IAC5F,IAAI,EAAE,SAAS,CAAC;IAChB;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,iFAAiF;IACjF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;OAIG;IACH,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B;;;OAGG;IACH,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB;;;;OAIG;IACH,QAAQ,CAAC,EAAE;QAAE,IAAI,CAAC,KAAK,EAAE;YAAE,KAAK,EAAE,MAAM,CAAA;SAAE,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,CAAA;KAAE,CAAC;IAClE,mBAAmB,CAAC,EAAE,CAAC,KAAK,EAAE,kBAAkB,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CACvE;AAqFD;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,wBAAwB,GAAG,QAAQ,EAAE,CAwS/E"}
+{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../../../src/integrations/linear/routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAIpD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sCAAsC,CAAC;AAC1E,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAE1D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAWrD;;;GAGG;AACH,MAAM,WAAW,wBAAwB;IACvC,mBAAmB,EAAE,OAAO,CAAC;IAC7B,kBAAkB,EAAE,OAAO,CAAC;IAC5B,eAAe,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,wBAAwB;IACvC;;;OAGG;IACH,MAAM,CAAC,EAAE,iBAAiB,CAAC;IAC3B,4FAA4F;IAC5F,IAAI,EAAE,SAAS,CAAC;IAChB;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,iFAAiF;IACjF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;OAIG;IACH,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B;;;OAGG;IACH,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB;;;;OAIG;IACH,QAAQ,CAAC,EAAE;QAAE,IAAI,CAAC,KAAK,EAAE;YAAE,KAAK,EAAE,MAAM,CAAA;SAAE,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,CAAA;KAAE,CAAC;IAClE,mBAAmB,CAAC,EAAE,CAAC,KAAK,EAAE,kBAAkB,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CACvE;AAiFD;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,wBAAwB,GAAG,QAAQ,EAAE,CA2S/E"}

package/dist/integrations/linear/routes.js

@@ -12,26 +12,18 @@ function loose(c) {
 *
 * A Linear issue carries no Factory project of its own, so without a binding
 * every board view would ingest every selected source's issues into whichever
-* project happened to be on screen. Bound sources win; when the org has no
-* bindings at all we fall back to the full selection for single-project
-* installs, where "which project" is unambiguous.
+* project happened to be on screen. Routing is explicit: a source feeds this
+* project only when its binding names both the project and a board. Returns
+* the bound board per source so the ingest lands cards where the user asked.
 */
-async function scopeSourceIdsToProject({ intake, projects, orgId, factoryProjectId, selectedIds }) {
-	const bound = await intake.listBoundSourceIds({
-		orgId,
-		integrationId: "linear",
-		factoryProjectId
-	});
-	if (bound.length > 0) {
-		const boundSet = new Set(bound);
-		return selectedIds.filter((id) => boundSet.has(id));
-	}
-	if ((await intake.listBindings({
+async function scopeSourceIdsToProject({ intake, orgId, factoryProjectId, selectedIds }) {
+	const selected = new Set(selectedIds);
+	const intakeBoards = {};
+	for (const binding of await intake.listBindings({
 		orgId,
 		integrationId: "linear"
-	})).length > 0) return [];
-	if (!projects) return [];
-	return (await projects.list({ orgId })).length <= 1 ? selectedIds : [];
+	})) if (binding.factoryProjectId === factoryProjectId && binding.board && selected.has(binding.sourceId)) intakeBoards[binding.sourceId] = binding.board;
+	return intakeBoards;
 }
 /**
 * Resolve the org-scoped tenant for a Linear request. The connection is
@@ -217,13 +209,13 @@ function buildLinearRoutes(options) {
 				message: "Linear intake is turned off in Settings."
 			}, 404);
 			const selectedIds = selection.sourceIds ?? [];
-			const projectIds = factoryProjectId ? await scopeSourceIdsToProject({
+			const intakeBoards = factoryProjectId ? await scopeSourceIdsToProject({
 				intake,
-				projects: options.projects,
 				orgId: resolved.tenant.orgId,
 				factoryProjectId,
 				selectedIds
-			}) : selectedIds;
+			}) : null;
+			const projectIds = intakeBoards ? Object.keys(intakeBoards) : selectedIds;
 			if (projectIds.length === 0) return c.json({
 				issues: [],
 				nextCursor: null
@@ -251,13 +243,15 @@ function buildLinearRoutes(options) {
 					team: issue.source,
 					labels: issue.labels,
 					createdAt: issue.createdAt,
-					updatedAt: issue.updatedAt
+					updatedAt: issue.updatedAt,
+					sourceId: issue.sourceId ?? null
 				}));
-				if (factoryProjectId && options.ingestFactoryIssues) await options.ingestFactoryIssues({
+				if (factoryProjectId && intakeBoards && options.ingestFactoryIssues) await options.ingestFactoryIssues({
 					orgId: resolved.tenant.orgId,
 					userId: resolved.tenant.userId,
 					factoryProjectId,
-					issues: issuePayload
+					issues: issuePayload,
+					intakeBoards
 				});
 				return c.json({
 					issues: issuePayload,
@@ -293,13 +287,12 @@ function buildLinearRoutes(options) {
 				error: "linear_intake_disabled",
 				message: "Linear intake is turned off in Settings."
 			}, 404);
-			const projectIds = await scopeSourceIdsToProject({
+			const projectIds = Object.keys(await scopeSourceIdsToProject({
 				intake,
-				projects: options.projects,
 				orgId: resolved.tenant.orgId,
 				factoryProjectId,
 				selectedIds: selection.sourceIds ?? []
-			});
+			}));
 			if (projectIds.length === 0) return c.json({ error: "issue_not_found" }, 404);
 			try {
 				const accessToken = await linear.getFreshAccessToken(connection);

package/dist/integrations/linear/routes.js.map

@@ -1 +1 @@
-{"version":3,"file":"routes.js","names":[],"sources":["../../../src/integrations/linear/routes.ts"],"sourcesContent":["/**\n * Mastra `apiRoutes` for the Linear intake feature.\n *\n * Registered alongside the other `/web/*` routes, behind the WorkOS auth gate.\n * Mirrors the GitHub module: every route re-resolves the authenticated user\n * from the request cookie and scopes all rows by the caller's WorkOS org, so an\n * org can only ever see its own Linear connection and issues.\n *\n * When the feature is disabled (`isLinearFeatureEnabled()` false),\n * `buildLinearRoutes` returns only `GET /web/linear/status`, which reports\n * `enabled:false` so the SPA can cleanly hide all Linear UI.\n */\n\nimport type { ApiRoute } from '@mastra/core/server';\nimport { registerApiRoute } from '@mastra/core/server';\nimport type { Context } from 'hono';\n\nimport type { RouteAuth } from '../../routes/route.js';\nimport type { StateSigner } from '../../state-signing.js';\nimport type { IntakeStorage } from '../../storage/domains/intake/base.js';\nimport type { LinearIntegration } from './integration.js';\nimport { LinearReauthRequiredError } from './integration.js';\nimport type { LinearRulesIngress } from './rules.js';\n\ntype RouteContext = Context;\n\nconst UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;\n\n/** Erase a route handler's path-parameterized context to a plain `Context`. */\nfunction loose(c: unknown): RouteContext {\n  return c as RouteContext;\n}\n\n/**\n * Non-secret diagnostic snapshot of every Linear feature gate, mirroring the\n * GitHub diagnostics shape. Only booleans — never values.\n */\nexport interface LinearFeatureDiagnostics {\n  linearAppConfigured: boolean;\n  factoryAuthEnabled: boolean;\n  appDbConfigured: boolean;\n}\n\nexport interface MountLinearRoutesOptions {\n  /**\n   * The integration instance providing OAuth + GraphQL access. Required for\n   * everything beyond the disabled `status` route.\n   */\n  linear?: LinearIntegration;\n  /** Host auth seam. Linear connections are org-owned, so the feature is inert without it. */\n  auth: RouteAuth;\n  /**\n   * Absolute base URL of the web server (e.g. `http://localhost:4111`), used to\n   * build the OAuth redirect URI when one isn't explicitly configured.\n   */\n  baseUrl?: string;\n  /** Explicit OAuth callback URI; defaults to `<baseUrl>/auth/linear/callback`. */\n  redirectUri?: string;\n  /**\n   * Shared OAuth `state` signer (created once per boot by the factory).\n   * Required for the connect/callback flow; when absent, only the disabled\n   * `status` route is served.\n   */\n  stateSigner?: StateSigner;\n  /**\n   * Cross-integration intake selection domain. Required for the issues route's\n   * project filter; when absent, only the disabled `status` route is served.\n   */\n  intake?: IntakeStorage;\n  /**\n   * Factory project domain, used to keep single-project installs working\n   * without any source binding. When absent, unbound sources are treated as\n   * belonging to no project.\n   */\n  projects?: { list(input: { orgId: string }): Promise<unknown[]> };\n  ingestFactoryIssues?: (input: LinearRulesIngress) => Promise<unknown>;\n}\n\n/**\n * Narrow the caller's selected Linear sources to the ones that feed this\n * Factory project.\n *\n * A Linear issue carries no Factory project of its own, so without a binding\n * every board view would ingest every selected source's issues into whichever\n * project happened to be on screen. Bound sources win; when the org has no\n * bindings at all we fall back to the full selection for single-project\n * installs, where \"which project\" is unambiguous.\n */\nasync function scopeSourceIdsToProject({\n  intake,\n  projects,\n  orgId,\n  factoryProjectId,\n  selectedIds,\n}: {\n  intake: IntakeStorage;\n  projects: MountLinearRoutesOptions['projects'];\n  orgId: string;\n  factoryProjectId: string;\n  selectedIds: string[];\n}): Promise<string[]> {\n  const bound = await intake.listBoundSourceIds({ orgId, integrationId: 'linear', factoryProjectId });\n  if (bound.length > 0) {\n    const boundSet = new Set(bound);\n    return selectedIds.filter(id => boundSet.has(id));\n  }\n  const orgBindings = await intake.listBindings({ orgId, integrationId: 'linear' });\n  if (orgBindings.length > 0) return [];\n  if (!projects) return [];\n  const all = await projects.list({ orgId });\n  return all.length <= 1 ? selectedIds : [];\n}\n\n/**\n * Resolve the org-scoped tenant for a Linear request. The connection is\n * org-owned, so it requires both a signed-in user and an organization — same\n * tenancy rules as the GitHub routes.\n */\nasync function resolveOrgTenant(\n  c: RouteContext,\n  auth: RouteAuth,\n): Promise<{ tenant: { orgId: string; userId: string } } | { response: Response }> {\n  await auth.ensureUser(c);\n  const tenant = auth.tenant(c);\n  if (!tenant) return { response: c.json({ error: 'unauthorized' }, 401) };\n  if (!tenant.orgId) {\n    return {\n      response: c.json(\n        {\n          error: 'organization_required',\n          message: 'Linear intake requires an organization. Personal accounts cannot connect Linear.',\n        },\n        403,\n      ),\n    };\n  }\n  return { tenant: { orgId: tenant.orgId, userId: tenant.userId } };\n}\n\n/**\n * Validate an opaque Linear pagination cursor from the query string. Cursors\n * are server-issued (`pageInfo.endCursor`), so anything outside a conservative\n * charset/length is rejected rather than forwarded to Linear.\n */\nfunction parseAfterCursor(raw: string | undefined): string | undefined | null {\n  if (raw === undefined || raw === '') return undefined;\n  if (raw.length > 512 || !/^[\\w+/=.:-]+$/.test(raw)) return null;\n  return raw;\n}\n\n/** Human issue key as it appears on a card (`ENG-123`). */\nconst ISSUE_IDENTIFIER_RE = /^[A-Za-z][A-Za-z0-9]{0,9}-\\d{1,7}$/;\n\n/** Map a Linear read failure to the API response for the SPA. */\nfunction linearFetchError(c: RouteContext, err: unknown) {\n  if (err instanceof LinearReauthRequiredError || (err as { status?: number }).status === 401) {\n    return c.json({ error: 'linear_reauth_required', message: new LinearReauthRequiredError().message }, 409);\n  }\n  return c.json({ error: 'linear_fetch_failed', message: err instanceof Error ? err.message : String(err) }, 502);\n}\n\n/**\n * Build the Linear routes as Mastra `apiRoutes`. When the feature is disabled,\n * returns only the `status` route so the SPA can detect the disabled state.\n */\nexport function buildLinearRoutes(options: MountLinearRoutesOptions): ApiRoute[] {\n  const routes: ApiRoute[] = [];\n  const { linear, auth, stateSigner, intake } = options;\n  const enabled = Boolean(linear) && auth.enabled();\n  const diagnostics = (): LinearFeatureDiagnostics => ({\n    linearAppConfigured: Boolean(linear),\n    factoryAuthEnabled: auth.enabled(),\n    appDbConfigured: true,\n  });\n\n  // The status route is always registered so the SPA can detect the disabled state.\n  routes.push(\n    registerApiRoute('/web/linear/status', {\n      method: 'GET',\n      requiresAuth: false,\n      handler: async c => {\n        if (!enabled || !linear || !stateSigner) {\n          return c.json({\n            enabled: false,\n            connected: false,\n            workspace: null,\n            reason: 'missing_config',\n            diagnostics: diagnostics(),\n          });\n        }\n        await auth.ensureUser(loose(c));\n        const tenant = auth.tenant(loose(c));\n        if (!tenant) return c.json({ error: 'unauthorized', reason: 'auth_required' }, 401);\n\n        if (!tenant.orgId) {\n          return c.json({\n            enabled: true,\n            organizationRequired: true,\n            connected: false,\n            workspace: null,\n            reason: 'organization_required',\n            diagnostics: diagnostics(),\n          });\n        }\n\n        const connection = await linear.loadConnection(tenant.orgId);\n        return c.json({\n          enabled: true,\n          connected: Boolean(connection),\n          workspace: connection ? { name: connection.workspaceName, urlKey: connection.workspaceUrlKey } : null,\n          reason: connection ? 'ready' : 'not_connected',\n          diagnostics: diagnostics(),\n        });\n      },\n    }),\n  );\n\n  // Without the integration instance or a state signer the connect/callback\n  // flow cannot talk to Linear or bind the OAuth round-trip to a tenant —\n  // serve only the disabled `status` route (mirrors the feature gate).\n  if (!enabled || !linear || !stateSigner || !intake) {\n    return routes;\n  }\n\n  const redirectUri = options.redirectUri ?? `${(options.baseUrl ?? '').replace(/\\/$/, '')}/auth/linear/callback`;\n\n  // ── Connect: send the user to Linear's OAuth consent screen ─────────────\n  routes.push(\n    registerApiRoute('/auth/linear/connect', {\n      method: 'GET',\n      requiresAuth: false,\n      handler: async c => {\n        const resolved = await resolveOrgTenant(loose(c), auth);\n        if ('response' in resolved) return resolved.response;\n        const state = stateSigner.sign(resolved.tenant.orgId, resolved.tenant.userId);\n        return c.redirect(linear.buildAuthorizeUrl(state, redirectUri));\n      },\n    }),\n  );\n\n  // ── Callback: exchange the code, persist the connection for the org ─────\n  routes.push(\n    registerApiRoute('/auth/linear/callback', {\n      method: 'GET',\n      requiresAuth: false,\n      handler: async c => {\n        const resolved = await resolveOrgTenant(loose(c), auth);\n        if ('response' in resolved) return resolved.response;\n        const { orgId, userId } = resolved.tenant;\n\n        // CSRF / cross-tenant linking protection: the signed state must belong\n        // to the same logged-in user *and* their current org.\n        const stateTenant = stateSigner.verify(c.req.query('state'));\n        if (!stateTenant || stateTenant.userId !== userId || stateTenant.orgId !== orgId) {\n          console.warn('[Linear] OAuth callback rejected: state/tenant mismatch.');\n          return c.redirect('/?linear=error');\n        }\n\n        const code = c.req.query('code');\n        if (!code) {\n          // User denied consent (or Linear returned an error).\n          return c.redirect('/?linear=error');\n        }\n\n        try {\n          const tokens = await linear.exchangeOAuthCode(code, redirectUri);\n          const workspace = await linear.fetchWorkspace(tokens.accessToken);\n          await linear.upsertConnection({\n            orgId,\n            userId,\n            accessToken: tokens.accessToken,\n            refreshToken: tokens.refreshToken,\n            expiresAt: tokens.expiresAt,\n            scope: tokens.scope,\n            workspaceName: workspace.name,\n            workspaceUrlKey: workspace.urlKey,\n          });\n        } catch (error) {\n          console.warn(`[Linear] OAuth callback failed to persist connection for org ${orgId}.`, error);\n          return c.redirect('/?linear=error');\n        }\n\n        return c.redirect('/?linear=connected');\n      },\n    }),\n  );\n\n  // ── List the workspace's projects (Settings intake-source picker) ───────\n  routes.push(\n    registerApiRoute('/web/linear/projects', {\n      method: 'GET',\n      requiresAuth: false,\n      handler: async c => {\n        const resolved = await resolveOrgTenant(loose(c), auth);\n        if ('response' in resolved) return resolved.response;\n\n        const connection = await linear.loadConnection(resolved.tenant.orgId);\n        if (!connection) {\n          return c.json({ error: 'linear_not_connected', message: 'Connect Linear to list Linear projects.' }, 409);\n        }\n\n        try {\n          const accessToken = await linear.getFreshAccessToken(connection);\n          const projects = await linear.listProjects(accessToken);\n          return c.json({ projects });\n        } catch (err) {\n          return linearFetchError(loose(c), err);\n        }\n      },\n    }),\n  );\n\n  // ── List the workspace's active issues (cursor-paged) ───────────────────\n  // Respects the caller's intake config: disabled Linear intake 404s the\n  // source, and an explicit project selection narrows the issue filter.\n  routes.push(\n    registerApiRoute('/web/linear/issues', {\n      method: 'GET',\n      requiresAuth: false,\n      handler: async c => {\n        const resolved = await resolveOrgTenant(loose(c), auth);\n        if ('response' in resolved) return resolved.response;\n\n        const after = parseAfterCursor(c.req.query('after'));\n        if (after === null) return c.json({ error: 'invalid_cursor' }, 400);\n        const factoryProjectId = c.req.query('factoryProjectId');\n        if (factoryProjectId && !UUID_RE.test(factoryProjectId)) {\n          return c.json({ error: 'invalid_factory_project_id' }, 400);\n        }\n\n        const connection = await linear.loadConnection(resolved.tenant.orgId);\n        if (!connection) {\n          return c.json({ error: 'linear_not_connected', message: 'Connect Linear to see intake issues.' }, 409);\n        }\n\n        await intake.ensureReady();\n        const config = await intake.getConfig({\n          orgId: resolved.tenant.orgId,\n          userId: resolved.tenant.userId,\n          integrationIds: ['linear'],\n        });\n        const selection = config.linear!;\n        if (!selection.enabled) {\n          return c.json({ error: 'linear_intake_disabled', message: 'Linear intake is turned off in Settings.' }, 404);\n        }\n\n        // No projects selected means nothing is synced — don't fan out to Linear.\n        const selectedIds = selection.sourceIds ?? [];\n        // A board request is also an ingest, so it only ever sees the sources\n        // bound to that Factory project.\n        const projectIds = factoryProjectId\n          ? await scopeSourceIdsToProject({\n              intake,\n              projects: options.projects,\n              orgId: resolved.tenant.orgId,\n              factoryProjectId,\n              selectedIds,\n            })\n          : selectedIds;\n        if (projectIds.length === 0) {\n          return c.json({ issues: [], nextCursor: null });\n        }\n\n        try {\n          const accessToken = await linear.getFreshAccessToken(connection);\n          const { issues, nextCursor } = await linear.intake.listIssues({\n            connection: { type: 'oauth', accessToken },\n            sourceIds: projectIds,\n            cursor: after,\n          });\n          const issuePayload = issues.map(issue => ({\n            id: issue.id,\n            identifier: issue.identifier,\n            title: issue.title,\n            url: issue.url,\n            state: issue.state ?? '',\n            stateType: issue.stateType ?? '',\n            priorityLabel: issue.priority ?? '',\n            assignee: issue.assignee,\n            creator: issue.author,\n            team: issue.source,\n            labels: issue.labels,\n            createdAt: issue.createdAt,\n            updatedAt: issue.updatedAt,\n          }));\n          if (factoryProjectId && options.ingestFactoryIssues) {\n            await options.ingestFactoryIssues({\n              orgId: resolved.tenant.orgId,\n              userId: resolved.tenant.userId,\n              factoryProjectId,\n              issues: issuePayload,\n            });\n          }\n          return c.json({ issues: issuePayload, nextCursor });\n        } catch (err) {\n          return linearFetchError(loose(c), err);\n        }\n      },\n    }),\n  );\n\n  routes.push(\n    registerApiRoute('/web/linear/issues/:identifier', {\n      method: 'GET',\n      requiresAuth: false,\n      handler: async c => {\n        const resolved = await resolveOrgTenant(loose(c), auth);\n        if ('response' in resolved) return resolved.response;\n\n        const identifier = c.req.param('identifier');\n        if (!ISSUE_IDENTIFIER_RE.test(identifier)) return c.json({ error: 'invalid_identifier' }, 400);\n        const factoryProjectId = c.req.query('factoryProjectId');\n        if (!factoryProjectId || !UUID_RE.test(factoryProjectId)) {\n          return c.json({ error: 'invalid_factory_project_id' }, 400);\n        }\n\n        const connection = await linear.loadConnection(resolved.tenant.orgId);\n        if (!connection) {\n          return c.json({ error: 'linear_not_connected', message: 'Connect Linear to see intake issues.' }, 409);\n        }\n\n        await intake.ensureReady();\n        const config = await intake.getConfig({\n          orgId: resolved.tenant.orgId,\n          userId: resolved.tenant.userId,\n          integrationIds: ['linear'],\n        });\n        const selection = config.linear!;\n        if (!selection.enabled) {\n          return c.json({ error: 'linear_intake_disabled', message: 'Linear intake is turned off in Settings.' }, 404);\n        }\n        const projectIds = await scopeSourceIdsToProject({\n          intake,\n          projects: options.projects,\n          orgId: resolved.tenant.orgId,\n          factoryProjectId,\n          selectedIds: selection.sourceIds ?? [],\n        });\n        if (projectIds.length === 0) return c.json({ error: 'issue_not_found' }, 404);\n\n        try {\n          const accessToken = await linear.getFreshAccessToken(connection);\n          const issue = await linear.fetchIssueDetail(accessToken, identifier);\n          // Reads exactly like an issue that doesn't exist.\n          if (!issue || issue.projectId === null || !projectIds.includes(issue.projectId)) {\n            return c.json({ error: 'issue_not_found' }, 404);\n          }\n          return c.json({\n            identifier: issue.identifier,\n            title: issue.title,\n            url: issue.url,\n            description: issue.description,\n          });\n        } catch (err) {\n          return linearFetchError(loose(c), err);\n        }\n      },\n    }),\n  );\n\n  return routes;\n}\n"],"mappings":";;;AA0BA,MAAM,UAAU;;AAGhB,SAAS,MAAM,GAA0B;CACvC,OAAO;AACT;;;;;;;;;;;AAyDA,eAAe,wBAAwB,EACrC,QACA,UACA,OACA,kBACA,eAOoB;CACpB,MAAM,QAAQ,MAAM,OAAO,mBAAmB;EAAE;EAAO,eAAe;EAAU;CAAiB,CAAC;CAClG,IAAI,MAAM,SAAS,GAAG;EACpB,MAAM,WAAW,IAAI,IAAI,KAAK;EAC9B,OAAO,YAAY,QAAO,OAAM,SAAS,IAAI,EAAE,CAAC;CAClD;CAEA,KAAI,MADsB,OAAO,aAAa;EAAE;EAAO,eAAe;CAAS,CAAC,EAAA,CAChE,SAAS,GAAG,OAAO,CAAC;CACpC,IAAI,CAAC,UAAU,OAAO,CAAC;CAEvB,QAAO,MADW,SAAS,KAAK,EAAE,MAAM,CAAC,EAAA,CAC9B,UAAU,IAAI,cAAc,CAAC;AAC1C;;;;;;AAOA,eAAe,iBACb,GACA,MACiF;CACjF,MAAM,KAAK,WAAW,CAAC;CACvB,MAAM,SAAS,KAAK,OAAO,CAAC;CAC5B,IAAI,CAAC,QAAQ,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,eAAe,GAAG,GAAG,EAAE;CACvE,IAAI,CAAC,OAAO,OACV,OAAO,EACL,UAAU,EAAE,KACV;EACE,OAAO;EACP,SAAS;CACX,GACA,GACF,EACF;CAEF,OAAO,EAAE,QAAQ;EAAE,OAAO,OAAO;EAAO,QAAQ,OAAO;CAAO,EAAE;AAClE;;;;;;AAOA,SAAS,iBAAiB,KAAoD;CAC5E,IAAI,QAAQ,KAAA,KAAa,QAAQ,IAAI,OAAO,KAAA;CAC5C,IAAI,IAAI,SAAS,OAAO,CAAC,gBAAgB,KAAK,GAAG,GAAG,OAAO;CAC3D,OAAO;AACT;;AAGA,MAAM,sBAAsB;;AAG5B,SAAS,iBAAiB,GAAiB,KAAc;CACvD,IAAI,eAAe,6BAA8B,IAA4B,WAAW,KACtF,OAAO,EAAE,KAAK;EAAE,OAAO;EAA0B,SAAS,IAAI,0BAA0B,CAAC,CAAC;CAAQ,GAAG,GAAG;CAE1G,OAAO,EAAE,KAAK;EAAE,OAAO;EAAuB,SAAS,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;CAAE,GAAG,GAAG;AAChH;;;;;AAMA,SAAgB,kBAAkB,SAA+C;CAC/E,MAAM,SAAqB,CAAC;CAC5B,MAAM,EAAE,QAAQ,MAAM,aAAa,WAAW;CAC9C,MAAM,UAAU,QAAQ,MAAM,KAAK,KAAK,QAAQ;CAChD,MAAM,qBAA+C;EACnD,qBAAqB,QAAQ,MAAM;EACnC,oBAAoB,KAAK,QAAQ;EACjC,iBAAiB;CACnB;CAGA,OAAO,KACL,iBAAiB,sBAAsB;EACrC,QAAQ;EACR,cAAc;EACd,SAAS,OAAM,MAAK;GAClB,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,aAC1B,OAAO,EAAE,KAAK;IACZ,SAAS;IACT,WAAW;IACX,WAAW;IACX,QAAQ;IACR,aAAa,YAAY;GAC3B,CAAC;GAEH,MAAM,KAAK,WAAW,MAAM,CAAC,CAAC;GAC9B,MAAM,SAAS,KAAK,OAAO,MAAM,CAAC,CAAC;GACnC,IAAI,CAAC,QAAQ,OAAO,EAAE,KAAK;IAAE,OAAO;IAAgB,QAAQ;GAAgB,GAAG,GAAG;GAElF,IAAI,CAAC,OAAO,OACV,OAAO,EAAE,KAAK;IACZ,SAAS;IACT,sBAAsB;IACtB,WAAW;IACX,WAAW;IACX,QAAQ;IACR,aAAa,YAAY;GAC3B,CAAC;GAGH,MAAM,aAAa,MAAM,OAAO,eAAe,OAAO,KAAK;GAC3D,OAAO,EAAE,KAAK;IACZ,SAAS;IACT,WAAW,QAAQ,UAAU;IAC7B,WAAW,aAAa;KAAE,MAAM,WAAW;KAAe,QAAQ,WAAW;IAAgB,IAAI;IACjG,QAAQ,aAAa,UAAU;IAC/B,aAAa,YAAY;GAC3B,CAAC;EACH;CACF,CAAC,CACH;CAKA,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,eAAe,CAAC,QAC1C,OAAO;CAGT,MAAM,cAAc,QAAQ,eAAe,IAAI,QAAQ,WAAW,GAAA,CAAI,QAAQ,OAAO,EAAE,EAAE;CAGzF,OAAO,KACL,iBAAiB,wBAAwB;EACvC,QAAQ;EACR,cAAc;EACd,SAAS,OAAM,MAAK;GAClB,MAAM,WAAW,MAAM,iBAAiB,MAAM,CAAC,GAAG,IAAI;GACtD,IAAI,cAAc,UAAU,OAAO,SAAS;GAC5C,MAAM,QAAQ,YAAY,KAAK,SAAS,OAAO,OAAO,SAAS,OAAO,MAAM;GAC5E,OAAO,EAAE,SAAS,OAAO,kBAAkB,OAAO,WAAW,CAAC;EAChE;CACF,CAAC,CACH;CAGA,OAAO,KACL,iBAAiB,yBAAyB;EACxC,QAAQ;EACR,cAAc;EACd,SAAS,OAAM,MAAK;GAClB,MAAM,WAAW,MAAM,iBAAiB,MAAM,CAAC,GAAG,IAAI;GACtD,IAAI,cAAc,UAAU,OAAO,SAAS;GAC5C,MAAM,EAAE,OAAO,WAAW,SAAS;GAInC,MAAM,cAAc,YAAY,OAAO,EAAE,IAAI,MAAM,OAAO,CAAC;GAC3D,IAAI,CAAC,eAAe,YAAY,WAAW,UAAU,YAAY,UAAU,OAAO;IAChF,QAAQ,KAAK,0DAA0D;IACvE,OAAO,EAAE,SAAS,gBAAgB;GACpC;GAEA,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM;GAC/B,IAAI,CAAC,MAEH,OAAO,EAAE,SAAS,gBAAgB;GAGpC,IAAI;IACF,MAAM,SAAS,MAAM,OAAO,kBAAkB,MAAM,WAAW;IAC/D,MAAM,YAAY,MAAM,OAAO,eAAe,OAAO,WAAW;IAChE,MAAM,OAAO,iBAAiB;KAC5B;KACA;KACA,aAAa,OAAO;KACpB,cAAc,OAAO;KACrB,WAAW,OAAO;KAClB,OAAO,OAAO;KACd,eAAe,UAAU;KACzB,iBAAiB,UAAU;IAC7B,CAAC;GACH,SAAS,OAAO;IACd,QAAQ,KAAK,gEAAgE,MAAM,IAAI,KAAK;IAC5F,OAAO,EAAE,SAAS,gBAAgB;GACpC;GAEA,OAAO,EAAE,SAAS,oBAAoB;EACxC;CACF,CAAC,CACH;CAGA,OAAO,KACL,iBAAiB,wBAAwB;EACvC,QAAQ;EACR,cAAc;EACd,SAAS,OAAM,MAAK;GAClB,MAAM,WAAW,MAAM,iBAAiB,MAAM,CAAC,GAAG,IAAI;GACtD,IAAI,cAAc,UAAU,OAAO,SAAS;GAE5C,MAAM,aAAa,MAAM,OAAO,eAAe,SAAS,OAAO,KAAK;GACpE,IAAI,CAAC,YACH,OAAO,EAAE,KAAK;IAAE,OAAO;IAAwB,SAAS;GAA0C,GAAG,GAAG;GAG1G,IAAI;IACF,MAAM,cAAc,MAAM,OAAO,oBAAoB,UAAU;IAC/D,MAAM,WAAW,MAAM,OAAO,aAAa,WAAW;IACtD,OAAO,EAAE,KAAK,EAAE,SAAS,CAAC;GAC5B,SAAS,KAAK;IACZ,OAAO,iBAAiB,MAAM,CAAC,GAAG,GAAG;GACvC;EACF;CACF,CAAC,CACH;CAKA,OAAO,KACL,iBAAiB,sBAAsB;EACrC,QAAQ;EACR,cAAc;EACd,SAAS,OAAM,MAAK;GAClB,MAAM,WAAW,MAAM,iBAAiB,MAAM,CAAC,GAAG,IAAI;GACtD,IAAI,cAAc,UAAU,OAAO,SAAS;GAE5C,MAAM,QAAQ,iBAAiB,EAAE,IAAI,MAAM,OAAO,CAAC;GACnD,IAAI,UAAU,MAAM,OAAO,EAAE,KAAK,EAAE,OAAO,iBAAiB,GAAG,GAAG;GAClE,MAAM,mBAAmB,EAAE,IAAI,MAAM,kBAAkB;GACvD,IAAI,oBAAoB,CAAC,QAAQ,KAAK,gBAAgB,GACpD,OAAO,EAAE,KAAK,EAAE,OAAO,6BAA6B,GAAG,GAAG;GAG5D,MAAM,aAAa,MAAM,OAAO,eAAe,SAAS,OAAO,KAAK;GACpE,IAAI,CAAC,YACH,OAAO,EAAE,KAAK;IAAE,OAAO;IAAwB,SAAS;GAAuC,GAAG,GAAG;GAGvG,MAAM,OAAO,YAAY;GAMzB,MAAM,aAAY,MALG,OAAO,UAAU;IACpC,OAAO,SAAS,OAAO;IACvB,QAAQ,SAAS,OAAO;IACxB,gBAAgB,CAAC,QAAQ;GAC3B,CAAC,EAAA,CACwB;GACzB,IAAI,CAAC,UAAU,SACb,OAAO,EAAE,KAAK;IAAE,OAAO;IAA0B,SAAS;GAA2C,GAAG,GAAG;GAI7G,MAAM,cAAc,UAAU,aAAa,CAAC;GAG5C,MAAM,aAAa,mBACf,MAAM,wBAAwB;IAC5B;IACA,UAAU,QAAQ;IAClB,OAAO,SAAS,OAAO;IACvB;IACA;GACF,CAAC,IACD;GACJ,IAAI,WAAW,WAAW,GACxB,OAAO,EAAE,KAAK;IAAE,QAAQ,CAAC;IAAG,YAAY;GAAK,CAAC;GAGhD,IAAI;IACF,MAAM,cAAc,MAAM,OAAO,oBAAoB,UAAU;IAC/D,MAAM,EAAE,QAAQ,eAAe,MAAM,OAAO,OAAO,WAAW;KAC5D,YAAY;MAAE,MAAM;MAAS;KAAY;KACzC,WAAW;KACX,QAAQ;IACV,CAAC;IACD,MAAM,eAAe,OAAO,KAAI,WAAU;KACxC,IAAI,MAAM;KACV,YAAY,MAAM;KAClB,OAAO,MAAM;KACb,KAAK,MAAM;KACX,OAAO,MAAM,SAAS;KACtB,WAAW,MAAM,aAAa;KAC9B,eAAe,MAAM,YAAY;KACjC,UAAU,MAAM;KAChB,SAAS,MAAM;KACf,MAAM,MAAM;KACZ,QAAQ,MAAM;KACd,WAAW,MAAM;KACjB,WAAW,MAAM;IACnB,EAAE;IACF,IAAI,oBAAoB,QAAQ,qBAC9B,MAAM,QAAQ,oBAAoB;KAChC,OAAO,SAAS,OAAO;KACvB,QAAQ,SAAS,OAAO;KACxB;KACA,QAAQ;IACV,CAAC;IAEH,OAAO,EAAE,KAAK;KAAE,QAAQ;KAAc;IAAW,CAAC;GACpD,SAAS,KAAK;IACZ,OAAO,iBAAiB,MAAM,CAAC,GAAG,GAAG;GACvC;EACF;CACF,CAAC,CACH;CAEA,OAAO,KACL,iBAAiB,kCAAkC;EACjD,QAAQ;EACR,cAAc;EACd,SAAS,OAAM,MAAK;GAClB,MAAM,WAAW,MAAM,iBAAiB,MAAM,CAAC,GAAG,IAAI;GACtD,IAAI,cAAc,UAAU,OAAO,SAAS;GAE5C,MAAM,aAAa,EAAE,IAAI,MAAM,YAAY;GAC3C,IAAI,CAAC,oBAAoB,KAAK,UAAU,GAAG,OAAO,EAAE,KAAK,EAAE,OAAO,qBAAqB,GAAG,GAAG;GAC7F,MAAM,mBAAmB,EAAE,IAAI,MAAM,kBAAkB;GACvD,IAAI,CAAC,oBAAoB,CAAC,QAAQ,KAAK,gBAAgB,GACrD,OAAO,EAAE,KAAK,EAAE,OAAO,6BAA6B,GAAG,GAAG;GAG5D,MAAM,aAAa,MAAM,OAAO,eAAe,SAAS,OAAO,KAAK;GACpE,IAAI,CAAC,YACH,OAAO,EAAE,KAAK;IAAE,OAAO;IAAwB,SAAS;GAAuC,GAAG,GAAG;GAGvG,MAAM,OAAO,YAAY;GAMzB,MAAM,aAAY,MALG,OAAO,UAAU;IACpC,OAAO,SAAS,OAAO;IACvB,QAAQ,SAAS,OAAO;IACxB,gBAAgB,CAAC,QAAQ;GAC3B,CAAC,EAAA,CACwB;GACzB,IAAI,CAAC,UAAU,SACb,OAAO,EAAE,KAAK;IAAE,OAAO;IAA0B,SAAS;GAA2C,GAAG,GAAG;GAE7G,MAAM,aAAa,MAAM,wBAAwB;IAC/C;IACA,UAAU,QAAQ;IAClB,OAAO,SAAS,OAAO;IACvB;IACA,aAAa,UAAU,aAAa,CAAC;GACvC,CAAC;GACD,IAAI,WAAW,WAAW,GAAG,OAAO,EAAE,KAAK,EAAE,OAAO,kBAAkB,GAAG,GAAG;GAE5E,IAAI;IACF,MAAM,cAAc,MAAM,OAAO,oBAAoB,UAAU;IAC/D,MAAM,QAAQ,MAAM,OAAO,iBAAiB,aAAa,UAAU;IAEnE,IAAI,CAAC,SAAS,MAAM,cAAc,QAAQ,CAAC,WAAW,SAAS,MAAM,SAAS,GAC5E,OAAO,EAAE,KAAK,EAAE,OAAO,kBAAkB,GAAG,GAAG;IAEjD,OAAO,EAAE,KAAK;KACZ,YAAY,MAAM;KAClB,OAAO,MAAM;KACb,KAAK,MAAM;KACX,aAAa,MAAM;IACrB,CAAC;GACH,SAAS,KAAK;IACZ,OAAO,iBAAiB,MAAM,CAAC,GAAG,GAAG;GACvC;EACF;CACF,CAAC,CACH;CAEA,OAAO;AACT"}
+{"version":3,"file":"routes.js","names":[],"sources":["../../../src/integrations/linear/routes.ts"],"sourcesContent":["/**\n * Mastra `apiRoutes` for the Linear intake feature.\n *\n * Registered alongside the other `/web/*` routes, behind the WorkOS auth gate.\n * Mirrors the GitHub module: every route re-resolves the authenticated user\n * from the request cookie and scopes all rows by the caller's WorkOS org, so an\n * org can only ever see its own Linear connection and issues.\n *\n * When the feature is disabled (`isLinearFeatureEnabled()` false),\n * `buildLinearRoutes` returns only `GET /web/linear/status`, which reports\n * `enabled:false` so the SPA can cleanly hide all Linear UI.\n */\n\nimport type { ApiRoute } from '@mastra/core/server';\nimport { registerApiRoute } from '@mastra/core/server';\nimport type { Context } from 'hono';\n\nimport type { RouteAuth } from '../../routes/route.js';\nimport type { StateSigner } from '../../state-signing.js';\nimport type { IntakeStorage } from '../../storage/domains/intake/base.js';\nimport type { LinearIntegration } from './integration.js';\nimport { LinearReauthRequiredError } from './integration.js';\nimport type { LinearRulesIngress } from './rules.js';\n\ntype RouteContext = Context;\n\nconst UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;\n\n/** Erase a route handler's path-parameterized context to a plain `Context`. */\nfunction loose(c: unknown): RouteContext {\n  return c as RouteContext;\n}\n\n/**\n * Non-secret diagnostic snapshot of every Linear feature gate, mirroring the\n * GitHub diagnostics shape. Only booleans — never values.\n */\nexport interface LinearFeatureDiagnostics {\n  linearAppConfigured: boolean;\n  factoryAuthEnabled: boolean;\n  appDbConfigured: boolean;\n}\n\nexport interface MountLinearRoutesOptions {\n  /**\n   * The integration instance providing OAuth + GraphQL access. Required for\n   * everything beyond the disabled `status` route.\n   */\n  linear?: LinearIntegration;\n  /** Host auth seam. Linear connections are org-owned, so the feature is inert without it. */\n  auth: RouteAuth;\n  /**\n   * Absolute base URL of the web server (e.g. `http://localhost:4111`), used to\n   * build the OAuth redirect URI when one isn't explicitly configured.\n   */\n  baseUrl?: string;\n  /** Explicit OAuth callback URI; defaults to `<baseUrl>/auth/linear/callback`. */\n  redirectUri?: string;\n  /**\n   * Shared OAuth `state` signer (created once per boot by the factory).\n   * Required for the connect/callback flow; when absent, only the disabled\n   * `status` route is served.\n   */\n  stateSigner?: StateSigner;\n  /**\n   * Cross-integration intake selection domain. Required for the issues route's\n   * project filter; when absent, only the disabled `status` route is served.\n   */\n  intake?: IntakeStorage;\n  /**\n   * Factory project domain, used to keep single-project installs working\n   * without any source binding. When absent, unbound sources are treated as\n   * belonging to no project.\n   */\n  projects?: { list(input: { orgId: string }): Promise<unknown[]> };\n  ingestFactoryIssues?: (input: LinearRulesIngress) => Promise<unknown>;\n}\n\n/**\n * Narrow the caller's selected Linear sources to the ones that feed this\n * Factory project.\n *\n * A Linear issue carries no Factory project of its own, so without a binding\n * every board view would ingest every selected source's issues into whichever\n * project happened to be on screen. Routing is explicit: a source feeds this\n * project only when its binding names both the project and a board. Returns\n * the bound board per source so the ingest lands cards where the user asked.\n */\nasync function scopeSourceIdsToProject({\n  intake,\n  orgId,\n  factoryProjectId,\n  selectedIds,\n}: {\n  intake: IntakeStorage;\n  orgId: string;\n  factoryProjectId: string;\n  selectedIds: string[];\n}): Promise<Record<string, string>> {\n  const selected = new Set(selectedIds);\n  const intakeBoards: Record<string, string> = {};\n  for (const binding of await intake.listBindings({ orgId, integrationId: 'linear' })) {\n    if (binding.factoryProjectId === factoryProjectId && binding.board && selected.has(binding.sourceId)) {\n      intakeBoards[binding.sourceId] = binding.board;\n    }\n  }\n  return intakeBoards;\n}\n\n/**\n * Resolve the org-scoped tenant for a Linear request. The connection is\n * org-owned, so it requires both a signed-in user and an organization — same\n * tenancy rules as the GitHub routes.\n */\nasync function resolveOrgTenant(\n  c: RouteContext,\n  auth: RouteAuth,\n): Promise<{ tenant: { orgId: string; userId: string } } | { response: Response }> {\n  await auth.ensureUser(c);\n  const tenant = auth.tenant(c);\n  if (!tenant) return { response: c.json({ error: 'unauthorized' }, 401) };\n  if (!tenant.orgId) {\n    return {\n      response: c.json(\n        {\n          error: 'organization_required',\n          message: 'Linear intake requires an organization. Personal accounts cannot connect Linear.',\n        },\n        403,\n      ),\n    };\n  }\n  return { tenant: { orgId: tenant.orgId, userId: tenant.userId } };\n}\n\n/**\n * Validate an opaque Linear pagination cursor from the query string. Cursors\n * are server-issued (`pageInfo.endCursor`), so anything outside a conservative\n * charset/length is rejected rather than forwarded to Linear.\n */\nfunction parseAfterCursor(raw: string | undefined): string | undefined | null {\n  if (raw === undefined || raw === '') return undefined;\n  if (raw.length > 512 || !/^[\\w+/=.:-]+$/.test(raw)) return null;\n  return raw;\n}\n\n/** Human issue key as it appears on a card (`ENG-123`). */\nconst ISSUE_IDENTIFIER_RE = /^[A-Za-z][A-Za-z0-9]{0,9}-\\d{1,7}$/;\n\n/** Map a Linear read failure to the API response for the SPA. */\nfunction linearFetchError(c: RouteContext, err: unknown) {\n  if (err instanceof LinearReauthRequiredError || (err as { status?: number }).status === 401) {\n    return c.json({ error: 'linear_reauth_required', message: new LinearReauthRequiredError().message }, 409);\n  }\n  return c.json({ error: 'linear_fetch_failed', message: err instanceof Error ? err.message : String(err) }, 502);\n}\n\n/**\n * Build the Linear routes as Mastra `apiRoutes`. When the feature is disabled,\n * returns only the `status` route so the SPA can detect the disabled state.\n */\nexport function buildLinearRoutes(options: MountLinearRoutesOptions): ApiRoute[] {\n  const routes: ApiRoute[] = [];\n  const { linear, auth, stateSigner, intake } = options;\n  const enabled = Boolean(linear) && auth.enabled();\n  const diagnostics = (): LinearFeatureDiagnostics => ({\n    linearAppConfigured: Boolean(linear),\n    factoryAuthEnabled: auth.enabled(),\n    appDbConfigured: true,\n  });\n\n  // The status route is always registered so the SPA can detect the disabled state.\n  routes.push(\n    registerApiRoute('/web/linear/status', {\n      method: 'GET',\n      requiresAuth: false,\n      handler: async c => {\n        if (!enabled || !linear || !stateSigner) {\n          return c.json({\n            enabled: false,\n            connected: false,\n            workspace: null,\n            reason: 'missing_config',\n            diagnostics: diagnostics(),\n          });\n        }\n        await auth.ensureUser(loose(c));\n        const tenant = auth.tenant(loose(c));\n        if (!tenant) return c.json({ error: 'unauthorized', reason: 'auth_required' }, 401);\n\n        if (!tenant.orgId) {\n          return c.json({\n            enabled: true,\n            organizationRequired: true,\n            connected: false,\n            workspace: null,\n            reason: 'organization_required',\n            diagnostics: diagnostics(),\n          });\n        }\n\n        const connection = await linear.loadConnection(tenant.orgId);\n        return c.json({\n          enabled: true,\n          connected: Boolean(connection),\n          workspace: connection ? { name: connection.workspaceName, urlKey: connection.workspaceUrlKey } : null,\n          reason: connection ? 'ready' : 'not_connected',\n          diagnostics: diagnostics(),\n        });\n      },\n    }),\n  );\n\n  // Without the integration instance or a state signer the connect/callback\n  // flow cannot talk to Linear or bind the OAuth round-trip to a tenant —\n  // serve only the disabled `status` route (mirrors the feature gate).\n  if (!enabled || !linear || !stateSigner || !intake) {\n    return routes;\n  }\n\n  const redirectUri = options.redirectUri ?? `${(options.baseUrl ?? '').replace(/\\/$/, '')}/auth/linear/callback`;\n\n  // ── Connect: send the user to Linear's OAuth consent screen ─────────────\n  routes.push(\n    registerApiRoute('/auth/linear/connect', {\n      method: 'GET',\n      requiresAuth: false,\n      handler: async c => {\n        const resolved = await resolveOrgTenant(loose(c), auth);\n        if ('response' in resolved) return resolved.response;\n        const state = stateSigner.sign(resolved.tenant.orgId, resolved.tenant.userId);\n        return c.redirect(linear.buildAuthorizeUrl(state, redirectUri));\n      },\n    }),\n  );\n\n  // ── Callback: exchange the code, persist the connection for the org ─────\n  routes.push(\n    registerApiRoute('/auth/linear/callback', {\n      method: 'GET',\n      requiresAuth: false,\n      handler: async c => {\n        const resolved = await resolveOrgTenant(loose(c), auth);\n        if ('response' in resolved) return resolved.response;\n        const { orgId, userId } = resolved.tenant;\n\n        // CSRF / cross-tenant linking protection: the signed state must belong\n        // to the same logged-in user *and* their current org.\n        const stateTenant = stateSigner.verify(c.req.query('state'));\n        if (!stateTenant || stateTenant.userId !== userId || stateTenant.orgId !== orgId) {\n          console.warn('[Linear] OAuth callback rejected: state/tenant mismatch.');\n          return c.redirect('/?linear=error');\n        }\n\n        const code = c.req.query('code');\n        if (!code) {\n          // User denied consent (or Linear returned an error).\n          return c.redirect('/?linear=error');\n        }\n\n        try {\n          const tokens = await linear.exchangeOAuthCode(code, redirectUri);\n          const workspace = await linear.fetchWorkspace(tokens.accessToken);\n          await linear.upsertConnection({\n            orgId,\n            userId,\n            accessToken: tokens.accessToken,\n            refreshToken: tokens.refreshToken,\n            expiresAt: tokens.expiresAt,\n            scope: tokens.scope,\n            workspaceName: workspace.name,\n            workspaceUrlKey: workspace.urlKey,\n          });\n        } catch (error) {\n          console.warn(`[Linear] OAuth callback failed to persist connection for org ${orgId}.`, error);\n          return c.redirect('/?linear=error');\n        }\n\n        return c.redirect('/?linear=connected');\n      },\n    }),\n  );\n\n  // ── List the workspace's projects (Settings intake-source picker) ───────\n  routes.push(\n    registerApiRoute('/web/linear/projects', {\n      method: 'GET',\n      requiresAuth: false,\n      handler: async c => {\n        const resolved = await resolveOrgTenant(loose(c), auth);\n        if ('response' in resolved) return resolved.response;\n\n        const connection = await linear.loadConnection(resolved.tenant.orgId);\n        if (!connection) {\n          return c.json({ error: 'linear_not_connected', message: 'Connect Linear to list Linear projects.' }, 409);\n        }\n\n        try {\n          const accessToken = await linear.getFreshAccessToken(connection);\n          const projects = await linear.listProjects(accessToken);\n          return c.json({ projects });\n        } catch (err) {\n          return linearFetchError(loose(c), err);\n        }\n      },\n    }),\n  );\n\n  // ── List the workspace's active issues (cursor-paged) ───────────────────\n  // Respects the caller's intake config: disabled Linear intake 404s the\n  // source, and an explicit project selection narrows the issue filter.\n  routes.push(\n    registerApiRoute('/web/linear/issues', {\n      method: 'GET',\n      requiresAuth: false,\n      handler: async c => {\n        const resolved = await resolveOrgTenant(loose(c), auth);\n        if ('response' in resolved) return resolved.response;\n\n        const after = parseAfterCursor(c.req.query('after'));\n        if (after === null) return c.json({ error: 'invalid_cursor' }, 400);\n        const factoryProjectId = c.req.query('factoryProjectId');\n        if (factoryProjectId && !UUID_RE.test(factoryProjectId)) {\n          return c.json({ error: 'invalid_factory_project_id' }, 400);\n        }\n\n        const connection = await linear.loadConnection(resolved.tenant.orgId);\n        if (!connection) {\n          return c.json({ error: 'linear_not_connected', message: 'Connect Linear to see intake issues.' }, 409);\n        }\n\n        await intake.ensureReady();\n        const config = await intake.getConfig({\n          orgId: resolved.tenant.orgId,\n          userId: resolved.tenant.userId,\n          integrationIds: ['linear'],\n        });\n        const selection = config.linear!;\n        if (!selection.enabled) {\n          return c.json({ error: 'linear_intake_disabled', message: 'Linear intake is turned off in Settings.' }, 404);\n        }\n\n        // No projects selected means nothing is synced — don't fan out to Linear.\n        const selectedIds = selection.sourceIds ?? [];\n        // A board request is also an ingest, so it only ever sees the sources\n        // routed to a board of that Factory project.\n        const intakeBoards = factoryProjectId\n          ? await scopeSourceIdsToProject({\n              intake,\n              orgId: resolved.tenant.orgId,\n              factoryProjectId,\n              selectedIds,\n            })\n          : null;\n        const projectIds = intakeBoards ? Object.keys(intakeBoards) : selectedIds;\n        if (projectIds.length === 0) {\n          return c.json({ issues: [], nextCursor: null });\n        }\n\n        try {\n          const accessToken = await linear.getFreshAccessToken(connection);\n          const { issues, nextCursor } = await linear.intake.listIssues({\n            connection: { type: 'oauth', accessToken },\n            sourceIds: projectIds,\n            cursor: after,\n          });\n          const issuePayload = issues.map(issue => ({\n            id: issue.id,\n            identifier: issue.identifier,\n            title: issue.title,\n            url: issue.url,\n            state: issue.state ?? '',\n            stateType: issue.stateType ?? '',\n            priorityLabel: issue.priority ?? '',\n            assignee: issue.assignee,\n            creator: issue.author,\n            team: issue.source,\n            labels: issue.labels,\n            createdAt: issue.createdAt,\n            updatedAt: issue.updatedAt,\n            sourceId: issue.sourceId ?? null,\n          }));\n          if (factoryProjectId && intakeBoards && options.ingestFactoryIssues) {\n            await options.ingestFactoryIssues({\n              orgId: resolved.tenant.orgId,\n              userId: resolved.tenant.userId,\n              factoryProjectId,\n              issues: issuePayload,\n              intakeBoards,\n            });\n          }\n          return c.json({ issues: issuePayload, nextCursor });\n        } catch (err) {\n          return linearFetchError(loose(c), err);\n        }\n      },\n    }),\n  );\n\n  routes.push(\n    registerApiRoute('/web/linear/issues/:identifier', {\n      method: 'GET',\n      requiresAuth: false,\n      handler: async c => {\n        const resolved = await resolveOrgTenant(loose(c), auth);\n        if ('response' in resolved) return resolved.response;\n\n        const identifier = c.req.param('identifier');\n        if (!ISSUE_IDENTIFIER_RE.test(identifier)) return c.json({ error: 'invalid_identifier' }, 400);\n        const factoryProjectId = c.req.query('factoryProjectId');\n        if (!factoryProjectId || !UUID_RE.test(factoryProjectId)) {\n          return c.json({ error: 'invalid_factory_project_id' }, 400);\n        }\n\n        const connection = await linear.loadConnection(resolved.tenant.orgId);\n        if (!connection) {\n          return c.json({ error: 'linear_not_connected', message: 'Connect Linear to see intake issues.' }, 409);\n        }\n\n        await intake.ensureReady();\n        const config = await intake.getConfig({\n          orgId: resolved.tenant.orgId,\n          userId: resolved.tenant.userId,\n          integrationIds: ['linear'],\n        });\n        const selection = config.linear!;\n        if (!selection.enabled) {\n          return c.json({ error: 'linear_intake_disabled', message: 'Linear intake is turned off in Settings.' }, 404);\n        }\n        const projectIds = Object.keys(\n          await scopeSourceIdsToProject({\n            intake,\n            orgId: resolved.tenant.orgId,\n            factoryProjectId,\n            selectedIds: selection.sourceIds ?? [],\n          }),\n        );\n        if (projectIds.length === 0) return c.json({ error: 'issue_not_found' }, 404);\n\n        try {\n          const accessToken = await linear.getFreshAccessToken(connection);\n          const issue = await linear.fetchIssueDetail(accessToken, identifier);\n          // Reads exactly like an issue that doesn't exist.\n          if (!issue || issue.projectId === null || !projectIds.includes(issue.projectId)) {\n            return c.json({ error: 'issue_not_found' }, 404);\n          }\n          return c.json({\n            identifier: issue.identifier,\n            title: issue.title,\n            url: issue.url,\n            description: issue.description,\n          });\n        } catch (err) {\n          return linearFetchError(loose(c), err);\n        }\n      },\n    }),\n  );\n\n  return routes;\n}\n"],"mappings":";;;AA0BA,MAAM,UAAU;;AAGhB,SAAS,MAAM,GAA0B;CACvC,OAAO;AACT;;;;;;;;;;;AAyDA,eAAe,wBAAwB,EACrC,QACA,OACA,kBACA,eAMkC;CAClC,MAAM,WAAW,IAAI,IAAI,WAAW;CACpC,MAAM,eAAuC,CAAC;CAC9C,KAAK,MAAM,WAAW,MAAM,OAAO,aAAa;EAAE;EAAO,eAAe;CAAS,CAAC,GAChF,IAAI,QAAQ,qBAAqB,oBAAoB,QAAQ,SAAS,SAAS,IAAI,QAAQ,QAAQ,GACjG,aAAa,QAAQ,YAAY,QAAQ;CAG7C,OAAO;AACT;;;;;;AAOA,eAAe,iBACb,GACA,MACiF;CACjF,MAAM,KAAK,WAAW,CAAC;CACvB,MAAM,SAAS,KAAK,OAAO,CAAC;CAC5B,IAAI,CAAC,QAAQ,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,eAAe,GAAG,GAAG,EAAE;CACvE,IAAI,CAAC,OAAO,OACV,OAAO,EACL,UAAU,EAAE,KACV;EACE,OAAO;EACP,SAAS;CACX,GACA,GACF,EACF;CAEF,OAAO,EAAE,QAAQ;EAAE,OAAO,OAAO;EAAO,QAAQ,OAAO;CAAO,EAAE;AAClE;;;;;;AAOA,SAAS,iBAAiB,KAAoD;CAC5E,IAAI,QAAQ,KAAA,KAAa,QAAQ,IAAI,OAAO,KAAA;CAC5C,IAAI,IAAI,SAAS,OAAO,CAAC,gBAAgB,KAAK,GAAG,GAAG,OAAO;CAC3D,OAAO;AACT;;AAGA,MAAM,sBAAsB;;AAG5B,SAAS,iBAAiB,GAAiB,KAAc;CACvD,IAAI,eAAe,6BAA8B,IAA4B,WAAW,KACtF,OAAO,EAAE,KAAK;EAAE,OAAO;EAA0B,SAAS,IAAI,0BAA0B,CAAC,CAAC;CAAQ,GAAG,GAAG;CAE1G,OAAO,EAAE,KAAK;EAAE,OAAO;EAAuB,SAAS,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;CAAE,GAAG,GAAG;AAChH;;;;;AAMA,SAAgB,kBAAkB,SAA+C;CAC/E,MAAM,SAAqB,CAAC;CAC5B,MAAM,EAAE,QAAQ,MAAM,aAAa,WAAW;CAC9C,MAAM,UAAU,QAAQ,MAAM,KAAK,KAAK,QAAQ;CAChD,MAAM,qBAA+C;EACnD,qBAAqB,QAAQ,MAAM;EACnC,oBAAoB,KAAK,QAAQ;EACjC,iBAAiB;CACnB;CAGA,OAAO,KACL,iBAAiB,sBAAsB;EACrC,QAAQ;EACR,cAAc;EACd,SAAS,OAAM,MAAK;GAClB,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,aAC1B,OAAO,EAAE,KAAK;IACZ,SAAS;IACT,WAAW;IACX,WAAW;IACX,QAAQ;IACR,aAAa,YAAY;GAC3B,CAAC;GAEH,MAAM,KAAK,WAAW,MAAM,CAAC,CAAC;GAC9B,MAAM,SAAS,KAAK,OAAO,MAAM,CAAC,CAAC;GACnC,IAAI,CAAC,QAAQ,OAAO,EAAE,KAAK;IAAE,OAAO;IAAgB,QAAQ;GAAgB,GAAG,GAAG;GAElF,IAAI,CAAC,OAAO,OACV,OAAO,EAAE,KAAK;IACZ,SAAS;IACT,sBAAsB;IACtB,WAAW;IACX,WAAW;IACX,QAAQ;IACR,aAAa,YAAY;GAC3B,CAAC;GAGH,MAAM,aAAa,MAAM,OAAO,eAAe,OAAO,KAAK;GAC3D,OAAO,EAAE,KAAK;IACZ,SAAS;IACT,WAAW,QAAQ,UAAU;IAC7B,WAAW,aAAa;KAAE,MAAM,WAAW;KAAe,QAAQ,WAAW;IAAgB,IAAI;IACjG,QAAQ,aAAa,UAAU;IAC/B,aAAa,YAAY;GAC3B,CAAC;EACH;CACF,CAAC,CACH;CAKA,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,eAAe,CAAC,QAC1C,OAAO;CAGT,MAAM,cAAc,QAAQ,eAAe,IAAI,QAAQ,WAAW,GAAA,CAAI,QAAQ,OAAO,EAAE,EAAE;CAGzF,OAAO,KACL,iBAAiB,wBAAwB;EACvC,QAAQ;EACR,cAAc;EACd,SAAS,OAAM,MAAK;GAClB,MAAM,WAAW,MAAM,iBAAiB,MAAM,CAAC,GAAG,IAAI;GACtD,IAAI,cAAc,UAAU,OAAO,SAAS;GAC5C,MAAM,QAAQ,YAAY,KAAK,SAAS,OAAO,OAAO,SAAS,OAAO,MAAM;GAC5E,OAAO,EAAE,SAAS,OAAO,kBAAkB,OAAO,WAAW,CAAC;EAChE;CACF,CAAC,CACH;CAGA,OAAO,KACL,iBAAiB,yBAAyB;EACxC,QAAQ;EACR,cAAc;EACd,SAAS,OAAM,MAAK;GAClB,MAAM,WAAW,MAAM,iBAAiB,MAAM,CAAC,GAAG,IAAI;GACtD,IAAI,cAAc,UAAU,OAAO,SAAS;GAC5C,MAAM,EAAE,OAAO,WAAW,SAAS;GAInC,MAAM,cAAc,YAAY,OAAO,EAAE,IAAI,MAAM,OAAO,CAAC;GAC3D,IAAI,CAAC,eAAe,YAAY,WAAW,UAAU,YAAY,UAAU,OAAO;IAChF,QAAQ,KAAK,0DAA0D;IACvE,OAAO,EAAE,SAAS,gBAAgB;GACpC;GAEA,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM;GAC/B,IAAI,CAAC,MAEH,OAAO,EAAE,SAAS,gBAAgB;GAGpC,IAAI;IACF,MAAM,SAAS,MAAM,OAAO,kBAAkB,MAAM,WAAW;IAC/D,MAAM,YAAY,MAAM,OAAO,eAAe,OAAO,WAAW;IAChE,MAAM,OAAO,iBAAiB;KAC5B;KACA;KACA,aAAa,OAAO;KACpB,cAAc,OAAO;KACrB,WAAW,OAAO;KAClB,OAAO,OAAO;KACd,eAAe,UAAU;KACzB,iBAAiB,UAAU;IAC7B,CAAC;GACH,SAAS,OAAO;IACd,QAAQ,KAAK,gEAAgE,MAAM,IAAI,KAAK;IAC5F,OAAO,EAAE,SAAS,gBAAgB;GACpC;GAEA,OAAO,EAAE,SAAS,oBAAoB;EACxC;CACF,CAAC,CACH;CAGA,OAAO,KACL,iBAAiB,wBAAwB;EACvC,QAAQ;EACR,cAAc;EACd,SAAS,OAAM,MAAK;GAClB,MAAM,WAAW,MAAM,iBAAiB,MAAM,CAAC,GAAG,IAAI;GACtD,IAAI,cAAc,UAAU,OAAO,SAAS;GAE5C,MAAM,aAAa,MAAM,OAAO,eAAe,SAAS,OAAO,KAAK;GACpE,IAAI,CAAC,YACH,OAAO,EAAE,KAAK;IAAE,OAAO;IAAwB,SAAS;GAA0C,GAAG,GAAG;GAG1G,IAAI;IACF,MAAM,cAAc,MAAM,OAAO,oBAAoB,UAAU;IAC/D,MAAM,WAAW,MAAM,OAAO,aAAa,WAAW;IACtD,OAAO,EAAE,KAAK,EAAE,SAAS,CAAC;GAC5B,SAAS,KAAK;IACZ,OAAO,iBAAiB,MAAM,CAAC,GAAG,GAAG;GACvC;EACF;CACF,CAAC,CACH;CAKA,OAAO,KACL,iBAAiB,sBAAsB;EACrC,QAAQ;EACR,cAAc;EACd,SAAS,OAAM,MAAK;GAClB,MAAM,WAAW,MAAM,iBAAiB,MAAM,CAAC,GAAG,IAAI;GACtD,IAAI,cAAc,UAAU,OAAO,SAAS;GAE5C,MAAM,QAAQ,iBAAiB,EAAE,IAAI,MAAM,OAAO,CAAC;GACnD,IAAI,UAAU,MAAM,OAAO,EAAE,KAAK,EAAE,OAAO,iBAAiB,GAAG,GAAG;GAClE,MAAM,mBAAmB,EAAE,IAAI,MAAM,kBAAkB;GACvD,IAAI,oBAAoB,CAAC,QAAQ,KAAK,gBAAgB,GACpD,OAAO,EAAE,KAAK,EAAE,OAAO,6BAA6B,GAAG,GAAG;GAG5D,MAAM,aAAa,MAAM,OAAO,eAAe,SAAS,OAAO,KAAK;GACpE,IAAI,CAAC,YACH,OAAO,EAAE,KAAK;IAAE,OAAO;IAAwB,SAAS;GAAuC,GAAG,GAAG;GAGvG,MAAM,OAAO,YAAY;GAMzB,MAAM,aAAY,MALG,OAAO,UAAU;IACpC,OAAO,SAAS,OAAO;IACvB,QAAQ,SAAS,OAAO;IACxB,gBAAgB,CAAC,QAAQ;GAC3B,CAAC,EAAA,CACwB;GACzB,IAAI,CAAC,UAAU,SACb,OAAO,EAAE,KAAK;IAAE,OAAO;IAA0B,SAAS;GAA2C,GAAG,GAAG;GAI7G,MAAM,cAAc,UAAU,aAAa,CAAC;GAG5C,MAAM,eAAe,mBACjB,MAAM,wBAAwB;IAC5B;IACA,OAAO,SAAS,OAAO;IACvB;IACA;GACF,CAAC,IACD;GACJ,MAAM,aAAa,eAAe,OAAO,KAAK,YAAY,IAAI;GAC9D,IAAI,WAAW,WAAW,GACxB,OAAO,EAAE,KAAK;IAAE,QAAQ,CAAC;IAAG,YAAY;GAAK,CAAC;GAGhD,IAAI;IACF,MAAM,cAAc,MAAM,OAAO,oBAAoB,UAAU;IAC/D,MAAM,EAAE,QAAQ,eAAe,MAAM,OAAO,OAAO,WAAW;KAC5D,YAAY;MAAE,MAAM;MAAS;KAAY;KACzC,WAAW;KACX,QAAQ;IACV,CAAC;IACD,MAAM,eAAe,OAAO,KAAI,WAAU;KACxC,IAAI,MAAM;KACV,YAAY,MAAM;KAClB,OAAO,MAAM;KACb,KAAK,MAAM;KACX,OAAO,MAAM,SAAS;KACtB,WAAW,MAAM,aAAa;KAC9B,eAAe,MAAM,YAAY;KACjC,UAAU,MAAM;KAChB,SAAS,MAAM;KACf,MAAM,MAAM;KACZ,QAAQ,MAAM;KACd,WAAW,MAAM;KACjB,WAAW,MAAM;KACjB,UAAU,MAAM,YAAY;IAC9B,EAAE;IACF,IAAI,oBAAoB,gBAAgB,QAAQ,qBAC9C,MAAM,QAAQ,oBAAoB;KAChC,OAAO,SAAS,OAAO;KACvB,QAAQ,SAAS,OAAO;KACxB;KACA,QAAQ;KACR;IACF,CAAC;IAEH,OAAO,EAAE,KAAK;KAAE,QAAQ;KAAc;IAAW,CAAC;GACpD,SAAS,KAAK;IACZ,OAAO,iBAAiB,MAAM,CAAC,GAAG,GAAG;GACvC;EACF;CACF,CAAC,CACH;CAEA,OAAO,KACL,iBAAiB,kCAAkC;EACjD,QAAQ;EACR,cAAc;EACd,SAAS,OAAM,MAAK;GAClB,MAAM,WAAW,MAAM,iBAAiB,MAAM,CAAC,GAAG,IAAI;GACtD,IAAI,cAAc,UAAU,OAAO,SAAS;GAE5C,MAAM,aAAa,EAAE,IAAI,MAAM,YAAY;GAC3C,IAAI,CAAC,oBAAoB,KAAK,UAAU,GAAG,OAAO,EAAE,KAAK,EAAE,OAAO,qBAAqB,GAAG,GAAG;GAC7F,MAAM,mBAAmB,EAAE,IAAI,MAAM,kBAAkB;GACvD,IAAI,CAAC,oBAAoB,CAAC,QAAQ,KAAK,gBAAgB,GACrD,OAAO,EAAE,KAAK,EAAE,OAAO,6BAA6B,GAAG,GAAG;GAG5D,MAAM,aAAa,MAAM,OAAO,eAAe,SAAS,OAAO,KAAK;GACpE,IAAI,CAAC,YACH,OAAO,EAAE,KAAK;IAAE,OAAO;IAAwB,SAAS;GAAuC,GAAG,GAAG;GAGvG,MAAM,OAAO,YAAY;GAMzB,MAAM,aAAY,MALG,OAAO,UAAU;IACpC,OAAO,SAAS,OAAO;IACvB,QAAQ,SAAS,OAAO;IACxB,gBAAgB,CAAC,QAAQ;GAC3B,CAAC,EAAA,CACwB;GACzB,IAAI,CAAC,UAAU,SACb,OAAO,EAAE,KAAK;IAAE,OAAO;IAA0B,SAAS;GAA2C,GAAG,GAAG;GAE7G,MAAM,aAAa,OAAO,KACxB,MAAM,wBAAwB;IAC5B;IACA,OAAO,SAAS,OAAO;IACvB;IACA,aAAa,UAAU,aAAa,CAAC;GACvC,CAAC,CACH;GACA,IAAI,WAAW,WAAW,GAAG,OAAO,EAAE,KAAK,EAAE,OAAO,kBAAkB,GAAG,GAAG;GAE5E,IAAI;IACF,MAAM,cAAc,MAAM,OAAO,oBAAoB,UAAU;IAC/D,MAAM,QAAQ,MAAM,OAAO,iBAAiB,aAAa,UAAU;IAEnE,IAAI,CAAC,SAAS,MAAM,cAAc,QAAQ,CAAC,WAAW,SAAS,MAAM,SAAS,GAC5E,OAAO,EAAE,KAAK,EAAE,OAAO,kBAAkB,GAAG,GAAG;IAEjD,OAAO,EAAE,KAAK;KACZ,YAAY,MAAM;KAClB,OAAO,MAAM;KACb,KAAK,MAAM;KACX,aAAa,MAAM;IACrB,CAAC;GACH,SAAS,KAAK;IACZ,OAAO,iBAAiB,MAAM,CAAC,GAAG,GAAG;GACvC;EACF;CACF,CAAC,CACH;CAEA,OAAO;AACT"}

package/dist/integrations/linear/rules.d.ts

@@ -1,4 +1,4 @@
-import type { FactoryRules } from '../../rules/types.js';
+import type { BoardRegistry } from '../../boards/index.js';
 import type { FactoryProjectsStorage } from '../../storage/domains/projects/base.js';
 import type { WorkItemsStorage } from '../../storage/domains/work-items/base.js';
 import type { IntegrationContext } from '../base.js';
@@ -18,11 +18,14 @@ export interface LinearIssueIngress {
     labels: string[];
     createdAt: string;
     updatedAt: string;
+    /** Linear project the issue was read from; resolves the bound board via `intakeBoards`. */
+    sourceId?: string | null;
 }
 export interface LinearRulesOptions {
     projects: Pick<FactoryProjectsStorage, 'get'>;
     storage: WorkItemsStorage;
-    rules: FactoryRules;
+    configVersion: string;
+    boards: BoardRegistry;
     linearRules: LinearEventRules;
 }
 export interface LinearRulesIngress {
@@ -30,6 +33,8 @@ export interface LinearRulesIngress {
     userId: string;
     factoryProjectId: string;
     issues: LinearIssueIngress[];
+    /** Board id per bound Linear source id, from the project's intake bindings. */
+    intakeBoards?: Readonly<Record<string, string>>;
 }
 type IngressStatus = 'committed' | 'replayed' | 'missing';
 export declare class LinearRules {