@mastra/factory 0.7.1-alpha.5 → 0.8.0-alpha.7

package/dist/integrations/linear/integration.js.map

@@ -1 +1 @@
-{"version":3,"file":"integration.js","names":["#storage","#projects","#auth","#updateTokens","#inflightRefreshes","#connectionChecks","#orgIdByResourceId","#resolveIntakeDispatch","#listIntakeIssues","#getIntakeIssue","#createIntakeComment","#updateIntakeIssue","#clientId","#clientSecret","#requestTokens","#listTeamWorkflowStates","#fetchRemainingIssueComments"],"sources":["../../../src/integrations/linear/integration.ts"],"sourcesContent":["/**\n * `LinearIntegration` — the self-contained Linear integration.\n *\n * Implements the system-wide `FactoryIntegration` contract\n * (`../factory-integration.ts`): the deploy entry reads the Linear OAuth env\n * vars ONCE, constructs an instance with explicit credentials, and passes it\n * to `MastraFactory`. Everything Linear-flavored the system does — the OAuth\n * connect/callback flow, workspace/project/issue reads for Intake, and the\n * agent's issue tools — flows through this instance. No other module reads\n * `LINEAR_*` env vars.\n *\n * The class owns:\n *  - OAuth: the user-facing authorize URL, code exchange, and refresh-token\n *    rotation against Linear's `/oauth/token` endpoint.\n *  - GraphQL reads/writes: viewer workspace, projects, active issues for\n *    Intake, full issue detail (description + discussion), issue comments.\n *  - The HTTP surface (`routes()`) and per-request agent tools\n *    (`agentTools()`), delegating to `./routes.ts` / `./agent-tools.ts` with\n *    `this` as the API client.\n */\n\nimport type { RequestContext } from '@mastra/core/request-context';\nimport type { ApiRoute } from '@mastra/core/server';\nimport type { MastraWorker } from '@mastra/core/worker';\nimport type { IntegrationConnection } from '../../capabilities/connection.js';\nimport type {\n  CreateIntakeCommentInput,\n  GetIntakeIssueInput,\n  Intake,\n  IntakeIssue,\n  IntakeIssueDetail,\n  ListIntakeIssuesInput,\n  UpdateIntakeIssueInput,\n} from '../../capabilities/intake.js';\nimport type { RouteAuth } from '../../routes/route.js';\nimport type { IntegrationStorageHandle } from '../../storage/domains/integrations/base.js';\nimport type { FactoryProjectsStorage } from '../../storage/domains/projects/base.js';\nimport type { FactoryIntegration, IntegrationContext, IntegrationTools } from '../base.js';\nimport { IssueReconcileWorker } from '../issue-reconcile-worker.js';\nimport { buildLinearAgentTools } from './agent-tools.js';\nimport { attachLinearIssueReconciler } from './issue-reconciler.js';\nimport { linearIssueReconciliationEnabled, linearIssueReconciliationInterval } from './reconciliation-config.js';\nimport { buildLinearRoutes } from './routes.js';\nimport { attachLinearRules } from './rules.js';\nimport type { LinearConnectionRow, LinearStorageHandle, UpsertLinearConnectionInput } from './storage.js';\n\nconst LINEAR_GRAPHQL_URL = 'https://api.linear.app/graphql';\nconst LINEAR_TOKEN_URL = 'https://api.linear.app/oauth/token';\nconst LINEAR_AUTHORIZE_URL = 'https://linear.app/oauth/authorize';\n\n/** Credentials for the Linear OAuth application. All fields are required. */\nexport interface LinearIntegrationConfig {\n  /** OAuth client id of the Linear application. */\n  clientId: string;\n  /** OAuth client secret of the Linear application. */\n  clientSecret: string;\n}\n\n/**\n * Tokens minted by Linear's `/oauth/token` endpoint. Linear access tokens\n * expire (24h) and refresh tokens rotate: every refresh invalidates the old\n * pair, so callers must persist the whole set after each exchange.\n */\nexport interface LinearTokenSet {\n  accessToken: string;\n  /** Null when Linear issued no refresh token (legacy non-expiring apps). */\n  refreshToken: string | null;\n  /** Null when Linear reported no `expires_in`. */\n  expiresAt: Date | null;\n  /** Scopes granted to the token as reported by Linear; null when omitted. */\n  scope: string | null;\n}\n\nexport interface LinearWorkspace {\n  name: string;\n  urlKey: string;\n}\n\nexport interface LinearIssue {\n  id: string;\n  projectId: string;\n  /** Human key like `ENG-123`. */\n  identifier: string;\n  title: string;\n  url: string;\n  /** Workflow state name, e.g. `In Progress`. */\n  state: string;\n  /** Workflow state type, e.g. `backlog` / `unstarted` / `started` / `triage`. */\n  stateType: string;\n  priorityLabel: string;\n  assignee: string | null;\n  /** Display name of the Linear user who created the issue, when Linear returns one. */\n  creator: string | null;\n  team: string | null;\n  labels: string[];\n  createdAt: string;\n  updatedAt: string;\n}\n\nexport interface LinearIssuePage {\n  issues: LinearIssue[];\n  /** Opaque cursor for the next page, or `null` on the last page. */\n  nextCursor: string | null;\n}\n\nexport interface LinearProjectTeam {\n  id: string;\n  /** Short team key, e.g. `ENG`. */\n  key: string;\n  name: string;\n}\n\nexport interface LinearProject {\n  id: string;\n  name: string;\n  /** Project state, e.g. `planned` / `started` / `paused` / `completed`. */\n  state: string;\n  /** Teams the project belongs to (the Settings picker groups by these). */\n  teams: LinearProjectTeam[];\n}\n\nexport interface LinearIssueComment {\n  author: string | null;\n  body: string;\n  createdAt: string;\n}\n\n/** Full issue payload for agent context: everything in {@link LinearIssue} plus description and discussion. */\nexport interface LinearIssueDetail extends LinearIssue {\n  /** Markdown body of the issue, or `null` when empty. */\n  description: string | null;\n  /** Discussion comments, oldest first. */\n  comments: LinearIssueComment[];\n}\n\n/** The comment created by {@link LinearIntegration.createIssueComment}. */\nexport interface LinearCreatedComment {\n  id: string;\n  url: string;\n}\n\nconst LINEAR_ISSUES_PAGE_SIZE = 30;\nconst ISSUE_COMMENTS_PAGE_SIZE = 50;\n/** Hard stop for comment pagination so a misbehaving cursor can't loop forever. */\nconst ISSUE_COMMENTS_MAX_PAGES = 20;\n\n/** Refresh this many ms before the recorded expiry to absorb clock skew. */\nconst TOKEN_REFRESH_SKEW_MS = 60_000;\n\n/** Re-check an org's Linear connection (and its scopes) at most this often. */\nconst CONNECTION_TTL_MS = 60_000;\n\nconst UUID_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;\n\n/** Thrown when the org's Linear authorization can no longer be renewed. */\nexport class LinearReauthRequiredError extends Error {\n  constructor() {\n    super('Linear authorization expired. Reconnect Linear to keep syncing intake issues.');\n  }\n}\n\n/** Cached result of {@link LinearIntegration.checkConnection}. */\nexport interface LinearConnectionCheck {\n  connected: boolean;\n  /** Whether the granted OAuth scope allows posting issue comments. */\n  canComment: boolean;\n  checkedAt: number;\n}\n\ninterface IssuesQueryData {\n  issues: {\n    nodes: Array<{\n      id: string;\n      identifier: string;\n      title: string;\n      url: string;\n      priorityLabel: string;\n      createdAt: string;\n      updatedAt: string;\n      state: { name: string; type: string };\n      project: { id: string };\n      assignee: { name: string } | null;\n      creator: { name: string } | null;\n      team: { key: string } | null;\n      labels: { nodes: Array<{ name: string }> };\n    }>;\n    pageInfo: { hasNextPage: boolean; endCursor: string | null };\n  };\n}\n\ninterface IssueCommentNode {\n  body: string;\n  createdAt: string;\n  user: { name: string } | null;\n}\n\ninterface IssueCommentsPage {\n  nodes: IssueCommentNode[];\n  pageInfo: { hasNextPage: boolean; endCursor: string | null };\n}\n\ninterface IssueDetailQueryData {\n  issue: {\n    id: string;\n    identifier: string;\n    title: string;\n    description: string | null;\n    url: string;\n    priorityLabel: string;\n    createdAt: string;\n    updatedAt: string;\n    state: { name: string; type: string };\n    project: { id: string };\n    assignee: { name: string } | null;\n    creator: { name: string } | null;\n    team: { key: string } | null;\n    labels: { nodes: Array<{ name: string }> };\n    comments: IssueCommentsPage;\n  } | null;\n}\n\ninterface IssueCommentsQueryData {\n  issue: { comments: IssueCommentsPage } | null;\n}\n\ninterface IssueIdQueryData {\n  issue: { id: string } | null;\n}\n\ninterface CommentCreateMutationData {\n  commentCreate: { success: boolean; comment: { id: string; url: string } | null };\n}\n\n/** POST a GraphQL query to Linear with the given OAuth access token. */\nasync function linearGraphql<T>(accessToken: string, query: string, variables?: Record<string, unknown>): Promise<T> {\n  const res = await fetch(LINEAR_GRAPHQL_URL, {\n    method: 'POST',\n    signal: AbortSignal.timeout(15_000),\n    headers: {\n      'content-type': 'application/json',\n      authorization: `Bearer ${accessToken}`,\n    },\n    body: JSON.stringify({ query, variables }),\n  });\n  if (!res.ok) {\n    // Linear returns GraphQL errors (validation, missing scopes, …) with a\n    // 400 status — surface the actual message instead of just the code.\n    let detail: string | null = null;\n    try {\n      const errBody = (await res.json()) as { errors?: Array<{ message?: string }> };\n      detail = errBody.errors?.[0]?.message ?? null;\n    } catch {\n      // Non-JSON error body; fall back to the status code alone.\n    }\n    const err = new Error(`Linear API request failed (${res.status})${detail ? `: ${detail}` : ''}`);\n    (err as { status?: number }).status = res.status;\n    throw err;\n  }\n  const body = (await res.json()) as { data?: T; errors?: Array<{ message?: string }> };\n  if (body.errors?.length) {\n    throw new Error(`Linear API error: ${body.errors[0]?.message ?? 'unknown error'}`);\n  }\n  if (!body.data) {\n    throw new Error('Linear API returned no data.');\n  }\n  return body.data;\n}\n\nexport class LinearIntegration implements FactoryIntegration {\n  /** Stable integration identifier (see `../base.ts`). */\n  readonly id = 'linear';\n  /** Bound once by the factory via `initialize()` before any surface is used. */\n  #storage: LinearStorageHandle | undefined;\n  #projects: FactoryProjectsStorage | undefined;\n  #auth: RouteAuth | undefined;\n\n  /** Bind Linear's slice of the generic integration storage, the projects domain, and the host auth seam. */\n  initialize({\n    storage,\n    projects,\n    auth,\n  }: {\n    storage: IntegrationStorageHandle;\n    projects: FactoryProjectsStorage;\n    auth: RouteAuth;\n  }): void {\n    this.#storage = storage as unknown as LinearStorageHandle;\n    this.#projects = projects;\n    this.#auth = auth;\n  }\n\n  get storage(): LinearStorageHandle {\n    if (!this.#storage) {\n      throw new Error('LinearIntegration is not initialized — the factory binds storage during prepare().');\n    }\n    return this.#storage;\n  }\n\n  /** Factory projects domain — maps a session's resourceId to its owning org. */\n  get projects(): FactoryProjectsStorage {\n    if (!this.#projects) {\n      throw new Error('LinearIntegration is not initialized — the factory binds storage during prepare().');\n    }\n    return this.#projects;\n  }\n\n  /**\n   * Whether the host runs with web auth enabled. Linear connections are\n   * org-owned, so every Linear surface is inert without a tenant auth seam.\n   */\n  get authEnabled(): boolean {\n    return this.#auth?.enabled() ?? false;\n  }\n\n  // ── Connection + OAuth token lifecycle ───────────────────────────────────\n\n  /** Load the org's Linear connection, or `null` when not connected. */\n  async loadConnection(orgId: string): Promise<LinearConnectionRow | null> {\n    const connection = await this.storage.connections.get(orgId);\n    if (!connection) return null;\n    const { data } = connection;\n    return {\n      id: connection.id,\n      orgId: connection.orgId,\n      userId: connection.userId,\n      accessToken: data.accessToken,\n      scope: data.scope ?? null,\n      refreshToken: data.refreshToken ?? null,\n      expiresAt: data.expiresAtMs === null || data.expiresAtMs === undefined ? null : new Date(data.expiresAtMs),\n      workspaceName: data.workspaceName ?? null,\n      workspaceUrlKey: data.workspaceUrlKey ?? null,\n      createdAt: connection.createdAt,\n      updatedAt: connection.updatedAt,\n    };\n  }\n\n  /** Insert or replace the org's connection (one per org). */\n  async upsertConnection(input: UpsertLinearConnectionInput): Promise<void> {\n    await this.storage.connections.upsert(input.orgId, {\n      userId: input.userId,\n      data: {\n        accessToken: input.accessToken,\n        refreshToken: input.refreshToken,\n        expiresAtMs: input.expiresAt?.getTime() ?? null,\n        scope: input.scope,\n        workspaceName: input.workspaceName,\n        workspaceUrlKey: input.workspaceUrlKey,\n      },\n    });\n    // Let the agent tools see the new connection immediately.\n    this.invalidateConnectionCache(input.orgId);\n  }\n\n  /** Persist a rotated token set on the org's existing connection row. */\n  async #updateTokens(orgId: string, tokens: LinearTokenSet): Promise<void> {\n    await this.storage.connections.update(orgId, data => ({\n      ...data,\n      accessToken: tokens.accessToken,\n      refreshToken: tokens.refreshToken,\n      expiresAtMs: tokens.expiresAt?.getTime() ?? null,\n      // Refresh responses may omit scope; keep the recorded grant.\n      scope: tokens.scope ?? data.scope,\n    }));\n  }\n\n  /**\n   * Whether the connection's token can post issue comments. Legacy rows\n   * without a recorded scope were minted with `read` only, so they count as\n   * read-only until the org reconnects Linear.\n   */\n  canPostComments(connection: LinearConnectionRow): boolean {\n    const scopes = (connection.scope ?? '').split(/[\\s,]+/).filter(Boolean);\n    return scopes.some(scope => scope === 'comments:create' || scope === 'write' || scope === 'admin');\n  }\n\n  /**\n   * In-flight refreshes keyed by org. Linear rotates refresh tokens, so two\n   * concurrent refreshes with the same token would invalidate each other —\n   * single-flight ensures one exchange per org and shares the result.\n   */\n  readonly #inflightRefreshes = new Map<string, Promise<string>>();\n\n  /**\n   * Return a usable access token for the connection, proactively refreshing\n   * it when the recorded expiry is past (or imminent). Throws\n   * `LinearReauthRequiredError` when the token is expired and cannot be\n   * refreshed — the org has to go through the OAuth flow again.\n   */\n  async getFreshAccessToken(connection: LinearConnectionRow): Promise<string> {\n    const expired =\n      connection.expiresAt !== null && connection.expiresAt.getTime() - TOKEN_REFRESH_SKEW_MS <= Date.now();\n    if (!expired) return connection.accessToken;\n\n    if (!connection.refreshToken) {\n      // Legacy row from before refresh-token support: nothing to renew with.\n      throw new LinearReauthRequiredError();\n    }\n\n    const existing = this.#inflightRefreshes.get(connection.orgId);\n    if (existing) return existing;\n\n    // The caller may hold a stale row: another request could have refreshed\n    // and rotated the refresh token since this row was loaded. Reload before\n    // refreshing so we don't burn the rotated token and force a false reauth.\n    const latest = await this.loadConnection(connection.orgId);\n    if (!latest) throw new LinearReauthRequiredError();\n\n    const concurrent = this.#inflightRefreshes.get(connection.orgId);\n    if (concurrent) return concurrent;\n\n    const latestExpired = latest.expiresAt !== null && latest.expiresAt.getTime() - TOKEN_REFRESH_SKEW_MS <= Date.now();\n    if (!latestExpired) return latest.accessToken;\n    if (!latest.refreshToken) throw new LinearReauthRequiredError();\n\n    const refreshToken = latest.refreshToken;\n    const refresh = (async () => {\n      try {\n        const tokens = await this.refreshAccessToken(refreshToken);\n        await this.#updateTokens(connection.orgId, tokens);\n        return tokens.accessToken;\n      } catch (err) {\n        const status = (err as { status?: number }).status;\n        // invalid_grant surfaces as 400/401: the refresh token was revoked or\n        // already rotated away. Terminal for this connection.\n        if (status === 400 || status === 401) throw new LinearReauthRequiredError();\n        throw err;\n      } finally {\n        this.#inflightRefreshes.delete(connection.orgId);\n      }\n    })();\n    this.#inflightRefreshes.set(connection.orgId, refresh);\n    return refresh;\n  }\n\n  // ── Connection checks for agent tools ────────────────────────────────────\n\n  /** Re-check an org's Linear connection (and its scopes) at most this often. */\n  readonly #connectionChecks = new Map<string, LinearConnectionCheck>();\n\n  /**\n   * Whether the org has an active connection and whether its granted scope\n   * allows posting comments. Cached per org with a short TTL — tool-set\n   * resolution runs on every request.\n   */\n  async checkConnection(orgId: string): Promise<LinearConnectionCheck> {\n    const cached = this.#connectionChecks.get(orgId);\n    if (cached && Date.now() - cached.checkedAt < CONNECTION_TTL_MS) return cached;\n    const connection = await this.loadConnection(orgId);\n    const check: LinearConnectionCheck = {\n      connected: connection !== null,\n      canComment: connection !== null && this.canPostComments(connection),\n      checkedAt: Date.now(),\n    };\n    this.#connectionChecks.set(orgId, check);\n    return check;\n  }\n\n  /**\n   * Drop the cached connection check for an org. Called after a connection is\n   * persisted so the tools show up on the very next run instead of after the\n   * TTL lapses.\n   */\n  invalidateConnectionCache(orgId: string): void {\n    this.#connectionChecks.delete(orgId);\n  }\n\n  /**\n   * A project's org never changes, so the resourceId → orgId mapping is\n   * cached forever. `null` marks resource ids that aren't factory projects\n   * (e.g. local default resources) so we don't re-query them on every\n   * tool-set resolution.\n   */\n  readonly #orgIdByResourceId = new Map<string, string | null>();\n\n  /** Map a session's resourceId to its owning org, or `null` when it isn't a project. */\n  async resolveOrgId(resourceId: string): Promise<string | null> {\n    const cached = this.#orgIdByResourceId.get(resourceId);\n    if (cached !== undefined) return cached;\n    // Non-UUID resource ids (local/dev resources) would make the uuid column\n    // comparison throw — they're definitively \"not a project\", so cache that.\n    if (!UUID_PATTERN.test(resourceId)) {\n      this.#orgIdByResourceId.set(resourceId, null);\n      return null;\n    }\n    let orgId: string | null;\n    try {\n      await this.projects.ensureReady();\n      const project = await this.projects.getById({ id: resourceId });\n      orgId = project?.orgId ?? null;\n    } catch {\n      // Transient database failure: skip the tools for this request but don't\n      // cache the miss, so the next request retries the lookup.\n      return null;\n    }\n    this.#orgIdByResourceId.set(resourceId, orgId);\n    return orgId;\n  }\n\n  /** Test hook: clear the org/connection caches between specs. */\n  clearCaches(): void {\n    this.#orgIdByResourceId.clear();\n    this.#connectionChecks.clear();\n  }\n\n  readonly intake: Intake = {\n    resolveIntakeDispatch: input => this.#resolveIntakeDispatch(input),\n    listSources: async ({ orgId }) => {\n      const connection = await this.loadConnection(orgId);\n      if (!connection) return [];\n      const accessToken = await this.getFreshAccessToken(connection);\n      const projects = await this.listProjects(accessToken);\n      return projects.map(project => ({\n        id: project.id,\n        name: project.name,\n        type: 'project',\n      }));\n    },\n    listItems: async ({ orgId, sourceIds, cursor }) => {\n      if (sourceIds.length === 0) return { items: [], nextCursor: null };\n      const connection = await this.loadConnection(orgId);\n      if (!connection) return { items: [], nextCursor: null };\n      const accessToken = await this.getFreshAccessToken(connection);\n      const page = await this.listActiveIssues(accessToken, cursor, sourceIds);\n      return {\n        items: page.issues.map(issue => ({\n          source: { type: 'issue', externalId: issue.id, url: issue.url },\n          sourceId: issue.projectId,\n          title: `${issue.identifier}: ${issue.title}`,\n          status: issue.state,\n          labels: issue.labels,\n          assignee: issue.assignee,\n          createdAt: issue.createdAt,\n          updatedAt: issue.updatedAt,\n          metadata: {\n            identifier: issue.identifier,\n            stateType: issue.stateType,\n            priority: issue.priorityLabel,\n            team: issue.team,\n          },\n        })),\n        nextCursor: page.nextCursor,\n      };\n    },\n    listIssues: input => this.#listIntakeIssues(input),\n    getIssue: input => this.#getIntakeIssue(input),\n    createComment: input => this.#createIntakeComment(input),\n    updateIssue: input => this.#updateIntakeIssue(input),\n  };\n\n  /**\n   * Background-dispatch context: the org's OAuth connection with a fresh\n   * token. Linear work items store the issue UUID directly as `externalId`.\n   */\n  async #resolveIntakeDispatch({\n    orgId,\n    externalSource,\n  }: {\n    orgId: string;\n    externalSource: { type: string; externalId: string };\n  }): Promise<{ connection: IntegrationConnection; issueId: string } | null> {\n    if (externalSource.type !== 'issue') return null;\n    const connection = await this.loadConnection(orgId);\n    if (!connection) return null;\n    const accessToken = await this.getFreshAccessToken(connection);\n    return { connection: { type: 'oauth', accessToken }, issueId: externalSource.externalId };\n  }\n  /**\n   * The OAuth connect/callback flow round-trips a signed `state` through\n   * Linear, so a multi-replica deploy needs a deployment-stable state secret.\n   */\n  readonly requiresStableStateSigner = true;\n\n  readonly #clientId: string;\n  readonly #clientSecret: string;\n\n  constructor(config: LinearIntegrationConfig) {\n    const missing = (['clientId', 'clientSecret'] as const).filter(key => !config[key]);\n    if (missing.length > 0) {\n      throw new Error(`LinearIntegration is missing required config: ${missing.join(', ')}.`);\n    }\n    this.#clientId = config.clientId;\n    this.#clientSecret = config.clientSecret;\n  }\n\n  // ── OAuth ────────────────────────────────────────────────────────────────\n\n  /**\n   * Build the OAuth authorize URL. `prompt=consent` forces the workspace\n   * picker even for an already-authorized user, so \"reconnect\" can switch\n   * workspaces.\n   */\n  buildAuthorizeUrl(state: string, redirectUri: string): string {\n    const url = new URL(LINEAR_AUTHORIZE_URL);\n    url.searchParams.set('client_id', this.#clientId);\n    url.searchParams.set('redirect_uri', redirectUri);\n    url.searchParams.set('response_type', 'code');\n    // `comments:create` lets the agent's linear_create_comment tool post\n    // comments; everything else the integration does is read-only.\n    url.searchParams.set('scope', 'read,comments:create');\n    url.searchParams.set('state', state);\n    url.searchParams.set('prompt', 'consent');\n    return url.toString();\n  }\n\n  /** Exchange an OAuth `code` for a workspace-scoped token set. */\n  async exchangeOAuthCode(code: string, redirectUri: string): Promise<LinearTokenSet> {\n    return this.#requestTokens({ grant_type: 'authorization_code', code, redirect_uri: redirectUri }, 'token exchange');\n  }\n\n  /**\n   * Exchange a refresh token for a new token set. Linear rotates refresh\n   * tokens, so the returned set replaces the stored one entirely. A 400/401\n   * here means the refresh token is invalid/revoked and the org must\n   * re-authorize.\n   */\n  async refreshAccessToken(refreshToken: string): Promise<LinearTokenSet> {\n    return this.#requestTokens({ grant_type: 'refresh_token', refresh_token: refreshToken }, 'token refresh');\n  }\n\n  /** POST to Linear's token endpoint and normalize the response. */\n  async #requestTokens(params: Record<string, string>, label: string): Promise<LinearTokenSet> {\n    const res = await fetch(LINEAR_TOKEN_URL, {\n      method: 'POST',\n      signal: AbortSignal.timeout(10_000),\n      headers: { 'content-type': 'application/x-www-form-urlencoded' },\n      body: new URLSearchParams({\n        ...params,\n        client_id: this.#clientId,\n        client_secret: this.#clientSecret,\n      }),\n    });\n    if (!res.ok) {\n      const err = new Error(`Linear ${label} failed (${res.status})`);\n      (err as { status?: number }).status = res.status;\n      throw err;\n    }\n    const body = (await res.json()) as {\n      access_token?: string;\n      refresh_token?: string;\n      expires_in?: number;\n      scope?: string;\n    };\n    if (!body.access_token) {\n      throw new Error(`Linear ${label} returned no access token.`);\n    }\n    return {\n      accessToken: body.access_token,\n      refreshToken: body.refresh_token ?? null,\n      expiresAt: typeof body.expires_in === 'number' ? new Date(Date.now() + body.expires_in * 1000) : null,\n      scope: body.scope ?? null,\n    };\n  }\n\n  // ── GraphQL reads/writes ─────────────────────────────────────────────────\n\n  /** Fetch the workspace (organization) the access token is scoped to. */\n  async fetchWorkspace(accessToken: string): Promise<LinearWorkspace> {\n    const data = await linearGraphql<{ organization: { name: string; urlKey: string } }>(\n      accessToken,\n      `query { organization { name urlKey } }`,\n    );\n    return { name: data.organization.name, urlKey: data.organization.urlKey };\n  }\n\n  async #listIntakeIssues(input: ListIntakeIssuesInput): Promise<{ issues: IntakeIssue[]; nextCursor: string | null }> {\n    const accessToken = getLinearAccessToken(input.connection);\n    const result = await this.listActiveIssues(accessToken, input.cursor, input.sourceIds, input.labels);\n    return {\n      issues: result.issues.map(issue => linearIssueToIntakeIssue(issue)),\n      nextCursor: result.nextCursor,\n    };\n  }\n\n  async #getIntakeIssue(input: GetIntakeIssueInput): Promise<IntakeIssueDetail | null> {\n    const accessToken = getLinearAccessToken(input.connection);\n    const issue = await this.fetchIssueDetail(accessToken, input.issueId);\n    if (!issue) return null;\n    return {\n      ...linearIssueToIntakeIssue(issue),\n      description: issue.description,\n      commentCount: issue.comments.length,\n      comments: issue.comments,\n    };\n  }\n\n  async #createIntakeComment(input: CreateIntakeCommentInput): Promise<{ id: string; url: string } | null> {\n    const accessToken = getLinearAccessToken(input.connection);\n    return this.createIssueComment(accessToken, input.issueId, input.body);\n  }\n\n  async #updateIntakeIssue(input: UpdateIntakeIssueInput): Promise<IntakeIssue | null> {\n    const accessToken = getLinearAccessToken(input.connection);\n    const issue = await this.fetchIssueDetail(accessToken, input.issueId);\n    if (!issue) return null;\n    const teamKey = issue.team;\n    if (!teamKey) return null;\n    const states = await this.#listTeamWorkflowStates(accessToken, teamKey);\n    let targetState: { id: string; name: string; type: string } | null = null;\n    if (input.state.kind === 'byType') {\n      const wantedType = input.state.stateType;\n      targetState = states.find(state => state.type === wantedType) ?? null;\n    } else {\n      const wanted = input.state.name.toLowerCase();\n      targetState = states.find(state => state.name.toLowerCase() === wanted) ?? null;\n    }\n    if (!targetState) return null;\n    if (targetState.name === issue.state) {\n      return linearIssueToIntakeIssue(issue);\n    }\n    const data = await linearGraphql<{ issueUpdate: { success: boolean } }>(\n      accessToken,\n      `mutation UpdateIssueState($id: String!, $stateId: String!) {\n        issueUpdate(id: $id, input: { stateId: $stateId }) { success }\n      }`,\n      { id: issue.id, stateId: targetState.id },\n    );\n    if (!data.issueUpdate.success) {\n      throw new Error('Linear did not accept the issue update.');\n    }\n    const fresh = await this.fetchIssueDetail(accessToken, issue.id);\n    if (!fresh) return null;\n    return linearIssueToIntakeIssue(fresh);\n  }\n\n  async #listTeamWorkflowStates(\n    accessToken: string,\n    teamKey: string,\n  ): Promise<Array<{ id: string; name: string; type: string }>> {\n    const data = await linearGraphql<{\n      team: { states: { nodes: Array<{ id: string; name: string; type: string }> } } | null;\n    }>(\n      accessToken,\n      `query TeamStates($key: String!) {\n        team(id: $key) { states(first: 100) { nodes { id name type } } }\n      }`,\n      { key: teamKey },\n    );\n    return data.team?.states.nodes ?? [];\n  }\n\n  /** List the workspace's projects (for the Settings intake-source picker). */\n  async listProjects(accessToken: string): Promise<LinearProject[]> {\n    const data = await linearGraphql<{\n      projects: {\n        nodes: Array<{\n          id: string;\n          name: string;\n          state: string;\n          teams: { nodes: Array<{ id: string; key: string; name: string }> };\n        }>;\n      };\n    }>(\n      accessToken,\n      `query { projects(first: 100) { nodes { id name state teams(first: 10) { nodes { id key name } } } } }`,\n    );\n    return data.projects.nodes.map(node => ({\n      id: node.id,\n      name: node.name,\n      state: node.state,\n      teams: node.teams.nodes.map(team => ({ id: team.id, key: team.key, name: team.name })),\n    }));\n  }\n\n  /**\n   * List one page of the workspace's active issues (triage/backlog/unstarted/\n   * started — completed and canceled are excluded), most recently updated\n   * first. When `projectIds` is provided, only issues from those projects are\n   * returned.\n   */\n  async listActiveIssues(\n    accessToken: string,\n    after?: string,\n    projectIds?: string[],\n    labels?: string[],\n  ): Promise<LinearIssuePage> {\n    const normalizedLabels = [...new Set((labels ?? []).map(label => label.trim()).filter(Boolean))];\n    const projectFilter = projectIds?.length ? ', project: { id: { in: $projectIds } }' : '';\n    const projectVar = projectIds?.length ? ', $projectIds: [ID!]' : '';\n    const labelFilter = normalizedLabels.length > 0 ? ', labels: { name: { in: $labels } }' : '';\n    const labelVar = normalizedLabels.length > 0 ? ', $labels: [String!]' : '';\n    const data = await linearGraphql<IssuesQueryData>(\n      accessToken,\n      `query Intake($first: Int!, $after: String${projectVar}${labelVar}) {\n        issues(\n          first: $first\n          after: $after\n          orderBy: updatedAt\n          filter: { state: { type: { in: [\"triage\", \"backlog\", \"unstarted\", \"started\"] } }${projectFilter}${labelFilter} }\n        ) {\n          nodes {\n            id\n            identifier\n            title\n            url\n            priorityLabel\n            createdAt\n            updatedAt\n            state { name type }\n            project { id }\n            assignee { name }\n            creator { name }\n            team { key }\n            labels { nodes { name } }\n          }\n          pageInfo { hasNextPage endCursor }\n        }\n      }`,\n      {\n        first: LINEAR_ISSUES_PAGE_SIZE,\n        after: after ?? null,\n        ...(projectIds?.length ? { projectIds } : {}),\n        ...(normalizedLabels.length > 0 ? { labels: normalizedLabels } : {}),\n      },\n    );\n    const { nodes, pageInfo } = data.issues;\n    return {\n      issues: nodes.map(node => ({\n        id: node.id,\n        projectId: node.project.id,\n        identifier: node.identifier,\n        title: node.title,\n        url: node.url,\n        state: node.state.name,\n        stateType: node.state.type,\n        priorityLabel: node.priorityLabel,\n        assignee: node.assignee?.name ?? null,\n        creator: node.creator?.name ?? null,\n        team: node.team?.key ?? null,\n        labels: node.labels.nodes.map(label => label.name),\n        createdAt: node.createdAt,\n        updatedAt: node.updatedAt,\n      })),\n      nextCursor: pageInfo.hasNextPage ? pageInfo.endCursor : null,\n    };\n  }\n\n  /** Follow `comments.pageInfo` until exhausted so long discussions aren't truncated. */\n  async #fetchRemainingIssueComments(\n    accessToken: string,\n    issueId: string,\n    firstPage: IssueCommentsPage,\n  ): Promise<IssueCommentNode[]> {\n    const nodes = [...firstPage.nodes];\n    let { hasNextPage, endCursor } = firstPage.pageInfo;\n    for (let page = 1; hasNextPage && endCursor && page < ISSUE_COMMENTS_MAX_PAGES; page++) {\n      const data = await linearGraphql<IssueCommentsQueryData>(\n        accessToken,\n        `query IssueComments($id: String!, $first: Int!, $after: String!) {\n          issue(id: $id) {\n            comments(first: $first, after: $after) {\n              nodes { body createdAt user { name } }\n              pageInfo { hasNextPage endCursor }\n            }\n          }\n        }`,\n        { id: issueId, first: ISSUE_COMMENTS_PAGE_SIZE, after: endCursor },\n      );\n      const comments = data.issue?.comments;\n      if (!comments) break;\n      nodes.push(...comments.nodes);\n      ({ hasNextPage, endCursor } = comments.pageInfo);\n    }\n    return nodes;\n  }\n\n  /**\n   * Fetch one issue with its description and comments. `idOrIdentifier`\n   * accepts both the Linear UUID and the human key (`ENG-123`). Returns\n   * `null` when the issue doesn't exist (Linear reports it as an \"Entity not\n   * found\" error).\n   */\n  async fetchIssueDetail(accessToken: string, idOrIdentifier: string): Promise<LinearIssueDetail | null> {\n    let data: IssueDetailQueryData;\n    try {\n      data = await linearGraphql<IssueDetailQueryData>(\n        accessToken,\n        `query IssueDetail($id: String!, $commentsFirst: Int!) {\n          issue(id: $id) {\n            id\n            identifier\n            title\n            description\n            url\n            priorityLabel\n            createdAt\n            updatedAt\n            state { name type }\n            project { id }\n            assignee { name }\n            creator { name }\n            team { key }\n            labels { nodes { name } }\n            comments(first: $commentsFirst) {\n              nodes { body createdAt user { name } }\n              pageInfo { hasNextPage endCursor }\n            }\n          }\n        }`,\n        { id: idOrIdentifier, commentsFirst: ISSUE_COMMENTS_PAGE_SIZE },\n      );\n    } catch (err) {\n      // Linear surfaces unknown ids/identifiers as a GraphQL \"Entity not\n      // found\" error rather than a null node — map that to \"issue doesn't\n      // exist\".\n      if (err instanceof Error && /entity not found/i.test(err.message)) return null;\n      throw err;\n    }\n    const issue = data.issue;\n    if (!issue) return null;\n    const allComments = await this.#fetchRemainingIssueComments(accessToken, issue.id, issue.comments);\n    const comments = allComments.sort((a, b) => new Date(a.createdAt).getTime() - new Date(b.createdAt).getTime());\n    return {\n      id: issue.id,\n      projectId: issue.project.id,\n      identifier: issue.identifier,\n      title: issue.title,\n      description: issue.description?.trim() ? issue.description : null,\n      url: issue.url,\n      state: issue.state.name,\n      stateType: issue.state.type,\n      priorityLabel: issue.priorityLabel,\n      assignee: issue.assignee?.name ?? null,\n      creator: issue.creator?.name ?? null,\n      team: issue.team?.key ?? null,\n      labels: issue.labels.nodes.map(label => label.name),\n      createdAt: issue.createdAt,\n      updatedAt: issue.updatedAt,\n      comments: comments.map(comment => ({\n        author: comment.user?.name ?? null,\n        body: comment.body,\n        createdAt: comment.createdAt,\n      })),\n    };\n  }\n\n  /**\n   * Post a comment on an issue. `idOrIdentifier` accepts both the Linear UUID\n   * and the human key (`ENG-123`) — the identifier is resolved to a UUID\n   * first because `commentCreate` only accepts UUIDs. Returns `null` when the\n   * issue doesn't exist.\n   */\n  async createIssueComment(\n    accessToken: string,\n    idOrIdentifier: string,\n    body: string,\n  ): Promise<LinearCreatedComment | null> {\n    let issueId: string;\n    try {\n      const data = await linearGraphql<IssueIdQueryData>(\n        accessToken,\n        `query IssueId($id: String!) { issue(id: $id) { id } }`,\n        { id: idOrIdentifier },\n      );\n      if (!data.issue) return null;\n      issueId = data.issue.id;\n    } catch (err) {\n      if (err instanceof Error && /entity not found/i.test(err.message)) return null;\n      throw err;\n    }\n    const data = await linearGraphql<CommentCreateMutationData>(\n      accessToken,\n      `mutation CommentCreate($input: CommentCreateInput!) {\n        commentCreate(input: $input) { success comment { id url } }\n      }`,\n      { input: { issueId, body } },\n    );\n    if (!data.commentCreate.success || !data.commentCreate.comment) {\n      throw new Error('Linear did not accept the comment.');\n    }\n    return data.commentCreate.comment;\n  }\n\n  // ── FactoryIntegration surface ───────────────────────────────────────────\n\n  workers(ctx: IntegrationContext): MastraWorker[] {\n    if (!linearIssueReconciliationEnabled()) return [];\n    const reconcile = attachLinearIssueReconciler(this, ctx);\n    if (!reconcile) return [];\n    const intervalMs = linearIssueReconciliationInterval();\n    return [\n      new IssueReconcileWorker({\n        integrationId: this.id,\n        reconcile,\n        ...(intervalMs ? { intervalMs } : {}),\n      }),\n    ];\n  }\n\n  /**\n   * The integration's HTTP surface: `/web/linear/*` + `/auth/linear/*` Mastra\n   * `apiRoutes` (status, OAuth connect/callback, projects + issues for\n   * Intake). Handlers operate on this instance.\n   */\n  routes(ctx: IntegrationContext): ApiRoute[] {\n    return buildLinearRoutes({\n      linear: this,\n      auth: ctx.auth,\n      stateSigner: ctx.stateSigner,\n      baseUrl: ctx.baseUrl,\n      intake: ctx.storage.intake,\n      ingestFactoryIssues: attachLinearRules(ctx),\n    });\n  }\n\n  /**\n   * Org-scoped agent tools: issue detail + comment tools for sessions whose\n   * project belongs to an org with an active Linear connection.\n   */\n  async agentTools(args: { requestContext: RequestContext }): Promise<IntegrationTools> {\n    return buildLinearAgentTools({ requestContext: args.requestContext, linear: this });\n  }\n\n  /** Non-secret config snapshot for system diagnostics/startup logs. */\n  diagnostics(): Record<string, unknown> {\n    return {\n      oauthAppConfigured: true,\n    };\n  }\n}\n\nfunction getLinearAccessToken(connection: IntegrationConnection): string {\n  if (connection.type !== 'oauth') {\n    throw new Error('Linear capabilities require an OAuth connection.');\n  }\n  return connection.accessToken;\n}\n\nfunction linearIssueToIntakeIssue(issue: LinearIssue): IntakeIssue {\n  return {\n    id: issue.id,\n    identifier: issue.identifier,\n    title: issue.title,\n    url: issue.url,\n    author: issue.creator,\n    state: issue.state,\n    stateType: issue.stateType,\n    priority: issue.priorityLabel,\n    assignee: issue.assignee,\n    source: issue.team,\n    labels: issue.labels,\n    commentCount: null,\n    createdAt: issue.createdAt,\n    updatedAt: issue.updatedAt,\n  };\n}\n"],"mappings":";;;;;;;AA8CA,MAAM,qBAAqB;AAC3B,MAAM,mBAAmB;AACzB,MAAM,uBAAuB;AA6F7B,MAAM,0BAA0B;AAChC,MAAM,2BAA2B;;AAEjC,MAAM,2BAA2B;;AAGjC,MAAM,wBAAwB;;AAG9B,MAAM,oBAAoB;AAE1B,MAAM,eAAe;;AAGrB,IAAa,4BAAb,cAA+C,MAAM;CACnD,cAAc;EACZ,MAAM,+EAA+E;CACvF;AACF;;AA2EA,eAAe,cAAiB,aAAqB,OAAe,WAAiD;CACnH,MAAM,MAAM,MAAM,MAAM,oBAAoB;EAC1C,QAAQ;EACR,QAAQ,YAAY,QAAQ,IAAM;EAClC,SAAS;GACP,gBAAgB;GAChB,eAAe,UAAU;EAC3B;EACA,MAAM,KAAK,UAAU;GAAE;GAAO;EAAU,CAAC;CAC3C,CAAC;CACD,IAAI,CAAC,IAAI,IAAI;EAGX,IAAI,SAAwB;EAC5B,IAAI;GAEF,UAAS,MADc,IAAI,KAAK,EAAA,CACf,SAAS,EAAE,EAAE,WAAW;EAC3C,QAAQ,CAER;EACA,MAAM,sBAAM,IAAI,MAAM,8BAA8B,IAAI,OAAO,GAAG,SAAS,KAAK,WAAW,IAAI;EAC/F,IAA6B,SAAS,IAAI;EAC1C,MAAM;CACR;CACA,MAAM,OAAQ,MAAM,IAAI,KAAK;CAC7B,IAAI,KAAK,QAAQ,QACf,MAAM,IAAI,MAAM,qBAAqB,KAAK,OAAO,EAAE,EAAE,WAAW,iBAAiB;CAEnF,IAAI,CAAC,KAAK,MACR,MAAM,IAAI,MAAM,8BAA8B;CAEhD,OAAO,KAAK;AACd;AAEA,IAAa,oBAAb,MAA6D;;CAE3D,KAAc;;CAEd;CACA;CACA;;CAGA,WAAW,EACT,SACA,UACA,QAKO;EACP,KAAKA,WAAW;EAChB,KAAKC,YAAY;EACjB,KAAKC,QAAQ;CACf;CAEA,IAAI,UAA+B;EACjC,IAAI,CAAC,KAAKF,UACR,MAAM,IAAI,MAAM,oFAAoF;EAEtG,OAAO,KAAKA;CACd;;CAGA,IAAI,WAAmC;EACrC,IAAI,CAAC,KAAKC,WACR,MAAM,IAAI,MAAM,oFAAoF;EAEtG,OAAO,KAAKA;CACd;;;;;CAMA,IAAI,cAAuB;EACzB,OAAO,KAAKC,OAAO,QAAQ,KAAK;CAClC;;CAKA,MAAM,eAAe,OAAoD;EACvE,MAAM,aAAa,MAAM,KAAK,QAAQ,YAAY,IAAI,KAAK;EAC3D,IAAI,CAAC,YAAY,OAAO;EACxB,MAAM,EAAE,SAAS;EACjB,OAAO;GACL,IAAI,WAAW;GACf,OAAO,WAAW;GAClB,QAAQ,WAAW;GACnB,aAAa,KAAK;GAClB,OAAO,KAAK,SAAS;GACrB,cAAc,KAAK,gBAAgB;GACnC,WAAW,KAAK,gBAAgB,QAAQ,KAAK,gBAAgB,KAAA,IAAY,OAAO,IAAI,KAAK,KAAK,WAAW;GACzG,eAAe,KAAK,iBAAiB;GACrC,iBAAiB,KAAK,mBAAmB;GACzC,WAAW,WAAW;GACtB,WAAW,WAAW;EACxB;CACF;;CAGA,MAAM,iBAAiB,OAAmD;EACxE,MAAM,KAAK,QAAQ,YAAY,OAAO,MAAM,OAAO;GACjD,QAAQ,MAAM;GACd,MAAM;IACJ,aAAa,MAAM;IACnB,cAAc,MAAM;IACpB,aAAa,MAAM,WAAW,QAAQ,KAAK;IAC3C,OAAO,MAAM;IACb,eAAe,MAAM;IACrB,iBAAiB,MAAM;GACzB;EACF,CAAC;EAED,KAAK,0BAA0B,MAAM,KAAK;CAC5C;;CAGA,MAAMC,cAAc,OAAe,QAAuC;EACxE,MAAM,KAAK,QAAQ,YAAY,OAAO,QAAO,UAAS;GACpD,GAAG;GACH,aAAa,OAAO;GACpB,cAAc,OAAO;GACrB,aAAa,OAAO,WAAW,QAAQ,KAAK;GAE5C,OAAO,OAAO,SAAS,KAAK;EAC9B,EAAE;CACJ;;;;;;CAOA,gBAAgB,YAA0C;EAExD,QADgB,WAAW,SAAS,GAAA,CAAI,MAAM,QAAQ,CAAC,CAAC,OAAO,OACnD,CAAC,CAAC,MAAK,UAAS,UAAU,qBAAqB,UAAU,WAAW,UAAU,OAAO;CACnG;;;;;;CAOA,qCAA8B,IAAI,IAA6B;;;;;;;CAQ/D,MAAM,oBAAoB,YAAkD;EAG1E,IAAI,EADF,WAAW,cAAc,QAAQ,WAAW,UAAU,QAAQ,IAAI,yBAAyB,KAAK,IAAI,IACxF,OAAO,WAAW;EAEhC,IAAI,CAAC,WAAW,cAEd,MAAM,IAAI,0BAA0B;EAGtC,MAAM,WAAW,KAAKC,mBAAmB,IAAI,WAAW,KAAK;EAC7D,IAAI,UAAU,OAAO;EAKrB,MAAM,SAAS,MAAM,KAAK,eAAe,WAAW,KAAK;EACzD,IAAI,CAAC,QAAQ,MAAM,IAAI,0BAA0B;EAEjD,MAAM,aAAa,KAAKA,mBAAmB,IAAI,WAAW,KAAK;EAC/D,IAAI,YAAY,OAAO;EAGvB,IAAI,EADkB,OAAO,cAAc,QAAQ,OAAO,UAAU,QAAQ,IAAI,yBAAyB,KAAK,IAAI,IAC9F,OAAO,OAAO;EAClC,IAAI,CAAC,OAAO,cAAc,MAAM,IAAI,0BAA0B;EAE9D,MAAM,eAAe,OAAO;EAC5B,MAAM,WAAW,YAAY;GAC3B,IAAI;IACF,MAAM,SAAS,MAAM,KAAK,mBAAmB,YAAY;IACzD,MAAM,KAAKD,cAAc,WAAW,OAAO,MAAM;IACjD,OAAO,OAAO;GAChB,SAAS,KAAK;IACZ,MAAM,SAAU,IAA4B;IAG5C,IAAI,WAAW,OAAO,WAAW,KAAK,MAAM,IAAI,0BAA0B;IAC1E,MAAM;GACR,UAAU;IACR,KAAKC,mBAAmB,OAAO,WAAW,KAAK;GACjD;EACF,EAAA,CAAG;EACH,KAAKA,mBAAmB,IAAI,WAAW,OAAO,OAAO;EACrD,OAAO;CACT;;CAKA,oCAA6B,IAAI,IAAmC;;;;;;CAOpE,MAAM,gBAAgB,OAA+C;EACnE,MAAM,SAAS,KAAKC,kBAAkB,IAAI,KAAK;EAC/C,IAAI,UAAU,KAAK,IAAI,IAAI,OAAO,YAAY,mBAAmB,OAAO;EACxE,MAAM,aAAa,MAAM,KAAK,eAAe,KAAK;EAClD,MAAM,QAA+B;GACnC,WAAW,eAAe;GAC1B,YAAY,eAAe,QAAQ,KAAK,gBAAgB,UAAU;GAClE,WAAW,KAAK,IAAI;EACtB;EACA,KAAKA,kBAAkB,IAAI,OAAO,KAAK;EACvC,OAAO;CACT;;;;;;CAOA,0BAA0B,OAAqB;EAC7C,KAAKA,kBAAkB,OAAO,KAAK;CACrC;;;;;;;CAQA,qCAA8B,IAAI,IAA2B;;CAG7D,MAAM,aAAa,YAA4C;EAC7D,MAAM,SAAS,KAAKC,mBAAmB,IAAI,UAAU;EACrD,IAAI,WAAW,KAAA,GAAW,OAAO;EAGjC,IAAI,CAAC,aAAa,KAAK,UAAU,GAAG;GAClC,KAAKA,mBAAmB,IAAI,YAAY,IAAI;GAC5C,OAAO;EACT;EACA,IAAI;EACJ,IAAI;GACF,MAAM,KAAK,SAAS,YAAY;GAEhC,SAAQ,MADc,KAAK,SAAS,QAAQ,EAAE,IAAI,WAAW,CAAC,EAAA,EAC7C,SAAS;EAC5B,QAAQ;GAGN,OAAO;EACT;EACA,KAAKA,mBAAmB,IAAI,YAAY,KAAK;EAC7C,OAAO;CACT;;CAGA,cAAoB;EAClB,KAAKA,mBAAmB,MAAM;EAC9B,KAAKD,kBAAkB,MAAM;CAC/B;CAEA,SAA0B;EACxB,wBAAuB,UAAS,KAAKE,uBAAuB,KAAK;EACjE,aAAa,OAAO,EAAE,YAAY;GAChC,MAAM,aAAa,MAAM,KAAK,eAAe,KAAK;GAClD,IAAI,CAAC,YAAY,OAAO,CAAC;GACzB,MAAM,cAAc,MAAM,KAAK,oBAAoB,UAAU;GAE7D,QAAO,MADgB,KAAK,aAAa,WAAW,EAAA,CACpC,KAAI,aAAY;IAC9B,IAAI,QAAQ;IACZ,MAAM,QAAQ;IACd,MAAM;GACR,EAAE;EACJ;EACA,WAAW,OAAO,EAAE,OAAO,WAAW,aAAa;GACjD,IAAI,UAAU,WAAW,GAAG,OAAO;IAAE,OAAO,CAAC;IAAG,YAAY;GAAK;GACjE,MAAM,aAAa,MAAM,KAAK,eAAe,KAAK;GAClD,IAAI,CAAC,YAAY,OAAO;IAAE,OAAO,CAAC;IAAG,YAAY;GAAK;GACtD,MAAM,cAAc,MAAM,KAAK,oBAAoB,UAAU;GAC7D,MAAM,OAAO,MAAM,KAAK,iBAAiB,aAAa,QAAQ,SAAS;GACvE,OAAO;IACL,OAAO,KAAK,OAAO,KAAI,WAAU;KAC/B,QAAQ;MAAE,MAAM;MAAS,YAAY,MAAM;MAAI,KAAK,MAAM;KAAI;KAC9D,UAAU,MAAM;KAChB,OAAO,GAAG,MAAM,WAAW,IAAI,MAAM;KACrC,QAAQ,MAAM;KACd,QAAQ,MAAM;KACd,UAAU,MAAM;KAChB,WAAW,MAAM;KACjB,WAAW,MAAM;KACjB,UAAU;MACR,YAAY,MAAM;MAClB,WAAW,MAAM;MACjB,UAAU,MAAM;MAChB,MAAM,MAAM;KACd;IACF,EAAE;IACF,YAAY,KAAK;GACnB;EACF;EACA,aAAY,UAAS,KAAKC,kBAAkB,KAAK;EACjD,WAAU,UAAS,KAAKC,gBAAgB,KAAK;EAC7C,gBAAe,UAAS,KAAKC,qBAAqB,KAAK;EACvD,cAAa,UAAS,KAAKC,mBAAmB,KAAK;CACrD;;;;;CAMA,MAAMJ,uBAAuB,EAC3B,OACA,kBAIyE;EACzE,IAAI,eAAe,SAAS,SAAS,OAAO;EAC5C,MAAM,aAAa,MAAM,KAAK,eAAe,KAAK;EAClD,IAAI,CAAC,YAAY,OAAO;EAExB,OAAO;GAAE,YAAY;IAAE,MAAM;IAAS,aAAA,MADZ,KAAK,oBAAoB,UAAU;GACX;GAAG,SAAS,eAAe;EAAW;CAC1F;;;;;CAKA,4BAAqC;CAErC;CACA;CAEA,YAAY,QAAiC;EAC3C,MAAM,UAAW,CAAC,YAAY,cAAc,CAAC,CAAW,QAAO,QAAO,CAAC,OAAO,IAAI;EAClF,IAAI,QAAQ,SAAS,GACnB,MAAM,IAAI,MAAM,iDAAiD,QAAQ,KAAK,IAAI,EAAE,EAAE;EAExF,KAAKK,YAAY,OAAO;EACxB,KAAKC,gBAAgB,OAAO;CAC9B;;;;;;CASA,kBAAkB,OAAe,aAA6B;EAC5D,MAAM,MAAM,IAAI,IAAI,oBAAoB;EACxC,IAAI,aAAa,IAAI,aAAa,KAAKD,SAAS;EAChD,IAAI,aAAa,IAAI,gBAAgB,WAAW;EAChD,IAAI,aAAa,IAAI,iBAAiB,MAAM;EAG5C,IAAI,aAAa,IAAI,SAAS,sBAAsB;EACpD,IAAI,aAAa,IAAI,SAAS,KAAK;EACnC,IAAI,aAAa,IAAI,UAAU,SAAS;EACxC,OAAO,IAAI,SAAS;CACtB;;CAGA,MAAM,kBAAkB,MAAc,aAA8C;EAClF,OAAO,KAAKE,eAAe;GAAE,YAAY;GAAsB;GAAM,cAAc;EAAY,GAAG,gBAAgB;CACpH;;;;;;;CAQA,MAAM,mBAAmB,cAA+C;EACtE,OAAO,KAAKA,eAAe;GAAE,YAAY;GAAiB,eAAe;EAAa,GAAG,eAAe;CAC1G;;CAGA,MAAMA,eAAe,QAAgC,OAAwC;EAC3F,MAAM,MAAM,MAAM,MAAM,kBAAkB;GACxC,QAAQ;GACR,QAAQ,YAAY,QAAQ,GAAM;GAClC,SAAS,EAAE,gBAAgB,oCAAoC;GAC/D,MAAM,IAAI,gBAAgB;IACxB,GAAG;IACH,WAAW,KAAKF;IAChB,eAAe,KAAKC;GACtB,CAAC;EACH,CAAC;EACD,IAAI,CAAC,IAAI,IAAI;GACX,MAAM,sBAAM,IAAI,MAAM,UAAU,MAAM,WAAW,IAAI,OAAO,EAAE;GAC9D,IAA6B,SAAS,IAAI;GAC1C,MAAM;EACR;EACA,MAAM,OAAQ,MAAM,IAAI,KAAK;EAM7B,IAAI,CAAC,KAAK,cACR,MAAM,IAAI,MAAM,UAAU,MAAM,2BAA2B;EAE7D,OAAO;GACL,aAAa,KAAK;GAClB,cAAc,KAAK,iBAAiB;GACpC,WAAW,OAAO,KAAK,eAAe,WAAW,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,aAAa,GAAI,IAAI;GACjG,OAAO,KAAK,SAAS;EACvB;CACF;;CAKA,MAAM,eAAe,aAA+C;EAClE,MAAM,OAAO,MAAM,cACjB,aACA,wCACF;EACA,OAAO;GAAE,MAAM,KAAK,aAAa;GAAM,QAAQ,KAAK,aAAa;EAAO;CAC1E;CAEA,MAAML,kBAAkB,OAA6F;EACnH,MAAM,cAAc,qBAAqB,MAAM,UAAU;EACzD,MAAM,SAAS,MAAM,KAAK,iBAAiB,aAAa,MAAM,QAAQ,MAAM,WAAW,MAAM,MAAM;EACnG,OAAO;GACL,QAAQ,OAAO,OAAO,KAAI,UAAS,yBAAyB,KAAK,CAAC;GAClE,YAAY,OAAO;EACrB;CACF;CAEA,MAAMC,gBAAgB,OAA+D;EACnF,MAAM,cAAc,qBAAqB,MAAM,UAAU;EACzD,MAAM,QAAQ,MAAM,KAAK,iBAAiB,aAAa,MAAM,OAAO;EACpE,IAAI,CAAC,OAAO,OAAO;EACnB,OAAO;GACL,GAAG,yBAAyB,KAAK;GACjC,aAAa,MAAM;GACnB,cAAc,MAAM,SAAS;GAC7B,UAAU,MAAM;EAClB;CACF;CAEA,MAAMC,qBAAqB,OAA8E;EACvG,MAAM,cAAc,qBAAqB,MAAM,UAAU;EACzD,OAAO,KAAK,mBAAmB,aAAa,MAAM,SAAS,MAAM,IAAI;CACvE;CAEA,MAAMC,mBAAmB,OAA4D;EACnF,MAAM,cAAc,qBAAqB,MAAM,UAAU;EACzD,MAAM,QAAQ,MAAM,KAAK,iBAAiB,aAAa,MAAM,OAAO;EACpE,IAAI,CAAC,OAAO,OAAO;EACnB,MAAM,UAAU,MAAM;EACtB,IAAI,CAAC,SAAS,OAAO;EACrB,MAAM,SAAS,MAAM,KAAKI,wBAAwB,aAAa,OAAO;EACtE,IAAI,cAAiE;EACrE,IAAI,MAAM,MAAM,SAAS,UAAU;GACjC,MAAM,aAAa,MAAM,MAAM;GAC/B,cAAc,OAAO,MAAK,UAAS,MAAM,SAAS,UAAU,KAAK;EACnE,OAAO;GACL,MAAM,SAAS,MAAM,MAAM,KAAK,YAAY;GAC5C,cAAc,OAAO,MAAK,UAAS,MAAM,KAAK,YAAY,MAAM,MAAM,KAAK;EAC7E;EACA,IAAI,CAAC,aAAa,OAAO;EACzB,IAAI,YAAY,SAAS,MAAM,OAC7B,OAAO,yBAAyB,KAAK;EASvC,IAAI,EAAC,MAPc,cACjB,aACA;;UAGA;GAAE,IAAI,MAAM;GAAI,SAAS,YAAY;EAAG,CAC1C,EAAA,CACU,YAAY,SACpB,MAAM,IAAI,MAAM,yCAAyC;EAE3D,MAAM,QAAQ,MAAM,KAAK,iBAAiB,aAAa,MAAM,EAAE;EAC/D,IAAI,CAAC,OAAO,OAAO;EACnB,OAAO,yBAAyB,KAAK;CACvC;CAEA,MAAMA,wBACJ,aACA,SAC4D;EAU5D,QAAO,MATY,cAGjB,aACA;;UAGA,EAAE,KAAK,QAAQ,CACjB,EAAA,CACY,MAAM,OAAO,SAAS,CAAC;CACrC;;CAGA,MAAM,aAAa,aAA+C;EAchE,QAAO,MAbY,cAUjB,aACA,uGACF,EAAA,CACY,SAAS,MAAM,KAAI,UAAS;GACtC,IAAI,KAAK;GACT,MAAM,KAAK;GACX,OAAO,KAAK;GACZ,OAAO,KAAK,MAAM,MAAM,KAAI,UAAS;IAAE,IAAI,KAAK;IAAI,KAAK,KAAK;IAAK,MAAM,KAAK;GAAK,EAAE;EACvF,EAAE;CACJ;;;;;;;CAQA,MAAM,iBACJ,aACA,OACA,YACA,QAC0B;EAC1B,MAAM,mBAAmB,CAAC,GAAG,IAAI,KAAK,UAAU,CAAC,EAAA,CAAG,KAAI,UAAS,MAAM,KAAK,CAAC,CAAC,CAAC,OAAO,OAAO,CAAC,CAAC;EAC/F,MAAM,gBAAgB,YAAY,SAAS,2CAA2C;EACtF,MAAM,aAAa,YAAY,SAAS,yBAAyB;EACjE,MAAM,cAAc,iBAAiB,SAAS,IAAI,wCAAwC;EAoC1F,MAAM,EAAE,OAAO,cAAa,MAlCT,cACjB,aACA,4CAA4C,aAH7B,iBAAiB,SAAS,IAAI,yBAAyB,GAGJ;;;;;4FAKoB,gBAAgB,YAAY;;;;;;;;;;;;;;;;;;;UAoBlH;GACE,OAAO;GACP,OAAO,SAAS;GAChB,GAAI,YAAY,SAAS,EAAE,WAAW,IAAI,CAAC;GAC3C,GAAI,iBAAiB,SAAS,IAAI,EAAE,QAAQ,iBAAiB,IAAI,CAAC;EACpE,CACF,EAAA,CACiC;EACjC,OAAO;GACL,QAAQ,MAAM,KAAI,UAAS;IACzB,IAAI,KAAK;IACT,WAAW,KAAK,QAAQ;IACxB,YAAY,KAAK;IACjB,OAAO,KAAK;IACZ,KAAK,KAAK;IACV,OAAO,KAAK,MAAM;IAClB,WAAW,KAAK,MAAM;IACtB,eAAe,KAAK;IACpB,UAAU,KAAK,UAAU,QAAQ;IACjC,SAAS,KAAK,SAAS,QAAQ;IAC/B,MAAM,KAAK,MAAM,OAAO;IACxB,QAAQ,KAAK,OAAO,MAAM,KAAI,UAAS,MAAM,IAAI;IACjD,WAAW,KAAK;IAChB,WAAW,KAAK;GAClB,EAAE;GACF,YAAY,SAAS,cAAc,SAAS,YAAY;EAC1D;CACF;;CAGA,MAAMC,6BACJ,aACA,SACA,WAC6B;EAC7B,MAAM,QAAQ,CAAC,GAAG,UAAU,KAAK;EACjC,IAAI,EAAE,aAAa,cAAc,UAAU;EAC3C,KAAK,IAAI,OAAO,GAAG,eAAe,aAAa,OAAO,0BAA0B,QAAQ;GAatF,MAAM,YAAW,MAZE,cACjB,aACA;;;;;;;YAQA;IAAE,IAAI;IAAS,OAAO;IAA0B,OAAO;GAAU,CACnE,EAAA,CACsB,OAAO;GAC7B,IAAI,CAAC,UAAU;GACf,MAAM,KAAK,GAAG,SAAS,KAAK;GAC5B,CAAC,CAAE,aAAa,aAAc,SAAS;EACzC;EACA,OAAO;CACT;;;;;;;CAQA,MAAM,iBAAiB,aAAqB,gBAA2D;EACrG,IAAI;EACJ,IAAI;GACF,OAAO,MAAM,cACX,aACA;;;;;;;;;;;;;;;;;;;;;YAsBA;IAAE,IAAI;IAAgB,eAAe;GAAyB,CAChE;EACF,SAAS,KAAK;GAIZ,IAAI,eAAe,SAAS,oBAAoB,KAAK,IAAI,OAAO,GAAG,OAAO;GAC1E,MAAM;EACR;EACA,MAAM,QAAQ,KAAK;EACnB,IAAI,CAAC,OAAO,OAAO;EAEnB,MAAM,YAAW,MADS,KAAKA,6BAA6B,aAAa,MAAM,IAAI,MAAM,QAAQ,EAAA,CACpE,MAAM,GAAG,MAAM,IAAI,KAAK,EAAE,SAAS,CAAC,CAAC,QAAQ,IAAI,IAAI,KAAK,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC;EAC7G,OAAO;GACL,IAAI,MAAM;GACV,WAAW,MAAM,QAAQ;GACzB,YAAY,MAAM;GAClB,OAAO,MAAM;GACb,aAAa,MAAM,aAAa,KAAK,IAAI,MAAM,cAAc;GAC7D,KAAK,MAAM;GACX,OAAO,MAAM,MAAM;GACnB,WAAW,MAAM,MAAM;GACvB,eAAe,MAAM;GACrB,UAAU,MAAM,UAAU,QAAQ;GAClC,SAAS,MAAM,SAAS,QAAQ;GAChC,MAAM,MAAM,MAAM,OAAO;GACzB,QAAQ,MAAM,OAAO,MAAM,KAAI,UAAS,MAAM,IAAI;GAClD,WAAW,MAAM;GACjB,WAAW,MAAM;GACjB,UAAU,SAAS,KAAI,aAAY;IACjC,QAAQ,QAAQ,MAAM,QAAQ;IAC9B,MAAM,QAAQ;IACd,WAAW,QAAQ;GACrB,EAAE;EACJ;CACF;;;;;;;CAQA,MAAM,mBACJ,aACA,gBACA,MACsC;EACtC,IAAI;EACJ,IAAI;GACF,MAAM,OAAO,MAAM,cACjB,aACA,yDACA,EAAE,IAAI,eAAe,CACvB;GACA,IAAI,CAAC,KAAK,OAAO,OAAO;GACxB,UAAU,KAAK,MAAM;EACvB,SAAS,KAAK;GACZ,IAAI,eAAe,SAAS,oBAAoB,KAAK,IAAI,OAAO,GAAG,OAAO;GAC1E,MAAM;EACR;EACA,MAAM,OAAO,MAAM,cACjB,aACA;;UAGA,EAAE,OAAO;GAAE;GAAS;EAAK,EAAE,CAC7B;EACA,IAAI,CAAC,KAAK,cAAc,WAAW,CAAC,KAAK,cAAc,SACrD,MAAM,IAAI,MAAM,oCAAoC;EAEtD,OAAO,KAAK,cAAc;CAC5B;CAIA,QAAQ,KAAyC;EAC/C,IAAI,CAAC,iCAAiC,GAAG,OAAO,CAAC;EACjD,MAAM,YAAY,4BAA4B,MAAM,GAAG;EACvD,IAAI,CAAC,WAAW,OAAO,CAAC;EACxB,MAAM,aAAa,kCAAkC;EACrD,OAAO,CACL,IAAI,qBAAqB;GACvB,eAAe,KAAK;GACpB;GACA,GAAI,aAAa,EAAE,WAAW,IAAI,CAAC;EACrC,CAAC,CACH;CACF;;;;;;CAOA,OAAO,KAAqC;EAC1C,OAAO,kBAAkB;GACvB,QAAQ;GACR,MAAM,IAAI;GACV,aAAa,IAAI;GACjB,SAAS,IAAI;GACb,QAAQ,IAAI,QAAQ;GACpB,qBAAqB,kBAAkB,GAAG;EAC5C,CAAC;CACH;;;;;CAMA,MAAM,WAAW,MAAqE;EACpF,OAAO,sBAAsB;GAAE,gBAAgB,KAAK;GAAgB,QAAQ;EAAK,CAAC;CACpF;;CAGA,cAAuC;EACrC,OAAO,EACL,oBAAoB,KACtB;CACF;AACF;AAEA,SAAS,qBAAqB,YAA2C;CACvE,IAAI,WAAW,SAAS,SACtB,MAAM,IAAI,MAAM,kDAAkD;CAEpE,OAAO,WAAW;AACpB;AAEA,SAAS,yBAAyB,OAAiC;CACjE,OAAO;EACL,IAAI,MAAM;EACV,YAAY,MAAM;EAClB,OAAO,MAAM;EACb,KAAK,MAAM;EACX,QAAQ,MAAM;EACd,OAAO,MAAM;EACb,WAAW,MAAM;EACjB,UAAU,MAAM;EAChB,UAAU,MAAM;EAChB,QAAQ,MAAM;EACd,QAAQ,MAAM;EACd,cAAc;EACd,WAAW,MAAM;EACjB,WAAW,MAAM;CACnB;AACF"}
+{"version":3,"file":"integration.js","names":["#storage","#projects","#auth","#updateTokens","#inflightRefreshes","#connectionChecks","#orgIdByResourceId","#resolveIntakeDispatch","#listIntakeIssues","#getIntakeIssue","#createIntakeComment","#updateIntakeIssue","#clientId","#clientSecret","#requestTokens","#listTeamWorkflowStates","#fetchRemainingIssueComments"],"sources":["../../../src/integrations/linear/integration.ts"],"sourcesContent":["/**\n * `LinearIntegration` — the self-contained Linear integration.\n *\n * Implements the system-wide `FactoryIntegration` contract\n * (`../factory-integration.ts`): the deploy entry reads the Linear OAuth env\n * vars ONCE, constructs an instance with explicit credentials, and passes it\n * to `MastraFactory`. Everything Linear-flavored the system does — the OAuth\n * connect/callback flow, workspace/project/issue reads for Intake, and the\n * agent's issue tools — flows through this instance. No other module reads\n * `LINEAR_*` env vars.\n *\n * The class owns:\n *  - OAuth: the user-facing authorize URL, code exchange, and refresh-token\n *    rotation against Linear's `/oauth/token` endpoint.\n *  - GraphQL reads/writes: viewer workspace, projects, active issues for\n *    Intake, full issue detail (description + discussion), issue comments.\n *  - The HTTP surface (`routes()`) and per-request agent tools\n *    (`agentTools()`), delegating to `./routes.ts` / `./agent-tools.ts` with\n *    `this` as the API client.\n */\n\nimport type { RequestContext } from '@mastra/core/request-context';\nimport type { ApiRoute } from '@mastra/core/server';\nimport type { MastraWorker } from '@mastra/core/worker';\nimport type { IntegrationConnection } from '../../capabilities/connection.js';\nimport type {\n  CreateIntakeCommentInput,\n  GetIntakeIssueInput,\n  Intake,\n  IntakeIssue,\n  IntakeIssueDetail,\n  ListIntakeIssuesInput,\n  UpdateIntakeIssueInput,\n} from '../../capabilities/intake.js';\nimport type { RouteAuth } from '../../routes/route.js';\nimport type { IntegrationStorageHandle } from '../../storage/domains/integrations/base.js';\nimport type { FactoryProjectsStorage } from '../../storage/domains/projects/base.js';\nimport type { FactoryIntegration, IntegrationContext, IntegrationTools } from '../base.js';\nimport { IssueReconcileWorker } from '../issue-reconcile-worker.js';\nimport { buildLinearAgentTools } from './agent-tools.js';\nimport { attachLinearIssueReconciler } from './issue-reconciler.js';\nimport { linearIssueReconciliationEnabled, linearIssueReconciliationInterval } from './reconciliation-config.js';\nimport { buildLinearRoutes } from './routes.js';\nimport { attachLinearRules } from './rules.js';\nimport type { LinearConnectionRow, LinearStorageHandle, UpsertLinearConnectionInput } from './storage.js';\n\nconst LINEAR_GRAPHQL_URL = 'https://api.linear.app/graphql';\nconst LINEAR_TOKEN_URL = 'https://api.linear.app/oauth/token';\nconst LINEAR_AUTHORIZE_URL = 'https://linear.app/oauth/authorize';\n\n/** Credentials for the Linear OAuth application. All fields are required. */\nexport interface LinearIntegrationConfig {\n  /** OAuth client id of the Linear application. */\n  clientId: string;\n  /** OAuth client secret of the Linear application. */\n  clientSecret: string;\n}\n\n/**\n * Tokens minted by Linear's `/oauth/token` endpoint. Linear access tokens\n * expire (24h) and refresh tokens rotate: every refresh invalidates the old\n * pair, so callers must persist the whole set after each exchange.\n */\nexport interface LinearTokenSet {\n  accessToken: string;\n  /** Null when Linear issued no refresh token (legacy non-expiring apps). */\n  refreshToken: string | null;\n  /** Null when Linear reported no `expires_in`. */\n  expiresAt: Date | null;\n  /** Scopes granted to the token as reported by Linear; null when omitted. */\n  scope: string | null;\n}\n\nexport interface LinearWorkspace {\n  name: string;\n  urlKey: string;\n}\n\nexport interface LinearIssue {\n  id: string;\n  projectId: string;\n  /** Human key like `ENG-123`. */\n  identifier: string;\n  title: string;\n  url: string;\n  /** Workflow state name, e.g. `In Progress`. */\n  state: string;\n  /** Workflow state type, e.g. `backlog` / `unstarted` / `started` / `triage`. */\n  stateType: string;\n  priorityLabel: string;\n  assignee: string | null;\n  /** Display name of the Linear user who created the issue, when Linear returns one. */\n  creator: string | null;\n  team: string | null;\n  labels: string[];\n  createdAt: string;\n  updatedAt: string;\n}\n\nexport interface LinearIssuePage {\n  issues: LinearIssue[];\n  /** Opaque cursor for the next page, or `null` on the last page. */\n  nextCursor: string | null;\n}\n\nexport interface LinearProjectTeam {\n  id: string;\n  /** Short team key, e.g. `ENG`. */\n  key: string;\n  name: string;\n}\n\nexport interface LinearProject {\n  id: string;\n  name: string;\n  /** Project state, e.g. `planned` / `started` / `paused` / `completed`. */\n  state: string;\n  /** Teams the project belongs to (the Settings picker groups by these). */\n  teams: LinearProjectTeam[];\n}\n\nexport interface LinearIssueComment {\n  author: string | null;\n  body: string;\n  createdAt: string;\n}\n\n/** Full issue payload for agent context: everything in {@link LinearIssue} plus description and discussion. */\nexport interface LinearIssueDetail extends Omit<LinearIssue, 'projectId'> {\n  projectId: string | null;\n  /** Markdown body of the issue, or `null` when empty. */\n  description: string | null;\n  /** Discussion comments, oldest first. */\n  comments: LinearIssueComment[];\n}\n\n/** The comment created by {@link LinearIntegration.createIssueComment}. */\nexport interface LinearCreatedComment {\n  id: string;\n  url: string;\n}\n\nconst LINEAR_ISSUES_PAGE_SIZE = 30;\nconst ISSUE_COMMENTS_PAGE_SIZE = 50;\n/** Hard stop for comment pagination so a misbehaving cursor can't loop forever. */\nconst ISSUE_COMMENTS_MAX_PAGES = 20;\n\n/** Refresh this many ms before the recorded expiry to absorb clock skew. */\nconst TOKEN_REFRESH_SKEW_MS = 60_000;\n\n/** Re-check an org's Linear connection (and its scopes) at most this often. */\nconst CONNECTION_TTL_MS = 60_000;\n\nconst UUID_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;\n\n/** Thrown when the org's Linear authorization can no longer be renewed. */\nexport class LinearReauthRequiredError extends Error {\n  constructor() {\n    super('Linear authorization expired. Reconnect Linear to keep syncing intake issues.');\n  }\n}\n\n/** Cached result of {@link LinearIntegration.checkConnection}. */\nexport interface LinearConnectionCheck {\n  connected: boolean;\n  /** Whether the granted OAuth scope allows posting issue comments. */\n  canComment: boolean;\n  checkedAt: number;\n}\n\ninterface IssuesQueryData {\n  issues: {\n    nodes: Array<{\n      id: string;\n      identifier: string;\n      title: string;\n      url: string;\n      priorityLabel: string;\n      createdAt: string;\n      updatedAt: string;\n      state: { name: string; type: string };\n      project: { id: string };\n      assignee: { name: string } | null;\n      creator: { name: string } | null;\n      team: { key: string } | null;\n      labels: { nodes: Array<{ name: string }> };\n    }>;\n    pageInfo: { hasNextPage: boolean; endCursor: string | null };\n  };\n}\n\ninterface IssueCommentNode {\n  body: string;\n  createdAt: string;\n  user: { name: string } | null;\n}\n\ninterface IssueCommentsPage {\n  nodes: IssueCommentNode[];\n  pageInfo: { hasNextPage: boolean; endCursor: string | null };\n}\n\ninterface IssueDetailQueryData {\n  issue: {\n    id: string;\n    identifier: string;\n    title: string;\n    description: string | null;\n    url: string;\n    priorityLabel: string;\n    createdAt: string;\n    updatedAt: string;\n    state: { name: string; type: string };\n    project: { id: string } | null;\n    assignee: { name: string } | null;\n    creator: { name: string } | null;\n    team: { key: string } | null;\n    labels: { nodes: Array<{ name: string }> };\n    comments: IssueCommentsPage;\n  } | null;\n}\n\ninterface IssueCommentsQueryData {\n  issue: { comments: IssueCommentsPage } | null;\n}\n\ninterface IssueIdQueryData {\n  issue: { id: string } | null;\n}\n\ninterface CommentCreateMutationData {\n  commentCreate: { success: boolean; comment: { id: string; url: string } | null };\n}\n\n/** POST a GraphQL query to Linear with the given OAuth access token. */\nasync function linearGraphql<T>(accessToken: string, query: string, variables?: Record<string, unknown>): Promise<T> {\n  const res = await fetch(LINEAR_GRAPHQL_URL, {\n    method: 'POST',\n    signal: AbortSignal.timeout(15_000),\n    headers: {\n      'content-type': 'application/json',\n      authorization: `Bearer ${accessToken}`,\n    },\n    body: JSON.stringify({ query, variables }),\n  });\n  if (!res.ok) {\n    // Linear returns GraphQL errors (validation, missing scopes, …) with a\n    // 400 status — surface the actual message instead of just the code.\n    let detail: string | null = null;\n    try {\n      const errBody = (await res.json()) as { errors?: Array<{ message?: string }> };\n      detail = errBody.errors?.[0]?.message ?? null;\n    } catch {\n      // Non-JSON error body; fall back to the status code alone.\n    }\n    const err = new Error(`Linear API request failed (${res.status})${detail ? `: ${detail}` : ''}`);\n    (err as { status?: number }).status = res.status;\n    throw err;\n  }\n  const body = (await res.json()) as { data?: T; errors?: Array<{ message?: string }> };\n  if (body.errors?.length) {\n    throw new Error(`Linear API error: ${body.errors[0]?.message ?? 'unknown error'}`);\n  }\n  if (!body.data) {\n    throw new Error('Linear API returned no data.');\n  }\n  return body.data;\n}\n\nexport class LinearIntegration implements FactoryIntegration {\n  /** Stable integration identifier (see `../base.ts`). */\n  readonly id = 'linear';\n  /** Bound once by the factory via `initialize()` before any surface is used. */\n  #storage: LinearStorageHandle | undefined;\n  #projects: FactoryProjectsStorage | undefined;\n  #auth: RouteAuth | undefined;\n\n  /** Bind Linear's slice of the generic integration storage, the projects domain, and the host auth seam. */\n  initialize({\n    storage,\n    projects,\n    auth,\n  }: {\n    storage: IntegrationStorageHandle;\n    projects: FactoryProjectsStorage;\n    auth: RouteAuth;\n  }): void {\n    this.#storage = storage as unknown as LinearStorageHandle;\n    this.#projects = projects;\n    this.#auth = auth;\n  }\n\n  get storage(): LinearStorageHandle {\n    if (!this.#storage) {\n      throw new Error('LinearIntegration is not initialized — the factory binds storage during prepare().');\n    }\n    return this.#storage;\n  }\n\n  /** Factory projects domain — maps a session's resourceId to its owning org. */\n  get projects(): FactoryProjectsStorage {\n    if (!this.#projects) {\n      throw new Error('LinearIntegration is not initialized — the factory binds storage during prepare().');\n    }\n    return this.#projects;\n  }\n\n  /**\n   * Whether the host runs with web auth enabled. Linear connections are\n   * org-owned, so every Linear surface is inert without a tenant auth seam.\n   */\n  get authEnabled(): boolean {\n    return this.#auth?.enabled() ?? false;\n  }\n\n  // ── Connection + OAuth token lifecycle ───────────────────────────────────\n\n  /** Load the org's Linear connection, or `null` when not connected. */\n  async loadConnection(orgId: string): Promise<LinearConnectionRow | null> {\n    const connection = await this.storage.connections.get(orgId);\n    if (!connection) return null;\n    const { data } = connection;\n    return {\n      id: connection.id,\n      orgId: connection.orgId,\n      userId: connection.userId,\n      accessToken: data.accessToken,\n      scope: data.scope ?? null,\n      refreshToken: data.refreshToken ?? null,\n      expiresAt: data.expiresAtMs === null || data.expiresAtMs === undefined ? null : new Date(data.expiresAtMs),\n      workspaceName: data.workspaceName ?? null,\n      workspaceUrlKey: data.workspaceUrlKey ?? null,\n      createdAt: connection.createdAt,\n      updatedAt: connection.updatedAt,\n    };\n  }\n\n  /** Insert or replace the org's connection (one per org). */\n  async upsertConnection(input: UpsertLinearConnectionInput): Promise<void> {\n    await this.storage.connections.upsert(input.orgId, {\n      userId: input.userId,\n      data: {\n        accessToken: input.accessToken,\n        refreshToken: input.refreshToken,\n        expiresAtMs: input.expiresAt?.getTime() ?? null,\n        scope: input.scope,\n        workspaceName: input.workspaceName,\n        workspaceUrlKey: input.workspaceUrlKey,\n      },\n    });\n    // Let the agent tools see the new connection immediately.\n    this.invalidateConnectionCache(input.orgId);\n  }\n\n  /** Persist a rotated token set on the org's existing connection row. */\n  async #updateTokens(orgId: string, tokens: LinearTokenSet): Promise<void> {\n    await this.storage.connections.update(orgId, data => ({\n      ...data,\n      accessToken: tokens.accessToken,\n      refreshToken: tokens.refreshToken,\n      expiresAtMs: tokens.expiresAt?.getTime() ?? null,\n      // Refresh responses may omit scope; keep the recorded grant.\n      scope: tokens.scope ?? data.scope,\n    }));\n  }\n\n  /**\n   * Whether the connection's token can post issue comments. Legacy rows\n   * without a recorded scope were minted with `read` only, so they count as\n   * read-only until the org reconnects Linear.\n   */\n  canPostComments(connection: LinearConnectionRow): boolean {\n    const scopes = (connection.scope ?? '').split(/[\\s,]+/).filter(Boolean);\n    return scopes.some(scope => scope === 'comments:create' || scope === 'write' || scope === 'admin');\n  }\n\n  /**\n   * In-flight refreshes keyed by org. Linear rotates refresh tokens, so two\n   * concurrent refreshes with the same token would invalidate each other —\n   * single-flight ensures one exchange per org and shares the result.\n   */\n  readonly #inflightRefreshes = new Map<string, Promise<string>>();\n\n  /**\n   * Return a usable access token for the connection, proactively refreshing\n   * it when the recorded expiry is past (or imminent). Throws\n   * `LinearReauthRequiredError` when the token is expired and cannot be\n   * refreshed — the org has to go through the OAuth flow again.\n   */\n  async getFreshAccessToken(connection: LinearConnectionRow): Promise<string> {\n    const expired =\n      connection.expiresAt !== null && connection.expiresAt.getTime() - TOKEN_REFRESH_SKEW_MS <= Date.now();\n    if (!expired) return connection.accessToken;\n\n    if (!connection.refreshToken) {\n      // Legacy row from before refresh-token support: nothing to renew with.\n      throw new LinearReauthRequiredError();\n    }\n\n    const existing = this.#inflightRefreshes.get(connection.orgId);\n    if (existing) return existing;\n\n    // The caller may hold a stale row: another request could have refreshed\n    // and rotated the refresh token since this row was loaded. Reload before\n    // refreshing so we don't burn the rotated token and force a false reauth.\n    const latest = await this.loadConnection(connection.orgId);\n    if (!latest) throw new LinearReauthRequiredError();\n\n    const concurrent = this.#inflightRefreshes.get(connection.orgId);\n    if (concurrent) return concurrent;\n\n    const latestExpired = latest.expiresAt !== null && latest.expiresAt.getTime() - TOKEN_REFRESH_SKEW_MS <= Date.now();\n    if (!latestExpired) return latest.accessToken;\n    if (!latest.refreshToken) throw new LinearReauthRequiredError();\n\n    const refreshToken = latest.refreshToken;\n    const refresh = (async () => {\n      try {\n        const tokens = await this.refreshAccessToken(refreshToken);\n        await this.#updateTokens(connection.orgId, tokens);\n        return tokens.accessToken;\n      } catch (err) {\n        const status = (err as { status?: number }).status;\n        // invalid_grant surfaces as 400/401: the refresh token was revoked or\n        // already rotated away. Terminal for this connection.\n        if (status === 400 || status === 401) throw new LinearReauthRequiredError();\n        throw err;\n      } finally {\n        this.#inflightRefreshes.delete(connection.orgId);\n      }\n    })();\n    this.#inflightRefreshes.set(connection.orgId, refresh);\n    return refresh;\n  }\n\n  // ── Connection checks for agent tools ────────────────────────────────────\n\n  /** Re-check an org's Linear connection (and its scopes) at most this often. */\n  readonly #connectionChecks = new Map<string, LinearConnectionCheck>();\n\n  /**\n   * Whether the org has an active connection and whether its granted scope\n   * allows posting comments. Cached per org with a short TTL — tool-set\n   * resolution runs on every request.\n   */\n  async checkConnection(orgId: string): Promise<LinearConnectionCheck> {\n    const cached = this.#connectionChecks.get(orgId);\n    if (cached && Date.now() - cached.checkedAt < CONNECTION_TTL_MS) return cached;\n    const connection = await this.loadConnection(orgId);\n    const check: LinearConnectionCheck = {\n      connected: connection !== null,\n      canComment: connection !== null && this.canPostComments(connection),\n      checkedAt: Date.now(),\n    };\n    this.#connectionChecks.set(orgId, check);\n    return check;\n  }\n\n  /**\n   * Drop the cached connection check for an org. Called after a connection is\n   * persisted so the tools show up on the very next run instead of after the\n   * TTL lapses.\n   */\n  invalidateConnectionCache(orgId: string): void {\n    this.#connectionChecks.delete(orgId);\n  }\n\n  /**\n   * A project's org never changes, so the resourceId → orgId mapping is\n   * cached forever. `null` marks resource ids that aren't factory projects\n   * (e.g. local default resources) so we don't re-query them on every\n   * tool-set resolution.\n   */\n  readonly #orgIdByResourceId = new Map<string, string | null>();\n\n  /** Map a session's resourceId to its owning org, or `null` when it isn't a project. */\n  async resolveOrgId(resourceId: string): Promise<string | null> {\n    const cached = this.#orgIdByResourceId.get(resourceId);\n    if (cached !== undefined) return cached;\n    // Non-UUID resource ids (local/dev resources) would make the uuid column\n    // comparison throw — they're definitively \"not a project\", so cache that.\n    if (!UUID_PATTERN.test(resourceId)) {\n      this.#orgIdByResourceId.set(resourceId, null);\n      return null;\n    }\n    let orgId: string | null;\n    try {\n      await this.projects.ensureReady();\n      const project = await this.projects.getById({ id: resourceId });\n      orgId = project?.orgId ?? null;\n    } catch {\n      // Transient database failure: skip the tools for this request but don't\n      // cache the miss, so the next request retries the lookup.\n      return null;\n    }\n    this.#orgIdByResourceId.set(resourceId, orgId);\n    return orgId;\n  }\n\n  /** Test hook: clear the org/connection caches between specs. */\n  clearCaches(): void {\n    this.#orgIdByResourceId.clear();\n    this.#connectionChecks.clear();\n  }\n\n  readonly intake: Intake = {\n    resolveIntakeDispatch: input => this.#resolveIntakeDispatch(input),\n    listSources: async ({ orgId }) => {\n      const connection = await this.loadConnection(orgId);\n      if (!connection) return [];\n      const accessToken = await this.getFreshAccessToken(connection);\n      const projects = await this.listProjects(accessToken);\n      return projects.map(project => ({\n        id: project.id,\n        name: project.name,\n        type: 'project',\n      }));\n    },\n    listItems: async ({ orgId, sourceIds, cursor }) => {\n      if (sourceIds.length === 0) return { items: [], nextCursor: null };\n      const connection = await this.loadConnection(orgId);\n      if (!connection) return { items: [], nextCursor: null };\n      const accessToken = await this.getFreshAccessToken(connection);\n      const page = await this.listActiveIssues(accessToken, cursor, sourceIds);\n      return {\n        items: page.issues.map(issue => ({\n          source: { type: 'issue', externalId: issue.id, url: issue.url },\n          sourceId: issue.projectId,\n          title: `${issue.identifier}: ${issue.title}`,\n          status: issue.state,\n          labels: issue.labels,\n          assignee: issue.assignee,\n          createdAt: issue.createdAt,\n          updatedAt: issue.updatedAt,\n          metadata: {\n            identifier: issue.identifier,\n            stateType: issue.stateType,\n            priority: issue.priorityLabel,\n            team: issue.team,\n          },\n        })),\n        nextCursor: page.nextCursor,\n      };\n    },\n    listIssues: input => this.#listIntakeIssues(input),\n    getIssue: input => this.#getIntakeIssue(input),\n    createComment: input => this.#createIntakeComment(input),\n    updateIssue: input => this.#updateIntakeIssue(input),\n  };\n\n  /**\n   * Background-dispatch context: the org's OAuth connection with a fresh\n   * token. Linear work items store the issue UUID directly as `externalId`.\n   */\n  async #resolveIntakeDispatch({\n    orgId,\n    externalSource,\n  }: {\n    orgId: string;\n    externalSource: { type: string; externalId: string };\n  }): Promise<{ connection: IntegrationConnection; issueId: string } | null> {\n    if (externalSource.type !== 'issue') return null;\n    const connection = await this.loadConnection(orgId);\n    if (!connection) return null;\n    const accessToken = await this.getFreshAccessToken(connection);\n    return { connection: { type: 'oauth', accessToken }, issueId: externalSource.externalId };\n  }\n  /**\n   * The OAuth connect/callback flow round-trips a signed `state` through\n   * Linear, so a multi-replica deploy needs a deployment-stable state secret.\n   */\n  readonly requiresStableStateSigner = true;\n\n  readonly #clientId: string;\n  readonly #clientSecret: string;\n\n  constructor(config: LinearIntegrationConfig) {\n    const missing = (['clientId', 'clientSecret'] as const).filter(key => !config[key]);\n    if (missing.length > 0) {\n      throw new Error(`LinearIntegration is missing required config: ${missing.join(', ')}.`);\n    }\n    this.#clientId = config.clientId;\n    this.#clientSecret = config.clientSecret;\n  }\n\n  // ── OAuth ────────────────────────────────────────────────────────────────\n\n  /**\n   * Build the OAuth authorize URL. `prompt=consent` forces the workspace\n   * picker even for an already-authorized user, so \"reconnect\" can switch\n   * workspaces.\n   */\n  buildAuthorizeUrl(state: string, redirectUri: string): string {\n    const url = new URL(LINEAR_AUTHORIZE_URL);\n    url.searchParams.set('client_id', this.#clientId);\n    url.searchParams.set('redirect_uri', redirectUri);\n    url.searchParams.set('response_type', 'code');\n    // `comments:create` lets the agent's linear_create_comment tool post\n    // comments; everything else the integration does is read-only.\n    url.searchParams.set('scope', 'read,comments:create');\n    url.searchParams.set('state', state);\n    url.searchParams.set('prompt', 'consent');\n    return url.toString();\n  }\n\n  /** Exchange an OAuth `code` for a workspace-scoped token set. */\n  async exchangeOAuthCode(code: string, redirectUri: string): Promise<LinearTokenSet> {\n    return this.#requestTokens({ grant_type: 'authorization_code', code, redirect_uri: redirectUri }, 'token exchange');\n  }\n\n  /**\n   * Exchange a refresh token for a new token set. Linear rotates refresh\n   * tokens, so the returned set replaces the stored one entirely. A 400/401\n   * here means the refresh token is invalid/revoked and the org must\n   * re-authorize.\n   */\n  async refreshAccessToken(refreshToken: string): Promise<LinearTokenSet> {\n    return this.#requestTokens({ grant_type: 'refresh_token', refresh_token: refreshToken }, 'token refresh');\n  }\n\n  /** POST to Linear's token endpoint and normalize the response. */\n  async #requestTokens(params: Record<string, string>, label: string): Promise<LinearTokenSet> {\n    const res = await fetch(LINEAR_TOKEN_URL, {\n      method: 'POST',\n      signal: AbortSignal.timeout(10_000),\n      headers: { 'content-type': 'application/x-www-form-urlencoded' },\n      body: new URLSearchParams({\n        ...params,\n        client_id: this.#clientId,\n        client_secret: this.#clientSecret,\n      }),\n    });\n    if (!res.ok) {\n      const err = new Error(`Linear ${label} failed (${res.status})`);\n      (err as { status?: number }).status = res.status;\n      throw err;\n    }\n    const body = (await res.json()) as {\n      access_token?: string;\n      refresh_token?: string;\n      expires_in?: number;\n      scope?: string;\n    };\n    if (!body.access_token) {\n      throw new Error(`Linear ${label} returned no access token.`);\n    }\n    return {\n      accessToken: body.access_token,\n      refreshToken: body.refresh_token ?? null,\n      expiresAt: typeof body.expires_in === 'number' ? new Date(Date.now() + body.expires_in * 1000) : null,\n      scope: body.scope ?? null,\n    };\n  }\n\n  // ── GraphQL reads/writes ─────────────────────────────────────────────────\n\n  /** Fetch the workspace (organization) the access token is scoped to. */\n  async fetchWorkspace(accessToken: string): Promise<LinearWorkspace> {\n    const data = await linearGraphql<{ organization: { name: string; urlKey: string } }>(\n      accessToken,\n      `query { organization { name urlKey } }`,\n    );\n    return { name: data.organization.name, urlKey: data.organization.urlKey };\n  }\n\n  async #listIntakeIssues(input: ListIntakeIssuesInput): Promise<{ issues: IntakeIssue[]; nextCursor: string | null }> {\n    const accessToken = getLinearAccessToken(input.connection);\n    const result = await this.listActiveIssues(accessToken, input.cursor, input.sourceIds, input.labels);\n    return {\n      issues: result.issues.map(issue => linearIssueToIntakeIssue(issue)),\n      nextCursor: result.nextCursor,\n    };\n  }\n\n  async #getIntakeIssue(input: GetIntakeIssueInput): Promise<IntakeIssueDetail | null> {\n    const accessToken = getLinearAccessToken(input.connection);\n    const issue = await this.fetchIssueDetail(accessToken, input.issueId);\n    if (!issue) return null;\n    return {\n      ...linearIssueToIntakeIssue(issue),\n      description: issue.description,\n      commentCount: issue.comments.length,\n      comments: issue.comments,\n    };\n  }\n\n  async #createIntakeComment(input: CreateIntakeCommentInput): Promise<{ id: string; url: string } | null> {\n    const accessToken = getLinearAccessToken(input.connection);\n    return this.createIssueComment(accessToken, input.issueId, input.body);\n  }\n\n  async #updateIntakeIssue(input: UpdateIntakeIssueInput): Promise<IntakeIssue | null> {\n    const accessToken = getLinearAccessToken(input.connection);\n    const issue = await this.fetchIssueDetail(accessToken, input.issueId);\n    if (!issue) return null;\n    const teamKey = issue.team;\n    if (!teamKey) return null;\n    const states = await this.#listTeamWorkflowStates(accessToken, teamKey);\n    let targetState: { id: string; name: string; type: string } | null = null;\n    if (input.state.kind === 'byType') {\n      const wantedType = input.state.stateType;\n      targetState = states.find(state => state.type === wantedType) ?? null;\n    } else {\n      const wanted = input.state.name.toLowerCase();\n      targetState = states.find(state => state.name.toLowerCase() === wanted) ?? null;\n    }\n    if (!targetState) return null;\n    if (targetState.name === issue.state) {\n      return linearIssueToIntakeIssue(issue);\n    }\n    const data = await linearGraphql<{ issueUpdate: { success: boolean } }>(\n      accessToken,\n      `mutation UpdateIssueState($id: String!, $stateId: String!) {\n        issueUpdate(id: $id, input: { stateId: $stateId }) { success }\n      }`,\n      { id: issue.id, stateId: targetState.id },\n    );\n    if (!data.issueUpdate.success) {\n      throw new Error('Linear did not accept the issue update.');\n    }\n    const fresh = await this.fetchIssueDetail(accessToken, issue.id);\n    if (!fresh) return null;\n    return linearIssueToIntakeIssue(fresh);\n  }\n\n  async #listTeamWorkflowStates(\n    accessToken: string,\n    teamKey: string,\n  ): Promise<Array<{ id: string; name: string; type: string }>> {\n    const data = await linearGraphql<{\n      team: { states: { nodes: Array<{ id: string; name: string; type: string }> } } | null;\n    }>(\n      accessToken,\n      `query TeamStates($key: String!) {\n        team(id: $key) { states(first: 100) { nodes { id name type } } }\n      }`,\n      { key: teamKey },\n    );\n    return data.team?.states.nodes ?? [];\n  }\n\n  /** List the workspace's projects (for the Settings intake-source picker). */\n  async listProjects(accessToken: string): Promise<LinearProject[]> {\n    const data = await linearGraphql<{\n      projects: {\n        nodes: Array<{\n          id: string;\n          name: string;\n          state: string;\n          teams: { nodes: Array<{ id: string; key: string; name: string }> };\n        }>;\n      };\n    }>(\n      accessToken,\n      `query { projects(first: 100) { nodes { id name state teams(first: 10) { nodes { id key name } } } } }`,\n    );\n    return data.projects.nodes.map(node => ({\n      id: node.id,\n      name: node.name,\n      state: node.state,\n      teams: node.teams.nodes.map(team => ({ id: team.id, key: team.key, name: team.name })),\n    }));\n  }\n\n  /**\n   * List one page of the workspace's active issues (triage/backlog/unstarted/\n   * started — completed and canceled are excluded), most recently updated\n   * first. When `projectIds` is provided, only issues from those projects are\n   * returned.\n   */\n  async listActiveIssues(\n    accessToken: string,\n    after?: string,\n    projectIds?: string[],\n    labels?: string[],\n  ): Promise<LinearIssuePage> {\n    const normalizedLabels = [...new Set((labels ?? []).map(label => label.trim()).filter(Boolean))];\n    const projectFilter = projectIds?.length ? ', project: { id: { in: $projectIds } }' : '';\n    const projectVar = projectIds?.length ? ', $projectIds: [ID!]' : '';\n    const labelFilter = normalizedLabels.length > 0 ? ', labels: { name: { in: $labels } }' : '';\n    const labelVar = normalizedLabels.length > 0 ? ', $labels: [String!]' : '';\n    const data = await linearGraphql<IssuesQueryData>(\n      accessToken,\n      `query Intake($first: Int!, $after: String${projectVar}${labelVar}) {\n        issues(\n          first: $first\n          after: $after\n          orderBy: updatedAt\n          filter: { state: { type: { in: [\"triage\", \"backlog\", \"unstarted\", \"started\"] } }${projectFilter}${labelFilter} }\n        ) {\n          nodes {\n            id\n            identifier\n            title\n            url\n            priorityLabel\n            createdAt\n            updatedAt\n            state { name type }\n            project { id }\n            assignee { name }\n            creator { name }\n            team { key }\n            labels { nodes { name } }\n          }\n          pageInfo { hasNextPage endCursor }\n        }\n      }`,\n      {\n        first: LINEAR_ISSUES_PAGE_SIZE,\n        after: after ?? null,\n        ...(projectIds?.length ? { projectIds } : {}),\n        ...(normalizedLabels.length > 0 ? { labels: normalizedLabels } : {}),\n      },\n    );\n    const { nodes, pageInfo } = data.issues;\n    return {\n      issues: nodes.map(node => ({\n        id: node.id,\n        projectId: node.project.id,\n        identifier: node.identifier,\n        title: node.title,\n        url: node.url,\n        state: node.state.name,\n        stateType: node.state.type,\n        priorityLabel: node.priorityLabel,\n        assignee: node.assignee?.name ?? null,\n        creator: node.creator?.name ?? null,\n        team: node.team?.key ?? null,\n        labels: node.labels.nodes.map(label => label.name),\n        createdAt: node.createdAt,\n        updatedAt: node.updatedAt,\n      })),\n      nextCursor: pageInfo.hasNextPage ? pageInfo.endCursor : null,\n    };\n  }\n\n  /** Follow `comments.pageInfo` until exhausted so long discussions aren't truncated. */\n  async #fetchRemainingIssueComments(\n    accessToken: string,\n    issueId: string,\n    firstPage: IssueCommentsPage,\n  ): Promise<IssueCommentNode[]> {\n    const nodes = [...firstPage.nodes];\n    let { hasNextPage, endCursor } = firstPage.pageInfo;\n    for (let page = 1; hasNextPage && endCursor && page < ISSUE_COMMENTS_MAX_PAGES; page++) {\n      const data = await linearGraphql<IssueCommentsQueryData>(\n        accessToken,\n        `query IssueComments($id: String!, $first: Int!, $after: String!) {\n          issue(id: $id) {\n            comments(first: $first, after: $after) {\n              nodes { body createdAt user { name } }\n              pageInfo { hasNextPage endCursor }\n            }\n          }\n        }`,\n        { id: issueId, first: ISSUE_COMMENTS_PAGE_SIZE, after: endCursor },\n      );\n      const comments = data.issue?.comments;\n      if (!comments) break;\n      nodes.push(...comments.nodes);\n      ({ hasNextPage, endCursor } = comments.pageInfo);\n    }\n    return nodes;\n  }\n\n  /**\n   * Fetch one issue with its description and comments. `idOrIdentifier`\n   * accepts both the Linear UUID and the human key (`ENG-123`). Returns\n   * `null` when the issue doesn't exist (Linear reports it as an \"Entity not\n   * found\" error).\n   */\n  async fetchIssueDetail(accessToken: string, idOrIdentifier: string): Promise<LinearIssueDetail | null> {\n    let data: IssueDetailQueryData;\n    try {\n      data = await linearGraphql<IssueDetailQueryData>(\n        accessToken,\n        `query IssueDetail($id: String!, $commentsFirst: Int!) {\n          issue(id: $id) {\n            id\n            identifier\n            title\n            description\n            url\n            priorityLabel\n            createdAt\n            updatedAt\n            state { name type }\n            project { id }\n            assignee { name }\n            creator { name }\n            team { key }\n            labels { nodes { name } }\n            comments(first: $commentsFirst) {\n              nodes { body createdAt user { name } }\n              pageInfo { hasNextPage endCursor }\n            }\n          }\n        }`,\n        { id: idOrIdentifier, commentsFirst: ISSUE_COMMENTS_PAGE_SIZE },\n      );\n    } catch (err) {\n      // Linear surfaces unknown ids/identifiers as a GraphQL \"Entity not\n      // found\" error rather than a null node — map that to \"issue doesn't\n      // exist\".\n      if (err instanceof Error && /entity not found/i.test(err.message)) return null;\n      throw err;\n    }\n    const issue = data.issue;\n    if (!issue) return null;\n    const allComments = await this.#fetchRemainingIssueComments(accessToken, issue.id, issue.comments);\n    const comments = allComments.sort((a, b) => new Date(a.createdAt).getTime() - new Date(b.createdAt).getTime());\n    return {\n      id: issue.id,\n      projectId: issue.project?.id ?? null,\n      identifier: issue.identifier,\n      title: issue.title,\n      description: issue.description?.trim() ? issue.description : null,\n      url: issue.url,\n      state: issue.state.name,\n      stateType: issue.state.type,\n      priorityLabel: issue.priorityLabel,\n      assignee: issue.assignee?.name ?? null,\n      creator: issue.creator?.name ?? null,\n      team: issue.team?.key ?? null,\n      labels: issue.labels.nodes.map(label => label.name),\n      createdAt: issue.createdAt,\n      updatedAt: issue.updatedAt,\n      comments: comments.map(comment => ({\n        author: comment.user?.name ?? null,\n        body: comment.body,\n        createdAt: comment.createdAt,\n      })),\n    };\n  }\n\n  /**\n   * Post a comment on an issue. `idOrIdentifier` accepts both the Linear UUID\n   * and the human key (`ENG-123`) — the identifier is resolved to a UUID\n   * first because `commentCreate` only accepts UUIDs. Returns `null` when the\n   * issue doesn't exist.\n   */\n  async createIssueComment(\n    accessToken: string,\n    idOrIdentifier: string,\n    body: string,\n  ): Promise<LinearCreatedComment | null> {\n    let issueId: string;\n    try {\n      const data = await linearGraphql<IssueIdQueryData>(\n        accessToken,\n        `query IssueId($id: String!) { issue(id: $id) { id } }`,\n        { id: idOrIdentifier },\n      );\n      if (!data.issue) return null;\n      issueId = data.issue.id;\n    } catch (err) {\n      if (err instanceof Error && /entity not found/i.test(err.message)) return null;\n      throw err;\n    }\n    const data = await linearGraphql<CommentCreateMutationData>(\n      accessToken,\n      `mutation CommentCreate($input: CommentCreateInput!) {\n        commentCreate(input: $input) { success comment { id url } }\n      }`,\n      { input: { issueId, body } },\n    );\n    if (!data.commentCreate.success || !data.commentCreate.comment) {\n      throw new Error('Linear did not accept the comment.');\n    }\n    return data.commentCreate.comment;\n  }\n\n  // ── FactoryIntegration surface ───────────────────────────────────────────\n\n  workers(ctx: IntegrationContext): MastraWorker[] {\n    if (!linearIssueReconciliationEnabled()) return [];\n    const reconcile = attachLinearIssueReconciler(this, ctx);\n    if (!reconcile) return [];\n    const intervalMs = linearIssueReconciliationInterval();\n    return [\n      new IssueReconcileWorker({\n        integrationId: this.id,\n        reconcile,\n        ...(intervalMs ? { intervalMs } : {}),\n      }),\n    ];\n  }\n\n  /**\n   * The integration's HTTP surface: `/web/linear/*` + `/auth/linear/*` Mastra\n   * `apiRoutes` (status, OAuth connect/callback, projects + issues for\n   * Intake). Handlers operate on this instance.\n   */\n  routes(ctx: IntegrationContext): ApiRoute[] {\n    return buildLinearRoutes({\n      linear: this,\n      auth: ctx.auth,\n      stateSigner: ctx.stateSigner,\n      baseUrl: ctx.baseUrl,\n      intake: ctx.storage.intake,\n      ingestFactoryIssues: attachLinearRules(ctx),\n    });\n  }\n\n  /**\n   * Org-scoped agent tools: issue detail + comment tools for sessions whose\n   * project belongs to an org with an active Linear connection.\n   */\n  async agentTools(args: { requestContext: RequestContext }): Promise<IntegrationTools> {\n    return buildLinearAgentTools({ requestContext: args.requestContext, linear: this });\n  }\n\n  /** Non-secret config snapshot for system diagnostics/startup logs. */\n  diagnostics(): Record<string, unknown> {\n    return {\n      oauthAppConfigured: true,\n    };\n  }\n}\n\nfunction getLinearAccessToken(connection: IntegrationConnection): string {\n  if (connection.type !== 'oauth') {\n    throw new Error('Linear capabilities require an OAuth connection.');\n  }\n  return connection.accessToken;\n}\n\nfunction linearIssueToIntakeIssue(issue: Omit<LinearIssue, 'projectId'>): IntakeIssue {\n  return {\n    id: issue.id,\n    identifier: issue.identifier,\n    title: issue.title,\n    url: issue.url,\n    author: issue.creator,\n    state: issue.state,\n    stateType: issue.stateType,\n    priority: issue.priorityLabel,\n    assignee: issue.assignee,\n    source: issue.team,\n    labels: issue.labels,\n    commentCount: null,\n    createdAt: issue.createdAt,\n    updatedAt: issue.updatedAt,\n  };\n}\n"],"mappings":";;;;;;;AA8CA,MAAM,qBAAqB;AAC3B,MAAM,mBAAmB;AACzB,MAAM,uBAAuB;AA8F7B,MAAM,0BAA0B;AAChC,MAAM,2BAA2B;;AAEjC,MAAM,2BAA2B;;AAGjC,MAAM,wBAAwB;;AAG9B,MAAM,oBAAoB;AAE1B,MAAM,eAAe;;AAGrB,IAAa,4BAAb,cAA+C,MAAM;CACnD,cAAc;EACZ,MAAM,+EAA+E;CACvF;AACF;;AA2EA,eAAe,cAAiB,aAAqB,OAAe,WAAiD;CACnH,MAAM,MAAM,MAAM,MAAM,oBAAoB;EAC1C,QAAQ;EACR,QAAQ,YAAY,QAAQ,IAAM;EAClC,SAAS;GACP,gBAAgB;GAChB,eAAe,UAAU;EAC3B;EACA,MAAM,KAAK,UAAU;GAAE;GAAO;EAAU,CAAC;CAC3C,CAAC;CACD,IAAI,CAAC,IAAI,IAAI;EAGX,IAAI,SAAwB;EAC5B,IAAI;GAEF,UAAS,MADc,IAAI,KAAK,EAAA,CACf,SAAS,EAAE,EAAE,WAAW;EAC3C,QAAQ,CAER;EACA,MAAM,sBAAM,IAAI,MAAM,8BAA8B,IAAI,OAAO,GAAG,SAAS,KAAK,WAAW,IAAI;EAC/F,IAA6B,SAAS,IAAI;EAC1C,MAAM;CACR;CACA,MAAM,OAAQ,MAAM,IAAI,KAAK;CAC7B,IAAI,KAAK,QAAQ,QACf,MAAM,IAAI,MAAM,qBAAqB,KAAK,OAAO,EAAE,EAAE,WAAW,iBAAiB;CAEnF,IAAI,CAAC,KAAK,MACR,MAAM,IAAI,MAAM,8BAA8B;CAEhD,OAAO,KAAK;AACd;AAEA,IAAa,oBAAb,MAA6D;;CAE3D,KAAc;;CAEd;CACA;CACA;;CAGA,WAAW,EACT,SACA,UACA,QAKO;EACP,KAAKA,WAAW;EAChB,KAAKC,YAAY;EACjB,KAAKC,QAAQ;CACf;CAEA,IAAI,UAA+B;EACjC,IAAI,CAAC,KAAKF,UACR,MAAM,IAAI,MAAM,oFAAoF;EAEtG,OAAO,KAAKA;CACd;;CAGA,IAAI,WAAmC;EACrC,IAAI,CAAC,KAAKC,WACR,MAAM,IAAI,MAAM,oFAAoF;EAEtG,OAAO,KAAKA;CACd;;;;;CAMA,IAAI,cAAuB;EACzB,OAAO,KAAKC,OAAO,QAAQ,KAAK;CAClC;;CAKA,MAAM,eAAe,OAAoD;EACvE,MAAM,aAAa,MAAM,KAAK,QAAQ,YAAY,IAAI,KAAK;EAC3D,IAAI,CAAC,YAAY,OAAO;EACxB,MAAM,EAAE,SAAS;EACjB,OAAO;GACL,IAAI,WAAW;GACf,OAAO,WAAW;GAClB,QAAQ,WAAW;GACnB,aAAa,KAAK;GAClB,OAAO,KAAK,SAAS;GACrB,cAAc,KAAK,gBAAgB;GACnC,WAAW,KAAK,gBAAgB,QAAQ,KAAK,gBAAgB,KAAA,IAAY,OAAO,IAAI,KAAK,KAAK,WAAW;GACzG,eAAe,KAAK,iBAAiB;GACrC,iBAAiB,KAAK,mBAAmB;GACzC,WAAW,WAAW;GACtB,WAAW,WAAW;EACxB;CACF;;CAGA,MAAM,iBAAiB,OAAmD;EACxE,MAAM,KAAK,QAAQ,YAAY,OAAO,MAAM,OAAO;GACjD,QAAQ,MAAM;GACd,MAAM;IACJ,aAAa,MAAM;IACnB,cAAc,MAAM;IACpB,aAAa,MAAM,WAAW,QAAQ,KAAK;IAC3C,OAAO,MAAM;IACb,eAAe,MAAM;IACrB,iBAAiB,MAAM;GACzB;EACF,CAAC;EAED,KAAK,0BAA0B,MAAM,KAAK;CAC5C;;CAGA,MAAMC,cAAc,OAAe,QAAuC;EACxE,MAAM,KAAK,QAAQ,YAAY,OAAO,QAAO,UAAS;GACpD,GAAG;GACH,aAAa,OAAO;GACpB,cAAc,OAAO;GACrB,aAAa,OAAO,WAAW,QAAQ,KAAK;GAE5C,OAAO,OAAO,SAAS,KAAK;EAC9B,EAAE;CACJ;;;;;;CAOA,gBAAgB,YAA0C;EAExD,QADgB,WAAW,SAAS,GAAA,CAAI,MAAM,QAAQ,CAAC,CAAC,OAAO,OACnD,CAAC,CAAC,MAAK,UAAS,UAAU,qBAAqB,UAAU,WAAW,UAAU,OAAO;CACnG;;;;;;CAOA,qCAA8B,IAAI,IAA6B;;;;;;;CAQ/D,MAAM,oBAAoB,YAAkD;EAG1E,IAAI,EADF,WAAW,cAAc,QAAQ,WAAW,UAAU,QAAQ,IAAI,yBAAyB,KAAK,IAAI,IACxF,OAAO,WAAW;EAEhC,IAAI,CAAC,WAAW,cAEd,MAAM,IAAI,0BAA0B;EAGtC,MAAM,WAAW,KAAKC,mBAAmB,IAAI,WAAW,KAAK;EAC7D,IAAI,UAAU,OAAO;EAKrB,MAAM,SAAS,MAAM,KAAK,eAAe,WAAW,KAAK;EACzD,IAAI,CAAC,QAAQ,MAAM,IAAI,0BAA0B;EAEjD,MAAM,aAAa,KAAKA,mBAAmB,IAAI,WAAW,KAAK;EAC/D,IAAI,YAAY,OAAO;EAGvB,IAAI,EADkB,OAAO,cAAc,QAAQ,OAAO,UAAU,QAAQ,IAAI,yBAAyB,KAAK,IAAI,IAC9F,OAAO,OAAO;EAClC,IAAI,CAAC,OAAO,cAAc,MAAM,IAAI,0BAA0B;EAE9D,MAAM,eAAe,OAAO;EAC5B,MAAM,WAAW,YAAY;GAC3B,IAAI;IACF,MAAM,SAAS,MAAM,KAAK,mBAAmB,YAAY;IACzD,MAAM,KAAKD,cAAc,WAAW,OAAO,MAAM;IACjD,OAAO,OAAO;GAChB,SAAS,KAAK;IACZ,MAAM,SAAU,IAA4B;IAG5C,IAAI,WAAW,OAAO,WAAW,KAAK,MAAM,IAAI,0BAA0B;IAC1E,MAAM;GACR,UAAU;IACR,KAAKC,mBAAmB,OAAO,WAAW,KAAK;GACjD;EACF,EAAA,CAAG;EACH,KAAKA,mBAAmB,IAAI,WAAW,OAAO,OAAO;EACrD,OAAO;CACT;;CAKA,oCAA6B,IAAI,IAAmC;;;;;;CAOpE,MAAM,gBAAgB,OAA+C;EACnE,MAAM,SAAS,KAAKC,kBAAkB,IAAI,KAAK;EAC/C,IAAI,UAAU,KAAK,IAAI,IAAI,OAAO,YAAY,mBAAmB,OAAO;EACxE,MAAM,aAAa,MAAM,KAAK,eAAe,KAAK;EAClD,MAAM,QAA+B;GACnC,WAAW,eAAe;GAC1B,YAAY,eAAe,QAAQ,KAAK,gBAAgB,UAAU;GAClE,WAAW,KAAK,IAAI;EACtB;EACA,KAAKA,kBAAkB,IAAI,OAAO,KAAK;EACvC,OAAO;CACT;;;;;;CAOA,0BAA0B,OAAqB;EAC7C,KAAKA,kBAAkB,OAAO,KAAK;CACrC;;;;;;;CAQA,qCAA8B,IAAI,IAA2B;;CAG7D,MAAM,aAAa,YAA4C;EAC7D,MAAM,SAAS,KAAKC,mBAAmB,IAAI,UAAU;EACrD,IAAI,WAAW,KAAA,GAAW,OAAO;EAGjC,IAAI,CAAC,aAAa,KAAK,UAAU,GAAG;GAClC,KAAKA,mBAAmB,IAAI,YAAY,IAAI;GAC5C,OAAO;EACT;EACA,IAAI;EACJ,IAAI;GACF,MAAM,KAAK,SAAS,YAAY;GAEhC,SAAQ,MADc,KAAK,SAAS,QAAQ,EAAE,IAAI,WAAW,CAAC,EAAA,EAC7C,SAAS;EAC5B,QAAQ;GAGN,OAAO;EACT;EACA,KAAKA,mBAAmB,IAAI,YAAY,KAAK;EAC7C,OAAO;CACT;;CAGA,cAAoB;EAClB,KAAKA,mBAAmB,MAAM;EAC9B,KAAKD,kBAAkB,MAAM;CAC/B;CAEA,SAA0B;EACxB,wBAAuB,UAAS,KAAKE,uBAAuB,KAAK;EACjE,aAAa,OAAO,EAAE,YAAY;GAChC,MAAM,aAAa,MAAM,KAAK,eAAe,KAAK;GAClD,IAAI,CAAC,YAAY,OAAO,CAAC;GACzB,MAAM,cAAc,MAAM,KAAK,oBAAoB,UAAU;GAE7D,QAAO,MADgB,KAAK,aAAa,WAAW,EAAA,CACpC,KAAI,aAAY;IAC9B,IAAI,QAAQ;IACZ,MAAM,QAAQ;IACd,MAAM;GACR,EAAE;EACJ;EACA,WAAW,OAAO,EAAE,OAAO,WAAW,aAAa;GACjD,IAAI,UAAU,WAAW,GAAG,OAAO;IAAE,OAAO,CAAC;IAAG,YAAY;GAAK;GACjE,MAAM,aAAa,MAAM,KAAK,eAAe,KAAK;GAClD,IAAI,CAAC,YAAY,OAAO;IAAE,OAAO,CAAC;IAAG,YAAY;GAAK;GACtD,MAAM,cAAc,MAAM,KAAK,oBAAoB,UAAU;GAC7D,MAAM,OAAO,MAAM,KAAK,iBAAiB,aAAa,QAAQ,SAAS;GACvE,OAAO;IACL,OAAO,KAAK,OAAO,KAAI,WAAU;KAC/B,QAAQ;MAAE,MAAM;MAAS,YAAY,MAAM;MAAI,KAAK,MAAM;KAAI;KAC9D,UAAU,MAAM;KAChB,OAAO,GAAG,MAAM,WAAW,IAAI,MAAM;KACrC,QAAQ,MAAM;KACd,QAAQ,MAAM;KACd,UAAU,MAAM;KAChB,WAAW,MAAM;KACjB,WAAW,MAAM;KACjB,UAAU;MACR,YAAY,MAAM;MAClB,WAAW,MAAM;MACjB,UAAU,MAAM;MAChB,MAAM,MAAM;KACd;IACF,EAAE;IACF,YAAY,KAAK;GACnB;EACF;EACA,aAAY,UAAS,KAAKC,kBAAkB,KAAK;EACjD,WAAU,UAAS,KAAKC,gBAAgB,KAAK;EAC7C,gBAAe,UAAS,KAAKC,qBAAqB,KAAK;EACvD,cAAa,UAAS,KAAKC,mBAAmB,KAAK;CACrD;;;;;CAMA,MAAMJ,uBAAuB,EAC3B,OACA,kBAIyE;EACzE,IAAI,eAAe,SAAS,SAAS,OAAO;EAC5C,MAAM,aAAa,MAAM,KAAK,eAAe,KAAK;EAClD,IAAI,CAAC,YAAY,OAAO;EAExB,OAAO;GAAE,YAAY;IAAE,MAAM;IAAS,aAAA,MADZ,KAAK,oBAAoB,UAAU;GACX;GAAG,SAAS,eAAe;EAAW;CAC1F;;;;;CAKA,4BAAqC;CAErC;CACA;CAEA,YAAY,QAAiC;EAC3C,MAAM,UAAW,CAAC,YAAY,cAAc,CAAC,CAAW,QAAO,QAAO,CAAC,OAAO,IAAI;EAClF,IAAI,QAAQ,SAAS,GACnB,MAAM,IAAI,MAAM,iDAAiD,QAAQ,KAAK,IAAI,EAAE,EAAE;EAExF,KAAKK,YAAY,OAAO;EACxB,KAAKC,gBAAgB,OAAO;CAC9B;;;;;;CASA,kBAAkB,OAAe,aAA6B;EAC5D,MAAM,MAAM,IAAI,IAAI,oBAAoB;EACxC,IAAI,aAAa,IAAI,aAAa,KAAKD,SAAS;EAChD,IAAI,aAAa,IAAI,gBAAgB,WAAW;EAChD,IAAI,aAAa,IAAI,iBAAiB,MAAM;EAG5C,IAAI,aAAa,IAAI,SAAS,sBAAsB;EACpD,IAAI,aAAa,IAAI,SAAS,KAAK;EACnC,IAAI,aAAa,IAAI,UAAU,SAAS;EACxC,OAAO,IAAI,SAAS;CACtB;;CAGA,MAAM,kBAAkB,MAAc,aAA8C;EAClF,OAAO,KAAKE,eAAe;GAAE,YAAY;GAAsB;GAAM,cAAc;EAAY,GAAG,gBAAgB;CACpH;;;;;;;CAQA,MAAM,mBAAmB,cAA+C;EACtE,OAAO,KAAKA,eAAe;GAAE,YAAY;GAAiB,eAAe;EAAa,GAAG,eAAe;CAC1G;;CAGA,MAAMA,eAAe,QAAgC,OAAwC;EAC3F,MAAM,MAAM,MAAM,MAAM,kBAAkB;GACxC,QAAQ;GACR,QAAQ,YAAY,QAAQ,GAAM;GAClC,SAAS,EAAE,gBAAgB,oCAAoC;GAC/D,MAAM,IAAI,gBAAgB;IACxB,GAAG;IACH,WAAW,KAAKF;IAChB,eAAe,KAAKC;GACtB,CAAC;EACH,CAAC;EACD,IAAI,CAAC,IAAI,IAAI;GACX,MAAM,sBAAM,IAAI,MAAM,UAAU,MAAM,WAAW,IAAI,OAAO,EAAE;GAC9D,IAA6B,SAAS,IAAI;GAC1C,MAAM;EACR;EACA,MAAM,OAAQ,MAAM,IAAI,KAAK;EAM7B,IAAI,CAAC,KAAK,cACR,MAAM,IAAI,MAAM,UAAU,MAAM,2BAA2B;EAE7D,OAAO;GACL,aAAa,KAAK;GAClB,cAAc,KAAK,iBAAiB;GACpC,WAAW,OAAO,KAAK,eAAe,WAAW,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,aAAa,GAAI,IAAI;GACjG,OAAO,KAAK,SAAS;EACvB;CACF;;CAKA,MAAM,eAAe,aAA+C;EAClE,MAAM,OAAO,MAAM,cACjB,aACA,wCACF;EACA,OAAO;GAAE,MAAM,KAAK,aAAa;GAAM,QAAQ,KAAK,aAAa;EAAO;CAC1E;CAEA,MAAML,kBAAkB,OAA6F;EACnH,MAAM,cAAc,qBAAqB,MAAM,UAAU;EACzD,MAAM,SAAS,MAAM,KAAK,iBAAiB,aAAa,MAAM,QAAQ,MAAM,WAAW,MAAM,MAAM;EACnG,OAAO;GACL,QAAQ,OAAO,OAAO,KAAI,UAAS,yBAAyB,KAAK,CAAC;GAClE,YAAY,OAAO;EACrB;CACF;CAEA,MAAMC,gBAAgB,OAA+D;EACnF,MAAM,cAAc,qBAAqB,MAAM,UAAU;EACzD,MAAM,QAAQ,MAAM,KAAK,iBAAiB,aAAa,MAAM,OAAO;EACpE,IAAI,CAAC,OAAO,OAAO;EACnB,OAAO;GACL,GAAG,yBAAyB,KAAK;GACjC,aAAa,MAAM;GACnB,cAAc,MAAM,SAAS;GAC7B,UAAU,MAAM;EAClB;CACF;CAEA,MAAMC,qBAAqB,OAA8E;EACvG,MAAM,cAAc,qBAAqB,MAAM,UAAU;EACzD,OAAO,KAAK,mBAAmB,aAAa,MAAM,SAAS,MAAM,IAAI;CACvE;CAEA,MAAMC,mBAAmB,OAA4D;EACnF,MAAM,cAAc,qBAAqB,MAAM,UAAU;EACzD,MAAM,QAAQ,MAAM,KAAK,iBAAiB,aAAa,MAAM,OAAO;EACpE,IAAI,CAAC,OAAO,OAAO;EACnB,MAAM,UAAU,MAAM;EACtB,IAAI,CAAC,SAAS,OAAO;EACrB,MAAM,SAAS,MAAM,KAAKI,wBAAwB,aAAa,OAAO;EACtE,IAAI,cAAiE;EACrE,IAAI,MAAM,MAAM,SAAS,UAAU;GACjC,MAAM,aAAa,MAAM,MAAM;GAC/B,cAAc,OAAO,MAAK,UAAS,MAAM,SAAS,UAAU,KAAK;EACnE,OAAO;GACL,MAAM,SAAS,MAAM,MAAM,KAAK,YAAY;GAC5C,cAAc,OAAO,MAAK,UAAS,MAAM,KAAK,YAAY,MAAM,MAAM,KAAK;EAC7E;EACA,IAAI,CAAC,aAAa,OAAO;EACzB,IAAI,YAAY,SAAS,MAAM,OAC7B,OAAO,yBAAyB,KAAK;EASvC,IAAI,EAAC,MAPc,cACjB,aACA;;UAGA;GAAE,IAAI,MAAM;GAAI,SAAS,YAAY;EAAG,CAC1C,EAAA,CACU,YAAY,SACpB,MAAM,IAAI,MAAM,yCAAyC;EAE3D,MAAM,QAAQ,MAAM,KAAK,iBAAiB,aAAa,MAAM,EAAE;EAC/D,IAAI,CAAC,OAAO,OAAO;EACnB,OAAO,yBAAyB,KAAK;CACvC;CAEA,MAAMA,wBACJ,aACA,SAC4D;EAU5D,QAAO,MATY,cAGjB,aACA;;UAGA,EAAE,KAAK,QAAQ,CACjB,EAAA,CACY,MAAM,OAAO,SAAS,CAAC;CACrC;;CAGA,MAAM,aAAa,aAA+C;EAchE,QAAO,MAbY,cAUjB,aACA,uGACF,EAAA,CACY,SAAS,MAAM,KAAI,UAAS;GACtC,IAAI,KAAK;GACT,MAAM,KAAK;GACX,OAAO,KAAK;GACZ,OAAO,KAAK,MAAM,MAAM,KAAI,UAAS;IAAE,IAAI,KAAK;IAAI,KAAK,KAAK;IAAK,MAAM,KAAK;GAAK,EAAE;EACvF,EAAE;CACJ;;;;;;;CAQA,MAAM,iBACJ,aACA,OACA,YACA,QAC0B;EAC1B,MAAM,mBAAmB,CAAC,GAAG,IAAI,KAAK,UAAU,CAAC,EAAA,CAAG,KAAI,UAAS,MAAM,KAAK,CAAC,CAAC,CAAC,OAAO,OAAO,CAAC,CAAC;EAC/F,MAAM,gBAAgB,YAAY,SAAS,2CAA2C;EACtF,MAAM,aAAa,YAAY,SAAS,yBAAyB;EACjE,MAAM,cAAc,iBAAiB,SAAS,IAAI,wCAAwC;EAoC1F,MAAM,EAAE,OAAO,cAAa,MAlCT,cACjB,aACA,4CAA4C,aAH7B,iBAAiB,SAAS,IAAI,yBAAyB,GAGJ;;;;;4FAKoB,gBAAgB,YAAY;;;;;;;;;;;;;;;;;;;UAoBlH;GACE,OAAO;GACP,OAAO,SAAS;GAChB,GAAI,YAAY,SAAS,EAAE,WAAW,IAAI,CAAC;GAC3C,GAAI,iBAAiB,SAAS,IAAI,EAAE,QAAQ,iBAAiB,IAAI,CAAC;EACpE,CACF,EAAA,CACiC;EACjC,OAAO;GACL,QAAQ,MAAM,KAAI,UAAS;IACzB,IAAI,KAAK;IACT,WAAW,KAAK,QAAQ;IACxB,YAAY,KAAK;IACjB,OAAO,KAAK;IACZ,KAAK,KAAK;IACV,OAAO,KAAK,MAAM;IAClB,WAAW,KAAK,MAAM;IACtB,eAAe,KAAK;IACpB,UAAU,KAAK,UAAU,QAAQ;IACjC,SAAS,KAAK,SAAS,QAAQ;IAC/B,MAAM,KAAK,MAAM,OAAO;IACxB,QAAQ,KAAK,OAAO,MAAM,KAAI,UAAS,MAAM,IAAI;IACjD,WAAW,KAAK;IAChB,WAAW,KAAK;GAClB,EAAE;GACF,YAAY,SAAS,cAAc,SAAS,YAAY;EAC1D;CACF;;CAGA,MAAMC,6BACJ,aACA,SACA,WAC6B;EAC7B,MAAM,QAAQ,CAAC,GAAG,UAAU,KAAK;EACjC,IAAI,EAAE,aAAa,cAAc,UAAU;EAC3C,KAAK,IAAI,OAAO,GAAG,eAAe,aAAa,OAAO,0BAA0B,QAAQ;GAatF,MAAM,YAAW,MAZE,cACjB,aACA;;;;;;;YAQA;IAAE,IAAI;IAAS,OAAO;IAA0B,OAAO;GAAU,CACnE,EAAA,CACsB,OAAO;GAC7B,IAAI,CAAC,UAAU;GACf,MAAM,KAAK,GAAG,SAAS,KAAK;GAC5B,CAAC,CAAE,aAAa,aAAc,SAAS;EACzC;EACA,OAAO;CACT;;;;;;;CAQA,MAAM,iBAAiB,aAAqB,gBAA2D;EACrG,IAAI;EACJ,IAAI;GACF,OAAO,MAAM,cACX,aACA;;;;;;;;;;;;;;;;;;;;;YAsBA;IAAE,IAAI;IAAgB,eAAe;GAAyB,CAChE;EACF,SAAS,KAAK;GAIZ,IAAI,eAAe,SAAS,oBAAoB,KAAK,IAAI,OAAO,GAAG,OAAO;GAC1E,MAAM;EACR;EACA,MAAM,QAAQ,KAAK;EACnB,IAAI,CAAC,OAAO,OAAO;EAEnB,MAAM,YAAW,MADS,KAAKA,6BAA6B,aAAa,MAAM,IAAI,MAAM,QAAQ,EAAA,CACpE,MAAM,GAAG,MAAM,IAAI,KAAK,EAAE,SAAS,CAAC,CAAC,QAAQ,IAAI,IAAI,KAAK,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC;EAC7G,OAAO;GACL,IAAI,MAAM;GACV,WAAW,MAAM,SAAS,MAAM;GAChC,YAAY,MAAM;GAClB,OAAO,MAAM;GACb,aAAa,MAAM,aAAa,KAAK,IAAI,MAAM,cAAc;GAC7D,KAAK,MAAM;GACX,OAAO,MAAM,MAAM;GACnB,WAAW,MAAM,MAAM;GACvB,eAAe,MAAM;GACrB,UAAU,MAAM,UAAU,QAAQ;GAClC,SAAS,MAAM,SAAS,QAAQ;GAChC,MAAM,MAAM,MAAM,OAAO;GACzB,QAAQ,MAAM,OAAO,MAAM,KAAI,UAAS,MAAM,IAAI;GAClD,WAAW,MAAM;GACjB,WAAW,MAAM;GACjB,UAAU,SAAS,KAAI,aAAY;IACjC,QAAQ,QAAQ,MAAM,QAAQ;IAC9B,MAAM,QAAQ;IACd,WAAW,QAAQ;GACrB,EAAE;EACJ;CACF;;;;;;;CAQA,MAAM,mBACJ,aACA,gBACA,MACsC;EACtC,IAAI;EACJ,IAAI;GACF,MAAM,OAAO,MAAM,cACjB,aACA,yDACA,EAAE,IAAI,eAAe,CACvB;GACA,IAAI,CAAC,KAAK,OAAO,OAAO;GACxB,UAAU,KAAK,MAAM;EACvB,SAAS,KAAK;GACZ,IAAI,eAAe,SAAS,oBAAoB,KAAK,IAAI,OAAO,GAAG,OAAO;GAC1E,MAAM;EACR;EACA,MAAM,OAAO,MAAM,cACjB,aACA;;UAGA,EAAE,OAAO;GAAE;GAAS;EAAK,EAAE,CAC7B;EACA,IAAI,CAAC,KAAK,cAAc,WAAW,CAAC,KAAK,cAAc,SACrD,MAAM,IAAI,MAAM,oCAAoC;EAEtD,OAAO,KAAK,cAAc;CAC5B;CAIA,QAAQ,KAAyC;EAC/C,IAAI,CAAC,iCAAiC,GAAG,OAAO,CAAC;EACjD,MAAM,YAAY,4BAA4B,MAAM,GAAG;EACvD,IAAI,CAAC,WAAW,OAAO,CAAC;EACxB,MAAM,aAAa,kCAAkC;EACrD,OAAO,CACL,IAAI,qBAAqB;GACvB,eAAe,KAAK;GACpB;GACA,GAAI,aAAa,EAAE,WAAW,IAAI,CAAC;EACrC,CAAC,CACH;CACF;;;;;;CAOA,OAAO,KAAqC;EAC1C,OAAO,kBAAkB;GACvB,QAAQ;GACR,MAAM,IAAI;GACV,aAAa,IAAI;GACjB,SAAS,IAAI;GACb,QAAQ,IAAI,QAAQ;GACpB,qBAAqB,kBAAkB,GAAG;EAC5C,CAAC;CACH;;;;;CAMA,MAAM,WAAW,MAAqE;EACpF,OAAO,sBAAsB;GAAE,gBAAgB,KAAK;GAAgB,QAAQ;EAAK,CAAC;CACpF;;CAGA,cAAuC;EACrC,OAAO,EACL,oBAAoB,KACtB;CACF;AACF;AAEA,SAAS,qBAAqB,YAA2C;CACvE,IAAI,WAAW,SAAS,SACtB,MAAM,IAAI,MAAM,kDAAkD;CAEpE,OAAO,WAAW;AACpB;AAEA,SAAS,yBAAyB,OAAoD;CACpF,OAAO;EACL,IAAI,MAAM;EACV,YAAY,MAAM;EAClB,OAAO,MAAM;EACb,KAAK,MAAM;EACX,QAAQ,MAAM;EACd,OAAO,MAAM;EACb,WAAW,MAAM;EACjB,UAAU,MAAM;EAChB,UAAU,MAAM;EAChB,QAAQ,MAAM;EACd,QAAQ,MAAM;EACd,cAAc;EACd,WAAW,MAAM;EACjB,WAAW,MAAM;CACnB;AACF"}

package/dist/routes/projects.d.ts

@@ -1,4 +1,5 @@
 import type { ApiRoute } from '@mastra/core/server';
+import type { SessionRetirementCoordinator } from '../sandbox/session-retirement.js';
 import type { FactoryProjectsStorage } from '../storage/domains/projects/base.js';
 import type { SourceControlStorage } from '../storage/domains/source-control/base.js';
 import type { RouteDependencies } from './route.js';
@@ -10,6 +11,8 @@ export interface ProjectRoutesDeps extends RouteDependencies {
     sourceControl: SourceControlStorage;
     /** Integration ids allowed as source-control connection targets. */
     versionControlIntegrationIds?: string[];
+    /** Shared lifecycle for retiring sessions before their owning records are deleted. */
+    sessionRetirement?: SessionRetirementCoordinator;
 }
 export declare class ProjectRoutes extends Route<ProjectRoutesDeps> {
     #private;

package/dist/routes/projects.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"projects.d.ts","sourceRoot":"","sources":["../../src/routes/projects.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAIpD,OAAO,KAAK,EAEV,sBAAsB,EAEvB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,KAAK,EAEV,oBAAoB,EAGrB,MAAM,2CAA2C,CAAC;AACnD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AACpD,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AA+InC,MAAM,WAAW,iBAAkB,SAAQ,iBAAiB;IAC1D,wDAAwD;IACxD,QAAQ,EAAE,sBAAsB,CAAC;IACjC,2EAA2E;IAC3E,aAAa,EAAE,oBAAoB,CAAC;IACpC,oEAAoE;IACpE,4BAA4B,CAAC,EAAE,MAAM,EAAE,CAAC;CACzC;AAED,qBAAa,aAAc,SAAQ,KAAK,CAAC,iBAAiB,CAAC;;gBAG7C,IAAI,EAAE,iBAAiB;IA8DnC,MAAM,IAAI,QAAQ,EAAE;CAoOrB"}
+{"version":3,"file":"projects.d.ts","sourceRoot":"","sources":["../../src/routes/projects.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAIpD,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,kCAAkC,CAAC;AACrF,OAAO,KAAK,EAEV,sBAAsB,EAEvB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,KAAK,EAEV,oBAAoB,EAGrB,MAAM,2CAA2C,CAAC;AACnD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AACpD,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAkKnC,MAAM,WAAW,iBAAkB,SAAQ,iBAAiB;IAC1D,wDAAwD;IACxD,QAAQ,EAAE,sBAAsB,CAAC;IACjC,2EAA2E;IAC3E,aAAa,EAAE,oBAAoB,CAAC;IACpC,oEAAoE;IACpE,4BAA4B,CAAC,EAAE,MAAM,EAAE,CAAC;IACxC,sFAAsF;IACtF,iBAAiB,CAAC,EAAE,4BAA4B,CAAC;CAClD;AAED,qBAAa,aAAc,SAAQ,KAAK,CAAC,iBAAiB,CAAC;;gBAG7C,IAAI,EAAE,iBAAiB;IA8EnC,MAAM,IAAI,QAAQ,EAAE;CAuPrB"}

package/dist/routes/projects.js

@@ -4,7 +4,7 @@ import { registerApiRoute } from "@mastra/core/server";
 const UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
 const MAX_NAME_LENGTH = 200;
 const MAX_DESCRIPTION_LENGTH = 2e3;
-const MAX_SETUP_COMMAND_LENGTH = 2e3;
+const MAX_REPOSITORY_COMMAND_LENGTH = 2e3;
 const MAX_BRANCH_LENGTH = 255;
 const MAX_SANDBOX_PROVIDER_LENGTH = 100;
 const MAX_SANDBOX_WORKDIR_LENGTH = 1e3;
@@ -97,16 +97,21 @@ function parseRepositoryLinkInput(value) {
 	const sandboxProvider = parseOptionalString(input.sandboxProvider, { maxLength: MAX_SANDBOX_PROVIDER_LENGTH });
 	const sandboxWorkdir = parseOptionalString(input.sandboxWorkdir, { maxLength: MAX_SANDBOX_WORKDIR_LENGTH });
 	const setupCommand = parseOptionalString(input.setupCommand, {
-		maxLength: MAX_SETUP_COMMAND_LENGTH,
+		maxLength: MAX_REPOSITORY_COMMAND_LENGTH,
 		nullable: true
 	});
-	if (branch === false || typeof sandboxProvider !== "string" || typeof sandboxWorkdir !== "string" || setupCommand === false) return null;
+	const teardownCommand = parseOptionalString(input.teardownCommand, {
+		maxLength: MAX_REPOSITORY_COMMAND_LENGTH,
+		nullable: true
+	});
+	if (branch === false || typeof sandboxProvider !== "string" || typeof sandboxWorkdir !== "string" || setupCommand === false || teardownCommand === false) return null;
 	return {
 		repositoryId: input.repositoryId,
 		branch: branch ?? null,
 		sandboxProvider,
 		sandboxWorkdir,
-		setupCommand: setupCommand ?? null
+		setupCommand: setupCommand ?? null,
+		teardownCommand: teardownCommand ?? null
 	};
 }
 function parseRepositoryUpdateInput(value) {
@@ -120,14 +125,19 @@ function parseRepositoryUpdateInput(value) {
 	const sandboxProvider = parseOptionalString(input.sandboxProvider, { maxLength: MAX_SANDBOX_PROVIDER_LENGTH });
 	const sandboxWorkdir = parseOptionalString(input.sandboxWorkdir, { maxLength: MAX_SANDBOX_WORKDIR_LENGTH });
 	const setupCommand = parseOptionalString(input.setupCommand, {
-		maxLength: MAX_SETUP_COMMAND_LENGTH,
+		maxLength: MAX_REPOSITORY_COMMAND_LENGTH,
+		nullable: true
+	});
+	const teardownCommand = parseOptionalString(input.teardownCommand, {
+		maxLength: MAX_REPOSITORY_COMMAND_LENGTH,
 		nullable: true
 	});
-	if (branch === false || sandboxProvider === false || sandboxProvider === null || sandboxWorkdir === false || sandboxWorkdir === null || setupCommand === false) return null;
+	if (branch === false || sandboxProvider === false || sandboxProvider === null || sandboxWorkdir === false || sandboxWorkdir === null || setupCommand === false || teardownCommand === false) return null;
 	if (branch !== void 0) patch.branch = branch;
 	if (sandboxProvider !== void 0) patch.sandboxProvider = sandboxProvider;
 	if (sandboxWorkdir !== void 0) patch.sandboxWorkdir = sandboxWorkdir;
 	if (setupCommand !== void 0) patch.setupCommand = setupCommand;
+	if (teardownCommand !== void 0) patch.teardownCommand = teardownCommand;
 	return Object.keys(patch).length > 0 ? patch : null;
 }
 var ProjectRoutes = class extends Route {
@@ -196,6 +206,16 @@ var ProjectRoutes = class extends Route {
 			repository
 		};
 	}
+	async #retireProjectRepositorySessions(handle, orgId, projectRepositoryId) {
+		if ((await handle.sessions.listByProjectRepository({ projectRepositoryId })).length === 0) return true;
+		if (!this.deps.sessionRetirement) return false;
+		await this.deps.sessionRetirement.retireProjectRepositorySessions({
+			sourceControl: handle,
+			orgId,
+			projectRepositoryId
+		});
+		return true;
+	}
 	async #resolveTenant(context) {
 		await this.deps.auth.ensureUser(context);
 		const tenant = this.deps.auth.tenant(context);
@@ -283,10 +303,16 @@ var ProjectRoutes = class extends Route {
 					for (const handle of await this.#handles()) for (const connection of await handle.connections.list({
 						orgId: tenant.orgId,
 						factoryProjectId: id
-					})) await handle.connections.delete({
-						orgId: tenant.orgId,
-						id: connection.id
-					});
+					})) {
+						for (const projectRepository of await handle.projectRepositories.list({
+							orgId: tenant.orgId,
+							connectionId: connection.id
+						})) if (!await this.#retireProjectRepositorySessions(handle, tenant.orgId, projectRepository.id)) return context.json({ error: "session_retirement_unavailable" }, 409);
+						await handle.connections.delete({
+							orgId: tenant.orgId,
+							id: connection.id
+						});
+					}
 					await (await this.#projects()).delete({
 						orgId: tenant.orgId,
 						id
@@ -368,6 +394,10 @@ var ProjectRoutes = class extends Route {
 						id: connectionId
 					});
 					if (!found) return context.json({ error: "Source-control connection not found" }, 404);
+					for (const projectRepository of await found.handle.projectRepositories.list({
+						orgId: tenant.orgId,
+						connectionId
+					})) if (!await this.#retireProjectRepositorySessions(found.handle, tenant.orgId, projectRepository.id)) return context.json({ error: "session_retirement_unavailable" }, 409);
 					await found.handle.connections.delete({
 						orgId: tenant.orgId,
 						id: connectionId
@@ -449,6 +479,7 @@ var ProjectRoutes = class extends Route {
 						id: projectRepositoryId
 					});
 					if (!found) return context.json({ error: "Project repository not found" }, 404);
+					if (!await this.#retireProjectRepositorySessions(found.handle, tenant.orgId, projectRepositoryId)) return context.json({ error: "session_retirement_unavailable" }, 409);
 					await found.handle.projectRepositories.unlink({
 						orgId: tenant.orgId,
 						id: projectRepositoryId

package/dist/routes/projects.js.map

@@ -1 +1 @@
-{"version":3,"file":"projects.js","names":["#versionControlIntegrationIds","#projects","#sourceControl","#handles","#project","#findConnection","#findProjectRepository","#repositoryPayload","#resolveTenant"],"sources":["../../src/routes/projects.ts"],"sourcesContent":["import type { ApiRoute } from '@mastra/core/server';\nimport { registerApiRoute } from '@mastra/core/server';\nimport type { Context } from 'hono';\n\nimport type {\n  CreateFactoryProjectInput,\n  FactoryProjectsStorage,\n  UpdateFactoryProjectInput,\n} from '../storage/domains/projects/base.js';\nimport type {\n  ProjectRepository,\n  SourceControlStorage,\n  SourceControlStorageHandle,\n  UpdateProjectRepositoryInput,\n} from '../storage/domains/source-control/base.js';\nimport type { RouteDependencies } from './route.js';\nimport { Route } from './route.js';\n\nconst UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;\nconst MAX_NAME_LENGTH = 200;\nconst MAX_DESCRIPTION_LENGTH = 2_000;\nconst MAX_SETUP_COMMAND_LENGTH = 2_000;\nconst MAX_BRANCH_LENGTH = 255;\nconst MAX_SANDBOX_PROVIDER_LENGTH = 100;\nconst MAX_SANDBOX_WORKDIR_LENGTH = 1_000;\nconst CONTROL_CHAR_RE = /[\\0-\\x08\\x0b\\x0c\\x0e-\\x1f\\x7f]/;\n\nfunction loose(context: unknown): Context {\n  return context as Context;\n}\n\nasync function readJson(context: Context): Promise<unknown | undefined> {\n  try {\n    return await context.req.json();\n  } catch {\n    return undefined;\n  }\n}\n\nfunction parseCreateInput(value: unknown): CreateFactoryProjectInput | null {\n  if (!value || typeof value !== 'object') return null;\n  const input = value as Record<string, unknown>;\n  if (typeof input.name !== 'string') return null;\n  const name = input.name.trim();\n  if (!name || name.length > MAX_NAME_LENGTH) return null;\n  if (input.description !== undefined && input.description !== null && typeof input.description !== 'string')\n    return null;\n  const description = typeof input.description === 'string' ? input.description.trim() || null : null;\n  if (description && description.length > MAX_DESCRIPTION_LENGTH) return null;\n  return { name, description };\n}\n\nfunction parseUpdateInput(value: unknown): UpdateFactoryProjectInput | null {\n  if (!value || typeof value !== 'object') return null;\n  const input = value as Record<string, unknown>;\n  const patch: UpdateFactoryProjectInput = {};\n  if (input.name !== undefined) {\n    if (typeof input.name !== 'string') return null;\n    const name = input.name.trim();\n    if (!name || name.length > MAX_NAME_LENGTH) return null;\n    patch.name = name;\n  }\n  if (input.description !== undefined) {\n    if (input.description !== null && typeof input.description !== 'string') return null;\n    const description = typeof input.description === 'string' ? input.description.trim() || null : null;\n    if (description && description.length > MAX_DESCRIPTION_LENGTH) return null;\n    patch.description = description;\n  }\n  if (input.defaultModelId !== undefined) {\n    const defaultModelId = parseOptionalString(input.defaultModelId, { maxLength: MAX_NAME_LENGTH, nullable: true });\n    if (defaultModelId === false) return null;\n    patch.defaultModelId = defaultModelId ?? null;\n  }\n  if (input.slackWorkItemsEnabled !== undefined) {\n    if (typeof input.slackWorkItemsEnabled !== 'boolean') return null;\n    patch.slackWorkItemsEnabled = input.slackWorkItemsEnabled;\n  }\n  if (input.autoRunEnabled !== undefined) {\n    if (typeof input.autoRunEnabled !== 'boolean') return null;\n    patch.autoRunEnabled = input.autoRunEnabled;\n  }\n  return Object.keys(patch).length > 0 ? patch : null;\n}\n\nfunction parseConnectionInput(value: unknown): { integrationId: string; installationId: string } | null {\n  if (!value || typeof value !== 'object') return null;\n  const input = value as Record<string, unknown>;\n  if (typeof input.integrationId !== 'string' || !input.integrationId.trim()) return null;\n  if (typeof input.installationId !== 'string' || !UUID_RE.test(input.installationId)) return null;\n  return { integrationId: input.integrationId.trim(), installationId: input.installationId };\n}\n\nfunction parseOptionalString(\n  value: unknown,\n  { maxLength, nullable = false }: { maxLength: number; nullable?: boolean },\n): string | null | undefined | false {\n  if (value === undefined) return undefined;\n  if (value === null) return nullable ? null : false;\n  if (typeof value !== 'string') return false;\n  const normalized = value.trim();\n  if (!normalized) return nullable ? null : false;\n  if (normalized.length > maxLength || CONTROL_CHAR_RE.test(normalized)) return false;\n  return normalized;\n}\n\nfunction parseRepositoryLinkInput(value: unknown): {\n  repositoryId: string;\n  branch: string | null;\n  sandboxProvider: string;\n  sandboxWorkdir: string;\n  setupCommand: string | null;\n} | null {\n  if (!value || typeof value !== 'object') return null;\n  const input = value as Record<string, unknown>;\n  if (typeof input.repositoryId !== 'string' || !UUID_RE.test(input.repositoryId)) return null;\n  const branch = parseOptionalString(input.branch, { maxLength: MAX_BRANCH_LENGTH, nullable: true });\n  const sandboxProvider = parseOptionalString(input.sandboxProvider, { maxLength: MAX_SANDBOX_PROVIDER_LENGTH });\n  const sandboxWorkdir = parseOptionalString(input.sandboxWorkdir, { maxLength: MAX_SANDBOX_WORKDIR_LENGTH });\n  const setupCommand = parseOptionalString(input.setupCommand, { maxLength: MAX_SETUP_COMMAND_LENGTH, nullable: true });\n  if (\n    branch === false ||\n    typeof sandboxProvider !== 'string' ||\n    typeof sandboxWorkdir !== 'string' ||\n    setupCommand === false\n  )\n    return null;\n  return {\n    repositoryId: input.repositoryId,\n    branch: branch ?? null,\n    sandboxProvider,\n    sandboxWorkdir,\n    setupCommand: setupCommand ?? null,\n  };\n}\n\nfunction parseRepositoryUpdateInput(value: unknown): UpdateProjectRepositoryInput | null {\n  if (!value || typeof value !== 'object') return null;\n  const input = value as Record<string, unknown>;\n  const patch: UpdateProjectRepositoryInput = {};\n  const branch = parseOptionalString(input.branch, { maxLength: MAX_BRANCH_LENGTH, nullable: true });\n  const sandboxProvider = parseOptionalString(input.sandboxProvider, { maxLength: MAX_SANDBOX_PROVIDER_LENGTH });\n  const sandboxWorkdir = parseOptionalString(input.sandboxWorkdir, { maxLength: MAX_SANDBOX_WORKDIR_LENGTH });\n  const setupCommand = parseOptionalString(input.setupCommand, { maxLength: MAX_SETUP_COMMAND_LENGTH, nullable: true });\n  if (\n    branch === false ||\n    sandboxProvider === false ||\n    sandboxProvider === null ||\n    sandboxWorkdir === false ||\n    sandboxWorkdir === null ||\n    setupCommand === false\n  )\n    return null;\n  if (branch !== undefined) patch.branch = branch;\n  if (sandboxProvider !== undefined) patch.sandboxProvider = sandboxProvider;\n  if (sandboxWorkdir !== undefined) patch.sandboxWorkdir = sandboxWorkdir;\n  if (setupCommand !== undefined) patch.setupCommand = setupCommand;\n  return Object.keys(patch).length > 0 ? patch : null;\n}\n\nexport interface ProjectRoutesDeps extends RouteDependencies {\n  /** Factory projects domain backing the CRUD surface. */\n  projects: FactoryProjectsStorage;\n  /** Source-control domain the connection/repository routes fan out over. */\n  sourceControl: SourceControlStorage;\n  /** Integration ids allowed as source-control connection targets. */\n  versionControlIntegrationIds?: string[];\n}\n\nexport class ProjectRoutes extends Route<ProjectRoutesDeps> {\n  readonly #versionControlIntegrationIds: Set<string>;\n\n  constructor(deps: ProjectRoutesDeps) {\n    super(deps);\n    this.#versionControlIntegrationIds = new Set(deps.versionControlIntegrationIds ?? []);\n  }\n\n  async #projects(): Promise<FactoryProjectsStorage> {\n    await this.deps.projects.ensureReady();\n    return this.deps.projects;\n  }\n\n  async #sourceControl(): Promise<SourceControlStorage> {\n    await this.deps.sourceControl.ensureReady();\n    return this.deps.sourceControl;\n  }\n\n  async #handles(): Promise<SourceControlStorageHandle[]> {\n    const storage = await this.#sourceControl();\n    return [...this.#versionControlIntegrationIds].map(integrationId => storage.forIntegration(integrationId));\n  }\n\n  async #project(orgId: string, id: string) {\n    return (await this.#projects()).get({ orgId, id });\n  }\n\n  async #findConnection({ orgId, projectId, id }: { orgId: string; projectId: string; id: string }) {\n    for (const handle of await this.#handles()) {\n      const connection = await handle.connections.get({ orgId, id });\n      if (connection?.factoryProjectId === projectId) return { handle, connection };\n    }\n    return null;\n  }\n\n  async #findProjectRepository({ orgId, projectId, id }: { orgId: string; projectId: string; id: string }) {\n    for (const handle of await this.#handles()) {\n      const projectRepository = await handle.projectRepositories.get({ orgId, id });\n      if (!projectRepository) continue;\n      const connection = await handle.connections.get({ orgId, id: projectRepository.connectionId });\n      if (connection?.factoryProjectId === projectId) return { handle, connection, projectRepository };\n    }\n    return null;\n  }\n\n  async #repositoryPayload(handle: SourceControlStorageHandle, orgId: string, projectRepository: ProjectRepository) {\n    const repository = await handle.repositories.get({ orgId, id: projectRepository.repositoryId });\n    return { ...projectRepository, repository };\n  }\n\n  async #resolveTenant(context: Context): Promise<{ orgId: string; userId: string } | { response: Response }> {\n    await this.deps.auth.ensureUser(context);\n    const tenant = this.deps.auth.tenant(context);\n    if (!tenant) return { response: context.json({ error: 'unauthorized' }, 401) };\n    if (!tenant.orgId) {\n      return {\n        response: context.json(\n          { error: 'organization_required', message: 'Factory projects require an organization.' },\n          403,\n        ),\n      };\n    }\n    return { orgId: tenant.orgId, userId: tenant.userId };\n  }\n\n  routes(): ApiRoute[] {\n    return [\n      registerApiRoute('/web/factory/projects', {\n        method: 'GET',\n        requiresAuth: false,\n        handler: async routeContext => {\n          const context = loose(routeContext);\n          const tenant = await this.#resolveTenant(context);\n          if ('response' in tenant) return tenant.response;\n          return context.json({ projects: await (await this.#projects()).list({ orgId: tenant.orgId }) });\n        },\n      }),\n      registerApiRoute('/web/factory/projects', {\n        method: 'POST',\n        requiresAuth: false,\n        handler: async routeContext => {\n          const context = loose(routeContext);\n          const tenant = await this.#resolveTenant(context);\n          if ('response' in tenant) return tenant.response;\n          const input = parseCreateInput(await readJson(context));\n          if (!input) return context.json({ error: 'invalid_project' }, 400);\n          const project = await (await this.#projects()).create({ orgId: tenant.orgId, userId: tenant.userId, input });\n          return context.json({ project }, 201);\n        },\n      }),\n      registerApiRoute('/web/factory/projects/:id', {\n        method: 'GET',\n        requiresAuth: false,\n        handler: async routeContext => {\n          const context = loose(routeContext);\n          const tenant = await this.#resolveTenant(context);\n          if ('response' in tenant) return tenant.response;\n          const id = context.req.param('id');\n          if (!id || !UUID_RE.test(id)) return context.json({ error: 'Project not found' }, 404);\n          const project = await this.#project(tenant.orgId, id);\n          return project ? context.json({ project }) : context.json({ error: 'Project not found' }, 404);\n        },\n      }),\n      registerApiRoute('/web/factory/projects/:id', {\n        method: 'PATCH',\n        requiresAuth: false,\n        handler: async routeContext => {\n          const context = loose(routeContext);\n          const tenant = await this.#resolveTenant(context);\n          if ('response' in tenant) return tenant.response;\n          const id = context.req.param('id');\n          if (!id || !UUID_RE.test(id)) return context.json({ error: 'Project not found' }, 404);\n          const input = parseUpdateInput(await readJson(context));\n          if (!input) return context.json({ error: 'invalid_project' }, 400);\n          const project = await (await this.#projects()).update({ orgId: tenant.orgId, id, input });\n          return project ? context.json({ project }) : context.json({ error: 'Project not found' }, 404);\n        },\n      }),\n      registerApiRoute('/web/factory/projects/:id', {\n        method: 'DELETE',\n        requiresAuth: false,\n        handler: async routeContext => {\n          const context = loose(routeContext);\n          const tenant = await this.#resolveTenant(context);\n          if ('response' in tenant) return tenant.response;\n          const id = context.req.param('id');\n          if (!id || !UUID_RE.test(id)) return context.json({ error: 'Project not found' }, 404);\n          if (!(await this.#project(tenant.orgId, id))) return context.json({ error: 'Project not found' }, 404);\n          for (const handle of await this.#handles()) {\n            for (const connection of await handle.connections.list({ orgId: tenant.orgId, factoryProjectId: id })) {\n              await handle.connections.delete({ orgId: tenant.orgId, id: connection.id });\n            }\n          }\n          await (await this.#projects()).delete({ orgId: tenant.orgId, id });\n          return context.body(null, 204);\n        },\n      }),\n      registerApiRoute('/web/factory/projects/:id/source-control-connections', {\n        method: 'GET',\n        requiresAuth: false,\n        handler: async routeContext => {\n          const context = loose(routeContext);\n          const tenant = await this.#resolveTenant(context);\n          if ('response' in tenant) return tenant.response;\n          const projectId = context.req.param('id');\n          if (!projectId || !UUID_RE.test(projectId) || !(await this.#project(tenant.orgId, projectId)))\n            return context.json({ error: 'Project not found' }, 404);\n          const connections = [];\n          for (const handle of await this.#handles()) {\n            for (const connection of await handle.connections.list({\n              orgId: tenant.orgId,\n              factoryProjectId: projectId,\n            })) {\n              const installation = await handle.installations.get({\n                orgId: tenant.orgId,\n                id: connection.installationId,\n              });\n              // Skip orphaned connections whose installation was pruned (e.g.\n              // the user uninstalled the GitHub App). Otherwise\n              // `projectRepositories.list` throws `requireConnection` and the\n              // whole endpoint 500s, which hangs the web UI on the page\n              // loader for every project. New code cascade-deletes these on\n              // installation removal, but this defensive skip lets already-\n              // orphaned rows in existing databases self-heal on read.\n              if (!installation) continue;\n              const links = await handle.projectRepositories.list({ orgId: tenant.orgId, connectionId: connection.id });\n              connections.push({\n                ...connection,\n                installation,\n                repositories: await Promise.all(links.map(link => this.#repositoryPayload(handle, tenant.orgId, link))),\n              });\n            }\n          }\n          return context.json({ connections });\n        },\n      }),\n      registerApiRoute('/web/factory/projects/:id/source-control-connections', {\n        method: 'POST',\n        requiresAuth: false,\n        handler: async routeContext => {\n          const context = loose(routeContext);\n          const tenant = await this.#resolveTenant(context);\n          if ('response' in tenant) return tenant.response;\n          const projectId = context.req.param('id');\n          if (!projectId || !UUID_RE.test(projectId) || !(await this.#project(tenant.orgId, projectId)))\n            return context.json({ error: 'Project not found' }, 404);\n          const input = parseConnectionInput(await readJson(context));\n          if (!input) return context.json({ error: 'invalid_source_control_connection' }, 400);\n          if (!this.#versionControlIntegrationIds.has(input.integrationId))\n            return context.json({ error: 'Source-control integration not found' }, 404);\n          const handle = (await this.#sourceControl()).forIntegration(input.integrationId);\n          if (!(await handle.installations.get({ orgId: tenant.orgId, id: input.installationId })))\n            return context.json({ error: 'Source-control installation not found' }, 404);\n          const connection = await handle.connections.create({\n            orgId: tenant.orgId,\n            factoryProjectId: projectId,\n            installationId: input.installationId,\n            createdByUserId: tenant.userId,\n          });\n          return context.json({ connection }, 201);\n        },\n      }),\n      registerApiRoute('/web/factory/projects/:id/source-control-connections/:connectionId', {\n        method: 'DELETE',\n        requiresAuth: false,\n        handler: async routeContext => {\n          const context = loose(routeContext);\n          const tenant = await this.#resolveTenant(context);\n          if ('response' in tenant) return tenant.response;\n          const projectId = context.req.param('id');\n          const connectionId = context.req.param('connectionId');\n          if (!projectId || !UUID_RE.test(projectId) || !connectionId || !UUID_RE.test(connectionId))\n            return context.json({ error: 'Source-control connection not found' }, 404);\n          const found = await this.#findConnection({ orgId: tenant.orgId, projectId, id: connectionId });\n          if (!found) return context.json({ error: 'Source-control connection not found' }, 404);\n          await found.handle.connections.delete({ orgId: tenant.orgId, id: connectionId });\n          return context.body(null, 204);\n        },\n      }),\n      registerApiRoute('/web/factory/projects/:id/source-control-connections/:connectionId/repositories', {\n        method: 'POST',\n        requiresAuth: false,\n        handler: async routeContext => {\n          const context = loose(routeContext);\n          const tenant = await this.#resolveTenant(context);\n          if ('response' in tenant) return tenant.response;\n          const projectId = context.req.param('id');\n          const connectionId = context.req.param('connectionId');\n          if (!projectId || !UUID_RE.test(projectId) || !connectionId || !UUID_RE.test(connectionId))\n            return context.json({ error: 'Source-control connection not found' }, 404);\n          const found = await this.#findConnection({ orgId: tenant.orgId, projectId, id: connectionId });\n          if (!found) return context.json({ error: 'Source-control connection not found' }, 404);\n          const input = parseRepositoryLinkInput(await readJson(context));\n          if (!input) return context.json({ error: 'invalid_project_repository' }, 400);\n          const repository = await found.handle.repositories.get({ orgId: tenant.orgId, id: input.repositoryId });\n          if (!repository || repository.installationId !== found.connection.installationId)\n            return context.json({ error: 'Source-control repository not found' }, 404);\n          const projectRepository = await found.handle.projectRepositories.link({\n            orgId: tenant.orgId,\n            connectionId,\n            createdByUserId: tenant.userId,\n            ...input,\n          });\n          return context.json(\n            { projectRepository: await this.#repositoryPayload(found.handle, tenant.orgId, projectRepository) },\n            201,\n          );\n        },\n      }),\n      registerApiRoute('/web/factory/projects/:id/repositories/:projectRepositoryId', {\n        method: 'PATCH',\n        requiresAuth: false,\n        handler: async routeContext => {\n          const context = loose(routeContext);\n          const tenant = await this.#resolveTenant(context);\n          if ('response' in tenant) return tenant.response;\n          const projectId = context.req.param('id');\n          const projectRepositoryId = context.req.param('projectRepositoryId');\n          if (!projectId || !UUID_RE.test(projectId) || !projectRepositoryId || !UUID_RE.test(projectRepositoryId))\n            return context.json({ error: 'Project repository not found' }, 404);\n          const found = await this.#findProjectRepository({ orgId: tenant.orgId, projectId, id: projectRepositoryId });\n          if (!found) return context.json({ error: 'Project repository not found' }, 404);\n          const input = parseRepositoryUpdateInput(await readJson(context));\n          if (!input) return context.json({ error: 'invalid_project_repository' }, 400);\n          const projectRepository = await found.handle.projectRepositories.update({\n            orgId: tenant.orgId,\n            id: projectRepositoryId,\n            input,\n          });\n          return context.json({\n            projectRepository: await this.#repositoryPayload(found.handle, tenant.orgId, projectRepository!),\n          });\n        },\n      }),\n      registerApiRoute('/web/factory/projects/:id/repositories/:projectRepositoryId', {\n        method: 'DELETE',\n        requiresAuth: false,\n        handler: async routeContext => {\n          const context = loose(routeContext);\n          const tenant = await this.#resolveTenant(context);\n          if ('response' in tenant) return tenant.response;\n          const projectId = context.req.param('id');\n          const projectRepositoryId = context.req.param('projectRepositoryId');\n          if (!projectId || !UUID_RE.test(projectId) || !projectRepositoryId || !UUID_RE.test(projectRepositoryId))\n            return context.json({ error: 'Project repository not found' }, 404);\n          const found = await this.#findProjectRepository({ orgId: tenant.orgId, projectId, id: projectRepositoryId });\n          if (!found) return context.json({ error: 'Project repository not found' }, 404);\n          await found.handle.projectRepositories.unlink({ orgId: tenant.orgId, id: projectRepositoryId });\n          return context.body(null, 204);\n        },\n      }),\n    ];\n  }\n}\n"],"mappings":";;;AAkBA,MAAM,UAAU;AAChB,MAAM,kBAAkB;AACxB,MAAM,yBAAyB;AAC/B,MAAM,2BAA2B;AACjC,MAAM,oBAAoB;AAC1B,MAAM,8BAA8B;AACpC,MAAM,6BAA6B;AACnC,MAAM,kBAAkB;AAExB,SAAS,MAAM,SAA2B;CACxC,OAAO;AACT;AAEA,eAAe,SAAS,SAAgD;CACtE,IAAI;EACF,OAAO,MAAM,QAAQ,IAAI,KAAK;CAChC,QAAQ;EACN;CACF;AACF;AAEA,SAAS,iBAAiB,OAAkD;CAC1E,IAAI,CAAC,SAAS,OAAO,UAAU,UAAU,OAAO;CAChD,MAAM,QAAQ;CACd,IAAI,OAAO,MAAM,SAAS,UAAU,OAAO;CAC3C,MAAM,OAAO,MAAM,KAAK,KAAK;CAC7B,IAAI,CAAC,QAAQ,KAAK,SAAS,iBAAiB,OAAO;CACnD,IAAI,MAAM,gBAAgB,KAAA,KAAa,MAAM,gBAAgB,QAAQ,OAAO,MAAM,gBAAgB,UAChG,OAAO;CACT,MAAM,cAAc,OAAO,MAAM,gBAAgB,WAAW,MAAM,YAAY,KAAK,KAAK,OAAO;CAC/F,IAAI,eAAe,YAAY,SAAS,wBAAwB,OAAO;CACvE,OAAO;EAAE;EAAM;CAAY;AAC7B;AAEA,SAAS,iBAAiB,OAAkD;CAC1E,IAAI,CAAC,SAAS,OAAO,UAAU,UAAU,OAAO;CAChD,MAAM,QAAQ;CACd,MAAM,QAAmC,CAAC;CAC1C,IAAI,MAAM,SAAS,KAAA,GAAW;EAC5B,IAAI,OAAO,MAAM,SAAS,UAAU,OAAO;EAC3C,MAAM,OAAO,MAAM,KAAK,KAAK;EAC7B,IAAI,CAAC,QAAQ,KAAK,SAAS,iBAAiB,OAAO;EACnD,MAAM,OAAO;CACf;CACA,IAAI,MAAM,gBAAgB,KAAA,GAAW;EACnC,IAAI,MAAM,gBAAgB,QAAQ,OAAO,MAAM,gBAAgB,UAAU,OAAO;EAChF,MAAM,cAAc,OAAO,MAAM,gBAAgB,WAAW,MAAM,YAAY,KAAK,KAAK,OAAO;EAC/F,IAAI,eAAe,YAAY,SAAS,wBAAwB,OAAO;EACvE,MAAM,cAAc;CACtB;CACA,IAAI,MAAM,mBAAmB,KAAA,GAAW;EACtC,MAAM,iBAAiB,oBAAoB,MAAM,gBAAgB;GAAE,WAAW;GAAiB,UAAU;EAAK,CAAC;EAC/G,IAAI,mBAAmB,OAAO,OAAO;EACrC,MAAM,iBAAiB,kBAAkB;CAC3C;CACA,IAAI,MAAM,0BAA0B,KAAA,GAAW;EAC7C,IAAI,OAAO,MAAM,0BAA0B,WAAW,OAAO;EAC7D,MAAM,wBAAwB,MAAM;CACtC;CACA,IAAI,MAAM,mBAAmB,KAAA,GAAW;EACtC,IAAI,OAAO,MAAM,mBAAmB,WAAW,OAAO;EACtD,MAAM,iBAAiB,MAAM;CAC/B;CACA,OAAO,OAAO,KAAK,KAAK,CAAC,CAAC,SAAS,IAAI,QAAQ;AACjD;AAEA,SAAS,qBAAqB,OAA0E;CACtG,IAAI,CAAC,SAAS,OAAO,UAAU,UAAU,OAAO;CAChD,MAAM,QAAQ;CACd,IAAI,OAAO,MAAM,kBAAkB,YAAY,CAAC,MAAM,cAAc,KAAK,GAAG,OAAO;CACnF,IAAI,OAAO,MAAM,mBAAmB,YAAY,CAAC,QAAQ,KAAK,MAAM,cAAc,GAAG,OAAO;CAC5F,OAAO;EAAE,eAAe,MAAM,cAAc,KAAK;EAAG,gBAAgB,MAAM;CAAe;AAC3F;AAEA,SAAS,oBACP,OACA,EAAE,WAAW,WAAW,SACW;CACnC,IAAI,UAAU,KAAA,GAAW,OAAO,KAAA;CAChC,IAAI,UAAU,MAAM,OAAO,WAAW,OAAO;CAC7C,IAAI,OAAO,UAAU,UAAU,OAAO;CACtC,MAAM,aAAa,MAAM,KAAK;CAC9B,IAAI,CAAC,YAAY,OAAO,WAAW,OAAO;CAC1C,IAAI,WAAW,SAAS,aAAa,gBAAgB,KAAK,UAAU,GAAG,OAAO;CAC9E,OAAO;AACT;AAEA,SAAS,yBAAyB,OAMzB;CACP,IAAI,CAAC,SAAS,OAAO,UAAU,UAAU,OAAO;CAChD,MAAM,QAAQ;CACd,IAAI,OAAO,MAAM,iBAAiB,YAAY,CAAC,QAAQ,KAAK,MAAM,YAAY,GAAG,OAAO;CACxF,MAAM,SAAS,oBAAoB,MAAM,QAAQ;EAAE,WAAW;EAAmB,UAAU;CAAK,CAAC;CACjG,MAAM,kBAAkB,oBAAoB,MAAM,iBAAiB,EAAE,WAAW,4BAA4B,CAAC;CAC7G,MAAM,iBAAiB,oBAAoB,MAAM,gBAAgB,EAAE,WAAW,2BAA2B,CAAC;CAC1G,MAAM,eAAe,oBAAoB,MAAM,cAAc;EAAE,WAAW;EAA0B,UAAU;CAAK,CAAC;CACpH,IACE,WAAW,SACX,OAAO,oBAAoB,YAC3B,OAAO,mBAAmB,YAC1B,iBAAiB,OAEjB,OAAO;CACT,OAAO;EACL,cAAc,MAAM;EACpB,QAAQ,UAAU;EAClB;EACA;EACA,cAAc,gBAAgB;CAChC;AACF;AAEA,SAAS,2BAA2B,OAAqD;CACvF,IAAI,CAAC,SAAS,OAAO,UAAU,UAAU,OAAO;CAChD,MAAM,QAAQ;CACd,MAAM,QAAsC,CAAC;CAC7C,MAAM,SAAS,oBAAoB,MAAM,QAAQ;EAAE,WAAW;EAAmB,UAAU;CAAK,CAAC;CACjG,MAAM,kBAAkB,oBAAoB,MAAM,iBAAiB,EAAE,WAAW,4BAA4B,CAAC;CAC7G,MAAM,iBAAiB,oBAAoB,MAAM,gBAAgB,EAAE,WAAW,2BAA2B,CAAC;CAC1G,MAAM,eAAe,oBAAoB,MAAM,cAAc;EAAE,WAAW;EAA0B,UAAU;CAAK,CAAC;CACpH,IACE,WAAW,SACX,oBAAoB,SACpB,oBAAoB,QACpB,mBAAmB,SACnB,mBAAmB,QACnB,iBAAiB,OAEjB,OAAO;CACT,IAAI,WAAW,KAAA,GAAW,MAAM,SAAS;CACzC,IAAI,oBAAoB,KAAA,GAAW,MAAM,kBAAkB;CAC3D,IAAI,mBAAmB,KAAA,GAAW,MAAM,iBAAiB;CACzD,IAAI,iBAAiB,KAAA,GAAW,MAAM,eAAe;CACrD,OAAO,OAAO,KAAK,KAAK,CAAC,CAAC,SAAS,IAAI,QAAQ;AACjD;AAWA,IAAa,gBAAb,cAAmC,MAAyB;CAC1D;CAEA,YAAY,MAAyB;EACnC,MAAM,IAAI;EACV,KAAKA,gCAAgC,IAAI,IAAI,KAAK,gCAAgC,CAAC,CAAC;CACtF;CAEA,MAAMC,YAA6C;EACjD,MAAM,KAAK,KAAK,SAAS,YAAY;EACrC,OAAO,KAAK,KAAK;CACnB;CAEA,MAAMC,iBAAgD;EACpD,MAAM,KAAK,KAAK,cAAc,YAAY;EAC1C,OAAO,KAAK,KAAK;CACnB;CAEA,MAAMC,WAAkD;EACtD,MAAM,UAAU,MAAM,KAAKD,eAAe;EAC1C,OAAO,CAAC,GAAG,KAAKF,6BAA6B,CAAC,CAAC,KAAI,kBAAiB,QAAQ,eAAe,aAAa,CAAC;CAC3G;CAEA,MAAMI,SAAS,OAAe,IAAY;EACxC,QAAQ,MAAM,KAAKH,UAAU,EAAA,CAAG,IAAI;GAAE;GAAO;EAAG,CAAC;CACnD;CAEA,MAAMI,gBAAgB,EAAE,OAAO,WAAW,MAAwD;EAChG,KAAK,MAAM,UAAU,MAAM,KAAKF,SAAS,GAAG;GAC1C,MAAM,aAAa,MAAM,OAAO,YAAY,IAAI;IAAE;IAAO;GAAG,CAAC;GAC7D,IAAI,YAAY,qBAAqB,WAAW,OAAO;IAAE;IAAQ;GAAW;EAC9E;EACA,OAAO;CACT;CAEA,MAAMG,uBAAuB,EAAE,OAAO,WAAW,MAAwD;EACvG,KAAK,MAAM,UAAU,MAAM,KAAKH,SAAS,GAAG;GAC1C,MAAM,oBAAoB,MAAM,OAAO,oBAAoB,IAAI;IAAE;IAAO;GAAG,CAAC;GAC5E,IAAI,CAAC,mBAAmB;GACxB,MAAM,aAAa,MAAM,OAAO,YAAY,IAAI;IAAE;IAAO,IAAI,kBAAkB;GAAa,CAAC;GAC7F,IAAI,YAAY,qBAAqB,WAAW,OAAO;IAAE;IAAQ;IAAY;GAAkB;EACjG;EACA,OAAO;CACT;CAEA,MAAMI,mBAAmB,QAAoC,OAAe,mBAAsC;EAChH,MAAM,aAAa,MAAM,OAAO,aAAa,IAAI;GAAE;GAAO,IAAI,kBAAkB;EAAa,CAAC;EAC9F,OAAO;GAAE,GAAG;GAAmB;EAAW;CAC5C;CAEA,MAAMC,eAAe,SAAuF;EAC1G,MAAM,KAAK,KAAK,KAAK,WAAW,OAAO;EACvC,MAAM,SAAS,KAAK,KAAK,KAAK,OAAO,OAAO;EAC5C,IAAI,CAAC,QAAQ,OAAO,EAAE,UAAU,QAAQ,KAAK,EAAE,OAAO,eAAe,GAAG,GAAG,EAAE;EAC7E,IAAI,CAAC,OAAO,OACV,OAAO,EACL,UAAU,QAAQ,KAChB;GAAE,OAAO;GAAyB,SAAS;EAA4C,GACvF,GACF,EACF;EAEF,OAAO;GAAE,OAAO,OAAO;GAAO,QAAQ,OAAO;EAAO;CACtD;CAEA,SAAqB;EACnB,OAAO;GACL,iBAAiB,yBAAyB;IACxC,QAAQ;IACR,cAAc;IACd,SAAS,OAAM,iBAAgB;KAC7B,MAAM,UAAU,MAAM,YAAY;KAClC,MAAM,SAAS,MAAM,KAAKA,eAAe,OAAO;KAChD,IAAI,cAAc,QAAQ,OAAO,OAAO;KACxC,OAAO,QAAQ,KAAK,EAAE,UAAU,OAAO,MAAM,KAAKP,UAAU,EAAA,CAAG,KAAK,EAAE,OAAO,OAAO,MAAM,CAAC,EAAE,CAAC;IAChG;GACF,CAAC;GACD,iBAAiB,yBAAyB;IACxC,QAAQ;IACR,cAAc;IACd,SAAS,OAAM,iBAAgB;KAC7B,MAAM,UAAU,MAAM,YAAY;KAClC,MAAM,SAAS,MAAM,KAAKO,eAAe,OAAO;KAChD,IAAI,cAAc,QAAQ,OAAO,OAAO;KACxC,MAAM,QAAQ,iBAAiB,MAAM,SAAS,OAAO,CAAC;KACtD,IAAI,CAAC,OAAO,OAAO,QAAQ,KAAK,EAAE,OAAO,kBAAkB,GAAG,GAAG;KACjE,MAAM,UAAU,OAAO,MAAM,KAAKP,UAAU,EAAA,CAAG,OAAO;MAAE,OAAO,OAAO;MAAO,QAAQ,OAAO;MAAQ;KAAM,CAAC;KAC3G,OAAO,QAAQ,KAAK,EAAE,QAAQ,GAAG,GAAG;IACtC;GACF,CAAC;GACD,iBAAiB,6BAA6B;IAC5C,QAAQ;IACR,cAAc;IACd,SAAS,OAAM,iBAAgB;KAC7B,MAAM,UAAU,MAAM,YAAY;KAClC,MAAM,SAAS,MAAM,KAAKO,eAAe,OAAO;KAChD,IAAI,cAAc,QAAQ,OAAO,OAAO;KACxC,MAAM,KAAK,QAAQ,IAAI,MAAM,IAAI;KACjC,IAAI,CAAC,MAAM,CAAC,QAAQ,KAAK,EAAE,GAAG,OAAO,QAAQ,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;KACrF,MAAM,UAAU,MAAM,KAAKJ,SAAS,OAAO,OAAO,EAAE;KACpD,OAAO,UAAU,QAAQ,KAAK,EAAE,QAAQ,CAAC,IAAI,QAAQ,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;IAC/F;GACF,CAAC;GACD,iBAAiB,6BAA6B;IAC5C,QAAQ;IACR,cAAc;IACd,SAAS,OAAM,iBAAgB;KAC7B,MAAM,UAAU,MAAM,YAAY;KAClC,MAAM,SAAS,MAAM,KAAKI,eAAe,OAAO;KAChD,IAAI,cAAc,QAAQ,OAAO,OAAO;KACxC,MAAM,KAAK,QAAQ,IAAI,MAAM,IAAI;KACjC,IAAI,CAAC,MAAM,CAAC,QAAQ,KAAK,EAAE,GAAG,OAAO,QAAQ,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;KACrF,MAAM,QAAQ,iBAAiB,MAAM,SAAS,OAAO,CAAC;KACtD,IAAI,CAAC,OAAO,OAAO,QAAQ,KAAK,EAAE,OAAO,kBAAkB,GAAG,GAAG;KACjE,MAAM,UAAU,OAAO,MAAM,KAAKP,UAAU,EAAA,CAAG,OAAO;MAAE,OAAO,OAAO;MAAO;MAAI;KAAM,CAAC;KACxF,OAAO,UAAU,QAAQ,KAAK,EAAE,QAAQ,CAAC,IAAI,QAAQ,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;IAC/F;GACF,CAAC;GACD,iBAAiB,6BAA6B;IAC5C,QAAQ;IACR,cAAc;IACd,SAAS,OAAM,iBAAgB;KAC7B,MAAM,UAAU,MAAM,YAAY;KAClC,MAAM,SAAS,MAAM,KAAKO,eAAe,OAAO;KAChD,IAAI,cAAc,QAAQ,OAAO,OAAO;KACxC,MAAM,KAAK,QAAQ,IAAI,MAAM,IAAI;KACjC,IAAI,CAAC,MAAM,CAAC,QAAQ,KAAK,EAAE,GAAG,OAAO,QAAQ,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;KACrF,IAAI,CAAE,MAAM,KAAKJ,SAAS,OAAO,OAAO,EAAE,GAAI,OAAO,QAAQ,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;KACrG,KAAK,MAAM,UAAU,MAAM,KAAKD,SAAS,GACvC,KAAK,MAAM,cAAc,MAAM,OAAO,YAAY,KAAK;MAAE,OAAO,OAAO;MAAO,kBAAkB;KAAG,CAAC,GAClG,MAAM,OAAO,YAAY,OAAO;MAAE,OAAO,OAAO;MAAO,IAAI,WAAW;KAAG,CAAC;KAG9E,OAAO,MAAM,KAAKF,UAAU,EAAA,CAAG,OAAO;MAAE,OAAO,OAAO;MAAO;KAAG,CAAC;KACjE,OAAO,QAAQ,KAAK,MAAM,GAAG;IAC/B;GACF,CAAC;GACD,iBAAiB,wDAAwD;IACvE,QAAQ;IACR,cAAc;IACd,SAAS,OAAM,iBAAgB;KAC7B,MAAM,UAAU,MAAM,YAAY;KAClC,MAAM,SAAS,MAAM,KAAKO,eAAe,OAAO;KAChD,IAAI,cAAc,QAAQ,OAAO,OAAO;KACxC,MAAM,YAAY,QAAQ,IAAI,MAAM,IAAI;KACxC,IAAI,CAAC,aAAa,CAAC,QAAQ,KAAK,SAAS,KAAK,CAAE,MAAM,KAAKJ,SAAS,OAAO,OAAO,SAAS,GACzF,OAAO,QAAQ,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;KACzD,MAAM,cAAc,CAAC;KACrB,KAAK,MAAM,UAAU,MAAM,KAAKD,SAAS,GACvC,KAAK,MAAM,cAAc,MAAM,OAAO,YAAY,KAAK;MACrD,OAAO,OAAO;MACd,kBAAkB;KACpB,CAAC,GAAG;MACF,MAAM,eAAe,MAAM,OAAO,cAAc,IAAI;OAClD,OAAO,OAAO;OACd,IAAI,WAAW;MACjB,CAAC;MAQD,IAAI,CAAC,cAAc;MACnB,MAAM,QAAQ,MAAM,OAAO,oBAAoB,KAAK;OAAE,OAAO,OAAO;OAAO,cAAc,WAAW;MAAG,CAAC;MACxG,YAAY,KAAK;OACf,GAAG;OACH;OACA,cAAc,MAAM,QAAQ,IAAI,MAAM,KAAI,SAAQ,KAAKI,mBAAmB,QAAQ,OAAO,OAAO,IAAI,CAAC,CAAC;MACxG,CAAC;KACH;KAEF,OAAO,QAAQ,KAAK,EAAE,YAAY,CAAC;IACrC;GACF,CAAC;GACD,iBAAiB,wDAAwD;IACvE,QAAQ;IACR,cAAc;IACd,SAAS,OAAM,iBAAgB;KAC7B,MAAM,UAAU,MAAM,YAAY;KAClC,MAAM,SAAS,MAAM,KAAKC,eAAe,OAAO;KAChD,IAAI,cAAc,QAAQ,OAAO,OAAO;KACxC,MAAM,YAAY,QAAQ,IAAI,MAAM,IAAI;KACxC,IAAI,CAAC,aAAa,CAAC,QAAQ,KAAK,SAAS,KAAK,CAAE,MAAM,KAAKJ,SAAS,OAAO,OAAO,SAAS,GACzF,OAAO,QAAQ,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;KACzD,MAAM,QAAQ,qBAAqB,MAAM,SAAS,OAAO,CAAC;KAC1D,IAAI,CAAC,OAAO,OAAO,QAAQ,KAAK,EAAE,OAAO,oCAAoC,GAAG,GAAG;KACnF,IAAI,CAAC,KAAKJ,8BAA8B,IAAI,MAAM,aAAa,GAC7D,OAAO,QAAQ,KAAK,EAAE,OAAO,uCAAuC,GAAG,GAAG;KAC5E,MAAM,UAAU,MAAM,KAAKE,eAAe,EAAA,CAAG,eAAe,MAAM,aAAa;KAC/E,IAAI,CAAE,MAAM,OAAO,cAAc,IAAI;MAAE,OAAO,OAAO;MAAO,IAAI,MAAM;KAAe,CAAC,GACpF,OAAO,QAAQ,KAAK,EAAE,OAAO,wCAAwC,GAAG,GAAG;KAC7E,MAAM,aAAa,MAAM,OAAO,YAAY,OAAO;MACjD,OAAO,OAAO;MACd,kBAAkB;MAClB,gBAAgB,MAAM;MACtB,iBAAiB,OAAO;KAC1B,CAAC;KACD,OAAO,QAAQ,KAAK,EAAE,WAAW,GAAG,GAAG;IACzC;GACF,CAAC;GACD,iBAAiB,sEAAsE;IACrF,QAAQ;IACR,cAAc;IACd,SAAS,OAAM,iBAAgB;KAC7B,MAAM,UAAU,MAAM,YAAY;KAClC,MAAM,SAAS,MAAM,KAAKM,eAAe,OAAO;KAChD,IAAI,cAAc,QAAQ,OAAO,OAAO;KACxC,MAAM,YAAY,QAAQ,IAAI,MAAM,IAAI;KACxC,MAAM,eAAe,QAAQ,IAAI,MAAM,cAAc;KACrD,IAAI,CAAC,aAAa,CAAC,QAAQ,KAAK,SAAS,KAAK,CAAC,gBAAgB,CAAC,QAAQ,KAAK,YAAY,GACvF,OAAO,QAAQ,KAAK,EAAE,OAAO,sCAAsC,GAAG,GAAG;KAC3E,MAAM,QAAQ,MAAM,KAAKH,gBAAgB;MAAE,OAAO,OAAO;MAAO;MAAW,IAAI;KAAa,CAAC;KAC7F,IAAI,CAAC,OAAO,OAAO,QAAQ,KAAK,EAAE,OAAO,sCAAsC,GAAG,GAAG;KACrF,MAAM,MAAM,OAAO,YAAY,OAAO;MAAE,OAAO,OAAO;MAAO,IAAI;KAAa,CAAC;KAC/E,OAAO,QAAQ,KAAK,MAAM,GAAG;IAC/B;GACF,CAAC;GACD,iBAAiB,mFAAmF;IAClG,QAAQ;IACR,cAAc;IACd,SAAS,OAAM,iBAAgB;KAC7B,MAAM,UAAU,MAAM,YAAY;KAClC,MAAM,SAAS,MAAM,KAAKG,eAAe,OAAO;KAChD,IAAI,cAAc,QAAQ,OAAO,OAAO;KACxC,MAAM,YAAY,QAAQ,IAAI,MAAM,IAAI;KACxC,MAAM,eAAe,QAAQ,IAAI,MAAM,cAAc;KACrD,IAAI,CAAC,aAAa,CAAC,QAAQ,KAAK,SAAS,KAAK,CAAC,gBAAgB,CAAC,QAAQ,KAAK,YAAY,GACvF,OAAO,QAAQ,KAAK,EAAE,OAAO,sCAAsC,GAAG,GAAG;KAC3E,MAAM,QAAQ,MAAM,KAAKH,gBAAgB;MAAE,OAAO,OAAO;MAAO;MAAW,IAAI;KAAa,CAAC;KAC7F,IAAI,CAAC,OAAO,OAAO,QAAQ,KAAK,EAAE,OAAO,sCAAsC,GAAG,GAAG;KACrF,MAAM,QAAQ,yBAAyB,MAAM,SAAS,OAAO,CAAC;KAC9D,IAAI,CAAC,OAAO,OAAO,QAAQ,KAAK,EAAE,OAAO,6BAA6B,GAAG,GAAG;KAC5E,MAAM,aAAa,MAAM,MAAM,OAAO,aAAa,IAAI;MAAE,OAAO,OAAO;MAAO,IAAI,MAAM;KAAa,CAAC;KACtG,IAAI,CAAC,cAAc,WAAW,mBAAmB,MAAM,WAAW,gBAChE,OAAO,QAAQ,KAAK,EAAE,OAAO,sCAAsC,GAAG,GAAG;KAC3E,MAAM,oBAAoB,MAAM,MAAM,OAAO,oBAAoB,KAAK;MACpE,OAAO,OAAO;MACd;MACA,iBAAiB,OAAO;MACxB,GAAG;KACL,CAAC;KACD,OAAO,QAAQ,KACb,EAAE,mBAAmB,MAAM,KAAKE,mBAAmB,MAAM,QAAQ,OAAO,OAAO,iBAAiB,EAAE,GAClG,GACF;IACF;GACF,CAAC;GACD,iBAAiB,+DAA+D;IAC9E,QAAQ;IACR,cAAc;IACd,SAAS,OAAM,iBAAgB;KAC7B,MAAM,UAAU,MAAM,YAAY;KAClC,MAAM,SAAS,MAAM,KAAKC,eAAe,OAAO;KAChD,IAAI,cAAc,QAAQ,OAAO,OAAO;KACxC,MAAM,YAAY,QAAQ,IAAI,MAAM,IAAI;KACxC,MAAM,sBAAsB,QAAQ,IAAI,MAAM,qBAAqB;KACnE,IAAI,CAAC,aAAa,CAAC,QAAQ,KAAK,SAAS,KAAK,CAAC,uBAAuB,CAAC,QAAQ,KAAK,mBAAmB,GACrG,OAAO,QAAQ,KAAK,EAAE,OAAO,+BAA+B,GAAG,GAAG;KACpE,MAAM,QAAQ,MAAM,KAAKF,uBAAuB;MAAE,OAAO,OAAO;MAAO;MAAW,IAAI;KAAoB,CAAC;KAC3G,IAAI,CAAC,OAAO,OAAO,QAAQ,KAAK,EAAE,OAAO,+BAA+B,GAAG,GAAG;KAC9E,MAAM,QAAQ,2BAA2B,MAAM,SAAS,OAAO,CAAC;KAChE,IAAI,CAAC,OAAO,OAAO,QAAQ,KAAK,EAAE,OAAO,6BAA6B,GAAG,GAAG;KAC5E,MAAM,oBAAoB,MAAM,MAAM,OAAO,oBAAoB,OAAO;MACtE,OAAO,OAAO;MACd,IAAI;MACJ;KACF,CAAC;KACD,OAAO,QAAQ,KAAK,EAClB,mBAAmB,MAAM,KAAKC,mBAAmB,MAAM,QAAQ,OAAO,OAAO,iBAAkB,EACjG,CAAC;IACH;GACF,CAAC;GACD,iBAAiB,+DAA+D;IAC9E,QAAQ;IACR,cAAc;IACd,SAAS,OAAM,iBAAgB;KAC7B,MAAM,UAAU,MAAM,YAAY;KAClC,MAAM,SAAS,MAAM,KAAKC,eAAe,OAAO;KAChD,IAAI,cAAc,QAAQ,OAAO,OAAO;KACxC,MAAM,YAAY,QAAQ,IAAI,MAAM,IAAI;KACxC,MAAM,sBAAsB,QAAQ,IAAI,MAAM,qBAAqB;KACnE,IAAI,CAAC,aAAa,CAAC,QAAQ,KAAK,SAAS,KAAK,CAAC,uBAAuB,CAAC,QAAQ,KAAK,mBAAmB,GACrG,OAAO,QAAQ,KAAK,EAAE,OAAO,+BAA+B,GAAG,GAAG;KACpE,MAAM,QAAQ,MAAM,KAAKF,uBAAuB;MAAE,OAAO,OAAO;MAAO;MAAW,IAAI;KAAoB,CAAC;KAC3G,IAAI,CAAC,OAAO,OAAO,QAAQ,KAAK,EAAE,OAAO,+BAA+B,GAAG,GAAG;KAC9E,MAAM,MAAM,OAAO,oBAAoB,OAAO;MAAE,OAAO,OAAO;MAAO,IAAI;KAAoB,CAAC;KAC9F,OAAO,QAAQ,KAAK,MAAM,GAAG;IAC/B;GACF,CAAC;EACH;CACF;AACF"}
+{"version":3,"file":"projects.js","names":["#versionControlIntegrationIds","#projects","#sourceControl","#handles","#project","#findConnection","#findProjectRepository","#repositoryPayload","#retireProjectRepositorySessions","#resolveTenant"],"sources":["../../src/routes/projects.ts"],"sourcesContent":["import type { ApiRoute } from '@mastra/core/server';\nimport { registerApiRoute } from '@mastra/core/server';\nimport type { Context } from 'hono';\n\nimport type { SessionRetirementCoordinator } from '../sandbox/session-retirement.js';\nimport type {\n  CreateFactoryProjectInput,\n  FactoryProjectsStorage,\n  UpdateFactoryProjectInput,\n} from '../storage/domains/projects/base.js';\nimport type {\n  ProjectRepository,\n  SourceControlStorage,\n  SourceControlStorageHandle,\n  UpdateProjectRepositoryInput,\n} from '../storage/domains/source-control/base.js';\nimport type { RouteDependencies } from './route.js';\nimport { Route } from './route.js';\n\nconst UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;\nconst MAX_NAME_LENGTH = 200;\nconst MAX_DESCRIPTION_LENGTH = 2_000;\nconst MAX_REPOSITORY_COMMAND_LENGTH = 2_000;\nconst MAX_BRANCH_LENGTH = 255;\nconst MAX_SANDBOX_PROVIDER_LENGTH = 100;\nconst MAX_SANDBOX_WORKDIR_LENGTH = 1_000;\nconst CONTROL_CHAR_RE = /[\\0-\\x08\\x0b\\x0c\\x0e-\\x1f\\x7f]/;\n\nfunction loose(context: unknown): Context {\n  return context as Context;\n}\n\nasync function readJson(context: Context): Promise<unknown | undefined> {\n  try {\n    return await context.req.json();\n  } catch {\n    return undefined;\n  }\n}\n\nfunction parseCreateInput(value: unknown): CreateFactoryProjectInput | null {\n  if (!value || typeof value !== 'object') return null;\n  const input = value as Record<string, unknown>;\n  if (typeof input.name !== 'string') return null;\n  const name = input.name.trim();\n  if (!name || name.length > MAX_NAME_LENGTH) return null;\n  if (input.description !== undefined && input.description !== null && typeof input.description !== 'string')\n    return null;\n  const description = typeof input.description === 'string' ? input.description.trim() || null : null;\n  if (description && description.length > MAX_DESCRIPTION_LENGTH) return null;\n  return { name, description };\n}\n\nfunction parseUpdateInput(value: unknown): UpdateFactoryProjectInput | null {\n  if (!value || typeof value !== 'object') return null;\n  const input = value as Record<string, unknown>;\n  const patch: UpdateFactoryProjectInput = {};\n  if (input.name !== undefined) {\n    if (typeof input.name !== 'string') return null;\n    const name = input.name.trim();\n    if (!name || name.length > MAX_NAME_LENGTH) return null;\n    patch.name = name;\n  }\n  if (input.description !== undefined) {\n    if (input.description !== null && typeof input.description !== 'string') return null;\n    const description = typeof input.description === 'string' ? input.description.trim() || null : null;\n    if (description && description.length > MAX_DESCRIPTION_LENGTH) return null;\n    patch.description = description;\n  }\n  if (input.defaultModelId !== undefined) {\n    const defaultModelId = parseOptionalString(input.defaultModelId, { maxLength: MAX_NAME_LENGTH, nullable: true });\n    if (defaultModelId === false) return null;\n    patch.defaultModelId = defaultModelId ?? null;\n  }\n  if (input.slackWorkItemsEnabled !== undefined) {\n    if (typeof input.slackWorkItemsEnabled !== 'boolean') return null;\n    patch.slackWorkItemsEnabled = input.slackWorkItemsEnabled;\n  }\n  if (input.autoRunEnabled !== undefined) {\n    if (typeof input.autoRunEnabled !== 'boolean') return null;\n    patch.autoRunEnabled = input.autoRunEnabled;\n  }\n  return Object.keys(patch).length > 0 ? patch : null;\n}\n\nfunction parseConnectionInput(value: unknown): { integrationId: string; installationId: string } | null {\n  if (!value || typeof value !== 'object') return null;\n  const input = value as Record<string, unknown>;\n  if (typeof input.integrationId !== 'string' || !input.integrationId.trim()) return null;\n  if (typeof input.installationId !== 'string' || !UUID_RE.test(input.installationId)) return null;\n  return { integrationId: input.integrationId.trim(), installationId: input.installationId };\n}\n\nfunction parseOptionalString(\n  value: unknown,\n  { maxLength, nullable = false }: { maxLength: number; nullable?: boolean },\n): string | null | undefined | false {\n  if (value === undefined) return undefined;\n  if (value === null) return nullable ? null : false;\n  if (typeof value !== 'string') return false;\n  const normalized = value.trim();\n  if (!normalized) return nullable ? null : false;\n  if (normalized.length > maxLength || CONTROL_CHAR_RE.test(normalized)) return false;\n  return normalized;\n}\n\nfunction parseRepositoryLinkInput(value: unknown): {\n  repositoryId: string;\n  branch: string | null;\n  sandboxProvider: string;\n  sandboxWorkdir: string;\n  setupCommand: string | null;\n  teardownCommand: string | null;\n} | null {\n  if (!value || typeof value !== 'object') return null;\n  const input = value as Record<string, unknown>;\n  if (typeof input.repositoryId !== 'string' || !UUID_RE.test(input.repositoryId)) return null;\n  const branch = parseOptionalString(input.branch, { maxLength: MAX_BRANCH_LENGTH, nullable: true });\n  const sandboxProvider = parseOptionalString(input.sandboxProvider, { maxLength: MAX_SANDBOX_PROVIDER_LENGTH });\n  const sandboxWorkdir = parseOptionalString(input.sandboxWorkdir, { maxLength: MAX_SANDBOX_WORKDIR_LENGTH });\n  const setupCommand = parseOptionalString(input.setupCommand, {\n    maxLength: MAX_REPOSITORY_COMMAND_LENGTH,\n    nullable: true,\n  });\n  const teardownCommand = parseOptionalString(input.teardownCommand, {\n    maxLength: MAX_REPOSITORY_COMMAND_LENGTH,\n    nullable: true,\n  });\n  if (\n    branch === false ||\n    typeof sandboxProvider !== 'string' ||\n    typeof sandboxWorkdir !== 'string' ||\n    setupCommand === false ||\n    teardownCommand === false\n  )\n    return null;\n  return {\n    repositoryId: input.repositoryId,\n    branch: branch ?? null,\n    sandboxProvider,\n    sandboxWorkdir,\n    setupCommand: setupCommand ?? null,\n    teardownCommand: teardownCommand ?? null,\n  };\n}\n\nfunction parseRepositoryUpdateInput(value: unknown): UpdateProjectRepositoryInput | null {\n  if (!value || typeof value !== 'object') return null;\n  const input = value as Record<string, unknown>;\n  const patch: UpdateProjectRepositoryInput = {};\n  const branch = parseOptionalString(input.branch, { maxLength: MAX_BRANCH_LENGTH, nullable: true });\n  const sandboxProvider = parseOptionalString(input.sandboxProvider, { maxLength: MAX_SANDBOX_PROVIDER_LENGTH });\n  const sandboxWorkdir = parseOptionalString(input.sandboxWorkdir, { maxLength: MAX_SANDBOX_WORKDIR_LENGTH });\n  const setupCommand = parseOptionalString(input.setupCommand, {\n    maxLength: MAX_REPOSITORY_COMMAND_LENGTH,\n    nullable: true,\n  });\n  const teardownCommand = parseOptionalString(input.teardownCommand, {\n    maxLength: MAX_REPOSITORY_COMMAND_LENGTH,\n    nullable: true,\n  });\n  if (\n    branch === false ||\n    sandboxProvider === false ||\n    sandboxProvider === null ||\n    sandboxWorkdir === false ||\n    sandboxWorkdir === null ||\n    setupCommand === false ||\n    teardownCommand === false\n  )\n    return null;\n  if (branch !== undefined) patch.branch = branch;\n  if (sandboxProvider !== undefined) patch.sandboxProvider = sandboxProvider;\n  if (sandboxWorkdir !== undefined) patch.sandboxWorkdir = sandboxWorkdir;\n  if (setupCommand !== undefined) patch.setupCommand = setupCommand;\n  if (teardownCommand !== undefined) patch.teardownCommand = teardownCommand;\n  return Object.keys(patch).length > 0 ? patch : null;\n}\n\nexport interface ProjectRoutesDeps extends RouteDependencies {\n  /** Factory projects domain backing the CRUD surface. */\n  projects: FactoryProjectsStorage;\n  /** Source-control domain the connection/repository routes fan out over. */\n  sourceControl: SourceControlStorage;\n  /** Integration ids allowed as source-control connection targets. */\n  versionControlIntegrationIds?: string[];\n  /** Shared lifecycle for retiring sessions before their owning records are deleted. */\n  sessionRetirement?: SessionRetirementCoordinator;\n}\n\nexport class ProjectRoutes extends Route<ProjectRoutesDeps> {\n  readonly #versionControlIntegrationIds: Set<string>;\n\n  constructor(deps: ProjectRoutesDeps) {\n    super(deps);\n    this.#versionControlIntegrationIds = new Set(deps.versionControlIntegrationIds ?? []);\n  }\n\n  async #projects(): Promise<FactoryProjectsStorage> {\n    await this.deps.projects.ensureReady();\n    return this.deps.projects;\n  }\n\n  async #sourceControl(): Promise<SourceControlStorage> {\n    await this.deps.sourceControl.ensureReady();\n    return this.deps.sourceControl;\n  }\n\n  async #handles(): Promise<SourceControlStorageHandle[]> {\n    const storage = await this.#sourceControl();\n    return [...this.#versionControlIntegrationIds].map(integrationId => storage.forIntegration(integrationId));\n  }\n\n  async #project(orgId: string, id: string) {\n    return (await this.#projects()).get({ orgId, id });\n  }\n\n  async #findConnection({ orgId, projectId, id }: { orgId: string; projectId: string; id: string }) {\n    for (const handle of await this.#handles()) {\n      const connection = await handle.connections.get({ orgId, id });\n      if (connection?.factoryProjectId === projectId) return { handle, connection };\n    }\n    return null;\n  }\n\n  async #findProjectRepository({ orgId, projectId, id }: { orgId: string; projectId: string; id: string }) {\n    for (const handle of await this.#handles()) {\n      const projectRepository = await handle.projectRepositories.get({ orgId, id });\n      if (!projectRepository) continue;\n      const connection = await handle.connections.get({ orgId, id: projectRepository.connectionId });\n      if (connection?.factoryProjectId === projectId) return { handle, connection, projectRepository };\n    }\n    return null;\n  }\n\n  async #repositoryPayload(handle: SourceControlStorageHandle, orgId: string, projectRepository: ProjectRepository) {\n    const repository = await handle.repositories.get({ orgId, id: projectRepository.repositoryId });\n    return { ...projectRepository, repository };\n  }\n\n  async #retireProjectRepositorySessions(\n    handle: SourceControlStorageHandle,\n    orgId: string,\n    projectRepositoryId: string,\n  ): Promise<boolean> {\n    const sessions = await handle.sessions.listByProjectRepository({ projectRepositoryId });\n    if (sessions.length === 0) return true;\n    if (!this.deps.sessionRetirement) return false;\n    await this.deps.sessionRetirement.retireProjectRepositorySessions({\n      sourceControl: handle,\n      orgId,\n      projectRepositoryId,\n    });\n    return true;\n  }\n\n  async #resolveTenant(context: Context): Promise<{ orgId: string; userId: string } | { response: Response }> {\n    await this.deps.auth.ensureUser(context);\n    const tenant = this.deps.auth.tenant(context);\n    if (!tenant) return { response: context.json({ error: 'unauthorized' }, 401) };\n    if (!tenant.orgId) {\n      return {\n        response: context.json(\n          { error: 'organization_required', message: 'Factory projects require an organization.' },\n          403,\n        ),\n      };\n    }\n    return { orgId: tenant.orgId, userId: tenant.userId };\n  }\n\n  routes(): ApiRoute[] {\n    return [\n      registerApiRoute('/web/factory/projects', {\n        method: 'GET',\n        requiresAuth: false,\n        handler: async routeContext => {\n          const context = loose(routeContext);\n          const tenant = await this.#resolveTenant(context);\n          if ('response' in tenant) return tenant.response;\n          return context.json({ projects: await (await this.#projects()).list({ orgId: tenant.orgId }) });\n        },\n      }),\n      registerApiRoute('/web/factory/projects', {\n        method: 'POST',\n        requiresAuth: false,\n        handler: async routeContext => {\n          const context = loose(routeContext);\n          const tenant = await this.#resolveTenant(context);\n          if ('response' in tenant) return tenant.response;\n          const input = parseCreateInput(await readJson(context));\n          if (!input) return context.json({ error: 'invalid_project' }, 400);\n          const project = await (await this.#projects()).create({ orgId: tenant.orgId, userId: tenant.userId, input });\n          return context.json({ project }, 201);\n        },\n      }),\n      registerApiRoute('/web/factory/projects/:id', {\n        method: 'GET',\n        requiresAuth: false,\n        handler: async routeContext => {\n          const context = loose(routeContext);\n          const tenant = await this.#resolveTenant(context);\n          if ('response' in tenant) return tenant.response;\n          const id = context.req.param('id');\n          if (!id || !UUID_RE.test(id)) return context.json({ error: 'Project not found' }, 404);\n          const project = await this.#project(tenant.orgId, id);\n          return project ? context.json({ project }) : context.json({ error: 'Project not found' }, 404);\n        },\n      }),\n      registerApiRoute('/web/factory/projects/:id', {\n        method: 'PATCH',\n        requiresAuth: false,\n        handler: async routeContext => {\n          const context = loose(routeContext);\n          const tenant = await this.#resolveTenant(context);\n          if ('response' in tenant) return tenant.response;\n          const id = context.req.param('id');\n          if (!id || !UUID_RE.test(id)) return context.json({ error: 'Project not found' }, 404);\n          const input = parseUpdateInput(await readJson(context));\n          if (!input) return context.json({ error: 'invalid_project' }, 400);\n          const project = await (await this.#projects()).update({ orgId: tenant.orgId, id, input });\n          return project ? context.json({ project }) : context.json({ error: 'Project not found' }, 404);\n        },\n      }),\n      registerApiRoute('/web/factory/projects/:id', {\n        method: 'DELETE',\n        requiresAuth: false,\n        handler: async routeContext => {\n          const context = loose(routeContext);\n          const tenant = await this.#resolveTenant(context);\n          if ('response' in tenant) return tenant.response;\n          const id = context.req.param('id');\n          if (!id || !UUID_RE.test(id)) return context.json({ error: 'Project not found' }, 404);\n          if (!(await this.#project(tenant.orgId, id))) return context.json({ error: 'Project not found' }, 404);\n          for (const handle of await this.#handles()) {\n            for (const connection of await handle.connections.list({ orgId: tenant.orgId, factoryProjectId: id })) {\n              for (const projectRepository of await handle.projectRepositories.list({\n                orgId: tenant.orgId,\n                connectionId: connection.id,\n              })) {\n                if (!(await this.#retireProjectRepositorySessions(handle, tenant.orgId, projectRepository.id))) {\n                  return context.json({ error: 'session_retirement_unavailable' }, 409);\n                }\n              }\n              await handle.connections.delete({ orgId: tenant.orgId, id: connection.id });\n            }\n          }\n          await (await this.#projects()).delete({ orgId: tenant.orgId, id });\n          return context.body(null, 204);\n        },\n      }),\n      registerApiRoute('/web/factory/projects/:id/source-control-connections', {\n        method: 'GET',\n        requiresAuth: false,\n        handler: async routeContext => {\n          const context = loose(routeContext);\n          const tenant = await this.#resolveTenant(context);\n          if ('response' in tenant) return tenant.response;\n          const projectId = context.req.param('id');\n          if (!projectId || !UUID_RE.test(projectId) || !(await this.#project(tenant.orgId, projectId)))\n            return context.json({ error: 'Project not found' }, 404);\n          const connections = [];\n          for (const handle of await this.#handles()) {\n            for (const connection of await handle.connections.list({\n              orgId: tenant.orgId,\n              factoryProjectId: projectId,\n            })) {\n              const installation = await handle.installations.get({\n                orgId: tenant.orgId,\n                id: connection.installationId,\n              });\n              // Skip orphaned connections whose installation was pruned (e.g.\n              // the user uninstalled the GitHub App). Otherwise\n              // `projectRepositories.list` throws `requireConnection` and the\n              // whole endpoint 500s, which hangs the web UI on the page\n              // loader for every project. New code cascade-deletes these on\n              // installation removal, but this defensive skip lets already-\n              // orphaned rows in existing databases self-heal on read.\n              if (!installation) continue;\n              const links = await handle.projectRepositories.list({ orgId: tenant.orgId, connectionId: connection.id });\n              connections.push({\n                ...connection,\n                installation,\n                repositories: await Promise.all(links.map(link => this.#repositoryPayload(handle, tenant.orgId, link))),\n              });\n            }\n          }\n          return context.json({ connections });\n        },\n      }),\n      registerApiRoute('/web/factory/projects/:id/source-control-connections', {\n        method: 'POST',\n        requiresAuth: false,\n        handler: async routeContext => {\n          const context = loose(routeContext);\n          const tenant = await this.#resolveTenant(context);\n          if ('response' in tenant) return tenant.response;\n          const projectId = context.req.param('id');\n          if (!projectId || !UUID_RE.test(projectId) || !(await this.#project(tenant.orgId, projectId)))\n            return context.json({ error: 'Project not found' }, 404);\n          const input = parseConnectionInput(await readJson(context));\n          if (!input) return context.json({ error: 'invalid_source_control_connection' }, 400);\n          if (!this.#versionControlIntegrationIds.has(input.integrationId))\n            return context.json({ error: 'Source-control integration not found' }, 404);\n          const handle = (await this.#sourceControl()).forIntegration(input.integrationId);\n          if (!(await handle.installations.get({ orgId: tenant.orgId, id: input.installationId })))\n            return context.json({ error: 'Source-control installation not found' }, 404);\n          const connection = await handle.connections.create({\n            orgId: tenant.orgId,\n            factoryProjectId: projectId,\n            installationId: input.installationId,\n            createdByUserId: tenant.userId,\n          });\n          return context.json({ connection }, 201);\n        },\n      }),\n      registerApiRoute('/web/factory/projects/:id/source-control-connections/:connectionId', {\n        method: 'DELETE',\n        requiresAuth: false,\n        handler: async routeContext => {\n          const context = loose(routeContext);\n          const tenant = await this.#resolveTenant(context);\n          if ('response' in tenant) return tenant.response;\n          const projectId = context.req.param('id');\n          const connectionId = context.req.param('connectionId');\n          if (!projectId || !UUID_RE.test(projectId) || !connectionId || !UUID_RE.test(connectionId))\n            return context.json({ error: 'Source-control connection not found' }, 404);\n          const found = await this.#findConnection({ orgId: tenant.orgId, projectId, id: connectionId });\n          if (!found) return context.json({ error: 'Source-control connection not found' }, 404);\n          for (const projectRepository of await found.handle.projectRepositories.list({\n            orgId: tenant.orgId,\n            connectionId,\n          })) {\n            if (!(await this.#retireProjectRepositorySessions(found.handle, tenant.orgId, projectRepository.id))) {\n              return context.json({ error: 'session_retirement_unavailable' }, 409);\n            }\n          }\n          await found.handle.connections.delete({ orgId: tenant.orgId, id: connectionId });\n          return context.body(null, 204);\n        },\n      }),\n      registerApiRoute('/web/factory/projects/:id/source-control-connections/:connectionId/repositories', {\n        method: 'POST',\n        requiresAuth: false,\n        handler: async routeContext => {\n          const context = loose(routeContext);\n          const tenant = await this.#resolveTenant(context);\n          if ('response' in tenant) return tenant.response;\n          const projectId = context.req.param('id');\n          const connectionId = context.req.param('connectionId');\n          if (!projectId || !UUID_RE.test(projectId) || !connectionId || !UUID_RE.test(connectionId))\n            return context.json({ error: 'Source-control connection not found' }, 404);\n          const found = await this.#findConnection({ orgId: tenant.orgId, projectId, id: connectionId });\n          if (!found) return context.json({ error: 'Source-control connection not found' }, 404);\n          const input = parseRepositoryLinkInput(await readJson(context));\n          if (!input) return context.json({ error: 'invalid_project_repository' }, 400);\n          const repository = await found.handle.repositories.get({ orgId: tenant.orgId, id: input.repositoryId });\n          if (!repository || repository.installationId !== found.connection.installationId)\n            return context.json({ error: 'Source-control repository not found' }, 404);\n          const projectRepository = await found.handle.projectRepositories.link({\n            orgId: tenant.orgId,\n            connectionId,\n            createdByUserId: tenant.userId,\n            ...input,\n          });\n          return context.json(\n            { projectRepository: await this.#repositoryPayload(found.handle, tenant.orgId, projectRepository) },\n            201,\n          );\n        },\n      }),\n      registerApiRoute('/web/factory/projects/:id/repositories/:projectRepositoryId', {\n        method: 'PATCH',\n        requiresAuth: false,\n        handler: async routeContext => {\n          const context = loose(routeContext);\n          const tenant = await this.#resolveTenant(context);\n          if ('response' in tenant) return tenant.response;\n          const projectId = context.req.param('id');\n          const projectRepositoryId = context.req.param('projectRepositoryId');\n          if (!projectId || !UUID_RE.test(projectId) || !projectRepositoryId || !UUID_RE.test(projectRepositoryId))\n            return context.json({ error: 'Project repository not found' }, 404);\n          const found = await this.#findProjectRepository({ orgId: tenant.orgId, projectId, id: projectRepositoryId });\n          if (!found) return context.json({ error: 'Project repository not found' }, 404);\n          const input = parseRepositoryUpdateInput(await readJson(context));\n          if (!input) return context.json({ error: 'invalid_project_repository' }, 400);\n          const projectRepository = await found.handle.projectRepositories.update({\n            orgId: tenant.orgId,\n            id: projectRepositoryId,\n            input,\n          });\n          return context.json({\n            projectRepository: await this.#repositoryPayload(found.handle, tenant.orgId, projectRepository!),\n          });\n        },\n      }),\n      registerApiRoute('/web/factory/projects/:id/repositories/:projectRepositoryId', {\n        method: 'DELETE',\n        requiresAuth: false,\n        handler: async routeContext => {\n          const context = loose(routeContext);\n          const tenant = await this.#resolveTenant(context);\n          if ('response' in tenant) return tenant.response;\n          const projectId = context.req.param('id');\n          const projectRepositoryId = context.req.param('projectRepositoryId');\n          if (!projectId || !UUID_RE.test(projectId) || !projectRepositoryId || !UUID_RE.test(projectRepositoryId))\n            return context.json({ error: 'Project repository not found' }, 404);\n          const found = await this.#findProjectRepository({ orgId: tenant.orgId, projectId, id: projectRepositoryId });\n          if (!found) return context.json({ error: 'Project repository not found' }, 404);\n          if (!(await this.#retireProjectRepositorySessions(found.handle, tenant.orgId, projectRepositoryId))) {\n            return context.json({ error: 'session_retirement_unavailable' }, 409);\n          }\n          await found.handle.projectRepositories.unlink({ orgId: tenant.orgId, id: projectRepositoryId });\n          return context.body(null, 204);\n        },\n      }),\n    ];\n  }\n}\n"],"mappings":";;;AAmBA,MAAM,UAAU;AAChB,MAAM,kBAAkB;AACxB,MAAM,yBAAyB;AAC/B,MAAM,gCAAgC;AACtC,MAAM,oBAAoB;AAC1B,MAAM,8BAA8B;AACpC,MAAM,6BAA6B;AACnC,MAAM,kBAAkB;AAExB,SAAS,MAAM,SAA2B;CACxC,OAAO;AACT;AAEA,eAAe,SAAS,SAAgD;CACtE,IAAI;EACF,OAAO,MAAM,QAAQ,IAAI,KAAK;CAChC,QAAQ;EACN;CACF;AACF;AAEA,SAAS,iBAAiB,OAAkD;CAC1E,IAAI,CAAC,SAAS,OAAO,UAAU,UAAU,OAAO;CAChD,MAAM,QAAQ;CACd,IAAI,OAAO,MAAM,SAAS,UAAU,OAAO;CAC3C,MAAM,OAAO,MAAM,KAAK,KAAK;CAC7B,IAAI,CAAC,QAAQ,KAAK,SAAS,iBAAiB,OAAO;CACnD,IAAI,MAAM,gBAAgB,KAAA,KAAa,MAAM,gBAAgB,QAAQ,OAAO,MAAM,gBAAgB,UAChG,OAAO;CACT,MAAM,cAAc,OAAO,MAAM,gBAAgB,WAAW,MAAM,YAAY,KAAK,KAAK,OAAO;CAC/F,IAAI,eAAe,YAAY,SAAS,wBAAwB,OAAO;CACvE,OAAO;EAAE;EAAM;CAAY;AAC7B;AAEA,SAAS,iBAAiB,OAAkD;CAC1E,IAAI,CAAC,SAAS,OAAO,UAAU,UAAU,OAAO;CAChD,MAAM,QAAQ;CACd,MAAM,QAAmC,CAAC;CAC1C,IAAI,MAAM,SAAS,KAAA,GAAW;EAC5B,IAAI,OAAO,MAAM,SAAS,UAAU,OAAO;EAC3C,MAAM,OAAO,MAAM,KAAK,KAAK;EAC7B,IAAI,CAAC,QAAQ,KAAK,SAAS,iBAAiB,OAAO;EACnD,MAAM,OAAO;CACf;CACA,IAAI,MAAM,gBAAgB,KAAA,GAAW;EACnC,IAAI,MAAM,gBAAgB,QAAQ,OAAO,MAAM,gBAAgB,UAAU,OAAO;EAChF,MAAM,cAAc,OAAO,MAAM,gBAAgB,WAAW,MAAM,YAAY,KAAK,KAAK,OAAO;EAC/F,IAAI,eAAe,YAAY,SAAS,wBAAwB,OAAO;EACvE,MAAM,cAAc;CACtB;CACA,IAAI,MAAM,mBAAmB,KAAA,GAAW;EACtC,MAAM,iBAAiB,oBAAoB,MAAM,gBAAgB;GAAE,WAAW;GAAiB,UAAU;EAAK,CAAC;EAC/G,IAAI,mBAAmB,OAAO,OAAO;EACrC,MAAM,iBAAiB,kBAAkB;CAC3C;CACA,IAAI,MAAM,0BAA0B,KAAA,GAAW;EAC7C,IAAI,OAAO,MAAM,0BAA0B,WAAW,OAAO;EAC7D,MAAM,wBAAwB,MAAM;CACtC;CACA,IAAI,MAAM,mBAAmB,KAAA,GAAW;EACtC,IAAI,OAAO,MAAM,mBAAmB,WAAW,OAAO;EACtD,MAAM,iBAAiB,MAAM;CAC/B;CACA,OAAO,OAAO,KAAK,KAAK,CAAC,CAAC,SAAS,IAAI,QAAQ;AACjD;AAEA,SAAS,qBAAqB,OAA0E;CACtG,IAAI,CAAC,SAAS,OAAO,UAAU,UAAU,OAAO;CAChD,MAAM,QAAQ;CACd,IAAI,OAAO,MAAM,kBAAkB,YAAY,CAAC,MAAM,cAAc,KAAK,GAAG,OAAO;CACnF,IAAI,OAAO,MAAM,mBAAmB,YAAY,CAAC,QAAQ,KAAK,MAAM,cAAc,GAAG,OAAO;CAC5F,OAAO;EAAE,eAAe,MAAM,cAAc,KAAK;EAAG,gBAAgB,MAAM;CAAe;AAC3F;AAEA,SAAS,oBACP,OACA,EAAE,WAAW,WAAW,SACW;CACnC,IAAI,UAAU,KAAA,GAAW,OAAO,KAAA;CAChC,IAAI,UAAU,MAAM,OAAO,WAAW,OAAO;CAC7C,IAAI,OAAO,UAAU,UAAU,OAAO;CACtC,MAAM,aAAa,MAAM,KAAK;CAC9B,IAAI,CAAC,YAAY,OAAO,WAAW,OAAO;CAC1C,IAAI,WAAW,SAAS,aAAa,gBAAgB,KAAK,UAAU,GAAG,OAAO;CAC9E,OAAO;AACT;AAEA,SAAS,yBAAyB,OAOzB;CACP,IAAI,CAAC,SAAS,OAAO,UAAU,UAAU,OAAO;CAChD,MAAM,QAAQ;CACd,IAAI,OAAO,MAAM,iBAAiB,YAAY,CAAC,QAAQ,KAAK,MAAM,YAAY,GAAG,OAAO;CACxF,MAAM,SAAS,oBAAoB,MAAM,QAAQ;EAAE,WAAW;EAAmB,UAAU;CAAK,CAAC;CACjG,MAAM,kBAAkB,oBAAoB,MAAM,iBAAiB,EAAE,WAAW,4BAA4B,CAAC;CAC7G,MAAM,iBAAiB,oBAAoB,MAAM,gBAAgB,EAAE,WAAW,2BAA2B,CAAC;CAC1G,MAAM,eAAe,oBAAoB,MAAM,cAAc;EAC3D,WAAW;EACX,UAAU;CACZ,CAAC;CACD,MAAM,kBAAkB,oBAAoB,MAAM,iBAAiB;EACjE,WAAW;EACX,UAAU;CACZ,CAAC;CACD,IACE,WAAW,SACX,OAAO,oBAAoB,YAC3B,OAAO,mBAAmB,YAC1B,iBAAiB,SACjB,oBAAoB,OAEpB,OAAO;CACT,OAAO;EACL,cAAc,MAAM;EACpB,QAAQ,UAAU;EAClB;EACA;EACA,cAAc,gBAAgB;EAC9B,iBAAiB,mBAAmB;CACtC;AACF;AAEA,SAAS,2BAA2B,OAAqD;CACvF,IAAI,CAAC,SAAS,OAAO,UAAU,UAAU,OAAO;CAChD,MAAM,QAAQ;CACd,MAAM,QAAsC,CAAC;CAC7C,MAAM,SAAS,oBAAoB,MAAM,QAAQ;EAAE,WAAW;EAAmB,UAAU;CAAK,CAAC;CACjG,MAAM,kBAAkB,oBAAoB,MAAM,iBAAiB,EAAE,WAAW,4BAA4B,CAAC;CAC7G,MAAM,iBAAiB,oBAAoB,MAAM,gBAAgB,EAAE,WAAW,2BAA2B,CAAC;CAC1G,MAAM,eAAe,oBAAoB,MAAM,cAAc;EAC3D,WAAW;EACX,UAAU;CACZ,CAAC;CACD,MAAM,kBAAkB,oBAAoB,MAAM,iBAAiB;EACjE,WAAW;EACX,UAAU;CACZ,CAAC;CACD,IACE,WAAW,SACX,oBAAoB,SACpB,oBAAoB,QACpB,mBAAmB,SACnB,mBAAmB,QACnB,iBAAiB,SACjB,oBAAoB,OAEpB,OAAO;CACT,IAAI,WAAW,KAAA,GAAW,MAAM,SAAS;CACzC,IAAI,oBAAoB,KAAA,GAAW,MAAM,kBAAkB;CAC3D,IAAI,mBAAmB,KAAA,GAAW,MAAM,iBAAiB;CACzD,IAAI,iBAAiB,KAAA,GAAW,MAAM,eAAe;CACrD,IAAI,oBAAoB,KAAA,GAAW,MAAM,kBAAkB;CAC3D,OAAO,OAAO,KAAK,KAAK,CAAC,CAAC,SAAS,IAAI,QAAQ;AACjD;AAaA,IAAa,gBAAb,cAAmC,MAAyB;CAC1D;CAEA,YAAY,MAAyB;EACnC,MAAM,IAAI;EACV,KAAKA,gCAAgC,IAAI,IAAI,KAAK,gCAAgC,CAAC,CAAC;CACtF;CAEA,MAAMC,YAA6C;EACjD,MAAM,KAAK,KAAK,SAAS,YAAY;EACrC,OAAO,KAAK,KAAK;CACnB;CAEA,MAAMC,iBAAgD;EACpD,MAAM,KAAK,KAAK,cAAc,YAAY;EAC1C,OAAO,KAAK,KAAK;CACnB;CAEA,MAAMC,WAAkD;EACtD,MAAM,UAAU,MAAM,KAAKD,eAAe;EAC1C,OAAO,CAAC,GAAG,KAAKF,6BAA6B,CAAC,CAAC,KAAI,kBAAiB,QAAQ,eAAe,aAAa,CAAC;CAC3G;CAEA,MAAMI,SAAS,OAAe,IAAY;EACxC,QAAQ,MAAM,KAAKH,UAAU,EAAA,CAAG,IAAI;GAAE;GAAO;EAAG,CAAC;CACnD;CAEA,MAAMI,gBAAgB,EAAE,OAAO,WAAW,MAAwD;EAChG,KAAK,MAAM,UAAU,MAAM,KAAKF,SAAS,GAAG;GAC1C,MAAM,aAAa,MAAM,OAAO,YAAY,IAAI;IAAE;IAAO;GAAG,CAAC;GAC7D,IAAI,YAAY,qBAAqB,WAAW,OAAO;IAAE;IAAQ;GAAW;EAC9E;EACA,OAAO;CACT;CAEA,MAAMG,uBAAuB,EAAE,OAAO,WAAW,MAAwD;EACvG,KAAK,MAAM,UAAU,MAAM,KAAKH,SAAS,GAAG;GAC1C,MAAM,oBAAoB,MAAM,OAAO,oBAAoB,IAAI;IAAE;IAAO;GAAG,CAAC;GAC5E,IAAI,CAAC,mBAAmB;GACxB,MAAM,aAAa,MAAM,OAAO,YAAY,IAAI;IAAE;IAAO,IAAI,kBAAkB;GAAa,CAAC;GAC7F,IAAI,YAAY,qBAAqB,WAAW,OAAO;IAAE;IAAQ;IAAY;GAAkB;EACjG;EACA,OAAO;CACT;CAEA,MAAMI,mBAAmB,QAAoC,OAAe,mBAAsC;EAChH,MAAM,aAAa,MAAM,OAAO,aAAa,IAAI;GAAE;GAAO,IAAI,kBAAkB;EAAa,CAAC;EAC9F,OAAO;GAAE,GAAG;GAAmB;EAAW;CAC5C;CAEA,MAAMC,iCACJ,QACA,OACA,qBACkB;EAElB,KAAI,MADmB,OAAO,SAAS,wBAAwB,EAAE,oBAAoB,CAAC,EAAA,CACzE,WAAW,GAAG,OAAO;EAClC,IAAI,CAAC,KAAK,KAAK,mBAAmB,OAAO;EACzC,MAAM,KAAK,KAAK,kBAAkB,gCAAgC;GAChE,eAAe;GACf;GACA;EACF,CAAC;EACD,OAAO;CACT;CAEA,MAAMC,eAAe,SAAuF;EAC1G,MAAM,KAAK,KAAK,KAAK,WAAW,OAAO;EACvC,MAAM,SAAS,KAAK,KAAK,KAAK,OAAO,OAAO;EAC5C,IAAI,CAAC,QAAQ,OAAO,EAAE,UAAU,QAAQ,KAAK,EAAE,OAAO,eAAe,GAAG,GAAG,EAAE;EAC7E,IAAI,CAAC,OAAO,OACV,OAAO,EACL,UAAU,QAAQ,KAChB;GAAE,OAAO;GAAyB,SAAS;EAA4C,GACvF,GACF,EACF;EAEF,OAAO;GAAE,OAAO,OAAO;GAAO,QAAQ,OAAO;EAAO;CACtD;CAEA,SAAqB;EACnB,OAAO;GACL,iBAAiB,yBAAyB;IACxC,QAAQ;IACR,cAAc;IACd,SAAS,OAAM,iBAAgB;KAC7B,MAAM,UAAU,MAAM,YAAY;KAClC,MAAM,SAAS,MAAM,KAAKA,eAAe,OAAO;KAChD,IAAI,cAAc,QAAQ,OAAO,OAAO;KACxC,OAAO,QAAQ,KAAK,EAAE,UAAU,OAAO,MAAM,KAAKR,UAAU,EAAA,CAAG,KAAK,EAAE,OAAO,OAAO,MAAM,CAAC,EAAE,CAAC;IAChG;GACF,CAAC;GACD,iBAAiB,yBAAyB;IACxC,QAAQ;IACR,cAAc;IACd,SAAS,OAAM,iBAAgB;KAC7B,MAAM,UAAU,MAAM,YAAY;KAClC,MAAM,SAAS,MAAM,KAAKQ,eAAe,OAAO;KAChD,IAAI,cAAc,QAAQ,OAAO,OAAO;KACxC,MAAM,QAAQ,iBAAiB,MAAM,SAAS,OAAO,CAAC;KACtD,IAAI,CAAC,OAAO,OAAO,QAAQ,KAAK,EAAE,OAAO,kBAAkB,GAAG,GAAG;KACjE,MAAM,UAAU,OAAO,MAAM,KAAKR,UAAU,EAAA,CAAG,OAAO;MAAE,OAAO,OAAO;MAAO,QAAQ,OAAO;MAAQ;KAAM,CAAC;KAC3G,OAAO,QAAQ,KAAK,EAAE,QAAQ,GAAG,GAAG;IACtC;GACF,CAAC;GACD,iBAAiB,6BAA6B;IAC5C,QAAQ;IACR,cAAc;IACd,SAAS,OAAM,iBAAgB;KAC7B,MAAM,UAAU,MAAM,YAAY;KAClC,MAAM,SAAS,MAAM,KAAKQ,eAAe,OAAO;KAChD,IAAI,cAAc,QAAQ,OAAO,OAAO;KACxC,MAAM,KAAK,QAAQ,IAAI,MAAM,IAAI;KACjC,IAAI,CAAC,MAAM,CAAC,QAAQ,KAAK,EAAE,GAAG,OAAO,QAAQ,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;KACrF,MAAM,UAAU,MAAM,KAAKL,SAAS,OAAO,OAAO,EAAE;KACpD,OAAO,UAAU,QAAQ,KAAK,EAAE,QAAQ,CAAC,IAAI,QAAQ,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;IAC/F;GACF,CAAC;GACD,iBAAiB,6BAA6B;IAC5C,QAAQ;IACR,cAAc;IACd,SAAS,OAAM,iBAAgB;KAC7B,MAAM,UAAU,MAAM,YAAY;KAClC,MAAM,SAAS,MAAM,KAAKK,eAAe,OAAO;KAChD,IAAI,cAAc,QAAQ,OAAO,OAAO;KACxC,MAAM,KAAK,QAAQ,IAAI,MAAM,IAAI;KACjC,IAAI,CAAC,MAAM,CAAC,QAAQ,KAAK,EAAE,GAAG,OAAO,QAAQ,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;KACrF,MAAM,QAAQ,iBAAiB,MAAM,SAAS,OAAO,CAAC;KACtD,IAAI,CAAC,OAAO,OAAO,QAAQ,KAAK,EAAE,OAAO,kBAAkB,GAAG,GAAG;KACjE,MAAM,UAAU,OAAO,MAAM,KAAKR,UAAU,EAAA,CAAG,OAAO;MAAE,OAAO,OAAO;MAAO;MAAI;KAAM,CAAC;KACxF,OAAO,UAAU,QAAQ,KAAK,EAAE,QAAQ,CAAC,IAAI,QAAQ,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;IAC/F;GACF,CAAC;GACD,iBAAiB,6BAA6B;IAC5C,QAAQ;IACR,cAAc;IACd,SAAS,OAAM,iBAAgB;KAC7B,MAAM,UAAU,MAAM,YAAY;KAClC,MAAM,SAAS,MAAM,KAAKQ,eAAe,OAAO;KAChD,IAAI,cAAc,QAAQ,OAAO,OAAO;KACxC,MAAM,KAAK,QAAQ,IAAI,MAAM,IAAI;KACjC,IAAI,CAAC,MAAM,CAAC,QAAQ,KAAK,EAAE,GAAG,OAAO,QAAQ,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;KACrF,IAAI,CAAE,MAAM,KAAKL,SAAS,OAAO,OAAO,EAAE,GAAI,OAAO,QAAQ,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;KACrG,KAAK,MAAM,UAAU,MAAM,KAAKD,SAAS,GACvC,KAAK,MAAM,cAAc,MAAM,OAAO,YAAY,KAAK;MAAE,OAAO,OAAO;MAAO,kBAAkB;KAAG,CAAC,GAAG;MACrG,KAAK,MAAM,qBAAqB,MAAM,OAAO,oBAAoB,KAAK;OACpE,OAAO,OAAO;OACd,cAAc,WAAW;MAC3B,CAAC,GACC,IAAI,CAAE,MAAM,KAAKK,iCAAiC,QAAQ,OAAO,OAAO,kBAAkB,EAAE,GAC1F,OAAO,QAAQ,KAAK,EAAE,OAAO,iCAAiC,GAAG,GAAG;MAGxE,MAAM,OAAO,YAAY,OAAO;OAAE,OAAO,OAAO;OAAO,IAAI,WAAW;MAAG,CAAC;KAC5E;KAEF,OAAO,MAAM,KAAKP,UAAU,EAAA,CAAG,OAAO;MAAE,OAAO,OAAO;MAAO;KAAG,CAAC;KACjE,OAAO,QAAQ,KAAK,MAAM,GAAG;IAC/B;GACF,CAAC;GACD,iBAAiB,wDAAwD;IACvE,QAAQ;IACR,cAAc;IACd,SAAS,OAAM,iBAAgB;KAC7B,MAAM,UAAU,MAAM,YAAY;KAClC,MAAM,SAAS,MAAM,KAAKQ,eAAe,OAAO;KAChD,IAAI,cAAc,QAAQ,OAAO,OAAO;KACxC,MAAM,YAAY,QAAQ,IAAI,MAAM,IAAI;KACxC,IAAI,CAAC,aAAa,CAAC,QAAQ,KAAK,SAAS,KAAK,CAAE,MAAM,KAAKL,SAAS,OAAO,OAAO,SAAS,GACzF,OAAO,QAAQ,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;KACzD,MAAM,cAAc,CAAC;KACrB,KAAK,MAAM,UAAU,MAAM,KAAKD,SAAS,GACvC,KAAK,MAAM,cAAc,MAAM,OAAO,YAAY,KAAK;MACrD,OAAO,OAAO;MACd,kBAAkB;KACpB,CAAC,GAAG;MACF,MAAM,eAAe,MAAM,OAAO,cAAc,IAAI;OAClD,OAAO,OAAO;OACd,IAAI,WAAW;MACjB,CAAC;MAQD,IAAI,CAAC,cAAc;MACnB,MAAM,QAAQ,MAAM,OAAO,oBAAoB,KAAK;OAAE,OAAO,OAAO;OAAO,cAAc,WAAW;MAAG,CAAC;MACxG,YAAY,KAAK;OACf,GAAG;OACH;OACA,cAAc,MAAM,QAAQ,IAAI,MAAM,KAAI,SAAQ,KAAKI,mBAAmB,QAAQ,OAAO,OAAO,IAAI,CAAC,CAAC;MACxG,CAAC;KACH;KAEF,OAAO,QAAQ,KAAK,EAAE,YAAY,CAAC;IACrC;GACF,CAAC;GACD,iBAAiB,wDAAwD;IACvE,QAAQ;IACR,cAAc;IACd,SAAS,OAAM,iBAAgB;KAC7B,MAAM,UAAU,MAAM,YAAY;KAClC,MAAM,SAAS,MAAM,KAAKE,eAAe,OAAO;KAChD,IAAI,cAAc,QAAQ,OAAO,OAAO;KACxC,MAAM,YAAY,QAAQ,IAAI,MAAM,IAAI;KACxC,IAAI,CAAC,aAAa,CAAC,QAAQ,KAAK,SAAS,KAAK,CAAE,MAAM,KAAKL,SAAS,OAAO,OAAO,SAAS,GACzF,OAAO,QAAQ,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;KACzD,MAAM,QAAQ,qBAAqB,MAAM,SAAS,OAAO,CAAC;KAC1D,IAAI,CAAC,OAAO,OAAO,QAAQ,KAAK,EAAE,OAAO,oCAAoC,GAAG,GAAG;KACnF,IAAI,CAAC,KAAKJ,8BAA8B,IAAI,MAAM,aAAa,GAC7D,OAAO,QAAQ,KAAK,EAAE,OAAO,uCAAuC,GAAG,GAAG;KAC5E,MAAM,UAAU,MAAM,KAAKE,eAAe,EAAA,CAAG,eAAe,MAAM,aAAa;KAC/E,IAAI,CAAE,MAAM,OAAO,cAAc,IAAI;MAAE,OAAO,OAAO;MAAO,IAAI,MAAM;KAAe,CAAC,GACpF,OAAO,QAAQ,KAAK,EAAE,OAAO,wCAAwC,GAAG,GAAG;KAC7E,MAAM,aAAa,MAAM,OAAO,YAAY,OAAO;MACjD,OAAO,OAAO;MACd,kBAAkB;MAClB,gBAAgB,MAAM;MACtB,iBAAiB,OAAO;KAC1B,CAAC;KACD,OAAO,QAAQ,KAAK,EAAE,WAAW,GAAG,GAAG;IACzC;GACF,CAAC;GACD,iBAAiB,sEAAsE;IACrF,QAAQ;IACR,cAAc;IACd,SAAS,OAAM,iBAAgB;KAC7B,MAAM,UAAU,MAAM,YAAY;KAClC,MAAM,SAAS,MAAM,KAAKO,eAAe,OAAO;KAChD,IAAI,cAAc,QAAQ,OAAO,OAAO;KACxC,MAAM,YAAY,QAAQ,IAAI,MAAM,IAAI;KACxC,MAAM,eAAe,QAAQ,IAAI,MAAM,cAAc;KACrD,IAAI,CAAC,aAAa,CAAC,QAAQ,KAAK,SAAS,KAAK,CAAC,gBAAgB,CAAC,QAAQ,KAAK,YAAY,GACvF,OAAO,QAAQ,KAAK,EAAE,OAAO,sCAAsC,GAAG,GAAG;KAC3E,MAAM,QAAQ,MAAM,KAAKJ,gBAAgB;MAAE,OAAO,OAAO;MAAO;MAAW,IAAI;KAAa,CAAC;KAC7F,IAAI,CAAC,OAAO,OAAO,QAAQ,KAAK,EAAE,OAAO,sCAAsC,GAAG,GAAG;KACrF,KAAK,MAAM,qBAAqB,MAAM,MAAM,OAAO,oBAAoB,KAAK;MAC1E,OAAO,OAAO;MACd;KACF,CAAC,GACC,IAAI,CAAE,MAAM,KAAKG,iCAAiC,MAAM,QAAQ,OAAO,OAAO,kBAAkB,EAAE,GAChG,OAAO,QAAQ,KAAK,EAAE,OAAO,iCAAiC,GAAG,GAAG;KAGxE,MAAM,MAAM,OAAO,YAAY,OAAO;MAAE,OAAO,OAAO;MAAO,IAAI;KAAa,CAAC;KAC/E,OAAO,QAAQ,KAAK,MAAM,GAAG;IAC/B;GACF,CAAC;GACD,iBAAiB,mFAAmF;IAClG,QAAQ;IACR,cAAc;IACd,SAAS,OAAM,iBAAgB;KAC7B,MAAM,UAAU,MAAM,YAAY;KAClC,MAAM,SAAS,MAAM,KAAKC,eAAe,OAAO;KAChD,IAAI,cAAc,QAAQ,OAAO,OAAO;KACxC,MAAM,YAAY,QAAQ,IAAI,MAAM,IAAI;KACxC,MAAM,eAAe,QAAQ,IAAI,MAAM,cAAc;KACrD,IAAI,CAAC,aAAa,CAAC,QAAQ,KAAK,SAAS,KAAK,CAAC,gBAAgB,CAAC,QAAQ,KAAK,YAAY,GACvF,OAAO,QAAQ,KAAK,EAAE,OAAO,sCAAsC,GAAG,GAAG;KAC3E,MAAM,QAAQ,MAAM,KAAKJ,gBAAgB;MAAE,OAAO,OAAO;MAAO;MAAW,IAAI;KAAa,CAAC;KAC7F,IAAI,CAAC,OAAO,OAAO,QAAQ,KAAK,EAAE,OAAO,sCAAsC,GAAG,GAAG;KACrF,MAAM,QAAQ,yBAAyB,MAAM,SAAS,OAAO,CAAC;KAC9D,IAAI,CAAC,OAAO,OAAO,QAAQ,KAAK,EAAE,OAAO,6BAA6B,GAAG,GAAG;KAC5E,MAAM,aAAa,MAAM,MAAM,OAAO,aAAa,IAAI;MAAE,OAAO,OAAO;MAAO,IAAI,MAAM;KAAa,CAAC;KACtG,IAAI,CAAC,cAAc,WAAW,mBAAmB,MAAM,WAAW,gBAChE,OAAO,QAAQ,KAAK,EAAE,OAAO,sCAAsC,GAAG,GAAG;KAC3E,MAAM,oBAAoB,MAAM,MAAM,OAAO,oBAAoB,KAAK;MACpE,OAAO,OAAO;MACd;MACA,iBAAiB,OAAO;MACxB,GAAG;KACL,CAAC;KACD,OAAO,QAAQ,KACb,EAAE,mBAAmB,MAAM,KAAKE,mBAAmB,MAAM,QAAQ,OAAO,OAAO,iBAAiB,EAAE,GAClG,GACF;IACF;GACF,CAAC;GACD,iBAAiB,+DAA+D;IAC9E,QAAQ;IACR,cAAc;IACd,SAAS,OAAM,iBAAgB;KAC7B,MAAM,UAAU,MAAM,YAAY;KAClC,MAAM,SAAS,MAAM,KAAKE,eAAe,OAAO;KAChD,IAAI,cAAc,QAAQ,OAAO,OAAO;KACxC,MAAM,YAAY,QAAQ,IAAI,MAAM,IAAI;KACxC,MAAM,sBAAsB,QAAQ,IAAI,MAAM,qBAAqB;KACnE,IAAI,CAAC,aAAa,CAAC,QAAQ,KAAK,SAAS,KAAK,CAAC,uBAAuB,CAAC,QAAQ,KAAK,mBAAmB,GACrG,OAAO,QAAQ,KAAK,EAAE,OAAO,+BAA+B,GAAG,GAAG;KACpE,MAAM,QAAQ,MAAM,KAAKH,uBAAuB;MAAE,OAAO,OAAO;MAAO;MAAW,IAAI;KAAoB,CAAC;KAC3G,IAAI,CAAC,OAAO,OAAO,QAAQ,KAAK,EAAE,OAAO,+BAA+B,GAAG,GAAG;KAC9E,MAAM,QAAQ,2BAA2B,MAAM,SAAS,OAAO,CAAC;KAChE,IAAI,CAAC,OAAO,OAAO,QAAQ,KAAK,EAAE,OAAO,6BAA6B,GAAG,GAAG;KAC5E,MAAM,oBAAoB,MAAM,MAAM,OAAO,oBAAoB,OAAO;MACtE,OAAO,OAAO;MACd,IAAI;MACJ;KACF,CAAC;KACD,OAAO,QAAQ,KAAK,EAClB,mBAAmB,MAAM,KAAKC,mBAAmB,MAAM,QAAQ,OAAO,OAAO,iBAAkB,EACjG,CAAC;IACH;GACF,CAAC;GACD,iBAAiB,+DAA+D;IAC9E,QAAQ;IACR,cAAc;IACd,SAAS,OAAM,iBAAgB;KAC7B,MAAM,UAAU,MAAM,YAAY;KAClC,MAAM,SAAS,MAAM,KAAKE,eAAe,OAAO;KAChD,IAAI,cAAc,QAAQ,OAAO,OAAO;KACxC,MAAM,YAAY,QAAQ,IAAI,MAAM,IAAI;KACxC,MAAM,sBAAsB,QAAQ,IAAI,MAAM,qBAAqB;KACnE,IAAI,CAAC,aAAa,CAAC,QAAQ,KAAK,SAAS,KAAK,CAAC,uBAAuB,CAAC,QAAQ,KAAK,mBAAmB,GACrG,OAAO,QAAQ,KAAK,EAAE,OAAO,+BAA+B,GAAG,GAAG;KACpE,MAAM,QAAQ,MAAM,KAAKH,uBAAuB;MAAE,OAAO,OAAO;MAAO;MAAW,IAAI;KAAoB,CAAC;KAC3G,IAAI,CAAC,OAAO,OAAO,QAAQ,KAAK,EAAE,OAAO,+BAA+B,GAAG,GAAG;KAC9E,IAAI,CAAE,MAAM,KAAKE,iCAAiC,MAAM,QAAQ,OAAO,OAAO,mBAAmB,GAC/F,OAAO,QAAQ,KAAK,EAAE,OAAO,iCAAiC,GAAG,GAAG;KAEtE,MAAM,MAAM,OAAO,oBAAoB,OAAO;MAAE,OAAO,OAAO;MAAO,IAAI;KAAoB,CAAC;KAC9F,OAAO,QAAQ,KAAK,MAAM,GAAG;IAC/B;GACF,CAAC;EACH;CACF;AACF"}

package/dist/routes/surface.d.ts

@@ -65,6 +65,7 @@ export interface FactoryApiRoutesDeps {
     /** Resolved Factory rule set, threaded from the host (no service locator). */
     rules: FactoryRules;
     factoryTransitionService?: FactoryTransitionService;
+    sessionRetirement?: import('../sandbox/session-retirement.js').SessionRetirementCoordinator;
     onFactoryRuntime?: (runtime: {
         transitionService: FactoryTransitionService;
         prepareBinding?: (input: FactoryBindingPreparationInput) => Promise<void>;

package/dist/routes/surface.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"surface.d.ts","sourceRoot":"","sources":["../../src/routes/surface.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AACjE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAEpD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAE3D,OAAO,KAAK,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAEtF,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAC;AAC/E,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,wBAAwB,CAAC;AAC7E,OAAO,EAAE,uBAAuB,EAAE,MAAM,+BAA+B,CAAC;AACxE,OAAO,EAAE,wBAAwB,EAAE,MAAM,gCAAgC,CAAC;AAC1E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEtD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAGxD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oCAAoC,CAAC;AACvE,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,6CAA6C,CAAC;AAC1F,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAC;AACtF,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,6CAA6C,CAAC;AAC1F,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAC;AAC/E,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAC;AACvE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,yCAAyC,CAAC;AAClF,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,4CAA4C,CAAC;AACxF,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,wCAAwC,CAAC;AAChF,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAClF,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,yCAAyC,CAAC;AAClF,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACtF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uCAAuC,CAAC;AAM9E,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAK5C,MAAM,WAAW,uBAAuB;IACtC,WAAW,EAAE,kBAAkB,CAAC;IAChC,KAAK,EAAE,OAAO,CAAC;IACf,WAAW,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,oBAAoB;IACnC,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,eAAe,CAAC,eAAe,CAAC,CAAC;IAC7C,qEAAqE;IACrE,IAAI,EAAE,SAAS,CAAC;IAChB,WAAW,EAAE,WAAW,CAAC;IACzB,KAAK,EAAE,YAAY,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,2EAA2E;IAC3E,KAAK,EAAE,YAAY,CAAC;IACpB,4EAA4E;IAC5E,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,kBAAkB,EAAE,kBAAkB,CAAC;IACvC,oBAAoB,EAAE,oBAAoB,CAAC;IAC3C,mFAAmF;IACnF,OAAO,EAAE;QACP,MAAM,EAAE,aAAa,CAAC;QACtB,gBAAgB,EAAE,uBAAuB,CAAC;QAC1C,cAAc,EAAE,qBAAqB,CAAC;QACtC,eAAe,EAAE,sBAAsB,CAAC;QACxC,UAAU,EAAE,iBAAiB,CAAC;QAC9B,UAAU,EAAE,iBAAiB,CAAC;QAC9B,QAAQ,EAAE,sBAAsB,CAAC;QACjC,WAAW,EAAE,kBAAkB,CAAC;QAChC,SAAS,EAAE,gBAAgB,CAAC;QAC5B,eAAe,EAAE,sBAAsB,CAAC;KACzC,CAAC;IACF,YAAY,CAAC,EAAE,uBAAuB,EAAE,CAAC;IACzC,WAAW,EAAE,OAAO,CAAC;IACrB,YAAY,EAAE,OAAO,CAAC;IACtB,8EAA8E;IAC9E,KAAK,EAAE,YAAY,CAAC;IACpB,wBAAwB,CAAC,EAAE,wBAAwB,CAAC;IACpD,gBAAgB,CAAC,EAAE,CAAC,OAAO,EAAE;QAC3B,iBAAiB,EAAE,wBAAwB,CAAC;QAC5C,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE,8BAA8B,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;KAC3E,KAAK,IAAI,CAAC;CACZ;AAiDD,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,8BAA8B,CAAC,MAAM,CAAC,GAAG,MAAM,CAsBtF;AAED;;;;;;GAMG;AACH,wBAAsB,yBAAyB,CAC7C,MAAM,EAAE,iBAAiB,EACzB,WAAW,EAAE,uBAAuB,EACpC,QAAQ,EAAE,sBAAsB,EAChC,KAAK,EAAE,8BAA8B,GACpC,OAAO,CAAC,IAAI,CAAC,CAqCf;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,IAAI,CACR,oBAAoB,EACpB,YAAY,GAAG,cAAc,GAAG,MAAM,GAAG,OAAO,GAAG,gBAAgB,GAAG,oBAAoB,GAAG,sBAAsB,CACpH,GAAG;IACF,WAAW,EAAE,WAAW,CAAC;IACzB,SAAS,CAAC,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC;IACjC,KAAK,EAAE,YAAY,CAAC;IACpB,YAAY,EAAE,OAAO,CAAC;IACtB,OAAO,EAAE,IAAI,CACX,oBAAoB,CAAC,SAAS,CAAC,EAC/B,UAAU,GAAG,QAAQ,GAAG,WAAW,GAAG,iBAAiB,GAAG,gBAAgB,CAC3E,CAAC;IACF;;;;OAIG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC/B,EACD,aAAa,EAAE,MAAM,GACpB,kBAAkB,CAsBpB;AA4ED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,oBAAoB,GAAG,QAAQ,EAAE,CAoH/E"}
+{"version":3,"file":"surface.d.ts","sourceRoot":"","sources":["../../src/routes/surface.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AACjE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAEpD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAE3D,OAAO,KAAK,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAEtF,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAC;AAC/E,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,wBAAwB,CAAC;AAC7E,OAAO,EAAE,uBAAuB,EAAE,MAAM,+BAA+B,CAAC;AACxE,OAAO,EAAE,wBAAwB,EAAE,MAAM,gCAAgC,CAAC;AAC1E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEtD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAGxD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oCAAoC,CAAC;AACvE,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,6CAA6C,CAAC;AAC1F,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAC;AACtF,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,6CAA6C,CAAC;AAC1F,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAC;AAC/E,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAC;AACvE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,yCAAyC,CAAC;AAClF,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,4CAA4C,CAAC;AACxF,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,wCAAwC,CAAC;AAChF,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAClF,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,yCAAyC,CAAC;AAClF,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACtF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uCAAuC,CAAC;AAM9E,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAK5C,MAAM,WAAW,uBAAuB;IACtC,WAAW,EAAE,kBAAkB,CAAC;IAChC,KAAK,EAAE,OAAO,CAAC;IACf,WAAW,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,oBAAoB;IACnC,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,eAAe,CAAC,eAAe,CAAC,CAAC;IAC7C,qEAAqE;IACrE,IAAI,EAAE,SAAS,CAAC;IAChB,WAAW,EAAE,WAAW,CAAC;IACzB,KAAK,EAAE,YAAY,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,2EAA2E;IAC3E,KAAK,EAAE,YAAY,CAAC;IACpB,4EAA4E;IAC5E,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,kBAAkB,EAAE,kBAAkB,CAAC;IACvC,oBAAoB,EAAE,oBAAoB,CAAC;IAC3C,mFAAmF;IACnF,OAAO,EAAE;QACP,MAAM,EAAE,aAAa,CAAC;QACtB,gBAAgB,EAAE,uBAAuB,CAAC;QAC1C,cAAc,EAAE,qBAAqB,CAAC;QACtC,eAAe,EAAE,sBAAsB,CAAC;QACxC,UAAU,EAAE,iBAAiB,CAAC;QAC9B,UAAU,EAAE,iBAAiB,CAAC;QAC9B,QAAQ,EAAE,sBAAsB,CAAC;QACjC,WAAW,EAAE,kBAAkB,CAAC;QAChC,SAAS,EAAE,gBAAgB,CAAC;QAC5B,eAAe,EAAE,sBAAsB,CAAC;KACzC,CAAC;IACF,YAAY,CAAC,EAAE,uBAAuB,EAAE,CAAC;IACzC,WAAW,EAAE,OAAO,CAAC;IACrB,YAAY,EAAE,OAAO,CAAC;IACtB,8EAA8E;IAC9E,KAAK,EAAE,YAAY,CAAC;IACpB,wBAAwB,CAAC,EAAE,wBAAwB,CAAC;IACpD,iBAAiB,CAAC,EAAE,OAAO,kCAAkC,EAAE,4BAA4B,CAAC;IAC5F,gBAAgB,CAAC,EAAE,CAAC,OAAO,EAAE;QAC3B,iBAAiB,EAAE,wBAAwB,CAAC;QAC5C,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE,8BAA8B,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;KAC3E,KAAK,IAAI,CAAC;CACZ;AAiDD,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,8BAA8B,CAAC,MAAM,CAAC,GAAG,MAAM,CAsBtF;AAED;;;;;;GAMG;AACH,wBAAsB,yBAAyB,CAC7C,MAAM,EAAE,iBAAiB,EACzB,WAAW,EAAE,uBAAuB,EACpC,QAAQ,EAAE,sBAAsB,EAChC,KAAK,EAAE,8BAA8B,GACpC,OAAO,CAAC,IAAI,CAAC,CAqCf;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,IAAI,CACR,oBAAoB,EACpB,YAAY,GAAG,cAAc,GAAG,MAAM,GAAG,OAAO,GAAG,gBAAgB,GAAG,oBAAoB,GAAG,sBAAsB,CACpH,GAAG;IACF,WAAW,EAAE,WAAW,CAAC;IACzB,SAAS,CAAC,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC;IACjC,KAAK,EAAE,YAAY,CAAC;IACpB,YAAY,EAAE,OAAO,CAAC;IACtB,OAAO,EAAE,IAAI,CACX,oBAAoB,CAAC,SAAS,CAAC,EAC/B,UAAU,GAAG,QAAQ,GAAG,WAAW,GAAG,iBAAiB,GAAG,gBAAgB,CAC3E,CAAC;IACF;;;;OAIG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC/B,EACD,aAAa,EAAE,MAAM,GACpB,kBAAkB,CAsBpB;AA4ED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,oBAAoB,GAAG,QAAQ,EAAE,CAoH/E"}