@mastra/factory 0.5.0 → 0.6.0-alpha.1

package/dist/integrations/slack/slack.d.ts

@@ -1,6 +1,8 @@
-import type { ChannelHandler, ChannelHandlers, ResolveResourceId, ResolveThreadId } from '@mastra/core/channels';
+import type { ChannelHandler, ChannelHandlers, ChannelSessionStart, ResolveResourceId, ResolveThreadId } from '@mastra/core/channels';
 import type { ChannelAccountLink, ChannelAccountLinkKey, ChannelIdentityStorage } from '../../storage/domains/channel-identity/base.js';
+import type { MemorySettingsStorage } from '../../storage/domains/memory-settings/base.js';
 import type { FactoryProjectsStorage } from '../../storage/domains/projects/base.js';
+import type { SourceControlStorageHandle } from '../../storage/domains/source-control/base.js';
 import type { WorkItemsStorage } from '../../storage/domains/work-items/base.js';
 import type { FactoryChannelsConfig } from '../base.js';
 type HandlerThread = Parameters<ChannelHandler>[0];
@@ -25,14 +27,22 @@ interface SlackChannelDeps {
      */
     projects?: FactoryProjectsStorage;
     /**
-     * Narrow source-control surface used to make new Slack threads repo-backed:
-     * when the sender is linked and their factory has a repository, the thread's
-     * resourceId becomes a Factory user-session id (repo cloned on a
-     * `slack/{threadTs}` branch) instead of the chat-only `channel:...` id.
-     * Absent (no source-control integration registered) → chat-only sessions as
-     * before.
+     * Storage handle of the integration that owns source control
+     * (`IntegrationContext.storage.sourceControlOwner`). Used to make new Slack
+     * threads repo-backed: when the sender is linked and their factory has a
+     * repository, the thread's resourceId becomes a Factory user-session id (repo
+     * cloned on a `slack/{threadTs}` branch) instead of the chat-only
+     * `channel:...` id. It also lets a started session read back the project it
+     * belongs to. Nothing here is provider-specific — the connection is matched
+     * by the handle's own `integrationId`. Absent (no source-control integration
+     * registered) → chat-only sessions as before.
      */
-    sourceControl?: SlackSourceControl;
+    sourceControl?: SourceControlStorageHandle;
+    /**
+     * Observational-memory settings domain. When provided, a repo-backed session
+     * adopts its owner's memory settings on start, matching the web kickoff.
+     */
+    memorySettings?: MemorySettingsStorage;
     /**
      * Factory work-items domain. When provided, a dispatched new-session thread
      * (DM or mention) upserts a Work-board card in Building (`execute`) carrying
@@ -41,108 +51,6 @@ interface SlackChannelDeps {
      */
     workItems?: WorkItemsStorage;
 }
-/**
- * The slice of the source-control owner's storage the Slack wiring needs.
- * Structural (not the storage types themselves) so slack.ts stays decoupled
- * from the owning integration's module graph and tests can stub it.
- */
-export interface SlackSourceControl {
-    /**
-     * Resolve the factory's linked repository — first repo on the factory's
-     * source-control connection, the same single-repo assumption the web kickoff
-     * makes.
-     */
-    resolveProjectRepository(args: {
-        orgId: string;
-        factoryProjectId: string;
-    }): Promise<{
-        projectRepositoryId: string;
-        baseBranch: string;
-    } | null>;
-    /** Look up an existing user session for a repo branch (idempotent reuse). */
-    getSessionForBranch(args: {
-        projectRepositoryId: string;
-        userId: string;
-        branch: string;
-    }): Promise<{
-        sessionId: string;
-    } | null>;
-    /** Create the durable user-session row the workspace factory materializes. */
-    createSession(args: {
-        projectRepositoryId: string;
-        orgId: string;
-        userId: string;
-        branch: string;
-        baseBranch: string;
-    }): Promise<{
-        sessionId: string;
-    }>;
-}
-/**
- * Structural slice of the source-control owner's storage handle
- * (`IntegrationContext.storage.sourceControlOwner`, a `SourceControlStorageHandle`)
- * the adapter reads. Structural so slack.ts stays decoupled from the storage
- * module graph and tests can stub it. The handle is bound during
- * `factory.prepare()`; all access here is lazy (request time).
- */
-interface SourceControlOwnerSlice {
-    integrationId: string;
-    connections: {
-        list(args: {
-            orgId: string;
-            factoryProjectId: string;
-        }): Promise<Array<{
-            id: string;
-            integrationId: string;
-        }>>;
-    };
-    projectRepositories: {
-        list(args: {
-            orgId: string;
-            connectionId: string;
-        }): Promise<Array<{
-            id: string;
-            repositoryId: string;
-            branch?: string | null;
-        }>>;
-    };
-    repositories: {
-        get(args: {
-            orgId: string;
-            id: string;
-        }): Promise<{
-            defaultBranch: string;
-        } | null>;
-    };
-    sessions: {
-        getForBranch(args: {
-            projectRepositoryId: string;
-            userId: string;
-            branch: string;
-        }): Promise<{
-            sessionId: string;
-        } | null>;
-        create(input: {
-            sessionId: string;
-            projectRepositoryId: string;
-            orgId: string;
-            userId: string;
-            branch: string;
-            baseBranch: string;
-        }): Promise<{
-            sessionId: string;
-        }>;
-    };
-}
-/**
- * Adapt the source-control owner's storage handle into the
- * {@link SlackSourceControl} surface. Nothing here is GitHub-specific — the
- * owner is whichever integration owns source control, matched by its own
- * `integrationId`. Repo resolution mirrors the factory's own
- * `ensureFactoryRuleSession`: the owner's connection on the factory → its
- * first linked repository → pinned branch or repo default as the base.
- */
-export declare function adaptSourceControlOwner(owner: SourceControlOwnerSlice): SlackSourceControl;
 /** Outcome of the sender-link gate for one inbound message. */
 type LinkedSenderResult = 
 /** Gating not configured — dispatch as before account linking existed. */
@@ -226,6 +134,25 @@ export declare function createChannelResourceIdResolver(deps: SlackChannelDeps):
  * resourceId is a memory key, not a unique thread id.
  */
 export declare const resolveChannelThreadId: ResolveThreadId;
+/**
+ * Apply the factory's configuration to a Slack-created session the first time
+ * its thread reaches the controller.
+ *
+ * Without this a Slack session runs on the SDK's built-in mode default
+ * (`openai/gpt-5.5`), so a factory configured for any other provider fails every
+ * message with a missing-credentials error. The web kickoff has always applied
+ * the factory default; this brings Slack to the same footing.
+ *
+ * Only repo-backed threads are configured. Their resourceId IS the Factory
+ * session id, which the source-control rows turn back into a project — a
+ * chat-only `channel:...` id names no project, so there is nothing to read.
+ *
+ * Skips a session whose mode already has a model persisted on the thread. That
+ * is the durable record of a deliberate choice — either an earlier start or a
+ * user's own switch — and re-applying the factory default over it would undo
+ * the user's selection every time the process restarts.
+ */
+export declare function createChannelSessionStartHook(deps: SlackChannelDeps): ChannelSessionStart;
 /**
  * Upsert the Work-board card for a dispatched Slack-thread run. Keyed on the
  * thread via `externalSource` — the work-items domain's unique

package/dist/integrations/slack/slack.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"slack.d.ts","sourceRoot":"","sources":["../../../src/integrations/slack/slack.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,cAAc,EAEd,eAAe,EACf,iBAAiB,EACjB,eAAe,EAChB,MAAM,uBAAuB,CAAC;AAK/B,OAAO,KAAK,EACV,kBAAkB,EAClB,qBAAqB,EACrB,sBAAsB,EACvB,MAAM,gDAAgD,CAAC;AACxD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,wCAAwC,CAAC;AACrF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0CAA0C,CAAC;AACjF,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAOxD,KAAK,aAAa,GAAG,UAAU,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC;AACnD,KAAK,cAAc,GAAG,UAAU,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC;AAEpD,uFAAuF;AACvF,UAAU,gBAAgB;IACxB;;;;;;OAMG;IACH,YAAY,CAAC,EAAE,sBAAsB,CAAC;IACtC;;;;;;;OAOG;IACH,QAAQ,CAAC,EAAE,sBAAsB,CAAC;IAClC;;;;;;;OAOG;IACH,aAAa,CAAC,EAAE,kBAAkB,CAAC;IACnC;;;;;OAKG;IACH,SAAS,CAAC,EAAE,gBAAgB,CAAC;CAC9B;AAED;;;;GAIG;AACH,MAAM,WAAW,kBAAkB;IACjC;;;;OAIG;IACH,wBAAwB,CAAC,IAAI,EAAE;QAC7B,KAAK,EAAE,MAAM,CAAC;QACd,gBAAgB,EAAE,MAAM,CAAC;KAC1B,GAAG,OAAO,CAAC;QAAE,mBAAmB,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC,CAAC;IACxE,6EAA6E;IAC7E,mBAAmB,CAAC,IAAI,EAAE;QACxB,mBAAmB,EAAE,MAAM,CAAC;QAC5B,MAAM,EAAE,MAAM,CAAC;QACf,MAAM,EAAE,MAAM,CAAC;KAChB,GAAG,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC,CAAC;IAC1C,8EAA8E;IAC9E,aAAa,CAAC,IAAI,EAAE;QAClB,mBAAmB,EAAE,MAAM,CAAC;QAC5B,KAAK,EAAE,MAAM,CAAC;QACd,MAAM,EAAE,MAAM,CAAC;QACf,MAAM,EAAE,MAAM,CAAC;QACf,UAAU,EAAE,MAAM,CAAC;KACpB,GAAG,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACpC;AAED;;;;;;GAMG;AACH,UAAU,uBAAuB;IAC/B,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE;QACX,IAAI,CAAC,IAAI,EAAE;YAAE,KAAK,EAAE,MAAM,CAAC;YAAC,gBAAgB,EAAE,MAAM,CAAA;SAAE,GAAG,OAAO,CAAC,KAAK,CAAC;YAAE,EAAE,EAAE,MAAM,CAAC;YAAC,aAAa,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC,CAAC;KAChH,CAAC;IACF,mBAAmB,EAAE;QACnB,IAAI,CAAC,IAAI,EAAE;YACT,KAAK,EAAE,MAAM,CAAC;YACd,YAAY,EAAE,MAAM,CAAC;SACtB,GAAG,OAAO,CAAC,KAAK,CAAC;YAAE,EAAE,EAAE,MAAM,CAAC;YAAC,YAAY,EAAE,MAAM,CAAC;YAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;SAAE,CAAC,CAAC,CAAC;KAClF,CAAC;IACF,YAAY,EAAE;QACZ,GAAG,CAAC,IAAI,EAAE;YAAE,KAAK,EAAE,MAAM,CAAC;YAAC,EAAE,EAAE,MAAM,CAAA;SAAE,GAAG,OAAO,CAAC;YAAE,aAAa,EAAE,MAAM,CAAA;SAAE,GAAG,IAAI,CAAC,CAAC;KACrF,CAAC;IACF,QAAQ,EAAE;QACR,YAAY,CAAC,IAAI,EAAE;YACjB,mBAAmB,EAAE,MAAM,CAAC;YAC5B,MAAM,EAAE,MAAM,CAAC;YACf,MAAM,EAAE,MAAM,CAAC;SAChB,GAAG,OAAO,CAAC;YAAE,SAAS,EAAE,MAAM,CAAA;SAAE,GAAG,IAAI,CAAC,CAAC;QAC1C,MAAM,CAAC,KAAK,EAAE;YACZ,SAAS,EAAE,MAAM,CAAC;YAClB,mBAAmB,EAAE,MAAM,CAAC;YAC5B,KAAK,EAAE,MAAM,CAAC;YACd,MAAM,EAAE,MAAM,CAAC;YACf,MAAM,EAAE,MAAM,CAAC;YACf,UAAU,EAAE,MAAM,CAAC;SACpB,GAAG,OAAO,CAAC;YAAE,SAAS,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;KACpC,CAAC;CACH;AAED;;;;;;;GAOG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,uBAAuB,GAAG,kBAAkB,CAgB1F;AAqCD,+DAA+D;AAC/D,KAAK,kBAAkB;AACrB,0EAA0E;AACxE;IAAE,MAAM,EAAE,SAAS,CAAA;CAAE;AACvB,8EAA8E;GAC5E;IAAE,MAAM,EAAE,SAAS,CAAA;CAAE;AACvB,6EAA6E;GAC3E;IAAE,MAAM,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,kBAAkB,CAAC;IAAC,GAAG,EAAE,qBAAqB,CAAA;CAAE,CAAC;AAE/E;;;;GAIG;AACH,wBAAsB,mBAAmB,CAAC,EACxC,MAAM,EACN,OAAO,EACP,YAAY,GACb,EAAE;IACD,MAAM,EAAE,aAAa,CAAC;IACtB,OAAO,EAAE,cAAc,CAAC;IACxB,YAAY,CAAC,EAAE,sBAAsB,CAAC;CACvC,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAmB9B;AAsBD,0EAA0E;AAC1E,KAAK,kBAAkB;AACrB,mEAAmE;AACjE;IAAE,MAAM,EAAE,SAAS,CAAA;CAAE;AACvB,iFAAiF;GAC/E;IAAE,MAAM,EAAE,SAAS,CAAA;CAAE;AACvB,uDAAuD;GACrD;IAAE,MAAM,EAAE,UAAU,CAAC;IAAC,gBAAgB,EAAE,MAAM,CAAC;IAAC,qBAAqB,EAAE,OAAO,CAAA;CAAE,CAAC;AAErF;;;;;;;;;GASG;AACH,wBAAsB,qBAAqB,CAAC,EAC1C,MAAM,EACN,OAAO,EACP,IAAI,EACJ,GAAG,EACH,YAAY,EACZ,QAAQ,GACT,EAAE;IACD,MAAM,EAAE,aAAa,CAAC;IACtB,OAAO,EAAE,cAAc,CAAC;IACxB,IAAI,EAAE,kBAAkB,CAAC;IACzB,GAAG,EAAE,qBAAqB,CAAC;IAC3B,YAAY,EAAE,sBAAsB,CAAC;IACrC,QAAQ,CAAC,EAAE,sBAAsB,CAAC;CACnC,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAoD9B;AAaD;;;;;;;;;;;GAWG;AACH,wBAAgB,+BAA+B,CAAC,IAAI,EAAE,gBAAgB,GAAG,iBAAiB,CAyDzF;AAED;;;;;;;;GAQG;AACH,eAAO,MAAM,sBAAsB,EAAE,eAC6B,CAAC;AAqEnE;;;;;;;;;;;;;GAaG;AACH,wBAAsB,oBAAoB,CAAC,EACzC,SAAS,EACT,MAAM,EACN,OAAO,EACP,IAAI,EACJ,gBAAgB,EAChB,OAAO,EACP,GAAG,GACJ,EAAE;IACD,SAAS,EAAE,gBAAgB,CAAC;IAC5B,MAAM,EAAE,aAAa,CAAC;IACtB,OAAO,EAAE,cAAc,CAAC;IACxB,IAAI,EAAE,kBAAkB,CAAC;IACzB,gBAAgB,EAAE,MAAM,CAAC;IACzB;;;OAGG;IACH,OAAO,CAAC,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IAClE,8EAA8E;IAC9E,GAAG,CAAC,EAAE,MAAM,CAAC;CACd,GAAG,OAAO,CAAC,IAAI,CAAC,CA2BhB;AAkGD,eAAO,MAAM,cAAc,GAAI,MAAM,gBAAgB,KAAG,eAoBvD,CAAC;AAEF,kFAAkF;AAClF,UAAU,gBAAgB;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,gBAAgB,GAAG;IAAE,KAAK,EAAE,gBAAgB,CAAA;CAAE,GAAG,qBAAqB,CAcrH"}
+{"version":3,"file":"slack.d.ts","sourceRoot":"","sources":["../../../src/integrations/slack/slack.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,cAAc,EAEd,eAAe,EACf,mBAAmB,EACnB,iBAAiB,EACjB,eAAe,EAChB,MAAM,uBAAuB,CAAC;AAW/B,OAAO,KAAK,EACV,kBAAkB,EAClB,qBAAqB,EACrB,sBAAsB,EACvB,MAAM,gDAAgD,CAAC;AACxD,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,+CAA+C,CAAC;AAC3F,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,wCAAwC,CAAC;AACrF,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,8CAA8C,CAAC;AAC/F,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0CAA0C,CAAC;AACjF,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAOxD,KAAK,aAAa,GAAG,UAAU,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC;AACnD,KAAK,cAAc,GAAG,UAAU,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC;AAEpD,uFAAuF;AACvF,UAAU,gBAAgB;IACxB;;;;;;OAMG;IACH,YAAY,CAAC,EAAE,sBAAsB,CAAC;IACtC;;;;;;;OAOG;IACH,QAAQ,CAAC,EAAE,sBAAsB,CAAC;IAClC;;;;;;;;;;OAUG;IACH,aAAa,CAAC,EAAE,0BAA0B,CAAC;IAC3C;;;OAGG;IACH,cAAc,CAAC,EAAE,qBAAqB,CAAC;IACvC;;;;;OAKG;IACH,SAAS,CAAC,EAAE,gBAAgB,CAAC;CAC9B;AAqCD,+DAA+D;AAC/D,KAAK,kBAAkB;AACrB,0EAA0E;AACxE;IAAE,MAAM,EAAE,SAAS,CAAA;CAAE;AACvB,8EAA8E;GAC5E;IAAE,MAAM,EAAE,SAAS,CAAA;CAAE;AACvB,6EAA6E;GAC3E;IAAE,MAAM,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,kBAAkB,CAAC;IAAC,GAAG,EAAE,qBAAqB,CAAA;CAAE,CAAC;AAE/E;;;;GAIG;AACH,wBAAsB,mBAAmB,CAAC,EACxC,MAAM,EACN,OAAO,EACP,YAAY,GACb,EAAE;IACD,MAAM,EAAE,aAAa,CAAC;IACtB,OAAO,EAAE,cAAc,CAAC;IACxB,YAAY,CAAC,EAAE,sBAAsB,CAAC;CACvC,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAmB9B;AAsBD,0EAA0E;AAC1E,KAAK,kBAAkB;AACrB,mEAAmE;AACjE;IAAE,MAAM,EAAE,SAAS,CAAA;CAAE;AACvB,iFAAiF;GAC/E;IAAE,MAAM,EAAE,SAAS,CAAA;CAAE;AACvB,uDAAuD;GACrD;IAAE,MAAM,EAAE,UAAU,CAAC;IAAC,gBAAgB,EAAE,MAAM,CAAC;IAAC,qBAAqB,EAAE,OAAO,CAAA;CAAE,CAAC;AAErF;;;;;;;;;GASG;AACH,wBAAsB,qBAAqB,CAAC,EAC1C,MAAM,EACN,OAAO,EACP,IAAI,EACJ,GAAG,EACH,YAAY,EACZ,QAAQ,GACT,EAAE;IACD,MAAM,EAAE,aAAa,CAAC;IACtB,OAAO,EAAE,cAAc,CAAC;IACxB,IAAI,EAAE,kBAAkB,CAAC;IACzB,GAAG,EAAE,qBAAqB,CAAC;IAC3B,YAAY,EAAE,sBAAsB,CAAC;IACrC,QAAQ,CAAC,EAAE,sBAAsB,CAAC;CACnC,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAoD9B;AAaD;;;;;;;;;;;GAWG;AACH,wBAAgB,+BAA+B,CAAC,IAAI,EAAE,gBAAgB,GAAG,iBAAiB,CA4DzF;AAED;;;;;;;;GAQG;AACH,eAAO,MAAM,sBAAsB,EAAE,eAC6B,CAAC;AAEnE;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,6BAA6B,CAAC,IAAI,EAAE,gBAAgB,GAAG,mBAAmB,CAoBzF;AAqED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,oBAAoB,CAAC,EACzC,SAAS,EACT,MAAM,EACN,OAAO,EACP,IAAI,EACJ,gBAAgB,EAChB,OAAO,EACP,GAAG,GACJ,EAAE;IACD,SAAS,EAAE,gBAAgB,CAAC;IAC5B,MAAM,EAAE,aAAa,CAAC;IACtB,OAAO,EAAE,cAAc,CAAC;IACxB,IAAI,EAAE,kBAAkB,CAAC;IACzB,gBAAgB,EAAE,MAAM,CAAC;IACzB;;;OAGG;IACH,OAAO,CAAC,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IAClE,8EAA8E;IAC9E,GAAG,CAAC,EAAE,MAAM,CAAC;CACd,GAAG,OAAO,CAAC,IAAI,CAAC,CA2BhB;AAkGD,eAAO,MAAM,cAAc,GAAI,MAAM,gBAAgB,KAAG,eAoBvD,CAAC;AAEF,kFAAkF;AAClF,UAAU,gBAAgB;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,gBAAgB,GAAG;IAAE,KAAK,EAAE,gBAAgB,CAAA;CAAE,GAAG,qBAAqB,CAiBrH"}

package/dist/integrations/slack/slack.js

@@ -1,46 +1,9 @@
+import { hydrateFactorySession, resolveFactoryDefaultModelId, resolveFactoryProjectForSession, resolveFactorySourceRepository } from "../../session/factory-session.js";
 import { randomUUID } from "crypto";
 import { createSlackAdapter } from "@mastra/slack";
 import { Actions, Card, CardText, LinkButton } from "chat";
 //#region src/integrations/slack/slack.ts
 /**
-* Adapt the source-control owner's storage handle into the
-* {@link SlackSourceControl} surface. Nothing here is GitHub-specific — the
-* owner is whichever integration owns source control, matched by its own
-* `integrationId`. Repo resolution mirrors the factory's own
-* `ensureFactoryRuleSession`: the owner's connection on the factory → its
-* first linked repository → pinned branch or repo default as the base.
-*/
-function adaptSourceControlOwner(owner) {
-	return {
-		async resolveProjectRepository({ orgId, factoryProjectId }) {
-			const connection = (await owner.connections.list({
-				orgId,
-				factoryProjectId
-			})).find((candidate) => candidate.integrationId === owner.integrationId);
-			if (!connection) return null;
-			const first = (await owner.projectRepositories.list({
-				orgId,
-				connectionId: connection.id
-			}))[0];
-			if (!first) return null;
-			const repository = await owner.repositories.get({
-				orgId,
-				id: first.repositoryId
-			});
-			if (!repository) return null;
-			return {
-				projectRepositoryId: first.id,
-				baseBranch: first.branch ?? repository.defaultBranch
-			};
-		},
-		getSessionForBranch: (args) => owner.sessions.getForBranch(args),
-		createSession: (args) => owner.sessions.create({
-			sessionId: randomUUID(),
-			...args
-		})
-	};
-}
-/**
 * Read the Slack team id off a raw platform payload (Events API envelope or
 * slash-command body — both carry `team_id`), duck-typed to build the
 * workspace-scoped account-link key.
@@ -204,19 +167,21 @@ function createChannelResourceIdResolver(deps) {
 				if (factories.length === 1) factoryProjectId = factories[0].id;
 			}
 			if (!factoryProjectId) return chatOnlyResourceId;
-			const repo = await sourceControl.resolveProjectRepository({
+			const repo = await resolveFactorySourceRepository({
+				sourceControl,
 				orgId,
 				factoryProjectId
 			});
-			if (!repo) return chatOnlyResourceId;
+			if (!repo.found) return chatOnlyResourceId;
 			const branch = threadBranch(thread.id);
-			const existing = await sourceControl.getSessionForBranch({
+			const existing = await sourceControl.sessions.getForBranch({
 				projectRepositoryId: repo.projectRepositoryId,
 				userId: link.userId,
 				branch
 			});
 			if (existing) return existing.sessionId;
-			return (await sourceControl.createSession({
+			return (await sourceControl.sessions.create({
+				sessionId: randomUUID(),
 				projectRepositoryId: repo.projectRepositoryId,
 				orgId,
 				userId: link.userId,
@@ -240,6 +205,45 @@ function createChannelResourceIdResolver(deps) {
 */
 const resolveChannelThreadId = ({ resourceId, defaultThreadId }) => resourceId.startsWith("channel:") ? defaultThreadId : resourceId;
 /**
+* Apply the factory's configuration to a Slack-created session the first time
+* its thread reaches the controller.
+*
+* Without this a Slack session runs on the SDK's built-in mode default
+* (`openai/gpt-5.5`), so a factory configured for any other provider fails every
+* message with a missing-credentials error. The web kickoff has always applied
+* the factory default; this brings Slack to the same footing.
+*
+* Only repo-backed threads are configured. Their resourceId IS the Factory
+* session id, which the source-control rows turn back into a project — a
+* chat-only `channel:...` id names no project, so there is nothing to read.
+*
+* Skips a session whose mode already has a model persisted on the thread. That
+* is the durable record of a deliberate choice — either an earlier start or a
+* user's own switch — and re-applying the factory default over it would undo
+* the user's selection every time the process restarts.
+*/
+function createChannelSessionStartHook(deps) {
+	const { projects, sourceControl, memorySettings } = deps;
+	return async ({ session, thread }) => {
+		if (!projects || !sourceControl) return;
+		if (thread.resourceId.startsWith("channel:")) return;
+		const modeModelKey = `modeModelId_${session.mode.get()}`;
+		if (await session.thread.getSetting({ key: modeModelKey })) return;
+		const owner = await resolveFactoryProjectForSession({
+			sourceControl,
+			sessionId: thread.resourceId
+		});
+		if (!owner) return;
+		const defaultModelId = await resolveFactoryDefaultModelId(projects, owner.factoryProjectId);
+		await hydrateFactorySession(session, {
+			orgId: owner.orgId,
+			userId: owner.userId,
+			defaultModelId,
+			memorySettings
+		});
+	};
+}
+/**
 * The internal Mastra thread the framework created for a channel conversation.
 * The handler's `thread.id` is the platform thread id (e.g. `slack:C123:ts`),
 * NOT the internal UUID — the mapping lives in the stored thread's channel
@@ -397,10 +401,11 @@ function createSlackChannelsConfig(deps) {
 		} },
 		handlers: createHandlers(deps),
 		resolveResourceId: createChannelResourceIdResolver(deps),
-		resolveThreadId: resolveChannelThreadId
+		resolveThreadId: resolveChannelThreadId,
+		onSessionStart: createChannelSessionStartHook(deps)
 	};
 }
 //#endregion
-export { adaptSourceControlOwner, createChannelResourceIdResolver, createHandlers, createSlackChannelsConfig, resolveChannelThreadId, resolveFactoryForLink, resolveLinkedSender, upsertThreadWorkItem };
+export { createChannelResourceIdResolver, createChannelSessionStartHook, createHandlers, createSlackChannelsConfig, resolveChannelThreadId, resolveFactoryForLink, resolveLinkedSender, upsertThreadWorkItem };
 
 //# sourceMappingURL=slack.js.map

package/dist/integrations/slack/slack.js.map

@@ -1 +1 @@
-{"version":3,"file":"slack.js","names":[],"sources":["../../../src/integrations/slack/slack.ts"],"sourcesContent":["import { randomUUID } from 'node:crypto';\n\nimport type {\n  ChannelHandler,\n  ChannelHandlerContext,\n  ChannelHandlers,\n  ResolveResourceId,\n  ResolveThreadId,\n} from '@mastra/core/channels';\nimport type { Mastra } from '@mastra/core/mastra';\nimport { createSlackAdapter } from '@mastra/slack';\nimport { Card, CardText, Actions, LinkButton } from 'chat';\n\nimport type {\n  ChannelAccountLink,\n  ChannelAccountLinkKey,\n  ChannelIdentityStorage,\n} from '../../storage/domains/channel-identity/base.js';\nimport type { FactoryProjectsStorage } from '../../storage/domains/projects/base.js';\nimport type { WorkItemsStorage } from '../../storage/domains/work-items/base.js';\nimport type { FactoryChannelsConfig } from '../base.js';\n\n// Derive the thread/message types from the core handler signature rather than\n// importing them from `chat` directly: mc-web can resolve a different `chat`\n// version than @mastra/core, and the two `Thread`/`Message` declarations are\n// structurally incompatible (private fields). Using the handler's own types\n// keeps everything on one version.\ntype HandlerThread = Parameters<ChannelHandler>[0];\ntype HandlerMessage = Parameters<ChannelHandler>[1];\n\n/** Dependencies the Slack channel handlers close over, injected from the web entry. */\ninterface SlackChannelDeps {\n  /**\n   * The factory's reverse-index store mapping a Slack sender to a Mastra\n   * tenant. When provided, inbound messages from an unlinked sender are not\n   * dispatched — the run only proceeds (with the sender's tenant stamped on\n   * the request context) once they've linked their account. Unlinked senders\n   * get an ephemeral \"connect your account\" card instead.\n   */\n  accountLinks?: ChannelIdentityStorage;\n  /**\n   * Factory projects domain. When provided (alongside `accountLinks`), a\n   * linked sender's run must also resolve to a Factory project before it\n   * dispatches: their link's default factory, else their tenant's only\n   * factory (stamped back onto the link), else an ephemeral \"pick a default\n   * factory\" card and no run. Unset → no factory routing (runs dispatch as\n   * before).\n   */\n  projects?: FactoryProjectsStorage;\n  /**\n   * Narrow source-control surface used to make new Slack threads repo-backed:\n   * when the sender is linked and their factory has a repository, the thread's\n   * resourceId becomes a Factory user-session id (repo cloned on a\n   * `slack/{threadTs}` branch) instead of the chat-only `channel:...` id.\n   * Absent (no source-control integration registered) → chat-only sessions as\n   * before.\n   */\n  sourceControl?: SlackSourceControl;\n  /**\n   * Factory work-items domain. When provided, a dispatched new-session thread\n   * (DM or mention) upserts a Work-board card in Building (`execute`) carrying\n   * the Slack thread as its external source and binding the repo-backed\n   * session. Best-effort — a failure never blocks the run. Unset → no card.\n   */\n  workItems?: WorkItemsStorage;\n}\n\n/**\n * The slice of the source-control owner's storage the Slack wiring needs.\n * Structural (not the storage types themselves) so slack.ts stays decoupled\n * from the owning integration's module graph and tests can stub it.\n */\nexport interface SlackSourceControl {\n  /**\n   * Resolve the factory's linked repository — first repo on the factory's\n   * source-control connection, the same single-repo assumption the web kickoff\n   * makes.\n   */\n  resolveProjectRepository(args: {\n    orgId: string;\n    factoryProjectId: string;\n  }): Promise<{ projectRepositoryId: string; baseBranch: string } | null>;\n  /** Look up an existing user session for a repo branch (idempotent reuse). */\n  getSessionForBranch(args: {\n    projectRepositoryId: string;\n    userId: string;\n    branch: string;\n  }): Promise<{ sessionId: string } | null>;\n  /** Create the durable user-session row the workspace factory materializes. */\n  createSession(args: {\n    projectRepositoryId: string;\n    orgId: string;\n    userId: string;\n    branch: string;\n    baseBranch: string;\n  }): Promise<{ sessionId: string }>;\n}\n\n/**\n * Structural slice of the source-control owner's storage handle\n * (`IntegrationContext.storage.sourceControlOwner`, a `SourceControlStorageHandle`)\n * the adapter reads. Structural so slack.ts stays decoupled from the storage\n * module graph and tests can stub it. The handle is bound during\n * `factory.prepare()`; all access here is lazy (request time).\n */\ninterface SourceControlOwnerSlice {\n  integrationId: string;\n  connections: {\n    list(args: { orgId: string; factoryProjectId: string }): Promise<Array<{ id: string; integrationId: string }>>;\n  };\n  projectRepositories: {\n    list(args: {\n      orgId: string;\n      connectionId: string;\n    }): Promise<Array<{ id: string; repositoryId: string; branch?: string | null }>>;\n  };\n  repositories: {\n    get(args: { orgId: string; id: string }): Promise<{ defaultBranch: string } | null>;\n  };\n  sessions: {\n    getForBranch(args: {\n      projectRepositoryId: string;\n      userId: string;\n      branch: string;\n    }): Promise<{ sessionId: string } | null>;\n    create(input: {\n      sessionId: string;\n      projectRepositoryId: string;\n      orgId: string;\n      userId: string;\n      branch: string;\n      baseBranch: string;\n    }): Promise<{ sessionId: string }>;\n  };\n}\n\n/**\n * Adapt the source-control owner's storage handle into the\n * {@link SlackSourceControl} surface. Nothing here is GitHub-specific — the\n * owner is whichever integration owns source control, matched by its own\n * `integrationId`. Repo resolution mirrors the factory's own\n * `ensureFactoryRuleSession`: the owner's connection on the factory → its\n * first linked repository → pinned branch or repo default as the base.\n */\nexport function adaptSourceControlOwner(owner: SourceControlOwnerSlice): SlackSourceControl {\n  return {\n    async resolveProjectRepository({ orgId, factoryProjectId }) {\n      const connections = await owner.connections.list({ orgId, factoryProjectId });\n      const connection = connections.find(candidate => candidate.integrationId === owner.integrationId);\n      if (!connection) return null;\n      const projectRepositories = await owner.projectRepositories.list({ orgId, connectionId: connection.id });\n      const first = projectRepositories[0];\n      if (!first) return null;\n      const repository = await owner.repositories.get({ orgId, id: first.repositoryId });\n      if (!repository) return null;\n      return { projectRepositoryId: first.id, baseBranch: first.branch ?? repository.defaultBranch };\n    },\n    getSessionForBranch: args => owner.sessions.getForBranch(args),\n    createSession: args => owner.sessions.create({ sessionId: randomUUID(), ...args }),\n  };\n}\n\n/**\n * Read the Slack team id off a raw platform payload (Events API envelope or\n * slash-command body — both carry `team_id`), duck-typed to build the\n * workspace-scoped account-link key.\n */\nfunction rawTeamId(rawPayload: unknown): string | undefined {\n  if (!rawPayload || typeof rawPayload !== 'object') return undefined;\n  const raw = rawPayload as { team_id?: unknown; team?: unknown };\n  if (typeof raw.team_id === 'string' && raw.team_id) return raw.team_id;\n  if (typeof raw.team === 'string' && raw.team) return raw.team;\n  if (raw.team && typeof raw.team === 'object') {\n    const id = (raw.team as { id?: unknown }).id;\n    if (typeof id === 'string' && id) return id;\n  }\n  return undefined;\n}\n\n/**\n * The Slack team id survives onto a normalized chat Message only on\n * `message.raw` (the Slack Events API envelope).\n */\nfunction slackTeamId(message: HandlerMessage): string | undefined {\n  return rawTeamId(message.raw);\n}\n\n/**\n * Resolve the web-UI origin for links humans open in a browser (Connect card,\n * session deep links). Prefers `MASTRACODE_PUBLIC_URL` — the origin auth\n * cookies and OAuth redirect allow-lists are registered against — over the\n * channels tunnel, which only Slack's servers need to reach.\n */\nfunction webPublicUrl(): string | undefined {\n  return process.env.MASTRACODE_PUBLIC_URL ?? process.env.MASTRACODE_CHANNELS_PUBLIC_URL;\n}\n\n/** Outcome of the sender-link gate for one inbound message. */\ntype LinkedSenderResult =\n  /** Gating not configured — dispatch as before account linking existed. */\n  | { status: 'ungated' }\n  /** Sender unlinked — Connect card posted (when possible), do not dispatch. */\n  | { status: 'blocked' }\n  /** Sender linked — their tenant plus the sender key the link lives under. */\n  | { status: 'linked'; link: ChannelAccountLink; key: ChannelAccountLinkKey };\n\n/**\n * Resolve the sender's account link, posting an ephemeral \"connect your\n * account\" card (visible only to the sender) linking into the web UI's\n * Slack-connect flow when they're unlinked.\n */\nexport async function resolveLinkedSender({\n  thread,\n  message,\n  accountLinks,\n}: {\n  thread: HandlerThread;\n  message: HandlerMessage;\n  accountLinks?: ChannelIdentityStorage;\n}): Promise<LinkedSenderResult> {\n  if (!accountLinks) return { status: 'ungated' };\n  const platform = thread.adapter.name;\n  const externalUserId = message.author.userId;\n  const externalTeamId = slackTeamId(message);\n  // Without a team id we can't identify the workspace-scoped link; treat as\n  // unlinked so a run never proceeds tenant-less.\n  const key = externalTeamId ? { platform, externalTeamId, externalUserId } : undefined;\n  const link = key ? await accountLinks.getAccountLink(key) : null;\n  if (link && key) return { status: 'linked', link, key };\n\n  const publicUrl = webPublicUrl();\n  // A public origin is all the card needs. The link carries no identity: the\n  // web app authenticates the visitor, then Slack's OIDC flow proves which\n  // Slack account they control. Without an origin, still block, just no card.\n  if (publicUrl) {\n    await thread.postEphemeral(message.author, buildConnectCard(publicUrl), { fallbackToDM: true });\n  }\n  return { status: 'blocked' };\n}\n\n/**\n * The \"connect your account\" card. The link is deliberately identity-free —\n * `/connect/slack` sends the visitor to Connections, where \"Connect Slack\"\n * runs the OIDC flow and Slack itself asserts the (team, user) pair.\n */\nfunction buildConnectCard(publicUrl: string) {\n  return Card({\n    title: 'Connect your account',\n    children: [\n      CardText('Connect your account to use this agent.'),\n      Actions([\n        LinkButton({\n          url: `${publicUrl}/connect/slack`,\n          label: 'Connect account',\n        }),\n      ]),\n    ],\n  });\n}\n\n/** Outcome of factory routing for one linked sender's inbound message. */\ntype FactoryRouteResult =\n  /** Factory routing not configured — dispatch without a factory. */\n  | { status: 'ungated' }\n  /** No factory resolved — prompt card posted (when possible), do not dispatch. */\n  | { status: 'blocked' }\n  /** The Factory project this sender's runs route to. */\n  | { status: 'resolved'; factoryProjectId: string; slackWorkItemsEnabled: boolean };\n\n/**\n * Decide which Factory project a linked sender's run belongs to:\n *\n * 1. The link's `defaultFactoryProjectId`, when it still exists (a stale id —\n *    deleted factory — falls through as if unset).\n * 2. Else, the tenant's only factory, stamped back onto the link so it shows\n *    up (and stays editable) in Connected Accounts settings.\n * 3. Else — zero or several factories — an ephemeral \"pick a default factory\"\n *    card deep-linking to settings, and the run is blocked.\n */\nexport async function resolveFactoryForLink({\n  thread,\n  message,\n  link,\n  key,\n  accountLinks,\n  projects,\n}: {\n  thread: HandlerThread;\n  message: HandlerMessage;\n  link: ChannelAccountLink;\n  key: ChannelAccountLinkKey;\n  accountLinks: ChannelIdentityStorage;\n  projects?: FactoryProjectsStorage;\n}): Promise<FactoryRouteResult> {\n  if (!projects) return { status: 'ungated' };\n  // Factories are org-scoped; a personal account (no org) has none and lands\n  // on the prompt below.\n  const orgId = link.orgId ?? '';\n\n  if (link.defaultFactoryProjectId) {\n    const existing = await projects.get({ orgId, id: link.defaultFactoryProjectId });\n    if (existing) {\n      return {\n        status: 'resolved',\n        factoryProjectId: existing.id,\n        slackWorkItemsEnabled: existing.slackWorkItemsEnabled,\n      };\n    }\n  }\n\n  const factories = orgId ? await projects.list({ orgId }) : [];\n  if (factories.length === 1) {\n    const only = factories[0]!;\n    await accountLinks.setDefaultFactory({ ...key, userId: link.userId, factoryProjectId: only.id });\n    return {\n      status: 'resolved',\n      factoryProjectId: only.id,\n      slackWorkItemsEnabled: only.slackWorkItemsEnabled,\n    };\n  }\n\n  const publicUrl = webPublicUrl();\n  if (publicUrl) {\n    await thread.postEphemeral(\n      message.author,\n      Card({\n        title: 'Pick a default factory',\n        children: [\n          CardText(\n            factories.length === 0\n              ? 'Your account has no factory yet. Create one in the web app, then message me again.'\n              : 'Your account has several factories. Pick which one Slack sessions should go to, then message me again.',\n          ),\n          Actions([\n            LinkButton({\n              url: `${publicUrl}/settings/connections`,\n              label: 'Open settings',\n            }),\n          ]),\n        ],\n      }),\n      { fallbackToDM: true },\n    );\n  }\n  return { status: 'blocked' };\n}\n\n/**\n * Deterministic per-thread branch name: `slack/{threadTs}` with characters\n * outside the sandbox git-ref allow-list (`[A-Za-z0-9_./-]`, and `.` for\n * readability) mapped to `-`. `thread.id` is `{channelId}:{threadTs}`\n * (platform-prefixed on handler threads) — the trailing segment is the ts.\n */\nfunction threadBranch(threadId: string): string {\n  const ts = threadId.split(':').at(-1) ?? threadId;\n  return `slack/${ts.replace(/[^A-Za-z0-9_/-]/g, '-')}`;\n}\n\n/**\n * Resolve the resourceId for a NEW Slack channel thread. A linked sender whose\n * factory has a repository gets a Factory user-session id — the controller\n * session then materializes the repo sandbox via the factory's dynamic\n * workspace (clone + PAT), the session shows up in the web Sessions list, and\n * View Session deep-links land on the normal workspace route. Everything else\n * (unlinked, unrouted, repo-less, or no source control) keeps the chat-only\n * `defaultResourceId`.\n *\n * Pure lookups only — cards for unlinked/unrouted senders are the dispatch\n * gate's job; this hook must never post.\n */\nexport function createChannelResourceIdResolver(deps: SlackChannelDeps): ResolveResourceId {\n  const { accountLinks, projects, sourceControl } = deps;\n  return async ({ platform, thread, message }) => {\n    // NOT the hook's `defaultResourceId`: configuring a custom resolver\n    // bypasses AgentControllerChannels' own `channel:{thread.id}` derivation\n    // (agent-controller-channels.ts `resolveChannelResourceId`), and the base\n    // default is the per-USER memory key. Chat-only fallbacks must stay\n    // per-thread, so reproduce the controller default here.\n    const chatOnlyResourceId = `channel:${thread.id}`;\n    if (!accountLinks || !projects || !sourceControl) return chatOnlyResourceId;\n    try {\n      const externalTeamId = rawTeamId(message.raw);\n      if (!externalTeamId) return chatOnlyResourceId;\n      const link = await accountLinks.getAccountLink({\n        platform,\n        externalTeamId,\n        externalUserId: message.author.userId,\n      });\n      if (!link) return chatOnlyResourceId;\n\n      // Same chain as `resolveFactoryForLink`, minus prompts/stamping: the\n      // dispatch gate has already run (and stamped a lone factory) by the\n      // time a new thread is created, so this is a read-only re-resolve.\n      const orgId = link.orgId ?? '';\n      let factoryProjectId: string | undefined;\n      if (link.defaultFactoryProjectId && (await projects.get({ orgId, id: link.defaultFactoryProjectId }))) {\n        factoryProjectId = link.defaultFactoryProjectId;\n      } else if (orgId) {\n        const factories = await projects.list({ orgId });\n        if (factories.length === 1) factoryProjectId = factories[0]!.id;\n      }\n      if (!factoryProjectId) return chatOnlyResourceId;\n\n      const repo = await sourceControl.resolveProjectRepository({ orgId, factoryProjectId });\n      if (!repo) return chatOnlyResourceId;\n\n      const branch = threadBranch(thread.id);\n      const existing = await sourceControl.getSessionForBranch({\n        projectRepositoryId: repo.projectRepositoryId,\n        userId: link.userId,\n        branch,\n      });\n      if (existing) return existing.sessionId;\n      const session = await sourceControl.createSession({\n        projectRepositoryId: repo.projectRepositoryId,\n        orgId,\n        userId: link.userId,\n        branch,\n        baseBranch: repo.baseBranch,\n      });\n      return session.sessionId;\n    } catch (error) {\n      // Fall back to a chat-only session rather than dropping the message.\n      console.warn('[slack] repo-backed session resolution failed for thread', thread.id, error);\n      return chatOnlyResourceId;\n    }\n  };\n}\n\n/**\n * Thread id for a NEW Slack channel thread. Repo-backed threads take the\n * user-session id AS their thread id, matching the web convention\n * (FactoryStartCoordinator seeds threads with threadId = sessionId) so\n * `/workspaces/{sessionId}/threads/{sessionId}` resolves Slack-created\n * sessions exactly like web-created ones — no `?resourceId=` override needed.\n * Chat-only threads keep the default random id: their `channel:...`\n * resourceId is a memory key, not a unique thread id.\n */\nexport const resolveChannelThreadId: ResolveThreadId = ({ resourceId, defaultThreadId }) =>\n  resourceId.startsWith('channel:') ? defaultThreadId : resourceId;\n\n/**\n * The internal Mastra thread the framework created for a channel conversation.\n * The handler's `thread.id` is the platform thread id (e.g. `slack:C123:ts`),\n * NOT the internal UUID — the mapping lives in the stored thread's channel\n * metadata.\n */\nasync function findInternalThread(mastra: Mastra | undefined, thread: HandlerThread) {\n  const store = await mastra?.getStorage()?.getStore('memory');\n  const { threads } = (await store?.listThreads({\n    filter: {\n      metadata: {\n        channel_platform: thread.adapter.name,\n        channel_externalThreadId: thread.id,\n        channel_externalChannelId: thread.channelId,\n      },\n    },\n    perPage: 1,\n  })) ?? { threads: [] };\n  return threads[0];\n}\n\n/**\n * Build the \"new session\" handler for mention / direct-message events. A mention or\n * DM on a not-yet-subscribed thread starts a NEW session; once subscribed, later\n * events are follow-ups and don't re-announce.\n */\n/**\n * Run the account-link + factory-routing gates for one inbound message.\n * Returns `null` when the run must not dispatch (a prompt card was posted\n * where possible); otherwise the dispatch context — with `routed` present\n * only when a linked sender resolved to a factory.\n */\nasync function gateDispatch(\n  thread: HandlerThread,\n  message: HandlerMessage,\n  { accountLinks, projects }: SlackChannelDeps,\n  ctx: ChannelHandlerContext,\n): Promise<{\n  routed?: { link: ChannelAccountLink; factoryProjectId: string; slackWorkItemsEnabled: boolean };\n} | null> {\n  const sender = await resolveLinkedSender({ thread, message, accountLinks });\n  if (sender.status === 'blocked') return null;\n  // Linked senders must also route to a Factory project before a run starts.\n  if (sender.status === 'linked' && accountLinks) {\n    // Stamp the tenant on the run's request context — the single seam\n    // `resolveCredentialStore` reads to load this sender's model credentials.\n    // This belongs to the link, not to the routing: a linked sender whose\n    // factory routing comes back `ungated` still exits below and dispatches, so\n    // stamping only in the routed branch would silently run them on default\n    // credentials.\n    ctx.requestContext.set('user', { id: sender.link.userId, organizationId: sender.link.orgId });\n\n    const route = await resolveFactoryForLink({ thread, message, ...sender, accountLinks, projects });\n    if (route.status === 'blocked') return null;\n    if (route.status === 'resolved') {\n      return {\n        routed: {\n          link: sender.link,\n          factoryProjectId: route.factoryProjectId,\n          slackWorkItemsEnabled: route.slackWorkItemsEnabled,\n        },\n      };\n    }\n  }\n  return {};\n}\n\n/**\n * Upsert the Work-board card for a dispatched Slack-thread run. Keyed on the\n * thread via `externalSource` — the work-items domain's unique\n * `(factory_project_id, source_key)` index makes repeat messages reuse the\n * same card, and `reuseMode: 'preserve'` keeps a card a human already dragged\n * across stages untouched. The card lands in Building (`execute`) for every\n * dispatched thread (DM or mention) — there is deliberately no per-origin\n * stage split; smart routing is a follow-up.\n *\n * The session id / branch / threadId and the workspace deep-link are resolved\n * by the caller (which already looked up the internal thread), so this helper\n * just shapes and writes. Best-effort: the run is already dispatched, so a\n * failure logs instead of throwing — work-item creation must never abort a Slack run.\n */\nexport async function upsertThreadWorkItem({\n  workItems,\n  thread,\n  message,\n  link,\n  factoryProjectId,\n  session,\n  url,\n}: {\n  workItems: WorkItemsStorage;\n  thread: HandlerThread;\n  message: HandlerMessage;\n  link: ChannelAccountLink;\n  factoryProjectId: string;\n  /**\n   * The repo-backed Factory session to bind under the `chat` role, or\n   * `undefined` for a chat-only thread (no Factory session to bind).\n   */\n  session?: { sessionId: string; branch: string; threadId: string };\n  /** Workspace deep-link to the running session; omitted when no public URL. */\n  url?: string;\n}): Promise<void> {\n  try {\n    const title = message.text.length > 80 ? `${message.text.slice(0, 79)}…` : message.text;\n\n    await workItems.upsert({\n      orgId: link.orgId ?? '',\n      userId: link.userId,\n      factoryProjectId,\n      reuseMode: 'preserve',\n      input: {\n        title: title || 'Slack thread',\n        // `integrationId` is the platform ('slack'); `type` is a single\n        // constant (no DM/mention distinction); `externalId` is the stable\n        // platform thread id — together they form the idempotency key.\n        externalSource: {\n          integrationId: thread.adapter.name,\n          type: 'slack-thread',\n          externalId: thread.id,\n          ...(url ? { url } : {}),\n        },\n        stages: ['execute'],\n        ...(session ? { sessions: { chat: session } } : {}),\n      },\n    });\n  } catch (error) {\n    console.warn('[slack] work-item creation failed for thread', thread.id, error);\n  }\n}\n\nfunction createNewSessionChatHandler(deps: SlackChannelDeps): ChannelHandler {\n  const { workItems } = deps;\n  return async (thread, message, defaultHandler, ctx) => {\n    // Gate on the sender having linked their Slack account to a Mastra tenant.\n    // Unlinked → post the ephemeral Connect card and stop; no session/run is\n    // created (which would otherwise be tenant-less and fail credential\n    // resolution). This handler is the only gate — core dispatches whatever\n    // reaches it — so every slot that can start a run must call it.\n    const gate = await gateDispatch(thread, message, deps, ctx);\n    if (!gate) return;\n\n    // A mention on a not-yet-subscribed thread is a NEW session. The\n    // default handler auto-subscribes, so once subscribed this is a\n    // follow-up mention — don't re-announce.\n    const isNewSession = !(await thread.isSubscribed());\n\n    // Run the framework handler first so the internal Mastra thread and\n    // controller session are created before we build the deep link.\n    await defaultHandler(thread, message);\n\n    if (!isNewSession) return;\n\n    // The internal-thread lookup and deep-link are needed by BOTH the\n    // announcement card AND work-item creation, so they run BEFORE the\n    // card-only `MASTRACODE_PUBLIC_URL` gate — a deployment without a public\n    // origin should still create board cards, just without a clickable link.\n    const internalThread = await findInternalThread(ctx.mastra, thread);\n    if (!internalThread) {\n      console.warn('[onMention] no internal thread found for', thread.id);\n      return;\n    }\n\n    // When the sender routed to a factory we know exactly which workspace the\n    // session belongs to — deep-link straight into it. A repo-backed thread's\n    // resourceId IS the Factory user-session id, so the link lands on the same\n    // route a web-started run navigates to; chat-only threads keep the literal\n    // `channel` segment (the real resource rides the `?resourceId=` override).\n    // Unrouted senders fall back to the factory-agnostic /threads/ redirect.\n    // One predicate drives both the path segment and the query param, so the\n    // two can never disagree about what the URL already carries.\n    const isChatOnly = internalThread.resourceId.startsWith('channel:');\n    const workspaceSegment = isChatOnly ? 'channel' : encodeURIComponent(internalThread.resourceId);\n    const threadPath = gate.routed\n      ? `/factories/${encodeURIComponent(gate.routed.factoryProjectId)}/workspaces/${workspaceSegment}/threads/${encodeURIComponent(internalThread.id)}`\n      : `/threads/${internalThread.id}`;\n\n    // The param is an override for a URL that can't otherwise name its\n    // resource. A routed repo-backed thread already spells the resourceId out\n    // as its workspace segment, so appending it again is duplication the app\n    // ignores. Chat-only threads need it (their segment is the literal string\n    // `channel`), and so does the unrouted fallback, which has no workspace\n    // segment at all — `ChannelThreadRedirect` forwards the search through.\n    //\n    // One shared deep-link: the card's button and the work-item `url` read the\n    // SAME value so they can never drift. Undefined without a public origin —\n    // the card is then skipped, but the work item is still created (url omitted).\n    const needsResourceParam = isChatOnly || !gate.routed;\n    const deepLink = process.env.MASTRACODE_PUBLIC_URL\n      ? needsResourceParam\n        ? `${process.env.MASTRACODE_PUBLIC_URL}${threadPath}?resourceId=${encodeURIComponent(internalThread.resourceId)}`\n        : `${process.env.MASTRACODE_PUBLIC_URL}${threadPath}`\n      : undefined;\n\n    // A dispatched, routed new-session thread becomes a Work-board card in\n    // Building. Only routed senders (linked → factory) have the org/user/factory\n    // a work item needs. Bind the repo-backed Factory session under the `chat`\n    // role; a chat-only `channel:` resourceId is NOT a session id, so bind\n    // nothing rather than a bad id. Best-effort (the helper swallows failures).\n    if (workItems && gate.routed?.slackWorkItemsEnabled) {\n      const session = isChatOnly\n        ? undefined\n        : { sessionId: internalThread.resourceId, branch: threadBranch(thread.id), threadId: internalThread.id };\n      await upsertThreadWorkItem({\n        workItems,\n        thread,\n        message,\n        link: gate.routed.link,\n        factoryProjectId: gate.routed.factoryProjectId,\n        session,\n        url: deepLink,\n      });\n    }\n\n    // The announcement card is only useful with a public origin to deep-link\n    // to — otherwise the link would be `undefined/threads/...`. Without one the\n    // session (and now the work item) still exist; we just skip the broken card.\n    if (!deepLink) return;\n\n    await thread.post(\n      Card({\n        title: 'New session started',\n        children: [Actions([LinkButton({ url: deepLink, label: 'View session' })])],\n      }),\n    );\n  };\n}\nexport const createHandlers = (deps: SlackChannelDeps): ChannelHandlers => {\n  const newSessionChatHandler = createNewSessionChatHandler(deps);\n\n  return {\n    onSubscribedMessage: async (thread, message, defaultHandler, ctx) => {\n      // `aside` as its own leading word lets humans talk in a subscribed\n      // thread without the bot replying. Word boundary so messages that\n      // merely start with \"aside...\" (e.g. \"asides can wait\") still route.\n      if (/^aside\\b/i.test(message.text)) return;\n      // A subscribed follow-up from an unlinked sender must not run either\n      // (e.g. the link was removed mid-conversation), and it must still\n      // resolve a factory (e.g. the default was cleared or its factory\n      // deleted mid-conversation).\n      const gate = await gateDispatch(thread, message, deps, ctx);\n      if (!gate) return;\n      await defaultHandler(thread, message);\n    },\n    onMention: newSessionChatHandler,\n    onDirectMessage: newSessionChatHandler,\n  };\n};\n\n/** Slack app credentials, passed in explicitly rather than read from env here. */\ninterface SlackCredentials {\n  clientId?: string;\n  clientSecret?: string;\n  signingSecret: string;\n  botToken?: string;\n}\n\nexport function createSlackChannelsConfig(deps: SlackChannelDeps & { slack: SlackCredentials }): FactoryChannelsConfig {\n  return {\n    adapters: {\n      slack: {\n        adapter: createSlackAdapter(deps.slack),\n        toolDisplay: 'hidden',\n      },\n    },\n    handlers: createHandlers(deps),\n    // New linked+repo-backed threads own a Factory user-session id as their\n    // resourceId, which is what makes the controller session repo-backed.\n    resolveResourceId: createChannelResourceIdResolver(deps),\n    resolveThreadId: resolveChannelThreadId,\n  };\n}\n"],"mappings":";;;;;;;;;;;;AAgJA,SAAgB,wBAAwB,OAAoD;CAC1F,OAAO;EACL,MAAM,yBAAyB,EAAE,OAAO,oBAAoB;GAE1D,MAAM,cAAa,MADO,MAAM,YAAY,KAAK;IAAE;IAAO;GAAiB,CAAC,EAAA,CAC7C,MAAK,cAAa,UAAU,kBAAkB,MAAM,aAAa;GAChG,IAAI,CAAC,YAAY,OAAO;GAExB,MAAM,SAAQ,MADoB,MAAM,oBAAoB,KAAK;IAAE;IAAO,cAAc,WAAW;GAAG,CAAC,EAAA,CACrE;GAClC,IAAI,CAAC,OAAO,OAAO;GACnB,MAAM,aAAa,MAAM,MAAM,aAAa,IAAI;IAAE;IAAO,IAAI,MAAM;GAAa,CAAC;GACjF,IAAI,CAAC,YAAY,OAAO;GACxB,OAAO;IAAE,qBAAqB,MAAM;IAAI,YAAY,MAAM,UAAU,WAAW;GAAc;EAC/F;EACA,sBAAqB,SAAQ,MAAM,SAAS,aAAa,IAAI;EAC7D,gBAAe,SAAQ,MAAM,SAAS,OAAO;GAAE,WAAW,WAAW;GAAG,GAAG;EAAK,CAAC;CACnF;AACF;;;;;;AAOA,SAAS,UAAU,YAAyC;CAC1D,IAAI,CAAC,cAAc,OAAO,eAAe,UAAU,OAAO,KAAA;CAC1D,MAAM,MAAM;CACZ,IAAI,OAAO,IAAI,YAAY,YAAY,IAAI,SAAS,OAAO,IAAI;CAC/D,IAAI,OAAO,IAAI,SAAS,YAAY,IAAI,MAAM,OAAO,IAAI;CACzD,IAAI,IAAI,QAAQ,OAAO,IAAI,SAAS,UAAU;EAC5C,MAAM,KAAM,IAAI,KAA0B;EAC1C,IAAI,OAAO,OAAO,YAAY,IAAI,OAAO;CAC3C;AAEF;;;;;AAMA,SAAS,YAAY,SAA6C;CAChE,OAAO,UAAU,QAAQ,GAAG;AAC9B;;;;;;;AAQA,SAAS,eAAmC;CAC1C,OAAO,QAAQ,IAAI,yBAAyB,QAAQ,IAAI;AAC1D;;;;;;AAgBA,eAAsB,oBAAoB,EACxC,QACA,SACA,gBAK8B;CAC9B,IAAI,CAAC,cAAc,OAAO,EAAE,QAAQ,UAAU;CAC9C,MAAM,WAAW,OAAO,QAAQ;CAChC,MAAM,iBAAiB,QAAQ,OAAO;CACtC,MAAM,iBAAiB,YAAY,OAAO;CAG1C,MAAM,MAAM,iBAAiB;EAAE;EAAU;EAAgB;CAAe,IAAI,KAAA;CAC5E,MAAM,OAAO,MAAM,MAAM,aAAa,eAAe,GAAG,IAAI;CAC5D,IAAI,QAAQ,KAAK,OAAO;EAAE,QAAQ;EAAU;EAAM;CAAI;CAEtD,MAAM,YAAY,aAAa;CAI/B,IAAI,WACF,MAAM,OAAO,cAAc,QAAQ,QAAQ,iBAAiB,SAAS,GAAG,EAAE,cAAc,KAAK,CAAC;CAEhG,OAAO,EAAE,QAAQ,UAAU;AAC7B;;;;;;AAOA,SAAS,iBAAiB,WAAmB;CAC3C,OAAO,KAAK;EACV,OAAO;EACP,UAAU,CACR,SAAS,yCAAyC,GAClD,QAAQ,CACN,WAAW;GACT,KAAK,GAAG,UAAU;GAClB,OAAO;EACT,CAAC,CACH,CAAC,CACH;CACF,CAAC;AACH;;;;;;;;;;;AAqBA,eAAsB,sBAAsB,EAC1C,QACA,SACA,MACA,KACA,cACA,YAQ8B;CAC9B,IAAI,CAAC,UAAU,OAAO,EAAE,QAAQ,UAAU;CAG1C,MAAM,QAAQ,KAAK,SAAS;CAE5B,IAAI,KAAK,yBAAyB;EAChC,MAAM,WAAW,MAAM,SAAS,IAAI;GAAE;GAAO,IAAI,KAAK;EAAwB,CAAC;EAC/E,IAAI,UACF,OAAO;GACL,QAAQ;GACR,kBAAkB,SAAS;GAC3B,uBAAuB,SAAS;EAClC;CAEJ;CAEA,MAAM,YAAY,QAAQ,MAAM,SAAS,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC;CAC5D,IAAI,UAAU,WAAW,GAAG;EAC1B,MAAM,OAAO,UAAU;EACvB,MAAM,aAAa,kBAAkB;GAAE,GAAG;GAAK,QAAQ,KAAK;GAAQ,kBAAkB,KAAK;EAAG,CAAC;EAC/F,OAAO;GACL,QAAQ;GACR,kBAAkB,KAAK;GACvB,uBAAuB,KAAK;EAC9B;CACF;CAEA,MAAM,YAAY,aAAa;CAC/B,IAAI,WACF,MAAM,OAAO,cACX,QAAQ,QACR,KAAK;EACH,OAAO;EACP,UAAU,CACR,SACE,UAAU,WAAW,IACjB,uFACA,wGACN,GACA,QAAQ,CACN,WAAW;GACT,KAAK,GAAG,UAAU;GAClB,OAAO;EACT,CAAC,CACH,CAAC,CACH;CACF,CAAC,GACD,EAAE,cAAc,KAAK,CACvB;CAEF,OAAO,EAAE,QAAQ,UAAU;AAC7B;;;;;;;AAQA,SAAS,aAAa,UAA0B;CAE9C,OAAO,UADI,SAAS,MAAM,GAAG,CAAC,CAAC,GAAG,EAAE,KAAK,SAAA,CACtB,QAAQ,oBAAoB,GAAG;AACpD;;;;;;;;;;;;;AAcA,SAAgB,gCAAgC,MAA2C;CACzF,MAAM,EAAE,cAAc,UAAU,kBAAkB;CAClD,OAAO,OAAO,EAAE,UAAU,QAAQ,cAAc;EAM9C,MAAM,qBAAqB,WAAW,OAAO;EAC7C,IAAI,CAAC,gBAAgB,CAAC,YAAY,CAAC,eAAe,OAAO;EACzD,IAAI;GACF,MAAM,iBAAiB,UAAU,QAAQ,GAAG;GAC5C,IAAI,CAAC,gBAAgB,OAAO;GAC5B,MAAM,OAAO,MAAM,aAAa,eAAe;IAC7C;IACA;IACA,gBAAgB,QAAQ,OAAO;GACjC,CAAC;GACD,IAAI,CAAC,MAAM,OAAO;GAKlB,MAAM,QAAQ,KAAK,SAAS;GAC5B,IAAI;GACJ,IAAI,KAAK,2BAA4B,MAAM,SAAS,IAAI;IAAE;IAAO,IAAI,KAAK;GAAwB,CAAC,GACjG,mBAAmB,KAAK;QACnB,IAAI,OAAO;IAChB,MAAM,YAAY,MAAM,SAAS,KAAK,EAAE,MAAM,CAAC;IAC/C,IAAI,UAAU,WAAW,GAAG,mBAAmB,UAAU,EAAE,CAAE;GAC/D;GACA,IAAI,CAAC,kBAAkB,OAAO;GAE9B,MAAM,OAAO,MAAM,cAAc,yBAAyB;IAAE;IAAO;GAAiB,CAAC;GACrF,IAAI,CAAC,MAAM,OAAO;GAElB,MAAM,SAAS,aAAa,OAAO,EAAE;GACrC,MAAM,WAAW,MAAM,cAAc,oBAAoB;IACvD,qBAAqB,KAAK;IAC1B,QAAQ,KAAK;IACb;GACF,CAAC;GACD,IAAI,UAAU,OAAO,SAAS;GAQ9B,QAAO,MAPe,cAAc,cAAc;IAChD,qBAAqB,KAAK;IAC1B;IACA,QAAQ,KAAK;IACb;IACA,YAAY,KAAK;GACnB,CAAC,EAAA,CACc;EACjB,SAAS,OAAO;GAEd,QAAQ,KAAK,4DAA4D,OAAO,IAAI,KAAK;GACzF,OAAO;EACT;CACF;AACF;;;;;;;;;;AAWA,MAAa,0BAA2C,EAAE,YAAY,sBACpE,WAAW,WAAW,UAAU,IAAI,kBAAkB;;;;;;;AAQxD,eAAe,mBAAmB,QAA4B,QAAuB;CAEnF,MAAM,EAAE,YAAa,OAAM,MADP,QAAQ,WAAW,CAAC,EAAE,SAAS,QAAQ,EAAA,EACzB,YAAY;EAC5C,QAAQ,EACN,UAAU;GACR,kBAAkB,OAAO,QAAQ;GACjC,0BAA0B,OAAO;GACjC,2BAA2B,OAAO;EACpC,EACF;EACA,SAAS;CACX,CAAC,KAAM,EAAE,SAAS,CAAC,EAAE;CACrB,OAAO,QAAQ;AACjB;;;;;;;;;;;;AAaA,eAAe,aACb,QACA,SACA,EAAE,cAAc,YAChB,KAGQ;CACR,MAAM,SAAS,MAAM,oBAAoB;EAAE;EAAQ;EAAS;CAAa,CAAC;CAC1E,IAAI,OAAO,WAAW,WAAW,OAAO;CAExC,IAAI,OAAO,WAAW,YAAY,cAAc;EAO9C,IAAI,eAAe,IAAI,QAAQ;GAAE,IAAI,OAAO,KAAK;GAAQ,gBAAgB,OAAO,KAAK;EAAM,CAAC;EAE5F,MAAM,QAAQ,MAAM,sBAAsB;GAAE;GAAQ;GAAS,GAAG;GAAQ;GAAc;EAAS,CAAC;EAChG,IAAI,MAAM,WAAW,WAAW,OAAO;EACvC,IAAI,MAAM,WAAW,YACnB,OAAO,EACL,QAAQ;GACN,MAAM,OAAO;GACb,kBAAkB,MAAM;GACxB,uBAAuB,MAAM;EAC/B,EACF;CAEJ;CACA,OAAO,CAAC;AACV;;;;;;;;;;;;;;;AAgBA,eAAsB,qBAAqB,EACzC,WACA,QACA,SACA,MACA,kBACA,SACA,OAcgB;CAChB,IAAI;EACF,MAAM,QAAQ,QAAQ,KAAK,SAAS,KAAK,GAAG,QAAQ,KAAK,MAAM,GAAG,EAAE,EAAE,KAAK,QAAQ;EAEnF,MAAM,UAAU,OAAO;GACrB,OAAO,KAAK,SAAS;GACrB,QAAQ,KAAK;GACb;GACA,WAAW;GACX,OAAO;IACL,OAAO,SAAS;IAIhB,gBAAgB;KACd,eAAe,OAAO,QAAQ;KAC9B,MAAM;KACN,YAAY,OAAO;KACnB,GAAI,MAAM,EAAE,IAAI,IAAI,CAAC;IACvB;IACA,QAAQ,CAAC,SAAS;IAClB,GAAI,UAAU,EAAE,UAAU,EAAE,MAAM,QAAQ,EAAE,IAAI,CAAC;GACnD;EACF,CAAC;CACH,SAAS,OAAO;EACd,QAAQ,KAAK,gDAAgD,OAAO,IAAI,KAAK;CAC/E;AACF;AAEA,SAAS,4BAA4B,MAAwC;CAC3E,MAAM,EAAE,cAAc;CACtB,OAAO,OAAO,QAAQ,SAAS,gBAAgB,QAAQ;EAMrD,MAAM,OAAO,MAAM,aAAa,QAAQ,SAAS,MAAM,GAAG;EAC1D,IAAI,CAAC,MAAM;EAKX,MAAM,eAAe,CAAE,MAAM,OAAO,aAAa;EAIjD,MAAM,eAAe,QAAQ,OAAO;EAEpC,IAAI,CAAC,cAAc;EAMnB,MAAM,iBAAiB,MAAM,mBAAmB,IAAI,QAAQ,MAAM;EAClE,IAAI,CAAC,gBAAgB;GACnB,QAAQ,KAAK,4CAA4C,OAAO,EAAE;GAClE;EACF;EAUA,MAAM,aAAa,eAAe,WAAW,WAAW,UAAU;EAClE,MAAM,mBAAmB,aAAa,YAAY,mBAAmB,eAAe,UAAU;EAC9F,MAAM,aAAa,KAAK,SACpB,cAAc,mBAAmB,KAAK,OAAO,gBAAgB,EAAE,cAAc,iBAAiB,WAAW,mBAAmB,eAAe,EAAE,MAC7I,YAAY,eAAe;EAY/B,MAAM,qBAAqB,cAAc,CAAC,KAAK;EAC/C,MAAM,WAAW,QAAQ,IAAI,wBACzB,qBACE,GAAG,QAAQ,IAAI,wBAAwB,WAAW,cAAc,mBAAmB,eAAe,UAAU,MAC5G,GAAG,QAAQ,IAAI,wBAAwB,eACzC,KAAA;EAOJ,IAAI,aAAa,KAAK,QAAQ,uBAAuB;GACnD,MAAM,UAAU,aACZ,KAAA,IACA;IAAE,WAAW,eAAe;IAAY,QAAQ,aAAa,OAAO,EAAE;IAAG,UAAU,eAAe;GAAG;GACzG,MAAM,qBAAqB;IACzB;IACA;IACA;IACA,MAAM,KAAK,OAAO;IAClB,kBAAkB,KAAK,OAAO;IAC9B;IACA,KAAK;GACP,CAAC;EACH;EAKA,IAAI,CAAC,UAAU;EAEf,MAAM,OAAO,KACX,KAAK;GACH,OAAO;GACP,UAAU,CAAC,QAAQ,CAAC,WAAW;IAAE,KAAK;IAAU,OAAO;GAAe,CAAC,CAAC,CAAC,CAAC;EAC5E,CAAC,CACH;CACF;AACF;AACA,MAAa,kBAAkB,SAA4C;CACzE,MAAM,wBAAwB,4BAA4B,IAAI;CAE9D,OAAO;EACL,qBAAqB,OAAO,QAAQ,SAAS,gBAAgB,QAAQ;GAInE,IAAI,YAAY,KAAK,QAAQ,IAAI,GAAG;GAMpC,IAAI,CAAC,MADc,aAAa,QAAQ,SAAS,MAAM,GAAG,GAC/C;GACX,MAAM,eAAe,QAAQ,OAAO;EACtC;EACA,WAAW;EACX,iBAAiB;CACnB;AACF;AAUA,SAAgB,0BAA0B,MAA6E;CACrH,OAAO;EACL,UAAU,EACR,OAAO;GACL,SAAS,mBAAmB,KAAK,KAAK;GACtC,aAAa;EACf,EACF;EACA,UAAU,eAAe,IAAI;EAG7B,mBAAmB,gCAAgC,IAAI;EACvD,iBAAiB;CACnB;AACF"}
+{"version":3,"file":"slack.js","names":[],"sources":["../../../src/integrations/slack/slack.ts"],"sourcesContent":["import { randomUUID } from 'node:crypto';\n\nimport type {\n  ChannelHandler,\n  ChannelHandlerContext,\n  ChannelHandlers,\n  ChannelSessionStart,\n  ResolveResourceId,\n  ResolveThreadId,\n} from '@mastra/core/channels';\nimport type { Mastra } from '@mastra/core/mastra';\nimport { createSlackAdapter } from '@mastra/slack';\nimport { Card, CardText, Actions, LinkButton } from 'chat';\n\nimport {\n  hydrateFactorySession,\n  resolveFactoryDefaultModelId,\n  resolveFactoryProjectForSession,\n  resolveFactorySourceRepository,\n} from '../../session/factory-session.js';\nimport type {\n  ChannelAccountLink,\n  ChannelAccountLinkKey,\n  ChannelIdentityStorage,\n} from '../../storage/domains/channel-identity/base.js';\nimport type { MemorySettingsStorage } from '../../storage/domains/memory-settings/base.js';\nimport type { FactoryProjectsStorage } from '../../storage/domains/projects/base.js';\nimport type { SourceControlStorageHandle } from '../../storage/domains/source-control/base.js';\nimport type { WorkItemsStorage } from '../../storage/domains/work-items/base.js';\nimport type { FactoryChannelsConfig } from '../base.js';\n\n// Derive the thread/message types from the core handler signature rather than\n// importing them from `chat` directly: mc-web can resolve a different `chat`\n// version than @mastra/core, and the two `Thread`/`Message` declarations are\n// structurally incompatible (private fields). Using the handler's own types\n// keeps everything on one version.\ntype HandlerThread = Parameters<ChannelHandler>[0];\ntype HandlerMessage = Parameters<ChannelHandler>[1];\n\n/** Dependencies the Slack channel handlers close over, injected from the web entry. */\ninterface SlackChannelDeps {\n  /**\n   * The factory's reverse-index store mapping a Slack sender to a Mastra\n   * tenant. When provided, inbound messages from an unlinked sender are not\n   * dispatched — the run only proceeds (with the sender's tenant stamped on\n   * the request context) once they've linked their account. Unlinked senders\n   * get an ephemeral \"connect your account\" card instead.\n   */\n  accountLinks?: ChannelIdentityStorage;\n  /**\n   * Factory projects domain. When provided (alongside `accountLinks`), a\n   * linked sender's run must also resolve to a Factory project before it\n   * dispatches: their link's default factory, else their tenant's only\n   * factory (stamped back onto the link), else an ephemeral \"pick a default\n   * factory\" card and no run. Unset → no factory routing (runs dispatch as\n   * before).\n   */\n  projects?: FactoryProjectsStorage;\n  /**\n   * Storage handle of the integration that owns source control\n   * (`IntegrationContext.storage.sourceControlOwner`). Used to make new Slack\n   * threads repo-backed: when the sender is linked and their factory has a\n   * repository, the thread's resourceId becomes a Factory user-session id (repo\n   * cloned on a `slack/{threadTs}` branch) instead of the chat-only\n   * `channel:...` id. It also lets a started session read back the project it\n   * belongs to. Nothing here is provider-specific — the connection is matched\n   * by the handle's own `integrationId`. Absent (no source-control integration\n   * registered) → chat-only sessions as before.\n   */\n  sourceControl?: SourceControlStorageHandle;\n  /**\n   * Observational-memory settings domain. When provided, a repo-backed session\n   * adopts its owner's memory settings on start, matching the web kickoff.\n   */\n  memorySettings?: MemorySettingsStorage;\n  /**\n   * Factory work-items domain. When provided, a dispatched new-session thread\n   * (DM or mention) upserts a Work-board card in Building (`execute`) carrying\n   * the Slack thread as its external source and binding the repo-backed\n   * session. Best-effort — a failure never blocks the run. Unset → no card.\n   */\n  workItems?: WorkItemsStorage;\n}\n\n/**\n * Read the Slack team id off a raw platform payload (Events API envelope or\n * slash-command body — both carry `team_id`), duck-typed to build the\n * workspace-scoped account-link key.\n */\nfunction rawTeamId(rawPayload: unknown): string | undefined {\n  if (!rawPayload || typeof rawPayload !== 'object') return undefined;\n  const raw = rawPayload as { team_id?: unknown; team?: unknown };\n  if (typeof raw.team_id === 'string' && raw.team_id) return raw.team_id;\n  if (typeof raw.team === 'string' && raw.team) return raw.team;\n  if (raw.team && typeof raw.team === 'object') {\n    const id = (raw.team as { id?: unknown }).id;\n    if (typeof id === 'string' && id) return id;\n  }\n  return undefined;\n}\n\n/**\n * The Slack team id survives onto a normalized chat Message only on\n * `message.raw` (the Slack Events API envelope).\n */\nfunction slackTeamId(message: HandlerMessage): string | undefined {\n  return rawTeamId(message.raw);\n}\n\n/**\n * Resolve the web-UI origin for links humans open in a browser (Connect card,\n * session deep links). Prefers `MASTRACODE_PUBLIC_URL` — the origin auth\n * cookies and OAuth redirect allow-lists are registered against — over the\n * channels tunnel, which only Slack's servers need to reach.\n */\nfunction webPublicUrl(): string | undefined {\n  return process.env.MASTRACODE_PUBLIC_URL ?? process.env.MASTRACODE_CHANNELS_PUBLIC_URL;\n}\n\n/** Outcome of the sender-link gate for one inbound message. */\ntype LinkedSenderResult =\n  /** Gating not configured — dispatch as before account linking existed. */\n  | { status: 'ungated' }\n  /** Sender unlinked — Connect card posted (when possible), do not dispatch. */\n  | { status: 'blocked' }\n  /** Sender linked — their tenant plus the sender key the link lives under. */\n  | { status: 'linked'; link: ChannelAccountLink; key: ChannelAccountLinkKey };\n\n/**\n * Resolve the sender's account link, posting an ephemeral \"connect your\n * account\" card (visible only to the sender) linking into the web UI's\n * Slack-connect flow when they're unlinked.\n */\nexport async function resolveLinkedSender({\n  thread,\n  message,\n  accountLinks,\n}: {\n  thread: HandlerThread;\n  message: HandlerMessage;\n  accountLinks?: ChannelIdentityStorage;\n}): Promise<LinkedSenderResult> {\n  if (!accountLinks) return { status: 'ungated' };\n  const platform = thread.adapter.name;\n  const externalUserId = message.author.userId;\n  const externalTeamId = slackTeamId(message);\n  // Without a team id we can't identify the workspace-scoped link; treat as\n  // unlinked so a run never proceeds tenant-less.\n  const key = externalTeamId ? { platform, externalTeamId, externalUserId } : undefined;\n  const link = key ? await accountLinks.getAccountLink(key) : null;\n  if (link && key) return { status: 'linked', link, key };\n\n  const publicUrl = webPublicUrl();\n  // A public origin is all the card needs. The link carries no identity: the\n  // web app authenticates the visitor, then Slack's OIDC flow proves which\n  // Slack account they control. Without an origin, still block, just no card.\n  if (publicUrl) {\n    await thread.postEphemeral(message.author, buildConnectCard(publicUrl), { fallbackToDM: true });\n  }\n  return { status: 'blocked' };\n}\n\n/**\n * The \"connect your account\" card. The link is deliberately identity-free —\n * `/connect/slack` sends the visitor to Connections, where \"Connect Slack\"\n * runs the OIDC flow and Slack itself asserts the (team, user) pair.\n */\nfunction buildConnectCard(publicUrl: string) {\n  return Card({\n    title: 'Connect your account',\n    children: [\n      CardText('Connect your account to use this agent.'),\n      Actions([\n        LinkButton({\n          url: `${publicUrl}/connect/slack`,\n          label: 'Connect account',\n        }),\n      ]),\n    ],\n  });\n}\n\n/** Outcome of factory routing for one linked sender's inbound message. */\ntype FactoryRouteResult =\n  /** Factory routing not configured — dispatch without a factory. */\n  | { status: 'ungated' }\n  /** No factory resolved — prompt card posted (when possible), do not dispatch. */\n  | { status: 'blocked' }\n  /** The Factory project this sender's runs route to. */\n  | { status: 'resolved'; factoryProjectId: string; slackWorkItemsEnabled: boolean };\n\n/**\n * Decide which Factory project a linked sender's run belongs to:\n *\n * 1. The link's `defaultFactoryProjectId`, when it still exists (a stale id —\n *    deleted factory — falls through as if unset).\n * 2. Else, the tenant's only factory, stamped back onto the link so it shows\n *    up (and stays editable) in Connected Accounts settings.\n * 3. Else — zero or several factories — an ephemeral \"pick a default factory\"\n *    card deep-linking to settings, and the run is blocked.\n */\nexport async function resolveFactoryForLink({\n  thread,\n  message,\n  link,\n  key,\n  accountLinks,\n  projects,\n}: {\n  thread: HandlerThread;\n  message: HandlerMessage;\n  link: ChannelAccountLink;\n  key: ChannelAccountLinkKey;\n  accountLinks: ChannelIdentityStorage;\n  projects?: FactoryProjectsStorage;\n}): Promise<FactoryRouteResult> {\n  if (!projects) return { status: 'ungated' };\n  // Factories are org-scoped; a personal account (no org) has none and lands\n  // on the prompt below.\n  const orgId = link.orgId ?? '';\n\n  if (link.defaultFactoryProjectId) {\n    const existing = await projects.get({ orgId, id: link.defaultFactoryProjectId });\n    if (existing) {\n      return {\n        status: 'resolved',\n        factoryProjectId: existing.id,\n        slackWorkItemsEnabled: existing.slackWorkItemsEnabled,\n      };\n    }\n  }\n\n  const factories = orgId ? await projects.list({ orgId }) : [];\n  if (factories.length === 1) {\n    const only = factories[0]!;\n    await accountLinks.setDefaultFactory({ ...key, userId: link.userId, factoryProjectId: only.id });\n    return {\n      status: 'resolved',\n      factoryProjectId: only.id,\n      slackWorkItemsEnabled: only.slackWorkItemsEnabled,\n    };\n  }\n\n  const publicUrl = webPublicUrl();\n  if (publicUrl) {\n    await thread.postEphemeral(\n      message.author,\n      Card({\n        title: 'Pick a default factory',\n        children: [\n          CardText(\n            factories.length === 0\n              ? 'Your account has no factory yet. Create one in the web app, then message me again.'\n              : 'Your account has several factories. Pick which one Slack sessions should go to, then message me again.',\n          ),\n          Actions([\n            LinkButton({\n              url: `${publicUrl}/settings/connections`,\n              label: 'Open settings',\n            }),\n          ]),\n        ],\n      }),\n      { fallbackToDM: true },\n    );\n  }\n  return { status: 'blocked' };\n}\n\n/**\n * Deterministic per-thread branch name: `slack/{threadTs}` with characters\n * outside the sandbox git-ref allow-list (`[A-Za-z0-9_./-]`, and `.` for\n * readability) mapped to `-`. `thread.id` is `{channelId}:{threadTs}`\n * (platform-prefixed on handler threads) — the trailing segment is the ts.\n */\nfunction threadBranch(threadId: string): string {\n  const ts = threadId.split(':').at(-1) ?? threadId;\n  return `slack/${ts.replace(/[^A-Za-z0-9_/-]/g, '-')}`;\n}\n\n/**\n * Resolve the resourceId for a NEW Slack channel thread. A linked sender whose\n * factory has a repository gets a Factory user-session id — the controller\n * session then materializes the repo sandbox via the factory's dynamic\n * workspace (clone + PAT), the session shows up in the web Sessions list, and\n * View Session deep-links land on the normal workspace route. Everything else\n * (unlinked, unrouted, repo-less, or no source control) keeps the chat-only\n * `defaultResourceId`.\n *\n * Pure lookups only — cards for unlinked/unrouted senders are the dispatch\n * gate's job; this hook must never post.\n */\nexport function createChannelResourceIdResolver(deps: SlackChannelDeps): ResolveResourceId {\n  const { accountLinks, projects, sourceControl } = deps;\n  return async ({ platform, thread, message }) => {\n    // NOT the hook's `defaultResourceId`: configuring a custom resolver\n    // bypasses AgentControllerChannels' own `channel:{thread.id}` derivation\n    // (agent-controller-channels.ts `resolveChannelResourceId`), and the base\n    // default is the per-USER memory key. Chat-only fallbacks must stay\n    // per-thread, so reproduce the controller default here.\n    const chatOnlyResourceId = `channel:${thread.id}`;\n    if (!accountLinks || !projects || !sourceControl) return chatOnlyResourceId;\n    try {\n      const externalTeamId = rawTeamId(message.raw);\n      if (!externalTeamId) return chatOnlyResourceId;\n      const link = await accountLinks.getAccountLink({\n        platform,\n        externalTeamId,\n        externalUserId: message.author.userId,\n      });\n      if (!link) return chatOnlyResourceId;\n\n      // Same chain as `resolveFactoryForLink`, minus prompts/stamping: the\n      // dispatch gate has already run (and stamped a lone factory) by the\n      // time a new thread is created, so this is a read-only re-resolve.\n      const orgId = link.orgId ?? '';\n      let factoryProjectId: string | undefined;\n      if (link.defaultFactoryProjectId && (await projects.get({ orgId, id: link.defaultFactoryProjectId }))) {\n        factoryProjectId = link.defaultFactoryProjectId;\n      } else if (orgId) {\n        const factories = await projects.list({ orgId });\n        if (factories.length === 1) factoryProjectId = factories[0]!.id;\n      }\n      if (!factoryProjectId) return chatOnlyResourceId;\n\n      const repo = await resolveFactorySourceRepository({ sourceControl, orgId, factoryProjectId });\n      if (!repo.found) return chatOnlyResourceId;\n\n      const branch = threadBranch(thread.id);\n      // Attributed to the Slack sender, not to whoever connected the repository:\n      // unlike an autonomous rule run, a Slack thread has a real interactive user.\n      const existing = await sourceControl.sessions.getForBranch({\n        projectRepositoryId: repo.projectRepositoryId,\n        userId: link.userId,\n        branch,\n      });\n      if (existing) return existing.sessionId;\n      const session = await sourceControl.sessions.create({\n        sessionId: randomUUID(),\n        projectRepositoryId: repo.projectRepositoryId,\n        orgId,\n        userId: link.userId,\n        branch,\n        baseBranch: repo.baseBranch,\n      });\n      return session.sessionId;\n    } catch (error) {\n      // Fall back to a chat-only session rather than dropping the message.\n      console.warn('[slack] repo-backed session resolution failed for thread', thread.id, error);\n      return chatOnlyResourceId;\n    }\n  };\n}\n\n/**\n * Thread id for a NEW Slack channel thread. Repo-backed threads take the\n * user-session id AS their thread id, matching the web convention\n * (FactoryStartCoordinator seeds threads with threadId = sessionId) so\n * `/workspaces/{sessionId}/threads/{sessionId}` resolves Slack-created\n * sessions exactly like web-created ones — no `?resourceId=` override needed.\n * Chat-only threads keep the default random id: their `channel:...`\n * resourceId is a memory key, not a unique thread id.\n */\nexport const resolveChannelThreadId: ResolveThreadId = ({ resourceId, defaultThreadId }) =>\n  resourceId.startsWith('channel:') ? defaultThreadId : resourceId;\n\n/**\n * Apply the factory's configuration to a Slack-created session the first time\n * its thread reaches the controller.\n *\n * Without this a Slack session runs on the SDK's built-in mode default\n * (`openai/gpt-5.5`), so a factory configured for any other provider fails every\n * message with a missing-credentials error. The web kickoff has always applied\n * the factory default; this brings Slack to the same footing.\n *\n * Only repo-backed threads are configured. Their resourceId IS the Factory\n * session id, which the source-control rows turn back into a project — a\n * chat-only `channel:...` id names no project, so there is nothing to read.\n *\n * Skips a session whose mode already has a model persisted on the thread. That\n * is the durable record of a deliberate choice — either an earlier start or a\n * user's own switch — and re-applying the factory default over it would undo\n * the user's selection every time the process restarts.\n */\nexport function createChannelSessionStartHook(deps: SlackChannelDeps): ChannelSessionStart {\n  const { projects, sourceControl, memorySettings } = deps;\n  return async ({ session, thread }) => {\n    if (!projects || !sourceControl) return;\n    if (thread.resourceId.startsWith('channel:')) return;\n\n    const modeModelKey = `modeModelId_${session.mode.get()}`;\n    if (await session.thread.getSetting({ key: modeModelKey })) return;\n\n    const owner = await resolveFactoryProjectForSession({ sourceControl, sessionId: thread.resourceId });\n    if (!owner) return;\n\n    const defaultModelId = await resolveFactoryDefaultModelId(projects, owner.factoryProjectId);\n    await hydrateFactorySession(session, {\n      orgId: owner.orgId,\n      userId: owner.userId,\n      defaultModelId,\n      memorySettings,\n    });\n  };\n}\n\n/**\n * The internal Mastra thread the framework created for a channel conversation.\n * The handler's `thread.id` is the platform thread id (e.g. `slack:C123:ts`),\n * NOT the internal UUID — the mapping lives in the stored thread's channel\n * metadata.\n */\nasync function findInternalThread(mastra: Mastra | undefined, thread: HandlerThread) {\n  const store = await mastra?.getStorage()?.getStore('memory');\n  const { threads } = (await store?.listThreads({\n    filter: {\n      metadata: {\n        channel_platform: thread.adapter.name,\n        channel_externalThreadId: thread.id,\n        channel_externalChannelId: thread.channelId,\n      },\n    },\n    perPage: 1,\n  })) ?? { threads: [] };\n  return threads[0];\n}\n\n/**\n * Build the \"new session\" handler for mention / direct-message events. A mention or\n * DM on a not-yet-subscribed thread starts a NEW session; once subscribed, later\n * events are follow-ups and don't re-announce.\n */\n/**\n * Run the account-link + factory-routing gates for one inbound message.\n * Returns `null` when the run must not dispatch (a prompt card was posted\n * where possible); otherwise the dispatch context — with `routed` present\n * only when a linked sender resolved to a factory.\n */\nasync function gateDispatch(\n  thread: HandlerThread,\n  message: HandlerMessage,\n  { accountLinks, projects }: SlackChannelDeps,\n  ctx: ChannelHandlerContext,\n): Promise<{\n  routed?: { link: ChannelAccountLink; factoryProjectId: string; slackWorkItemsEnabled: boolean };\n} | null> {\n  const sender = await resolveLinkedSender({ thread, message, accountLinks });\n  if (sender.status === 'blocked') return null;\n  // Linked senders must also route to a Factory project before a run starts.\n  if (sender.status === 'linked' && accountLinks) {\n    // Stamp the tenant on the run's request context — the single seam\n    // `resolveCredentialStore` reads to load this sender's model credentials.\n    // This belongs to the link, not to the routing: a linked sender whose\n    // factory routing comes back `ungated` still exits below and dispatches, so\n    // stamping only in the routed branch would silently run them on default\n    // credentials.\n    ctx.requestContext.set('user', { id: sender.link.userId, organizationId: sender.link.orgId });\n\n    const route = await resolveFactoryForLink({ thread, message, ...sender, accountLinks, projects });\n    if (route.status === 'blocked') return null;\n    if (route.status === 'resolved') {\n      return {\n        routed: {\n          link: sender.link,\n          factoryProjectId: route.factoryProjectId,\n          slackWorkItemsEnabled: route.slackWorkItemsEnabled,\n        },\n      };\n    }\n  }\n  return {};\n}\n\n/**\n * Upsert the Work-board card for a dispatched Slack-thread run. Keyed on the\n * thread via `externalSource` — the work-items domain's unique\n * `(factory_project_id, source_key)` index makes repeat messages reuse the\n * same card, and `reuseMode: 'preserve'` keeps a card a human already dragged\n * across stages untouched. The card lands in Building (`execute`) for every\n * dispatched thread (DM or mention) — there is deliberately no per-origin\n * stage split; smart routing is a follow-up.\n *\n * The session id / branch / threadId and the workspace deep-link are resolved\n * by the caller (which already looked up the internal thread), so this helper\n * just shapes and writes. Best-effort: the run is already dispatched, so a\n * failure logs instead of throwing — work-item creation must never abort a Slack run.\n */\nexport async function upsertThreadWorkItem({\n  workItems,\n  thread,\n  message,\n  link,\n  factoryProjectId,\n  session,\n  url,\n}: {\n  workItems: WorkItemsStorage;\n  thread: HandlerThread;\n  message: HandlerMessage;\n  link: ChannelAccountLink;\n  factoryProjectId: string;\n  /**\n   * The repo-backed Factory session to bind under the `chat` role, or\n   * `undefined` for a chat-only thread (no Factory session to bind).\n   */\n  session?: { sessionId: string; branch: string; threadId: string };\n  /** Workspace deep-link to the running session; omitted when no public URL. */\n  url?: string;\n}): Promise<void> {\n  try {\n    const title = message.text.length > 80 ? `${message.text.slice(0, 79)}…` : message.text;\n\n    await workItems.upsert({\n      orgId: link.orgId ?? '',\n      userId: link.userId,\n      factoryProjectId,\n      reuseMode: 'preserve',\n      input: {\n        title: title || 'Slack thread',\n        // `integrationId` is the platform ('slack'); `type` is a single\n        // constant (no DM/mention distinction); `externalId` is the stable\n        // platform thread id — together they form the idempotency key.\n        externalSource: {\n          integrationId: thread.adapter.name,\n          type: 'slack-thread',\n          externalId: thread.id,\n          ...(url ? { url } : {}),\n        },\n        stages: ['execute'],\n        ...(session ? { sessions: { chat: session } } : {}),\n      },\n    });\n  } catch (error) {\n    console.warn('[slack] work-item creation failed for thread', thread.id, error);\n  }\n}\n\nfunction createNewSessionChatHandler(deps: SlackChannelDeps): ChannelHandler {\n  const { workItems } = deps;\n  return async (thread, message, defaultHandler, ctx) => {\n    // Gate on the sender having linked their Slack account to a Mastra tenant.\n    // Unlinked → post the ephemeral Connect card and stop; no session/run is\n    // created (which would otherwise be tenant-less and fail credential\n    // resolution). This handler is the only gate — core dispatches whatever\n    // reaches it — so every slot that can start a run must call it.\n    const gate = await gateDispatch(thread, message, deps, ctx);\n    if (!gate) return;\n\n    // A mention on a not-yet-subscribed thread is a NEW session. The\n    // default handler auto-subscribes, so once subscribed this is a\n    // follow-up mention — don't re-announce.\n    const isNewSession = !(await thread.isSubscribed());\n\n    // Run the framework handler first so the internal Mastra thread and\n    // controller session are created before we build the deep link.\n    await defaultHandler(thread, message);\n\n    if (!isNewSession) return;\n\n    // The internal-thread lookup and deep-link are needed by BOTH the\n    // announcement card AND work-item creation, so they run BEFORE the\n    // card-only `MASTRACODE_PUBLIC_URL` gate — a deployment without a public\n    // origin should still create board cards, just without a clickable link.\n    const internalThread = await findInternalThread(ctx.mastra, thread);\n    if (!internalThread) {\n      console.warn('[onMention] no internal thread found for', thread.id);\n      return;\n    }\n\n    // When the sender routed to a factory we know exactly which workspace the\n    // session belongs to — deep-link straight into it. A repo-backed thread's\n    // resourceId IS the Factory user-session id, so the link lands on the same\n    // route a web-started run navigates to; chat-only threads keep the literal\n    // `channel` segment (the real resource rides the `?resourceId=` override).\n    // Unrouted senders fall back to the factory-agnostic /threads/ redirect.\n    // One predicate drives both the path segment and the query param, so the\n    // two can never disagree about what the URL already carries.\n    const isChatOnly = internalThread.resourceId.startsWith('channel:');\n    const workspaceSegment = isChatOnly ? 'channel' : encodeURIComponent(internalThread.resourceId);\n    const threadPath = gate.routed\n      ? `/factories/${encodeURIComponent(gate.routed.factoryProjectId)}/workspaces/${workspaceSegment}/threads/${encodeURIComponent(internalThread.id)}`\n      : `/threads/${internalThread.id}`;\n\n    // The param is an override for a URL that can't otherwise name its\n    // resource. A routed repo-backed thread already spells the resourceId out\n    // as its workspace segment, so appending it again is duplication the app\n    // ignores. Chat-only threads need it (their segment is the literal string\n    // `channel`), and so does the unrouted fallback, which has no workspace\n    // segment at all — `ChannelThreadRedirect` forwards the search through.\n    //\n    // One shared deep-link: the card's button and the work-item `url` read the\n    // SAME value so they can never drift. Undefined without a public origin —\n    // the card is then skipped, but the work item is still created (url omitted).\n    const needsResourceParam = isChatOnly || !gate.routed;\n    const deepLink = process.env.MASTRACODE_PUBLIC_URL\n      ? needsResourceParam\n        ? `${process.env.MASTRACODE_PUBLIC_URL}${threadPath}?resourceId=${encodeURIComponent(internalThread.resourceId)}`\n        : `${process.env.MASTRACODE_PUBLIC_URL}${threadPath}`\n      : undefined;\n\n    // A dispatched, routed new-session thread becomes a Work-board card in\n    // Building. Only routed senders (linked → factory) have the org/user/factory\n    // a work item needs. Bind the repo-backed Factory session under the `chat`\n    // role; a chat-only `channel:` resourceId is NOT a session id, so bind\n    // nothing rather than a bad id. Best-effort (the helper swallows failures).\n    if (workItems && gate.routed?.slackWorkItemsEnabled) {\n      const session = isChatOnly\n        ? undefined\n        : { sessionId: internalThread.resourceId, branch: threadBranch(thread.id), threadId: internalThread.id };\n      await upsertThreadWorkItem({\n        workItems,\n        thread,\n        message,\n        link: gate.routed.link,\n        factoryProjectId: gate.routed.factoryProjectId,\n        session,\n        url: deepLink,\n      });\n    }\n\n    // The announcement card is only useful with a public origin to deep-link\n    // to — otherwise the link would be `undefined/threads/...`. Without one the\n    // session (and now the work item) still exist; we just skip the broken card.\n    if (!deepLink) return;\n\n    await thread.post(\n      Card({\n        title: 'New session started',\n        children: [Actions([LinkButton({ url: deepLink, label: 'View session' })])],\n      }),\n    );\n  };\n}\nexport const createHandlers = (deps: SlackChannelDeps): ChannelHandlers => {\n  const newSessionChatHandler = createNewSessionChatHandler(deps);\n\n  return {\n    onSubscribedMessage: async (thread, message, defaultHandler, ctx) => {\n      // `aside` as its own leading word lets humans talk in a subscribed\n      // thread without the bot replying. Word boundary so messages that\n      // merely start with \"aside...\" (e.g. \"asides can wait\") still route.\n      if (/^aside\\b/i.test(message.text)) return;\n      // A subscribed follow-up from an unlinked sender must not run either\n      // (e.g. the link was removed mid-conversation), and it must still\n      // resolve a factory (e.g. the default was cleared or its factory\n      // deleted mid-conversation).\n      const gate = await gateDispatch(thread, message, deps, ctx);\n      if (!gate) return;\n      await defaultHandler(thread, message);\n    },\n    onMention: newSessionChatHandler,\n    onDirectMessage: newSessionChatHandler,\n  };\n};\n\n/** Slack app credentials, passed in explicitly rather than read from env here. */\ninterface SlackCredentials {\n  clientId?: string;\n  clientSecret?: string;\n  signingSecret: string;\n  botToken?: string;\n}\n\nexport function createSlackChannelsConfig(deps: SlackChannelDeps & { slack: SlackCredentials }): FactoryChannelsConfig {\n  return {\n    adapters: {\n      slack: {\n        adapter: createSlackAdapter(deps.slack),\n        toolDisplay: 'hidden',\n      },\n    },\n    handlers: createHandlers(deps),\n    // New linked+repo-backed threads own a Factory user-session id as their\n    // resourceId, which is what makes the controller session repo-backed.\n    resolveResourceId: createChannelResourceIdResolver(deps),\n    resolveThreadId: resolveChannelThreadId,\n    // Those sessions are created by the channel machinery, not the web kickoff,\n    // so this is where they pick up the factory's configuration.\n    onSessionStart: createChannelSessionStartHook(deps),\n  };\n}\n"],"mappings":";;;;;;;;;;AAyFA,SAAS,UAAU,YAAyC;CAC1D,IAAI,CAAC,cAAc,OAAO,eAAe,UAAU,OAAO,KAAA;CAC1D,MAAM,MAAM;CACZ,IAAI,OAAO,IAAI,YAAY,YAAY,IAAI,SAAS,OAAO,IAAI;CAC/D,IAAI,OAAO,IAAI,SAAS,YAAY,IAAI,MAAM,OAAO,IAAI;CACzD,IAAI,IAAI,QAAQ,OAAO,IAAI,SAAS,UAAU;EAC5C,MAAM,KAAM,IAAI,KAA0B;EAC1C,IAAI,OAAO,OAAO,YAAY,IAAI,OAAO;CAC3C;AAEF;;;;;AAMA,SAAS,YAAY,SAA6C;CAChE,OAAO,UAAU,QAAQ,GAAG;AAC9B;;;;;;;AAQA,SAAS,eAAmC;CAC1C,OAAO,QAAQ,IAAI,yBAAyB,QAAQ,IAAI;AAC1D;;;;;;AAgBA,eAAsB,oBAAoB,EACxC,QACA,SACA,gBAK8B;CAC9B,IAAI,CAAC,cAAc,OAAO,EAAE,QAAQ,UAAU;CAC9C,MAAM,WAAW,OAAO,QAAQ;CAChC,MAAM,iBAAiB,QAAQ,OAAO;CACtC,MAAM,iBAAiB,YAAY,OAAO;CAG1C,MAAM,MAAM,iBAAiB;EAAE;EAAU;EAAgB;CAAe,IAAI,KAAA;CAC5E,MAAM,OAAO,MAAM,MAAM,aAAa,eAAe,GAAG,IAAI;CAC5D,IAAI,QAAQ,KAAK,OAAO;EAAE,QAAQ;EAAU;EAAM;CAAI;CAEtD,MAAM,YAAY,aAAa;CAI/B,IAAI,WACF,MAAM,OAAO,cAAc,QAAQ,QAAQ,iBAAiB,SAAS,GAAG,EAAE,cAAc,KAAK,CAAC;CAEhG,OAAO,EAAE,QAAQ,UAAU;AAC7B;;;;;;AAOA,SAAS,iBAAiB,WAAmB;CAC3C,OAAO,KAAK;EACV,OAAO;EACP,UAAU,CACR,SAAS,yCAAyC,GAClD,QAAQ,CACN,WAAW;GACT,KAAK,GAAG,UAAU;GAClB,OAAO;EACT,CAAC,CACH,CAAC,CACH;CACF,CAAC;AACH;;;;;;;;;;;AAqBA,eAAsB,sBAAsB,EAC1C,QACA,SACA,MACA,KACA,cACA,YAQ8B;CAC9B,IAAI,CAAC,UAAU,OAAO,EAAE,QAAQ,UAAU;CAG1C,MAAM,QAAQ,KAAK,SAAS;CAE5B,IAAI,KAAK,yBAAyB;EAChC,MAAM,WAAW,MAAM,SAAS,IAAI;GAAE;GAAO,IAAI,KAAK;EAAwB,CAAC;EAC/E,IAAI,UACF,OAAO;GACL,QAAQ;GACR,kBAAkB,SAAS;GAC3B,uBAAuB,SAAS;EAClC;CAEJ;CAEA,MAAM,YAAY,QAAQ,MAAM,SAAS,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC;CAC5D,IAAI,UAAU,WAAW,GAAG;EAC1B,MAAM,OAAO,UAAU;EACvB,MAAM,aAAa,kBAAkB;GAAE,GAAG;GAAK,QAAQ,KAAK;GAAQ,kBAAkB,KAAK;EAAG,CAAC;EAC/F,OAAO;GACL,QAAQ;GACR,kBAAkB,KAAK;GACvB,uBAAuB,KAAK;EAC9B;CACF;CAEA,MAAM,YAAY,aAAa;CAC/B,IAAI,WACF,MAAM,OAAO,cACX,QAAQ,QACR,KAAK;EACH,OAAO;EACP,UAAU,CACR,SACE,UAAU,WAAW,IACjB,uFACA,wGACN,GACA,QAAQ,CACN,WAAW;GACT,KAAK,GAAG,UAAU;GAClB,OAAO;EACT,CAAC,CACH,CAAC,CACH;CACF,CAAC,GACD,EAAE,cAAc,KAAK,CACvB;CAEF,OAAO,EAAE,QAAQ,UAAU;AAC7B;;;;;;;AAQA,SAAS,aAAa,UAA0B;CAE9C,OAAO,UADI,SAAS,MAAM,GAAG,CAAC,CAAC,GAAG,EAAE,KAAK,SAAA,CACtB,QAAQ,oBAAoB,GAAG;AACpD;;;;;;;;;;;;;AAcA,SAAgB,gCAAgC,MAA2C;CACzF,MAAM,EAAE,cAAc,UAAU,kBAAkB;CAClD,OAAO,OAAO,EAAE,UAAU,QAAQ,cAAc;EAM9C,MAAM,qBAAqB,WAAW,OAAO;EAC7C,IAAI,CAAC,gBAAgB,CAAC,YAAY,CAAC,eAAe,OAAO;EACzD,IAAI;GACF,MAAM,iBAAiB,UAAU,QAAQ,GAAG;GAC5C,IAAI,CAAC,gBAAgB,OAAO;GAC5B,MAAM,OAAO,MAAM,aAAa,eAAe;IAC7C;IACA;IACA,gBAAgB,QAAQ,OAAO;GACjC,CAAC;GACD,IAAI,CAAC,MAAM,OAAO;GAKlB,MAAM,QAAQ,KAAK,SAAS;GAC5B,IAAI;GACJ,IAAI,KAAK,2BAA4B,MAAM,SAAS,IAAI;IAAE;IAAO,IAAI,KAAK;GAAwB,CAAC,GACjG,mBAAmB,KAAK;QACnB,IAAI,OAAO;IAChB,MAAM,YAAY,MAAM,SAAS,KAAK,EAAE,MAAM,CAAC;IAC/C,IAAI,UAAU,WAAW,GAAG,mBAAmB,UAAU,EAAE,CAAE;GAC/D;GACA,IAAI,CAAC,kBAAkB,OAAO;GAE9B,MAAM,OAAO,MAAM,+BAA+B;IAAE;IAAe;IAAO;GAAiB,CAAC;GAC5F,IAAI,CAAC,KAAK,OAAO,OAAO;GAExB,MAAM,SAAS,aAAa,OAAO,EAAE;GAGrC,MAAM,WAAW,MAAM,cAAc,SAAS,aAAa;IACzD,qBAAqB,KAAK;IAC1B,QAAQ,KAAK;IACb;GACF,CAAC;GACD,IAAI,UAAU,OAAO,SAAS;GAS9B,QAAO,MARe,cAAc,SAAS,OAAO;IAClD,WAAW,WAAW;IACtB,qBAAqB,KAAK;IAC1B;IACA,QAAQ,KAAK;IACb;IACA,YAAY,KAAK;GACnB,CAAC,EAAA,CACc;EACjB,SAAS,OAAO;GAEd,QAAQ,KAAK,4DAA4D,OAAO,IAAI,KAAK;GACzF,OAAO;EACT;CACF;AACF;;;;;;;;;;AAWA,MAAa,0BAA2C,EAAE,YAAY,sBACpE,WAAW,WAAW,UAAU,IAAI,kBAAkB;;;;;;;;;;;;;;;;;;;AAoBxD,SAAgB,8BAA8B,MAA6C;CACzF,MAAM,EAAE,UAAU,eAAe,mBAAmB;CACpD,OAAO,OAAO,EAAE,SAAS,aAAa;EACpC,IAAI,CAAC,YAAY,CAAC,eAAe;EACjC,IAAI,OAAO,WAAW,WAAW,UAAU,GAAG;EAE9C,MAAM,eAAe,eAAe,QAAQ,KAAK,IAAI;EACrD,IAAI,MAAM,QAAQ,OAAO,WAAW,EAAE,KAAK,aAAa,CAAC,GAAG;EAE5D,MAAM,QAAQ,MAAM,gCAAgC;GAAE;GAAe,WAAW,OAAO;EAAW,CAAC;EACnG,IAAI,CAAC,OAAO;EAEZ,MAAM,iBAAiB,MAAM,6BAA6B,UAAU,MAAM,gBAAgB;EAC1F,MAAM,sBAAsB,SAAS;GACnC,OAAO,MAAM;GACb,QAAQ,MAAM;GACd;GACA;EACF,CAAC;CACH;AACF;;;;;;;AAQA,eAAe,mBAAmB,QAA4B,QAAuB;CAEnF,MAAM,EAAE,YAAa,OAAM,MADP,QAAQ,WAAW,CAAC,EAAE,SAAS,QAAQ,EAAA,EACzB,YAAY;EAC5C,QAAQ,EACN,UAAU;GACR,kBAAkB,OAAO,QAAQ;GACjC,0BAA0B,OAAO;GACjC,2BAA2B,OAAO;EACpC,EACF;EACA,SAAS;CACX,CAAC,KAAM,EAAE,SAAS,CAAC,EAAE;CACrB,OAAO,QAAQ;AACjB;;;;;;;;;;;;AAaA,eAAe,aACb,QACA,SACA,EAAE,cAAc,YAChB,KAGQ;CACR,MAAM,SAAS,MAAM,oBAAoB;EAAE;EAAQ;EAAS;CAAa,CAAC;CAC1E,IAAI,OAAO,WAAW,WAAW,OAAO;CAExC,IAAI,OAAO,WAAW,YAAY,cAAc;EAO9C,IAAI,eAAe,IAAI,QAAQ;GAAE,IAAI,OAAO,KAAK;GAAQ,gBAAgB,OAAO,KAAK;EAAM,CAAC;EAE5F,MAAM,QAAQ,MAAM,sBAAsB;GAAE;GAAQ;GAAS,GAAG;GAAQ;GAAc;EAAS,CAAC;EAChG,IAAI,MAAM,WAAW,WAAW,OAAO;EACvC,IAAI,MAAM,WAAW,YACnB,OAAO,EACL,QAAQ;GACN,MAAM,OAAO;GACb,kBAAkB,MAAM;GACxB,uBAAuB,MAAM;EAC/B,EACF;CAEJ;CACA,OAAO,CAAC;AACV;;;;;;;;;;;;;;;AAgBA,eAAsB,qBAAqB,EACzC,WACA,QACA,SACA,MACA,kBACA,SACA,OAcgB;CAChB,IAAI;EACF,MAAM,QAAQ,QAAQ,KAAK,SAAS,KAAK,GAAG,QAAQ,KAAK,MAAM,GAAG,EAAE,EAAE,KAAK,QAAQ;EAEnF,MAAM,UAAU,OAAO;GACrB,OAAO,KAAK,SAAS;GACrB,QAAQ,KAAK;GACb;GACA,WAAW;GACX,OAAO;IACL,OAAO,SAAS;IAIhB,gBAAgB;KACd,eAAe,OAAO,QAAQ;KAC9B,MAAM;KACN,YAAY,OAAO;KACnB,GAAI,MAAM,EAAE,IAAI,IAAI,CAAC;IACvB;IACA,QAAQ,CAAC,SAAS;IAClB,GAAI,UAAU,EAAE,UAAU,EAAE,MAAM,QAAQ,EAAE,IAAI,CAAC;GACnD;EACF,CAAC;CACH,SAAS,OAAO;EACd,QAAQ,KAAK,gDAAgD,OAAO,IAAI,KAAK;CAC/E;AACF;AAEA,SAAS,4BAA4B,MAAwC;CAC3E,MAAM,EAAE,cAAc;CACtB,OAAO,OAAO,QAAQ,SAAS,gBAAgB,QAAQ;EAMrD,MAAM,OAAO,MAAM,aAAa,QAAQ,SAAS,MAAM,GAAG;EAC1D,IAAI,CAAC,MAAM;EAKX,MAAM,eAAe,CAAE,MAAM,OAAO,aAAa;EAIjD,MAAM,eAAe,QAAQ,OAAO;EAEpC,IAAI,CAAC,cAAc;EAMnB,MAAM,iBAAiB,MAAM,mBAAmB,IAAI,QAAQ,MAAM;EAClE,IAAI,CAAC,gBAAgB;GACnB,QAAQ,KAAK,4CAA4C,OAAO,EAAE;GAClE;EACF;EAUA,MAAM,aAAa,eAAe,WAAW,WAAW,UAAU;EAClE,MAAM,mBAAmB,aAAa,YAAY,mBAAmB,eAAe,UAAU;EAC9F,MAAM,aAAa,KAAK,SACpB,cAAc,mBAAmB,KAAK,OAAO,gBAAgB,EAAE,cAAc,iBAAiB,WAAW,mBAAmB,eAAe,EAAE,MAC7I,YAAY,eAAe;EAY/B,MAAM,qBAAqB,cAAc,CAAC,KAAK;EAC/C,MAAM,WAAW,QAAQ,IAAI,wBACzB,qBACE,GAAG,QAAQ,IAAI,wBAAwB,WAAW,cAAc,mBAAmB,eAAe,UAAU,MAC5G,GAAG,QAAQ,IAAI,wBAAwB,eACzC,KAAA;EAOJ,IAAI,aAAa,KAAK,QAAQ,uBAAuB;GACnD,MAAM,UAAU,aACZ,KAAA,IACA;IAAE,WAAW,eAAe;IAAY,QAAQ,aAAa,OAAO,EAAE;IAAG,UAAU,eAAe;GAAG;GACzG,MAAM,qBAAqB;IACzB;IACA;IACA;IACA,MAAM,KAAK,OAAO;IAClB,kBAAkB,KAAK,OAAO;IAC9B;IACA,KAAK;GACP,CAAC;EACH;EAKA,IAAI,CAAC,UAAU;EAEf,MAAM,OAAO,KACX,KAAK;GACH,OAAO;GACP,UAAU,CAAC,QAAQ,CAAC,WAAW;IAAE,KAAK;IAAU,OAAO;GAAe,CAAC,CAAC,CAAC,CAAC;EAC5E,CAAC,CACH;CACF;AACF;AACA,MAAa,kBAAkB,SAA4C;CACzE,MAAM,wBAAwB,4BAA4B,IAAI;CAE9D,OAAO;EACL,qBAAqB,OAAO,QAAQ,SAAS,gBAAgB,QAAQ;GAInE,IAAI,YAAY,KAAK,QAAQ,IAAI,GAAG;GAMpC,IAAI,CAAC,MADc,aAAa,QAAQ,SAAS,MAAM,GAAG,GAC/C;GACX,MAAM,eAAe,QAAQ,OAAO;EACtC;EACA,WAAW;EACX,iBAAiB;CACnB;AACF;AAUA,SAAgB,0BAA0B,MAA6E;CACrH,OAAO;EACL,UAAU,EACR,OAAO;GACL,SAAS,mBAAmB,KAAK,KAAK;GACtC,aAAa;EACf,EACF;EACA,UAAU,eAAe,IAAI;EAG7B,mBAAmB,gCAAgC,IAAI;EACvD,iBAAiB;EAGjB,gBAAgB,8BAA8B,IAAI;CACpD;AACF"}

package/dist/routes/surface.d.ts

@@ -4,7 +4,9 @@ import type { AgentController } from '@mastra/core/agent-controller';
 import type { ApiRoute } from '@mastra/core/server';
 import type { FactoryStorage } from '@mastra/core/storage';
 import type { FactoryIntegration, IntegrationContext } from '../integrations/base.js';
+import type { GithubIntegration } from '../integrations/github/integration.js';
 import type { FactoryBindingPreparationInput } from '../rules/dispatcher.js';
+import { FactoryStartCoordinator } from '../rules/start-coordinator.js';
 import { FactoryTransitionService } from '../rules/transition-service.js';
 import type { FactoryRules } from '../rules/types.js';
 import type { SandboxFleet } from '../sandbox/fleet.js';
@@ -67,6 +69,14 @@ export interface FactoryApiRoutesDeps {
     }) => void;
 }
 export declare function factoryRuleBranch(item: FactoryBindingPreparationInput['item']): string;
+/**
+ * Start a factory run for a rule binding: ensure the source-control session the
+ * coordinator requires, then hand it to `prepare` along with the factory's
+ * default model. Exported for tests — this is the autonomous entry point with no
+ * browser and no interactive user, so nothing else would catch a regression in
+ * what it forwards.
+ */
+export declare function prepareFactoryRuleBinding(github: GithubIntegration, coordinator: FactoryStartCoordinator, projects: FactoryProjectsStorage, input: FactoryBindingPreparationInput): Promise<void>;
 /**
  * Build the {@link IntegrationContext} handed to an integration when the
  * factory collects its capabilities (routes, workers). One shape everywhere:
@@ -78,7 +88,7 @@ export declare function buildIntegrationContext(deps: Pick<FactoryApiRoutesDeps,
     emitAudit?: AuditEmitter['emit'];
     rules: FactoryRules;
     factoryReady: boolean;
-    domains: Pick<FactoryApiRoutesDeps['domains'], 'projects' | 'intake' | 'workItems' | 'channelIdentity'>;
+    domains: Pick<FactoryApiRoutesDeps['domains'], 'projects' | 'intake' | 'workItems' | 'channelIdentity' | 'memorySettings'>;
     /**
      * Stable id of the registered source-control-owning integration (today:
      * `'github'` when registered). Every call site must derive and pass it so

package/dist/routes/surface.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"surface.d.ts","sourceRoot":"","sources":["../../src/routes/surface.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AACjE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAEpD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAE3D,OAAO,KAAK,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAItF,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,wBAAwB,CAAC;AAE7E,OAAO,EAAE,wBAAwB,EAAE,MAAM,gCAAgC,CAAC;AAC1E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oCAAoC,CAAC;AACvE,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,6CAA6C,CAAC;AAC1F,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAC;AACtF,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,6CAA6C,CAAC;AAC1F,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAC;AACvE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,yCAAyC,CAAC;AAClF,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,4CAA4C,CAAC;AACxF,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,wCAAwC,CAAC;AAChF,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAClF,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,yCAAyC,CAAC;AAClF,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACtF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uCAAuC,CAAC;AAM9E,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAK5C,MAAM,WAAW,uBAAuB;IACtC,WAAW,EAAE,kBAAkB,CAAC;IAChC,KAAK,EAAE,OAAO,CAAC;IACf,WAAW,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,oBAAoB;IACnC,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,eAAe,CAAC,eAAe,CAAC,CAAC;IAC7C,qEAAqE;IACrE,IAAI,EAAE,SAAS,CAAC;IAChB,WAAW,EAAE,WAAW,CAAC;IACzB,KAAK,EAAE,YAAY,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,2EAA2E;IAC3E,KAAK,EAAE,YAAY,CAAC;IACpB,4EAA4E;IAC5E,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,kBAAkB,EAAE,kBAAkB,CAAC;IACvC,oBAAoB,EAAE,oBAAoB,CAAC;IAC3C,mFAAmF;IACnF,OAAO,EAAE;QACP,MAAM,EAAE,aAAa,CAAC;QACtB,gBAAgB,EAAE,uBAAuB,CAAC;QAC1C,cAAc,EAAE,qBAAqB,CAAC;QACtC,eAAe,EAAE,sBAAsB,CAAC;QACxC,UAAU,EAAE,iBAAiB,CAAC;QAC9B,QAAQ,EAAE,sBAAsB,CAAC;QACjC,WAAW,EAAE,kBAAkB,CAAC;QAChC,SAAS,EAAE,gBAAgB,CAAC;QAC5B,eAAe,EAAE,sBAAsB,CAAC;KACzC,CAAC;IACF,YAAY,CAAC,EAAE,uBAAuB,EAAE,CAAC;IACzC,WAAW,EAAE,OAAO,CAAC;IACrB,YAAY,EAAE,OAAO,CAAC;IACtB,8EAA8E;IAC9E,KAAK,EAAE,YAAY,CAAC;IACpB,wBAAwB,CAAC,EAAE,wBAAwB,CAAC;IACpD,gBAAgB,CAAC,EAAE,CAAC,OAAO,EAAE;QAC3B,iBAAiB,EAAE,wBAAwB,CAAC;QAC5C,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE,8BAA8B,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;KAC3E,KAAK,IAAI,CAAC;CACZ;AAiDD,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,8BAA8B,CAAC,MAAM,CAAC,GAAG,MAAM,CAmBtF;AA2CD;;;;;GAKG;AACH,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,IAAI,CACR,oBAAoB,EACpB,YAAY,GAAG,cAAc,GAAG,MAAM,GAAG,OAAO,GAAG,gBAAgB,GAAG,oBAAoB,GAAG,sBAAsB,CACpH,GAAG;IACF,WAAW,EAAE,WAAW,CAAC;IACzB,SAAS,CAAC,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC;IACjC,KAAK,EAAE,YAAY,CAAC;IACpB,YAAY,EAAE,OAAO,CAAC;IACtB,OAAO,EAAE,IAAI,CAAC,oBAAoB,CAAC,SAAS,CAAC,EAAE,UAAU,GAAG,QAAQ,GAAG,WAAW,GAAG,iBAAiB,CAAC,CAAC;IACxG;;;;OAIG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC/B,EACD,aAAa,EAAE,MAAM,GACpB,kBAAkB,CAqBpB;AA4ED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,oBAAoB,GAAG,QAAQ,EAAE,CAkH/E"}
+{"version":3,"file":"surface.d.ts","sourceRoot":"","sources":["../../src/routes/surface.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AACjE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAEpD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAE3D,OAAO,KAAK,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAEtF,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAC;AAC/E,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,wBAAwB,CAAC;AAC7E,OAAO,EAAE,uBAAuB,EAAE,MAAM,+BAA+B,CAAC;AACxE,OAAO,EAAE,wBAAwB,EAAE,MAAM,gCAAgC,CAAC;AAC1E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAExD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oCAAoC,CAAC;AACvE,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,6CAA6C,CAAC;AAC1F,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAC;AACtF,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,6CAA6C,CAAC;AAC1F,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAC;AACvE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,yCAAyC,CAAC;AAClF,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,4CAA4C,CAAC;AACxF,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,wCAAwC,CAAC;AAChF,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAClF,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,yCAAyC,CAAC;AAClF,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACtF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uCAAuC,CAAC;AAM9E,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAK5C,MAAM,WAAW,uBAAuB;IACtC,WAAW,EAAE,kBAAkB,CAAC;IAChC,KAAK,EAAE,OAAO,CAAC;IACf,WAAW,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,oBAAoB;IACnC,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,eAAe,CAAC,eAAe,CAAC,CAAC;IAC7C,qEAAqE;IACrE,IAAI,EAAE,SAAS,CAAC;IAChB,WAAW,EAAE,WAAW,CAAC;IACzB,KAAK,EAAE,YAAY,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,2EAA2E;IAC3E,KAAK,EAAE,YAAY,CAAC;IACpB,4EAA4E;IAC5E,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,kBAAkB,EAAE,kBAAkB,CAAC;IACvC,oBAAoB,EAAE,oBAAoB,CAAC;IAC3C,mFAAmF;IACnF,OAAO,EAAE;QACP,MAAM,EAAE,aAAa,CAAC;QACtB,gBAAgB,EAAE,uBAAuB,CAAC;QAC1C,cAAc,EAAE,qBAAqB,CAAC;QACtC,eAAe,EAAE,sBAAsB,CAAC;QACxC,UAAU,EAAE,iBAAiB,CAAC;QAC9B,QAAQ,EAAE,sBAAsB,CAAC;QACjC,WAAW,EAAE,kBAAkB,CAAC;QAChC,SAAS,EAAE,gBAAgB,CAAC;QAC5B,eAAe,EAAE,sBAAsB,CAAC;KACzC,CAAC;IACF,YAAY,CAAC,EAAE,uBAAuB,EAAE,CAAC;IACzC,WAAW,EAAE,OAAO,CAAC;IACrB,YAAY,EAAE,OAAO,CAAC;IACtB,8EAA8E;IAC9E,KAAK,EAAE,YAAY,CAAC;IACpB,wBAAwB,CAAC,EAAE,wBAAwB,CAAC;IACpD,gBAAgB,CAAC,EAAE,CAAC,OAAO,EAAE;QAC3B,iBAAiB,EAAE,wBAAwB,CAAC;QAC5C,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE,8BAA8B,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;KAC3E,KAAK,IAAI,CAAC;CACZ;AAiDD,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,8BAA8B,CAAC,MAAM,CAAC,GAAG,MAAM,CAsBtF;AAED;;;;;;GAMG;AACH,wBAAsB,yBAAyB,CAC7C,MAAM,EAAE,iBAAiB,EACzB,WAAW,EAAE,uBAAuB,EACpC,QAAQ,EAAE,sBAAsB,EAChC,KAAK,EAAE,8BAA8B,GACpC,OAAO,CAAC,IAAI,CAAC,CAoCf;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,IAAI,CACR,oBAAoB,EACpB,YAAY,GAAG,cAAc,GAAG,MAAM,GAAG,OAAO,GAAG,gBAAgB,GAAG,oBAAoB,GAAG,sBAAsB,CACpH,GAAG;IACF,WAAW,EAAE,WAAW,CAAC;IACzB,SAAS,CAAC,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC;IACjC,KAAK,EAAE,YAAY,CAAC;IACpB,YAAY,EAAE,OAAO,CAAC;IACtB,OAAO,EAAE,IAAI,CACX,oBAAoB,CAAC,SAAS,CAAC,EAC/B,UAAU,GAAG,QAAQ,GAAG,WAAW,GAAG,iBAAiB,GAAG,gBAAgB,CAC3E,CAAC;IACF;;;;OAIG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC/B,EACD,aAAa,EAAE,MAAM,GACpB,kBAAkB,CAsBpB;AA4ED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,oBAAoB,GAAG,QAAQ,EAAE,CAkH/E"}

package/dist/routes/surface.js

@@ -1,6 +1,6 @@
+import { ensureFactorySourceSession, resolveFactoryDefaultModelId } from "../session/factory-session.js";
 import { getGithubFeatureDiagnostics } from "../integrations/github/config.js";
 import { invalidateCustomProvidersSnapshots } from "./custom-provider-source.js";
-import { ensureFactoryRuleSession } from "../integrations/github/factory-session.js";
 import { FactoryStartCoordinator } from "../rules/start-coordinator.js";
 import { FactoryTransitionService } from "../rules/transition-service.js";
 import { ConfigRoutes } from "./config.js";
@@ -58,13 +58,21 @@ function factoryRuleBranch(item) {
 	if (item.externalSource?.integrationId === "github" && item.externalSource.type === "issue" && typeof issueNumber === "number") return `factory/issue-${issueNumber}`;
 	const pullRequestNumber = metadata.githubPullRequestNumber ?? metadata.number;
 	if (item.externalSource?.integrationId === "github" && item.externalSource.type === "pull-request" && typeof pullRequestNumber === "number") return `factory/pr-${pullRequestNumber}`;
-	throw new Error("Factory skill invocation requires a GitHub issue or pull request number.");
+	if (item.externalSource?.integrationId === "linear" && typeof metadata.identifier === "string") return `factory/linear-${metadata.identifier.toLowerCase()}`;
+	throw new Error("Factory skill invocation requires a supported issue or pull request identifier.");
 }
-async function prepareFactoryRuleBinding(github, coordinator, input) {
+/**
+* Start a factory run for a rule binding: ensure the source-control session the
+* coordinator requires, then hand it to `prepare` along with the factory's
+* default model. Exported for tests — this is the autonomous entry point with no
+* browser and no interactive user, so nothing else would catch a regression in
+* what it forwards.
+*/
+async function prepareFactoryRuleBinding(github, coordinator, projects, input) {
 	const branch = factoryRuleBranch(input.item);
 	const repositorySlug = typeof input.item.metadata?.repository === "string" ? input.item.metadata.repository : void 0;
-	const preparedSession = await ensureFactoryRuleSession({
-		github,
+	const preparedSession = await ensureFactorySourceSession({
+		sourceControl: github.sourceControlStorage,
 		orgId: input.record.orgId,
 		factoryProjectId: input.record.factoryProjectId,
 		repositorySlug,
@@ -77,6 +85,7 @@ async function prepareFactoryRuleBinding(github, coordinator, input) {
 		userId: preparedSession.userId,
 		factoryProjectId: input.record.factoryProjectId,
 		sessionId: preparedSession.sessionId,
+		defaultModelId: await resolveFactoryDefaultModelId(projects, input.record.factoryProjectId),
 		threadTitle: `${input.role === "review" ? "PR" : "Issue"}: ${input.item.title}`,
 		kickoffKey: input.record.id,
 		destinationStage,
@@ -114,7 +123,8 @@ function buildIntegrationContext(deps, integrationId) {
 			...deps.sourceControlOwnerId ? { sourceControlOwner: deps.sourceControlStorage.forIntegration(deps.sourceControlOwnerId) } : {},
 			projects: deps.domains.projects,
 			intake: deps.domains.intake,
-			channelIdentity: deps.domains.channelIdentity
+			channelIdentity: deps.domains.channelIdentity,
+			memorySettings: deps.domains.memorySettings
 		},
 		...deps.factoryReady ? { rules: {
 			config: deps.rules,
@@ -223,7 +233,7 @@ function assembleFactoryApiRoutes(deps) {
 	const startCoordinator = transitionService ? new FactoryStartCoordinator(deps.controller, deps.domains.workItems, transitionService, githubIntegration?.sourceControlStorage, deps.domains.memorySettings) : void 0;
 	if (transitionService && startCoordinator) deps.onFactoryRuntime?.({
 		transitionService,
-		...githubIntegration ? { prepareBinding: (input) => prepareFactoryRuleBinding(githubIntegration, startCoordinator, input) } : {}
+		...githubIntegration ? { prepareBinding: (input) => prepareFactoryRuleBinding(githubIntegration, startCoordinator, deps.domains.projects, input) } : {}
 	});
 	return [
 		...buildFsRoutes({
@@ -282,6 +292,6 @@ function assembleFactoryApiRoutes(deps) {
 	];
 }
 //#endregion
-export { assembleFactoryApiRoutes, buildIntegrationContext, factoryRuleBranch };
+export { assembleFactoryApiRoutes, buildIntegrationContext, factoryRuleBranch, prepareFactoryRuleBinding };
 
 //# sourceMappingURL=surface.js.map