@shipfox/api-integration-core-dto 2.0.0

package/.turbo/turbo-build.log

@@ -0,0 +1,2 @@
+$ shipfox-swc
+Successfully compiled: 9 files with swc (42.59ms)

package/.turbo/turbo-type$colon$emit.log

@@ -0,0 +1 @@
+$ shipfox-tsc-emit

package/.turbo/turbo-type.log

@@ -0,0 +1 @@
+$ shipfox-tsc-check

package/CHANGELOG.md

@@ -0,0 +1,70 @@
+# @shipfox/api-integration-core-dto
+
+## 2.0.0
+
+### Minor Changes
+
+- 1b0d344: Publishes the complete API runtime closure with packed-consumer-safe internal imports and records its exact package set in application releases.
+
+## 0.1.0
+
+### Minor Changes
+
+- 115655e: Moves source-event translation to the integration module: source-control providers emit a typed, provider-agnostic `INTEGRATION_SOURCE_COMMIT_PUSHED` event via one transactional publisher, projects subscribes to it instead of decoding GitHub payloads, and branch-deletion pushes are dropped at the source.
+- b8e49ff: Add the client-side Sentry install/connect flow and a workspace settings
+  integrations hub.
+  - `@shipfox/client-integrations`: shared `IntegrationGallerySection` (capability
+    filter, lifecycle pills, "Added" date, external link, connected-first
+    ordering, degraded status mode), shared `RedirectInstallPage` powering the
+    GitHub and new Sentry install pages, `SentryCallbackPage` with an explicit
+    workspace confirm (sessionStorage only pre-selects), two-tier retry, and the
+    Sentry hooks (`useCreateSentryInstallMutation`, `connectSentry`,
+    `useIntegrationConnectionsQuery`).
+  - `@shipfox/client-workspace-settings`: new `/workspaces/$wid/settings/integrations`
+    page and an Integrations entry in the settings nav.
+  - `@shipfox/client-router`: routes for the Sentry install page, the root-level
+    Sentry callback, and the settings integrations page.
+  - `@shipfox/react-ui`: `sentry` icon (monochrome, theme-aware).
+  - `@shipfox/api-integration-core-dto`: optional `external_url` on the connection
+    DTO and an optional `connectionExternalUrl` method on `IntegrationProvider`.
+  - `@shipfox/api-integration-core`: `GET /integration-connections` now returns
+    connections of every lifecycle status (the active-only filter prevented
+    clients from surfacing disabled/error state) and resolves `external_url`
+    per connection best-effort.
+  - `@shipfox/api-integration-sentry` / `@shipfox/api-integration-github`:
+    implement `connectionExternalUrl` (Sentry org URL via a new
+    by-connection-id installation lookup; GitHub installation settings URL).
+
+- d6d4862: Add a Sentry integration provider that ingests issue webhooks.
+  - New `@shipfox/api-integration-sentry` + `-sentry-dto` packages: a webhook
+    receiver that verifies the HMAC-SHA256 signature (keyed with the app client
+    secret), dedups on `Request-ID`, normalizes the issue payload, and publishes
+    `integrations.event.received` with `source: 'sentry'` and `event:
+issue.<action>`. A raw `ignored` action is normalized to `archived`. Malformed,
+    bad-JSON, unknown-action, and unknown-resource deliveries are recorded-and-dropped
+    with a 204 (deliberate deviation from GitHub's 400 to avoid Sentry disabling the
+    webhook).
+  - `@shipfox/api-integration-core-dto`: add the `SentryIssuePayload` contract.
+  - `@shipfox/api-integration-core`: register the Sentry provider behind
+    `INTEGRATIONS_ENABLE_SENTRY_PROVIDER`, add the
+    `updateIntegrationConnectionLifecycleStatus` helper, and pin stable
+    migration-tracking table names per provider database.
+  - `@shipfox/node-fastify`: add the shared `rawBodyPlugin` and `WEBHOOK_BODY_LIMIT`
+    exports for webhook receivers.
+  - `@shipfox/node-module`: add an optional `migrationsTableName` to `ModuleDatabase`
+    so conditionally-composed databases get a position-independent migration table.
+  - `@shipfox/api-integration-github`: consume the shared `rawBodyPlugin` instead of
+    a local copy (internal refactor, no behavior change).
+
+  Deploy note: environments with GitHub enabled must rename the existing
+  `__drizzle_migrations_integrations_1` table to
+  `__drizzle_migrations_integrations_github` as part of this release, or GitHub
+  migrations re-run against existing tables.
+
+### Patch Changes
+
+- ce062a9: Validates authored agent step integrations against provider tool catalogs and workspace connection capabilities.
+- f3614ae: Add `createCheckoutSpec()` to the integration source-control service and the GitHub provider. GitHub mints a short-lived, repo-scoped installation access token and returns it as structured `CheckoutCredentials` alongside a clean `repositoryUrl`; the secret is never embedded in the URL. `ref` defaults to the repository default branch, providers without checkout support raise a typed `IntegrationCheckoutUnsupportedError`, and a `redactCheckoutSpec()` helper masks the token for logging. Dormant until the checkout-token endpoint and runner enrichment are wired in; no runtime behavior changes yet.
+- f8f339a: Add the `@shipfox/redact` package with shared credential-redaction helpers: `redactUrlCredentials` (scheme-agnostic free-text scrubber), `stripUrlCredentials` (structured single-URL stripper), `redactSecrets` (literal-secret scrubber), and the `REDACTION_PLACEHOLDER` constant. Move `redactCheckoutSpec` from `@shipfox/api-integration-core-dto` into `@shipfox/api-integration-core` so it can reuse the shared `stripUrlCredentials` without breaking the dto-only-dependency rule; its public export path (`@shipfox/api-integration-core`) is unchanged. No behavior change.
+- 01be723: Adds a shared GitHub installation token provider with broad REST minting, in-memory reuse, refresh-margin reminting, single-flight dedupe, and a missing-installation provider error reason.
+- 2933c33: Adds drain-boundary Zod validation for current outbox publisher event payloads.

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Shipfox
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/dist/contracts/index.d.ts

@@ -0,0 +1,3 @@
+export type { AgentToolCallInput, AgentToolCatalogEntry, AgentToolCatalogMethod, AgentToolJsonSchema, AgentToolSelectionCatalog, AgentToolSelector, AgentToolSelectorKind, AgentToolSensitivity, AgentToolSession, AgentToolsProvider, CheckoutCredentials, CheckoutPermissions, CheckoutSpec, CreateCheckoutSpecInput, FetchFileInput, FileEntry, FilePage, FileSnapshot, IntegrationCapability, IntegrationConnection, IntegrationConnectionLifecycleStatus, IntegrationProvider, IntegrationProviderAdapters, IntegrationProviderErrorReason, IntegrationProviderKind, ListFilesInput, ListRepositoriesInput, OpenAgentToolsSessionInput, RegisteredIntegrationProvider, RepositoryPage, RepositorySnapshot, RepositoryVisibility, ResolveRepositoryInput, SourceControlProvider, } from './integrations.js';
+export { buildProviderRepositoryId, IntegrationProviderError, MAX_REPOSITORY_FILE_BYTES, parseProviderRepositoryId, toIntegrationConnectionDto, } from './integrations.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/contracts/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/contracts/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,kBAAkB,EAClB,qBAAqB,EACrB,sBAAsB,EACtB,mBAAmB,EACnB,yBAAyB,EACzB,iBAAiB,EACjB,qBAAqB,EACrB,oBAAoB,EACpB,gBAAgB,EAChB,kBAAkB,EAClB,mBAAmB,EACnB,mBAAmB,EACnB,YAAY,EACZ,uBAAuB,EACvB,cAAc,EACd,SAAS,EACT,QAAQ,EACR,YAAY,EACZ,qBAAqB,EACrB,qBAAqB,EACrB,oCAAoC,EACpC,mBAAmB,EACnB,2BAA2B,EAC3B,8BAA8B,EAC9B,uBAAuB,EACvB,cAAc,EACd,qBAAqB,EACrB,0BAA0B,EAC1B,6BAA6B,EAC7B,cAAc,EACd,kBAAkB,EAClB,oBAAoB,EACpB,sBAAsB,EACtB,qBAAqB,GACtB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,yBAAyB,EACzB,wBAAwB,EACxB,yBAAyB,EACzB,yBAAyB,EACzB,0BAA0B,GAC3B,MAAM,mBAAmB,CAAC"}

package/dist/contracts/index.js

@@ -0,0 +1,3 @@
+export { buildProviderRepositoryId, IntegrationProviderError, MAX_REPOSITORY_FILE_BYTES, parseProviderRepositoryId, toIntegrationConnectionDto } from './integrations.js';
+
+//# sourceMappingURL=index.js.map

package/dist/contracts/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/contracts/index.ts"],"sourcesContent":["export type {\n  AgentToolCallInput,\n  AgentToolCatalogEntry,\n  AgentToolCatalogMethod,\n  AgentToolJsonSchema,\n  AgentToolSelectionCatalog,\n  AgentToolSelector,\n  AgentToolSelectorKind,\n  AgentToolSensitivity,\n  AgentToolSession,\n  AgentToolsProvider,\n  CheckoutCredentials,\n  CheckoutPermissions,\n  CheckoutSpec,\n  CreateCheckoutSpecInput,\n  FetchFileInput,\n  FileEntry,\n  FilePage,\n  FileSnapshot,\n  IntegrationCapability,\n  IntegrationConnection,\n  IntegrationConnectionLifecycleStatus,\n  IntegrationProvider,\n  IntegrationProviderAdapters,\n  IntegrationProviderErrorReason,\n  IntegrationProviderKind,\n  ListFilesInput,\n  ListRepositoriesInput,\n  OpenAgentToolsSessionInput,\n  RegisteredIntegrationProvider,\n  RepositoryPage,\n  RepositorySnapshot,\n  RepositoryVisibility,\n  ResolveRepositoryInput,\n  SourceControlProvider,\n} from './integrations.js';\nexport {\n  buildProviderRepositoryId,\n  IntegrationProviderError,\n  MAX_REPOSITORY_FILE_BYTES,\n  parseProviderRepositoryId,\n  toIntegrationConnectionDto,\n} from './integrations.js';\n"],"names":["buildProviderRepositoryId","IntegrationProviderError","MAX_REPOSITORY_FILE_BYTES","parseProviderRepositoryId","toIntegrationConnectionDto"],"mappings":"AAoCA,SACEA,yBAAyB,EACzBC,wBAAwB,EACxBC,yBAAyB,EACzBC,yBAAyB,EACzBC,0BAA0B,QACrB,oBAAoB"}

package/dist/contracts/integrations.d.ts

@@ -0,0 +1,191 @@
+export type IntegrationProviderKind = string;
+export type IntegrationCapability = 'source_control' | 'agent_tools';
+export type IntegrationConnectionLifecycleStatus = 'active' | 'disabled' | 'error';
+export interface IntegrationConnection<ProviderKind extends IntegrationProviderKind = IntegrationProviderKind> {
+    id: string;
+    workspaceId: string;
+    provider: ProviderKind;
+    externalAccountId: string;
+    slug: string;
+    displayName: string;
+    lifecycleStatus: IntegrationConnectionLifecycleStatus;
+    createdAt: Date;
+    updatedAt: Date;
+}
+export type RepositoryVisibility = 'public' | 'private' | 'internal' | 'unknown';
+export interface RepositorySnapshot {
+    externalRepositoryId: string;
+    owner: string;
+    name: string;
+    fullName: string;
+    defaultBranch: string;
+    visibility: RepositoryVisibility;
+    cloneUrl: string;
+    htmlUrl: string;
+}
+export interface RepositoryPage {
+    repositories: RepositorySnapshot[];
+    nextCursor: string | null;
+}
+export interface ListRepositoriesInput<Connection extends IntegrationConnection = IntegrationConnection> {
+    connection: Connection;
+    limit: number;
+    cursor?: string | undefined;
+    search?: string | undefined;
+}
+export interface ResolveRepositoryInput<Connection extends IntegrationConnection = IntegrationConnection> {
+    connection: Connection;
+    externalRepositoryId: string;
+}
+export interface FileSnapshot {
+    path: string;
+    ref: string;
+    content: string;
+}
+export interface FileEntry {
+    path: string;
+    type: 'file';
+    size: number | null;
+}
+export interface FilePage {
+    files: FileEntry[];
+    nextCursor: string | null;
+}
+export interface ListFilesInput<Connection extends IntegrationConnection = IntegrationConnection> extends ResolveRepositoryInput<Connection> {
+    ref: string;
+    prefix: string;
+    limit: number;
+    cursor?: string | undefined;
+}
+export interface FetchFileInput<Connection extends IntegrationConnection = IntegrationConnection> extends ResolveRepositoryInput<Connection> {
+    ref: string;
+    path: string;
+}
+export interface CheckoutCredentials {
+    username: string;
+    token: string;
+    expiresAt: Date;
+}
+export interface CheckoutGitAuthor {
+    name: string;
+    email: string;
+}
+export interface CheckoutPermissions {
+    contents: 'read' | 'write';
+}
+export interface CheckoutSpec {
+    /**
+     * Clone URL that must never embed authentication material. Credentials live
+     * only in `credentials` so a redaction helper can mask them; a provider that
+     * embeds a token in this URL would bypass redaction and leak it into logs,
+     * `git remote -v`, and persisted job rows.
+     */
+    repositoryUrl: string;
+    ref: string;
+    credentials?: CheckoutCredentials | undefined;
+    gitAuthor?: CheckoutGitAuthor | undefined;
+}
+export interface CreateCheckoutSpecInput<Connection extends IntegrationConnection = IntegrationConnection> extends ResolveRepositoryInput<Connection> {
+    ref?: string | undefined;
+    permissions?: CheckoutPermissions | undefined;
+}
+export interface SourceControlProvider<Connection extends IntegrationConnection = IntegrationConnection> {
+    listRepositories(input: ListRepositoriesInput<Connection>): Promise<RepositoryPage>;
+    resolveRepository(input: ResolveRepositoryInput<Connection>): Promise<RepositorySnapshot>;
+    listFiles(input: ListFilesInput<Connection>): Promise<FilePage>;
+    fetchFile(input: FetchFileInput<Connection>): Promise<FileSnapshot>;
+    createCheckoutSpec?(input: CreateCheckoutSpecInput<Connection>): Promise<CheckoutSpec>;
+}
+export type AgentToolSensitivity = 'read' | 'write';
+export type AgentToolJsonSchema = Record<string, unknown>;
+export interface AgentToolCatalogMethod<RequiredScope = unknown> {
+    id: string;
+    description: string;
+    sensitivity: AgentToolSensitivity;
+    sensitive: boolean;
+    requiredScope: RequiredScope;
+}
+export interface AgentToolCatalogEntry<RequiredScope = unknown> {
+    id: string;
+    description: string;
+    sensitivity: AgentToolSensitivity;
+    sensitive: boolean;
+    requiredScope: RequiredScope;
+    inputSchema: AgentToolJsonSchema;
+    outputSchema?: AgentToolJsonSchema | undefined;
+    methods?: readonly AgentToolCatalogMethod<RequiredScope>[] | undefined;
+}
+export type AgentToolSelectorKind = 'family' | 'family_wildcard' | 'method' | 'standalone';
+export interface AgentToolSelector {
+    readonly token: string;
+    readonly kind: AgentToolSelectorKind;
+    readonly sensitivity: AgentToolSensitivity;
+    readonly sensitive: boolean;
+}
+export interface AgentToolSelectionCatalog {
+    readonly selectors: readonly AgentToolSelector[];
+}
+export interface AgentToolCallInput {
+    toolId: string;
+    arguments: Record<string, unknown>;
+}
+export interface AgentToolSession<CallResult = unknown> {
+    call(input: AgentToolCallInput): Promise<CallResult>;
+    close?(): Promise<void>;
+}
+export interface OpenAgentToolsSessionInput<Connection extends IntegrationConnection = IntegrationConnection, RequiredScope = unknown, ProviderScope = unknown> {
+    connection: Connection;
+    tools: readonly AgentToolCatalogEntry<RequiredScope>[];
+    scope: ProviderScope;
+}
+export interface AgentToolsProvider<Connection extends IntegrationConnection = IntegrationConnection, RequiredScope = unknown, ProviderScope = unknown, CallResult = unknown> {
+    catalog(): readonly AgentToolCatalogEntry<RequiredScope>[] | Promise<readonly AgentToolCatalogEntry<RequiredScope>[]>;
+    selectionCatalog(): AgentToolSelectionCatalog | Promise<AgentToolSelectionCatalog>;
+    openSession(input: OpenAgentToolsSessionInput<Connection, RequiredScope, ProviderScope>): Promise<AgentToolSession<CallResult>>;
+}
+export interface IntegrationProviderAdapters<Connection extends IntegrationConnection = IntegrationConnection> {
+    source_control?: SourceControlProvider<Connection> | undefined;
+    agent_tools?: AgentToolsProvider<Connection> | undefined;
+}
+export interface IntegrationProvider<ProviderKind extends IntegrationProviderKind = IntegrationProviderKind, Route = unknown, Connection extends IntegrationConnection<ProviderKind> = IntegrationConnection<ProviderKind>> {
+    provider: ProviderKind;
+    displayName: string;
+    adapters?: IntegrationProviderAdapters<Connection> | undefined;
+    routes?: Route[] | undefined;
+    /**
+     * Resolves the provider-side home of a connection (e.g. the Sentry org or the
+     * GitHub installation settings page). Returns undefined when the connection has
+     * no external home or the provider-side record is missing.
+     */
+    connectionExternalUrl?(connection: Connection): Promise<string | undefined>;
+}
+export interface RegisteredIntegrationProvider<ProviderKind extends IntegrationProviderKind = IntegrationProviderKind, Route = unknown, Connection extends IntegrationConnection<ProviderKind> = IntegrationConnection<ProviderKind>> extends IntegrationProvider<ProviderKind, Route, Connection> {
+    adapters: IntegrationProviderAdapters<Connection>;
+    capabilities: IntegrationCapability[];
+}
+export type IntegrationProviderErrorReason = 'repository-not-found' | 'installation-not-found' | 'file-not-found' | 'access-denied' | 'rate-limited' | 'timeout' | 'provider-unavailable' | 'malformed-provider-response' | 'content-too-large' | 'too-many-files';
+export declare class IntegrationProviderError extends Error {
+    readonly reason: IntegrationProviderErrorReason;
+    readonly retryAfterSeconds?: number | undefined;
+    constructor(reason: IntegrationProviderErrorReason, message: string, retryAfterSeconds?: number | undefined);
+}
+export declare const MAX_REPOSITORY_FILE_BYTES = 1000000;
+export declare function toIntegrationConnectionDto(connection: IntegrationConnection, options: {
+    capabilities: IntegrationCapability[];
+    externalUrl?: string | undefined;
+}): {
+    created_at: string;
+    updated_at: string;
+    external_url?: string;
+    id: string;
+    workspace_id: string;
+    provider: string;
+    external_account_id: string;
+    slug: string;
+    display_name: string;
+    lifecycle_status: IntegrationConnectionLifecycleStatus;
+    capabilities: IntegrationCapability[];
+};
+export declare function buildProviderRepositoryId(provider: IntegrationProviderKind, value: string): string;
+export declare function parseProviderRepositoryId(externalRepositoryId: string, expectedProvider: IntegrationProviderKind): string;
+//# sourceMappingURL=integrations.d.ts.map

package/dist/contracts/integrations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"integrations.d.ts","sourceRoot":"","sources":["../../src/contracts/integrations.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,uBAAuB,GAAG,MAAM,CAAC;AAC7C,MAAM,MAAM,qBAAqB,GAAG,gBAAgB,GAAG,aAAa,CAAC;AACrE,MAAM,MAAM,oCAAoC,GAAG,QAAQ,GAAG,UAAU,GAAG,OAAO,CAAC;AAEnF,MAAM,WAAW,qBAAqB,CACpC,YAAY,SAAS,uBAAuB,GAAG,uBAAuB;IAEtE,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,YAAY,CAAC;IACvB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,oCAAoC,CAAC;IACtD,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,IAAI,CAAC;CACjB;AAED,MAAM,MAAM,oBAAoB,GAAG,QAAQ,GAAG,SAAS,GAAG,UAAU,GAAG,SAAS,CAAC;AAEjF,MAAM,WAAW,kBAAkB;IACjC,oBAAoB,EAAE,MAAM,CAAC;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,oBAAoB,CAAC;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,cAAc;IAC7B,YAAY,EAAE,kBAAkB,EAAE,CAAC;IACnC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,MAAM,WAAW,qBAAqB,CACpC,UAAU,SAAS,qBAAqB,GAAG,qBAAqB;IAEhE,UAAU,EAAE,UAAU,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC7B;AAED,MAAM,WAAW,sBAAsB,CACrC,UAAU,SAAS,qBAAqB,GAAG,qBAAqB;IAEhE,UAAU,EAAE,UAAU,CAAC;IACvB,oBAAoB,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;CACrB;AAED,MAAM,WAAW,QAAQ;IACvB,KAAK,EAAE,SAAS,EAAE,CAAC;IACnB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,MAAM,WAAW,cAAc,CAAC,UAAU,SAAS,qBAAqB,GAAG,qBAAqB,CAC9F,SAAQ,sBAAsB,CAAC,UAAU,CAAC;IAC1C,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC7B;AAED,MAAM,WAAW,cAAc,CAAC,UAAU,SAAS,qBAAqB,GAAG,qBAAqB,CAC9F,SAAQ,sBAAsB,CAAC,UAAU,CAAC;IAC1C,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,IAAI,CAAC;CACjB;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC;CAC5B;AAED,MAAM,WAAW,YAAY;IAC3B;;;;;OAKG;IACH,aAAa,EAAE,MAAM,CAAC;IACtB,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,CAAC,EAAE,mBAAmB,GAAG,SAAS,CAAC;IAC9C,SAAS,CAAC,EAAE,iBAAiB,GAAG,SAAS,CAAC;CAC3C;AAED,MAAM,WAAW,uBAAuB,CACtC,UAAU,SAAS,qBAAqB,GAAG,qBAAqB,CAChE,SAAQ,sBAAsB,CAAC,UAAU,CAAC;IAC1C,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzB,WAAW,CAAC,EAAE,mBAAmB,GAAG,SAAS,CAAC;CAC/C;AAED,MAAM,WAAW,qBAAqB,CACpC,UAAU,SAAS,qBAAqB,GAAG,qBAAqB;IAEhE,gBAAgB,CAAC,KAAK,EAAE,qBAAqB,CAAC,UAAU,CAAC,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IACpF,iBAAiB,CAAC,KAAK,EAAE,sBAAsB,CAAC,UAAU,CAAC,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAC1F,SAAS,CAAC,KAAK,EAAE,cAAc,CAAC,UAAU,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAChE,SAAS,CAAC,KAAK,EAAE,cAAc,CAAC,UAAU,CAAC,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IACpE,kBAAkB,CAAC,CAAC,KAAK,EAAE,uBAAuB,CAAC,UAAU,CAAC,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;CACxF;AAED,MAAM,MAAM,oBAAoB,GAAG,MAAM,GAAG,OAAO,CAAC;AACpD,MAAM,MAAM,mBAAmB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAE1D,MAAM,WAAW,sBAAsB,CAAC,aAAa,GAAG,OAAO;IAC7D,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,oBAAoB,CAAC;IAClC,SAAS,EAAE,OAAO,CAAC;IACnB,aAAa,EAAE,aAAa,CAAC;CAC9B;AAED,MAAM,WAAW,qBAAqB,CAAC,aAAa,GAAG,OAAO;IAC5D,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,oBAAoB,CAAC;IAClC,SAAS,EAAE,OAAO,CAAC;IACnB,aAAa,EAAE,aAAa,CAAC;IAC7B,WAAW,EAAE,mBAAmB,CAAC;IACjC,YAAY,CAAC,EAAE,mBAAmB,GAAG,SAAS,CAAC;IAC/C,OAAO,CAAC,EAAE,SAAS,sBAAsB,CAAC,aAAa,CAAC,EAAE,GAAG,SAAS,CAAC;CACxE;AAED,MAAM,MAAM,qBAAqB,GAAG,QAAQ,GAAG,iBAAiB,GAAG,QAAQ,GAAG,YAAY,CAAC;AAE3F,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,qBAAqB,CAAC;IACrC,QAAQ,CAAC,WAAW,EAAE,oBAAoB,CAAC;IAC3C,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;CAC7B;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,SAAS,EAAE,SAAS,iBAAiB,EAAE,CAAC;CAClD;AAED,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,gBAAgB,CAAC,UAAU,GAAG,OAAO;IACpD,IAAI,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IACrD,KAAK,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACzB;AAED,MAAM,WAAW,0BAA0B,CACzC,UAAU,SAAS,qBAAqB,GAAG,qBAAqB,EAChE,aAAa,GAAG,OAAO,EACvB,aAAa,GAAG,OAAO;IAEvB,UAAU,EAAE,UAAU,CAAC;IACvB,KAAK,EAAE,SAAS,qBAAqB,CAAC,aAAa,CAAC,EAAE,CAAC;IACvD,KAAK,EAAE,aAAa,CAAC;CACtB;AAED,MAAM,WAAW,kBAAkB,CACjC,UAAU,SAAS,qBAAqB,GAAG,qBAAqB,EAChE,aAAa,GAAG,OAAO,EACvB,aAAa,GAAG,OAAO,EACvB,UAAU,GAAG,OAAO;IAEpB,OAAO,IACH,SAAS,qBAAqB,CAAC,aAAa,CAAC,EAAE,GAC/C,OAAO,CAAC,SAAS,qBAAqB,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;IAC7D,gBAAgB,IAAI,yBAAyB,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAAC;IACnF,WAAW,CACT,KAAK,EAAE,0BAA0B,CAAC,UAAU,EAAE,aAAa,EAAE,aAAa,CAAC,GAC1E,OAAO,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC,CAAC;CAC1C;AAED,MAAM,WAAW,2BAA2B,CAC1C,UAAU,SAAS,qBAAqB,GAAG,qBAAqB;IAEhE,cAAc,CAAC,EAAE,qBAAqB,CAAC,UAAU,CAAC,GAAG,SAAS,CAAC;IAC/D,WAAW,CAAC,EAAE,kBAAkB,CAAC,UAAU,CAAC,GAAG,SAAS,CAAC;CAC1D;AAED,MAAM,WAAW,mBAAmB,CAClC,YAAY,SAAS,uBAAuB,GAAG,uBAAuB,EACtE,KAAK,GAAG,OAAO,EACf,UAAU,SAAS,qBAAqB,CAAC,YAAY,CAAC,GAAG,qBAAqB,CAAC,YAAY,CAAC;IAE5F,QAAQ,EAAE,YAAY,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,2BAA2B,CAAC,UAAU,CAAC,GAAG,SAAS,CAAC;IAC/D,MAAM,CAAC,EAAE,KAAK,EAAE,GAAG,SAAS,CAAC;IAC7B;;;;OAIG;IACH,qBAAqB,CAAC,CAAC,UAAU,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;CAC7E;AAED,MAAM,WAAW,6BAA6B,CAC5C,YAAY,SAAS,uBAAuB,GAAG,uBAAuB,EACtE,KAAK,GAAG,OAAO,EACf,UAAU,SAAS,qBAAqB,CAAC,YAAY,CAAC,GAAG,qBAAqB,CAAC,YAAY,CAAC,CAC5F,SAAQ,mBAAmB,CAAC,YAAY,EAAE,KAAK,EAAE,UAAU,CAAC;IAC5D,QAAQ,EAAE,2BAA2B,CAAC,UAAU,CAAC,CAAC;IAClD,YAAY,EAAE,qBAAqB,EAAE,CAAC;CACvC;AAED,MAAM,MAAM,8BAA8B,GACtC,sBAAsB,GACtB,wBAAwB,GACxB,gBAAgB,GAChB,eAAe,GACf,cAAc,GACd,SAAS,GACT,sBAAsB,GACtB,6BAA6B,GAC7B,mBAAmB,GACnB,gBAAgB,CAAC;AAErB,qBAAa,wBAAyB,SAAQ,KAAK;aAE/B,MAAM,EAAE,8BAA8B;aAEtC,iBAAiB,CAAC,EAAE,MAAM,GAAG,SAAS;gBAFtC,MAAM,EAAE,8BAA8B,EACtD,OAAO,EAAE,MAAM,EACC,iBAAiB,CAAC,EAAE,MAAM,GAAG,SAAS;CAKzD;AAED,eAAO,MAAM,yBAAyB,UAAY,CAAC;AAEnD,wBAAgB,0BAA0B,CACxC,UAAU,EAAE,qBAAqB,EACjC,OAAO,EAAE;IACP,YAAY,EAAE,qBAAqB,EAAE,CAAC;IACtC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAClC;;;;;;;;;;;;EAeF;AAED,wBAAgB,yBAAyB,CACvC,QAAQ,EAAE,uBAAuB,EACjC,KAAK,EAAE,MAAM,GACZ,MAAM,CAER;AAED,wBAAgB,yBAAyB,CACvC,oBAAoB,EAAE,MAAM,EAC5B,gBAAgB,EAAE,uBAAuB,GACxC,MAAM,CAuBR"}

package/dist/contracts/integrations.js

@@ -0,0 +1,44 @@
+export class IntegrationProviderError extends Error {
+    constructor(reason, message, retryAfterSeconds){
+        super(message), this.reason = reason, this.retryAfterSeconds = retryAfterSeconds;
+        this.name = 'IntegrationProviderError';
+    }
+}
+export const MAX_REPOSITORY_FILE_BYTES = 1_000_000;
+export function toIntegrationConnectionDto(connection, options) {
+    return {
+        id: connection.id,
+        workspace_id: connection.workspaceId,
+        provider: connection.provider,
+        external_account_id: connection.externalAccountId,
+        slug: connection.slug,
+        display_name: connection.displayName,
+        lifecycle_status: connection.lifecycleStatus,
+        capabilities: options.capabilities,
+        ...options.externalUrl ? {
+            external_url: options.externalUrl
+        } : {},
+        created_at: connection.createdAt.toISOString(),
+        updated_at: connection.updatedAt.toISOString()
+    };
+}
+export function buildProviderRepositoryId(provider, value) {
+    return `${provider}:${value}`;
+}
+export function parseProviderRepositoryId(externalRepositoryId, expectedProvider) {
+    const separatorIndex = externalRepositoryId.indexOf(':');
+    if (separatorIndex <= 0) {
+        throw new IntegrationProviderError('repository-not-found', `External repository id is missing a provider prefix: ${externalRepositoryId}`);
+    }
+    const prefix = externalRepositoryId.slice(0, separatorIndex);
+    const value = externalRepositoryId.slice(separatorIndex + 1);
+    if (prefix !== expectedProvider) {
+        throw new IntegrationProviderError('repository-not-found', `External repository id ${externalRepositoryId} is not owned by provider ${expectedProvider}`);
+    }
+    if (!value) {
+        throw new IntegrationProviderError('repository-not-found', `External repository id ${externalRepositoryId} is missing a provider-owned value`);
+    }
+    return value;
+}
+
+//# sourceMappingURL=integrations.js.map

package/dist/contracts/integrations.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/contracts/integrations.ts"],"sourcesContent":["export type IntegrationProviderKind = string;\nexport type IntegrationCapability = 'source_control' | 'agent_tools';\nexport type IntegrationConnectionLifecycleStatus = 'active' | 'disabled' | 'error';\n\nexport interface IntegrationConnection<\n  ProviderKind extends IntegrationProviderKind = IntegrationProviderKind,\n> {\n  id: string;\n  workspaceId: string;\n  provider: ProviderKind;\n  externalAccountId: string;\n  slug: string;\n  displayName: string;\n  lifecycleStatus: IntegrationConnectionLifecycleStatus;\n  createdAt: Date;\n  updatedAt: Date;\n}\n\nexport type RepositoryVisibility = 'public' | 'private' | 'internal' | 'unknown';\n\nexport interface RepositorySnapshot {\n  externalRepositoryId: string;\n  owner: string;\n  name: string;\n  fullName: string;\n  defaultBranch: string;\n  visibility: RepositoryVisibility;\n  cloneUrl: string;\n  htmlUrl: string;\n}\n\nexport interface RepositoryPage {\n  repositories: RepositorySnapshot[];\n  nextCursor: string | null;\n}\n\nexport interface ListRepositoriesInput<\n  Connection extends IntegrationConnection = IntegrationConnection,\n> {\n  connection: Connection;\n  limit: number;\n  cursor?: string | undefined;\n  search?: string | undefined;\n}\n\nexport interface ResolveRepositoryInput<\n  Connection extends IntegrationConnection = IntegrationConnection,\n> {\n  connection: Connection;\n  externalRepositoryId: string;\n}\n\nexport interface FileSnapshot {\n  path: string;\n  ref: string;\n  content: string;\n}\n\nexport interface FileEntry {\n  path: string;\n  type: 'file';\n  size: number | null;\n}\n\nexport interface FilePage {\n  files: FileEntry[];\n  nextCursor: string | null;\n}\n\nexport interface ListFilesInput<Connection extends IntegrationConnection = IntegrationConnection>\n  extends ResolveRepositoryInput<Connection> {\n  ref: string;\n  prefix: string;\n  limit: number;\n  cursor?: string | undefined;\n}\n\nexport interface FetchFileInput<Connection extends IntegrationConnection = IntegrationConnection>\n  extends ResolveRepositoryInput<Connection> {\n  ref: string;\n  path: string;\n}\n\nexport interface CheckoutCredentials {\n  username: string;\n  token: string;\n  expiresAt: Date;\n}\n\nexport interface CheckoutGitAuthor {\n  name: string;\n  email: string;\n}\n\nexport interface CheckoutPermissions {\n  contents: 'read' | 'write';\n}\n\nexport interface CheckoutSpec {\n  /**\n   * Clone URL that must never embed authentication material. Credentials live\n   * only in `credentials` so a redaction helper can mask them; a provider that\n   * embeds a token in this URL would bypass redaction and leak it into logs,\n   * `git remote -v`, and persisted job rows.\n   */\n  repositoryUrl: string;\n  ref: string;\n  credentials?: CheckoutCredentials | undefined;\n  gitAuthor?: CheckoutGitAuthor | undefined;\n}\n\nexport interface CreateCheckoutSpecInput<\n  Connection extends IntegrationConnection = IntegrationConnection,\n> extends ResolveRepositoryInput<Connection> {\n  ref?: string | undefined;\n  permissions?: CheckoutPermissions | undefined;\n}\n\nexport interface SourceControlProvider<\n  Connection extends IntegrationConnection = IntegrationConnection,\n> {\n  listRepositories(input: ListRepositoriesInput<Connection>): Promise<RepositoryPage>;\n  resolveRepository(input: ResolveRepositoryInput<Connection>): Promise<RepositorySnapshot>;\n  listFiles(input: ListFilesInput<Connection>): Promise<FilePage>;\n  fetchFile(input: FetchFileInput<Connection>): Promise<FileSnapshot>;\n  createCheckoutSpec?(input: CreateCheckoutSpecInput<Connection>): Promise<CheckoutSpec>;\n}\n\nexport type AgentToolSensitivity = 'read' | 'write';\nexport type AgentToolJsonSchema = Record<string, unknown>;\n\nexport interface AgentToolCatalogMethod<RequiredScope = unknown> {\n  id: string;\n  description: string;\n  sensitivity: AgentToolSensitivity;\n  sensitive: boolean;\n  requiredScope: RequiredScope;\n}\n\nexport interface AgentToolCatalogEntry<RequiredScope = unknown> {\n  id: string;\n  description: string;\n  sensitivity: AgentToolSensitivity;\n  sensitive: boolean;\n  requiredScope: RequiredScope;\n  inputSchema: AgentToolJsonSchema;\n  outputSchema?: AgentToolJsonSchema | undefined;\n  methods?: readonly AgentToolCatalogMethod<RequiredScope>[] | undefined;\n}\n\nexport type AgentToolSelectorKind = 'family' | 'family_wildcard' | 'method' | 'standalone';\n\nexport interface AgentToolSelector {\n  readonly token: string;\n  readonly kind: AgentToolSelectorKind;\n  readonly sensitivity: AgentToolSensitivity;\n  readonly sensitive: boolean;\n}\n\nexport interface AgentToolSelectionCatalog {\n  readonly selectors: readonly AgentToolSelector[];\n}\n\nexport interface AgentToolCallInput {\n  toolId: string;\n  arguments: Record<string, unknown>;\n}\n\nexport interface AgentToolSession<CallResult = unknown> {\n  call(input: AgentToolCallInput): Promise<CallResult>;\n  close?(): Promise<void>;\n}\n\nexport interface OpenAgentToolsSessionInput<\n  Connection extends IntegrationConnection = IntegrationConnection,\n  RequiredScope = unknown,\n  ProviderScope = unknown,\n> {\n  connection: Connection;\n  tools: readonly AgentToolCatalogEntry<RequiredScope>[];\n  scope: ProviderScope;\n}\n\nexport interface AgentToolsProvider<\n  Connection extends IntegrationConnection = IntegrationConnection,\n  RequiredScope = unknown,\n  ProviderScope = unknown,\n  CallResult = unknown,\n> {\n  catalog():\n    | readonly AgentToolCatalogEntry<RequiredScope>[]\n    | Promise<readonly AgentToolCatalogEntry<RequiredScope>[]>;\n  selectionCatalog(): AgentToolSelectionCatalog | Promise<AgentToolSelectionCatalog>;\n  openSession(\n    input: OpenAgentToolsSessionInput<Connection, RequiredScope, ProviderScope>,\n  ): Promise<AgentToolSession<CallResult>>;\n}\n\nexport interface IntegrationProviderAdapters<\n  Connection extends IntegrationConnection = IntegrationConnection,\n> {\n  source_control?: SourceControlProvider<Connection> | undefined;\n  agent_tools?: AgentToolsProvider<Connection> | undefined;\n}\n\nexport interface IntegrationProvider<\n  ProviderKind extends IntegrationProviderKind = IntegrationProviderKind,\n  Route = unknown,\n  Connection extends IntegrationConnection<ProviderKind> = IntegrationConnection<ProviderKind>,\n> {\n  provider: ProviderKind;\n  displayName: string;\n  adapters?: IntegrationProviderAdapters<Connection> | undefined;\n  routes?: Route[] | undefined;\n  /**\n   * Resolves the provider-side home of a connection (e.g. the Sentry org or the\n   * GitHub installation settings page). Returns undefined when the connection has\n   * no external home or the provider-side record is missing.\n   */\n  connectionExternalUrl?(connection: Connection): Promise<string | undefined>;\n}\n\nexport interface RegisteredIntegrationProvider<\n  ProviderKind extends IntegrationProviderKind = IntegrationProviderKind,\n  Route = unknown,\n  Connection extends IntegrationConnection<ProviderKind> = IntegrationConnection<ProviderKind>,\n> extends IntegrationProvider<ProviderKind, Route, Connection> {\n  adapters: IntegrationProviderAdapters<Connection>;\n  capabilities: IntegrationCapability[];\n}\n\nexport type IntegrationProviderErrorReason =\n  | 'repository-not-found'\n  | 'installation-not-found'\n  | 'file-not-found'\n  | 'access-denied'\n  | 'rate-limited'\n  | 'timeout'\n  | 'provider-unavailable'\n  | 'malformed-provider-response'\n  | 'content-too-large'\n  | 'too-many-files';\n\nexport class IntegrationProviderError extends Error {\n  constructor(\n    public readonly reason: IntegrationProviderErrorReason,\n    message: string,\n    public readonly retryAfterSeconds?: number | undefined,\n  ) {\n    super(message);\n    this.name = 'IntegrationProviderError';\n  }\n}\n\nexport const MAX_REPOSITORY_FILE_BYTES = 1_000_000;\n\nexport function toIntegrationConnectionDto(\n  connection: IntegrationConnection,\n  options: {\n    capabilities: IntegrationCapability[];\n    externalUrl?: string | undefined;\n  },\n) {\n  return {\n    id: connection.id,\n    workspace_id: connection.workspaceId,\n    provider: connection.provider,\n    external_account_id: connection.externalAccountId,\n    slug: connection.slug,\n    display_name: connection.displayName,\n    lifecycle_status: connection.lifecycleStatus,\n    capabilities: options.capabilities,\n    ...(options.externalUrl ? {external_url: options.externalUrl} : {}),\n    created_at: connection.createdAt.toISOString(),\n    updated_at: connection.updatedAt.toISOString(),\n  };\n}\n\nexport function buildProviderRepositoryId(\n  provider: IntegrationProviderKind,\n  value: string,\n): string {\n  return `${provider}:${value}`;\n}\n\nexport function parseProviderRepositoryId(\n  externalRepositoryId: string,\n  expectedProvider: IntegrationProviderKind,\n): string {\n  const separatorIndex = externalRepositoryId.indexOf(':');\n  if (separatorIndex <= 0) {\n    throw new IntegrationProviderError(\n      'repository-not-found',\n      `External repository id is missing a provider prefix: ${externalRepositoryId}`,\n    );\n  }\n  const prefix = externalRepositoryId.slice(0, separatorIndex);\n  const value = externalRepositoryId.slice(separatorIndex + 1);\n  if (prefix !== expectedProvider) {\n    throw new IntegrationProviderError(\n      'repository-not-found',\n      `External repository id ${externalRepositoryId} is not owned by provider ${expectedProvider}`,\n    );\n  }\n  if (!value) {\n    throw new IntegrationProviderError(\n      'repository-not-found',\n      `External repository id ${externalRepositoryId} is missing a provider-owned value`,\n    );\n  }\n  return value;\n}\n"],"names":["IntegrationProviderError","Error","reason","message","retryAfterSeconds","name","MAX_REPOSITORY_FILE_BYTES","toIntegrationConnectionDto","connection","options","id","workspace_id","workspaceId","provider","external_account_id","externalAccountId","slug","display_name","displayName","lifecycle_status","lifecycleStatus","capabilities","externalUrl","external_url","created_at","createdAt","toISOString","updated_at","updatedAt","buildProviderRepositoryId","value","parseProviderRepositoryId","externalRepositoryId","expectedProvider","separatorIndex","indexOf","prefix","slice"],"mappings":"AAmPA,OAAO,MAAMA,iCAAiCC;IAC5C,YACE,AAAgBC,MAAsC,EACtDC,OAAe,EACf,AAAgBC,iBAAsC,CACtD;QACA,KAAK,CAACD,eAJUD,SAAAA,aAEAE,oBAAAA;QAGhB,IAAI,CAACC,IAAI,GAAG;IACd;AACF;AAEA,OAAO,MAAMC,4BAA4B,UAAU;AAEnD,OAAO,SAASC,2BACdC,UAAiC,EACjCC,OAGC;IAED,OAAO;QACLC,IAAIF,WAAWE,EAAE;QACjBC,cAAcH,WAAWI,WAAW;QACpCC,UAAUL,WAAWK,QAAQ;QAC7BC,qBAAqBN,WAAWO,iBAAiB;QACjDC,MAAMR,WAAWQ,IAAI;QACrBC,cAAcT,WAAWU,WAAW;QACpCC,kBAAkBX,WAAWY,eAAe;QAC5CC,cAAcZ,QAAQY,YAAY;QAClC,GAAIZ,QAAQa,WAAW,GAAG;YAACC,cAAcd,QAAQa,WAAW;QAAA,IAAI,CAAC,CAAC;QAClEE,YAAYhB,WAAWiB,SAAS,CAACC,WAAW;QAC5CC,YAAYnB,WAAWoB,SAAS,CAACF,WAAW;IAC9C;AACF;AAEA,OAAO,SAASG,0BACdhB,QAAiC,EACjCiB,KAAa;IAEb,OAAO,GAAGjB,SAAS,CAAC,EAAEiB,OAAO;AAC/B;AAEA,OAAO,SAASC,0BACdC,oBAA4B,EAC5BC,gBAAyC;IAEzC,MAAMC,iBAAiBF,qBAAqBG,OAAO,CAAC;IACpD,IAAID,kBAAkB,GAAG;QACvB,MAAM,IAAIlC,yBACR,wBACA,CAAC,qDAAqD,EAAEgC,sBAAsB;IAElF;IACA,MAAMI,SAASJ,qBAAqBK,KAAK,CAAC,GAAGH;IAC7C,MAAMJ,QAAQE,qBAAqBK,KAAK,CAACH,iBAAiB;IAC1D,IAAIE,WAAWH,kBAAkB;QAC/B,MAAM,IAAIjC,yBACR,wBACA,CAAC,uBAAuB,EAAEgC,qBAAqB,0BAA0B,EAAEC,kBAAkB;IAEjG;IACA,IAAI,CAACH,OAAO;QACV,MAAM,IAAI9B,yBACR,wBACA,CAAC,uBAAuB,EAAEgC,qBAAqB,kCAAkC,CAAC;IAEtF;IACA,OAAOF;AACT"}

package/dist/errors.d.ts

@@ -0,0 +1,4 @@
+export declare class ConnectionSlugConflictError extends Error {
+    constructor(cause: unknown);
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,qBAAa,2BAA4B,SAAQ,KAAK;gBACxC,KAAK,EAAE,OAAO;CAI3B"}

package/dist/errors.js

@@ -0,0 +1,10 @@
+export class ConnectionSlugConflictError extends Error {
+    constructor(cause){
+        super('Could not allocate a unique integration connection slug. Try again.', {
+            cause
+        });
+        this.name = 'ConnectionSlugConflictError';
+    }
+}
+
+//# sourceMappingURL=errors.js.map

package/dist/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/errors.ts"],"sourcesContent":["export class ConnectionSlugConflictError extends Error {\n  constructor(cause: unknown) {\n    super('Could not allocate a unique integration connection slug. Try again.', {cause});\n    this.name = 'ConnectionSlugConflictError';\n  }\n}\n"],"names":["ConnectionSlugConflictError","Error","cause","name"],"mappings":"AAAA,OAAO,MAAMA,oCAAoCC;IAC/C,YAAYC,KAAc,CAAE;QAC1B,KAAK,CAAC,uEAAuE;YAACA;QAAK;QACnF,IAAI,CAACC,IAAI,GAAG;IACd;AACF"}

package/dist/events.d.ts

@@ -0,0 +1,87 @@
+import { z } from 'zod';
+export declare const INTEGRATION_EVENT_RECEIVED: "integrations.event.received";
+export declare const integrationEventReceivedSchema: z.ZodObject<{
+    provider: z.ZodString;
+    source: z.ZodString;
+    event: z.ZodString;
+    workspaceId: z.ZodString;
+    connectionId: z.ZodString;
+    connectionName: z.ZodDefault<z.ZodOptional<z.ZodNullable<z.ZodString>>>;
+    deliveryId: z.ZodString;
+    receivedAt: z.ZodString;
+    payload: z.ZodCustom<unknown, unknown>;
+}, z.core.$strip>;
+export type IntegrationEventReceivedEvent = z.infer<typeof integrationEventReceivedSchema>;
+export declare const sourcePushSchema: z.ZodObject<{
+    externalRepositoryId: z.ZodString;
+    ref: z.ZodString;
+    headCommitSha: z.ZodString;
+    defaultBranch: z.ZodString;
+    isDefaultBranch: z.ZodBoolean;
+}, z.core.$strip>;
+export type SourcePushPayload = z.infer<typeof sourcePushSchema>;
+export declare const INTEGRATION_SOURCE_COMMIT_PUSHED: "integrations.source_control.commit_pushed";
+export declare const integrationSourceCommitPushedSchema: z.ZodObject<{
+    provider: z.ZodString;
+    workspaceId: z.ZodString;
+    connectionId: z.ZodString;
+    deliveryId: z.ZodString;
+    receivedAt: z.ZodString;
+    push: z.ZodObject<{
+        externalRepositoryId: z.ZodString;
+        ref: z.ZodString;
+        headCommitSha: z.ZodString;
+        defaultBranch: z.ZodString;
+        isDefaultBranch: z.ZodBoolean;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+export type IntegrationSourceCommitPushedEvent = z.infer<typeof integrationSourceCommitPushedSchema>;
+export interface SentryIssuePayload {
+    action: SentryIssueAction;
+    issueId: string;
+    shortId: string | null;
+    title: string;
+    culprit: string | null;
+    level: string | null;
+    status: string | null;
+    platform: string | null;
+    webUrl: string | null;
+    issueUrl: string | null;
+    projectUrl: string | null;
+    firstSeenAt: string | null;
+    lastSeenAt: string | null;
+}
+export declare const SENTRY_ISSUE_ACTIONS: readonly ["created", "resolved", "assigned", "archived", "unresolved"];
+export type SentryIssueAction = (typeof SENTRY_ISSUE_ACTIONS)[number];
+export interface IntegrationsEventMap {
+    [INTEGRATION_EVENT_RECEIVED]: IntegrationEventReceivedEvent;
+    [INTEGRATION_SOURCE_COMMIT_PUSHED]: IntegrationSourceCommitPushedEvent;
+}
+export declare const integrationsEventSchemas: {
+    "integrations.event.received": z.ZodObject<{
+        provider: z.ZodString;
+        source: z.ZodString;
+        event: z.ZodString;
+        workspaceId: z.ZodString;
+        connectionId: z.ZodString;
+        connectionName: z.ZodDefault<z.ZodOptional<z.ZodNullable<z.ZodString>>>;
+        deliveryId: z.ZodString;
+        receivedAt: z.ZodString;
+        payload: z.ZodCustom<unknown, unknown>;
+    }, z.core.$strip>;
+    "integrations.source_control.commit_pushed": z.ZodObject<{
+        provider: z.ZodString;
+        workspaceId: z.ZodString;
+        connectionId: z.ZodString;
+        deliveryId: z.ZodString;
+        receivedAt: z.ZodString;
+        push: z.ZodObject<{
+            externalRepositoryId: z.ZodString;
+            ref: z.ZodString;
+            headCommitSha: z.ZodString;
+            defaultBranch: z.ZodString;
+            isDefaultBranch: z.ZodBoolean;
+        }, z.core.$strip>;
+    }, z.core.$strip>;
+};
+//# sourceMappingURL=events.d.ts.map

package/dist/events.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"events.d.ts","sourceRoot":"","sources":["../src/events.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,CAAC,EAAC,MAAM,KAAK,CAAC;AAEtB,eAAO,MAAM,0BAA0B,EAAG,6BAAsC,CAAC;AAOjF,eAAO,MAAM,8BAA8B;;;;;;;;;;iBAYzC,CAAC;AACH,MAAM,MAAM,6BAA6B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AAI3F,eAAO,MAAM,gBAAgB;;;;;;iBAM3B,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAEjE,eAAO,MAAM,gCAAgC,EAC3C,2CAAoD,CAAC;AAKvD,eAAO,MAAM,mCAAmC;;;;;;;;;;;;;iBAO9C,CAAC;AACH,MAAM,MAAM,kCAAkC,GAAG,CAAC,CAAC,KAAK,CACtD,OAAO,mCAAmC,CAC3C,CAAC;AAEF,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,iBAAiB,CAAC;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAKD,eAAO,MAAM,oBAAoB,wEAMvB,CAAC;AAEX,MAAM,MAAM,iBAAiB,GAAG,CAAC,OAAO,oBAAoB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEtE,MAAM,WAAW,oBAAoB;IACnC,CAAC,0BAA0B,CAAC,EAAE,6BAA6B,CAAC;IAC5D,CAAC,gCAAgC,CAAC,EAAE,kCAAkC,CAAC;CACxE;AAED,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;CAGoB,CAAC"}

package/dist/events.js

@@ -0,0 +1,56 @@
+import { z } from 'zod';
+export const INTEGRATION_EVENT_RECEIVED = 'integrations.event.received';
+const nonEmptyStringSchema = z.string().nonempty();
+const isoDateTimeSchema = z.string().datetime();
+const requiredUnknownSchema = z.custom((value)=>value !== undefined);
+const nullableConnectionNameSchema = nonEmptyStringSchema.nullish().default(null);
+export const integrationEventReceivedSchema = z.object({
+    provider: nonEmptyStringSchema,
+    source: nonEmptyStringSchema,
+    event: nonEmptyStringSchema,
+    workspaceId: nonEmptyStringSchema,
+    connectionId: nonEmptyStringSchema,
+    // Denormalized so trigger consumers can render the connection name without a
+    // synchronous callback into the integrations module.
+    connectionName: nullableConnectionNameSchema,
+    deliveryId: nonEmptyStringSchema,
+    receivedAt: isoDateTimeSchema,
+    payload: requiredUnknownSchema
+});
+// A source-control push, normalized by the producing provider and carried by
+// `INTEGRATION_SOURCE_COMMIT_PUSHED` for domain consumers.
+export const sourcePushSchema = z.object({
+    externalRepositoryId: nonEmptyStringSchema,
+    ref: nonEmptyStringSchema,
+    headCommitSha: nonEmptyStringSchema,
+    defaultBranch: nonEmptyStringSchema,
+    isDefaultBranch: z.boolean()
+});
+export const INTEGRATION_SOURCE_COMMIT_PUSHED = 'integrations.source_control.commit_pushed';
+// Typed, provider-agnostic source-control event. The producing provider owns the
+// translation from its raw webhook into this shape, so domain consumers never decode
+// provider payloads. `isDefaultBranch` is a fact; the branch policy lives in the consumer.
+export const integrationSourceCommitPushedSchema = z.object({
+    provider: nonEmptyStringSchema,
+    workspaceId: nonEmptyStringSchema,
+    connectionId: nonEmptyStringSchema,
+    deliveryId: nonEmptyStringSchema,
+    receivedAt: isoDateTimeSchema,
+    push: sourcePushSchema
+});
+// Single source of truth for Sentry issue actions: the sentry-dto webhook schema
+// builds its z.enum from this tuple, so accepted webhook actions and the published
+// SentryIssuePayload contract cannot drift.
+export const SENTRY_ISSUE_ACTIONS = [
+    'created',
+    'resolved',
+    'assigned',
+    'archived',
+    'unresolved'
+];
+export const integrationsEventSchemas = {
+    [INTEGRATION_EVENT_RECEIVED]: integrationEventReceivedSchema,
+    [INTEGRATION_SOURCE_COMMIT_PUSHED]: integrationSourceCommitPushedSchema
+};
+
+//# sourceMappingURL=events.js.map

package/dist/events.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/events.ts"],"sourcesContent":["import {z} from 'zod';\n\nexport const INTEGRATION_EVENT_RECEIVED = 'integrations.event.received' as const;\n\nconst nonEmptyStringSchema = z.string().nonempty();\nconst isoDateTimeSchema = z.string().datetime();\nconst requiredUnknownSchema = z.custom<unknown>((value) => value !== undefined);\nconst nullableConnectionNameSchema = nonEmptyStringSchema.nullish().default(null);\n\nexport const integrationEventReceivedSchema = z.object({\n  provider: nonEmptyStringSchema,\n  source: nonEmptyStringSchema,\n  event: nonEmptyStringSchema,\n  workspaceId: nonEmptyStringSchema,\n  connectionId: nonEmptyStringSchema,\n  // Denormalized so trigger consumers can render the connection name without a\n  // synchronous callback into the integrations module.\n  connectionName: nullableConnectionNameSchema,\n  deliveryId: nonEmptyStringSchema,\n  receivedAt: isoDateTimeSchema,\n  payload: requiredUnknownSchema,\n});\nexport type IntegrationEventReceivedEvent = z.infer<typeof integrationEventReceivedSchema>;\n\n// A source-control push, normalized by the producing provider and carried by\n// `INTEGRATION_SOURCE_COMMIT_PUSHED` for domain consumers.\nexport const sourcePushSchema = z.object({\n  externalRepositoryId: nonEmptyStringSchema,\n  ref: nonEmptyStringSchema,\n  headCommitSha: nonEmptyStringSchema,\n  defaultBranch: nonEmptyStringSchema,\n  isDefaultBranch: z.boolean(),\n});\nexport type SourcePushPayload = z.infer<typeof sourcePushSchema>;\n\nexport const INTEGRATION_SOURCE_COMMIT_PUSHED =\n  'integrations.source_control.commit_pushed' as const;\n\n// Typed, provider-agnostic source-control event. The producing provider owns the\n// translation from its raw webhook into this shape, so domain consumers never decode\n// provider payloads. `isDefaultBranch` is a fact; the branch policy lives in the consumer.\nexport const integrationSourceCommitPushedSchema = z.object({\n  provider: nonEmptyStringSchema,\n  workspaceId: nonEmptyStringSchema,\n  connectionId: nonEmptyStringSchema,\n  deliveryId: nonEmptyStringSchema,\n  receivedAt: isoDateTimeSchema,\n  push: sourcePushSchema,\n});\nexport type IntegrationSourceCommitPushedEvent = z.infer<\n  typeof integrationSourceCommitPushedSchema\n>;\n\nexport interface SentryIssuePayload {\n  action: SentryIssueAction;\n  issueId: string;\n  shortId: string | null;\n  title: string;\n  culprit: string | null;\n  level: string | null;\n  status: string | null;\n  platform: string | null;\n  webUrl: string | null;\n  issueUrl: string | null;\n  projectUrl: string | null;\n  firstSeenAt: string | null;\n  lastSeenAt: string | null;\n}\n\n// Single source of truth for Sentry issue actions: the sentry-dto webhook schema\n// builds its z.enum from this tuple, so accepted webhook actions and the published\n// SentryIssuePayload contract cannot drift.\nexport const SENTRY_ISSUE_ACTIONS = [\n  'created',\n  'resolved',\n  'assigned',\n  'archived',\n  'unresolved',\n] as const;\n\nexport type SentryIssueAction = (typeof SENTRY_ISSUE_ACTIONS)[number];\n\nexport interface IntegrationsEventMap {\n  [INTEGRATION_EVENT_RECEIVED]: IntegrationEventReceivedEvent;\n  [INTEGRATION_SOURCE_COMMIT_PUSHED]: IntegrationSourceCommitPushedEvent;\n}\n\nexport const integrationsEventSchemas = {\n  [INTEGRATION_EVENT_RECEIVED]: integrationEventReceivedSchema,\n  [INTEGRATION_SOURCE_COMMIT_PUSHED]: integrationSourceCommitPushedSchema,\n} satisfies Record<keyof IntegrationsEventMap, z.ZodType>;\n"],"names":["z","INTEGRATION_EVENT_RECEIVED","nonEmptyStringSchema","string","nonempty","isoDateTimeSchema","datetime","requiredUnknownSchema","custom","value","undefined","nullableConnectionNameSchema","nullish","default","integrationEventReceivedSchema","object","provider","source","event","workspaceId","connectionId","connectionName","deliveryId","receivedAt","payload","sourcePushSchema","externalRepositoryId","ref","headCommitSha","defaultBranch","isDefaultBranch","boolean","INTEGRATION_SOURCE_COMMIT_PUSHED","integrationSourceCommitPushedSchema","push","SENTRY_ISSUE_ACTIONS","integrationsEventSchemas"],"mappings":"AAAA,SAAQA,CAAC,QAAO,MAAM;AAEtB,OAAO,MAAMC,6BAA6B,8BAAuC;AAEjF,MAAMC,uBAAuBF,EAAEG,MAAM,GAAGC,QAAQ;AAChD,MAAMC,oBAAoBL,EAAEG,MAAM,GAAGG,QAAQ;AAC7C,MAAMC,wBAAwBP,EAAEQ,MAAM,CAAU,CAACC,QAAUA,UAAUC;AACrE,MAAMC,+BAA+BT,qBAAqBU,OAAO,GAAGC,OAAO,CAAC;AAE5E,OAAO,MAAMC,iCAAiCd,EAAEe,MAAM,CAAC;IACrDC,UAAUd;IACVe,QAAQf;IACRgB,OAAOhB;IACPiB,aAAajB;IACbkB,cAAclB;IACd,6EAA6E;IAC7E,qDAAqD;IACrDmB,gBAAgBV;IAChBW,YAAYpB;IACZqB,YAAYlB;IACZmB,SAASjB;AACX,GAAG;AAGH,6EAA6E;AAC7E,2DAA2D;AAC3D,OAAO,MAAMkB,mBAAmBzB,EAAEe,MAAM,CAAC;IACvCW,sBAAsBxB;IACtByB,KAAKzB;IACL0B,eAAe1B;IACf2B,eAAe3B;IACf4B,iBAAiB9B,EAAE+B,OAAO;AAC5B,GAAG;AAGH,OAAO,MAAMC,mCACX,4CAAqD;AAEvD,iFAAiF;AACjF,qFAAqF;AACrF,2FAA2F;AAC3F,OAAO,MAAMC,sCAAsCjC,EAAEe,MAAM,CAAC;IAC1DC,UAAUd;IACViB,aAAajB;IACbkB,cAAclB;IACdoB,YAAYpB;IACZqB,YAAYlB;IACZ6B,MAAMT;AACR,GAAG;AAqBH,iFAAiF;AACjF,mFAAmF;AACnF,4CAA4C;AAC5C,OAAO,MAAMU,uBAAuB;IAClC;IACA;IACA;IACA;IACA;CACD,CAAU;AASX,OAAO,MAAMC,2BAA2B;IACtC,CAACnC,2BAA2B,EAAEa;IAC9B,CAACkB,iCAAiC,EAAEC;AACtC,EAA0D"}

package/dist/index.d.ts

@@ -0,0 +1,7 @@
+export * from '#contracts/index.js';
+export * from '#errors.js';
+export * from '#events.js';
+export * from '#ports.js';
+export * from '#schemas/index.js';
+export * from '#slug.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,qBAAqB,CAAC;AACpC,cAAc,YAAY,CAAC;AAC3B,cAAc,YAAY,CAAC;AAC3B,cAAc,WAAW,CAAC;AAC1B,cAAc,mBAAmB,CAAC;AAClC,cAAc,UAAU,CAAC"}

package/dist/index.js

@@ -0,0 +1,8 @@
+export * from '#contracts/index.js';
+export * from '#errors.js';
+export * from '#events.js';
+export * from '#ports.js';
+export * from '#schemas/index.js';
+export * from '#slug.js';
+
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts"],"sourcesContent":["export * from '#contracts/index.js';\nexport * from '#errors.js';\nexport * from '#events.js';\nexport * from '#ports.js';\nexport * from '#schemas/index.js';\nexport * from '#slug.js';\n"],"names":[],"mappings":"AAAA,cAAc,sBAAsB;AACpC,cAAc,aAAa;AAC3B,cAAc,aAAa;AAC3B,cAAc,YAAY;AAC1B,cAAc,oBAAoB;AAClC,cAAc,WAAW"}