@mastra/factory 0.18.0 → 0.19.0-alpha.1

package/dist/routes/attention-providers.js.map

@@ -1 +1 @@
-{"version":3,"file":"attention-providers.js","names":["#workItems","#spec","#scan","#receiptsFor","#linkedItems","#comments","#resolve"],"sources":["../../src/routes/attention-providers.ts"],"sourcesContent":["/**\n * Per-kind attention providers. Each kind owns its counts, its bounded page\n * scan, and its wire item shape; the route layer k-way merges provider pages\n * on `occurredAt desc` with one resumable cursor per kind.\n */\n\nimport { factoryDispatchFailureMetadata } from '../rules/dispatch-errors.js';\nimport type {\n  WorkItemCommentRow,\n  WorkItemCommentsStorage,\n  WorkItemMentionRow,\n} from '../storage/domains/comments/base.js';\nimport type {\n  FactoryAttentionIdentity,\n  FactoryAttentionKind,\n  FactoryAttentionReceiptRecord,\n  FactoryDeferredDecisionRecord,\n  FactoryDispatchStatus,\n  FactorySupervisorFindingRecord,\n  WorkItemRow,\n  WorkItemsStorage,\n} from '../storage/domains/work-items/base.js';\nimport {\n  factoryAttentionKey,\n  factoryDecisionAttentionIdentity,\n  factoryMentionAttentionIdentity,\n  factorySupervisorFindingAttentionIdentity,\n} from '../storage/domains/work-items/base.js';\nimport type { FactoryHealthFinding } from '../supervisor/health.js';\n\nexport type FactoryAttentionView = 'open' | 'unread' | 'archived';\n\nexport interface AttentionScope {\n  orgId: string;\n  userId: string;\n  factoryProjectId: string;\n}\n\nexport interface AttentionStreamPosition {\n  occurredAt: Date;\n  id: string;\n}\n\nexport interface AttentionEntry {\n  occurredAt: Date;\n  /** Position resuming the provider's stream right after this entry. */\n  resumeCursor: AttentionStreamPosition;\n  item: Record<string, unknown>;\n}\n\nexport interface AttentionPageArgs {\n  view: FactoryAttentionView;\n  search?: string;\n  before?: AttentionStreamPosition;\n  limit: number;\n}\n\nexport interface AttentionPageResult {\n  entries: AttentionEntry[];\n  /** More rows behind the scan once every returned entry is consumed. */\n  hasMore: boolean;\n  /** Resume point for a scan-budget stop past the last returned entry. */\n  continuation?: AttentionStreamPosition;\n}\n\nexport interface AttentionCounts {\n  open: number;\n  unread: number;\n}\n\nexport interface AttentionLatest {\n  key: string;\n  at: Date;\n  unread: boolean;\n}\n\nexport interface AttentionProvider {\n  kind: FactoryAttentionKind;\n  counts(scope: AttentionScope): Promise<AttentionCounts>;\n  latest(scope: AttentionScope): Promise<AttentionLatest | null>;\n  page(scope: AttentionScope, args: AttentionPageArgs): Promise<AttentionPageResult>;\n  markAllRead(\n    scope: AttentionScope,\n    args: { before?: AttentionStreamPosition; now: Date },\n  ): Promise<{ hasMore: boolean; continuation?: AttentionStreamPosition }>;\n}\n\nexport const SCAN_PAGE_SIZE = 50;\n// Receipt filtering is bounded per request; the response cursor resumes after the last scan.\nconst MAX_RECEIPT_SCAN_PAGES = 4;\n\ninterface ScanBatch<T> {\n  rows: T[];\n  /** Set only when the page budget stopped a scan that still had rows behind it. */\n  continuation?: AttentionStreamPosition;\n}\n\n/**\n * One bounded keyset scan, shared by every provider read. Walks newest-first\n * from `before` until the stream runs dry or the page budget is spent; the\n * final batch of a budget stop carries the position to resume from.\n */\nexport async function* scanBatches<T>(\n  fetchBatch: (before?: AttentionStreamPosition) => Promise<{ rows: T[]; hasMore: boolean }>,\n  positionOf: (row: T) => AttentionStreamPosition,\n  before?: AttentionStreamPosition,\n): AsyncGenerator<ScanBatch<T>> {\n  let cursor = before;\n  for (let scanned = 1; scanned <= MAX_RECEIPT_SCAN_PAGES; scanned += 1) {\n    const { rows, hasMore } = await fetchBatch(cursor);\n    const last = rows.at(-1);\n    if (!last) return;\n    const position = positionOf(last);\n    yield { rows, ...(hasMore && scanned === MAX_RECEIPT_SCAN_PAGES ? { continuation: position } : {}) };\n    if (!hasMore) return;\n    cursor = position;\n  }\n}\n\n/** Fills a page from the scan, stopping at `limit` entries or at the scan budget. */\nexport async function collectPage<T>(\n  batches: AsyncGenerator<ScanBatch<T>>,\n  limit: number,\n  toEntries: (rows: T[]) => Promise<AttentionEntry[]>,\n): Promise<AttentionPageResult> {\n  const entries: AttentionEntry[] = [];\n  for await (const batch of batches) {\n    for (const entry of await toEntries(batch.rows)) {\n      if (entries.length === limit) return { entries, hasMore: true };\n      entries.push(entry);\n    }\n    if (batch.continuation) return { entries, hasMore: true, continuation: batch.continuation };\n  }\n  return { entries, hasMore: false };\n}\n\n/** Marks every scanned batch read, reporting where a budget stop left off. */\nexport async function markScanRead<T>(\n  batches: AsyncGenerator<ScanBatch<T>>,\n  markBatch: (rows: T[]) => Promise<void>,\n): Promise<{ hasMore: boolean; continuation?: AttentionStreamPosition }> {\n  for await (const batch of batches) {\n    await markBatch(batch.rows);\n    if (batch.continuation) return { hasMore: true, continuation: batch.continuation };\n  }\n  return { hasMore: false };\n}\n\nexport function factoryDecisionType(decision: FactoryDeferredDecisionRecord): string {\n  return typeof decision.decision.type === 'string' ? decision.decision.type.slice(0, 64) : 'unknown';\n}\n\nexport function matchesView(view: FactoryAttentionView, receipt: FactoryAttentionReceiptRecord | undefined): boolean {\n  if (view === 'archived') return receipt?.state === 'archived';\n  if (view === 'unread') return receipt === undefined;\n  return receipt?.state !== 'archived';\n}\n\nfunction attentionTarget(decision: FactoryDeferredDecisionRecord, item: WorkItemRow | undefined) {\n  if (!item) return { kind: 'rules' as const };\n  const role = typeof decision.decision.role === 'string' ? decision.decision.role : undefined;\n  const session = role ? item.sessions[role] : undefined;\n  if (session) {\n    return {\n      kind: 'thread' as const,\n      sessionId: session.sessionId,\n      threadId: session.threadId,\n    };\n  }\n  return {\n    kind: 'work-item' as const,\n    workItemId: item.id,\n    board: workItemBoard(item),\n  };\n}\n\nexport function workItemBoard(item: WorkItemRow): 'review' | 'work' {\n  const review = item.externalSource?.integrationId === 'github' && item.externalSource.type === 'pull-request';\n  return review ? 'review' : 'work';\n}\n\n/** One deferred-decision status seen as attention: failures and parked runs differ only by this. */\nexport interface DecisionAttentionSpec {\n  kind: FactoryAttentionKind;\n  status: FactoryDispatchStatus;\n  identity(decision: FactoryDeferredDecisionRecord): FactoryAttentionIdentity;\n  occurredAt(decision: FactoryDeferredDecisionRecord): Date;\n  title(decision: FactoryDeferredDecisionRecord, item: WorkItemRow | undefined): string;\n  detail(decision: FactoryDeferredDecisionRecord, item: WorkItemRow | undefined): string;\n  extra?(decision: FactoryDeferredDecisionRecord): Record<string, unknown>;\n  matches(decision: FactoryDeferredDecisionRecord, item: WorkItemRow | undefined, search: string): boolean;\n}\n\nexport class DecisionAttentionProvider implements AttentionProvider {\n  readonly kind: FactoryAttentionKind;\n  readonly #workItems: WorkItemsStorage;\n  readonly #spec: DecisionAttentionSpec;\n\n  constructor({ workItems }: { workItems: WorkItemsStorage }, spec: DecisionAttentionSpec) {\n    this.#workItems = workItems;\n    this.#spec = spec;\n    this.kind = spec.kind;\n  }\n\n  async counts(scope: AttentionScope): Promise<AttentionCounts> {\n    const [total, receiptCount, archivedCount] = await Promise.all([\n      this.#workItems.countDeferredDecisionsByStatuses({\n        orgId: scope.orgId,\n        factoryProjectId: scope.factoryProjectId,\n        statuses: [this.#spec.status],\n      }),\n      this.#workItems.countAttentionReceipts({ ...receiptScope(scope), kind: this.kind }),\n      this.#workItems.countAttentionReceipts({ ...receiptScope(scope), kind: this.kind, state: 'archived' }),\n    ]);\n    return {\n      open: Math.max(0, total - archivedCount),\n      unread: Math.max(0, total - receiptCount),\n    };\n  }\n\n  async latest(scope: AttentionScope): Promise<AttentionLatest | null> {\n    const page = await this.#workItems.listDecisionPageByStatus({\n      orgId: scope.orgId,\n      factoryProjectId: scope.factoryProjectId,\n      status: this.#spec.status,\n      limit: 1,\n    });\n    const newest = page.decisions[0];\n    if (!newest) return null;\n    const identity = this.#spec.identity(newest);\n    const receipts = await this.#workItems.listAttentionReceipts({\n      ...receiptScope(scope),\n      identities: [identity],\n    });\n    return {\n      key: factoryAttentionKey(scope.factoryProjectId, identity),\n      at: this.#spec.occurredAt(newest),\n      unread: receipts.length === 0,\n    };\n  }\n\n  #scan(scope: AttentionScope, before?: AttentionStreamPosition) {\n    return scanBatches<FactoryDeferredDecisionRecord>(\n      async cursor => {\n        const page = await this.#workItems.listDecisionPageByStatus({\n          orgId: scope.orgId,\n          factoryProjectId: scope.factoryProjectId,\n          status: this.#spec.status,\n          before: cursor,\n          limit: SCAN_PAGE_SIZE,\n        });\n        return { rows: page.decisions, hasMore: page.hasMore };\n      },\n      decision => ({ occurredAt: this.#spec.occurredAt(decision), id: decision.id }),\n      before,\n    );\n  }\n\n  async page(scope: AttentionScope, { view, search, before, limit }: AttentionPageArgs): Promise<AttentionPageResult> {\n    return collectPage(this.#scan(scope, before), limit, async decisions => {\n      const [receiptByKey, itemById] = await Promise.all([\n        this.#receiptsFor(scope, decisions),\n        this.#linkedItems(scope, decisions),\n      ]);\n      const entries: AttentionEntry[] = [];\n      for (const decision of decisions) {\n        const identity = this.#spec.identity(decision);\n        const receipt = receiptByKey.get(factoryAttentionKey(scope.factoryProjectId, identity));\n        if (!matchesView(view, receipt)) continue;\n        const item = decision.workItemId ? itemById.get(decision.workItemId) : undefined;\n        if (search && !this.#spec.matches(decision, item, search)) continue;\n        const occurredAt = this.#spec.occurredAt(decision);\n        entries.push({\n          occurredAt,\n          resumeCursor: { occurredAt, id: decision.id },\n          item: {\n            key: factoryAttentionKey(scope.factoryProjectId, identity),\n            kind: this.kind,\n            decisionId: decision.id,\n            occurrence: identity.occurrence,\n            workItemId: decision.workItemId,\n            title: this.#spec.title(decision, item),\n            detail: this.#spec.detail(decision, item),\n            decisionType: factoryDecisionType(decision),\n            ...this.#spec.extra?.(decision),\n            occurredAt: occurredAt.toISOString(),\n            read: receipt !== undefined,\n            archived: receipt?.state === 'archived',\n            target: attentionTarget(decision, item),\n          },\n        });\n      }\n      return entries;\n    });\n  }\n\n  async #receiptsFor(\n    scope: AttentionScope,\n    decisions: FactoryDeferredDecisionRecord[],\n  ): Promise<Map<string, FactoryAttentionReceiptRecord>> {\n    const receipts = await this.#workItems.listAttentionReceipts({\n      ...receiptScope(scope),\n      identities: decisions.map(decision => this.#spec.identity(decision)),\n    });\n    return new Map(receipts.map(receipt => [factoryAttentionKey(scope.factoryProjectId, receipt), receipt]));\n  }\n\n  async #linkedItems(\n    scope: AttentionScope,\n    decisions: FactoryDeferredDecisionRecord[],\n  ): Promise<Map<string, WorkItemRow>> {\n    const items = await this.#workItems.listByIds({\n      orgId: scope.orgId,\n      factoryProjectId: scope.factoryProjectId,\n      ids: decisions.flatMap(decision => (decision.workItemId ? [decision.workItemId] : [])),\n    });\n    return new Map(items.map(item => [item.id, item]));\n  }\n\n  async markAllRead(\n    scope: AttentionScope,\n    { before, now }: { before?: AttentionStreamPosition; now: Date },\n  ): Promise<{ hasMore: boolean; continuation?: AttentionStreamPosition }> {\n    return markScanRead(this.#scan(scope, before), async decisions => {\n      await this.#workItems.markAttentionReceiptsRead({\n        ...receiptScope(scope),\n        identities: decisions.map(decision => this.#spec.identity(decision)),\n        now,\n      });\n    });\n  }\n}\n\nexport const failedDecisionAttentionSpec: DecisionAttentionSpec = {\n  kind: 'automation-failed',\n  status: 'failed',\n  identity: decision => factoryDecisionAttentionIdentity(decision.id, decision.failureOccurrence),\n  occurredAt: decision => decision.completedAt ?? decision.updatedAt,\n  title: (decision, item) => item?.title ?? factoryDispatchFailureMetadata(decision.failureCode).label,\n  detail: decision => decision.lastError?.slice(0, 512) ?? factoryDispatchFailureMetadata(decision.failureCode).label,\n  extra: decision => ({\n    failureCode: decision.failureCode,\n    canRetry: factoryDispatchFailureMetadata(decision.failureCode).canRetry,\n  }),\n  matches: (decision, item, search) =>\n    item?.title.toLowerCase().includes(search) === true ||\n    decision.lastError?.toLowerCase().includes(search) === true ||\n    factoryDecisionType(decision).toLowerCase().includes(search),\n};\n\ninterface ResolvedMention {\n  mention: WorkItemMentionRow;\n  comment: WorkItemCommentRow;\n  item: WorkItemRow;\n  identity: FactoryAttentionIdentity;\n  receipt: FactoryAttentionReceiptRecord | undefined;\n}\n\nfunction supervisorFindingPayload(row: FactorySupervisorFindingRecord): FactoryHealthFinding {\n  return row.finding as unknown as FactoryHealthFinding;\n}\n\nexport class SupervisorFindingAttentionProvider implements AttentionProvider {\n  readonly kind = 'supervisor-finding' as const;\n  readonly #workItems: WorkItemsStorage;\n\n  constructor({ workItems }: { workItems: WorkItemsStorage }) {\n    this.#workItems = workItems;\n  }\n\n  async counts(scope: AttentionScope): Promise<AttentionCounts> {\n    let open = 0;\n    let unread = 0;\n    const batches = scanBatches<FactorySupervisorFindingRecord>(\n      before =>\n        this.#workItems.listSupervisorFindingPage({ ...scope, ...(before ? { before } : {}), limit: SCAN_PAGE_SIZE }),\n      row => ({ occurredAt: row.openedAt, id: row.id }),\n    );\n    for await (const page of batches) {\n      const identities = page.rows.map(row =>\n        factorySupervisorFindingAttentionIdentity(row.findingKey, row.occurrence),\n      );\n      const receipts = await this.#workItems.listAttentionReceipts({ ...scope, identities });\n      const byIdentity = new Map(\n        receipts.map(receipt => [`${receipt.sourceId}\\0${receipt.occurrence}`, receipt] as const),\n      );\n      for (const row of page.rows) {\n        const receipt = byIdentity.get(`${row.findingKey}\\0${row.occurrence}`);\n        if (receipt?.state === 'archived') continue;\n        open += 1;\n        if (!receipt) unread += 1;\n      }\n    }\n    return { open, unread };\n  }\n\n  async latest(scope: AttentionScope): Promise<AttentionLatest | null> {\n    const page = await this.#workItems.listSupervisorFindingPage({ ...scope, limit: 1 });\n    const newest = page.rows[0];\n    if (!newest) return null;\n    const identity = factorySupervisorFindingAttentionIdentity(newest.findingKey, newest.occurrence);\n    const receipts = await this.#workItems.listAttentionReceipts({ ...scope, identities: [identity] });\n    return {\n      key: factoryAttentionKey(scope.factoryProjectId, identity),\n      at: newest.openedAt,\n      unread: receipts.length === 0,\n    };\n  }\n\n  page(scope: AttentionScope, args: AttentionPageArgs): Promise<AttentionPageResult> {\n    return collectPage(\n      scanBatches<FactorySupervisorFindingRecord>(\n        before =>\n          this.#workItems.listSupervisorFindingPage({ ...scope, ...(before ? { before } : {}), limit: SCAN_PAGE_SIZE }),\n        row => ({ occurredAt: row.openedAt, id: row.id }),\n        args.before,\n      ),\n      args.limit,\n      async rows => {\n        const identities = rows.map(row => factorySupervisorFindingAttentionIdentity(row.findingKey, row.occurrence));\n        const receipts = await this.#workItems.listAttentionReceipts({ ...scope, identities });\n        const byIdentity = new Map(\n          receipts.map(receipt => [`${receipt.sourceId}\\0${receipt.occurrence}`, receipt] as const),\n        );\n        return rows.flatMap(row => {\n          const finding = supervisorFindingPayload(row);\n          const receipt = byIdentity.get(`${row.findingKey}\\0${row.occurrence}`);\n          if (!matchesView(args.view, receipt)) return [];\n          const text = `${finding.title} ${finding.evidence}`.toLowerCase();\n          if (args.search && !text.includes(args.search)) return [];\n          const identity = factorySupervisorFindingAttentionIdentity(row.findingKey, row.occurrence);\n          return [\n            {\n              key: factoryAttentionKey(scope.factoryProjectId, identity),\n              occurredAt: row.openedAt,\n              resumeCursor: { occurredAt: row.openedAt, id: row.id },\n              receipt,\n              item: {\n                key: factoryAttentionKey(scope.factoryProjectId, identity),\n                kind: this.kind,\n                findingKey: row.findingKey,\n                occurrence: row.occurrence,\n                findingTitle: finding.title,\n                evidence: finding.evidence,\n                title: finding.title,\n                detail: finding.evidence,\n                beganAt: finding.beganAt ?? null,\n                suggestedRepair: finding.suggestedRepair,\n                workItemId: finding.workItemId,\n                occurredAt: row.openedAt.toISOString(),\n                read: Boolean(receipt),\n                archived: receipt?.state === 'archived',\n                target: finding.workItemId\n                  ? { kind: 'work-item', workItemId: finding.workItemId, board: 'work' }\n                  : { kind: 'rules' },\n              },\n            },\n          ];\n        });\n      },\n    );\n  }\n\n  markAllRead(\n    scope: AttentionScope,\n    args: { before?: AttentionStreamPosition; now: Date },\n  ): Promise<{ hasMore: boolean; continuation?: AttentionStreamPosition }> {\n    return markScanRead(\n      scanBatches<FactorySupervisorFindingRecord>(\n        before =>\n          this.#workItems.listSupervisorFindingPage({ ...scope, ...(before ? { before } : {}), limit: SCAN_PAGE_SIZE }),\n        row => ({ occurredAt: row.openedAt, id: row.id }),\n        args.before,\n      ),\n      rows =>\n        this.#workItems.markAttentionReceiptsRead({\n          ...scope,\n          identities: rows.map(row => factorySupervisorFindingAttentionIdentity(row.findingKey, row.occurrence)),\n          now: args.now,\n        }),\n    );\n  }\n}\n\nexport class MentionAttentionProvider implements AttentionProvider {\n  readonly kind = 'mention' as const;\n  readonly #workItems: WorkItemsStorage;\n  readonly #comments: WorkItemCommentsStorage;\n\n  constructor({ workItems, comments }: { workItems: WorkItemsStorage; comments: WorkItemCommentsStorage }) {\n    this.#workItems = workItems;\n    this.#comments = comments;\n  }\n\n  #scan(scope: AttentionScope, before?: AttentionStreamPosition) {\n    return scanBatches<WorkItemMentionRow>(\n      async cursor => {\n        const rows = await this.#comments.listMentionsForUser({\n          ...receiptScope(scope),\n          ...(cursor ? { before: cursor } : {}),\n          limit: SCAN_PAGE_SIZE + 1,\n        });\n        return { rows: rows.slice(0, SCAN_PAGE_SIZE), hasMore: rows.length > SCAN_PAGE_SIZE };\n      },\n      mention => ({ occurredAt: mention.occurredAt, id: mention.id }),\n      before,\n    );\n  }\n\n  /**\n   * Mention rows joined to what the inbox needs to show one — dropping the\n   * ones it cannot: a deleted comment, or a work item gone from the project.\n   */\n  async #resolve(scope: AttentionScope, mentions: WorkItemMentionRow[]): Promise<ResolvedMention[]> {\n    const [receipts, comments, items] = await Promise.all([\n      this.#workItems.listAttentionReceipts({\n        ...receiptScope(scope),\n        identities: mentions.map(mention => factoryMentionAttentionIdentity(mention.commentId)),\n      }),\n      this.#comments.listByIds({\n        orgId: scope.orgId,\n        ids: [...new Set(mentions.map(mention => mention.commentId))],\n      }),\n      this.#workItems.listByIds({\n        orgId: scope.orgId,\n        factoryProjectId: scope.factoryProjectId,\n        ids: [...new Set(mentions.map(mention => mention.workItemId))],\n      }),\n    ]);\n    const receiptByKey = new Map(\n      receipts.map(receipt => [factoryAttentionKey(scope.factoryProjectId, receipt), receipt]),\n    );\n    const commentById = new Map(comments.map(comment => [comment.id, comment]));\n    const itemById = new Map(items.map(item => [item.id, item]));\n\n    const resolved: ResolvedMention[] = [];\n    for (const mention of mentions) {\n      const comment = commentById.get(mention.commentId);\n      const item = itemById.get(mention.workItemId);\n      if (!comment || comment.deletedAt || !item) continue;\n      const identity = factoryMentionAttentionIdentity(mention.commentId);\n      resolved.push({\n        mention,\n        comment,\n        item,\n        identity,\n        receipt: receiptByKey.get(factoryAttentionKey(scope.factoryProjectId, identity)),\n      });\n    }\n    return resolved;\n  }\n\n  /**\n   * Derived from the same bounded scan as `page`, never from raw aggregates:\n   * the badge must count exactly what the views can show, down to stopping at\n   * the same scan budget. Aggregates would count orphan mention rows the list\n   * can never display or clear.\n   */\n  async counts(scope: AttentionScope): Promise<AttentionCounts> {\n    let open = 0;\n    let unread = 0;\n    for await (const batch of this.#scan(scope)) {\n      for (const { receipt } of await this.#resolve(scope, batch.rows)) {\n        if (receipt?.state !== 'archived') open += 1;\n        if (receipt === undefined) unread += 1;\n      }\n    }\n    return { open, unread };\n  }\n\n  async latest(scope: AttentionScope): Promise<AttentionLatest | null> {\n    const mentions = await this.#comments.listMentionsForUser({ ...receiptScope(scope), limit: 10 });\n    const newest = (await this.#resolve(scope, mentions))[0];\n    if (!newest) return null;\n    return {\n      key: factoryAttentionKey(scope.factoryProjectId, newest.identity),\n      at: newest.mention.occurredAt,\n      unread: newest.receipt === undefined,\n    };\n  }\n\n  async page(scope: AttentionScope, { view, search, before, limit }: AttentionPageArgs): Promise<AttentionPageResult> {\n    return collectPage(this.#scan(scope, before), limit, async mentions => {\n      const entries: AttentionEntry[] = [];\n      for (const resolved of await this.#resolve(scope, mentions)) {\n        if (!matchesView(view, resolved.receipt)) continue;\n        if (search && !matchesMentionSearch(resolved, search)) continue;\n        entries.push({\n          occurredAt: resolved.mention.occurredAt,\n          resumeCursor: { occurredAt: resolved.mention.occurredAt, id: resolved.mention.id },\n          item: toMentionItem(scope, resolved),\n        });\n      }\n      return entries;\n    });\n  }\n\n  async markAllRead(\n    scope: AttentionScope,\n    { before, now }: { before?: AttentionStreamPosition; now: Date },\n  ): Promise<{ hasMore: boolean; continuation?: AttentionStreamPosition }> {\n    return markScanRead(this.#scan(scope, before), async mentions => {\n      await this.#workItems.markAttentionReceiptsRead({\n        ...receiptScope(scope),\n        identities: mentions.map(mention => factoryMentionAttentionIdentity(mention.commentId)),\n        now,\n      });\n    });\n  }\n}\n\nfunction matchesMentionSearch({ item, comment }: ResolvedMention, search: string): boolean {\n  return (\n    item.title.toLowerCase().includes(search) ||\n    comment.body.toLowerCase().includes(search) ||\n    comment.author.displayName?.toLowerCase().includes(search) === true\n  );\n}\n\nfunction toMentionItem(scope: AttentionScope, { mention, comment, item, identity, receipt }: ResolvedMention) {\n  const authorName = comment.author.displayName;\n  return {\n    key: factoryAttentionKey(scope.factoryProjectId, identity),\n    kind: 'mention' as const,\n    commentId: mention.commentId,\n    occurrence: 0,\n    workItemId: mention.workItemId,\n    title: item.title,\n    detail: comment.body.slice(0, 512),\n    authorId: comment.author.id,\n    ...(authorName ? { authorName } : {}),\n    occurredAt: mention.occurredAt.toISOString(),\n    read: receipt !== undefined,\n    archived: receipt?.state === 'archived',\n    target: {\n      kind: 'work-item' as const,\n      workItemId: mention.workItemId,\n      board: workItemBoard(item),\n      commentId: mention.commentId,\n    },\n  };\n}\n\nexport function receiptScope(scope: AttentionScope): { orgId: string; factoryProjectId: string; userId: string } {\n  return { orgId: scope.orgId, factoryProjectId: scope.factoryProjectId, userId: scope.userId };\n}\n"],"mappings":";;;;;;;;AAuFA,MAAa,iBAAiB;AAE9B,MAAM,yBAAyB;;;;;;AAa/B,gBAAuB,YACrB,YACA,YACA,QAC8B;CAC9B,IAAI,SAAS;CACb,KAAK,IAAI,UAAU,GAAG,WAAW,wBAAwB,WAAW,GAAG;EACrE,MAAM,EAAE,MAAM,YAAY,MAAM,WAAW,MAAM;EACjD,MAAM,OAAO,KAAK,GAAG,EAAE;EACvB,IAAI,CAAC,MAAM;EACX,MAAM,WAAW,WAAW,IAAI;EAChC,MAAM;GAAE;GAAM,GAAI,WAAW,YAAY,yBAAyB,EAAE,cAAc,SAAS,IAAI,CAAC;EAAG;EACnG,IAAI,CAAC,SAAS;EACd,SAAS;CACX;AACF;;AAGA,eAAsB,YACpB,SACA,OACA,WAC8B;CAC9B,MAAM,UAA4B,CAAC;CACnC,WAAW,MAAM,SAAS,SAAS;EACjC,KAAK,MAAM,SAAS,MAAM,UAAU,MAAM,IAAI,GAAG;GAC/C,IAAI,QAAQ,WAAW,OAAO,OAAO;IAAE;IAAS,SAAS;GAAK;GAC9D,QAAQ,KAAK,KAAK;EACpB;EACA,IAAI,MAAM,cAAc,OAAO;GAAE;GAAS,SAAS;GAAM,cAAc,MAAM;EAAa;CAC5F;CACA,OAAO;EAAE;EAAS,SAAS;CAAM;AACnC;;AAGA,eAAsB,aACpB,SACA,WACuE;CACvE,WAAW,MAAM,SAAS,SAAS;EACjC,MAAM,UAAU,MAAM,IAAI;EAC1B,IAAI,MAAM,cAAc,OAAO;GAAE,SAAS;GAAM,cAAc,MAAM;EAAa;CACnF;CACA,OAAO,EAAE,SAAS,MAAM;AAC1B;AAEA,SAAgB,oBAAoB,UAAiD;CACnF,OAAO,OAAO,SAAS,SAAS,SAAS,WAAW,SAAS,SAAS,KAAK,MAAM,GAAG,EAAE,IAAI;AAC5F;AAEA,SAAgB,YAAY,MAA4B,SAA6D;CACnH,IAAI,SAAS,YAAY,OAAO,SAAS,UAAU;CACnD,IAAI,SAAS,UAAU,OAAO,YAAY,KAAA;CAC1C,OAAO,SAAS,UAAU;AAC5B;AAEA,SAAS,gBAAgB,UAAyC,MAA+B;CAC/F,IAAI,CAAC,MAAM,OAAO,EAAE,MAAM,QAAiB;CAC3C,MAAM,OAAO,OAAO,SAAS,SAAS,SAAS,WAAW,SAAS,SAAS,OAAO,KAAA;CACnF,MAAM,UAAU,OAAO,KAAK,SAAS,QAAQ,KAAA;CAC7C,IAAI,SACF,OAAO;EACL,MAAM;EACN,WAAW,QAAQ;EACnB,UAAU,QAAQ;CACpB;CAEF,OAAO;EACL,MAAM;EACN,YAAY,KAAK;EACjB,OAAO,cAAc,IAAI;CAC3B;AACF;AAEA,SAAgB,cAAc,MAAsC;CAElE,OADe,KAAK,gBAAgB,kBAAkB,YAAY,KAAK,eAAe,SAAS,iBAC/E,WAAW;AAC7B;AAcA,IAAa,4BAAb,MAAoE;CAClE;CACA;CACA;CAEA,YAAY,EAAE,aAA8C,MAA6B;EACvF,KAAKA,aAAa;EAClB,KAAKC,QAAQ;EACb,KAAK,OAAO,KAAK;CACnB;CAEA,MAAM,OAAO,OAAiD;EAC5D,MAAM,CAAC,OAAO,cAAc,iBAAiB,MAAM,QAAQ,IAAI;GAC7D,KAAKD,WAAW,iCAAiC;IAC/C,OAAO,MAAM;IACb,kBAAkB,MAAM;IACxB,UAAU,CAAC,KAAKC,MAAM,MAAM;GAC9B,CAAC;GACD,KAAKD,WAAW,uBAAuB;IAAE,GAAG,aAAa,KAAK;IAAG,MAAM,KAAK;GAAK,CAAC;GAClF,KAAKA,WAAW,uBAAuB;IAAE,GAAG,aAAa,KAAK;IAAG,MAAM,KAAK;IAAM,OAAO;GAAW,CAAC;EACvG,CAAC;EACD,OAAO;GACL,MAAM,KAAK,IAAI,GAAG,QAAQ,aAAa;GACvC,QAAQ,KAAK,IAAI,GAAG,QAAQ,YAAY;EAC1C;CACF;CAEA,MAAM,OAAO,OAAwD;EAOnE,MAAM,UAAS,MANI,KAAKA,WAAW,yBAAyB;GAC1D,OAAO,MAAM;GACb,kBAAkB,MAAM;GACxB,QAAQ,KAAKC,MAAM;GACnB,OAAO;EACT,CAAC,EAAA,CACmB,UAAU;EAC9B,IAAI,CAAC,QAAQ,OAAO;EACpB,MAAM,WAAW,KAAKA,MAAM,SAAS,MAAM;EAC3C,MAAM,WAAW,MAAM,KAAKD,WAAW,sBAAsB;GAC3D,GAAG,aAAa,KAAK;GACrB,YAAY,CAAC,QAAQ;EACvB,CAAC;EACD,OAAO;GACL,KAAK,oBAAoB,MAAM,kBAAkB,QAAQ;GACzD,IAAI,KAAKC,MAAM,WAAW,MAAM;GAChC,QAAQ,SAAS,WAAW;EAC9B;CACF;CAEA,MAAM,OAAuB,QAAkC;EAC7D,OAAO,YACL,OAAM,WAAU;GACd,MAAM,OAAO,MAAM,KAAKD,WAAW,yBAAyB;IAC1D,OAAO,MAAM;IACb,kBAAkB,MAAM;IACxB,QAAQ,KAAKC,MAAM;IACnB,QAAQ;IACR,OAAA;GACF,CAAC;GACD,OAAO;IAAE,MAAM,KAAK;IAAW,SAAS,KAAK;GAAQ;EACvD,IACA,cAAa;GAAE,YAAY,KAAKA,MAAM,WAAW,QAAQ;GAAG,IAAI,SAAS;EAAG,IAC5E,MACF;CACF;CAEA,MAAM,KAAK,OAAuB,EAAE,MAAM,QAAQ,QAAQ,SAA0D;EAClH,OAAO,YAAY,KAAKC,MAAM,OAAO,MAAM,GAAG,OAAO,OAAM,cAAa;GACtE,MAAM,CAAC,cAAc,YAAY,MAAM,QAAQ,IAAI,CACjD,KAAKC,aAAa,OAAO,SAAS,GAClC,KAAKC,aAAa,OAAO,SAAS,CACpC,CAAC;GACD,MAAM,UAA4B,CAAC;GACnC,KAAK,MAAM,YAAY,WAAW;IAChC,MAAM,WAAW,KAAKH,MAAM,SAAS,QAAQ;IAC7C,MAAM,UAAU,aAAa,IAAI,oBAAoB,MAAM,kBAAkB,QAAQ,CAAC;IACtF,IAAI,CAAC,YAAY,MAAM,OAAO,GAAG;IACjC,MAAM,OAAO,SAAS,aAAa,SAAS,IAAI,SAAS,UAAU,IAAI,KAAA;IACvE,IAAI,UAAU,CAAC,KAAKA,MAAM,QAAQ,UAAU,MAAM,MAAM,GAAG;IAC3D,MAAM,aAAa,KAAKA,MAAM,WAAW,QAAQ;IACjD,QAAQ,KAAK;KACX;KACA,cAAc;MAAE;MAAY,IAAI,SAAS;KAAG;KAC5C,MAAM;MACJ,KAAK,oBAAoB,MAAM,kBAAkB,QAAQ;MACzD,MAAM,KAAK;MACX,YAAY,SAAS;MACrB,YAAY,SAAS;MACrB,YAAY,SAAS;MACrB,OAAO,KAAKA,MAAM,MAAM,UAAU,IAAI;MACtC,QAAQ,KAAKA,MAAM,OAAO,UAAU,IAAI;MACxC,cAAc,oBAAoB,QAAQ;MAC1C,GAAG,KAAKA,MAAM,QAAQ,QAAQ;MAC9B,YAAY,WAAW,YAAY;MACnC,MAAM,YAAY,KAAA;MAClB,UAAU,SAAS,UAAU;MAC7B,QAAQ,gBAAgB,UAAU,IAAI;KACxC;IACF,CAAC;GACH;GACA,OAAO;EACT,CAAC;CACH;CAEA,MAAME,aACJ,OACA,WACqD;EACrD,MAAM,WAAW,MAAM,KAAKH,WAAW,sBAAsB;GAC3D,GAAG,aAAa,KAAK;GACrB,YAAY,UAAU,KAAI,aAAY,KAAKC,MAAM,SAAS,QAAQ,CAAC;EACrE,CAAC;EACD,OAAO,IAAI,IAAI,SAAS,KAAI,YAAW,CAAC,oBAAoB,MAAM,kBAAkB,OAAO,GAAG,OAAO,CAAC,CAAC;CACzG;CAEA,MAAMG,aACJ,OACA,WACmC;EACnC,MAAM,QAAQ,MAAM,KAAKJ,WAAW,UAAU;GAC5C,OAAO,MAAM;GACb,kBAAkB,MAAM;GACxB,KAAK,UAAU,SAAQ,aAAa,SAAS,aAAa,CAAC,SAAS,UAAU,IAAI,CAAC,CAAE;EACvF,CAAC;EACD,OAAO,IAAI,IAAI,MAAM,KAAI,SAAQ,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC;CACnD;CAEA,MAAM,YACJ,OACA,EAAE,QAAQ,OAC6D;EACvE,OAAO,aAAa,KAAKE,MAAM,OAAO,MAAM,GAAG,OAAM,cAAa;GAChE,MAAM,KAAKF,WAAW,0BAA0B;IAC9C,GAAG,aAAa,KAAK;IACrB,YAAY,UAAU,KAAI,aAAY,KAAKC,MAAM,SAAS,QAAQ,CAAC;IACnE;GACF,CAAC;EACH,CAAC;CACH;AACF;AAEA,MAAa,8BAAqD;CAChE,MAAM;CACN,QAAQ;CACR,WAAU,aAAY,iCAAiC,SAAS,IAAI,SAAS,iBAAiB;CAC9F,aAAY,aAAY,SAAS,eAAe,SAAS;CACzD,QAAQ,UAAU,SAAS,MAAM,SAAS,+BAA+B,SAAS,WAAW,CAAC,CAAC;CAC/F,SAAQ,aAAY,SAAS,WAAW,MAAM,GAAG,GAAG,KAAK,+BAA+B,SAAS,WAAW,CAAC,CAAC;CAC9G,QAAO,cAAa;EAClB,aAAa,SAAS;EACtB,UAAU,+BAA+B,SAAS,WAAW,CAAC,CAAC;CACjE;CACA,UAAU,UAAU,MAAM,WACxB,MAAM,MAAM,YAAY,CAAC,CAAC,SAAS,MAAM,MAAM,QAC/C,SAAS,WAAW,YAAY,CAAC,CAAC,SAAS,MAAM,MAAM,QACvD,oBAAoB,QAAQ,CAAC,CAAC,YAAY,CAAC,CAAC,SAAS,MAAM;AAC/D;AAUA,SAAS,yBAAyB,KAA2D;CAC3F,OAAO,IAAI;AACb;AAEA,IAAa,qCAAb,MAA6E;CAC3E,OAAgB;CAChB;CAEA,YAAY,EAAE,aAA8C;EAC1D,KAAKD,aAAa;CACpB;CAEA,MAAM,OAAO,OAAiD;EAC5D,IAAI,OAAO;EACX,IAAI,SAAS;EACb,MAAM,UAAU,aACd,WACE,KAAKA,WAAW,0BAA0B;GAAE,GAAG;GAAO,GAAI,SAAS,EAAE,OAAO,IAAI,CAAC;GAAI,OAAA;EAAsB,CAAC,IAC9G,SAAQ;GAAE,YAAY,IAAI;GAAU,IAAI,IAAI;EAAG,EACjD;EACA,WAAW,MAAM,QAAQ,SAAS;GAChC,MAAM,aAAa,KAAK,KAAK,KAAI,QAC/B,0CAA0C,IAAI,YAAY,IAAI,UAAU,CAC1E;GACA,MAAM,WAAW,MAAM,KAAKA,WAAW,sBAAsB;IAAE,GAAG;IAAO;GAAW,CAAC;GACrF,MAAM,aAAa,IAAI,IACrB,SAAS,KAAI,YAAW,CAAC,GAAG,QAAQ,SAAS,IAAI,QAAQ,cAAc,OAAO,CAAU,CAC1F;GACA,KAAK,MAAM,OAAO,KAAK,MAAM;IAC3B,MAAM,UAAU,WAAW,IAAI,GAAG,IAAI,WAAW,IAAI,IAAI,YAAY;IACrE,IAAI,SAAS,UAAU,YAAY;IACnC,QAAQ;IACR,IAAI,CAAC,SAAS,UAAU;GAC1B;EACF;EACA,OAAO;GAAE;GAAM;EAAO;CACxB;CAEA,MAAM,OAAO,OAAwD;EAEnE,MAAM,UAAS,MADI,KAAKA,WAAW,0BAA0B;GAAE,GAAG;GAAO,OAAO;EAAE,CAAC,EAAA,CAC/D,KAAK;EACzB,IAAI,CAAC,QAAQ,OAAO;EACpB,MAAM,WAAW,0CAA0C,OAAO,YAAY,OAAO,UAAU;EAC/F,MAAM,WAAW,MAAM,KAAKA,WAAW,sBAAsB;GAAE,GAAG;GAAO,YAAY,CAAC,QAAQ;EAAE,CAAC;EACjG,OAAO;GACL,KAAK,oBAAoB,MAAM,kBAAkB,QAAQ;GACzD,IAAI,OAAO;GACX,QAAQ,SAAS,WAAW;EAC9B;CACF;CAEA,KAAK,OAAuB,MAAuD;EACjF,OAAO,YACL,aACE,WACE,KAAKA,WAAW,0BAA0B;GAAE,GAAG;GAAO,GAAI,SAAS,EAAE,OAAO,IAAI,CAAC;GAAI,OAAA;EAAsB,CAAC,IAC9G,SAAQ;GAAE,YAAY,IAAI;GAAU,IAAI,IAAI;EAAG,IAC/C,KAAK,MACP,GACA,KAAK,OACL,OAAM,SAAQ;GACZ,MAAM,aAAa,KAAK,KAAI,QAAO,0CAA0C,IAAI,YAAY,IAAI,UAAU,CAAC;GAC5G,MAAM,WAAW,MAAM,KAAKA,WAAW,sBAAsB;IAAE,GAAG;IAAO;GAAW,CAAC;GACrF,MAAM,aAAa,IAAI,IACrB,SAAS,KAAI,YAAW,CAAC,GAAG,QAAQ,SAAS,IAAI,QAAQ,cAAc,OAAO,CAAU,CAC1F;GACA,OAAO,KAAK,SAAQ,QAAO;IACzB,MAAM,UAAU,yBAAyB,GAAG;IAC5C,MAAM,UAAU,WAAW,IAAI,GAAG,IAAI,WAAW,IAAI,IAAI,YAAY;IACrE,IAAI,CAAC,YAAY,KAAK,MAAM,OAAO,GAAG,OAAO,CAAC;IAC9C,MAAM,OAAO,GAAG,QAAQ,MAAM,GAAG,QAAQ,WAAW,YAAY;IAChE,IAAI,KAAK,UAAU,CAAC,KAAK,SAAS,KAAK,MAAM,GAAG,OAAO,CAAC;IACxD,MAAM,WAAW,0CAA0C,IAAI,YAAY,IAAI,UAAU;IACzF,OAAO,CACL;KACE,KAAK,oBAAoB,MAAM,kBAAkB,QAAQ;KACzD,YAAY,IAAI;KAChB,cAAc;MAAE,YAAY,IAAI;MAAU,IAAI,IAAI;KAAG;KACrD;KACA,MAAM;MACJ,KAAK,oBAAoB,MAAM,kBAAkB,QAAQ;MACzD,MAAM,KAAK;MACX,YAAY,IAAI;MAChB,YAAY,IAAI;MAChB,cAAc,QAAQ;MACtB,UAAU,QAAQ;MAClB,OAAO,QAAQ;MACf,QAAQ,QAAQ;MAChB,SAAS,QAAQ,WAAW;MAC5B,iBAAiB,QAAQ;MACzB,YAAY,QAAQ;MACpB,YAAY,IAAI,SAAS,YAAY;MACrC,MAAM,QAAQ,OAAO;MACrB,UAAU,SAAS,UAAU;MAC7B,QAAQ,QAAQ,aACZ;OAAE,MAAM;OAAa,YAAY,QAAQ;OAAY,OAAO;MAAO,IACnE,EAAE,MAAM,QAAQ;KACtB;IACF,CACF;GACF,CAAC;EACH,CACF;CACF;CAEA,YACE,OACA,MACuE;EACvE,OAAO,aACL,aACE,WACE,KAAKA,WAAW,0BAA0B;GAAE,GAAG;GAAO,GAAI,SAAS,EAAE,OAAO,IAAI,CAAC;GAAI,OAAA;EAAsB,CAAC,IAC9G,SAAQ;GAAE,YAAY,IAAI;GAAU,IAAI,IAAI;EAAG,IAC/C,KAAK,MACP,IACA,SACE,KAAKA,WAAW,0BAA0B;GACxC,GAAG;GACH,YAAY,KAAK,KAAI,QAAO,0CAA0C,IAAI,YAAY,IAAI,UAAU,CAAC;GACrG,KAAK,KAAK;EACZ,CAAC,CACL;CACF;AACF;AAEA,IAAa,2BAAb,MAAmE;CACjE,OAAgB;CAChB;CACA;CAEA,YAAY,EAAE,WAAW,YAAgF;EACvG,KAAKA,aAAa;EAClB,KAAKK,YAAY;CACnB;CAEA,MAAM,OAAuB,QAAkC;EAC7D,OAAO,YACL,OAAM,WAAU;GACd,MAAM,OAAO,MAAM,KAAKA,UAAU,oBAAoB;IACpD,GAAG,aAAa,KAAK;IACrB,GAAI,SAAS,EAAE,QAAQ,OAAO,IAAI,CAAC;IACnC,OAAO;GACT,CAAC;GACD,OAAO;IAAE,MAAM,KAAK,MAAM,GAAA,EAAiB;IAAG,SAAS,KAAK,SAAA;GAAwB;EACtF,IACA,aAAY;GAAE,YAAY,QAAQ;GAAY,IAAI,QAAQ;EAAG,IAC7D,MACF;CACF;;;;;CAMA,MAAMC,SAAS,OAAuB,UAA4D;EAChG,MAAM,CAAC,UAAU,UAAU,SAAS,MAAM,QAAQ,IAAI;GACpD,KAAKN,WAAW,sBAAsB;IACpC,GAAG,aAAa,KAAK;IACrB,YAAY,SAAS,KAAI,YAAW,gCAAgC,QAAQ,SAAS,CAAC;GACxF,CAAC;GACD,KAAKK,UAAU,UAAU;IACvB,OAAO,MAAM;IACb,KAAK,CAAC,GAAG,IAAI,IAAI,SAAS,KAAI,YAAW,QAAQ,SAAS,CAAC,CAAC;GAC9D,CAAC;GACD,KAAKL,WAAW,UAAU;IACxB,OAAO,MAAM;IACb,kBAAkB,MAAM;IACxB,KAAK,CAAC,GAAG,IAAI,IAAI,SAAS,KAAI,YAAW,QAAQ,UAAU,CAAC,CAAC;GAC/D,CAAC;EACH,CAAC;EACD,MAAM,eAAe,IAAI,IACvB,SAAS,KAAI,YAAW,CAAC,oBAAoB,MAAM,kBAAkB,OAAO,GAAG,OAAO,CAAC,CACzF;EACA,MAAM,cAAc,IAAI,IAAI,SAAS,KAAI,YAAW,CAAC,QAAQ,IAAI,OAAO,CAAC,CAAC;EAC1E,MAAM,WAAW,IAAI,IAAI,MAAM,KAAI,SAAQ,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC;EAE3D,MAAM,WAA8B,CAAC;EACrC,KAAK,MAAM,WAAW,UAAU;GAC9B,MAAM,UAAU,YAAY,IAAI,QAAQ,SAAS;GACjD,MAAM,OAAO,SAAS,IAAI,QAAQ,UAAU;GAC5C,IAAI,CAAC,WAAW,QAAQ,aAAa,CAAC,MAAM;GAC5C,MAAM,WAAW,gCAAgC,QAAQ,SAAS;GAClE,SAAS,KAAK;IACZ;IACA;IACA;IACA;IACA,SAAS,aAAa,IAAI,oBAAoB,MAAM,kBAAkB,QAAQ,CAAC;GACjF,CAAC;EACH;EACA,OAAO;CACT;;;;;;;CAQA,MAAM,OAAO,OAAiD;EAC5D,IAAI,OAAO;EACX,IAAI,SAAS;EACb,WAAW,MAAM,SAAS,KAAKE,MAAM,KAAK,GACxC,KAAK,MAAM,EAAE,aAAa,MAAM,KAAKI,SAAS,OAAO,MAAM,IAAI,GAAG;GAChE,IAAI,SAAS,UAAU,YAAY,QAAQ;GAC3C,IAAI,YAAY,KAAA,GAAW,UAAU;EACvC;EAEF,OAAO;GAAE;GAAM;EAAO;CACxB;CAEA,MAAM,OAAO,OAAwD;EACnE,MAAM,WAAW,MAAM,KAAKD,UAAU,oBAAoB;GAAE,GAAG,aAAa,KAAK;GAAG,OAAO;EAAG,CAAC;EAC/F,MAAM,UAAU,MAAM,KAAKC,SAAS,OAAO,QAAQ,EAAA,CAAG;EACtD,IAAI,CAAC,QAAQ,OAAO;EACpB,OAAO;GACL,KAAK,oBAAoB,MAAM,kBAAkB,OAAO,QAAQ;GAChE,IAAI,OAAO,QAAQ;GACnB,QAAQ,OAAO,YAAY,KAAA;EAC7B;CACF;CAEA,MAAM,KAAK,OAAuB,EAAE,MAAM,QAAQ,QAAQ,SAA0D;EAClH,OAAO,YAAY,KAAKJ,MAAM,OAAO,MAAM,GAAG,OAAO,OAAM,aAAY;GACrE,MAAM,UAA4B,CAAC;GACnC,KAAK,MAAM,YAAY,MAAM,KAAKI,SAAS,OAAO,QAAQ,GAAG;IAC3D,IAAI,CAAC,YAAY,MAAM,SAAS,OAAO,GAAG;IAC1C,IAAI,UAAU,CAAC,qBAAqB,UAAU,MAAM,GAAG;IACvD,QAAQ,KAAK;KACX,YAAY,SAAS,QAAQ;KAC7B,cAAc;MAAE,YAAY,SAAS,QAAQ;MAAY,IAAI,SAAS,QAAQ;KAAG;KACjF,MAAM,cAAc,OAAO,QAAQ;IACrC,CAAC;GACH;GACA,OAAO;EACT,CAAC;CACH;CAEA,MAAM,YACJ,OACA,EAAE,QAAQ,OAC6D;EACvE,OAAO,aAAa,KAAKJ,MAAM,OAAO,MAAM,GAAG,OAAM,aAAY;GAC/D,MAAM,KAAKF,WAAW,0BAA0B;IAC9C,GAAG,aAAa,KAAK;IACrB,YAAY,SAAS,KAAI,YAAW,gCAAgC,QAAQ,SAAS,CAAC;IACtF;GACF,CAAC;EACH,CAAC;CACH;AACF;AAEA,SAAS,qBAAqB,EAAE,MAAM,WAA4B,QAAyB;CACzF,OACE,KAAK,MAAM,YAAY,CAAC,CAAC,SAAS,MAAM,KACxC,QAAQ,KAAK,YAAY,CAAC,CAAC,SAAS,MAAM,KAC1C,QAAQ,OAAO,aAAa,YAAY,CAAC,CAAC,SAAS,MAAM,MAAM;AAEnE;AAEA,SAAS,cAAc,OAAuB,EAAE,SAAS,SAAS,MAAM,UAAU,WAA4B;CAC5G,MAAM,aAAa,QAAQ,OAAO;CAClC,OAAO;EACL,KAAK,oBAAoB,MAAM,kBAAkB,QAAQ;EACzD,MAAM;EACN,WAAW,QAAQ;EACnB,YAAY;EACZ,YAAY,QAAQ;EACpB,OAAO,KAAK;EACZ,QAAQ,QAAQ,KAAK,MAAM,GAAG,GAAG;EACjC,UAAU,QAAQ,OAAO;EACzB,GAAI,aAAa,EAAE,WAAW,IAAI,CAAC;EACnC,YAAY,QAAQ,WAAW,YAAY;EAC3C,MAAM,YAAY,KAAA;EAClB,UAAU,SAAS,UAAU;EAC7B,QAAQ;GACN,MAAM;GACN,YAAY,QAAQ;GACpB,OAAO,cAAc,IAAI;GACzB,WAAW,QAAQ;EACrB;CACF;AACF;AAEA,SAAgB,aAAa,OAAoF;CAC/G,OAAO;EAAE,OAAO,MAAM;EAAO,kBAAkB,MAAM;EAAkB,QAAQ,MAAM;CAAO;AAC9F"}
+{"version":3,"file":"attention-providers.js","names":["#workItems","#spec","#boards","#scan","#receiptsFor","#linkedItems","#comments","#resolve"],"sources":["../../src/routes/attention-providers.ts"],"sourcesContent":["import type { BoardRegistry } from '../boards/index.js';\nimport { overtakenDecisionIds } from '../rules/decision-applicability.js';\n/**\n * Per-kind attention providers. Each kind owns its counts, its bounded page\n * scan, and its wire item shape; the route layer k-way merges provider pages\n * on `occurredAt desc` with one resumable cursor per kind.\n */\n\nimport { factoryDispatchFailureMetadata } from '../rules/dispatch-errors.js';\nimport type {\n  WorkItemCommentRow,\n  WorkItemCommentsStorage,\n  WorkItemMentionRow,\n} from '../storage/domains/comments/base.js';\nimport type {\n  FactoryAttentionIdentity,\n  FactoryAttentionKind,\n  FactoryAttentionReceiptRecord,\n  FactoryDeferredDecisionRecord,\n  FactoryDispatchStatus,\n  FactorySupervisorFindingRecord,\n  WorkItemRow,\n  WorkItemsStorage,\n} from '../storage/domains/work-items/base.js';\nimport {\n  factoryAttentionKey,\n  factoryDecisionAttentionIdentity,\n  factoryMentionAttentionIdentity,\n  factorySupervisorFindingAttentionIdentity,\n} from '../storage/domains/work-items/base.js';\nimport type { FactoryHealthFinding } from '../supervisor/health.js';\n\nexport type FactoryAttentionView = 'open' | 'unread' | 'archived';\n\nexport interface AttentionScope {\n  orgId: string;\n  userId: string;\n  factoryProjectId: string;\n}\n\nexport interface AttentionStreamPosition {\n  occurredAt: Date;\n  id: string;\n}\n\nexport interface AttentionEntry {\n  occurredAt: Date;\n  /** Position resuming the provider's stream right after this entry. */\n  resumeCursor: AttentionStreamPosition;\n  item: Record<string, unknown>;\n}\n\nexport interface AttentionPageArgs {\n  view: FactoryAttentionView;\n  search?: string;\n  before?: AttentionStreamPosition;\n  limit: number;\n}\n\nexport interface AttentionPageResult {\n  entries: AttentionEntry[];\n  /** More rows behind the scan once every returned entry is consumed. */\n  hasMore: boolean;\n  /** Resume point for a scan-budget stop past the last returned entry. */\n  continuation?: AttentionStreamPosition;\n}\n\nexport interface AttentionCounts {\n  open: number;\n  unread: number;\n}\n\nexport interface AttentionLatest {\n  key: string;\n  at: Date;\n  unread: boolean;\n}\n\nexport interface AttentionProvider {\n  kind: FactoryAttentionKind;\n  counts(scope: AttentionScope): Promise<AttentionCounts>;\n  latest(scope: AttentionScope): Promise<AttentionLatest | null>;\n  page(scope: AttentionScope, args: AttentionPageArgs): Promise<AttentionPageResult>;\n  markAllRead(\n    scope: AttentionScope,\n    args: { before?: AttentionStreamPosition; now: Date },\n  ): Promise<{ hasMore: boolean; continuation?: AttentionStreamPosition }>;\n}\n\nexport const SCAN_PAGE_SIZE = 50;\n// Receipt filtering is bounded per request; the response cursor resumes after the last scan.\nconst MAX_RECEIPT_SCAN_PAGES = 4;\n\ninterface ScanBatch<T> {\n  rows: T[];\n  /** Set only when the page budget stopped a scan that still had rows behind it. */\n  continuation?: AttentionStreamPosition;\n}\n\n/**\n * One bounded keyset scan, shared by every provider read. Walks newest-first\n * from `before` until the stream runs dry or the page budget is spent; the\n * final batch of a budget stop carries the position to resume from.\n */\nexport async function* scanBatches<T>(\n  fetchBatch: (before?: AttentionStreamPosition) => Promise<{ rows: T[]; hasMore: boolean }>,\n  positionOf: (row: T) => AttentionStreamPosition,\n  before?: AttentionStreamPosition,\n): AsyncGenerator<ScanBatch<T>> {\n  let cursor = before;\n  for (let scanned = 1; scanned <= MAX_RECEIPT_SCAN_PAGES; scanned += 1) {\n    const { rows, hasMore } = await fetchBatch(cursor);\n    const last = rows.at(-1);\n    if (!last) return;\n    const position = positionOf(last);\n    yield { rows, ...(hasMore && scanned === MAX_RECEIPT_SCAN_PAGES ? { continuation: position } : {}) };\n    if (!hasMore) return;\n    cursor = position;\n  }\n}\n\n/** Fills a page from the scan, stopping at `limit` entries or at the scan budget. */\nexport async function collectPage<T>(\n  batches: AsyncGenerator<ScanBatch<T>>,\n  limit: number,\n  toEntries: (rows: T[]) => Promise<AttentionEntry[]>,\n): Promise<AttentionPageResult> {\n  const entries: AttentionEntry[] = [];\n  for await (const batch of batches) {\n    for (const entry of await toEntries(batch.rows)) {\n      if (entries.length === limit) return { entries, hasMore: true };\n      entries.push(entry);\n    }\n    if (batch.continuation) return { entries, hasMore: true, continuation: batch.continuation };\n  }\n  return { entries, hasMore: false };\n}\n\n/** Marks every scanned batch read, reporting where a budget stop left off. */\nexport async function markScanRead<T>(\n  batches: AsyncGenerator<ScanBatch<T>>,\n  markBatch: (rows: T[]) => Promise<void>,\n): Promise<{ hasMore: boolean; continuation?: AttentionStreamPosition }> {\n  for await (const batch of batches) {\n    await markBatch(batch.rows);\n    if (batch.continuation) return { hasMore: true, continuation: batch.continuation };\n  }\n  return { hasMore: false };\n}\n\nexport function factoryDecisionType(decision: FactoryDeferredDecisionRecord): string {\n  return typeof decision.decision.type === 'string' ? decision.decision.type.slice(0, 64) : 'unknown';\n}\n\nexport function matchesView(view: FactoryAttentionView, receipt: FactoryAttentionReceiptRecord | undefined): boolean {\n  if (view === 'archived') return receipt?.state === 'archived';\n  if (view === 'unread') return receipt === undefined;\n  return receipt?.state !== 'archived';\n}\n\nfunction attentionTarget(decision: FactoryDeferredDecisionRecord, item: WorkItemRow | undefined) {\n  if (!item) return { kind: 'rules' as const };\n  const role = typeof decision.decision.role === 'string' ? decision.decision.role : undefined;\n  const session = role ? item.sessions[role] : undefined;\n  if (session) {\n    return {\n      kind: 'thread' as const,\n      sessionId: session.sessionId,\n      threadId: session.threadId,\n    };\n  }\n  return {\n    kind: 'work-item' as const,\n    workItemId: item.id,\n    board: workItemBoard(item),\n  };\n}\n\nexport function workItemBoard(item: WorkItemRow): 'review' | 'work' {\n  const review = item.externalSource?.integrationId === 'github' && item.externalSource.type === 'pull-request';\n  return review ? 'review' : 'work';\n}\n\n/** One deferred-decision status seen as attention: failures and parked runs differ only by this. */\nexport interface DecisionAttentionSpec {\n  kind: FactoryAttentionKind;\n  status: FactoryDispatchStatus;\n  identity(decision: FactoryDeferredDecisionRecord): FactoryAttentionIdentity;\n  occurredAt(decision: FactoryDeferredDecisionRecord): Date;\n  title(decision: FactoryDeferredDecisionRecord, item: WorkItemRow | undefined): string;\n  detail(decision: FactoryDeferredDecisionRecord, item: WorkItemRow | undefined): string;\n  extra?(decision: FactoryDeferredDecisionRecord, context: { overtaken: boolean }): Record<string, unknown>;\n  matches(decision: FactoryDeferredDecisionRecord, item: WorkItemRow | undefined, search: string): boolean;\n}\n\nexport class DecisionAttentionProvider implements AttentionProvider {\n  readonly kind: FactoryAttentionKind;\n  readonly #workItems: WorkItemsStorage;\n  readonly #spec: DecisionAttentionSpec;\n  readonly #boards: BoardRegistry;\n\n  constructor(\n    { workItems, boards }: { workItems: WorkItemsStorage; boards: BoardRegistry },\n    spec: DecisionAttentionSpec,\n  ) {\n    this.#workItems = workItems;\n    this.#boards = boards;\n    this.#spec = spec;\n    this.kind = spec.kind;\n  }\n\n  async counts(scope: AttentionScope): Promise<AttentionCounts> {\n    const [total, receiptCount, archivedCount] = await Promise.all([\n      this.#workItems.countDeferredDecisionsByStatuses({\n        orgId: scope.orgId,\n        factoryProjectId: scope.factoryProjectId,\n        statuses: [this.#spec.status],\n      }),\n      this.#workItems.countAttentionReceipts({ ...receiptScope(scope), kind: this.kind }),\n      this.#workItems.countAttentionReceipts({ ...receiptScope(scope), kind: this.kind, state: 'archived' }),\n    ]);\n    return {\n      open: Math.max(0, total - archivedCount),\n      unread: Math.max(0, total - receiptCount),\n    };\n  }\n\n  async latest(scope: AttentionScope): Promise<AttentionLatest | null> {\n    const page = await this.#workItems.listDecisionPageByStatus({\n      orgId: scope.orgId,\n      factoryProjectId: scope.factoryProjectId,\n      status: this.#spec.status,\n      limit: 1,\n    });\n    const newest = page.decisions[0];\n    if (!newest) return null;\n    const identity = this.#spec.identity(newest);\n    const receipts = await this.#workItems.listAttentionReceipts({\n      ...receiptScope(scope),\n      identities: [identity],\n    });\n    return {\n      key: factoryAttentionKey(scope.factoryProjectId, identity),\n      at: this.#spec.occurredAt(newest),\n      unread: receipts.length === 0,\n    };\n  }\n\n  #scan(scope: AttentionScope, before?: AttentionStreamPosition) {\n    return scanBatches<FactoryDeferredDecisionRecord>(\n      async cursor => {\n        const page = await this.#workItems.listDecisionPageByStatus({\n          orgId: scope.orgId,\n          factoryProjectId: scope.factoryProjectId,\n          status: this.#spec.status,\n          before: cursor,\n          limit: SCAN_PAGE_SIZE,\n        });\n        return { rows: page.decisions, hasMore: page.hasMore };\n      },\n      decision => ({ occurredAt: this.#spec.occurredAt(decision), id: decision.id }),\n      before,\n    );\n  }\n\n  async page(scope: AttentionScope, { view, search, before, limit }: AttentionPageArgs): Promise<AttentionPageResult> {\n    return collectPage(this.#scan(scope, before), limit, async decisions => {\n      const [receiptByKey, itemById, overtaken] = await Promise.all([\n        this.#receiptsFor(scope, decisions),\n        this.#linkedItems(scope, decisions),\n        overtakenDecisionIds(this.#workItems, this.#boards, scope, decisions),\n      ]);\n      const entries: AttentionEntry[] = [];\n      for (const decision of decisions) {\n        const identity = this.#spec.identity(decision);\n        const receipt = receiptByKey.get(factoryAttentionKey(scope.factoryProjectId, identity));\n        if (!matchesView(view, receipt)) continue;\n        const item = decision.workItemId ? itemById.get(decision.workItemId) : undefined;\n        if (search && !this.#spec.matches(decision, item, search)) continue;\n        const occurredAt = this.#spec.occurredAt(decision);\n        entries.push({\n          occurredAt,\n          resumeCursor: { occurredAt, id: decision.id },\n          item: {\n            key: factoryAttentionKey(scope.factoryProjectId, identity),\n            kind: this.kind,\n            decisionId: decision.id,\n            occurrence: identity.occurrence,\n            workItemId: decision.workItemId,\n            title: this.#spec.title(decision, item),\n            detail: this.#spec.detail(decision, item),\n            decisionType: factoryDecisionType(decision),\n            ...this.#spec.extra?.(decision, { overtaken: overtaken.has(decision.id) }),\n            occurredAt: occurredAt.toISOString(),\n            read: receipt !== undefined,\n            archived: receipt?.state === 'archived',\n            target: attentionTarget(decision, item),\n          },\n        });\n      }\n      return entries;\n    });\n  }\n\n  async #receiptsFor(\n    scope: AttentionScope,\n    decisions: FactoryDeferredDecisionRecord[],\n  ): Promise<Map<string, FactoryAttentionReceiptRecord>> {\n    const receipts = await this.#workItems.listAttentionReceipts({\n      ...receiptScope(scope),\n      identities: decisions.map(decision => this.#spec.identity(decision)),\n    });\n    return new Map(receipts.map(receipt => [factoryAttentionKey(scope.factoryProjectId, receipt), receipt]));\n  }\n\n  async #linkedItems(\n    scope: AttentionScope,\n    decisions: FactoryDeferredDecisionRecord[],\n  ): Promise<Map<string, WorkItemRow>> {\n    const items = await this.#workItems.listByIds({\n      orgId: scope.orgId,\n      factoryProjectId: scope.factoryProjectId,\n      ids: decisions.flatMap(decision => (decision.workItemId ? [decision.workItemId] : [])),\n    });\n    return new Map(items.map(item => [item.id, item]));\n  }\n\n  async markAllRead(\n    scope: AttentionScope,\n    { before, now }: { before?: AttentionStreamPosition; now: Date },\n  ): Promise<{ hasMore: boolean; continuation?: AttentionStreamPosition }> {\n    return markScanRead(this.#scan(scope, before), async decisions => {\n      await this.#workItems.markAttentionReceiptsRead({\n        ...receiptScope(scope),\n        identities: decisions.map(decision => this.#spec.identity(decision)),\n        now,\n      });\n    });\n  }\n}\n\nexport const failedDecisionAttentionSpec: DecisionAttentionSpec = {\n  kind: 'automation-failed',\n  status: 'failed',\n  identity: decision => factoryDecisionAttentionIdentity(decision.id, decision.failureOccurrence),\n  occurredAt: decision => decision.completedAt ?? decision.updatedAt,\n  title: (decision, item) => item?.title ?? factoryDispatchFailureMetadata(decision.failureCode).label,\n  detail: decision => decision.lastError?.slice(0, 512) ?? factoryDispatchFailureMetadata(decision.failureCode).label,\n  extra: (decision, { overtaken }) => ({\n    failureCode: decision.failureCode,\n    canRetry: !overtaken && factoryDispatchFailureMetadata(decision.failureCode).canRetry,\n  }),\n  matches: (decision, item, search) =>\n    item?.title.toLowerCase().includes(search) === true ||\n    decision.lastError?.toLowerCase().includes(search) === true ||\n    factoryDecisionType(decision).toLowerCase().includes(search),\n};\n\ninterface ResolvedMention {\n  mention: WorkItemMentionRow;\n  comment: WorkItemCommentRow;\n  item: WorkItemRow;\n  identity: FactoryAttentionIdentity;\n  receipt: FactoryAttentionReceiptRecord | undefined;\n}\n\nfunction supervisorFindingPayload(row: FactorySupervisorFindingRecord): FactoryHealthFinding {\n  return row.finding as unknown as FactoryHealthFinding;\n}\n\nexport class SupervisorFindingAttentionProvider implements AttentionProvider {\n  readonly kind = 'supervisor-finding' as const;\n  readonly #workItems: WorkItemsStorage;\n\n  constructor({ workItems }: { workItems: WorkItemsStorage }) {\n    this.#workItems = workItems;\n  }\n\n  async counts(scope: AttentionScope): Promise<AttentionCounts> {\n    let open = 0;\n    let unread = 0;\n    const batches = scanBatches<FactorySupervisorFindingRecord>(\n      before =>\n        this.#workItems.listSupervisorFindingPage({ ...scope, ...(before ? { before } : {}), limit: SCAN_PAGE_SIZE }),\n      row => ({ occurredAt: row.openedAt, id: row.id }),\n    );\n    for await (const page of batches) {\n      const identities = page.rows.map(row =>\n        factorySupervisorFindingAttentionIdentity(row.findingKey, row.occurrence),\n      );\n      const receipts = await this.#workItems.listAttentionReceipts({ ...scope, identities });\n      const byIdentity = new Map(\n        receipts.map(receipt => [`${receipt.sourceId}\\0${receipt.occurrence}`, receipt] as const),\n      );\n      for (const row of page.rows) {\n        const receipt = byIdentity.get(`${row.findingKey}\\0${row.occurrence}`);\n        if (receipt?.state === 'archived') continue;\n        open += 1;\n        if (!receipt) unread += 1;\n      }\n    }\n    return { open, unread };\n  }\n\n  async latest(scope: AttentionScope): Promise<AttentionLatest | null> {\n    const page = await this.#workItems.listSupervisorFindingPage({ ...scope, limit: 1 });\n    const newest = page.rows[0];\n    if (!newest) return null;\n    const identity = factorySupervisorFindingAttentionIdentity(newest.findingKey, newest.occurrence);\n    const receipts = await this.#workItems.listAttentionReceipts({ ...scope, identities: [identity] });\n    return {\n      key: factoryAttentionKey(scope.factoryProjectId, identity),\n      at: newest.openedAt,\n      unread: receipts.length === 0,\n    };\n  }\n\n  page(scope: AttentionScope, args: AttentionPageArgs): Promise<AttentionPageResult> {\n    return collectPage(\n      scanBatches<FactorySupervisorFindingRecord>(\n        before =>\n          this.#workItems.listSupervisorFindingPage({ ...scope, ...(before ? { before } : {}), limit: SCAN_PAGE_SIZE }),\n        row => ({ occurredAt: row.openedAt, id: row.id }),\n        args.before,\n      ),\n      args.limit,\n      async rows => {\n        const identities = rows.map(row => factorySupervisorFindingAttentionIdentity(row.findingKey, row.occurrence));\n        const receipts = await this.#workItems.listAttentionReceipts({ ...scope, identities });\n        const byIdentity = new Map(\n          receipts.map(receipt => [`${receipt.sourceId}\\0${receipt.occurrence}`, receipt] as const),\n        );\n        return rows.flatMap(row => {\n          const finding = supervisorFindingPayload(row);\n          const receipt = byIdentity.get(`${row.findingKey}\\0${row.occurrence}`);\n          if (!matchesView(args.view, receipt)) return [];\n          const text = `${finding.title} ${finding.evidence}`.toLowerCase();\n          if (args.search && !text.includes(args.search)) return [];\n          const identity = factorySupervisorFindingAttentionIdentity(row.findingKey, row.occurrence);\n          return [\n            {\n              key: factoryAttentionKey(scope.factoryProjectId, identity),\n              occurredAt: row.openedAt,\n              resumeCursor: { occurredAt: row.openedAt, id: row.id },\n              receipt,\n              item: {\n                key: factoryAttentionKey(scope.factoryProjectId, identity),\n                kind: this.kind,\n                findingKey: row.findingKey,\n                occurrence: row.occurrence,\n                findingTitle: finding.title,\n                evidence: finding.evidence,\n                title: finding.title,\n                detail: finding.evidence,\n                beganAt: finding.beganAt ?? null,\n                suggestedRepair: finding.suggestedRepair,\n                workItemId: finding.workItemId,\n                occurredAt: row.openedAt.toISOString(),\n                read: Boolean(receipt),\n                archived: receipt?.state === 'archived',\n                target: finding.workItemId\n                  ? { kind: 'work-item', workItemId: finding.workItemId, board: 'work' }\n                  : { kind: 'rules' },\n              },\n            },\n          ];\n        });\n      },\n    );\n  }\n\n  markAllRead(\n    scope: AttentionScope,\n    args: { before?: AttentionStreamPosition; now: Date },\n  ): Promise<{ hasMore: boolean; continuation?: AttentionStreamPosition }> {\n    return markScanRead(\n      scanBatches<FactorySupervisorFindingRecord>(\n        before =>\n          this.#workItems.listSupervisorFindingPage({ ...scope, ...(before ? { before } : {}), limit: SCAN_PAGE_SIZE }),\n        row => ({ occurredAt: row.openedAt, id: row.id }),\n        args.before,\n      ),\n      rows =>\n        this.#workItems.markAttentionReceiptsRead({\n          ...scope,\n          identities: rows.map(row => factorySupervisorFindingAttentionIdentity(row.findingKey, row.occurrence)),\n          now: args.now,\n        }),\n    );\n  }\n}\n\nexport class MentionAttentionProvider implements AttentionProvider {\n  readonly kind = 'mention' as const;\n  readonly #workItems: WorkItemsStorage;\n  readonly #comments: WorkItemCommentsStorage;\n\n  constructor({ workItems, comments }: { workItems: WorkItemsStorage; comments: WorkItemCommentsStorage }) {\n    this.#workItems = workItems;\n    this.#comments = comments;\n  }\n\n  #scan(scope: AttentionScope, before?: AttentionStreamPosition) {\n    return scanBatches<WorkItemMentionRow>(\n      async cursor => {\n        const rows = await this.#comments.listMentionsForUser({\n          ...receiptScope(scope),\n          ...(cursor ? { before: cursor } : {}),\n          limit: SCAN_PAGE_SIZE + 1,\n        });\n        return { rows: rows.slice(0, SCAN_PAGE_SIZE), hasMore: rows.length > SCAN_PAGE_SIZE };\n      },\n      mention => ({ occurredAt: mention.occurredAt, id: mention.id }),\n      before,\n    );\n  }\n\n  /**\n   * Mention rows joined to what the inbox needs to show one — dropping the\n   * ones it cannot: a deleted comment, or a work item gone from the project.\n   */\n  async #resolve(scope: AttentionScope, mentions: WorkItemMentionRow[]): Promise<ResolvedMention[]> {\n    const [receipts, comments, items] = await Promise.all([\n      this.#workItems.listAttentionReceipts({\n        ...receiptScope(scope),\n        identities: mentions.map(mention => factoryMentionAttentionIdentity(mention.commentId)),\n      }),\n      this.#comments.listByIds({\n        orgId: scope.orgId,\n        ids: [...new Set(mentions.map(mention => mention.commentId))],\n      }),\n      this.#workItems.listByIds({\n        orgId: scope.orgId,\n        factoryProjectId: scope.factoryProjectId,\n        ids: [...new Set(mentions.map(mention => mention.workItemId))],\n      }),\n    ]);\n    const receiptByKey = new Map(\n      receipts.map(receipt => [factoryAttentionKey(scope.factoryProjectId, receipt), receipt]),\n    );\n    const commentById = new Map(comments.map(comment => [comment.id, comment]));\n    const itemById = new Map(items.map(item => [item.id, item]));\n\n    const resolved: ResolvedMention[] = [];\n    for (const mention of mentions) {\n      const comment = commentById.get(mention.commentId);\n      const item = itemById.get(mention.workItemId);\n      if (!comment || comment.deletedAt || !item) continue;\n      const identity = factoryMentionAttentionIdentity(mention.commentId);\n      resolved.push({\n        mention,\n        comment,\n        item,\n        identity,\n        receipt: receiptByKey.get(factoryAttentionKey(scope.factoryProjectId, identity)),\n      });\n    }\n    return resolved;\n  }\n\n  /**\n   * Derived from the same bounded scan as `page`, never from raw aggregates:\n   * the badge must count exactly what the views can show, down to stopping at\n   * the same scan budget. Aggregates would count orphan mention rows the list\n   * can never display or clear.\n   */\n  async counts(scope: AttentionScope): Promise<AttentionCounts> {\n    let open = 0;\n    let unread = 0;\n    for await (const batch of this.#scan(scope)) {\n      for (const { receipt } of await this.#resolve(scope, batch.rows)) {\n        if (receipt?.state !== 'archived') open += 1;\n        if (receipt === undefined) unread += 1;\n      }\n    }\n    return { open, unread };\n  }\n\n  async latest(scope: AttentionScope): Promise<AttentionLatest | null> {\n    const mentions = await this.#comments.listMentionsForUser({ ...receiptScope(scope), limit: 10 });\n    const newest = (await this.#resolve(scope, mentions))[0];\n    if (!newest) return null;\n    return {\n      key: factoryAttentionKey(scope.factoryProjectId, newest.identity),\n      at: newest.mention.occurredAt,\n      unread: newest.receipt === undefined,\n    };\n  }\n\n  async page(scope: AttentionScope, { view, search, before, limit }: AttentionPageArgs): Promise<AttentionPageResult> {\n    return collectPage(this.#scan(scope, before), limit, async mentions => {\n      const entries: AttentionEntry[] = [];\n      for (const resolved of await this.#resolve(scope, mentions)) {\n        if (!matchesView(view, resolved.receipt)) continue;\n        if (search && !matchesMentionSearch(resolved, search)) continue;\n        entries.push({\n          occurredAt: resolved.mention.occurredAt,\n          resumeCursor: { occurredAt: resolved.mention.occurredAt, id: resolved.mention.id },\n          item: toMentionItem(scope, resolved),\n        });\n      }\n      return entries;\n    });\n  }\n\n  async markAllRead(\n    scope: AttentionScope,\n    { before, now }: { before?: AttentionStreamPosition; now: Date },\n  ): Promise<{ hasMore: boolean; continuation?: AttentionStreamPosition }> {\n    return markScanRead(this.#scan(scope, before), async mentions => {\n      await this.#workItems.markAttentionReceiptsRead({\n        ...receiptScope(scope),\n        identities: mentions.map(mention => factoryMentionAttentionIdentity(mention.commentId)),\n        now,\n      });\n    });\n  }\n}\n\nfunction matchesMentionSearch({ item, comment }: ResolvedMention, search: string): boolean {\n  return (\n    item.title.toLowerCase().includes(search) ||\n    comment.body.toLowerCase().includes(search) ||\n    comment.author.displayName?.toLowerCase().includes(search) === true\n  );\n}\n\nfunction toMentionItem(scope: AttentionScope, { mention, comment, item, identity, receipt }: ResolvedMention) {\n  const authorName = comment.author.displayName;\n  return {\n    key: factoryAttentionKey(scope.factoryProjectId, identity),\n    kind: 'mention' as const,\n    commentId: mention.commentId,\n    occurrence: 0,\n    workItemId: mention.workItemId,\n    title: item.title,\n    detail: comment.body.slice(0, 512),\n    authorId: comment.author.id,\n    ...(authorName ? { authorName } : {}),\n    occurredAt: mention.occurredAt.toISOString(),\n    read: receipt !== undefined,\n    archived: receipt?.state === 'archived',\n    target: {\n      kind: 'work-item' as const,\n      workItemId: mention.workItemId,\n      board: workItemBoard(item),\n      commentId: mention.commentId,\n    },\n  };\n}\n\nexport function receiptScope(scope: AttentionScope): { orgId: string; factoryProjectId: string; userId: string } {\n  return { orgId: scope.orgId, factoryProjectId: scope.factoryProjectId, userId: scope.userId };\n}\n"],"mappings":";;;;;;;;;AAyFA,MAAa,iBAAiB;AAE9B,MAAM,yBAAyB;;;;;;AAa/B,gBAAuB,YACrB,YACA,YACA,QAC8B;CAC9B,IAAI,SAAS;CACb,KAAK,IAAI,UAAU,GAAG,WAAW,wBAAwB,WAAW,GAAG;EACrE,MAAM,EAAE,MAAM,YAAY,MAAM,WAAW,MAAM;EACjD,MAAM,OAAO,KAAK,GAAG,EAAE;EACvB,IAAI,CAAC,MAAM;EACX,MAAM,WAAW,WAAW,IAAI;EAChC,MAAM;GAAE;GAAM,GAAI,WAAW,YAAY,yBAAyB,EAAE,cAAc,SAAS,IAAI,CAAC;EAAG;EACnG,IAAI,CAAC,SAAS;EACd,SAAS;CACX;AACF;;AAGA,eAAsB,YACpB,SACA,OACA,WAC8B;CAC9B,MAAM,UAA4B,CAAC;CACnC,WAAW,MAAM,SAAS,SAAS;EACjC,KAAK,MAAM,SAAS,MAAM,UAAU,MAAM,IAAI,GAAG;GAC/C,IAAI,QAAQ,WAAW,OAAO,OAAO;IAAE;IAAS,SAAS;GAAK;GAC9D,QAAQ,KAAK,KAAK;EACpB;EACA,IAAI,MAAM,cAAc,OAAO;GAAE;GAAS,SAAS;GAAM,cAAc,MAAM;EAAa;CAC5F;CACA,OAAO;EAAE;EAAS,SAAS;CAAM;AACnC;;AAGA,eAAsB,aACpB,SACA,WACuE;CACvE,WAAW,MAAM,SAAS,SAAS;EACjC,MAAM,UAAU,MAAM,IAAI;EAC1B,IAAI,MAAM,cAAc,OAAO;GAAE,SAAS;GAAM,cAAc,MAAM;EAAa;CACnF;CACA,OAAO,EAAE,SAAS,MAAM;AAC1B;AAEA,SAAgB,oBAAoB,UAAiD;CACnF,OAAO,OAAO,SAAS,SAAS,SAAS,WAAW,SAAS,SAAS,KAAK,MAAM,GAAG,EAAE,IAAI;AAC5F;AAEA,SAAgB,YAAY,MAA4B,SAA6D;CACnH,IAAI,SAAS,YAAY,OAAO,SAAS,UAAU;CACnD,IAAI,SAAS,UAAU,OAAO,YAAY,KAAA;CAC1C,OAAO,SAAS,UAAU;AAC5B;AAEA,SAAS,gBAAgB,UAAyC,MAA+B;CAC/F,IAAI,CAAC,MAAM,OAAO,EAAE,MAAM,QAAiB;CAC3C,MAAM,OAAO,OAAO,SAAS,SAAS,SAAS,WAAW,SAAS,SAAS,OAAO,KAAA;CACnF,MAAM,UAAU,OAAO,KAAK,SAAS,QAAQ,KAAA;CAC7C,IAAI,SACF,OAAO;EACL,MAAM;EACN,WAAW,QAAQ;EACnB,UAAU,QAAQ;CACpB;CAEF,OAAO;EACL,MAAM;EACN,YAAY,KAAK;EACjB,OAAO,cAAc,IAAI;CAC3B;AACF;AAEA,SAAgB,cAAc,MAAsC;CAElE,OADe,KAAK,gBAAgB,kBAAkB,YAAY,KAAK,eAAe,SAAS,iBAC/E,WAAW;AAC7B;AAcA,IAAa,4BAAb,MAAoE;CAClE;CACA;CACA;CACA;CAEA,YACE,EAAE,WAAW,UACb,MACA;EACA,KAAKA,aAAa;EAClB,KAAKE,UAAU;EACf,KAAKD,QAAQ;EACb,KAAK,OAAO,KAAK;CACnB;CAEA,MAAM,OAAO,OAAiD;EAC5D,MAAM,CAAC,OAAO,cAAc,iBAAiB,MAAM,QAAQ,IAAI;GAC7D,KAAKD,WAAW,iCAAiC;IAC/C,OAAO,MAAM;IACb,kBAAkB,MAAM;IACxB,UAAU,CAAC,KAAKC,MAAM,MAAM;GAC9B,CAAC;GACD,KAAKD,WAAW,uBAAuB;IAAE,GAAG,aAAa,KAAK;IAAG,MAAM,KAAK;GAAK,CAAC;GAClF,KAAKA,WAAW,uBAAuB;IAAE,GAAG,aAAa,KAAK;IAAG,MAAM,KAAK;IAAM,OAAO;GAAW,CAAC;EACvG,CAAC;EACD,OAAO;GACL,MAAM,KAAK,IAAI,GAAG,QAAQ,aAAa;GACvC,QAAQ,KAAK,IAAI,GAAG,QAAQ,YAAY;EAC1C;CACF;CAEA,MAAM,OAAO,OAAwD;EAOnE,MAAM,UAAS,MANI,KAAKA,WAAW,yBAAyB;GAC1D,OAAO,MAAM;GACb,kBAAkB,MAAM;GACxB,QAAQ,KAAKC,MAAM;GACnB,OAAO;EACT,CAAC,EAAA,CACmB,UAAU;EAC9B,IAAI,CAAC,QAAQ,OAAO;EACpB,MAAM,WAAW,KAAKA,MAAM,SAAS,MAAM;EAC3C,MAAM,WAAW,MAAM,KAAKD,WAAW,sBAAsB;GAC3D,GAAG,aAAa,KAAK;GACrB,YAAY,CAAC,QAAQ;EACvB,CAAC;EACD,OAAO;GACL,KAAK,oBAAoB,MAAM,kBAAkB,QAAQ;GACzD,IAAI,KAAKC,MAAM,WAAW,MAAM;GAChC,QAAQ,SAAS,WAAW;EAC9B;CACF;CAEA,MAAM,OAAuB,QAAkC;EAC7D,OAAO,YACL,OAAM,WAAU;GACd,MAAM,OAAO,MAAM,KAAKD,WAAW,yBAAyB;IAC1D,OAAO,MAAM;IACb,kBAAkB,MAAM;IACxB,QAAQ,KAAKC,MAAM;IACnB,QAAQ;IACR,OAAA;GACF,CAAC;GACD,OAAO;IAAE,MAAM,KAAK;IAAW,SAAS,KAAK;GAAQ;EACvD,IACA,cAAa;GAAE,YAAY,KAAKA,MAAM,WAAW,QAAQ;GAAG,IAAI,SAAS;EAAG,IAC5E,MACF;CACF;CAEA,MAAM,KAAK,OAAuB,EAAE,MAAM,QAAQ,QAAQ,SAA0D;EAClH,OAAO,YAAY,KAAKE,MAAM,OAAO,MAAM,GAAG,OAAO,OAAM,cAAa;GACtE,MAAM,CAAC,cAAc,UAAU,aAAa,MAAM,QAAQ,IAAI;IAC5D,KAAKC,aAAa,OAAO,SAAS;IAClC,KAAKC,aAAa,OAAO,SAAS;IAClC,qBAAqB,KAAKL,YAAY,KAAKE,SAAS,OAAO,SAAS;GACtE,CAAC;GACD,MAAM,UAA4B,CAAC;GACnC,KAAK,MAAM,YAAY,WAAW;IAChC,MAAM,WAAW,KAAKD,MAAM,SAAS,QAAQ;IAC7C,MAAM,UAAU,aAAa,IAAI,oBAAoB,MAAM,kBAAkB,QAAQ,CAAC;IACtF,IAAI,CAAC,YAAY,MAAM,OAAO,GAAG;IACjC,MAAM,OAAO,SAAS,aAAa,SAAS,IAAI,SAAS,UAAU,IAAI,KAAA;IACvE,IAAI,UAAU,CAAC,KAAKA,MAAM,QAAQ,UAAU,MAAM,MAAM,GAAG;IAC3D,MAAM,aAAa,KAAKA,MAAM,WAAW,QAAQ;IACjD,QAAQ,KAAK;KACX;KACA,cAAc;MAAE;MAAY,IAAI,SAAS;KAAG;KAC5C,MAAM;MACJ,KAAK,oBAAoB,MAAM,kBAAkB,QAAQ;MACzD,MAAM,KAAK;MACX,YAAY,SAAS;MACrB,YAAY,SAAS;MACrB,YAAY,SAAS;MACrB,OAAO,KAAKA,MAAM,MAAM,UAAU,IAAI;MACtC,QAAQ,KAAKA,MAAM,OAAO,UAAU,IAAI;MACxC,cAAc,oBAAoB,QAAQ;MAC1C,GAAG,KAAKA,MAAM,QAAQ,UAAU,EAAE,WAAW,UAAU,IAAI,SAAS,EAAE,EAAE,CAAC;MACzE,YAAY,WAAW,YAAY;MACnC,MAAM,YAAY,KAAA;MAClB,UAAU,SAAS,UAAU;MAC7B,QAAQ,gBAAgB,UAAU,IAAI;KACxC;IACF,CAAC;GACH;GACA,OAAO;EACT,CAAC;CACH;CAEA,MAAMG,aACJ,OACA,WACqD;EACrD,MAAM,WAAW,MAAM,KAAKJ,WAAW,sBAAsB;GAC3D,GAAG,aAAa,KAAK;GACrB,YAAY,UAAU,KAAI,aAAY,KAAKC,MAAM,SAAS,QAAQ,CAAC;EACrE,CAAC;EACD,OAAO,IAAI,IAAI,SAAS,KAAI,YAAW,CAAC,oBAAoB,MAAM,kBAAkB,OAAO,GAAG,OAAO,CAAC,CAAC;CACzG;CAEA,MAAMI,aACJ,OACA,WACmC;EACnC,MAAM,QAAQ,MAAM,KAAKL,WAAW,UAAU;GAC5C,OAAO,MAAM;GACb,kBAAkB,MAAM;GACxB,KAAK,UAAU,SAAQ,aAAa,SAAS,aAAa,CAAC,SAAS,UAAU,IAAI,CAAC,CAAE;EACvF,CAAC;EACD,OAAO,IAAI,IAAI,MAAM,KAAI,SAAQ,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC;CACnD;CAEA,MAAM,YACJ,OACA,EAAE,QAAQ,OAC6D;EACvE,OAAO,aAAa,KAAKG,MAAM,OAAO,MAAM,GAAG,OAAM,cAAa;GAChE,MAAM,KAAKH,WAAW,0BAA0B;IAC9C,GAAG,aAAa,KAAK;IACrB,YAAY,UAAU,KAAI,aAAY,KAAKC,MAAM,SAAS,QAAQ,CAAC;IACnE;GACF,CAAC;EACH,CAAC;CACH;AACF;AAEA,MAAa,8BAAqD;CAChE,MAAM;CACN,QAAQ;CACR,WAAU,aAAY,iCAAiC,SAAS,IAAI,SAAS,iBAAiB;CAC9F,aAAY,aAAY,SAAS,eAAe,SAAS;CACzD,QAAQ,UAAU,SAAS,MAAM,SAAS,+BAA+B,SAAS,WAAW,CAAC,CAAC;CAC/F,SAAQ,aAAY,SAAS,WAAW,MAAM,GAAG,GAAG,KAAK,+BAA+B,SAAS,WAAW,CAAC,CAAC;CAC9G,QAAQ,UAAU,EAAE,iBAAiB;EACnC,aAAa,SAAS;EACtB,UAAU,CAAC,aAAa,+BAA+B,SAAS,WAAW,CAAC,CAAC;CAC/E;CACA,UAAU,UAAU,MAAM,WACxB,MAAM,MAAM,YAAY,CAAC,CAAC,SAAS,MAAM,MAAM,QAC/C,SAAS,WAAW,YAAY,CAAC,CAAC,SAAS,MAAM,MAAM,QACvD,oBAAoB,QAAQ,CAAC,CAAC,YAAY,CAAC,CAAC,SAAS,MAAM;AAC/D;AAUA,SAAS,yBAAyB,KAA2D;CAC3F,OAAO,IAAI;AACb;AAEA,IAAa,qCAAb,MAA6E;CAC3E,OAAgB;CAChB;CAEA,YAAY,EAAE,aAA8C;EAC1D,KAAKD,aAAa;CACpB;CAEA,MAAM,OAAO,OAAiD;EAC5D,IAAI,OAAO;EACX,IAAI,SAAS;EACb,MAAM,UAAU,aACd,WACE,KAAKA,WAAW,0BAA0B;GAAE,GAAG;GAAO,GAAI,SAAS,EAAE,OAAO,IAAI,CAAC;GAAI,OAAA;EAAsB,CAAC,IAC9G,SAAQ;GAAE,YAAY,IAAI;GAAU,IAAI,IAAI;EAAG,EACjD;EACA,WAAW,MAAM,QAAQ,SAAS;GAChC,MAAM,aAAa,KAAK,KAAK,KAAI,QAC/B,0CAA0C,IAAI,YAAY,IAAI,UAAU,CAC1E;GACA,MAAM,WAAW,MAAM,KAAKA,WAAW,sBAAsB;IAAE,GAAG;IAAO;GAAW,CAAC;GACrF,MAAM,aAAa,IAAI,IACrB,SAAS,KAAI,YAAW,CAAC,GAAG,QAAQ,SAAS,IAAI,QAAQ,cAAc,OAAO,CAAU,CAC1F;GACA,KAAK,MAAM,OAAO,KAAK,MAAM;IAC3B,MAAM,UAAU,WAAW,IAAI,GAAG,IAAI,WAAW,IAAI,IAAI,YAAY;IACrE,IAAI,SAAS,UAAU,YAAY;IACnC,QAAQ;IACR,IAAI,CAAC,SAAS,UAAU;GAC1B;EACF;EACA,OAAO;GAAE;GAAM;EAAO;CACxB;CAEA,MAAM,OAAO,OAAwD;EAEnE,MAAM,UAAS,MADI,KAAKA,WAAW,0BAA0B;GAAE,GAAG;GAAO,OAAO;EAAE,CAAC,EAAA,CAC/D,KAAK;EACzB,IAAI,CAAC,QAAQ,OAAO;EACpB,MAAM,WAAW,0CAA0C,OAAO,YAAY,OAAO,UAAU;EAC/F,MAAM,WAAW,MAAM,KAAKA,WAAW,sBAAsB;GAAE,GAAG;GAAO,YAAY,CAAC,QAAQ;EAAE,CAAC;EACjG,OAAO;GACL,KAAK,oBAAoB,MAAM,kBAAkB,QAAQ;GACzD,IAAI,OAAO;GACX,QAAQ,SAAS,WAAW;EAC9B;CACF;CAEA,KAAK,OAAuB,MAAuD;EACjF,OAAO,YACL,aACE,WACE,KAAKA,WAAW,0BAA0B;GAAE,GAAG;GAAO,GAAI,SAAS,EAAE,OAAO,IAAI,CAAC;GAAI,OAAA;EAAsB,CAAC,IAC9G,SAAQ;GAAE,YAAY,IAAI;GAAU,IAAI,IAAI;EAAG,IAC/C,KAAK,MACP,GACA,KAAK,OACL,OAAM,SAAQ;GACZ,MAAM,aAAa,KAAK,KAAI,QAAO,0CAA0C,IAAI,YAAY,IAAI,UAAU,CAAC;GAC5G,MAAM,WAAW,MAAM,KAAKA,WAAW,sBAAsB;IAAE,GAAG;IAAO;GAAW,CAAC;GACrF,MAAM,aAAa,IAAI,IACrB,SAAS,KAAI,YAAW,CAAC,GAAG,QAAQ,SAAS,IAAI,QAAQ,cAAc,OAAO,CAAU,CAC1F;GACA,OAAO,KAAK,SAAQ,QAAO;IACzB,MAAM,UAAU,yBAAyB,GAAG;IAC5C,MAAM,UAAU,WAAW,IAAI,GAAG,IAAI,WAAW,IAAI,IAAI,YAAY;IACrE,IAAI,CAAC,YAAY,KAAK,MAAM,OAAO,GAAG,OAAO,CAAC;IAC9C,MAAM,OAAO,GAAG,QAAQ,MAAM,GAAG,QAAQ,WAAW,YAAY;IAChE,IAAI,KAAK,UAAU,CAAC,KAAK,SAAS,KAAK,MAAM,GAAG,OAAO,CAAC;IACxD,MAAM,WAAW,0CAA0C,IAAI,YAAY,IAAI,UAAU;IACzF,OAAO,CACL;KACE,KAAK,oBAAoB,MAAM,kBAAkB,QAAQ;KACzD,YAAY,IAAI;KAChB,cAAc;MAAE,YAAY,IAAI;MAAU,IAAI,IAAI;KAAG;KACrD;KACA,MAAM;MACJ,KAAK,oBAAoB,MAAM,kBAAkB,QAAQ;MACzD,MAAM,KAAK;MACX,YAAY,IAAI;MAChB,YAAY,IAAI;MAChB,cAAc,QAAQ;MACtB,UAAU,QAAQ;MAClB,OAAO,QAAQ;MACf,QAAQ,QAAQ;MAChB,SAAS,QAAQ,WAAW;MAC5B,iBAAiB,QAAQ;MACzB,YAAY,QAAQ;MACpB,YAAY,IAAI,SAAS,YAAY;MACrC,MAAM,QAAQ,OAAO;MACrB,UAAU,SAAS,UAAU;MAC7B,QAAQ,QAAQ,aACZ;OAAE,MAAM;OAAa,YAAY,QAAQ;OAAY,OAAO;MAAO,IACnE,EAAE,MAAM,QAAQ;KACtB;IACF,CACF;GACF,CAAC;EACH,CACF;CACF;CAEA,YACE,OACA,MACuE;EACvE,OAAO,aACL,aACE,WACE,KAAKA,WAAW,0BAA0B;GAAE,GAAG;GAAO,GAAI,SAAS,EAAE,OAAO,IAAI,CAAC;GAAI,OAAA;EAAsB,CAAC,IAC9G,SAAQ;GAAE,YAAY,IAAI;GAAU,IAAI,IAAI;EAAG,IAC/C,KAAK,MACP,IACA,SACE,KAAKA,WAAW,0BAA0B;GACxC,GAAG;GACH,YAAY,KAAK,KAAI,QAAO,0CAA0C,IAAI,YAAY,IAAI,UAAU,CAAC;GACrG,KAAK,KAAK;EACZ,CAAC,CACL;CACF;AACF;AAEA,IAAa,2BAAb,MAAmE;CACjE,OAAgB;CAChB;CACA;CAEA,YAAY,EAAE,WAAW,YAAgF;EACvG,KAAKA,aAAa;EAClB,KAAKM,YAAY;CACnB;CAEA,MAAM,OAAuB,QAAkC;EAC7D,OAAO,YACL,OAAM,WAAU;GACd,MAAM,OAAO,MAAM,KAAKA,UAAU,oBAAoB;IACpD,GAAG,aAAa,KAAK;IACrB,GAAI,SAAS,EAAE,QAAQ,OAAO,IAAI,CAAC;IACnC,OAAO;GACT,CAAC;GACD,OAAO;IAAE,MAAM,KAAK,MAAM,GAAA,EAAiB;IAAG,SAAS,KAAK,SAAA;GAAwB;EACtF,IACA,aAAY;GAAE,YAAY,QAAQ;GAAY,IAAI,QAAQ;EAAG,IAC7D,MACF;CACF;;;;;CAMA,MAAMC,SAAS,OAAuB,UAA4D;EAChG,MAAM,CAAC,UAAU,UAAU,SAAS,MAAM,QAAQ,IAAI;GACpD,KAAKP,WAAW,sBAAsB;IACpC,GAAG,aAAa,KAAK;IACrB,YAAY,SAAS,KAAI,YAAW,gCAAgC,QAAQ,SAAS,CAAC;GACxF,CAAC;GACD,KAAKM,UAAU,UAAU;IACvB,OAAO,MAAM;IACb,KAAK,CAAC,GAAG,IAAI,IAAI,SAAS,KAAI,YAAW,QAAQ,SAAS,CAAC,CAAC;GAC9D,CAAC;GACD,KAAKN,WAAW,UAAU;IACxB,OAAO,MAAM;IACb,kBAAkB,MAAM;IACxB,KAAK,CAAC,GAAG,IAAI,IAAI,SAAS,KAAI,YAAW,QAAQ,UAAU,CAAC,CAAC;GAC/D,CAAC;EACH,CAAC;EACD,MAAM,eAAe,IAAI,IACvB,SAAS,KAAI,YAAW,CAAC,oBAAoB,MAAM,kBAAkB,OAAO,GAAG,OAAO,CAAC,CACzF;EACA,MAAM,cAAc,IAAI,IAAI,SAAS,KAAI,YAAW,CAAC,QAAQ,IAAI,OAAO,CAAC,CAAC;EAC1E,MAAM,WAAW,IAAI,IAAI,MAAM,KAAI,SAAQ,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC;EAE3D,MAAM,WAA8B,CAAC;EACrC,KAAK,MAAM,WAAW,UAAU;GAC9B,MAAM,UAAU,YAAY,IAAI,QAAQ,SAAS;GACjD,MAAM,OAAO,SAAS,IAAI,QAAQ,UAAU;GAC5C,IAAI,CAAC,WAAW,QAAQ,aAAa,CAAC,MAAM;GAC5C,MAAM,WAAW,gCAAgC,QAAQ,SAAS;GAClE,SAAS,KAAK;IACZ;IACA;IACA;IACA;IACA,SAAS,aAAa,IAAI,oBAAoB,MAAM,kBAAkB,QAAQ,CAAC;GACjF,CAAC;EACH;EACA,OAAO;CACT;;;;;;;CAQA,MAAM,OAAO,OAAiD;EAC5D,IAAI,OAAO;EACX,IAAI,SAAS;EACb,WAAW,MAAM,SAAS,KAAKG,MAAM,KAAK,GACxC,KAAK,MAAM,EAAE,aAAa,MAAM,KAAKI,SAAS,OAAO,MAAM,IAAI,GAAG;GAChE,IAAI,SAAS,UAAU,YAAY,QAAQ;GAC3C,IAAI,YAAY,KAAA,GAAW,UAAU;EACvC;EAEF,OAAO;GAAE;GAAM;EAAO;CACxB;CAEA,MAAM,OAAO,OAAwD;EACnE,MAAM,WAAW,MAAM,KAAKD,UAAU,oBAAoB;GAAE,GAAG,aAAa,KAAK;GAAG,OAAO;EAAG,CAAC;EAC/F,MAAM,UAAU,MAAM,KAAKC,SAAS,OAAO,QAAQ,EAAA,CAAG;EACtD,IAAI,CAAC,QAAQ,OAAO;EACpB,OAAO;GACL,KAAK,oBAAoB,MAAM,kBAAkB,OAAO,QAAQ;GAChE,IAAI,OAAO,QAAQ;GACnB,QAAQ,OAAO,YAAY,KAAA;EAC7B;CACF;CAEA,MAAM,KAAK,OAAuB,EAAE,MAAM,QAAQ,QAAQ,SAA0D;EAClH,OAAO,YAAY,KAAKJ,MAAM,OAAO,MAAM,GAAG,OAAO,OAAM,aAAY;GACrE,MAAM,UAA4B,CAAC;GACnC,KAAK,MAAM,YAAY,MAAM,KAAKI,SAAS,OAAO,QAAQ,GAAG;IAC3D,IAAI,CAAC,YAAY,MAAM,SAAS,OAAO,GAAG;IAC1C,IAAI,UAAU,CAAC,qBAAqB,UAAU,MAAM,GAAG;IACvD,QAAQ,KAAK;KACX,YAAY,SAAS,QAAQ;KAC7B,cAAc;MAAE,YAAY,SAAS,QAAQ;MAAY,IAAI,SAAS,QAAQ;KAAG;KACjF,MAAM,cAAc,OAAO,QAAQ;IACrC,CAAC;GACH;GACA,OAAO;EACT,CAAC;CACH;CAEA,MAAM,YACJ,OACA,EAAE,QAAQ,OAC6D;EACvE,OAAO,aAAa,KAAKJ,MAAM,OAAO,MAAM,GAAG,OAAM,aAAY;GAC/D,MAAM,KAAKH,WAAW,0BAA0B;IAC9C,GAAG,aAAa,KAAK;IACrB,YAAY,SAAS,KAAI,YAAW,gCAAgC,QAAQ,SAAS,CAAC;IACtF;GACF,CAAC;EACH,CAAC;CACH;AACF;AAEA,SAAS,qBAAqB,EAAE,MAAM,WAA4B,QAAyB;CACzF,OACE,KAAK,MAAM,YAAY,CAAC,CAAC,SAAS,MAAM,KACxC,QAAQ,KAAK,YAAY,CAAC,CAAC,SAAS,MAAM,KAC1C,QAAQ,OAAO,aAAa,YAAY,CAAC,CAAC,SAAS,MAAM,MAAM;AAEnE;AAEA,SAAS,cAAc,OAAuB,EAAE,SAAS,SAAS,MAAM,UAAU,WAA4B;CAC5G,MAAM,aAAa,QAAQ,OAAO;CAClC,OAAO;EACL,KAAK,oBAAoB,MAAM,kBAAkB,QAAQ;EACzD,MAAM;EACN,WAAW,QAAQ;EACnB,YAAY;EACZ,YAAY,QAAQ;EACpB,OAAO,KAAK;EACZ,QAAQ,QAAQ,KAAK,MAAM,GAAG,GAAG;EACjC,UAAU,QAAQ,OAAO;EACzB,GAAI,aAAa,EAAE,WAAW,IAAI,CAAC;EACnC,YAAY,QAAQ,WAAW,YAAY;EAC3C,MAAM,YAAY,KAAA;EAClB,UAAU,SAAS,UAAU;EAC7B,QAAQ;GACN,MAAM;GACN,YAAY,QAAQ;GACpB,OAAO,cAAc,IAAI;GACzB,WAAW,QAAQ;EACrB;CACF;AACF;AAEA,SAAgB,aAAa,OAAoF;CAC/G,OAAO;EAAE,OAAO,MAAM;EAAO,kBAAkB,MAAM;EAAkB,QAAQ,MAAM;CAAO;AAC9F"}

package/dist/routes/attention.d.ts

@@ -4,6 +4,7 @@
  * `null` meaning "not started yet", an absent kind meaning "exhausted".
  */
 import type { ApiRoute } from '@mastra/core/server';
+import type { BoardRegistry } from '../boards/index.js';
 import type { LiveSessions } from '../session/live-sessions.js';
 import type { WorkItemCommentsStorage } from '../storage/domains/comments/base.js';
 import type { WorkItemsStorage } from '../storage/domains/work-items/base.js';
@@ -11,6 +12,7 @@ import type { AttentionScope } from './attention-providers.js';
 export { factoryDecisionType } from './attention-providers.js';
 interface AttentionRouteDependencies {
     workItems: WorkItemsStorage;
+    boards: BoardRegistry;
     comments: WorkItemCommentsStorage;
     liveSessions: Pick<LiveSessions, 'parked' | 'parkedIn'>;
     resolveProject(context: unknown): Promise<AttentionScope | {

package/dist/routes/attention.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"attention.d.ts","sourceRoot":"","sources":["../../src/routes/attention.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAGpD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,qCAAqC,CAAC;AACnF,OAAO,KAAK,EAGV,gBAAgB,EACjB,MAAM,uCAAuC,CAAC;AAK/C,OAAO,KAAK,EAGV,cAAc,EAEf,MAAM,0BAA0B,CAAC;AASlC,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAE/D,UAAU,0BAA0B;IAClC,SAAS,EAAE,gBAAgB,CAAC;IAC5B,QAAQ,EAAE,uBAAuB,CAAC;IAClC,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,QAAQ,GAAG,UAAU,CAAC,CAAC;IACxD,cAAc,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,cAAc,GAAG;QAAE,QAAQ,EAAE,QAAQ,CAAA;KAAE,CAAC,CAAC;CACpF;AA0HD,wBAAgB,oBAAoB,CAAC,YAAY,EAAE,0BAA0B,GAAG,QAAQ,EAAE,CA4HzF"}
+{"version":3,"file":"attention.d.ts","sourceRoot":"","sources":["../../src/routes/attention.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAEpD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAExD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,qCAAqC,CAAC;AACnF,OAAO,KAAK,EAGV,gBAAgB,EACjB,MAAM,uCAAuC,CAAC;AAK/C,OAAO,KAAK,EAGV,cAAc,EAEf,MAAM,0BAA0B,CAAC;AASlC,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAE/D,UAAU,0BAA0B;IAClC,SAAS,EAAE,gBAAgB,CAAC;IAC5B,MAAM,EAAE,aAAa,CAAC;IACtB,QAAQ,EAAE,uBAAuB,CAAC;IAClC,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,QAAQ,GAAG,UAAU,CAAC,CAAC;IACxD,cAAc,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,cAAc,GAAG;QAAE,QAAQ,EAAE,QAAQ,CAAA;KAAE,CAAC,CAAC;CACpF;AA0HD,wBAAgB,oBAAoB,CAAC,YAAY,EAAE,0BAA0B,GAAG,QAAQ,EAAE,CA4HzF"}

package/dist/routes/attention.js

@@ -100,10 +100,16 @@ function receiptRoute(dependencies, verb, action) {
 	});
 }
 function buildAttentionRoutes(dependencies) {
-	const { workItems, comments, liveSessions } = dependencies;
+	const { workItems, boards, comments, liveSessions } = dependencies;
 	const providers = [
-		new DecisionAttentionProvider({ workItems }, failedDecisionAttentionSpec),
-		new DecisionAttentionProvider({ workItems }, proposedDecisionAttentionSpec),
+		new DecisionAttentionProvider({
+			workItems,
+			boards
+		}, failedDecisionAttentionSpec),
+		new DecisionAttentionProvider({
+			workItems,
+			boards
+		}, proposedDecisionAttentionSpec),
 		new SupervisorFindingAttentionProvider({ workItems }),
 		new MentionAttentionProvider({
 			workItems,

package/dist/routes/attention.js.map

@@ -1 +1 @@
-{"version":3,"file":"attention.js","names":[],"sources":["../../src/routes/attention.ts"],"sourcesContent":["/**\n * Attention routes: k-way merge of the per-kind providers on `occurredAt desc`.\n * The wire cursor is a per-kind map — each kind's stream resumes independently,\n * `null` meaning \"not started yet\", an absent kind meaning \"exhausted\".\n */\n\nimport type { ApiRoute } from '@mastra/core/server';\nimport { registerApiRoute } from '@mastra/core/server';\n\nimport type { LiveSessions } from '../session/live-sessions.js';\nimport type { WorkItemCommentsStorage } from '../storage/domains/comments/base.js';\nimport type {\n  FactoryAttentionKind,\n  FactoryAttentionReceiptAction,\n  WorkItemsStorage,\n} from '../storage/domains/work-items/base.js';\nimport { factoryAttentionKey } from '../storage/domains/work-items/base.js';\nimport { ActivityAttentionProvider } from './attention-activity.js';\nimport { ParkedRunAttentionProvider } from './attention-parked.js';\nimport { proposedDecisionAttentionSpec } from './attention-proposed.js';\nimport type {\n  AttentionPageResult,\n  AttentionProvider,\n  AttentionScope,\n  AttentionStreamPosition,\n} from './attention-providers.js';\nimport {\n  DecisionAttentionProvider,\n  failedDecisionAttentionSpec,\n  MentionAttentionProvider,\n  SupervisorFindingAttentionProvider,\n} from './attention-providers.js';\nimport { FACTORY_ROUTE_CONTRACTS } from './contracts.js';\n\nexport { factoryDecisionType } from './attention-providers.js';\n\ninterface AttentionRouteDependencies {\n  workItems: WorkItemsStorage;\n  comments: WorkItemCommentsStorage;\n  liveSessions: Pick<LiveSessions, 'parked' | 'parkedIn'>;\n  resolveProject(context: unknown): Promise<AttentionScope | { response: Response }>;\n}\n\ntype AttentionCursorMap = Map<FactoryAttentionKind, AttentionStreamPosition | undefined>;\n\nfunction encodeAttentionCursor(cursors: AttentionCursorMap): string {\n  const wire: Record<string, [string, string] | null> = {};\n  for (const [kind, position] of cursors) {\n    wire[kind] = position ? [position.occurredAt.toISOString(), position.id] : null;\n  }\n  return Buffer.from(JSON.stringify(wire), 'utf8').toString('base64url');\n}\n\ninterface MergedAttentionPage {\n  items: Array<Record<string, unknown>>;\n  hasMore: boolean;\n  nextCursor?: string;\n}\n\n/**\n * Take the newest `limit` entries across provider pages. Each kind's next\n * cursor is the resume position of its last consumed entry; a kind consumed to\n * the end inherits the provider's own continuation.\n */\nfunction mergeAttentionPages(\n  pages: Array<{\n    kind: FactoryAttentionKind;\n    incoming: AttentionStreamPosition | undefined;\n    result: AttentionPageResult;\n  }>,\n  limit: number,\n): MergedAttentionPage {\n  const consumed = new Map(pages.map(page => [page.kind, 0]));\n  const items: Array<Record<string, unknown>> = [];\n  while (items.length < limit) {\n    let best: { kind: FactoryAttentionKind; at: number } | undefined;\n    for (const page of pages) {\n      const next = page.result.entries[consumed.get(page.kind) ?? 0];\n      if (!next) continue;\n      const at = next.occurredAt.getTime();\n      if (!best || at > best.at) best = { kind: page.kind, at };\n    }\n    if (!best) break;\n    const index = consumed.get(best.kind) ?? 0;\n    const entry = pages.find(page => page.kind === best.kind)?.result.entries[index];\n    if (!entry) break;\n    items.push(entry.item);\n    consumed.set(best.kind, index + 1);\n  }\n\n  const nextCursors: AttentionCursorMap = new Map();\n  let hasMore = false;\n  for (const page of pages) {\n    const used = consumed.get(page.kind) ?? 0;\n    const entries = page.result.entries;\n    if (used < entries.length) {\n      hasMore = true;\n      const lastConsumed = used > 0 ? entries[used - 1] : undefined;\n      nextCursors.set(page.kind, lastConsumed ? lastConsumed.resumeCursor : page.incoming);\n      continue;\n    }\n    if (page.result.hasMore) {\n      hasMore = true;\n      nextCursors.set(page.kind, page.result.continuation ?? entries.at(-1)?.resumeCursor ?? page.incoming);\n    }\n  }\n  return {\n    items,\n    hasMore,\n    ...(hasMore && nextCursors.size > 0 ? { nextCursor: encodeAttentionCursor(nextCursors) } : {}),\n  };\n}\n\nfunction receiptRoute(\n  dependencies: AttentionRouteDependencies,\n  verb: 'read' | 'archive' | 'restore',\n  action: FactoryAttentionReceiptAction,\n): ApiRoute {\n  const contract =\n    verb === 'read'\n      ? FACTORY_ROUTE_CONTRACTS.attentionRead\n      : verb === 'archive'\n        ? FACTORY_ROUTE_CONTRACTS.attentionArchive\n        : FACTORY_ROUTE_CONTRACTS.attentionRestore;\n  return registerApiRoute(contract.path, {\n    method: contract.method,\n    requiresAuth: false,\n    handler: async context => {\n      const resolved = await dependencies.resolveProject(context);\n      if ('response' in resolved) return resolved.response;\n      const parsedPath = contract.pathSchema.safeParse({\n        id: resolved.factoryProjectId,\n        kind: context.req.param('kind'),\n        sourceId: context.req.param('sourceId'),\n        occurrence: context.req.param('occurrence'),\n      });\n      if (!parsedPath.success) return context.json({ error: 'invalid_attention_item' }, 422);\n      const { kind, sourceId, occurrence } = parsedPath.data;\n      const stillParked =\n        kind !== 'agent-waiting' || dependencies.liveSessions.parked(sourceId)?.suspendedAt === occurrence;\n      if (!stillParked) return context.json({ error: 'attention_item_not_current' }, 409);\n      await dependencies.workItems.ensureReady();\n      const receipt = await dependencies.workItems.setAttentionReceipt({\n        orgId: resolved.orgId,\n        factoryProjectId: resolved.factoryProjectId,\n        userId: resolved.userId,\n        identity: { kind, sourceId, occurrence },\n        action,\n        now: new Date(),\n      });\n      if (!receipt) return context.json({ error: 'attention_item_not_current' }, 409);\n      return context.json({\n        receipt: {\n          key: factoryAttentionKey(resolved.factoryProjectId, receipt),\n          state: receipt.state,\n          readAt: receipt.readAt.toISOString(),\n          archivedAt: receipt.archivedAt?.toISOString() ?? null,\n        },\n      });\n    },\n  });\n}\n\nexport function buildAttentionRoutes(dependencies: AttentionRouteDependencies): ApiRoute[] {\n  const { workItems, comments, liveSessions } = dependencies;\n  const providers: AttentionProvider[] = [\n    new DecisionAttentionProvider({ workItems }, failedDecisionAttentionSpec),\n    new DecisionAttentionProvider({ workItems }, proposedDecisionAttentionSpec),\n    new SupervisorFindingAttentionProvider({ workItems }),\n    new MentionAttentionProvider({ workItems, comments }),\n    new ActivityAttentionProvider({ workItems, comments }),\n    new ParkedRunAttentionProvider({ workItems, liveSessions }),\n  ];\n\n  return [\n    registerApiRoute(FACTORY_ROUTE_CONTRACTS.attentionList.path, {\n      method: FACTORY_ROUTE_CONTRACTS.attentionList.method,\n      requiresAuth: false,\n      handler: async context => {\n        const resolved = await dependencies.resolveProject(context);\n        if ('response' in resolved) return resolved.response;\n        const query = FACTORY_ROUTE_CONTRACTS.attentionList.querySchema.safeParse({\n          view: context.req.query('view'),\n          kind: context.req.queries('kind'),\n          before: context.req.query('before'),\n          limit: context.req.query('limit'),\n          search: context.req.query('search'),\n        });\n        if (!query.success) {\n          const field = query.error.issues[0]?.path[0];\n          return context.json(\n            {\n              error:\n                field === 'kind'\n                  ? 'invalid_attention_kind'\n                  : field === 'before'\n                    ? 'invalid_cursor'\n                    : 'invalid_attention_view',\n            },\n            400,\n          );\n        }\n        const { view, before, search, limit } = query.data;\n        const kinds = query.data.kind ?? providers.map(provider => provider.kind);\n        await workItems.ensureReady();\n        await comments.ensureReady();\n\n        const active = providers.filter(\n          provider => kinds.includes(provider.kind) && (!before || before.has(provider.kind)),\n        );\n\n        const [summaries, pages] = await Promise.all([\n          Promise.all(\n            providers.map(async provider => ({\n              kind: provider.kind,\n              counts: await provider.counts(resolved),\n              latest: await provider.latest(resolved),\n            })),\n          ),\n          Promise.all(\n            active.map(async provider => ({\n              kind: provider.kind,\n              incoming: before?.get(provider.kind),\n              result: await provider.page(resolved, {\n                view,\n                ...(search ? { search } : {}),\n                before: before?.get(provider.kind),\n                limit,\n              }),\n            })),\n          ),\n        ]);\n\n        const merged = mergeAttentionPages(pages, limit);\n\n        return context.json({\n          items: merged.items,\n          kinds: Object.fromEntries(\n            summaries.map(summary => [\n              summary.kind,\n              {\n                ...summary.counts,\n                latest: summary.latest ? { ...summary.latest, at: summary.latest.at.toISOString() } : null,\n              },\n            ]),\n          ),\n          hasMore: merged.hasMore,\n          ...(merged.nextCursor ? { nextCursor: merged.nextCursor } : {}),\n        });\n      },\n    }),\n    registerApiRoute(FACTORY_ROUTE_CONTRACTS.attentionReadAll.path, {\n      method: FACTORY_ROUTE_CONTRACTS.attentionReadAll.method,\n      requiresAuth: false,\n      handler: async context => {\n        const resolved = await dependencies.resolveProject(context);\n        if ('response' in resolved) return resolved.response;\n        const query = FACTORY_ROUTE_CONTRACTS.attentionReadAll.querySchema.safeParse({\n          before: context.req.query('before'),\n        });\n        if (!query.success) return context.json({ error: 'invalid_cursor' }, 400);\n        const { before } = query.data;\n        await workItems.ensureReady();\n        await comments.ensureReady();\n\n        const now = new Date();\n        const active = providers.filter(provider => !before || before.has(provider.kind));\n        const nextCursors: AttentionCursorMap = new Map();\n        let hasMore = false;\n        for (const provider of active) {\n          const result = await provider.markAllRead(resolved, { before: before?.get(provider.kind), now });\n          if (result.hasMore) {\n            hasMore = true;\n            if (result.continuation) nextCursors.set(provider.kind, result.continuation);\n          }\n        }\n        return context.json({\n          ok: true,\n          hasMore,\n          ...(hasMore && nextCursors.size > 0 ? { nextCursor: encodeAttentionCursor(nextCursors) } : {}),\n        });\n      },\n    }),\n    receiptRoute(dependencies, 'read', 'read'),\n    receiptRoute(dependencies, 'archive', 'archive'),\n    receiptRoute(dependencies, 'restore', 'restore'),\n  ];\n}\n"],"mappings":";;;;;;;;AA6CA,SAAS,sBAAsB,SAAqC;CAClE,MAAM,OAAgD,CAAC;CACvD,KAAK,MAAM,CAAC,MAAM,aAAa,SAC7B,KAAK,QAAQ,WAAW,CAAC,SAAS,WAAW,YAAY,GAAG,SAAS,EAAE,IAAI;CAE7E,OAAO,OAAO,KAAK,KAAK,UAAU,IAAI,GAAG,MAAM,CAAC,CAAC,SAAS,WAAW;AACvE;;;;;;AAaA,SAAS,oBACP,OAKA,OACqB;CACrB,MAAM,WAAW,IAAI,IAAI,MAAM,KAAI,SAAQ,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC;CAC1D,MAAM,QAAwC,CAAC;CAC/C,OAAO,MAAM,SAAS,OAAO;EAC3B,IAAI;EACJ,KAAK,MAAM,QAAQ,OAAO;GACxB,MAAM,OAAO,KAAK,OAAO,QAAQ,SAAS,IAAI,KAAK,IAAI,KAAK;GAC5D,IAAI,CAAC,MAAM;GACX,MAAM,KAAK,KAAK,WAAW,QAAQ;GACnC,IAAI,CAAC,QAAQ,KAAK,KAAK,IAAI,OAAO;IAAE,MAAM,KAAK;IAAM;GAAG;EAC1D;EACA,IAAI,CAAC,MAAM;EACX,MAAM,QAAQ,SAAS,IAAI,KAAK,IAAI,KAAK;EACzC,MAAM,QAAQ,MAAM,MAAK,SAAQ,KAAK,SAAS,KAAK,IAAI,CAAC,EAAE,OAAO,QAAQ;EAC1E,IAAI,CAAC,OAAO;EACZ,MAAM,KAAK,MAAM,IAAI;EACrB,SAAS,IAAI,KAAK,MAAM,QAAQ,CAAC;CACnC;CAEA,MAAM,8BAAkC,IAAI,IAAI;CAChD,IAAI,UAAU;CACd,KAAK,MAAM,QAAQ,OAAO;EACxB,MAAM,OAAO,SAAS,IAAI,KAAK,IAAI,KAAK;EACxC,MAAM,UAAU,KAAK,OAAO;EAC5B,IAAI,OAAO,QAAQ,QAAQ;GACzB,UAAU;GACV,MAAM,eAAe,OAAO,IAAI,QAAQ,OAAO,KAAK,KAAA;GACpD,YAAY,IAAI,KAAK,MAAM,eAAe,aAAa,eAAe,KAAK,QAAQ;GACnF;EACF;EACA,IAAI,KAAK,OAAO,SAAS;GACvB,UAAU;GACV,YAAY,IAAI,KAAK,MAAM,KAAK,OAAO,gBAAgB,QAAQ,GAAG,EAAE,CAAC,EAAE,gBAAgB,KAAK,QAAQ;EACtG;CACF;CACA,OAAO;EACL;EACA;EACA,GAAI,WAAW,YAAY,OAAO,IAAI,EAAE,YAAY,sBAAsB,WAAW,EAAE,IAAI,CAAC;CAC9F;AACF;AAEA,SAAS,aACP,cACA,MACA,QACU;CACV,MAAM,WACJ,SAAS,SACL,wBAAwB,gBACxB,SAAS,YACP,wBAAwB,mBACxB,wBAAwB;CAChC,OAAO,iBAAiB,SAAS,MAAM;EACrC,QAAQ,SAAS;EACjB,cAAc;EACd,SAAS,OAAM,YAAW;GACxB,MAAM,WAAW,MAAM,aAAa,eAAe,OAAO;GAC1D,IAAI,cAAc,UAAU,OAAO,SAAS;GAC5C,MAAM,aAAa,SAAS,WAAW,UAAU;IAC/C,IAAI,SAAS;IACb,MAAM,QAAQ,IAAI,MAAM,MAAM;IAC9B,UAAU,QAAQ,IAAI,MAAM,UAAU;IACtC,YAAY,QAAQ,IAAI,MAAM,YAAY;GAC5C,CAAC;GACD,IAAI,CAAC,WAAW,SAAS,OAAO,QAAQ,KAAK,EAAE,OAAO,yBAAyB,GAAG,GAAG;GACrF,MAAM,EAAE,MAAM,UAAU,eAAe,WAAW;GAGlD,IAAI,EADF,SAAS,mBAAmB,aAAa,aAAa,OAAO,QAAQ,CAAC,EAAE,gBAAgB,aACxE,OAAO,QAAQ,KAAK,EAAE,OAAO,6BAA6B,GAAG,GAAG;GAClF,MAAM,aAAa,UAAU,YAAY;GACzC,MAAM,UAAU,MAAM,aAAa,UAAU,oBAAoB;IAC/D,OAAO,SAAS;IAChB,kBAAkB,SAAS;IAC3B,QAAQ,SAAS;IACjB,UAAU;KAAE;KAAM;KAAU;IAAW;IACvC;IACA,qBAAK,IAAI,KAAK;GAChB,CAAC;GACD,IAAI,CAAC,SAAS,OAAO,QAAQ,KAAK,EAAE,OAAO,6BAA6B,GAAG,GAAG;GAC9E,OAAO,QAAQ,KAAK,EAClB,SAAS;IACP,KAAK,oBAAoB,SAAS,kBAAkB,OAAO;IAC3D,OAAO,QAAQ;IACf,QAAQ,QAAQ,OAAO,YAAY;IACnC,YAAY,QAAQ,YAAY,YAAY,KAAK;GACnD,EACF,CAAC;EACH;CACF,CAAC;AACH;AAEA,SAAgB,qBAAqB,cAAsD;CACzF,MAAM,EAAE,WAAW,UAAU,iBAAiB;CAC9C,MAAM,YAAiC;EACrC,IAAI,0BAA0B,EAAE,UAAU,GAAG,2BAA2B;EACxE,IAAI,0BAA0B,EAAE,UAAU,GAAG,6BAA6B;EAC1E,IAAI,mCAAmC,EAAE,UAAU,CAAC;EACpD,IAAI,yBAAyB;GAAE;GAAW;EAAS,CAAC;EACpD,IAAI,0BAA0B;GAAE;GAAW;EAAS,CAAC;EACrD,IAAI,2BAA2B;GAAE;GAAW;EAAa,CAAC;CAC5D;CAEA,OAAO;EACL,iBAAiB,wBAAwB,cAAc,MAAM;GAC3D,QAAQ,wBAAwB,cAAc;GAC9C,cAAc;GACd,SAAS,OAAM,YAAW;IACxB,MAAM,WAAW,MAAM,aAAa,eAAe,OAAO;IAC1D,IAAI,cAAc,UAAU,OAAO,SAAS;IAC5C,MAAM,QAAQ,wBAAwB,cAAc,YAAY,UAAU;KACxE,MAAM,QAAQ,IAAI,MAAM,MAAM;KAC9B,MAAM,QAAQ,IAAI,QAAQ,MAAM;KAChC,QAAQ,QAAQ,IAAI,MAAM,QAAQ;KAClC,OAAO,QAAQ,IAAI,MAAM,OAAO;KAChC,QAAQ,QAAQ,IAAI,MAAM,QAAQ;IACpC,CAAC;IACD,IAAI,CAAC,MAAM,SAAS;KAClB,MAAM,QAAQ,MAAM,MAAM,OAAO,EAAE,EAAE,KAAK;KAC1C,OAAO,QAAQ,KACb,EACE,OACE,UAAU,SACN,2BACA,UAAU,WACR,mBACA,yBACV,GACA,GACF;IACF;IACA,MAAM,EAAE,MAAM,QAAQ,QAAQ,UAAU,MAAM;IAC9C,MAAM,QAAQ,MAAM,KAAK,QAAQ,UAAU,KAAI,aAAY,SAAS,IAAI;IACxE,MAAM,UAAU,YAAY;IAC5B,MAAM,SAAS,YAAY;IAE3B,MAAM,SAAS,UAAU,QACvB,aAAY,MAAM,SAAS,SAAS,IAAI,MAAM,CAAC,UAAU,OAAO,IAAI,SAAS,IAAI,EACnF;IAEA,MAAM,CAAC,WAAW,SAAS,MAAM,QAAQ,IAAI,CAC3C,QAAQ,IACN,UAAU,IAAI,OAAM,cAAa;KAC/B,MAAM,SAAS;KACf,QAAQ,MAAM,SAAS,OAAO,QAAQ;KACtC,QAAQ,MAAM,SAAS,OAAO,QAAQ;IACxC,EAAE,CACJ,GACA,QAAQ,IACN,OAAO,IAAI,OAAM,cAAa;KAC5B,MAAM,SAAS;KACf,UAAU,QAAQ,IAAI,SAAS,IAAI;KACnC,QAAQ,MAAM,SAAS,KAAK,UAAU;MACpC;MACA,GAAI,SAAS,EAAE,OAAO,IAAI,CAAC;MAC3B,QAAQ,QAAQ,IAAI,SAAS,IAAI;MACjC;KACF,CAAC;IACH,EAAE,CACJ,CACF,CAAC;IAED,MAAM,SAAS,oBAAoB,OAAO,KAAK;IAE/C,OAAO,QAAQ,KAAK;KAClB,OAAO,OAAO;KACd,OAAO,OAAO,YACZ,UAAU,KAAI,YAAW,CACvB,QAAQ,MACR;MACE,GAAG,QAAQ;MACX,QAAQ,QAAQ,SAAS;OAAE,GAAG,QAAQ;OAAQ,IAAI,QAAQ,OAAO,GAAG,YAAY;MAAE,IAAI;KACxF,CACF,CAAC,CACH;KACA,SAAS,OAAO;KAChB,GAAI,OAAO,aAAa,EAAE,YAAY,OAAO,WAAW,IAAI,CAAC;IAC/D,CAAC;GACH;EACF,CAAC;EACD,iBAAiB,wBAAwB,iBAAiB,MAAM;GAC9D,QAAQ,wBAAwB,iBAAiB;GACjD,cAAc;GACd,SAAS,OAAM,YAAW;IACxB,MAAM,WAAW,MAAM,aAAa,eAAe,OAAO;IAC1D,IAAI,cAAc,UAAU,OAAO,SAAS;IAC5C,MAAM,QAAQ,wBAAwB,iBAAiB,YAAY,UAAU,EAC3E,QAAQ,QAAQ,IAAI,MAAM,QAAQ,EACpC,CAAC;IACD,IAAI,CAAC,MAAM,SAAS,OAAO,QAAQ,KAAK,EAAE,OAAO,iBAAiB,GAAG,GAAG;IACxE,MAAM,EAAE,WAAW,MAAM;IACzB,MAAM,UAAU,YAAY;IAC5B,MAAM,SAAS,YAAY;IAE3B,MAAM,sBAAM,IAAI,KAAK;IACrB,MAAM,SAAS,UAAU,QAAO,aAAY,CAAC,UAAU,OAAO,IAAI,SAAS,IAAI,CAAC;IAChF,MAAM,8BAAkC,IAAI,IAAI;IAChD,IAAI,UAAU;IACd,KAAK,MAAM,YAAY,QAAQ;KAC7B,MAAM,SAAS,MAAM,SAAS,YAAY,UAAU;MAAE,QAAQ,QAAQ,IAAI,SAAS,IAAI;MAAG;KAAI,CAAC;KAC/F,IAAI,OAAO,SAAS;MAClB,UAAU;MACV,IAAI,OAAO,cAAc,YAAY,IAAI,SAAS,MAAM,OAAO,YAAY;KAC7E;IACF;IACA,OAAO,QAAQ,KAAK;KAClB,IAAI;KACJ;KACA,GAAI,WAAW,YAAY,OAAO,IAAI,EAAE,YAAY,sBAAsB,WAAW,EAAE,IAAI,CAAC;IAC9F,CAAC;GACH;EACF,CAAC;EACD,aAAa,cAAc,QAAQ,MAAM;EACzC,aAAa,cAAc,WAAW,SAAS;EAC/C,aAAa,cAAc,WAAW,SAAS;CACjD;AACF"}
+{"version":3,"file":"attention.js","names":[],"sources":["../../src/routes/attention.ts"],"sourcesContent":["/**\n * Attention routes: k-way merge of the per-kind providers on `occurredAt desc`.\n * The wire cursor is a per-kind map — each kind's stream resumes independently,\n * `null` meaning \"not started yet\", an absent kind meaning \"exhausted\".\n */\n\nimport type { ApiRoute } from '@mastra/core/server';\nimport { registerApiRoute } from '@mastra/core/server';\nimport type { BoardRegistry } from '../boards/index.js';\n\nimport type { LiveSessions } from '../session/live-sessions.js';\nimport type { WorkItemCommentsStorage } from '../storage/domains/comments/base.js';\nimport type {\n  FactoryAttentionKind,\n  FactoryAttentionReceiptAction,\n  WorkItemsStorage,\n} from '../storage/domains/work-items/base.js';\nimport { factoryAttentionKey } from '../storage/domains/work-items/base.js';\nimport { ActivityAttentionProvider } from './attention-activity.js';\nimport { ParkedRunAttentionProvider } from './attention-parked.js';\nimport { proposedDecisionAttentionSpec } from './attention-proposed.js';\nimport type {\n  AttentionPageResult,\n  AttentionProvider,\n  AttentionScope,\n  AttentionStreamPosition,\n} from './attention-providers.js';\nimport {\n  DecisionAttentionProvider,\n  failedDecisionAttentionSpec,\n  MentionAttentionProvider,\n  SupervisorFindingAttentionProvider,\n} from './attention-providers.js';\nimport { FACTORY_ROUTE_CONTRACTS } from './contracts.js';\n\nexport { factoryDecisionType } from './attention-providers.js';\n\ninterface AttentionRouteDependencies {\n  workItems: WorkItemsStorage;\n  boards: BoardRegistry;\n  comments: WorkItemCommentsStorage;\n  liveSessions: Pick<LiveSessions, 'parked' | 'parkedIn'>;\n  resolveProject(context: unknown): Promise<AttentionScope | { response: Response }>;\n}\n\ntype AttentionCursorMap = Map<FactoryAttentionKind, AttentionStreamPosition | undefined>;\n\nfunction encodeAttentionCursor(cursors: AttentionCursorMap): string {\n  const wire: Record<string, [string, string] | null> = {};\n  for (const [kind, position] of cursors) {\n    wire[kind] = position ? [position.occurredAt.toISOString(), position.id] : null;\n  }\n  return Buffer.from(JSON.stringify(wire), 'utf8').toString('base64url');\n}\n\ninterface MergedAttentionPage {\n  items: Array<Record<string, unknown>>;\n  hasMore: boolean;\n  nextCursor?: string;\n}\n\n/**\n * Take the newest `limit` entries across provider pages. Each kind's next\n * cursor is the resume position of its last consumed entry; a kind consumed to\n * the end inherits the provider's own continuation.\n */\nfunction mergeAttentionPages(\n  pages: Array<{\n    kind: FactoryAttentionKind;\n    incoming: AttentionStreamPosition | undefined;\n    result: AttentionPageResult;\n  }>,\n  limit: number,\n): MergedAttentionPage {\n  const consumed = new Map(pages.map(page => [page.kind, 0]));\n  const items: Array<Record<string, unknown>> = [];\n  while (items.length < limit) {\n    let best: { kind: FactoryAttentionKind; at: number } | undefined;\n    for (const page of pages) {\n      const next = page.result.entries[consumed.get(page.kind) ?? 0];\n      if (!next) continue;\n      const at = next.occurredAt.getTime();\n      if (!best || at > best.at) best = { kind: page.kind, at };\n    }\n    if (!best) break;\n    const index = consumed.get(best.kind) ?? 0;\n    const entry = pages.find(page => page.kind === best.kind)?.result.entries[index];\n    if (!entry) break;\n    items.push(entry.item);\n    consumed.set(best.kind, index + 1);\n  }\n\n  const nextCursors: AttentionCursorMap = new Map();\n  let hasMore = false;\n  for (const page of pages) {\n    const used = consumed.get(page.kind) ?? 0;\n    const entries = page.result.entries;\n    if (used < entries.length) {\n      hasMore = true;\n      const lastConsumed = used > 0 ? entries[used - 1] : undefined;\n      nextCursors.set(page.kind, lastConsumed ? lastConsumed.resumeCursor : page.incoming);\n      continue;\n    }\n    if (page.result.hasMore) {\n      hasMore = true;\n      nextCursors.set(page.kind, page.result.continuation ?? entries.at(-1)?.resumeCursor ?? page.incoming);\n    }\n  }\n  return {\n    items,\n    hasMore,\n    ...(hasMore && nextCursors.size > 0 ? { nextCursor: encodeAttentionCursor(nextCursors) } : {}),\n  };\n}\n\nfunction receiptRoute(\n  dependencies: AttentionRouteDependencies,\n  verb: 'read' | 'archive' | 'restore',\n  action: FactoryAttentionReceiptAction,\n): ApiRoute {\n  const contract =\n    verb === 'read'\n      ? FACTORY_ROUTE_CONTRACTS.attentionRead\n      : verb === 'archive'\n        ? FACTORY_ROUTE_CONTRACTS.attentionArchive\n        : FACTORY_ROUTE_CONTRACTS.attentionRestore;\n  return registerApiRoute(contract.path, {\n    method: contract.method,\n    requiresAuth: false,\n    handler: async context => {\n      const resolved = await dependencies.resolveProject(context);\n      if ('response' in resolved) return resolved.response;\n      const parsedPath = contract.pathSchema.safeParse({\n        id: resolved.factoryProjectId,\n        kind: context.req.param('kind'),\n        sourceId: context.req.param('sourceId'),\n        occurrence: context.req.param('occurrence'),\n      });\n      if (!parsedPath.success) return context.json({ error: 'invalid_attention_item' }, 422);\n      const { kind, sourceId, occurrence } = parsedPath.data;\n      const stillParked =\n        kind !== 'agent-waiting' || dependencies.liveSessions.parked(sourceId)?.suspendedAt === occurrence;\n      if (!stillParked) return context.json({ error: 'attention_item_not_current' }, 409);\n      await dependencies.workItems.ensureReady();\n      const receipt = await dependencies.workItems.setAttentionReceipt({\n        orgId: resolved.orgId,\n        factoryProjectId: resolved.factoryProjectId,\n        userId: resolved.userId,\n        identity: { kind, sourceId, occurrence },\n        action,\n        now: new Date(),\n      });\n      if (!receipt) return context.json({ error: 'attention_item_not_current' }, 409);\n      return context.json({\n        receipt: {\n          key: factoryAttentionKey(resolved.factoryProjectId, receipt),\n          state: receipt.state,\n          readAt: receipt.readAt.toISOString(),\n          archivedAt: receipt.archivedAt?.toISOString() ?? null,\n        },\n      });\n    },\n  });\n}\n\nexport function buildAttentionRoutes(dependencies: AttentionRouteDependencies): ApiRoute[] {\n  const { workItems, boards, comments, liveSessions } = dependencies;\n  const providers: AttentionProvider[] = [\n    new DecisionAttentionProvider({ workItems, boards }, failedDecisionAttentionSpec),\n    new DecisionAttentionProvider({ workItems, boards }, proposedDecisionAttentionSpec),\n    new SupervisorFindingAttentionProvider({ workItems }),\n    new MentionAttentionProvider({ workItems, comments }),\n    new ActivityAttentionProvider({ workItems, comments }),\n    new ParkedRunAttentionProvider({ workItems, liveSessions }),\n  ];\n\n  return [\n    registerApiRoute(FACTORY_ROUTE_CONTRACTS.attentionList.path, {\n      method: FACTORY_ROUTE_CONTRACTS.attentionList.method,\n      requiresAuth: false,\n      handler: async context => {\n        const resolved = await dependencies.resolveProject(context);\n        if ('response' in resolved) return resolved.response;\n        const query = FACTORY_ROUTE_CONTRACTS.attentionList.querySchema.safeParse({\n          view: context.req.query('view'),\n          kind: context.req.queries('kind'),\n          before: context.req.query('before'),\n          limit: context.req.query('limit'),\n          search: context.req.query('search'),\n        });\n        if (!query.success) {\n          const field = query.error.issues[0]?.path[0];\n          return context.json(\n            {\n              error:\n                field === 'kind'\n                  ? 'invalid_attention_kind'\n                  : field === 'before'\n                    ? 'invalid_cursor'\n                    : 'invalid_attention_view',\n            },\n            400,\n          );\n        }\n        const { view, before, search, limit } = query.data;\n        const kinds = query.data.kind ?? providers.map(provider => provider.kind);\n        await workItems.ensureReady();\n        await comments.ensureReady();\n\n        const active = providers.filter(\n          provider => kinds.includes(provider.kind) && (!before || before.has(provider.kind)),\n        );\n\n        const [summaries, pages] = await Promise.all([\n          Promise.all(\n            providers.map(async provider => ({\n              kind: provider.kind,\n              counts: await provider.counts(resolved),\n              latest: await provider.latest(resolved),\n            })),\n          ),\n          Promise.all(\n            active.map(async provider => ({\n              kind: provider.kind,\n              incoming: before?.get(provider.kind),\n              result: await provider.page(resolved, {\n                view,\n                ...(search ? { search } : {}),\n                before: before?.get(provider.kind),\n                limit,\n              }),\n            })),\n          ),\n        ]);\n\n        const merged = mergeAttentionPages(pages, limit);\n\n        return context.json({\n          items: merged.items,\n          kinds: Object.fromEntries(\n            summaries.map(summary => [\n              summary.kind,\n              {\n                ...summary.counts,\n                latest: summary.latest ? { ...summary.latest, at: summary.latest.at.toISOString() } : null,\n              },\n            ]),\n          ),\n          hasMore: merged.hasMore,\n          ...(merged.nextCursor ? { nextCursor: merged.nextCursor } : {}),\n        });\n      },\n    }),\n    registerApiRoute(FACTORY_ROUTE_CONTRACTS.attentionReadAll.path, {\n      method: FACTORY_ROUTE_CONTRACTS.attentionReadAll.method,\n      requiresAuth: false,\n      handler: async context => {\n        const resolved = await dependencies.resolveProject(context);\n        if ('response' in resolved) return resolved.response;\n        const query = FACTORY_ROUTE_CONTRACTS.attentionReadAll.querySchema.safeParse({\n          before: context.req.query('before'),\n        });\n        if (!query.success) return context.json({ error: 'invalid_cursor' }, 400);\n        const { before } = query.data;\n        await workItems.ensureReady();\n        await comments.ensureReady();\n\n        const now = new Date();\n        const active = providers.filter(provider => !before || before.has(provider.kind));\n        const nextCursors: AttentionCursorMap = new Map();\n        let hasMore = false;\n        for (const provider of active) {\n          const result = await provider.markAllRead(resolved, { before: before?.get(provider.kind), now });\n          if (result.hasMore) {\n            hasMore = true;\n            if (result.continuation) nextCursors.set(provider.kind, result.continuation);\n          }\n        }\n        return context.json({\n          ok: true,\n          hasMore,\n          ...(hasMore && nextCursors.size > 0 ? { nextCursor: encodeAttentionCursor(nextCursors) } : {}),\n        });\n      },\n    }),\n    receiptRoute(dependencies, 'read', 'read'),\n    receiptRoute(dependencies, 'archive', 'archive'),\n    receiptRoute(dependencies, 'restore', 'restore'),\n  ];\n}\n"],"mappings":";;;;;;;;AA+CA,SAAS,sBAAsB,SAAqC;CAClE,MAAM,OAAgD,CAAC;CACvD,KAAK,MAAM,CAAC,MAAM,aAAa,SAC7B,KAAK,QAAQ,WAAW,CAAC,SAAS,WAAW,YAAY,GAAG,SAAS,EAAE,IAAI;CAE7E,OAAO,OAAO,KAAK,KAAK,UAAU,IAAI,GAAG,MAAM,CAAC,CAAC,SAAS,WAAW;AACvE;;;;;;AAaA,SAAS,oBACP,OAKA,OACqB;CACrB,MAAM,WAAW,IAAI,IAAI,MAAM,KAAI,SAAQ,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC;CAC1D,MAAM,QAAwC,CAAC;CAC/C,OAAO,MAAM,SAAS,OAAO;EAC3B,IAAI;EACJ,KAAK,MAAM,QAAQ,OAAO;GACxB,MAAM,OAAO,KAAK,OAAO,QAAQ,SAAS,IAAI,KAAK,IAAI,KAAK;GAC5D,IAAI,CAAC,MAAM;GACX,MAAM,KAAK,KAAK,WAAW,QAAQ;GACnC,IAAI,CAAC,QAAQ,KAAK,KAAK,IAAI,OAAO;IAAE,MAAM,KAAK;IAAM;GAAG;EAC1D;EACA,IAAI,CAAC,MAAM;EACX,MAAM,QAAQ,SAAS,IAAI,KAAK,IAAI,KAAK;EACzC,MAAM,QAAQ,MAAM,MAAK,SAAQ,KAAK,SAAS,KAAK,IAAI,CAAC,EAAE,OAAO,QAAQ;EAC1E,IAAI,CAAC,OAAO;EACZ,MAAM,KAAK,MAAM,IAAI;EACrB,SAAS,IAAI,KAAK,MAAM,QAAQ,CAAC;CACnC;CAEA,MAAM,8BAAkC,IAAI,IAAI;CAChD,IAAI,UAAU;CACd,KAAK,MAAM,QAAQ,OAAO;EACxB,MAAM,OAAO,SAAS,IAAI,KAAK,IAAI,KAAK;EACxC,MAAM,UAAU,KAAK,OAAO;EAC5B,IAAI,OAAO,QAAQ,QAAQ;GACzB,UAAU;GACV,MAAM,eAAe,OAAO,IAAI,QAAQ,OAAO,KAAK,KAAA;GACpD,YAAY,IAAI,KAAK,MAAM,eAAe,aAAa,eAAe,KAAK,QAAQ;GACnF;EACF;EACA,IAAI,KAAK,OAAO,SAAS;GACvB,UAAU;GACV,YAAY,IAAI,KAAK,MAAM,KAAK,OAAO,gBAAgB,QAAQ,GAAG,EAAE,CAAC,EAAE,gBAAgB,KAAK,QAAQ;EACtG;CACF;CACA,OAAO;EACL;EACA;EACA,GAAI,WAAW,YAAY,OAAO,IAAI,EAAE,YAAY,sBAAsB,WAAW,EAAE,IAAI,CAAC;CAC9F;AACF;AAEA,SAAS,aACP,cACA,MACA,QACU;CACV,MAAM,WACJ,SAAS,SACL,wBAAwB,gBACxB,SAAS,YACP,wBAAwB,mBACxB,wBAAwB;CAChC,OAAO,iBAAiB,SAAS,MAAM;EACrC,QAAQ,SAAS;EACjB,cAAc;EACd,SAAS,OAAM,YAAW;GACxB,MAAM,WAAW,MAAM,aAAa,eAAe,OAAO;GAC1D,IAAI,cAAc,UAAU,OAAO,SAAS;GAC5C,MAAM,aAAa,SAAS,WAAW,UAAU;IAC/C,IAAI,SAAS;IACb,MAAM,QAAQ,IAAI,MAAM,MAAM;IAC9B,UAAU,QAAQ,IAAI,MAAM,UAAU;IACtC,YAAY,QAAQ,IAAI,MAAM,YAAY;GAC5C,CAAC;GACD,IAAI,CAAC,WAAW,SAAS,OAAO,QAAQ,KAAK,EAAE,OAAO,yBAAyB,GAAG,GAAG;GACrF,MAAM,EAAE,MAAM,UAAU,eAAe,WAAW;GAGlD,IAAI,EADF,SAAS,mBAAmB,aAAa,aAAa,OAAO,QAAQ,CAAC,EAAE,gBAAgB,aACxE,OAAO,QAAQ,KAAK,EAAE,OAAO,6BAA6B,GAAG,GAAG;GAClF,MAAM,aAAa,UAAU,YAAY;GACzC,MAAM,UAAU,MAAM,aAAa,UAAU,oBAAoB;IAC/D,OAAO,SAAS;IAChB,kBAAkB,SAAS;IAC3B,QAAQ,SAAS;IACjB,UAAU;KAAE;KAAM;KAAU;IAAW;IACvC;IACA,qBAAK,IAAI,KAAK;GAChB,CAAC;GACD,IAAI,CAAC,SAAS,OAAO,QAAQ,KAAK,EAAE,OAAO,6BAA6B,GAAG,GAAG;GAC9E,OAAO,QAAQ,KAAK,EAClB,SAAS;IACP,KAAK,oBAAoB,SAAS,kBAAkB,OAAO;IAC3D,OAAO,QAAQ;IACf,QAAQ,QAAQ,OAAO,YAAY;IACnC,YAAY,QAAQ,YAAY,YAAY,KAAK;GACnD,EACF,CAAC;EACH;CACF,CAAC;AACH;AAEA,SAAgB,qBAAqB,cAAsD;CACzF,MAAM,EAAE,WAAW,QAAQ,UAAU,iBAAiB;CACtD,MAAM,YAAiC;EACrC,IAAI,0BAA0B;GAAE;GAAW;EAAO,GAAG,2BAA2B;EAChF,IAAI,0BAA0B;GAAE;GAAW;EAAO,GAAG,6BAA6B;EAClF,IAAI,mCAAmC,EAAE,UAAU,CAAC;EACpD,IAAI,yBAAyB;GAAE;GAAW;EAAS,CAAC;EACpD,IAAI,0BAA0B;GAAE;GAAW;EAAS,CAAC;EACrD,IAAI,2BAA2B;GAAE;GAAW;EAAa,CAAC;CAC5D;CAEA,OAAO;EACL,iBAAiB,wBAAwB,cAAc,MAAM;GAC3D,QAAQ,wBAAwB,cAAc;GAC9C,cAAc;GACd,SAAS,OAAM,YAAW;IACxB,MAAM,WAAW,MAAM,aAAa,eAAe,OAAO;IAC1D,IAAI,cAAc,UAAU,OAAO,SAAS;IAC5C,MAAM,QAAQ,wBAAwB,cAAc,YAAY,UAAU;KACxE,MAAM,QAAQ,IAAI,MAAM,MAAM;KAC9B,MAAM,QAAQ,IAAI,QAAQ,MAAM;KAChC,QAAQ,QAAQ,IAAI,MAAM,QAAQ;KAClC,OAAO,QAAQ,IAAI,MAAM,OAAO;KAChC,QAAQ,QAAQ,IAAI,MAAM,QAAQ;IACpC,CAAC;IACD,IAAI,CAAC,MAAM,SAAS;KAClB,MAAM,QAAQ,MAAM,MAAM,OAAO,EAAE,EAAE,KAAK;KAC1C,OAAO,QAAQ,KACb,EACE,OACE,UAAU,SACN,2BACA,UAAU,WACR,mBACA,yBACV,GACA,GACF;IACF;IACA,MAAM,EAAE,MAAM,QAAQ,QAAQ,UAAU,MAAM;IAC9C,MAAM,QAAQ,MAAM,KAAK,QAAQ,UAAU,KAAI,aAAY,SAAS,IAAI;IACxE,MAAM,UAAU,YAAY;IAC5B,MAAM,SAAS,YAAY;IAE3B,MAAM,SAAS,UAAU,QACvB,aAAY,MAAM,SAAS,SAAS,IAAI,MAAM,CAAC,UAAU,OAAO,IAAI,SAAS,IAAI,EACnF;IAEA,MAAM,CAAC,WAAW,SAAS,MAAM,QAAQ,IAAI,CAC3C,QAAQ,IACN,UAAU,IAAI,OAAM,cAAa;KAC/B,MAAM,SAAS;KACf,QAAQ,MAAM,SAAS,OAAO,QAAQ;KACtC,QAAQ,MAAM,SAAS,OAAO,QAAQ;IACxC,EAAE,CACJ,GACA,QAAQ,IACN,OAAO,IAAI,OAAM,cAAa;KAC5B,MAAM,SAAS;KACf,UAAU,QAAQ,IAAI,SAAS,IAAI;KACnC,QAAQ,MAAM,SAAS,KAAK,UAAU;MACpC;MACA,GAAI,SAAS,EAAE,OAAO,IAAI,CAAC;MAC3B,QAAQ,QAAQ,IAAI,SAAS,IAAI;MACjC;KACF,CAAC;IACH,EAAE,CACJ,CACF,CAAC;IAED,MAAM,SAAS,oBAAoB,OAAO,KAAK;IAE/C,OAAO,QAAQ,KAAK;KAClB,OAAO,OAAO;KACd,OAAO,OAAO,YACZ,UAAU,KAAI,YAAW,CACvB,QAAQ,MACR;MACE,GAAG,QAAQ;MACX,QAAQ,QAAQ,SAAS;OAAE,GAAG,QAAQ;OAAQ,IAAI,QAAQ,OAAO,GAAG,YAAY;MAAE,IAAI;KACxF,CACF,CAAC,CACH;KACA,SAAS,OAAO;KAChB,GAAI,OAAO,aAAa,EAAE,YAAY,OAAO,WAAW,IAAI,CAAC;IAC/D,CAAC;GACH;EACF,CAAC;EACD,iBAAiB,wBAAwB,iBAAiB,MAAM;GAC9D,QAAQ,wBAAwB,iBAAiB;GACjD,cAAc;GACd,SAAS,OAAM,YAAW;IACxB,MAAM,WAAW,MAAM,aAAa,eAAe,OAAO;IAC1D,IAAI,cAAc,UAAU,OAAO,SAAS;IAC5C,MAAM,QAAQ,wBAAwB,iBAAiB,YAAY,UAAU,EAC3E,QAAQ,QAAQ,IAAI,MAAM,QAAQ,EACpC,CAAC;IACD,IAAI,CAAC,MAAM,SAAS,OAAO,QAAQ,KAAK,EAAE,OAAO,iBAAiB,GAAG,GAAG;IACxE,MAAM,EAAE,WAAW,MAAM;IACzB,MAAM,UAAU,YAAY;IAC5B,MAAM,SAAS,YAAY;IAE3B,MAAM,sBAAM,IAAI,KAAK;IACrB,MAAM,SAAS,UAAU,QAAO,aAAY,CAAC,UAAU,OAAO,IAAI,SAAS,IAAI,CAAC;IAChF,MAAM,8BAAkC,IAAI,IAAI;IAChD,IAAI,UAAU;IACd,KAAK,MAAM,YAAY,QAAQ;KAC7B,MAAM,SAAS,MAAM,SAAS,YAAY,UAAU;MAAE,QAAQ,QAAQ,IAAI,SAAS,IAAI;MAAG;KAAI,CAAC;KAC/F,IAAI,OAAO,SAAS;MAClB,UAAU;MACV,IAAI,OAAO,cAAc,YAAY,IAAI,SAAS,MAAM,OAAO,YAAY;KAC7E;IACF;IACA,OAAO,QAAQ,KAAK;KAClB,IAAI;KACJ;KACA,GAAI,WAAW,YAAY,OAAO,IAAI,EAAE,YAAY,sBAAsB,WAAW,EAAE,IAAI,CAAC;IAC9F,CAAC;GACH;EACF,CAAC;EACD,aAAa,cAAc,QAAQ,MAAM;EACzC,aAAa,cAAc,WAAW,SAAS;EAC/C,aAAa,cAAc,WAAW,SAAS;CACjD;AACF"}

package/dist/routes/oauth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"oauth.d.ts","sourceRoot":"","sources":["../../src/routes/oauth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAgBH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AAEjE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAIpD,OAAO,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAC;AAEjF,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,4CAA4C,CAAC;AAIxF,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AA6MpD,MAAM,WAAW,eAAgB,SAAQ,iBAAiB;IACxD,kEAAkE;IAClE,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,qEAAqE;IACrE,gBAAgB,CAAC,EAAE,uBAAuB,CAAC;IAC3C,wFAAwF;IACxF,cAAc,CAAC,EAAE,qBAAqB,CAAC;IACvC,kFAAkF;IAClF,oBAAoB,CAAC,EAAE,CAAC,MAAM,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC;CAC7E;AAED;;;;;;;GAOG;AACH,qBAAa,WAAY,SAAQ,KAAK,CAAC,eAAe,CAAC;IACrD,MAAM,IAAI,QAAQ,EAAE;CAiQrB"}
+{"version":3,"file":"oauth.d.ts","sourceRoot":"","sources":["../../src/routes/oauth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAcH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AAEjE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAIpD,OAAO,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAC;AAEjF,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,4CAA4C,CAAC;AAIxF,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AA6MpD,MAAM,WAAW,eAAgB,SAAQ,iBAAiB;IACxD,kEAAkE;IAClE,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,qEAAqE;IACrE,gBAAgB,CAAC,EAAE,uBAAuB,CAAC;IAC3C,wFAAwF;IACxF,cAAc,CAAC,EAAE,qBAAqB,CAAC;IACvC,kFAAkF;IAClF,oBAAoB,CAAC,EAAE,CAAC,MAAM,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC;CAC7E;AAED;;;;;;;GAOG;AACH,qBAAa,WAAY,SAAQ,KAAK,CAAC,eAAe,CAAC;IACrD,MAAM,IAAI,QAAQ,EAAE;CAqQrB"}

package/dist/routes/oauth.js

@@ -3,7 +3,6 @@ import { getAuthProviderId, resolveCredentialContext } from "./provider-credenti
 import { Route } from "./route.js";
 import { seedPersonalOmDefaults } from "./om-seed.js";
 import { registerApiRoute } from "@mastra/core/server";
-import { randomUUID } from "crypto";
 import { nextPollDelayMs } from "@mastra/code-sdk/auth/device-code";
 import { completeAnthropicLogin, startAnthropicLogin } from "@mastra/code-sdk/auth/providers/anthropic";
 import { copilotNextPollDelayMs, pollGitHubCopilotDeviceLogin, startGitHubCopilotDeviceLogin } from "@mastra/code-sdk/auth/providers/github-copilot";
@@ -257,7 +256,7 @@ var OAuthRoutes = class extends Route {
 					} catch (error) {
 						return c.json({ error: error instanceof Error ? error.message : String(error) }, 502);
 					}
-					const sessionId = randomUUID();
+					const sessionId = globalThis.crypto.randomUUID();
 					const tenant = sessionTenant(ctx);
 					await (await sessionStore(ctx)).createLoginSession({
 						sessionId,
@@ -368,7 +367,8 @@ var OAuthRoutes = class extends Route {
 					}, 403);
 					const now = Date.now();
 					const nextPollAt = session.nextPollAt?.getTime();
-					if (nextPollAt != null && now < nextPollAt) return c.json({
+					const parkedByClaim = nextPollAt != null && nextPollAt >= session.expiresAt.getTime();
+					if (nextPollAt != null && now < nextPollAt && !parkedByClaim) return c.json({
 						status: "pending",
 						nextPollMs: nextPollAt - now
 					});

package/dist/routes/oauth.js.map

@@ -1 +1 @@
-{"version":3,"file":"oauth.js","names":[],"sources":["../../src/routes/oauth.ts"],"sourcesContent":["/**\n * Web OAuth sign-in routes for model providers (Settings › Providers).\n *\n * Wraps the SDK's step-based OAuth primitives (start/complete for Anthropic's\n * paste-code PKCE flow, start/poll for the Codex/Copilot/xAI device flows) in\n * HTTP routes. Flow state lives in login sessions — the `model-credentials`\n * domain's `oauth_login_sessions` table in tenant mode (any replica can\n * complete/poll), an in-memory store in local mode — so a flow can span\n * requests. Completed credentials are **user-scoped by default**; org admins\n * can start a flow with `{ scope: 'org' }` to share the credential with the\n * whole org. Local mode writes to the file-backed `AuthStorage`.\n *\n * Tokens never leave the server; responses only carry flow metadata (URLs,\n * user codes, poll delays).\n */\n\nimport { randomUUID } from 'node:crypto';\n\nimport { nextPollDelayMs } from '@mastra/code-sdk/auth/device-code';\nimport { completeAnthropicLogin, startAnthropicLogin } from '@mastra/code-sdk/auth/providers/anthropic';\nimport {\n  copilotNextPollDelayMs,\n  pollGitHubCopilotDeviceLogin,\n  startGitHubCopilotDeviceLogin,\n} from '@mastra/code-sdk/auth/providers/github-copilot';\nimport type { CopilotDeviceLoginPending } from '@mastra/code-sdk/auth/providers/github-copilot';\nimport { pollCodexDeviceLogin, startCodexDeviceLogin } from '@mastra/code-sdk/auth/providers/openai-codex';\nimport type { CodexDeviceLoginPending } from '@mastra/code-sdk/auth/providers/openai-codex';\nimport { pollXAIDeviceLogin, startXAIDeviceLogin } from '@mastra/code-sdk/auth/providers/xai';\nimport type { XAIDeviceLoginPending } from '@mastra/code-sdk/auth/providers/xai';\nimport type { AuthStorage } from '@mastra/code-sdk/auth/storage';\nimport type { OAuthCredentials } from '@mastra/code-sdk/auth/types';\nimport type { ApiRoute } from '@mastra/core/server';\nimport { registerApiRoute } from '@mastra/core/server';\nimport type { Context } from 'hono';\n\nimport { ModelCredentialsStorage } from '../storage/domains/credentials/base.js';\nimport type { LoginCredentialScope, LoginSessionKind, LoginSessionRow } from '../storage/domains/credentials/base.js';\nimport type { MemorySettingsStorage } from '../storage/domains/memory-settings/base.js';\nimport { seedPersonalOmDefaults } from './om-seed.js';\nimport { getAuthProviderId, resolveCredentialContext } from './provider-credentials.js';\nimport type { CredentialContext } from './provider-credentials.js';\nimport { Route } from './route.js';\nimport type { RouteDependencies } from './route.js';\n\n/** Lifetime of a paste-code session (Anthropic gives no explicit expiry). */\nconst PASTE_CODE_TTL_MS = 10 * 60 * 1000;\n\ninterface OAuthFlowStart {\n  url: string;\n  userCode?: string;\n  instructions: string;\n  /** ms epoch after which the flow expires. */\n  expiresAt: number;\n  /** Delay before the first upstream poll (device-code flows only). */\n  nextPollMs?: number;\n  /** Serializable flow state persisted in the login session. */\n  pending: Record<string, unknown>;\n}\n\ntype OAuthFlowPoll =\n  | { status: 'complete'; credentials: OAuthCredentials }\n  | { status: 'pending'; nextPollMs: number; pending?: Record<string, unknown> }\n  | { status: 'failed'; error: string };\n\ninterface OAuthFlow {\n  kind: LoginSessionKind;\n  start(): Promise<OAuthFlowStart>;\n  /** Paste-code flows: exchange the pasted code for credentials. Throws on bad input. */\n  complete?(pending: Record<string, unknown>, code: string): Promise<OAuthCredentials>;\n  /** Device-code flows: perform exactly one upstream poll. */\n  poll?(pending: Record<string, unknown>): Promise<OAuthFlowPoll>;\n}\n\n/** Web OAuth flows keyed by *catalog* provider id (mirrors {@link WEB_OAUTH_FLOW_KINDS}). */\nconst OAUTH_FLOWS: Record<string, OAuthFlow> = {\n  anthropic: {\n    kind: 'paste-code',\n    start: async () => {\n      const { url, verifier } = await startAnthropicLogin();\n      return {\n        url,\n        instructions: 'Open the link, authorize, then paste the code shown on the final page.',\n        expiresAt: Date.now() + PASTE_CODE_TTL_MS,\n        pending: { verifier },\n      };\n    },\n    complete: (pending, code) => completeAnthropicLogin(code, String(pending.verifier ?? '')),\n  },\n  openai: {\n    kind: 'device-code',\n    start: async () => {\n      const p = await startCodexDeviceLogin();\n      return {\n        url: p.url,\n        userCode: p.userCode,\n        instructions: p.instructions,\n        expiresAt: p.deadlineAt,\n        nextPollMs: p.intervalMs,\n        pending: { ...p },\n      };\n    },\n    poll: async pending => {\n      const r = await pollCodexDeviceLogin(pending as unknown as CodexDeviceLoginPending);\n      if (r.status === 'complete') return { status: 'complete', credentials: r.credentials };\n      if (r.status === 'pending') return { status: 'pending', nextPollMs: r.nextPollMs };\n      return { status: 'failed', error: r.error };\n    },\n  },\n  'github-copilot': {\n    kind: 'device-code',\n    start: async () => {\n      const p = await startGitHubCopilotDeviceLogin();\n      return {\n        url: p.url,\n        userCode: p.userCode,\n        instructions: p.instructions,\n        expiresAt: p.deadlineAt,\n        nextPollMs: copilotNextPollDelayMs(p),\n        pending: { ...p },\n      };\n    },\n    poll: async pending => {\n      const p = pending as unknown as CopilotDeviceLoginPending;\n      // Web flows are always started against github.com (no Enterprise input).\n      // Never let deserialized session state redirect server-side polling to\n      // an arbitrary hostname.\n      if (p.domain !== 'github.com' || p.enterpriseDomain !== undefined) {\n        return { status: 'failed', error: 'Unsupported GitHub host' };\n      }\n      const r = await pollGitHubCopilotDeviceLogin(p);\n      if (r.status === 'complete') return { status: 'complete', credentials: r.credentials };\n      if (r.status === 'pending') return { status: 'pending', nextPollMs: r.nextPollMs, pending: { ...r.pending } };\n      return { status: 'failed', error: r.error };\n    },\n  },\n  xai: {\n    kind: 'device-code',\n    start: async () => {\n      const p = await startXAIDeviceLogin();\n      return {\n        url: p.url,\n        userCode: p.userCode,\n        instructions: p.instructions,\n        expiresAt: p.state.deadlineAt,\n        nextPollMs: nextPollDelayMs(p.state),\n        pending: { ...p },\n      };\n    },\n    poll: async pending => {\n      const r = await pollXAIDeviceLogin(pending as unknown as XAIDeviceLoginPending);\n      if (r.status === 'complete') return { status: 'complete', credentials: r.credentials };\n      if (r.status === 'pending') return { status: 'pending', nextPollMs: r.nextPollMs, pending: { ...r.pending } };\n      return { status: 'failed', error: r.error };\n    },\n  },\n};\n\nfunction loose(c: unknown): Context {\n  return c as Context;\n}\n\n/**\n * Local-mode login sessions. Flows in local mode are single-process, so a\n * process-local libsql `:memory:` database (which already handles TTL\n * cleanup) is sufficient.\n */\nlet localSessionsPromise: Promise<ModelCredentialsStorage> | undefined;\nfunction localSessions(): Promise<ModelCredentialsStorage> {\n  localSessionsPromise ??= (async () => {\n    const { LibSQLFactoryStorage } = await import('@mastra/libsql');\n    const storage = new LibSQLFactoryStorage({ id: 'local-oauth-sessions', url: ':memory:' });\n    const store = storage.registerDomain(new ModelCredentialsStorage());\n    await storage.init();\n    return store;\n  })();\n  return localSessionsPromise;\n}\nconst LOCAL_TENANT = { orgId: 'local', userId: 'local' } as const;\n\nasync function sessionStore(ctx: CredentialContext): Promise<ModelCredentialsStorage> {\n  return ctx.mode === 'tenant' ? ctx.storage : localSessions();\n}\n\nfunction sessionTenant(ctx: CredentialContext): { orgId: string; userId: string } {\n  return ctx.mode === 'tenant' ? { orgId: ctx.orgId, userId: ctx.userId } : LOCAL_TENANT;\n}\n\n/** Load a session and verify it belongs to the caller + provider (else undefined). */\nasync function loadOwnedSession({\n  ctx,\n  provider,\n  sessionId,\n}: {\n  ctx: CredentialContext;\n  provider: string;\n  sessionId: string;\n}): Promise<LoginSessionRow | undefined> {\n  const session = await (await sessionStore(ctx)).getLoginSession(sessionId);\n  if (!session) return undefined;\n  const tenant = sessionTenant(ctx);\n  if (session.orgId !== tenant.orgId || session.userId !== tenant.userId) return undefined;\n  if (session.provider !== provider) return undefined;\n  return session;\n}\n\n/** Persist completed OAuth credentials — user-scoped unless the flow was started org-wide. */\nasync function persistOAuthCredential({\n  ctx,\n  provider,\n  scope,\n  credentials,\n  authStorage,\n  memorySettings,\n  onCredentialsChanged,\n}: {\n  ctx: CredentialContext;\n  provider: string;\n  scope: LoginCredentialScope | undefined;\n  credentials: OAuthCredentials;\n  authStorage: AuthStorage | undefined;\n  memorySettings: MemorySettingsStorage | undefined;\n  onCredentialsChanged: (tenant: { orgId: string; userId?: string }) => void;\n}): Promise<void> {\n  const authProviderId = getAuthProviderId(provider);\n  if (ctx.mode === 'tenant') {\n    const tenant = { orgId: ctx.orgId, ...(scope === 'org' ? {} : { userId: ctx.userId }) };\n    await ctx.storage.setCredential(tenant, authProviderId, {\n      type: 'oauth',\n      ...credentials,\n    });\n    onCredentialsChanged(tenant);\n    await seedPersonalOmDefaults({ memorySettings, tenant, provider });\n    return;\n  }\n  if (!authStorage) throw new Error('Credential storage is not available');\n  await authStorage.addAccount(authProviderId, credentials);\n}\n\nasync function readJsonBody(c: Context): Promise<Record<string, unknown>> {\n  try {\n    const body = (await c.req.json()) as unknown;\n    return body && typeof body === 'object' ? (body as Record<string, unknown>) : {};\n  } catch {\n    return {};\n  }\n}\n\nexport interface OAuthRoutesDeps extends RouteDependencies {\n  /** File-backed credential store; used in local (no-auth) mode. */\n  authStorage?: AuthStorage;\n  /** Tenant credential domain handle; absent in local (no-DB) mode. */\n  modelCredentials?: ModelCredentialsStorage;\n  /** Personal OM settings; seeded from the login provider after a user-scoped sign-in. */\n  memorySettings?: MemorySettingsStorage;\n  /** Notifies the host after tenant credentials change so caches can be dropped. */\n  onCredentialsChanged?: (tenant: { orgId: string; userId?: string }) => void;\n}\n\n/**\n * Provider OAuth sign-in routes as Mastra `apiRoutes`:\n *   - `POST   /web/config/providers/:provider/oauth/start`              — begin a sign-in flow\n *   - `POST   /web/config/providers/:provider/oauth/complete`           — paste-code exchange\n *   - `POST   /web/config/providers/:provider/oauth/poll`               — one device-code poll\n *   - `DELETE /web/config/providers/:provider/oauth/session/:sessionId` — cancel a flow\n *   - `DELETE /web/config/providers/:provider/oauth`                    — sign out (caller only)\n */\nexport class OAuthRoutes extends Route<OAuthRoutesDeps> {\n  routes(): ApiRoute[] {\n    const { auth, authStorage, modelCredentials, memorySettings } = this.deps;\n    const onCredentialsChanged = this.deps.onCredentialsChanged ?? (() => {});\n\n    return [\n      registerApiRoute('/web/config/providers/:provider/oauth/start', {\n        method: 'POST',\n        requiresAuth: false,\n        handler: async c => {\n          const ctx = await resolveCredentialContext({ c: loose(c), auth, credentials: modelCredentials });\n          if ('response' in ctx) return ctx.response;\n\n          const provider = c.req.param('provider');\n          const flow = OAUTH_FLOWS[provider];\n          if (!flow) {\n            return c.json({ error: 'oauth_not_supported', message: `Provider does not support web sign-in` }, 404);\n          }\n          // Body may carry `{ mode }` for future multi-mode providers; each web\n          // flow currently has exactly one mode, so an unknown mode is rejected.\n          const body = await readJsonBody(loose(c));\n          if (typeof body.mode === 'string' && body.mode !== flow.kind) {\n            return c.json({ error: 'invalid_mode', message: `Unsupported mode for ${provider}: ${body.mode}` }, 400);\n          }\n\n          // Optional `{ scope: 'org' }` shares the completed credential with\n          // the whole org (admin-only, tenant mode). Anything else is personal.\n          const scope: LoginCredentialScope = body.scope === 'org' ? 'org' : 'user';\n          if (scope === 'org' && ctx.mode === 'tenant' && !(await auth.isOrganizationAdmin(loose(c), ctx.orgId))) {\n            return c.json({ error: 'forbidden', message: 'Only org admins can sign in for the whole org' }, 403);\n          }\n\n          let started: OAuthFlowStart;\n          try {\n            started = await flow.start();\n          } catch (error) {\n            return c.json({ error: error instanceof Error ? error.message : String(error) }, 502);\n          }\n\n          const sessionId = randomUUID();\n          const tenant = sessionTenant(ctx);\n          await (\n            await sessionStore(ctx)\n          ).createLoginSession({\n            sessionId,\n            orgId: tenant.orgId,\n            userId: tenant.userId,\n            provider,\n            kind: flow.kind,\n            ...(scope === 'org' && ctx.mode === 'tenant' ? { credentialScope: scope } : {}),\n            pending: started.pending,\n            expiresAt: new Date(started.expiresAt),\n            nextPollAt: started.nextPollMs != null ? new Date(Date.now() + started.nextPollMs) : null,\n          });\n\n          return c.json({\n            sessionId,\n            kind: flow.kind,\n            url: started.url,\n            ...(started.userCode ? { userCode: started.userCode } : {}),\n            instructions: started.instructions,\n            expiresAt: started.expiresAt,\n            ...(started.nextPollMs != null ? { nextPollMs: started.nextPollMs } : {}),\n          });\n        },\n      }),\n\n      registerApiRoute('/web/config/providers/:provider/oauth/complete', {\n        method: 'POST',\n        requiresAuth: false,\n        handler: async c => {\n          const ctx = await resolveCredentialContext({ c: loose(c), auth, credentials: modelCredentials });\n          if ('response' in ctx) return ctx.response;\n\n          const provider = c.req.param('provider');\n          const flow = OAUTH_FLOWS[provider];\n          if (!flow?.complete) return c.json({ error: 'oauth_not_supported' }, 404);\n\n          const body = await readJsonBody(loose(c));\n          const sessionId = typeof body.sessionId === 'string' ? body.sessionId : '';\n          const code = typeof body.code === 'string' ? body.code.trim() : '';\n          if (!sessionId || !code) return c.json({ error: 'Missing required fields: sessionId, code' }, 400);\n\n          const session = await loadOwnedSession({ ctx, provider, sessionId });\n          if (!session) return c.json({ error: 'session_not_found' }, 404);\n          if (session.kind !== 'paste-code') return c.json({ error: 'wrong_session_kind' }, 400);\n          // Org-scoped flows recheck admin access at completion time — the\n          // caller may have lost admin since the flow was started.\n          if (\n            session.credentialScope === 'org' &&\n            ctx.mode === 'tenant' &&\n            !(await auth.isOrganizationAdmin(loose(c), ctx.orgId))\n          ) {\n            return c.json({ error: 'forbidden', message: 'Only org admins can sign in for the whole org' }, 403);\n          }\n\n          const claimed = await (\n            await sessionStore(ctx)\n          ).claimLoginSession(sessionId, {\n            orgId: session.orgId,\n            userId: session.userId,\n            provider,\n            kind: 'paste-code',\n          });\n          if (!claimed) return c.json({ error: 'oauth_in_progress' }, 409);\n\n          let credentials: OAuthCredentials;\n          try {\n            credentials = await flow.complete(claimed.pending, code);\n          } catch (error) {\n            await (await sessionStore(ctx)).touchLoginSession(sessionId, { nextPollAt: null });\n            return c.json({ error: error instanceof Error ? error.message : String(error) }, 400);\n          }\n\n          await persistOAuthCredential({\n            ctx,\n            provider,\n            scope: session.credentialScope,\n            credentials,\n            authStorage,\n            memorySettings,\n            onCredentialsChanged,\n          });\n          await (await sessionStore(ctx)).deleteLoginSession(sessionId);\n          return c.json({ status: 'complete', ok: true });\n        },\n      }),\n\n      registerApiRoute('/web/config/providers/:provider/oauth/poll', {\n        method: 'POST',\n        requiresAuth: false,\n        handler: async c => {\n          const ctx = await resolveCredentialContext({ c: loose(c), auth, credentials: modelCredentials });\n          if ('response' in ctx) return ctx.response;\n\n          const provider = c.req.param('provider');\n          const flow = OAUTH_FLOWS[provider];\n          if (!flow?.poll) return c.json({ error: 'oauth_not_supported' }, 404);\n\n          const body = await readJsonBody(loose(c));\n          const sessionId = typeof body.sessionId === 'string' ? body.sessionId : '';\n          if (!sessionId) return c.json({ error: 'Missing required field: sessionId' }, 400);\n\n          const session = await loadOwnedSession({ ctx, provider, sessionId });\n          if (!session) return c.json({ error: 'session_not_found' }, 404);\n          if (session.kind !== 'device-code') return c.json({ error: 'wrong_session_kind' }, 400);\n          // Org-scoped flows recheck admin access before the credential write —\n          // the caller may have lost admin since the flow was started.\n          if (\n            session.credentialScope === 'org' &&\n            ctx.mode === 'tenant' &&\n            !(await auth.isOrganizationAdmin(loose(c), ctx.orgId))\n          ) {\n            return c.json({ error: 'forbidden', message: 'Only org admins can sign in for the whole org' }, 403);\n          }\n\n          // Server-side rate limit: at most one upstream poll per interval,\n          // regardless of how eagerly the client calls this route.\n          const now = Date.now();\n          const nextPollAt = session.nextPollAt?.getTime();\n          if (nextPollAt != null && now < nextPollAt) {\n            return c.json({ status: 'pending', nextPollMs: nextPollAt - now });\n          }\n\n          const claimed = await (\n            await sessionStore(ctx)\n          ).claimLoginSession(sessionId, {\n            orgId: session.orgId,\n            userId: session.userId,\n            provider,\n            kind: 'device-code',\n          });\n          if (!claimed) return c.json({ status: 'pending', nextPollMs: 250 });\n\n          let result: OAuthFlowPoll;\n          try {\n            result = await flow.poll(claimed.pending);\n          } catch (error) {\n            await (await sessionStore(ctx)).touchLoginSession(sessionId, { nextPollAt: null });\n            throw error;\n          }\n\n          if (result.status === 'complete') {\n            await persistOAuthCredential({\n              ctx,\n              provider,\n              scope: session.credentialScope,\n              credentials: result.credentials,\n              authStorage,\n              memorySettings,\n              onCredentialsChanged,\n            });\n            await (await sessionStore(ctx)).deleteLoginSession(sessionId);\n            return c.json({ status: 'complete', ok: true });\n          }\n\n          if (result.status === 'failed') {\n            await (await sessionStore(ctx)).deleteLoginSession(sessionId);\n            return c.json({ status: 'failed', error: result.error });\n          }\n\n          await (\n            await sessionStore(ctx)\n          ).touchLoginSession(sessionId, {\n            ...(result.pending ? { pending: result.pending } : {}),\n            nextPollAt: new Date(now + result.nextPollMs),\n          });\n          return c.json({ status: 'pending', nextPollMs: result.nextPollMs });\n        },\n      }),\n\n      registerApiRoute('/web/config/providers/:provider/oauth/session/:sessionId', {\n        method: 'DELETE',\n        requiresAuth: false,\n        handler: async c => {\n          const ctx = await resolveCredentialContext({ c: loose(c), auth, credentials: modelCredentials });\n          if ('response' in ctx) return ctx.response;\n\n          const provider = c.req.param('provider');\n          const sessionId = c.req.param('sessionId');\n          const session = await loadOwnedSession({ ctx, provider, sessionId });\n          if (session) await (await sessionStore(ctx)).deleteLoginSession(sessionId);\n          return c.json({ ok: true });\n        },\n      }),\n\n      registerApiRoute('/web/config/providers/:provider/oauth', {\n        method: 'DELETE',\n        requiresAuth: false,\n        handler: async c => {\n          const ctx = await resolveCredentialContext({ c: loose(c), auth, credentials: modelCredentials });\n          if ('response' in ctx) return ctx.response;\n\n          const provider = c.req.param('provider');\n          const authProviderId = getAuthProviderId(provider);\n          // `?scope=org` removes the shared org credential (admin-only);\n          // default removes the caller's personal credential only.\n          const scope = c.req.query('scope') === 'org' ? 'org' : 'user';\n          try {\n            if (ctx.mode === 'tenant') {\n              if (scope === 'org' && !(await auth.isOrganizationAdmin(loose(c), ctx.orgId))) {\n                return c.json({ error: 'forbidden', message: 'Only org admins can remove an org-wide sign-in' }, 403);\n              }\n              const tenant = { orgId: ctx.orgId, ...(scope === 'org' ? {} : { userId: ctx.userId }) };\n              await ctx.storage.removeCredential(tenant, authProviderId);\n              onCredentialsChanged(tenant);\n            } else {\n              if (!authStorage) return c.json({ error: 'Credential storage is not available' }, 503);\n              authStorage.logout(authProviderId);\n            }\n            return c.json({ ok: true });\n          } catch (error) {\n            return c.json({ error: error instanceof Error ? error.message : String(error) }, 500);\n          }\n        },\n      }),\n    ];\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;AA8CA,MAAM,oBAAoB,MAAU;;AA6BpC,MAAM,cAAyC;CAC7C,WAAW;EACT,MAAM;EACN,OAAO,YAAY;GACjB,MAAM,EAAE,KAAK,aAAa,MAAM,oBAAoB;GACpD,OAAO;IACL;IACA,cAAc;IACd,WAAW,KAAK,IAAI,IAAI;IACxB,SAAS,EAAE,SAAS;GACtB;EACF;EACA,WAAW,SAAS,SAAS,uBAAuB,MAAM,OAAO,QAAQ,YAAY,EAAE,CAAC;CAC1F;CACA,QAAQ;EACN,MAAM;EACN,OAAO,YAAY;GACjB,MAAM,IAAI,MAAM,sBAAsB;GACtC,OAAO;IACL,KAAK,EAAE;IACP,UAAU,EAAE;IACZ,cAAc,EAAE;IAChB,WAAW,EAAE;IACb,YAAY,EAAE;IACd,SAAS,EAAE,GAAG,EAAE;GAClB;EACF;EACA,MAAM,OAAM,YAAW;GACrB,MAAM,IAAI,MAAM,qBAAqB,OAA6C;GAClF,IAAI,EAAE,WAAW,YAAY,OAAO;IAAE,QAAQ;IAAY,aAAa,EAAE;GAAY;GACrF,IAAI,EAAE,WAAW,WAAW,OAAO;IAAE,QAAQ;IAAW,YAAY,EAAE;GAAW;GACjF,OAAO;IAAE,QAAQ;IAAU,OAAO,EAAE;GAAM;EAC5C;CACF;CACA,kBAAkB;EAChB,MAAM;EACN,OAAO,YAAY;GACjB,MAAM,IAAI,MAAM,8BAA8B;GAC9C,OAAO;IACL,KAAK,EAAE;IACP,UAAU,EAAE;IACZ,cAAc,EAAE;IAChB,WAAW,EAAE;IACb,YAAY,uBAAuB,CAAC;IACpC,SAAS,EAAE,GAAG,EAAE;GAClB;EACF;EACA,MAAM,OAAM,YAAW;GACrB,MAAM,IAAI;GAIV,IAAI,EAAE,WAAW,gBAAgB,EAAE,qBAAqB,KAAA,GACtD,OAAO;IAAE,QAAQ;IAAU,OAAO;GAA0B;GAE9D,MAAM,IAAI,MAAM,6BAA6B,CAAC;GAC9C,IAAI,EAAE,WAAW,YAAY,OAAO;IAAE,QAAQ;IAAY,aAAa,EAAE;GAAY;GACrF,IAAI,EAAE,WAAW,WAAW,OAAO;IAAE,QAAQ;IAAW,YAAY,EAAE;IAAY,SAAS,EAAE,GAAG,EAAE,QAAQ;GAAE;GAC5G,OAAO;IAAE,QAAQ;IAAU,OAAO,EAAE;GAAM;EAC5C;CACF;CACA,KAAK;EACH,MAAM;EACN,OAAO,YAAY;GACjB,MAAM,IAAI,MAAM,oBAAoB;GACpC,OAAO;IACL,KAAK,EAAE;IACP,UAAU,EAAE;IACZ,cAAc,EAAE;IAChB,WAAW,EAAE,MAAM;IACnB,YAAY,gBAAgB,EAAE,KAAK;IACnC,SAAS,EAAE,GAAG,EAAE;GAClB;EACF;EACA,MAAM,OAAM,YAAW;GACrB,MAAM,IAAI,MAAM,mBAAmB,OAA2C;GAC9E,IAAI,EAAE,WAAW,YAAY,OAAO;IAAE,QAAQ;IAAY,aAAa,EAAE;GAAY;GACrF,IAAI,EAAE,WAAW,WAAW,OAAO;IAAE,QAAQ;IAAW,YAAY,EAAE;IAAY,SAAS,EAAE,GAAG,EAAE,QAAQ;GAAE;GAC5G,OAAO;IAAE,QAAQ;IAAU,OAAO,EAAE;GAAM;EAC5C;CACF;AACF;AAEA,SAAS,MAAM,GAAqB;CAClC,OAAO;AACT;;;;;;AAOA,IAAI;AACJ,SAAS,gBAAkD;CACzD,0BAA0B,YAAY;EACpC,MAAM,EAAE,yBAAyB,MAAM,OAAO;EAC9C,MAAM,UAAU,IAAI,qBAAqB;GAAE,IAAI;GAAwB,KAAK;EAAW,CAAC;EACxF,MAAM,QAAQ,QAAQ,eAAe,IAAI,wBAAwB,CAAC;EAClE,MAAM,QAAQ,KAAK;EACnB,OAAO;CACT,EAAA,CAAG;CACH,OAAO;AACT;AACA,MAAM,eAAe;CAAE,OAAO;CAAS,QAAQ;AAAQ;AAEvD,eAAe,aAAa,KAA0D;CACpF,OAAO,IAAI,SAAS,WAAW,IAAI,UAAU,cAAc;AAC7D;AAEA,SAAS,cAAc,KAA2D;CAChF,OAAO,IAAI,SAAS,WAAW;EAAE,OAAO,IAAI;EAAO,QAAQ,IAAI;CAAO,IAAI;AAC5E;;AAGA,eAAe,iBAAiB,EAC9B,KACA,UACA,aAKuC;CACvC,MAAM,UAAU,OAAO,MAAM,aAAa,GAAG,EAAA,CAAG,gBAAgB,SAAS;CACzE,IAAI,CAAC,SAAS,OAAO,KAAA;CACrB,MAAM,SAAS,cAAc,GAAG;CAChC,IAAI,QAAQ,UAAU,OAAO,SAAS,QAAQ,WAAW,OAAO,QAAQ,OAAO,KAAA;CAC/E,IAAI,QAAQ,aAAa,UAAU,OAAO,KAAA;CAC1C,OAAO;AACT;;AAGA,eAAe,uBAAuB,EACpC,KACA,UACA,OACA,aACA,aACA,gBACA,wBASgB;CAChB,MAAM,iBAAiB,kBAAkB,QAAQ;CACjD,IAAI,IAAI,SAAS,UAAU;EACzB,MAAM,SAAS;GAAE,OAAO,IAAI;GAAO,GAAI,UAAU,QAAQ,CAAC,IAAI,EAAE,QAAQ,IAAI,OAAO;EAAG;EACtF,MAAM,IAAI,QAAQ,cAAc,QAAQ,gBAAgB;GACtD,MAAM;GACN,GAAG;EACL,CAAC;EACD,qBAAqB,MAAM;EAC3B,MAAM,uBAAuB;GAAE;GAAgB;GAAQ;EAAS,CAAC;EACjE;CACF;CACA,IAAI,CAAC,aAAa,MAAM,IAAI,MAAM,qCAAqC;CACvE,MAAM,YAAY,WAAW,gBAAgB,WAAW;AAC1D;AAEA,eAAe,aAAa,GAA8C;CACxE,IAAI;EACF,MAAM,OAAQ,MAAM,EAAE,IAAI,KAAK;EAC/B,OAAO,QAAQ,OAAO,SAAS,WAAY,OAAmC,CAAC;CACjF,QAAQ;EACN,OAAO,CAAC;CACV;AACF;;;;;;;;;AAqBA,IAAa,cAAb,cAAiC,MAAuB;CACtD,SAAqB;EACnB,MAAM,EAAE,MAAM,aAAa,kBAAkB,mBAAmB,KAAK;EACrE,MAAM,uBAAuB,KAAK,KAAK,+BAA+B,CAAC;EAEvE,OAAO;GACL,iBAAiB,+CAA+C;IAC9D,QAAQ;IACR,cAAc;IACd,SAAS,OAAM,MAAK;KAClB,MAAM,MAAM,MAAM,yBAAyB;MAAE,GAAG,MAAM,CAAC;MAAG;MAAM,aAAa;KAAiB,CAAC;KAC/F,IAAI,cAAc,KAAK,OAAO,IAAI;KAElC,MAAM,WAAW,EAAE,IAAI,MAAM,UAAU;KACvC,MAAM,OAAO,YAAY;KACzB,IAAI,CAAC,MACH,OAAO,EAAE,KAAK;MAAE,OAAO;MAAuB,SAAS;KAAwC,GAAG,GAAG;KAIvG,MAAM,OAAO,MAAM,aAAa,MAAM,CAAC,CAAC;KACxC,IAAI,OAAO,KAAK,SAAS,YAAY,KAAK,SAAS,KAAK,MACtD,OAAO,EAAE,KAAK;MAAE,OAAO;MAAgB,SAAS,wBAAwB,SAAS,IAAI,KAAK;KAAO,GAAG,GAAG;KAKzG,MAAM,QAA8B,KAAK,UAAU,QAAQ,QAAQ;KACnE,IAAI,UAAU,SAAS,IAAI,SAAS,YAAY,CAAE,MAAM,KAAK,oBAAoB,MAAM,CAAC,GAAG,IAAI,KAAK,GAClG,OAAO,EAAE,KAAK;MAAE,OAAO;MAAa,SAAS;KAAgD,GAAG,GAAG;KAGrG,IAAI;KACJ,IAAI;MACF,UAAU,MAAM,KAAK,MAAM;KAC7B,SAAS,OAAO;MACd,OAAO,EAAE,KAAK,EAAE,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,GAAG,GAAG;KACtF;KAEA,MAAM,YAAY,WAAW;KAC7B,MAAM,SAAS,cAAc,GAAG;KAChC,OACE,MAAM,aAAa,GAAG,EAAA,CACtB,mBAAmB;MACnB;MACA,OAAO,OAAO;MACd,QAAQ,OAAO;MACf;MACA,MAAM,KAAK;MACX,GAAI,UAAU,SAAS,IAAI,SAAS,WAAW,EAAE,iBAAiB,MAAM,IAAI,CAAC;MAC7E,SAAS,QAAQ;MACjB,WAAW,IAAI,KAAK,QAAQ,SAAS;MACrC,YAAY,QAAQ,cAAc,OAAO,IAAI,KAAK,KAAK,IAAI,IAAI,QAAQ,UAAU,IAAI;KACvF,CAAC;KAED,OAAO,EAAE,KAAK;MACZ;MACA,MAAM,KAAK;MACX,KAAK,QAAQ;MACb,GAAI,QAAQ,WAAW,EAAE,UAAU,QAAQ,SAAS,IAAI,CAAC;MACzD,cAAc,QAAQ;MACtB,WAAW,QAAQ;MACnB,GAAI,QAAQ,cAAc,OAAO,EAAE,YAAY,QAAQ,WAAW,IAAI,CAAC;KACzE,CAAC;IACH;GACF,CAAC;GAED,iBAAiB,kDAAkD;IACjE,QAAQ;IACR,cAAc;IACd,SAAS,OAAM,MAAK;KAClB,MAAM,MAAM,MAAM,yBAAyB;MAAE,GAAG,MAAM,CAAC;MAAG;MAAM,aAAa;KAAiB,CAAC;KAC/F,IAAI,cAAc,KAAK,OAAO,IAAI;KAElC,MAAM,WAAW,EAAE,IAAI,MAAM,UAAU;KACvC,MAAM,OAAO,YAAY;KACzB,IAAI,CAAC,MAAM,UAAU,OAAO,EAAE,KAAK,EAAE,OAAO,sBAAsB,GAAG,GAAG;KAExE,MAAM,OAAO,MAAM,aAAa,MAAM,CAAC,CAAC;KACxC,MAAM,YAAY,OAAO,KAAK,cAAc,WAAW,KAAK,YAAY;KACxE,MAAM,OAAO,OAAO,KAAK,SAAS,WAAW,KAAK,KAAK,KAAK,IAAI;KAChE,IAAI,CAAC,aAAa,CAAC,MAAM,OAAO,EAAE,KAAK,EAAE,OAAO,2CAA2C,GAAG,GAAG;KAEjG,MAAM,UAAU,MAAM,iBAAiB;MAAE;MAAK;MAAU;KAAU,CAAC;KACnE,IAAI,CAAC,SAAS,OAAO,EAAE,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;KAC/D,IAAI,QAAQ,SAAS,cAAc,OAAO,EAAE,KAAK,EAAE,OAAO,qBAAqB,GAAG,GAAG;KAGrF,IACE,QAAQ,oBAAoB,SAC5B,IAAI,SAAS,YACb,CAAE,MAAM,KAAK,oBAAoB,MAAM,CAAC,GAAG,IAAI,KAAK,GAEpD,OAAO,EAAE,KAAK;MAAE,OAAO;MAAa,SAAS;KAAgD,GAAG,GAAG;KAGrG,MAAM,UAAU,OACd,MAAM,aAAa,GAAG,EAAA,CACtB,kBAAkB,WAAW;MAC7B,OAAO,QAAQ;MACf,QAAQ,QAAQ;MAChB;MACA,MAAM;KACR,CAAC;KACD,IAAI,CAAC,SAAS,OAAO,EAAE,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;KAE/D,IAAI;KACJ,IAAI;MACF,cAAc,MAAM,KAAK,SAAS,QAAQ,SAAS,IAAI;KACzD,SAAS,OAAO;MACd,OAAO,MAAM,aAAa,GAAG,EAAA,CAAG,kBAAkB,WAAW,EAAE,YAAY,KAAK,CAAC;MACjF,OAAO,EAAE,KAAK,EAAE,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,GAAG,GAAG;KACtF;KAEA,MAAM,uBAAuB;MAC3B;MACA;MACA,OAAO,QAAQ;MACf;MACA;MACA;MACA;KACF,CAAC;KACD,OAAO,MAAM,aAAa,GAAG,EAAA,CAAG,mBAAmB,SAAS;KAC5D,OAAO,EAAE,KAAK;MAAE,QAAQ;MAAY,IAAI;KAAK,CAAC;IAChD;GACF,CAAC;GAED,iBAAiB,8CAA8C;IAC7D,QAAQ;IACR,cAAc;IACd,SAAS,OAAM,MAAK;KAClB,MAAM,MAAM,MAAM,yBAAyB;MAAE,GAAG,MAAM,CAAC;MAAG;MAAM,aAAa;KAAiB,CAAC;KAC/F,IAAI,cAAc,KAAK,OAAO,IAAI;KAElC,MAAM,WAAW,EAAE,IAAI,MAAM,UAAU;KACvC,MAAM,OAAO,YAAY;KACzB,IAAI,CAAC,MAAM,MAAM,OAAO,EAAE,KAAK,EAAE,OAAO,sBAAsB,GAAG,GAAG;KAEpE,MAAM,OAAO,MAAM,aAAa,MAAM,CAAC,CAAC;KACxC,MAAM,YAAY,OAAO,KAAK,cAAc,WAAW,KAAK,YAAY;KACxE,IAAI,CAAC,WAAW,OAAO,EAAE,KAAK,EAAE,OAAO,oCAAoC,GAAG,GAAG;KAEjF,MAAM,UAAU,MAAM,iBAAiB;MAAE;MAAK;MAAU;KAAU,CAAC;KACnE,IAAI,CAAC,SAAS,OAAO,EAAE,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;KAC/D,IAAI,QAAQ,SAAS,eAAe,OAAO,EAAE,KAAK,EAAE,OAAO,qBAAqB,GAAG,GAAG;KAGtF,IACE,QAAQ,oBAAoB,SAC5B,IAAI,SAAS,YACb,CAAE,MAAM,KAAK,oBAAoB,MAAM,CAAC,GAAG,IAAI,KAAK,GAEpD,OAAO,EAAE,KAAK;MAAE,OAAO;MAAa,SAAS;KAAgD,GAAG,GAAG;KAKrG,MAAM,MAAM,KAAK,IAAI;KACrB,MAAM,aAAa,QAAQ,YAAY,QAAQ;KAC/C,IAAI,cAAc,QAAQ,MAAM,YAC9B,OAAO,EAAE,KAAK;MAAE,QAAQ;MAAW,YAAY,aAAa;KAAI,CAAC;KAGnE,MAAM,UAAU,OACd,MAAM,aAAa,GAAG,EAAA,CACtB,kBAAkB,WAAW;MAC7B,OAAO,QAAQ;MACf,QAAQ,QAAQ;MAChB;MACA,MAAM;KACR,CAAC;KACD,IAAI,CAAC,SAAS,OAAO,EAAE,KAAK;MAAE,QAAQ;MAAW,YAAY;KAAI,CAAC;KAElE,IAAI;KACJ,IAAI;MACF,SAAS,MAAM,KAAK,KAAK,QAAQ,OAAO;KAC1C,SAAS,OAAO;MACd,OAAO,MAAM,aAAa,GAAG,EAAA,CAAG,kBAAkB,WAAW,EAAE,YAAY,KAAK,CAAC;MACjF,MAAM;KACR;KAEA,IAAI,OAAO,WAAW,YAAY;MAChC,MAAM,uBAAuB;OAC3B;OACA;OACA,OAAO,QAAQ;OACf,aAAa,OAAO;OACpB;OACA;OACA;MACF,CAAC;MACD,OAAO,MAAM,aAAa,GAAG,EAAA,CAAG,mBAAmB,SAAS;MAC5D,OAAO,EAAE,KAAK;OAAE,QAAQ;OAAY,IAAI;MAAK,CAAC;KAChD;KAEA,IAAI,OAAO,WAAW,UAAU;MAC9B,OAAO,MAAM,aAAa,GAAG,EAAA,CAAG,mBAAmB,SAAS;MAC5D,OAAO,EAAE,KAAK;OAAE,QAAQ;OAAU,OAAO,OAAO;MAAM,CAAC;KACzD;KAEA,OACE,MAAM,aAAa,GAAG,EAAA,CACtB,kBAAkB,WAAW;MAC7B,GAAI,OAAO,UAAU,EAAE,SAAS,OAAO,QAAQ,IAAI,CAAC;MACpD,YAAY,IAAI,KAAK,MAAM,OAAO,UAAU;KAC9C,CAAC;KACD,OAAO,EAAE,KAAK;MAAE,QAAQ;MAAW,YAAY,OAAO;KAAW,CAAC;IACpE;GACF,CAAC;GAED,iBAAiB,4DAA4D;IAC3E,QAAQ;IACR,cAAc;IACd,SAAS,OAAM,MAAK;KAClB,MAAM,MAAM,MAAM,yBAAyB;MAAE,GAAG,MAAM,CAAC;MAAG;MAAM,aAAa;KAAiB,CAAC;KAC/F,IAAI,cAAc,KAAK,OAAO,IAAI;KAElC,MAAM,WAAW,EAAE,IAAI,MAAM,UAAU;KACvC,MAAM,YAAY,EAAE,IAAI,MAAM,WAAW;KAEzC,IAAI,MADkB,iBAAiB;MAAE;MAAK;MAAU;KAAU,CAAC,GACtD,OAAO,MAAM,aAAa,GAAG,EAAA,CAAG,mBAAmB,SAAS;KACzE,OAAO,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC;IAC5B;GACF,CAAC;GAED,iBAAiB,yCAAyC;IACxD,QAAQ;IACR,cAAc;IACd,SAAS,OAAM,MAAK;KAClB,MAAM,MAAM,MAAM,yBAAyB;MAAE,GAAG,MAAM,CAAC;MAAG;MAAM,aAAa;KAAiB,CAAC;KAC/F,IAAI,cAAc,KAAK,OAAO,IAAI;KAGlC,MAAM,iBAAiB,kBADN,EAAE,IAAI,MAAM,UACmB,CAAC;KAGjD,MAAM,QAAQ,EAAE,IAAI,MAAM,OAAO,MAAM,QAAQ,QAAQ;KACvD,IAAI;MACF,IAAI,IAAI,SAAS,UAAU;OACzB,IAAI,UAAU,SAAS,CAAE,MAAM,KAAK,oBAAoB,MAAM,CAAC,GAAG,IAAI,KAAK,GACzE,OAAO,EAAE,KAAK;QAAE,OAAO;QAAa,SAAS;OAAiD,GAAG,GAAG;OAEtG,MAAM,SAAS;QAAE,OAAO,IAAI;QAAO,GAAI,UAAU,QAAQ,CAAC,IAAI,EAAE,QAAQ,IAAI,OAAO;OAAG;OACtF,MAAM,IAAI,QAAQ,iBAAiB,QAAQ,cAAc;OACzD,qBAAqB,MAAM;MAC7B,OAAO;OACL,IAAI,CAAC,aAAa,OAAO,EAAE,KAAK,EAAE,OAAO,sCAAsC,GAAG,GAAG;OACrF,YAAY,OAAO,cAAc;MACnC;MACA,OAAO,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC;KAC5B,SAAS,OAAO;MACd,OAAO,EAAE,KAAK,EAAE,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,GAAG,GAAG;KACtF;IACF;GACF,CAAC;EACH;CACF;AACF"}
+{"version":3,"file":"oauth.js","names":[],"sources":["../../src/routes/oauth.ts"],"sourcesContent":["/**\n * Web OAuth sign-in routes for model providers (Settings › Providers).\n *\n * Wraps the SDK's step-based OAuth primitives (start/complete for Anthropic's\n * paste-code PKCE flow, start/poll for the Codex/Copilot/xAI device flows) in\n * HTTP routes. Flow state lives in login sessions — the `model-credentials`\n * domain's `oauth_login_sessions` table in tenant mode (any replica can\n * complete/poll), an in-memory store in local mode — so a flow can span\n * requests. Completed credentials are **user-scoped by default**; org admins\n * can start a flow with `{ scope: 'org' }` to share the credential with the\n * whole org. Local mode writes to the file-backed `AuthStorage`.\n *\n * Tokens never leave the server; responses only carry flow metadata (URLs,\n * user codes, poll delays).\n */\n\nimport { nextPollDelayMs } from '@mastra/code-sdk/auth/device-code';\nimport { completeAnthropicLogin, startAnthropicLogin } from '@mastra/code-sdk/auth/providers/anthropic';\nimport {\n  copilotNextPollDelayMs,\n  pollGitHubCopilotDeviceLogin,\n  startGitHubCopilotDeviceLogin,\n} from '@mastra/code-sdk/auth/providers/github-copilot';\nimport type { CopilotDeviceLoginPending } from '@mastra/code-sdk/auth/providers/github-copilot';\nimport { pollCodexDeviceLogin, startCodexDeviceLogin } from '@mastra/code-sdk/auth/providers/openai-codex';\nimport type { CodexDeviceLoginPending } from '@mastra/code-sdk/auth/providers/openai-codex';\nimport { pollXAIDeviceLogin, startXAIDeviceLogin } from '@mastra/code-sdk/auth/providers/xai';\nimport type { XAIDeviceLoginPending } from '@mastra/code-sdk/auth/providers/xai';\nimport type { AuthStorage } from '@mastra/code-sdk/auth/storage';\nimport type { OAuthCredentials } from '@mastra/code-sdk/auth/types';\nimport type { ApiRoute } from '@mastra/core/server';\nimport { registerApiRoute } from '@mastra/core/server';\nimport type { Context } from 'hono';\n\nimport { ModelCredentialsStorage } from '../storage/domains/credentials/base.js';\nimport type { LoginCredentialScope, LoginSessionKind, LoginSessionRow } from '../storage/domains/credentials/base.js';\nimport type { MemorySettingsStorage } from '../storage/domains/memory-settings/base.js';\nimport { seedPersonalOmDefaults } from './om-seed.js';\nimport { getAuthProviderId, resolveCredentialContext } from './provider-credentials.js';\nimport type { CredentialContext } from './provider-credentials.js';\nimport { Route } from './route.js';\nimport type { RouteDependencies } from './route.js';\n\n/** Lifetime of a paste-code session (Anthropic gives no explicit expiry). */\nconst PASTE_CODE_TTL_MS = 10 * 60 * 1000;\n\ninterface OAuthFlowStart {\n  url: string;\n  userCode?: string;\n  instructions: string;\n  /** ms epoch after which the flow expires. */\n  expiresAt: number;\n  /** Delay before the first upstream poll (device-code flows only). */\n  nextPollMs?: number;\n  /** Serializable flow state persisted in the login session. */\n  pending: Record<string, unknown>;\n}\n\ntype OAuthFlowPoll =\n  | { status: 'complete'; credentials: OAuthCredentials }\n  | { status: 'pending'; nextPollMs: number; pending?: Record<string, unknown> }\n  | { status: 'failed'; error: string };\n\ninterface OAuthFlow {\n  kind: LoginSessionKind;\n  start(): Promise<OAuthFlowStart>;\n  /** Paste-code flows: exchange the pasted code for credentials. Throws on bad input. */\n  complete?(pending: Record<string, unknown>, code: string): Promise<OAuthCredentials>;\n  /** Device-code flows: perform exactly one upstream poll. */\n  poll?(pending: Record<string, unknown>): Promise<OAuthFlowPoll>;\n}\n\n/** Web OAuth flows keyed by *catalog* provider id (mirrors {@link WEB_OAUTH_FLOW_KINDS}). */\nconst OAUTH_FLOWS: Record<string, OAuthFlow> = {\n  anthropic: {\n    kind: 'paste-code',\n    start: async () => {\n      const { url, verifier } = await startAnthropicLogin();\n      return {\n        url,\n        instructions: 'Open the link, authorize, then paste the code shown on the final page.',\n        expiresAt: Date.now() + PASTE_CODE_TTL_MS,\n        pending: { verifier },\n      };\n    },\n    complete: (pending, code) => completeAnthropicLogin(code, String(pending.verifier ?? '')),\n  },\n  openai: {\n    kind: 'device-code',\n    start: async () => {\n      const p = await startCodexDeviceLogin();\n      return {\n        url: p.url,\n        userCode: p.userCode,\n        instructions: p.instructions,\n        expiresAt: p.deadlineAt,\n        nextPollMs: p.intervalMs,\n        pending: { ...p },\n      };\n    },\n    poll: async pending => {\n      const r = await pollCodexDeviceLogin(pending as unknown as CodexDeviceLoginPending);\n      if (r.status === 'complete') return { status: 'complete', credentials: r.credentials };\n      if (r.status === 'pending') return { status: 'pending', nextPollMs: r.nextPollMs };\n      return { status: 'failed', error: r.error };\n    },\n  },\n  'github-copilot': {\n    kind: 'device-code',\n    start: async () => {\n      const p = await startGitHubCopilotDeviceLogin();\n      return {\n        url: p.url,\n        userCode: p.userCode,\n        instructions: p.instructions,\n        expiresAt: p.deadlineAt,\n        nextPollMs: copilotNextPollDelayMs(p),\n        pending: { ...p },\n      };\n    },\n    poll: async pending => {\n      const p = pending as unknown as CopilotDeviceLoginPending;\n      // Web flows are always started against github.com (no Enterprise input).\n      // Never let deserialized session state redirect server-side polling to\n      // an arbitrary hostname.\n      if (p.domain !== 'github.com' || p.enterpriseDomain !== undefined) {\n        return { status: 'failed', error: 'Unsupported GitHub host' };\n      }\n      const r = await pollGitHubCopilotDeviceLogin(p);\n      if (r.status === 'complete') return { status: 'complete', credentials: r.credentials };\n      if (r.status === 'pending') return { status: 'pending', nextPollMs: r.nextPollMs, pending: { ...r.pending } };\n      return { status: 'failed', error: r.error };\n    },\n  },\n  xai: {\n    kind: 'device-code',\n    start: async () => {\n      const p = await startXAIDeviceLogin();\n      return {\n        url: p.url,\n        userCode: p.userCode,\n        instructions: p.instructions,\n        expiresAt: p.state.deadlineAt,\n        nextPollMs: nextPollDelayMs(p.state),\n        pending: { ...p },\n      };\n    },\n    poll: async pending => {\n      const r = await pollXAIDeviceLogin(pending as unknown as XAIDeviceLoginPending);\n      if (r.status === 'complete') return { status: 'complete', credentials: r.credentials };\n      if (r.status === 'pending') return { status: 'pending', nextPollMs: r.nextPollMs, pending: { ...r.pending } };\n      return { status: 'failed', error: r.error };\n    },\n  },\n};\n\nfunction loose(c: unknown): Context {\n  return c as Context;\n}\n\n/**\n * Local-mode login sessions. Flows in local mode are single-process, so a\n * process-local libsql `:memory:` database (which already handles TTL\n * cleanup) is sufficient.\n */\nlet localSessionsPromise: Promise<ModelCredentialsStorage> | undefined;\nfunction localSessions(): Promise<ModelCredentialsStorage> {\n  localSessionsPromise ??= (async () => {\n    const { LibSQLFactoryStorage } = await import('@mastra/libsql');\n    const storage = new LibSQLFactoryStorage({ id: 'local-oauth-sessions', url: ':memory:' });\n    const store = storage.registerDomain(new ModelCredentialsStorage());\n    await storage.init();\n    return store;\n  })();\n  return localSessionsPromise;\n}\nconst LOCAL_TENANT = { orgId: 'local', userId: 'local' } as const;\n\nasync function sessionStore(ctx: CredentialContext): Promise<ModelCredentialsStorage> {\n  return ctx.mode === 'tenant' ? ctx.storage : localSessions();\n}\n\nfunction sessionTenant(ctx: CredentialContext): { orgId: string; userId: string } {\n  return ctx.mode === 'tenant' ? { orgId: ctx.orgId, userId: ctx.userId } : LOCAL_TENANT;\n}\n\n/** Load a session and verify it belongs to the caller + provider (else undefined). */\nasync function loadOwnedSession({\n  ctx,\n  provider,\n  sessionId,\n}: {\n  ctx: CredentialContext;\n  provider: string;\n  sessionId: string;\n}): Promise<LoginSessionRow | undefined> {\n  const session = await (await sessionStore(ctx)).getLoginSession(sessionId);\n  if (!session) return undefined;\n  const tenant = sessionTenant(ctx);\n  if (session.orgId !== tenant.orgId || session.userId !== tenant.userId) return undefined;\n  if (session.provider !== provider) return undefined;\n  return session;\n}\n\n/** Persist completed OAuth credentials — user-scoped unless the flow was started org-wide. */\nasync function persistOAuthCredential({\n  ctx,\n  provider,\n  scope,\n  credentials,\n  authStorage,\n  memorySettings,\n  onCredentialsChanged,\n}: {\n  ctx: CredentialContext;\n  provider: string;\n  scope: LoginCredentialScope | undefined;\n  credentials: OAuthCredentials;\n  authStorage: AuthStorage | undefined;\n  memorySettings: MemorySettingsStorage | undefined;\n  onCredentialsChanged: (tenant: { orgId: string; userId?: string }) => void;\n}): Promise<void> {\n  const authProviderId = getAuthProviderId(provider);\n  if (ctx.mode === 'tenant') {\n    const tenant = { orgId: ctx.orgId, ...(scope === 'org' ? {} : { userId: ctx.userId }) };\n    await ctx.storage.setCredential(tenant, authProviderId, {\n      type: 'oauth',\n      ...credentials,\n    });\n    onCredentialsChanged(tenant);\n    await seedPersonalOmDefaults({ memorySettings, tenant, provider });\n    return;\n  }\n  if (!authStorage) throw new Error('Credential storage is not available');\n  await authStorage.addAccount(authProviderId, credentials);\n}\n\nasync function readJsonBody(c: Context): Promise<Record<string, unknown>> {\n  try {\n    const body = (await c.req.json()) as unknown;\n    return body && typeof body === 'object' ? (body as Record<string, unknown>) : {};\n  } catch {\n    return {};\n  }\n}\n\nexport interface OAuthRoutesDeps extends RouteDependencies {\n  /** File-backed credential store; used in local (no-auth) mode. */\n  authStorage?: AuthStorage;\n  /** Tenant credential domain handle; absent in local (no-DB) mode. */\n  modelCredentials?: ModelCredentialsStorage;\n  /** Personal OM settings; seeded from the login provider after a user-scoped sign-in. */\n  memorySettings?: MemorySettingsStorage;\n  /** Notifies the host after tenant credentials change so caches can be dropped. */\n  onCredentialsChanged?: (tenant: { orgId: string; userId?: string }) => void;\n}\n\n/**\n * Provider OAuth sign-in routes as Mastra `apiRoutes`:\n *   - `POST   /web/config/providers/:provider/oauth/start`              — begin a sign-in flow\n *   - `POST   /web/config/providers/:provider/oauth/complete`           — paste-code exchange\n *   - `POST   /web/config/providers/:provider/oauth/poll`               — one device-code poll\n *   - `DELETE /web/config/providers/:provider/oauth/session/:sessionId` — cancel a flow\n *   - `DELETE /web/config/providers/:provider/oauth`                    — sign out (caller only)\n */\nexport class OAuthRoutes extends Route<OAuthRoutesDeps> {\n  routes(): ApiRoute[] {\n    const { auth, authStorage, modelCredentials, memorySettings } = this.deps;\n    const onCredentialsChanged = this.deps.onCredentialsChanged ?? (() => {});\n\n    return [\n      registerApiRoute('/web/config/providers/:provider/oauth/start', {\n        method: 'POST',\n        requiresAuth: false,\n        handler: async c => {\n          const ctx = await resolveCredentialContext({ c: loose(c), auth, credentials: modelCredentials });\n          if ('response' in ctx) return ctx.response;\n\n          const provider = c.req.param('provider');\n          const flow = OAUTH_FLOWS[provider];\n          if (!flow) {\n            return c.json({ error: 'oauth_not_supported', message: `Provider does not support web sign-in` }, 404);\n          }\n          // Body may carry `{ mode }` for future multi-mode providers; each web\n          // flow currently has exactly one mode, so an unknown mode is rejected.\n          const body = await readJsonBody(loose(c));\n          if (typeof body.mode === 'string' && body.mode !== flow.kind) {\n            return c.json({ error: 'invalid_mode', message: `Unsupported mode for ${provider}: ${body.mode}` }, 400);\n          }\n\n          // Optional `{ scope: 'org' }` shares the completed credential with\n          // the whole org (admin-only, tenant mode). Anything else is personal.\n          const scope: LoginCredentialScope = body.scope === 'org' ? 'org' : 'user';\n          if (scope === 'org' && ctx.mode === 'tenant' && !(await auth.isOrganizationAdmin(loose(c), ctx.orgId))) {\n            return c.json({ error: 'forbidden', message: 'Only org admins can sign in for the whole org' }, 403);\n          }\n\n          let started: OAuthFlowStart;\n          try {\n            started = await flow.start();\n          } catch (error) {\n            return c.json({ error: error instanceof Error ? error.message : String(error) }, 502);\n          }\n\n          const sessionId = globalThis.crypto.randomUUID();\n          const tenant = sessionTenant(ctx);\n          await (\n            await sessionStore(ctx)\n          ).createLoginSession({\n            sessionId,\n            orgId: tenant.orgId,\n            userId: tenant.userId,\n            provider,\n            kind: flow.kind,\n            ...(scope === 'org' && ctx.mode === 'tenant' ? { credentialScope: scope } : {}),\n            pending: started.pending,\n            expiresAt: new Date(started.expiresAt),\n            nextPollAt: started.nextPollMs != null ? new Date(Date.now() + started.nextPollMs) : null,\n          });\n\n          return c.json({\n            sessionId,\n            kind: flow.kind,\n            url: started.url,\n            ...(started.userCode ? { userCode: started.userCode } : {}),\n            instructions: started.instructions,\n            expiresAt: started.expiresAt,\n            ...(started.nextPollMs != null ? { nextPollMs: started.nextPollMs } : {}),\n          });\n        },\n      }),\n\n      registerApiRoute('/web/config/providers/:provider/oauth/complete', {\n        method: 'POST',\n        requiresAuth: false,\n        handler: async c => {\n          const ctx = await resolveCredentialContext({ c: loose(c), auth, credentials: modelCredentials });\n          if ('response' in ctx) return ctx.response;\n\n          const provider = c.req.param('provider');\n          const flow = OAUTH_FLOWS[provider];\n          if (!flow?.complete) return c.json({ error: 'oauth_not_supported' }, 404);\n\n          const body = await readJsonBody(loose(c));\n          const sessionId = typeof body.sessionId === 'string' ? body.sessionId : '';\n          const code = typeof body.code === 'string' ? body.code.trim() : '';\n          if (!sessionId || !code) return c.json({ error: 'Missing required fields: sessionId, code' }, 400);\n\n          const session = await loadOwnedSession({ ctx, provider, sessionId });\n          if (!session) return c.json({ error: 'session_not_found' }, 404);\n          if (session.kind !== 'paste-code') return c.json({ error: 'wrong_session_kind' }, 400);\n          // Org-scoped flows recheck admin access at completion time — the\n          // caller may have lost admin since the flow was started.\n          if (\n            session.credentialScope === 'org' &&\n            ctx.mode === 'tenant' &&\n            !(await auth.isOrganizationAdmin(loose(c), ctx.orgId))\n          ) {\n            return c.json({ error: 'forbidden', message: 'Only org admins can sign in for the whole org' }, 403);\n          }\n\n          const claimed = await (\n            await sessionStore(ctx)\n          ).claimLoginSession(sessionId, {\n            orgId: session.orgId,\n            userId: session.userId,\n            provider,\n            kind: 'paste-code',\n          });\n          if (!claimed) return c.json({ error: 'oauth_in_progress' }, 409);\n\n          let credentials: OAuthCredentials;\n          try {\n            credentials = await flow.complete(claimed.pending, code);\n          } catch (error) {\n            await (await sessionStore(ctx)).touchLoginSession(sessionId, { nextPollAt: null });\n            return c.json({ error: error instanceof Error ? error.message : String(error) }, 400);\n          }\n\n          await persistOAuthCredential({\n            ctx,\n            provider,\n            scope: session.credentialScope,\n            credentials,\n            authStorage,\n            memorySettings,\n            onCredentialsChanged,\n          });\n          await (await sessionStore(ctx)).deleteLoginSession(sessionId);\n          return c.json({ status: 'complete', ok: true });\n        },\n      }),\n\n      registerApiRoute('/web/config/providers/:provider/oauth/poll', {\n        method: 'POST',\n        requiresAuth: false,\n        handler: async c => {\n          const ctx = await resolveCredentialContext({ c: loose(c), auth, credentials: modelCredentials });\n          if ('response' in ctx) return ctx.response;\n\n          const provider = c.req.param('provider');\n          const flow = OAUTH_FLOWS[provider];\n          if (!flow?.poll) return c.json({ error: 'oauth_not_supported' }, 404);\n\n          const body = await readJsonBody(loose(c));\n          const sessionId = typeof body.sessionId === 'string' ? body.sessionId : '';\n          if (!sessionId) return c.json({ error: 'Missing required field: sessionId' }, 400);\n\n          const session = await loadOwnedSession({ ctx, provider, sessionId });\n          if (!session) return c.json({ error: 'session_not_found' }, 404);\n          if (session.kind !== 'device-code') return c.json({ error: 'wrong_session_kind' }, 400);\n          // Org-scoped flows recheck admin access before the credential write —\n          // the caller may have lost admin since the flow was started.\n          if (\n            session.credentialScope === 'org' &&\n            ctx.mode === 'tenant' &&\n            !(await auth.isOrganizationAdmin(loose(c), ctx.orgId))\n          ) {\n            return c.json({ error: 'forbidden', message: 'Only org admins can sign in for the whole org' }, 403);\n          }\n\n          // Server-side rate limit: at most one upstream poll per interval,\n          // regardless of how eagerly the client calls this route.\n          const now = Date.now();\n          const nextPollAt = session.nextPollAt?.getTime();\n          // claimLoginSession parks next_poll_at at expires_at while another\n          // request owns the flow. That is a lock, not a schedule, so fall\n          // through to the claim and take its short retry instead.\n          const parkedByClaim = nextPollAt != null && nextPollAt >= session.expiresAt.getTime();\n          if (nextPollAt != null && now < nextPollAt && !parkedByClaim) {\n            return c.json({ status: 'pending', nextPollMs: nextPollAt - now });\n          }\n\n          const claimed = await (\n            await sessionStore(ctx)\n          ).claimLoginSession(sessionId, {\n            orgId: session.orgId,\n            userId: session.userId,\n            provider,\n            kind: 'device-code',\n          });\n          if (!claimed) return c.json({ status: 'pending', nextPollMs: 250 });\n\n          let result: OAuthFlowPoll;\n          try {\n            result = await flow.poll(claimed.pending);\n          } catch (error) {\n            await (await sessionStore(ctx)).touchLoginSession(sessionId, { nextPollAt: null });\n            throw error;\n          }\n\n          if (result.status === 'complete') {\n            await persistOAuthCredential({\n              ctx,\n              provider,\n              scope: session.credentialScope,\n              credentials: result.credentials,\n              authStorage,\n              memorySettings,\n              onCredentialsChanged,\n            });\n            await (await sessionStore(ctx)).deleteLoginSession(sessionId);\n            return c.json({ status: 'complete', ok: true });\n          }\n\n          if (result.status === 'failed') {\n            await (await sessionStore(ctx)).deleteLoginSession(sessionId);\n            return c.json({ status: 'failed', error: result.error });\n          }\n\n          await (\n            await sessionStore(ctx)\n          ).touchLoginSession(sessionId, {\n            ...(result.pending ? { pending: result.pending } : {}),\n            nextPollAt: new Date(now + result.nextPollMs),\n          });\n          return c.json({ status: 'pending', nextPollMs: result.nextPollMs });\n        },\n      }),\n\n      registerApiRoute('/web/config/providers/:provider/oauth/session/:sessionId', {\n        method: 'DELETE',\n        requiresAuth: false,\n        handler: async c => {\n          const ctx = await resolveCredentialContext({ c: loose(c), auth, credentials: modelCredentials });\n          if ('response' in ctx) return ctx.response;\n\n          const provider = c.req.param('provider');\n          const sessionId = c.req.param('sessionId');\n          const session = await loadOwnedSession({ ctx, provider, sessionId });\n          if (session) await (await sessionStore(ctx)).deleteLoginSession(sessionId);\n          return c.json({ ok: true });\n        },\n      }),\n\n      registerApiRoute('/web/config/providers/:provider/oauth', {\n        method: 'DELETE',\n        requiresAuth: false,\n        handler: async c => {\n          const ctx = await resolveCredentialContext({ c: loose(c), auth, credentials: modelCredentials });\n          if ('response' in ctx) return ctx.response;\n\n          const provider = c.req.param('provider');\n          const authProviderId = getAuthProviderId(provider);\n          // `?scope=org` removes the shared org credential (admin-only);\n          // default removes the caller's personal credential only.\n          const scope = c.req.query('scope') === 'org' ? 'org' : 'user';\n          try {\n            if (ctx.mode === 'tenant') {\n              if (scope === 'org' && !(await auth.isOrganizationAdmin(loose(c), ctx.orgId))) {\n                return c.json({ error: 'forbidden', message: 'Only org admins can remove an org-wide sign-in' }, 403);\n              }\n              const tenant = { orgId: ctx.orgId, ...(scope === 'org' ? {} : { userId: ctx.userId }) };\n              await ctx.storage.removeCredential(tenant, authProviderId);\n              onCredentialsChanged(tenant);\n            } else {\n              if (!authStorage) return c.json({ error: 'Credential storage is not available' }, 503);\n              authStorage.logout(authProviderId);\n            }\n            return c.json({ ok: true });\n          } catch (error) {\n            return c.json({ error: error instanceof Error ? error.message : String(error) }, 500);\n          }\n        },\n      }),\n    ];\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;AA4CA,MAAM,oBAAoB,MAAU;;AA6BpC,MAAM,cAAyC;CAC7C,WAAW;EACT,MAAM;EACN,OAAO,YAAY;GACjB,MAAM,EAAE,KAAK,aAAa,MAAM,oBAAoB;GACpD,OAAO;IACL;IACA,cAAc;IACd,WAAW,KAAK,IAAI,IAAI;IACxB,SAAS,EAAE,SAAS;GACtB;EACF;EACA,WAAW,SAAS,SAAS,uBAAuB,MAAM,OAAO,QAAQ,YAAY,EAAE,CAAC;CAC1F;CACA,QAAQ;EACN,MAAM;EACN,OAAO,YAAY;GACjB,MAAM,IAAI,MAAM,sBAAsB;GACtC,OAAO;IACL,KAAK,EAAE;IACP,UAAU,EAAE;IACZ,cAAc,EAAE;IAChB,WAAW,EAAE;IACb,YAAY,EAAE;IACd,SAAS,EAAE,GAAG,EAAE;GAClB;EACF;EACA,MAAM,OAAM,YAAW;GACrB,MAAM,IAAI,MAAM,qBAAqB,OAA6C;GAClF,IAAI,EAAE,WAAW,YAAY,OAAO;IAAE,QAAQ;IAAY,aAAa,EAAE;GAAY;GACrF,IAAI,EAAE,WAAW,WAAW,OAAO;IAAE,QAAQ;IAAW,YAAY,EAAE;GAAW;GACjF,OAAO;IAAE,QAAQ;IAAU,OAAO,EAAE;GAAM;EAC5C;CACF;CACA,kBAAkB;EAChB,MAAM;EACN,OAAO,YAAY;GACjB,MAAM,IAAI,MAAM,8BAA8B;GAC9C,OAAO;IACL,KAAK,EAAE;IACP,UAAU,EAAE;IACZ,cAAc,EAAE;IAChB,WAAW,EAAE;IACb,YAAY,uBAAuB,CAAC;IACpC,SAAS,EAAE,GAAG,EAAE;GAClB;EACF;EACA,MAAM,OAAM,YAAW;GACrB,MAAM,IAAI;GAIV,IAAI,EAAE,WAAW,gBAAgB,EAAE,qBAAqB,KAAA,GACtD,OAAO;IAAE,QAAQ;IAAU,OAAO;GAA0B;GAE9D,MAAM,IAAI,MAAM,6BAA6B,CAAC;GAC9C,IAAI,EAAE,WAAW,YAAY,OAAO;IAAE,QAAQ;IAAY,aAAa,EAAE;GAAY;GACrF,IAAI,EAAE,WAAW,WAAW,OAAO;IAAE,QAAQ;IAAW,YAAY,EAAE;IAAY,SAAS,EAAE,GAAG,EAAE,QAAQ;GAAE;GAC5G,OAAO;IAAE,QAAQ;IAAU,OAAO,EAAE;GAAM;EAC5C;CACF;CACA,KAAK;EACH,MAAM;EACN,OAAO,YAAY;GACjB,MAAM,IAAI,MAAM,oBAAoB;GACpC,OAAO;IACL,KAAK,EAAE;IACP,UAAU,EAAE;IACZ,cAAc,EAAE;IAChB,WAAW,EAAE,MAAM;IACnB,YAAY,gBAAgB,EAAE,KAAK;IACnC,SAAS,EAAE,GAAG,EAAE;GAClB;EACF;EACA,MAAM,OAAM,YAAW;GACrB,MAAM,IAAI,MAAM,mBAAmB,OAA2C;GAC9E,IAAI,EAAE,WAAW,YAAY,OAAO;IAAE,QAAQ;IAAY,aAAa,EAAE;GAAY;GACrF,IAAI,EAAE,WAAW,WAAW,OAAO;IAAE,QAAQ;IAAW,YAAY,EAAE;IAAY,SAAS,EAAE,GAAG,EAAE,QAAQ;GAAE;GAC5G,OAAO;IAAE,QAAQ;IAAU,OAAO,EAAE;GAAM;EAC5C;CACF;AACF;AAEA,SAAS,MAAM,GAAqB;CAClC,OAAO;AACT;;;;;;AAOA,IAAI;AACJ,SAAS,gBAAkD;CACzD,0BAA0B,YAAY;EACpC,MAAM,EAAE,yBAAyB,MAAM,OAAO;EAC9C,MAAM,UAAU,IAAI,qBAAqB;GAAE,IAAI;GAAwB,KAAK;EAAW,CAAC;EACxF,MAAM,QAAQ,QAAQ,eAAe,IAAI,wBAAwB,CAAC;EAClE,MAAM,QAAQ,KAAK;EACnB,OAAO;CACT,EAAA,CAAG;CACH,OAAO;AACT;AACA,MAAM,eAAe;CAAE,OAAO;CAAS,QAAQ;AAAQ;AAEvD,eAAe,aAAa,KAA0D;CACpF,OAAO,IAAI,SAAS,WAAW,IAAI,UAAU,cAAc;AAC7D;AAEA,SAAS,cAAc,KAA2D;CAChF,OAAO,IAAI,SAAS,WAAW;EAAE,OAAO,IAAI;EAAO,QAAQ,IAAI;CAAO,IAAI;AAC5E;;AAGA,eAAe,iBAAiB,EAC9B,KACA,UACA,aAKuC;CACvC,MAAM,UAAU,OAAO,MAAM,aAAa,GAAG,EAAA,CAAG,gBAAgB,SAAS;CACzE,IAAI,CAAC,SAAS,OAAO,KAAA;CACrB,MAAM,SAAS,cAAc,GAAG;CAChC,IAAI,QAAQ,UAAU,OAAO,SAAS,QAAQ,WAAW,OAAO,QAAQ,OAAO,KAAA;CAC/E,IAAI,QAAQ,aAAa,UAAU,OAAO,KAAA;CAC1C,OAAO;AACT;;AAGA,eAAe,uBAAuB,EACpC,KACA,UACA,OACA,aACA,aACA,gBACA,wBASgB;CAChB,MAAM,iBAAiB,kBAAkB,QAAQ;CACjD,IAAI,IAAI,SAAS,UAAU;EACzB,MAAM,SAAS;GAAE,OAAO,IAAI;GAAO,GAAI,UAAU,QAAQ,CAAC,IAAI,EAAE,QAAQ,IAAI,OAAO;EAAG;EACtF,MAAM,IAAI,QAAQ,cAAc,QAAQ,gBAAgB;GACtD,MAAM;GACN,GAAG;EACL,CAAC;EACD,qBAAqB,MAAM;EAC3B,MAAM,uBAAuB;GAAE;GAAgB;GAAQ;EAAS,CAAC;EACjE;CACF;CACA,IAAI,CAAC,aAAa,MAAM,IAAI,MAAM,qCAAqC;CACvE,MAAM,YAAY,WAAW,gBAAgB,WAAW;AAC1D;AAEA,eAAe,aAAa,GAA8C;CACxE,IAAI;EACF,MAAM,OAAQ,MAAM,EAAE,IAAI,KAAK;EAC/B,OAAO,QAAQ,OAAO,SAAS,WAAY,OAAmC,CAAC;CACjF,QAAQ;EACN,OAAO,CAAC;CACV;AACF;;;;;;;;;AAqBA,IAAa,cAAb,cAAiC,MAAuB;CACtD,SAAqB;EACnB,MAAM,EAAE,MAAM,aAAa,kBAAkB,mBAAmB,KAAK;EACrE,MAAM,uBAAuB,KAAK,KAAK,+BAA+B,CAAC;EAEvE,OAAO;GACL,iBAAiB,+CAA+C;IAC9D,QAAQ;IACR,cAAc;IACd,SAAS,OAAM,MAAK;KAClB,MAAM,MAAM,MAAM,yBAAyB;MAAE,GAAG,MAAM,CAAC;MAAG;MAAM,aAAa;KAAiB,CAAC;KAC/F,IAAI,cAAc,KAAK,OAAO,IAAI;KAElC,MAAM,WAAW,EAAE,IAAI,MAAM,UAAU;KACvC,MAAM,OAAO,YAAY;KACzB,IAAI,CAAC,MACH,OAAO,EAAE,KAAK;MAAE,OAAO;MAAuB,SAAS;KAAwC,GAAG,GAAG;KAIvG,MAAM,OAAO,MAAM,aAAa,MAAM,CAAC,CAAC;KACxC,IAAI,OAAO,KAAK,SAAS,YAAY,KAAK,SAAS,KAAK,MACtD,OAAO,EAAE,KAAK;MAAE,OAAO;MAAgB,SAAS,wBAAwB,SAAS,IAAI,KAAK;KAAO,GAAG,GAAG;KAKzG,MAAM,QAA8B,KAAK,UAAU,QAAQ,QAAQ;KACnE,IAAI,UAAU,SAAS,IAAI,SAAS,YAAY,CAAE,MAAM,KAAK,oBAAoB,MAAM,CAAC,GAAG,IAAI,KAAK,GAClG,OAAO,EAAE,KAAK;MAAE,OAAO;MAAa,SAAS;KAAgD,GAAG,GAAG;KAGrG,IAAI;KACJ,IAAI;MACF,UAAU,MAAM,KAAK,MAAM;KAC7B,SAAS,OAAO;MACd,OAAO,EAAE,KAAK,EAAE,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,GAAG,GAAG;KACtF;KAEA,MAAM,YAAY,WAAW,OAAO,WAAW;KAC/C,MAAM,SAAS,cAAc,GAAG;KAChC,OACE,MAAM,aAAa,GAAG,EAAA,CACtB,mBAAmB;MACnB;MACA,OAAO,OAAO;MACd,QAAQ,OAAO;MACf;MACA,MAAM,KAAK;MACX,GAAI,UAAU,SAAS,IAAI,SAAS,WAAW,EAAE,iBAAiB,MAAM,IAAI,CAAC;MAC7E,SAAS,QAAQ;MACjB,WAAW,IAAI,KAAK,QAAQ,SAAS;MACrC,YAAY,QAAQ,cAAc,OAAO,IAAI,KAAK,KAAK,IAAI,IAAI,QAAQ,UAAU,IAAI;KACvF,CAAC;KAED,OAAO,EAAE,KAAK;MACZ;MACA,MAAM,KAAK;MACX,KAAK,QAAQ;MACb,GAAI,QAAQ,WAAW,EAAE,UAAU,QAAQ,SAAS,IAAI,CAAC;MACzD,cAAc,QAAQ;MACtB,WAAW,QAAQ;MACnB,GAAI,QAAQ,cAAc,OAAO,EAAE,YAAY,QAAQ,WAAW,IAAI,CAAC;KACzE,CAAC;IACH;GACF,CAAC;GAED,iBAAiB,kDAAkD;IACjE,QAAQ;IACR,cAAc;IACd,SAAS,OAAM,MAAK;KAClB,MAAM,MAAM,MAAM,yBAAyB;MAAE,GAAG,MAAM,CAAC;MAAG;MAAM,aAAa;KAAiB,CAAC;KAC/F,IAAI,cAAc,KAAK,OAAO,IAAI;KAElC,MAAM,WAAW,EAAE,IAAI,MAAM,UAAU;KACvC,MAAM,OAAO,YAAY;KACzB,IAAI,CAAC,MAAM,UAAU,OAAO,EAAE,KAAK,EAAE,OAAO,sBAAsB,GAAG,GAAG;KAExE,MAAM,OAAO,MAAM,aAAa,MAAM,CAAC,CAAC;KACxC,MAAM,YAAY,OAAO,KAAK,cAAc,WAAW,KAAK,YAAY;KACxE,MAAM,OAAO,OAAO,KAAK,SAAS,WAAW,KAAK,KAAK,KAAK,IAAI;KAChE,IAAI,CAAC,aAAa,CAAC,MAAM,OAAO,EAAE,KAAK,EAAE,OAAO,2CAA2C,GAAG,GAAG;KAEjG,MAAM,UAAU,MAAM,iBAAiB;MAAE;MAAK;MAAU;KAAU,CAAC;KACnE,IAAI,CAAC,SAAS,OAAO,EAAE,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;KAC/D,IAAI,QAAQ,SAAS,cAAc,OAAO,EAAE,KAAK,EAAE,OAAO,qBAAqB,GAAG,GAAG;KAGrF,IACE,QAAQ,oBAAoB,SAC5B,IAAI,SAAS,YACb,CAAE,MAAM,KAAK,oBAAoB,MAAM,CAAC,GAAG,IAAI,KAAK,GAEpD,OAAO,EAAE,KAAK;MAAE,OAAO;MAAa,SAAS;KAAgD,GAAG,GAAG;KAGrG,MAAM,UAAU,OACd,MAAM,aAAa,GAAG,EAAA,CACtB,kBAAkB,WAAW;MAC7B,OAAO,QAAQ;MACf,QAAQ,QAAQ;MAChB;MACA,MAAM;KACR,CAAC;KACD,IAAI,CAAC,SAAS,OAAO,EAAE,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;KAE/D,IAAI;KACJ,IAAI;MACF,cAAc,MAAM,KAAK,SAAS,QAAQ,SAAS,IAAI;KACzD,SAAS,OAAO;MACd,OAAO,MAAM,aAAa,GAAG,EAAA,CAAG,kBAAkB,WAAW,EAAE,YAAY,KAAK,CAAC;MACjF,OAAO,EAAE,KAAK,EAAE,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,GAAG,GAAG;KACtF;KAEA,MAAM,uBAAuB;MAC3B;MACA;MACA,OAAO,QAAQ;MACf;MACA;MACA;MACA;KACF,CAAC;KACD,OAAO,MAAM,aAAa,GAAG,EAAA,CAAG,mBAAmB,SAAS;KAC5D,OAAO,EAAE,KAAK;MAAE,QAAQ;MAAY,IAAI;KAAK,CAAC;IAChD;GACF,CAAC;GAED,iBAAiB,8CAA8C;IAC7D,QAAQ;IACR,cAAc;IACd,SAAS,OAAM,MAAK;KAClB,MAAM,MAAM,MAAM,yBAAyB;MAAE,GAAG,MAAM,CAAC;MAAG;MAAM,aAAa;KAAiB,CAAC;KAC/F,IAAI,cAAc,KAAK,OAAO,IAAI;KAElC,MAAM,WAAW,EAAE,IAAI,MAAM,UAAU;KACvC,MAAM,OAAO,YAAY;KACzB,IAAI,CAAC,MAAM,MAAM,OAAO,EAAE,KAAK,EAAE,OAAO,sBAAsB,GAAG,GAAG;KAEpE,MAAM,OAAO,MAAM,aAAa,MAAM,CAAC,CAAC;KACxC,MAAM,YAAY,OAAO,KAAK,cAAc,WAAW,KAAK,YAAY;KACxE,IAAI,CAAC,WAAW,OAAO,EAAE,KAAK,EAAE,OAAO,oCAAoC,GAAG,GAAG;KAEjF,MAAM,UAAU,MAAM,iBAAiB;MAAE;MAAK;MAAU;KAAU,CAAC;KACnE,IAAI,CAAC,SAAS,OAAO,EAAE,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;KAC/D,IAAI,QAAQ,SAAS,eAAe,OAAO,EAAE,KAAK,EAAE,OAAO,qBAAqB,GAAG,GAAG;KAGtF,IACE,QAAQ,oBAAoB,SAC5B,IAAI,SAAS,YACb,CAAE,MAAM,KAAK,oBAAoB,MAAM,CAAC,GAAG,IAAI,KAAK,GAEpD,OAAO,EAAE,KAAK;MAAE,OAAO;MAAa,SAAS;KAAgD,GAAG,GAAG;KAKrG,MAAM,MAAM,KAAK,IAAI;KACrB,MAAM,aAAa,QAAQ,YAAY,QAAQ;KAI/C,MAAM,gBAAgB,cAAc,QAAQ,cAAc,QAAQ,UAAU,QAAQ;KACpF,IAAI,cAAc,QAAQ,MAAM,cAAc,CAAC,eAC7C,OAAO,EAAE,KAAK;MAAE,QAAQ;MAAW,YAAY,aAAa;KAAI,CAAC;KAGnE,MAAM,UAAU,OACd,MAAM,aAAa,GAAG,EAAA,CACtB,kBAAkB,WAAW;MAC7B,OAAO,QAAQ;MACf,QAAQ,QAAQ;MAChB;MACA,MAAM;KACR,CAAC;KACD,IAAI,CAAC,SAAS,OAAO,EAAE,KAAK;MAAE,QAAQ;MAAW,YAAY;KAAI,CAAC;KAElE,IAAI;KACJ,IAAI;MACF,SAAS,MAAM,KAAK,KAAK,QAAQ,OAAO;KAC1C,SAAS,OAAO;MACd,OAAO,MAAM,aAAa,GAAG,EAAA,CAAG,kBAAkB,WAAW,EAAE,YAAY,KAAK,CAAC;MACjF,MAAM;KACR;KAEA,IAAI,OAAO,WAAW,YAAY;MAChC,MAAM,uBAAuB;OAC3B;OACA;OACA,OAAO,QAAQ;OACf,aAAa,OAAO;OACpB;OACA;OACA;MACF,CAAC;MACD,OAAO,MAAM,aAAa,GAAG,EAAA,CAAG,mBAAmB,SAAS;MAC5D,OAAO,EAAE,KAAK;OAAE,QAAQ;OAAY,IAAI;MAAK,CAAC;KAChD;KAEA,IAAI,OAAO,WAAW,UAAU;MAC9B,OAAO,MAAM,aAAa,GAAG,EAAA,CAAG,mBAAmB,SAAS;MAC5D,OAAO,EAAE,KAAK;OAAE,QAAQ;OAAU,OAAO,OAAO;MAAM,CAAC;KACzD;KAEA,OACE,MAAM,aAAa,GAAG,EAAA,CACtB,kBAAkB,WAAW;MAC7B,GAAI,OAAO,UAAU,EAAE,SAAS,OAAO,QAAQ,IAAI,CAAC;MACpD,YAAY,IAAI,KAAK,MAAM,OAAO,UAAU;KAC9C,CAAC;KACD,OAAO,EAAE,KAAK;MAAE,QAAQ;MAAW,YAAY,OAAO;KAAW,CAAC;IACpE;GACF,CAAC;GAED,iBAAiB,4DAA4D;IAC3E,QAAQ;IACR,cAAc;IACd,SAAS,OAAM,MAAK;KAClB,MAAM,MAAM,MAAM,yBAAyB;MAAE,GAAG,MAAM,CAAC;MAAG;MAAM,aAAa;KAAiB,CAAC;KAC/F,IAAI,cAAc,KAAK,OAAO,IAAI;KAElC,MAAM,WAAW,EAAE,IAAI,MAAM,UAAU;KACvC,MAAM,YAAY,EAAE,IAAI,MAAM,WAAW;KAEzC,IAAI,MADkB,iBAAiB;MAAE;MAAK;MAAU;KAAU,CAAC,GACtD,OAAO,MAAM,aAAa,GAAG,EAAA,CAAG,mBAAmB,SAAS;KACzE,OAAO,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC;IAC5B;GACF,CAAC;GAED,iBAAiB,yCAAyC;IACxD,QAAQ;IACR,cAAc;IACd,SAAS,OAAM,MAAK;KAClB,MAAM,MAAM,MAAM,yBAAyB;MAAE,GAAG,MAAM,CAAC;MAAG;MAAM,aAAa;KAAiB,CAAC;KAC/F,IAAI,cAAc,KAAK,OAAO,IAAI;KAGlC,MAAM,iBAAiB,kBADN,EAAE,IAAI,MAAM,UACmB,CAAC;KAGjD,MAAM,QAAQ,EAAE,IAAI,MAAM,OAAO,MAAM,QAAQ,QAAQ;KACvD,IAAI;MACF,IAAI,IAAI,SAAS,UAAU;OACzB,IAAI,UAAU,SAAS,CAAE,MAAM,KAAK,oBAAoB,MAAM,CAAC,GAAG,IAAI,KAAK,GACzE,OAAO,EAAE,KAAK;QAAE,OAAO;QAAa,SAAS;OAAiD,GAAG,GAAG;OAEtG,MAAM,SAAS;QAAE,OAAO,IAAI;QAAO,GAAI,UAAU,QAAQ,CAAC,IAAI,EAAE,QAAQ,IAAI,OAAO;OAAG;OACtF,MAAM,IAAI,QAAQ,iBAAiB,QAAQ,cAAc;OACzD,qBAAqB,MAAM;MAC7B,OAAO;OACL,IAAI,CAAC,aAAa,OAAO,EAAE,KAAK,EAAE,OAAO,sCAAsC,GAAG,GAAG;OACrF,YAAY,OAAO,cAAc;MACnC;MACA,OAAO,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC;KAC5B,SAAS,OAAO;MACd,OAAO,EAAE,KAAK,EAAE,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,GAAG,GAAG;KACtF;IACF;GACF,CAAC;EACH;CACF;AACF"}

package/dist/routes/source-control-sessions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"source-control-sessions.d.ts","sourceRoot":"","sources":["../../src/routes/source-control-sessions.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAG1D,OAAO,KAAK,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAOnE,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,kCAAkC,CAAC;AAGrF,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,4CAA4C,CAAC;AACxF,OAAO,KAAK,EAGV,0BAA0B,EAC3B,MAAM,2CAA2C,CAAC;AACnD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uCAAuC,CAAC;AAC9E,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAoB5C,KAAK,wBAAwB,GAAG,IAAI,CAAC,aAAa,EAAE,SAAS,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC,CAAC;AAE1G,MAAM,WAAW,iCAAiC;IAChD,IAAI,EAAE,SAAS,CAAC;IAChB,cAAc,EAAE,SAAS,0BAA0B,EAAE,CAAC;IACtD,KAAK,CAAC,EAAE,wBAAwB,CAAC;IACjC,UAAU,CAAC,EAAE,iBAAiB,CAAC,YAAY,CAAC,CAAC;IAC7C,cAAc,EAAE,IAAI,CAAC,qBAAqB,EAAE,KAAK,CAAC,CAAC;IACnD,iBAAiB,CAAC,EAAE,4BAA4B,CAAC;IACjD,SAAS,CAAC,EAAE,IAAI,CAAC,gBAAgB,EAAE,wBAAwB,CAAC,CAAC;CAC9D;AAqRD,wBAAgB,+BAA+B,CAAC,OAAO,EAAE,iCAAiC,GAAG,QAAQ,EAAE,CAsHtG"}
+{"version":3,"file":"source-control-sessions.d.ts","sourceRoot":"","sources":["../../src/routes/source-control-sessions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAG1D,OAAO,KAAK,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAOnE,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,kCAAkC,CAAC;AAGrF,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,4CAA4C,CAAC;AACxF,OAAO,KAAK,EAGV,0BAA0B,EAC3B,MAAM,2CAA2C,CAAC;AACnD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uCAAuC,CAAC;AAC9E,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAoB5C,KAAK,wBAAwB,GAAG,IAAI,CAAC,aAAa,EAAE,SAAS,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC,CAAC;AAE1G,MAAM,WAAW,iCAAiC;IAChD,IAAI,EAAE,SAAS,CAAC;IAChB,cAAc,EAAE,SAAS,0BAA0B,EAAE,CAAC;IACtD,KAAK,CAAC,EAAE,wBAAwB,CAAC;IACjC,UAAU,CAAC,EAAE,iBAAiB,CAAC,YAAY,CAAC,CAAC;IAC7C,cAAc,EAAE,IAAI,CAAC,qBAAqB,EAAE,KAAK,CAAC,CAAC;IACnD,iBAAiB,CAAC,EAAE,4BAA4B,CAAC;IACjD,SAAS,CAAC,EAAE,IAAI,CAAC,gBAAgB,EAAE,wBAAwB,CAAC,CAAC;CAC9D;AAqRD,wBAAgB,+BAA+B,CAAC,OAAO,EAAE,iCAAiC,GAAG,QAAQ,EAAE,CAsHtG"}

package/dist/routes/source-control-sessions.js

@@ -4,7 +4,6 @@ import { reclaimDeletedSessionSandbox } from "../integrations/github/sandbox-rel
 import { isValidGitRef } from "../sandbox/git-ref.js";
 import { RequestContext } from "@mastra/core/request-context";
 import { registerApiRoute } from "@mastra/core/server";
-import { randomUUID } from "crypto";
 import { UniqueViolationError } from "@mastra/core/storage";
 import { resolveModel } from "@mastra/code-sdk/agents/model";
 //#region src/routes/source-control-sessions.ts
@@ -176,7 +175,7 @@ function projectSessionRoutes(path, options, resolveOwnerProfiles) {
 			if (!isValidGitRef(baseBranch)) return c.json({ error: "Invalid baseBranch" }, 400);
 			if (body.sessionId !== void 0 && (typeof body.sessionId !== "string" || !UUID_PATTERN.test(body.sessionId))) return c.json({ error: "Invalid sessionId" }, 400);
 			const requestedSessionId = body.sessionId;
-			const sessionId = requestedSessionId ?? randomUUID();
+			const sessionId = requestedSessionId ?? globalThis.crypto.randomUUID();
 			if (body.title !== void 0 && typeof body.title !== "string") return c.json({ error: "Invalid title" }, 400);
 			const normalizedTitle = body.title === void 0 ? null : normalizeSessionTitle(body.title);
 			let branch;