@mastra/factory 0.16.0-alpha.6 → 0.16.0-alpha.8

package/dist/integrations/jira/rules.js

@@ -0,0 +1,175 @@
+import { assertFactoryDecisionTarget, validateFactoryRuleDecisions } from "../../rules/validation.js";
+import { boardForWorkItem, isTerminalWorkItem } from "../../boards/semantics.js";
+import "../../boards/index.js";
+import { jiraClaimKey } from "./claim.js";
+//#region src/integrations/jira/rules.ts
+const RULE_TIMEOUT_MS = 5e3;
+async function withRuleTimeout(promise) {
+	let timeout;
+	try {
+		return await Promise.race([promise, new Promise((_, reject) => {
+			timeout = setTimeout(() => reject(/* @__PURE__ */ new Error("FACTORY_RULE_TIMEOUT")), RULE_TIMEOUT_MS);
+		})]);
+	} finally {
+		if (timeout) clearTimeout(timeout);
+	}
+}
+var JiraRules = class {
+	options;
+	constructor(options) {
+		this.options = options;
+	}
+	async ingest(input) {
+		if (!await this.options.projects.get({
+			orgId: input.orgId,
+			id: input.factoryProjectId
+		})) return {
+			status: "missing",
+			ingested: 0
+		};
+		const items = await this.options.storage.list({
+			orgId: input.orgId,
+			factoryProjectId: input.factoryProjectId
+		});
+		const itemsBySourceKey = new Map(items.map((item) => [item.externalSource?.externalId, item]));
+		const itemsByClaimKey = new Map(items.filter((item) => item.claimKey).map((item) => [item.claimKey, item]));
+		const statuses = [];
+		for (const issue of input.issues) {
+			const relatedItem = itemsByClaimKey.get(jiraClaimKey(issue.id)) ?? itemsBySourceKey.get(issue.id);
+			if (!relatedItem && await this.#heldElsewhere(input, issue)) {
+				statuses.push("missing");
+				continue;
+			}
+			statuses.push(await this.#ingestIssue(input, issue, relatedItem));
+		}
+		if (statuses.some((status) => status === "committed")) return {
+			status: "committed",
+			ingested: statuses.length
+		};
+		if (statuses.some((status) => status === "replayed")) return {
+			status: "replayed",
+			ingested: statuses.length
+		};
+		return {
+			status: "missing",
+			ingested: statuses.length
+		};
+	}
+	async #heldElsewhere(input, issue) {
+		const heldLive = (row) => row.factoryProjectId !== input.factoryProjectId && !isTerminalWorkItem(this.options.boards, row);
+		const claimant = await this.options.storage.getByClaimKey({
+			orgId: input.orgId,
+			claimKey: jiraClaimKey(issue.id)
+		});
+		if (claimant && heldLive(claimant)) return true;
+		return (await this.options.storage.listBySource({
+			orgId: input.orgId,
+			source: {
+				integrationId: "jira",
+				type: "issue",
+				externalId: issue.id
+			}
+		})).some(heldLive);
+	}
+	async #ingestIssue(input, issue, relatedItem) {
+		const ingressId = `jira:${issue.id}:${issue.updatedAt}`;
+		const actor = {
+			type: "human",
+			id: input.userId
+		};
+		const isClosed = issue.stateType === "completed" || issue.stateType === "canceled";
+		if (isClosed && !relatedItem) return "missing";
+		const event = isClosed ? "issueClosed" : "issueObserved";
+		const boundBoardId = issue.sourceId ? input.intakeBoards?.[issue.sourceId] : void 0;
+		const boundBoard = boundBoardId ? this.options.boards.get(boundBoardId) : void 0;
+		const context = {
+			tenant: {
+				orgId: input.orgId,
+				projectId: input.factoryProjectId
+			},
+			actor,
+			ingress: {
+				type: "jira",
+				id: ingressId
+			},
+			cause: `jira.${event}`,
+			causalChain: [],
+			configVersion: this.options.configVersion,
+			...relatedItem ? {
+				item: {
+					id: relatedItem.id,
+					source: "jira-issue",
+					sourceKey: relatedItem.externalSource?.externalId ?? null,
+					parentWorkItemId: relatedItem.parentWorkItemId,
+					title: relatedItem.title,
+					url: relatedItem.externalSource?.url ?? null,
+					stages: relatedItem.stages,
+					acceptedAt: relatedItem.acceptedAt,
+					metadata: relatedItem.metadata
+				},
+				board: boardForWorkItem(relatedItem),
+				itemRevision: relatedItem.revision
+			} : {},
+			...boundBoard ? { intake: {
+				board: boundBoard.id,
+				initialPhase: boundBoard.initialPhase
+			} } : {},
+			event,
+			issue
+		};
+		const rule = this.options.jiraRules[context.event];
+		let decision;
+		let decisions = [];
+		let outcome = { status: "accepted" };
+		try {
+			decision = rule ? await withRuleTimeout(Promise.resolve(rule(Object.freeze(context)))) : void 0;
+			if (decision?.type === "reject") outcome = {
+				status: "rejected",
+				code: decision.code,
+				reason: decision.reason
+			};
+			else if (decision) decisions = validateFactoryRuleDecisions([decision]).map((entry) => {
+				assertFactoryDecisionTarget(entry, this.options.boards, relatedItem ? boardForWorkItem(relatedItem) : void 0);
+				return { ...entry };
+			});
+		} catch (error) {
+			const timedOut = error instanceof Error && error.message === "FACTORY_RULE_TIMEOUT";
+			outcome = {
+				status: "rejected",
+				code: timedOut ? "timeout" : "rule_error",
+				reason: timedOut ? "Factory rule evaluation timed out." : error instanceof Error ? error.message.slice(0, 2e3) : "Factory Jira rule failed."
+			};
+		}
+		return (await this.options.storage.commitRuleEvaluation({
+			orgId: input.orgId,
+			factoryProjectId: input.factoryProjectId,
+			workItemId: relatedItem?.id ?? null,
+			ingress: {
+				identity: ingressId,
+				triggerType: "jira.issueObserved"
+			},
+			configVersion: this.options.configVersion,
+			expectedRevision: relatedItem?.revision ?? null,
+			actor,
+			outcome,
+			decisions,
+			causalChain: [],
+			now: /* @__PURE__ */ new Date()
+		})).status;
+	}
+};
+function attachJiraRules(jira, context) {
+	if (!context.runtime) return void 0;
+	const rules = new JiraRules({
+		projects: context.storage.projects,
+		storage: context.runtime.workItems,
+		configVersion: context.runtime.configVersion,
+		boards: context.runtime.boards,
+		jiraRules: jira.rules
+	});
+	return (input) => rules.ingest(input);
+}
+//#endregion
+export { JiraRules, attachJiraRules };
+
+//# sourceMappingURL=rules.js.map

package/dist/integrations/jira/rules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rules.js","names":["#heldElsewhere","#ingestIssue"],"sources":["../../../src/integrations/jira/rules.ts"],"sourcesContent":["import { boardForWorkItem, isTerminalWorkItem } from '../../boards/index.js';\nimport type { BoardRegistry } from '../../boards/index.js';\nimport type { FactoryJiraRuleContext, FactoryRuleDecision } from '../../rules/types.js';\nimport { assertFactoryDecisionTarget, validateFactoryRuleDecisions } from '../../rules/validation.js';\nimport type { FactoryProjectsStorage } from '../../storage/domains/projects/base.js';\nimport type { WorkItemRow, WorkItemsStorage } from '../../storage/domains/work-items/base.js';\nimport type { IntegrationContext } from '../base.js';\nimport { jiraClaimKey } from './claim.js';\nimport type { JiraEventRules } from './default-rules.js';\n\nconst RULE_TIMEOUT_MS = 5_000;\n\nasync function withRuleTimeout<T>(promise: Promise<T>): Promise<T> {\n  let timeout: ReturnType<typeof setTimeout> | undefined;\n  try {\n    return await Promise.race([\n      promise,\n      new Promise<never>((_, reject) => {\n        timeout = setTimeout(() => reject(new Error('FACTORY_RULE_TIMEOUT')), RULE_TIMEOUT_MS);\n      }),\n    ]);\n  } finally {\n    if (timeout) clearTimeout(timeout);\n  }\n}\n\nexport interface JiraIssueIngress {\n  /** Stable issue reference — direct Jira id or the Platform-encoded issue reference. */\n  id: string;\n  identifier: string;\n  title: string;\n  url: string;\n  state: string;\n  stateType: string;\n  priorityLabel: string;\n  assignee: string | null;\n  /** Display name of the Jira reporter, when available. */\n  author: string | null;\n  /** Jira project key the issue belongs to, when available. */\n  project: string | null;\n  /** Jira site host the issue was read from, when available. */\n  site: string | null;\n  labels: string[];\n  createdAt: string;\n  updatedAt: string;\n  /** Jira source the issue was read from; resolves the bound board via `intakeBoards`. */\n  sourceId?: string | null;\n}\n\nexport interface JiraRulesOptions {\n  projects: Pick<FactoryProjectsStorage, 'get'>;\n  storage: WorkItemsStorage;\n  configVersion: string;\n  boards: BoardRegistry;\n  jiraRules: JiraEventRules;\n}\n\nexport interface JiraRulesIngress {\n  orgId: string;\n  userId: string;\n  factoryProjectId: string;\n  issues: JiraIssueIngress[];\n  /** Board id per bound Jira source id, from the project's intake bindings. */\n  intakeBoards?: Readonly<Record<string, string>>;\n}\n\ntype IngressStatus = 'committed' | 'replayed' | 'missing';\n\nexport class JiraRules {\n  constructor(private readonly options: JiraRulesOptions) {}\n\n  async ingest(input: JiraRulesIngress): Promise<{ status: IngressStatus; ingested: number }> {\n    const project = await this.options.projects.get({ orgId: input.orgId, id: input.factoryProjectId });\n    if (!project) return { status: 'missing', ingested: 0 };\n\n    const items = await this.options.storage.list({ orgId: input.orgId, factoryProjectId: input.factoryProjectId });\n    const itemsBySourceKey = new Map(items.map(item => [item.externalSource?.externalId, item]));\n    const itemsByClaimKey = new Map(items.filter(item => item.claimKey).map(item => [item.claimKey, item]));\n    const statuses: IngressStatus[] = [];\n    for (const issue of input.issues) {\n      // The claim finds the card even after a metadata drift; the raw issue\n      // reference covers cards filed before claims existed.\n      const relatedItem = itemsByClaimKey.get(jiraClaimKey(issue.id)) ?? itemsBySourceKey.get(issue.id);\n      // One live card per Jira issue per org. The store's claim index is the\n      // guarantee; this check spares the dispatcher a refused upsert.\n      if (!relatedItem && (await this.#heldElsewhere(input, issue))) {\n        statuses.push('missing');\n        continue;\n      }\n      statuses.push(await this.#ingestIssue(input, issue, relatedItem));\n    }\n    if (statuses.some(status => status === 'committed')) return { status: 'committed', ingested: statuses.length };\n    if (statuses.some(status => status === 'replayed')) return { status: 'replayed', ingested: statuses.length };\n    return { status: 'missing', ingested: statuses.length };\n  }\n\n  async #heldElsewhere(input: JiraRulesIngress, issue: JiraIssueIngress): Promise<boolean> {\n    const heldLive = (row: WorkItemRow) =>\n      row.factoryProjectId !== input.factoryProjectId && !isTerminalWorkItem(this.options.boards, row);\n    const claimant = await this.options.storage.getByClaimKey({\n      orgId: input.orgId,\n      claimKey: jiraClaimKey(issue.id),\n    });\n    if (claimant && heldLive(claimant)) return true;\n    // Cards filed before claims existed carry only the issue reference.\n    const legacy = await this.options.storage.listBySource({\n      orgId: input.orgId,\n      source: { integrationId: 'jira', type: 'issue', externalId: issue.id },\n    });\n    return legacy.some(heldLive);\n  }\n\n  async #ingestIssue(\n    input: JiraRulesIngress,\n    issue: JiraIssueIngress,\n    relatedItem: WorkItemRow | undefined,\n  ): Promise<IngressStatus> {\n    const ingressId = `jira:${issue.id}:${issue.updatedAt}`;\n    const actor = { type: 'human' as const, id: input.userId };\n\n    // Closed issues without existing work items should not create new ones.\n    const isClosed = issue.stateType === 'completed' || issue.stateType === 'canceled';\n    if (isClosed && !relatedItem) {\n      return 'missing';\n    }\n\n    const event = isClosed ? 'issueClosed' : 'issueObserved';\n    const boundBoardId = issue.sourceId ? input.intakeBoards?.[issue.sourceId] : undefined;\n    const boundBoard = boundBoardId ? this.options.boards.get(boundBoardId) : undefined;\n    const context: FactoryJiraRuleContext = {\n      tenant: { orgId: input.orgId, projectId: input.factoryProjectId },\n      actor,\n      ingress: { type: 'jira', id: ingressId },\n      cause: `jira.${event}`,\n      causalChain: [],\n      configVersion: this.options.configVersion,\n      ...(relatedItem\n        ? {\n            item: {\n              id: relatedItem.id,\n              source: 'jira-issue',\n              sourceKey: relatedItem.externalSource?.externalId ?? null,\n              parentWorkItemId: relatedItem.parentWorkItemId,\n              title: relatedItem.title,\n              url: relatedItem.externalSource?.url ?? null,\n              stages: relatedItem.stages,\n              acceptedAt: relatedItem.acceptedAt,\n              metadata: relatedItem.metadata,\n            },\n            board: boardForWorkItem(relatedItem),\n            itemRevision: relatedItem.revision,\n          }\n        : {}),\n      ...(boundBoard ? { intake: { board: boundBoard.id, initialPhase: boundBoard.initialPhase } } : {}),\n      event,\n      issue,\n    };\n\n    const rule = this.options.jiraRules[context.event];\n    let decision: FactoryRuleDecision | void;\n    let decisions: Record<string, unknown>[] = [];\n    let outcome: { status: 'accepted' | 'rejected'; code?: string; reason?: string } = { status: 'accepted' };\n    try {\n      decision = rule ? await withRuleTimeout(Promise.resolve(rule(Object.freeze(context)))) : undefined;\n      if (decision?.type === 'reject') {\n        outcome = { status: 'rejected', code: decision.code, reason: decision.reason };\n      } else if (decision) {\n        decisions = validateFactoryRuleDecisions([decision]).map(entry => {\n          assertFactoryDecisionTarget(\n            entry,\n            this.options.boards,\n            relatedItem ? boardForWorkItem(relatedItem) : undefined,\n          );\n          return { ...entry };\n        });\n      }\n    } catch (error) {\n      const timedOut = error instanceof Error && error.message === 'FACTORY_RULE_TIMEOUT';\n      outcome = {\n        status: 'rejected',\n        code: timedOut ? 'timeout' : 'rule_error',\n        reason: timedOut\n          ? 'Factory rule evaluation timed out.'\n          : error instanceof Error\n            ? error.message.slice(0, 2_000)\n            : 'Factory Jira rule failed.',\n      };\n    }\n\n    const committed = await this.options.storage.commitRuleEvaluation({\n      orgId: input.orgId,\n      factoryProjectId: input.factoryProjectId,\n      workItemId: relatedItem?.id ?? null,\n      ingress: { identity: ingressId, triggerType: 'jira.issueObserved' },\n      configVersion: this.options.configVersion,\n      expectedRevision: relatedItem?.revision ?? null,\n      actor,\n      outcome,\n      decisions,\n      causalChain: [],\n      now: new Date(),\n    });\n    return committed.status;\n  }\n}\n\nexport function attachJiraRules(\n  jira: { readonly rules: JiraEventRules },\n  context: IntegrationContext,\n): ((input: JiraRulesIngress) => Promise<unknown>) | undefined {\n  if (!context.runtime) return undefined;\n  const rules = new JiraRules({\n    projects: context.storage.projects,\n    storage: context.runtime.workItems,\n    configVersion: context.runtime.configVersion,\n    boards: context.runtime.boards,\n    jiraRules: jira.rules,\n  });\n  return input => rules.ingest(input);\n}\n"],"mappings":";;;;;AAUA,MAAM,kBAAkB;AAExB,eAAe,gBAAmB,SAAiC;CACjE,IAAI;CACJ,IAAI;EACF,OAAO,MAAM,QAAQ,KAAK,CACxB,SACA,IAAI,SAAgB,GAAG,WAAW;GAChC,UAAU,iBAAiB,uBAAO,IAAI,MAAM,sBAAsB,CAAC,GAAG,eAAe;EACvF,CAAC,CACH,CAAC;CACH,UAAU;EACR,IAAI,SAAS,aAAa,OAAO;CACnC;AACF;AA4CA,IAAa,YAAb,MAAuB;CACQ;CAA7B,YAAY,SAA4C;EAA3B,KAAA,UAAA;CAA4B;CAEzD,MAAM,OAAO,OAA+E;EAE1F,IAAI,CAAC,MADiB,KAAK,QAAQ,SAAS,IAAI;GAAE,OAAO,MAAM;GAAO,IAAI,MAAM;EAAiB,CAAC,GACpF,OAAO;GAAE,QAAQ;GAAW,UAAU;EAAE;EAEtD,MAAM,QAAQ,MAAM,KAAK,QAAQ,QAAQ,KAAK;GAAE,OAAO,MAAM;GAAO,kBAAkB,MAAM;EAAiB,CAAC;EAC9G,MAAM,mBAAmB,IAAI,IAAI,MAAM,KAAI,SAAQ,CAAC,KAAK,gBAAgB,YAAY,IAAI,CAAC,CAAC;EAC3F,MAAM,kBAAkB,IAAI,IAAI,MAAM,QAAO,SAAQ,KAAK,QAAQ,CAAC,CAAC,KAAI,SAAQ,CAAC,KAAK,UAAU,IAAI,CAAC,CAAC;EACtG,MAAM,WAA4B,CAAC;EACnC,KAAK,MAAM,SAAS,MAAM,QAAQ;GAGhC,MAAM,cAAc,gBAAgB,IAAI,aAAa,MAAM,EAAE,CAAC,KAAK,iBAAiB,IAAI,MAAM,EAAE;GAGhG,IAAI,CAAC,eAAgB,MAAM,KAAKA,eAAe,OAAO,KAAK,GAAI;IAC7D,SAAS,KAAK,SAAS;IACvB;GACF;GACA,SAAS,KAAK,MAAM,KAAKC,aAAa,OAAO,OAAO,WAAW,CAAC;EAClE;EACA,IAAI,SAAS,MAAK,WAAU,WAAW,WAAW,GAAG,OAAO;GAAE,QAAQ;GAAa,UAAU,SAAS;EAAO;EAC7G,IAAI,SAAS,MAAK,WAAU,WAAW,UAAU,GAAG,OAAO;GAAE,QAAQ;GAAY,UAAU,SAAS;EAAO;EAC3G,OAAO;GAAE,QAAQ;GAAW,UAAU,SAAS;EAAO;CACxD;CAEA,MAAMD,eAAe,OAAyB,OAA2C;EACvF,MAAM,YAAY,QAChB,IAAI,qBAAqB,MAAM,oBAAoB,CAAC,mBAAmB,KAAK,QAAQ,QAAQ,GAAG;EACjG,MAAM,WAAW,MAAM,KAAK,QAAQ,QAAQ,cAAc;GACxD,OAAO,MAAM;GACb,UAAU,aAAa,MAAM,EAAE;EACjC,CAAC;EACD,IAAI,YAAY,SAAS,QAAQ,GAAG,OAAO;EAM3C,QAAO,MAJc,KAAK,QAAQ,QAAQ,aAAa;GACrD,OAAO,MAAM;GACb,QAAQ;IAAE,eAAe;IAAQ,MAAM;IAAS,YAAY,MAAM;GAAG;EACvE,CAAC,EAAA,CACa,KAAK,QAAQ;CAC7B;CAEA,MAAMC,aACJ,OACA,OACA,aACwB;EACxB,MAAM,YAAY,QAAQ,MAAM,GAAG,GAAG,MAAM;EAC5C,MAAM,QAAQ;GAAE,MAAM;GAAkB,IAAI,MAAM;EAAO;EAGzD,MAAM,WAAW,MAAM,cAAc,eAAe,MAAM,cAAc;EACxE,IAAI,YAAY,CAAC,aACf,OAAO;EAGT,MAAM,QAAQ,WAAW,gBAAgB;EACzC,MAAM,eAAe,MAAM,WAAW,MAAM,eAAe,MAAM,YAAY,KAAA;EAC7E,MAAM,aAAa,eAAe,KAAK,QAAQ,OAAO,IAAI,YAAY,IAAI,KAAA;EAC1E,MAAM,UAAkC;GACtC,QAAQ;IAAE,OAAO,MAAM;IAAO,WAAW,MAAM;GAAiB;GAChE;GACA,SAAS;IAAE,MAAM;IAAQ,IAAI;GAAU;GACvC,OAAO,QAAQ;GACf,aAAa,CAAC;GACd,eAAe,KAAK,QAAQ;GAC5B,GAAI,cACA;IACE,MAAM;KACJ,IAAI,YAAY;KAChB,QAAQ;KACR,WAAW,YAAY,gBAAgB,cAAc;KACrD,kBAAkB,YAAY;KAC9B,OAAO,YAAY;KACnB,KAAK,YAAY,gBAAgB,OAAO;KACxC,QAAQ,YAAY;KACpB,YAAY,YAAY;KACxB,UAAU,YAAY;IACxB;IACA,OAAO,iBAAiB,WAAW;IACnC,cAAc,YAAY;GAC5B,IACA,CAAC;GACL,GAAI,aAAa,EAAE,QAAQ;IAAE,OAAO,WAAW;IAAI,cAAc,WAAW;GAAa,EAAE,IAAI,CAAC;GAChG;GACA;EACF;EAEA,MAAM,OAAO,KAAK,QAAQ,UAAU,QAAQ;EAC5C,IAAI;EACJ,IAAI,YAAuC,CAAC;EAC5C,IAAI,UAA+E,EAAE,QAAQ,WAAW;EACxG,IAAI;GACF,WAAW,OAAO,MAAM,gBAAgB,QAAQ,QAAQ,KAAK,OAAO,OAAO,OAAO,CAAC,CAAC,CAAC,IAAI,KAAA;GACzF,IAAI,UAAU,SAAS,UACrB,UAAU;IAAE,QAAQ;IAAY,MAAM,SAAS;IAAM,QAAQ,SAAS;GAAO;QACxE,IAAI,UACT,YAAY,6BAA6B,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAI,UAAS;IAChE,4BACE,OACA,KAAK,QAAQ,QACb,cAAc,iBAAiB,WAAW,IAAI,KAAA,CAChD;IACA,OAAO,EAAE,GAAG,MAAM;GACpB,CAAC;EAEL,SAAS,OAAO;GACd,MAAM,WAAW,iBAAiB,SAAS,MAAM,YAAY;GAC7D,UAAU;IACR,QAAQ;IACR,MAAM,WAAW,YAAY;IAC7B,QAAQ,WACJ,uCACA,iBAAiB,QACf,MAAM,QAAQ,MAAM,GAAG,GAAK,IAC5B;GACR;EACF;EAeA,QAAO,MAbiB,KAAK,QAAQ,QAAQ,qBAAqB;GAChE,OAAO,MAAM;GACb,kBAAkB,MAAM;GACxB,YAAY,aAAa,MAAM;GAC/B,SAAS;IAAE,UAAU;IAAW,aAAa;GAAqB;GAClE,eAAe,KAAK,QAAQ;GAC5B,kBAAkB,aAAa,YAAY;GAC3C;GACA;GACA;GACA,aAAa,CAAC;GACd,qBAAK,IAAI,KAAK;EAChB,CAAC,EAAA,CACgB;CACnB;AACF;AAEA,SAAgB,gBACd,MACA,SAC6D;CAC7D,IAAI,CAAC,QAAQ,SAAS,OAAO,KAAA;CAC7B,MAAM,QAAQ,IAAI,UAAU;EAC1B,UAAU,QAAQ,QAAQ;EAC1B,SAAS,QAAQ,QAAQ;EACzB,eAAe,QAAQ,QAAQ;EAC/B,QAAQ,QAAQ,QAAQ;EACxB,WAAW,KAAK;CAClB,CAAC;CACD,QAAO,UAAS,MAAM,OAAO,KAAK;AACpC"}

package/dist/integrations/platform/connect/routes.d.ts

@@ -0,0 +1,39 @@
+/**
+ * Mastra `apiRoutes` that let the Factory SPA connect and reconnect
+ * Platform-managed provider accounts without leaving Factory.
+ *
+ * The browser cannot talk to the integrations service itself — it has no
+ * Platform session — so these routes mint Nango connect/reconnect sessions
+ * server-side with the deploy's machine credentials
+ * (`MASTRA_PLATFORM_ACCESS_TOKEN`/`MASTRA_PLATFORM_SECRET_KEY`) and hand the
+ * short-lived session token back to the SPA, which drives the provider's
+ * OAuth popup headlessly via `@nangohq/frontend`. Gating mirrors the
+ * Platform's own rule for these providers: a signed-in organization member
+ * (org:write parity with Linear), not an organization admin.
+ */
+import type { ApiRoute } from '@mastra/core/server';
+import type { RouteAuth } from '../../../routes/route.js';
+import { PlatformApiClient } from '../api-client.js';
+export interface PlatformConnectProvider {
+    /** Platform integration id used to mint connect sessions. */
+    integrationId: string;
+    /** Connection `integrationId` variants that belong to this provider. */
+    connectionIntegrationIds: readonly string[];
+}
+/**
+ * Providers the Factory SPA may connect through these routes. Keys are the
+ * SPA-facing provider slugs; `integrationId` is the Platform catalog id used
+ * for new connect sessions. Provider-specific PRs extend this registry when
+ * their Factory integrations are available.
+ */
+export declare const PLATFORM_CONNECT_PROVIDERS: Record<string, PlatformConnectProvider>;
+export interface BuildPlatformConnectRoutesOptions {
+    auth: RouteAuth;
+    client: PlatformApiClient;
+}
+/**
+ * Build the `/web/integrations/platform/*` routes. Callers only mount these
+ * when Platform machine credentials are configured.
+ */
+export declare function buildPlatformConnectRoutes(options: BuildPlatformConnectRoutesOptions): ApiRoute[];
+//# sourceMappingURL=routes.d.ts.map

package/dist/integrations/platform/connect/routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../../../../src/integrations/platform/connect/routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAIpD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,EAAE,iBAAiB,EAAoB,MAAM,kBAAkB,CAAC;AASvE,MAAM,WAAW,uBAAuB;IACtC,6DAA6D;IAC7D,aAAa,EAAE,MAAM,CAAC;IACtB,wEAAwE;IACxE,wBAAwB,EAAE,SAAS,MAAM,EAAE,CAAC;CAC7C;AAED;;;;;GAKG;AACH,eAAO,MAAM,0BAA0B,EAAE,MAAM,CAAC,MAAM,EAAE,uBAAuB,CAG9E,CAAC;AAmBF,MAAM,WAAW,iCAAiC;IAChD,IAAI,EAAE,SAAS,CAAC;IAChB,MAAM,EAAE,iBAAiB,CAAC;CAC3B;AA2CD;;;GAGG;AACH,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,iCAAiC,GAAG,QAAQ,EAAE,CAgFjG"}

package/dist/integrations/platform/connect/routes.js

@@ -0,0 +1,129 @@
+import { PlatformApiError } from "../api-client.js";
+import { registerApiRoute } from "@mastra/core/server";
+//#region src/integrations/platform/connect/routes.ts
+/** Erase a route handler's path-parameterized context to a plain `Context`. */
+function loose(c) {
+	return c;
+}
+/**
+* Providers the Factory SPA may connect through these routes. Keys are the
+* SPA-facing provider slugs; `integrationId` is the Platform catalog id used
+* for new connect sessions. Provider-specific PRs extend this registry when
+* their Factory integrations are available.
+*/
+const PLATFORM_CONNECT_PROVIDERS = {
+	jira: {
+		integrationId: "jira",
+		connectionIntegrationIds: ["jira"]
+	},
+	"incident-io": {
+		integrationId: "incident-io",
+		connectionIntegrationIds: ["incident-io"]
+	}
+};
+async function resolveOrgTenant(c, auth) {
+	if (!auth.enabled()) return { response: c.json({
+		error: "auth_disabled",
+		message: "Factory auth is not enabled."
+	}, 403) };
+	await auth.ensureUser(c);
+	const tenant = auth.tenant(c);
+	if (!tenant) return { response: c.json({ error: "unauthorized" }, 401) };
+	if (!tenant.orgId) return { response: c.json({
+		error: "organization_required",
+		message: "Provider connections require an organization. Personal accounts cannot connect providers."
+	}, 403) };
+	return { tenant: {
+		orgId: tenant.orgId,
+		userId: tenant.userId
+	} };
+}
+function providerFromParam(c) {
+	const provider = c.req.param("provider");
+	return provider ? PLATFORM_CONNECT_PROVIDERS[provider] ?? null : null;
+}
+function platformError(c, err) {
+	if (err instanceof PlatformApiError) {
+		if (err.status === 409) return c.json({
+			error: "session_pending",
+			message: err.message
+		}, 409);
+		if (err.status === 403) return c.json({
+			error: "platform_forbidden",
+			message: err.message
+		}, 403);
+	}
+	return c.json({
+		error: "platform_request_failed",
+		message: err instanceof Error ? err.message : String(err)
+	}, 502);
+}
+/**
+* Build the `/web/integrations/platform/*` routes. Callers only mount these
+* when Platform machine credentials are configured.
+*/
+function buildPlatformConnectRoutes(options) {
+	const { auth, client } = options;
+	return [
+		registerApiRoute("/web/integrations/platform/:provider/connections", {
+			method: "GET",
+			requiresAuth: false,
+			handler: async (rawContext) => {
+				const c = loose(rawContext);
+				const provider = providerFromParam(c);
+				if (!provider) return c.json({ error: "unknown_provider" }, 404);
+				const resolved = await resolveOrgTenant(c, auth);
+				if ("response" in resolved) return resolved.response;
+				try {
+					const connections = (await client.request("GET", "/v2/connections")).connections.filter((connection) => provider.connectionIntegrationIds.includes(connection.integrationId));
+					return c.json({ connections });
+				} catch (err) {
+					return platformError(c, err);
+				}
+			}
+		}),
+		registerApiRoute("/web/integrations/platform/:provider/connect-session", {
+			method: "POST",
+			requiresAuth: false,
+			handler: async (rawContext) => {
+				const c = loose(rawContext);
+				const provider = providerFromParam(c);
+				if (!provider) return c.json({ error: "unknown_provider" }, 404);
+				const resolved = await resolveOrgTenant(c, auth);
+				if ("response" in resolved) return resolved.response;
+				try {
+					const session = await client.request("POST", `/v2/integrations/${encodeURIComponent(provider.integrationId)}/connect-sessions`, {});
+					c.header("Cache-Control", "no-store");
+					return c.json(session, 201);
+				} catch (err) {
+					return platformError(c, err);
+				}
+			}
+		}),
+		registerApiRoute("/web/integrations/platform/:provider/connections/:connectionId/reconnect-session", {
+			method: "POST",
+			requiresAuth: false,
+			handler: async (rawContext) => {
+				const c = loose(rawContext);
+				const provider = providerFromParam(c);
+				if (!provider) return c.json({ error: "unknown_provider" }, 404);
+				const resolved = await resolveOrgTenant(c, auth);
+				if ("response" in resolved) return resolved.response;
+				const connectionId = c.req.param("connectionId");
+				if (!connectionId) return c.json({ error: "connection_required" }, 400);
+				try {
+					if (!(await client.request("GET", "/v2/connections")).connections.find((candidate) => candidate.id === connectionId && provider.connectionIntegrationIds.includes(candidate.integrationId))) return c.json({ error: "connection_not_found" }, 404);
+					const session = await client.request("POST", `/v2/connections/${encodeURIComponent(connectionId)}/reconnect-session`, {});
+					c.header("Cache-Control", "no-store");
+					return c.json(session, 201);
+				} catch (err) {
+					return platformError(c, err);
+				}
+			}
+		})
+	];
+}
+//#endregion
+export { PLATFORM_CONNECT_PROVIDERS, buildPlatformConnectRoutes };
+
+//# sourceMappingURL=routes.js.map

package/dist/integrations/platform/connect/routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.js","names":[],"sources":["../../../../src/integrations/platform/connect/routes.ts"],"sourcesContent":["/**\n * Mastra `apiRoutes` that let the Factory SPA connect and reconnect\n * Platform-managed provider accounts without leaving Factory.\n *\n * The browser cannot talk to the integrations service itself — it has no\n * Platform session — so these routes mint Nango connect/reconnect sessions\n * server-side with the deploy's machine credentials\n * (`MASTRA_PLATFORM_ACCESS_TOKEN`/`MASTRA_PLATFORM_SECRET_KEY`) and hand the\n * short-lived session token back to the SPA, which drives the provider's\n * OAuth popup headlessly via `@nangohq/frontend`. Gating mirrors the\n * Platform's own rule for these providers: a signed-in organization member\n * (org:write parity with Linear), not an organization admin.\n */\n\nimport type { ApiRoute } from '@mastra/core/server';\nimport { registerApiRoute } from '@mastra/core/server';\nimport type { Context } from 'hono';\n\nimport type { RouteAuth } from '../../../routes/route.js';\nimport { PlatformApiClient, PlatformApiError } from '../api-client.js';\n\ntype RouteContext = Context;\n\n/** Erase a route handler's path-parameterized context to a plain `Context`. */\nfunction loose(c: unknown): RouteContext {\n  return c as RouteContext;\n}\n\nexport interface PlatformConnectProvider {\n  /** Platform integration id used to mint connect sessions. */\n  integrationId: string;\n  /** Connection `integrationId` variants that belong to this provider. */\n  connectionIntegrationIds: readonly string[];\n}\n\n/**\n * Providers the Factory SPA may connect through these routes. Keys are the\n * SPA-facing provider slugs; `integrationId` is the Platform catalog id used\n * for new connect sessions. Provider-specific PRs extend this registry when\n * their Factory integrations are available.\n */\nexport const PLATFORM_CONNECT_PROVIDERS: Record<string, PlatformConnectProvider> = {\n  jira: { integrationId: 'jira', connectionIntegrationIds: ['jira'] },\n  'incident-io': { integrationId: 'incident-io', connectionIntegrationIds: ['incident-io'] },\n};\n\ninterface PlatformConnectionRow {\n  id: string;\n  integrationId: string;\n  status: 'active' | 'needs_reauth';\n  accountLabel: string | null;\n  displayName?: string | null;\n  connectedAt?: string;\n}\n\ninterface PlatformSessionResponse {\n  connectionId: string;\n  integrationId: string;\n  connectUrl: string;\n  sessionToken: string;\n  expiresAt: string;\n}\n\nexport interface BuildPlatformConnectRoutesOptions {\n  auth: RouteAuth;\n  client: PlatformApiClient;\n}\n\nasync function resolveOrgTenant(\n  c: RouteContext,\n  auth: RouteAuth,\n): Promise<{ tenant: { orgId: string; userId: string } } | { response: Response }> {\n  if (!auth.enabled()) {\n    return { response: c.json({ error: 'auth_disabled', message: 'Factory auth is not enabled.' }, 403) };\n  }\n  await auth.ensureUser(c);\n  const tenant = auth.tenant(c);\n  if (!tenant) return { response: c.json({ error: 'unauthorized' }, 401) };\n  if (!tenant.orgId) {\n    return {\n      response: c.json(\n        {\n          error: 'organization_required',\n          message: 'Provider connections require an organization. Personal accounts cannot connect providers.',\n        },\n        403,\n      ),\n    };\n  }\n  return { tenant: { orgId: tenant.orgId, userId: tenant.userId } };\n}\n\nfunction providerFromParam(c: RouteContext): PlatformConnectProvider | null {\n  const provider = c.req.param('provider');\n  return provider ? (PLATFORM_CONNECT_PROVIDERS[provider] ?? null) : null;\n}\n\nfunction platformError(c: RouteContext, err: unknown) {\n  if (err instanceof PlatformApiError) {\n    if (err.status === 409) {\n      return c.json({ error: 'session_pending', message: err.message }, 409);\n    }\n    if (err.status === 403) {\n      return c.json({ error: 'platform_forbidden', message: err.message }, 403);\n    }\n  }\n  return c.json({ error: 'platform_request_failed', message: err instanceof Error ? err.message : String(err) }, 502);\n}\n\n/**\n * Build the `/web/integrations/platform/*` routes. Callers only mount these\n * when Platform machine credentials are configured.\n */\nexport function buildPlatformConnectRoutes(options: BuildPlatformConnectRoutesOptions): ApiRoute[] {\n  const { auth, client } = options;\n\n  return [\n    registerApiRoute('/web/integrations/platform/:provider/connections', {\n      method: 'GET',\n      requiresAuth: false,\n      handler: async rawContext => {\n        const c = loose(rawContext);\n        const provider = providerFromParam(c);\n        if (!provider) return c.json({ error: 'unknown_provider' }, 404);\n        const resolved = await resolveOrgTenant(c, auth);\n        if ('response' in resolved) return resolved.response;\n        try {\n          const result = await client.request<{ connections: PlatformConnectionRow[] }>('GET', '/v2/connections');\n          const connections = result.connections.filter(connection =>\n            provider.connectionIntegrationIds.includes(connection.integrationId),\n          );\n          return c.json({ connections });\n        } catch (err) {\n          return platformError(c, err);\n        }\n      },\n    }),\n    registerApiRoute('/web/integrations/platform/:provider/connect-session', {\n      method: 'POST',\n      requiresAuth: false,\n      handler: async rawContext => {\n        const c = loose(rawContext);\n        const provider = providerFromParam(c);\n        if (!provider) return c.json({ error: 'unknown_provider' }, 404);\n        const resolved = await resolveOrgTenant(c, auth);\n        if ('response' in resolved) return resolved.response;\n        try {\n          const session = await client.request<PlatformSessionResponse>(\n            'POST',\n            `/v2/integrations/${encodeURIComponent(provider.integrationId)}/connect-sessions`,\n            {},\n          );\n          c.header('Cache-Control', 'no-store');\n          return c.json(session, 201);\n        } catch (err) {\n          return platformError(c, err);\n        }\n      },\n    }),\n    registerApiRoute('/web/integrations/platform/:provider/connections/:connectionId/reconnect-session', {\n      method: 'POST',\n      requiresAuth: false,\n      handler: async rawContext => {\n        const c = loose(rawContext);\n        const provider = providerFromParam(c);\n        if (!provider) return c.json({ error: 'unknown_provider' }, 404);\n        const resolved = await resolveOrgTenant(c, auth);\n        if ('response' in resolved) return resolved.response;\n        const connectionId = c.req.param('connectionId');\n        if (!connectionId) return c.json({ error: 'connection_required' }, 400);\n        try {\n          // Confirm the connection belongs to this provider before minting so\n          // one provider's page cannot reconnect a different provider's\n          // connection through this route family.\n          const listed = await client.request<{ connections: PlatformConnectionRow[] }>('GET', '/v2/connections');\n          const connection = listed.connections.find(\n            candidate =>\n              candidate.id === connectionId && provider.connectionIntegrationIds.includes(candidate.integrationId),\n          );\n          if (!connection) return c.json({ error: 'connection_not_found' }, 404);\n          const session = await client.request<PlatformSessionResponse>(\n            'POST',\n            `/v2/connections/${encodeURIComponent(connectionId)}/reconnect-session`,\n            {},\n          );\n          c.header('Cache-Control', 'no-store');\n          return c.json(session, 201);\n        } catch (err) {\n          return platformError(c, err);\n        }\n      },\n    }),\n  ];\n}\n"],"mappings":";;;;AAwBA,SAAS,MAAM,GAA0B;CACvC,OAAO;AACT;;;;;;;AAeA,MAAa,6BAAsE;CACjF,MAAM;EAAE,eAAe;EAAQ,0BAA0B,CAAC,MAAM;CAAE;CAClE,eAAe;EAAE,eAAe;EAAe,0BAA0B,CAAC,aAAa;CAAE;AAC3F;AAwBA,eAAe,iBACb,GACA,MACiF;CACjF,IAAI,CAAC,KAAK,QAAQ,GAChB,OAAO,EAAE,UAAU,EAAE,KAAK;EAAE,OAAO;EAAiB,SAAS;CAA+B,GAAG,GAAG,EAAE;CAEtG,MAAM,KAAK,WAAW,CAAC;CACvB,MAAM,SAAS,KAAK,OAAO,CAAC;CAC5B,IAAI,CAAC,QAAQ,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,eAAe,GAAG,GAAG,EAAE;CACvE,IAAI,CAAC,OAAO,OACV,OAAO,EACL,UAAU,EAAE,KACV;EACE,OAAO;EACP,SAAS;CACX,GACA,GACF,EACF;CAEF,OAAO,EAAE,QAAQ;EAAE,OAAO,OAAO;EAAO,QAAQ,OAAO;CAAO,EAAE;AAClE;AAEA,SAAS,kBAAkB,GAAiD;CAC1E,MAAM,WAAW,EAAE,IAAI,MAAM,UAAU;CACvC,OAAO,WAAY,2BAA2B,aAAa,OAAQ;AACrE;AAEA,SAAS,cAAc,GAAiB,KAAc;CACpD,IAAI,eAAe,kBAAkB;EACnC,IAAI,IAAI,WAAW,KACjB,OAAO,EAAE,KAAK;GAAE,OAAO;GAAmB,SAAS,IAAI;EAAQ,GAAG,GAAG;EAEvE,IAAI,IAAI,WAAW,KACjB,OAAO,EAAE,KAAK;GAAE,OAAO;GAAsB,SAAS,IAAI;EAAQ,GAAG,GAAG;CAE5E;CACA,OAAO,EAAE,KAAK;EAAE,OAAO;EAA2B,SAAS,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;CAAE,GAAG,GAAG;AACpH;;;;;AAMA,SAAgB,2BAA2B,SAAwD;CACjG,MAAM,EAAE,MAAM,WAAW;CAEzB,OAAO;EACL,iBAAiB,oDAAoD;GACnE,QAAQ;GACR,cAAc;GACd,SAAS,OAAM,eAAc;IAC3B,MAAM,IAAI,MAAM,UAAU;IAC1B,MAAM,WAAW,kBAAkB,CAAC;IACpC,IAAI,CAAC,UAAU,OAAO,EAAE,KAAK,EAAE,OAAO,mBAAmB,GAAG,GAAG;IAC/D,MAAM,WAAW,MAAM,iBAAiB,GAAG,IAAI;IAC/C,IAAI,cAAc,UAAU,OAAO,SAAS;IAC5C,IAAI;KAEF,MAAM,eAAc,MADC,OAAO,QAAkD,OAAO,iBAAiB,EAAA,CAC3E,YAAY,QAAO,eAC5C,SAAS,yBAAyB,SAAS,WAAW,aAAa,CACrE;KACA,OAAO,EAAE,KAAK,EAAE,YAAY,CAAC;IAC/B,SAAS,KAAK;KACZ,OAAO,cAAc,GAAG,GAAG;IAC7B;GACF;EACF,CAAC;EACD,iBAAiB,wDAAwD;GACvE,QAAQ;GACR,cAAc;GACd,SAAS,OAAM,eAAc;IAC3B,MAAM,IAAI,MAAM,UAAU;IAC1B,MAAM,WAAW,kBAAkB,CAAC;IACpC,IAAI,CAAC,UAAU,OAAO,EAAE,KAAK,EAAE,OAAO,mBAAmB,GAAG,GAAG;IAC/D,MAAM,WAAW,MAAM,iBAAiB,GAAG,IAAI;IAC/C,IAAI,cAAc,UAAU,OAAO,SAAS;IAC5C,IAAI;KACF,MAAM,UAAU,MAAM,OAAO,QAC3B,QACA,oBAAoB,mBAAmB,SAAS,aAAa,EAAE,oBAC/D,CAAC,CACH;KACA,EAAE,OAAO,iBAAiB,UAAU;KACpC,OAAO,EAAE,KAAK,SAAS,GAAG;IAC5B,SAAS,KAAK;KACZ,OAAO,cAAc,GAAG,GAAG;IAC7B;GACF;EACF,CAAC;EACD,iBAAiB,oFAAoF;GACnG,QAAQ;GACR,cAAc;GACd,SAAS,OAAM,eAAc;IAC3B,MAAM,IAAI,MAAM,UAAU;IAC1B,MAAM,WAAW,kBAAkB,CAAC;IACpC,IAAI,CAAC,UAAU,OAAO,EAAE,KAAK,EAAE,OAAO,mBAAmB,GAAG,GAAG;IAC/D,MAAM,WAAW,MAAM,iBAAiB,GAAG,IAAI;IAC/C,IAAI,cAAc,UAAU,OAAO,SAAS;IAC5C,MAAM,eAAe,EAAE,IAAI,MAAM,cAAc;IAC/C,IAAI,CAAC,cAAc,OAAO,EAAE,KAAK,EAAE,OAAO,sBAAsB,GAAG,GAAG;IACtE,IAAI;KASF,IAAI,EAJe,MADE,OAAO,QAAkD,OAAO,iBAAiB,EAAA,CAC5E,YAAY,MACpC,cACE,UAAU,OAAO,gBAAgB,SAAS,yBAAyB,SAAS,UAAU,aAAa,CAEzF,GAAG,OAAO,EAAE,KAAK,EAAE,OAAO,uBAAuB,GAAG,GAAG;KACrE,MAAM,UAAU,MAAM,OAAO,QAC3B,QACA,mBAAmB,mBAAmB,YAAY,EAAE,qBACpD,CAAC,CACH;KACA,EAAE,OAAO,iBAAiB,UAAU;KACpC,OAAO,EAAE,KAAK,SAAS,GAAG;IAC5B,SAAS,KAAK;KACZ,OAAO,cAAc,GAAG,GAAG;IAC7B;GACF;EACF,CAAC;CACH;AACF"}

package/dist/integrations/platform/github/event-worker.js

@@ -1,6 +1,6 @@
 import { listPullRequestSubscriptionsForWebhook, retirePullRequestSubscription } from "../../github/subscriptions.js";
-import { dispatchGithubWebhook, isFactoryAppSender, resolveAuthorizedBots } from "../../github/webhook.js";
 import { PlatformApiError } from "../api-client.js";
+import { dispatchGithubWebhook, isFactoryAppSender, resolveAuthorizedBots } from "../../github/webhook.js";
 import { NoopLeaseProvider, isLeaseProvider } from "@mastra/core/events";
 import { randomUUID } from "crypto";
 import { MastraWorker } from "@mastra/core/worker";

package/dist/integrations/platform/github/integration.js

@@ -1,4 +1,5 @@
 import { createGithubSubscriptionTools, parseCreatedPullRequest, subscribeCurrentSessionToPullRequest } from "../../github/session-subscriptions.js";
+import { PlatformApiClient, PlatformApiError, logPlatformInfo, logPlatformWarn, platformApiClientConfigFromEnv } from "../api-client.js";
 import { GithubAppIdentity } from "../../github/app-identity.js";
 import { resolveGithubRules } from "../../github/default-rules.js";
 import { attachGithubReconciler, attachGithubRules } from "../../github/rules.js";
@@ -7,7 +8,6 @@ import { reconcileInterval, reconciliationEnabled } from "../../github/reconcili
 import { parseAuthorizedBotsEnv } from "../../github/webhook.js";
 import { buildGithubRoutes } from "../../github/routes.js";
 import { settleOrAbort } from "../../github/settle-or-abort.js";
-import { PlatformApiClient, PlatformApiError, logPlatformInfo, logPlatformWarn, platformApiClientConfigFromEnv } from "../api-client.js";
 import { PlatformGithubEventWorker } from "./event-worker.js";
 import { registerApiRoute } from "@mastra/core/server";
 //#region src/integrations/platform/github/integration.ts

package/dist/integrations/platform/incidentio/integration.d.ts

@@ -1,17 +1,74 @@
+import type { RequestContext } from '@mastra/core/request-context';
+import type { ApiRoute } from '@mastra/core/server';
 import type { MastraWorker } from '@mastra/core/worker';
-import type { FactoryIntegration, IntegrationContext } from '../../base.js';
+import type { Intake } from '../../../capabilities/intake.js';
+import type { RouteAuth } from '../../../routes/route.js';
+import type { IntakeStorage } from '../../../storage/domains/intake/base.js';
+import type { FactoryProjectsStorage } from '../../../storage/domains/projects/base.js';
+import type { FactoryIntegration, IntegrationContext, IntegrationTools } from '../../base.js';
+import type { IncidentioEventRules, IncidentioRuleOverrides } from '../../incidentio/default-rules.js';
 import { type PlatformApiClientConfig } from '../api-client.js';
 export interface PlatformIncidentioIntegrationConfig {
     clientConfig?: PlatformApiClientConfig;
-    connectionId?: string;
+    /** Per-event replacements for the default Factory incident.io rules. */
+    rules?: IncidentioRuleOverrides;
 }
+interface PlatformIntegrationConnection {
+    id: string;
+    integrationId: string;
+    status: 'active' | 'needs_reauth';
+    accountLabel: string | null;
+}
+interface ScopedSourceId {
+    connectionId: string;
+    sourceId: string;
+}
+export declare function encodeScopedSourceId(connectionId: string, sourceId: string): string;
+export declare function decodeScopedSourceId(value: string): ScopedSourceId | null;
 export declare class PlatformIncidentioIntegration implements FactoryIntegration {
     #private;
     readonly id = "incidentio";
-    readonly intake: import("../../../capabilities/intake.js").Intake;
     constructor(config?: PlatformIncidentioIntegrationConfig);
+    /** Event rules driving automatic follow-up materialization and close handling. */
+    get rules(): IncidentioEventRules;
+    initialize({ projects, auth, intake, }: {
+        projects: FactoryProjectsStorage;
+        auth: RouteAuth;
+        intake: IntakeStorage;
+    }): void;
+    /** Cross-integration intake selection/binding domain — agent-tool authorization. */
+    get intakeStorage(): IntakeStorage;
+    /** Factory projects domain — maps a session's resourceId to its owning org. */
+    get projects(): FactoryProjectsStorage;
+    /** Whether the host runs with web auth enabled; every surface is inert without it. */
+    get authEnabled(): boolean;
+    /**
+     * Map a session's resourceId (the factory project id) to its owning org.
+     * Same caching semantics as the Jira integration: definitive misses are
+     * cached, transient database failures are not.
+     */
+    resolveOrgId(resourceId: string): Promise<string | null>;
+    /**
+     * Org-scoped agent tools: the read-only follow-up detail tool for sessions
+     * whose resource is a factory project with an active Platform-managed
+     * incident.io connection.
+     */
+    agentTools(args: {
+        requestContext: RequestContext;
+    }): Promise<IntegrationTools>;
+    listConnections(): Promise<PlatformIntegrationConnection[]>;
+    hasActiveConnections(): Promise<boolean>;
+    clearCaches(): void;
+    readonly intake: Intake;
     workers(ctx: IntegrationContext): MastraWorker[];
-    routes(): [];
+    /**
+     * The integration's HTTP surface: `/web/incidentio/*` Mastra `apiRoutes`
+     * (status + follow-up listing/detail for Intake), aggregated across every
+     * discovered Platform connection. A board-scoped listing also feeds the
+     * incident.io event rules.
+     */
+    routes(ctx: IntegrationContext): ApiRoute[];
     diagnostics(): Record<string, unknown>;
 }
+export {};
 //# sourceMappingURL=integration.d.ts.map

package/dist/integrations/platform/incidentio/integration.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"integration.d.ts","sourceRoot":"","sources":["../../../../src/integrations/platform/incidentio/integration.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAExD,OAAO,KAAK,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAS5E,OAAO,EAAkC,KAAK,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAEhG,MAAM,WAAW,mCAAmC;IAClD,YAAY,CAAC,EAAE,uBAAuB,CAAC;IACvC,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAID,qBAAa,6BAA8B,YAAW,kBAAkB;;IACtE,QAAQ,CAAC,EAAE,gBAAgB;IAC3B,QAAQ,CAAC,MAAM,mDAAC;gBAGJ,MAAM,GAAE,mCAAwC;IAsB5D,OAAO,CAAC,GAAG,EAAE,kBAAkB,GAAG,YAAY,EAAE;IAchD,MAAM,IAAI,EAAE;IAIZ,WAAW,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAGvC"}
+{"version":3,"file":"integration.d.ts","sourceRoot":"","sources":["../../../../src/integrations/platform/incidentio/integration.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAGxD,OAAO,KAAK,EAIV,MAAM,EAUP,MAAM,iCAAiC,CAAC;AACzC,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,yCAAyC,CAAC;AAC7E,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,2CAA2C,CAAC;AACxF,OAAO,KAAK,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAI9F,OAAO,KAAK,EAAE,oBAAoB,EAAE,uBAAuB,EAAE,MAAM,mCAAmC,CAAC;AAcvG,OAAO,EAAqD,KAAK,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAEnH,MAAM,WAAW,mCAAmC;IAClD,YAAY,CAAC,EAAE,uBAAuB,CAAC;IACvC,wEAAwE;IACxE,KAAK,CAAC,EAAE,uBAAuB,CAAC;CACjC;AAaD,UAAU,6BAA6B;IACrC,EAAE,EAAE,MAAM,CAAC;IACX,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,QAAQ,GAAG,cAAc,CAAC;IAClC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B;AAED,UAAU,cAAc;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAcD,wBAAgB,oBAAoB,CAAC,YAAY,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAEnF;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI,CAYzE;AAoDD,qBAAa,6BAA8B,YAAW,kBAAkB;;IACtE,QAAQ,CAAC,EAAE,gBAAgB;gBAaf,MAAM,GAAE,mCAAwC;IAO5D,kFAAkF;IAClF,IAAI,KAAK,IAAI,oBAAoB,CAEhC;IAED,UAAU,CAAC,EACT,QAAQ,EACR,IAAI,EACJ,MAAM,GACP,EAAE;QACD,QAAQ,EAAE,sBAAsB,CAAC;QACjC,IAAI,EAAE,SAAS,CAAC;QAChB,MAAM,EAAE,aAAa,CAAC;KACvB,GAAG,IAAI;IAMR,oFAAoF;IACpF,IAAI,aAAa,IAAI,aAAa,CAKjC;IAED,+EAA+E;IAC/E,IAAI,QAAQ,IAAI,sBAAsB,CAKrC;IAED,sFAAsF;IACtF,IAAI,WAAW,IAAI,OAAO,CAEzB;IAED;;;;OAIG;IACG,YAAY,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAqB9D;;;;OAIG;IACG,UAAU,CAAC,IAAI,EAAE;QAAE,cAAc,EAAE,cAAc,CAAA;KAAE,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAK/E,eAAe,IAAI,OAAO,CAAC,6BAA6B,EAAE,CAAC;IAS3D,oBAAoB,IAAI,OAAO,CAAC,OAAO,CAAC;IAI9C,WAAW,IAAI,IAAI;IAiEnB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAQrB;IA4JF,OAAO,CAAC,GAAG,EAAE,kBAAkB,GAAG,YAAY,EAAE;IAchD;;;;;OAKG;IACH,MAAM,CAAC,GAAG,EAAE,kBAAkB,GAAG,QAAQ,EAAE;IAS3C,WAAW,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAGvC"}