@mastra/factory 0.8.0-alpha.8 → 0.8.0

package/dist/routes/knowledge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"knowledge.js","names":["#inWindow","#windowIds","#fallbackCache","#store","#maxFallbackLookups","#trackOutOfWindow","#fallbackLookups","#cappedSeen","#limits","#resolveTenant","#resolveView","#pinnedNodeIds","#pinnedRecords"],"sources":["../../src/routes/knowledge.ts"],"sourcesContent":["/**\n * Read-only Mastra `apiRoutes` exposing the factory project's knowledge graph.\n *\n * Serves the Knowledge page in factory-ui: a polling graph snapshot (nodes\n * as nodes, wikilink edges derived from record text), a node flyout payload\n * with per-record provenance, and the recent activity feed. Every endpoint is a\n * GET — this module never writes knowledge.\n *\n * Scoping is fail-closed: the org and resource rungs are derived server-side\n * from the authenticated caller and the validated `:id` project. The DEFAULT\n * view queries `[org:<orgId>, resource:<projectId>]` (org + project records).\n * Thread-scoped records are reachable ONLY via an explicit, server-validated\n * `threadId` query parameter (the drill-down view), which appends the thread\n * rung to the query scope. A thread is drillable iff it produced knowledge\n * visible under the caller's org/project prefix; unknown or cross-org threads\n * 404 — never a silent fallback to the default view.\n */\n\nimport type { ApiRoute } from '@mastra/core/server';\nimport { registerApiRoute } from '@mastra/core/server';\nimport type { KnowledgeNode, KnowledgeRecord, KnowledgeScope, KnowledgeStorage } from '@mastra/core/storage';\nimport {\n  canonicalizeKnowledgeScope,\n  isKnowledgeScopeVisible,\n  knowledgeScopeKey,\n  parseKnowledgeWikilinks,\n} from '@mastra/core/storage';\nimport type { Context } from 'hono';\n\nimport type { FactoryProjectsStorage } from '../storage/domains/projects/base.js';\nimport type { RouteDependencies } from './route.js';\nimport { Route } from './route.js';\n\n/** Reserved node that anchors pinned records (see subconscious/pinned.ts). */\nconst PINNED_NODE_NAME = 'pinned';\n\n/** Hover-card budget for record text shipped in the graph payload. */\nconst RECORD_TEXT_LIMIT = 240;\n\nfunction truncateRecordText(text: string): string {\n  return text.length > RECORD_TEXT_LIMIT ? `${text.slice(0, RECORD_TEXT_LIMIT - 1)}…` : text;\n}\n\nconst UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;\n\n/** Window caps. Injectable at construction only — never per-request. */\nexport interface KnowledgeRouteLimits {\n  /** Max nodes in a graph snapshot (newest-first). */\n  maxNodes: number;\n  /** Max records parsed for edges per snapshot (newest-first). */\n  maxRecords: number;\n  /** Max fallback `resolveNode` store lookups per request (deduped per unique name+scope). */\n  maxFallbackLookups: number;\n}\n\nconst DEFAULT_LIMITS: KnowledgeRouteLimits = { maxNodes: 500, maxRecords: 2000, maxFallbackLookups: 100 };\n\nexport interface KnowledgeRoutesDeps extends RouteDependencies {\n  /** Factory projects domain — validates the `:id` project belongs to the caller's org. */\n  projects: FactoryProjectsStorage;\n  /** Lazy handle to the knowledge storage domain; endpoints 503 when absent. */\n  knowledge: () => Promise<KnowledgeStorage | undefined>;\n  limits?: Partial<KnowledgeRouteLimits>;\n}\n\n/** A graph node. `recordCount` is window-derived (records inside the snapshot window only). */\nexport interface KnowledgeGraphNode {\n  id: string;\n  name: string;\n  kind: string;\n  scope: KnowledgeScope;\n  /** Deepest rung of the record's scope: org | resource | thread. */\n  rung: 'org' | 'resource' | 'thread';\n  /**\n   * True when a non-deleted pinned record's wikilinks reference ONLY this\n   * node (A9: multi-target pins mark their edges instead — the pin is\n   * about the relationship; a single-target pin has no edge to carry it).\n   */\n  pinned: boolean;\n  /** Records owned by this node INSIDE the snapshot window (not a total). */\n  recordCount: number;\n  createdAt: string;\n  updatedAt: string;\n}\n\nexport interface KnowledgeGraphEdge {\n  id: string;\n  /** The owning node of the record (its `node`). */\n  source: string;\n  /** The wikilink-resolved node. */\n  target: string;\n  /**\n   * Always 'wikilink': the record's `node` is the edge SOURCE, so the\n   * plan's \"parent link\" collapses into the wikilink edge — nodes carry no\n   * separate parent field to derive a second edge type from.\n   */\n  type: 'wikilink';\n  /** The record whose text produced the edge. */\n  recordId: string;\n  /**\n   * True when the edge is derived from a PINNED record linking two nodes —\n   * the pin marks the relationship, so the accent lives on the edge (A9).\n   */\n  pinned?: boolean;\n}\n\n/**\n * A knowledge record as a first-class graph element (A11): every record in the window,\n * with the in-window nodes it touches. The client renders by arity —\n * 1 node: a small dot linked to it; 2: the connecting line; 3+: a midpoint\n * junction splitting to each node. Pin records have their hidden reserved\n * owner omitted, so their arity comes purely from wikilink targets.\n */\nexport interface KnowledgeGraphRecord {\n  /** The record id. */\n  id: string;\n  /** Owner node first (omitted for pins), then resolved wikilink targets. */\n  nodeIds: string[];\n  pinned: boolean;\n  /** Record text, truncated for hover cards. */\n  text: string;\n}\n\nexport interface KnowledgeGraphPayload {\n  view: 'project' | 'thread';\n  threadId?: string;\n  nodes: KnowledgeGraphNode[];\n  edges: KnowledgeGraphEdge[];\n  records: KnowledgeGraphRecord[];\n  /** True when the node or record window cap was hit (newest-first window). */\n  truncated: boolean;\n  /** Wikilink targets that resolved in the store but fell outside the node window. */\n  outOfWindow: Array<{ id: string; name: string }>;\n  /** Unique unknown names skipped once the fallback-lookup cap was hit. */\n  unresolvedCapped: { count: number; names: string[] };\n  /** Pin counts per rung of the active view (thread is null in the default view). */\n  pinCensus: { resource: number; thread: number | null };\n  /** Change hint: newest knowledge activity id (per-process monotonic — hint only). */\n  version: string | null;\n}\n\nexport interface KnowledgeNodeRecordPayload {\n  id: string;\n  node: string;\n  /** 'owned' when the node is the record's parent, 'mentions' when it only wikilinks it. */\n  relation: 'owned' | 'mentions';\n  text: string;\n  scope: KnowledgeScope;\n  rung: 'org' | 'resource' | 'thread';\n  sourceThreadId: string;\n  capturedAt: string;\n  when?: string;\n  pinned: boolean;\n  metadata?: Record<string, unknown>;\n}\n\nexport interface KnowledgeNodePayload {\n  node: {\n    id: string;\n    name: string;\n    kind: string;\n    content: string;\n    scope: KnowledgeScope;\n    rung: 'org' | 'resource' | 'thread';\n    createdAt: string;\n    updatedAt: string;\n  };\n  records: KnowledgeNodeRecordPayload[];\n}\n\nfunction loose(c: unknown): Context {\n  return c as Context;\n}\n\nfunction deepestRung(scope: KnowledgeScope): 'org' | 'resource' | 'thread' {\n  let rung: 'org' | 'resource' | 'thread' = 'org';\n  for (const entry of scope) {\n    const ns = entry.slice(0, entry.indexOf(':'));\n    if (ns === 'thread') return 'thread';\n    if (ns === 'resource') rung = 'resource';\n  }\n  return rung;\n}\n\nfunction boundedThreadId(raw: string | undefined): string | undefined {\n  if (!raw) return undefined;\n  const trimmed = raw.trim();\n  return trimmed.length > 0 && trimmed.length <= 512 ? trimmed : undefined;\n}\n\ninterface ResolvedView {\n  orgId: string;\n  userId: string;\n  factoryProjectId: string;\n  store: KnowledgeStorage;\n  view: 'project' | 'thread';\n  threadId?: string;\n  /** The query scope for the active view. */\n  scope: KnowledgeScope;\n  /** Exact scopes where a reserved `pinned` node may live for this view. */\n  pinRungs: Array<{ rung: 'resource' | 'thread'; scope: KnowledgeScope }>;\n}\n\n/**\n * In-record + capped-fallback wikilink resolver, shared by both endpoints.\n * Resolution uses the store's own algorithm: a descending-prefix walk over the\n * record's canonical scope matching canonical name + exact scope key at each\n * prefix, so an edge never depends on whether the target landed in the window.\n */\nclass WikilinkResolver {\n  /** exact `${scopeKey}\\u0000${lowerName}` → node, from the fetched window. */\n  readonly #inWindow = new Map<string, KnowledgeNode>();\n  readonly #windowIds = new Set<string>();\n  /** `${recordScopeKey}\\u0000${lowerName}` → fallback result (null = dangling). */\n  readonly #fallbackCache = new Map<string, KnowledgeNode | null>();\n  #fallbackLookups = 0;\n  readonly #store: KnowledgeStorage;\n  readonly #maxFallbackLookups: number;\n  readonly outOfWindow = new Map<string, { id: string; name: string }>();\n  readonly cappedNames: string[] = [];\n  #cappedSeen = new Set<string>();\n\n  constructor(store: KnowledgeStorage, nodes: KnowledgeNode[], maxFallbackLookups: number) {\n    this.#store = store;\n    this.#maxFallbackLookups = maxFallbackLookups;\n    for (const node of nodes) {\n      this.#inWindow.set(`${knowledgeScopeKey(node.scope)}\\u0000${node.name.trim().toLocaleLowerCase()}`, node);\n      this.#windowIds.add(node.id);\n    }\n  }\n\n  inWindowId(id: string): boolean {\n    return this.#windowIds.has(id);\n  }\n\n  /** Resolve a wikilink name from a knowledge record's scope. Returns the node or null (dangling/capped). */\n  async resolve(name: string, recordScope: KnowledgeScope): Promise<KnowledgeNode | null> {\n    const canonical = canonicalizeKnowledgeScope(recordScope);\n    const lower = name.trim().toLocaleLowerCase();\n    for (let length = canonical.length; length > 0; length--) {\n      const hit = this.#inWindow.get(`${knowledgeScopeKey(canonical.slice(0, length))}\\u0000${lower}`);\n      if (hit) return hit;\n    }\n    const cacheKey = `${knowledgeScopeKey(canonical)}\\u0000${lower}`;\n    if (this.#fallbackCache.has(cacheKey)) {\n      return this.#trackOutOfWindow(this.#fallbackCache.get(cacheKey) ?? null);\n    }\n    if (this.#fallbackLookups >= this.#maxFallbackLookups) {\n      if (!this.#cappedSeen.has(lower) && this.cappedNames.length < 100) {\n        this.#cappedSeen.add(lower);\n        this.cappedNames.push(name.trim());\n      } else if (!this.#cappedSeen.has(lower)) {\n        this.#cappedSeen.add(lower);\n      }\n      return null;\n    }\n    this.#fallbackLookups += 1;\n    let resolved: KnowledgeNode | null = null;\n    try {\n      resolved = await this.#store.resolveNode({ name, scope: canonical });\n    } catch {\n      resolved = null;\n    }\n    this.#fallbackCache.set(cacheKey, resolved);\n    return this.#trackOutOfWindow(resolved);\n  }\n\n  #trackOutOfWindow(node: KnowledgeNode | null): KnowledgeNode | null {\n    if (node && !this.#windowIds.has(node.id)) {\n      this.outOfWindow.set(node.id, { id: node.id, name: node.name });\n    }\n    return node;\n  }\n\n  get cappedCount(): number {\n    return this.#cappedSeen.size;\n  }\n}\n\nexport class KnowledgeRoutes extends Route<KnowledgeRoutesDeps> {\n  readonly #limits: KnowledgeRouteLimits;\n\n  constructor(deps: KnowledgeRoutesDeps) {\n    super(deps);\n    this.#limits = { ...DEFAULT_LIMITS, ...deps.limits };\n  }\n\n  /** Resolve the `(orgId, userId)` tenant or a ready-to-return error response. */\n  async #resolveTenant(c: Context): Promise<{ orgId: string; userId: string } | { response: Response }> {\n    await this.deps.auth.ensureUser(c);\n    const tenant = this.deps.auth.tenant(c);\n    if (!tenant) return { response: c.json({ error: 'unauthorized' }, 401) };\n    if (!tenant.orgId) {\n      return {\n        response: c.json(\n          { error: 'organization_required', message: 'The knowledge graph requires an organization.' },\n          403,\n        ),\n      };\n    }\n    return { orgId: tenant.orgId, userId: tenant.userId };\n  }\n\n  /**\n   * Resolve tenant + org-owned project + knowledge store + the active view's\n   * query scope. The ONE seam both endpoints share, so the default/thread view\n   * scope and the pin rungs cannot drift between them.\n   *\n   * threadId validation runs a single `listRecordsBySource` lookup with\n   * `limit: 1` AT THE CANDIDATE SCOPE `[org, resource, thread:<id>]` — the\n   * store's own visibility predicate is the authorization: the thread's own\n   * records (equal scope key) and its project/org captures (prefix) match, while\n   * a cross-org thread's records match nothing → zero rows → 404.\n   */\n  async #resolveView(c: Context): Promise<ResolvedView | { response: Response }> {\n    const tenant = await this.#resolveTenant(c);\n    if ('response' in tenant) return tenant;\n\n    const projectId = c.req.param('id');\n    if (!projectId || !UUID_RE.test(projectId)) {\n      return { response: c.json({ error: 'Project not found' }, 404) };\n    }\n    const { projects } = this.deps;\n    await projects.ensureReady();\n    const project = await projects.get({ orgId: tenant.orgId, id: projectId });\n    if (!project) {\n      return { response: c.json({ error: 'Project not found' }, 404) };\n    }\n\n    const store = await this.deps.knowledge();\n    if (!store) {\n      return {\n        response: c.json(\n          { error: 'knowledge_unavailable', message: 'The knowledge storage domain is not configured.' },\n          503,\n        ),\n      };\n    }\n\n    const defaultScope: KnowledgeScope = [`org:${tenant.orgId}`, `resource:${projectId}`];\n    const resourceRungScope = defaultScope;\n\n    const threadId = boundedThreadId(c.req.query('threadId'));\n    if (c.req.query('threadId') !== undefined && !threadId) {\n      return { response: c.json({ error: 'thread_not_found' }, 404) };\n    }\n    if (!threadId) {\n      return {\n        ...tenant,\n        factoryProjectId: projectId,\n        store,\n        view: 'project',\n        scope: defaultScope,\n        pinRungs: [{ rung: 'resource', scope: resourceRungScope }],\n      };\n    }\n\n    const candidateScope: KnowledgeScope = [...defaultScope, `thread:${threadId}`];\n    const probe = await store.knowledgeBySource({ sourceThreadId: threadId, scope: candidateScope, limit: 1 });\n    if (probe.records.length === 0) {\n      return { response: c.json({ error: 'thread_not_found' }, 404) };\n    }\n    return {\n      ...tenant,\n      factoryProjectId: projectId,\n      store,\n      view: 'thread',\n      threadId,\n      scope: candidateScope,\n      pinRungs: [\n        { rung: 'resource', scope: resourceRungScope },\n        { rung: 'thread', scope: candidateScope },\n      ],\n    };\n  }\n\n  /** Reserved `pinned` node ids at the active view's rungs (one exact-scope lookup per rung). */\n  async #pinnedNodeIds(view: ResolvedView): Promise<Array<{ rung: 'resource' | 'thread'; id: string }>> {\n    const out: Array<{ rung: 'resource' | 'thread'; id: string }> = [];\n    for (const { rung, scope } of view.pinRungs) {\n      const node = await view.store.getNodeByName({ name: PINNED_NODE_NAME, scope });\n      if (node && !node.mergedInto) out.push({ rung, id: node.id });\n    }\n    return out;\n  }\n\n  /** Non-deleted pinned records for the given pinned-node ids, visible in the view. */\n  async #pinnedRecords(\n    view: ResolvedView,\n    pinnedNodeIds: Array<{ rung: 'resource' | 'thread'; id: string }>,\n  ): Promise<Array<{ rung: 'resource' | 'thread'; record: KnowledgeRecord }>> {\n    const out: Array<{ rung: 'resource' | 'thread'; record: KnowledgeRecord }> = [];\n    for (const { rung, id } of pinnedNodeIds) {\n      const { records } = await view.store.listKnowledgeAbout({ node: id, scope: view.scope, limit: 200 });\n      for (const record of records) out.push({ rung, record });\n    }\n    return out;\n  }\n\n  routes(): ApiRoute[] {\n    return [\n      // ── Graph snapshot: nodes + derived edges, polled by the page ──────────\n      registerApiRoute('/web/factory/projects/:id/knowledge/graph', {\n        method: 'GET',\n        requiresAuth: false,\n        handler: async c => {\n          const view = await this.#resolveView(loose(c));\n          if ('response' in view) return view.response;\n          const { store, scope } = view;\n          const limits = this.#limits;\n\n          // Nodes, newest-first; +1 to detect truncation.\n          const fetched = await store.listNodes({ scope, limit: limits.maxNodes + 1 });\n          let truncated = fetched.length > limits.maxNodes;\n          const pinnedNodeIds = await this.#pinnedNodeIds(view);\n          const pinnedNodeIdSet = new Set(pinnedNodeIds.map(p => p.id));\n          const nodes = fetched.slice(0, limits.maxNodes).filter(node => !pinnedNodeIdSet.has(node.id));\n\n          // Record window: per-node owned records, then newest-first overall.\n          const recordWindow: KnowledgeRecord[] = [];\n          for (const node of nodes) {\n            if (recordWindow.length > limits.maxRecords) break;\n            const { records } = await store.listKnowledgeAbout({\n              node: node.id,\n              scope,\n              limit: limits.maxRecords + 1 - recordWindow.length,\n            });\n            recordWindow.push(...records);\n          }\n          // Record ids are ULIDs — descending id = newest-first.\n          recordWindow.sort((a, b) => b.id.localeCompare(a.id));\n          if (recordWindow.length > limits.maxRecords) {\n            truncated = true;\n            recordWindow.length = limits.maxRecords;\n          }\n\n          const resolver = new WikilinkResolver(store, nodes, limits.maxFallbackLookups);\n\n          // Edges: owner node (the record's parent link) → wikilinked node.\n          // Graph records: every windowed record with its in-window node set,\n          // owner first. The client renders dots, lines, or junctions by arity.\n          const edges: KnowledgeGraphEdge[] = [];\n          const graphRecords: KnowledgeGraphRecord[] = [];\n          const edgeSeen = new Set<string>();\n          const recordCounts = new Map<string, number>();\n          for (const record of recordWindow) {\n            recordCounts.set(record.node, (recordCounts.get(record.node) ?? 0) + 1);\n            const nodeIds = [record.node];\n            for (const name of parseKnowledgeWikilinks(record.text)) {\n              const target = await resolver.resolve(name, record.scope);\n              if (!target) continue;\n              if (target.id === record.node) continue;\n              if (!resolver.inWindowId(target.id)) continue;\n              if (!nodeIds.includes(target.id)) nodeIds.push(target.id);\n              const key = `${record.node}\\u0000${target.id}`;\n              if (edgeSeen.has(key)) continue;\n              edgeSeen.add(key);\n              edges.push({\n                id: `wikilink:${record.node}:${target.id}`,\n                source: record.node,\n                target: target.id,\n                type: 'wikilink',\n                recordId: record.id,\n              });\n            }\n            graphRecords.push({ id: record.id, nodeIds, pinned: false, text: truncateRecordText(record.text) });\n          }\n\n          // Pins mark relationships. The reserved owner node is omitted, so\n          // arity comes purely from wikilink targets.\n          const pinnedRecords = await this.#pinnedRecords(view, pinnedNodeIds);\n          const accented = new Set<string>();\n          for (const { record } of pinnedRecords) {\n            const targets: string[] = [];\n            for (const name of parseKnowledgeWikilinks(record.text)) {\n              const target = await resolver.resolve(name, record.scope);\n              if (target && resolver.inWindowId(target.id) && !targets.includes(target.id)) {\n                targets.push(target.id);\n              }\n            }\n            graphRecords.push({ id: record.id, nodeIds: targets, pinned: true, text: truncateRecordText(record.text) });\n            if (targets.length === 1) {\n              accented.add(targets[0]!);\n              continue;\n            }\n            for (let a = 0; a < targets.length; a += 1) {\n              for (let b = a + 1; b < targets.length; b += 1) {\n                const key = `${targets[a]}\\u0000${targets[b]}\\u0000pin`;\n                if (edgeSeen.has(key)) continue;\n                edgeSeen.add(key);\n                edges.push({\n                  id: `pin:${record.id}:${targets[a]}:${targets[b]}`,\n                  source: targets[a]!,\n                  target: targets[b]!,\n                  type: 'wikilink',\n                  recordId: record.id,\n                  pinned: true,\n                });\n              }\n            }\n          }\n          const pinCensus = {\n            resource: pinnedRecords.filter(p => p.rung === 'resource').length,\n            thread: view.view === 'thread' ? pinnedRecords.filter(p => p.rung === 'thread').length : null,\n          };\n\n          const activity = await store.listActivity({ scope, limit: 1 });\n\n          const payload: KnowledgeGraphPayload = {\n            view: view.view,\n            ...(view.threadId ? { threadId: view.threadId } : {}),\n            nodes: nodes.map(node => ({\n              id: node.id,\n              name: node.name,\n              kind: node.kind,\n              scope: node.scope,\n              rung: deepestRung(node.scope),\n              pinned: accented.has(node.id),\n              recordCount: recordCounts.get(node.id) ?? 0,\n              createdAt: node.createdAt.toISOString(),\n              updatedAt: node.updatedAt.toISOString(),\n            })),\n            edges,\n            records: graphRecords,\n            truncated,\n            outOfWindow: [...resolver.outOfWindow.values()],\n            unresolvedCapped: { count: resolver.cappedCount, names: resolver.cappedNames },\n            pinCensus,\n            version: activity[0]?.id ?? null,\n          };\n          return c.json(payload);\n        },\n      }),\n\n      // ── Node flyout payload: details + provenance-rich records ───────────────\n      registerApiRoute('/web/factory/projects/:id/knowledge/nodes/:nodeId', {\n        method: 'GET',\n        requiresAuth: false,\n        handler: async c => {\n          const view = await this.#resolveView(loose(c));\n          if ('response' in view) return view.response;\n          const { store, scope } = view;\n          const nodeId = loose(c).req.param('nodeId');\n          if (!nodeId || nodeId.length > 512) return c.json({ error: 'node_not_found' }, 404);\n\n          const node = await store.getNode(nodeId);\n          // getNode is a bare id lookup with no scope predicate. This explicit\n          // visibility check prevents an IDOR.\n          if (!node || !isKnowledgeScopeVisible(node.scope, scope)) {\n            return c.json({ error: 'node_not_found' }, 404);\n          }\n\n          const pinnedNodeIds = await this.#pinnedNodeIds(view);\n          const pinnedNodeIdSet = new Set(pinnedNodeIds.map(p => p.id));\n\n          const [owned, mentioning] = await Promise.all([\n            store.listKnowledgeAbout({ node: node.id, scope, limit: 200 }),\n            store.listKnowledgeMentioning({ node: node.id, scope, limit: 200 }),\n          ]);\n          const seen = new Set<string>();\n          const records: KnowledgeNodeRecordPayload[] = [];\n          const push = (record: KnowledgeRecord, relation: 'owned' | 'mentions') => {\n            if (seen.has(record.id)) return;\n            seen.add(record.id);\n            records.push({\n              id: record.id,\n              node: record.node,\n              relation,\n              text: record.text,\n              scope: record.scope,\n              rung: deepestRung(record.scope),\n              sourceThreadId: record.sourceThreadId,\n              capturedAt: record.capturedAt.toISOString(),\n              ...(record.when ? { when: record.when.toISOString() } : {}),\n              pinned: pinnedNodeIdSet.has(record.node),\n              ...(record.metadata ? { metadata: record.metadata } : {}),\n            });\n          };\n          // Owned first, newest-first within each group. Record ids are ULIDs.\n          for (const record of [...owned.records].sort((a, b) => b.id.localeCompare(a.id))) push(record, 'owned');\n          for (const record of [...mentioning.records].sort((a, b) => b.id.localeCompare(a.id))) {\n            push(record, 'mentions');\n          }\n\n          const payload: KnowledgeNodePayload = {\n            node: {\n              id: node.id,\n              name: node.name,\n              kind: node.kind,\n              content: node.content ?? '',\n              scope: node.scope,\n              rung: deepestRung(node.scope),\n              createdAt: node.createdAt.toISOString(),\n              updatedAt: node.updatedAt.toISOString(),\n            },\n            records,\n          };\n          return c.json(payload);\n        },\n      }),\n\n      // ── Recent activity feed for the live-arrival affordance ───────────────\n      registerApiRoute('/web/factory/projects/:id/knowledge/activity', {\n        method: 'GET',\n        requiresAuth: false,\n        handler: async c => {\n          const view = await this.#resolveView(loose(c));\n          if ('response' in view) return view.response;\n          const events = await view.store.listActivity({ scope: view.scope, limit: 100 });\n          return c.json({\n            events: events.map(event => ({\n              id: event.id,\n              action: event.action,\n              recordType: event.recordType,\n              recordId: event.recordId,\n              scope: event.scope,\n              ...(event.sourceThreadId ? { sourceThreadId: event.sourceThreadId } : {}),\n              createdAt: event.createdAt.toISOString(),\n            })),\n          });\n        },\n      }),\n    ];\n  }\n}\n"],"mappings":";;;;;AAkCA,MAAM,mBAAmB;;AAGzB,MAAM,oBAAoB;AAE1B,SAAS,mBAAmB,MAAsB;CAChD,OAAO,KAAK,SAAS,oBAAoB,GAAG,KAAK,MAAM,GAAG,oBAAoB,CAAC,EAAE,KAAK;AACxF;AAEA,MAAM,UAAU;AAYhB,MAAM,iBAAuC;CAAE,UAAU;CAAK,YAAY;CAAM,oBAAoB;AAAI;AAmHxG,SAAS,MAAM,GAAqB;CAClC,OAAO;AACT;AAEA,SAAS,YAAY,OAAsD;CACzE,IAAI,OAAsC;CAC1C,KAAK,MAAM,SAAS,OAAO;EACzB,MAAM,KAAK,MAAM,MAAM,GAAG,MAAM,QAAQ,GAAG,CAAC;EAC5C,IAAI,OAAO,UAAU,OAAO;EAC5B,IAAI,OAAO,YAAY,OAAO;CAChC;CACA,OAAO;AACT;AAEA,SAAS,gBAAgB,KAA6C;CACpE,IAAI,CAAC,KAAK,OAAO,KAAA;CACjB,MAAM,UAAU,IAAI,KAAK;CACzB,OAAO,QAAQ,SAAS,KAAK,QAAQ,UAAU,MAAM,UAAU,KAAA;AACjE;;;;;;;AAqBA,IAAM,mBAAN,MAAuB;;CAErB,4BAAqB,IAAI,IAA2B;CACpD,6BAAsB,IAAI,IAAY;;CAEtC,iCAA0B,IAAI,IAAkC;CAChE,mBAAmB;CACnB;CACA;CACA,8BAAuB,IAAI,IAA0C;CACrE,cAAiC,CAAC;CAClC,8BAAc,IAAI,IAAY;CAE9B,YAAY,OAAyB,OAAwB,oBAA4B;EACvF,KAAKG,SAAS;EACd,KAAKC,sBAAsB;EAC3B,KAAK,MAAM,QAAQ,OAAO;GACxB,KAAKJ,UAAU,IAAI,GAAG,kBAAkB,KAAK,KAAK,EAAE,QAAQ,KAAK,KAAK,KAAK,CAAC,CAAC,kBAAkB,KAAK,IAAI;GACxG,KAAKC,WAAW,IAAI,KAAK,EAAE;EAC7B;CACF;CAEA,WAAW,IAAqB;EAC9B,OAAO,KAAKA,WAAW,IAAI,EAAE;CAC/B;;CAGA,MAAM,QAAQ,MAAc,aAA4D;EACtF,MAAM,YAAY,2BAA2B,WAAW;EACxD,MAAM,QAAQ,KAAK,KAAK,CAAC,CAAC,kBAAkB;EAC5C,KAAK,IAAI,SAAS,UAAU,QAAQ,SAAS,GAAG,UAAU;GACxD,MAAM,MAAM,KAAKD,UAAU,IAAI,GAAG,kBAAkB,UAAU,MAAM,GAAG,MAAM,CAAC,EAAE,QAAQ,OAAO;GAC/F,IAAI,KAAK,OAAO;EAClB;EACA,MAAM,WAAW,GAAG,kBAAkB,SAAS,EAAE,QAAQ;EACzD,IAAI,KAAKE,eAAe,IAAI,QAAQ,GAClC,OAAO,KAAKG,kBAAkB,KAAKH,eAAe,IAAI,QAAQ,KAAK,IAAI;EAEzE,IAAI,KAAKI,oBAAoB,KAAKF,qBAAqB;GACrD,IAAI,CAAC,KAAKG,YAAY,IAAI,KAAK,KAAK,KAAK,YAAY,SAAS,KAAK;IACjE,KAAKA,YAAY,IAAI,KAAK;IAC1B,KAAK,YAAY,KAAK,KAAK,KAAK,CAAC;GACnC,OAAO,IAAI,CAAC,KAAKA,YAAY,IAAI,KAAK,GACpC,KAAKA,YAAY,IAAI,KAAK;GAE5B,OAAO;EACT;EACA,KAAKD,oBAAoB;EACzB,IAAI,WAAiC;EACrC,IAAI;GACF,WAAW,MAAM,KAAKH,OAAO,YAAY;IAAE;IAAM,OAAO;GAAU,CAAC;EACrE,QAAQ;GACN,WAAW;EACb;EACA,KAAKD,eAAe,IAAI,UAAU,QAAQ;EAC1C,OAAO,KAAKG,kBAAkB,QAAQ;CACxC;CAEA,kBAAkB,MAAkD;EAClE,IAAI,QAAQ,CAAC,KAAKJ,WAAW,IAAI,KAAK,EAAE,GACtC,KAAK,YAAY,IAAI,KAAK,IAAI;GAAE,IAAI,KAAK;GAAI,MAAM,KAAK;EAAK,CAAC;EAEhE,OAAO;CACT;CAEA,IAAI,cAAsB;EACxB,OAAO,KAAKM,YAAY;CAC1B;AACF;AAEA,IAAa,kBAAb,cAAqC,MAA2B;CAC9D;CAEA,YAAY,MAA2B;EACrC,MAAM,IAAI;EACV,KAAKC,UAAU;GAAE,GAAG;GAAgB,GAAG,KAAK;EAAO;CACrD;;CAGA,MAAMC,eAAe,GAAiF;EACpG,MAAM,KAAK,KAAK,KAAK,WAAW,CAAC;EACjC,MAAM,SAAS,KAAK,KAAK,KAAK,OAAO,CAAC;EACtC,IAAI,CAAC,QAAQ,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,eAAe,GAAG,GAAG,EAAE;EACvE,IAAI,CAAC,OAAO,OACV,OAAO,EACL,UAAU,EAAE,KACV;GAAE,OAAO;GAAyB,SAAS;EAAgD,GAC3F,GACF,EACF;EAEF,OAAO;GAAE,OAAO,OAAO;GAAO,QAAQ,OAAO;EAAO;CACtD;;;;;;;;;;;;CAaA,MAAMC,aAAa,GAA4D;EAC7E,MAAM,SAAS,MAAM,KAAKD,eAAe,CAAC;EAC1C,IAAI,cAAc,QAAQ,OAAO;EAEjC,MAAM,YAAY,EAAE,IAAI,MAAM,IAAI;EAClC,IAAI,CAAC,aAAa,CAAC,QAAQ,KAAK,SAAS,GACvC,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG,EAAE;EAEjE,MAAM,EAAE,aAAa,KAAK;EAC1B,MAAM,SAAS,YAAY;EAE3B,IAAI,CAAC,MADiB,SAAS,IAAI;GAAE,OAAO,OAAO;GAAO,IAAI;EAAU,CAAC,GAEvE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG,EAAE;EAGjE,MAAM,QAAQ,MAAM,KAAK,KAAK,UAAU;EACxC,IAAI,CAAC,OACH,OAAO,EACL,UAAU,EAAE,KACV;GAAE,OAAO;GAAyB,SAAS;EAAkD,GAC7F,GACF,EACF;EAGF,MAAM,eAA+B,CAAC,OAAO,OAAO,SAAS,YAAY,WAAW;EACpF,MAAM,oBAAoB;EAE1B,MAAM,WAAW,gBAAgB,EAAE,IAAI,MAAM,UAAU,CAAC;EACxD,IAAI,EAAE,IAAI,MAAM,UAAU,MAAM,KAAA,KAAa,CAAC,UAC5C,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,mBAAmB,GAAG,GAAG,EAAE;EAEhE,IAAI,CAAC,UACH,OAAO;GACL,GAAG;GACH,kBAAkB;GAClB;GACA,MAAM;GACN,OAAO;GACP,UAAU,CAAC;IAAE,MAAM;IAAY,OAAO;GAAkB,CAAC;EAC3D;EAGF,MAAM,iBAAiC,CAAC,GAAG,cAAc,UAAU,UAAU;EAE7E,KAAI,MADgB,MAAM,kBAAkB;GAAE,gBAAgB;GAAU,OAAO;GAAgB,OAAO;EAAE,CAAC,EAAA,CAC/F,QAAQ,WAAW,GAC3B,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,mBAAmB,GAAG,GAAG,EAAE;EAEhE,OAAO;GACL,GAAG;GACH,kBAAkB;GAClB;GACA,MAAM;GACN;GACA,OAAO;GACP,UAAU,CACR;IAAE,MAAM;IAAY,OAAO;GAAkB,GAC7C;IAAE,MAAM;IAAU,OAAO;GAAe,CAC1C;EACF;CACF;;CAGA,MAAME,eAAe,MAAiF;EACpG,MAAM,MAA0D,CAAC;EACjE,KAAK,MAAM,EAAE,MAAM,WAAW,KAAK,UAAU;GAC3C,MAAM,OAAO,MAAM,KAAK,MAAM,cAAc;IAAE,MAAM;IAAkB;GAAM,CAAC;GAC7E,IAAI,QAAQ,CAAC,KAAK,YAAY,IAAI,KAAK;IAAE;IAAM,IAAI,KAAK;GAAG,CAAC;EAC9D;EACA,OAAO;CACT;;CAGA,MAAMC,eACJ,MACA,eAC0E;EAC1E,MAAM,MAAuE,CAAC;EAC9E,KAAK,MAAM,EAAE,MAAM,QAAQ,eAAe;GACxC,MAAM,EAAE,YAAY,MAAM,KAAK,MAAM,mBAAmB;IAAE,MAAM;IAAI,OAAO,KAAK;IAAO,OAAO;GAAI,CAAC;GACnG,KAAK,MAAM,UAAU,SAAS,IAAI,KAAK;IAAE;IAAM;GAAO,CAAC;EACzD;EACA,OAAO;CACT;CAEA,SAAqB;EACnB,OAAO;GAEL,iBAAiB,6CAA6C;IAC5D,QAAQ;IACR,cAAc;IACd,SAAS,OAAM,MAAK;KAClB,MAAM,OAAO,MAAM,KAAKF,aAAa,MAAM,CAAC,CAAC;KAC7C,IAAI,cAAc,MAAM,OAAO,KAAK;KACpC,MAAM,EAAE,OAAO,UAAU;KACzB,MAAM,SAAS,KAAKF;KAGpB,MAAM,UAAU,MAAM,MAAM,UAAU;MAAE;MAAO,OAAO,OAAO,WAAW;KAAE,CAAC;KAC3E,IAAI,YAAY,QAAQ,SAAS,OAAO;KACxC,MAAM,gBAAgB,MAAM,KAAKG,eAAe,IAAI;KACpD,MAAM,kBAAkB,IAAI,IAAI,cAAc,KAAI,MAAK,EAAE,EAAE,CAAC;KAC5D,MAAM,QAAQ,QAAQ,MAAM,GAAG,OAAO,QAAQ,CAAC,CAAC,QAAO,SAAQ,CAAC,gBAAgB,IAAI,KAAK,EAAE,CAAC;KAG5F,MAAM,eAAkC,CAAC;KACzC,KAAK,MAAM,QAAQ,OAAO;MACxB,IAAI,aAAa,SAAS,OAAO,YAAY;MAC7C,MAAM,EAAE,YAAY,MAAM,MAAM,mBAAmB;OACjD,MAAM,KAAK;OACX;OACA,OAAO,OAAO,aAAa,IAAI,aAAa;MAC9C,CAAC;MACD,aAAa,KAAK,GAAG,OAAO;KAC9B;KAEA,aAAa,MAAM,GAAG,MAAM,EAAE,GAAG,cAAc,EAAE,EAAE,CAAC;KACpD,IAAI,aAAa,SAAS,OAAO,YAAY;MAC3C,YAAY;MACZ,aAAa,SAAS,OAAO;KAC/B;KAEA,MAAM,WAAW,IAAI,iBAAiB,OAAO,OAAO,OAAO,kBAAkB;KAK7E,MAAM,QAA8B,CAAC;KACrC,MAAM,eAAuC,CAAC;KAC9C,MAAM,2BAAW,IAAI,IAAY;KACjC,MAAM,+BAAe,IAAI,IAAoB;KAC7C,KAAK,MAAM,UAAU,cAAc;MACjC,aAAa,IAAI,OAAO,OAAO,aAAa,IAAI,OAAO,IAAI,KAAK,KAAK,CAAC;MACtE,MAAM,UAAU,CAAC,OAAO,IAAI;MAC5B,KAAK,MAAM,QAAQ,wBAAwB,OAAO,IAAI,GAAG;OACvD,MAAM,SAAS,MAAM,SAAS,QAAQ,MAAM,OAAO,KAAK;OACxD,IAAI,CAAC,QAAQ;OACb,IAAI,OAAO,OAAO,OAAO,MAAM;OAC/B,IAAI,CAAC,SAAS,WAAW,OAAO,EAAE,GAAG;OACrC,IAAI,CAAC,QAAQ,SAAS,OAAO,EAAE,GAAG,QAAQ,KAAK,OAAO,EAAE;OACxD,MAAM,MAAM,GAAG,OAAO,KAAK,QAAQ,OAAO;OAC1C,IAAI,SAAS,IAAI,GAAG,GAAG;OACvB,SAAS,IAAI,GAAG;OAChB,MAAM,KAAK;QACT,IAAI,YAAY,OAAO,KAAK,GAAG,OAAO;QACtC,QAAQ,OAAO;QACf,QAAQ,OAAO;QACf,MAAM;QACN,UAAU,OAAO;OACnB,CAAC;MACH;MACA,aAAa,KAAK;OAAE,IAAI,OAAO;OAAI;OAAS,QAAQ;OAAO,MAAM,mBAAmB,OAAO,IAAI;MAAE,CAAC;KACpG;KAIA,MAAM,gBAAgB,MAAM,KAAKC,eAAe,MAAM,aAAa;KACnE,MAAM,2BAAW,IAAI,IAAY;KACjC,KAAK,MAAM,EAAE,YAAY,eAAe;MACtC,MAAM,UAAoB,CAAC;MAC3B,KAAK,MAAM,QAAQ,wBAAwB,OAAO,IAAI,GAAG;OACvD,MAAM,SAAS,MAAM,SAAS,QAAQ,MAAM,OAAO,KAAK;OACxD,IAAI,UAAU,SAAS,WAAW,OAAO,EAAE,KAAK,CAAC,QAAQ,SAAS,OAAO,EAAE,GACzE,QAAQ,KAAK,OAAO,EAAE;MAE1B;MACA,aAAa,KAAK;OAAE,IAAI,OAAO;OAAI,SAAS;OAAS,QAAQ;OAAM,MAAM,mBAAmB,OAAO,IAAI;MAAE,CAAC;MAC1G,IAAI,QAAQ,WAAW,GAAG;OACxB,SAAS,IAAI,QAAQ,EAAG;OACxB;MACF;MACA,KAAK,IAAI,IAAI,GAAG,IAAI,QAAQ,QAAQ,KAAK,GACvC,KAAK,IAAI,IAAI,IAAI,GAAG,IAAI,QAAQ,QAAQ,KAAK,GAAG;OAC9C,MAAM,MAAM,GAAG,QAAQ,GAAG,QAAQ,QAAQ,GAAG;OAC7C,IAAI,SAAS,IAAI,GAAG,GAAG;OACvB,SAAS,IAAI,GAAG;OAChB,MAAM,KAAK;QACT,IAAI,OAAO,OAAO,GAAG,GAAG,QAAQ,GAAG,GAAG,QAAQ;QAC9C,QAAQ,QAAQ;QAChB,QAAQ,QAAQ;QAChB,MAAM;QACN,UAAU,OAAO;QACjB,QAAQ;OACV,CAAC;MACH;KAEJ;KACA,MAAM,YAAY;MAChB,UAAU,cAAc,QAAO,MAAK,EAAE,SAAS,UAAU,CAAC,CAAC;MAC3D,QAAQ,KAAK,SAAS,WAAW,cAAc,QAAO,MAAK,EAAE,SAAS,QAAQ,CAAC,CAAC,SAAS;KAC3F;KAEA,MAAM,WAAW,MAAM,MAAM,aAAa;MAAE;MAAO,OAAO;KAAE,CAAC;KAE7D,MAAM,UAAiC;MACrC,MAAM,KAAK;MACX,GAAI,KAAK,WAAW,EAAE,UAAU,KAAK,SAAS,IAAI,CAAC;MACnD,OAAO,MAAM,KAAI,UAAS;OACxB,IAAI,KAAK;OACT,MAAM,KAAK;OACX,MAAM,KAAK;OACX,OAAO,KAAK;OACZ,MAAM,YAAY,KAAK,KAAK;OAC5B,QAAQ,SAAS,IAAI,KAAK,EAAE;OAC5B,aAAa,aAAa,IAAI,KAAK,EAAE,KAAK;OAC1C,WAAW,KAAK,UAAU,YAAY;OACtC,WAAW,KAAK,UAAU,YAAY;MACxC,EAAE;MACF;MACA,SAAS;MACT;MACA,aAAa,CAAC,GAAG,SAAS,YAAY,OAAO,CAAC;MAC9C,kBAAkB;OAAE,OAAO,SAAS;OAAa,OAAO,SAAS;MAAY;MAC7E;MACA,SAAS,SAAS,EAAE,EAAE,MAAM;KAC9B;KACA,OAAO,EAAE,KAAK,OAAO;IACvB;GACF,CAAC;GAGD,iBAAiB,qDAAqD;IACpE,QAAQ;IACR,cAAc;IACd,SAAS,OAAM,MAAK;KAClB,MAAM,OAAO,MAAM,KAAKF,aAAa,MAAM,CAAC,CAAC;KAC7C,IAAI,cAAc,MAAM,OAAO,KAAK;KACpC,MAAM,EAAE,OAAO,UAAU;KACzB,MAAM,SAAS,MAAM,CAAC,CAAC,CAAC,IAAI,MAAM,QAAQ;KAC1C,IAAI,CAAC,UAAU,OAAO,SAAS,KAAK,OAAO,EAAE,KAAK,EAAE,OAAO,iBAAiB,GAAG,GAAG;KAElF,MAAM,OAAO,MAAM,MAAM,QAAQ,MAAM;KAGvC,IAAI,CAAC,QAAQ,CAAC,wBAAwB,KAAK,OAAO,KAAK,GACrD,OAAO,EAAE,KAAK,EAAE,OAAO,iBAAiB,GAAG,GAAG;KAGhD,MAAM,gBAAgB,MAAM,KAAKC,eAAe,IAAI;KACpD,MAAM,kBAAkB,IAAI,IAAI,cAAc,KAAI,MAAK,EAAE,EAAE,CAAC;KAE5D,MAAM,CAAC,OAAO,cAAc,MAAM,QAAQ,IAAI,CAC5C,MAAM,mBAAmB;MAAE,MAAM,KAAK;MAAI;MAAO,OAAO;KAAI,CAAC,GAC7D,MAAM,wBAAwB;MAAE,MAAM,KAAK;MAAI;MAAO,OAAO;KAAI,CAAC,CACpE,CAAC;KACD,MAAM,uBAAO,IAAI,IAAY;KAC7B,MAAM,UAAwC,CAAC;KAC/C,MAAM,QAAQ,QAAyB,aAAmC;MACxE,IAAI,KAAK,IAAI,OAAO,EAAE,GAAG;MACzB,KAAK,IAAI,OAAO,EAAE;MAClB,QAAQ,KAAK;OACX,IAAI,OAAO;OACX,MAAM,OAAO;OACb;OACA,MAAM,OAAO;OACb,OAAO,OAAO;OACd,MAAM,YAAY,OAAO,KAAK;OAC9B,gBAAgB,OAAO;OACvB,YAAY,OAAO,WAAW,YAAY;OAC1C,GAAI,OAAO,OAAO,EAAE,MAAM,OAAO,KAAK,YAAY,EAAE,IAAI,CAAC;OACzD,QAAQ,gBAAgB,IAAI,OAAO,IAAI;OACvC,GAAI,OAAO,WAAW,EAAE,UAAU,OAAO,SAAS,IAAI,CAAC;MACzD,CAAC;KACH;KAEA,KAAK,MAAM,UAAU,CAAC,GAAG,MAAM,OAAO,CAAC,CAAC,MAAM,GAAG,MAAM,EAAE,GAAG,cAAc,EAAE,EAAE,CAAC,GAAG,KAAK,QAAQ,OAAO;KACtG,KAAK,MAAM,UAAU,CAAC,GAAG,WAAW,OAAO,CAAC,CAAC,MAAM,GAAG,MAAM,EAAE,GAAG,cAAc,EAAE,EAAE,CAAC,GAClF,KAAK,QAAQ,UAAU;KAGzB,MAAM,UAAgC;MACpC,MAAM;OACJ,IAAI,KAAK;OACT,MAAM,KAAK;OACX,MAAM,KAAK;OACX,SAAS,KAAK,WAAW;OACzB,OAAO,KAAK;OACZ,MAAM,YAAY,KAAK,KAAK;OAC5B,WAAW,KAAK,UAAU,YAAY;OACtC,WAAW,KAAK,UAAU,YAAY;MACxC;MACA;KACF;KACA,OAAO,EAAE,KAAK,OAAO;IACvB;GACF,CAAC;GAGD,iBAAiB,gDAAgD;IAC/D,QAAQ;IACR,cAAc;IACd,SAAS,OAAM,MAAK;KAClB,MAAM,OAAO,MAAM,KAAKD,aAAa,MAAM,CAAC,CAAC;KAC7C,IAAI,cAAc,MAAM,OAAO,KAAK;KACpC,MAAM,SAAS,MAAM,KAAK,MAAM,aAAa;MAAE,OAAO,KAAK;MAAO,OAAO;KAAI,CAAC;KAC9E,OAAO,EAAE,KAAK,EACZ,QAAQ,OAAO,KAAI,WAAU;MAC3B,IAAI,MAAM;MACV,QAAQ,MAAM;MACd,YAAY,MAAM;MAClB,UAAU,MAAM;MAChB,OAAO,MAAM;MACb,GAAI,MAAM,iBAAiB,EAAE,gBAAgB,MAAM,eAAe,IAAI,CAAC;MACvE,WAAW,MAAM,UAAU,YAAY;KACzC,EAAE,EACJ,CAAC;IACH;GACF,CAAC;EACH;CACF;AACF"}

package/dist/routes/projects.d.ts

@@ -1,7 +1,7 @@
 import type { ApiRoute } from '@mastra/core/server';
 import type { SessionRetirementCoordinator } from '../sandbox/session-retirement.js';
 import type { FactoryProjectsStorage } from '../storage/domains/projects/base.js';
-import type { SourceControlStorage } from '../storage/domains/source-control/base.js';
+import type { ProjectRepository, SourceControlStorage } from '../storage/domains/source-control/base.js';
 import type { RouteDependencies } from './route.js';
 import { Route } from './route.js';
 export interface ProjectRoutesDeps extends RouteDependencies {
@@ -11,6 +11,14 @@ export interface ProjectRoutesDeps extends RouteDependencies {
     sourceControl: SourceControlStorage;
     /** Integration ids allowed as source-control connection targets. */
     versionControlIntegrationIds?: string[];
+    /**
+     * Fire-and-forget hook invoked after a repository is linked to a project —
+     * kicks the initial base-checkpoint build. Must never throw.
+     */
+    onProjectRepositoryLinked?: (args: {
+        orgId: string;
+        projectRepository: ProjectRepository;
+    }) => void;
     /** Shared lifecycle for retiring sessions before their owning records are deleted. */
     sessionRetirement?: SessionRetirementCoordinator;
 }

package/dist/routes/projects.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"projects.d.ts","sourceRoot":"","sources":["../../src/routes/projects.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAIpD,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,kCAAkC,CAAC;AACrF,OAAO,KAAK,EAEV,sBAAsB,EAEvB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,KAAK,EAEV,oBAAoB,EAGrB,MAAM,2CAA2C,CAAC;AACnD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AACpD,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAkKnC,MAAM,WAAW,iBAAkB,SAAQ,iBAAiB;IAC1D,wDAAwD;IACxD,QAAQ,EAAE,sBAAsB,CAAC;IACjC,2EAA2E;IAC3E,aAAa,EAAE,oBAAoB,CAAC;IACpC,oEAAoE;IACpE,4BAA4B,CAAC,EAAE,MAAM,EAAE,CAAC;IACxC,sFAAsF;IACtF,iBAAiB,CAAC,EAAE,4BAA4B,CAAC;CAClD;AAED,qBAAa,aAAc,SAAQ,KAAK,CAAC,iBAAiB,CAAC;;gBAG7C,IAAI,EAAE,iBAAiB;IA8EnC,MAAM,IAAI,QAAQ,EAAE;CAuPrB"}
+{"version":3,"file":"projects.d.ts","sourceRoot":"","sources":["../../src/routes/projects.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAIpD,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,kCAAkC,CAAC;AACrF,OAAO,KAAK,EAEV,sBAAsB,EAEvB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,KAAK,EACV,iBAAiB,EACjB,oBAAoB,EAGrB,MAAM,2CAA2C,CAAC;AACnD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AACpD,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAkKnC,MAAM,WAAW,iBAAkB,SAAQ,iBAAiB;IAC1D,wDAAwD;IACxD,QAAQ,EAAE,sBAAsB,CAAC;IACjC,2EAA2E;IAC3E,aAAa,EAAE,oBAAoB,CAAC;IACpC,oEAAoE;IACpE,4BAA4B,CAAC,EAAE,MAAM,EAAE,CAAC;IACxC;;;OAGG;IACH,yBAAyB,CAAC,EAAE,CAAC,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,iBAAiB,EAAE,iBAAiB,CAAA;KAAE,KAAK,IAAI,CAAC;IACpG,sFAAsF;IACtF,iBAAiB,CAAC,EAAE,4BAA4B,CAAC;CAClD;AAED,qBAAa,aAAc,SAAQ,KAAK,CAAC,iBAAiB,CAAC;;gBAG7C,IAAI,EAAE,iBAAiB;IA8EnC,MAAM,IAAI,QAAQ,EAAE;CA4PrB"}

package/dist/routes/projects.js

@@ -434,6 +434,14 @@ var ProjectRoutes = class extends Route {
 						createdByUserId: tenant.userId,
 						...input
 					});
+					try {
+						this.deps.onProjectRepositoryLinked?.({
+							orgId: tenant.orgId,
+							projectRepository
+						});
+					} catch (error) {
+						console.warn("[factory] onProjectRepositoryLinked failed after a successful repository link:", error);
+					}
 					return context.json({ projectRepository: await this.#repositoryPayload(found.handle, tenant.orgId, projectRepository) }, 201);
 				}
 			}),

package/dist/routes/projects.js.map

@@ -1 +1 @@
-{"version":3,"file":"projects.js","names":["#versionControlIntegrationIds","#projects","#sourceControl","#handles","#project","#findConnection","#findProjectRepository","#repositoryPayload","#retireProjectRepositorySessions","#resolveTenant"],"sources":["../../src/routes/projects.ts"],"sourcesContent":["import type { ApiRoute } from '@mastra/core/server';\nimport { registerApiRoute } from '@mastra/core/server';\nimport type { Context } from 'hono';\n\nimport type { SessionRetirementCoordinator } from '../sandbox/session-retirement.js';\nimport type {\n  CreateFactoryProjectInput,\n  FactoryProjectsStorage,\n  UpdateFactoryProjectInput,\n} from '../storage/domains/projects/base.js';\nimport type {\n  ProjectRepository,\n  SourceControlStorage,\n  SourceControlStorageHandle,\n  UpdateProjectRepositoryInput,\n} from '../storage/domains/source-control/base.js';\nimport type { RouteDependencies } from './route.js';\nimport { Route } from './route.js';\n\nconst UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;\nconst MAX_NAME_LENGTH = 200;\nconst MAX_DESCRIPTION_LENGTH = 2_000;\nconst MAX_REPOSITORY_COMMAND_LENGTH = 2_000;\nconst MAX_BRANCH_LENGTH = 255;\nconst MAX_SANDBOX_PROVIDER_LENGTH = 100;\nconst MAX_SANDBOX_WORKDIR_LENGTH = 1_000;\nconst CONTROL_CHAR_RE = /[\\0-\\x08\\x0b\\x0c\\x0e-\\x1f\\x7f]/;\n\nfunction loose(context: unknown): Context {\n  return context as Context;\n}\n\nasync function readJson(context: Context): Promise<unknown | undefined> {\n  try {\n    return await context.req.json();\n  } catch {\n    return undefined;\n  }\n}\n\nfunction parseCreateInput(value: unknown): CreateFactoryProjectInput | null {\n  if (!value || typeof value !== 'object') return null;\n  const input = value as Record<string, unknown>;\n  if (typeof input.name !== 'string') return null;\n  const name = input.name.trim();\n  if (!name || name.length > MAX_NAME_LENGTH) return null;\n  if (input.description !== undefined && input.description !== null && typeof input.description !== 'string')\n    return null;\n  const description = typeof input.description === 'string' ? input.description.trim() || null : null;\n  if (description && description.length > MAX_DESCRIPTION_LENGTH) return null;\n  return { name, description };\n}\n\nfunction parseUpdateInput(value: unknown): UpdateFactoryProjectInput | null {\n  if (!value || typeof value !== 'object') return null;\n  const input = value as Record<string, unknown>;\n  const patch: UpdateFactoryProjectInput = {};\n  if (input.name !== undefined) {\n    if (typeof input.name !== 'string') return null;\n    const name = input.name.trim();\n    if (!name || name.length > MAX_NAME_LENGTH) return null;\n    patch.name = name;\n  }\n  if (input.description !== undefined) {\n    if (input.description !== null && typeof input.description !== 'string') return null;\n    const description = typeof input.description === 'string' ? input.description.trim() || null : null;\n    if (description && description.length > MAX_DESCRIPTION_LENGTH) return null;\n    patch.description = description;\n  }\n  if (input.defaultModelId !== undefined) {\n    const defaultModelId = parseOptionalString(input.defaultModelId, { maxLength: MAX_NAME_LENGTH, nullable: true });\n    if (defaultModelId === false) return null;\n    patch.defaultModelId = defaultModelId ?? null;\n  }\n  if (input.slackWorkItemsEnabled !== undefined) {\n    if (typeof input.slackWorkItemsEnabled !== 'boolean') return null;\n    patch.slackWorkItemsEnabled = input.slackWorkItemsEnabled;\n  }\n  if (input.autoRunEnabled !== undefined) {\n    if (typeof input.autoRunEnabled !== 'boolean') return null;\n    patch.autoRunEnabled = input.autoRunEnabled;\n  }\n  return Object.keys(patch).length > 0 ? patch : null;\n}\n\nfunction parseConnectionInput(value: unknown): { integrationId: string; installationId: string } | null {\n  if (!value || typeof value !== 'object') return null;\n  const input = value as Record<string, unknown>;\n  if (typeof input.integrationId !== 'string' || !input.integrationId.trim()) return null;\n  if (typeof input.installationId !== 'string' || !UUID_RE.test(input.installationId)) return null;\n  return { integrationId: input.integrationId.trim(), installationId: input.installationId };\n}\n\nfunction parseOptionalString(\n  value: unknown,\n  { maxLength, nullable = false }: { maxLength: number; nullable?: boolean },\n): string | null | undefined | false {\n  if (value === undefined) return undefined;\n  if (value === null) return nullable ? null : false;\n  if (typeof value !== 'string') return false;\n  const normalized = value.trim();\n  if (!normalized) return nullable ? null : false;\n  if (normalized.length > maxLength || CONTROL_CHAR_RE.test(normalized)) return false;\n  return normalized;\n}\n\nfunction parseRepositoryLinkInput(value: unknown): {\n  repositoryId: string;\n  branch: string | null;\n  sandboxProvider: string;\n  sandboxWorkdir: string;\n  setupCommand: string | null;\n  teardownCommand: string | null;\n} | null {\n  if (!value || typeof value !== 'object') return null;\n  const input = value as Record<string, unknown>;\n  if (typeof input.repositoryId !== 'string' || !UUID_RE.test(input.repositoryId)) return null;\n  const branch = parseOptionalString(input.branch, { maxLength: MAX_BRANCH_LENGTH, nullable: true });\n  const sandboxProvider = parseOptionalString(input.sandboxProvider, { maxLength: MAX_SANDBOX_PROVIDER_LENGTH });\n  const sandboxWorkdir = parseOptionalString(input.sandboxWorkdir, { maxLength: MAX_SANDBOX_WORKDIR_LENGTH });\n  const setupCommand = parseOptionalString(input.setupCommand, {\n    maxLength: MAX_REPOSITORY_COMMAND_LENGTH,\n    nullable: true,\n  });\n  const teardownCommand = parseOptionalString(input.teardownCommand, {\n    maxLength: MAX_REPOSITORY_COMMAND_LENGTH,\n    nullable: true,\n  });\n  if (\n    branch === false ||\n    typeof sandboxProvider !== 'string' ||\n    typeof sandboxWorkdir !== 'string' ||\n    setupCommand === false ||\n    teardownCommand === false\n  )\n    return null;\n  return {\n    repositoryId: input.repositoryId,\n    branch: branch ?? null,\n    sandboxProvider,\n    sandboxWorkdir,\n    setupCommand: setupCommand ?? null,\n    teardownCommand: teardownCommand ?? null,\n  };\n}\n\nfunction parseRepositoryUpdateInput(value: unknown): UpdateProjectRepositoryInput | null {\n  if (!value || typeof value !== 'object') return null;\n  const input = value as Record<string, unknown>;\n  const patch: UpdateProjectRepositoryInput = {};\n  const branch = parseOptionalString(input.branch, { maxLength: MAX_BRANCH_LENGTH, nullable: true });\n  const sandboxProvider = parseOptionalString(input.sandboxProvider, { maxLength: MAX_SANDBOX_PROVIDER_LENGTH });\n  const sandboxWorkdir = parseOptionalString(input.sandboxWorkdir, { maxLength: MAX_SANDBOX_WORKDIR_LENGTH });\n  const setupCommand = parseOptionalString(input.setupCommand, {\n    maxLength: MAX_REPOSITORY_COMMAND_LENGTH,\n    nullable: true,\n  });\n  const teardownCommand = parseOptionalString(input.teardownCommand, {\n    maxLength: MAX_REPOSITORY_COMMAND_LENGTH,\n    nullable: true,\n  });\n  if (\n    branch === false ||\n    sandboxProvider === false ||\n    sandboxProvider === null ||\n    sandboxWorkdir === false ||\n    sandboxWorkdir === null ||\n    setupCommand === false ||\n    teardownCommand === false\n  )\n    return null;\n  if (branch !== undefined) patch.branch = branch;\n  if (sandboxProvider !== undefined) patch.sandboxProvider = sandboxProvider;\n  if (sandboxWorkdir !== undefined) patch.sandboxWorkdir = sandboxWorkdir;\n  if (setupCommand !== undefined) patch.setupCommand = setupCommand;\n  if (teardownCommand !== undefined) patch.teardownCommand = teardownCommand;\n  return Object.keys(patch).length > 0 ? patch : null;\n}\n\nexport interface ProjectRoutesDeps extends RouteDependencies {\n  /** Factory projects domain backing the CRUD surface. */\n  projects: FactoryProjectsStorage;\n  /** Source-control domain the connection/repository routes fan out over. */\n  sourceControl: SourceControlStorage;\n  /** Integration ids allowed as source-control connection targets. */\n  versionControlIntegrationIds?: string[];\n  /** Shared lifecycle for retiring sessions before their owning records are deleted. */\n  sessionRetirement?: SessionRetirementCoordinator;\n}\n\nexport class ProjectRoutes extends Route<ProjectRoutesDeps> {\n  readonly #versionControlIntegrationIds: Set<string>;\n\n  constructor(deps: ProjectRoutesDeps) {\n    super(deps);\n    this.#versionControlIntegrationIds = new Set(deps.versionControlIntegrationIds ?? []);\n  }\n\n  async #projects(): Promise<FactoryProjectsStorage> {\n    await this.deps.projects.ensureReady();\n    return this.deps.projects;\n  }\n\n  async #sourceControl(): Promise<SourceControlStorage> {\n    await this.deps.sourceControl.ensureReady();\n    return this.deps.sourceControl;\n  }\n\n  async #handles(): Promise<SourceControlStorageHandle[]> {\n    const storage = await this.#sourceControl();\n    return [...this.#versionControlIntegrationIds].map(integrationId => storage.forIntegration(integrationId));\n  }\n\n  async #project(orgId: string, id: string) {\n    return (await this.#projects()).get({ orgId, id });\n  }\n\n  async #findConnection({ orgId, projectId, id }: { orgId: string; projectId: string; id: string }) {\n    for (const handle of await this.#handles()) {\n      const connection = await handle.connections.get({ orgId, id });\n      if (connection?.factoryProjectId === projectId) return { handle, connection };\n    }\n    return null;\n  }\n\n  async #findProjectRepository({ orgId, projectId, id }: { orgId: string; projectId: string; id: string }) {\n    for (const handle of await this.#handles()) {\n      const projectRepository = await handle.projectRepositories.get({ orgId, id });\n      if (!projectRepository) continue;\n      const connection = await handle.connections.get({ orgId, id: projectRepository.connectionId });\n      if (connection?.factoryProjectId === projectId) return { handle, connection, projectRepository };\n    }\n    return null;\n  }\n\n  async #repositoryPayload(handle: SourceControlStorageHandle, orgId: string, projectRepository: ProjectRepository) {\n    const repository = await handle.repositories.get({ orgId, id: projectRepository.repositoryId });\n    return { ...projectRepository, repository };\n  }\n\n  async #retireProjectRepositorySessions(\n    handle: SourceControlStorageHandle,\n    orgId: string,\n    projectRepositoryId: string,\n  ): Promise<boolean> {\n    const sessions = await handle.sessions.listByProjectRepository({ projectRepositoryId });\n    if (sessions.length === 0) return true;\n    if (!this.deps.sessionRetirement) return false;\n    await this.deps.sessionRetirement.retireProjectRepositorySessions({\n      sourceControl: handle,\n      orgId,\n      projectRepositoryId,\n    });\n    return true;\n  }\n\n  async #resolveTenant(context: Context): Promise<{ orgId: string; userId: string } | { response: Response }> {\n    await this.deps.auth.ensureUser(context);\n    const tenant = this.deps.auth.tenant(context);\n    if (!tenant) return { response: context.json({ error: 'unauthorized' }, 401) };\n    if (!tenant.orgId) {\n      return {\n        response: context.json(\n          { error: 'organization_required', message: 'Factory projects require an organization.' },\n          403,\n        ),\n      };\n    }\n    return { orgId: tenant.orgId, userId: tenant.userId };\n  }\n\n  routes(): ApiRoute[] {\n    return [\n      registerApiRoute('/web/factory/projects', {\n        method: 'GET',\n        requiresAuth: false,\n        handler: async routeContext => {\n          const context = loose(routeContext);\n          const tenant = await this.#resolveTenant(context);\n          if ('response' in tenant) return tenant.response;\n          return context.json({ projects: await (await this.#projects()).list({ orgId: tenant.orgId }) });\n        },\n      }),\n      registerApiRoute('/web/factory/projects', {\n        method: 'POST',\n        requiresAuth: false,\n        handler: async routeContext => {\n          const context = loose(routeContext);\n          const tenant = await this.#resolveTenant(context);\n          if ('response' in tenant) return tenant.response;\n          const input = parseCreateInput(await readJson(context));\n          if (!input) return context.json({ error: 'invalid_project' }, 400);\n          const project = await (await this.#projects()).create({ orgId: tenant.orgId, userId: tenant.userId, input });\n          return context.json({ project }, 201);\n        },\n      }),\n      registerApiRoute('/web/factory/projects/:id', {\n        method: 'GET',\n        requiresAuth: false,\n        handler: async routeContext => {\n          const context = loose(routeContext);\n          const tenant = await this.#resolveTenant(context);\n          if ('response' in tenant) return tenant.response;\n          const id = context.req.param('id');\n          if (!id || !UUID_RE.test(id)) return context.json({ error: 'Project not found' }, 404);\n          const project = await this.#project(tenant.orgId, id);\n          return project ? context.json({ project }) : context.json({ error: 'Project not found' }, 404);\n        },\n      }),\n      registerApiRoute('/web/factory/projects/:id', {\n        method: 'PATCH',\n        requiresAuth: false,\n        handler: async routeContext => {\n          const context = loose(routeContext);\n          const tenant = await this.#resolveTenant(context);\n          if ('response' in tenant) return tenant.response;\n          const id = context.req.param('id');\n          if (!id || !UUID_RE.test(id)) return context.json({ error: 'Project not found' }, 404);\n          const input = parseUpdateInput(await readJson(context));\n          if (!input) return context.json({ error: 'invalid_project' }, 400);\n          const project = await (await this.#projects()).update({ orgId: tenant.orgId, id, input });\n          return project ? context.json({ project }) : context.json({ error: 'Project not found' }, 404);\n        },\n      }),\n      registerApiRoute('/web/factory/projects/:id', {\n        method: 'DELETE',\n        requiresAuth: false,\n        handler: async routeContext => {\n          const context = loose(routeContext);\n          const tenant = await this.#resolveTenant(context);\n          if ('response' in tenant) return tenant.response;\n          const id = context.req.param('id');\n          if (!id || !UUID_RE.test(id)) return context.json({ error: 'Project not found' }, 404);\n          if (!(await this.#project(tenant.orgId, id))) return context.json({ error: 'Project not found' }, 404);\n          for (const handle of await this.#handles()) {\n            for (const connection of await handle.connections.list({ orgId: tenant.orgId, factoryProjectId: id })) {\n              for (const projectRepository of await handle.projectRepositories.list({\n                orgId: tenant.orgId,\n                connectionId: connection.id,\n              })) {\n                if (!(await this.#retireProjectRepositorySessions(handle, tenant.orgId, projectRepository.id))) {\n                  return context.json({ error: 'session_retirement_unavailable' }, 409);\n                }\n              }\n              await handle.connections.delete({ orgId: tenant.orgId, id: connection.id });\n            }\n          }\n          await (await this.#projects()).delete({ orgId: tenant.orgId, id });\n          return context.body(null, 204);\n        },\n      }),\n      registerApiRoute('/web/factory/projects/:id/source-control-connections', {\n        method: 'GET',\n        requiresAuth: false,\n        handler: async routeContext => {\n          const context = loose(routeContext);\n          const tenant = await this.#resolveTenant(context);\n          if ('response' in tenant) return tenant.response;\n          const projectId = context.req.param('id');\n          if (!projectId || !UUID_RE.test(projectId) || !(await this.#project(tenant.orgId, projectId)))\n            return context.json({ error: 'Project not found' }, 404);\n          const connections = [];\n          for (const handle of await this.#handles()) {\n            for (const connection of await handle.connections.list({\n              orgId: tenant.orgId,\n              factoryProjectId: projectId,\n            })) {\n              const installation = await handle.installations.get({\n                orgId: tenant.orgId,\n                id: connection.installationId,\n              });\n              // Skip orphaned connections whose installation was pruned (e.g.\n              // the user uninstalled the GitHub App). Otherwise\n              // `projectRepositories.list` throws `requireConnection` and the\n              // whole endpoint 500s, which hangs the web UI on the page\n              // loader for every project. New code cascade-deletes these on\n              // installation removal, but this defensive skip lets already-\n              // orphaned rows in existing databases self-heal on read.\n              if (!installation) continue;\n              const links = await handle.projectRepositories.list({ orgId: tenant.orgId, connectionId: connection.id });\n              connections.push({\n                ...connection,\n                installation,\n                repositories: await Promise.all(links.map(link => this.#repositoryPayload(handle, tenant.orgId, link))),\n              });\n            }\n          }\n          return context.json({ connections });\n        },\n      }),\n      registerApiRoute('/web/factory/projects/:id/source-control-connections', {\n        method: 'POST',\n        requiresAuth: false,\n        handler: async routeContext => {\n          const context = loose(routeContext);\n          const tenant = await this.#resolveTenant(context);\n          if ('response' in tenant) return tenant.response;\n          const projectId = context.req.param('id');\n          if (!projectId || !UUID_RE.test(projectId) || !(await this.#project(tenant.orgId, projectId)))\n            return context.json({ error: 'Project not found' }, 404);\n          const input = parseConnectionInput(await readJson(context));\n          if (!input) return context.json({ error: 'invalid_source_control_connection' }, 400);\n          if (!this.#versionControlIntegrationIds.has(input.integrationId))\n            return context.json({ error: 'Source-control integration not found' }, 404);\n          const handle = (await this.#sourceControl()).forIntegration(input.integrationId);\n          if (!(await handle.installations.get({ orgId: tenant.orgId, id: input.installationId })))\n            return context.json({ error: 'Source-control installation not found' }, 404);\n          const connection = await handle.connections.create({\n            orgId: tenant.orgId,\n            factoryProjectId: projectId,\n            installationId: input.installationId,\n            createdByUserId: tenant.userId,\n          });\n          return context.json({ connection }, 201);\n        },\n      }),\n      registerApiRoute('/web/factory/projects/:id/source-control-connections/:connectionId', {\n        method: 'DELETE',\n        requiresAuth: false,\n        handler: async routeContext => {\n          const context = loose(routeContext);\n          const tenant = await this.#resolveTenant(context);\n          if ('response' in tenant) return tenant.response;\n          const projectId = context.req.param('id');\n          const connectionId = context.req.param('connectionId');\n          if (!projectId || !UUID_RE.test(projectId) || !connectionId || !UUID_RE.test(connectionId))\n            return context.json({ error: 'Source-control connection not found' }, 404);\n          const found = await this.#findConnection({ orgId: tenant.orgId, projectId, id: connectionId });\n          if (!found) return context.json({ error: 'Source-control connection not found' }, 404);\n          for (const projectRepository of await found.handle.projectRepositories.list({\n            orgId: tenant.orgId,\n            connectionId,\n          })) {\n            if (!(await this.#retireProjectRepositorySessions(found.handle, tenant.orgId, projectRepository.id))) {\n              return context.json({ error: 'session_retirement_unavailable' }, 409);\n            }\n          }\n          await found.handle.connections.delete({ orgId: tenant.orgId, id: connectionId });\n          return context.body(null, 204);\n        },\n      }),\n      registerApiRoute('/web/factory/projects/:id/source-control-connections/:connectionId/repositories', {\n        method: 'POST',\n        requiresAuth: false,\n        handler: async routeContext => {\n          const context = loose(routeContext);\n          const tenant = await this.#resolveTenant(context);\n          if ('response' in tenant) return tenant.response;\n          const projectId = context.req.param('id');\n          const connectionId = context.req.param('connectionId');\n          if (!projectId || !UUID_RE.test(projectId) || !connectionId || !UUID_RE.test(connectionId))\n            return context.json({ error: 'Source-control connection not found' }, 404);\n          const found = await this.#findConnection({ orgId: tenant.orgId, projectId, id: connectionId });\n          if (!found) return context.json({ error: 'Source-control connection not found' }, 404);\n          const input = parseRepositoryLinkInput(await readJson(context));\n          if (!input) return context.json({ error: 'invalid_project_repository' }, 400);\n          const repository = await found.handle.repositories.get({ orgId: tenant.orgId, id: input.repositoryId });\n          if (!repository || repository.installationId !== found.connection.installationId)\n            return context.json({ error: 'Source-control repository not found' }, 404);\n          const projectRepository = await found.handle.projectRepositories.link({\n            orgId: tenant.orgId,\n            connectionId,\n            createdByUserId: tenant.userId,\n            ...input,\n          });\n          return context.json(\n            { projectRepository: await this.#repositoryPayload(found.handle, tenant.orgId, projectRepository) },\n            201,\n          );\n        },\n      }),\n      registerApiRoute('/web/factory/projects/:id/repositories/:projectRepositoryId', {\n        method: 'PATCH',\n        requiresAuth: false,\n        handler: async routeContext => {\n          const context = loose(routeContext);\n          const tenant = await this.#resolveTenant(context);\n          if ('response' in tenant) return tenant.response;\n          const projectId = context.req.param('id');\n          const projectRepositoryId = context.req.param('projectRepositoryId');\n          if (!projectId || !UUID_RE.test(projectId) || !projectRepositoryId || !UUID_RE.test(projectRepositoryId))\n            return context.json({ error: 'Project repository not found' }, 404);\n          const found = await this.#findProjectRepository({ orgId: tenant.orgId, projectId, id: projectRepositoryId });\n          if (!found) return context.json({ error: 'Project repository not found' }, 404);\n          const input = parseRepositoryUpdateInput(await readJson(context));\n          if (!input) return context.json({ error: 'invalid_project_repository' }, 400);\n          const projectRepository = await found.handle.projectRepositories.update({\n            orgId: tenant.orgId,\n            id: projectRepositoryId,\n            input,\n          });\n          return context.json({\n            projectRepository: await this.#repositoryPayload(found.handle, tenant.orgId, projectRepository!),\n          });\n        },\n      }),\n      registerApiRoute('/web/factory/projects/:id/repositories/:projectRepositoryId', {\n        method: 'DELETE',\n        requiresAuth: false,\n        handler: async routeContext => {\n          const context = loose(routeContext);\n          const tenant = await this.#resolveTenant(context);\n          if ('response' in tenant) return tenant.response;\n          const projectId = context.req.param('id');\n          const projectRepositoryId = context.req.param('projectRepositoryId');\n          if (!projectId || !UUID_RE.test(projectId) || !projectRepositoryId || !UUID_RE.test(projectRepositoryId))\n            return context.json({ error: 'Project repository not found' }, 404);\n          const found = await this.#findProjectRepository({ orgId: tenant.orgId, projectId, id: projectRepositoryId });\n          if (!found) return context.json({ error: 'Project repository not found' }, 404);\n          if (!(await this.#retireProjectRepositorySessions(found.handle, tenant.orgId, projectRepositoryId))) {\n            return context.json({ error: 'session_retirement_unavailable' }, 409);\n          }\n          await found.handle.projectRepositories.unlink({ orgId: tenant.orgId, id: projectRepositoryId });\n          return context.body(null, 204);\n        },\n      }),\n    ];\n  }\n}\n"],"mappings":";;;AAmBA,MAAM,UAAU;AAChB,MAAM,kBAAkB;AACxB,MAAM,yBAAyB;AAC/B,MAAM,gCAAgC;AACtC,MAAM,oBAAoB;AAC1B,MAAM,8BAA8B;AACpC,MAAM,6BAA6B;AACnC,MAAM,kBAAkB;AAExB,SAAS,MAAM,SAA2B;CACxC,OAAO;AACT;AAEA,eAAe,SAAS,SAAgD;CACtE,IAAI;EACF,OAAO,MAAM,QAAQ,IAAI,KAAK;CAChC,QAAQ;EACN;CACF;AACF;AAEA,SAAS,iBAAiB,OAAkD;CAC1E,IAAI,CAAC,SAAS,OAAO,UAAU,UAAU,OAAO;CAChD,MAAM,QAAQ;CACd,IAAI,OAAO,MAAM,SAAS,UAAU,OAAO;CAC3C,MAAM,OAAO,MAAM,KAAK,KAAK;CAC7B,IAAI,CAAC,QAAQ,KAAK,SAAS,iBAAiB,OAAO;CACnD,IAAI,MAAM,gBAAgB,KAAA,KAAa,MAAM,gBAAgB,QAAQ,OAAO,MAAM,gBAAgB,UAChG,OAAO;CACT,MAAM,cAAc,OAAO,MAAM,gBAAgB,WAAW,MAAM,YAAY,KAAK,KAAK,OAAO;CAC/F,IAAI,eAAe,YAAY,SAAS,wBAAwB,OAAO;CACvE,OAAO;EAAE;EAAM;CAAY;AAC7B;AAEA,SAAS,iBAAiB,OAAkD;CAC1E,IAAI,CAAC,SAAS,OAAO,UAAU,UAAU,OAAO;CAChD,MAAM,QAAQ;CACd,MAAM,QAAmC,CAAC;CAC1C,IAAI,MAAM,SAAS,KAAA,GAAW;EAC5B,IAAI,OAAO,MAAM,SAAS,UAAU,OAAO;EAC3C,MAAM,OAAO,MAAM,KAAK,KAAK;EAC7B,IAAI,CAAC,QAAQ,KAAK,SAAS,iBAAiB,OAAO;EACnD,MAAM,OAAO;CACf;CACA,IAAI,MAAM,gBAAgB,KAAA,GAAW;EACnC,IAAI,MAAM,gBAAgB,QAAQ,OAAO,MAAM,gBAAgB,UAAU,OAAO;EAChF,MAAM,cAAc,OAAO,MAAM,gBAAgB,WAAW,MAAM,YAAY,KAAK,KAAK,OAAO;EAC/F,IAAI,eAAe,YAAY,SAAS,wBAAwB,OAAO;EACvE,MAAM,cAAc;CACtB;CACA,IAAI,MAAM,mBAAmB,KAAA,GAAW;EACtC,MAAM,iBAAiB,oBAAoB,MAAM,gBAAgB;GAAE,WAAW;GAAiB,UAAU;EAAK,CAAC;EAC/G,IAAI,mBAAmB,OAAO,OAAO;EACrC,MAAM,iBAAiB,kBAAkB;CAC3C;CACA,IAAI,MAAM,0BAA0B,KAAA,GAAW;EAC7C,IAAI,OAAO,MAAM,0BAA0B,WAAW,OAAO;EAC7D,MAAM,wBAAwB,MAAM;CACtC;CACA,IAAI,MAAM,mBAAmB,KAAA,GAAW;EACtC,IAAI,OAAO,MAAM,mBAAmB,WAAW,OAAO;EACtD,MAAM,iBAAiB,MAAM;CAC/B;CACA,OAAO,OAAO,KAAK,KAAK,CAAC,CAAC,SAAS,IAAI,QAAQ;AACjD;AAEA,SAAS,qBAAqB,OAA0E;CACtG,IAAI,CAAC,SAAS,OAAO,UAAU,UAAU,OAAO;CAChD,MAAM,QAAQ;CACd,IAAI,OAAO,MAAM,kBAAkB,YAAY,CAAC,MAAM,cAAc,KAAK,GAAG,OAAO;CACnF,IAAI,OAAO,MAAM,mBAAmB,YAAY,CAAC,QAAQ,KAAK,MAAM,cAAc,GAAG,OAAO;CAC5F,OAAO;EAAE,eAAe,MAAM,cAAc,KAAK;EAAG,gBAAgB,MAAM;CAAe;AAC3F;AAEA,SAAS,oBACP,OACA,EAAE,WAAW,WAAW,SACW;CACnC,IAAI,UAAU,KAAA,GAAW,OAAO,KAAA;CAChC,IAAI,UAAU,MAAM,OAAO,WAAW,OAAO;CAC7C,IAAI,OAAO,UAAU,UAAU,OAAO;CACtC,MAAM,aAAa,MAAM,KAAK;CAC9B,IAAI,CAAC,YAAY,OAAO,WAAW,OAAO;CAC1C,IAAI,WAAW,SAAS,aAAa,gBAAgB,KAAK,UAAU,GAAG,OAAO;CAC9E,OAAO;AACT;AAEA,SAAS,yBAAyB,OAOzB;CACP,IAAI,CAAC,SAAS,OAAO,UAAU,UAAU,OAAO;CAChD,MAAM,QAAQ;CACd,IAAI,OAAO,MAAM,iBAAiB,YAAY,CAAC,QAAQ,KAAK,MAAM,YAAY,GAAG,OAAO;CACxF,MAAM,SAAS,oBAAoB,MAAM,QAAQ;EAAE,WAAW;EAAmB,UAAU;CAAK,CAAC;CACjG,MAAM,kBAAkB,oBAAoB,MAAM,iBAAiB,EAAE,WAAW,4BAA4B,CAAC;CAC7G,MAAM,iBAAiB,oBAAoB,MAAM,gBAAgB,EAAE,WAAW,2BAA2B,CAAC;CAC1G,MAAM,eAAe,oBAAoB,MAAM,cAAc;EAC3D,WAAW;EACX,UAAU;CACZ,CAAC;CACD,MAAM,kBAAkB,oBAAoB,MAAM,iBAAiB;EACjE,WAAW;EACX,UAAU;CACZ,CAAC;CACD,IACE,WAAW,SACX,OAAO,oBAAoB,YAC3B,OAAO,mBAAmB,YAC1B,iBAAiB,SACjB,oBAAoB,OAEpB,OAAO;CACT,OAAO;EACL,cAAc,MAAM;EACpB,QAAQ,UAAU;EAClB;EACA;EACA,cAAc,gBAAgB;EAC9B,iBAAiB,mBAAmB;CACtC;AACF;AAEA,SAAS,2BAA2B,OAAqD;CACvF,IAAI,CAAC,SAAS,OAAO,UAAU,UAAU,OAAO;CAChD,MAAM,QAAQ;CACd,MAAM,QAAsC,CAAC;CAC7C,MAAM,SAAS,oBAAoB,MAAM,QAAQ;EAAE,WAAW;EAAmB,UAAU;CAAK,CAAC;CACjG,MAAM,kBAAkB,oBAAoB,MAAM,iBAAiB,EAAE,WAAW,4BAA4B,CAAC;CAC7G,MAAM,iBAAiB,oBAAoB,MAAM,gBAAgB,EAAE,WAAW,2BAA2B,CAAC;CAC1G,MAAM,eAAe,oBAAoB,MAAM,cAAc;EAC3D,WAAW;EACX,UAAU;CACZ,CAAC;CACD,MAAM,kBAAkB,oBAAoB,MAAM,iBAAiB;EACjE,WAAW;EACX,UAAU;CACZ,CAAC;CACD,IACE,WAAW,SACX,oBAAoB,SACpB,oBAAoB,QACpB,mBAAmB,SACnB,mBAAmB,QACnB,iBAAiB,SACjB,oBAAoB,OAEpB,OAAO;CACT,IAAI,WAAW,KAAA,GAAW,MAAM,SAAS;CACzC,IAAI,oBAAoB,KAAA,GAAW,MAAM,kBAAkB;CAC3D,IAAI,mBAAmB,KAAA,GAAW,MAAM,iBAAiB;CACzD,IAAI,iBAAiB,KAAA,GAAW,MAAM,eAAe;CACrD,IAAI,oBAAoB,KAAA,GAAW,MAAM,kBAAkB;CAC3D,OAAO,OAAO,KAAK,KAAK,CAAC,CAAC,SAAS,IAAI,QAAQ;AACjD;AAaA,IAAa,gBAAb,cAAmC,MAAyB;CAC1D;CAEA,YAAY,MAAyB;EACnC,MAAM,IAAI;EACV,KAAKA,gCAAgC,IAAI,IAAI,KAAK,gCAAgC,CAAC,CAAC;CACtF;CAEA,MAAMC,YAA6C;EACjD,MAAM,KAAK,KAAK,SAAS,YAAY;EACrC,OAAO,KAAK,KAAK;CACnB;CAEA,MAAMC,iBAAgD;EACpD,MAAM,KAAK,KAAK,cAAc,YAAY;EAC1C,OAAO,KAAK,KAAK;CACnB;CAEA,MAAMC,WAAkD;EACtD,MAAM,UAAU,MAAM,KAAKD,eAAe;EAC1C,OAAO,CAAC,GAAG,KAAKF,6BAA6B,CAAC,CAAC,KAAI,kBAAiB,QAAQ,eAAe,aAAa,CAAC;CAC3G;CAEA,MAAMI,SAAS,OAAe,IAAY;EACxC,QAAQ,MAAM,KAAKH,UAAU,EAAA,CAAG,IAAI;GAAE;GAAO;EAAG,CAAC;CACnD;CAEA,MAAMI,gBAAgB,EAAE,OAAO,WAAW,MAAwD;EAChG,KAAK,MAAM,UAAU,MAAM,KAAKF,SAAS,GAAG;GAC1C,MAAM,aAAa,MAAM,OAAO,YAAY,IAAI;IAAE;IAAO;GAAG,CAAC;GAC7D,IAAI,YAAY,qBAAqB,WAAW,OAAO;IAAE;IAAQ;GAAW;EAC9E;EACA,OAAO;CACT;CAEA,MAAMG,uBAAuB,EAAE,OAAO,WAAW,MAAwD;EACvG,KAAK,MAAM,UAAU,MAAM,KAAKH,SAAS,GAAG;GAC1C,MAAM,oBAAoB,MAAM,OAAO,oBAAoB,IAAI;IAAE;IAAO;GAAG,CAAC;GAC5E,IAAI,CAAC,mBAAmB;GACxB,MAAM,aAAa,MAAM,OAAO,YAAY,IAAI;IAAE;IAAO,IAAI,kBAAkB;GAAa,CAAC;GAC7F,IAAI,YAAY,qBAAqB,WAAW,OAAO;IAAE;IAAQ;IAAY;GAAkB;EACjG;EACA,OAAO;CACT;CAEA,MAAMI,mBAAmB,QAAoC,OAAe,mBAAsC;EAChH,MAAM,aAAa,MAAM,OAAO,aAAa,IAAI;GAAE;GAAO,IAAI,kBAAkB;EAAa,CAAC;EAC9F,OAAO;GAAE,GAAG;GAAmB;EAAW;CAC5C;CAEA,MAAMC,iCACJ,QACA,OACA,qBACkB;EAElB,KAAI,MADmB,OAAO,SAAS,wBAAwB,EAAE,oBAAoB,CAAC,EAAA,CACzE,WAAW,GAAG,OAAO;EAClC,IAAI,CAAC,KAAK,KAAK,mBAAmB,OAAO;EACzC,MAAM,KAAK,KAAK,kBAAkB,gCAAgC;GAChE,eAAe;GACf;GACA;EACF,CAAC;EACD,OAAO;CACT;CAEA,MAAMC,eAAe,SAAuF;EAC1G,MAAM,KAAK,KAAK,KAAK,WAAW,OAAO;EACvC,MAAM,SAAS,KAAK,KAAK,KAAK,OAAO,OAAO;EAC5C,IAAI,CAAC,QAAQ,OAAO,EAAE,UAAU,QAAQ,KAAK,EAAE,OAAO,eAAe,GAAG,GAAG,EAAE;EAC7E,IAAI,CAAC,OAAO,OACV,OAAO,EACL,UAAU,QAAQ,KAChB;GAAE,OAAO;GAAyB,SAAS;EAA4C,GACvF,GACF,EACF;EAEF,OAAO;GAAE,OAAO,OAAO;GAAO,QAAQ,OAAO;EAAO;CACtD;CAEA,SAAqB;EACnB,OAAO;GACL,iBAAiB,yBAAyB;IACxC,QAAQ;IACR,cAAc;IACd,SAAS,OAAM,iBAAgB;KAC7B,MAAM,UAAU,MAAM,YAAY;KAClC,MAAM,SAAS,MAAM,KAAKA,eAAe,OAAO;KAChD,IAAI,cAAc,QAAQ,OAAO,OAAO;KACxC,OAAO,QAAQ,KAAK,EAAE,UAAU,OAAO,MAAM,KAAKR,UAAU,EAAA,CAAG,KAAK,EAAE,OAAO,OAAO,MAAM,CAAC,EAAE,CAAC;IAChG;GACF,CAAC;GACD,iBAAiB,yBAAyB;IACxC,QAAQ;IACR,cAAc;IACd,SAAS,OAAM,iBAAgB;KAC7B,MAAM,UAAU,MAAM,YAAY;KAClC,MAAM,SAAS,MAAM,KAAKQ,eAAe,OAAO;KAChD,IAAI,cAAc,QAAQ,OAAO,OAAO;KACxC,MAAM,QAAQ,iBAAiB,MAAM,SAAS,OAAO,CAAC;KACtD,IAAI,CAAC,OAAO,OAAO,QAAQ,KAAK,EAAE,OAAO,kBAAkB,GAAG,GAAG;KACjE,MAAM,UAAU,OAAO,MAAM,KAAKR,UAAU,EAAA,CAAG,OAAO;MAAE,OAAO,OAAO;MAAO,QAAQ,OAAO;MAAQ;KAAM,CAAC;KAC3G,OAAO,QAAQ,KAAK,EAAE,QAAQ,GAAG,GAAG;IACtC;GACF,CAAC;GACD,iBAAiB,6BAA6B;IAC5C,QAAQ;IACR,cAAc;IACd,SAAS,OAAM,iBAAgB;KAC7B,MAAM,UAAU,MAAM,YAAY;KAClC,MAAM,SAAS,MAAM,KAAKQ,eAAe,OAAO;KAChD,IAAI,cAAc,QAAQ,OAAO,OAAO;KACxC,MAAM,KAAK,QAAQ,IAAI,MAAM,IAAI;KACjC,IAAI,CAAC,MAAM,CAAC,QAAQ,KAAK,EAAE,GAAG,OAAO,QAAQ,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;KACrF,MAAM,UAAU,MAAM,KAAKL,SAAS,OAAO,OAAO,EAAE;KACpD,OAAO,UAAU,QAAQ,KAAK,EAAE,QAAQ,CAAC,IAAI,QAAQ,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;IAC/F;GACF,CAAC;GACD,iBAAiB,6BAA6B;IAC5C,QAAQ;IACR,cAAc;IACd,SAAS,OAAM,iBAAgB;KAC7B,MAAM,UAAU,MAAM,YAAY;KAClC,MAAM,SAAS,MAAM,KAAKK,eAAe,OAAO;KAChD,IAAI,cAAc,QAAQ,OAAO,OAAO;KACxC,MAAM,KAAK,QAAQ,IAAI,MAAM,IAAI;KACjC,IAAI,CAAC,MAAM,CAAC,QAAQ,KAAK,EAAE,GAAG,OAAO,QAAQ,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;KACrF,MAAM,QAAQ,iBAAiB,MAAM,SAAS,OAAO,CAAC;KACtD,IAAI,CAAC,OAAO,OAAO,QAAQ,KAAK,EAAE,OAAO,kBAAkB,GAAG,GAAG;KACjE,MAAM,UAAU,OAAO,MAAM,KAAKR,UAAU,EAAA,CAAG,OAAO;MAAE,OAAO,OAAO;MAAO;MAAI;KAAM,CAAC;KACxF,OAAO,UAAU,QAAQ,KAAK,EAAE,QAAQ,CAAC,IAAI,QAAQ,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;IAC/F;GACF,CAAC;GACD,iBAAiB,6BAA6B;IAC5C,QAAQ;IACR,cAAc;IACd,SAAS,OAAM,iBAAgB;KAC7B,MAAM,UAAU,MAAM,YAAY;KAClC,MAAM,SAAS,MAAM,KAAKQ,eAAe,OAAO;KAChD,IAAI,cAAc,QAAQ,OAAO,OAAO;KACxC,MAAM,KAAK,QAAQ,IAAI,MAAM,IAAI;KACjC,IAAI,CAAC,MAAM,CAAC,QAAQ,KAAK,EAAE,GAAG,OAAO,QAAQ,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;KACrF,IAAI,CAAE,MAAM,KAAKL,SAAS,OAAO,OAAO,EAAE,GAAI,OAAO,QAAQ,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;KACrG,KAAK,MAAM,UAAU,MAAM,KAAKD,SAAS,GACvC,KAAK,MAAM,cAAc,MAAM,OAAO,YAAY,KAAK;MAAE,OAAO,OAAO;MAAO,kBAAkB;KAAG,CAAC,GAAG;MACrG,KAAK,MAAM,qBAAqB,MAAM,OAAO,oBAAoB,KAAK;OACpE,OAAO,OAAO;OACd,cAAc,WAAW;MAC3B,CAAC,GACC,IAAI,CAAE,MAAM,KAAKK,iCAAiC,QAAQ,OAAO,OAAO,kBAAkB,EAAE,GAC1F,OAAO,QAAQ,KAAK,EAAE,OAAO,iCAAiC,GAAG,GAAG;MAGxE,MAAM,OAAO,YAAY,OAAO;OAAE,OAAO,OAAO;OAAO,IAAI,WAAW;MAAG,CAAC;KAC5E;KAEF,OAAO,MAAM,KAAKP,UAAU,EAAA,CAAG,OAAO;MAAE,OAAO,OAAO;MAAO;KAAG,CAAC;KACjE,OAAO,QAAQ,KAAK,MAAM,GAAG;IAC/B;GACF,CAAC;GACD,iBAAiB,wDAAwD;IACvE,QAAQ;IACR,cAAc;IACd,SAAS,OAAM,iBAAgB;KAC7B,MAAM,UAAU,MAAM,YAAY;KAClC,MAAM,SAAS,MAAM,KAAKQ,eAAe,OAAO;KAChD,IAAI,cAAc,QAAQ,OAAO,OAAO;KACxC,MAAM,YAAY,QAAQ,IAAI,MAAM,IAAI;KACxC,IAAI,CAAC,aAAa,CAAC,QAAQ,KAAK,SAAS,KAAK,CAAE,MAAM,KAAKL,SAAS,OAAO,OAAO,SAAS,GACzF,OAAO,QAAQ,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;KACzD,MAAM,cAAc,CAAC;KACrB,KAAK,MAAM,UAAU,MAAM,KAAKD,SAAS,GACvC,KAAK,MAAM,cAAc,MAAM,OAAO,YAAY,KAAK;MACrD,OAAO,OAAO;MACd,kBAAkB;KACpB,CAAC,GAAG;MACF,MAAM,eAAe,MAAM,OAAO,cAAc,IAAI;OAClD,OAAO,OAAO;OACd,IAAI,WAAW;MACjB,CAAC;MAQD,IAAI,CAAC,cAAc;MACnB,MAAM,QAAQ,MAAM,OAAO,oBAAoB,KAAK;OAAE,OAAO,OAAO;OAAO,cAAc,WAAW;MAAG,CAAC;MACxG,YAAY,KAAK;OACf,GAAG;OACH;OACA,cAAc,MAAM,QAAQ,IAAI,MAAM,KAAI,SAAQ,KAAKI,mBAAmB,QAAQ,OAAO,OAAO,IAAI,CAAC,CAAC;MACxG,CAAC;KACH;KAEF,OAAO,QAAQ,KAAK,EAAE,YAAY,CAAC;IACrC;GACF,CAAC;GACD,iBAAiB,wDAAwD;IACvE,QAAQ;IACR,cAAc;IACd,SAAS,OAAM,iBAAgB;KAC7B,MAAM,UAAU,MAAM,YAAY;KAClC,MAAM,SAAS,MAAM,KAAKE,eAAe,OAAO;KAChD,IAAI,cAAc,QAAQ,OAAO,OAAO;KACxC,MAAM,YAAY,QAAQ,IAAI,MAAM,IAAI;KACxC,IAAI,CAAC,aAAa,CAAC,QAAQ,KAAK,SAAS,KAAK,CAAE,MAAM,KAAKL,SAAS,OAAO,OAAO,SAAS,GACzF,OAAO,QAAQ,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;KACzD,MAAM,QAAQ,qBAAqB,MAAM,SAAS,OAAO,CAAC;KAC1D,IAAI,CAAC,OAAO,OAAO,QAAQ,KAAK,EAAE,OAAO,oCAAoC,GAAG,GAAG;KACnF,IAAI,CAAC,KAAKJ,8BAA8B,IAAI,MAAM,aAAa,GAC7D,OAAO,QAAQ,KAAK,EAAE,OAAO,uCAAuC,GAAG,GAAG;KAC5E,MAAM,UAAU,MAAM,KAAKE,eAAe,EAAA,CAAG,eAAe,MAAM,aAAa;KAC/E,IAAI,CAAE,MAAM,OAAO,cAAc,IAAI;MAAE,OAAO,OAAO;MAAO,IAAI,MAAM;KAAe,CAAC,GACpF,OAAO,QAAQ,KAAK,EAAE,OAAO,wCAAwC,GAAG,GAAG;KAC7E,MAAM,aAAa,MAAM,OAAO,YAAY,OAAO;MACjD,OAAO,OAAO;MACd,kBAAkB;MAClB,gBAAgB,MAAM;MACtB,iBAAiB,OAAO;KAC1B,CAAC;KACD,OAAO,QAAQ,KAAK,EAAE,WAAW,GAAG,GAAG;IACzC;GACF,CAAC;GACD,iBAAiB,sEAAsE;IACrF,QAAQ;IACR,cAAc;IACd,SAAS,OAAM,iBAAgB;KAC7B,MAAM,UAAU,MAAM,YAAY;KAClC,MAAM,SAAS,MAAM,KAAKO,eAAe,OAAO;KAChD,IAAI,cAAc,QAAQ,OAAO,OAAO;KACxC,MAAM,YAAY,QAAQ,IAAI,MAAM,IAAI;KACxC,MAAM,eAAe,QAAQ,IAAI,MAAM,cAAc;KACrD,IAAI,CAAC,aAAa,CAAC,QAAQ,KAAK,SAAS,KAAK,CAAC,gBAAgB,CAAC,QAAQ,KAAK,YAAY,GACvF,OAAO,QAAQ,KAAK,EAAE,OAAO,sCAAsC,GAAG,GAAG;KAC3E,MAAM,QAAQ,MAAM,KAAKJ,gBAAgB;MAAE,OAAO,OAAO;MAAO;MAAW,IAAI;KAAa,CAAC;KAC7F,IAAI,CAAC,OAAO,OAAO,QAAQ,KAAK,EAAE,OAAO,sCAAsC,GAAG,GAAG;KACrF,KAAK,MAAM,qBAAqB,MAAM,MAAM,OAAO,oBAAoB,KAAK;MAC1E,OAAO,OAAO;MACd;KACF,CAAC,GACC,IAAI,CAAE,MAAM,KAAKG,iCAAiC,MAAM,QAAQ,OAAO,OAAO,kBAAkB,EAAE,GAChG,OAAO,QAAQ,KAAK,EAAE,OAAO,iCAAiC,GAAG,GAAG;KAGxE,MAAM,MAAM,OAAO,YAAY,OAAO;MAAE,OAAO,OAAO;MAAO,IAAI;KAAa,CAAC;KAC/E,OAAO,QAAQ,KAAK,MAAM,GAAG;IAC/B;GACF,CAAC;GACD,iBAAiB,mFAAmF;IAClG,QAAQ;IACR,cAAc;IACd,SAAS,OAAM,iBAAgB;KAC7B,MAAM,UAAU,MAAM,YAAY;KAClC,MAAM,SAAS,MAAM,KAAKC,eAAe,OAAO;KAChD,IAAI,cAAc,QAAQ,OAAO,OAAO;KACxC,MAAM,YAAY,QAAQ,IAAI,MAAM,IAAI;KACxC,MAAM,eAAe,QAAQ,IAAI,MAAM,cAAc;KACrD,IAAI,CAAC,aAAa,CAAC,QAAQ,KAAK,SAAS,KAAK,CAAC,gBAAgB,CAAC,QAAQ,KAAK,YAAY,GACvF,OAAO,QAAQ,KAAK,EAAE,OAAO,sCAAsC,GAAG,GAAG;KAC3E,MAAM,QAAQ,MAAM,KAAKJ,gBAAgB;MAAE,OAAO,OAAO;MAAO;MAAW,IAAI;KAAa,CAAC;KAC7F,IAAI,CAAC,OAAO,OAAO,QAAQ,KAAK,EAAE,OAAO,sCAAsC,GAAG,GAAG;KACrF,MAAM,QAAQ,yBAAyB,MAAM,SAAS,OAAO,CAAC;KAC9D,IAAI,CAAC,OAAO,OAAO,QAAQ,KAAK,EAAE,OAAO,6BAA6B,GAAG,GAAG;KAC5E,MAAM,aAAa,MAAM,MAAM,OAAO,aAAa,IAAI;MAAE,OAAO,OAAO;MAAO,IAAI,MAAM;KAAa,CAAC;KACtG,IAAI,CAAC,cAAc,WAAW,mBAAmB,MAAM,WAAW,gBAChE,OAAO,QAAQ,KAAK,EAAE,OAAO,sCAAsC,GAAG,GAAG;KAC3E,MAAM,oBAAoB,MAAM,MAAM,OAAO,oBAAoB,KAAK;MACpE,OAAO,OAAO;MACd;MACA,iBAAiB,OAAO;MACxB,GAAG;KACL,CAAC;KACD,OAAO,QAAQ,KACb,EAAE,mBAAmB,MAAM,KAAKE,mBAAmB,MAAM,QAAQ,OAAO,OAAO,iBAAiB,EAAE,GAClG,GACF;IACF;GACF,CAAC;GACD,iBAAiB,+DAA+D;IAC9E,QAAQ;IACR,cAAc;IACd,SAAS,OAAM,iBAAgB;KAC7B,MAAM,UAAU,MAAM,YAAY;KAClC,MAAM,SAAS,MAAM,KAAKE,eAAe,OAAO;KAChD,IAAI,cAAc,QAAQ,OAAO,OAAO;KACxC,MAAM,YAAY,QAAQ,IAAI,MAAM,IAAI;KACxC,MAAM,sBAAsB,QAAQ,IAAI,MAAM,qBAAqB;KACnE,IAAI,CAAC,aAAa,CAAC,QAAQ,KAAK,SAAS,KAAK,CAAC,uBAAuB,CAAC,QAAQ,KAAK,mBAAmB,GACrG,OAAO,QAAQ,KAAK,EAAE,OAAO,+BAA+B,GAAG,GAAG;KACpE,MAAM,QAAQ,MAAM,KAAKH,uBAAuB;MAAE,OAAO,OAAO;MAAO;MAAW,IAAI;KAAoB,CAAC;KAC3G,IAAI,CAAC,OAAO,OAAO,QAAQ,KAAK,EAAE,OAAO,+BAA+B,GAAG,GAAG;KAC9E,MAAM,QAAQ,2BAA2B,MAAM,SAAS,OAAO,CAAC;KAChE,IAAI,CAAC,OAAO,OAAO,QAAQ,KAAK,EAAE,OAAO,6BAA6B,GAAG,GAAG;KAC5E,MAAM,oBAAoB,MAAM,MAAM,OAAO,oBAAoB,OAAO;MACtE,OAAO,OAAO;MACd,IAAI;MACJ;KACF,CAAC;KACD,OAAO,QAAQ,KAAK,EAClB,mBAAmB,MAAM,KAAKC,mBAAmB,MAAM,QAAQ,OAAO,OAAO,iBAAkB,EACjG,CAAC;IACH;GACF,CAAC;GACD,iBAAiB,+DAA+D;IAC9E,QAAQ;IACR,cAAc;IACd,SAAS,OAAM,iBAAgB;KAC7B,MAAM,UAAU,MAAM,YAAY;KAClC,MAAM,SAAS,MAAM,KAAKE,eAAe,OAAO;KAChD,IAAI,cAAc,QAAQ,OAAO,OAAO;KACxC,MAAM,YAAY,QAAQ,IAAI,MAAM,IAAI;KACxC,MAAM,sBAAsB,QAAQ,IAAI,MAAM,qBAAqB;KACnE,IAAI,CAAC,aAAa,CAAC,QAAQ,KAAK,SAAS,KAAK,CAAC,uBAAuB,CAAC,QAAQ,KAAK,mBAAmB,GACrG,OAAO,QAAQ,KAAK,EAAE,OAAO,+BAA+B,GAAG,GAAG;KACpE,MAAM,QAAQ,MAAM,KAAKH,uBAAuB;MAAE,OAAO,OAAO;MAAO;MAAW,IAAI;KAAoB,CAAC;KAC3G,IAAI,CAAC,OAAO,OAAO,QAAQ,KAAK,EAAE,OAAO,+BAA+B,GAAG,GAAG;KAC9E,IAAI,CAAE,MAAM,KAAKE,iCAAiC,MAAM,QAAQ,OAAO,OAAO,mBAAmB,GAC/F,OAAO,QAAQ,KAAK,EAAE,OAAO,iCAAiC,GAAG,GAAG;KAEtE,MAAM,MAAM,OAAO,oBAAoB,OAAO;MAAE,OAAO,OAAO;MAAO,IAAI;KAAoB,CAAC;KAC9F,OAAO,QAAQ,KAAK,MAAM,GAAG;IAC/B;GACF,CAAC;EACH;CACF;AACF"}
+{"version":3,"file":"projects.js","names":["#versionControlIntegrationIds","#projects","#sourceControl","#handles","#project","#findConnection","#findProjectRepository","#repositoryPayload","#retireProjectRepositorySessions","#resolveTenant"],"sources":["../../src/routes/projects.ts"],"sourcesContent":["import type { ApiRoute } from '@mastra/core/server';\nimport { registerApiRoute } from '@mastra/core/server';\nimport type { Context } from 'hono';\n\nimport type { SessionRetirementCoordinator } from '../sandbox/session-retirement.js';\nimport type {\n  CreateFactoryProjectInput,\n  FactoryProjectsStorage,\n  UpdateFactoryProjectInput,\n} from '../storage/domains/projects/base.js';\nimport type {\n  ProjectRepository,\n  SourceControlStorage,\n  SourceControlStorageHandle,\n  UpdateProjectRepositoryInput,\n} from '../storage/domains/source-control/base.js';\nimport type { RouteDependencies } from './route.js';\nimport { Route } from './route.js';\n\nconst UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;\nconst MAX_NAME_LENGTH = 200;\nconst MAX_DESCRIPTION_LENGTH = 2_000;\nconst MAX_REPOSITORY_COMMAND_LENGTH = 2_000;\nconst MAX_BRANCH_LENGTH = 255;\nconst MAX_SANDBOX_PROVIDER_LENGTH = 100;\nconst MAX_SANDBOX_WORKDIR_LENGTH = 1_000;\nconst CONTROL_CHAR_RE = /[\\0-\\x08\\x0b\\x0c\\x0e-\\x1f\\x7f]/;\n\nfunction loose(context: unknown): Context {\n  return context as Context;\n}\n\nasync function readJson(context: Context): Promise<unknown | undefined> {\n  try {\n    return await context.req.json();\n  } catch {\n    return undefined;\n  }\n}\n\nfunction parseCreateInput(value: unknown): CreateFactoryProjectInput | null {\n  if (!value || typeof value !== 'object') return null;\n  const input = value as Record<string, unknown>;\n  if (typeof input.name !== 'string') return null;\n  const name = input.name.trim();\n  if (!name || name.length > MAX_NAME_LENGTH) return null;\n  if (input.description !== undefined && input.description !== null && typeof input.description !== 'string')\n    return null;\n  const description = typeof input.description === 'string' ? input.description.trim() || null : null;\n  if (description && description.length > MAX_DESCRIPTION_LENGTH) return null;\n  return { name, description };\n}\n\nfunction parseUpdateInput(value: unknown): UpdateFactoryProjectInput | null {\n  if (!value || typeof value !== 'object') return null;\n  const input = value as Record<string, unknown>;\n  const patch: UpdateFactoryProjectInput = {};\n  if (input.name !== undefined) {\n    if (typeof input.name !== 'string') return null;\n    const name = input.name.trim();\n    if (!name || name.length > MAX_NAME_LENGTH) return null;\n    patch.name = name;\n  }\n  if (input.description !== undefined) {\n    if (input.description !== null && typeof input.description !== 'string') return null;\n    const description = typeof input.description === 'string' ? input.description.trim() || null : null;\n    if (description && description.length > MAX_DESCRIPTION_LENGTH) return null;\n    patch.description = description;\n  }\n  if (input.defaultModelId !== undefined) {\n    const defaultModelId = parseOptionalString(input.defaultModelId, { maxLength: MAX_NAME_LENGTH, nullable: true });\n    if (defaultModelId === false) return null;\n    patch.defaultModelId = defaultModelId ?? null;\n  }\n  if (input.slackWorkItemsEnabled !== undefined) {\n    if (typeof input.slackWorkItemsEnabled !== 'boolean') return null;\n    patch.slackWorkItemsEnabled = input.slackWorkItemsEnabled;\n  }\n  if (input.autoRunEnabled !== undefined) {\n    if (typeof input.autoRunEnabled !== 'boolean') return null;\n    patch.autoRunEnabled = input.autoRunEnabled;\n  }\n  return Object.keys(patch).length > 0 ? patch : null;\n}\n\nfunction parseConnectionInput(value: unknown): { integrationId: string; installationId: string } | null {\n  if (!value || typeof value !== 'object') return null;\n  const input = value as Record<string, unknown>;\n  if (typeof input.integrationId !== 'string' || !input.integrationId.trim()) return null;\n  if (typeof input.installationId !== 'string' || !UUID_RE.test(input.installationId)) return null;\n  return { integrationId: input.integrationId.trim(), installationId: input.installationId };\n}\n\nfunction parseOptionalString(\n  value: unknown,\n  { maxLength, nullable = false }: { maxLength: number; nullable?: boolean },\n): string | null | undefined | false {\n  if (value === undefined) return undefined;\n  if (value === null) return nullable ? null : false;\n  if (typeof value !== 'string') return false;\n  const normalized = value.trim();\n  if (!normalized) return nullable ? null : false;\n  if (normalized.length > maxLength || CONTROL_CHAR_RE.test(normalized)) return false;\n  return normalized;\n}\n\nfunction parseRepositoryLinkInput(value: unknown): {\n  repositoryId: string;\n  branch: string | null;\n  sandboxProvider: string;\n  sandboxWorkdir: string;\n  setupCommand: string | null;\n  teardownCommand: string | null;\n} | null {\n  if (!value || typeof value !== 'object') return null;\n  const input = value as Record<string, unknown>;\n  if (typeof input.repositoryId !== 'string' || !UUID_RE.test(input.repositoryId)) return null;\n  const branch = parseOptionalString(input.branch, { maxLength: MAX_BRANCH_LENGTH, nullable: true });\n  const sandboxProvider = parseOptionalString(input.sandboxProvider, { maxLength: MAX_SANDBOX_PROVIDER_LENGTH });\n  const sandboxWorkdir = parseOptionalString(input.sandboxWorkdir, { maxLength: MAX_SANDBOX_WORKDIR_LENGTH });\n  const setupCommand = parseOptionalString(input.setupCommand, {\n    maxLength: MAX_REPOSITORY_COMMAND_LENGTH,\n    nullable: true,\n  });\n  const teardownCommand = parseOptionalString(input.teardownCommand, {\n    maxLength: MAX_REPOSITORY_COMMAND_LENGTH,\n    nullable: true,\n  });\n  if (\n    branch === false ||\n    typeof sandboxProvider !== 'string' ||\n    typeof sandboxWorkdir !== 'string' ||\n    setupCommand === false ||\n    teardownCommand === false\n  )\n    return null;\n  return {\n    repositoryId: input.repositoryId,\n    branch: branch ?? null,\n    sandboxProvider,\n    sandboxWorkdir,\n    setupCommand: setupCommand ?? null,\n    teardownCommand: teardownCommand ?? null,\n  };\n}\n\nfunction parseRepositoryUpdateInput(value: unknown): UpdateProjectRepositoryInput | null {\n  if (!value || typeof value !== 'object') return null;\n  const input = value as Record<string, unknown>;\n  const patch: UpdateProjectRepositoryInput = {};\n  const branch = parseOptionalString(input.branch, { maxLength: MAX_BRANCH_LENGTH, nullable: true });\n  const sandboxProvider = parseOptionalString(input.sandboxProvider, { maxLength: MAX_SANDBOX_PROVIDER_LENGTH });\n  const sandboxWorkdir = parseOptionalString(input.sandboxWorkdir, { maxLength: MAX_SANDBOX_WORKDIR_LENGTH });\n  const setupCommand = parseOptionalString(input.setupCommand, {\n    maxLength: MAX_REPOSITORY_COMMAND_LENGTH,\n    nullable: true,\n  });\n  const teardownCommand = parseOptionalString(input.teardownCommand, {\n    maxLength: MAX_REPOSITORY_COMMAND_LENGTH,\n    nullable: true,\n  });\n  if (\n    branch === false ||\n    sandboxProvider === false ||\n    sandboxProvider === null ||\n    sandboxWorkdir === false ||\n    sandboxWorkdir === null ||\n    setupCommand === false ||\n    teardownCommand === false\n  )\n    return null;\n  if (branch !== undefined) patch.branch = branch;\n  if (sandboxProvider !== undefined) patch.sandboxProvider = sandboxProvider;\n  if (sandboxWorkdir !== undefined) patch.sandboxWorkdir = sandboxWorkdir;\n  if (setupCommand !== undefined) patch.setupCommand = setupCommand;\n  if (teardownCommand !== undefined) patch.teardownCommand = teardownCommand;\n  return Object.keys(patch).length > 0 ? patch : null;\n}\n\nexport interface ProjectRoutesDeps extends RouteDependencies {\n  /** Factory projects domain backing the CRUD surface. */\n  projects: FactoryProjectsStorage;\n  /** Source-control domain the connection/repository routes fan out over. */\n  sourceControl: SourceControlStorage;\n  /** Integration ids allowed as source-control connection targets. */\n  versionControlIntegrationIds?: string[];\n  /**\n   * Fire-and-forget hook invoked after a repository is linked to a project —\n   * kicks the initial base-checkpoint build. Must never throw.\n   */\n  onProjectRepositoryLinked?: (args: { orgId: string; projectRepository: ProjectRepository }) => void;\n  /** Shared lifecycle for retiring sessions before their owning records are deleted. */\n  sessionRetirement?: SessionRetirementCoordinator;\n}\n\nexport class ProjectRoutes extends Route<ProjectRoutesDeps> {\n  readonly #versionControlIntegrationIds: Set<string>;\n\n  constructor(deps: ProjectRoutesDeps) {\n    super(deps);\n    this.#versionControlIntegrationIds = new Set(deps.versionControlIntegrationIds ?? []);\n  }\n\n  async #projects(): Promise<FactoryProjectsStorage> {\n    await this.deps.projects.ensureReady();\n    return this.deps.projects;\n  }\n\n  async #sourceControl(): Promise<SourceControlStorage> {\n    await this.deps.sourceControl.ensureReady();\n    return this.deps.sourceControl;\n  }\n\n  async #handles(): Promise<SourceControlStorageHandle[]> {\n    const storage = await this.#sourceControl();\n    return [...this.#versionControlIntegrationIds].map(integrationId => storage.forIntegration(integrationId));\n  }\n\n  async #project(orgId: string, id: string) {\n    return (await this.#projects()).get({ orgId, id });\n  }\n\n  async #findConnection({ orgId, projectId, id }: { orgId: string; projectId: string; id: string }) {\n    for (const handle of await this.#handles()) {\n      const connection = await handle.connections.get({ orgId, id });\n      if (connection?.factoryProjectId === projectId) return { handle, connection };\n    }\n    return null;\n  }\n\n  async #findProjectRepository({ orgId, projectId, id }: { orgId: string; projectId: string; id: string }) {\n    for (const handle of await this.#handles()) {\n      const projectRepository = await handle.projectRepositories.get({ orgId, id });\n      if (!projectRepository) continue;\n      const connection = await handle.connections.get({ orgId, id: projectRepository.connectionId });\n      if (connection?.factoryProjectId === projectId) return { handle, connection, projectRepository };\n    }\n    return null;\n  }\n\n  async #repositoryPayload(handle: SourceControlStorageHandle, orgId: string, projectRepository: ProjectRepository) {\n    const repository = await handle.repositories.get({ orgId, id: projectRepository.repositoryId });\n    return { ...projectRepository, repository };\n  }\n\n  async #retireProjectRepositorySessions(\n    handle: SourceControlStorageHandle,\n    orgId: string,\n    projectRepositoryId: string,\n  ): Promise<boolean> {\n    const sessions = await handle.sessions.listByProjectRepository({ projectRepositoryId });\n    if (sessions.length === 0) return true;\n    if (!this.deps.sessionRetirement) return false;\n    await this.deps.sessionRetirement.retireProjectRepositorySessions({\n      sourceControl: handle,\n      orgId,\n      projectRepositoryId,\n    });\n    return true;\n  }\n\n  async #resolveTenant(context: Context): Promise<{ orgId: string; userId: string } | { response: Response }> {\n    await this.deps.auth.ensureUser(context);\n    const tenant = this.deps.auth.tenant(context);\n    if (!tenant) return { response: context.json({ error: 'unauthorized' }, 401) };\n    if (!tenant.orgId) {\n      return {\n        response: context.json(\n          { error: 'organization_required', message: 'Factory projects require an organization.' },\n          403,\n        ),\n      };\n    }\n    return { orgId: tenant.orgId, userId: tenant.userId };\n  }\n\n  routes(): ApiRoute[] {\n    return [\n      registerApiRoute('/web/factory/projects', {\n        method: 'GET',\n        requiresAuth: false,\n        handler: async routeContext => {\n          const context = loose(routeContext);\n          const tenant = await this.#resolveTenant(context);\n          if ('response' in tenant) return tenant.response;\n          return context.json({ projects: await (await this.#projects()).list({ orgId: tenant.orgId }) });\n        },\n      }),\n      registerApiRoute('/web/factory/projects', {\n        method: 'POST',\n        requiresAuth: false,\n        handler: async routeContext => {\n          const context = loose(routeContext);\n          const tenant = await this.#resolveTenant(context);\n          if ('response' in tenant) return tenant.response;\n          const input = parseCreateInput(await readJson(context));\n          if (!input) return context.json({ error: 'invalid_project' }, 400);\n          const project = await (await this.#projects()).create({ orgId: tenant.orgId, userId: tenant.userId, input });\n          return context.json({ project }, 201);\n        },\n      }),\n      registerApiRoute('/web/factory/projects/:id', {\n        method: 'GET',\n        requiresAuth: false,\n        handler: async routeContext => {\n          const context = loose(routeContext);\n          const tenant = await this.#resolveTenant(context);\n          if ('response' in tenant) return tenant.response;\n          const id = context.req.param('id');\n          if (!id || !UUID_RE.test(id)) return context.json({ error: 'Project not found' }, 404);\n          const project = await this.#project(tenant.orgId, id);\n          return project ? context.json({ project }) : context.json({ error: 'Project not found' }, 404);\n        },\n      }),\n      registerApiRoute('/web/factory/projects/:id', {\n        method: 'PATCH',\n        requiresAuth: false,\n        handler: async routeContext => {\n          const context = loose(routeContext);\n          const tenant = await this.#resolveTenant(context);\n          if ('response' in tenant) return tenant.response;\n          const id = context.req.param('id');\n          if (!id || !UUID_RE.test(id)) return context.json({ error: 'Project not found' }, 404);\n          const input = parseUpdateInput(await readJson(context));\n          if (!input) return context.json({ error: 'invalid_project' }, 400);\n          const project = await (await this.#projects()).update({ orgId: tenant.orgId, id, input });\n          return project ? context.json({ project }) : context.json({ error: 'Project not found' }, 404);\n        },\n      }),\n      registerApiRoute('/web/factory/projects/:id', {\n        method: 'DELETE',\n        requiresAuth: false,\n        handler: async routeContext => {\n          const context = loose(routeContext);\n          const tenant = await this.#resolveTenant(context);\n          if ('response' in tenant) return tenant.response;\n          const id = context.req.param('id');\n          if (!id || !UUID_RE.test(id)) return context.json({ error: 'Project not found' }, 404);\n          if (!(await this.#project(tenant.orgId, id))) return context.json({ error: 'Project not found' }, 404);\n          for (const handle of await this.#handles()) {\n            for (const connection of await handle.connections.list({ orgId: tenant.orgId, factoryProjectId: id })) {\n              for (const projectRepository of await handle.projectRepositories.list({\n                orgId: tenant.orgId,\n                connectionId: connection.id,\n              })) {\n                if (!(await this.#retireProjectRepositorySessions(handle, tenant.orgId, projectRepository.id))) {\n                  return context.json({ error: 'session_retirement_unavailable' }, 409);\n                }\n              }\n              await handle.connections.delete({ orgId: tenant.orgId, id: connection.id });\n            }\n          }\n          await (await this.#projects()).delete({ orgId: tenant.orgId, id });\n          return context.body(null, 204);\n        },\n      }),\n      registerApiRoute('/web/factory/projects/:id/source-control-connections', {\n        method: 'GET',\n        requiresAuth: false,\n        handler: async routeContext => {\n          const context = loose(routeContext);\n          const tenant = await this.#resolveTenant(context);\n          if ('response' in tenant) return tenant.response;\n          const projectId = context.req.param('id');\n          if (!projectId || !UUID_RE.test(projectId) || !(await this.#project(tenant.orgId, projectId)))\n            return context.json({ error: 'Project not found' }, 404);\n          const connections = [];\n          for (const handle of await this.#handles()) {\n            for (const connection of await handle.connections.list({\n              orgId: tenant.orgId,\n              factoryProjectId: projectId,\n            })) {\n              const installation = await handle.installations.get({\n                orgId: tenant.orgId,\n                id: connection.installationId,\n              });\n              // Skip orphaned connections whose installation was pruned (e.g.\n              // the user uninstalled the GitHub App). Otherwise\n              // `projectRepositories.list` throws `requireConnection` and the\n              // whole endpoint 500s, which hangs the web UI on the page\n              // loader for every project. New code cascade-deletes these on\n              // installation removal, but this defensive skip lets already-\n              // orphaned rows in existing databases self-heal on read.\n              if (!installation) continue;\n              const links = await handle.projectRepositories.list({ orgId: tenant.orgId, connectionId: connection.id });\n              connections.push({\n                ...connection,\n                installation,\n                repositories: await Promise.all(links.map(link => this.#repositoryPayload(handle, tenant.orgId, link))),\n              });\n            }\n          }\n          return context.json({ connections });\n        },\n      }),\n      registerApiRoute('/web/factory/projects/:id/source-control-connections', {\n        method: 'POST',\n        requiresAuth: false,\n        handler: async routeContext => {\n          const context = loose(routeContext);\n          const tenant = await this.#resolveTenant(context);\n          if ('response' in tenant) return tenant.response;\n          const projectId = context.req.param('id');\n          if (!projectId || !UUID_RE.test(projectId) || !(await this.#project(tenant.orgId, projectId)))\n            return context.json({ error: 'Project not found' }, 404);\n          const input = parseConnectionInput(await readJson(context));\n          if (!input) return context.json({ error: 'invalid_source_control_connection' }, 400);\n          if (!this.#versionControlIntegrationIds.has(input.integrationId))\n            return context.json({ error: 'Source-control integration not found' }, 404);\n          const handle = (await this.#sourceControl()).forIntegration(input.integrationId);\n          if (!(await handle.installations.get({ orgId: tenant.orgId, id: input.installationId })))\n            return context.json({ error: 'Source-control installation not found' }, 404);\n          const connection = await handle.connections.create({\n            orgId: tenant.orgId,\n            factoryProjectId: projectId,\n            installationId: input.installationId,\n            createdByUserId: tenant.userId,\n          });\n          return context.json({ connection }, 201);\n        },\n      }),\n      registerApiRoute('/web/factory/projects/:id/source-control-connections/:connectionId', {\n        method: 'DELETE',\n        requiresAuth: false,\n        handler: async routeContext => {\n          const context = loose(routeContext);\n          const tenant = await this.#resolveTenant(context);\n          if ('response' in tenant) return tenant.response;\n          const projectId = context.req.param('id');\n          const connectionId = context.req.param('connectionId');\n          if (!projectId || !UUID_RE.test(projectId) || !connectionId || !UUID_RE.test(connectionId))\n            return context.json({ error: 'Source-control connection not found' }, 404);\n          const found = await this.#findConnection({ orgId: tenant.orgId, projectId, id: connectionId });\n          if (!found) return context.json({ error: 'Source-control connection not found' }, 404);\n          for (const projectRepository of await found.handle.projectRepositories.list({\n            orgId: tenant.orgId,\n            connectionId,\n          })) {\n            if (!(await this.#retireProjectRepositorySessions(found.handle, tenant.orgId, projectRepository.id))) {\n              return context.json({ error: 'session_retirement_unavailable' }, 409);\n            }\n          }\n          await found.handle.connections.delete({ orgId: tenant.orgId, id: connectionId });\n          return context.body(null, 204);\n        },\n      }),\n      registerApiRoute('/web/factory/projects/:id/source-control-connections/:connectionId/repositories', {\n        method: 'POST',\n        requiresAuth: false,\n        handler: async routeContext => {\n          const context = loose(routeContext);\n          const tenant = await this.#resolveTenant(context);\n          if ('response' in tenant) return tenant.response;\n          const projectId = context.req.param('id');\n          const connectionId = context.req.param('connectionId');\n          if (!projectId || !UUID_RE.test(projectId) || !connectionId || !UUID_RE.test(connectionId))\n            return context.json({ error: 'Source-control connection not found' }, 404);\n          const found = await this.#findConnection({ orgId: tenant.orgId, projectId, id: connectionId });\n          if (!found) return context.json({ error: 'Source-control connection not found' }, 404);\n          const input = parseRepositoryLinkInput(await readJson(context));\n          if (!input) return context.json({ error: 'invalid_project_repository' }, 400);\n          const repository = await found.handle.repositories.get({ orgId: tenant.orgId, id: input.repositoryId });\n          if (!repository || repository.installationId !== found.connection.installationId)\n            return context.json({ error: 'Source-control repository not found' }, 404);\n          const projectRepository = await found.handle.projectRepositories.link({\n            orgId: tenant.orgId,\n            connectionId,\n            createdByUserId: tenant.userId,\n            ...input,\n          });\n          try {\n            this.deps.onProjectRepositoryLinked?.({ orgId: tenant.orgId, projectRepository });\n          } catch (error) {\n            console.warn('[factory] onProjectRepositoryLinked failed after a successful repository link:', error);\n          }\n          return context.json(\n            { projectRepository: await this.#repositoryPayload(found.handle, tenant.orgId, projectRepository) },\n            201,\n          );\n        },\n      }),\n      registerApiRoute('/web/factory/projects/:id/repositories/:projectRepositoryId', {\n        method: 'PATCH',\n        requiresAuth: false,\n        handler: async routeContext => {\n          const context = loose(routeContext);\n          const tenant = await this.#resolveTenant(context);\n          if ('response' in tenant) return tenant.response;\n          const projectId = context.req.param('id');\n          const projectRepositoryId = context.req.param('projectRepositoryId');\n          if (!projectId || !UUID_RE.test(projectId) || !projectRepositoryId || !UUID_RE.test(projectRepositoryId))\n            return context.json({ error: 'Project repository not found' }, 404);\n          const found = await this.#findProjectRepository({ orgId: tenant.orgId, projectId, id: projectRepositoryId });\n          if (!found) return context.json({ error: 'Project repository not found' }, 404);\n          const input = parseRepositoryUpdateInput(await readJson(context));\n          if (!input) return context.json({ error: 'invalid_project_repository' }, 400);\n          const projectRepository = await found.handle.projectRepositories.update({\n            orgId: tenant.orgId,\n            id: projectRepositoryId,\n            input,\n          });\n          return context.json({\n            projectRepository: await this.#repositoryPayload(found.handle, tenant.orgId, projectRepository!),\n          });\n        },\n      }),\n      registerApiRoute('/web/factory/projects/:id/repositories/:projectRepositoryId', {\n        method: 'DELETE',\n        requiresAuth: false,\n        handler: async routeContext => {\n          const context = loose(routeContext);\n          const tenant = await this.#resolveTenant(context);\n          if ('response' in tenant) return tenant.response;\n          const projectId = context.req.param('id');\n          const projectRepositoryId = context.req.param('projectRepositoryId');\n          if (!projectId || !UUID_RE.test(projectId) || !projectRepositoryId || !UUID_RE.test(projectRepositoryId))\n            return context.json({ error: 'Project repository not found' }, 404);\n          const found = await this.#findProjectRepository({ orgId: tenant.orgId, projectId, id: projectRepositoryId });\n          if (!found) return context.json({ error: 'Project repository not found' }, 404);\n          if (!(await this.#retireProjectRepositorySessions(found.handle, tenant.orgId, projectRepositoryId))) {\n            return context.json({ error: 'session_retirement_unavailable' }, 409);\n          }\n          await found.handle.projectRepositories.unlink({ orgId: tenant.orgId, id: projectRepositoryId });\n          return context.body(null, 204);\n        },\n      }),\n    ];\n  }\n}\n"],"mappings":";;;AAmBA,MAAM,UAAU;AAChB,MAAM,kBAAkB;AACxB,MAAM,yBAAyB;AAC/B,MAAM,gCAAgC;AACtC,MAAM,oBAAoB;AAC1B,MAAM,8BAA8B;AACpC,MAAM,6BAA6B;AACnC,MAAM,kBAAkB;AAExB,SAAS,MAAM,SAA2B;CACxC,OAAO;AACT;AAEA,eAAe,SAAS,SAAgD;CACtE,IAAI;EACF,OAAO,MAAM,QAAQ,IAAI,KAAK;CAChC,QAAQ;EACN;CACF;AACF;AAEA,SAAS,iBAAiB,OAAkD;CAC1E,IAAI,CAAC,SAAS,OAAO,UAAU,UAAU,OAAO;CAChD,MAAM,QAAQ;CACd,IAAI,OAAO,MAAM,SAAS,UAAU,OAAO;CAC3C,MAAM,OAAO,MAAM,KAAK,KAAK;CAC7B,IAAI,CAAC,QAAQ,KAAK,SAAS,iBAAiB,OAAO;CACnD,IAAI,MAAM,gBAAgB,KAAA,KAAa,MAAM,gBAAgB,QAAQ,OAAO,MAAM,gBAAgB,UAChG,OAAO;CACT,MAAM,cAAc,OAAO,MAAM,gBAAgB,WAAW,MAAM,YAAY,KAAK,KAAK,OAAO;CAC/F,IAAI,eAAe,YAAY,SAAS,wBAAwB,OAAO;CACvE,OAAO;EAAE;EAAM;CAAY;AAC7B;AAEA,SAAS,iBAAiB,OAAkD;CAC1E,IAAI,CAAC,SAAS,OAAO,UAAU,UAAU,OAAO;CAChD,MAAM,QAAQ;CACd,MAAM,QAAmC,CAAC;CAC1C,IAAI,MAAM,SAAS,KAAA,GAAW;EAC5B,IAAI,OAAO,MAAM,SAAS,UAAU,OAAO;EAC3C,MAAM,OAAO,MAAM,KAAK,KAAK;EAC7B,IAAI,CAAC,QAAQ,KAAK,SAAS,iBAAiB,OAAO;EACnD,MAAM,OAAO;CACf;CACA,IAAI,MAAM,gBAAgB,KAAA,GAAW;EACnC,IAAI,MAAM,gBAAgB,QAAQ,OAAO,MAAM,gBAAgB,UAAU,OAAO;EAChF,MAAM,cAAc,OAAO,MAAM,gBAAgB,WAAW,MAAM,YAAY,KAAK,KAAK,OAAO;EAC/F,IAAI,eAAe,YAAY,SAAS,wBAAwB,OAAO;EACvE,MAAM,cAAc;CACtB;CACA,IAAI,MAAM,mBAAmB,KAAA,GAAW;EACtC,MAAM,iBAAiB,oBAAoB,MAAM,gBAAgB;GAAE,WAAW;GAAiB,UAAU;EAAK,CAAC;EAC/G,IAAI,mBAAmB,OAAO,OAAO;EACrC,MAAM,iBAAiB,kBAAkB;CAC3C;CACA,IAAI,MAAM,0BAA0B,KAAA,GAAW;EAC7C,IAAI,OAAO,MAAM,0BAA0B,WAAW,OAAO;EAC7D,MAAM,wBAAwB,MAAM;CACtC;CACA,IAAI,MAAM,mBAAmB,KAAA,GAAW;EACtC,IAAI,OAAO,MAAM,mBAAmB,WAAW,OAAO;EACtD,MAAM,iBAAiB,MAAM;CAC/B;CACA,OAAO,OAAO,KAAK,KAAK,CAAC,CAAC,SAAS,IAAI,QAAQ;AACjD;AAEA,SAAS,qBAAqB,OAA0E;CACtG,IAAI,CAAC,SAAS,OAAO,UAAU,UAAU,OAAO;CAChD,MAAM,QAAQ;CACd,IAAI,OAAO,MAAM,kBAAkB,YAAY,CAAC,MAAM,cAAc,KAAK,GAAG,OAAO;CACnF,IAAI,OAAO,MAAM,mBAAmB,YAAY,CAAC,QAAQ,KAAK,MAAM,cAAc,GAAG,OAAO;CAC5F,OAAO;EAAE,eAAe,MAAM,cAAc,KAAK;EAAG,gBAAgB,MAAM;CAAe;AAC3F;AAEA,SAAS,oBACP,OACA,EAAE,WAAW,WAAW,SACW;CACnC,IAAI,UAAU,KAAA,GAAW,OAAO,KAAA;CAChC,IAAI,UAAU,MAAM,OAAO,WAAW,OAAO;CAC7C,IAAI,OAAO,UAAU,UAAU,OAAO;CACtC,MAAM,aAAa,MAAM,KAAK;CAC9B,IAAI,CAAC,YAAY,OAAO,WAAW,OAAO;CAC1C,IAAI,WAAW,SAAS,aAAa,gBAAgB,KAAK,UAAU,GAAG,OAAO;CAC9E,OAAO;AACT;AAEA,SAAS,yBAAyB,OAOzB;CACP,IAAI,CAAC,SAAS,OAAO,UAAU,UAAU,OAAO;CAChD,MAAM,QAAQ;CACd,IAAI,OAAO,MAAM,iBAAiB,YAAY,CAAC,QAAQ,KAAK,MAAM,YAAY,GAAG,OAAO;CACxF,MAAM,SAAS,oBAAoB,MAAM,QAAQ;EAAE,WAAW;EAAmB,UAAU;CAAK,CAAC;CACjG,MAAM,kBAAkB,oBAAoB,MAAM,iBAAiB,EAAE,WAAW,4BAA4B,CAAC;CAC7G,MAAM,iBAAiB,oBAAoB,MAAM,gBAAgB,EAAE,WAAW,2BAA2B,CAAC;CAC1G,MAAM,eAAe,oBAAoB,MAAM,cAAc;EAC3D,WAAW;EACX,UAAU;CACZ,CAAC;CACD,MAAM,kBAAkB,oBAAoB,MAAM,iBAAiB;EACjE,WAAW;EACX,UAAU;CACZ,CAAC;CACD,IACE,WAAW,SACX,OAAO,oBAAoB,YAC3B,OAAO,mBAAmB,YAC1B,iBAAiB,SACjB,oBAAoB,OAEpB,OAAO;CACT,OAAO;EACL,cAAc,MAAM;EACpB,QAAQ,UAAU;EAClB;EACA;EACA,cAAc,gBAAgB;EAC9B,iBAAiB,mBAAmB;CACtC;AACF;AAEA,SAAS,2BAA2B,OAAqD;CACvF,IAAI,CAAC,SAAS,OAAO,UAAU,UAAU,OAAO;CAChD,MAAM,QAAQ;CACd,MAAM,QAAsC,CAAC;CAC7C,MAAM,SAAS,oBAAoB,MAAM,QAAQ;EAAE,WAAW;EAAmB,UAAU;CAAK,CAAC;CACjG,MAAM,kBAAkB,oBAAoB,MAAM,iBAAiB,EAAE,WAAW,4BAA4B,CAAC;CAC7G,MAAM,iBAAiB,oBAAoB,MAAM,gBAAgB,EAAE,WAAW,2BAA2B,CAAC;CAC1G,MAAM,eAAe,oBAAoB,MAAM,cAAc;EAC3D,WAAW;EACX,UAAU;CACZ,CAAC;CACD,MAAM,kBAAkB,oBAAoB,MAAM,iBAAiB;EACjE,WAAW;EACX,UAAU;CACZ,CAAC;CACD,IACE,WAAW,SACX,oBAAoB,SACpB,oBAAoB,QACpB,mBAAmB,SACnB,mBAAmB,QACnB,iBAAiB,SACjB,oBAAoB,OAEpB,OAAO;CACT,IAAI,WAAW,KAAA,GAAW,MAAM,SAAS;CACzC,IAAI,oBAAoB,KAAA,GAAW,MAAM,kBAAkB;CAC3D,IAAI,mBAAmB,KAAA,GAAW,MAAM,iBAAiB;CACzD,IAAI,iBAAiB,KAAA,GAAW,MAAM,eAAe;CACrD,IAAI,oBAAoB,KAAA,GAAW,MAAM,kBAAkB;CAC3D,OAAO,OAAO,KAAK,KAAK,CAAC,CAAC,SAAS,IAAI,QAAQ;AACjD;AAkBA,IAAa,gBAAb,cAAmC,MAAyB;CAC1D;CAEA,YAAY,MAAyB;EACnC,MAAM,IAAI;EACV,KAAKA,gCAAgC,IAAI,IAAI,KAAK,gCAAgC,CAAC,CAAC;CACtF;CAEA,MAAMC,YAA6C;EACjD,MAAM,KAAK,KAAK,SAAS,YAAY;EACrC,OAAO,KAAK,KAAK;CACnB;CAEA,MAAMC,iBAAgD;EACpD,MAAM,KAAK,KAAK,cAAc,YAAY;EAC1C,OAAO,KAAK,KAAK;CACnB;CAEA,MAAMC,WAAkD;EACtD,MAAM,UAAU,MAAM,KAAKD,eAAe;EAC1C,OAAO,CAAC,GAAG,KAAKF,6BAA6B,CAAC,CAAC,KAAI,kBAAiB,QAAQ,eAAe,aAAa,CAAC;CAC3G;CAEA,MAAMI,SAAS,OAAe,IAAY;EACxC,QAAQ,MAAM,KAAKH,UAAU,EAAA,CAAG,IAAI;GAAE;GAAO;EAAG,CAAC;CACnD;CAEA,MAAMI,gBAAgB,EAAE,OAAO,WAAW,MAAwD;EAChG,KAAK,MAAM,UAAU,MAAM,KAAKF,SAAS,GAAG;GAC1C,MAAM,aAAa,MAAM,OAAO,YAAY,IAAI;IAAE;IAAO;GAAG,CAAC;GAC7D,IAAI,YAAY,qBAAqB,WAAW,OAAO;IAAE;IAAQ;GAAW;EAC9E;EACA,OAAO;CACT;CAEA,MAAMG,uBAAuB,EAAE,OAAO,WAAW,MAAwD;EACvG,KAAK,MAAM,UAAU,MAAM,KAAKH,SAAS,GAAG;GAC1C,MAAM,oBAAoB,MAAM,OAAO,oBAAoB,IAAI;IAAE;IAAO;GAAG,CAAC;GAC5E,IAAI,CAAC,mBAAmB;GACxB,MAAM,aAAa,MAAM,OAAO,YAAY,IAAI;IAAE;IAAO,IAAI,kBAAkB;GAAa,CAAC;GAC7F,IAAI,YAAY,qBAAqB,WAAW,OAAO;IAAE;IAAQ;IAAY;GAAkB;EACjG;EACA,OAAO;CACT;CAEA,MAAMI,mBAAmB,QAAoC,OAAe,mBAAsC;EAChH,MAAM,aAAa,MAAM,OAAO,aAAa,IAAI;GAAE;GAAO,IAAI,kBAAkB;EAAa,CAAC;EAC9F,OAAO;GAAE,GAAG;GAAmB;EAAW;CAC5C;CAEA,MAAMC,iCACJ,QACA,OACA,qBACkB;EAElB,KAAI,MADmB,OAAO,SAAS,wBAAwB,EAAE,oBAAoB,CAAC,EAAA,CACzE,WAAW,GAAG,OAAO;EAClC,IAAI,CAAC,KAAK,KAAK,mBAAmB,OAAO;EACzC,MAAM,KAAK,KAAK,kBAAkB,gCAAgC;GAChE,eAAe;GACf;GACA;EACF,CAAC;EACD,OAAO;CACT;CAEA,MAAMC,eAAe,SAAuF;EAC1G,MAAM,KAAK,KAAK,KAAK,WAAW,OAAO;EACvC,MAAM,SAAS,KAAK,KAAK,KAAK,OAAO,OAAO;EAC5C,IAAI,CAAC,QAAQ,OAAO,EAAE,UAAU,QAAQ,KAAK,EAAE,OAAO,eAAe,GAAG,GAAG,EAAE;EAC7E,IAAI,CAAC,OAAO,OACV,OAAO,EACL,UAAU,QAAQ,KAChB;GAAE,OAAO;GAAyB,SAAS;EAA4C,GACvF,GACF,EACF;EAEF,OAAO;GAAE,OAAO,OAAO;GAAO,QAAQ,OAAO;EAAO;CACtD;CAEA,SAAqB;EACnB,OAAO;GACL,iBAAiB,yBAAyB;IACxC,QAAQ;IACR,cAAc;IACd,SAAS,OAAM,iBAAgB;KAC7B,MAAM,UAAU,MAAM,YAAY;KAClC,MAAM,SAAS,MAAM,KAAKA,eAAe,OAAO;KAChD,IAAI,cAAc,QAAQ,OAAO,OAAO;KACxC,OAAO,QAAQ,KAAK,EAAE,UAAU,OAAO,MAAM,KAAKR,UAAU,EAAA,CAAG,KAAK,EAAE,OAAO,OAAO,MAAM,CAAC,EAAE,CAAC;IAChG;GACF,CAAC;GACD,iBAAiB,yBAAyB;IACxC,QAAQ;IACR,cAAc;IACd,SAAS,OAAM,iBAAgB;KAC7B,MAAM,UAAU,MAAM,YAAY;KAClC,MAAM,SAAS,MAAM,KAAKQ,eAAe,OAAO;KAChD,IAAI,cAAc,QAAQ,OAAO,OAAO;KACxC,MAAM,QAAQ,iBAAiB,MAAM,SAAS,OAAO,CAAC;KACtD,IAAI,CAAC,OAAO,OAAO,QAAQ,KAAK,EAAE,OAAO,kBAAkB,GAAG,GAAG;KACjE,MAAM,UAAU,OAAO,MAAM,KAAKR,UAAU,EAAA,CAAG,OAAO;MAAE,OAAO,OAAO;MAAO,QAAQ,OAAO;MAAQ;KAAM,CAAC;KAC3G,OAAO,QAAQ,KAAK,EAAE,QAAQ,GAAG,GAAG;IACtC;GACF,CAAC;GACD,iBAAiB,6BAA6B;IAC5C,QAAQ;IACR,cAAc;IACd,SAAS,OAAM,iBAAgB;KAC7B,MAAM,UAAU,MAAM,YAAY;KAClC,MAAM,SAAS,MAAM,KAAKQ,eAAe,OAAO;KAChD,IAAI,cAAc,QAAQ,OAAO,OAAO;KACxC,MAAM,KAAK,QAAQ,IAAI,MAAM,IAAI;KACjC,IAAI,CAAC,MAAM,CAAC,QAAQ,KAAK,EAAE,GAAG,OAAO,QAAQ,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;KACrF,MAAM,UAAU,MAAM,KAAKL,SAAS,OAAO,OAAO,EAAE;KACpD,OAAO,UAAU,QAAQ,KAAK,EAAE,QAAQ,CAAC,IAAI,QAAQ,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;IAC/F;GACF,CAAC;GACD,iBAAiB,6BAA6B;IAC5C,QAAQ;IACR,cAAc;IACd,SAAS,OAAM,iBAAgB;KAC7B,MAAM,UAAU,MAAM,YAAY;KAClC,MAAM,SAAS,MAAM,KAAKK,eAAe,OAAO;KAChD,IAAI,cAAc,QAAQ,OAAO,OAAO;KACxC,MAAM,KAAK,QAAQ,IAAI,MAAM,IAAI;KACjC,IAAI,CAAC,MAAM,CAAC,QAAQ,KAAK,EAAE,GAAG,OAAO,QAAQ,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;KACrF,MAAM,QAAQ,iBAAiB,MAAM,SAAS,OAAO,CAAC;KACtD,IAAI,CAAC,OAAO,OAAO,QAAQ,KAAK,EAAE,OAAO,kBAAkB,GAAG,GAAG;KACjE,MAAM,UAAU,OAAO,MAAM,KAAKR,UAAU,EAAA,CAAG,OAAO;MAAE,OAAO,OAAO;MAAO;MAAI;KAAM,CAAC;KACxF,OAAO,UAAU,QAAQ,KAAK,EAAE,QAAQ,CAAC,IAAI,QAAQ,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;IAC/F;GACF,CAAC;GACD,iBAAiB,6BAA6B;IAC5C,QAAQ;IACR,cAAc;IACd,SAAS,OAAM,iBAAgB;KAC7B,MAAM,UAAU,MAAM,YAAY;KAClC,MAAM,SAAS,MAAM,KAAKQ,eAAe,OAAO;KAChD,IAAI,cAAc,QAAQ,OAAO,OAAO;KACxC,MAAM,KAAK,QAAQ,IAAI,MAAM,IAAI;KACjC,IAAI,CAAC,MAAM,CAAC,QAAQ,KAAK,EAAE,GAAG,OAAO,QAAQ,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;KACrF,IAAI,CAAE,MAAM,KAAKL,SAAS,OAAO,OAAO,EAAE,GAAI,OAAO,QAAQ,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;KACrG,KAAK,MAAM,UAAU,MAAM,KAAKD,SAAS,GACvC,KAAK,MAAM,cAAc,MAAM,OAAO,YAAY,KAAK;MAAE,OAAO,OAAO;MAAO,kBAAkB;KAAG,CAAC,GAAG;MACrG,KAAK,MAAM,qBAAqB,MAAM,OAAO,oBAAoB,KAAK;OACpE,OAAO,OAAO;OACd,cAAc,WAAW;MAC3B,CAAC,GACC,IAAI,CAAE,MAAM,KAAKK,iCAAiC,QAAQ,OAAO,OAAO,kBAAkB,EAAE,GAC1F,OAAO,QAAQ,KAAK,EAAE,OAAO,iCAAiC,GAAG,GAAG;MAGxE,MAAM,OAAO,YAAY,OAAO;OAAE,OAAO,OAAO;OAAO,IAAI,WAAW;MAAG,CAAC;KAC5E;KAEF,OAAO,MAAM,KAAKP,UAAU,EAAA,CAAG,OAAO;MAAE,OAAO,OAAO;MAAO;KAAG,CAAC;KACjE,OAAO,QAAQ,KAAK,MAAM,GAAG;IAC/B;GACF,CAAC;GACD,iBAAiB,wDAAwD;IACvE,QAAQ;IACR,cAAc;IACd,SAAS,OAAM,iBAAgB;KAC7B,MAAM,UAAU,MAAM,YAAY;KAClC,MAAM,SAAS,MAAM,KAAKQ,eAAe,OAAO;KAChD,IAAI,cAAc,QAAQ,OAAO,OAAO;KACxC,MAAM,YAAY,QAAQ,IAAI,MAAM,IAAI;KACxC,IAAI,CAAC,aAAa,CAAC,QAAQ,KAAK,SAAS,KAAK,CAAE,MAAM,KAAKL,SAAS,OAAO,OAAO,SAAS,GACzF,OAAO,QAAQ,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;KACzD,MAAM,cAAc,CAAC;KACrB,KAAK,MAAM,UAAU,MAAM,KAAKD,SAAS,GACvC,KAAK,MAAM,cAAc,MAAM,OAAO,YAAY,KAAK;MACrD,OAAO,OAAO;MACd,kBAAkB;KACpB,CAAC,GAAG;MACF,MAAM,eAAe,MAAM,OAAO,cAAc,IAAI;OAClD,OAAO,OAAO;OACd,IAAI,WAAW;MACjB,CAAC;MAQD,IAAI,CAAC,cAAc;MACnB,MAAM,QAAQ,MAAM,OAAO,oBAAoB,KAAK;OAAE,OAAO,OAAO;OAAO,cAAc,WAAW;MAAG,CAAC;MACxG,YAAY,KAAK;OACf,GAAG;OACH;OACA,cAAc,MAAM,QAAQ,IAAI,MAAM,KAAI,SAAQ,KAAKI,mBAAmB,QAAQ,OAAO,OAAO,IAAI,CAAC,CAAC;MACxG,CAAC;KACH;KAEF,OAAO,QAAQ,KAAK,EAAE,YAAY,CAAC;IACrC;GACF,CAAC;GACD,iBAAiB,wDAAwD;IACvE,QAAQ;IACR,cAAc;IACd,SAAS,OAAM,iBAAgB;KAC7B,MAAM,UAAU,MAAM,YAAY;KAClC,MAAM,SAAS,MAAM,KAAKE,eAAe,OAAO;KAChD,IAAI,cAAc,QAAQ,OAAO,OAAO;KACxC,MAAM,YAAY,QAAQ,IAAI,MAAM,IAAI;KACxC,IAAI,CAAC,aAAa,CAAC,QAAQ,KAAK,SAAS,KAAK,CAAE,MAAM,KAAKL,SAAS,OAAO,OAAO,SAAS,GACzF,OAAO,QAAQ,KAAK,EAAE,OAAO,oBAAoB,GAAG,GAAG;KACzD,MAAM,QAAQ,qBAAqB,MAAM,SAAS,OAAO,CAAC;KAC1D,IAAI,CAAC,OAAO,OAAO,QAAQ,KAAK,EAAE,OAAO,oCAAoC,GAAG,GAAG;KACnF,IAAI,CAAC,KAAKJ,8BAA8B,IAAI,MAAM,aAAa,GAC7D,OAAO,QAAQ,KAAK,EAAE,OAAO,uCAAuC,GAAG,GAAG;KAC5E,MAAM,UAAU,MAAM,KAAKE,eAAe,EAAA,CAAG,eAAe,MAAM,aAAa;KAC/E,IAAI,CAAE,MAAM,OAAO,cAAc,IAAI;MAAE,OAAO,OAAO;MAAO,IAAI,MAAM;KAAe,CAAC,GACpF,OAAO,QAAQ,KAAK,EAAE,OAAO,wCAAwC,GAAG,GAAG;KAC7E,MAAM,aAAa,MAAM,OAAO,YAAY,OAAO;MACjD,OAAO,OAAO;MACd,kBAAkB;MAClB,gBAAgB,MAAM;MACtB,iBAAiB,OAAO;KAC1B,CAAC;KACD,OAAO,QAAQ,KAAK,EAAE,WAAW,GAAG,GAAG;IACzC;GACF,CAAC;GACD,iBAAiB,sEAAsE;IACrF,QAAQ;IACR,cAAc;IACd,SAAS,OAAM,iBAAgB;KAC7B,MAAM,UAAU,MAAM,YAAY;KAClC,MAAM,SAAS,MAAM,KAAKO,eAAe,OAAO;KAChD,IAAI,cAAc,QAAQ,OAAO,OAAO;KACxC,MAAM,YAAY,QAAQ,IAAI,MAAM,IAAI;KACxC,MAAM,eAAe,QAAQ,IAAI,MAAM,cAAc;KACrD,IAAI,CAAC,aAAa,CAAC,QAAQ,KAAK,SAAS,KAAK,CAAC,gBAAgB,CAAC,QAAQ,KAAK,YAAY,GACvF,OAAO,QAAQ,KAAK,EAAE,OAAO,sCAAsC,GAAG,GAAG;KAC3E,MAAM,QAAQ,MAAM,KAAKJ,gBAAgB;MAAE,OAAO,OAAO;MAAO;MAAW,IAAI;KAAa,CAAC;KAC7F,IAAI,CAAC,OAAO,OAAO,QAAQ,KAAK,EAAE,OAAO,sCAAsC,GAAG,GAAG;KACrF,KAAK,MAAM,qBAAqB,MAAM,MAAM,OAAO,oBAAoB,KAAK;MAC1E,OAAO,OAAO;MACd;KACF,CAAC,GACC,IAAI,CAAE,MAAM,KAAKG,iCAAiC,MAAM,QAAQ,OAAO,OAAO,kBAAkB,EAAE,GAChG,OAAO,QAAQ,KAAK,EAAE,OAAO,iCAAiC,GAAG,GAAG;KAGxE,MAAM,MAAM,OAAO,YAAY,OAAO;MAAE,OAAO,OAAO;MAAO,IAAI;KAAa,CAAC;KAC/E,OAAO,QAAQ,KAAK,MAAM,GAAG;IAC/B;GACF,CAAC;GACD,iBAAiB,mFAAmF;IAClG,QAAQ;IACR,cAAc;IACd,SAAS,OAAM,iBAAgB;KAC7B,MAAM,UAAU,MAAM,YAAY;KAClC,MAAM,SAAS,MAAM,KAAKC,eAAe,OAAO;KAChD,IAAI,cAAc,QAAQ,OAAO,OAAO;KACxC,MAAM,YAAY,QAAQ,IAAI,MAAM,IAAI;KACxC,MAAM,eAAe,QAAQ,IAAI,MAAM,cAAc;KACrD,IAAI,CAAC,aAAa,CAAC,QAAQ,KAAK,SAAS,KAAK,CAAC,gBAAgB,CAAC,QAAQ,KAAK,YAAY,GACvF,OAAO,QAAQ,KAAK,EAAE,OAAO,sCAAsC,GAAG,GAAG;KAC3E,MAAM,QAAQ,MAAM,KAAKJ,gBAAgB;MAAE,OAAO,OAAO;MAAO;MAAW,IAAI;KAAa,CAAC;KAC7F,IAAI,CAAC,OAAO,OAAO,QAAQ,KAAK,EAAE,OAAO,sCAAsC,GAAG,GAAG;KACrF,MAAM,QAAQ,yBAAyB,MAAM,SAAS,OAAO,CAAC;KAC9D,IAAI,CAAC,OAAO,OAAO,QAAQ,KAAK,EAAE,OAAO,6BAA6B,GAAG,GAAG;KAC5E,MAAM,aAAa,MAAM,MAAM,OAAO,aAAa,IAAI;MAAE,OAAO,OAAO;MAAO,IAAI,MAAM;KAAa,CAAC;KACtG,IAAI,CAAC,cAAc,WAAW,mBAAmB,MAAM,WAAW,gBAChE,OAAO,QAAQ,KAAK,EAAE,OAAO,sCAAsC,GAAG,GAAG;KAC3E,MAAM,oBAAoB,MAAM,MAAM,OAAO,oBAAoB,KAAK;MACpE,OAAO,OAAO;MACd;MACA,iBAAiB,OAAO;MACxB,GAAG;KACL,CAAC;KACD,IAAI;MACF,KAAK,KAAK,4BAA4B;OAAE,OAAO,OAAO;OAAO;MAAkB,CAAC;KAClF,SAAS,OAAO;MACd,QAAQ,KAAK,kFAAkF,KAAK;KACtG;KACA,OAAO,QAAQ,KACb,EAAE,mBAAmB,MAAM,KAAKE,mBAAmB,MAAM,QAAQ,OAAO,OAAO,iBAAiB,EAAE,GAClG,GACF;IACF;GACF,CAAC;GACD,iBAAiB,+DAA+D;IAC9E,QAAQ;IACR,cAAc;IACd,SAAS,OAAM,iBAAgB;KAC7B,MAAM,UAAU,MAAM,YAAY;KAClC,MAAM,SAAS,MAAM,KAAKE,eAAe,OAAO;KAChD,IAAI,cAAc,QAAQ,OAAO,OAAO;KACxC,MAAM,YAAY,QAAQ,IAAI,MAAM,IAAI;KACxC,MAAM,sBAAsB,QAAQ,IAAI,MAAM,qBAAqB;KACnE,IAAI,CAAC,aAAa,CAAC,QAAQ,KAAK,SAAS,KAAK,CAAC,uBAAuB,CAAC,QAAQ,KAAK,mBAAmB,GACrG,OAAO,QAAQ,KAAK,EAAE,OAAO,+BAA+B,GAAG,GAAG;KACpE,MAAM,QAAQ,MAAM,KAAKH,uBAAuB;MAAE,OAAO,OAAO;MAAO;MAAW,IAAI;KAAoB,CAAC;KAC3G,IAAI,CAAC,OAAO,OAAO,QAAQ,KAAK,EAAE,OAAO,+BAA+B,GAAG,GAAG;KAC9E,MAAM,QAAQ,2BAA2B,MAAM,SAAS,OAAO,CAAC;KAChE,IAAI,CAAC,OAAO,OAAO,QAAQ,KAAK,EAAE,OAAO,6BAA6B,GAAG,GAAG;KAC5E,MAAM,oBAAoB,MAAM,MAAM,OAAO,oBAAoB,OAAO;MACtE,OAAO,OAAO;MACd,IAAI;MACJ;KACF,CAAC;KACD,OAAO,QAAQ,KAAK,EAClB,mBAAmB,MAAM,KAAKC,mBAAmB,MAAM,QAAQ,OAAO,OAAO,iBAAkB,EACjG,CAAC;IACH;GACF,CAAC;GACD,iBAAiB,+DAA+D;IAC9E,QAAQ;IACR,cAAc;IACd,SAAS,OAAM,iBAAgB;KAC7B,MAAM,UAAU,MAAM,YAAY;KAClC,MAAM,SAAS,MAAM,KAAKE,eAAe,OAAO;KAChD,IAAI,cAAc,QAAQ,OAAO,OAAO;KACxC,MAAM,YAAY,QAAQ,IAAI,MAAM,IAAI;KACxC,MAAM,sBAAsB,QAAQ,IAAI,MAAM,qBAAqB;KACnE,IAAI,CAAC,aAAa,CAAC,QAAQ,KAAK,SAAS,KAAK,CAAC,uBAAuB,CAAC,QAAQ,KAAK,mBAAmB,GACrG,OAAO,QAAQ,KAAK,EAAE,OAAO,+BAA+B,GAAG,GAAG;KACpE,MAAM,QAAQ,MAAM,KAAKH,uBAAuB;MAAE,OAAO,OAAO;MAAO;MAAW,IAAI;KAAoB,CAAC;KAC3G,IAAI,CAAC,OAAO,OAAO,QAAQ,KAAK,EAAE,OAAO,+BAA+B,GAAG,GAAG;KAC9E,IAAI,CAAE,MAAM,KAAKE,iCAAiC,MAAM,QAAQ,OAAO,OAAO,mBAAmB,GAC/F,OAAO,QAAQ,KAAK,EAAE,OAAO,iCAAiC,GAAG,GAAG;KAEtE,MAAM,MAAM,OAAO,oBAAoB,OAAO;MAAE,OAAO,OAAO;MAAO,IAAI;KAAoB,CAAC;KAC9F,OAAO,QAAQ,KAAK,MAAM,GAAG;IAC/B;GACF,CAAC;EACH;CACF;AACF"}

package/dist/routes/surface.d.ts

@@ -9,6 +9,7 @@ import type { FactoryBindingPreparationInput } from '../rules/dispatcher.js';
 import { FactoryStartCoordinator } from '../rules/start-coordinator.js';
 import { FactoryTransitionService } from '../rules/transition-service.js';
 import type { FactoryRules } from '../rules/types.js';
+import type { BaseCheckpointTriggers } from '../sandbox/base-checkpoint-triggers.js';
 import type { SandboxFleet } from '../sandbox/fleet.js';
 import type { StateSigner } from '../state-signing.js';
 import type { AuditEmitter } from '../storage/domains/audit/domain.js';
@@ -42,6 +43,8 @@ export interface FactoryApiRoutesDeps {
     stateSigner?: StateSigner;
     /** Sandbox fleet constructed by the factory (disabled when no machine). */
     fleet: SandboxFleet;
+    /** Base-checkpoint trigger surface, when the factory constructed one. */
+    baseCheckpoints?: BaseCheckpointTriggers;
     /** Root factory storage backend (distributed locks, app-db diagnostics). */
     factoryStorage?: FactoryStorage;
     integrationStorage: IntegrationStorage;
@@ -62,6 +65,7 @@ export interface FactoryApiRoutesDeps {
     integrations?: IntegrationRegistration[];
     intakeReady: boolean;
     factoryReady: boolean;
+    knowledgeEnabled: boolean;
     /** Resolved Factory rule set, threaded from the host (no service locator). */
     rules: FactoryRules;
     factoryTransitionService?: FactoryTransitionService;
@@ -98,6 +102,8 @@ export declare function buildIntegrationContext(deps: Pick<FactoryApiRoutesDeps,
      * `routes()`, `channels()`, and `workers()` all see the same context shape.
      */
     sourceControlOwnerId?: string;
+    /** Base-checkpoint trigger surface, when the factory constructed one. */
+    baseCheckpoints?: BaseCheckpointTriggers;
 }, integrationId: string): IntegrationContext;
 /**
  * Assemble the custom `/web/*` API routes as Mastra `server.apiRoutes`:

package/dist/routes/surface.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"surface.d.ts","sourceRoot":"","sources":["../../src/routes/surface.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AACjE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAEpD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAE3D,OAAO,KAAK,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAEtF,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAC;AAC/E,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,wBAAwB,CAAC;AAC7E,OAAO,EAAE,uBAAuB,EAAE,MAAM,+BAA+B,CAAC;AACxE,OAAO,EAAE,wBAAwB,EAAE,MAAM,gCAAgC,CAAC;AAC1E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEtD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAGxD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oCAAoC,CAAC;AACvE,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,6CAA6C,CAAC;AAC1F,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAC;AACtF,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,6CAA6C,CAAC;AAC1F,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAC;AAC/E,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAC;AACvE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,yCAAyC,CAAC;AAClF,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,4CAA4C,CAAC;AACxF,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,wCAAwC,CAAC;AAChF,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAClF,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,yCAAyC,CAAC;AAClF,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACtF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uCAAuC,CAAC;AAM9E,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAK5C,MAAM,WAAW,uBAAuB;IACtC,WAAW,EAAE,kBAAkB,CAAC;IAChC,KAAK,EAAE,OAAO,CAAC;IACf,WAAW,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,oBAAoB;IACnC,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,eAAe,CAAC,eAAe,CAAC,CAAC;IAC7C,qEAAqE;IACrE,IAAI,EAAE,SAAS,CAAC;IAChB,WAAW,EAAE,WAAW,CAAC;IACzB,KAAK,EAAE,YAAY,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,2EAA2E;IAC3E,KAAK,EAAE,YAAY,CAAC;IACpB,4EAA4E;IAC5E,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,kBAAkB,EAAE,kBAAkB,CAAC;IACvC,oBAAoB,EAAE,oBAAoB,CAAC;IAC3C,mFAAmF;IACnF,OAAO,EAAE;QACP,MAAM,EAAE,aAAa,CAAC;QACtB,gBAAgB,EAAE,uBAAuB,CAAC;QAC1C,cAAc,EAAE,qBAAqB,CAAC;QACtC,eAAe,EAAE,sBAAsB,CAAC;QACxC,UAAU,EAAE,iBAAiB,CAAC;QAC9B,UAAU,EAAE,iBAAiB,CAAC;QAC9B,QAAQ,EAAE,sBAAsB,CAAC;QACjC,WAAW,EAAE,kBAAkB,CAAC;QAChC,SAAS,EAAE,gBAAgB,CAAC;QAC5B,eAAe,EAAE,sBAAsB,CAAC;KACzC,CAAC;IACF,YAAY,CAAC,EAAE,uBAAuB,EAAE,CAAC;IACzC,WAAW,EAAE,OAAO,CAAC;IACrB,YAAY,EAAE,OAAO,CAAC;IACtB,8EAA8E;IAC9E,KAAK,EAAE,YAAY,CAAC;IACpB,wBAAwB,CAAC,EAAE,wBAAwB,CAAC;IACpD,iBAAiB,CAAC,EAAE,OAAO,kCAAkC,EAAE,4BAA4B,CAAC;IAC5F,gBAAgB,CAAC,EAAE,CAAC,OAAO,EAAE;QAC3B,iBAAiB,EAAE,wBAAwB,CAAC;QAC5C,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE,8BAA8B,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;KAC3E,KAAK,IAAI,CAAC;CACZ;AAiDD,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,8BAA8B,CAAC,MAAM,CAAC,GAAG,MAAM,CAsBtF;AAED;;;;;;GAMG;AACH,wBAAsB,yBAAyB,CAC7C,MAAM,EAAE,iBAAiB,EACzB,WAAW,EAAE,uBAAuB,EACpC,QAAQ,EAAE,sBAAsB,EAChC,KAAK,EAAE,8BAA8B,GACpC,OAAO,CAAC,IAAI,CAAC,CAqCf;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,IAAI,CACR,oBAAoB,EACpB,YAAY,GAAG,cAAc,GAAG,MAAM,GAAG,OAAO,GAAG,gBAAgB,GAAG,oBAAoB,GAAG,sBAAsB,CACpH,GAAG;IACF,WAAW,EAAE,WAAW,CAAC;IACzB,SAAS,CAAC,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC;IACjC,KAAK,EAAE,YAAY,CAAC;IACpB,YAAY,EAAE,OAAO,CAAC;IACtB,OAAO,EAAE,IAAI,CACX,oBAAoB,CAAC,SAAS,CAAC,EAC/B,UAAU,GAAG,QAAQ,GAAG,WAAW,GAAG,iBAAiB,GAAG,gBAAgB,CAC3E,CAAC;IACF;;;;OAIG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC/B,EACD,aAAa,EAAE,MAAM,GACpB,kBAAkB,CAsBpB;AA4ED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,oBAAoB,GAAG,QAAQ,EAAE,CAoH/E"}
+{"version":3,"file":"surface.d.ts","sourceRoot":"","sources":["../../src/routes/surface.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AACjE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAEpD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAE3D,OAAO,KAAK,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAEtF,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAC;AAC/E,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,wBAAwB,CAAC;AAC7E,OAAO,EAAE,uBAAuB,EAAE,MAAM,+BAA+B,CAAC;AACxE,OAAO,EAAE,wBAAwB,EAAE,MAAM,gCAAgC,CAAC;AAC1E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEtD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,wCAAwC,CAAC;AACrF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAGxD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oCAAoC,CAAC;AACvE,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,6CAA6C,CAAC;AAC1F,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAC;AACtF,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,6CAA6C,CAAC;AAC1F,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAC;AAC/E,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAC;AACvE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,yCAAyC,CAAC;AAClF,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,4CAA4C,CAAC;AACxF,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,wCAAwC,CAAC;AAChF,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAClF,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,yCAAyC,CAAC;AAClF,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACtF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uCAAuC,CAAC;AAO9E,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAK5C,MAAM,WAAW,uBAAuB;IACtC,WAAW,EAAE,kBAAkB,CAAC;IAChC,KAAK,EAAE,OAAO,CAAC;IACf,WAAW,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,oBAAoB;IACnC,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,eAAe,CAAC,eAAe,CAAC,CAAC;IAC7C,qEAAqE;IACrE,IAAI,EAAE,SAAS,CAAC;IAChB,WAAW,EAAE,WAAW,CAAC;IACzB,KAAK,EAAE,YAAY,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,2EAA2E;IAC3E,KAAK,EAAE,YAAY,CAAC;IACpB,yEAAyE;IACzE,eAAe,CAAC,EAAE,sBAAsB,CAAC;IACzC,4EAA4E;IAC5E,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,kBAAkB,EAAE,kBAAkB,CAAC;IACvC,oBAAoB,EAAE,oBAAoB,CAAC;IAC3C,mFAAmF;IACnF,OAAO,EAAE;QACP,MAAM,EAAE,aAAa,CAAC;QACtB,gBAAgB,EAAE,uBAAuB,CAAC;QAC1C,cAAc,EAAE,qBAAqB,CAAC;QACtC,eAAe,EAAE,sBAAsB,CAAC;QACxC,UAAU,EAAE,iBAAiB,CAAC;QAC9B,UAAU,EAAE,iBAAiB,CAAC;QAC9B,QAAQ,EAAE,sBAAsB,CAAC;QACjC,WAAW,EAAE,kBAAkB,CAAC;QAChC,SAAS,EAAE,gBAAgB,CAAC;QAC5B,eAAe,EAAE,sBAAsB,CAAC;KACzC,CAAC;IACF,YAAY,CAAC,EAAE,uBAAuB,EAAE,CAAC;IACzC,WAAW,EAAE,OAAO,CAAC;IACrB,YAAY,EAAE,OAAO,CAAC;IACtB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,8EAA8E;IAC9E,KAAK,EAAE,YAAY,CAAC;IACpB,wBAAwB,CAAC,EAAE,wBAAwB,CAAC;IACpD,iBAAiB,CAAC,EAAE,OAAO,kCAAkC,EAAE,4BAA4B,CAAC;IAC5F,gBAAgB,CAAC,EAAE,CAAC,OAAO,EAAE;QAC3B,iBAAiB,EAAE,wBAAwB,CAAC;QAC5C,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE,8BAA8B,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;KAC3E,KAAK,IAAI,CAAC;CACZ;AAiDD,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,8BAA8B,CAAC,MAAM,CAAC,GAAG,MAAM,CAsBtF;AAED;;;;;;GAMG;AACH,wBAAsB,yBAAyB,CAC7C,MAAM,EAAE,iBAAiB,EACzB,WAAW,EAAE,uBAAuB,EACpC,QAAQ,EAAE,sBAAsB,EAChC,KAAK,EAAE,8BAA8B,GACpC,OAAO,CAAC,IAAI,CAAC,CAqCf;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,IAAI,CACR,oBAAoB,EACpB,YAAY,GAAG,cAAc,GAAG,MAAM,GAAG,OAAO,GAAG,gBAAgB,GAAG,oBAAoB,GAAG,sBAAsB,CACpH,GAAG;IACF,WAAW,EAAE,WAAW,CAAC;IACzB,SAAS,CAAC,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC;IACjC,KAAK,EAAE,YAAY,CAAC;IACpB,YAAY,EAAE,OAAO,CAAC;IACtB,OAAO,EAAE,IAAI,CACX,oBAAoB,CAAC,SAAS,CAAC,EAC/B,UAAU,GAAG,QAAQ,GAAG,WAAW,GAAG,iBAAiB,GAAG,gBAAgB,CAC3E,CAAC;IACF;;;;OAIG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,yEAAyE;IACzE,eAAe,CAAC,EAAE,sBAAsB,CAAC;CAC1C,EACD,aAAa,EAAE,MAAM,GACpB,kBAAkB,CAuBpB;AA4ED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,oBAAoB,GAAG,QAAQ,EAAE,CA8H/E"}

package/dist/routes/surface.js

@@ -8,6 +8,7 @@ import { LiveSessions } from "../session/live-sessions.js";
 import { ConfigRoutes } from "./config.js";
 import { buildFsRoutes } from "./fs.js";
 import { IntakeRoutes } from "./intake.js";
+import { KnowledgeRoutes } from "./knowledge.js";
 import { OAuthRoutes } from "./oauth.js";
 import { SkillRoutes } from "./skills.js";
 import { invalidateTenantCredentialSnapshots } from "./tenant-credentials.js";
@@ -115,6 +116,7 @@ function buildIntegrationContext(deps, integrationId) {
 	return {
 		auth: deps.auth,
 		fleet: deps.fleet,
+		...deps.baseCheckpoints ? { baseCheckpoints: deps.baseCheckpoints } : {},
 		factoryStorage: deps.factoryStorage,
 		baseUrl: deps.publicOrigin,
 		controller: deps.controller,
@@ -253,8 +255,10 @@ function assembleFactoryApiRoutes(deps) {
 			authStorage: deps.authStorage,
 			modelCredentials: deps.domains.modelCredentials,
 			modelPacks: deps.domains.modelPacks,
+			sourceControlSessions: deps.sourceControlStorage.forIntegration("github").sessions,
 			memorySettings: deps.domains.memorySettings,
 			customProviders: deps.domains.customProviders,
+			features: { knowledge: deps.knowledgeEnabled },
 			onCredentialsChanged: invalidateTenantCredentialSnapshots,
 			onCustomProvidersChanged: invalidateCustomProvidersSnapshots
 		}).routes(),
@@ -278,11 +282,17 @@ function assembleFactoryApiRoutes(deps) {
 			auth: deps.auth,
 			audit: deps.audit,
 			intake: deps.domains.intake,
+			projects: deps.domains.projects,
 			integrations: (deps.integrations ?? []).flatMap(({ integration }) => integration.intake ? [{
 				id: integration.id,
 				intake: integration.intake
 			}] : [])
 		}).routes() : [],
+		...deps.factoryReady && deps.knowledgeEnabled ? new KnowledgeRoutes({
+			auth: deps.auth,
+			projects: deps.domains.projects,
+			knowledge: async () => deps.factoryStorage?.getMastraStorage().getStore("knowledge")
+		}).routes() : [],
 		...deps.factoryReady ? new WorkItemRoutes({
 			auth: deps.auth,
 			audit: deps.audit,

package/dist/routes/surface.js.map

@@ -1 +1 @@
-{"version":3,"file":"surface.js","names":[],"sources":["../../src/routes/surface.ts"],"sourcesContent":["import type { AuthStorage } from '@mastra/code-sdk/auth/storage';\nimport type { MastraCodeState } from '@mastra/code-sdk/schema';\nimport type { AgentController } from '@mastra/core/agent-controller';\nimport type { ApiRoute } from '@mastra/core/server';\nimport { registerApiRoute } from '@mastra/core/server';\nimport type { FactoryStorage } from '@mastra/core/storage';\n\nimport type { FactoryIntegration, IntegrationContext } from '../integrations/base.js';\nimport { getGithubFeatureDiagnostics } from '../integrations/github/config.js';\nimport type { GithubIntegration } from '../integrations/github/integration.js';\nimport type { FactoryBindingPreparationInput } from '../rules/dispatcher.js';\nimport { FactoryStartCoordinator } from '../rules/start-coordinator.js';\nimport { FactoryTransitionService } from '../rules/transition-service.js';\nimport type { FactoryRules } from '../rules/types.js';\nimport { isFactoryRuleStage } from '../rules/types.js';\nimport type { SandboxFleet } from '../sandbox/fleet.js';\nimport { ensureFactorySourceSession, resolveFactoryDefaultModelId } from '../session/factory-session.js';\nimport { LiveSessions } from '../session/live-sessions.js';\nimport type { StateSigner } from '../state-signing.js';\nimport type { AuditEmitter } from '../storage/domains/audit/domain.js';\nimport type { ChannelIdentityStorage } from '../storage/domains/channel-identity/base.js';\nimport type { ModelCredentialsStorage } from '../storage/domains/credentials/base.js';\nimport type { CustomProvidersStorage } from '../storage/domains/custom-providers/base.js';\nimport type { FilesystemStorage } from '../storage/domains/filesystem/base.js';\nimport type { IntakeStorage } from '../storage/domains/intake/base.js';\nimport type { IntegrationStorage } from '../storage/domains/integrations/base.js';\nimport type { MemorySettingsStorage } from '../storage/domains/memory-settings/base.js';\nimport type { ModelPacksStorage } from '../storage/domains/model-packs/base.js';\nimport type { FactoryProjectsStorage } from '../storage/domains/projects/base.js';\nimport type { QueueHealthStorage } from '../storage/domains/queue-health/base.js';\nimport type { SourceControlStorage } from '../storage/domains/source-control/base.js';\nimport type { WorkItemsStorage } from '../storage/domains/work-items/base.js';\nimport { ConfigRoutes } from './config.js';\nimport { invalidateCustomProvidersSnapshots } from './custom-provider-source.js';\nimport { buildFsRoutes } from './fs.js';\nimport { IntakeRoutes } from './intake.js';\nimport { OAuthRoutes } from './oauth.js';\nimport type { RouteAuth } from './route.js';\nimport { SkillRoutes } from './skills.js';\nimport { invalidateTenantCredentialSnapshots } from './tenant-credentials.js';\nimport { WorkItemRoutes } from './work-items.js';\n\nexport interface IntegrationRegistration {\n  integration: FactoryIntegration;\n  ready: boolean;\n  ensureReady: () => Promise<void>;\n}\n\nexport interface FactoryApiRoutesDeps {\n  controllerId: string;\n  controller: AgentController<MastraCodeState>;\n  /** Request-auth seam threaded from the host (no service locator). */\n  auth: RouteAuth;\n  authStorage: AuthStorage;\n  audit: AuditEmitter;\n  fsRoot?: string;\n  publicOrigin: string;\n  stateSigner?: StateSigner;\n  /** Sandbox fleet constructed by the factory (disabled when no machine). */\n  fleet: SandboxFleet;\n  /** Root factory storage backend (distributed locks, app-db diagnostics). */\n  factoryStorage?: FactoryStorage;\n  integrationStorage: IntegrationStorage;\n  sourceControlStorage: SourceControlStorage;\n  /** App-table domain handles, registered and owned by `MastraFactory.prepare()`. */\n  domains: {\n    intake: IntakeStorage;\n    modelCredentials: ModelCredentialsStorage;\n    memorySettings: MemorySettingsStorage;\n    customProviders: CustomProvidersStorage;\n    filesystem: FilesystemStorage;\n    modelPacks: ModelPacksStorage;\n    projects: FactoryProjectsStorage;\n    queueHealth: QueueHealthStorage;\n    workItems: WorkItemsStorage;\n    channelIdentity: ChannelIdentityStorage;\n  };\n  integrations?: IntegrationRegistration[];\n  intakeReady: boolean;\n  factoryReady: boolean;\n  /** Resolved Factory rule set, threaded from the host (no service locator). */\n  rules: FactoryRules;\n  factoryTransitionService?: FactoryTransitionService;\n  sessionRetirement?: import('../sandbox/session-retirement.js').SessionRetirementCoordinator;\n  onFactoryRuntime?: (runtime: {\n    transitionService: FactoryTransitionService;\n    prepareBinding?: (input: FactoryBindingPreparationInput) => Promise<void>;\n  }) => void;\n}\n\nfunction guardIntegrationRoutes({\n  integration,\n  ready,\n  ensureReady,\n  routes,\n}: IntegrationRegistration & { routes: ApiRoute[] }): ApiRoute[] {\n  if (ready) return routes;\n  return routes.map(route => {\n    if ('handler' in route) {\n      const handler = route.handler;\n      return {\n        ...route,\n        handler: async (context: Parameters<typeof handler>[0]) => {\n          try {\n            await ensureReady();\n          } catch {\n            return context.json(\n              { error: 'integration_unavailable', message: `${integration.id} integration is unavailable.` },\n              503,\n            );\n          }\n          return handler(context, async () => {});\n        },\n      };\n    }\n\n    const createHandler = route.createHandler;\n    return {\n      ...route,\n      createHandler: async (args: Parameters<typeof createHandler>[0]) => {\n        const handler = await createHandler(args);\n        return async (context: Parameters<typeof handler>[0]) => {\n          try {\n            await ensureReady();\n          } catch {\n            return context.json(\n              { error: 'integration_unavailable', message: `${integration.id} integration is unavailable.` },\n              503,\n            );\n          }\n          return handler(context);\n        };\n      },\n    };\n  });\n}\n\nexport function factoryRuleBranch(item: FactoryBindingPreparationInput['item']): string {\n  const metadata = item.metadata ?? {};\n  const issueNumber = metadata.githubIssueNumber ?? metadata.number;\n  if (\n    item.externalSource?.integrationId === 'github' &&\n    item.externalSource.type === 'issue' &&\n    typeof issueNumber === 'number'\n  ) {\n    return `factory/issue-${issueNumber}`;\n  }\n  const pullRequestNumber = metadata.githubPullRequestNumber ?? metadata.number;\n  if (\n    item.externalSource?.integrationId === 'github' &&\n    item.externalSource.type === 'pull-request' &&\n    typeof pullRequestNumber === 'number'\n  ) {\n    return `factory/pr-${pullRequestNumber}`;\n  }\n  if (item.externalSource?.integrationId === 'linear' && typeof metadata.identifier === 'string') {\n    return `factory/linear-${metadata.identifier.toLowerCase()}`;\n  }\n  throw new Error('Factory skill invocation requires a supported issue or pull request identifier.');\n}\n\n/**\n * Start a factory run for a rule binding: ensure the source-control session the\n * coordinator requires, then hand it to `prepare` along with the factory's\n * default model. Exported for tests — this is the autonomous entry point with no\n * browser and no interactive user, so nothing else would catch a regression in\n * what it forwards.\n */\nexport async function prepareFactoryRuleBinding(\n  github: GithubIntegration,\n  coordinator: FactoryStartCoordinator,\n  projects: FactoryProjectsStorage,\n  input: FactoryBindingPreparationInput,\n): Promise<void> {\n  const branch = factoryRuleBranch(input.item);\n  const repositorySlug =\n    typeof input.item.metadata?.repository === 'string' ? input.item.metadata.repository : undefined;\n  const preparedSession = await ensureFactorySourceSession({\n    sourceControl: github.sourceControlStorage,\n    orgId: input.record.orgId,\n    factoryProjectId: input.record.factoryProjectId,\n    repositorySlug,\n    branch,\n  });\n  const destinationStage = input.item.stages.length === 1 ? input.item.stages[0] : undefined;\n  if (!isFactoryRuleStage(destinationStage))\n    throw new Error('Factory skill invocation requires one exclusive board stage.');\n\n  await coordinator.prepare({\n    orgId: input.record.orgId,\n    userId: preparedSession.userId,\n    factoryProjectId: input.record.factoryProjectId,\n    sessionId: preparedSession.sessionId,\n    defaultModelId: await resolveFactoryDefaultModelId(projects, input.record.factoryProjectId),\n    threadTitle: `${input.role === 'review' ? 'PR' : 'Issue'}: ${input.item.title}`,\n    kickoffKey: input.record.id,\n    destinationStage,\n    workItem: {\n      id: input.item.id,\n      role: input.role,\n      input: {\n        externalSource: input.item.externalSource,\n        parentWorkItemId: input.item.parentWorkItemId,\n        title: input.item.title,\n        stages: ['intake'],\n        sessions: input.item.sessions,\n        metadata: input.item.metadata,\n      },\n    },\n  });\n}\n\n/**\n * Build the {@link IntegrationContext} handed to an integration when the\n * factory collects its capabilities (routes, workers). One shape everywhere:\n * `assembleFactoryApiRoutes` uses it per registration, and `MastraFactory` uses it\n * when collecting integration workers at finalize.\n */\nexport function buildIntegrationContext(\n  deps: Pick<\n    FactoryApiRoutesDeps,\n    'controller' | 'publicOrigin' | 'auth' | 'fleet' | 'factoryStorage' | 'integrationStorage' | 'sourceControlStorage'\n  > & {\n    stateSigner: StateSigner;\n    emitAudit?: AuditEmitter['emit'];\n    rules: FactoryRules;\n    factoryReady: boolean;\n    domains: Pick<\n      FactoryApiRoutesDeps['domains'],\n      'projects' | 'intake' | 'workItems' | 'channelIdentity' | 'memorySettings'\n    >;\n    /**\n     * Stable id of the registered source-control-owning integration (today:\n     * `'github'` when registered). Every call site must derive and pass it so\n     * `routes()`, `channels()`, and `workers()` all see the same context shape.\n     */\n    sourceControlOwnerId?: string;\n  },\n  integrationId: string,\n): IntegrationContext {\n  return {\n    auth: deps.auth,\n    fleet: deps.fleet,\n    factoryStorage: deps.factoryStorage,\n    baseUrl: deps.publicOrigin,\n    controller: deps.controller,\n    stateSigner: deps.stateSigner,\n    storage: {\n      generic: deps.integrationStorage.forIntegration(integrationId),\n      sourceControl: deps.sourceControlStorage.forIntegration(integrationId),\n      ...(deps.sourceControlOwnerId\n        ? { sourceControlOwner: deps.sourceControlStorage.forIntegration(deps.sourceControlOwnerId) }\n        : {}),\n      projects: deps.domains.projects,\n      intake: deps.domains.intake,\n      channelIdentity: deps.domains.channelIdentity,\n      memorySettings: deps.domains.memorySettings,\n    },\n    ...(deps.factoryReady ? { rules: { config: deps.rules, workItems: deps.domains.workItems } } : {}),\n    ...(deps.emitAudit ? { hooks: { emitAudit: deps.emitAudit } } : {}),\n  };\n}\n\n/**\n * Disabled-status stub for the well-known integration ids. The SPA polls\n * `/web/github/status` and `/web/linear/status` unconditionally, so when an\n * integration is absent (or not ready) the status contract must still hold.\n * Unknown custom ids get no stub — the SPA doesn't poll them.\n */\nfunction disabledIntegrationStatusRoutes(deps: FactoryApiRoutesDeps, id: string, configured = false): ApiRoute[] {\n  if (id === 'github') {\n    return [\n      registerApiRoute('/web/github/status', {\n        method: 'GET',\n        requiresAuth: false,\n        handler: c =>\n          c.json({\n            enabled: false,\n            connected: false,\n            installations: [],\n            reason: 'missing_config',\n            diagnostics: getGithubFeatureDiagnostics({\n              github: undefined,\n              auth: deps.auth,\n              appDbConfigured: deps.factoryStorage !== undefined,\n              stateSigner: deps.stateSigner,\n              fleet: deps.fleet,\n            }),\n          }),\n      }),\n    ];\n  }\n  if (id === 'linear') {\n    return [\n      registerApiRoute('/web/linear/status', {\n        method: 'GET',\n        requiresAuth: false,\n        handler: c =>\n          c.json({\n            enabled: false,\n            connected: false,\n            workspace: null,\n            reason: 'missing_config',\n            diagnostics: {\n              linearAppConfigured: configured,\n              factoryAuthEnabled: deps.auth.enabled(),\n              appDbConfigured: true,\n            },\n          }),\n      }),\n    ];\n  }\n  return [];\n}\n\n/**\n * Stub for `GET /web/channel-accounts` when NO Slack integration is\n * registered. The SPA's Connections section polls the path unconditionally;\n * without a stub the SPA fallback serves HTML, which the UI can only read as\n * \"old server / unknown\". The machine-readable reason lets it say the truth:\n * the integration isn't registered.\n *\n * Mounted only for ABSENT slack — a registered integration owns the path via\n * its connect routes (or, when the state signer is unstable, gets no routes\n * at all and the UI falls back to the generic copy). Static payload, leaks\n * nothing → no auth needed, same posture as the github/linear stubs.\n */\nfunction absentSlackChannelAccountsRoutes(): ApiRoute[] {\n  return [\n    registerApiRoute('/web/channel-accounts', {\n      method: 'GET',\n      requiresAuth: false,\n      handler: c => c.json({ accounts: [], canConnect: false, reason: 'not_registered' }),\n    }),\n  ];\n}\n\n/**\n * Assemble the custom `/web/*` API routes as Mastra `server.apiRoutes`:\n *   - fs browser routes (project picker), confined to `fsRoot`\n *   - config routes (provider/API-key/model-pack/OM management)\n *   - every registered integration's `routes()` surface (full set when ready,\n *     disabled-status stub otherwise), plus stubs for absent known ids\n */\nexport function assembleFactoryApiRoutes(deps: FactoryApiRoutesDeps): ApiRoute[] {\n  const emitAudit: AuditEmitter['emit'] = args => deps.audit.emit(args);\n  const registrations = deps.integrations ?? [];\n  const githubRegistration = registrations.find(({ integration }) => integration.id === 'github');\n  const githubStorage = githubRegistration ? deps.sourceControlStorage.forIntegration('github') : undefined;\n  const githubIntegration = githubRegistration?.integration as GithubIntegration | undefined;\n\n  const integrationRoutes = registrations.flatMap(registration => {\n    const { integration } = registration;\n    if (!deps.stateSigner) return disabledIntegrationStatusRoutes(deps, integration.id, true);\n    const context = buildIntegrationContext(\n      {\n        ...deps,\n        stateSigner: deps.stateSigner,\n        emitAudit,\n        ...(githubRegistration ? { sourceControlOwnerId: 'github' } : {}),\n      },\n      integration.id,\n    );\n    return guardIntegrationRoutes({ ...registration, routes: integration.routes(context) });\n  });\n  // Absent known integrations still get their disabled-status stub.\n  const absentStubs = ['github', 'linear']\n    .filter(id => !registrations.some(({ integration }) => integration.id === id))\n    .flatMap(id => disabledIntegrationStatusRoutes(deps, id));\n  // Absent slack gets the channel-accounts not-registered stub (registered\n  // slack owns the path via its own connect routes).\n  const slackAbsentStubs = registrations.some(({ integration }) => integration.id === 'slack')\n    ? []\n    : absentSlackChannelAccountsRoutes();\n\n  const transitionService = deps.factoryReady\n    ? (deps.factoryTransitionService ??\n      new FactoryTransitionService({ rules: deps.rules, storage: deps.domains.workItems }))\n    : undefined;\n  const startCoordinator = transitionService\n    ? new FactoryStartCoordinator(\n        deps.controller,\n        deps.domains.workItems,\n        transitionService,\n        githubIntegration?.sourceControlStorage,\n        deps.domains.memorySettings,\n      )\n    : undefined;\n  if (transitionService && startCoordinator) {\n    deps.onFactoryRuntime?.({\n      transitionService,\n      ...(githubIntegration\n        ? {\n            prepareBinding: (input: FactoryBindingPreparationInput) =>\n              prepareFactoryRuleBinding(githubIntegration, startCoordinator, deps.domains.projects, input),\n          }\n        : {}),\n    });\n  }\n\n  return [\n    ...buildFsRoutes({\n      root: deps.fsRoot,\n      sessionFs: {\n        auth: deps.auth,\n        fleet: deps.fleet,\n        sessions: deps.sourceControlStorage.forIntegration('github').sessions,\n        filesystem: deps.domains.filesystem,\n      },\n    }),\n    ...new ConfigRoutes({\n      auth: deps.auth,\n      controller: deps.controller,\n      authStorage: deps.authStorage,\n      modelCredentials: deps.domains.modelCredentials,\n      modelPacks: deps.domains.modelPacks,\n      memorySettings: deps.domains.memorySettings,\n      customProviders: deps.domains.customProviders,\n      onCredentialsChanged: invalidateTenantCredentialSnapshots,\n      onCustomProvidersChanged: invalidateCustomProvidersSnapshots,\n    }).routes(),\n    ...new OAuthRoutes({\n      auth: deps.auth,\n      authStorage: deps.authStorage,\n      modelCredentials: deps.domains.modelCredentials,\n      onCredentialsChanged: invalidateTenantCredentialSnapshots,\n    }).routes(),\n    ...new SkillRoutes({\n      auth: deps.auth,\n      controllerId: deps.controllerId,\n      controller: deps.controller,\n      sourceControlStorage: githubStorage,\n      ensureSourceControlReady: githubRegistration?.ensureReady,\n    }).routes(),\n    ...integrationRoutes,\n    ...absentStubs,\n    ...slackAbsentStubs,\n    ...(deps.intakeReady\n      ? new IntakeRoutes({\n          auth: deps.auth,\n          audit: deps.audit,\n          intake: deps.domains.intake,\n          integrations: (deps.integrations ?? []).flatMap(({ integration }) =>\n            integration.intake ? [{ id: integration.id, intake: integration.intake }] : [],\n          ),\n        }).routes()\n      : []),\n    ...(deps.factoryReady\n      ? new WorkItemRoutes({\n          auth: deps.auth,\n          audit: deps.audit,\n          projects: deps.domains.projects,\n          workItems: deps.domains.workItems,\n          queueHealth: deps.domains.queueHealth,\n          transitionService,\n          startCoordinator,\n          liveSessions: new LiveSessions(deps.controller),\n        }).routes()\n      : []),\n  ];\n}\n"],"mappings":";;;;;;;;;;;;;;;;AA0FA,SAAS,uBAAuB,EAC9B,aACA,OACA,aACA,UAC+D;CAC/D,IAAI,OAAO,OAAO;CAClB,OAAO,OAAO,KAAI,UAAS;EACzB,IAAI,aAAa,OAAO;GACtB,MAAM,UAAU,MAAM;GACtB,OAAO;IACL,GAAG;IACH,SAAS,OAAO,YAA2C;KACzD,IAAI;MACF,MAAM,YAAY;KACpB,QAAQ;MACN,OAAO,QAAQ,KACb;OAAE,OAAO;OAA2B,SAAS,GAAG,YAAY,GAAG;MAA8B,GAC7F,GACF;KACF;KACA,OAAO,QAAQ,SAAS,YAAY,CAAC,CAAC;IACxC;GACF;EACF;EAEA,MAAM,gBAAgB,MAAM;EAC5B,OAAO;GACL,GAAG;GACH,eAAe,OAAO,SAA8C;IAClE,MAAM,UAAU,MAAM,cAAc,IAAI;IACxC,OAAO,OAAO,YAA2C;KACvD,IAAI;MACF,MAAM,YAAY;KACpB,QAAQ;MACN,OAAO,QAAQ,KACb;OAAE,OAAO;OAA2B,SAAS,GAAG,YAAY,GAAG;MAA8B,GAC7F,GACF;KACF;KACA,OAAO,QAAQ,OAAO;IACxB;GACF;EACF;CACF,CAAC;AACH;AAEA,SAAgB,kBAAkB,MAAsD;CACtF,MAAM,WAAW,KAAK,YAAY,CAAC;CACnC,MAAM,cAAc,SAAS,qBAAqB,SAAS;CAC3D,IACE,KAAK,gBAAgB,kBAAkB,YACvC,KAAK,eAAe,SAAS,WAC7B,OAAO,gBAAgB,UAEvB,OAAO,iBAAiB;CAE1B,MAAM,oBAAoB,SAAS,2BAA2B,SAAS;CACvE,IACE,KAAK,gBAAgB,kBAAkB,YACvC,KAAK,eAAe,SAAS,kBAC7B,OAAO,sBAAsB,UAE7B,OAAO,cAAc;CAEvB,IAAI,KAAK,gBAAgB,kBAAkB,YAAY,OAAO,SAAS,eAAe,UACpF,OAAO,kBAAkB,SAAS,WAAW,YAAY;CAE3D,MAAM,IAAI,MAAM,iFAAiF;AACnG;;;;;;;;AASA,eAAsB,0BACpB,QACA,aACA,UACA,OACe;CACf,MAAM,SAAS,kBAAkB,MAAM,IAAI;CAC3C,MAAM,iBACJ,OAAO,MAAM,KAAK,UAAU,eAAe,WAAW,MAAM,KAAK,SAAS,aAAa,KAAA;CACzF,MAAM,kBAAkB,MAAM,2BAA2B;EACvD,eAAe,OAAO;EACtB,OAAO,MAAM,OAAO;EACpB,kBAAkB,MAAM,OAAO;EAC/B;EACA;CACF,CAAC;CACD,MAAM,mBAAmB,MAAM,KAAK,OAAO,WAAW,IAAI,MAAM,KAAK,OAAO,KAAK,KAAA;CACjF,IAAI,CAAC,mBAAmB,gBAAgB,GACtC,MAAM,IAAI,MAAM,8DAA8D;CAEhF,MAAM,YAAY,QAAQ;EACxB,OAAO,MAAM,OAAO;EACpB,QAAQ,gBAAgB;EACxB,kBAAkB,MAAM,OAAO;EAC/B,WAAW,gBAAgB;EAC3B,gBAAgB,MAAM,6BAA6B,UAAU,MAAM,OAAO,gBAAgB;EAC1F,aAAa,GAAG,MAAM,SAAS,WAAW,OAAO,QAAQ,IAAI,MAAM,KAAK;EACxE,YAAY,MAAM,OAAO;EACzB;EACA,UAAU;GACR,IAAI,MAAM,KAAK;GACf,MAAM,MAAM;GACZ,OAAO;IACL,gBAAgB,MAAM,KAAK;IAC3B,kBAAkB,MAAM,KAAK;IAC7B,OAAO,MAAM,KAAK;IAClB,QAAQ,CAAC,QAAQ;IACjB,UAAU,MAAM,KAAK;IACrB,UAAU,MAAM,KAAK;GACvB;EACF;CACF,CAAC;AACH;;;;;;;AAQA,SAAgB,wBACd,MAmBA,eACoB;CACpB,OAAO;EACL,MAAM,KAAK;EACX,OAAO,KAAK;EACZ,gBAAgB,KAAK;EACrB,SAAS,KAAK;EACd,YAAY,KAAK;EACjB,aAAa,KAAK;EAClB,SAAS;GACP,SAAS,KAAK,mBAAmB,eAAe,aAAa;GAC7D,eAAe,KAAK,qBAAqB,eAAe,aAAa;GACrE,GAAI,KAAK,uBACL,EAAE,oBAAoB,KAAK,qBAAqB,eAAe,KAAK,oBAAoB,EAAE,IAC1F,CAAC;GACL,UAAU,KAAK,QAAQ;GACvB,QAAQ,KAAK,QAAQ;GACrB,iBAAiB,KAAK,QAAQ;GAC9B,gBAAgB,KAAK,QAAQ;EAC/B;EACA,GAAI,KAAK,eAAe,EAAE,OAAO;GAAE,QAAQ,KAAK;GAAO,WAAW,KAAK,QAAQ;EAAU,EAAE,IAAI,CAAC;EAChG,GAAI,KAAK,YAAY,EAAE,OAAO,EAAE,WAAW,KAAK,UAAU,EAAE,IAAI,CAAC;CACnE;AACF;;;;;;;AAQA,SAAS,gCAAgC,MAA4B,IAAY,aAAa,OAAmB;CAC/G,IAAI,OAAO,UACT,OAAO,CACL,iBAAiB,sBAAsB;EACrC,QAAQ;EACR,cAAc;EACd,UAAS,MACP,EAAE,KAAK;GACL,SAAS;GACT,WAAW;GACX,eAAe,CAAC;GAChB,QAAQ;GACR,aAAa,4BAA4B;IACvC,QAAQ,KAAA;IACR,MAAM,KAAK;IACX,iBAAiB,KAAK,mBAAmB,KAAA;IACzC,aAAa,KAAK;IAClB,OAAO,KAAK;GACd,CAAC;EACH,CAAC;CACL,CAAC,CACH;CAEF,IAAI,OAAO,UACT,OAAO,CACL,iBAAiB,sBAAsB;EACrC,QAAQ;EACR,cAAc;EACd,UAAS,MACP,EAAE,KAAK;GACL,SAAS;GACT,WAAW;GACX,WAAW;GACX,QAAQ;GACR,aAAa;IACX,qBAAqB;IACrB,oBAAoB,KAAK,KAAK,QAAQ;IACtC,iBAAiB;GACnB;EACF,CAAC;CACL,CAAC,CACH;CAEF,OAAO,CAAC;AACV;;;;;;;;;;;;;AAcA,SAAS,mCAA+C;CACtD,OAAO,CACL,iBAAiB,yBAAyB;EACxC,QAAQ;EACR,cAAc;EACd,UAAS,MAAK,EAAE,KAAK;GAAE,UAAU,CAAC;GAAG,YAAY;GAAO,QAAQ;EAAiB,CAAC;CACpF,CAAC,CACH;AACF;;;;;;;;AASA,SAAgB,yBAAyB,MAAwC;CAC/E,MAAM,aAAkC,SAAQ,KAAK,MAAM,KAAK,IAAI;CACpE,MAAM,gBAAgB,KAAK,gBAAgB,CAAC;CAC5C,MAAM,qBAAqB,cAAc,MAAM,EAAE,kBAAkB,YAAY,OAAO,QAAQ;CAC9F,MAAM,gBAAgB,qBAAqB,KAAK,qBAAqB,eAAe,QAAQ,IAAI,KAAA;CAChG,MAAM,oBAAoB,oBAAoB;CAE9C,MAAM,oBAAoB,cAAc,SAAQ,iBAAgB;EAC9D,MAAM,EAAE,gBAAgB;EACxB,IAAI,CAAC,KAAK,aAAa,OAAO,gCAAgC,MAAM,YAAY,IAAI,IAAI;EACxF,MAAM,UAAU,wBACd;GACE,GAAG;GACH,aAAa,KAAK;GAClB;GACA,GAAI,qBAAqB,EAAE,sBAAsB,SAAS,IAAI,CAAC;EACjE,GACA,YAAY,EACd;EACA,OAAO,uBAAuB;GAAE,GAAG;GAAc,QAAQ,YAAY,OAAO,OAAO;EAAE,CAAC;CACxF,CAAC;CAED,MAAM,cAAc,CAAC,UAAU,QAAQ,CAAC,CACrC,QAAO,OAAM,CAAC,cAAc,MAAM,EAAE,kBAAkB,YAAY,OAAO,EAAE,CAAC,CAAC,CAC7E,SAAQ,OAAM,gCAAgC,MAAM,EAAE,CAAC;CAG1D,MAAM,mBAAmB,cAAc,MAAM,EAAE,kBAAkB,YAAY,OAAO,OAAO,IACvF,CAAC,IACD,iCAAiC;CAErC,MAAM,oBAAoB,KAAK,eAC1B,KAAK,4BACN,IAAI,yBAAyB;EAAE,OAAO,KAAK;EAAO,SAAS,KAAK,QAAQ;CAAU,CAAC,IACnF,KAAA;CACJ,MAAM,mBAAmB,oBACrB,IAAI,wBACF,KAAK,YACL,KAAK,QAAQ,WACb,mBACA,mBAAmB,sBACnB,KAAK,QAAQ,cACf,IACA,KAAA;CACJ,IAAI,qBAAqB,kBACvB,KAAK,mBAAmB;EACtB;EACA,GAAI,oBACA,EACE,iBAAiB,UACf,0BAA0B,mBAAmB,kBAAkB,KAAK,QAAQ,UAAU,KAAK,EAC/F,IACA,CAAC;CACP,CAAC;CAGH,OAAO;EACL,GAAG,cAAc;GACf,MAAM,KAAK;GACX,WAAW;IACT,MAAM,KAAK;IACX,OAAO,KAAK;IACZ,UAAU,KAAK,qBAAqB,eAAe,QAAQ,CAAC,CAAC;IAC7D,YAAY,KAAK,QAAQ;GAC3B;EACF,CAAC;EACD,GAAG,IAAI,aAAa;GAClB,MAAM,KAAK;GACX,YAAY,KAAK;GACjB,aAAa,KAAK;GAClB,kBAAkB,KAAK,QAAQ;GAC/B,YAAY,KAAK,QAAQ;GACzB,gBAAgB,KAAK,QAAQ;GAC7B,iBAAiB,KAAK,QAAQ;GAC9B,sBAAsB;GACtB,0BAA0B;EAC5B,CAAC,CAAC,CAAC,OAAO;EACV,GAAG,IAAI,YAAY;GACjB,MAAM,KAAK;GACX,aAAa,KAAK;GAClB,kBAAkB,KAAK,QAAQ;GAC/B,sBAAsB;EACxB,CAAC,CAAC,CAAC,OAAO;EACV,GAAG,IAAI,YAAY;GACjB,MAAM,KAAK;GACX,cAAc,KAAK;GACnB,YAAY,KAAK;GACjB,sBAAsB;GACtB,0BAA0B,oBAAoB;EAChD,CAAC,CAAC,CAAC,OAAO;EACV,GAAG;EACH,GAAG;EACH,GAAG;EACH,GAAI,KAAK,cACL,IAAI,aAAa;GACf,MAAM,KAAK;GACX,OAAO,KAAK;GACZ,QAAQ,KAAK,QAAQ;GACrB,eAAe,KAAK,gBAAgB,CAAC,EAAA,CAAG,SAAS,EAAE,kBACjD,YAAY,SAAS,CAAC;IAAE,IAAI,YAAY;IAAI,QAAQ,YAAY;GAAO,CAAC,IAAI,CAAC,CAC/E;EACF,CAAC,CAAC,CAAC,OAAO,IACV,CAAC;EACL,GAAI,KAAK,eACL,IAAI,eAAe;GACjB,MAAM,KAAK;GACX,OAAO,KAAK;GACZ,UAAU,KAAK,QAAQ;GACvB,WAAW,KAAK,QAAQ;GACxB,aAAa,KAAK,QAAQ;GAC1B;GACA;GACA,cAAc,IAAI,aAAa,KAAK,UAAU;EAChD,CAAC,CAAC,CAAC,OAAO,IACV,CAAC;CACP;AACF"}
+{"version":3,"file":"surface.js","names":[],"sources":["../../src/routes/surface.ts"],"sourcesContent":["import type { AuthStorage } from '@mastra/code-sdk/auth/storage';\nimport type { MastraCodeState } from '@mastra/code-sdk/schema';\nimport type { AgentController } from '@mastra/core/agent-controller';\nimport type { ApiRoute } from '@mastra/core/server';\nimport { registerApiRoute } from '@mastra/core/server';\nimport type { FactoryStorage } from '@mastra/core/storage';\n\nimport type { FactoryIntegration, IntegrationContext } from '../integrations/base.js';\nimport { getGithubFeatureDiagnostics } from '../integrations/github/config.js';\nimport type { GithubIntegration } from '../integrations/github/integration.js';\nimport type { FactoryBindingPreparationInput } from '../rules/dispatcher.js';\nimport { FactoryStartCoordinator } from '../rules/start-coordinator.js';\nimport { FactoryTransitionService } from '../rules/transition-service.js';\nimport type { FactoryRules } from '../rules/types.js';\nimport { isFactoryRuleStage } from '../rules/types.js';\nimport type { BaseCheckpointTriggers } from '../sandbox/base-checkpoint-triggers.js';\nimport type { SandboxFleet } from '../sandbox/fleet.js';\nimport { ensureFactorySourceSession, resolveFactoryDefaultModelId } from '../session/factory-session.js';\nimport { LiveSessions } from '../session/live-sessions.js';\nimport type { StateSigner } from '../state-signing.js';\nimport type { AuditEmitter } from '../storage/domains/audit/domain.js';\nimport type { ChannelIdentityStorage } from '../storage/domains/channel-identity/base.js';\nimport type { ModelCredentialsStorage } from '../storage/domains/credentials/base.js';\nimport type { CustomProvidersStorage } from '../storage/domains/custom-providers/base.js';\nimport type { FilesystemStorage } from '../storage/domains/filesystem/base.js';\nimport type { IntakeStorage } from '../storage/domains/intake/base.js';\nimport type { IntegrationStorage } from '../storage/domains/integrations/base.js';\nimport type { MemorySettingsStorage } from '../storage/domains/memory-settings/base.js';\nimport type { ModelPacksStorage } from '../storage/domains/model-packs/base.js';\nimport type { FactoryProjectsStorage } from '../storage/domains/projects/base.js';\nimport type { QueueHealthStorage } from '../storage/domains/queue-health/base.js';\nimport type { SourceControlStorage } from '../storage/domains/source-control/base.js';\nimport type { WorkItemsStorage } from '../storage/domains/work-items/base.js';\nimport { ConfigRoutes } from './config.js';\nimport { invalidateCustomProvidersSnapshots } from './custom-provider-source.js';\nimport { buildFsRoutes } from './fs.js';\nimport { IntakeRoutes } from './intake.js';\nimport { KnowledgeRoutes } from './knowledge.js';\nimport { OAuthRoutes } from './oauth.js';\nimport type { RouteAuth } from './route.js';\nimport { SkillRoutes } from './skills.js';\nimport { invalidateTenantCredentialSnapshots } from './tenant-credentials.js';\nimport { WorkItemRoutes } from './work-items.js';\n\nexport interface IntegrationRegistration {\n  integration: FactoryIntegration;\n  ready: boolean;\n  ensureReady: () => Promise<void>;\n}\n\nexport interface FactoryApiRoutesDeps {\n  controllerId: string;\n  controller: AgentController<MastraCodeState>;\n  /** Request-auth seam threaded from the host (no service locator). */\n  auth: RouteAuth;\n  authStorage: AuthStorage;\n  audit: AuditEmitter;\n  fsRoot?: string;\n  publicOrigin: string;\n  stateSigner?: StateSigner;\n  /** Sandbox fleet constructed by the factory (disabled when no machine). */\n  fleet: SandboxFleet;\n  /** Base-checkpoint trigger surface, when the factory constructed one. */\n  baseCheckpoints?: BaseCheckpointTriggers;\n  /** Root factory storage backend (distributed locks, app-db diagnostics). */\n  factoryStorage?: FactoryStorage;\n  integrationStorage: IntegrationStorage;\n  sourceControlStorage: SourceControlStorage;\n  /** App-table domain handles, registered and owned by `MastraFactory.prepare()`. */\n  domains: {\n    intake: IntakeStorage;\n    modelCredentials: ModelCredentialsStorage;\n    memorySettings: MemorySettingsStorage;\n    customProviders: CustomProvidersStorage;\n    filesystem: FilesystemStorage;\n    modelPacks: ModelPacksStorage;\n    projects: FactoryProjectsStorage;\n    queueHealth: QueueHealthStorage;\n    workItems: WorkItemsStorage;\n    channelIdentity: ChannelIdentityStorage;\n  };\n  integrations?: IntegrationRegistration[];\n  intakeReady: boolean;\n  factoryReady: boolean;\n  knowledgeEnabled: boolean;\n  /** Resolved Factory rule set, threaded from the host (no service locator). */\n  rules: FactoryRules;\n  factoryTransitionService?: FactoryTransitionService;\n  sessionRetirement?: import('../sandbox/session-retirement.js').SessionRetirementCoordinator;\n  onFactoryRuntime?: (runtime: {\n    transitionService: FactoryTransitionService;\n    prepareBinding?: (input: FactoryBindingPreparationInput) => Promise<void>;\n  }) => void;\n}\n\nfunction guardIntegrationRoutes({\n  integration,\n  ready,\n  ensureReady,\n  routes,\n}: IntegrationRegistration & { routes: ApiRoute[] }): ApiRoute[] {\n  if (ready) return routes;\n  return routes.map(route => {\n    if ('handler' in route) {\n      const handler = route.handler;\n      return {\n        ...route,\n        handler: async (context: Parameters<typeof handler>[0]) => {\n          try {\n            await ensureReady();\n          } catch {\n            return context.json(\n              { error: 'integration_unavailable', message: `${integration.id} integration is unavailable.` },\n              503,\n            );\n          }\n          return handler(context, async () => {});\n        },\n      };\n    }\n\n    const createHandler = route.createHandler;\n    return {\n      ...route,\n      createHandler: async (args: Parameters<typeof createHandler>[0]) => {\n        const handler = await createHandler(args);\n        return async (context: Parameters<typeof handler>[0]) => {\n          try {\n            await ensureReady();\n          } catch {\n            return context.json(\n              { error: 'integration_unavailable', message: `${integration.id} integration is unavailable.` },\n              503,\n            );\n          }\n          return handler(context);\n        };\n      },\n    };\n  });\n}\n\nexport function factoryRuleBranch(item: FactoryBindingPreparationInput['item']): string {\n  const metadata = item.metadata ?? {};\n  const issueNumber = metadata.githubIssueNumber ?? metadata.number;\n  if (\n    item.externalSource?.integrationId === 'github' &&\n    item.externalSource.type === 'issue' &&\n    typeof issueNumber === 'number'\n  ) {\n    return `factory/issue-${issueNumber}`;\n  }\n  const pullRequestNumber = metadata.githubPullRequestNumber ?? metadata.number;\n  if (\n    item.externalSource?.integrationId === 'github' &&\n    item.externalSource.type === 'pull-request' &&\n    typeof pullRequestNumber === 'number'\n  ) {\n    return `factory/pr-${pullRequestNumber}`;\n  }\n  if (item.externalSource?.integrationId === 'linear' && typeof metadata.identifier === 'string') {\n    return `factory/linear-${metadata.identifier.toLowerCase()}`;\n  }\n  throw new Error('Factory skill invocation requires a supported issue or pull request identifier.');\n}\n\n/**\n * Start a factory run for a rule binding: ensure the source-control session the\n * coordinator requires, then hand it to `prepare` along with the factory's\n * default model. Exported for tests — this is the autonomous entry point with no\n * browser and no interactive user, so nothing else would catch a regression in\n * what it forwards.\n */\nexport async function prepareFactoryRuleBinding(\n  github: GithubIntegration,\n  coordinator: FactoryStartCoordinator,\n  projects: FactoryProjectsStorage,\n  input: FactoryBindingPreparationInput,\n): Promise<void> {\n  const branch = factoryRuleBranch(input.item);\n  const repositorySlug =\n    typeof input.item.metadata?.repository === 'string' ? input.item.metadata.repository : undefined;\n  const preparedSession = await ensureFactorySourceSession({\n    sourceControl: github.sourceControlStorage,\n    orgId: input.record.orgId,\n    factoryProjectId: input.record.factoryProjectId,\n    repositorySlug,\n    branch,\n  });\n  const destinationStage = input.item.stages.length === 1 ? input.item.stages[0] : undefined;\n  if (!isFactoryRuleStage(destinationStage))\n    throw new Error('Factory skill invocation requires one exclusive board stage.');\n\n  await coordinator.prepare({\n    orgId: input.record.orgId,\n    userId: preparedSession.userId,\n    factoryProjectId: input.record.factoryProjectId,\n    sessionId: preparedSession.sessionId,\n    defaultModelId: await resolveFactoryDefaultModelId(projects, input.record.factoryProjectId),\n    threadTitle: `${input.role === 'review' ? 'PR' : 'Issue'}: ${input.item.title}`,\n    kickoffKey: input.record.id,\n    destinationStage,\n    workItem: {\n      id: input.item.id,\n      role: input.role,\n      input: {\n        externalSource: input.item.externalSource,\n        parentWorkItemId: input.item.parentWorkItemId,\n        title: input.item.title,\n        stages: ['intake'],\n        sessions: input.item.sessions,\n        metadata: input.item.metadata,\n      },\n    },\n  });\n}\n\n/**\n * Build the {@link IntegrationContext} handed to an integration when the\n * factory collects its capabilities (routes, workers). One shape everywhere:\n * `assembleFactoryApiRoutes` uses it per registration, and `MastraFactory` uses it\n * when collecting integration workers at finalize.\n */\nexport function buildIntegrationContext(\n  deps: Pick<\n    FactoryApiRoutesDeps,\n    'controller' | 'publicOrigin' | 'auth' | 'fleet' | 'factoryStorage' | 'integrationStorage' | 'sourceControlStorage'\n  > & {\n    stateSigner: StateSigner;\n    emitAudit?: AuditEmitter['emit'];\n    rules: FactoryRules;\n    factoryReady: boolean;\n    domains: Pick<\n      FactoryApiRoutesDeps['domains'],\n      'projects' | 'intake' | 'workItems' | 'channelIdentity' | 'memorySettings'\n    >;\n    /**\n     * Stable id of the registered source-control-owning integration (today:\n     * `'github'` when registered). Every call site must derive and pass it so\n     * `routes()`, `channels()`, and `workers()` all see the same context shape.\n     */\n    sourceControlOwnerId?: string;\n    /** Base-checkpoint trigger surface, when the factory constructed one. */\n    baseCheckpoints?: BaseCheckpointTriggers;\n  },\n  integrationId: string,\n): IntegrationContext {\n  return {\n    auth: deps.auth,\n    fleet: deps.fleet,\n    ...(deps.baseCheckpoints ? { baseCheckpoints: deps.baseCheckpoints } : {}),\n    factoryStorage: deps.factoryStorage,\n    baseUrl: deps.publicOrigin,\n    controller: deps.controller,\n    stateSigner: deps.stateSigner,\n    storage: {\n      generic: deps.integrationStorage.forIntegration(integrationId),\n      sourceControl: deps.sourceControlStorage.forIntegration(integrationId),\n      ...(deps.sourceControlOwnerId\n        ? { sourceControlOwner: deps.sourceControlStorage.forIntegration(deps.sourceControlOwnerId) }\n        : {}),\n      projects: deps.domains.projects,\n      intake: deps.domains.intake,\n      channelIdentity: deps.domains.channelIdentity,\n      memorySettings: deps.domains.memorySettings,\n    },\n    ...(deps.factoryReady ? { rules: { config: deps.rules, workItems: deps.domains.workItems } } : {}),\n    ...(deps.emitAudit ? { hooks: { emitAudit: deps.emitAudit } } : {}),\n  };\n}\n\n/**\n * Disabled-status stub for the well-known integration ids. The SPA polls\n * `/web/github/status` and `/web/linear/status` unconditionally, so when an\n * integration is absent (or not ready) the status contract must still hold.\n * Unknown custom ids get no stub — the SPA doesn't poll them.\n */\nfunction disabledIntegrationStatusRoutes(deps: FactoryApiRoutesDeps, id: string, configured = false): ApiRoute[] {\n  if (id === 'github') {\n    return [\n      registerApiRoute('/web/github/status', {\n        method: 'GET',\n        requiresAuth: false,\n        handler: c =>\n          c.json({\n            enabled: false,\n            connected: false,\n            installations: [],\n            reason: 'missing_config',\n            diagnostics: getGithubFeatureDiagnostics({\n              github: undefined,\n              auth: deps.auth,\n              appDbConfigured: deps.factoryStorage !== undefined,\n              stateSigner: deps.stateSigner,\n              fleet: deps.fleet,\n            }),\n          }),\n      }),\n    ];\n  }\n  if (id === 'linear') {\n    return [\n      registerApiRoute('/web/linear/status', {\n        method: 'GET',\n        requiresAuth: false,\n        handler: c =>\n          c.json({\n            enabled: false,\n            connected: false,\n            workspace: null,\n            reason: 'missing_config',\n            diagnostics: {\n              linearAppConfigured: configured,\n              factoryAuthEnabled: deps.auth.enabled(),\n              appDbConfigured: true,\n            },\n          }),\n      }),\n    ];\n  }\n  return [];\n}\n\n/**\n * Stub for `GET /web/channel-accounts` when NO Slack integration is\n * registered. The SPA's Connections section polls the path unconditionally;\n * without a stub the SPA fallback serves HTML, which the UI can only read as\n * \"old server / unknown\". The machine-readable reason lets it say the truth:\n * the integration isn't registered.\n *\n * Mounted only for ABSENT slack — a registered integration owns the path via\n * its connect routes (or, when the state signer is unstable, gets no routes\n * at all and the UI falls back to the generic copy). Static payload, leaks\n * nothing → no auth needed, same posture as the github/linear stubs.\n */\nfunction absentSlackChannelAccountsRoutes(): ApiRoute[] {\n  return [\n    registerApiRoute('/web/channel-accounts', {\n      method: 'GET',\n      requiresAuth: false,\n      handler: c => c.json({ accounts: [], canConnect: false, reason: 'not_registered' }),\n    }),\n  ];\n}\n\n/**\n * Assemble the custom `/web/*` API routes as Mastra `server.apiRoutes`:\n *   - fs browser routes (project picker), confined to `fsRoot`\n *   - config routes (provider/API-key/model-pack/OM management)\n *   - every registered integration's `routes()` surface (full set when ready,\n *     disabled-status stub otherwise), plus stubs for absent known ids\n */\nexport function assembleFactoryApiRoutes(deps: FactoryApiRoutesDeps): ApiRoute[] {\n  const emitAudit: AuditEmitter['emit'] = args => deps.audit.emit(args);\n  const registrations = deps.integrations ?? [];\n  const githubRegistration = registrations.find(({ integration }) => integration.id === 'github');\n  const githubStorage = githubRegistration ? deps.sourceControlStorage.forIntegration('github') : undefined;\n  const githubIntegration = githubRegistration?.integration as GithubIntegration | undefined;\n\n  const integrationRoutes = registrations.flatMap(registration => {\n    const { integration } = registration;\n    if (!deps.stateSigner) return disabledIntegrationStatusRoutes(deps, integration.id, true);\n    const context = buildIntegrationContext(\n      {\n        ...deps,\n        stateSigner: deps.stateSigner,\n        emitAudit,\n        ...(githubRegistration ? { sourceControlOwnerId: 'github' } : {}),\n      },\n      integration.id,\n    );\n    return guardIntegrationRoutes({ ...registration, routes: integration.routes(context) });\n  });\n  // Absent known integrations still get their disabled-status stub.\n  const absentStubs = ['github', 'linear']\n    .filter(id => !registrations.some(({ integration }) => integration.id === id))\n    .flatMap(id => disabledIntegrationStatusRoutes(deps, id));\n  // Absent slack gets the channel-accounts not-registered stub (registered\n  // slack owns the path via its own connect routes).\n  const slackAbsentStubs = registrations.some(({ integration }) => integration.id === 'slack')\n    ? []\n    : absentSlackChannelAccountsRoutes();\n\n  const transitionService = deps.factoryReady\n    ? (deps.factoryTransitionService ??\n      new FactoryTransitionService({ rules: deps.rules, storage: deps.domains.workItems }))\n    : undefined;\n  const startCoordinator = transitionService\n    ? new FactoryStartCoordinator(\n        deps.controller,\n        deps.domains.workItems,\n        transitionService,\n        githubIntegration?.sourceControlStorage,\n        deps.domains.memorySettings,\n      )\n    : undefined;\n  if (transitionService && startCoordinator) {\n    deps.onFactoryRuntime?.({\n      transitionService,\n      ...(githubIntegration\n        ? {\n            prepareBinding: (input: FactoryBindingPreparationInput) =>\n              prepareFactoryRuleBinding(githubIntegration, startCoordinator, deps.domains.projects, input),\n          }\n        : {}),\n    });\n  }\n\n  return [\n    ...buildFsRoutes({\n      root: deps.fsRoot,\n      sessionFs: {\n        auth: deps.auth,\n        fleet: deps.fleet,\n        sessions: deps.sourceControlStorage.forIntegration('github').sessions,\n        filesystem: deps.domains.filesystem,\n      },\n    }),\n    ...new ConfigRoutes({\n      auth: deps.auth,\n      controller: deps.controller,\n      authStorage: deps.authStorage,\n      modelCredentials: deps.domains.modelCredentials,\n      modelPacks: deps.domains.modelPacks,\n      sourceControlSessions: deps.sourceControlStorage.forIntegration('github').sessions,\n      memorySettings: deps.domains.memorySettings,\n      customProviders: deps.domains.customProviders,\n      features: { knowledge: deps.knowledgeEnabled },\n      onCredentialsChanged: invalidateTenantCredentialSnapshots,\n      onCustomProvidersChanged: invalidateCustomProvidersSnapshots,\n    }).routes(),\n    ...new OAuthRoutes({\n      auth: deps.auth,\n      authStorage: deps.authStorage,\n      modelCredentials: deps.domains.modelCredentials,\n      onCredentialsChanged: invalidateTenantCredentialSnapshots,\n    }).routes(),\n    ...new SkillRoutes({\n      auth: deps.auth,\n      controllerId: deps.controllerId,\n      controller: deps.controller,\n      sourceControlStorage: githubStorage,\n      ensureSourceControlReady: githubRegistration?.ensureReady,\n    }).routes(),\n    ...integrationRoutes,\n    ...absentStubs,\n    ...slackAbsentStubs,\n    ...(deps.intakeReady\n      ? new IntakeRoutes({\n          auth: deps.auth,\n          audit: deps.audit,\n          intake: deps.domains.intake,\n          projects: deps.domains.projects,\n          integrations: (deps.integrations ?? []).flatMap(({ integration }) =>\n            integration.intake ? [{ id: integration.id, intake: integration.intake }] : [],\n          ),\n        }).routes()\n      : []),\n    ...(deps.factoryReady && deps.knowledgeEnabled\n      ? new KnowledgeRoutes({\n          auth: deps.auth,\n          projects: deps.domains.projects,\n          knowledge: async () => deps.factoryStorage?.getMastraStorage().getStore('knowledge'),\n        }).routes()\n      : []),\n    ...(deps.factoryReady\n      ? new WorkItemRoutes({\n          auth: deps.auth,\n          audit: deps.audit,\n          projects: deps.domains.projects,\n          workItems: deps.domains.workItems,\n          queueHealth: deps.domains.queueHealth,\n          transitionService,\n          startCoordinator,\n          liveSessions: new LiveSessions(deps.controller),\n        }).routes()\n      : []),\n  ];\n}\n"],"mappings":";;;;;;;;;;;;;;;;;AA+FA,SAAS,uBAAuB,EAC9B,aACA,OACA,aACA,UAC+D;CAC/D,IAAI,OAAO,OAAO;CAClB,OAAO,OAAO,KAAI,UAAS;EACzB,IAAI,aAAa,OAAO;GACtB,MAAM,UAAU,MAAM;GACtB,OAAO;IACL,GAAG;IACH,SAAS,OAAO,YAA2C;KACzD,IAAI;MACF,MAAM,YAAY;KACpB,QAAQ;MACN,OAAO,QAAQ,KACb;OAAE,OAAO;OAA2B,SAAS,GAAG,YAAY,GAAG;MAA8B,GAC7F,GACF;KACF;KACA,OAAO,QAAQ,SAAS,YAAY,CAAC,CAAC;IACxC;GACF;EACF;EAEA,MAAM,gBAAgB,MAAM;EAC5B,OAAO;GACL,GAAG;GACH,eAAe,OAAO,SAA8C;IAClE,MAAM,UAAU,MAAM,cAAc,IAAI;IACxC,OAAO,OAAO,YAA2C;KACvD,IAAI;MACF,MAAM,YAAY;KACpB,QAAQ;MACN,OAAO,QAAQ,KACb;OAAE,OAAO;OAA2B,SAAS,GAAG,YAAY,GAAG;MAA8B,GAC7F,GACF;KACF;KACA,OAAO,QAAQ,OAAO;IACxB;GACF;EACF;CACF,CAAC;AACH;AAEA,SAAgB,kBAAkB,MAAsD;CACtF,MAAM,WAAW,KAAK,YAAY,CAAC;CACnC,MAAM,cAAc,SAAS,qBAAqB,SAAS;CAC3D,IACE,KAAK,gBAAgB,kBAAkB,YACvC,KAAK,eAAe,SAAS,WAC7B,OAAO,gBAAgB,UAEvB,OAAO,iBAAiB;CAE1B,MAAM,oBAAoB,SAAS,2BAA2B,SAAS;CACvE,IACE,KAAK,gBAAgB,kBAAkB,YACvC,KAAK,eAAe,SAAS,kBAC7B,OAAO,sBAAsB,UAE7B,OAAO,cAAc;CAEvB,IAAI,KAAK,gBAAgB,kBAAkB,YAAY,OAAO,SAAS,eAAe,UACpF,OAAO,kBAAkB,SAAS,WAAW,YAAY;CAE3D,MAAM,IAAI,MAAM,iFAAiF;AACnG;;;;;;;;AASA,eAAsB,0BACpB,QACA,aACA,UACA,OACe;CACf,MAAM,SAAS,kBAAkB,MAAM,IAAI;CAC3C,MAAM,iBACJ,OAAO,MAAM,KAAK,UAAU,eAAe,WAAW,MAAM,KAAK,SAAS,aAAa,KAAA;CACzF,MAAM,kBAAkB,MAAM,2BAA2B;EACvD,eAAe,OAAO;EACtB,OAAO,MAAM,OAAO;EACpB,kBAAkB,MAAM,OAAO;EAC/B;EACA;CACF,CAAC;CACD,MAAM,mBAAmB,MAAM,KAAK,OAAO,WAAW,IAAI,MAAM,KAAK,OAAO,KAAK,KAAA;CACjF,IAAI,CAAC,mBAAmB,gBAAgB,GACtC,MAAM,IAAI,MAAM,8DAA8D;CAEhF,MAAM,YAAY,QAAQ;EACxB,OAAO,MAAM,OAAO;EACpB,QAAQ,gBAAgB;EACxB,kBAAkB,MAAM,OAAO;EAC/B,WAAW,gBAAgB;EAC3B,gBAAgB,MAAM,6BAA6B,UAAU,MAAM,OAAO,gBAAgB;EAC1F,aAAa,GAAG,MAAM,SAAS,WAAW,OAAO,QAAQ,IAAI,MAAM,KAAK;EACxE,YAAY,MAAM,OAAO;EACzB;EACA,UAAU;GACR,IAAI,MAAM,KAAK;GACf,MAAM,MAAM;GACZ,OAAO;IACL,gBAAgB,MAAM,KAAK;IAC3B,kBAAkB,MAAM,KAAK;IAC7B,OAAO,MAAM,KAAK;IAClB,QAAQ,CAAC,QAAQ;IACjB,UAAU,MAAM,KAAK;IACrB,UAAU,MAAM,KAAK;GACvB;EACF;CACF,CAAC;AACH;;;;;;;AAQA,SAAgB,wBACd,MAqBA,eACoB;CACpB,OAAO;EACL,MAAM,KAAK;EACX,OAAO,KAAK;EACZ,GAAI,KAAK,kBAAkB,EAAE,iBAAiB,KAAK,gBAAgB,IAAI,CAAC;EACxE,gBAAgB,KAAK;EACrB,SAAS,KAAK;EACd,YAAY,KAAK;EACjB,aAAa,KAAK;EAClB,SAAS;GACP,SAAS,KAAK,mBAAmB,eAAe,aAAa;GAC7D,eAAe,KAAK,qBAAqB,eAAe,aAAa;GACrE,GAAI,KAAK,uBACL,EAAE,oBAAoB,KAAK,qBAAqB,eAAe,KAAK,oBAAoB,EAAE,IAC1F,CAAC;GACL,UAAU,KAAK,QAAQ;GACvB,QAAQ,KAAK,QAAQ;GACrB,iBAAiB,KAAK,QAAQ;GAC9B,gBAAgB,KAAK,QAAQ;EAC/B;EACA,GAAI,KAAK,eAAe,EAAE,OAAO;GAAE,QAAQ,KAAK;GAAO,WAAW,KAAK,QAAQ;EAAU,EAAE,IAAI,CAAC;EAChG,GAAI,KAAK,YAAY,EAAE,OAAO,EAAE,WAAW,KAAK,UAAU,EAAE,IAAI,CAAC;CACnE;AACF;;;;;;;AAQA,SAAS,gCAAgC,MAA4B,IAAY,aAAa,OAAmB;CAC/G,IAAI,OAAO,UACT,OAAO,CACL,iBAAiB,sBAAsB;EACrC,QAAQ;EACR,cAAc;EACd,UAAS,MACP,EAAE,KAAK;GACL,SAAS;GACT,WAAW;GACX,eAAe,CAAC;GAChB,QAAQ;GACR,aAAa,4BAA4B;IACvC,QAAQ,KAAA;IACR,MAAM,KAAK;IACX,iBAAiB,KAAK,mBAAmB,KAAA;IACzC,aAAa,KAAK;IAClB,OAAO,KAAK;GACd,CAAC;EACH,CAAC;CACL,CAAC,CACH;CAEF,IAAI,OAAO,UACT,OAAO,CACL,iBAAiB,sBAAsB;EACrC,QAAQ;EACR,cAAc;EACd,UAAS,MACP,EAAE,KAAK;GACL,SAAS;GACT,WAAW;GACX,WAAW;GACX,QAAQ;GACR,aAAa;IACX,qBAAqB;IACrB,oBAAoB,KAAK,KAAK,QAAQ;IACtC,iBAAiB;GACnB;EACF,CAAC;CACL,CAAC,CACH;CAEF,OAAO,CAAC;AACV;;;;;;;;;;;;;AAcA,SAAS,mCAA+C;CACtD,OAAO,CACL,iBAAiB,yBAAyB;EACxC,QAAQ;EACR,cAAc;EACd,UAAS,MAAK,EAAE,KAAK;GAAE,UAAU,CAAC;GAAG,YAAY;GAAO,QAAQ;EAAiB,CAAC;CACpF,CAAC,CACH;AACF;;;;;;;;AASA,SAAgB,yBAAyB,MAAwC;CAC/E,MAAM,aAAkC,SAAQ,KAAK,MAAM,KAAK,IAAI;CACpE,MAAM,gBAAgB,KAAK,gBAAgB,CAAC;CAC5C,MAAM,qBAAqB,cAAc,MAAM,EAAE,kBAAkB,YAAY,OAAO,QAAQ;CAC9F,MAAM,gBAAgB,qBAAqB,KAAK,qBAAqB,eAAe,QAAQ,IAAI,KAAA;CAChG,MAAM,oBAAoB,oBAAoB;CAE9C,MAAM,oBAAoB,cAAc,SAAQ,iBAAgB;EAC9D,MAAM,EAAE,gBAAgB;EACxB,IAAI,CAAC,KAAK,aAAa,OAAO,gCAAgC,MAAM,YAAY,IAAI,IAAI;EACxF,MAAM,UAAU,wBACd;GACE,GAAG;GACH,aAAa,KAAK;GAClB;GACA,GAAI,qBAAqB,EAAE,sBAAsB,SAAS,IAAI,CAAC;EACjE,GACA,YAAY,EACd;EACA,OAAO,uBAAuB;GAAE,GAAG;GAAc,QAAQ,YAAY,OAAO,OAAO;EAAE,CAAC;CACxF,CAAC;CAED,MAAM,cAAc,CAAC,UAAU,QAAQ,CAAC,CACrC,QAAO,OAAM,CAAC,cAAc,MAAM,EAAE,kBAAkB,YAAY,OAAO,EAAE,CAAC,CAAC,CAC7E,SAAQ,OAAM,gCAAgC,MAAM,EAAE,CAAC;CAG1D,MAAM,mBAAmB,cAAc,MAAM,EAAE,kBAAkB,YAAY,OAAO,OAAO,IACvF,CAAC,IACD,iCAAiC;CAErC,MAAM,oBAAoB,KAAK,eAC1B,KAAK,4BACN,IAAI,yBAAyB;EAAE,OAAO,KAAK;EAAO,SAAS,KAAK,QAAQ;CAAU,CAAC,IACnF,KAAA;CACJ,MAAM,mBAAmB,oBACrB,IAAI,wBACF,KAAK,YACL,KAAK,QAAQ,WACb,mBACA,mBAAmB,sBACnB,KAAK,QAAQ,cACf,IACA,KAAA;CACJ,IAAI,qBAAqB,kBACvB,KAAK,mBAAmB;EACtB;EACA,GAAI,oBACA,EACE,iBAAiB,UACf,0BAA0B,mBAAmB,kBAAkB,KAAK,QAAQ,UAAU,KAAK,EAC/F,IACA,CAAC;CACP,CAAC;CAGH,OAAO;EACL,GAAG,cAAc;GACf,MAAM,KAAK;GACX,WAAW;IACT,MAAM,KAAK;IACX,OAAO,KAAK;IACZ,UAAU,KAAK,qBAAqB,eAAe,QAAQ,CAAC,CAAC;IAC7D,YAAY,KAAK,QAAQ;GAC3B;EACF,CAAC;EACD,GAAG,IAAI,aAAa;GAClB,MAAM,KAAK;GACX,YAAY,KAAK;GACjB,aAAa,KAAK;GAClB,kBAAkB,KAAK,QAAQ;GAC/B,YAAY,KAAK,QAAQ;GACzB,uBAAuB,KAAK,qBAAqB,eAAe,QAAQ,CAAC,CAAC;GAC1E,gBAAgB,KAAK,QAAQ;GAC7B,iBAAiB,KAAK,QAAQ;GAC9B,UAAU,EAAE,WAAW,KAAK,iBAAiB;GAC7C,sBAAsB;GACtB,0BAA0B;EAC5B,CAAC,CAAC,CAAC,OAAO;EACV,GAAG,IAAI,YAAY;GACjB,MAAM,KAAK;GACX,aAAa,KAAK;GAClB,kBAAkB,KAAK,QAAQ;GAC/B,sBAAsB;EACxB,CAAC,CAAC,CAAC,OAAO;EACV,GAAG,IAAI,YAAY;GACjB,MAAM,KAAK;GACX,cAAc,KAAK;GACnB,YAAY,KAAK;GACjB,sBAAsB;GACtB,0BAA0B,oBAAoB;EAChD,CAAC,CAAC,CAAC,OAAO;EACV,GAAG;EACH,GAAG;EACH,GAAG;EACH,GAAI,KAAK,cACL,IAAI,aAAa;GACf,MAAM,KAAK;GACX,OAAO,KAAK;GACZ,QAAQ,KAAK,QAAQ;GACrB,UAAU,KAAK,QAAQ;GACvB,eAAe,KAAK,gBAAgB,CAAC,EAAA,CAAG,SAAS,EAAE,kBACjD,YAAY,SAAS,CAAC;IAAE,IAAI,YAAY;IAAI,QAAQ,YAAY;GAAO,CAAC,IAAI,CAAC,CAC/E;EACF,CAAC,CAAC,CAAC,OAAO,IACV,CAAC;EACL,GAAI,KAAK,gBAAgB,KAAK,mBAC1B,IAAI,gBAAgB;GAClB,MAAM,KAAK;GACX,UAAU,KAAK,QAAQ;GACvB,WAAW,YAAY,KAAK,gBAAgB,iBAAiB,CAAC,CAAC,SAAS,WAAW;EACrF,CAAC,CAAC,CAAC,OAAO,IACV,CAAC;EACL,GAAI,KAAK,eACL,IAAI,eAAe;GACjB,MAAM,KAAK;GACX,OAAO,KAAK;GACZ,UAAU,KAAK,QAAQ;GACvB,WAAW,KAAK,QAAQ;GACxB,aAAa,KAAK,QAAQ;GAC1B;GACA;GACA,cAAc,IAAI,aAAa,KAAK,UAAU;EAChD,CAAC,CAAC,CAAC,OAAO,IACV,CAAC;CACP;AACF"}

package/dist/routes/work-items.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"work-items.d.ts","sourceRoot":"","sources":["../../src/routes/work-items.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAIpD,OAAO,KAAK,EACV,uBAAuB,EAGxB,MAAM,+BAA+B,CAAC;AAEvC,OAAO,KAAK,EAA4B,wBAAwB,EAAE,MAAM,gCAAgC,CAAC;AAGzG,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oCAAoC,CAAC;AACvE,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAClF,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,yCAAyC,CAAC;AAElF,OAAO,KAAK,EACV,mBAAmB,EAInB,mBAAmB,EAKnB,gBAAgB,EACjB,MAAM,uCAAuC,CAAC;AAG/C,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AACpD,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAEnC,MAAM,WAAW,kBAAmB,SAAQ,iBAAiB;IAC3D,KAAK,EAAE,YAAY,CAAC;IACpB,yFAAyF;IACzF,QAAQ,EAAE,sBAAsB,CAAC;IACjC,kDAAkD;IAClD,SAAS,EAAE,gBAAgB,CAAC;IAC5B,iDAAiD;IACjD,WAAW,EAAE,kBAAkB,CAAC;IAChC,sEAAsE;IACtE,iBAAiB,CAAC,EAAE,IAAI,CAAC,wBAAwB,EAAE,YAAY,GAAG,gBAAgB,CAAC,CAAC;IACpF,2EAA2E;IAC3E,gBAAgB,CAAC,EAAE,IAAI,CAAC,uBAAuB,EAAE,SAAS,CAAC,CAAC;IAC5D,wFAAwF;IACxF,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC;CAC/C;AAgFD,mEAAmE;AACnE,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,OAAO,GAAG,mBAAmB,GAAG,IAAI,CAuB7E;AAED,kEAAkE;AAClE,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,OAAO,GAAG,mBAAmB,GAAG,IAAI,CA4B7E;AA2LD,qBAAa,cAAe,SAAQ,KAAK,CAAC,kBAAkB,CAAC;;IAoJ3D,gEAAgE;IAChE,MAAM,IAAI,QAAQ,EAAE;CA0WrB"}
+{"version":3,"file":"work-items.d.ts","sourceRoot":"","sources":["../../src/routes/work-items.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAIpD,OAAO,KAAK,EACV,uBAAuB,EAGxB,MAAM,+BAA+B,CAAC;AAEvC,OAAO,KAAK,EAA4B,wBAAwB,EAAE,MAAM,gCAAgC,CAAC;AAGzG,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oCAAoC,CAAC;AACvE,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAClF,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,yCAAyC,CAAC;AAElF,OAAO,KAAK,EACV,mBAAmB,EAInB,mBAAmB,EAKnB,gBAAgB,EACjB,MAAM,uCAAuC,CAAC;AAG/C,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AACpD,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAEnC,MAAM,WAAW,kBAAmB,SAAQ,iBAAiB;IAC3D,KAAK,EAAE,YAAY,CAAC;IACpB,yFAAyF;IACzF,QAAQ,EAAE,sBAAsB,CAAC;IACjC,kDAAkD;IAClD,SAAS,EAAE,gBAAgB,CAAC;IAC5B,iDAAiD;IACjD,WAAW,EAAE,kBAAkB,CAAC;IAChC,sEAAsE;IACtE,iBAAiB,CAAC,EAAE,IAAI,CAAC,wBAAwB,EAAE,YAAY,GAAG,gBAAgB,CAAC,CAAC;IACpF,2EAA2E;IAC3E,gBAAgB,CAAC,EAAE,IAAI,CAAC,uBAAuB,EAAE,SAAS,CAAC,CAAC;IAC5D,wFAAwF;IACxF,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC;CAC/C;AAgFD,mEAAmE;AACnE,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,OAAO,GAAG,mBAAmB,GAAG,IAAI,CAuB7E;AAED,kEAAkE;AAClE,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,OAAO,GAAG,mBAAmB,GAAG,IAAI,CA4B7E;AA2LD,qBAAa,cAAe,SAAQ,KAAK,CAAC,kBAAkB,CAAC;;IAwJ3D,gEAAgE;IAChE,MAAM,IAAI,QAAQ,EAAE;CA+WrB"}

package/dist/routes/work-items.js

@@ -359,7 +359,8 @@ var WorkItemRoutes = class extends Route {
 				const decisionId = context.req.param("decisionId");
 				if (!decisionId || !UUID_RE.test(decisionId)) return c.json({ error: "invalid_decision_id" }, 422);
 				await workItems.ensureReady();
-				const decision = await settle(resolved.orgId, resolved.factoryProjectId, decisionId, /* @__PURE__ */ new Date());
+				const now = /* @__PURE__ */ new Date();
+				const decision = await settle(resolved.orgId, resolved.factoryProjectId, decisionId, now);
 				if (!decision) return c.json({ error: "decision_not_proposed" }, 409);
 				await audit.emit({
 					context,
@@ -642,6 +643,7 @@ var WorkItemRoutes = class extends Route {
 					if (!input) return c.json({ error: "invalid_factory_start" }, 400);
 					input.requestContext = loose(c).get("requestContext");
 					input.defaultModelId = resolved.defaultModelId ?? void 0;
+					input.armAutonomy = true;
 					if (!input.workItem.id && ((input.workItem.input.stages ?? ["intake"]).length !== 1 || (input.workItem.input.stages ?? ["intake"])[0] !== "intake")) return c.json({
 						error: "governed_transition_required",
 						message: "Create the work item in Intake before starting it."